@fkn/lib 0.9.32 → 0.9.34

package/cloud-DBNeXS9R.js

@@ -0,0 +1,272 @@
+import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
+import { X as t, _ as n, b as r, c as i, f as a, g as o, o as s, s as c, u as l } from "./lib-C3f3XmGZ.js";
+import { f as u, s as d, t as f } from "./hosts-C4-8lWwz.js";
+import { a as p, c as m, n as h, o as g } from "./api-BdTgLphT.js";
+import { t as _ } from "./busy-B189uX--.js";
+import { t as v } from "./proxy-fXckOcRn.js";
+import { frameFetchVerdict as y } from "./attach-policy.js";
+import { t as b } from "./dns.js";
+import { t as x } from "./cloud/fs.js";
+import { t as S } from "./net.js";
+import { t as C } from "./dgram.js";
+import { t as w } from "./http.js";
+import { expose as T } from "osra";
+//#region src/cloud/frame-broker.ts
+var E = async () => {
+	let e = () => g("frame consent");
+	try {
+		let t = await e();
+		return {
+			request: typeof t.frameConsent.request == "function" ? t.frameConsent.request : void 0,
+			ensure: t.frameConsent.ensure
+		};
+	} catch (t) {
+		if (!(t instanceof h)) throw t;
+		return {
+			request: void 0,
+			ensure: (t) => e().then((e) => e.frameConsent.ensure(t))
+		};
+	}
+}, D = "frame: this frame no longer holds the document the app attached it to", O = !1, k = () => {
+	O || (O = !0, console.warn("[fkn-frame] this FKN broker is too old to ask for permission categories, so nothing was asked for upfront and each capability is asked for as it is first used. Reloading the page picks up the current broker."));
+}, A = (e) => [...e].flatMap((e) => {
+	try {
+		return [new URL(e).hostname];
+	} catch {
+		return [];
+	}
+}), j = (e, t, n) => n === null ? `frame.${e}: the user did not grant ${t} here` : `frame.${e}: the user did not grant ${t} on ${n}`, M = (e) => {
+	let { assertLive: t, attach: n, current: a, declaredHosts: o, documentHost: l, ensure: p, request: m, session: h, approvedOrigins: g } = e, _ = /* @__PURE__ */ new Set(), v = async () => l ? await l() : (() => {
+		try {
+			return new URL(a()).hostname;
+		} catch {
+			return "";
+		}
+	})(), b = () => f([...o, ...A(g)]), x = async (e) => (await m([e]))[0] ?? !1;
+	return {
+		gate: async ({ operation: e, args: a, phase: s }) => {
+			t();
+			let l = u(e, a);
+			if (l === null) return;
+			let S = i(l);
+			if (S === void 0 || S === "auto") return;
+			if (e === "fetch") {
+				let e = y({
+					session: h,
+					declaredHosts: o,
+					approvedOrigins: g
+				}, s === "ensure" ? void 0 : a[0], { classifier: "fetchTarget" });
+				if (s === "ensure" && !h) throw r(e.kind === "refuse" ? e.reason : "", "fetch");
+				if (s !== "ensure" && e.kind === "refuse") throw r(e.reason, "fetch");
+				if (!m) {
+					if (e.kind === "refuse") throw r(e.reason, "fetch");
+					if (!await p({
+						scope: d(a[0], a[1]).scope,
+						hosts: e.promptHosts
+					})) throw r("frame.fetch: the user did not grant this", "fetch");
+					return;
+				}
+				let t = e.kind === "consent" ? e.targetHost : await v(), n = f([t, ...o]);
+				if (!n.length) throw r("frame: navigate the frame before fetch", "fetch");
+				if (await x({
+					category: "network",
+					hosts: n
+				}) === !1) throw r(j("fetch", "network", t || null), "fetch");
+				return;
+			}
+			let C = await v();
+			if (!C) throw r(`frame: navigate the frame before ${e}`, e);
+			if (!b().includes(C)) throw r(D, e);
+			if (!m) return;
+			let w = c(l);
+			if (w === void 0 || S === "critical" && _.has(`${l} ${C}`)) return;
+			let T = f([C, ...o]), E = await x(S === "critical" ? {
+				key: l,
+				hosts: T,
+				attach: n
+			} : {
+				category: w,
+				hosts: T
+			});
+			if (E === !1) throw r(j(e, w, null), e);
+			if (E === "once" && s !== "ensure") for (let e of T) _.add(`${l} ${e}`);
+		},
+		requestCategories: async (e) => {
+			t();
+			let r = await v(), a = f(r ? [r, ...o] : o);
+			if (!a.length) throw TypeError("frame.request: navigate the frame or declare domains first");
+			let c = e.map((e) => {
+				let t = e.key;
+				return {
+					named: t,
+					critical: t !== void 0 && i(t) === "critical",
+					category: e.category ?? (t === void 0 ? void 0 : s(t)) ?? "interaction"
+				};
+			}), l = ({ named: e, critical: t, category: n }, r) => ({
+				category: n,
+				...t ? { key: e } : {},
+				hosts: a,
+				allow: r
+			});
+			if (!m) return k(), c.map((e) => l(e, !1));
+			let u = await m(c.map(({ named: e, critical: t, category: r }) => t ? {
+				key: e,
+				hosts: a,
+				attach: n
+			} : {
+				category: r,
+				hosts: a
+			}));
+			return c.map((e, t) => l(e, u[t] !== void 0 && u[t] !== !1));
+		}
+	};
+}, N = (e) => e, P = "autoplay; fullscreen; encrypted-media; picture-in-picture; clipboard-read; clipboard-write", F = 2e4, I = 65e3, L = 3e4, R = 5e3, z = /* @__PURE__ */ new Set([]), B = () => "https://fkn.app", V = (e) => !e || e === "about:blank", H = (e) => e ? "" : `incognito-${crypto.randomUUID()}`, U = ({ target: e, session: t, domains: n, attach: r }) => {
+	let i = new URL("/attach-frame", B());
+	return e && i.searchParams.set("url", e), t && i.searchParams.set("session", t), n.length && i.searchParams.set("domains", n.join(",")), i.searchParams.set("attach", r), i.href;
+}, W = (e, t, n) => {
+	let r, i = new Promise((e, i) => {
+		r = setTimeout(() => i(Error(n)), t);
+	});
+	return Promise.race([e, i]).finally(() => clearTimeout(r));
+}, G = (e, t) => {
+	let n = () => {
+		a(), t();
+	}, r = e.parentNode, i = new MutationObserver(() => {
+		(!e.isConnected || e.parentNode !== r) && (a(), t());
+	}), a = () => {
+		window.removeEventListener("pagehide", n), i.disconnect();
+	};
+	window.addEventListener("pagehide", n, { once: !0 }), r && i.observe(r, { childList: !0 }), e.isConnected || (a(), t());
+}, K = () => Object.assign(/* @__PURE__ */ Error("cloud.attachFrame: the attached iframe left the document or was reloaded; attach a fresh iframe"), { name: o }), q = (e, t) => {
+	let n = [...e.split(";"), ...t.split(";")].map((e) => e.trim()).filter(Boolean);
+	return [...new Set(n)].join("; ");
+}, J = [
+	300,
+	1200,
+	4e3
+], Y = (e) => {
+	let t = () => {
+		if (!e.isConnected) return;
+		let t = e.style.height, n = e.getBoundingClientRect();
+		n.height && (e.style.height = `${n.height - 1}px`, setTimeout(() => {
+			e.style.height = t;
+		}, 50));
+	};
+	t();
+	for (let e of J) setTimeout(t, e);
+}, X = (e) => {
+	let t = e.getAttribute("sandbox");
+	if (t === null) return;
+	let n = new Set(t.toLowerCase().split(/\s+/).filter(Boolean)), r = ["allow-scripts", "allow-same-origin"].filter((e) => !n.has(e));
+	if (r.length) throw Error(`cloud.attachFrame: the iframe's sandbox attribute must include ${r.join(" and ")} for the render proxy to load`);
+}, Z = async ({ iframe: e, domains: r = [], syncCookies: i = !0, lockdown: o = !1, permissions: s }) => {
+	if (typeof window > "u") throw Error("cloud.attachFrame needs a window realm");
+	if (o) throw Error("cloud.attachFrame does not support lockdown; use the extension backend for a sealed frame");
+	if (!e.isConnected) throw Error("cloud.attachFrame: the iframe must be connected to the document before attaching");
+	X(e);
+	let c = e.getAttribute("src") ?? "", u = (() => {
+		if (V(c)) return null;
+		try {
+			return new URL(e.src || c, location.href);
+		} catch {
+			throw Error(`cloud.attachFrame: the iframe src is not a valid URL: ${c}`);
+		}
+	})();
+	if (u) {
+		let e = new URL("/attach-frame", B());
+		if (u.origin === e.origin && u.pathname === e.pathname) throw Error("cloud.attachFrame: this iframe is already attached; navigate with the Frame returned by that attach or use a fresh iframe");
+	}
+	let d = u?.href ?? "";
+	d && a(d);
+	let p = d, m = H(i), h = f(r), g = /* @__PURE__ */ new Set();
+	try {
+		g.add(new URL(d).origin);
+	} catch {}
+	let v = new AbortController(), y = e.referrerPolicy, b = e.allow, x = crypto.randomUUID();
+	if (e.referrerPolicy = "origin", e.allow = q(P, e.allow), e.src = U({
+		target: d,
+		session: m,
+		domains: h,
+		attach: x
+	}), !e.contentWindow) throw Error("cloud.attachFrame: the iframe window is not available");
+	try {
+		let r = await W(T({}, {
+			key: "fkn-attach-frame",
+			origin: B(),
+			transport: {
+				receive: window,
+				emit: e.contentWindow
+			},
+			unregisterSignal: v.signal,
+			revivableModules: N(t)
+		}), F, "cloud.attachFrame: timed out connecting to the render proxy page");
+		await W(r.ready(), I, "cloud.attachFrame: the render proxy never became ready"), d && Y(e), G(e, () => v.abort());
+		let i = _("attached frame");
+		v.signal.aborted ? i() : v.signal.addEventListener("abort", i, { once: !0 });
+		let a = e.contentWindow, o = () => {
+			if (!(!v.signal.aborted && e.isConnected && e.contentWindow === a)) throw v.abort(), K();
+		}, { gate: c, requestCategories: u } = M({
+			session: m,
+			declaredHosts: h,
+			approvedOrigins: g,
+			attach: x,
+			assertLive: o,
+			documentHost: typeof r.documentHost == "function" ? () => r.documentHost() : void 0,
+			current: () => p,
+			...await E()
+		}), f = l({
+			executor: {
+				execute: (e, t, i) => z.has(t) ? Promise.reject(n(t, "cloud")) : (o(), r.executeLocator(e, t, i)),
+				highlight: async () => {}
+			},
+			gate: c,
+			request: u,
+			goto: async (t, n = {}) => {
+				let i = new URL(t, location.href).href;
+				o();
+				let { timeoutMs: a } = n, s = (() => {
+					try {
+						return new URL(i).origin;
+					} catch {
+						return "";
+					}
+				})(), c = s !== "" && !g.has(s);
+				c && g.add(s);
+				try {
+					await W(r.goto(i, n), (a ?? L) + R, "cloud.attachFrame: the render proxy did not answer goto; the frame may have been detached or its page reloaded");
+				} catch (e) {
+					throw c && g.delete(s), e;
+				}
+				p = i, Y(e);
+			},
+			url: () => p
+		});
+		return s?.length && await f.request(s), f;
+	} catch (t) {
+		throw v.abort(), e.referrerPolicy = y, e.allow = b, e.src = d || "about:blank", t;
+	}
+}, ee = () => typeof window < "u" && !0, Q = async () => {
+	let e = await p.then((e) => e.cloud.quota());
+	return {
+		premium: e.premium,
+		overQuota: e.overQuota,
+		throttled: e.overQuota && !e.premium,
+		usedBytes: e.usedBytes,
+		limitBytes: e.limitBytes,
+		remainingBytes: e.remaining,
+		bytesPerSecond: e.bytesPerSecond,
+		bitsPerSecond: e.bytesPerSecond * 8
+	};
+}, te = /* @__PURE__ */ e({
+	attachFrame: () => Z,
+	available: () => $,
+	dgram: () => C,
+	dns: () => b,
+	fetch: () => v,
+	fs: () => x,
+	http: () => w,
+	net: () => S,
+	quota: () => Q
+}), $ = () => m;
+//#endregion
+export { ee as a, Z as i, te as n, Q as r, $ as t };

package/cloud-DHuqVKrl.cjs

@@ -0,0 +1 @@
+const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./lib-WiHTYaNP.cjs"),n=require("./hosts-DD4rDeQH.cjs"),r=require("./api-MW-Lm0u8.cjs"),i=require("./busy-Dv8wzE5M.cjs"),a=require("./proxy-_m6Sqcr6.cjs"),o=require("./attach-policy.cjs"),s=require("./dns.cjs"),c=require("./cloud/fs.cjs"),l=require("./net.cjs"),u=require("./dgram.cjs"),d=require("./http.cjs");let f=require("osra");var p=async()=>{let e=()=>r.o(`frame consent`);try{let t=await e();return{request:typeof t.frameConsent.request==`function`?t.frameConsent.request:void 0,ensure:t.frameConsent.ensure}}catch(t){if(!(t instanceof r.n))throw t;return{request:void 0,ensure:t=>e().then(e=>e.frameConsent.ensure(t))}}},m=`frame: this frame no longer holds the document the app attached it to`,h=!1,g=()=>{h||(h=!0,console.warn(`[fkn-frame] this FKN broker is too old to ask for permission categories, so nothing was asked for upfront and each capability is asked for as it is first used. Reloading the page picks up the current broker.`))},_=e=>[...e].flatMap(e=>{try{return[new URL(e).hostname]}catch{return[]}}),v=(e,t,n)=>n===null?`frame.${e}: the user did not grant ${t} here`:`frame.${e}: the user did not grant ${t} on ${n}`,y=e=>{let{assertLive:r,attach:i,current:a,declaredHosts:s,documentHost:c,ensure:l,request:u,session:d,approvedOrigins:f}=e,p=new Set,h=async()=>c?await c():(()=>{try{return new URL(a()).hostname}catch{return``}})(),y=()=>n.t([...s,..._(f)]),b=async e=>(await u([e]))[0]??!1;return{gate:async({operation:e,args:a,phase:c})=>{r();let g=n.f(e,a);if(g===null)return;let _=t.c(g);if(_===void 0||_===`auto`)return;if(e===`fetch`){let e=o.frameFetchVerdict({session:d,declaredHosts:s,approvedOrigins:f},c===`ensure`?void 0:a[0],{classifier:`fetchTarget`});if(c===`ensure`&&!d)throw t.b(e.kind===`refuse`?e.reason:``,`fetch`);if(c!==`ensure`&&e.kind===`refuse`)throw t.b(e.reason,`fetch`);if(!u){if(e.kind===`refuse`)throw t.b(e.reason,`fetch`);if(!await l({scope:n.s(a[0],a[1]).scope,hosts:e.promptHosts}))throw t.b(`frame.fetch: the user did not grant this`,`fetch`);return}let r=e.kind===`consent`?e.targetHost:await h(),i=n.t([r,...s]);if(!i.length)throw t.b(`frame: navigate the frame before fetch`,`fetch`);if(await b({category:`network`,hosts:i})===!1)throw t.b(v(`fetch`,`network`,r||null),`fetch`);return}let x=await h();if(!x)throw t.b(`frame: navigate the frame before ${e}`,e);if(!y().includes(x))throw t.b(m,e);if(!u)return;let S=t.s(g);if(S===void 0||_===`critical`&&p.has(`${g} ${x}`))return;let C=n.t([x,...s]),w=await b(_===`critical`?{key:g,hosts:C,attach:i}:{category:S,hosts:C});if(w===!1)throw t.b(v(e,S,null),e);if(w===`once`&&c!==`ensure`)for(let e of C)p.add(`${g} ${e}`)},requestCategories:async e=>{r();let a=await h(),o=n.t(a?[a,...s]:s);if(!o.length)throw TypeError(`frame.request: navigate the frame or declare domains first`);let c=e.map(e=>{let n=e.key;return{named:n,critical:n!==void 0&&t.c(n)===`critical`,category:e.category??(n===void 0?void 0:t.o(n))??`interaction`}}),l=({named:e,critical:t,category:n},r)=>({category:n,...t?{key:e}:{},hosts:o,allow:r});if(!u)return g(),c.map(e=>l(e,!1));let d=await u(c.map(({named:e,critical:t,category:n})=>t?{key:e,hosts:o,attach:i}:{category:n,hosts:o}));return c.map((e,t)=>l(e,d[t]!==void 0&&d[t]!==!1))}}},b=e=>e,x=`autoplay; fullscreen; encrypted-media; picture-in-picture; clipboard-read; clipboard-write`,S=2e4,C=65e3,w=3e4,T=5e3,E=new Set([]),D=()=>`https://fkn.app`,O=e=>!e||e===`about:blank`,k=e=>e?``:`incognito-${crypto.randomUUID()}`,A=({target:e,session:t,domains:n,attach:r})=>{let i=new URL(`/attach-frame`,D());return e&&i.searchParams.set(`url`,e),t&&i.searchParams.set(`session`,t),n.length&&i.searchParams.set(`domains`,n.join(`,`)),i.searchParams.set(`attach`,r),i.href},j=(e,t,n)=>{let r,i=new Promise((e,i)=>{r=setTimeout(()=>i(Error(n)),t)});return Promise.race([e,i]).finally(()=>clearTimeout(r))},M=(e,t)=>{let n=()=>{a(),t()},r=e.parentNode,i=new MutationObserver(()=>{(!e.isConnected||e.parentNode!==r)&&(a(),t())}),a=()=>{window.removeEventListener(`pagehide`,n),i.disconnect()};window.addEventListener(`pagehide`,n,{once:!0}),r&&i.observe(r,{childList:!0}),e.isConnected||(a(),t())},N=()=>Object.assign(Error(`cloud.attachFrame: the attached iframe left the document or was reloaded; attach a fresh iframe`),{name:t.g}),P=(e,t)=>{let n=[...e.split(`;`),...t.split(`;`)].map(e=>e.trim()).filter(Boolean);return[...new Set(n)].join(`; `)},F=[300,1200,4e3],I=e=>{let t=()=>{if(!e.isConnected)return;let t=e.style.height,n=e.getBoundingClientRect();n.height&&(e.style.height=`${n.height-1}px`,setTimeout(()=>{e.style.height=t},50))};t();for(let e of F)setTimeout(t,e)},L=e=>{let t=e.getAttribute(`sandbox`);if(t===null)return;let n=new Set(t.toLowerCase().split(/\s+/).filter(Boolean)),r=[`allow-scripts`,`allow-same-origin`].filter(e=>!n.has(e));if(r.length)throw Error(`cloud.attachFrame: the iframe's sandbox attribute must include ${r.join(` and `)} for the render proxy to load`)},R=async({iframe:e,domains:r=[],syncCookies:a=!0,lockdown:o=!1,permissions:s})=>{if(typeof window>`u`)throw Error(`cloud.attachFrame needs a window realm`);if(o)throw Error(`cloud.attachFrame does not support lockdown; use the extension backend for a sealed frame`);if(!e.isConnected)throw Error(`cloud.attachFrame: the iframe must be connected to the document before attaching`);L(e);let c=e.getAttribute(`src`)??``,l=(()=>{if(O(c))return null;try{return new URL(e.src||c,location.href)}catch{throw Error(`cloud.attachFrame: the iframe src is not a valid URL: ${c}`)}})();if(l){let e=new URL(`/attach-frame`,D());if(l.origin===e.origin&&l.pathname===e.pathname)throw Error(`cloud.attachFrame: this iframe is already attached; navigate with the Frame returned by that attach or use a fresh iframe`)}let u=l?.href??``;u&&t.f(u);let d=u,m=k(a),h=n.t(r),g=new Set;try{g.add(new URL(u).origin)}catch{}let _=new AbortController,v=e.referrerPolicy,F=e.allow,R=crypto.randomUUID();if(e.referrerPolicy=`origin`,e.allow=P(x,e.allow),e.src=A({target:u,session:m,domains:h,attach:R}),!e.contentWindow)throw Error(`cloud.attachFrame: the iframe window is not available`);try{let n=await j((0,f.expose)({},{key:`fkn-attach-frame`,origin:D(),transport:{receive:window,emit:e.contentWindow},unregisterSignal:_.signal,revivableModules:b(t.X)}),S,`cloud.attachFrame: timed out connecting to the render proxy page`);await j(n.ready(),C,`cloud.attachFrame: the render proxy never became ready`),u&&I(e),M(e,()=>_.abort());let r=i.t(`attached frame`);_.signal.aborted?r():_.signal.addEventListener(`abort`,r,{once:!0});let a=e.contentWindow,o=()=>{if(!(!_.signal.aborted&&e.isConnected&&e.contentWindow===a))throw _.abort(),N()},{gate:c,requestCategories:l}=y({session:m,declaredHosts:h,approvedOrigins:g,attach:R,assertLive:o,documentHost:typeof n.documentHost==`function`?()=>n.documentHost():void 0,current:()=>d,...await p()}),v=t.u({executor:{execute:(e,r,i)=>E.has(r)?Promise.reject(t._(r,`cloud`)):(o(),n.executeLocator(e,r,i)),highlight:async()=>{}},gate:c,request:l,goto:async(t,r={})=>{let i=new URL(t,location.href).href;o();let{timeoutMs:a}=r,s=(()=>{try{return new URL(i).origin}catch{return``}})(),c=s!==``&&!g.has(s);c&&g.add(s);try{await j(n.goto(i,r),(a??w)+T,`cloud.attachFrame: the render proxy did not answer goto; the frame may have been detached or its page reloaded`)}catch(e){throw c&&g.delete(s),e}d=i,I(e)},url:()=>d});return s?.length&&await v.request(s),v}catch(t){throw _.abort(),e.referrerPolicy=v,e.allow=F,e.src=u||`about:blank`,t}},z=()=>typeof window<`u`&&!0,B=async()=>{let e=await r.a.then(e=>e.cloud.quota());return{premium:e.premium,overQuota:e.overQuota,throttled:e.overQuota&&!e.premium,usedBytes:e.usedBytes,limitBytes:e.limitBytes,remainingBytes:e.remaining,bytesPerSecond:e.bytesPerSecond,bitsPerSecond:e.bytesPerSecond*8}},V=e.t({attachFrame:()=>R,available:()=>H,dgram:()=>u.t,dns:()=>s.t,fetch:()=>a.t,fs:()=>c.t,http:()=>d.t,net:()=>l.t,quota:()=>B}),H=()=>r.c;Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return z}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return R}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return V}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return B}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return H}});

package/cloud.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./proxy-CefKCs-i.cjs"),t=require("./cloud-B2ZG-0MF.cjs"),n=require("./dns.cjs"),r=require("./cloud/fs.cjs"),i=require("./net.cjs"),a=require("./dgram.cjs"),o=require("./http.cjs");exports.attachFrame=t.i,exports.available=t.t,Object.defineProperty(exports,"dgram",{enumerable:!0,get:function(){return a.t}}),Object.defineProperty(exports,"dns",{enumerable:!0,get:function(){return n.t}}),exports.fetch=e.t,Object.defineProperty(exports,"fs",{enumerable:!0,get:function(){return r.t}}),Object.defineProperty(exports,"http",{enumerable:!0,get:function(){return o.t}}),Object.defineProperty(exports,"net",{enumerable:!0,get:function(){return i.t}}),exports.quota=t.r;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./proxy-_m6Sqcr6.cjs"),t=require("./cloud-DHuqVKrl.cjs"),n=require("./dns.cjs"),r=require("./cloud/fs.cjs"),i=require("./net.cjs"),a=require("./dgram.cjs"),o=require("./http.cjs");exports.attachFrame=t.i,exports.available=t.t,Object.defineProperty(exports,"dgram",{enumerable:!0,get:function(){return a.t}}),Object.defineProperty(exports,"dns",{enumerable:!0,get:function(){return n.t}}),exports.fetch=e.t,Object.defineProperty(exports,"fs",{enumerable:!0,get:function(){return r.t}}),Object.defineProperty(exports,"http",{enumerable:!0,get:function(){return o.t}}),Object.defineProperty(exports,"net",{enumerable:!0,get:function(){return i.t}}),exports.quota=t.r;

package/cloud.d.ts

@@ -1,8 +1,8 @@
-import { t as cloudFetch } from "./proxy-AooDS--C.js";
-import { a as attachFrame, i as quota, r as QuotaStatus, t as available } from "./cloud-BYw0XBF4.js";
+import { t as cloudFetch } from "./proxy-XeHtHIdZ.js";
+import { a as attachFrame, i as quota, r as QuotaStatus, t as available } from "./cloud-C40YCPuv.js";
 import { t as dns_d_exports } from "./dns.js";
 import { n as fs_d_exports } from "./fs-CYcErwc4.js";
-import { s as net_d_exports } from "./net-DtRM2eKo.js";
+import { s as net_d_exports } from "./net-BBtYFEzu.js";
 import { t as dgram_d_exports } from "./dgram.js";
 import { t as http_d_exports } from "./http.js";
 export { type QuotaStatus, attachFrame, available, dgram_d_exports as dgram, dns_d_exports as dns, cloudFetch as fetch, fs_d_exports as fs, http_d_exports as http, net_d_exports as net, quota };

package/cloud.js

@@ -1,5 +1,5 @@
-import { t as e } from "./proxy-KUfE4cEQ.js";
-import { i as t, r as n, t as r } from "./cloud-DolBoNvR.js";
+import { t as e } from "./proxy-fXckOcRn.js";
+import { i as t, r as n, t as r } from "./cloud-DBNeXS9R.js";
 import { t as i } from "./dns.js";
 import { t as a } from "./cloud/fs.js";
 import { t as o } from "./net.js";

package/{contract-CSdeTq_Y.d.ts → contract-Gd543I6m.d.ts}

@@ -65,11 +65,28 @@ type AddressLookupResult = {
   address: string;
   family: 0 | 4 | 6;
 };
+/** @deprecated the pre-category fetch scopes. Still exported so a pinned library keeps compiling; the card maps them to `network`. */
 type FrameFetchScope = 'frame.fetchRead' | 'frame.fetchWrite';
+/**
+ * One row on the cloud consent card.
+ *
+ * A category asks for every capability in it; a `key` asks for one critical permission's own row,
+ * and is refused unless the registry has that key at severity 4. `attach` binds an "Allow once"
+ * answer to the attachment that asked, so no other attachment can consume it.
+ */
 type FrameConsentRequest = {
+  category: 'interaction' | 'storage' | 'network' | 'evaluation';
+  hosts: string[];
+} | {
+  key: string;
+  hosts: string[];
+  attach?: string;
+} | {
   scope: FrameFetchScope;
   hosts: string[];
 };
+/** `'once'` is a critical row answered Allow once, a handoff the middle page takes; `'session'` a row standing for the tab; `false` a refusal. */
+type FrameConsentAnswer = 'once' | 'session' | false;
 type DisplayCause =
 /** the frame is not being painted at all, so an ancestor is display:none, visibility:hidden or equivalent */
 'not-rendered' |
@@ -128,6 +145,8 @@ type InstalledPackage = {
   /** null when the handler addresses code directly and has no version to pin, e.g. a dev server */
   version: string | null;
   installedAt: number;
+  /** the app id this pin last verified as, version-free. Absent until a verified resolve has run. */
+  appId?: string;
 };
 type PickOptions = {
   /** untrusted, rendered as text in the picker header */
@@ -139,10 +158,18 @@ type InstallOptions = {
   version?: string;
   /** skip the confirm prompt and report the install with a notice instead; the record stays scoped to the calling app */
   noConfirm?: boolean;
+  /**
+   * Re-pin an existing record to whatever the source now calls latest, instead of answering the
+   * record already held. A host page pinning its own package on every load is what this exists for.
+   * An unreachable source keeps the record rather than dropping it.
+   */
+  latest?: boolean;
 };
 type ConnectOptions = {
   /** opaque contract tag delivered to the package's onConnect, e.g. 'stub-source@1' */
   protocol?: string;
+  /** an absolute inner route to mount the package at, e.g. '/watch/1'; defaults to its root */
+  path?: string;
 };
 /** viewport coordinates, the space both the app and the broker frame measure in */
 type SurfaceRect = {
@@ -518,7 +545,10 @@ type Resolvers = {
     hide: () => void;
   };
   frameConsent: {
+    /** the legacy single-row entry, kept so a pinned library keeps working */
     ensure: (request: FrameConsentRequest) => Promise<boolean>;
+    /** one card with a row per request; answers in request order */
+    request: (requests: FrameConsentRequest[]) => Promise<FrameConsentAnswer[]>;
   };
   connect: {
     prompt: (consumerOrigin: string) => Promise<boolean>;
@@ -589,4 +619,4 @@ type Resolvers = {
   hideInstallPrompt: () => void;
 };
 //#endregion
-export { SurfaceRect as $, ProxyFetchInit as A, RoomHandle as B, PackageQuery as C, PickOptions as D, PackagesFail as E, RoomBacklog as F, RoomOpenOptions as G, RoomMailbox as H, RoomCreateOptions as I, RoomsErrorCode as J, RoomPermission as K, RoomDefaults as L, Quota as M, Radii as N, Placement as O, Resolvers as P, StorageQuota as Q, RoomEnd as R, OverlayState as S, PackagesErrorCode as T, RoomMember as U, RoomJoinOptions as V, RoomMessage as W, SetOverlayHost as X, RoomsFail as Y, StorageEntry as Z, InstallOptions as _, ConflictChoice as a, UdpSocketOptions as at, MountDescriptor as b, ConnectAvailability as c, DisplayLevel as d, TcpSocketListenerOptions as et, DnsLookup as f, HiddenSurface as g, FrameFetchScope as h, AdoptState as i, UdpDatagram as it, ProxyFetchInput as j, ProxyFetch as k, ConnectOptions as l, FrameConsentRequest as m, AddressLookupResult as n, TcpSocketOptions as nt, ConflictRequest as o, UdpSocketResult as ot, EncryptionState as p, RoomPermissions as q, AdoptRequest as r, TcpSocketResult as rt, ConflictSide as s, WriteData as st, Account as t, TcpSocketListenerResult as tt, DisplayCause as u, InstalledPackage as v, PackageResult as w, OverlayRect as x, IpFamily as y, RoomEvent as z };
+export { StorageQuota as $, ProxyFetch as A, RoomEvent as B, OverlayState as C, PackagesFail as D, PackagesErrorCode as E, Resolvers as F, RoomMessage as G, RoomJoinOptions as H, RoomBacklog as I, RoomPermissions as J, RoomOpenOptions as K, RoomCreateOptions as L, ProxyFetchInput as M, Quota as N, PickOptions as O, Radii as P, StorageEntry as Q, RoomDefaults as R, OverlayRect as S, PackageResult as T, RoomMailbox as U, RoomHandle as V, RoomMember as W, RoomsFail as X, RoomsErrorCode as Y, SetOverlayHost as Z, HiddenSurface as _, ConflictChoice as a, UdpDatagram as at, IpFamily as b, ConnectAvailability as c, WriteData as ct, DisplayLevel as d, SurfaceRect as et, DnsLookup as f, FrameFetchScope as g, FrameConsentRequest as h, AdoptState as i, TcpSocketResult as it, ProxyFetchInit as j, Placement as k, ConnectOptions as l, FrameConsentAnswer as m, AddressLookupResult as n, TcpSocketListenerResult as nt, ConflictRequest as o, UdpSocketOptions as ot, EncryptionState as p, RoomPermission as q, AdoptRequest as r, TcpSocketOptions as rt, ConflictSide as s, UdpSocketResult as st, Account as t, TcpSocketListenerOptions as tt, DisplayCause as u, InstallOptions as v, PackageQuery as w, MountDescriptor as x, InstalledPackage as y, RoomEnd as z };

package/contract.d.ts

@@ -1,3 +1,3 @@
 import { o as TcpSocketOption, v as UdpSocketOption } from "./wire-Gbo-D74t.js";
-import { $ as SurfaceRect, A as ProxyFetchInit, B as RoomHandle, C as PackageQuery, D as PickOptions, E as PackagesFail, F as RoomBacklog, G as RoomOpenOptions, H as RoomMailbox, I as RoomCreateOptions, J as RoomsErrorCode, K as RoomPermission, L as RoomDefaults, M as Quota, N as Radii, O as Placement, P as Resolvers, Q as StorageQuota, R as RoomEnd, S as OverlayState, T as PackagesErrorCode, U as RoomMember, V as RoomJoinOptions, W as RoomMessage, X as SetOverlayHost, Y as RoomsFail, Z as StorageEntry, _ as InstallOptions, a as ConflictChoice, at as UdpSocketOptions, b as MountDescriptor, c as ConnectAvailability, d as DisplayLevel, et as TcpSocketListenerOptions, f as DnsLookup, g as HiddenSurface, h as FrameFetchScope, i as AdoptState, it as UdpDatagram, j as ProxyFetchInput, k as ProxyFetch, l as ConnectOptions, m as FrameConsentRequest, n as AddressLookupResult, nt as TcpSocketOptions, o as ConflictRequest, ot as UdpSocketResult, p as EncryptionState, q as RoomPermissions, r as AdoptRequest, rt as TcpSocketResult, s as ConflictSide, st as WriteData, t as Account, tt as TcpSocketListenerResult, u as DisplayCause, v as InstalledPackage, w as PackageResult, x as OverlayRect, y as IpFamily, z as RoomEvent } from "./contract-CSdeTq_Y.js";
-export { Account, AddressLookupResult, AdoptRequest, AdoptState, ConflictChoice, ConflictRequest, ConflictSide, ConnectAvailability, ConnectOptions, DisplayCause, DisplayLevel, DnsLookup, EncryptionState, FrameConsentRequest, FrameFetchScope, HiddenSurface, InstallOptions, InstalledPackage, IpFamily, MountDescriptor, OverlayRect, OverlayState, PackageQuery, PackageResult, PackagesErrorCode, PackagesFail, PickOptions, Placement, ProxyFetch, ProxyFetchInit, ProxyFetchInput, Quota, Radii, Resolvers, RoomBacklog, RoomCreateOptions, RoomDefaults, RoomEnd, RoomEvent, RoomHandle, RoomJoinOptions, RoomMailbox, RoomMember, RoomMessage, RoomOpenOptions, RoomPermission, RoomPermissions, RoomsErrorCode, RoomsFail, SetOverlayHost, StorageEntry, StorageQuota, SurfaceRect, TcpSocketListenerOptions, TcpSocketListenerResult, type TcpSocketOption, TcpSocketOptions, TcpSocketResult, UdpDatagram, type UdpSocketOption, UdpSocketOptions, UdpSocketResult, WriteData };
+import { $ as StorageQuota, A as ProxyFetch, B as RoomEvent, C as OverlayState, D as PackagesFail, E as PackagesErrorCode, F as Resolvers, G as RoomMessage, H as RoomJoinOptions, I as RoomBacklog, J as RoomPermissions, K as RoomOpenOptions, L as RoomCreateOptions, M as ProxyFetchInput, N as Quota, O as PickOptions, P as Radii, Q as StorageEntry, R as RoomDefaults, S as OverlayRect, T as PackageResult, U as RoomMailbox, V as RoomHandle, W as RoomMember, X as RoomsFail, Y as RoomsErrorCode, Z as SetOverlayHost, _ as HiddenSurface, a as ConflictChoice, at as UdpDatagram, b as IpFamily, c as ConnectAvailability, ct as WriteData, d as DisplayLevel, et as SurfaceRect, f as DnsLookup, g as FrameFetchScope, h as FrameConsentRequest, i as AdoptState, it as TcpSocketResult, j as ProxyFetchInit, k as Placement, l as ConnectOptions, m as FrameConsentAnswer, n as AddressLookupResult, nt as TcpSocketListenerResult, o as ConflictRequest, ot as UdpSocketOptions, p as EncryptionState, q as RoomPermission, r as AdoptRequest, rt as TcpSocketOptions, s as ConflictSide, st as UdpSocketResult, t as Account, tt as TcpSocketListenerOptions, u as DisplayCause, v as InstallOptions, w as PackageQuery, x as MountDescriptor, y as InstalledPackage, z as RoomEnd } from "./contract-Gd543I6m.js";
+export { Account, AddressLookupResult, AdoptRequest, AdoptState, ConflictChoice, ConflictRequest, ConflictSide, ConnectAvailability, ConnectOptions, DisplayCause, DisplayLevel, DnsLookup, EncryptionState, FrameConsentAnswer, FrameConsentRequest, FrameFetchScope, HiddenSurface, InstallOptions, InstalledPackage, IpFamily, MountDescriptor, OverlayRect, OverlayState, PackageQuery, PackageResult, PackagesErrorCode, PackagesFail, PickOptions, Placement, ProxyFetch, ProxyFetchInit, ProxyFetchInput, Quota, Radii, Resolvers, RoomBacklog, RoomCreateOptions, RoomDefaults, RoomEnd, RoomEvent, RoomHandle, RoomJoinOptions, RoomMailbox, RoomMember, RoomMessage, RoomOpenOptions, RoomPermission, RoomPermissions, RoomsErrorCode, RoomsFail, SetOverlayHost, StorageEntry, StorageQuota, SurfaceRect, TcpSocketListenerOptions, TcpSocketListenerResult, type TcpSocketOption, TcpSocketOptions, TcpSocketResult, UdpDatagram, type UdpSocketOption, UdpSocketOptions, UdpSocketResult, WriteData };

package/dgram.cjs

@@ -1 +1 @@
-Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./api-BCJO3EWi.cjs"),n=require("./busy-Dv8wzE5M.cjs"),r=require("./utils-BvgGdrgN.cjs");require("./wire.cjs");let i=require("buffer"),a=require("events"),o=require("ip-address");var s=e.t({Socket:()=>c,createSocket:()=>m,default:()=>h}),c=class extends a.EventEmitter{_type;_localAddress;_remoteAddress;_connectedLocally;_connectGeneration=0;_destroyed=!1;_busyRelease;_webVPNUdpSocketPromise;_dataPort;_socketId;_sendQueue=[];_sendQueueBytes=0;_sendFlushScheduled=!1;_peerTailCache=new Map;constructor(e){if(super(e),!e)throw Error(`Missing options`);this._type=e.type,e.connection&&this.__webvpn_udp_socket_init__(e.connection)}_lastRecvBufferSize=0;_lastSendBufferSize=0;_lastTtl=64;_lastMulticastTtl=1;_lastMulticastLoopback=!0;_setUdpOption(e){if(!this._webVPNUdpSocketPromise){this.emit(`error`,Error(`Cannot set socket option before bind`));return}this._webVPNUdpSocketPromise.then(async t=>{if(t)try{await t.setOption(e)}catch(e){this.emit(`error`,e)}})}_dataPortAcks=!1;_dataPortConsumedBytes=0;_dataPortAckedBytes=0;_ackDataPortBatch(e){if(!this._dataPortAcks||!this._dataPort||(this._dataPortConsumedBytes+=e,this._dataPortAckedBytes!==0&&this._dataPortConsumedBytes-this._dataPortAckedBytes<524288))return;this._dataPortAckedBytes=this._dataPortConsumedBytes;let t={type:r.n,consumedBytes:this._dataPortConsumedBytes};this._dataPort.postMessage(t)}_onTransportClosed(e){this._destroyed||(this._destroyed=!0,this._busyRelease?.(),this._dataPort?.close(),this._dataPort=void 0,this.listenerCount(`error`)>0&&this.emit(`error`,Error(e||`WebVPN session closed`)),this.emit(`close`))}_onDataPortBatch(e){let t=new DataView(e),n=!1,r,a=0;for(;a+4<=e.byteLength;){let o=t.getUint32(a);a+=4;let s=a+o;if(s>e.byteLength)break;let c=a+4,l=t.getUint8(c);c+=1;let u,d,p;if(l===2){if(!this._remoteAddress){a=s;continue}u=this._remoteAddress.address,d=this._remoteAddress.family,p=this._remoteAddress.port}else{let n=new Uint8Array(e,c,l===0?4:16);l===0?(d=`IPv4`,u=`${n[0]}.${n[1]}.${n[2]}.${n[3]}`):(d=`IPv6`,u=f(n)),c+=n.byteLength,p=t.getUint16(c),c+=2}let m=t.getUint32(c);c+=4;try{this.emit(`message`,i.Buffer.from(e.slice(c,c+m)),{address:u,family:d,port:p,size:m})}catch(e){n||(n=!0,r=e)}a=s}if(n)throw r}_peerTail(e,t){if(e===void 0||t===void 0)return l;let n=`${e}|${t}`,r=this._peerTailCache.get(n);if(r)return r;let i=o.Address4.isValid(e)?d(e):p(e),a=new Uint8Array(1+i.byteLength+2);return a[0]=i.byteLength===4?0:1,a.set(i,1),new DataView(a.buffer).setUint16(1+i.byteLength,t),this._peerTailCache.size>=4096&&this._peerTailCache.clear(),this._peerTailCache.set(n,a),a}_portSend(e,t,n){let r=this._peerTail(t,n),i=new Uint8Array(8+r.byteLength+4+e.byteLength),a=new DataView(i.buffer);a.setUint32(0,i.byteLength-4),a.setUint32(4,this._socketId),i.set(r,8),a.setUint32(8+r.byteLength,e.byteLength),i.set(e,12+r.byteLength),this._sendQueue.push(i),this._sendQueueBytes+=i.byteLength,!this._sendFlushScheduled&&(this._sendFlushScheduled=!0,queueMicrotask(()=>{this._sendFlushScheduled=!1;let e=this._sendQueue,t=this._sendQueueBytes;if(this._sendQueue=[],this._sendQueueBytes=0,!e.length||!this._dataPort)return;let n=new Uint8Array(t),r=0;for(let t of e)n.set(t,r),r+=t.byteLength;this._dataPort.postMessage(n.buffer,[n.buffer])}))}addMembership(e,t){if(o.Address4.isValid(e)){let n=d(e),r=t&&o.Address4.isValid(t)?d(t):new Uint8Array([0,0,0,0]);this._setUdpOption({type:5,group:n,interface:r})}else if(o.Address6.isValid(e)){let t=p(e);this._setUdpOption({type:7,group:t,ifIndex:0})}else this.emit(`error`,Error(`Invalid multicast address: ${e}`))}address(){if(!this._localAddress)throw Error(`EBADF`);return this._localAddress}bind(...e){let n=r.o(...e),i=this._type===`udp6`?`::`:`0.0.0.0`,a=this.__webvpn_udp_socket_init__(t.o(`a udp socket`).then(e=>e.cloud.webvpn.udpSocket({type:this._type,address:n.address??i,port:n.port,dataPort:!0})));return n.callback&&a.then(e=>{e&&n.callback.call(this)}),this}__webvpn_udp_socket_init__(e,t){return t&&(this._localAddress={address:t.localAddress,family:t.localFamily,port:t.localPort}),this._busyRelease??=n.t(`udp socket`),this._webVPNUdpSocketPromise=e.then(e=>{if(e.dataPort)this._socketId=e.socketId,this._dataPort=e.dataPort,this._dataPortAcks=e.dataPortAcks===!0,this._dataPort.onmessage=e=>{try{this._onDataPortBatch(e.data)}finally{this._ackDataPortBatch(e.data.byteLength)}};else{let t=e.dataReadableStream.getReader();(async()=>{for(;;){let{value:e,done:n}=await t.read();if(n)return;this.emit(`message`,i.Buffer.from(e.data),{address:e.address,family:e.family,port:e.port,size:e.size})}})().catch(e=>this._onTransportClosed(e instanceof Error?e.message:void 0))}return e.closed?.then(e=>this._onTransportClosed(e?.reason)).catch(()=>{}),this._localAddress={address:e.localAddress,family:e.localFamily,port:e.localPort},e}).catch(e=>{this.emit(`error`,e)}),this._webVPNUdpSocketPromise.then(e=>{if(!e){this._busyRelease?.();return}this.emit(`listening`)}),this._webVPNUdpSocketPromise}close(e){if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);return this._webVPNUdpSocketPromise.then(async t=>{if(!t)throw Error(`Socket not bound`);let n=this._destroyed;this._destroyed=!0,this._busyRelease?.(),this._dataPort?.close(),this._dataPort=void 0;try{await t.close()}finally{try{e&&e()}finally{n||this.emit(`close`)}}}).catch(()=>{}),this}connect(...e){if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);this._webVPNUdpSocketPromise.then(async t=>{if(!t)throw Error(`Socket not bound`);let n=e[0],r=this._type===`udp6`?`::1`:`127.0.0.1`,i=typeof e[1]==`string`?e[1]:r,a=typeof e.at(-1)==`function`?e.at(-1):void 0,o=await t.connect({remotePort:n,remoteAddress:i});this._connectedLocally=o?.local===!0,this._remoteAddress=o?.address?{address:o.address,family:o.family,port:o.port}:{address:i,family:this._type===`udp6`?`IPv6`:`IPv4`,port:n},this._connectGeneration+=1,a&&a()}).catch(e=>{this.emit(`error`,e)})}disconnect(){if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);if(!this._remoteAddress)throw Error(`ERR_SOCKET_DGRAM_NOT_CONNECTED`);let e=this._remoteAddress,t=this._connectedLocally,n=this._connectGeneration;this._remoteAddress=void 0,this._connectedLocally=void 0,this._webVPNUdpSocketPromise.then(e=>e?.disconnect?.()).catch(r=>{this._connectGeneration===n&&(this._remoteAddress=e,this._connectedLocally=t),this.emit(`error`,r)})}dropMembership(e,t){if(o.Address4.isValid(e)){let n=d(e),r=t&&o.Address4.isValid(t)?d(t):new Uint8Array([0,0,0,0]);this._setUdpOption({type:6,group:n,interface:r})}else if(o.Address6.isValid(e)){let t=p(e);this._setUdpOption({type:8,group:t,ifIndex:0})}else this.emit(`error`,Error(`Invalid multicast address: ${e}`))}getRecvBufferSize(){return this._lastRecvBufferSize}getSendBufferSize(){return this._lastSendBufferSize}getSendQueueSize(){return 0}getSendQueueCount(){return 0}ref(){return this}remoteAddress(){if(!this._remoteAddress)throw Error(`ERR_SOCKET_DGRAM_NOT_CONNECTED`);return{address:this._remoteAddress.address,family:this._remoteAddress.family,port:this._remoteAddress.port}}send(...e){this._webVPNUdpSocketPromise||this.bind();let t=r.s(...e),n=u(t.message),i=n;if(t.hasRange){let{offset:e,length:r}=t;if(!Number.isInteger(e)||e<0||e>n.byteLength)throw Object.assign(RangeError(`"offset" is outside of buffer bounds`),{code:`ERR_BUFFER_OUT_OF_BOUNDS`});if(!Number.isInteger(r)||r<0||r>n.byteLength-e)throw Object.assign(RangeError(`"length" is outside of buffer bounds`),{code:`ERR_BUFFER_OUT_OF_BOUNDS`});i=n.subarray(e,e+r)}let a=this._type===`udp6`?`::1`:`127.0.0.1`;if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);this._webVPNUdpSocketPromise.then(e=>{if(!e)throw Error(`Socket not bound`);let n=t.callback,r=t.address??a,s=this._remoteAddress!==void 0&&t.address===void 0;if(this._dataPort&&(s||o.Address4.isValid(r)||o.Address6.isValid(r))){this._portSend(i,s?void 0:r,s?void 0:t.port),n?.call(this,null,i.byteLength);return}e.send({port:t.port,address:r,message:i.byteOffset===0&&i.byteLength===i.buffer.byteLength?i.buffer:i.buffer.slice(i.byteOffset,i.byteOffset+i.byteLength)}).then(()=>n?.call(this,null,i.byteLength),e=>n?n.call(this,e,0):this.emit(`error`,e))})}setBroadcast(e){this._setUdpOption({type:0,value:e})}setMulticastInterface(e){}setMulticastLoopback(e){return this._setUdpOption({type:3,value:e}),this._setUdpOption({type:4,value:e}),this._lastMulticastLoopback=e,e}setMulticastTTL(e){return this._setUdpOption({type:2,value:e}),this._lastMulticastTtl=e,e}setRecvBufferSize(e){this._setUdpOption({type:10,value:e}),this._lastRecvBufferSize=e}setSendBufferSize(e){this._setUdpOption({type:9,value:e}),this._lastSendBufferSize=e}setTTL(e){return this._setUdpOption({type:1,value:e}),this._lastTtl=e,e}unref(){return this}addSourceSpecificMembership(e,t,n){}dropSourceSpecificMembership(e,t,n){}async[Symbol.asyncDispose](){await new Promise(e=>{this.close(e)})}},l=new Uint8Array([2]),u=e=>{if(typeof e==`string`)return r.l.encode(e);if(e instanceof Uint8Array)return e;if(ArrayBuffer.isView(e))return new Uint8Array(e.buffer,e.byteOffset,e.byteLength);if(Array.isArray(e)){let t=e.map(u),n=new Uint8Array(t.reduce((e,t)=>e+t.byteLength,0)),r=0;for(let e of t)n.set(e,r),r+=e.byteLength;return n}return new Uint8Array(e)},d=e=>{let t=e.split(`.`).map(e=>parseInt(e,10));if(t.length!==4||t.some(e=>Number.isNaN(e)||e<0||e>255))throw Error(`Invalid IPv4 address: ${e}`);return new Uint8Array(t)},f=e=>{let t=[];for(let n=0;n<16;n+=2)t.push(e[n]<<8|e[n+1]);let n=-1,r=1;for(let e=0;e<8;){if(t[e]!==0){e++;continue}let i=e;for(;i<8&&t[i]===0;)i++;i-e>r&&(n=e,r=i-e),e=i}return n===-1?t.map(e=>e.toString(16)).join(`:`):`${t.slice(0,n).map(e=>e.toString(16)).join(`:`)}::${t.slice(n+r).map(e=>e.toString(16)).join(`:`)}`},p=e=>{let t=new o.Address6(e).getBitsBase16(0,128).match(/.{2}/g);if(!t||t.length!==16)throw Error(`Invalid IPv6 address: ${e}`);return new Uint8Array(t.map(e=>parseInt(e,16)))},m=(e,t)=>{let n=new c(typeof e==`string`?{type:e}:e);return t&&n.on(`message`,t),n},h={Socket:c,createSocket:m};exports.Socket=c,exports.createSocket=m,exports.default=h,Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return s}});
+Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./api-MW-Lm0u8.cjs"),n=require("./busy-Dv8wzE5M.cjs"),r=require("./utils-BvgGdrgN.cjs");require("./wire.cjs");let i=require("buffer"),a=require("events"),o=require("ip-address");var s=e.t({Socket:()=>c,createSocket:()=>m,default:()=>h}),c=class extends a.EventEmitter{_type;_localAddress;_remoteAddress;_connectedLocally;_connectGeneration=0;_destroyed=!1;_busyRelease;_webVPNUdpSocketPromise;_dataPort;_socketId;_sendQueue=[];_sendQueueBytes=0;_sendFlushScheduled=!1;_peerTailCache=new Map;constructor(e){if(super(e),!e)throw Error(`Missing options`);this._type=e.type,e.connection&&this.__webvpn_udp_socket_init__(e.connection)}_lastRecvBufferSize=0;_lastSendBufferSize=0;_lastTtl=64;_lastMulticastTtl=1;_lastMulticastLoopback=!0;_setUdpOption(e){if(!this._webVPNUdpSocketPromise){this.emit(`error`,Error(`Cannot set socket option before bind`));return}this._webVPNUdpSocketPromise.then(async t=>{if(t)try{await t.setOption(e)}catch(e){this.emit(`error`,e)}})}_dataPortAcks=!1;_dataPortConsumedBytes=0;_dataPortAckedBytes=0;_ackDataPortBatch(e){if(!this._dataPortAcks||!this._dataPort||(this._dataPortConsumedBytes+=e,this._dataPortAckedBytes!==0&&this._dataPortConsumedBytes-this._dataPortAckedBytes<524288))return;this._dataPortAckedBytes=this._dataPortConsumedBytes;let t={type:r.n,consumedBytes:this._dataPortConsumedBytes};this._dataPort.postMessage(t)}_onTransportClosed(e){this._destroyed||(this._destroyed=!0,this._busyRelease?.(),this._dataPort?.close(),this._dataPort=void 0,this.listenerCount(`error`)>0&&this.emit(`error`,Error(e||`WebVPN session closed`)),this.emit(`close`))}_onDataPortBatch(e){let t=new DataView(e),n=!1,r,a=0;for(;a+4<=e.byteLength;){let o=t.getUint32(a);a+=4;let s=a+o;if(s>e.byteLength)break;let c=a+4,l=t.getUint8(c);c+=1;let u,d,p;if(l===2){if(!this._remoteAddress){a=s;continue}u=this._remoteAddress.address,d=this._remoteAddress.family,p=this._remoteAddress.port}else{let n=new Uint8Array(e,c,l===0?4:16);l===0?(d=`IPv4`,u=`${n[0]}.${n[1]}.${n[2]}.${n[3]}`):(d=`IPv6`,u=f(n)),c+=n.byteLength,p=t.getUint16(c),c+=2}let m=t.getUint32(c);c+=4;try{this.emit(`message`,i.Buffer.from(e.slice(c,c+m)),{address:u,family:d,port:p,size:m})}catch(e){n||(n=!0,r=e)}a=s}if(n)throw r}_peerTail(e,t){if(e===void 0||t===void 0)return l;let n=`${e}|${t}`,r=this._peerTailCache.get(n);if(r)return r;let i=o.Address4.isValid(e)?d(e):p(e),a=new Uint8Array(1+i.byteLength+2);return a[0]=i.byteLength===4?0:1,a.set(i,1),new DataView(a.buffer).setUint16(1+i.byteLength,t),this._peerTailCache.size>=4096&&this._peerTailCache.clear(),this._peerTailCache.set(n,a),a}_portSend(e,t,n){let r=this._peerTail(t,n),i=new Uint8Array(8+r.byteLength+4+e.byteLength),a=new DataView(i.buffer);a.setUint32(0,i.byteLength-4),a.setUint32(4,this._socketId),i.set(r,8),a.setUint32(8+r.byteLength,e.byteLength),i.set(e,12+r.byteLength),this._sendQueue.push(i),this._sendQueueBytes+=i.byteLength,!this._sendFlushScheduled&&(this._sendFlushScheduled=!0,queueMicrotask(()=>{this._sendFlushScheduled=!1;let e=this._sendQueue,t=this._sendQueueBytes;if(this._sendQueue=[],this._sendQueueBytes=0,!e.length||!this._dataPort)return;let n=new Uint8Array(t),r=0;for(let t of e)n.set(t,r),r+=t.byteLength;this._dataPort.postMessage(n.buffer,[n.buffer])}))}addMembership(e,t){if(o.Address4.isValid(e)){let n=d(e),r=t&&o.Address4.isValid(t)?d(t):new Uint8Array([0,0,0,0]);this._setUdpOption({type:5,group:n,interface:r})}else if(o.Address6.isValid(e)){let t=p(e);this._setUdpOption({type:7,group:t,ifIndex:0})}else this.emit(`error`,Error(`Invalid multicast address: ${e}`))}address(){if(!this._localAddress)throw Error(`EBADF`);return this._localAddress}bind(...e){let n=r.o(...e),i=this._type===`udp6`?`::`:`0.0.0.0`,a=this.__webvpn_udp_socket_init__(t.o(`a udp socket`).then(e=>e.cloud.webvpn.udpSocket({type:this._type,address:n.address??i,port:n.port,dataPort:!0})));return n.callback&&a.then(e=>{e&&n.callback.call(this)}),this}__webvpn_udp_socket_init__(e,t){return t&&(this._localAddress={address:t.localAddress,family:t.localFamily,port:t.localPort}),this._busyRelease??=n.t(`udp socket`),this._webVPNUdpSocketPromise=e.then(e=>{if(e.dataPort)this._socketId=e.socketId,this._dataPort=e.dataPort,this._dataPortAcks=e.dataPortAcks===!0,this._dataPort.onmessage=e=>{try{this._onDataPortBatch(e.data)}finally{this._ackDataPortBatch(e.data.byteLength)}};else{let t=e.dataReadableStream.getReader();(async()=>{for(;;){let{value:e,done:n}=await t.read();if(n)return;this.emit(`message`,i.Buffer.from(e.data),{address:e.address,family:e.family,port:e.port,size:e.size})}})().catch(e=>this._onTransportClosed(e instanceof Error?e.message:void 0))}return e.closed?.then(e=>this._onTransportClosed(e?.reason)).catch(()=>{}),this._localAddress={address:e.localAddress,family:e.localFamily,port:e.localPort},e}).catch(e=>{this.emit(`error`,e)}),this._webVPNUdpSocketPromise.then(e=>{if(!e){this._busyRelease?.();return}this.emit(`listening`)}),this._webVPNUdpSocketPromise}close(e){if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);return this._webVPNUdpSocketPromise.then(async t=>{if(!t)throw Error(`Socket not bound`);let n=this._destroyed;this._destroyed=!0,this._busyRelease?.(),this._dataPort?.close(),this._dataPort=void 0;try{await t.close()}finally{try{e&&e()}finally{n||this.emit(`close`)}}}).catch(()=>{}),this}connect(...e){if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);this._webVPNUdpSocketPromise.then(async t=>{if(!t)throw Error(`Socket not bound`);let n=e[0],r=this._type===`udp6`?`::1`:`127.0.0.1`,i=typeof e[1]==`string`?e[1]:r,a=typeof e.at(-1)==`function`?e.at(-1):void 0,o=await t.connect({remotePort:n,remoteAddress:i});this._connectedLocally=o?.local===!0,this._remoteAddress=o?.address?{address:o.address,family:o.family,port:o.port}:{address:i,family:this._type===`udp6`?`IPv6`:`IPv4`,port:n},this._connectGeneration+=1,a&&a()}).catch(e=>{this.emit(`error`,e)})}disconnect(){if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);if(!this._remoteAddress)throw Error(`ERR_SOCKET_DGRAM_NOT_CONNECTED`);let e=this._remoteAddress,t=this._connectedLocally,n=this._connectGeneration;this._remoteAddress=void 0,this._connectedLocally=void 0,this._webVPNUdpSocketPromise.then(e=>e?.disconnect?.()).catch(r=>{this._connectGeneration===n&&(this._remoteAddress=e,this._connectedLocally=t),this.emit(`error`,r)})}dropMembership(e,t){if(o.Address4.isValid(e)){let n=d(e),r=t&&o.Address4.isValid(t)?d(t):new Uint8Array([0,0,0,0]);this._setUdpOption({type:6,group:n,interface:r})}else if(o.Address6.isValid(e)){let t=p(e);this._setUdpOption({type:8,group:t,ifIndex:0})}else this.emit(`error`,Error(`Invalid multicast address: ${e}`))}getRecvBufferSize(){return this._lastRecvBufferSize}getSendBufferSize(){return this._lastSendBufferSize}getSendQueueSize(){return 0}getSendQueueCount(){return 0}ref(){return this}remoteAddress(){if(!this._remoteAddress)throw Error(`ERR_SOCKET_DGRAM_NOT_CONNECTED`);return{address:this._remoteAddress.address,family:this._remoteAddress.family,port:this._remoteAddress.port}}send(...e){this._webVPNUdpSocketPromise||this.bind();let t=r.s(...e),n=u(t.message),i=n;if(t.hasRange){let{offset:e,length:r}=t;if(!Number.isInteger(e)||e<0||e>n.byteLength)throw Object.assign(RangeError(`"offset" is outside of buffer bounds`),{code:`ERR_BUFFER_OUT_OF_BOUNDS`});if(!Number.isInteger(r)||r<0||r>n.byteLength-e)throw Object.assign(RangeError(`"length" is outside of buffer bounds`),{code:`ERR_BUFFER_OUT_OF_BOUNDS`});i=n.subarray(e,e+r)}let a=this._type===`udp6`?`::1`:`127.0.0.1`;if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);this._webVPNUdpSocketPromise.then(e=>{if(!e)throw Error(`Socket not bound`);let n=t.callback,r=t.address??a,s=this._remoteAddress!==void 0&&t.address===void 0;if(this._dataPort&&(s||o.Address4.isValid(r)||o.Address6.isValid(r))){this._portSend(i,s?void 0:r,s?void 0:t.port),n?.call(this,null,i.byteLength);return}e.send({port:t.port,address:r,message:i.byteOffset===0&&i.byteLength===i.buffer.byteLength?i.buffer:i.buffer.slice(i.byteOffset,i.byteOffset+i.byteLength)}).then(()=>n?.call(this,null,i.byteLength),e=>n?n.call(this,e,0):this.emit(`error`,e))})}setBroadcast(e){this._setUdpOption({type:0,value:e})}setMulticastInterface(e){}setMulticastLoopback(e){return this._setUdpOption({type:3,value:e}),this._setUdpOption({type:4,value:e}),this._lastMulticastLoopback=e,e}setMulticastTTL(e){return this._setUdpOption({type:2,value:e}),this._lastMulticastTtl=e,e}setRecvBufferSize(e){this._setUdpOption({type:10,value:e}),this._lastRecvBufferSize=e}setSendBufferSize(e){this._setUdpOption({type:9,value:e}),this._lastSendBufferSize=e}setTTL(e){return this._setUdpOption({type:1,value:e}),this._lastTtl=e,e}unref(){return this}addSourceSpecificMembership(e,t,n){}dropSourceSpecificMembership(e,t,n){}async[Symbol.asyncDispose](){await new Promise(e=>{this.close(e)})}},l=new Uint8Array([2]),u=e=>{if(typeof e==`string`)return r.l.encode(e);if(e instanceof Uint8Array)return e;if(ArrayBuffer.isView(e))return new Uint8Array(e.buffer,e.byteOffset,e.byteLength);if(Array.isArray(e)){let t=e.map(u),n=new Uint8Array(t.reduce((e,t)=>e+t.byteLength,0)),r=0;for(let e of t)n.set(e,r),r+=e.byteLength;return n}return new Uint8Array(e)},d=e=>{let t=e.split(`.`).map(e=>parseInt(e,10));if(t.length!==4||t.some(e=>Number.isNaN(e)||e<0||e>255))throw Error(`Invalid IPv4 address: ${e}`);return new Uint8Array(t)},f=e=>{let t=[];for(let n=0;n<16;n+=2)t.push(e[n]<<8|e[n+1]);let n=-1,r=1;for(let e=0;e<8;){if(t[e]!==0){e++;continue}let i=e;for(;i<8&&t[i]===0;)i++;i-e>r&&(n=e,r=i-e),e=i}return n===-1?t.map(e=>e.toString(16)).join(`:`):`${t.slice(0,n).map(e=>e.toString(16)).join(`:`)}::${t.slice(n+r).map(e=>e.toString(16)).join(`:`)}`},p=e=>{let t=new o.Address6(e).getBitsBase16(0,128).match(/.{2}/g);if(!t||t.length!==16)throw Error(`Invalid IPv6 address: ${e}`);return new Uint8Array(t.map(e=>parseInt(e,16)))},m=(e,t)=>{let n=new c(typeof e==`string`?{type:e}:e);return t&&n.on(`message`,t),n},h={Socket:c,createSocket:m};exports.Socket=c,exports.createSocket=m,exports.default=h,Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return s}});

package/dgram.d.ts

@@ -1,6 +1,6 @@
 import { v as UdpSocketOption } from "./wire-Gbo-D74t.js";
-import { P as Resolvers, ot as UdpSocketResult } from "./contract-CSdeTq_Y.js";
-import "./api-LKxHamsI.js";
+import { F as Resolvers, st as UdpSocketResult } from "./contract-Gd543I6m.js";
+import "./api-Bgsg9t9D.js";
 import { Buffer } from "buffer";
 import { AddressInfo } from "net";
 import { EventEmitter } from "events";

package/dgram.js

@@ -1,5 +1,5 @@
 import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
-import { o as t } from "./api-DLvscoll.js";
+import { o as t } from "./api-BdTgLphT.js";
 import { t as n } from "./busy-B189uX--.js";
 import { l as r, n as i, o as a, s as o } from "./utils-C-cAd4r4.js";
 import "./wire.js";

package/dns.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./api-BCJO3EWi.cjs");var n=e.t({lookup:()=>r}),r=(e,n)=>t.a.then(t=>t.cloud.dns.lookup(e,n));exports.lookup=r,Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return n}});
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./api-MW-Lm0u8.cjs");var n=e.t({lookup:()=>r}),r=(e,n)=>t.a.then(t=>t.cloud.dns.lookup(e,n));exports.lookup=r,Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return n}});

package/dns.d.ts

@@ -1,4 +1,4 @@
-import { n as AddressLookupResult } from "./contract-CSdeTq_Y.js";
+import { n as AddressLookupResult } from "./contract-Gd543I6m.js";
 declare namespace dns_d_exports {
   export { AddressLookupResult, lookup };
 }

package/dns.js

@@ -1,5 +1,5 @@
 import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
-import { a as t } from "./api-DLvscoll.js";
+import { a as t } from "./api-BdTgLphT.js";
 //#region src/dns.ts
 var n = /* @__PURE__ */ e({ lookup: () => r }), r = (e, n) => t.then((t) => t.cloud.dns.lookup(e, n));
 //#endregion