@fkn/lib 0.9.33 → 0.9.35

package/cloud-B9Sd7V1g.js

@@ -0,0 +1,422 @@
+import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
+import { b as t, c as n, d as r, et as i, f as a, g as o, l as s, m as c, o as l, s as u, u as d, w as f, x as p } from "./lib-B-jGWfsv.js";
+import { f as m, s as h, t as g } from "./hosts-C4-8lWwz.js";
+import { a as _, c as v, n as y, o as b } from "./api-CtiKFcK3.js";
+import { t as x } from "./busy-B189uX--.js";
+import { t as S } from "./proxy-DDwY3AVG.js";
+import { frameFetchVerdict as C } from "./attach-policy.js";
+import { ATTACH_FRAME_KEY as w, ATTACH_WINDOW_KEY as T, ATTACH_WINDOW_MESSAGE as E, WINDOW_HANDSHAKE_TIMEOUT_MS as ee } from "./contract.js";
+import { t as D } from "./dns.js";
+import { t as O } from "./cloud/fs.js";
+import { t as k } from "./net.js";
+import { t as A } from "./dgram.js";
+import { t as j } from "./http.js";
+import { expose as M } from "osra";
+//#region src/cloud/frame-broker.ts
+var N = async () => {
+	let e = () => b("frame consent");
+	try {
+		let t = await e();
+		return {
+			request: typeof t.frameConsent.request == "function" ? t.frameConsent.request : void 0,
+			ensure: t.frameConsent.ensure
+		};
+	} catch (t) {
+		if (!(t instanceof y)) throw t;
+		return {
+			request: void 0,
+			ensure: (t) => e().then((e) => e.frameConsent.ensure(t))
+		};
+	}
+}, P = "frame: this frame no longer holds the document the app attached it to", F = !1, te = () => {
+	F || (F = !0, console.warn("[fkn-frame] this FKN broker is too old to ask for permission categories, so nothing was asked for upfront and each capability is asked for as it is first used. Reloading the page picks up the current broker."));
+}, ne = (e) => [...e].flatMap((e) => {
+	try {
+		return [new URL(e).hostname];
+	} catch {
+		return [];
+	}
+}), I = (e, t, n) => n === null ? `frame.${e}: the user did not grant ${t} here` : `frame.${e}: the user did not grant ${t} on ${n}`, re = (e) => {
+	let { assertLive: t, attach: r, current: i, declaredHosts: a, documentHost: o, ensure: c, request: l, session: u, approvedOrigins: p } = e, _ = /* @__PURE__ */ new Set(), v = async () => o ? await o() : (() => {
+		try {
+			return new URL(i()).hostname;
+		} catch {
+			return "";
+		}
+	})(), y = () => g([...a, ...ne(p)]), b = async (e) => (await l([e]))[0] ?? !1;
+	return {
+		gate: async ({ operation: e, args: n, phase: i }) => {
+			t();
+			let o = m(e, n);
+			if (o === null) return;
+			let x = d(o);
+			if (x === void 0 || x === "auto") return;
+			if (e === "fetch") {
+				let e = C({
+					session: u,
+					declaredHosts: a,
+					approvedOrigins: p
+				}, i === "ensure" ? void 0 : n[0], { classifier: "fetchTarget" });
+				if (i === "ensure" && !u) throw f(e.kind === "refuse" ? e.reason : "", "fetch");
+				if (i !== "ensure" && e.kind === "refuse") throw f(e.reason, "fetch");
+				if (!l) {
+					if (e.kind === "refuse") throw f(e.reason, "fetch");
+					if (!await c({
+						scope: h(n[0], n[1]).scope,
+						hosts: e.promptHosts
+					})) throw f("frame.fetch: the user did not grant this", "fetch");
+					return;
+				}
+				let t = e.kind === "consent" ? e.targetHost : await v(), r = g([t, ...a]);
+				if (!r.length) throw f("frame: navigate the frame before fetch", "fetch");
+				if (await b({
+					category: "network",
+					hosts: r
+				}) === !1) throw f(I("fetch", "network", t || null), "fetch");
+				return;
+			}
+			let S = await v();
+			if (!S) throw f(`frame: navigate the frame before ${e}`, e);
+			if (!y().includes(S)) throw f(P, e);
+			if (!l) return;
+			let w = s(o);
+			if (w === void 0 || x === "critical" && _.has(`${o} ${S}`)) return;
+			let T = g([S, ...a]), E = await b(x === "critical" ? {
+				key: o,
+				hosts: T,
+				attach: r
+			} : {
+				category: w,
+				hosts: T
+			});
+			if (E === !1) throw f(I(e, w, null), e);
+			if (E === "once" && i !== "ensure") for (let e of T) _.add(`${o} ${e}`);
+		},
+		requestCategories: async (e) => {
+			t();
+			let i = await v(), o = g(i ? [i, ...a] : a);
+			if (!o.length) throw TypeError("frame.request: navigate the frame or declare domains first");
+			let s = e.map((e) => {
+				let t = e.key;
+				return {
+					named: t,
+					critical: t !== void 0 && d(t) === "critical",
+					category: e.category ?? (t === void 0 ? void 0 : n(t)) ?? "interaction"
+				};
+			}), c = ({ named: e, critical: t, category: n }, r) => ({
+				category: n,
+				...t ? { key: e } : {},
+				hosts: o,
+				allow: r
+			});
+			if (!l) return te(), s.map((e) => c(e, !1));
+			let u = await l(s.map(({ named: e, critical: t, category: n }) => t ? {
+				key: e,
+				hosts: o,
+				attach: r
+			} : {
+				category: n,
+				hosts: o
+			}));
+			return s.map((e, t) => c(e, u[t] !== void 0 && u[t] !== !1));
+		}
+	};
+}, L = (e) => e, ie = 5e3, ae = /* @__PURE__ */ new Set([]), R = () => "https://fkn.app", z = (e) => e ? "" : `incognito-${crypto.randomUUID()}`, B = (e, t, n) => {
+	let r, i = new Promise((e, i) => {
+		r = setTimeout(() => i(Error(n)), t);
+	});
+	return Promise.race([e, i]).finally(() => clearTimeout(r));
+}, V = (e) => Object.assign(Error(e), { name: t }), H = ({ control: e, target: t, session: n, declaredHosts: r, approvedOrigins: i, attach: a, assertLive: o, guard: s, consent: l, onNavigated: u }) => {
+	let d = t, { gate: f, requestCategories: m } = re({
+		session: n,
+		declaredHosts: r,
+		approvedOrigins: i,
+		attach: a,
+		assertLive: o,
+		documentHost: typeof e.documentHost == "function" ? () => s(() => e.documentHost()) : void 0,
+		current: () => d,
+		...l
+	});
+	return c({
+		executor: {
+			execute: (t, n, r) => ae.has(n) ? Promise.reject(p(n, "cloud")) : (o(), s(() => e.executeLocator(t, n, r))),
+			highlight: async () => {}
+		},
+		gate: f,
+		request: m,
+		goto: async (t, n = {}) => {
+			let r = new URL(t, location.href).href;
+			o();
+			let { timeoutMs: a } = n, c = (() => {
+				try {
+					return new URL(r).origin;
+				} catch {
+					return "";
+				}
+			})(), l = c !== "" && !i.has(c);
+			l && i.add(c);
+			try {
+				await B(s(() => e.goto(r, n)), (a ?? 3e4) + ie, "cloud.attachFrame: the render proxy did not answer goto; the frame may have been detached or its page reloaded");
+			} catch (e) {
+				throw l && i.delete(c), e;
+			}
+			d = r, u();
+		},
+		url: () => d
+	});
+}, oe = 250, U = 500, W = 65e3, G = 2e3, K = 2e3, se = 2, ce = 2e3, le = 2e3, ue = ({ origin: e, target: t, session: n, domains: r, attach: i }) => {
+	let a = new URL("/attach-window", e);
+	return a.searchParams.set("attach", i), t && a.searchParams.set("url", t), n && a.searchParams.set("session", n), r.length && a.searchParams.set("domains", r.join(",")), a.href;
+}, de = (e, t) => {
+	let n = document.createElement("iframe"), r = new URL("/attach-jar", e);
+	return r.searchParams.set("attach", t), n.src = r.href, n.tabIndex = -1, n.setAttribute("aria-hidden", "true"), n.setAttribute("style", "display:none"), (document.body ?? document.documentElement).appendChild(n), n;
+}, fe = (e, t) => {
+	let n = new MutationObserver(() => {
+		e.isConnected || t.aborted || (n.disconnect(), console.warn("cloud.attachFrame: the window's jar anchor was removed from this page, so a sign-in in the window no longer reaches this app's cookie jar"));
+	});
+	e.parentNode && n.observe(e.parentNode, { childList: !0 }), n.observe(document.documentElement, { childList: !0 }), t.addEventListener("abort", () => n.disconnect(), { once: !0 });
+}, q = () => V("cloud.attachFrame: the attached window closed, reloaded or left the page FKN attached; attach a fresh window"), J = () => V("cloud.attachFrame: the attached window stopped answering; attach a fresh window"), pe = () => V("cloud.attachFrame: the window went away before it connected; attach a fresh window"), me = () => V("cloud.attachFrame: the window closed before it connected. Either the user closed it, or this page's Cross-Origin-Opener-Policy cut its link to the window"), he = async (e) => {
+	if (typeof window > "u") throw Error("cloud.attachFrame needs a window realm");
+	let { domains: t = [], syncCookies: n = !0, permissions: o } = e, { url: s, width: c, height: l } = u(e.window);
+	if (window.origin === "null") throw new a("opaque-opener");
+	let d = R(), f = crypto.randomUUID(), p = z(n), m = g(t), h = /* @__PURE__ */ new Set();
+	s && h.add(new URL(s).origin);
+	let _ = n ? de(d, f) : null, v = window.open(ue({
+		origin: d,
+		target: s,
+		session: p,
+		domains: m,
+		attach: f
+	}), "_blank", `popup,width=${c},height=${l}`);
+	if (!v) throw _?.remove(), new r();
+	let y = new AbortController(), b = !1, S = null, C = (e, t = !1) => {
+		if (S === null) {
+			S = e, y.abort(t ? J() : q());
+			try {
+				v.closed || v.postMessage({
+					type: E.detach,
+					attach: f,
+					...t ? { unanswered: t } : {}
+				}, d);
+			} catch {}
+			_ && setTimeout(() => _.remove(), le);
+		}
+	};
+	_ && fe(_, y.signal);
+	let w = new Promise((e, t) => {
+		y.signal.addEventListener("abort", () => t(y.signal.reason), { once: !0 });
+	});
+	w.catch(() => {});
+	let D = w.then(() => {}, () => {}), O = () => {
+		if (y.signal.aborted) throw y.signal.reason;
+	}, k = (e) => y.signal.aborted ? Promise.reject(y.signal.reason) : Promise.race([e(), w]), A = (e) => e.source === v && e.origin === d;
+	window.addEventListener("message", (e) => {
+		if (!A(e)) return;
+		let t = e.data;
+		typeof t == "object" && t && t.attach === f && (t.type === E.refused ? C(new a(t.reason)) : t.type === E.gone && C(b ? q() : pe()));
+	}, { signal: y.signal }), window.addEventListener("pagehide", () => C(q()), { signal: y.signal });
+	let j = () => {
+		try {
+			v.postMessage({
+				type: E.hello,
+				attach: f
+			}, d);
+		} catch {}
+	};
+	j();
+	let N = setInterval(j, oe), P = setInterval(() => {
+		v.closed && C(b ? q() : me());
+	}, U);
+	y.signal.addEventListener("abort", () => {
+		clearInterval(N), clearInterval(P);
+	}, { once: !0 });
+	let F = async (e) => {
+		try {
+			return await Promise.race([e, w]);
+		} catch (e) {
+			throw S ?? e;
+		}
+	};
+	try {
+		let e = await F(B(M({}, {
+			key: T,
+			transport: {
+				emit: (e, t) => v.postMessage(e, d, t ?? []),
+				receive: (e) => {
+					let t = (t) => {
+						A(t) && e(t.data, {
+							source: t.source,
+							origin: t.origin
+						});
+					};
+					return window.addEventListener("message", t), () => window.removeEventListener("message", t);
+				}
+			},
+			unregisterSignal: y.signal,
+			revivableModules: L(i)
+		}), ee, "cloud.attachFrame: timed out connecting to the window"));
+		b = !0, clearInterval(N);
+		let t = 0, n = setInterval(() => {
+			B(k(() => e.ping()), K, "ping").then(() => {
+				t = 0;
+			}, () => {
+				y.signal.aborted || (document.visibilityState === "hidden" ? t = 0 : ++t >= se && C(J(), !0));
+			});
+		}, G);
+		y.signal.addEventListener("abort", () => clearInterval(n), { once: !0 }), await F(B(e.ready(), W, "cloud.attachFrame: the window never became ready"));
+		let r = x("attached frame");
+		y.signal.aborted ? r() : y.signal.addEventListener("abort", r, { once: !0 });
+		let a = H({
+			control: e,
+			target: s,
+			session: p,
+			declaredHosts: m,
+			approvedOrigins: h,
+			attach: f,
+			assertLive: O,
+			guard: k,
+			consent: {
+				request: (t) => k(() => e.requestConsent(t)),
+				ensure: (t) => k(() => e.requestConsent([t])).then(([e]) => e !== void 0 && e !== !1)
+			},
+			onNavigated: () => {}
+		}), c = null, l = () => c ??= (async () => {
+			y.signal.aborted || await B(Promise.allSettled([k(() => e.flushCookies()), k(() => e.sweepStorage())]), ce, "close").catch(() => {});
+			try {
+				v.close();
+			} catch {}
+			C(q());
+		})(), u = {
+			...a,
+			close: l,
+			closed: D
+		};
+		return o?.length && await F(u.request(o)), u;
+	} catch (e) {
+		let t = S ?? e;
+		if (!(t instanceof a)) try {
+			v.close();
+		} catch {}
+		throw C(t), t;
+	}
+}, ge = "autoplay; fullscreen; encrypted-media; picture-in-picture; clipboard-read; clipboard-write", _e = 2e4, ve = 65e3, ye = (e) => !e || e === "about:blank", be = ({ target: e, session: t, domains: n, attach: r }) => {
+	let i = new URL("/attach-frame", R());
+	return e && i.searchParams.set("url", e), t && i.searchParams.set("session", t), n.length && i.searchParams.set("domains", n.join(",")), i.searchParams.set("attach", r), i.href;
+}, xe = (e, t) => {
+	let n = () => {
+		a(), t();
+	}, r = e.parentNode, i = new MutationObserver(() => {
+		(!e.isConnected || e.parentNode !== r) && (a(), t());
+	}), a = () => {
+		window.removeEventListener("pagehide", n), i.disconnect();
+	};
+	window.addEventListener("pagehide", n, { once: !0 }), r && i.observe(r, { childList: !0 }), e.isConnected || (a(), t());
+}, Se = () => V("cloud.attachFrame: the attached iframe left the document or was reloaded; attach a fresh iframe"), Ce = (e, t) => {
+	let n = [...e.split(";"), ...t.split(";")].map((e) => e.trim()).filter(Boolean);
+	return [...new Set(n)].join("; ");
+}, Y = [
+	300,
+	1200,
+	4e3
+], X = (e) => {
+	let t = () => {
+		if (!e.isConnected) return;
+		let t = e.style.height, n = e.getBoundingClientRect();
+		n.height && (e.style.height = `${n.height - 1}px`, setTimeout(() => {
+			e.style.height = t;
+		}, 50));
+	};
+	t();
+	for (let e of Y) setTimeout(t, e);
+}, we = (e) => {
+	let t = e.getAttribute("sandbox");
+	if (t === null) return;
+	let n = new Set(t.toLowerCase().split(/\s+/).filter(Boolean)), r = ["allow-scripts", "allow-same-origin"].filter((e) => !n.has(e));
+	if (r.length) throw Error(`cloud.attachFrame: the iframe's sandbox attribute must include ${r.join(" and ")} for the render proxy to load`);
+}, Te = async ({ iframe: e, domains: t = [], syncCookies: n = !0, lockdown: r = !1, permissions: a }) => {
+	if (typeof window > "u") throw Error("cloud.attachFrame needs a window realm");
+	if (r) throw Error("cloud.attachFrame does not support lockdown; use the extension backend for a sealed frame");
+	if (!e.isConnected) throw Error("cloud.attachFrame: the iframe must be connected to the document before attaching");
+	we(e);
+	let s = e.getAttribute("src") ?? "", c = (() => {
+		if (ye(s)) return null;
+		try {
+			return new URL(e.src || s, location.href);
+		} catch {
+			throw Error(`cloud.attachFrame: the iframe src is not a valid URL: ${s}`);
+		}
+	})();
+	if (c) {
+		let e = new URL("/attach-frame", R());
+		if (c.origin === e.origin && c.pathname === e.pathname) throw Error("cloud.attachFrame: this iframe is already attached; navigate with the Frame returned by that attach or use a fresh iframe");
+	}
+	let l = c?.href ?? "";
+	l && o(l);
+	let u = z(n), d = g(t), f = /* @__PURE__ */ new Set();
+	try {
+		f.add(new URL(l).origin);
+	} catch {}
+	let p = new AbortController(), m = e.referrerPolicy, h = e.allow, _ = crypto.randomUUID();
+	if (e.referrerPolicy = "origin", e.allow = Ce(ge, e.allow), e.src = be({
+		target: l,
+		session: u,
+		domains: d,
+		attach: _
+	}), !e.contentWindow) throw Error("cloud.attachFrame: the iframe window is not available");
+	try {
+		let t = await B(M({}, {
+			key: w,
+			origin: R(),
+			transport: {
+				receive: window,
+				emit: e.contentWindow
+			},
+			unregisterSignal: p.signal,
+			revivableModules: L(i)
+		}), _e, "cloud.attachFrame: timed out connecting to the render proxy page");
+		await B(t.ready(), ve, "cloud.attachFrame: the render proxy never became ready"), l && X(e), xe(e, () => p.abort());
+		let n = x("attached frame");
+		p.signal.aborted ? n() : p.signal.addEventListener("abort", n, { once: !0 });
+		let r = e.contentWindow, o = H({
+			control: t,
+			target: l,
+			session: u,
+			declaredHosts: d,
+			approvedOrigins: f,
+			attach: _,
+			assertLive: () => {
+				if (p.signal.aborted || !e.isConnected || e.contentWindow !== r) throw p.abort(), Se();
+			},
+			guard: (e) => e(),
+			consent: await N(),
+			onNavigated: () => X(e)
+		});
+		return a?.length && await o.request(a), o;
+	} catch (t) {
+		throw p.abort(), e.referrerPolicy = m, e.allow = h, e.src = l || "about:blank", t;
+	}
+}, Z = (async (e) => l(e) === "window" ? he(e) : Te(e)), Ee = () => typeof window < "u" && !0, Q = async () => {
+	let e = await _.then((e) => e.cloud.quota());
+	return {
+		premium: e.premium,
+		overQuota: e.overQuota,
+		throttled: e.overQuota && !e.premium,
+		usedBytes: e.usedBytes,
+		limitBytes: e.limitBytes,
+		remainingBytes: e.remaining,
+		bytesPerSecond: e.bytesPerSecond,
+		bitsPerSecond: e.bytesPerSecond * 8
+	};
+}, De = /* @__PURE__ */ e({
+	attachFrame: () => Z,
+	available: () => $,
+	dgram: () => A,
+	dns: () => D,
+	fetch: () => S,
+	fs: () => O,
+	http: () => j,
+	net: () => k,
+	quota: () => Q
+}), $ = () => v;
+//#endregion
+export { Ee as a, Z as i, De as n, Q as r, $ as t };

package/cloud-DCWD_0sd.cjs

@@ -0,0 +1 @@
+const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./lib-Cjd91q7g.cjs"),n=require("./hosts-DD4rDeQH.cjs"),r=require("./api-Djf-XdZ4.cjs"),i=require("./busy-Dv8wzE5M.cjs"),a=require("./proxy-CYcaW5ew.cjs"),o=require("./attach-policy.cjs"),s=require("./contract.cjs"),c=require("./dns.cjs"),l=require("./cloud/fs.cjs"),u=require("./net.cjs"),d=require("./dgram.cjs"),f=require("./http.cjs");let p=require("osra");var m=async()=>{let e=()=>r.o(`frame consent`);try{let t=await e();return{request:typeof t.frameConsent.request==`function`?t.frameConsent.request:void 0,ensure:t.frameConsent.ensure}}catch(t){if(!(t instanceof r.n))throw t;return{request:void 0,ensure:t=>e().then(e=>e.frameConsent.ensure(t))}}},h=`frame: this frame no longer holds the document the app attached it to`,g=!1,_=()=>{g||(g=!0,console.warn(`[fkn-frame] this FKN broker is too old to ask for permission categories, so nothing was asked for upfront and each capability is asked for as it is first used. Reloading the page picks up the current broker.`))},v=e=>[...e].flatMap(e=>{try{return[new URL(e).hostname]}catch{return[]}}),y=(e,t,n)=>n===null?`frame.${e}: the user did not grant ${t} here`:`frame.${e}: the user did not grant ${t} on ${n}`,b=e=>{let{assertLive:r,attach:i,current:a,declaredHosts:s,documentHost:c,ensure:l,request:u,session:d,approvedOrigins:f}=e,p=new Set,m=async()=>c?await c():(()=>{try{return new URL(a()).hostname}catch{return``}})(),g=()=>n.t([...s,...v(f)]),b=async e=>(await u([e]))[0]??!1;return{gate:async({operation:e,args:a,phase:c})=>{r();let _=n.f(e,a);if(_===null)return;let v=t.u(_);if(v===void 0||v===`auto`)return;if(e===`fetch`){let e=o.frameFetchVerdict({session:d,declaredHosts:s,approvedOrigins:f},c===`ensure`?void 0:a[0],{classifier:`fetchTarget`});if(c===`ensure`&&!d)throw t.w(e.kind===`refuse`?e.reason:``,`fetch`);if(c!==`ensure`&&e.kind===`refuse`)throw t.w(e.reason,`fetch`);if(!u){if(e.kind===`refuse`)throw t.w(e.reason,`fetch`);if(!await l({scope:n.s(a[0],a[1]).scope,hosts:e.promptHosts}))throw t.w(`frame.fetch: the user did not grant this`,`fetch`);return}let r=e.kind===`consent`?e.targetHost:await m(),i=n.t([r,...s]);if(!i.length)throw t.w(`frame: navigate the frame before fetch`,`fetch`);if(await b({category:`network`,hosts:i})===!1)throw t.w(y(`fetch`,`network`,r||null),`fetch`);return}let x=await m();if(!x)throw t.w(`frame: navigate the frame before ${e}`,e);if(!g().includes(x))throw t.w(h,e);if(!u)return;let S=t.l(_);if(S===void 0||v===`critical`&&p.has(`${_} ${x}`))return;let C=n.t([x,...s]),w=await b(v===`critical`?{key:_,hosts:C,attach:i}:{category:S,hosts:C});if(w===!1)throw t.w(y(e,S,null),e);if(w===`once`&&c!==`ensure`)for(let e of C)p.add(`${_} ${e}`)},requestCategories:async e=>{r();let a=await m(),o=n.t(a?[a,...s]:s);if(!o.length)throw TypeError(`frame.request: navigate the frame or declare domains first`);let c=e.map(e=>{let n=e.key;return{named:n,critical:n!==void 0&&t.u(n)===`critical`,category:e.category??(n===void 0?void 0:t.c(n))??`interaction`}}),l=({named:e,critical:t,category:n},r)=>({category:n,...t?{key:e}:{},hosts:o,allow:r});if(!u)return _(),c.map(e=>l(e,!1));let d=await u(c.map(({named:e,critical:t,category:n})=>t?{key:e,hosts:o,attach:i}:{category:n,hosts:o}));return c.map((e,t)=>l(e,d[t]!==void 0&&d[t]!==!1))}}},x=e=>e,S=5e3,C=new Set([]),w=()=>`https://fkn.app`,T=e=>e?``:`incognito-${crypto.randomUUID()}`,E=(e,t,n)=>{let r,i=new Promise((e,i)=>{r=setTimeout(()=>i(Error(n)),t)});return Promise.race([e,i]).finally(()=>clearTimeout(r))},D=e=>Object.assign(Error(e),{name:t.b}),O=({control:e,target:n,session:r,declaredHosts:i,approvedOrigins:a,attach:o,assertLive:s,guard:c,consent:l,onNavigated:u})=>{let d=n,{gate:f,requestCategories:p}=b({session:r,declaredHosts:i,approvedOrigins:a,attach:o,assertLive:s,documentHost:typeof e.documentHost==`function`?()=>c(()=>e.documentHost()):void 0,current:()=>d,...l});return t.m({executor:{execute:(n,r,i)=>C.has(r)?Promise.reject(t.x(r,`cloud`)):(s(),c(()=>e.executeLocator(n,r,i))),highlight:async()=>{}},gate:f,request:p,goto:async(t,n={})=>{let r=new URL(t,location.href).href;s();let{timeoutMs:i}=n,o=(()=>{try{return new URL(r).origin}catch{return``}})(),l=o!==``&&!a.has(o);l&&a.add(o);try{await E(c(()=>e.goto(r,n)),(i??3e4)+S,`cloud.attachFrame: the render proxy did not answer goto; the frame may have been detached or its page reloaded`)}catch(e){throw l&&a.delete(o),e}d=r,u()},url:()=>d})},ee=250,te=500,k=65e3,A=2e3,j=2e3,M=2,N=2e3,P=2e3,F=({origin:e,target:t,session:n,domains:r,attach:i})=>{let a=new URL(`/attach-window`,e);return a.searchParams.set(`attach`,i),t&&a.searchParams.set(`url`,t),n&&a.searchParams.set(`session`,n),r.length&&a.searchParams.set(`domains`,r.join(`,`)),a.href},I=(e,t)=>{let n=document.createElement(`iframe`),r=new URL(`/attach-jar`,e);return r.searchParams.set(`attach`,t),n.src=r.href,n.tabIndex=-1,n.setAttribute(`aria-hidden`,`true`),n.setAttribute(`style`,`display:none`),(document.body??document.documentElement).appendChild(n),n},L=(e,t)=>{let n=new MutationObserver(()=>{e.isConnected||t.aborted||(n.disconnect(),console.warn(`cloud.attachFrame: the window's jar anchor was removed from this page, so a sign-in in the window no longer reaches this app's cookie jar`))});e.parentNode&&n.observe(e.parentNode,{childList:!0}),n.observe(document.documentElement,{childList:!0}),t.addEventListener(`abort`,()=>n.disconnect(),{once:!0})},R=()=>D(`cloud.attachFrame: the attached window closed, reloaded or left the page FKN attached; attach a fresh window`),z=()=>D(`cloud.attachFrame: the attached window stopped answering; attach a fresh window`),B=()=>D(`cloud.attachFrame: the window went away before it connected; attach a fresh window`),V=()=>D(`cloud.attachFrame: the window closed before it connected. Either the user closed it, or this page's Cross-Origin-Opener-Policy cut its link to the window`),H=async e=>{if(typeof window>`u`)throw Error(`cloud.attachFrame needs a window realm`);let{domains:r=[],syncCookies:a=!0,permissions:o}=e,{url:c,width:l,height:u}=t.s(e.window);if(window.origin===`null`)throw new t.f(`opaque-opener`);let d=w(),f=crypto.randomUUID(),m=T(a),h=n.t(r),g=new Set;c&&g.add(new URL(c).origin);let _=a?I(d,f):null,v=window.open(F({origin:d,target:c,session:m,domains:h,attach:f}),`_blank`,`popup,width=${l},height=${u}`);if(!v)throw _?.remove(),new t.d;let y=new AbortController,b=!1,S=null,C=(e,t=!1)=>{if(S===null){S=e,y.abort(t?z():R());try{v.closed||v.postMessage({type:s.ATTACH_WINDOW_MESSAGE.detach,attach:f,...t?{unanswered:t}:{}},d)}catch{}_&&setTimeout(()=>_.remove(),P)}};_&&L(_,y.signal);let D=new Promise((e,t)=>{y.signal.addEventListener(`abort`,()=>t(y.signal.reason),{once:!0})});D.catch(()=>{});let H=D.then(()=>{},()=>{}),U=()=>{if(y.signal.aborted)throw y.signal.reason},W=e=>y.signal.aborted?Promise.reject(y.signal.reason):Promise.race([e(),D]),G=e=>e.source===v&&e.origin===d;window.addEventListener(`message`,e=>{if(!G(e))return;let n=e.data;typeof n==`object`&&n&&n.attach===f&&(n.type===s.ATTACH_WINDOW_MESSAGE.refused?C(new t.f(n.reason)):n.type===s.ATTACH_WINDOW_MESSAGE.gone&&C(b?R():B()))},{signal:y.signal}),window.addEventListener(`pagehide`,()=>C(R()),{signal:y.signal});let K=()=>{try{v.postMessage({type:s.ATTACH_WINDOW_MESSAGE.hello,attach:f},d)}catch{}};K();let q=setInterval(K,ee),J=setInterval(()=>{v.closed&&C(b?R():V())},te);y.signal.addEventListener(`abort`,()=>{clearInterval(q),clearInterval(J)},{once:!0});let Y=async e=>{try{return await Promise.race([e,D])}catch(e){throw S??e}};try{let e=await Y(E((0,p.expose)({},{key:s.ATTACH_WINDOW_KEY,transport:{emit:(e,t)=>v.postMessage(e,d,t??[]),receive:e=>{let t=t=>{G(t)&&e(t.data,{source:t.source,origin:t.origin})};return window.addEventListener(`message`,t),()=>window.removeEventListener(`message`,t)}},unregisterSignal:y.signal,revivableModules:x(t.et)}),s.WINDOW_HANDSHAKE_TIMEOUT_MS,`cloud.attachFrame: timed out connecting to the window`));b=!0,clearInterval(q);let n=0,r=setInterval(()=>{E(W(()=>e.ping()),j,`ping`).then(()=>{n=0},()=>{y.signal.aborted||(document.visibilityState===`hidden`?n=0:++n>=M&&C(z(),!0))})},A);y.signal.addEventListener(`abort`,()=>clearInterval(r),{once:!0}),await Y(E(e.ready(),k,`cloud.attachFrame: the window never became ready`));let a=i.t(`attached frame`);y.signal.aborted?a():y.signal.addEventListener(`abort`,a,{once:!0});let l=O({control:e,target:c,session:m,declaredHosts:h,approvedOrigins:g,attach:f,assertLive:U,guard:W,consent:{request:t=>W(()=>e.requestConsent(t)),ensure:t=>W(()=>e.requestConsent([t])).then(([e])=>e!==void 0&&e!==!1)},onNavigated:()=>{}}),u=null,_=()=>u??=(async()=>{y.signal.aborted||await E(Promise.allSettled([W(()=>e.flushCookies()),W(()=>e.sweepStorage())]),N,`close`).catch(()=>{});try{v.close()}catch{}C(R())})(),S={...l,close:_,closed:H};return o?.length&&await Y(S.request(o)),S}catch(e){let n=S??e;if(!(n instanceof t.f))try{v.close()}catch{}throw C(n),n}},U=`autoplay; fullscreen; encrypted-media; picture-in-picture; clipboard-read; clipboard-write`,W=2e4,G=65e3,K=e=>!e||e===`about:blank`,q=({target:e,session:t,domains:n,attach:r})=>{let i=new URL(`/attach-frame`,w());return e&&i.searchParams.set(`url`,e),t&&i.searchParams.set(`session`,t),n.length&&i.searchParams.set(`domains`,n.join(`,`)),i.searchParams.set(`attach`,r),i.href},J=(e,t)=>{let n=()=>{a(),t()},r=e.parentNode,i=new MutationObserver(()=>{(!e.isConnected||e.parentNode!==r)&&(a(),t())}),a=()=>{window.removeEventListener(`pagehide`,n),i.disconnect()};window.addEventListener(`pagehide`,n,{once:!0}),r&&i.observe(r,{childList:!0}),e.isConnected||(a(),t())},Y=()=>D(`cloud.attachFrame: the attached iframe left the document or was reloaded; attach a fresh iframe`),ne=(e,t)=>{let n=[...e.split(`;`),...t.split(`;`)].map(e=>e.trim()).filter(Boolean);return[...new Set(n)].join(`; `)},re=[300,1200,4e3],X=e=>{let t=()=>{if(!e.isConnected)return;let t=e.style.height,n=e.getBoundingClientRect();n.height&&(e.style.height=`${n.height-1}px`,setTimeout(()=>{e.style.height=t},50))};t();for(let e of re)setTimeout(t,e)},ie=e=>{let t=e.getAttribute(`sandbox`);if(t===null)return;let n=new Set(t.toLowerCase().split(/\s+/).filter(Boolean)),r=[`allow-scripts`,`allow-same-origin`].filter(e=>!n.has(e));if(r.length)throw Error(`cloud.attachFrame: the iframe's sandbox attribute must include ${r.join(` and `)} for the render proxy to load`)},ae=async({iframe:e,domains:r=[],syncCookies:a=!0,lockdown:o=!1,permissions:c})=>{if(typeof window>`u`)throw Error(`cloud.attachFrame needs a window realm`);if(o)throw Error(`cloud.attachFrame does not support lockdown; use the extension backend for a sealed frame`);if(!e.isConnected)throw Error(`cloud.attachFrame: the iframe must be connected to the document before attaching`);ie(e);let l=e.getAttribute(`src`)??``,u=(()=>{if(K(l))return null;try{return new URL(e.src||l,location.href)}catch{throw Error(`cloud.attachFrame: the iframe src is not a valid URL: ${l}`)}})();if(u){let e=new URL(`/attach-frame`,w());if(u.origin===e.origin&&u.pathname===e.pathname)throw Error(`cloud.attachFrame: this iframe is already attached; navigate with the Frame returned by that attach or use a fresh iframe`)}let d=u?.href??``;d&&t.g(d);let f=T(a),h=n.t(r),g=new Set;try{g.add(new URL(d).origin)}catch{}let _=new AbortController,v=e.referrerPolicy,y=e.allow,b=crypto.randomUUID();if(e.referrerPolicy=`origin`,e.allow=ne(U,e.allow),e.src=q({target:d,session:f,domains:h,attach:b}),!e.contentWindow)throw Error(`cloud.attachFrame: the iframe window is not available`);try{let n=await E((0,p.expose)({},{key:s.ATTACH_FRAME_KEY,origin:w(),transport:{receive:window,emit:e.contentWindow},unregisterSignal:_.signal,revivableModules:x(t.et)}),W,`cloud.attachFrame: timed out connecting to the render proxy page`);await E(n.ready(),G,`cloud.attachFrame: the render proxy never became ready`),d&&X(e),J(e,()=>_.abort());let r=i.t(`attached frame`);_.signal.aborted?r():_.signal.addEventListener(`abort`,r,{once:!0});let a=e.contentWindow,o=O({control:n,target:d,session:f,declaredHosts:h,approvedOrigins:g,attach:b,assertLive:()=>{if(_.signal.aborted||!e.isConnected||e.contentWindow!==a)throw _.abort(),Y()},guard:e=>e(),consent:await m(),onNavigated:()=>X(e)});return c?.length&&await o.request(c),o}catch(t){throw _.abort(),e.referrerPolicy=v,e.allow=y,e.src=d||`about:blank`,t}},Z=(async e=>t.o(e)===`window`?H(e):ae(e)),oe=()=>typeof window<`u`&&!0,Q=async()=>{let e=await r.a.then(e=>e.cloud.quota());return{premium:e.premium,overQuota:e.overQuota,throttled:e.overQuota&&!e.premium,usedBytes:e.usedBytes,limitBytes:e.limitBytes,remainingBytes:e.remaining,bytesPerSecond:e.bytesPerSecond,bitsPerSecond:e.bytesPerSecond*8}},se=e.t({attachFrame:()=>Z,available:()=>$,dgram:()=>d.t,dns:()=>c.t,fetch:()=>a.t,fs:()=>l.t,http:()=>f.t,net:()=>u.t,quota:()=>Q}),$=()=>r.c;Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return oe}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return Z}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return se}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return Q}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return $}});

package/{cloud-D0Ebu5bX.d.ts → cloud-DxitkM7z.d.ts}

@@ -1,12 +1,16 @@
-import { t as cloudFetch } from "./proxy-DxiJU5Y_.js";
-import { i as Frame, r as AttachFrameOptions } from "./index-DH3_12nU.js";
+import { r as AttachFrameFunction } from "./index-C_Lqta5o.js";
+import { t as cloudFetch } from "./proxy-Bmb2wxG1.js";
 import { t as dns_d_exports } from "./dns.js";
-import { n as fs_d_exports } from "./fs-CYcErwc4.js";
-import { s as net_d_exports } from "./net-BXPEJToS.js";
+import { n as fs_d_exports } from "./fs--NhtUyYa.js";
+import { s as net_d_exports } from "./net-0SlODFSM.js";
 import { t as dgram_d_exports } from "./dgram.js";
 import { t as http_d_exports } from "./http.js";
 //#region src/cloud/frame.d.ts
-declare const attachFrame: ({ iframe, domains, syncCookies, lockdown }: AttachFrameOptions) => Promise<Frame>;
+/**
+ * Attaches the render proxy to an iframe the app mounted, or opens it in a window of its own with
+ * `{ window }`. A window opens before the first await, so call this directly in a click handler.
+ */
+declare const attachFrame: AttachFrameFunction;
 //#endregion
 //#region src/quota.d.ts
 type QuotaStatus = {

package/cloud.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./proxy-DexG-Wmk.cjs"),t=require("./cloud-BZmduWyX.cjs"),n=require("./dns.cjs"),r=require("./cloud/fs.cjs"),i=require("./net.cjs"),a=require("./dgram.cjs"),o=require("./http.cjs");exports.attachFrame=t.i,exports.available=t.t,Object.defineProperty(exports,"dgram",{enumerable:!0,get:function(){return a.t}}),Object.defineProperty(exports,"dns",{enumerable:!0,get:function(){return n.t}}),exports.fetch=e.t,Object.defineProperty(exports,"fs",{enumerable:!0,get:function(){return r.t}}),Object.defineProperty(exports,"http",{enumerable:!0,get:function(){return o.t}}),Object.defineProperty(exports,"net",{enumerable:!0,get:function(){return i.t}}),exports.quota=t.r;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./proxy-CYcaW5ew.cjs"),t=require("./cloud-DCWD_0sd.cjs"),n=require("./dns.cjs"),r=require("./cloud/fs.cjs"),i=require("./net.cjs"),a=require("./dgram.cjs"),o=require("./http.cjs");exports.attachFrame=t.i,exports.available=t.t,Object.defineProperty(exports,"dgram",{enumerable:!0,get:function(){return a.t}}),Object.defineProperty(exports,"dns",{enumerable:!0,get:function(){return n.t}}),exports.fetch=e.t,Object.defineProperty(exports,"fs",{enumerable:!0,get:function(){return r.t}}),Object.defineProperty(exports,"http",{enumerable:!0,get:function(){return o.t}}),Object.defineProperty(exports,"net",{enumerable:!0,get:function(){return i.t}}),exports.quota=t.r;

package/cloud.d.ts

@@ -1,8 +1,8 @@
-import { t as cloudFetch } from "./proxy-DxiJU5Y_.js";
-import { a as attachFrame, i as quota, r as QuotaStatus, t as available } from "./cloud-D0Ebu5bX.js";
+import { t as cloudFetch } from "./proxy-Bmb2wxG1.js";
+import { a as attachFrame, i as quota, r as QuotaStatus, t as available } from "./cloud-DxitkM7z.js";
 import { t as dns_d_exports } from "./dns.js";
-import { n as fs_d_exports } from "./fs-CYcErwc4.js";
-import { s as net_d_exports } from "./net-BXPEJToS.js";
+import { n as fs_d_exports } from "./fs--NhtUyYa.js";
+import { s as net_d_exports } from "./net-0SlODFSM.js";
 import { t as dgram_d_exports } from "./dgram.js";
 import { t as http_d_exports } from "./http.js";
 export { type QuotaStatus, attachFrame, available, dgram_d_exports as dgram, dns_d_exports as dns, cloudFetch as fetch, fs_d_exports as fs, http_d_exports as http, net_d_exports as net, quota };

package/cloud.js

@@ -1,5 +1,5 @@
-import { t as e } from "./proxy-VY0HRl2E.js";
-import { i as t, r as n, t as r } from "./cloud-DaVb11IV.js";
+import { t as e } from "./proxy-DDwY3AVG.js";
+import { i as t, r as n, t as r } from "./cloud-B9Sd7V1g.js";
 import { t as i } from "./dns.js";
 import { t as a } from "./cloud/fs.js";
 import { t as o } from "./net.js";