@fkn/lib 0.9.34 → 0.9.35

package/cloud-B9Sd7V1g.js

@@ -0,0 +1,422 @@
+import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
+import { b as t, c as n, d as r, et as i, f as a, g as o, l as s, m as c, o as l, s as u, u as d, w as f, x as p } from "./lib-B-jGWfsv.js";
+import { f as m, s as h, t as g } from "./hosts-C4-8lWwz.js";
+import { a as _, c as v, n as y, o as b } from "./api-CtiKFcK3.js";
+import { t as x } from "./busy-B189uX--.js";
+import { t as S } from "./proxy-DDwY3AVG.js";
+import { frameFetchVerdict as C } from "./attach-policy.js";
+import { ATTACH_FRAME_KEY as w, ATTACH_WINDOW_KEY as T, ATTACH_WINDOW_MESSAGE as E, WINDOW_HANDSHAKE_TIMEOUT_MS as ee } from "./contract.js";
+import { t as D } from "./dns.js";
+import { t as O } from "./cloud/fs.js";
+import { t as k } from "./net.js";
+import { t as A } from "./dgram.js";
+import { t as j } from "./http.js";
+import { expose as M } from "osra";
+//#region src/cloud/frame-broker.ts
+var N = async () => {
+	let e = () => b("frame consent");
+	try {
+		let t = await e();
+		return {
+			request: typeof t.frameConsent.request == "function" ? t.frameConsent.request : void 0,
+			ensure: t.frameConsent.ensure
+		};
+	} catch (t) {
+		if (!(t instanceof y)) throw t;
+		return {
+			request: void 0,
+			ensure: (t) => e().then((e) => e.frameConsent.ensure(t))
+		};
+	}
+}, P = "frame: this frame no longer holds the document the app attached it to", F = !1, te = () => {
+	F || (F = !0, console.warn("[fkn-frame] this FKN broker is too old to ask for permission categories, so nothing was asked for upfront and each capability is asked for as it is first used. Reloading the page picks up the current broker."));
+}, ne = (e) => [...e].flatMap((e) => {
+	try {
+		return [new URL(e).hostname];
+	} catch {
+		return [];
+	}
+}), I = (e, t, n) => n === null ? `frame.${e}: the user did not grant ${t} here` : `frame.${e}: the user did not grant ${t} on ${n}`, re = (e) => {
+	let { assertLive: t, attach: r, current: i, declaredHosts: a, documentHost: o, ensure: c, request: l, session: u, approvedOrigins: p } = e, _ = /* @__PURE__ */ new Set(), v = async () => o ? await o() : (() => {
+		try {
+			return new URL(i()).hostname;
+		} catch {
+			return "";
+		}
+	})(), y = () => g([...a, ...ne(p)]), b = async (e) => (await l([e]))[0] ?? !1;
+	return {
+		gate: async ({ operation: e, args: n, phase: i }) => {
+			t();
+			let o = m(e, n);
+			if (o === null) return;
+			let x = d(o);
+			if (x === void 0 || x === "auto") return;
+			if (e === "fetch") {
+				let e = C({
+					session: u,
+					declaredHosts: a,
+					approvedOrigins: p
+				}, i === "ensure" ? void 0 : n[0], { classifier: "fetchTarget" });
+				if (i === "ensure" && !u) throw f(e.kind === "refuse" ? e.reason : "", "fetch");
+				if (i !== "ensure" && e.kind === "refuse") throw f(e.reason, "fetch");
+				if (!l) {
+					if (e.kind === "refuse") throw f(e.reason, "fetch");
+					if (!await c({
+						scope: h(n[0], n[1]).scope,
+						hosts: e.promptHosts
+					})) throw f("frame.fetch: the user did not grant this", "fetch");
+					return;
+				}
+				let t = e.kind === "consent" ? e.targetHost : await v(), r = g([t, ...a]);
+				if (!r.length) throw f("frame: navigate the frame before fetch", "fetch");
+				if (await b({
+					category: "network",
+					hosts: r
+				}) === !1) throw f(I("fetch", "network", t || null), "fetch");
+				return;
+			}
+			let S = await v();
+			if (!S) throw f(`frame: navigate the frame before ${e}`, e);
+			if (!y().includes(S)) throw f(P, e);
+			if (!l) return;
+			let w = s(o);
+			if (w === void 0 || x === "critical" && _.has(`${o} ${S}`)) return;
+			let T = g([S, ...a]), E = await b(x === "critical" ? {
+				key: o,
+				hosts: T,
+				attach: r
+			} : {
+				category: w,
+				hosts: T
+			});
+			if (E === !1) throw f(I(e, w, null), e);
+			if (E === "once" && i !== "ensure") for (let e of T) _.add(`${o} ${e}`);
+		},
+		requestCategories: async (e) => {
+			t();
+			let i = await v(), o = g(i ? [i, ...a] : a);
+			if (!o.length) throw TypeError("frame.request: navigate the frame or declare domains first");
+			let s = e.map((e) => {
+				let t = e.key;
+				return {
+					named: t,
+					critical: t !== void 0 && d(t) === "critical",
+					category: e.category ?? (t === void 0 ? void 0 : n(t)) ?? "interaction"
+				};
+			}), c = ({ named: e, critical: t, category: n }, r) => ({
+				category: n,
+				...t ? { key: e } : {},
+				hosts: o,
+				allow: r
+			});
+			if (!l) return te(), s.map((e) => c(e, !1));
+			let u = await l(s.map(({ named: e, critical: t, category: n }) => t ? {
+				key: e,
+				hosts: o,
+				attach: r
+			} : {
+				category: n,
+				hosts: o
+			}));
+			return s.map((e, t) => c(e, u[t] !== void 0 && u[t] !== !1));
+		}
+	};
+}, L = (e) => e, ie = 5e3, ae = /* @__PURE__ */ new Set([]), R = () => "https://fkn.app", z = (e) => e ? "" : `incognito-${crypto.randomUUID()}`, B = (e, t, n) => {
+	let r, i = new Promise((e, i) => {
+		r = setTimeout(() => i(Error(n)), t);
+	});
+	return Promise.race([e, i]).finally(() => clearTimeout(r));
+}, V = (e) => Object.assign(Error(e), { name: t }), H = ({ control: e, target: t, session: n, declaredHosts: r, approvedOrigins: i, attach: a, assertLive: o, guard: s, consent: l, onNavigated: u }) => {
+	let d = t, { gate: f, requestCategories: m } = re({
+		session: n,
+		declaredHosts: r,
+		approvedOrigins: i,
+		attach: a,
+		assertLive: o,
+		documentHost: typeof e.documentHost == "function" ? () => s(() => e.documentHost()) : void 0,
+		current: () => d,
+		...l
+	});
+	return c({
+		executor: {
+			execute: (t, n, r) => ae.has(n) ? Promise.reject(p(n, "cloud")) : (o(), s(() => e.executeLocator(t, n, r))),
+			highlight: async () => {}
+		},
+		gate: f,
+		request: m,
+		goto: async (t, n = {}) => {
+			let r = new URL(t, location.href).href;
+			o();
+			let { timeoutMs: a } = n, c = (() => {
+				try {
+					return new URL(r).origin;
+				} catch {
+					return "";
+				}
+			})(), l = c !== "" && !i.has(c);
+			l && i.add(c);
+			try {
+				await B(s(() => e.goto(r, n)), (a ?? 3e4) + ie, "cloud.attachFrame: the render proxy did not answer goto; the frame may have been detached or its page reloaded");
+			} catch (e) {
+				throw l && i.delete(c), e;
+			}
+			d = r, u();
+		},
+		url: () => d
+	});
+}, oe = 250, U = 500, W = 65e3, G = 2e3, K = 2e3, se = 2, ce = 2e3, le = 2e3, ue = ({ origin: e, target: t, session: n, domains: r, attach: i }) => {
+	let a = new URL("/attach-window", e);
+	return a.searchParams.set("attach", i), t && a.searchParams.set("url", t), n && a.searchParams.set("session", n), r.length && a.searchParams.set("domains", r.join(",")), a.href;
+}, de = (e, t) => {
+	let n = document.createElement("iframe"), r = new URL("/attach-jar", e);
+	return r.searchParams.set("attach", t), n.src = r.href, n.tabIndex = -1, n.setAttribute("aria-hidden", "true"), n.setAttribute("style", "display:none"), (document.body ?? document.documentElement).appendChild(n), n;
+}, fe = (e, t) => {
+	let n = new MutationObserver(() => {
+		e.isConnected || t.aborted || (n.disconnect(), console.warn("cloud.attachFrame: the window's jar anchor was removed from this page, so a sign-in in the window no longer reaches this app's cookie jar"));
+	});
+	e.parentNode && n.observe(e.parentNode, { childList: !0 }), n.observe(document.documentElement, { childList: !0 }), t.addEventListener("abort", () => n.disconnect(), { once: !0 });
+}, q = () => V("cloud.attachFrame: the attached window closed, reloaded or left the page FKN attached; attach a fresh window"), J = () => V("cloud.attachFrame: the attached window stopped answering; attach a fresh window"), pe = () => V("cloud.attachFrame: the window went away before it connected; attach a fresh window"), me = () => V("cloud.attachFrame: the window closed before it connected. Either the user closed it, or this page's Cross-Origin-Opener-Policy cut its link to the window"), he = async (e) => {
+	if (typeof window > "u") throw Error("cloud.attachFrame needs a window realm");
+	let { domains: t = [], syncCookies: n = !0, permissions: o } = e, { url: s, width: c, height: l } = u(e.window);
+	if (window.origin === "null") throw new a("opaque-opener");
+	let d = R(), f = crypto.randomUUID(), p = z(n), m = g(t), h = /* @__PURE__ */ new Set();
+	s && h.add(new URL(s).origin);
+	let _ = n ? de(d, f) : null, v = window.open(ue({
+		origin: d,
+		target: s,
+		session: p,
+		domains: m,
+		attach: f
+	}), "_blank", `popup,width=${c},height=${l}`);
+	if (!v) throw _?.remove(), new r();
+	let y = new AbortController(), b = !1, S = null, C = (e, t = !1) => {
+		if (S === null) {
+			S = e, y.abort(t ? J() : q());
+			try {
+				v.closed || v.postMessage({
+					type: E.detach,
+					attach: f,
+					...t ? { unanswered: t } : {}
+				}, d);
+			} catch {}
+			_ && setTimeout(() => _.remove(), le);
+		}
+	};
+	_ && fe(_, y.signal);
+	let w = new Promise((e, t) => {
+		y.signal.addEventListener("abort", () => t(y.signal.reason), { once: !0 });
+	});
+	w.catch(() => {});
+	let D = w.then(() => {}, () => {}), O = () => {
+		if (y.signal.aborted) throw y.signal.reason;
+	}, k = (e) => y.signal.aborted ? Promise.reject(y.signal.reason) : Promise.race([e(), w]), A = (e) => e.source === v && e.origin === d;
+	window.addEventListener("message", (e) => {
+		if (!A(e)) return;
+		let t = e.data;
+		typeof t == "object" && t && t.attach === f && (t.type === E.refused ? C(new a(t.reason)) : t.type === E.gone && C(b ? q() : pe()));
+	}, { signal: y.signal }), window.addEventListener("pagehide", () => C(q()), { signal: y.signal });
+	let j = () => {
+		try {
+			v.postMessage({
+				type: E.hello,
+				attach: f
+			}, d);
+		} catch {}
+	};
+	j();
+	let N = setInterval(j, oe), P = setInterval(() => {
+		v.closed && C(b ? q() : me());
+	}, U);
+	y.signal.addEventListener("abort", () => {
+		clearInterval(N), clearInterval(P);
+	}, { once: !0 });
+	let F = async (e) => {
+		try {
+			return await Promise.race([e, w]);
+		} catch (e) {
+			throw S ?? e;
+		}
+	};
+	try {
+		let e = await F(B(M({}, {
+			key: T,
+			transport: {
+				emit: (e, t) => v.postMessage(e, d, t ?? []),
+				receive: (e) => {
+					let t = (t) => {
+						A(t) && e(t.data, {
+							source: t.source,
+							origin: t.origin
+						});
+					};
+					return window.addEventListener("message", t), () => window.removeEventListener("message", t);
+				}
+			},
+			unregisterSignal: y.signal,
+			revivableModules: L(i)
+		}), ee, "cloud.attachFrame: timed out connecting to the window"));
+		b = !0, clearInterval(N);
+		let t = 0, n = setInterval(() => {
+			B(k(() => e.ping()), K, "ping").then(() => {
+				t = 0;
+			}, () => {
+				y.signal.aborted || (document.visibilityState === "hidden" ? t = 0 : ++t >= se && C(J(), !0));
+			});
+		}, G);
+		y.signal.addEventListener("abort", () => clearInterval(n), { once: !0 }), await F(B(e.ready(), W, "cloud.attachFrame: the window never became ready"));
+		let r = x("attached frame");
+		y.signal.aborted ? r() : y.signal.addEventListener("abort", r, { once: !0 });
+		let a = H({
+			control: e,
+			target: s,
+			session: p,
+			declaredHosts: m,
+			approvedOrigins: h,
+			attach: f,
+			assertLive: O,
+			guard: k,
+			consent: {
+				request: (t) => k(() => e.requestConsent(t)),
+				ensure: (t) => k(() => e.requestConsent([t])).then(([e]) => e !== void 0 && e !== !1)
+			},
+			onNavigated: () => {}
+		}), c = null, l = () => c ??= (async () => {
+			y.signal.aborted || await B(Promise.allSettled([k(() => e.flushCookies()), k(() => e.sweepStorage())]), ce, "close").catch(() => {});
+			try {
+				v.close();
+			} catch {}
+			C(q());
+		})(), u = {
+			...a,
+			close: l,
+			closed: D
+		};
+		return o?.length && await F(u.request(o)), u;
+	} catch (e) {
+		let t = S ?? e;
+		if (!(t instanceof a)) try {
+			v.close();
+		} catch {}
+		throw C(t), t;
+	}
+}, ge = "autoplay; fullscreen; encrypted-media; picture-in-picture; clipboard-read; clipboard-write", _e = 2e4, ve = 65e3, ye = (e) => !e || e === "about:blank", be = ({ target: e, session: t, domains: n, attach: r }) => {
+	let i = new URL("/attach-frame", R());
+	return e && i.searchParams.set("url", e), t && i.searchParams.set("session", t), n.length && i.searchParams.set("domains", n.join(",")), i.searchParams.set("attach", r), i.href;
+}, xe = (e, t) => {
+	let n = () => {
+		a(), t();
+	}, r = e.parentNode, i = new MutationObserver(() => {
+		(!e.isConnected || e.parentNode !== r) && (a(), t());
+	}), a = () => {
+		window.removeEventListener("pagehide", n), i.disconnect();
+	};
+	window.addEventListener("pagehide", n, { once: !0 }), r && i.observe(r, { childList: !0 }), e.isConnected || (a(), t());
+}, Se = () => V("cloud.attachFrame: the attached iframe left the document or was reloaded; attach a fresh iframe"), Ce = (e, t) => {
+	let n = [...e.split(";"), ...t.split(";")].map((e) => e.trim()).filter(Boolean);
+	return [...new Set(n)].join("; ");
+}, Y = [
+	300,
+	1200,
+	4e3
+], X = (e) => {
+	let t = () => {
+		if (!e.isConnected) return;
+		let t = e.style.height, n = e.getBoundingClientRect();
+		n.height && (e.style.height = `${n.height - 1}px`, setTimeout(() => {
+			e.style.height = t;
+		}, 50));
+	};
+	t();
+	for (let e of Y) setTimeout(t, e);
+}, we = (e) => {
+	let t = e.getAttribute("sandbox");
+	if (t === null) return;
+	let n = new Set(t.toLowerCase().split(/\s+/).filter(Boolean)), r = ["allow-scripts", "allow-same-origin"].filter((e) => !n.has(e));
+	if (r.length) throw Error(`cloud.attachFrame: the iframe's sandbox attribute must include ${r.join(" and ")} for the render proxy to load`);
+}, Te = async ({ iframe: e, domains: t = [], syncCookies: n = !0, lockdown: r = !1, permissions: a }) => {
+	if (typeof window > "u") throw Error("cloud.attachFrame needs a window realm");
+	if (r) throw Error("cloud.attachFrame does not support lockdown; use the extension backend for a sealed frame");
+	if (!e.isConnected) throw Error("cloud.attachFrame: the iframe must be connected to the document before attaching");
+	we(e);
+	let s = e.getAttribute("src") ?? "", c = (() => {
+		if (ye(s)) return null;
+		try {
+			return new URL(e.src || s, location.href);
+		} catch {
+			throw Error(`cloud.attachFrame: the iframe src is not a valid URL: ${s}`);
+		}
+	})();
+	if (c) {
+		let e = new URL("/attach-frame", R());
+		if (c.origin === e.origin && c.pathname === e.pathname) throw Error("cloud.attachFrame: this iframe is already attached; navigate with the Frame returned by that attach or use a fresh iframe");
+	}
+	let l = c?.href ?? "";
+	l && o(l);
+	let u = z(n), d = g(t), f = /* @__PURE__ */ new Set();
+	try {
+		f.add(new URL(l).origin);
+	} catch {}
+	let p = new AbortController(), m = e.referrerPolicy, h = e.allow, _ = crypto.randomUUID();
+	if (e.referrerPolicy = "origin", e.allow = Ce(ge, e.allow), e.src = be({
+		target: l,
+		session: u,
+		domains: d,
+		attach: _
+	}), !e.contentWindow) throw Error("cloud.attachFrame: the iframe window is not available");
+	try {
+		let t = await B(M({}, {
+			key: w,
+			origin: R(),
+			transport: {
+				receive: window,
+				emit: e.contentWindow
+			},
+			unregisterSignal: p.signal,
+			revivableModules: L(i)
+		}), _e, "cloud.attachFrame: timed out connecting to the render proxy page");
+		await B(t.ready(), ve, "cloud.attachFrame: the render proxy never became ready"), l && X(e), xe(e, () => p.abort());
+		let n = x("attached frame");
+		p.signal.aborted ? n() : p.signal.addEventListener("abort", n, { once: !0 });
+		let r = e.contentWindow, o = H({
+			control: t,
+			target: l,
+			session: u,
+			declaredHosts: d,
+			approvedOrigins: f,
+			attach: _,
+			assertLive: () => {
+				if (p.signal.aborted || !e.isConnected || e.contentWindow !== r) throw p.abort(), Se();
+			},
+			guard: (e) => e(),
+			consent: await N(),
+			onNavigated: () => X(e)
+		});
+		return a?.length && await o.request(a), o;
+	} catch (t) {
+		throw p.abort(), e.referrerPolicy = m, e.allow = h, e.src = l || "about:blank", t;
+	}
+}, Z = (async (e) => l(e) === "window" ? he(e) : Te(e)), Ee = () => typeof window < "u" && !0, Q = async () => {
+	let e = await _.then((e) => e.cloud.quota());
+	return {
+		premium: e.premium,
+		overQuota: e.overQuota,
+		throttled: e.overQuota && !e.premium,
+		usedBytes: e.usedBytes,
+		limitBytes: e.limitBytes,
+		remainingBytes: e.remaining,
+		bytesPerSecond: e.bytesPerSecond,
+		bitsPerSecond: e.bytesPerSecond * 8
+	};
+}, De = /* @__PURE__ */ e({
+	attachFrame: () => Z,
+	available: () => $,
+	dgram: () => A,
+	dns: () => D,
+	fetch: () => S,
+	fs: () => O,
+	http: () => j,
+	net: () => k,
+	quota: () => Q
+}), $ = () => v;
+//#endregion
+export { Ee as a, Z as i, De as n, Q as r, $ as t };

package/cloud-DCWD_0sd.cjs

@@ -0,0 +1 @@
+const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./lib-Cjd91q7g.cjs"),n=require("./hosts-DD4rDeQH.cjs"),r=require("./api-Djf-XdZ4.cjs"),i=require("./busy-Dv8wzE5M.cjs"),a=require("./proxy-CYcaW5ew.cjs"),o=require("./attach-policy.cjs"),s=require("./contract.cjs"),c=require("./dns.cjs"),l=require("./cloud/fs.cjs"),u=require("./net.cjs"),d=require("./dgram.cjs"),f=require("./http.cjs");let p=require("osra");var m=async()=>{let e=()=>r.o(`frame consent`);try{let t=await e();return{request:typeof t.frameConsent.request==`function`?t.frameConsent.request:void 0,ensure:t.frameConsent.ensure}}catch(t){if(!(t instanceof r.n))throw t;return{request:void 0,ensure:t=>e().then(e=>e.frameConsent.ensure(t))}}},h=`frame: this frame no longer holds the document the app attached it to`,g=!1,_=()=>{g||(g=!0,console.warn(`[fkn-frame] this FKN broker is too old to ask for permission categories, so nothing was asked for upfront and each capability is asked for as it is first used. Reloading the page picks up the current broker.`))},v=e=>[...e].flatMap(e=>{try{return[new URL(e).hostname]}catch{return[]}}),y=(e,t,n)=>n===null?`frame.${e}: the user did not grant ${t} here`:`frame.${e}: the user did not grant ${t} on ${n}`,b=e=>{let{assertLive:r,attach:i,current:a,declaredHosts:s,documentHost:c,ensure:l,request:u,session:d,approvedOrigins:f}=e,p=new Set,m=async()=>c?await c():(()=>{try{return new URL(a()).hostname}catch{return``}})(),g=()=>n.t([...s,...v(f)]),b=async e=>(await u([e]))[0]??!1;return{gate:async({operation:e,args:a,phase:c})=>{r();let _=n.f(e,a);if(_===null)return;let v=t.u(_);if(v===void 0||v===`auto`)return;if(e===`fetch`){let e=o.frameFetchVerdict({session:d,declaredHosts:s,approvedOrigins:f},c===`ensure`?void 0:a[0],{classifier:`fetchTarget`});if(c===`ensure`&&!d)throw t.w(e.kind===`refuse`?e.reason:``,`fetch`);if(c!==`ensure`&&e.kind===`refuse`)throw t.w(e.reason,`fetch`);if(!u){if(e.kind===`refuse`)throw t.w(e.reason,`fetch`);if(!await l({scope:n.s(a[0],a[1]).scope,hosts:e.promptHosts}))throw t.w(`frame.fetch: the user did not grant this`,`fetch`);return}let r=e.kind===`consent`?e.targetHost:await m(),i=n.t([r,...s]);if(!i.length)throw t.w(`frame: navigate the frame before fetch`,`fetch`);if(await b({category:`network`,hosts:i})===!1)throw t.w(y(`fetch`,`network`,r||null),`fetch`);return}let x=await m();if(!x)throw t.w(`frame: navigate the frame before ${e}`,e);if(!g().includes(x))throw t.w(h,e);if(!u)return;let S=t.l(_);if(S===void 0||v===`critical`&&p.has(`${_} ${x}`))return;let C=n.t([x,...s]),w=await b(v===`critical`?{key:_,hosts:C,attach:i}:{category:S,hosts:C});if(w===!1)throw t.w(y(e,S,null),e);if(w===`once`&&c!==`ensure`)for(let e of C)p.add(`${_} ${e}`)},requestCategories:async e=>{r();let a=await m(),o=n.t(a?[a,...s]:s);if(!o.length)throw TypeError(`frame.request: navigate the frame or declare domains first`);let c=e.map(e=>{let n=e.key;return{named:n,critical:n!==void 0&&t.u(n)===`critical`,category:e.category??(n===void 0?void 0:t.c(n))??`interaction`}}),l=({named:e,critical:t,category:n},r)=>({category:n,...t?{key:e}:{},hosts:o,allow:r});if(!u)return _(),c.map(e=>l(e,!1));let d=await u(c.map(({named:e,critical:t,category:n})=>t?{key:e,hosts:o,attach:i}:{category:n,hosts:o}));return c.map((e,t)=>l(e,d[t]!==void 0&&d[t]!==!1))}}},x=e=>e,S=5e3,C=new Set([]),w=()=>`https://fkn.app`,T=e=>e?``:`incognito-${crypto.randomUUID()}`,E=(e,t,n)=>{let r,i=new Promise((e,i)=>{r=setTimeout(()=>i(Error(n)),t)});return Promise.race([e,i]).finally(()=>clearTimeout(r))},D=e=>Object.assign(Error(e),{name:t.b}),O=({control:e,target:n,session:r,declaredHosts:i,approvedOrigins:a,attach:o,assertLive:s,guard:c,consent:l,onNavigated:u})=>{let d=n,{gate:f,requestCategories:p}=b({session:r,declaredHosts:i,approvedOrigins:a,attach:o,assertLive:s,documentHost:typeof e.documentHost==`function`?()=>c(()=>e.documentHost()):void 0,current:()=>d,...l});return t.m({executor:{execute:(n,r,i)=>C.has(r)?Promise.reject(t.x(r,`cloud`)):(s(),c(()=>e.executeLocator(n,r,i))),highlight:async()=>{}},gate:f,request:p,goto:async(t,n={})=>{let r=new URL(t,location.href).href;s();let{timeoutMs:i}=n,o=(()=>{try{return new URL(r).origin}catch{return``}})(),l=o!==``&&!a.has(o);l&&a.add(o);try{await E(c(()=>e.goto(r,n)),(i??3e4)+S,`cloud.attachFrame: the render proxy did not answer goto; the frame may have been detached or its page reloaded`)}catch(e){throw l&&a.delete(o),e}d=r,u()},url:()=>d})},ee=250,te=500,k=65e3,A=2e3,j=2e3,M=2,N=2e3,P=2e3,F=({origin:e,target:t,session:n,domains:r,attach:i})=>{let a=new URL(`/attach-window`,e);return a.searchParams.set(`attach`,i),t&&a.searchParams.set(`url`,t),n&&a.searchParams.set(`session`,n),r.length&&a.searchParams.set(`domains`,r.join(`,`)),a.href},I=(e,t)=>{let n=document.createElement(`iframe`),r=new URL(`/attach-jar`,e);return r.searchParams.set(`attach`,t),n.src=r.href,n.tabIndex=-1,n.setAttribute(`aria-hidden`,`true`),n.setAttribute(`style`,`display:none`),(document.body??document.documentElement).appendChild(n),n},L=(e,t)=>{let n=new MutationObserver(()=>{e.isConnected||t.aborted||(n.disconnect(),console.warn(`cloud.attachFrame: the window's jar anchor was removed from this page, so a sign-in in the window no longer reaches this app's cookie jar`))});e.parentNode&&n.observe(e.parentNode,{childList:!0}),n.observe(document.documentElement,{childList:!0}),t.addEventListener(`abort`,()=>n.disconnect(),{once:!0})},R=()=>D(`cloud.attachFrame: the attached window closed, reloaded or left the page FKN attached; attach a fresh window`),z=()=>D(`cloud.attachFrame: the attached window stopped answering; attach a fresh window`),B=()=>D(`cloud.attachFrame: the window went away before it connected; attach a fresh window`),V=()=>D(`cloud.attachFrame: the window closed before it connected. Either the user closed it, or this page's Cross-Origin-Opener-Policy cut its link to the window`),H=async e=>{if(typeof window>`u`)throw Error(`cloud.attachFrame needs a window realm`);let{domains:r=[],syncCookies:a=!0,permissions:o}=e,{url:c,width:l,height:u}=t.s(e.window);if(window.origin===`null`)throw new t.f(`opaque-opener`);let d=w(),f=crypto.randomUUID(),m=T(a),h=n.t(r),g=new Set;c&&g.add(new URL(c).origin);let _=a?I(d,f):null,v=window.open(F({origin:d,target:c,session:m,domains:h,attach:f}),`_blank`,`popup,width=${l},height=${u}`);if(!v)throw _?.remove(),new t.d;let y=new AbortController,b=!1,S=null,C=(e,t=!1)=>{if(S===null){S=e,y.abort(t?z():R());try{v.closed||v.postMessage({type:s.ATTACH_WINDOW_MESSAGE.detach,attach:f,...t?{unanswered:t}:{}},d)}catch{}_&&setTimeout(()=>_.remove(),P)}};_&&L(_,y.signal);let D=new Promise((e,t)=>{y.signal.addEventListener(`abort`,()=>t(y.signal.reason),{once:!0})});D.catch(()=>{});let H=D.then(()=>{},()=>{}),U=()=>{if(y.signal.aborted)throw y.signal.reason},W=e=>y.signal.aborted?Promise.reject(y.signal.reason):Promise.race([e(),D]),G=e=>e.source===v&&e.origin===d;window.addEventListener(`message`,e=>{if(!G(e))return;let n=e.data;typeof n==`object`&&n&&n.attach===f&&(n.type===s.ATTACH_WINDOW_MESSAGE.refused?C(new t.f(n.reason)):n.type===s.ATTACH_WINDOW_MESSAGE.gone&&C(b?R():B()))},{signal:y.signal}),window.addEventListener(`pagehide`,()=>C(R()),{signal:y.signal});let K=()=>{try{v.postMessage({type:s.ATTACH_WINDOW_MESSAGE.hello,attach:f},d)}catch{}};K();let q=setInterval(K,ee),J=setInterval(()=>{v.closed&&C(b?R():V())},te);y.signal.addEventListener(`abort`,()=>{clearInterval(q),clearInterval(J)},{once:!0});let Y=async e=>{try{return await Promise.race([e,D])}catch(e){throw S??e}};try{let e=await Y(E((0,p.expose)({},{key:s.ATTACH_WINDOW_KEY,transport:{emit:(e,t)=>v.postMessage(e,d,t??[]),receive:e=>{let t=t=>{G(t)&&e(t.data,{source:t.source,origin:t.origin})};return window.addEventListener(`message`,t),()=>window.removeEventListener(`message`,t)}},unregisterSignal:y.signal,revivableModules:x(t.et)}),s.WINDOW_HANDSHAKE_TIMEOUT_MS,`cloud.attachFrame: timed out connecting to the window`));b=!0,clearInterval(q);let n=0,r=setInterval(()=>{E(W(()=>e.ping()),j,`ping`).then(()=>{n=0},()=>{y.signal.aborted||(document.visibilityState===`hidden`?n=0:++n>=M&&C(z(),!0))})},A);y.signal.addEventListener(`abort`,()=>clearInterval(r),{once:!0}),await Y(E(e.ready(),k,`cloud.attachFrame: the window never became ready`));let a=i.t(`attached frame`);y.signal.aborted?a():y.signal.addEventListener(`abort`,a,{once:!0});let l=O({control:e,target:c,session:m,declaredHosts:h,approvedOrigins:g,attach:f,assertLive:U,guard:W,consent:{request:t=>W(()=>e.requestConsent(t)),ensure:t=>W(()=>e.requestConsent([t])).then(([e])=>e!==void 0&&e!==!1)},onNavigated:()=>{}}),u=null,_=()=>u??=(async()=>{y.signal.aborted||await E(Promise.allSettled([W(()=>e.flushCookies()),W(()=>e.sweepStorage())]),N,`close`).catch(()=>{});try{v.close()}catch{}C(R())})(),S={...l,close:_,closed:H};return o?.length&&await Y(S.request(o)),S}catch(e){let n=S??e;if(!(n instanceof t.f))try{v.close()}catch{}throw C(n),n}},U=`autoplay; fullscreen; encrypted-media; picture-in-picture; clipboard-read; clipboard-write`,W=2e4,G=65e3,K=e=>!e||e===`about:blank`,q=({target:e,session:t,domains:n,attach:r})=>{let i=new URL(`/attach-frame`,w());return e&&i.searchParams.set(`url`,e),t&&i.searchParams.set(`session`,t),n.length&&i.searchParams.set(`domains`,n.join(`,`)),i.searchParams.set(`attach`,r),i.href},J=(e,t)=>{let n=()=>{a(),t()},r=e.parentNode,i=new MutationObserver(()=>{(!e.isConnected||e.parentNode!==r)&&(a(),t())}),a=()=>{window.removeEventListener(`pagehide`,n),i.disconnect()};window.addEventListener(`pagehide`,n,{once:!0}),r&&i.observe(r,{childList:!0}),e.isConnected||(a(),t())},Y=()=>D(`cloud.attachFrame: the attached iframe left the document or was reloaded; attach a fresh iframe`),ne=(e,t)=>{let n=[...e.split(`;`),...t.split(`;`)].map(e=>e.trim()).filter(Boolean);return[...new Set(n)].join(`; `)},re=[300,1200,4e3],X=e=>{let t=()=>{if(!e.isConnected)return;let t=e.style.height,n=e.getBoundingClientRect();n.height&&(e.style.height=`${n.height-1}px`,setTimeout(()=>{e.style.height=t},50))};t();for(let e of re)setTimeout(t,e)},ie=e=>{let t=e.getAttribute(`sandbox`);if(t===null)return;let n=new Set(t.toLowerCase().split(/\s+/).filter(Boolean)),r=[`allow-scripts`,`allow-same-origin`].filter(e=>!n.has(e));if(r.length)throw Error(`cloud.attachFrame: the iframe's sandbox attribute must include ${r.join(` and `)} for the render proxy to load`)},ae=async({iframe:e,domains:r=[],syncCookies:a=!0,lockdown:o=!1,permissions:c})=>{if(typeof window>`u`)throw Error(`cloud.attachFrame needs a window realm`);if(o)throw Error(`cloud.attachFrame does not support lockdown; use the extension backend for a sealed frame`);if(!e.isConnected)throw Error(`cloud.attachFrame: the iframe must be connected to the document before attaching`);ie(e);let l=e.getAttribute(`src`)??``,u=(()=>{if(K(l))return null;try{return new URL(e.src||l,location.href)}catch{throw Error(`cloud.attachFrame: the iframe src is not a valid URL: ${l}`)}})();if(u){let e=new URL(`/attach-frame`,w());if(u.origin===e.origin&&u.pathname===e.pathname)throw Error(`cloud.attachFrame: this iframe is already attached; navigate with the Frame returned by that attach or use a fresh iframe`)}let d=u?.href??``;d&&t.g(d);let f=T(a),h=n.t(r),g=new Set;try{g.add(new URL(d).origin)}catch{}let _=new AbortController,v=e.referrerPolicy,y=e.allow,b=crypto.randomUUID();if(e.referrerPolicy=`origin`,e.allow=ne(U,e.allow),e.src=q({target:d,session:f,domains:h,attach:b}),!e.contentWindow)throw Error(`cloud.attachFrame: the iframe window is not available`);try{let n=await E((0,p.expose)({},{key:s.ATTACH_FRAME_KEY,origin:w(),transport:{receive:window,emit:e.contentWindow},unregisterSignal:_.signal,revivableModules:x(t.et)}),W,`cloud.attachFrame: timed out connecting to the render proxy page`);await E(n.ready(),G,`cloud.attachFrame: the render proxy never became ready`),d&&X(e),J(e,()=>_.abort());let r=i.t(`attached frame`);_.signal.aborted?r():_.signal.addEventListener(`abort`,r,{once:!0});let a=e.contentWindow,o=O({control:n,target:d,session:f,declaredHosts:h,approvedOrigins:g,attach:b,assertLive:()=>{if(_.signal.aborted||!e.isConnected||e.contentWindow!==a)throw _.abort(),Y()},guard:e=>e(),consent:await m(),onNavigated:()=>X(e)});return c?.length&&await o.request(c),o}catch(t){throw _.abort(),e.referrerPolicy=v,e.allow=y,e.src=d||`about:blank`,t}},Z=(async e=>t.o(e)===`window`?H(e):ae(e)),oe=()=>typeof window<`u`&&!0,Q=async()=>{let e=await r.a.then(e=>e.cloud.quota());return{premium:e.premium,overQuota:e.overQuota,throttled:e.overQuota&&!e.premium,usedBytes:e.usedBytes,limitBytes:e.limitBytes,remainingBytes:e.remaining,bytesPerSecond:e.bytesPerSecond,bitsPerSecond:e.bytesPerSecond*8}},se=e.t({attachFrame:()=>Z,available:()=>$,dgram:()=>d.t,dns:()=>c.t,fetch:()=>a.t,fs:()=>l.t,http:()=>f.t,net:()=>u.t,quota:()=>Q}),$=()=>r.c;Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return oe}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return Z}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return se}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return Q}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return $}});

package/{cloud-C40YCPuv.d.ts → cloud-DxitkM7z.d.ts}

@@ -1,12 +1,16 @@
-import { t as cloudFetch } from "./proxy-XeHtHIdZ.js";
-import { i as Frame, r as AttachFrameOptions } from "./index-DIK21kfh.js";
+import { r as AttachFrameFunction } from "./index-C_Lqta5o.js";
+import { t as cloudFetch } from "./proxy-Bmb2wxG1.js";
 import { t as dns_d_exports } from "./dns.js";
-import { n as fs_d_exports } from "./fs-CYcErwc4.js";
-import { s as net_d_exports } from "./net-BBtYFEzu.js";
+import { n as fs_d_exports } from "./fs--NhtUyYa.js";
+import { s as net_d_exports } from "./net-0SlODFSM.js";
 import { t as dgram_d_exports } from "./dgram.js";
 import { t as http_d_exports } from "./http.js";
 //#region src/cloud/frame.d.ts
-declare const attachFrame: ({ iframe, domains, syncCookies, lockdown, permissions }: AttachFrameOptions) => Promise<Frame>;
+/**
+ * Attaches the render proxy to an iframe the app mounted, or opens it in a window of its own with
+ * `{ window }`. A window opens before the first await, so call this directly in a click handler.
+ */
+declare const attachFrame: AttachFrameFunction;
 //#endregion
 //#region src/quota.d.ts
 type QuotaStatus = {

package/cloud.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./proxy-_m6Sqcr6.cjs"),t=require("./cloud-DHuqVKrl.cjs"),n=require("./dns.cjs"),r=require("./cloud/fs.cjs"),i=require("./net.cjs"),a=require("./dgram.cjs"),o=require("./http.cjs");exports.attachFrame=t.i,exports.available=t.t,Object.defineProperty(exports,"dgram",{enumerable:!0,get:function(){return a.t}}),Object.defineProperty(exports,"dns",{enumerable:!0,get:function(){return n.t}}),exports.fetch=e.t,Object.defineProperty(exports,"fs",{enumerable:!0,get:function(){return r.t}}),Object.defineProperty(exports,"http",{enumerable:!0,get:function(){return o.t}}),Object.defineProperty(exports,"net",{enumerable:!0,get:function(){return i.t}}),exports.quota=t.r;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./proxy-CYcaW5ew.cjs"),t=require("./cloud-DCWD_0sd.cjs"),n=require("./dns.cjs"),r=require("./cloud/fs.cjs"),i=require("./net.cjs"),a=require("./dgram.cjs"),o=require("./http.cjs");exports.attachFrame=t.i,exports.available=t.t,Object.defineProperty(exports,"dgram",{enumerable:!0,get:function(){return a.t}}),Object.defineProperty(exports,"dns",{enumerable:!0,get:function(){return n.t}}),exports.fetch=e.t,Object.defineProperty(exports,"fs",{enumerable:!0,get:function(){return r.t}}),Object.defineProperty(exports,"http",{enumerable:!0,get:function(){return o.t}}),Object.defineProperty(exports,"net",{enumerable:!0,get:function(){return i.t}}),exports.quota=t.r;

package/cloud.d.ts

@@ -1,8 +1,8 @@
-import { t as cloudFetch } from "./proxy-XeHtHIdZ.js";
-import { a as attachFrame, i as quota, r as QuotaStatus, t as available } from "./cloud-C40YCPuv.js";
+import { t as cloudFetch } from "./proxy-Bmb2wxG1.js";
+import { a as attachFrame, i as quota, r as QuotaStatus, t as available } from "./cloud-DxitkM7z.js";
 import { t as dns_d_exports } from "./dns.js";
-import { n as fs_d_exports } from "./fs-CYcErwc4.js";
-import { s as net_d_exports } from "./net-BBtYFEzu.js";
+import { n as fs_d_exports } from "./fs--NhtUyYa.js";
+import { s as net_d_exports } from "./net-0SlODFSM.js";
 import { t as dgram_d_exports } from "./dgram.js";
 import { t as http_d_exports } from "./http.js";
 export { type QuotaStatus, attachFrame, available, dgram_d_exports as dgram, dns_d_exports as dns, cloudFetch as fetch, fs_d_exports as fs, http_d_exports as http, net_d_exports as net, quota };

package/cloud.js

@@ -1,5 +1,5 @@
-import { t as e } from "./proxy-fXckOcRn.js";
-import { i as t, r as n, t as r } from "./cloud-DBNeXS9R.js";
+import { t as e } from "./proxy-DDwY3AVG.js";
+import { i as t, r as n, t as r } from "./cloud-B9Sd7V1g.js";
 import { t as i } from "./dns.js";
 import { t as a } from "./cloud/fs.js";
 import { t as o } from "./net.js";

package/{contract-Gd543I6m.d.ts → contract-D37GGkou.d.ts}

@@ -1,3 +1,4 @@
+import { B as SelectorPart, f as GotoOptions } from "./index-C_Lqta5o.js";
 import { o as TcpSocketOption, v as UdpSocketOption } from "./wire-Gbo-D74t.js";
 //#region src/contract.d.ts
 /** The signed-in account, or null when nobody is. */
@@ -87,6 +88,130 @@ type FrameConsentRequest = {
 };
 /** `'once'` is a critical row answered Allow once, a handoff the middle page takes; `'session'` a row standing for the tab; `false` a refusal. */
 type FrameConsentAnswer = 'once' | 'session' | false;
+/** The osra key of an inline attachment's channel, which `/attach-frame` exposes to the library. */
+declare const ATTACH_FRAME_KEY = "fkn-attach-frame";
+/** The osra key of a window attachment's channel, which `/attach-window` exposes to its opener. */
+declare const ATTACH_WINDOW_KEY = "fkn-attach-window";
+/** The osra key of the render proxy shell's control channel, which its middle page drives. */
+declare const SHELL_CONTROL_KEY = "sdbx-control";
+/** Posted by a shell that could not start, `{ type, message }`, to the middle page framing it. */
+declare const SHELL_ATTACH_ERROR = "sdbx-attach-error";
+/** What an app and its window post to each other, every message carrying the attach id. */
+declare const ATTACH_WINDOW_MESSAGE: {
+  /** app to window, repeated until the channel connects */
+  readonly hello: 'fkn-attach-window';
+  /** window to app, `{ reason }`: the window loaded nothing and exposes nothing */
+  readonly refused: 'fkn-attach-window-refused';
+  /** window to app: this window no longer answers the app, because it is going away or was dropped */
+  readonly gone: 'fkn-attach-window-gone';
+  /**
+   * app to window, whenever the app ends the attachment (its pagehide included): stop answering this
+   * app. `unanswered: true` when it ended because the window stopped answering its pings.
+   */
+  readonly detach: 'fkn-attach-window-detach';
+};
+/** What a window's shell and its middle page say about the shell's cookie jar, all with the attach id. */
+declare const SHELL_JAR_MESSAGE: {
+  /** shell to middle page, once per shell document: send me the port to the opener's jar host */
+  readonly request: 'sdbx-jar-request';
+  /** middle page to shell, carrying exactly one port */
+  readonly port: 'sdbx-jar-port';
+  /** shell to middle page, `{ mode, reason? }`, before the first navigation */
+  readonly mode: 'sdbx-jar-mode';
+};
+/**
+ * Why a window's shell reached no jar, sent as the `reason` of an `'unreachable'` mode report. Only
+ * these names cross the wire, never a value or an error's own text.
+ */
+declare const SHELL_JAR_UNREACHABLE: readonly ['bad-attach', 'no-storage', 'bad-jar', 'no-parent', 'no-jar-host', 'no-token', 'no-indexeddb', 'failed'];
+type ShellJarUnreachable = (typeof SHELL_JAR_UNREACHABLE)[number];
+/**
+ * What a window's middle page, the jar anchor its app mounted (`/attach-jar`) and the anchor's jar
+ * host say, all with the attach id.
+ */
+declare const JAR_ANCHOR_MESSAGE: {
+  /** window to each frame of its opener: is the anchor for this attachment here? */
+  readonly hello: 'fkn-jar-hello';
+  /** anchor to the window it accepted */
+  readonly ready: 'fkn-jar-ready';
+  /** window to anchor, and anchor to jar host, carrying exactly one port */
+  readonly port: 'fkn-jar-port';
+  /** anchor to jar host, after every load of the host frame: are you the jar host? */
+  readonly who: 'fkn-jar-who';
+  /** jar host to anchor: the answer, the only one a port is relayed to */
+  readonly host: 'fkn-jar-host';
+};
+/**
+ * How long a window waits for its app's first hello, from when its page runs. The app says hello
+ * every 250 ms from the moment it opens the window, so only an app that went away misses it.
+ */
+declare const WINDOW_HELLO_TIMEOUT_MS = 20000;
+/**
+ * How long a window waits, from mounting its shell, for the shell to report the jar it runs on: the
+ * shell's jar port wait (12 s), its partition token read (5 s) and a controller boot. The window
+ * exposes its channel only after that report, so the app waits for both of these and more.
+ */
+declare const WINDOW_JAR_MODE_TIMEOUT_MS = 30000;
+/**
+ * How long an app waits for a window's channel. The window exposes it only once it has heard the
+ * app's hello and its shell has reported a jar, each on its own deadline above and one after the
+ * other, and says by name when it cannot; the margin covers the window's own page load and the
+ * channel's handshake after it. Any shorter and the app gives up on a window that is about to
+ * connect, or to say why it cannot.
+ */
+declare const WINDOW_HANDSHAKE_TIMEOUT_MS: number;
+/** A goto on the shell's control channel. */
+type ShellGotoOptions = GotoOptions & {
+  timeoutMs?: number;
+  /**
+   * For an attachment's first navigation: past its deadline, a document that committed but never
+   * fired load counts as loaded, the rule the inline attachment's first load follows. Ignored by a
+   * shell deployed before windows, which rejects at the deadline instead.
+   */
+  commitFallback?: boolean;
+};
+/**
+ * The render proxy shell's control channel (`SHELL_CONTROL_KEY`), as its middle page drives it.
+ * `policy` is the middle page's realm policy for the call; `flushCookies` and `sweepStorage` are
+ * absent from a shell deployed before windows.
+ */
+type ShellControl = {
+  ready(): Promise<boolean>;
+  /** Pulls the committed jar first, so a sign-in another realm committed rides this navigation. */
+  goto(url: string, options?: ShellGotoOptions): Promise<void>;
+  executeLocator(parts: SelectorPart[], operation: string, args: unknown[], policy?: unknown): Promise<unknown>;
+  /** Resolves once every cookie change made so far is committed to the jar's store. */
+  flushCookies?(): Promise<void>;
+  /** Removes a window shell's own site storage; resolves at once for a shell whose storage is shared. */
+  sweepStorage?(): Promise<void>;
+};
+/**
+ * What a middle page exposes to the library, inline (`ATTACH_FRAME_KEY`) and for a window
+ * (`ATTACH_WINDOW_KEY`). `documentHost`, where the frame actually is, is absent from a middle page
+ * deployed before categories.
+ */
+type MiddleControl = {
+  ready(): Promise<boolean>;
+  goto(url: string, options?: GotoOptions & {
+    timeoutMs?: number;
+  }): Promise<void>;
+  executeLocator(parts: SelectorPart[], operation: string, args: unknown[]): Promise<unknown>;
+  documentHost?(): Promise<string>;
+};
+/** What a window's middle page adds to its channel. */
+type WindowMiddleControl = MiddleControl & {
+  /** Draws the consent card in the window and answers each request in order. */
+  requestConsent(requests: FrameConsentRequest[]): Promise<FrameConsentAnswer[]>;
+  /** The app's heartbeat: a window that hears none for long enough stops answering. */
+  ping(): Promise<true>;
+  /** Resolves once every cookie change made in the window so far is committed to its jar. */
+  flushCookies(): Promise<void>;
+  /**
+   * Removes the proxied site storage this window kept to itself, for an app about to close it.
+   * Resolves at once for a window on the web origin's own jar, whose storage is the app's.
+   */
+  sweepStorage(): Promise<void>;
+};
 type DisplayCause =
 /** the frame is not being painted at all, so an ancestor is display:none, visibility:hidden or equivalent */
 'not-rendered' |
@@ -619,4 +744,4 @@ type Resolvers = {
   hideInstallPrompt: () => void;
 };
 //#endregion
-export { StorageQuota as $, ProxyFetch as A, RoomEvent as B, OverlayState as C, PackagesFail as D, PackagesErrorCode as E, Resolvers as F, RoomMessage as G, RoomJoinOptions as H, RoomBacklog as I, RoomPermissions as J, RoomOpenOptions as K, RoomCreateOptions as L, ProxyFetchInput as M, Quota as N, PickOptions as O, Radii as P, StorageEntry as Q, RoomDefaults as R, OverlayRect as S, PackageResult as T, RoomMailbox as U, RoomHandle as V, RoomMember as W, RoomsFail as X, RoomsErrorCode as Y, SetOverlayHost as Z, HiddenSurface as _, ConflictChoice as a, UdpDatagram as at, IpFamily as b, ConnectAvailability as c, WriteData as ct, DisplayLevel as d, SurfaceRect as et, DnsLookup as f, FrameFetchScope as g, FrameConsentRequest as h, AdoptState as i, TcpSocketResult as it, ProxyFetchInit as j, Placement as k, ConnectOptions as l, FrameConsentAnswer as m, AddressLookupResult as n, TcpSocketListenerResult as nt, ConflictRequest as o, UdpSocketOptions as ot, EncryptionState as p, RoomPermission as q, AdoptRequest as r, TcpSocketOptions as rt, ConflictSide as s, UdpSocketResult as st, Account as t, TcpSocketListenerOptions as tt, DisplayCause as u, InstallOptions as v, PackageQuery as w, MountDescriptor as x, InstalledPackage as y, RoomEnd as z };
+export { RoomPermissions as $, PackageResult as A, Resolvers as B, IpFamily as C, WindowMiddleControl as Ct, OverlayRect as D, MountDescriptor as E, ProxyFetch as F, RoomEvent as G, RoomCreateOptions as H, ProxyFetchInit as I, RoomMailbox as J, RoomHandle as K, ProxyFetchInput as L, PackagesFail as M, PickOptions as N, OverlayState as O, Placement as P, RoomPermission as Q, Quota as R, InstalledPackage as S, WINDOW_JAR_MODE_TIMEOUT_MS as St, MiddleControl as T, RoomDefaults as U, RoomBacklog as V, RoomEnd as W, RoomMessage as X, RoomMember as Y, RoomOpenOptions as Z, FrameConsentAnswer as _, UdpDatagram as _t, AddressLookupResult as a, SHELL_JAR_UNREACHABLE as at, HiddenSurface as b, WINDOW_HANDSHAKE_TIMEOUT_MS as bt, ConflictChoice as c, ShellGotoOptions as ct, ConnectAvailability as d, StorageQuota as dt, RoomsErrorCode as et, ConnectOptions as f, SurfaceRect as ft, EncryptionState as g, TcpSocketResult as gt, DnsLookup as h, TcpSocketOptions as ht, Account as i, SHELL_JAR_MESSAGE as it, PackagesErrorCode as j, PackageQuery as k, ConflictRequest as l, ShellJarUnreachable as lt, DisplayLevel as m, TcpSocketListenerResult as mt, ATTACH_WINDOW_KEY as n, SHELL_ATTACH_ERROR as nt, AdoptRequest as o, SetOverlayHost as ot, DisplayCause as p, TcpSocketListenerOptions as pt, RoomJoinOptions as q, ATTACH_WINDOW_MESSAGE as r, SHELL_CONTROL_KEY as rt, AdoptState as s, ShellControl as st, ATTACH_FRAME_KEY as t, RoomsFail as tt, ConflictSide as u, StorageEntry as ut, FrameConsentRequest as v, UdpSocketOptions as vt, JAR_ANCHOR_MESSAGE as w, WriteData as wt, InstallOptions as x, WINDOW_HELLO_TIMEOUT_MS as xt, FrameFetchScope as y, UdpSocketResult as yt, Radii as z };

package/contract.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=`fkn-attach-frame`,t=`fkn-attach-window`,n=`sdbx-control`,r=`sdbx-attach-error`,i={hello:`fkn-attach-window`,refused:`fkn-attach-window-refused`,gone:`fkn-attach-window-gone`,detach:`fkn-attach-window-detach`},a={request:`sdbx-jar-request`,port:`sdbx-jar-port`,mode:`sdbx-jar-mode`},o=[`bad-attach`,`no-storage`,`bad-jar`,`no-parent`,`no-jar-host`,`no-token`,`no-indexeddb`,`failed`],s={hello:`fkn-jar-hello`,ready:`fkn-jar-ready`,port:`fkn-jar-port`,who:`fkn-jar-who`,host:`fkn-jar-host`},c=2e4,l=3e4,u=6e4;exports.ATTACH_FRAME_KEY=e,exports.ATTACH_WINDOW_KEY=t,exports.ATTACH_WINDOW_MESSAGE=i,exports.JAR_ANCHOR_MESSAGE=s,exports.SHELL_ATTACH_ERROR=r,exports.SHELL_CONTROL_KEY=n,exports.SHELL_JAR_MESSAGE=a,exports.SHELL_JAR_UNREACHABLE=o,exports.WINDOW_HANDSHAKE_TIMEOUT_MS=u,exports.WINDOW_HELLO_TIMEOUT_MS=c,exports.WINDOW_JAR_MODE_TIMEOUT_MS=l;