@fkn/lib 0.9.34 → 0.9.36

package/{hosts-C4-8lWwz.js → hosts-77UAJbm1.js}

@@ -72,7 +72,15 @@ var e = {
 	unsafe: !0,
 	title: "Change page appearance (unsafe)",
 	description: "Lets the app restyle the page WITHOUT safety filtering. Could be used to leak data over the network."
-}, d = (e) => e?.noSanitize ? u : l, f = {
+}, d = {
+	scope: "frame.evaluate",
+	category: "evaluation",
+	severity: 3,
+	chip: "run code",
+	unsafe: !0,
+	title: "Run the app’s code on this site",
+	description: "Lets the app run its own script inside this site, with full access to the page and the data it shows."
+}, f = (e) => e?.noSanitize ? u : l, p = {
 	scope: "frame.fetchRead",
 	category: "network",
 	severity: 3,
@@ -80,7 +88,7 @@ var e = {
 	unsafe: !0,
 	title: "Read your account data on this site",
 	description: "Lets the app read pages and data from this site as you, using the session in the frame."
-}, p = {
+}, m = {
 	scope: "frame.fetchWrite",
 	category: "network",
 	severity: 3,
@@ -88,11 +96,11 @@ var e = {
 	unsafe: !0,
 	title: "Change your account data on this site",
 	description: "Lets the app send changes to this site as you, using the session in the frame."
-}, m = /* @__PURE__ */ new Set([
+}, h = /* @__PURE__ */ new Set([
 	"GET",
 	"HEAD",
 	"OPTIONS"
-]), h = (e, t) => m.has((t?.method ?? "GET").toUpperCase()) ? f : p, g = {
+]), g = (e, t) => h.has((t?.method ?? "GET").toUpperCase()) ? p : m, _ = {
 	click: a,
 	fill: o,
 	hover: s,
@@ -102,8 +110,9 @@ var e = {
 	count: i,
 	exists: r,
 	videoElement: c,
-	addStyleTag: d,
-	fetch: h
+	addStyleTag: f,
+	fetch: g,
+	evaluate: d
 };
 [
 	e,
@@ -117,22 +126,23 @@ var e = {
 	c,
 	l,
 	u,
-	f,
-	p
+	p,
+	m,
+	d
 ].map((e) => e.scope);
-var _ = g, v = (e, t) => {
-	let n = _[e];
+var v = _, y = (e, t) => {
+	let n = v[e];
 	return n ? (typeof n == "function" ? n(...t) : n).scope : null;
-}, y = (e, t) => {
+}, b = (e, t) => {
 	try {
 		return new URL(e, t);
 	} catch {
 		return;
 	}
-}, b = (e) => {
-	let t = y(e, "https://s.invalid/"), n = y(e, "http://s.invalid/");
+}, x = (e) => {
+	let t = b(e, "https://s.invalid/"), n = b(e, "http://s.invalid/");
 	if (!t || !n) return { kind: "invalid" };
-	let r = y(e);
+	let r = b(e);
 	return !r || r.href !== t.href || r.href !== n.href ? { kind: "relative" } : r.protocol !== "https:" && r.protocol !== "http:" ? {
 		kind: "unsupported",
 		protocol: r.protocol
@@ -141,21 +151,21 @@ var _ = g, v = (e, t) => {
 		host: r.hostname,
 		protocol: r.protocol
 	};
-}, x = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/, S = /^\[[0-9a-f:.]+\]$/, C = (e) => {
+}, S = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/, C = /^\[[0-9a-f:.]+\]$/, w = (e) => {
 	try {
 		return new URL(`http://${e}/`).hostname;
 	} catch {
 		return;
 	}
-}, w = (e, { ipv6: t = !1 } = {}) => {
+}, T = (e, { ipv6: t = !1 } = {}) => {
 	let n = [];
 	for (let r of e) {
 		let e = r.trim().toLowerCase();
 		if (!e || e.length > 253) continue;
-		let i = x.test(e) ? e : t && S.test(e) ? C(e) : void 0;
+		let i = S.test(e) ? e : t && C.test(e) ? w(e) : void 0;
 		i && !n.includes(i) && n.push(i);
 	}
 	return n;
 };
 //#endregion
-export { n as _, l as a, b as c, c as d, v as f, e as g, t as h, o as i, f as l, i as m, a as n, u as o, r as p, s as r, h as s, w as t, p as u };
+export { e as _, l as a, g as c, m as d, c as f, t as g, i as h, o as i, x as l, r as m, a as n, u as o, y as p, s as r, d as s, T as t, p as u, n as v };

package/hosts-COiOMjp-.cjs

@@ -0,0 +1 @@
+var e={scope:`read.text`,category:`storage`,severity:1,chip:`read text`,title:`Read text from the page`,description:`Lets the app see the text shown on this page.`},t={scope:`read.info`,category:`storage`,severity:1,chip:`read details`,title:`Read info from the page`,description:`Lets the app read a detail of a part of the page.`},n={scope:`read.visible`,category:`storage`,severity:0,title:`See what’s visible on the page`,description:`Lets the app check which elements are currently on screen.`},r={scope:`read.check`,category:`storage`,severity:0,title:`Check if something is on the page`,description:`Lets the app test whether a specific element exists.`},i={scope:`read.count`,category:`storage`,severity:0,title:`Count items on the page`,description:`Lets the app count how many matching elements are present.`},a={scope:`act.click`,category:`interaction`,severity:3,chip:`click`,title:`Click on the page`,description:`Lets the app press buttons or links for you.`},o={scope:`act.type`,category:`interaction`,severity:1,chip:`type`,title:`Type into a text field`,description:`Lets the app fill in form fields on your behalf.`},s={scope:`act.hover`,category:`interaction`,severity:1,chip:`hover`,title:`Hover over the page`,description:`Lets the app point at things to reveal menus or tooltips.`},c={scope:`media.video`,category:`interaction`,severity:0,title:`Control video playback`,description:`Lets the app play, pause, seek, and read the video on the page.`},l={scope:`media.appear`,category:`interaction`,severity:0,title:`Change page appearance`,description:`Lets the app restyle parts of the page (safely filtered).`},u={scope:`media.appearU`,category:`evaluation`,severity:2,chip:`unfiltered styles`,unsafe:!0,title:`Change page appearance (unsafe)`,description:`Lets the app restyle the page WITHOUT safety filtering. Could be used to leak data over the network.`},d={scope:`frame.evaluate`,category:`evaluation`,severity:3,chip:`run code`,unsafe:!0,title:`Run the app’s code on this site`,description:`Lets the app run its own script inside this site, with full access to the page and the data it shows.`},f=e=>e?.noSanitize?u:l,p={scope:`frame.fetchRead`,category:`network`,severity:3,chip:`load`,unsafe:!0,title:`Read your account data on this site`,description:`Lets the app read pages and data from this site as you, using the session in the frame.`},m={scope:`frame.fetchWrite`,category:`network`,severity:3,chip:`send`,unsafe:!0,title:`Change your account data on this site`,description:`Lets the app send changes to this site as you, using the session in the frame.`},h=new Set([`GET`,`HEAD`,`OPTIONS`]),g=(e,t)=>h.has((t?.method??`GET`).toUpperCase())?p:m,_={click:a,fill:o,hover:s,textContent:e,getAttribute:t,isVisible:n,count:i,exists:r,videoElement:c,addStyleTag:f,fetch:g,evaluate:d};[e,t,n,r,i,a,o,s,c,l,u,p,m,d].map(e=>e.scope);var v=_,y=(e,t)=>{let n=v[e];return n?(typeof n==`function`?n(...t):n).scope:null},b=(e,t)=>{try{return new URL(e,t)}catch{return}},x=e=>{let t=b(e,`https://s.invalid/`),n=b(e,`http://s.invalid/`);if(!t||!n)return{kind:`invalid`};let r=b(e);return!r||r.href!==t.href||r.href!==n.href?{kind:`relative`}:r.protocol!==`https:`&&r.protocol!==`http:`?{kind:`unsupported`,protocol:r.protocol}:{kind:`absolute`,host:r.hostname,protocol:r.protocol}},S=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/,C=/^\[[0-9a-f:.]+\]$/,w=e=>{try{return new URL(`http://${e}/`).hostname}catch{return}},T=(e,{ipv6:t=!1}={})=>{let n=[];for(let r of e){let e=r.trim().toLowerCase();if(!e||e.length>253)continue;let i=S.test(e)?e:t&&C.test(e)?w(e):void 0;i&&!n.includes(i)&&n.push(i)}return n};Object.defineProperty(exports,"_",{enumerable:!0,get:function(){return e}}),Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return l}}),Object.defineProperty(exports,"c",{enumerable:!0,get:function(){return g}}),Object.defineProperty(exports,"d",{enumerable:!0,get:function(){return m}}),Object.defineProperty(exports,"f",{enumerable:!0,get:function(){return c}}),Object.defineProperty(exports,"g",{enumerable:!0,get:function(){return t}}),Object.defineProperty(exports,"h",{enumerable:!0,get:function(){return i}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return o}}),Object.defineProperty(exports,"l",{enumerable:!0,get:function(){return x}}),Object.defineProperty(exports,"m",{enumerable:!0,get:function(){return r}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return a}}),Object.defineProperty(exports,"o",{enumerable:!0,get:function(){return u}}),Object.defineProperty(exports,"p",{enumerable:!0,get:function(){return y}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return s}}),Object.defineProperty(exports,"s",{enumerable:!0,get:function(){return d}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return T}}),Object.defineProperty(exports,"u",{enumerable:!0,get:function(){return p}}),Object.defineProperty(exports,"v",{enumerable:!0,get:function(){return n}});

package/http.d.ts

@@ -1,13 +1,13 @@
-import { n as Socket, t as Server$1 } from "./net-BBtYFEzu.js";
+import { n as Socket, t as Server$1 } from "./net-BWFTx3k_.js";
 import { Buffer } from "buffer";
 import { Stream } from "stream";
 import { IncomingHttpHeaders, OutgoingHttpHeaders, RequestOptions } from "http";
 declare namespace http_d_exports {
   export { Agent, ClientRequest, ClientRequestArgs, HTTPParser, IncomingMessage, METHODS, ParsedHead, RequestListener, STATUS_CODES, Server, ServerResponse, ServerResponseOptions, _default, createServer, _default as default, get, globalAgent, request };
 }
-declare const METHODS: string[];
-declare const STATUS_CODES: Record<number, string>;
-interface ParsedHead {
+export declare const METHODS: string[];
+export declare const STATUS_CODES: Record<number, string>;
+export interface ParsedHead {
   /** request only */
   method?: string;
   /** request only */
@@ -27,7 +27,7 @@ interface ParserHandlers {
   onBody: (chunk: Uint8Array) => void;
   onComplete: () => void;
 }
-declare class HTTPParser {
+export declare class HTTPParser {
   private readonly mode;
   private readonly handlers;
   private buf;
@@ -47,7 +47,7 @@ declare class HTTPParser {
   private consumeBody;
   private consumeChunked;
 }
-declare class IncomingMessage extends Stream.Readable {
+export declare class IncomingMessage extends Stream.Readable {
   httpVersion: string;
   httpVersionMajor: number;
   httpVersionMinor: number;
@@ -95,10 +95,10 @@ declare abstract class OutgoingMessage extends Stream.Writable {
   end(chunk?: unknown, encoding?: BufferEncoding | (() => void), callback?: () => void): this;
   protected _headBlock?: string;
 }
-interface ServerResponseOptions {
+export interface ServerResponseOptions {
   req: IncomingMessage;
 }
-declare class ServerResponse extends OutgoingMessage {
+export declare class ServerResponse extends OutgoingMessage {
   statusCode: number;
   statusMessage?: string;
   private _writeHeadCalled;
@@ -114,13 +114,13 @@ declare class ServerResponse extends OutgoingMessage {
   writeContinue(): void;
   setTimeout(msecs: number, callback?: () => void): this;
 }
-interface ClientRequestArgs extends RequestOptions {
+export interface ClientRequestArgs extends RequestOptions {
   host?: string;
   hostname?: string;
   port?: number | string;
   path?: string;
 }
-declare class ClientRequest extends OutgoingMessage {
+export declare class ClientRequest extends OutgoingMessage {
   method: string;
   path: string;
   host: string;
@@ -143,14 +143,14 @@ declare class ClientRequest extends OutgoingMessage {
   setNoDelay(noDelay?: boolean): void;
   setSocketKeepAlive(enable?: boolean, initialDelay?: number): void;
 }
-type RequestListener = (req: IncomingMessage, res: ServerResponse) => void;
+export type RequestListener = (req: IncomingMessage, res: ServerResponse) => void;
 declare class ServerImpl extends Server$1 {
   constructor(options?: object | RequestListener, requestListener?: RequestListener);
   private _handleConnection;
 }
-declare const Server: typeof ServerImpl;
-type Server = ServerImpl;
-declare class Agent {
+export declare const Server: typeof ServerImpl;
+export type Server = ServerImpl;
+export declare class Agent {
   maxSockets: number;
   maxFreeSockets: number;
   keepAlive: boolean;
@@ -163,11 +163,11 @@ declare class Agent {
   }): string;
   destroy(): void;
 }
-declare const globalAgent: Agent;
-declare const request: (...args: [options: string | URL | ClientRequestArgs, callback?: (res: IncomingMessage) => void] | [url: string | URL, options: ClientRequestArgs, callback?: (res: IncomingMessage) => void]) => ClientRequest;
-declare const get: (...args: [options: string | URL | ClientRequestArgs, callback?: (res: IncomingMessage) => void] | [url: string | URL, options: ClientRequestArgs, callback?: (res: IncomingMessage) => void]) => ClientRequest;
-declare const createServer: (options?: object | RequestListener, requestListener?: RequestListener) => Server;
-declare const _default: {
+export declare const globalAgent: Agent;
+export declare const request: (...args: [options: string | URL | ClientRequestArgs, callback?: (res: IncomingMessage) => void] | [url: string | URL, options: ClientRequestArgs, callback?: (res: IncomingMessage) => void]) => ClientRequest;
+export declare const get: (...args: [options: string | URL | ClientRequestArgs, callback?: (res: IncomingMessage) => void] | [url: string | URL, options: ClientRequestArgs, callback?: (res: IncomingMessage) => void]) => ClientRequest;
+export declare const createServer: (options?: object | RequestListener, requestListener?: RequestListener) => Server;
+export declare const _default: {
   METHODS: string[];
   STATUS_CODES: Record<number, string>;
   Agent: typeof Agent;
@@ -182,4 +182,4 @@ declare const _default: {
   get: typeof get;
 };
 //#endregion
-export { Agent, ClientRequest, ClientRequestArgs, HTTPParser, IncomingMessage, METHODS, ParsedHead, RequestListener, STATUS_CODES, Server, ServerResponse, ServerResponseOptions, _default, _default as default, createServer, get, globalAgent, request, http_d_exports as t };
+export { _default as default, http_d_exports as t };

package/{index-DIK21kfh.d.ts → index-BWJSnpRB.d.ts}

@@ -130,14 +130,39 @@ type FrameFetchResult = {
   headers: [string, string][];
   body: ArrayBuffer;
 };
-//#endregion
-//#region ../frame-locator/lib/operations.d.ts
+declare namespace operations_d_exports {
+  export { PositionOptions$1 as PositionOptions, click, count, exists, fill, getAttribute, hover, isVisible, textContent };
+}
 type PositionOptions$1 = OperationOptions & {
   position?: {
     x?: number;
     y?: number;
   };
 };
+declare const click: {
+  readonly resolve: (context: LocatorContext, options?: PositionOptions$1) => void;
+};
+declare const hover: {
+  readonly resolve: (context: LocatorContext, options?: PositionOptions$1) => void;
+};
+declare const fill: {
+  readonly resolve: (context: LocatorContext, value: string, _options?: OperationOptions) => void;
+};
+declare const textContent: {
+  readonly resolve: (context: LocatorContext, _options?: OperationOptions) => string;
+};
+declare const getAttribute: {
+  readonly resolve: (context: LocatorContext, name: string, _options?: OperationOptions) => string | null;
+};
+declare const isVisible: {
+  readonly resolve: (context: LocatorContext, _options?: OperationOptions) => boolean;
+};
+declare const count: {
+  readonly resolve: (context: LocatorContext, _options?: OperationOptions) => number;
+};
+declare const exists: {
+  readonly resolve: (context: LocatorContext, _options?: OperationOptions) => boolean;
+};
 //#endregion
 //#region ../frame-locator/lib/modules.d.ts
 declare const defaultModules: {
@@ -592,15 +617,19 @@ declare const locatorModules: Extended<{
     };
   };
   readonly frame: {
-    operations: {
-      addStyleTag: {
+    readonly operations: {
+      readonly addStyleTag: {
         resolve: (context: LocatorContext, options: AddStyleTagOptions) => void;
       };
-      fetch: {
+      readonly fetch: {
         resolve: (context: LocatorContext, url: string, init?: FrameFetchOptions) => Promise<FrameFetchResult>;
         kind: ChainKind;
         ensureArgs: (options: Record<string, unknown>) => unknown[];
       };
+      readonly evaluate: {
+        readonly kind: "frame";
+        readonly resolve: (_context: LocatorContext, _source: string, _arg?: unknown) => never;
+      };
     };
   };
 }>;
@@ -617,7 +646,8 @@ type PermissionCategory = 'interaction' | 'storage' | 'network' | 'evaluation';
  * What a category row says. `heading` is the name the popup, dashboard and activity log print;
  * `summary` is the owner's one-line account of the category. The row copy is a template over
  * `site`, the host the row consults (or its "first and N more" form), with a cloud variant for the
- * card, where no render proxy jar holds the user's browser cookies.
+ * cloud card: `cloudTitle` is the one short line the card shows, `cloudDescription` the line it
+ * draws under it where hovering cannot be counted on, and its tooltip everywhere else.
  */
 type CategoryMeta = {
   id: PermissionCategory;
@@ -707,6 +737,14 @@ declare const PERMISSIONS: readonly [{
   readonly unsafe: true;
   readonly title: 'Change page appearance (unsafe)';
   readonly description: 'Lets the app restyle the page WITHOUT safety filtering. Could be used to leak data over the network.';
+}, {
+  readonly scope: 'frame.evaluate';
+  readonly category: 'evaluation';
+  readonly severity: 3;
+  readonly chip: 'run code';
+  readonly unsafe: true;
+  readonly title: 'Run the app’s code on this site';
+  readonly description: 'Lets the app run its own script inside this site, with full access to the page and the data it shows.';
 }, {
   readonly scope: 'embed.iframe';
   readonly category: 'interaction';
@@ -826,7 +864,7 @@ type PermissionGrant = CategoryGrant | {
   site: string;
   allow: boolean;
 };
-declare const permissions$1: {
+declare const permissions: {
   /**
    * Asks for permissions on one sheet (extension) or card (cloud), in the order given, and answers
    * one grant per request.
@@ -861,7 +899,7 @@ type GotoOptions = {
   waitUntil?: 'documentstart' | 'load';
   domains?: string[];
 };
-type Frame = FrameLocator<LocatorModules> & {
+type Frame = Omit<FrameLocator<LocatorModules>, 'evaluate'> & {
   goto(url: string, options?: GotoOptions): Promise<void>;
   url(): string;
   /**
@@ -870,6 +908,38 @@ type Frame = FrameLocator<LocatorModules> & {
    * category or key the registry cannot place on a row is a `TypeError`, thrown before it is sent.
    */
   request(requests: CategoryRequest[]): Promise<CategoryGrant[]>;
+  /**
+   * Runs `pageFunction` inside the attached site's OWN page realm, as a script of that page would:
+   * it sees the site's `window`, its globals and its DOM. The function is sent as source
+   * (`Function.prototype.toString`), so it captures NOTHING from the caller's scope; everything it
+   * needs must come through `arg`. A plain source string is run as an expression, the way Playwright
+   * does, and is not called. A promise, returned by the function or produced by the expression, is
+   * awaited.
+   *
+   * `arg` and the result cross by structured clone, so an `ArrayBuffer` or a typed array of bytes
+   * survives the round trip. A thrown error or a rejected promise comes back as an `Error` carrying
+   * the page's own name and message. A result that cannot be cloned (a function, a DOM node) is a
+   * `LocatorInvalidError`, never a silent `undefined` and never a live handle into the page.
+   *
+   * Every limit is a `LocatorInvalidError` that names it, never a call left pending:
+   * - time, both backends: the code has 30 seconds to settle, counted after any consent card. Only
+   *   the wait ends there; code that never settles keeps running in the page.
+   * - size, extension only: the source with its `arg`, and the result, each carry at most 32 MiB
+   *   (binary data by its bytes, text by its UTF-8 size), the most its message relay carries.
+   * - `Blob`, extension only: the relay cannot carry one, so pass or return `await blob.arrayBuffer()`.
+   *   The cloud backend has neither limit, and returns a `Blob` as a `Blob`.
+   *
+   * Needs the Evaluation grant on both backends; an app without it is refused by name. It runs on the
+   * attached frame only: a chain into a nested frame (`frameLocator(...).evaluate`) is refused.
+   *
+   * On the extension it also needs an extension new enough to run code (ABI 3, older ones are refused
+   * with `ExtensionOperationUnsupportedError`), and it runs where the page's content security policy
+   * allows it: a frame whose host the app declared has its CSP replaced, so code runs; an undeclared
+   * frame keeps its CSP, and a page that forbids `eval` refuses with a named error. On the cloud
+   * backend the code runs in the proxied document's realm, which mirage virtualizes, so there is no
+   * such limit.
+   */
+  evaluate<R = unknown, A = undefined>(pageFunction: ((arg: A) => R | Promise<R>) | string, arg?: A): Promise<Awaited<R>>;
 };
 type AttachFrameOptions = {
   iframe: HTMLIFrameElement;
@@ -882,17 +952,103 @@ type AttachFrameOptions = {
    */
   permissions?: CategoryRequest[];
 };
+/** Where an attachment's window opens and how big it asks to be. */
+type FrameWindowOptions = {
+  /**
+   * Where the window opens: an http or https address, which must also pass the rules an iframe src
+   * does. Omitted, the window opens blank and the app navigates it with `goto`, which is how an app
+   * keeps the click's activation when the url needs an await first.
+   */
+  url?: string;
+  /** Inner width in CSS pixels, 500 by default. The browser may clamp it. */
+  width?: number;
+  /** Inner height in CSS pixels, 700 by default. The browser may clamp it. */
+  height?: number;
+};
+/**
+ * `attachFrame`'s options when the attachment is a new window rather than an iframe.
+ *
+ * Call `attachFrame` directly in the click or key handler: the window opens before the first await,
+ * with the activation of that event, and the browser's popup rules apply to it as to any page's own
+ * `window.open`. `iframe` and `lockdown` do not apply to a window, and passing either is a TypeError.
+ */
+type AttachWindowOptions = {
+  window: FrameWindowOptions;
+  domains?: string[];
+  /**
+   * Cloud, true by default: the window uses the cookie jar of the app that opened it, the same jar
+   * as that app's inline frames. A window whose app is on another site shares cookies only with
+   * those frames; its site storage stays its own. False: a jar of the window's own that ends with
+   * it. Extension: false is a TypeError, since the window is the site's own first-party tab.
+   */
+  syncCookies?: boolean;
+  /** Whole categories asked for once the window has connected, drawn in the window on the cloud backend. */
+  permissions?: CategoryRequest[];
+};
+/** The Frame of an attachment that lives in its own window. */
+type WindowFrame = Frame & {
+  /**
+   * Ends the attachment and closes the window. On the cloud backend it first waits, at most 2
+   * seconds, for the window's cookie changes to be committed to its jar, so a `goto` on the app's
+   * inline frame right after sees the session. Idempotent, and never rejects.
+   */
+  close(): Promise<void>;
+  /**
+   * Resolves once the attachment has ended: the window was closed by anyone, reloaded, or left the
+   * page FKN attached; it stopped answering (a crash, a frozen page); it lost the app's cookie jar
+   * mid-session; or the app page went away. Never rejects. Calls made after it resolved reject with
+   * the terminal detach error.
+   */
+  closed: Promise<void>;
+};
+/**
+ * `window.open` returned null, so nothing was opened: the call ran without user activation, the
+ * popup blocker refused it, or the calling frame is sandboxed without `allow-popups`.
+ */
+declare class FrameWindowBlockedError extends Error {
+  readonly name = "FrameWindowBlockedError";
+  constructor();
+}
+/**
+ * Why a window refused to attach.
+ * `'jar-unreachable'`: the cookie jar of the app that opened it could not be reached.
+ * `'bad-url'`: the window would not open that address.
+ * `'opaque-opener'`: this page's origin is opaque (a sandboxed frame without `allow-same-origin`,
+ * or a `file:` page). A window can never address such a page, so none is opened.
+ * `'unknown'`: a reason this library does not know, sent by a newer window.
+ */
+type FrameWindowRefusal = 'jar-unreachable' | 'bad-url' | 'opaque-opener' | 'unknown';
+/** The window refused to attach, by `reason`, after loading nothing. */
+declare class FrameWindowRefusedError extends Error {
+  readonly name = "FrameWindowRefusedError";
+  readonly reason: FrameWindowRefusal;
+  /** `reason` is what the window said; anything this library does not know becomes `'unknown'`. */
+  constructor(reason: unknown);
+}
 type FrameBackend = {
   executor: Executor;
   gate?: Gate;
   goto(url: string, options?: GotoOptions): Promise<void>;
   url(): string;
   request?(requests: CategoryRequest[]): Promise<CategoryGrant[]>;
+  /**
+   * Runs already-stringified source in the attached site's own realm and answers the cloned result.
+   * The backend gates it (Evaluation) and runs it where the site's globals live. Optional so a
+   * backend that cannot run code refuses `Frame.evaluate` by name rather than answering as if it had.
+   */
+  evaluate?(source: string, arg: unknown): Promise<unknown>;
 };
 declare const createFrame: (backend: FrameBackend) => Frame;
 //#endregion
+//#region ../web-extension/lib/lib/frame-window.d.ts
+/** `attachFrame` in both of its shapes: an iframe the app mounted, or a window it opens. */
+type AttachFrameFunction = {
+  (options: AttachWindowOptions): Promise<WindowFrame>;
+  (options: AttachFrameOptions): Promise<Frame>;
+};
+//#endregion
 //#region ../web-extension/lib/lib/frame.d.ts
 declare const ATTACH_FRAME_EVENT_KEY = "FKN_WEB_EXTENSION_ATTACH_FRAME_EVENT_KEY";
-declare const attachFrame: ({ iframe, domains, syncCookies, lockdown, permissions }: AttachFrameOptions) => Promise<Frame>;
+declare const attachFrame: AttachFrameFunction;
 //#endregion
-export { Gate as A, VideoElementState as C, revive as D, isType as E, OperationRequest as M, SelectorPart as N, type as O, RemoteVideoElement as S, createVideoElementHandle as T, CATEGORIES as _, FrameBackend as a, handleRevivableModules as b, attachFramePermission as c, CategoryGrant as d, CategoryRequest as f, permissions$1 as g, PermissionRequest as h, Frame as i, GateTools as j, Executor as k, createFrame as l, PermissionGrant as m, attachFrame as n, GotoOptions as o, LegacyPermissionRequest as p, AttachFrameOptions as r, Locator as s, ATTACH_FRAME_EVENT_KEY as t, gotoPermission as u, CategoryMeta as v, box as w, BoxedVideoElement as x, PermissionCategory as y };
+export { VideoElementState as A, SelectorPart as B, permissions as C, handleRevivableModules as D, PermissionCategory as E, type as F, Executor as I, Gate as L, createVideoElementHandle as M, isType as N, BoxedVideoElement as O, revive as P, GateTools as R, PermissionRequest as S, CategoryMeta as T, gotoPermission as _, AttachWindowOptions as a, LegacyPermissionRequest as b, FrameWindowBlockedError as c, FrameWindowRefusedError as d, GotoOptions as f, createFrame as g, attachFramePermission as h, AttachFrameOptions as i, box as j, RemoteVideoElement as k, FrameWindowOptions as l, WindowFrame as m, attachFrame as n, Frame as o, Locator as p, AttachFrameFunction as r, FrameBackend as s, ATTACH_FRAME_EVENT_KEY as t, FrameWindowRefusal as u, CategoryGrant as v, CATEGORIES as w, PermissionGrant as x, CategoryRequest as y, OperationRequest as z };

package/{index-Cg6y_FTi.d.ts → index-kuPqkS_-.d.ts}

@@ -1,13 +1,36 @@
 import { a as WriteData$1, i as Stats, n as MakeOptions, o as WriteOptions, r as ReadOptions, t as Callback } from "./index-BQgZVQl7.js";
-import { r as SealedRead } from "./storage-WZEvw3KN.js";
+import { d as storage_d_exports, r as SealedRead } from "./storage-ZrY4Y4L5.js";
 //#region src/fs/types.d.ts
+type FileEntry = {
+  path: string;
+  size: number;
+  contentType: string | null;
+  updatedAt: string | null;
+};
 type WriteData = Blob | ArrayBuffer | Uint8Array | string;
-//#endregion
-//#region src/fs/hybrid.d.ts
+type FileSystem = {
+  available: () => Promise<boolean>;
+  list: () => Promise<FileEntry[]>;
+  readFile: (path: string) => Promise<Blob>;
+  writeFile: (path: string, data: WriteData, opts?: {
+    contentType?: string;
+  }) => Promise<void>;
+  remove: (path: string) => Promise<void>;
+};
+declare namespace hybrid_d_exports {
+  export { AdoptSummary, ConflictResolution, ConflictResolver, ConflictSide, FileConflict, FileEntry, FileSystem, WriteData, adopt$1 as adopt, adoptable$1 as adoptable, available$1 as available, list, onConflict$1 as onConflict, pending$1 as pending, pendingDeletes$1 as pendingDeletes, pull$1 as pull, readFile$1 as readFile, readFileSealed$1 as readFileSealed, remove, replicating$1 as replicating, writeFile$1 as writeFile };
+}
+declare const available$1: () => Promise<boolean>;
 declare const pending$1: () => string[];
 declare const pendingDeletes$1: () => string[];
 declare const replicating$1: () => boolean;
+declare const list: () => Promise<FileEntry[]>;
+declare const readFile$1: (path: string) => Promise<Blob>;
 declare const readFileSealed$1: (path: string) => Promise<SealedRead>;
+declare const writeFile$1: (path: string, data: WriteData, opts?: {
+  contentType?: string;
+}) => Promise<void>;
+declare const remove: (path: string) => Promise<void>;
 declare const pull$1: (path: string) => Promise<Blob>;
 type AdoptSummary = {
   uploaded: string[];

package/index.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./lib-WiHTYaNP.cjs"),n=require("./api-MW-Lm0u8.cjs"),r=require("./busy-Dv8wzE5M.cjs"),i=require("./cloud-DHuqVKrl.cjs"),a=require("./dns.cjs"),o=require("./net.cjs"),s=require("./dgram.cjs"),c=require("./http.cjs"),l=require("./extension-lR-cSs2P.cjs"),u=require("./desktop.cjs"),d=require("./fs-Bv3aFjqA.cjs"),f=require("./opfs.cjs"),p=require("./packages.cjs"),m=require("./rooms.cjs"),h=require("./account.cjs"),g=require("./connect-button-BpXDs7tw.cjs");let _=require("osra");var v=1e4,y=150,b=()=>new Promise(e=>{if(t.V())return e(!0);let n,r=setTimeout(()=>i(t.V()),v),i=t=>{clearTimeout(n),clearTimeout(r),o.disconnect(),document.removeEventListener(`readystatechange`,s),e(t)},a=()=>{clearTimeout(n),n=setTimeout(()=>i(t.V()),y)},o=new MutationObserver(()=>{t.V()&&i(!0)}),s=()=>{document.readyState===`complete`&&!t.V()&&a()};o.observe(document.documentElement,{attributes:!0,attributeFilter:[`data-fkn-extension`]}),document.addEventListener(`readystatechange`,s),document.readyState===`complete`&&a()}),x=async e=>l.r()||e.lockdown||!i.a()||await b()?t.a(e):i.i(e),S=`https://fkn.app`,C=async(e,t)=>{if(typeof window>`u`)throw Error(`FKN @fkn/lib: relayWorker must be called from the main thread`);let i=await n.u;if(!i)throw Error(`FKN @fkn/lib: relayWorker found no FKN transport in this realm`);let a=r.t(`relayed worker`);t?.unregisterSignal?.aborted?a():t?.unregisterSignal?.addEventListener(`abort`,a,{once:!0});let o=i.emit instanceof MessagePort?{}:{originA:t?.originA??S,originB:t?.originB??`*`};(0,_.relay)(i,e,{key:`fkn-api`,...o,unregisterSignal:t?.unregisterSignal})},w=async()=>typeof window>`u`?!1:(await n.a).connect.prompt(location.origin).catch(()=>!1),T=async()=>typeof window>`u`?null:(await n.a).relay.prompt().catch(()=>null),E=new Set,D=e=>(E.add(e),()=>{E.delete(e)}),O=()=>{if(E.size===0)return!1;for(let e of[...E])try{e()}catch{}return!0},k=(e,t)=>{if(typeof e?.onUpdateTaken==`function`)return Promise.resolve(e.onUpdateTaken(t))},A=e.t({applyUpdate:()=>U,busyReasons:()=>H,onUpdate:()=>L,onUpdateTaken:()=>R,updateReady:()=>j}),j=async()=>typeof window>`u`?!1:n.a.then(e=>e.shell?.updateReady()).then(e=>e===!0).catch(()=>!1),M=new Set,N=!1,P=()=>{N=!0;for(let e of[...M])try{e()}catch{}},F=0,I=()=>{let e=n.s();!e||M.size===0||F===e.epoch||(F=e.epoch,N=!1,Promise.resolve(e.remote.shell?.onUpdate(P)).catch(()=>{F===e.epoch&&(F=0)}))};typeof window<`u`&&n.l(I);var L=async e=>{if(typeof window>`u`)return()=>{};if(M.add(e),N)try{e()}catch{}return I(),()=>{M.delete(e)}},R=e=>typeof window>`u`?()=>{}:D(e),z=0,B=!1,V=()=>{if(!O()&&!B){B=!0;try{location.reload()}catch{}}};typeof window<`u`&&n.l(()=>{let e=n.s();if(!e||z===e.epoch)return;z=e.epoch;let t=k(e.remote.shell,V);if(!t){z=0;return}t.catch(()=>{z===e.epoch&&(z=0)})});var H=()=>r.n(),U=async()=>typeof window>`u`?!1:n.a.then(e=>e.shell?.applyUpdate()).then(e=>e===!0).catch(()=>!1);exports.ATTACH_FRAME_EVENT_KEY=t.i,exports.CATEGORIES=t.C,exports.EXTENSION_ABI=t.G,exports.ExtensionOperationUnsupportedError=t.K,exports.ExtensionOutdatedError=t.q,exports.FORGEABLE_HEADERS=t.I,exports.LOCATOR_DENIED=t.y,exports.LOCATOR_ERROR=t.S,exports.LOCATOR_UNSUPPORTED=t.g,exports.PERMISSION_DENIED=t.t,exports.REQUIRED_EXTENSION_ABI=t.J,Object.defineProperty(exports,"account",{enumerable:!0,get:function(){return h.t}}),exports.assertAttachableFrameUrl=t.f,exports.assertFetchableUrl=t.k,exports.assertForgeableHeaders=t.L,exports.assertLockdownApplicable=t.p,exports.assertOneCookieIdentity=t.R,exports.attachFrame=x,exports.attachFramePermission=t.l,exports.box=t.Z,Object.defineProperty(exports,"cloud",{enumerable:!0,get:function(){return i.n}}),exports.connect=w,exports.connectButtonUrl=g.t,exports.cookies=t.D,exports.createFrame=t.u,exports.createVideoElementHandle=t.Q,Object.defineProperty(exports,"desktop",{enumerable:!0,get:function(){return u.t}}),Object.defineProperty(exports,"dgram",{enumerable:!0,get:function(){return s.t}}),Object.defineProperty(exports,"dns",{enumerable:!0,get:function(){return a.t}}),Object.defineProperty(exports,"extension",{enumerable:!0,get:function(){return l.t}}),exports.fetch=l.n,exports.fetchCredentialedPermission=t.j,exports.fetchLocalPermission=t.M,exports.fetchPermission=t.N,Object.defineProperty(exports,"fs",{enumerable:!0,get:function(){return d.u}}),exports.gotoPermission=t.d,exports.handleRevivableModules=t.X,exports.hasForgedCookie=t.z,Object.defineProperty(exports,"http",{enumerable:!0,get:function(){return c.t}}),exports.isBlockedFetchUrl=t.P,exports.isBlockedFrameUrl=t.m,exports.isExtensionExposed=t.V,exports.isLocalNetworkUrl=t.F,exports.isLocatorDenied=t.h,exports.isLocatorUnsupported=t.v,exports.isPermissionDenied=t.n,exports.isTerminalError=t.x,exports.isType=t.$,exports.modifyRequestHeadersPermission=t.w,Object.defineProperty(exports,"net",{enumerable:!0,get:function(){return o.t}}),Object.defineProperty(exports,"opfs",{enumerable:!0,get:function(){return f.t}}),Object.defineProperty(exports,"packages",{enumerable:!0,get:function(){return p.t}}),exports.permissions=t.r,exports.promptInstall=l.i,exports.promptRelay=T,exports.readCookiePermission=t.O,exports.readExtensionHandshake=t.H,exports.relayWorker=C,exports.removeRequestHeaderRule=t.T,exports.revive=t.et,Object.defineProperty(exports,"rooms",{enumerable:!0,get:function(){return m.t}}),exports.setMissingExtensionHandler=t.U,exports.setRequestHeaderRule=t.E,Object.defineProperty(exports,"shell",{enumerable:!0,get:function(){return A}}),exports.supportsOperation=t.Y,exports.type=t.tt,exports.waitForExtensionExposure=t.W;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./lib-DCPdYk-N.cjs"),n=require("./api-Djf-XdZ4.cjs"),r=require("./busy-Dv8wzE5M.cjs"),i=require("./cloud-DG_-Rt-L.cjs"),a=require("./dns.cjs"),o=require("./net.cjs"),s=require("./dgram.cjs"),c=require("./http.cjs"),l=require("./extension-DisWHU7m.cjs"),u=require("./desktop.cjs"),d=require("./fs-D8RCGFNc.cjs"),f=require("./opfs.cjs"),p=require("./packages.cjs"),m=require("./rooms.cjs"),h=require("./account.cjs"),g=require("./connect-button-BpXDs7tw.cjs");let _=require("osra");var v=1e4,y=150,b=()=>new Promise(e=>{if(t.K())return e(!0);let n,r=setTimeout(()=>i(t.K()),v),i=t=>{clearTimeout(n),clearTimeout(r),o.disconnect(),document.removeEventListener(`readystatechange`,s),e(t)},a=()=>{clearTimeout(n),n=setTimeout(()=>i(t.K()),y)},o=new MutationObserver(()=>{t.K()&&i(!0)}),s=()=>{document.readyState===`complete`&&!t.K()&&a()};o.observe(document.documentElement,{attributes:!0,attributeFilter:[`data-fkn-extension`]}),document.addEventListener(`readystatechange`,s),document.readyState===`complete`&&a()}),x=(async e=>{if(t.o(e)===`window`){let n=e;return l.r()?t.a(n):i.a()?i.i(n):t.a(n)}return S(e)}),S=async e=>l.r()||e.lockdown||!i.a()||await b()?t.a(e):i.i(e),C=`https://fkn.app`,w=async(e,t)=>{if(typeof window>`u`)throw Error(`FKN @fkn/lib: relayWorker must be called from the main thread`);let i=await n.u;if(!i)throw Error(`FKN @fkn/lib: relayWorker found no FKN transport in this realm`);let a=r.t(`relayed worker`);t?.unregisterSignal?.aborted?a():t?.unregisterSignal?.addEventListener(`abort`,a,{once:!0});let o=i.emit instanceof MessagePort?{}:{originA:t?.originA??C,originB:t?.originB??`*`};(0,_.relay)(i,e,{key:`fkn-api`,...o,unregisterSignal:t?.unregisterSignal})},T=async()=>typeof window>`u`?!1:(await n.a).connect.prompt(location.origin).catch(()=>!1),E=async()=>typeof window>`u`?null:(await n.a).relay.prompt().catch(()=>null),D=new Set,O=e=>(D.add(e),()=>{D.delete(e)}),k=()=>{if(D.size===0)return!1;for(let e of[...D])try{e()}catch{}return!0},A=(e,t)=>{if(typeof e?.onUpdateTaken==`function`)return Promise.resolve(e.onUpdateTaken(t))},j=e.t({applyUpdate:()=>W,busyReasons:()=>U,onUpdate:()=>R,onUpdateTaken:()=>z,updateReady:()=>M}),M=async()=>typeof window>`u`?!1:n.a.then(e=>e.shell?.updateReady()).then(e=>e===!0).catch(()=>!1),N=new Set,P=!1,F=()=>{P=!0;for(let e of[...N])try{e()}catch{}},I=0,L=()=>{let e=n.s();e&&N.size!==0&&I!==e.epoch&&(I=e.epoch,P=!1,Promise.resolve(e.remote.shell?.onUpdate(F)).catch(()=>{I===e.epoch&&(I=0)}))};typeof window<`u`&&n.l(L);var R=async e=>{if(typeof window>`u`)return()=>{};if(N.add(e),P)try{e()}catch{}return L(),()=>{N.delete(e)}},z=e=>typeof window>`u`?()=>{}:O(e),B=0,V=!1,H=()=>{if(!k()&&!V){V=!0;try{location.reload()}catch{}}};typeof window<`u`&&n.l(()=>{let e=n.s();if(!e||B===e.epoch)return;B=e.epoch;let t=A(e.remote.shell,H);if(!t){B=0;return}t.catch(()=>{B===e.epoch&&(B=0)})});var U=()=>r.n(),W=async()=>typeof window>`u`?!1:n.a.then(e=>e.shell?.applyUpdate()).then(e=>e===!0).catch(()=>!1);exports.ATTACH_FRAME_EVENT_KEY=t.i,exports.CATEGORIES=t.O,exports.EXTENSION_ABI=t.X,exports.ExtensionOperationUnsupportedError=t.Z,exports.ExtensionOutdatedError=t.Q,exports.FORGEABLE_HEADERS=t.V,exports.FrameWindowBlockedError=t.d,exports.FrameWindowRefusedError=t.f,exports.LOCATOR_DENIED=t.w,exports.LOCATOR_ERROR=t.D,exports.LOCATOR_UNSUPPORTED=t.b,exports.PERMISSION_DENIED=t.t,exports.REQUIRED_EXTENSION_ABI=t.$,Object.defineProperty(exports,"account",{enumerable:!0,get:function(){return h.t}}),exports.assertAttachableFrameUrl=t.g,exports.assertFetchableUrl=t.P,exports.assertForgeableHeaders=t.H,exports.assertLockdownApplicable=t._,exports.assertOneCookieIdentity=t.U,exports.attachFrame=x,exports.attachFramePermission=t.p,exports.box=t.nt,Object.defineProperty(exports,"cloud",{enumerable:!0,get:function(){return i.n}}),exports.connect=T,exports.connectButtonUrl=g.t,exports.cookies=t.M,exports.createFrame=t.m,exports.createVideoElementHandle=t.rt,Object.defineProperty(exports,"desktop",{enumerable:!0,get:function(){return u.t}}),Object.defineProperty(exports,"dgram",{enumerable:!0,get:function(){return s.t}}),Object.defineProperty(exports,"dns",{enumerable:!0,get:function(){return a.t}}),Object.defineProperty(exports,"extension",{enumerable:!0,get:function(){return l.t}}),exports.fetch=l.n,exports.fetchCredentialedPermission=t.I,exports.fetchLocalPermission=t.L,exports.fetchPermission=t.R,Object.defineProperty(exports,"fs",{enumerable:!0,get:function(){return d.u}}),exports.gotoPermission=t.h,exports.handleRevivableModules=t.tt,exports.hasForgedCookie=t.W,Object.defineProperty(exports,"http",{enumerable:!0,get:function(){return c.t}}),exports.isBlockedFetchUrl=t.z,exports.isBlockedFrameUrl=t.v,exports.isExtensionExposed=t.K,exports.isLocalNetworkUrl=t.B,exports.isLocatorDenied=t.y,exports.isLocatorUnsupported=t.S,exports.isPermissionDenied=t.n,exports.isTerminalError=t.E,exports.isType=t.it,exports.modifyRequestHeadersPermission=t.k,Object.defineProperty(exports,"net",{enumerable:!0,get:function(){return o.t}}),Object.defineProperty(exports,"opfs",{enumerable:!0,get:function(){return f.t}}),Object.defineProperty(exports,"packages",{enumerable:!0,get:function(){return p.t}}),exports.permissions=t.r,exports.promptInstall=l.i,exports.promptRelay=E,exports.readCookiePermission=t.N,exports.readExtensionHandshake=t.q,exports.relayWorker=w,exports.removeRequestHeaderRule=t.A,exports.revive=t.at,Object.defineProperty(exports,"rooms",{enumerable:!0,get:function(){return m.t}}),exports.setMissingExtensionHandler=t.J,exports.setRequestHeaderRule=t.j,Object.defineProperty(exports,"shell",{enumerable:!0,get:function(){return j}}),exports.supportsOperation=t.et,exports.type=t.ot,exports.waitForExtensionExposure=t.Y;

package/index.d.ts

@@ -1,10 +1,10 @@
 import { t as account_d_exports } from "./account.js";
-import { A as modifyRequestHeadersPermission, C as LOCATOR_ERROR, D as isTerminalError, E as isLocatorUnsupported, F as cookies, G as isLocalNetworkUrl, H as fetchLocalPermission, I as readCookiePermission, J as assertOneCookieIdentity, K as FORGEABLE_HEADERS, L as FetchInit, M as setRequestHeaderRule, N as CookieDetails, O as HeaderOperation, P as SiteCookie, R as ProxyFetchRequest, S as LOCATOR_DENIED, T as isLocatorDenied, U as fetchPermission, V as fetchCredentialedPermission, W as isBlockedFetchUrl, Y as hasForgedCookie, _ as PermissionDeniedError, b as assertLockdownApplicable, c as setMissingExtensionHandler, d as ExtensionHandshake, f as ExtensionOperationUnsupportedError, g as PERMISSION_DENIED, h as supportsOperation, i as promptInstall, j as removeRequestHeaderRule, k as RequestHeaderRule, l as waitForExtensionExposure, m as REQUIRED_EXTENSION_ABI, n as fetch, o as isExtensionExposed, p as ExtensionOutdatedError, q as assertForgeableHeaders, s as readExtensionHandshake, t as extension_d_exports, u as EXTENSION_ABI, v as isPermissionDenied, w as LOCATOR_UNSUPPORTED, x as isBlockedFrameUrl, y as assertAttachableFrameUrl, z as assertFetchableUrl } from "./extension-Bm-PwsD6.js";
-import { A as Gate, C as VideoElementState, D as revive, E as isType, M as OperationRequest, N as SelectorPart, O as type, S as RemoteVideoElement, T as createVideoElementHandle, _ as CATEGORIES, a as FrameBackend, b as handleRevivableModules, c as attachFramePermission, d as CategoryGrant, f as CategoryRequest, g as permissions, h as PermissionRequest, i as Frame, j as GateTools, k as Executor, l as createFrame, m as PermissionGrant, o as GotoOptions, p as LegacyPermissionRequest, r as AttachFrameOptions, s as Locator, t as ATTACH_FRAME_EVENT_KEY, u as gotoPermission, v as CategoryMeta, w as box, x as BoxedVideoElement, y as PermissionCategory } from "./index-DIK21kfh.js";
-import { n as cloud_d_exports } from "./cloud-C40YCPuv.js";
+import { A as VideoElementState, B as SelectorPart, C as permissions, D as handleRevivableModules, E as PermissionCategory, F as type, I as Executor, L as Gate, M as createVideoElementHandle, N as isType, O as BoxedVideoElement, P as revive, R as GateTools, S as PermissionRequest, T as CategoryMeta, _ as gotoPermission, a as AttachWindowOptions, b as LegacyPermissionRequest, c as FrameWindowBlockedError, d as FrameWindowRefusedError, f as GotoOptions, g as createFrame, h as attachFramePermission, i as AttachFrameOptions, j as box, k as RemoteVideoElement, l as FrameWindowOptions, m as WindowFrame, o as Frame, p as Locator, r as AttachFrameFunction, s as FrameBackend, t as ATTACH_FRAME_EVENT_KEY, u as FrameWindowRefusal, v as CategoryGrant, w as CATEGORIES, x as PermissionGrant, y as CategoryRequest, z as OperationRequest } from "./index-BWJSnpRB.js";
+import { A as readCookiePermission, B as FORGEABLE_HEADERS, C as RequestHeaderRule, D as CookieDetails, E as setRequestHeaderRule, F as fetchCredentialedPermission, G as LOCATOR_ERROR, H as assertOneCookieIdentity, I as fetchLocalPermission, J as isLocatorUnsupported, K as LOCATOR_UNSUPPORTED, L as fetchPermission, M as ProxyFetchRequest, N as assertFetchableUrl, O as SiteCookie, R as isBlockedFetchUrl, S as HeaderOperation, T as removeRequestHeaderRule, U as hasForgedCookie, V as assertForgeableHeaders, W as LOCATOR_DENIED, Y as isTerminalError, _ as PermissionDeniedError, b as assertLockdownApplicable, c as setMissingExtensionHandler, d as ExtensionHandshake, f as ExtensionOperationUnsupportedError, g as PERMISSION_DENIED, h as supportsOperation, i as promptInstall, j as FetchInit, k as cookies, l as waitForExtensionExposure, m as REQUIRED_EXTENSION_ABI, n as fetch, o as isExtensionExposed, p as ExtensionOutdatedError, q as isLocatorDenied, s as readExtensionHandshake, t as extension_d_exports, u as EXTENSION_ABI, v as isPermissionDenied, w as modifyRequestHeadersPermission, x as isBlockedFrameUrl, y as assertAttachableFrameUrl, z as isLocalNetworkUrl } from "./extension-C9BRlqEY.js";
+import { n as cloud_d_exports } from "./cloud-Cqdq7Ujd.js";
 import { t as dns_d_exports } from "./dns.js";
-import { u as index_d_exports } from "./index-Cg6y_FTi.js";
-import { s as net_d_exports } from "./net-BBtYFEzu.js";
+import { u as index_d_exports } from "./index-kuPqkS_-.js";
+import { s as net_d_exports } from "./net-BWFTx3k_.js";
 import { t as dgram_d_exports } from "./dgram.js";
 import { t as http_d_exports } from "./http.js";
 import { t as desktop_d_exports } from "./desktop.js";
@@ -13,20 +13,35 @@ import { t as packages_d_exports } from "./packages.js";
 import { t as rooms_d_exports } from "./rooms.js";
 import { t as connectButtonUrl } from "./connect-button-Cp0NS95-.js";
 //#region src/frame.d.ts
-declare const attachFrame: (options: AttachFrameOptions) => Promise<Frame>;
+/**
+ * Attaches FKN to an iframe the app mounted, on the extension when it is installed and on the cloud
+ * render proxy otherwise, or with `{ window }` opens the attachment in a window of its own.
+ *
+ * A window opens before the first await, so call this directly in the click or key handler whose
+ * activation opens it. It never waits for the extension to expose itself: a click lands on a loaded
+ * page, where the extension has exposed itself or never will.
+ *
+ * In this release only the cloud backend serves a window. With the extension installed, a window
+ * is refused at once with `ExtensionOperationUnsupportedError` (operation `'attachWindow'`), before
+ * anything opens or is waited for, so the same click can still open one with
+ * `cloud.attachFrame({ window })`. That window runs on this app's cloud cookie jar, not on the
+ * extension's: a sign-in made in it reaches this app's cloud frames, never an iframe attached
+ * through the extension.
+ */
+export declare const attachFrame: AttachFrameFunction;
 //#endregion
 //#region src/relay.d.ts
-declare const relayWorker: (worker: Worker, options?: {
+export declare const relayWorker: (worker: Worker, options?: {
   unregisterSignal?: AbortSignal;
   originA?: string;
   originB?: string;
 }) => Promise<void>;
 //#endregion
 //#region src/connect.d.ts
-declare const connect: () => Promise<boolean>;
+export declare const connect: () => Promise<boolean>;
 //#endregion
 //#region src/relay-prompt.d.ts
-declare const promptRelay: () => Promise<string | null>;
+export declare const promptRelay: () => Promise<string | null>;
 declare namespace shell_d_exports {
   export { applyUpdate, busyReasons, onUpdate, onUpdateTaken, updateReady };
 }
@@ -39,7 +54,10 @@ declare namespace shell_d_exports {
  * - **READY**, `onUpdate` / `updateReady`. A newer shell has been downloaded behind the page and
  *   nothing has happened. The broker offers it in its own header, and `applyUpdate` is the app's
  *   way to offer it too. It is never taken without a person asking, because only the app knows what
- *   a reload costs right now, and a torrent mid-download is the case that matters.
+ *   a reload costs right now, and a torrent mid-download is the case that matters. The one exception
+ *   is a broker frame that finds a newer shell as it loads, before it has answered this page at all,
+ *   while no other fkn.app window is open: it reloads its own frame first, so this page's first
+ *   connection is simply to the newer shell and nothing of the app is interrupted.
  * - **TAKEN**, `onUpdateTaken`. Someone pressed update, here or in another tab, and the new shell is
  *   now in control of every page on the origin. That leaves each one running a new worker against a
  *   document from the old build, so the lib RELOADS THE PAGE by default to end the mix. An app that
@@ -111,4 +129,4 @@ declare const busyReasons: () => string[];
  */
 declare const applyUpdate: () => Promise<boolean>;
 //#endregion
-export { ATTACH_FRAME_EVENT_KEY, AttachFrameOptions, BoxedVideoElement, CATEGORIES, CategoryGrant, type CategoryMeta, CategoryRequest, CookieDetails, EXTENSION_ABI, type Executor, type ExtensionHandshake, ExtensionOperationUnsupportedError, ExtensionOutdatedError, FORGEABLE_HEADERS, FetchInit, Frame, FrameBackend, type Gate, type GateTools, GotoOptions, HeaderOperation, LOCATOR_DENIED, LOCATOR_ERROR, LOCATOR_UNSUPPORTED, LegacyPermissionRequest, Locator, type OperationRequest, PERMISSION_DENIED, type PermissionCategory, type PermissionDeniedError, PermissionGrant, PermissionRequest, ProxyFetchRequest, REQUIRED_EXTENSION_ABI, RemoteVideoElement, RequestHeaderRule, type SelectorPart, SiteCookie, VideoElementState, account_d_exports as account, assertAttachableFrameUrl, assertFetchableUrl, assertForgeableHeaders, assertLockdownApplicable, assertOneCookieIdentity, attachFrame, attachFramePermission, box, cloud_d_exports as cloud, connect, connectButtonUrl, cookies, createFrame, createVideoElementHandle, desktop_d_exports as desktop, dgram_d_exports as dgram, dns_d_exports as dns, extension_d_exports as extension, fetch, fetchCredentialedPermission, fetchLocalPermission, fetchPermission, index_d_exports as fs, gotoPermission, handleRevivableModules, hasForgedCookie, http_d_exports as http, isBlockedFetchUrl, isBlockedFrameUrl, isExtensionExposed, isLocalNetworkUrl, isLocatorDenied, isLocatorUnsupported, isPermissionDenied, isTerminalError, isType, modifyRequestHeadersPermission, net_d_exports as net, index_d_exports$1 as opfs, packages_d_exports as packages, permissions, promptInstall, promptRelay, readCookiePermission, readExtensionHandshake, relayWorker, removeRequestHeaderRule, revive, rooms_d_exports as rooms, setMissingExtensionHandler, setRequestHeaderRule, shell_d_exports as shell, supportsOperation, type, waitForExtensionExposure };
+export { ATTACH_FRAME_EVENT_KEY, AttachFrameOptions, AttachWindowOptions, BoxedVideoElement, CATEGORIES, CategoryGrant, type CategoryMeta, CategoryRequest, CookieDetails, EXTENSION_ABI, type Executor, type ExtensionHandshake, ExtensionOperationUnsupportedError, ExtensionOutdatedError, FORGEABLE_HEADERS, FetchInit, Frame, FrameBackend, FrameWindowBlockedError, FrameWindowOptions, FrameWindowRefusal, FrameWindowRefusedError, type Gate, type GateTools, GotoOptions, HeaderOperation, LOCATOR_DENIED, LOCATOR_ERROR, LOCATOR_UNSUPPORTED, LegacyPermissionRequest, Locator, type OperationRequest, PERMISSION_DENIED, type PermissionCategory, type PermissionDeniedError, PermissionGrant, PermissionRequest, ProxyFetchRequest, REQUIRED_EXTENSION_ABI, RemoteVideoElement, RequestHeaderRule, type SelectorPart, SiteCookie, VideoElementState, WindowFrame, account_d_exports as account, assertAttachableFrameUrl, assertFetchableUrl, assertForgeableHeaders, assertLockdownApplicable, assertOneCookieIdentity, attachFramePermission, box, cloud_d_exports as cloud, connectButtonUrl, cookies, createFrame, createVideoElementHandle, desktop_d_exports as desktop, dgram_d_exports as dgram, dns_d_exports as dns, extension_d_exports as extension, fetch, fetchCredentialedPermission, fetchLocalPermission, fetchPermission, index_d_exports as fs, gotoPermission, handleRevivableModules, hasForgedCookie, http_d_exports as http, isBlockedFetchUrl, isBlockedFrameUrl, isExtensionExposed, isLocalNetworkUrl, isLocatorDenied, isLocatorUnsupported, isPermissionDenied, isTerminalError, isType, modifyRequestHeadersPermission, net_d_exports as net, index_d_exports$1 as opfs, packages_d_exports as packages, permissions, promptInstall, readCookiePermission, readExtensionHandshake, removeRequestHeaderRule, revive, rooms_d_exports as rooms, setMissingExtensionHandler, setRequestHeaderRule, shell_d_exports as shell, supportsOperation, type, waitForExtensionExposure };