@fkn/lib 0.9.35 → 0.9.37

package/{net-0SlODFSM.d.ts → net-eCY_QD4P.d.ts}

@@ -1,6 +1,6 @@
 import { o as TcpSocketOption } from "./wire-Gbo-D74t.js";
-import { B as Resolvers, gt as TcpSocketResult, mt as TcpSocketListenerResult } from "./contract-D37GGkou.js";
-import "./api-CfmRAze5.js";
+import { H as Resolvers, bt as TcpSocketResult, vt as TcpSocketListenerResult } from "./contract-_nWuFitS.js";
+import "./api-CZI08srV.js";
 import { AddressInfo, ListenOptions, Server, ServerOpts, Socket, SocketConnectOpts, SocketConstructorOpts } from "net";
 import { DuplexOptions, Stream } from "stream";
 import { EventEmitter } from "events";

package/net.d.ts

@@ -1,2 +1,2 @@
-import { a as createConnection, c as isIP, i as connect, l as isIPv4, n as Socket, o as createServer, r as _default, t as Server, u as isIPv6 } from "./net-0SlODFSM.js";
+import { a as createConnection, c as isIP, i as connect, l as isIPv4, n as Socket, o as createServer, r as _default, t as Server, u as isIPv6 } from "./net-eCY_QD4P.js";
 export { Server, Socket, _default, _default as default, connect, createConnection, createServer, isIP, isIPv4, isIPv6 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fkn/lib",
-  "version": "0.9.35",
+  "version": "0.9.37",
   "main": "index.js",
   "types": "index.d.ts",
   "type": "module",

package/packages.d.ts

@@ -1,4 +1,4 @@
-import { A as PackageResult, N as PickOptions, P as Placement, S as InstalledPackage, f as ConnectOptions, ft as SurfaceRect, j as PackagesErrorCode, k as PackageQuery, x as InstallOptions, z as Radii } from "./contract-D37GGkou.js";
+import { C as InstallOptions, F as PickOptions, I as Placement, M as PackageResult, N as PackagesErrorCode, V as Radii, f as ConnectOptions, gt as SurfaceRect, j as PackageQuery, w as InstalledPackage } from "./contract-_nWuFitS.js";
 import { Remote } from "osra";
 declare namespace packages_d_exports {
   export { AppConnectOptions, Connect, ConnectOptions, ConnectPayload, IncomingConnection, IncomingConnectionInfo, InstallOptions, InstalledPackage, MountOptions, MountedPackage, PackageConnection, PackageQuery, PackageResult, PackageView, PackagesError, PackagesErrorCode, PickOptions, Placement, Radii, RawPackageConnection, ShowOptions, SurfaceRect, attach, connect, hide, install, isVisible, list, mount, onConnect, onVisibilityChange, pick, search, show, uninstall };

package/{proxy-Bmb2wxG1.d.ts → proxy-CrTXoFQK.d.ts}

@@ -1,5 +1,5 @@
-import { B as Resolvers } from "./contract-D37GGkou.js";
-import "./api-CfmRAze5.js";
+import { H as Resolvers } from "./contract-_nWuFitS.js";
+import "./api-CZI08srV.js";
 //#region src/proxy.d.ts
 type ProxyFetch = Resolvers['cloud']['fetch'];
 type FetchParameters = Parameters<ProxyFetch>;

package/rooms.d.ts

@@ -1,4 +1,4 @@
-import { $ as RoomPermissions, G as RoomEvent, H as RoomCreateOptions, J as RoomMailbox, Q as RoomPermission, U as RoomDefaults, V as RoomBacklog, W as RoomEnd, X as RoomMessage, Y as RoomMember, Z as RoomOpenOptions, et as RoomsErrorCode, q as RoomJoinOptions } from "./contract-D37GGkou.js";
+import { $ as RoomOpenOptions, G as RoomDefaults, K as RoomEnd, Q as RoomMessage, U as RoomBacklog, W as RoomCreateOptions, X as RoomMailbox, Y as RoomJoinOptions, Z as RoomMember, et as RoomPermission, nt as RoomsErrorCode, q as RoomEvent, tt as RoomPermissions } from "./contract-_nWuFitS.js";
 declare namespace rooms_d_exports {
   export { RoomCreateOptions as CreateOptions, RoomJoinOptions as JoinOptions, RoomOpenOptions as OpenOptions, Room, RoomBacklog, RoomDefaults, RoomEnd, RoomEvent, RoomMailbox, RoomMember, RoomMessage, RoomPermission, RoomPermissions, RoomsError, RoomsErrorCode, available, create, join, open };
 }

package/cloud-B9Sd7V1g.js

@@ -1,422 +0,0 @@
-import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
-import { b as t, c as n, d as r, et as i, f as a, g as o, l as s, m as c, o as l, s as u, u as d, w as f, x as p } from "./lib-B-jGWfsv.js";
-import { f as m, s as h, t as g } from "./hosts-C4-8lWwz.js";
-import { a as _, c as v, n as y, o as b } from "./api-CtiKFcK3.js";
-import { t as x } from "./busy-B189uX--.js";
-import { t as S } from "./proxy-DDwY3AVG.js";
-import { frameFetchVerdict as C } from "./attach-policy.js";
-import { ATTACH_FRAME_KEY as w, ATTACH_WINDOW_KEY as T, ATTACH_WINDOW_MESSAGE as E, WINDOW_HANDSHAKE_TIMEOUT_MS as ee } from "./contract.js";
-import { t as D } from "./dns.js";
-import { t as O } from "./cloud/fs.js";
-import { t as k } from "./net.js";
-import { t as A } from "./dgram.js";
-import { t as j } from "./http.js";
-import { expose as M } from "osra";
-//#region src/cloud/frame-broker.ts
-var N = async () => {
-	let e = () => b("frame consent");
-	try {
-		let t = await e();
-		return {
-			request: typeof t.frameConsent.request == "function" ? t.frameConsent.request : void 0,
-			ensure: t.frameConsent.ensure
-		};
-	} catch (t) {
-		if (!(t instanceof y)) throw t;
-		return {
-			request: void 0,
-			ensure: (t) => e().then((e) => e.frameConsent.ensure(t))
-		};
-	}
-}, P = "frame: this frame no longer holds the document the app attached it to", F = !1, te = () => {
-	F || (F = !0, console.warn("[fkn-frame] this FKN broker is too old to ask for permission categories, so nothing was asked for upfront and each capability is asked for as it is first used. Reloading the page picks up the current broker."));
-}, ne = (e) => [...e].flatMap((e) => {
-	try {
-		return [new URL(e).hostname];
-	} catch {
-		return [];
-	}
-}), I = (e, t, n) => n === null ? `frame.${e}: the user did not grant ${t} here` : `frame.${e}: the user did not grant ${t} on ${n}`, re = (e) => {
-	let { assertLive: t, attach: r, current: i, declaredHosts: a, documentHost: o, ensure: c, request: l, session: u, approvedOrigins: p } = e, _ = /* @__PURE__ */ new Set(), v = async () => o ? await o() : (() => {
-		try {
-			return new URL(i()).hostname;
-		} catch {
-			return "";
-		}
-	})(), y = () => g([...a, ...ne(p)]), b = async (e) => (await l([e]))[0] ?? !1;
-	return {
-		gate: async ({ operation: e, args: n, phase: i }) => {
-			t();
-			let o = m(e, n);
-			if (o === null) return;
-			let x = d(o);
-			if (x === void 0 || x === "auto") return;
-			if (e === "fetch") {
-				let e = C({
-					session: u,
-					declaredHosts: a,
-					approvedOrigins: p
-				}, i === "ensure" ? void 0 : n[0], { classifier: "fetchTarget" });
-				if (i === "ensure" && !u) throw f(e.kind === "refuse" ? e.reason : "", "fetch");
-				if (i !== "ensure" && e.kind === "refuse") throw f(e.reason, "fetch");
-				if (!l) {
-					if (e.kind === "refuse") throw f(e.reason, "fetch");
-					if (!await c({
-						scope: h(n[0], n[1]).scope,
-						hosts: e.promptHosts
-					})) throw f("frame.fetch: the user did not grant this", "fetch");
-					return;
-				}
-				let t = e.kind === "consent" ? e.targetHost : await v(), r = g([t, ...a]);
-				if (!r.length) throw f("frame: navigate the frame before fetch", "fetch");
-				if (await b({
-					category: "network",
-					hosts: r
-				}) === !1) throw f(I("fetch", "network", t || null), "fetch");
-				return;
-			}
-			let S = await v();
-			if (!S) throw f(`frame: navigate the frame before ${e}`, e);
-			if (!y().includes(S)) throw f(P, e);
-			if (!l) return;
-			let w = s(o);
-			if (w === void 0 || x === "critical" && _.has(`${o} ${S}`)) return;
-			let T = g([S, ...a]), E = await b(x === "critical" ? {
-				key: o,
-				hosts: T,
-				attach: r
-			} : {
-				category: w,
-				hosts: T
-			});
-			if (E === !1) throw f(I(e, w, null), e);
-			if (E === "once" && i !== "ensure") for (let e of T) _.add(`${o} ${e}`);
-		},
-		requestCategories: async (e) => {
-			t();
-			let i = await v(), o = g(i ? [i, ...a] : a);
-			if (!o.length) throw TypeError("frame.request: navigate the frame or declare domains first");
-			let s = e.map((e) => {
-				let t = e.key;
-				return {
-					named: t,
-					critical: t !== void 0 && d(t) === "critical",
-					category: e.category ?? (t === void 0 ? void 0 : n(t)) ?? "interaction"
-				};
-			}), c = ({ named: e, critical: t, category: n }, r) => ({
-				category: n,
-				...t ? { key: e } : {},
-				hosts: o,
-				allow: r
-			});
-			if (!l) return te(), s.map((e) => c(e, !1));
-			let u = await l(s.map(({ named: e, critical: t, category: n }) => t ? {
-				key: e,
-				hosts: o,
-				attach: r
-			} : {
-				category: n,
-				hosts: o
-			}));
-			return s.map((e, t) => c(e, u[t] !== void 0 && u[t] !== !1));
-		}
-	};
-}, L = (e) => e, ie = 5e3, ae = /* @__PURE__ */ new Set([]), R = () => "https://fkn.app", z = (e) => e ? "" : `incognito-${crypto.randomUUID()}`, B = (e, t, n) => {
-	let r, i = new Promise((e, i) => {
-		r = setTimeout(() => i(Error(n)), t);
-	});
-	return Promise.race([e, i]).finally(() => clearTimeout(r));
-}, V = (e) => Object.assign(Error(e), { name: t }), H = ({ control: e, target: t, session: n, declaredHosts: r, approvedOrigins: i, attach: a, assertLive: o, guard: s, consent: l, onNavigated: u }) => {
-	let d = t, { gate: f, requestCategories: m } = re({
-		session: n,
-		declaredHosts: r,
-		approvedOrigins: i,
-		attach: a,
-		assertLive: o,
-		documentHost: typeof e.documentHost == "function" ? () => s(() => e.documentHost()) : void 0,
-		current: () => d,
-		...l
-	});
-	return c({
-		executor: {
-			execute: (t, n, r) => ae.has(n) ? Promise.reject(p(n, "cloud")) : (o(), s(() => e.executeLocator(t, n, r))),
-			highlight: async () => {}
-		},
-		gate: f,
-		request: m,
-		goto: async (t, n = {}) => {
-			let r = new URL(t, location.href).href;
-			o();
-			let { timeoutMs: a } = n, c = (() => {
-				try {
-					return new URL(r).origin;
-				} catch {
-					return "";
-				}
-			})(), l = c !== "" && !i.has(c);
-			l && i.add(c);
-			try {
-				await B(s(() => e.goto(r, n)), (a ?? 3e4) + ie, "cloud.attachFrame: the render proxy did not answer goto; the frame may have been detached or its page reloaded");
-			} catch (e) {
-				throw l && i.delete(c), e;
-			}
-			d = r, u();
-		},
-		url: () => d
-	});
-}, oe = 250, U = 500, W = 65e3, G = 2e3, K = 2e3, se = 2, ce = 2e3, le = 2e3, ue = ({ origin: e, target: t, session: n, domains: r, attach: i }) => {
-	let a = new URL("/attach-window", e);
-	return a.searchParams.set("attach", i), t && a.searchParams.set("url", t), n && a.searchParams.set("session", n), r.length && a.searchParams.set("domains", r.join(",")), a.href;
-}, de = (e, t) => {
-	let n = document.createElement("iframe"), r = new URL("/attach-jar", e);
-	return r.searchParams.set("attach", t), n.src = r.href, n.tabIndex = -1, n.setAttribute("aria-hidden", "true"), n.setAttribute("style", "display:none"), (document.body ?? document.documentElement).appendChild(n), n;
-}, fe = (e, t) => {
-	let n = new MutationObserver(() => {
-		e.isConnected || t.aborted || (n.disconnect(), console.warn("cloud.attachFrame: the window's jar anchor was removed from this page, so a sign-in in the window no longer reaches this app's cookie jar"));
-	});
-	e.parentNode && n.observe(e.parentNode, { childList: !0 }), n.observe(document.documentElement, { childList: !0 }), t.addEventListener("abort", () => n.disconnect(), { once: !0 });
-}, q = () => V("cloud.attachFrame: the attached window closed, reloaded or left the page FKN attached; attach a fresh window"), J = () => V("cloud.attachFrame: the attached window stopped answering; attach a fresh window"), pe = () => V("cloud.attachFrame: the window went away before it connected; attach a fresh window"), me = () => V("cloud.attachFrame: the window closed before it connected. Either the user closed it, or this page's Cross-Origin-Opener-Policy cut its link to the window"), he = async (e) => {
-	if (typeof window > "u") throw Error("cloud.attachFrame needs a window realm");
-	let { domains: t = [], syncCookies: n = !0, permissions: o } = e, { url: s, width: c, height: l } = u(e.window);
-	if (window.origin === "null") throw new a("opaque-opener");
-	let d = R(), f = crypto.randomUUID(), p = z(n), m = g(t), h = /* @__PURE__ */ new Set();
-	s && h.add(new URL(s).origin);
-	let _ = n ? de(d, f) : null, v = window.open(ue({
-		origin: d,
-		target: s,
-		session: p,
-		domains: m,
-		attach: f
-	}), "_blank", `popup,width=${c},height=${l}`);
-	if (!v) throw _?.remove(), new r();
-	let y = new AbortController(), b = !1, S = null, C = (e, t = !1) => {
-		if (S === null) {
-			S = e, y.abort(t ? J() : q());
-			try {
-				v.closed || v.postMessage({
-					type: E.detach,
-					attach: f,
-					...t ? { unanswered: t } : {}
-				}, d);
-			} catch {}
-			_ && setTimeout(() => _.remove(), le);
-		}
-	};
-	_ && fe(_, y.signal);
-	let w = new Promise((e, t) => {
-		y.signal.addEventListener("abort", () => t(y.signal.reason), { once: !0 });
-	});
-	w.catch(() => {});
-	let D = w.then(() => {}, () => {}), O = () => {
-		if (y.signal.aborted) throw y.signal.reason;
-	}, k = (e) => y.signal.aborted ? Promise.reject(y.signal.reason) : Promise.race([e(), w]), A = (e) => e.source === v && e.origin === d;
-	window.addEventListener("message", (e) => {
-		if (!A(e)) return;
-		let t = e.data;
-		typeof t == "object" && t && t.attach === f && (t.type === E.refused ? C(new a(t.reason)) : t.type === E.gone && C(b ? q() : pe()));
-	}, { signal: y.signal }), window.addEventListener("pagehide", () => C(q()), { signal: y.signal });
-	let j = () => {
-		try {
-			v.postMessage({
-				type: E.hello,
-				attach: f
-			}, d);
-		} catch {}
-	};
-	j();
-	let N = setInterval(j, oe), P = setInterval(() => {
-		v.closed && C(b ? q() : me());
-	}, U);
-	y.signal.addEventListener("abort", () => {
-		clearInterval(N), clearInterval(P);
-	}, { once: !0 });
-	let F = async (e) => {
-		try {
-			return await Promise.race([e, w]);
-		} catch (e) {
-			throw S ?? e;
-		}
-	};
-	try {
-		let e = await F(B(M({}, {
-			key: T,
-			transport: {
-				emit: (e, t) => v.postMessage(e, d, t ?? []),
-				receive: (e) => {
-					let t = (t) => {
-						A(t) && e(t.data, {
-							source: t.source,
-							origin: t.origin
-						});
-					};
-					return window.addEventListener("message", t), () => window.removeEventListener("message", t);
-				}
-			},
-			unregisterSignal: y.signal,
-			revivableModules: L(i)
-		}), ee, "cloud.attachFrame: timed out connecting to the window"));
-		b = !0, clearInterval(N);
-		let t = 0, n = setInterval(() => {
-			B(k(() => e.ping()), K, "ping").then(() => {
-				t = 0;
-			}, () => {
-				y.signal.aborted || (document.visibilityState === "hidden" ? t = 0 : ++t >= se && C(J(), !0));
-			});
-		}, G);
-		y.signal.addEventListener("abort", () => clearInterval(n), { once: !0 }), await F(B(e.ready(), W, "cloud.attachFrame: the window never became ready"));
-		let r = x("attached frame");
-		y.signal.aborted ? r() : y.signal.addEventListener("abort", r, { once: !0 });
-		let a = H({
-			control: e,
-			target: s,
-			session: p,
-			declaredHosts: m,
-			approvedOrigins: h,
-			attach: f,
-			assertLive: O,
-			guard: k,
-			consent: {
-				request: (t) => k(() => e.requestConsent(t)),
-				ensure: (t) => k(() => e.requestConsent([t])).then(([e]) => e !== void 0 && e !== !1)
-			},
-			onNavigated: () => {}
-		}), c = null, l = () => c ??= (async () => {
-			y.signal.aborted || await B(Promise.allSettled([k(() => e.flushCookies()), k(() => e.sweepStorage())]), ce, "close").catch(() => {});
-			try {
-				v.close();
-			} catch {}
-			C(q());
-		})(), u = {
-			...a,
-			close: l,
-			closed: D
-		};
-		return o?.length && await F(u.request(o)), u;
-	} catch (e) {
-		let t = S ?? e;
-		if (!(t instanceof a)) try {
-			v.close();
-		} catch {}
-		throw C(t), t;
-	}
-}, ge = "autoplay; fullscreen; encrypted-media; picture-in-picture; clipboard-read; clipboard-write", _e = 2e4, ve = 65e3, ye = (e) => !e || e === "about:blank", be = ({ target: e, session: t, domains: n, attach: r }) => {
-	let i = new URL("/attach-frame", R());
-	return e && i.searchParams.set("url", e), t && i.searchParams.set("session", t), n.length && i.searchParams.set("domains", n.join(",")), i.searchParams.set("attach", r), i.href;
-}, xe = (e, t) => {
-	let n = () => {
-		a(), t();
-	}, r = e.parentNode, i = new MutationObserver(() => {
-		(!e.isConnected || e.parentNode !== r) && (a(), t());
-	}), a = () => {
-		window.removeEventListener("pagehide", n), i.disconnect();
-	};
-	window.addEventListener("pagehide", n, { once: !0 }), r && i.observe(r, { childList: !0 }), e.isConnected || (a(), t());
-}, Se = () => V("cloud.attachFrame: the attached iframe left the document or was reloaded; attach a fresh iframe"), Ce = (e, t) => {
-	let n = [...e.split(";"), ...t.split(";")].map((e) => e.trim()).filter(Boolean);
-	return [...new Set(n)].join("; ");
-}, Y = [
-	300,
-	1200,
-	4e3
-], X = (e) => {
-	let t = () => {
-		if (!e.isConnected) return;
-		let t = e.style.height, n = e.getBoundingClientRect();
-		n.height && (e.style.height = `${n.height - 1}px`, setTimeout(() => {
-			e.style.height = t;
-		}, 50));
-	};
-	t();
-	for (let e of Y) setTimeout(t, e);
-}, we = (e) => {
-	let t = e.getAttribute("sandbox");
-	if (t === null) return;
-	let n = new Set(t.toLowerCase().split(/\s+/).filter(Boolean)), r = ["allow-scripts", "allow-same-origin"].filter((e) => !n.has(e));
-	if (r.length) throw Error(`cloud.attachFrame: the iframe's sandbox attribute must include ${r.join(" and ")} for the render proxy to load`);
-}, Te = async ({ iframe: e, domains: t = [], syncCookies: n = !0, lockdown: r = !1, permissions: a }) => {
-	if (typeof window > "u") throw Error("cloud.attachFrame needs a window realm");
-	if (r) throw Error("cloud.attachFrame does not support lockdown; use the extension backend for a sealed frame");
-	if (!e.isConnected) throw Error("cloud.attachFrame: the iframe must be connected to the document before attaching");
-	we(e);
-	let s = e.getAttribute("src") ?? "", c = (() => {
-		if (ye(s)) return null;
-		try {
-			return new URL(e.src || s, location.href);
-		} catch {
-			throw Error(`cloud.attachFrame: the iframe src is not a valid URL: ${s}`);
-		}
-	})();
-	if (c) {
-		let e = new URL("/attach-frame", R());
-		if (c.origin === e.origin && c.pathname === e.pathname) throw Error("cloud.attachFrame: this iframe is already attached; navigate with the Frame returned by that attach or use a fresh iframe");
-	}
-	let l = c?.href ?? "";
-	l && o(l);
-	let u = z(n), d = g(t), f = /* @__PURE__ */ new Set();
-	try {
-		f.add(new URL(l).origin);
-	} catch {}
-	let p = new AbortController(), m = e.referrerPolicy, h = e.allow, _ = crypto.randomUUID();
-	if (e.referrerPolicy = "origin", e.allow = Ce(ge, e.allow), e.src = be({
-		target: l,
-		session: u,
-		domains: d,
-		attach: _
-	}), !e.contentWindow) throw Error("cloud.attachFrame: the iframe window is not available");
-	try {
-		let t = await B(M({}, {
-			key: w,
-			origin: R(),
-			transport: {
-				receive: window,
-				emit: e.contentWindow
-			},
-			unregisterSignal: p.signal,
-			revivableModules: L(i)
-		}), _e, "cloud.attachFrame: timed out connecting to the render proxy page");
-		await B(t.ready(), ve, "cloud.attachFrame: the render proxy never became ready"), l && X(e), xe(e, () => p.abort());
-		let n = x("attached frame");
-		p.signal.aborted ? n() : p.signal.addEventListener("abort", n, { once: !0 });
-		let r = e.contentWindow, o = H({
-			control: t,
-			target: l,
-			session: u,
-			declaredHosts: d,
-			approvedOrigins: f,
-			attach: _,
-			assertLive: () => {
-				if (p.signal.aborted || !e.isConnected || e.contentWindow !== r) throw p.abort(), Se();
-			},
-			guard: (e) => e(),
-			consent: await N(),
-			onNavigated: () => X(e)
-		});
-		return a?.length && await o.request(a), o;
-	} catch (t) {
-		throw p.abort(), e.referrerPolicy = m, e.allow = h, e.src = l || "about:blank", t;
-	}
-}, Z = (async (e) => l(e) === "window" ? he(e) : Te(e)), Ee = () => typeof window < "u" && !0, Q = async () => {
-	let e = await _.then((e) => e.cloud.quota());
-	return {
-		premium: e.premium,
-		overQuota: e.overQuota,
-		throttled: e.overQuota && !e.premium,
-		usedBytes: e.usedBytes,
-		limitBytes: e.limitBytes,
-		remainingBytes: e.remaining,
-		bytesPerSecond: e.bytesPerSecond,
-		bitsPerSecond: e.bytesPerSecond * 8
-	};
-}, De = /* @__PURE__ */ e({
-	attachFrame: () => Z,
-	available: () => $,
-	dgram: () => A,
-	dns: () => D,
-	fetch: () => S,
-	fs: () => O,
-	http: () => j,
-	net: () => k,
-	quota: () => Q
-}), $ = () => v;
-//#endregion
-export { Ee as a, Z as i, De as n, Q as r, $ as t };

package/cloud-DCWD_0sd.cjs

@@ -1 +0,0 @@
-const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./lib-Cjd91q7g.cjs"),n=require("./hosts-DD4rDeQH.cjs"),r=require("./api-Djf-XdZ4.cjs"),i=require("./busy-Dv8wzE5M.cjs"),a=require("./proxy-CYcaW5ew.cjs"),o=require("./attach-policy.cjs"),s=require("./contract.cjs"),c=require("./dns.cjs"),l=require("./cloud/fs.cjs"),u=require("./net.cjs"),d=require("./dgram.cjs"),f=require("./http.cjs");let p=require("osra");var m=async()=>{let e=()=>r.o(`frame consent`);try{let t=await e();return{request:typeof t.frameConsent.request==`function`?t.frameConsent.request:void 0,ensure:t.frameConsent.ensure}}catch(t){if(!(t instanceof r.n))throw t;return{request:void 0,ensure:t=>e().then(e=>e.frameConsent.ensure(t))}}},h=`frame: this frame no longer holds the document the app attached it to`,g=!1,_=()=>{g||(g=!0,console.warn(`[fkn-frame] this FKN broker is too old to ask for permission categories, so nothing was asked for upfront and each capability is asked for as it is first used. Reloading the page picks up the current broker.`))},v=e=>[...e].flatMap(e=>{try{return[new URL(e).hostname]}catch{return[]}}),y=(e,t,n)=>n===null?`frame.${e}: the user did not grant ${t} here`:`frame.${e}: the user did not grant ${t} on ${n}`,b=e=>{let{assertLive:r,attach:i,current:a,declaredHosts:s,documentHost:c,ensure:l,request:u,session:d,approvedOrigins:f}=e,p=new Set,m=async()=>c?await c():(()=>{try{return new URL(a()).hostname}catch{return``}})(),g=()=>n.t([...s,...v(f)]),b=async e=>(await u([e]))[0]??!1;return{gate:async({operation:e,args:a,phase:c})=>{r();let _=n.f(e,a);if(_===null)return;let v=t.u(_);if(v===void 0||v===`auto`)return;if(e===`fetch`){let e=o.frameFetchVerdict({session:d,declaredHosts:s,approvedOrigins:f},c===`ensure`?void 0:a[0],{classifier:`fetchTarget`});if(c===`ensure`&&!d)throw t.w(e.kind===`refuse`?e.reason:``,`fetch`);if(c!==`ensure`&&e.kind===`refuse`)throw t.w(e.reason,`fetch`);if(!u){if(e.kind===`refuse`)throw t.w(e.reason,`fetch`);if(!await l({scope:n.s(a[0],a[1]).scope,hosts:e.promptHosts}))throw t.w(`frame.fetch: the user did not grant this`,`fetch`);return}let r=e.kind===`consent`?e.targetHost:await m(),i=n.t([r,...s]);if(!i.length)throw t.w(`frame: navigate the frame before fetch`,`fetch`);if(await b({category:`network`,hosts:i})===!1)throw t.w(y(`fetch`,`network`,r||null),`fetch`);return}let x=await m();if(!x)throw t.w(`frame: navigate the frame before ${e}`,e);if(!g().includes(x))throw t.w(h,e);if(!u)return;let S=t.l(_);if(S===void 0||v===`critical`&&p.has(`${_} ${x}`))return;let C=n.t([x,...s]),w=await b(v===`critical`?{key:_,hosts:C,attach:i}:{category:S,hosts:C});if(w===!1)throw t.w(y(e,S,null),e);if(w===`once`&&c!==`ensure`)for(let e of C)p.add(`${_} ${e}`)},requestCategories:async e=>{r();let a=await m(),o=n.t(a?[a,...s]:s);if(!o.length)throw TypeError(`frame.request: navigate the frame or declare domains first`);let c=e.map(e=>{let n=e.key;return{named:n,critical:n!==void 0&&t.u(n)===`critical`,category:e.category??(n===void 0?void 0:t.c(n))??`interaction`}}),l=({named:e,critical:t,category:n},r)=>({category:n,...t?{key:e}:{},hosts:o,allow:r});if(!u)return _(),c.map(e=>l(e,!1));let d=await u(c.map(({named:e,critical:t,category:n})=>t?{key:e,hosts:o,attach:i}:{category:n,hosts:o}));return c.map((e,t)=>l(e,d[t]!==void 0&&d[t]!==!1))}}},x=e=>e,S=5e3,C=new Set([]),w=()=>`https://fkn.app`,T=e=>e?``:`incognito-${crypto.randomUUID()}`,E=(e,t,n)=>{let r,i=new Promise((e,i)=>{r=setTimeout(()=>i(Error(n)),t)});return Promise.race([e,i]).finally(()=>clearTimeout(r))},D=e=>Object.assign(Error(e),{name:t.b}),O=({control:e,target:n,session:r,declaredHosts:i,approvedOrigins:a,attach:o,assertLive:s,guard:c,consent:l,onNavigated:u})=>{let d=n,{gate:f,requestCategories:p}=b({session:r,declaredHosts:i,approvedOrigins:a,attach:o,assertLive:s,documentHost:typeof e.documentHost==`function`?()=>c(()=>e.documentHost()):void 0,current:()=>d,...l});return t.m({executor:{execute:(n,r,i)=>C.has(r)?Promise.reject(t.x(r,`cloud`)):(s(),c(()=>e.executeLocator(n,r,i))),highlight:async()=>{}},gate:f,request:p,goto:async(t,n={})=>{let r=new URL(t,location.href).href;s();let{timeoutMs:i}=n,o=(()=>{try{return new URL(r).origin}catch{return``}})(),l=o!==``&&!a.has(o);l&&a.add(o);try{await E(c(()=>e.goto(r,n)),(i??3e4)+S,`cloud.attachFrame: the render proxy did not answer goto; the frame may have been detached or its page reloaded`)}catch(e){throw l&&a.delete(o),e}d=r,u()},url:()=>d})},ee=250,te=500,k=65e3,A=2e3,j=2e3,M=2,N=2e3,P=2e3,F=({origin:e,target:t,session:n,domains:r,attach:i})=>{let a=new URL(`/attach-window`,e);return a.searchParams.set(`attach`,i),t&&a.searchParams.set(`url`,t),n&&a.searchParams.set(`session`,n),r.length&&a.searchParams.set(`domains`,r.join(`,`)),a.href},I=(e,t)=>{let n=document.createElement(`iframe`),r=new URL(`/attach-jar`,e);return r.searchParams.set(`attach`,t),n.src=r.href,n.tabIndex=-1,n.setAttribute(`aria-hidden`,`true`),n.setAttribute(`style`,`display:none`),(document.body??document.documentElement).appendChild(n),n},L=(e,t)=>{let n=new MutationObserver(()=>{e.isConnected||t.aborted||(n.disconnect(),console.warn(`cloud.attachFrame: the window's jar anchor was removed from this page, so a sign-in in the window no longer reaches this app's cookie jar`))});e.parentNode&&n.observe(e.parentNode,{childList:!0}),n.observe(document.documentElement,{childList:!0}),t.addEventListener(`abort`,()=>n.disconnect(),{once:!0})},R=()=>D(`cloud.attachFrame: the attached window closed, reloaded or left the page FKN attached; attach a fresh window`),z=()=>D(`cloud.attachFrame: the attached window stopped answering; attach a fresh window`),B=()=>D(`cloud.attachFrame: the window went away before it connected; attach a fresh window`),V=()=>D(`cloud.attachFrame: the window closed before it connected. Either the user closed it, or this page's Cross-Origin-Opener-Policy cut its link to the window`),H=async e=>{if(typeof window>`u`)throw Error(`cloud.attachFrame needs a window realm`);let{domains:r=[],syncCookies:a=!0,permissions:o}=e,{url:c,width:l,height:u}=t.s(e.window);if(window.origin===`null`)throw new t.f(`opaque-opener`);let d=w(),f=crypto.randomUUID(),m=T(a),h=n.t(r),g=new Set;c&&g.add(new URL(c).origin);let _=a?I(d,f):null,v=window.open(F({origin:d,target:c,session:m,domains:h,attach:f}),`_blank`,`popup,width=${l},height=${u}`);if(!v)throw _?.remove(),new t.d;let y=new AbortController,b=!1,S=null,C=(e,t=!1)=>{if(S===null){S=e,y.abort(t?z():R());try{v.closed||v.postMessage({type:s.ATTACH_WINDOW_MESSAGE.detach,attach:f,...t?{unanswered:t}:{}},d)}catch{}_&&setTimeout(()=>_.remove(),P)}};_&&L(_,y.signal);let D=new Promise((e,t)=>{y.signal.addEventListener(`abort`,()=>t(y.signal.reason),{once:!0})});D.catch(()=>{});let H=D.then(()=>{},()=>{}),U=()=>{if(y.signal.aborted)throw y.signal.reason},W=e=>y.signal.aborted?Promise.reject(y.signal.reason):Promise.race([e(),D]),G=e=>e.source===v&&e.origin===d;window.addEventListener(`message`,e=>{if(!G(e))return;let n=e.data;typeof n==`object`&&n&&n.attach===f&&(n.type===s.ATTACH_WINDOW_MESSAGE.refused?C(new t.f(n.reason)):n.type===s.ATTACH_WINDOW_MESSAGE.gone&&C(b?R():B()))},{signal:y.signal}),window.addEventListener(`pagehide`,()=>C(R()),{signal:y.signal});let K=()=>{try{v.postMessage({type:s.ATTACH_WINDOW_MESSAGE.hello,attach:f},d)}catch{}};K();let q=setInterval(K,ee),J=setInterval(()=>{v.closed&&C(b?R():V())},te);y.signal.addEventListener(`abort`,()=>{clearInterval(q),clearInterval(J)},{once:!0});let Y=async e=>{try{return await Promise.race([e,D])}catch(e){throw S??e}};try{let e=await Y(E((0,p.expose)({},{key:s.ATTACH_WINDOW_KEY,transport:{emit:(e,t)=>v.postMessage(e,d,t??[]),receive:e=>{let t=t=>{G(t)&&e(t.data,{source:t.source,origin:t.origin})};return window.addEventListener(`message`,t),()=>window.removeEventListener(`message`,t)}},unregisterSignal:y.signal,revivableModules:x(t.et)}),s.WINDOW_HANDSHAKE_TIMEOUT_MS,`cloud.attachFrame: timed out connecting to the window`));b=!0,clearInterval(q);let n=0,r=setInterval(()=>{E(W(()=>e.ping()),j,`ping`).then(()=>{n=0},()=>{y.signal.aborted||(document.visibilityState===`hidden`?n=0:++n>=M&&C(z(),!0))})},A);y.signal.addEventListener(`abort`,()=>clearInterval(r),{once:!0}),await Y(E(e.ready(),k,`cloud.attachFrame: the window never became ready`));let a=i.t(`attached frame`);y.signal.aborted?a():y.signal.addEventListener(`abort`,a,{once:!0});let l=O({control:e,target:c,session:m,declaredHosts:h,approvedOrigins:g,attach:f,assertLive:U,guard:W,consent:{request:t=>W(()=>e.requestConsent(t)),ensure:t=>W(()=>e.requestConsent([t])).then(([e])=>e!==void 0&&e!==!1)},onNavigated:()=>{}}),u=null,_=()=>u??=(async()=>{y.signal.aborted||await E(Promise.allSettled([W(()=>e.flushCookies()),W(()=>e.sweepStorage())]),N,`close`).catch(()=>{});try{v.close()}catch{}C(R())})(),S={...l,close:_,closed:H};return o?.length&&await Y(S.request(o)),S}catch(e){let n=S??e;if(!(n instanceof t.f))try{v.close()}catch{}throw C(n),n}},U=`autoplay; fullscreen; encrypted-media; picture-in-picture; clipboard-read; clipboard-write`,W=2e4,G=65e3,K=e=>!e||e===`about:blank`,q=({target:e,session:t,domains:n,attach:r})=>{let i=new URL(`/attach-frame`,w());return e&&i.searchParams.set(`url`,e),t&&i.searchParams.set(`session`,t),n.length&&i.searchParams.set(`domains`,n.join(`,`)),i.searchParams.set(`attach`,r),i.href},J=(e,t)=>{let n=()=>{a(),t()},r=e.parentNode,i=new MutationObserver(()=>{(!e.isConnected||e.parentNode!==r)&&(a(),t())}),a=()=>{window.removeEventListener(`pagehide`,n),i.disconnect()};window.addEventListener(`pagehide`,n,{once:!0}),r&&i.observe(r,{childList:!0}),e.isConnected||(a(),t())},Y=()=>D(`cloud.attachFrame: the attached iframe left the document or was reloaded; attach a fresh iframe`),ne=(e,t)=>{let n=[...e.split(`;`),...t.split(`;`)].map(e=>e.trim()).filter(Boolean);return[...new Set(n)].join(`; `)},re=[300,1200,4e3],X=e=>{let t=()=>{if(!e.isConnected)return;let t=e.style.height,n=e.getBoundingClientRect();n.height&&(e.style.height=`${n.height-1}px`,setTimeout(()=>{e.style.height=t},50))};t();for(let e of re)setTimeout(t,e)},ie=e=>{let t=e.getAttribute(`sandbox`);if(t===null)return;let n=new Set(t.toLowerCase().split(/\s+/).filter(Boolean)),r=[`allow-scripts`,`allow-same-origin`].filter(e=>!n.has(e));if(r.length)throw Error(`cloud.attachFrame: the iframe's sandbox attribute must include ${r.join(` and `)} for the render proxy to load`)},ae=async({iframe:e,domains:r=[],syncCookies:a=!0,lockdown:o=!1,permissions:c})=>{if(typeof window>`u`)throw Error(`cloud.attachFrame needs a window realm`);if(o)throw Error(`cloud.attachFrame does not support lockdown; use the extension backend for a sealed frame`);if(!e.isConnected)throw Error(`cloud.attachFrame: the iframe must be connected to the document before attaching`);ie(e);let l=e.getAttribute(`src`)??``,u=(()=>{if(K(l))return null;try{return new URL(e.src||l,location.href)}catch{throw Error(`cloud.attachFrame: the iframe src is not a valid URL: ${l}`)}})();if(u){let e=new URL(`/attach-frame`,w());if(u.origin===e.origin&&u.pathname===e.pathname)throw Error(`cloud.attachFrame: this iframe is already attached; navigate with the Frame returned by that attach or use a fresh iframe`)}let d=u?.href??``;d&&t.g(d);let f=T(a),h=n.t(r),g=new Set;try{g.add(new URL(d).origin)}catch{}let _=new AbortController,v=e.referrerPolicy,y=e.allow,b=crypto.randomUUID();if(e.referrerPolicy=`origin`,e.allow=ne(U,e.allow),e.src=q({target:d,session:f,domains:h,attach:b}),!e.contentWindow)throw Error(`cloud.attachFrame: the iframe window is not available`);try{let n=await E((0,p.expose)({},{key:s.ATTACH_FRAME_KEY,origin:w(),transport:{receive:window,emit:e.contentWindow},unregisterSignal:_.signal,revivableModules:x(t.et)}),W,`cloud.attachFrame: timed out connecting to the render proxy page`);await E(n.ready(),G,`cloud.attachFrame: the render proxy never became ready`),d&&X(e),J(e,()=>_.abort());let r=i.t(`attached frame`);_.signal.aborted?r():_.signal.addEventListener(`abort`,r,{once:!0});let a=e.contentWindow,o=O({control:n,target:d,session:f,declaredHosts:h,approvedOrigins:g,attach:b,assertLive:()=>{if(_.signal.aborted||!e.isConnected||e.contentWindow!==a)throw _.abort(),Y()},guard:e=>e(),consent:await m(),onNavigated:()=>X(e)});return c?.length&&await o.request(c),o}catch(t){throw _.abort(),e.referrerPolicy=v,e.allow=y,e.src=d||`about:blank`,t}},Z=(async e=>t.o(e)===`window`?H(e):ae(e)),oe=()=>typeof window<`u`&&!0,Q=async()=>{let e=await r.a.then(e=>e.cloud.quota());return{premium:e.premium,overQuota:e.overQuota,throttled:e.overQuota&&!e.premium,usedBytes:e.usedBytes,limitBytes:e.limitBytes,remainingBytes:e.remaining,bytesPerSecond:e.bytesPerSecond,bitsPerSecond:e.bytesPerSecond*8}},se=e.t({attachFrame:()=>Z,available:()=>$,dgram:()=>d.t,dns:()=>c.t,fetch:()=>a.t,fs:()=>l.t,http:()=>f.t,net:()=>u.t,quota:()=>Q}),$=()=>r.c;Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return oe}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return Z}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return se}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return Q}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return $}});

package/extension-DJQ0oYdk.js

@@ -1,89 +0,0 @@
-import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
-import { $ as t, A as n, B as r, C as i, D as a, E as o, F as s, G as c, H as l, I as u, J as ee, K as te, L as ne, M as d, N as f, O as p, P as m, R as h, S as g, T as _, U as v, V as y, W as b, X as x, Z as S, _ as C, a as w, at as T, b as E, d as D, et as O, f as k, g as A, h as re, i as j, it as M, j as N, k as P, m as F, n as I, nt as L, p as R, q as z, r as B, rt as V, t as H, tt as U, v as W, y as G, z as K } from "./lib-B-jGWfsv.js";
-import { a as q, d as J } from "./api-CtiKFcK3.js";
-import { t as Y } from "./proxy-DDwY3AVG.js";
-import { available as X, fetch as ie } from "./desktop.js";
-//#region src/extension-prompt.ts
-var Z = async (e) => {
-	if (typeof window > "u") return !1;
-	if (c()) return !0;
-	let t = await q, n = null, r = new Promise((e) => {
-		n = () => {
-			c() && e(!0);
-		}, b.addEventListener("statuschange", n);
-	}), i = t.installPrompt.show(e).then(() => !1), a = await Promise.race([r, i]);
-	return n && b.removeEventListener("statuschange", n), await t.installPrompt.hide().catch(() => {}), a;
-}, Q = null;
-z(() => (Q ||= Z().then(() => void 0).finally(() => {
-	Q = null;
-}), Q));
-//#endregion
-//#region src/auto.ts
-var $ = () => typeof document < "u" && c(), ae = async (e, t) => {
-	if (J(e), t?.credentials === "include") {
-		if (typeof document > "u") throw Error("fetch with credentials needs the FKN extension, which only exists in window realms");
-		return m(e, t);
-	}
-	return $() ? m(e, {
-		...t,
-		credentials: "omit"
-	}) : X() ? ie(e, t) : Y(e, t);
-}, oe = /* @__PURE__ */ e({
-	ATTACH_FRAME_EVENT_KEY: () => j,
-	CATEGORIES: () => a,
-	EXTENSION_ABI: () => 2,
-	ExtensionOperationUnsupportedError: () => x,
-	ExtensionOutdatedError: () => S,
-	FORGEABLE_HEADERS: () => r,
-	FrameWindowBlockedError: () => D,
-	FrameWindowRefusedError: () => k,
-	LOCATOR_DENIED: () => i,
-	LOCATOR_ERROR: () => o,
-	LOCATOR_UNSUPPORTED: () => E,
-	PERMISSION_DENIED: () => H,
-	REQUIRED_EXTENSION_ABI: () => 0,
-	assertAttachableFrameUrl: () => A,
-	assertFetchableUrl: () => f,
-	assertForgeableHeaders: () => y,
-	assertLockdownApplicable: () => C,
-	assertOneCookieIdentity: () => l,
-	attachFrame: () => w,
-	attachFramePermission: () => R,
-	available: () => $,
-	box: () => U,
-	cookies: () => N,
-	createFrame: () => F,
-	createVideoElementHandle: () => L,
-	events: () => b,
-	extension: () => b,
-	fetch: () => m,
-	fetchCredentialedPermission: () => s,
-	fetchLocalPermission: () => u,
-	fetchPermission: () => ne,
-	gotoPermission: () => re,
-	handleRevivableModules: () => O,
-	hasForgedCookie: () => v,
-	isBlockedFetchUrl: () => h,
-	isBlockedFrameUrl: () => W,
-	isExtensionExposed: () => c,
-	isLocalNetworkUrl: () => K,
-	isLocatorDenied: () => G,
-	isLocatorUnsupported: () => g,
-	isPermissionDenied: () => I,
-	isTerminalError: () => _,
-	isType: () => V,
-	modifyRequestHeadersPermission: () => p,
-	permissions: () => B,
-	promptInstall: () => Z,
-	readCookiePermission: () => d,
-	readExtensionHandshake: () => te,
-	removeRequestHeaderRule: () => P,
-	revive: () => M,
-	setMissingExtensionHandler: () => z,
-	setRequestHeaderRule: () => n,
-	supportsOperation: () => t,
-	type: () => T,
-	waitForExtensionExposure: () => ee
-});
-//#endregion
-export { Z as i, ae as n, $ as r, oe as t };

package/extension-DSrUjoLw.cjs

@@ -1 +0,0 @@
-const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./lib-Cjd91q7g.cjs"),n=require("./api-Djf-XdZ4.cjs"),r=require("./proxy-CYcaW5ew.cjs"),i=require("./desktop.cjs");var a=async e=>{if(typeof window>`u`)return!1;if(t.G())return!0;let r=await n.a,i=null,a=new Promise(e=>{i=()=>{t.G()&&e(!0)},t.W.addEventListener(`statuschange`,i)}),o=r.installPrompt.show(e).then(()=>!1),s=await Promise.race([a,o]);return i&&t.W.removeEventListener(`statuschange`,i),await r.installPrompt.hide().catch(()=>{}),s},o=null;t.q(()=>(o||=a().then(()=>void 0).finally(()=>{o=null}),o));var s=()=>typeof document<`u`&&t.G(),c=async(e,a)=>{if(n.d(e),a?.credentials===`include`){if(typeof document>`u`)throw Error(`fetch with credentials needs the FKN extension, which only exists in window realms`);return t.P(e,a)}return s()?t.P(e,{...a,credentials:`omit`}):i.available()?i.fetch(e,a):r.t(e,a)},l=e.t({ATTACH_FRAME_EVENT_KEY:()=>t.i,CATEGORIES:()=>t.D,EXTENSION_ABI:()=>2,ExtensionOperationUnsupportedError:()=>t.X,ExtensionOutdatedError:()=>t.Z,FORGEABLE_HEADERS:()=>t.B,FrameWindowBlockedError:()=>t.d,FrameWindowRefusedError:()=>t.f,LOCATOR_DENIED:()=>t.C,LOCATOR_ERROR:()=>t.E,LOCATOR_UNSUPPORTED:()=>t.b,PERMISSION_DENIED:()=>t.t,REQUIRED_EXTENSION_ABI:()=>0,assertAttachableFrameUrl:()=>t.g,assertFetchableUrl:()=>t.N,assertForgeableHeaders:()=>t.V,assertLockdownApplicable:()=>t._,assertOneCookieIdentity:()=>t.H,attachFrame:()=>t.a,attachFramePermission:()=>t.p,available:()=>s,box:()=>t.tt,cookies:()=>t.j,createFrame:()=>t.m,createVideoElementHandle:()=>t.nt,events:()=>t.W,extension:()=>t.W,fetch:()=>t.P,fetchCredentialedPermission:()=>t.F,fetchLocalPermission:()=>t.I,fetchPermission:()=>t.L,gotoPermission:()=>t.h,handleRevivableModules:()=>t.et,hasForgedCookie:()=>t.U,isBlockedFetchUrl:()=>t.R,isBlockedFrameUrl:()=>t.v,isExtensionExposed:()=>t.G,isLocalNetworkUrl:()=>t.z,isLocatorDenied:()=>t.y,isLocatorUnsupported:()=>t.S,isPermissionDenied:()=>t.n,isTerminalError:()=>t.T,isType:()=>t.rt,modifyRequestHeadersPermission:()=>t.O,permissions:()=>t.r,promptInstall:()=>a,readCookiePermission:()=>t.M,readExtensionHandshake:()=>t.K,removeRequestHeaderRule:()=>t.k,revive:()=>t.it,setMissingExtensionHandler:()=>t.q,setRequestHeaderRule:()=>t.A,supportsOperation:()=>t.$,type:()=>t.at,waitForExtensionExposure:()=>t.J});Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return a}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return c}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return s}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return l}});

package/hosts-DD4rDeQH.cjs

@@ -1 +0,0 @@
-var e={scope:`read.text`,category:`storage`,severity:1,chip:`read text`,title:`Read text from the page`,description:`Lets the app see the text shown on this page.`},t={scope:`read.info`,category:`storage`,severity:1,chip:`read details`,title:`Read info from the page`,description:`Lets the app read a detail of a part of the page.`},n={scope:`read.visible`,category:`storage`,severity:0,title:`See what’s visible on the page`,description:`Lets the app check which elements are currently on screen.`},r={scope:`read.check`,category:`storage`,severity:0,title:`Check if something is on the page`,description:`Lets the app test whether a specific element exists.`},i={scope:`read.count`,category:`storage`,severity:0,title:`Count items on the page`,description:`Lets the app count how many matching elements are present.`},a={scope:`act.click`,category:`interaction`,severity:3,chip:`click`,title:`Click on the page`,description:`Lets the app press buttons or links for you.`},o={scope:`act.type`,category:`interaction`,severity:1,chip:`type`,title:`Type into a text field`,description:`Lets the app fill in form fields on your behalf.`},s={scope:`act.hover`,category:`interaction`,severity:1,chip:`hover`,title:`Hover over the page`,description:`Lets the app point at things to reveal menus or tooltips.`},c={scope:`media.video`,category:`interaction`,severity:0,title:`Control video playback`,description:`Lets the app play, pause, seek, and read the video on the page.`},l={scope:`media.appear`,category:`interaction`,severity:0,title:`Change page appearance`,description:`Lets the app restyle parts of the page (safely filtered).`},u={scope:`media.appearU`,category:`evaluation`,severity:2,chip:`unfiltered styles`,unsafe:!0,title:`Change page appearance (unsafe)`,description:`Lets the app restyle the page WITHOUT safety filtering. Could be used to leak data over the network.`},d=e=>e?.noSanitize?u:l,f={scope:`frame.fetchRead`,category:`network`,severity:3,chip:`load`,unsafe:!0,title:`Read your account data on this site`,description:`Lets the app read pages and data from this site as you, using the session in the frame.`},p={scope:`frame.fetchWrite`,category:`network`,severity:3,chip:`send`,unsafe:!0,title:`Change your account data on this site`,description:`Lets the app send changes to this site as you, using the session in the frame.`},m=new Set([`GET`,`HEAD`,`OPTIONS`]),h=(e,t)=>m.has((t?.method??`GET`).toUpperCase())?f:p,g={click:a,fill:o,hover:s,textContent:e,getAttribute:t,isVisible:n,count:i,exists:r,videoElement:c,addStyleTag:d,fetch:h};[e,t,n,r,i,a,o,s,c,l,u,f,p].map(e=>e.scope);var _=g,v=(e,t)=>{let n=_[e];return n?(typeof n==`function`?n(...t):n).scope:null},y=(e,t)=>{try{return new URL(e,t)}catch{return}},b=e=>{let t=y(e,`https://s.invalid/`),n=y(e,`http://s.invalid/`);if(!t||!n)return{kind:`invalid`};let r=y(e);return!r||r.href!==t.href||r.href!==n.href?{kind:`relative`}:r.protocol!==`https:`&&r.protocol!==`http:`?{kind:`unsupported`,protocol:r.protocol}:{kind:`absolute`,host:r.hostname,protocol:r.protocol}},x=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/,S=/^\[[0-9a-f:.]+\]$/,C=e=>{try{return new URL(`http://${e}/`).hostname}catch{return}},w=(e,{ipv6:t=!1}={})=>{let n=[];for(let r of e){let e=r.trim().toLowerCase();if(!e||e.length>253)continue;let i=x.test(e)?e:t&&S.test(e)?C(e):void 0;i&&!n.includes(i)&&n.push(i)}return n};Object.defineProperty(exports,"_",{enumerable:!0,get:function(){return n}}),Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return l}}),Object.defineProperty(exports,"c",{enumerable:!0,get:function(){return b}}),Object.defineProperty(exports,"d",{enumerable:!0,get:function(){return c}}),Object.defineProperty(exports,"f",{enumerable:!0,get:function(){return v}}),Object.defineProperty(exports,"g",{enumerable:!0,get:function(){return e}}),Object.defineProperty(exports,"h",{enumerable:!0,get:function(){return t}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return o}}),Object.defineProperty(exports,"l",{enumerable:!0,get:function(){return f}}),Object.defineProperty(exports,"m",{enumerable:!0,get:function(){return i}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return a}}),Object.defineProperty(exports,"o",{enumerable:!0,get:function(){return u}}),Object.defineProperty(exports,"p",{enumerable:!0,get:function(){return r}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return s}}),Object.defineProperty(exports,"s",{enumerable:!0,get:function(){return h}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return w}}),Object.defineProperty(exports,"u",{enumerable:!0,get:function(){return p}});