@swiftbrowser/native 0.17.7 → 0.17.8

package/dist/subtle.js

@@ -0,0 +1,72 @@
+/**
+ * `crypto.subtle` for the native app, as far as apps use it for a PKCE
+ * challenge or a signature: `digest` (SHA-1, SHA-256, SHA-384, SHA-512) and
+ * HMAC keys with `importKey`, `sign` and `verify`, over the bridge's
+ * `digest` and `hmac` (CryptoKit on the Swift side). Both are synchronous
+ * there; the promises resolve at once.
+ */
+import { base64Decode, base64Encode } from './encoding';
+const DIGESTS = new Set(['SHA-1', 'SHA-256', 'SHA-384', 'SHA-512']);
+function algorithmName(algorithm) {
+    return (typeof algorithm === 'string' ? algorithm : algorithm.name).toUpperCase();
+}
+function hashName(algorithm) {
+    if (typeof algorithm === 'string')
+        return algorithm.toUpperCase();
+    const hash = algorithm.hash;
+    return (typeof hash === 'string' ? hash : hash?.name ?? '').toUpperCase();
+}
+function bytesOf(data) {
+    return data instanceof ArrayBuffer ? new Uint8Array(data) : new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
+}
+function toBuffer(base64) {
+    const bytes = base64Decode(base64);
+    return bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
+}
+function notSupported(what) {
+    const error = new Error(`crypto.subtle: ${what} is not supported in the native app`);
+    error.name = 'NotSupportedError';
+    return error;
+}
+/** `crypto.subtle` over the bridge. */
+export function createSubtleCrypto(native) {
+    return {
+        async digest(algorithm, data) {
+            const name = algorithmName(algorithm);
+            if (!DIGESTS.has(name))
+                throw notSupported(`the ${name} digest`);
+            const result = native.digest?.(name, base64Encode(bytesOf(data)));
+            if (!result)
+                throw notSupported(`the ${name} digest`);
+            return toBuffer(result);
+        },
+        async importKey(format, keyData, algorithm, extractable, usages) {
+            if (format !== 'raw' || algorithmName(algorithm) !== 'HMAC')
+                throw notSupported(`importing a ${format} ${algorithmName(algorithm)} key`);
+            const hash = hashName(algorithm);
+            if (!DIGESTS.has(hash))
+                throw notSupported(`HMAC with ${hash}`);
+            const bytes = bytesOf(keyData);
+            return { type: 'secret', extractable, algorithm: { name: 'HMAC', hash: { name: hash }, length: bytes.byteLength * 8 }, usages: [...usages], bytes };
+        },
+        async sign(algorithm, key, data) {
+            if (algorithmName(algorithm) !== 'HMAC' || key.algorithm?.name !== 'HMAC')
+                throw notSupported(`signing with ${algorithmName(algorithm)}`);
+            const result = native.hmac?.(key.algorithm.hash.name, base64Encode(key.bytes), base64Encode(bytesOf(data)));
+            if (!result)
+                throw notSupported('HMAC');
+            return toBuffer(result);
+        },
+        async verify(algorithm, key, signature, data) {
+            const expected = new Uint8Array(await this.sign(algorithm, key, data));
+            const given = bytesOf(signature);
+            if (expected.byteLength !== given.byteLength)
+                return false;
+            let difference = 0;
+            for (let i = 0; i < expected.byteLength; i += 1)
+                difference |= expected[i] ^ given[i];
+            return difference === 0;
+        },
+    };
+}
+//# sourceMappingURL=subtle.js.map

package/dist/subtle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subtle.js","sourceRoot":"","sources":["../src/subtle.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAexD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAEpE,SAAS,aAAa,CAAC,SAAoB;IACzC,OAAO,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,QAAQ,CAAC,SAAoB;IACpC,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,WAAW,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IAC5B,OAAO,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,OAAO,CAAC,IAAmC;IAClD,OAAO,IAAI,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;AAC5H,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAgB,CAAC;AAClG,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,kBAAkB,IAAI,qCAAqC,CAAC,CAAC;IACrF,KAAK,CAAC,IAAI,GAAG,mBAAmB,CAAC;IACjC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,SAAoB,EAAE,IAAmC;YACpE,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;YACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,YAAY,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClE,IAAI,CAAC,MAAM;gBAAE,MAAM,YAAY,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;YACtD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,OAAsC,EAAE,SAAoB,EAAE,WAAoB,EAAE,MAAgB;YAClI,IAAI,MAAM,KAAK,KAAK,IAAI,aAAa,CAAC,SAAS,CAAC,KAAK,MAAM;gBAAE,MAAM,YAAY,CAAC,eAAe,MAAM,IAAI,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACzI,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,YAAY,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QACtJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,SAAoB,EAAE,GAAY,EAAE,IAAmC;YAChF,IAAI,aAAa,CAAC,SAAS,CAAC,KAAK,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,KAAK,MAAM;gBAAE,MAAM,YAAY,CAAC,gBAAgB,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC1I,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5G,IAAI,CAAC,MAAM;gBAAE,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,SAAoB,EAAE,GAAY,EAAE,SAAwC,EAAE,IAAmC;YAC5H,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YACvE,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;gBAAE,OAAO,KAAK,CAAC;YAC3D,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC;gBAAE,UAAU,IAAI,QAAQ,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACxF,OAAO,UAAU,KAAK,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/webSocket.d.ts

@@ -0,0 +1,73 @@
+/**
+ * `WebSocket` for the native app over the bridge's `wsOpen`, `wsSend` and
+ * `wsClose` (`URLSessionWebSocketTask` on the Swift side). What the socket
+ * receives arrives at `__sbWebSocketEvent(id, json)`: `{ type: "open",
+ * protocol }`, `{ type: "message", text }` or `{ type: "message", binary }`
+ * (base64), `{ type: "error", message }` and `{ type: "close", code, reason,
+ * wasClean }`. The browser's event model as apps use it: `onopen`,
+ * `onmessage`, `onerror`, `onclose`, `addEventListener`, `readyState`,
+ * `binaryType` (`blob` by default, or `arraybuffer`).
+ */
+import { SimpleBlob } from './blob';
+import type { NativeBridge } from './bridge';
+export interface WebSocketEventLike {
+    type: string;
+    target: NativeWebSocket;
+    data?: unknown;
+    code?: number;
+    reason?: string;
+    wasClean?: boolean;
+    message?: string;
+}
+type Handler = (event: WebSocketEventLike) => void;
+/** The bridge's event for socket `id`. */
+export interface NativeWebSocketEvent {
+    type: 'open' | 'message' | 'error' | 'close';
+    protocol?: string;
+    text?: string;
+    /** Base64. */
+    binary?: string;
+    message?: string;
+    code?: number;
+    reason?: string;
+    wasClean?: boolean;
+}
+export type WebSocketBridge = Required<Pick<NativeBridge, 'wsOpen' | 'wsSend' | 'wsClose'>>;
+export declare class NativeWebSocket {
+    static readonly CONNECTING = 0;
+    static readonly OPEN = 1;
+    static readonly CLOSING = 2;
+    static readonly CLOSED = 3;
+    readonly CONNECTING = 0;
+    readonly OPEN = 1;
+    readonly CLOSING = 2;
+    readonly CLOSED = 3;
+    readonly url: string;
+    readyState: number;
+    protocol: string;
+    extensions: string;
+    bufferedAmount: number;
+    binaryType: 'blob' | 'arraybuffer';
+    onopen: Handler | null;
+    onmessage: Handler | null;
+    onerror: Handler | null;
+    onclose: Handler | null;
+    private readonly id;
+    private readonly listeners;
+    constructor(url: string | {
+        href: string;
+    }, protocols?: string | string[]);
+    send(data: string | ArrayBuffer | ArrayBufferView | SimpleBlob): void;
+    close(code?: number, reason?: string): void;
+    addEventListener(type: string, handler: Handler): void;
+    removeEventListener(type: string, handler: Handler): void;
+    dispatchEvent(event: WebSocketEventLike): boolean;
+    /** The bridge's event for this socket. */
+    receive(event: NativeWebSocketEvent): void;
+    /** The bridge's `__sbWebSocketEvent(id, json)`. */
+    static receive(id: number, json: string | NativeWebSocketEvent): void;
+    /** Points the sockets at the bridge (the runtime, once per install). */
+    static install(native: WebSocketBridge): void;
+}
+export {};
+//# sourceMappingURL=webSocket.d.ts.map

package/dist/webSocket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webSocket.d.ts","sourceRoot":"","sources":["../src/webSocket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG7C,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,KAAK,OAAO,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;AAEnD,0CAA0C;AAC1C,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC;AAM5F,qBAAa,eAAe;IAC1B,MAAM,CAAC,QAAQ,CAAC,UAAU,KAAK;IAC/B,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK;IACzB,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK;IAC5B,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK;IAC3B,QAAQ,CAAC,UAAU,KAAK;IACxB,QAAQ,CAAC,IAAI,KAAK;IAClB,QAAQ,CAAC,OAAO,KAAK;IACrB,QAAQ,CAAC,MAAM,KAAK;IAEpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,UAAU,SAAK;IACf,QAAQ,SAAM;IACd,UAAU,SAAM;IAChB,cAAc,SAAK;IACnB,UAAU,EAAE,MAAM,GAAG,aAAa,CAAU;IAC5C,MAAM,EAAE,OAAO,GAAG,IAAI,CAAQ;IAC9B,SAAS,EAAE,OAAO,GAAG,IAAI,CAAQ;IACjC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAQ;IAC/B,OAAO,EAAE,OAAO,GAAG,IAAI,CAAQ;IAE/B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;gBAEjD,GAAG,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,SAAS,GAAE,MAAM,GAAG,MAAM,EAAO;IAU7E,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,eAAe,GAAG,UAAU,GAAG,IAAI;IAWrE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAO3C,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAStD,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAIzD,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO;IAOjD,0CAA0C;IAC1C,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI;IA8B1C,mDAAmD;IACnD,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI;IAYrE,wEAAwE;IACxE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI;CAG9C"}

package/dist/webSocket.js

@@ -0,0 +1,145 @@
+/**
+ * `WebSocket` for the native app over the bridge's `wsOpen`, `wsSend` and
+ * `wsClose` (`URLSessionWebSocketTask` on the Swift side). What the socket
+ * receives arrives at `__sbWebSocketEvent(id, json)`: `{ type: "open",
+ * protocol }`, `{ type: "message", text }` or `{ type: "message", binary }`
+ * (base64), `{ type: "error", message }` and `{ type: "close", code, reason,
+ * wasClean }`. The browser's event model as apps use it: `onopen`,
+ * `onmessage`, `onerror`, `onclose`, `addEventListener`, `readyState`,
+ * `binaryType` (`blob` by default, or `arraybuffer`).
+ */
+import { SimpleBlob } from './blob';
+import { base64Decode, base64Encode } from './encoding';
+const sockets = new Map();
+let nextId = 1;
+let bridge = null;
+export class NativeWebSocket {
+    static CONNECTING = 0;
+    static OPEN = 1;
+    static CLOSING = 2;
+    static CLOSED = 3;
+    CONNECTING = 0;
+    OPEN = 1;
+    CLOSING = 2;
+    CLOSED = 3;
+    url;
+    readyState = 0;
+    protocol = '';
+    extensions = '';
+    bufferedAmount = 0;
+    binaryType = 'blob';
+    onopen = null;
+    onmessage = null;
+    onerror = null;
+    onclose = null;
+    id;
+    listeners = new Map();
+    constructor(url, protocols = []) {
+        if (!bridge)
+            throw new TypeError('WebSocket: no native bridge');
+        const href = typeof url === 'string' ? url : url.href;
+        if (!/^wss?:\/\//i.test(href))
+            throw new SyntaxError(`WebSocket: the URL's scheme must be ws or wss: ${href}`);
+        this.url = href;
+        this.id = nextId++;
+        sockets.set(this.id, this);
+        bridge.wsOpen(this.id, href, typeof protocols === 'string' ? [protocols] : [...protocols]);
+    }
+    send(data) {
+        if (this.readyState === NativeWebSocket.CONNECTING)
+            throw new DOMExceptionLike('InvalidStateError', 'WebSocket: still connecting');
+        if (this.readyState !== NativeWebSocket.OPEN)
+            return;
+        if (typeof data === 'string') {
+            bridge?.wsSend(this.id, JSON.stringify({ text: data }));
+            return;
+        }
+        const bytes = data instanceof SimpleBlob ? data.bytes() : data instanceof ArrayBuffer ? new Uint8Array(data) : new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
+        bridge?.wsSend(this.id, JSON.stringify({ binary: base64Encode(bytes) }));
+    }
+    close(code, reason) {
+        if (code !== undefined && code !== 1000 && !(code >= 3000 && code <= 4999))
+            throw new DOMExceptionLike('InvalidAccessError', 'WebSocket: the close code must be 1000 or in 3000–4999');
+        if (this.readyState === NativeWebSocket.CLOSING || this.readyState === NativeWebSocket.CLOSED)
+            return;
+        this.readyState = NativeWebSocket.CLOSING;
+        bridge?.wsClose(this.id, code ?? 1000, reason ?? '');
+    }
+    addEventListener(type, handler) {
+        let set = this.listeners.get(type);
+        if (!set) {
+            set = new Set();
+            this.listeners.set(type, set);
+        }
+        set.add(handler);
+    }
+    removeEventListener(type, handler) {
+        this.listeners.get(type)?.delete(handler);
+    }
+    dispatchEvent(event) {
+        const own = { open: this.onopen, message: this.onmessage, error: this.onerror, close: this.onclose }[event.type];
+        own?.(event);
+        for (const handler of this.listeners.get(event.type) ?? [])
+            handler(event);
+        return true;
+    }
+    /** The bridge's event for this socket. */
+    receive(event) {
+        switch (event.type) {
+            case 'open':
+                if (this.readyState !== NativeWebSocket.CONNECTING)
+                    return;
+                this.readyState = NativeWebSocket.OPEN;
+                this.protocol = event.protocol ?? '';
+                this.dispatchEvent({ type: 'open', target: this });
+                return;
+            case 'message': {
+                if (this.readyState !== NativeWebSocket.OPEN)
+                    return;
+                let data = event.text ?? '';
+                if (event.binary !== undefined) {
+                    const bytes = base64Decode(event.binary);
+                    data = this.binaryType === 'arraybuffer' ? bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength) : new SimpleBlob([bytes]);
+                }
+                this.dispatchEvent({ type: 'message', target: this, data });
+                return;
+            }
+            case 'error':
+                this.dispatchEvent({ type: 'error', target: this, message: event.message ?? '' });
+                return;
+            case 'close':
+                if (this.readyState === NativeWebSocket.CLOSED)
+                    return;
+                this.readyState = NativeWebSocket.CLOSED;
+                sockets.delete(this.id);
+                this.dispatchEvent({ type: 'close', target: this, code: event.code ?? 1006, reason: event.reason ?? '', wasClean: event.wasClean ?? false });
+                return;
+        }
+    }
+    /** The bridge's `__sbWebSocketEvent(id, json)`. */
+    static receive(id, json) {
+        const socket = sockets.get(id);
+        if (!socket)
+            return;
+        let event;
+        try {
+            event = typeof json === 'string' ? JSON.parse(json) : json;
+        }
+        catch {
+            return;
+        }
+        socket.receive(event);
+    }
+    /** Points the sockets at the bridge (the runtime, once per install). */
+    static install(native) {
+        bridge = native;
+    }
+}
+/** A `DOMException` stand-in: an error with the browser's name. */
+class DOMExceptionLike extends Error {
+    constructor(name, message) {
+        super(message);
+        this.name = name;
+    }
+}
+//# sourceMappingURL=webSocket.js.map

package/dist/webSocket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webSocket.js","sourceRoot":"","sources":["../src/webSocket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AA6BxD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;AACnD,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,IAAI,MAAM,GAA2B,IAAI,CAAC;AAE1C,MAAM,OAAO,eAAe;IAC1B,MAAM,CAAU,UAAU,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAU,IAAI,GAAG,CAAC,CAAC;IACzB,MAAM,CAAU,OAAO,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAU,MAAM,GAAG,CAAC,CAAC;IAClB,UAAU,GAAG,CAAC,CAAC;IACf,IAAI,GAAG,CAAC,CAAC;IACT,OAAO,GAAG,CAAC,CAAC;IACZ,MAAM,GAAG,CAAC,CAAC;IAEX,GAAG,CAAS;IACrB,UAAU,GAAG,CAAC,CAAC;IACf,QAAQ,GAAG,EAAE,CAAC;IACd,UAAU,GAAG,EAAE,CAAC;IAChB,cAAc,GAAG,CAAC,CAAC;IACnB,UAAU,GAA2B,MAAM,CAAC;IAC5C,MAAM,GAAmB,IAAI,CAAC;IAC9B,SAAS,GAAmB,IAAI,CAAC;IACjC,OAAO,GAAmB,IAAI,CAAC;IAC/B,OAAO,GAAmB,IAAI,CAAC;IAEd,EAAE,CAAS;IACX,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;IAE7D,YAAY,GAA8B,EAAE,YAA+B,EAAE;QAC3E,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QACtD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;QAC/G,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,CAAC,IAAyD;QAC5D,IAAI,IAAI,CAAC,UAAU,KAAK,eAAe,CAAC,UAAU;YAAE,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,6BAA6B,CAAC,CAAC;QACnI,IAAI,IAAI,CAAC,UAAU,KAAK,eAAe,CAAC,IAAI;YAAE,OAAO;QACrD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7K,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,IAAa,EAAE,MAAe;QAClC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,wDAAwD,CAAC,CAAC;QACvL,IAAI,IAAI,CAAC,UAAU,KAAK,eAAe,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,KAAK,eAAe,CAAC,MAAM;YAAE,OAAO;QACtG,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC;QAC1C,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,gBAAgB,CAAC,IAAY,EAAE,OAAgB;QAC7C,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,mBAAmB,CAAC,IAAY,EAAE,OAAgB;QAChD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,aAAa,CAAC,KAAyB;QACrC,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjH,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACb,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0CAA0C;IAC1C,OAAO,CAAC,KAA2B;QACjC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,MAAM;gBACT,IAAI,IAAI,CAAC,UAAU,KAAK,eAAe,CAAC,UAAU;oBAAE,OAAO;gBAC3D,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC;gBACvC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACrC,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,OAAO;YACT,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,IAAI,IAAI,CAAC,UAAU,KAAK,eAAe,CAAC,IAAI;oBAAE,OAAO;gBACrD,IAAI,IAAI,GAAY,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC/B,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACzC,IAAI,GAAG,IAAI,CAAC,UAAU,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;gBACjJ,CAAC;gBACD,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YACD,KAAK,OAAO;gBACV,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;gBAClF,OAAO;YACT,KAAK,OAAO;gBACV,IAAI,IAAI,CAAC,UAAU,KAAK,eAAe,CAAC,MAAM;oBAAE,OAAO;gBACvD,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC;gBACzC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACxB,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC;gBAC7I,OAAO;QACX,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,MAAM,CAAC,OAAO,CAAC,EAAU,EAAE,IAAmC;QAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,KAA2B,CAAC;QAChC,IAAI,CAAC;YACH,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAC,CAAC,CAAC,IAAI,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,wEAAwE;IACxE,MAAM,CAAC,OAAO,CAAC,MAAuB;QACpC,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;;AAGH,mEAAmE;AACnE,MAAM,gBAAiB,SAAQ,KAAK;IAClC,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@swiftbrowser/native",
-  "version": "0.17.7",
+  "version": "0.17.8",
   "type": "module",
   "description": "Run a @swiftbrowser/react app natively: the runtime a JavaScriptCore-hosted app needs (timers, console, fetch and the other web globals over the SwiftBrowser Native bridge), the `run` entry that renders into the native SwiftUI renderer, and the bundler that builds app.js for the Xcode target.",
   "repository": {
@@ -59,8 +59,8 @@
   },
   "dependencies": {
     "@babel/core": "^7.29.7",
-    "@swiftbrowser/react": "0.17.7",
-    "@swiftbrowser/web": "0.17.7",
+    "@swiftbrowser/react": "0.17.8",
+    "@swiftbrowser/web": "0.17.8",
     "esbuild": "^0.28.2",
     "react-refresh": "^0.17.0"
   },

package/src/blob.ts

@@ -0,0 +1,186 @@
+/**
+ * `Blob`, `File` and `FormData` for the native app: bytes with a type, a
+ * named one, and a form whose entries `fetch` sends as multipart. A body is
+ * still whole (no streams); `URL.createObjectURL` gives a `data:` URL, which
+ * the host's image loader and `URLSession` both read, and
+ * `revokeObjectURL` has nothing to free.
+ */
+
+import { base64Encode, utf8Decode, utf8Encode } from './encoding';
+
+export type BlobPartLike = string | ArrayBuffer | ArrayBufferView | SimpleBlob;
+
+export interface BlobOptions {
+  type?: string;
+}
+
+export interface FileOptions extends BlobOptions {
+  lastModified?: number;
+}
+
+function partBytes(part: BlobPartLike): Uint8Array {
+  if (typeof part === 'string') return utf8Encode(part);
+  if (part instanceof SimpleBlob) return part.bytes();
+  if (part instanceof ArrayBuffer) return new Uint8Array(part.slice(0));
+  if (ArrayBuffer.isView(part)) return new Uint8Array(part.buffer.slice(part.byteOffset, part.byteOffset + part.byteLength));
+  return utf8Encode(String(part));
+}
+
+function concat(parts: Uint8Array[]): Uint8Array {
+  const total = parts.reduce((sum, part) => sum + part.byteLength, 0);
+  const out = new Uint8Array(total);
+  let offset = 0;
+  for (const part of parts) {
+    out.set(part, offset);
+    offset += part.byteLength;
+  }
+  return out;
+}
+
+/** The browser's `Blob`: bytes and a MIME type. */
+export class SimpleBlob {
+  private readonly data: Uint8Array;
+  readonly type: string;
+
+  constructor(parts: Iterable<BlobPartLike> = [], options: BlobOptions = {}) {
+    this.data = concat([...parts].map(partBytes));
+    // As the browser does: lowercased, and empty when it is not printable ASCII.
+    const type = options.type ?? '';
+    this.type = /^[\x20-\x7e]*$/.test(type) ? type.toLowerCase() : '';
+  }
+
+  get size(): number {
+    return this.data.byteLength;
+  }
+
+  /** The bytes (a view; callers must not write into it). */
+  bytes(): Uint8Array {
+    return this.data;
+  }
+
+  slice(start = 0, end = this.size, contentType = ''): SimpleBlob {
+    const from = start < 0 ? Math.max(this.size + start, 0) : Math.min(start, this.size);
+    const to = end < 0 ? Math.max(this.size + end, 0) : Math.min(end, this.size);
+    return new SimpleBlob([this.data.subarray(from, Math.max(from, to))], { type: contentType });
+  }
+
+  async arrayBuffer(): Promise<ArrayBuffer> {
+    return this.data.buffer.slice(this.data.byteOffset, this.data.byteOffset + this.data.byteLength) as ArrayBuffer;
+  }
+
+  async text(): Promise<string> {
+    return utf8Decode(this.data);
+  }
+
+  get [Symbol.toStringTag](): string {
+    return 'Blob';
+  }
+}
+
+/** The browser's `File`: a `Blob` with a name. */
+export class SimpleFile extends SimpleBlob {
+  readonly name: string;
+  readonly lastModified: number;
+
+  constructor(parts: Iterable<BlobPartLike>, name: string, options: FileOptions = {}) {
+    super(parts, options);
+    this.name = String(name);
+    this.lastModified = options.lastModified ?? Date.now();
+  }
+
+  override get [Symbol.toStringTag](): string {
+    return 'File';
+  }
+}
+
+export type FormDataEntryValueLike = string | SimpleFile;
+
+/** The browser's `FormData`, as far as a request body needs it. */
+export class SimpleFormData {
+  private entries_: [string, FormDataEntryValueLike][] = [];
+
+  private static value(value: unknown, filename?: string): FormDataEntryValueLike {
+    if (value instanceof SimpleBlob) {
+      const name = filename ?? (value instanceof SimpleFile ? value.name : 'blob');
+      return value instanceof SimpleFile && filename === undefined ? value : new SimpleFile([value], name, { type: value.type });
+    }
+    return String(value);
+  }
+
+  append(name: string, value: unknown, filename?: string): void {
+    this.entries_.push([String(name), SimpleFormData.value(value, filename)]);
+  }
+
+  set(name: string, value: unknown, filename?: string): void {
+    const key = String(name);
+    const entry: [string, FormDataEntryValueLike] = [key, SimpleFormData.value(value, filename)];
+    const index = this.entries_.findIndex(([entryName]) => entryName === key);
+    if (index < 0) {
+      this.entries_.push(entry);
+      return;
+    }
+    this.entries_ = this.entries_.filter(([entryName], position) => position === index || entryName !== key);
+    this.entries_[index] = entry;
+  }
+
+  get(name: string): FormDataEntryValueLike | null {
+    return this.entries_.find(([entryName]) => entryName === String(name))?.[1] ?? null;
+  }
+
+  getAll(name: string): FormDataEntryValueLike[] {
+    return this.entries_.filter(([entryName]) => entryName === String(name)).map(([, value]) => value);
+  }
+
+  has(name: string): boolean {
+    return this.entries_.some(([entryName]) => entryName === String(name));
+  }
+
+  delete(name: string): void {
+    this.entries_ = this.entries_.filter(([entryName]) => entryName !== String(name));
+  }
+
+  *entries(): IterableIterator<[string, FormDataEntryValueLike]> {
+    yield* this.entries_;
+  }
+
+  *keys(): IterableIterator<string> {
+    for (const [name] of this.entries_) yield name;
+  }
+
+  *values(): IterableIterator<FormDataEntryValueLike> {
+    for (const [, value] of this.entries_) yield value;
+  }
+
+  forEach(callback: (value: FormDataEntryValueLike, name: string, form: SimpleFormData) => void): void {
+    for (const [name, value] of this.entries_) callback(value, name, this);
+  }
+
+  [Symbol.iterator](): IterableIterator<[string, FormDataEntryValueLike]> {
+    return this.entries();
+  }
+
+  get [Symbol.toStringTag](): string {
+    return 'FormData';
+  }
+}
+
+/** A multipart/form-data body for the form, with the boundary `random` makes unique. */
+export function encodeMultipart(form: SimpleFormData, random: (count: number) => Uint8Array): { bytes: Uint8Array; contentType: string } {
+  const boundary = `----SwiftBrowserFormBoundary${Array.from(random(16), (byte) => byte.toString(16).padStart(2, '0')).join('')}`;
+  const escape = (text: string): string => text.replace(/\r/g, '%0D').replace(/\n/g, '%0A').replace(/"/g, '%22');
+  const parts: Uint8Array[] = [];
+  for (const [name, value] of form.entries()) {
+    const head = [`--${boundary}`, `Content-Disposition: form-data; name="${escape(name)}"` + (typeof value === 'string' ? '' : `; filename="${escape(value.name)}"`)];
+    if (typeof value !== 'string') head.push(`Content-Type: ${value.type || 'application/octet-stream'}`);
+    parts.push(utf8Encode(`${head.join('\r\n')}\r\n\r\n`));
+    parts.push(typeof value === 'string' ? utf8Encode(value) : value.bytes());
+    parts.push(utf8Encode('\r\n'));
+  }
+  parts.push(utf8Encode(`--${boundary}--\r\n`));
+  return { bytes: concat(parts), contentType: `multipart/form-data; boundary=${boundary}` };
+}
+
+/** `URL.createObjectURL`: a `data:` URL holding the blob. */
+export function objectURL(blob: SimpleBlob): string {
+  return `data:${blob.type || 'application/octet-stream'};base64,${base64Encode(blob.bytes())}`;
+}

package/src/bridge.ts

@@ -3,7 +3,9 @@
  * (Native/Sources/SwiftBrowserNative/Host/HostBridge.swift). Every call is
  * synchronous; the ones that answer later do so by calling a global this
  * package defines (`__sbTimerFired`, `__sbFetchResult`, `__sbImageProbed`,
- * `__sbWorkerMessage`, `__sbOpenURL`, `__sbMediaSessionCommand`).
+ * `__sbWorkerMessage`, `__sbOpenURL`, `__sbMediaSessionCommand`,
+ * `__sbNotificationPermission`, `__sbPushRegistered`, `__sbNotification`,
+ * `__sbWebSocketEvent`, `__sbHostResponse`).
  */
 export interface NativeBridge {
   /** Applies a render pass's ops (a JSON array). Returns an error message, or nothing. */
@@ -44,6 +46,52 @@ export interface NativeBridge {
    */
   mediaSession?(update: string): void;
 
+  // Notifications (notifications.ts), on UserNotifications. Hosts before 0.20 lack them.
+  /** The app listens: what came before it did (a tap that launched it) arrives at `__sbNotification(json)`. */
+  notificationsReady?(): void;
+  /** Answers `__sbNotificationPermission(id, 'default' | 'granted' | 'denied')`, after asking the viewer when `request` is set. */
+  notificationPermission?(id: number, request: boolean): void;
+  /** Shows `{ id, title, subtitle?, body?, data?, badge?, silent? }` now; returns what was wrong with it, or nothing. */
+  notificationShow?(json: string): string | null | undefined;
+  /** Closes the notifications with these identifiers (a JSON array). */
+  notificationClose?(json: string): void;
+  /** The app badge (0 clears it). */
+  setBadge?(count: number): void;
+  /**
+   * Registers for remote notifications; the device token (hex) or the
+   * failure answers `__sbPushRegistered(id, { token } | { error })`.
+   * `applicationServerKey` is for the page (the round trip's Web Push).
+   */
+  pushRegister?(id: number, applicationServerKey?: string): void;
+
+  // WebSockets (webSocket.ts) on `URLSessionWebSocketTask`; events come to `__sbWebSocketEvent(id, json)`. Hosts before 0.20 lack them.
+  wsOpen?(id: number, url: string, protocols: string[]): void;
+  /** `{ text }` or `{ binary }` (base64), as JSON. */
+  wsSend?(id: number, json: string): void;
+  wsClose?(id: number, code: number, reason: string): void;
+
+  // `crypto.subtle` (subtle.ts) on CryptoKit, synchronously. Hosts before 0.20 lack them.
+  /** The base64 digest of base64 `data` under `algorithm` (`SHA-256`, …), or nothing when the host cannot. */
+  digest?(algorithm: string, data: string): string | null | undefined;
+  /** The base64 HMAC of base64 `data` with base64 `key` under the hash `algorithm`, or nothing. */
+  hmac?(algorithm: string, key: string, data: string): string | null | undefined;
+
+  /** `navigator.vibrate`: a haptic (`impact`, `selection`, `success`, `warning`, `error`). Hosts before 0.20 lack it. */
+  haptic?(kind: string): void;
+
+  /**
+   * A host request of the web renderer's kinds (hostRequests.ts): `share`,
+   * `pickFiles`, `clipboard`, `pickColor` and `webAuth`, with the request's
+   * params as JSON; the answer arrives at `__sbHostResponse(id, { value } | { error })`.
+   * Hosts before 0.20 lack it.
+   */
+  hostRequest?(id: number, kind: string, json: string): void;
+
+  // The Keychain (secureStorage.ts). Hosts before 0.20 lack them.
+  secureGet?(key: string): string | null;
+  secureSet?(key: string, value: string): void;
+  secureRemove?(key: string): void;
+
   // Workers (worker.ts): a second context on its own thread, from a bundle
   // `swiftbrowser-native build --worker <name>=<entry>` wrote next to app.js
   // (`<name>.worker.js`). The app's context has the first three; a worker's

package/src/fetch.ts

@@ -1,11 +1,13 @@
 /**
  * `fetch`, `Headers`, `Request`, `Response` and `AbortController` over the
  * bridge's `fetch` primitive (`URLSession` on the Swift side). Bodies cross
- * as base64; a `Response` reads them back as text, JSON or bytes. Streams
- * and `Blob` are not here: a body is whole.
+ * as base64; a `Response` reads them back as text, JSON, bytes or a `Blob`.
+ * A `Blob` or `FormData` body (blob.ts) is sent whole, the form as
+ * multipart; there are no streams.
  */
 
 import type { NativeBridge, NativeFetchResult } from './bridge';
+import { encodeMultipart, SimpleBlob, SimpleFormData } from './blob';
 import { base64Decode, base64Encode, utf8Decode, utf8Encode } from './encoding';
 
 type HeadersInitLike = SimpleHeaders | Record<string, string> | [string, string][];
@@ -114,16 +116,25 @@ function timeoutError(): Error {
   return error;
 }
 
-type BodyInitLike = string | ArrayBuffer | ArrayBufferView | SimpleURLSearchParamsLike | null | undefined;
+type BodyInitLike = string | ArrayBuffer | ArrayBufferView | SimpleURLSearchParamsLike | SimpleBlob | SimpleFormData | null | undefined;
 interface SimpleURLSearchParamsLike {
   toString(): string;
   [Symbol.iterator](): IterableIterator<[string, string]>;
 }
 
+/** The multipart boundary's randomness: the bridge's bytes once the runtime is installed, a counter before. */
+let randomBytes: (count: number) => Uint8Array = (count) => Uint8Array.from({ length: count }, (_, i) => (i * 37 + 11) & 255);
+
+export function setBodyRandomness(random: (count: number) => Uint8Array): void {
+  randomBytes = random;
+}
+
 /** Bytes of a body, and the content type it implies when the caller set none. */
 function encodeBody(body: BodyInitLike): { bytes: Uint8Array | null; contentType: string | null } {
   if (body === null || body === undefined) return { bytes: null, contentType: null };
   if (typeof body === 'string') return { bytes: utf8Encode(body), contentType: 'text/plain;charset=UTF-8' };
+  if (body instanceof SimpleBlob) return { bytes: body.bytes(), contentType: body.type || null };
+  if (body instanceof SimpleFormData) return encodeMultipart(body, randomBytes);
   if (body instanceof ArrayBuffer) return { bytes: new Uint8Array(body), contentType: null };
   if (ArrayBuffer.isView(body)) return { bytes: new Uint8Array(body.buffer, body.byteOffset, body.byteLength), contentType: null };
   if (typeof body === 'object' && Symbol.iterator in body && typeof body.toString === 'function') {
@@ -160,6 +171,13 @@ class Body {
   async json(): Promise<unknown> {
     return JSON.parse(utf8Decode(this.take()));
   }
+  async blob(): Promise<SimpleBlob> {
+    return new SimpleBlob([this.take()], { type: this.contentType() });
+  }
+  /** The body's content type, for `blob()`; a Request or Response reads its headers. */
+  protected contentType(): string {
+    return '';
+  }
 }
 
 export interface RequestInitLike {
@@ -190,6 +208,10 @@ export class SimpleRequest extends Body {
   rawBytes(): Uint8Array | null {
     return this.bytes;
   }
+  protected override contentType(): string {
+    return this.headers.get('content-type') ?? '';
+  }
+
   clone(): SimpleRequest {
     return new SimpleRequest(this, { body: this.bytes });
   }
@@ -222,6 +244,10 @@ export class SimpleResponse extends Body {
   get ok(): boolean {
     return this.status >= 200 && this.status < 300;
   }
+  protected override contentType(): string {
+    return this.headers.get('content-type') ?? '';
+  }
+
   clone(): SimpleResponse {
     return new SimpleResponse(this.bytes, { status: this.status, statusText: this.statusText, headers: this.headers, url: this.url });
   }