@zappdev/cli 0.1.0

package/native/src/platform/darwin/webview.zc

@@ -0,0 +1,550 @@
+//> macos: framework: WebKit
+//> macos: framework: Cocoa
+//> macos: framework: Security
+//> macos: link: -lcompression
+
+import "./window.zc";
+import "./webview_bootstrap.zc";
+
+include <stdlib.h>
+include <string.h>
+include <stdbool.h>
+
+raw {
+#ifdef __APPLE__
+    #include <Cocoa/Cocoa.h>
+    #include <WebKit/WebKit.h>
+    #include <dispatch/dispatch.h>
+    #include <compression.h>
+#ifndef ZAPP_EMBEDDED_ASSET_STRUCT_DEFINED
+#define ZAPP_EMBEDDED_ASSET_STRUCT_DEFINED 1
+    struct ZappEmbeddedAsset {
+        char* path;
+        uint8_t* data;
+        int len;
+        bool is_brotli;
+        int uncompressed_len;
+    };
+#endif
+    extern struct ZappEmbeddedAsset zapp_embedded_assets[];
+    extern int zapp_embedded_assets_count;
+
+    extern void* app_get_active(void);
+    extern char* app_get_bootstrap_name(void);
+    extern bool app_get_bootstrap_application_should_terminate_after_last_window_closed(void);
+    extern bool app_get_bootstrap_web_content_inspectable(void);
+    extern int app_get_bootstrap_max_workers(void);
+    extern void zapp_handle_message(void* app_ptr, char* msg_c);
+    extern const char* zapp_darwin_webview_bootstrap_script(void);
+    extern char* service_get_bindings_manifest_json(void);
+    extern const char* zapp_build_asset_root(void);
+    extern const char* zapp_build_initial_url(void);
+    extern int zapp_build_is_dev_mode(void);
+    extern int zapp_build_use_embedded_assets(void);
+
+    static NSString* zapp_escape_js_string(const char* raw) {
+        if (!raw) return @"";
+        NSString* s = [NSString stringWithUTF8String:raw];
+        s = [s stringByReplacingOccurrencesOfString:@"\\" withString:@"\\\\"];
+        s = [s stringByReplacingOccurrencesOfString:@"'" withString:@"\\'"];
+        s = [s stringByReplacingOccurrencesOfString:@"\n" withString:@"\\n"];
+        s = [s stringByReplacingOccurrencesOfString:@"\r" withString:@"\\r"];
+        return s;
+    }
+
+    static NSString* zapp_mime_for_path(NSString* path) {
+        NSString* lower = [path lowercaseString];
+        if ([lower hasSuffix:@".html"]) return @"text/html; charset=utf-8";
+        if ([lower hasSuffix:@".js"] || [lower hasSuffix:@".mjs"]) return @"application/javascript; charset=utf-8";
+        if ([lower hasSuffix:@".css"]) return @"text/css; charset=utf-8";
+        if ([lower hasSuffix:@".json"]) return @"application/json; charset=utf-8";
+        if ([lower hasSuffix:@".svg"]) return @"image/svg+xml";
+        if ([lower hasSuffix:@".png"]) return @"image/png";
+        if ([lower hasSuffix:@".jpg"] || [lower hasSuffix:@".jpeg"]) return @"image/jpeg";
+        if ([lower hasSuffix:@".woff2"]) return @"font/woff2";
+        if ([lower hasSuffix:@".map"]) return @"application/json; charset=utf-8";
+        return @"application/octet-stream";
+    }
+
+    static NSString* zapp_asset_root_path(void) {
+        const char* configuredRoot = zapp_build_asset_root();
+        if (configuredRoot && configuredRoot[0] != '\0') {
+            return [NSString stringWithUTF8String:configuredRoot];
+        }
+        return [[[NSFileManager defaultManager] currentDirectoryPath] stringByAppendingPathComponent:@"example/frontend/dist"];
+    }
+
+    static NSMutableDictionary<NSString*, NSMutableDictionary*>* zapp_sync_waits = nil;
+    static NSMutableDictionary<NSString*, NSMutableArray<NSString*>*>* zapp_sync_queues = nil;
+    extern void zapp_darwin_worker_dispatch_sync_result(const char* worker_id, const char* payload_json);
+
+    static void zapp_sync_ensure_state(void) {
+        if (zapp_sync_waits == nil) {
+            zapp_sync_waits = [NSMutableDictionary dictionary];
+        }
+        if (zapp_sync_queues == nil) {
+            zapp_sync_queues = [NSMutableDictionary dictionary];
+        }
+    }
+
+    static void zapp_sync_remove_wait_from_queue(NSString* key, NSString* requestId) {
+        if (key == nil || requestId == nil) return;
+        NSMutableArray<NSString*>* queue = [zapp_sync_queues objectForKey:key];
+        if (queue == nil) return;
+        [queue removeObject:requestId];
+        if ([queue count] == 0) {
+            [zapp_sync_queues removeObjectForKey:key];
+        }
+    }
+
+    static void zapp_dispatch_sync_result_to_webviews(const char* payload_json) {
+        NSString* payload = zapp_escape_js_string(payload_json);
+        NSString* js = [NSString stringWithFormat:
+            @"(function(){const b=globalThis[Symbol.for('zapp.bridge')];if(b&&typeof b.dispatchSyncResult==='function'){b.dispatchSyncResult('%@');}})();",
+            payload
+        ];
+        for (NSWindow* window in [NSApp windows]) {
+            NSView* content = [window contentView];
+            if ([content isKindOfClass:[WKWebView class]]) {
+                WKWebView* webview = (WKWebView*)content;
+                [webview evaluateJavaScript:js completionHandler:nil];
+            }
+        }
+    }
+
+    static void zapp_sync_dispatch_result(NSString* requestId, BOOL ok, NSString* status, NSString* targetWorkerId) {
+        if (requestId == nil || [requestId length] == 0) return;
+        NSString* safeStatus = ([status isKindOfClass:[NSString class]] && [status length] > 0) ? status : @"notified";
+        NSString* payload = [NSString stringWithFormat:
+            @"{\"id\":\"%@\",\"ok\":%@,\"status\":\"%@\"}",
+            requestId,
+            ok ? @"true" : @"false",
+            safeStatus
+        ];
+        if ([targetWorkerId isKindOfClass:[NSString class]] && [targetWorkerId length] > 0) {
+            zapp_darwin_worker_dispatch_sync_result([targetWorkerId UTF8String], [payload UTF8String]);
+            return;
+        }
+        zapp_dispatch_sync_result_to_webviews([payload UTF8String]);
+    }
+
+    static NSURL* zapp_initial_url(void) {
+        const char* configuredUrl = zapp_build_initial_url();
+        if (configuredUrl && configuredUrl[0] != '\0') {
+            return [NSURL URLWithString:[NSString stringWithUTF8String:configuredUrl]];
+        }
+        return [NSURL URLWithString:@"zapp://index.html"];
+    }
+
+    @interface ZappAssetSchemeHandler : NSObject <WKURLSchemeHandler>
+    @end
+
+    @implementation ZappAssetSchemeHandler
+    - (void)webView:(WKWebView*)webView startURLSchemeTask:(id<WKURLSchemeTask>)task {
+        (void)webView;
+        NSURL* url = [task request].URL;
+        NSString* host = url.host ?: @"";
+        NSString* path = url.path ?: @"/";
+        NSString* assetRoot = zapp_asset_root_path();
+
+        // Map custom scheme URLs to dist files:
+        // - zapp://index.html                -> index.html
+        // - zapp://index.html/assets/a.css   -> assets/a.css
+        // - zapp://app/index.html            -> index.html
+        // - zapp://app/assets/a.css          -> assets/a.css
+        NSString* rel = path;
+        if ((rel.length == 0 || [rel isEqualToString:@"/"]) && host.length > 0) {
+            rel = [@"/" stringByAppendingString:host];
+        } else if (host.length > 0 && ![host isEqualToString:@"app"]) {
+            // Some URLs encode the html file in host and real path in pathname.
+            // For asset paths, ignore host and keep only pathname.
+            if ([path hasPrefix:@"/assets/"]) {
+                rel = path;
+            }
+        }
+        if ([rel isEqualToString:@"/"] || rel.length == 0) {
+            rel = @"/index.html";
+        }
+        while ([rel hasPrefix:@"/"]) rel = [rel substringFromIndex:1];
+
+        NSString* lookupPath = [@"/" stringByAppendingString:rel];
+        if (zapp_build_use_embedded_assets() != 0 && zapp_embedded_assets_count > 0) {
+            bool foundEmbedded = false;
+            for (int i = 0; i < zapp_embedded_assets_count; i++) {
+                NSString* assetPath = [NSString stringWithUTF8String:zapp_embedded_assets[i].path];
+                if ([assetPath isEqualToString:lookupPath]) {
+                    NSData* data = nil;
+                    if (zapp_embedded_assets[i].is_brotli) {
+                        uint8_t* out_buf = malloc(zapp_embedded_assets[i].uncompressed_len);
+                        size_t decoded_size = compression_decode_buffer(out_buf, zapp_embedded_assets[i].uncompressed_len,
+                                                                        zapp_embedded_assets[i].data, zapp_embedded_assets[i].len,
+                                                                        NULL, COMPRESSION_BROTLI);
+                        if (decoded_size > 0) {
+                            data = [NSData dataWithBytesNoCopy:out_buf length:decoded_size freeWhenDone:YES];
+                        } else {
+                            free(out_buf);
+                            data = [NSData data];
+                        }
+                    } else {
+                        data = [NSData dataWithBytesNoCopy:(void*)zapp_embedded_assets[i].data length:zapp_embedded_assets[i].len freeWhenDone:NO];
+                    }
+
+                    NSMutableDictionary* headers = [NSMutableDictionary dictionaryWithDictionary:@{
+                        @"Content-Type": zapp_mime_for_path(lookupPath),
+                        @"Cross-Origin-Opener-Policy": @"same-origin",
+                        @"Cross-Origin-Embedder-Policy": @"require-corp",
+                        @"Cross-Origin-Resource-Policy": @"same-origin",
+                        @"Cache-Control": @"no-cache"
+                    }];
+                    
+                    NSHTTPURLResponse* response = [[NSHTTPURLResponse alloc]
+                        initWithURL:url
+                        statusCode:200
+                        HTTPVersion:@"HTTP/1.1"
+                        headerFields:headers];
+                    [task didReceiveResponse:response];
+                    [task didReceiveData:data];
+                    [task didFinish];
+                    return;
+                }
+            }
+            BOOL isAssetRequest = [rel hasPrefix:@"assets/"] || [rel hasPrefix:@"zapp-workers/"];
+            if (!isAssetRequest && !foundEmbedded) {
+                 for (int i = 0; i < zapp_embedded_assets_count; i++) {
+                     NSString* assetPath = [NSString stringWithUTF8String:zapp_embedded_assets[i].path];
+                     if ([assetPath isEqualToString:@"/index.html"]) {
+                         NSData* data = nil;
+                         if (zapp_embedded_assets[i].is_brotli) {
+                             uint8_t* out_buf = malloc(zapp_embedded_assets[i].uncompressed_len);
+                             size_t decoded_size = compression_decode_buffer(out_buf, zapp_embedded_assets[i].uncompressed_len,
+                                                                             zapp_embedded_assets[i].data, zapp_embedded_assets[i].len,
+                                                                             NULL, COMPRESSION_BROTLI);
+                             if (decoded_size > 0) {
+                                 data = [NSData dataWithBytesNoCopy:out_buf length:decoded_size freeWhenDone:YES];
+                             } else {
+                                 free(out_buf);
+                                 data = [NSData data];
+                             }
+                         } else {
+                             data = [NSData dataWithBytesNoCopy:(void*)zapp_embedded_assets[i].data length:zapp_embedded_assets[i].len freeWhenDone:NO];
+                         }
+
+                         NSMutableDictionary* headers = [NSMutableDictionary dictionaryWithDictionary:@{
+                             @"Content-Type": zapp_mime_for_path(@"/index.html"),
+                             @"Cross-Origin-Opener-Policy": @"same-origin",
+                             @"Cross-Origin-Embedder-Policy": @"require-corp",
+                             @"Cross-Origin-Resource-Policy": @"same-origin",
+                             @"Cache-Control": @"no-cache"
+                         }];
+                         
+                         NSHTTPURLResponse* response = [[NSHTTPURLResponse alloc]
+                             initWithURL:url
+                             statusCode:200
+                             HTTPVersion:@"HTTP/1.1"
+                             headerFields:headers];
+                         [task didReceiveResponse:response];
+                         [task didReceiveData:data];
+                         [task didFinish];
+                         return;
+                     }
+                 }
+            }
+        }
+
+        NSString* full = [assetRoot stringByAppendingPathComponent:rel];
+        if ([[NSFileManager defaultManager] fileExistsAtPath:full] == NO) {
+            BOOL isAssetRequest = [rel hasPrefix:@"assets/"] || [rel hasPrefix:@"zapp-workers/"];
+            if (!isAssetRequest) {
+                NSString* fallback = [assetRoot stringByAppendingPathComponent:@"index.html"];
+                if ([[NSFileManager defaultManager] fileExistsAtPath:fallback]) {
+                    full = fallback;
+                }
+            }
+            if ([[NSFileManager defaultManager] fileExistsAtPath:full] == NO) {
+                NSData* empty = [NSData data];
+                NSHTTPURLResponse* notFound = [[NSHTTPURLResponse alloc]
+                    initWithURL:url
+                    statusCode:404
+                    HTTPVersion:@"HTTP/1.1"
+                    headerFields:@{ @"Content-Type": @"text/plain; charset=utf-8" }];
+                [task didReceiveResponse:notFound];
+                [task didReceiveData:empty];
+                [task didFinish];
+                return;
+            }
+        }
+
+        NSData* data = [NSData dataWithContentsOfFile:full];
+        if (!data) data = [NSData data];
+        NSDictionary* headers = @{
+            @"Content-Type": zapp_mime_for_path(full),
+            @"Cross-Origin-Opener-Policy": @"same-origin",
+            @"Cross-Origin-Embedder-Policy": @"require-corp",
+            @"Cross-Origin-Resource-Policy": @"same-origin",
+            @"Cache-Control": @"no-cache"
+        };
+        NSHTTPURLResponse* response = [[NSHTTPURLResponse alloc]
+            initWithURL:url
+            statusCode:200
+            HTTPVersion:@"HTTP/1.1"
+            headerFields:headers];
+        [task didReceiveResponse:response];
+        [task didReceiveData:data];
+        [task didFinish];
+    }
+
+    - (void)webView:(WKWebView*)webView stopURLSchemeTask:(id<WKURLSchemeTask>)task {
+        (void)webView;
+        (void)task;
+    }
+    @end
+
+    @interface ZappMsgHandler : NSObject <WKScriptMessageHandler>
+    @end
+
+    @implementation ZappMsgHandler
+    - (void)userContentController:(WKUserContentController*)ucc didReceiveScriptMessage:(WKScriptMessage*)msg {
+        (void)ucc;
+        id body = [msg body];
+        if (![body isKindOfClass:[NSString class]]) return;
+        const char* raw_msg = [(NSString*)body UTF8String];
+        if (!raw_msg) return;
+        char* msg_copy = strdup(raw_msg);
+        if (!msg_copy) return;
+        void* app_ptr = app_get_active();
+        if (app_ptr != NULL) {
+            zapp_handle_message(app_ptr, msg_copy);
+        }
+        free(msg_copy);
+    }
+    @end
+
+    void zapp_dispatch_invoke_result(char* request_id, char* payload_json) {
+        (void)request_id;
+        NSString* payload = zapp_escape_js_string(payload_json);
+        NSString* js = [NSString stringWithFormat:
+            @"(function(){const b=globalThis[Symbol.for('zapp.bridge')];if(b&&typeof b.dispatchInvokeResult==='function'){b.dispatchInvokeResult('%@');}})();",
+            payload];
+        for (NSWindow* window in [NSApp windows]) {
+            NSView* content = [window contentView];
+            if ([content isKindOfClass:[WKWebView class]]) {
+                WKWebView* webview = (WKWebView*)content;
+                [webview evaluateJavaScript:js completionHandler:nil];
+            }
+        }
+    }
+
+    void platform_sync_handle_bridge(char* action, char* payload_json) {
+        if (action == NULL || payload_json == NULL) return;
+        NSString* actionStr = [NSString stringWithUTF8String:action];
+        NSString* payload = [NSString stringWithUTF8String:payload_json];
+        if (![actionStr isKindOfClass:[NSString class]] || ![payload isKindOfClass:[NSString class]]) return;
+
+        NSData* payloadData = [payload dataUsingEncoding:NSUTF8StringEncoding];
+        if (payloadData == nil) return;
+        id rawObj = [NSJSONSerialization JSONObjectWithData:payloadData options:0 error:nil];
+        if (![rawObj isKindOfClass:[NSDictionary class]]) return;
+        NSDictionary* body = (NSDictionary*)rawObj;
+
+        zapp_sync_ensure_state();
+
+        if ([actionStr isEqualToString:@"wait"]) {
+            NSString* requestId = [body objectForKey:@"id"];
+            NSString* key = [body objectForKey:@"key"];
+            NSNumber* timeoutNumber = [body objectForKey:@"timeoutMs"];
+            NSString* targetWorkerId = [body objectForKey:@"targetWorkerId"];
+            if (![requestId isKindOfClass:[NSString class]] || [requestId length] == 0) return;
+            if (![key isKindOfClass:[NSString class]] || [key length] == 0) return;
+            if ([zapp_sync_waits objectForKey:requestId] != nil) return;
+
+            NSInteger timeoutMs = 30000;
+            if ([timeoutNumber respondsToSelector:@selector(integerValue)]) {
+                timeoutMs = [timeoutNumber integerValue];
+            }
+            if (timeoutMs < 1) timeoutMs = 1;
+            if (timeoutMs > 300000) timeoutMs = 300000;
+
+            NSMutableDictionary* waitObj = [NSMutableDictionary dictionary];
+            [waitObj setObject:key forKey:@"key"];
+            if ([targetWorkerId isKindOfClass:[NSString class]] && [targetWorkerId length] > 0) {
+                [waitObj setObject:targetWorkerId forKey:@"targetWorkerId"];
+            }
+            [zapp_sync_waits setObject:waitObj forKey:requestId];
+
+            NSMutableArray<NSString*>* queue = [zapp_sync_queues objectForKey:key];
+            if (queue == nil) {
+                queue = [NSMutableArray array];
+                [zapp_sync_queues setObject:queue forKey:key];
+            }
+            [queue addObject:requestId];
+
+            if ([timeoutNumber respondsToSelector:@selector(integerValue)]) {
+                dispatch_after(dispatch_time(DISPATCH_TIME_NOW, (int64_t)timeoutMs * NSEC_PER_MSEC), dispatch_get_main_queue(), ^{
+                    NSDictionary* existing = [zapp_sync_waits objectForKey:requestId];
+                    if (existing == nil) return;
+                    NSString* existingKey = [existing objectForKey:@"key"];
+                    NSString* existingTargetWorkerId = [existing objectForKey:@"targetWorkerId"];
+                    [zapp_sync_waits removeObjectForKey:requestId];
+                    zapp_sync_remove_wait_from_queue(existingKey, requestId);
+                    zapp_sync_dispatch_result(requestId, YES, @"timed-out", existingTargetWorkerId);
+                });
+            }
+            return;
+        }
+
+        if ([actionStr isEqualToString:@"notify"]) {
+            NSString* key = [body objectForKey:@"key"];
+            NSNumber* countNumber = [body objectForKey:@"count"];
+            if (![key isKindOfClass:[NSString class]] || [key length] == 0) return;
+            NSInteger count = 1;
+            if ([countNumber respondsToSelector:@selector(integerValue)]) {
+                count = [countNumber integerValue];
+            }
+            if (count < 1) count = 1;
+            if (count > 65535) count = 65535;
+
+            NSMutableArray<NSString*>* queue = [zapp_sync_queues objectForKey:key];
+            if (queue == nil || [queue count] == 0) return;
+
+            NSInteger delivered = 0;
+            while (delivered < count && [queue count] > 0) {
+                NSString* requestId = queue[0];
+                [queue removeObjectAtIndex:0];
+                NSDictionary* existing = [zapp_sync_waits objectForKey:requestId];
+                if (existing == nil) continue;
+                NSString* existingTargetWorkerId = [existing objectForKey:@"targetWorkerId"];
+                [zapp_sync_waits removeObjectForKey:requestId];
+                zapp_sync_dispatch_result(requestId, YES, @"notified", existingTargetWorkerId);
+                delivered += 1;
+            }
+            if ([queue count] == 0) {
+                [zapp_sync_queues removeObjectForKey:key];
+            }
+            return;
+        }
+
+        if ([actionStr isEqualToString:@"cancel"]) {
+            NSString* requestId = [body objectForKey:@"id"];
+            if (![requestId isKindOfClass:[NSString class]] || [requestId length] == 0) return;
+            NSDictionary* existing = [zapp_sync_waits objectForKey:requestId];
+            if (existing == nil) return;
+            NSString* existingKey = [existing objectForKey:@"key"];
+            NSString* existingTargetWorkerId = [existing objectForKey:@"targetWorkerId"];
+            [zapp_sync_waits removeObjectForKey:requestId];
+            zapp_sync_remove_wait_from_queue(existingKey, requestId);
+            zapp_sync_dispatch_result(requestId, YES, @"cancelled", existingTargetWorkerId);
+        }
+    }
+
+    // Custom WKWebView subclass for drag region support
+    @interface ZappWebView : WKWebView
+    @property (nonatomic, assign) BOOL inDragRegion;
+    @end
+
+    @implementation ZappWebView
+    - (instancetype)initWithFrame:(NSRect)frame configuration:(WKWebViewConfiguration*)config {
+        self = [super initWithFrame:frame configuration:config];
+        if (self) { _inDragRegion = NO; }
+        return self;
+    }
+    - (void)mouseDown:(NSEvent*)event {
+        if (self.inDragRegion) {
+            [self.window performWindowDragWithEvent:event];
+            return;
+        }
+        [super mouseDown:event];
+    }
+    // Allow the window to be moved when clicking drag regions
+    - (BOOL)mouseDownCanMoveWindow {
+        return self.inDragRegion;
+    }
+    @end
+
+    void zapp_darwin_webview_create(void* window_ptr, bool inspectable) {
+        NSWindow* window = (__bridge NSWindow*)window_ptr;
+        NSView* hostView = [window contentView];
+        NSRect bounds = [hostView bounds];
+        WKWebViewConfiguration* config = [[WKWebViewConfiguration alloc] init];
+        ZappAssetSchemeHandler* schemeHandler = [[ZappAssetSchemeHandler alloc] init];
+        [config setURLSchemeHandler:schemeHandler forURLScheme:@"zapp"];
+        WKUserContentController* ucc = [[WKUserContentController alloc] init];
+        NSString* ownerId = [NSString stringWithFormat:@"owner-%p", window];
+        NSString* windowId = [NSString stringWithFormat:@"win-%p", window];
+        const char* bindingsRaw = service_get_bindings_manifest_json();
+        NSString* bindingsJson = zapp_escape_js_string(bindingsRaw);
+
+        const char* bootstrapName = app_get_bootstrap_name();
+        NSString* appName = bootstrapName != NULL
+            ? [NSString stringWithUTF8String:bootstrapName]
+            : @"Zapp App";
+        BOOL applicationShouldTerminateAfterLastWindowClosed =
+            app_get_bootstrap_application_should_terminate_after_last_window_closed() ? YES : NO;
+        BOOL webContentInspectable =
+            app_get_bootstrap_web_content_inspectable() ? YES : NO;
+        int maxWorkers = app_get_bootstrap_max_workers();
+        appName = [appName stringByReplacingOccurrencesOfString:@"\\" withString:@"\\\\"];
+        appName = [appName stringByReplacingOccurrencesOfString:@"'" withString:@"\\'"];
+        NSString* appConfigScript = [NSString stringWithFormat:
+            @"(function(){globalThis[Symbol.for('zapp.bootstrapConfig')]={name:'%@',applicationShouldTerminateAfterLastWindowClosed:%@,webContentInspectable:%@,maxWorkers:%d};})();",
+            appName,
+            applicationShouldTerminateAfterLastWindowClosed ? @"true" : @"false",
+            webContentInspectable ? @"true" : @"false",
+            maxWorkers
+        ];
+        WKUserScript* appConfigUserScript = [[WKUserScript alloc]
+            initWithSource:appConfigScript
+            injectionTime:WKUserScriptInjectionTimeAtDocumentStart
+            forMainFrameOnly:NO];
+        [ucc addUserScript:appConfigUserScript];
+
+        NSString* bindingsScript = [NSString stringWithFormat:
+            @"(function(){globalThis[Symbol.for('zapp.bindingsManifest')]='%@';})();",
+            bindingsJson
+        ];
+        WKUserScript* bindingsUserScript = [[WKUserScript alloc]
+            initWithSource:bindingsScript
+            injectionTime:WKUserScriptInjectionTimeAtDocumentStart
+            forMainFrameOnly:NO];
+        [ucc addUserScript:bindingsUserScript];
+
+        NSString* ownerScript = [NSString stringWithFormat:
+            @"(function(){globalThis[Symbol.for('zapp.ownerId')]='%@';})();",
+            ownerId
+        ];
+        WKUserScript* ownerUserScript = [[WKUserScript alloc]
+            initWithSource:ownerScript
+            injectionTime:WKUserScriptInjectionTimeAtDocumentStart
+            forMainFrameOnly:NO];
+        [ucc addUserScript:ownerUserScript];
+
+        NSString* windowIdScript = [NSString stringWithFormat:
+            @"(function(){globalThis[Symbol.for('zapp.windowId')]='%@';})();",
+            windowId
+        ];
+        WKUserScript* windowIdUserScript = [[WKUserScript alloc]
+            initWithSource:windowIdScript
+            injectionTime:WKUserScriptInjectionTimeAtDocumentStart
+            forMainFrameOnly:NO];
+        [ucc addUserScript:windowIdUserScript];
+
+        NSString* bootstrap = [NSString stringWithUTF8String:zapp_darwin_webview_bootstrap_script()];
+        WKUserScript* userScript = [[WKUserScript alloc]
+            initWithSource:bootstrap
+            injectionTime:WKUserScriptInjectionTimeAtDocumentStart
+            forMainFrameOnly:NO];
+        [ucc addUserScript:userScript];
+
+        ZappMsgHandler* handler = [[ZappMsgHandler alloc] init];
+        [ucc addScriptMessageHandler:handler name:@"zapp"];
+        [config setUserContentController:ucc];
+        [[config preferences] setValue:@YES forKey:@"developerExtrasEnabled"];
+        ZappWebView* webview = [[ZappWebView alloc] initWithFrame:bounds configuration:config];
+        [webview setAutoresizingMask:(NSViewWidthSizable | NSViewHeightSizable)];
+        [webview setInspectable:inspectable ? YES : NO];
+        NSURL* url = zapp_initial_url();
+        [webview loadRequest:[NSURLRequest requestWithURL:url]];
+        
+        [window setContentView:webview];
+    }
+#endif
+}

package/native/src/platform/darwin/webview_bootstrap.zc

@@ -0,0 +1,9 @@
+// AUTO-GENERATED FILE. DO NOT EDIT.
+// Source of truth: `packages/bootstrap/src/webview.ts`
+// Generated: `2026-03-22T07:58:05.467Z`
+
+raw {
+    const char* zapp_darwin_webview_bootstrap_script(void) {
+        return "(()=>{var{defineProperty:_,getOwnPropertyNames:o,getOwnPropertyDescriptor:s}=Object,d=Object.prototype.hasOwnProperty;var S=new WeakMap,n=(H)=>{var Q=S.get(H),$;if(Q)return Q;if(Q=_({},\"__esModule\",{value:!0}),H&&typeof H===\"object\"||typeof H===\"function\")o(H).map((K)=>!d.call(Q,K)&&_(Q,K,{get:()=>H[K],enumerable:!($=s(H,K))||$.enumerable}));return S.set(H,Q),Q};var GH={},L=globalThis,h=L.__zapp,W=h&&typeof h===\"object\"?h:{},v=()=>{if(L.__zapp===W)return;L.__zapp=W;try{Object.defineProperty(L,\"__zapp\",{value:W,enumerable:!0,configurable:!1,writable:!1})}catch{}},k=Symbol.for(\"zapp.bridge\"),M=Symbol.for(\"zapp.bootstrapConfig\"),w=Symbol.for(\"zapp.ownerId\"),x=L,B=(H)=>{let Q=x[k]?\?{},$=Object.assign({},Q,H);Object.defineProperty(x,k,{value:$,enumerable:!1,configurable:!0,writable:!1})},X={},Y={},O=0;B({_listeners:Y,_lastId:O});var D=X.__ctxId?\?=`ctx-${Date.now()}-${Math.random().toString(36).slice(2)}`,R=X.__pendingInvokes=X.__pendingInvokes?\?{},C=X.__pendingSyncWaits=X.__pendingSyncWaits?\?{},I=X.__invokeSeq?\?0,m=1,a=131072,y=x[M]==null?null:{name:x[M].name,applicationShouldTerminateAfterLastWindowClosed:x[M].applicationShouldTerminateAfterLastWindowClosed,webContentInspectable:x[M].webContentInspectable,maxWorkers:x[M].maxWorkers};try{delete x[M]}catch{}var u=(H)=>typeof H===\"string\"?H:JSON.stringify(H?\?{}),A=(H,Q,$)=>{v();let K=L.webkit?.messageHandlers?.zapp;if(!K?.postMessage)return!1;return K.postMessage(`${H}\n${Q}\n${u($)}`),!0};X.invoke=(H,Q)=>new Promise(($,K)=>{let J=typeof H===\"string\"?H.trim():\"\";if(!J){K(Error(\"Service method must be a non-empty string.\"));return}if(u(Q).length>a){K(Error(\"Service payload exceeds max size.\"));return}let G=`${D}:inv-${++I}`;X.__invokeSeq=I;let f={v:m,id:G,method:J,args:Q,meta:{sourceCtxId:D}},F=setTimeout(()=>{delete R[G],K(Error(\"Service invocation timed out.\"))},15000);if(R[G]={resolve:$,reject:K,timeout:F},!A(\"invoke_rpc\",J,f))clearTimeout(F),delete R[G],K(Error(\"Native invoke transport unavailable.\"))});var b=()=>{let H=Error(\"Sync wait aborted.\");return H.name=\"AbortError\",H};X.syncWait=(H,Q=30000,$)=>new Promise((K,J)=>{let V=typeof H===\"string\"?H.trim():\"\";if(!V){J(Error(\"Sync key must be a non-empty string.\"));return}if($?.aborted){J(b());return}let G=`${D}:sync-${Date.now()}-${Math.random().toString(36).slice(2)}`,f=Q==null||Number.isNaN(Number(Q))?null:Math.floor(Number(Q)),F=f==null?null:Math.max(1,Math.min(300000,f)),z={id:G,key:V,timeoutMs:F,meta:{sourceCtxId:D}},Z=F==null?void 0:setTimeout(()=>{delete C[G],J(Error(\"Sync wait transport timed out.\"))},F+5000);if(C[G]={resolve:K,reject:J,timeout:Z},!A(\"sync\",\"wait\",z)){if(Z)clearTimeout(Z);delete C[G],J(Error(\"Native sync transport unavailable.\"));return}if($){let N=()=>{let T=C[G];if(!T)return;if(T.timeout)clearTimeout(T.timeout);delete C[G],A(\"sync\",\"cancel\",{id:G,meta:{sourceCtxId:D}}),J(b())};$.addEventListener(\"abort\",N,{once:!0})}});X.syncNotify=(H,Q=1)=>{let $=typeof H===\"string\"?H.trim():\"\";if(!$)return!1;let K=Math.max(1,Math.min(65535,Math.floor(Q)));return A(\"sync\",\"notify\",{key:$,count:K,meta:{sourceCtxId:D}})};X.syncCancel=(H)=>{let Q=typeof H===\"string\"?H.trim():\"\";if(!Q)return!1;return A(\"sync\",\"cancel\",{id:Q,meta:{sourceCtxId:D}})};X.emit=(H,Q)=>A(\"emit\",H,{__zapp_internal_meta:{sourceCtxId:D},data:Q});X.onEvent=(H,Q)=>{let $=++O;return(Y[H]?\?=[]).push({id:$,fn:Q}),$};X.offEvent=(H,Q)=>{let $=Y[H]?\?[];Y[H]=$.filter((K)=>K.id!==Q)};X.onceEvent=(H,Q)=>{let $=++O;return(Y[H]?\?=[]).push({id:$,fn:Q,once:!0}),$};X.offAllEvents=(H)=>{if(H)delete Y[H];else Object.keys(Y).forEach((Q)=>delete Y[Q])};var t=(H)=>{let Q=H.pathname.split(\".\").pop()?.toLowerCase();if(Q!==\"ts\"&&Q!==\"tsx\")return H.toString();let $=(Z)=>{let U=Z.startsWith(\"/\")?Z:`/${Z}`;if(H.protocol===\"zapp:\")return`zapp://app${U}`;return new URL(U,H).toString()},K=x[Symbol.for(\"zapp.workerManifest\")],J=H.pathname.split(\"/\").pop()?\?\"worker.ts\",V=`./${J}`;if(K){let Z=K[V]?\?K[J];if(typeof Z===\"string\"&&Z.length>0)return $(Z)}let G=H.pathname.split(\"/\"),z=`/zapp-workers/${(G[G.length-1]?\?\"worker.ts\").replace(/\\.[^.]+$/,\"\")}.mjs`;return $(z)},r=(H)=>H instanceof URL?t(H):H;if(!X.workerBridge){let H={},Q=0,$=x[w],K=typeof $===\"string\"&&$.length>0?$:`owner-${Date.now()}-${Math.random().toString(36).slice(2)}`;try{delete x[w]}catch{}let J=[],V=(F)=>{return H[F]?\?={message:[],error:[],close:[]},H[F]},G=(F,z,Z)=>{let U=(E)=>{queueMicrotask(E)};if(F===\"close\"){let E=H[z];U(()=>{if(E)for(let i of E.close)try{i(Z)}catch{}X.workerBridge?.terminateWorker(z)});return}let N=H[z];if(!N)return;let T=Z;if(typeof Z===\"string\")try{T=JSON.parse(Z)}catch{}let j=F===\"error\"?N.error:N.message;U(()=>{for(let E of j)try{E(T)}catch{}})};X.__workerBridgeDispatch=G,B({dispatchWorkerBridge:G}),X.workerBridge={createWorker(F,z){let Z=Boolean(z?.shared),U=`${K}:${D}:zw-${++Q}`;return V(U),J.push(U),A(\"worker\",\"create\",{id:U,scriptUrl:F,ownerId:K,shared:Z}),U},postToWorker(F,z){A(\"worker\",\"post\",{id:F,data:z,ownerId:K})},terminateWorker(F){A(\"worker\",\"terminate\",{id:F,ownerId:K}),J=J.filter((z)=>z!==F),delete H[F]},subscribe(F,z,Z,U){let N=V(F);if(z)N.message.push(z);if(Z)N.error.push(Z);if(U)N.close.push(U);return()=>{let T=H[F];if(!T)return;if(z)T.message=T.message.filter((j)=>j!==z);if(Z)T.error=T.error.filter((j)=>j!==Z);if(U)T.close=T.close.filter((j)=>j!==U)}}};let f=()=>{if(!J.length)return;A(\"worker\",\"reset_owner\",{ownerId:K}),J=[];for(let F of Object.keys(H))delete H[F]};B({resetOwnerWorkers:f,createWorker:X.workerBridge.createWorker.bind(X.workerBridge),postToWorker:X.workerBridge.postToWorker.bind(X.workerBridge),terminateWorker:X.workerBridge.terminateWorker.bind(X.workerBridge),subscribeWorker:X.workerBridge.subscribe.bind(X.workerBridge),resolveWorkerScriptURL:r}),L.addEventListener(\"beforeunload\",f),L.addEventListener(\"pagehide\",f)}var q={},e=0,HH=(H)=>new Promise((Q,$)=>{let K=`${D}:win-${++e}`,J=setTimeout(()=>{delete q[K],$(Error(\"Window creation timed out.\"))},15000);q[K]={resolve:Q,reject:$,timeout:J},A(\"window\",\"create\",{requestId:K,options:H})}),QH=(H,Q,$)=>{A(\"window\",Q,{windowId:H,...$})},$H=(H,Q)=>{A(\"app\",H,Q?\?{})},KH=(H)=>{let Q=H;if(typeof H===\"string\")try{Q=JSON.parse(H)}catch{return}if(!Q||typeof Q!==\"object\")return;let $=Q;if(typeof $.requestId!==\"string\")return;let K=q[$.requestId];if(!K)return;if(clearTimeout(K.timeout),delete q[$.requestId],$.ok===!1)K.reject(Error($.error?\?\"Window creation failed.\"));else K.resolve({id:$.id?\?\"\"})},l=(H,Q,$)=>{v();let K={windowId:H,timestamp:Date.now()};if($)try{let V=JSON.parse($);if(V.width||V.height)K.size={width:V.width?\?0,height:V.height?\?0};if(V.x!==void 0||V.y!==void 0)K.position={x:V.x?\?0,y:V.y?\?0}}catch{}let J=(V)=>{let G=Y[V];if(!G||G.length===0)return;let f=[];for(let F of G){try{F.fn(K)}catch{}if(!F.once)f.push(F)}if(f.length>0)Y[V]=f;else delete Y[V]};J(`__zapp_window:${H}:${Q}`),J(`window:${Q}`)};B({windowCreate:HH,windowAction:QH,appAction:$H,dispatchWindowResult:KH,dispatchWindowEvent:l,_emit:X.emit,_onEvent:X.onEvent,_onceEvent:X.onceEvent,_offEvent:X.offEvent,_offAllEvents:X.offAllEvents});W.invoke=X.invoke;W.emit=X.emit;W.on=(H,Q)=>{let $=X.onEvent?.(H,Q)?\?0;return()=>X.offEvent?.(H,$)};var XH=(H,Q)=>{v();let $=Q;if(typeof Q===\"string\"){let V=Q.trim();if(V.startsWith(\"{\")&&V.endsWith(\"}\")||V.startsWith(\"[\")&&V.endsWith(\"]\"))try{$=JSON.parse(Q)}catch{}}if($&&typeof $===\"object\"){let V=$;if(V.__zapp_internal_meta?.sourceCtxId===D)return;if(Object.prototype.hasOwnProperty.call(V,\"data\"))$=V.data}let K=Y[H]?\?[],J=[];for(let V of K){try{V.fn($)}catch{}if(!V.once)J.push(V)}if(J.length>0)Y[H]=J;else delete Y[H]},JH=(H)=>{let Q=H;if(typeof H===\"string\")try{Q=JSON.parse(H)}catch{return}if(!Q||typeof Q!==\"object\")return;let $=Q;if(typeof $.id!==\"string\"||$.id.length===0)return;let K=R[$.id];if(!K)return;if(clearTimeout(K.timeout),delete R[$.id],$.ok){K.resolve($.result);return}let J=$.error?.code?\?\"INTERNAL_ERROR\",V=$.error?.message?\?\"Service invocation failed\";K.reject(Error(`${J}: ${V}`))},VH=(H)=>{let Q=H;if(typeof H===\"string\")try{Q=JSON.parse(H)}catch{return}if(!Q||typeof Q!==\"object\")return;let $=Q;if(typeof $.id!==\"string\"||$.id.length===0)return;let K=C[$.id];if(!K)return;if(K.timeout)clearTimeout(K.timeout);if(delete C[$.id],!$.ok){K.reject(Error(\"Sync wait failed.\"));return}if($.status===\"cancelled\"){K.reject(b());return}K.resolve($.status===\"timed-out\"?\"timed-out\":\"notified\")},FH=(H)=>{let Q=H;if(typeof H===\"string\")try{Q=JSON.parse(H)}catch{return}if(!Q||typeof Q!==\"object\")return;let $=Q;if(typeof $.requestId!==\"string\")return;let K=`__zapp:dialog:${$.requestId}`,J=Y[K];if(J){for(let V of J)try{V.fn($)}catch{}delete Y[K]}};B({dispatchInvokeResult:JH,dispatchSyncResult:VH,dispatchDialogResult:FH,deliverEvent:XH,getConfig:()=>y==null?null:{...y},invoke:async(H)=>{let Q=H;if(!Q||typeof Q!==\"object\")throw Error(\"Invalid invoke request\");if(typeof Q.method!==\"string\")throw Error(\"Invalid service method\");let $=await X.invoke?.(Q.method,Q.args);return{v:m,id:Q.id,ok:!0,result:$}},getServiceBindings:()=>{let H=x[Symbol.for(\"zapp.bindingsManifest\")];if(typeof H!==\"string\")return null;return H},syncWait:async(H)=>{let Q=H;return X.syncWait?.(Q?.key?\?\"\",Q?.timeoutMs===void 0?30000:Q.timeoutMs,Q?.signal)?\?Promise.reject(Error(\"Sync unavailable\"))},syncNotify:(H)=>{let Q=H;return X.syncNotify?.(Q?.key?\?\"\",Q?.count?\?1)?\?!1},syncCancel:(H)=>{let Q=H;return X.syncCancel?.(Q?.id?\?\"\")?\?!1}});Object.defineProperties(W,{invoke:{value:X.invoke,enumerable:!0,configurable:!1,writable:!1},syncWait:{value:X.syncWait,enumerable:!0,configurable:!1,writable:!1},syncNotify:{value:X.syncNotify,enumerable:!0,configurable:!1,writable:!1},syncCancel:{value:X.syncCancel,enumerable:!0,configurable:!1,writable:!1},emit:{value:X.emit,enumerable:!0,configurable:!1,writable:!1},on:{value:W.on,enumerable:!0,configurable:!1,writable:!1}});Object.freeze(W);if(typeof document<\"u\"){let H=()=>{if(!document.head)return;let Q=document.createElement(\"meta\");Q.httpEquiv=\"Content-Security-Policy\",Q.content=\"default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; img-src 'self' data: blob:;\",document.head.insertBefore(Q,document.head.firstChild)};if(document.head)H();else document.addEventListener(\"DOMContentLoaded\",H,{once:!0})}v();var p=Symbol.for(\"zapp.windowId\"),c=Symbol.for(\"zapp.windowReady\"),P=L,g=()=>{if(P[c])return;P[c]=!0;let H=P[p],Q=L.webkit?.messageHandlers?.zapp;if(Q?.postMessage){let $=JSON.stringify({windowId:H?\?\"unknown\"});Q.postMessage(`window\nready\n${$}`)}l(H?\?\"unknown\",\"ready\")};if(typeof document<\"u\"){if(document.addEventListener(\"DOMContentLoaded\",g,{once:!0}),document.readyState!==\"loading\")g();let H=($)=>{let K=$;while(K){if(K.hasAttribute?.(\"data-zapp-drag-region\"))return!0;let J=K.tagName;if(J===\"BUTTON\"||J===\"INPUT\"||J===\"SELECT\"||J===\"TEXTAREA\"||J===\"A\")return!1;K=K.parentElement}return!1},Q=!1;document.addEventListener(\"mousemove\",($)=>{let K=H($.target);if(K!==Q)Q=K,A(\"window\",\"setDragRegion\",{windowId:P[p]?\?\"unknown\",drag:K})})}})();\n";
+    }
+}