@zappdev/cli 0.1.1 → 0.3.0

package/native/src/platform/windows/webview.zc

@@ -283,20 +283,41 @@ raw {
         if (--self->refCount == 0) { free(self); return 0; }
         return self->refCount;
     }
+    wchar_t* zapp_pending_deep_link = NULL;
+
     static HRESULT STDMETHODCALLTYPE znh_Invoke(
         ICoreWebView2NavigationCompletedEventHandler* This,
         ICoreWebView2* sender,
         ICoreWebView2NavigationCompletedEventArgs* args
     ) {
-        (void)sender; (void)args;
+        (void)args;
         ZappNavHandler* self = (ZappNavHandler*)This;
         if (!self->firstNavDone) {
             self->firstNavDone = TRUE;
             // Workaround: toggle visibility to force WebView2 to composite
-            // https://github.com/MicrosoftEdge/WebView2Feedback/issues/1077
             ICoreWebView2Controller_put_IsVisible(self->controller, FALSE);
             ICoreWebView2Controller_put_IsVisible(self->controller, TRUE);
             ICoreWebView2Controller_MoveFocus(self->controller, COREWEBVIEW2_MOVE_FOCUS_REASON_PROGRAMMATIC);
+
+            // Dispatch pending deep link URL if app was launched with one
+            if (zapp_pending_deep_link) {
+                char* urlUtf8 = zapp_wide_to_utf8(zapp_pending_deep_link);
+                if (urlUtf8) {
+                    char* escaped = zapp_escape_js_string(urlUtf8);
+                    size_t jsLen = strlen(escaped) + 256;
+                    char* js = (char*)malloc(jsLen);
+                    snprintf(js, jsLen,
+                        "(function(){var b=globalThis[Symbol.for('zapp.bridge')];"
+                        "if(b&&b.deliverEvent)b.deliverEvent('app:open-url',{url:'%s'});})();",
+                        escaped);
+                    ICoreWebView2_ExecuteScript(sender, zapp_utf8_to_wide(js), NULL);
+                    free(js);
+                    free(escaped);
+                    free(urlUtf8);
+                }
+                free(zapp_pending_deep_link);
+                zapp_pending_deep_link = NULL;
+            }
         }
         return S_OK;
     }
@@ -474,6 +495,13 @@ raw {
         char* rel = zapp_url_to_rel_path(uri);
         free(uri);
 
+        // Block path traversal
+        if (rel && strstr(rel, "..") != NULL) {
+            zapp_send_resource_response(args, 403, "text/plain", "Forbidden", 9, 0, NULL);
+            free(rel);
+            return S_OK;
+        }
+
         char lookupPath[512];
         snprintf(lookupPath, sizeof(lookupPath), "/%s", rel);
 
@@ -596,6 +624,164 @@ raw {
             }
         }
 
+        // Register NavigationStarting handler (URL restriction)
+        {
+            extern int zapp_build_is_dev_mode(void);
+            extern const char* zapp_build_allowed_navigation(void);
+
+            // Simple URL check — allows app URLs, localhost in dev, and user patterns
+            static int zapp_is_nav_allowed(const wchar_t* uri) {
+                if (!uri) return 1;
+                char* url = zapp_wide_to_utf8(uri);
+                if (!url) return 1;
+
+                // Always allow app scheme
+                if (strncmp(url, "https://app.localhost", 20) == 0 ||
+                    strncmp(url, "about:", 6) == 0 ||
+                    strncmp(url, "blob:", 5) == 0) {
+                    free(url);
+                    return 1;
+                }
+
+                // Dev mode: allow localhost
+                if (zapp_build_is_dev_mode()) {
+                    if (strncmp(url, "http://localhost", 16) == 0 ||
+                        strncmp(url, "http://127.0.0.1", 16) == 0 ||
+                        strncmp(url, "https://localhost", 17) == 0) {
+                        free(url);
+                        return 1;
+                    }
+                }
+
+                // Check user allowlist
+                const char* patternsRaw = zapp_build_allowed_navigation();
+                if (patternsRaw && patternsRaw[0] == '[') {
+                    // Simple JSON array parse — look for string patterns
+                    const char* p = patternsRaw + 1;
+                    while (*p) {
+                        while (*p == ' ' || *p == ',') p++;
+                        if (*p == ']') break;
+                        if (*p == '"') {
+                            p++;
+                            const char* start = p;
+                            while (*p && *p != '"') p++;
+                            size_t plen = (size_t)(p - start);
+                            if (*p == '"') p++;
+                            // Check if pattern matches (simple prefix glob)
+                            if (plen > 0 && start[plen - 1] == '*') {
+                                if (strncmp(url, start, plen - 1) == 0) {
+                                    free(url);
+                                    return 1;
+                                }
+                            } else if (strlen(url) == plen && strncmp(url, start, plen) == 0) {
+                                free(url);
+                                return 1;
+                            }
+                        } else {
+                            p++;
+                        }
+                    }
+                }
+
+                free(url);
+                return 0;
+            }
+
+            typedef struct {
+                ICoreWebView2NavigationStartingEventHandlerVtbl* lpVtbl;
+                ULONG refCount;
+            } ZappNavStartHandler;
+
+            static HRESULT STDMETHODCALLTYPE zns_QI(ICoreWebView2NavigationStartingEventHandler* This, REFIID riid, void** ppv) {
+                (void)riid; *ppv = This; This->lpVtbl->AddRef(This); return S_OK;
+            }
+            static ULONG STDMETHODCALLTYPE zns_AddRef(ICoreWebView2NavigationStartingEventHandler* This) {
+                return ++((ZappNavStartHandler*)This)->refCount;
+            }
+            static ULONG STDMETHODCALLTYPE zns_Release(ICoreWebView2NavigationStartingEventHandler* This) {
+                ZappNavStartHandler* self = (ZappNavStartHandler*)This;
+                if (--self->refCount == 0) { free(self); return 0; }
+                return self->refCount;
+            }
+            static HRESULT STDMETHODCALLTYPE zns_Invoke(
+                ICoreWebView2NavigationStartingEventHandler* This,
+                ICoreWebView2* sender,
+                ICoreWebView2NavigationStartingEventArgs* args
+            ) {
+                (void)This; (void)sender;
+                wchar_t* uriW = NULL;
+                ICoreWebView2NavigationStartingEventArgs_get_Uri(args, &uriW);
+                if (uriW) {
+                    if (!zapp_is_nav_allowed(uriW)) {
+                        ICoreWebView2NavigationStartingEventArgs_put_Cancel(args, TRUE);
+                        // If user-initiated, open in system browser
+                        BOOL isUserInitiated = FALSE;
+                        ICoreWebView2NavigationStartingEventArgs_get_IsUserInitiated(args, &isUserInitiated);
+                        if (isUserInitiated) {
+                            ShellExecuteW(NULL, L"open", uriW, NULL, NULL, SW_SHOWNORMAL);
+                        }
+                    }
+                    CoTaskMemFree(uriW);
+                }
+                return S_OK;
+            }
+
+            static ICoreWebView2NavigationStartingEventHandlerVtbl zns_vtbl = {
+                zns_QI, zns_AddRef, zns_Release, zns_Invoke
+            };
+
+            ZappNavStartHandler* nsHandler = (ZappNavStartHandler*)calloc(1, sizeof(ZappNavStartHandler));
+            nsHandler->lpVtbl = &zns_vtbl;
+            nsHandler->refCount = 1;
+            EventRegistrationToken nsToken;
+            ICoreWebView2_add_NavigationStarting(webview, (ICoreWebView2NavigationStartingEventHandler*)nsHandler, &nsToken);
+        }
+
+        // Handle target="_blank" — open in system browser instead of new webview window
+        {
+            typedef struct {
+                ICoreWebView2NewWindowRequestedEventHandlerVtbl* lpVtbl;
+                ULONG refCount;
+            } ZappNewWindowHandler;
+
+            static HRESULT STDMETHODCALLTYPE znw_QI(ICoreWebView2NewWindowRequestedEventHandler* This, REFIID riid, void** ppv) {
+                (void)riid; *ppv = This; This->lpVtbl->AddRef(This); return S_OK;
+            }
+            static ULONG STDMETHODCALLTYPE znw_AddRef(ICoreWebView2NewWindowRequestedEventHandler* This) {
+                return ++((ZappNewWindowHandler*)This)->refCount;
+            }
+            static ULONG STDMETHODCALLTYPE znw_Release(ICoreWebView2NewWindowRequestedEventHandler* This) {
+                ZappNewWindowHandler* self = (ZappNewWindowHandler*)This;
+                if (--self->refCount == 0) { free(self); return 0; }
+                return self->refCount;
+            }
+            static HRESULT STDMETHODCALLTYPE znw_Invoke(
+                ICoreWebView2NewWindowRequestedEventHandler* This,
+                ICoreWebView2* sender,
+                ICoreWebView2NewWindowRequestedEventArgs* args
+            ) {
+                (void)This; (void)sender;
+                wchar_t* uriW = NULL;
+                ICoreWebView2NewWindowRequestedEventArgs_get_Uri(args, &uriW);
+                if (uriW) {
+                    ShellExecuteW(NULL, L"open", uriW, NULL, NULL, SW_SHOWNORMAL);
+                    CoTaskMemFree(uriW);
+                }
+                ICoreWebView2NewWindowRequestedEventArgs_put_Handled(args, TRUE);
+                return S_OK;
+            }
+
+            static ICoreWebView2NewWindowRequestedEventHandlerVtbl znw_vtbl = {
+                znw_QI, znw_AddRef, znw_Release, znw_Invoke
+            };
+
+            ZappNewWindowHandler* nwHandler = (ZappNewWindowHandler*)calloc(1, sizeof(ZappNewWindowHandler));
+            nwHandler->lpVtbl = &znw_vtbl;
+            nwHandler->refCount = 1;
+            EventRegistrationToken nwToken;
+            ICoreWebView2_add_NewWindowRequested(webview, (ICoreWebView2NewWindowRequestedEventHandler*)nwHandler, &nwToken);
+        }
+
         // Register NavigationCompleted handler (IsVisible toggle workaround)
         ZappNavHandler* navHandler = (ZappNavHandler*)calloc(1, sizeof(ZappNavHandler));
         navHandler->lpVtbl = &znh_vtbl;
@@ -1034,6 +1220,262 @@ raw {
         if (url) free(url);
     }
 
+    // --- Custom Menu Builder ---
+    #define ZAPP_MENU_CMD_CUSTOM_BASE 41000
+    #define ZAPP_MENU_MAX_CUSTOM 256
+
+    static char zapp_menu_id_map[ZAPP_MENU_MAX_CUSTOM][64] = {{0}};
+    static int zapp_menu_custom_count = 0;
+
+    static int zapp_menu_register_id(const char* itemId) {
+        if (!itemId || zapp_menu_custom_count >= ZAPP_MENU_MAX_CUSTOM) return 0;
+        int cmd = ZAPP_MENU_CMD_CUSTOM_BASE + zapp_menu_custom_count;
+        strncpy(zapp_menu_id_map[zapp_menu_custom_count], itemId, 63);
+        zapp_menu_custom_count++;
+        return cmd;
+    }
+
+    static const char* zapp_menu_id_for_cmd(int cmd) {
+        int idx = cmd - ZAPP_MENU_CMD_CUSTOM_BASE;
+        if (idx >= 0 && idx < zapp_menu_custom_count) return zapp_menu_id_map[idx];
+        return NULL;
+    }
+
+    // Called from zapp_handle_menu_command for custom items
+    void zapp_dispatch_custom_menu_click(const char* itemId) {
+        if (!itemId) return;
+        char js[512];
+        snprintf(js, sizeof(js),
+            "(function(){var b=globalThis[Symbol.for('zapp.bridge')];"
+            "if(b&&b.deliverEvent)b.deliverEvent('menu:%s',{});})();",
+            itemId);
+        zapp_windows_webview_eval_all(js);
+    }
+
+    static void zapp_build_role_menu_win(HMENU menu, const char* role) {
+        if (strcmp(role, "editMenu") == 0) {
+            AppendMenuW(menu, MF_STRING, IDM_EDIT_UNDO,      L"Undo\tCtrl+Z");
+            AppendMenuW(menu, MF_STRING, IDM_EDIT_REDO,      L"Redo\tCtrl+Y");
+            AppendMenuW(menu, MF_SEPARATOR, 0, NULL);
+            AppendMenuW(menu, MF_STRING, IDM_EDIT_CUT,       L"Cut\tCtrl+X");
+            AppendMenuW(menu, MF_STRING, IDM_EDIT_COPY,      L"Copy\tCtrl+C");
+            AppendMenuW(menu, MF_STRING, IDM_EDIT_PASTE,     L"Paste\tCtrl+V");
+            AppendMenuW(menu, MF_SEPARATOR, 0, NULL);
+            AppendMenuW(menu, MF_STRING, IDM_EDIT_SELECTALL, L"Select All\tCtrl+A");
+        } else if (strcmp(role, "windowMenu") == 0) {
+            AppendMenuW(menu, MF_STRING, IDM_WIN_MINIMIZE, L"Minimize");
+            AppendMenuW(menu, MF_STRING, IDM_WIN_MAXIMIZE, L"Maximize");
+            AppendMenuW(menu, MF_SEPARATOR, 0, NULL);
+            AppendMenuW(menu, MF_STRING, IDM_WIN_CLOSE,    L"Close\tAlt+F4");
+        }
+    }
+
+    extern char* zapp_json_get_string(const char* json, const char* key);
+
+    static void zapp_build_menu_items_win(HMENU parent, const char* itemsJson);
+
+    // Parse a JSON array of menu items and build HMENU
+    static void zapp_add_menu_item_win(HMENU menu, const char* itemJson) {
+        if (!itemJson) return;
+        char* role = zapp_json_get_string(itemJson, "role");
+        if (role && role[0]) {
+            // Item-level roles: native edit commands
+            if (strcmp(role, "copy") == 0) {
+                AppendMenuW(menu, MF_STRING, IDM_EDIT_COPY, L"Copy");
+                free(role); return;
+            } else if (strcmp(role, "cut") == 0) {
+                AppendMenuW(menu, MF_STRING, IDM_EDIT_CUT, L"Cut");
+                free(role); return;
+            } else if (strcmp(role, "paste") == 0) {
+                AppendMenuW(menu, MF_STRING, IDM_EDIT_PASTE, L"Paste");
+                free(role); return;
+            } else if (strcmp(role, "selectAll") == 0) {
+                AppendMenuW(menu, MF_STRING, IDM_EDIT_SELECTALL, L"Select All");
+                free(role); return;
+            } else if (strcmp(role, "undo") == 0) {
+                AppendMenuW(menu, MF_STRING, IDM_EDIT_UNDO, L"Undo");
+                free(role); return;
+            } else if (strcmp(role, "redo") == 0) {
+                AppendMenuW(menu, MF_STRING, IDM_EDIT_REDO, L"Redo");
+                free(role); return;
+            }
+            // Menu-level roles: create submenu
+            char* label = zapp_json_get_string(itemJson, "label");
+            HMENU sub = CreatePopupMenu();
+            zapp_build_role_menu_win(sub, role);
+            wchar_t wLabel[128] = {0};
+            if (label && label[0]) {
+                MultiByteToWideChar(CP_UTF8, 0, label, -1, wLabel, 128);
+            } else {
+                if (strcmp(role, "editMenu") == 0) wcscpy(wLabel, L"Edit");
+                else if (strcmp(role, "windowMenu") == 0) wcscpy(wLabel, L"Window");
+                else MultiByteToWideChar(CP_UTF8, 0, role, -1, wLabel, 128);
+            }
+            AppendMenuW(menu, MF_POPUP, (UINT_PTR)sub, wLabel);
+            if (label) free(label);
+            free(role);
+            return;
+        }
+        if (role) free(role);
+
+        char* type = zapp_json_get_string(itemJson, "type");
+        if (type && strcmp(type, "separator") == 0) {
+            AppendMenuW(menu, MF_SEPARATOR, 0, NULL);
+            free(type);
+            return;
+        }
+        if (type) free(type);
+
+        char* label = zapp_json_get_string(itemJson, "label");
+        if (!label || !label[0]) { if (label) free(label); return; }
+
+        // Check for submenu (look for "submenu":[)
+        char* subRaw = NULL;
+        {
+            const char* subKey = "\"submenu\":[";
+            const char* subStart = strstr(itemJson, subKey);
+            if (subStart) {
+                subStart += strlen("\"submenu\":");
+                // Find matching ]
+                int depth = 0;
+                const char* p = subStart;
+                const char* end = NULL;
+                while (*p) {
+                    if (*p == '[') depth++;
+                    else if (*p == ']') { depth--; if (depth == 0) { end = p + 1; break; } }
+                    p++;
+                }
+                if (end) {
+                    size_t len = (size_t)(end - subStart);
+                    subRaw = (char*)malloc(len + 1);
+                    memcpy(subRaw, subStart, len);
+                    subRaw[len] = '\0';
+                }
+            }
+        }
+
+        if (subRaw) {
+            HMENU sub = CreatePopupMenu();
+            zapp_build_menu_items_win(sub, subRaw);
+            free(subRaw);
+            // Build label with accelerator hint
+            char* accel = zapp_json_get_string(itemJson, "accelerator");
+            wchar_t wLabel[256] = {0};
+            if (accel && accel[0]) {
+                char combined[256];
+                snprintf(combined, sizeof(combined), "%s\t%s", label, accel);
+                MultiByteToWideChar(CP_UTF8, 0, combined, -1, wLabel, 256);
+                free(accel);
+            } else {
+                MultiByteToWideChar(CP_UTF8, 0, label, -1, wLabel, 256);
+            }
+            AppendMenuW(menu, MF_POPUP, (UINT_PTR)sub, wLabel);
+            free(label);
+            return;
+        }
+
+        // Regular item
+        char* itemId = zapp_json_get_string(itemJson, "id");
+        char* accel = zapp_json_get_string(itemJson, "accelerator");
+        int cmd = 0;
+        if (itemId && itemId[0]) {
+            cmd = zapp_menu_register_id(itemId);
+        }
+
+        wchar_t wLabel[256] = {0};
+        if (accel && accel[0]) {
+            char combined[256];
+            snprintf(combined, sizeof(combined), "%s\t%s", label, accel);
+            MultiByteToWideChar(CP_UTF8, 0, combined, -1, wLabel, 256);
+        } else {
+            MultiByteToWideChar(CP_UTF8, 0, label, -1, wLabel, 256);
+        }
+
+        UINT flags = MF_STRING;
+        extern int zapp_json_get_bool(const char* json, const char* key, int default_val);
+        if (!zapp_json_get_bool(itemJson, "enabled", 1)) flags |= MF_GRAYED;
+        if (zapp_json_get_bool(itemJson, "checked", 0)) flags |= MF_CHECKED;
+
+        AppendMenuW(menu, flags, cmd, wLabel);
+
+        if (itemId) free(itemId);
+        if (accel) free(accel);
+        free(label);
+    }
+
+    // Parse "[{...},{...}]" array of menu items
+    static void zapp_build_menu_items_win(HMENU parent, const char* arrJson) {
+        if (!arrJson || arrJson[0] != '[') return;
+        const char* p = arrJson + 1;
+        while (*p) {
+            while (*p == ' ' || *p == '\n' || *p == '\r' || *p == '\t' || *p == ',') p++;
+            if (*p == ']' || *p == '\0') break;
+            if (*p == '{') {
+                int depth = 0;
+                const char* start = p;
+                while (*p) {
+                    if (*p == '{') depth++;
+                    else if (*p == '}') { depth--; if (depth == 0) { p++; break; } }
+                    p++;
+                }
+                size_t len = (size_t)(p - start);
+                char* item = (char*)malloc(len + 1);
+                memcpy(item, start, len);
+                item[len] = '\0';
+                zapp_add_menu_item_win(parent, item);
+                free(item);
+            } else {
+                p++;
+            }
+        }
+    }
+
+    void app_set_menu(App* app, char* payload) {
+        (void)app;
+        if (payload == NULL) return;
+        // Reset custom ID registry
+        zapp_menu_custom_count = 0;
+        memset(zapp_menu_id_map, 0, sizeof(zapp_menu_id_map));
+
+        // Find "items":[ in the payload
+        const char* itemsKey = "\"items\":[";
+        const char* itemsStart = strstr((const char*)payload, itemsKey);
+        if (!itemsStart) return;
+        itemsStart += strlen("\"items\":");
+
+        // Find the matching ]
+        int depth = 0;
+        const char* p = itemsStart;
+        const char* end = NULL;
+        while (*p) {
+            if (*p == '[') depth++;
+            else if (*p == ']') { depth--; if (depth == 0) { end = p + 1; break; } }
+            p++;
+        }
+        if (!end) return;
+
+        size_t len = (size_t)(end - itemsStart);
+        char* arrJson = (char*)malloc(len + 1);
+        memcpy(arrJson, itemsStart, len);
+        arrJson[len] = '\0';
+
+        HMENU menuBar = CreateMenu();
+        zapp_build_menu_items_win(menuBar, arrJson);
+        free(arrJson);
+
+        // Apply to all windows
+        extern const wchar_t* ZAPP_WINDOW_CLASS;
+        HWND hwnd = NULL;
+        while ((hwnd = FindWindowExW(NULL, hwnd, ZAPP_WINDOW_CLASS, NULL)) != NULL) {
+            SetMenu(hwnd, menuBar);
+            DrawMenuBar(hwnd);
+        }
+        if (zapp_default_menu) {
+            // Don't destroy old menu — windows might reference it
+        }
+        zapp_default_menu = menuBar;
+    }
+
     // --- Sync bridge (moved from app.zc) ---
     #define ZAPP_MAX_SYNC_WAITS 256
     #define ZAPP_SYNC_TIMER_MAP_SIZE 512

package/native/src/platform/windows/webview_bootstrap.zc

@@ -1,9 +1,9 @@
 // AUTO-GENERATED FILE. DO NOT EDIT.
 // Source of truth: `packages/bootstrap/src/webview_windows.ts`
-// Generated: `2026-03-22T07:58:05.470Z`
+// Generated: `2026-03-23T03:23:37.948Z`
 
 raw {
     const char* zapp_windows_webview_bootstrap_script(void) {
-        return "(()=>{var{defineProperty:S,getOwnPropertyNames:s,getOwnPropertyDescriptor:o}=Object,d=Object.prototype.hasOwnProperty;var k=new WeakMap,n=(H)=>{var Q=k.get(H),$;if(Q)return Q;if(Q=S({},\"__esModule\",{value:!0}),H&&typeof H===\"object\"||typeof H===\"function\")s(H).map((K)=>!d.call(Q,K)&&S(Q,K,{get:()=>H[K],enumerable:!($=o(H,K))||$.enumerable}));return k.set(H,Q),Q};var GH={},j=globalThis,h=j.__zapp,L=h&&typeof h===\"object\"?h:{},v=()=>{if(j.__zapp===L)return;j.__zapp=L;try{Object.defineProperty(j,\"__zapp\",{value:L,enumerable:!0,configurable:!1,writable:!1})}catch{}},w=Symbol.for(\"zapp.bridge\"),R=Symbol.for(\"zapp.bootstrapConfig\"),I=Symbol.for(\"zapp.ownerId\"),f=j,P=(H)=>{let Q=f[w]?\?{},$=Object.assign({},Q,H);Object.defineProperty(f,w,{value:$,enumerable:!1,configurable:!0,writable:!1})},X={},Y={},_=0;P({_listeners:Y,_lastId:_});var D=X.__ctxId?\?=`ctx-${Date.now()}-${Math.random().toString(36).slice(2)}`,M=X.__pendingInvokes=X.__pendingInvokes?\?{},E=X.__pendingSyncWaits=X.__pendingSyncWaits?\?{},c=X.__invokeSeq?\?0,u=1,a=131072,y=f[R]==null?null:{name:f[R].name,applicationShouldTerminateAfterLastWindowClosed:f[R].applicationShouldTerminateAfterLastWindowClosed,webContentInspectable:f[R].webContentInspectable,maxWorkers:f[R].maxWorkers};try{delete f[R]}catch{}var l=(H)=>typeof H===\"string\"?H:JSON.stringify(H?\?{}),T=(H,Q,$)=>{v();let K=j.chrome?.webview;if(!K?.postMessage)return!1;return K.postMessage(`${H}\n${Q}\n${l($)}`),!0};X.invoke=(H,Q)=>new Promise(($,K)=>{let J=typeof H===\"string\"?H.trim():\"\";if(!J){K(Error(\"Service method must be a non-empty string.\"));return}if(l(Q).length>a){K(Error(\"Service payload exceeds max size.\"));return}let G=`${D}:inv-${++c}`;X.__invokeSeq=c;let x={v:u,id:G,method:J,args:Q,meta:{sourceCtxId:D}},F=setTimeout(()=>{delete M[G],K(Error(\"Service invocation timed out.\"))},15000);if(M[G]={resolve:$,reject:K,timeout:F},!T(\"invoke_rpc\",J,x))clearTimeout(F),delete M[G],K(Error(\"Native invoke transport unavailable.\"))});var b=()=>{let H=Error(\"Sync wait aborted.\");return H.name=\"AbortError\",H};X.syncWait=(H,Q=30000,$)=>new Promise((K,J)=>{let V=typeof H===\"string\"?H.trim():\"\";if(!V){J(Error(\"Sync key must be a non-empty string.\"));return}if($?.aborted){J(b());return}let G=`${D}:sync-${Date.now()}-${Math.random().toString(36).slice(2)}`,x=Q==null||Number.isNaN(Number(Q))?null:Math.floor(Number(Q)),F=x==null?null:Math.max(1,Math.min(300000,x)),z={id:G,key:V,timeoutMs:F,meta:{sourceCtxId:D}},Z=F==null?void 0:setTimeout(()=>{delete E[G],J(Error(\"Sync wait transport timed out.\"))},F+5000);if(E[G]={resolve:K,reject:J,timeout:Z},!T(\"sync\",\"wait\",z)){if(Z)clearTimeout(Z);delete E[G],J(Error(\"Native sync transport unavailable.\"));return}if($){let C=()=>{let A=E[G];if(!A)return;if(A.timeout)clearTimeout(A.timeout);delete E[G],T(\"sync\",\"cancel\",{id:G,meta:{sourceCtxId:D}}),J(b())};$.addEventListener(\"abort\",C,{once:!0})}});X.syncNotify=(H,Q=1)=>{let $=typeof H===\"string\"?H.trim():\"\";if(!$)return!1;let K=Math.max(1,Math.min(65535,Math.floor(Q)));return T(\"sync\",\"notify\",{key:$,count:K,meta:{sourceCtxId:D}})};X.syncCancel=(H)=>{let Q=typeof H===\"string\"?H.trim():\"\";if(!Q)return!1;return T(\"sync\",\"cancel\",{id:Q,meta:{sourceCtxId:D}})};X.emit=(H,Q)=>T(\"emit\",H,{__zapp_internal_meta:{sourceCtxId:D},data:Q});X.onEvent=(H,Q)=>{let $=++_;return(Y[H]?\?=[]).push({id:$,fn:Q}),$};X.offEvent=(H,Q)=>{let $=Y[H]?\?[];Y[H]=$.filter((K)=>K.id!==Q)};X.onceEvent=(H,Q)=>{let $=++_;return(Y[H]?\?=[]).push({id:$,fn:Q,once:!0}),$};X.offAllEvents=(H)=>{if(H)delete Y[H];else Object.keys(Y).forEach((Q)=>delete Y[Q])};var t=(H)=>{let Q=H.pathname.split(\".\").pop()?.toLowerCase();if(Q!==\"ts\"&&Q!==\"tsx\")return H.toString();let $=(Z)=>{let U=Z.startsWith(\"/\")?Z:`/${Z}`;if(H.protocol===\"zapp:\")return`zapp://app${U}`;return new URL(U,H).toString()},K=f[Symbol.for(\"zapp.workerManifest\")],J=H.pathname.split(\"/\").pop()?\?\"worker.ts\",V=`./${J}`;if(K){let Z=K[V]?\?K[J];if(typeof Z===\"string\"&&Z.length>0)return $(Z)}let G=H.pathname.split(\"/\"),z=`/zapp-workers/${(G[G.length-1]?\?\"worker.ts\").replace(/\\.[^.]+$/,\"\")}.mjs`;return $(z)},r=(H)=>H instanceof URL?t(H):H;if(!X.workerBridge){let H={},Q=0,$=f[I],K=typeof $===\"string\"&&$.length>0?$:`owner-${Date.now()}-${Math.random().toString(36).slice(2)}`;try{delete f[I]}catch{}let J=[],V=(F)=>{return H[F]?\?={message:[],error:[],close:[]},H[F]},G=(F,z,Z)=>{let U=(W)=>{queueMicrotask(W)};if(F===\"close\"){let W=H[z];U(()=>{if(W)for(let i of W.close)try{i(Z)}catch{}X.workerBridge?.terminateWorker(z)});return}let C=H[z];if(!C)return;let A=Z;if(typeof Z===\"string\")try{A=JSON.parse(Z)}catch{}let N=F===\"error\"?C.error:C.message;U(()=>{for(let W of N)try{W(A)}catch{}})};X.__workerBridgeDispatch=G,P({dispatchWorkerBridge:G}),X.workerBridge={createWorker(F,z){let Z=Boolean(z?.shared),U=`${K}:${D}:zw-${++Q}`;return V(U),J.push(U),T(\"worker\",\"create\",{id:U,scriptUrl:F,ownerId:K,shared:Z}),U},postToWorker(F,z){T(\"worker\",\"post\",{id:F,data:z,ownerId:K})},terminateWorker(F){T(\"worker\",\"terminate\",{id:F,ownerId:K}),J=J.filter((z)=>z!==F),delete H[F]},subscribe(F,z,Z,U){let C=V(F);if(z)C.message.push(z);if(Z)C.error.push(Z);if(U)C.close.push(U);return()=>{let A=H[F];if(!A)return;if(z)A.message=A.message.filter((N)=>N!==z);if(Z)A.error=A.error.filter((N)=>N!==Z);if(U)A.close=A.close.filter((N)=>N!==U)}}};let x=()=>{if(!J.length)return;T(\"worker\",\"reset_owner\",{ownerId:K}),J=[];for(let F of Object.keys(H))delete H[F]};P({resetOwnerWorkers:x,createWorker:X.workerBridge.createWorker.bind(X.workerBridge),postToWorker:X.workerBridge.postToWorker.bind(X.workerBridge),terminateWorker:X.workerBridge.terminateWorker.bind(X.workerBridge),subscribeWorker:X.workerBridge.subscribe.bind(X.workerBridge),resolveWorkerScriptURL:r}),j.addEventListener(\"beforeunload\",x),j.addEventListener(\"pagehide\",x)}var q={},e=0,HH=(H)=>new Promise((Q,$)=>{let K=`${D}:win-${++e}`,J=setTimeout(()=>{delete q[K],$(Error(\"Window creation timed out.\"))},15000);q[K]={resolve:Q,reject:$,timeout:J},T(\"window\",\"create\",{requestId:K,options:H})}),QH=(H,Q,$)=>{T(\"window\",Q,{windowId:H,...$})},$H=(H,Q)=>{T(\"app\",H,Q?\?{})},KH=(H)=>{let Q=H;if(typeof H===\"string\")try{Q=JSON.parse(H)}catch{return}if(!Q||typeof Q!==\"object\")return;let $=Q;if(typeof $.requestId!==\"string\")return;let K=q[$.requestId];if(!K)return;if(clearTimeout(K.timeout),delete q[$.requestId],$.ok===!1)K.reject(Error($.error?\?\"Window creation failed.\"));else K.resolve({id:$.id?\?\"\"})},p=(H,Q,$)=>{v();let K={windowId:H,timestamp:Date.now()};if($)try{let V=JSON.parse($);if(V.width||V.height)K.size={width:V.width?\?0,height:V.height?\?0};if(V.x!==void 0||V.y!==void 0)K.position={x:V.x?\?0,y:V.y?\?0}}catch{}let J=(V)=>{let G=Y[V];if(!G||G.length===0)return;let x=[];for(let F of G){try{F.fn(K)}catch{}if(!F.once)x.push(F)}if(x.length>0)Y[V]=x;else delete Y[V]};J(`__zapp_window:${H}:${Q}`),J(`window:${Q}`)};P({windowCreate:HH,windowAction:QH,appAction:$H,dispatchWindowResult:KH,dispatchWindowEvent:p,_emit:X.emit,_onEvent:X.onEvent,_onceEvent:X.onceEvent,_offEvent:X.offEvent,_offAllEvents:X.offAllEvents});L.invoke=X.invoke;L.emit=X.emit;L.on=(H,Q)=>{let $=X.onEvent?.(H,Q)?\?0;return()=>X.offEvent?.(H,$)};var XH=(H,Q)=>{v();let $=Q;if(typeof Q===\"string\"){let V=Q.trim();if(V.startsWith(\"{\")&&V.endsWith(\"}\")||V.startsWith(\"[\")&&V.endsWith(\"]\"))try{$=JSON.parse(Q)}catch{}}if($&&typeof $===\"object\"){let V=$;if(V.__zapp_internal_meta?.sourceCtxId===D)return;if(Object.prototype.hasOwnProperty.call(V,\"data\"))$=V.data}let K=Y[H]?\?[],J=[];for(let V of K){try{V.fn($)}catch{}if(!V.once)J.push(V)}if(J.length>0)Y[H]=J;else delete Y[H]},JH=(H)=>{let Q=H;if(typeof H===\"string\")try{Q=JSON.parse(H)}catch{return}if(!Q||typeof Q!==\"object\")return;let $=Q;if(typeof $.id!==\"string\"||$.id.length===0)return;let K=M[$.id];if(!K)return;if(clearTimeout(K.timeout),delete M[$.id],$.ok){K.resolve($.result);return}let J=$.error?.code?\?\"INTERNAL_ERROR\",V=$.error?.message?\?\"Service invocation failed\";K.reject(Error(`${J}: ${V}`))},VH=(H)=>{let Q=H;if(typeof H===\"string\")try{Q=JSON.parse(H)}catch{return}if(!Q||typeof Q!==\"object\")return;let $=Q;if(typeof $.id!==\"string\"||$.id.length===0)return;let K=E[$.id];if(!K)return;if(K.timeout)clearTimeout(K.timeout);if(delete E[$.id],!$.ok){K.reject(Error(\"Sync wait failed.\"));return}if($.status===\"cancelled\"){K.reject(b());return}K.resolve($.status===\"timed-out\"?\"timed-out\":\"notified\")},FH=(H)=>{let Q=H;if(typeof H===\"string\")try{Q=JSON.parse(H)}catch{return}if(!Q||typeof Q!==\"object\")return;let $=Q;if(typeof $.requestId!==\"string\")return;let K=`__zapp:dialog:${$.requestId}`,J=Y[K];if(J){for(let V of J)try{V.fn($)}catch{}delete Y[K]}};P({dispatchInvokeResult:JH,dispatchSyncResult:VH,dispatchDialogResult:FH,deliverEvent:XH,getConfig:()=>y==null?null:{...y},invoke:async(H)=>{let Q=H;if(!Q||typeof Q!==\"object\")throw Error(\"Invalid invoke request\");if(typeof Q.method!==\"string\")throw Error(\"Invalid service method\");let $=await X.invoke?.(Q.method,Q.args);return{v:u,id:Q.id,ok:!0,result:$}},getServiceBindings:()=>{let H=f[Symbol.for(\"zapp.bindingsManifest\")];if(typeof H!==\"string\")return null;return H},syncWait:async(H)=>{let Q=H;return X.syncWait?.(Q?.key?\?\"\",Q?.timeoutMs===void 0?30000:Q.timeoutMs,Q?.signal)?\?Promise.reject(Error(\"Sync unavailable\"))},syncNotify:(H)=>{let Q=H;return X.syncNotify?.(Q?.key?\?\"\",Q?.count?\?1)?\?!1},syncCancel:(H)=>{let Q=H;return X.syncCancel?.(Q?.id?\?\"\")?\?!1}});Object.defineProperties(L,{invoke:{value:X.invoke,enumerable:!0,configurable:!1,writable:!1},syncWait:{value:X.syncWait,enumerable:!0,configurable:!1,writable:!1},syncNotify:{value:X.syncNotify,enumerable:!0,configurable:!1,writable:!1},syncCancel:{value:X.syncCancel,enumerable:!0,configurable:!1,writable:!1},emit:{value:X.emit,enumerable:!0,configurable:!1,writable:!1},on:{value:L.on,enumerable:!0,configurable:!1,writable:!1}});Object.freeze(L);v();var O=Symbol.for(\"zapp.windowId\"),g=Symbol.for(\"zapp.windowReady\"),B=j,m=()=>{if(B[g])return;B[g]=!0;let H=B[O],Q=j.chrome?.webview;if(Q?.postMessage){let $=JSON.stringify({windowId:H?\?\"unknown\"});Q.postMessage(`window\nready\n${$}`)}p(H?\?\"unknown\",\"ready\")};if(typeof document<\"u\"){if(document.addEventListener(\"DOMContentLoaded\",m,{once:!0}),document.readyState!==\"loading\")m();document.addEventListener(\"mousedown\",(Q)=>{let $=Q.target;while($){if($.hasAttribute?.(\"data-zapp-drag-region\")){Q.preventDefault(),T(\"window\",\"startDrag\",{windowId:B[O]?\?\"unknown\"});return}let K=$.tagName;if(K===\"BUTTON\"||K===\"INPUT\"||K===\"SELECT\"||K===\"TEXTAREA\"||K===\"A\")return;$=$.parentElement}});let H=!1;document.addEventListener(\"mousemove\",(Q)=>{let $=Q.target,K=!1;while($){if($.hasAttribute?.(\"data-zapp-drag-region\")){K=!0;break}let J=$.tagName;if(J===\"BUTTON\"||J===\"INPUT\"||J===\"SELECT\"||J===\"TEXTAREA\"||J===\"A\")break;$=$.parentElement}if(K!==H)H=K,T(\"window\",\"setDragRegion\",{windowId:B[O]?\?\"unknown\",drag:K})})}})();\n";
+        return "(()=>{var{defineProperty:S,getOwnPropertyNames:o,getOwnPropertyDescriptor:s}=Object,d=Object.prototype.hasOwnProperty;var w=new WeakMap,n=(H)=>{var Q=w.get(H),$;if(Q)return Q;if(Q=S({},\"__esModule\",{value:!0}),H&&typeof H===\"object\"||typeof H===\"function\")o(H).map((K)=>!d.call(Q,K)&&S(Q,K,{get:()=>H[K],enumerable:!($=s(H,K))||$.enumerable}));return w.set(H,Q),Q};var GH={},L=globalThis,h=L.__zapp,j=h&&typeof h===\"object\"?h:{},P=()=>{if(L.__zapp===j)return;L.__zapp=j;try{Object.defineProperty(L,\"__zapp\",{value:j,enumerable:!0,configurable:!1,writable:!1})}catch{}},I=Symbol.for(\"zapp.bridge\"),R=Symbol.for(\"zapp.bootstrapConfig\"),c=Symbol.for(\"zapp.ownerId\"),D=L,q=(H)=>{let Q=D[I]?\?{},$=Object.assign({},Q,H);Object.defineProperty(D,I,{value:$,enumerable:!1,configurable:!0,writable:!1})},X={},Y={},k=0;q({_listeners:Y,_lastId:k});var f=X.__ctxId?\?=`ctx-${Date.now()}-${Math.random().toString(36).slice(2)}`,M=X.__pendingInvokes=X.__pendingInvokes?\?{},W=X.__pendingSyncWaits=X.__pendingSyncWaits?\?{},y=X.__invokeSeq?\?0,u=1,a=131072,b=D[R]==null?null:{name:D[R].name,applicationShouldTerminateAfterLastWindowClosed:D[R].applicationShouldTerminateAfterLastWindowClosed,webContentInspectable:D[R].webContentInspectable,maxWorkers:D[R].maxWorkers};try{delete D[R]}catch{}var l=(H)=>typeof H===\"string\"?H:JSON.stringify(H?\?{}),T=(H,Q,$)=>{P();let K=L.chrome?.webview;if(!K?.postMessage)return!1;return K.postMessage(`${H}\n${Q}\n${l($)}`),!0};X.invoke=(H,Q)=>new Promise(($,K)=>{let J=typeof H===\"string\"?H.trim():\"\";if(!J){K(Error(\"Service method must be a non-empty string.\"));return}if(l(Q).length>a){K(Error(\"Service payload exceeds max size.\"));return}let G=`${f}:inv-${++y}`;X.__invokeSeq=y;let x={v:u,id:G,method:J,args:Q,meta:{sourceCtxId:f}},F=setTimeout(()=>{delete M[G],K(Error(\"Service invocation timed out.\"))},15000);if(M[G]={resolve:$,reject:K,timeout:F},!T(\"invoke_rpc\",J,x))clearTimeout(F),delete M[G],K(Error(\"Native invoke transport unavailable.\"))});var O=()=>{let H=Error(\"Sync wait aborted.\");return H.name=\"AbortError\",H};X.syncWait=(H,Q=30000,$)=>new Promise((K,J)=>{let V=typeof H===\"string\"?H.trim():\"\";if(!V){J(Error(\"Sync key must be a non-empty string.\"));return}if($?.aborted){J(O());return}let G=`${f}:sync-${Date.now()}-${Math.random().toString(36).slice(2)}`,x=Q==null||Number.isNaN(Number(Q))?null:Math.floor(Number(Q)),F=x==null?null:Math.max(1,Math.min(300000,x)),z={id:G,key:V,timeoutMs:F,meta:{sourceCtxId:f}},Z=F==null?void 0:setTimeout(()=>{delete W[G],J(Error(\"Sync wait transport timed out.\"))},F+5000);if(W[G]={resolve:K,reject:J,timeout:Z},!T(\"sync\",\"wait\",z)){if(Z)clearTimeout(Z);delete W[G],J(Error(\"Native sync transport unavailable.\"));return}if($){let N=()=>{let A=W[G];if(!A)return;if(A.timeout)clearTimeout(A.timeout);delete W[G],T(\"sync\",\"cancel\",{id:G,meta:{sourceCtxId:f}}),J(O())};$.addEventListener(\"abort\",N,{once:!0})}});X.syncNotify=(H,Q=1)=>{let $=typeof H===\"string\"?H.trim():\"\";if(!$)return!1;let K=Math.max(1,Math.min(65535,Math.floor(Q)));return T(\"sync\",\"notify\",{key:$,count:K,meta:{sourceCtxId:f}})};X.syncCancel=(H)=>{let Q=typeof H===\"string\"?H.trim():\"\";if(!Q)return!1;return T(\"sync\",\"cancel\",{id:Q,meta:{sourceCtxId:f}})};X.emit=(H,Q)=>T(\"emit\",H,{__zapp_internal_meta:{sourceCtxId:f},data:Q});X.onEvent=(H,Q)=>{let $=++k;return(Y[H]?\?=[]).push({id:$,fn:Q}),$};X.offEvent=(H,Q)=>{let $=Y[H]?\?[];Y[H]=$.filter((K)=>K.id!==Q)};X.onceEvent=(H,Q)=>{let $=++k;return(Y[H]?\?=[]).push({id:$,fn:Q,once:!0}),$};X.offAllEvents=(H)=>{if(H)delete Y[H];else Object.keys(Y).forEach((Q)=>delete Y[Q])};var t=(H)=>{let Q=H.pathname.split(\".\").pop()?.toLowerCase();if(Q!==\"ts\"&&Q!==\"tsx\")return H.toString();let $=(Z)=>{let U=Z.startsWith(\"/\")?Z:`/${Z}`;if(H.protocol===\"zapp:\")return`zapp://app${U}`;return new URL(U,H).toString()},K=D[Symbol.for(\"zapp.workerManifest\")],J=H.pathname.split(\"/\").pop()?\?\"worker.ts\",V=`./${J}`;if(K){let Z=K[V]?\?K[J];if(typeof Z===\"string\"&&Z.length>0)return $(Z)}let G=H.pathname.split(\"/\"),z=`/zapp-workers/${(G[G.length-1]?\?\"worker.ts\").replace(/\\.[^.]+$/,\"\")}.mjs`;return $(z)},r=(H)=>H instanceof URL?t(H):H;if(!X.workerBridge){let H={},Q=0,$=D[c],K=typeof $===\"string\"&&$.length>0?$:`owner-${Date.now()}-${Math.random().toString(36).slice(2)}`;try{delete D[c]}catch{}let J=[],V=(F)=>{return H[F]?\?={message:[],error:[],close:[]},H[F]},G=(F,z,Z)=>{let U=(C)=>{queueMicrotask(C)};if(F===\"close\"){let C=H[z];U(()=>{if(C)for(let i of C.close)try{i(Z)}catch{}X.workerBridge?.terminateWorker(z)});return}let N=H[z];if(!N)return;let A=Z;if(typeof Z===\"string\")try{A=JSON.parse(Z)}catch{}let E=F===\"error\"?N.error:N.message;U(()=>{for(let C of E)try{C(A)}catch{}})};X.__workerBridgeDispatch=G,q({dispatchWorkerBridge:G}),X.workerBridge={createWorker(F,z){let Z=Boolean(z?.shared),U=`${K}:${f}:zw-${++Q}`;return V(U),J.push(U),T(\"worker\",\"create\",{id:U,scriptUrl:F,ownerId:K,shared:Z}),U},postToWorker(F,z){T(\"worker\",\"post\",{id:F,data:z,ownerId:K})},terminateWorker(F){T(\"worker\",\"terminate\",{id:F,ownerId:K}),J=J.filter((z)=>z!==F),delete H[F]},subscribe(F,z,Z,U){let N=V(F);if(z)N.message.push(z);if(Z)N.error.push(Z);if(U)N.close.push(U);return()=>{let A=H[F];if(!A)return;if(z)A.message=A.message.filter((E)=>E!==z);if(Z)A.error=A.error.filter((E)=>E!==Z);if(U)A.close=A.close.filter((E)=>E!==U)}}};let x=()=>{if(!J.length)return;T(\"worker\",\"reset_owner\",{ownerId:K}),J=[];for(let F of Object.keys(H))delete H[F]};q({resetOwnerWorkers:x,createWorker:X.workerBridge.createWorker.bind(X.workerBridge),postToWorker:X.workerBridge.postToWorker.bind(X.workerBridge),terminateWorker:X.workerBridge.terminateWorker.bind(X.workerBridge),subscribeWorker:X.workerBridge.subscribe.bind(X.workerBridge),resolveWorkerScriptURL:r}),L.addEventListener(\"beforeunload\",x),L.addEventListener(\"pagehide\",x)}var v={},e=0,HH=(H)=>new Promise((Q,$)=>{let K=`${f}:win-${++e}`,J=setTimeout(()=>{delete v[K],$(Error(\"Window creation timed out.\"))},15000);v[K]={resolve:Q,reject:$,timeout:J},T(\"window\",\"create\",{requestId:K,options:H})}),QH=(H,Q,$)=>{T(\"window\",Q,{windowId:H,...$})},$H=(H,Q)=>{T(\"app\",H,Q?\?{})},KH=(H)=>{let Q=H;if(typeof H===\"string\")try{Q=JSON.parse(H)}catch{return}if(!Q||typeof Q!==\"object\")return;let $=Q;if(typeof $.requestId!==\"string\")return;let K=v[$.requestId];if(!K)return;if(clearTimeout(K.timeout),delete v[$.requestId],$.ok===!1)K.reject(Error($.error?\?\"Window creation failed.\"));else K.resolve({id:$.id?\?\"\"})},p=(H,Q,$)=>{P();let K={windowId:H,timestamp:Date.now()};if($)try{let V=JSON.parse($);if(V.width||V.height)K.size={width:V.width?\?0,height:V.height?\?0};if(V.x!==void 0||V.y!==void 0)K.position={x:V.x?\?0,y:V.y?\?0}}catch{}let J=(V)=>{let G=Y[V];if(!G||G.length===0)return;let x=[];for(let F of G){try{F.fn(K)}catch{}if(!F.once)x.push(F)}if(x.length>0)Y[V]=x;else delete Y[V]};J(`__zapp_window:${H}:${Q}`),J(`window:${Q}`)};q({windowCreate:HH,windowAction:QH,appAction:$H,dispatchWindowResult:KH,dispatchWindowEvent:p,_emit:X.emit,_onEvent:X.onEvent,_onceEvent:X.onceEvent,_offEvent:X.offEvent,_offAllEvents:X.offAllEvents});j.invoke=X.invoke;j.emit=X.emit;j.on=(H,Q)=>{let $=X.onEvent?.(H,Q)?\?0;return()=>X.offEvent?.(H,$)};var XH=(H,Q)=>{P();let $=Q;if(typeof Q===\"string\"){let V=Q.trim();if(V.startsWith(\"{\")&&V.endsWith(\"}\")||V.startsWith(\"[\")&&V.endsWith(\"]\"))try{$=JSON.parse(Q)}catch{}}if($&&typeof $===\"object\"){let V=$;if(V.__zapp_internal_meta?.sourceCtxId===f)return;if(Object.prototype.hasOwnProperty.call(V,\"data\"))$=V.data}let K=Y[H]?\?[],J=[];for(let V of K){try{V.fn($)}catch{}if(!V.once)J.push(V)}if(J.length>0)Y[H]=J;else delete Y[H]},JH=(H)=>{let Q=H;if(typeof H===\"string\")try{Q=JSON.parse(H)}catch{return}if(!Q||typeof Q!==\"object\")return;let $=Q;if(typeof $.id!==\"string\"||$.id.length===0)return;let K=M[$.id];if(!K)return;if(clearTimeout(K.timeout),delete M[$.id],$.ok){K.resolve($.result);return}let J=$.error?.code?\?\"INTERNAL_ERROR\",V=$.error?.message?\?\"Service invocation failed\";K.reject(Error(`${J}: ${V}`))},VH=(H)=>{let Q=H;if(typeof H===\"string\")try{Q=JSON.parse(H)}catch{return}if(!Q||typeof Q!==\"object\")return;let $=Q;if(typeof $.id!==\"string\"||$.id.length===0)return;let K=W[$.id];if(!K)return;if(K.timeout)clearTimeout(K.timeout);if(delete W[$.id],!$.ok){K.reject(Error(\"Sync wait failed.\"));return}if($.status===\"cancelled\"){K.reject(O());return}K.resolve($.status===\"timed-out\"?\"timed-out\":\"notified\")},FH=(H)=>{let Q=H;if(typeof H===\"string\")try{Q=JSON.parse(H)}catch{return}if(!Q||typeof Q!==\"object\")return;let $=Q;if(typeof $.requestId!==\"string\")return;let K=`__zapp:dialog:${$.requestId}`,J=Y[K];if(J){for(let V of J)try{V.fn($)}catch{}delete Y[K]}};q({dispatchInvokeResult:JH,dispatchSyncResult:VH,dispatchDialogResult:FH,deliverEvent:XH,getConfig:()=>b==null?null:{...b},invoke:async(H)=>{let Q=H;if(!Q||typeof Q!==\"object\")throw Error(\"Invalid invoke request\");if(typeof Q.method!==\"string\")throw Error(\"Invalid service method\");let $=await X.invoke?.(Q.method,Q.args);return{v:u,id:Q.id,ok:!0,result:$}},getServiceBindings:()=>{let H=D[Symbol.for(\"zapp.bindingsManifest\")];if(typeof H!==\"string\")return null;return H},syncWait:async(H)=>{let Q=H;return X.syncWait?.(Q?.key?\?\"\",Q?.timeoutMs===void 0?30000:Q.timeoutMs,Q?.signal)?\?Promise.reject(Error(\"Sync unavailable\"))},syncNotify:(H)=>{let Q=H;return X.syncNotify?.(Q?.key?\?\"\",Q?.count?\?1)?\?!1},syncCancel:(H)=>{let Q=H;return X.syncCancel?.(Q?.id?\?\"\")?\?!1}});Object.defineProperties(j,{invoke:{value:X.invoke,enumerable:!0,configurable:!1,writable:!1},syncWait:{value:X.syncWait,enumerable:!0,configurable:!1,writable:!1},syncNotify:{value:X.syncNotify,enumerable:!0,configurable:!1,writable:!1},syncCancel:{value:X.syncCancel,enumerable:!0,configurable:!1,writable:!1},emit:{value:X.emit,enumerable:!0,configurable:!1,writable:!1},on:{value:j.on,enumerable:!0,configurable:!1,writable:!1}});Object.freeze(j);if(typeof document<\"u\"){let H=()=>{if(!document.head)return;let Q=document.createElement(\"meta\");Q.httpEquiv=\"Content-Security-Policy\";let K=b?.csp;Q.content=K||\"default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data: blob:;\",document.head.insertBefore(Q,document.head.firstChild)};if(document.head)H();else document.addEventListener(\"DOMContentLoaded\",H,{once:!0})}P();var _=Symbol.for(\"zapp.windowId\"),g=Symbol.for(\"zapp.windowReady\"),B=L,m=()=>{if(B[g])return;B[g]=!0;let H=B[_],Q=L.chrome?.webview;if(Q?.postMessage){let $=JSON.stringify({windowId:H?\?\"unknown\"});Q.postMessage(`window\nready\n${$}`)}p(H?\?\"unknown\",\"ready\")};if(typeof document<\"u\"){if(document.addEventListener(\"DOMContentLoaded\",m,{once:!0}),document.readyState!==\"loading\")m();document.addEventListener(\"mousedown\",(Q)=>{let $=Q.target;while($){if($.hasAttribute?.(\"data-zapp-drag-region\")){Q.preventDefault(),T(\"window\",\"startDrag\",{windowId:B[_]?\?\"unknown\"});return}let K=$.tagName;if(K===\"BUTTON\"||K===\"INPUT\"||K===\"SELECT\"||K===\"TEXTAREA\"||K===\"A\")return;$=$.parentElement}});let H=!1;document.addEventListener(\"mousemove\",(Q)=>{let $=Q.target,K=!1;while($){if($.hasAttribute?.(\"data-zapp-drag-region\")){K=!0;break}let J=$.tagName;if(J===\"BUTTON\"||J===\"INPUT\"||J===\"SELECT\"||J===\"TEXTAREA\"||J===\"A\")break;$=$.parentElement}if(K!==H)H=K,T(\"window\",\"setDragRegion\",{windowId:B[_]?\?\"unknown\",drag:K})})}})();\n";
     }
 }

package/native/src/platform/windows/window.zc

@@ -597,6 +597,37 @@ raw {
         HWND hwnd = zapp_win_lookup(windowId);
         if (!hwnd || !IsWindow(hwnd)) { free(windowId); return; }
 
+        if (strcmp(action, "showContextMenu") == 0) {
+            const char* itemsKey = "\"items\":[";
+            const char* itemsStart = strstr(json, itemsKey);
+            if (itemsStart) {
+                itemsStart += strlen("\"items\":");
+                int depth = 0;
+                const char* p2 = itemsStart;
+                const char* end2 = NULL;
+                while (*p2) {
+                    if (*p2 == '[') depth++;
+                    else if (*p2 == ']') { depth--; if (depth == 0) { end2 = p2 + 1; break; } }
+                    p2++;
+                }
+                if (end2) {
+                    size_t len = (size_t)(end2 - itemsStart);
+                    char* arrJson = (char*)malloc(len + 1);
+                    memcpy(arrJson, itemsStart, len);
+                    arrJson[len] = '\0';
+                    HMENU popup = CreatePopupMenu();
+                    zapp_build_menu_items_win(popup, arrJson);
+                    free(arrJson);
+                    POINT pt;
+                    GetCursorPos(&pt);
+                    TrackPopupMenu(popup, TPM_LEFTALIGN | TPM_TOPALIGN, pt.x, pt.y, 0, hwnd, NULL);
+                    DestroyMenu(popup);
+                }
+            }
+            free(windowId);
+            return;
+        }
+
         if (strcmp(action, "setCloseGuard") == 0) {
             extern int zapp_json_get_bool(const char* json, const char* key, int default_val);
             int guard = zapp_json_get_bool(json, "guard", 0);

package/native/vendor/quickjs-ng/README.md

@@ -0,0 +1,24 @@
+# ⚡️ QuickJS - A mighty JavaScript engine
+
+## Overview
+
+QuickJS is a small and embeddable JavaScript engine. It aims to support the latest
+[ECMAScript] specification.
+
+This project is a _fork_ of the [original QuickJS project] by Fabrice Bellard and Charlie Gordon, after it went dormant, with the intent of reigniting its development.
+
+## Getting started
+
+Head over to the [project website] for instructions on how to get started and more
+documentation.
+
+## Authors
+
+[@bnoordhuis], [@saghul], and many more [contributors].
+
+[ECMAScript]: https://tc39.es/ecma262/
+[original QuickJS project]: https://bellard.org/quickjs
+[@bnoordhuis]: https://github.com/bnoordhuis
+[@saghul]: https://github.com/saghul
+[contributors]: https://github.com/quickjs-ng/quickjs/graphs/contributors
+[project website]: https://quickjs-ng.github.io/quickjs/

package/native/vendor/quickjs-ng/docs/.nvmrc

@@ -0,0 +1 @@
+18

package/native/vendor/quickjs-ng/docs/babel.config.js

@@ -0,0 +1,3 @@
+module.exports = {
+  presets: [require.resolve('@docusaurus/core/lib/babel/preset')],
+};