buckyos 0.7.127 → 0.7.128

package/cli/modules/pikg.ts

@@ -23,6 +23,7 @@ import {
   rejectUnknown,
   stableJsonDigest,
   validatePermissions,
+  validateContentHandlers,
   validateServiceConfigTips,
   validateSnapshot,
   validateSubpackageName,
@@ -80,6 +81,7 @@ interface AppMeta {
   show_name: string
   categories: string[]
   permissions: unknown[]
+  content_handlers?: unknown[]
   selector_type: string
   service_config_tips: Record<string, unknown>
 }
@@ -710,6 +712,7 @@ async function buildCommand(
       pkg_list: pkgList,
       show_name: appMeta.show_name,
       ...(appMeta.permissions.length ? { permissions: appMeta.permissions } : {}),
+      ...(appMeta.content_handlers?.length ? { content_handlers: appMeta.content_handlers } : {}),
       selector_type: appMeta.selector_type,
       service_config_tips: appMeta.service_config_tips,
     }
@@ -885,6 +888,7 @@ function parseAppMeta(value: Record<string, unknown>): AppMeta {
       'show_name',
       'categories',
       'permissions',
+      'content_handlers',
       'selector_type',
       'service_config_tips',
     ],
@@ -929,6 +933,7 @@ function parseAppMeta(value: Record<string, unknown>): AppMeta {
     show_name: developmentString(value.show_name, 'app.json.show_name'),
     categories: categories as string[],
     permissions,
+    ...(value.content_handlers === undefined ? {} : { content_handlers: developmentValidation(() => validateContentHandlers(value.content_handlers, permissions)) }),
     selector_type: developmentString(value.selector_type, 'app.json.selector_type'),
     service_config_tips: serviceConfig,
   }

package/cli/modules/pikg_protocol.ts

@@ -828,6 +828,7 @@ export function validateAppDocShape(appDoc: Record<string, unknown>): void {
       'sdk_version',
       'req_capbilities',
       'permissions',
+      'content_handlers',
       'selector_type',
       'service_config_tips',
     ],
@@ -897,6 +898,9 @@ export function validateAppDocShape(appDoc: Record<string, unknown>): void {
     throw invalid('appdoc', 'APPDOC.permissions must be an array')
   }
   validatePermissions(appDoc.permissions ?? [], 'APPDOC.permissions')
+  if (appDoc.content_handlers !== undefined && !Array.isArray(appDoc.content_handlers)) {
+    throw invalid('appdoc', 'APPDOC.content_handlers must be an array')
+  }
   validateServiceConfigTips(appDoc.service_config_tips, 'APPDOC.service_config_tips')
   const pkgList = expectObject(appDoc.pkg_list, 'APPDOC.pkg_list')
   if (Object.keys(pkgList).length === 0) {
@@ -1130,3 +1134,39 @@ function invalid(stage: string, message: string, entry?: string): ToolError {
 export function stableJsonDigest(value: unknown): string {
   return sha256Bytes(new TextEncoder().encode(ndn.toCanonicalJsonString(value)))
 }
+
+export function validateContentHandlers(value: unknown, permissions: unknown[]): unknown[] {
+  if (!Array.isArray(value)) throw invalid('appdoc', 'content_handlers must be an array')
+  const ids = new Set<string>()
+  for (const raw of value) {
+    const h = expectObject(raw, 'content handler')
+    const id = expectNonEmptyString(h.handler_id, 'handler_id')
+    if (!/^[a-zA-Z0-9_-]+$/.test(id) || ids.has(id)) throw invalid('appdoc', 'invalid or duplicate handler_id')
+    ids.add(id)
+    if (!Number.isSafeInteger(h.version) || Number(h.version) < 1) throw invalid('appdoc', 'invalid handler version')
+    if (!Array.isArray(h.selectors) || !h.selectors.length) throw invalid('appdoc', 'missing selectors')
+    for (const rawSelector of h.selectors) {
+      const s = expectObject(rawSelector, 'selector')
+      if (!['mime', 'objType', 'schema', 'ext'].some(k => k in s)) throw invalid('appdoc', 'empty selector')
+      for (const key of ['mime', 'objType', 'schema']) {
+        const v = s[key]
+        if (v !== undefined && !(typeof v === 'string' && v.length) && !(Array.isArray(v) && v.length && v.every(i => typeof i === 'string' && i.length))) throw invalid('appdoc', 'invalid selector field')
+      }
+      if (s.maxSize !== undefined && (!Number.isSafeInteger(s.maxSize) || Number(s.maxSize) < 0)) throw invalid('appdoc', 'invalid maxSize')
+    }
+    const intents = expectObject(h.intents, 'intents')
+    if (Object.keys(intents).length !== 1 || !intents.open) throw invalid('appdoc', 'only open intent is supported')
+    const open = expectObject(intents.open, 'open')
+    const entry = expectObject(open.entry, 'entry')
+    const path = expectNonEmptyString(entry.path, 'entry.path')
+    let decoded: string
+    try { decoded = decodeURIComponent(path) } catch { throw invalid('appdoc', 'invalid entry path') }
+    if (entry.type !== 'web' || !decoded.startsWith('/') || decoded.startsWith('//') || decoded.includes('..') || decoded.includes('\\') || decoded.includes('://') || decoded.includes('#') || /[\r\n]/.test(decoded)) throw invalid('appdoc', 'unsafe Web entry')
+    if (open.priority !== undefined && (!Number.isSafeInteger(open.priority) || Number(open.priority) < 0 || Number(open.priority) > 80)) throw invalid('appdoc', 'priority must be 0..80')
+    if (open.window !== undefined && open.window !== 'new' && open.window !== 'reuse') throw invalid('appdoc', 'invalid window policy')
+    if (open.multiSource !== undefined && typeof open.multiSource !== 'boolean') throw invalid('appdoc', 'invalid multiSource')
+    if (open.modes !== undefined && (!Array.isArray(open.modes) || !open.modes.length || open.modes.some(m => m !== 'view' && m !== 'edit'))) throw invalid('appdoc', 'invalid modes')
+    if (h.permissions !== undefined && (!Array.isArray(h.permissions) || h.permissions.some(scope => !permissions.some(p => p && typeof p === 'object' && (p as Record<string, unknown>).scope_path === scope)))) throw invalid('appdoc', 'handler permissions exceed App permissions')
+  }
+  return value
+}

package/cli/runtime/host_deno.ts

@@ -7,6 +7,7 @@ import { fileURLToPath } from 'node:url'
 import { Readable, Writable } from 'node:stream'
 import { pipeline } from 'node:stream/promises'
 import { constants as zlibConstants, createGzip } from 'node:zlib'
+import { assertPathAccess } from './path_policy.ts'
 import {
   type DistributionPolicy,
   HostError,
@@ -392,28 +393,20 @@ export class DenoHost implements ToolHost {
     operation: 'read' | 'write',
     resolveLinks = true,
   ): Promise<void> {
-    const roots = operation === 'read' ? this.policy.readPaths : this.policy.writePaths
-    const absolute = denoPath.resolve(candidate)
-    if (!insideAny(absolute, roots)) {
-      throw new HostError(
-        'PermissionDenied',
-        `${operation} access is outside ${this.policy.name}: ${absolute}`,
-        absolute,
-      )
-    }
-    if (!resolveLinks) return
-    try {
-      const physical = await Deno.realPath(absolute)
-      if (!insideAny(physical, roots)) {
-        throw new HostError(
-          'PermissionDenied',
-          `${operation} access escapes ${this.policy.name}: ${absolute}`,
-          absolute,
-        )
-      }
-    } catch (error) {
-      if (!(error instanceof Deno.errors.NotFound)) throw error
-    }
+    await assertPathAccess(
+      this.policy,
+      denoPath,
+      async (path) => {
+        try {
+          return await Deno.realPath(path)
+        } catch (error) {
+          throw translateDenoError(error, path)
+        }
+      },
+      candidate,
+      operation,
+      resolveLinks,
+    )
   }
 }
 
@@ -486,19 +479,11 @@ function fileInfo(value: Deno.FileInfo): HostFileInfo {
   }
 }
 
-function insideAny(candidate: string, roots: readonly string[]): boolean {
-  return roots.some((root) => {
-    const relative = denoPath.relative(denoPath.resolve(root), candidate)
-    return relative === '' || relative !== '..' && !relative.startsWith(`..${denoPath.sep}`) &&
-        !denoPath.isAbsolute(relative)
-  })
-}
-
 function translateDenoError(error: unknown, path?: string): HostError {
   if (error instanceof HostError) return error
   const kind = error instanceof Deno.errors.NotFound
     ? 'NotFound'
-    : error instanceof Deno.errors.PermissionDenied
+    : error instanceof Deno.errors.PermissionDenied || error instanceof Deno.errors.NotCapable
     ? 'PermissionDenied'
     : error instanceof Deno.errors.AlreadyExists
     ? 'AlreadyExists'

package/cli/runtime/host_node.ts

@@ -24,6 +24,7 @@ import { createInterface } from 'node:readline/promises'
 import { Readable } from 'node:stream'
 import { pipeline } from 'node:stream/promises'
 import { constants as zlibConstants, createGzip } from 'node:zlib'
+import { assertPathAccess } from './path_policy.ts'
 import {
   type DistributionPolicy,
   HostError,
@@ -399,28 +400,20 @@ export class NodeHost implements ToolHost {
     operation: 'read' | 'write',
     resolveLinks = true,
   ): Promise<void> {
-    const roots = operation === 'read' ? this.policy.readPaths : this.policy.writePaths
-    const absolute = nodePath.resolve(candidate)
-    if (!insideAny(absolute, roots)) {
-      throw new HostError(
-        'PermissionDenied',
-        `${operation} access is outside ${this.policy.name}: ${absolute}`,
-        absolute,
-      )
-    }
-    if (!resolveLinks) return
-    try {
-      const physical = await realpath(absolute)
-      if (!insideAny(physical, roots)) {
-        throw new HostError(
-          'PermissionDenied',
-          `${operation} access escapes ${this.policy.name}: ${absolute}`,
-          absolute,
-        )
-      }
-    } catch (error) {
-      if ((error as { code?: string }).code !== 'ENOENT') throw error
-    }
+    await assertPathAccess(
+      this.policy,
+      nodePath,
+      async (path) => {
+        try {
+          return await realpath(path)
+        } catch (error) {
+          throw translateNodeError(error, path)
+        }
+      },
+      candidate,
+      operation,
+      resolveLinks,
+    )
   }
 }
 
@@ -508,14 +501,6 @@ function fileInfo(value: {
   }
 }
 
-function insideAny(candidate: string, roots: readonly string[]): boolean {
-  return roots.some((root) => {
-    const relative = nodePath.relative(nodePath.resolve(root), candidate)
-    return relative === '' || relative !== '..' && !relative.startsWith(`..${nodePath.sep}`) &&
-        !nodePath.isAbsolute(relative)
-  })
-}
-
 async function capture(command: string, args: string[]) {
   return await new Promise<{
     success: boolean

package/cli/runtime/path_policy.ts

@@ -0,0 +1,49 @@
+import { type DistributionPolicy, HostError, type HostPath, isHostError } from './host.ts'
+
+export async function assertPathAccess(
+  policy: DistributionPolicy,
+  path: HostPath,
+  realPath: (value: string) => Promise<string>,
+  candidate: string,
+  operation: 'read' | 'write',
+  resolveLinks = true,
+): Promise<void> {
+  const roots = operation === 'read' ? policy.readPaths : policy.writePaths
+  const absolute = path.resolve(candidate)
+  const physicalRoots: string[] = []
+  for (const root of roots) {
+    try {
+      physicalRoots.push(await realPath(path.resolve(root)))
+    } catch (error) {
+      if (!isHostError(error, 'NotFound') && !isHostError(error, 'PermissionDenied')) throw error
+    }
+  }
+  if (!insideAny(absolute, roots, path) && !insideAny(absolute, physicalRoots, path)) {
+    throw new HostError(
+      'PermissionDenied',
+      `${operation} access is outside ${policy.name}: ${absolute}`,
+      absolute,
+    )
+  }
+  if (!resolveLinks) return
+  try {
+    const physical = await realPath(absolute)
+    if (!insideAny(physical, physicalRoots, path)) {
+      throw new HostError(
+        'PermissionDenied',
+        `${operation} access escapes ${policy.name}: ${absolute}`,
+        absolute,
+      )
+    }
+  } catch (error) {
+    if (!isHostError(error, 'NotFound')) throw error
+  }
+}
+
+function insideAny(candidate: string, roots: readonly string[], path: HostPath): boolean {
+  return roots.some((root) => {
+    const relative = path.relative(path.resolve(root), candidate)
+    return relative === '' || relative !== '..' && !relative.startsWith(`..${path.sep}`) &&
+        !path.isAbsolute(relative)
+  })
+}

package/cli/version.ts

@@ -1,5 +1,5 @@
 // Generated by scripts/generate-cli-version.mjs. Do not edit.
-export const PACKAGE_VERSION = '0.7.127'
+export const PACKAGE_VERSION = '0.7.128'
 export const TOOL_VERSION = PACKAGE_VERSION
 export const SDK_VERSION = PACKAGE_VERSION
 export const PROTOCOL_VERSION = '1'

package/dist/app-frame.cjs

@@ -0,0 +1,2 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("./content.cjs"),t=(e,t,i={})=>({protocol:"buckyos.app-frame",version:1,type:e,payload:t,...i}),i=e=>{if(!e||"object"!=typeof e)return!1;const t=e;return"buckyos.app-frame"===t.protocol&&1===t.version&&"string"==typeof t.type&&!!t.payload&&"object"==typeof t.payload};exports.AppFrameClient=class{constructor(e){if(this.options=e,this.listener=e=>{this.receive(e)},this.origin=new URL(e.shellOrigin).origin,this.nonce=new URLSearchParams(window.location.hash.slice(1)).get("bfp"),window.addEventListener("message",this.listener),window.parent!==window&&this.nonce){const i=()=>window.parent.postMessage(t("frame.hello",{nonce:this.nonce,appCapabilities:[...e.onOpen?["open"]:[],...e.onBeforeClose?["beforeClose"]:[],...e.onBack?["back"]:[]]}),this.origin);i(),this.helloTimer=setInterval(i,250),this.helloDeadline=setTimeout((()=>clearInterval(this.helloTimer)),1500)}}async receive(s){var n,o,r,a,l,p,c,h,d,u,y,f,w,m;if(s.source!==window.parent||s.origin!==this.origin||!i(s.data))return;const g=s.data,v=g.payload;if("frame.init"===g.type){if(!this.nonce||v.nonce!==this.nonce||"string"!=typeof v.locale||!v.theme||"string"!=typeof v.windowId||v.launch&&!e.isOpenRequest(v.launch))return;return clearInterval(this.helloTimer),clearTimeout(this.helloDeadline),this.init=v,void(null==(o=(n=this.options).onInit)||o.call(n,this.init))}if(!this.init)return;const b=e=>window.parent.postMessage(t(g.type+"Result",e,{replyTo:g.id}),this.origin);try{"frame.open"===g.type&&e.isOpenRequest(v.request)&&b(await(null==(a=(r=this.options).onOpen)?void 0:a.call(r,v.request))??{accepted:!1}),"frame.beforeClose"===g.type&&b({decision:await(null==(p=(l=this.options).onBeforeClose)?void 0:p.call(l,v.reason))??"allow"}),"frame.back"===g.type&&b({handled:await(null==(h=(c=this.options).onBack)?void 0:h.call(c))??!1}),"frame.themeChanged"!==g.type||"dark"!==v.mode&&"light"!==v.mode||null==(u=(d=this.options).onTheme)||u.call(d,v),"frame.localeChanged"===g.type&&"string"==typeof v.locale&&(null==(f=(y=this.options).onLocale)||f.call(y,v.locale)),"frame.focusChanged"===g.type&&(null==(m=(w=this.options).onFocus)||m.call(w,!0===v.focused))}catch{"frame.open"===g.type&&b({accepted:!1,fallback:"preview"}),"frame.beforeClose"===g.type&&b({decision:"deny"})}}send(e,i){this.init&&window.parent.postMessage(t(e,i),this.origin)}setTitle(e,t=!1){this.send("window.setTitle",{title:e,dirty:t})}requestClose(){this.send("window.requestClose",{})}openContent(e,t="default",i=!1){this.send("content.open",{request:e,target:t,newWindow:i})}dispose(){clearInterval(this.helloTimer),clearTimeout(this.helloDeadline),window.removeEventListener("message",this.listener)}},exports.AppFrameHost=class{constructor(e){this.options=e,this.ready=!1,this.capabilities=[],this.pending=new Map,this.listener=e=>this.receive(e),this.opens=[],window.addEventListener("message",this.listener)}receive(t){var s,n,o,r,a,l,p,c;if(t.source!==this.options.target()||t.origin!==this.options.origin||!i(t.data))return;const h=t.data,d=h.payload;if("frame.hello"===h.type){if(d.nonce!==this.options.init.nonce||!Array.isArray(d.appCapabilities))return;return this.ready=!0,this.capabilities=d.appCapabilities.filter((e=>"string"==typeof e)),this.send("frame.init",this.options.init),void(null==(n=(s=this.options).onReady)||n.call(s))}if(this.ready)if(h.replyTo){const e=this.pending.get(h.replyTo);e&&h.type===e.type+"Result"&&(clearTimeout(e.timer),this.pending.delete(h.replyTo),e.resolve(h.payload))}else if("window.setTitle"===h.type&&"string"==typeof d.title&&(null==(r=(o=this.options).onTitle)||r.call(o,d.title.slice(0,256),!0===d.dirty)),"window.requestClose"===h.type&&(null==(l=(a=this.options).onRequestClose)||l.call(a)),"content.open"===h.type&&("default"===d.target||"preview"===d.target)){const t={...d.request,requestId:crypto.randomUUID()};if(!e.isOpenRequest(t))return;if(this.opens=this.opens.filter((e=>e>Date.now()-1e4)),this.opens.length>=5)return;this.opens.push(Date.now()),null==(c=(p=this.options).onContentOpen)||c.call(p,t,d.target,!0===d.newWindow)}}update(e){this.options.init={...this.options.init,...e}}send(e,i){var s;this.ready&&(null==(s=this.options.target())||s.postMessage(t(e,i),this.options.origin))}request(e,i,s=3e3){if(!this.ready)return Promise.reject(new Error("App frame is not ready"));const n=crypto.randomUUID();return new Promise(((o,r)=>{var a;const l=setTimeout((()=>{this.pending.delete(n),r(new Error("App frame timed out"))}),s);this.pending.set(n,{resolve:o,reject:r,timer:l,type:e}),null==(a=this.options.target())||a.postMessage(t(e,i,{id:n}),this.options.origin)}))}async open(e){return this.capabilities.includes("open")?await this.request("frame.open",{request:e}):{accepted:!1}}async beforeClose(e="user"){if(!this.ready||!this.capabilities.includes("beforeClose"))return"allow";const t=await this.request("frame.beforeClose",{reason:e});return"allow"===t.decision||"pending"===t.decision?t.decision:"deny"}async back(){return!!this.capabilities.includes("back")&&!0===(await this.request("frame.back",{})).handled}dispose(){window.removeEventListener("message",this.listener),this.pending.forEach((e=>{clearTimeout(e.timer),e.reject(new Error("App frame disposed"))})),this.pending.clear(),this.ready=!1}};
+//# sourceMappingURL=app-frame.cjs.map

package/dist/app-frame.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-frame.cjs","sources":["../src/app-frame.ts"],"sourcesContent":["import { isOpenRequest, type OpenRequest } from './content'\nexport interface AppFrameMessage<T extends string = string, P = unknown> {\n  protocol: 'buckyos.app-frame'; version: 1; type: T; id?: string; replyTo?: string; payload: P\n}\nexport interface FrameInit {\n  nonce: string\n  windowId: string\n  formFactor: 'desktop' | 'mobile'\n  theme: { mode: 'light' | 'dark'; accent?: string }\n  locale: string\n  launch?: OpenRequest\n  shellCapabilities: string[]\n}\nexport type CloseDecision = 'allow' | 'deny' | 'pending'\nconst envelope = (type: string, payload: unknown, extra: { id?: string; replyTo?: string } = {}): AppFrameMessage =>\n  ({ protocol: 'buckyos.app-frame', version: 1, type, payload, ...extra })\nconst isMessage = (value: unknown): value is AppFrameMessage => {\n  if (!value || typeof value !== 'object') return false\n  const v = value as AppFrameMessage\n  return v.protocol === 'buckyos.app-frame' && v.version === 1 && typeof v.type === 'string' && !!v.payload && typeof v.payload === 'object'\n}\nexport class AppFrameHost {\n  ready = false\n  capabilities: string[] = []\n  private pending = new Map<string, { resolve: (v: unknown) => void; reject: (e: Error) => void; timer: ReturnType<typeof setTimeout>; type: string }>()\n  private listener = (event: MessageEvent) => this.receive(event)\n  private opens: number[] = []\n  constructor(private options: {\n    target: () => Window | null; origin: string; init: FrameInit\n    onReady?: () => void\n    onTitle?: (title: string, dirty: boolean) => void\n    onRequestClose?: () => void\n    onContentOpen?: (request: OpenRequest, target: 'default' | 'preview', newWindow: boolean) => void\n  }) { window.addEventListener('message', this.listener) }\n  private receive(event: MessageEvent): void {\n    if (event.source !== this.options.target() || event.origin !== this.options.origin || !isMessage(event.data)) return\n    const m = event.data\n    const p = m.payload as Record<string, unknown>\n    if (m.type === 'frame.hello') {\n      if (p.nonce !== this.options.init.nonce || !Array.isArray(p.appCapabilities)) return\n      this.ready = true\n      this.capabilities = p.appCapabilities.filter((c): c is string => typeof c === 'string')\n      this.send('frame.init', this.options.init)\n      this.options.onReady?.()\n      return\n    }\n    if (!this.ready) return\n    if (m.replyTo) {\n      const pending = this.pending.get(m.replyTo)\n      if (pending && m.type === pending.type + 'Result') {\n        clearTimeout(pending.timer); this.pending.delete(m.replyTo); pending.resolve(m.payload)\n      }\n      return\n    }\n    if (m.type === 'window.setTitle' && typeof p.title === 'string') this.options.onTitle?.(p.title.slice(0, 256), p.dirty === true)\n    if (m.type === 'window.requestClose') this.options.onRequestClose?.()\n    if (m.type === 'content.open' && (p.target === 'default' || p.target === 'preview')) {\n      const request = { ...(p.request as object), requestId: crypto.randomUUID() }\n      if (!isOpenRequest(request)) return\n      this.opens = this.opens.filter(t => t > Date.now() - 10000)\n      if (this.opens.length >= 5) return\n      this.opens.push(Date.now())\n      this.options.onContentOpen?.(request, p.target, p.newWindow === true)\n    }\n  }\n  update(init: Partial<FrameInit>): void { this.options.init = { ...this.options.init, ...init } }\n  send(type: string, payload: unknown): void {\n    if (this.ready) this.options.target()?.postMessage(envelope(type, payload), this.options.origin)\n  }\n  request(type: string, payload: unknown, timeout = 3000): Promise<unknown> {\n    if (!this.ready) return Promise.reject(new Error('App frame is not ready'))\n    const id = crypto.randomUUID()\n    return new Promise((resolve, reject) => {\n      const timer = setTimeout(() => { this.pending.delete(id); reject(new Error('App frame timed out')) }, timeout)\n      this.pending.set(id, { resolve, reject, timer, type })\n      this.options.target()?.postMessage(envelope(type, payload, { id }), this.options.origin)\n    })\n  }\n  async open(request: OpenRequest): Promise<{ accepted: boolean; fallback?: 'preview' }> {\n    if (!this.capabilities.includes('open')) return { accepted: false }\n    return await this.request('frame.open', { request }) as { accepted: boolean; fallback?: 'preview' }\n  }\n  async beforeClose(reason: 'user' | 'logout' | 'shell' = 'user'): Promise<CloseDecision> {\n    if (!this.ready || !this.capabilities.includes('beforeClose')) return 'allow'\n    const r = await this.request('frame.beforeClose', { reason }) as { decision?: CloseDecision }\n    return r.decision === 'allow' || r.decision === 'pending' ? r.decision : 'deny'\n  }\n  async back(): Promise<boolean> {\n    if (!this.capabilities.includes('back')) return false\n    return (await this.request('frame.back', {}) as { handled?: boolean }).handled === true\n  }\n  dispose(): void {\n    window.removeEventListener('message', this.listener)\n    this.pending.forEach(p => { clearTimeout(p.timer); p.reject(new Error('App frame disposed')) })\n    this.pending.clear(); this.ready = false\n  }\n}\nexport class AppFrameClient {\n  init?: FrameInit\n  private helloTimer?: ReturnType<typeof setInterval>\n  private helloDeadline?: ReturnType<typeof setTimeout>\n  private readonly nonce: string | null\n  private readonly origin: string\n  private readonly listener = (event: MessageEvent) => { void this.receive(event) }\n  constructor(private options: {\n    shellOrigin: string\n    onInit?: (init: FrameInit) => void\n    onOpen?: (request: OpenRequest) => Promise<{ accepted: boolean; fallback?: 'preview' }> | { accepted: boolean; fallback?: 'preview' }\n    onBeforeClose?: (reason: 'user' | 'logout' | 'shell') => Promise<CloseDecision> | CloseDecision\n    onBack?: () => Promise<boolean> | boolean\n    onTheme?: (theme: FrameInit['theme']) => void\n    onLocale?: (locale: string) => void\n    onFocus?: (focused: boolean) => void\n  }) {\n    this.origin = new URL(options.shellOrigin).origin\n    this.nonce = new URLSearchParams(window.location.hash.slice(1)).get('bfp')\n    window.addEventListener('message', this.listener)\n    if (window.parent !== window && this.nonce) {\n      const hello = () => window.parent.postMessage(envelope('frame.hello', { nonce: this.nonce, appCapabilities: [\n        ...options.onOpen ? ['open'] : [], ...options.onBeforeClose ? ['beforeClose'] : [], ...options.onBack ? ['back'] : [],\n      ] }), this.origin)\n      hello()\n      this.helloTimer = setInterval(hello, 250)\n      this.helloDeadline = setTimeout(() => clearInterval(this.helloTimer), 1500)\n    }\n  }\n  private async receive(event: MessageEvent): Promise<void> {\n    if (event.source !== window.parent || event.origin !== this.origin || !isMessage(event.data)) return\n    const m = event.data\n    const p = m.payload as Record<string, unknown>\n    if (m.type === 'frame.init') {\n      if (!this.nonce || p.nonce !== this.nonce || typeof p.locale !== 'string' || !p.theme || typeof p.windowId !== 'string' || p.launch && !isOpenRequest(p.launch)) return\n      clearInterval(this.helloTimer); clearTimeout(this.helloDeadline)\n      this.init = p as unknown as FrameInit\n      this.options.onInit?.(this.init)\n      return\n    }\n    if (!this.init) return\n    const reply = (payload: unknown) => window.parent.postMessage(envelope(m.type + 'Result', payload, { replyTo: m.id }), this.origin)\n    try {\n      if (m.type === 'frame.open' && isOpenRequest(p.request)) reply(await this.options.onOpen?.(p.request) ?? { accepted: false })\n      if (m.type === 'frame.beforeClose') reply({ decision: await this.options.onBeforeClose?.(p.reason as 'user') ?? 'allow' })\n      if (m.type === 'frame.back') reply({ handled: await this.options.onBack?.() ?? false })\n      if (m.type === 'frame.themeChanged' && (p.mode === 'dark' || p.mode === 'light')) this.options.onTheme?.(p as FrameInit['theme'])\n      if (m.type === 'frame.localeChanged' && typeof p.locale === 'string') this.options.onLocale?.(p.locale)\n      if (m.type === 'frame.focusChanged') this.options.onFocus?.(p.focused === true)\n    } catch {\n      if (m.type === 'frame.open') reply({ accepted: false, fallback: 'preview' })\n      if (m.type === 'frame.beforeClose') reply({ decision: 'deny' })\n    }\n  }\n  send(type: string, payload: unknown): void {\n    if (this.init) window.parent.postMessage(envelope(type, payload), this.origin)\n  }\n  setTitle(title: string, dirty = false): void { this.send('window.setTitle', { title, dirty }) }\n  requestClose(): void { this.send('window.requestClose', {}) }\n  openContent(request: Omit<OpenRequest, 'requestId'>, target: 'default' | 'preview' = 'default', newWindow = false): void {\n    this.send('content.open', { request, target, newWindow })\n  }\n  dispose(): void { clearInterval(this.helloTimer); clearTimeout(this.helloDeadline); window.removeEventListener('message', this.listener) }\n}\n"],"names":["envelope","type","payload","extra","protocol","version","isMessage","value","v","constructor","options","this","listener","event","receive","origin","URL","shellOrigin","nonce","URLSearchParams","window","location","hash","slice","get","addEventListener","parent","hello","postMessage","appCapabilities","onOpen","onBeforeClose","onBack","helloTimer","setInterval","helloDeadline","setTimeout","clearInterval","source","data","m","p","locale","theme","windowId","launch","isOpenRequest","clearTimeout","init","_b","_a","onInit","call","reply","replyTo","id","request","_d","_c","accepted","decision","_f","_e","reason","handled","_h","_g","mode","_j","_i","onTheme","_l","_k","onLocale","_n","_m","onFocus","focused","fallback","send","setTitle","title","dirty","requestClose","openContent","target","newWindow","dispose","removeEventListener","ready","capabilities","pending","Map","opens","Array","isArray","filter","c","onReady","timer","delete","resolve","onTitle","onRequestClose","requestId","crypto","randomUUID","t","Date","now","length","push","onContentOpen","update","timeout","Promise","reject","Error","set","open","includes","beforeClose","r","back","forEach","clear"],"mappings":"iHAcMA,EAAW,CAACC,EAAcC,EAAkBC,EAA2C,CAAA,KAAA,CACxFC,SAAU,oBAAqBC,QAAS,EAAGJ,OAAMC,aAAYC,IAC5DG,EAAaC,IACb,IAACA,GAA0B,iBAAVA,EAA2B,OAAA,EAChD,MAAMC,EAAID,EACV,MAAsB,sBAAfC,EAAEJ,UAAkD,IAAdI,EAAEH,SAAmC,iBAAXG,EAAEP,QAAuBO,EAAEN,SAAgC,iBAAdM,EAAEN,OAAY,yBA8E7H,MAOL,WAAAO,CAAoBC,GAalB,GAbkBC,KAAAD,QAAAA,EADHC,KAAAC,SAAYC,IAA+BF,KAAKG,QAAQD,EAAK,EAW5EF,KAAKI,OAAS,IAAIC,IAAIN,EAAQO,aAAaF,OACtCJ,KAAAO,MAAQ,IAAIC,gBAAgBC,OAAOC,SAASC,KAAKC,MAAM,IAAIC,IAAI,OAC7DJ,OAAAK,iBAAiB,UAAWd,KAAKC,UACpCQ,OAAOM,SAAWN,QAAUT,KAAKO,MAAO,CACpC,MAAAS,EAAQ,IAAMP,OAAOM,OAAOE,YAAY5B,EAAS,cAAe,CAAEkB,MAAOP,KAAKO,MAAOW,gBAAiB,IACvGnB,EAAQoB,OAAS,CAAC,QAAU,MAAOpB,EAAQqB,cAAgB,CAAC,eAAiB,MAAOrB,EAAQsB,OAAS,CAAC,QAAU,MAC/GrB,KAAKI,YAENJ,KAAAsB,WAAaC,YAAYP,EAAO,KACrChB,KAAKwB,cAAgBC,YAAW,IAAMC,cAAc1B,KAAKsB,aAAa,KACxE,CACF,CACA,aAAcnB,CAAQD,mCAChB,GAAAA,EAAMyB,SAAWlB,OAAOM,QAAUb,EAAME,SAAWJ,KAAKI,SAAWT,EAAUO,EAAM0B,MAAO,OAC9F,MAAMC,EAAI3B,EAAM0B,KACVE,EAAID,EAAEtC,QACR,GAAW,eAAXsC,EAAEvC,KAAuB,CACvB,IAACU,KAAKO,OAASuB,EAAEvB,QAAUP,KAAKO,OAA6B,iBAAbuB,EAAEC,SAAwBD,EAAEE,OAA+B,iBAAfF,EAAEG,UAAyBH,EAAEI,SAAWC,EAAAA,cAAcL,EAAEI,QAAS,OAIjK,OAHAR,cAAc1B,KAAKsB,YAAac,aAAapC,KAAKwB,eAClDxB,KAAKqC,KAAOP,OACP,OAAAQ,GAAAC,EAAAvC,KAAAD,SAAQyC,SAARF,EAAAG,KAAAF,EAAiBvC,KAAKqC,MAE7B,CACA,IAAKrC,KAAKqC,KAAM,OAChB,MAAMK,EAASnD,GAAqBkB,OAAOM,OAAOE,YAAY5B,EAASwC,EAAEvC,KAAO,SAAUC,EAAS,CAAEoD,QAASd,EAAEe,KAAO5C,KAAKI,QACxH,IACa,eAAXyB,EAAEvC,MAAyB6C,EAAAA,cAAcL,EAAEe,UAAgBH,QAAM,OAAAI,GAAKC,EAAA/C,KAAAD,SAAQoB,aAAb,EAAA2B,EAAAL,KAAAM,EAAsBjB,EAAEe,WAAY,CAAEG,UAAU,IACtG,sBAAXnB,EAAEvC,MAAoCoD,EAAA,CAAEO,eAAgB,OAAAC,GAAKC,EAAAnD,KAAAD,SAAQqB,oBAAgB,EAAA8B,EAAAT,KAAAU,EAAArB,EAAEsB,UAAqB,UACjG,eAAXvB,EAAEvC,MAA6BoD,EAAA,CAAEW,cAAe,OAAAC,GAAAC,EAAAvD,KAAKD,SAAQsB,aAAb,EAAAiC,EAAAb,KAAAc,MAA2B,IAChE,uBAAX1B,EAAEvC,MAA6C,SAAXwC,EAAE0B,MAA8B,UAAX1B,EAAE0B,MAAwB,OAAAC,GAAAC,EAAA1D,KAAAD,SAAQ4D,UAAUF,EAAAhB,KAAAiB,EAAA5B,GAC1F,wBAAXD,EAAEvC,MAAsD,iBAAbwC,EAAEC,SAA0B,OAAA6B,GAAAC,EAAA7D,KAAAD,SAAQ+D,WAARF,EAAAnB,KAAAoB,EAAmB/B,EAAEC,SACjF,uBAAXF,EAAEvC,OAA+B,OAAAyE,GAAAC,EAAAhE,KAAKD,SAAQkE,UAAUF,EAAAtB,KAAAuB,GAAc,IAAdlC,EAAEoC,SAAgB,CACxE,MACS,eAAXrC,EAAEvC,MAAuBoD,EAAM,CAAEM,UAAU,EAAOmB,SAAU,YACjD,sBAAXtC,EAAEvC,MAAoCoD,EAAA,CAAEO,SAAU,QACxD,CACF,CACA,IAAAmB,CAAK9E,EAAcC,GACbS,KAAKqC,MAAM5B,OAAOM,OAAOE,YAAY5B,EAASC,EAAMC,GAAUS,KAAKI,OACzE,CACA,QAAAiE,CAASC,EAAeC,GAAQ,GAAevE,KAAKoE,KAAK,kBAAmB,CAAEE,QAAOC,SAAS,CAC9F,YAAAC,GAA4BxE,KAAAoE,KAAK,sBAAuB,CAAA,EAAI,CAC5D,WAAAK,CAAY5B,EAAyC6B,EAAgC,UAAWC,GAAY,GAC1G3E,KAAKoE,KAAK,eAAgB,CAAEvB,UAAS6B,SAAQC,aAC/C,CACA,OAAAC,GAAkBlD,cAAc1B,KAAKsB,YAAac,aAAapC,KAAKwB,eAAuBf,OAAAoE,oBAAoB,UAAW7E,KAAKC,SAAU,wBA1IpI,MAML,WAAAH,CAAoBC,GAAAC,KAAAD,QAAAA,EALZC,KAAA8E,OAAA,EACR9E,KAAA+E,aAAyB,GACjB/E,KAAAgF,YAAcC,IACtBjF,KAAQC,SAAYC,GAAwBF,KAAKG,QAAQD,GACzDF,KAAQkF,MAAkB,GAOdzE,OAAAK,iBAAiB,UAAWd,KAAKC,SAAU,CAC/C,OAAAE,CAAQD,uBACd,GAAIA,EAAMyB,SAAW3B,KAAKD,QAAQ2E,UAAYxE,EAAME,SAAWJ,KAAKD,QAAQK,SAAWT,EAAUO,EAAM0B,MAAO,OAC9G,MAAMC,EAAI3B,EAAM0B,KACVE,EAAID,EAAEtC,QACR,GAAW,gBAAXsC,EAAEvC,KAAwB,CACxB,GAAAwC,EAAEvB,QAAUP,KAAKD,QAAQsC,KAAK9B,QAAU4E,MAAMC,QAAQtD,EAAEZ,iBAAkB,OAK9E,OAJAlB,KAAK8E,OAAQ,EACR9E,KAAA+E,aAAejD,EAAEZ,gBAAgBmE,QAAQC,GAAgC,iBAANA,IACxEtF,KAAKoE,KAAK,aAAcpE,KAAKD,QAAQsC,WACrC,OAAAC,GAAAC,EAAAvC,KAAKD,SAAQwF,UAAbjD,EAAAG,KAAAF,GAEF,CACA,GAAKvC,KAAK8E,MACV,GAAIjD,EAAEc,QAAN,CACE,MAAMqC,EAAUhF,KAAKgF,QAAQnE,IAAIgB,EAAEc,SAC/BqC,GAAWnD,EAAEvC,OAAS0F,EAAQ1F,KAAO,WACvC8C,aAAa4C,EAAQQ,OAAaxF,KAAAgF,QAAQS,OAAO5D,EAAEc,SAAkBqC,EAAAU,QAAQ7D,EAAEtC,SAGnF,MAGI,GAFW,oBAAXsC,EAAEvC,MAAiD,iBAAZwC,EAAEwC,QAAyB,OAAAxB,GAAAC,EAAA/C,KAAAD,SAAQ4F,UAAR7C,EAAAL,KAAAM,EAAkBjB,EAAEwC,MAAM1D,MAAM,EAAG,MAAkB,IAAZkB,EAAEyC,QAClG,wBAAX1C,EAAEvC,OAAgC,OAAA4D,GAAAC,EAAAnD,KAAKD,SAAQ6F,iBAAb1C,EAAAT,KAAAU,IACvB,iBAAXtB,EAAEvC,OAAyC,YAAbwC,EAAE4C,QAAqC,YAAb5C,EAAE4C,QAAuB,CAC7E,MAAA7B,EAAU,IAAMf,EAAEe,QAAoBgD,UAAWC,OAAOC,cAC1D,IAAC5D,gBAAcU,GAAU,OAEzB,GADC7C,KAAAkF,MAAQlF,KAAKkF,MAAMG,WAAYW,EAAIC,KAAKC,MAAQ,MACjDlG,KAAKkF,MAAMiB,QAAU,EAAG,OAC5BnG,KAAKkF,MAAMkB,KAAKH,KAAKC,OACrB,OAAA5C,GAAAC,EAAAvD,KAAKD,SAAQsG,gBAAb/C,EAAAb,KAAAc,EAA6BV,EAASf,EAAE4C,QAAwB,IAAhB5C,EAAE6C,UACpD,CACF,CACA,MAAA2B,CAAOjE,GAAuCrC,KAAAD,QAAQsC,KAAO,IAAKrC,KAAKD,QAAQsC,QAASA,EAAO,CAC/F,IAAA+B,CAAK9E,EAAcC,SACbS,KAAK8E,QAAY,OAAAvC,EAAAvC,KAAAD,QAAQ2E,WAAUnC,EAAAtB,YAAY5B,EAASC,EAAMC,GAAUS,KAAKD,QAAQK,QAC3F,CACA,OAAAyC,CAAQvD,EAAcC,EAAkBgH,EAAU,KAChD,IAAKvG,KAAK8E,MAAO,OAAO0B,QAAQC,OAAO,IAAIC,MAAM,2BAC3C,MAAA9D,EAAKkD,OAAOC,aAClB,OAAO,IAAIS,SAAQ,CAACd,EAASe,WACrB,MAAAjB,EAAQ/D,YAAW,KAAazB,KAAAgF,QAAQS,OAAO7C,GAAY6D,EAAA,IAAIC,MAAM,uBAAsB,GAAKH,GACjGvG,KAAAgF,QAAQ2B,IAAI/D,EAAI,CAAE8C,UAASe,SAAQjB,QAAOlG,SAC/C,OAAAiD,EAAAvC,KAAKD,QAAQ2E,WAAbnC,EAAuBtB,YAAY5B,EAASC,EAAMC,EAAS,CAAEqD,OAAO5C,KAAKD,QAAQK,OAAA,GAErF,CACA,UAAMwG,CAAK/D,GACT,OAAK7C,KAAK+E,aAAa8B,SAAS,cACnB7G,KAAK6C,QAAQ,aAAc,CAAEA,YADM,CAAEG,UAAU,EAE9D,CACA,iBAAM8D,CAAY1D,EAAsC,QACtD,IAAKpD,KAAK8E,QAAU9E,KAAK+E,aAAa8B,SAAS,eAAuB,MAAA,QACtE,MAAME,QAAU/G,KAAK6C,QAAQ,oBAAqB,CAAEO,WACpD,MAAsB,UAAf2D,EAAE9D,UAAuC,YAAf8D,EAAE9D,SAAyB8D,EAAE9D,SAAW,MAC3E,CACA,UAAM+D,GACJ,QAAKhH,KAAK+E,aAAa8B,SAAS,UACmD,WAArE7G,KAAK6C,QAAQ,aAAc,KAA8BQ,OACzE,CACA,OAAAuB,GACSnE,OAAAoE,oBAAoB,UAAW7E,KAAKC,UACtCD,KAAAgF,QAAQiC,SAAanF,IAAEM,aAAaN,EAAE0D,OAAQ1D,EAAE2E,OAAO,IAAIC,MAAM,sBAAqB,IAC3F1G,KAAKgF,QAAQkC,QAASlH,KAAK8E,OAAQ,CACrC"}

package/dist/app-frame.d.ts

@@ -0,0 +1,82 @@
+import { type OpenRequest } from './content';
+export interface AppFrameMessage<T extends string = string, P = unknown> {
+    protocol: 'buckyos.app-frame';
+    version: 1;
+    type: T;
+    id?: string;
+    replyTo?: string;
+    payload: P;
+}
+export interface FrameInit {
+    nonce: string;
+    windowId: string;
+    formFactor: 'desktop' | 'mobile';
+    theme: {
+        mode: 'light' | 'dark';
+        accent?: string;
+    };
+    locale: string;
+    launch?: OpenRequest;
+    shellCapabilities: string[];
+}
+export type CloseDecision = 'allow' | 'deny' | 'pending';
+export declare class AppFrameHost {
+    private options;
+    ready: boolean;
+    capabilities: string[];
+    private pending;
+    private listener;
+    private opens;
+    constructor(options: {
+        target: () => Window | null;
+        origin: string;
+        init: FrameInit;
+        onReady?: () => void;
+        onTitle?: (title: string, dirty: boolean) => void;
+        onRequestClose?: () => void;
+        onContentOpen?: (request: OpenRequest, target: 'default' | 'preview', newWindow: boolean) => void;
+    });
+    private receive;
+    update(init: Partial<FrameInit>): void;
+    send(type: string, payload: unknown): void;
+    request(type: string, payload: unknown, timeout?: number): Promise<unknown>;
+    open(request: OpenRequest): Promise<{
+        accepted: boolean;
+        fallback?: 'preview';
+    }>;
+    beforeClose(reason?: 'user' | 'logout' | 'shell'): Promise<CloseDecision>;
+    back(): Promise<boolean>;
+    dispose(): void;
+}
+export declare class AppFrameClient {
+    private options;
+    init?: FrameInit;
+    private helloTimer?;
+    private helloDeadline?;
+    private readonly nonce;
+    private readonly origin;
+    private readonly listener;
+    constructor(options: {
+        shellOrigin: string;
+        onInit?: (init: FrameInit) => void;
+        onOpen?: (request: OpenRequest) => Promise<{
+            accepted: boolean;
+            fallback?: 'preview';
+        }> | {
+            accepted: boolean;
+            fallback?: 'preview';
+        };
+        onBeforeClose?: (reason: 'user' | 'logout' | 'shell') => Promise<CloseDecision> | CloseDecision;
+        onBack?: () => Promise<boolean> | boolean;
+        onTheme?: (theme: FrameInit['theme']) => void;
+        onLocale?: (locale: string) => void;
+        onFocus?: (focused: boolean) => void;
+    });
+    private receive;
+    send(type: string, payload: unknown): void;
+    setTitle(title: string, dirty?: boolean): void;
+    requestClose(): void;
+    openContent(request: Omit<OpenRequest, 'requestId'>, target?: 'default' | 'preview', newWindow?: boolean): void;
+    dispose(): void;
+}
+//# sourceMappingURL=app-frame.d.ts.map

package/dist/app-frame.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-frame.d.ts","sourceRoot":"","sources":["../src/app-frame.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,WAAW,EAAE,MAAM,WAAW,CAAA;AAC3D,MAAM,WAAW,eAAe,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,OAAO;IACrE,QAAQ,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,CAAC,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,CAAC,CAAA;CAC9F;AACD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAA;IAChC,KAAK,EAAE;QAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAClD,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,iBAAiB,EAAE,MAAM,EAAE,CAAA;CAC5B;AACD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;AAQxD,qBAAa,YAAY;IAMX,OAAO,CAAC,OAAO;IAL3B,KAAK,UAAQ;IACb,YAAY,EAAE,MAAM,EAAE,CAAK;IAC3B,OAAO,CAAC,OAAO,CAAuI;IACtJ,OAAO,CAAC,QAAQ,CAA+C;IAC/D,OAAO,CAAC,KAAK,CAAe;gBACR,OAAO,EAAE;QAC3B,MAAM,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;QAC5D,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;QACpB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;QACjD,cAAc,CAAC,EAAE,MAAM,IAAI,CAAA;QAC3B,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,GAAG,SAAS,EAAE,SAAS,EAAE,OAAO,KAAK,IAAI,CAAA;KAClG;IACD,OAAO,CAAC,OAAO;IA+Bf,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI;IACtC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAG1C,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,SAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IASnE,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,SAAS,CAAA;KAAE,CAAC;IAIhF,WAAW,CAAC,MAAM,GAAE,MAAM,GAAG,QAAQ,GAAG,OAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;IAKjF,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;IAI9B,OAAO,IAAI,IAAI;CAKhB;AACD,qBAAa,cAAc;IAOb,OAAO,CAAC,OAAO;IAN3B,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,OAAO,CAAC,UAAU,CAAC,CAAgC;IACnD,OAAO,CAAC,aAAa,CAAC,CAA+B;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwD;gBAC7D,OAAO,EAAE;QAC3B,WAAW,EAAE,MAAM,CAAA;QACnB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,IAAI,CAAA;QAClC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC;YAAE,QAAQ,EAAE,OAAO,CAAC;YAAC,QAAQ,CAAC,EAAE,SAAS,CAAA;SAAE,CAAC,GAAG;YAAE,QAAQ,EAAE,OAAO,CAAC;YAAC,QAAQ,CAAC,EAAE,SAAS,CAAA;SAAE,CAAA;QACrI,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,KAAK,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa,CAAA;QAC/F,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;QACzC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;QAC7C,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAA;QACnC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAA;KACrC;YAaa,OAAO;IAyBrB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAG1C,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,IAAI;IAC5C,YAAY,IAAI,IAAI;IACpB,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,GAAE,SAAS,GAAG,SAAqB,EAAE,SAAS,UAAQ,GAAG,IAAI;IAGxH,OAAO,IAAI,IAAI;CAChB"}

package/dist/app-frame.mjs

@@ -0,0 +1,189 @@
+import { isOpenRequest } from "./content.mjs";
+const envelope = (type, payload, extra = {}) => ({ protocol: "buckyos.app-frame", version: 1, type, payload, ...extra });
+const isMessage = (value) => {
+  if (!value || typeof value !== "object")
+    return false;
+  const v = value;
+  return v.protocol === "buckyos.app-frame" && v.version === 1 && typeof v.type === "string" && !!v.payload && typeof v.payload === "object";
+};
+class AppFrameHost {
+  constructor(options) {
+    this.options = options;
+    this.ready = false;
+    this.capabilities = [];
+    this.pending = /* @__PURE__ */ new Map();
+    this.listener = (event) => this.receive(event);
+    this.opens = [];
+    window.addEventListener("message", this.listener);
+  }
+  receive(event) {
+    var _a, _b, _c, _d, _e, _f, _g, _h;
+    if (event.source !== this.options.target() || event.origin !== this.options.origin || !isMessage(event.data))
+      return;
+    const m = event.data;
+    const p = m.payload;
+    if (m.type === "frame.hello") {
+      if (p.nonce !== this.options.init.nonce || !Array.isArray(p.appCapabilities))
+        return;
+      this.ready = true;
+      this.capabilities = p.appCapabilities.filter((c) => typeof c === "string");
+      this.send("frame.init", this.options.init);
+      (_b = (_a = this.options).onReady) == null ? void 0 : _b.call(_a);
+      return;
+    }
+    if (!this.ready)
+      return;
+    if (m.replyTo) {
+      const pending = this.pending.get(m.replyTo);
+      if (pending && m.type === pending.type + "Result") {
+        clearTimeout(pending.timer);
+        this.pending.delete(m.replyTo);
+        pending.resolve(m.payload);
+      }
+      return;
+    }
+    if (m.type === "window.setTitle" && typeof p.title === "string")
+      (_d = (_c = this.options).onTitle) == null ? void 0 : _d.call(_c, p.title.slice(0, 256), p.dirty === true);
+    if (m.type === "window.requestClose")
+      (_f = (_e = this.options).onRequestClose) == null ? void 0 : _f.call(_e);
+    if (m.type === "content.open" && (p.target === "default" || p.target === "preview")) {
+      const request = { ...p.request, requestId: crypto.randomUUID() };
+      if (!isOpenRequest(request))
+        return;
+      this.opens = this.opens.filter((t) => t > Date.now() - 1e4);
+      if (this.opens.length >= 5)
+        return;
+      this.opens.push(Date.now());
+      (_h = (_g = this.options).onContentOpen) == null ? void 0 : _h.call(_g, request, p.target, p.newWindow === true);
+    }
+  }
+  update(init) {
+    this.options.init = { ...this.options.init, ...init };
+  }
+  send(type, payload) {
+    var _a;
+    if (this.ready)
+      (_a = this.options.target()) == null ? void 0 : _a.postMessage(envelope(type, payload), this.options.origin);
+  }
+  request(type, payload, timeout = 3e3) {
+    if (!this.ready)
+      return Promise.reject(new Error("App frame is not ready"));
+    const id = crypto.randomUUID();
+    return new Promise((resolve, reject) => {
+      var _a;
+      const timer = setTimeout(() => {
+        this.pending.delete(id);
+        reject(new Error("App frame timed out"));
+      }, timeout);
+      this.pending.set(id, { resolve, reject, timer, type });
+      (_a = this.options.target()) == null ? void 0 : _a.postMessage(envelope(type, payload, { id }), this.options.origin);
+    });
+  }
+  async open(request) {
+    if (!this.capabilities.includes("open"))
+      return { accepted: false };
+    return await this.request("frame.open", { request });
+  }
+  async beforeClose(reason = "user") {
+    if (!this.ready || !this.capabilities.includes("beforeClose"))
+      return "allow";
+    const r = await this.request("frame.beforeClose", { reason });
+    return r.decision === "allow" || r.decision === "pending" ? r.decision : "deny";
+  }
+  async back() {
+    if (!this.capabilities.includes("back"))
+      return false;
+    return (await this.request("frame.back", {})).handled === true;
+  }
+  dispose() {
+    window.removeEventListener("message", this.listener);
+    this.pending.forEach((p) => {
+      clearTimeout(p.timer);
+      p.reject(new Error("App frame disposed"));
+    });
+    this.pending.clear();
+    this.ready = false;
+  }
+}
+class AppFrameClient {
+  constructor(options) {
+    this.options = options;
+    this.listener = (event) => {
+      void this.receive(event);
+    };
+    this.origin = new URL(options.shellOrigin).origin;
+    this.nonce = new URLSearchParams(window.location.hash.slice(1)).get("bfp");
+    window.addEventListener("message", this.listener);
+    if (window.parent !== window && this.nonce) {
+      const hello = () => window.parent.postMessage(envelope("frame.hello", { nonce: this.nonce, appCapabilities: [
+        ...options.onOpen ? ["open"] : [],
+        ...options.onBeforeClose ? ["beforeClose"] : [],
+        ...options.onBack ? ["back"] : []
+      ] }), this.origin);
+      hello();
+      this.helloTimer = setInterval(hello, 250);
+      this.helloDeadline = setTimeout(() => clearInterval(this.helloTimer), 1500);
+    }
+  }
+  async receive(event) {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n;
+    if (event.source !== window.parent || event.origin !== this.origin || !isMessage(event.data))
+      return;
+    const m = event.data;
+    const p = m.payload;
+    if (m.type === "frame.init") {
+      if (!this.nonce || p.nonce !== this.nonce || typeof p.locale !== "string" || !p.theme || typeof p.windowId !== "string" || p.launch && !isOpenRequest(p.launch))
+        return;
+      clearInterval(this.helloTimer);
+      clearTimeout(this.helloDeadline);
+      this.init = p;
+      (_b = (_a = this.options).onInit) == null ? void 0 : _b.call(_a, this.init);
+      return;
+    }
+    if (!this.init)
+      return;
+    const reply = (payload) => window.parent.postMessage(envelope(m.type + "Result", payload, { replyTo: m.id }), this.origin);
+    try {
+      if (m.type === "frame.open" && isOpenRequest(p.request))
+        reply(await ((_d = (_c = this.options).onOpen) == null ? void 0 : _d.call(_c, p.request)) ?? { accepted: false });
+      if (m.type === "frame.beforeClose")
+        reply({ decision: await ((_f = (_e = this.options).onBeforeClose) == null ? void 0 : _f.call(_e, p.reason)) ?? "allow" });
+      if (m.type === "frame.back")
+        reply({ handled: await ((_h = (_g = this.options).onBack) == null ? void 0 : _h.call(_g)) ?? false });
+      if (m.type === "frame.themeChanged" && (p.mode === "dark" || p.mode === "light"))
+        (_j = (_i = this.options).onTheme) == null ? void 0 : _j.call(_i, p);
+      if (m.type === "frame.localeChanged" && typeof p.locale === "string")
+        (_l = (_k = this.options).onLocale) == null ? void 0 : _l.call(_k, p.locale);
+      if (m.type === "frame.focusChanged")
+        (_n = (_m = this.options).onFocus) == null ? void 0 : _n.call(_m, p.focused === true);
+    } catch {
+      if (m.type === "frame.open")
+        reply({ accepted: false, fallback: "preview" });
+      if (m.type === "frame.beforeClose")
+        reply({ decision: "deny" });
+    }
+  }
+  send(type, payload) {
+    if (this.init)
+      window.parent.postMessage(envelope(type, payload), this.origin);
+  }
+  setTitle(title, dirty = false) {
+    this.send("window.setTitle", { title, dirty });
+  }
+  requestClose() {
+    this.send("window.requestClose", {});
+  }
+  openContent(request, target = "default", newWindow = false) {
+    this.send("content.open", { request, target, newWindow });
+  }
+  dispose() {
+    clearInterval(this.helloTimer);
+    clearTimeout(this.helloDeadline);
+    window.removeEventListener("message", this.listener);
+  }
+}
+export {
+  AppFrameClient,
+  AppFrameHost
+};
+//# sourceMappingURL=app-frame.mjs.map