buninu-browser 0.0.2

package/README.md

@@ -0,0 +1,283 @@
+# Buninu Browser
+
+**Buninu Browser is a browser engine written in JavaScript and WebAssembly for Bun.**
+
+Its first frontend is a headless shell intended to replace Chromium Headless
+Shell in [Buninu Linux](https://github.com/jjtseng93/buninu-linux). The
+engine's userspace components can be inspected, modified, and executed
+directly as JavaScript and WebAssembly.
+
+> [!WARNING]
+> Buninu Browser is in an early experimental stage and is not yet a
+> general-purpose browser engine or replacement for Chromium. The headless
+> shell is the initial frontend; native windowed frontends are planned later.
+
+## Usage
+
+```sh
+# Install Bun if you don't have it
+npm i -g bun
+
+# Open casty's home page
+npx buninu-browser
+
+# Open a URL
+npx buninu-browser github.com
+
+# Arguments after -- go to the
+# browser engine; --mobile presents
+# it as a phone (mobile user agent,
+# phone-width layout)
+npx buninu-browser github.com \
+  -- --mobile
+
+# The engine alone, as a CDP
+# endpoint for any client
+npx buninu-browser --headless \
+  --remote-debugging-port=9222
+```
+
+The first run downloads this package
+(about 50 MB: fonts, CanvasKit and
+the video decoder), then the terminal
+frontend
+[`@drxiaozhi/casty`](https://www.npmjs.com/package/@drxiaozhi/casty)
+([source on GitHub](https://github.com/jjtseng93/casty)).
+npx asks before each install.
+
+The launcher sets `CASTY_BROWSER` to
+this package's `buninu-browser.js`
+and starts casty with `npx` when npx
+and Bun are both installed, otherwise
+with `bunx`, or `bun x`.
+
+The first argument picks a frontend;
+the rest is passed on:
+
+- `--casty`, or anything else: casty
+  in the terminal (the default; every
+  argument goes to casty)
+- `--headless`: the engine alone, as
+  a CDP endpoint
+- `--win32`, `--gtk`, `--appkit`,
+  `--qt`: native windowed frontends
+  (reserved, not implemented yet)
+- `--help`/`-h`, `--version`/`-V`,
+  `--readme`: this launcher's help,
+  version and backend details, and
+  this README
+
+casty's and the engine's options:
+`--casty --help`, `--headless --help`.
+
+### Requirements
+
+- [Bun](https://bun.sh) 1.4.2 or
+  later on `PATH`, also with npx:
+  the engine and casty run on Bun.
+- For casty, a terminal with the
+  [Kitty graphics protocol](https://sw.kovidgoyal.net/kitty/graphics-protocol/)
+  (kitty, Ghostty, WezTerm, Konsole):
+  casty draws pages as images.
+  `--headless` needs no terminal.
+
+### Updating
+
+npx checks the registry on each start
+and installs a newer buninu-browser
+or casty by itself; only the first
+install asks. casty prints its
+version on the last line when it
+exits.
+
+To reinstall from scratch, remove
+the cached copies:
+
+```sh
+# npm 11 or later.
+# List what npx installed: a key,
+# then the package it holds
+npm cache npx ls
+#   03ebb78f79e8ceae: buninu-browser
+#   0a9f496dd562f3e1: @drxiaozhi/casty
+
+# Remove both. A key is a hash of
+# the package name, so these are
+# the same on every machine
+npm cache npx rm 03ebb78f79e8ceae \
+  0a9f496dd562f3e1
+
+# Or remove everything npx cached,
+# other tools' packages too
+npm cache npx rm --force
+
+# When casty runs through bunx or
+# bun x
+bun pm cache rm
+```
+
+With an older npm, delete the npx
+cache directory: `~/.npm/_npx`
+(Windows:
+`%LocalAppData%\npm-cache\_npx`).
+
+## Why replace Chromium Headless Shell
+
+Buninu Browser exists to work together with
+[casty](https://github.com/jjtseng93/casty), a terminal browser that renders
+pages by driving a headless browser over the Chrome DevTools Protocol and
+drawing its frames in the terminal. The fork linked here (of
+[sanohiro/casty](https://github.com/sanohiro/casty)) adapts casty to Buninu
+Linux. casty normally launches Chromium Headless Shell; Buninu Browser is
+meant to take that place as a CDP backend written in JavaScript and
+WebAssembly, so casty can run in Bun-only environments such as Buninu Linux
+without a native Chromium binary.
+
+Compatibility with casty is therefore part of the initial vertical slice
+rather than a later layer: CDP discovery, target lifecycle, navigation,
+screenshots and screencast, viewport, and input. Early development and every
+screen test so far have been done in casty itself. casty launches the
+browser named by `CASTY_BROWSER` before looking for Chromium, so a checkout
+of this repository runs next to a casty checkout with:
+
+```sh
+CASTY_BROWSER="$PWD/buninu-browser.js" bun ../casty/bin/casty.js buninu.org
+```
+
+## Design
+
+Future Win32, GTK, Android, and other windowed frontends should remain thin
+platform adapters. They provide a native window and drawing surface, forward
+input, clipboard, and IME events, and present frames produced by the shared
+engine; DOM, JavaScript, navigation, layout, paint, networking, and automation
+remain in the platform-independent core.
+
+Original Buninu Browser code is licensed under the MIT License. Standalone
+graphics and font assets live under [`usr/`](usr/); Buninu Linux packages use
+symlinks to their system copies instead. See [`usr/README.md`](usr/README.md)
+and [`THIRD_PARTY_NOTICES.md`](THIRD_PARTY_NOTICES.md).
+Video decoding uses the separately stored `vendor/wasmpeg/dist/cpu.wasm`,
+which contains FFmpeg code under LGPL-2.1-or-later. The MIT license does not
+cover that third-party component. Its license, notice, exact release source,
+build instructions, and replacement path are documented in
+[`vendor/wasmpeg/VENDORING.md`](vendor/wasmpeg/VENDORING.md).
+
+It implements its own browser lifecycle, rendering pipeline, process model,
+layout integration, and automation interface while building on selected
+open-source implementations of web standards.
+
+The package entry [`index.js`](index.js) is the `npx buninu-browser`
+launcher and re-exports the engine's API. The engine itself is
+[`buninu-browser.js`](buninu-browser.js), which `--headless` runs. Both keep
+their command lines behind `import.meta.main`, so importing the package does
+not start a browser process or CDP listener.
+
+### Page sandbox
+
+Page JavaScript runs behind three layers:
+
+1. **SES and bindings.** The renderer calls `lockdown()`, and each document
+   gets its own compartment. That compartment sees only project-owned DOM
+   and Web API bindings, never Bun, `process`, or Happy DOM objects.
+2. **Process isolation.** The controller spawns one renderer per origin with
+   an empty environment, talks to it over IPC, and kills and restarts it if
+   it misses a deadline. Cookies, CORS, redirects, and history stay in the
+   controller. A cross-origin navigation moves to a fresh, pre-warmed
+   process. Isolation is per origin rather than per site because no Public
+   Suffix List is bundled.
+3. **seccomp.** Before lockdown, each renderer installs a syscall allowlist
+   modelled on Chromium's baseline policy.
+
+`--no-sandbox` is accepted for Chromium compatibility but ignored.
+`--dangerously-allow-host-js` turns the sandbox off for every page.
+
+### Rendering and loading
+
+Each renderer has two threads, following Chromium's main and compositor
+threads:
+
+- The **main thread** runs page scripts, style, layout, and raster.
+- The **compositor thread** is a Worker that keeps the latest raster tile. It
+  answers screenshots and scrolling over its own socket to the controller,
+  so the page stays visible and scrollable while the main thread is busy
+  with a relayout or a long script.
+
+When idle, the main thread rasterizes a tile reaching half a viewport above
+and one viewport below the visible area, so the compositor can scroll
+without waiting. Screenshots are encoded with `Bun.Image`.
+
+`<video>` can decode and display MP4 video frames after a click, with a basic
+play/pause control. Video bytes are fetched through the controller; the
+renderer uses vendored wasmpeg JavaScript and WebAssembly without native
+media bindings. Audio, seeking, and full HTML media controls are not yet
+implemented. No npm install is needed for the decoder.
+
+Documents load in stages:
+
+1. **Preview.** If stylesheets and images take longer than 300 ms, the
+   document is shown first with only the user-agent defaults and its inline
+   `<style>` sheets.
+2. **Styled page.** When the stylesheets and images arrive, the styled page
+   replaces the preview and keeps the scroll position.
+3. **Scripts.** Scripts run after that.
+
+`Page.navigate` returns at the first paint. `DOMContentLoaded` and `load`
+are reported over CDP when the page reaches them. Every visible change
+pushes a screencast frame.
+
+### Mobile presentation
+
+Pages see a desktop browser unless `--mobile` is given. With it, requests
+and `navigator.userAgent` use an Android 16 WebView user agent, and the
+`hover`/`pointer` media features report a touch screen (`hover: none`,
+`pointer: coarse`). User agent overrides sent over CDP are ignored so the
+flag stays in effect under clients that set a desktop user agent, such as
+casty. A viewport wider than 412 CSS pixels, a phone's width, is laid out
+412 pixels wide and scaled up to fill it, so frames keep the size the client
+asked for; input coordinates are scaled back, and pages see the factor as
+`visualViewport.scale`.
+
+```sh
+CASTY_BROWSER="$PWD/buninu-browser.js" bun ../casty/bin/casty.js github.com -- --mobile
+```
+
+### Diagnostics
+
+casty does not show the browser's stderr. Set `BUNINU_LOG=1` to also write
+it to `buninu-browser.log` in the working directory, or set
+`BUNINU_LOG=<path>` to choose the file. The log includes:
+
+- page errors and page `console` output;
+- per-phase load timings;
+- renderer crashes and watchdog kills.
+
+Renderers cannot open files under seccomp, so the controller collects their
+output and writes the log.
+
+```sh
+BUNINU_LOG=1 CASTY_BROWSER="$PWD/buninu-browser.js" bun ../casty/bin/casty.js github.com
+```
+
+## Open-source components
+
+The integration form is intentionally different for each upstream:
+
+| Component | Role | Source policy |
+|---|---|---|
+| **Happy DOM** | DOM, HTML elements, events, Web APIs, and selector matching | Vendored at an exact tag; accessed through project-owned adapters, with local changes recorded in [`patches/happy-dom/`](patches/happy-dom/) |
+| **Happy DOM HTMLParser** | Initial HTML parsing and tree construction | Use through the project parser adapter; keep scripts and subresource loading disabled until the renderer scheduler owns their lifecycle |
+| **Dropflow** | Structural reference for block formatting, anonymous boxes, and margin collapsing | Reference only: the layout is a clean reimplementation and no Dropflow source is copied; vendor an exact commit first if code is ever ported |
+| **TermDOM** | Flex, grid, table, and invalidation references; hand-derived test cases | Port selected tests with per-file attribution (flex and grid so far); algorithms are written from the CSS specifications |
+| **Chromium** | Behavioural reference; Linux syscall tables and the renderer seccomp policy structure | Use only BSD-3-Clause files, with attribution; Blink files under other licenses (such as the LGPL `html.css`) are not used |
+| **WHATWG HTML Standard** | User-agent default styles | Adapt the suggested rendering rules (§15.3) with attribution under CC BY 4.0 |
+| **CanvasKit** | Skia-based WASM rasterization and text shaping (SkParagraph with its bundled HarfBuzz) | Pin the official `canvaskit-wasm` release artifacts and integrity; do not vendor the full Skia repository or a separate HarfBuzz |
+| **SES (Hardened JavaScript)** | First sandbox layer for page scripts: `lockdown()` and one compartment per document | Vendored unmodified at an exact npm release in [`vendor/ses/`](vendor/ses/); page globals are project-owned bindings, never Happy DOM objects |
+| **Acorn** | JavaScript parser used to give classic scripts browser-style shared globals under SES | Vendored unmodified at an exact npm release in [`vendor/acorn/`](vendor/acorn/) |
+| **wasmpeg / FFmpeg** | CPU WebAssembly video decoding | Vendored `@wasmpeg/cpu` 1.0.1 under [`vendor/wasmpeg/`](vendor/wasmpeg/), licensed LGPL-2.1-or-later; the WASM remains a separate, replaceable file. See its [`VENDORING.md`](vendor/wasmpeg/VENDORING.md) and [`THIRD_PARTY_NOTICES.md`](THIRD_PARTY_NOTICES.md) |
+| **Web Platform Tests** | Conformance testing | Use a pinned external checkout or sparse test snapshot; do not place the complete WPT repository in the runtime vendor tree |
+
+These projects retain their respective licenses and attribution. Material that
+is actually distributed in this repository is recorded in
+[`THIRD_PARTY_NOTICES.md`](THIRD_PARTY_NOTICES.md), with license texts under
+[`LICENSES/`](LICENSES/). Buninu Browser maintains its own render tree, browser
+lifecycle, security model, layout integration, display list, and automation API.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,224 @@
+# Third-Party Notices
+
+This file records third-party material that is present in this repository.
+Planned or referenced dependencies are listed separately in `README.md` and do
+not become distributed components until their source or artifacts are added.
+
+## Happy DOM
+
+- Project: Happy DOM
+- Upstream: https://github.com/capricorn86/happy-dom
+- Version: `v20.14.5`
+- Commit: `0d4cdbe7442af49d16b49ddf1acf7cc9684ed318`
+- Vendored path: `vendor/happy-dom`
+- License: MIT
+- Copyright: Copyright (c) 2019 David Ortner (capricorn86)
+- Local license copy: `LICENSES/happy-dom.txt`
+- Upstream license: `vendor/happy-dom/LICENSE`
+
+Happy DOM starts from the exact upstream revision above and carries the local
+patch queue documented in [`patches/happy-dom/README.md`](patches/happy-dom/README.md).
+Project-specific behavior belongs in project-owned adapters; every necessary
+upstream-file modification must be recorded in that queue with its reason and
+corresponding test.
+
+## SES (Hardened JavaScript)
+
+- Project: SES, part of Endo
+- Upstream: https://github.com/endojs/endo/tree/master/packages/ses
+- Version: `2.3.0` (npm release, `dist/ses.mjs`)
+- Vendored path: `vendor/ses`
+- License: Apache-2.0
+- Copyright: Copyright Agoric and contributors (see `vendor/ses/LICENSE`)
+- Local license copies: `LICENSES/ses.txt`, plus the licenses SES carries for
+  code it derives from: `LICENSES/ses-aura.txt` (Salesforce Aura),
+  `LICENSES/ses-caja.txt` (Google Caja, Apache-2.0), `LICENSES/ses-corejs.txt`
+  (core-js, MIT), `LICENSES/ses-v8.txt` (V8, BSD-3-Clause)
+
+The renderer calls `lockdown()` and runs page scripts in SES compartments
+(`lib/renderer/page-realm.js`). The bundle is used unmodified; its SHA-256 is
+`1e40a59ccf5e72da8e260dda007a19ebd20304394b1b7288d0aab21733b9cd95`.
+
+## Acorn
+
+- Project: Acorn
+- Upstream: https://github.com/acornjs/acorn
+- Version: `8.18.0` (npm release, `dist/acorn.mjs`)
+- Vendored path: `vendor/acorn`
+- License: MIT
+- Copyright: Copyright (C) 2012-2022 by various contributors (see upstream AUTHORS)
+- Local license copy: `LICENSES/acorn.txt`
+
+`lib/renderer/script-rewrite.js` parses classic scripts with Acorn to lift
+top-level declarations onto the page's global object. The bundle is used
+unmodified; its SHA-256 is
+`953573b8fdab71599749ea5f2b33d3e760c2116178f9423ee7458dbe39d59453`.
+
+## wasmpeg / FFmpeg
+
+- Project: wasmpeg CPU build, incorporating FFmpeg
+- Upstream: https://github.com/wasmpeg/wasmpeg
+- Version: `@wasmpeg/cpu` 1.0.1, upstream tag `v1.0.1`, commit
+  `173b41e30f4dd21d15f4e564c3ad26cba5d89d80`
+- Vendored path: `vendor/wasmpeg`
+- License: LGPL-2.1-or-later for wasmpeg and its FFmpeg code
+- Local license copies: `vendor/wasmpeg/LICENSE`, `LICENSES/wasmpeg.txt`
+- Upstream notice copy: `vendor/wasmpeg/NOTICE`
+- Corresponding source, including the FFmpeg tree and build scripts:
+  `vendor/wasmpeg/source-v1.0.1.tar.gz`, mirrored from
+  https://github.com/wasmpeg/wasmpeg/tree/v1.0.1
+
+The JavaScript sources, `cpu.js`, and `cpu.wasm` are copied without modification
+from the published CPU npm package. `cpu.wasm` is a separate file that users
+can replace. The exact artifact hashes, source download, and rebuild command
+are in [`vendor/wasmpeg/VENDORING.md`](vendor/wasmpeg/VENDORING.md).
+
+The CPU build also links the Emscripten zlib port. Its binary reports zlib
+1.3.2; zlib is copyright (C) 1995-2026 Jean-loup Gailly and Mark Adler and
+uses the zlib license. The license text is in `LICENSES/zlib.txt`, and its
+source is https://github.com/madler/zlib/tree/v1.3.2 .
+
+The generated `cpu.js`/`cpu.wasm` artifacts also contain Emscripten runtime
+code. Upstream's build instructions pin Emscripten SDK 6.0.8. Emscripten's
+MIT / University of Illinois-NCSA license text (including its embedded
+third-party notices) is in `LICENSES/emscripten.txt`; source:
+https://github.com/emscripten-core/emscripten/tree/6.0.8 .
+
+## TermDOM-derived references
+
+- Project: TermDOM
+- Upstream: https://github.com/bikeshaving/termdom
+- Commit: `b92f36d5f3d83770f3ea8c38fdeae0a192dc235e`
+- License: MIT
+- Copyright: Copyright (c) 2026 Brian Kim
+- Local license copy: `LICENSES/termdom.txt`
+
+The initial computed-style model and its tests are informed by TermDOM's UA
+stylesheet categories and cascade tests. Buninu Browser retains its own DOM,
+style representation, CSS parser boundary, pixel layout, and implementation.
+
+`test/flex.test.js` ports cases from TermDOM's `tests/flex.test.ts`
+(flex-basis, §9.7 min/max freezing, auto margins, gaps, automatic minimum
+size), keeping TermDOM's hand-derived expected values and re-expressing each
+case as an HTML/CSS fixture. The flex layout in `lib/layout/text-layout.js`
+also follows TermDOM's `resolveFlexibleLengths` rule that growing requires a
+definite main size; no TermDOM source text is copied.
+
+`test/grid.test.js` likewise ports TermDOM's `tests/grid.test.ts` cases for
+track sizing, `repeat()`/`auto-fill`/`auto-fit`, line placement, sparse and
+dense auto-placement, implicit tracks, gaps, and alignment, re-expressed as
+HTML fixtures in a 30px-wide container with 1px characters (TermDOM's 30-cell
+terminal). The grid layout itself is written from the CSS Grid 2 algorithm.
+
+## Chromium (Blink) references
+
+- Project: Chromium
+- Upstream: https://chromium.googlesource.com/chromium/src
+- Commit: `2e7327eeeab051c4837bc03a17cbeae763449bcd`
+- License: BSD-3-Clause
+- Copyright: Copyright The Chromium Authors (per-file years, e.g. 2012, 2013, 2014, 2024)
+- Local license copy: `LICENSES/chromium.txt`
+
+Only Chromium files under the BSD-3-Clause `LICENSE` are used. Blink files
+under other licenses (for example the LGPL `html.css` user-agent stylesheet)
+are not used; user-agent defaults come from the HTML Standard instead.
+
+`resolveFlexibleLengths` in `lib/layout/text-layout.js` follows the behavior of
+Blink's `third_party/blink/renderer/core/layout/flex/line_flexer.cc`
+(content-box flex base sizes, early exit when free space has the wrong sign,
+freezing by total violation). It is a JavaScript reimplementation of that
+behavior; no Chromium source text is copied.
+
+`lib/renderer/syscall-numbers.js` is generated from Chromium's
+`sandbox/linux/system_headers/x86_64_linux_syscalls.h` and
+`arm64_linux_syscalls.h` (syscall number tables). The renderer seccomp policy in
+`lib/renderer/seccomp.js` follows the structure of Chromium's
+`sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc` and `syscall_sets.cc`
+(allowlist categories, threads-only `clone`, `clone3` as `ENOSYS`, signals only
+to the own process); the BPF program itself is written in JavaScript.
+
+Two performance designs follow BSD-licensed Chromium files; both are
+reimplemented in JavaScript, and no Chromium source text is copied:
+
+- Declaration blocks are parsed on first use (`lib/style/computed-style.js`),
+  after `third_party/blink/renderer/core/css/parser/css_lazy_parsing_state.cc`.
+- A rebuild that yields an unchanged display list reuses the previous raster
+  tile (`lib/renderer/page-renderer.js`), after the display-item reuse in
+  `third_party/blink/renderer/platform/graphics/paint/paint_controller.cc`.
+
+## WHATWG HTML Standard
+
+- Project: HTML Living Standard
+- Upstream: https://html.spec.whatwg.org/multipage/rendering.html
+- License: Creative Commons Attribution 4.0 International (CC BY 4.0)
+- Copyright: Copyright © WHATWG (Apple, Google, Mozilla, Microsoft)
+- License text: `LICENSES/CC-BY-4.0.txt`
+- License URL: https://creativecommons.org/licenses/by/4.0/
+
+The user-agent default declarations in `lib/style/computed-style.js`
+(`UA_DECLARATIONS`: body margin, paragraph and heading margins and sizes, list
+indentation, monospace elements) are adapted from the suggested rendering rules
+in the HTML Standard §15.3; this is a modified implementation rather than a
+verbatim copy of that section.
+
+## Dropflow-derived references
+
+- Project: Dropflow
+- Upstream: https://github.com/chearon/dropflow
+- Commit: `13552695d3446ac68f39952ea89dc69c4499dde2`
+- License: MIT
+- Copyright: Copyright 2024 Caleb Hearon
+- Local license copy: `LICENSES/dropflow.txt`
+
+The initial box-layout separation is informed by Dropflow's distinction between
+the initial containing block, block flow, inline formatting, and painting.
+Buninu Browser retains its own JavaScript data model and CanvasKit renderer;
+Dropflow and its TypeScript/WASM runtime are not distributed dependencies.
+
+`lib/layout/text-layout.js` follows the structure of Dropflow's
+`src/layout-flow.ts` (block containers of blocks versus inlines, anonymous
+block boxes around inline runs, margin collapsing through margin struts). It is
+a clean reimplementation over Buninu's `RenderNode` input; no Dropflow source
+text is copied. Text shaping stays with CanvasKit instead of Dropflow's
+HarfBuzz build.
+
+## Standalone graphics runtime
+
+The files below are inherited from the sibling Buninu Linux source tree for a
+standalone Buninu Browser distribution. Inside a Buninu Linux image these paths
+must be symlinks to the system copies instead, as documented in `usr/README.md`.
+
+| Distributed path | Component and source | License |
+|---|---|---|
+| `usr/lib/canvaskit/canvaskit.js`, `canvaskit.wasm` | CanvasKit 0.41.1 from the official `canvaskit-wasm` npm release | BSD-3-Clause; `LICENSES/BSD-3-Clause-Skia.txt` |
+| `usr/share/fonts/DejaVuSansMono.ttf`, `DejaVuSansMono-Bold.ttf` | DejaVu fonts 2.37 from Debian `fonts-dejavu-core` | Bitstream Vera; `LICENSES/Bitstream-Vera.txt` |
+| `usr/share/fonts/NotoSansCJK-Regular.ttc` | Noto Sans CJK 2.004 from Android system fonts | SIL Open Font License 1.1; `LICENSES/OFL-1.1.txt` |
+| `usr/share/fonts/NotoColorEmoji.ttf`, `NotoColorEmojiFlags.ttf` | Noto Color Emoji 2.047 from Android system fonts | SIL Open Font License 1.1 |
+| `usr/share/fonts/NotoSansSymbols-Regular-Subsetted.ttf`, `NotoSansSymbols-Regular-Subsetted2.ttf` | Android Noto Sans Symbols subsets | SIL Open Font License 1.1 |
+| `usr/share/fonts/Roboto-Regular.ttf` | Roboto 3.005 from Android system fonts | Apache-2.0; `LICENSES/Apache-2.0.txt` |
+
+CanvasKit's WASM also incorporates third-party code. Its published npm
+tarball supplies only Skia's top-level license, so the following license
+texts are included separately based on the components identified in the
+binary and CanvasKit's upstream build configuration:
+
+| Component | License text | Source |
+|---|---|---|
+| HarfBuzz text shaping | `LICENSES/harfbuzz.txt` (Old MIT) | https://github.com/harfbuzz/harfbuzz |
+| ICU Unicode data and processing (binary reports ICU 74) | `LICENSES/icu.txt` (Unicode License v3) | https://github.com/unicode-org/icu |
+| FreeType fonts | `LICENSES/freetype.txt` (FreeType License) | https://gitlab.freedesktop.org/freetype/freetype |
+| libpng | `LICENSES/libpng.txt` (PNG Reference Library License) | https://github.com/pnggroup/libpng |
+| libjpeg-turbo / IJG JPEG | `LICENSES/libjpeg-turbo.txt`, `LICENSES/libjpeg-ijg.txt` (BSD-style and IJG terms) | https://github.com/libjpeg-turbo/libjpeg-turbo |
+| libwebp | `LICENSES/libwebp.txt` (BSD-3-Clause) | https://github.com/webmproject/libwebp |
+| Wuffs image decoding | `LICENSES/wuffs.txt` (MIT or Apache-2.0) | https://github.com/google/wuffs |
+| WOFF2 fonts | `LICENSES/woff2.txt` (MIT) | https://github.com/google/woff2 |
+| zlib | `LICENSES/zlib.txt` (zlib) | https://github.com/madler/zlib |
+| Emscripten-generated runtime | `LICENSES/emscripten.txt` (MIT or University of Illinois/NCSA) | https://github.com/emscripten-core/emscripten |
+
+The exact revisions of these libraries in the inherited CanvasKit binary
+have not been independently reconstructed; the top-level artifact is the
+official `canvaskit-wasm` 0.41.1 release.
+
+The source asset directory also retains the license files next to the fonts and
+CanvasKit artifacts. Versions and provenance above mirror
+`../buninu-linux/NOTICE.md`; update both records when refreshing these files.

package/bunfig.toml

@@ -0,0 +1,2 @@
+[test]
+pathIgnorePatterns = ["vendor/**"]

package/buninu-browser.js

@@ -0,0 +1,65 @@
+#!/usr/bin/env bun
+
+/**
+ * Buninu Browser executable and public module entry point.
+ *
+ * Keep import-time behavior side-effect free. CLI startup belongs behind the
+ * import.meta.main guard so tests and embedders can import the same file.
+ */
+import packageInfo from "./package.json" with { type: "json" };
+
+export {
+  CdpServer,
+  isOriginAllowed,
+  isSafeHostHeader,
+  parseAllowedOrigins,
+} from "./lib/cdp-server.js";
+
+export const runtimeRoot = new URL("./usr/", import.meta.url);
+export const canvasKitRoot = new URL("./usr/lib/canvaskit/", import.meta.url);
+export const fontRoot = new URL("./usr/share/fonts/", import.meta.url);
+
+export { parseHTMLDocument } from "./lib/happy-dom/parser.js";
+export { layoutText } from "./lib/layout/text-layout.js";
+export { ScrollViewport } from "./lib/layout/scroll-viewport.js";
+export { elementBounds, hitTest, interactiveRegions } from "./lib/input/hit-test.js";
+export { computeElementStyle, parseDeclarations, StyleEngine } from "./lib/style/computed-style.js";
+export { RenderTreeBuilder, renderTreeText } from "./lib/render-tree/index.js";
+
+export async function main(args = Bun.argv.slice(2)) {
+  const has = (...names) => names.some((name) => args.includes(name));
+  if (has("--version", "-V", "-version")) {
+    console.log(`buninu-browser ${packageInfo.version}`);
+    return 0;
+  }
+
+  if (has("--help", "-h", "-help")) {
+    console.log(`Buninu Browser ${packageInfo.version}
+
+Usage: buninu-browser [options]
+
+Options:
+  --remote-debugging-port=<port>  CDP port (0 picks a free one; default 9222)
+  --no-sandbox                    Accepted for Chromium compatibility and ignored
+  --dangerously-allow-host-js     Turn the page sandbox off for every page
+  --mobile                        Present as a phone: mobile user agent and touch media
+                                  features (hover: none, pointer: coarse); user agent
+                                  overrides over CDP are ignored
+  --version, -V                   Print the version
+  --help, -h                      Print this help
+
+Environment:
+  BUNINU_LOG=1                    Also log to ./buninu-browser.log (page errors,
+                                  console output, timings, renderer crashes)
+  BUNINU_LOG=<path>               Log to that file instead`);
+    return 0;
+  }
+
+  const { runHeadlessShell } = await import("./lib/headless-shell.js");
+  await runHeadlessShell(args);
+  return 0;
+}
+
+if (import.meta.main) {
+  process.exitCode = await main();
+}