buninu-browser 0.3.0 → 0.4.0

package/test/fixtures/qml/flea-theme/ui/qmldir

@@ -0,0 +1,227 @@
+module flea
+RowDropTarget 1.0 RowDropTarget.qml
+TrashDropHandler 1.0 TrashDropHandler.qml
+singleton Theme 1.0 Theme.qml
+ThemeColors 1.0 ThemeColors.qml
+singleton Glass 1.0 Glass.qml
+GlassTagger 1.0 GlassTagger.qml
+singleton MediaSound 1.0 MediaSound.qml
+singleton Scripts 1.0 Scripts.qml
+singleton ViewState 1.0 ViewState.qml
+singleton UserDirs 1.0 UserDirs.qml
+singleton UpdateCheck 1.0 UpdateCheck.qml
+singleton DefaultClaim 1.0 DefaultClaim.qml
+singleton SettingsMetrics 1.0 SettingsMetrics.qml
+Backend 1.0 Backend.qml
+CheckBox 1.0 CheckBox.qml
+ChromeBar 1.0 ChromeBar.qml
+ChromeButton 1.0 ChromeButton.qml
+ChromeModes 1.0 ChromeModes.qml
+ColumnsArea 1.0 ColumnsArea.qml
+ColumnsLanding 1.0 ColumnsLanding.qml
+ColumnPane 1.0 ColumnPane.qml
+ColumnRow 1.0 ColumnRow.qml
+CountedWorker 1.0 CountedWorker.qml
+Crumb 1.0 Crumb.qml
+CursorMark 1.0 CursorMark.qml
+PreviewColumn 1.0 PreviewColumn.qml
+CodeLines 1.0 CodeLines.qml
+CompareView 1.0 CompareView.qml
+CodeRefusal 1.0 CodeRefusal.qml
+CsvTable 1.0 CsvTable.qml
+PreviewLines 1.0 PreviewLines.qml
+PreviewScroll 1.0 PreviewScroll.qml
+PreviewMarkdown 1.0 PreviewMarkdown.qml
+PreviewHtml 1.0 PreviewHtml.qml
+HtmlPane 1.0 HtmlPane.qml
+HtmlClip 1.0 HtmlClip.qml
+MarkdownSource 1.0 MarkdownSource.qml
+MarkdownRemote 1.0 MarkdownRemote.qml
+QuickLookBar 1.0 QuickLookBar.qml
+MarkdownPane 1.0 MarkdownPane.qml
+FontPane 1.0 FontPane.qml
+MarkdownText 1.0 MarkdownText.qml
+MarkdownPictures 1.0 MarkdownPictures.qml
+MarkdownImages 1.0 MarkdownImages.qml
+MarkdownMathsText 1.0 MarkdownMathsText.qml
+MarkdownQuote 1.0 MarkdownQuote.qml
+MarkdownList 1.0 MarkdownList.qml
+MarkdownBlocks 1.0 MarkdownBlocks.qml
+MarkdownBlockView 1.0 MarkdownBlockView.qml
+MarkdownTable 1.0 MarkdownTable.qml
+MarkdownTableScroll 1.0 MarkdownTableScroll.qml
+MarkdownTableWheel 1.0 MarkdownTableWheel.qml
+MarkdownFigure 1.0 MarkdownFigure.qml
+singleton FigureService 1.0 FigureService.qml
+FigureStore 1.0 FigureStore.qml
+PreviewPdf 1.0 PreviewPdf.qml
+PreviewSwap 1.0 PreviewSwap.qml
+PreviewImage 1.0 PreviewImage.qml
+PreviewImagePan 1.0 PreviewImagePan.qml
+PreviewImageSharp 1.0 PreviewImageSharp.qml
+PreviewAnimation 1.0 PreviewAnimation.qml
+ConvertDialog 1.0 ConvertDialog.qml
+BulkOldNames 1.0 BulkOldNames.qml
+BulkRenameDialog 1.0 BulkRenameDialog.qml
+DialogButton 1.0 DialogButton.qml
+ProtocolChip 1.0 ProtocolChip.qml
+DialogField 1.0 DialogField.qml
+DialogHeader 1.0 DialogHeader.qml
+DialogScrim 1.0 DialogScrim.qml
+DialogTitle 1.0 DialogTitle.qml
+Divider 1.0 Divider.qml
+EscapeHint 1.0 EscapeHint.qml
+ContextMenu 1.0 ContextMenu.qml
+MenuHost 1.0 MenuHost.qml
+KeymapSheet 1.0 KeymapSheet.qml
+KeymapSheetResult 1.0 KeymapSheetResult.qml
+SettingsPanel 1.0 SettingsPanel.qml
+SettingsPane 1.0 SettingsPane.qml
+SettingsRail 1.0 SettingsRail.qml
+SettingsRow 1.0 SettingsRow.qml
+SettingsGroup 1.0 SettingsGroup.qml
+SettingsHint 1.0 SettingsHint.qml
+SettingsRuler 1.0 SettingsRuler.qml
+SettingsSegment 1.0 SettingsSegment.qml
+MediaSession 1.0 MediaSession.qml
+MediaStrip 1.0 MediaStrip.qml
+MediaTrack 1.0 MediaTrack.qml
+MediaVolume 1.0 MediaVolume.qml
+MenuRow 1.0 MenuRow.qml
+MenuEdgeFade 1.0 MenuEdgeFade.qml
+RenameField 1.0 RenameField.qml
+EmptyState 1.0 EmptyState.qml
+FastScrollHandler 1.0 FastScrollHandler.qml
+ViewportScrollBar 1.0 ViewportScrollBar.qml
+ViewportScrollBars 1.0 ViewportScrollBars.qml
+CardScroll 1.0 CardScroll.qml
+CardFrame 1.0 CardFrame.qml
+Reveal 1.0 Reveal.qml
+FlyoutFade 1.0 FlyoutFade.qml
+DeviceMounts 1.0 DeviceMounts.qml
+DropboxMark 1.0 DropboxMark.qml
+HyprlandMark 1.0 HyprlandMark.qml
+DropInto 1.0 DropInto.qml
+FileDrag 1.0 FileDrag.qml
+FitMetrics 1.0 FitMetrics.qml
+RowDrag 1.0 RowDrag.qml
+WindowDrag 1.0 WindowDrag.qml
+Glyph 1.0 Glyph.qml
+LangMark 1.0 LangMark.qml
+GlyphSolid 1.0 GlyphSolid.qml
+GvfsBridge 1.0 GvfsBridge.qml
+GridTile 1.0 GridTile.qml
+GridArea 1.0 GridArea.qml
+Header 1.0 Header.qml
+Ipc 1.0 Ipc.qml
+IpcControls 1.0 IpcControls.qml
+IpcMenuState 1.0 IpcMenuState.qml
+IpcPreviewState 1.0 IpcPreviewState.qml
+List 1.0 List.qml
+MatchText 1.0 MatchText.qml
+PathJump 1.0 PathJump.qml
+JumpPath 1.0 JumpPath.qml
+LoadingState 1.0 LoadingState.qml
+NetworkDialog 1.0 NetworkDialog.qml
+NetworkForm 1.0 NetworkForm.qml
+NetworkMounts 1.0 NetworkMounts.qml
+NetworkPlaces 1.0 NetworkPlaces.qml
+MountListing 1.0 MountListing.qml
+PhoneMounts 1.0 PhoneMounts.qml
+FleaMark 1.0 FleaMark.qml
+Opener 1.0 Opener.qml
+Preview 1.0 Preview.qml
+PreviewArchive 1.0 PreviewArchive.qml
+PreviewFacts 1.0 PreviewFacts.qml
+PreviewFactsLine 1.0 PreviewFactsLine.qml
+PreviewMedia 1.0 PreviewMedia.qml
+QuickLookPrepare 1.0 QuickLookPrepare.qml
+QuickLookWarm 1.0 QuickLookWarm.qml
+QuickLookSwap 1.0 QuickLookSwap.qml
+PreviewText 1.0 PreviewText.qml
+Row 1.0 Row.qml
+ResizeHandle 1.0 ResizeHandle.qml
+PreviewEdge 1.0 PreviewEdge.qml
+Pane 1.0 Pane.qml
+PickerBox 1.0 PickerBox.qml
+PickerChrome 1.0 PickerChrome.qml
+PickerGrid 1.0 PickerGrid.qml
+PickerHeader 1.0 PickerHeader.qml
+PickerList 1.0 PickerList.qml
+PickerSelection 1.0 PickerSelection.qml
+PickerPlaces 1.0 PickerPlaces.qml
+PickerRecent 1.0 PickerRecent.qml
+PickerSave 1.0 PickerSave.qml
+PickerAnswers 1.0 PickerAnswers.qml
+PickerFilter 1.0 PickerFilter.qml
+PickerPathBar 1.0 PickerPathBar.qml
+PathEntry 1.0 PathEntry.qml
+PanePath 1.0 PanePath.qml
+PaneRail 1.0 PaneRail.qml
+PaneWire 1.0 PaneWire.qml
+PaneSwap 1.0 PaneSwap.qml
+ParkedWait 1.0 ParkedWait.qml
+ShareBrowser 1.0 ShareBrowser.qml
+Sidebar 1.0 Sidebar.qml
+SidebarRow 1.0 SidebarRow.qml
+RailDrop 1.0 RailDrop.qml
+RailTrashRow 1.0 RailTrashRow.qml
+DropTarget 1.0 DropTarget.qml
+Spinner 1.0 Spinner.qml
+SearchStrip 1.0 SearchStrip.qml
+FilterStrip 1.0 FilterStrip.qml
+ShareLink 1.0 ShareLink.qml
+StateMessage 1.0 StateMessage.qml
+TailscaleMark 1.0 TailscaleMark.qml
+StatusBar 1.0 StatusBar.qml
+StableModel 1.0 StableModel.qml
+PrebuildDriver 1.0 PrebuildDriver.qml
+SelectionBand 1.0 SelectionBand.qml
+TabBar 1.0 TabBar.qml
+TabDragGeometry 1.0 TabDragGeometry.qml
+TransferCard 1.0 TransferCard.qml
+Taildrop 1.0 Taildrop.qml
+LocalSend 1.0 LocalSend.qml
+LocalSendMark 1.0 LocalSendMark.qml
+FactsTable 1.0 FactsTable.qml
+KindStack 1.0 KindStack.qml
+AboutFacts 1.0 AboutFacts.qml
+SelectionPreview 1.0 SelectionPreview.qml
+PermissionsDialog 1.0 PermissionsDialog.qml
+PermissionsHeadings 1.0 PermissionsHeadings.qml
+singleton Favourites 1.0 Favourites.qml
+singleton RailPlaces 1.0 RailPlaces.qml
+singleton ShelfPins 1.0 ShelfPins.qml
+SettingsFavourite 1.0 SettingsFavourite.qml
+TrashView 1.0 TrashView.qml
+TrashConfirm 1.0 TrashConfirm.qml
+TagSlot 1.0 TagSlot.qml
+TagSwatch 1.0 TagSwatch.qml
+RailHeading 1.0 RailHeading.qml
+TagState 1.0 TagState.qml
+TagRailSection 1.0 TagRailSection.qml
+TagMenuMark 1.0 TagMenuMark.qml
+CollideConfirm 1.0 CollideConfirm.qml
+CollideHost 1.0 CollideHost.qml
+RunCard 1.0 RunCard.qml
+FatNamesConfirm 1.0 FatNamesConfirm.qml
+TrashMonitor 1.0 TrashMonitor.qml
+TrashHost 1.0 TrashHost.qml
+FlashView 1.0 FlashView.qml
+FlashHost 1.0 FlashHost.qml
+FlashImageRow 1.0 FlashImageRow.qml
+FlashDriveRows 1.0 FlashDriveRows.qml
+FlashStepRow 1.0 FlashStepRow.qml
+FlashRunner 1.0 FlashRunner.qml
+FlashStrip 1.0 FlashStrip.qml
+UnlockDialog 1.0 UnlockDialog.qml
+UnlockHost 1.0 UnlockHost.qml
+DeviceLock 1.0 DeviceLock.qml
+PaneMenuActions 1.0 PaneMenuActions.qml
+PaneStates 1.0 PaneStates.qml
+MenuActionDialog 1.0 MenuActionDialog.qml
+PickerListing 1.0 PickerListing.qml
+PickerLifecycle 1.0 PickerLifecycle.qml
+ArchiveCompressDialog 1.0 ArchiveCompressDialog.qml
+ArchivePasswordDialog 1.0 ArchivePasswordDialog.qml
+ArchiveCards 1.0 ArchiveCards.qml

package/test/fixtures/qml/hello.qml

@@ -0,0 +1,26 @@
+import QtQuick
+import Quickshell
+FloatingWindow {
+    id: root
+    title: "QML DOM experiment"
+    color: "#172b36"
+    property int count: 0
+    Rectangle {
+        id: button
+        width: parent.width / 2
+        height: 100
+        anchors.centerIn: parent
+        color: root.count % 2 ? "#245c66" : "#26404d"
+        radius: 12
+        Text {
+            anchors.centerIn: parent
+            text: "Hello World! Clicks: " + root.count
+            color: "#70e1e8"
+            font.pixelSize: 24
+        }
+        MouseArea {
+            anchors.fill: parent
+            onClicked: { root.count++; }
+        }
+    }
+}

package/test/fixtures/qml/imports/Demo/Toolkit/VersionLabel.qml

@@ -0,0 +1,2 @@
+import QtQuick
+Text { text: "module version 1.0"; color: "white" }

package/test/fixtures/qml/imports/Demo/Toolkit/VersionLabelNew.qml

@@ -0,0 +1,2 @@
+import QtQuick
+Text { text: "module version 1.1"; color: "white" }

package/test/fixtures/qml/imports/Demo/Toolkit/qmldir

@@ -0,0 +1,3 @@
+module Demo.Toolkit
+VersionLabel 1.0 VersionLabel.qml
+VersionLabel 1.1 VersionLabelNew.qml

package/test/fixtures/qml/imports/components/Badge.qml

@@ -0,0 +1,15 @@
+import QtQuick
+import "../theme"
+import "../logic/counter.js" as Counter
+import "../logic/shared.js" as Shared
+Rectangle {
+    id: root
+    property string caption: "default"
+    property int serial: 0
+    property int sharedSerial: 0
+    property alias value: label.text
+    width: 320; height: 60
+    color: "#26404d"
+    Text { id: label; x: 10; y: 10; color: Theme.ink; text: Counter.captionText() + ":" + Theme.count + ":" + root.serial + "/" + root.sharedSerial }
+    Component.onCompleted: { root.serial = Counter.next(); root.sharedSerial = Shared.next(); }
+}

package/test/fixtures/qml/imports/logic/base.js

@@ -0,0 +1,2 @@
+.pragma library
+function times(a, b) { return a * b; }

package/test/fixtures/qml/imports/logic/counter.js

@@ -0,0 +1,4 @@
+var count = 0;
+function next() { return ++count; }
+
+function captionText() { return root.caption; }

package/test/fixtures/qml/imports/logic/math.js

@@ -0,0 +1,3 @@
+.pragma library
+.import "./base.js" as Base
+function multiply(a, b) { return Base.times(a, b); }

package/test/fixtures/qml/imports/logic/shared.js

@@ -0,0 +1,3 @@
+.pragma library
+var count = 0;
+function next() { return ++count; }

package/test/fixtures/qml/imports/main.qml

@@ -0,0 +1,21 @@
+import QtQuick
+import Quickshell
+import "./components" as UI
+import "./theme" as Skin
+import "./logic/math.js" as Calc
+import Demo.Toolkit 1.0 as Tools
+FloatingWindow {
+    title: "Real QML imports"
+    color: "#172b36"
+    UI.Badge { id: first; x: 30; y: 30; caption: "one" }
+    UI.Badge { id: second; x: 30; y: 110; caption: "two" }
+    Text { id: summary; x: 30; y: 200; color: Skin.Theme.ink; text: "Shared: " + Skin.Theme.count + " / multiply: " + Calc.multiply(6, 7) }
+    Text { id: privateScope; x: 30; y: 225; color: "white"; text: "Private ID: " + typeof label }
+    Tools.VersionLabel { id: versionLabel; x: 30; y: 250 }
+    Rectangle {
+        id: button
+        x: 30; y: 300; width: 240; height: 50; color: "#315d6c"
+        Text { anchors.centerIn: parent; color: "white"; text: "Increment shared singleton" }
+        MouseArea { anchors.fill: parent; onClicked: { Skin.Theme.bump(); first.value = "changed"; } }
+    }
+}

package/test/fixtures/qml/imports/theme/Theme.qml

@@ -0,0 +1,8 @@
+pragma Singleton
+import QtQuick
+QtObject {
+    id: root
+    property int count: 1
+    readonly property color ink: "#70e1e8"
+    function bump() { root.count++; }
+}

package/test/fixtures/qml/imports/theme/qmldir

@@ -0,0 +1,2 @@
+module Test.Theme
+singleton Theme 1.0 Theme.qml

package/test/fixtures/qml/multiply.qml

@@ -0,0 +1,61 @@
+import QtQuick
+import QtQuick.Controls
+import Quickshell
+
+FloatingWindow {
+    id: root
+    title: "Multiply — Quickshell"
+    implicitWidth: 580
+    implicitHeight: 440
+    color: "#172b36"
+
+    Column {
+        anchors.centerIn: parent
+        width: Math.min(420, parent.width - 48)
+        spacing: 12
+
+        Text {
+            text: "Multiply two numbers"
+            color: "#70e1e8"
+            font.pixelSize: 26
+        }
+        Label { text: "First number"; color: "#e0edf0" }
+        TextField {
+            id: first
+            width: parent.width
+            text: "6"
+            placeholderText: "Enter a number"
+            selectByMouse: true
+            Accessible.name: "First number"
+        }
+        Label { text: "Second number"; color: "#e0edf0" }
+        TextField {
+            id: second
+            width: parent.width
+            text: "7"
+            placeholderText: "Enter a number"
+            selectByMouse: true
+            Accessible.name: "Second number"
+        }
+        Button {
+            width: parent.width
+            text: "Multiply"
+            onClicked: {
+                const a = Number(first.text.trim());
+                const b = Number(second.text.trim());
+                result.text = first.text.trim() !== "" && second.text.trim() !== ""
+                    && Number.isFinite(a) && Number.isFinite(b)
+                    ? String(a * b) : "Please enter two valid numbers";
+            }
+        }
+        Label { text: "Result"; color: "#e0edf0" }
+        TextField {
+            id: result
+            width: parent.width
+            readOnly: true
+            selectByMouse: true
+            placeholderText: "Press Multiply"
+            Accessible.name: "Result"
+        }
+    }
+}

package/test/fixtures/qml-canvas-dom.js

@@ -0,0 +1,90 @@
+import { strict as assert } from 'node:assert';
+import { createPageRenderer } from '../../lib/renderer/page-renderer.js';
+const mode = process.argv[2] ?? 'local';
+const redPng = Buffer.from('iVBORw0KGgoAAAANSUhEUgAAAAIAAAADCAIAAAA2iEnWAAAAEElEQVR4nGP4z8AARAwoFABE0AX7pM/egAAAAABJRU5ErkJggg==', 'base64');
+const renderer = await createPageRenderer({ reportError: error => console.error(error),
+  fetchResource: async url => ({ ok: true, status: 200, url, body: redPng }),
+});
+renderer.resize(400, 300, 1);
+renderer.setScripting('host');
+const source = 'import QtQuick\nRectangle { width: 400; height: 300; color: "white" }';
+const evaluate = code => renderer.evaluate(code);
+const pixel = (x, y) => evaluate(`[...ctx.getImageData(${x},${y},1,1).data]`);
+const setup = `
+  globalThis.outer=document.createElement('div');
+  outer.style.cssText='position:absolute;left:50px;top:60px;width:10px;height:10px;overflow:hidden;opacity:0.2';
+  document.body.appendChild(outer);
+  globalThis.src=document.createElement('div');
+  src.style.cssText='position:relative;width:40px;height:30px;background:red';
+  outer.appendChild(src);
+  const child=document.createElement('div');
+  child.style.cssText='position:absolute;left:20px;top:0;width:20px;height:30px;background:blue;z-index:2';
+  src.appendChild(child);
+  const overlay=document.createElement('div');
+  overlay.style.cssText='position:absolute;left:0;top:0;width:400px;height:300px;background:lime;z-index:99';
+  document.body.appendChild(overlay);
+  globalThis.dest=document.createElement('canvas');dest.width=80;dest.height=60;
+  globalThis.ctx=dest.getContext('2d');
+`;
+try {
+  const url = mode === 'local' ? 'file:///tmp/qml-canvas-test.qml' : mode === 'html' ? 'file:///tmp/plain.html' : 'https://qml.test/main.qml';
+  await renderer.loadDocument({ url, contentType: mode === 'html' ? 'text/html' : 'text/x-qml', source: mode === 'html' ? '<body></body>' : source });
+  await renderer.whenLoaded();
+  await evaluate(setup);
+  if (mode !== 'local') {
+    await evaluate('document.__qmlHost={};globalThis.__qmlHost={};ctx.drawImage(src,0,0)');
+    assert.deepEqual(await pixel(5, 5), [0, 0, 0, 0], 'no DOM capture capability');
+  } else {
+  const before = await evaluate('outer.style.cssText+src.style.cssText');
+  await evaluate('ctx.drawImage(src,0,0)');
+  assert.deepEqual(await pixel(5, 5), [255, 0, 0, 255], 'no ancestor opacity/clip or sibling overlay');
+  assert.deepEqual(await pixel(25, 5), [0, 0, 255, 255], 'internal stacking retained');
+  assert.equal(await evaluate('outer.style.cssText+src.style.cssText'), before, 'source DOM untouched');
+  assert.deepEqual(await pixel(45, 5), [0, 0, 0, 0], 'intrinsic DOM border-box dimensions');
+  await evaluate('src.style.background="yellow"');
+  assert.deepEqual(await pixel(5, 5), [255, 0, 0, 255], 'snapshot remains frozen');
+  await evaluate('ctx.clearRect(0,0,80,60);ctx.drawImage(src,0,0,80,60)');
+  assert.deepEqual(await pixel(35, 20), [255, 255, 0, 255], 'mutation and scaling');
+  assert.deepEqual(await pixel(45, 20), [0, 0, 255, 255]);
+  await evaluate('ctx.clearRect(0,0,80,60);ctx.drawImage(src,20,0,20,30,10,10,20,30)');
+  assert.deepEqual(await pixel(15, 15), [0, 0, 255, 255], '9-argument source cropping');
+  assert.deepEqual(await pixel(5, 5), [0, 0, 0, 0]);
+  assert.equal(await evaluate('outer.style.opacity'), '0.2');
+  assert.equal(await evaluate('src.parentNode===outer'), true);
+  // The source's own clipping still applies, unlike outside ancestor clips.
+  await evaluate(`src.style.overflow='hidden';src.firstChild.style.left='35px';
+    ctx.clearRect(0,0,80,60);ctx.drawImage(src,0,0)`);
+  assert.deepEqual(await pixel(38, 5), [0, 0, 255, 255]);
+  assert.deepEqual(await pixel(42, 5), [0, 0, 0, 0]);
+  await evaluate(`globalThis.nested=document.createElement('canvas');nested.width=nested.height=10;
+    nested.style.cssText='position:absolute;left:0;top:0;width:10px;height:10px';
+    src.appendChild(nested);const nc=nested.getContext('2d');nc.fillStyle='lime';nc.fillRect(0,0,10,10);
+    ctx.clearRect(0,0,80,60);ctx.drawImage(src,0,0)`);
+  assert.deepEqual(await pixel(5, 5), [0, 255, 0, 255], 'nested canvas uses its latest native image');
+  await evaluate('ctx.clearRect(0,0,80,60);ctx.translate(10,10);ctx.globalAlpha=0.5;ctx.drawImage(src,0,0);ctx.resetTransform();ctx.globalAlpha=1');
+  const blended = await pixel(15, 15);
+  assert.equal(blended[1], 255);assert.ok(blended[3] >= 127 && blended[3] <= 128);
+  assert.equal(await evaluate(`(()=>{src.appendChild(dest);try{ctx.drawImage(src,0,0);return 'allowed'}catch(e){return e.name}finally{dest.remove()}})()`), 'InvalidStateError');
+  assert.equal(await evaluate(`(()=>{src.style.width='9000px';try{ctx.drawImage(src,0,0);return 'allowed'}catch(e){return e.name}finally{src.style.width='40px'}})()`), 'InvalidStateError');
+  // Render text through the ordinary painter as well as box decorations.
+  await evaluate(`nested.remove();src.firstChild.remove();src.style.background='white';
+    src.style.color='black';src.style.fontSize='18px';src.textContent='Hi';
+    ctx.clearRect(0,0,80,60);ctx.drawImage(src,0,0)`);
+  assert.equal(await evaluate(`[...ctx.getImageData(0,0,40,30).data].some((v,i)=>i%4===0&&v<100)`), true);
+  await evaluate(`src.textContent='';globalThis.foreign=document.createElement('img');
+    foreign.style.cssText='width:10px;height:10px';foreign.src='https://foreign.test/red.png';src.appendChild(foreign)`);
+  for (let i=0;i<100 && !await evaluate('foreign.complete&&foreign.naturalWidth===2');i++) await Bun.sleep(10);
+  assert.equal(await evaluate('foreign.naturalWidth'), 2);
+  await evaluate('ctx.drawImage(src,0,0)');
+  assert.deepEqual(await evaluate(`[()=>ctx.getImageData(0,0,1,1),()=>dest.toDataURL()].map(fn=>{try{fn();return 'allowed'}catch(e){return e.name}})`), ['SecurityError','SecurityError']);
+  // A tainted nested canvas cannot launder the image through a DOM snapshot.
+  await evaluate(`nested.getContext('2d').drawImage(foreign,0,0);foreign.remove();
+    src.appendChild(nested);dest.width=80;ctx.drawImage(src,0,0)`);
+  assert.equal(await evaluate(`(()=>{try{ctx.getImageData(0,0,1,1);return 'allowed'}catch(e){return e.name}})()`), 'SecurityError');
+  await evaluate('dest.width=80;nested.remove();src.style.background="red"');
+  // Oversized/rejected draws do not break the next successful capture.
+  await evaluate('ctx.drawImage(src,0,0)');
+  assert.deepEqual(await pixel(5,5), [255,0,0,255]);
+  assert.equal(await evaluate(`(()=>{src.remove();try{ctx.drawImage(src,0,0);return 'allowed'}catch(e){return e.name}})()`), 'InvalidStateError');
+  }
+} finally { renderer.dispose(); }

package/test/fixtures/qml-media-audio.js

@@ -0,0 +1,39 @@
+// Isolated host realm, real MP3 decoder, in-memory audio device (no loudspeaker).
+import assert from 'node:assert/strict';
+import {createPageRenderer} from '../../lib/renderer/page-renderer.js';
+import wasmpeg from '../../vendor/wasmpeg/src/js/index.js';
+const sleep=Bun.sleep,fixture=new URL('./tone.mp3',import.meta.url);
+await wasmpeg.load();
+const bytes=new Uint8Array(await Bun.file(fixture).arrayBuffer());
+let listener,closed=0;const chunks=[];
+const renderer=await createPageRenderer({videoDecoder:wasmpeg,
+ fetchResource:async()=>({ok:true,body:bytes,contentType:'audio/mpeg'}),
+ audio:{open(options,fn){listener=fn;return 1},write(id,pcm){chunks.push(Buffer.from(pcm))},finish(){},close(){closed++;return Promise.resolve(0)}},
+});
+try{
+ renderer.setScripting('host');
+ await renderer.loadDocument({url:'file:///tmp/qml-media-audio.qml',contentType:'text/x-qml',source:`import QtQuick
+import QtMultimedia
+Item {width:100;height:100
+ AudioOutput {id:out;volume:1}
+ MediaPlayer {id:player;source:${JSON.stringify(fixture.href)};audioOutput:out}
+ Button {id:play;onClicked:player.play()}
+ Button {id:mute;onClicked:out.muted=true}
+ Button {id:pause;onClicked:player.pause()}
+}`});
+ await renderer.whenLoaded();
+ await sleep(100);
+ await renderer.evaluate("document.getElementById('play').click()");
+ for(let i=0;i<100&&!listener;i++)await sleep(20);
+ assert.ok(listener,'real MP3 opens the existing audio output');
+ listener({event:'request',bytes:2048});
+ assert.ok(chunks.length>0);
+ assert.ok(chunks.at(-1).some(x=>x!==0),'decoded MP3 produces nonzero PCM');
+ await renderer.evaluate("document.getElementById('mute').click()");
+ await sleep(20);
+ listener({event:'request',bytes:2048});
+ assert.ok(chunks.at(-1).every(x=>x===0),'mute clears the output chunk');
+ await renderer.evaluate("document.getElementById('pause').click()");
+ assert.ok(closed>0,'pause closes the audio output');
+ process.stdout.write('QML real MP3 PCM playback passed\n');
+}finally{renderer.dispose()}

package/test/helpers/flea-sandbox.js

@@ -0,0 +1,48 @@
+import { mkdtempSync, mkdirSync, symlinkSync, rmSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+// Application tests own every XDG directory. Backend replies are never replaced.
+export function fleaSandbox(flea, omarchy) {
+  const dir = mkdtempSync('/tmp/qml-flea-'),
+    saved = {};
+  const values = {
+    HOME: join(dir, 'home'),
+    XDG_CONFIG_HOME: join(dir, 'config'),
+    XDG_STATE_HOME: join(dir, 'state'),
+    XDG_DATA_HOME: join(dir, 'data'),
+    XDG_CACHE_HOME: join(dir, 'cache'),
+    QML_IMPORT_PATH: join(dir, 'imports'),
+    HYPRLAND_INSTANCE_SIGNATURE: '',
+    FLEA_BIN: process.env.FLEA_BIN || join(dir, 'no-flea-backend'),
+  };
+  for (const [key, value] of Object.entries(values)) {
+    saved[key] = process.env[key];
+    process.env[key] = value;
+  }
+  for (const key of [
+    'HOME',
+    'XDG_CONFIG_HOME',
+    'XDG_STATE_HOME',
+    'XDG_DATA_HOME',
+    'XDG_CACHE_HOME',
+  ])
+    mkdirSync(values[key], { recursive: true });
+  mkdirSync(join(dir, 'imports/qs'), { recursive: true });
+  for (const name of ['Commons', 'Ui'])
+    symlinkSync(
+      resolve(omarchy, 'shell', name),
+      join(dir, 'imports/qs', name),
+      'dir',
+    );
+  return {
+    dir,
+    flea: resolve(flea),
+    values,
+    close() {
+      for (const [key, value] of Object.entries(saved)) {
+        if (value === undefined) delete process.env[key];
+        else process.env[key] = value;
+      }
+      rmSync(dir, { recursive: true, force: true });
+    },
+  };
+}