bunite-core 0.0.1 → 0.0.3

package/src/native/win/native_host_utils.cpp

@@ -0,0 +1,314 @@
+#include "native_host_internal.h"
+
+namespace bunite_win {
+
+// ---------------------------------------------------------------------------
+// String / encoding utilities
+// ---------------------------------------------------------------------------
+
+std::wstring utf8ToWide(const std::string& value) {
+  if (value.empty()) {
+    return {};
+  }
+
+  const int required = MultiByteToWideChar(CP_UTF8, 0, value.c_str(), -1, nullptr, 0);
+  if (required <= 0) {
+    return {};
+  }
+
+  std::wstring converted(required - 1, L'\0');
+  MultiByteToWideChar(CP_UTF8, 0, value.c_str(), -1, converted.data(), required);
+  return converted;
+}
+
+std::string escapeJsonString(const std::string& value) {
+  std::string escaped;
+  escaped.reserve(value.size());
+
+  for (const unsigned char ch : value) {
+    switch (ch) {
+      case '\\':
+        escaped += "\\\\";
+        break;
+      case '"':
+        escaped += "\\\"";
+        break;
+      case '\n':
+        escaped += "\\n";
+        break;
+      case '\r':
+        escaped += "\\r";
+        break;
+      case '\t':
+        escaped += "\\t";
+        break;
+      default:
+        if (ch < 0x20) {
+          char buffer[7];
+          std::snprintf(buffer, sizeof(buffer), "\\u%04x", ch);
+          escaped += buffer;
+        } else {
+          escaped.push_back(static_cast<char>(ch));
+        }
+        break;
+    }
+  }
+
+  return escaped;
+}
+
+std::vector<std::string> splitButtonLabels(const std::string& buttons_csv) {
+  std::vector<std::string> labels;
+  if (buttons_csv.empty()) {
+    return labels;
+  }
+
+  std::stringstream stream(buttons_csv);
+  std::string label;
+  while (std::getline(stream, label, '\x1f')) {
+    const size_t first = label.find_first_not_of(" \t");
+    if (first == std::string::npos) {
+      continue;
+    }
+    const size_t last = label.find_last_not_of(" \t");
+    std::string normalized = label.substr(first, last - first + 1);
+    std::transform(
+      normalized.begin(),
+      normalized.end(),
+      normalized.begin(),
+      [](unsigned char ch) { return static_cast<char>(std::tolower(ch)); }
+    );
+    if (!normalized.empty()) {
+      labels.push_back(normalized);
+    }
+  }
+
+  return labels;
+}
+
+std::string trimAsciiWhitespace(const std::string& value) {
+  const size_t first = value.find_first_not_of(" \t\r\n");
+  if (first == std::string::npos) {
+    return {};
+  }
+  const size_t last = value.find_last_not_of(" \t\r\n");
+  return value.substr(first, last - first + 1);
+}
+
+std::string toLowerAscii(std::string value) {
+  std::transform(
+    value.begin(),
+    value.end(),
+    value.begin(),
+    [](unsigned char ch) { return static_cast<char>(std::tolower(ch)); }
+  );
+  return value;
+}
+
+// ---------------------------------------------------------------------------
+// Chromium flags parsing
+// ---------------------------------------------------------------------------
+
+
+// Simple flat JSON object parser for chromiumFlags.
+// Input is always a JSON-serialized Record<string, string | boolean> from TS.
+// Does not depend on CEF, so it can run before CefInitialize.
+std::map<std::string, std::string> parseChromiumFlagsJson(const std::string& json) {
+  std::map<std::string, std::string> flags;
+  if (json.empty()) {
+    return flags;
+  }
+
+  size_t pos = json.find('{');
+  if (pos == std::string::npos) {
+    return flags;
+  }
+  ++pos;
+
+  auto skipWhitespace = [&]() {
+    while (pos < json.size() && (json[pos] == ' ' || json[pos] == '\t' || json[pos] == '\n' || json[pos] == '\r')) {
+      ++pos;
+    }
+  };
+
+  auto parseString = [&]() -> std::string {
+    if (pos >= json.size() || json[pos] != '"') {
+      return {};
+    }
+    ++pos;
+    std::string result;
+    while (pos < json.size() && json[pos] != '"') {
+      if (json[pos] == '\\' && pos + 1 < json.size()) {
+        ++pos;
+      }
+      result += json[pos++];
+    }
+    if (pos < json.size()) {
+      ++pos; // closing quote
+    }
+    return result;
+  };
+
+  while (pos < json.size()) {
+    skipWhitespace();
+    if (pos >= json.size() || json[pos] == '}') {
+      break;
+    }
+    if (json[pos] == ',') {
+      ++pos;
+      continue;
+    }
+
+    std::string key = parseString();
+    if (key.empty()) {
+      break;
+    }
+
+    skipWhitespace();
+    if (pos >= json.size() || json[pos] != ':') {
+      break;
+    }
+    ++pos;
+    skipWhitespace();
+
+    if (pos >= json.size()) {
+      break;
+    }
+
+    if (json[pos] == '"') {
+      flags[key] = parseString();
+    } else if (json.compare(pos, 4, "true") == 0) {
+      flags[key] = "true";
+      pos += 4;
+    } else if (json.compare(pos, 5, "false") == 0) {
+      flags[key] = "false";
+      pos += 5;
+    } else {
+      while (pos < json.size() && json[pos] != ',' && json[pos] != '}') {
+        ++pos;
+      }
+    }
+  }
+
+  return flags;
+}
+
+// ---------------------------------------------------------------------------
+// Navigation rules
+// ---------------------------------------------------------------------------
+
+bool globMatchCaseInsensitive(const std::string& pattern, const std::string& value) {
+  size_t pattern_index = 0;
+  size_t value_index = 0;
+  size_t star_pattern_index = std::string::npos;
+  size_t star_value_index = 0;
+
+  while (value_index < value.size()) {
+    if (
+      pattern_index < pattern.size() &&
+      std::tolower(static_cast<unsigned char>(pattern[pattern_index])) ==
+        std::tolower(static_cast<unsigned char>(value[value_index]))
+    ) {
+      pattern_index += 1;
+      value_index += 1;
+    } else if (pattern_index < pattern.size() && pattern[pattern_index] == '*') {
+      star_pattern_index = pattern_index++;
+      star_value_index = value_index;
+    } else if (star_pattern_index != std::string::npos) {
+      pattern_index = star_pattern_index + 1;
+      value_index = ++star_value_index;
+    } else {
+      return false;
+    }
+  }
+
+  while (pattern_index < pattern.size() && pattern[pattern_index] == '*') {
+    pattern_index += 1;
+  }
+
+  return pattern_index == pattern.size();
+}
+
+std::vector<std::string> parseNavigationRulesJson(const std::string& rules_json) {
+  std::vector<std::string> rules;
+  if (rules_json.empty()) {
+    return rules;
+  }
+
+  CefRefPtr<CefValue> parsed = CefParseJSON(rules_json, JSON_PARSER_RFC);
+  if (!parsed || parsed->GetType() != VTYPE_LIST) {
+    return rules;
+  }
+
+  CefRefPtr<CefListValue> list = parsed->GetList();
+  if (!list) {
+    return rules;
+  }
+
+  rules.reserve(list->GetSize());
+  for (size_t index = 0; index < list->GetSize(); index += 1) {
+    if (list->GetType(index) != VTYPE_STRING) {
+      continue;
+    }
+
+    const std::string rule = list->GetString(index).ToString();
+    if (!rule.empty()) {
+      rules.push_back(rule);
+    }
+  }
+
+  return rules;
+}
+
+bool shouldAlwaysAllowNavigationUrl(const std::string& url) {
+  return url == "about:blank" || url.rfind("appres://app.internal/internal/", 0) == 0;
+}
+
+bool shouldAllowNavigation(const ViewHost* view, const std::string& url) {
+  if (!view || shouldAlwaysAllowNavigationUrl(url) || view->navigation_rules.empty()) {
+    return true;
+  }
+
+  bool allowed = true; // Match electrobun's last-match-wins, default-allow semantics.
+  for (const std::string& raw_rule : view->navigation_rules) {
+    const bool is_block_rule = !raw_rule.empty() && raw_rule.front() == '^';
+    const std::string pattern = is_block_rule ? raw_rule.substr(1) : raw_rule;
+
+    if (pattern.empty()) {
+      continue;
+    }
+    if (globMatchCaseInsensitive(pattern, url)) {
+      allowed = !is_block_rule;
+    }
+  }
+
+  return allowed;
+}
+
+// ---------------------------------------------------------------------------
+// Event emit
+// ---------------------------------------------------------------------------
+
+void emitWindowEvent(uint32_t window_id, const char* event_name, const std::string& payload) {
+  BuniteWindowEventHandler handler = nullptr;
+  {
+    std::lock_guard<std::mutex> lock(g_runtime.lifecycle_mutex);
+    handler = g_runtime.window_event_handler;
+  }
+  if (handler) {
+    handler(window_id, _strdup(event_name ? event_name : ""), _strdup(payload.c_str()));
+  }
+}
+
+void emitWebviewEvent(uint32_t view_id, const char* event_name, const std::string& payload) {
+  BuniteWebviewEventHandler handler = nullptr;
+  {
+    std::lock_guard<std::mutex> lock(g_runtime.lifecycle_mutex);
+    handler = g_runtime.webview_event_handler;
+  }
+  if (handler) {
+    handler(view_id, _strdup(event_name ? event_name : ""), _strdup(payload.c_str()));
+  }
+}
+
+} // namespace bunite_win

package/src/native/win/process_helper_win.cpp

@@ -1,26 +1,126 @@
-#include "include/cef_app.h"
-
-#include <windows.h>
-
-class BuniteHelperApp : public CefApp {
-public:
-  void OnRegisterCustomSchemes(CefRawPtr<CefSchemeRegistrar> registrar) override {
-    registrar->AddCustomScheme(
-      "views",
-      CEF_SCHEME_OPTION_STANDARD |
-        CEF_SCHEME_OPTION_CORS_ENABLED |
-        CEF_SCHEME_OPTION_SECURE |
-        CEF_SCHEME_OPTION_CSP_BYPASSING |
-        CEF_SCHEME_OPTION_FETCH_ENABLED
-    );
-  }
-
-private:
-  IMPLEMENT_REFCOUNTING(BuniteHelperApp);
-};
-
-int APIENTRY wWinMain(HINSTANCE hInstance, HINSTANCE, PWSTR, int) {
-  CefMainArgs main_args(hInstance);
-  CefRefPtr<CefApp> app = new BuniteHelperApp();
-  return CefExecuteProcess(main_args, app, nullptr);
-}
+#include "include/cef_app.h"
+#include "include/cef_parser.h"
+#include "include/cef_v8.h"
+
+#include <windows.h>
+
+#include <map>
+#include <string>
+
+namespace {
+
+struct PreloadScriptInfo {
+  std::string script;
+  std::vector<std::string> allowed_origins; // e.g. "http://localhost:3000"
+};
+
+std::string getUrlOrigin(const std::string& url) {
+  CefURLParts parts;
+  if (!CefParseURL(url, parts)) {
+    return "";
+  }
+  const std::string scheme = CefString(&parts.scheme).ToString();
+  const std::string host = CefString(&parts.host).ToString();
+  const std::string port = CefString(&parts.port).ToString();
+  if (scheme.empty() || host.empty()) return "";
+  if (port.empty()) return scheme + "://" + host;
+  return scheme + "://" + host + ":" + port;
+}
+
+} // namespace
+
+class BuniteHelperApp : public CefApp, public CefRenderProcessHandler {
+public:
+  CefRefPtr<CefRenderProcessHandler> GetRenderProcessHandler() override {
+    return this;
+  }
+
+  void OnRegisterCustomSchemes(CefRawPtr<CefSchemeRegistrar> registrar) override {
+    registrar->AddCustomScheme(
+      "appres",
+      CEF_SCHEME_OPTION_STANDARD |
+        CEF_SCHEME_OPTION_CORS_ENABLED |
+        CEF_SCHEME_OPTION_SECURE |
+        CEF_SCHEME_OPTION_CSP_BYPASSING |
+        CEF_SCHEME_OPTION_FETCH_ENABLED
+    );
+  }
+
+  void OnBrowserCreated(
+    CefRefPtr<CefBrowser> browser,
+    CefRefPtr<CefDictionaryValue> extra_info
+  ) override {
+    if (extra_info && (extra_info->HasKey("preloadScript") || extra_info->HasKey("preloadOrigins"))) {
+      PreloadScriptInfo info;
+      if (extra_info->HasKey("preloadScript")) {
+        info.script = extra_info->GetString("preloadScript").ToString();
+      }
+      if (extra_info->HasKey("preloadOrigins")) {
+        auto list = extra_info->GetList("preloadOrigins");
+        for (size_t i = 0; i < list->GetSize(); ++i) {
+          info.allowed_origins.push_back(list->GetString(i).ToString());
+        }
+      }
+      preload_scripts_[browser->GetIdentifier()] = std::move(info);
+    }
+  }
+
+  void OnBrowserDestroyed(CefRefPtr<CefBrowser> browser) override {
+    preload_scripts_.erase(browser->GetIdentifier());
+  }
+
+  void OnContextCreated(
+    CefRefPtr<CefBrowser> browser,
+    CefRefPtr<CefFrame> frame,
+    CefRefPtr<CefV8Context> context
+  ) override {
+    if (!frame->IsMain()) return;
+
+    const std::string url = frame->GetURL().ToString();
+    if (url.empty() || url == "about:blank") return;
+
+    const auto it = preload_scripts_.find(browser->GetIdentifier());
+    if (it == preload_scripts_.end() || it->second.script.empty()) return;
+
+    const bool is_appres = url.rfind("appres://app.internal/", 0) == 0;
+    bool is_allowed_origin = false;
+    if (!it->second.allowed_origins.empty()) {
+      const std::string origin = getUrlOrigin(url);
+      for (const auto& allowed : it->second.allowed_origins) {
+        if (origin == allowed) { is_allowed_origin = true; break; }
+      }
+    }
+    if (!is_appres && !is_allowed_origin) return;
+
+    // Skip isolated-world contexts (DevTools overlay, extensions, etc.) that
+    // lack full Web APIs. The page's main-world context has customElements;
+    // DevTools-injected contexts do not.
+    context->Enter();
+    CefRefPtr<CefV8Value> ce = context->GetGlobal()->GetValue("customElements");
+    bool is_main_world = ce && !ce->IsNull() && !ce->IsUndefined();
+    context->Exit();
+    if (!is_main_world) return;
+
+    CefRefPtr<CefV8Value> retval;
+    CefRefPtr<CefV8Exception> exception;
+    bool ok = context->Eval(it->second.script, "bunite://preload", 0, retval, exception);
+    if (!ok && exception) {
+      std::string msg = exception->GetMessage().ToString();
+      int line = exception->GetLineNumber();
+      std::string src_line = exception->GetSourceLine().ToString();
+      LOG(ERROR) << "bunite preload eval failed at line " << line
+                 << ": " << msg << "\n  " << src_line;
+    }
+  }
+
+private:
+  std::map<int, PreloadScriptInfo> preload_scripts_;
+
+  IMPLEMENT_REFCOUNTING(BuniteHelperApp);
+};
+
+int APIENTRY wWinMain(HINSTANCE hInstance, HINSTANCE, PWSTR, int) {
+  CefMainArgs main_args(hInstance);
+  CefRefPtr<CefApp> app = new BuniteHelperApp();
+  return CefExecuteProcess(main_args, app, nullptr);
+}

package/src/preload/runtime.built.js

@@ -1 +1 @@
-var W=(()=>{let F;return()=>{if(!F){let q=Uint8Array.from(atob(__buniteSecretKeyBase64),(H)=>H.charCodeAt(0));F=crypto.subtle.importKey("raw",q,"AES-GCM",!1,["encrypt","decrypt"])}return F}})();async function X(F){let q=await W(),H=crypto.getRandomValues(new Uint8Array(12)),A=new Uint8Array(await crypto.subtle.encrypt({name:"AES-GCM",iv:H},q,F)),z=new Uint8Array(1+H.length+A.length);return z[0]=1,z.set(H,1),z.set(A,1+H.length),z}async function Y(F){if(F.length<29)throw Error("Invalid bunite RPC frame.");if(F[0]!==1)throw Error("Unsupported bunite RPC frame version.");let q=await W(),H=F.slice(1,13),A=F.slice(13);return new Uint8Array(await crypto.subtle.decrypt({name:"AES-GCM",iv:H},q,A))}function B(F){let q=[];function H(A){if(A===null||A===void 0)q.push(192);else if(A===!0)q.push(195);else if(A===!1)q.push(194);else if(typeof A==="number")if(Number.isInteger(A)&&A>=0&&A<128)q.push(A);else if(Number.isInteger(A)&&A>=-32&&A<0)q.push(A&255);else if(Number.isInteger(A)&&A>=0&&A<=65535)q.push(205,A>>8&255,A&255);else if(Number.isInteger(A)&&A>=0&&A<=4294967295)q.push(206,A>>24&255,A>>16&255,A>>8&255,A&255);else{let z=new ArrayBuffer(9),G=new DataView(z);G.setUint8(0,203),G.setFloat64(1,A);for(let J=0;J<9;J++)q.push(G.getUint8(J))}else if(typeof A==="string"){let z=new TextEncoder().encode(A);if(z.length<32)q.push(160|z.length);else if(z.length<256)q.push(217,z.length);else if(z.length<65536)q.push(218,z.length>>8&255,z.length&255);else q.push(219,z.length>>24&255,z.length>>16&255,z.length>>8&255,z.length&255);for(let G=0;G<z.length;G++)q.push(z[G])}else if(Array.isArray(A)){if(A.length<16)q.push(144|A.length);else if(A.length<65536)q.push(220,A.length>>8&255,A.length&255);else q.push(221,A.length>>24&255,A.length>>16&255,A.length>>8&255,A.length&255);A.forEach(H)}else if(typeof A==="object"){let z=Object.keys(A);if(z.length<16)q.push(128|z.length);else if(z.length<65536)q.push(222,z.length>>8&255,z.length&255);else q.push(223,z.length>>24&255,z.length>>16&255,z.length>>8&255,z.length&255);for(let G of z)H(G),H(A[G])}}return H(F),new Uint8Array(q)}function I(F){let q=0;function H(){let A=F[q++];if(A<=127)return A;if(A>=224)return A-256;if(A===192)return null;if(A===194)return!1;if(A===195)return!0;if(A===204)return F[q++];if(A===205){let z=F[q]<<8|F[q+1];return q+=2,z}if(A===206){let z=(F[q]<<24|F[q+1]<<16|F[q+2]<<8|F[q+3])>>>0;return q+=4,z}if(A===203){let z=new DataView(F.buffer,F.byteOffset+q,8);return q+=8,z.getFloat64(0)}if(A===208){let z=F[q++];return z>127?z-256:z}if(A===209){let z=F[q]<<8|F[q+1];return q+=2,z>32767?z-65536:z}if(A===210){let z=F[q]<<24|F[q+1]<<16|F[q+2]<<8|F[q+3];return q+=4,z}if((A&224)===160){let z=A&31,G=new TextDecoder().decode(F.subarray(q,q+z));return q+=z,G}if(A===217){let z=F[q++],G=new TextDecoder().decode(F.subarray(q,q+z));return q+=z,G}if(A===218){let z=F[q]<<8|F[q+1];q+=2;let G=new TextDecoder().decode(F.subarray(q,q+z));return q+=z,G}if(A===219){let z=(F[q]<<24|F[q+1]<<16|F[q+2]<<8|F[q+3])>>>0;q+=4;let G=new TextDecoder().decode(F.subarray(q,q+z));return q+=z,G}if((A&240)===144){let z=A&15,G=[];for(let J=0;J<z;J++)G.push(H());return G}if(A===220){let z=F[q]<<8|F[q+1];q+=2;let G=[];for(let J=0;J<z;J++)G.push(H());return G}if(A===221){let z=(F[q]<<24|F[q+1]<<16|F[q+2]<<8|F[q+3])>>>0;q+=4;let G=[];for(let J=0;J<z;J++)G.push(H());return G}if((A&240)===128){let z=A&15,G={};for(let J=0;J<z;J++)G[H()]=H();return G}if(A===222){let z=F[q]<<8|F[q+1];q+=2;let G={};for(let J=0;J<z;J++)G[H()]=H();return G}if(A===223){let z=(F[q]<<24|F[q+1]<<16|F[q+2]<<8|F[q+3])>>>0;q+=4;let G={};for(let J=0;J<z;J++)G[H()]=H();return G}if(A===196){let z=F[q++],G=F.slice(q,q+z);return q+=z,G}if(A===197){let z=F[q]<<8|F[q+1];q+=2;let G=F.slice(q,q+z);return q+=z,G}return}return H()}var N=window;N.__bunite??={};N.__buniteWebviewId=__buniteWebviewId;N.__buniteRpcSocketPort=__buniteRpcSocketPort;N.__bunite_encrypt=X;N.__bunite_decrypt=Y;N.bunite=N.__bunite;N.bunite.invoke=(()=>{let F=null,q=1,H=new Map;function A(){let G=N.__bunite?._socket;if(G&&G.readyState<=WebSocket.OPEN&&G!==F)return F=G,z(G),G;if(F&&F.readyState<=WebSocket.OPEN)return F;return F=new WebSocket(`ws://localhost:${__buniteRpcSocketPort}/socket?webviewId=${__buniteWebviewId}`),F.binaryType="arraybuffer",N.__bunite._socket=F,z(F),F}function z(G){G.addEventListener("message",async(J)=>{try{let Q=await Y(new Uint8Array(J.data)),M=I(Q);if(M?.type==="response"&&M.scope==="global"){let O=H.get(M.id);if(O)H.delete(M.id),clearTimeout(O.timeout),M.success?O.resolve(M.payload):O.reject(Error(M.error||"Unknown error"))}}catch{}})}return(G,J)=>new Promise((Q,M)=>{let O=A(),T=q++,Z=setTimeout(()=>{H.delete(T),M(Error(`bunite.invoke timed out: ${G}`))},15000);H.set(T,{resolve:Q,reject:M,timeout:Z});let _={type:"request",id:T,method:G,params:J??null,scope:"global"},U=async()=>{let $=await X(B(_));O.send($.buffer)};if(O.readyState===WebSocket.OPEN)U();else O.addEventListener("open",()=>U(),{once:!0})})})();
+class _{element;onBoundsChange;observer=null;rafId=0;lastRect={x:0,y:0,width:0,height:0};dirty=!1;stopped=!1;constructor(z,q){this.element=z,this.onBoundsChange=q}start(){this.observer=new ResizeObserver(()=>this.markDirty()),this.observer.observe(this.element),this.scheduleFrame()}stop(){if(this.stopped=!0,this.observer?.disconnect(),this.observer=null,this.rafId)cancelAnimationFrame(this.rafId),this.rafId=0}markDirty(){this.dirty=!0}scheduleFrame(){if(this.stopped)return;this.rafId=requestAnimationFrame(()=>{this.flush(),this.scheduleFrame()})}flush(){let z=window.devicePixelRatio||1,q=this.element.getBoundingClientRect(),J={x:Math.round(q.x*z),y:Math.round(q.y*z),width:Math.round(q.width*z),height:Math.round(q.height*z)};if(!this.dirty&&J.x===this.lastRect.x&&J.y===this.lastRect.y&&J.width===this.lastRect.width&&J.height===this.lastRect.height)return;this.dirty=!1,this.lastRect=J,this.onBoundsChange(J)}}class $ extends HTMLElement{static observedAttributes=["src"];_surfaceId=null;_syncCtrl=null;_initPromise=null;_aborted=!1;_pendingSrc=null;_syncHidden=!1;_userHidden=!1;_layoutObserver=null;_unsubNavigate=null;constructor(){super()}connectedCallback(){this._aborted=!1,this._syncHidden=!1,this._userHidden=!1,this._unsubNavigate=bunite.on("__bunite:webview.didNavigate",(z)=>{if(z?.surfaceId===this._surfaceId)this.dispatchEvent(new CustomEvent("did-navigate",{detail:{url:z.url}}))}),this._waitForLayout()}_waitForLayout(){if(this._layoutObserver)return;let z=()=>{if(!this.isConnected||this._aborted)return!0;let q=this.getBoundingClientRect();if(q.width>0&&q.height>0){if(this.getAttribute("src")||this._pendingSrc||"")this.initSurface();return!0}return!1};requestAnimationFrame(()=>{if(z())return;this._layoutObserver=new ResizeObserver(()=>{if(z())this._layoutObserver?.disconnect(),this._layoutObserver=null}),this._layoutObserver.observe(this)})}disconnectedCallback(){if(this._aborted=!0,this._unsubNavigate?.(),this._unsubNavigate=null,this._layoutObserver?.disconnect(),this._layoutObserver=null,this._syncCtrl?.stop(),this._syncCtrl=null,this._surfaceId!=null){let z=this._surfaceId;this._surfaceId=null,bunite.invoke("__bunite:surface.remove",{surfaceId:z}).catch(()=>{})}else if(this._initPromise)this._initPromise.then((z)=>{bunite.invoke("__bunite:surface.remove",{surfaceId:z.surfaceId}).catch(()=>{})}).catch(()=>{});this._initPromise=null}attributeChangedCallback(z,q,J){if(z!=="src")return;if(this._surfaceId!=null)bunite.invoke("__bunite:webview.navigate",{surfaceId:this._surfaceId,url:J||""}).catch(()=>{});else if(this._initPromise)this._pendingSrc=J||"";else if(this.isConnected&&!this._aborted&&J)this._waitForLayout()}setHidden(z){this._userHidden=z,this._applySurfaceHidden()}goBack(){if(this._surfaceId!=null)bunite.invoke("__bunite:webview.goBack",{surfaceId:this._surfaceId}).catch(()=>{})}reload(){if(this._surfaceId!=null)bunite.invoke("__bunite:webview.reload",{surfaceId:this._surfaceId}).catch(()=>{})}navigate(z){this.setAttribute("src",z)}_applySurfaceHidden(){if(this._surfaceId==null)return;bunite.invoke("__bunite:surface.setHidden",{surfaceId:this._surfaceId,hidden:this._userHidden||this._syncHidden}).catch(()=>{})}initSurface(){if(this._surfaceId!=null||this._initPromise!=null)return;let z=window.devicePixelRatio||1,q=this.getBoundingClientRect(),J=this._pendingSrc||this.getAttribute("src")||"";this._pendingSrc=null;let F=bunite.invoke("__bunite:surface.init",{src:J,x:Math.round(q.x*z),y:Math.round(q.y*z),width:Math.round(q.width*z),height:Math.round(q.height*z),hidden:this._userHidden});this._initPromise=F,F.then((G)=>{if(this._initPromise!==F)return;if(this._aborted){bunite.invoke("__bunite:surface.remove",{surfaceId:G.surfaceId}).catch(()=>{});return}if(this._surfaceId=G.surfaceId,this._userHidden)this._applySurfaceHidden();if(this._pendingSrc!=null){let H=this._pendingSrc;this._pendingSrc=null,bunite.invoke("__bunite:webview.navigate",{surfaceId:this._surfaceId,url:H}).catch(()=>{})}this._syncCtrl=new _(this,(H)=>{if(this._surfaceId==null)return;if(H.width===0&&H.height===0){if(!this._syncHidden)this._syncHidden=!0,this._applySurfaceHidden();return}if(this._syncHidden)this._syncHidden=!1,this._applySurfaceHidden();bunite.invoke("__bunite:surface.resize",{surfaceId:this._surfaceId,x:H.x,y:H.y,w:H.width,h:H.height}).catch(()=>{})}),this._syncCtrl.start()}).catch(()=>{}).finally(()=>{if(this._initPromise===F)this._initPromise=null})}}if(typeof customElements<"u"){customElements.define("bunite-webview",$);let z=()=>bunite.invoke("__bunite:surface.bringAllVisiblesToFront").catch(()=>{});document.addEventListener("pointerdown",z,!0),document.addEventListener("dragstart",()=>{bunite.invoke("__bunite:surface.setAllPassthrough",{passthrough:!0}).catch(()=>{})},!0),document.addEventListener("dragend",()=>{bunite.invoke("__bunite:surface.setAllPassthrough",{passthrough:!1}).catch(()=>{}),z()},!0)}var Z=(()=>{let z;return()=>{if(!z){let q=Uint8Array.from(atob(__buniteSecretKeyBase64),(J)=>J.charCodeAt(0));z=crypto.subtle.importKey("raw",q,"AES-GCM",!1,["encrypt","decrypt"])}return z}})();async function K(z){let q=await Z(),J=crypto.getRandomValues(new Uint8Array(12)),F=new Uint8Array(await crypto.subtle.encrypt({name:"AES-GCM",iv:J},q,z)),G=new Uint8Array(1+J.length+F.length);return G[0]=1,G.set(J,1),G.set(F,1+J.length),G}async function W(z){if(z.length<29)throw Error("Invalid bunite RPC frame.");if(z[0]!==1)throw Error("Unsupported bunite RPC frame version.");let q=await Z(),J=z.slice(1,13),F=z.slice(13);return new Uint8Array(await crypto.subtle.decrypt({name:"AES-GCM",iv:J},q,F))}function I(z){let q=[];function J(F){if(F===null||F===void 0)q.push(192);else if(F===!0)q.push(195);else if(F===!1)q.push(194);else if(typeof F==="number")if(Number.isInteger(F)&&F>=0&&F<128)q.push(F);else if(Number.isInteger(F)&&F>=-32&&F<0)q.push(F&255);else if(Number.isInteger(F)&&F>=0&&F<=65535)q.push(205,F>>8&255,F&255);else if(Number.isInteger(F)&&F>=0&&F<=4294967295)q.push(206,F>>24&255,F>>16&255,F>>8&255,F&255);else{let G=new ArrayBuffer(9),H=new DataView(G);H.setUint8(0,203),H.setFloat64(1,F);for(let M=0;M<9;M++)q.push(H.getUint8(M))}else if(typeof F==="string"){let G=new TextEncoder().encode(F);if(G.length<32)q.push(160|G.length);else if(G.length<256)q.push(217,G.length);else if(G.length<65536)q.push(218,G.length>>8&255,G.length&255);else q.push(219,G.length>>24&255,G.length>>16&255,G.length>>8&255,G.length&255);for(let H=0;H<G.length;H++)q.push(G[H])}else if(Array.isArray(F)){if(F.length<16)q.push(144|F.length);else if(F.length<65536)q.push(220,F.length>>8&255,F.length&255);else q.push(221,F.length>>24&255,F.length>>16&255,F.length>>8&255,F.length&255);F.forEach(J)}else if(typeof F==="object"){let G=Object.keys(F);if(G.length<16)q.push(128|G.length);else if(G.length<65536)q.push(222,G.length>>8&255,G.length&255);else q.push(223,G.length>>24&255,G.length>>16&255,G.length>>8&255,G.length&255);for(let H of G)J(H),J(F[H])}}return J(z),new Uint8Array(q)}function D(z){let q=0;function J(){let F=z[q++];if(F<=127)return F;if(F>=224)return F-256;if(F===192)return null;if(F===194)return!1;if(F===195)return!0;if(F===204)return z[q++];if(F===205){let G=z[q]<<8|z[q+1];return q+=2,G}if(F===206){let G=(z[q]<<24|z[q+1]<<16|z[q+2]<<8|z[q+3])>>>0;return q+=4,G}if(F===203){let G=new DataView(z.buffer,z.byteOffset+q,8);return q+=8,G.getFloat64(0)}if(F===208){let G=z[q++];return G>127?G-256:G}if(F===209){let G=z[q]<<8|z[q+1];return q+=2,G>32767?G-65536:G}if(F===210){let G=z[q]<<24|z[q+1]<<16|z[q+2]<<8|z[q+3];return q+=4,G}if((F&224)===160){let G=F&31,H=new TextDecoder().decode(z.subarray(q,q+G));return q+=G,H}if(F===217){let G=z[q++],H=new TextDecoder().decode(z.subarray(q,q+G));return q+=G,H}if(F===218){let G=z[q]<<8|z[q+1];q+=2;let H=new TextDecoder().decode(z.subarray(q,q+G));return q+=G,H}if(F===219){let G=(z[q]<<24|z[q+1]<<16|z[q+2]<<8|z[q+3])>>>0;q+=4;let H=new TextDecoder().decode(z.subarray(q,q+G));return q+=G,H}if((F&240)===144){let G=F&15,H=[];for(let M=0;M<G;M++)H.push(J());return H}if(F===220){let G=z[q]<<8|z[q+1];q+=2;let H=[];for(let M=0;M<G;M++)H.push(J());return H}if(F===221){let G=(z[q]<<24|z[q+1]<<16|z[q+2]<<8|z[q+3])>>>0;q+=4;let H=[];for(let M=0;M<G;M++)H.push(J());return H}if((F&240)===128){let G=F&15,H={};for(let M=0;M<G;M++)H[J()]=J();return H}if(F===222){let G=z[q]<<8|z[q+1];q+=2;let H={};for(let M=0;M<G;M++)H[J()]=J();return H}if(F===223){let G=(z[q]<<24|z[q+1]<<16|z[q+2]<<8|z[q+3])>>>0;q+=4;let H={};for(let M=0;M<G;M++)H[J()]=J();return H}if(F===196){let G=z[q++],H=z.slice(q,q+G);return q+=G,H}if(F===197){let G=z[q]<<8|z[q+1];q+=2;let H=z.slice(q,q+G);return q+=G,H}return}return J()}var N=window;N.__bunite??={};N.__buniteWebviewId=__buniteWebviewId;N.__buniteRpcSocketPort=__buniteRpcSocketPort;N.__bunite_encrypt=K;N.__bunite_decrypt=W;var R=new Map,U=new Map,Q=null,X=!1;function T(z){if(X)return;X=!0,z.addEventListener("message",async(q)=>{try{let J=await W(new Uint8Array(q.data)),F=D(J);if(F?.type==="response"&&F.scope==="global"){let G=U.get(F.id);if(G)U.delete(F.id),clearTimeout(G.timeout),F.success?G.resolve(F.payload):G.reject(Error(F.error||"Unknown error"))}else if(F?.type==="event"){let G=R.get(F.channel);if(G)for(let H of G)H(F.data)}}catch{}}),z.addEventListener("close",()=>{X=!1,Q=null})}function O(){let z=N.__bunite?._socket;if(z&&z.readyState<=WebSocket.OPEN&&z!==Q)return Q=z,T(z),z;if(Q&&Q.readyState<=WebSocket.OPEN)return Q;return Q=new WebSocket(`ws://localhost:${__buniteRpcSocketPort}/socket?webviewId=${__buniteWebviewId}`),Q.binaryType="arraybuffer",N.__bunite._socket=Q,T(Q),Q}N.bunite=N.__bunite;N.bunite.on=(z,q)=>{O();let J=R.get(z);if(!J)J=new Set,R.set(z,J);return J.add(q),()=>{J.delete(q)}};N.bunite.off=(z,q)=>{R.get(z)?.delete(q)};var S=1;N.bunite.invoke=(z,q)=>new Promise((J,F)=>{let G=O(),H=S++,M=setTimeout(()=>{U.delete(H),F(Error(`bunite.invoke timed out: ${z}`))},15000);U.set(H,{resolve:J,reject:F,timeout:M});let B={type:"request",id:H,method:z,params:q??null,scope:"global"},Y=async()=>{let A=await K(I(B));G.send(A.buffer)};if(G.readyState===WebSocket.OPEN)Y();else G.addEventListener("open",()=>Y(),{once:!0})});

package/src/preload/runtime.ts

@@ -1,4 +1,4 @@
-// Preload runtime — built once at package build time, injected into every views:// page.
+// Preload runtime — built once at package build time, injected into every appres:// page.
 // The config variables (__buniteWebviewId, __buniteRpcSocketPort, __buniteSecretKeyBase64)
 // are injected by inline.ts as a small preamble before this script.
 
@@ -147,50 +147,72 @@ w.__buniteRpcSocketPort = __buniteRpcSocketPort;
 w.__bunite_encrypt = buniteEncrypt;
 w.__bunite_decrypt = buniteDecrypt;
 
-// --- bunite.invoke: global IPC ---
+// --- Shared WebSocket transport ---
+
+const eventListeners = new Map<string, Set<(data: any) => void>>();
+const pending = new Map<number, { resolve: (v: unknown) => void; reject: (e: Error) => void; timeout: ReturnType<typeof setTimeout> }>();
+let socket: WebSocket | null = null;
+let listenerAttached = false;
+
+function attachListener(ws: WebSocket) {
+  if (listenerAttached) return;
+  listenerAttached = true;
+  ws.addEventListener("message", async (event) => {
+    try {
+      const decrypted = await buniteDecrypt(new Uint8Array(event.data as ArrayBuffer));
+      const packet = mpDecode(decrypted) as any;
+      if (packet?.type === "response" && packet.scope === "global") {
+        const p = pending.get(packet.id);
+        if (p) {
+          pending.delete(packet.id);
+          clearTimeout(p.timeout);
+          packet.success ? p.resolve(packet.payload) : p.reject(new Error(packet.error || "Unknown error"));
+        }
+      } else if (packet?.type === "event") {
+        const set = eventListeners.get(packet.channel);
+        if (set) for (const fn of set) fn(packet.data);
+      }
+    } catch { /* ignore malformed frames */ }
+  });
+  ws.addEventListener("close", () => { listenerAttached = false; socket = null; });
+}
 
-w.bunite = w.__bunite;
-w.bunite.invoke = (() => {
-  let socket: WebSocket | null = null;
-  let nextId = 1;
-  const pending = new Map<number, { resolve: (v: unknown) => void; reject: (e: Error) => void; timeout: ReturnType<typeof setTimeout> }>();
-
-  function ensureSocket(): WebSocket {
-    // Reuse socket opened by BuniteView if available
-    const existing = w.__bunite?._socket;
-    if (existing && existing.readyState <= WebSocket.OPEN && existing !== socket) {
-      socket = existing;
-      attachListener(existing);
-      return existing;
-    }
-    if (socket && socket.readyState <= WebSocket.OPEN) return socket;
-    socket = new WebSocket(
-      `ws://localhost:${__buniteRpcSocketPort}/socket?webviewId=${__buniteWebviewId}`
-    );
-    socket.binaryType = "arraybuffer";
-    w.__bunite._socket = socket;
-    attachListener(socket);
-    return socket;
+function ensureSocket(): WebSocket {
+  const existing = w.__bunite?._socket;
+  if (existing && existing.readyState <= WebSocket.OPEN && existing !== socket) {
+    socket = existing;
+    attachListener(existing);
+    return existing;
   }
+  if (socket && socket.readyState <= WebSocket.OPEN) return socket;
+  socket = new WebSocket(
+    `ws://localhost:${__buniteRpcSocketPort}/socket?webviewId=${__buniteWebviewId}`
+  );
+  socket.binaryType = "arraybuffer";
+  w.__bunite._socket = socket;
+  attachListener(socket);
+  return socket;
+}
 
-  function attachListener(ws: WebSocket) {
-    ws.addEventListener("message", async (event) => {
-      try {
-        const decrypted = await buniteDecrypt(new Uint8Array(event.data as ArrayBuffer));
-        const packet = mpDecode(decrypted) as any;
-        if (packet?.type === "response" && packet.scope === "global") {
-          const p = pending.get(packet.id);
-          if (p) {
-            pending.delete(packet.id);
-            clearTimeout(p.timeout);
-            packet.success ? p.resolve(packet.payload) : p.reject(new Error(packet.error || "Unknown error"));
-          }
-        }
-      } catch { /* ignore malformed frames */ }
-    });
-  }
+// --- bunite.on/off: main→renderer events ---
+
+w.bunite = w.__bunite;
+w.bunite.on = (channel: string, handler: (data: any) => void) => {
+  ensureSocket();
+  let set = eventListeners.get(channel);
+  if (!set) { set = new Set(); eventListeners.set(channel, set); }
+  set.add(handler);
+  return () => { set!.delete(handler); };
+};
+w.bunite.off = (channel: string, handler: (data: any) => void) => {
+  eventListeners.get(channel)?.delete(handler);
+};
+
+// --- bunite.invoke: global IPC ---
+
+let nextId = 1;
 
-  return (method: string, params?: unknown) =>
+w.bunite.invoke = (method: string, params?: unknown) =>
     new Promise((resolve, reject) => {
       const ws = ensureSocket();
       const id = nextId++;
@@ -212,4 +234,5 @@ w.bunite.invoke = (() => {
         ws.addEventListener("open", () => doSend(), { once: true });
       }
     });
-})();
+
+import "./webviewElement";

package/src/preload/tsconfig.json

@@ -1,5 +1,6 @@
 {
   "compilerOptions": {
+    "composite": true,
     "target": "ES2022",
     "module": "ES2022",
     "moduleResolution": "bundler",
@@ -9,5 +10,5 @@
     "skipLibCheck": true,
     "noEmit": true
   },
-  "include": ["runtime.ts"]
+  "include": ["runtime.ts", "webviewElement.ts"]
 }