bunite-core 0.12.1 → 0.16.0

package/src/native/linux/bunite_linux_ffi.cpp

@@ -1,10 +1,13 @@
 #include "bunite_linux_internal.h"
 #include "webview_storage.h"
 
+#include <cairo.h>
+
 #include <cstdlib>
 #include <cstring>
 #include <mutex>
 #include <string>
+#include <vector>
 
 using bunite_linux::g_runtime;
 using bunite_linux::runOnUiThreadSync;
@@ -133,12 +136,103 @@ extern "C" BUNITE_EXPORT void bunite_view_execute_javascript(uint32_t view_id, c
   });
 }
 
-extern "C" BUNITE_EXPORT void bunite_view_evaluate(uint32_t view_id, uint32_t request_id, const char* /*script*/) {
-  // Stage A: Linux evaluate not yet implemented.
-  std::string payload = "{\"requestId\":" + std::to_string(request_id) +
-                        ",\"ok\":false,\"code\":\"not_supported\","
-                        "\"message\":\"Linux evaluate not implemented (Stage A: Windows only)\"}";
-  bunite_linux::emitWebviewEvent(view_id, "evaluate-result", payload);
+namespace {
+
+struct EvaluateCtx {
+  uint32_t view_id;
+  uint32_t request_id;
+};
+
+void on_evaluate_done(GObject* source, GAsyncResult* res, gpointer user_data) {
+  auto* ctx = static_cast<EvaluateCtx*>(user_data);
+  WebKitWebView* wv = WEBKIT_WEB_VIEW(source);
+  GError* err = nullptr;
+  JSCValue* value = webkit_web_view_evaluate_javascript_finish(wv, res, &err);
+
+  std::string payload = "{\"requestId\":" + std::to_string(ctx->request_id);
+  if (err || !value) {
+    std::string msg = err ? err->message : "evaluate failed";
+    if (err) g_error_free(err);
+    payload += ",\"ok\":false,\"code\":\"runtime_error\","
+               "\"message\":\"" + bunite_linux::escapeJsonString(msg) + "\"}";
+  } else if (!jsc_value_is_string(value)) {
+    payload += ",\"ok\":false,\"code\":\"runtime_error\","
+               "\"message\":\"wrapper returned non-string\"}";
+  } else {
+    char* raw = jsc_value_to_string(value);
+    std::string inner = raw ? raw : "";
+    if (raw) g_free(raw);
+    if (inner.find("\"__bunite_ok\":true") != std::string::npos) {
+      static const std::string prefix = "{\"__bunite_ok\":true,\"value\":";
+      std::string value_json = "null";
+      if (inner.compare(0, prefix.size(), prefix) == 0 &&
+          inner.size() > prefix.size() + 1) {
+        value_json = inner.substr(prefix.size(), inner.size() - prefix.size() - 1);
+      }
+      payload += ",\"ok\":true,\"value\":\"" + bunite_linux::escapeJsonString(value_json) + "\"}";
+    } else {
+      static const std::string codePrefix = "{\"__bunite_ok\":false,\"code\":\"";
+      std::string code = "runtime_error";
+      std::string msg = "script threw";
+      if (inner.compare(0, codePrefix.size(), codePrefix) == 0) {
+        size_t start = codePrefix.size();
+        size_t end = start;
+        while (end < inner.size() && inner[end] != '"') ++end;
+        if (end > start) code = inner.substr(start, end - start);
+        static const std::string msgKey = "\",\"message\":\"";
+        if (end + msgKey.size() <= inner.size() &&
+            inner.compare(end, msgKey.size(), msgKey) == 0) {
+          size_t mstart = end + msgKey.size();
+          size_t mend = mstart;
+          while (mend < inner.size()) {
+            if (inner[mend] == '"' && (mend == mstart || inner[mend - 1] != '\\')) break;
+            ++mend;
+          }
+          if (mend > mstart) msg = inner.substr(mstart, mend - mstart);
+        }
+      }
+      payload += ",\"ok\":false,\"code\":\"" + bunite_linux::escapeJsonString(code) + "\","
+                 "\"message\":\"" + bunite_linux::escapeJsonString(msg) + "\"}";
+    }
+  }
+  if (value) g_object_unref(value);
+  bunite_linux::emitWebviewEvent(ctx->view_id, "evaluate-result", payload);
+  delete ctx;
+}
+
+}  // namespace
+
+extern "C" BUNITE_EXPORT void bunite_view_evaluate(uint32_t view_id, uint32_t request_id, const char* script) {
+  // Wrapper matches WebView2/CEF: try/catch returns JSON envelope string.
+  // jsc_value_to_string delivers the wrapper's return value directly.
+  if (!script) {
+    std::string payload = "{\"requestId\":" + std::to_string(request_id) +
+                          ",\"ok\":false,\"code\":\"runtime_error\","
+                          "\"message\":\"null script\"}";
+    bunite_linux::emitWebviewEvent(view_id, "evaluate-result", payload);
+    return;
+  }
+  std::string wrapped =
+      "(function(){try{return JSON.stringify({__bunite_ok:true,value:("
+      + std::string(script) +
+      ")})}catch(e){var c=(e&&e.name===\"SecurityError\")?\"cross_origin\":\"runtime_error\";"
+      "return JSON.stringify({__bunite_ok:false,code:c,"
+      "message:(e&&e.message)?e.message:String(e),"
+      "name:(e&&e.name)||\"\"})}})()";
+  runOnUiThreadSync([=]() {
+    auto* v = bunite_linux::findView(view_id);
+    if (!v || !v->webview) {
+      std::string payload = "{\"requestId\":" + std::to_string(request_id) +
+                            ",\"ok\":false,\"code\":\"not_supported\","
+                            "\"message\":\"view not ready\"}";
+      bunite_linux::emitWebviewEvent(view_id, "evaluate-result", payload);
+      return;
+    }
+    auto* ctx = new EvaluateCtx{view_id, request_id};
+    webkit_web_view_evaluate_javascript(
+        v->webview, wrapped.c_str(), -1, nullptr, nullptr, nullptr,
+        on_evaluate_done, ctx);
+  });
 }
 
 extern "C" BUNITE_EXPORT void bunite_view_load_url(uint32_t view_id, const char* url) {
@@ -254,6 +348,333 @@ extern "C" BUNITE_EXPORT void bunite_view_remove(uint32_t view_id) {
   runOnUiThreadSync([=]() { bunite_linux::removeView(view_id); });
 }
 
+// Input dispatch — no-op on GTK4 + Wayland (no portable synthetic-input primitive).
+// Capability `click/type/press/scroll: false` is honest; calls are silent no-ops.
+extern "C" BUNITE_EXPORT void bunite_view_click(uint32_t, double, double, int32_t, int32_t, uint32_t) {}
+extern "C" BUNITE_EXPORT void bunite_view_type(uint32_t, const char*) {}
+extern "C" BUNITE_EXPORT void bunite_view_press(uint32_t, int32_t, int32_t, const char*, const char*, const char*, uint32_t, int32_t, bool, int32_t) {}
+extern "C" BUNITE_EXPORT void bunite_view_scroll(uint32_t, double, double, double, double, uint32_t) {}
+extern "C" BUNITE_EXPORT void bunite_view_mouse(uint32_t, int32_t, double, double, int32_t, uint32_t) {}
+
+extern "C" BUNITE_EXPORT void bunite_view_resolve_and_click(
+    uint32_t view_id, uint32_t request_id, const char* /*selector*/, const char* /*frame_id*/,
+    int32_t /*button*/, int32_t /*click_count*/, uint32_t /*modifiers*/) {
+  std::string payload = "{\"requestId\":" + std::to_string(request_id) +
+                        ",\"ok\":false,\"code\":\"not_supported\","
+                        "\"message\":\"WebKitGTK has no synthetic input API\"}";
+  bunite_linux::emitWebviewEvent(view_id, "resolve-and-click-result", payload);
+}
+
+extern "C" BUNITE_EXPORT void bunite_view_respond_dialog(uint32_t view_id, uint32_t request_id,
+                                                          bool accept, const char* text) {
+  bunite_linux::respondToDialogRequest(view_id, request_id, accept, text ? text : "");
+}
+
+// Screenshot — webkit_web_view_get_snapshot → cairo_surface_t → PNG bytes via
+// cairo_surface_write_to_png_stream → g_base64_encode. JPEG path uses GdkPixbuf
+// for `pixbuf_save_to_buffer(... "jpeg" ...)`.
+namespace {
+
+struct LinuxShotCtx {
+  uint32_t view_id;
+  uint32_t request_id;
+  std::string format;  // "png" | "jpeg"
+  int32_t quality;
+};
+
+void emitLinuxShotError(uint32_t view_id, uint32_t request_id, const char* code, const std::string& msg) {
+  std::string payload = "{\"requestId\":" + std::to_string(request_id) +
+                        ",\"ok\":false,\"code\":\"" + code + "\","
+                        "\"message\":\"" + bunite_linux::escapeJsonString(msg) + "\"}";
+  bunite_linux::emitWebviewEvent(view_id, "screenshot-result", payload);
+}
+
+// WebKitGTK 2.52+ snapshot returns GdkTexture (was cairo_surface_t pre-2.52).
+// PNG: gdk_texture_save_to_png_bytes — built-in. JPEG: bridge through GdkPixbuf
+// via gdk_pixbuf_get_from_texture (non-deprecated GTK4 path).
+void on_snapshot_done(GObject* source, GAsyncResult* res, gpointer user_data) {
+  auto* ctx = static_cast<LinuxShotCtx*>(user_data);
+  WebKitWebView* wv = WEBKIT_WEB_VIEW(source);
+  GError* err = nullptr;
+  GdkTexture* texture = webkit_web_view_get_snapshot_finish(wv, res, &err);
+  if (!texture) {
+    emitLinuxShotError(ctx->view_id, ctx->request_id, "runtime_error",
+                       err ? err->message : "snapshot returned nil");
+    if (err) g_error_free(err);
+    delete ctx;
+    return;
+  }
+
+  std::vector<unsigned char> bytes;
+  std::string mime;
+  const bool jpeg = (ctx->format == "jpeg" || ctx->format == "jpg");
+  if (jpeg) {
+    GdkPixbuf* pix = gdk_pixbuf_get_from_texture(texture);
+    if (pix) {
+      gchar* raw = nullptr; gsize raw_len = 0;
+      char qbuf[8]; snprintf(qbuf, sizeof(qbuf), "%d",
+                              ctx->quality < 0 ? 90 : (ctx->quality > 100 ? 100 : ctx->quality));
+      GError* perr = nullptr;
+      if (gdk_pixbuf_save_to_buffer(pix, &raw, &raw_len, "jpeg", &perr, "quality", qbuf, nullptr)) {
+        bytes.assign(raw, raw + raw_len);
+        g_free(raw);
+      } else if (perr) {
+        g_error_free(perr);
+      }
+      g_object_unref(pix);
+    }
+    mime = "image/jpeg";
+    ctx->format = "jpeg";
+  } else {
+    GBytes* png = gdk_texture_save_to_png_bytes(texture);
+    if (png) {
+      gsize n = 0;
+      const auto* p = static_cast<const unsigned char*>(g_bytes_get_data(png, &n));
+      bytes.assign(p, p + n);
+      g_bytes_unref(png);
+    }
+    mime = "image/png";
+    ctx->format = "png";
+  }
+  g_object_unref(texture);
+
+  if (bytes.empty()) {
+    emitLinuxShotError(ctx->view_id, ctx->request_id, "runtime_error", "encode failed");
+    delete ctx;
+    return;
+  }
+  gchar* b64 = g_base64_encode(bytes.data(), bytes.size());
+  std::string payload = "{\"requestId\":" + std::to_string(ctx->request_id) +
+                        ",\"ok\":true,\"format\":\"" + ctx->format +
+                        "\",\"mime\":\"" + mime +
+                        "\",\"dataBase64\":\"" + (b64 ? b64 : "") + "\"}";
+  if (b64) g_free(b64);
+  bunite_linux::emitWebviewEvent(ctx->view_id, "screenshot-result", payload);
+  delete ctx;
+}
+
+}  // namespace
+
+extern "C" BUNITE_EXPORT uint32_t bunite_view_capabilities(uint32_t view_id) {
+  // WebKitGTK — input dispatch impossible on GTK4+Wayland; screenshot via cairo.
+  auto* v = bunite_linux::findView(view_id);
+  if (!v) return 0;
+  return BUNITE_CAP_EVALUATE | BUNITE_CAP_SURFACE_EVENTS |
+         BUNITE_CAP_DIALOGS | BUNITE_CAP_CONSOLE |
+         BUNITE_CAP_SCREENSHOT | BUNITE_CAP_FORMAT_PNG | BUNITE_CAP_FORMAT_JPEG |
+         BUNITE_CAP_BOUNDING_RECT | BUNITE_CAP_DOWNLOADS | BUNITE_CAP_POPUPS |
+         BUNITE_CAP_AX | BUNITE_CAP_FRAMES;
+}
+
+namespace {
+
+struct AxCtx { uint32_t view_id; uint32_t request_id; };
+
+// JS-bridge ax tree: walks DOM + reads ARIA attrs. Emits CDP-shaped flat list
+// so TS-side convertAxTree works unchanged. `ignored` is always false — TS
+// `interestingOnly` filter is a no-op on this backend (limitation).
+const char* kAxScript = R"((function(){
+  var nodes=[];
+  function add(el,parentId){
+    if(!el||el.nodeType!==1)return null;
+    var id=String(nodes.length+1);
+    var node={nodeId:id,parentId:parentId,
+      role:{value:el.getAttribute('role')||el.tagName.toLowerCase()},
+      name:{value:el.getAttribute('aria-label')||
+        (el.tagName==='INPUT'||el.tagName==='TEXTAREA'?'':
+        (el.firstChild&&el.firstChild.nodeType===3?el.firstChild.textContent.trim().slice(0,100):''))},
+      properties:[],childIds:[],ignored:false};
+    var d=el.getAttribute('aria-description');if(d)node.description={value:d};
+    if(el.tagName==='INPUT'||el.tagName==='TEXTAREA'){if(el.value)node.value={value:el.value};}
+    if(el.getAttribute('aria-disabled')==='true'||el.disabled)node.properties.push({name:'disabled',value:{value:true}});
+    var ck=el.getAttribute('aria-checked');
+    if(ck==='true')node.properties.push({name:'checked',value:{value:true}});
+    else if(ck==='false')node.properties.push({name:'checked',value:{value:false}});
+    else if(ck==='mixed')node.properties.push({name:'checked',value:{value:'mixed'}});
+    var pr=el.getAttribute('aria-pressed');
+    if(pr==='true')node.properties.push({name:'pressed',value:{value:true}});
+    else if(pr==='false')node.properties.push({name:'pressed',value:{value:false}});
+    else if(pr==='mixed')node.properties.push({name:'pressed',value:{value:'mixed'}});
+    if(el.getAttribute('aria-expanded')==='true')node.properties.push({name:'expanded',value:{value:true}});
+    if(el.getAttribute('aria-selected')==='true')node.properties.push({name:'selected',value:{value:true}});
+    if(el.getAttribute('aria-required')==='true')node.properties.push({name:'required',value:{value:true}});
+    if(el.getAttribute('aria-invalid')==='true')node.properties.push({name:'invalid',value:{value:true}});
+    var lv=el.getAttribute('aria-level');if(lv)node.properties.push({name:'level',value:{value:parseInt(lv,10)}});
+    if(document.activeElement===el)node.properties.push({name:'focused',value:{value:true}});
+    nodes.push(node);
+    for(var i=0;i<el.children.length;i++){var cid=add(el.children[i],id);if(cid)node.childIds.push(cid);}
+    return id;
+  }
+  add(document.documentElement,null);
+  return JSON.stringify({nodes:nodes});
+})())";
+
+void on_ax_done(GObject* source, GAsyncResult* res, gpointer user_data) {
+  auto* ctx = static_cast<AxCtx*>(user_data);
+  WebKitWebView* wv = WEBKIT_WEB_VIEW(source);
+  GError* err = nullptr;
+  JSCValue* value = webkit_web_view_evaluate_javascript_finish(wv, res, &err);
+  std::string payload = "{\"requestId\":" + std::to_string(ctx->request_id);
+  if (err || !value) {
+    std::string msg = err ? err->message : "evaluate failed";
+    if (err) g_error_free(err);
+    payload += ",\"ok\":false,\"code\":\"runtime_error\","
+               "\"message\":\"" + bunite_linux::escapeJsonString(msg) + "\"}";
+  } else if (!jsc_value_is_string(value)) {
+    payload += ",\"ok\":false,\"code\":\"runtime_error\","
+               "\"message\":\"non-string ax result\"}";
+  } else {
+    char* raw = jsc_value_to_string(value);
+    std::string tree_json = raw ? raw : "{}";
+    if (raw) g_free(raw);
+    payload += ",\"ok\":true,\"tree\":" + tree_json + "}";
+  }
+  if (value) g_object_unref(value);
+  bunite_linux::emitWebviewEvent(ctx->view_id, "accessibility-result", payload);
+  delete ctx;
+}
+
+}  // namespace
+
+extern "C" BUNITE_EXPORT void bunite_view_accessibility_snapshot(uint32_t view_id, uint32_t request_id,
+                                                                  int32_t /*interesting_only*/) {
+  auto* st = bunite_linux::findView(view_id);
+  if (!st || !st->webview) {
+    std::string payload = "{\"requestId\":" + std::to_string(request_id) +
+                          ",\"ok\":false,\"code\":\"not_supported\","
+                          "\"message\":\"view not ready\"}";
+    bunite_linux::emitWebviewEvent(view_id, "accessibility-result", payload);
+    return;
+  }
+  auto* ctx = new AxCtx{view_id, request_id};
+  webkit_web_view_evaluate_javascript(st->webview, kAxScript, -1, nullptr, nullptr, nullptr, on_ax_done, ctx);
+}
+
+namespace {
+
+struct FramesCtx { uint32_t view_id; uint32_t request_id; };
+
+// JS-bridge frame tree: walks window.frames. Synthetic IDs are sequential —
+// not stable across calls. Cross-origin frames are included with empty url/origin
+// (SecurityError catch). Output matches CDP `Page.getFrameTree` shape so the
+// TS-side flattenFrameTree works unchanged.
+const char* kFramesScript = R"((function(){
+  var id=0;
+  function walk(win){
+    var fid=String(++id);
+    var frame={id:fid,securityOrigin:'',url:''};
+    try{
+      frame.url=win.location.href;
+      frame.securityOrigin=win.location.origin;
+      if(win.frameElement&&win.frameElement.name)frame.name=win.frameElement.name;
+    }catch(e){}
+    var children=[];
+    try{for(var i=0;i<win.frames.length;i++)children.push(walk(win.frames[i]));}catch(e){}
+    return {frame:frame,childFrames:children};
+  }
+  return JSON.stringify({frameTree:walk(window)});
+})())";
+
+void on_frames_done(GObject* source, GAsyncResult* res, gpointer user_data) {
+  auto* ctx = static_cast<FramesCtx*>(user_data);
+  WebKitWebView* wv = WEBKIT_WEB_VIEW(source);
+  GError* err = nullptr;
+  JSCValue* value = webkit_web_view_evaluate_javascript_finish(wv, res, &err);
+  std::string payload = "{\"requestId\":" + std::to_string(ctx->request_id);
+  if (err || !value) {
+    std::string msg = err ? err->message : "evaluate failed";
+    if (err) g_error_free(err);
+    payload += ",\"ok\":false,\"code\":\"runtime_error\","
+               "\"message\":\"" + bunite_linux::escapeJsonString(msg) + "\"}";
+  } else if (!jsc_value_is_string(value)) {
+    payload += ",\"ok\":false,\"code\":\"runtime_error\","
+               "\"message\":\"non-string frames result\"}";
+  } else {
+    char* raw = jsc_value_to_string(value);
+    std::string tree_json = raw ? raw : "{}";
+    if (raw) g_free(raw);
+    payload += ",\"ok\":true,\"raw\":" + tree_json + "}";
+  }
+  if (value) g_object_unref(value);
+  bunite_linux::emitWebviewEvent(ctx->view_id, "list-frames-result", payload);
+  delete ctx;
+}
+
+}  // namespace
+
+extern "C" BUNITE_EXPORT void bunite_view_list_frames(uint32_t view_id, uint32_t request_id) {
+  auto* st = bunite_linux::findView(view_id);
+  if (!st || !st->webview) {
+    std::string payload = "{\"requestId\":" + std::to_string(request_id) +
+                          ",\"ok\":false,\"code\":\"not_supported\","
+                          "\"message\":\"view not ready\"}";
+    bunite_linux::emitWebviewEvent(view_id, "list-frames-result", payload);
+    return;
+  }
+  auto* ctx = new FramesCtx{view_id, request_id};
+  webkit_web_view_evaluate_javascript(st->webview, kFramesScript, -1, nullptr, nullptr, nullptr, on_frames_done, ctx);
+}
+
+extern "C" BUNITE_EXPORT void bunite_view_evaluate_in_frame(uint32_t view_id, uint32_t request_id,
+                                                              const char* script_c, const char* frame_id_c) {
+  std::string script = script_c ? script_c : "";
+  std::string frame_id = frame_id_c ? frame_id_c : "";
+  if (frame_id.empty()) {
+    bunite_view_evaluate(view_id, request_id, script_c);
+    return;
+  }
+  // JS-bridge: walk window.frames matching listFrames numbering, `eval` user
+  // script in target frame. frameIds are sequential per walk — caller must use
+  // them immediately after listFrames. The outer envelope from
+  // bunite_view_evaluate handles ok/cross_origin/runtime_error mapping; we
+  // surface SecurityError so cross-origin → cross_origin and re-throw missing
+  // frames as plain Error → runtime_error.
+  std::string js_target = bunite_linux::escapeJsonString(frame_id);
+  std::string js_script = bunite_linux::escapeJsonString(script);
+  std::string inner =
+    "(function(){var target=\"" + js_target + "\";var id=0;var found=null;"
+    "function walk(win){var fid=String(++id);if(fid===target){found=win;return;}"
+    "try{for(var i=0;i<win.frames.length;i++){walk(win.frames[i]);if(found)return;}}catch(e){}}"
+    "walk(window);"
+    "if(!found)throw new Error('frame not found');"
+    "return found.eval(\"(\"+\"" + js_script + "\"+\")\");"
+    "})()";
+  bunite_view_evaluate(view_id, request_id, inner.c_str());
+}
+
+extern "C" BUNITE_EXPORT void bunite_view_set_download_policy(uint32_t view_id, int32_t policy, const char* download_dir) {
+  auto* st = bunite_linux::findView(view_id);
+  if (!st) return;
+  if (policy < 0 || policy > 2) policy = 2;
+  st->download_policy.store(policy);
+  st->download_dir = download_dir ? download_dir : "";
+}
+
+extern "C" BUNITE_EXPORT void bunite_view_popup_accept(uint32_t new_view_id, uint32_t host_window_id,
+                                                       double x, double y, double w, double h) {
+  runOnUiThreadSync([=]() { bunite_linux::acceptParkedPopup(new_view_id, host_window_id, x, y, w, h); });
+}
+
+extern "C" BUNITE_EXPORT void bunite_view_popup_dismiss(uint32_t new_view_id) {
+  runOnUiThreadSync([=]() { bunite_linux::dismissParkedPopup(new_view_id); });
+}
+
+extern "C" BUNITE_EXPORT void bunite_view_screenshot(uint32_t view_id, uint32_t request_id,
+                                                       const char* format, int32_t quality) {
+  std::string fmt = format ? format : "png";
+  runOnUiThreadSync([=]() {
+    auto* v = bunite_linux::findView(view_id);
+    if (!v || !v->webview) {
+      emitLinuxShotError(view_id, request_id, "not_supported", "view not ready");
+      return;
+    }
+    auto* ctx = new LinuxShotCtx{view_id, request_id, fmt, quality};
+    webkit_web_view_get_snapshot(v->webview, WEBKIT_SNAPSHOT_REGION_VISIBLE,
+                                 WEBKIT_SNAPSHOT_OPTIONS_NONE, nullptr,
+                                 on_snapshot_done, ctx);
+  });
+}
+
 extern "C" BUNITE_EXPORT void bunite_view_open_devtools(uint32_t view_id) {
   (void)view_id; BUNITE_LINUX_TODO("bunite_view_open_devtools");
 }

package/src/native/linux/bunite_linux_internal.h

@@ -38,6 +38,15 @@ struct ViewState {
   std::string preload_script;
   std::string stored_html;
   std::vector<std::string> navigation_rules;
+
+  // Page-initiated dialogs awaiting host response. WebKitScriptDialog is
+  // held until we mark confirmed/text + emit signal completion.
+  std::unordered_map<uint32_t, WebKitScriptDialog*> pending_dialogs;
+  uint32_t next_dialog_request_id = 1;
+
+  // Download policy: 0=auto, 1=ask (treated as block), 2=block (default).
+  std::atomic<int32_t> download_policy{2};
+  std::string download_dir;
 };
 
 struct RuntimeState {
@@ -54,6 +63,12 @@ struct RuntimeState {
   pthread_t ui_thread = 0;
   bool ui_thread_set = false;
 
+  // Hidden top-level window — popup-minted WebViews park here until adoption.
+  GtkWindow* popup_parent = nullptr;
+  // Parked popup-minted views awaiting acceptPopup/dismissPopup. Keyed by
+  // popup view_id (>= 0x80000000).
+  std::unordered_map<uint32_t, WebKitWebView*> parked_popups;
+
   std::unordered_map<uint32_t, WebKitPermissionRequest*> pending_permissions;
   uint32_t next_permission_request_id = 1;
 
@@ -134,6 +149,7 @@ void destroyWindow(uint32_t window_id);
 
 ViewState* findView(uint32_t view_id);
 uint32_t viewIdForWebView(WebKitWebView* wv);
+void respondToDialogRequest(uint32_t view_id, uint32_t request_id, bool accept, const std::string& text);
 bool createView(uint32_t view_id, uint32_t window_id,
                 const char* url, const char* html, const char* preload, const char* appres_root,
                 const char* navigation_rules_json, const char* preload_origins_json,
@@ -141,6 +157,8 @@ bool createView(uint32_t view_id, uint32_t window_id,
 void removeView(uint32_t view_id);
 void detachViewSideState(uint32_t view_id);
 void applyViewBounds(uint32_t view_id, double x, double y, double width, double height);
+bool acceptParkedPopup(uint32_t new_view_id, uint32_t host_window_id, double x, double y, double w, double h);
+void dismissParkedPopup(uint32_t new_view_id);
 void queueViewRedraw(WebKitWebView* wv);
 
 void registerAppresScheme(WebKitWebContext* ctx);

package/src/native/linux/bunite_linux_runtime.cpp

@@ -16,7 +16,7 @@ bool isOnMainThread() {
 
 namespace {
 
-constexpr int32_t kBuniteAbiVersion = 5;
+constexpr int32_t kBuniteAbiVersion = 11;
 
 }  // namespace
 
@@ -59,6 +59,11 @@ extern "C" BUNITE_EXPORT bool bunite_init(
   }
 
   rt.app = app;
+  // Hidden offscreen parent — popup-minted views park here until host adoption.
+  rt.popup_parent = GTK_WINDOW(gtk_window_new());
+  gtk_window_set_decorated(rt.popup_parent, FALSE);
+  gtk_window_set_default_size(rt.popup_parent, 1, 1);
+  gtk_window_set_child(rt.popup_parent, gtk_box_new(GTK_ORIENTATION_HORIZONTAL, 0));
   rt.initialized = true;
   return true;
 }

package/src/native/linux/bunite_linux_utils.cpp

@@ -93,8 +93,8 @@ std::vector<std::string> parseNavigationRulesJson(const std::string& json) {
 }
 
 bool shouldAlwaysAllowNavigationUrl(const std::string& url) {
-  return url == "about:blank" ||
-         url.rfind("appres://app.internal/internal/", 0) == 0;
+  // Exact-match — prefix would let `../../evil` style paths bypass scrutiny.
+  return url == "about:blank" || url == "appres://app.internal/internal/index.html";
 }
 
 bool shouldAllowNavigation(const ViewState* view, const std::string& url) {