bunite-core 0.6.0 → 0.8.0

package/src/native/win/native_host_utils.cpp

@@ -57,62 +57,12 @@ std::string escapeJsonString(const std::string& value) {
   return escaped;
 }
 
-std::vector<std::string> splitButtonLabels(const std::string& buttons_csv) {
-  std::vector<std::string> labels;
-  if (buttons_csv.empty()) {
-    return labels;
-  }
-
-  std::stringstream stream(buttons_csv);
-  std::string label;
-  while (std::getline(stream, label, '\x1f')) {
-    const size_t first = label.find_first_not_of(" \t");
-    if (first == std::string::npos) {
-      continue;
-    }
-    const size_t last = label.find_last_not_of(" \t");
-    std::string normalized = label.substr(first, last - first + 1);
-    std::transform(
-      normalized.begin(),
-      normalized.end(),
-      normalized.begin(),
-      [](unsigned char ch) { return static_cast<char>(std::tolower(ch)); }
-    );
-    if (!normalized.empty()) {
-      labels.push_back(normalized);
-    }
-  }
-
-  return labels;
-}
-
-std::string trimAsciiWhitespace(const std::string& value) {
-  const size_t first = value.find_first_not_of(" \t\r\n");
-  if (first == std::string::npos) {
-    return {};
-  }
-  const size_t last = value.find_last_not_of(" \t\r\n");
-  return value.substr(first, last - first + 1);
-}
-
-std::string toLowerAscii(std::string value) {
-  std::transform(
-    value.begin(),
-    value.end(),
-    value.begin(),
-    [](unsigned char ch) { return static_cast<char>(std::tolower(ch)); }
-  );
-  return value;
-}
-
 // ---------------------------------------------------------------------------
 // Chromium flags parsing
 // ---------------------------------------------------------------------------
 
 
-// Simple flat JSON object parser for chromiumFlags.
-// Input is always a JSON-serialized Record<string, string | boolean> from TS.
-// Does not depend on CEF, so it can run before CefInitialize.
+// Flat JSON object parser for Chromium flags (Record<string, string|boolean>). No CEF dep — runs before CefInitialize.
 std::map<std::string, std::string> parseChromiumFlagsJson(const std::string& json) {
   std::map<std::string, std::string> flags;
   if (json.empty()) {
@@ -264,12 +214,33 @@ bool shouldAlwaysAllowNavigationUrl(const std::string& url) {
   return url == "about:blank" || url.rfind("appres://app.internal/internal/", 0) == 0;
 }
 
+uint32_t cefPermissionsToBuniteKind(uint32_t cef_bits) {
+  uint32_t bunite = 0;
+  if (cef_bits & CEF_PERMISSION_TYPE_MIC_STREAM)    bunite |= BUNITE_PERMISSION_MICROPHONE;
+  if (cef_bits & CEF_PERMISSION_TYPE_CAMERA_STREAM) bunite |= BUNITE_PERMISSION_CAMERA;
+  if (cef_bits & CEF_PERMISSION_TYPE_GEOLOCATION)   bunite |= BUNITE_PERMISSION_GEOLOCATION;
+  if (cef_bits & CEF_PERMISSION_TYPE_NOTIFICATIONS) bunite |= BUNITE_PERMISSION_NOTIFICATIONS;
+  if (cef_bits & CEF_PERMISSION_TYPE_CLIPBOARD)     bunite |= BUNITE_PERMISSION_CLIPBOARD;
+  if (cef_bits & CEF_PERMISSION_TYPE_POINTER_LOCK)  bunite |= BUNITE_PERMISSION_POINTER_LOCK;
+  if (cef_bits & CEF_PERMISSION_TYPE_MIDI_SYSEX)    bunite |= BUNITE_PERMISSION_MIDI_SYSEX;
+  return bunite;
+}
+
+uint32_t cefMediaAccessToBuniteKind(uint32_t cef_bits) {
+  uint32_t bunite = 0;
+  if (cef_bits & CEF_MEDIA_PERMISSION_DEVICE_AUDIO_CAPTURE) bunite |= BUNITE_PERMISSION_MICROPHONE;
+  if (cef_bits & CEF_MEDIA_PERMISSION_DEVICE_VIDEO_CAPTURE) bunite |= BUNITE_PERMISSION_CAMERA;
+  if (cef_bits & (CEF_MEDIA_PERMISSION_DESKTOP_AUDIO_CAPTURE |
+                  CEF_MEDIA_PERMISSION_DESKTOP_VIDEO_CAPTURE)) bunite |= BUNITE_PERMISSION_SCREEN_CAPTURE;
+  return bunite;
+}
+
 bool shouldAllowNavigation(const ViewHost* view, const std::string& url) {
   if (!view || shouldAlwaysAllowNavigationUrl(url) || view->navigation_rules.empty()) {
     return true;
   }
 
-  bool allowed = true; // Match electrobun's last-match-wins, default-allow semantics.
+  bool allowed = true; // default-allow, last-match-wins
   for (const std::string& raw_rule : view->navigation_rules) {
     const bool is_block_rule = !raw_rule.empty() && raw_rule.front() == '^';
     const std::string pattern = is_block_rule ? raw_rule.substr(1) : raw_rule;

package/src/native/win/process_helper_win.cpp

@@ -92,9 +92,7 @@ public:
     }
     if (!is_appres && !is_allowed_origin) return;
 
-    // Skip isolated-world contexts (DevTools overlay, extensions, etc.) that
-    // lack full Web APIs. The page's main-world context has customElements;
-    // DevTools-injected contexts do not.
+    // Skip isolated-world contexts (DevTools/extensions) — only main-world has customElements.
     context->Enter();
     CefRefPtr<CefV8Value> ce = context->GetGlobal()->GetValue("customElements");
     bool is_main_world = ce && !ce->IsNull() && !ce->IsUndefined();

package/src/preload/runtime.ts

@@ -1,6 +1,4 @@
-// Preload runtime — built once at package build time, injected into every appres:// page.
-// The config variables (__buniteWebviewId, __buniteRpcSocketPort, __buniteSecretKeyBase64)
-// are injected by inline.ts as a small preamble before this script.
+// Preload runtime injected into every appres:// page. Config vars (__bunite*) prepended by inline.ts.
 
 declare const __buniteWebviewId: number;
 declare const __buniteRpcSocketPort: number;

package/src/preload/tsconfig.tsbuildinfo

@@ -1 +1 @@
-{"fileNames":["../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es5.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2015.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2016.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2017.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2018.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2019.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2020.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2021.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2022.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.dom.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2015.core.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2015.collection.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2015.generator.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2015.iterable.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2015.promise.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2015.proxy.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2015.reflect.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2015.symbol.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2015.symbol.wellknown.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2016.array.include.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2016.intl.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2017.arraybuffer.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2017.date.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2017.object.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2017.sharedmemory.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2017.string.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2017.intl.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2017.typedarrays.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2018.asyncgenerator.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2018.asynciterable.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2018.intl.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2018.promise.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2018.regexp.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2019.array.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2019.object.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2019.string.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2019.symbol.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2019.intl.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2020.bigint.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2020.date.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2020.promise.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2020.sharedmemory.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2020.string.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2020.symbol.wellknown.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2020.intl.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2020.number.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2021.promise.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2021.string.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2021.weakref.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2021.intl.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2022.array.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2022.error.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2022.intl.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2022.object.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2022.string.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.es2022.regexp.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.decorators.d.ts","../../../node_modules/.bun/typescript@6.0.2/node_modules/typescript/lib/lib.decorators.legacy.d.ts","./webviewelement.ts","./runtime.ts"],"fileInfos":[{"version":"bcd24271a113971ba9eb71ff8cb01bc6b0f872a85c23fdbe5d93065b375933cd","affectsGlobalScope":true,"impliedFormat":1},{"version":"3f88bedbeb09c6f5a6645cb24c7c55f1aa22d19ae96c8e6959cbd8b85a707bc6","impliedFormat":1},{"version":"7fe93b39b810eadd916be8db880dd7f0f7012a5cc6ffb62de8f62a2117fa6f1f","impliedFormat":1},{"version":"bb0074cc08b84a2374af33d8bf044b80851ccc9e719a5e202eacf40db2c31600","impliedFormat":1},{"version":"1a7daebe4f45fb03d9ec53d60008fbf9ac45a697fdc89e4ce218bc94b94f94d6","impliedFormat":1},{"version":"f94b133a3cb14a288803be545ac2683e0d0ff6661bcd37e31aaaec54fc382aed","impliedFormat":1},{"version":"f59d0650799f8782fd74cf73c19223730c6d1b9198671b1c5b3a38e1188b5953","impliedFormat":1},{"version":"8a15b4607d9a499e2dbeed9ec0d3c0d7372c850b2d5f1fb259e8f6d41d468a84","impliedFormat":1},{"version":"26e0fe14baee4e127f4365d1ae0b276f400562e45e19e35fd2d4c296684715e6","impliedFormat":1},{"version":"d6b1eba8496bdd0eed6fc8a685768fe01b2da4a0388b5fe7df558290bffcf32f","affectsGlobalScope":true,"impliedFormat":1},{"version":"eadcffda2aa84802c73938e589b9e58248d74c59cb7fcbca6474e3435ac15504","affectsGlobalScope":true,"impliedFormat":1},{"version":"105ba8ff7ba746404fe1a2e189d1d3d2e0eb29a08c18dded791af02f29fb4711","affectsGlobalScope":true,"impliedFormat":1},{"version":"00343ca5b2e3d48fa5df1db6e32ea2a59afab09590274a6cccb1dbae82e60c7c","affectsGlobalScope":true,"impliedFormat":1},{"version":"ebd9f816d4002697cb2864bea1f0b70a103124e18a8cd9645eeccc09bdf80ab4","affectsGlobalScope":true,"impliedFormat":1},{"version":"2c1afac30a01772cd2a9a298a7ce7706b5892e447bb46bdbeef720f7b5da77ad","affectsGlobalScope":true,"impliedFormat":1},{"version":"7b0225f483e4fa685625ebe43dd584bb7973bbd84e66a6ba7bbe175ee1048b4f","affectsGlobalScope":true,"impliedFormat":1},{"version":"c0a4b8ac6ce74679c1da2b3795296f5896e31c38e888469a8e0f99dc3305de60","affectsGlobalScope":true,"impliedFormat":1},{"version":"3084a7b5f569088e0146533a00830e206565de65cae2239509168b11434cd84f","affectsGlobalScope":true,"impliedFormat":1},{"version":"c5079c53f0f141a0698faa903e76cb41cd664e3efb01cc17a5c46ec2eb0bef42","affectsGlobalScope":true,"impliedFormat":1},{"version":"32cafbc484dea6b0ab62cf8473182bbcb23020d70845b406f80b7526f38ae862","affectsGlobalScope":true,"impliedFormat":1},{"version":"fca4cdcb6d6c5ef18a869003d02c9f0fd95df8cfaf6eb431cd3376bc034cad36","affectsGlobalScope":true,"impliedFormat":1},{"version":"b93ec88115de9a9dc1b602291b85baf825c85666bf25985cc5f698073892b467","affectsGlobalScope":true,"impliedFormat":1},{"version":"f5c06dcc3fe849fcb297c247865a161f995cc29de7aa823afdd75aaaddc1419b","affectsGlobalScope":true,"impliedFormat":1},{"version":"b77e16112127a4b169ef0b8c3a4d730edf459c5f25fe52d5e436a6919206c4d7","affectsGlobalScope":true,"impliedFormat":1},{"version":"fbffd9337146eff822c7c00acbb78b01ea7ea23987f6c961eba689349e744f8c","affectsGlobalScope":true,"impliedFormat":1},{"version":"a995c0e49b721312f74fdfb89e4ba29bd9824c770bbb4021d74d2bf560e4c6bd","affectsGlobalScope":true,"impliedFormat":1},{"version":"c7b3542146734342e440a84b213384bfa188835537ddbda50d30766f0593aff9","affectsGlobalScope":true,"impliedFormat":1},{"version":"ce6180fa19b1cccd07ee7f7dbb9a367ac19c0ed160573e4686425060b6df7f57","affectsGlobalScope":true,"impliedFormat":1},{"version":"3f02e2476bccb9dbe21280d6090f0df17d2f66b74711489415a8aa4df73c9675","affectsGlobalScope":true,"impliedFormat":1},{"version":"45e3ab34c1c013c8ab2dc1ba4c80c780744b13b5676800ae2e3be27ae862c40c","affectsGlobalScope":true,"impliedFormat":1},{"version":"805c86f6cca8d7702a62a844856dbaa2a3fd2abef0536e65d48732441dde5b5b","affectsGlobalScope":true,"impliedFormat":1},{"version":"e42e397f1a5a77994f0185fd1466520691456c772d06bf843e5084ceb879a0ad","affectsGlobalScope":true,"impliedFormat":1},{"version":"f4c2b41f90c95b1c532ecc874bd3c111865793b23aebcc1c3cbbabcd5d76ffb0","affectsGlobalScope":true,"impliedFormat":1},{"version":"ab26191cfad5b66afa11b8bf935ef1cd88fabfcb28d30b2dfa6fad877d050332","affectsGlobalScope":true,"impliedFormat":1},{"version":"2088bc26531e38fb05eedac2951480db5309f6be3fa4a08d2221abb0f5b4200d","affectsGlobalScope":true,"impliedFormat":1},{"version":"cb9d366c425fea79716a8fb3af0d78e6b22ebbab3bd64d25063b42dc9f531c1e","affectsGlobalScope":true,"impliedFormat":1},{"version":"500934a8089c26d57ebdb688fc9757389bb6207a3c8f0674d68efa900d2abb34","affectsGlobalScope":true,"impliedFormat":1},{"version":"689da16f46e647cef0d64b0def88910e818a5877ca5379ede156ca3afb780ac3","affectsGlobalScope":true,"impliedFormat":1},{"version":"bc21cc8b6fee4f4c2440d08035b7ea3c06b3511314c8bab6bef7a92de58a2593","affectsGlobalScope":true,"impliedFormat":1},{"version":"7ca53d13d2957003abb47922a71866ba7cb2068f8d154877c596d63c359fed25","affectsGlobalScope":true,"impliedFormat":1},{"version":"54725f8c4df3d900cb4dac84b64689ce29548da0b4e9b7c2de61d41c79293611","affectsGlobalScope":true,"impliedFormat":1},{"version":"e5594bc3076ac29e6c1ebda77939bc4c8833de72f654b6e376862c0473199323","affectsGlobalScope":true,"impliedFormat":1},{"version":"2f3eb332c2d73e729f3364fcc0c2b375e72a121e8157d25a82d67a138c83a95c","affectsGlobalScope":true,"impliedFormat":1},{"version":"6f4427f9642ce8d500970e4e69d1397f64072ab73b97e476b4002a646ac743b1","affectsGlobalScope":true,"impliedFormat":1},{"version":"48915f327cd1dea4d7bd358d9dc7732f58f9e1626a29cc0c05c8c692419d9bb7","affectsGlobalScope":true,"impliedFormat":1},{"version":"b7bf9377723203b5a6a4b920164df22d56a43f593269ba6ae1fdc97774b68855","affectsGlobalScope":true,"impliedFormat":1},{"version":"db9709688f82c9e5f65a119c64d835f906efe5f559d08b11642d56eb85b79357","affectsGlobalScope":true,"impliedFormat":1},{"version":"4b25b8c874acd1a4cf8444c3617e037d444d19080ac9f634b405583fd10ce1f7","affectsGlobalScope":true,"impliedFormat":1},{"version":"37be57d7c90cf1f8112ee2636a068d8fd181289f82b744160ec56a7dc158a9f5","affectsGlobalScope":true,"impliedFormat":1},{"version":"a917a49ac94cd26b754ab84e113369a75d1a47a710661d7cd25e961cc797065f","affectsGlobalScope":true,"impliedFormat":1},{"version":"6d3261badeb7843d157ef3e6f5d1427d0eeb0af0cf9df84a62cfd29fd47ac86e","affectsGlobalScope":true,"impliedFormat":1},{"version":"195daca651dde22f2167ac0d0a05e215308119a3100f5e6268e8317d05a92526","affectsGlobalScope":true,"impliedFormat":1},{"version":"8b11e4285cd2bb164a4dc09248bdec69e9842517db4ca47c1ba913011e44ff2f","affectsGlobalScope":true,"impliedFormat":1},{"version":"0508571a52475e245b02bc50fa1394065a0a3d05277fbf5120c3784b85651799","affectsGlobalScope":true,"impliedFormat":1},{"version":"8f9af488f510c3015af3cc8c267a9e9d96c4dd38a1fdff0e11dc5a544711415b","affectsGlobalScope":true,"impliedFormat":1},{"version":"fc611fea8d30ea72c6bbfb599c9b4d393ce22e2f5bfef2172534781e7d138104","affectsGlobalScope":true,"impliedFormat":1},{"version":"1ce14b81c5cc821994aa8ec1d42b220dd41b27fcc06373bce3958af7421b77d4","affectsGlobalScope":true,"impliedFormat":1},{"version":"b3a048b3e9302ef9a34ef4ebb9aecfb28b66abb3bce577206a79fee559c230da","affectsGlobalScope":true,"impliedFormat":1},{"version":"f7924c67469cd6b44b50480cec49f3d34b3feae7bb292d6f44b7939f9d07a2dc","signature":"5c08c27ab7fdb9d3a443d5b81d066acf9a3b44413dbfe91153a2288779910ad5","affectsGlobalScope":true},{"version":"b61a26197044cf31caa83db322ecb653d081fc67e14b25c5a41cd7cc33b3fca1","signature":"6447fe52d8ee29270b95a53b62dece95739c334d51b6271bd7e1323e81b79a2c"}],"root":[59,60],"options":{"composite":true,"exactOptionalPropertyTypes":false,"module":7,"skipLibCheck":true,"strict":true,"target":9},"affectedFilesPendingEmit":[[60,17],[59,17]],"emitSignatures":[59,60],"version":"6.0.2"}
+{"fileNames":["../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es5.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2015.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2016.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2017.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2018.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2019.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2020.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2021.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2022.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.dom.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2015.core.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2015.collection.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2015.generator.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2015.iterable.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2015.promise.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2015.proxy.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2015.reflect.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2015.symbol.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2015.symbol.wellknown.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2016.array.include.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2016.intl.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2017.arraybuffer.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2017.date.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2017.object.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2017.sharedmemory.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2017.string.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2017.intl.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2017.typedarrays.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2018.asyncgenerator.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2018.asynciterable.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2018.intl.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2018.promise.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2018.regexp.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2019.array.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2019.object.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2019.string.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2019.symbol.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2019.intl.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2020.bigint.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2020.date.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2020.promise.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2020.sharedmemory.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2020.string.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2020.symbol.wellknown.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2020.intl.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2020.number.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2021.promise.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2021.string.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2021.weakref.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2021.intl.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2022.array.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2022.error.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2022.intl.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2022.object.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2022.string.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.es2022.regexp.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.decorators.d.ts","../../../node_modules/.bun/typescript@6.0.3/node_modules/typescript/lib/lib.decorators.legacy.d.ts","./webviewelement.ts","./runtime.ts"],"fileInfos":[{"version":"bcd24271a113971ba9eb71ff8cb01bc6b0f872a85c23fdbe5d93065b375933cd","affectsGlobalScope":true,"impliedFormat":1},{"version":"3f88bedbeb09c6f5a6645cb24c7c55f1aa22d19ae96c8e6959cbd8b85a707bc6","impliedFormat":1},{"version":"7fe93b39b810eadd916be8db880dd7f0f7012a5cc6ffb62de8f62a2117fa6f1f","impliedFormat":1},{"version":"bb0074cc08b84a2374af33d8bf044b80851ccc9e719a5e202eacf40db2c31600","impliedFormat":1},{"version":"1a7daebe4f45fb03d9ec53d60008fbf9ac45a697fdc89e4ce218bc94b94f94d6","impliedFormat":1},{"version":"f94b133a3cb14a288803be545ac2683e0d0ff6661bcd37e31aaaec54fc382aed","impliedFormat":1},{"version":"f59d0650799f8782fd74cf73c19223730c6d1b9198671b1c5b3a38e1188b5953","impliedFormat":1},{"version":"8a15b4607d9a499e2dbeed9ec0d3c0d7372c850b2d5f1fb259e8f6d41d468a84","impliedFormat":1},{"version":"26e0fe14baee4e127f4365d1ae0b276f400562e45e19e35fd2d4c296684715e6","impliedFormat":1},{"version":"d6b1eba8496bdd0eed6fc8a685768fe01b2da4a0388b5fe7df558290bffcf32f","affectsGlobalScope":true,"impliedFormat":1},{"version":"eadcffda2aa84802c73938e589b9e58248d74c59cb7fcbca6474e3435ac15504","affectsGlobalScope":true,"impliedFormat":1},{"version":"105ba8ff7ba746404fe1a2e189d1d3d2e0eb29a08c18dded791af02f29fb4711","affectsGlobalScope":true,"impliedFormat":1},{"version":"00343ca5b2e3d48fa5df1db6e32ea2a59afab09590274a6cccb1dbae82e60c7c","affectsGlobalScope":true,"impliedFormat":1},{"version":"ebd9f816d4002697cb2864bea1f0b70a103124e18a8cd9645eeccc09bdf80ab4","affectsGlobalScope":true,"impliedFormat":1},{"version":"2c1afac30a01772cd2a9a298a7ce7706b5892e447bb46bdbeef720f7b5da77ad","affectsGlobalScope":true,"impliedFormat":1},{"version":"7b0225f483e4fa685625ebe43dd584bb7973bbd84e66a6ba7bbe175ee1048b4f","affectsGlobalScope":true,"impliedFormat":1},{"version":"c0a4b8ac6ce74679c1da2b3795296f5896e31c38e888469a8e0f99dc3305de60","affectsGlobalScope":true,"impliedFormat":1},{"version":"3084a7b5f569088e0146533a00830e206565de65cae2239509168b11434cd84f","affectsGlobalScope":true,"impliedFormat":1},{"version":"c5079c53f0f141a0698faa903e76cb41cd664e3efb01cc17a5c46ec2eb0bef42","affectsGlobalScope":true,"impliedFormat":1},{"version":"32cafbc484dea6b0ab62cf8473182bbcb23020d70845b406f80b7526f38ae862","affectsGlobalScope":true,"impliedFormat":1},{"version":"fca4cdcb6d6c5ef18a869003d02c9f0fd95df8cfaf6eb431cd3376bc034cad36","affectsGlobalScope":true,"impliedFormat":1},{"version":"b93ec88115de9a9dc1b602291b85baf825c85666bf25985cc5f698073892b467","affectsGlobalScope":true,"impliedFormat":1},{"version":"f5c06dcc3fe849fcb297c247865a161f995cc29de7aa823afdd75aaaddc1419b","affectsGlobalScope":true,"impliedFormat":1},{"version":"b77e16112127a4b169ef0b8c3a4d730edf459c5f25fe52d5e436a6919206c4d7","affectsGlobalScope":true,"impliedFormat":1},{"version":"fbffd9337146eff822c7c00acbb78b01ea7ea23987f6c961eba689349e744f8c","affectsGlobalScope":true,"impliedFormat":1},{"version":"a995c0e49b721312f74fdfb89e4ba29bd9824c770bbb4021d74d2bf560e4c6bd","affectsGlobalScope":true,"impliedFormat":1},{"version":"c7b3542146734342e440a84b213384bfa188835537ddbda50d30766f0593aff9","affectsGlobalScope":true,"impliedFormat":1},{"version":"ce6180fa19b1cccd07ee7f7dbb9a367ac19c0ed160573e4686425060b6df7f57","affectsGlobalScope":true,"impliedFormat":1},{"version":"3f02e2476bccb9dbe21280d6090f0df17d2f66b74711489415a8aa4df73c9675","affectsGlobalScope":true,"impliedFormat":1},{"version":"45e3ab34c1c013c8ab2dc1ba4c80c780744b13b5676800ae2e3be27ae862c40c","affectsGlobalScope":true,"impliedFormat":1},{"version":"805c86f6cca8d7702a62a844856dbaa2a3fd2abef0536e65d48732441dde5b5b","affectsGlobalScope":true,"impliedFormat":1},{"version":"e42e397f1a5a77994f0185fd1466520691456c772d06bf843e5084ceb879a0ad","affectsGlobalScope":true,"impliedFormat":1},{"version":"f4c2b41f90c95b1c532ecc874bd3c111865793b23aebcc1c3cbbabcd5d76ffb0","affectsGlobalScope":true,"impliedFormat":1},{"version":"ab26191cfad5b66afa11b8bf935ef1cd88fabfcb28d30b2dfa6fad877d050332","affectsGlobalScope":true,"impliedFormat":1},{"version":"2088bc26531e38fb05eedac2951480db5309f6be3fa4a08d2221abb0f5b4200d","affectsGlobalScope":true,"impliedFormat":1},{"version":"cb9d366c425fea79716a8fb3af0d78e6b22ebbab3bd64d25063b42dc9f531c1e","affectsGlobalScope":true,"impliedFormat":1},{"version":"500934a8089c26d57ebdb688fc9757389bb6207a3c8f0674d68efa900d2abb34","affectsGlobalScope":true,"impliedFormat":1},{"version":"689da16f46e647cef0d64b0def88910e818a5877ca5379ede156ca3afb780ac3","affectsGlobalScope":true,"impliedFormat":1},{"version":"bc21cc8b6fee4f4c2440d08035b7ea3c06b3511314c8bab6bef7a92de58a2593","affectsGlobalScope":true,"impliedFormat":1},{"version":"7ca53d13d2957003abb47922a71866ba7cb2068f8d154877c596d63c359fed25","affectsGlobalScope":true,"impliedFormat":1},{"version":"54725f8c4df3d900cb4dac84b64689ce29548da0b4e9b7c2de61d41c79293611","affectsGlobalScope":true,"impliedFormat":1},{"version":"e5594bc3076ac29e6c1ebda77939bc4c8833de72f654b6e376862c0473199323","affectsGlobalScope":true,"impliedFormat":1},{"version":"2f3eb332c2d73e729f3364fcc0c2b375e72a121e8157d25a82d67a138c83a95c","affectsGlobalScope":true,"impliedFormat":1},{"version":"6f4427f9642ce8d500970e4e69d1397f64072ab73b97e476b4002a646ac743b1","affectsGlobalScope":true,"impliedFormat":1},{"version":"48915f327cd1dea4d7bd358d9dc7732f58f9e1626a29cc0c05c8c692419d9bb7","affectsGlobalScope":true,"impliedFormat":1},{"version":"b7bf9377723203b5a6a4b920164df22d56a43f593269ba6ae1fdc97774b68855","affectsGlobalScope":true,"impliedFormat":1},{"version":"db9709688f82c9e5f65a119c64d835f906efe5f559d08b11642d56eb85b79357","affectsGlobalScope":true,"impliedFormat":1},{"version":"4b25b8c874acd1a4cf8444c3617e037d444d19080ac9f634b405583fd10ce1f7","affectsGlobalScope":true,"impliedFormat":1},{"version":"37be57d7c90cf1f8112ee2636a068d8fd181289f82b744160ec56a7dc158a9f5","affectsGlobalScope":true,"impliedFormat":1},{"version":"a917a49ac94cd26b754ab84e113369a75d1a47a710661d7cd25e961cc797065f","affectsGlobalScope":true,"impliedFormat":1},{"version":"6d3261badeb7843d157ef3e6f5d1427d0eeb0af0cf9df84a62cfd29fd47ac86e","affectsGlobalScope":true,"impliedFormat":1},{"version":"195daca651dde22f2167ac0d0a05e215308119a3100f5e6268e8317d05a92526","affectsGlobalScope":true,"impliedFormat":1},{"version":"8b11e4285cd2bb164a4dc09248bdec69e9842517db4ca47c1ba913011e44ff2f","affectsGlobalScope":true,"impliedFormat":1},{"version":"0508571a52475e245b02bc50fa1394065a0a3d05277fbf5120c3784b85651799","affectsGlobalScope":true,"impliedFormat":1},{"version":"8f9af488f510c3015af3cc8c267a9e9d96c4dd38a1fdff0e11dc5a544711415b","affectsGlobalScope":true,"impliedFormat":1},{"version":"fc611fea8d30ea72c6bbfb599c9b4d393ce22e2f5bfef2172534781e7d138104","affectsGlobalScope":true,"impliedFormat":1},{"version":"1ce14b81c5cc821994aa8ec1d42b220dd41b27fcc06373bce3958af7421b77d4","affectsGlobalScope":true,"impliedFormat":1},{"version":"b3a048b3e9302ef9a34ef4ebb9aecfb28b66abb3bce577206a79fee559c230da","affectsGlobalScope":true,"impliedFormat":1},{"version":"d1d2b74439bf388c1b2a5806029a7d6f23146a906e163721473d684aa9a8f1e5","signature":"5c08c27ab7fdb9d3a443d5b81d066acf9a3b44413dbfe91153a2288779910ad5","affectsGlobalScope":true},{"version":"3782d5b638f6529d7049c5ce5e778c01aadad180784460eb5c69430fd405de49","signature":"6447fe52d8ee29270b95a53b62dece95739c334d51b6271bd7e1323e81b79a2c"}],"root":[59,60],"options":{"composite":true,"exactOptionalPropertyTypes":false,"module":7,"skipLibCheck":true,"strict":true,"target":9},"affectedFilesPendingEmit":[[60,17],[59,17]],"emitSignatures":[59,60],"version":"6.0.3"}

package/src/preload/webviewElement.ts

@@ -6,10 +6,7 @@ declare const bunite: {
   off: (channel: string, handler: (data: any) => void) => void;
 };
 
-// --- OverlaySyncController ---
-// Tracks element bounds and notifies when they change.
-// Uses ResizeObserver for size changes and rAF polling for position changes.
-// Dirty-flag coalescing ensures at most one IPC per animation frame.
+// OverlaySyncController: ResizeObserver + rAF position polling; dirty-flag coalescing ≤1 IPC/frame.
 
 type Rect = { x: number; y: number; width: number; height: number };
 
@@ -290,13 +287,11 @@ class BuniteWebviewElement extends HTMLElement {
 if (typeof customElements !== "undefined") {
   customElements.define("bunite-webview", BuniteWebviewElement);
 
-  // When the host page gains focus (click on non-surface area), the host BrowserView
-  // HWND comes to front and covers surface child HWNDs. Re-raise surfaces on focus.
+  // Host BrowserView HWND covers surface HWNDs on focus — re-raise.
   const raiseAll = () => bunite.invoke("__bunite:surface.bringAllVisiblesToFront").catch(() => {});
   document.addEventListener("pointerdown", raiseAll, true);
 
-  // During host-page drag (e.g. dockview tab drag), send surfaces behind host
-  // via Z-order swap so OLE DragDrop reaches the host's IDropTarget.
+  // Send surfaces behind host during drag so OLE DragDrop reaches host's IDropTarget.
   document.addEventListener("dragstart", () => {
     bunite.invoke("__bunite:surface.setAllPassthrough", { passthrough: true }).catch(() => {});
   }, true);

package/src/shared/paths.ts

@@ -1,7 +1,7 @@
 import { dirname, join } from "node:path";
 import { existsSync, readdirSync } from "node:fs";
 import { createRequire } from "node:module";
-import { ARCH, BIN_EXT, NATIVE_LIB_EXT, PLATFORM_TAG } from "./platform";
+import { ARCH, NATIVE_LIB_EXT, PLATFORM_TAG } from "./platform";
 import { CEF_VERSION } from "./cefVersion";
 
 const require = createRequire(import.meta.url);
@@ -10,10 +10,14 @@ export type ResolvedNativeArtifacts = {
   packageRoot: string;
   source: "optional-package" | "local-build" | "missing";
   nativePackageName: string | null;
-  cefPackageName: string | null;
+  enginePackageName: string | null;
   nativeLibPath: string | null;
-  processHelperPath: string | null;
-  cefDir: string | null;
+  /**
+   * Engine runtime directory. Engine-specific meaning:
+   * - CEF (Windows): CEF framework dir containing libcef.dll. Resolved via env, package, or vendors/cef.
+   * - WKWebView (macOS), WebKitGTK (Linux): null. Engine is the system framework.
+   */
+  engineDir: string | null;
 };
 
 export function resolvePackageRoot(packageName: string): string | null {
@@ -43,9 +47,12 @@ function parseCefVersion(name: string): number[] | null {
   return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : null;
 }
 
-function resolveCefDir(searchDirs: string[]): string | null {
-  // 0. Explicit override (testing / development)
-  const forceDir = process.env.BUNITE_CEF_DIR;
+function resolveEngineDir(searchDirs: string[]): string | null {
+  // CEF-only (Win). mac/linux use system frameworks.
+  if (PLATFORM_TAG !== "win") return null;
+
+  // 0. Explicit override (BUNITE_ENGINE_DIR; BUNITE_CEF_DIR as legacy fallback).
+  const forceDir = process.env.BUNITE_ENGINE_DIR ?? process.env.BUNITE_CEF_DIR;
   if (forceDir && hasCefRuntime(forceDir)) {
     return forceDir;
   }
@@ -111,51 +118,40 @@ export function resolveNativeArtifacts(): ResolvedNativeArtifacts {
 
   // 1. Executable-relative (compiled standalone binary)
   const exeNativeLib = join(exeDir, `libBuniteNative${NATIVE_LIB_EXT}`);
-  const exeProcessHelper = join(exeDir, `process_helper${BIN_EXT}`);
-  if (existsSync(exeNativeLib) && existsSync(exeProcessHelper)) {
+  if (existsSync(exeNativeLib)) {
     return {
       packageRoot: exeDir,
       source: "local-build",
       nativePackageName: null,
-      cefPackageName: null,
+      enginePackageName: null,
       nativeLibPath: exeNativeLib,
-      processHelperPath: exeProcessHelper,
-      cefDir: resolveCefDir([exeDir])
+      engineDir: resolveEngineDir([exeDir])
     };
   }
 
   const packageRoot = resolveBunitePackageRoot();
 
-  // 2. Optional npm packages (bunite-native-*, bunite-cef-*)
+  // 2. Optional npm packages (bunite-native-*, bunite-cef-* on Windows only)
   const nativePackageName = `bunite-native-${PLATFORM_TAG}-${ARCH}`;
-  const cefPackageName = `bunite-cef-${PLATFORM_TAG}-${ARCH}`;
+  const enginePackageName = PLATFORM_TAG === "win" ? `bunite-cef-${PLATFORM_TAG}-${ARCH}` : null;
   const nativePackageRoot = resolvePackageRoot(nativePackageName);
-  const cefPackageRoot = resolvePackageRoot(cefPackageName);
+  const enginePackageRoot = enginePackageName ? resolvePackageRoot(enginePackageName) : null;
 
   const packagedNativeLibPath = nativePackageRoot
     ? join(nativePackageRoot, `libBuniteNative${NATIVE_LIB_EXT}`)
     : null;
-  const packagedProcessHelperPath = nativePackageRoot
-    ? join(nativePackageRoot, `process_helper${BIN_EXT}`)
-    : null;
-  const packagedCefDir = cefPackageRoot ?? null;
-
-  if (
-    packagedNativeLibPath &&
-    packagedProcessHelperPath &&
-    existsSync(packagedNativeLibPath) &&
-    existsSync(packagedProcessHelperPath)
-  ) {
+  const packagedEngineDir = enginePackageRoot ?? null;
+
+  if (packagedNativeLibPath && existsSync(packagedNativeLibPath)) {
     return {
       packageRoot: packageRoot ?? exeDir,
       source: "optional-package",
       nativePackageName,
-      cefPackageName: packagedCefDir && existsSync(packagedCefDir) ? cefPackageName : null,
+      enginePackageName: packagedEngineDir && existsSync(packagedEngineDir) ? enginePackageName : null,
       nativeLibPath: packagedNativeLibPath,
-      processHelperPath: packagedProcessHelperPath,
-      cefDir: (packagedCefDir && existsSync(packagedCefDir))
-        ? packagedCefDir
-        : resolveCefDir([nativePackageRoot, packageRoot].filter(Boolean) as string[])
+      engineDir: (packagedEngineDir && existsSync(packagedEngineDir))
+        ? packagedEngineDir
+        : resolveEngineDir([nativePackageRoot, packageRoot].filter(Boolean) as string[])
     };
   }
 
@@ -163,32 +159,28 @@ export function resolveNativeArtifacts(): ResolvedNativeArtifacts {
   if (packageRoot) {
     const localBuildRoot = join(packageRoot, "native-build", `${PLATFORM_TAG}-${ARCH}`);
     const directLib = join(localBuildRoot, `libBuniteNative${NATIVE_LIB_EXT}`);
-    const directHelper = join(localBuildRoot, `process_helper${BIN_EXT}`);
 
-    if (existsSync(directLib) && existsSync(directHelper)) {
+    if (existsSync(directLib)) {
       return {
         packageRoot,
         source: "local-build",
         nativePackageName: null,
-        cefPackageName: null,
+        enginePackageName: null,
         nativeLibPath: directLib,
-        processHelperPath: directHelper,
-        cefDir: resolveCefDir([localBuildRoot])
+        engineDir: resolveEngineDir([localBuildRoot])
       };
     }
 
     const releaseLib = join(localBuildRoot, "Release", `libBuniteNative${NATIVE_LIB_EXT}`);
-    const releaseHelper = join(localBuildRoot, "Release", `process_helper${BIN_EXT}`);
 
-    if (existsSync(releaseLib) && existsSync(releaseHelper)) {
+    if (existsSync(releaseLib)) {
       return {
         packageRoot,
         source: "local-build",
         nativePackageName: null,
-        cefPackageName: null,
+        enginePackageName: null,
         nativeLibPath: releaseLib,
-        processHelperPath: releaseHelper,
-        cefDir: resolveCefDir([localBuildRoot])
+        engineDir: resolveEngineDir([localBuildRoot])
       };
     }
   }
@@ -197,9 +189,8 @@ export function resolveNativeArtifacts(): ResolvedNativeArtifacts {
     packageRoot: packageRoot ?? exeDir,
     source: "missing",
     nativePackageName: nativePackageRoot ? nativePackageName : null,
-    cefPackageName: cefPackageRoot ? cefPackageName : null,
+    enginePackageName: enginePackageRoot ? enginePackageName : null,
     nativeLibPath: null,
-    processHelperPath: null,
-    cefDir: null
+    engineDir: null
   };
 }

package/src/shared/platform.ts

@@ -2,8 +2,7 @@ export const OS = process.platform;
 export const ARCH = process.arch;
 
 export const PLATFORM_TAG =
-  OS === "win32" ? "win" : OS === "darwin" ? "darwin" : OS;
+  OS === "win32" ? "win" : OS === "darwin" ? "mac" : OS;
 
-export const BIN_EXT = OS === "win32" ? ".exe" : "";
 export const NATIVE_LIB_EXT =
   OS === "win32" ? ".dll" : OS === "darwin" ? ".dylib" : ".so";

package/src/shared/rpcDemux.ts

@@ -32,9 +32,18 @@ export type RpcTransportDemuxer = {
   dispose(): void;
 };
 
+export type RpcDemuxBufferPolicy = "drop-oldest" | "drop-newest";
+
 export type RpcTransportDemuxerOptions = {
   /** ms to wait for peer before `bindTo` rejects. Default 10_000. */
   readyTimeout?: number;
+  /**
+   * Per-channel cap for packets received before a handler is registered.
+   * Drained FIFO on registerHandler. Default 64. Set 0 to disable buffering.
+   */
+  bufferSize?: number;
+  /** Overflow behaviour when bufferSize is exceeded. Default "drop-oldest". */
+  bufferPolicy?: RpcDemuxBufferPolicy;
 };
 
 type ChannelState = {
@@ -45,9 +54,11 @@ type ChannelState = {
   rejectReady: (error: Error) => void;
   readySettled: boolean;
   readyTimer?: ReturnType<typeof setTimeout>;
+  pending: RpcPacket[];
 };
 
 const DEFAULT_READY_TIMEOUT = 10_000;
+const DEFAULT_BUFFER_SIZE = 64;
 
 export function createRpcTransportDemuxer(
   base: RpcTransport,
@@ -58,6 +69,8 @@ export function createRpcTransportDemuxer(
   }
 
   const readyTimeout = options.readyTimeout ?? DEFAULT_READY_TIMEOUT;
+  const bufferSize = Math.max(0, options.bufferSize ?? DEFAULT_BUFFER_SIZE);
+  const bufferPolicy: RpcDemuxBufferPolicy = options.bufferPolicy ?? "drop-oldest";
   const channels = new Map<string, ChannelState>();
   let disposed = false;
 
@@ -78,12 +91,26 @@ export function createRpcTransportDemuxer(
       ready,
       resolveReady,
       rejectReady,
-      readySettled: false
+      readySettled: false,
+      pending: []
     };
     channels.set(name, state);
     return state;
   }
 
+  function bufferIncoming(state: ChannelState, packet: RpcPacket) {
+    if (bufferSize === 0) return;
+    if (state.pending.length < bufferSize) {
+      state.pending.push(packet);
+      return;
+    }
+    if (bufferPolicy === "drop-oldest") {
+      state.pending.shift();
+      state.pending.push(packet);
+    }
+    // drop-newest: leave the queue alone, discard the new packet
+  }
+
   function settleReady(state: ChannelState, action: () => void) {
     if (state.readySettled) return;
     state.readySettled = true;
@@ -112,12 +139,17 @@ export function createRpcTransportDemuxer(
     }
 
     if (isPacketEnvelope(data)) {
-      state.handler?.(data.packet);
+      if (state.handler) {
+        state.handler(data.packet);
+      } else {
+        bufferIncoming(state, data.packet);
+      }
     }
   });
 
   return {
     channel(name) {
+      if (disposed) throw new Error(`Demuxer disposed; cannot open channel "${name}"`);
       const state = getOrCreateState(name);
 
       const transport: RpcTransport = {
@@ -144,6 +176,18 @@ export function createRpcTransportDemuxer(
               );
             }, readyTimeout);
           }
+
+          // Drain after handshake bookkeeping so a thrown handler doesn't
+          // leave HELLO unsent or the ready promise un-armed. Handler errors
+          // during drain are swallowed so one bad packet doesn't drop the rest;
+          // synchronous throws from RPC handlers are a consumer bug.
+          if (state.pending.length > 0) {
+            const drained = state.pending;
+            state.pending = [];
+            for (const packet of drained) {
+              try { handler(packet); } catch { /* drain continues */ }
+            }
+          }
         },
         unregisterHandler() {
           state.handler = undefined;
@@ -166,6 +210,7 @@ export function createRpcTransportDemuxer(
           state.readySettled = true;
           state.rejectReady(new Error("Demuxer disposed"));
         }
+        state.pending.length = 0;
       }
       channels.clear();
       base.unregisterHandler?.();

package/src/shared/webviewPolyfill.ts

@@ -1,5 +1,22 @@
-// Iframe-based fallback for web browsers. No-op when the native element is already registered by the CEF preload.
-// HTMLElement reference is lazy so this module is import-safe in Node/Bun.
+// Iframe fallback for web (no-op if native already registered). HTMLElement deref'd lazily so module is import-safe in Node/Bun.
+
+// Default sandbox omits allow-same-origin / allow-top-navigation / allow-modals /
+// allow-popups-to-escape-sandbox — popup escape stays opt-in so a sandboxed page
+// can't launch unsandboxed auxiliary contexts by default.
+const DEFAULT_SANDBOX = "allow-scripts allow-forms allow-popups";
+const BLOCKED_SCHEME_RE = /^(javascript|data|vbscript|file|about):/i;
+
+// WHATWG URL parsing strips embedded ASCII tab/LF/CR and leading C0/space
+// before scheme detection. Mirror that so embedded controls (e.g. `java\nscript:`)
+// can't bypass the scheme guard.
+function normalizeForSchemeCheck(src: string): string {
+  return src.replace(/[\t\n\r]/g, "").replace(/^[\x00-\x20]+/, "");
+}
+
+export function isBlockedSrc(src: string | null | undefined): boolean {
+  if (typeof src !== "string") return false;
+  return BLOCKED_SCHEME_RE.test(normalizeForSchemeCheck(src));
+}
 
 let cachedClass: CustomElementConstructor | null = null;
 
@@ -7,18 +24,38 @@ function definePolyfillClass(): CustomElementConstructor {
   if (cachedClass) return cachedClass;
 
   class BuniteWebviewPolyfill extends HTMLElement {
-    static observedAttributes = ["src"];
+    static observedAttributes = ["src", "sandbox", "unsandboxed"];
 
     private _iframe: HTMLIFrameElement | null = null;
 
+    private applySandbox(iframe: HTMLIFrameElement) {
+      if (this.hasAttribute("unsandboxed")) {
+        iframe.removeAttribute("sandbox");
+        return;
+      }
+      const override = this.getAttribute("sandbox");
+      iframe.setAttribute("sandbox", override ?? DEFAULT_SANDBOX);
+    }
+
+    private dispatchBlocked(url: string) {
+      this.dispatchEvent(new CustomEvent("did-fail-load", { detail: { url, reason: "blocked-scheme" } }));
+    }
+
     connectedCallback() {
       if (this._iframe) return;
 
       const iframe = document.createElement("iframe");
       iframe.style.cssText = "display:block;width:100%;height:100%;border:0;background:inherit;";
+      iframe.referrerPolicy = "no-referrer";
+      this.applySandbox(iframe);
+
       const src = this.getAttribute("src");
       if (src) {
-        iframe.src = src;
+        if (isBlockedSrc(src)) {
+          this.dispatchBlocked(src);
+        } else {
+          iframe.src = src;
+        }
       }
 
       iframe.addEventListener("load", () => {
@@ -26,7 +63,9 @@ function definePolyfillClass(): CustomElementConstructor {
         try {
           url = iframe.contentWindow?.location.href ?? url;
         } catch {}
-
+        // Suppress the spurious about:blank load that fires after a blocked
+        // navigation (or before any explicit navigate).
+        if (isBlockedSrc(url)) return;
         this.dispatchEvent(new CustomEvent("did-navigate", { detail: { url } }));
       });
 
@@ -40,8 +79,16 @@ function definePolyfillClass(): CustomElementConstructor {
     }
 
     attributeChangedCallback(name: string, _oldValue: string | null, newValue: string | null) {
-      if (name === "src" && this._iframe) {
+      if (!this._iframe) return;
+      if (name === "src") {
+        if (newValue && isBlockedSrc(newValue)) {
+          this.dispatchBlocked(newValue);
+          return;
+        }
         this._iframe.src = newValue ?? "";
+      } else if (name === "sandbox" || name === "unsandboxed") {
+        // Sandbox token changes take effect on the next navigation per HTML spec.
+        this.applySandbox(this._iframe);
       }
     }
 
@@ -81,6 +128,17 @@ function definePolyfillClass(): CustomElementConstructor {
  * environments and when the native CEF preload has already registered the element.
  * `BuniteView` calls this automatically on construction; call directly only when
  * using `<bunite-webview>` markup without instantiating `BuniteView`.
+ *
+ * Defaults (web fallback only — native paths bypass these):
+ * - `sandbox="allow-scripts allow-forms allow-popups"` (popup-escape stays opt-in).
+ * - `referrerpolicy="no-referrer"`.
+ * - `javascript:` / `data:` / `vbscript:` / `file:` / `about:` schemes blocked
+ *   (with WHATWG URL-style normalization to defeat embedded-control bypass);
+ *   navigation attempt dispatches `did-fail-load` with `detail.reason === "blocked-scheme"`.
+ *
+ * Opt-out attributes on `<bunite-webview>` (observed — mutations re-apply):
+ * - `sandbox="..."` — override the default sandbox token string verbatim.
+ * - `unsandboxed` — remove the sandbox attribute entirely (trusted-content escape hatch).
  */
 export function registerBuniteWebviewPolyfill() {
   if (typeof customElements === "undefined") return;