flexdesk 0.15.2 → 0.16.0

package/README.md

@@ -1789,6 +1789,32 @@ so the window snaps, takes Win+arrows and resizes like any other.
 frame styles, return the whole window from `WM_NCCALCSIZE`, start gestures with
 `WM_NCLBUTTONDOWN`. Don't use Photino's `SetChromeless`, which loses all of that.
 
+### Links out, and the browser's right-click menu (0.16.0)
+
+In a native window a `target="_blank"` link or a `window.open()` opens nothing,
+or a bare popup with no way back. Hand them to the system browser instead:
+
+```js
+import { routeExternalLinks } from '@flexdesk/host';
+import { suppressNativeContextMenu } from '@flexdesk/widgets';
+
+routeExternalLinks({ host });    // a no-op without host.shell, so call it anywhere
+suppressNativeContextMenu();     // only your own menus, plus the native one in text
+```
+
+`routeExternalLinks` sends http(s) and mailto links that leave the app (a
+`_blank` target, another origin, a middle click) and external `window.open`
+calls to `host.shell.openExternal(url)`. That is a new optional host
+capability, which `createPhotinoHost()` offers as `shell.openExternal`. If the
+native side refuses, the original `window.open` runs. In a browser tab the
+host has no `shell`, and nothing changes.
+
+`suppressNativeContextMenu` prevents the browser's or webview's own menu (Back,
+Reload, Print, Inspect) on any right-click that no handler claimed with
+`preventDefault()`. It keeps the native menu in editable text and on selected
+text, where Paste and Copy are the point, and wherever `allow(event)` says so.
+Both calls return `{ dispose }`.
+
 ## Peer dependencies
 
 `@flexdesk/charts` needs Plotly (4.4 MB). `@flexdesk/editor` needs Monaco (14 MB).

package/dist/host.js

@@ -18,7 +18,10 @@ var HOST_CONTRACT = Object.freeze({
     optional: Object.freeze(["startNativeDrag", "startNativeResize"])
   }),
   dialogs: Object.freeze({ required: Object.freeze(["saveFile"]), optional: Object.freeze([]) }),
-  state: Object.freeze({ required: Object.freeze(["read", "write"]), optional: Object.freeze([]) })
+  state: Object.freeze({ required: Object.freeze(["read", "write"]), optional: Object.freeze([]) }),
+  // `openExternal(url)` hands a web address to the OS's default browser and
+  // resolves true when it did. See external_links.js.
+  shell: Object.freeze({ required: Object.freeze(["openExternal"]), optional: Object.freeze([]) })
 });
 function validateCapability(name, cap) {
   const spec = HOST_CONTRACT[name];
@@ -256,6 +259,12 @@ function createPhotinoHost(opts = {}) {
         return r && typeof r === "object" ? r : null;
       }
     },
+    shell: {
+      // True when the native side opened it in the system browser; false
+      // when it refused (a scheme it won't open, an older native side
+      // without the op): the caller falls back to window.open.
+      openExternal: async (url) => await soft(false, "shell", "openExternal", String(url || "")) === true
+    },
     state: {
       async read(key) {
         const v = await soft(null, "state", "read", key);
@@ -279,6 +288,75 @@ function createPhotinoHost(opts = {}) {
   }
   return createHost(caps);
 }
+
+// src/host/external_links.js
+var SCHEMES = /* @__PURE__ */ new Set(["http:", "https:", "mailto:"]);
+function outbound(href, base) {
+  let url;
+  try {
+    url = new URL(String(href), base);
+  } catch {
+    return null;
+  }
+  return SCHEMES.has(url.protocol) ? url : null;
+}
+function routeExternalLinks({ host, root, win } = {}) {
+  const w = win ?? (typeof window !== "undefined" ? window : null);
+  const r = root ?? (typeof document !== "undefined" ? document : null);
+  const shell = host?.shell;
+  if (!shell || typeof shell.openExternal !== "function" || !w || !r) return { dispose() {
+  } };
+  const base = () => w.location?.href;
+  const origin = () => {
+    try {
+      return new URL(base()).origin;
+    } catch {
+      return null;
+    }
+  };
+  const nativeOpen = w.open;
+  const fallback = (href) => {
+    try {
+      nativeOpen?.call(w, href, "_blank", "noopener");
+    } catch {
+    }
+  };
+  const send = (href) => {
+    Promise.resolve().then(() => shell.openExternal(href)).then((opened) => {
+      if (opened !== true) fallback(href);
+    }, () => fallback(href));
+  };
+  const onClick = (e) => {
+    if (e.defaultPrevented) return;
+    if (e.type === "click" ? e.button !== 0 : e.button !== 1) return;
+    const a = e.target?.closest?.("a[href]");
+    if (!a || a.hasAttribute("download")) return;
+    const url = outbound(a.getAttribute("href"), base());
+    if (!url) return;
+    const leaves = url.protocol === "mailto:" || (a.getAttribute("target") || "").toLowerCase() === "_blank" || url.origin !== origin() || e.button === 1;
+    if (!leaves) return;
+    e.preventDefault();
+    send(url.href);
+  };
+  const routedOpen = function open(href, target, features) {
+    const url = href == null ? null : outbound(href, base());
+    if (url && (url.protocol === "mailto:" || url.origin !== origin())) {
+      send(url.href);
+      return null;
+    }
+    return nativeOpen.call(w, href, target, features);
+  };
+  r.addEventListener("click", onClick);
+  r.addEventListener("auxclick", onClick);
+  w.open = routedOpen;
+  return {
+    dispose() {
+      r.removeEventListener("click", onClick);
+      r.removeEventListener("auxclick", onClick);
+      if (w.open === routedOpen) w.open = nativeOpen;
+    }
+  };
+}
 export {
   HOST_CONTRACT,
   NULL_HOST,
@@ -287,6 +365,7 @@ export {
   createPhotinoTransport,
   createPywebviewHost,
   isPhotinoWindow,
+  routeExternalLinks,
   usesCustomWindowChrome,
   validateCapability
 };

package/dist/host.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../src/host/host.js", "../src/host/pywebview_host.js", "../src/host/photino_host.js"],
-  "sourcesContent": ["/**\n * host.js \u2014 the host port.\n *\n * The framework declares what it needs from its embedder. A Host is a bag of\n * INDEPENDENTLY OPTIONAL capability objects:\n *\n *   - absent capability  => absent key (never a stub)\n *   - present capability => must be complete (validated at boot)\n *\n * There is NO module-level default host and NO getHost(). Hosts are injected \u2014\n * a module singleton here would just be `window.pywebview` wearing a hat, and\n * would make a second host (mock, browser tab, VS Code webview) impossible.\n *\n * Zero pywebview. Zero EcoAgent. See pywebview_host.js for the reference\n * adapter that implements this port against the pywebview / HTTP transports.\n */\n\nexport const HOST_CONTRACT = Object.freeze({\n    window: Object.freeze({\n        required: Object.freeze(['chrome', 'minimize', 'close', 'isMaximized', 'setMaximized',\n                                 'isFullscreen', 'toggleFullscreen', 'getBounds', 'setBounds']),\n        // `chrome()` answers 'native' or 'custom', or a promise of one.\n        optional: Object.freeze(['startNativeDrag', 'startNativeResize']),\n    }),\n    dialogs: Object.freeze({ required: Object.freeze(['saveFile']), optional: Object.freeze([]) }),\n    state:   Object.freeze({ required: Object.freeze(['read', 'write']), optional: Object.freeze([]) }),\n});\n\n/**\n * Validate ONE capability object. We validate the capability the adapter\n * authored \u2014 a plain object literal with real closures \u2014 not the raw bridge:\n * `index.html`'s browser-mode polyfill installs a `new Proxy({}, {get})` that\n * returns a function for EVERY property name, so duck-typing the bridge is\n * vacuously true and validates nothing. A Proxy cannot forge a missing key in\n * an object literal.\n *\n * @returns {{ ok: boolean, missing: string[] }}\n */\nexport function validateCapability(name, cap) {\n    const spec = HOST_CONTRACT[name];\n    if (!spec) return { ok: false, missing: [`unknown capability '${name}'`] };\n    if (!cap || typeof cap !== 'object') return { ok: false, missing: [...spec.required] };\n    const missing = spec.required.filter((m) => typeof cap[m] !== 'function');\n    return { ok: missing.length === 0, missing };\n}\n\n/**\n * Validate + freeze a set of capabilities into a Host.\n * Throws at boot on an incomplete capability \u2014 a half-wired host is a bug,\n * and a bug at boot beats a silent degrade at click time.\n *\n * @param {{ window?: object, dialogs?: object, state?: object }} caps\n * @returns {Readonly<object>} the Host\n */\nexport function createHost(caps = {}) {\n    const host = {};\n    for (const name of Object.keys(HOST_CONTRACT)) {\n        const cap = caps[name];\n        if (cap == null) continue;                       // legitimately absent\n        const v = validateCapability(name, cap);\n        if (!v.ok) {\n            throw new Error(`Host capability '${name}' is incomplete: missing ${v.missing.join(', ')}`);\n        }\n        host[name] = Object.freeze(cap);\n    }\n    return Object.freeze(host);\n}\n\n/** The zero-capability host. Every framework consumer MUST survive it. */\nexport const NULL_HOST = createHost({});\n", "/**\n * pywebview_host.js \u2014 the REFERENCE host adapter.\n *\n * Knows pywebview. Knows NOTHING about EcoAgent: every domain fact (which\n * bridge ref to use, where a state key lands on disk) arrives as a parameter.\n * This is the adapter a standalone consumer copies; EcoAgent is just its first\n * caller (see ui/js/bootstrap/app_bootstrap.js).\n *\n * It speaks to whatever `window.pywebview.api` currently is \u2014 the real\n * pywebview bridge in the desktop app, or the `POST /api/<method>` Proxy\n * polyfill that ui/index.html installs in --browser mode. Both transports are\n * positional-on-the-wire, which is why setBounds() spreads its object back out\n * into positional args.\n */\n\nimport { createHost } from './host.js';\n\nconst FRAMELESS_BACKENDS = new Set(['edgechromium', 'mshtml']);\n\n/**\n * Custom (frameless) window chrome \u2014 the min/max/close buttons, edge resize\n * handles and drag-to-move top bar \u2014 only makes sense when our top bar IS the\n * window's title bar. That holds on a native pywebview window the OS draws\n * *without* decorations of its own: Windows (frameless). On Linux/macOS the\n * window manager already draws a native title bar above our top bar, and in\n * `--browser` mode the browser supplies its own chrome \u2014 in both cases the\n * custom controls are a redundant second set, so we neither render nor wire\n * them (which also stops us swallowing native F11 fullscreen and showing dead\n * resize cursors at the window edges).\n *\n * Detection keys off the pywebview backend string, which is unambiguous: the\n * browser-mode polyfill in index.html injects only `.api`, never `.platform`,\n * so any `.platform` at all \u21D2 running as a native pywebview app. The frameless\n * (custom-title-bar) backends are the Windows WebViews \u2014 'edgechromium' /\n * 'mshtml'. Linux ('gtkwebkit2' / 'qtwebengine') and macOS ('cocoa') draw\n * native decorations, so they return false. Verified live: WebKitGTK reports\n * platform 'gtkwebkit2'.\n */\nexport function usesCustomWindowChrome() {\n    // Authoritative signal from the Python host: run_pywebview_mode() appends\n    // `?frameless=1` to the window URL exactly when it created a frameless native\n    // window (Windows). Prefer it over the backend sniff below because it's\n    // present at document parse \u2014 before pywebview finishes injecting\n    // `window.pywebview` (and before the browser-mode polyfill, which sets `.api`\n    // but no `.platform`, can clobber it). Reading the sniff at shell-build time\n    // otherwise races and the whole custom chrome silently fails to render.\n    try {\n        if (new URLSearchParams(window.location.search).get('frameless') === '1') {\n            return true;\n        }\n    } catch (_) { /* location unavailable (non-browser env) \u2014 fall through */ }\n    const platform = window.pywebview && window.pywebview.platform;\n    return !!platform && FRAMELESS_BACKENDS.has(platform);\n}\n\n/**\n * Build a Host backed by the pywebview bridge.\n *\n * @param {object}  opts\n * @param {{current: object|null}} [opts.bridgeRef]  LIVE ref to the bridge.\n *        MUST be a ref, never a snapshot: `setupHostBridgeListener` mutates\n *        `.current` when a late bridge arrives, and `resolveHostBridge` can\n *        resolve `null` after its timeout. Snapshotting the bridge here would\n *        freeze that null and reproduce as an intermittent boot failure.\n * @param {(key: string) => string} [opts.resolvePath]  logical state key ->\n *        storage path. THE domain seam: the framework only ever names keys\n *        ('desktops', 'datatable_state'); the embedder decides where they land.\n * @param {object} [opts.logger]\n */\nexport function createPywebviewHost({ bridgeRef = null, resolvePath = (k) => `${k}.json`, logger = console } = {}) {\n    const api = () => bridgeRef?.current ?? window.pywebview?.api ?? null;\n\n    const call = async (name, args = []) => {\n        const a = api();\n        if (!a || typeof a[name] !== 'function') return null;\n        try { return await a[name](...args); }\n        catch (e) { logger.warn?.('[host] call failed', name, e); return null; }\n    };\n\n    // Envelope unwrapping, in ONE place. Transcribed from the call sites this\n    // replaces, so app.py's catch-all `{ok: true}` reply (which carries no\n    // `maximized` key) still reads as false, exactly as it does today.\n    const okMax = (r) => Boolean(r && r.ok && r.maximized === true);\n    const okFs  = (r) => Boolean(r && r.ok && r.fullscreen);\n\n    // ALL THREE capabilities are ALWAYS advertised. Do NOT gate them on api()\n    // being non-null at construction time: the methods late-bind through the\n    // ref, and gating here would permanently strand a late-arriving bridge on\n    // the fallback paths (Blob download instead of the native save dialog).\n    return createHost({\n        window: {\n            chrome: () => (usesCustomWindowChrome() ? 'custom' : 'native'),\n            minimize: () => { void call('window_minimize'); },\n            close:    () => { void call('window_close'); },\n            isMaximized:      async () => okMax(await call('window_is_maximized')),\n            setMaximized:     async (on) => okMax(await call('window_set_maximized', [on])),\n            isFullscreen:     async () => okFs(await call('window_is_fullscreen')),\n            toggleFullscreen: async () => okFs(await call('window_toggle_fullscreen')),\n            async getBounds() {\n                const r = await call('window_get_bounds');\n                if (!r || !r.ok) return null;\n                return { x: r.x, y: r.y, width: r.width, height: r.height };\n            },\n            // POSITIONAL on the wire \u2014 both transports depend on it. Not async:\n            // this is a rAF hot path during a window drag/resize; nobody awaits.\n            setBounds({ x = null, y = null, width = null, height = null } = {}) {\n                void call('window_set_bounds', [x, y, width, height]);\n            },\n            startNativeDrag: async () => Boolean((await call('window_start_native_drag'))?.ok),\n        },\n        dialogs: {\n            // Resolves to null when the transport has no save_file_dialog behind it.\n            // Per host.js that is the contract for \"unavailable\", and every caller\n            // treats it exactly like an absent `dialogs` capability: fall back to a\n            // Blob download, never report a failed save. Covered by\n            // tests/ui/test_host_save_fallback.mjs.\n            saveFile: ({ data, filename, kind }) => call('save_file_dialog', [data, filename, kind]),\n        },\n        state: {\n            async read(key) {\n                const blob = await call('workspace_state_read', [{ path: resolvePath(key) }]);\n                if (!blob) return null;\n                try { return typeof blob === 'string' ? JSON.parse(blob) : blob; }\n                catch (e) { logger.warn?.('[host] bad JSON for state key', key, e); return null; }\n            },\n            async write(key, value) {\n                const r = await call('workspace_state_write',\n                                     [{ path: resolvePath(key), data: JSON.stringify(value) }]);\n                return r !== null;\n            },\n        },\n    });\n}\n", "/**\n * photino_host.js \u2014 the host port over a Photino.NET window.\n *\n * Photino gives the page exactly two things: `window.external.sendMessage(text)`\n * and `window.external.receiveMessage(callback)`. Strings in, strings out, no\n * replies. This adapter puts a request/reply protocol over them, matched by id:\n *\n *   page \u2192 host   {\"id\": 7, \"cap\": \"window\", \"op\": \"setBounds\", \"args\": [{\"x\":0,\"y\":0,\"width\":1200,\"height\":800}]}\n *   host \u2192 page   {\"id\": 7, \"ok\": true,  \"value\": null}\n *   host \u2192 page   {\"id\": 8, \"ok\": false, \"error\": \"no such op\"}\n *   host \u2192 page   {\"event\": \"window.maximizedChanged\", \"value\": true}      // unsolicited, no id\n *\n * and offers the port's `window`, `dialogs` and `state` capabilities on top.\n * The C# side \u2014 one dispatcher on the window's web-message handler, every op\n * with its args and reply \u2014 is documented in `photino_host.md` beside this file.\n *\n * Like pywebview_host.js it knows the transport and NOTHING about the app: an\n * embedder that keeps some capability elsewhere (BugDesk keeps `state` on its\n * own server) passes that capability in, or `null` to leave it out.\n *\n * In a browser tab there is no `window.external.sendMessage`, and\n * createPhotinoHost() returns NULL_HOST \u2014 the fallback every FlexDesk consumer\n * already has to survive.\n */\n\nimport { createHost, NULL_HOST } from './host.js';\n\n/** True when `ext` (default: `window.external`) is a Photino bridge. */\nexport function isPhotinoWindow(ext = (typeof window !== 'undefined' ? window.external : undefined)) {\n    return !!ext && typeof ext.sendMessage === 'function' && typeof ext.receiveMessage === 'function';\n}\n\n/**\n * The bare request/reply layer. `call(cap, op, ...args)` sends one request and\n * resolves with the reply's `value` (`request(cap, op, args, {wait})` is the\n * same with a timeout of its own). It REJECTS when the host answers\n * `ok: false` (with the host's error) and when no reply arrives within\n * `timeoutMs`. A reply for an id nobody is waiting on, a message that is not\n * JSON, and anything that is neither a reply nor an event are dropped.\n *\n * @param {object} opts\n * @param {{sendMessage: Function, receiveMessage: Function}} opts.external\n * @param {number}  [opts.timeoutMs=10000]\n * @param {(name: string, value: any) => void} [opts.onEvent]  id-less `{event, value}` messages\n * @param {object}  [opts.logger]\n */\nexport function createPhotinoTransport({ external, timeoutMs = 10000, onEvent = null, logger = console }) {\n    const pending = new Map();\n    let seq = 0;\n    external.receiveMessage((text) => {\n        let m;\n        try { m = typeof text === 'string' ? JSON.parse(text) : text; } catch { return; }\n        if (!m || typeof m !== 'object') return;\n        if (m.id == null) {\n            if (typeof m.event === 'string' && onEvent) {\n                try { onEvent(m.event, m.value); }\n                catch (e) { logger.warn?.('[host] photino event handler failed', m.event, e); }\n            }\n            return;\n        }\n        const p = pending.get(m.id);\n        if (!p) return;\n        pending.delete(m.id);\n        clearTimeout(p.timer);\n        if (m.ok) p.resolve(m.value === undefined ? null : m.value);\n        else p.reject(new Error(m.error || `${p.what}: refused by the host`));\n    });\n    // `wait` is this request's timeout in ms; 0 waits for as long as it takes.\n    const request = (cap, op, args = [], { wait = timeoutMs } = {}) => new Promise((resolve, reject) => {\n        const id = ++seq;\n        const what = `${cap}.${op}`;\n        const timer = wait > 0 ? setTimeout(() => {\n            if (pending.delete(id)) reject(new Error(`${what}: no answer from the host within ${wait} ms`));\n        }, wait) : null;\n        pending.set(id, { resolve, reject, timer, what });\n        try {\n            external.sendMessage(JSON.stringify({ id, cap, op, args }));\n        } catch (e) {\n            pending.delete(id);\n            clearTimeout(timer);\n            reject(e);\n        }\n    });\n    const call = (cap, op, ...args) => request(cap, op, args);\n    return { call, request, pending: () => pending.size };\n}\n\n/**\n * Build a Host backed by a Photino window.\n *\n * The capability methods follow pywebview_host.js's contract, so a consumer\n * cannot tell the two apart: they DEGRADE instead of rejecting. A failed query\n * reads as false / null, a failed fire-and-forget is logged, and a save that\n * the host refused or never answered resolves `null` \u2014 the host.js meaning of\n * \"unavailable\", which every caller turns into a Blob download.\n *\n * @param {object} [opts]\n * @param {object} [opts.external=window.external]  the Photino bridge (a fake one in tests)\n * @param {number} [opts.timeoutMs=10000]\n * @param {(name: string, value: any) => void} [opts.onEvent]\n * @param {object} [opts.logger=console]\n * @param {'auto'|'native'|'custom'} [opts.chrome='auto']  who draws the window's\n *        title bar and borders. `auto` asks the native side once (`host.describe`,\n *        its `frame` field), the first time somebody needs to know; `native`\n *        or `custom` fixes the answer without asking. See photino_host.md.\n * @param {object|null} [opts.window]   replace the window capability, or `null` to leave it out\n * @param {object|null} [opts.dialogs]  replace the dialogs capability, or `null` to leave it out\n * @param {object|null} [opts.state]    replace the state capability, or `null` to leave it out\n * @returns {Readonly<object>} a Host, or NULL_HOST outside a Photino window\n */\nexport function createPhotinoHost(opts = {}) {\n    const {\n        external = (typeof window !== 'undefined' ? window.external : undefined),\n        timeoutMs = 10000,\n        onEvent = null,\n        logger = console,\n        chrome = 'auto',\n    } = opts;\n    if (!isPhotinoWindow(external)) return NULL_HOST;\n\n    const { call, request } = createPhotinoTransport({ external, timeoutMs, onEvent, logger });\n    const warn = (cap, op, e) => logger.warn?.('[host] photino call failed', `${cap}.${op}`, e);\n    const soft = async (fallback, cap, op, ...args) => {\n        try { return await call(cap, op, ...args); }\n        catch (e) { warn(cap, op, e); return fallback; }\n    };\n    const fire = (cap, op, ...args) => { void soft(null, cap, op, ...args); };\n\n    // Who draws the frame. Asked once and remembered: a string once known, the\n    // pending question before that. A native side that predates `frame`, or\n    // doesn't answer within 3 s, has native chrome.\n    let frame = chrome === 'custom' || chrome === 'native' ? chrome : null;\n    let asking = null;\n    const askFrame = () => {\n        if (frame) return frame;\n        asking ??= request('host', 'describe', [], { wait: 3000 })\n            .then((d) => (d && d.frame === 'custom' ? 'custom' : 'native'), () => 'native')\n            .then((f) => { frame = f; return f; });\n        return asking;\n    };\n    // A drag or resize handed to the OS: the reply comes when the mouse is\n    // released, however long that takes. Refused (a native side without the op,\n    // or a window with native chrome) means \"not handled\": the caller does it in JS.\n    const gesture = async (op, ...args) => {\n        try { await request('window', op, args, { wait: 0 }); return true; }\n        catch (e) { return false; }\n    };\n\n    const defaults = {\n        window: {\n            // 'native' (the OS draws the frame: FlexDesk's own buttons would be\n            // a second set) or 'custom' (the native side made the window\n            // frameless). A promise until the native side has said which.\n            chrome: () => askFrame(),\n            minimize: () => { fire('window', 'minimize'); },\n            close: () => { fire('window', 'close'); },\n            isMaximized: async () => (await soft(false, 'window', 'isMaximized')) === true,\n            setMaximized: async (on) => (await soft(false, 'window', 'setMaximized', !!on)) === true,\n            isFullscreen: async () => (await soft(false, 'window', 'isFullscreen')) === true,\n            toggleFullscreen: async () => (await soft(false, 'window', 'toggleFullscreen')) === true,\n            async getBounds() {\n                const b = await soft(null, 'window', 'getBounds');\n                if (!b || typeof b !== 'object') return null;\n                return { x: b.x, y: b.y, width: b.width, height: b.height };\n            },\n            startNativeDrag: () => gesture('startDrag'),\n            startNativeResize: (edge) => gesture('startResize', String(edge || '')),\n            // Not async, like pywebview's: a rAF hot path during a drag; nobody awaits.\n            setBounds({ x = null, y = null, width = null, height = null } = {}) {\n                fire('window', 'setBounds', { x, y, width, height });\n            },\n        },\n        dialogs: {\n            // `{ok: true, path}` | `{ok: false, cancelled: true}` | `{ok: false, error}`,\n            // or null when the host refused: fall back to a download. NO TIMEOUT \u2014\n            // the dialog is open for as long as the user takes, and giving up on it\n            // would download the file a second time behind the dialog.\n            async saveFile({ data, filename, kind } = {}) {\n                let r = null;\n                try { r = await request('dialogs', 'saveFile', [{ data, filename, kind }], { wait: 0 }); }\n                catch (e) { warn('dialogs', 'saveFile', e); }\n                return r && typeof r === 'object' ? r : null;\n            },\n        },\n        state: {\n            async read(key) {\n                const v = await soft(null, 'state', 'read', key);\n                if (typeof v !== 'string') return v ?? null;\n                try { return JSON.parse(v); }\n                catch (e) { logger.warn?.('[host] bad JSON for state key', key, e); return null; }\n            },\n            async write(key, value) {\n                return (await soft(false, 'state', 'write', key, value)) !== false;\n            },\n        },\n    };\n\n    const caps = {};\n    for (const name of Object.keys(defaults)) {\n        if (!(name in opts)) caps[name] = defaults[name];\n        else if (opts[name] != null) caps[name] = opts[name];\n    }\n    return createHost(caps);\n}\n"],
-  "mappings": ";;;AAiBO,IAAM,gBAAgB,OAAO,OAAO;AAAA,EACvC,QAAQ,OAAO,OAAO;AAAA,IAClB,UAAU,OAAO,OAAO;AAAA,MAAC;AAAA,MAAU;AAAA,MAAY;AAAA,MAAS;AAAA,MAAe;AAAA,MAC9C;AAAA,MAAgB;AAAA,MAAoB;AAAA,MAAa;AAAA,IAAW,CAAC;AAAA;AAAA,IAEtF,UAAU,OAAO,OAAO,CAAC,mBAAmB,mBAAmB,CAAC;AAAA,EACpE,CAAC;AAAA,EACD,SAAS,OAAO,OAAO,EAAE,UAAU,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC;AAAA,EAC7F,OAAS,OAAO,OAAO,EAAE,UAAU,OAAO,OAAO,CAAC,QAAQ,OAAO,CAAC,GAAG,UAAU,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC;AACtG,CAAC;AAYM,SAAS,mBAAmB,MAAM,KAAK;AAC1C,QAAM,OAAO,cAAc,IAAI;AAC/B,MAAI,CAAC,KAAM,QAAO,EAAE,IAAI,OAAO,SAAS,CAAC,uBAAuB,IAAI,GAAG,EAAE;AACzE,MAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO,EAAE,IAAI,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ,EAAE;AACrF,QAAM,UAAU,KAAK,SAAS,OAAO,CAAC,MAAM,OAAO,IAAI,CAAC,MAAM,UAAU;AACxE,SAAO,EAAE,IAAI,QAAQ,WAAW,GAAG,QAAQ;AAC/C;AAUO,SAAS,WAAW,OAAO,CAAC,GAAG;AAClC,QAAM,OAAO,CAAC;AACd,aAAW,QAAQ,OAAO,KAAK,aAAa,GAAG;AAC3C,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,OAAO,KAAM;AACjB,UAAM,IAAI,mBAAmB,MAAM,GAAG;AACtC,QAAI,CAAC,EAAE,IAAI;AACP,YAAM,IAAI,MAAM,oBAAoB,IAAI,4BAA4B,EAAE,QAAQ,KAAK,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,SAAK,IAAI,IAAI,OAAO,OAAO,GAAG;AAAA,EAClC;AACA,SAAO,OAAO,OAAO,IAAI;AAC7B;AAGO,IAAM,YAAY,WAAW,CAAC,CAAC;;;ACpDtC,IAAM,qBAAqB,oBAAI,IAAI,CAAC,gBAAgB,QAAQ,CAAC;AAqBtD,SAAS,yBAAyB;AAQrC,MAAI;AACA,QAAI,IAAI,gBAAgB,OAAO,SAAS,MAAM,EAAE,IAAI,WAAW,MAAM,KAAK;AACtE,aAAO;AAAA,IACX;AAAA,EACJ,SAAS,GAAG;AAAA,EAA8D;AAC1E,QAAM,WAAW,OAAO,aAAa,OAAO,UAAU;AACtD,SAAO,CAAC,CAAC,YAAY,mBAAmB,IAAI,QAAQ;AACxD;AAgBO,SAAS,oBAAoB,EAAE,YAAY,MAAM,cAAc,CAAC,MAAM,GAAG,CAAC,SAAS,SAAS,QAAQ,IAAI,CAAC,GAAG;AAC/G,QAAM,MAAM,MAAM,WAAW,WAAW,OAAO,WAAW,OAAO;AAEjE,QAAM,OAAO,OAAO,MAAM,OAAO,CAAC,MAAM;AACpC,UAAM,IAAI,IAAI;AACd,QAAI,CAAC,KAAK,OAAO,EAAE,IAAI,MAAM,WAAY,QAAO;AAChD,QAAI;AAAE,aAAO,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI;AAAA,IAAG,SAC9B,GAAG;AAAE,aAAO,OAAO,sBAAsB,MAAM,CAAC;AAAG,aAAO;AAAA,IAAM;AAAA,EAC3E;AAKA,QAAM,QAAQ,CAAC,MAAM,QAAQ,KAAK,EAAE,MAAM,EAAE,cAAc,IAAI;AAC9D,QAAM,OAAQ,CAAC,MAAM,QAAQ,KAAK,EAAE,MAAM,EAAE,UAAU;AAMtD,SAAO,WAAW;AAAA,IACd,QAAQ;AAAA,MACJ,QAAQ,MAAO,uBAAuB,IAAI,WAAW;AAAA,MACrD,UAAU,MAAM;AAAE,aAAK,KAAK,iBAAiB;AAAA,MAAG;AAAA,MAChD,OAAU,MAAM;AAAE,aAAK,KAAK,cAAc;AAAA,MAAG;AAAA,MAC7C,aAAkB,YAAY,MAAM,MAAM,KAAK,qBAAqB,CAAC;AAAA,MACrE,cAAkB,OAAO,OAAO,MAAM,MAAM,KAAK,wBAAwB,CAAC,EAAE,CAAC,CAAC;AAAA,MAC9E,cAAkB,YAAY,KAAK,MAAM,KAAK,sBAAsB,CAAC;AAAA,MACrE,kBAAkB,YAAY,KAAK,MAAM,KAAK,0BAA0B,CAAC;AAAA,MACzE,MAAM,YAAY;AACd,cAAM,IAAI,MAAM,KAAK,mBAAmB;AACxC,YAAI,CAAC,KAAK,CAAC,EAAE,GAAI,QAAO;AACxB,eAAO,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,QAAQ,EAAE,OAAO;AAAA,MAC9D;AAAA;AAAA;AAAA,MAGA,UAAU,EAAE,IAAI,MAAM,IAAI,MAAM,QAAQ,MAAM,SAAS,KAAK,IAAI,CAAC,GAAG;AAChE,aAAK,KAAK,qBAAqB,CAAC,GAAG,GAAG,OAAO,MAAM,CAAC;AAAA,MACxD;AAAA,MACA,iBAAiB,YAAY,SAAS,MAAM,KAAK,0BAA0B,IAAI,EAAE;AAAA,IACrF;AAAA,IACA,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAML,UAAU,CAAC,EAAE,MAAM,UAAU,KAAK,MAAM,KAAK,oBAAoB,CAAC,MAAM,UAAU,IAAI,CAAC;AAAA,IAC3F;AAAA,IACA,OAAO;AAAA,MACH,MAAM,KAAK,KAAK;AACZ,cAAM,OAAO,MAAM,KAAK,wBAAwB,CAAC,EAAE,MAAM,YAAY,GAAG,EAAE,CAAC,CAAC;AAC5E,YAAI,CAAC,KAAM,QAAO;AAClB,YAAI;AAAE,iBAAO,OAAO,SAAS,WAAW,KAAK,MAAM,IAAI,IAAI;AAAA,QAAM,SAC1D,GAAG;AAAE,iBAAO,OAAO,iCAAiC,KAAK,CAAC;AAAG,iBAAO;AAAA,QAAM;AAAA,MACrF;AAAA,MACA,MAAM,MAAM,KAAK,OAAO;AACpB,cAAM,IAAI,MAAM;AAAA,UAAK;AAAA,UACA,CAAC,EAAE,MAAM,YAAY,GAAG,GAAG,MAAM,KAAK,UAAU,KAAK,EAAE,CAAC;AAAA,QAAC;AAC9E,eAAO,MAAM;AAAA,MACjB;AAAA,IACJ;AAAA,EACJ,CAAC;AACL;;;ACxGO,SAAS,gBAAgB,MAAO,OAAO,WAAW,cAAc,OAAO,WAAW,QAAY;AACjG,SAAO,CAAC,CAAC,OAAO,OAAO,IAAI,gBAAgB,cAAc,OAAO,IAAI,mBAAmB;AAC3F;AAgBO,SAAS,uBAAuB,EAAE,UAAU,YAAY,KAAO,UAAU,MAAM,SAAS,QAAQ,GAAG;AACtG,QAAM,UAAU,oBAAI,IAAI;AACxB,MAAI,MAAM;AACV,WAAS,eAAe,CAAC,SAAS;AAC9B,QAAI;AACJ,QAAI;AAAE,UAAI,OAAO,SAAS,WAAW,KAAK,MAAM,IAAI,IAAI;AAAA,IAAM,QAAQ;AAAE;AAAA,IAAQ;AAChF,QAAI,CAAC,KAAK,OAAO,MAAM,SAAU;AACjC,QAAI,EAAE,MAAM,MAAM;AACd,UAAI,OAAO,EAAE,UAAU,YAAY,SAAS;AACxC,YAAI;AAAE,kBAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,QAAG,SAC1B,GAAG;AAAE,iBAAO,OAAO,uCAAuC,EAAE,OAAO,CAAC;AAAA,QAAG;AAAA,MAClF;AACA;AAAA,IACJ;AACA,UAAM,IAAI,QAAQ,IAAI,EAAE,EAAE;AAC1B,QAAI,CAAC,EAAG;AACR,YAAQ,OAAO,EAAE,EAAE;AACnB,iBAAa,EAAE,KAAK;AACpB,QAAI,EAAE,GAAI,GAAE,QAAQ,EAAE,UAAU,SAAY,OAAO,EAAE,KAAK;AAAA,QACrD,GAAE,OAAO,IAAI,MAAM,EAAE,SAAS,GAAG,EAAE,IAAI,uBAAuB,CAAC;AAAA,EACxE,CAAC;AAED,QAAM,UAAU,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,EAAE,OAAO,UAAU,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS,WAAW;AAChG,UAAM,KAAK,EAAE;AACb,UAAM,OAAO,GAAG,GAAG,IAAI,EAAE;AACzB,UAAM,QAAQ,OAAO,IAAI,WAAW,MAAM;AACtC,UAAI,QAAQ,OAAO,EAAE,EAAG,QAAO,IAAI,MAAM,GAAG,IAAI,oCAAoC,IAAI,KAAK,CAAC;AAAA,IAClG,GAAG,IAAI,IAAI;AACX,YAAQ,IAAI,IAAI,EAAE,SAAS,QAAQ,OAAO,KAAK,CAAC;AAChD,QAAI;AACA,eAAS,YAAY,KAAK,UAAU,EAAE,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC;AAAA,IAC9D,SAAS,GAAG;AACR,cAAQ,OAAO,EAAE;AACjB,mBAAa,KAAK;AAClB,aAAO,CAAC;AAAA,IACZ;AAAA,EACJ,CAAC;AACD,QAAM,OAAO,CAAC,KAAK,OAAO,SAAS,QAAQ,KAAK,IAAI,IAAI;AACxD,SAAO,EAAE,MAAM,SAAS,SAAS,MAAM,QAAQ,KAAK;AACxD;AAyBO,SAAS,kBAAkB,OAAO,CAAC,GAAG;AACzC,QAAM;AAAA,IACF,WAAY,OAAO,WAAW,cAAc,OAAO,WAAW;AAAA,IAC9D,YAAY;AAAA,IACZ,UAAU;AAAA,IACV,SAAS;AAAA,IACT,SAAS;AAAA,EACb,IAAI;AACJ,MAAI,CAAC,gBAAgB,QAAQ,EAAG,QAAO;AAEvC,QAAM,EAAE,MAAM,QAAQ,IAAI,uBAAuB,EAAE,UAAU,WAAW,SAAS,OAAO,CAAC;AACzF,QAAM,OAAO,CAAC,KAAK,IAAI,MAAM,OAAO,OAAO,8BAA8B,GAAG,GAAG,IAAI,EAAE,IAAI,CAAC;AAC1F,QAAM,OAAO,OAAO,UAAU,KAAK,OAAO,SAAS;AAC/C,QAAI;AAAE,aAAO,MAAM,KAAK,KAAK,IAAI,GAAG,IAAI;AAAA,IAAG,SACpC,GAAG;AAAE,WAAK,KAAK,IAAI,CAAC;AAAG,aAAO;AAAA,IAAU;AAAA,EACnD;AACA,QAAM,OAAO,CAAC,KAAK,OAAO,SAAS;AAAE,SAAK,KAAK,MAAM,KAAK,IAAI,GAAG,IAAI;AAAA,EAAG;AAKxE,MAAI,QAAQ,WAAW,YAAY,WAAW,WAAW,SAAS;AAClE,MAAI,SAAS;AACb,QAAM,WAAW,MAAM;AACnB,QAAI,MAAO,QAAO;AAClB,eAAW,QAAQ,QAAQ,YAAY,CAAC,GAAG,EAAE,MAAM,IAAK,CAAC,EACpD,KAAK,CAAC,MAAO,KAAK,EAAE,UAAU,WAAW,WAAW,UAAW,MAAM,QAAQ,EAC7E,KAAK,CAAC,MAAM;AAAE,cAAQ;AAAG,aAAO;AAAA,IAAG,CAAC;AACzC,WAAO;AAAA,EACX;AAIA,QAAM,UAAU,OAAO,OAAO,SAAS;AACnC,QAAI;AAAE,YAAM,QAAQ,UAAU,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;AAAG,aAAO;AAAA,IAAM,SAC5D,GAAG;AAAE,aAAO;AAAA,IAAO;AAAA,EAC9B;AAEA,QAAM,WAAW;AAAA,IACb,QAAQ;AAAA;AAAA;AAAA;AAAA,MAIJ,QAAQ,MAAM,SAAS;AAAA,MACvB,UAAU,MAAM;AAAE,aAAK,UAAU,UAAU;AAAA,MAAG;AAAA,MAC9C,OAAO,MAAM;AAAE,aAAK,UAAU,OAAO;AAAA,MAAG;AAAA,MACxC,aAAa,YAAa,MAAM,KAAK,OAAO,UAAU,aAAa,MAAO;AAAA,MAC1E,cAAc,OAAO,OAAQ,MAAM,KAAK,OAAO,UAAU,gBAAgB,CAAC,CAAC,EAAE,MAAO;AAAA,MACpF,cAAc,YAAa,MAAM,KAAK,OAAO,UAAU,cAAc,MAAO;AAAA,MAC5E,kBAAkB,YAAa,MAAM,KAAK,OAAO,UAAU,kBAAkB,MAAO;AAAA,MACpF,MAAM,YAAY;AACd,cAAM,IAAI,MAAM,KAAK,MAAM,UAAU,WAAW;AAChD,YAAI,CAAC,KAAK,OAAO,MAAM,SAAU,QAAO;AACxC,eAAO,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,QAAQ,EAAE,OAAO;AAAA,MAC9D;AAAA,MACA,iBAAiB,MAAM,QAAQ,WAAW;AAAA,MAC1C,mBAAmB,CAAC,SAAS,QAAQ,eAAe,OAAO,QAAQ,EAAE,CAAC;AAAA;AAAA,MAEtE,UAAU,EAAE,IAAI,MAAM,IAAI,MAAM,QAAQ,MAAM,SAAS,KAAK,IAAI,CAAC,GAAG;AAChE,aAAK,UAAU,aAAa,EAAE,GAAG,GAAG,OAAO,OAAO,CAAC;AAAA,MACvD;AAAA,IACJ;AAAA,IACA,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,MAKL,MAAM,SAAS,EAAE,MAAM,UAAU,KAAK,IAAI,CAAC,GAAG;AAC1C,YAAI,IAAI;AACR,YAAI;AAAE,cAAI,MAAM,QAAQ,WAAW,YAAY,CAAC,EAAE,MAAM,UAAU,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAAA,QAAG,SAClF,GAAG;AAAE,eAAK,WAAW,YAAY,CAAC;AAAA,QAAG;AAC5C,eAAO,KAAK,OAAO,MAAM,WAAW,IAAI;AAAA,MAC5C;AAAA,IACJ;AAAA,IACA,OAAO;AAAA,MACH,MAAM,KAAK,KAAK;AACZ,cAAM,IAAI,MAAM,KAAK,MAAM,SAAS,QAAQ,GAAG;AAC/C,YAAI,OAAO,MAAM,SAAU,QAAO,KAAK;AACvC,YAAI;AAAE,iBAAO,KAAK,MAAM,CAAC;AAAA,QAAG,SACrB,GAAG;AAAE,iBAAO,OAAO,iCAAiC,KAAK,CAAC;AAAG,iBAAO;AAAA,QAAM;AAAA,MACrF;AAAA,MACA,MAAM,MAAM,KAAK,OAAO;AACpB,eAAQ,MAAM,KAAK,OAAO,SAAS,SAAS,KAAK,KAAK,MAAO;AAAA,MACjE;AAAA,IACJ;AAAA,EACJ;AAEA,QAAM,OAAO,CAAC;AACd,aAAW,QAAQ,OAAO,KAAK,QAAQ,GAAG;AACtC,QAAI,EAAE,QAAQ,MAAO,MAAK,IAAI,IAAI,SAAS,IAAI;AAAA,aACtC,KAAK,IAAI,KAAK,KAAM,MAAK,IAAI,IAAI,KAAK,IAAI;AAAA,EACvD;AACA,SAAO,WAAW,IAAI;AAC1B;",
+  "sources": ["../src/host/host.js", "../src/host/pywebview_host.js", "../src/host/photino_host.js", "../src/host/external_links.js"],
+  "sourcesContent": ["/**\n * host.js \u2014 the host port.\n *\n * The framework declares what it needs from its embedder. A Host is a bag of\n * INDEPENDENTLY OPTIONAL capability objects:\n *\n *   - absent capability  => absent key (never a stub)\n *   - present capability => must be complete (validated at boot)\n *\n * There is NO module-level default host and NO getHost(). Hosts are injected \u2014\n * a module singleton here would just be `window.pywebview` wearing a hat, and\n * would make a second host (mock, browser tab, VS Code webview) impossible.\n *\n * Zero pywebview. Zero EcoAgent. See pywebview_host.js for the reference\n * adapter that implements this port against the pywebview / HTTP transports.\n */\n\nexport const HOST_CONTRACT = Object.freeze({\n    window: Object.freeze({\n        required: Object.freeze(['chrome', 'minimize', 'close', 'isMaximized', 'setMaximized',\n                                 'isFullscreen', 'toggleFullscreen', 'getBounds', 'setBounds']),\n        // `chrome()` answers 'native' or 'custom', or a promise of one.\n        optional: Object.freeze(['startNativeDrag', 'startNativeResize']),\n    }),\n    dialogs: Object.freeze({ required: Object.freeze(['saveFile']), optional: Object.freeze([]) }),\n    state:   Object.freeze({ required: Object.freeze(['read', 'write']), optional: Object.freeze([]) }),\n    // `openExternal(url)` hands a web address to the OS's default browser and\n    // resolves true when it did. See external_links.js.\n    shell:   Object.freeze({ required: Object.freeze(['openExternal']), optional: Object.freeze([]) }),\n});\n\n/**\n * Validate ONE capability object. We validate the capability the adapter\n * authored \u2014 a plain object literal with real closures \u2014 not the raw bridge:\n * `index.html`'s browser-mode polyfill installs a `new Proxy({}, {get})` that\n * returns a function for EVERY property name, so duck-typing the bridge is\n * vacuously true and validates nothing. A Proxy cannot forge a missing key in\n * an object literal.\n *\n * @returns {{ ok: boolean, missing: string[] }}\n */\nexport function validateCapability(name, cap) {\n    const spec = HOST_CONTRACT[name];\n    if (!spec) return { ok: false, missing: [`unknown capability '${name}'`] };\n    if (!cap || typeof cap !== 'object') return { ok: false, missing: [...spec.required] };\n    const missing = spec.required.filter((m) => typeof cap[m] !== 'function');\n    return { ok: missing.length === 0, missing };\n}\n\n/**\n * Validate + freeze a set of capabilities into a Host.\n * Throws at boot on an incomplete capability \u2014 a half-wired host is a bug,\n * and a bug at boot beats a silent degrade at click time.\n *\n * @param {{ window?: object, dialogs?: object, state?: object, shell?: object }} caps\n * @returns {Readonly<object>} the Host\n */\nexport function createHost(caps = {}) {\n    const host = {};\n    for (const name of Object.keys(HOST_CONTRACT)) {\n        const cap = caps[name];\n        if (cap == null) continue;                       // legitimately absent\n        const v = validateCapability(name, cap);\n        if (!v.ok) {\n            throw new Error(`Host capability '${name}' is incomplete: missing ${v.missing.join(', ')}`);\n        }\n        host[name] = Object.freeze(cap);\n    }\n    return Object.freeze(host);\n}\n\n/** The zero-capability host. Every framework consumer MUST survive it. */\nexport const NULL_HOST = createHost({});\n", "/**\n * pywebview_host.js \u2014 the REFERENCE host adapter.\n *\n * Knows pywebview. Knows NOTHING about EcoAgent: every domain fact (which\n * bridge ref to use, where a state key lands on disk) arrives as a parameter.\n * This is the adapter a standalone consumer copies; EcoAgent is just its first\n * caller (see ui/js/bootstrap/app_bootstrap.js).\n *\n * It speaks to whatever `window.pywebview.api` currently is \u2014 the real\n * pywebview bridge in the desktop app, or the `POST /api/<method>` Proxy\n * polyfill that ui/index.html installs in --browser mode. Both transports are\n * positional-on-the-wire, which is why setBounds() spreads its object back out\n * into positional args.\n */\n\nimport { createHost } from './host.js';\n\nconst FRAMELESS_BACKENDS = new Set(['edgechromium', 'mshtml']);\n\n/**\n * Custom (frameless) window chrome \u2014 the min/max/close buttons, edge resize\n * handles and drag-to-move top bar \u2014 only makes sense when our top bar IS the\n * window's title bar. That holds on a native pywebview window the OS draws\n * *without* decorations of its own: Windows (frameless). On Linux/macOS the\n * window manager already draws a native title bar above our top bar, and in\n * `--browser` mode the browser supplies its own chrome \u2014 in both cases the\n * custom controls are a redundant second set, so we neither render nor wire\n * them (which also stops us swallowing native F11 fullscreen and showing dead\n * resize cursors at the window edges).\n *\n * Detection keys off the pywebview backend string, which is unambiguous: the\n * browser-mode polyfill in index.html injects only `.api`, never `.platform`,\n * so any `.platform` at all \u21D2 running as a native pywebview app. The frameless\n * (custom-title-bar) backends are the Windows WebViews \u2014 'edgechromium' /\n * 'mshtml'. Linux ('gtkwebkit2' / 'qtwebengine') and macOS ('cocoa') draw\n * native decorations, so they return false. Verified live: WebKitGTK reports\n * platform 'gtkwebkit2'.\n */\nexport function usesCustomWindowChrome() {\n    // Authoritative signal from the Python host: run_pywebview_mode() appends\n    // `?frameless=1` to the window URL exactly when it created a frameless native\n    // window (Windows). Prefer it over the backend sniff below because it's\n    // present at document parse \u2014 before pywebview finishes injecting\n    // `window.pywebview` (and before the browser-mode polyfill, which sets `.api`\n    // but no `.platform`, can clobber it). Reading the sniff at shell-build time\n    // otherwise races and the whole custom chrome silently fails to render.\n    try {\n        if (new URLSearchParams(window.location.search).get('frameless') === '1') {\n            return true;\n        }\n    } catch (_) { /* location unavailable (non-browser env) \u2014 fall through */ }\n    const platform = window.pywebview && window.pywebview.platform;\n    return !!platform && FRAMELESS_BACKENDS.has(platform);\n}\n\n/**\n * Build a Host backed by the pywebview bridge.\n *\n * @param {object}  opts\n * @param {{current: object|null}} [opts.bridgeRef]  LIVE ref to the bridge.\n *        MUST be a ref, never a snapshot: `setupHostBridgeListener` mutates\n *        `.current` when a late bridge arrives, and `resolveHostBridge` can\n *        resolve `null` after its timeout. Snapshotting the bridge here would\n *        freeze that null and reproduce as an intermittent boot failure.\n * @param {(key: string) => string} [opts.resolvePath]  logical state key ->\n *        storage path. THE domain seam: the framework only ever names keys\n *        ('desktops', 'datatable_state'); the embedder decides where they land.\n * @param {object} [opts.logger]\n */\nexport function createPywebviewHost({ bridgeRef = null, resolvePath = (k) => `${k}.json`, logger = console } = {}) {\n    const api = () => bridgeRef?.current ?? window.pywebview?.api ?? null;\n\n    const call = async (name, args = []) => {\n        const a = api();\n        if (!a || typeof a[name] !== 'function') return null;\n        try { return await a[name](...args); }\n        catch (e) { logger.warn?.('[host] call failed', name, e); return null; }\n    };\n\n    // Envelope unwrapping, in ONE place. Transcribed from the call sites this\n    // replaces, so app.py's catch-all `{ok: true}` reply (which carries no\n    // `maximized` key) still reads as false, exactly as it does today.\n    const okMax = (r) => Boolean(r && r.ok && r.maximized === true);\n    const okFs  = (r) => Boolean(r && r.ok && r.fullscreen);\n\n    // ALL THREE capabilities are ALWAYS advertised. Do NOT gate them on api()\n    // being non-null at construction time: the methods late-bind through the\n    // ref, and gating here would permanently strand a late-arriving bridge on\n    // the fallback paths (Blob download instead of the native save dialog).\n    return createHost({\n        window: {\n            chrome: () => (usesCustomWindowChrome() ? 'custom' : 'native'),\n            minimize: () => { void call('window_minimize'); },\n            close:    () => { void call('window_close'); },\n            isMaximized:      async () => okMax(await call('window_is_maximized')),\n            setMaximized:     async (on) => okMax(await call('window_set_maximized', [on])),\n            isFullscreen:     async () => okFs(await call('window_is_fullscreen')),\n            toggleFullscreen: async () => okFs(await call('window_toggle_fullscreen')),\n            async getBounds() {\n                const r = await call('window_get_bounds');\n                if (!r || !r.ok) return null;\n                return { x: r.x, y: r.y, width: r.width, height: r.height };\n            },\n            // POSITIONAL on the wire \u2014 both transports depend on it. Not async:\n            // this is a rAF hot path during a window drag/resize; nobody awaits.\n            setBounds({ x = null, y = null, width = null, height = null } = {}) {\n                void call('window_set_bounds', [x, y, width, height]);\n            },\n            startNativeDrag: async () => Boolean((await call('window_start_native_drag'))?.ok),\n        },\n        dialogs: {\n            // Resolves to null when the transport has no save_file_dialog behind it.\n            // Per host.js that is the contract for \"unavailable\", and every caller\n            // treats it exactly like an absent `dialogs` capability: fall back to a\n            // Blob download, never report a failed save. Covered by\n            // tests/ui/test_host_save_fallback.mjs.\n            saveFile: ({ data, filename, kind }) => call('save_file_dialog', [data, filename, kind]),\n        },\n        state: {\n            async read(key) {\n                const blob = await call('workspace_state_read', [{ path: resolvePath(key) }]);\n                if (!blob) return null;\n                try { return typeof blob === 'string' ? JSON.parse(blob) : blob; }\n                catch (e) { logger.warn?.('[host] bad JSON for state key', key, e); return null; }\n            },\n            async write(key, value) {\n                const r = await call('workspace_state_write',\n                                     [{ path: resolvePath(key), data: JSON.stringify(value) }]);\n                return r !== null;\n            },\n        },\n    });\n}\n", "/**\n * photino_host.js \u2014 the host port over a Photino.NET window.\n *\n * Photino gives the page exactly two things: `window.external.sendMessage(text)`\n * and `window.external.receiveMessage(callback)`. Strings in, strings out, no\n * replies. This adapter puts a request/reply protocol over them, matched by id:\n *\n *   page \u2192 host   {\"id\": 7, \"cap\": \"window\", \"op\": \"setBounds\", \"args\": [{\"x\":0,\"y\":0,\"width\":1200,\"height\":800}]}\n *   host \u2192 page   {\"id\": 7, \"ok\": true,  \"value\": null}\n *   host \u2192 page   {\"id\": 8, \"ok\": false, \"error\": \"no such op\"}\n *   host \u2192 page   {\"event\": \"window.maximizedChanged\", \"value\": true}      // unsolicited, no id\n *\n * and offers the port's `window`, `dialogs` and `state` capabilities on top.\n * The C# side \u2014 one dispatcher on the window's web-message handler, every op\n * with its args and reply \u2014 is documented in `photino_host.md` beside this file.\n *\n * Like pywebview_host.js it knows the transport and NOTHING about the app: an\n * embedder that keeps some capability elsewhere (BugDesk keeps `state` on its\n * own server) passes that capability in, or `null` to leave it out.\n *\n * In a browser tab there is no `window.external.sendMessage`, and\n * createPhotinoHost() returns NULL_HOST \u2014 the fallback every FlexDesk consumer\n * already has to survive.\n */\n\nimport { createHost, NULL_HOST } from './host.js';\n\n/** True when `ext` (default: `window.external`) is a Photino bridge. */\nexport function isPhotinoWindow(ext = (typeof window !== 'undefined' ? window.external : undefined)) {\n    return !!ext && typeof ext.sendMessage === 'function' && typeof ext.receiveMessage === 'function';\n}\n\n/**\n * The bare request/reply layer. `call(cap, op, ...args)` sends one request and\n * resolves with the reply's `value` (`request(cap, op, args, {wait})` is the\n * same with a timeout of its own). It REJECTS when the host answers\n * `ok: false` (with the host's error) and when no reply arrives within\n * `timeoutMs`. A reply for an id nobody is waiting on, a message that is not\n * JSON, and anything that is neither a reply nor an event are dropped.\n *\n * @param {object} opts\n * @param {{sendMessage: Function, receiveMessage: Function}} opts.external\n * @param {number}  [opts.timeoutMs=10000]\n * @param {(name: string, value: any) => void} [opts.onEvent]  id-less `{event, value}` messages\n * @param {object}  [opts.logger]\n */\nexport function createPhotinoTransport({ external, timeoutMs = 10000, onEvent = null, logger = console }) {\n    const pending = new Map();\n    let seq = 0;\n    external.receiveMessage((text) => {\n        let m;\n        try { m = typeof text === 'string' ? JSON.parse(text) : text; } catch { return; }\n        if (!m || typeof m !== 'object') return;\n        if (m.id == null) {\n            if (typeof m.event === 'string' && onEvent) {\n                try { onEvent(m.event, m.value); }\n                catch (e) { logger.warn?.('[host] photino event handler failed', m.event, e); }\n            }\n            return;\n        }\n        const p = pending.get(m.id);\n        if (!p) return;\n        pending.delete(m.id);\n        clearTimeout(p.timer);\n        if (m.ok) p.resolve(m.value === undefined ? null : m.value);\n        else p.reject(new Error(m.error || `${p.what}: refused by the host`));\n    });\n    // `wait` is this request's timeout in ms; 0 waits for as long as it takes.\n    const request = (cap, op, args = [], { wait = timeoutMs } = {}) => new Promise((resolve, reject) => {\n        const id = ++seq;\n        const what = `${cap}.${op}`;\n        const timer = wait > 0 ? setTimeout(() => {\n            if (pending.delete(id)) reject(new Error(`${what}: no answer from the host within ${wait} ms`));\n        }, wait) : null;\n        pending.set(id, { resolve, reject, timer, what });\n        try {\n            external.sendMessage(JSON.stringify({ id, cap, op, args }));\n        } catch (e) {\n            pending.delete(id);\n            clearTimeout(timer);\n            reject(e);\n        }\n    });\n    const call = (cap, op, ...args) => request(cap, op, args);\n    return { call, request, pending: () => pending.size };\n}\n\n/**\n * Build a Host backed by a Photino window.\n *\n * The capability methods follow pywebview_host.js's contract, so a consumer\n * cannot tell the two apart: they DEGRADE instead of rejecting. A failed query\n * reads as false / null, a failed fire-and-forget is logged, and a save that\n * the host refused or never answered resolves `null` \u2014 the host.js meaning of\n * \"unavailable\", which every caller turns into a Blob download.\n *\n * @param {object} [opts]\n * @param {object} [opts.external=window.external]  the Photino bridge (a fake one in tests)\n * @param {number} [opts.timeoutMs=10000]\n * @param {(name: string, value: any) => void} [opts.onEvent]\n * @param {object} [opts.logger=console]\n * @param {'auto'|'native'|'custom'} [opts.chrome='auto']  who draws the window's\n *        title bar and borders. `auto` asks the native side once (`host.describe`,\n *        its `frame` field), the first time somebody needs to know; `native`\n *        or `custom` fixes the answer without asking. See photino_host.md.\n * @param {object|null} [opts.window]   replace the window capability, or `null` to leave it out\n * @param {object|null} [opts.dialogs]  replace the dialogs capability, or `null` to leave it out\n * @param {object|null} [opts.state]    replace the state capability, or `null` to leave it out\n * @param {object|null} [opts.shell]    replace the shell capability, or `null` to leave it out\n * @returns {Readonly<object>} a Host, or NULL_HOST outside a Photino window\n */\nexport function createPhotinoHost(opts = {}) {\n    const {\n        external = (typeof window !== 'undefined' ? window.external : undefined),\n        timeoutMs = 10000,\n        onEvent = null,\n        logger = console,\n        chrome = 'auto',\n    } = opts;\n    if (!isPhotinoWindow(external)) return NULL_HOST;\n\n    const { call, request } = createPhotinoTransport({ external, timeoutMs, onEvent, logger });\n    const warn = (cap, op, e) => logger.warn?.('[host] photino call failed', `${cap}.${op}`, e);\n    const soft = async (fallback, cap, op, ...args) => {\n        try { return await call(cap, op, ...args); }\n        catch (e) { warn(cap, op, e); return fallback; }\n    };\n    const fire = (cap, op, ...args) => { void soft(null, cap, op, ...args); };\n\n    // Who draws the frame. Asked once and remembered: a string once known, the\n    // pending question before that. A native side that predates `frame`, or\n    // doesn't answer within 3 s, has native chrome.\n    let frame = chrome === 'custom' || chrome === 'native' ? chrome : null;\n    let asking = null;\n    const askFrame = () => {\n        if (frame) return frame;\n        asking ??= request('host', 'describe', [], { wait: 3000 })\n            .then((d) => (d && d.frame === 'custom' ? 'custom' : 'native'), () => 'native')\n            .then((f) => { frame = f; return f; });\n        return asking;\n    };\n    // A drag or resize handed to the OS: the reply comes when the mouse is\n    // released, however long that takes. Refused (a native side without the op,\n    // or a window with native chrome) means \"not handled\": the caller does it in JS.\n    const gesture = async (op, ...args) => {\n        try { await request('window', op, args, { wait: 0 }); return true; }\n        catch (e) { return false; }\n    };\n\n    const defaults = {\n        window: {\n            // 'native' (the OS draws the frame: FlexDesk's own buttons would be\n            // a second set) or 'custom' (the native side made the window\n            // frameless). A promise until the native side has said which.\n            chrome: () => askFrame(),\n            minimize: () => { fire('window', 'minimize'); },\n            close: () => { fire('window', 'close'); },\n            isMaximized: async () => (await soft(false, 'window', 'isMaximized')) === true,\n            setMaximized: async (on) => (await soft(false, 'window', 'setMaximized', !!on)) === true,\n            isFullscreen: async () => (await soft(false, 'window', 'isFullscreen')) === true,\n            toggleFullscreen: async () => (await soft(false, 'window', 'toggleFullscreen')) === true,\n            async getBounds() {\n                const b = await soft(null, 'window', 'getBounds');\n                if (!b || typeof b !== 'object') return null;\n                return { x: b.x, y: b.y, width: b.width, height: b.height };\n            },\n            startNativeDrag: () => gesture('startDrag'),\n            startNativeResize: (edge) => gesture('startResize', String(edge || '')),\n            // Not async, like pywebview's: a rAF hot path during a drag; nobody awaits.\n            setBounds({ x = null, y = null, width = null, height = null } = {}) {\n                fire('window', 'setBounds', { x, y, width, height });\n            },\n        },\n        dialogs: {\n            // `{ok: true, path}` | `{ok: false, cancelled: true}` | `{ok: false, error}`,\n            // or null when the host refused: fall back to a download. NO TIMEOUT \u2014\n            // the dialog is open for as long as the user takes, and giving up on it\n            // would download the file a second time behind the dialog.\n            async saveFile({ data, filename, kind } = {}) {\n                let r = null;\n                try { r = await request('dialogs', 'saveFile', [{ data, filename, kind }], { wait: 0 }); }\n                catch (e) { warn('dialogs', 'saveFile', e); }\n                return r && typeof r === 'object' ? r : null;\n            },\n        },\n        shell: {\n            // True when the native side opened it in the system browser; false\n            // when it refused (a scheme it won't open, an older native side\n            // without the op): the caller falls back to window.open.\n            openExternal: async (url) => (await soft(false, 'shell', 'openExternal', String(url || ''))) === true,\n        },\n        state: {\n            async read(key) {\n                const v = await soft(null, 'state', 'read', key);\n                if (typeof v !== 'string') return v ?? null;\n                try { return JSON.parse(v); }\n                catch (e) { logger.warn?.('[host] bad JSON for state key', key, e); return null; }\n            },\n            async write(key, value) {\n                return (await soft(false, 'state', 'write', key, value)) !== false;\n            },\n        },\n    };\n\n    const caps = {};\n    for (const name of Object.keys(defaults)) {\n        if (!(name in opts)) caps[name] = defaults[name];\n        else if (opts[name] != null) caps[name] = opts[name];\n    }\n    return createHost(caps);\n}\n", "/**\n * external_links.js \u2014 links that leave the app open in the system browser.\n *\n * In a browser tab, `target=\"_blank\"` and `window.open()` open a new tab, which\n * is what everyone expects. In a native window (Photino, a webview) they open\n * either nothing or a bare popup with no address bar and no way back. The host\n * knows how to hand a URL to the OS (`host.shell.openExternal`); this routes\n * the page's outbound links there.\n *\n * Without a `shell` capability it changes nothing, so an app can call it\n * unconditionally at boot: in a browser tab it is a no-op.\n */\n\nconst SCHEMES = new Set(['http:', 'https:', 'mailto:']);\n\n/** The URL as an absolute URL when it is one we would send out, else null. */\nfunction outbound(href, base) {\n    let url;\n    try { url = new URL(String(href), base); } catch { return null; }\n    return SCHEMES.has(url.protocol) ? url : null;\n}\n\n/**\n * Send external link clicks and `window.open` calls to `host.shell.openExternal`.\n *\n * A link goes out when it is http(s) or mailto AND it has `target=\"_blank\"`,\n * points to another origin, or is mailto. A same-origin link without a target\n * is the app's own navigation and is left alone; a same-origin `_blank` goes\n * out too, because in a native window the alternative is a bare popup. A\n * handler that already called `preventDefault()` on the click keeps it.\n *\n * When `openExternal` resolves false (the native side refused it), the original\n * `window.open` runs instead, so the click still does something.\n *\n * @param {object} opts\n * @param {object} opts.host                  a Host; does nothing without `host.shell`\n * @param {EventTarget} [opts.root=document]  where clicks are listened for\n * @param {Window} [opts.win=window]          whose `open` is wrapped\n * @returns {{ dispose: () => void }}\n */\nexport function routeExternalLinks({ host, root, win } = {}) {\n    const w = win ?? (typeof window !== 'undefined' ? window : null);\n    const r = root ?? (typeof document !== 'undefined' ? document : null);\n    const shell = host?.shell;\n    if (!shell || typeof shell.openExternal !== 'function' || !w || !r) return { dispose() {} };\n\n    const base = () => w.location?.href;\n    const origin = () => { try { return new URL(base()).origin; } catch { return null; } };\n    const nativeOpen = w.open;\n    const fallback = (href) => { try { nativeOpen?.call(w, href, '_blank', 'noopener'); } catch { /* blocked */ } };\n    const send = (href) => {\n        Promise.resolve()\n            .then(() => shell.openExternal(href))\n            .then((opened) => { if (opened !== true) fallback(href); }, () => fallback(href));\n    };\n\n    const onClick = (e) => {\n        if (e.defaultPrevented) return;\n        // Left click, or a middle click (auxclick): both open a new window.\n        if (e.type === 'click' ? e.button !== 0 : e.button !== 1) return;\n        const a = e.target?.closest?.('a[href]');\n        if (!a || a.hasAttribute('download')) return;\n        const url = outbound(a.getAttribute('href'), base());\n        if (!url) return;\n        const leaves = url.protocol === 'mailto:'\n            || (a.getAttribute('target') || '').toLowerCase() === '_blank'\n            || url.origin !== origin()\n            || e.button === 1;\n        if (!leaves) return;\n        e.preventDefault();\n        send(url.href);\n    };\n\n    const routedOpen = function open(href, target, features) {\n        const url = href == null ? null : outbound(href, base());\n        if (url && (url.protocol === 'mailto:' || url.origin !== origin())) {\n            send(url.href);\n            return null;\n        }\n        return nativeOpen.call(w, href, target, features);\n    };\n\n    r.addEventListener('click', onClick);\n    r.addEventListener('auxclick', onClick);\n    w.open = routedOpen;\n\n    return {\n        dispose() {\n            r.removeEventListener('click', onClick);\n            r.removeEventListener('auxclick', onClick);\n            if (w.open === routedOpen) w.open = nativeOpen;\n        },\n    };\n}\n"],
+  "mappings": ";;;AAiBO,IAAM,gBAAgB,OAAO,OAAO;AAAA,EACvC,QAAQ,OAAO,OAAO;AAAA,IAClB,UAAU,OAAO,OAAO;AAAA,MAAC;AAAA,MAAU;AAAA,MAAY;AAAA,MAAS;AAAA,MAAe;AAAA,MAC9C;AAAA,MAAgB;AAAA,MAAoB;AAAA,MAAa;AAAA,IAAW,CAAC;AAAA;AAAA,IAEtF,UAAU,OAAO,OAAO,CAAC,mBAAmB,mBAAmB,CAAC;AAAA,EACpE,CAAC;AAAA,EACD,SAAS,OAAO,OAAO,EAAE,UAAU,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC;AAAA,EAC7F,OAAS,OAAO,OAAO,EAAE,UAAU,OAAO,OAAO,CAAC,QAAQ,OAAO,CAAC,GAAG,UAAU,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC;AAAA;AAAA;AAAA,EAGlG,OAAS,OAAO,OAAO,EAAE,UAAU,OAAO,OAAO,CAAC,cAAc,CAAC,GAAG,UAAU,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC;AACrG,CAAC;AAYM,SAAS,mBAAmB,MAAM,KAAK;AAC1C,QAAM,OAAO,cAAc,IAAI;AAC/B,MAAI,CAAC,KAAM,QAAO,EAAE,IAAI,OAAO,SAAS,CAAC,uBAAuB,IAAI,GAAG,EAAE;AACzE,MAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO,EAAE,IAAI,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ,EAAE;AACrF,QAAM,UAAU,KAAK,SAAS,OAAO,CAAC,MAAM,OAAO,IAAI,CAAC,MAAM,UAAU;AACxE,SAAO,EAAE,IAAI,QAAQ,WAAW,GAAG,QAAQ;AAC/C;AAUO,SAAS,WAAW,OAAO,CAAC,GAAG;AAClC,QAAM,OAAO,CAAC;AACd,aAAW,QAAQ,OAAO,KAAK,aAAa,GAAG;AAC3C,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,OAAO,KAAM;AACjB,UAAM,IAAI,mBAAmB,MAAM,GAAG;AACtC,QAAI,CAAC,EAAE,IAAI;AACP,YAAM,IAAI,MAAM,oBAAoB,IAAI,4BAA4B,EAAE,QAAQ,KAAK,IAAI,CAAC,EAAE;AAAA,IAC9F;AACA,SAAK,IAAI,IAAI,OAAO,OAAO,GAAG;AAAA,EAClC;AACA,SAAO,OAAO,OAAO,IAAI;AAC7B;AAGO,IAAM,YAAY,WAAW,CAAC,CAAC;;;ACvDtC,IAAM,qBAAqB,oBAAI,IAAI,CAAC,gBAAgB,QAAQ,CAAC;AAqBtD,SAAS,yBAAyB;AAQrC,MAAI;AACA,QAAI,IAAI,gBAAgB,OAAO,SAAS,MAAM,EAAE,IAAI,WAAW,MAAM,KAAK;AACtE,aAAO;AAAA,IACX;AAAA,EACJ,SAAS,GAAG;AAAA,EAA8D;AAC1E,QAAM,WAAW,OAAO,aAAa,OAAO,UAAU;AACtD,SAAO,CAAC,CAAC,YAAY,mBAAmB,IAAI,QAAQ;AACxD;AAgBO,SAAS,oBAAoB,EAAE,YAAY,MAAM,cAAc,CAAC,MAAM,GAAG,CAAC,SAAS,SAAS,QAAQ,IAAI,CAAC,GAAG;AAC/G,QAAM,MAAM,MAAM,WAAW,WAAW,OAAO,WAAW,OAAO;AAEjE,QAAM,OAAO,OAAO,MAAM,OAAO,CAAC,MAAM;AACpC,UAAM,IAAI,IAAI;AACd,QAAI,CAAC,KAAK,OAAO,EAAE,IAAI,MAAM,WAAY,QAAO;AAChD,QAAI;AAAE,aAAO,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI;AAAA,IAAG,SAC9B,GAAG;AAAE,aAAO,OAAO,sBAAsB,MAAM,CAAC;AAAG,aAAO;AAAA,IAAM;AAAA,EAC3E;AAKA,QAAM,QAAQ,CAAC,MAAM,QAAQ,KAAK,EAAE,MAAM,EAAE,cAAc,IAAI;AAC9D,QAAM,OAAQ,CAAC,MAAM,QAAQ,KAAK,EAAE,MAAM,EAAE,UAAU;AAMtD,SAAO,WAAW;AAAA,IACd,QAAQ;AAAA,MACJ,QAAQ,MAAO,uBAAuB,IAAI,WAAW;AAAA,MACrD,UAAU,MAAM;AAAE,aAAK,KAAK,iBAAiB;AAAA,MAAG;AAAA,MAChD,OAAU,MAAM;AAAE,aAAK,KAAK,cAAc;AAAA,MAAG;AAAA,MAC7C,aAAkB,YAAY,MAAM,MAAM,KAAK,qBAAqB,CAAC;AAAA,MACrE,cAAkB,OAAO,OAAO,MAAM,MAAM,KAAK,wBAAwB,CAAC,EAAE,CAAC,CAAC;AAAA,MAC9E,cAAkB,YAAY,KAAK,MAAM,KAAK,sBAAsB,CAAC;AAAA,MACrE,kBAAkB,YAAY,KAAK,MAAM,KAAK,0BAA0B,CAAC;AAAA,MACzE,MAAM,YAAY;AACd,cAAM,IAAI,MAAM,KAAK,mBAAmB;AACxC,YAAI,CAAC,KAAK,CAAC,EAAE,GAAI,QAAO;AACxB,eAAO,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,QAAQ,EAAE,OAAO;AAAA,MAC9D;AAAA;AAAA;AAAA,MAGA,UAAU,EAAE,IAAI,MAAM,IAAI,MAAM,QAAQ,MAAM,SAAS,KAAK,IAAI,CAAC,GAAG;AAChE,aAAK,KAAK,qBAAqB,CAAC,GAAG,GAAG,OAAO,MAAM,CAAC;AAAA,MACxD;AAAA,MACA,iBAAiB,YAAY,SAAS,MAAM,KAAK,0BAA0B,IAAI,EAAE;AAAA,IACrF;AAAA,IACA,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAML,UAAU,CAAC,EAAE,MAAM,UAAU,KAAK,MAAM,KAAK,oBAAoB,CAAC,MAAM,UAAU,IAAI,CAAC;AAAA,IAC3F;AAAA,IACA,OAAO;AAAA,MACH,MAAM,KAAK,KAAK;AACZ,cAAM,OAAO,MAAM,KAAK,wBAAwB,CAAC,EAAE,MAAM,YAAY,GAAG,EAAE,CAAC,CAAC;AAC5E,YAAI,CAAC,KAAM,QAAO;AAClB,YAAI;AAAE,iBAAO,OAAO,SAAS,WAAW,KAAK,MAAM,IAAI,IAAI;AAAA,QAAM,SAC1D,GAAG;AAAE,iBAAO,OAAO,iCAAiC,KAAK,CAAC;AAAG,iBAAO;AAAA,QAAM;AAAA,MACrF;AAAA,MACA,MAAM,MAAM,KAAK,OAAO;AACpB,cAAM,IAAI,MAAM;AAAA,UAAK;AAAA,UACA,CAAC,EAAE,MAAM,YAAY,GAAG,GAAG,MAAM,KAAK,UAAU,KAAK,EAAE,CAAC;AAAA,QAAC;AAC9E,eAAO,MAAM;AAAA,MACjB;AAAA,IACJ;AAAA,EACJ,CAAC;AACL;;;ACxGO,SAAS,gBAAgB,MAAO,OAAO,WAAW,cAAc,OAAO,WAAW,QAAY;AACjG,SAAO,CAAC,CAAC,OAAO,OAAO,IAAI,gBAAgB,cAAc,OAAO,IAAI,mBAAmB;AAC3F;AAgBO,SAAS,uBAAuB,EAAE,UAAU,YAAY,KAAO,UAAU,MAAM,SAAS,QAAQ,GAAG;AACtG,QAAM,UAAU,oBAAI,IAAI;AACxB,MAAI,MAAM;AACV,WAAS,eAAe,CAAC,SAAS;AAC9B,QAAI;AACJ,QAAI;AAAE,UAAI,OAAO,SAAS,WAAW,KAAK,MAAM,IAAI,IAAI;AAAA,IAAM,QAAQ;AAAE;AAAA,IAAQ;AAChF,QAAI,CAAC,KAAK,OAAO,MAAM,SAAU;AACjC,QAAI,EAAE,MAAM,MAAM;AACd,UAAI,OAAO,EAAE,UAAU,YAAY,SAAS;AACxC,YAAI;AAAE,kBAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,QAAG,SAC1B,GAAG;AAAE,iBAAO,OAAO,uCAAuC,EAAE,OAAO,CAAC;AAAA,QAAG;AAAA,MAClF;AACA;AAAA,IACJ;AACA,UAAM,IAAI,QAAQ,IAAI,EAAE,EAAE;AAC1B,QAAI,CAAC,EAAG;AACR,YAAQ,OAAO,EAAE,EAAE;AACnB,iBAAa,EAAE,KAAK;AACpB,QAAI,EAAE,GAAI,GAAE,QAAQ,EAAE,UAAU,SAAY,OAAO,EAAE,KAAK;AAAA,QACrD,GAAE,OAAO,IAAI,MAAM,EAAE,SAAS,GAAG,EAAE,IAAI,uBAAuB,CAAC;AAAA,EACxE,CAAC;AAED,QAAM,UAAU,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,EAAE,OAAO,UAAU,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS,WAAW;AAChG,UAAM,KAAK,EAAE;AACb,UAAM,OAAO,GAAG,GAAG,IAAI,EAAE;AACzB,UAAM,QAAQ,OAAO,IAAI,WAAW,MAAM;AACtC,UAAI,QAAQ,OAAO,EAAE,EAAG,QAAO,IAAI,MAAM,GAAG,IAAI,oCAAoC,IAAI,KAAK,CAAC;AAAA,IAClG,GAAG,IAAI,IAAI;AACX,YAAQ,IAAI,IAAI,EAAE,SAAS,QAAQ,OAAO,KAAK,CAAC;AAChD,QAAI;AACA,eAAS,YAAY,KAAK,UAAU,EAAE,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC;AAAA,IAC9D,SAAS,GAAG;AACR,cAAQ,OAAO,EAAE;AACjB,mBAAa,KAAK;AAClB,aAAO,CAAC;AAAA,IACZ;AAAA,EACJ,CAAC;AACD,QAAM,OAAO,CAAC,KAAK,OAAO,SAAS,QAAQ,KAAK,IAAI,IAAI;AACxD,SAAO,EAAE,MAAM,SAAS,SAAS,MAAM,QAAQ,KAAK;AACxD;AA0BO,SAAS,kBAAkB,OAAO,CAAC,GAAG;AACzC,QAAM;AAAA,IACF,WAAY,OAAO,WAAW,cAAc,OAAO,WAAW;AAAA,IAC9D,YAAY;AAAA,IACZ,UAAU;AAAA,IACV,SAAS;AAAA,IACT,SAAS;AAAA,EACb,IAAI;AACJ,MAAI,CAAC,gBAAgB,QAAQ,EAAG,QAAO;AAEvC,QAAM,EAAE,MAAM,QAAQ,IAAI,uBAAuB,EAAE,UAAU,WAAW,SAAS,OAAO,CAAC;AACzF,QAAM,OAAO,CAAC,KAAK,IAAI,MAAM,OAAO,OAAO,8BAA8B,GAAG,GAAG,IAAI,EAAE,IAAI,CAAC;AAC1F,QAAM,OAAO,OAAO,UAAU,KAAK,OAAO,SAAS;AAC/C,QAAI;AAAE,aAAO,MAAM,KAAK,KAAK,IAAI,GAAG,IAAI;AAAA,IAAG,SACpC,GAAG;AAAE,WAAK,KAAK,IAAI,CAAC;AAAG,aAAO;AAAA,IAAU;AAAA,EACnD;AACA,QAAM,OAAO,CAAC,KAAK,OAAO,SAAS;AAAE,SAAK,KAAK,MAAM,KAAK,IAAI,GAAG,IAAI;AAAA,EAAG;AAKxE,MAAI,QAAQ,WAAW,YAAY,WAAW,WAAW,SAAS;AAClE,MAAI,SAAS;AACb,QAAM,WAAW,MAAM;AACnB,QAAI,MAAO,QAAO;AAClB,eAAW,QAAQ,QAAQ,YAAY,CAAC,GAAG,EAAE,MAAM,IAAK,CAAC,EACpD,KAAK,CAAC,MAAO,KAAK,EAAE,UAAU,WAAW,WAAW,UAAW,MAAM,QAAQ,EAC7E,KAAK,CAAC,MAAM;AAAE,cAAQ;AAAG,aAAO;AAAA,IAAG,CAAC;AACzC,WAAO;AAAA,EACX;AAIA,QAAM,UAAU,OAAO,OAAO,SAAS;AACnC,QAAI;AAAE,YAAM,QAAQ,UAAU,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;AAAG,aAAO;AAAA,IAAM,SAC5D,GAAG;AAAE,aAAO;AAAA,IAAO;AAAA,EAC9B;AAEA,QAAM,WAAW;AAAA,IACb,QAAQ;AAAA;AAAA;AAAA;AAAA,MAIJ,QAAQ,MAAM,SAAS;AAAA,MACvB,UAAU,MAAM;AAAE,aAAK,UAAU,UAAU;AAAA,MAAG;AAAA,MAC9C,OAAO,MAAM;AAAE,aAAK,UAAU,OAAO;AAAA,MAAG;AAAA,MACxC,aAAa,YAAa,MAAM,KAAK,OAAO,UAAU,aAAa,MAAO;AAAA,MAC1E,cAAc,OAAO,OAAQ,MAAM,KAAK,OAAO,UAAU,gBAAgB,CAAC,CAAC,EAAE,MAAO;AAAA,MACpF,cAAc,YAAa,MAAM,KAAK,OAAO,UAAU,cAAc,MAAO;AAAA,MAC5E,kBAAkB,YAAa,MAAM,KAAK,OAAO,UAAU,kBAAkB,MAAO;AAAA,MACpF,MAAM,YAAY;AACd,cAAM,IAAI,MAAM,KAAK,MAAM,UAAU,WAAW;AAChD,YAAI,CAAC,KAAK,OAAO,MAAM,SAAU,QAAO;AACxC,eAAO,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,QAAQ,EAAE,OAAO;AAAA,MAC9D;AAAA,MACA,iBAAiB,MAAM,QAAQ,WAAW;AAAA,MAC1C,mBAAmB,CAAC,SAAS,QAAQ,eAAe,OAAO,QAAQ,EAAE,CAAC;AAAA;AAAA,MAEtE,UAAU,EAAE,IAAI,MAAM,IAAI,MAAM,QAAQ,MAAM,SAAS,KAAK,IAAI,CAAC,GAAG;AAChE,aAAK,UAAU,aAAa,EAAE,GAAG,GAAG,OAAO,OAAO,CAAC;AAAA,MACvD;AAAA,IACJ;AAAA,IACA,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,MAKL,MAAM,SAAS,EAAE,MAAM,UAAU,KAAK,IAAI,CAAC,GAAG;AAC1C,YAAI,IAAI;AACR,YAAI;AAAE,cAAI,MAAM,QAAQ,WAAW,YAAY,CAAC,EAAE,MAAM,UAAU,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAAA,QAAG,SAClF,GAAG;AAAE,eAAK,WAAW,YAAY,CAAC;AAAA,QAAG;AAC5C,eAAO,KAAK,OAAO,MAAM,WAAW,IAAI;AAAA,MAC5C;AAAA,IACJ;AAAA,IACA,OAAO;AAAA;AAAA;AAAA;AAAA,MAIH,cAAc,OAAO,QAAS,MAAM,KAAK,OAAO,SAAS,gBAAgB,OAAO,OAAO,EAAE,CAAC,MAAO;AAAA,IACrG;AAAA,IACA,OAAO;AAAA,MACH,MAAM,KAAK,KAAK;AACZ,cAAM,IAAI,MAAM,KAAK,MAAM,SAAS,QAAQ,GAAG;AAC/C,YAAI,OAAO,MAAM,SAAU,QAAO,KAAK;AACvC,YAAI;AAAE,iBAAO,KAAK,MAAM,CAAC;AAAA,QAAG,SACrB,GAAG;AAAE,iBAAO,OAAO,iCAAiC,KAAK,CAAC;AAAG,iBAAO;AAAA,QAAM;AAAA,MACrF;AAAA,MACA,MAAM,MAAM,KAAK,OAAO;AACpB,eAAQ,MAAM,KAAK,OAAO,SAAS,SAAS,KAAK,KAAK,MAAO;AAAA,MACjE;AAAA,IACJ;AAAA,EACJ;AAEA,QAAM,OAAO,CAAC;AACd,aAAW,QAAQ,OAAO,KAAK,QAAQ,GAAG;AACtC,QAAI,EAAE,QAAQ,MAAO,MAAK,IAAI,IAAI,SAAS,IAAI;AAAA,aACtC,KAAK,IAAI,KAAK,KAAM,MAAK,IAAI,IAAI,KAAK,IAAI;AAAA,EACvD;AACA,SAAO,WAAW,IAAI;AAC1B;;;ACrMA,IAAM,UAAU,oBAAI,IAAI,CAAC,SAAS,UAAU,SAAS,CAAC;AAGtD,SAAS,SAAS,MAAM,MAAM;AAC1B,MAAI;AACJ,MAAI;AAAE,UAAM,IAAI,IAAI,OAAO,IAAI,GAAG,IAAI;AAAA,EAAG,QAAQ;AAAE,WAAO;AAAA,EAAM;AAChE,SAAO,QAAQ,IAAI,IAAI,QAAQ,IAAI,MAAM;AAC7C;AAoBO,SAAS,mBAAmB,EAAE,MAAM,MAAM,IAAI,IAAI,CAAC,GAAG;AACzD,QAAM,IAAI,QAAQ,OAAO,WAAW,cAAc,SAAS;AAC3D,QAAM,IAAI,SAAS,OAAO,aAAa,cAAc,WAAW;AAChE,QAAM,QAAQ,MAAM;AACpB,MAAI,CAAC,SAAS,OAAO,MAAM,iBAAiB,cAAc,CAAC,KAAK,CAAC,EAAG,QAAO,EAAE,UAAU;AAAA,EAAC,EAAE;AAE1F,QAAM,OAAO,MAAM,EAAE,UAAU;AAC/B,QAAM,SAAS,MAAM;AAAE,QAAI;AAAE,aAAO,IAAI,IAAI,KAAK,CAAC,EAAE;AAAA,IAAQ,QAAQ;AAAE,aAAO;AAAA,IAAM;AAAA,EAAE;AACrF,QAAM,aAAa,EAAE;AACrB,QAAM,WAAW,CAAC,SAAS;AAAE,QAAI;AAAE,kBAAY,KAAK,GAAG,MAAM,UAAU,UAAU;AAAA,IAAG,QAAQ;AAAA,IAAgB;AAAA,EAAE;AAC9G,QAAM,OAAO,CAAC,SAAS;AACnB,YAAQ,QAAQ,EACX,KAAK,MAAM,MAAM,aAAa,IAAI,CAAC,EACnC,KAAK,CAAC,WAAW;AAAE,UAAI,WAAW,KAAM,UAAS,IAAI;AAAA,IAAG,GAAG,MAAM,SAAS,IAAI,CAAC;AAAA,EACxF;AAEA,QAAM,UAAU,CAAC,MAAM;AACnB,QAAI,EAAE,iBAAkB;AAExB,QAAI,EAAE,SAAS,UAAU,EAAE,WAAW,IAAI,EAAE,WAAW,EAAG;AAC1D,UAAM,IAAI,EAAE,QAAQ,UAAU,SAAS;AACvC,QAAI,CAAC,KAAK,EAAE,aAAa,UAAU,EAAG;AACtC,UAAM,MAAM,SAAS,EAAE,aAAa,MAAM,GAAG,KAAK,CAAC;AACnD,QAAI,CAAC,IAAK;AACV,UAAM,SAAS,IAAI,aAAa,cACxB,EAAE,aAAa,QAAQ,KAAK,IAAI,YAAY,MAAM,YACnD,IAAI,WAAW,OAAO,KACtB,EAAE,WAAW;AACpB,QAAI,CAAC,OAAQ;AACb,MAAE,eAAe;AACjB,SAAK,IAAI,IAAI;AAAA,EACjB;AAEA,QAAM,aAAa,SAAS,KAAK,MAAM,QAAQ,UAAU;AACrD,UAAM,MAAM,QAAQ,OAAO,OAAO,SAAS,MAAM,KAAK,CAAC;AACvD,QAAI,QAAQ,IAAI,aAAa,aAAa,IAAI,WAAW,OAAO,IAAI;AAChE,WAAK,IAAI,IAAI;AACb,aAAO;AAAA,IACX;AACA,WAAO,WAAW,KAAK,GAAG,MAAM,QAAQ,QAAQ;AAAA,EACpD;AAEA,IAAE,iBAAiB,SAAS,OAAO;AACnC,IAAE,iBAAiB,YAAY,OAAO;AACtC,IAAE,OAAO;AAET,SAAO;AAAA,IACH,UAAU;AACN,QAAE,oBAAoB,SAAS,OAAO;AACtC,QAAE,oBAAoB,YAAY,OAAO;AACzC,UAAI,EAAE,SAAS,WAAY,GAAE,OAAO;AAAA,IACxC;AAAA,EACJ;AACJ;",
   "names": []
 }

package/dist/widgets.js

@@ -6454,6 +6454,55 @@ function installAutoScrollbars(root = document.body, { exclude = null } = {}) {
   };
 }
 
+// src/ui/utils/native_context_menu.js
+var TEXT_INPUTS = /* @__PURE__ */ new Set([
+  "",
+  "text",
+  "search",
+  "url",
+  "tel",
+  "email",
+  "password",
+  "number",
+  "date",
+  "datetime-local",
+  "month",
+  "week",
+  "time"
+]);
+function isEditable(el) {
+  if (!el || el.nodeType !== 1) return false;
+  const tag = el.tagName;
+  if (tag === "TEXTAREA" || tag === "SELECT") return true;
+  if (tag === "INPUT") return TEXT_INPUTS.has(String(el.getAttribute("type") || "").toLowerCase());
+  return !!el.closest?.('[contenteditable=""],[contenteditable="true"],[contenteditable="plaintext-only"]');
+}
+function onSelection(target, doc) {
+  const sel = doc?.getSelection?.();
+  if (!sel || sel.isCollapsed || !String(sel).trim()) return false;
+  for (let i = 0; i < sel.rangeCount; i += 1) {
+    if (sel.getRangeAt(i).intersectsNode?.(target)) return true;
+  }
+  return false;
+}
+function suppressNativeContextMenu({ root, allow } = {}) {
+  const r = root ?? (typeof document !== "undefined" ? document : null);
+  if (!r) return { dispose() {
+  } };
+  const onMenu = (e) => {
+    if (e.defaultPrevented) return;
+    const t = e.target;
+    if (isEditable(t)) return;
+    if (onSelection(t, t?.ownerDocument)) return;
+    if (allow?.(e)) return;
+    e.preventDefault();
+  };
+  r.addEventListener("contextmenu", onMenu);
+  return { dispose() {
+    r.removeEventListener("contextmenu", onMenu);
+  } };
+}
+
 // src/ui/utils/overlay_scrollbar.js
 function normalizeOrientation(value) {
   return String(value || "horizontal").toLowerCase() === "vertical" ? "vertical" : "horizontal";
@@ -7274,6 +7323,7 @@ export {
   showDeleteConfirmDialog,
   showRunProgressDialog,
   showSelectDialog,
+  suppressNativeContextMenu,
   thumbGeometry,
   toastError,
   toastInfo,