pinokiod 1.0.16 → 1.0.18

package/kernel/api/index.js

@@ -4,6 +4,7 @@ const path = require('path')
 const _ = require('lodash')
 const git = require('isomorphic-git')
 const http = require('isomorphic-git/http/node')
+const Lproxy = require('lproxy')
 //const { glob, globSync, globStream, globStreamSync, Glob, } = require('glob')
 const { glob, sync, hasMagic } = require('glob-gitignore')
 const fastq = require('fastq')
@@ -20,6 +21,54 @@ class Api {
     this.running = {}
     this.done = {}
     this.waiter = {}
+    this.proxies = {}
+    this.lproxy = new Lproxy()
+  }
+  async startProxy(scriptPath, uri, name) {
+    console.log("startProxy", { scriptPath, uri, proxies: this.proxies })
+    let proxy_uri = await this.lproxy.start(uri)
+    console.log({ proxy_uri, uri })
+    if (this.proxies[scriptPath]) {
+      this.proxies[scriptPath].push({ target: uri, proxy: proxy_uri, name})
+    } else {
+      this.proxies[scriptPath] = [{ target: uri, proxy: proxy_uri, name }]
+    }
+    return {
+      target: uri,
+      proxy: proxy_uri
+    }
+    console.log("started", { proxies: this.proxies })
+  }
+  stopProxy(config) {
+    console.log("stopProxy", { config, proxies: this.proxies })
+    if (config.script) {
+      // stop all proxies for the script
+      if (this.proxies[config.script]) {
+        for(let p of this.proxies[config.script]) {
+          this.stopProxy({ uri: p.target })
+        }
+      }
+    } else if (config.uri) {
+
+      // stop the proxy
+      this.lproxy.stop(config.uri)
+
+      // remove the uri from the proxies array
+      for(let key in this.proxies) {
+        let p = this.proxies[key]
+        if (p.includes(config.uri)) {
+          let index;
+          for(let i = 0; i<p.length; i++) {
+            if (p[i].target === config.uri) {
+              index = i
+              break;
+            }
+          }
+          this.proxies[key].splice(index, 1)
+        }
+      }
+    }
+    console.log("stopped", { proxies: this.proxies })
   }
   async init() {
     console.log("api.init", { homedir: this.kernel.homedir })
@@ -56,6 +105,9 @@ class Api {
     // if any process is in a "wait" state, resume it
     this.kernel.resumeprocess(requestPath)
 
+    // stop all proxies
+    this.stopProxy({ script: requestPath })
+
     // if there are any pending waiters, delete them
 
     if (this.waiter[requestPath]) {

package/kernel/api/proxy/index.js

@@ -0,0 +1,27 @@
+class P {
+  async start (req, ondata, kernel) {
+    /*
+      {
+        "method": "proxy.start",
+        "params": {
+          "name",
+          "uri": "http://localhost:8192"
+        }
+      }
+    */
+    let response = await kernel.api.startProxy(req.parent.path, req.params.uri, req.params.name)
+    return response
+  }
+  async stop (req, ondata, kernel) {
+    /*
+      {
+        "method": "proxy.stop",
+        "params": {
+          "uri": "http://localhost:8192"
+        }
+      }
+    */
+    kernel.api.stopProxy({ uri: req.params.uri })
+  }
+}
+module.exports = P

package/kernel/bin/ffmpeg.js

@@ -5,7 +5,8 @@ const decompress = require('decompress');
 class Ffmpeg {
   async install(req, ondata) {
     await this.kernel.bin.exec({
-      message: "conda install -y -c conda-forge ffmpeg"
+      message: "conda install -y -c conda-forge ffmpeg",
+      conda: "base"
     }, ondata)
   }
   async installed() {
@@ -13,7 +14,8 @@ class Ffmpeg {
   }
   async uninstall(req, ondata) {
     await this.kernel.bin.exec({
-      message: "conda remove ffmpeg"
+      message: "conda remove ffmpeg",
+      conda: "base"
     }, ondata)
   }
 }

package/kernel/bin/llvm.js

@@ -3,7 +3,7 @@ class LLVM {
     if (this.kernel.platform === 'darwin') {
       await bin.exec({ message: "brew install llvm" }, ondata)
     } else {
-      await bin.exec({ message: "conda install -y -c conda-forge llvm" }, ondata)
+      await bin.exec({ message: "conda install -y -c conda-forge llvm", conda: "base" }, ondata)
     }
   }
   async installed() {
@@ -14,7 +14,7 @@ class LLVM {
     }
   }
   async uninstall(req, ondata) {
-    await this.kernel.bin.exec({ message: "conda remove llvm" }, ondata)
+    await this.kernel.bin.exec({ message: "conda remove llvm", conda: "base" }, ondata)
   }
 }
 module.exports = LLVM

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pinokiod",
-  "version": "1.0.16",
+  "version": "1.0.18",
   "description": "",
   "main": "index.js",
   "scripts": {
@@ -30,11 +30,13 @@
     "glob": "^10.3.3",
     "glob-gitignore": "^1.0.14",
     "handlebars": "^4.7.7",
+    "http-proxy": "^1.18.1",
     "http-terminator": "^3.2.0",
     "isomorphic-git": "^1.23.0",
     "jsonpath-plus": "^7.2.0",
     "key-store": "^1.2.0",
     "lodash": "^4.17.21",
+    "lproxy": "^0.0.1",
     "marked": "^5.0.1",
     "mime-types": "^2.1.35",
     "multer": "^1.4.5-lts.1",

package/server/index.js

@@ -741,7 +741,8 @@ class Server {
           //current: encodeURIComponent(req.originalUrl),
           current: req.originalUrl,
           editorUrl,
-          execUrl: "~" + req.originalUrl.replace(/^\/_api/, "\/api")
+          execUrl: "~" + req.originalUrl.replace(/^\/_api/, "\/api"),
+          proxies: this.kernel.api.proxies[filepath],
         }
         console.log("RESULT", result)
 

package/server/public/normalize.js

@@ -0,0 +1,266 @@
+// from https://github.com/sindresorhus/normalize-url
+const normalizeURL = (() => {
+  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URIs
+  const DATA_URL_DEFAULT_MIME_TYPE = 'text/plain';
+  const DATA_URL_DEFAULT_CHARSET = 'us-ascii';
+
+  const testParameter = (name, filters) => filters.some(filter => filter instanceof RegExp ? filter.test(name) : filter === name);
+
+  const normalizeDataURL = (urlString, {stripHash}) => {
+    const match = /^data:(?<type>[^,]*?),(?<data>[^#]*?)(?:#(?<hash>.*))?$/.exec(urlString);
+
+    if (!match) {
+      throw new Error(`Invalid URL: ${urlString}`);
+    }
+
+    let {type, data, hash} = match.groups;
+    const mediaType = type.split(';');
+    hash = stripHash ? '' : hash;
+
+    let isBase64 = false;
+    if (mediaType[mediaType.length - 1] === 'base64') {
+      mediaType.pop();
+      isBase64 = true;
+    }
+
+    // Lowercase MIME type
+    const mimeType = (mediaType.shift() || '').toLowerCase();
+    const attributes = mediaType
+      .map(attribute => {
+        let [key, value = ''] = attribute.split('=').map(string => string.trim());
+
+        // Lowercase `charset`
+        if (key === 'charset') {
+          value = value.toLowerCase();
+
+          if (value === DATA_URL_DEFAULT_CHARSET) {
+            return '';
+          }
+        }
+
+        return `${key}${value ? `=${value}` : ''}`;
+      })
+      .filter(Boolean);
+
+    const normalizedMediaType = [
+      ...attributes,
+    ];
+
+    if (isBase64) {
+      normalizedMediaType.push('base64');
+    }
+
+    if (normalizedMediaType.length > 0 || (mimeType && mimeType !== DATA_URL_DEFAULT_MIME_TYPE)) {
+      normalizedMediaType.unshift(mimeType);
+    }
+
+    return `data:${normalizedMediaType.join(';')},${isBase64 ? data.trim() : data}${hash ? `#${hash}` : ''}`;
+  };
+
+  function normalizeUrl(urlString, options) {
+    options = {
+      defaultProtocol: 'http:',
+      normalizeProtocol: true,
+      forceHttp: false,
+      forceHttps: false,
+      stripAuthentication: true,
+      stripHash: false,
+      stripTextFragment: true,
+      stripWWW: true,
+      removeQueryParameters: [/^utm_\w+/i],
+      removeTrailingSlash: true,
+      removeSingleSlash: true,
+      removeDirectoryIndex: false,
+      removeExplicitPort: false,
+      sortQueryParameters: true,
+      ...options,
+    };
+
+    urlString = urlString.trim();
+
+    // Data URL
+    if (/^data:/i.test(urlString)) {
+      return normalizeDataURL(urlString, options);
+    }
+
+    if (/^view-source:/i.test(urlString)) {
+      throw new Error('`view-source:` is not supported as it is a non-standard protocol');
+    }
+
+    const hasRelativeProtocol = urlString.startsWith('//');
+    const isRelativeUrl = !hasRelativeProtocol && /^\.*\//.test(urlString);
+
+    // Prepend protocol
+    if (!isRelativeUrl) {
+      urlString = urlString.replace(/^(?!(?:\w+:)?\/\/)|^\/\//, options.defaultProtocol);
+    }
+
+    const urlObject = new URL(urlString);
+
+    if (options.forceHttp && options.forceHttps) {
+      throw new Error('The `forceHttp` and `forceHttps` options cannot be used together');
+    }
+
+    if (options.forceHttp && urlObject.protocol === 'https:') {
+      urlObject.protocol = 'http:';
+    }
+
+    if (options.forceHttps && urlObject.protocol === 'http:') {
+      urlObject.protocol = 'https:';
+    }
+
+    // Remove auth
+    if (options.stripAuthentication) {
+      urlObject.username = '';
+      urlObject.password = '';
+    }
+
+    // Remove hash
+    if (options.stripHash) {
+      urlObject.hash = '';
+    } else if (options.stripTextFragment) {
+      urlObject.hash = urlObject.hash.replace(/#?:~:text.*?$/i, '');
+    }
+
+    // Remove duplicate slashes if not preceded by a protocol
+    // NOTE: This could be implemented using a single negative lookbehind
+    // regex, but we avoid that to maintain compatibility with older js engines
+    // which do not have support for that feature.
+    if (urlObject.pathname) {
+      // TODO: Replace everything below with `urlObject.pathname = urlObject.pathname.replace(/(?<!\b[a-z][a-z\d+\-.]{1,50}:)\/{2,}/g, '/');` when Safari supports negative lookbehind.
+
+      // Split the string by occurrences of this protocol regex, and perform
+      // duplicate-slash replacement on the strings between those occurrences
+      // (if any).
+      const protocolRegex = /\b[a-z][a-z\d+\-.]{1,50}:\/\//g;
+
+      let lastIndex = 0;
+      let result = '';
+      for (;;) {
+        const match = protocolRegex.exec(urlObject.pathname);
+        if (!match) {
+          break;
+        }
+
+        const protocol = match[0];
+        const protocolAtIndex = match.index;
+        const intermediate = urlObject.pathname.slice(lastIndex, protocolAtIndex);
+
+        result += intermediate.replace(/\/{2,}/g, '/');
+        result += protocol;
+        lastIndex = protocolAtIndex + protocol.length;
+      }
+
+      const remnant = urlObject.pathname.slice(lastIndex, urlObject.pathname.length);
+      result += remnant.replace(/\/{2,}/g, '/');
+
+      urlObject.pathname = result;
+    }
+
+    // Decode URI octets
+    if (urlObject.pathname) {
+      try {
+        urlObject.pathname = decodeURI(urlObject.pathname);
+      } catch {}
+    }
+
+    // Remove directory index
+    if (options.removeDirectoryIndex === true) {
+      options.removeDirectoryIndex = [/^index\.[a-z]+$/];
+    }
+
+    if (Array.isArray(options.removeDirectoryIndex) && options.removeDirectoryIndex.length > 0) {
+      let pathComponents = urlObject.pathname.split('/');
+      const lastComponent = pathComponents[pathComponents.length - 1];
+
+      if (testParameter(lastComponent, options.removeDirectoryIndex)) {
+        pathComponents = pathComponents.slice(0, -1);
+        urlObject.pathname = pathComponents.slice(1).join('/') + '/';
+      }
+    }
+
+    if (urlObject.hostname) {
+      // Remove trailing dot
+      urlObject.hostname = urlObject.hostname.replace(/\.$/, '');
+
+      // Remove `www.`
+      if (options.stripWWW && /^www\.(?!www\.)[a-z\-\d]{1,63}\.[a-z.\-\d]{2,63}$/.test(urlObject.hostname)) {
+        // Each label should be max 63 at length (min: 1).
+        // Source: https://en.wikipedia.org/wiki/Hostname#Restrictions_on_valid_host_names
+        // Each TLD should be up to 63 characters long (min: 2).
+        // It is technically possible to have a single character TLD, but none currently exist.
+        urlObject.hostname = urlObject.hostname.replace(/^www\./, '');
+      }
+    }
+
+    // Remove query unwanted parameters
+    if (Array.isArray(options.removeQueryParameters)) {
+      // eslint-disable-next-line unicorn/no-useless-spread -- We are intentionally spreading to get a copy.
+      for (const key of [...urlObject.searchParams.keys()]) {
+        if (testParameter(key, options.removeQueryParameters)) {
+          urlObject.searchParams.delete(key);
+        }
+      }
+    }
+
+    if (!Array.isArray(options.keepQueryParameters) && options.removeQueryParameters === true) {
+      urlObject.search = '';
+    }
+
+    // Keep wanted query parameters
+    if (Array.isArray(options.keepQueryParameters) && options.keepQueryParameters.length > 0) {
+      // eslint-disable-next-line unicorn/no-useless-spread -- We are intentionally spreading to get a copy.
+      for (const key of [...urlObject.searchParams.keys()]) {
+        if (!testParameter(key, options.keepQueryParameters)) {
+          urlObject.searchParams.delete(key);
+        }
+      }
+    }
+
+    // Sort query parameters
+    if (options.sortQueryParameters) {
+      urlObject.searchParams.sort();
+
+      // Calling `.sort()` encodes the search parameters, so we need to decode them again.
+      try {
+        urlObject.search = decodeURIComponent(urlObject.search);
+      } catch {}
+    }
+
+    if (options.removeTrailingSlash) {
+      urlObject.pathname = urlObject.pathname.replace(/\/$/, '');
+    }
+
+    // Remove an explicit port number, excluding a default port number, if applicable
+    if (options.removeExplicitPort && urlObject.port) {
+      urlObject.port = '';
+    }
+
+    const oldUrlString = urlString;
+
+    // Take advantage of many of the Node `url` normalizations
+    urlString = urlObject.toString();
+
+    if (!options.removeSingleSlash && urlObject.pathname === '/' && !oldUrlString.endsWith('/') && urlObject.hash === '') {
+      urlString = urlString.replace(/\/$/, '');
+    }
+
+    // Remove ending `/` unless removeSingleSlash is false
+    if ((options.removeTrailingSlash || urlObject.pathname === '/') && urlObject.hash === '' && options.removeSingleSlash) {
+      urlString = urlString.replace(/\/$/, '');
+    }
+
+    // Restore relative protocol, if applicable
+    if (hasRelativeProtocol && !options.normalizeProtocol) {
+      urlString = urlString.replace(/^http:\/\//, '//');
+    }
+
+    // Remove http/https
+    if (options.stripProtocol) {
+      urlString = urlString.replace(/^(?:https?:)?\/\//, '');
+    }
+
+    return urlString;
+  }
+  return normalizeUrl
+})();

package/server/views/browser.ejs

@@ -14,6 +14,7 @@
 <script src="/nav.js"></script>
 <script src="/opener.js"></script>
 <script src="/report.js"></script>
+<script src="/normalize.js"></script>
 <% if (agent === "electron") { %>
   <link href="/electron.css" rel="stylesheet"/>
 <% } %>
@@ -205,6 +206,9 @@ body .frame-link.selected {
   background: rgba(0,0,100,0.06) !important;
   */
 }
+.frame-link.selected .del {
+  color: white;
+}
 body.dark .frame-link.selected {
   background: rgba(0,0,0,0.2) !important;
 }
@@ -260,6 +264,9 @@ body.dark .grid-btns .btn2 {
 .tab i {
   margin-right: 10px;
 }
+.temp-menu {
+  border-top: 1px solid rgba(0,0,0,0.1);
+}
 .temp-menu .del i {
   margin: 0;
 }
@@ -293,6 +300,7 @@ nav .logo {
   cursor: auto;
   display: flex;
   align-items: center;
+  width: 100%;
 }
 body.dark .header-item.cursor.header-top {
   background: none !important;
@@ -333,25 +341,23 @@ body.dark #new-tab {
       <div class='tab'><i class="fa-regular fa-folder-open"></i> Files</div>
     </a>
   </div>
-  <div class='menu'>
+  <div class='m h menu' data-type='h'>
     <% if (config.menu) { %>
     <%- include('./partials/menu', { menu: config.menu }) %>
     <% } %>
   </div>
-  <div class='temp-menu'>
-    <%tabs.forEach((tab) => { %>
-      <a target="<%=tab%>" href="<%=tab%>" class="btn header-item frame-link">
+  <div class='m s temp-menu' data-type='s'>
+    <%tabs.forEach((tab, i) => { %>
+      <a target="s<%=i%>" href="<%=tab%>" class="btn header-item frame-link" data-index="<%=i%>">
         <div class='tab'>
           <i class="fa-solid fa-link"></i><div class='display'><%=tab%></div><div class='flexible'></div><button class='btn2 del'><i class="fa-solid fa-xmark"></i></button>
         </div>
       </a>
     <%})%>
   </div>
-  <!--
   <div id='new-tab' class='btn header-item'>
     <i class="fa-solid fa-plus"></i>
   </div>
-  -->
   <div class='flexible'></div>
   <div class='grid-btns'>
     <a class='btn2' href="/?mode=explore" id='explore'><div><i class="fa-solid fa-globe"></i></div><div>Discover</div></a>
@@ -372,7 +378,9 @@ body.dark #new-tab {
       <button class='btn2 logo' id='forward'><i class="fa-solid fa-arrow-right"></i></button>
       <button class='btn2 logo' id='reload'><i class="fa-solid fa-rotate-right"></i></button>
       <div id='location'></div>
-      <a class='btn2 hidden' id='open-browser' target="_blank" href=""><i class="fa-solid fa-square-arrow-up-right"></i> External Browser</a>
+      <div class='flexible'></div>
+      <a class='btn2' id='open-browser' target="_blank" href=""><i class="fa-solid fa-square-arrow-up-right"></i> External Browser</a>
+      <button class='btn2' id='clone-tab'><i class='fa-regular fa-copy'></i> Clone</button>
     </div>
     <!--
     <div class='flexible'></div>
@@ -398,7 +406,6 @@ let cursorIndex = 0;
 const getTarget = (href) => {
   let u
   if (href.startsWith("http")) {
-//    u = new URL(href)
     return href
   } else if (href.startsWith("/")) {
     u = new URL("http://localhost" + href)
@@ -420,8 +427,12 @@ const renderCursor = () => {
 }
 const nav = (type) => {
   if (location.hash && location.hash.length > 0) {
-    let id = getTarget(location.hash.slice(1))
-    let target = document.querySelector("aside [target='" + id + "']")
+//    let id = getTarget(location.hash.slice(1))
+//    let target = document.querySelector("aside [target='" + id + "']")
+    let id = location.hash.slice(1)
+    let type = id[0]
+    let index = id.slice(1)
+    let target = document.querySelector(`aside .${type} [data-index='${index}']`)
     let targetFrame = document.querySelector(`iframe[name='${target.target}']`)
     console.log({ target, targetFrame })
     if (type === "back") {
@@ -441,8 +452,12 @@ const renderSelection = (e, force) => {
   if (location.hash && location.hash.length > 0) {
     console.log("# 2")
     document.querySelector(".bar").classList.remove("hidden")
-    let id = getTarget(location.hash.slice(1))
+    //let id = getTarget(location.hash.slice(1))
+    let id = location.hash.slice(1)
+    let type = id[0]
+    let index = id.slice(1)
 
+console.log({ type, index })
 
     // select the selected link
 //    document.querySelectorAll(".frame-link").forEach((el) => {
@@ -464,22 +479,32 @@ const renderSelection = (e, force) => {
 
     if (!target) {
       // find target by id
-      target = document.querySelector("aside [target='" + id + "']")
+      //target = document.querySelector("aside [target='" + id + "']")
+      target = document.querySelector(`aside .${type} [data-index='${index}']`)
     }
 
     if (target) {
       console.log("# 3")
 
-      //document.querySelector("#location").innerHTML = id
-      document.querySelector("#location").innerHTML = location.hash.slice(1)
 
-      if (location.hash.slice(1).startsWith("/")) {
-        document.querySelector("#open-browser").classList.add("hidden")
-      } else {
-        document.querySelector("#open-browser").classList.remove("hidden")
-        //document.querySelector("#open-browser").href = id
-        document.querySelector("#open-browser").href = location.hash.slice(1)
-      }
+      let url = target.href
+      document.querySelector("#open-browser").href = url
+      document.querySelector("#clone-tab").setAttribute("data-href", url)
+      document.querySelector("#location").innerHTML = url
+
+//      document.querySelector("#location").innerHTML = location.hash.slice(1)
+//
+//      if (location.hash.slice(1).startsWith("/")) {
+//        //document.querySelector("#open-browser").classList.add("hidden")
+//        document.querySelector("#open-browser").classList.remove("hidden")
+//        document.querySelector("#open-browser").href = location.hash.slice(1)
+//      } else {
+//        document.querySelector("#open-browser").classList.remove("hidden")
+//        //document.querySelector("#open-browser").href = id
+//        document.querySelector("#open-browser").href = location.hash.slice(1)
+//      }
+//      document.querySelector("#clone-tab").setAttribute("data-href", location.hash.slice(1))
+
 
 
       target.classList.add("selected")
@@ -507,9 +532,14 @@ const renderSelection = (e, force) => {
             console.log("# 5", { src: targetFrame.src, href: target.href, target: target.target })
             // triggered with a click
             // do not reload iframe if the href and the src is the same
-            if (targetFrame.src.includes(target.target)) {
-//            if (targetFrame.src.includes(target.href)) {
-//            if (targetFrame.src === target.href) {
+            if (target.closest(".h")) {
+              if (targetFrame.src.includes(target.target)) {
+  //            if (targetFrame.src.includes(target.href)) {
+  //            if (targetFrame.src === target.href) {
+                e.preventDefault()
+                e.stopPropagation()
+              }
+            } else if (target.closest(".s")) {
               e.preventDefault()
               e.stopPropagation()
             }
@@ -544,6 +574,10 @@ const renderSelection = (e, force) => {
         let frame = document.createElement("iframe")
         frame.name = target.target
         frame.src = target.href
+        frame.setAttribute(
+          "allow", 
+          "clipboard-read *; clipboard-write *; accelerometer *; ambient-light-sensor *; autoplay *; battery *; camera *; display-capture *; gamepad *; geolocation *; gyroscope *; hid *; identity-credentials-get *; microphone *; midi *; otp-credentials *; serial *;"
+        )
         document.querySelector("main").appendChild(frame)
         loaded[target.target] = true
       }
@@ -578,16 +612,33 @@ document.querySelector("#forward").addEventListener("click", (e) => {
   nav("forward")
 })
 
-/*
 document.querySelector("#new-tab").addEventListener("click", async (e) => {
-  const url = prompt("url")
+  const u = prompt("url")
+
+  let o = {}
+  if (/^[0-9.:]/.test(u)) {
+    o.forceHttp = true
+  } else if (/^localhost/.test(u)) {
+    o.forceHttp = true
+  } else {
+    o.forceHttps = true
+  }
+  const url = normalizeURL(u, o)
 
   if (url && url.trim().length > 0) {
     console.log("url", url)
-    await addTab(url)
+    const { tab, frame } = await addTab(url)
+    tab.click()
+  }
+})
+document.querySelector("#clone-tab").addEventListener("click", async (e) => {
+  const url = e.target.getAttribute("data-href")
+  if (url && url.trim().length > 0) {
+    console.log("url", url)
+    const { tab, frame } = await addTab(url)
+    tab.click()
   }
 })
-*/
 
 const syncTabs = async () => {
   let tabs = []
@@ -611,11 +662,16 @@ const syncTabs = async () => {
   })
 }
 const addTab = async (url) => {
+  debugger
   let item = document.createElement("a")
   //let id = "ts" + Date.now()
-  let id = url
+  let index = document.querySelectorAll("aside .s .frame-link").length
+
+  let id = "s" + index
+//  let id = url
   item.target = id
   item.href = url
+  item.setAttribute("data-index", index)
   item.className = "btn header-item frame-link"
   item.innerHTML = `<div class='tab'><i class="fa-solid fa-link"></i><div class='display'>${url}</div><div class='flexible'></div><button class='btn2 del'><i class="fa-solid fa-xmark"></i></button></div>`
 
@@ -623,11 +679,19 @@ const addTab = async (url) => {
 
   let frame = document.createElement("iframe")
   frame.name = id
+  frame.setAttribute(
+    "allow", 
+    "clipboard-read *; clipboard-write *; accelerometer *; ambient-light-sensor *; autoplay *; battery *; camera *; display-capture *; gamepad *; geolocation *; gyroscope *; hid *; identity-credentials-get *; microphone *; midi *; otp-credentials *; serial *;"
+  )
   document.querySelector("main").appendChild(frame)
 
   await syncTabs()
 
 
+  return {
+    tab: item,
+    frame
+  }
 
 }
 
@@ -694,7 +758,10 @@ document.querySelector("aside").addEventListener("click", async (e) => {
 //        console.log("ID", id, target.href)
 //        location.hash = id
 
-        location.hash = target.getAttribute("href")
+        //location.hash = target.getAttribute("href")
+        let index = target.getAttribute("data-index")
+        let type = target.closest(".m").getAttribute("data-type")
+        location.hash = type + index
 
         document.querySelectorAll(".frame-link").forEach((el) => {
           el.classList.remove("selected")

package/server/views/editor.ejs

@@ -759,6 +759,11 @@ const reloadMemory = async () => {
       <div id='save' class='btn disabled'>
         <span class='save'><i class="fa-solid fa-check"></i> Save</span>
       </div>
+      <% if (proxies) { %>
+        <% proxies.forEach((proxy) => { %>
+          <a class='btn' target="_blank" href="<%=proxy.proxy%>"><i class='fa-solid fa-up-right-from-square'></i> Proxy <%=proxy.name ? "(" + proxy.name + ")" : proxy.proxy%></a>
+        <% }) %>
+      <% } %>
     </div>
   <% } %>
   </header>

package/server/views/fullscreen_editor.ejs

@@ -739,6 +739,11 @@ const reloadMemory = async () => {
         <span class='stop hidden'><i class="fa-solid fa-stop"></i> Stop</span>
       </div>
       <button class='btn' id='open-fs' data-filepath="<%=filepath%>"><i class="fa-solid fa-eye"></i> View File</button>
+      <% if (proxies) { %>
+        <% proxies.forEach((proxy) => { %>
+          <a class='btn' target="_blank" href="<%=proxy.proxy%>"><i class='fa-solid fa-up-right-from-square'></i> Proxy <%=proxy.name ? "(" + proxy.name + ")" : proxy.proxy%></a>
+        <% }) %>
+      <% } %>
       <!--
       <button class='btn' id='source' data-editor-url="<%=editorUrl%>">Navigate</button>
       -->

package/server/views/partials/menu.ejs

@@ -10,7 +10,7 @@
     </div>
   <% } else { %>
     <% if (item.btn) { %>
-      <a data-index="<%=index%>" target="<%=item.src%>" data-mode="<%=item.mode%>" href="<%=item.href%>" class='btn header-item frame-link'>
+      <a data-index="<%=index%>" target="h<%=index%>" data-mode="<%=item.mode%>" href="<%=item.href%>" class='btn header-item frame-link'>
         <div class='tab'><%-item.btn%></div>
         <% if (item.running) { %>
           <div class='loader'>