roxxie-proxy-u-prod 0.1.0

package/README.md

@@ -0,0 +1,123 @@
+# roxxie-proxy-u-prod
+
+Production browser assets for Roxxie Proxy U. This release is pinned to the
+tracker at `https://100.58.76.81/`. The source workspace's development network
+document remains on `http://127.0.0.1:8788/`.
+
+The browser code and styles in `dist/` are designed to be served by jsDelivr.
+The small files in `runtime/` must be served at `https://100.58.76.81/browser/`.
+They include the HTML shell, tracker network document, and same-origin service
+workers.
+
+## Embed from one HTML page
+
+After deploying `runtime/` as described below, an external page can embed the
+browser with only this markup:
+
+```html
+<div id="roxxie-browser" style="position:fixed;inset:0"></div>
+<script
+	defer
+	src="https://cdn.jsdelivr.net/npm/roxxie-proxy-u-prod@0.1.0/embed.js"
+	data-roxxie-target="#roxxie-browser"
+></script>
+```
+
+The loader inserts an iframe whose default URL is
+`https://100.58.76.81/browser/`. Call it manually when more control is needed:
+
+```html
+<script
+	src="https://cdn.jsdelivr.net/npm/roxxie-proxy-u-prod@0.1.0/embed.js"
+	data-roxxie-auto="false"
+></script>
+<script>
+	RoxxieProxyU.mount({ target: "#roxxie-browser", height: "720px" });
+</script>
+```
+
+Always pin an exact npm version. jsDelivr treats versioned assets as immutable;
+using `@latest` can combine an old shell or worker with new browser code.
+
+## Deploy the same-origin runtime
+
+Copy the contents of `runtime/` to a directory served as `/browser/` by the
+tracker's HTTPS server. The Debian installer can verify and deploy it
+atomically:
+
+```sh
+sudo bash deploy/debian/install.sh \
+  --public-ip 100.58.76.81 \
+  --email admin@edurocks.org \
+  --skip-app-deploy \
+  --frontend-package roxxie-proxy-u-prod@0.1.0
+```
+
+For a manual Caddy integration, put this handler before the tracker reverse
+proxy and point it at a complete runtime tree (the installer maintains the
+`current` symlink):
+
+```caddyfile
+handle_path /browser/* {
+    root * /srv/roxxie-browser-runtime/current
+
+    @document path / /index.html
+    header @document Cache-Control "no-cache, must-revalidate"
+
+    @network path /roxxie-network.json
+    header @network Cache-Control "no-store"
+
+    @workers path /sw.js /localcontrollersw.js /controller.sw.js
+    header @workers Cache-Control "no-cache, must-revalidate"
+
+    file_server
+}
+```
+
+Serve `index.html` as `text/html`, the three worker files as JavaScript, and
+`roxxie-network.json` as JSON. Do not rewrite a missing worker or network file
+to the shell.
+
+## Why a same-origin shell is required
+
+jsDelivr intentionally serves npm `.html` files as `text/plain`, so a browser
+cannot execute the application directly from a jsDelivr HTML URL. Separately,
+the Web platform forbids a CDN-loaded script from registering a service worker
+for the embedding page's origin. Roxxie's rewritten tab navigation requires
+that worker.
+
+For those reasons, a genuinely CDN-only arbitrary-page embed is not possible
+with this browser architecture. The supported design keeps the executable code
+on jsDelivr while the tracker origin serves the minimal shell, configuration,
+and worker boundary. The one-file host-page example remains valid because it
+iframes that same-origin runtime.
+
+## Release maintenance
+
+In the complete Roxxie Proxy U source workspace, maintainers build the release
+with:
+
+```sh
+pnpm --filter roxxie-proxy-u-prod build
+pnpm --filter roxxie-proxy-u-prod verify
+pnpm --filter roxxie-proxy-u-prod pack
+```
+
+The source snapshot in an extracted npm tarball is also independently
+rebuildable:
+
+```sh
+corepack prepare pnpm@10.12.1 --activate
+pnpm --dir source install --frozen-lockfile
+npm run build
+npm run verify
+```
+
+The build fixes the CDN base to this package's exact version, fixes the runtime
+base to `/browser/`, disables source maps, generates the production network
+document, and copies the repository's AGPL license into the package. The
+tarball also carries a modified-source snapshot, third-party notices, the exact
+filter-list inputs and hashes, and their retained license texts; see
+`SOURCE.md` and `THIRD_PARTY_NOTICES.md`.
+
+Licensed under AGPL-3.0-only.

package/SOURCE.md

@@ -0,0 +1,29 @@
+# Source for this browser release
+
+This package includes the preferred source form for Roxxie Proxy U's modified
+browser, injection layer, Scramjet components, WebRTC transport, and protocol
+code under `source/`. The release build scripts are retained under `scripts/`,
+and the exact workspace dependency lockfile is `source/pnpm-lock.yaml`.
+
+The serialized ad-blocking engine in `dist/` is generated from the unmodified
+inputs under `third_party/filter-lists/`. Their source URLs, byte counts, and
+SHA-256 hashes are recorded in `third_party/filter-lists/manifest.json`.
+
+An extracted package tarball can be rebuilt directly with Node.js 20.19 or
+newer and pnpm 10.12.1:
+
+```sh
+corepack prepare pnpm@10.12.1 --activate
+pnpm --dir source install --frozen-lockfile
+npm run build
+npm run verify
+```
+
+The retained workspace is deliberately limited to the packages used by this
+browser. It includes the source and checked build outputs for internal
+dependencies whose normal release builds require additional Rust or browser
+toolchains; the protocol packages are rebuilt from TypeScript during the
+package build. The release script never downloads or synthesizes missing
+workspace source.
+
+`THIRD_PARTY_NOTICES.md` identifies code and data that retain separate licenses.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,24 @@
+# Third-party notices
+
+Roxxie Proxy U is a combined and modified work. The repository-level license
+is AGPL-3.0-only; the following dependencies and retained inputs remain under
+their own licenses.
+
+- **Browser.js / Scramjet**, HeyPuter and Mercury Workshop contributors:
+  upstream code forming the browser shell and rewriting engine, AGPL-3.0.
+- **Adrift**, Mercury Workshop contributors: architectural and protocol
+  lineage for the transport rewritten in this repository; its package
+  metadata declares ISC.
+- **@ghostery/adblocker 2.18.1**, Ghostery: MPL-2.0. A copy of the license is
+  retained at `third_party/filter-lists/LICENSE-MPL-2.0.txt`.
+- **EasyList and EasyPrivacy snapshots**, EasyList authors:
+  GPL-3.0-or-later OR CC-BY-SA-3.0-or-later.
+- **uBlock Origin uAssets filter and redirect-resource snapshots**, uBlock
+  Origin contributors: GPL-3.0-or-later.
+- **@mercuryworkshop/proxy-transports**, Mercury Workshop: MIT.
+- **@roamhq/wrtc**, Jack Duvall and contributors: BSD-2-Clause.
+
+Exact ad-blocking input URLs, versions, byte counts, and SHA-256 hashes are in
+`third_party/filter-lists/manifest.json`. Unmodified list snapshots and license
+texts are retained in the same directory. Additional dependency notices are
+available in their installed packages and upstream source distributions.

package/dist/assets/index-BdRlQ7d_.css

@@ -0,0 +1 @@
+html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,aside,canvas,details,embed,figure,figcaption,footer,header,hgroup,menu,nav,output,ruby,section,summary,time,mark,audio,video{margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseline}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:before,blockquote:after,q:before,q:after{content:"";content:none}table{border-collapse:collapse;border-spacing:0}body,html,#app,#main{width:100vw;height:100vh;margin:0;padding:0;overflow:hidden;display:flex;flex-direction:column}#app.vertical-tabs{flex-direction:row}body.sidebar-right #app.vertical-tabs{flex-direction:row-reverse}#app.layout-bottom{flex-direction:column-reverse}iframe{height:100%}html,body{font-family:var(--font);color:var(--toolbar_text);background:var(--toolbar);accent-color:var(--tab_line);color-scheme:dark;--text-5: color-mix(in oklab, var(--toolbar_text) 5%, transparent);--text-8: color-mix(in oklab, var(--toolbar_text) 8%, transparent);--text-10: color-mix(in oklab, var(--toolbar_text) 10%, transparent);--text-15: color-mix(in oklab, var(--toolbar_text) 15%, transparent);--text-20: color-mix(in oklab, var(--toolbar_text) 20%, transparent);--text-30: color-mix(in oklab, var(--toolbar_text) 30%, transparent);--text-35: color-mix(in oklab, var(--toolbar_text) 35%, transparent);--text-40: color-mix(in oklab, var(--toolbar_text) 40%, transparent);--text-50: color-mix(in oklab, var(--toolbar_text) 50%, transparent);--text-60: color-mix(in oklab, var(--toolbar_text) 60%, transparent);--text-65: color-mix(in oklab, var(--toolbar_text) 65%, transparent);--text-70: color-mix(in oklab, var(--toolbar_text) 70%, transparent);--ntp-text-5: color-mix(in oklab, var(--ntp_text) 5%, transparent);--ntp-text-8: color-mix(in oklab, var(--ntp_text) 8%, transparent);--ntp-text-10: color-mix(in oklab, var(--ntp_text) 10%, transparent);--ntp-text-15: color-mix(in oklab, var(--ntp_text) 15%, transparent);--ntp-text-20: color-mix(in oklab, var(--ntp_text) 20%, transparent);--ntp-text-60: color-mix(in oklab, var(--ntp_text) 60%, transparent);--ntp-text-70: color-mix(in oklab, var(--ntp_text) 70%, transparent);--field-text-50: color-mix( in oklab, var(--toolbar_field_text) 50%, transparent );--field-text-60: color-mix( in oklab, var(--toolbar_field_text) 60%, transparent );--accent-75: color-mix(in oklab, var(--tab_line) 75%, transparent);--accent-50: color-mix(in oklab, var(--tab_line) 50%, transparent);--accent-40: color-mix(in oklab, var(--tab_line) 40%, transparent);--accent-30: color-mix(in oklab, var(--tab_line) 30%, transparent);--accent-25: color-mix(in oklab, var(--tab_line) 25%, transparent);--accent-20: color-mix(in oklab, var(--tab_line) 20%, transparent);--accent-15: color-mix(in oklab, var(--tab_line) 15%, transparent);--accent-10: color-mix(in oklab, var(--tab_line) 10%, transparent);--accent-tint-10: color-mix(in oklab, white 10%, var(--tab_line));--accent-tint-20: color-mix(in oklab, white 20%, var(--tab_line));--accent-tint-35: color-mix(in oklab, white 35%, var(--tab_line));--accent-tint-50: color-mix(in oklab, white 50%, var(--tab_line));--accent-shade-5: color-mix(in oklab, black 5%, var(--tab_line));--accent-shade-10: color-mix(in oklab, black 10%, var(--tab_line));--accent-shade-15: color-mix(in oklab, black 15%, var(--tab_line));--accent-shade-20: color-mix(in oklab, black 20%, var(--tab_line));--accent-shade-25: color-mix(in oklab, black 25%, var(--tab_line));--accent-shade-30: color-mix(in oklab, black 30%, var(--tab_line));--accent-shade-40: color-mix(in oklab, black 40%, var(--tab_line));--accent-shade-50: color-mix(in oklab, black 50%, var(--tab_line));--radius-xs: 3px;--radius-sm: 4px;--radius-md: 5px;--radius-lg: 6px;--radius-xl: 8px;--space-xxs: .15rem;--space-xs: .225rem;--space-sm: .375rem;--space-md: .6rem;--space-lg: .75rem;--space-xl: .95rem;--space-xxl: 1.25rem;--tab-height: 2rem;--omnibar-height: 2.5rem}body.ui-compact{--radius-xs: 2px;--radius-sm: 3px;--radius-md: 4px;--radius-lg: 5px;--radius-xl: 6px;--space-xxs: .1rem;--space-xs: .175rem;--space-sm: .25rem;--space-md: .35rem;--space-lg: .6rem;--space-xl: .75rem;--space-xxl: 1rem;--tab-height: 1.75rem;--omnibar-height: 2.25rem}body.ui-touch{--radius-xs: 5px;--radius-sm: 6px;--radius-md: 8px;--radius-lg: 10px;--radius-xl: 12px;--space-xxs: .175rem;--space-xs: .25rem;--space-sm: .5rem;--space-md: .75rem;--space-lg: 1rem;--space-xl: 1.25rem;--space-xxl: 1.5rem;--tab-height: 2.2rem;--omnibar-height: 2.8rem}::selection{background:var(--accent-30)}body.light-mode{color-scheme:light}:root{--font: "Inter", system-ui, sans-serif;font-family:var(--font);--toolbarbutton-hover-background: color-mix( in srgb, currentColor 17%, transparent );--toolbarbutton-active-background: color-mix( in srgb, currentColor 30%, transparent )}body.full-vertical-tabs{--omnibar-height: 2.25rem}body.full-vertical-tabs.ui-compact{--omnibar-height: 2rem}body.full-vertical-tabs.ui-touch{--omnibar-height: 2.5rem}*{box-sizing:border-box}h1{font-size:2em}button{border:none;background:none;color:var(--toolbar_text);padding:0;cursor:pointer;font-family:var(--font)}#tabstrip #hovercard{transition:opacity .2s ease .7s,scale .2s cubic-bezier(.43,.91,.34,1.3) .7s,visibility 0s,left .2s cubic-bezier(.33,.22,.18,1.17);scale:1}#tabstrip:is(:has(:active),:not(:has(:hover:not(.extra,.extra *)))) #hovercard{visibility:hidden;opacity:0;scale:.8;transition:none}#tabstrip .extra.top:has(>.pinned-tabs.empty){padding:0}