Blame for browser.js

/* ViKernel Browser: a governed agentic browser app for ViKernel Desktop.

   Every navigation passes egress policy, SSRF guard and the ViKernel kernel gate on the server.

   The page is shown as a safe render (the site's own layout and CSS in a script-less sandboxed iframe,

   every resource proxied) or as a reader view; hidden instructions are surfaced, and agent

   actions on the page are decided by the gate. */
(() => {
'use strict';

const MAX_TABS = 6;
const BM_KEY = 'vb.bookmarks.v3';
const BM_KEY_OLD = 'vb.bookmarks.v1';
const MODE_KEY = 'vb.mode.v1';
const NAV = '#vb-nav:';
const START = 'vb:start';

const ICON = '<svg viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><circle cx="11" cy="11" r="8"/><path d="M3 11h16M11 3c2.6 2.8 2.6 13.2 0 16M11 3c-2.6 2.8-2.6 13.2 0 16"/><path d="M17 13.5l4 1.5v3c0 2.2-1.7 3.6-4 4.5-2.3-.9-4-2.3-4-4.5v-3z" fill="currentColor" fill-opacity=".18"/></svg>';
const I = {
  back: '<svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M15 18l-6-6 6-6"/></svg>',
  fwd: '<svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M9 18l6-6-6-6"/></svg>',
  reload: '<svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12a9 9 0 1 1-2.6-6.4"/><path d="M21 3v6h-6"/></svg>',
  star: '<svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linejoin="round"><path d="M12 3l2.8 5.7 6.2.9-4.5 4.4 1.1 6.2L12 17.3 6.4 20.2l1.1-6.2L3 9.6l6.2-.9z"/></svg>',
  lock: '<svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round"><rect x="5" y="11" width="14" height="10" rx="2"/><path d="M8 11V8a4 4 0 0 1 8 0v3"/></svg>',
  unlock: '<svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round"><rect x="5" y="11" width="14" height="10" rx="2"/><path d="M8 11V8a4 4 0 0 1 7.5-2"/></svg>',
  shield: '<svg viewBox="0 0 24 24" width="96" height="96" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linejoin="round"><path d="M12 2l8 3v6c0 5-3.4 9.3-8 11-4.6-1.7-8-6-8-11V5z" fill="currentColor" fill-opacity=".12"/><path d="M9 9l6 6M15 9l-6 6" stroke-linecap="round"/></svg>',
  agent: '<svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M12 3l1.8 4.6L18 9l-4.2 1.4L12 15l-1.8-4.6L6 9l4.2-1.4z"/><path d="M18 15l.9 2.1L21 18l-2.1.9L18 21l-.9-2.1L15 18l2.1-.9z"/></svg>',
  hist: '<svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"><circle cx="12" cy="12" r="9"/><path d="M12 7v5l3 2"/></svg>',
  info: '<svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"><circle cx="12" cy="12" r="9"/><path d="M12 11v6M12 7.5v.5"/></svg>',
  plus: '<svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.4" stroke-linecap="round"><path d="M12 5v14M5 12h14"/></svg>',
  x: '<svg viewBox="0 0 24 24" width="12" height="12" fill="none" stroke="currentColor" stroke-width="2.6" stroke-linecap="round"><path d="M6 6l12 12M18 6L6 18"/></svg>',
  warn: '<svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M12 3l10 18H2z"/><path d="M12 10v5M12 18v.5"/></svg>'
};

const CSS = `

.vb-snap{padding:10px}.vb-snaplab{font:600 13px system-ui,sans-serif;color:#1e40af;background:#eff6ff;border:1px solid #bfdbfe;border-radius:8px;padding:6px 10px;margin-bottom:8px}.vb-snapimg{display:block;max-width:100%;border:1px solid #e2e8f0;border-radius:8px}

.vb-root{--vb-bg:#fff;--vb-fg:#0f172a;--vb-mut:#64748b;--vb-line:#e2e8f0;--vb-chrome:#f1f5f9;--vb-tab:#e2e8f0;--vb-acc:#2563EB;--vb-ok:#16a34a;--vb-okbg:#dcfce7;--vb-bad:#dc2626;--vb-badbg:#fee2e2;--vb-warn:#b45309;--vb-warnbg:#fef3c7;--vb-card:#f8fafc;--vb-mark:#fde68a;

  position:relative;display:flex;flex-direction:column;height:100%;min-height:0;background:var(--vb-bg);color:var(--vb-fg);font:13px/1.45 system-ui,-apple-system,"Segoe UI",sans-serif;container-type:inline-size;outline:none;overflow:hidden}

@media (prefers-color-scheme:dark){.vb-root{--vb-bg:#0b1220;--vb-fg:#e2e8f0;--vb-mut:#94a3b8;--vb-line:#1e293b;--vb-chrome:#111a2e;--vb-tab:#1e293b;--vb-okbg:#052e16;--vb-ok:#4ade80;--vb-badbg:#450a0a;--vb-bad:#f87171;--vb-warnbg:#422006;--vb-warn:#fbbf24;--vb-card:#0f172a;--vb-mark:#713f12}}

:is(.dark,[data-theme="dark"]) .vb-root{--vb-bg:#0b1220;--vb-fg:#e2e8f0;--vb-mut:#94a3b8;--vb-line:#1e293b;--vb-chrome:#111a2e;--vb-tab:#1e293b;--vb-okbg:#052e16;--vb-ok:#4ade80;--vb-badbg:#450a0a;--vb-bad:#f87171;--vb-warnbg:#422006;--vb-warn:#fbbf24;--vb-card:#0f172a;--vb-mark:#713f12}

.vb-root *{box-sizing:border-box}

.vb-root button{font:inherit;color:inherit;cursor:pointer}

.vb-tabs{display:flex;align-items:flex-end;gap:2px;padding:6px 6px 0;background:var(--vb-chrome);overflow-x:auto;scrollbar-width:none;flex:none}

.vb-tab{display:flex;align-items:center;gap:6px;min-width:0;max-width:200px;flex:1 1 140px;padding:6px 8px 7px 10px;border-radius:8px 8px 0 0;background:transparent;border:0;color:var(--vb-mut);white-space:nowrap}

.vb-tab:hover{background:var(--vb-tab)}

.vb-tab.on{background:var(--vb-bg);color:var(--vb-fg);font-weight:600}

.vb-tab .vb-tt{overflow:hidden;text-overflow:ellipsis;flex:1;text-align:left}

.vb-tab .vb-tx{display:grid;place-items:center;width:18px;height:18px;border-radius:5px;border:0;background:transparent;padding:0;opacity:.6}

.vb-tab .vb-tx:hover{background:var(--vb-line);opacity:1}

.vb-tab .vb-dot{width:7px;height:7px;border-radius:50%;background:var(--vb-mut);flex:none}

.vb-tab .vb-dot.ok{background:var(--vb-ok)}.vb-tab .vb-dot.bad{background:var(--vb-bad)}.vb-tab .vb-dot.warn{background:var(--vb-warn)}

.vb-newtab{flex:none;width:28px;height:28px;margin-bottom:3px;border:0;border-radius:7px;background:transparent;display:grid;place-items:center}

.vb-newtab:hover{background:var(--vb-tab)}

.vb-bar{display:flex;align-items:center;gap:4px;padding:6px 8px;border-bottom:1px solid var(--vb-line);flex:none}

.vb-ib{display:grid;place-items:center;width:30px;height:30px;border:0;border-radius:8px;background:transparent;flex:none}

.vb-ib:hover:not(:disabled){background:var(--vb-chrome)}

.vb-ib:disabled{opacity:.35;cursor:default}

.vb-ib.on{color:var(--vb-acc);background:var(--vb-chrome)}

.vb-ib.starred{color:#eab308}.vb-ib.starred svg{fill:currentColor}

.vb-addr{flex:1;min-width:80px;display:flex;align-items:center;gap:6px;height:32px;padding:0 6px 0 10px;border-radius:16px;background:var(--vb-chrome);border:1px solid transparent}

.vb-addr:focus-within{border-color:var(--vb-acc);background:var(--vb-bg)}

.vb-addr input{flex:1;min-width:0;border:0;background:transparent;color:var(--vb-fg);font:inherit;font-size:13px;outline:none}

.vb-lock{display:grid;place-items:center;color:var(--vb-mut)}.vb-lock.https{color:var(--vb-ok)}.vb-lock.http{color:var(--vb-warn)}

.vb-chip{flex:none;font:700 11px/1 system-ui,sans-serif;padding:5px 8px;border-radius:10px;white-space:nowrap;letter-spacing:.2px}

.vb-chip.ok{background:var(--vb-okbg);color:var(--vb-ok)}.vb-chip.bad{background:var(--vb-badbg);color:var(--vb-bad)}.vb-chip.mut{background:var(--vb-chrome);color:var(--vb-mut)}

.vb-bm{display:flex;gap:4px;padding:4px 8px;border-bottom:1px solid var(--vb-line);overflow-x:auto;scrollbar-width:thin;flex:none}

.vb-bm button{flex:none;border:0;background:transparent;border-radius:6px;padding:3px 8px;color:var(--vb-mut);max-width:220px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}

.vb-bm button:hover{background:var(--vb-chrome);color:var(--vb-fg)}

.vb-bm button.bad{color:var(--vb-bad)}.vb-bm button.demo{color:var(--vb-warn);font-weight:600}

.vb-main{flex:1;min-height:0;display:flex}

.vb-content{flex:1;min-width:0;overflow:auto;position:relative}

.vb-content.vb-fill{display:flex;flex-direction:column;overflow:hidden}

.vb-frame{display:block;flex:1;min-height:0;width:100%;border:0;background:#fff}

.vb-hpanel{flex:none;max-height:40%;overflow:auto;padding:4px 14px 10px;border-bottom:1px solid var(--vb-line);background:var(--vb-card);font-family:system-ui,sans-serif}

.vb-hpanel[hidden]{display:none}

.vb-hpanel .vb-hidden-wrap{margin-top:0;padding-top:6px;border-top:0}

.vb-mode{display:flex;flex:none;border:1px solid var(--vb-line);border-radius:9px;overflow:hidden}

.vb-mode button{border:0;background:transparent;padding:5px 9px;font-size:12px;color:var(--vb-mut);white-space:nowrap}

.vb-mode button.on{background:var(--vb-acc);color:#fff;font-weight:700}

.vb-side{width:340px;flex:none;border-left:1px solid var(--vb-line);display:flex;flex-direction:column;min-height:0;background:var(--vb-card)}

.vb-side[hidden]{display:none}

.vb-side h3{margin:0;font-size:14px}

.vb-sidehd{padding:12px;border-bottom:1px solid var(--vb-line);display:flex;flex-direction:column;gap:8px}

.vb-sidehd textarea{width:100%;min-height:54px;resize:vertical;border:1px solid var(--vb-line);border-radius:8px;padding:8px;background:var(--vb-bg);color:var(--vb-fg);font:inherit}

.vb-run{align-self:flex-end;border:0;border-radius:8px;padding:7px 16px;background:var(--vb-acc);color:#fff !important;font-weight:700}

.vb-run:disabled{opacity:.5;cursor:default}

.vb-ev{flex:1;overflow:auto;padding:10px 12px;display:flex;flex-direction:column;gap:8px}

.vb-e{border:1px solid var(--vb-line);border-radius:8px;padding:8px 10px;background:var(--vb-bg);word-break:break-word}

.vb-e .vb-k{font:700 10px/1 system-ui,sans-serif;text-transform:uppercase;letter-spacing:.6px;color:var(--vb-mut);margin-bottom:4px}

.vb-e code,.vb-e pre{font:12px/1.4 ui-monospace,SFMono-Regular,Consolas,monospace}

.vb-e pre{margin:4px 0 0;white-space:pre-wrap;max-height:140px;overflow:auto;background:var(--vb-chrome);padding:6px;border-radius:6px}

.vb-e.deny{border-color:var(--vb-bad)}.vb-e.allow{border-color:var(--vb-ok)}

.vb-tag{display:inline-block;font:700 11px/1 system-ui,sans-serif;padding:4px 7px;border-radius:6px;margin-right:6px}

.vb-tag.ok{background:var(--vb-okbg);color:var(--vb-ok)}.vb-tag.bad{background:var(--vb-badbg);color:var(--vb-bad)}

.vb-callout{border-radius:10px;padding:10px 12px;background:var(--vb-badbg);color:var(--vb-bad);font-weight:600;border:1px solid var(--vb-bad)}

.vb-final{border-color:var(--vb-acc)}

.vb-banner{position:sticky;top:0;z-index:2;display:flex;align-items:center;gap:8px;padding:8px 14px;background:var(--vb-warnbg);color:var(--vb-warn);font-weight:600;border-bottom:1px solid var(--vb-line)}

.vb-banner.soft{font-weight:500}

.vb-banner button{margin-left:auto;border:1px solid currentColor;background:transparent;border-radius:6px;padding:3px 10px;font-weight:700}

.vb-page{max-width:760px;margin:0 auto;padding:22px 28px 60px;font:16px/1.65 Georgia,"Times New Roman",serif;color:var(--vb-fg)}

.vb-page h1{font:700 28px/1.25 system-ui,sans-serif;margin:.2em 0 .6em}

.vb-page h2,.vb-page h3,.vb-page h4{font-family:system-ui,sans-serif;line-height:1.3;margin:1.4em 0 .5em}

.vb-page a{color:var(--vb-acc)}

.vb-page img{max-width:100%;height:auto;border-radius:6px}

.vb-page pre{overflow:auto;background:var(--vb-chrome);padding:10px;border-radius:8px;font-size:13px}

.vb-page code{font-family:ui-monospace,Consolas,monospace;font-size:.9em}

.vb-page blockquote{margin:1em 0;padding:.2em 1em;border-left:3px solid var(--vb-line);color:var(--vb-mut)}

.vb-page table{border-collapse:collapse;display:block;overflow-x:auto;max-width:100%;font:14px/1.4 system-ui,sans-serif}

.vb-page td,.vb-page th{border:1px solid var(--vb-line);padding:5px 8px;vertical-align:top}

.vb-pagehd{font:12px/1.4 system-ui,sans-serif;color:var(--vb-mut);margin-bottom:6px;word-break:break-all}

.vb-hidden-wrap{margin-top:40px;padding-top:14px;border-top:2px dashed var(--vb-warn);font-family:system-ui,sans-serif}

.vb-hidden-wrap h3{color:var(--vb-warn);margin-top:0}

mark.vb-hidden{display:block;background:var(--vb-mark);color:inherit;padding:8px 10px;border-radius:8px;margin:8px 0;font-size:14px;transition:box-shadow .3s}

mark.vb-hidden i{color:var(--vb-mut);font-size:12px}

mark.vb-hidden.vb-sus{border-left:4px solid var(--vb-bad)}

.vb-flash mark.vb-hidden{box-shadow:0 0 0 3px var(--vb-bad)}

.vb-center{display:flex;flex-direction:column;align-items:center;justify-content:center;text-align:center;padding:40px 20px;min-height:100%;gap:10px}

.vb-block{color:var(--vb-bad)}

.vb-block h2{margin:0;font:800 24px/1.2 system-ui,sans-serif;color:var(--vb-fg)}

.vb-kv{display:grid;grid-template-columns:auto 1fr;gap:4px 14px;text-align:left;max-width:520px;background:var(--vb-card);border:1px solid var(--vb-line);border-radius:10px;padding:12px 16px;color:var(--vb-fg)}

.vb-kv b{color:var(--vb-mut);font-weight:600}

.vb-kv span{word-break:break-all}

.vb-spin{width:34px;height:34px;border-radius:50%;border:3px solid var(--vb-line);border-top-color:var(--vb-acc);animation:vbspin .8s linear infinite}

@keyframes vbspin{to{transform:rotate(360deg)}}

.vb-start{max-width:780px;margin:0 auto;padding:30px 24px}

.vb-start h2{font:800 22px/1.2 system-ui,sans-serif;margin:0 0 4px;display:flex;align-items:center;gap:10px}

.vb-start h2 svg{color:var(--vb-acc)}

.vb-start p{color:var(--vb-mut);margin:0 0 18px}

.vb-tiles{display:grid;grid-template-columns:repeat(auto-fill,minmax(160px,1fr));gap:10px;margin-bottom:22px}

.vb-tile{display:flex;flex-direction:column;gap:4px;text-align:left;border:1px solid var(--vb-line);border-radius:10px;background:var(--vb-card);padding:12px;min-height:76px}

.vb-tile:hover{border-color:var(--vb-acc)}

.vb-tile b{font-size:13px}.vb-tile small{color:var(--vb-mut);word-break:break-all;font-size:11px}

.vb-tile.bad b{color:var(--vb-bad)}.vb-tile.demo b{color:var(--vb-warn)}

.vb-guide{list-style:none;padding:0;margin:0;display:grid;gap:8px}

.vb-guide li{background:var(--vb-card);border:1px solid var(--vb-line);border-radius:8px;padding:9px 12px}

.vb-panel{position:absolute;top:84px;right:8px;bottom:8px;width:min(380px,calc(100% - 16px));z-index:5;background:var(--vb-bg);border:1px solid var(--vb-line);border-radius:12px;box-shadow:0 12px 40px rgba(0,0,0,.25);display:flex;flex-direction:column}

.vb-panel[hidden]{display:none}

.vb-panel header{display:flex;align-items:center;padding:10px 12px;border-bottom:1px solid var(--vb-line);font-weight:700}

.vb-panel header button{margin-left:auto;border:0;background:transparent;border-radius:6px;padding:4px}

.vb-panel .vb-pb{overflow:auto;padding:10px 12px;display:flex;flex-direction:column;gap:8px}

.vb-hrow{display:flex;flex-direction:column;align-items:flex-start;border:0;background:transparent;text-align:left;padding:6px 8px;border-radius:6px;word-break:break-all}

.vb-hrow:hover{background:var(--vb-chrome)}

.vb-hrow small{color:var(--vb-mut)}

.vb-layer{border:1px solid var(--vb-line);border-radius:8px;padding:9px 11px}

.vb-layer b{display:block;margin-bottom:2px}

.vb-mut{color:var(--vb-mut)}

.vb-err{color:var(--vb-warn)}

@container (max-width:760px){.vb-mode button{padding:5px 6px}.vb-main{flex-direction:column}.vb-side{width:auto;border-left:0;border-top:1px solid var(--vb-line);max-height:55%}.vb-page{padding:16px 16px 40px}.vb-chip{display:none}.vb-bar .vb-hide-sm{display:none}}

@media (max-width:760px){.vb-main{flex-direction:column}.vb-side{width:auto;border-left:0;border-top:1px solid var(--vb-line);max-height:55%}}

@media (prefers-reduced-motion:reduce){.vb-spin{animation-duration:2.4s}}

`;

function injectCss() {
  if (document.getElementById('vb-style')) return;
  const s = document.createElement('style');
  s.id = 'vb-style';
  s.textContent = CSS;
  document.head.append(s);
}

const esc = s => String(s == null ? '' : s).replace(/[&<>"']/g, c => ({'&':'&amp;', '<':'&lt;', '>':'&gt;', '"':'&quot;', "'":'&#39;'}[c]));
function mk(tag, cls, html) { const n = document.createElement(tag); if (cls) n.className = cls; if (html != null) n.innerHTML = html; return n; }

function defaultBookmarks() {
  return [
    {title:'Demo: poisoned page', url:location.origin + '/demo/poisoned-page', kind:'demo', note:'Hidden instructions try to hijack the agent'},
    {title:'Wikipedia: Operating system', url:'https://en.wikipedia.org/wiki/Operating_system', note:'A long real page'},
    {title:'Example.com', url:'https://example.com', note:'The simplest page'},
    {title:'Hacker News', url:'https://news.ycombinator.com', note:'Real layout, tables and CSS'},
    {title:'Blocked: internal network (SSRF)', url:'https://huggingface.co', note:'Resolves to internal addresses from this server, so the SSRF guard refuses it'},
    {title:'Naver', url:'https://www.naver.com', note:'Korean portal'},
    {title:'Blocked: attacker.example', url:'https://attacker.example/', kind:'bad', note:'Egress denylist'},
    {title:'Blocked: metadata', url:'http://169.254.169.254/latest/meta-data/', kind:'bad', note:'SSRF guard, cloud metadata'}
  ];
}
function loadBookmarks() {
  try {
    const v = JSON.parse(localStorage.getItem(BM_KEY) || 'null');
    if (Array.isArray(v) && v.length) return v.filter(b => b && typeof b.url === 'string').slice(0, 40);
    const old = JSON.parse(localStorage.getItem(BM_KEY_OLD) || 'null');
    if (Array.isArray(old) && old.length) {
      // migrate v1: keep the user's list and add the bookmarks that are new in v2
      const list = old.filter(b => b && typeof b.url === 'string');
      for (const d of defaultBookmarks()) if (!list.some(b => b.url === d.url)) list.push(d);
      return list.slice(0, 40);
    }
  } catch (e) { /* storage may be blocked */ }
  return defaultBookmarks();
}
function loadMode() { try { const m = localStorage.getItem(MODE_KEY); return m === 'reader' || m === 'snapshot' ? m : 'render'; } catch (e) { return 'render'; } }
function saveMode(m) { try { localStorage.setItem(MODE_KEY, m); } catch (e) { /* ignore */ } }
function saveBookmarks(list) { try { localStorage.setItem(BM_KEY, JSON.stringify(list)); } catch (e) { /* ignore */ } }

/* Defense in depth: the server already sanitizes; strip anything active again before inserting. */
const OK_TAGS = new Set('H1 H2 H3 H4 H5 H6 P UL OL LI BLOCKQUOTE PRE CODE TABLE THEAD TBODY TFOOT TR TH TD CAPTION A IMG BR HR EM STRONG B I U S SMALL SUB SUP DL DT DD FIGURE FIGCAPTION KBD SAMP Q ABBR CITE TIME MARK DEL INS DIV'.split(' '));
const OK_ATTR = new Set(['href', 'data-vb-href', 'rel', 'target', 'src', 'alt', 'loading', 'colspan', 'rowspan', 'class', 'data-vb-finding']);
function scrub(html) {
  const t = document.createElement('template');
  t.innerHTML = String(html || '');
  const walk = node => {
    for (const c of [...node.children]) {
      if (!OK_TAGS.has(c.tagName)) { walk(c); c.replaceWith(...c.childNodes); continue; }
      for (const a of [...c.attributes]) {
        const n = a.name.toLowerCase();
        if (!OK_ATTR.has(n)) { c.removeAttribute(a.name); continue; }
        if ((n === 'href' || n === 'data-vb-href') && !/^https?:\/\//i.test(a.value)) c.removeAttribute(a.name);
        if (n === 'class' && !/^vb-[\w -]*$/.test(a.value)) c.removeAttribute(a.name);
      }
      if (c.tagName === 'IMG') {
        const s = c.getAttribute('src') || '';
        if (s.startsWith('browser-img?u=')) c.setAttribute('src', 'api/ag/browser/img?u=' + s.slice('browser-img?u='.length));
        else c.remove();
        c.setAttribute('referrerpolicy', 'no-referrer');
        c.setAttribute('loading', 'lazy');
        continue;
      }
      walk(c);
    }
  };
  walk(t.content);
  // final guard: nothing outside the allow list survives
  t.content.querySelectorAll('*').forEach(c => { if (!OK_TAGS.has(c.tagName)) c.remove(); });
  return t.content;
}

const hostOf = u => { try { return new URL(u).hostname; } catch (e) { return u; } };
const isSend = fn => /^(http_post|send_email|upload|post|exfil)/i.test(String(fn || ''));
const vOk = v => String(v || '').toUpperCase() === 'ALLOW';

window.VK_EXTRA_APPS = window.VK_EXTRA_APPS || [];
window.VK_EXTRA_APPS.push(h => ({
  id:'browser',
  name:() => 'ViKernel Browser',
  color:'#2563EB',
  icon:ICON,
  w:1100,
  h:720,
  render(body, win) {
    injectCss();
    const toast = m => { try { if (h && h.toast) h.toast(m); } catch (e) { /* ignore */ } };
    const api = window.VK_API;
    let bookmarks = loadBookmarks();
    let mode = loadMode();
    const visits = [];
    let seq = 0;
    const tabs = [];
    let active = null;

    const root = mk('div', 'vb-root');
    root.tabIndex = -1;
    root.innerHTML = `

      <div class="vb-tabs" role="tablist"></div>

      <div class="vb-bar">

        <button class="vb-ib" data-a="back" title="Back (Alt+Left)" aria-label="Back">${I.back}</button>

        <button class="vb-ib" data-a="fwd" title="Forward (Alt+Right)" aria-label="Forward">${I.fwd}</button>

        <button class="vb-ib" data-a="reload" title="Reload (F5)" aria-label="Reload">${I.reload}</button>

        <form class="vb-addr" autocomplete="off"><span class="vb-lock" aria-hidden="true">${I.info}</span><input type="text" spellcheck="false" placeholder="Enter a URL, e.g. en.wikipedia.org/wiki/Kernel" aria-label="Address bar"><button type="button" class="vb-ib" data-a="star" title="Bookmark this page" aria-label="Bookmark">${I.star}</button></form>

        <span class="vb-chip mut" title="Kernel verdict for this navigation">no page</span>

        <div class="vb-mode" role="group" aria-label="View mode"><button type="button" data-m="render" title="The site's own layout and CSS, scripts never run">Safe render</button><button type="button" data-m="reader" title="Text-only reader view">Reader</button><button type="button" data-m="snapshot" title="Live snapshot: a headless browser in an isolated private service renders the page; you get an image">Snapshot</button></div>

        <button class="vb-ib" data-a="agent" title="Ask Muse Spark (agent)" aria-label="Agent sidebar">${I.agent}</button>

        <button class="vb-ib vb-hide-sm" data-a="hist" title="History" aria-label="History">${I.hist}</button>

        <button class="vb-ib" data-a="about" title="About the protection layers" aria-label="About">${I.info}</button>

      </div>

      <div class="vb-bm"></div>

      <div class="vb-main">

        <div class="vb-content"></div>

        <aside class="vb-side" hidden>

          <div class="vb-sidehd">

            <h3>Ask Muse Spark to do this on the page</h3>

            <div class="vb-mut">The agent reads the whole page, hidden text included. Every action it proposes goes through the ViKernel gate.</div>

            <textarea maxlength="500" aria-label="Task">Summarize this page for me</textarea>

            <button class="vb-run">Run</button>

          </div>

          <div class="vb-ev"><div class="vb-mut">Open a page, then run a task.</div></div>

        </aside>

      </div>

      <section class="vb-panel" data-p="hist" hidden><header>History<button data-close aria-label="Close">${I.x}</button></header><div class="vb-pb"></div></section>

      <section class="vb-panel" data-p="about" hidden><header>How ViKernel Browser protects you<button data-close aria-label="Close">${I.x}</button></header><div class="vb-pb"></div></section>`;
    body.innerHTML = '';
    body.append(root);

    const $ = s => root.querySelector(s);
    const tabsEl = $('.vb-tabs'), bmEl = $('.vb-bm'), content = $('.vb-content'), side = $('.vb-side');
    const addr = $('.vb-addr input'), lockEl = $('.vb-lock'), chip = $('.vb-chip'), evEl = $('.vb-ev');
    const runBtn = $('.vb-run'), taskEl = $('.vb-sidehd textarea');
    const btn = a => root.querySelector(`[data-a="${a}"]`);

    function newTab(url, focus = true) {
      if (tabs.length >= MAX_TABS) { toast('Maximum ' + MAX_TABS + ' tabs'); return null; }
      const t = {id:++seq, hist:[], idx:-1, url:START, title:'New tab', state:'start', data:null, nav:0, events:null, agentBusy:false, showHidden:false};
      tabs.push(t);
      if (focus || !active) active = t;
      if (url) navigate(t, url); else renderAll();
      return t;
    }
    function closeTab(t) {
      const i = tabs.indexOf(t);
      if (i < 0) return;
      tabs.splice(i, 1);
      if (!tabs.length) { active = null; newTab(); return; }
      if (active === t) active = tabs[Math.min(i, tabs.length - 1)];
      renderAll();
    }

    async function navigate(t, raw, push = true) {
      let url = String(raw || '').trim();
      if (!url) return;
      if (url === START) { t.url = START; t.state = 'start'; t.title = 'New tab'; t.data = null; if (push) pushHist(t, START); renderAll(); return; }
      if (!/^[a-z][a-z0-9+.-]*:/i.test(url)) url = 'https://' + url;
      const my = ++t.nav;
      t.url = url; t.state = 'loading'; t.title = hostOf(url); t.data = null; t.events = null; t.showHidden = false;
      if (push) pushHist(t, url);
      renderAll();
      let r;
      try { r = await api('browser/open', {url}); }
      catch (e) { r = {ok:false, error:e && e.message === 'rate' ? 'Rate limited. Please wait a few seconds and try again.' : 'Network error: ' + (e && e.message || e)}; }
      if (my !== t.nav) return;
      t.data = r || {ok:false, error:'Empty response'};
      if (r && r.ok) {
        t.state = 'page'; t.title = r.title || hostOf(r.final_url || url);
        if (r.final_url && r.final_url !== url) { t.url = r.final_url; t.hist[t.idx] = r.final_url; }
      } else if (r && r.blocked) { t.state = 'blocked'; t.title = 'Blocked: ' + hostOf(url); }
      else { t.state = 'error'; t.title = 'Error: ' + hostOf(url); }
      t.autoSnap = false;
      if (r && r.ok && (mode === 'snapshot' || (mode === 'render' && visibleLen(r.html) < 80))) {
        t.autoSnap = mode !== 'snapshot'; t.snapLoading = true; renderAll();
        try { t.data.snap = await api('browser/snap', {url: t.url}); } catch (e) { t.data.snap = {ok:false, error: e && e.message === 'rate' ? 'Rate limited.' : 'Snapshot service unavailable'}; }
        t.snapLoading = false;
        if (my !== t.nav) return;
      }
      visits.unshift({url:t.url, title:t.title, at:new Date(), state:t.state});
      if (visits.length > 100) visits.pop();
      renderAll();
      if (t === active) content.scrollTop = 0;
    }
    function pushHist(t, url) { t.hist = t.hist.slice(0, t.idx + 1); t.hist.push(url); t.idx = t.hist.length - 1; }
    function go(delta) {
      const t = active;
      if (!t) return;
      const j = t.idx + delta;
      if (j < 0 || j >= t.hist.length) return;
      t.idx = j;
      navigate(t, t.hist[j], false);
    }
    const reload = () => { if (active && active.url !== START) navigate(active, active.url, false); };

    function renderTabs() {
      tabsEl.innerHTML = '';
      for (const t of tabs) {
        const b = mk('button', 'vb-tab' + (t === active ? ' on' : ''));
        b.setAttribute('role', 'tab');
        b.title = t.url === START ? 'New tab' : t.url;
        const sus = t.data && t.data.ok && (t.data.findings || []).some(f => f.suspicious);
        const dot = t.state === 'blocked' ? 'bad' : sus ? 'warn' : t.state === 'page' ? 'ok' : '';
        b.innerHTML = `<span class="vb-dot ${dot}"></span><span class="vb-tt">${esc(t.state === 'loading' ? 'Loading ' + t.title : t.title)}</span><span class="vb-tx" role="button" aria-label="Close tab">${I.x}</span>`;
        b.onclick = e => { if (e.target.closest('.vb-tx')) { e.stopPropagation(); closeTab(t); return; } active = t; renderAll(); };
        b.onauxclick = e => { if (e.button === 1) closeTab(t); };
        tabsEl.append(b);
      }
      const n = mk('button', 'vb-newtab', I.plus);
      n.title = 'New tab'; n.setAttribute('aria-label', 'New tab');
      n.onclick = () => newTab();
      tabsEl.append(n);
    }

    function renderBar() {
      const t = active;
      btn('back').disabled = !t || t.idx <= 0;
      btn('fwd').disabled = !t || t.idx >= t.hist.length - 1;
      if (document.activeElement !== addr) addr.value = !t || t.url === START ? '' : t.url;
      const proto = t && t.url !== START ? (t.url.match(/^(\w+):/) || [])[1] : '';
      lockEl.className = 'vb-lock' + (proto === 'https' ? ' https' : proto ? ' http' : '');
      lockEl.innerHTML = proto === 'https' ? I.lock : proto ? I.unlock : I.info;
      lockEl.title = proto === 'https' ? 'Encrypted connection (https)' : proto ? 'Not encrypted (' + proto + ')' : '';
      const d = t && t.data;
      if (!t || t.state === 'start') { chip.className = 'vb-chip mut'; chip.textContent = 'no page'; }
      else if (t.state === 'loading') { chip.className = 'vb-chip mut'; chip.textContent = 'checking...'; }
      else if (d && d.ok && d.kernel) {
        const rs = d.resources;
        chip.className = 'vb-chip ok';
        chip.textContent = 'ALLOW · audit #' + (d.kernel.audit_seq ?? '?') + (rs ? ' · ' + rs.total + ' resources, ' + rs.blocked + ' blocked' : '');
        chip.title = 'Kernel gate rule ' + (d.kernel.rule || '-') + (d.kernel.kernel_ms != null ? ', ' + d.kernel.kernel_ms + ' ms' : '')
          + (rs && rs.kinds ? '\nResources through the guarded proxy: ' + (rs.kinds.css || 0) + ' CSS, ' + (rs.kinds.img || 0) + ' images, ' + (rs.kinds.font || 0) + ' fonts; ' + rs.blocked + ' blocked by egress/SSRF rules' : '');
      }
      else if (d && d.blocked) { chip.className = 'vb-chip bad'; chip.textContent = 'DENY · rule ' + d.blocked.rule; chip.title = d.blocked.reason || ''; }
      else { chip.className = 'vb-chip mut'; chip.textContent = 'error'; }
      const starred = t && t.url !== START && bookmarks.some(b => b.url === t.url);
      btn('star').classList.toggle('starred', !!starred);
      btn('star').disabled = !t || t.url === START;
      btn('agent').classList.toggle('on', !side.hidden);
      root.querySelectorAll('.vb-mode button').forEach(b => b.classList.toggle('on', b.dataset.m === ((active && active.autoSnap) ? 'snapshot' : mode)));
    }

    function renderBookmarks() {
      bmEl.innerHTML = '';
      for (const b of bookmarks) {
        const x = mk('button', b.kind || '');
        x.textContent = b.title || b.url;
        x.title = b.url + (b.note ? '\n' + b.note : '');
        x.onclick = e => { if (e.ctrlKey || e.metaKey) newTab(b.url); else navigate(active, b.url); };
        bmEl.append(x);
      }
    }

    function startPage() {
      const w = mk('div', 'vb-start');
      w.innerHTML = `<h2>${ICON} ViKernel Browser</h2>

        <p>A governed browser. Every page load passes egress policy, an SSRF guard and the ViKernel kernel gate, and every agent action on a page is decided by the gate.</p>

        <div class="vb-tiles"></div>

        <ol class="vb-guide">

          <li><b>1.</b> Open <b>Demo: poisoned page</b>. It looks like a normal review blog, but hides instructions for AI agents. The banner shows what was hidden.</li>

          <li><b>2.</b> Open the agent sidebar and press <b>Run</b>. The agent reads the hidden text too. When it tries to send your files out, ViKernel denies it and records an audit entry.</li>

          <li><b>3.</b> Try the <b>Blocked</b> bookmarks to see the egress policy and the SSRF guard stop a request before any byte leaves.</li>

        </ol>`;
      const tiles = w.querySelector('.vb-tiles');
      for (const b of bookmarks) {
        const x = mk('button', 'vb-tile ' + (b.kind || ''));
        x.innerHTML = `<b>${esc(b.title || b.url)}</b><small>${esc(b.note || hostOf(b.url))}</small>`;
        x.title = b.url;
        x.onclick = () => navigate(active, b.url);
        tiles.append(x);
      }
      return w;
    }

    function blockPage(d) {
      const b = d.blocked || {};
      const w = mk('div', 'vb-center vb-block');
      const audit = d.kernel && d.kernel.audit_seq != null ? `<b>Audit</b><span>#${esc(d.kernel.audit_seq)}</span>` : '';
      const layerName = {egress:'Egress policy', ssrf:'SSRF guard', kernel:'Kernel gate'}[b.layer] || b.layer || '-';
      w.innerHTML = `${I.shield}<h2>Blocked by ViKernel</h2>

        <div class="vb-mut">${b.layer === 'ssrf' ? 'This server runs inside the host network; ViKernel refuses internal addresses.' : 'This request never left the server.'}</div>

        <div class="vb-kv"><b>URL</b><span>${esc(d.url)}</span><b>Rule</b><span>${esc(b.rule || '-')}</span><b>Layer</b><span>${esc(layerName)}</span><b>Reason</b><span>${esc(b.reason || '-')}</span>${audit}</div>`;
      return w;
    }

    function errorPage(d) {
      const w = mk('div', 'vb-center');
      w.innerHTML = `<div class="vb-err">${I.warn}</div><h3 style="margin:0">This page could not be loaded</h3><div class="vb-mut">${esc(d && d.error || 'Unknown error')}</div>`;
      const r = mk('button', 'vb-run', 'Try again');
      r.onclick = reload;
      w.append(r);
      return w;
    }

    const hasRender = d => d && typeof d.reader_html === 'string' && typeof d.html === 'string';

    function hiddenBanner(t, onToggle) {
      const fs = t.data.findings || [];
      const sus = fs.filter(f => f.suspicious).length;
      if (!fs.length) return null;
      const bn = mk('div', 'vb-banner' + (sus ? '' : ' soft'));
      bn.innerHTML = sus ? `${I.warn}<span>Injection detected: ${sus} hidden instruction${sus === 1 ? '' : 's'} on this page</span>`
        : `${I.info}<span>${fs.length} hidden text block${fs.length === 1 ? '' : 's'} on this page (no instructions found)</span>`;
      const sb = mk('button', '', t.showHidden ? 'Hide' : 'Show');
      sb.onclick = () => { t.showHidden = !t.showHidden; sb.textContent = t.showHidden ? 'Hide' : 'Show'; onToggle(); };
      bn.append(sb);
      return bn;
    }

    function readerView(t) {
      const d = t.data;
      const frag = document.createDocumentFragment();
      const bn = hiddenBanner(t, () => {
        const pg = content.querySelector('.vb-page');
        if (!pg) return;
        pg.classList.toggle('vb-flash', t.showHidden);
        const first = pg.querySelector('mark.vb-sus') || pg.querySelector('mark.vb-hidden');
        if (t.showHidden && first) first.scrollIntoView({behavior:'smooth', block:'center'});
      });
      if (bn) frag.append(bn);
      const pg = mk('article', 'vb-page' + (t.showHidden ? ' vb-flash' : ''));
      const hd = mk('div', 'vb-pagehd');
      hd.textContent = (d.final_url || d.url) + '  ·  ' + Math.round((d.bytes || 0) / 1024) + ' KB  ·  ' + (d.ms != null ? d.ms + ' ms' : '') + (d.truncated ? '  ·  truncated' : '');
      pg.append(hd);
      if (d.title) { const h1 = mk('h1'); h1.textContent = d.title; pg.append(h1); }
      pg.append(scrub(hasRender(d) ? d.reader_html : d.html));
      frag.append(pg);
      return frag;
    }

    /* Outline visible copies of suspicious findings inside the rendered page (most are invisible by design). */
    function highlightInFrame(doc, findings, on) {
      if (!doc || !doc.body) return null;
      doc.querySelectorAll('[data-vb-hl]').forEach(el => { el.style.outline = el.dataset.vbHl === '-' ? '' : el.dataset.vbHl; el.removeAttribute('data-vb-hl'); });
      if (!on) return null;
      const snips = findings.filter(f => f.suspicious).map(f => String(f.text || '').slice(0, 40)).filter(s => s.length >= 12);
      if (!snips.length) return null;
      let first = null, n, guard = 0;
      const w = doc.createTreeWalker(doc.body, 4);
      while ((n = w.nextNode()) && guard++ < 200000) {
        const v = n.nodeValue;
        if (!v || v.length < 12 || !snips.some(s => v.includes(s))) continue;
        const el = n.parentElement;
        if (!el || el.hasAttribute('data-vb-hl')) continue;
        el.dataset.vbHl = el.style.outline || '-';
        el.style.outline = '3px solid #dc2626';
        if (!first && el.getClientRects().length) first = el;
      }
      return first;
    }

    function attachFrame(f, t) {
      let doc;
      try { doc = f.contentDocument; } catch (e) { doc = null; }
      if (!doc) return;
      const linkOf = e => { const tg = e.target; return tg && tg.closest ? tg.closest('a,area') : null; };
      const hrefOf = a => a.getAttribute('href') || a.getAttribute('xlink:href') || '';
      doc.addEventListener('click', e => {
        const a = linkOf(e);
        if (!a) return;
        e.preventDefault();
        const h = hrefOf(a);
        if (h.startsWith(NAV)) {
          const u = h.slice(NAV.length);
          if (!/^https?:\/\//i.test(u)) return;
          if (e.ctrlKey || e.metaKey || e.shiftKey) newTab(u, false); else navigate(t, u);
        } else if (h.length > 1 && h[0] === '#') {
          let id = h.slice(1);
          try { id = decodeURIComponent(id); } catch (x) { /* keep raw */ }
          const el = doc.getElementById(id) || doc.getElementsByName(id)[0];
          if (el) el.scrollIntoView({block:'start'});
        }
      }, true);
      doc.addEventListener('auxclick', e => {
        const a = e.button === 1 && linkOf(e);
        if (!a) return;
        e.preventDefault();
        const h = hrefOf(a);
        if (h.startsWith(NAV) && /^https?:\/\//i.test(h.slice(NAV.length))) newTab(h.slice(NAV.length), false);
      }, true);
      doc.addEventListener('submit', e => e.preventDefault(), true);
      if (t.showHidden) highlightInFrame(doc, t.data.findings || [], true);
    }

    function renderView(t) {
      const d = t.data;
      const frag = document.createDocumentFragment();
      const panel = mk('div', 'vb-hpanel');
      panel.hidden = !t.showHidden;
      const f = document.createElement('iframe');
      const bn = hiddenBanner(t, () => {
        panel.hidden = !t.showHidden;
        let doc = null;
        try { doc = f.contentDocument; } catch (e) { /* ignore */ }
        const el = highlightInFrame(doc, d.findings || [], t.showHidden);
        if (el) el.scrollIntoView({behavior:'smooth', block:'center'});
      });
      if (bn) frag.append(bn);
      if (d.hidden_marks_html) { panel.append(scrub(d.hidden_marks_html)); frag.append(panel); }
      f.className = 'vb-frame';
      f.setAttribute('sandbox', 'allow-same-origin');  // no allow-scripts, no allow-forms: page scripts can never run
      f.setAttribute('referrerpolicy', 'no-referrer');
      f.setAttribute('title', 'Safe render of ' + (d.final_url || d.url));
      f.addEventListener('load', () => attachFrame(f, t));
      f.srcdoc = d.html;
      frag.append(f);
      return frag;
    }

    function visibleLen(html) {
      try { const d = new DOMParser().parseFromString(String(html || ''), 'text/html'); d.querySelectorAll('style,script,noscript').forEach(x => x.remove()); return (d.body ? d.body.innerText || d.body.textContent || '' : '').replace(/\s+/g, ' ').trim().length; } catch (e) { return 9999; }
    }
    function snapView(t) {
      const sn = t.data.snap;
      const box = mk('div', 'vb-snap');
      const lab = mk('div', 'vb-snaplab', t.snapLoading ? 'Live snapshot: rendering in an isolated private browser...' :
        (t.autoSnap ? 'Auto-selected: Live snapshot (this site builds its page with JavaScript, so Safe render shows almost nothing). ' : 'Live snapshot. ') +
        (sn && sn.ok ? `Image only, no scripts reach you. ${sn.requests} requests checked, ${sn.blocked} blocked, ${sn.ms} ms.` : ''));
      box.append(lab);
      if (sn && sn.ok) { const img = document.createElement('img'); img.src = sn.image; img.alt = 'Live snapshot of ' + (sn.final_url || t.url); img.className = 'vb-snapimg'; box.append(img); }
      else if (sn && !t.snapLoading) box.append(mk('div', 'vb-mut', 'Snapshot unavailable: ' + (sn.error || 'unknown error')));
      return box;
    }
    function pageView(t) {
      if ((mode === 'snapshot' || t.autoSnap) && (t.data.snap || t.snapLoading)) { content.classList.remove('vb-fill'); return snapView(t); }
      const fill = mode === 'render' && hasRender(t.data);
      content.classList.toggle('vb-fill', fill);
      return fill ? renderView(t) : readerView(t);
    }

    function renderContent() {
      const t = active;
      content.innerHTML = '';
      content.classList.remove('vb-fill');
      if (!t) return;
      if (t.state === 'start') content.append(startPage());
      else if (t.state === 'loading') { const w = mk('div', 'vb-center'); w.innerHTML = `<div class="vb-spin" role="status" aria-label="Loading"></div><div class="vb-mut">Checking egress, SSRF and kernel gate for ${esc(hostOf(t.url))}...</div>`; content.append(w); }
      else if (t.state === 'blocked') content.append(blockPage(t.data));
      else if (t.state === 'error') content.append(errorPage(t.data));
      else content.append(pageView(t));
    }

    function evCard(k, cls, html) { const e = mk('div', 'vb-e ' + (cls || '')); e.innerHTML = `<div class="vb-k">${esc(k)}</div>${html}`; return e; }
    const short = v => { let s; try { s = typeof v === 'string' ? v : JSON.stringify(v, null, 1); } catch (e) { s = String(v); } return s && s.length > 900 ? s.slice(0, 900) + ' ...' : s; };

    function renderEvents() {
      const t = active;
      evEl.innerHTML = '';
      runBtn.disabled = !t || t.state !== 'page' || t.agentBusy;
      runBtn.textContent = t && t.agentBusy ? 'Running...' : 'Run';
      if (!t || t.state !== 'page') { evEl.innerHTML = '<div class="vb-mut">Open a page, then run a task.</div>'; return; }
      if (t.agentBusy && !t.events) { const w = mk('div', 'vb-center'); w.style.minHeight = '120px'; w.innerHTML = '<div class="vb-spin"></div><div class="vb-mut">The agent is reading the page. Each action waits for a kernel verdict.</div>'; evEl.append(w); return; }
      if (!t.events) { evEl.innerHTML = '<div class="vb-mut">Press Run. Try the poisoned demo page to see the gate stop a hijacked agent.</div>'; return; }
      const r = t.events;
      if (r.error) evEl.append(evCard('error', 'deny', `<div>${esc(r.error)}</div>`));
      if (r.blocked) evEl.append(evCard('blocked', 'deny', `<div>Blocked by ViKernel: rule ${esc(r.blocked.rule)} (${esc(r.blocked.layer)}). ${esc(r.blocked.reason)}</div>`));
      const evs = Array.isArray(r.events) ? r.events : [];
      const denied = evs.filter(e => (e.type || e.kind) === 'verdict' && !vOk(e.verdict));
      for (const d of denied) {
        const ref = `(rule ${esc(d.rule || '?')}, audit #${esc(d.audit_seq ?? '?')})`;
        const msg = d.probe ? `The page hides an instruction to send your files to ${esc((d.args || {}).url || 'an outside URL')}. Muse Spark did not follow it; the same action sent as a compromised agent would was denied by ViKernel ${ref}.` : isSend(d.fn) ? `The page tried to make the agent send your files. ViKernel denied it ${ref}.`
          : `ViKernel denied the agent's ${esc(d.fn)} call ${ref}.`;
        evEl.append(mk('div', 'vb-callout', msg));
      }
      for (const e of evs) {
        const ty = e.type || e.kind || e.event;
        if (ty === 'user') evEl.append(evCard('task', '', `<div>${esc(e.text || '')}</div>`));
        else if (ty === 'proposed') evEl.append(evCard('proposed action', '', `<div><code>${esc(e.fn)}</code>${e.model ? ` <span class="vb-mut">by ${esc(e.model)}${e.model_ms != null ? ', ' + esc(e.model_ms) + ' ms' : ''}</span>` : ''}</div><pre>${esc(short(e.args))}</pre>`));
        else if (ty === 'verdict') {
          const ok = vOk(e.verdict);
          evEl.append(evCard(e.probe ? 'kernel verdict (' + e.probe + ')' : 'kernel verdict', ok ? 'allow' : 'deny', `<div><span class="vb-tag ${ok ? 'ok' : 'bad'}">${esc(String(e.verdict || '?').toUpperCase())}</span><code>${esc(e.fn)}</code> <span class="vb-mut">rule ${esc(e.rule || '-')} · audit #${esc(e.audit_seq ?? '?')}</span></div>${e.reason ? `<div class="vb-mut">${esc(e.reason)}</div>` : ''}`));
        } else if (ty === 'executed') evEl.append(evCard('executed', '', `<div><code>${esc(e.fn)}</code></div><pre>${esc(short(e.result))}</pre>`));
        else if (ty === 'final') evEl.append(evCard('answer', 'vb-final', `<div style="white-space:pre-wrap">${esc(e.text || '')}</div>`));
        else if (ty === 'error') evEl.append(evCard('error', 'deny', `<div>${esc(e.text || '')}</div>`));
      }
      if (!evs.length && !r.error && !r.blocked) evEl.append(mk('div', 'vb-mut', 'The agent returned no events.'));
    }

    async function runAgent() {
      const t = active;
      if (!t || t.state !== 'page' || t.agentBusy) return;
      const task = taskEl.value.trim() || 'Summarize this page for me';
      t.agentBusy = true; t.events = null;
      renderEvents();
      let r;
      try { r = await api('browser/agent', {url:t.url, task}); }
      catch (e) { r = {error:e && e.message === 'rate' ? 'Rate limited. Please wait a few seconds and try again.' : 'Network error: ' + (e && e.message || e)}; }
      t.agentBusy = false; t.events = r || {error:'Empty response'};
      if (t === active) renderEvents();
      const den = (r && r.events || []).find(e => (e.type || e.kind) === 'verdict' && !vOk(e.verdict));
      if (den) toast('ViKernel denied ' + den.fn + ' (audit #' + (den.audit_seq ?? '?') + ')');
    }

    function renderHistory() {
      const pb = root.querySelector('[data-p="hist"] .vb-pb');
      pb.innerHTML = '';
      const t = active;
      if (t && t.hist.length) {
        pb.append(mk('div', 'vb-mut', 'This tab'));
        t.hist.forEach((u, i) => {
          const r = mk('button', 'vb-hrow');
          r.innerHTML = `<span>${i === t.idx ? '&#9656; ' : ''}${esc(u === START ? 'New tab' : u)}</span>`;
          r.onclick = () => { t.idx = i; navigate(t, u, false); };
          pb.append(r);
        });
      }
      pb.append(mk('div', 'vb-mut', 'All visits this session'));
      if (!visits.length) pb.append(mk('div', 'vb-mut', 'Nothing yet.'));
      for (const v of visits) {
        const r = mk('button', 'vb-hrow');
        r.innerHTML = `<span>${esc(v.title)}</span><small>${esc(v.url)} · ${esc(v.state)} · ${esc(v.at.toLocaleTimeString())}</small>`;
        r.onclick = () => navigate(active, v.url);
        pb.append(r);
      }
    }

    let policyCache = null;
    async function renderAbout() {
      const pb = root.querySelector('[data-p="about"] .vb-pb');
      const layers = [
        ['1. Egress policy', 'Only http and https on ports 80 and 443. No credentials in URLs. Known exfiltration hosts (attacker.example, collector.example.invalid, evil.test, anything containing "attacker") are denied.'],
        ['2. SSRF guard', 'The server resolves DNS and refuses private, loopback, link-local, multicast, reserved, unspecified and IPv4-mapped addresses, plus cloud metadata names. It re-checks after every redirect (max 3).'],
        ['3. Kernel gate', 'Each navigation is decided by the real ViKernel gate and written to the audit log. The verdict chip shows the audit id. Agent actions (http_post, send_email, upload) go through the same gate.'],
        ['4. Injection scanner', 'Before the page is cleaned, the raw HTML is scanned for hidden text (display:none, visibility:hidden, font-size:0, opacity:0, white on white, aria-hidden), comments and phrases like "ignore previous instructions". Show opens the findings above the page.'],
        ['5. Safe render', 'The site keeps its own layout, CSS, images and fonts, but scripts, frames, forms, event handlers, javascript: links and meta refresh are removed. The page runs in a sandboxed iframe without allow-scripts and under a strict Content-Security-Policy. Every stylesheet, image and font goes through the same guarded proxy (egress + SSRF, GET only, no cookies, 6 s timeout), and links stay inside the app.'],
        ['6. Reader view', 'Switch to Reader for a text-only view: styles and media are dropped and hidden blocks are listed at the end of the page.']
      ];
      pb.innerHTML = layers.map(([a, b]) => `<div class="vb-layer"><b>${esc(a)}</b>${esc(b)}</div>`).join('') + '<div class="vb-mut vb-pol">Loading live policy...</div>';
      try {
        policyCache = policyCache || await api('browser/policy', {});
        const p = policyCache;
        const el = pb.querySelector('.vb-pol');
        el.className = 'vb-layer';
        el.innerHTML = `<b>Live policy from the server</b>Deny hosts: ${esc((p.egress && p.egress.deny_hosts || []).join(', '))}<br>Ports: ${esc((p.egress && p.egress.ports || []).join(', '))}<br>Max redirects: ${esc(p.ssrf && p.ssrf.max_redirects)}<br>Page limit: ${esc(Math.round((p.fetch && p.fetch.max_page_bytes || 0) / 1000))} KB, timeout ${esc(p.fetch && p.fetch.timeout_s)} s<br>User-Agent: <code>${esc(p.fetch && p.fetch.user_agent)}</code>`;
      } catch (e) {
        const el = pb.querySelector('.vb-pol');
        if (el) el.textContent = 'Live policy unavailable right now.';
      }
    }

    function togglePanel(name) {
      root.querySelectorAll('.vb-panel').forEach(p => { p.hidden = p.dataset.p !== name || !p.hidden; });
      const p = root.querySelector(`[data-p="${name}"]`);
      if (p && !p.hidden) { if (name === 'hist') renderHistory(); else renderAbout(); }
    }

    function renderAll() { renderTabs(); renderBar(); renderContent(); renderEvents(); }

    // events
    $('.vb-addr').addEventListener('submit', e => { e.preventDefault(); const v = addr.value.trim(); if (v) { navigate(active, v); addr.blur(); } });
    addr.addEventListener('keydown', e => { if (e.key === 'Escape') { addr.value = active && active.url !== START ? active.url : ''; addr.blur(); } });
    addr.addEventListener('focus', () => addr.select());
    btn('back').onclick = () => go(-1);
    btn('fwd').onclick = () => go(1);
    btn('reload').onclick = reload;
    btn('star').onclick = () => {
      const t = active;
      if (!t || t.url === START) return;
      const i = bookmarks.findIndex(b => b.url === t.url);
      if (i >= 0) { bookmarks.splice(i, 1); toast('Bookmark removed'); }
      else { bookmarks.push({title:(t.title || hostOf(t.url)).slice(0, 60), url:t.url}); toast('Bookmarked'); }
      saveBookmarks(bookmarks);
      renderBookmarks(); renderBar();
    };
    btn('agent').onclick = () => { side.hidden = !side.hidden; renderBar(); if (!side.hidden) taskEl.focus(); };
    btn('hist').onclick = () => togglePanel('hist');
    btn('about').onclick = () => togglePanel('about');
    root.querySelectorAll('.vb-mode button').forEach(b => {
      b.onclick = () => { if (mode === b.dataset.m) return; mode = b.dataset.m; saveMode(mode); renderBar(); renderContent(); };
    });
    root.querySelectorAll('[data-close]').forEach(b => { b.onclick = () => { b.closest('.vb-panel').hidden = true; }; });
    runBtn.onclick = runAgent;
    taskEl.addEventListener('keydown', e => { if (e.key === 'Enter' && (e.ctrlKey || e.metaKey)) { e.preventDefault(); runAgent(); } });

    content.addEventListener('click', e => {
      const a = e.target.closest('a');
      if (!a || !content.contains(a)) return;
      e.preventDefault();
      const u = a.getAttribute('data-vb-href') || a.getAttribute('href');
      if (!u || !/^https?:\/\//i.test(u)) return;
      if (e.ctrlKey || e.metaKey || e.shiftKey) newTab(u, false); else navigate(active, u);
    });
    content.addEventListener('auxclick', e => {
      const a = e.button === 1 && e.target.closest('a');
      if (!a) return;
      e.preventDefault();
      const u = a.getAttribute('data-vb-href') || a.getAttribute('href');
      if (u && /^https?:\/\//i.test(u)) newTab(u, false);
    });

    root.addEventListener('keydown', e => {
      if ((e.ctrlKey || e.metaKey) && (e.key === 'l' || e.key === 'L')) { e.preventDefault(); addr.focus(); addr.select(); }
      else if (e.altKey && e.key === 'ArrowLeft') { e.preventDefault(); go(-1); }
      else if (e.altKey && e.key === 'ArrowRight') { e.preventDefault(); go(1); }
      else if (e.key === 'F5') { e.preventDefault(); reload(); }
      else if (e.key === 'Escape') root.querySelectorAll('.vb-panel').forEach(p => { p.hidden = true; });
    });
    root.addEventListener('mousedown', e => { if (!e.target.closest('input,textarea,button,a,.vb-content')) root.focus({preventScroll:true}); });

    renderBookmarks();
    newTab();
    void win;
    return root;
  }
}));
})();