@kehto/paja 0.14.0 → 0.15.1

package/dist/browser-host.js

@@ -1329,7 +1329,7 @@ function handleRelayPublish(context, windowId, m) {
     sendRelayPublishResult(hooks, windowId, id, false, void 0, "invalid event template");
     return;
   }
-  const signer = hooks.auth.getSigner();
+  const signer = hooks.auth.getSigner(windowId);
   const signEvent = signer?.signEvent?.bind(signer);
   if (!signEvent) {
     sendRelayPublishResult(hooks, windowId, id, false, void 0, "no signer configured");
@@ -1440,7 +1440,7 @@ function handleRelayPublishEncrypted(context, windowId, msg) {
     replyPe(false, { error: `unsupported encryption scheme: ${encryption}` });
     return;
   }
-  const peSigner = hooks.auth.getSigner();
+  const peSigner = hooks.auth.getSigner(windowId);
   if (!peSigner) {
     replyPe(false, { error: "no signer configured" });
     return;
@@ -1449,12 +1449,9 @@ function handleRelayPublishEncrypted(context, windowId, msg) {
     replyPe(false, { error: "invalid event template" });
     return;
   }
-  publishEncrypted(context, windowId, id, recipient, encryption, eventTemplate, replyPe);
+  publishEncrypted(context, windowId, id, recipient, encryption, eventTemplate, peSigner, replyPe);
 }
-function publishEncrypted(context, windowId, id, recipient, encryption, eventTemplate, replyPe) {
-  const { hooks } = context;
-  const peSigner = hooks.auth.getSigner();
-  if (!peSigner) return;
+function publishEncrypted(context, windowId, id, recipient, encryption, eventTemplate, peSigner, replyPe) {
   (async () => {
     try {
       const plaintext = String(eventTemplate.content ?? "");
@@ -1697,7 +1694,7 @@ function createIdentityHandler(context) {
       return;
     }
     const action = msg.type.slice("identity.".length);
-    const signer = hooks.auth.getSigner();
+    const signer = hooks.auth.getSigner(windowId);
     const fallback = createCanonicalDomainResult(msg);
     if (!fallback) return;
     const sendResult = (payload = {}) => {
@@ -2450,11 +2447,8 @@ function createFirewallGate(config) {
         if (decision === "prompt") fireConsent(windowId, napplet);
         return "drop";
       }
-      const id = envelope.id ?? "";
-      const type = denialResponseType(envelope);
-      if (type) {
-        hooks.sendToNapplet(windowId, { type, id, error: `firewall: ${reason}` });
-      }
+      const denial = createDenialResponse(envelope, `firewall: ${reason}`);
+      if (denial) hooks.sendToNapplet(windowId, denial);
       hooks.onFirewallEvent?.({ windowId, napplet, opClass, decision, action, ruleId, reason, message: envelope });
       if (decision === "prompt") {
         fireConsent(windowId, napplet);
@@ -2476,6 +2470,19 @@ function denialResponseType(envelope) {
   if (envelope.type.startsWith("inc.")) return null;
   return `${envelope.type}.error`;
 }
+function createDenialResponse(envelope, error) {
+  const id = envelope.id ?? "";
+  if (envelope.type === "outbox.query") {
+    return {
+      type: "outbox.query.result",
+      id,
+      events: [],
+      error
+    };
+  }
+  const type = denialResponseType(envelope);
+  return type ? { type, id, error } : null;
+}
 function createMessageHandler(hooks, sessionRegistry2, enforceNap, dispatchNapEnvelope, firewallGate) {
   return (windowId, msg) => {
     if (typeof msg !== "object" || msg === null || !("type" in msg)) return;
@@ -2500,12 +2507,9 @@ function createMessageHandler(hooks, sessionRegistry2, enforceNap, dispatchNapEn
           hooks.sendToNapplet(windowId, canonicalResult);
           return;
         }
-        const id = envelope.id ?? "";
         const error = formatDenialReason(result2.capability);
-        const type = denialResponseType(envelope);
-        if (type) {
-          hooks.sendToNapplet(windowId, { type, id, error });
-        }
+        const denial = createDenialResponse(envelope, error);
+        if (denial) hooks.sendToNapplet(windowId, denial);
         return;
       }
     }
@@ -2835,8 +2839,8 @@ function createAuthAdapter(shellHooks) {
     getUserPubkey() {
       return shellHooks.auth.getUserPubkey();
     },
-    getSigner() {
-      return shellHooks.auth.getSigner();
+    getSigner(windowId) {
+      return shellHooks.auth.getSigner(windowId);
     }
   };
 }
@@ -11087,11 +11091,20 @@ function requestKey(windowId, requestId) {
   return `${windowId}\0${requestId}`;
 }
 function assertResourceOptions(options) {
-  if (typeof options?.fetch !== "function" || typeof options?.isOriginGranted !== "function" || typeof options?.getConnectGrants !== "function" || typeof options?.resolveIdentity !== "function") {
+  if (typeof options?.fetch !== "function") {
     throw new Error(
-      "[RESOURCE-01 / H-03] createResourceService requires {fetch, isOriginGranted, getConnectGrants, resolveIdentity} \u2014 all four options are required from day one. The grants source (getConnectGrants) MUST be wired at construction time to prevent unguarded fetch proxying."
+      "[RESOURCE-01] createResourceService requires a runtime-provided fetch resolver."
     );
   }
+  const hasOriginPolicy = options.isOriginGranted !== void 0 || options.getConnectGrants !== void 0;
+  if (hasOriginPolicy && (typeof options.isOriginGranted !== "function" || typeof options.getConnectGrants !== "function" || typeof options.resolveIdentity !== "function")) {
+    throw new Error(
+      "[RESOURCE-01] optional origin policy requires {isOriginGranted, getConnectGrants, resolveIdentity} together."
+    );
+  }
+  if (options.resolveIdentity !== void 0 && typeof options.resolveIdentity !== "function") {
+    throw new Error("[RESOURCE-01] resolveIdentity must be a function when provided.");
+  }
 }
 function trackRequest(state, requestId, windowId, controller) {
   const key = requestKey(windowId, requestId);
@@ -11147,7 +11160,7 @@ function normalizeResourceInfo(info) {
 }
 async function resolveResourceInfo(options, windowId) {
   const configured = options.resourceInfo ?? DEFAULT_RESOURCE_INFO;
-  const info = typeof configured === "function" ? await configured({ windowId, identity: options.resolveIdentity(windowId) }) : configured;
+  const info = typeof configured === "function" ? await configured({ windowId, identity: options.resolveIdentity?.(windowId) ?? null }) : configured;
   return normalizeResourceInfo(info);
 }
 async function handleInfo(options, windowId, requestId, send) {
@@ -11181,22 +11194,29 @@ function classifyResourceFailure(error) {
     message: error instanceof Error ? error.message : String(error)
   };
 }
-async function fetchResourceItem(options, identity, info, url, signal) {
+async function fetchResourceItem(options, windowId, info, url, signal) {
   const parsedUrl = parseResourceUrl(url);
   if (!parsedUrl) return resourceInvalidRequest(url, `invalid URL: ${url}`);
-  const scheme = parsedUrl.protocol.slice(0, -1).toLowerCase();
-  if (!info.schemes.some((item) => item.enabled && item.scheme.toLowerCase() === scheme)) {
-    return { ok: false, url, error: "unsupported-scheme", message: `scheme ${scheme} is not enabled` };
-  }
-  const origin = parsedUrl.origin;
-  const grants = options.getConnectGrants(identity.dTag, identity.aggregateHash);
-  if (!options.isOriginGranted(origin, grants)) {
-    return {
-      ok: false,
-      url,
-      error: "blocked-by-policy",
-      message: `origin ${origin} not granted`
-    };
+  if (options.isOriginGranted && options.getConnectGrants) {
+    const identity = options.resolveIdentity?.(windowId) ?? null;
+    if (!identity) {
+      return {
+        ok: false,
+        url,
+        error: "blocked-by-policy",
+        message: "napplet identity not resolvable for runtime origin policy"
+      };
+    }
+    const origin = parsedUrl.origin;
+    const grants = options.getConnectGrants(identity.dTag, identity.aggregateHash);
+    if (!options.isOriginGranted(origin, grants)) {
+      return {
+        ok: false,
+        url,
+        error: "blocked-by-policy",
+        message: `origin ${origin} not granted by runtime policy`
+      };
+    }
   }
   try {
     const response = await options.fetch(url, {
@@ -11226,16 +11246,11 @@ async function fetchResourceItem(options, identity, info, url, signal) {
 }
 async function handleBytes(options, state, windowId, msg, send) {
   const { requestId, url } = msg;
-  const identity = options.resolveIdentity(windowId);
-  if (!identity) {
-    sendResourceError(send, requestId, "napplet identity not resolvable", "blocked-by-policy");
-    return;
-  }
   const controller = new AbortController();
   trackRequest(state, requestId, windowId, controller);
   try {
     const info = await resolveResourceInfo(options, windowId);
-    const item = await fetchResourceItem(options, identity, info, url, controller.signal);
+    const item = await fetchResourceItem(options, windowId, info, url, controller.signal);
     if (controller.signal.aborted) return;
     if (!item.ok) {
       sendResourceError(send, requestId, item.message, item.error);
@@ -11262,11 +11277,6 @@ async function handleBytesMany(options, state, windowId, msg, send) {
     sendBytesManyError(send, requestId, "resource.bytesMany requires a non-empty urls array", "invalid-request");
     return;
   }
-  const identity = options.resolveIdentity(windowId);
-  if (!identity) {
-    sendBytesManyError(send, requestId, "napplet identity not resolvable", "blocked-by-policy");
-    return;
-  }
   let info;
   try {
     info = await resolveResourceInfo(options, windowId);
@@ -11284,7 +11294,7 @@ async function handleBytesMany(options, state, windowId, msg, send) {
   try {
     const items = [];
     for (const url of urls) {
-      const item = await fetchResourceItem(options, identity, info, url, controller.signal);
+      const item = await fetchResourceItem(options, windowId, info, url, controller.signal);
       if (controller.signal.aborted) return;
       if (item.ok) {
         items.push({
@@ -11343,7 +11353,7 @@ function createResourceService(options) {
   const descriptor = {
     name: "resource",
     version: RESOURCE_SERVICE_VERSION,
-    description: "NAP-RESOURCE reference service \u2014 shell-proxied authenticated fetch (RESOURCE-01..06)"
+    description: "NAP-RESOURCE service \u2014 runtime-resolved byte transport (RESOURCE-01..06)"
   };
   const handler = {
     descriptor,
@@ -18186,6 +18196,9 @@ function createPajaResourceFetch(options = {}) {
     if (url.protocol === "blossom:") {
       return fetchBlossomResource(value, init.signal, options);
     }
+    if (url.protocol === "http:" || url.protocol === "https:") {
+      return fetchNetworkResource(value, init.signal, options.fetch ?? globalThis.fetch);
+    }
     if (url.protocol !== "data:") {
       throw new ResourceServiceError("unsupported-scheme", `Paja does not enable ${url.protocol}`);
     }
@@ -18205,7 +18218,11 @@ function createPajaResourceFetch(options = {}) {
   };
 }
 function pajaResourceInfo(blossomServers = []) {
-  const schemes = [{ scheme: "data", enabled: true }];
+  const schemes = [
+    { scheme: "data", enabled: true },
+    { scheme: "https", enabled: true },
+    { scheme: "http", enabled: true }
+  ];
   if (usableBlossomServers(blossomServers).length > 0) {
     schemes.push({ scheme: "blossom", enabled: true });
   }
@@ -18215,6 +18232,35 @@ function pajaResourceInfo(blossomServers = []) {
     maxUrls: PAJA_RESOURCE_MAX_URLS
   };
 }
+async function fetchNetworkResource(value, signal, fetcher) {
+  let response;
+  try {
+    response = await fetcher(value, {
+      method: "GET",
+      signal,
+      credentials: "omit",
+      referrerPolicy: "no-referrer"
+    });
+  } catch (error) {
+    if (signal.aborted || isAbortError(error)) throw error;
+    throw new ResourceServiceError(
+      "network-error",
+      error instanceof Error ? error.message : String(error)
+    );
+  }
+  if (response.status === 404 || response.status === 410) {
+    throw new ResourceServiceError("not-found", "HTTP resource was not found");
+  }
+  if (!response.ok) {
+    throw new ResourceServiceError("network-error", `HTTP resource returned ${response.status}`);
+  }
+  const bytes = await readCappedResponse(response, signal);
+  const mime = sniffSafeResourceMime(bytes);
+  if (!mime) {
+    throw new ResourceServiceError("decode-failed", "resource bytes are not an enabled safe media type");
+  }
+  return new Response(arrayBufferFor(bytes), { headers: { "content-type": mime } });
+}
 async function fetchBlossomResource(value, signal, options) {
   const match = BLOSSOM_RESOURCE_PATTERN.exec(value);
   if (!match?.[1]) {
@@ -19421,12 +19467,17 @@ async function createPajaBrowserFsBackend(options) {
 // src/browser-dev-runtime.ts
 var DEV_SIGNER_SECRET_KEY = generateSecretKey();
 var PAJA_DEV_SIGNER_PUBKEY = getPublicKey(DEV_SIGNER_SECRET_KEY);
-function createPajaDevSigner(getSimulation, confirm) {
+function createPajaDevSigner(getSimulation, confirm, source) {
   return {
     getPublicKey: () => PAJA_DEV_SIGNER_PUBKEY,
     getRelays: () => Object.fromEntries(getPajaRelayUrls(getSimulation()).map((relay) => [relay, { read: true, write: true }])),
     async signEvent(event) {
-      if (!await confirm({ action: "sign", event })) {
+      const signerContext = source ? { ...source, signerPubkey: PAJA_DEV_SIGNER_PUBKEY } : void 0;
+      if (!await confirm({
+        action: "sign",
+        event,
+        ...signerContext ? { signerContext } : {}
+      })) {
         throw new Error("Paja signing request denied");
       }
       const template = { ...event };
@@ -19549,10 +19600,12 @@ function createDevTheme(mode, values) {
 function getRuntimePubkey(getSimulation, signerProvider) {
   return signerProvider?.getPubkey() || (signerProvider?.getMethod() === "dev" ? PAJA_DEV_SIGNER_PUBKEY : "") || getSimulation().identity.pubkey;
 }
-function createRuntimeSigner(getSimulation, confirmRequest, signerProvider) {
-  const signer = signerProvider?.getSigner();
+function createRuntimeSigner(getSimulation, confirmRequest, signerProvider, source) {
+  const signer = signerProvider?.getSigner(source);
   if (!signer) {
-    if (signerProvider?.getMethod() === "dev") return createPajaDevSigner(getSimulation, confirmRequest);
+    if (signerProvider?.getMethod() === "dev") {
+      return createPajaDevSigner(getSimulation, confirmRequest, source);
+    }
     const fixedPubkey = getSimulation().identity.pubkey;
     if (fixedPubkey) {
       return {
@@ -19596,9 +19649,6 @@ function createDevServices(backend, getSimulation, relayConfig, onThemeService,
   const services = {
     resource: createResourceService({
       fetch: createPajaResourceFetch({ getBlossomServers }),
-      isOriginGranted: (origin, grants) => grants.includes(origin),
-      getConnectGrants: () => ["null"],
-      resolveIdentity: (windowId) => getIdentity?.(windowId) ?? null,
       resourceInfo: () => pajaResourceInfo(getBlossomServers())
     })
   };
@@ -19772,6 +19822,18 @@ function createDevServices(backend, getSimulation, relayConfig, onThemeService,
   return { services, refreshAvailability };
 }
 function createPajaAdapter(config, getSimulation, onThemeService, onThemeBroadcast, confirmRequest, signerProvider, getIdentity, onEnvironmentChanged, intentHost, userActivation, notifyOptions, configOptions) {
+  const resolveIdentity = (windowId) => getIdentity?.(windowId) ?? {
+    dTag: config.window.dTag,
+    aggregateHash: config.window.aggregateHash
+  };
+  const signerSource = (windowId) => {
+    const napplet = resolveIdentity(windowId);
+    return {
+      windowId,
+      napplet,
+      runtimeScope: config.target?.mode === "iframe-url" ? `target-url:${config.target.url}` : `artifact:${napplet.aggregateHash}`
+    };
+  };
   const relayBackend = createPajaRelayBackend(getSimulation, confirmRequest);
   const relayConfig = createPajaRelayConfig(getSimulation);
   const uploadRuntime = getSimulation().upload.mode === "blossom" ? createPajaUploadRuntime({
@@ -19781,10 +19843,7 @@ function createPajaAdapter(config, getSimulation, onThemeService, onThemeBroadca
     queryDiscovery: (relayUrls2, filters) => relayBackend.query(relayUrls2, filters),
     getRelayUrls: () => relayConfig.getRelayUrls(["discovery", "super"]),
     confirmRequest,
-    getNappletIdentity: (windowId) => getIdentity?.(windowId) ?? {
-      dTag: config.window.dTag,
-      aggregateHash: config.window.aggregateHash
-    },
+    getNappletIdentity: resolveIdentity,
     subscribeSignerChange: signerProvider?.subscribe?.bind(signerProvider)
   }) : void 0;
   const getBlossomServers = () => [
@@ -19804,20 +19863,14 @@ function createPajaAdapter(config, getSimulation, onThemeService, onThemeBroadca
     uploadRuntime,
     signerProvider,
     intentHost,
-    getIdentity ?? (() => ({
-      dTag: config.window.dTag,
-      aggregateHash: config.window.aggregateHash
-    })),
+    resolveIdentity,
     userActivation,
     notifyOptions,
     configOptions
   );
   const services = serviceBundle.services;
   const ready = createPajaBrowserFsBackend({
-    getIdentity: (windowId) => getIdentity?.(windowId) ?? {
-      dTag: config.window.dTag,
-      aggregateHash: config.window.aggregateHash
-    },
+    getIdentity: resolveIdentity,
     userActivation
   }).then((fsBackend) => {
     if (!fsBackend) return;
@@ -19839,7 +19892,12 @@ function createPajaAdapter(config, getSimulation, onThemeService, onThemeBroadca
     windowManager: { createWindow: () => null },
     auth: {
       getUserPubkey: () => getRuntimePubkey(getSimulation, signerProvider),
-      getSigner: () => createRuntimeSigner(getSimulation, confirmRequest, signerProvider)
+      getSigner: (windowId) => createRuntimeSigner(
+        getSimulation,
+        confirmRequest,
+        signerProvider,
+        windowId ? signerSource(windowId) : void 0
+      )
     },
     services,
     get capabilities() {
@@ -19884,621 +19942,1214 @@ function forwardPajaHotkey(event) {
   }));
 }
 
-// src/browser-devtools.ts
-var PAJA_LOG_LIMIT = 500;
-var proxyToReal = /* @__PURE__ */ new WeakMap();
-var realToProxy = /* @__PURE__ */ new WeakMap();
-var proxyContexts = /* @__PURE__ */ new WeakMap();
-function isNappletMessage(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value) && typeof value.type === "string";
-}
-function describeMessage(raw) {
-  if (isNappletMessage(raw)) return raw.type;
-  if (Array.isArray(raw) && typeof raw[0] === "string") return raw[0];
-  return "unknown";
-}
-function previewMessage(raw) {
-  try {
-    return JSON.stringify(raw);
-  } catch (error) {
-    return `unserializable:${error instanceof Error ? error.message : String(error)}`;
+// src/runtime-resolver.ts
+var PAJA_NAPPLET_MANIFEST_KINDS = NAPPLET_KINDS;
+function decodePajaPointer(value) {
+  const trimmed = value.trim();
+  const decoded = decode(trimmed);
+  if (decoded.type === "naddr") {
+    return {
+      type: "naddr",
+      value: trimmed,
+      identifier: decoded.data.identifier,
+      pubkey: decoded.data.pubkey,
+      kind: decoded.data.kind,
+      relays: [...decoded.data.relays ?? []]
+    };
+  }
+  if (decoded.type === "nevent") {
+    return {
+      type: "nevent",
+      value: trimmed,
+      id: decoded.data.id,
+      ...decoded.data.author ? { author: decoded.data.author } : {},
+      ...decoded.data.kind ? { kind: decoded.data.kind } : {},
+      relays: [...decoded.data.relays ?? []]
+    };
   }
+  throw new Error(`Expected naddr or nevent pointer, got ${decoded.type}.`);
 }
-function compactMessageDetail(raw) {
-  const detail = {};
-  for (const [key, value] of Object.entries(raw)) {
-    if (key !== "type" && key !== "id" && value !== void 0) detail[key] = value;
+async function resolvePajaPointer(value, options = {}) {
+  const pointer = decodePajaPointer(value);
+  const relays = uniqueRelayUrls([...pointer.relays, ...options.relays ?? []]);
+  if (relays.length === 0) {
+    throw new Error("Pointer has no relay hints or enabled configured live relays.");
   }
-  if (Object.keys(detail).length === 0) return "";
+  const pool = options.pool ?? new SimplePool();
+  const ownsPool = options.pool === void 0;
   try {
-    return JSON.stringify(detail);
-  } catch {
-    return "";
+    const event = await resolvePointerEvent(pointer, pool, relays, normalizeMaxWaitMs(options.maxWaitMs));
+    const blossomServers = [...options.blossomServers ?? []];
+    const resolved = await resolveNapplet({
+      event,
+      cache: await openNappletArtifactCache({ requireStorageEstimate: false }),
+      fetchBlob: (sha256Hex, servers) => fetchBlob([...servers, ...blossomServers], sha256Hex, async (url) => {
+        const response = await (options.fetcher ?? fetch)(url);
+        if (!response.ok) throw new Error(`[paja-runtime] blob ${url}: ${response.status}`);
+        return new Uint8Array(await response.arrayBuffer());
+      })
+    });
+    return {
+      pointer,
+      event,
+      relays,
+      blossomServers,
+      dTag: resolved.dTag,
+      aggregateHash: resolved.aggregateHash,
+      indexHtml: resolved.indexHtml,
+      manifest: resolved.manifest
+    };
+  } finally {
+    if (ownsPool) {
+      pool.close?.(relays);
+      pool.destroy?.();
+    }
   }
 }
-function describeMessageDetail(raw) {
-  if (!isNappletMessage(raw)) return "";
-  const value = raw;
-  for (const key of ["error", "message", "reason"]) {
-    const detail = value[key];
-    if (typeof detail === "string" && detail.length > 0) return detail;
+function injectPajaRuntimeCsp(html, origins) {
+  const grantedOrigins = [...new Set(origins)].sort();
+  const connectSrc = grantedOrigins.length > 0 ? `connect-src ${grantedOrigins.join(" ")}` : "connect-src 'none'";
+  const value = [
+    "default-src 'none'",
+    "script-src 'unsafe-inline'",
+    "style-src 'unsafe-inline'",
+    "img-src data: blob:",
+    "font-src data:",
+    connectSrc,
+    "worker-src 'none'",
+    "child-src 'none'",
+    "frame-src 'none'",
+    "media-src 'none'",
+    "object-src 'none'",
+    "manifest-src 'none'",
+    "prefetch-src 'none'",
+    "base-uri 'none'",
+    "form-action 'none'",
+    "frame-ancestors 'self'"
+  ].join("; ");
+  const meta = `<meta http-equiv="Content-Security-Policy" content="${escapeAttribute(value)}">`;
+  if (/<head[^>]*>/i.test(html)) {
+    return html.replace(/<head[^>]*>/i, (open) => `${open}${meta}`);
   }
-  return raw.type.endsWith(".error") ? compactMessageDetail(value) : "";
-}
-function domainEnabled(simulation, domain) {
-  return simulation.capabilities.domains[domain] === true;
-}
-function getTargetIdentity(config) {
-  return {
-    pubkey: "",
-    dTag: config.window.dTag,
-    aggregateHash: config.window.aggregateHash
-  };
-}
-function appendPajaMessageLog(state, direction, raw, windowId) {
-  if (!state) return;
-  state.messageLog.push({
-    index: state.messageLog.length,
-    timestamp: Date.now(),
-    direction,
-    type: describeMessage(raw),
-    windowId,
-    preview: previewMessage(raw),
-    detail: describeMessageDetail(raw)
-  });
-  if (state.messageLog.length > PAJA_LOG_LIMIT) {
-    state.messageLog.splice(0, state.messageLog.length - PAJA_LOG_LIMIT);
+  if (/<html[^>]*>/i.test(html)) {
+    return html.replace(/<html[^>]*>/i, (open) => `${open}<head>${meta}</head>`);
   }
-  renderPajaMessageLog(state);
+  return `${meta}${html}`;
 }
-function createPajaPostMessageProxy(realWin, state, windowId) {
-  const existing = realToProxy.get(realWin);
-  if (existing) {
-    proxyContexts.set(existing, { state, windowId });
-    return existing;
-  }
-  const proxy = new Proxy(realWin, {
-    get(target, prop) {
-      if (prop === "postMessage") {
-        return (msg, targetOrigin, transfer) => {
-          const context = proxyContexts.get(proxy);
-          appendPajaMessageLog(
-            context?.state ?? state,
-            "shell->napplet",
-            redactPajaMessageForLog(msg),
-            context?.windowId ?? windowId
-          );
-          return target.postMessage(msg, targetOrigin, transfer);
-        };
-      }
-      try {
-        const val = Reflect.get(target, prop, target);
-        return typeof val === "function" ? val.bind(target) : val;
-      } catch {
-        return void 0;
-      }
+async function resolvePointerEvent(pointer, pool, relays, maxWaitMs) {
+  const filter = pointer.type === "naddr" ? addressableFilter(pointer) : eventFilter(pointer);
+  const result2 = await queryPointerRelays(pool, relays, filter, maxWaitMs);
+  const event = result2.events.filter((candidate) => matchesPointer(pointer, candidate)).sort((a, b) => b.created_at - a.created_at)[0];
+  if (!event) {
+    if (result2.timedOut) {
+      throw new Error(
+        `Relay resolution timed out after ${maxWaitMs}ms for ${pointer.type} pointer across ${relays.length} relays before complete EOSE.`
+      );
     }
-  });
-  proxyToReal.set(proxy, realWin);
-  realToProxy.set(realWin, proxy);
-  proxyContexts.set(proxy, { state, windowId });
-  return proxy;
+    const failures = relayFailureReasons(result2.reasons);
+    if (result2.error || failures.length > 0) {
+      const detail = result2.error instanceof Error ? result2.error.message : result2.error === void 0 ? failures.join("; ") : String(result2.error);
+      throw new Error(`Relay query failed for ${pointer.type} pointer before complete EOSE: ${detail}`);
+    }
+    throw new Error(
+      `All ${relays.length} relays reached EOSE without a matching ${pointer.type} napplet manifest event.`
+    );
+  }
+  if (!isNappletManifestKind(event.kind)) {
+    throw new Error(`Pointer resolved kind ${event.kind}; expected ${formatNappletManifestKinds()}.`);
+  }
+  return event;
 }
-function redactPajaMessageForLog(message) {
-  if (!isRecord6(message) || message.type !== "config.values") return message;
-  return {
-    type: "config.values",
-    ...typeof message.id === "string" ? { id: message.id } : {},
-    values: "[redacted by host]"
-  };
-}
-function isRecord6(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function installPajaOriginRegistryProxy(originRegistry2, stateRef) {
-  const originalGetIframeWindow = originRegistry2.getIframeWindow.bind(originRegistry2);
-  originRegistry2.getIframeWindow = (windowId) => {
-    const win = originalGetIframeWindow(windowId);
-    if (!win) return null;
-    return createPajaPostMessageProxy(win, stateRef(), windowId);
-  };
-  const originalGetWindowId = originRegistry2.getWindowId.bind(originRegistry2);
-  originRegistry2.getWindowId = (win) => {
-    const result2 = originalGetWindowId(win);
-    if (result2) return result2;
-    const real = proxyToReal.get(win);
-    return real ? originalGetWindowId(real) : void 0;
-  };
-  const originalGetIdentity = originRegistry2.getIdentity.bind(originRegistry2);
-  originRegistry2.getIdentity = (win) => {
-    const real = proxyToReal.get(win);
-    return originalGetIdentity(win) ?? (real ? originalGetIdentity(real) : void 0);
-  };
-  const originalGetRegistrationId = originRegistry2.getRegistrationId.bind(originRegistry2);
-  originRegistry2.getRegistrationId = (win) => {
-    const real = proxyToReal.get(win);
-    return originalGetRegistrationId(win) ?? (real ? originalGetRegistrationId(real) : void 0);
-  };
-  const originalGetEnvironment = originRegistry2.getEnvironment.bind(originRegistry2);
-  originRegistry2.getEnvironment = (win) => {
-    const real = proxyToReal.get(win);
-    return originalGetEnvironment(win) ?? (real ? originalGetEnvironment(real) : void 0);
-  };
-}
-function renderPajaDevtools(state, options) {
-  renderInterfaceControls(state);
-  renderAclControls(state, options.bridge);
-  renderSignerStatus(state, options.devSignerPubkey);
+function queryPointerRelays(pool, relays, filter, maxWaitMs) {
+  if (pool.subscribeManyEose) {
+    return queryPointerRelaySubscription(pool, relays, filter, maxWaitMs);
+  }
+  return queryPointerRelaySync(pool, relays, filter, maxWaitMs);
 }
-function renderPajaMessageLog(state) {
-  const container = document.getElementById("message-log");
-  if (!container) return;
-  const filter = state.messageFilter.trim().toLowerCase();
-  const rows = state.messageLog.filter((entry) => filter.length === 0 || `${entry.direction} ${entry.type} ${entry.detail} ${entry.preview}`.toLowerCase().includes(filter)).slice(-120).map((entry) => {
-    const row = document.createElement("div");
-    row.className = "log-row";
-    row.dataset.messageType = entry.type;
-    if (entry.type.endsWith(".error")) row.dataset.error = "true";
-    const dir = document.createElement("div");
-    dir.className = "log-dir";
-    dir.textContent = entry.direction;
-    const body = document.createElement("div");
-    body.className = "log-body";
-    const type = document.createElement("div");
-    type.className = "log-type";
-    type.title = entry.preview;
-    type.textContent = entry.type;
-    body.append(type);
-    if (entry.detail) {
-      const detail = document.createElement("div");
-      detail.className = "log-detail";
-      detail.textContent = entry.detail;
-      detail.title = entry.preview;
-      body.append(detail);
+function queryPointerRelaySubscription(pool, relays, filter, maxWaitMs) {
+  return new Promise((resolve) => {
+    const events = [];
+    let settled = false;
+    let subscription;
+    const finish = (result2) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(deadline);
+      resolve({ events, ...result2 });
+    };
+    const deadline = setTimeout(() => {
+      finish({ reasons: [], timedOut: true });
+      void subscription?.close("Paja pointer relay deadline exceeded");
+    }, maxWaitMs);
+    try {
+      subscription = pool.subscribeManyEose([...relays], filter, {
+        maxWait: maxWaitMs,
+        label: "kehto-paja-runtime",
+        onevent(event) {
+          events.push(event);
+        },
+        onclose(reasons) {
+          finish({ reasons, timedOut: false });
+        }
+      });
+    } catch (error) {
+      finish({ reasons: [], timedOut: false, error });
     }
-    row.append(dir, body);
-    return row;
   });
-  container.replaceChildren(...rows);
-  container.scrollTop = container.scrollHeight;
 }
-function renderInterfaceControls(state) {
-  const container = document.getElementById("interface-toggles");
-  if (!container) return;
-  container.replaceChildren(...PAJA_SIMULATION_DOMAINS.map((domain) => {
-    const enabled = domainEnabled(state.simulation, domain);
-    const button2 = document.createElement("button");
-    button2.type = "button";
-    button2.className = "toggle";
-    button2.dataset.interfaceDomain = domain;
-    button2.dataset.enabled = String(enabled);
-    button2.textContent = domain;
-    button2.title = `${domain} injection ${enabled ? "enabled" : "disabled"}`;
-    button2.addEventListener("click", () => {
-      state.setDomainEnabled(domain, !domainEnabled(state.simulation, domain));
-    });
-    return button2;
-  }));
+function queryPointerRelaySync(pool, relays, filter, maxWaitMs) {
+  return new Promise((resolve) => {
+    let settled = false;
+    const finish = (result2) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(deadline);
+      resolve(result2);
+    };
+    const deadline = setTimeout(() => {
+      finish({ events: [], reasons: [], timedOut: true });
+    }, maxWaitMs);
+    void pool.querySync([...relays], filter, {
+      maxWait: maxWaitMs,
+      label: "kehto-paja-runtime"
+    }).then(
+      (events) => finish({ events, reasons: [], timedOut: false }),
+      (error) => finish({ events: [], reasons: [], timedOut: false, error })
+    );
+  });
 }
-function renderAclControls(state, bridge) {
-  const container = document.getElementById("acl-controls");
-  if (!container) return;
-  const identity = getTargetIdentity(state.config);
-  container.replaceChildren(...ALL_CAPABILITIES.map((capability) => {
-    const allowed2 = bridge?.runtime.aclState.check(
-      identity.pubkey,
-      identity.dTag,
-      identity.aggregateHash,
-      capability
-    ) ?? true;
-    const button2 = document.createElement("button");
-    button2.type = "button";
-    button2.className = "toggle";
-    button2.dataset.aclCapability = capability;
-    button2.dataset.enabled = String(allowed2);
-    button2.textContent = capability;
-    button2.title = `${capability} ${allowed2 ? "allowed" : "blocked"}`;
-    button2.addEventListener("click", () => state.setAclCapability(capability, !allowed2));
-    return button2;
-  }));
+function relayFailureReasons(reasons) {
+  return [...new Set(reasons.map((reason) => reason.trim()).filter((reason) => reason.length > 0 && reason !== "closed automatically on eose").map((reason) => reason.slice(0, 160)))].slice(0, 3);
 }
-function renderSignerStatus(state, signerPubkey) {
-  const el = document.getElementById("signer-status");
-  const controls = document.getElementById("signer-controls");
-  if (!el || !controls) return;
-  const fallbackPubkey = state.simulation.identity.pubkey || (state.signer.method === "dev" ? signerPubkey : "");
-  const pubkey2 = state.simulation.identity.pubkey || state.signer.pubkey || (state.signer.method === "dev" ? signerPubkey : "");
-  const methodLabel = state.signer.method === "nip07" ? "NIP-07" : state.signer.method === "nip46" ? "bunker" : state.signer.method === "dev" ? "dev" : "none";
-  const relay = state.signer.relay ? ` \xB7 relay ${state.signer.relay}` : "";
-  const prefix = state.signer.status === "disconnected" ? "no signer connected" : state.signer.status === "error" ? `${methodLabel} error: ${state.signer.error ?? "unknown error"} \xB7 fallback pubkey ${fallbackPubkey}` : `${methodLabel} ${state.signer.status} \xB7 pubkey ${pubkey2 || "(none)"}${relay}`;
-  el.textContent = `${prefix} \xB7 every sign/publish request prompts`;
-  const previousInput = controls.querySelector("#signer-bunker-uri")?.value ?? "";
-  const devButton = document.createElement("button");
-  devButton.type = "button";
-  devButton.id = "signer-dev";
-  devButton.dataset.active = String(state.signer.method === "dev");
-  devButton.textContent = "Dev";
-  devButton.addEventListener("click", () => state.useDevSigner());
-  const nip07Button = document.createElement("button");
-  nip07Button.type = "button";
-  nip07Button.id = "signer-nip07";
-  nip07Button.dataset.active = String(state.signer.method === "nip07");
-  nip07Button.textContent = "NIP-07";
-  nip07Button.addEventListener("click", () => void state.connectNip07());
-  const bunkerInput = document.createElement("input");
-  bunkerInput.id = "signer-bunker-uri";
-  bunkerInput.type = "text";
-  bunkerInput.autocomplete = "off";
-  bunkerInput.placeholder = "bunker://...";
-  bunkerInput.setAttribute("aria-label", "Bunker connection URI");
-  bunkerInput.value = previousInput;
-  const bunkerButton = document.createElement("button");
-  bunkerButton.type = "button";
-  bunkerButton.id = "signer-bunker";
-  bunkerButton.dataset.active = String(state.signer.method === "nip46");
-  bunkerButton.textContent = "Bunker";
-  bunkerButton.addEventListener("click", () => void state.connectBunker(bunkerInput.value));
-  controls.replaceChildren(devButton, nip07Button, bunkerInput, bunkerButton);
+function normalizeMaxWaitMs(value) {
+  if (value === void 0) return 5e3;
+  if (!Number.isFinite(value) || value <= 0) {
+    throw new Error("Pointer relay deadline must be a positive number of milliseconds.");
+  }
+  return Math.floor(value);
 }
-
-// src/browser-nip46-client.ts
-function parseBunkerUri(uri) {
-  if (!uri || typeof uri !== "string") return null;
-  let rest;
-  if (uri.startsWith("bunker://")) {
-    rest = uri.slice("bunker://".length);
-  } else if (uri.startsWith("nostrconnect://")) {
-    rest = uri.slice("nostrconnect://".length);
-  } else {
-    return null;
+function addressableFilter(pointer) {
+  if (pointer.kind !== NAPPLET_KIND_NAMED) {
+    throw new Error(`naddr kind ${pointer.kind} is not a named NIP-5D napplet manifest kind.`);
   }
-  const questionMark = rest.indexOf("?");
-  const pubkey2 = questionMark !== -1 ? rest.slice(0, questionMark) : rest;
-  const queryString = questionMark !== -1 ? rest.slice(questionMark + 1) : "";
-  if (!pubkey2 || pubkey2.length !== 64 || !/^[0-9a-f]+$/u.test(pubkey2)) return null;
-  const params = new URLSearchParams(queryString);
-  const relay = params.get("relay");
-  if (!relay) return null;
-  return { pubkey: pubkey2, relay, secret: params.get("secret") ?? void 0 };
+  return {
+    kinds: [NAPPLET_KIND_NAMED],
+    authors: [pointer.pubkey],
+    "#d": [pointer.identifier],
+    limit: 1
+  };
 }
-function createNip46ClientState(options) {
-  const localSecretKey = normalizeLocalSecretKey(options.localSecretKey ?? generateSecretKey());
-  const localPubkey = getPublicKey(localSecretKey);
+function eventFilter(pointer) {
   return {
-    relayUrl: options.relayUrl,
-    bunkerPubkey: options.bunkerPubkey,
-    timeout: options.timeout ?? 3e4,
-    localSecretKey,
-    localPubkey,
-    pending: /* @__PURE__ */ new Map(),
-    subId: `paja-nip46-${localPubkey.substring(0, 8)}`,
-    ws: null,
-    authorizedPubkey: null
+    ids: [pointer.id],
+    ...pointer.kind ? { kinds: [pointer.kind] } : {},
+    ...pointer.author ? { authors: [pointer.author] } : {},
+    limit: 1
   };
 }
-function normalizeLocalSecretKey(secretKey) {
-  if (secretKey.length !== 32) {
-    throw new Error("NIP-46 local secret key must be 32 bytes");
-  }
-  return new Uint8Array(secretKey);
-}
-function cleanupNip46State(state) {
-  for (const entry of state.pending.values()) {
-    clearTimeout(entry.timer);
-    entry.reject(new Error("NIP-46 client closed"));
-  }
-  state.pending.clear();
-  if (state.ws && state.ws.readyState !== WebSocket.CLOSED) {
-    state.ws.close();
+function matchesPointer(pointer, event) {
+  if (pointer.type === "nevent") {
+    if (event.id !== pointer.id) return false;
+    if (pointer.author && event.pubkey !== pointer.author) return false;
+    if (pointer.kind && event.kind !== pointer.kind) return false;
+    return true;
   }
-  state.ws = null;
+  return event.kind === pointer.kind && event.pubkey === pointer.pubkey && event.tags.some((tag) => tag[0] === "d" && tag[1] === pointer.identifier);
 }
-async function sendRequestWithId(state, correlationId, method, params) {
-  if (!state.ws || state.ws.readyState !== WebSocket.OPEN) {
-    throw new Error("NIP-46 WebSocket not open");
+function uniqueRelayUrls(values) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const value of values) {
+    const url = normalizeRelayUrl2(value);
+    if (!url || seen.has(url)) continue;
+    seen.add(url);
+    out.push(url);
   }
-  const payload = JSON.stringify({ id: correlationId, method, params });
-  const encryptedContent = encrypt(payload, getConversationKey(state.localSecretKey, state.bunkerPubkey));
-  const signedEvent = finalizeEvent({
-    kind: 24133,
-    created_at: Math.floor(Date.now() / 1e3),
-    tags: [["p", state.bunkerPubkey]],
-    content: encryptedContent
-  }, state.localSecretKey);
-  return new Promise((resolve, reject2) => {
-    const timer = setTimeout(() => {
-      state.pending.delete(correlationId);
-      reject2(new Error(`NIP-46 request timed out: ${method}`));
-    }, state.timeout);
-    state.pending.set(correlationId, { resolve, reject: reject2, timer });
-    state.ws.send(JSON.stringify(["EVENT", signedEvent]));
-  });
+  return out;
 }
-async function handleRelayMessage(state, data) {
-  let msg;
-  try {
-    msg = JSON.parse(data);
-  } catch {
-    return;
-  }
-  if (!Array.isArray(msg) || msg[0] !== "EVENT") return;
-  const event = msg[2];
-  if (!event || event.kind !== 24133 || typeof event.content !== "string") return;
-  let response;
+function normalizeRelayUrl2(value) {
+  const raw = value.trim();
+  if (!raw) return void 0;
   try {
-    response = JSON.parse(decrypt(event.content, getConversationKey(state.localSecretKey, state.bunkerPubkey)));
+    const url = new URL(raw);
+    if (url.protocol !== "wss:" && url.protocol !== "ws:") return void 0;
+    url.hash = "";
+    url.search = "";
+    return url.href.replace(/\/$/, "");
   } catch {
-    return;
-  }
-  const entry = state.pending.get(response.id);
-  if (!entry) return;
-  clearTimeout(entry.timer);
-  state.pending.delete(response.id);
-  if (response.error) {
-    entry.reject(new Error(response.error));
-  } else {
-    entry.resolve(response.result);
-  }
-}
-function rejectPendingOnClose(state) {
-  for (const entry of state.pending.values()) {
-    clearTimeout(entry.timer);
-    entry.reject(new Error("NIP-46 WebSocket closed unexpectedly"));
+    return void 0;
   }
-  state.pending.clear();
 }
-function openWebSocket(state) {
-  return new Promise((resolve, reject2) => {
-    state.ws = new WebSocket(state.relayUrl);
-    state.ws.onopen = () => {
-      state.ws.send(JSON.stringify([
-        "REQ",
-        state.subId,
-        { kinds: [24133], "#p": [state.localPubkey] }
-      ]));
-      resolve();
-    };
-    state.ws.onmessage = (event) => {
-      handleRelayMessage(state, event.data).catch(() => {
-      });
-    };
-    state.ws.onerror = () => reject2(new Error(`NIP-46 WebSocket connection failed: ${state.relayUrl}`));
-    state.ws.onclose = () => rejectPendingOnClose(state);
-  });
+function escapeAttribute(value) {
+  return value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
 }
-function createNipEncryptionMethods(state, prefix) {
-  return {
-    encrypt: async (pubkey2, plaintext) => sendRequestWithId(state, crypto.randomUUID(), `${prefix}_encrypt`, [pubkey2, plaintext]),
-    decrypt: async (pubkey2, ciphertext) => sendRequestWithId(state, crypto.randomUUID(), `${prefix}_decrypt`, [pubkey2, ciphertext])
-  };
+function formatNappletManifestKinds() {
+  return PAJA_NAPPLET_MANIFEST_KINDS.join(" / ");
 }
-async function connectNip46State(state, secret) {
-  await openWebSocket(state);
-  const result2 = await sendRequestWithId(state, crypto.randomUUID(), "connect", [state.bunkerPubkey, secret ?? ""]);
-  if (typeof result2 === "string") {
-    state.authorizedPubkey = result2;
-  } else if (result2 && typeof result2 === "object" && "pubkey" in result2) {
-    state.authorizedPubkey = result2.pubkey;
-  } else {
-    const pkResult = await sendRequestWithId(state, crypto.randomUUID(), "get_public_key", []);
-    state.authorizedPubkey = pkResult;
+
+// src/browser-target-frame.ts
+function resolvePajaFrameEnvironment(hooks, identity) {
+  if (!identity.dTag || !identity.aggregateHash) {
+    throw new Error("Paja frame identity requires a dTag and aggregate hash");
   }
-  return state.authorizedPubkey;
+  return resolveShellEnvironment(hooks, identity);
 }
-function createNip46Signer(state) {
+function getTargetIdentity(config, resolvedTarget) {
   return {
-    getPublicKey: async () => {
-      if (state.authorizedPubkey) return state.authorizedPubkey;
-      return sendRequestWithId(state, crypto.randomUUID(), "get_public_key", []);
-    },
-    signEvent: async (event) => {
-      const result2 = await sendRequestWithId(state, crypto.randomUUID(), "sign_event", [JSON.stringify(event)]);
-      if (typeof result2 === "string") {
-        return JSON.parse(result2);
-      }
-      return result2;
-    },
-    nip04: createNipEncryptionMethods(state, "nip04"),
-    nip44: createNipEncryptionMethods(state, "nip44")
+    pubkey: "",
+    dTag: resolvedTarget?.dTag ?? config.window.dTag,
+    aggregateHash: resolvedTarget?.aggregateHash ?? config.window.aggregateHash
   };
 }
-function createNip46Client(options) {
-  const state = createNip46ClientState(options);
-  return {
-    connect: () => connectNip46State(state, options.secret),
-    getSigner: () => createNip46Signer(state),
-    close: () => cleanupNip46State(state)
-  };
+function getTargetOriginIdentity(config, resolvedTarget) {
+  const target = getTargetIdentity(config, resolvedTarget);
+  return Object.freeze({ dTag: target.dTag, aggregateHash: target.aggregateHash });
 }
-
-// src/browser-signers.ts
-function cloneState(state) {
-  return { ...state };
+function registerFrameForGeneration(frame, config, generation, identity, environment, windowId = `${config.window.id}:${generation}`) {
+  const win = frame.contentWindow;
+  if (!win) return null;
+  originRegistry.register(win, windowId, identity);
+  originRegistry.setEnvironment(win, environment);
+  return windowId;
 }
-function toErrorMessage6(error) {
-  return error instanceof Error ? error.message : String(error);
+async function navigateFrame(frame, config, generation, adapter, resolvedTarget, windowId, isCurrent, onRegistered) {
+  const identity = getTargetOriginIdentity(config, resolvedTarget);
+  const environment = resolvePajaFrameEnvironment(adapter, identity);
+  const domains = environment.capabilities.domains;
+  if (config.target.mode === "runtime-pointer") {
+    if (!resolvedTarget) {
+      frame.removeAttribute("src");
+      frame.srcdoc = "<!doctype html><html><body></body></html>";
+      return null;
+    }
+    if (isCurrent && !isCurrent()) return null;
+    const registeredWindowId2 = registerFrameForGeneration(frame, config, generation, identity, environment, windowId);
+    onRegistered?.(registeredWindowId2);
+    frame.removeAttribute("src");
+    frame.srcdoc = injectNappletNamespacePrelude(
+      injectPajaRuntimeCsp(
+        resolvedTarget.indexHtml,
+        connectOrigins([...resolvedTarget.relays, ...resolvedTarget.blossomServers])
+      ),
+      { domains }
+    );
+    return registeredWindowId2;
+  }
+  const html = await fetchTargetHtml();
+  if (isCurrent && !isCurrent()) return null;
+  const registeredWindowId = registerFrameForGeneration(frame, config, generation, identity, environment, windowId);
+  onRegistered?.(registeredWindowId);
+  frame.removeAttribute("src");
+  frame.srcdoc = injectNappletNamespacePrelude(
+    injectBaseHref(html, config.target.url),
+    { domains }
+  );
+  return registeredWindowId;
 }
-function readNip07Signer() {
-  const candidate = globalThis.nostr;
-  if (!candidate || typeof candidate !== "object") return null;
-  const signer = candidate;
-  if (typeof signer.getPublicKey !== "function" || typeof signer.signEvent !== "function") return null;
-  return signer;
+function renderTargetErrorHtml(error) {
+  const message = error instanceof Error ? error.message : String(error);
+  return `<!doctype html><html><body><pre>${escapeHtml(message)}</pre></body></html>`;
 }
-function createConfirmedSigner(signer, confirmRequest) {
-  return {
-    ...signer,
-    async signEvent(event) {
-      if (typeof signer.signEvent !== "function") {
-        throw new Error("Signer does not support event signing");
-      }
-      if (!await confirmRequest({ action: "sign", event })) {
-        throw new Error("Paja signing request denied");
+function connectOrigins(urls) {
+  const out = /* @__PURE__ */ new Set();
+  for (const value of urls) {
+    try {
+      const url = new URL(value);
+      if (url.protocol === "wss:" || url.protocol === "ws:") {
+        out.add(value.replace(/\/$/, ""));
+      } else {
+        out.add(url.origin);
       }
-      return signer.signEvent(event);
+    } catch {
     }
-  };
+  }
+  return [...out];
 }
-function createNip07Adapter(signer) {
-  return {
-    getPublicKey: signer.getPublicKey?.bind(signer),
-    signEvent: signer.signEvent?.bind(signer),
-    getRelays: signer.getRelays?.bind(signer),
-    nip04: signer.nip04,
-    nip44: signer.nip44
-  };
+async function fetchTargetHtml() {
+  const response = await fetch(new URL("./__kehto/target.html", window.location.href), {
+    cache: "no-store",
+    headers: {
+      accept: "text/html, application/xhtml+xml;q=0.9, */*;q=0.8"
+    }
+  });
+  if (!response.ok) {
+    throw new Error(`Paja target fetch failed: ${response.status} ${response.statusText}`);
+  }
+  return response.text();
 }
-function createPajaSignerController(options) {
-  let state = {
-    method: "none",
-    status: "disconnected",
-    pubkey: null,
-    relay: null,
-    error: null
-  };
-  let activeSigner = null;
-  let activeClient = null;
-  const listeners = /* @__PURE__ */ new Set();
-  const update = (next) => {
-    state = { ...state, ...next };
-    for (const listener of listeners) listener();
-    options.onChange(cloneState(state));
-  };
-  const closeClient = () => {
-    activeClient?.close();
-    activeClient = null;
-  };
-  return {
-    getState: () => cloneState(state),
-    getSigner: () => activeSigner,
-    getMethod: () => state.method,
-    getPubkey: () => state.pubkey,
-    subscribe(listener) {
-      listeners.add(listener);
-      return () => listeners.delete(listener);
-    },
-    useDevSigner() {
-      closeClient();
-      activeSigner = null;
-      update({
-        method: "dev",
-        status: "connected",
-        pubkey: null,
-        relay: null,
-        error: null
-      });
-    },
-    async connectNip07() {
-      closeClient();
-      activeSigner = null;
-      update({ method: "nip07", status: "connecting", pubkey: null, relay: null, error: null });
-      try {
-        const signer = readNip07Signer();
-        if (!signer) throw new Error("NIP-07 signer not found");
-        const pubkey2 = await signer.getPublicKey();
-        activeSigner = createConfirmedSigner(createNip07Adapter(signer), options.confirmRequest);
-        update({ method: "nip07", status: "connected", pubkey: pubkey2, relay: null, error: null });
-      } catch (error) {
-        activeSigner = null;
-        update({ method: "nip07", status: "error", pubkey: null, relay: null, error: toErrorMessage6(error) });
-      }
-    },
-    async connectBunker(uri) {
-      closeClient();
-      activeSigner = null;
-      const parsed = parseBunkerUri(uri.trim());
-      if (!parsed) {
-        update({
-          method: "nip46",
-          status: "error",
-          pubkey: null,
-          relay: null,
-          error: "Enter a bunker:// or nostrconnect:// URI with a relay parameter"
-        });
-        return;
+function injectBaseHref(html, targetUrl) {
+  const base = `<base href="${escapeAttribute2(targetUrl)}">`;
+  if (/<head[^>]*>/i.test(html)) {
+    return html.replace(/<head[^>]*>/i, (open) => `${open}${base}`);
+  }
+  if (/<html[^>]*>/i.test(html)) {
+    return html.replace(/<html[^>]*>/i, (open) => `${open}<head>${base}</head>`);
+  }
+  return `${base}${html}`;
+}
+function escapeAttribute2(value) {
+  return escapeHtml(value).replaceAll('"', "&quot;");
+}
+function escapeHtml(value) {
+  return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
+}
+
+// src/browser-devtools.ts
+var PAJA_LOG_LIMIT = 500;
+var proxyToReal = /* @__PURE__ */ new WeakMap();
+var realToProxy = /* @__PURE__ */ new WeakMap();
+var proxyContexts = /* @__PURE__ */ new WeakMap();
+function isNappletMessage(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) && typeof value.type === "string";
+}
+function describeMessage(raw) {
+  if (isNappletMessage(raw)) return raw.type;
+  if (Array.isArray(raw) && typeof raw[0] === "string") return raw[0];
+  return "unknown";
+}
+function previewMessage(raw) {
+  try {
+    return JSON.stringify(raw);
+  } catch (error) {
+    return `unserializable:${error instanceof Error ? error.message : String(error)}`;
+  }
+}
+function compactMessageDetail(raw) {
+  const detail = {};
+  for (const [key, value] of Object.entries(raw)) {
+    if (key !== "type" && key !== "id" && value !== void 0) detail[key] = value;
+  }
+  if (Object.keys(detail).length === 0) return "";
+  try {
+    return JSON.stringify(detail);
+  } catch {
+    return "";
+  }
+}
+function describeMessageDetail(raw) {
+  if (!isNappletMessage(raw)) return "";
+  const value = raw;
+  for (const key of ["error", "message", "reason"]) {
+    const detail = value[key];
+    if (typeof detail === "string" && detail.length > 0) return detail;
+  }
+  return raw.type.endsWith(".error") ? compactMessageDetail(value) : "";
+}
+function domainEnabled(simulation, domain) {
+  return simulation.capabilities.domains[domain] === true;
+}
+function appendPajaMessageLog(state, direction, raw, windowId) {
+  if (!state) return;
+  state.messageLog.push({
+    index: state.messageLog.length,
+    timestamp: Date.now(),
+    direction,
+    type: describeMessage(raw),
+    windowId,
+    preview: previewMessage(raw),
+    detail: describeMessageDetail(raw)
+  });
+  if (state.messageLog.length > PAJA_LOG_LIMIT) {
+    state.messageLog.splice(0, state.messageLog.length - PAJA_LOG_LIMIT);
+  }
+  renderPajaMessageLog(state);
+}
+function createPajaPostMessageProxy(realWin, state, windowId) {
+  const existing = realToProxy.get(realWin);
+  if (existing) {
+    proxyContexts.set(existing, { state, windowId });
+    return existing;
+  }
+  const proxy = new Proxy(realWin, {
+    get(target, prop) {
+      if (prop === "postMessage") {
+        return (msg, targetOrigin, transfer) => {
+          const context = proxyContexts.get(proxy);
+          appendPajaMessageLog(
+            context?.state ?? state,
+            "shell->napplet",
+            redactPajaMessageForLog(msg),
+            context?.windowId ?? windowId
+          );
+          return target.postMessage(msg, targetOrigin, transfer);
+        };
       }
-      update({ method: "nip46", status: "connecting", pubkey: null, relay: parsed.relay, error: null });
       try {
-        const client = createNip46Client({
-          relayUrl: parsed.relay,
-          bunkerPubkey: parsed.pubkey,
-          secret: parsed.secret
-        });
-        const pubkey2 = await client.connect();
-        activeClient = client;
-        activeSigner = createConfirmedSigner(client.getSigner(), options.confirmRequest);
-        update({ method: "nip46", status: "connected", pubkey: pubkey2, relay: parsed.relay, error: null });
-      } catch (error) {
-        closeClient();
-        activeSigner = null;
-        update({ method: "nip46", status: "error", pubkey: null, relay: parsed.relay, error: toErrorMessage6(error) });
+        const val = Reflect.get(target, prop, target);
+        return typeof val === "function" ? val.bind(target) : val;
+      } catch {
+        return void 0;
       }
     }
-  };
+  });
+  proxyToReal.set(proxy, realWin);
+  realToProxy.set(realWin, proxy);
+  proxyContexts.set(proxy, { state, windowId });
+  return proxy;
 }
-
-// src/browser-host-signer.ts
-function confirmationDetails(...lines) {
-  return lines.filter((line) => line !== void 0).join("\n");
+function redactPajaMessageForLog(message) {
+  if (!isRecord6(message) || message.type !== "config.values") return message;
+  return {
+    type: "config.values",
+    ...typeof message.id === "string" ? { id: message.id } : {},
+    values: "[redacted by host]"
+  };
 }
-function confirmationCopy(title, summary, approveLabel, ...details) {
-  return { title, summary, details: confirmationDetails(...details), approveLabel };
+function isRecord6(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function createPajaConfirmationController(getState) {
-  const dialog = document.getElementById("paja-confirmation-dialog");
-  const title = document.getElementById("paja-confirmation-title");
-  const summary = document.getElementById("paja-confirmation-summary");
-  const details = document.getElementById("paja-confirmation-details");
-  const approve = document.getElementById("paja-confirmation-approve");
-  const deny = document.getElementById("paja-confirmation-deny");
-  const ready = dialog instanceof HTMLDialogElement && title instanceof HTMLElement && summary instanceof HTMLElement && details instanceof HTMLElement && approve instanceof HTMLButtonElement && deny instanceof HTMLButtonElement;
-  const queue = [];
-  let active = null;
-  let previousFocus = null;
-  let disposed = false;
-  const pump = () => {
-    if (!ready || disposed || active) return;
-    active = queue.shift() ?? null;
-    if (!active) return;
-    const copy = describeConfirmation(active.request);
-    title.textContent = copy.title;
-    summary.textContent = copy.summary;
-    details.textContent = copy.details;
-    approve.textContent = copy.approveLabel;
-    previousFocus = document.activeElement instanceof HTMLElement ? document.activeElement : null;
-    dialog.showModal();
-    deny.focus();
+function installPajaOriginRegistryProxy(originRegistry2, stateRef) {
+  const originalGetIframeWindow = originRegistry2.getIframeWindow.bind(originRegistry2);
+  originRegistry2.getIframeWindow = (windowId) => {
+    const win = originalGetIframeWindow(windowId);
+    if (!win) return null;
+    return createPajaPostMessageProxy(win, stateRef(), windowId);
   };
-  const settle6 = (allowed2) => {
-    const current = active;
-    if (!current) return;
-    active = null;
-    if (ready && dialog.open) dialog.close();
-    recordPajaConfirmation(getState(), current.request, allowed2);
-    if (allowed2) current.approve();
-    else current.deny();
-    previousFocus?.focus();
-    previousFocus = null;
-    queueMicrotask(pump);
+  const originalGetWindowId = originRegistry2.getWindowId.bind(originRegistry2);
+  originRegistry2.getWindowId = (win) => {
+    const result2 = originalGetWindowId(win);
+    if (result2) return result2;
+    const real = proxyToReal.get(win);
+    return real ? originalGetWindowId(real) : void 0;
   };
-  const onApprove = () => settle6(true);
-  const onDeny = () => settle6(false);
-  const onCancel = (event) => {
-    event.preventDefault();
-    settle6(false);
+  const originalGetIdentity = originRegistry2.getIdentity.bind(originRegistry2);
+  originRegistry2.getIdentity = (win) => {
+    const real = proxyToReal.get(win);
+    return originalGetIdentity(win) ?? (real ? originalGetIdentity(real) : void 0);
   };
-  if (ready) {
-    approve.addEventListener("click", onApprove);
-    deny.addEventListener("click", onDeny);
-    dialog.addEventListener("cancel", onCancel);
-  }
-  return {
-    confirm(request) {
-      if (!ready || disposed) {
-        recordPajaConfirmation(getState(), request, false);
-        return false;
-      }
-      return new Promise((resolve) => {
+  const originalGetRegistrationId = originRegistry2.getRegistrationId.bind(originRegistry2);
+  originRegistry2.getRegistrationId = (win) => {
+    const real = proxyToReal.get(win);
+    return originalGetRegistrationId(win) ?? (real ? originalGetRegistrationId(real) : void 0);
+  };
+  const originalGetEnvironment = originRegistry2.getEnvironment.bind(originRegistry2);
+  originRegistry2.getEnvironment = (win) => {
+    const real = proxyToReal.get(win);
+    return originalGetEnvironment(win) ?? (real ? originalGetEnvironment(real) : void 0);
+  };
+}
+function renderPajaDevtools(state, options) {
+  renderInterfaceControls(state);
+  renderAclControls(state, options.bridge);
+  renderSignerStatus(state, options.devSignerPubkey);
+}
+function renderPajaMessageLog(state) {
+  const container = document.getElementById("message-log");
+  if (!container) return;
+  const filter = state.messageFilter.trim().toLowerCase();
+  const rows = state.messageLog.filter((entry) => filter.length === 0 || `${entry.direction} ${entry.type} ${entry.detail} ${entry.preview}`.toLowerCase().includes(filter)).slice(-120).map((entry) => {
+    const row = document.createElement("div");
+    row.className = "log-row";
+    row.dataset.messageType = entry.type;
+    if (entry.type.endsWith(".error")) row.dataset.error = "true";
+    const dir = document.createElement("div");
+    dir.className = "log-dir";
+    dir.textContent = entry.direction;
+    const body = document.createElement("div");
+    body.className = "log-body";
+    const type = document.createElement("div");
+    type.className = "log-type";
+    type.title = entry.preview;
+    type.textContent = entry.type;
+    body.append(type);
+    if (entry.detail) {
+      const detail = document.createElement("div");
+      detail.className = "log-detail";
+      detail.textContent = entry.detail;
+      detail.title = entry.preview;
+      body.append(detail);
+    }
+    row.append(dir, body);
+    return row;
+  });
+  container.replaceChildren(...rows);
+  container.scrollTop = container.scrollHeight;
+}
+function renderInterfaceControls(state) {
+  const container = document.getElementById("interface-toggles");
+  if (!container) return;
+  container.replaceChildren(...PAJA_SIMULATION_DOMAINS.map((domain) => {
+    const enabled = domainEnabled(state.simulation, domain);
+    const button2 = document.createElement("button");
+    button2.type = "button";
+    button2.className = "toggle";
+    button2.dataset.interfaceDomain = domain;
+    button2.dataset.enabled = String(enabled);
+    button2.textContent = domain;
+    button2.title = `${domain} injection ${enabled ? "enabled" : "disabled"}`;
+    button2.addEventListener("click", () => {
+      state.setDomainEnabled(domain, !domainEnabled(state.simulation, domain));
+    });
+    return button2;
+  }));
+}
+function renderAclControls(state, bridge) {
+  const container = document.getElementById("acl-controls");
+  if (!container) return;
+  const identity = getTargetIdentity(state.config, state.resolvedTarget);
+  container.replaceChildren(...ALL_CAPABILITIES.map((capability) => {
+    const allowed2 = bridge?.runtime.aclState.check(
+      identity.pubkey,
+      identity.dTag,
+      identity.aggregateHash,
+      capability
+    ) ?? true;
+    const button2 = document.createElement("button");
+    button2.type = "button";
+    button2.className = "toggle";
+    button2.dataset.aclCapability = capability;
+    button2.dataset.enabled = String(allowed2);
+    button2.textContent = capability;
+    button2.title = `${capability} ${allowed2 ? "allowed" : "blocked"}`;
+    button2.addEventListener("click", () => state.setAclCapability(capability, !allowed2));
+    return button2;
+  }));
+}
+function renderSignerStatus(state, signerPubkey) {
+  const el = document.getElementById("signer-status");
+  const controls = document.getElementById("signer-controls");
+  const clearConsent = document.getElementById("signer-consent-clear");
+  if (!el || !controls || !(clearConsent instanceof HTMLButtonElement)) return;
+  const fallbackPubkey = state.simulation.identity.pubkey || (state.signer.method === "dev" ? signerPubkey : "");
+  const pubkey2 = state.simulation.identity.pubkey || state.signer.pubkey || (state.signer.method === "dev" ? signerPubkey : "");
+  const methodLabel = state.signer.method === "nip07" ? "NIP-07" : state.signer.method === "nip46" ? "bunker" : state.signer.method === "dev" ? "dev" : "none";
+  const relay = state.signer.relay ? ` \xB7 relay ${state.signer.relay}` : "";
+  const prefix = state.signer.status === "disconnected" ? "no signer connected" : state.signer.status === "error" ? `${methodLabel} error: ${state.signer.error ?? "unknown error"} \xB7 fallback pubkey ${fallbackPubkey}` : `${methodLabel} ${state.signer.status} \xB7 pubkey ${pubkey2 || "(none)"}${relay}`;
+  const consentSummary = state.signerConsentCount === 0 ? "signing asks every time" : `${state.signerConsentCount} remembered signing approval${state.signerConsentCount === 1 ? "" : "s"}`;
+  el.textContent = `${prefix} \xB7 ${consentSummary} \xB7 publishing asks every time`;
+  clearConsent.hidden = state.signerConsentCount === 0;
+  clearConsent.textContent = `Forget ${state.signerConsentCount} remembered approval${state.signerConsentCount === 1 ? "" : "s"}`;
+  clearConsent.onclick = () => state.clearSignerConsent();
+  const previousInput = controls.querySelector("#signer-bunker-uri")?.value ?? "";
+  const devButton = document.createElement("button");
+  devButton.type = "button";
+  devButton.id = "signer-dev";
+  devButton.dataset.active = String(state.signer.method === "dev");
+  devButton.textContent = "Dev";
+  devButton.addEventListener("click", () => state.useDevSigner());
+  const nip07Button = document.createElement("button");
+  nip07Button.type = "button";
+  nip07Button.id = "signer-nip07";
+  nip07Button.dataset.active = String(state.signer.method === "nip07");
+  nip07Button.textContent = "NIP-07";
+  nip07Button.addEventListener("click", () => void state.connectNip07());
+  const bunkerInput = document.createElement("input");
+  bunkerInput.id = "signer-bunker-uri";
+  bunkerInput.type = "text";
+  bunkerInput.autocomplete = "off";
+  bunkerInput.placeholder = "bunker://...";
+  bunkerInput.setAttribute("aria-label", "Bunker connection URI");
+  bunkerInput.value = previousInput;
+  const bunkerButton = document.createElement("button");
+  bunkerButton.type = "button";
+  bunkerButton.id = "signer-bunker";
+  bunkerButton.dataset.active = String(state.signer.method === "nip46");
+  bunkerButton.textContent = "Bunker";
+  bunkerButton.addEventListener("click", () => void state.connectBunker(bunkerInput.value));
+  controls.replaceChildren(devButton, nip07Button, bunkerInput, bunkerButton);
+}
+
+// src/browser-nip46-client.ts
+function parseBunkerUri(uri) {
+  if (!uri || typeof uri !== "string") return null;
+  let rest;
+  if (uri.startsWith("bunker://")) {
+    rest = uri.slice("bunker://".length);
+  } else if (uri.startsWith("nostrconnect://")) {
+    rest = uri.slice("nostrconnect://".length);
+  } else {
+    return null;
+  }
+  const questionMark = rest.indexOf("?");
+  const pubkey2 = questionMark !== -1 ? rest.slice(0, questionMark) : rest;
+  const queryString = questionMark !== -1 ? rest.slice(questionMark + 1) : "";
+  if (!pubkey2 || pubkey2.length !== 64 || !/^[0-9a-f]+$/u.test(pubkey2)) return null;
+  const params = new URLSearchParams(queryString);
+  const relay = params.get("relay");
+  if (!relay) return null;
+  return { pubkey: pubkey2, relay, secret: params.get("secret") ?? void 0 };
+}
+function createNip46ClientState(options) {
+  const localSecretKey = normalizeLocalSecretKey(options.localSecretKey ?? generateSecretKey());
+  const localPubkey = getPublicKey(localSecretKey);
+  return {
+    relayUrl: options.relayUrl,
+    bunkerPubkey: options.bunkerPubkey,
+    timeout: options.timeout ?? 3e4,
+    localSecretKey,
+    localPubkey,
+    pending: /* @__PURE__ */ new Map(),
+    subId: `paja-nip46-${localPubkey.substring(0, 8)}`,
+    ws: null,
+    authorizedPubkey: null
+  };
+}
+function normalizeLocalSecretKey(secretKey) {
+  if (secretKey.length !== 32) {
+    throw new Error("NIP-46 local secret key must be 32 bytes");
+  }
+  return new Uint8Array(secretKey);
+}
+function cleanupNip46State(state) {
+  for (const entry of state.pending.values()) {
+    clearTimeout(entry.timer);
+    entry.reject(new Error("NIP-46 client closed"));
+  }
+  state.pending.clear();
+  if (state.ws && state.ws.readyState !== WebSocket.CLOSED) {
+    state.ws.close();
+  }
+  state.ws = null;
+}
+async function sendRequestWithId(state, correlationId, method, params) {
+  if (!state.ws || state.ws.readyState !== WebSocket.OPEN) {
+    throw new Error("NIP-46 WebSocket not open");
+  }
+  const payload = JSON.stringify({ id: correlationId, method, params });
+  const encryptedContent = encrypt(payload, getConversationKey(state.localSecretKey, state.bunkerPubkey));
+  const signedEvent = finalizeEvent({
+    kind: 24133,
+    created_at: Math.floor(Date.now() / 1e3),
+    tags: [["p", state.bunkerPubkey]],
+    content: encryptedContent
+  }, state.localSecretKey);
+  return new Promise((resolve, reject2) => {
+    const timer = setTimeout(() => {
+      state.pending.delete(correlationId);
+      reject2(new Error(`NIP-46 request timed out: ${method}`));
+    }, state.timeout);
+    state.pending.set(correlationId, { resolve, reject: reject2, timer });
+    state.ws.send(JSON.stringify(["EVENT", signedEvent]));
+  });
+}
+async function handleRelayMessage(state, data) {
+  let msg;
+  try {
+    msg = JSON.parse(data);
+  } catch {
+    return;
+  }
+  if (!Array.isArray(msg) || msg[0] !== "EVENT") return;
+  const event = msg[2];
+  if (!event || event.kind !== 24133 || typeof event.content !== "string") return;
+  let response;
+  try {
+    response = JSON.parse(decrypt(event.content, getConversationKey(state.localSecretKey, state.bunkerPubkey)));
+  } catch {
+    return;
+  }
+  const entry = state.pending.get(response.id);
+  if (!entry) return;
+  clearTimeout(entry.timer);
+  state.pending.delete(response.id);
+  if (response.error) {
+    entry.reject(new Error(response.error));
+  } else {
+    entry.resolve(response.result);
+  }
+}
+function rejectPendingOnClose(state) {
+  for (const entry of state.pending.values()) {
+    clearTimeout(entry.timer);
+    entry.reject(new Error("NIP-46 WebSocket closed unexpectedly"));
+  }
+  state.pending.clear();
+}
+function openWebSocket(state) {
+  return new Promise((resolve, reject2) => {
+    state.ws = new WebSocket(state.relayUrl);
+    state.ws.onopen = () => {
+      state.ws.send(JSON.stringify([
+        "REQ",
+        state.subId,
+        { kinds: [24133], "#p": [state.localPubkey] }
+      ]));
+      resolve();
+    };
+    state.ws.onmessage = (event) => {
+      handleRelayMessage(state, event.data).catch(() => {
+      });
+    };
+    state.ws.onerror = () => reject2(new Error(`NIP-46 WebSocket connection failed: ${state.relayUrl}`));
+    state.ws.onclose = () => rejectPendingOnClose(state);
+  });
+}
+function createNipEncryptionMethods(state, prefix) {
+  return {
+    encrypt: async (pubkey2, plaintext) => sendRequestWithId(state, crypto.randomUUID(), `${prefix}_encrypt`, [pubkey2, plaintext]),
+    decrypt: async (pubkey2, ciphertext) => sendRequestWithId(state, crypto.randomUUID(), `${prefix}_decrypt`, [pubkey2, ciphertext])
+  };
+}
+async function connectNip46State(state, secret) {
+  await openWebSocket(state);
+  const result2 = await sendRequestWithId(state, crypto.randomUUID(), "connect", [state.bunkerPubkey, secret ?? ""]);
+  if (typeof result2 === "string") {
+    state.authorizedPubkey = result2;
+  } else if (result2 && typeof result2 === "object" && "pubkey" in result2) {
+    state.authorizedPubkey = result2.pubkey;
+  } else {
+    const pkResult = await sendRequestWithId(state, crypto.randomUUID(), "get_public_key", []);
+    state.authorizedPubkey = pkResult;
+  }
+  return state.authorizedPubkey;
+}
+function createNip46Signer(state) {
+  return {
+    getPublicKey: async () => {
+      if (state.authorizedPubkey) return state.authorizedPubkey;
+      return sendRequestWithId(state, crypto.randomUUID(), "get_public_key", []);
+    },
+    signEvent: async (event) => {
+      const result2 = await sendRequestWithId(state, crypto.randomUUID(), "sign_event", [JSON.stringify(event)]);
+      if (typeof result2 === "string") {
+        return JSON.parse(result2);
+      }
+      return result2;
+    },
+    nip04: createNipEncryptionMethods(state, "nip04"),
+    nip44: createNipEncryptionMethods(state, "nip44")
+  };
+}
+function createNip46Client(options) {
+  const state = createNip46ClientState(options);
+  return {
+    connect: () => connectNip46State(state, options.secret),
+    getSigner: () => createNip46Signer(state),
+    close: () => cleanupNip46State(state)
+  };
+}
+
+// src/browser-signers.ts
+function cloneState(state) {
+  return { ...state };
+}
+function toErrorMessage6(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+function readNip07Signer() {
+  const candidate = globalThis.nostr;
+  if (!candidate || typeof candidate !== "object") return null;
+  const signer = candidate;
+  if (typeof signer.getPublicKey !== "function" || typeof signer.signEvent !== "function") return null;
+  return signer;
+}
+function createConfirmedSigner(signer, confirmRequest, source) {
+  return {
+    ...signer,
+    async signEvent(event) {
+      if (typeof signer.signEvent !== "function") {
+        throw new Error("Signer does not support event signing");
+      }
+      const signerContext = await resolveSignerContext(signer, source);
+      if (!await confirmRequest({
+        action: "sign",
+        event,
+        ...signerContext ? { signerContext } : {}
+      })) {
+        throw new Error("Paja signing request denied");
+      }
+      return signer.signEvent(event);
+    }
+  };
+}
+async function resolveSignerContext(signer, source) {
+  if (!source || typeof signer.getPublicKey !== "function") return void 0;
+  try {
+    const signerPubkey = await signer.getPublicKey();
+    if (!/^[0-9a-f]{64}$/i.test(signerPubkey)) return void 0;
+    return { ...source, signerPubkey };
+  } catch {
+    return void 0;
+  }
+}
+function createNip07Adapter(signer) {
+  return {
+    getPublicKey: signer.getPublicKey?.bind(signer),
+    signEvent: signer.signEvent?.bind(signer),
+    getRelays: signer.getRelays?.bind(signer),
+    nip04: signer.nip04,
+    nip44: signer.nip44
+  };
+}
+function createPajaSignerController(options) {
+  let state = {
+    method: "none",
+    status: "disconnected",
+    pubkey: null,
+    relay: null,
+    error: null
+  };
+  let activeSigner = null;
+  let activeClient = null;
+  const listeners = /* @__PURE__ */ new Set();
+  const update = (next) => {
+    state = { ...state, ...next };
+    for (const listener of listeners) listener();
+    options.onChange(cloneState(state));
+  };
+  const closeClient = () => {
+    activeClient?.close();
+    activeClient = null;
+  };
+  return {
+    getState: () => cloneState(state),
+    getSigner(source) {
+      if (!activeSigner) return null;
+      return createConfirmedSigner(activeSigner, options.confirmRequest, source);
+    },
+    getMethod: () => state.method,
+    getPubkey: () => state.pubkey,
+    subscribe(listener) {
+      listeners.add(listener);
+      return () => listeners.delete(listener);
+    },
+    useDevSigner() {
+      closeClient();
+      activeSigner = null;
+      update({
+        method: "dev",
+        status: "connected",
+        pubkey: null,
+        relay: null,
+        error: null
+      });
+    },
+    async connectNip07() {
+      closeClient();
+      activeSigner = null;
+      update({ method: "nip07", status: "connecting", pubkey: null, relay: null, error: null });
+      try {
+        const signer = readNip07Signer();
+        if (!signer) throw new Error("NIP-07 signer not found");
+        const pubkey2 = await signer.getPublicKey();
+        activeSigner = createNip07Adapter(signer);
+        update({ method: "nip07", status: "connected", pubkey: pubkey2, relay: null, error: null });
+      } catch (error) {
+        activeSigner = null;
+        update({ method: "nip07", status: "error", pubkey: null, relay: null, error: toErrorMessage6(error) });
+      }
+    },
+    async connectBunker(uri) {
+      closeClient();
+      activeSigner = null;
+      const parsed = parseBunkerUri(uri.trim());
+      if (!parsed) {
+        update({
+          method: "nip46",
+          status: "error",
+          pubkey: null,
+          relay: null,
+          error: "Enter a bunker:// or nostrconnect:// URI with a relay parameter"
+        });
+        return;
+      }
+      update({ method: "nip46", status: "connecting", pubkey: null, relay: parsed.relay, error: null });
+      try {
+        const client = createNip46Client({
+          relayUrl: parsed.relay,
+          bunkerPubkey: parsed.pubkey,
+          secret: parsed.secret
+        });
+        const pubkey2 = await client.connect();
+        activeClient = client;
+        activeSigner = client.getSigner();
+        update({ method: "nip46", status: "connected", pubkey: pubkey2, relay: parsed.relay, error: null });
+      } catch (error) {
+        closeClient();
+        activeSigner = null;
+        update({ method: "nip46", status: "error", pubkey: null, relay: parsed.relay, error: toErrorMessage6(error) });
+      }
+    }
+  };
+}
+
+// src/browser-signer-consent.ts
+var PAJA_SIGNER_CONSENT_STORAGE_KEY = "kehto:paja:signer-consent:v1";
+var PAJA_SIGNER_CONSENT_VERSION = 1;
+var MAX_CONSENT_SUBJECTS = 128;
+var MAX_KINDS_PER_SUBJECT = 128;
+var MAX_IDENTITY_FIELD_LENGTH = 512;
+function createPajaSignerConsentStore(storage = readPajaSignerConsentStorage()) {
+  let grants = readConsentDocument(storage).grants;
+  const persist = () => {
+    if (!storage) return;
+    const document2 = {
+      version: PAJA_SIGNER_CONSENT_VERSION,
+      grants
+    };
+    try {
+      storage.setItem(PAJA_SIGNER_CONSENT_STORAGE_KEY, JSON.stringify(document2));
+    } catch {
+    }
+  };
+  const recordFor = (context) => {
+    const subject = normalizeContext(context);
+    if (!subject) return null;
+    return grants.find((grant2) => sameSubject(grant2, subject)) ?? null;
+  };
+  const ensureRecord = (context) => {
+    const subject = normalizeContext(context);
+    if (!subject) return null;
+    const existing = grants.find((grant2) => sameSubject(grant2, subject));
+    if (existing) return existing;
+    if (grants.length >= MAX_CONSENT_SUBJECTS) return null;
+    const created = { ...subject, trusted: false, kinds: [] };
+    grants = [...grants, created];
+    return created;
+  };
+  return {
+    match(context, kind) {
+      const normalizedKind = normalizeKind(kind);
+      if (normalizedKind === null) return null;
+      const record = recordFor(context);
+      if (!record) return null;
+      if (record.trusted) return "napplet";
+      return record.kinds.includes(normalizedKind) ? "kind" : null;
+    },
+    rememberKind(context, kind) {
+      const normalizedKind = normalizeKind(kind);
+      if (normalizedKind === null) return false;
+      const record = ensureRecord(context);
+      if (!record) return false;
+      if (record.trusted || record.kinds.includes(normalizedKind)) return true;
+      if (record.kinds.length >= MAX_KINDS_PER_SUBJECT) return false;
+      record.kinds = [...record.kinds, normalizedKind].sort((left, right) => left - right);
+      persist();
+      return true;
+    },
+    trustNapplet(context) {
+      const record = ensureRecord(context);
+      if (!record) return false;
+      if (!record.trusted || record.kinds.length > 0) {
+        record.trusted = true;
+        record.kinds = [];
+        persist();
+      }
+      return true;
+    },
+    clear() {
+      const previous = grants;
+      grants = [];
+      if (!storage) return true;
+      try {
+        storage.removeItem(PAJA_SIGNER_CONSENT_STORAGE_KEY);
+        return true;
+      } catch {
+        try {
+          const empty = {
+            version: PAJA_SIGNER_CONSENT_VERSION,
+            grants: []
+          };
+          storage.setItem(PAJA_SIGNER_CONSENT_STORAGE_KEY, JSON.stringify(empty));
+          return true;
+        } catch {
+          grants = previous;
+          return false;
+        }
+      }
+    },
+    count() {
+      return grants.reduce((total, grant2) => total + (grant2.trusted ? 1 : grant2.kinds.length), 0);
+    }
+  };
+}
+function isPajaSignerConsentContext(context) {
+  return normalizeContext(context) !== null;
+}
+function readPajaSignerConsentStorage() {
+  if (typeof window === "undefined") return null;
+  try {
+    return window.localStorage;
+  } catch {
+    return null;
+  }
+}
+function readConsentDocument(storage) {
+  const empty = () => ({ version: PAJA_SIGNER_CONSENT_VERSION, grants: [] });
+  if (!storage) return empty();
+  try {
+    const raw = storage.getItem(PAJA_SIGNER_CONSENT_STORAGE_KEY);
+    if (!raw) return empty();
+    const parsed = JSON.parse(raw);
+    if (parsed.version !== PAJA_SIGNER_CONSENT_VERSION || !Array.isArray(parsed.grants)) return empty();
+    const grants = [];
+    for (const candidate of parsed.grants.slice(0, MAX_CONSENT_SUBJECTS)) {
+      const record = normalizeRecord(candidate);
+      if (!record || grants.some((existing) => sameSubject(existing, record))) continue;
+      grants.push(record);
+    }
+    return { version: PAJA_SIGNER_CONSENT_VERSION, grants };
+  } catch {
+    return empty();
+  }
+}
+function normalizeRecord(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  const candidate = value;
+  const subject = normalizeSubject(
+    candidate.signerPubkey,
+    candidate.dTag,
+    candidate.aggregateHash,
+    candidate.runtimeScope
+  );
+  if (!subject || typeof candidate.trusted !== "boolean" || !Array.isArray(candidate.kinds)) return null;
+  const kinds = [...new Set(candidate.kinds.map((kind) => normalizeKind(kind)).filter((kind) => kind !== null))].slice(0, MAX_KINDS_PER_SUBJECT).sort((left, right) => left - right);
+  return {
+    ...subject,
+    trusted: candidate.trusted,
+    kinds: candidate.trusted ? [] : kinds
+  };
+}
+function normalizeContext(context) {
+  return normalizeSubject(
+    context.signerPubkey,
+    context.napplet.dTag,
+    context.napplet.aggregateHash,
+    context.runtimeScope
+  );
+}
+function normalizeSubject(signerPubkey, dTag, aggregateHash, runtimeScope) {
+  if (typeof signerPubkey !== "string" || !/^[0-9a-f]{64}$/i.test(signerPubkey)) return null;
+  if (!validIdentityField(dTag) || !validIdentityField(aggregateHash) || !validIdentityField(runtimeScope)) return null;
+  return {
+    signerPubkey: signerPubkey.toLowerCase(),
+    dTag,
+    aggregateHash,
+    runtimeScope
+  };
+}
+function validIdentityField(value) {
+  return typeof value === "string" && value.length > 0 && value.length <= MAX_IDENTITY_FIELD_LENGTH;
+}
+function normalizeKind(value) {
+  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= 65535 ? value : null;
+}
+function sameSubject(left, right) {
+  return left.signerPubkey === right.signerPubkey && left.dTag === right.dTag && left.aggregateHash === right.aggregateHash && left.runtimeScope === right.runtimeScope;
+}
+
+// src/browser-host-signer.ts
+function confirmationDetails(...lines) {
+  return lines.filter((line) => line !== void 0).join("\n");
+}
+function confirmationCopy(title, summary, approveLabel, ...details) {
+  return { title, summary, details: confirmationDetails(...details), approveLabel };
+}
+function createPajaConfirmationController(getState, options = {}) {
+  const dialog = document.getElementById("paja-confirmation-dialog");
+  const title = document.getElementById("paja-confirmation-title");
+  const summary = document.getElementById("paja-confirmation-summary");
+  const details = document.getElementById("paja-confirmation-details");
+  const approve = document.getElementById("paja-confirmation-approve");
+  const deny = document.getElementById("paja-confirmation-deny");
+  const signerConsent = document.getElementById("paja-signer-consent");
+  const signerConsentOnce = document.getElementById("paja-signer-consent-once");
+  const signerConsentKind = document.getElementById("paja-signer-consent-kind");
+  const signerConsentNapplet = document.getElementById("paja-signer-consent-napplet");
+  const signerConsentKindValue = document.getElementById("paja-signer-consent-kind-value");
+  const signerConsentNappletValue = document.getElementById("paja-signer-consent-napplet-value");
+  const ready = dialog instanceof HTMLDialogElement && title instanceof HTMLElement && summary instanceof HTMLElement && details instanceof HTMLElement && approve instanceof HTMLButtonElement && deny instanceof HTMLButtonElement;
+  const signerConsentReady = signerConsent instanceof HTMLFieldSetElement && signerConsentOnce instanceof HTMLInputElement && signerConsentKind instanceof HTMLInputElement && signerConsentNapplet instanceof HTMLInputElement && signerConsentKindValue instanceof HTMLElement && signerConsentNappletValue instanceof HTMLElement;
+  const consentStore = createPajaSignerConsentStore(
+    options.storage === void 0 ? void 0 : options.storage
+  );
+  const queue = [];
+  let active = null;
+  let previousFocus = null;
+  let disposed = false;
+  const reportSignerConsentChange = () => {
+    options.onSignerConsentChange?.(consentStore.count());
+  };
+  const configureSignerConsent = (request) => {
+    if (!signerConsentReady) return;
+    signerConsent.hidden = true;
+    signerConsentOnce.checked = true;
+    signerConsentKind.checked = false;
+    signerConsentNapplet.checked = false;
+    const candidate = signerConsentCandidate(request);
+    if (!candidate) return;
+    signerConsent.hidden = false;
+    signerConsentKindValue.textContent = String(candidate.kind);
+    signerConsentNappletValue.textContent = candidate.context.napplet.dTag;
+  };
+  const rememberSignerChoice = (request) => {
+    if (!signerConsentReady) return "once";
+    const candidate = signerConsentCandidate(request);
+    if (!candidate) return "once";
+    if (signerConsentNapplet.checked && consentStore.trustNapplet(candidate.context)) {
+      reportSignerConsentChange();
+      return "trust-napplet";
+    }
+    if (signerConsentKind.checked && consentStore.rememberKind(candidate.context, candidate.kind)) {
+      reportSignerConsentChange();
+      return "remember-kind";
+    }
+    return "once";
+  };
+  const rememberedSignerChoice = (request) => {
+    const candidate = signerConsentCandidate(request);
+    return candidate ? consentStore.match(candidate.context, candidate.kind) : null;
+  };
+  const pump = () => {
+    if (!ready || disposed || active) return;
+    while (!active && queue.length > 0) {
+      const candidate = queue.shift() ?? null;
+      if (!candidate) break;
+      const remembered = rememberedSignerChoice(candidate.request);
+      if (!remembered) {
+        active = candidate;
+        break;
+      }
+      recordPajaConfirmation(
+        getState(),
+        candidate.request,
+        true,
+        remembered === "kind" ? "remembered-kind" : "remembered-napplet"
+      );
+      candidate.approve();
+    }
+    if (!active) return;
+    const copy = describeConfirmation(active.request);
+    title.textContent = copy.title;
+    summary.textContent = copy.summary;
+    details.textContent = copy.details;
+    approve.textContent = copy.approveLabel;
+    configureSignerConsent(active.request);
+    previousFocus = document.activeElement instanceof HTMLElement ? document.activeElement : null;
+    dialog.showModal();
+    deny.focus();
+  };
+  const settle6 = (allowed2) => {
+    const current = active;
+    if (!current) return;
+    active = null;
+    if (ready && dialog.open) dialog.close();
+    const approvalMode = allowed2 ? rememberSignerChoice(current.request) : void 0;
+    recordPajaConfirmation(getState(), current.request, allowed2, approvalMode);
+    if (allowed2) current.approve();
+    else current.deny();
+    previousFocus?.focus();
+    previousFocus = null;
+    queueMicrotask(pump);
+  };
+  const onApprove = () => settle6(true);
+  const onDeny = () => settle6(false);
+  const onCancel = (event) => {
+    event.preventDefault();
+    settle6(false);
+  };
+  if (ready) {
+    approve.addEventListener("click", onApprove);
+    deny.addEventListener("click", onDeny);
+    dialog.addEventListener("cancel", onCancel);
+  }
+  return {
+    confirm(request) {
+      if (!ready || disposed) {
+        recordPajaConfirmation(getState(), request, false);
+        return false;
+      }
+      return new Promise((resolve) => {
         queue.push({ request, approve: () => resolve(true), deny: () => resolve(false) });
         pump();
       });
@@ -20528,6 +21179,12 @@ function createPajaConfirmationController(getState) {
         });
       }
     },
+    clearSignerConsent() {
+      const cleared = consentStore.clear();
+      reportSignerConsentChange();
+      return cleared;
+    },
+    getSignerConsentCount: () => consentStore.count(),
     dispose() {
       if (disposed) return;
       disposed = true;
@@ -20544,6 +21201,13 @@ function createPajaConfirmationController(getState) {
     }
   };
 }
+function signerConsentCandidate(request) {
+  if (request.action !== "sign" || !request.signerContext) return null;
+  if (!isPajaSignerConsentContext(request.signerContext)) return null;
+  const kind = request.event.kind;
+  if (typeof kind !== "number" || !Number.isSafeInteger(kind) || kind < 0 || kind > 65535) return null;
+  return { context: request.signerContext, kind };
+}
 function describeConfirmation(request) {
   if (request.action === "upload") {
     return confirmationCopy(
@@ -20584,730 +21248,499 @@ function describeConfirmation(request) {
     return confirmationCopy(
       "Allow notifications?",
       `${request.napplet.dTag} requests permission to show shell notifications.`,
-      "Allow notifications",
-      `Napplet: ${request.napplet.dTag} (${request.windowId})`,
-      `Identity: ${request.napplet.aggregateHash}`,
-      `Channel: ${request.channel ?? "all notifications"}`
-    );
-  }
-  if (request.action === "webrtc") {
-    return confirmationCopy(
-      "Start a peer connection?",
-      `${request.napplet.dTag} requests a WebRTC data session.`,
-      "Connect",
-      `Napplet: ${request.napplet.dTag} (${request.windowId})`,
-      `Scope: ${request.scope}`,
-      request.warning
-    );
-  }
-  if (request.action === "dm") {
-    return confirmationCopy(
-      "Send this encrypted message?",
-      "A napplet requests NIP-17 direct-message delivery.",
-      "Send message",
-      `Recipients: ${request.recipients.join(", ")}`,
-      `Content: ${request.content.slice(0, 240)}`,
-      request.warning
-    );
-  }
-  if (request.action === "fs") {
-    return confirmationCopy(
-      "Choose filesystem access?",
-      "A napplet requests a browser-mediated filesystem selection.",
-      "Open chooser",
-      `Napplet window: ${request.windowId}`,
-      `Selection: ${request.kind}`,
-      `Purpose: ${request.description}`,
-      "The browser will show its file or directory chooser next."
-    );
-  }
-  if (!("event" in request)) throw new Error(`Unsupported confirmation action: ${request.action}`);
-  const event = request.event;
-  const kind = typeof event.kind === "number" ? event.kind : "unknown";
-  const content = typeof event.content === "string" && event.content.length > 0 ? event.content.slice(0, 240) : "(empty content)";
-  return {
-    title: request.action === "sign" ? "Sign this Nostr event?" : "Publish this Nostr event?",
-    summary: request.action === "sign" ? "The active signer will authorize this event." : "Paja will send this event to the configured relay set.",
-    details: `Kind: ${kind}
-Content: ${content}`,
-    approveLabel: request.action === "sign" ? "Sign" : "Publish"
-  };
-}
-function recordPajaConfirmation(state, request, allowed2) {
-  if (request.action === "upload") {
-    appendPajaMessageLog(state, "paja", {
-      type: `paja.upload.${allowed2 ? "confirmed" : "denied"}`,
-      windowId: request.windowId,
-      dTag: request.napplet.dTag,
-      aggregateHash: request.napplet.aggregateHash,
-      filename: request.filename ?? "(unnamed blob)",
-      size: request.size,
-      mimeType: request.mimeType ?? "application/octet-stream",
-      server: request.server,
-      warning: request.warning
-    });
-    return;
-  }
-  if (request.action === "link") {
-    appendPajaMessageLog(state, "paja", {
-      type: `paja.link.${allowed2 ? "confirmed" : "denied"}`,
-      windowId: request.windowId,
-      dTag: request.napplet.dTag,
-      aggregateHash: request.napplet.aggregateHash,
-      url: request.url
-    });
-    return;
-  }
-  if (request.action === "serial" || request.action === "ble") {
-    appendPajaMessageLog(state, "paja", {
-      type: `paja.${request.action}.${allowed2 ? "confirmed" : "denied"}`,
-      windowId: request.windowId,
-      label: request.label
-    });
-    return;
-  }
-  if (request.action === "notify") {
-    appendPajaMessageLog(state, "paja", {
-      type: `paja.notify.${allowed2 ? "confirmed" : "denied"}`,
-      windowId: request.windowId,
-      dTag: request.napplet.dTag,
-      aggregateHash: request.napplet.aggregateHash,
-      channel: request.channel
-    });
-    return;
-  }
-  if (request.action === "webrtc") {
-    appendPajaMessageLog(state, "paja", {
-      type: `paja.webrtc.${allowed2 ? "confirmed" : "denied"}`,
-      windowId: request.windowId,
-      dTag: request.napplet.dTag,
-      aggregateHash: request.napplet.aggregateHash
-    });
-    return;
-  }
-  if (request.action === "dm") {
-    appendPajaMessageLog(state, "paja", {
-      type: `paja.dm.${allowed2 ? "confirmed" : "denied"}`,
-      recipients: request.recipients
-    });
-    return;
-  }
-  if (request.action === "fs") {
-    appendPajaMessageLog(state, "paja", {
-      type: `paja.fs.${allowed2 ? "confirmed" : "denied"}`,
-      windowId: request.windowId,
-      kind: request.kind
-    });
-    return;
-  }
-  if (!("event" in request)) return;
-  const event = request.event;
-  appendPajaMessageLog(state, "paja", {
-    type: `paja.${request.action}.${allowed2 ? "confirmed" : "denied"}`,
-    kind: typeof event.kind === "number" ? event.kind : "unknown"
-  });
-}
-function createHostSignerController(getState, refreshState, confirmRequest) {
-  return createPajaSignerController({
-    confirmRequest,
-    onChange(signer) {
-      const state = getState();
-      if (!state) return;
-      state.signer = signer;
-      appendPajaMessageLog(state, "paja", {
-        type: `paja.signer.${signer.method}.${signer.status}`,
-        pubkey: signer.pubkey,
-        relay: signer.relay,
-        error: signer.error
-      });
-      refreshState(state);
-      if (signer.status === "connected") state.reload();
-    }
-  });
-}
-function hasNip07Signer() {
-  const signer = globalThis.nostr;
-  return typeof signer === "object" && signer !== null;
-}
-
-// src/browser-host-runtime.ts
-function unregisterSingleFrameWindow(bridge, runtime, windowId) {
-  if (!windowId) return;
-  bridge.runtime.destroyWindow(windowId);
-  bridge.runtime.sessionRegistry.unregister(windowId);
-  originRegistry.unregister(windowId);
-  runtime.readyWindowIds.delete(windowId);
-  if (runtime.currentWindowId === windowId) runtime.currentWindowId = null;
-}
-
-// src/browser-runtime-tabs.ts
-var PAJA_RUNTIME_TABS_STORAGE_KEY = "kehto:paja:runtime-tabs:v1";
-function resolvedTargetKey(target) {
-  return [
-    target.event.kind,
-    target.event.pubkey,
-    target.dTag,
-    target.aggregateHash
-  ].join(":");
-}
-function runtimeTabGenerationId(tab) {
-  return `${tab.id}:${tab.generation}`;
-}
-function getActiveTab(state) {
-  return state.tabs.find((tab) => tab.id === state.activeTabId) ?? null;
-}
-function setEmptyStageVisible(visible) {
-  const empty = document.getElementById("empty-runtime-stage");
-  if (empty instanceof HTMLElement) empty.hidden = !visible;
-}
-function createPajaShareUrl(pointerValue, href = window.location.href) {
-  const pointer = pointerValue.trim();
-  const url = new URL(href);
-  url.search = "";
-  url.hash = "";
-  url.searchParams.set(getPointerParamName(pointer), pointer);
-  return url.href;
-}
-function snapshotRuntimeTabs(state) {
-  const pointers = state.tabs.map((tab) => tab.pointerValue.trim()).filter((pointer) => pointer.length > 0);
-  if (pointers.length === 0) return null;
-  const activeIndex = Math.max(
-    0,
-    state.tabs.findIndex((tab) => tab.id === state.activeTabId)
-  );
-  return {
-    version: 1,
-    pointers,
-    activeIndex: Math.min(activeIndex, pointers.length - 1)
-  };
-}
-function parseRuntimeTabsSnapshot(value) {
-  if (!value) return null;
-  let parsed;
-  try {
-    parsed = JSON.parse(value);
-  } catch {
-    return null;
+      "Allow notifications",
+      `Napplet: ${request.napplet.dTag} (${request.windowId})`,
+      `Identity: ${request.napplet.aggregateHash}`,
+      `Channel: ${request.channel ?? "all notifications"}`
+    );
   }
-  if (typeof parsed !== "object" || parsed === null) return null;
-  const candidate = parsed;
-  if (candidate.version !== 1 || !Array.isArray(candidate.pointers)) return null;
-  const pointers = candidate.pointers.filter((pointer) => typeof pointer === "string").map((pointer) => pointer.trim()).filter((pointer) => pointer.length > 0);
-  if (pointers.length === 0) return null;
-  const rawActiveIndex = typeof candidate.activeIndex === "number" && Number.isInteger(candidate.activeIndex) ? candidate.activeIndex : 0;
+  if (request.action === "webrtc") {
+    return confirmationCopy(
+      "Start a peer connection?",
+      `${request.napplet.dTag} requests a WebRTC data session.`,
+      "Connect",
+      `Napplet: ${request.napplet.dTag} (${request.windowId})`,
+      `Scope: ${request.scope}`,
+      request.warning
+    );
+  }
+  if (request.action === "dm") {
+    return confirmationCopy(
+      "Send this encrypted message?",
+      "A napplet requests NIP-17 direct-message delivery.",
+      "Send message",
+      `Recipients: ${request.recipients.join(", ")}`,
+      `Content: ${request.content.slice(0, 240)}`,
+      request.warning
+    );
+  }
+  if (request.action === "fs") {
+    return confirmationCopy(
+      "Choose filesystem access?",
+      "A napplet requests a browser-mediated filesystem selection.",
+      "Open chooser",
+      `Napplet window: ${request.windowId}`,
+      `Selection: ${request.kind}`,
+      `Purpose: ${request.description}`,
+      "The browser will show its file or directory chooser next."
+    );
+  }
+  if (!("event" in request)) throw new Error(`Unsupported confirmation action: ${request.action}`);
+  const event = request.event;
+  const kind = typeof event.kind === "number" ? event.kind : "unknown";
+  const content = typeof event.content === "string" && event.content.length > 0 ? event.content.slice(0, 240) : "(empty content)";
+  const signerContext = request.signerContext;
   return {
-    version: 1,
-    pointers,
-    activeIndex: Math.max(0, Math.min(rawActiveIndex, pointers.length - 1))
+    title: request.action === "sign" ? "Sign this Nostr event?" : "Publish this Nostr event?",
+    summary: request.action === "sign" ? signerContext ? `${signerContext.napplet.dTag} requests a signature from the active signer.` : "A Paja host operation requests a signature from the active signer." : "Paja will send this event to the configured relay set.",
+    details: confirmationDetails(
+      signerContext ? `Napplet: ${signerContext.napplet.dTag} (${signerContext.windowId})` : void 0,
+      signerContext ? `Identity hash: ${signerContext.napplet.aggregateHash}` : void 0,
+      signerContext?.runtimeScope.startsWith("target-url:") ? `Target URL: ${signerContext.runtimeScope.slice("target-url:".length)}` : void 0,
+      signerContext ? `Signer: ${signerContext.signerPubkey}` : void 0,
+      `Kind: ${kind}`,
+      `Content: ${content}`
+    ),
+    approveLabel: request.action === "sign" ? "Sign" : "Publish"
   };
 }
-function renderRuntimeTabs(state) {
-  const tabsEl = document.getElementById("napplet-tabs");
-  if (!(tabsEl instanceof HTMLElement)) return;
-  tabsEl.replaceChildren(...state.tabs.map((tab) => renderTab(state, tab)));
-}
-function activateRuntimeTab(state, context, tabId) {
-  const tab = state.tabs.find((entry) => entry.id === tabId);
-  if (!tab) return;
-  state.activeTabId = tab.id;
-  state.resolvedTarget = tab.resolvedTarget;
-  state.pointerValue = tab.pointerValue;
-  state.pointerStatus = tab.pointerStatus;
-  context.runtime.currentWindowId = tab.windowId;
-  const input = document.getElementById("runtime-pointer-input");
-  if (input instanceof HTMLInputElement) input.value = tab.pointerValue;
-  context.setPointerStatus(state, tab.pointerStatus);
-  context.setStatus(state, tab.status);
-  setEmptyStageVisible(false);
-  for (const entry of state.tabs) entry.frame.hidden = entry.id !== tab.id;
-  renderRuntimeTabs(state);
-  renderPajaDevtools(state, { bridge: context.bridge, devSignerPubkey: PAJA_DEV_SIGNER_PUBKEY });
-}
-function closeRuntimeTab(state, context, tabId) {
-  const index = state.tabs.findIndex((tab2) => tab2.id === tabId);
-  if (index < 0) return;
-  const [tab] = state.tabs.splice(index, 1);
-  destroyRuntimeTab(tab, context);
-  if (state.activeTabId !== tabId) {
-    renderRuntimeTabs(state);
-    setEmptyStageVisible(state.tabs.length === 0);
+function recordPajaConfirmation(state, request, allowed2, signerApprovalMode) {
+  if (request.action === "upload") {
+    appendPajaMessageLog(state, "paja", {
+      type: `paja.upload.${allowed2 ? "confirmed" : "denied"}`,
+      windowId: request.windowId,
+      dTag: request.napplet.dTag,
+      aggregateHash: request.napplet.aggregateHash,
+      filename: request.filename ?? "(unnamed blob)",
+      size: request.size,
+      mimeType: request.mimeType ?? "application/octet-stream",
+      server: request.server,
+      warning: request.warning
+    });
     return;
   }
-  const next = state.tabs[Math.min(index, state.tabs.length - 1)] ?? null;
-  if (next) {
-    activateRuntimeTab(state, context, next.id);
+  if (request.action === "link") {
+    appendPajaMessageLog(state, "paja", {
+      type: `paja.link.${allowed2 ? "confirmed" : "denied"}`,
+      windowId: request.windowId,
+      dTag: request.napplet.dTag,
+      aggregateHash: request.napplet.aggregateHash,
+      url: request.url
+    });
     return;
   }
-  state.activeTabId = null;
-  state.resolvedTarget = null;
-  context.runtime.currentWindowId = null;
-  state.pointerStatus = "idle";
-  context.setPointerStatus(state, "idle");
-  context.setStatus(state, "ready");
-  setEmptyStageVisible(true);
-  renderRuntimeTabs(state);
-}
-function addRuntimeTab(state, context, pointerValue, resolvedTarget) {
-  state.generation += 1;
-  const tab = {
-    id: `tab-${state.generation}`,
-    title: resolvedTargetTitle(resolvedTarget),
-    key: resolvedTargetKey(resolvedTarget),
-    pointerValue,
-    pointerStatus: `${resolvedTarget.dTag}:${resolvedTarget.aggregateHash.slice(0, 12)}`,
-    resolvedTarget,
-    frame: document.createElement("iframe"),
-    generation: state.generation,
-    windowId: null,
-    status: "booting"
-  };
-  tab.frame = createRuntimeTabFrame(tab, state, context);
-  context.stage.append(tab.frame);
-  state.tabs.push(tab);
-  activateRuntimeTab(state, context, tab.id);
-  startRuntimeTabNavigation(tab, state, context);
-  return tab;
-}
-function reloadActiveRuntimeTab(state, context) {
-  const tab = getActiveTab(state);
-  if (!tab) return;
-  destroyRuntimeTab(tab, context);
-  tab.generation = ++state.generation;
-  tab.windowId = null;
-  tab.status = "reloading";
-  tab.frame = createRuntimeTabFrame(tab, state, context);
-  context.stage.append(tab.frame);
-  activateRuntimeTab(state, context, tab.id);
-  startRuntimeTabNavigation(tab, state, context);
-}
-function showDuplicatePointerDialog() {
-  const backdrop = document.getElementById("duplicate-pointer-dialog");
-  const loadAgain = document.getElementById("duplicate-load-again");
-  const openTab = document.getElementById("duplicate-open-tab");
-  const cancel = document.getElementById("duplicate-cancel");
-  if (!(backdrop instanceof HTMLElement) || !(loadAgain instanceof HTMLButtonElement) || !(openTab instanceof HTMLButtonElement) || !(cancel instanceof HTMLButtonElement)) {
-    return Promise.resolve("cancel");
+  if (request.action === "serial" || request.action === "ble") {
+    appendPajaMessageLog(state, "paja", {
+      type: `paja.${request.action}.${allowed2 ? "confirmed" : "denied"}`,
+      windowId: request.windowId,
+      label: request.label
+    });
+    return;
   }
-  return new Promise((resolve) => {
-    const cleanup = (choice) => {
-      backdrop.hidden = true;
-      loadAgain.removeEventListener("click", onLoadAgain);
-      openTab.removeEventListener("click", onOpenTab);
-      cancel.removeEventListener("click", onCancel);
-      backdrop.removeEventListener("keydown", onKeydown);
-      resolve(choice);
-    };
-    const onLoadAgain = () => cleanup("load-again");
-    const onOpenTab = () => cleanup("open-tab");
-    const onCancel = () => cleanup("cancel");
-    const onKeydown = (event) => {
-      if (event.key === "Escape") cleanup("cancel");
-    };
-    loadAgain.addEventListener("click", onLoadAgain);
-    openTab.addEventListener("click", onOpenTab);
-    cancel.addEventListener("click", onCancel);
-    backdrop.addEventListener("keydown", onKeydown);
-    backdrop.hidden = false;
-    loadAgain.focus();
-  });
-}
-function renderTab(state, tab) {
-  const tabButton = document.createElement("div");
-  tabButton.className = "tab";
-  tabButton.dataset.tabId = tab.id;
-  tabButton.dataset.active = String(tab.id === state.activeTabId);
-  tabButton.setAttribute("role", "tab");
-  tabButton.setAttribute("aria-selected", String(tab.id === state.activeTabId));
-  tabButton.tabIndex = 0;
-  tabButton.title = tab.pointerValue;
-  tabButton.addEventListener("click", () => state.activateTab(tab.id));
-  tabButton.addEventListener("keydown", (event) => {
-    if (event.key !== "Enter" && event.key !== " ") return;
-    event.preventDefault();
-    state.activateTab(tab.id);
-  });
-  const label = document.createElement("span");
-  label.className = "tab-label";
-  label.textContent = tab.title;
-  tabButton.append(label, renderShareButton(tab), renderCloseButton(state, tab));
-  return tabButton;
-}
-function renderShareButton(tab) {
-  const share = document.createElement("button");
-  share.type = "button";
-  share.className = "tab-share";
-  share.setAttribute("aria-label", `Copy share link for ${tab.title}`);
-  share.title = "Copy share link";
-  share.textContent = "\u2197";
-  share.addEventListener("click", (event) => {
-    event.stopPropagation();
-    void shareRuntimeTab(tab, share).catch((error) => console.error(error));
-  });
-  share.addEventListener("keydown", (event) => {
-    if (event.key !== "Enter" && event.key !== " ") return;
-    event.preventDefault();
-    event.stopPropagation();
-    void shareRuntimeTab(tab, share).catch((error) => console.error(error));
-  });
-  return share;
-}
-function renderCloseButton(state, tab) {
-  const close = document.createElement("button");
-  close.type = "button";
-  close.className = "tab-close";
-  close.setAttribute("aria-label", `Close ${tab.title}`);
-  close.textContent = "x";
-  close.addEventListener("click", (event) => {
-    event.stopPropagation();
-    state.closeTab(tab.id);
-  });
-  close.addEventListener("keydown", (event) => {
-    if (event.key !== "Enter" && event.key !== " ") return;
-    event.preventDefault();
-    event.stopPropagation();
-    state.closeTab(tab.id);
-  });
-  return close;
-}
-async function shareRuntimeTab(tab, button2) {
-  const shareUrl = createPajaShareUrl(tab.pointerValue);
-  const clipboard = navigator.clipboard;
-  if (!clipboard) {
-    window.prompt("Copy Paja share link", shareUrl);
+  if (request.action === "notify") {
+    appendPajaMessageLog(state, "paja", {
+      type: `paja.notify.${allowed2 ? "confirmed" : "denied"}`,
+      windowId: request.windowId,
+      dTag: request.napplet.dTag,
+      aggregateHash: request.napplet.aggregateHash,
+      channel: request.channel
+    });
+    return;
+  }
+  if (request.action === "webrtc") {
+    appendPajaMessageLog(state, "paja", {
+      type: `paja.webrtc.${allowed2 ? "confirmed" : "denied"}`,
+      windowId: request.windowId,
+      dTag: request.napplet.dTag,
+      aggregateHash: request.napplet.aggregateHash
+    });
     return;
   }
-  try {
-    await clipboard.writeText(shareUrl);
-  } catch {
-    window.prompt("Copy Paja share link", shareUrl);
+  if (request.action === "dm") {
+    appendPajaMessageLog(state, "paja", {
+      type: `paja.dm.${allowed2 ? "confirmed" : "denied"}`,
+      recipients: request.recipients
+    });
     return;
   }
-  button2.title = "Share link copied";
-  window.setTimeout(() => {
-    button2.title = "Copy share link";
-  }, 1200);
-}
-function getPointerParamName(pointer) {
-  if (pointer.startsWith("naddr")) return "naddr";
-  if (pointer.startsWith("nevent")) return "nevent";
-  return "pointer";
-}
-function resolvedTargetTitle(target) {
-  const titleTag = target.event.tags.find((tag) => tag[0] === "title")?.[1];
-  const title = typeof target.manifest.title === "string" && target.manifest.title.trim().length > 0 ? target.manifest.title.trim() : titleTag?.trim();
-  return title && title.length > 0 ? title : target.dTag || target.aggregateHash.slice(0, 12);
-}
-function destroyRuntimeTab(tab, context) {
-  context.onTabDestroyed?.(tab);
-  if (tab.windowId) {
-    context.bridge.runtime.destroyWindow(tab.windowId);
-    context.bridge.runtime.sessionRegistry.unregister(tab.windowId);
-    originRegistry.unregister(tab.windowId);
-    context.runtime.readyWindowIds.delete(tab.windowId);
-    if (context.runtime.currentWindowId === tab.windowId) context.runtime.currentWindowId = null;
+  if (request.action === "fs") {
+    appendPajaMessageLog(state, "paja", {
+      type: `paja.fs.${allowed2 ? "confirmed" : "denied"}`,
+      windowId: request.windowId,
+      kind: request.kind
+    });
+    return;
   }
-  tab.frame.remove();
-}
-function createRuntimeTabFrame(tab, state, context) {
-  const frame = document.createElement("iframe");
-  frame.id = `napplet-frame-${tab.id}`;
-  frame.className = "tab-panel";
-  frame.title = `Napplet runtime target: ${tab.title}`;
-  frame.sandbox.add("allow-scripts");
-  frame.sandbox.remove("allow-same-origin");
-  frame.dataset.tabId = tab.id;
-  frame.dataset.targetUrl = tab.pointerValue;
-  frame.hidden = true;
-  frame.addEventListener("error", () => {
-    tab.status = "error";
-    if (state.activeTabId === tab.id) context.setStatus(state, "error");
-    renderRuntimeTabs(state);
+  if (!("event" in request)) return;
+  const event = request.event;
+  const signerContext = request.signerContext;
+  appendPajaMessageLog(state, "paja", {
+    type: `paja.${request.action}.${allowed2 ? "confirmed" : "denied"}`,
+    kind: typeof event.kind === "number" ? event.kind : "unknown",
+    windowId: signerContext?.windowId,
+    dTag: signerContext?.napplet.dTag,
+    aggregateHash: signerContext?.napplet.aggregateHash,
+    runtimeScope: signerContext?.runtimeScope,
+    signerPubkey: signerContext?.signerPubkey,
+    approval: signerApprovalMode
   });
-  return frame;
 }
-function startRuntimeTabNavigation(tab, state, context) {
-  const generation = tab.generation;
-  tab.status = "booting";
-  context.setStatus(state, "booting");
-  renderRuntimeTabs(state);
-  void context.navigateFrame(
-    tab.frame,
-    context.config,
-    generation,
-    context.adapter,
-    tab.resolvedTarget,
-    runtimeTabWindowId(context.config, tab),
-    () => tab.generation === generation,
-    (windowId) => {
-      if (tab.generation !== generation) return;
-      tab.windowId = windowId;
-      if (state.activeTabId === tab.id) context.runtime.currentWindowId = windowId;
+function createHostSignerController(getState, refreshState, confirmRequest) {
+  return createPajaSignerController({
+    confirmRequest,
+    onChange(signer) {
+      const state = getState();
+      if (!state) return;
+      state.signer = signer;
+      appendPajaMessageLog(state, "paja", {
+        type: `paja.signer.${signer.method}.${signer.status}`,
+        pubkey: signer.pubkey,
+        relay: signer.relay,
+        error: signer.error
+      });
+      refreshState(state);
+      if (signer.status === "connected") state.reload();
     }
-  ).then((windowId) => {
-    if (tab.generation !== generation) return;
-    tab.windowId = windowId;
-    if (state.activeTabId === tab.id) context.runtime.currentWindowId = windowId;
-  }).catch((error) => {
-    if (tab.generation !== generation) return;
-    tab.frame.removeAttribute("src");
-    tab.frame.srcdoc = context.renderTargetErrorHtml(error);
-    tab.status = "error";
-    if (state.activeTabId === tab.id) context.setStatus(state, "error");
-    appendPajaMessageLog(state, "paja", {
-      type: "paja.target.error",
-      error: error instanceof Error ? error.message : String(error)
-    }, tab.windowId ?? void 0);
-    renderRuntimeTabs(state);
-    console.error(error);
   });
 }
-function runtimeTabWindowId(config, tab) {
-  return `${config.window.id}:${tab.id}:${tab.generation}`;
+function hasNip07Signer() {
+  const signer = globalThis.nostr;
+  return typeof signer === "object" && signer !== null;
 }
 
-// src/runtime-resolver.ts
-var PAJA_NAPPLET_MANIFEST_KINDS = NAPPLET_KINDS;
-function decodePajaPointer(value) {
-  const trimmed = value.trim();
-  const decoded = decode(trimmed);
-  if (decoded.type === "naddr") {
-    return {
-      type: "naddr",
-      value: trimmed,
-      identifier: decoded.data.identifier,
-      pubkey: decoded.data.pubkey,
-      kind: decoded.data.kind,
-      relays: [...decoded.data.relays ?? []]
-    };
-  }
-  if (decoded.type === "nevent") {
-    return {
-      type: "nevent",
-      value: trimmed,
-      id: decoded.data.id,
-      ...decoded.data.author ? { author: decoded.data.author } : {},
-      ...decoded.data.kind ? { kind: decoded.data.kind } : {},
-      relays: [...decoded.data.relays ?? []]
-    };
-  }
-  throw new Error(`Expected naddr or nevent pointer, got ${decoded.type}.`);
+// src/browser-host-runtime.ts
+function unregisterSingleFrameWindow(bridge, runtime, windowId) {
+  if (!windowId) return;
+  bridge.runtime.destroyWindow(windowId);
+  bridge.runtime.sessionRegistry.unregister(windowId);
+  originRegistry.unregister(windowId);
+  runtime.readyWindowIds.delete(windowId);
+  if (runtime.currentWindowId === windowId) runtime.currentWindowId = null;
 }
-async function resolvePajaPointer(value, options = {}) {
-  const pointer = decodePajaPointer(value);
-  const relays = uniqueRelayUrls([...pointer.relays, ...options.relays ?? []]);
-  if (relays.length === 0) {
-    throw new Error("Pointer has no relay hints or enabled configured live relays.");
-  }
-  const pool = options.pool ?? new SimplePool();
-  const ownsPool = options.pool === void 0;
-  try {
-    const event = await resolvePointerEvent(pointer, pool, relays, normalizeMaxWaitMs(options.maxWaitMs));
-    const blossomServers = [...options.blossomServers ?? []];
-    const resolved = await resolveNapplet({
-      event,
-      cache: await openNappletArtifactCache({ requireStorageEstimate: false }),
-      fetchBlob: (sha256Hex, servers) => fetchBlob([...servers, ...blossomServers], sha256Hex, async (url) => {
-        const response = await (options.fetcher ?? fetch)(url);
-        if (!response.ok) throw new Error(`[paja-runtime] blob ${url}: ${response.status}`);
-        return new Uint8Array(await response.arrayBuffer());
-      })
-    });
-    return {
-      pointer,
-      event,
-      relays,
-      blossomServers,
-      dTag: resolved.dTag,
-      aggregateHash: resolved.aggregateHash,
-      indexHtml: resolved.indexHtml,
-      manifest: resolved.manifest
-    };
-  } finally {
-    if (ownsPool) {
-      pool.close?.(relays);
-      pool.destroy?.();
-    }
-  }
+
+// src/browser-runtime-tabs.ts
+var PAJA_RUNTIME_TABS_STORAGE_KEY = "kehto:paja:runtime-tabs:v1";
+function resolvedTargetKey(target) {
+  return [
+    target.event.kind,
+    target.event.pubkey,
+    target.dTag,
+    target.aggregateHash
+  ].join(":");
 }
-function injectPajaRuntimeCsp(html, origins) {
-  const grantedOrigins = [...new Set(origins)].sort();
-  const connectSrc = grantedOrigins.length > 0 ? `connect-src ${grantedOrigins.join(" ")}` : "connect-src 'none'";
-  const value = [
-    "default-src 'none'",
-    "script-src 'unsafe-inline'",
-    "style-src 'unsafe-inline'",
-    "img-src data: blob:",
-    "font-src data:",
-    connectSrc,
-    "worker-src 'none'",
-    "child-src 'none'",
-    "frame-src 'none'",
-    "media-src 'none'",
-    "object-src 'none'",
-    "manifest-src 'none'",
-    "prefetch-src 'none'",
-    "base-uri 'none'",
-    "form-action 'none'",
-    "frame-ancestors 'self'"
-  ].join("; ");
-  const meta = `<meta http-equiv="Content-Security-Policy" content="${escapeAttribute(value)}">`;
-  if (/<head[^>]*>/i.test(html)) {
-    return html.replace(/<head[^>]*>/i, (open) => `${open}${meta}`);
-  }
-  if (/<html[^>]*>/i.test(html)) {
-    return html.replace(/<html[^>]*>/i, (open) => `${open}<head>${meta}</head>`);
+function runtimeTabGenerationId(tab) {
+  return `${tab.id}:${tab.generation}`;
+}
+function getActiveTab(state) {
+  return state.tabs.find((tab) => tab.id === state.activeTabId) ?? null;
+}
+function setEmptyStageVisible(visible) {
+  const empty = document.getElementById("empty-runtime-stage");
+  if (empty instanceof HTMLElement) empty.hidden = !visible;
+}
+function createPajaShareUrl(pointerValue, href = window.location.href) {
+  const pointer = pointerValue.trim();
+  const url = new URL(href);
+  url.search = "";
+  url.hash = "";
+  url.searchParams.set(getPointerParamName(pointer), pointer);
+  return url.href;
+}
+function snapshotRuntimeTabs(state) {
+  const pointers = state.tabs.map((tab) => tab.pointerValue.trim()).filter((pointer) => pointer.length > 0);
+  if (pointers.length === 0) return null;
+  const activeIndex = Math.max(
+    0,
+    state.tabs.findIndex((tab) => tab.id === state.activeTabId)
+  );
+  return {
+    version: 1,
+    pointers,
+    activeIndex: Math.min(activeIndex, pointers.length - 1)
+  };
+}
+function parseRuntimeTabsSnapshot(value) {
+  if (!value) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(value);
+  } catch {
+    return null;
   }
-  return `${meta}${html}`;
+  if (typeof parsed !== "object" || parsed === null) return null;
+  const candidate = parsed;
+  if (candidate.version !== 1 || !Array.isArray(candidate.pointers)) return null;
+  const pointers = candidate.pointers.filter((pointer) => typeof pointer === "string").map((pointer) => pointer.trim()).filter((pointer) => pointer.length > 0);
+  if (pointers.length === 0) return null;
+  const rawActiveIndex = typeof candidate.activeIndex === "number" && Number.isInteger(candidate.activeIndex) ? candidate.activeIndex : 0;
+  return {
+    version: 1,
+    pointers,
+    activeIndex: Math.max(0, Math.min(rawActiveIndex, pointers.length - 1))
+  };
 }
-async function resolvePointerEvent(pointer, pool, relays, maxWaitMs) {
-  const filter = pointer.type === "naddr" ? addressableFilter(pointer) : eventFilter(pointer);
-  const result2 = await queryPointerRelays(pool, relays, filter, maxWaitMs);
-  const event = result2.events.filter((candidate) => matchesPointer(pointer, candidate)).sort((a, b) => b.created_at - a.created_at)[0];
-  if (!event) {
-    if (result2.timedOut) {
-      throw new Error(
-        `Relay resolution timed out after ${maxWaitMs}ms for ${pointer.type} pointer across ${relays.length} relays before complete EOSE.`
-      );
-    }
-    const failures = relayFailureReasons(result2.reasons);
-    if (result2.error || failures.length > 0) {
-      const detail = result2.error instanceof Error ? result2.error.message : result2.error === void 0 ? failures.join("; ") : String(result2.error);
-      throw new Error(`Relay query failed for ${pointer.type} pointer before complete EOSE: ${detail}`);
-    }
-    throw new Error(
-      `All ${relays.length} relays reached EOSE without a matching ${pointer.type} napplet manifest event.`
-    );
+function renderRuntimeTabs(state) {
+  const tabsEl = document.getElementById("napplet-tabs");
+  if (!(tabsEl instanceof HTMLElement)) return;
+  tabsEl.replaceChildren(...state.tabs.map((tab) => renderTab(state, tab)));
+}
+function activateRuntimeTab(state, context, tabId) {
+  const tab = state.tabs.find((entry) => entry.id === tabId);
+  if (!tab) return;
+  state.activeTabId = tab.id;
+  state.resolvedTarget = tab.resolvedTarget;
+  state.pointerValue = tab.pointerValue;
+  state.pointerStatus = tab.pointerStatus;
+  context.runtime.currentWindowId = tab.windowId;
+  const input = document.getElementById("runtime-pointer-input");
+  if (input instanceof HTMLInputElement) input.value = tab.pointerValue;
+  context.setPointerStatus(state, tab.pointerStatus);
+  context.setStatus(state, tab.status);
+  setEmptyStageVisible(false);
+  for (const entry of state.tabs) entry.frame.hidden = entry.id !== tab.id;
+  renderRuntimeTabs(state);
+  renderPajaDevtools(state, { bridge: context.bridge, devSignerPubkey: PAJA_DEV_SIGNER_PUBKEY });
+}
+function closeRuntimeTab(state, context, tabId) {
+  const index = state.tabs.findIndex((tab2) => tab2.id === tabId);
+  if (index < 0) return;
+  const [tab] = state.tabs.splice(index, 1);
+  destroyRuntimeTab(tab, context);
+  if (state.activeTabId !== tabId) {
+    renderRuntimeTabs(state);
+    setEmptyStageVisible(state.tabs.length === 0);
+    return;
   }
-  if (!isNappletManifestKind(event.kind)) {
-    throw new Error(`Pointer resolved kind ${event.kind}; expected ${formatNappletManifestKinds()}.`);
+  const next = state.tabs[Math.min(index, state.tabs.length - 1)] ?? null;
+  if (next) {
+    activateRuntimeTab(state, context, next.id);
+    return;
   }
-  return event;
+  state.activeTabId = null;
+  state.resolvedTarget = null;
+  context.runtime.currentWindowId = null;
+  state.pointerStatus = "idle";
+  context.setPointerStatus(state, "idle");
+  context.setStatus(state, "ready");
+  setEmptyStageVisible(true);
+  renderRuntimeTabs(state);
 }
-function queryPointerRelays(pool, relays, filter, maxWaitMs) {
-  if (pool.subscribeManyEose) {
-    return queryPointerRelaySubscription(pool, relays, filter, maxWaitMs);
-  }
-  return queryPointerRelaySync(pool, relays, filter, maxWaitMs);
+function addRuntimeTab(state, context, pointerValue, resolvedTarget) {
+  state.generation += 1;
+  const tab = {
+    id: `tab-${state.generation}`,
+    title: resolvedTargetTitle(resolvedTarget),
+    key: resolvedTargetKey(resolvedTarget),
+    pointerValue,
+    pointerStatus: `${resolvedTarget.dTag}:${resolvedTarget.aggregateHash.slice(0, 12)}`,
+    resolvedTarget,
+    frame: document.createElement("iframe"),
+    generation: state.generation,
+    windowId: null,
+    status: "booting"
+  };
+  tab.frame = createRuntimeTabFrame(tab, state, context);
+  context.stage.append(tab.frame);
+  state.tabs.push(tab);
+  activateRuntimeTab(state, context, tab.id);
+  startRuntimeTabNavigation(tab, state, context);
+  return tab;
 }
-function queryPointerRelaySubscription(pool, relays, filter, maxWaitMs) {
+function reloadActiveRuntimeTab(state, context) {
+  const tab = getActiveTab(state);
+  if (!tab) return;
+  destroyRuntimeTab(tab, context);
+  tab.generation = ++state.generation;
+  tab.windowId = null;
+  tab.status = "reloading";
+  tab.frame = createRuntimeTabFrame(tab, state, context);
+  context.stage.append(tab.frame);
+  activateRuntimeTab(state, context, tab.id);
+  startRuntimeTabNavigation(tab, state, context);
+}
+function showDuplicatePointerDialog() {
+  const backdrop = document.getElementById("duplicate-pointer-dialog");
+  const loadAgain = document.getElementById("duplicate-load-again");
+  const openTab = document.getElementById("duplicate-open-tab");
+  const cancel = document.getElementById("duplicate-cancel");
+  if (!(backdrop instanceof HTMLElement) || !(loadAgain instanceof HTMLButtonElement) || !(openTab instanceof HTMLButtonElement) || !(cancel instanceof HTMLButtonElement)) {
+    return Promise.resolve("cancel");
+  }
   return new Promise((resolve) => {
-    const events = [];
-    let settled = false;
-    let subscription;
-    const finish = (result2) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(deadline);
-      resolve({ events, ...result2 });
+    const cleanup = (choice) => {
+      backdrop.hidden = true;
+      loadAgain.removeEventListener("click", onLoadAgain);
+      openTab.removeEventListener("click", onOpenTab);
+      cancel.removeEventListener("click", onCancel);
+      backdrop.removeEventListener("keydown", onKeydown);
+      resolve(choice);
     };
-    const deadline = setTimeout(() => {
-      finish({ reasons: [], timedOut: true });
-      void subscription?.close("Paja pointer relay deadline exceeded");
-    }, maxWaitMs);
-    try {
-      subscription = pool.subscribeManyEose([...relays], filter, {
-        maxWait: maxWaitMs,
-        label: "kehto-paja-runtime",
-        onevent(event) {
-          events.push(event);
-        },
-        onclose(reasons) {
-          finish({ reasons, timedOut: false });
-        }
-      });
-    } catch (error) {
-      finish({ reasons: [], timedOut: false, error });
-    }
+    const onLoadAgain = () => cleanup("load-again");
+    const onOpenTab = () => cleanup("open-tab");
+    const onCancel = () => cleanup("cancel");
+    const onKeydown = (event) => {
+      if (event.key === "Escape") cleanup("cancel");
+    };
+    loadAgain.addEventListener("click", onLoadAgain);
+    openTab.addEventListener("click", onOpenTab);
+    cancel.addEventListener("click", onCancel);
+    backdrop.addEventListener("keydown", onKeydown);
+    backdrop.hidden = false;
+    loadAgain.focus();
   });
 }
-function queryPointerRelaySync(pool, relays, filter, maxWaitMs) {
-  return new Promise((resolve) => {
-    let settled = false;
-    const finish = (result2) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(deadline);
-      resolve(result2);
-    };
-    const deadline = setTimeout(() => {
-      finish({ events: [], reasons: [], timedOut: true });
-    }, maxWaitMs);
-    void pool.querySync([...relays], filter, {
-      maxWait: maxWaitMs,
-      label: "kehto-paja-runtime"
-    }).then(
-      (events) => finish({ events, reasons: [], timedOut: false }),
-      (error) => finish({ events: [], reasons: [], timedOut: false, error })
-    );
+function renderTab(state, tab) {
+  const tabButton = document.createElement("div");
+  tabButton.className = "tab";
+  tabButton.dataset.tabId = tab.id;
+  tabButton.dataset.active = String(tab.id === state.activeTabId);
+  tabButton.setAttribute("role", "tab");
+  tabButton.setAttribute("aria-selected", String(tab.id === state.activeTabId));
+  tabButton.tabIndex = 0;
+  tabButton.title = tab.pointerValue;
+  tabButton.addEventListener("click", () => state.activateTab(tab.id));
+  tabButton.addEventListener("keydown", (event) => {
+    if (event.key !== "Enter" && event.key !== " ") return;
+    event.preventDefault();
+    state.activateTab(tab.id);
   });
+  const label = document.createElement("span");
+  label.className = "tab-label";
+  label.textContent = tab.title;
+  tabButton.append(label, renderShareButton(tab), renderCloseButton(state, tab));
+  return tabButton;
 }
-function relayFailureReasons(reasons) {
-  return [...new Set(reasons.map((reason) => reason.trim()).filter((reason) => reason.length > 0 && reason !== "closed automatically on eose").map((reason) => reason.slice(0, 160)))].slice(0, 3);
+function renderShareButton(tab) {
+  const share = document.createElement("button");
+  share.type = "button";
+  share.className = "tab-share";
+  share.setAttribute("aria-label", `Copy share link for ${tab.title}`);
+  share.title = "Copy share link";
+  share.textContent = "\u2197";
+  share.addEventListener("click", (event) => {
+    event.stopPropagation();
+    void shareRuntimeTab(tab, share).catch((error) => console.error(error));
+  });
+  share.addEventListener("keydown", (event) => {
+    if (event.key !== "Enter" && event.key !== " ") return;
+    event.preventDefault();
+    event.stopPropagation();
+    void shareRuntimeTab(tab, share).catch((error) => console.error(error));
+  });
+  return share;
 }
-function normalizeMaxWaitMs(value) {
-  if (value === void 0) return 5e3;
-  if (!Number.isFinite(value) || value <= 0) {
-    throw new Error("Pointer relay deadline must be a positive number of milliseconds.");
-  }
-  return Math.floor(value);
+function renderCloseButton(state, tab) {
+  const close = document.createElement("button");
+  close.type = "button";
+  close.className = "tab-close";
+  close.setAttribute("aria-label", `Close ${tab.title}`);
+  close.textContent = "x";
+  close.addEventListener("click", (event) => {
+    event.stopPropagation();
+    state.closeTab(tab.id);
+  });
+  close.addEventListener("keydown", (event) => {
+    if (event.key !== "Enter" && event.key !== " ") return;
+    event.preventDefault();
+    event.stopPropagation();
+    state.closeTab(tab.id);
+  });
+  return close;
 }
-function addressableFilter(pointer) {
-  if (pointer.kind !== NAPPLET_KIND_NAMED) {
-    throw new Error(`naddr kind ${pointer.kind} is not a named NIP-5D napplet manifest kind.`);
+async function shareRuntimeTab(tab, button2) {
+  const shareUrl = createPajaShareUrl(tab.pointerValue);
+  const clipboard = navigator.clipboard;
+  if (!clipboard) {
+    window.prompt("Copy Paja share link", shareUrl);
+    return;
   }
-  return {
-    kinds: [NAPPLET_KIND_NAMED],
-    authors: [pointer.pubkey],
-    "#d": [pointer.identifier],
-    limit: 1
-  };
+  try {
+    await clipboard.writeText(shareUrl);
+  } catch {
+    window.prompt("Copy Paja share link", shareUrl);
+    return;
+  }
+  button2.title = "Share link copied";
+  window.setTimeout(() => {
+    button2.title = "Copy share link";
+  }, 1200);
 }
-function eventFilter(pointer) {
-  return {
-    ids: [pointer.id],
-    ...pointer.kind ? { kinds: [pointer.kind] } : {},
-    ...pointer.author ? { authors: [pointer.author] } : {},
-    limit: 1
-  };
+function getPointerParamName(pointer) {
+  if (pointer.startsWith("naddr")) return "naddr";
+  if (pointer.startsWith("nevent")) return "nevent";
+  return "pointer";
 }
-function matchesPointer(pointer, event) {
-  if (pointer.type === "nevent") {
-    if (event.id !== pointer.id) return false;
-    if (pointer.author && event.pubkey !== pointer.author) return false;
-    if (pointer.kind && event.kind !== pointer.kind) return false;
-    return true;
-  }
-  return event.kind === pointer.kind && event.pubkey === pointer.pubkey && event.tags.some((tag) => tag[0] === "d" && tag[1] === pointer.identifier);
+function resolvedTargetTitle(target) {
+  const titleTag = target.event.tags.find((tag) => tag[0] === "title")?.[1];
+  const title = typeof target.manifest.title === "string" && target.manifest.title.trim().length > 0 ? target.manifest.title.trim() : titleTag?.trim();
+  return title && title.length > 0 ? title : target.dTag || target.aggregateHash.slice(0, 12);
 }
-function uniqueRelayUrls(values) {
-  const out = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const value of values) {
-    const url = normalizeRelayUrl2(value);
-    if (!url || seen.has(url)) continue;
-    seen.add(url);
-    out.push(url);
+function destroyRuntimeTab(tab, context) {
+  context.onTabDestroyed?.(tab);
+  if (tab.windowId) {
+    context.bridge.runtime.destroyWindow(tab.windowId);
+    context.bridge.runtime.sessionRegistry.unregister(tab.windowId);
+    originRegistry.unregister(tab.windowId);
+    context.runtime.readyWindowIds.delete(tab.windowId);
+    if (context.runtime.currentWindowId === tab.windowId) context.runtime.currentWindowId = null;
   }
-  return out;
+  tab.frame.remove();
 }
-function normalizeRelayUrl2(value) {
-  const raw = value.trim();
-  if (!raw) return void 0;
-  try {
-    const url = new URL(raw);
-    if (url.protocol !== "wss:" && url.protocol !== "ws:") return void 0;
-    url.hash = "";
-    url.search = "";
-    return url.href.replace(/\/$/, "");
-  } catch {
-    return void 0;
-  }
+function createRuntimeTabFrame(tab, state, context) {
+  const frame = document.createElement("iframe");
+  frame.id = `napplet-frame-${tab.id}`;
+  frame.className = "tab-panel";
+  frame.title = `Napplet runtime target: ${tab.title}`;
+  frame.sandbox.add("allow-scripts");
+  frame.sandbox.remove("allow-same-origin");
+  frame.dataset.tabId = tab.id;
+  frame.dataset.targetUrl = tab.pointerValue;
+  frame.hidden = true;
+  frame.addEventListener("error", () => {
+    tab.status = "error";
+    if (state.activeTabId === tab.id) context.setStatus(state, "error");
+    renderRuntimeTabs(state);
+  });
+  return frame;
 }
-function escapeAttribute(value) {
-  return value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
+function startRuntimeTabNavigation(tab, state, context) {
+  const generation = tab.generation;
+  tab.status = "booting";
+  context.setStatus(state, "booting");
+  renderRuntimeTabs(state);
+  void context.navigateFrame(
+    tab.frame,
+    context.config,
+    generation,
+    context.adapter,
+    tab.resolvedTarget,
+    runtimeTabWindowId(context.config, tab),
+    () => tab.generation === generation,
+    (windowId) => {
+      if (tab.generation !== generation) return;
+      tab.windowId = windowId;
+      if (state.activeTabId === tab.id) context.runtime.currentWindowId = windowId;
+    }
+  ).then((windowId) => {
+    if (tab.generation !== generation) return;
+    tab.windowId = windowId;
+    if (state.activeTabId === tab.id) context.runtime.currentWindowId = windowId;
+  }).catch((error) => {
+    if (tab.generation !== generation) return;
+    tab.frame.removeAttribute("src");
+    tab.frame.srcdoc = context.renderTargetErrorHtml(error);
+    tab.status = "error";
+    if (state.activeTabId === tab.id) context.setStatus(state, "error");
+    appendPajaMessageLog(state, "paja", {
+      type: "paja.target.error",
+      error: error instanceof Error ? error.message : String(error)
+    }, tab.windowId ?? void 0);
+    renderRuntimeTabs(state);
+    console.error(error);
+  });
 }
-function formatNappletManifestKinds() {
-  return PAJA_NAPPLET_MANIFEST_KINDS.join(" / ");
+function runtimeTabWindowId(config, tab) {
+  return `${config.window.id}:${tab.id}:${tab.generation}`;
 }
 
 // src/browser-intent-host.ts
@@ -21489,113 +21922,6 @@ function createPajaThemeBroadcastLink() {
   };
 }
 
-// src/browser-target-frame.ts
-function resolvePajaFrameEnvironment(hooks, identity) {
-  if (!identity.dTag || !identity.aggregateHash) {
-    throw new Error("Paja frame identity requires a dTag and aggregate hash");
-  }
-  return resolveShellEnvironment(hooks, identity);
-}
-function getTargetIdentity2(config, resolvedTarget) {
-  return {
-    pubkey: "",
-    dTag: resolvedTarget?.dTag ?? config.window.dTag,
-    aggregateHash: resolvedTarget?.aggregateHash ?? config.window.aggregateHash
-  };
-}
-function getTargetOriginIdentity(config, resolvedTarget) {
-  const target = getTargetIdentity2(config, resolvedTarget);
-  return Object.freeze({ dTag: target.dTag, aggregateHash: target.aggregateHash });
-}
-function registerFrameForGeneration(frame, config, generation, identity, environment, windowId = `${config.window.id}:${generation}`) {
-  const win = frame.contentWindow;
-  if (!win) return null;
-  originRegistry.register(win, windowId, identity);
-  originRegistry.setEnvironment(win, environment);
-  return windowId;
-}
-async function navigateFrame(frame, config, generation, adapter, resolvedTarget, windowId, isCurrent, onRegistered) {
-  const identity = getTargetOriginIdentity(config, resolvedTarget);
-  const environment = resolvePajaFrameEnvironment(adapter, identity);
-  const domains = environment.capabilities.domains;
-  if (config.target.mode === "runtime-pointer") {
-    if (!resolvedTarget) {
-      frame.removeAttribute("src");
-      frame.srcdoc = "<!doctype html><html><body></body></html>";
-      return null;
-    }
-    if (isCurrent && !isCurrent()) return null;
-    const registeredWindowId2 = registerFrameForGeneration(frame, config, generation, identity, environment, windowId);
-    onRegistered?.(registeredWindowId2);
-    frame.removeAttribute("src");
-    frame.srcdoc = injectNappletNamespacePrelude(
-      injectPajaRuntimeCsp(
-        resolvedTarget.indexHtml,
-        connectOrigins([...resolvedTarget.relays, ...resolvedTarget.blossomServers])
-      ),
-      { domains }
-    );
-    return registeredWindowId2;
-  }
-  const html = await fetchTargetHtml();
-  if (isCurrent && !isCurrent()) return null;
-  const registeredWindowId = registerFrameForGeneration(frame, config, generation, identity, environment, windowId);
-  onRegistered?.(registeredWindowId);
-  frame.removeAttribute("src");
-  frame.srcdoc = injectNappletNamespacePrelude(
-    injectBaseHref(html, config.target.url),
-    { domains }
-  );
-  return registeredWindowId;
-}
-function renderTargetErrorHtml(error) {
-  const message = error instanceof Error ? error.message : String(error);
-  return `<!doctype html><html><body><pre>${escapeHtml(message)}</pre></body></html>`;
-}
-function connectOrigins(urls) {
-  const out = /* @__PURE__ */ new Set();
-  for (const value of urls) {
-    try {
-      const url = new URL(value);
-      if (url.protocol === "wss:" || url.protocol === "ws:") {
-        out.add(value.replace(/\/$/, ""));
-      } else {
-        out.add(url.origin);
-      }
-    } catch {
-    }
-  }
-  return [...out];
-}
-async function fetchTargetHtml() {
-  const response = await fetch(new URL("./__kehto/target.html", window.location.href), {
-    cache: "no-store",
-    headers: {
-      accept: "text/html, application/xhtml+xml;q=0.9, */*;q=0.8"
-    }
-  });
-  if (!response.ok) {
-    throw new Error(`Paja target fetch failed: ${response.status} ${response.statusText}`);
-  }
-  return response.text();
-}
-function injectBaseHref(html, targetUrl) {
-  const base = `<base href="${escapeAttribute2(targetUrl)}">`;
-  if (/<head[^>]*>/i.test(html)) {
-    return html.replace(/<head[^>]*>/i, (open) => `${open}${base}`);
-  }
-  if (/<html[^>]*>/i.test(html)) {
-    return html.replace(/<html[^>]*>/i, (open) => `${open}<head>${base}</head>`);
-  }
-  return `${base}${html}`;
-}
-function escapeAttribute2(value) {
-  return escapeHtml(value).replaceAll('"', "&quot;");
-}
-function escapeHtml(value) {
-  return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
-}
-
 // src/browser-target-diagnostics.ts
 async function reportTargetCorsDiagnostic(state) {
   let diagnostic;
@@ -22316,6 +22642,7 @@ function snapshotPajaBrowserState(state, runtime) {
     services: state.services,
     simulation: runtime.currentSimulation,
     signer: state.signer,
+    signerConsentCount: state.signerConsentCount,
     resolvedTarget: state.resolvedTarget,
     pointerStatus: state.pointerStatus,
     activeTabId: state.activeTabId,
@@ -22331,13 +22658,22 @@ function snapshotPajaBrowserState(state, runtime) {
   };
 }
 function createPajaBrowserState(context) {
-  const { config, bridge, adapter, signerController, capabilities, runtime } = context;
+  const {
+    config,
+    bridge,
+    adapter,
+    signerController,
+    confirmationController,
+    capabilities,
+    runtime
+  } = context;
   return {
     config,
     capabilities,
     services: Object.keys(adapter.services ?? {}).sort(),
     simulation: runtime.currentSimulation,
     signer: signerController.getState(),
+    signerConsentCount: confirmationController.getSignerConsentCount(),
     resolvedTarget: null,
     pointerValue: readInitialPointerValue(config),
     pointerStatus: config.target.mode === "runtime-pointer" ? "idle" : "",
@@ -22374,7 +22710,7 @@ function createPajaBrowserState(context) {
       setRuntimeDomainEnabled(this, context, domain, enabled);
     },
     setAclCapability(capability, enabled) {
-      const identity = getTargetIdentity2(config, this.resolvedTarget);
+      const identity = getTargetIdentity(config, this.resolvedTarget);
       if (enabled) bridge.runtime.aclState.grant(identity.pubkey, identity.dTag, identity.aggregateHash, capability);
       else bridge.runtime.aclState.revoke(identity.pubkey, identity.dTag, identity.aggregateHash, capability);
       bridge.runtime.aclState.persist();
@@ -22390,6 +22726,12 @@ function createPajaBrowserState(context) {
     connectBunker(uri) {
       return signerController.connectBunker(uri);
     },
+    clearSignerConsent() {
+      const cleared = confirmationController.clearSignerConsent();
+      appendPajaMessageLog(this, "paja", {
+        type: cleared ? "paja.signer-consent.cleared" : "paja.signer-consent.clear-failed"
+      });
+    },
     async loadPointer(value) {
       await loadRuntimePointer(this, context, value);
     },
@@ -22425,7 +22767,16 @@ async function installPajaHost() {
     () => contextRef,
     { persistTabs: persistRuntimeTabs }
   ));
-  const confirmationController = createPajaConfirmationController(() => stateRef);
+  const confirmationController = createPajaConfirmationController(
+    () => stateRef,
+    {
+      onSignerConsentChange(count) {
+        if (!stateRef) return;
+        stateRef.signerConsentCount = count;
+        setSimulationStatus(stateRef);
+      }
+    }
+  );
   const signerController = createHostSignerController(
     () => stateRef,
     setSimulationStatus,
@@ -22433,7 +22784,7 @@ async function installPajaHost() {
   );
   const getWindowIdentity = (windowId) => {
     const tabTarget = stateRef?.tabs.find((tab) => tab.windowId === windowId)?.resolvedTarget;
-    return getTargetIdentity2(config, tabTarget ?? stateRef?.resolvedTarget);
+    return getTargetIdentity(config, tabTarget ?? stateRef?.resolvedTarget);
   };
   const notifyController = createPajaNotifyController({
     confirm: confirmationController.confirm,
@@ -22466,6 +22817,7 @@ async function installPajaHost() {
     bridge,
     adapter,
     signerController,
+    confirmationController,
     capabilities,
     runtime,
     navigateFrame,