@kehto/paja 0.15.0 → 0.15.2

package/dist/browser-host.js

@@ -2447,11 +2447,8 @@ function createFirewallGate(config) {
         if (decision === "prompt") fireConsent(windowId, napplet);
         return "drop";
       }
-      const id = envelope.id ?? "";
-      const type = denialResponseType(envelope);
-      if (type) {
-        hooks.sendToNapplet(windowId, { type, id, error: `firewall: ${reason}` });
-      }
+      const denial = createDenialResponse(envelope, `firewall: ${reason}`);
+      if (denial) hooks.sendToNapplet(windowId, denial);
       hooks.onFirewallEvent?.({ windowId, napplet, opClass, decision, action, ruleId, reason, message: envelope });
       if (decision === "prompt") {
         fireConsent(windowId, napplet);
@@ -2473,6 +2470,19 @@ function denialResponseType(envelope) {
   if (envelope.type.startsWith("inc.")) return null;
   return `${envelope.type}.error`;
 }
+function createDenialResponse(envelope, error) {
+  const id = envelope.id ?? "";
+  if (envelope.type === "outbox.query") {
+    return {
+      type: "outbox.query.result",
+      id,
+      events: [],
+      error
+    };
+  }
+  const type = denialResponseType(envelope);
+  return type ? { type, id, error } : null;
+}
 function createMessageHandler(hooks, sessionRegistry2, enforceNap, dispatchNapEnvelope, firewallGate) {
   return (windowId, msg) => {
     if (typeof msg !== "object" || msg === null || !("type" in msg)) return;
@@ -2497,12 +2507,9 @@ function createMessageHandler(hooks, sessionRegistry2, enforceNap, dispatchNapEn
           hooks.sendToNapplet(windowId, canonicalResult);
           return;
         }
-        const id = envelope.id ?? "";
         const error = formatDenialReason(result2.capability);
-        const type = denialResponseType(envelope);
-        if (type) {
-          hooks.sendToNapplet(windowId, { type, id, error });
-        }
+        const denial = createDenialResponse(envelope, error);
+        if (denial) hooks.sendToNapplet(windowId, denial);
         return;
       }
     }
@@ -19935,97 +19942,442 @@ function forwardPajaHotkey(event) {
   }));
 }
 
-// src/browser-devtools.ts
-var PAJA_LOG_LIMIT = 500;
-var proxyToReal = /* @__PURE__ */ new WeakMap();
-var realToProxy = /* @__PURE__ */ new WeakMap();
-var proxyContexts = /* @__PURE__ */ new WeakMap();
-function isNappletMessage(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value) && typeof value.type === "string";
-}
-function describeMessage(raw) {
-  if (isNappletMessage(raw)) return raw.type;
-  if (Array.isArray(raw) && typeof raw[0] === "string") return raw[0];
-  return "unknown";
+// src/runtime-resolver.ts
+var PAJA_NAPPLET_MANIFEST_KINDS = NAPPLET_KINDS;
+function decodePajaPointer(value) {
+  const trimmed = value.trim();
+  const decoded = decode(trimmed);
+  if (decoded.type === "naddr") {
+    return {
+      type: "naddr",
+      value: trimmed,
+      identifier: decoded.data.identifier,
+      pubkey: decoded.data.pubkey,
+      kind: decoded.data.kind,
+      relays: [...decoded.data.relays ?? []]
+    };
+  }
+  if (decoded.type === "nevent") {
+    return {
+      type: "nevent",
+      value: trimmed,
+      id: decoded.data.id,
+      ...decoded.data.author ? { author: decoded.data.author } : {},
+      ...decoded.data.kind ? { kind: decoded.data.kind } : {},
+      relays: [...decoded.data.relays ?? []]
+    };
+  }
+  throw new Error(`Expected naddr or nevent pointer, got ${decoded.type}.`);
 }
-function previewMessage(raw) {
+async function resolvePajaPointer(value, options = {}) {
+  const pointer = decodePajaPointer(value);
+  const relays = uniqueRelayUrls([...pointer.relays, ...options.relays ?? []]);
+  if (relays.length === 0) {
+    throw new Error("Pointer has no relay hints or enabled configured live relays.");
+  }
+  const pool = options.pool ?? new SimplePool();
+  const ownsPool = options.pool === void 0;
   try {
-    return JSON.stringify(raw);
-  } catch (error) {
-    return `unserializable:${error instanceof Error ? error.message : String(error)}`;
+    const event = await resolvePointerEvent(pointer, pool, relays, normalizeMaxWaitMs(options.maxWaitMs));
+    const blossomServers = [...options.blossomServers ?? []];
+    const resolved = await resolveNapplet({
+      event,
+      cache: await openNappletArtifactCache({ requireStorageEstimate: false }),
+      fetchBlob: (sha256Hex, servers) => fetchBlob([...servers, ...blossomServers], sha256Hex, async (url) => {
+        const response = await (options.fetcher ?? fetch)(url);
+        if (!response.ok) throw new Error(`[paja-runtime] blob ${url}: ${response.status}`);
+        return new Uint8Array(await response.arrayBuffer());
+      })
+    });
+    return {
+      pointer,
+      event,
+      relays,
+      blossomServers,
+      dTag: resolved.dTag,
+      aggregateHash: resolved.aggregateHash,
+      indexHtml: resolved.indexHtml,
+      manifest: resolved.manifest
+    };
+  } finally {
+    if (ownsPool) {
+      pool.close?.(relays);
+      pool.destroy?.();
+    }
   }
 }
-function compactMessageDetail(raw) {
-  const detail = {};
-  for (const [key, value] of Object.entries(raw)) {
-    if (key !== "type" && key !== "id" && value !== void 0) detail[key] = value;
+function injectPajaRuntimeCsp(html, origins) {
+  const grantedOrigins = [...new Set(origins)].sort();
+  const connectSrc = grantedOrigins.length > 0 ? `connect-src ${grantedOrigins.join(" ")}` : "connect-src 'none'";
+  const value = [
+    "default-src 'none'",
+    "script-src 'unsafe-inline' 'wasm-unsafe-eval'",
+    "style-src 'unsafe-inline'",
+    "img-src data: blob:",
+    "font-src data:",
+    connectSrc,
+    "worker-src 'none'",
+    "child-src 'none'",
+    "frame-src 'none'",
+    "media-src 'none'",
+    "object-src 'none'",
+    "manifest-src 'none'",
+    "prefetch-src 'none'",
+    "base-uri 'none'",
+    "form-action 'none'",
+    "frame-ancestors 'self'"
+  ].join("; ");
+  const meta = `<meta http-equiv="Content-Security-Policy" content="${escapeAttribute(value)}">`;
+  if (/<head[^>]*>/i.test(html)) {
+    return html.replace(/<head[^>]*>/i, (open) => `${open}${meta}`);
   }
-  if (Object.keys(detail).length === 0) return "";
-  try {
-    return JSON.stringify(detail);
-  } catch {
-    return "";
+  if (/<html[^>]*>/i.test(html)) {
+    return html.replace(/<html[^>]*>/i, (open) => `${open}<head>${meta}</head>`);
   }
+  return `${meta}${html}`;
 }
-function describeMessageDetail(raw) {
-  if (!isNappletMessage(raw)) return "";
-  const value = raw;
-  for (const key of ["error", "message", "reason"]) {
-    const detail = value[key];
-    if (typeof detail === "string" && detail.length > 0) return detail;
+async function resolvePointerEvent(pointer, pool, relays, maxWaitMs) {
+  const filter = pointer.type === "naddr" ? addressableFilter(pointer) : eventFilter(pointer);
+  const result2 = await queryPointerRelays(pool, relays, filter, maxWaitMs);
+  const event = result2.events.filter((candidate) => matchesPointer(pointer, candidate)).sort((a, b) => b.created_at - a.created_at)[0];
+  if (!event) {
+    if (result2.timedOut) {
+      throw new Error(
+        `Relay resolution timed out after ${maxWaitMs}ms for ${pointer.type} pointer across ${relays.length} relays before complete EOSE.`
+      );
+    }
+    const failures = relayFailureReasons(result2.reasons);
+    if (result2.error || failures.length > 0) {
+      const detail = result2.error instanceof Error ? result2.error.message : result2.error === void 0 ? failures.join("; ") : String(result2.error);
+      throw new Error(`Relay query failed for ${pointer.type} pointer before complete EOSE: ${detail}`);
+    }
+    throw new Error(
+      `All ${relays.length} relays reached EOSE without a matching ${pointer.type} napplet manifest event.`
+    );
   }
-  return raw.type.endsWith(".error") ? compactMessageDetail(value) : "";
+  if (!isNappletManifestKind(event.kind)) {
+    throw new Error(`Pointer resolved kind ${event.kind}; expected ${formatNappletManifestKinds()}.`);
+  }
+  return event;
 }
-function domainEnabled(simulation, domain) {
-  return simulation.capabilities.domains[domain] === true;
+function queryPointerRelays(pool, relays, filter, maxWaitMs) {
+  if (pool.subscribeManyEose) {
+    return queryPointerRelaySubscription(pool, relays, filter, maxWaitMs);
+  }
+  return queryPointerRelaySync(pool, relays, filter, maxWaitMs);
 }
-function getTargetIdentity(config) {
-  return {
-    pubkey: "",
-    dTag: config.window.dTag,
-    aggregateHash: config.window.aggregateHash
-  };
+function queryPointerRelaySubscription(pool, relays, filter, maxWaitMs) {
+  return new Promise((resolve) => {
+    const events = [];
+    let settled = false;
+    let subscription;
+    const finish = (result2) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(deadline);
+      resolve({ events, ...result2 });
+    };
+    const deadline = setTimeout(() => {
+      finish({ reasons: [], timedOut: true });
+      void subscription?.close("Paja pointer relay deadline exceeded");
+    }, maxWaitMs);
+    try {
+      subscription = pool.subscribeManyEose([...relays], filter, {
+        maxWait: maxWaitMs,
+        label: "kehto-paja-runtime",
+        onevent(event) {
+          events.push(event);
+        },
+        onclose(reasons) {
+          finish({ reasons, timedOut: false });
+        }
+      });
+    } catch (error) {
+      finish({ reasons: [], timedOut: false, error });
+    }
+  });
 }
-function appendPajaMessageLog(state, direction, raw, windowId) {
-  if (!state) return;
-  state.messageLog.push({
-    index: state.messageLog.length,
-    timestamp: Date.now(),
-    direction,
-    type: describeMessage(raw),
-    windowId,
-    preview: previewMessage(raw),
-    detail: describeMessageDetail(raw)
+function queryPointerRelaySync(pool, relays, filter, maxWaitMs) {
+  return new Promise((resolve) => {
+    let settled = false;
+    const finish = (result2) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(deadline);
+      resolve(result2);
+    };
+    const deadline = setTimeout(() => {
+      finish({ events: [], reasons: [], timedOut: true });
+    }, maxWaitMs);
+    void pool.querySync([...relays], filter, {
+      maxWait: maxWaitMs,
+      label: "kehto-paja-runtime"
+    }).then(
+      (events) => finish({ events, reasons: [], timedOut: false }),
+      (error) => finish({ events: [], reasons: [], timedOut: false, error })
+    );
   });
-  if (state.messageLog.length > PAJA_LOG_LIMIT) {
-    state.messageLog.splice(0, state.messageLog.length - PAJA_LOG_LIMIT);
+}
+function relayFailureReasons(reasons) {
+  return [...new Set(reasons.map((reason) => reason.trim()).filter((reason) => reason.length > 0 && reason !== "closed automatically on eose").map((reason) => reason.slice(0, 160)))].slice(0, 3);
+}
+function normalizeMaxWaitMs(value) {
+  if (value === void 0) return 5e3;
+  if (!Number.isFinite(value) || value <= 0) {
+    throw new Error("Pointer relay deadline must be a positive number of milliseconds.");
   }
-  renderPajaMessageLog(state);
+  return Math.floor(value);
 }
-function createPajaPostMessageProxy(realWin, state, windowId) {
-  const existing = realToProxy.get(realWin);
-  if (existing) {
-    proxyContexts.set(existing, { state, windowId });
-    return existing;
+function addressableFilter(pointer) {
+  if (pointer.kind !== NAPPLET_KIND_NAMED) {
+    throw new Error(`naddr kind ${pointer.kind} is not a named NIP-5D napplet manifest kind.`);
   }
-  const proxy = new Proxy(realWin, {
-    get(target, prop) {
-      if (prop === "postMessage") {
-        return (msg, targetOrigin, transfer) => {
-          const context = proxyContexts.get(proxy);
-          appendPajaMessageLog(
-            context?.state ?? state,
-            "shell->napplet",
-            redactPajaMessageForLog(msg),
-            context?.windowId ?? windowId
-          );
-          return target.postMessage(msg, targetOrigin, transfer);
-        };
-      }
-      try {
-        const val = Reflect.get(target, prop, target);
-        return typeof val === "function" ? val.bind(target) : val;
-      } catch {
+  return {
+    kinds: [NAPPLET_KIND_NAMED],
+    authors: [pointer.pubkey],
+    "#d": [pointer.identifier],
+    limit: 1
+  };
+}
+function eventFilter(pointer) {
+  return {
+    ids: [pointer.id],
+    ...pointer.kind ? { kinds: [pointer.kind] } : {},
+    ...pointer.author ? { authors: [pointer.author] } : {},
+    limit: 1
+  };
+}
+function matchesPointer(pointer, event) {
+  if (pointer.type === "nevent") {
+    if (event.id !== pointer.id) return false;
+    if (pointer.author && event.pubkey !== pointer.author) return false;
+    if (pointer.kind && event.kind !== pointer.kind) return false;
+    return true;
+  }
+  return event.kind === pointer.kind && event.pubkey === pointer.pubkey && event.tags.some((tag) => tag[0] === "d" && tag[1] === pointer.identifier);
+}
+function uniqueRelayUrls(values) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const value of values) {
+    const url = normalizeRelayUrl2(value);
+    if (!url || seen.has(url)) continue;
+    seen.add(url);
+    out.push(url);
+  }
+  return out;
+}
+function normalizeRelayUrl2(value) {
+  const raw = value.trim();
+  if (!raw) return void 0;
+  try {
+    const url = new URL(raw);
+    if (url.protocol !== "wss:" && url.protocol !== "ws:") return void 0;
+    url.hash = "";
+    url.search = "";
+    return url.href.replace(/\/$/, "");
+  } catch {
+    return void 0;
+  }
+}
+function escapeAttribute(value) {
+  return value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
+}
+function formatNappletManifestKinds() {
+  return PAJA_NAPPLET_MANIFEST_KINDS.join(" / ");
+}
+
+// src/browser-target-frame.ts
+function resolvePajaFrameEnvironment(hooks, identity) {
+  if (!identity.dTag || !identity.aggregateHash) {
+    throw new Error("Paja frame identity requires a dTag and aggregate hash");
+  }
+  return resolveShellEnvironment(hooks, identity);
+}
+function getTargetIdentity(config, resolvedTarget) {
+  return {
+    pubkey: "",
+    dTag: resolvedTarget?.dTag ?? config.window.dTag,
+    aggregateHash: resolvedTarget?.aggregateHash ?? config.window.aggregateHash
+  };
+}
+function getTargetOriginIdentity(config, resolvedTarget) {
+  const target = getTargetIdentity(config, resolvedTarget);
+  return Object.freeze({ dTag: target.dTag, aggregateHash: target.aggregateHash });
+}
+function registerFrameForGeneration(frame, config, generation, identity, environment, windowId = `${config.window.id}:${generation}`) {
+  const win = frame.contentWindow;
+  if (!win) return null;
+  originRegistry.register(win, windowId, identity);
+  originRegistry.setEnvironment(win, environment);
+  return windowId;
+}
+async function navigateFrame(frame, config, generation, adapter, resolvedTarget, windowId, isCurrent, onRegistered) {
+  const identity = getTargetOriginIdentity(config, resolvedTarget);
+  const environment = resolvePajaFrameEnvironment(adapter, identity);
+  const domains = environment.capabilities.domains;
+  if (config.target.mode === "runtime-pointer") {
+    if (!resolvedTarget) {
+      frame.removeAttribute("src");
+      frame.srcdoc = "<!doctype html><html><body></body></html>";
+      return null;
+    }
+    if (isCurrent && !isCurrent()) return null;
+    const registeredWindowId2 = registerFrameForGeneration(frame, config, generation, identity, environment, windowId);
+    onRegistered?.(registeredWindowId2);
+    frame.removeAttribute("src");
+    frame.srcdoc = injectNappletNamespacePrelude(
+      injectPajaRuntimeCsp(
+        resolvedTarget.indexHtml,
+        connectOrigins([...resolvedTarget.relays, ...resolvedTarget.blossomServers])
+      ),
+      { domains }
+    );
+    return registeredWindowId2;
+  }
+  const html = await fetchTargetHtml();
+  if (isCurrent && !isCurrent()) return null;
+  const registeredWindowId = registerFrameForGeneration(frame, config, generation, identity, environment, windowId);
+  onRegistered?.(registeredWindowId);
+  frame.removeAttribute("src");
+  frame.srcdoc = injectNappletNamespacePrelude(
+    injectBaseHref(html, config.target.url),
+    { domains }
+  );
+  return registeredWindowId;
+}
+function renderTargetErrorHtml(error) {
+  const message = error instanceof Error ? error.message : String(error);
+  return `<!doctype html><html><body><pre>${escapeHtml(message)}</pre></body></html>`;
+}
+function connectOrigins(urls) {
+  const out = /* @__PURE__ */ new Set();
+  for (const value of urls) {
+    try {
+      const url = new URL(value);
+      if (url.protocol === "wss:" || url.protocol === "ws:") {
+        out.add(value.replace(/\/$/, ""));
+      } else {
+        out.add(url.origin);
+      }
+    } catch {
+    }
+  }
+  return [...out];
+}
+async function fetchTargetHtml() {
+  const response = await fetch(new URL("./__kehto/target.html", window.location.href), {
+    cache: "no-store",
+    headers: {
+      accept: "text/html, application/xhtml+xml;q=0.9, */*;q=0.8"
+    }
+  });
+  if (!response.ok) {
+    throw new Error(`Paja target fetch failed: ${response.status} ${response.statusText}`);
+  }
+  return response.text();
+}
+function injectBaseHref(html, targetUrl) {
+  const base = `<base href="${escapeAttribute2(targetUrl)}">`;
+  if (/<head[^>]*>/i.test(html)) {
+    return html.replace(/<head[^>]*>/i, (open) => `${open}${base}`);
+  }
+  if (/<html[^>]*>/i.test(html)) {
+    return html.replace(/<html[^>]*>/i, (open) => `${open}<head>${base}</head>`);
+  }
+  return `${base}${html}`;
+}
+function escapeAttribute2(value) {
+  return escapeHtml(value).replaceAll('"', "&quot;");
+}
+function escapeHtml(value) {
+  return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
+}
+
+// src/browser-devtools.ts
+var PAJA_LOG_LIMIT = 500;
+var proxyToReal = /* @__PURE__ */ new WeakMap();
+var realToProxy = /* @__PURE__ */ new WeakMap();
+var proxyContexts = /* @__PURE__ */ new WeakMap();
+function isNappletMessage(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) && typeof value.type === "string";
+}
+function describeMessage(raw) {
+  if (isNappletMessage(raw)) return raw.type;
+  if (Array.isArray(raw) && typeof raw[0] === "string") return raw[0];
+  return "unknown";
+}
+function previewMessage(raw) {
+  try {
+    return JSON.stringify(raw);
+  } catch (error) {
+    return `unserializable:${error instanceof Error ? error.message : String(error)}`;
+  }
+}
+function compactMessageDetail(raw) {
+  const detail = {};
+  for (const [key, value] of Object.entries(raw)) {
+    if (key !== "type" && key !== "id" && value !== void 0) detail[key] = value;
+  }
+  if (Object.keys(detail).length === 0) return "";
+  try {
+    return JSON.stringify(detail);
+  } catch {
+    return "";
+  }
+}
+function describeMessageDetail(raw) {
+  if (!isNappletMessage(raw)) return "";
+  const value = raw;
+  for (const key of ["error", "message", "reason"]) {
+    const detail = value[key];
+    if (typeof detail === "string" && detail.length > 0) return detail;
+  }
+  return raw.type.endsWith(".error") ? compactMessageDetail(value) : "";
+}
+function domainEnabled(simulation, domain) {
+  return simulation.capabilities.domains[domain] === true;
+}
+function appendPajaMessageLog(state, direction, raw, windowId) {
+  if (!state) return;
+  state.messageLog.push({
+    index: state.messageLog.length,
+    timestamp: Date.now(),
+    direction,
+    type: describeMessage(raw),
+    windowId,
+    preview: previewMessage(raw),
+    detail: describeMessageDetail(raw)
+  });
+  if (state.messageLog.length > PAJA_LOG_LIMIT) {
+    state.messageLog.splice(0, state.messageLog.length - PAJA_LOG_LIMIT);
+  }
+  renderPajaMessageLog(state);
+}
+function createPajaPostMessageProxy(realWin, state, windowId) {
+  const existing = realToProxy.get(realWin);
+  if (existing) {
+    proxyContexts.set(existing, { state, windowId });
+    return existing;
+  }
+  const proxy = new Proxy(realWin, {
+    get(target, prop) {
+      if (prop === "postMessage") {
+        return (msg, targetOrigin, transfer) => {
+          const context = proxyContexts.get(proxy);
+          appendPajaMessageLog(
+            context?.state ?? state,
+            "shell->napplet",
+            redactPajaMessageForLog(msg),
+            context?.windowId ?? windowId
+          );
+          return target.postMessage(msg, targetOrigin, transfer);
+        };
+      }
+      try {
+        const val = Reflect.get(target, prop, target);
+        return typeof val === "function" ? val.bind(target) : val;
+      } catch {
         return void 0;
       }
     }
@@ -20134,7 +20486,7 @@ function renderInterfaceControls(state) {
 function renderAclControls(state, bridge) {
   const container = document.getElementById("acl-controls");
   if (!container) return;
-  const identity = getTargetIdentity(state.config);
+  const identity = getTargetIdentity(state.config, state.resolvedTarget);
   container.replaceChildren(...ALL_CAPABILITIES.map((capability) => {
     const allowed2 = bridge?.runtime.aclState.check(
       identity.pubkey,
@@ -21391,251 +21743,6 @@ function runtimeTabWindowId(config, tab) {
   return `${config.window.id}:${tab.id}:${tab.generation}`;
 }
 
-// src/runtime-resolver.ts
-var PAJA_NAPPLET_MANIFEST_KINDS = NAPPLET_KINDS;
-function decodePajaPointer(value) {
-  const trimmed = value.trim();
-  const decoded = decode(trimmed);
-  if (decoded.type === "naddr") {
-    return {
-      type: "naddr",
-      value: trimmed,
-      identifier: decoded.data.identifier,
-      pubkey: decoded.data.pubkey,
-      kind: decoded.data.kind,
-      relays: [...decoded.data.relays ?? []]
-    };
-  }
-  if (decoded.type === "nevent") {
-    return {
-      type: "nevent",
-      value: trimmed,
-      id: decoded.data.id,
-      ...decoded.data.author ? { author: decoded.data.author } : {},
-      ...decoded.data.kind ? { kind: decoded.data.kind } : {},
-      relays: [...decoded.data.relays ?? []]
-    };
-  }
-  throw new Error(`Expected naddr or nevent pointer, got ${decoded.type}.`);
-}
-async function resolvePajaPointer(value, options = {}) {
-  const pointer = decodePajaPointer(value);
-  const relays = uniqueRelayUrls([...pointer.relays, ...options.relays ?? []]);
-  if (relays.length === 0) {
-    throw new Error("Pointer has no relay hints or enabled configured live relays.");
-  }
-  const pool = options.pool ?? new SimplePool();
-  const ownsPool = options.pool === void 0;
-  try {
-    const event = await resolvePointerEvent(pointer, pool, relays, normalizeMaxWaitMs(options.maxWaitMs));
-    const blossomServers = [...options.blossomServers ?? []];
-    const resolved = await resolveNapplet({
-      event,
-      cache: await openNappletArtifactCache({ requireStorageEstimate: false }),
-      fetchBlob: (sha256Hex, servers) => fetchBlob([...servers, ...blossomServers], sha256Hex, async (url) => {
-        const response = await (options.fetcher ?? fetch)(url);
-        if (!response.ok) throw new Error(`[paja-runtime] blob ${url}: ${response.status}`);
-        return new Uint8Array(await response.arrayBuffer());
-      })
-    });
-    return {
-      pointer,
-      event,
-      relays,
-      blossomServers,
-      dTag: resolved.dTag,
-      aggregateHash: resolved.aggregateHash,
-      indexHtml: resolved.indexHtml,
-      manifest: resolved.manifest
-    };
-  } finally {
-    if (ownsPool) {
-      pool.close?.(relays);
-      pool.destroy?.();
-    }
-  }
-}
-function injectPajaRuntimeCsp(html, origins) {
-  const grantedOrigins = [...new Set(origins)].sort();
-  const connectSrc = grantedOrigins.length > 0 ? `connect-src ${grantedOrigins.join(" ")}` : "connect-src 'none'";
-  const value = [
-    "default-src 'none'",
-    "script-src 'unsafe-inline'",
-    "style-src 'unsafe-inline'",
-    "img-src data: blob:",
-    "font-src data:",
-    connectSrc,
-    "worker-src 'none'",
-    "child-src 'none'",
-    "frame-src 'none'",
-    "media-src 'none'",
-    "object-src 'none'",
-    "manifest-src 'none'",
-    "prefetch-src 'none'",
-    "base-uri 'none'",
-    "form-action 'none'",
-    "frame-ancestors 'self'"
-  ].join("; ");
-  const meta = `<meta http-equiv="Content-Security-Policy" content="${escapeAttribute(value)}">`;
-  if (/<head[^>]*>/i.test(html)) {
-    return html.replace(/<head[^>]*>/i, (open) => `${open}${meta}`);
-  }
-  if (/<html[^>]*>/i.test(html)) {
-    return html.replace(/<html[^>]*>/i, (open) => `${open}<head>${meta}</head>`);
-  }
-  return `${meta}${html}`;
-}
-async function resolvePointerEvent(pointer, pool, relays, maxWaitMs) {
-  const filter = pointer.type === "naddr" ? addressableFilter(pointer) : eventFilter(pointer);
-  const result2 = await queryPointerRelays(pool, relays, filter, maxWaitMs);
-  const event = result2.events.filter((candidate) => matchesPointer(pointer, candidate)).sort((a, b) => b.created_at - a.created_at)[0];
-  if (!event) {
-    if (result2.timedOut) {
-      throw new Error(
-        `Relay resolution timed out after ${maxWaitMs}ms for ${pointer.type} pointer across ${relays.length} relays before complete EOSE.`
-      );
-    }
-    const failures = relayFailureReasons(result2.reasons);
-    if (result2.error || failures.length > 0) {
-      const detail = result2.error instanceof Error ? result2.error.message : result2.error === void 0 ? failures.join("; ") : String(result2.error);
-      throw new Error(`Relay query failed for ${pointer.type} pointer before complete EOSE: ${detail}`);
-    }
-    throw new Error(
-      `All ${relays.length} relays reached EOSE without a matching ${pointer.type} napplet manifest event.`
-    );
-  }
-  if (!isNappletManifestKind(event.kind)) {
-    throw new Error(`Pointer resolved kind ${event.kind}; expected ${formatNappletManifestKinds()}.`);
-  }
-  return event;
-}
-function queryPointerRelays(pool, relays, filter, maxWaitMs) {
-  if (pool.subscribeManyEose) {
-    return queryPointerRelaySubscription(pool, relays, filter, maxWaitMs);
-  }
-  return queryPointerRelaySync(pool, relays, filter, maxWaitMs);
-}
-function queryPointerRelaySubscription(pool, relays, filter, maxWaitMs) {
-  return new Promise((resolve) => {
-    const events = [];
-    let settled = false;
-    let subscription;
-    const finish = (result2) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(deadline);
-      resolve({ events, ...result2 });
-    };
-    const deadline = setTimeout(() => {
-      finish({ reasons: [], timedOut: true });
-      void subscription?.close("Paja pointer relay deadline exceeded");
-    }, maxWaitMs);
-    try {
-      subscription = pool.subscribeManyEose([...relays], filter, {
-        maxWait: maxWaitMs,
-        label: "kehto-paja-runtime",
-        onevent(event) {
-          events.push(event);
-        },
-        onclose(reasons) {
-          finish({ reasons, timedOut: false });
-        }
-      });
-    } catch (error) {
-      finish({ reasons: [], timedOut: false, error });
-    }
-  });
-}
-function queryPointerRelaySync(pool, relays, filter, maxWaitMs) {
-  return new Promise((resolve) => {
-    let settled = false;
-    const finish = (result2) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(deadline);
-      resolve(result2);
-    };
-    const deadline = setTimeout(() => {
-      finish({ events: [], reasons: [], timedOut: true });
-    }, maxWaitMs);
-    void pool.querySync([...relays], filter, {
-      maxWait: maxWaitMs,
-      label: "kehto-paja-runtime"
-    }).then(
-      (events) => finish({ events, reasons: [], timedOut: false }),
-      (error) => finish({ events: [], reasons: [], timedOut: false, error })
-    );
-  });
-}
-function relayFailureReasons(reasons) {
-  return [...new Set(reasons.map((reason) => reason.trim()).filter((reason) => reason.length > 0 && reason !== "closed automatically on eose").map((reason) => reason.slice(0, 160)))].slice(0, 3);
-}
-function normalizeMaxWaitMs(value) {
-  if (value === void 0) return 5e3;
-  if (!Number.isFinite(value) || value <= 0) {
-    throw new Error("Pointer relay deadline must be a positive number of milliseconds.");
-  }
-  return Math.floor(value);
-}
-function addressableFilter(pointer) {
-  if (pointer.kind !== NAPPLET_KIND_NAMED) {
-    throw new Error(`naddr kind ${pointer.kind} is not a named NIP-5D napplet manifest kind.`);
-  }
-  return {
-    kinds: [NAPPLET_KIND_NAMED],
-    authors: [pointer.pubkey],
-    "#d": [pointer.identifier],
-    limit: 1
-  };
-}
-function eventFilter(pointer) {
-  return {
-    ids: [pointer.id],
-    ...pointer.kind ? { kinds: [pointer.kind] } : {},
-    ...pointer.author ? { authors: [pointer.author] } : {},
-    limit: 1
-  };
-}
-function matchesPointer(pointer, event) {
-  if (pointer.type === "nevent") {
-    if (event.id !== pointer.id) return false;
-    if (pointer.author && event.pubkey !== pointer.author) return false;
-    if (pointer.kind && event.kind !== pointer.kind) return false;
-    return true;
-  }
-  return event.kind === pointer.kind && event.pubkey === pointer.pubkey && event.tags.some((tag) => tag[0] === "d" && tag[1] === pointer.identifier);
-}
-function uniqueRelayUrls(values) {
-  const out = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const value of values) {
-    const url = normalizeRelayUrl2(value);
-    if (!url || seen.has(url)) continue;
-    seen.add(url);
-    out.push(url);
-  }
-  return out;
-}
-function normalizeRelayUrl2(value) {
-  const raw = value.trim();
-  if (!raw) return void 0;
-  try {
-    const url = new URL(raw);
-    if (url.protocol !== "wss:" && url.protocol !== "ws:") return void 0;
-    url.hash = "";
-    url.search = "";
-    return url.href.replace(/\/$/, "");
-  } catch {
-    return void 0;
-  }
-}
-function escapeAttribute(value) {
-  return value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
-}
-function formatNappletManifestKinds() {
-  return PAJA_NAPPLET_MANIFEST_KINDS.join(" / ");
-}
-
 // src/browser-intent-host.ts
 function createPajaIntentTargetOptions(getState, getContext, effects = {}) {
   return {
@@ -21815,113 +21922,6 @@ function createPajaThemeBroadcastLink() {
   };
 }
 
-// src/browser-target-frame.ts
-function resolvePajaFrameEnvironment(hooks, identity) {
-  if (!identity.dTag || !identity.aggregateHash) {
-    throw new Error("Paja frame identity requires a dTag and aggregate hash");
-  }
-  return resolveShellEnvironment(hooks, identity);
-}
-function getTargetIdentity2(config, resolvedTarget) {
-  return {
-    pubkey: "",
-    dTag: resolvedTarget?.dTag ?? config.window.dTag,
-    aggregateHash: resolvedTarget?.aggregateHash ?? config.window.aggregateHash
-  };
-}
-function getTargetOriginIdentity(config, resolvedTarget) {
-  const target = getTargetIdentity2(config, resolvedTarget);
-  return Object.freeze({ dTag: target.dTag, aggregateHash: target.aggregateHash });
-}
-function registerFrameForGeneration(frame, config, generation, identity, environment, windowId = `${config.window.id}:${generation}`) {
-  const win = frame.contentWindow;
-  if (!win) return null;
-  originRegistry.register(win, windowId, identity);
-  originRegistry.setEnvironment(win, environment);
-  return windowId;
-}
-async function navigateFrame(frame, config, generation, adapter, resolvedTarget, windowId, isCurrent, onRegistered) {
-  const identity = getTargetOriginIdentity(config, resolvedTarget);
-  const environment = resolvePajaFrameEnvironment(adapter, identity);
-  const domains = environment.capabilities.domains;
-  if (config.target.mode === "runtime-pointer") {
-    if (!resolvedTarget) {
-      frame.removeAttribute("src");
-      frame.srcdoc = "<!doctype html><html><body></body></html>";
-      return null;
-    }
-    if (isCurrent && !isCurrent()) return null;
-    const registeredWindowId2 = registerFrameForGeneration(frame, config, generation, identity, environment, windowId);
-    onRegistered?.(registeredWindowId2);
-    frame.removeAttribute("src");
-    frame.srcdoc = injectNappletNamespacePrelude(
-      injectPajaRuntimeCsp(
-        resolvedTarget.indexHtml,
-        connectOrigins([...resolvedTarget.relays, ...resolvedTarget.blossomServers])
-      ),
-      { domains }
-    );
-    return registeredWindowId2;
-  }
-  const html = await fetchTargetHtml();
-  if (isCurrent && !isCurrent()) return null;
-  const registeredWindowId = registerFrameForGeneration(frame, config, generation, identity, environment, windowId);
-  onRegistered?.(registeredWindowId);
-  frame.removeAttribute("src");
-  frame.srcdoc = injectNappletNamespacePrelude(
-    injectBaseHref(html, config.target.url),
-    { domains }
-  );
-  return registeredWindowId;
-}
-function renderTargetErrorHtml(error) {
-  const message = error instanceof Error ? error.message : String(error);
-  return `<!doctype html><html><body><pre>${escapeHtml(message)}</pre></body></html>`;
-}
-function connectOrigins(urls) {
-  const out = /* @__PURE__ */ new Set();
-  for (const value of urls) {
-    try {
-      const url = new URL(value);
-      if (url.protocol === "wss:" || url.protocol === "ws:") {
-        out.add(value.replace(/\/$/, ""));
-      } else {
-        out.add(url.origin);
-      }
-    } catch {
-    }
-  }
-  return [...out];
-}
-async function fetchTargetHtml() {
-  const response = await fetch(new URL("./__kehto/target.html", window.location.href), {
-    cache: "no-store",
-    headers: {
-      accept: "text/html, application/xhtml+xml;q=0.9, */*;q=0.8"
-    }
-  });
-  if (!response.ok) {
-    throw new Error(`Paja target fetch failed: ${response.status} ${response.statusText}`);
-  }
-  return response.text();
-}
-function injectBaseHref(html, targetUrl) {
-  const base = `<base href="${escapeAttribute2(targetUrl)}">`;
-  if (/<head[^>]*>/i.test(html)) {
-    return html.replace(/<head[^>]*>/i, (open) => `${open}${base}`);
-  }
-  if (/<html[^>]*>/i.test(html)) {
-    return html.replace(/<html[^>]*>/i, (open) => `${open}<head>${base}</head>`);
-  }
-  return `${base}${html}`;
-}
-function escapeAttribute2(value) {
-  return escapeHtml(value).replaceAll('"', "&quot;");
-}
-function escapeHtml(value) {
-  return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
-}
-
 // src/browser-target-diagnostics.ts
 async function reportTargetCorsDiagnostic(state) {
   let diagnostic;
@@ -22710,7 +22710,7 @@ function createPajaBrowserState(context) {
       setRuntimeDomainEnabled(this, context, domain, enabled);
     },
     setAclCapability(capability, enabled) {
-      const identity = getTargetIdentity2(config, this.resolvedTarget);
+      const identity = getTargetIdentity(config, this.resolvedTarget);
       if (enabled) bridge.runtime.aclState.grant(identity.pubkey, identity.dTag, identity.aggregateHash, capability);
       else bridge.runtime.aclState.revoke(identity.pubkey, identity.dTag, identity.aggregateHash, capability);
       bridge.runtime.aclState.persist();
@@ -22784,7 +22784,7 @@ async function installPajaHost() {
   );
   const getWindowIdentity = (windowId) => {
     const tabTarget = stateRef?.tabs.find((tab) => tab.windowId === windowId)?.resolvedTarget;
-    return getTargetIdentity2(config, tabTarget ?? stateRef?.resolvedTarget);
+    return getTargetIdentity(config, tabTarget ?? stateRef?.resolvedTarget);
   };
   const notifyController = createPajaNotifyController({
     confirm: confirmationController.confirm,