@kehto/paja 0.17.1 → 0.19.0

package/dist/index.d.ts

@@ -1,9 +1,10 @@
-import { P as PajaRawOptions, b as PajaHostConfig } from './server-Ia5n1Bqv.js';
-export { D as DEFAULT_PAJA_AGGREGATE_HASH, c as DEFAULT_PAJA_DTAG, d as DEFAULT_PAJA_HOST, e as DEFAULT_PAJA_PORT, f as DEFAULT_PAJA_RUNTIME_WAIT_MS, g as DEFAULT_PAJA_WINDOW_ID, h as DEFAULT_READY_TIMEOUT_MS, J as JsonPrimitive, i as JsonRecord, j as JsonValue, k as PAJA_SIMULATION_DOMAINS, l as PajaCapabilityDomain, a as PajaCommand, m as PajaHmrStrategy, n as PajaOptions, o as PajaOptionsError, p as PajaPointerRuntimeConfig, q as PajaServer, r as PajaServerOptions, t as PajaSimulation, u as PajaSimulationError, v as PajaSimulationRawOptions, x as PajaTargetMode, R as ReadinessError, y as ReadinessFetch, W as WaitForTargetUrlOptions, z as createPajaHostConfig, A as createPajaRuntimeHostConfig, B as formatPajaUrl, C as normalizePajaOptions, E as normalizePajaSimulation, s as startPajaServer, F as summarizePajaSimulation, w as waitForTargetUrl } from './server-Ia5n1Bqv.js';
+import { P as PajaRawOptions, b as PajaHostConfig } from './server-5j5uoy2Z.js';
+export { D as DEFAULT_PAJA_AGGREGATE_HASH, c as DEFAULT_PAJA_DTAG, d as DEFAULT_PAJA_HOST, e as DEFAULT_PAJA_PORT, f as DEFAULT_PAJA_RUNTIME_WAIT_MS, g as DEFAULT_PAJA_WINDOW_ID, h as DEFAULT_READY_TIMEOUT_MS, J as JsonPrimitive, i as JsonRecord, j as JsonValue, k as PAJA_SIMULATION_DOMAINS, l as PajaCapabilityDomain, a as PajaCommand, m as PajaHmrStrategy, n as PajaOptions, o as PajaOptionsError, p as PajaPointerRuntimeConfig, q as PajaServer, r as PajaServerOptions, t as PajaSimulation, u as PajaSimulationError, v as PajaSimulationRawOptions, x as PajaTargetMode, R as ReadinessError, y as ReadinessFetch, W as WaitForTargetUrlOptions, z as createPajaHostConfig, A as createPajaRuntimeHostConfig, B as formatPajaUrl, C as normalizePajaOptions, E as normalizePajaSimulation, s as startPajaServer, F as summarizePajaSimulation, w as waitForTargetUrl } from './server-5j5uoy2Z.js';
 import { NostrEvent } from 'nostr-tools';
 import { Filter } from 'nostr-tools/filter';
 import { ResolvedNapplet } from '@kehto/nip/5d';
 import { ShellCapabilities } from '@kehto/shell';
+export { NappletCspDirective, NappletCspDirectives, NappletCspOptions } from '@kehto/shell';
 import { IntentCatalogEntry, IntentTargetController, IntentDispatchParams, IntentTargetDispatch } from '@kehto/services';
 
 /**
@@ -69,7 +70,7 @@ interface PajaResolvedPointer {
     readonly blossomServers: readonly string[];
     /** Resolved manifest `d` tag. */
     readonly dTag: string;
-    /** Verified NIP-5A aggregate hash. */
+    /** Verified content identity: current artifact hash or legacy NIP-5A aggregate. */
     readonly aggregateHash: string;
     /** Verified target `/index.html` content. */
     readonly indexHtml: string;
@@ -127,8 +128,7 @@ declare function decodePajaPointer(value: string): PajaDecodedPointer;
 declare function resolvePajaPointer(value: string, options?: ResolvePajaPointerOptions): Promise<PajaResolvedPointer>;
 /**
  * Inject Kehto's Class-1 CSP for verified runtime-pointer srcdoc output.
- * NIP-5D mandates the verified srcdoc and opaque sandbox, but this baseline CSP
- * is Kehto policy rather than a protocol requirement.
+ * Delegates to the shell policy, which enforces NIP-5D CSP recommendations.
  *
  * @param html - Verified target HTML.
  * @param origins - Origins the resolved target may connect to.
@@ -164,6 +164,127 @@ declare function getMissingAdvertisedDomains(capabilities: ShellCapabilities): s
  */
 declare function getMissingServices(services: readonly string[]): string[];
 
+/**
+ * A napplet opened from a local `index.html` file in Paja runtime-pointer mode.
+ *
+ * Spec-gap decision: NIP-5D's Identity section resolves a signed manifest,
+ * fetches the artifact from Blossom, and verifies its hash before it creates
+ * the iframe. A local file has no manifest or signature, so it never takes that
+ * path. Paja treats local files as an unsigned development target. Identity is
+ * still computed from the file's own bytes (never taken from the host), the
+ * file loads through the same sandboxed `srcdoc` + CSP + `window.napplet`
+ * prelude path as verified pointers, and it never enters the installed
+ * napplet catalog. See `docs/policies/NIP-5D-CONFORMANCE.md`.
+ */
+interface PajaLocalTarget {
+    /** Discriminant separating local files from relay/Blossom-resolved pointers. */
+    readonly source: 'local';
+    /** File name as reported by the browser file picker or drop event. */
+    readonly fileName: string;
+    /** `<meta name="napplet-id">` value, or `local-<file stem>` when absent. */
+    readonly dTag: string;
+    /** NIP-5A aggregate hash over the single `/index.html` path entry. */
+    readonly aggregateHash: string;
+    /** sha256 of the exact file bytes, lowercase hex. */
+    readonly sha256: string;
+    /** Decoded file content assigned to `srcdoc` after CSP and prelude injection. */
+    readonly indexHtml: string;
+    /** Always empty: a local file carries no relay hints. */
+    readonly relays: readonly string[];
+    /** Always empty: a local file carries no Blossom hints. */
+    readonly blossomServers: readonly string[];
+    /** Relative `src`/`href` references that cannot load from `srcdoc`. */
+    readonly relativeAssets: readonly string[];
+}
+/** Either a verified pointer target or a local development file target. */
+type PajaRuntimeTarget = PajaResolvedPointer | PajaLocalTarget;
+/**
+ * File input accepted by {@link createPajaLocalTarget}. A browser `File`
+ * satisfies the first shape; tests and tools may pass text directly.
+ */
+type PajaLocalFileInput = {
+    readonly name: string;
+    readonly type?: string;
+    arrayBuffer(): Promise<ArrayBuffer>;
+} | {
+    readonly name: string;
+    readonly type?: string;
+    readonly text: string;
+};
+/** Hint appended to local-file errors and relative-asset warnings. */
+declare const PAJA_LOCAL_SINGLE_FILE_HINT = "Paja opens self-contained single-file index.html only; relative scripts, styles, and images do not load.";
+/**
+ * Return whether a runtime target was opened from a local file.
+ *
+ * @param target - Runtime target, or any object carrying a `source` field.
+ * @returns `true` for {@link PajaLocalTarget} values.
+ *
+ * @example
+ * ```ts
+ * if (isPajaLocalTarget(tab.resolvedTarget)) console.log(tab.resolvedTarget.fileName);
+ * ```
+ */
+declare function isPajaLocalTarget(target: object | null | undefined): target is PajaLocalTarget;
+/**
+ * Return whether a file name or MIME type identifies an HTML document.
+ *
+ * @param file - File name and optional MIME type.
+ * @returns `true` for `.html`/`.htm` names or a `text/html` type.
+ *
+ * @example
+ * ```ts
+ * isPajaLocalHtmlFile({ name: 'index.html' }); // true
+ * ```
+ */
+declare function isPajaLocalHtmlFile(file: {
+    readonly name: string;
+    readonly type?: string;
+}): boolean;
+/**
+ * Build a local runtime target from an `index.html` file.
+ *
+ * The identity is computed from the file bytes: `sha256` is the digest of the
+ * exact bytes and `aggregateHash` is the NIP-5A aggregate over
+ * `[{ path: '/index.html', sha256 }]`, the same derivation Paja's resolver
+ * verifies for a published single-file napplet. Editing the file gives it a
+ * new identity.
+ *
+ * @param file - Browser `File` or `{ name, text }`.
+ * @returns The local target.
+ * @throws Error when the file is not HTML or is empty.
+ *
+ * @example
+ * ```ts
+ * const target = await createPajaLocalTarget({ name: 'index.html', text: '<!doctype html>…' });
+ * target.dTag; // 'local-index'
+ * ```
+ */
+declare function createPajaLocalTarget(file: PajaLocalFileInput): Promise<PajaLocalTarget>;
+/**
+ * Read the NIP-5D publishing metadata `<meta name="napplet-id" content="…">`.
+ *
+ * @param html - HTML document text.
+ * @returns The trimmed id, or `undefined` when absent or blank.
+ *
+ * @example
+ * ```ts
+ * readNappletIdMeta('<meta name="napplet-id" content="feed">'); // 'feed'
+ * ```
+ */
+declare function readNappletIdMeta(html: string): string | undefined;
+/**
+ * List relative `src`/`href` references that a `srcdoc` document cannot load.
+ *
+ * @param html - HTML document text.
+ * @returns Up to eight distinct relative references, in document order.
+ *
+ * @example
+ * ```ts
+ * findRelativeAssetReferences('<script src="./main.js"></script>'); // ['./main.js']
+ * ```
+ */
+declare function findRelativeAssetReferences(html: string): string[];
+
 /**
  * Persistent Paja catalog of resolver-verified napplet installations.
  *
@@ -186,6 +307,8 @@ interface InstalledNappletRecord {
     readonly title?: string;
     /** Verified NAP domains required by the artifact. */
     readonly requires: readonly string[];
+    /** Optional integrations; declarations do not grant capabilities. */
+    readonly optional?: readonly string[];
     /** Exact manifest convention contracts used for intent eligibility. */
     readonly archetypes: readonly {
         readonly slug: string;
@@ -223,8 +346,13 @@ declare class InstalledNappletCatalog {
      * token, so even a same-identity replacement cannot pass this check.
      */
     validateCurrent(selected: InstalledNappletRecord, target: Pick<InstalledNappletRecord, 'dTag' | 'aggregateHash'>): InstalledNappletRecord | null;
-    /** Return exact handler candidates derived only from installed manifests. */
-    intentCatalog(): IntentCatalogEntry[];
+    /**
+     * Return declared handlers whose host environment can receive intent delivery.
+     * @param canReceiveIntent - Resolve intent availability for each verified identity;
+     * without host policy, return declared candidates for the host to filter.
+     * @returns Named intent candidates usable under the supplied host policy.
+     */
+    intentCatalog(canReceiveIntent?: (record: InstalledNappletRecord) => boolean): IntentCatalogEntry[];
     /** Subscribe to explicit install and artifact-removal changes. */
     onChanged(listener: InstalledNappletCatalogListener): () => void;
     private notify;
@@ -343,4 +471,4 @@ type PajaTargetCorsFetch = (input: string, init: {
  */
 declare function probeTargetCors(targetUrl: string, fetchImpl?: PajaTargetCorsFetch): Promise<PajaTargetCorsDiagnostic>;
 
-export { BrowserIntentController, type BrowserIntentControllerOptions, type BrowserIntentGeneration, type BrowserIntentTerminalReason, InstalledNappletCatalog, type InstalledNappletCatalogListener, type InstalledNappletRecord, PAJA_ADVERTISED_DOMAINS, PAJA_COMPATIBILITY_ALIASES, PAJA_HANDSHAKE_DOMAINS, PAJA_NAPPLET_MANIFEST_KIND, PAJA_NAPPLET_MANIFEST_KINDS, PAJA_REQUIRED_SERVICES, PAJA_TARGET_CORS_HINT, PAJA_UPSTREAM_WEB_DOMAINS, type PajaDecodedPointer, PajaHostConfig, type PajaPointerRelayPool, PajaRawOptions, type PajaResolvedPointer, type PajaTargetCorsDiagnostic, type PajaTargetCorsFetch, type PajaTargetCorsStatus, type ResolvePajaPointerOptions, classifyTargetCors, decodePajaPointer, getMissingAdvertisedDomains, getMissingServices, injectPajaRuntimeCsp, loadPajaConfigFile, mergePajaRawOptions, probeTargetCors, renderPajaHtml, resolvePajaPointer, resolvePajaRawOptions };
+export { BrowserIntentController, type BrowserIntentControllerOptions, type BrowserIntentGeneration, type BrowserIntentTerminalReason, InstalledNappletCatalog, type InstalledNappletCatalogListener, type InstalledNappletRecord, PAJA_ADVERTISED_DOMAINS, PAJA_COMPATIBILITY_ALIASES, PAJA_HANDSHAKE_DOMAINS, PAJA_LOCAL_SINGLE_FILE_HINT, PAJA_NAPPLET_MANIFEST_KIND, PAJA_NAPPLET_MANIFEST_KINDS, PAJA_REQUIRED_SERVICES, PAJA_TARGET_CORS_HINT, PAJA_UPSTREAM_WEB_DOMAINS, type PajaDecodedPointer, PajaHostConfig, type PajaLocalFileInput, type PajaLocalTarget, type PajaPointerRelayPool, PajaRawOptions, type PajaResolvedPointer, type PajaRuntimeTarget, type PajaTargetCorsDiagnostic, type PajaTargetCorsFetch, type PajaTargetCorsStatus, type ResolvePajaPointerOptions, classifyTargetCors, createPajaLocalTarget, decodePajaPointer, findRelativeAssetReferences, getMissingAdvertisedDomains, getMissingServices, injectPajaRuntimeCsp, isPajaLocalHtmlFile, isPajaLocalTarget, loadPajaConfigFile, mergePajaRawOptions, probeTargetCors, readNappletIdMeta, renderPajaHtml, resolvePajaPointer, resolvePajaRawOptions };

package/dist/index.js

@@ -11,6 +11,7 @@ import {
   PAJA_ADVERTISED_DOMAINS,
   PAJA_COMPATIBILITY_ALIASES,
   PAJA_HANDSHAKE_DOMAINS,
+  PAJA_LOCAL_SINGLE_FILE_HINT,
   PAJA_NAPPLET_MANIFEST_KIND,
   PAJA_NAPPLET_MANIFEST_KINDS,
   PAJA_REQUIRED_SERVICES,
@@ -22,24 +23,29 @@ import {
   ReadinessError,
   classifyTargetCors,
   createPajaHostConfig,
+  createPajaLocalTarget,
   createPajaRuntimeHostConfig,
   decodePajaPointer,
+  findRelativeAssetReferences,
   formatPajaUrl,
   getMissingAdvertisedDomains,
   getMissingServices,
   injectPajaRuntimeCsp,
+  isPajaLocalHtmlFile,
+  isPajaLocalTarget,
   loadPajaConfigFile,
   mergePajaRawOptions,
   normalizePajaOptions,
   normalizePajaSimulation,
   probeTargetCors,
+  readNappletIdMeta,
   renderPajaHtml,
   resolvePajaPointer,
   resolvePajaRawOptions,
   startPajaServer,
   summarizePajaSimulation,
   waitForTargetUrl
-} from "./chunk-ESE55K3Q.js";
+} from "./chunk-GY5ET3PC.js";
 export {
   BrowserIntentController,
   DEFAULT_PAJA_AGGREGATE_HASH,
@@ -53,6 +59,7 @@ export {
   PAJA_ADVERTISED_DOMAINS,
   PAJA_COMPATIBILITY_ALIASES,
   PAJA_HANDSHAKE_DOMAINS,
+  PAJA_LOCAL_SINGLE_FILE_HINT,
   PAJA_NAPPLET_MANIFEST_KIND,
   PAJA_NAPPLET_MANIFEST_KINDS,
   PAJA_REQUIRED_SERVICES,
@@ -64,17 +71,22 @@ export {
   ReadinessError,
   classifyTargetCors,
   createPajaHostConfig,
+  createPajaLocalTarget,
   createPajaRuntimeHostConfig,
   decodePajaPointer,
+  findRelativeAssetReferences,
   formatPajaUrl,
   getMissingAdvertisedDomains,
   getMissingServices,
   injectPajaRuntimeCsp,
+  isPajaLocalHtmlFile,
+  isPajaLocalTarget,
   loadPajaConfigFile,
   mergePajaRawOptions,
   normalizePajaOptions,
   normalizePajaSimulation,
   probeTargetCors,
+  readNappletIdMeta,
   renderPajaHtml,
   resolvePajaPointer,
   resolvePajaRawOptions,

package/dist/{server-Ia5n1Bqv.d.ts → server-5j5uoy2Z.d.ts}

@@ -1,3 +1,5 @@
+import { NappletCspOptions } from '@kehto/shell';
+
 /** JSON primitive accepted in Paja simulation config values. */
 type JsonPrimitive = string | number | boolean | null;
 /** JSON value accepted in Paja simulation config values. */
@@ -208,6 +210,8 @@ interface PajaOptions {
 }
 /** Serialized host-page config served to the browser runtime. */
 interface PajaHostConfig {
+    /** Host CSP overrides for verified runtime-pointer documents, validated by shell. */
+    readonly csp?: NappletCspOptions;
     /** Config schema version. */
     readonly version: 1;
     /** Window identity used for the development target. */
@@ -279,6 +283,7 @@ declare function createPajaHostConfig(options: PajaOptions, now?: Date): PajaHos
  * @returns Serializable host-page config.
  */
 declare function createPajaRuntimeHostConfig(options?: {
+    readonly csp?: NappletCspOptions;
     readonly pointer?: string;
     readonly relays?: readonly string[];
     readonly blossomServers?: readonly string[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kehto/paja",
-  "version": "0.17.1",
+  "version": "0.19.0",
   "description": "Paja local authoring workshop for hosting napplets in a real Kehto iframe during development",
   "type": "module",
   "main": "./dist/index.js",
@@ -26,12 +26,12 @@
   },
   "dependencies": {
     "@kehto/acl": "^0.19.0",
+    "@kehto/nip": "^0.6.0",
     "@kehto/firewall": "^0.6.0",
-    "@kehto/nip": "^0.5.2",
     "@kehto/runtime": "^0.24.0",
-    "@kehto/services": "^0.22.0",
-    "@kehto/shell": "^0.21.2",
-    "@kehto/wm": "^0.0.2"
+    "@kehto/services": "^0.22.1",
+    "@kehto/wm": "^0.0.2",
+    "@kehto/shell": "^0.22.0"
   },
   "peerDependencies": {
     "@napplet/core": ">=0.32.0 <0.33.0",