@kehto/paja 0.18.1 → 0.20.0

package/dist/{chunk-YX6C2UU7.js → chunk-6WEO5D3Z.js}

@@ -374,6 +374,7 @@ function createPajaRuntimeHostConfig(options = {}, now = /* @__PURE__ */ new Dat
   const base = createPajaHostConfigBase(normalizePajaSimulation(options.simulation));
   return {
     ...base,
+    ...options.csp ? { csp: options.csp } : {},
     target: {
       mode: "runtime-pointer",
       url: "about:blank",
@@ -697,6 +698,7 @@ function renderPajaHtml(config) {
     <section class="paja-notification-center" id="paja-notification-center" aria-label="Napplet notifications" aria-live="polite"></section>
     ${renderConfirmationDialog()}
     ${renderConfigDialog()}
+    ${renderIntentLinkDialog()}
     ${renderDuplicateDialog()}
     <footer class="bar bottom">
       <span>mode: <code>${escapeHtml(getModeLabel(config))}</code></span>
@@ -754,6 +756,27 @@ function renderConfigDialog() {
       </div>
     </dialog>`;
 }
+function renderIntentLinkDialog() {
+  return `<dialog class="config-dialog" id="paja-intent-link-dialog" aria-labelledby="paja-intent-link-title" aria-describedby="paja-intent-link-status">
+      <form class="dialog" method="dialog">
+        <div class="dialog-title" id="paja-intent-link-title">Review intent link</div>
+        <label>Intent URI <input id="paja-intent-link-uri" type="text" autocomplete="off" spellcheck="false"></label>
+        <label>Payload <textarea id="paja-intent-link-payload" rows="5" spellcheck="false"></textarea></label>
+        <label>Compatible handler <select id="paja-intent-link-handler" disabled></select></label>
+        <label><input id="paja-intent-link-save-default" type="checkbox"> Set as my default for this role</label>
+        <button type="button" id="paja-intent-link-clear-default">Clear saved default</button>
+        <div class="dialog-copy" id="paja-intent-link-target"></div>
+        <div class="config-error" id="paja-intent-link-status" role="status" aria-live="polite"></div>
+        <div class="dialog-actions">
+          <button type="button" id="paja-intent-link-choose">Choose another</button>
+          <button type="button" id="paja-intent-link-use-handler" disabled>Use handler</button>
+          <button type="button" id="paja-intent-link-retry">Retry</button>
+          <button type="button" id="paja-intent-link-cancel">Cancel</button>
+          <button type="button" id="paja-intent-link-launch">Launch</button>
+        </div>
+      </form>
+    </dialog>`;
+}
 function renderStage(config, targetLabel) {
   if (config.target.mode === "runtime-pointer") {
     return `<section class="stage" id="napplet-stage" aria-label="Loaded napplet runtimes">
@@ -811,6 +834,7 @@ function escapeJsonForHtml(value) {
 }
 
 // src/runtime-resolver.ts
+import { injectNappletCsp } from "@kehto/shell";
 import { SimplePool } from "nostr-tools/pool";
 import { decode } from "nostr-tools/nip19";
 import {
@@ -931,34 +955,7 @@ function resolvePointerBlossomServers(event, configured) {
   return servers;
 }
 function injectPajaRuntimeCsp(html, origins) {
-  const grantedOrigins = [...new Set(origins)].sort();
-  const connectSrc = grantedOrigins.length > 0 ? `connect-src ${grantedOrigins.join(" ")}` : "connect-src 'none'";
-  const value = [
-    "default-src 'none'",
-    "script-src 'unsafe-inline' 'wasm-unsafe-eval'",
-    "style-src 'unsafe-inline'",
-    "img-src data: blob:",
-    "font-src data:",
-    connectSrc,
-    "worker-src 'none'",
-    "child-src 'none'",
-    "frame-src 'none'",
-    "media-src 'none'",
-    "object-src 'none'",
-    "manifest-src 'none'",
-    "prefetch-src 'none'",
-    "base-uri 'none'",
-    "form-action 'none'",
-    "frame-ancestors 'self'"
-  ].join("; ");
-  const meta = `<meta http-equiv="Content-Security-Policy" content="${escapeAttribute2(value)}">`;
-  if (/<head[^>]*>/i.test(html)) {
-    return html.replace(/<head[^>]*>/i, (open) => `${open}${meta}`);
-  }
-  if (/<html[^>]*>/i.test(html)) {
-    return html.replace(/<html[^>]*>/i, (open) => `${open}<head>${meta}</head>`);
-  }
-  return `${meta}${html}`;
+  return injectNappletCsp(html, { connectOrigins: origins });
 }
 async function resolvePointerEvent(pointer, pool, relays, maxWaitMs) {
   const filter = pointer.type === "naddr" ? addressableFilter(pointer) : eventFilter(pointer);
@@ -1104,9 +1101,6 @@ function normalizeRelayUrl(value) {
     return void 0;
   }
 }
-function escapeAttribute2(value) {
-  return value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
-}
 function formatNappletManifestKinds() {
   return PAJA_NAPPLET_MANIFEST_KINDS.join(" / ");
 }
@@ -1319,7 +1313,7 @@ async function sha256Hex(bytes) {
 // src/installed-napplet-catalog.ts
 import { manifestToIntentCatalogEntry } from "@kehto/services";
 function matchesInstalledNappletRecord(record, target) {
-  return target.dTag === record.dTag && target.aggregateHash === record.aggregateHash;
+  return target.id === record.id && target.aggregateHash === record.aggregateHash;
 }
 var InstalledNappletCatalog = class {
   records = /* @__PURE__ */ new Map();
@@ -1327,6 +1321,7 @@ var InstalledNappletCatalog = class {
   /** Insert or replace a record from an already resolver-verified pointer. */
   install(resolved) {
     const record = freezeRecord({
+      id: resolved.manifest.catalogId,
       dTag: resolved.dTag,
       aggregateHash: resolved.aggregateHash,
       pointer: copyPointer(resolved.pointer),
@@ -1335,31 +1330,31 @@ var InstalledNappletCatalog = class {
       optional: [...resolved.manifest.optional ?? []],
       archetypes: resolved.manifest.archetypes.map((archetype) => ({
         slug: archetype.slug,
-        convention: archetype.convention
+        convention: archetype.convention,
+        params: [...archetype.params]
       }))
     });
-    if (!record.dTag) return record;
-    this.records.set(record.dTag, record);
-    this.notify(record.dTag);
+    this.records.set(record.id, record);
+    this.notify(record.id);
     return record;
   }
   /** Remove an artifact explicitly; frame teardown never calls this method. */
-  remove(dTag) {
-    const removed = this.records.delete(dTag);
-    if (removed) this.notify(dTag);
+  remove(id) {
+    const removed = this.records.delete(id);
+    if (removed) this.notify(id);
     return removed;
   }
-  /** Return whether a verified installation exists for a d-tag. */
-  has(dTag) {
-    return this.records.has(dTag);
+  /** Return whether a verified installation exists for a catalog ID. */
+  has(id) {
+    return this.records.has(id);
   }
   /** Return immutable serializable installed-artifact facts. */
   installed() {
     return [...this.records.values()];
   }
-  /** Return a verified record by d-tag. */
-  get(dTag) {
-    return this.records.get(dTag);
+  /** Return a verified record by catalog ID. */
+  get(id) {
+    return this.records.get(id);
   }
   /**
    * Atomically confirm that a resolved target still belongs to the exact record
@@ -1367,7 +1362,7 @@ var InstalledNappletCatalog = class {
    * token, so even a same-identity replacement cannot pass this check.
    */
   validateCurrent(selected, target) {
-    if (this.records.get(selected.dTag) !== selected) return null;
+    if (this.records.get(selected.id) !== selected) return null;
     return matchesInstalledNappletRecord(selected, target) ? selected : null;
   }
   /**
@@ -1378,11 +1373,12 @@ var InstalledNappletCatalog = class {
    */
   intentCatalog(canReceiveIntent = () => true) {
     return this.installed().filter(canReceiveIntent).map((record) => manifestToIntentCatalogEntry({
-      dTag: record.dTag,
+      catalogId: record.id,
       ...record.title === void 0 ? {} : { title: record.title },
       archetypes: record.archetypes.map((archetype) => ({
         slug: archetype.slug,
-        convention: archetype.convention
+        convention: archetype.convention,
+        params: [...archetype.params]
       }))
     }));
   }
@@ -1391,8 +1387,8 @@ var InstalledNappletCatalog = class {
     this.listeners.add(listener);
     return () => this.listeners.delete(listener);
   }
-  notify(dTag) {
-    for (const listener of this.listeners) listener(dTag);
+  notify(id) {
+    for (const listener of this.listeners) listener(id);
   }
 };
 function copyPointer(pointer) {
@@ -1420,7 +1416,7 @@ function freezeRecord(record) {
     ...record,
     requires: Object.freeze([...record.requires]),
     optional: Object.freeze([...record.optional ?? []]),
-    archetypes: Object.freeze(record.archetypes.map((archetype) => Object.freeze({ ...archetype })))
+    archetypes: Object.freeze(record.archetypes.map((archetype) => Object.freeze({ ...archetype, params: Object.freeze([...archetype.params]) })))
   });
 }
 
@@ -1433,6 +1429,13 @@ var BrowserIntentController = class {
   }
   options;
   maxAttempts;
+  /** Retain delivery work immediately; completion remains host-observable only. */
+  accept(params) {
+    const acceptance = Object.freeze({ completion: this.dispatch(params) });
+    this.options.onAccepted?.(params, acceptance);
+    return acceptance;
+  }
+  /** Complete an already accepted delivery. Kept public for host diagnostics and tests. */
   async dispatch(params) {
     const dispatch = freezeDispatch(params);
     let reason = "no-current-target";
@@ -1460,9 +1463,8 @@ var BrowserIntentController = class {
       }
       try {
         await this.options.send(generation, dispatch);
-        const windowId = this.options.getWindowId(generation);
-        if (!windowId) throw new Error("intent target window is unavailable");
-        return { windowId };
+        this.options.onDelivered?.(dispatch);
+        return;
       } catch {
         this.options.onTerminal?.(dispatch, "send-failed");
         throw new Error("intent target send failed");
@@ -1493,7 +1495,8 @@ function freezeDispatch(params) {
     action: params.action,
     convention: params.convention,
     ...params.payload === void 0 ? {} : { payload },
-    ...behavior === void 0 ? {} : { behavior }
+    ...behavior === void 0 ? {} : { behavior },
+    ...params.sourceWindowId === void 0 ? {} : { sourceWindowId: params.sourceWindowId }
   });
 }
 function freezeValue(value, seen = /* @__PURE__ */ new WeakMap()) {
@@ -1512,6 +1515,202 @@ function freezeValue(value, seen = /* @__PURE__ */ new WeakMap()) {
   return Object.freeze(copy);
 }
 
+// src/intent-link.ts
+import { normalizeIntentUri } from "@kehto/shell";
+var PAJA_INTENT_LINK_MAX_BYTES = 16 * 1024;
+function fail(message) {
+  throw new TypeError(message);
+}
+function hasOwn(value, key) {
+  return Object.prototype.hasOwnProperty.call(value, key);
+}
+function strictDecode(value, label) {
+  try {
+    return decodeURIComponent(value);
+  } catch {
+    return fail(`Paja intent link has malformed percent-encoding in ${label}`);
+  }
+}
+function parseOuterQuery(search) {
+  const fields = /* @__PURE__ */ Object.create(null);
+  if (!search) return fields;
+  for (const part of search.slice(1).split("&")) {
+    const equal = part.indexOf("=");
+    if (equal <= 0) fail("Paja intent link fields must be name=value");
+    const name = strictDecode(part.slice(0, equal), "a field name");
+    const value = strictDecode(part.slice(equal + 1), `the ${name || "unnamed"} field`);
+    if (!name || hasOwn(fields, name)) fail("Paja intent link field names must be unique after decoding");
+    Object.defineProperty(fields, name, { value, enumerable: true, configurable: true });
+  }
+  return fields;
+}
+function rawOuterValue(search, expectedName) {
+  if (!search) return void 0;
+  for (const part of search.slice(1).split("&")) {
+    const equal = part.indexOf("=");
+    if (equal <= 0) continue;
+    try {
+      if (decodeURIComponent(part.slice(0, equal)) === expectedName) return part.slice(equal + 1);
+    } catch {
+    }
+  }
+  return void 0;
+}
+function assertJsonValue(value) {
+  if (value === null || typeof value === "string" || typeof value === "boolean") return;
+  if (typeof value === "number") {
+    if (Number.isFinite(value)) return;
+    fail("Paja intent payload must be JSON");
+  }
+  if (Array.isArray(value)) {
+    value.forEach(assertJsonValue);
+    return;
+  }
+  if (!value || typeof value !== "object" || Object.getPrototypeOf(value) !== Object.prototype) {
+    fail("Paja intent payload must be JSON");
+  }
+  for (const [, nested] of Object.entries(value)) {
+    assertJsonValue(nested);
+  }
+}
+function parseJsonPayload(value) {
+  let parsed;
+  try {
+    parsed = JSON.parse(value);
+  } catch {
+    return fail("Paja intent payload must be valid JSON");
+  }
+  assertJsonValue(parsed);
+  return parsed;
+}
+function encodeJsonPayload(value) {
+  assertJsonValue(value);
+  const encoded = JSON.stringify(value);
+  if (encoded === void 0) fail("Paja intent payload must be JSON");
+  return encoded;
+}
+function pointerParameter(pointer) {
+  if (pointer.startsWith("naddr")) return "naddr";
+  if (pointer.startsWith("nevent")) return "nevent";
+  return "pointer";
+}
+function assertLinkSize(url) {
+  if (new TextEncoder().encode(url.href).length > PAJA_INTENT_LINK_MAX_BYTES) {
+    fail(`Paja intent links must not exceed ${PAJA_INTENT_LINK_MAX_BYTES} UTF-8 bytes`);
+  }
+}
+function parsePajaIntentLink(href) {
+  let url;
+  try {
+    url = new URL(href);
+  } catch {
+    return fail("Paja intent link must be an absolute URL");
+  }
+  const rawIntent = rawOuterValue(url.search, "intent");
+  if (rawIntent === void 0) {
+    if (rawOuterValue(url.search, "payload") !== void 0) fail("Paja intent payload requires an intent URI");
+    return null;
+  }
+  if (url.hash) fail("Paja intent links do not support an outer fragment");
+  assertLinkSize(url);
+  const fields = parseOuterQuery(url.search);
+  if (Object.keys(fields).some((field) => !["intent", "payload", "pointer", "naddr", "nevent"].includes(field))) {
+    fail("Paja intent link contains unsupported fields");
+  }
+  const pointers = ["pointer", "naddr", "nevent"].filter((name) => hasOwn(fields, name));
+  if (pointers.length > 1) fail("Paja intent link must not contain multiple pointer aliases");
+  if (!hasOwn(fields, "intent") || !rawIntent || /[:/?#&=]/u.test(rawIntent) || !/%[0-9a-f]{2}/iu.test(rawIntent)) {
+    fail("Paja intent URI must be completely percent-encoded");
+  }
+  const uri = fields.intent;
+  const payload = hasOwn(fields, "payload") ? parseJsonPayload(fields.payload) : void 0;
+  const request = normalizeIntentUri(uri, payload === void 0 ? void 0 : { payload });
+  const pointer = pointers.length === 1 ? fields[pointers[0]] : void 0;
+  if (pointer !== void 0 && pointer.length === 0) fail("Paja intent pointer must be non-empty text");
+  if (pointer !== void 0 && request.handlerHint !== void 0) {
+    fail("Paja intent link cannot combine a target pointer with a URI recommendation");
+  }
+  return {
+    uri,
+    ...pointer === void 0 ? {} : { pointer },
+    ...payload === void 0 ? {} : { payload },
+    request
+  };
+}
+function createPajaIntentLink(descriptor, href) {
+  if (!descriptor || typeof descriptor !== "object" || Array.isArray(descriptor)) fail("Paja intent link descriptor must be an object");
+  if (typeof descriptor.uri !== "string") fail("Paja intent URI must be text");
+  if (descriptor.pointer !== void 0 && (typeof descriptor.pointer !== "string" || descriptor.pointer.length === 0)) {
+    fail("Paja intent pointer must be non-empty text");
+  }
+  const request = normalizeIntentUri(
+    descriptor.uri,
+    hasOwn(descriptor, "payload") ? { payload: descriptor.payload } : void 0
+  );
+  if (descriptor.pointer !== void 0 && request.handlerHint !== void 0) {
+    fail("Paja intent link cannot combine a target pointer with a URI recommendation");
+  }
+  let url;
+  try {
+    url = new URL(href);
+  } catch {
+    return fail("Paja intent link must use an absolute base URL");
+  }
+  url.search = "";
+  url.hash = "";
+  const pairs = [`intent=${encodeURIComponent(descriptor.uri)}`];
+  if (descriptor.pointer !== void 0) pairs.push(`${pointerParameter(descriptor.pointer)}=${encodeURIComponent(descriptor.pointer)}`);
+  if (hasOwn(descriptor, "payload")) pairs.push(`payload=${encodeURIComponent(encodeJsonPayload(descriptor.payload))}`);
+  url.search = `?${pairs.join("&")}`;
+  assertLinkSize(url);
+  return url.href;
+}
+
+// src/intent-launcher.ts
+import { resolveNapplet as resolveNapplet2 } from "@kehto/nip/5d";
+import { verifyEvent } from "nostr-tools/pure";
+import { neventEncode } from "nostr-tools/nip19";
+var LAUNCHER_HTML = `<!doctype html><meta charset="utf-8"><title>Paja intent launcher</title><script>let launched=false;addEventListener('message',(event)=>{if(launched||event.source!==parent)return;const data=event.data;if(!data||data.type!=='paja.intent.launch'||typeof data.uri!=='string'||typeof data.correlation!=='string')return;launched=true;window.napplet?.intent?.invoke(data.uri,data.options).then((result)=>parent.postMessage({type:'paja.intent.launcher.result',correlation:data.correlation,result},'*')).catch(()=>parent.postMessage({type:'paja.intent.launcher.result',correlation:data.correlation,result:{ok:false,error:'invoke rejected'}},'*'));});parent.postMessage({type:'paja.intent.launcher.ready'},'*');</script>`;
+var LAUNCHER_EVENT = {
+  kind: 35129,
+  created_at: 1760054400,
+  content: "Paja verified intent launcher",
+  tags: [
+    ["d", "paja-intent-launcher"],
+    ["x", "77cf3d2df847786177f4c16eb0b6ae1be6f5cd4e8d9be02a80bccd7c88e51bb8"],
+    ["R", "intent"],
+    ["title", "Paja intent launcher"]
+  ],
+  pubkey: "24653eac434488002cc06bbfb7f10fe18991e35f9fe4302dbea6d2353dc0ab1c",
+  id: "37a0b8b71857b161ea7a8749f4642915c9101258509be6d1ce978e07c683bfb6",
+  sig: "eb8e92509894dd3d86a28111a62412cff86ec36f591e4f3f692b5058174add6ef64c7996d66aae38bbd887355b3338ed6a64b300c8241875619b2e12e87d7903"
+};
+async function resolvePajaIntentLauncher() {
+  const event = { ...LAUNCHER_EVENT, tags: LAUNCHER_EVENT.tags.map((tag) => [...tag]) };
+  if (!verifyEvent(event)) throw new Error("Paja intent launcher manifest signature is invalid");
+  const resolved = await resolveNapplet2({
+    event,
+    fetchBlob: async (hash) => {
+      if (hash !== event.tags[1]?.[1]) throw new Error("Paja intent launcher requested an unknown artifact");
+      return new TextEncoder().encode(LAUNCHER_HTML);
+    }
+  });
+  return Object.freeze({
+    pointer: Object.freeze({ type: "nevent", value: neventEncode({ id: event.id, author: event.pubkey, kind: event.kind }), id: event.id, author: event.pubkey, kind: event.kind, relays: Object.freeze([]) }),
+    event: Object.freeze({ ...event, tags: Object.freeze(event.tags.map((tag) => Object.freeze([...tag]))) }),
+    relays: Object.freeze([]),
+    blossomServers: Object.freeze([]),
+    dTag: resolved.dTag,
+    aggregateHash: resolved.aggregateHash,
+    indexHtml: resolved.indexHtml,
+    manifest: resolved.manifest
+  });
+}
+function postPajaIntentLauncherMessage(frame, message) {
+  if (!frame.contentWindow) throw new Error("Paja intent launcher frame is unavailable");
+  frame.contentWindow.postMessage(message, "*");
+}
+
 // src/server.ts
 import { createServer } from "http";
 import { readFileSync as readFileSync2 } from "fs";
@@ -1750,9 +1949,13 @@ export {
   findRelativeAssetReferences,
   InstalledNappletCatalog,
   BrowserIntentController,
+  parsePajaIntentLink,
+  createPajaIntentLink,
+  resolvePajaIntentLauncher,
+  postPajaIntentLauncherMessage,
   PAJA_TARGET_CORS_HINT,
   classifyTargetCors,
   probeTargetCors,
   startPajaServer
 };
-//# sourceMappingURL=chunk-YX6C2UU7.js.map
+//# sourceMappingURL=chunk-6WEO5D3Z.js.map