@kehto/paja 0.6.3 → 0.9.0

package/dist/{chunk-ADMLM2LH.js → chunk-OWVINAW7.js}

@@ -32,7 +32,12 @@ var PAJA_SIMULATION_DOMAINS = [
   "cvm",
   "inc"
 ];
-var DEFAULT_RELAY_URLS = ["wss://relay.kehto.dev"];
+var DEFAULT_RELAY_URLS = [
+  "wss://relay.damus.io",
+  "wss://nos.lol",
+  "wss://relay.primal.net",
+  "wss://relay.snort.social"
+];
 var DEFAULT_CONFIG_VALUES = {
   runtime: "kehto paja",
   mode: "development",
@@ -46,7 +51,7 @@ function normalizePajaSimulation(raw) {
   const domains = Object.fromEntries(
     PAJA_SIMULATION_DOMAINS.map((domain) => [domain, domainOverrides[domain] ?? true])
   );
-  const relayMode = raw?.relay?.mode ?? (domains.relay ? "memory" : "disabled");
+  const relayMode = raw?.relay?.mode ?? (domains.relay ? "live" : "disabled");
   if (!domains.relay && relayMode !== "disabled") {
     throw new PajaSimulationError('Invalid simulation: relay.mode must be "disabled" when capabilities.domains.relay is false.');
   }
@@ -94,8 +99,8 @@ function normalizePajaSimulation(raw) {
     throw new PajaSimulationError('Invalid simulation: identity.pubkey must be a 64-character hex string when identity.mode is "fixed".');
   }
   const relayUrls = raw?.relay?.urls ?? DEFAULT_RELAY_URLS;
-  if (relayMode === "memory" && relayUrls.length === 0) {
-    throw new PajaSimulationError('Invalid simulation: relay.urls must contain at least one URL when relay.mode is "memory".');
+  if (relayMode !== "disabled" && relayUrls.length === 0) {
+    throw new PajaSimulationError("Invalid simulation: relay.urls must contain at least one URL when relay.mode is enabled.");
   }
   for (const url of relayUrls) {
     if (typeof url !== "string" || url.trim().length === 0) {
@@ -106,6 +111,13 @@ function normalizePajaSimulation(raw) {
   if (uploadMode === "memory" && uploadRail.length === 0) {
     throw new PajaSimulationError('Invalid simulation: upload.rail must be non-empty when upload.mode is "memory".');
   }
+  const uploadServers = normalizeUploadServers(raw?.upload?.servers ?? []);
+  const discoverServers = raw?.upload?.discoverServers ?? uploadMode === "blossom";
+  const maxBytes = raw?.upload?.maxBytes;
+  if (maxBytes !== void 0 && (!Number.isSafeInteger(maxBytes) || maxBytes <= 0)) {
+    throw new PajaSimulationError("Invalid simulation: upload.maxBytes must be a positive safe integer.");
+  }
+  const mimeTypes = normalizeMimeTypes(raw?.upload?.mimeTypes);
   return {
     capabilities: {
       domains,
@@ -134,7 +146,11 @@ function normalizePajaSimulation(raw) {
     },
     upload: {
       mode: uploadMode,
-      rail: uploadRail
+      ...uploadMode === "memory" ? { rail: uploadRail } : {},
+      servers: uploadServers,
+      discoverServers,
+      ...maxBytes !== void 0 ? { maxBytes } : {},
+      ...mimeTypes ? { mimeTypes } : {}
     },
     media: {
       enabled: mediaEnabled
@@ -159,12 +175,54 @@ function normalizePajaSimulation(raw) {
   };
 }
 function summarizePajaSimulation(simulation) {
-  const relay = simulation.relay.mode === "memory" ? `relay:${simulation.relay.urls.length}` : "relay:off";
+  const relay = simulation.relay.mode === "disabled" ? "relay:off" : `relay:${simulation.relay.mode}:${simulation.relay.urls.length}`;
   const identity = simulation.identity.mode === "fixed" ? "identity:fixed" : "identity:anon";
   const storage = `storage:${simulation.storage.mode}`;
+  const upload = simulation.upload.mode === "memory" ? "upload:memory:simulator" : simulation.upload.mode === "blossom" ? `upload:blossom:${simulation.upload.servers.length}` : "upload:off";
   const theme = `theme:${simulation.theme.mode}`;
   const disabled = simulation.capabilities.disabledDomains.length > 0 ? `off:${simulation.capabilities.disabledDomains.join(",")}` : "off:none";
-  return `${identity} ${relay} ${storage} ${theme} ${disabled}`;
+  return `${identity} ${relay} ${storage} ${upload} ${theme} ${disabled}`;
+}
+function normalizeUploadServers(servers) {
+  const normalized = [];
+  for (const value of servers) {
+    if (typeof value !== "string" || value.trim().length === 0) {
+      throw new PajaSimulationError("Invalid simulation: upload.servers entries must be non-empty URLs.");
+    }
+    let url;
+    try {
+      url = new URL(value.trim());
+    } catch {
+      throw new PajaSimulationError(`Invalid simulation: upload server "${value}" is not a valid URL.`);
+    }
+    if (url.username || url.password) {
+      throw new PajaSimulationError("Invalid simulation: upload server URLs must not contain credentials.");
+    }
+    if (url.protocol !== "https:" && !(url.protocol === "http:" && isLoopbackHost(url.hostname))) {
+      throw new PajaSimulationError("Invalid simulation: upload servers require HTTPS, except loopback HTTP for development.");
+    }
+    if (url.search || url.hash) {
+      throw new PajaSimulationError("Invalid simulation: upload server URLs must not contain a query or fragment.");
+    }
+    const result = url.href.replace(/\/+$/, "");
+    if (!normalized.includes(result)) normalized.push(result);
+  }
+  return normalized;
+}
+function isLoopbackHost(hostname) {
+  return hostname === "localhost" || hostname === "[::1]" || /^127(?:\.\d{1,3}){3}$/.test(hostname);
+}
+function normalizeMimeTypes(mimeTypes) {
+  if (mimeTypes === void 0) return void 0;
+  const normalized = [];
+  for (const value of mimeTypes) {
+    if (typeof value !== "string" || value.trim().length === 0) {
+      throw new PajaSimulationError("Invalid simulation: upload.mimeTypes entries must be non-empty strings.");
+    }
+    const mimeType = value.trim();
+    if (!normalized.includes(mimeType)) normalized.push(mimeType);
+  }
+  return normalized;
 }
 function isHexPubkey(value) {
   return /^[0-9a-fA-F]{64}$/.test(value);
@@ -416,22 +474,32 @@ function renderPajaHtml(config) {
         --text: #f4f0df;
         --muted: #a9ad9f;
         --accent: #d8c36a;
+        --paja-console-column: minmax(320px, 380px);
       }
       * { box-sizing: border-box; }
       html, body { margin: 0; min-height: 100%; background: var(--bg); color: var(--text); font: 13px/1.4 ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; }
       body { height: 100vh; display: grid; grid-template-rows: 38px minmax(0, 1fr) 30px; overflow: hidden; }
       .bar { display: flex; align-items: center; gap: 14px; min-width: 0; padding: 0 12px; background: var(--bar); border-color: var(--line); }
-      .top { border-bottom: 1px solid var(--line); }
+      .top { display: grid; grid-template-columns: var(--paja-console-column) minmax(0, 1fr); align-items: stretch; gap: 0; padding: 0; border-bottom: 1px solid var(--line); }
+      .top-console { min-width: 0; display: flex; align-items: center; gap: 14px; padding: 0 12px; border-right: 1px solid var(--line); }
+      .top-stage { min-width: 0; display: flex; align-items: stretch; gap: 14px; padding: 0 12px 0 0; overflow: hidden; }
       .bottom { border-top: 1px solid var(--line); color: var(--muted); font-size: 12px; }
       .brand { font-weight: 700; letter-spacing: 0; color: var(--accent); white-space: nowrap; }
       .brand-product { color: var(--text); }
       .target { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; color: var(--muted); }
       .spacer { flex: 1; min-width: 0; }
+      .tabs { display: flex; align-items: stretch; align-self: flex-end; gap: 4px; min-width: 120px; max-width: min(100%, 760px); overflow-x: auto; scrollbar-width: thin; }
+      .tabs:empty { display: none; }
+      .tab { min-width: 116px; max-width: 240px; height: 30px; display: grid; grid-template-columns: minmax(0, 1fr) 24px 24px; align-items: center; gap: 2px; border: 1px solid var(--line); border-bottom-color: transparent; background: #151815; color: var(--muted); border-radius: 5px 5px 0 0; padding: 0 2px 0 9px; }
+      .tab[data-active="true"] { color: var(--text); border-color: var(--accent); border-bottom-color: #151815; background: #20241f; }
+      .tab-label { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-size: 12px; text-align: left; }
+      .tab-share, .tab-close { width: 20px; height: 20px; padding: 0; border: 0; background: transparent; color: var(--muted); display: inline-grid; place-items: center; }
+      .tab-share:hover, .tab-close:hover { color: var(--text); background: #2d302b; border-color: transparent; }
       button { border: 1px solid var(--line); color: var(--text); background: #20241f; height: 26px; padding: 0 10px; border-radius: 4px; font: inherit; cursor: pointer; }
       button:hover { border-color: var(--accent); }
       label { display: inline-flex; align-items: center; gap: 6px; color: var(--muted); white-space: nowrap; }
       select, input { border: 1px solid var(--line); color: var(--text); background: #20241f; height: 26px; border-radius: 4px; font: inherit; }
-      main { min-height: 0; display: grid; grid-template-columns: minmax(320px, 380px) minmax(0, 1fr); }
+      main { min-height: 0; display: grid; grid-template-columns: var(--paja-console-column) minmax(0, 1fr); }
       .console { min-height: 0; overflow: auto; border-right: 1px solid var(--line); background: #121512; padding: 10px; display: flex; flex-direction: column; gap: 12px; }
       .section { display: grid; gap: 8px; }
       .section-title { color: var(--accent); font-size: 11px; font-weight: 700; text-transform: uppercase; letter-spacing: 0; }
@@ -454,10 +522,22 @@ function renderPajaHtml(config) {
       .log-body { min-width: 0; display: grid; gap: 2px; }
       .log-type { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
       .log-detail { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; color: #e6a5a5; }
-      .stage { min-width: 0; min-height: 0; }
+      .stage { min-width: 0; min-height: 0; position: relative; background: #050705; }
+      .empty-stage { position: absolute; inset: 0; display: grid; place-items: center; color: var(--muted); font-size: 12px; }
+      .empty-stage[hidden] { display: none; }
+      .tab-panel { position: absolute; inset: 0; min-width: 0; min-height: 0; }
+      .tab-panel[hidden] { display: none; }
       iframe { width: 100%; height: 100%; border: 0; background: white; display: block; }
       code { color: var(--text); }
+      .dialog-backdrop { position: fixed; inset: 0; z-index: 20; display: grid; place-items: center; padding: 24px; background: rgb(0 0 0 / 0.58); }
+      .dialog-backdrop[hidden] { display: none; }
+      .dialog { width: min(420px, 100%); border: 1px solid var(--line); border-radius: 6px; background: #181b19; box-shadow: 0 18px 60px rgb(0 0 0 / 0.45); padding: 16px; display: grid; gap: 14px; }
+      .dialog-title { font-weight: 700; color: var(--text); }
+      .dialog-actions { display: flex; justify-content: flex-end; flex-wrap: wrap; gap: 8px; }
       @media (max-width: 900px) {
+        .top { grid-template-columns: minmax(0, 1fr); }
+        .top-console { display: none; }
+        .top-stage { padding-left: 0; }
         main { grid-template-columns: 1fr; grid-template-rows: minmax(240px, 40vh) minmax(0, 1fr); }
         .console { border-right: 0; border-bottom: 1px solid var(--line); }
       }
@@ -465,16 +545,21 @@ function renderPajaHtml(config) {
   </head>
   <body>
     <header class="bar top">
-      <div class="brand">@kehto/<span class="brand-product">paja</span></div>
-      <div class="target" title="${targetLabel}">${targetLabel}</div>
-      <div class="spacer"></div>
-      <label>theme
-        <select id="simulation-theme" aria-label="Simulation theme">
-          <option value="dark"${config.simulation.theme.mode === "dark" ? " selected" : ""}>dark</option>
-          <option value="light"${config.simulation.theme.mode === "light" ? " selected" : ""}>light</option>
-        </select>
-      </label>
-      <button type="button" id="reload-target">Reload</button>
+      <div class="top-console">
+        <div class="brand">@kehto/<span class="brand-product">paja</span></div>
+        <div class="target" title="${targetLabel}">${targetLabel}</div>
+      </div>
+      <div class="top-stage">
+        <div class="tabs" id="napplet-tabs" role="tablist" aria-label="Loaded napplets"></div>
+        <div class="spacer"></div>
+        <label>theme
+          <select id="simulation-theme" aria-label="Simulation theme">
+            <option value="dark"${config.simulation.theme.mode === "dark" ? " selected" : ""}>dark</option>
+            <option value="light"${config.simulation.theme.mode === "light" ? " selected" : ""}>light</option>
+          </select>
+        </label>
+        <button type="button" id="reload-target">Reload</button>
+      </div>
     </header>
     <main>
       <aside class="console" aria-label="Paja development controls">
@@ -501,10 +586,9 @@ function renderPajaHtml(config) {
           <div class="log-list" id="message-log" aria-live="polite"></div>
         </section>
       </aside>
-      <section class="stage">
-        <iframe id="napplet-frame" title="Napplet ${config.target.mode === "runtime-pointer" ? "runtime" : "development"} target" sandbox="allow-scripts" data-target-url="${targetLabel}"></iframe>
-      </section>
+      ${renderStage(config, targetLabel)}
     </main>
+    ${renderDuplicateDialog()}
     <footer class="bar bottom">
       <span>mode: <code>${escapeHtml(getModeLabel(config))}</code></span>
       <span>hmr: <code>${config.target.hmrStrategy}</code></span>
@@ -517,6 +601,28 @@ function renderPajaHtml(config) {
   </body>
 </html>`;
 }
+function renderStage(config, targetLabel) {
+  if (config.target.mode === "runtime-pointer") {
+    return `<section class="stage" id="napplet-stage" aria-label="Loaded napplet runtimes">
+        <div class="empty-stage" id="empty-runtime-stage">Load a napplet pointer to start a runtime tab.</div>
+      </section>`;
+  }
+  return `<section class="stage" id="napplet-stage">
+        <iframe id="napplet-frame" title="Napplet development target" sandbox="allow-scripts" data-target-url="${targetLabel}"></iframe>
+      </section>`;
+}
+function renderDuplicateDialog() {
+  return `<div class="dialog-backdrop" id="duplicate-pointer-dialog" hidden>
+      <div class="dialog" role="dialog" aria-modal="true" aria-labelledby="duplicate-pointer-title">
+        <div class="dialog-title" id="duplicate-pointer-title">this napplet is already running.</div>
+        <div class="dialog-actions">
+          <button type="button" id="duplicate-load-again">load it again</button>
+          <button type="button" id="duplicate-open-tab">open it in tab</button>
+          <button type="button" id="duplicate-cancel">cancel</button>
+        </div>
+      </div>
+    </div>`;
+}
 function renderPointerControls(config) {
   if (config.target.mode !== "runtime-pointer") return "";
   const value = escapeAttribute(config.target.pointer?.value ?? "");
@@ -591,12 +697,12 @@ async function resolvePajaPointer(value, options = {}) {
   const pointer = decodePajaPointer(value);
   const relays = uniqueRelayUrls([...pointer.relays, ...options.relays ?? []]);
   if (relays.length === 0) {
-    throw new Error("Pointer does not include relay hints; add a relay-bearing naddr or nevent.");
+    throw new Error("Pointer has no relay hints or enabled configured live relays.");
   }
   const pool = options.pool ?? new SimplePool();
   const ownsPool = options.pool === void 0;
   try {
-    const event = await resolvePointerEvent(pointer, pool, relays, options.maxWaitMs ?? 5e3);
+    const event = await resolvePointerEvent(pointer, pool, relays, normalizeMaxWaitMs(options.maxWaitMs));
     const blossomServers = [...options.blossomServers ?? []];
     const resolved = await resolveNapplet({
       event,
@@ -625,7 +731,26 @@ async function resolvePajaPointer(value, options = {}) {
   }
 }
 function injectPajaRuntimeCsp(html, origins) {
-  const value = origins.length > 0 ? `connect-src ${[...new Set(origins)].sort().join(" ")}` : "connect-src 'none'";
+  const grantedOrigins = [...new Set(origins)].sort();
+  const connectSrc = grantedOrigins.length > 0 ? `connect-src ${grantedOrigins.join(" ")}` : "connect-src 'none'";
+  const value = [
+    "default-src 'none'",
+    "script-src 'unsafe-inline'",
+    "style-src 'unsafe-inline'",
+    "img-src data: blob:",
+    "font-src data:",
+    connectSrc,
+    "worker-src 'none'",
+    "child-src 'none'",
+    "frame-src 'none'",
+    "media-src 'none'",
+    "object-src 'none'",
+    "manifest-src 'none'",
+    "prefetch-src 'none'",
+    "base-uri 'none'",
+    "form-action 'none'",
+    "frame-ancestors 'self'"
+  ].join("; ");
   const meta = `<meta http-equiv="Content-Security-Policy" content="${escapeAttribute2(value)}">`;
   if (/<head[^>]*>/i.test(html)) {
     return html.replace(/<head[^>]*>/i, (open) => `${open}${meta}`);
@@ -637,19 +762,96 @@ function injectPajaRuntimeCsp(html, origins) {
 }
 async function resolvePointerEvent(pointer, pool, relays, maxWaitMs) {
   const filter = pointer.type === "naddr" ? addressableFilter(pointer) : eventFilter(pointer);
-  const events = await pool.querySync([...relays], filter, {
-    maxWait: maxWaitMs,
-    label: "kehto-paja-runtime"
-  });
-  const event = events.filter((candidate) => matchesPointer(pointer, candidate)).sort((a, b) => b.created_at - a.created_at)[0];
+  const result = await queryPointerRelays(pool, relays, filter, maxWaitMs);
+  const event = result.events.filter((candidate) => matchesPointer(pointer, candidate)).sort((a, b) => b.created_at - a.created_at)[0];
   if (!event) {
-    throw new Error(`No napplet manifest event found for ${pointer.type} pointer.`);
+    if (result.timedOut) {
+      throw new Error(
+        `Relay resolution timed out after ${maxWaitMs}ms for ${pointer.type} pointer across ${relays.length} relays before complete EOSE.`
+      );
+    }
+    const failures = relayFailureReasons(result.reasons);
+    if (result.error || failures.length > 0) {
+      const detail = result.error instanceof Error ? result.error.message : result.error === void 0 ? failures.join("; ") : String(result.error);
+      throw new Error(`Relay query failed for ${pointer.type} pointer before complete EOSE: ${detail}`);
+    }
+    throw new Error(
+      `All ${relays.length} relays reached EOSE without a matching ${pointer.type} napplet manifest event.`
+    );
   }
   if (!isNappletManifestKind(event.kind)) {
     throw new Error(`Pointer resolved kind ${event.kind}; expected ${formatNappletManifestKinds()}.`);
   }
   return event;
 }
+function queryPointerRelays(pool, relays, filter, maxWaitMs) {
+  if (pool.subscribeManyEose) {
+    return queryPointerRelaySubscription(pool, relays, filter, maxWaitMs);
+  }
+  return queryPointerRelaySync(pool, relays, filter, maxWaitMs);
+}
+function queryPointerRelaySubscription(pool, relays, filter, maxWaitMs) {
+  return new Promise((resolve2) => {
+    const events = [];
+    let settled = false;
+    let subscription;
+    const finish = (result) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(deadline);
+      resolve2({ events, ...result });
+    };
+    const deadline = setTimeout(() => {
+      finish({ reasons: [], timedOut: true });
+      void subscription?.close("Paja pointer relay deadline exceeded");
+    }, maxWaitMs);
+    try {
+      subscription = pool.subscribeManyEose([...relays], filter, {
+        maxWait: maxWaitMs,
+        label: "kehto-paja-runtime",
+        onevent(event) {
+          events.push(event);
+        },
+        onclose(reasons) {
+          finish({ reasons, timedOut: false });
+        }
+      });
+    } catch (error) {
+      finish({ reasons: [], timedOut: false, error });
+    }
+  });
+}
+function queryPointerRelaySync(pool, relays, filter, maxWaitMs) {
+  return new Promise((resolve2) => {
+    let settled = false;
+    const finish = (result) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(deadline);
+      resolve2(result);
+    };
+    const deadline = setTimeout(() => {
+      finish({ events: [], reasons: [], timedOut: true });
+    }, maxWaitMs);
+    void pool.querySync([...relays], filter, {
+      maxWait: maxWaitMs,
+      label: "kehto-paja-runtime"
+    }).then(
+      (events) => finish({ events, reasons: [], timedOut: false }),
+      (error) => finish({ events: [], reasons: [], timedOut: false, error })
+    );
+  });
+}
+function relayFailureReasons(reasons) {
+  return [...new Set(reasons.map((reason) => reason.trim()).filter((reason) => reason.length > 0 && reason !== "closed automatically on eose").map((reason) => reason.slice(0, 160)))].slice(0, 3);
+}
+function normalizeMaxWaitMs(value) {
+  if (value === void 0) return 5e3;
+  if (!Number.isFinite(value) || value <= 0) {
+    throw new Error("Pointer relay deadline must be a positive number of milliseconds.");
+  }
+  return Math.floor(value);
+}
 function addressableFilter(pointer) {
   if (pointer.kind !== NAPPLET_KIND_NAMED) {
     throw new Error(`naddr kind ${pointer.kind} is not a named NIP-5D napplet manifest kind.`);
@@ -831,9 +1033,258 @@ function defaultSleep(ms) {
   });
 }
 
+// src/installed-napplet-catalog.ts
+import { manifestToIntentCatalogEntry } from "@kehto/services";
+function matchesInstalledNappletRecord(record, target) {
+  return target.dTag === record.dTag && target.aggregateHash === record.aggregateHash;
+}
+var InstalledNappletCatalog = class {
+  records = /* @__PURE__ */ new Map();
+  listeners = /* @__PURE__ */ new Set();
+  /** Insert or replace a record from an already resolver-verified pointer. */
+  install(resolved) {
+    const record = freezeRecord({
+      dTag: resolved.dTag,
+      aggregateHash: resolved.aggregateHash,
+      pointer: copyPointer(resolved.pointer),
+      ...resolved.manifest.title === void 0 ? {} : { title: resolved.manifest.title },
+      archetypes: resolved.manifest.archetypes.map((archetype) => ({
+        slug: archetype.slug,
+        convention: archetype.convention,
+        ...archetype.eventKinds === void 0 ? {} : { eventKinds: [...archetype.eventKinds] }
+      }))
+    });
+    this.records.set(record.dTag, record);
+    this.notify(record.dTag);
+    return record;
+  }
+  /** Remove an artifact explicitly; frame teardown never calls this method. */
+  remove(dTag) {
+    const removed = this.records.delete(dTag);
+    if (removed) this.notify(dTag);
+    return removed;
+  }
+  /** Return whether a verified installation exists for a d-tag. */
+  has(dTag) {
+    return this.records.has(dTag);
+  }
+  /** Return immutable serializable installed-artifact facts. */
+  installed() {
+    return [...this.records.values()];
+  }
+  /** Return a verified record by d-tag. */
+  get(dTag) {
+    return this.records.get(dTag);
+  }
+  /**
+   * Atomically confirm that a resolved target still belongs to the exact record
+   * selected before an async operation. The record object is the catalog version
+   * token, so even a same-identity replacement cannot pass this check.
+   */
+  validateCurrent(selected, target) {
+    if (this.records.get(selected.dTag) !== selected) return null;
+    return matchesInstalledNappletRecord(selected, target) ? selected : null;
+  }
+  /** Return exact handler candidates derived only from installed manifests. */
+  intentCatalog() {
+    return this.installed().map((record) => manifestToIntentCatalogEntry({
+      dTag: record.dTag,
+      ...record.title === void 0 ? {} : { title: record.title },
+      archetypes: record.archetypes.map((archetype) => ({
+        slug: archetype.slug,
+        convention: archetype.convention,
+        ...archetype.eventKinds === void 0 ? {} : { eventKinds: [...archetype.eventKinds] }
+      }))
+    }));
+  }
+  /** Subscribe to explicit install and artifact-removal changes. */
+  onChanged(listener) {
+    this.listeners.add(listener);
+    return () => this.listeners.delete(listener);
+  }
+  notify(dTag) {
+    for (const listener of this.listeners) listener(dTag);
+  }
+};
+function copyPointer(pointer) {
+  if (pointer.type === "naddr") {
+    return Object.freeze({
+      type: "naddr",
+      value: pointer.value,
+      identifier: pointer.identifier,
+      pubkey: pointer.pubkey,
+      kind: pointer.kind,
+      relays: Object.freeze([...pointer.relays])
+    });
+  }
+  return Object.freeze({
+    type: "nevent",
+    value: pointer.value,
+    id: pointer.id,
+    ...pointer.author === void 0 ? {} : { author: pointer.author },
+    ...pointer.kind === void 0 ? {} : { kind: pointer.kind },
+    relays: Object.freeze([...pointer.relays])
+  });
+}
+function freezeRecord(record) {
+  return Object.freeze({
+    ...record,
+    archetypes: Object.freeze(record.archetypes.map((archetype) => Object.freeze({
+      ...archetype,
+      ...archetype.eventKinds === void 0 ? {} : { eventKinds: Object.freeze([...archetype.eventKinds]) }
+    })))
+  });
+}
+
+// src/browser-intent-controller.ts
+var MAX_INTENT_DELIVERY_ATTEMPTS = 10;
+var BrowserIntentController = class {
+  constructor(options) {
+    this.options = options;
+    this.maxAttempts = normalizeAttempts(options.maxAttempts);
+  }
+  options;
+  maxAttempts;
+  retain(params) {
+    const retained = freezeRetention(params);
+    let started;
+    let delivered = false;
+    return {
+      start: () => {
+        started ??= this.start(retained, () => delivered, () => {
+          delivered = true;
+        });
+        return started;
+      }
+    };
+  }
+  async start(params, isDelivered, markDelivered) {
+    let reason = "no-current-target";
+    for (let attempt = 1; attempt <= this.maxAttempts; attempt += 1) {
+      let generation;
+      try {
+        generation = await this.options.openOrReuse(params, attempt);
+      } catch {
+        reason = "open-failed";
+        continue;
+      }
+      if (!generation) {
+        reason = "open-failed";
+        continue;
+      }
+      try {
+        await this.options.waitForReady(generation);
+      } catch {
+        reason = "ready-failed";
+        continue;
+      }
+      if (!await this.options.isCurrent(generation)) {
+        reason = "no-current-target";
+        continue;
+      }
+      if (isDelivered()) return;
+      markDelivered();
+      try {
+        await this.options.send(generation, params.delivery);
+        return;
+      } catch {
+        this.options.onTerminal?.(params, "send-failed");
+        return;
+      }
+    }
+    this.options.onTerminal?.(params, reason);
+  }
+};
+function normalizeAttempts(value) {
+  if (value === void 0) return 2;
+  if (!Number.isFinite(value)) throw new TypeError("maxAttempts must be finite");
+  return Math.min(MAX_INTENT_DELIVERY_ATTEMPTS, Math.max(1, Math.floor(value)));
+}
+function freezeRetention(params) {
+  if (!params || typeof params.handler !== "string" || params.handler.length === 0) {
+    throw new TypeError("Intent retention requires a handler");
+  }
+  const delivery = freezeValue({ ...params.delivery });
+  const behavior = params.behavior === void 0 ? void 0 : freezeValue({ ...params.behavior });
+  return Object.freeze({
+    handler: params.handler,
+    delivery,
+    ...behavior === void 0 ? {} : { behavior }
+  });
+}
+function freezeValue(value, seen = /* @__PURE__ */ new WeakMap()) {
+  if (typeof value !== "object" || value === null) return value;
+  const existing = seen.get(value);
+  if (existing !== void 0) return existing;
+  if (Array.isArray(value)) {
+    const copy2 = [];
+    seen.set(value, copy2);
+    for (const item of value) copy2.push(freezeValue(item, seen));
+    return Object.freeze(copy2);
+  }
+  const copy = {};
+  seen.set(value, copy);
+  for (const [key, item] of Object.entries(value)) copy[key] = freezeValue(item, seen);
+  return Object.freeze(copy);
+}
+
 // src/server.ts
 import { createServer } from "http";
 import { readFileSync as readFileSync2 } from "fs";
+
+// src/target-cors.ts
+var PAJA_TARGET_CORS_HINT = "Paja sandboxes the napplet frame without allow-same-origin, so its assets are requested with `Origin: null`. Allow that origin in the napplet dev server, e.g. Vite `server: { cors: { origin: '*' } }`.";
+function classifyTargetCors(targetUrl, allowOrigin) {
+  const value = allowOrigin?.trim() ?? null;
+  if (value === "*" || value === "null") {
+    return {
+      status: "allowed",
+      targetUrl,
+      allowOrigin: value,
+      detail: `Target allows the sandboxed frame's null origin (access-control-allow-origin: ${value}).`,
+      hint: null
+    };
+  }
+  if (value === null || value === "") {
+    return {
+      status: "blocked",
+      targetUrl,
+      allowOrigin: null,
+      detail: "Target sent no access-control-allow-origin for an Origin: null request.",
+      hint: PAJA_TARGET_CORS_HINT
+    };
+  }
+  return {
+    status: "blocked",
+    targetUrl,
+    allowOrigin: value,
+    detail: `Target only allows origin "${value}", not the sandboxed frame's null origin.`,
+    hint: PAJA_TARGET_CORS_HINT
+  };
+}
+var defaultTargetCorsFetch = (input, init) => fetch(input, init);
+async function probeTargetCors(targetUrl, fetchImpl = defaultTargetCorsFetch) {
+  try {
+    const response = await fetchImpl(targetUrl, {
+      method: "GET",
+      headers: {
+        origin: "null",
+        accept: "text/html, application/xhtml+xml;q=0.9, */*;q=0.8"
+      }
+    });
+    return classifyTargetCors(targetUrl, response.headers.get("access-control-allow-origin"));
+  } catch (error) {
+    return {
+      status: "unreachable",
+      targetUrl,
+      allowOrigin: null,
+      detail: `Target CORS probe failed: ${error instanceof Error ? error.message : String(error)}`,
+      hint: "Confirm the napplet dev server is running and --target-url points at it."
+    };
+  }
+}
+
+// src/server.ts
 async function startPajaServer(input) {
   const rawOptions = resolvePajaRawOptions(input.options);
   const options = normalizePajaOptions(rawOptions);
@@ -849,8 +1300,7 @@ async function startPajaServer(input) {
     configJson = JSON.stringify(hostConfig, null, 2);
     return hostConfig;
   };
-  const server = createServer((request, response) => {
-    const requestUrl = request.url ?? "/";
+  const handleRequest = async (requestUrl, response) => {
     if (requestUrl === "/" || requestUrl.startsWith("/?")) {
       response.writeHead(200, { "content-type": "text/html; charset=utf-8" });
       response.end(html);
@@ -861,6 +1311,24 @@ async function startPajaServer(input) {
       response.end(configJson);
       return;
     }
+    if (requestUrl === "/__kehto/target.html") {
+      const targetHtml = await fetchTargetHtml(hostConfig.target.url);
+      response.writeHead(200, {
+        "cache-control": "no-store",
+        "content-type": "text/html; charset=utf-8"
+      });
+      response.end(targetHtml);
+      return;
+    }
+    if (requestUrl === "/__kehto/target-cors.json") {
+      const diagnostic = await probeTargetCors(hostConfig.target.url);
+      response.writeHead(200, {
+        "cache-control": "no-store",
+        "content-type": "application/json; charset=utf-8"
+      });
+      response.end(JSON.stringify(diagnostic));
+      return;
+    }
     if (requestUrl === "/__kehto/browser-host.js") {
       const browserScript = readBrowserHostScript();
       response.writeHead(200, { "content-type": "text/javascript; charset=utf-8" });
@@ -869,6 +1337,13 @@ async function startPajaServer(input) {
     }
     response.writeHead(404, { "content-type": "text/plain; charset=utf-8" });
     response.end("Not found");
+  };
+  const server = createServer((request, response) => {
+    void handleRequest(request.url ?? "/", response).catch((error) => {
+      const message = error instanceof Error ? error.message : String(error);
+      response.writeHead(502, { "content-type": "text/plain; charset=utf-8" });
+      response.end(message);
+    });
   });
   await listen(server, options.host, options.port);
   const servedOptions = withBoundPort(options, getBoundPort(server, options.port));
@@ -887,6 +1362,17 @@ async function startPajaServer(input) {
 function readBrowserHostScript() {
   return readFileSync2(new URL("./browser-host.js", import.meta.url), "utf8");
 }
+async function fetchTargetHtml(targetUrl) {
+  const response = await fetch(targetUrl, {
+    headers: {
+      accept: "text/html, application/xhtml+xml;q=0.9, */*;q=0.8"
+    }
+  });
+  if (!response.ok) {
+    throw new Error(`Target ${targetUrl} returned ${response.status} ${response.statusText}`);
+  }
+  return response.text();
+}
 function listen(server, host, port) {
   return new Promise((resolve2, reject) => {
     server.once("error", reject);
@@ -898,13 +1384,18 @@ function listen(server, host, port) {
 }
 function close(server) {
   return new Promise((resolve2, reject) => {
+    const forceClose = setTimeout(() => {
+      server.closeAllConnections?.();
+    }, 500);
     server.close((error) => {
+      clearTimeout(forceClose);
       if (error) {
         reject(error);
         return;
       }
       resolve2();
     });
+    server.closeIdleConnections?.();
   });
 }
 function getBoundPort(server, fallback) {
@@ -967,6 +1458,11 @@ export {
   getMissingServices,
   ReadinessError,
   waitForTargetUrl,
+  InstalledNappletCatalog,
+  BrowserIntentController,
+  PAJA_TARGET_CORS_HINT,
+  classifyTargetCors,
+  probeTargetCors,
   startPajaServer
 };
-//# sourceMappingURL=chunk-ADMLM2LH.js.map
+//# sourceMappingURL=chunk-OWVINAW7.js.map