@kehto/services 0.12.3 → 0.13.2

package/README.md

@@ -1,6 +1,6 @@
 # @kehto/services
 
-Reference service handlers for the napplet protocol — audio, notifications, identity, relay pool, cache, keys, media, notify, theme, link, common, lists, serial, BLE, WebRTC.
+Reference service handlers for the napplet protocol — audio, notifications, identity, relay pool, cache, keys, media, notify, theme, link, common, lists, serial, BLE, WebRTC, DM.
 
 > **Alpha status:** Kehto is an early runtime implementation for a draft NIP-5D
 > protocol. NAP contracts and service envelopes are not final; treat these
@@ -23,7 +23,11 @@ Current draft posture:
 - The v1.1 signer service is deleted outright. Its responsibilities split into two: read-only identity lookups go through `createIdentityService` (`getPublicKey`, `getRelays`, `getProfile`, `getFollows`, `getList`, `getZaps`, `getMutes`, `getBlocked`, `getBadges`); signing happens inside the shell as part of `relay.publish` / `relay.publishEncrypted` and is never exposed to napplets.
 - `createKeysService` and `createMediaService` ship real reference backends as of v1.4 (see the dedicated sections below). `createKeysService` attaches a document-level `keydown` listener by default and delivers `keys.action` push envelopes to registered napplets; `createMediaService` mirrors session metadata and playback state to `navigator.mediaSession` and emits `media.command` push envelopes on OS transport events. Both accept a host-bridge option (`HostKeysBridge` / `HostMediaBridge`) so Electron / Tauri / native shells can swap in OS-level backends without re-implementing the wire-protocol bookkeeping.
 - `createNotifyService` (NIP-5D `notify.*` NAP) coexists with the legacy `createNotificationService` (inc-emit `notifications:*` channel). Both may be registered simultaneously while hosts migrate.
+- `createOutboxService` supports `outbox.getEvent` from draft NAP-OUTBOX. Single-event lookups run through shell-owned relay routing and only return events whose ID matches the request.
 - `createResourceService` supports `resource.bytesMany` from draft NAP-RESOURCE. Bulk requests return ordered per-URL items and keep per-URL failures local while preserving legacy single-fetch fields for existing Kehto callers.
+- `createUploadService` supports `upload.info` from draft NAP-UPLOAD. Hosts may expose configured rails, return URL forms, maximum bytes, and MIME type policy without requiring napplets to start an upload.
+- `createResourceService` supports `resource.info` and `resource.bytesMany` from draft NAP-RESOURCE. `resource.info` returns advisory schemes and coarse limits; bulk requests return ordered per-URL items and keep per-URL failures local while preserving legacy single-fetch fields for existing Kehto callers.
+- `createDmService` keeps NAP-DM request correlation, subscriptions, and message normalization in runtime-owned code. Adapters cover concrete transports: NIP-17 gift wraps via `nostr-tools`, structural NDR runtimes with relay hooks, and Cordn/ContextVM coordinator clients. Kehto mirrors NAP-DM wire types locally until `@napplet/core` / `@napplet/nap` publish them.
 
 ## Quick Start
 
@@ -33,6 +37,8 @@ import {
   createListsService,
   createNotificationService,
   createBleService,
+  createDmService,
+  createNip17DmAdapter,
   createSerialService,
   createWebrtcService,
 } from '@kehto/services';
@@ -64,6 +70,17 @@ runtime.registerService(
 );
 
 // Serial service — runtime-owned serial sessions and host-owned device access.
+runtime.registerService(
+  'dm',
+  createDmService({
+    adapter: createNip17DmAdapter({
+      ownerSecretKey: shellOwnedSecretKey,
+      relayPool: shellRelayPool,
+      relays: ['wss://relay.example'],
+    }),
+  }),
+);
+
 runtime.registerService(
   'serial',
   createSerialService({
@@ -447,6 +464,12 @@ Each factory returns a `ServiceHandler` registrable via `runtime.registerService
 ### WebRTC NAP
 - `createWebrtcService` — `webrtc.open`, `webrtc.send`, `webrtc.close` + host-pushed `webrtc.event` envelopes. The reference handler owns only the NAP request/result bookkeeping; host bridges own signaling, SDP, ICE, peer connection lifecycle, and policy.
 
+### DM NAP
+- `createDmService` — `dm.status`, `dm.conversations`, `dm.messages`, `dm.send`, `dm.subscribe`, `dm.unsubscribe` + `dm.message` push envelopes (`dm:read` / `dm:write`). Runtime owns correlation, subscriptions, cleanup, and normalized message shape; adapters own protocol transport.
+- `createNip17DmAdapter` — concrete NIP-17 gift-wrap adapter backed by `nostr-tools/nip17` and an injected relay pool. The owner secret key stays shell/runtime-owned.
+- `createNdrDmAdapter` / `createNdrRelayTransport` — structural adapter for Nostr Double Ratchet runtimes plus a relay transport bridge for app-owned `nostrSubscribe` / `nostrFetch` / `nostrPublish` hooks.
+- `createCordnDmAdapter` / `createCordnRelayCoordinatorClient` — structural adapter for Cordn/ContextVM clients plus a relay-backed coordinator bridge for `PostGroupMessage`, `FetchGroupMessages`, and `SubscribeGroupMessages`.
+
 ### Theme NAP
 - `createThemeService` — `theme.get` + `theme.changed` fan-out (`theme:read`). Returns a `ThemeService` with `publishTheme()` / `setTheme()` utilities for host-side updates.
 
@@ -454,7 +477,7 @@ Each factory returns a `ServiceHandler` registrable via `runtime.registerService
 - `createAudioService` — `audio:*` inc-emit topic handler. Browser-agnostic registry of per-window audio sources; host wires `onChange` to update transport UI.
 
 ### Types
-`AudioSource`, `AudioServiceOptions`, `Notification`, `NotificationServiceOptions`, `IdentityServiceOptions`, `RelayPoolServiceOptions`, `CacheServiceOptions`, `CoordinatedRelayOptions`, `KeysServiceOptions`, `MediaServiceOptions`, `NotifyServiceOptions`, `ThemeServiceOptions`, `ThemeService`, `BleServiceOptions`, `BleServiceContext`, `WebrtcServiceOptions`, `WebrtcServiceContext`.
+`AudioSource`, `AudioServiceOptions`, `Notification`, `NotificationServiceOptions`, `IdentityServiceOptions`, `RelayPoolServiceOptions`, `CacheServiceOptions`, `CoordinatedRelayOptions`, `KeysServiceOptions`, `MediaServiceOptions`, `NotifyServiceOptions`, `ThemeServiceOptions`, `ThemeService`, `BleServiceOptions`, `BleServiceContext`, `WebrtcServiceOptions`, `WebrtcServiceContext`, `DmServiceOptions`, `DmAdapter`, `DmRelayPool`, `Nip17DmAdapterOptions`, `NdrDmAdapterOptions`, `CordnDmAdapterOptions`.
 
 ## API Reference
 

package/dist/index.d.ts

@@ -1409,8 +1409,9 @@ declare function createConfigService(options: ConfigServiceOptions): ConfigServi
  * model per PROJECT.md Decision #31. Kehto keeps legacy single-fetch fields
  * for existing callers and also emits the current NAP-RESOURCE fields.
  * Handles:
- *   Inbound:  resource.bytes, resource.bytesMany, resource.cancel
- *   Outbound: resource.bytes.result, resource.bytes.error,
+ *   Inbound:  resource.info, resource.bytes, resource.bytesMany, resource.cancel
+ *   Outbound: resource.info.result, resource.info.error,
+ *             resource.bytes.result, resource.bytes.error,
  *             resource.bytesMany.result, resource.bytesMany.error
  *
  * ──────────────────────── SCOPE BOUNDARY (RESOURCE-01) ────────────────────────
@@ -1445,6 +1446,27 @@ declare function createConfigService(options: ConfigServiceOptions): ConfigServi
  * ```
  */
 
+/** Runtime-disclosed support for one resource URL scheme. */
+interface ResourceSchemeInfo {
+    scheme: string;
+    enabled: boolean;
+}
+/** Advisory resource capability and policy limits disclosed by the runtime. */
+interface ResourceInfo {
+    schemes: ResourceSchemeInfo[];
+    maxBytes?: number;
+    maxUrls?: number;
+}
+/** Context passed to a host-provided resource info resolver. */
+interface ResourceInfoContext {
+    windowId: string;
+    identity: {
+        dTag: string;
+        aggregateHash: string;
+    } | null;
+}
+/** Static or dynamic advisory resource info exposed through `resource.info`. */
+type ResourceInfoProvider = ResourceInfo | ((context: ResourceInfoContext) => ResourceInfo | Promise<ResourceInfo>);
 /**
  * Options for `createResourceService` (options-as-bridge per v1.6 Decision 18).
  *
@@ -1509,6 +1531,14 @@ interface ResourceServiceOptions {
         dTag: string;
         aggregateHash: string;
     } | null;
+    /**
+     * Advisory NAP-RESOURCE introspection exposed through `resource.info`.
+     *
+     * Provide a static snapshot or a resolver when the shell wants to disclose
+     * configured schemes and coarse limits. Omit to expose the reference
+     * service's conservative default (`https` enabled, no numeric limits).
+     */
+    resourceInfo?: ResourceInfoProvider;
 }
 /**
  * Type alias for the ServiceHandler returned by `createResourceService`.
@@ -1518,8 +1548,9 @@ type ResourceService = ServiceHandler;
 /**
  * Create a NAP-RESOURCE reference service.
  *
- * Implements the NAP-RESOURCE request/response protocol: `resource.bytes`,
- * `resource.bytesMany`, `resource.cancel`, and their result/error envelopes.
+ * Implements the NAP-RESOURCE request/response protocol: `resource.info`,
+ * `resource.bytes`, `resource.bytesMany`, `resource.cancel`, and their
+ * result/error envelopes.
  *
  * On-construction guard (H-03 prevention): all four options are validated at
  * factory call time. If any is missing, the factory throws immediately with a
@@ -1561,10 +1592,11 @@ declare function createResourceService(options: ResourceServiceOptions): Resourc
  * ships alongside as {@link createRelayPoolOutboxRouter}.
  *
  * ──────────────────────────── Responsibilities ────────────────────────────
- *   Inbound:  outbox.query, outbox.subscribe, outbox.close, outbox.publish,
- *             outbox.resolveRelays
- *   Outbound: outbox.query.result, outbox.event, outbox.eose, outbox.closed,
- *             outbox.publish.result, outbox.resolveRelays.result
+ *   Inbound:  outbox.getEvent, outbox.query, outbox.subscribe, outbox.close,
+ *             outbox.publish, outbox.resolveRelays
+ *   Outbound: outbox.getEvent.result, outbox.query.result, outbox.event,
+ *             outbox.eose, outbox.closed, outbox.publish.result,
+ *             outbox.resolveRelays.result
  *
  * The shell owns relay discovery, routing, fallback, deduplication, signature
  * validation, signing, and publish fanout policy — all of which live behind
@@ -1588,6 +1620,17 @@ declare function createResourceService(options: ResourceServiceOptions): Resourc
  * - `auto`   — let the shell choose per its policy and relay intelligence
  */
 type OutboxStrategy = 'outbox' | 'inbox' | 'auto';
+/** Options for a single-event outbox lookup. */
+interface OutboxEventOptions {
+    /** Author hint for routing through the author's outbox relays. */
+    author?: string;
+    /** Relay hints; treated as a hint subject to shell validation, not a bypass. */
+    relays?: string[];
+    /** Relay-selection strategy. */
+    strategy?: OutboxStrategy;
+    /** Wall-clock budget for the lookup, in milliseconds. */
+    timeoutMs?: number;
+}
 /** Options for a one-shot outbox query. */
 interface OutboxQueryOptions {
     /** Explicit author hints (augment/override authors derived from filters). */
@@ -1635,6 +1678,17 @@ interface OutboxRelayPlan {
     /** Authors for which no relay list could be resolved. */
     missingAuthors?: string[];
 }
+/** Outcome of a single-event outbox lookup. */
+interface OutboxEventResult {
+    /** The signature-validated event matching the requested event id, when found. */
+    event?: NostrEvent;
+    /** Relay URLs where the shell observed the event. */
+    relays: string[];
+    /** True when some relay lists or connections failed and the lookup was partial. */
+    incomplete?: boolean;
+    /** Error reason when the lookup could not complete or did not find the event. */
+    error?: string;
+}
 /** Outcome of an outbox query, as returned by the {@link OutboxRouter}. */
 interface OutboxResult {
     /** Deduplicated, signature-validated events. */
@@ -1679,6 +1733,8 @@ interface OutboxRouterSubscription {
  * fanout. The service translates wire envelopes into these calls and back.
  */
 interface OutboxRouter {
+    /** Fetch and validate one event by id through shell-owned outbox routing. */
+    getEvent?(eventId: string, options?: OutboxEventOptions): Promise<OutboxEventResult>;
     /** Resolve relays, query them, dedup by id, validate signatures, collect events. */
     query(filters: NostrFilter[], options?: OutboxQueryOptions): Promise<OutboxResult>;
     /** Open a live outbox-aware subscription, streaming through `sink`. */
@@ -1827,8 +1883,9 @@ declare function createRelayPoolOutboxRouter(options: RelayPoolOutboxRouterOptio
  * {@link createHttpUploader}.
  *
  * ──────────────────────────── Responsibilities ────────────────────────────
- *   Inbound:  upload.upload, upload.status
- *   Outbound: upload.upload.result, upload.status.result, upload.status.changed
+ *   Inbound:  upload.info, upload.upload, upload.status
+ *   Outbound: upload.info.result, upload.upload.result,
+ *             upload.status.result, upload.status.changed
  *
  * The service owns the `uploadId` (generated per request, scoped to the
  * requesting napplet), tracks the latest {@link UploadStatus} per upload for
@@ -1922,6 +1979,24 @@ interface UploadStatus extends UploadResult {
     /** Unix ms timestamp of this status. */
     updatedAt: number;
 }
+/** Runtime-disclosed support for one upload rail. */
+interface UploadRailInfo {
+    rail: UploadRail;
+    enabled: boolean;
+    returns?: string[];
+}
+/** Advisory upload rails and coarse policy limits disclosed by the runtime. */
+interface UploadInfo {
+    rails: UploadRailInfo[];
+    maxBytes?: number;
+    mimeTypes?: string[];
+}
+/** Context passed to a host-provided upload info resolver. */
+interface UploadInfoContext {
+    windowId: string;
+}
+/** Static or dynamic advisory upload info exposed through `upload.info`. */
+type UploadInfoProvider = UploadInfo | ((context: UploadInfoContext) => UploadInfo | Promise<UploadInfo>);
 /**
  * Context handed to an {@link Uploader} for a single upload. Carries the
  * service-owned `uploadId` and a sink for streaming progress / state changes.
@@ -1957,6 +2032,13 @@ interface Uploader {
 interface UploadServiceOptions {
     /** The upload backend the shell uses. Required. */
     uploader: Uploader;
+    /**
+     * Advisory NAP-UPLOAD introspection exposed through `upload.info`.
+     *
+     * Provide a static snapshot or resolver when the shell wants to disclose
+     * configured rails and coarse limits. Omit to expose no rails and no limits.
+     */
+    uploadInfo?: UploadInfoProvider;
     /** Generate an upload id; defaults to `crypto.randomUUID()`. */
     generateId?: () => string;
     /** Current time in unix ms; defaults to `Date.now()`. */
@@ -2620,4 +2702,289 @@ interface CommonServiceOptions {
  */
 declare function createCommonService(options?: CommonServiceOptions): ServiceHandler;
 
-export { type AudioServiceOptions, type AudioSource, type BleServiceContext, type BleServiceOptions, type CacheServiceOptions, type CatalogIntentResolver, type CatalogIntentResolverOptions, type CommonServiceContext, type CommonServiceOptions, type ConfigSchemaValidation, type ConfigService, type ConfigServiceOptions, type CoordinatedRelayOptions, type HostCacheBridge, type HostKeyEvent, type HostKeysBridge, type HostMediaBridge, type HttpUploaderOptions, type HttpUploaderRails, type IdentityServiceOptions, type IntentArchetypeSupport, type IntentAvailability, type IntentBehavior, type IntentCandidate, type IntentCatalogEntry, type IntentHandlerPreference, type IntentOpenParams, type IntentRequest, type IntentResolver, type IntentResolverContext, type IntentResult, type IntentServiceOptions, type IntentWindowController, type KeysServiceOptions, type LinkOpenContext, type LinkServiceOptions, type ListsServiceContext, type ListsServiceOptions, type ManifestArchetypeInput, type MaybePromise, type MediaMetadataLike, type MediaPlaybackOwner, type MediaServiceOptions, type MediaSessionCreateOptions, type MediaSessionTarget, type MediaSourceRef, type NostrTag, type Notification, type NotificationServiceOptions, type NotifyServiceOptions, type OutboxPublishOptions, type OutboxPublishResult, type OutboxQueryOptions, type OutboxRelayPlan, type OutboxRelayPool, type OutboxResult, type OutboxRouter, type OutboxRouterSubscription, type OutboxServiceOptions, type OutboxStrategy, type OutboxSubscribeOptions, type OutboxSubscriptionSink, type OutboxTarget, type RailServerConfig, type RelayListEntry, type RelayPoolOutboxRouterOptions, type RelayPoolServiceOptions, type ResourceService, type ResourceServiceOptions, type SerialServiceContext, type SerialServiceOptions, type SignEvent, type ThemeService, type ThemeServiceOptions, type UploadDimensions, type UploadRail, type UploadRequest, type UploadResult, type UploadServiceOptions, type UploadState, type UploadStatus, type Uploader, type UploaderContext, type WebrtcServiceContext, type WebrtcServiceOptions, createAudioService, createBleService, createBrowserMediaBridge, createCacheService, createCatalogIntentResolver, createCommonService, createConfigService, createCoordinatedRelay, createHttpUploader, createIdentityService, createIntentService, createKeysService, createLinkService, createListsService, createMediaService, createNotificationService, createNotifyService, createOutboxService, createRelayPoolOutboxRouter, createRelayPoolService, createResourceService, createSerialService, createThemeService, createUploadService, createWebrtcService, manifestToIntentCatalogEntry };
+/** Hex Nostr public key. */
+type DmHexPubkey = string;
+/** Unix timestamp in seconds. */
+type DmTimestamp = number;
+/** Current runtime direct-message availability. */
+interface DmStatus {
+    available: boolean;
+    ownerPubkey?: DmHexPubkey;
+    implementations: string[];
+    capabilities: string[];
+}
+/** Query parameters for normalized DM conversation summaries. */
+interface DmConversationQuery {
+    cursor?: string;
+    limit?: number;
+}
+/** Public peer metadata safe for napplet display. */
+interface DmPeer {
+    pubkey: DmHexPubkey;
+    label?: string;
+    avatar?: string;
+}
+/** A normalized direct or group conversation summary. */
+interface DmConversation {
+    id: string;
+    kind: 'direct' | 'group';
+    participants: DmPeer[];
+    subject?: string;
+    unread: number;
+    updatedAt?: DmTimestamp;
+}
+/** Page of normalized conversation summaries. */
+interface DmConversationPage {
+    conversations: DmConversation[];
+    cursor?: string;
+}
+/** Query parameters for message history within one conversation. */
+interface DmMessageQuery {
+    conversationId: string;
+    cursor?: string;
+    limit?: number;
+}
+/** Runtime-normalized delivery state for a DM message. */
+type DmMessageStatus = 'sent' | 'delivered' | 'received' | 'failed';
+/** Normalized cleartext message visible to the napplet by runtime policy. */
+interface DmMessage {
+    id: string;
+    conversationId: string;
+    senderPubkey: DmHexPubkey;
+    createdAt: DmTimestamp;
+    content: string;
+    status: DmMessageStatus;
+}
+/** Page of normalized messages for one conversation. */
+interface DmMessagePage {
+    messages: DmMessage[];
+    cursor?: string;
+}
+/** Request to send a direct message. */
+interface DmSendRequest {
+    conversationId?: string;
+    recipients: DmHexPubkey[];
+    content: string;
+    clientMessageId?: string;
+}
+/** Result of a runtime-mediated send. */
+interface DmSendResult {
+    ok: boolean;
+    message: DmMessage;
+}
+/** Request to start live DM delivery. */
+interface DmSubscribeRequest {
+    conversationId?: string;
+}
+/** Runtime-assigned live subscription identity. */
+interface DmSubscription {
+    subscriptionId: string;
+}
+/** Generic boolean acknowledgement used by `dm.unsubscribe`. */
+interface DmOk {
+    ok: boolean;
+}
+/** Relay pool contract for DM adapters. */
+interface DmRelayPool {
+    subscribe(filters: NostrFilter[], callback: (item: NostrEvent | 'EOSE') => void, relayUrls?: string[]): {
+        unsubscribe(): void;
+    };
+    publish(event: NostrEvent): void | Promise<void>;
+    selectRelayTier(filters: NostrFilter[]): string[];
+    isAvailable(): boolean;
+}
+/** DM adapter contract consumed by createDmService. */
+interface DmAdapter {
+    status(): Promise<DmStatus> | DmStatus;
+    conversations(query?: DmConversationQuery): Promise<DmConversationPage> | DmConversationPage;
+    messages(query: DmMessageQuery): Promise<DmMessagePage> | DmMessagePage;
+    send(request: DmSendRequest): Promise<DmSendResult>;
+    subscribe(request: DmSubscribeRequest, onMessage: (message: DmMessage) => void): Promise<DmSubscription> | DmSubscription;
+    unsubscribe(subscriptionId: string): Promise<DmOk> | DmOk;
+    close?(): void;
+}
+
+/**
+ * dm-service.ts -- NAP-DM reference service.
+ *
+ * Routes `dm.*` envelopes to an injected adapter. The service owns request
+ * correlation, per-window live subscription fan-out, and lifecycle cleanup;
+ * adapters own protocol-specific transport/encryption/storage behavior.
+ */
+
+/** Options for {@link createDmService}. */
+interface DmServiceOptions {
+    /** Adapter that implements one or more chat backends under NAP-DM. */
+    adapter: DmAdapter;
+}
+/** Created DM service. */
+interface DmService extends ServiceHandler {
+    /** Close adapter resources. Idempotent when adapter close is idempotent. */
+    dispose(): void;
+}
+/**
+ * Create a NAP-DM service handler.
+ *
+ * @param options - DM adapter to route requests through.
+ * @returns Service handler for `runtime.registerService('dm', handler)`.
+ */
+declare function createDmService(options: DmServiceOptions): DmService;
+
+/** In-memory normalized DM store. */
+declare class DmMemoryStore {
+    private readonly messagesByConversation;
+    private readonly participantsByConversation;
+    conversationIdFor(participants: readonly DmHexPubkey[]): string;
+    upsertMessage(message: DmMessage, participants: readonly DmHexPubkey[]): DmMessage;
+    conversations(query?: DmConversationQuery): DmConversationPage;
+    messages(query: DmMessageQuery): DmMessagePage;
+}
+
+/**
+ * dm-nip17-adapter.ts -- concrete NIP-17 adapter for NAP-DM.
+ *
+ * Uses nostr-tools NIP-17 gift wrapping and an injected relay pool. The owner
+ * key is shell/runtime-owned; napplets only see normalized cleartext messages.
+ */
+
+/** Options for {@link createNip17DmAdapter}. */
+interface Nip17DmAdapterOptions {
+    /** Shell-owned secret key used for NIP-17 seal creation/unwrapping. */
+    ownerSecretKey: Uint8Array;
+    /** Relay pool used for publish/subscribe. */
+    relayPool: DmRelayPool;
+    /** Default relays for NIP-17 DM traffic. */
+    relays?: string[];
+    /** Optional normalized message store. Defaults to an in-memory store. */
+    store?: DmMemoryStore;
+}
+/**
+ * Create a concrete NIP-17 NAP-DM adapter.
+ *
+ * @param options - Owner key, relay pool, relay hints, optional store.
+ * @returns DM adapter for {@link createDmService}.
+ */
+declare function createNip17DmAdapter(options: Nip17DmAdapterOptions): DmAdapter;
+
+/**
+ * dm-ndr-adapter.ts -- Nostr Double Ratchet adapter for NAP-DM.
+ *
+ * Kehto accepts a structural NDR runtime instead of depending directly on the
+ * moving nostr-double-ratchet package API. Hosts can pass NdrRuntime instances.
+ */
+
+/** Minimal event shape returned by NDR runtimes for sent or received messages. */
+interface NdrRumorLike {
+    id: string;
+    pubkey?: string;
+    created_at?: number;
+    content?: string;
+}
+/** Minimal structural subset of nostr-double-ratchet NdrRuntime. */
+interface NdrRuntimeLike {
+    getState?(): {
+        ownerPubkey?: string | null;
+        currentDevicePubkey?: string | null;
+    };
+    initForOwner?(ownerPubkey: string): Promise<unknown>;
+    setupUser?(pubkey: string, ownerPubkey?: string): Promise<void>;
+    sendMessage(recipientPubkey: string, content: string, options?: unknown, ownerPubkey?: string): Promise<NdrRumorLike>;
+    onSessionEvent(callback: (event: NdrRumorLike, from: string, meta?: unknown) => void): () => void;
+    close?(): void;
+}
+interface NdrRelayTransport {
+    nostrSubscribe(filter: NostrFilter, onEvent: (event: NostrEvent) => void): () => void;
+    nostrFetch(filter: NostrFilter): Promise<NostrEvent[]>;
+    nostrPublish(event: Partial<NostrEvent>, innerEventId?: string): Promise<NostrEvent>;
+}
+interface NdrRelayTransportOptions {
+    relayPool: DmRelayPool;
+    publishSecretKey?: Uint8Array;
+    relays?: string[];
+    fetchTimeoutMs?: number;
+}
+/** Options for {@link createNdrDmAdapter}. */
+interface NdrDmAdapterOptions {
+    runtime: NdrRuntimeLike;
+    ownerPubkey: string;
+    store?: DmMemoryStore;
+    available?: boolean;
+}
+/** Build the transport contract expected by nostr-double-ratchet over Kehto relay service hooks. */
+declare function createNdrRelayTransport(options: NdrRelayTransportOptions): NdrRelayTransport;
+/** Create an NDR-backed NAP-DM adapter. */
+declare function createNdrDmAdapter(options: NdrDmAdapterOptions): DmAdapter;
+
+/** Cordn DM client contract. */
+interface CordnDmClient {
+    status?(): Promise<Partial<DmStatus>> | Partial<DmStatus>;
+    conversations(query?: DmConversationQuery): Promise<DmConversationPage> | DmConversationPage;
+    messages(query: DmMessageQuery): Promise<DmMessagePage> | DmMessagePage;
+    send(request: DmSendRequest): Promise<DmSendResult>;
+    subscribe(request: DmSubscribeRequest, onMessage: (message: DmMessage) => void): Promise<DmSubscription> | DmSubscription;
+    unsubscribe(subscriptionId: string): Promise<{
+        ok: boolean;
+    }> | {
+        ok: boolean;
+    };
+    close?(): void;
+}
+interface CordnGroupMessage {
+    cursor: number;
+    gid: string;
+    msg_64: string;
+    at: number;
+}
+interface CordnCoordinatorSubscription {
+    stream: AsyncIterable<CordnGroupMessage>;
+    result: Promise<{
+        subscribed: true;
+    }>;
+    abort(reason?: string): Promise<void>;
+}
+interface CordnCoordinatorClient {
+    PostGroupMessage(input: {
+        msg_64: string;
+    }): Promise<{
+        cursor: number;
+        gid: string;
+        at: number;
+    }>;
+    FetchGroupMessages(input: {
+        gid: string;
+        after?: number;
+    }): Promise<{
+        messages: CordnGroupMessage[];
+    }>;
+    SubscribeGroupMessages(input: {
+        gid: string;
+        after?: number;
+    }): Promise<CordnCoordinatorSubscription>;
+    close?(): void;
+}
+interface CordnCodecResult {
+    msg_64: string;
+    gid: string;
+}
+interface CordnRelayCoordinatorOptions {
+    relayPool: DmRelayPool;
+    ownerSecretKey: Uint8Array;
+    relays?: string[];
+    kind?: number;
+    fetchTimeoutMs?: number;
+}
+/** Options for {@link createCordnDmAdapter}. */
+interface CordnDmAdapterOptions {
+    client?: CordnDmClient;
+    coordinator?: CordnCoordinatorClient;
+    ownerPubkey?: string;
+    defaultGroupId?: string;
+    store?: DmMemoryStore;
+    encodeMessage?(request: DmSendRequest, ownerPubkey?: string): CordnCodecResult;
+    decodeMessage?(message: CordnGroupMessage, ownerPubkey?: string): DmMessage;
+}
+declare function createCordnRelayCoordinatorClient(options: CordnRelayCoordinatorOptions): CordnCoordinatorClient;
+/** Create a Cordn/ContextVM-backed NAP-DM adapter. */
+declare function createCordnDmAdapter(options: CordnDmAdapterOptions): DmAdapter;
+
+export { type AudioServiceOptions, type AudioSource, type BleServiceContext, type BleServiceOptions, type CacheServiceOptions, type CatalogIntentResolver, type CatalogIntentResolverOptions, type CommonServiceContext, type CommonServiceOptions, type ConfigSchemaValidation, type ConfigService, type ConfigServiceOptions, type CoordinatedRelayOptions, type CordnCodecResult, type CordnCoordinatorClient, type CordnCoordinatorSubscription, type CordnDmAdapterOptions, type CordnDmClient, type CordnGroupMessage, type CordnRelayCoordinatorOptions, type DmAdapter, type DmConversation, type DmConversationPage, type DmConversationQuery, type DmHexPubkey, DmMemoryStore, type DmMessage, type DmMessagePage, type DmMessageQuery, type DmMessageStatus, type DmOk, type DmPeer, type DmRelayPool, type DmSendRequest, type DmSendResult, type DmService, type DmServiceOptions, type DmStatus, type DmSubscribeRequest, type DmSubscription, type DmTimestamp, type HostCacheBridge, type HostKeyEvent, type HostKeysBridge, type HostMediaBridge, type HttpUploaderOptions, type HttpUploaderRails, type IdentityServiceOptions, type IntentArchetypeSupport, type IntentAvailability, type IntentBehavior, type IntentCandidate, type IntentCatalogEntry, type IntentHandlerPreference, type IntentOpenParams, type IntentRequest, type IntentResolver, type IntentResolverContext, type IntentResult, type IntentServiceOptions, type IntentWindowController, type KeysServiceOptions, type LinkOpenContext, type LinkServiceOptions, type ListsServiceContext, type ListsServiceOptions, type ManifestArchetypeInput, type MaybePromise, type MediaMetadataLike, type MediaPlaybackOwner, type MediaServiceOptions, type MediaSessionCreateOptions, type MediaSessionTarget, type MediaSourceRef, type NdrDmAdapterOptions, type NdrRelayTransport, type NdrRelayTransportOptions, type NdrRumorLike, type NdrRuntimeLike, type Nip17DmAdapterOptions, type NostrTag, type Notification, type NotificationServiceOptions, type NotifyServiceOptions, type OutboxEventOptions, type OutboxEventResult, type OutboxPublishOptions, type OutboxPublishResult, type OutboxQueryOptions, type OutboxRelayPlan, type OutboxRelayPool, type OutboxResult, type OutboxRouter, type OutboxRouterSubscription, type OutboxServiceOptions, type OutboxStrategy, type OutboxSubscribeOptions, type OutboxSubscriptionSink, type OutboxTarget, type RailServerConfig, type RelayListEntry, type RelayPoolOutboxRouterOptions, type RelayPoolServiceOptions, type ResourceInfo, type ResourceInfoContext, type ResourceInfoProvider, type ResourceSchemeInfo, type ResourceService, type ResourceServiceOptions, type SerialServiceContext, type SerialServiceOptions, type SignEvent, type ThemeService, type ThemeServiceOptions, type UploadDimensions, type UploadInfo, type UploadInfoContext, type UploadInfoProvider, type UploadRail, type UploadRailInfo, type UploadRequest, type UploadResult, type UploadServiceOptions, type UploadState, type UploadStatus, type Uploader, type UploaderContext, type WebrtcServiceContext, type WebrtcServiceOptions, createAudioService, createBleService, createBrowserMediaBridge, createCacheService, createCatalogIntentResolver, createCommonService, createConfigService, createCoordinatedRelay, createCordnDmAdapter, createCordnRelayCoordinatorClient, createDmService, createHttpUploader, createIdentityService, createIntentService, createKeysService, createLinkService, createListsService, createMediaService, createNdrDmAdapter, createNdrRelayTransport, createNip17DmAdapter, createNotificationService, createNotifyService, createOutboxService, createRelayPoolOutboxRouter, createRelayPoolService, createResourceService, createSerialService, createThemeService, createUploadService, createWebrtcService, manifestToIntentCatalogEntry };