@kehto/shell 0.24.4 → 0.25.0

package/README.md

@@ -304,3 +304,19 @@ for outer URL encoding, review, routing, and verified launcher behavior.
 ## GAMEPAD integration
 
 This non-normative guidance defers to the living [NAP-GAMEPAD](https://github.com/napplet/naps/pull/108). Services export `createGamepadService` and `browserGamepadOptions`; shell exports `denyNappletControllerAccess`. Paja and the playground register one host reader and deny native gamepad/HID/USB paths before frame execution. Source-bound subscriptions receive immediate full snapshots; only the visible host's input owner gets live controls. Focus loss supplies neutral controls and timestamp zero; unsubscribe, window destruction, and service removal release polling. Non-browser or denied native readers report the proposal's unavailable reasons. See [Controller input](https://github.com/kehto/web/blob/main/docs/gamepad.md).
+
+## UUID support on HTTP origins
+
+Shell event injection, cache queries, and source-session registration use native
+`crypto.randomUUID()` when available. On browsers that omit it (including
+non-localhost plain HTTP origins), the shell generates UUID v4 identifiers from
+16 `crypto.getRandomValues()` bytes. If both methods are unavailable, UUID
+creation throws an explicit capability error. This internal host UUID helper
+never falls back to weak randomness; other identifier generators are outside
+its scope. It does not provide secure-context APIs such as `crypto.subtle` on
+HTTP, so this change does not establish HTTP support for uploads or other domains.
+
+This is a supported platform capability choice, not a deprecated caller API.
+Both standard Web Crypto paths remain quiet. Source-bound identity and optional
+shell readiness are unchanged (NAP-SHELL at `napplet/naps`
+`1e1046bcadabbc552804f6d3354f565184f9fefb`).

package/dist/index.js

@@ -1,6 +1,20 @@
 // src/shell-bridge.ts
 import { createRuntime } from "@kehto/runtime";
 
+// src/random-uuid.ts
+function randomUUID() {
+  const provider = globalThis.crypto;
+  if (typeof provider?.randomUUID === "function") return provider.randomUUID();
+  if (typeof provider?.getRandomValues !== "function") {
+    throw new Error("@kehto/shell requires crypto.randomUUID or crypto.getRandomValues for UUID generation");
+  }
+  const bytes = provider.getRandomValues(new Uint8Array(16));
+  bytes[6] = bytes[6] & 15 | 64;
+  bytes[8] = bytes[8] & 63 | 128;
+  const hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+
 // src/hooks-adapter.ts
 function bytesToHex(bytes) {
   return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
@@ -66,7 +80,7 @@ function createCacheAdapter(shellHooks) {
     async query(filters) {
       const workerRelay = shellHooks.workerRelay.getWorkerRelay();
       if (!workerRelay) return [];
-      const subId = crypto.randomUUID();
+      const subId = randomUUID();
       return workerRelay.query(["REQ", subId, ...filters]);
     },
     store(event) {
@@ -113,7 +127,7 @@ function createCryptoAdapter(shellHooks) {
       return shellHooks.crypto.verifyEvent(event);
     },
     randomUUID() {
-      return crypto.randomUUID();
+      return randomUUID();
     },
     randomBytes(length) {
       const bytes = new Uint8Array(length);
@@ -1140,7 +1154,7 @@ function registerNip5dSessionIfNeeded({
     dTag: identity.dTag,
     aggregateHash: identity.aggregateHash,
     registeredAt: Date.now(),
-    instanceId: crypto.randomUUID(),
+    instanceId: randomUUID(),
     provenance: "nip-5d"
   };
   runtime.sessionRegistry.register(windowId, entry);
@@ -2196,36 +2210,90 @@ function nappletNamespacePrelude(domains, normalizeIntentUri2) {
     };
   }
   function makeMedia() {
+    const sessions = /* @__PURE__ */ new Set();
+    const ended = /* @__PURE__ */ new Map();
+    const retained = /* @__PURE__ */ new Map();
+    const callbacks = /* @__PURE__ */ new Map();
+    const warnings = /* @__PURE__ */ new Set();
+    const warn = (name, replacement) => {
+      if (warnings.has(name)) return;
+      warnings.add(name);
+      console.warn(`[KEHTO-MEDIA-${name}] Deprecated media API; use ${replacement}. Warned once per endpoint.`);
+    };
+    listen((event) => {
+      if (!isParentMessage(event)) return;
+      const msg = event.data;
+      if (!msg || typeof msg !== "object" || typeof msg.sessionId !== "string") return;
+      const sessionId = msg.sessionId;
+      if (msg.type === "media.session.create.result" && !msg.error) {
+        if (!ended.has(sessionId)) sessions.add(sessionId);
+        return;
+      }
+      if (!sessions.has(sessionId) || ended.has(sessionId)) return;
+      if (msg.type === "media.session.ended") {
+        ended.set(sessionId, msg);
+        retained.delete(sessionId);
+        sessions.delete(sessionId);
+      } else if (["media.state", "media.capabilities", "media.controls"].includes(msg.type)) {
+        const cache2 = retained.get(sessionId) ?? /* @__PURE__ */ new Map();
+        cache2.set(msg.type, msg);
+        retained.set(sessionId, cache2);
+      } else if (msg.type !== "media.command") return;
+      const delivery = Array.from(callbacks.get(sessionId)?.get(msg.type) ?? []);
+      for (const callback of delivery) callback(msg);
+      if (ended.has(sessionId)) callbacks.delete(sessionId);
+    });
     const on = (type, sessionId, callback) => {
-      const off = listen((event) => {
-        if (!isParentMessage(event)) return;
-        const msg = event.data;
-        if (typeof msg === "object" && msg !== null && msg.type === type && msg.sessionId === sessionId) callback(msg);
+      const terminal = ended.get(sessionId);
+      if (terminal) {
+        if (type === "media.session.ended") callback(terminal);
+        return subscriptionHandle(() => {
+        });
+      }
+      const byType = callbacks.get(sessionId) ?? /* @__PURE__ */ new Map();
+      const handlers = byType.get(type) ?? /* @__PURE__ */ new Set();
+      handlers.add(callback);
+      byType.set(type, handlers);
+      callbacks.set(sessionId, byType);
+      const cached = retained.get(sessionId)?.get(type);
+      if (cached) callback(cached);
+      return subscriptionHandle(() => {
+        handlers.delete(callback);
       });
-      return subscriptionHandle(off);
     };
-    return {
+    const command = (sessionId, value) => {
+      if (ended.has(sessionId)) return;
+      fire({ ...value && typeof value === "object" ? value : {}, type: "media.command", sessionId });
+    };
+    return Object.freeze({
       createSession: (options) => request(
-        { type: "media.session.create", ...options && typeof options === "object" ? options : {} },
+        { ...options && typeof options === "object" ? options : {}, type: "media.session.create" },
         "media.session.create.result",
         withoutEnvelope,
         { rejectOnError: false }
       ),
       updateSession: (sessionId, metadata) => fire({ type: "media.session.update", sessionId, metadata }),
       destroySession: (sessionId) => fire({ type: "media.session.destroy", sessionId }),
-      reportState: (sessionId, state) => fire({ type: "media.state", sessionId, ...state && typeof state === "object" ? state : {} }),
+      reportState: (sessionId, state) => fire({ ...state && typeof state === "object" ? state : {}, type: "media.state", sessionId }),
       reportCapabilities: (sessionId, actions) => fire({ type: "media.capabilities", sessionId, actions }),
-      sendCommand: (sessionId, action, value) => fire({ type: "media.command", sessionId, action, ...value === void 0 ? {} : { value } }),
-      onCommand: (sessionId, callback) => on("media.command", sessionId, (msg) => callback(msg.action, msg.value)),
-      onState: (sessionId, callback) => on("media.state", sessionId, (msg) => callback({
-        status: msg.status,
-        position: msg.position,
-        duration: msg.duration,
-        volume: msg.volume
-      })),
+      command,
+      sendCommand: (sessionId, action, value) => {
+        warn("SEND-COMMAND", "media.command(sessionId, { action, value })");
+        command(sessionId, { action, ...value === void 0 ? {} : { value } });
+      },
+      onCommand: (sessionId, callback) => {
+        const legacy = callback.length >= 2;
+        if (legacy) warn("COMMAND-CALLBACK", "media.onCommand(sessionId, command => ...)");
+        return on("media.command", sessionId, (msg) => legacy ? callback(msg.action, msg.value) : callback({ action: msg.action, ...msg.value === void 0 ? {} : { value: msg.value }, ...msg.reason === void 0 ? {} : { reason: msg.reason } }));
+      },
+      onState: (sessionId, callback) => on("media.state", sessionId, (msg) => {
+        const { type: _type, sessionId: _sessionId, ...state } = msg;
+        callback(state);
+      }),
       onCapabilities: (sessionId, callback) => on("media.capabilities", sessionId, (msg) => callback(msg.actions)),
-      onControls: (sessionId, callback) => on("media.controls", sessionId, (msg) => callback(msg.controls))
-    };
+      onControls: (sessionId, callback) => on("media.controls", sessionId, (msg) => callback(msg.controls)),
+      onEnded: (sessionId, callback) => on("media.session.ended", sessionId, (msg) => callback({ sessionId: msg.sessionId, reason: msg.reason }))
+    });
   }
   function makeNotify() {
     const on = (type, callback) => {
@@ -2863,10 +2931,12 @@ function nappletNamespacePrelude(domains, normalizeIntentUri2) {
     intent ??= Object.freeze(makeIntent());
     return intent;
   }
+  let media;
   function isProtectedDomain(domain) {
-    return domain === "gamepad" || domain === "shell" || domain === "inc" || domain === "identity" || domain === "theme" || domain === "intent";
+    return domain === "media" || domain === "gamepad" || domain === "shell" || domain === "inc" || domain === "identity" || domain === "theme" || domain === "intent";
   }
   function makeDomain(domain, existing) {
+    if (domain === "media") return media ??= makeMedia();
     if (domain === "gamepad") return gamepad ??= makeGamepad();
     if (domain === "shell") return shell;
     if (domain === "inc") return makeProtectedInc(existing);
@@ -2881,8 +2951,6 @@ function nappletNamespacePrelude(domains, normalizeIntentUri2) {
         return makeStorage();
       case "keys":
         return makeKeys();
-      case "media":
-        return makeMedia();
       case "notify":
         return makeNotify();
       case "config":