@kehto/shell

Browser adapter over @kehto/runtime for iframe/session hosting.

Alpha status: Kehto is an early runtime implementation for a draft NIP-5D protocol. Shell capabilities, supports() behavior, and NAP contracts are not final.

Install

pnpm add @kehto/shell @kehto/runtime @kehto/acl @napplet/core @napplet/nap nostr-tools

Manifest Facts

Field	Value
Source	packages/shell/package.json, packages/shell/src/index.ts
Version	0.14.2
Runtime entry	./dist/index.js
Types entry	./dist/index.d.ts
Dependencies	@kehto/acl, @kehto/runtime
Side effects	false

Peer Dependencies

Package	Range
@napplet/core	>=0.20.0 <0.21.0
@napplet/nap	>=0.20.0 <0.21.0
nostr-tools	>=2.23.3 <3.0.0

Primary APIs

Area	Exports
Factory	createShellBridge, ShellBridge
Hooks	adaptHooks, BrowserDeps, ShellAdapter, ShellCapabilities, UploadHooks, IntentHooks, LinkHooks, CommonHooks, ListsHooks, SerialHooks, BleHooks, WebrtcHooks, UnroutedMessageInfo
Protocol and capability types	NostrEvent, NostrFilter, NappletMessage, Capability, ALL_CAPABILITIES
Shell init	buildShellCapabilities
Registries and caches	sessionRegistry, nappKeyRegistry, originRegistry, manifestCache, audioManager, PendingUpdate, ManifestCacheEntry, AudioSource
Enforcement re-exports	createEnforceGate, createNapEnforceGate, formatDenialReason, EnforceResult, EnforceConfig, NapEnforceConfig, IdentityResolver, AclChecker, NapMessage
Proxies and forwarders	createIdentityProxy, createThemeProxy, createKeysProxy, createMediaProxy, createNotifyProxy, createKeysForwarder
Shell-owned internal models	resource request/result/error types
Topics	TOPICS, TopicKey, TopicValue

Scope Boundaries

• Owns browser integration: window, postMessage, iframe session identity, gateway loading, shell capabilities, origin/session registries, and browser-specific adapters.
• Surfaces unroutable inbound messages via the optional ShellAdapter.onUnroutedMessage hook (UnroutedMessageInfo) — observe-only; the bridge still drops messages from unidentified or unregistered windows, but hosts can now log them instead of debugging a silent vanish.
• Must not expose window.nostr to napplets.
• Does not implement service behavior itself; register reference services from @kehto/services on the underlying runtime.

API Reference

• Generated module: docs/api/modules/_kehto_shell.html