bug fixing and deploy and build diagnostics

2026-03-22 03:30:21 +00:00
parent 1f8287c4c3
commit e4e0ef4f11
198 changed files with 21703 additions and 19587 deletions
@@ -0,0 +1,95 @@
+<template>
+  <div class="relative flex-1 min-h-0 bg-black/40 overflow-hidden">
+    <Transition name="content-fade">
+      <div v-if="loading" class="absolute inset-0 z-10 flex items-center justify-center bg-black/40">
+        <svg class="animate-spin h-8 w-8 text-blue-400" viewBox="0 0 24 24" fill="none">
+          <circle class="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" stroke-width="4" />
+          <path class="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4zm2 5.291A7.962 7.962 0 014 12H0c0 3.042 1.135 5.824 3 7.938l3-2.647z" />
+        </svg>
+      </div>
+    </Transition>
+
+    <iframe
+      v-if="appUrl && !iframeBlocked"
+      ref="iframeRef"
+      :key="refreshKey"
+      :src="appUrl"
+      class="absolute inset-0 w-full h-full border-0 iframe-scrollbar-hide"
+      title="App content"
+      @load="$emit('iframeLoad')"
+      @error="$emit('iframeError')"
+    />
+
+    <!-- Iframe blocked fallback -->
+    <Transition name="content-fade">
+      <div v-if="iframeBlocked" class="absolute inset-0 z-10 flex flex-col items-center justify-center">
+        <div class="text-center px-8">
+          <div class="w-16 h-16 mx-auto mb-4 rounded-2xl bg-white/5 border border-white/10 flex items-center justify-center">
+            <svg class="w-8 h-8 text-white/40" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z" />
+            </svg>
+          </div>
+          <h3 class="text-lg font-semibold text-white mb-2">{{ mustOpenNewTab ? 'This app opens in a new tab' : 'App not reachable' }}</h3>
+          <p class="text-white/50 text-sm mb-6">
+            <template v-if="mustOpenNewTab">{{ appTitle }} sets security headers that prevent iframe embedding.<br>Open it in a new browser tab instead.</template>
+            <template v-else>{{ appTitle }} may still be starting up or the container is stopped.<br><span v-if="autoRetryCount > 0" class="text-yellow-400/70">Retrying automatically ({{ autoRetryCount }})...</span></template>
+          </p>
+          <div class="flex items-center gap-3">
+            <button
+              v-if="!mustOpenNewTab"
+              @click="$emit('refresh')"
+              class="glass-button px-6 py-3 rounded-lg text-sm font-semibold inline-flex items-center gap-2"
+            >
+              <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 4v5h.582m15.356 2A8.001 8.001 0 004.582 9m0 0H9m11 11v-5h-.581m0 0a8.003 8.003 0 01-15.357-2m15.357 2H15" />
+              </svg>
+              Retry now
+            </button>
+            <button
+              @click="$emit('openNewTabAndBack')"
+              class="glass-button px-6 py-3 rounded-lg text-sm font-semibold inline-flex items-center gap-2"
+            >
+              <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10 6H6a2 2 0 00-2 2v10a2 2 0 002 2h10a2 2 0 002-2v-4M14 4h6m0 0v6m0-6L10 14" />
+              </svg>
+              Open in new tab
+            </button>
+          </div>
+        </div>
+      </div>
+    </Transition>
+
+    <div v-if="!appUrl" class="absolute inset-0 flex items-center justify-center">
+      <div class="text-center px-8">
+        <h3 class="text-lg font-semibold text-white mb-2">App not configured</h3>
+        <p class="text-white/50 text-sm">No URL found for {{ appId }}</p>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ref } from 'vue'
+
+defineProps<{
+  appUrl: string
+  appId: string
+  appTitle: string
+  loading: boolean
+  iframeBlocked: boolean
+  mustOpenNewTab: boolean
+  autoRetryCount: number
+  refreshKey: number
+}>()
+
+defineEmits<{
+  iframeLoad: []
+  iframeError: []
+  refresh: []
+  openNewTabAndBack: []
+}>()
+
+const iframeRef = ref<HTMLIFrameElement | null>(null)
+
+defineExpose({ iframeRef })
+</script>
@@ -0,0 +1,140 @@
+<template>
+  <div class="sticky top-0 z-10 flex items-center gap-3 border-b border-white/10 px-4 py-3 bg-black/60 backdrop-blur-md md:bg-transparent md:backdrop-blur-none">
+    <!-- Back / Forward navigation -->
+    <div class="flex items-center gap-0.5">
+      <button class="app-session-btn" aria-label="Back" title="Go back" @click="$emit('goBack')">
+        <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 19l-7-7 7-7" />
+        </svg>
+      </button>
+      <button class="app-session-btn" aria-label="Forward" title="Go forward" @click="$emit('goForward')">
+        <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7" />
+        </svg>
+      </button>
+    </div>
+
+    <span class="flex-1 truncate text-sm font-medium text-white/90">{{ appTitle }}</span>
+
+    <button class="app-session-btn" aria-label="Refresh" :disabled="isRefreshing" @click="$emit('refresh')">
+      <svg class="w-5 h-5 transition-transform duration-300" :class="{ 'animate-spin': isRefreshing }" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 4v5h.582m15.356 2A8.001 8.001 0 004.582 9m0 0H9m11 11v-5h-.581m0 0a8.003 8.003 0 01-15.357-2m15.357 2H15" />
+      </svg>
+    </button>
+
+    <!-- Display mode selector -->
+    <div class="relative" ref="modeMenuRef">
+      <button
+        class="app-session-btn"
+        aria-label="Display mode"
+        title="Display mode"
+        @click="showModeMenu = !showModeMenu"
+      >
+        <!-- Panel icon -->
+        <svg v-if="displayMode === 'panel'" class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 3v18m12-18H3a1 1 0 00-1 1v16a1 1 0 001 1h18a1 1 0 001-1V4a1 1 0 00-1-1z" />
+        </svg>
+        <!-- Overlay icon -->
+        <svg v-else-if="displayMode === 'overlay'" class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 5a1 1 0 011-1h14a1 1 0 011 1v14a1 1 0 01-1 1H5a1 1 0 01-1-1V5z" />
+        </svg>
+        <!-- Fullscreen icon -->
+        <svg v-else class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 8V4m0 0h4M4 4l5 5m11-1V4m0 0h-4m4 0l-5 5M4 16v4m0 0h4m-4 0l5-5m11 5v-4m0 4h-4m4 0l-5-5" />
+        </svg>
+      </button>
+
+      <!-- Dropdown -->
+      <Transition name="menu-fade">
+        <div v-if="showModeMenu" class="absolute right-0 top-full mt-1 w-48 bg-black/90 border border-white/10 rounded-lg backdrop-blur-xl shadow-2xl overflow-hidden z-50">
+          <button
+            class="mode-option"
+            :class="{ 'mode-option-active': displayMode === 'panel' }"
+            @click="selectMode('panel')"
+          >
+            <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 3v18m12-18H3a1 1 0 00-1 1v16a1 1 0 001 1h18a1 1 0 001-1V4a1 1 0 00-1-1z" />
+            </svg>
+            <span>Right panel</span>
+          </button>
+          <button
+            class="mode-option"
+            :class="{ 'mode-option-active': displayMode === 'overlay' }"
+            @click="selectMode('overlay')"
+          >
+            <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 5a1 1 0 011-1h14a1 1 0 011 1v14a1 1 0 01-1 1H5a1 1 0 01-1-1V5z" />
+            </svg>
+            <span>Over whole app</span>
+          </button>
+          <button
+            class="mode-option"
+            :class="{ 'mode-option-active': displayMode === 'fullscreen' }"
+            @click="selectMode('fullscreen')"
+          >
+            <svg class="w-4 h-4 shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 8V4m0 0h4M4 4l5 5m11-1V4m0 0h-4m4 0l-5 5M4 16v4m0 0h4m-4 0l5-5m11 5v-4m0 4h-4m4 0l-5-5" />
+            </svg>
+            <span>Open fullscreen</span>
+          </button>
+        </div>
+      </Transition>
+    </div>
+
+    <button class="app-session-btn" aria-label="Open in new tab" title="Open in new tab" @click="$emit('openNewTab')">
+      <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10 6H6a2 2 0 00-2 2v10a2 2 0 002 2h10a2 2 0 002-2v-4M14 4h6m0 0v6m0-6L10 14" />
+      </svg>
+    </button>
+
+    <button class="app-session-btn" aria-label="Close" @click="$emit('close')">
+      <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M6 18L18 6M6 6l12 12" />
+      </svg>
+    </button>
+
+    <kbd class="hidden sm:inline-flex px-2 py-1 text-xs text-white/50 bg-white/10 rounded">Esc</kbd>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ref, onMounted, onBeforeUnmount } from 'vue'
+import type { DisplayMode } from './appSessionConfig'
+
+defineProps<{
+  appTitle: string
+  isRefreshing: boolean
+  displayMode: DisplayMode
+}>()
+
+const emit = defineEmits<{
+  goBack: []
+  goForward: []
+  refresh: []
+  openNewTab: []
+  close: []
+  setMode: [mode: DisplayMode]
+}>()
+
+const showModeMenu = ref(false)
+const modeMenuRef = ref<HTMLElement | null>(null)
+
+function selectMode(mode: DisplayMode) {
+  showModeMenu.value = false
+  emit('setMode', mode)
+}
+
+function onClickOutside(e: MouseEvent) {
+  if (showModeMenu.value && modeMenuRef.value && !modeMenuRef.value.contains(e.target as Node)) {
+    showModeMenu.value = false
+  }
+}
+
+onMounted(() => {
+  document.addEventListener('click', onClickOutside)
+})
+
+onBeforeUnmount(() => {
+  document.removeEventListener('click', onClickOutside)
+})
+</script>
@@ -0,0 +1,160 @@
+/** Static configuration maps for app session routing and display */
+
+export type DisplayMode = 'panel' | 'overlay' | 'fullscreen'
+
+export const DISPLAY_MODE_KEY = 'archipelago_app_display_mode'
+
+/** Container apps: direct port access (avoids root-relative asset breakage under /app/xxx/ proxy) */
+export const APP_PORTS: Record<string, number> = {
+  'bitcoin-knots': 8334,
+  'bitcoin-ui':    8334,
+  'electrumx':     50002,
+  'electrs':       50002,
+  'archy-electrs-ui': 50002,
+  'mempool-electrs': 50002,
+  'btcpay-server': 23000,
+  'lnd':           8081,
+  'archy-lnd-ui':  8081,
+  'mempool':       4080,
+  'mempool-web':   4080,
+  'archy-mempool-web': 4080,
+  'homeassistant': 8123,
+  'grafana':       3000,
+  'searxng':       8888,
+  'ollama':        11434,
+  'onlyoffice':    8044,
+  'penpot':        9001,
+  'nextcloud':     8085,
+  'vaultwarden':   8082,
+  'jellyfin':      8096,
+  'photoprism':    2342,
+  'immich':        2283,
+  'immich_server': 2283,
+  'filebrowser':   8083,
+  'nginx-proxy-manager': 8181,
+  'portainer':     9000,
+  'uptime-kuma':   3001,
+  'fedimint':      8175,
+  'fedimintd':     8175,
+  'fedimint-gateway': 8176,
+  'nostr-rs-relay': 18081,
+  'indeedhub':     7777,
+  'dwn':           3100,
+  'endurain':      8080,
+}
+
+/** Apps that need nginx proxy for iframe embedding.
+ *  IndeedHub loads via direct port 7777 -- deploy script removes X-Frame-Options
+ *  from the container's internal nginx so iframe works on all servers. */
+export const PROXY_APPS: Record<string, string> = {}
+
+/** Nginx proxy paths -- used on HTTPS to avoid mixed content (HTTPS parent + HTTP port iframe).
+ *  On HTTP, direct port access is used instead (faster, no proxy). */
+export const HTTPS_PROXY_PATHS: Record<string, string> = {
+  'bitcoin-knots': '/app/bitcoin-ui/',
+  'bitcoin-ui': '/app/bitcoin-ui/',
+  'lnd': '/app/lnd/',
+  'electrumx': '/app/electrs/',
+  'electrs': '/app/electrs/',
+  'mempool-electrs': '/app/electrs/',
+  'mempool': '/app/mempool/',
+  'mempool-web': '/app/mempool/',
+  'archy-mempool-web': '/app/mempool/',
+  'fedimint': '/app/fedimint/',
+  'fedimintd': '/app/fedimint/',
+  'fedimint-gateway': '/app/fedimint-gateway/',
+  'jellyfin': '/app/jellyfin/',
+  'searxng': '/app/searxng/',
+  'filebrowser': '/app/filebrowser/',
+  'ollama': '/app/ollama/',
+  'onlyoffice': '/app/onlyoffice/',
+  'immich': '/app/immich/',
+  'immich_server': '/app/immich/',
+  'portainer': '/app/portainer/',
+  'nginx-proxy-manager': '/app/nginx-proxy-manager/',
+  'uptime-kuma': '/app/uptime-kuma/',
+  'homeassistant': '/app/homeassistant/',
+  'vaultwarden': '/app/vaultwarden/',
+  'photoprism': '/app/photoprism/',
+  'endurain': '/app/endurain/',
+  'dwn': '/app/dwn/',
+}
+
+/** External HTTPS apps -- always loaded directly */
+export const EXTERNAL_URLS: Record<string, string> = {
+  'botfights': 'https://botfights.net',
+  'nwnn': 'https://nwnn.l484.com',
+  '484-kitchen': 'https://484.kitchen',
+  'call-the-operator': 'https://cta.tx1138.com',
+  'syntropy-institute': 'https://syntropy.institute',
+  't-zero': 'https://teeminuszero.net',
+  'nostrudel': 'https://nostrudel.ninja',
+  'tailscale': 'https://login.tailscale.com/admin/machines',
+}
+
+export const APP_TITLES: Record<string, string> = {
+  'bitcoin-knots': 'Bitcoin', 'btcpay-server': 'BTCPay Server', 'indeedhub': 'Indeehub',
+  'botfights': 'BotFights', '484-kitchen': '484 Kitchen', 'arch-presentation': 'Presentation',
+  'homeassistant': 'Home Assistant', 'uptime-kuma': 'Uptime Kuma',
+  'nginx-proxy-manager': 'Nginx Proxy Manager', 'nostr-rs-relay': 'Nostr Relay',
+  'call-the-operator': 'Call The Operator', 'syntropy-institute': 'Syntropy Institute',
+  't-zero': 'T-Zero', 'nostrudel': 'noStrudel',
+}
+
+/** Apps that set X-Frame-Options and MUST open in a new tab (can't iframe) */
+export const NEW_TAB_APPS = new Set([
+  'btcpay-server',
+  'grafana',
+  'photoprism',
+  'homeassistant',
+  'vaultwarden',
+  'nextcloud',
+  'uptime-kuma',
+  'penpot',
+  'portainer',
+  'onlyoffice',
+  'nginx-proxy-manager',
+  'tailscale',
+])
+
+/** Sites known to block iframes -- skip the timeout and go straight to fallback */
+export const IFRAME_BLOCKED_APPS = new Set<string>([])
+
+/** Resolve the app URL given its ID and current route query */
+export function resolveAppUrl(id: string, routeQueryPath?: string): string {
+  // External HTTPS apps
+  const ext = EXTERNAL_URLS[id]
+  if (ext) return ext
+
+  // Apps that need nginx proxy (nostr-provider.js injection for NIP-07)
+  const proxyPath = PROXY_APPS[id]
+  if (proxyPath) return `${window.location.origin}${proxyPath}`
+
+  // IndeedHub: always direct port (X-Frame-Options removed by deploy script)
+  if (id === 'indeedhub') {
+    const port = APP_PORTS[id]
+    if (port) {
+      let base = `${window.location.protocol}//${window.location.hostname}:${port}`
+      if (routeQueryPath) base += routeQueryPath
+      return base
+    }
+  }
+
+  // HTTPS: use nginx proxy to avoid mixed content
+  if (window.location.protocol === 'https:') {
+    const httpsProxy = HTTPS_PROXY_PATHS[id]
+    if (httpsProxy) return `${window.location.origin}${httpsProxy}`
+  }
+
+  // HTTP: direct port access (faster, no proxy overhead)
+  const port = APP_PORTS[id]
+  if (!port) return ''
+  let base = `http://${window.location.hostname}:${port}`
+  if (routeQueryPath) base += routeQueryPath
+  return base
+}
+
+/** Resolve a human-readable title for an app */
+export function resolveAppTitle(id: string): string {
+  return APP_TITLES[id] || id.replace(/-/g, ' ').replace(/\b\w/g, c => c.toUpperCase())
+}
@@ -0,0 +1,78 @@
+/** Composable for managing app identity selection and NIP-07 identity injection */
+
+import { type Ref } from 'vue'
+import { rpcClient } from '@/api/rpc-client'
+
+const IDENTITY_KEY = 'archipelago_app_identity_'
+
+export interface SelectedIdentity {
+  id: string
+  name: string
+  did: string
+  pubkey: string
+  nostr_pubkey?: string
+  nostr_npub?: string
+}
+
+function isIdentityAwareApp(id: string): boolean {
+  return id === 'indeedhub' || id === 'nostrudel'
+}
+
+export function useAppIdentity(
+  appId: Ref<string>,
+  iframeRef: Ref<HTMLIFrameElement | null>,
+  showIdentityPicker: Ref<boolean>,
+) {
+  function getStoredIdentity(): SelectedIdentity | null {
+    try {
+      const stored = localStorage.getItem(IDENTITY_KEY + appId.value)
+      return stored ? JSON.parse(stored) as SelectedIdentity : null
+    } catch { return null }
+  }
+
+  function storeIdentity(identity: SelectedIdentity) {
+    try { localStorage.setItem(IDENTITY_KEY + appId.value, JSON.stringify(identity)) } catch {}
+  }
+
+  async function sendIdentity(identity: SelectedIdentity) {
+    try {
+      const challenge = `archipelago-identity:${Date.now()}`
+      const sigRes = await rpcClient.call<{ signature: string }>({ method: 'identity.sign', params: { id: identity.id, message: challenge } })
+      iframeRef.value?.contentWindow?.postMessage({
+        type: 'archipelago:identity', did: identity.did, name: identity.name,
+        pubkey: identity.pubkey, nostr_pubkey: identity.nostr_pubkey || null,
+        nostr_npub: identity.nostr_npub || null, challenge, signature: sigRes.signature
+      }, '*')
+    } catch {}
+  }
+
+  function onIdentitySelected(identity: SelectedIdentity) {
+    showIdentityPicker.value = false
+    storeIdentity(identity)
+    sendIdentity(identity)
+  }
+
+  /** Called on iframe load to inject identity if the app supports it */
+  function onIframeLoadIdentity() {
+    if (isIdentityAwareApp(appId.value)) {
+      const stored = getStoredIdentity()
+      if (stored) sendIdentity(stored)
+      else showIdentityPicker.value = true
+    }
+  }
+
+  /** Handle identity request messages from iframe */
+  function handleIdentityRequest() {
+    const stored = getStoredIdentity()
+    if (stored) sendIdentity(stored)
+    else showIdentityPicker.value = true
+  }
+
+  return {
+    getStoredIdentity,
+    sendIdentity,
+    onIdentitySelected,
+    onIframeLoadIdentity,
+    handleIdentityRequest,
+  }
+}
@@ -0,0 +1,58 @@
+/** Composable for NIP-07 Nostr signing bridge between parent and iframe */
+
+import { rpcClient } from '@/api/rpc-client'
+import type { SelectedIdentity } from './useAppIdentity'
+
+export function useNostrBridge(
+  getStoredIdentity: () => SelectedIdentity | null,
+  getAppUrl: () => string,
+) {
+  async function handleNostrRequest(event: MessageEvent) {
+    const { id, method, params } = event.data
+    const source = event.source as Window | null
+    if (!source) return
+    const storedIdentity = getStoredIdentity()
+    const identityId = storedIdentity?.id || null
+    if (import.meta.env.DEV) console.log(`[NIP-07] ${method} identityId=${identityId} storedPubkey=${storedIdentity?.nostr_pubkey?.slice(0, 12) || 'none'}`)
+
+    try {
+      let result: unknown
+      if (method === 'getPublicKey') {
+        // Use stored nostr_pubkey directly if available (avoids RPC call that may 401)
+        if (storedIdentity?.nostr_pubkey) {
+          result = storedIdentity.nostr_pubkey
+          if (import.meta.env.DEV) console.log('[NIP-07] getPublicKey from stored identity:', (result as string).slice(0, 12))
+        } else if (identityId) {
+          const res = await rpcClient.call<{ nostr_pubkey: string }>({ method: 'identity.get', params: { id: identityId } })
+          result = res.nostr_pubkey
+        } else {
+          const res = await rpcClient.call<{ nostr_pubkey: string }>({ method: 'node.nostr-pubkey' })
+          result = res.nostr_pubkey
+        }
+      } else if (method === 'signEvent') {
+        if (import.meta.env.DEV) console.log(`[NIP-07] signEvent kind=${params.event?.kind} using identity=${identityId || 'node-default'}`)
+        if (identityId) {
+          result = await rpcClient.call<unknown>({ method: 'identity.nostr-sign', params: { id: identityId, event: params.event } })
+        } else {
+          result = await rpcClient.call<unknown>({ method: 'node.nostr-sign', params: { event: params.event } })
+        }
+        if (import.meta.env.DEV) console.log('[NIP-07] signEvent OK')
+      } else if (method === 'getRelays') { result = {} }
+      else if (method === 'nip04.encrypt') { result = (await rpcClient.call<{ ciphertext: string }>({ method: 'identity.nostr-encrypt-nip04', params: { id: identityId || undefined, pubkey: params.pubkey, plaintext: params.plaintext } })).ciphertext }
+      else if (method === 'nip04.decrypt') { result = (await rpcClient.call<{ plaintext: string }>({ method: 'identity.nostr-decrypt-nip04', params: { id: identityId || undefined, pubkey: params.pubkey, ciphertext: params.ciphertext } })).plaintext }
+      else if (method === 'nip44.encrypt') { result = (await rpcClient.call<{ ciphertext: string }>({ method: 'identity.nostr-encrypt-nip44', params: { id: identityId || undefined, pubkey: params.pubkey, plaintext: params.plaintext } })).ciphertext }
+      else if (method === 'nip44.decrypt') { result = (await rpcClient.call<{ plaintext: string }>({ method: 'identity.nostr-decrypt-nip44', params: { id: identityId || undefined, pubkey: params.pubkey, ciphertext: params.ciphertext } })).plaintext }
+      else { throw new Error(`Unsupported NIP-07 method: ${method}`) }
+      const url = getAppUrl()
+      const targetOrigin = url ? new URL(url).origin : '*'
+      source.postMessage({ type: 'nostr-response', id, result }, targetOrigin)
+    } catch (err) {
+      if (import.meta.env.DEV) console.error(`[NIP-07] ${method} FAILED:`, err instanceof Error ? err.message : err)
+      const url = getAppUrl()
+      const targetOrigin = url ? new URL(url).origin : '*'
+      source.postMessage({ type: 'nostr-response', id, error: err instanceof Error ? err.message : 'Unknown error' }, targetOrigin)
+    }
+  }
+
+  return { handleNostrRequest }
+}