Shell runtime — relay bridge, ACL enforcement, signer proxy, storage proxy for hosting napplet iframe applications
Pure, WASM-ready ACL module for the napplet protocol — zero dependencies, zero side effects
Top-level Kehto CLI for local napplet authoring and runtime tooling
Reference service implementations for the napplet protocol — audio, notifications, and extensible service handlers
Pure, WASM-ready behavioral firewall engine for the napplet protocol — zero dependencies, zero side effects
Browser-agnostic protocol engine for the napplet protocol — message dispatch, ACL enforcement, AUTH handshake
Paja local authoring workshop for hosting napplets in a real Kehto iframe during development
Headless CLI that runs @napplet/conformance against a napplet in real Chromium via Playwright — the test:conformance runner
Framework-agnostic napplet protocol conformance engine — reference mock shell, per-NAP envelope validators, manifest validator, check registry, and reporters
The active napplet NAP domains (relay, storage, inc, keys, theme, media, notify, identity, config, resource, cvm, outbox, upload, intent, ble, webrtc, link, lists, serial, common, dm) as layered subpath exports