@elisym/sdk 0.18.1 → 0.19.0

package/dist/index.cjs

@@ -41,10 +41,14 @@ var RELAYS = [
   "wss://relay.snort.social"
 ];
 var KIND_APP_HANDLER = 31990;
+var KIND_LONG_FORM_ARTICLE = 30023;
 var KIND_JOB_REQUEST_BASE = 5e3;
 var KIND_JOB_RESULT_BASE = 6e3;
 var KIND_JOB_FEEDBACK = 7e3;
 var DEFAULT_KIND_OFFSET = 100;
+var POLICY_T_TAG = "elisym-policy";
+var POLICY_D_TAG_PREFIX = "elisym-policy-";
+var POLICY_TYPE_REGEX = /^[a-z0-9](?:[a-z0-9-]{0,30}[a-z0-9])?$/;
 var KIND_JOB_REQUEST = KIND_JOB_REQUEST_BASE + DEFAULT_KIND_OFFSET;
 var KIND_JOB_RESULT = KIND_JOB_RESULT_BASE + DEFAULT_KIND_OFFSET;
 function jobRequestKind(offset) {
@@ -97,7 +101,13 @@ var LIMITS = {
   MAX_CAPABILITIES: 20,
   MAX_DESCRIPTION_LENGTH: 500,
   MAX_AGENT_NAME_LENGTH: 64,
-  MAX_CAPABILITY_LENGTH: 64
+  MAX_CAPABILITY_LENGTH: 64,
+  MAX_POLICY_CONTENT_LENGTH: 5e4,
+  MAX_POLICIES_PER_AGENT: 12,
+  MAX_POLICY_TYPE_LENGTH: 32,
+  MAX_POLICY_TITLE_LENGTH: 120,
+  MAX_POLICY_SUMMARY_LENGTH: 280,
+  MAX_POLICY_VERSION_LENGTH: 32
 };
 function getConfigDecoder() {
   return kit.getStructDecoder([
@@ -2725,6 +2735,184 @@ var PingService = class _PingService {
     await this.pool.publishAll(pongEvent);
   }
 };
+function dTagFor(type) {
+  return `${POLICY_D_TAG_PREFIX}${type}`;
+}
+function validatePolicyInput(input) {
+  if (!POLICY_TYPE_REGEX.test(input.type)) {
+    throw new Error(
+      `Invalid policy type "${input.type}". Must be lowercase ASCII + hyphen, 1-${LIMITS.MAX_POLICY_TYPE_LENGTH} chars, no leading/trailing hyphen.`
+    );
+  }
+  if (input.version.length === 0 || input.version.length > LIMITS.MAX_POLICY_VERSION_LENGTH) {
+    throw new Error(
+      `Policy version must be 1-${LIMITS.MAX_POLICY_VERSION_LENGTH} chars (got ${input.version.length}).`
+    );
+  }
+  if (input.title.length === 0 || input.title.length > LIMITS.MAX_POLICY_TITLE_LENGTH) {
+    throw new Error(
+      `Policy title must be 1-${LIMITS.MAX_POLICY_TITLE_LENGTH} chars (got ${input.title.length}).`
+    );
+  }
+  if (input.summary !== void 0 && input.summary.length > LIMITS.MAX_POLICY_SUMMARY_LENGTH) {
+    throw new Error(
+      `Policy summary too long: ${input.summary.length} chars (max ${LIMITS.MAX_POLICY_SUMMARY_LENGTH}).`
+    );
+  }
+  if (input.content.length === 0) {
+    throw new Error("Policy content cannot be empty.");
+  }
+  if (input.content.length > LIMITS.MAX_POLICY_CONTENT_LENGTH) {
+    throw new Error(
+      `Policy content too long: ${input.content.length} chars (max ${LIMITS.MAX_POLICY_CONTENT_LENGTH}).`
+    );
+  }
+}
+function parsePolicyEvent(event) {
+  if (!nostrTools.verifyEvent(event)) {
+    return null;
+  }
+  if (event.kind !== KIND_LONG_FORM_ARTICLE) {
+    return null;
+  }
+  if (!event.content || event.content.length > LIMITS.MAX_POLICY_CONTENT_LENGTH) {
+    return null;
+  }
+  const dTag = event.tags.find((tag) => tag[0] === "d")?.[1];
+  if (!dTag || !dTag.startsWith(POLICY_D_TAG_PREFIX)) {
+    return null;
+  }
+  const type = event.tags.find((tag) => tag[0] === "policy_type")?.[1];
+  if (!type || !POLICY_TYPE_REGEX.test(type)) {
+    return null;
+  }
+  const version = event.tags.find((tag) => tag[0] === "policy_version")?.[1];
+  if (!version || version.length > LIMITS.MAX_POLICY_VERSION_LENGTH) {
+    return null;
+  }
+  const title = event.tags.find((tag) => tag[0] === "title")?.[1];
+  if (!title || title.length > LIMITS.MAX_POLICY_TITLE_LENGTH) {
+    return null;
+  }
+  const summaryTag = event.tags.find((tag) => tag[0] === "summary")?.[1];
+  const summary = summaryTag !== void 0 && summaryTag.length <= LIMITS.MAX_POLICY_SUMMARY_LENGTH ? summaryTag : void 0;
+  const naddr = nostrTools.nip19.naddrEncode({
+    kind: KIND_LONG_FORM_ARTICLE,
+    pubkey: event.pubkey,
+    identifier: dTag,
+    relays: []
+  });
+  return {
+    type,
+    version,
+    title,
+    summary,
+    content: event.content,
+    naddr,
+    dTag,
+    publishedAt: event.created_at,
+    eventId: event.id,
+    authorPubkey: event.pubkey
+  };
+}
+var PoliciesService = class {
+  constructor(pool) {
+    this.pool = pool;
+  }
+  /**
+   * Fetch all elisym policies published by `pubkey`. Verifies signatures,
+   * dedupes by d-tag (latest `created_at` wins), and returns sorted by `type`
+   * for deterministic UI rendering.
+   *
+   * Returns `[]` on empty result. Network errors propagate to the caller.
+   */
+  async fetchPolicies(pubkey) {
+    const filter = {
+      kinds: [KIND_LONG_FORM_ARTICLE],
+      authors: [pubkey],
+      "#t": [POLICY_T_TAG]
+    };
+    const events = await this.pool.querySync(filter);
+    const latestByDTag = /* @__PURE__ */ new Map();
+    for (const event of events) {
+      const dTag = event.tags.find((tag) => tag[0] === "d")?.[1] ?? "";
+      const prev = latestByDTag.get(dTag);
+      if (!prev || event.created_at > prev.created_at) {
+        latestByDTag.set(dTag, event);
+      }
+    }
+    const policies = [];
+    for (const event of latestByDTag.values()) {
+      const parsed = parsePolicyEvent(event);
+      if (parsed) {
+        policies.push(parsed);
+      }
+    }
+    policies.sort((a, b) => a.type.localeCompare(b.type));
+    return policies;
+  }
+  /**
+   * Publish a policy as a NIP-23 long-form article (kind 30023). Replaces any
+   * existing policy of the same `type` for this pubkey via the addressable
+   * `(kind, pubkey, d-tag)` slot.
+   */
+  async publishPolicy(identity, input) {
+    validatePolicyInput(input);
+    const dTag = dTagFor(input.type);
+    const tags = [
+      ["d", dTag],
+      ["t", POLICY_T_TAG],
+      ["title", input.title],
+      ["policy_type", input.type],
+      ["policy_version", input.version]
+    ];
+    if (input.summary) {
+      tags.push(["summary", input.summary]);
+    }
+    const event = nostrTools.finalizeEvent(
+      {
+        kind: KIND_LONG_FORM_ARTICLE,
+        created_at: Math.floor(Date.now() / 1e3),
+        tags,
+        content: input.content
+      },
+      identity.secretKey
+    );
+    await this.pool.publishAll(event);
+    const naddr = nostrTools.nip19.naddrEncode({
+      kind: KIND_LONG_FORM_ARTICLE,
+      pubkey: event.pubkey,
+      identifier: dTag,
+      relays: []
+    });
+    return { eventId: event.id, naddr };
+  }
+  /**
+   * Tombstone a policy by publishing an empty replacement under the same
+   * `(kind, pubkey, d-tag)` slot. Readers skip events with empty content.
+   */
+  async deletePolicy(identity, type) {
+    if (!POLICY_TYPE_REGEX.test(type)) {
+      throw new Error(`Invalid policy type "${type}".`);
+    }
+    const dTag = dTagFor(type);
+    const event = nostrTools.finalizeEvent(
+      {
+        kind: KIND_LONG_FORM_ARTICLE,
+        created_at: Math.floor(Date.now() / 1e3),
+        tags: [
+          ["d", dTag],
+          ["t", POLICY_T_TAG],
+          ["policy_type", type]
+        ],
+        content: ""
+      },
+      identity.secretKey
+    );
+    await this.pool.publishAll(event);
+    return event.id;
+  }
+};
 
 // src/primitives/bounded-set.ts
 var BoundedSet = class {
@@ -3033,6 +3221,7 @@ var ElisymClient = class {
   marketplace;
   ping;
   media;
+  policies;
   payment;
   constructor(config = {}) {
     this.pool = new NostrPool(config.relays ?? RELAYS);
@@ -3040,6 +3229,7 @@ var ElisymClient = class {
     this.marketplace = new MarketplaceService(this.pool);
     this.ping = new PingService(this.pool);
     this.media = new MediaService(config.uploadUrl);
+    this.policies = new PoliciesService(this.pool);
     this.payment = config.payment ?? new SolanaPaymentStrategy();
   }
   close() {
@@ -3613,6 +3803,7 @@ exports.KIND_JOB_REQUEST = KIND_JOB_REQUEST;
 exports.KIND_JOB_REQUEST_BASE = KIND_JOB_REQUEST_BASE;
 exports.KIND_JOB_RESULT = KIND_JOB_RESULT;
 exports.KIND_JOB_RESULT_BASE = KIND_JOB_RESULT_BASE;
+exports.KIND_LONG_FORM_ARTICLE = KIND_LONG_FORM_ARTICLE;
 exports.KIND_PING = KIND_PING;
 exports.KIND_PONG = KIND_PONG;
 exports.KNOWN_ASSETS = KNOWN_ASSETS;
@@ -3622,9 +3813,13 @@ exports.MarketplaceService = MarketplaceService;
 exports.MediaService = MediaService;
 exports.NATIVE_SOL = NATIVE_SOL;
 exports.NostrPool = NostrPool;
+exports.POLICY_D_TAG_PREFIX = POLICY_D_TAG_PREFIX;
+exports.POLICY_TYPE_REGEX = POLICY_TYPE_REGEX;
+exports.POLICY_T_TAG = POLICY_T_TAG;
 exports.PROTOCOL_PROGRAM_ID_DEVNET = PROTOCOL_PROGRAM_ID_DEVNET;
 exports.PaymentRequestSchema = PaymentRequestSchema;
 exports.PingService = PingService;
+exports.PoliciesService = PoliciesService;
 exports.RELAYS = RELAYS;
 exports.SECRET_REDACT_PATHS = SECRET_REDACT_PATHS;
 exports.SessionSpendLimitEntrySchema = SessionSpendLimitEntrySchema;