@nostrify/nostrify 0.47.1 → 0.48.2

package/dist/uploaders/NostrBuildUploader.ts

@@ -1,15 +1,15 @@
-import { z } from 'zod';
+import { z } from "zod";
 
-import { N64 } from '../utils/N64.ts';
-import { NIP98 } from '../NIP98.ts';
-import type { NostrSigner, NUploader } from '@nostrify/types';
+import { N64 } from "../utils/N64.ts";
+import { NIP98 } from "../NIP98.ts";
+import type { NostrSigner, NUploader } from "@nostrify/types";
 
 /** NostrBuildUploader options. */
 export interface NostrBuildUploaderOpts {
   /** nostr.build endpoint to use. Default: `https://nostr.build/api/v2/upload/files` */
   endpoint?: string;
   /** Signer to authenticate with NIP-98 requests. */
-  signer?: NostrSigner;
+  signer: NostrSigner;
   /** Custom fetch implementation. */
   fetch?: typeof fetch;
 }
@@ -21,7 +21,7 @@ export class NostrBuildUploader implements NUploader {
   private fetch: typeof fetch;
 
   constructor(opts?: NostrBuildUploaderOpts) {
-    this.endpoint = opts?.endpoint ?? 'https://nostr.build/api/v2/upload/files';
+    this.endpoint = opts?.endpoint ?? "https://nostr.build/api/v2/upload/files";
     this.signer = opts?.signer;
     this.fetch = opts?.fetch ?? globalThis.fetch.bind(globalThis);
   }
@@ -29,12 +29,12 @@ export class NostrBuildUploader implements NUploader {
   async upload(
     file: File,
     opts?: { signal?: AbortSignal },
-  ): Promise<[['url', string], ...string[][]]> {
+  ): Promise<[["url", string], ...string[][]]> {
     const formData = new FormData();
-    formData.append('fileToUpload', file);
+    formData.append("fileToUpload", file);
 
     const request = new Request(this.endpoint, {
-      method: 'POST',
+      method: "POST",
       body: formData,
       signal: opts?.signal,
     });
@@ -42,7 +42,7 @@ export class NostrBuildUploader implements NUploader {
     if (this.signer) {
       const t = await NIP98.template(request);
       const event = await this.signer.signEvent(t);
-      request.headers.set('authorization', `Nostr ${N64.encodeEvent(event)}`);
+      request.headers.set("authorization", `Nostr ${N64.encodeEvent(event)}`);
     }
 
     const response = await this.fetch(request);
@@ -50,20 +50,20 @@ export class NostrBuildUploader implements NUploader {
     console.log(json);
     const [data] = NostrBuildUploader.schema().parse(json).data;
 
-    const tags: [['url', string], ...string[][]] = [
-      ['url', data.url],
-      ['m', data.mime],
-      ['x', data.sha256],
-      ['ox', data.original_sha256],
-      ['size', data.size.toString()],
+    const tags: [["url", string], ...string[][]] = [
+      ["url", data.url],
+      ["m", data.mime],
+      ["x", data.sha256],
+      ["ox", data.original_sha256],
+      ["size", data.size.toString()],
     ];
 
     if (data.dimensions) {
-      tags.push(['dim', `${data.dimensions.width}x${data.dimensions.height}`]);
+      tags.push(["dim", `${data.dimensions.width}x${data.dimensions.height}`]);
     }
 
     if (data.blurhash) {
-      tags.push(['blurhash', data.blurhash]);
+      tags.push(["blurhash", data.blurhash]);
     }
 
     return tags;

package/dist/utils/N64.d.ts

@@ -1,4 +1,4 @@
-import type { NostrEvent } from '@nostrify/types';
+import type { NostrEvent } from "@nostrify/types";
 /** Nostr base64 helper utilities. */
 export declare class N64 {
     /** Encode an event as a base64 string. */

package/dist/utils/N64.js

@@ -1,13 +1,13 @@
-import { decodeBase64, encodeBase64 } from "@std/encoding/base64";
+import { fromBase64, toBase64 } from "@smithy/util-base64";
 import { NSchema as n } from "../NSchema.js";
 class N64 {
   /** Encode an event as a base64 string. */
   static encodeEvent(event) {
-    return encodeBase64(JSON.stringify(event));
+    return toBase64(JSON.stringify(event));
   }
   /** Decode an event from a base64 string. Validates the event's structure but does not verify its signature. */
   static decodeEvent(base64) {
-    const bytes = decodeBase64(base64);
+    const bytes = fromBase64(base64);
     const text = new TextDecoder().decode(bytes);
     return n.json().pipe(n.event()).parse(text);
   }

package/dist/utils/N64.ts

@@ -1,18 +1,18 @@
-import type { NostrEvent } from '@nostrify/types';
-import { decodeBase64, encodeBase64 } from '@std/encoding/base64';
+import type { NostrEvent } from "@nostrify/types";
+import { fromBase64, toBase64 } from "@smithy/util-base64";
 
-import { NSchema as n } from '../NSchema.ts';
+import { NSchema as n } from "../NSchema.ts";
 
 /** Nostr base64 helper utilities. */
 export class N64 {
   /** Encode an event as a base64 string. */
   static encodeEvent(event: NostrEvent): string {
-    return encodeBase64(JSON.stringify(event));
+    return toBase64(JSON.stringify(event));
   }
 
   /** Decode an event from a base64 string. Validates the event's structure but does not verify its signature. */
   static decodeEvent(base64: string): NostrEvent {
-    const bytes = decodeBase64(base64);
+    const bytes = fromBase64(base64);
     const text = new TextDecoder().decode(bytes);
 
     return n

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nostrify/nostrify",
-  "version": "0.47.1",
+  "version": "0.48.2",
   "exports": {
     ".": "./dist/mod.js",
     "./ln": "./dist/ln/mod.js",
@@ -12,21 +12,26 @@
   "types": "dist/mod.d.ts",
   "type": "module",
   "dependencies": {
-    "ws": "^8.18.3",
+    "@scure/base": "^2.0.0",
+    "@smithy/util-base64": "^4.3.0",
+    "@smithy/util-hex-encoding": "^4.2.0",
+    "@types/node": "^24.1.0",
     "lru-cache": "^10.2.0",
     "nostr-tools": "^2.13.0",
     "websocket-ts": "^2.2.1",
+    "ws": "^8.18.3",
     "zod": "^3.23.8",
-    "@types/node": "^24.1.0",
-    "@scure/base": "^1.2.6",
-    "@std/encoding": "npm:@jsr/std__encoding@^0.224.1",
-    "@nostrify/types": "0.36.7"
+    "@nostrify/types": "0.36.8"
   },
   "publishConfig": {
     "access": "public"
   },
+  "devDependencies": {
+    "@types/ws": "^8.18.1"
+  },
   "scripts": {
     "build": "npx tsc -p tsconfig.json && node ../../esbuild.config.js --package ./",
+    "typecheck": "npx tsc --noEmit",
     "setup": "pnpm i",
     "test": "node --test \"**/*.test.ts\""
   }

package/uploaders/BlossomUploader.ts

@@ -1,13 +1,13 @@
-import type { NostrSigner, NUploader } from '@nostrify/types';
-import { encodeHex } from '@std/encoding/hex';
-import { z } from 'zod';
+import type { NostrSigner, NUploader } from "@nostrify/types";
+import { toHex } from "@smithy/util-hex-encoding";
+import { z } from "zod";
 
-import { N64 } from '../utils/N64.ts';
+import { N64 } from "../utils/N64.ts";
 
 /** BlossomUploader options. */
 export interface BlossomUploaderOpts {
   /** Blossom servers to use. */
-  servers: Request['url'][];
+  servers: Request["url"][];
   /** Signer for Blossom authorizations. */
   signer: NostrSigner;
   /** Custom fetch implementation. */
@@ -18,7 +18,7 @@ export interface BlossomUploaderOpts {
 
 /** Upload files to Blossom servers. */
 export class BlossomUploader implements NUploader {
-  private servers: Request['url'][];
+  private servers: Request["url"][];
   private signer: NostrSigner;
   private fetch: typeof fetch;
   private expiresIn: number;
@@ -33,10 +33,12 @@ export class BlossomUploader implements NUploader {
   async upload(
     file: File,
     opts?: { signal?: AbortSignal },
-  ): Promise<[['url', string], ...string[][]]> {
-    const x = encodeHex(
-      await crypto.subtle.digest('SHA-256', await file.arrayBuffer()),
+  ): Promise<[["url", string], ...string[][]]> {
+    const digest = await crypto.subtle.digest(
+      "SHA-256",
+      await file.arrayBuffer(),
     );
+    const x = toHex(new Uint8Array(digest));
 
     const now = Date.now();
     const expiration = now + this.expiresIn;
@@ -46,24 +48,24 @@ export class BlossomUploader implements NUploader {
       content: `Upload ${file.name}`,
       created_at: Math.floor(now / 1000),
       tags: [
-        ['t', 'upload'],
-        ['x', x],
-        ['size', file.size.toString()],
-        ['expiration', Math.floor(expiration / 1000).toString()],
+        ["t", "upload"],
+        ["x", x],
+        ["size", file.size.toString()],
+        ["expiration", Math.floor(expiration / 1000).toString()],
       ],
     });
 
     const authorization = `Nostr ${N64.encodeEvent(event)}`;
 
     return Promise.any(this.servers.map(async (server) => {
-      const url = new URL('/upload', server);
+      const url = new URL("/upload", server);
 
       const response = await this.fetch(url, {
-        method: 'PUT',
+        method: "PUT",
         body: file,
         headers: {
           authorization,
-          'content-type': file.type,
+          "content-type": file.type,
         },
         signal: opts?.signal,
       });
@@ -71,15 +73,15 @@ export class BlossomUploader implements NUploader {
       const json = await response.json();
       const data = BlossomUploader.schema().parse(json);
 
-      const tags: [['url', string], ...string[][]] = [
-        ['url', data.url],
-        ['x', data.sha256],
-        ['ox', data.sha256],
-        ['size', data.size.toString()],
+      const tags: [["url", string], ...string[][]] = [
+        ["url", data.url],
+        ["x", data.sha256],
+        ["ox", data.sha256],
+        ["size", data.size.toString()],
       ];
 
       if (data.type) {
-        tags.push(['m', data.type]);
+        tags.push(["m", data.type]);
       }
 
       return tags;

package/uploaders/NostrBuildUploader.test.ts

@@ -6,6 +6,8 @@ import fs from "node:fs/promises";
 
 import { NostrBuildUploader } from "./NostrBuildUploader.ts";
 import { Readable } from "node:stream";
+import { NSecSigner } from "../NSecSigner.ts";
+import { hexToBytes } from "nostr-tools/utils";
 
 await test(
   "NostrBuildUploader.upload",
@@ -18,7 +20,20 @@ await test(
       .blob();
     const file = new File([blob], "voadi.png", { type: "image/png" });
 
-    const uploader = new NostrBuildUploader();
+    const seckey = process.env.NOSTRIFY_NBU_SECRET_KEY;
+    if (!seckey) {
+      throw new Error(
+        "nostr.build with default uploader requires a secret key to be configured",
+      );
+    }
+
+    const uploader = new NostrBuildUploader({
+      signer: new NSecSigner(
+        hexToBytes(
+          seckey,
+        ),
+      ),
+    });
     const tags = await uploader.upload(file);
 
     deepStrictEqual(tags, [

package/uploaders/NostrBuildUploader.ts

@@ -1,15 +1,15 @@
-import { z } from 'zod';
+import { z } from "zod";
 
-import { N64 } from '../utils/N64.ts';
-import { NIP98 } from '../NIP98.ts';
-import type { NostrSigner, NUploader } from '@nostrify/types';
+import { N64 } from "../utils/N64.ts";
+import { NIP98 } from "../NIP98.ts";
+import type { NostrSigner, NUploader } from "@nostrify/types";
 
 /** NostrBuildUploader options. */
 export interface NostrBuildUploaderOpts {
   /** nostr.build endpoint to use. Default: `https://nostr.build/api/v2/upload/files` */
   endpoint?: string;
   /** Signer to authenticate with NIP-98 requests. */
-  signer?: NostrSigner;
+  signer: NostrSigner;
   /** Custom fetch implementation. */
   fetch?: typeof fetch;
 }
@@ -21,7 +21,7 @@ export class NostrBuildUploader implements NUploader {
   private fetch: typeof fetch;
 
   constructor(opts?: NostrBuildUploaderOpts) {
-    this.endpoint = opts?.endpoint ?? 'https://nostr.build/api/v2/upload/files';
+    this.endpoint = opts?.endpoint ?? "https://nostr.build/api/v2/upload/files";
     this.signer = opts?.signer;
     this.fetch = opts?.fetch ?? globalThis.fetch.bind(globalThis);
   }
@@ -29,12 +29,12 @@ export class NostrBuildUploader implements NUploader {
   async upload(
     file: File,
     opts?: { signal?: AbortSignal },
-  ): Promise<[['url', string], ...string[][]]> {
+  ): Promise<[["url", string], ...string[][]]> {
     const formData = new FormData();
-    formData.append('fileToUpload', file);
+    formData.append("fileToUpload", file);
 
     const request = new Request(this.endpoint, {
-      method: 'POST',
+      method: "POST",
       body: formData,
       signal: opts?.signal,
     });
@@ -42,7 +42,7 @@ export class NostrBuildUploader implements NUploader {
     if (this.signer) {
       const t = await NIP98.template(request);
       const event = await this.signer.signEvent(t);
-      request.headers.set('authorization', `Nostr ${N64.encodeEvent(event)}`);
+      request.headers.set("authorization", `Nostr ${N64.encodeEvent(event)}`);
     }
 
     const response = await this.fetch(request);
@@ -50,20 +50,20 @@ export class NostrBuildUploader implements NUploader {
     console.log(json);
     const [data] = NostrBuildUploader.schema().parse(json).data;
 
-    const tags: [['url', string], ...string[][]] = [
-      ['url', data.url],
-      ['m', data.mime],
-      ['x', data.sha256],
-      ['ox', data.original_sha256],
-      ['size', data.size.toString()],
+    const tags: [["url", string], ...string[][]] = [
+      ["url", data.url],
+      ["m", data.mime],
+      ["x", data.sha256],
+      ["ox", data.original_sha256],
+      ["size", data.size.toString()],
     ];
 
     if (data.dimensions) {
-      tags.push(['dim', `${data.dimensions.width}x${data.dimensions.height}`]);
+      tags.push(["dim", `${data.dimensions.width}x${data.dimensions.height}`]);
     }
 
     if (data.blurhash) {
-      tags.push(['blurhash', data.blurhash]);
+      tags.push(["blurhash", data.blurhash]);
     }
 
     return tags;

package/utils/N64.ts

@@ -1,18 +1,18 @@
-import type { NostrEvent } from '@nostrify/types';
-import { decodeBase64, encodeBase64 } from '@std/encoding/base64';
+import type { NostrEvent } from "@nostrify/types";
+import { fromBase64, toBase64 } from "@smithy/util-base64";
 
-import { NSchema as n } from '../NSchema.ts';
+import { NSchema as n } from "../NSchema.ts";
 
 /** Nostr base64 helper utilities. */
 export class N64 {
   /** Encode an event as a base64 string. */
   static encodeEvent(event: NostrEvent): string {
-    return encodeBase64(JSON.stringify(event));
+    return toBase64(JSON.stringify(event));
   }
 
   /** Decode an event from a base64 string. Validates the event's structure but does not verify its signature. */
   static decodeEvent(base64: string): NostrEvent {
-    const bytes = decodeBase64(base64);
+    const bytes = fromBase64(base64);
     const text = new TextDecoder().decode(bytes);
 
     return n

package/.turbo/turbo-setup.log

@@ -1,13 +0,0 @@
-
-
-> @nostrify/nostrify@0.46.7 setup /home/sid/repos/nostrify/packages/nostrify
-> pnpm i
-
-(node:1234099) [DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.
-(Use `node --trace-deprecation ...` to show where the warning was created)
-Scope: all 9 workspace projects
-../..                                    | Progress: resolved 1, reused 0, downloaded 0, added 0
-../..                                    |   +1 +
-../..                                    | Progress: resolved 1, reused 0, downloaded 0, added 0
-../..                                    | Progress: resolved 1, reused 1, downloaded 0, added 0
-../..                                    | Progress: resolved 1, reused 1, downloaded 0, added 0, done

package/.turbo/turbo-test.log

@@ -1,91 +0,0 @@
-
-
-> @nostrify/nostrify@0.46.8 test /home/sid/repos/nostrify/packages/nostrify
-> node --test "**/*.test.ts"
-
-✔ BunkerURI (2.901722ms)
-✔ BunkerURI.fromJSON (0.681727ms)
-✔ NBrowserSigner - without extension (2.955361ms)
-✔ NBrowserSigner - with extension polyfill (142.479686ms)
-✔ NBrowserSigner.nip44 - with extension polyfill (63.176698ms)
-✔ NBrowserSigner.nip04 - with extension polyfill (94.046199ms)
-✔ NBrowserSigner.getRelays - with extension polyfill (1.225726ms)
-✔ NBrowserSigner - missing nip44 support (0.470316ms)
-✔ NBrowserSigner - missing nip04 support (0.596869ms)
-✔ NBrowserSigner - feature detection (0.692134ms)
-✔ NCache (4.463457ms)
-✔ NConnectSigner.signEvent with nip04 encryption (264.497854ms)
-✔ NConnectSigner.signEvent with nip44 encryption (151.108865ms)
-✔ NIP05.lookup (82.449297ms)
-✔ NIP05.lookup with invalid values but valid profile pointer (5.343535ms)
-✔ NIP05.lookup with invalid document (5.910931ms)
-✔ NIP50.parseInput (6.388441ms)
-✔ NIP50.parseInput with negated token (0.443007ms)
-✔ NIP98.template (3.769298ms)
-✔ NIP98.template with payload (18.668676ms)
-✔ NIP98.verify (102.562862ms)
-✔ NIP98.verify fails with missing header (4.419038ms)
-✔ NIP98.verify fails with missing token (2.752191ms)
-✔ NIP98.verify fails with invalid token (4.587427ms)
-✔ NIP98.verify fails with invalid event (16.989187ms)
-✔ NIP98.verify fails with wrong event kind (40.621459ms)
-✔ NIP98.verify fails with wrong request URL (41.071101ms)
-✔ NIP98.verify fails with wrong request method (62.625645ms)
-✔ NIP98.verify fails with expired event (20.760162ms)
-✔ NIP98.verify fails with invalid payload (51.97091ms)
-✔ NKinds (3.308412ms)
-✔ NPool.query (368.093259ms)
-✔ NPool.req (266.969001ms)
-✔ NPool.event (232.161184ms)
-✔ NRelay1.query (280.362725ms)
-✔ NRelay1.query mismatched filter (245.542477ms)
-✔ NRelay1.req (247.658198ms)
-✔ NRelay1.event (216.357493ms)
-﹣ NRelay1 backoff (0.334682ms) # SKIP
-▶ NRelay1 idleTimeout
-  ✔ websocket opens (40.531572ms)
-  ✔ websocket closes after idleTimeout (150.405626ms)
-  ✔ websocket wakes up during activity (14.544161ms)
-✔ NRelay1 idleTimeout (209.795356ms)
-✔ NRelay1.count rejects when the server sends CLOSED (6.440892ms)
-✔ NRelay1 closes when it receives a binary message (5.03225ms)
-✔ n.id (3.950608ms)
-✔ n.bech32 (1.817636ms)
-✔ n.filter (10.95275ms)
-✔ n.event (2.561941ms)
-✔ n.metadata (11.862022ms)
-✔ NSecSigner (178.164717ms)
-✔ NSecSigner.nip44 (31.935079ms)
-✔ NSet (19.978352ms)
-✔ NSet.add (replaceable) (0.615308ms)
-✔ NSet.add (parameterized) (0.985888ms)
-✔ NSet.add (deletion) (0.380918ms)
-✔ Construct a RelayError from the reason message (1.717692ms)
-✔ Throw a new RelayError if the OK message is false (0.750801ms)
-✔ LNURL.fromString (7.817616ms)
-✔ LNURL.fromLightningAddress (0.932529ms)
-✔ LNURL.toString (1.933713ms)
-✔ LNURL.getDetails (111.66131ms)
-✔ LNURL.getInvoice (13.562812ms)
-✔ ErrorRelay (112.209428ms)
-✔ MockRelay (3.019126ms)
-﹣ BlossomUploader.upload (1.127947ms) # SKIP
-﹣ NostrBuildUploader.upload (2.842008ms) # SKIP
-✔ CircularSet (2.247513ms)
-✔ push, iterate, & close (103.751782ms)
-✔ close & reopen (0.982257ms)
-✔ aborts with signal (51.656203ms)
-✔ already aborted signal in constructor (1.251916ms)
-✔ push after abort (0.906129ms)
-✔ multiple messages in queue (0.531637ms)
-✔ N64 (8.171994ms)
-✔ N64.encodeEvent (0.513338ms)
-✔ N64.decodeEvent (1.449988ms)
-ℹ tests 77
-ℹ suites 0
-ℹ pass 74
-ℹ fail 0
-ℹ cancelled 0
-ℹ skipped 3
-ℹ todo 0
-ℹ duration_ms 2192.909865