@nostrify/nostrify 0.50.4 → 0.51.0

package/.turbo/turbo-build.log

@@ -1,32 +1,36 @@
-
-> @nostrify/nostrify@0.50.4 build /home/alex/Projects/nostrify/packages/nostrify
-> npx tsc -p tsconfig.json && node ../../esbuild.config.js --package ./
-
-npm warn Unknown env config "verify-deps-before-run". This will stop working in the next major version of npm.
-npm warn Unknown env config "_jsr-registry". This will stop working in the next major version of npm.
-Building with esbuild...
-
-  dist/NRelay1.js                       10.7kb
-  dist/NSchema.js                        8.2kb
-  dist/NPool.js                          6.0kb
-  dist/test/TestRelayServer.js           4.4kb
-  dist/NSet.js                           4.1kb
-  dist/NConnectSigner.js                 3.9kb
-  dist/NBrowserSigner.js                 3.9kb
-  dist/ln/LNURL.js                       3.3kb
-  dist/NIP98.js                          2.7kb
-  dist/uploaders/BlossomUploader.js      1.9kb
-  dist/uploaders/NostrBuildUploader.js   1.9kb
-  dist/test/MockRelay.js                 1.4kb
-  dist/BunkerURI.js                      1.4kb
-  dist/NKinds.js                         1.1kb
-  dist/NIP05.js                          1.1kb
-  dist/NSecSigner.js                     1.1kb
-  dist/utils/Machina.js                  925b 
-  dist/NCache.js                         828b 
-  dist/mod.js                            815b 
-  dist/test/mod.js                       701b 
-  ...and 11 more output files...
-
-⚡ Done in 21ms
-Done!
+
+
+> @nostrify/nostrify@0.51.0 build /home/alex/Projects/nostrify/packages/nostrify
+> npx tsc -p tsconfig.json && node ../../esbuild.config.js --package ./
+
+npm warn Unknown env config "verify-deps-before-run". This will stop working in the next major version of npm.
+npm warn Unknown env config "_jsr-registry". This will stop working in the next major version of npm.
+⠙Building with esbuild...
+
+  dist/NRelay1.js                       12.8kb
+  dist/NSchema.js                        8.2kb
+  dist/NPool.js                          6.0kb
+  dist/test/TestRelayServer.js           4.7kb
+  dist/NSet.js                           4.1kb
+  dist/NConnectSigner.js                 3.9kb
+  dist/NBrowserSigner.js                 3.9kb
+  dist/ln/LNURL.js                       3.3kb
+  dist/NIP98.js                          2.7kb
+  dist/uploaders/BlossomUploader.js      2.3kb
+  dist/uploaders/NostrBuildUploader.js   1.9kb
+  dist/test/MockRelay.js                 1.4kb
+  dist/BunkerURI.js                      1.4kb
+  dist/NKinds.js                         1.1kb
+  dist/utils/getFilterLimit.js           1.1kb
+  dist/NIP05.js                          1.1kb
+  dist/NSecSigner.js                     1.1kb
+  dist/utils/Machina.js                  925b 
+  dist/NCache.js                         828b 
+  dist/mod.js                            815b 
+  dist/test/mod.js                       701b 
+  dist/NIP98Client.js                    664b 
+  dist/test/ErrorRelay.js                557b 
+  ...and 9 more output files...
+
+⚡ Done in 22ms
+Done!

package/.turbo/turbo-test.log

@@ -1,114 +1,134 @@
-
-
-> @nostrify/nostrify@0.50.0 test /home/alex/Projects/nostrify/packages/nostrify
-> node --test "**/*.test.ts"
-
-✔ BunkerURI (2.746358ms)
-✔ BunkerURI.fromJSON (0.592066ms)
-✔ NBrowserSigner - without extension (2.480267ms)
-✔ NBrowserSigner - with extension polyfill (166.202262ms)
-✔ NBrowserSigner.nip44 - with extension polyfill (48.982883ms)
-✔ NBrowserSigner.nip04 - with extension polyfill (24.263617ms)
-✔ NBrowserSigner.getRelays - with extension polyfill (1.466605ms)
-✔ NBrowserSigner - missing nip44 support (1.647116ms)
-✔ NBrowserSigner - missing nip04 support (0.388212ms)
-✔ NBrowserSigner - feature detection (1.960176ms)
-✔ NCache (11.489503ms)
-✔ NConnectSigner.signEvent with nip04 encryption (236.48745ms)
-✔ NConnectSigner.signEvent with nip44 encryption (72.89594ms)
-✔ NIP05.lookup (83.374316ms)
-✔ NIP05.lookup with invalid values but valid profile pointer (12.756762ms)
-✔ NIP05.lookup with invalid document (20.462881ms)
-✔ NIP50.parseInput (7.233418ms)
-✔ NIP50.parseInput with negated token (0.507317ms)
-✔ NIP98.template (4.503421ms)
-✔ NIP98.template with payload (22.610571ms)
-✔ NIP98.verify (166.641341ms)
-✔ NIP98.verify fails with missing header (3.102239ms)
-✔ NIP98.verify fails with missing token (1.647737ms)
-✔ NIP98.verify fails with invalid token (2.754143ms)
-✔ NIP98.verify fails with invalid event (20.081863ms)
-✔ NIP98.verify fails with wrong event kind (25.410189ms)
-✔ NIP98.verify fails with wrong request URL (19.265203ms)
-✔ NIP98.verify fails with wrong request method (25.121986ms)
-✔ NIP98.verify fails with expired event (14.228117ms)
-✔ NIP98.verify fails with invalid payload (45.486742ms)
-✔ NIP98Client.fetch - basic GET request (162.816349ms)
-✔ NIP98Client.fetch - POST request with body (45.826032ms)
-✔ NIP98Client.fetch - with Request object input (38.387778ms)
-✔ NIP98Client.fetch - with URL object input (25.195494ms)
-✔ NIP98Client.fetch - uses default fetch when not provided (11.27616ms)
-✔ NIP98Client.fetch - preserves existing headers (13.853149ms)
-✔ NIP98Client.fetch - event can be verified with NIP98.verify (36.586932ms)
-✔ NIP98Client.fetch - handles different HTTP methods (65.246167ms)
-✔ NKinds (3.899813ms)
-✔ NPool.query (480.159465ms)
-✔ NPool.req (162.806249ms)
-✔ NPool.event (85.226228ms)
-✔ NPool.query with eoseTimeout (625.249102ms)
-✔ NPool.query with eoseTimeout disabled (538.136077ms)
-✔ NRelay1.query (316.888891ms)
-✔ NRelay1.query with NIP-50 search preserves relay order (101.77541ms)
-✔ NRelay1.query mismatched filter (35.660044ms)
-✔ NRelay1.req (107.715539ms)
-✔ NRelay1.event (27.486574ms)
-﹣ NRelay1 backoff (0.35573ms) # SKIP
-▶ NRelay1 idleTimeout
-  ✔ websocket opens (4.890911ms)
-  ✔ websocket closes after idleTimeout (150.939876ms)
-  ✔ websocket wakes up during activity (31.703544ms)
-✔ NRelay1 idleTimeout (193.2402ms)
-✔ NRelay1.count rejects when the server sends CLOSED (21.977147ms)
-✔ NRelay1 closes when it receives a binary message (9.325142ms)
-✔ n.id (19.213084ms)
-✔ n.bech32 (3.798672ms)
-✔ n.filter (47.81926ms)
-✔ n.event (34.382045ms)
-✔ n.metadata (68.049272ms)
-✔ NSecSigner (110.350227ms)
-✔ NSecSigner.nip44 (32.295571ms)
-✔ NSet (42.044732ms)
-✔ NSet.add (replaceable) (0.57253ms)
-✔ NSet.add (parameterized) (1.000306ms)
-✔ NSet.add (deletion) (0.450089ms)
-✔ Construct a RelayError from the reason message (2.143422ms)
-✔ Throw a new RelayError if the OK message is false (0.52506ms)
-✔ LNURL.fromString (7.847636ms)
-✔ LNURL.fromLightningAddress (1.686861ms)
-✔ LNURL.toString (1.142133ms)
-✔ LNURL.getDetails (86.164146ms)
-✔ LNURL.getInvoice (13.898675ms)
-✔ ErrorRelay (94.163638ms)
-✔ MockRelay (3.052615ms)
-✔ BlossomUploader.upload (733.428376ms)
-✖ NostrBuildUploader.upload (33.449327ms)
-✔ CircularSet (2.438347ms)
-✔ push, iterate, & close (107.313622ms)
-✔ close & reopen (0.74796ms)
-✔ aborts with signal (52.688019ms)
-✔ already aborted signal in constructor (0.717774ms)
-✔ push after abort (3.810805ms)
-✔ multiple messages in queue (0.582538ms)
-✔ N64 (17.530693ms)
-✔ N64.encodeEvent (0.432495ms)
-✔ N64.decodeEvent (4.268328ms)
-ℹ tests 88
-ℹ suites 0
-ℹ pass 86
-ℹ fail 1
-ℹ cancelled 0
-ℹ skipped 1
-ℹ todo 0
-ℹ duration_ms 3673.242963
-
-✖ failing tests:
-
-test at uploaders/NostrBuildUploader.test.ts:12:7
-✖ NostrBuildUploader.upload (33.449327ms)
-  Error: nostr.build with default uploader requires a secret key to be configured
-      at TestContext.<anonymous> (file:///home/alex/Projects/nostrify/packages/nostrify/uploaders/NostrBuildUploader.test.ts:25:13)
-      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-      at async Test.run (node:internal/test_runner/test:1102:7)
-      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:358:3)
-      at async file:///home/alex/Projects/nostrify/packages/nostrify/uploaders/NostrBuildUploader.test.ts:12:1
- ELIFECYCLE  Test failed. See above for more details.
+
+> @nostrify/nostrify@0.50.5 test /home/alex/Projects/nostrify/packages/nostrify
+> node --test "**/*.test.ts"
+
+✔ BunkerURI (4.028694ms)
+✔ BunkerURI.fromJSON (1.194504ms)
+✔ NBrowserSigner - without extension (408.101823ms)
+✔ NBrowserSigner - with extension polyfill (177.58652ms)
+✔ NBrowserSigner.nip44 - with extension polyfill (53.432633ms)
+✔ NBrowserSigner.nip04 - with extension polyfill (31.318082ms)
+✔ NBrowserSigner.getRelays - with extension polyfill (3.337439ms)
+✔ NBrowserSigner - missing nip44 support (1.117529ms)
+✔ NBrowserSigner - missing nip04 support (1.643893ms)
+✔ NBrowserSigner - feature detection (1.047697ms)
+✔ NBrowserSigner - extension appears after delay (306.657599ms)
+✔ NBrowserSigner - nip44 works when extension appears after delay (336.700014ms)
+✔ NCache (32.945945ms)
+✔ NConnectSigner.signEvent with nip04 encryption (509.267873ms)
+✔ NConnectSigner.signEvent with nip44 encryption (111.33369ms)
+✔ NIP05.lookup (154.653466ms)
+✔ NIP05.lookup with invalid values but valid profile pointer (12.873408ms)
+✔ NIP05.lookup with invalid document (16.375048ms)
+✔ NIP50.parseInput (12.96974ms)
+✔ NIP50.parseInput with negated token (0.650367ms)
+✔ NIP98.template (17.834683ms)
+✔ NIP98.template with payload (52.701182ms)
+✔ NIP98.verify (228.10839ms)
+✔ NIP98.verify fails with missing header (6.332332ms)
+✔ NIP98.verify fails with missing token (2.281917ms)
+✔ NIP98.verify fails with invalid token (2.654441ms)
+✔ NIP98.verify fails with invalid event (31.769946ms)
+✔ NIP98.verify fails with wrong event kind (76.829174ms)
+✔ NIP98.verify fails with wrong request URL (28.079039ms)
+✔ NIP98.verify fails with wrong request method (26.629332ms)
+✔ NIP98.verify fails with expired event (23.384448ms)
+✔ NIP98.verify fails with invalid payload (43.967678ms)
+✔ NIP98Client.fetch - basic GET request (355.876029ms)
+✔ NIP98Client.fetch - POST request with body (162.747693ms)
+✔ NIP98Client.fetch - with Request object input (78.965075ms)
+✔ NIP98Client.fetch - with URL object input (46.142403ms)
+✔ NIP98Client.fetch - uses default fetch when not provided (56.968837ms)
+✔ NIP98Client.fetch - preserves existing headers (38.948264ms)
+✔ NIP98Client.fetch - event can be verified with NIP98.verify (44.201489ms)
+✔ NIP98Client.fetch - handles different HTTP methods (150.07877ms)
+✔ NKinds (2.788644ms)
+✔ NPool.query (692.063225ms)
+✔ NPool.req (214.981082ms)
+✔ NPool.event (126.440494ms)
+✔ NPool.query with eoseTimeout (659.85331ms)
+✔ NPool.query with eoseTimeout disabled (565.131734ms)
+✔ NRelay1.query (485.876171ms)
+✔ NRelay1.query with NIP-50 search preserves relay order (120.209463ms)
+✔ NRelay1.query mismatched filter (63.99025ms)
+✔ NRelay1.req (191.837028ms)
+✔ NRelay1.event sends while connection is open (41.721819ms)
+✔ NRelay1.event sends before connection is open (63.494985ms)
+✔ NRelay1.event throws when OK is false (29.705869ms)
+✔ NRelay1.event sends after reconnect from CLOSING state (88.273164ms)
+﹣ NRelay1 backoff (0.48232ms) # SKIP
+▶ NRelay1 idleTimeout
+  ✔ websocket opens (6.360034ms)
+  ✔ websocket closes after idleTimeout (149.970737ms)
+  ✔ websocket wakes up during activity (27.214357ms)
+✔ NRelay1 idleTimeout (191.021158ms)
+✔ NRelay1.count rejects when the server sends CLOSED (20.042641ms)
+✔ NRelay1 closes when it receives a binary message (17.620458ms)
+✔ NRelay1 NIP-42 auth-required REQ retry (118.486511ms)
+✔ NRelay1 NIP-42 auth-required EVENT retry (62.036903ms)
+✔ NRelay1 NIP-42 auth-required does not retry without auth callback (18.852174ms)
+✔ NRelay1 NIP-42 auth-required does not retry infinitely (68.63132ms)
+✔ n.id (24.32918ms)
+✔ n.bech32 (7.411329ms)
+✔ n.filter (135.407499ms)
+✔ n.event (90.556593ms)
+✔ n.metadata (164.43043ms)
+✔ NSecSigner (371.990996ms)
+✔ NSecSigner.nip44 (105.236803ms)
+✔ NSet (49.973754ms)
+✔ NSet.add (replaceable) (0.581187ms)
+✔ NSet.add (parameterized) (5.114544ms)
+✔ NSet.add (deletion) (0.606013ms)
+✔ Construct a RelayError from the reason message (2.640955ms)
+✔ Throw a new RelayError if the OK message is false (0.810269ms)
+✔ LNURL.fromString (13.598537ms)
+✔ LNURL.fromLightningAddress (2.106787ms)
+✔ LNURL.toString (0.99578ms)
+✔ LNURL.getDetails (113.054838ms)
+✔ LNURL.getInvoice (40.071474ms)
+✔ ErrorRelay (216.352701ms)
+✔ MockRelay (5.899475ms)
+✔ BlossomUploader.upload (1023.233031ms)
+✖ NostrBuildUploader.upload (35.675948ms)
+✔ CircularSet (3.09927ms)
+✔ push, iterate, & close (107.709499ms)
+✔ close & reopen (0.89543ms)
+✔ aborts with signal (55.223022ms)
+✔ already aborted signal in constructor (0.925958ms)
+✔ push after abort (3.545873ms)
+✔ multiple messages in queue (0.634127ms)
+✔ N64 (20.852057ms)
+✔ N64.encodeEvent (0.470058ms)
+✔ N64.decodeEvent (13.615198ms)
+✔ getFilterLimit returns Infinity for single replaceable kind + single author (2.743969ms)
+✔ getFilterLimit returns Infinity for single addressable kind + single author + single #d (0.812543ms)
+✔ getFilterLimit allows since/until on coordinate filters (0.598139ms)
+✔ getFilterLimit respects explicit limit on coordinate filters (0.530141ms)
+✔ getFilterLimit enforces limit for multiple authors with replaceable kind (0.868239ms)
+✔ getFilterLimit enforces limit for multiple kinds with replaceable kinds (0.580065ms)
+✔ getFilterLimit returns Infinity for addressable kind without #d (not a coordinate filter, but nostr-tools also returns Infinity) (0.439419ms)
+✔ getFilterLimit enforces limit for addressable kind with multiple #d values (0.465198ms)
+✔ getFilterLimit enforces limit when extra filter properties are present (2.643249ms)
+✔ getFilterLimit returns 0 for empty arrays (0.566329ms)
+✔ getFilterLimit works normally for regular kinds (0.710531ms)
+✔ getFilterLimit works normally for ids filter (0.295778ms)
+ℹ tests 109
+ℹ suites 0
+ℹ pass 107
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 1
+ℹ todo 0
+ℹ duration_ms 4739.688853
+
+✖ failing tests:
+
+test at uploaders/NostrBuildUploader.test.ts:12:7
+✖ NostrBuildUploader.upload (35.675948ms)
+  Error: nostr.build with default uploader requires a secret key to be configured
+      at TestContext.<anonymous> (file:///home/alex/Projects/nostrify/packages/nostrify/uploaders/NostrBuildUploader.test.ts:25:13)
+      at process.processTicksAndRejections (node:internal/process/task_queues:103:5)
+      at async Test.run (node:internal/test_runner/test:1110:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:358:3)
+      at async file:///home/alex/Projects/nostrify/packages/nostrify/uploaders/NostrBuildUploader.test.ts:12:1
+ ELIFECYCLE  Test failed. See above for more details.

package/.turbo/turbo-typecheck.log

@@ -1,6 +1,8 @@
-
-> @nostrify/nostrify@0.50.4 typecheck /home/alex/Projects/nostrify/packages/nostrify
-> npx tsc --noEmit
-
-npm warn Unknown env config "verify-deps-before-run". This will stop working in the next major version of npm.
-npm warn Unknown env config "_jsr-registry". This will stop working in the next major version of npm.
+
+
+> @nostrify/nostrify@0.51.0 typecheck /home/alex/Projects/nostrify/packages/nostrify
+> npx tsc --noEmit
+
+npm warn Unknown env config "verify-deps-before-run". This will stop working in the next major version of npm.
+npm warn Unknown env config "_jsr-registry". This will stop working in the next major version of npm.
+⠙

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.51.0
+
+### Minor Changes
+
+- a9dc610: NRelay1: automatically retry REQ and EVENT after NIP-42 AUTH
+
+  When a relay responds with `auth-required:` in a CLOSED or OK message, NRelay1 now waits for the AUTH flow to complete and re-sends the original request. This implements the full NIP-42 client-side protocol flow. Retries are limited to one attempt per subscription/event to prevent infinite loops.
+
+## 0.50.5
+
+### Patch Changes
+
+- Fix NRelay1 and NPool to not enforce an inferred limit on coordinate filters. Filters targeting a single replaceable kind + single author, or a single addressable kind + single author + single `#d` tag, now allow relays to send back historical events instead of closing the subscription after receiving just one event.
+
 ## 0.50.4
 
 ### Patch Changes

package/NIP05.ts

@@ -10,7 +10,7 @@ interface LookupOpts {
 export class NIP05 {
   /** NIP-05 value regex. */
   static regex(): RegExp {
-    return /^(?:([\w.+-]+)@)?([\w.-]+)$/;
+    return /^(?:([\w.+-]+)@)?((?:[\w-]+\.)+[\w-]+)$/;
   }
 
   /** Nostr pubkey with relays object. */

package/NPool.ts

@@ -6,7 +6,7 @@ import type {
   NostrRelayEVENT,
   NRelay,
 } from '@nostrify/types';
-import { getFilterLimit } from 'nostr-tools';
+import { getFilterLimit } from './utils/getFilterLimit.ts';
 
 import { CircularSet } from './utils/CircularSet.ts';
 import { Machina } from './utils/Machina.ts';

package/NRelay1.test.ts

@@ -1,8 +1,8 @@
 import { it, test } from "node:test";
-import type { NostrEvent } from "@nostrify/types";
+import type { NostrClientMsg, NostrEvent } from "@nostrify/types";
 import { deepStrictEqual, ok, rejects } from "node:assert";
 import { finalizeEvent, generateSecretKey } from "nostr-tools";
-import { WebsocketEvent } from "websocket-ts";
+import { ExponentialBackoff, WebsocketEvent } from "websocket-ts";
 
 import { genEvent } from "./test/mod.ts";
 import { TestRelayServer } from "./test/TestRelayServer.ts";
@@ -114,7 +114,7 @@ await test("NRelay1.req", async () => {
   clearTimeout(tid);
 });
 
-await test("NRelay1.event", async () => {
+await test("NRelay1.event sends while connection is open", async () => {
   await using server = await TestRelayServer.create();
   await using relay = new NRelay1(server.url);
 
@@ -129,6 +129,71 @@ await test("NRelay1.event", async () => {
   await relay.event(event);
 });
 
+await test("NRelay1.event sends before connection is open", async () => {
+  await using server = await TestRelayServer.create();
+  await using relay = new NRelay1(server.url);
+
+  const event: NostrEvent = finalizeEvent({
+    kind: 1,
+    content: "Sent before connection was established",
+    tags: [],
+    created_at: Math.floor(Date.now() / 1000),
+  }, generateSecretKey());
+
+  // Send immediately without waiting for the connection to open.
+  // The ArrayQueue buffer should hold the message and deliver it
+  // once the socket opens.
+  await relay.event(event);
+});
+
+await test("NRelay1.event throws when OK is false", async () => {
+  await using server = await TestRelayServer.create({
+    handleMessage(socket, msg) {
+      if (msg[0] === "EVENT") {
+        server.send(socket, ["OK", msg[1].id, false, "blocked: not allowed"]);
+      }
+    },
+  });
+
+  await using relay = new NRelay1(server.url);
+
+  const event: NostrEvent = finalizeEvent({
+    kind: 1,
+    content: "This event should be rejected",
+    tags: [],
+    created_at: Math.floor(Date.now() / 1000),
+  }, generateSecretKey());
+
+  await rejects(() => relay.event(event), /blocked: not allowed/);
+});
+
+await test("NRelay1.event sends after reconnect from CLOSING state", async () => {
+  await using server = await TestRelayServer.create();
+  await using relay = new NRelay1(server.url, {
+    backoff: new ExponentialBackoff(100),
+  });
+
+  await new Promise<void>((resolve) =>
+    relay.socket.addEventListener(WebsocketEvent.open, () => resolve(), {
+      once: true,
+    })
+  );
+
+  server.dropConnections();
+
+  // Wait briefly for the socket to register as closed.
+  await new Promise((resolve) => setTimeout(resolve, 50));
+
+  const event: NostrEvent = finalizeEvent({
+    kind: 1,
+    content: "Sent while connection was closing, delivered after reconnect",
+    tags: [],
+    created_at: Math.floor(Date.now() / 1000),
+  }, generateSecretKey());
+
+  await relay.event(event);
+});
+
 test.skip("NRelay1 backoff", async () => {
   await using server = await TestRelayServer.create();
   await using relay = new NRelay1(server.url);
@@ -239,3 +304,150 @@ await test("NRelay1 closes when it receives a binary message", async () => {
 
   await rejects(() => relay.query([{ kinds: [1] }]));
 });
+
+await test("NRelay1 NIP-42 auth-required REQ retry", async () => {
+  const sk = generateSecretKey();
+  const testEvent = genEvent({ kind: 4, content: "secret DM" }, sk);
+
+  let reqCount = 0;
+
+  await using server = await TestRelayServer.create({
+    handleMessage(socket, msg: NostrClientMsg) {
+      if (msg[0] === "REQ") {
+        const [, subId] = msg;
+        reqCount++;
+        if (reqCount === 1) {
+          // First REQ: send AUTH challenge, then reject with auth-required
+          socket.send(JSON.stringify(["AUTH", "challenge123"]));
+          socket.send(JSON.stringify(["CLOSED", subId, "auth-required: authentication required"]));
+        } else {
+          // Second REQ (after auth): serve the events
+          socket.send(JSON.stringify(["EVENT", subId, testEvent]));
+          socket.send(JSON.stringify(["EOSE", subId]));
+        }
+      }
+      if (msg[0] === "AUTH") {
+        // Accept the AUTH event
+        socket.send(JSON.stringify(["OK", msg[1].id, true, ""]));
+      }
+    },
+  });
+
+  await using relay = new NRelay1(server.url, {
+    auth: async (challenge) => {
+      return genEvent({
+        kind: 22242,
+        tags: [["relay", server.url], ["challenge", challenge]],
+      }, sk);
+    },
+  });
+
+  const result = await relay.query([{ kinds: [4] }]);
+
+  deepStrictEqual(result.length, 1);
+  deepStrictEqual(result[0].id, testEvent.id);
+  deepStrictEqual(reqCount, 2);
+});
+
+await test("NRelay1 NIP-42 auth-required EVENT retry", async () => {
+  const sk = generateSecretKey();
+  const eventToPublish: NostrEvent = finalizeEvent({
+    kind: 1,
+    content: "Hello from authenticated user",
+    tags: [],
+    created_at: Math.floor(Date.now() / 1000),
+  }, sk);
+
+  let eventCount = 0;
+
+  await using server = await TestRelayServer.create({
+    handleMessage(socket, msg: NostrClientMsg) {
+      if (msg[0] === "EVENT") {
+        eventCount++;
+        if (eventCount === 1) {
+          // First EVENT: send AUTH challenge, then reject with auth-required
+          socket.send(JSON.stringify(["AUTH", "challenge456"]));
+          socket.send(JSON.stringify(["OK", msg[1].id, false, "auth-required: authentication required"]));
+        } else {
+          // Second EVENT (after auth): accept
+          socket.send(JSON.stringify(["OK", msg[1].id, true, ""]));
+        }
+      }
+      if (msg[0] === "AUTH") {
+        // Accept the AUTH event
+        socket.send(JSON.stringify(["OK", msg[1].id, true, ""]));
+      }
+    },
+  });
+
+  await using relay = new NRelay1(server.url, {
+    auth: async (challenge) => {
+      return genEvent({
+        kind: 22242,
+        tags: [["relay", server.url], ["challenge", challenge]],
+      }, sk);
+    },
+  });
+
+  // Should succeed after automatic auth + retry
+  await relay.event(eventToPublish);
+  deepStrictEqual(eventCount, 2);
+});
+
+await test("NRelay1 NIP-42 auth-required does not retry without auth callback", async () => {
+  let reqCount = 0;
+
+  await using server = await TestRelayServer.create({
+    handleMessage(socket, msg: NostrClientMsg) {
+      if (msg[0] === "REQ") {
+        reqCount++;
+        const [, subId] = msg;
+        socket.send(JSON.stringify(["CLOSED", subId, "auth-required: authentication required"]));
+      }
+    },
+  });
+
+  // No auth callback provided — CLOSED should pass through without retry
+  await using relay = new NRelay1(server.url);
+
+  const result = await relay.query([{ kinds: [4] }]);
+  deepStrictEqual(result, []);
+  deepStrictEqual(reqCount, 1);
+});
+
+await test("NRelay1 NIP-42 auth-required does not retry infinitely", async () => {
+  const sk = generateSecretKey();
+  let reqCount = 0;
+
+  await using server = await TestRelayServer.create({
+    handleMessage(socket, msg: NostrClientMsg) {
+      if (msg[0] === "REQ") {
+        const [, subId] = msg;
+        reqCount++;
+        // Send AUTH challenge on first REQ only
+        if (reqCount === 1) {
+          socket.send(JSON.stringify(["AUTH", "challenge789"]));
+        }
+        // Always reject with auth-required, even after auth
+        socket.send(JSON.stringify(["CLOSED", subId, "auth-required: still not allowed"]));
+      }
+      if (msg[0] === "AUTH") {
+        socket.send(JSON.stringify(["OK", msg[1].id, true, ""]));
+      }
+    },
+  });
+
+  await using relay = new NRelay1(server.url, {
+    auth: async (challenge) => {
+      return genEvent({
+        kind: 22242,
+        tags: [["relay", server.url], ["challenge", challenge]],
+      }, sk);
+    },
+  });
+
+  // Should stop after one retry (reqCount=2), not loop forever
+  const result = await relay.query([{ kinds: [4] }]);
+  deepStrictEqual(result, []);
+  deepStrictEqual(reqCount, 2);
+});