@nsite/stealthis 0.5.0 → 0.7.0

package/README.md

@@ -4,7 +4,7 @@ A drop-in web component that adds a "Borrow this" button to any nsite. Visitors
 
 ## How it works
 
-When loaded on an nsite, `<nsite-deploy>` detects the site owner's pubkey from the subdomain, fetches the site manifest from nostr relays, and lets authenticated visitors publish a copy under their own npub. Each deployment appends a `muse` tag to the manifest, creating a paper trail of who was inspired by the site.
+When loaded on an nsite, `<steal-this>` detects the site owner's pubkey from the subdomain, fetches the site manifest from nostr relays, and lets authenticated visitors publish a copy under their own npub. Each deployment appends a `muse` tag to the manifest, creating a paper trail of who was inspired by the site.
 
 ## Install
 
@@ -19,7 +19,7 @@ The widget auto-injects a fixed-position button in the bottom-right corner.
 If you want to control where the button appears, add the element yourself (the auto-inject will skip if one already exists):
 
 ```html
-<nsite-deploy button-text="Cop this joint" stat-text="%s npubs copped this"></nsite-deploy>
+<steal-this button-text="Cop this joint" stat-text="%s npubs copped this"></steal-this>
 ```
 
 ## Attributes
@@ -28,7 +28,9 @@ If you want to control where the button appears, add the element yourself (the a
 |-----------|---------|-------------|
 | `button-text` | `"Borrow this nsite"` | Button text |
 | `stat-text` | `"%s npubs borrowed this nsite"` | Paper trail summary. `%s` is replaced with the count. |
-| `no-trail` | _(absent)_ | Boolean attribute. When present, hides the paper trail. |
+| `no-trail` | _(absent)_ | Boolean attribute. When present, disables the paper trail entirely -- no `muse` tags are written and the trail UI is not rendered. |
+| `obfuscate-npubs` | _(absent)_ | Boolean attribute. Shows truncated npubs with no links in the paper trail. Disables profile fetching. |
+| `do-not-fetch-muse-data` | _(absent)_ | Boolean attribute. Skips profile enrichment but still shows full npubs linked to njump. |
 
 The button's `trigger` part is exposed via `::part(trigger)` for CSS customization.
 
@@ -51,6 +53,8 @@ If the visitor already has a root site, the form defaults to a named site. Overw
 
 Each deployment adds a `muse` tag with the deployer's pubkey and relay list. The widget shows an expandable "Inspired N npubs" counter when muse tags are present. A maximum of 9 muse tags are kept per manifest (originator + 8 most recent), with FIFO truncation of the middle.
 
+By default, the trail streams kind-0 profiles from relays to show display names and links to each muse's nsite (or njump fallback). Use `obfuscate-npubs` to show only truncated npubs, or `do-not-fetch-muse-data` to skip profile fetching while still linking to njump.
+
 ## Development
 
 ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nsite/stealthis",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "type": "module",
   "main": "dist/stealthis.js",
   "module": "dist/stealthis.mjs",
@@ -15,10 +15,11 @@
     "build": "vite build"
   },
   "dependencies": {
-    "nostr-tools": "^2.23.3",
-    "qrcode-generator": "^1.4.4"
+    "@libs/qrcode": "jsr:^3.0.1",
+    "nostr-tools": "^2.23.3"
   },
   "devDependencies": {
+    "cssnano": "^7.1.3",
     "typescript": "^5.9.3",
     "vite": "^7.3.1"
   }

package/src/css.d.ts

@@ -0,0 +1,4 @@
+declare module "*.css?inline" {
+  const css: string;
+  export default css;
+}

package/src/index.ts

@@ -1,10 +1,10 @@
 import { NsiteDeployButton } from './widget';
 
-customElements.define('nsite-deploy', NsiteDeployButton);
+customElements.define('steal-this', NsiteDeployButton);
 
 function autoInject() {
-  if (!document.querySelector('nsite-deploy')) {
-    const el = document.createElement('nsite-deploy');
+  if (!document.querySelector('steal-this')) {
+    const el = document.createElement('steal-this');
     el.classList.add('nd-fixed');
     document.body.appendChild(el);
   }

package/src/nostr.ts

@@ -1,7 +1,7 @@
-import { npubEncode } from 'nostr-tools/nip19';
-import type { SignedEvent, EventTemplate } from './signer';
+import { decode, npubEncode } from "nostr-tools/nip19";
+import type { EventTemplate, SignedEvent } from "./signer";
 
-export type { SignedEvent, EventTemplate };
+export type { EventTemplate, SignedEvent };
 
 export interface NsiteContext {
   pubkey: string;
@@ -15,9 +15,24 @@ export interface Muse {
   relays: string[];
 }
 
-export { npubEncode };
+export interface MuseProfile {
+  npub: string;
+  name?: string;
+  nsiteUrl?: string;
+}
 
-const BOOTSTRAP_RELAYS = ['wss://purplepag.es', 'wss://relay.damus.io', 'wss://nos.lol'];
+const BOOTSTRAP_RELAYS = [
+  "wss://purplepag.es",
+  "wss://relay.damus.io",
+  "wss://nos.lol",
+];
+const PROFILE_RELAYS = [
+  "wss://purplepag.es",
+  "wss://user.kindpag.es",
+  "wss://indexer.hzrd149.com",
+  "wss://profiles.nostr1.com",
+  "wss://nos.lol",
+];
 const B36_LEN = 50;
 const D_TAG_RE = /^[a-z0-9-]{1,13}$/;
 const NAMED_LABEL_RE = /^[0-9a-z]{50}[a-z0-9-]{1,13}$/;
@@ -25,53 +40,40 @@ const NAMED_LABEL_RE = /^[0-9a-z]{50}[a-z0-9-]{1,13}$/;
 // --- Base36 ---
 
 export function pubkeyToBase36(hex: string): string {
-  return BigInt('0x' + hex)
+  return BigInt("0x" + hex)
     .toString(36)
-    .padStart(B36_LEN, '0');
+    .padStart(B36_LEN, "0");
 }
 
 function base36ToHex(b36: string): string {
   let n = 0n;
   for (const c of b36) n = n * 36n + BigInt(parseInt(c, 36));
-  return n.toString(16).padStart(64, '0');
+  return n.toString(16).padStart(64, "0");
 }
 
-// --- Minimal bech32 decode (npub only) ---
+// --- NIP-19 ---
 
 function npubDecode(npub: string): string | null {
-  if (!npub.startsWith('npub1')) return null;
-  const CHARSET = 'qpzry9x8gf2tvdw0s3jn54khce6mua7l';
-  const values: number[] = [];
-  for (const c of npub.slice(5)) {
-    const v = CHARSET.indexOf(c);
-    if (v === -1) return null;
-    values.push(v);
+  try {
+    const result = decode(npub);
+    if (result.type !== "npub") return null;
+    return result.data;
+  } catch (error) {
+    return null;
   }
-  const payload = values.slice(0, -6);
-  let acc = 0,
-    bits = 0;
-  const bytes: number[] = [];
-  for (const v of payload) {
-    acc = (acc << 5) | v;
-    bits += 5;
-    while (bits >= 8) {
-      bits -= 8;
-      bytes.push((acc >> bits) & 0xff);
-    }
-  }
-  if (bytes.length !== 32) return null;
-  return bytes.map((b) => b.toString(16).padStart(2, '0')).join('');
 }
 
+export { npubEncode };
+
 // --- Context ---
 
 export function parseContext(): NsiteContext | null {
-  const parts = window.location.hostname.split('.');
+  const parts = window.location.hostname.split(".");
 
   for (let i = 0; i < parts.length; i++) {
-    if (parts[i].startsWith('npub1') && parts[i].length >= 63) {
+    if (parts[i].startsWith("npub1") && parts[i].length >= 63) {
       const pubkey = npubDecode(parts[i]);
-      if (pubkey) return { pubkey, baseDomain: parts.slice(i + 1).join('.') };
+      if (pubkey) return { pubkey, baseDomain: parts.slice(i + 1).join(".") };
     }
   }
 
@@ -81,11 +83,15 @@ export function parseContext(): NsiteContext | null {
     label.length > B36_LEN &&
     label.length <= 63 &&
     NAMED_LABEL_RE.test(label) &&
-    !label.endsWith('-')
+    !label.endsWith("-")
   ) {
     try {
       const pubkey = base36ToHex(label.slice(0, B36_LEN));
-      return { pubkey, identifier: label.slice(B36_LEN), baseDomain: parts.slice(1).join('.') };
+      return {
+        pubkey,
+        identifier: label.slice(B36_LEN),
+        baseDomain: parts.slice(1).join("."),
+      };
     } catch {
       /* invalid */
     }
@@ -95,7 +101,7 @@ export function parseContext(): NsiteContext | null {
 }
 
 export function isValidDTag(s: string): boolean {
-  return D_TAG_RE.test(s) && !s.endsWith('-');
+  return D_TAG_RE.test(s) && !s.endsWith("-");
 }
 
 // --- Relay communication ---
@@ -114,23 +120,29 @@ function withSocket(
   url: string,
   sendMsg: unknown[],
   onMsg: (data: unknown[]) => boolean,
-  timeout = 5000
+  timeout = 5000,
 ): Promise<void> {
   return new Promise((resolve) => {
     try {
       const ws = new WebSocket(url);
       const timer = setTimeout(() => {
-        try { ws.close(); } catch { /* */ }
+        try {
+          ws.close();
+        } catch { /* */ }
         resolve();
       }, timeout);
       const finish = () => {
         clearTimeout(timer);
-        try { ws.close(); } catch { /* */ }
+        try {
+          ws.close();
+        } catch { /* */ }
         resolve();
       };
       ws.onopen = () => ws.send(JSON.stringify(sendMsg));
       ws.onmessage = (e) => {
-        try { if (onMsg(JSON.parse(e.data))) finish(); } catch { /* */ }
+        try {
+          if (onMsg(JSON.parse(e.data))) finish();
+        } catch { /* */ }
       };
       ws.onerror = () => finish();
     } catch {
@@ -139,25 +151,29 @@ function withSocket(
   });
 }
 
-async function queryRelays(urls: string[], filter: Record<string, unknown>): Promise<RelayEvent[]> {
+async function queryRelays(
+  urls: string[],
+  filter: Record<string, unknown>,
+): Promise<RelayEvent[]> {
   const events = new Map<string, RelayEvent>();
   const subId = Math.random().toString(36).slice(2, 8);
   await Promise.allSettled(
     urls.map((url) =>
-      withSocket(url, ['REQ', subId, filter], (msg) => {
-        if (msg[0] === 'EVENT' && msg[1] === subId)
+      withSocket(url, ["REQ", subId, filter], (msg) => {
+        if (msg[0] === "EVENT" && msg[1] === subId) {
           events.set((msg[2] as RelayEvent).id, msg[2] as RelayEvent);
-        return msg[0] === 'EOSE' && msg[1] === subId;
+        }
+        return msg[0] === "EOSE" && msg[1] === subId;
       })
-    )
+    ),
   );
   return [...events.values()];
 }
 
 async function publishRelay(url: string, event: SignedEvent): Promise<boolean> {
   let ok = false;
-  await withSocket(url, ['EVENT', event], (msg) => {
-    if (msg[0] === 'OK') {
+  await withSocket(url, ["EVENT", event], (msg) => {
+    if (msg[0] === "OK") {
       ok = msg[2] === true;
       return true;
     }
@@ -166,9 +182,14 @@ async function publishRelay(url: string, event: SignedEvent): Promise<boolean> {
   return ok;
 }
 
-export async function publishToRelays(urls: string[], event: SignedEvent): Promise<number> {
-  const results = await Promise.allSettled(urls.map((url) => publishRelay(url, event)));
-  return results.filter((r) => r.status === 'fulfilled' && r.value).length;
+export async function publishToRelays(
+  urls: string[],
+  event: SignedEvent,
+): Promise<number> {
+  const results = await Promise.allSettled(
+    urls.map((url) => publishRelay(url, event)),
+  );
+  return results.filter((r) => r.status === "fulfilled" && r.value).length;
 }
 
 // --- High-level operations ---
@@ -177,22 +198,32 @@ function extractWriteRelays(events: RelayEvent[]): string[] {
   const relays = new Set<string>();
   for (const e of events) {
     for (const t of e.tags) {
-      if (t[0] === 'r' && t[1]?.startsWith('wss://') && (!t[2] || t[2] === 'write'))
+      if (
+        t[0] === "r" && t[1]?.startsWith("wss://") &&
+        (!t[2] || t[2] === "write")
+      ) {
         relays.add(t[1].trim());
+      }
     }
   }
   return [...relays];
 }
 
-export async function fetchManifest(ctx: NsiteContext): Promise<RelayEvent | null> {
+export async function fetchManifest(
+  ctx: NsiteContext,
+): Promise<RelayEvent | null> {
   const manifestFilter = ctx.identifier
-    ? { kinds: [35128], authors: [ctx.pubkey], '#d': [ctx.identifier] }
+    ? { kinds: [35128], authors: [ctx.pubkey], "#d": [ctx.identifier] }
     : { kinds: [15128], authors: [ctx.pubkey], limit: 1 };
 
   // Query bootstrap relays for manifest AND relay list in parallel
   const [bootstrapManifests, relayEvents] = await Promise.all([
     queryRelays(BOOTSTRAP_RELAYS, manifestFilter),
-    queryRelays(BOOTSTRAP_RELAYS, { kinds: [10002], authors: [ctx.pubkey], limit: 5 })
+    queryRelays(BOOTSTRAP_RELAYS, {
+      kinds: [10002],
+      authors: [ctx.pubkey],
+      limit: 5,
+    }),
   ]);
 
   // If bootstrap already found it, return immediately
@@ -202,7 +233,7 @@ export async function fetchManifest(ctx: NsiteContext): Promise<RelayEvent | nul
 
   // Otherwise try the owner's relays
   const ownerRelays = extractWriteRelays(relayEvents).filter(
-    (r) => !BOOTSTRAP_RELAYS.includes(r)
+    (r) => !BOOTSTRAP_RELAYS.includes(r),
   );
   if (ownerRelays.length === 0) return null;
 
@@ -214,19 +245,21 @@ export async function getWriteRelays(pubkey: string): Promise<string[]> {
   const events = await queryRelays(BOOTSTRAP_RELAYS, {
     kinds: [10002],
     authors: [pubkey],
-    limit: 5
+    limit: 5,
   });
   const relays = extractWriteRelays(events);
-  return relays.length > 0 ? relays : BOOTSTRAP_RELAYS.filter((r) => r !== 'wss://purplepag.es');
+  return relays.length > 0
+    ? relays
+    : BOOTSTRAP_RELAYS.filter((r) => r !== "wss://purplepag.es");
 }
 
 export async function checkExistingSite(
   relays: string[],
   pubkey: string,
-  slug?: string
+  slug?: string,
 ): Promise<boolean> {
   const filter = slug
-    ? { kinds: [35128], authors: [pubkey], '#d': [slug], limit: 1 }
+    ? { kinds: [35128], authors: [pubkey], "#d": [slug], limit: 1 }
     : { kinds: [15128], authors: [pubkey], limit: 1 };
   const events = await queryRelays(relays, filter);
   return events.length > 0;
@@ -236,8 +269,12 @@ const MAX_MUSE_TAGS = 9;
 
 export function extractMuses(event: RelayEvent): Muse[] {
   return event.tags
-    .filter((t) => t[0] === 'muse' && t[1] && t[2])
-    .map((t) => ({ index: parseInt(t[1], 10), pubkey: t[2], relays: t.slice(3) }))
+    .filter((t) => t[0] === "muse" && t[1] && t[2])
+    .map((t) => ({
+      index: parseInt(t[1], 10),
+      pubkey: t[2],
+      relays: t.slice(3),
+    }))
     .sort((a, b) => a.index - b.index);
 }
 
@@ -250,25 +287,30 @@ export function createDeployEvent(
     deployerPubkey: string;
     deployerRelays: string[];
     noTrail?: boolean;
-  }
+  },
 ): EventTemplate {
   const tags: string[][] = [];
-  if (options.slug) tags.push(['d', options.slug]);
+  if (options.slug) tags.push(["d", options.slug]);
   for (const t of source.tags) {
-    if (t[0] === 'path' || t[0] === 'server') tags.push([...t]);
+    if (t[0] === "path" || t[0] === "server") tags.push([...t]);
   }
 
   if (!options.noTrail) {
     // Paper trail: copy muse tags, add new one, enforce max 9
     const sourceMuses = source.tags
-      .filter((t) => t[0] === 'muse' && t[1] && t[2])
+      .filter((t) => t[0] === "muse" && t[1] && t[2])
       .map((t) => [...t])
       .sort((a, b) => parseInt(a[1], 10) - parseInt(b[1], 10));
 
     const maxIndex = sourceMuses.length > 0
       ? Math.max(...sourceMuses.map((t) => parseInt(t[1], 10)))
       : -1;
-    const newMuse = ['muse', String(maxIndex + 1), options.deployerPubkey, ...options.deployerRelays];
+    const newMuse = [
+      "muse",
+      String(maxIndex + 1),
+      options.deployerPubkey,
+      ...options.deployerRelays,
+    ];
     const allMuses = [...sourceMuses, newMuse];
 
     // Keep index 0 (originator) + newest, FIFO truncate the middle
@@ -281,17 +323,106 @@ export function createDeployEvent(
     }
   }
 
-  if (options.title) tags.push(['title', options.title]);
-  if (options.description) tags.push(['description', options.description]);
+  if (options.title) tags.push(["title", options.title]);
+  if (options.description) tags.push(["description", options.description]);
   return {
     kind: options.slug ? 35128 : 15128,
     created_at: Math.floor(Date.now() / 1000),
     tags,
-    content: ''
+    content: "",
   };
 }
 
-export function buildSiteUrl(baseDomain: string, pubkey: string, slug?: string): string {
+// --- Muse profile enrichment (streaming, non-blocking) ---
+
+export function fetchMuseProfiles(
+  muses: Muse[],
+  baseDomain: string,
+  onUpdate: (pubkey: string, profile: MuseProfile) => void,
+): void {
+  const pubkeys = [...new Set(muses.map((m) => m.pubkey))];
+  if (pubkeys.length === 0) return;
+
+  // Track best kind-0 per pubkey (highest created_at wins)
+  const bestK0 = new Map<
+    string,
+    { created_at: number; profile: MuseProfile }
+  >();
+  const profileResolved = new Set<string>();
+
+  const handleEvent = (event: RelayEvent) => {
+    if (event.kind === 0) {
+      const existing = bestK0.get(event.pubkey);
+      if (existing && existing.created_at >= event.created_at) return;
+      try {
+        const meta = JSON.parse(event.content);
+        const name = meta.display_name || meta.name || meta.displayName;
+        if (!name) return;
+        const profile: MuseProfile = { npub: npubEncode(event.pubkey), name };
+        bestK0.set(event.pubkey, { created_at: event.created_at, profile });
+        profileResolved.add(event.pubkey);
+        onUpdate(event.pubkey, { ...profile });
+      } catch { /* invalid json */ }
+    }
+  };
+
+  // Stream kind 0 from profile relays — fire all in parallel, callback per event
+  const subId = Math.random().toString(36).slice(2, 8);
+  const filter = { kinds: [0], authors: pubkeys };
+
+  Promise.allSettled(
+    PROFILE_RELAYS.map((url) =>
+      withSocket(url, ["REQ", subId, filter], (msg) => {
+        if (msg[0] === "EVENT" && msg[1] === subId) {
+          handleEvent(msg[2] as RelayEvent);
+        }
+        return msg[0] === "EOSE" && msg[1] === subId;
+      })
+    ),
+  ).then(() => {
+    // After profiles are gathered, check for nsites on bootstrap relays
+    const resolved = [...profileResolved];
+    if (resolved.length === 0) return;
+
+    queryRelays(BOOTSTRAP_RELAYS, {
+      kinds: [15128, 35128],
+      authors: resolved,
+    }).then((events) => {
+      // Group by pubkey — prefer root (15128), fall back to first named (35128)
+      const nsiteMap = new Map<string, string>();
+      for (const e of events) {
+        if (e.kind === 15128 && !nsiteMap.has(e.pubkey)) {
+          nsiteMap.set(e.pubkey, buildSiteUrl(baseDomain, e.pubkey));
+        }
+      }
+      for (const e of events) {
+        if (e.kind === 35128 && !nsiteMap.has(e.pubkey)) {
+          const dTag = e.tags.find((t) => t[0] === "d")?.[1];
+          if (dTag) {
+            nsiteMap.set(
+              e.pubkey,
+              buildSiteUrl(baseDomain, e.pubkey, dTag),
+            );
+          }
+        }
+      }
+
+      for (const [pk, url] of nsiteMap) {
+        const entry = bestK0.get(pk);
+        if (entry) {
+          entry.profile.nsiteUrl = url;
+          onUpdate(pk, { ...entry.profile });
+        }
+      }
+    });
+  });
+}
+
+export function buildSiteUrl(
+  baseDomain: string,
+  pubkey: string,
+  slug?: string,
+): string {
   if (slug) {
     return `https://${pubkeyToBase36(pubkey)}${slug}.${baseDomain}`;
   }

package/src/qr.ts

@@ -1,8 +1,5 @@
-import qrcode from 'qrcode-generator';
+import { qrcode } from "@libs/qrcode";
 
 export function toSvg(text: string): string {
-  const qr = qrcode(0, 'L');
-  qr.addData(text);
-  qr.make();
-  return qr.createSvgTag({ cellSize: 3, margin: 2, scalable: true });
+  return qrcode(text, { output: "svg", ecl: "LOW" });
 }