@openclaw/buzz 2026.9.1-beta.1 → 2026.9.2

package/node_modules/nostr-tools/lib/esm/index.js

@@ -1346,7 +1346,7 @@ var Relay = class extends AbstractRelay {
   }
   static async connect(url, options) {
     const relay = new Relay(url, options);
-    await relay.connect();
+    await relay.connect(options);
     return relay;
   }
 };
@@ -2527,13 +2527,29 @@ function wrapManyEvents(event, senderPrivateKey, recipientsPublicKeys) {
   return wrappeds;
 }
 function unwrapEvent(wrap, recipientPrivateKey) {
-  const unwrappedSeal = nip44Decrypt(wrap, recipientPrivateKey);
-  return nip44Decrypt(unwrappedSeal, recipientPrivateKey);
+  if (wrap.kind !== GiftWrap) {
+    throw new Error(`unexpected wrap kind ${wrap.kind}, expected ${GiftWrap}`);
+  }
+  const seal = nip44Decrypt(wrap, recipientPrivateKey);
+  if (seal.kind !== Seal) {
+    throw new Error(`unexpected seal kind ${seal.kind}, expected ${Seal}`);
+  }
+  if (!verifyEvent(seal)) {
+    throw new Error("seal signature is invalid");
+  }
+  const rumor = nip44Decrypt(seal, recipientPrivateKey);
+  if (rumor.pubkey !== seal.pubkey) {
+    throw new Error(`rumor pubkey ${rumor.pubkey} does not match seal pubkey ${seal.pubkey}`);
+  }
+  return rumor;
 }
 function unwrapManyEvents(wrappedEvents, recipientPrivateKey) {
   let unwrappedEvents = [];
   wrappedEvents.forEach((e) => {
-    unwrappedEvents.push(unwrapEvent(e, recipientPrivateKey));
+    try {
+      unwrappedEvents.push(unwrapEvent(e, recipientPrivateKey));
+    } catch (_err) {
+    }
   });
   unwrappedEvents.sort((a, b) => a.created_at - b.created_at);
   return unwrappedEvents;
@@ -3925,7 +3941,7 @@ function validateEventTimestamp(event) {
   if (!event.created_at) {
     return false;
   }
-  return Math.round(new Date().getTime() / 1e3) - event.created_at < 60;
+  return Math.abs(Math.round(new Date().getTime() / 1e3) - event.created_at) < 60;
 }
 function validateEventKind(event) {
   return event.kind === HTTPAuth;