@openclaw/buzz 2026.9.1-beta.1 → 2026.9.2

package/node_modules/nostr-tools/lib/nostr.bundle.js

@@ -3565,7 +3565,7 @@ var NostrTools = (() => {
     }
     static async connect(url, options) {
       const relay = new Relay(url, options);
-      await relay.connect();
+      await relay.connect(options);
       return relay;
     }
   };
@@ -6263,13 +6263,29 @@ var NostrTools = (() => {
     return wrappeds;
   }
   function unwrapEvent(wrap, recipientPrivateKey) {
-    const unwrappedSeal = nip44Decrypt(wrap, recipientPrivateKey);
-    return nip44Decrypt(unwrappedSeal, recipientPrivateKey);
+    if (wrap.kind !== GiftWrap) {
+      throw new Error(`unexpected wrap kind ${wrap.kind}, expected ${GiftWrap}`);
+    }
+    const seal = nip44Decrypt(wrap, recipientPrivateKey);
+    if (seal.kind !== Seal) {
+      throw new Error(`unexpected seal kind ${seal.kind}, expected ${Seal}`);
+    }
+    if (!verifyEvent(seal)) {
+      throw new Error("seal signature is invalid");
+    }
+    const rumor = nip44Decrypt(seal, recipientPrivateKey);
+    if (rumor.pubkey !== seal.pubkey) {
+      throw new Error(`rumor pubkey ${rumor.pubkey} does not match seal pubkey ${seal.pubkey}`);
+    }
+    return rumor;
   }
   function unwrapManyEvents(wrappedEvents, recipientPrivateKey) {
     let unwrappedEvents = [];
     wrappedEvents.forEach((e) => {
-      unwrappedEvents.push(unwrapEvent(e, recipientPrivateKey));
+      try {
+        unwrappedEvents.push(unwrapEvent(e, recipientPrivateKey));
+      } catch (_err) {
+      }
     });
     unwrappedEvents.sort((a, b) => a.created_at - b.created_at);
     return unwrappedEvents;
@@ -7655,7 +7671,7 @@ var NostrTools = (() => {
     if (!event.created_at) {
       return false;
     }
-    return Math.round(new Date().getTime() / 1e3) - event.created_at < 60;
+    return Math.abs(Math.round(new Date().getTime() / 1e3) - event.created_at) < 60;
   }
   function validateEventKind(event) {
     return event.kind === HTTPAuth;