@openclaw/nostr 2026.5.2 → 2026.5.3-beta.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/nostr",
-  "version": "2026.5.2",
+  "version": "2026.5.3-beta.1",
   "description": "OpenClaw Nostr channel plugin for NIP-04 encrypted DMs",
   "repository": {
     "type": "git",
@@ -16,7 +16,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.2"
+    "openclaw": ">=2026.5.3-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -54,14 +54,23 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.2"
+      "pluginApi": ">=2026.5.3-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.5.2"
+      "openclawVersion": "2026.5.3-beta.1"
     },
     "release": {
       "publishToClawHub": true,
       "publishToNpm": true
-    }
-  }
+    },
+    "runtimeExtensions": [
+      "./dist/index.js"
+    ],
+    "runtimeSetupEntry": "./dist/setup-entry.js"
+  },
+  "files": [
+    "dist/**",
+    "openclaw.plugin.json",
+    "README.md"
+  ]
 }

package/api.ts

@@ -1,10 +0,0 @@
-export {
-  getPluginRuntimeGatewayRequestScope,
-  type OpenClawConfig,
-  type PluginRuntime,
-} from "./runtime-api.js";
-export { nostrPlugin } from "./src/channel.js";
-export { createNostrProfileHttpHandler } from "./src/nostr-profile-http.js";
-export { getNostrRuntime, setNostrRuntime } from "./src/runtime.js";
-export { resolveNostrAccount } from "./src/types.js";
-export type { ResolvedNostrAccount } from "./src/types.js";

package/channel-plugin-api.ts

@@ -1 +0,0 @@
-export { nostrPlugin } from "./src/channel.js";

package/index.ts

@@ -1,97 +0,0 @@
-import {
-  defineBundledChannelEntry,
-  loadBundledEntryExportSync,
-} from "openclaw/plugin-sdk/channel-entry-contract";
-import type { OpenClawConfig, PluginRuntime, ResolvedNostrAccount } from "./api.js";
-
-function createNostrProfileHttpHandler() {
-  return loadBundledEntryExportSync<
-    (params: Record<string, unknown>) => (ctx: unknown) => Promise<void> | void
-  >(import.meta.url, {
-    specifier: "./api.js",
-    exportName: "createNostrProfileHttpHandler",
-  });
-}
-
-function getNostrRuntime() {
-  return loadBundledEntryExportSync<() => PluginRuntime>(import.meta.url, {
-    specifier: "./api.js",
-    exportName: "getNostrRuntime",
-  })();
-}
-
-function resolveNostrAccount(params: { cfg: unknown; accountId: string }) {
-  return loadBundledEntryExportSync<
-    (params: { cfg: unknown; accountId: string }) => ResolvedNostrAccount
-  >(import.meta.url, {
-    specifier: "./api.js",
-    exportName: "resolveNostrAccount",
-  })(params);
-}
-
-export default defineBundledChannelEntry({
-  id: "nostr",
-  name: "Nostr",
-  description: "Nostr DM channel plugin via NIP-04",
-  importMetaUrl: import.meta.url,
-  plugin: {
-    specifier: "./channel-plugin-api.js",
-    exportName: "nostrPlugin",
-  },
-  runtime: {
-    specifier: "./api.js",
-    exportName: "setNostrRuntime",
-  },
-  registerFull(api) {
-    const httpHandler = createNostrProfileHttpHandler()({
-      getConfigProfile: (accountId: string) => {
-        const runtime = getNostrRuntime();
-        const cfg = runtime.config.current() as OpenClawConfig;
-        const account = resolveNostrAccount({ cfg, accountId });
-        return account.profile;
-      },
-      updateConfigProfile: async (accountId: string, profile: unknown) => {
-        const runtime = getNostrRuntime();
-        const cfg = runtime.config.current() as OpenClawConfig;
-
-        const channels = (cfg.channels ?? {}) as Record<string, unknown>;
-        const nostrConfig = (channels.nostr ?? {}) as Record<string, unknown>;
-
-        await runtime.config.replaceConfigFile({
-          nextConfig: {
-            ...cfg,
-            channels: {
-              ...channels,
-              nostr: {
-                ...nostrConfig,
-                profile,
-              },
-            },
-          },
-          afterWrite: { mode: "auto" },
-        });
-      },
-      getAccountInfo: (accountId: string) => {
-        const runtime = getNostrRuntime();
-        const cfg = runtime.config.current() as OpenClawConfig;
-        const account = resolveNostrAccount({ cfg, accountId });
-        if (!account.configured || !account.publicKey) {
-          return null;
-        }
-        return {
-          pubkey: account.publicKey,
-          relays: account.relays,
-        };
-      },
-      log: api.logger,
-    });
-
-    api.registerHttpRoute({
-      path: "/api/channels/nostr",
-      auth: "gateway",
-      match: "prefix",
-      gatewayRuntimeScopeSurface: "trusted-operator",
-      handler: httpHandler,
-    });
-  },
-});

package/runtime-api.ts

@@ -1,6 +0,0 @@
-// Private runtime barrel for the bundled Nostr extension.
-// Keep this barrel thin and aligned with the local extension surface.
-
-export type { OpenClawConfig } from "openclaw/plugin-sdk/config-types";
-export { getPluginRuntimeGatewayRequestScope } from "openclaw/plugin-sdk/plugin-runtime";
-export type { PluginRuntime } from "openclaw/plugin-sdk/runtime-store";

package/setup-api.ts

@@ -1 +0,0 @@
-export { nostrSetupAdapter, nostrSetupWizard } from "./src/setup-surface.js";

package/setup-entry.ts

@@ -1,9 +0,0 @@
-import { defineBundledChannelSetupEntry } from "openclaw/plugin-sdk/channel-entry-contract";
-
-export default defineBundledChannelSetupEntry({
-  importMetaUrl: import.meta.url,
-  plugin: {
-    specifier: "./setup-plugin-api.js",
-    exportName: "nostrSetupPlugin",
-  },
-});

package/setup-plugin-api.ts

@@ -1,3 +0,0 @@
-// Keep bundled setup entry imports narrow so setup loads do not pull the
-// broader Nostr runtime plugin surface.
-export { nostrSetupPlugin } from "./src/channel.setup.js";

package/src/channel-api.ts

@@ -1,15 +0,0 @@
-export {
-  buildChannelConfigSchema,
-  DEFAULT_ACCOUNT_ID,
-  formatPairingApproveHint,
-  type ChannelPlugin,
-} from "openclaw/plugin-sdk/channel-plugin-common";
-export type { ChannelOutboundAdapter } from "openclaw/plugin-sdk/channel-contract";
-export {
-  collectStatusIssuesFromLastError,
-  createDefaultChannelRuntimeState,
-} from "openclaw/plugin-sdk/status-helpers";
-export {
-  createPreCryptoDirectDmAuthorizer,
-  resolveInboundDirectDmAccessWithRuntime,
-} from "openclaw/plugin-sdk/direct-dm-access";

package/src/channel.inbound.test.ts

@@ -1,176 +0,0 @@
-import { createStartAccountContext } from "openclaw/plugin-sdk/channel-test-helpers";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import type { PluginRuntime } from "../runtime-api.js";
-import { startNostrGatewayAccount } from "./gateway.js";
-import { setNostrRuntime } from "./runtime.js";
-import { buildResolvedNostrAccount } from "./test-fixtures.js";
-
-const mocks = vi.hoisted(() => ({
-  normalizePubkey: vi.fn((value: string) =>
-    value
-      .trim()
-      .replace(/^nostr:/i, "")
-      .toLowerCase(),
-  ),
-  startNostrBus: vi.fn(),
-}));
-
-vi.mock("./nostr-bus.js", () => ({
-  DEFAULT_RELAYS: ["wss://relay.example.com"],
-  startNostrBus: mocks.startNostrBus,
-}));
-
-vi.mock("./nostr-key-utils.js", () => ({
-  getPublicKeyFromPrivate: vi.fn(() => "bot-pubkey"),
-  normalizePubkey: mocks.normalizePubkey,
-}));
-
-function createMockBus() {
-  return {
-    sendDm: vi.fn(async () => {}),
-    close: vi.fn(),
-    getMetrics: vi.fn(() => ({ counters: {} })),
-    publishProfile: vi.fn(),
-    getProfileState: vi.fn(async () => null),
-  };
-}
-
-function createRuntimeHarness() {
-  const recordInboundSession = vi.fn(async () => {});
-  const dispatchReplyWithBufferedBlockDispatcher = vi.fn(async ({ dispatcherOptions }) => {
-    await dispatcherOptions.deliver({ text: "|a|b|" });
-  });
-  const runtime = {
-    channel: {
-      text: {
-        resolveMarkdownTableMode: vi.fn(() => "off"),
-        convertMarkdownTables: vi.fn((text: string) => `converted:${text}`),
-      },
-      commands: {
-        shouldComputeCommandAuthorized: vi.fn(() => true),
-        resolveCommandAuthorizedFromAuthorizers: vi.fn(() => true),
-      },
-      routing: {
-        resolveAgentRoute: vi.fn(({ accountId, peer }) => ({
-          agentId: "agent-nostr",
-          accountId,
-          sessionKey: `nostr:${peer.id}`,
-        })),
-      },
-      session: {
-        resolveStorePath: vi.fn(() => "/tmp/nostr-session-store"),
-        readSessionUpdatedAt: vi.fn(() => undefined),
-        recordInboundSession,
-      },
-      reply: {
-        formatAgentEnvelope: vi.fn(({ body }) => `envelope:${body}`),
-        resolveEnvelopeFormatOptions: vi.fn(() => ({ mode: "agent" })),
-        finalizeInboundContext: vi.fn((ctx) => ctx),
-        dispatchReplyWithBufferedBlockDispatcher,
-      },
-      pairing: {
-        readAllowFromStore: vi.fn(async () => []),
-        upsertPairingRequest: vi.fn(async () => ({ code: "PAIR1234", created: true })),
-      },
-    },
-  } as unknown as PluginRuntime;
-
-  return {
-    runtime,
-    recordInboundSession,
-    dispatchReplyWithBufferedBlockDispatcher,
-  };
-}
-
-async function startGatewayHarness(params: {
-  account: ReturnType<typeof buildResolvedNostrAccount>;
-  cfg?: Parameters<typeof createStartAccountContext>[0]["cfg"];
-}) {
-  const harness = createRuntimeHarness();
-  const bus = createMockBus();
-  setNostrRuntime(harness.runtime);
-  mocks.startNostrBus.mockResolvedValueOnce(bus as never);
-
-  const cleanup = (await startNostrGatewayAccount(
-    createStartAccountContext({
-      account: params.account,
-      cfg: params.cfg,
-    }),
-  )) as { stop: () => void };
-
-  return { harness, bus, cleanup };
-}
-
-describe("nostr inbound gateway path", () => {
-  afterEach(() => {
-    mocks.normalizePubkey.mockClear();
-    mocks.startNostrBus.mockReset();
-  });
-
-  it("issues a pairing reply before decrypt for unknown senders", async () => {
-    const { cleanup } = await startGatewayHarness({
-      account: buildResolvedNostrAccount({
-        config: { dmPolicy: "pairing", allowFrom: [] },
-      }),
-    });
-
-    const options = mocks.startNostrBus.mock.calls[0]?.[0] as {
-      authorizeSender: (params: {
-        senderPubkey: string;
-        reply: (text: string) => Promise<void>;
-      }) => Promise<string>;
-    };
-    const sendPairingReply = vi.fn(async (_text: string) => {});
-
-    await expect(
-      options.authorizeSender({
-        senderPubkey: "nostr:UNKNOWN-SENDER",
-        reply: sendPairingReply,
-      }),
-    ).resolves.toBe("pairing");
-    expect(sendPairingReply).toHaveBeenCalledTimes(1);
-    expect(sendPairingReply.mock.calls[0]?.[0]).toContain("Pairing code:");
-
-    cleanup.stop();
-  });
-
-  it("routes allowed DMs through the standard reply pipeline", async () => {
-    const { harness, cleanup } = await startGatewayHarness({
-      account: buildResolvedNostrAccount({
-        publicKey: "bot-pubkey",
-        config: { dmPolicy: "allowlist", allowFrom: ["nostr:sender-pubkey"] },
-      }),
-      cfg: {
-        session: { store: { type: "jsonl" } },
-        commands: { useAccessGroups: true },
-      } as never,
-    });
-
-    const options = mocks.startNostrBus.mock.calls[0]?.[0] as {
-      onMessage: (
-        senderPubkey: string,
-        text: string,
-        reply: (text: string) => Promise<void>,
-        meta: { eventId: string; createdAt: number },
-      ) => Promise<void>;
-    };
-    const sendReply = vi.fn(async (_text: string) => {});
-
-    await options.onMessage("sender-pubkey", "hello from nostr", sendReply, {
-      eventId: "event-123",
-      createdAt: 1_710_000_000,
-    });
-
-    expect(harness.recordInboundSession).toHaveBeenCalledTimes(1);
-    expect(harness.dispatchReplyWithBufferedBlockDispatcher).toHaveBeenCalledTimes(1);
-    expect(harness.dispatchReplyWithBufferedBlockDispatcher.mock.calls[0]?.[0]?.ctx).toMatchObject({
-      BodyForAgent: "hello from nostr",
-      SenderId: "sender-pubkey",
-      MessageSid: "event-123",
-      CommandAuthorized: true,
-    });
-    expect(sendReply).toHaveBeenCalledWith("converted:|a|b|");
-
-    cleanup.stop();
-  });
-});

package/src/channel.outbound.test.ts

@@ -1,128 +0,0 @@
-import { createStartAccountContext } from "openclaw/plugin-sdk/channel-test-helpers";
-import type { OpenClawConfig } from "openclaw/plugin-sdk/config-types";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import type { PluginRuntime } from "../runtime-api.js";
-import { nostrOutboundAdapter, startNostrGatewayAccount } from "./gateway.js";
-import { setNostrRuntime } from "./runtime.js";
-import { TEST_RESOLVED_PRIVATE_KEY, buildResolvedNostrAccount } from "./test-fixtures.js";
-
-const mocks = vi.hoisted(() => ({
-  normalizePubkey: vi.fn((value: string) => `normalized-${value.toLowerCase()}`),
-  startNostrBus: vi.fn(),
-}));
-
-vi.mock("./nostr-bus.js", () => ({
-  DEFAULT_RELAYS: ["wss://relay.example.com"],
-  startNostrBus: mocks.startNostrBus,
-}));
-
-vi.mock("./nostr-key-utils.js", () => ({
-  getPublicKeyFromPrivate: vi.fn(() => "pubkey"),
-  normalizePubkey: mocks.normalizePubkey,
-}));
-
-function createCfg() {
-  return {
-    channels: {
-      nostr: {
-        privateKey: TEST_RESOLVED_PRIVATE_KEY, // pragma: allowlist secret
-      },
-    },
-  };
-}
-
-function installOutboundRuntime(convertMarkdownTables = vi.fn((text: string) => text)) {
-  const resolveMarkdownTableMode = vi.fn(() => "off");
-  setNostrRuntime({
-    channel: {
-      text: {
-        resolveMarkdownTableMode,
-        convertMarkdownTables,
-      },
-    },
-    reply: {},
-  } as unknown as PluginRuntime);
-  return { resolveMarkdownTableMode, convertMarkdownTables };
-}
-
-async function startOutboundAccount(accountId?: string) {
-  const sendDm = vi.fn(async () => {});
-  const bus = {
-    sendDm,
-    close: vi.fn(),
-    getMetrics: vi.fn(() => ({ counters: {} })),
-    publishProfile: vi.fn(),
-    getProfileState: vi.fn(async () => null),
-  };
-  mocks.startNostrBus.mockResolvedValueOnce(bus as unknown);
-
-  const cleanup = (await startNostrGatewayAccount(
-    createStartAccountContext({
-      account: buildResolvedNostrAccount(accountId ? { accountId } : undefined),
-    }),
-  )) as { stop: () => void };
-
-  return { cleanup, sendDm };
-}
-
-describe("nostr outbound cfg threading", () => {
-  afterEach(() => {
-    mocks.normalizePubkey.mockClear();
-    mocks.startNostrBus.mockReset();
-  });
-
-  it("uses resolved cfg when converting markdown tables before send", async () => {
-    const { resolveMarkdownTableMode, convertMarkdownTables } = installOutboundRuntime(
-      vi.fn((text: string) => `converted:${text}`),
-    );
-    const { cleanup, sendDm } = await startOutboundAccount();
-
-    const cfg = createCfg();
-    await nostrOutboundAdapter.sendText({
-      cfg: cfg as OpenClawConfig,
-      to: "NPUB123",
-      text: "|a|b|",
-      accountId: "default",
-    });
-
-    expect(resolveMarkdownTableMode).toHaveBeenCalledWith({
-      cfg,
-      channel: "nostr",
-      accountId: "default",
-    });
-    expect(convertMarkdownTables).toHaveBeenCalledWith("|a|b|", "off");
-    expect(mocks.normalizePubkey).toHaveBeenCalledWith("NPUB123");
-    expect(sendDm).toHaveBeenCalledWith("normalized-npub123", "converted:|a|b|");
-
-    cleanup.stop();
-  });
-
-  it("uses the configured defaultAccount when accountId is omitted", async () => {
-    const { resolveMarkdownTableMode } = installOutboundRuntime();
-    const { cleanup, sendDm } = await startOutboundAccount("work");
-
-    const cfg = {
-      channels: {
-        nostr: {
-          privateKey: TEST_RESOLVED_PRIVATE_KEY, // pragma: allowlist secret
-          defaultAccount: "work",
-        },
-      },
-    };
-
-    await nostrOutboundAdapter.sendText({
-      cfg: cfg as OpenClawConfig,
-      to: "NPUB123",
-      text: "hello",
-    });
-
-    expect(resolveMarkdownTableMode).toHaveBeenCalledWith({
-      cfg,
-      channel: "nostr",
-      accountId: "work",
-    });
-    expect(sendDm).toHaveBeenCalledWith("normalized-npub123", "hello");
-
-    cleanup.stop();
-  });
-});