@openclaw/nostr 2026.5.30-beta.1 → 2026.5.31-beta.1

package/dist/api.js

@@ -1,13 +1,13 @@
 import { o as resolveNostrAccount } from "./setup-surface-CVEYWXAG.js";
 import { getPluginRuntimeGatewayRequestScope } from "./runtime-api.js";
 import { n as NostrProfileSchema } from "./config-schema-DIiXiBKr.js";
-import { a as setNostrRuntime, i as getNostrRuntime, n as nostrPlugin, o as contentToProfile, r as publishNostrProfile, t as getNostrProfileState } from "./channel-UK7t4qb8.js";
+import { a as setNostrRuntime, i as getNostrRuntime, n as nostrPlugin, o as contentToProfile, r as publishNostrProfile, t as getNostrProfileState } from "./channel-nsm56KpS.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, readStringValue } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { z } from "zod";
 import { SimplePool, verifyEvent } from "nostr-tools";
+import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { readJsonBodyWithLimit, requestBodyErrorToText } from "openclaw/plugin-sdk/webhook-request-guards";
 import { createFixedWindowRateLimiter } from "openclaw/plugin-sdk/webhook-ingress";
-import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { isBlockedHostnameOrIp } from "openclaw/plugin-sdk/ssrf-runtime";
 //#region extensions/nostr/src/nostr-profile-url-safety.ts
 function validateUrlSafety(urlStr) {

package/dist/{channel-UK7t4qb8.js → channel-nsm56KpS.js}

@@ -5,10 +5,9 @@ import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { createScopedDmSecurityResolver, createTopLevelChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
 import { createChatChannelPlugin } from "openclaw/plugin-sdk/channel-core";
 import { createChannelMessageAdapterFromOutbound } from "openclaw/plugin-sdk/channel-outbound";
-import { buildPassiveChannelStatusSummary, buildTrafficStatusSummary, runStoppablePassiveMonitor, safeParseJsonWithSchema } from "openclaw/plugin-sdk/extension-shared";
+import { buildPassiveChannelStatusSummary, buildTrafficStatusSummary, runStoppablePassiveMonitor } from "openclaw/plugin-sdk/extension-shared";
 import { createComputedAccountStatusAdapter } from "openclaw/plugin-sdk/status-helpers";
 import { normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { z } from "zod";
 import { resolveStableChannelMessageIngress } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { createChannelPairingController } from "openclaw/plugin-sdk/channel-pairing";
 import { attachChannelToResult } from "openclaw/plugin-sdk/channel-send-result";
@@ -16,10 +15,8 @@ import { SimplePool, finalizeEvent, getPublicKey, verifyEvent } from "nostr-tool
 import { decrypt, encrypt } from "nostr-tools/nip04";
 import { createDirectDmPreCryptoGuardPolicy } from "openclaw/plugin-sdk/direct-dm-guard-policy";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
-import os from "node:os";
-import path from "node:path";
-import { privateFileStore } from "openclaw/plugin-sdk/security-runtime";
 import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
+import { resolveIntegerOption } from "openclaw/plugin-sdk/number-runtime";
 import { buildChannelOutboundSessionRoute, stripChannelTargetPrefix } from "openclaw/plugin-sdk/core";
 //#region extensions/nostr/src/metrics.ts
 /**
@@ -410,78 +407,40 @@ const { setRuntime: setNostrRuntime, getRuntime: getNostrRuntime } = createPlugi
 //#region extensions/nostr/src/nostr-state-store.ts
 const STORE_VERSION = 2;
 const PROFILE_STATE_VERSION = 1;
-const NullableFiniteNumberSchema = z.number().finite().nullable().catch(null);
-const NostrBusStateV1Schema = z.object({
-	version: z.literal(1),
-	lastProcessedAt: NullableFiniteNumberSchema,
-	gatewayStartedAt: NullableFiniteNumberSchema
-});
-const NostrBusStateSchema = z.object({
-	version: z.literal(2),
-	lastProcessedAt: NullableFiniteNumberSchema,
-	gatewayStartedAt: NullableFiniteNumberSchema,
-	recentEventIds: z.array(z.unknown()).catch([]).transform((ids) => ids.filter((id) => typeof id === "string"))
-});
-const NostrProfileStateSchema = z.object({
-	version: z.literal(1),
-	lastPublishedAt: NullableFiniteNumberSchema,
-	lastPublishedEventId: z.string().nullable().catch(null),
-	lastPublishResults: z.record(z.string(), z.enum([
-		"ok",
-		"failed",
-		"timeout"
-	])).nullable().catch(null)
-});
 function normalizeAccountId(accountId) {
 	const trimmed = accountId?.trim();
 	if (!trimmed) return "default";
 	return trimmed.replace(/[^a-z0-9._-]+/gi, "_");
 }
-function resolveNostrStatePath(accountId, env = process.env) {
-	const stateDir = getNostrRuntime().state.resolveStateDir(env, os.homedir);
-	const normalized = normalizeAccountId(accountId);
-	return path.join(stateDir, "nostr", `bus-state-${normalized}.json`);
-}
-function resolveNostrProfileStatePath(accountId, env = process.env) {
-	const stateDir = getNostrRuntime().state.resolveStateDir(env, os.homedir);
-	const normalized = normalizeAccountId(accountId);
-	return path.join(stateDir, "nostr", `profile-state-${normalized}.json`);
+function openNostrBusStateStore(env) {
+	return getNostrRuntime().state.openKeyedStore({
+		namespace: "bus-state",
+		maxEntries: 256,
+		...env ? { env } : {}
+	});
 }
-function safeParseState(raw) {
-	const parsedV2 = safeParseJsonWithSchema(NostrBusStateSchema, raw);
-	if (parsedV2) return parsedV2;
-	const parsedV1 = safeParseJsonWithSchema(NostrBusStateV1Schema, raw);
-	if (!parsedV1) return null;
-	return {
-		version: 2,
-		lastProcessedAt: parsedV1.lastProcessedAt,
-		gatewayStartedAt: parsedV1.gatewayStartedAt,
-		recentEventIds: []
-	};
+function openNostrProfileStateStore(env) {
+	return getNostrRuntime().state.openKeyedStore({
+		namespace: "profile-state",
+		maxEntries: 256,
+		...env ? { env } : {}
+	});
 }
 async function readNostrBusState(params) {
-	const filePath = resolveNostrStatePath(params.accountId, params.env);
-	try {
-		const raw = await privateFileStore(path.dirname(filePath)).readTextIfExists(path.basename(filePath));
-		if (raw === null) return null;
-		return safeParseState(raw);
-	} catch {
-		return null;
-	}
+	return await openNostrBusStateStore(params.env).lookup(normalizeAccountId(params.accountId)) ?? null;
 }
 async function writeNostrBusState(params) {
-	const filePath = resolveNostrStatePath(params.accountId, params.env);
 	const payload = {
 		version: STORE_VERSION,
 		lastProcessedAt: params.lastProcessedAt,
 		gatewayStartedAt: params.gatewayStartedAt,
 		recentEventIds: (params.recentEventIds ?? []).filter((x) => typeof x === "string")
 	};
-	await privateFileStore(path.dirname(filePath)).writeJson(path.basename(filePath), payload, { trailingNewline: true });
+	await openNostrBusStateStore(params.env).register(normalizeAccountId(params.accountId), payload);
 }
 /**
 * Determine the `since` timestamp for subscription.
-* Returns the later of: lastProcessedAt or gatewayStartedAt (both from disk),
+* Returns the later of: lastProcessedAt or gatewayStartedAt (both from state),
 * falling back to `now` for fresh starts.
 */
 function computeSinceTimestamp(state, nowSec = Math.floor(Date.now() / 1e3)) {
@@ -490,36 +449,29 @@ function computeSinceTimestamp(state, nowSec = Math.floor(Date.now() / 1e3)) {
 	if (candidates.length === 0) return nowSec;
 	return Math.max(...candidates);
 }
-function safeParseProfileState(raw) {
-	return safeParseJsonWithSchema(NostrProfileStateSchema, raw);
-}
 async function readNostrProfileState(params) {
-	const filePath = resolveNostrProfileStatePath(params.accountId, params.env);
-	try {
-		const raw = await privateFileStore(path.dirname(filePath)).readTextIfExists(path.basename(filePath));
-		if (raw === null) return null;
-		return safeParseProfileState(raw);
-	} catch {
-		return null;
-	}
+	return await openNostrProfileStateStore(params.env).lookup(normalizeAccountId(params.accountId)) ?? null;
 }
 async function writeNostrProfileState(params) {
-	const filePath = resolveNostrProfileStatePath(params.accountId, params.env);
 	const payload = {
 		version: PROFILE_STATE_VERSION,
 		lastPublishedAt: params.lastPublishedAt,
 		lastPublishedEventId: params.lastPublishedEventId,
 		lastPublishResults: params.lastPublishResults
 	};
-	await privateFileStore(path.dirname(filePath)).writeJson(path.basename(filePath), payload, { trailingNewline: true });
+	await openNostrProfileStateStore(params.env).register(normalizeAccountId(params.accountId), payload);
 }
 //#endregion
 //#region extensions/nostr/src/seen-tracker.ts
 /**
+* LRU-based seen event tracker with TTL support.
+* Prevents unbounded memory growth under high load or abuse.
+*/
+/**
 * Create a new seen tracker with LRU eviction and TTL expiration.
 */
 function createSeenTracker(options) {
-	const maxEntries = options?.maxEntries ?? 1e5;
+	const maxEntries = resolveIntegerOption(options?.maxEntries, 1e5, { min: 1 });
 	const ttlMs = options?.ttlMs ?? 3600 * 1e3;
 	const pruneIntervalMs = options?.pruneIntervalMs ?? 600 * 1e3;
 	const entries = /* @__PURE__ */ new Map();

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { n as nostrPlugin } from "./channel-UK7t4qb8.js";
+import { n as nostrPlugin } from "./channel-nsm56KpS.js";
 export { nostrPlugin };

package/dist/doctor-contract-api.js

@@ -0,0 +1,211 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+//#region extensions/nostr/doctor-contract-api.ts
+const BUS_STATE_NAMESPACE = "bus-state";
+const PROFILE_STATE_NAMESPACE = "profile-state";
+const MAX_NOSTR_STATE_ENTRIES = 256;
+function normalizeAccountId(accountId) {
+	const trimmed = accountId?.trim();
+	if (!trimmed) return "default";
+	return trimmed.replace(/[^a-z0-9._-]+/gi, "_");
+}
+function finiteNumberOrNull(value) {
+	return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+function parseBusState(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+	const parsed = value;
+	if (parsed.version !== 1 && parsed.version !== 2) return null;
+	return {
+		version: 2,
+		lastProcessedAt: finiteNumberOrNull(parsed.lastProcessedAt),
+		gatewayStartedAt: finiteNumberOrNull(parsed.gatewayStartedAt),
+		recentEventIds: parsed.version === 2 && Array.isArray(parsed.recentEventIds) ? parsed.recentEventIds.filter((entry) => typeof entry === "string") : []
+	};
+}
+function parseProfileState(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+	const parsed = value;
+	if (parsed.version !== 1) return null;
+	const rawResults = parsed.lastPublishResults;
+	const lastPublishResults = {};
+	if (rawResults && typeof rawResults === "object" && !Array.isArray(rawResults)) {
+		for (const [relay, result] of Object.entries(rawResults)) if (result === "ok" || result === "failed" || result === "timeout") lastPublishResults[relay] = result;
+	}
+	return {
+		version: 1,
+		lastPublishedAt: finiteNumberOrNull(parsed.lastPublishedAt),
+		lastPublishedEventId: typeof parsed.lastPublishedEventId === "string" ? parsed.lastPublishedEventId : null,
+		lastPublishResults: rawResults === null || Object.keys(lastPublishResults).length === 0 ? null : lastPublishResults
+	};
+}
+async function fileExists(filePath) {
+	try {
+		return (await fs.stat(filePath)).isFile();
+	} catch {
+		return false;
+	}
+}
+async function readJsonFile(filePath) {
+	return JSON.parse(await fs.readFile(filePath, "utf8"));
+}
+async function listLegacyFiles(params) {
+	const dir = path.join(params.stateDir, "nostr");
+	let entries = [];
+	try {
+		entries = await fs.readdir(dir, { withFileTypes: true });
+	} catch {
+		return [];
+	}
+	const suffix = ".json";
+	const files = [];
+	for (const entry of entries) {
+		if (!entry.isFile() || !entry.name.startsWith(params.prefix) || !entry.name.endsWith(suffix)) continue;
+		const accountId = normalizeAccountId(entry.name.slice(params.prefix.length, -5));
+		const filePath = path.join(dir, entry.name);
+		try {
+			const value = params.parse(await readJsonFile(filePath));
+			if (value) files.push({
+				accountId,
+				filePath,
+				value
+			});
+		} catch {}
+	}
+	return files;
+}
+async function archiveLegacySource(params) {
+	const archivedPath = `${params.filePath}.migrated`;
+	if (await fileExists(archivedPath)) {
+		params.warnings.push(`Left migrated ${params.label} source in place because ${archivedPath} already exists`);
+		return;
+	}
+	try {
+		await fs.rename(params.filePath, archivedPath);
+		params.changes.push(`Archived ${params.label} legacy source -> ${archivedPath}`);
+	} catch (err) {
+		params.warnings.push(`Failed archiving ${params.label} legacy source: ${String(err)}`);
+	}
+}
+async function ensureStoreCapacity(params) {
+	const existingKeys = new Set((await params.store.entries()).map((entry) => entry.key));
+	const missingKeys = new Set(params.files.map((file) => file.accountId).filter((key) => !existingKeys.has(key)));
+	if (missingKeys.size > params.maxEntries - existingKeys.size) {
+		params.warnings.push(`Skipped migrating ${params.label} because plugin state has room for ${params.maxEntries - existingKeys.size} of ${missingKeys.size} missing entries; left legacy sources in place`);
+		return null;
+	}
+	return existingKeys;
+}
+const stateMigrations = [{
+	id: "nostr-bus-state-json-to-plugin-state",
+	label: "Nostr bus state",
+	async detectLegacyState(params) {
+		const files = await listLegacyFiles({
+			stateDir: params.stateDir,
+			prefix: "bus-state-",
+			parse: parseBusState
+		});
+		if (files.length === 0) return null;
+		return { preview: [`- Nostr bus state: ${files.length} ${files.length === 1 ? "account" : "accounts"} -> plugin state (${BUS_STATE_NAMESPACE})`] };
+	},
+	async migrateLegacyState(params) {
+		const changes = [];
+		const warnings = [];
+		const files = await listLegacyFiles({
+			stateDir: params.stateDir,
+			prefix: "bus-state-",
+			parse: parseBusState
+		});
+		const store = params.context.openPluginStateKeyedStore({
+			namespace: BUS_STATE_NAMESPACE,
+			maxEntries: MAX_NOSTR_STATE_ENTRIES
+		});
+		const existingKeys = await ensureStoreCapacity({
+			files,
+			store,
+			maxEntries: MAX_NOSTR_STATE_ENTRIES,
+			label: "Nostr bus state",
+			warnings
+		});
+		if (!existingKeys) return {
+			changes,
+			warnings
+		};
+		let imported = 0;
+		for (const file of files) {
+			if (!existingKeys.has(file.accountId)) {
+				await store.register(file.accountId, file.value);
+				existingKeys.add(file.accountId);
+				imported++;
+			}
+			await archiveLegacySource({
+				filePath: file.filePath,
+				label: "Nostr bus state",
+				changes,
+				warnings
+			});
+		}
+		if (imported > 0) changes.unshift(`Migrated ${imported} Nostr bus-state ${imported === 1 ? "entry" : "entries"} -> plugin state`);
+		return {
+			changes,
+			warnings
+		};
+	}
+}, {
+	id: "nostr-profile-state-json-to-plugin-state",
+	label: "Nostr profile state",
+	async detectLegacyState(params) {
+		const files = await listLegacyFiles({
+			stateDir: params.stateDir,
+			prefix: "profile-state-",
+			parse: parseProfileState
+		});
+		if (files.length === 0) return null;
+		return { preview: [`- Nostr profile state: ${files.length} ${files.length === 1 ? "account" : "accounts"} -> plugin state (${PROFILE_STATE_NAMESPACE})`] };
+	},
+	async migrateLegacyState(params) {
+		const changes = [];
+		const warnings = [];
+		const files = await listLegacyFiles({
+			stateDir: params.stateDir,
+			prefix: "profile-state-",
+			parse: parseProfileState
+		});
+		const store = params.context.openPluginStateKeyedStore({
+			namespace: PROFILE_STATE_NAMESPACE,
+			maxEntries: MAX_NOSTR_STATE_ENTRIES
+		});
+		const existingKeys = await ensureStoreCapacity({
+			files,
+			store,
+			maxEntries: MAX_NOSTR_STATE_ENTRIES,
+			label: "Nostr profile state",
+			warnings
+		});
+		if (!existingKeys) return {
+			changes,
+			warnings
+		};
+		let imported = 0;
+		for (const file of files) {
+			if (!existingKeys.has(file.accountId)) {
+				await store.register(file.accountId, file.value);
+				existingKeys.add(file.accountId);
+				imported++;
+			}
+			await archiveLegacySource({
+				filePath: file.filePath,
+				label: "Nostr profile state",
+				changes,
+				warnings
+			});
+		}
+		if (imported > 0) changes.unshift(`Migrated ${imported} Nostr profile-state ${imported === 1 ? "entry" : "entries"} -> plugin state`);
+		return {
+			changes,
+			warnings
+		};
+	}
+}];
+//#endregion
+export { stateMigrations };

package/npm-shrinkwrap.json

@@ -1,18 +1,18 @@
 {
   "name": "@openclaw/nostr",
-  "version": "2026.5.30-beta.1",
+  "version": "2026.5.31-beta.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/nostr",
-      "version": "2026.5.30-beta.1",
+      "version": "2026.5.31-beta.1",
       "dependencies": {
         "nostr-tools": "2.23.5",
         "zod": "4.4.3"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.5.30-beta.1"
+        "openclaw": ">=2026.5.31-beta.1"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/nostr",
-  "version": "2026.5.30-beta.1",
+  "version": "2026.5.31-beta.1",
   "description": "OpenClaw Nostr channel plugin for NIP-04 encrypted direct messages.",
   "repository": {
     "type": "git",
@@ -12,7 +12,7 @@
     "zod": "4.4.3"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.30-beta.1"
+    "openclaw": ">=2026.5.31-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -50,10 +50,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.30-beta.1"
+      "pluginApi": ">=2026.5.31-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.5.30-beta.1"
+      "openclawVersion": "2026.5.31-beta.1"
     },
     "release": {
       "publishToClawHub": true,