@openclaw/nostr 2026.7.1-beta.2 → 2026.7.1-beta.4

package/node_modules/nostr-tools/lib/esm/index.js

@@ -232,39 +232,61 @@ var verifyEvent = i.verifyEvent;
 // kinds.ts
 var kinds_exports = {};
 __export(kinds_exports, {
+  AIEmbeddings: () => AIEmbeddings,
+  AppCurationSet: () => AppCurationSet,
   Application: () => Application,
+  AuthoredPodcasts: () => AuthoredPodcasts,
   BadgeAward: () => BadgeAward,
   BadgeDefinition: () => BadgeDefinition,
+  Bid: () => Bid,
+  BidConfirmation: () => BidConfirmation,
+  BlobsAuth: () => BlobsAuth,
   BlockedRelaysList: () => BlockedRelaysList,
   BlossomServerList: () => BlossomServerList,
   BookmarkList: () => BookmarkList,
   Bookmarksets: () => Bookmarksets,
   Calendar: () => Calendar,
   CalendarEventRSVP: () => CalendarEventRSVP,
+  CashuMintAnnouncement: () => CashuMintAnnouncement,
+  CashuWalletEvent: () => CashuWalletEvent,
+  CashuWalletHistory: () => CashuWalletHistory,
+  CashuWalletTokens: () => CashuWalletTokens,
   ChannelCreation: () => ChannelCreation,
   ChannelHideMessage: () => ChannelHideMessage,
   ChannelMessage: () => ChannelMessage,
   ChannelMetadata: () => ChannelMetadata,
   ChannelMuteUser: () => ChannelMuteUser,
   ChatMessage: () => ChatMessage,
+  Chess: () => Chess,
   ClassifiedListing: () => ClassifiedListing,
   ClientAuth: () => ClientAuth,
+  CodeSnippet: () => CodeSnippet,
+  CoinjoinPool: () => CoinjoinPool,
   Comment: () => Comment,
   CommunitiesList: () => CommunitiesList,
   CommunityDefinition: () => CommunityDefinition,
   CommunityPostApproval: () => CommunityPostApproval,
+  ConferenceEvent: () => ConferenceEvent,
   Contacts: () => Contacts,
   CreateOrUpdateProduct: () => CreateOrUpdateProduct,
   CreateOrUpdateStall: () => CreateOrUpdateStall,
+  CuratedVideoSets: () => CuratedVideoSets,
   Curationsets: () => Curationsets,
   Date: () => Date2,
+  DecoupledEncryptionKeyDistribution: () => DecoupledEncryptionKeyDistribution,
+  DecoupledKeyAnnouncement: () => DecoupledKeyAnnouncement,
+  DecoupledKeyClientAnnouncement: () => DecoupledKeyClientAnnouncement,
   DirectMessageRelaysList: () => DirectMessageRelaysList,
   DraftClassifiedListing: () => DraftClassifiedListing,
+  DraftEvent: () => DraftEvent,
   DraftLong: () => DraftLong,
   Emojisets: () => Emojisets,
   EncryptedDirectMessage: () => EncryptedDirectMessage,
   EventDeletion: () => EventDeletion,
+  FavoritePodcasts: () => FavoritePodcasts,
   FavoriteRelays: () => FavoriteRelays,
+  FedimintAnnouncement: () => FedimintAnnouncement,
+  Feed: () => Feed,
   FileMessage: () => FileMessage,
   FileMetadata: () => FileMetadata,
   FileServerPreference: () => FileServerPreference,
@@ -272,55 +294,129 @@ __export(kinds_exports, {
   ForumThread: () => ForumThread,
   GenericRepost: () => GenericRepost,
   Genericlists: () => Genericlists,
+  GeocacheListing: () => GeocacheListing,
+  GeocacheLog: () => GeocacheLog,
+  GeocacheLogEntry: () => GeocacheLogEntry,
+  GeocacheProofOfFind: () => GeocacheProofOfFind,
   GiftWrap: () => GiftWrap,
+  GitPullRequest: () => GitPullRequest,
+  GitPullRequestUpdate: () => GitPullRequestUpdate,
+  GoodWikiAuthorList: () => GoodWikiAuthorList,
+  GoodWikiRelayList: () => GoodWikiRelayList,
   GroupMetadata: () => GroupMetadata,
   HTTPAuth: () => HTTPAuth,
   Handlerinformation: () => Handlerinformation,
   Handlerrecommendation: () => Handlerrecommendation,
   Highlights: () => Highlights,
+  InteractiveRoom: () => InteractiveRoom,
   InterestsList: () => InterestsList,
   Interestsets: () => Interestsets,
+  Issue: () => Issue,
   JobFeedback: () => JobFeedback,
   JobRequest: () => JobRequest,
   JobResult: () => JobResult,
   Label: () => Label,
+  LegacyNsiteFile: () => LegacyNsiteFile,
   LightningPubRPC: () => LightningPubRPC,
+  LinkSet: () => LinkSet,
   LiveChatMessage: () => LiveChatMessage,
   LiveEvent: () => LiveEvent,
   LongFormArticle: () => LongFormArticle,
+  MarketplaceUI: () => MarketplaceUI,
+  MediaFollows: () => MediaFollows,
+  MediaStarterPacks: () => MediaStarterPacks,
+  MergeRequests: () => MergeRequests,
   Metadata: () => Metadata,
+  ModularArticleContent: () => ModularArticleContent,
+  ModularArticleHeader: () => ModularArticleHeader,
+  MuteSets: () => MuteSets,
   Mutelist: () => Mutelist,
   NWCWalletInfo: () => NWCWalletInfo,
   NWCWalletRequest: () => NWCWalletRequest,
   NWCWalletResponse: () => NWCWalletResponse,
   NormalVideo: () => NormalVideo,
   NostrConnect: () => NostrConnect,
+  NsiteNamed: () => NsiteNamed,
+  NsiteRoot: () => NsiteRoot,
+  NutZap: () => NutZap,
+  NutZapInfo: () => NutZapInfo,
   OpenTimestamps: () => OpenTimestamps,
+  Patch: () => Patch,
+  PeerToPeerOrderEvents: () => PeerToPeerOrderEvents,
   Photo: () => Photo,
   Pinlist: () => Pinlist,
+  PodcastEpisode: () => PodcastEpisode,
+  PodcastMetadata: () => PodcastMetadata,
   Poll: () => Poll,
   PollResponse: () => PollResponse,
   PrivateDirectMessage: () => PrivateDirectMessage,
+  PrivateEventRelayList: () => PrivateEventRelayList,
   ProblemTracker: () => ProblemTracker,
+  ProductSoldAsAuction: () => ProductSoldAsAuction,
   ProfileBadges: () => ProfileBadges,
+  ProxyAnnouncement: () => ProxyAnnouncement,
   PublicChatsList: () => PublicChatsList,
+  PublicMessage: () => PublicMessage,
   Reaction: () => Reaction,
+  ReactionToWebsite: () => ReactionToWebsite,
   RecommendRelay: () => RecommendRelay,
+  Redirects: () => Redirects,
+  RelayDiscovery: () => RelayDiscovery,
   RelayList: () => RelayList,
+  RelayMonitorAnnouncement: () => RelayMonitorAnnouncement,
   RelayReview: () => RelayReview,
+  RelayReviews: () => RelayReviews,
   Relaysets: () => Relaysets,
+  ReleaseArtifactSets: () => ReleaseArtifactSets,
+  Reply: () => Reply,
   Report: () => Report,
   Reporting: () => Reporting,
+  RepositoryAnnouncement: () => RepositoryAnnouncement,
+  RepositoryState: () => RepositoryState,
   Repost: () => Repost,
+  ReservedCashuWalletTokens: () => ReservedCashuWalletTokens,
+  RoomPresence: () => RoomPresence,
+  Scroll: () => Scroll,
   Seal: () => Seal,
   SearchRelaysList: () => SearchRelaysList,
   ShortTextNote: () => ShortTextNote,
   ShortVideo: () => ShortVideo,
+  SimpleGroupAdmins: () => SimpleGroupAdmins,
+  SimpleGroupCreateGroup: () => SimpleGroupCreateGroup,
+  SimpleGroupCreateInvite: () => SimpleGroupCreateInvite,
+  SimpleGroupDeleteEvent: () => SimpleGroupDeleteEvent,
+  SimpleGroupDeleteGroup: () => SimpleGroupDeleteGroup,
+  SimpleGroupEditMetadata: () => SimpleGroupEditMetadata,
+  SimpleGroupJoinRequest: () => SimpleGroupJoinRequest,
+  SimpleGroupLeaveRequest: () => SimpleGroupLeaveRequest,
+  SimpleGroupList: () => SimpleGroupList,
+  SimpleGroupLiveKitParticipants: () => SimpleGroupLiveKitParticipants,
+  SimpleGroupMembers: () => SimpleGroupMembers,
+  SimpleGroupPutUser: () => SimpleGroupPutUser,
+  SimpleGroupRemoveUser: () => SimpleGroupRemoveUser,
+  SimpleGroupReply: () => SimpleGroupReply,
+  SimpleGroupRoles: () => SimpleGroupRoles,
+  SimpleGroupThreadedReply: () => SimpleGroupThreadedReply,
+  SlideSet: () => SlideSet,
+  SoftwareApplication: () => SoftwareApplication,
+  StarterPacks: () => StarterPacks,
+  StatusApplied: () => StatusApplied,
+  StatusClosed: () => StatusClosed,
+  StatusDraft: () => StatusDraft,
+  StatusOpen: () => StatusOpen,
+  TidalLogin: () => TidalLogin,
   Time: () => Time,
+  Torrent: () => Torrent,
+  TorrentComment: () => TorrentComment,
+  TransportMethodAnnouncement: () => TransportMethodAnnouncement,
   UserEmojiList: () => UserEmojiList,
+  UserGraspList: () => UserGraspList,
   UserStatuses: () => UserStatuses,
+  VideoViewEvent: () => VideoViewEvent,
   Voice: () => Voice,
   VoiceComment: () => VoiceComment,
+  WebBookmarks: () => WebBookmarks,
+  WikiArticle: () => WikiArticle,
   Zap: () => Zap,
   ZapGoal: () => ZapGoal,
   ZapRequest: () => ZapRequest,
@@ -368,40 +464,83 @@ var Repost = 6;
 var Reaction = 7;
 var BadgeAward = 8;
 var ChatMessage = 9;
+var SimpleGroupThreadedReply = 10;
 var ForumThread = 11;
+var SimpleGroupReply = 12;
 var Seal = 13;
 var PrivateDirectMessage = 14;
 var FileMessage = 15;
 var GenericRepost = 16;
+var ReactionToWebsite = 17;
 var Photo = 20;
 var NormalVideo = 21;
 var ShortVideo = 22;
+var PublicMessage = 24;
 var ChannelCreation = 40;
 var ChannelMetadata = 41;
 var ChannelMessage = 42;
 var ChannelHideMessage = 43;
 var ChannelMuteUser = 44;
+var PodcastEpisode = 54;
+var Chess = 64;
+var MergeRequests = 818;
+var PollResponse = 1018;
+var Bid = 1021;
+var BidConfirmation = 1022;
 var OpenTimestamps = 1040;
 var GiftWrap = 1059;
-var Poll = 1068;
 var FileMetadata = 1063;
+var Poll = 1068;
 var Comment = 1111;
-var LiveChatMessage = 1311;
 var Voice = 1222;
+var Scroll = 1227;
 var VoiceComment = 1244;
+var LiveChatMessage = 1311;
+var CodeSnippet = 1337;
+var Patch = 1617;
+var GitPullRequest = 1618;
+var GitPullRequestUpdate = 1619;
+var Issue = 1621;
+var Reply = 1622;
+var StatusOpen = 1630;
+var StatusApplied = 1631;
+var StatusClosed = 1632;
+var StatusDraft = 1633;
 var ProblemTracker = 1971;
 var Report = 1984;
 var Reporting = 1984;
 var Label = 1985;
+var RelayReviews = 1986;
+var AIEmbeddings = 1987;
+var Torrent = 2003;
+var TorrentComment = 2004;
+var CoinjoinPool = 2022;
+var DecoupledKeyClientAnnouncement = 4454;
+var DecoupledEncryptionKeyDistribution = 4455;
 var CommunityPostApproval = 4550;
 var JobRequest = 5999;
 var JobResult = 6999;
 var JobFeedback = 7e3;
+var ReservedCashuWalletTokens = 7374;
+var CashuWalletTokens = 7375;
+var CashuWalletHistory = 7376;
+var GeocacheLog = 7516;
+var GeocacheProofOfFind = 7517;
+var SimpleGroupPutUser = 9e3;
+var SimpleGroupRemoveUser = 9001;
+var SimpleGroupEditMetadata = 9002;
+var SimpleGroupDeleteEvent = 9005;
+var SimpleGroupCreateGroup = 9007;
+var SimpleGroupDeleteGroup = 9008;
+var SimpleGroupCreateInvite = 9009;
+var SimpleGroupJoinRequest = 9021;
+var SimpleGroupLeaveRequest = 9022;
 var ZapGoal = 9041;
+var NutZap = 9321;
+var TidalLogin = 9467;
 var ZapRequest = 9734;
 var Zap = 9735;
 var Highlights = 9802;
-var PollResponse = 1018;
 var Mutelist = 1e4;
 var Pinlist = 10001;
 var RelayList = 10002;
@@ -410,37 +549,74 @@ var CommunitiesList = 10004;
 var PublicChatsList = 10005;
 var BlockedRelaysList = 10006;
 var SearchRelaysList = 10007;
+var SimpleGroupList = 10009;
 var FavoriteRelays = 10012;
+var PrivateEventRelayList = 10013;
 var InterestsList = 10015;
+var NutZapInfo = 10019;
+var MediaFollows = 10020;
 var UserEmojiList = 10030;
+var DecoupledKeyAnnouncement = 10044;
 var DirectMessageRelaysList = 10050;
-var FileServerPreference = 10096;
+var FavoritePodcasts = 10054;
 var BlossomServerList = 10063;
+var FileServerPreference = 10096;
+var GoodWikiAuthorList = 10101;
+var GoodWikiRelayList = 10102;
+var PodcastMetadata = 10154;
+var AuthoredPodcasts = 10164;
+var RelayMonitorAnnouncement = 10166;
+var RoomPresence = 10312;
+var UserGraspList = 10317;
+var ProxyAnnouncement = 10377;
+var TransportMethodAnnouncement = 11111;
 var NWCWalletInfo = 13194;
+var NsiteRoot = 15128;
+var CashuWalletEvent = 17375;
 var LightningPubRPC = 21e3;
 var ClientAuth = 22242;
 var NWCWalletRequest = 23194;
 var NWCWalletResponse = 23195;
 var NostrConnect = 24133;
+var BlobsAuth = 24242;
 var HTTPAuth = 27235;
 var Followsets = 3e4;
 var Genericlists = 30001;
 var Relaysets = 30002;
 var Bookmarksets = 30003;
 var Curationsets = 30004;
+var CuratedVideoSets = 30005;
+var MuteSets = 30007;
 var ProfileBadges = 30008;
 var BadgeDefinition = 30009;
 var Interestsets = 30015;
 var CreateOrUpdateStall = 30017;
 var CreateOrUpdateProduct = 30018;
+var MarketplaceUI = 30019;
+var ProductSoldAsAuction = 30020;
 var LongFormArticle = 30023;
 var DraftLong = 30024;
 var Emojisets = 30030;
+var ModularArticleHeader = 30040;
+var ModularArticleContent = 30041;
+var ReleaseArtifactSets = 30063;
 var Application = 30078;
+var RelayDiscovery = 30166;
+var AppCurationSet = 30267;
 var LiveEvent = 30311;
+var InteractiveRoom = 30312;
+var ConferenceEvent = 30313;
 var UserStatuses = 30315;
+var SlideSet = 30388;
 var ClassifiedListing = 30402;
 var DraftClassifiedListing = 30403;
+var RepositoryAnnouncement = 30617;
+var RepositoryState = 30618;
+var WikiArticle = 30818;
+var Redirects = 30819;
+var DraftEvent = 31234;
+var LinkSet = 31388;
+var Feed = 31890;
 var Date2 = 31922;
 var Time = 31923;
 var Calendar = 31924;
@@ -448,8 +624,24 @@ var CalendarEventRSVP = 31925;
 var RelayReview = 31987;
 var Handlerrecommendation = 31989;
 var Handlerinformation = 31990;
+var SoftwareApplication = 32267;
+var LegacyNsiteFile = 34128;
+var VideoViewEvent = 34237;
 var CommunityDefinition = 34550;
+var NsiteNamed = 35128;
+var GeocacheListing = 37515;
+var GeocacheLogEntry = 37516;
+var CashuMintAnnouncement = 38172;
+var FedimintAnnouncement = 38173;
+var PeerToPeerOrderEvents = 38383;
 var GroupMetadata = 39e3;
+var SimpleGroupAdmins = 39001;
+var SimpleGroupMembers = 39002;
+var SimpleGroupRoles = 39003;
+var SimpleGroupLiveKitParticipants = 39004;
+var StarterPacks = 39089;
+var MediaStarterPacks = 39092;
+var WebBookmarks = 39701;
 
 // filter.ts
 function matchFilter(filter, event) {
@@ -692,7 +884,9 @@ var AbstractRelay = class {
         connectionTimeoutHandle = setTimeout(() => {
           reject("connection timed out");
           this.connectionPromise = void 0;
-          this.skipReconnection = true;
+          if (this.reconnectAttempts === 0) {
+            this.skipReconnection = true;
+          }
           this.onclose?.();
           this.handleHardClose("relay connection timed out");
         }, opts.timeout);
@@ -736,7 +930,9 @@ var AbstractRelay = class {
         clearTimeout(connectionTimeoutHandle);
         reject("connection failed");
         this.connectionPromise = void 0;
-        this.skipReconnection = true;
+        if (this.reconnectAttempts === 0) {
+          this.skipReconnection = true;
+        }
         this.onclose?.();
         this.handleHardClose("relay connection failed");
       };
@@ -837,19 +1033,38 @@ var AbstractRelay = class {
       }, this.publishTimeout);
       this.openEventPublishes.set(event.id, { resolve, reject, timeout });
     });
-    this.send('["EVENT",' + JSON.stringify(event) + "]");
+    try {
+      await this.send('["EVENT",' + JSON.stringify(event) + "]");
+    } catch (err) {
+      const ep = this.openEventPublishes.get(event.id);
+      if (ep) {
+        ep.reject(err);
+        this.openEventPublishes.delete(event.id);
+      }
+    }
     this.ongoingOperations--;
     if (this.ongoingOperations === 0)
       this.idleSince = Date.now();
     return ret;
   }
   async count(filters, params) {
+    return (await this.countWithHLL(filters, params)).count;
+  }
+  async countWithHLL(filters, params) {
     this.serial++;
     const id = params?.id || "count:" + this.serial;
     const ret = new Promise((resolve, reject) => {
       this.openCountRequests.set(id, { resolve, reject });
     });
-    this.send('["COUNT","' + id + '",' + JSON.stringify(filters).substring(1));
+    try {
+      await this.send('["COUNT","' + id + '",' + JSON.stringify(filters).substring(1));
+    } catch (err) {
+      const cr = this.openCountRequests.get(id);
+      if (cr) {
+        cr.reject(err);
+        this.openCountRequests.delete(id);
+      }
+    }
     return ret;
   }
   subscribe(filters, params) {
@@ -927,7 +1142,7 @@ var AbstractRelay = class {
           const payload = data[2];
           const cr = this.openCountRequests.get(id);
           if (cr) {
-            cr.resolve(payload.count);
+            cr.resolve(payload);
             this.openCountRequests.delete(id);
           }
           return;
@@ -957,8 +1172,14 @@ var AbstractRelay = class {
         case "CLOSED": {
           const id = data[1];
           const so = this.openSubs.get(id);
-          if (!so)
+          if (!so) {
+            const cr = this.openCountRequests.get(id);
+            if (cr) {
+              cr.reject(new Error(data[2]));
+              this.openCountRequests.delete(id);
+            }
             return;
+          }
           so.closed = true;
           so.close(data[2]);
           return;
@@ -1084,6 +1305,63 @@ var alwaysTrue = (t) => {
   return true;
 };
 
+// nip45.ts
+import { sha256 as sha2562 } from "@noble/hashes/sha2.js";
+import { bytesToHex as bytesToHex3 } from "@noble/hashes/utils.js";
+var M = 256;
+var HLL_HEX_LENGTH = M * 2;
+var utf8Encoder2 = new TextEncoder();
+function getCountManyFilter(target, directive) {
+  switch (directive) {
+    case "reactions":
+      return { "#e": [target], kinds: [7] };
+    case "reposts":
+      return { "#e": [target], kinds: [6] };
+    case "quotes":
+      return { "#q": [target], kinds: [1, 1111] };
+    case "replies":
+      return { "#e": [target], kinds: [1] };
+    case "comments":
+      return { "#E": [target], kinds: [1111] };
+    case "followers":
+      return { "#p": [target], kinds: [3] };
+  }
+}
+function newHll() {
+  return new Uint8Array(M);
+}
+function hllDecode(hex) {
+  if (hex.length !== HLL_HEX_LENGTH || !/^[0-9a-fA-F]+$/.test(hex))
+    return void 0;
+  const registers = new Uint8Array(M);
+  for (let i2 = 0; i2 < M; i2++) {
+    registers[i2] = parseInt(hex.slice(i2 * 2, i2 * 2 + 2), 16);
+  }
+  return registers;
+}
+function hllEncode(registers) {
+  if (registers.length !== M)
+    throw new Error(`invalid number of registers ${registers.length}`);
+  let hex = "";
+  for (let i2 = 0; i2 < M; i2++) {
+    hex += registers[i2].toString(16).padStart(2, "0");
+  }
+  return hex;
+}
+function mergeHll(target, source) {
+  if (target.length === 0)
+    target = newHll();
+  if (target.length !== M)
+    throw new Error(`invalid number of registers ${target.length}`);
+  if (source.length !== M)
+    throw new Error(`invalid number of registers ${source.length}`);
+  for (let i2 = 0; i2 < M; i2++) {
+    if (source[i2] > target[i2])
+      target[i2] = source[i2];
+  }
+  return target;
+}
+
 // abstract-pool.ts
 var AbstractSimplePool = class {
   relays = /* @__PURE__ */ new Map();
@@ -1311,6 +1589,48 @@ var AbstractSimplePool = class {
     events.sort((a, b) => b.created_at - a.created_at);
     return events[0] || null;
   }
+  async countMany(relays, target, directive, params) {
+    const filter = getCountManyFilter(target, directive);
+    const urls = [];
+    for (let i2 = 0; i2 < relays.length; i2++) {
+      const url = normalizeURL(relays[i2]);
+      if (urls.indexOf(url) === -1)
+        urls.push(url);
+    }
+    const responses = await Promise.all(
+      urls.map(async (url) => {
+        if (this.allowConnectingToRelay?.(url, ["read", [filter]]) === false)
+          return null;
+        let relay;
+        try {
+          relay = await this.ensureRelay(url, {
+            connectionTimeout: this.maxWaitForConnection < (params?.maxWait || 0) ? Math.max(params.maxWait * 0.8, params.maxWait - 1e3) : this.maxWaitForConnection,
+            abort: params?.abort
+          });
+        } catch (err) {
+          this.onRelayConnectionFailure?.(url);
+          return null;
+        }
+        this.onRelayConnectionSuccess?.(url);
+        return relay.countWithHLL([filter], { id: params?.id }).catch(() => null);
+      })
+    );
+    let count = 0;
+    let hll;
+    for (const response of responses) {
+      if (!response)
+        continue;
+      if (response.count > count)
+        count = response.count;
+      if (!response.hll || response.hll.length !== 512)
+        continue;
+      const registers = hllDecode(response.hll);
+      if (!registers)
+        continue;
+      hll = mergeHll(hll || new Uint8Array(0), registers);
+    }
+    return hll ? { count, hll: hllEncode(hll) } : { count };
+  }
   publish(relays, event, params) {
     return relays.map(normalizeURL).map(async (url, i2, arr) => {
       if (arr.indexOf(url) !== i2) {
@@ -1398,7 +1718,7 @@ __export(nip19_exports, {
   npubEncode: () => npubEncode,
   nsecEncode: () => nsecEncode
 });
-import { bytesToHex as bytesToHex3, concatBytes, hexToBytes as hexToBytes3 } from "@noble/hashes/utils.js";
+import { bytesToHex as bytesToHex4, concatBytes, hexToBytes as hexToBytes3 } from "@noble/hashes/utils.js";
 import { bech32 } from "@scure/base";
 var NostrTypeGuard = {
   isNProfile: (value) => /^nprofile1[a-z\d]+$/.test(value || ""),
@@ -1441,7 +1761,7 @@ function decode(code) {
       return {
         type: "nprofile",
         data: {
-          pubkey: bytesToHex3(tlv[0][0]),
+          pubkey: bytesToHex4(tlv[0][0]),
           relays: tlv[1] ? tlv[1].map((d) => utf8Decoder.decode(d)) : []
         }
       };
@@ -1459,10 +1779,10 @@ function decode(code) {
       return {
         type: "nevent",
         data: {
-          id: bytesToHex3(tlv[0][0]),
+          id: bytesToHex4(tlv[0][0]),
           relays: tlv[1] ? tlv[1].map((d) => utf8Decoder.decode(d)) : [],
-          author: tlv[2]?.[0] ? bytesToHex3(tlv[2][0]) : void 0,
-          kind: tlv[3]?.[0] ? parseInt(bytesToHex3(tlv[3][0]), 16) : void 0
+          author: tlv[2]?.[0] ? bytesToHex4(tlv[2][0]) : void 0,
+          kind: tlv[3]?.[0] ? parseInt(bytesToHex4(tlv[3][0]), 16) : void 0
         }
       };
     }
@@ -1482,8 +1802,8 @@ function decode(code) {
         type: "naddr",
         data: {
           identifier: utf8Decoder.decode(tlv[0][0]),
-          pubkey: bytesToHex3(tlv[2][0]),
-          kind: parseInt(bytesToHex3(tlv[3][0]), 16),
+          pubkey: bytesToHex4(tlv[2][0]),
+          kind: parseInt(bytesToHex4(tlv[3][0]), 16),
           relays: tlv[1] ? tlv[1].map((d) => utf8Decoder.decode(d)) : []
         }
       };
@@ -1492,7 +1812,7 @@ function decode(code) {
       return { type: prefix, data };
     case "npub":
     case "note":
-      return { type: prefix, data: bytesToHex3(data) };
+      return { type: prefix, data: bytesToHex4(data) };
     default:
       throw new Error(`unknown prefix ${prefix}`);
   }
@@ -1501,6 +1821,8 @@ function parseTLV(data) {
   let result = {};
   let rest = data;
   while (rest.length > 0) {
+    if (rest.length < 2)
+      throw new Error("not enough data to read TLV");
     let t = rest[0];
     let l = rest[1];
     let v = rest.slice(2, 2 + l);
@@ -1759,6 +2081,7 @@ var nip10_exports = {};
 __export(nip10_exports, {
   parse: () => parse
 });
+var HEX64 = /^[0-9a-fA-F]{64}$/;
 function parse(event) {
   const result = {
     reply: void 0,
@@ -1771,12 +2094,12 @@ function parse(event) {
   let maybeRoot;
   for (let i2 = event.tags.length - 1; i2 >= 0; i2--) {
     const tag = event.tags[i2];
-    if (tag[0] === "e" && tag[1]) {
+    if (tag[0] === "e" && tag[1] && HEX64.test(tag[1])) {
       const [_, eTagEventId, eTagRelayUrl, eTagMarker, eTagAuthor] = tag;
       const eventPointer = {
         id: eTagEventId,
         relays: eTagRelayUrl ? [eTagRelayUrl] : [],
-        author: eTagAuthor
+        author: eTagAuthor && HEX64.test(eTagAuthor) ? eTagAuthor : void 0
       };
       if (eTagMarker === "root") {
         result.root = eventPointer;
@@ -1798,14 +2121,14 @@ function parse(event) {
       result.mentions.push(eventPointer);
       continue;
     }
-    if (tag[0] === "q" && tag[1]) {
+    if (tag[0] === "q" && tag[1] && HEX64.test(tag[1])) {
       const [_, eTagEventId, eTagRelayUrl] = tag;
       result.quotes.push({
         id: eTagEventId,
         relays: eTagRelayUrl ? [eTagRelayUrl] : []
       });
     }
-    if (tag[0] === "p" && tag[1]) {
+    if (tag[0] === "p" && tag[1] && HEX64.test(tag[1])) {
       result.profiles.push({
         pubkey: tag[1],
         relays: tag[2] ? [tag[2]] : []
@@ -1885,8 +2208,8 @@ __export(nip13_exports, {
   getPow: () => getPow,
   minePow: () => minePow
 });
-import { bytesToHex as bytesToHex4 } from "@noble/hashes/utils.js";
-import { sha256 as sha2562 } from "@noble/hashes/sha2.js";
+import { bytesToHex as bytesToHex5 } from "@noble/hashes/utils.js";
+import { sha256 as sha2563 } from "@noble/hashes/sha2.js";
 function getPow(hex) {
   let count = 0;
   for (let i2 = 0; i2 < 64; i2 += 8) {
@@ -1925,11 +2248,11 @@ function minePow(unsigned, difficulty) {
       event.created_at = now2;
     }
     tag[1] = (++count).toString();
-    const hash = sha2562(
+    const hash = sha2563(
       utf8Encoder.encode(JSON.stringify([0, event.pubkey, event.created_at, event.kind, event.tags, event.content]))
     );
     if (getPowFromBytes(hash) >= difficulty) {
-      event.id = bytesToHex4(hash);
+      event.id = bytesToHex5(hash);
       break;
     }
   }
@@ -1970,7 +2293,7 @@ import { equalBytes } from "@noble/ciphers/utils.js";
 import { secp256k1 as secp256k12 } from "@noble/curves/secp256k1.js";
 import { extract as hkdf_extract, expand as hkdf_expand } from "@noble/hashes/hkdf.js";
 import { hmac } from "@noble/hashes/hmac.js";
-import { sha256 as sha2563 } from "@noble/hashes/sha2.js";
+import { sha256 as sha2564 } from "@noble/hashes/sha2.js";
 import { concatBytes as concatBytes2, hexToBytes as hexToBytes5, randomBytes as randomBytes2 } from "@noble/hashes/utils.js";
 import { base64 as base642 } from "@scure/base";
 var minPlaintextSize = 1;
@@ -1978,10 +2301,10 @@ var maxPlaintextSize = 4294967295;
 var extendedPrefixThreshold = 65536;
 function getConversationKey(privkeyA, pubkeyB) {
   const sharedX = secp256k12.getSharedSecret(privkeyA, hexToBytes5("02" + pubkeyB)).subarray(1, 33);
-  return hkdf_extract(sha2563, sharedX, utf8Encoder.encode("nip44-v2"));
+  return hkdf_extract(sha2564, sharedX, utf8Encoder.encode("nip44-v2"));
 }
 function getMessageKeys(conversationKey, nonce) {
-  const keys = hkdf_expand(sha2563, conversationKey, nonce, 76);
+  const keys = hkdf_expand(sha2564, conversationKey, nonce, 76);
   return {
     chacha_key: keys.subarray(0, 32),
     chacha_nonce: keys.subarray(32, 44),
@@ -2043,7 +2366,7 @@ function hmacAad(key, message, aad) {
   if (aad.length !== 32)
     throw new Error("AAD associated data must be 32 bytes");
   const combined = concatBytes2(aad, message);
-  return hmac(sha2563, key, combined);
+  return hmac(sha2564, key, combined);
 }
 function decodePayload(payload) {
   if (typeof payload !== "string")
@@ -2302,6 +2625,7 @@ var nip22_exports = {};
 __export(nip22_exports, {
   parse: () => parse3
 });
+var HEX642 = /^[0-9a-fA-F]{64}$/;
 function parseKind(kind) {
   if (!kind)
     return void 0;
@@ -2315,9 +2639,12 @@ function parseAddressPointer(value, relayUrl) {
   const kind = parseInt(value.slice(0, idx), 10);
   if (Number.isNaN(kind))
     return void 0;
+  const pubkey = value.slice(idx + 1, idx2);
+  if (!HEX642.test(pubkey))
+    return void 0;
   return {
     kind,
-    pubkey: value.slice(idx + 1, idx2),
+    pubkey,
     identifier: value.slice(idx2 + 1),
     relays: relayUrl ? [relayUrl] : []
   };
@@ -2326,12 +2653,12 @@ function parsePointer(tag) {
   switch (tag[0]) {
     case "E":
     case "e":
-      if (!tag[1])
+      if (!tag[1] || !HEX642.test(tag[1]))
         return void 0;
       return {
         id: tag[1],
         relays: tag[2] ? [tag[2]] : [],
-        author: tag[3]
+        author: tag[3] && HEX642.test(tag[3]) ? tag[3] : void 0
       };
     case "A":
     case "a":
@@ -2354,10 +2681,12 @@ function parseQuote(tag) {
   if (tag[1].includes(":")) {
     return parseAddressPointer(tag[1], tag[2]);
   }
+  if (!HEX642.test(tag[1]))
+    return void 0;
   return {
     id: tag[1],
     relays: tag[2] ? [tag[2]] : [],
-    author: tag[3]
+    author: tag[3] && HEX642.test(tag[3]) ? tag[3] : void 0
   };
 }
 function choosePointer(candidates) {
@@ -2417,7 +2746,7 @@ function parse3(event) {
         result.quotes.push(pointer);
       continue;
     }
-    if ((tag[0] === "P" || tag[0] === "p") && tag[1]) {
+    if ((tag[0] === "P" || tag[0] === "p") && tag[1] && HEX642.test(tag[1])) {
       result.profiles.push({
         pubkey: tag[1],
         relays: tag[2] ? [tag[2]] : []
@@ -2996,8 +3325,8 @@ __export(nip77_exports, {
   NegentropyStorageVector: () => NegentropyStorageVector,
   NegentropySync: () => NegentropySync
 });
-import { bytesToHex as bytesToHex5, hexToBytes as hexToBytes6 } from "@noble/hashes/utils.js";
-import { sha256 as sha2564 } from "@noble/hashes/sha2.js";
+import { bytesToHex as bytesToHex6, hexToBytes as hexToBytes6 } from "@noble/hashes/utils.js";
+import { sha256 as sha2565 } from "@noble/hashes/sha2.js";
 var PROTOCOL_VERSION = 97;
 var ID_SIZE = 32;
 var FINGERPRINT_SIZE = 16;
@@ -3128,7 +3457,7 @@ var Accumulator = class {
     let input = new WrappedBuffer();
     input.extend(this.buf);
     input.extend(encodeVarInt(n));
-    let hash = sha2564(input.unwrap());
+    let hash = sha2565(input.unwrap());
     return hash.subarray(0, FINGERPRINT_SIZE);
   }
 };
@@ -3236,7 +3565,7 @@ var Negentropy = class {
     let output = new WrappedBuffer();
     output.extend(new Uint8Array([PROTOCOL_VERSION]));
     this.splitRange(0, this.storage.size(), this._bound(Number.MAX_VALUE), output);
-    return bytesToHex5(output.unwrap());
+    return bytesToHex6(output.unwrap());
   }
   reconcile(queryMsg, onhave, onneed) {
     const query = new WrappedBuffer(hexToBytes6(queryMsg));
@@ -3282,22 +3611,22 @@ var Negentropy = class {
         let theirElems = {};
         for (let i2 = 0; i2 < numIds; i2++) {
           let e = getBytes(query, ID_SIZE);
-          theirElems[bytesToHex5(e)] = e;
+          theirElems[bytesToHex6(e)] = e;
         }
         skip = true;
         this.storage.iterate(lower, upper, (item) => {
           let k = item.id;
-          const id = bytesToHex5(k);
+          const id = bytesToHex6(k);
           if (!theirElems[id]) {
             onhave?.(id);
           } else {
-            delete theirElems[bytesToHex5(k)];
+            delete theirElems[bytesToHex6(k)];
           }
           return true;
         });
         if (onneed) {
           for (let v of Object.values(theirElems)) {
-            onneed(bytesToHex5(v));
+            onneed(bytesToHex6(v));
           }
         }
       } else {
@@ -3315,7 +3644,7 @@ var Negentropy = class {
       prevIndex = upper;
       prevBound = currBound;
     }
-    return fullOutput.length === 1 ? null : bytesToHex5(fullOutput.unwrap());
+    return fullOutput.length === 1 ? null : bytesToHex6(fullOutput.unwrap());
   }
   splitRange(lower, upper, upperBound, o) {
     let numElems = upper - lower;
@@ -3503,8 +3832,8 @@ __export(nip98_exports, {
   validateEventUrlTag: () => validateEventUrlTag,
   validateToken: () => validateToken
 });
-import { sha256 as sha2565 } from "@noble/hashes/sha2.js";
-import { bytesToHex as bytesToHex6 } from "@noble/hashes/utils.js";
+import { sha256 as sha2566 } from "@noble/hashes/sha2.js";
+import { bytesToHex as bytesToHex7 } from "@noble/hashes/utils.js";
 import { base64 as base643 } from "@scure/base";
 var _authorizationScheme = "Nostr ";
 async function getToken(loginUrl, httpMethod, sign, includeAuthorizationScheme = false, payload) {
@@ -3569,8 +3898,8 @@ function validateEventMethodTag(event, method) {
   return methodTag.length > 0 && methodTag[1].toLowerCase() === method.toLowerCase();
 }
 function hashPayload(payload) {
-  const hash = sha2565(utf8Encoder.encode(JSON.stringify(payload)));
-  return bytesToHex6(hash);
+  const hash = sha2566(utf8Encoder.encode(JSON.stringify(payload)));
+  return bytesToHex7(hash);
 }
 function validateEventPayloadTag(event, payload) {
   const payloadTag = event.tags.find((t) => t[0] === "payload");