@openclaw/nostr 2026.7.1-beta.2 → 2026.7.1-beta.4

package/node_modules/nostr-tools/lib/cjs/index.js

@@ -293,39 +293,61 @@ var verifyEvent = i.verifyEvent;
 // kinds.ts
 var kinds_exports = {};
 __export(kinds_exports, {
+  AIEmbeddings: () => AIEmbeddings,
+  AppCurationSet: () => AppCurationSet,
   Application: () => Application,
+  AuthoredPodcasts: () => AuthoredPodcasts,
   BadgeAward: () => BadgeAward,
   BadgeDefinition: () => BadgeDefinition,
+  Bid: () => Bid,
+  BidConfirmation: () => BidConfirmation,
+  BlobsAuth: () => BlobsAuth,
   BlockedRelaysList: () => BlockedRelaysList,
   BlossomServerList: () => BlossomServerList,
   BookmarkList: () => BookmarkList,
   Bookmarksets: () => Bookmarksets,
   Calendar: () => Calendar,
   CalendarEventRSVP: () => CalendarEventRSVP,
+  CashuMintAnnouncement: () => CashuMintAnnouncement,
+  CashuWalletEvent: () => CashuWalletEvent,
+  CashuWalletHistory: () => CashuWalletHistory,
+  CashuWalletTokens: () => CashuWalletTokens,
   ChannelCreation: () => ChannelCreation,
   ChannelHideMessage: () => ChannelHideMessage,
   ChannelMessage: () => ChannelMessage,
   ChannelMetadata: () => ChannelMetadata,
   ChannelMuteUser: () => ChannelMuteUser,
   ChatMessage: () => ChatMessage,
+  Chess: () => Chess,
   ClassifiedListing: () => ClassifiedListing,
   ClientAuth: () => ClientAuth,
+  CodeSnippet: () => CodeSnippet,
+  CoinjoinPool: () => CoinjoinPool,
   Comment: () => Comment,
   CommunitiesList: () => CommunitiesList,
   CommunityDefinition: () => CommunityDefinition,
   CommunityPostApproval: () => CommunityPostApproval,
+  ConferenceEvent: () => ConferenceEvent,
   Contacts: () => Contacts,
   CreateOrUpdateProduct: () => CreateOrUpdateProduct,
   CreateOrUpdateStall: () => CreateOrUpdateStall,
+  CuratedVideoSets: () => CuratedVideoSets,
   Curationsets: () => Curationsets,
   Date: () => Date2,
+  DecoupledEncryptionKeyDistribution: () => DecoupledEncryptionKeyDistribution,
+  DecoupledKeyAnnouncement: () => DecoupledKeyAnnouncement,
+  DecoupledKeyClientAnnouncement: () => DecoupledKeyClientAnnouncement,
   DirectMessageRelaysList: () => DirectMessageRelaysList,
   DraftClassifiedListing: () => DraftClassifiedListing,
+  DraftEvent: () => DraftEvent,
   DraftLong: () => DraftLong,
   Emojisets: () => Emojisets,
   EncryptedDirectMessage: () => EncryptedDirectMessage,
   EventDeletion: () => EventDeletion,
+  FavoritePodcasts: () => FavoritePodcasts,
   FavoriteRelays: () => FavoriteRelays,
+  FedimintAnnouncement: () => FedimintAnnouncement,
+  Feed: () => Feed,
   FileMessage: () => FileMessage,
   FileMetadata: () => FileMetadata,
   FileServerPreference: () => FileServerPreference,
@@ -333,55 +355,129 @@ __export(kinds_exports, {
   ForumThread: () => ForumThread,
   GenericRepost: () => GenericRepost,
   Genericlists: () => Genericlists,
+  GeocacheListing: () => GeocacheListing,
+  GeocacheLog: () => GeocacheLog,
+  GeocacheLogEntry: () => GeocacheLogEntry,
+  GeocacheProofOfFind: () => GeocacheProofOfFind,
   GiftWrap: () => GiftWrap,
+  GitPullRequest: () => GitPullRequest,
+  GitPullRequestUpdate: () => GitPullRequestUpdate,
+  GoodWikiAuthorList: () => GoodWikiAuthorList,
+  GoodWikiRelayList: () => GoodWikiRelayList,
   GroupMetadata: () => GroupMetadata,
   HTTPAuth: () => HTTPAuth,
   Handlerinformation: () => Handlerinformation,
   Handlerrecommendation: () => Handlerrecommendation,
   Highlights: () => Highlights,
+  InteractiveRoom: () => InteractiveRoom,
   InterestsList: () => InterestsList,
   Interestsets: () => Interestsets,
+  Issue: () => Issue,
   JobFeedback: () => JobFeedback,
   JobRequest: () => JobRequest,
   JobResult: () => JobResult,
   Label: () => Label,
+  LegacyNsiteFile: () => LegacyNsiteFile,
   LightningPubRPC: () => LightningPubRPC,
+  LinkSet: () => LinkSet,
   LiveChatMessage: () => LiveChatMessage,
   LiveEvent: () => LiveEvent,
   LongFormArticle: () => LongFormArticle,
+  MarketplaceUI: () => MarketplaceUI,
+  MediaFollows: () => MediaFollows,
+  MediaStarterPacks: () => MediaStarterPacks,
+  MergeRequests: () => MergeRequests,
   Metadata: () => Metadata,
+  ModularArticleContent: () => ModularArticleContent,
+  ModularArticleHeader: () => ModularArticleHeader,
+  MuteSets: () => MuteSets,
   Mutelist: () => Mutelist,
   NWCWalletInfo: () => NWCWalletInfo,
   NWCWalletRequest: () => NWCWalletRequest,
   NWCWalletResponse: () => NWCWalletResponse,
   NormalVideo: () => NormalVideo,
   NostrConnect: () => NostrConnect,
+  NsiteNamed: () => NsiteNamed,
+  NsiteRoot: () => NsiteRoot,
+  NutZap: () => NutZap,
+  NutZapInfo: () => NutZapInfo,
   OpenTimestamps: () => OpenTimestamps,
+  Patch: () => Patch,
+  PeerToPeerOrderEvents: () => PeerToPeerOrderEvents,
   Photo: () => Photo,
   Pinlist: () => Pinlist,
+  PodcastEpisode: () => PodcastEpisode,
+  PodcastMetadata: () => PodcastMetadata,
   Poll: () => Poll,
   PollResponse: () => PollResponse,
   PrivateDirectMessage: () => PrivateDirectMessage,
+  PrivateEventRelayList: () => PrivateEventRelayList,
   ProblemTracker: () => ProblemTracker,
+  ProductSoldAsAuction: () => ProductSoldAsAuction,
   ProfileBadges: () => ProfileBadges,
+  ProxyAnnouncement: () => ProxyAnnouncement,
   PublicChatsList: () => PublicChatsList,
+  PublicMessage: () => PublicMessage,
   Reaction: () => Reaction,
+  ReactionToWebsite: () => ReactionToWebsite,
   RecommendRelay: () => RecommendRelay,
+  Redirects: () => Redirects,
+  RelayDiscovery: () => RelayDiscovery,
   RelayList: () => RelayList,
+  RelayMonitorAnnouncement: () => RelayMonitorAnnouncement,
   RelayReview: () => RelayReview,
+  RelayReviews: () => RelayReviews,
   Relaysets: () => Relaysets,
+  ReleaseArtifactSets: () => ReleaseArtifactSets,
+  Reply: () => Reply,
   Report: () => Report,
   Reporting: () => Reporting,
+  RepositoryAnnouncement: () => RepositoryAnnouncement,
+  RepositoryState: () => RepositoryState,
   Repost: () => Repost,
+  ReservedCashuWalletTokens: () => ReservedCashuWalletTokens,
+  RoomPresence: () => RoomPresence,
+  Scroll: () => Scroll,
   Seal: () => Seal,
   SearchRelaysList: () => SearchRelaysList,
   ShortTextNote: () => ShortTextNote,
   ShortVideo: () => ShortVideo,
+  SimpleGroupAdmins: () => SimpleGroupAdmins,
+  SimpleGroupCreateGroup: () => SimpleGroupCreateGroup,
+  SimpleGroupCreateInvite: () => SimpleGroupCreateInvite,
+  SimpleGroupDeleteEvent: () => SimpleGroupDeleteEvent,
+  SimpleGroupDeleteGroup: () => SimpleGroupDeleteGroup,
+  SimpleGroupEditMetadata: () => SimpleGroupEditMetadata,
+  SimpleGroupJoinRequest: () => SimpleGroupJoinRequest,
+  SimpleGroupLeaveRequest: () => SimpleGroupLeaveRequest,
+  SimpleGroupList: () => SimpleGroupList,
+  SimpleGroupLiveKitParticipants: () => SimpleGroupLiveKitParticipants,
+  SimpleGroupMembers: () => SimpleGroupMembers,
+  SimpleGroupPutUser: () => SimpleGroupPutUser,
+  SimpleGroupRemoveUser: () => SimpleGroupRemoveUser,
+  SimpleGroupReply: () => SimpleGroupReply,
+  SimpleGroupRoles: () => SimpleGroupRoles,
+  SimpleGroupThreadedReply: () => SimpleGroupThreadedReply,
+  SlideSet: () => SlideSet,
+  SoftwareApplication: () => SoftwareApplication,
+  StarterPacks: () => StarterPacks,
+  StatusApplied: () => StatusApplied,
+  StatusClosed: () => StatusClosed,
+  StatusDraft: () => StatusDraft,
+  StatusOpen: () => StatusOpen,
+  TidalLogin: () => TidalLogin,
   Time: () => Time,
+  Torrent: () => Torrent,
+  TorrentComment: () => TorrentComment,
+  TransportMethodAnnouncement: () => TransportMethodAnnouncement,
   UserEmojiList: () => UserEmojiList,
+  UserGraspList: () => UserGraspList,
   UserStatuses: () => UserStatuses,
+  VideoViewEvent: () => VideoViewEvent,
   Voice: () => Voice,
   VoiceComment: () => VoiceComment,
+  WebBookmarks: () => WebBookmarks,
+  WikiArticle: () => WikiArticle,
   Zap: () => Zap,
   ZapGoal: () => ZapGoal,
   ZapRequest: () => ZapRequest,
@@ -429,40 +525,83 @@ var Repost = 6;
 var Reaction = 7;
 var BadgeAward = 8;
 var ChatMessage = 9;
+var SimpleGroupThreadedReply = 10;
 var ForumThread = 11;
+var SimpleGroupReply = 12;
 var Seal = 13;
 var PrivateDirectMessage = 14;
 var FileMessage = 15;
 var GenericRepost = 16;
+var ReactionToWebsite = 17;
 var Photo = 20;
 var NormalVideo = 21;
 var ShortVideo = 22;
+var PublicMessage = 24;
 var ChannelCreation = 40;
 var ChannelMetadata = 41;
 var ChannelMessage = 42;
 var ChannelHideMessage = 43;
 var ChannelMuteUser = 44;
+var PodcastEpisode = 54;
+var Chess = 64;
+var MergeRequests = 818;
+var PollResponse = 1018;
+var Bid = 1021;
+var BidConfirmation = 1022;
 var OpenTimestamps = 1040;
 var GiftWrap = 1059;
-var Poll = 1068;
 var FileMetadata = 1063;
+var Poll = 1068;
 var Comment = 1111;
-var LiveChatMessage = 1311;
 var Voice = 1222;
+var Scroll = 1227;
 var VoiceComment = 1244;
+var LiveChatMessage = 1311;
+var CodeSnippet = 1337;
+var Patch = 1617;
+var GitPullRequest = 1618;
+var GitPullRequestUpdate = 1619;
+var Issue = 1621;
+var Reply = 1622;
+var StatusOpen = 1630;
+var StatusApplied = 1631;
+var StatusClosed = 1632;
+var StatusDraft = 1633;
 var ProblemTracker = 1971;
 var Report = 1984;
 var Reporting = 1984;
 var Label = 1985;
+var RelayReviews = 1986;
+var AIEmbeddings = 1987;
+var Torrent = 2003;
+var TorrentComment = 2004;
+var CoinjoinPool = 2022;
+var DecoupledKeyClientAnnouncement = 4454;
+var DecoupledEncryptionKeyDistribution = 4455;
 var CommunityPostApproval = 4550;
 var JobRequest = 5999;
 var JobResult = 6999;
 var JobFeedback = 7e3;
+var ReservedCashuWalletTokens = 7374;
+var CashuWalletTokens = 7375;
+var CashuWalletHistory = 7376;
+var GeocacheLog = 7516;
+var GeocacheProofOfFind = 7517;
+var SimpleGroupPutUser = 9e3;
+var SimpleGroupRemoveUser = 9001;
+var SimpleGroupEditMetadata = 9002;
+var SimpleGroupDeleteEvent = 9005;
+var SimpleGroupCreateGroup = 9007;
+var SimpleGroupDeleteGroup = 9008;
+var SimpleGroupCreateInvite = 9009;
+var SimpleGroupJoinRequest = 9021;
+var SimpleGroupLeaveRequest = 9022;
 var ZapGoal = 9041;
+var NutZap = 9321;
+var TidalLogin = 9467;
 var ZapRequest = 9734;
 var Zap = 9735;
 var Highlights = 9802;
-var PollResponse = 1018;
 var Mutelist = 1e4;
 var Pinlist = 10001;
 var RelayList = 10002;
@@ -471,37 +610,74 @@ var CommunitiesList = 10004;
 var PublicChatsList = 10005;
 var BlockedRelaysList = 10006;
 var SearchRelaysList = 10007;
+var SimpleGroupList = 10009;
 var FavoriteRelays = 10012;
+var PrivateEventRelayList = 10013;
 var InterestsList = 10015;
+var NutZapInfo = 10019;
+var MediaFollows = 10020;
 var UserEmojiList = 10030;
+var DecoupledKeyAnnouncement = 10044;
 var DirectMessageRelaysList = 10050;
-var FileServerPreference = 10096;
+var FavoritePodcasts = 10054;
 var BlossomServerList = 10063;
+var FileServerPreference = 10096;
+var GoodWikiAuthorList = 10101;
+var GoodWikiRelayList = 10102;
+var PodcastMetadata = 10154;
+var AuthoredPodcasts = 10164;
+var RelayMonitorAnnouncement = 10166;
+var RoomPresence = 10312;
+var UserGraspList = 10317;
+var ProxyAnnouncement = 10377;
+var TransportMethodAnnouncement = 11111;
 var NWCWalletInfo = 13194;
+var NsiteRoot = 15128;
+var CashuWalletEvent = 17375;
 var LightningPubRPC = 21e3;
 var ClientAuth = 22242;
 var NWCWalletRequest = 23194;
 var NWCWalletResponse = 23195;
 var NostrConnect = 24133;
+var BlobsAuth = 24242;
 var HTTPAuth = 27235;
 var Followsets = 3e4;
 var Genericlists = 30001;
 var Relaysets = 30002;
 var Bookmarksets = 30003;
 var Curationsets = 30004;
+var CuratedVideoSets = 30005;
+var MuteSets = 30007;
 var ProfileBadges = 30008;
 var BadgeDefinition = 30009;
 var Interestsets = 30015;
 var CreateOrUpdateStall = 30017;
 var CreateOrUpdateProduct = 30018;
+var MarketplaceUI = 30019;
+var ProductSoldAsAuction = 30020;
 var LongFormArticle = 30023;
 var DraftLong = 30024;
 var Emojisets = 30030;
+var ModularArticleHeader = 30040;
+var ModularArticleContent = 30041;
+var ReleaseArtifactSets = 30063;
 var Application = 30078;
+var RelayDiscovery = 30166;
+var AppCurationSet = 30267;
 var LiveEvent = 30311;
+var InteractiveRoom = 30312;
+var ConferenceEvent = 30313;
 var UserStatuses = 30315;
+var SlideSet = 30388;
 var ClassifiedListing = 30402;
 var DraftClassifiedListing = 30403;
+var RepositoryAnnouncement = 30617;
+var RepositoryState = 30618;
+var WikiArticle = 30818;
+var Redirects = 30819;
+var DraftEvent = 31234;
+var LinkSet = 31388;
+var Feed = 31890;
 var Date2 = 31922;
 var Time = 31923;
 var Calendar = 31924;
@@ -509,8 +685,24 @@ var CalendarEventRSVP = 31925;
 var RelayReview = 31987;
 var Handlerrecommendation = 31989;
 var Handlerinformation = 31990;
+var SoftwareApplication = 32267;
+var LegacyNsiteFile = 34128;
+var VideoViewEvent = 34237;
 var CommunityDefinition = 34550;
+var NsiteNamed = 35128;
+var GeocacheListing = 37515;
+var GeocacheLogEntry = 37516;
+var CashuMintAnnouncement = 38172;
+var FedimintAnnouncement = 38173;
+var PeerToPeerOrderEvents = 38383;
 var GroupMetadata = 39e3;
+var SimpleGroupAdmins = 39001;
+var SimpleGroupMembers = 39002;
+var SimpleGroupRoles = 39003;
+var SimpleGroupLiveKitParticipants = 39004;
+var StarterPacks = 39089;
+var MediaStarterPacks = 39092;
+var WebBookmarks = 39701;
 
 // filter.ts
 function matchFilter(filter, event) {
@@ -753,7 +945,9 @@ var AbstractRelay = class {
         connectionTimeoutHandle = setTimeout(() => {
           reject("connection timed out");
           this.connectionPromise = void 0;
-          this.skipReconnection = true;
+          if (this.reconnectAttempts === 0) {
+            this.skipReconnection = true;
+          }
           this.onclose?.();
           this.handleHardClose("relay connection timed out");
         }, opts.timeout);
@@ -797,7 +991,9 @@ var AbstractRelay = class {
         clearTimeout(connectionTimeoutHandle);
         reject("connection failed");
         this.connectionPromise = void 0;
-        this.skipReconnection = true;
+        if (this.reconnectAttempts === 0) {
+          this.skipReconnection = true;
+        }
         this.onclose?.();
         this.handleHardClose("relay connection failed");
       };
@@ -898,19 +1094,38 @@ var AbstractRelay = class {
       }, this.publishTimeout);
       this.openEventPublishes.set(event.id, { resolve, reject, timeout });
     });
-    this.send('["EVENT",' + JSON.stringify(event) + "]");
+    try {
+      await this.send('["EVENT",' + JSON.stringify(event) + "]");
+    } catch (err) {
+      const ep = this.openEventPublishes.get(event.id);
+      if (ep) {
+        ep.reject(err);
+        this.openEventPublishes.delete(event.id);
+      }
+    }
     this.ongoingOperations--;
     if (this.ongoingOperations === 0)
       this.idleSince = Date.now();
     return ret;
   }
   async count(filters, params) {
+    return (await this.countWithHLL(filters, params)).count;
+  }
+  async countWithHLL(filters, params) {
     this.serial++;
     const id = params?.id || "count:" + this.serial;
     const ret = new Promise((resolve, reject) => {
       this.openCountRequests.set(id, { resolve, reject });
     });
-    this.send('["COUNT","' + id + '",' + JSON.stringify(filters).substring(1));
+    try {
+      await this.send('["COUNT","' + id + '",' + JSON.stringify(filters).substring(1));
+    } catch (err) {
+      const cr = this.openCountRequests.get(id);
+      if (cr) {
+        cr.reject(err);
+        this.openCountRequests.delete(id);
+      }
+    }
     return ret;
   }
   subscribe(filters, params) {
@@ -988,7 +1203,7 @@ var AbstractRelay = class {
           const payload = data[2];
           const cr = this.openCountRequests.get(id);
           if (cr) {
-            cr.resolve(payload.count);
+            cr.resolve(payload);
             this.openCountRequests.delete(id);
           }
           return;
@@ -1018,8 +1233,14 @@ var AbstractRelay = class {
         case "CLOSED": {
           const id = data[1];
           const so = this.openSubs.get(id);
-          if (!so)
+          if (!so) {
+            const cr = this.openCountRequests.get(id);
+            if (cr) {
+              cr.reject(new Error(data[2]));
+              this.openCountRequests.delete(id);
+            }
             return;
+          }
           so.closed = true;
           so.close(data[2]);
           return;
@@ -1145,6 +1366,63 @@ var alwaysTrue = (t) => {
   return true;
 };
 
+// nip45.ts
+var import_sha22 = require("@noble/hashes/sha2.js");
+var import_utils5 = require("@noble/hashes/utils.js");
+var M = 256;
+var HLL_HEX_LENGTH = M * 2;
+var utf8Encoder2 = new TextEncoder();
+function getCountManyFilter(target, directive) {
+  switch (directive) {
+    case "reactions":
+      return { "#e": [target], kinds: [7] };
+    case "reposts":
+      return { "#e": [target], kinds: [6] };
+    case "quotes":
+      return { "#q": [target], kinds: [1, 1111] };
+    case "replies":
+      return { "#e": [target], kinds: [1] };
+    case "comments":
+      return { "#E": [target], kinds: [1111] };
+    case "followers":
+      return { "#p": [target], kinds: [3] };
+  }
+}
+function newHll() {
+  return new Uint8Array(M);
+}
+function hllDecode(hex) {
+  if (hex.length !== HLL_HEX_LENGTH || !/^[0-9a-fA-F]+$/.test(hex))
+    return void 0;
+  const registers = new Uint8Array(M);
+  for (let i2 = 0; i2 < M; i2++) {
+    registers[i2] = parseInt(hex.slice(i2 * 2, i2 * 2 + 2), 16);
+  }
+  return registers;
+}
+function hllEncode(registers) {
+  if (registers.length !== M)
+    throw new Error(`invalid number of registers ${registers.length}`);
+  let hex = "";
+  for (let i2 = 0; i2 < M; i2++) {
+    hex += registers[i2].toString(16).padStart(2, "0");
+  }
+  return hex;
+}
+function mergeHll(target, source) {
+  if (target.length === 0)
+    target = newHll();
+  if (target.length !== M)
+    throw new Error(`invalid number of registers ${target.length}`);
+  if (source.length !== M)
+    throw new Error(`invalid number of registers ${source.length}`);
+  for (let i2 = 0; i2 < M; i2++) {
+    if (source[i2] > target[i2])
+      target[i2] = source[i2];
+  }
+  return target;
+}
+
 // abstract-pool.ts
 var AbstractSimplePool = class {
   relays = /* @__PURE__ */ new Map();
@@ -1372,6 +1650,48 @@ var AbstractSimplePool = class {
     events.sort((a, b) => b.created_at - a.created_at);
     return events[0] || null;
   }
+  async countMany(relays, target, directive, params) {
+    const filter = getCountManyFilter(target, directive);
+    const urls = [];
+    for (let i2 = 0; i2 < relays.length; i2++) {
+      const url = normalizeURL(relays[i2]);
+      if (urls.indexOf(url) === -1)
+        urls.push(url);
+    }
+    const responses = await Promise.all(
+      urls.map(async (url) => {
+        if (this.allowConnectingToRelay?.(url, ["read", [filter]]) === false)
+          return null;
+        let relay;
+        try {
+          relay = await this.ensureRelay(url, {
+            connectionTimeout: this.maxWaitForConnection < (params?.maxWait || 0) ? Math.max(params.maxWait * 0.8, params.maxWait - 1e3) : this.maxWaitForConnection,
+            abort: params?.abort
+          });
+        } catch (err) {
+          this.onRelayConnectionFailure?.(url);
+          return null;
+        }
+        this.onRelayConnectionSuccess?.(url);
+        return relay.countWithHLL([filter], { id: params?.id }).catch(() => null);
+      })
+    );
+    let count = 0;
+    let hll;
+    for (const response of responses) {
+      if (!response)
+        continue;
+      if (response.count > count)
+        count = response.count;
+      if (!response.hll || response.hll.length !== 512)
+        continue;
+      const registers = hllDecode(response.hll);
+      if (!registers)
+        continue;
+      hll = mergeHll(hll || new Uint8Array(0), registers);
+    }
+    return hll ? { count, hll: hllEncode(hll) } : { count };
+  }
   publish(relays, event, params) {
     return relays.map(normalizeURL).map(async (url, i2, arr) => {
       if (arr.indexOf(url) !== i2) {
@@ -1459,7 +1779,7 @@ __export(nip19_exports, {
   npubEncode: () => npubEncode,
   nsecEncode: () => nsecEncode
 });
-var import_utils6 = require("@noble/hashes/utils.js");
+var import_utils7 = require("@noble/hashes/utils.js");
 var import_base = require("@scure/base");
 var NostrTypeGuard = {
   isNProfile: (value) => /^nprofile1[a-z\d]+$/.test(value || ""),
@@ -1502,7 +1822,7 @@ function decode(code) {
       return {
         type: "nprofile",
         data: {
-          pubkey: (0, import_utils6.bytesToHex)(tlv[0][0]),
+          pubkey: (0, import_utils7.bytesToHex)(tlv[0][0]),
           relays: tlv[1] ? tlv[1].map((d) => utf8Decoder.decode(d)) : []
         }
       };
@@ -1520,10 +1840,10 @@ function decode(code) {
       return {
         type: "nevent",
         data: {
-          id: (0, import_utils6.bytesToHex)(tlv[0][0]),
+          id: (0, import_utils7.bytesToHex)(tlv[0][0]),
           relays: tlv[1] ? tlv[1].map((d) => utf8Decoder.decode(d)) : [],
-          author: tlv[2]?.[0] ? (0, import_utils6.bytesToHex)(tlv[2][0]) : void 0,
-          kind: tlv[3]?.[0] ? parseInt((0, import_utils6.bytesToHex)(tlv[3][0]), 16) : void 0
+          author: tlv[2]?.[0] ? (0, import_utils7.bytesToHex)(tlv[2][0]) : void 0,
+          kind: tlv[3]?.[0] ? parseInt((0, import_utils7.bytesToHex)(tlv[3][0]), 16) : void 0
         }
       };
     }
@@ -1543,8 +1863,8 @@ function decode(code) {
         type: "naddr",
         data: {
           identifier: utf8Decoder.decode(tlv[0][0]),
-          pubkey: (0, import_utils6.bytesToHex)(tlv[2][0]),
-          kind: parseInt((0, import_utils6.bytesToHex)(tlv[3][0]), 16),
+          pubkey: (0, import_utils7.bytesToHex)(tlv[2][0]),
+          kind: parseInt((0, import_utils7.bytesToHex)(tlv[3][0]), 16),
           relays: tlv[1] ? tlv[1].map((d) => utf8Decoder.decode(d)) : []
         }
       };
@@ -1553,7 +1873,7 @@ function decode(code) {
       return { type: prefix, data };
     case "npub":
     case "note":
-      return { type: prefix, data: (0, import_utils6.bytesToHex)(data) };
+      return { type: prefix, data: (0, import_utils7.bytesToHex)(data) };
     default:
       throw new Error(`unknown prefix ${prefix}`);
   }
@@ -1562,6 +1882,8 @@ function parseTLV(data) {
   let result = {};
   let rest = data;
   while (rest.length > 0) {
+    if (rest.length < 2)
+      throw new Error("not enough data to read TLV");
     let t = rest[0];
     let l = rest[1];
     let v = rest.slice(2, 2 + l);
@@ -1577,10 +1899,10 @@ function nsecEncode(key) {
   return encodeBytes("nsec", key);
 }
 function npubEncode(hex) {
-  return encodeBytes("npub", (0, import_utils6.hexToBytes)(hex));
+  return encodeBytes("npub", (0, import_utils7.hexToBytes)(hex));
 }
 function noteEncode(hex) {
-  return encodeBytes("note", (0, import_utils6.hexToBytes)(hex));
+  return encodeBytes("note", (0, import_utils7.hexToBytes)(hex));
 }
 function encodeBech32(prefix, data) {
   let words = import_base.bech32.toWords(data);
@@ -1591,7 +1913,7 @@ function encodeBytes(prefix, bytes) {
 }
 function nprofileEncode(profile) {
   let data = encodeTLV({
-    0: [(0, import_utils6.hexToBytes)(profile.pubkey)],
+    0: [(0, import_utils7.hexToBytes)(profile.pubkey)],
     1: (profile.relays || []).map((url) => utf8Encoder.encode(url))
   });
   return encodeBech32("nprofile", data);
@@ -1602,9 +1924,9 @@ function neventEncode(event) {
     kindArray = integerToUint8Array(event.kind);
   }
   let data = encodeTLV({
-    0: [(0, import_utils6.hexToBytes)(event.id)],
+    0: [(0, import_utils7.hexToBytes)(event.id)],
     1: (event.relays || []).map((url) => utf8Encoder.encode(url)),
-    2: event.author ? [(0, import_utils6.hexToBytes)(event.author)] : [],
+    2: event.author ? [(0, import_utils7.hexToBytes)(event.author)] : [],
     3: kindArray ? [new Uint8Array(kindArray)] : []
   });
   return encodeBech32("nevent", data);
@@ -1615,7 +1937,7 @@ function naddrEncode(addr) {
   let data = encodeTLV({
     0: [utf8Encoder.encode(addr.identifier)],
     1: (addr.relays || []).map((url) => utf8Encoder.encode(url)),
-    2: [(0, import_utils6.hexToBytes)(addr.pubkey)],
+    2: [(0, import_utils7.hexToBytes)(addr.pubkey)],
     3: [new Uint8Array(kind)]
   });
   return encodeBech32("naddr", data);
@@ -1631,7 +1953,7 @@ function encodeTLV(tlv) {
       entries.push(entry);
     });
   });
-  return (0, import_utils6.concatBytes)(...entries);
+  return (0, import_utils7.concatBytes)(...entries);
 }
 
 // references.ts
@@ -1729,15 +2051,15 @@ __export(nip04_exports, {
   decrypt: () => decrypt,
   encrypt: () => encrypt
 });
-var import_utils8 = require("@noble/hashes/utils.js");
+var import_utils9 = require("@noble/hashes/utils.js");
 var import_secp256k12 = require("@noble/curves/secp256k1.js");
 var import_aes = require("@noble/ciphers/aes.js");
 var import_base2 = require("@scure/base");
 function encrypt(secretKey, pubkey, text) {
-  const privkey = secretKey instanceof Uint8Array ? secretKey : (0, import_utils8.hexToBytes)(secretKey);
-  const key = import_secp256k12.secp256k1.getSharedSecret(privkey, (0, import_utils8.hexToBytes)("02" + pubkey));
+  const privkey = secretKey instanceof Uint8Array ? secretKey : (0, import_utils9.hexToBytes)(secretKey);
+  const key = import_secp256k12.secp256k1.getSharedSecret(privkey, (0, import_utils9.hexToBytes)("02" + pubkey));
   const normalizedKey = getNormalizedX(key);
-  let iv = Uint8Array.from((0, import_utils8.randomBytes)(16));
+  let iv = Uint8Array.from((0, import_utils9.randomBytes)(16));
   let plaintext = utf8Encoder.encode(text);
   let ciphertext = (0, import_aes.cbc)(normalizedKey, iv).encrypt(plaintext);
   let ctb64 = import_base2.base64.encode(new Uint8Array(ciphertext));
@@ -1745,9 +2067,9 @@ function encrypt(secretKey, pubkey, text) {
   return `${ctb64}?iv=${ivb64}`;
 }
 function decrypt(secretKey, pubkey, data) {
-  const privkey = secretKey instanceof Uint8Array ? secretKey : (0, import_utils8.hexToBytes)(secretKey);
+  const privkey = secretKey instanceof Uint8Array ? secretKey : (0, import_utils9.hexToBytes)(secretKey);
   let [ctb64, ivb64] = data.split("?iv=");
-  let key = import_secp256k12.secp256k1.getSharedSecret(privkey, (0, import_utils8.hexToBytes)("02" + pubkey));
+  let key = import_secp256k12.secp256k1.getSharedSecret(privkey, (0, import_utils9.hexToBytes)("02" + pubkey));
   let normalizedKey = getNormalizedX(key);
   let iv = import_base2.base64.decode(ivb64);
   let ciphertext = import_base2.base64.decode(ctb64);
@@ -1820,6 +2142,7 @@ var nip10_exports = {};
 __export(nip10_exports, {
   parse: () => parse
 });
+var HEX64 = /^[0-9a-fA-F]{64}$/;
 function parse(event) {
   const result = {
     reply: void 0,
@@ -1832,12 +2155,12 @@ function parse(event) {
   let maybeRoot;
   for (let i2 = event.tags.length - 1; i2 >= 0; i2--) {
     const tag = event.tags[i2];
-    if (tag[0] === "e" && tag[1]) {
+    if (tag[0] === "e" && tag[1] && HEX64.test(tag[1])) {
       const [_, eTagEventId, eTagRelayUrl, eTagMarker, eTagAuthor] = tag;
       const eventPointer = {
         id: eTagEventId,
         relays: eTagRelayUrl ? [eTagRelayUrl] : [],
-        author: eTagAuthor
+        author: eTagAuthor && HEX64.test(eTagAuthor) ? eTagAuthor : void 0
       };
       if (eTagMarker === "root") {
         result.root = eventPointer;
@@ -1859,14 +2182,14 @@ function parse(event) {
       result.mentions.push(eventPointer);
       continue;
     }
-    if (tag[0] === "q" && tag[1]) {
+    if (tag[0] === "q" && tag[1] && HEX64.test(tag[1])) {
       const [_, eTagEventId, eTagRelayUrl] = tag;
       result.quotes.push({
         id: eTagEventId,
         relays: eTagRelayUrl ? [eTagRelayUrl] : []
       });
     }
-    if (tag[0] === "p" && tag[1]) {
+    if (tag[0] === "p" && tag[1] && HEX64.test(tag[1])) {
       result.profiles.push({
         pubkey: tag[1],
         relays: tag[2] ? [tag[2]] : []
@@ -1946,8 +2269,8 @@ __export(nip13_exports, {
   getPow: () => getPow,
   minePow: () => minePow
 });
-var import_utils10 = require("@noble/hashes/utils.js");
-var import_sha22 = require("@noble/hashes/sha2.js");
+var import_utils11 = require("@noble/hashes/utils.js");
+var import_sha23 = require("@noble/hashes/sha2.js");
 function getPow(hex) {
   let count = 0;
   for (let i2 = 0; i2 < 64; i2 += 8) {
@@ -1986,11 +2309,11 @@ function minePow(unsigned, difficulty) {
       event.created_at = now2;
     }
     tag[1] = (++count).toString();
-    const hash = (0, import_sha22.sha256)(
+    const hash = (0, import_sha23.sha256)(
       utf8Encoder.encode(JSON.stringify([0, event.pubkey, event.created_at, event.kind, event.tags, event.content]))
     );
     if (getPowFromBytes(hash) >= difficulty) {
-      event.id = (0, import_utils10.bytesToHex)(hash);
+      event.id = (0, import_utils11.bytesToHex)(hash);
       break;
     }
   }
@@ -2027,22 +2350,22 @@ __export(nip44_exports, {
   v2: () => v2
 });
 var import_chacha = require("@noble/ciphers/chacha.js");
-var import_utils12 = require("@noble/ciphers/utils.js");
+var import_utils13 = require("@noble/ciphers/utils.js");
 var import_secp256k13 = require("@noble/curves/secp256k1.js");
 var import_hkdf = require("@noble/hashes/hkdf.js");
 var import_hmac = require("@noble/hashes/hmac.js");
-var import_sha23 = require("@noble/hashes/sha2.js");
-var import_utils13 = require("@noble/hashes/utils.js");
+var import_sha24 = require("@noble/hashes/sha2.js");
+var import_utils14 = require("@noble/hashes/utils.js");
 var import_base3 = require("@scure/base");
 var minPlaintextSize = 1;
 var maxPlaintextSize = 4294967295;
 var extendedPrefixThreshold = 65536;
 function getConversationKey(privkeyA, pubkeyB) {
-  const sharedX = import_secp256k13.secp256k1.getSharedSecret(privkeyA, (0, import_utils13.hexToBytes)("02" + pubkeyB)).subarray(1, 33);
-  return (0, import_hkdf.extract)(import_sha23.sha256, sharedX, utf8Encoder.encode("nip44-v2"));
+  const sharedX = import_secp256k13.secp256k1.getSharedSecret(privkeyA, (0, import_utils14.hexToBytes)("02" + pubkeyB)).subarray(1, 33);
+  return (0, import_hkdf.extract)(import_sha24.sha256, sharedX, utf8Encoder.encode("nip44-v2"));
 }
 function getMessageKeys(conversationKey, nonce) {
-  const keys = (0, import_hkdf.expand)(import_sha23.sha256, conversationKey, nonce, 76);
+  const keys = (0, import_hkdf.expand)(import_sha24.sha256, conversationKey, nonce, 76);
   return {
     chacha_key: keys.subarray(0, 32),
     chacha_nonce: keys.subarray(32, 44),
@@ -2077,9 +2400,9 @@ function pad(plaintext) {
   const unpaddedLen = unpadded.length;
   if (unpaddedLen < minPlaintextSize || unpaddedLen > maxPlaintextSize)
     throw new Error("invalid plaintext size: must be between 1 and 4294967295 bytes");
-  const prefix = unpaddedLen >= extendedPrefixThreshold ? (0, import_utils13.concatBytes)(new Uint8Array([0, 0]), writeU32BE(unpaddedLen)) : writeU16BE(unpaddedLen);
+  const prefix = unpaddedLen >= extendedPrefixThreshold ? (0, import_utils14.concatBytes)(new Uint8Array([0, 0]), writeU32BE(unpaddedLen)) : writeU16BE(unpaddedLen);
   const suffix = new Uint8Array(calcPaddedLen(unpaddedLen) - unpaddedLen);
-  return (0, import_utils13.concatBytes)(prefix, unpadded, suffix);
+  return (0, import_utils14.concatBytes)(prefix, unpadded, suffix);
 }
 function unpad(padded) {
   const dv = new DataView(padded.buffer, padded.byteOffset, padded.byteLength);
@@ -2103,8 +2426,8 @@ function unpad(padded) {
 function hmacAad(key, message, aad) {
   if (aad.length !== 32)
     throw new Error("AAD associated data must be 32 bytes");
-  const combined = (0, import_utils13.concatBytes)(aad, message);
-  return (0, import_hmac.hmac)(import_sha23.sha256, key, combined);
+  const combined = (0, import_utils14.concatBytes)(aad, message);
+  return (0, import_hmac.hmac)(import_sha24.sha256, key, combined);
 }
 function decodePayload(payload) {
   if (typeof payload !== "string")
@@ -2132,18 +2455,18 @@ function decodePayload(payload) {
     mac: data.subarray(-32)
   };
 }
-function encrypt2(plaintext, conversationKey, nonce = (0, import_utils13.randomBytes)(32)) {
+function encrypt2(plaintext, conversationKey, nonce = (0, import_utils14.randomBytes)(32)) {
   const { chacha_key, chacha_nonce, hmac_key } = getMessageKeys(conversationKey, nonce);
   const padded = pad(plaintext);
   const ciphertext = (0, import_chacha.chacha20)(chacha_key, chacha_nonce, padded);
   const mac = hmacAad(hmac_key, ciphertext, nonce);
-  return import_base3.base64.encode((0, import_utils13.concatBytes)(new Uint8Array([2]), nonce, ciphertext, mac));
+  return import_base3.base64.encode((0, import_utils14.concatBytes)(new Uint8Array([2]), nonce, ciphertext, mac));
 }
 function decrypt2(payload, conversationKey) {
   const { nonce, ciphertext, mac } = decodePayload(payload);
   const { chacha_key, chacha_nonce, hmac_key } = getMessageKeys(conversationKey, nonce);
   const calculatedMac = hmacAad(hmac_key, ciphertext, nonce);
-  if (!(0, import_utils12.equalBytes)(calculatedMac, mac))
+  if (!(0, import_utils13.equalBytes)(calculatedMac, mac))
     throw new Error("invalid MAC");
   const padded = (0, import_chacha.chacha20)(chacha_key, chacha_nonce, ciphertext);
   return unpad(padded);
@@ -2363,6 +2686,7 @@ var nip22_exports = {};
 __export(nip22_exports, {
   parse: () => parse3
 });
+var HEX642 = /^[0-9a-fA-F]{64}$/;
 function parseKind(kind) {
   if (!kind)
     return void 0;
@@ -2376,9 +2700,12 @@ function parseAddressPointer(value, relayUrl) {
   const kind = parseInt(value.slice(0, idx), 10);
   if (Number.isNaN(kind))
     return void 0;
+  const pubkey = value.slice(idx + 1, idx2);
+  if (!HEX642.test(pubkey))
+    return void 0;
   return {
     kind,
-    pubkey: value.slice(idx + 1, idx2),
+    pubkey,
     identifier: value.slice(idx2 + 1),
     relays: relayUrl ? [relayUrl] : []
   };
@@ -2387,12 +2714,12 @@ function parsePointer(tag) {
   switch (tag[0]) {
     case "E":
     case "e":
-      if (!tag[1])
+      if (!tag[1] || !HEX642.test(tag[1]))
         return void 0;
       return {
         id: tag[1],
         relays: tag[2] ? [tag[2]] : [],
-        author: tag[3]
+        author: tag[3] && HEX642.test(tag[3]) ? tag[3] : void 0
       };
     case "A":
     case "a":
@@ -2415,10 +2742,12 @@ function parseQuote(tag) {
   if (tag[1].includes(":")) {
     return parseAddressPointer(tag[1], tag[2]);
   }
+  if (!HEX642.test(tag[1]))
+    return void 0;
   return {
     id: tag[1],
     relays: tag[2] ? [tag[2]] : [],
-    author: tag[3]
+    author: tag[3] && HEX642.test(tag[3]) ? tag[3] : void 0
   };
 }
 function choosePointer(candidates) {
@@ -2478,7 +2807,7 @@ function parse3(event) {
         result.quotes.push(pointer);
       continue;
     }
-    if ((tag[0] === "P" || tag[0] === "p") && tag[1]) {
+    if ((tag[0] === "P" || tag[0] === "p") && tag[1] && HEX642.test(tag[1])) {
       result.profiles.push({
         pubkey: tag[1],
         relays: tag[2] ? [tag[2]] : []
@@ -3057,8 +3386,8 @@ __export(nip77_exports, {
   NegentropyStorageVector: () => NegentropyStorageVector,
   NegentropySync: () => NegentropySync
 });
-var import_utils16 = require("@noble/hashes/utils.js");
-var import_sha24 = require("@noble/hashes/sha2.js");
+var import_utils17 = require("@noble/hashes/utils.js");
+var import_sha25 = require("@noble/hashes/sha2.js");
 var PROTOCOL_VERSION = 97;
 var ID_SIZE = 32;
 var FINGERPRINT_SIZE = 16;
@@ -3189,7 +3518,7 @@ var Accumulator = class {
     let input = new WrappedBuffer();
     input.extend(this.buf);
     input.extend(encodeVarInt(n));
-    let hash = (0, import_sha24.sha256)(input.unwrap());
+    let hash = (0, import_sha25.sha256)(input.unwrap());
     return hash.subarray(0, FINGERPRINT_SIZE);
   }
 };
@@ -3203,7 +3532,7 @@ var NegentropyStorageVector = class {
   insert(timestamp, id) {
     if (this.sealed)
       throw Error("already sealed");
-    const idb = (0, import_utils16.hexToBytes)(id);
+    const idb = (0, import_utils17.hexToBytes)(id);
     if (idb.byteLength !== ID_SIZE)
       throw Error("bad id size for added item");
     this.items.push({ timestamp, id: idb });
@@ -3297,10 +3626,10 @@ var Negentropy = class {
     let output = new WrappedBuffer();
     output.extend(new Uint8Array([PROTOCOL_VERSION]));
     this.splitRange(0, this.storage.size(), this._bound(Number.MAX_VALUE), output);
-    return (0, import_utils16.bytesToHex)(output.unwrap());
+    return (0, import_utils17.bytesToHex)(output.unwrap());
   }
   reconcile(queryMsg, onhave, onneed) {
-    const query = new WrappedBuffer((0, import_utils16.hexToBytes)(queryMsg));
+    const query = new WrappedBuffer((0, import_utils17.hexToBytes)(queryMsg));
     this.lastTimestampIn = this.lastTimestampOut = 0;
     let fullOutput = new WrappedBuffer();
     fullOutput.extend(new Uint8Array([PROTOCOL_VERSION]));
@@ -3343,22 +3672,22 @@ var Negentropy = class {
         let theirElems = {};
         for (let i2 = 0; i2 < numIds; i2++) {
           let e = getBytes(query, ID_SIZE);
-          theirElems[(0, import_utils16.bytesToHex)(e)] = e;
+          theirElems[(0, import_utils17.bytesToHex)(e)] = e;
         }
         skip = true;
         this.storage.iterate(lower, upper, (item) => {
           let k = item.id;
-          const id = (0, import_utils16.bytesToHex)(k);
+          const id = (0, import_utils17.bytesToHex)(k);
           if (!theirElems[id]) {
             onhave?.(id);
           } else {
-            delete theirElems[(0, import_utils16.bytesToHex)(k)];
+            delete theirElems[(0, import_utils17.bytesToHex)(k)];
           }
           return true;
         });
         if (onneed) {
           for (let v of Object.values(theirElems)) {
-            onneed((0, import_utils16.bytesToHex)(v));
+            onneed((0, import_utils17.bytesToHex)(v));
           }
         }
       } else {
@@ -3376,7 +3705,7 @@ var Negentropy = class {
       prevIndex = upper;
       prevBound = currBound;
     }
-    return fullOutput.length === 1 ? null : (0, import_utils16.bytesToHex)(fullOutput.unwrap());
+    return fullOutput.length === 1 ? null : (0, import_utils17.bytesToHex)(fullOutput.unwrap());
   }
   splitRange(lower, upper, upperBound, o) {
     let numElems = upper - lower;
@@ -3564,8 +3893,8 @@ __export(nip98_exports, {
   validateEventUrlTag: () => validateEventUrlTag,
   validateToken: () => validateToken
 });
-var import_sha25 = require("@noble/hashes/sha2.js");
-var import_utils17 = require("@noble/hashes/utils.js");
+var import_sha26 = require("@noble/hashes/sha2.js");
+var import_utils18 = require("@noble/hashes/utils.js");
 var import_base5 = require("@scure/base");
 var _authorizationScheme = "Nostr ";
 async function getToken(loginUrl, httpMethod, sign, includeAuthorizationScheme = false, payload) {
@@ -3630,8 +3959,8 @@ function validateEventMethodTag(event, method) {
   return methodTag.length > 0 && methodTag[1].toLowerCase() === method.toLowerCase();
 }
 function hashPayload(payload) {
-  const hash = (0, import_sha25.sha256)(utf8Encoder.encode(JSON.stringify(payload)));
-  return (0, import_utils17.bytesToHex)(hash);
+  const hash = (0, import_sha26.sha256)(utf8Encoder.encode(JSON.stringify(payload)));
+  return (0, import_utils18.bytesToHex)(hash);
 }
 function validateEventPayloadTag(event, payload) {
   const payloadTag = event.tags.find((t) => t[0] === "payload");