@openclaw/nostr 2026.7.2-beta.7 → 2026.7.33

package/dist/{config-schema-CelPzg1N.js → .setup/config-schema-DIiXiBKr.mjs}

@@ -1,6 +1,6 @@
 import { collectStatusIssuesFromLastError, createDefaultChannelRuntimeState } from "openclaw/plugin-sdk/status-helpers";
 import { DEFAULT_ACCOUNT_ID, buildChannelConfigSchema, formatPairingApproveHint } from "openclaw/plugin-sdk/channel-plugin-common";
-import { AllowFromListSchema, DmPolicySchema, MarkdownConfigSchema } from "openclaw/plugin-sdk/channel-config-schema";
+import { AllowFromListSchema, DmPolicySchema, MarkdownConfigSchema } from "openclaw/plugin-sdk/channel-config-primitives";
 import { buildSecretInputSchema } from "openclaw/plugin-sdk/secret-input";
 import { z } from "zod";
 //#region extensions/nostr/src/config-schema.ts

package/dist/.setup/inbound-direct-dm-runtime-EdLLVtkh.mjs

@@ -0,0 +1,2 @@
+import { dispatchInboundDirectDmWithRuntime } from "openclaw/plugin-sdk/channel-inbound";
+export { dispatchInboundDirectDmWithRuntime };

package/dist/{setup-adapter-BjKmSwdW.js → .setup/setup-adapter-DEU3o8MF.mjs}

@@ -1,7 +1,6 @@
 import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/routing";
 import { patchTopLevelChannelConfigSection, splitSetupEntries } from "openclaw/plugin-sdk/setup";
-import { defineChannelSetupContract } from "openclaw/plugin-sdk/channel-setup";
 //#region extensions/nostr/src/default-relays.ts
 const DEFAULT_RELAYS = ["wss://relay.damus.io", "wss://nos.lol"];
 //#endregion
@@ -66,34 +65,5 @@ function createNostrSetupAdapter(params) {
 		}
 	};
 }
-function createNostrSetupContract(adapter) {
-	return defineChannelSetupContract({
-		fields: {
-			privateKey: {
-				kind: "string",
-				sensitive: true,
-				cli: {
-					flags: "--private-key <key>",
-					description: "Nostr private key"
-				}
-			},
-			relayUrls: {
-				kind: "string",
-				cli: {
-					flags: "--relay-urls <urls>",
-					description: "Nostr relay URLs"
-				}
-			},
-			useEnv: {
-				kind: "boolean",
-				cli: {
-					flags: "--use-env",
-					description: "Use NOSTR_PRIVATE_KEY"
-				}
-			}
-		},
-		legacyAdapter: adapter
-	});
-}
 //#endregion
-export { DEFAULT_RELAYS as a, parseRelayUrls as i, createNostrSetupAdapter as n, createNostrSetupContract as r, buildNostrSetupPatch as t };
+export { DEFAULT_RELAYS as i, createNostrSetupAdapter as n, parseRelayUrls as r, buildNostrSetupPatch as t };

package/dist/.setup/setup-plugin-api-DzlCumkz.mjs

@@ -0,0 +1,2 @@
+import { t as nostrSetupPlugin } from "./setup-plugin-api-csfJrRxD.mjs";
+export { nostrSetupPlugin };

package/dist/.setup/setup-plugin-api-csfJrRxD.mjs

@@ -0,0 +1,111 @@
+import { i as buildChannelConfigSchema, t as NostrConfigSchema } from "./config-schema-DIiXiBKr.mjs";
+import { i as DEFAULT_RELAYS, n as createNostrSetupAdapter } from "./setup-adapter-DEU3o8MF.mjs";
+import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
+import { DEFAULT_ACCOUNT_ID, createDelegatedSetupWizardProxy, createSetupTranslator, createStandardChannelSetupStatus } from "openclaw/plugin-sdk/setup-runtime";
+//#region extensions/nostr/src/channel.setup.ts
+const t = createSetupTranslator();
+const channel = "nostr";
+function getNostrConfig(cfg) {
+	return cfg.channels?.nostr;
+}
+function listSetupNostrAccountIds(cfg) {
+	const nostrCfg = getNostrConfig(cfg);
+	if (!(typeof nostrCfg?.privateKey === "string" ? nostrCfg.privateKey.trim() : "")) return [];
+	return [resolveDefaultSetupNostrAccountId(cfg)];
+}
+function resolveDefaultSetupNostrAccountId(cfg) {
+	const configured = getNostrConfig(cfg)?.defaultAccount;
+	return typeof configured === "string" && configured.trim() ? configured.trim() : DEFAULT_ACCOUNT_ID;
+}
+function resolveSetupNostrAccount(params) {
+	const nostrCfg = getNostrConfig(params.cfg);
+	const accountId = params.accountId?.trim() || resolveDefaultSetupNostrAccountId(params.cfg);
+	const privateKey = typeof nostrCfg?.privateKey === "string" ? nostrCfg.privateKey.trim() : "";
+	const configured = Boolean(privateKey);
+	return {
+		accountId,
+		name: typeof nostrCfg?.name === "string" ? nostrCfg.name : void 0,
+		enabled: nostrCfg?.enabled !== false,
+		configured,
+		privateKey,
+		publicKey: "",
+		relays: nostrCfg?.relays ?? DEFAULT_RELAYS,
+		profile: nostrCfg?.profile,
+		config: {
+			enabled: nostrCfg?.enabled,
+			name: nostrCfg?.name,
+			privateKey: nostrCfg?.privateKey,
+			relays: nostrCfg?.relays,
+			dmPolicy: nostrCfg?.dmPolicy,
+			allowFrom: nostrCfg?.allowFrom,
+			profile: nostrCfg?.profile
+		}
+	};
+}
+function looksLikeNostrPrivateKey(privateKey) {
+	return privateKey.startsWith("nsec1") || /^[0-9a-fA-F]{64}$/.test(privateKey);
+}
+const nostrSetupAdapter = createNostrSetupAdapter({
+	resolveAccountId: (cfg, accountId) => accountId?.trim() || resolveDefaultSetupNostrAccountId(cfg),
+	validatePrivateKey: looksLikeNostrPrivateKey
+});
+const nostrSetupWizard = createDelegatedSetupWizardProxy({
+	channel,
+	loadWizard: async () => (await import("./setup-surface-DWa6-9ku.mjs").then((n) => n.r)).nostrSetupWizard,
+	status: { ...createStandardChannelSetupStatus({
+		channelLabel: "Nostr",
+		configuredLabel: t("wizard.channels.statusConfigured"),
+		unconfiguredLabel: t("wizard.channels.statusNeedsPrivateKey"),
+		configuredHint: t("wizard.channels.statusConfigured"),
+		unconfiguredHint: t("wizard.channels.statusNeedsPrivateKey"),
+		configuredScore: 1,
+		unconfiguredScore: 0,
+		includeStatusLine: true,
+		resolveConfigured: ({ cfg, accountId }) => resolveSetupNostrAccount({
+			cfg,
+			accountId
+		}).configured,
+		resolveExtraStatusLines: ({ cfg }) => {
+			return [`Relays: ${resolveSetupNostrAccount({ cfg }).relays.length || DEFAULT_RELAYS.length}`];
+		}
+	}) },
+	resolveShouldPromptAccountIds: () => false,
+	delegatePrepare: true,
+	delegateFinalize: true
+});
+const nostrSetupPlugin = {
+	id: channel,
+	meta: {
+		id: channel,
+		label: "Nostr",
+		selectionLabel: "Nostr",
+		docsPath: "/channels/nostr",
+		docsLabel: "nostr",
+		blurb: "Decentralized DMs via Nostr relays (NIP-04)",
+		order: 100
+	},
+	capabilities: {
+		chatTypes: ["direct"],
+		media: false
+	},
+	reload: { configPrefixes: ["channels.nostr"] },
+	configSchema: buildChannelConfigSchema(NostrConfigSchema),
+	setup: nostrSetupAdapter,
+	setupWizard: nostrSetupWizard,
+	config: {
+		listAccountIds: listSetupNostrAccountIds,
+		resolveAccount: (cfg, accountId) => resolveSetupNostrAccount({
+			cfg,
+			accountId
+		}),
+		defaultAccountId: resolveDefaultSetupNostrAccountId,
+		isConfigured: (account) => account.configured,
+		describeAccount: (account) => describeAccountSnapshot({
+			account,
+			configured: account.configured,
+			extra: { publicKey: account.publicKey }
+		})
+	}
+};
+//#endregion
+export { nostrSetupPlugin as t };

package/dist/{setup-surface-BJCFpe02.js → .setup/setup-surface-DWa6-9ku.mjs}

@@ -1,11 +1,11 @@
-import { a as DEFAULT_RELAYS, i as parseRelayUrls, n as createNostrSetupAdapter, r as createNostrSetupContract, t as buildNostrSetupPatch } from "./setup-adapter-BjKmSwdW.js";
-import { createAccountListHelpers } from "openclaw/plugin-sdk/account-helpers";
+import { i as DEFAULT_RELAYS, n as createNostrSetupAdapter, r as parseRelayUrls, t as buildNostrSetupPatch } from "./setup-adapter-DEU3o8MF.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { hasConfiguredSecretInput, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { getPublicKey, nip19 } from "nostr-tools";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId, normalizeOptionalAccountId } from "openclaw/plugin-sdk/account-id";
+import { listCombinedAccountIds, resolveListedDefaultAccountId } from "openclaw/plugin-sdk/account-resolution";
 import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1 } from "openclaw/plugin-sdk/routing";
-import { createSetupTranslator, createStandardChannelSetupStatus, createTopLevelChannelDmPolicy, createTopLevelChannelParsedAllowFromPrompt, defineTokenCredential, formatDocsLink, mergeAllowFromEntries, parseSetupEntriesWithParser, patchTopLevelChannelConfigSection, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
+import { createSetupTranslator, createStandardChannelSetupStatus, createTopLevelChannelDmPolicy, createTopLevelChannelParsedAllowFromPrompt, formatDocsLink, mergeAllowFromEntries, parseSetupEntriesWithParser, patchTopLevelChannelConfigSection } from "openclaw/plugin-sdk/setup";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
@@ -24,7 +24,7 @@ var __exportAll = (all, no_symbols) => {
 */
 function validatePrivateKey(key) {
 	const trimmed = key.trim();
-	if (trimmed.startsWith("nsec1") || trimmed.startsWith("NSEC1")) {
+	if (trimmed.startsWith("nsec1")) {
 		const decoded = nip19.decode(trimmed);
 		if (decoded.type !== "nsec") throw new Error("Invalid nsec key: wrong type");
 		return decoded.data;
@@ -38,14 +38,15 @@ function validatePrivateKey(key) {
 * Get public key from private key (hex or nsec format)
 */
 function getPublicKeyFromPrivate(privateKey) {
-	return getPublicKey(validatePrivateKey(privateKey));
+	const sk = validatePrivateKey(privateKey);
+	return getPublicKey(sk);
 }
 /**
 * Normalize a pubkey to hex format (accepts npub or hex)
 */
 function normalizePubkey(input) {
 	const trimmed = input.trim();
-	if (trimmed.startsWith("npub1") || trimmed.startsWith("NPUB1")) {
+	if (trimmed.startsWith("npub1")) {
 		const decoded = nip19.decode(trimmed);
 		if (decoded.type !== "npub" || typeof decoded.data !== "string") throw new Error("Invalid npub key");
 		return decoded.data.toLowerCase();
@@ -55,13 +56,30 @@ function normalizePubkey(input) {
 }
 //#endregion
 //#region extensions/nostr/src/types.ts
-const { listAccountIds: listNostrAccountIds, resolveDefaultAccountId: resolveDefaultNostrAccountId } = createAccountListHelpers("nostr", {
-	fallbackAccountIdWhenEmpty: false,
-	resolveImplicitAccountId: (cfg) => {
-		const account = cfg.channels?.nostr;
-		return normalizeSecretInputString(account?.privateKey) ? normalizeOptionalAccountId(account?.defaultAccount) ?? DEFAULT_ACCOUNT_ID : void 0;
-	}
-});
+function resolveConfiguredDefaultNostrAccountId(cfg) {
+	const nostrCfg = cfg.channels?.nostr;
+	return normalizeOptionalAccountId(nostrCfg?.defaultAccount);
+}
+/**
+* List all configured Nostr account IDs
+*/
+function listNostrAccountIds(cfg) {
+	const nostrCfg = cfg.channels?.nostr;
+	const privateKey = normalizeSecretInputString(nostrCfg?.privateKey);
+	return listCombinedAccountIds({
+		configuredAccountIds: [],
+		implicitAccountId: privateKey ? resolveConfiguredDefaultNostrAccountId(cfg) ?? DEFAULT_ACCOUNT_ID : void 0
+	});
+}
+/**
+* Get the default account ID
+*/
+function resolveDefaultNostrAccountId(cfg) {
+	return resolveListedDefaultAccountId({
+		accountIds: listNostrAccountIds(cfg),
+		configuredDefaultAccountId: resolveConfiguredDefaultNostrAccountId(cfg)
+	});
+}
 /**
 * Resolve a Nostr account from config
 */
@@ -99,7 +117,6 @@ function resolveNostrAccount(opts) {
 //#region extensions/nostr/src/setup-surface.ts
 var setup_surface_exports = /* @__PURE__ */ __exportAll({
 	nostrSetupAdapter: () => nostrSetupAdapter,
-	nostrSetupContract: () => nostrSetupContract,
 	nostrSetupWizard: () => nostrSetupWizard
 });
 const t = createSetupTranslator();
@@ -129,22 +146,23 @@ function parseNostrAllowFrom(raw) {
 		}
 	});
 }
+const promptNostrAllowFrom = createTopLevelChannelParsedAllowFromPrompt({
+	channel,
+	defaultAccountId: resolveDefaultNostrAccountId,
+	noteTitle: t("wizard.nostr.allowlistTitle"),
+	noteLines: NOSTR_ALLOW_FROM_HELP_LINES,
+	message: t("wizard.nostr.allowFromPrompt"),
+	placeholder: "npub1..., 0123abcd...",
+	parseEntries: parseNostrAllowFrom,
+	mergeEntries: ({ existing, parsed }) => mergeAllowFromEntries(existing, parsed)
+});
 const nostrDmPolicy = createTopLevelChannelDmPolicy({
 	label: "Nostr",
 	channel,
 	policyKey: "channels.nostr.dmPolicy",
 	allowFromKey: "channels.nostr.allowFrom",
 	getCurrent: (cfg) => cfg.channels?.nostr?.dmPolicy ?? "pairing",
-	promptAllowFrom: createTopLevelChannelParsedAllowFromPrompt({
-		channel,
-		defaultAccountId: resolveDefaultNostrAccountId,
-		noteTitle: t("wizard.nostr.allowlistTitle"),
-		noteLines: NOSTR_ALLOW_FROM_HELP_LINES,
-		message: t("wizard.nostr.allowFromPrompt"),
-		placeholder: "npub1..., 0123abcd...",
-		parseEntries: parseNostrAllowFrom,
-		mergeEntries: ({ existing, parsed }) => mergeAllowFromEntries(existing, parsed)
-	})
+	promptAllowFrom: promptNostrAllowFrom
 });
 const nostrSetupAdapter = createNostrSetupAdapter({
 	resolveAccountId: (cfg, accountId) => accountId?.trim() || resolveDefaultNostrAccountId(cfg),
@@ -157,7 +175,6 @@ const nostrSetupAdapter = createNostrSetupAdapter({
 		}
 	}
 });
-const nostrSetupContract = createNostrSetupContract(nostrSetupAdapter);
 const nostrSetupWizard = {
 	channel,
 	resolveAccountIdForConfigure: ({ accountOverride, defaultAccountId }) => accountOverride?.trim() || defaultAccountId,
@@ -195,9 +212,8 @@ const nostrSetupWizard = {
 			patch: buildNostrSetupPatch(accountId, {})
 		})
 	},
-	credentials: [defineTokenCredential({
+	credentials: [{
 		inputKey: "privateKey",
-		configKey: "privateKey",
 		providerHint: channel,
 		credentialLabel: "private key",
 		preferredEnvVar: "NOSTR_PRIVATE_KEY",
@@ -207,23 +223,32 @@ const nostrSetupWizard = {
 		keepPrompt: t("wizard.nostr.privateKeyKeep"),
 		inputPrompt: t("wizard.nostr.privateKeyInput"),
 		allowEnv: ({ accountId }) => accountId === DEFAULT_ACCOUNT_ID$1,
-		resolveAccount: ({ cfg, accountId }) => resolveNostrAccount({
+		inspect: ({ cfg, accountId }) => {
+			const account = resolveNostrAccount({
+				cfg,
+				accountId
+			});
+			return {
+				accountConfigured: account.configured,
+				hasConfiguredValue: hasConfiguredSecretInput(account.config.privateKey),
+				resolvedValue: normalizeSecretInputString(account.config.privateKey),
+				envValue: process.env.NOSTR_PRIVATE_KEY?.trim()
+			};
+		},
+		applyUseEnv: async ({ cfg, accountId }) => patchTopLevelChannelConfigSection({
 			cfg,
-			accountId
+			channel,
+			enabled: true,
+			clearFields: ["privateKey"],
+			patch: buildNostrSetupPatch(accountId, {})
 		}),
-		accountConfigured: (account) => account.configured,
-		resolvedValue: (account) => normalizeSecretInputString(account.config.privateKey),
-		envValue: () => process.env.NOSTR_PRIVATE_KEY?.trim(),
-		patchAccount: ({ cfg, accountId, patch, clearFields }) => patchTopLevelChannelConfigSection({
+		applySet: async ({ cfg, accountId, resolvedValue }) => patchTopLevelChannelConfigSection({
 			cfg,
 			channel,
 			enabled: true,
-			clearFields,
-			patch: buildNostrSetupPatch(accountId, patch)
-		}),
-		useEnv: { clearFields: ["privateKey"] },
-		set: { value: "resolved" }
-	})],
+			patch: buildNostrSetupPatch(accountId, { privateKey: resolvedValue })
+		})
+	}],
 	textInputs: [{
 		inputKey: "relayUrls",
 		message: t("wizard.nostr.relayUrlsPrompt"),
@@ -254,7 +279,11 @@ const nostrSetupWizard = {
 		}
 	}],
 	dmPolicy: nostrDmPolicy,
-	disable: (cfg) => setSetupChannelEnabled(cfg, channel, false)
+	disable: (cfg) => patchTopLevelChannelConfigSection({
+		cfg,
+		channel,
+		patch: { enabled: false }
+	})
 };
 //#endregion
-export { listNostrAccountIds as a, normalizePubkey as c, setup_surface_exports as i, validatePrivateKey as l, nostrSetupContract as n, resolveDefaultNostrAccountId as o, nostrSetupWizard as r, resolveNostrAccount as s, nostrSetupAdapter as t };
+export { resolveDefaultNostrAccountId as a, validatePrivateKey as c, listNostrAccountIds as i, nostrSetupWizard as n, resolveNostrAccount as o, setup_surface_exports as r, normalizePubkey as s, nostrSetupAdapter as t };

package/dist/api.js

@@ -1,15 +1,15 @@
-import { s as resolveNostrAccount } from "./setup-surface-BJCFpe02.js";
+import { o as resolveNostrAccount } from "./.setup/setup-surface-DWa6-9ku.mjs";
 import { getPluginRuntimeGatewayRequestScope } from "./runtime-api.js";
-import { n as NostrProfileSchema } from "./config-schema-CelPzg1N.js";
-import { a as getNostrRuntime, i as contentToProfile, n as nostrPlugin, o as setNostrRuntime, r as publishNostrProfile, t as getNostrProfileState } from "./channel-O6-jXoT5.js";
+import { n as NostrProfileSchema } from "./.setup/config-schema-DIiXiBKr.mjs";
+import { a as setNostrRuntime, i as getNostrRuntime, n as nostrPlugin, o as contentToProfile, r as publishNostrProfile, t as getNostrProfileState } from "./.setup/channel-B4SX7Iq6.mjs";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, readStringValue } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { z } from "zod";
-import { SimplePool } from "nostr-tools";
+import { SimplePool, verifyEvent } from "nostr-tools";
+import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { KeyedAsyncQueue } from "openclaw/plugin-sdk/keyed-async-queue";
-import { isBlockedHostnameOrIp, isLoopbackHost } from "openclaw/plugin-sdk/ssrf-runtime";
 import { readJsonBodyWithLimit, requestBodyErrorToText } from "openclaw/plugin-sdk/webhook-request-guards";
 import { createFixedWindowRateLimiter } from "openclaw/plugin-sdk/webhook-ingress";
-import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
+import { isBlockedHostnameOrIp } from "openclaw/plugin-sdk/ssrf-runtime";
 //#region extensions/nostr/src/nostr-profile-url-safety.ts
 function validateUrlSafety(urlStr) {
 	try {
@@ -18,7 +18,8 @@ function validateUrlSafety(urlStr) {
 			ok: false,
 			error: "URL must use https:// protocol"
 		};
-		if (isBlockedHostnameOrIp(url.hostname.trim().toLowerCase())) return {
+		const hostname = url.hostname.trim().toLowerCase();
+		if (isBlockedHostnameOrIp(hostname)) return {
 			ok: false,
 			error: "URL must not point to private/internal addresses"
 		};
@@ -79,49 +80,72 @@ async function importProfileFromRelays(opts) {
 		relaysQueried: []
 	};
 	const pool = new SimplePool();
-	const relaysQueried = [...relays];
-	let deadlineTimer;
-	const deadline = new Promise((resolve) => {
-		deadlineTimer = setTimeout(resolve, timeoutMs);
-		deadlineTimer.unref?.();
-	});
-	const subscriptions = [];
+	const relaysQueried = [];
+	const timers = [];
+	const scheduleTimeout = (callback) => {
+		const timer = setTimeout(callback, timeoutMs);
+		timer.unref?.();
+		timers.push(timer);
+		return timer;
+	};
 	try {
 		const events = [];
-		await Promise.race([Promise.all(relays.map((relay) => new Promise((resolve) => {
-			const subscription = pool.subscribeMany([relay], {
-				kinds: [0],
-				authors: [pubkey],
-				limit: 1
-			}, {
-				onevent(event) {
-					events.push({
-						event,
-						relay
-					});
-				},
-				oneose() {
-					resolve();
-				},
-				onclose() {
-					resolve();
-				}
-			});
-			subscriptions.push(subscription);
-		}))), deadline]);
+		const timeoutPromise = new Promise((resolve) => {
+			scheduleTimeout(resolve);
+		});
+		const subscriptionPromise = new Promise((resolve) => {
+			let completed = 0;
+			for (const relay of relays) {
+				relaysQueried.push(relay);
+				const profileFilter = {
+					kinds: [0],
+					authors: [pubkey],
+					limit: 1
+				};
+				const sub = pool.subscribeMany([relay], profileFilter, {
+					onevent(event) {
+						events.push({
+							event,
+							relay
+						});
+					},
+					oneose() {
+						completed++;
+						if (completed >= relays.length) resolve();
+					},
+					onclose() {
+						completed++;
+						if (completed >= relays.length) resolve();
+					}
+				});
+				scheduleTimeout(() => {
+					sub.close();
+				});
+			}
+		});
+		await Promise.race([subscriptionPromise, timeoutPromise]);
+		for (const timer of timers.splice(0)) clearTimeout(timer);
 		if (events.length === 0) return {
 			ok: false,
 			error: "No profile found on any relay",
 			relaysQueried
 		};
-		const bestEvent = events.reduce((current, candidate) => {
-			const candidateIsNewer = candidate.event.created_at > current.event.created_at;
-			const candidateWinsTie = candidate.event.created_at === current.event.created_at && candidate.event.id < current.event.id;
-			return candidateIsNewer || candidateWinsTie ? candidate : current;
-		});
-		let parsedContent;
+		let bestEvent = null;
+		for (const item of events) if (!bestEvent || item.event.created_at > bestEvent.event.created_at) bestEvent = item;
+		if (!bestEvent) return {
+			ok: false,
+			error: "No valid profile event found",
+			relaysQueried
+		};
+		if (!verifyEvent(bestEvent.event)) return {
+			ok: false,
+			error: "Profile event has invalid signature",
+			relaysQueried,
+			sourceRelay: bestEvent.relay
+		};
+		let content;
 		try {
-			parsedContent = JSON.parse(bestEvent.event.content);
+			content = JSON.parse(bestEvent.event.content);
 		} catch {
 			return {
 				ok: false,
@@ -130,23 +154,9 @@ async function importProfileFromRelays(opts) {
 				sourceRelay: bestEvent.relay
 			};
 		}
-		if (typeof parsedContent !== "object" || parsedContent === null || Array.isArray(parsedContent)) return {
-			ok: false,
-			error: "Profile event content must be a JSON object",
-			relaysQueried,
-			sourceRelay: bestEvent.relay
-		};
-		const sanitizedProfile = sanitizeProfileUrls(contentToProfile(parsedContent));
-		const validatedProfile = NostrProfileSchema.safeParse(sanitizedProfile);
-		if (!validatedProfile.success) return {
-			ok: false,
-			error: "Profile event content has invalid fields",
-			relaysQueried,
-			sourceRelay: bestEvent.relay
-		};
 		return {
 			ok: true,
-			profile: validatedProfile.data,
+			profile: sanitizeProfileUrls(contentToProfile(content)),
 			event: {
 				id: bestEvent.event.id,
 				pubkey: bestEvent.event.pubkey,
@@ -156,8 +166,7 @@ async function importProfileFromRelays(opts) {
 			sourceRelay: bestEvent.relay
 		};
 	} finally {
-		if (deadlineTimer) clearTimeout(deadlineTimer);
-		for (const subscription of subscriptions) subscription.close();
+		for (const timer of timers) clearTimeout(timer);
 		pool.close(relays);
 	}
 }
@@ -208,7 +217,7 @@ function sendJson(res, status, body) {
 	res.setHeader("Content-Type", "application/json; charset=utf-8");
 	res.end(JSON.stringify(body));
 }
-async function readJsonBody(req, maxBytes = 64 * 1024, timeoutMs = 3e4) {
+async function readJsonBody(req, maxBytes = 65536, timeoutMs = 3e4) {
 	const result = await readJsonBodyWithLimit(req, {
 		maxBytes,
 		timeoutMs,
@@ -234,7 +243,9 @@ function isLoopbackRemoteAddress(remoteAddress) {
 }
 function isLoopbackOriginLike(value) {
 	try {
-		return isLoopbackHost(new URL(value).hostname);
+		const url = new URL(value);
+		const hostname = normalizeLowercaseStringOrEmpty(url.hostname);
+		return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1";
 	} catch {
 		return false;
 	}

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { n as nostrPlugin } from "./channel-O6-jXoT5.js";
+import { n as nostrPlugin } from "./.setup/channel-B4SX7Iq6.mjs";
 export { nostrPlugin };

package/dist/doctor-contract-api.js

@@ -1,4 +1,4 @@
-import { t as normalizeNostrStateAccountId } from "./state-account-id-CvBZ9s6P.js";
+import { t as normalizeNostrStateAccountId } from "./.setup/state-account-id-CvBZ9s6P.mjs";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { archiveLegacyStateSource } from "openclaw/plugin-sdk/runtime-doctor";
@@ -51,7 +51,8 @@ async function listLegacyFiles(params) {
 	const files = [];
 	for (const entry of entries) {
 		if (!entry.isFile() || !entry.name.startsWith(params.prefix) || !entry.name.endsWith(suffix)) continue;
-		const accountId = normalizeNostrStateAccountId(entry.name.slice(params.prefix.length, -5));
+		const rawAccountId = entry.name.slice(params.prefix.length, -5);
+		const accountId = normalizeNostrStateAccountId(rawAccountId);
 		const filePath = path.join(dir, entry.name);
 		try {
 			const value = params.parse(await readJsonFile(filePath));

package/dist/setup-api.js

@@ -1,2 +1,2 @@
-import { r as nostrSetupWizard, t as nostrSetupAdapter } from "./setup-surface-BJCFpe02.js";
+import { n as nostrSetupWizard, t as nostrSetupAdapter } from "./.setup/setup-surface-DWa6-9ku.mjs";
 export { nostrSetupAdapter, nostrSetupWizard };

package/dist/setup-entry.js

@@ -1,9 +1,10 @@
 import { defineBundledChannelSetupEntry } from "openclaw/plugin-sdk/channel-entry-contract";
+import { fileURLToPath } from "node:url";
 //#region extensions/nostr/setup-entry.ts
 var setup_entry_default = defineBundledChannelSetupEntry({
 	importMetaUrl: import.meta.url,
 	plugin: {
-		specifier: "./setup-plugin-api.js",
+		specifier: fileURLToPath(new URL(".setup/setup-plugin-api-DzlCumkz.mjs", import.meta.url).href),
 		exportName: "nostrSetupPlugin"
 	}
 });