@openclaw/nostr 2026.9.3 → 2026.9.5

package/assets/activity.svg

@@ -0,0 +1,3 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
+  <path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M4 18V6h5l6 12h5V6M9 6l11 12M4 6l11 12" />
+</svg>

package/dist/{channel-DWFChLbP.js → .setup/channel-ByGdjtr3.mjs}

@@ -1,7 +1,7 @@
-import { a as listNostrAccountIds, c as normalizePubkey, n as nostrSetupContract, o as resolveDefaultNostrAccountId, r as nostrSetupWizard, s as resolveNostrAccount } from "./setup-surface-mA5PMspO.js";
-import { a as collectStatusIssuesFromLastError, i as buildChannelConfigSchema, n as NostrProfileSchema, o as createDefaultChannelRuntimeState, r as DEFAULT_ACCOUNT_ID, s as formatPairingApproveHint, t as NostrConfigSchema } from "./config-schema-CkYd8ACn.js";
-import { c as validatePrivateKey, l as DEFAULT_RELAYS } from "./setup-adapter-KJ_iGKiG.js";
-import { t as normalizeNostrStateAccountId } from "./state-account-id-CvBZ9s6P.js";
+import { a as listNostrAccountIds, c as normalizePubkey, n as nostrSetupContract, o as resolveDefaultNostrAccountId, r as nostrSetupWizard, s as resolveNostrAccount } from "./setup-surface-Dx8QxWSP.mjs";
+import { a as collectStatusIssuesFromLastError, i as buildChannelConfigSchema, n as NostrProfileSchema, o as createDefaultChannelRuntimeState, r as DEFAULT_ACCOUNT_ID, s as formatPairingApproveHint, t as NostrConfigSchema } from "./config-schema-CkYd8ACn.mjs";
+import { c as validatePrivateKey, l as DEFAULT_RELAYS } from "./setup-adapter-KJ_iGKiG.mjs";
+import { t as normalizeNostrStateAccountId } from "./state-account-id-CvBZ9s6P.mjs";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { createScopedDmSecurityResolver, createTopLevelChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
 import { createChatChannelPlugin } from "openclaw/plugin-sdk/channel-core";
@@ -1050,7 +1050,7 @@ async function startNostrBus(options) {
 			return;
 		}
 		const replyTo = async (text) => {
-			await sendEncryptedDm(pool, sk, event.pubkey, text, relays, metrics, circuitBreakers, healthTracker, onError, event.id);
+			await sendEncryptedDm(pool, sk, event.pubkey, text, relays, metrics, circuitBreakers, healthTracker, onError, { replyToEventId: event.id });
 		};
 		if (Buffer.byteLength(event.content, "utf8") > guardPolicy.maxCiphertextBytes) {
 			if (rejectIfGlobalRateLimited()) throw new Error(`Nostr event ${event.id} hit the global rate limit.`);
@@ -1214,8 +1214,8 @@ async function startNostrBus(options) {
 		await Promise.allSettled([stopRelays("startup failed"), ingress.stop()]);
 		throw error;
 	}
-	const sendDm = async (toPubkey, text) => {
-		return await sendEncryptedDm(pool, sk, toPubkey, text, relays, metrics, circuitBreakers, healthTracker, onError);
+	const sendDm = async (toPubkey, text, sendOptions) => {
+		return await sendEncryptedDm(pool, sk, toPubkey, text, relays, metrics, circuitBreakers, healthTracker, onError, sendOptions);
 	};
 	const publishProfile$1 = async (profile) => {
 		const lastPublishedAt = (await readNostrProfileState({ accountId }))?.lastPublishedAt ?? void 0;
@@ -1263,10 +1263,10 @@ async function startNostrBus(options) {
 /**
 * Send an encrypted DM to a pubkey
 */
-async function sendEncryptedDm(pool, sk, toPubkey, text, relays, metrics, circuitBreakers, healthTracker, onError, replyToEventId) {
+async function sendEncryptedDm(pool, sk, toPubkey, text, relays, metrics, circuitBreakers, healthTracker, onError, options) {
 	const ciphertext = encrypt(sk, toPubkey, text);
 	const tags = [["p", toPubkey]];
-	if (replyToEventId) tags.push(["e", replyToEventId]);
+	if (options?.replyToEventId) tags.push(["e", options.replyToEventId]);
 	const reply = finalizeEvent({
 		kind: 4,
 		content: ciphertext,
@@ -1276,16 +1276,11 @@ async function sendEncryptedDm(pool, sk, toPubkey, text, relays, metrics, circui
 	const sortedRelays = healthTracker.getSortedRelays(relays);
 	let lastError;
 	for (const relay of sortedRelays) {
+		options?.assertDirectAdapterHandoff?.();
 		const cb = circuitBreakers.get(relay);
 		if (cb && !cb.canAttempt()) continue;
 		const startTime = Date.now();
-		try {
-			await pool.publish([relay], reply)[0];
-			const latency = Date.now() - startTime;
-			cb?.recordSuccess();
-			healthTracker.recordSuccess(relay, latency);
-			return reply.id;
-		} catch (err) {
+		const recordFailure = (err) => {
 			lastError = err instanceof Error ? err : new Error(String(err));
 			const latency = Date.now() - startTime;
 			cb?.recordFailure();
@@ -1295,6 +1290,24 @@ async function sendEncryptedDm(pool, sk, toPubkey, text, relays, metrics, circui
 				latency
 			});
 			onError?.(lastError, `publish to ${relay}`);
+		};
+		const connection = await pool.ensureRelay(relay, { connectionTimeout: pool.maxWaitForConnection }).catch((err) => {
+			recordFailure(/* @__PURE__ */ new Error(`connection failure: ${String(err)}`));
+		});
+		if (!connection) continue;
+		options?.assertDirectAdapterHandoff?.();
+		if (options?.onPlatformSendDispatch) {
+			await options.onPlatformSendDispatch();
+			options.assertDirectAdapterHandoff?.();
+		}
+		try {
+			await connection.publish(reply);
+			const latency = Date.now() - startTime;
+			cb?.recordSuccess();
+			healthTracker.recordSuccess(relay, latency);
+			return reply.id;
+		} catch (err) {
+			recordFailure(err);
 		}
 	}
 	throw new Error(`Failed to publish to any relay: ${lastError?.message}`);
@@ -1408,7 +1421,7 @@ const startNostrGatewayAccount = async (ctx) => {
 						ctx.log?.warn?.(`[${account.accountId}] dropping Nostr DM after preflight drift (${senderPubkey}, ${resolvedAccess.senderAccess.reasonCode})`);
 						return;
 					}
-					const { dispatchInboundDirectDm } = await import("./inbound-direct-dm-runtime-DHn9NoYN.js");
+					const { dispatchInboundDirectDm } = await import("./inbound-direct-dm-runtime-DHn9NoYN.mjs");
 					await dispatchInboundDirectDm({
 						channelRuntime,
 						resolveChannelIngress: async (contextBinding) => {
@@ -1517,7 +1530,7 @@ const nostrOutboundAdapter = {
 		text: true,
 		messageSendingHooks: true
 	} },
-	sendText: async ({ cfg, to, text, accountId }) => {
+	sendText: async ({ cfg, to, text, accountId, assertDirectAdapterHandoff, onPlatformSendDispatch }) => {
 		const core = getNostrRuntime();
 		const aid = accountId ?? resolveDefaultNostrAccountId(cfg);
 		const bus = activeBuses.get(aid);
@@ -1530,7 +1543,10 @@ const nostrOutboundAdapter = {
 		const message = stripMarkdown(core.channel.text.convertMarkdownTables(text ?? "", tableMode));
 		if (!message) throw new Error("Nostr send requires non-empty text after markdown stripping.");
 		const normalizedTo = normalizePubkey(to);
-		const eventId = await bus.sendDm(normalizedTo, message);
+		const eventId = await bus.sendDm(normalizedTo, message, {
+			assertDirectAdapterHandoff,
+			onPlatformSendDispatch
+		});
 		return attachChannelToResult("nostr", {
 			to: normalizedTo,
 			messageId: eventId

package/dist/.setup/secret-contract-api-DUmw8THQ.mjs

@@ -0,0 +1,2 @@
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-api-nVWula4c.mjs";
+export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/.setup/secret-contract-api-nVWula4c.mjs

@@ -0,0 +1,37 @@
+import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
+import { collectSecretInputAssignment, createChannelSecretTargetRegistryEntries, getChannelRecord } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
+//#region extensions/nostr/src/secret-contract.ts
+const secretTargetRegistryEntries = createChannelSecretTargetRegistryEntries({
+	channelKey: "nostr",
+	channel: ["privateKey"]
+});
+function collectRuntimeConfigAssignments(params) {
+	const nostr = getChannelRecord(params.config, "nostr");
+	if (!nostr) return;
+	const accountId = normalizeAccountId(typeof nostr.defaultAccount === "string" ? nostr.defaultAccount : void 0);
+	collectSecretInputAssignment({
+		value: nostr.privateKey,
+		path: "channels.nostr.privateKey",
+		expected: "string",
+		defaults: params.defaults,
+		context: params.context,
+		active: nostr.enabled !== false,
+		inactiveReason: "Nostr channel is disabled.",
+		owner: {
+			ownerKind: "account",
+			ownerId: `nostr:${accountId}`,
+			requiredForGateway: false,
+			disposition: "isolate",
+			contract: nostr
+		},
+		apply: (value) => {
+			nostr.privateKey = value;
+		}
+	});
+}
+const channelSecrets = {
+	secretTargetRegistryEntries,
+	collectRuntimeConfigAssignments
+};
+//#endregion
+export { collectRuntimeConfigAssignments as n, secretTargetRegistryEntries as r, channelSecrets as t };

package/dist/.setup/setup-plugin-api-B7i5rR6T.mjs

@@ -0,0 +1,2 @@
+import { t as nostrSetupPlugin } from "./setup-plugin-api-B7qtJE84.mjs";
+export { nostrSetupPlugin };

package/dist/.setup/setup-plugin-api-B7qtJE84.mjs

@@ -0,0 +1,82 @@
+import { i as buildChannelConfigSchema, t as NostrConfigSchema } from "./config-schema-CkYd8ACn.mjs";
+import { i as createNostrSetupStatus, l as DEFAULT_RELAYS, n as createNostrSetupAdapter, o as hasConfiguredNostrPrivateKey, r as createNostrSetupContract, s as resolveNostrPrivateKey } from "./setup-adapter-KJ_iGKiG.mjs";
+import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
+import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
+import { createDelegatedSetupWizardProxy } from "openclaw/plugin-sdk/setup-runtime";
+//#region extensions/nostr/src/channel.setup.ts
+const channel = "nostr";
+function getNostrConfig(cfg) {
+	return cfg.channels?.nostr;
+}
+function resolveDefaultSetupNostrAccountId(cfg) {
+	return normalizeAccountId(getNostrConfig(cfg)?.defaultAccount);
+}
+function resolveSetupNostrAccount(params) {
+	const nostrCfg = getNostrConfig(params.cfg);
+	const accountId = normalizeAccountId(params.accountId ?? resolveDefaultSetupNostrAccountId(params.cfg));
+	const privateKey = resolveNostrPrivateKey(nostrCfg?.privateKey);
+	const configured = hasConfiguredNostrPrivateKey(nostrCfg?.privateKey);
+	return {
+		accountId,
+		name: typeof nostrCfg?.name === "string" ? nostrCfg.name : void 0,
+		enabled: nostrCfg?.enabled !== false,
+		configured,
+		privateKey,
+		publicKey: "",
+		relays: nostrCfg?.relays ?? DEFAULT_RELAYS,
+		profile: nostrCfg?.profile,
+		config: {
+			enabled: nostrCfg?.enabled,
+			name: nostrCfg?.name,
+			privateKey: nostrCfg?.privateKey,
+			relays: nostrCfg?.relays,
+			dmPolicy: nostrCfg?.dmPolicy,
+			allowFrom: nostrCfg?.allowFrom,
+			profile: nostrCfg?.profile
+		}
+	};
+}
+const nostrSetupWizard = createDelegatedSetupWizardProxy({
+	channel,
+	loadWizard: async () => (await import("./setup-surface-Dx8QxWSP.mjs").then((n) => n.i)).nostrSetupWizard,
+	status: createNostrSetupStatus(resolveSetupNostrAccount),
+	resolveShouldPromptAccountIds: () => false,
+	delegatePrepare: true,
+	delegateFinalize: true
+});
+const nostrSetupPlugin = {
+	id: channel,
+	meta: {
+		id: channel,
+		label: "Nostr",
+		selectionLabel: "Nostr",
+		docsPath: "/channels/nostr",
+		docsLabel: "nostr",
+		blurb: "Decentralized DMs via Nostr relays (NIP-04)",
+		order: 100
+	},
+	capabilities: {
+		chatTypes: ["direct"],
+		media: false
+	},
+	reload: { configPrefixes: ["channels.nostr"] },
+	configSchema: buildChannelConfigSchema(NostrConfigSchema),
+	setupContract: createNostrSetupContract(createNostrSetupAdapter({ resolveAccountId: (cfg, accountId) => accountId?.trim() || resolveDefaultSetupNostrAccountId(cfg) })),
+	setupWizard: nostrSetupWizard,
+	config: {
+		listAccountIds: (cfg) => resolveSetupNostrAccount({ cfg }).configured ? [resolveDefaultSetupNostrAccountId(cfg)] : [],
+		resolveAccount: (cfg, accountId) => resolveSetupNostrAccount({
+			cfg,
+			accountId
+		}),
+		defaultAccountId: resolveDefaultSetupNostrAccountId,
+		isConfigured: (account) => account.configured,
+		describeAccount: (account) => describeAccountSnapshot({
+			account,
+			configured: account.configured,
+			extra: { publicKey: account.publicKey }
+		})
+	}
+};
+//#endregion
+export { nostrSetupPlugin as t };

package/dist/{setup-surface-mA5PMspO.js → .setup/setup-surface-Dx8QxWSP.mjs}

@@ -1,4 +1,4 @@
-import { a as parseRelayUrls, c as validatePrivateKey, i as createNostrSetupStatus, l as DEFAULT_RELAYS, n as createNostrSetupAdapter, o as hasConfiguredNostrPrivateKey, r as createNostrSetupContract, s as resolveNostrPrivateKey, t as buildNostrSetupPatch } from "./setup-adapter-KJ_iGKiG.js";
+import { a as parseRelayUrls, c as validatePrivateKey, i as createNostrSetupStatus, l as DEFAULT_RELAYS, n as createNostrSetupAdapter, o as hasConfiguredNostrPrivateKey, r as createNostrSetupContract, s as resolveNostrPrivateKey, t as buildNostrSetupPatch } from "./setup-adapter-KJ_iGKiG.mjs";
 import { createAccountListHelpers } from "openclaw/plugin-sdk/account-helpers";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { hasConfiguredSecretInput, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";

package/dist/api.js

@@ -1,8 +1,8 @@
-import { s as resolveNostrAccount } from "./setup-surface-mA5PMspO.js";
+import { s as resolveNostrAccount } from "./.setup/setup-surface-Dx8QxWSP.mjs";
 import { getPluginRuntimeGatewayRequestScope } from "./runtime-api.js";
-import { n as NostrProfileSchema } from "./config-schema-CkYd8ACn.js";
-import { a as getNostrRuntime, i as contentToProfile, n as nostrPlugin, o as setNostrRuntime, r as publishNostrProfile, t as getNostrProfileState } from "./channel-DWFChLbP.js";
-import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, readStringValue } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { n as NostrProfileSchema } from "./.setup/config-schema-CkYd8ACn.mjs";
+import { a as getNostrRuntime, i as contentToProfile, n as nostrPlugin, o as setNostrRuntime, r as publishNostrProfile, t as getNostrProfileState } from "./.setup/channel-ByGdjtr3.mjs";
+import { isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, readStringValue } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { z } from "zod";
 import { SimplePool } from "nostr-tools";
 import { createFixedWindowRateLimiter as createFixedWindowRateLimiter$1 } from "openclaw/plugin-sdk/webhook-ingress";
@@ -11,9 +11,26 @@ import { isBlockedHostnameOrIp, isLoopbackHost } from "openclaw/plugin-sdk/ssrf-
 import { readJsonBodyWithLimit, requestBodyErrorToText } from "openclaw/plugin-sdk/webhook-request-guards";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 //#region extensions/nostr/src/nostr-profile-url-safety.ts
+function normalizeNostrProfileUrlForRuntime(urlStr) {
+	return urlStr.replace(/^([a-z][a-z\d+.-]*:\/\/\[[\da-f:]*:)(0|[1-9]\d{0,2})\.(0|[1-9]\d{0,2})\.(0|[1-9]\d{0,2})\.(0|[1-9]\d{0,2})(\].*)$/iu, (original, prefix, a, b, c, d, suffix) => {
+		const octets = [
+			a,
+			b,
+			c,
+			d
+		].map(Number);
+		if (octets.some((octet) => !Number.isInteger(octet) || octet > 255)) return original;
+		const high = (octets[0] ?? 0) << 8 | (octets[1] ?? 0);
+		const low = (octets[2] ?? 0) << 8 | (octets[3] ?? 0);
+		return `${prefix}${high.toString(16)}:${low.toString(16)}${suffix}`;
+	});
+}
+function parseNostrProfileUrl(urlStr) {
+	return new URL(normalizeNostrProfileUrlForRuntime(urlStr));
+}
 function validateUrlSafety(urlStr) {
 	try {
-		const url = new URL(urlStr);
+		const url = parseNostrProfileUrl(urlStr);
 		if (url.protocol !== "https:") return {
 			ok: false,
 			error: "URL must use https:// protocol"
@@ -204,6 +221,36 @@ const ProfileUpdateSchema = NostrProfileSchema.extend({
 	lud16: lud16FormatSchema
 });
 const PROFILE_MUTATION_SCOPE = "operator.admin";
+const PROFILE_URL_FIELDS = [
+	"picture",
+	"banner",
+	"website"
+];
+function normalizeProfileUpdateUrlInputs(value) {
+	if (!isRecord(value)) return value;
+	const record = value;
+	let normalized;
+	for (const field of PROFILE_URL_FIELDS) {
+		const input = record[field];
+		if (typeof input !== "string") continue;
+		const next = normalizeNostrProfileUrlForRuntime(input);
+		if (next !== input) {
+			normalized ??= { ...record };
+			normalized[field] = next;
+		}
+	}
+	return normalized ?? value;
+}
+function restoreProfileUpdateUrlInputs(profile, value) {
+	if (!isRecord(value)) return profile;
+	const record = value;
+	return {
+		...profile,
+		...typeof record.picture === "string" ? { picture: record.picture } : {},
+		...typeof record.banner === "string" ? { banner: record.banner } : {},
+		...typeof record.website === "string" ? { website: record.website } : {}
+	};
+}
 function sendJson(res, status, body) {
 	res.statusCode = status;
 	res.setHeader("Content-Type", "application/json; charset=utf-8");
@@ -341,6 +388,7 @@ function createNostrProfileHttpHandler(ctx) {
 			});
 			return true;
 		} catch (err) {
+			if (res.writableEnded) return true;
 			ctx.log?.error(`Profile HTTP error: ${String(err)}`);
 			sendJson(res, 500, {
 				ok: false,
@@ -380,7 +428,7 @@ async function handleUpdateProfile(accountId, ctx, req, res) {
 		});
 		return true;
 	}
-	const parseResult = ProfileUpdateSchema.safeParse(body);
+	const parseResult = ProfileUpdateSchema.safeParse(normalizeProfileUpdateUrlInputs(body));
 	if (!parseResult.success) {
 		sendJson(res, 400, {
 			ok: false,
@@ -389,7 +437,7 @@ async function handleUpdateProfile(accountId, ctx, req, res) {
 		});
 		return true;
 	}
-	const profile = parseResult.data;
+	const profile = restoreProfileUpdateUrlInputs(parseResult.data, body);
 	if (profile.picture) {
 		const pictureCheck = validateUrlSafety(profile.picture);
 		if (!pictureCheck.ok) {
@@ -426,9 +474,11 @@ async function handleUpdateProfile(accountId, ctx, req, res) {
 	};
 	try {
 		const result = await withPublishLock(accountId, async () => {
+			await getPluginRuntimeGatewayRequestScope()?.revalidate?.();
 			return await publishNostrProfile(accountId, mergedProfile);
 		});
 		if (result.successes.length > 0) {
+			await getPluginRuntimeGatewayRequestScope()?.revalidate?.();
 			await ctx.updateConfigProfile(accountId, mergedProfile);
 			ctx.log?.info(`[${accountId}] Profile published to ${result.successes.length} relay(s)`);
 		} else ctx.log?.warn(`[${accountId}] Profile publish failed on all relays`);
@@ -441,6 +491,7 @@ async function handleUpdateProfile(accountId, ctx, req, res) {
 			persisted: result.successes.length > 0
 		});
 	} catch (err) {
+		if (res.writableEnded) return true;
 		ctx.log?.error(`[${accountId}] Profile publish error: ${String(err)}`);
 		sendJson(res, 500, {
 			ok: false,
@@ -473,6 +524,7 @@ async function handleImportProfile(accountId, ctx, req, res) {
 		const body = await readJsonBody(req);
 		if (typeof body === "object" && body !== null) autoMerge = body.autoMerge === true;
 	} catch {}
+	await getPluginRuntimeGatewayRequestScope()?.revalidate?.();
 	ctx.log?.info(`[${accountId}] Importing profile for ${pubkey.slice(0, 8)}...`);
 	const result = await importProfileFromRelays({
 		pubkey,
@@ -488,6 +540,7 @@ async function handleImportProfile(accountId, ctx, req, res) {
 		return true;
 	}
 	if (autoMerge && result.profile) {
+		await getPluginRuntimeGatewayRequestScope()?.revalidate?.();
 		const merged = mergeProfiles(ctx.getConfigProfile(accountId), result.profile);
 		await ctx.updateConfigProfile(accountId, merged);
 		ctx.log?.info(`[${accountId}] Profile imported and merged`);

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { n as nostrPlugin } from "./channel-DWFChLbP.js";
+import { n as nostrPlugin } from "./.setup/channel-ByGdjtr3.mjs";
 export { nostrPlugin };

package/dist/doctor-contract-api.js

@@ -1,4 +1,4 @@
-import { t as normalizeNostrStateAccountId } from "./state-account-id-CvBZ9s6P.js";
+import { t as normalizeNostrStateAccountId } from "./.setup/state-account-id-CvBZ9s6P.mjs";
 import { asFiniteNumber } from "openclaw/plugin-sdk/string-coerce-runtime";
 import fs from "node:fs/promises";
 import path from "node:path";
@@ -72,116 +72,72 @@ async function ensureStoreCapacity(params) {
 	}
 	return existingKeys;
 }
-const stateMigrations = [{
-	id: "nostr-bus-state-json-to-plugin-state",
-	label: "Nostr bus state",
-	async detectLegacyState(params) {
-		const files = await listLegacyFiles({
-			stateDir: params.stateDir,
-			prefix: "bus-state-",
-			parse: parseBusState
-		});
-		if (files.length === 0) return null;
-		return { preview: [`- Nostr bus state: ${files.length} ${files.length === 1 ? "account" : "accounts"} -> plugin state (${BUS_STATE_NAMESPACE})`] };
-	},
-	async migrateLegacyState(params) {
-		const changes = [];
-		const warnings = [];
-		const files = await listLegacyFiles({
-			stateDir: params.stateDir,
-			prefix: "bus-state-",
-			parse: parseBusState
-		});
-		const store = params.context.openPluginStateKeyedStore({
-			namespace: BUS_STATE_NAMESPACE,
-			maxEntries: MAX_NOSTR_STATE_ENTRIES
-		});
-		const existingKeys = await ensureStoreCapacity({
-			files,
-			store,
-			maxEntries: MAX_NOSTR_STATE_ENTRIES,
-			label: "Nostr bus state",
-			warnings
-		});
-		if (!existingKeys) return {
-			changes,
-			warnings
-		};
-		let imported = 0;
-		for (const file of files) {
-			if (!existingKeys.has(file.accountId)) {
-				await store.register(file.accountId, file.value);
-				existingKeys.add(file.accountId);
-				imported++;
-			}
-			await archiveLegacyStateSource({
-				filePath: file.filePath,
-				label: "Nostr bus state",
-				changes,
+function createNostrStateMigration(options) {
+	return {
+		id: `nostr-${options.namespace}-json-to-plugin-state`,
+		label: options.label,
+		async detectLegacyState(params) {
+			const files = await listLegacyFiles({
+				stateDir: params.stateDir,
+				prefix: `${options.namespace}-`,
+				parse: options.parse
+			});
+			if (files.length === 0) return null;
+			return { preview: [`- ${options.label}: ${files.length} ${files.length === 1 ? "account" : "accounts"} -> plugin state (${options.namespace})`] };
+		},
+		async migrateLegacyState(params) {
+			const changes = [];
+			const warnings = [];
+			const files = await listLegacyFiles({
+				stateDir: params.stateDir,
+				prefix: `${options.namespace}-`,
+				parse: options.parse
+			});
+			const store = params.context.openPluginStateKeyedStore({
+				namespace: options.namespace,
+				maxEntries: MAX_NOSTR_STATE_ENTRIES
+			});
+			const existingKeys = await ensureStoreCapacity({
+				files,
+				store,
+				maxEntries: MAX_NOSTR_STATE_ENTRIES,
+				label: options.label,
 				warnings
 			});
-		}
-		if (imported > 0) changes.unshift(`Migrated ${imported} Nostr bus-state ${imported === 1 ? "entry" : "entries"} -> plugin state`);
-		return {
-			changes,
-			warnings
-		};
-	}
-}, {
-	id: "nostr-profile-state-json-to-plugin-state",
-	label: "Nostr profile state",
-	async detectLegacyState(params) {
-		const files = await listLegacyFiles({
-			stateDir: params.stateDir,
-			prefix: "profile-state-",
-			parse: parseProfileState
-		});
-		if (files.length === 0) return null;
-		return { preview: [`- Nostr profile state: ${files.length} ${files.length === 1 ? "account" : "accounts"} -> plugin state (${PROFILE_STATE_NAMESPACE})`] };
-	},
-	async migrateLegacyState(params) {
-		const changes = [];
-		const warnings = [];
-		const files = await listLegacyFiles({
-			stateDir: params.stateDir,
-			prefix: "profile-state-",
-			parse: parseProfileState
-		});
-		const store = params.context.openPluginStateKeyedStore({
-			namespace: PROFILE_STATE_NAMESPACE,
-			maxEntries: MAX_NOSTR_STATE_ENTRIES
-		});
-		const existingKeys = await ensureStoreCapacity({
-			files,
-			store,
-			maxEntries: MAX_NOSTR_STATE_ENTRIES,
-			label: "Nostr profile state",
-			warnings
-		});
-		if (!existingKeys) return {
-			changes,
-			warnings
-		};
-		let imported = 0;
-		for (const file of files) {
-			if (!existingKeys.has(file.accountId)) {
-				await store.register(file.accountId, file.value);
-				existingKeys.add(file.accountId);
-				imported++;
+			if (!existingKeys) return {
+				changes,
+				warnings
+			};
+			let imported = 0;
+			for (const file of files) {
+				if (!existingKeys.has(file.accountId)) {
+					await store.register(file.accountId, file.value);
+					existingKeys.add(file.accountId);
+					imported++;
+				}
+				await archiveLegacyStateSource({
+					filePath: file.filePath,
+					label: options.label,
+					changes,
+					warnings
+				});
 			}
-			await archiveLegacyStateSource({
-				filePath: file.filePath,
-				label: "Nostr profile state",
+			if (imported > 0) changes.unshift(`Migrated ${imported} Nostr ${options.namespace} ${imported === 1 ? "entry" : "entries"} -> plugin state`);
+			return {
 				changes,
 				warnings
-			});
+			};
 		}
-		if (imported > 0) changes.unshift(`Migrated ${imported} Nostr profile-state ${imported === 1 ? "entry" : "entries"} -> plugin state`);
-		return {
-			changes,
-			warnings
-		};
-	}
-}];
+	};
+}
+const stateMigrations = [createNostrStateMigration({
+	namespace: BUS_STATE_NAMESPACE,
+	label: "Nostr bus state",
+	parse: parseBusState
+}), createNostrStateMigration({
+	namespace: PROFILE_STATE_NAMESPACE,
+	label: "Nostr profile state",
+	parse: parseProfileState
+})];
 //#endregion
 export { stateMigrations };

package/dist/secret-contract-api.js

@@ -1,37 +1,2 @@
-import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
-import { collectSecretInputAssignment, createChannelSecretTargetRegistryEntries, getChannelRecord } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
-//#region extensions/nostr/src/secret-contract.ts
-const secretTargetRegistryEntries = createChannelSecretTargetRegistryEntries({
-	channelKey: "nostr",
-	channel: ["privateKey"]
-});
-function collectRuntimeConfigAssignments(params) {
-	const nostr = getChannelRecord(params.config, "nostr");
-	if (!nostr) return;
-	const accountId = normalizeAccountId(typeof nostr.defaultAccount === "string" ? nostr.defaultAccount : void 0);
-	collectSecretInputAssignment({
-		value: nostr.privateKey,
-		path: "channels.nostr.privateKey",
-		expected: "string",
-		defaults: params.defaults,
-		context: params.context,
-		active: nostr.enabled !== false,
-		inactiveReason: "Nostr channel is disabled.",
-		owner: {
-			ownerKind: "account",
-			ownerId: `nostr:${accountId}`,
-			requiredForGateway: false,
-			disposition: "isolate",
-			contract: nostr
-		},
-		apply: (value) => {
-			nostr.privateKey = value;
-		}
-	});
-}
-const channelSecrets = {
-	secretTargetRegistryEntries,
-	collectRuntimeConfigAssignments
-};
-//#endregion
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./.setup/secret-contract-api-nVWula4c.mjs";
 export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/setup-api.js

@@ -1,2 +1,2 @@
-import { r as nostrSetupWizard, t as nostrSetupAdapter } from "./setup-surface-mA5PMspO.js";
+import { r as nostrSetupWizard, t as nostrSetupAdapter } from "./.setup/setup-surface-Dx8QxWSP.mjs";
 export { nostrSetupAdapter, nostrSetupWizard };

package/dist/setup-entry.js

@@ -1,13 +1,14 @@
 import { defineBundledChannelSetupEntry } from "openclaw/plugin-sdk/channel-entry-contract";
+import { fileURLToPath } from "node:url";
 //#region extensions/nostr/setup-entry.ts
 var setup_entry_default = defineBundledChannelSetupEntry({
 	importMetaUrl: import.meta.url,
 	plugin: {
-		specifier: "./setup-plugin-api.js",
+		specifier: fileURLToPath(new URL(".setup/setup-plugin-api-B7i5rR6T.mjs", import.meta.url).href),
 		exportName: "nostrSetupPlugin"
 	},
 	secrets: {
-		specifier: "./secret-contract-api.js",
+		specifier: fileURLToPath(new URL(".setup/secret-contract-api-DUmw8THQ.mjs", import.meta.url).href),
 		exportName: "channelSecrets"
 	}
 });