@orangecheck/sdk 1.6.0 → 1.8.0

package/dist/nostr.d.mts

@@ -1,4 +1,4 @@
-import { A as AttestationEnvelope, N as NostrEvent, I as IdentityBinding } from './types-BJKDroFv.mjs';
+import { A as AttestationEnvelope, c as NostrEvent, I as IdentityBinding } from './types-D9Tb1roj.mjs';
 
 declare const ATTESTATION_EVENT_KIND = 30078;
 declare const DEFAULT_RELAYS: string[];
@@ -14,7 +14,8 @@ declare function publishToRelays(event: NostrEvent, relays?: string[]): Promise<
 declare function queryByAttestationId(attestationId: string, relays?: string[]): Promise<NostrEvent[]>;
 declare function queryByAddress(address: string, relays?: string[]): Promise<NostrEvent[]>;
 declare function queryByIdentity(protocol: string, identifier: string, relays?: string[]): Promise<NostrEvent[]>;
+declare function queryRecent(relays?: string[], limit?: number): Promise<AttestationEnvelope[]>;
 declare function verifyAttestationEnvelope(envelope: AttestationEnvelope): Promise<boolean>;
 declare function parseAttestationFromEvent(event: NostrEvent): AttestationEnvelope | null;
 
-export { ATTESTATION_EVENT_KIND, DEFAULT_RELAYS, FANOUT_DEADLINE_MS, createAttestationEvent, getAddressFromEvent, getAttestationIdFromEvent, parseAttestationFromEvent, parseIdentitiesFromEvent, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, verifyAttestationEnvelope };
+export { ATTESTATION_EVENT_KIND, DEFAULT_RELAYS, FANOUT_DEADLINE_MS, createAttestationEvent, getAddressFromEvent, getAttestationIdFromEvent, parseAttestationFromEvent, parseIdentitiesFromEvent, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, queryRecent, verifyAttestationEnvelope };

package/dist/nostr.d.ts

@@ -1,4 +1,4 @@
-import { A as AttestationEnvelope, N as NostrEvent, I as IdentityBinding } from './types-BJKDroFv.js';
+import { A as AttestationEnvelope, c as NostrEvent, I as IdentityBinding } from './types-D9Tb1roj.js';
 
 declare const ATTESTATION_EVENT_KIND = 30078;
 declare const DEFAULT_RELAYS: string[];
@@ -14,7 +14,8 @@ declare function publishToRelays(event: NostrEvent, relays?: string[]): Promise<
 declare function queryByAttestationId(attestationId: string, relays?: string[]): Promise<NostrEvent[]>;
 declare function queryByAddress(address: string, relays?: string[]): Promise<NostrEvent[]>;
 declare function queryByIdentity(protocol: string, identifier: string, relays?: string[]): Promise<NostrEvent[]>;
+declare function queryRecent(relays?: string[], limit?: number): Promise<AttestationEnvelope[]>;
 declare function verifyAttestationEnvelope(envelope: AttestationEnvelope): Promise<boolean>;
 declare function parseAttestationFromEvent(event: NostrEvent): AttestationEnvelope | null;
 
-export { ATTESTATION_EVENT_KIND, DEFAULT_RELAYS, FANOUT_DEADLINE_MS, createAttestationEvent, getAddressFromEvent, getAttestationIdFromEvent, parseAttestationFromEvent, parseIdentitiesFromEvent, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, verifyAttestationEnvelope };
+export { ATTESTATION_EVENT_KIND, DEFAULT_RELAYS, FANOUT_DEADLINE_MS, createAttestationEvent, getAddressFromEvent, getAttestationIdFromEvent, parseAttestationFromEvent, parseIdentitiesFromEvent, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, queryRecent, verifyAttestationEnvelope };

package/dist/nostr.js

@@ -1,6 +1,33 @@
 'use strict';
 
-// src/utils/logger.ts
+var base = require('@scure/base');
+
+// src/nostr-pubkey.ts
+var HEX_64_RE = /^[0-9a-f]{64}$/;
+function toHex(bytes) {
+  let out = "";
+  for (const b of bytes) out += b.toString(16).padStart(2, "0");
+  return out;
+}
+function nostrPubkeyToHex(value) {
+  const trimmed = value.trim().toLowerCase();
+  if (HEX_64_RE.test(trimmed)) return trimmed;
+  if (!trimmed.startsWith("npub1")) return null;
+  try {
+    const decoded = base.bech32.decode(trimmed, 1023);
+    if (decoded.prefix !== "npub") return null;
+    const bytes = base.bech32.fromWords(decoded.words);
+    return bytes.length === 32 ? toHex(Uint8Array.from(bytes)) : null;
+  } catch {
+    return null;
+  }
+}
+function nostrIdentifierForms(identifier) {
+  const hex = nostrPubkeyToHex(identifier);
+  if (!hex) return [identifier];
+  const bytes = Uint8Array.from(hex.match(/../g).map((b) => parseInt(b, 16)));
+  return [base.bech32.encode("npub", base.bech32.toWords(bytes), 1023), hex];
+}
 function createLogger(namespace) {
   const shouldLog = (level) => {
     return false;
@@ -332,6 +359,7 @@ async function queryByAddress(address, relays = DEFAULT_RELAYS) {
 async function queryByIdentity(protocol, identifier, relays = DEFAULT_RELAYS) {
   const events = [];
   const identityTag = `${protocol}:${identifier}`;
+  const identityTags = protocol === "nostr" ? nostrIdentifierForms(identifier).map((f) => `nostr:${f}`) : [identityTag];
   log.info({ protocol, identifier, relayCount: relays.length }, "Querying relays for identity");
   const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;
   const queryPromises = relays.map(async (relayUrl) => {
@@ -350,7 +378,7 @@ async function queryByIdentity(protocol, identifier, relays = DEFAULT_RELAYS) {
               subscriptionId,
               {
                 kinds: [30078],
-                "#i": [identityTag],
+                "#i": identityTags,
                 limit: 10
               }
             ])
@@ -384,6 +412,70 @@ async function queryByIdentity(protocol, identifier, relays = DEFAULT_RELAYS) {
   log.info({ eventCount: events.length }, "Query complete");
   return events;
 }
+async function queryRecent(relays = DEFAULT_RELAYS, limit = 200) {
+  const events = [];
+  log.info({ relayCount: relays.length, limit }, "Querying relays for recent attestations");
+  const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;
+  const queryPromises = relays.map(async (relayUrl) => {
+    try {
+      const ws = new WebSocket(relayUrl);
+      await new Promise((resolve, reject) => {
+        const timeout = setTimeout(() => {
+          ws.close();
+          reject(new Error("Query timeout"));
+        }, budgetFor(deadlineAt));
+        ws.onopen = () => {
+          const subscriptionId = `ochk_recent_${Date.now()}`;
+          ws.send(
+            JSON.stringify([
+              "REQ",
+              subscriptionId,
+              { kinds: [ATTESTATION_EVENT_KIND], "#t": ["oc-attest"], limit }
+            ])
+          );
+        };
+        ws.onmessage = (msg) => {
+          try {
+            const data = JSON.parse(msg.data);
+            if (data[0] === "EVENT") {
+              const ev = data[2];
+              const scheme = ev.tags?.find((t) => t[0] === "scheme")?.[1];
+              const dTag = ev.tags?.find((t) => t[0] === "d")?.[1];
+              if ((scheme === "bip322" || scheme === "legacy") && dTag) {
+                events.push(ev);
+              }
+            } else if (data[0] === "EOSE") {
+              clearTimeout(timeout);
+              ws.close();
+              resolve();
+            }
+          } catch (err) {
+            log.error({ relay: relayUrl, error: err }, "Failed to parse event");
+          }
+        };
+        ws.onerror = (err) => {
+          clearTimeout(timeout);
+          log.error({ relay: relayUrl, error: err }, "WebSocket error during query");
+          reject(err);
+        };
+      });
+    } catch (err) {
+      log.error({ relay: relayUrl, error: err }, "Failed to query relay");
+    }
+  });
+  await Promise.allSettled(queryPromises);
+  const seen = /* @__PURE__ */ new Set();
+  const envelopes = [];
+  for (const ev of events) {
+    const envelope = parseAttestationFromEvent(ev);
+    if (!envelope || seen.has(envelope.attestation_id)) continue;
+    if (!await verifyAttestationEnvelope(envelope)) continue;
+    seen.add(envelope.attestation_id);
+    envelopes.push(envelope);
+  }
+  log.info({ eventCount: events.length, unique: envelopes.length }, "Recent query complete");
+  return envelopes;
+}
 async function verifyAttestationEnvelope(envelope) {
   try {
     const encoder = new TextEncoder();
@@ -419,6 +511,7 @@ exports.publishToRelays = publishToRelays;
 exports.queryByAddress = queryByAddress;
 exports.queryByAttestationId = queryByAttestationId;
 exports.queryByIdentity = queryByIdentity;
+exports.queryRecent = queryRecent;
 exports.verifyAttestationEnvelope = verifyAttestationEnvelope;
 //# sourceMappingURL=nostr.js.map
 //# sourceMappingURL=nostr.js.map

package/dist/nostr.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/utils/logger.ts","../src/nostr.ts"],"names":[],"mappings":";;;AAgDO,SAAS,aAAa,SAAA,EAA2B;AACpD,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAA8C;AAC7D,IAAyB,OAAO,KAAA;AAMJ,EAChC,CAAA;AAEA,EAAA,MAAM,gBAAgB,CAAC,GAAA,KAAwB,CAAA,CAAA,EAAI,SAAS,KAAK,GAAG,CAAA,CAAA;AAEpE,EAAA,OAAO;AAAA,IACH,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,MAAM,GAAG,gBAAgB,CAAA;AAAA,QACnE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,SAAS,GAAG,gBAAgB,CAAA;AAAA,QACtE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ;AAAA,GACJ;AACJ;;;ACzFA,IAAM,GAAA,GAAM,aAAa,WAAW,CAAA;AAK7B,IAAM,sBAAA,GAAyB;AAqC/B,IAAM,cAAA,GAA2B;AAAA,EACpC,sBAAA;AAAA,EACA,eAAA;AAAA,EACA,0BAAA;AAAA,EACA;AACJ;AAyBO,IAAM,kBAAA,GAAqB;AAClC,IAAM,gBAAA,GAAmB,GAAA;AAGzB,SAAS,UAAU,UAAA,EAA4B;AAC3C,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,kBAAkB,UAAA,GAAa,IAAA,CAAK,GAAA,EAAK,CAAC,CAAA;AAC1E;AAYO,SAAS,sBAAA,CACZ,UACA,MAAA,EAC8B;AAQ9B,EAAA,MAAM,IAAA,GAAmB;AAAA,IACrB,CAAC,GAAA,EAAK,QAAA,CAAS,cAAc,CAAA;AAAA;AAAA,IAC7B,CAAC,GAAA,EAAK,QAAA,CAAS,OAAO,CAAA;AAAA;AAAA,IACtB,CAAC,KAAK,WAAW,CAAA;AAAA;AAAA,IACjB,CAAC,SAAA,EAAW,QAAA,CAAS,OAAO,CAAA;AAAA;AAAA,IAC5B,CAAC,QAAA,EAAU,QAAA,CAAS,MAAM,CAAA;AAAA;AAAA,IAC1B,CAAC,WAAA,EAAa,QAAA,CAAS,SAAS;AAAA;AAAA,GACpC;AAGA,EAAA,KAAA,MAAW,QAAA,IAAY,SAAS,UAAA,EAAY;AACxC,IAAA,IAAA,CAAK,IAAA,CAAK,CAAC,GAAA,EAAK,CAAA,EAAG,QAAA,CAAS,QAAQ,CAAA,CAAA,EAAI,QAAA,CAAS,UAAU,CAAA,CAAE,CAAC,CAAA;AAAA,EAClE;AAGA,EAAA,IAAI,SAAS,UAAA,EAAY;AACrB,IAAA,IAAA,CAAK,IAAA,CAAK,CAAC,SAAA,EAAW,QAAA,CAAS,UAAU,CAAC,CAAA;AAAA,EAC9C;AAGA,EAAA,IAAI,QAAA,CAAS,aAAa,MAAA,EAAQ;AAC9B,IAAA,KAAA,MAAW,KAAA,IAAS,SAAS,WAAA,EAAa;AACtC,MAAA,IAAA,CAAK,IAAA,CAAK,CAAC,OAAA,EAAS,KAAK,CAAC,CAAA;AAAA,IAC9B;AAAA,EACJ;AAGA,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,QAAA,EAAU,MAAM,CAAC,CAAA;AAEhD,EAAA,OAAO;AAAA,IACH,IAAA,EAAM,sBAAA;AAAA,IACN,IAAA;AAAA,IACA,OAAA;AAAA,IACA,UAAA,EAAY,KAAK,KAAA,CAAM,IAAA,CAAK,MAAM,QAAA,CAAS,SAAS,IAAI,GAAI,CAAA;AAAA,IAC5D;AAAA,GACJ;AACJ;AAQO,SAAS,yBAAyB,KAAA,EAAsC;AAC3E,EAAA,MAAM,aAAgC,EAAC;AAEvC,EAAA,KAAA,MAAW,GAAA,IAAO,MAAM,IAAA,EAAM;AAC1B,IAAA,IAAI,IAAI,CAAC,CAAA,KAAM,GAAA,IAAO,GAAA,CAAI,CAAC,CAAA,EAAG;AAC1B,MAAA,MAAM,UAAA,GAAa,GAAA,CAAI,CAAC,CAAA,CAAE,QAAQ,GAAG,CAAA;AACrC,MAAA,IAAI,eAAe,EAAA,EAAI;AACnB,QAAA,UAAA,CAAW,IAAA,CAAK;AAAA,UACZ,UAAU,GAAA,CAAI,CAAC,CAAA,CAAE,SAAA,CAAU,GAAG,UAAU,CAAA;AAAA,UACxC,YAAY,GAAA,CAAI,CAAC,CAAA,CAAE,SAAA,CAAU,aAAa,CAAC;AAAA,SAC9C,CAAA;AAAA,MACL;AAAA,IACJ;AAAA,EACJ;AAEA,EAAA,OAAO,UAAA;AACX;AAQO,SAAS,0BAA0B,KAAA,EAAuC;AAC7E,EAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAAK,CAAC,GAAA,KAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,GAAG,CAAA;AACpD,EAAA,OAAO,OAAO,CAAC,CAAA;AACnB;AAQO,SAAS,oBAAoB,KAAA,EAAuC;AACvE,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,IAAA,CAAK,CAAC,GAAA,KAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,SAAS,CAAA;AAChE,EAAA,OAAO,aAAa,CAAC,CAAA;AACzB;AAMA,eAAsB,eAAA,CAClB,KAAA,EACA,MAAA,GAAmB,cAAA,EAC6B;AAChD,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,SAAmB,EAAC;AAE1B,EAAA,GAAA,CAAI,IAAA,CAAK,EAAE,OAAA,EAAS,KAAA,CAAM,IAAI,UAAA,EAAY,MAAA,CAAO,MAAA,EAAO,EAAG,4BAA4B,CAAA;AAIvF,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACnD,IAAA,IAAI,EAAA,GAAuB,IAAA;AAU3B,IAAA,IAAI,OAAA,GAAU,KAAA;AACd,IAAA,MAAM,gBAAgB,MAAY;AAC9B,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,OAAA,CAAQ,KAAK,QAAQ,CAAA;AAAA,IACzB,CAAA;AACA,IAAA,MAAM,gBAAgB,MAAY;AAC9B,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,MAAA,CAAO,KAAK,QAAQ,CAAA;AAAA,IACxB,CAAA;AAEA,IAAA,IAAI;AAEA,MAAA,EAAA,GAAK,IAAI,UAAU,QAAQ,CAAA;AAC3B,MAAA,MAAM,KAAA,GAAQ,EAAA;AAEd,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AAIzC,QAAA,MAAM,QAAA,GAAW,WAAW,MAAM;AAC9B,UAAA,KAAA,CAAM,KAAA,EAAM;AACZ,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,uBAAuB,CAAC,CAAA;AAAA,QAC7C,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,MAAM,UAAU,MAAM;AAClB,UAAA,YAAA,CAAa,QAAQ,CAAA;AACrB,UAAA,KAAA,CAAM,KAAA,EAAM;AAAA,QAChB,CAAA;AAEA,QAAA,KAAA,CAAM,SAAS,MAAM;AAGjB,UAAA,KAAA,CAAM,KAAK,IAAA,CAAK,SAAA,CAAU,CAAC,OAAA,EAAS,KAAK,CAAC,CAAC,CAAA;AAAA,QAC/C,CAAA;AAEA,QAAA,KAAA,CAAM,SAAA,GAAY,CAAC,GAAA,KAAQ;AACvB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAEhC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,IAAA,IAAQ,KAAK,CAAC,CAAA,KAAM,MAAM,EAAA,EAAI;AAC1C,cAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,IAAA,EAAM;AAClB,gBAAA,aAAA,EAAc;AACd,gBAAA,OAAA,EAAQ;AACR,gBAAA,OAAA,EAAQ;AAAA,cACZ,CAAA,MAAO;AACH,gBAAA,GAAA,CAAI,IAAA;AAAA,kBACA,EAAE,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,IAAA,CAAK,CAAC,CAAA,EAAE;AAAA,kBACnC;AAAA,iBACJ;AACA,gBAAA,aAAA,EAAc;AACd,gBAAA,OAAA,EAAQ;AACR,gBAAA,MAAA,CAAO,IAAI,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,IAAK,sBAAsB,CAAC,CAAA;AAAA,cACvD;AAAA,YACJ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,KAAA;AAAA,cACA,EAAE,KAAA,EAAO,QAAA,EAAU,KAAA,EAAO,GAAA,EAAI;AAAA,cAC9B;AAAA,aACJ;AACA,YAAA,aAAA,EAAc;AACd,YAAA,OAAA,EAAQ;AACR,YAAA,MAAA,CAAO,GAAG,CAAA;AAAA,UACd;AAAA,QACJ,CAAA;AAEA,QAAA,KAAA,CAAM,OAAA,GAAU,CAAC,GAAA,KAAQ;AACrB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,iBAAiB,CAAA;AAC5D,UAAA,aAAA,EAAc;AACd,UAAA,OAAA,EAAQ;AACR,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAEA,QAAA,KAAA,CAAM,UAAU,MAAM;AAGlB,UAAA,YAAA,CAAa,QAAQ,CAAA;AAAA,QACzB,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,4BAA4B,CAAA;AACvE,MAAA,aAAA,EAAc;AAAA,IAClB,CAAA,SAAE;AAEE,MAAA,IAAI,EAAA,IAAM,EAAA,CAAG,UAAA,KAAe,SAAA,CAAU,MAAA,EAAQ;AAC1C,QAAA,EAAA,CAAG,KAAA,EAAM;AAAA,MACb;AAAA,IACJ;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,eAAe,CAAA;AAExC,EAAA,GAAA,CAAI,IAAA,CAAK,EAAE,YAAA,EAAc,OAAA,CAAQ,QAAQ,WAAA,EAAa,MAAA,CAAO,MAAA,EAAO,EAAG,qBAAqB,CAAA;AAE5F,EAAA,OAAO,EAAE,SAAS,MAAA,EAAO;AAC7B;AAKA,eAAsB,oBAAA,CAClB,aAAA,EACA,MAAA,GAAmB,cAAA,EACE;AACrB,EAAA,MAAM,SAAuB,EAAC;AAE9B,EAAA,GAAA,CAAI,KAAK,EAAE,aAAA,EAAe,YAAY,MAAA,CAAO,MAAA,IAAU,iCAAiC,CAAA;AAIxF,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACjD,IAAA,IAAI,EAAA,GAAuB,IAAA;AAE3B,IAAA,IAAI;AACA,MAAA,EAAA,GAAK,IAAI,UAAU,QAAQ,CAAA;AAC3B,MAAA,MAAM,KAAA,GAAQ,EAAA;AAEd,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,QAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC7B,UAAA,KAAA,CAAM,KAAA,EAAM;AACZ,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAC,CAAA;AAAA,QACrC,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,MAAM,UAAU,MAAM;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AACpB,UAAA,KAAA,CAAM,KAAA,EAAM;AAAA,QAChB,CAAA;AAEA,QAAA,KAAA,CAAM,SAAS,MAAM;AAEjB,UAAA,MAAM,cAAA,GAAiB,CAAA,KAAA,EAAQ,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AACzC,UAAA,KAAA,CAAM,IAAA;AAAA,YACF,KAAK,SAAA,CAAU;AAAA,cACX,KAAA;AAAA,cACA,cAAA;AAAA,cACA;AAAA,gBACI,KAAA,EAAO,CAAC,KAAK,CAAA;AAAA,gBACb,IAAA,EAAM,CAAC,aAAa,CAAA;AAAA,gBACpB,KAAA,EAAO;AAAA;AACX,aACH;AAAA,WACL;AAAA,QACJ,CAAA;AAEA,QAAA,KAAA,CAAM,SAAA,GAAY,CAAC,GAAA,KAAQ;AACvB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,OAAA,EAAS;AACrB,cAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,YACvB,CAAA,MAAA,IAAW,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC3B,cAAA,OAAA,EAAQ;AACR,cAAA,OAAA,EAAQ;AAAA,YACZ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,UACtE;AAAA,QACJ,CAAA;AAEA,QAAA,KAAA,CAAM,OAAA,GAAU,CAAC,GAAA,KAAQ;AACrB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,8BAA8B,CAAA;AACzE,UAAA,OAAA,EAAQ;AACR,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAEA,QAAA,KAAA,CAAM,UAAU,MAAM;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AAAA,QACxB,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,IACtE,CAAA,SAAE;AAEE,MAAA,IAAI,EAAA,IAAM,EAAA,CAAG,UAAA,KAAe,SAAA,CAAU,MAAA,EAAQ;AAC1C,QAAA,EAAA,CAAG,KAAA,EAAM;AAAA,MACb;AAAA,IACJ;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,aAAa,CAAA;AAEtC,EAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,MAAA,CAAO,MAAA,IAAU,gBAAgB,CAAA;AAExD,EAAA,OAAO,MAAA;AACX;AAKA,eAAsB,cAAA,CAClB,OAAA,EACA,MAAA,GAAmB,cAAA,EACE;AACrB,EAAA,MAAM,SAAuB,EAAC;AAE9B,EAAA,GAAA,CAAI,KAAK,EAAE,OAAA,EAAS,YAAY,MAAA,CAAO,MAAA,IAAU,6BAA6B,CAAA;AAI9E,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACjD,IAAA,IAAI;AACA,MAAA,MAAM,EAAA,GAAK,IAAI,SAAA,CAAU,QAAQ,CAAA;AAEjC,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,QAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC7B,UAAA,EAAA,CAAG,KAAA,EAAM;AACT,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAC,CAAA;AAAA,QACrC,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,EAAA,CAAG,SAAS,MAAM;AACd,UAAA,MAAM,cAAA,GAAiB,CAAA,UAAA,EAAa,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAC9C,UAAA,EAAA,CAAG,IAAA;AAAA,YACC,KAAK,SAAA,CAAU;AAAA,cACX,KAAA;AAAA,cACA,cAAA;AAAA,cACA;AAAA,gBACI,KAAA,EAAO,CAAC,KAAK,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gBAQb,IAAA,EAAM,CAAC,OAAO,CAAA;AAAA,gBACd,KAAA,EAAO;AAAA;AACX,aACH;AAAA,WACL;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,SAAA,GAAY,CAAC,GAAA,KAAQ;AACpB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,OAAA,EAAS;AACrB,cAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,YACvB,CAAA,MAAA,IAAW,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC3B,cAAA,YAAA,CAAa,OAAO,CAAA;AACpB,cAAA,EAAA,CAAG,KAAA,EAAM;AACT,cAAA,OAAA,EAAQ;AAAA,YACZ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,UACtE;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,OAAA,GAAU,CAAC,GAAA,KAAQ;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AACpB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,8BAA8B,CAAA;AACzE,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,IACtE;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,aAAa,CAAA;AAEtC,EAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,MAAA,CAAO,MAAA,IAAU,gBAAgB,CAAA;AAExD,EAAA,OAAO,MAAA;AACX;AAKA,eAAsB,eAAA,CAClB,QAAA,EACA,UAAA,EACA,MAAA,GAAmB,cAAA,EACE;AACrB,EAAA,MAAM,SAAuB,EAAC;AAC9B,EAAA,MAAM,WAAA,GAAc,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,UAAU,CAAA,CAAA;AAE7C,EAAA,GAAA,CAAI,IAAA,CAAK,EAAE,QAAA,EAAU,UAAA,EAAY,YAAY,MAAA,CAAO,MAAA,IAAU,8BAA8B,CAAA;AAI5F,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACjD,IAAA,IAAI;AACA,MAAA,MAAM,EAAA,GAAK,IAAI,SAAA,CAAU,QAAQ,CAAA;AAEjC,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,QAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC7B,UAAA,EAAA,CAAG,KAAA,EAAM;AACT,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAC,CAAA;AAAA,QACrC,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,EAAA,CAAG,SAAS,MAAM;AACd,UAAA,MAAM,cAAA,GAAiB,CAAA,cAAA,EAAiB,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAClD,UAAA,EAAA,CAAG,IAAA;AAAA,YACC,KAAK,SAAA,CAAU;AAAA,cACX,KAAA;AAAA,cACA,cAAA;AAAA,cACA;AAAA,gBACI,KAAA,EAAO,CAAC,KAAK,CAAA;AAAA,gBACb,IAAA,EAAM,CAAC,WAAW,CAAA;AAAA,gBAClB,KAAA,EAAO;AAAA;AACX,aACH;AAAA,WACL;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,SAAA,GAAY,CAAC,GAAA,KAAQ;AACpB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,OAAA,EAAS;AACrB,cAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,YACvB,CAAA,MAAA,IAAW,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC3B,cAAA,YAAA,CAAa,OAAO,CAAA;AACpB,cAAA,EAAA,CAAG,KAAA,EAAM;AACT,cAAA,OAAA,EAAQ;AAAA,YACZ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,UACtE;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,OAAA,GAAU,CAAC,GAAA,KAAQ;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AACpB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,8BAA8B,CAAA;AACzE,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,IACtE;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,aAAa,CAAA;AAEtC,EAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,MAAA,CAAO,MAAA,IAAU,gBAAgB,CAAA;AAExD,EAAA,OAAO,MAAA;AACX;AAMA,eAAsB,0BAA0B,QAAA,EAAiD;AAC7F,EAAA,IAAI;AAEA,IAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA;AAC5C,IAAA,MAAM,aAAa,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,IAAI,CAAA;AAC7D,IAAA,MAAM,YAAY,KAAA,CAAM,IAAA,CAAK,IAAI,UAAA,CAAW,UAAU,CAAC,CAAA;AACvD,IAAA,MAAM,UAAA,GAAa,SAAA,CAAU,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,SAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAA;AAEhF,IAAA,OAAO,eAAe,QAAA,CAAS,cAAA;AAAA,EACnC,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAA,CAAM,EAAE,KAAA,EAAO,GAAA,IAAO,uCAAuC,CAAA;AACjE,IAAA,OAAO,KAAA;AAAA,EACX;AACJ;AAKO,SAAS,0BAA0B,KAAA,EAA+C;AACrF,EAAA,IAAI;AACA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,OAAO,CAAA;AACzC,IAAA,OAAO,QAAA;AAAA,EACX,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAA,CAAM,EAAE,OAAA,EAAS,KAAA,CAAM,IAAI,KAAA,EAAO,GAAA,IAAO,wCAAwC,CAAA;AACrF,IAAA,OAAO,IAAA;AAAA,EACX;AACJ","file":"nostr.js","sourcesContent":["/**\n * Simple logger for SDK\n * Can be disabled in production builds\n */\n\n/**\n * Log level type\n */\nexport type LogLevel = 'debug' | 'info' | 'warn' | 'error' | 'none';\n\n/**\n * Logger context type\n */\nexport type LogContext = Record<string, unknown>;\n\n/**\n * Logger interface\n */\nexport interface Logger {\n    debug: (contextOrMessage: string | LogContext, message?: string) => void;\n    info: (contextOrMessage: string | LogContext, message?: string) => void;\n    warn: (contextOrMessage: string | LogContext, message?: string) => void;\n    error: (contextOrMessage: string | LogContext, message?: string) => void;\n}\n\nlet logLevel: LogLevel = 'none';\n\n/**\n * Set the global log level\n * @param level - Log level to set\n */\nexport function setLogLevel(level: LogLevel): void {\n    logLevel = level;\n}\n\n/**\n * Get the current log level\n * @returns Current log level\n */\nexport function getLogLevel(): LogLevel {\n    return logLevel;\n}\n\n/**\n * Create a namespaced logger\n * @param namespace - Logger namespace\n * @returns Logger instance\n */\nexport function createLogger(namespace: string): Logger {\n    const shouldLog = (level: Exclude<LogLevel, 'none'>): boolean => {\n        if (logLevel === 'none') return false;\n\n        const levels: Exclude<LogLevel, 'none'>[] = ['debug', 'info', 'warn', 'error'];\n        const currentLevelIndex = levels.indexOf(logLevel as Exclude<LogLevel, 'none'>);\n        const messageLevelIndex = levels.indexOf(level);\n\n        return messageLevelIndex >= currentLevelIndex;\n    };\n\n    const formatMessage = (msg: string): string => `[${namespace}] ${msg}`;\n\n    return {\n        debug: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('debug')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.debug(formatMessage(contextOrMessage));\n                } else {\n                    console.debug(formatMessage(message ?? 'Debug'), contextOrMessage);\n                }\n            }\n        },\n        info: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('info')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.info(formatMessage(contextOrMessage));\n                } else {\n                    console.info(formatMessage(message ?? 'Info'), contextOrMessage);\n                }\n            }\n        },\n        warn: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('warn')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.warn(formatMessage(contextOrMessage));\n                } else {\n                    console.warn(formatMessage(message ?? 'Warning'), contextOrMessage);\n                }\n            }\n        },\n        error: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('error')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.error(formatMessage(contextOrMessage));\n                } else {\n                    console.error(formatMessage(message ?? 'Error'), contextOrMessage);\n                }\n            }\n        },\n    };\n}\n\n/**\n * Log verification error\n * @param protocol - Identity protocol\n * @param identifier - Identity identifier\n * @param error - Error object\n * @param context - Additional context\n */\nexport function logVerificationError(\n    protocol: string,\n    identifier: string,\n    error: Error,\n    context?: LogContext\n): void {\n    const logger = createLogger('identity-verification');\n    logger.error(\n        {\n            protocol,\n            identifier,\n            error: error.message,\n            stack: error.stack,\n            ...context,\n        },\n        'Verification failed'\n    );\n}\n","/**\n * Nostr Integration for OrangeCheck Protocol\n *\n * Implements NIP-78 (Application-specific data) for attestation publishing\n */\n\nimport type { AttestationEnvelope, IdentityBinding, NostrEvent } from './types';\n\nimport { createLogger } from './utils/logger';\n\nconst log = createLogger('ocp/nostr');\n\n/**\n * NIP-78 event kind for OrangeCheck attestations\n */\nexport const ATTESTATION_EVENT_KIND = 30078;\n\n/**\n * Default Nostr relays for OrangeCheck attestation publishing and lookup.\n *\n * Well-known relays with good uptime, plus the first-party family relay.\n * `relay.ochk.io` was missing here while attest.ochk.io's verifier has always\n * read from it, so the SDK and the reference implementation were looking in\n * different places — the SDK could miss a family attestation that the hosted\n * API found. It runs a kind allowlist (30078-30087, 30110-30114) and canonical OC d-tag\n * prefixes, and is always co-published alongside the public relays, never the\n * only copy. See https://github.com/orangecheck/oc-relay-infra.\n *\n * Order matters only for readability; queries fan out to all of them and\n * merge. Pass your own `relays` to any query to override this entirely — the\n * protocol does not require trusting any particular relay.\n *\n * A NOTE ON `relay.damus.io`, deliberately kept. It is reachable from a browser\n * (measured ~391ms, real events returned) and NOT reachable from at least one\n * serverless runtime — Vercel's, where it fails to connect on every attempt,\n * consistently, over hours. Its NIP-11 declares no `auth_required`,\n * `payment_required` or `restricted_writes`, so this reads as datacenter-IP\n * filtering in front of it rather than policy, and it can change in either\n * direction without notice.\n *\n * It stays for three reasons: it is one of the most widely read relays, so an\n * attestation published there is findable by the most people; the browser is\n * the dominant path for this SDK (wallet signing happens there), and it works\n * there; and since FANOUT_DEADLINE_MS below is a SHARED budget, a relay that\n * fails to connect resolves immediately and costs no latency. Removing a relay\n * that works for most callers, to tidy a status field on one runtime, is the\n * wrong trade.\n *\n * If you run this SDK server-side and want certainty about coverage, pass\n * `relays` explicitly. Silent partial coverage — believing you reached four\n * relays when you reached three — is the real hazard here, not latency.\n */\nexport const DEFAULT_RELAYS: string[] = [\n    'wss://relay.damus.io',\n    'wss://nos.lol',\n    'wss://relay.snort.social',\n    'wss://relay.ochk.io',\n];\n\n/**\n * Wall-clock budget for a whole relay fan-out, shared by every relay in it.\n *\n * Queries below use Promise.allSettled, so a fan-out used to take as long as\n * its SLOWEST relay — and with a dead relay in DEFAULT_RELAYS that meant the\n * per-relay 10s timeout, every single call. Measured on 1.4.0:\n *\n *     check({ addr })  with the old defaults   10.4s\n *     check({ addr })  with the dead relay out   1.0s\n *\n * That is not merely slow, it broke a dependent outright: @orangecheck/gate\n * races check() against a 5s lookupTimeoutMs, so a 10.4s lookup lost the race\n * every time and no address-based gate decision could ever succeed.\n *\n * A shared deadline fixes the class: whichever relay is dead or slow next, a\n * fan-out costs at most this. Healthy relays answer well inside it (~1s for a\n * cold WebSocket plus a query). QUERY_TIMEOUT_MS remains the per-relay ceiling.\n *\n * The value is deliberately BELOW @orangecheck/gate's 5s default\n * lookupTimeoutMs, so a gate decision can still resolve in the worst case\n * rather than always losing its own race. Raising this above 5000 silently\n * breaks that dependent — change both together, or don't.\n */\nexport const FANOUT_DEADLINE_MS = 4000;\nconst QUERY_TIMEOUT_MS = 10000;\n\n/** Remaining budget for a relay, given the fan-out's shared deadline. */\nfunction budgetFor(deadlineAt: number): number {\n    return Math.max(0, Math.min(QUERY_TIMEOUT_MS, deadlineAt - Date.now()));\n}\n\n/**\n * Create a NIP-78 event for an OrangeCheck attestation\n *\n * Kind: 30078 (Parameterized Replaceable Event)\n * d-tag: attestation_id (makes it replaceable by attestation ID)\n *\n * @param envelope - Attestation envelope\n * @param pubkey - Nostr public key (hex format)\n * @returns Unsigned Nostr event\n */\nexport function createAttestationEvent(\n    envelope: AttestationEnvelope,\n    pubkey: string\n): Omit<NostrEvent, 'id' | 'sig'> {\n    // NIP-12 relays index SINGLE-LETTER tags only. A multi-letter tag like\n    // `address` is stored verbatim and stays readable in the event, but it is\n    // never indexed, so no `#address` filter can ever retrieve it. Without the\n    // `t` tags below an attestation published by this SDK is invisible to\n    // every by-address query on every relay — including attest.ochk.io's own\n    // verifier, which queries `#t`. Keep both: `t` is what makes it findable,\n    // `address` is human-readable diagnostics and is not load-bearing.\n    const tags: string[][] = [\n        ['d', envelope.attestation_id], // Parameterized replaceable event identifier (indexed)\n        ['t', envelope.address], // Indexed btc-address tag — query with `#t`\n        ['t', 'oc-attest'], // Family marker — `#t=[\"oc-attest\"]` for cross-cut discovery\n        ['address', envelope.address], // Diagnostic / legacy — relay won't index this\n        ['scheme', envelope.scheme], // Signature scheme (bip322 or legacy)\n        ['issued_at', envelope.issued_at], // ISO timestamp\n    ];\n\n    // Add identity tags\n    for (const identity of envelope.identities) {\n        tags.push(['i', `${identity.protocol}:${identity.identifier}`]);\n    }\n\n    // Add expiration if present\n    if (envelope.expires_at) {\n        tags.push(['expires', envelope.expires_at]);\n    }\n\n    // Add relay hints if present\n    if (envelope.relay_hints?.length) {\n        for (const relay of envelope.relay_hints) {\n            tags.push(['relay', relay]);\n        }\n    }\n\n    // Content is the full attestation envelope as JSON\n    const content = JSON.stringify(envelope, null, 2);\n\n    return {\n        kind: ATTESTATION_EVENT_KIND,\n        tags,\n        content,\n        created_at: Math.floor(Date.parse(envelope.issued_at) / 1000),\n        pubkey,\n    };\n}\n\n/**\n * Parse identity bindings from Nostr event tags\n *\n * @param event - Nostr event\n * @returns Array of identity bindings\n */\nexport function parseIdentitiesFromEvent(event: NostrEvent): IdentityBinding[] {\n    const identities: IdentityBinding[] = [];\n\n    for (const tag of event.tags) {\n        if (tag[0] === 'i' && tag[1]) {\n            const colonIndex = tag[1].indexOf(':');\n            if (colonIndex !== -1) {\n                identities.push({\n                    protocol: tag[1].substring(0, colonIndex),\n                    identifier: tag[1].substring(colonIndex + 1),\n                });\n            }\n        }\n    }\n\n    return identities;\n}\n\n/**\n * Extract attestation ID from Nostr event d-tag\n *\n * @param event - Nostr event\n * @returns Attestation ID or undefined if not found\n */\nexport function getAttestationIdFromEvent(event: NostrEvent): string | undefined {\n    const dTag = event.tags.find((tag) => tag[0] === 'd');\n    return dTag?.[1];\n}\n\n/**\n * Extract Bitcoin address from Nostr event tags\n *\n * @param event - Nostr event\n * @returns Bitcoin address or undefined if not found\n */\nexport function getAddressFromEvent(event: NostrEvent): string | undefined {\n    const addressTag = event.tags.find((tag) => tag[0] === 'address');\n    return addressTag?.[1];\n}\n\n/**\n * Publish a Nostr event to multiple relays\n * Returns array of relay URLs that successfully accepted the event\n */\nexport async function publishToRelays(\n    event: NostrEvent,\n    relays: string[] = DEFAULT_RELAYS\n): Promise<{ success: string[]; failed: string[] }> {\n    const success: string[] = [];\n    const failed: string[] = [];\n\n    log.info({ eventId: event.id, relayCount: relays.length }, 'Publishing event to relays');\n\n    // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n    const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n    const publishPromises = relays.map(async (relayUrl) => {\n        let ws: WebSocket | null = null;\n\n        // One outcome per relay, first one wins. Without this a relay that\n        // ACKs `OK true` and then emits an error or close event during\n        // teardown lands in BOTH arrays, and the caller reports \"published\n        // to 3 · rejected 3\" over the same three relays. The `failed.includes`\n        // check this replaces only ever de-duplicated `failed` against\n        // itself, so it could not catch a success/failure split.\n        // attest.ochk.io's copy of this file has carried the guard for a\n        // while; this is the back-port.\n        let settled = false;\n        const recordSuccess = (): void => {\n            if (settled) return;\n            settled = true;\n            success.push(relayUrl);\n        };\n        const recordFailure = (): void => {\n            if (settled) return;\n            settled = true;\n            failed.push(relayUrl);\n        };\n\n        try {\n            // Connect to relay\n            ws = new WebSocket(relayUrl);\n            const wsRef = ws; // Capture for closures\n\n            await new Promise<void>((resolve, reject) => {\n                // One outer deadline covers connect + OK round-trip. The old\n                // code cleared this on `onopen`, which meant a relay that\n                // opened but never sent OK would hang the promise forever.\n                const deadline = setTimeout(() => {\n                    wsRef.close();\n                    reject(new Error('Relay publish timeout'));\n                }, budgetFor(deadlineAt));\n\n                const cleanup = () => {\n                    clearTimeout(deadline);\n                    wsRef.close();\n                };\n\n                wsRef.onopen = () => {\n                    // Do NOT clear the deadline — we still need it in case\n                    // the relay never responds with OK.\n                    wsRef.send(JSON.stringify(['EVENT', event]));\n                };\n\n                wsRef.onmessage = (msg) => {\n                    try {\n                        const data = JSON.parse(msg.data);\n                        // Check for OK response\n                        if (data[0] === 'OK' && data[1] === event.id) {\n                            if (data[2] === true) {\n                                recordSuccess();\n                                cleanup();\n                                resolve();\n                            } else {\n                                log.warn(\n                                    { relay: relayUrl, reason: data[3] },\n                                    'Relay rejected event'\n                                );\n                                recordFailure();\n                                cleanup();\n                                reject(new Error(data[3] || 'Relay rejected event'));\n                            }\n                        }\n                    } catch (err) {\n                        log.error(\n                            { relay: relayUrl, error: err },\n                            'Failed to parse relay response'\n                        );\n                        recordFailure();\n                        cleanup();\n                        reject(err);\n                    }\n                };\n\n                wsRef.onerror = (err) => {\n                    log.error({ relay: relayUrl, error: err }, 'WebSocket error');\n                    recordFailure();\n                    cleanup();\n                    reject(err);\n                };\n\n                wsRef.onclose = () => {\n                    // Socket closed before we resolved/rejected — counts as\n                    // failure. clearTimeout here is safe (cleanup handles both).\n                    clearTimeout(deadline);\n                };\n            });\n        } catch (err) {\n            log.error({ relay: relayUrl, error: err }, 'Failed to publish to relay');\n            recordFailure();\n        } finally {\n            // Ensure WebSocket is closed\n            if (ws && ws.readyState !== WebSocket.CLOSED) {\n                ws.close();\n            }\n        }\n    });\n\n    await Promise.allSettled(publishPromises);\n\n    log.info({ successCount: success.length, failedCount: failed.length }, 'Publishing complete');\n\n    return { success, failed };\n}\n\n/**\n * Query relays for attestations by attestation ID\n */\nexport async function queryByAttestationId(\n    attestationId: string,\n    relays: string[] = DEFAULT_RELAYS\n): Promise<NostrEvent[]> {\n    const events: NostrEvent[] = [];\n\n    log.info({ attestationId, relayCount: relays.length }, 'Querying relays for attestation');\n\n    // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n    const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n    const queryPromises = relays.map(async (relayUrl) => {\n        let ws: WebSocket | null = null;\n\n        try {\n            ws = new WebSocket(relayUrl);\n            const wsRef = ws; // Capture for closures\n\n            await new Promise<void>((resolve, reject) => {\n                const timeout = setTimeout(() => {\n                    wsRef.close();\n                    reject(new Error('Query timeout'));\n                }, budgetFor(deadlineAt));\n\n                const cleanup = () => {\n                    clearTimeout(timeout);\n                    wsRef.close();\n                };\n\n                wsRef.onopen = () => {\n                    // Send REQ message for kind 30078 with d-tag = attestation_id\n                    const subscriptionId = `ochk_${Date.now()}`;\n                    wsRef.send(\n                        JSON.stringify([\n                            'REQ',\n                            subscriptionId,\n                            {\n                                kinds: [30078],\n                                '#d': [attestationId],\n                                limit: 1,\n                            },\n                        ])\n                    );\n                };\n\n                wsRef.onmessage = (msg) => {\n                    try {\n                        const data = JSON.parse(msg.data);\n                        if (data[0] === 'EVENT') {\n                            events.push(data[2]);\n                        } else if (data[0] === 'EOSE') {\n                            cleanup();\n                            resolve();\n                        }\n                    } catch (err) {\n                        log.error({ relay: relayUrl, error: err }, 'Failed to parse event');\n                    }\n                };\n\n                wsRef.onerror = (err) => {\n                    log.error({ relay: relayUrl, error: err }, 'WebSocket error during query');\n                    cleanup();\n                    reject(err);\n                };\n\n                wsRef.onclose = () => {\n                    clearTimeout(timeout);\n                };\n            });\n        } catch (err) {\n            log.error({ relay: relayUrl, error: err }, 'Failed to query relay');\n        } finally {\n            // Ensure WebSocket is closed\n            if (ws && ws.readyState !== WebSocket.CLOSED) {\n                ws.close();\n            }\n        }\n    });\n\n    await Promise.allSettled(queryPromises);\n\n    log.info({ eventCount: events.length }, 'Query complete');\n\n    return events;\n}\n\n/**\n * Query relays for attestations by Bitcoin address\n */\nexport async function queryByAddress(\n    address: string,\n    relays: string[] = DEFAULT_RELAYS\n): Promise<NostrEvent[]> {\n    const events: NostrEvent[] = [];\n\n    log.info({ address, relayCount: relays.length }, 'Querying relays for address');\n\n    // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n    const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n    const queryPromises = relays.map(async (relayUrl) => {\n        try {\n            const ws = new WebSocket(relayUrl);\n\n            await new Promise<void>((resolve, reject) => {\n                const timeout = setTimeout(() => {\n                    ws.close();\n                    reject(new Error('Query timeout'));\n                }, budgetFor(deadlineAt));\n\n                ws.onopen = () => {\n                    const subscriptionId = `ochk_addr_${Date.now()}`;\n                    ws.send(\n                        JSON.stringify([\n                            'REQ',\n                            subscriptionId,\n                            {\n                                kinds: [30078],\n                                // `#t`, NOT `#address`: NIP-12 relays index\n                                // single-letter tags only, so `#address`\n                                // matched nothing on any relay and this\n                                // function returned empty for every real\n                                // attestation. attest.ochk.io's verifier has\n                                // queried `#t` since the same fix landed\n                                // there; this is the back-port.\n                                '#t': [address],\n                                limit: 50,\n                            },\n                        ])\n                    );\n                };\n\n                ws.onmessage = (msg) => {\n                    try {\n                        const data = JSON.parse(msg.data);\n                        if (data[0] === 'EVENT') {\n                            events.push(data[2]);\n                        } else if (data[0] === 'EOSE') {\n                            clearTimeout(timeout);\n                            ws.close();\n                            resolve();\n                        }\n                    } catch (err) {\n                        log.error({ relay: relayUrl, error: err }, 'Failed to parse event');\n                    }\n                };\n\n                ws.onerror = (err) => {\n                    clearTimeout(timeout);\n                    log.error({ relay: relayUrl, error: err }, 'WebSocket error during query');\n                    reject(err);\n                };\n            });\n        } catch (err) {\n            log.error({ relay: relayUrl, error: err }, 'Failed to query relay');\n        }\n    });\n\n    await Promise.allSettled(queryPromises);\n\n    log.info({ eventCount: events.length }, 'Query complete');\n\n    return events;\n}\n\n/**\n * Query relays for attestations by identity (any protocol)\n */\nexport async function queryByIdentity(\n    protocol: string,\n    identifier: string,\n    relays: string[] = DEFAULT_RELAYS\n): Promise<NostrEvent[]> {\n    const events: NostrEvent[] = [];\n    const identityTag = `${protocol}:${identifier}`;\n\n    log.info({ protocol, identifier, relayCount: relays.length }, 'Querying relays for identity');\n\n    // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n    const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n    const queryPromises = relays.map(async (relayUrl) => {\n        try {\n            const ws = new WebSocket(relayUrl);\n\n            await new Promise<void>((resolve, reject) => {\n                const timeout = setTimeout(() => {\n                    ws.close();\n                    reject(new Error('Query timeout'));\n                }, budgetFor(deadlineAt));\n\n                ws.onopen = () => {\n                    const subscriptionId = `ochk_identity_${Date.now()}`;\n                    ws.send(\n                        JSON.stringify([\n                            'REQ',\n                            subscriptionId,\n                            {\n                                kinds: [30078],\n                                '#i': [identityTag],\n                                limit: 10,\n                            },\n                        ])\n                    );\n                };\n\n                ws.onmessage = (msg) => {\n                    try {\n                        const data = JSON.parse(msg.data);\n                        if (data[0] === 'EVENT') {\n                            events.push(data[2]);\n                        } else if (data[0] === 'EOSE') {\n                            clearTimeout(timeout);\n                            ws.close();\n                            resolve();\n                        }\n                    } catch (err) {\n                        log.error({ relay: relayUrl, error: err }, 'Failed to parse event');\n                    }\n                };\n\n                ws.onerror = (err) => {\n                    clearTimeout(timeout);\n                    log.error({ relay: relayUrl, error: err }, 'WebSocket error during query');\n                    reject(err);\n                };\n            });\n        } catch (err) {\n            log.error({ relay: relayUrl, error: err }, 'Failed to query relay');\n        }\n    });\n\n    await Promise.allSettled(queryPromises);\n\n    log.info({ eventCount: events.length }, 'Query complete');\n\n    return events;\n}\n\n/**\n * Verify attestation envelope integrity\n * Checks that the attestation ID matches the message hash\n */\nexport async function verifyAttestationEnvelope(envelope: AttestationEnvelope): Promise<boolean> {\n    try {\n        // Re-compute attestation ID from message\n        const encoder = new TextEncoder();\n        const data = encoder.encode(envelope.message);\n        const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n        const hashArray = Array.from(new Uint8Array(hashBuffer));\n        const computedId = hashArray.map((b) => b.toString(16).padStart(2, '0')).join('');\n\n        return computedId === envelope.attestation_id;\n    } catch (err) {\n        log.error({ error: err }, 'Failed to verify attestation envelope');\n        return false;\n    }\n}\n\n/**\n * Parse attestation envelope from Nostr event content\n */\nexport function parseAttestationFromEvent(event: NostrEvent): AttestationEnvelope | null {\n    try {\n        const envelope = JSON.parse(event.content) as AttestationEnvelope;\n        return envelope;\n    } catch (err) {\n        log.error({ eventId: event.id, error: err }, 'Failed to parse attestation from event');\n        return null;\n    }\n}\n"]}
+{"version":3,"sources":["../src/nostr-pubkey.ts","../src/utils/logger.ts","../src/nostr.ts"],"names":["bech32"],"mappings":";;;;;AAEA,IAAM,SAAA,GAAY,gBAAA;AAElB,SAAS,MAAM,KAAA,EAA2B;AACtC,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,CAAA,IAAK,OAAO,GAAA,IAAO,CAAA,CAAE,SAAS,EAAE,CAAA,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAA;AAC5D,EAAA,OAAO,GAAA;AACX;AAGO,SAAS,iBAAiB,KAAA,EAA8B;AAC3D,EAAA,MAAM,OAAA,GAAU,KAAA,CAAM,IAAA,EAAK,CAAE,WAAA,EAAY;AACzC,EAAA,IAAI,SAAA,CAAU,IAAA,CAAK,OAAO,CAAA,EAAG,OAAO,OAAA;AACpC,EAAA,IAAI,CAAC,OAAA,CAAQ,UAAA,CAAW,OAAO,GAAG,OAAO,IAAA;AACzC,EAAA,IAAI;AACA,IAAA,MAAM,OAAA,GAAUA,WAAA,CAAO,MAAA,CAAO,OAAA,EAAkC,IAAI,CAAA;AACpE,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,MAAA,EAAQ,OAAO,IAAA;AACtC,IAAA,MAAM,KAAA,GAAQA,WAAA,CAAO,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAA;AAC5C,IAAA,OAAO,KAAA,CAAM,WAAW,EAAA,GAAK,KAAA,CAAM,WAAW,IAAA,CAAK,KAAK,CAAC,CAAA,GAAI,IAAA;AAAA,EACjE,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,IAAA;AAAA,EACX;AACJ;AAMO,SAAS,qBAAqB,UAAA,EAA8B;AAC/D,EAAA,MAAM,GAAA,GAAM,iBAAiB,UAAU,CAAA;AACvC,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,CAAC,UAAU,CAAA;AAC5B,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,IAAA,CAAK,GAAA,CAAI,MAAM,KAAK,CAAA,CAAG,GAAA,CAAI,CAAC,CAAA,KAAM,QAAA,CAAS,CAAA,EAAG,EAAE,CAAC,CAAC,CAAA;AAC3E,EAAA,OAAO,CAACA,WAAA,CAAO,MAAA,CAAO,MAAA,EAAQA,WAAA,CAAO,QAAQ,KAAK,CAAA,EAAG,IAAI,CAAA,EAAG,GAAG,CAAA;AACnE;ACcO,SAAS,aAAa,SAAA,EAA2B;AACpD,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAA8C;AAC7D,IAAyB,OAAO,KAAA;AAMJ,EAChC,CAAA;AAEA,EAAA,MAAM,gBAAgB,CAAC,GAAA,KAAwB,CAAA,CAAA,EAAI,SAAS,KAAK,GAAG,CAAA,CAAA;AAEpE,EAAA,OAAO;AAAA,IACH,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,MAAM,GAAG,gBAAgB,CAAA;AAAA,QACnE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,SAAS,GAAG,gBAAgB,CAAA;AAAA,QACtE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ;AAAA,GACJ;AACJ;;;ACxFA,IAAM,GAAA,GAAM,aAAa,WAAW,CAAA;AAK7B,IAAM,sBAAA,GAAyB;AAqC/B,IAAM,cAAA,GAA2B;AAAA,EACpC,sBAAA;AAAA,EACA,eAAA;AAAA,EACA,0BAAA;AAAA,EACA;AACJ;AAyBO,IAAM,kBAAA,GAAqB;AAClC,IAAM,gBAAA,GAAmB,GAAA;AAGzB,SAAS,UAAU,UAAA,EAA4B;AAC3C,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,kBAAkB,UAAA,GAAa,IAAA,CAAK,GAAA,EAAK,CAAC,CAAA;AAC1E;AAYO,SAAS,sBAAA,CACZ,UACA,MAAA,EAC8B;AAQ9B,EAAA,MAAM,IAAA,GAAmB;AAAA,IACrB,CAAC,GAAA,EAAK,QAAA,CAAS,cAAc,CAAA;AAAA;AAAA,IAC7B,CAAC,GAAA,EAAK,QAAA,CAAS,OAAO,CAAA;AAAA;AAAA,IACtB,CAAC,KAAK,WAAW,CAAA;AAAA;AAAA,IACjB,CAAC,SAAA,EAAW,QAAA,CAAS,OAAO,CAAA;AAAA;AAAA,IAC5B,CAAC,QAAA,EAAU,QAAA,CAAS,MAAM,CAAA;AAAA;AAAA,IAC1B,CAAC,WAAA,EAAa,QAAA,CAAS,SAAS;AAAA;AAAA,GACpC;AAGA,EAAA,KAAA,MAAW,QAAA,IAAY,SAAS,UAAA,EAAY;AACxC,IAAA,IAAA,CAAK,IAAA,CAAK,CAAC,GAAA,EAAK,CAAA,EAAG,QAAA,CAAS,QAAQ,CAAA,CAAA,EAAI,QAAA,CAAS,UAAU,CAAA,CAAE,CAAC,CAAA;AAAA,EAClE;AAGA,EAAA,IAAI,SAAS,UAAA,EAAY;AACrB,IAAA,IAAA,CAAK,IAAA,CAAK,CAAC,SAAA,EAAW,QAAA,CAAS,UAAU,CAAC,CAAA;AAAA,EAC9C;AAGA,EAAA,IAAI,QAAA,CAAS,aAAa,MAAA,EAAQ;AAC9B,IAAA,KAAA,MAAW,KAAA,IAAS,SAAS,WAAA,EAAa;AACtC,MAAA,IAAA,CAAK,IAAA,CAAK,CAAC,OAAA,EAAS,KAAK,CAAC,CAAA;AAAA,IAC9B;AAAA,EACJ;AAGA,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,QAAA,EAAU,MAAM,CAAC,CAAA;AAEhD,EAAA,OAAO;AAAA,IACH,IAAA,EAAM,sBAAA;AAAA,IACN,IAAA;AAAA,IACA,OAAA;AAAA,IACA,UAAA,EAAY,KAAK,KAAA,CAAM,IAAA,CAAK,MAAM,QAAA,CAAS,SAAS,IAAI,GAAI,CAAA;AAAA,IAC5D;AAAA,GACJ;AACJ;AAQO,SAAS,yBAAyB,KAAA,EAAsC;AAC3E,EAAA,MAAM,aAAgC,EAAC;AAEvC,EAAA,KAAA,MAAW,GAAA,IAAO,MAAM,IAAA,EAAM;AAC1B,IAAA,IAAI,IAAI,CAAC,CAAA,KAAM,GAAA,IAAO,GAAA,CAAI,CAAC,CAAA,EAAG;AAC1B,MAAA,MAAM,UAAA,GAAa,GAAA,CAAI,CAAC,CAAA,CAAE,QAAQ,GAAG,CAAA;AACrC,MAAA,IAAI,eAAe,EAAA,EAAI;AACnB,QAAA,UAAA,CAAW,IAAA,CAAK;AAAA,UACZ,UAAU,GAAA,CAAI,CAAC,CAAA,CAAE,SAAA,CAAU,GAAG,UAAU,CAAA;AAAA,UACxC,YAAY,GAAA,CAAI,CAAC,CAAA,CAAE,SAAA,CAAU,aAAa,CAAC;AAAA,SAC9C,CAAA;AAAA,MACL;AAAA,IACJ;AAAA,EACJ;AAEA,EAAA,OAAO,UAAA;AACX;AAQO,SAAS,0BAA0B,KAAA,EAAuC;AAC7E,EAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAAK,CAAC,GAAA,KAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,GAAG,CAAA;AACpD,EAAA,OAAO,OAAO,CAAC,CAAA;AACnB;AAQO,SAAS,oBAAoB,KAAA,EAAuC;AACvE,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,IAAA,CAAK,CAAC,GAAA,KAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,SAAS,CAAA;AAChE,EAAA,OAAO,aAAa,CAAC,CAAA;AACzB;AAMA,eAAsB,eAAA,CAClB,KAAA,EACA,MAAA,GAAmB,cAAA,EAC6B;AAChD,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,SAAmB,EAAC;AAE1B,EAAA,GAAA,CAAI,IAAA,CAAK,EAAE,OAAA,EAAS,KAAA,CAAM,IAAI,UAAA,EAAY,MAAA,CAAO,MAAA,EAAO,EAAG,4BAA4B,CAAA;AAIvF,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACnD,IAAA,IAAI,EAAA,GAAuB,IAAA;AAU3B,IAAA,IAAI,OAAA,GAAU,KAAA;AACd,IAAA,MAAM,gBAAgB,MAAY;AAC9B,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,OAAA,CAAQ,KAAK,QAAQ,CAAA;AAAA,IACzB,CAAA;AACA,IAAA,MAAM,gBAAgB,MAAY;AAC9B,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,MAAA,CAAO,KAAK,QAAQ,CAAA;AAAA,IACxB,CAAA;AAEA,IAAA,IAAI;AAEA,MAAA,EAAA,GAAK,IAAI,UAAU,QAAQ,CAAA;AAC3B,MAAA,MAAM,KAAA,GAAQ,EAAA;AAEd,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AAIzC,QAAA,MAAM,QAAA,GAAW,WAAW,MAAM;AAC9B,UAAA,KAAA,CAAM,KAAA,EAAM;AACZ,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,uBAAuB,CAAC,CAAA;AAAA,QAC7C,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,MAAM,UAAU,MAAM;AAClB,UAAA,YAAA,CAAa,QAAQ,CAAA;AACrB,UAAA,KAAA,CAAM,KAAA,EAAM;AAAA,QAChB,CAAA;AAEA,QAAA,KAAA,CAAM,SAAS,MAAM;AAGjB,UAAA,KAAA,CAAM,KAAK,IAAA,CAAK,SAAA,CAAU,CAAC,OAAA,EAAS,KAAK,CAAC,CAAC,CAAA;AAAA,QAC/C,CAAA;AAEA,QAAA,KAAA,CAAM,SAAA,GAAY,CAAC,GAAA,KAAQ;AACvB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAEhC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,IAAA,IAAQ,KAAK,CAAC,CAAA,KAAM,MAAM,EAAA,EAAI;AAC1C,cAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,IAAA,EAAM;AAClB,gBAAA,aAAA,EAAc;AACd,gBAAA,OAAA,EAAQ;AACR,gBAAA,OAAA,EAAQ;AAAA,cACZ,CAAA,MAAO;AACH,gBAAA,GAAA,CAAI,IAAA;AAAA,kBACA,EAAE,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,IAAA,CAAK,CAAC,CAAA,EAAE;AAAA,kBACnC;AAAA,iBACJ;AACA,gBAAA,aAAA,EAAc;AACd,gBAAA,OAAA,EAAQ;AACR,gBAAA,MAAA,CAAO,IAAI,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,IAAK,sBAAsB,CAAC,CAAA;AAAA,cACvD;AAAA,YACJ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,KAAA;AAAA,cACA,EAAE,KAAA,EAAO,QAAA,EAAU,KAAA,EAAO,GAAA,EAAI;AAAA,cAC9B;AAAA,aACJ;AACA,YAAA,aAAA,EAAc;AACd,YAAA,OAAA,EAAQ;AACR,YAAA,MAAA,CAAO,GAAG,CAAA;AAAA,UACd;AAAA,QACJ,CAAA;AAEA,QAAA,KAAA,CAAM,OAAA,GAAU,CAAC,GAAA,KAAQ;AACrB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,iBAAiB,CAAA;AAC5D,UAAA,aAAA,EAAc;AACd,UAAA,OAAA,EAAQ;AACR,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAEA,QAAA,KAAA,CAAM,UAAU,MAAM;AAGlB,UAAA,YAAA,CAAa,QAAQ,CAAA;AAAA,QACzB,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,4BAA4B,CAAA;AACvE,MAAA,aAAA,EAAc;AAAA,IAClB,CAAA,SAAE;AAEE,MAAA,IAAI,EAAA,IAAM,EAAA,CAAG,UAAA,KAAe,SAAA,CAAU,MAAA,EAAQ;AAC1C,QAAA,EAAA,CAAG,KAAA,EAAM;AAAA,MACb;AAAA,IACJ;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,eAAe,CAAA;AAExC,EAAA,GAAA,CAAI,IAAA,CAAK,EAAE,YAAA,EAAc,OAAA,CAAQ,QAAQ,WAAA,EAAa,MAAA,CAAO,MAAA,EAAO,EAAG,qBAAqB,CAAA;AAE5F,EAAA,OAAO,EAAE,SAAS,MAAA,EAAO;AAC7B;AAKA,eAAsB,oBAAA,CAClB,aAAA,EACA,MAAA,GAAmB,cAAA,EACE;AACrB,EAAA,MAAM,SAAuB,EAAC;AAE9B,EAAA,GAAA,CAAI,KAAK,EAAE,aAAA,EAAe,YAAY,MAAA,CAAO,MAAA,IAAU,iCAAiC,CAAA;AAIxF,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACjD,IAAA,IAAI,EAAA,GAAuB,IAAA;AAE3B,IAAA,IAAI;AACA,MAAA,EAAA,GAAK,IAAI,UAAU,QAAQ,CAAA;AAC3B,MAAA,MAAM,KAAA,GAAQ,EAAA;AAEd,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,QAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC7B,UAAA,KAAA,CAAM,KAAA,EAAM;AACZ,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAC,CAAA;AAAA,QACrC,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,MAAM,UAAU,MAAM;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AACpB,UAAA,KAAA,CAAM,KAAA,EAAM;AAAA,QAChB,CAAA;AAEA,QAAA,KAAA,CAAM,SAAS,MAAM;AAEjB,UAAA,MAAM,cAAA,GAAiB,CAAA,KAAA,EAAQ,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AACzC,UAAA,KAAA,CAAM,IAAA;AAAA,YACF,KAAK,SAAA,CAAU;AAAA,cACX,KAAA;AAAA,cACA,cAAA;AAAA,cACA;AAAA,gBACI,KAAA,EAAO,CAAC,KAAK,CAAA;AAAA,gBACb,IAAA,EAAM,CAAC,aAAa,CAAA;AAAA,gBACpB,KAAA,EAAO;AAAA;AACX,aACH;AAAA,WACL;AAAA,QACJ,CAAA;AAEA,QAAA,KAAA,CAAM,SAAA,GAAY,CAAC,GAAA,KAAQ;AACvB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,OAAA,EAAS;AACrB,cAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,YACvB,CAAA,MAAA,IAAW,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC3B,cAAA,OAAA,EAAQ;AACR,cAAA,OAAA,EAAQ;AAAA,YACZ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,UACtE;AAAA,QACJ,CAAA;AAEA,QAAA,KAAA,CAAM,OAAA,GAAU,CAAC,GAAA,KAAQ;AACrB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,8BAA8B,CAAA;AACzE,UAAA,OAAA,EAAQ;AACR,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAEA,QAAA,KAAA,CAAM,UAAU,MAAM;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AAAA,QACxB,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,IACtE,CAAA,SAAE;AAEE,MAAA,IAAI,EAAA,IAAM,EAAA,CAAG,UAAA,KAAe,SAAA,CAAU,MAAA,EAAQ;AAC1C,QAAA,EAAA,CAAG,KAAA,EAAM;AAAA,MACb;AAAA,IACJ;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,aAAa,CAAA;AAEtC,EAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,MAAA,CAAO,MAAA,IAAU,gBAAgB,CAAA;AAExD,EAAA,OAAO,MAAA;AACX;AAKA,eAAsB,cAAA,CAClB,OAAA,EACA,MAAA,GAAmB,cAAA,EACE;AACrB,EAAA,MAAM,SAAuB,EAAC;AAE9B,EAAA,GAAA,CAAI,KAAK,EAAE,OAAA,EAAS,YAAY,MAAA,CAAO,MAAA,IAAU,6BAA6B,CAAA;AAI9E,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACjD,IAAA,IAAI;AACA,MAAA,MAAM,EAAA,GAAK,IAAI,SAAA,CAAU,QAAQ,CAAA;AAEjC,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,QAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC7B,UAAA,EAAA,CAAG,KAAA,EAAM;AACT,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAC,CAAA;AAAA,QACrC,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,EAAA,CAAG,SAAS,MAAM;AACd,UAAA,MAAM,cAAA,GAAiB,CAAA,UAAA,EAAa,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAC9C,UAAA,EAAA,CAAG,IAAA;AAAA,YACC,KAAK,SAAA,CAAU;AAAA,cACX,KAAA;AAAA,cACA,cAAA;AAAA,cACA;AAAA,gBACI,KAAA,EAAO,CAAC,KAAK,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gBAQb,IAAA,EAAM,CAAC,OAAO,CAAA;AAAA,gBACd,KAAA,EAAO;AAAA;AACX,aACH;AAAA,WACL;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,SAAA,GAAY,CAAC,GAAA,KAAQ;AACpB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,OAAA,EAAS;AACrB,cAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,YACvB,CAAA,MAAA,IAAW,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC3B,cAAA,YAAA,CAAa,OAAO,CAAA;AACpB,cAAA,EAAA,CAAG,KAAA,EAAM;AACT,cAAA,OAAA,EAAQ;AAAA,YACZ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,UACtE;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,OAAA,GAAU,CAAC,GAAA,KAAQ;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AACpB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,8BAA8B,CAAA;AACzE,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,IACtE;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,aAAa,CAAA;AAEtC,EAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,MAAA,CAAO,MAAA,IAAU,gBAAgB,CAAA;AAExD,EAAA,OAAO,MAAA;AACX;AAKA,eAAsB,eAAA,CAClB,QAAA,EACA,UAAA,EACA,MAAA,GAAmB,cAAA,EACE;AACrB,EAAA,MAAM,SAAuB,EAAC;AAC9B,EAAA,MAAM,WAAA,GAAc,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,UAAU,CAAA,CAAA;AAC7C,EAAA,MAAM,YAAA,GACF,QAAA,KAAa,OAAA,GACP,oBAAA,CAAqB,UAAU,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,MAAA,EAAS,CAAC,CAAA,CAAE,CAAA,GACxD,CAAC,WAAW,CAAA;AAEtB,EAAA,GAAA,CAAI,IAAA,CAAK,EAAE,QAAA,EAAU,UAAA,EAAY,YAAY,MAAA,CAAO,MAAA,IAAU,8BAA8B,CAAA;AAI5F,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACjD,IAAA,IAAI;AACA,MAAA,MAAM,EAAA,GAAK,IAAI,SAAA,CAAU,QAAQ,CAAA;AAEjC,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,QAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC7B,UAAA,EAAA,CAAG,KAAA,EAAM;AACT,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAC,CAAA;AAAA,QACrC,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,EAAA,CAAG,SAAS,MAAM;AACd,UAAA,MAAM,cAAA,GAAiB,CAAA,cAAA,EAAiB,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAClD,UAAA,EAAA,CAAG,IAAA;AAAA,YACC,KAAK,SAAA,CAAU;AAAA,cACX,KAAA;AAAA,cACA,cAAA;AAAA,cACA;AAAA,gBACI,KAAA,EAAO,CAAC,KAAK,CAAA;AAAA,gBACb,IAAA,EAAM,YAAA;AAAA,gBACN,KAAA,EAAO;AAAA;AACX,aACH;AAAA,WACL;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,SAAA,GAAY,CAAC,GAAA,KAAQ;AACpB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,OAAA,EAAS;AACrB,cAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,YACvB,CAAA,MAAA,IAAW,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC3B,cAAA,YAAA,CAAa,OAAO,CAAA;AACpB,cAAA,EAAA,CAAG,KAAA,EAAM;AACT,cAAA,OAAA,EAAQ;AAAA,YACZ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,UACtE;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,OAAA,GAAU,CAAC,GAAA,KAAQ;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AACpB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,8BAA8B,CAAA;AACzE,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,IACtE;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,aAAa,CAAA;AAEtC,EAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,MAAA,CAAO,MAAA,IAAU,gBAAgB,CAAA;AAExD,EAAA,OAAO,MAAA;AACX;AAYA,eAAsB,WAAA,CAClB,MAAA,GAAmB,cAAA,EACnB,KAAA,GAAgB,GAAA,EACc;AAC9B,EAAA,MAAM,SAAuB,EAAC;AAE9B,EAAA,GAAA,CAAI,KAAK,EAAE,UAAA,EAAY,OAAO,MAAA,EAAQ,KAAA,IAAS,yCAAyC,CAAA;AAGxF,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,kBAAA;AAEhC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,GAAA,CAAI,OAAO,QAAA,KAAa;AACjD,IAAA,IAAI;AACA,MAAA,MAAM,EAAA,GAAK,IAAI,SAAA,CAAU,QAAQ,CAAA;AAEjC,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,QAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC7B,UAAA,EAAA,CAAG,KAAA,EAAM;AACT,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAC,CAAA;AAAA,QACrC,CAAA,EAAG,SAAA,CAAU,UAAU,CAAC,CAAA;AAExB,QAAA,EAAA,CAAG,SAAS,MAAM;AACd,UAAA,MAAM,cAAA,GAAiB,CAAA,YAAA,EAAe,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAChD,UAAA,EAAA,CAAG,IAAA;AAAA,YACC,KAAK,SAAA,CAAU;AAAA,cACX,KAAA;AAAA,cACA,cAAA;AAAA,cACA,EAAE,OAAO,CAAC,sBAAsB,GAAG,IAAA,EAAM,CAAC,WAAW,CAAA,EAAG,KAAA;AAAM,aACjE;AAAA,WACL;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,SAAA,GAAY,CAAC,GAAA,KAAQ;AACpB,UAAA,IAAI;AACA,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,YAAA,IAAI,IAAA,CAAK,CAAC,CAAA,KAAM,OAAA,EAAS;AACrB,cAAA,MAAM,EAAA,GAAK,KAAK,CAAC,CAAA;AACjB,cAAA,MAAM,MAAA,GAAS,EAAA,CAAG,IAAA,EAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,CAAC,CAAA,KAAM,QAAQ,CAAA,GAAI,CAAC,CAAA;AAC1D,cAAA,MAAM,IAAA,GAAO,EAAA,CAAG,IAAA,EAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,CAAC,CAAA,KAAM,GAAG,CAAA,GAAI,CAAC,CAAA;AACnD,cAAA,IAAA,CAAK,MAAA,KAAW,QAAA,IAAY,MAAA,KAAW,QAAA,KAAa,IAAA,EAAM;AACtD,gBAAA,MAAA,CAAO,KAAK,EAAE,CAAA;AAAA,cAClB;AAAA,YACJ,CAAA,MAAA,IAAW,IAAA,CAAK,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC3B,cAAA,YAAA,CAAa,OAAO,CAAA;AACpB,cAAA,EAAA,CAAG,KAAA,EAAM;AACT,cAAA,OAAA,EAAQ;AAAA,YACZ;AAAA,UACJ,SAAS,GAAA,EAAK;AACV,YAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,UACtE;AAAA,QACJ,CAAA;AAEA,QAAA,EAAA,CAAG,OAAA,GAAU,CAAC,GAAA,KAAQ;AAClB,UAAA,YAAA,CAAa,OAAO,CAAA;AACpB,UAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,8BAA8B,CAAA;AACzE,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACd,CAAA;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,SAAS,GAAA,EAAK;AACV,MAAA,GAAA,CAAI,MAAM,EAAE,KAAA,EAAO,UAAU,KAAA,EAAO,GAAA,IAAO,uBAAuB,CAAA;AAAA,IACtE;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,WAAW,aAAa,CAAA;AAEtC,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,MAAM,YAAmC,EAAC;AAC1C,EAAA,KAAA,MAAW,MAAM,MAAA,EAAQ;AACrB,IAAA,MAAM,QAAA,GAAW,0BAA0B,EAAE,CAAA;AAC7C,IAAA,IAAI,CAAC,QAAA,IAAY,IAAA,CAAK,GAAA,CAAI,QAAA,CAAS,cAAc,CAAA,EAAG;AACpD,IAAA,IAAI,CAAE,MAAM,yBAAA,CAA0B,QAAQ,CAAA,EAAI;AAClD,IAAA,IAAA,CAAK,GAAA,CAAI,SAAS,cAAc,CAAA;AAChC,IAAA,SAAA,CAAU,KAAK,QAAQ,CAAA;AAAA,EAC3B;AAEA,EAAA,GAAA,CAAI,IAAA,CAAK,EAAE,UAAA,EAAY,MAAA,CAAO,QAAQ,MAAA,EAAQ,SAAA,CAAU,MAAA,EAAO,EAAG,uBAAuB,CAAA;AAEzF,EAAA,OAAO,SAAA;AACX;AAMA,eAAsB,0BAA0B,QAAA,EAAiD;AAC7F,EAAA,IAAI;AAEA,IAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA;AAC5C,IAAA,MAAM,aAAa,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,IAAI,CAAA;AAC7D,IAAA,MAAM,YAAY,KAAA,CAAM,IAAA,CAAK,IAAI,UAAA,CAAW,UAAU,CAAC,CAAA;AACvD,IAAA,MAAM,UAAA,GAAa,SAAA,CAAU,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,SAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAA;AAEhF,IAAA,OAAO,eAAe,QAAA,CAAS,cAAA;AAAA,EACnC,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAA,CAAM,EAAE,KAAA,EAAO,GAAA,IAAO,uCAAuC,CAAA;AACjE,IAAA,OAAO,KAAA;AAAA,EACX;AACJ;AAKO,SAAS,0BAA0B,KAAA,EAA+C;AACrF,EAAA,IAAI;AACA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,OAAO,CAAA;AACzC,IAAA,OAAO,QAAA;AAAA,EACX,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAA,CAAM,EAAE,OAAA,EAAS,KAAA,CAAM,IAAI,KAAA,EAAO,GAAA,IAAO,wCAAwC,CAAA;AACrF,IAAA,OAAO,IAAA;AAAA,EACX;AACJ","file":"nostr.js","sourcesContent":["import { bech32 } from '@scure/base';\n\nconst HEX_64_RE = /^[0-9a-f]{64}$/;\n\nfunction toHex(bytes: Uint8Array): string {\n    let out = '';\n    for (const b of bytes) out += b.toString(16).padStart(2, '0');\n    return out;\n}\n\n/** A Nostr public key as lowercase hex, from either `npub1…` or hex. Null if it is neither. */\nexport function nostrPubkeyToHex(value: string): string | null {\n    const trimmed = value.trim().toLowerCase();\n    if (HEX_64_RE.test(trimmed)) return trimmed;\n    if (!trimmed.startsWith('npub1')) return null;\n    try {\n        const decoded = bech32.decode(trimmed as `${string}1${string}`, 1023);\n        if (decoded.prefix !== 'npub') return null;\n        const bytes = bech32.fromWords(decoded.words);\n        return bytes.length === 32 ? toHex(Uint8Array.from(bytes)) : null;\n    } catch {\n        return null;\n    }\n}\n\n/**\n * Every spelling of one Nostr key an attestation may carry in its `i` tag.\n * SPEC §2 prescribes `npub1…`; the reference site also accepts hex.\n */\nexport function nostrIdentifierForms(identifier: string): string[] {\n    const hex = nostrPubkeyToHex(identifier);\n    if (!hex) return [identifier];\n    const bytes = Uint8Array.from(hex.match(/../g)!.map((b) => parseInt(b, 16)));\n    return [bech32.encode('npub', bech32.toWords(bytes), 1023), hex];\n}\n","/**\n * Simple logger for SDK\n * Can be disabled in production builds\n */\n\n/**\n * Log level type\n */\nexport type LogLevel = 'debug' | 'info' | 'warn' | 'error' | 'none';\n\n/**\n * Logger context type\n */\nexport type LogContext = Record<string, unknown>;\n\n/**\n * Logger interface\n */\nexport interface Logger {\n    debug: (contextOrMessage: string | LogContext, message?: string) => void;\n    info: (contextOrMessage: string | LogContext, message?: string) => void;\n    warn: (contextOrMessage: string | LogContext, message?: string) => void;\n    error: (contextOrMessage: string | LogContext, message?: string) => void;\n}\n\nlet logLevel: LogLevel = 'none';\n\n/**\n * Set the global log level\n * @param level - Log level to set\n */\nexport function setLogLevel(level: LogLevel): void {\n    logLevel = level;\n}\n\n/**\n * Get the current log level\n * @returns Current log level\n */\nexport function getLogLevel(): LogLevel {\n    return logLevel;\n}\n\n/**\n * Create a namespaced logger\n * @param namespace - Logger namespace\n * @returns Logger instance\n */\nexport function createLogger(namespace: string): Logger {\n    const shouldLog = (level: Exclude<LogLevel, 'none'>): boolean => {\n        if (logLevel === 'none') return false;\n\n        const levels: Exclude<LogLevel, 'none'>[] = ['debug', 'info', 'warn', 'error'];\n        const currentLevelIndex = levels.indexOf(logLevel as Exclude<LogLevel, 'none'>);\n        const messageLevelIndex = levels.indexOf(level);\n\n        return messageLevelIndex >= currentLevelIndex;\n    };\n\n    const formatMessage = (msg: string): string => `[${namespace}] ${msg}`;\n\n    return {\n        debug: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('debug')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.debug(formatMessage(contextOrMessage));\n                } else {\n                    console.debug(formatMessage(message ?? 'Debug'), contextOrMessage);\n                }\n            }\n        },\n        info: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('info')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.info(formatMessage(contextOrMessage));\n                } else {\n                    console.info(formatMessage(message ?? 'Info'), contextOrMessage);\n                }\n            }\n        },\n        warn: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('warn')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.warn(formatMessage(contextOrMessage));\n                } else {\n                    console.warn(formatMessage(message ?? 'Warning'), contextOrMessage);\n                }\n            }\n        },\n        error: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('error')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.error(formatMessage(contextOrMessage));\n                } else {\n                    console.error(formatMessage(message ?? 'Error'), contextOrMessage);\n                }\n            }\n        },\n    };\n}\n\n/**\n * Log verification error\n * @param protocol - Identity protocol\n * @param identifier - Identity identifier\n * @param error - Error object\n * @param context - Additional context\n */\nexport function logVerificationError(\n    protocol: string,\n    identifier: string,\n    error: Error,\n    context?: LogContext\n): void {\n    const logger = createLogger('identity-verification');\n    logger.error(\n        {\n            protocol,\n            identifier,\n            error: error.message,\n            stack: error.stack,\n            ...context,\n        },\n        'Verification failed'\n    );\n}\n","/**\n * Nostr Integration for OrangeCheck Protocol\n *\n * Implements NIP-78 (Application-specific data) for attestation publishing\n */\n\nimport type { AttestationEnvelope, IdentityBinding, NostrEvent } from './types';\n\nimport { nostrIdentifierForms } from './nostr-pubkey';\nimport { createLogger } from './utils/logger';\n\nconst log = createLogger('ocp/nostr');\n\n/**\n * NIP-78 event kind for OrangeCheck attestations\n */\nexport const ATTESTATION_EVENT_KIND = 30078;\n\n/**\n * Default Nostr relays for OrangeCheck attestation publishing and lookup.\n *\n * Well-known relays with good uptime, plus the first-party family relay.\n * `relay.ochk.io` was missing here while attest.ochk.io's verifier has always\n * read from it, so the SDK and the reference implementation were looking in\n * different places — the SDK could miss a family attestation that the hosted\n * API found. It runs a kind allowlist (30078-30087, 30110-30114) and canonical OC d-tag\n * prefixes, and is always co-published alongside the public relays, never the\n * only copy. See https://github.com/orangecheck/oc-relay-infra.\n *\n * Order matters only for readability; queries fan out to all of them and\n * merge. Pass your own `relays` to any query to override this entirely — the\n * protocol does not require trusting any particular relay.\n *\n * A NOTE ON `relay.damus.io`, deliberately kept. It is reachable from a browser\n * (measured ~391ms, real events returned) and NOT reachable from at least one\n * serverless runtime — Vercel's, where it fails to connect on every attempt,\n * consistently, over hours. Its NIP-11 declares no `auth_required`,\n * `payment_required` or `restricted_writes`, so this reads as datacenter-IP\n * filtering in front of it rather than policy, and it can change in either\n * direction without notice.\n *\n * It stays for three reasons: it is one of the most widely read relays, so an\n * attestation published there is findable by the most people; the browser is\n * the dominant path for this SDK (wallet signing happens there), and it works\n * there; and since FANOUT_DEADLINE_MS below is a SHARED budget, a relay that\n * fails to connect resolves immediately and costs no latency. Removing a relay\n * that works for most callers, to tidy a status field on one runtime, is the\n * wrong trade.\n *\n * If you run this SDK server-side and want certainty about coverage, pass\n * `relays` explicitly. Silent partial coverage — believing you reached four\n * relays when you reached three — is the real hazard here, not latency.\n */\nexport const DEFAULT_RELAYS: string[] = [\n    'wss://relay.damus.io',\n    'wss://nos.lol',\n    'wss://relay.snort.social',\n    'wss://relay.ochk.io',\n];\n\n/**\n * Wall-clock budget for a whole relay fan-out, shared by every relay in it.\n *\n * Queries below use Promise.allSettled, so a fan-out used to take as long as\n * its SLOWEST relay — and with a dead relay in DEFAULT_RELAYS that meant the\n * per-relay 10s timeout, every single call. Measured on 1.4.0:\n *\n *     check({ addr })  with the old defaults   10.4s\n *     check({ addr })  with the dead relay out   1.0s\n *\n * That is not merely slow, it broke a dependent outright: @orangecheck/gate\n * races check() against a 5s lookupTimeoutMs, so a 10.4s lookup lost the race\n * every time and no address-based gate decision could ever succeed.\n *\n * A shared deadline fixes the class: whichever relay is dead or slow next, a\n * fan-out costs at most this. Healthy relays answer well inside it (~1s for a\n * cold WebSocket plus a query). QUERY_TIMEOUT_MS remains the per-relay ceiling.\n *\n * The value is deliberately BELOW @orangecheck/gate's 5s default\n * lookupTimeoutMs, so a gate decision can still resolve in the worst case\n * rather than always losing its own race. Raising this above 5000 silently\n * breaks that dependent — change both together, or don't.\n */\nexport const FANOUT_DEADLINE_MS = 4000;\nconst QUERY_TIMEOUT_MS = 10000;\n\n/** Remaining budget for a relay, given the fan-out's shared deadline. */\nfunction budgetFor(deadlineAt: number): number {\n    return Math.max(0, Math.min(QUERY_TIMEOUT_MS, deadlineAt - Date.now()));\n}\n\n/**\n * Create a NIP-78 event for an OrangeCheck attestation\n *\n * Kind: 30078 (Parameterized Replaceable Event)\n * d-tag: attestation_id (makes it replaceable by attestation ID)\n *\n * @param envelope - Attestation envelope\n * @param pubkey - Nostr public key (hex format)\n * @returns Unsigned Nostr event\n */\nexport function createAttestationEvent(\n    envelope: AttestationEnvelope,\n    pubkey: string\n): Omit<NostrEvent, 'id' | 'sig'> {\n    // NIP-12 relays index SINGLE-LETTER tags only. A multi-letter tag like\n    // `address` is stored verbatim and stays readable in the event, but it is\n    // never indexed, so no `#address` filter can ever retrieve it. Without the\n    // `t` tags below an attestation published by this SDK is invisible to\n    // every by-address query on every relay — including attest.ochk.io's own\n    // verifier, which queries `#t`. Keep both: `t` is what makes it findable,\n    // `address` is human-readable diagnostics and is not load-bearing.\n    const tags: string[][] = [\n        ['d', envelope.attestation_id], // Parameterized replaceable event identifier (indexed)\n        ['t', envelope.address], // Indexed btc-address tag — query with `#t`\n        ['t', 'oc-attest'], // Family marker — `#t=[\"oc-attest\"]` for cross-cut discovery\n        ['address', envelope.address], // Diagnostic / legacy — relay won't index this\n        ['scheme', envelope.scheme], // Signature scheme (bip322 or legacy)\n        ['issued_at', envelope.issued_at], // ISO timestamp\n    ];\n\n    // Add identity tags\n    for (const identity of envelope.identities) {\n        tags.push(['i', `${identity.protocol}:${identity.identifier}`]);\n    }\n\n    // Add expiration if present\n    if (envelope.expires_at) {\n        tags.push(['expires', envelope.expires_at]);\n    }\n\n    // Add relay hints if present\n    if (envelope.relay_hints?.length) {\n        for (const relay of envelope.relay_hints) {\n            tags.push(['relay', relay]);\n        }\n    }\n\n    // Content is the full attestation envelope as JSON\n    const content = JSON.stringify(envelope, null, 2);\n\n    return {\n        kind: ATTESTATION_EVENT_KIND,\n        tags,\n        content,\n        created_at: Math.floor(Date.parse(envelope.issued_at) / 1000),\n        pubkey,\n    };\n}\n\n/**\n * Parse identity bindings from Nostr event tags\n *\n * @param event - Nostr event\n * @returns Array of identity bindings\n */\nexport function parseIdentitiesFromEvent(event: NostrEvent): IdentityBinding[] {\n    const identities: IdentityBinding[] = [];\n\n    for (const tag of event.tags) {\n        if (tag[0] === 'i' && tag[1]) {\n            const colonIndex = tag[1].indexOf(':');\n            if (colonIndex !== -1) {\n                identities.push({\n                    protocol: tag[1].substring(0, colonIndex),\n                    identifier: tag[1].substring(colonIndex + 1),\n                });\n            }\n        }\n    }\n\n    return identities;\n}\n\n/**\n * Extract attestation ID from Nostr event d-tag\n *\n * @param event - Nostr event\n * @returns Attestation ID or undefined if not found\n */\nexport function getAttestationIdFromEvent(event: NostrEvent): string | undefined {\n    const dTag = event.tags.find((tag) => tag[0] === 'd');\n    return dTag?.[1];\n}\n\n/**\n * Extract Bitcoin address from Nostr event tags\n *\n * @param event - Nostr event\n * @returns Bitcoin address or undefined if not found\n */\nexport function getAddressFromEvent(event: NostrEvent): string | undefined {\n    const addressTag = event.tags.find((tag) => tag[0] === 'address');\n    return addressTag?.[1];\n}\n\n/**\n * Publish a Nostr event to multiple relays\n * Returns array of relay URLs that successfully accepted the event\n */\nexport async function publishToRelays(\n    event: NostrEvent,\n    relays: string[] = DEFAULT_RELAYS\n): Promise<{ success: string[]; failed: string[] }> {\n    const success: string[] = [];\n    const failed: string[] = [];\n\n    log.info({ eventId: event.id, relayCount: relays.length }, 'Publishing event to relays');\n\n    // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n    const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n    const publishPromises = relays.map(async (relayUrl) => {\n        let ws: WebSocket | null = null;\n\n        // One outcome per relay, first one wins. Without this a relay that\n        // ACKs `OK true` and then emits an error or close event during\n        // teardown lands in BOTH arrays, and the caller reports \"published\n        // to 3 · rejected 3\" over the same three relays. The `failed.includes`\n        // check this replaces only ever de-duplicated `failed` against\n        // itself, so it could not catch a success/failure split.\n        // attest.ochk.io's copy of this file has carried the guard for a\n        // while; this is the back-port.\n        let settled = false;\n        const recordSuccess = (): void => {\n            if (settled) return;\n            settled = true;\n            success.push(relayUrl);\n        };\n        const recordFailure = (): void => {\n            if (settled) return;\n            settled = true;\n            failed.push(relayUrl);\n        };\n\n        try {\n            // Connect to relay\n            ws = new WebSocket(relayUrl);\n            const wsRef = ws; // Capture for closures\n\n            await new Promise<void>((resolve, reject) => {\n                // One outer deadline covers connect + OK round-trip. The old\n                // code cleared this on `onopen`, which meant a relay that\n                // opened but never sent OK would hang the promise forever.\n                const deadline = setTimeout(() => {\n                    wsRef.close();\n                    reject(new Error('Relay publish timeout'));\n                }, budgetFor(deadlineAt));\n\n                const cleanup = () => {\n                    clearTimeout(deadline);\n                    wsRef.close();\n                };\n\n                wsRef.onopen = () => {\n                    // Do NOT clear the deadline — we still need it in case\n                    // the relay never responds with OK.\n                    wsRef.send(JSON.stringify(['EVENT', event]));\n                };\n\n                wsRef.onmessage = (msg) => {\n                    try {\n                        const data = JSON.parse(msg.data);\n                        // Check for OK response\n                        if (data[0] === 'OK' && data[1] === event.id) {\n                            if (data[2] === true) {\n                                recordSuccess();\n                                cleanup();\n                                resolve();\n                            } else {\n                                log.warn(\n                                    { relay: relayUrl, reason: data[3] },\n                                    'Relay rejected event'\n                                );\n                                recordFailure();\n                                cleanup();\n                                reject(new Error(data[3] || 'Relay rejected event'));\n                            }\n                        }\n                    } catch (err) {\n                        log.error(\n                            { relay: relayUrl, error: err },\n                            'Failed to parse relay response'\n                        );\n                        recordFailure();\n                        cleanup();\n                        reject(err);\n                    }\n                };\n\n                wsRef.onerror = (err) => {\n                    log.error({ relay: relayUrl, error: err }, 'WebSocket error');\n                    recordFailure();\n                    cleanup();\n                    reject(err);\n                };\n\n                wsRef.onclose = () => {\n                    // Socket closed before we resolved/rejected — counts as\n                    // failure. clearTimeout here is safe (cleanup handles both).\n                    clearTimeout(deadline);\n                };\n            });\n        } catch (err) {\n            log.error({ relay: relayUrl, error: err }, 'Failed to publish to relay');\n            recordFailure();\n        } finally {\n            // Ensure WebSocket is closed\n            if (ws && ws.readyState !== WebSocket.CLOSED) {\n                ws.close();\n            }\n        }\n    });\n\n    await Promise.allSettled(publishPromises);\n\n    log.info({ successCount: success.length, failedCount: failed.length }, 'Publishing complete');\n\n    return { success, failed };\n}\n\n/**\n * Query relays for attestations by attestation ID\n */\nexport async function queryByAttestationId(\n    attestationId: string,\n    relays: string[] = DEFAULT_RELAYS\n): Promise<NostrEvent[]> {\n    const events: NostrEvent[] = [];\n\n    log.info({ attestationId, relayCount: relays.length }, 'Querying relays for attestation');\n\n    // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n    const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n    const queryPromises = relays.map(async (relayUrl) => {\n        let ws: WebSocket | null = null;\n\n        try {\n            ws = new WebSocket(relayUrl);\n            const wsRef = ws; // Capture for closures\n\n            await new Promise<void>((resolve, reject) => {\n                const timeout = setTimeout(() => {\n                    wsRef.close();\n                    reject(new Error('Query timeout'));\n                }, budgetFor(deadlineAt));\n\n                const cleanup = () => {\n                    clearTimeout(timeout);\n                    wsRef.close();\n                };\n\n                wsRef.onopen = () => {\n                    // Send REQ message for kind 30078 with d-tag = attestation_id\n                    const subscriptionId = `ochk_${Date.now()}`;\n                    wsRef.send(\n                        JSON.stringify([\n                            'REQ',\n                            subscriptionId,\n                            {\n                                kinds: [30078],\n                                '#d': [attestationId],\n                                limit: 1,\n                            },\n                        ])\n                    );\n                };\n\n                wsRef.onmessage = (msg) => {\n                    try {\n                        const data = JSON.parse(msg.data);\n                        if (data[0] === 'EVENT') {\n                            events.push(data[2]);\n                        } else if (data[0] === 'EOSE') {\n                            cleanup();\n                            resolve();\n                        }\n                    } catch (err) {\n                        log.error({ relay: relayUrl, error: err }, 'Failed to parse event');\n                    }\n                };\n\n                wsRef.onerror = (err) => {\n                    log.error({ relay: relayUrl, error: err }, 'WebSocket error during query');\n                    cleanup();\n                    reject(err);\n                };\n\n                wsRef.onclose = () => {\n                    clearTimeout(timeout);\n                };\n            });\n        } catch (err) {\n            log.error({ relay: relayUrl, error: err }, 'Failed to query relay');\n        } finally {\n            // Ensure WebSocket is closed\n            if (ws && ws.readyState !== WebSocket.CLOSED) {\n                ws.close();\n            }\n        }\n    });\n\n    await Promise.allSettled(queryPromises);\n\n    log.info({ eventCount: events.length }, 'Query complete');\n\n    return events;\n}\n\n/**\n * Query relays for attestations by Bitcoin address\n */\nexport async function queryByAddress(\n    address: string,\n    relays: string[] = DEFAULT_RELAYS\n): Promise<NostrEvent[]> {\n    const events: NostrEvent[] = [];\n\n    log.info({ address, relayCount: relays.length }, 'Querying relays for address');\n\n    // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n    const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n    const queryPromises = relays.map(async (relayUrl) => {\n        try {\n            const ws = new WebSocket(relayUrl);\n\n            await new Promise<void>((resolve, reject) => {\n                const timeout = setTimeout(() => {\n                    ws.close();\n                    reject(new Error('Query timeout'));\n                }, budgetFor(deadlineAt));\n\n                ws.onopen = () => {\n                    const subscriptionId = `ochk_addr_${Date.now()}`;\n                    ws.send(\n                        JSON.stringify([\n                            'REQ',\n                            subscriptionId,\n                            {\n                                kinds: [30078],\n                                // `#t`, NOT `#address`: NIP-12 relays index\n                                // single-letter tags only, so `#address`\n                                // matched nothing on any relay and this\n                                // function returned empty for every real\n                                // attestation. attest.ochk.io's verifier has\n                                // queried `#t` since the same fix landed\n                                // there; this is the back-port.\n                                '#t': [address],\n                                limit: 50,\n                            },\n                        ])\n                    );\n                };\n\n                ws.onmessage = (msg) => {\n                    try {\n                        const data = JSON.parse(msg.data);\n                        if (data[0] === 'EVENT') {\n                            events.push(data[2]);\n                        } else if (data[0] === 'EOSE') {\n                            clearTimeout(timeout);\n                            ws.close();\n                            resolve();\n                        }\n                    } catch (err) {\n                        log.error({ relay: relayUrl, error: err }, 'Failed to parse event');\n                    }\n                };\n\n                ws.onerror = (err) => {\n                    clearTimeout(timeout);\n                    log.error({ relay: relayUrl, error: err }, 'WebSocket error during query');\n                    reject(err);\n                };\n            });\n        } catch (err) {\n            log.error({ relay: relayUrl, error: err }, 'Failed to query relay');\n        }\n    });\n\n    await Promise.allSettled(queryPromises);\n\n    log.info({ eventCount: events.length }, 'Query complete');\n\n    return events;\n}\n\n/**\n * Query relays for attestations by identity (any protocol)\n */\nexport async function queryByIdentity(\n    protocol: string,\n    identifier: string,\n    relays: string[] = DEFAULT_RELAYS\n): Promise<NostrEvent[]> {\n    const events: NostrEvent[] = [];\n    const identityTag = `${protocol}:${identifier}`;\n    const identityTags =\n        protocol === 'nostr'\n            ? nostrIdentifierForms(identifier).map((f) => `nostr:${f}`)\n            : [identityTag];\n\n    log.info({ protocol, identifier, relayCount: relays.length }, 'Querying relays for identity');\n\n    // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n\n    const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n    const queryPromises = relays.map(async (relayUrl) => {\n        try {\n            const ws = new WebSocket(relayUrl);\n\n            await new Promise<void>((resolve, reject) => {\n                const timeout = setTimeout(() => {\n                    ws.close();\n                    reject(new Error('Query timeout'));\n                }, budgetFor(deadlineAt));\n\n                ws.onopen = () => {\n                    const subscriptionId = `ochk_identity_${Date.now()}`;\n                    ws.send(\n                        JSON.stringify([\n                            'REQ',\n                            subscriptionId,\n                            {\n                                kinds: [30078],\n                                '#i': identityTags,\n                                limit: 10,\n                            },\n                        ])\n                    );\n                };\n\n                ws.onmessage = (msg) => {\n                    try {\n                        const data = JSON.parse(msg.data);\n                        if (data[0] === 'EVENT') {\n                            events.push(data[2]);\n                        } else if (data[0] === 'EOSE') {\n                            clearTimeout(timeout);\n                            ws.close();\n                            resolve();\n                        }\n                    } catch (err) {\n                        log.error({ relay: relayUrl, error: err }, 'Failed to parse event');\n                    }\n                };\n\n                ws.onerror = (err) => {\n                    clearTimeout(timeout);\n                    log.error({ relay: relayUrl, error: err }, 'WebSocket error during query');\n                    reject(err);\n                };\n            });\n        } catch (err) {\n            log.error({ relay: relayUrl, error: err }, 'Failed to query relay');\n        }\n    });\n\n    await Promise.allSettled(queryPromises);\n\n    log.info({ eventCount: events.length }, 'Query complete');\n\n    return events;\n}\n\n/**\n * Query relays for the most recent attestations across every publisher.\n *\n * For aggregate views (network stats, a recent-activity feed), not per-subject\n * lookups. Filters on the `#t=[\"oc-attest\"]` family marker because kind 30078\n * is shared by every NIP-78 app: an unfiltered window fills with other apps'\n * data. Returns envelopes whose attestation_id matches their message,\n * deduplicated by attestation_id. Signatures are not checked — call verify()\n * on anything you act on.\n */\nexport async function queryRecent(\n    relays: string[] = DEFAULT_RELAYS,\n    limit: number = 200\n): Promise<AttestationEnvelope[]> {\n    const events: NostrEvent[] = [];\n\n    log.info({ relayCount: relays.length, limit }, 'Querying relays for recent attestations');\n\n    // One shared deadline for the whole fan-out — see FANOUT_DEADLINE_MS.\n    const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;\n\n    const queryPromises = relays.map(async (relayUrl) => {\n        try {\n            const ws = new WebSocket(relayUrl);\n\n            await new Promise<void>((resolve, reject) => {\n                const timeout = setTimeout(() => {\n                    ws.close();\n                    reject(new Error('Query timeout'));\n                }, budgetFor(deadlineAt));\n\n                ws.onopen = () => {\n                    const subscriptionId = `ochk_recent_${Date.now()}`;\n                    ws.send(\n                        JSON.stringify([\n                            'REQ',\n                            subscriptionId,\n                            { kinds: [ATTESTATION_EVENT_KIND], '#t': ['oc-attest'], limit },\n                        ])\n                    );\n                };\n\n                ws.onmessage = (msg) => {\n                    try {\n                        const data = JSON.parse(msg.data);\n                        if (data[0] === 'EVENT') {\n                            const ev = data[2] as NostrEvent;\n                            const scheme = ev.tags?.find((t) => t[0] === 'scheme')?.[1];\n                            const dTag = ev.tags?.find((t) => t[0] === 'd')?.[1];\n                            if ((scheme === 'bip322' || scheme === 'legacy') && dTag) {\n                                events.push(ev);\n                            }\n                        } else if (data[0] === 'EOSE') {\n                            clearTimeout(timeout);\n                            ws.close();\n                            resolve();\n                        }\n                    } catch (err) {\n                        log.error({ relay: relayUrl, error: err }, 'Failed to parse event');\n                    }\n                };\n\n                ws.onerror = (err) => {\n                    clearTimeout(timeout);\n                    log.error({ relay: relayUrl, error: err }, 'WebSocket error during query');\n                    reject(err);\n                };\n            });\n        } catch (err) {\n            log.error({ relay: relayUrl, error: err }, 'Failed to query relay');\n        }\n    });\n\n    await Promise.allSettled(queryPromises);\n\n    const seen = new Set<string>();\n    const envelopes: AttestationEnvelope[] = [];\n    for (const ev of events) {\n        const envelope = parseAttestationFromEvent(ev);\n        if (!envelope || seen.has(envelope.attestation_id)) continue;\n        if (!(await verifyAttestationEnvelope(envelope))) continue;\n        seen.add(envelope.attestation_id);\n        envelopes.push(envelope);\n    }\n\n    log.info({ eventCount: events.length, unique: envelopes.length }, 'Recent query complete');\n\n    return envelopes;\n}\n\n/**\n * Verify attestation envelope integrity\n * Checks that the attestation ID matches the message hash\n */\nexport async function verifyAttestationEnvelope(envelope: AttestationEnvelope): Promise<boolean> {\n    try {\n        // Re-compute attestation ID from message\n        const encoder = new TextEncoder();\n        const data = encoder.encode(envelope.message);\n        const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n        const hashArray = Array.from(new Uint8Array(hashBuffer));\n        const computedId = hashArray.map((b) => b.toString(16).padStart(2, '0')).join('');\n\n        return computedId === envelope.attestation_id;\n    } catch (err) {\n        log.error({ error: err }, 'Failed to verify attestation envelope');\n        return false;\n    }\n}\n\n/**\n * Parse attestation envelope from Nostr event content\n */\nexport function parseAttestationFromEvent(event: NostrEvent): AttestationEnvelope | null {\n    try {\n        const envelope = JSON.parse(event.content) as AttestationEnvelope;\n        return envelope;\n    } catch (err) {\n        log.error({ eventId: event.id, error: err }, 'Failed to parse attestation from event');\n        return null;\n    }\n}\n"]}

package/dist/nostr.mjs

@@ -1,4 +1,31 @@
-// src/utils/logger.ts
+import { bech32 } from '@scure/base';
+
+// src/nostr-pubkey.ts
+var HEX_64_RE = /^[0-9a-f]{64}$/;
+function toHex(bytes) {
+  let out = "";
+  for (const b of bytes) out += b.toString(16).padStart(2, "0");
+  return out;
+}
+function nostrPubkeyToHex(value) {
+  const trimmed = value.trim().toLowerCase();
+  if (HEX_64_RE.test(trimmed)) return trimmed;
+  if (!trimmed.startsWith("npub1")) return null;
+  try {
+    const decoded = bech32.decode(trimmed, 1023);
+    if (decoded.prefix !== "npub") return null;
+    const bytes = bech32.fromWords(decoded.words);
+    return bytes.length === 32 ? toHex(Uint8Array.from(bytes)) : null;
+  } catch {
+    return null;
+  }
+}
+function nostrIdentifierForms(identifier) {
+  const hex = nostrPubkeyToHex(identifier);
+  if (!hex) return [identifier];
+  const bytes = Uint8Array.from(hex.match(/../g).map((b) => parseInt(b, 16)));
+  return [bech32.encode("npub", bech32.toWords(bytes), 1023), hex];
+}
 function createLogger(namespace) {
   const shouldLog = (level) => {
     return false;
@@ -330,6 +357,7 @@ async function queryByAddress(address, relays = DEFAULT_RELAYS) {
 async function queryByIdentity(protocol, identifier, relays = DEFAULT_RELAYS) {
   const events = [];
   const identityTag = `${protocol}:${identifier}`;
+  const identityTags = protocol === "nostr" ? nostrIdentifierForms(identifier).map((f) => `nostr:${f}`) : [identityTag];
   log.info({ protocol, identifier, relayCount: relays.length }, "Querying relays for identity");
   const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;
   const queryPromises = relays.map(async (relayUrl) => {
@@ -348,7 +376,7 @@ async function queryByIdentity(protocol, identifier, relays = DEFAULT_RELAYS) {
               subscriptionId,
               {
                 kinds: [30078],
-                "#i": [identityTag],
+                "#i": identityTags,
                 limit: 10
               }
             ])
@@ -382,6 +410,70 @@ async function queryByIdentity(protocol, identifier, relays = DEFAULT_RELAYS) {
   log.info({ eventCount: events.length }, "Query complete");
   return events;
 }
+async function queryRecent(relays = DEFAULT_RELAYS, limit = 200) {
+  const events = [];
+  log.info({ relayCount: relays.length, limit }, "Querying relays for recent attestations");
+  const deadlineAt = Date.now() + FANOUT_DEADLINE_MS;
+  const queryPromises = relays.map(async (relayUrl) => {
+    try {
+      const ws = new WebSocket(relayUrl);
+      await new Promise((resolve, reject) => {
+        const timeout = setTimeout(() => {
+          ws.close();
+          reject(new Error("Query timeout"));
+        }, budgetFor(deadlineAt));
+        ws.onopen = () => {
+          const subscriptionId = `ochk_recent_${Date.now()}`;
+          ws.send(
+            JSON.stringify([
+              "REQ",
+              subscriptionId,
+              { kinds: [ATTESTATION_EVENT_KIND], "#t": ["oc-attest"], limit }
+            ])
+          );
+        };
+        ws.onmessage = (msg) => {
+          try {
+            const data = JSON.parse(msg.data);
+            if (data[0] === "EVENT") {
+              const ev = data[2];
+              const scheme = ev.tags?.find((t) => t[0] === "scheme")?.[1];
+              const dTag = ev.tags?.find((t) => t[0] === "d")?.[1];
+              if ((scheme === "bip322" || scheme === "legacy") && dTag) {
+                events.push(ev);
+              }
+            } else if (data[0] === "EOSE") {
+              clearTimeout(timeout);
+              ws.close();
+              resolve();
+            }
+          } catch (err) {
+            log.error({ relay: relayUrl, error: err }, "Failed to parse event");
+          }
+        };
+        ws.onerror = (err) => {
+          clearTimeout(timeout);
+          log.error({ relay: relayUrl, error: err }, "WebSocket error during query");
+          reject(err);
+        };
+      });
+    } catch (err) {
+      log.error({ relay: relayUrl, error: err }, "Failed to query relay");
+    }
+  });
+  await Promise.allSettled(queryPromises);
+  const seen = /* @__PURE__ */ new Set();
+  const envelopes = [];
+  for (const ev of events) {
+    const envelope = parseAttestationFromEvent(ev);
+    if (!envelope || seen.has(envelope.attestation_id)) continue;
+    if (!await verifyAttestationEnvelope(envelope)) continue;
+    seen.add(envelope.attestation_id);
+    envelopes.push(envelope);
+  }
+  log.info({ eventCount: events.length, unique: envelopes.length }, "Recent query complete");
+  return envelopes;
+}
 async function verifyAttestationEnvelope(envelope) {
   try {
     const encoder = new TextEncoder();
@@ -405,6 +497,6 @@ function parseAttestationFromEvent(event) {
   }
 }
 
-export { ATTESTATION_EVENT_KIND, DEFAULT_RELAYS, FANOUT_DEADLINE_MS, createAttestationEvent, getAddressFromEvent, getAttestationIdFromEvent, parseAttestationFromEvent, parseIdentitiesFromEvent, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, verifyAttestationEnvelope };
+export { ATTESTATION_EVENT_KIND, DEFAULT_RELAYS, FANOUT_DEADLINE_MS, createAttestationEvent, getAddressFromEvent, getAttestationIdFromEvent, parseAttestationFromEvent, parseIdentitiesFromEvent, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, queryRecent, verifyAttestationEnvelope };
 //# sourceMappingURL=nostr.mjs.map
 //# sourceMappingURL=nostr.mjs.map