@qntx/nostr 0.0.1

package/dist/nips/nip27.mjs

@@ -0,0 +1,175 @@
+import { decode } from "./nip19.mjs";
+//#region src/nips/nip27.ts
+const noCharacter = /\W/m;
+const noURLCharacter = /[^\w/] |[^\w/]$|$|,| /m;
+const MAX_HASHTAG_LENGTH = 42;
+/**
+* Parse note content (or a full event, to pick up emoji tags) into blocks.
+* Generator — consume with `for…of` or `[...parseContent(s)]`.
+*/
+function* parseContent(content) {
+	let emojis = [];
+	let text;
+	if (typeof content === "string") text = content;
+	else {
+		for (const tag of content.tags) if (tag[0] === "emoji" && tag[1] && tag[2]) emojis.push({
+			type: "emoji",
+			shortcode: tag[1],
+			url: tag[2]
+		});
+		text = content.content;
+	}
+	const max = text.length;
+	let prevIndex = 0;
+	let index = 0;
+	mainloop: while (index < max) {
+		const u = text.indexOf(":", index);
+		const h = text.indexOf("#", index);
+		if (u === -1 && h === -1) break;
+		if (u === -1 || h >= 0 && h < u) {
+			if (h === 0 || h > 0 && text[h - 1].match(noCharacter)) {
+				const m = text.slice(h + 1, h + MAX_HASHTAG_LENGTH).match(noCharacter);
+				const end = m ? h + 1 + (m.index ?? 0) : max;
+				if (prevIndex !== h) yield {
+					type: "text",
+					text: text.slice(prevIndex, h)
+				};
+				yield {
+					type: "hashtag",
+					value: text.slice(h + 1, end)
+				};
+				index = end;
+				prevIndex = index;
+				continue mainloop;
+			}
+			index = h + 1;
+			continue mainloop;
+		}
+		if (u >= 5 && text.slice(u - 5, u) === "nostr") {
+			const m = text.slice(u + 60).match(noCharacter);
+			const end = m ? u + 60 + (m.index ?? 0) : max;
+			try {
+				const { data, type } = decode(text.slice(u + 1, end));
+				let pointer;
+				switch (type) {
+					case "npub":
+						pointer = { pubkey: data };
+						break;
+					case "note":
+						pointer = { id: data };
+						break;
+					case "nprofile":
+					case "nevent":
+					case "naddr":
+						pointer = data;
+						break;
+					case "nsec":
+						index = end + 1;
+						continue mainloop;
+					default:
+						index = u + 1;
+						continue mainloop;
+				}
+				if (prevIndex !== u - 5) yield {
+					type: "text",
+					text: text.slice(prevIndex, u - 5)
+				};
+				yield {
+					type: "reference",
+					pointer
+				};
+				index = end;
+				prevIndex = index;
+				continue mainloop;
+			} catch {
+				index = u + 1;
+				continue mainloop;
+			}
+		}
+		if (u >= 5 && text.slice(u - 5, u) === "https" || u >= 4 && text.slice(u - 4, u) === "http") {
+			const m = text.slice(u + 4).match(noURLCharacter);
+			const end = m ? u + 4 + (m.index ?? 0) : max;
+			const prefixLen = text[u - 1] === "s" ? 5 : 4;
+			try {
+				const url = new URL(text.slice(u - prefixLen, end));
+				if (!url.hostname.includes(".")) throw new Error("invalid url");
+				if (prevIndex !== u - prefixLen) yield {
+					type: "text",
+					text: text.slice(prevIndex, u - prefixLen)
+				};
+				const path = url.pathname;
+				if (/\.(png|jpe?g|gif|webp|heic|svg)$/i.test(path)) yield {
+					type: "image",
+					url: url.toString()
+				};
+				else if (/\.(mp4|avi|webm|mkv|mov)$/i.test(path)) yield {
+					type: "video",
+					url: url.toString()
+				};
+				else if (/\.(mp3|aac|ogg|opus|wav|flac)$/i.test(path)) yield {
+					type: "audio",
+					url: url.toString()
+				};
+				else yield {
+					type: "url",
+					url: url.toString()
+				};
+				index = end;
+				prevIndex = index;
+				continue mainloop;
+			} catch {
+				index = end + 1;
+				continue mainloop;
+			}
+		}
+		if (u >= 3 && text.slice(u - 3, u) === "wss" || u >= 2 && text.slice(u - 2, u) === "ws") {
+			const m = text.slice(u + 4).match(noURLCharacter);
+			const end = m ? u + 4 + (m.index ?? 0) : max;
+			const prefixLen = text[u - 1] === "s" ? 3 : 2;
+			try {
+				const url = new URL(text.slice(u - prefixLen, end));
+				if (!url.hostname.includes(".")) throw new Error("invalid ws url");
+				if (prevIndex !== u - prefixLen) yield {
+					type: "text",
+					text: text.slice(prevIndex, u - prefixLen)
+				};
+				yield {
+					type: "relay",
+					url: url.toString()
+				};
+				index = end;
+				prevIndex = index;
+				continue mainloop;
+			} catch {
+				index = end + 1;
+				continue mainloop;
+			}
+		}
+		for (const emoji of emojis) {
+			const endColon = u + emoji.shortcode.length + 1;
+			if (text[endColon] === ":" && text.slice(u + 1, endColon) === emoji.shortcode) {
+				if (prevIndex !== u) yield {
+					type: "text",
+					text: text.slice(prevIndex, u)
+				};
+				yield emoji;
+				index = endColon + 1;
+				prevIndex = index;
+				continue mainloop;
+			}
+		}
+		index = u + 1;
+	}
+	if (prevIndex !== max) yield {
+		type: "text",
+		text: text.slice(prevIndex)
+	};
+}
+/** Collect all content blocks into an array. */
+function parseContentBlocks(content) {
+	return [...parseContent(content)];
+}
+//#endregion
+export { parseContent, parseContentBlocks };
+
+//# sourceMappingURL=nip27.mjs.map

package/dist/nips/nip27.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nip27.mjs","names":[],"sources":["../../src/nips/nip27.ts"],"sourcesContent":["/**\n * NIP-27: Text Note References\n * Tokenizes note content into text, nostr: references, URLs, hashtags, media, relays, emoji.\n * @see https://github.com/nostr-protocol/nips/blob/master/27.md\n */\nimport type { Event } from \"../core/event.ts\";\nimport { decode, type AddressPointer, type EventPointer, type ProfilePointer } from \"./nip19.ts\";\n\nexport type ContentBlock =\n  | { type: \"text\"; text: string }\n  | { type: \"reference\"; pointer: ProfilePointer | AddressPointer | EventPointer }\n  | { type: \"url\"; url: string }\n  | { type: \"relay\"; url: string }\n  | { type: \"image\"; url: string }\n  | { type: \"video\"; url: string }\n  | { type: \"audio\"; url: string }\n  | { type: \"emoji\"; shortcode: string; url: string }\n  | { type: \"hashtag\"; value: string };\n\nconst noCharacter = /\\W/m;\nconst noURLCharacter = /[^\\w/] |[^\\w/]$|$|,| /m;\nconst MAX_HASHTAG_LENGTH = 42;\n\n/**\n * Parse note content (or a full event, to pick up emoji tags) into blocks.\n * Generator — consume with `for…of` or `[...parseContent(s)]`.\n */\nexport function* parseContent(\n  content: string | Pick<Event, \"content\" | \"tags\">,\n): Iterable<ContentBlock> {\n  let emojis: Array<{ type: \"emoji\"; shortcode: string; url: string }> = [];\n  let text: string;\n\n  if (typeof content === \"string\") {\n    text = content;\n  } else {\n    for (const tag of content.tags) {\n      if (tag[0] === \"emoji\" && tag[1] && tag[2]) {\n        emojis.push({ type: \"emoji\", shortcode: tag[1], url: tag[2] });\n      }\n    }\n    text = content.content;\n  }\n\n  const max = text.length;\n  let prevIndex = 0;\n  let index = 0;\n\n  mainloop: while (index < max) {\n    const u = text.indexOf(\":\", index);\n    const h = text.indexOf(\"#\", index);\n    if (u === -1 && h === -1) break;\n\n    if (u === -1 || (h >= 0 && h < u)) {\n      // hashtag\n      if (h === 0 || (h > 0 && text[h - 1]!.match(noCharacter))) {\n        const m = text.slice(h + 1, h + MAX_HASHTAG_LENGTH).match(noCharacter);\n        const end = m ? h + 1 + (m.index ?? 0) : max;\n        if (prevIndex !== h) yield { type: \"text\", text: text.slice(prevIndex, h) };\n        yield { type: \"hashtag\", value: text.slice(h + 1, end) };\n        index = end;\n        prevIndex = index;\n        continue mainloop;\n      }\n      index = h + 1;\n      continue mainloop;\n    }\n\n    // nostr: references\n    if (u >= 5 && text.slice(u - 5, u) === \"nostr\") {\n      const m = text.slice(u + 60).match(noCharacter);\n      const end = m ? u + 60 + (m.index ?? 0) : max;\n      try {\n        const { data, type } = decode(text.slice(u + 1, end));\n        let pointer: ProfilePointer | AddressPointer | EventPointer | undefined;\n        switch (type) {\n          case \"npub\":\n            pointer = { pubkey: data };\n            break;\n          case \"note\":\n            pointer = { id: data };\n            break;\n          case \"nprofile\":\n          case \"nevent\":\n          case \"naddr\":\n            pointer = data as ProfilePointer | EventPointer | AddressPointer;\n            break;\n          case \"nsec\":\n            index = end + 1;\n            continue mainloop;\n          default:\n            index = u + 1;\n            continue mainloop;\n        }\n        if (prevIndex !== u - 5) yield { type: \"text\", text: text.slice(prevIndex, u - 5) };\n        yield { type: \"reference\", pointer };\n        index = end;\n        prevIndex = index;\n        continue mainloop;\n      } catch {\n        index = u + 1;\n        continue mainloop;\n      }\n    }\n\n    // http(s) URLs\n    if (\n      (u >= 5 && text.slice(u - 5, u) === \"https\") ||\n      (u >= 4 && text.slice(u - 4, u) === \"http\")\n    ) {\n      const m = text.slice(u + 4).match(noURLCharacter);\n      const end = m ? u + 4 + (m.index ?? 0) : max;\n      const prefixLen = text[u - 1] === \"s\" ? 5 : 4;\n      try {\n        const url = new URL(text.slice(u - prefixLen, end));\n        if (!url.hostname.includes(\".\")) throw new Error(\"invalid url\");\n        if (prevIndex !== u - prefixLen) {\n          yield { type: \"text\", text: text.slice(prevIndex, u - prefixLen) };\n        }\n        const path = url.pathname;\n        if (/\\.(png|jpe?g|gif|webp|heic|svg)$/i.test(path)) {\n          yield { type: \"image\", url: url.toString() };\n        } else if (/\\.(mp4|avi|webm|mkv|mov)$/i.test(path)) {\n          yield { type: \"video\", url: url.toString() };\n        } else if (/\\.(mp3|aac|ogg|opus|wav|flac)$/i.test(path)) {\n          yield { type: \"audio\", url: url.toString() };\n        } else {\n          yield { type: \"url\", url: url.toString() };\n        }\n        index = end;\n        prevIndex = index;\n        continue mainloop;\n      } catch {\n        index = end + 1;\n        continue mainloop;\n      }\n    }\n\n    // ws(s) relays\n    if ((u >= 3 && text.slice(u - 3, u) === \"wss\") || (u >= 2 && text.slice(u - 2, u) === \"ws\")) {\n      const m = text.slice(u + 4).match(noURLCharacter);\n      const end = m ? u + 4 + (m.index ?? 0) : max;\n      const prefixLen = text[u - 1] === \"s\" ? 3 : 2;\n      try {\n        const url = new URL(text.slice(u - prefixLen, end));\n        if (!url.hostname.includes(\".\")) throw new Error(\"invalid ws url\");\n        if (prevIndex !== u - prefixLen) {\n          yield { type: \"text\", text: text.slice(prevIndex, u - prefixLen) };\n        }\n        yield { type: \"relay\", url: url.toString() };\n        index = end;\n        prevIndex = index;\n        continue mainloop;\n      } catch {\n        index = end + 1;\n        continue mainloop;\n      }\n    }\n\n    // custom emoji shortcodes :code:\n    for (const emoji of emojis) {\n      const endColon = u + emoji.shortcode.length + 1;\n      if (text[endColon] === \":\" && text.slice(u + 1, endColon) === emoji.shortcode) {\n        if (prevIndex !== u) yield { type: \"text\", text: text.slice(prevIndex, u) };\n        yield emoji;\n        index = endColon + 1;\n        prevIndex = index;\n        continue mainloop;\n      }\n    }\n\n    index = u + 1;\n  }\n\n  if (prevIndex !== max) {\n    yield { type: \"text\", text: text.slice(prevIndex) };\n  }\n}\n\n/** Collect all content blocks into an array. */\nexport function parseContentBlocks(\n  content: string | Pick<Event, \"content\" | \"tags\">,\n): ContentBlock[] {\n  return [...parseContent(content)];\n}\n"],"mappings":";;AAmBA,MAAM,cAAc;AACpB,MAAM,iBAAiB;AACvB,MAAM,qBAAqB;;;;;AAM3B,UAAiB,aACf,SACwB;CACxB,IAAI,SAAmE,CAAC;CACxE,IAAI;CAEJ,IAAI,OAAO,YAAY,UACrB,OAAO;MACF;EACL,KAAK,MAAM,OAAO,QAAQ,MACxB,IAAI,IAAI,OAAO,WAAW,IAAI,MAAM,IAAI,IACtC,OAAO,KAAK;GAAE,MAAM;GAAS,WAAW,IAAI;GAAI,KAAK,IAAI;EAAG,CAAC;EAGjE,OAAO,QAAQ;CACjB;CAEA,MAAM,MAAM,KAAK;CACjB,IAAI,YAAY;CAChB,IAAI,QAAQ;CAEZ,UAAU,OAAO,QAAQ,KAAK;EAC5B,MAAM,IAAI,KAAK,QAAQ,KAAK,KAAK;EACjC,MAAM,IAAI,KAAK,QAAQ,KAAK,KAAK;EACjC,IAAI,MAAM,MAAM,MAAM,IAAI;EAE1B,IAAI,MAAM,MAAO,KAAK,KAAK,IAAI,GAAI;GAEjC,IAAI,MAAM,KAAM,IAAI,KAAK,KAAK,IAAI,EAAE,CAAE,MAAM,WAAW,GAAI;IACzD,MAAM,IAAI,KAAK,MAAM,IAAI,GAAG,IAAI,kBAAkB,CAAC,CAAC,MAAM,WAAW;IACrE,MAAM,MAAM,IAAI,IAAI,KAAK,EAAE,SAAS,KAAK;IACzC,IAAI,cAAc,GAAG,MAAM;KAAE,MAAM;KAAQ,MAAM,KAAK,MAAM,WAAW,CAAC;IAAE;IAC1E,MAAM;KAAE,MAAM;KAAW,OAAO,KAAK,MAAM,IAAI,GAAG,GAAG;IAAE;IACvD,QAAQ;IACR,YAAY;IACZ,SAAS;GACX;GACA,QAAQ,IAAI;GACZ,SAAS;EACX;EAGA,IAAI,KAAK,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS;GAC9C,MAAM,IAAI,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,WAAW;GAC9C,MAAM,MAAM,IAAI,IAAI,MAAM,EAAE,SAAS,KAAK;GAC1C,IAAI;IACF,MAAM,EAAE,MAAM,SAAS,OAAO,KAAK,MAAM,IAAI,GAAG,GAAG,CAAC;IACpD,IAAI;IACJ,QAAQ,MAAR;KACE,KAAK;MACH,UAAU,EAAE,QAAQ,KAAK;MACzB;KACF,KAAK;MACH,UAAU,EAAE,IAAI,KAAK;MACrB;KACF,KAAK;KACL,KAAK;KACL,KAAK;MACH,UAAU;MACV;KACF,KAAK;MACH,QAAQ,MAAM;MACd,SAAS;KACX;MACE,QAAQ,IAAI;MACZ,SAAS;IACb;IACA,IAAI,cAAc,IAAI,GAAG,MAAM;KAAE,MAAM;KAAQ,MAAM,KAAK,MAAM,WAAW,IAAI,CAAC;IAAE;IAClF,MAAM;KAAE,MAAM;KAAa;IAAQ;IACnC,QAAQ;IACR,YAAY;IACZ,SAAS;GACX,QAAQ;IACN,QAAQ,IAAI;IACZ,SAAS;GACX;EACF;EAGA,IACG,KAAK,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,WACnC,KAAK,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,QACpC;GACA,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,cAAc;GAChD,MAAM,MAAM,IAAI,IAAI,KAAK,EAAE,SAAS,KAAK;GACzC,MAAM,YAAY,KAAK,IAAI,OAAO,MAAM,IAAI;GAC5C,IAAI;IACF,MAAM,MAAM,IAAI,IAAI,KAAK,MAAM,IAAI,WAAW,GAAG,CAAC;IAClD,IAAI,CAAC,IAAI,SAAS,SAAS,GAAG,GAAG,MAAM,IAAI,MAAM,aAAa;IAC9D,IAAI,cAAc,IAAI,WACpB,MAAM;KAAE,MAAM;KAAQ,MAAM,KAAK,MAAM,WAAW,IAAI,SAAS;IAAE;IAEnE,MAAM,OAAO,IAAI;IACjB,IAAI,oCAAoC,KAAK,IAAI,GAC/C,MAAM;KAAE,MAAM;KAAS,KAAK,IAAI,SAAS;IAAE;SACtC,IAAI,6BAA6B,KAAK,IAAI,GAC/C,MAAM;KAAE,MAAM;KAAS,KAAK,IAAI,SAAS;IAAE;SACtC,IAAI,kCAAkC,KAAK,IAAI,GACpD,MAAM;KAAE,MAAM;KAAS,KAAK,IAAI,SAAS;IAAE;SAE3C,MAAM;KAAE,MAAM;KAAO,KAAK,IAAI,SAAS;IAAE;IAE3C,QAAQ;IACR,YAAY;IACZ,SAAS;GACX,QAAQ;IACN,QAAQ,MAAM;IACd,SAAS;GACX;EACF;EAGA,IAAK,KAAK,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,SAAW,KAAK,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,MAAO;GAC3F,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,cAAc;GAChD,MAAM,MAAM,IAAI,IAAI,KAAK,EAAE,SAAS,KAAK;GACzC,MAAM,YAAY,KAAK,IAAI,OAAO,MAAM,IAAI;GAC5C,IAAI;IACF,MAAM,MAAM,IAAI,IAAI,KAAK,MAAM,IAAI,WAAW,GAAG,CAAC;IAClD,IAAI,CAAC,IAAI,SAAS,SAAS,GAAG,GAAG,MAAM,IAAI,MAAM,gBAAgB;IACjE,IAAI,cAAc,IAAI,WACpB,MAAM;KAAE,MAAM;KAAQ,MAAM,KAAK,MAAM,WAAW,IAAI,SAAS;IAAE;IAEnE,MAAM;KAAE,MAAM;KAAS,KAAK,IAAI,SAAS;IAAE;IAC3C,QAAQ;IACR,YAAY;IACZ,SAAS;GACX,QAAQ;IACN,QAAQ,MAAM;IACd,SAAS;GACX;EACF;EAGA,KAAK,MAAM,SAAS,QAAQ;GAC1B,MAAM,WAAW,IAAI,MAAM,UAAU,SAAS;GAC9C,IAAI,KAAK,cAAc,OAAO,KAAK,MAAM,IAAI,GAAG,QAAQ,MAAM,MAAM,WAAW;IAC7E,IAAI,cAAc,GAAG,MAAM;KAAE,MAAM;KAAQ,MAAM,KAAK,MAAM,WAAW,CAAC;IAAE;IAC1E,MAAM;IACN,QAAQ,WAAW;IACnB,YAAY;IACZ,SAAS;GACX;EACF;EAEA,QAAQ,IAAI;CACd;CAEA,IAAI,cAAc,KAChB,MAAM;EAAE,MAAM;EAAQ,MAAM,KAAK,MAAM,SAAS;CAAE;AAEtD;;AAGA,SAAgB,mBACd,SACgB;CAChB,OAAO,CAAC,GAAG,aAAa,OAAO,CAAC;AAClC"}

package/dist/nips/nip42.d.mts

@@ -0,0 +1,12 @@
+import { n as EventTemplate } from "../event-B5D2jxt_.mjs";
+//#region src/nips/nip42.d.ts
+/**
+ * Build an unsigned NIP-42 AUTH event template for the given relay challenge.
+ * Caller must sign with their `NostrSigner` / keys.
+ */
+declare function makeAuthEvent(relayURL: string, challenge: string): EventTemplate;
+/** True when a CLOSED reason requests NIP-42 authentication. */
+declare function isAuthRequired(reason: string): boolean;
+//#endregion
+export { isAuthRequired, makeAuthEvent };
+//# sourceMappingURL=nip42.d.mts.map

package/dist/nips/nip42.mjs

@@ -0,0 +1,22 @@
+import { t as Kind } from "../kind-BLl4cLOc.mjs";
+//#region src/nips/nip42.ts
+/**
+* Build an unsigned NIP-42 AUTH event template for the given relay challenge.
+* Caller must sign with their `NostrSigner` / keys.
+*/
+function makeAuthEvent(relayURL, challenge) {
+	return {
+		kind: Kind.ClientAuth,
+		created_at: Math.floor(Date.now() / 1e3),
+		tags: [["relay", relayURL], ["challenge", challenge]],
+		content: ""
+	};
+}
+/** True when a CLOSED reason requests NIP-42 authentication. */
+function isAuthRequired(reason) {
+	return reason.startsWith("auth-required:");
+}
+//#endregion
+export { isAuthRequired, makeAuthEvent };
+
+//# sourceMappingURL=nip42.mjs.map

package/dist/nips/nip42.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nip42.mjs","names":[],"sources":["../../src/nips/nip42.ts"],"sourcesContent":["import type { EventTemplate } from \"../core/event.ts\";\nimport { Kind } from \"../core/kind.ts\";\n\n/**\n * Build an unsigned NIP-42 AUTH event template for the given relay challenge.\n * Caller must sign with their `NostrSigner` / keys.\n */\nexport function makeAuthEvent(relayURL: string, challenge: string): EventTemplate {\n  return {\n    kind: Kind.ClientAuth,\n    created_at: Math.floor(Date.now() / 1000),\n    tags: [\n      [\"relay\", relayURL],\n      [\"challenge\", challenge],\n    ],\n    content: \"\",\n  };\n}\n\n/** True when a CLOSED reason requests NIP-42 authentication. */\nexport function isAuthRequired(reason: string): boolean {\n  return reason.startsWith(\"auth-required:\");\n}\n"],"mappings":";;;;;;AAOA,SAAgB,cAAc,UAAkB,WAAkC;CAChF,OAAO;EACL,MAAM,KAAK;EACX,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;EACxC,MAAM,CACJ,CAAC,SAAS,QAAQ,GAClB,CAAC,aAAa,SAAS,CACzB;EACA,SAAS;CACX;AACF;;AAGA,SAAgB,eAAe,QAAyB;CACtD,OAAO,OAAO,WAAW,gBAAgB;AAC3C"}

package/dist/nips/nip44.d.mts

@@ -0,0 +1,12 @@
+//#region src/nips/nip44.d.ts
+declare function getConversationKey(privkeyA: Uint8Array, pubkeyB: string): Uint8Array;
+declare function calcPaddedLen(len: number): number;
+declare function encrypt(plaintext: string, conversationKey: Uint8Array, nonce?: Uint8Array): string;
+declare function decrypt(payload: string, conversationKey: Uint8Array): string;
+/** Convenience: derive conversation key from secret/public pair and encrypt. */
+declare function encryptToPubkey(plaintext: string, secretKey: Uint8Array, peerPubkey: string): string;
+/** Convenience: decrypt a payload from a peer pubkey. */
+declare function decryptFromPubkey(payload: string, secretKey: Uint8Array, peerPubkey: string): string;
+//#endregion
+export { calcPaddedLen, decrypt, decryptFromPubkey, encrypt, encryptToPubkey, getConversationKey };
+//# sourceMappingURL=nip44.d.mts.map

package/dist/nips/nip44.mjs

@@ -0,0 +1,125 @@
+import { c as utf8Decoder, i as hexToBytes, l as utf8Encoder, n as assertSecretKeyBytes, t as assertHex32 } from "../util-6tfLQ9JF.mjs";
+import { t as CryptoError } from "../error-DZEs5OuZ.mjs";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { secp256k1 } from "@noble/curves/secp256k1.js";
+import { concatBytes, randomBytes } from "@noble/hashes/utils.js";
+import { base64 } from "@scure/base";
+import { chacha20 } from "@noble/ciphers/chacha.js";
+import { equalBytes } from "@noble/ciphers/utils.js";
+import { expand, extract } from "@noble/hashes/hkdf.js";
+import { hmac } from "@noble/hashes/hmac.js";
+//#region src/nips/nip44.ts
+const minPlaintextSize = 1;
+const maxPlaintextSize = 4294967295;
+const extendedPrefixThreshold = 65536;
+function assert32(bytes, label) {
+	if (bytes.length !== 32) throw new CryptoError(`${label} must be 32 bytes`);
+}
+function getConversationKey(privkeyA, pubkeyB) {
+	assertSecretKeyBytes(privkeyA);
+	assertHex32(pubkeyB, "public key");
+	const sharedX = secp256k1.getSharedSecret(privkeyA, hexToBytes("02" + pubkeyB.toLowerCase())).subarray(1, 33);
+	return extract(sha256, sharedX, utf8Encoder.encode("nip44-v2"));
+}
+function getMessageKeys(conversationKey, nonce) {
+	assert32(conversationKey, "conversation_key");
+	assert32(nonce, "nonce");
+	const keys = expand(sha256, conversationKey, nonce, 76);
+	return {
+		chacha_key: keys.subarray(0, 32),
+		chacha_nonce: keys.subarray(32, 44),
+		hmac_key: keys.subarray(44, 76)
+	};
+}
+function calcPaddedLen(len) {
+	if (!Number.isSafeInteger(len) || len < 1) throw new CryptoError("expected positive integer");
+	if (len <= 32) return 32;
+	const nextPower = 2 ** (Math.floor(Math.log2(len - 1)) + 1);
+	const chunk = nextPower <= 256 ? 32 : nextPower / 8;
+	return chunk * (Math.floor((len - 1) / chunk) + 1);
+}
+function writeU16BE(num) {
+	if (!Number.isSafeInteger(num) || num < minPlaintextSize || num > 65535) throw new CryptoError("invalid plaintext size: must be between 1 and 65535 bytes");
+	const arr = /* @__PURE__ */ new Uint8Array(2);
+	new DataView(arr.buffer).setUint16(0, num, false);
+	return arr;
+}
+function writeU32BE(num) {
+	if (!Number.isSafeInteger(num) || num < extendedPrefixThreshold || num > maxPlaintextSize) throw new CryptoError("invalid plaintext size: must be between 65536 and 4294967295 bytes");
+	const arr = /* @__PURE__ */ new Uint8Array(4);
+	new DataView(arr.buffer).setUint32(0, num, false);
+	return arr;
+}
+function pad(plaintext) {
+	const unpadded = utf8Encoder.encode(plaintext);
+	const unpaddedLen = unpadded.length;
+	if (unpaddedLen < minPlaintextSize || unpaddedLen > maxPlaintextSize) throw new CryptoError("invalid plaintext size: must be between 1 and 4294967295 bytes");
+	const prefix = unpaddedLen >= extendedPrefixThreshold ? concatBytes(new Uint8Array([0, 0]), writeU32BE(unpaddedLen)) : writeU16BE(unpaddedLen);
+	const suffix = new Uint8Array(calcPaddedLen(unpaddedLen) - unpaddedLen);
+	return concatBytes(prefix, unpadded, suffix);
+}
+function unpad(padded) {
+	const dv = new DataView(padded.buffer, padded.byteOffset, padded.byteLength);
+	const firstTwo = dv.getUint16(0);
+	let unpaddedLen;
+	let prefixLen;
+	if (firstTwo === 0) {
+		unpaddedLen = dv.getUint32(2);
+		if (unpaddedLen < extendedPrefixThreshold) throw new CryptoError("invalid padding");
+		prefixLen = 6;
+	} else {
+		unpaddedLen = firstTwo;
+		prefixLen = 2;
+	}
+	const unpadded = padded.subarray(prefixLen, prefixLen + unpaddedLen);
+	if (unpaddedLen < minPlaintextSize || unpaddedLen > maxPlaintextSize || unpadded.length !== unpaddedLen || padded.length !== prefixLen + calcPaddedLen(unpaddedLen)) throw new CryptoError("invalid padding");
+	return utf8Decoder.decode(unpadded);
+}
+function hmacAad(key, message, aad) {
+	if (aad.length !== 32) throw new CryptoError("AAD associated data must be 32 bytes");
+	return hmac(sha256, key, concatBytes(aad, message));
+}
+function decodePayload(payload) {
+	if (typeof payload !== "string") throw new CryptoError("payload must be a valid string");
+	if (payload.length < 132) throw new CryptoError("invalid payload length: " + payload.length);
+	if (payload[0] === "#") throw new CryptoError("unknown encryption version");
+	let data;
+	try {
+		data = base64.decode(payload);
+	} catch (error) {
+		throw new CryptoError("invalid base64: " + (error instanceof Error ? error.message : "decode failed"));
+	}
+	if (data.length < 99) throw new CryptoError("invalid data length: " + data.length);
+	if (data[0] !== 2) throw new CryptoError("unknown encryption version " + data[0]);
+	return {
+		nonce: data.subarray(1, 33),
+		ciphertext: data.subarray(33, -32),
+		mac: data.subarray(-32)
+	};
+}
+function encrypt(plaintext, conversationKey, nonce = randomBytes(32)) {
+	const { chacha_key, chacha_nonce, hmac_key } = getMessageKeys(conversationKey, nonce);
+	const padded = pad(plaintext);
+	const ciphertext = chacha20(chacha_key, chacha_nonce, padded);
+	const mac = hmacAad(hmac_key, ciphertext, nonce);
+	return base64.encode(concatBytes(new Uint8Array([2]), nonce, ciphertext, mac));
+}
+function decrypt(payload, conversationKey) {
+	const { nonce, ciphertext, mac } = decodePayload(payload);
+	const { chacha_key, chacha_nonce, hmac_key } = getMessageKeys(conversationKey, nonce);
+	const calculatedMac = hmacAad(hmac_key, ciphertext, nonce);
+	if (!equalBytes(calculatedMac, mac)) throw new CryptoError("invalid MAC");
+	return unpad(chacha20(chacha_key, chacha_nonce, ciphertext));
+}
+/** Convenience: derive conversation key from secret/public pair and encrypt. */
+function encryptToPubkey(plaintext, secretKey, peerPubkey) {
+	return encrypt(plaintext, getConversationKey(secretKey, peerPubkey));
+}
+/** Convenience: decrypt a payload from a peer pubkey. */
+function decryptFromPubkey(payload, secretKey, peerPubkey) {
+	return decrypt(payload, getConversationKey(secretKey, peerPubkey));
+}
+//#endregion
+export { calcPaddedLen, decrypt, decryptFromPubkey, encrypt, encryptToPubkey, getConversationKey };
+
+//# sourceMappingURL=nip44.mjs.map

package/dist/nips/nip44.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nip44.mjs","names":["hkdf_extract","hkdf_expand"],"sources":["../../src/nips/nip44.ts"],"sourcesContent":["import { chacha20 } from \"@noble/ciphers/chacha.js\";\nimport { equalBytes } from \"@noble/ciphers/utils.js\";\nimport { secp256k1 } from \"@noble/curves/secp256k1.js\";\nimport { extract as hkdf_extract, expand as hkdf_expand } from \"@noble/hashes/hkdf.js\";\nimport { hmac } from \"@noble/hashes/hmac.js\";\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport { concatBytes, randomBytes } from \"@noble/hashes/utils.js\";\nimport { base64 } from \"@scure/base\";\nimport { CryptoError } from \"../core/error.ts\";\nimport {\n  assertHex32,\n  assertSecretKeyBytes,\n  hexToBytes,\n  utf8Decoder,\n  utf8Encoder,\n} from \"../core/util.ts\";\n\nconst minPlaintextSize = 0x0001;\nconst maxPlaintextSize = 0xffffffff;\nconst extendedPrefixThreshold = 0x10000;\n\nfunction assert32(bytes: Uint8Array, label: string): void {\n  if (bytes.length !== 32) throw new CryptoError(`${label} must be 32 bytes`);\n}\n\nexport function getConversationKey(privkeyA: Uint8Array, pubkeyB: string): Uint8Array {\n  assertSecretKeyBytes(privkeyA);\n  assertHex32(pubkeyB, \"public key\");\n  const sharedX = secp256k1\n    .getSharedSecret(privkeyA, hexToBytes(\"02\" + pubkeyB.toLowerCase()))\n    .subarray(1, 33);\n  return hkdf_extract(sha256, sharedX, utf8Encoder.encode(\"nip44-v2\"));\n}\n\nfunction getMessageKeys(\n  conversationKey: Uint8Array,\n  nonce: Uint8Array,\n): { chacha_key: Uint8Array; chacha_nonce: Uint8Array; hmac_key: Uint8Array } {\n  assert32(conversationKey, \"conversation_key\");\n  assert32(nonce, \"nonce\");\n  const keys = hkdf_expand(sha256, conversationKey, nonce, 76);\n  return {\n    chacha_key: keys.subarray(0, 32),\n    chacha_nonce: keys.subarray(32, 44),\n    hmac_key: keys.subarray(44, 76),\n  };\n}\n\nexport function calcPaddedLen(len: number): number {\n  if (!Number.isSafeInteger(len) || len < 1) throw new CryptoError(\"expected positive integer\");\n  if (len <= 32) return 32;\n  const nextPower = 2 ** (Math.floor(Math.log2(len - 1)) + 1);\n  const chunk = nextPower <= 256 ? 32 : nextPower / 8;\n  return chunk * (Math.floor((len - 1) / chunk) + 1);\n}\n\nfunction writeU16BE(num: number): Uint8Array {\n  if (!Number.isSafeInteger(num) || num < minPlaintextSize || num > 0xffff) {\n    throw new CryptoError(\"invalid plaintext size: must be between 1 and 65535 bytes\");\n  }\n  const arr = new Uint8Array(2);\n  new DataView(arr.buffer).setUint16(0, num, false);\n  return arr;\n}\n\nfunction writeU32BE(num: number): Uint8Array {\n  if (!Number.isSafeInteger(num) || num < extendedPrefixThreshold || num > maxPlaintextSize) {\n    throw new CryptoError(\"invalid plaintext size: must be between 65536 and 4294967295 bytes\");\n  }\n  const arr = new Uint8Array(4);\n  new DataView(arr.buffer).setUint32(0, num, false);\n  return arr;\n}\n\nfunction pad(plaintext: string): Uint8Array {\n  const unpadded = utf8Encoder.encode(plaintext);\n  const unpaddedLen = unpadded.length;\n  if (unpaddedLen < minPlaintextSize || unpaddedLen > maxPlaintextSize) {\n    throw new CryptoError(\"invalid plaintext size: must be between 1 and 4294967295 bytes\");\n  }\n  const prefix =\n    unpaddedLen >= extendedPrefixThreshold\n      ? concatBytes(new Uint8Array([0, 0]), writeU32BE(unpaddedLen))\n      : writeU16BE(unpaddedLen);\n  const suffix = new Uint8Array(calcPaddedLen(unpaddedLen) - unpaddedLen);\n  return concatBytes(prefix, unpadded, suffix);\n}\n\nfunction unpad(padded: Uint8Array): string {\n  const dv = new DataView(padded.buffer, padded.byteOffset, padded.byteLength);\n  const firstTwo = dv.getUint16(0);\n  let unpaddedLen: number;\n  let prefixLen: number;\n  if (firstTwo === 0) {\n    unpaddedLen = dv.getUint32(2);\n    if (unpaddedLen < extendedPrefixThreshold) throw new CryptoError(\"invalid padding\");\n    prefixLen = 6;\n  } else {\n    unpaddedLen = firstTwo;\n    prefixLen = 2;\n  }\n  const unpadded = padded.subarray(prefixLen, prefixLen + unpaddedLen);\n  if (\n    unpaddedLen < minPlaintextSize ||\n    unpaddedLen > maxPlaintextSize ||\n    unpadded.length !== unpaddedLen ||\n    padded.length !== prefixLen + calcPaddedLen(unpaddedLen)\n  ) {\n    throw new CryptoError(\"invalid padding\");\n  }\n  return utf8Decoder.decode(unpadded);\n}\n\nfunction hmacAad(key: Uint8Array, message: Uint8Array, aad: Uint8Array): Uint8Array {\n  if (aad.length !== 32) throw new CryptoError(\"AAD associated data must be 32 bytes\");\n  return hmac(sha256, key, concatBytes(aad, message));\n}\n\nfunction decodePayload(payload: string): {\n  nonce: Uint8Array;\n  ciphertext: Uint8Array;\n  mac: Uint8Array;\n} {\n  if (typeof payload !== \"string\") throw new CryptoError(\"payload must be a valid string\");\n  if (payload.length < 132) throw new CryptoError(\"invalid payload length: \" + payload.length);\n  if (payload[0] === \"#\") throw new CryptoError(\"unknown encryption version\");\n  let data: Uint8Array;\n  try {\n    data = base64.decode(payload);\n  } catch (error) {\n    throw new CryptoError(\n      \"invalid base64: \" + (error instanceof Error ? error.message : \"decode failed\"),\n    );\n  }\n  if (data.length < 99) throw new CryptoError(\"invalid data length: \" + data.length);\n  if (data[0] !== 2) throw new CryptoError(\"unknown encryption version \" + data[0]);\n  return {\n    nonce: data.subarray(1, 33),\n    ciphertext: data.subarray(33, -32),\n    mac: data.subarray(-32),\n  };\n}\n\nexport function encrypt(\n  plaintext: string,\n  conversationKey: Uint8Array,\n  nonce: Uint8Array = randomBytes(32),\n): string {\n  const { chacha_key, chacha_nonce, hmac_key } = getMessageKeys(conversationKey, nonce);\n  const padded = pad(plaintext);\n  const ciphertext = chacha20(chacha_key, chacha_nonce, padded);\n  const mac = hmacAad(hmac_key, ciphertext, nonce);\n  return base64.encode(concatBytes(new Uint8Array([2]), nonce, ciphertext, mac));\n}\n\nexport function decrypt(payload: string, conversationKey: Uint8Array): string {\n  const { nonce, ciphertext, mac } = decodePayload(payload);\n  const { chacha_key, chacha_nonce, hmac_key } = getMessageKeys(conversationKey, nonce);\n  const calculatedMac = hmacAad(hmac_key, ciphertext, nonce);\n  if (!equalBytes(calculatedMac, mac)) throw new CryptoError(\"invalid MAC\");\n  const padded = chacha20(chacha_key, chacha_nonce, ciphertext);\n  return unpad(padded);\n}\n\n/** Convenience: derive conversation key from secret/public pair and encrypt. */\nexport function encryptToPubkey(\n  plaintext: string,\n  secretKey: Uint8Array,\n  peerPubkey: string,\n): string {\n  return encrypt(plaintext, getConversationKey(secretKey, peerPubkey));\n}\n\n/** Convenience: decrypt a payload from a peer pubkey. */\nexport function decryptFromPubkey(\n  payload: string,\n  secretKey: Uint8Array,\n  peerPubkey: string,\n): string {\n  return decrypt(payload, getConversationKey(secretKey, peerPubkey));\n}\n"],"mappings":";;;;;;;;;;;AAiBA,MAAM,mBAAmB;AACzB,MAAM,mBAAmB;AACzB,MAAM,0BAA0B;AAEhC,SAAS,SAAS,OAAmB,OAAqB;CACxD,IAAI,MAAM,WAAW,IAAI,MAAM,IAAI,YAAY,GAAG,MAAM,kBAAkB;AAC5E;AAEA,SAAgB,mBAAmB,UAAsB,SAA6B;CACpF,qBAAqB,QAAQ;CAC7B,YAAY,SAAS,YAAY;CACjC,MAAM,UAAU,UACb,gBAAgB,UAAU,WAAW,OAAO,QAAQ,YAAY,CAAC,CAAC,CAAC,CACnE,SAAS,GAAG,EAAE;CACjB,OAAOA,QAAa,QAAQ,SAAS,YAAY,OAAO,UAAU,CAAC;AACrE;AAEA,SAAS,eACP,iBACA,OAC4E;CAC5E,SAAS,iBAAiB,kBAAkB;CAC5C,SAAS,OAAO,OAAO;CACvB,MAAM,OAAOC,OAAY,QAAQ,iBAAiB,OAAO,EAAE;CAC3D,OAAO;EACL,YAAY,KAAK,SAAS,GAAG,EAAE;EAC/B,cAAc,KAAK,SAAS,IAAI,EAAE;EAClC,UAAU,KAAK,SAAS,IAAI,EAAE;CAChC;AACF;AAEA,SAAgB,cAAc,KAAqB;CACjD,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM,GAAG,MAAM,IAAI,YAAY,2BAA2B;CAC5F,IAAI,OAAO,IAAI,OAAO;CACtB,MAAM,YAAY,MAAM,KAAK,MAAM,KAAK,KAAK,MAAM,CAAC,CAAC,IAAI;CACzD,MAAM,QAAQ,aAAa,MAAM,KAAK,YAAY;CAClD,OAAO,SAAS,KAAK,OAAO,MAAM,KAAK,KAAK,IAAI;AAClD;AAEA,SAAS,WAAW,KAAyB;CAC3C,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM,oBAAoB,MAAM,OAChE,MAAM,IAAI,YAAY,2DAA2D;CAEnF,MAAM,sBAAM,IAAI,WAAW,CAAC;CAC5B,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,UAAU,GAAG,KAAK,KAAK;CAChD,OAAO;AACT;AAEA,SAAS,WAAW,KAAyB;CAC3C,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM,2BAA2B,MAAM,kBACvE,MAAM,IAAI,YAAY,oEAAoE;CAE5F,MAAM,sBAAM,IAAI,WAAW,CAAC;CAC5B,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,UAAU,GAAG,KAAK,KAAK;CAChD,OAAO;AACT;AAEA,SAAS,IAAI,WAA+B;CAC1C,MAAM,WAAW,YAAY,OAAO,SAAS;CAC7C,MAAM,cAAc,SAAS;CAC7B,IAAI,cAAc,oBAAoB,cAAc,kBAClD,MAAM,IAAI,YAAY,gEAAgE;CAExF,MAAM,SACJ,eAAe,0BACX,YAAY,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,WAAW,CAAC,IAC3D,WAAW,WAAW;CAC5B,MAAM,SAAS,IAAI,WAAW,cAAc,WAAW,IAAI,WAAW;CACtE,OAAO,YAAY,QAAQ,UAAU,MAAM;AAC7C;AAEA,SAAS,MAAM,QAA4B;CACzC,MAAM,KAAK,IAAI,SAAS,OAAO,QAAQ,OAAO,YAAY,OAAO,UAAU;CAC3E,MAAM,WAAW,GAAG,UAAU,CAAC;CAC/B,IAAI;CACJ,IAAI;CACJ,IAAI,aAAa,GAAG;EAClB,cAAc,GAAG,UAAU,CAAC;EAC5B,IAAI,cAAc,yBAAyB,MAAM,IAAI,YAAY,iBAAiB;EAClF,YAAY;CACd,OAAO;EACL,cAAc;EACd,YAAY;CACd;CACA,MAAM,WAAW,OAAO,SAAS,WAAW,YAAY,WAAW;CACnE,IACE,cAAc,oBACd,cAAc,oBACd,SAAS,WAAW,eACpB,OAAO,WAAW,YAAY,cAAc,WAAW,GAEvD,MAAM,IAAI,YAAY,iBAAiB;CAEzC,OAAO,YAAY,OAAO,QAAQ;AACpC;AAEA,SAAS,QAAQ,KAAiB,SAAqB,KAA6B;CAClF,IAAI,IAAI,WAAW,IAAI,MAAM,IAAI,YAAY,sCAAsC;CACnF,OAAO,KAAK,QAAQ,KAAK,YAAY,KAAK,OAAO,CAAC;AACpD;AAEA,SAAS,cAAc,SAIrB;CACA,IAAI,OAAO,YAAY,UAAU,MAAM,IAAI,YAAY,gCAAgC;CACvF,IAAI,QAAQ,SAAS,KAAK,MAAM,IAAI,YAAY,6BAA6B,QAAQ,MAAM;CAC3F,IAAI,QAAQ,OAAO,KAAK,MAAM,IAAI,YAAY,4BAA4B;CAC1E,IAAI;CACJ,IAAI;EACF,OAAO,OAAO,OAAO,OAAO;CAC9B,SAAS,OAAO;EACd,MAAM,IAAI,YACR,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,gBACjE;CACF;CACA,IAAI,KAAK,SAAS,IAAI,MAAM,IAAI,YAAY,0BAA0B,KAAK,MAAM;CACjF,IAAI,KAAK,OAAO,GAAG,MAAM,IAAI,YAAY,gCAAgC,KAAK,EAAE;CAChF,OAAO;EACL,OAAO,KAAK,SAAS,GAAG,EAAE;EAC1B,YAAY,KAAK,SAAS,IAAI,GAAG;EACjC,KAAK,KAAK,SAAS,GAAG;CACxB;AACF;AAEA,SAAgB,QACd,WACA,iBACA,QAAoB,YAAY,EAAE,GAC1B;CACR,MAAM,EAAE,YAAY,cAAc,aAAa,eAAe,iBAAiB,KAAK;CACpF,MAAM,SAAS,IAAI,SAAS;CAC5B,MAAM,aAAa,SAAS,YAAY,cAAc,MAAM;CAC5D,MAAM,MAAM,QAAQ,UAAU,YAAY,KAAK;CAC/C,OAAO,OAAO,OAAO,YAAY,IAAI,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,YAAY,GAAG,CAAC;AAC/E;AAEA,SAAgB,QAAQ,SAAiB,iBAAqC;CAC5E,MAAM,EAAE,OAAO,YAAY,QAAQ,cAAc,OAAO;CACxD,MAAM,EAAE,YAAY,cAAc,aAAa,eAAe,iBAAiB,KAAK;CACpF,MAAM,gBAAgB,QAAQ,UAAU,YAAY,KAAK;CACzD,IAAI,CAAC,WAAW,eAAe,GAAG,GAAG,MAAM,IAAI,YAAY,aAAa;CAExE,OAAO,MADQ,SAAS,YAAY,cAAc,UAChC,CAAC;AACrB;;AAGA,SAAgB,gBACd,WACA,WACA,YACQ;CACR,OAAO,QAAQ,WAAW,mBAAmB,WAAW,UAAU,CAAC;AACrE;;AAGA,SAAgB,kBACd,SACA,WACA,YACQ;CACR,OAAO,QAAQ,SAAS,mBAAmB,WAAW,UAAU,CAAC;AACnE"}

package/dist/nips/nip46.d.mts

@@ -0,0 +1,2 @@
+import { a as Nip46Request, c as createNostrConnectURI, d as encodeNip46Request, f as encodeNip46Response, h as toBunkerURL, i as Nip46Error, l as decodeNip46Request, m as parseNostrConnectURI, n as BunkerPointer, o as Nip46Response, p as parseBunkerURL, r as ClientMetadata, s as NostrConnectParams, t as BUNKER_REGEX, u as decodeNip46Response } from "../nip46-C_DoxiS_.mjs";
+export { BUNKER_REGEX, BunkerPointer, ClientMetadata, Nip46Error, Nip46Request, Nip46Response, NostrConnectParams, createNostrConnectURI, decodeNip46Request, decodeNip46Response, encodeNip46Request, encodeNip46Response, parseBunkerURL, parseNostrConnectURI, toBunkerURL };

package/dist/nips/nip46.mjs

@@ -0,0 +1,132 @@
+import { a as isHex32, t as assertHex32 } from "../util-6tfLQ9JF.mjs";
+import { a as NostrError } from "../error-DZEs5OuZ.mjs";
+//#region src/nips/nip46.ts
+/**
+* NIP-46 (Nostr Connect) protocol helpers: bunker URI, nostrconnect URI, RPC JSON.
+* Transport/signing live in {@link Nip46Signer}.
+*
+* @see https://github.com/nostr-protocol/nips/blob/master/46.md
+*/
+const BUNKER_REGEX = /^bunker:\/\/([0-9a-fA-F]{64})\??([?/\w:.=&%-]*)$/;
+var Nip46Error = class extends NostrError {
+	constructor(message, options) {
+		super(message, options);
+	}
+};
+/** Encode a bunker pointer as `bunker://…`. */
+function toBunkerURL(pointer) {
+	const url = new URL(`bunker://${pointer.pubkey.toLowerCase()}`);
+	for (const relay of pointer.relays) url.searchParams.append("relay", relay);
+	if (pointer.secret) url.searchParams.set("secret", pointer.secret);
+	return url.toString();
+}
+/**
+* Parse a `bunker://` URL into a pointer.
+* Returns null when the input is not a bunker URL (including NIP-05 identifiers).
+*/
+function parseBunkerURL(input) {
+	const match = input.trim().match(BUNKER_REGEX);
+	if (!match?.[1]) return null;
+	try {
+		const pubkey = assertHex32(match[1], "bunker pubkey");
+		const qs = new URLSearchParams(match[2] ?? "");
+		return {
+			pubkey,
+			relays: qs.getAll("relay"),
+			secret: qs.get("secret")
+		};
+	} catch {
+		return null;
+	}
+}
+/** Build a client-initiated `nostrconnect://` URI. */
+function createNostrConnectURI(params) {
+	if (!isHex32(params.clientPubkey)) throw new Nip46Error("invalid client pubkey");
+	if (!params.secret) throw new Nip46Error("nostrconnect secret is required");
+	if (params.relays.length === 0) throw new Nip46Error("at least one relay is required");
+	const query = new URLSearchParams();
+	for (const relay of params.relays) query.append("relay", relay);
+	query.set("secret", params.secret);
+	if (params.perms && params.perms.length > 0) query.set("perms", params.perms.join(","));
+	if (params.name) query.set("name", params.name);
+	if (params.url) query.set("url", params.url);
+	if (params.image) query.set("image", params.image);
+	return `nostrconnect://${params.clientPubkey.toLowerCase()}?${query.toString()}`;
+}
+/** Parse a `nostrconnect://` URI. */
+function parseNostrConnectURI(uri) {
+	let url;
+	try {
+		url = new URL(uri);
+	} catch (cause) {
+		throw new Nip46Error(`invalid nostrconnect URI: ${uri}`, { cause: cause instanceof Error ? cause : void 0 });
+	}
+	if (url.protocol !== "nostrconnect:") throw new Nip46Error(`expected nostrconnect: scheme, got ${url.protocol}`);
+	const clientPubkey = url.hostname || url.pathname.replace(/^\/*/, "");
+	if (!isHex32(clientPubkey)) throw new Nip46Error("invalid client pubkey in nostrconnect URI");
+	const secret = url.searchParams.get("secret");
+	if (!secret) throw new Nip46Error("missing secret in nostrconnect URI");
+	const relays = url.searchParams.getAll("relay");
+	if (relays.length === 0) throw new Nip46Error("missing relays in nostrconnect URI");
+	const permsRaw = url.searchParams.get("perms");
+	return {
+		clientPubkey: clientPubkey.toLowerCase(),
+		relays,
+		secret,
+		perms: permsRaw ? permsRaw.split(",").filter(Boolean) : void 0,
+		name: url.searchParams.get("name") ?? void 0,
+		url: url.searchParams.get("url") ?? void 0,
+		image: url.searchParams.get("image") ?? void 0
+	};
+}
+function encodeNip46Request(req) {
+	return JSON.stringify({
+		id: req.id,
+		method: req.method,
+		params: req.params
+	});
+}
+function decodeNip46Request(json) {
+	let data;
+	try {
+		data = JSON.parse(json);
+	} catch (cause) {
+		throw new Nip46Error("invalid NIP-46 request JSON", { cause: cause instanceof Error ? cause : void 0 });
+	}
+	if (!isRecord(data) || typeof data.id !== "string" || typeof data.method !== "string") throw new Nip46Error("invalid NIP-46 request shape");
+	if (!Array.isArray(data.params) || !data.params.every((p) => typeof p === "string")) throw new Nip46Error("invalid NIP-46 request params");
+	return {
+		id: data.id,
+		method: data.method,
+		params: data.params
+	};
+}
+function encodeNip46Response(res) {
+	const body = { id: res.id };
+	if (res.result !== void 0) body.result = res.result;
+	if (res.error !== void 0) body.error = res.error;
+	return JSON.stringify(body);
+}
+function decodeNip46Response(json) {
+	let data;
+	try {
+		data = JSON.parse(json);
+	} catch (cause) {
+		throw new Nip46Error("invalid NIP-46 response JSON", { cause: cause instanceof Error ? cause : void 0 });
+	}
+	if (!isRecord(data) || typeof data.id !== "string") throw new Nip46Error("invalid NIP-46 response shape");
+	if (data.result !== void 0 && typeof data.result !== "string") throw new Nip46Error("invalid NIP-46 response result");
+	if (data.error !== void 0 && typeof data.error !== "string") throw new Nip46Error("invalid NIP-46 response error");
+	return {
+		id: data.id,
+		result: data.result,
+		error: data.error
+	};
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//#endregion
+export { BUNKER_REGEX, Nip46Error, createNostrConnectURI, decodeNip46Request, decodeNip46Response, encodeNip46Request, encodeNip46Response, parseBunkerURL, parseNostrConnectURI, toBunkerURL };
+
+//# sourceMappingURL=nip46.mjs.map

package/dist/nips/nip46.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nip46.mjs","names":[],"sources":["../../src/nips/nip46.ts"],"sourcesContent":["/**\n * NIP-46 (Nostr Connect) protocol helpers: bunker URI, nostrconnect URI, RPC JSON.\n * Transport/signing live in {@link Nip46Signer}.\n *\n * @see https://github.com/nostr-protocol/nips/blob/master/46.md\n */\nimport { assertHex32, isHex32 } from \"../core/util.ts\";\nimport { NostrError } from \"../core/error.ts\";\n\nexport const BUNKER_REGEX = /^bunker:\\/\\/([0-9a-fA-F]{64})\\??([?/\\w:.=&%-]*)$/;\n\nexport type BunkerPointer = {\n  /** Remote signer / bunker public key (hex). */\n  pubkey: string;\n  relays: string[];\n  secret: string | null;\n};\n\nexport type ClientMetadata = {\n  name?: string;\n  url?: string;\n  image?: string;\n};\n\nexport type NostrConnectParams = {\n  clientPubkey: string;\n  relays: string[];\n  secret: string;\n  perms?: string[];\n} & ClientMetadata;\n\nexport type Nip46Request = {\n  id: string;\n  method: string;\n  params: string[];\n};\n\nexport type Nip46Response = {\n  id: string;\n  result?: string;\n  error?: string;\n};\n\nexport class Nip46Error extends NostrError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(message, options);\n  }\n}\n\n/** Encode a bunker pointer as `bunker://…`. */\nexport function toBunkerURL(pointer: BunkerPointer): string {\n  const url = new URL(`bunker://${pointer.pubkey.toLowerCase()}`);\n  for (const relay of pointer.relays) {\n    url.searchParams.append(\"relay\", relay);\n  }\n  if (pointer.secret) {\n    url.searchParams.set(\"secret\", pointer.secret);\n  }\n  return url.toString();\n}\n\n/**\n * Parse a `bunker://` URL into a pointer.\n * Returns null when the input is not a bunker URL (including NIP-05 identifiers).\n */\nexport function parseBunkerURL(input: string): BunkerPointer | null {\n  const match = input.trim().match(BUNKER_REGEX);\n  if (!match?.[1]) return null;\n  try {\n    const pubkey = assertHex32(match[1], \"bunker pubkey\");\n    const qs = new URLSearchParams(match[2] ?? \"\");\n    return {\n      pubkey,\n      relays: qs.getAll(\"relay\"),\n      secret: qs.get(\"secret\"),\n    };\n  } catch {\n    return null;\n  }\n}\n\n/** Build a client-initiated `nostrconnect://` URI. */\nexport function createNostrConnectURI(params: NostrConnectParams): string {\n  if (!isHex32(params.clientPubkey)) {\n    throw new Nip46Error(\"invalid client pubkey\");\n  }\n  if (!params.secret) {\n    throw new Nip46Error(\"nostrconnect secret is required\");\n  }\n  if (params.relays.length === 0) {\n    throw new Nip46Error(\"at least one relay is required\");\n  }\n\n  const query = new URLSearchParams();\n  for (const relay of params.relays) {\n    query.append(\"relay\", relay);\n  }\n  query.set(\"secret\", params.secret);\n  if (params.perms && params.perms.length > 0) {\n    query.set(\"perms\", params.perms.join(\",\"));\n  }\n  if (params.name) query.set(\"name\", params.name);\n  if (params.url) query.set(\"url\", params.url);\n  if (params.image) query.set(\"image\", params.image);\n\n  return `nostrconnect://${params.clientPubkey.toLowerCase()}?${query.toString()}`;\n}\n\n/** Parse a `nostrconnect://` URI. */\nexport function parseNostrConnectURI(uri: string): NostrConnectParams {\n  let url: URL;\n  try {\n    url = new URL(uri);\n  } catch (cause) {\n    throw new Nip46Error(`invalid nostrconnect URI: ${uri}`, {\n      cause: cause instanceof Error ? cause : undefined,\n    });\n  }\n  if (url.protocol !== \"nostrconnect:\") {\n    throw new Nip46Error(`expected nostrconnect: scheme, got ${url.protocol}`);\n  }\n  const clientPubkey = url.hostname || url.pathname.replace(/^\\/*/, \"\");\n  if (!isHex32(clientPubkey)) {\n    throw new Nip46Error(\"invalid client pubkey in nostrconnect URI\");\n  }\n  const secret = url.searchParams.get(\"secret\");\n  if (!secret) throw new Nip46Error(\"missing secret in nostrconnect URI\");\n  const relays = url.searchParams.getAll(\"relay\");\n  if (relays.length === 0) throw new Nip46Error(\"missing relays in nostrconnect URI\");\n  const permsRaw = url.searchParams.get(\"perms\");\n  return {\n    clientPubkey: clientPubkey.toLowerCase(),\n    relays,\n    secret,\n    perms: permsRaw ? permsRaw.split(\",\").filter(Boolean) : undefined,\n    name: url.searchParams.get(\"name\") ?? undefined,\n    url: url.searchParams.get(\"url\") ?? undefined,\n    image: url.searchParams.get(\"image\") ?? undefined,\n  };\n}\n\nexport function encodeNip46Request(req: Nip46Request): string {\n  return JSON.stringify({ id: req.id, method: req.method, params: req.params });\n}\n\nexport function decodeNip46Request(json: string): Nip46Request {\n  let data: unknown;\n  try {\n    data = JSON.parse(json);\n  } catch (cause) {\n    throw new Nip46Error(\"invalid NIP-46 request JSON\", {\n      cause: cause instanceof Error ? cause : undefined,\n    });\n  }\n  if (!isRecord(data) || typeof data.id !== \"string\" || typeof data.method !== \"string\") {\n    throw new Nip46Error(\"invalid NIP-46 request shape\");\n  }\n  if (!Array.isArray(data.params) || !data.params.every((p) => typeof p === \"string\")) {\n    throw new Nip46Error(\"invalid NIP-46 request params\");\n  }\n  return { id: data.id, method: data.method, params: data.params as string[] };\n}\n\nexport function encodeNip46Response(res: Nip46Response): string {\n  const body: Record<string, string> = { id: res.id };\n  if (res.result !== undefined) body.result = res.result;\n  if (res.error !== undefined) body.error = res.error;\n  return JSON.stringify(body);\n}\n\nexport function decodeNip46Response(json: string): Nip46Response {\n  let data: unknown;\n  try {\n    data = JSON.parse(json);\n  } catch (cause) {\n    throw new Nip46Error(\"invalid NIP-46 response JSON\", {\n      cause: cause instanceof Error ? cause : undefined,\n    });\n  }\n  if (!isRecord(data) || typeof data.id !== \"string\") {\n    throw new Nip46Error(\"invalid NIP-46 response shape\");\n  }\n  if (data.result !== undefined && typeof data.result !== \"string\") {\n    throw new Nip46Error(\"invalid NIP-46 response result\");\n  }\n  if (data.error !== undefined && typeof data.error !== \"string\") {\n    throw new Nip46Error(\"invalid NIP-46 response error\");\n  }\n  return {\n    id: data.id,\n    result: data.result as string | undefined,\n    error: data.error as string | undefined,\n  };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n"],"mappings":";;;;;;;;;AASA,MAAa,eAAe;AAkC5B,IAAa,aAAb,cAAgC,WAAW;CACzC,YAAY,SAAiB,SAAwB;EACnD,MAAM,SAAS,OAAO;CACxB;AACF;;AAGA,SAAgB,YAAY,SAAgC;CAC1D,MAAM,MAAM,IAAI,IAAI,YAAY,QAAQ,OAAO,YAAY,GAAG;CAC9D,KAAK,MAAM,SAAS,QAAQ,QAC1B,IAAI,aAAa,OAAO,SAAS,KAAK;CAExC,IAAI,QAAQ,QACV,IAAI,aAAa,IAAI,UAAU,QAAQ,MAAM;CAE/C,OAAO,IAAI,SAAS;AACtB;;;;;AAMA,SAAgB,eAAe,OAAqC;CAClE,MAAM,QAAQ,MAAM,KAAK,CAAC,CAAC,MAAM,YAAY;CAC7C,IAAI,CAAC,QAAQ,IAAI,OAAO;CACxB,IAAI;EACF,MAAM,SAAS,YAAY,MAAM,IAAI,eAAe;EACpD,MAAM,KAAK,IAAI,gBAAgB,MAAM,MAAM,EAAE;EAC7C,OAAO;GACL;GACA,QAAQ,GAAG,OAAO,OAAO;GACzB,QAAQ,GAAG,IAAI,QAAQ;EACzB;CACF,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,sBAAsB,QAAoC;CACxE,IAAI,CAAC,QAAQ,OAAO,YAAY,GAC9B,MAAM,IAAI,WAAW,uBAAuB;CAE9C,IAAI,CAAC,OAAO,QACV,MAAM,IAAI,WAAW,iCAAiC;CAExD,IAAI,OAAO,OAAO,WAAW,GAC3B,MAAM,IAAI,WAAW,gCAAgC;CAGvD,MAAM,QAAQ,IAAI,gBAAgB;CAClC,KAAK,MAAM,SAAS,OAAO,QACzB,MAAM,OAAO,SAAS,KAAK;CAE7B,MAAM,IAAI,UAAU,OAAO,MAAM;CACjC,IAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GACxC,MAAM,IAAI,SAAS,OAAO,MAAM,KAAK,GAAG,CAAC;CAE3C,IAAI,OAAO,MAAM,MAAM,IAAI,QAAQ,OAAO,IAAI;CAC9C,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,OAAO,GAAG;CAC3C,IAAI,OAAO,OAAO,MAAM,IAAI,SAAS,OAAO,KAAK;CAEjD,OAAO,kBAAkB,OAAO,aAAa,YAAY,EAAE,GAAG,MAAM,SAAS;AAC/E;;AAGA,SAAgB,qBAAqB,KAAiC;CACpE,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,IAAI,GAAG;CACnB,SAAS,OAAO;EACd,MAAM,IAAI,WAAW,6BAA6B,OAAO,EACvD,OAAO,iBAAiB,QAAQ,QAAQ,KAAA,EAC1C,CAAC;CACH;CACA,IAAI,IAAI,aAAa,iBACnB,MAAM,IAAI,WAAW,sCAAsC,IAAI,UAAU;CAE3E,MAAM,eAAe,IAAI,YAAY,IAAI,SAAS,QAAQ,QAAQ,EAAE;CACpE,IAAI,CAAC,QAAQ,YAAY,GACvB,MAAM,IAAI,WAAW,2CAA2C;CAElE,MAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;CAC5C,IAAI,CAAC,QAAQ,MAAM,IAAI,WAAW,oCAAoC;CACtE,MAAM,SAAS,IAAI,aAAa,OAAO,OAAO;CAC9C,IAAI,OAAO,WAAW,GAAG,MAAM,IAAI,WAAW,oCAAoC;CAClF,MAAM,WAAW,IAAI,aAAa,IAAI,OAAO;CAC7C,OAAO;EACL,cAAc,aAAa,YAAY;EACvC;EACA;EACA,OAAO,WAAW,SAAS,MAAM,GAAG,CAAC,CAAC,OAAO,OAAO,IAAI,KAAA;EACxD,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK,KAAA;EACtC,KAAK,IAAI,aAAa,IAAI,KAAK,KAAK,KAAA;EACpC,OAAO,IAAI,aAAa,IAAI,OAAO,KAAK,KAAA;CAC1C;AACF;AAEA,SAAgB,mBAAmB,KAA2B;CAC5D,OAAO,KAAK,UAAU;EAAE,IAAI,IAAI;EAAI,QAAQ,IAAI;EAAQ,QAAQ,IAAI;CAAO,CAAC;AAC9E;AAEA,SAAgB,mBAAmB,MAA4B;CAC7D,IAAI;CACJ,IAAI;EACF,OAAO,KAAK,MAAM,IAAI;CACxB,SAAS,OAAO;EACd,MAAM,IAAI,WAAW,+BAA+B,EAClD,OAAO,iBAAiB,QAAQ,QAAQ,KAAA,EAC1C,CAAC;CACH;CACA,IAAI,CAAC,SAAS,IAAI,KAAK,OAAO,KAAK,OAAO,YAAY,OAAO,KAAK,WAAW,UAC3E,MAAM,IAAI,WAAW,8BAA8B;CAErD,IAAI,CAAC,MAAM,QAAQ,KAAK,MAAM,KAAK,CAAC,KAAK,OAAO,OAAO,MAAM,OAAO,MAAM,QAAQ,GAChF,MAAM,IAAI,WAAW,+BAA+B;CAEtD,OAAO;EAAE,IAAI,KAAK;EAAI,QAAQ,KAAK;EAAQ,QAAQ,KAAK;CAAmB;AAC7E;AAEA,SAAgB,oBAAoB,KAA4B;CAC9D,MAAM,OAA+B,EAAE,IAAI,IAAI,GAAG;CAClD,IAAI,IAAI,WAAW,KAAA,GAAW,KAAK,SAAS,IAAI;CAChD,IAAI,IAAI,UAAU,KAAA,GAAW,KAAK,QAAQ,IAAI;CAC9C,OAAO,KAAK,UAAU,IAAI;AAC5B;AAEA,SAAgB,oBAAoB,MAA6B;CAC/D,IAAI;CACJ,IAAI;EACF,OAAO,KAAK,MAAM,IAAI;CACxB,SAAS,OAAO;EACd,MAAM,IAAI,WAAW,gCAAgC,EACnD,OAAO,iBAAiB,QAAQ,QAAQ,KAAA,EAC1C,CAAC;CACH;CACA,IAAI,CAAC,SAAS,IAAI,KAAK,OAAO,KAAK,OAAO,UACxC,MAAM,IAAI,WAAW,+BAA+B;CAEtD,IAAI,KAAK,WAAW,KAAA,KAAa,OAAO,KAAK,WAAW,UACtD,MAAM,IAAI,WAAW,gCAAgC;CAEvD,IAAI,KAAK,UAAU,KAAA,KAAa,OAAO,KAAK,UAAU,UACpD,MAAM,IAAI,WAAW,+BAA+B;CAEtD,OAAO;EACL,IAAI,KAAK;EACT,QAAQ,KAAK;EACb,OAAO,KAAK;CACd;AACF;AAEA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E"}

package/dist/nips/nip49.d.mts

@@ -0,0 +1,12 @@
+import { a as NostrError } from "../error-WEFS-R-4.mjs";
+//#region src/nips/nip49.d.ts
+type Ncryptsec = `ncryptsec1${string}`;
+type KeySecurityByte = 0x00 | 0x01 | 0x02;
+declare class Nip49Error extends NostrError {}
+/** Encrypt a 32-byte secret key to an `ncryptsec` bech32 string. */
+declare function encrypt(secretKey: Uint8Array, password: string, logn?: number, ksb?: KeySecurityByte): Ncryptsec;
+/** Decrypt an `ncryptsec` bech32 string to a 32-byte secret key. */
+declare function decrypt(ncryptsec: string, password: string): Uint8Array;
+//#endregion
+export { KeySecurityByte, Ncryptsec, Nip49Error, decrypt, encrypt };
+//# sourceMappingURL=nip49.d.mts.map

package/dist/nips/nip49.mjs

@@ -0,0 +1,80 @@
+import { n as assertSecretKeyBytes } from "../util-6tfLQ9JF.mjs";
+import { a as NostrError } from "../error-DZEs5OuZ.mjs";
+import { Bech32MaxSize, encodeBytes } from "./nip19.mjs";
+import { concatBytes, randomBytes } from "@noble/hashes/utils.js";
+import { bech32 } from "@scure/base";
+import { xchacha20poly1305 } from "@noble/ciphers/chacha.js";
+import { scrypt } from "@noble/hashes/scrypt.js";
+//#region src/nips/nip49.ts
+/**
+* NIP-49: Private Key Encryption (`ncryptsec`).
+*
+* @see https://github.com/nostr-protocol/nips/blob/master/49.md
+*/
+const VERSION = 2;
+const SALT_LEN = 16;
+const NONCE_LEN = 24;
+const PAYLOAD_LEN = 91;
+const LOGN_MIN = 1;
+const LOGN_MAX = 22;
+const SCRYPT_R = 8;
+const SCRYPT_P = 1;
+var Nip49Error = class extends NostrError {};
+function assertLogn(logn) {
+	if (!Number.isInteger(logn) || logn < LOGN_MIN || logn > LOGN_MAX) throw new Nip49Error(`invalid logn ${logn}, expected integer ${LOGN_MIN}..${LOGN_MAX}`);
+}
+function deriveKey(password, salt, logn) {
+	assertLogn(logn);
+	const N = 2 ** logn;
+	return scrypt(password.normalize("NFKC"), salt, {
+		N,
+		r: SCRYPT_R,
+		p: SCRYPT_P,
+		dkLen: 32,
+		maxmem: 1024 * (N + SCRYPT_P + 1)
+	});
+}
+/** Encrypt a 32-byte secret key to an `ncryptsec` bech32 string. */
+function encrypt(secretKey, password, logn = 16, ksb = 2) {
+	assertSecretKeyBytes(secretKey);
+	const salt = randomBytes(SALT_LEN);
+	const key = deriveKey(password, salt, logn);
+	const nonce = randomBytes(NONCE_LEN);
+	const aad = Uint8Array.from([ksb]);
+	const ciphertext = xchacha20poly1305(key, nonce, aad).encrypt(secretKey);
+	const bytes = concatBytes(Uint8Array.from([VERSION]), Uint8Array.from([logn]), salt, nonce, aad, ciphertext);
+	return encodeBytes("ncryptsec", bytes);
+}
+/** Decrypt an `ncryptsec` bech32 string to a 32-byte secret key. */
+function decrypt(ncryptsec, password) {
+	let prefix;
+	let b;
+	try {
+		const decoded = bech32.decode(ncryptsec, Bech32MaxSize);
+		prefix = decoded.prefix;
+		b = new Uint8Array(bech32.fromWords(decoded.words));
+	} catch (cause) {
+		throw new Nip49Error("invalid ncryptsec", { cause: cause instanceof Error ? cause : void 0 });
+	}
+	if (prefix !== "ncryptsec") throw new Nip49Error(`invalid prefix ${prefix}, expected 'ncryptsec'`);
+	if (b.length !== PAYLOAD_LEN) throw new Nip49Error("invalid ncryptsec length");
+	const version = b[0];
+	if (version !== VERSION) throw new Nip49Error(`invalid version ${version}, expected 0x02`);
+	const logn = b[1];
+	const salt = b.subarray(2, 18);
+	const nonce = b.subarray(18, 42);
+	const ksb = b[42];
+	const aad = Uint8Array.from([ksb]);
+	const ciphertext = b.subarray(43);
+	try {
+		const key = deriveKey(password, salt, logn);
+		return xchacha20poly1305(key, nonce, aad).decrypt(ciphertext);
+	} catch (cause) {
+		if (cause instanceof Nip49Error) throw cause;
+		throw new Nip49Error("failed to decrypt", { cause: cause instanceof Error ? cause : void 0 });
+	}
+}
+//#endregion
+export { Nip49Error, decrypt, encrypt };
+
+//# sourceMappingURL=nip49.mjs.map