@qntx/nostr 0.0.1

package/dist/signer-CZ6K6FUc.mjs

@@ -0,0 +1,473 @@
+import { a as isHex32 } from "./util-6tfLQ9JF.mjs";
+import { t as CryptoError } from "./error-DZEs5OuZ.mjs";
+import { t as Kind } from "./kind-BLl4cLOc.mjs";
+import { l as signedMatchesUnsigned, m as Tag, p as validateSignedEvent } from "./event-CzoQEFMF.mjs";
+import { i as getPublicKey, n as SecretKey, o as signEvent, r as finalizeEvent, s as verifyEvent, t as Keys } from "./key-Dn-aX4x4.mjs";
+import { decrypt, encrypt } from "./nips/nip04.mjs";
+import { decrypt as decrypt$1, encrypt as encrypt$1, getConversationKey } from "./nips/nip44.mjs";
+import { Nip46Error, decodeNip46Response, encodeNip46Request, parseBunkerURL, parseNostrConnectURI } from "./nips/nip46.mjs";
+//#region src/signer/keys.ts
+/** Local secret-key signer with NIP-04 (legacy) and NIP-44 support. */
+var KeysSigner = class {
+	#keys;
+	#convKeys = /* @__PURE__ */ new Map();
+	constructor(secretKey) {
+		this.#keys = secretKey instanceof Keys ? secretKey : Keys.fromSecretKey(secretKey);
+	}
+	get keys() {
+		return this.#keys;
+	}
+	async getPublicKey() {
+		return this.#keys.publicKey;
+	}
+	async signEvent(unsigned) {
+		const expected = getPublicKey(this.#keys.secretKey);
+		if (unsigned.pubkey.toLowerCase() !== expected) throw new CryptoError("unsigned event pubkey does not match signer");
+		return signEvent(unsigned, this.#keys.secretKey);
+	}
+	async nip04Encrypt(peer, plaintext) {
+		return encrypt(this.#keys.secretKey.bytes, peer, plaintext);
+	}
+	async nip04Decrypt(peer, ciphertext) {
+		return decrypt(this.#keys.secretKey.bytes, peer, ciphertext);
+	}
+	#conversationKey(peer) {
+		const pk = peer.toLowerCase();
+		let key = this.#convKeys.get(pk);
+		if (!key) {
+			key = getConversationKey(this.#keys.secretKey.bytes, pk);
+			this.#convKeys.set(pk, key);
+		}
+		return key;
+	}
+	async nip44Encrypt(peer, plaintext) {
+		return encrypt$1(plaintext, this.#conversationKey(peer));
+	}
+	async nip44Decrypt(peer, payload) {
+		return decrypt$1(payload, this.#conversationKey(peer));
+	}
+};
+//#endregion
+//#region src/signer/nip07.ts
+/** Resolve `window.nostr` / `globalThis.nostr` when present. */
+function getWindowNostr() {
+	const g = globalThis;
+	return g.nostr ?? g.window?.nostr;
+}
+/** True when a NIP-07 provider is injected in the current environment. */
+function isNip07Available() {
+	const n = getWindowNostr();
+	return Boolean(n && typeof n.getPublicKey === "function" && typeof n.signEvent === "function");
+}
+/**
+* Signer backed by a NIP-07 browser extension (or any injected provider).
+* Never holds secret keys in-process.
+*/
+var Nip07Signer = class {
+	#provider;
+	constructor(provider) {
+		this.#provider = provider;
+	}
+	#resolve() {
+		const provider = this.#provider ?? getWindowNostr();
+		if (!provider) throw new CryptoError("NIP-07 provider not available (window.nostr missing)");
+		return provider;
+	}
+	async getPublicKey() {
+		const pk = await this.#resolve().getPublicKey();
+		if (typeof pk !== "string" || pk.length !== 64) throw new CryptoError("NIP-07 getPublicKey returned an invalid pubkey");
+		return pk.toLowerCase();
+	}
+	async signEvent(unsigned) {
+		const provider = this.#resolve();
+		const template = {
+			kind: unsigned.kind,
+			tags: unsigned.tags.map((t) => [...t]),
+			content: unsigned.content,
+			created_at: unsigned.created_at
+		};
+		const signed = await provider.signEvent(template);
+		if (!validateSignedEvent(signed)) throw new CryptoError("NIP-07 signEvent returned an invalid event");
+		if (!verifyEvent(signed)) throw new CryptoError("NIP-07 signed event failed signature verification");
+		if (!signedMatchesUnsigned(signed, unsigned)) throw new CryptoError("NIP-07 signed event does not match unsigned template");
+		return signed;
+	}
+	async nip04Encrypt(peer, plaintext) {
+		const nip04 = this.#resolve().nip04;
+		if (!nip04?.encrypt) throw new CryptoError("NIP-07 provider does not support nip04.encrypt");
+		return nip04.encrypt(peer, plaintext);
+	}
+	async nip04Decrypt(peer, ciphertext) {
+		const nip04 = this.#resolve().nip04;
+		if (!nip04?.decrypt) throw new CryptoError("NIP-07 provider does not support nip04.decrypt");
+		return nip04.decrypt(peer, ciphertext);
+	}
+	async nip44Encrypt(peer, plaintext) {
+		const nip44 = this.#resolve().nip44;
+		if (!nip44?.encrypt) throw new CryptoError("NIP-07 provider does not support nip44.encrypt");
+		return nip44.encrypt(peer, plaintext);
+	}
+	async nip44Decrypt(peer, payload) {
+		const nip44 = this.#resolve().nip44;
+		if (!nip44?.decrypt) throw new CryptoError("NIP-07 provider does not support nip44.decrypt");
+		return nip44.decrypt(peer, payload);
+	}
+};
+//#endregion
+//#region src/signer/nip46.ts
+function resolveClientSecret(key) {
+	if (key === void 0) return SecretKey.generate();
+	if (key instanceof SecretKey) return key;
+	if (typeof key === "string") return SecretKey.fromHex(key);
+	return SecretKey.fromBytes(key);
+}
+function resolveTransport(opts) {
+	if (opts.pool) return {
+		pool: opts.pool,
+		ownsPool: false
+	};
+	if (opts.createPool) return {
+		pool: opts.createPool(),
+		ownsPool: true
+	};
+	throw new Nip46Error("Nip46Signer requires pool or createPool (inject Pool from @qntx/nostr/relay)");
+}
+function applyPointerOpts(pointer, opts) {
+	let next = {
+		pubkey: pointer.pubkey.toLowerCase(),
+		relays: [...pointer.relays],
+		secret: pointer.secret
+	};
+	if (opts.secret !== void 0 && next.secret == null) next = {
+		...next,
+		secret: opts.secret
+	};
+	const relays = next.relays.length > 0 ? next.relays : [...opts.relays ?? []];
+	if (relays.length === 0) throw new Nip46Error("no relays for bunker connection");
+	if (next.relays.length > 0 && opts.relays?.length) {
+		const merged = [...next.relays];
+		for (const r of opts.relays) if (!merged.includes(r)) merged.push(r);
+		return {
+			...next,
+			relays: merged
+		};
+	}
+	return {
+		...next,
+		relays
+	};
+}
+function resolveBunkerPointer(input) {
+	if (typeof input !== "string") return {
+		pubkey: input.pubkey.toLowerCase(),
+		relays: [...input.relays],
+		secret: input.secret
+	};
+	const bunker = parseBunkerURL(input);
+	if (bunker) return bunker;
+	throw new Nip46Error("invalid bunker input (expected bunker:// URL or BunkerPointer)");
+}
+/**
+* NIP-46 remote signer (bunker / nostrconnect).
+* Implements {@link NostrSigner}; never holds the remote user's secret key.
+* Network I/O is injected via {@link Nip46Transport} (no relay import).
+*/
+var Nip46Signer = class Nip46Signer {
+	#pool;
+	#ownsPool;
+	#clientSecret;
+	#clientPubkey;
+	#pointer;
+	#conversationKey;
+	#onAuthUrl;
+	#timeoutMs;
+	#perms;
+	#metadata;
+	#relays;
+	#listeners = /* @__PURE__ */ new Map();
+	#waitingAuth = /* @__PURE__ */ new Set();
+	#sub;
+	#open = false;
+	#serial = 0;
+	#idPrefix = Math.random().toString(36).slice(2, 9);
+	#cachedRemotePubkey;
+	constructor(clientSecret, pointer, pool, ownsPool, opts) {
+		if (pointer.relays.length === 0) throw new Nip46Error("bunker pointer has no relays");
+		this.#clientSecret = clientSecret;
+		this.#clientPubkey = getPublicKey(clientSecret);
+		this.#pointer = {
+			pubkey: pointer.pubkey.toLowerCase(),
+			relays: [...pointer.relays],
+			secret: pointer.secret
+		};
+		this.#relays = [...pointer.relays];
+		this.#pool = pool;
+		this.#ownsPool = ownsPool;
+		this.#conversationKey = getConversationKey(clientSecret.bytes, this.#pointer.pubkey);
+		this.#onAuthUrl = opts.onAuthUrl;
+		this.#timeoutMs = opts.timeoutMs ?? 3e4;
+		this.#perms = opts.perms;
+		this.#metadata = opts.metadata;
+	}
+	get bunker() {
+		return {
+			pubkey: this.#pointer.pubkey,
+			relays: [...this.#relays],
+			secret: this.#pointer.secret
+		};
+	}
+	get clientPublicKey() {
+		return this.#clientPubkey;
+	}
+	/**
+	* Subscribe to an already-known bunker pointer. Does not send the `connect` RPC
+	* (reconnect without a new handshake).
+	* Requires `clientSecretKey` — reconnect must reuse the original client identity.
+	*/
+	static fromBunker(pointer, opts) {
+		if (opts.clientSecretKey === void 0) throw new Nip46Error("fromBunker requires clientSecretKey");
+		const resolved = applyPointerOpts(pointer, opts);
+		const sk = resolveClientSecret(opts.clientSecretKey);
+		const { pool, ownsPool } = resolveTransport(opts);
+		const signer = new Nip46Signer(sk, resolved, pool, ownsPool, opts);
+		signer.#startSubscription();
+		return signer;
+	}
+	/**
+	* Connect using a `bunker://` URL or pre-parsed pointer.
+	* Invalid strings throw. A NIP-05 identifier is not a bunker pointer.
+	* When both pointer and `opts.relays` are nonempty, unique `opts.relays` are appended.
+	*/
+	static async connect(input, opts = {}) {
+		const pointer = resolveBunkerPointer(input);
+		const signer = Nip46Signer.fromBunker(pointer, {
+			...opts,
+			clientSecretKey: resolveClientSecret(opts.clientSecretKey)
+		});
+		try {
+			await signer.connectRemote();
+			try {
+				await signer.switchRelays();
+			} catch {}
+			await signer.getPublicKey();
+			return signer;
+		} catch (err) {
+			await signer.close();
+			throw err;
+		}
+	}
+	/**
+	* Wait for a bunker to complete a client-initiated `nostrconnect://` handshake.
+	* Requires `clientSecretKey` whose pubkey matches the URI client pubkey
+	* (build the URI with {@link createNostrConnectURI} after generating keys).
+	*/
+	static async fromNostrConnectURI(connectionURI, opts) {
+		const params = parseNostrConnectURI(connectionURI);
+		const sk = resolveClientSecret(opts.clientSecretKey);
+		const clientPubkey = getPublicKey(sk);
+		if (clientPubkey !== params.clientPubkey) throw new Nip46Error("client secret key does not match nostrconnect client pubkey");
+		const { pool, ownsPool } = resolveTransport(opts);
+		const handshakeTimeoutMs = opts.handshakeTimeoutMs ?? 3e5;
+		return new Promise((resolve, reject) => {
+			let settled = false;
+			const finish = (err, signer) => {
+				if (settled) return;
+				settled = true;
+				clearTimeout(timer);
+				sub.close(err ? "failed" : "connected");
+				if (err) {
+					if (ownsPool) pool.close();
+					reject(err);
+				} else if (signer) resolve(signer);
+			};
+			const timer = setTimeout(() => {
+				finish(new Nip46Error("nostrconnect handshake timed out"));
+			}, handshakeTimeoutMs);
+			const sub = pool.subscribe(params.relays, [{
+				kinds: [Kind.NostrConnect],
+				"#p": [clientPubkey],
+				limit: 0
+			}], {
+				signal: opts.signal,
+				onevent: (event) => {
+					try {
+						const convKey = getConversationKey(sk.bytes, event.pubkey);
+						const payload = decrypt$1(event.content, convKey);
+						if (decodeNip46Response(payload).result !== params.secret) return;
+						const pointer = {
+							pubkey: event.pubkey.toLowerCase(),
+							relays: params.relays,
+							secret: params.secret
+						};
+						const signer = new Nip46Signer(sk, pointer, pool, ownsPool, opts);
+						signer.#startSubscription();
+						signer.switchRelays().catch(() => void 0).then(() => signer.getPublicKey()).then(() => finish(void 0, signer)).catch((e) => finish(e instanceof Error ? e : new Nip46Error(String(e))));
+					} catch {}
+				},
+				onclose: (reason) => {
+					if (reason !== "connected" && reason !== "failed") finish(new Nip46Error(`nostrconnect subscription closed: ${reason}`));
+				}
+			});
+		});
+	}
+	#startSubscription() {
+		this.#sub?.close();
+		this.#sub = this.#pool.subscribe(this.#relays, [{
+			kinds: [Kind.NostrConnect],
+			authors: [this.#pointer.pubkey],
+			"#p": [this.#clientPubkey],
+			limit: 0
+		}], {
+			onevent: (event) => {
+				try {
+					const payload = decrypt$1(event.content, this.#conversationKey);
+					const { id, result, error } = decodeNip46Response(payload);
+					if (result === "auth_url" && this.#waitingAuth.has(id)) {
+						this.#waitingAuth.delete(id);
+						if (error) this.#onAuthUrl?.(error);
+						return;
+					}
+					const listener = this.#listeners.get(id);
+					if (!listener) return;
+					clearTimeout(listener.timer);
+					this.#listeners.delete(id);
+					this.#waitingAuth.delete(id);
+					if (error) listener.reject(new Nip46Error(error));
+					else if (result !== void 0) listener.resolve(result);
+					else listener.reject(new Nip46Error("empty NIP-46 response"));
+				} catch {}
+			},
+			onclose: () => {
+				this.#sub = void 0;
+			}
+		});
+		this.#open = true;
+	}
+	async connectRemote(overrides) {
+		const metadata = overrides?.metadata ?? this.#metadata;
+		const perms = overrides?.perms ?? this.#perms;
+		const params = [this.#pointer.pubkey, this.#pointer.secret ?? ""];
+		if (perms?.length || metadata) params.push(perms?.length ? perms.join(",") : "");
+		if (metadata) params.push(JSON.stringify(metadata));
+		const result = await this.#sendRequest("connect", params);
+		if (result === "ack") return;
+		if (this.#pointer.secret && result === this.#pointer.secret) return;
+		throw new Nip46Error(`connect result is not ack or secret: ${result}`);
+	}
+	/**
+	* Ask the bunker for its preferred relay list and resubscribe when it changes.
+	* Spec result is a JSON array of URLs, or `null` when nothing changes.
+	*/
+	async switchRelays() {
+		const resp = await this.#sendRequest("switch_relays", []);
+		if (resp === "null") return null;
+		let parsed;
+		try {
+			parsed = JSON.parse(resp);
+		} catch (cause) {
+			throw new Nip46Error("invalid switch_relays JSON", { cause: cause instanceof Error ? cause : void 0 });
+		}
+		if (!Array.isArray(parsed) || parsed.length === 0 || !parsed.every((x) => typeof x === "string")) throw new Nip46Error("invalid switch_relays result");
+		this.#relays = parsed;
+		this.#startSubscription();
+		return parsed;
+	}
+	/** Courtesy session teardown. Always closes the local signer afterwards. */
+	async logout() {
+		try {
+			const resp = await this.#sendRequest("logout", []);
+			if (resp !== "ack") throw new Nip46Error(`logout result is not ack: ${resp}`);
+		} finally {
+			await this.close();
+		}
+	}
+	async ping() {
+		const resp = await this.#sendRequest("ping", []);
+		if (resp !== "pong") throw new Nip46Error(`ping result is not pong: ${resp}`);
+	}
+	async getPublicKey() {
+		if (!this.#cachedRemotePubkey) {
+			const pk = await this.#sendRequest("get_public_key", []);
+			if (!isHex32(pk)) throw new Nip46Error("bunker returned invalid pubkey");
+			this.#cachedRemotePubkey = pk.toLowerCase();
+		}
+		return this.#cachedRemotePubkey;
+	}
+	async signEvent(unsigned) {
+		const template = {
+			kind: unsigned.kind,
+			tags: unsigned.tags,
+			content: unsigned.content,
+			created_at: unsigned.created_at
+		};
+		const resp = await this.#sendRequest("sign_event", [JSON.stringify(template)]);
+		let signed;
+		try {
+			signed = JSON.parse(resp);
+		} catch (cause) {
+			throw new Nip46Error("bunker returned invalid sign_event JSON", { cause: cause instanceof Error ? cause : void 0 });
+		}
+		if (!validateSignedEvent(signed) || !verifyEvent(signed)) throw new Nip46Error("bunker returned improperly signed event");
+		if (!signedMatchesUnsigned(signed, unsigned)) throw new Nip46Error("signed event does not match unsigned template");
+		return signed;
+	}
+	async nip04Encrypt(peer, plaintext) {
+		return this.#sendRequest("nip04_encrypt", [peer, plaintext]);
+	}
+	async nip04Decrypt(peer, ciphertext) {
+		return this.#sendRequest("nip04_decrypt", [peer, ciphertext]);
+	}
+	async nip44Encrypt(peer, plaintext) {
+		return this.#sendRequest("nip44_encrypt", [peer, plaintext]);
+	}
+	async nip44Decrypt(peer, payload) {
+		return this.#sendRequest("nip44_decrypt", [peer, payload]);
+	}
+	async close() {
+		this.#open = false;
+		for (const [, listener] of this.#listeners) {
+			clearTimeout(listener.timer);
+			listener.reject(new Nip46Error("signer closed"));
+		}
+		this.#listeners.clear();
+		this.#sub?.close("signer closed");
+		this.#sub = void 0;
+		if (this.#ownsPool) this.#pool.close();
+	}
+	async #sendRequest(method, params) {
+		if (!this.#open) throw new Nip46Error("signer is closed");
+		if (!this.#sub) this.#startSubscription();
+		this.#serial += 1;
+		const id = `${this.#idPrefix}-${this.#serial}`;
+		const encrypted = encrypt$1(encodeNip46Request({
+			id,
+			method,
+			params
+		}), this.#conversationKey);
+		const event = finalizeEvent({
+			kind: Kind.NostrConnect,
+			tags: [Tag.p(this.#pointer.pubkey)],
+			content: encrypted,
+			created_at: Math.floor(Date.now() / 1e3)
+		}, this.#clientSecret);
+		const resultPromise = new Promise((resolve, reject) => {
+			const timer = setTimeout(() => {
+				this.#listeners.delete(id);
+				this.#waitingAuth.delete(id);
+				reject(new Nip46Error(`NIP-46 request timed out: ${method}`));
+			}, this.#timeoutMs);
+			this.#listeners.set(id, {
+				resolve,
+				reject,
+				timer
+			});
+			this.#waitingAuth.add(id);
+		});
+		await this.#pool.publish(this.#relays, event);
+		return resultPromise;
+	}
+};
+//#endregion
+export { KeysSigner as a, isNip07Available as i, Nip07Signer as n, getWindowNostr as r, Nip46Signer as t };
+
+//# sourceMappingURL=signer-CZ6K6FUc.mjs.map

package/dist/signer-CZ6K6FUc.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer-CZ6K6FUc.mjs","names":["#keys","#convKeys","nip04.encrypt","nip04.decrypt","nip44.getConversationKey","nip44.encrypt","#conversationKey","nip44.decrypt","#provider","#resolve","#pool","#ownsPool","#clientSecret","#clientPubkey","#pointer","#conversationKey","#onAuthUrl","#timeoutMs","#perms","#metadata","#listeners","#waitingAuth","#relays","#startSubscription","decrypt","#sub","#open","#sendRequest","#cachedRemotePubkey","#serial","#idPrefix","encrypt"],"sources":["../src/signer/keys.ts","../src/signer/nip07.ts","../src/signer/nip46.ts"],"sourcesContent":["import type { Event, UnsignedEvent } from \"../core/event.ts\";\nimport { CryptoError } from \"../core/error.ts\";\nimport { Keys, SecretKey, getPublicKey, signEvent } from \"../core/key.ts\";\nimport * as nip04 from \"../nips/nip04.ts\";\nimport * as nip44 from \"../nips/nip44.ts\";\nimport type { NostrSigner } from \"./types.ts\";\n\n/** Local secret-key signer with NIP-04 (legacy) and NIP-44 support. */\nexport class KeysSigner implements NostrSigner {\n  readonly #keys: Keys;\n  readonly #convKeys = new Map<string, Uint8Array>();\n\n  constructor(secretKey: SecretKey | Uint8Array | string | Keys) {\n    this.#keys = secretKey instanceof Keys ? secretKey : Keys.fromSecretKey(secretKey);\n  }\n\n  get keys(): Keys {\n    return this.#keys;\n  }\n\n  async getPublicKey(): Promise<string> {\n    return this.#keys.publicKey;\n  }\n\n  async signEvent(unsigned: UnsignedEvent): Promise<Event> {\n    const expected = getPublicKey(this.#keys.secretKey);\n    if (unsigned.pubkey.toLowerCase() !== expected) {\n      throw new CryptoError(\"unsigned event pubkey does not match signer\");\n    }\n    return signEvent(unsigned, this.#keys.secretKey);\n  }\n\n  async nip04Encrypt(peer: string, plaintext: string): Promise<string> {\n    return nip04.encrypt(this.#keys.secretKey.bytes, peer, plaintext);\n  }\n\n  async nip04Decrypt(peer: string, ciphertext: string): Promise<string> {\n    return nip04.decrypt(this.#keys.secretKey.bytes, peer, ciphertext);\n  }\n\n  #conversationKey(peer: string): Uint8Array {\n    const pk = peer.toLowerCase();\n    let key = this.#convKeys.get(pk);\n    if (!key) {\n      key = nip44.getConversationKey(this.#keys.secretKey.bytes, pk);\n      this.#convKeys.set(pk, key);\n    }\n    return key;\n  }\n\n  async nip44Encrypt(peer: string, plaintext: string): Promise<string> {\n    return nip44.encrypt(plaintext, this.#conversationKey(peer));\n  }\n\n  async nip44Decrypt(peer: string, payload: string): Promise<string> {\n    return nip44.decrypt(payload, this.#conversationKey(peer));\n  }\n}\n","import type { Event, EventTemplate, UnsignedEvent } from \"../core/event.ts\";\nimport { signedMatchesUnsigned, validateSignedEvent } from \"../core/event.ts\";\nimport { CryptoError } from \"../core/error.ts\";\nimport { verifyEvent } from \"../core/key.ts\";\nimport type { NostrSigner } from \"./types.ts\";\n\n/**\n * Minimal NIP-07 provider surface (browser extension `window.nostr`).\n * @see https://github.com/nostr-protocol/nips/blob/master/07.md\n */\nexport type WindowNostr = {\n  getPublicKey(): Promise<string>;\n  signEvent(event: EventTemplate): Promise<Event>;\n  nip04?: {\n    encrypt(pubkey: string, plaintext: string): Promise<string>;\n    decrypt(pubkey: string, ciphertext: string): Promise<string>;\n  };\n  nip44?: {\n    encrypt(pubkey: string, plaintext: string): Promise<string>;\n    decrypt(pubkey: string, ciphertext: string): Promise<string>;\n  };\n};\n\ntype GlobalWithNostr = typeof globalThis & {\n  nostr?: WindowNostr;\n  window?: { nostr?: WindowNostr };\n};\n\n/** Resolve `window.nostr` / `globalThis.nostr` when present. */\nexport function getWindowNostr(): WindowNostr | undefined {\n  const g = globalThis as GlobalWithNostr;\n  return g.nostr ?? g.window?.nostr;\n}\n\n/** True when a NIP-07 provider is injected in the current environment. */\nexport function isNip07Available(): boolean {\n  const n = getWindowNostr();\n  return Boolean(n && typeof n.getPublicKey === \"function\" && typeof n.signEvent === \"function\");\n}\n\n/**\n * Signer backed by a NIP-07 browser extension (or any injected provider).\n * Never holds secret keys in-process.\n */\nexport class Nip07Signer implements NostrSigner {\n  readonly #provider: WindowNostr | undefined;\n\n  constructor(provider?: WindowNostr) {\n    this.#provider = provider;\n  }\n\n  #resolve(): WindowNostr {\n    const provider = this.#provider ?? getWindowNostr();\n    if (!provider) {\n      throw new CryptoError(\"NIP-07 provider not available (window.nostr missing)\");\n    }\n    return provider;\n  }\n\n  async getPublicKey(): Promise<string> {\n    const pk = await this.#resolve().getPublicKey();\n    if (typeof pk !== \"string\" || pk.length !== 64) {\n      throw new CryptoError(\"NIP-07 getPublicKey returned an invalid pubkey\");\n    }\n    return pk.toLowerCase();\n  }\n\n  async signEvent(unsigned: UnsignedEvent): Promise<Event> {\n    const provider = this.#resolve();\n    const template: EventTemplate = {\n      kind: unsigned.kind,\n      tags: unsigned.tags.map((t) => [...t] as [string, ...string[]]),\n      content: unsigned.content,\n      created_at: unsigned.created_at,\n    };\n\n    const signed = await provider.signEvent(template);\n    if (!validateSignedEvent(signed)) {\n      throw new CryptoError(\"NIP-07 signEvent returned an invalid event\");\n    }\n    if (!verifyEvent(signed)) {\n      throw new CryptoError(\"NIP-07 signed event failed signature verification\");\n    }\n    if (!signedMatchesUnsigned(signed, unsigned)) {\n      throw new CryptoError(\"NIP-07 signed event does not match unsigned template\");\n    }\n    return signed;\n  }\n\n  async nip04Encrypt(peer: string, plaintext: string): Promise<string> {\n    const nip04 = this.#resolve().nip04;\n    if (!nip04?.encrypt) throw new CryptoError(\"NIP-07 provider does not support nip04.encrypt\");\n    return nip04.encrypt(peer, plaintext);\n  }\n\n  async nip04Decrypt(peer: string, ciphertext: string): Promise<string> {\n    const nip04 = this.#resolve().nip04;\n    if (!nip04?.decrypt) throw new CryptoError(\"NIP-07 provider does not support nip04.decrypt\");\n    return nip04.decrypt(peer, ciphertext);\n  }\n\n  async nip44Encrypt(peer: string, plaintext: string): Promise<string> {\n    const nip44 = this.#resolve().nip44;\n    if (!nip44?.encrypt) throw new CryptoError(\"NIP-07 provider does not support nip44.encrypt\");\n    return nip44.encrypt(peer, plaintext);\n  }\n\n  async nip44Decrypt(peer: string, payload: string): Promise<string> {\n    const nip44 = this.#resolve().nip44;\n    if (!nip44?.decrypt) throw new CryptoError(\"NIP-07 provider does not support nip44.decrypt\");\n    return nip44.decrypt(peer, payload);\n  }\n}\n","import type { Event, EventTemplate, UnsignedEvent } from \"../core/event.ts\";\nimport { signedMatchesUnsigned, validateSignedEvent } from \"../core/event.ts\";\nimport type { Filter } from \"../core/filter.ts\";\nimport { Kind } from \"../core/kind.ts\";\nimport { SecretKey, finalizeEvent, getPublicKey, verifyEvent } from \"../core/key.ts\";\nimport { Tag } from \"../core/tag.ts\";\nimport { isHex32 } from \"../core/util.ts\";\nimport { decrypt, encrypt, getConversationKey } from \"../nips/nip44.ts\";\nimport {\n  Nip46Error,\n  decodeNip46Response,\n  encodeNip46Request,\n  parseBunkerURL,\n  parseNostrConnectURI,\n  type BunkerPointer,\n  type ClientMetadata,\n  type Nip46Request,\n} from \"../nips/nip46.ts\";\nimport type { NostrSigner } from \"./types.ts\";\n\n/** Subscribe options used by NIP-46 transport (structural subset of Pool). */\nexport type Nip46SubscribeOptions = {\n  signal?: AbortSignal;\n  onevent?: (event: Event) => void;\n  onclose?: (reason: string) => void;\n};\n\n/**\n * Structural relay transport for NIP-46 RPC.\n * Satisfied by {@link import(\"../relay/pool.ts\").Pool}; constructed above the signer layer\n * so `signer` never imports `relay` (ADR-0001).\n */\nexport type Nip46Transport = {\n  subscribe(\n    relays: string[],\n    filters: Filter[],\n    opts?: Nip46SubscribeOptions,\n  ): { close: (reason?: string) => void };\n  publish(relays: string[], event: Event): Promise<unknown>;\n  close(urls?: string[]): void;\n};\n\nexport type Nip46SignerOptions = {\n  /**\n   * Shared transport. When set, the signer does not close it on {@link Nip46Signer.close}.\n   */\n  pool?: Nip46Transport;\n  /**\n   * Factory for a private transport when `pool` is omitted.\n   * Typical: `() => new Pool({ websocketImplementation, enableReconnect: true })`.\n   */\n  createPool?: () => Nip46Transport;\n  /**\n   * Relays used when the bunker pointer has none, and merged uniquely onto a\n   * nonempty pointer (pointer first).\n   */\n  relays?: string[];\n  /**\n   * Bunker connection secret when the pointer or bunker:// URL has none.\n   */\n  secret?: string | null;\n  /** Local client key used to encrypt RPC (not the remote user key). */\n  clientSecretKey?: SecretKey | Uint8Array | string;\n  /** Called when bunker returns `auth_url` for a pending request. */\n  onAuthUrl?: (url: string) => void;\n  /** Per-request timeout in ms. Default 30s. */\n  timeoutMs?: number;\n  /** Requested permissions sent with `connect` (`method[:kind]` list). */\n  perms?: string[];\n  /** Client metadata sent with bunker-initiated `connect`. */\n  metadata?: ClientMetadata;\n};\n\nfunction resolveClientSecret(key?: SecretKey | Uint8Array | string): SecretKey {\n  if (key === undefined) return SecretKey.generate();\n  if (key instanceof SecretKey) return key;\n  if (typeof key === \"string\") return SecretKey.fromHex(key);\n  return SecretKey.fromBytes(key);\n}\n\nfunction resolveTransport(opts: Nip46SignerOptions): { pool: Nip46Transport; ownsPool: boolean } {\n  if (opts.pool) return { pool: opts.pool, ownsPool: false };\n  if (opts.createPool) return { pool: opts.createPool(), ownsPool: true };\n  throw new Nip46Error(\n    \"Nip46Signer requires pool or createPool (inject Pool from @qntx/nostr/relay)\",\n  );\n}\n\nfunction applyPointerOpts(pointer: BunkerPointer, opts: Nip46SignerOptions): BunkerPointer {\n  let next: BunkerPointer = {\n    pubkey: pointer.pubkey.toLowerCase(),\n    relays: [...pointer.relays],\n    secret: pointer.secret,\n  };\n  if (opts.secret !== undefined && next.secret == null) {\n    next = { ...next, secret: opts.secret };\n  }\n\n  const relays = next.relays.length > 0 ? next.relays : [...(opts.relays ?? [])];\n  if (relays.length === 0) {\n    throw new Nip46Error(\"no relays for bunker connection\");\n  }\n  if (next.relays.length > 0 && opts.relays?.length) {\n    const merged = [...next.relays];\n    for (const r of opts.relays) {\n      if (!merged.includes(r)) merged.push(r);\n    }\n    return { ...next, relays: merged };\n  }\n  return { ...next, relays };\n}\n\nfunction resolveBunkerPointer(input: string | BunkerPointer): BunkerPointer {\n  if (typeof input !== \"string\") {\n    return {\n      pubkey: input.pubkey.toLowerCase(),\n      relays: [...input.relays],\n      secret: input.secret,\n    };\n  }\n\n  const bunker = parseBunkerURL(input);\n  if (bunker) return bunker;\n\n  throw new Nip46Error(\"invalid bunker input (expected bunker:// URL or BunkerPointer)\");\n}\n\n/**\n * NIP-46 remote signer (bunker / nostrconnect).\n * Implements {@link NostrSigner}; never holds the remote user's secret key.\n * Network I/O is injected via {@link Nip46Transport} (no relay import).\n */\nexport class Nip46Signer implements NostrSigner {\n  readonly #pool: Nip46Transport;\n  readonly #ownsPool: boolean;\n  readonly #clientSecret: SecretKey;\n  readonly #clientPubkey: string;\n  readonly #pointer: BunkerPointer;\n  readonly #conversationKey: Uint8Array;\n  readonly #onAuthUrl: ((url: string) => void) | undefined;\n  readonly #timeoutMs: number;\n  readonly #perms: string[] | undefined;\n  readonly #metadata: ClientMetadata | undefined;\n  #relays: string[];\n  readonly #listeners = new Map<\n    string,\n    {\n      resolve: (v: string) => void;\n      reject: (e: Error) => void;\n      timer: ReturnType<typeof setTimeout>;\n    }\n  >();\n  readonly #waitingAuth = new Set<string>();\n  #sub: { close: (reason?: string) => void } | undefined;\n  #open = false;\n  #serial = 0;\n  #idPrefix = Math.random().toString(36).slice(2, 9);\n  #cachedRemotePubkey: string | undefined;\n\n  private constructor(\n    clientSecret: SecretKey,\n    pointer: BunkerPointer,\n    pool: Nip46Transport,\n    ownsPool: boolean,\n    opts: Nip46SignerOptions,\n  ) {\n    if (pointer.relays.length === 0) {\n      throw new Nip46Error(\"bunker pointer has no relays\");\n    }\n    this.#clientSecret = clientSecret;\n    this.#clientPubkey = getPublicKey(clientSecret);\n    this.#pointer = {\n      pubkey: pointer.pubkey.toLowerCase(),\n      relays: [...pointer.relays],\n      secret: pointer.secret,\n    };\n    this.#relays = [...pointer.relays];\n    this.#pool = pool;\n    this.#ownsPool = ownsPool;\n    this.#conversationKey = getConversationKey(clientSecret.bytes, this.#pointer.pubkey);\n    this.#onAuthUrl = opts.onAuthUrl;\n    this.#timeoutMs = opts.timeoutMs ?? 30_000;\n    this.#perms = opts.perms;\n    this.#metadata = opts.metadata;\n  }\n\n  get bunker(): Readonly<BunkerPointer> {\n    return {\n      pubkey: this.#pointer.pubkey,\n      relays: [...this.#relays],\n      secret: this.#pointer.secret,\n    };\n  }\n\n  get clientPublicKey(): string {\n    return this.#clientPubkey;\n  }\n\n  /**\n   * Subscribe to an already-known bunker pointer. Does not send the `connect` RPC\n   * (reconnect without a new handshake).\n   * Requires `clientSecretKey` — reconnect must reuse the original client identity.\n   */\n  static fromBunker(\n    pointer: BunkerPointer,\n    opts: Nip46SignerOptions & { clientSecretKey: SecretKey | Uint8Array | string },\n  ): Nip46Signer {\n    if (opts.clientSecretKey === undefined) {\n      throw new Nip46Error(\"fromBunker requires clientSecretKey\");\n    }\n    const resolved = applyPointerOpts(pointer, opts);\n    const sk = resolveClientSecret(opts.clientSecretKey);\n    const { pool, ownsPool } = resolveTransport(opts);\n    const signer = new Nip46Signer(sk, resolved, pool, ownsPool, opts);\n    signer.#startSubscription();\n    return signer;\n  }\n\n  /**\n   * Connect using a `bunker://` URL or pre-parsed pointer.\n   * Invalid strings throw. A NIP-05 identifier is not a bunker pointer.\n   * When both pointer and `opts.relays` are nonempty, unique `opts.relays` are appended.\n   */\n  static async connect(\n    input: string | BunkerPointer,\n    opts: Nip46SignerOptions = {},\n  ): Promise<Nip46Signer> {\n    const pointer = resolveBunkerPointer(input);\n    const signer = Nip46Signer.fromBunker(pointer, {\n      ...opts,\n      clientSecretKey: resolveClientSecret(opts.clientSecretKey),\n    });\n    try {\n      await signer.connectRemote();\n      try {\n        await signer.switchRelays();\n      } catch {\n        // Bunker may not implement switch_relays.\n      }\n      await signer.getPublicKey();\n      return signer;\n    } catch (err) {\n      await signer.close();\n      throw err;\n    }\n  }\n\n  /**\n   * Wait for a bunker to complete a client-initiated `nostrconnect://` handshake.\n   * Requires `clientSecretKey` whose pubkey matches the URI client pubkey\n   * (build the URI with {@link createNostrConnectURI} after generating keys).\n   */\n  static async fromNostrConnectURI(\n    connectionURI: string,\n    opts: Nip46SignerOptions & {\n      clientSecretKey: SecretKey | Uint8Array | string;\n      signal?: AbortSignal;\n      handshakeTimeoutMs?: number;\n    },\n  ): Promise<Nip46Signer> {\n    const params = parseNostrConnectURI(connectionURI);\n    const sk = resolveClientSecret(opts.clientSecretKey);\n    const clientPubkey = getPublicKey(sk);\n\n    if (clientPubkey !== params.clientPubkey) {\n      throw new Nip46Error(\"client secret key does not match nostrconnect client pubkey\");\n    }\n\n    const { pool, ownsPool } = resolveTransport(opts);\n    const handshakeTimeoutMs = opts.handshakeTimeoutMs ?? 300_000;\n\n    return new Promise((resolve, reject) => {\n      let settled = false;\n      const finish = (err?: Error, signer?: Nip46Signer) => {\n        if (settled) return;\n        settled = true;\n        clearTimeout(timer);\n        sub.close(err ? \"failed\" : \"connected\");\n        if (err) {\n          if (ownsPool) pool.close();\n          reject(err);\n        } else if (signer) {\n          resolve(signer);\n        }\n      };\n\n      const timer = setTimeout(() => {\n        finish(new Nip46Error(\"nostrconnect handshake timed out\"));\n      }, handshakeTimeoutMs);\n\n      const sub = pool.subscribe(\n        params.relays,\n        [{ kinds: [Kind.NostrConnect], \"#p\": [clientPubkey], limit: 0 }],\n        {\n          signal: opts.signal,\n          onevent: (event) => {\n            try {\n              const convKey = getConversationKey(sk.bytes, event.pubkey);\n              const payload = decrypt(event.content, convKey);\n              const response = decodeNip46Response(payload);\n              if (response.result !== params.secret) return;\n\n              const pointer: BunkerPointer = {\n                pubkey: event.pubkey.toLowerCase(),\n                relays: params.relays,\n                secret: params.secret,\n              };\n              const signer = new Nip46Signer(sk, pointer, pool, ownsPool, opts);\n              signer.#startSubscription();\n              void signer\n                .switchRelays()\n                .catch(() => undefined)\n                .then(() => signer.getPublicKey())\n                .then(() => finish(undefined, signer))\n                .catch((e) => finish(e instanceof Error ? e : new Nip46Error(String(e))));\n            } catch {\n              // ignore non-matching events\n            }\n          },\n          onclose: (reason) => {\n            if (reason !== \"connected\" && reason !== \"failed\") {\n              finish(new Nip46Error(`nostrconnect subscription closed: ${reason}`));\n            }\n          },\n        },\n      );\n    });\n  }\n\n  #startSubscription(): void {\n    this.#sub?.close();\n    this.#sub = this.#pool.subscribe(\n      this.#relays,\n      [\n        {\n          kinds: [Kind.NostrConnect],\n          authors: [this.#pointer.pubkey],\n          \"#p\": [this.#clientPubkey],\n          limit: 0,\n        },\n      ],\n      {\n        onevent: (event) => {\n          try {\n            const payload = decrypt(event.content, this.#conversationKey);\n            const { id, result, error } = decodeNip46Response(payload);\n\n            if (result === \"auth_url\" && this.#waitingAuth.has(id)) {\n              this.#waitingAuth.delete(id);\n              if (error) this.#onAuthUrl?.(error);\n              return;\n            }\n\n            const listener = this.#listeners.get(id);\n            if (!listener) return;\n            clearTimeout(listener.timer);\n            this.#listeners.delete(id);\n            this.#waitingAuth.delete(id);\n            if (error) listener.reject(new Nip46Error(error));\n            else if (result !== undefined) listener.resolve(result);\n            else listener.reject(new Nip46Error(\"empty NIP-46 response\"));\n          } catch {\n            // ignore decrypt failures from unrelated events\n          }\n        },\n        onclose: () => {\n          this.#sub = undefined;\n        },\n      },\n    );\n    this.#open = true;\n  }\n\n  async connectRemote(overrides?: { metadata?: ClientMetadata; perms?: string[] }): Promise<void> {\n    const metadata = overrides?.metadata ?? this.#metadata;\n    const perms = overrides?.perms ?? this.#perms;\n    const params = [this.#pointer.pubkey, this.#pointer.secret ?? \"\"];\n    if (perms?.length || metadata) {\n      params.push(perms?.length ? perms.join(\",\") : \"\");\n    }\n    if (metadata) {\n      params.push(JSON.stringify(metadata));\n    }\n    const result = await this.#sendRequest(\"connect\", params);\n    if (result === \"ack\") return;\n    if (this.#pointer.secret && result === this.#pointer.secret) return;\n    throw new Nip46Error(`connect result is not ack or secret: ${result}`);\n  }\n\n  /**\n   * Ask the bunker for its preferred relay list and resubscribe when it changes.\n   * Spec result is a JSON array of URLs, or `null` when nothing changes.\n   */\n  async switchRelays(): Promise<string[] | null> {\n    const resp = await this.#sendRequest(\"switch_relays\", []);\n    if (resp === \"null\") return null;\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(resp);\n    } catch (cause) {\n      throw new Nip46Error(\"invalid switch_relays JSON\", {\n        cause: cause instanceof Error ? cause : undefined,\n      });\n    }\n    if (\n      !Array.isArray(parsed) ||\n      parsed.length === 0 ||\n      !parsed.every((x) => typeof x === \"string\")\n    ) {\n      throw new Nip46Error(\"invalid switch_relays result\");\n    }\n    this.#relays = parsed;\n    this.#startSubscription();\n    return parsed;\n  }\n\n  /** Courtesy session teardown. Always closes the local signer afterwards. */\n  async logout(): Promise<void> {\n    try {\n      const resp = await this.#sendRequest(\"logout\", []);\n      if (resp !== \"ack\") throw new Nip46Error(`logout result is not ack: ${resp}`);\n    } finally {\n      await this.close();\n    }\n  }\n\n  async ping(): Promise<void> {\n    const resp = await this.#sendRequest(\"ping\", []);\n    if (resp !== \"pong\") throw new Nip46Error(`ping result is not pong: ${resp}`);\n  }\n\n  async getPublicKey(): Promise<string> {\n    if (!this.#cachedRemotePubkey) {\n      const pk = await this.#sendRequest(\"get_public_key\", []);\n      if (!isHex32(pk)) throw new Nip46Error(\"bunker returned invalid pubkey\");\n      this.#cachedRemotePubkey = pk.toLowerCase();\n    }\n    return this.#cachedRemotePubkey;\n  }\n\n  async signEvent(unsigned: UnsignedEvent): Promise<Event> {\n    const template: EventTemplate = {\n      kind: unsigned.kind,\n      tags: unsigned.tags,\n      content: unsigned.content,\n      created_at: unsigned.created_at,\n    };\n    const resp = await this.#sendRequest(\"sign_event\", [JSON.stringify(template)]);\n    let signed: unknown;\n    try {\n      signed = JSON.parse(resp);\n    } catch (cause) {\n      throw new Nip46Error(\"bunker returned invalid sign_event JSON\", {\n        cause: cause instanceof Error ? cause : undefined,\n      });\n    }\n    if (!validateSignedEvent(signed) || !verifyEvent(signed)) {\n      throw new Nip46Error(\"bunker returned improperly signed event\");\n    }\n    if (!signedMatchesUnsigned(signed, unsigned)) {\n      throw new Nip46Error(\"signed event does not match unsigned template\");\n    }\n    return signed;\n  }\n\n  async nip04Encrypt(peer: string, plaintext: string): Promise<string> {\n    return this.#sendRequest(\"nip04_encrypt\", [peer, plaintext]);\n  }\n\n  async nip04Decrypt(peer: string, ciphertext: string): Promise<string> {\n    return this.#sendRequest(\"nip04_decrypt\", [peer, ciphertext]);\n  }\n\n  async nip44Encrypt(peer: string, plaintext: string): Promise<string> {\n    return this.#sendRequest(\"nip44_encrypt\", [peer, plaintext]);\n  }\n\n  async nip44Decrypt(peer: string, payload: string): Promise<string> {\n    return this.#sendRequest(\"nip44_decrypt\", [peer, payload]);\n  }\n\n  async close(): Promise<void> {\n    this.#open = false;\n    for (const [, listener] of this.#listeners) {\n      clearTimeout(listener.timer);\n      listener.reject(new Nip46Error(\"signer closed\"));\n    }\n    this.#listeners.clear();\n    this.#sub?.close(\"signer closed\");\n    this.#sub = undefined;\n    if (this.#ownsPool) this.#pool.close();\n  }\n\n  async #sendRequest(method: string, params: string[]): Promise<string> {\n    if (!this.#open) throw new Nip46Error(\"signer is closed\");\n    if (!this.#sub) this.#startSubscription();\n\n    this.#serial += 1;\n    const id = `${this.#idPrefix}-${this.#serial}`;\n    const req: Nip46Request = { id, method, params };\n    const encrypted = encrypt(encodeNip46Request(req), this.#conversationKey);\n\n    const event = finalizeEvent(\n      {\n        kind: Kind.NostrConnect,\n        tags: [Tag.p(this.#pointer.pubkey)],\n        content: encrypted,\n        created_at: Math.floor(Date.now() / 1000),\n      },\n      this.#clientSecret,\n    );\n\n    const resultPromise = new Promise<string>((resolve, reject) => {\n      const timer = setTimeout(() => {\n        this.#listeners.delete(id);\n        this.#waitingAuth.delete(id);\n        reject(new Nip46Error(`NIP-46 request timed out: ${method}`));\n      }, this.#timeoutMs);\n      this.#listeners.set(id, { resolve, reject, timer });\n      this.#waitingAuth.add(id);\n    });\n\n    await this.#pool.publish(this.#relays, event);\n    return resultPromise;\n  }\n}\n"],"mappings":";;;;;;;;;;AAQA,IAAa,aAAb,MAA+C;CAC7C;CACA,4BAAqB,IAAI,IAAwB;CAEjD,YAAY,WAAmD;EAC7D,KAAKA,QAAQ,qBAAqB,OAAO,YAAY,KAAK,cAAc,SAAS;CACnF;CAEA,IAAI,OAAa;EACf,OAAO,KAAKA;CACd;CAEA,MAAM,eAAgC;EACpC,OAAO,KAAKA,MAAM;CACpB;CAEA,MAAM,UAAU,UAAyC;EACvD,MAAM,WAAW,aAAa,KAAKA,MAAM,SAAS;EAClD,IAAI,SAAS,OAAO,YAAY,MAAM,UACpC,MAAM,IAAI,YAAY,6CAA6C;EAErE,OAAO,UAAU,UAAU,KAAKA,MAAM,SAAS;CACjD;CAEA,MAAM,aAAa,MAAc,WAAoC;EACnE,OAAOE,QAAc,KAAKF,MAAM,UAAU,OAAO,MAAM,SAAS;CAClE;CAEA,MAAM,aAAa,MAAc,YAAqC;EACpE,OAAOG,QAAc,KAAKH,MAAM,UAAU,OAAO,MAAM,UAAU;CACnE;CAEA,iBAAiB,MAA0B;EACzC,MAAM,KAAK,KAAK,YAAY;EAC5B,IAAI,MAAM,KAAKC,UAAU,IAAI,EAAE;EAC/B,IAAI,CAAC,KAAK;GACR,MAAMG,mBAAyB,KAAKJ,MAAM,UAAU,OAAO,EAAE;GAC7D,KAAKC,UAAU,IAAI,IAAI,GAAG;EAC5B;EACA,OAAO;CACT;CAEA,MAAM,aAAa,MAAc,WAAoC;EACnE,OAAOI,UAAc,WAAW,KAAKC,iBAAiB,IAAI,CAAC;CAC7D;CAEA,MAAM,aAAa,MAAc,SAAkC;EACjE,OAAOC,UAAc,SAAS,KAAKD,iBAAiB,IAAI,CAAC;CAC3D;AACF;;;;AC5BA,SAAgB,iBAA0C;CACxD,MAAM,IAAI;CACV,OAAO,EAAE,SAAS,EAAE,QAAQ;AAC9B;;AAGA,SAAgB,mBAA4B;CAC1C,MAAM,IAAI,eAAe;CACzB,OAAO,QAAQ,KAAK,OAAO,EAAE,iBAAiB,cAAc,OAAO,EAAE,cAAc,UAAU;AAC/F;;;;;AAMA,IAAa,cAAb,MAAgD;CAC9C;CAEA,YAAY,UAAwB;EAClC,KAAKE,YAAY;CACnB;CAEA,WAAwB;EACtB,MAAM,WAAW,KAAKA,aAAa,eAAe;EAClD,IAAI,CAAC,UACH,MAAM,IAAI,YAAY,sDAAsD;EAE9E,OAAO;CACT;CAEA,MAAM,eAAgC;EACpC,MAAM,KAAK,MAAM,KAAKC,SAAS,CAAC,CAAC,aAAa;EAC9C,IAAI,OAAO,OAAO,YAAY,GAAG,WAAW,IAC1C,MAAM,IAAI,YAAY,gDAAgD;EAExE,OAAO,GAAG,YAAY;CACxB;CAEA,MAAM,UAAU,UAAyC;EACvD,MAAM,WAAW,KAAKA,SAAS;EAC/B,MAAM,WAA0B;GAC9B,MAAM,SAAS;GACf,MAAM,SAAS,KAAK,KAAK,MAAM,CAAC,GAAG,CAAC,CAA0B;GAC9D,SAAS,SAAS;GAClB,YAAY,SAAS;EACvB;EAEA,MAAM,SAAS,MAAM,SAAS,UAAU,QAAQ;EAChD,IAAI,CAAC,oBAAoB,MAAM,GAC7B,MAAM,IAAI,YAAY,4CAA4C;EAEpE,IAAI,CAAC,YAAY,MAAM,GACrB,MAAM,IAAI,YAAY,mDAAmD;EAE3E,IAAI,CAAC,sBAAsB,QAAQ,QAAQ,GACzC,MAAM,IAAI,YAAY,sDAAsD;EAE9E,OAAO;CACT;CAEA,MAAM,aAAa,MAAc,WAAoC;EACnE,MAAM,QAAQ,KAAKA,SAAS,CAAC,CAAC;EAC9B,IAAI,CAAC,OAAO,SAAS,MAAM,IAAI,YAAY,gDAAgD;EAC3F,OAAO,MAAM,QAAQ,MAAM,SAAS;CACtC;CAEA,MAAM,aAAa,MAAc,YAAqC;EACpE,MAAM,QAAQ,KAAKA,SAAS,CAAC,CAAC;EAC9B,IAAI,CAAC,OAAO,SAAS,MAAM,IAAI,YAAY,gDAAgD;EAC3F,OAAO,MAAM,QAAQ,MAAM,UAAU;CACvC;CAEA,MAAM,aAAa,MAAc,WAAoC;EACnE,MAAM,QAAQ,KAAKA,SAAS,CAAC,CAAC;EAC9B,IAAI,CAAC,OAAO,SAAS,MAAM,IAAI,YAAY,gDAAgD;EAC3F,OAAO,MAAM,QAAQ,MAAM,SAAS;CACtC;CAEA,MAAM,aAAa,MAAc,SAAkC;EACjE,MAAM,QAAQ,KAAKA,SAAS,CAAC,CAAC;EAC9B,IAAI,CAAC,OAAO,SAAS,MAAM,IAAI,YAAY,gDAAgD;EAC3F,OAAO,MAAM,QAAQ,MAAM,OAAO;CACpC;AACF;;;ACvCA,SAAS,oBAAoB,KAAkD;CAC7E,IAAI,QAAQ,KAAA,GAAW,OAAO,UAAU,SAAS;CACjD,IAAI,eAAe,WAAW,OAAO;CACrC,IAAI,OAAO,QAAQ,UAAU,OAAO,UAAU,QAAQ,GAAG;CACzD,OAAO,UAAU,UAAU,GAAG;AAChC;AAEA,SAAS,iBAAiB,MAAuE;CAC/F,IAAI,KAAK,MAAM,OAAO;EAAE,MAAM,KAAK;EAAM,UAAU;CAAM;CACzD,IAAI,KAAK,YAAY,OAAO;EAAE,MAAM,KAAK,WAAW;EAAG,UAAU;CAAK;CACtE,MAAM,IAAI,WACR,8EACF;AACF;AAEA,SAAS,iBAAiB,SAAwB,MAAyC;CACzF,IAAI,OAAsB;EACxB,QAAQ,QAAQ,OAAO,YAAY;EACnC,QAAQ,CAAC,GAAG,QAAQ,MAAM;EAC1B,QAAQ,QAAQ;CAClB;CACA,IAAI,KAAK,WAAW,KAAA,KAAa,KAAK,UAAU,MAC9C,OAAO;EAAE,GAAG;EAAM,QAAQ,KAAK;CAAO;CAGxC,MAAM,SAAS,KAAK,OAAO,SAAS,IAAI,KAAK,SAAS,CAAC,GAAI,KAAK,UAAU,CAAC,CAAE;CAC7E,IAAI,OAAO,WAAW,GACpB,MAAM,IAAI,WAAW,iCAAiC;CAExD,IAAI,KAAK,OAAO,SAAS,KAAK,KAAK,QAAQ,QAAQ;EACjD,MAAM,SAAS,CAAC,GAAG,KAAK,MAAM;EAC9B,KAAK,MAAM,KAAK,KAAK,QACnB,IAAI,CAAC,OAAO,SAAS,CAAC,GAAG,OAAO,KAAK,CAAC;EAExC,OAAO;GAAE,GAAG;GAAM,QAAQ;EAAO;CACnC;CACA,OAAO;EAAE,GAAG;EAAM;CAAO;AAC3B;AAEA,SAAS,qBAAqB,OAA8C;CAC1E,IAAI,OAAO,UAAU,UACnB,OAAO;EACL,QAAQ,MAAM,OAAO,YAAY;EACjC,QAAQ,CAAC,GAAG,MAAM,MAAM;EACxB,QAAQ,MAAM;CAChB;CAGF,MAAM,SAAS,eAAe,KAAK;CACnC,IAAI,QAAQ,OAAO;CAEnB,MAAM,IAAI,WAAW,gEAAgE;AACvF;;;;;;AAOA,IAAa,cAAb,MAAa,YAAmC;CAC9C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,6BAAsB,IAAI,IAOxB;CACF,+BAAwB,IAAI,IAAY;CACxC;CACA,QAAQ;CACR,UAAU;CACV,YAAY,KAAK,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;CACjD;CAEA,YACE,cACA,SACA,MACA,UACA,MACA;EACA,IAAI,QAAQ,OAAO,WAAW,GAC5B,MAAM,IAAI,WAAW,8BAA8B;EAErD,KAAKG,gBAAgB;EACrB,KAAKC,gBAAgB,aAAa,YAAY;EAC9C,KAAKC,WAAW;GACd,QAAQ,QAAQ,OAAO,YAAY;GACnC,QAAQ,CAAC,GAAG,QAAQ,MAAM;GAC1B,QAAQ,QAAQ;EAClB;EACA,KAAKQ,UAAU,CAAC,GAAG,QAAQ,MAAM;EACjC,KAAKZ,QAAQ;EACb,KAAKC,YAAY;EACjB,KAAKI,mBAAmB,mBAAmB,aAAa,OAAO,KAAKD,SAAS,MAAM;EACnF,KAAKE,aAAa,KAAK;EACvB,KAAKC,aAAa,KAAK,aAAa;EACpC,KAAKC,SAAS,KAAK;EACnB,KAAKC,YAAY,KAAK;CACxB;CAEA,IAAI,SAAkC;EACpC,OAAO;GACL,QAAQ,KAAKL,SAAS;GACtB,QAAQ,CAAC,GAAG,KAAKQ,OAAO;GACxB,QAAQ,KAAKR,SAAS;EACxB;CACF;CAEA,IAAI,kBAA0B;EAC5B,OAAO,KAAKD;CACd;;;;;;CAOA,OAAO,WACL,SACA,MACa;EACb,IAAI,KAAK,oBAAoB,KAAA,GAC3B,MAAM,IAAI,WAAW,qCAAqC;EAE5D,MAAM,WAAW,iBAAiB,SAAS,IAAI;EAC/C,MAAM,KAAK,oBAAoB,KAAK,eAAe;EACnD,MAAM,EAAE,MAAM,aAAa,iBAAiB,IAAI;EAChD,MAAM,SAAS,IAAI,YAAY,IAAI,UAAU,MAAM,UAAU,IAAI;EACjE,OAAOU,mBAAmB;EAC1B,OAAO;CACT;;;;;;CAOA,aAAa,QACX,OACA,OAA2B,CAAC,GACN;EACtB,MAAM,UAAU,qBAAqB,KAAK;EAC1C,MAAM,SAAS,YAAY,WAAW,SAAS;GAC7C,GAAG;GACH,iBAAiB,oBAAoB,KAAK,eAAe;EAC3D,CAAC;EACD,IAAI;GACF,MAAM,OAAO,cAAc;GAC3B,IAAI;IACF,MAAM,OAAO,aAAa;GAC5B,QAAQ,CAER;GACA,MAAM,OAAO,aAAa;GAC1B,OAAO;EACT,SAAS,KAAK;GACZ,MAAM,OAAO,MAAM;GACnB,MAAM;EACR;CACF;;;;;;CAOA,aAAa,oBACX,eACA,MAKsB;EACtB,MAAM,SAAS,qBAAqB,aAAa;EACjD,MAAM,KAAK,oBAAoB,KAAK,eAAe;EACnD,MAAM,eAAe,aAAa,EAAE;EAEpC,IAAI,iBAAiB,OAAO,cAC1B,MAAM,IAAI,WAAW,6DAA6D;EAGpF,MAAM,EAAE,MAAM,aAAa,iBAAiB,IAAI;EAChD,MAAM,qBAAqB,KAAK,sBAAsB;EAEtD,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,IAAI,UAAU;GACd,MAAM,UAAU,KAAa,WAAyB;IACpD,IAAI,SAAS;IACb,UAAU;IACV,aAAa,KAAK;IAClB,IAAI,MAAM,MAAM,WAAW,WAAW;IACtC,IAAI,KAAK;KACP,IAAI,UAAU,KAAK,MAAM;KACzB,OAAO,GAAG;IACZ,OAAO,IAAI,QACT,QAAQ,MAAM;GAElB;GAEA,MAAM,QAAQ,iBAAiB;IAC7B,OAAO,IAAI,WAAW,kCAAkC,CAAC;GAC3D,GAAG,kBAAkB;GAErB,MAAM,MAAM,KAAK,UACf,OAAO,QACP,CAAC;IAAE,OAAO,CAAC,KAAK,YAAY;IAAG,MAAM,CAAC,YAAY;IAAG,OAAO;GAAE,CAAC,GAC/D;IACE,QAAQ,KAAK;IACb,UAAU,UAAU;KAClB,IAAI;MACF,MAAM,UAAU,mBAAmB,GAAG,OAAO,MAAM,MAAM;MACzD,MAAM,UAAUC,UAAQ,MAAM,SAAS,OAAO;MAE9C,IADiB,oBAAoB,OAC1B,CAAC,CAAC,WAAW,OAAO,QAAQ;MAEvC,MAAM,UAAyB;OAC7B,QAAQ,MAAM,OAAO,YAAY;OACjC,QAAQ,OAAO;OACf,QAAQ,OAAO;MACjB;MACA,MAAM,SAAS,IAAI,YAAY,IAAI,SAAS,MAAM,UAAU,IAAI;MAChE,OAAOD,mBAAmB;MAC1B,OACG,aAAa,CAAC,CACd,YAAY,KAAA,CAAS,CAAC,CACtB,WAAW,OAAO,aAAa,CAAC,CAAC,CACjC,WAAW,OAAO,KAAA,GAAW,MAAM,CAAC,CAAC,CACrC,OAAO,MAAM,OAAO,aAAa,QAAQ,IAAI,IAAI,WAAW,OAAO,CAAC,CAAC,CAAC,CAAC;KAC5E,QAAQ,CAER;IACF;IACA,UAAU,WAAW;KACnB,IAAI,WAAW,eAAe,WAAW,UACvC,OAAO,IAAI,WAAW,qCAAqC,QAAQ,CAAC;IAExE;GACF,CACF;EACF,CAAC;CACH;CAEA,qBAA2B;EACzB,KAAKE,MAAM,MAAM;EACjB,KAAKA,OAAO,KAAKf,MAAM,UACrB,KAAKY,SACL,CACE;GACE,OAAO,CAAC,KAAK,YAAY;GACzB,SAAS,CAAC,KAAKR,SAAS,MAAM;GAC9B,MAAM,CAAC,KAAKD,aAAa;GACzB,OAAO;EACT,CACF,GACA;GACE,UAAU,UAAU;IAClB,IAAI;KACF,MAAM,UAAUW,UAAQ,MAAM,SAAS,KAAKT,gBAAgB;KAC5D,MAAM,EAAE,IAAI,QAAQ,UAAU,oBAAoB,OAAO;KAEzD,IAAI,WAAW,cAAc,KAAKM,aAAa,IAAI,EAAE,GAAG;MACtD,KAAKA,aAAa,OAAO,EAAE;MAC3B,IAAI,OAAO,KAAKL,aAAa,KAAK;MAClC;KACF;KAEA,MAAM,WAAW,KAAKI,WAAW,IAAI,EAAE;KACvC,IAAI,CAAC,UAAU;KACf,aAAa,SAAS,KAAK;KAC3B,KAAKA,WAAW,OAAO,EAAE;KACzB,KAAKC,aAAa,OAAO,EAAE;KAC3B,IAAI,OAAO,SAAS,OAAO,IAAI,WAAW,KAAK,CAAC;UAC3C,IAAI,WAAW,KAAA,GAAW,SAAS,QAAQ,MAAM;UACjD,SAAS,OAAO,IAAI,WAAW,uBAAuB,CAAC;IAC9D,QAAQ,CAER;GACF;GACA,eAAe;IACb,KAAKI,OAAO,KAAA;GACd;EACF,CACF;EACA,KAAKC,QAAQ;CACf;CAEA,MAAM,cAAc,WAA4E;EAC9F,MAAM,WAAW,WAAW,YAAY,KAAKP;EAC7C,MAAM,QAAQ,WAAW,SAAS,KAAKD;EACvC,MAAM,SAAS,CAAC,KAAKJ,SAAS,QAAQ,KAAKA,SAAS,UAAU,EAAE;EAChE,IAAI,OAAO,UAAU,UACnB,OAAO,KAAK,OAAO,SAAS,MAAM,KAAK,GAAG,IAAI,EAAE;EAElD,IAAI,UACF,OAAO,KAAK,KAAK,UAAU,QAAQ,CAAC;EAEtC,MAAM,SAAS,MAAM,KAAKa,aAAa,WAAW,MAAM;EACxD,IAAI,WAAW,OAAO;EACtB,IAAI,KAAKb,SAAS,UAAU,WAAW,KAAKA,SAAS,QAAQ;EAC7D,MAAM,IAAI,WAAW,wCAAwC,QAAQ;CACvE;;;;;CAMA,MAAM,eAAyC;EAC7C,MAAM,OAAO,MAAM,KAAKa,aAAa,iBAAiB,CAAC,CAAC;EACxD,IAAI,SAAS,QAAQ,OAAO;EAC5B,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,MAAM,IAAI;EAC1B,SAAS,OAAO;GACd,MAAM,IAAI,WAAW,8BAA8B,EACjD,OAAO,iBAAiB,QAAQ,QAAQ,KAAA,EAC1C,CAAC;EACH;EACA,IACE,CAAC,MAAM,QAAQ,MAAM,KACrB,OAAO,WAAW,KAClB,CAAC,OAAO,OAAO,MAAM,OAAO,MAAM,QAAQ,GAE1C,MAAM,IAAI,WAAW,8BAA8B;EAErD,KAAKL,UAAU;EACf,KAAKC,mBAAmB;EACxB,OAAO;CACT;;CAGA,MAAM,SAAwB;EAC5B,IAAI;GACF,MAAM,OAAO,MAAM,KAAKI,aAAa,UAAU,CAAC,CAAC;GACjD,IAAI,SAAS,OAAO,MAAM,IAAI,WAAW,6BAA6B,MAAM;EAC9E,UAAU;GACR,MAAM,KAAK,MAAM;EACnB;CACF;CAEA,MAAM,OAAsB;EAC1B,MAAM,OAAO,MAAM,KAAKA,aAAa,QAAQ,CAAC,CAAC;EAC/C,IAAI,SAAS,QAAQ,MAAM,IAAI,WAAW,4BAA4B,MAAM;CAC9E;CAEA,MAAM,eAAgC;EACpC,IAAI,CAAC,KAAKC,qBAAqB;GAC7B,MAAM,KAAK,MAAM,KAAKD,aAAa,kBAAkB,CAAC,CAAC;GACvD,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,IAAI,WAAW,gCAAgC;GACvE,KAAKC,sBAAsB,GAAG,YAAY;EAC5C;EACA,OAAO,KAAKA;CACd;CAEA,MAAM,UAAU,UAAyC;EACvD,MAAM,WAA0B;GAC9B,MAAM,SAAS;GACf,MAAM,SAAS;GACf,SAAS,SAAS;GAClB,YAAY,SAAS;EACvB;EACA,MAAM,OAAO,MAAM,KAAKD,aAAa,cAAc,CAAC,KAAK,UAAU,QAAQ,CAAC,CAAC;EAC7E,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,MAAM,IAAI;EAC1B,SAAS,OAAO;GACd,MAAM,IAAI,WAAW,2CAA2C,EAC9D,OAAO,iBAAiB,QAAQ,QAAQ,KAAA,EAC1C,CAAC;EACH;EACA,IAAI,CAAC,oBAAoB,MAAM,KAAK,CAAC,YAAY,MAAM,GACrD,MAAM,IAAI,WAAW,yCAAyC;EAEhE,IAAI,CAAC,sBAAsB,QAAQ,QAAQ,GACzC,MAAM,IAAI,WAAW,+CAA+C;EAEtE,OAAO;CACT;CAEA,MAAM,aAAa,MAAc,WAAoC;EACnE,OAAO,KAAKA,aAAa,iBAAiB,CAAC,MAAM,SAAS,CAAC;CAC7D;CAEA,MAAM,aAAa,MAAc,YAAqC;EACpE,OAAO,KAAKA,aAAa,iBAAiB,CAAC,MAAM,UAAU,CAAC;CAC9D;CAEA,MAAM,aAAa,MAAc,WAAoC;EACnE,OAAO,KAAKA,aAAa,iBAAiB,CAAC,MAAM,SAAS,CAAC;CAC7D;CAEA,MAAM,aAAa,MAAc,SAAkC;EACjE,OAAO,KAAKA,aAAa,iBAAiB,CAAC,MAAM,OAAO,CAAC;CAC3D;CAEA,MAAM,QAAuB;EAC3B,KAAKD,QAAQ;EACb,KAAK,MAAM,GAAG,aAAa,KAAKN,YAAY;GAC1C,aAAa,SAAS,KAAK;GAC3B,SAAS,OAAO,IAAI,WAAW,eAAe,CAAC;EACjD;EACA,KAAKA,WAAW,MAAM;EACtB,KAAKK,MAAM,MAAM,eAAe;EAChC,KAAKA,OAAO,KAAA;EACZ,IAAI,KAAKd,WAAW,KAAKD,MAAM,MAAM;CACvC;CAEA,MAAMiB,aAAa,QAAgB,QAAmC;EACpE,IAAI,CAAC,KAAKD,OAAO,MAAM,IAAI,WAAW,kBAAkB;EACxD,IAAI,CAAC,KAAKD,MAAM,KAAKF,mBAAmB;EAExC,KAAKM,WAAW;EAChB,MAAM,KAAK,GAAG,KAAKC,UAAU,GAAG,KAAKD;EAErC,MAAM,YAAYE,UAAQ,mBAAmB;GADjB;GAAI;GAAQ;EACO,CAAC,GAAG,KAAKhB,gBAAgB;EAExE,MAAM,QAAQ,cACZ;GACE,MAAM,KAAK;GACX,MAAM,CAAC,IAAI,EAAE,KAAKD,SAAS,MAAM,CAAC;GAClC,SAAS;GACT,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;EAC1C,GACA,KAAKF,aACP;EAEA,MAAM,gBAAgB,IAAI,SAAiB,SAAS,WAAW;GAC7D,MAAM,QAAQ,iBAAiB;IAC7B,KAAKQ,WAAW,OAAO,EAAE;IACzB,KAAKC,aAAa,OAAO,EAAE;IAC3B,OAAO,IAAI,WAAW,6BAA6B,QAAQ,CAAC;GAC9D,GAAG,KAAKJ,UAAU;GAClB,KAAKG,WAAW,IAAI,IAAI;IAAE;IAAS;IAAQ;GAAM,CAAC;GAClD,KAAKC,aAAa,IAAI,EAAE;EAC1B,CAAC;EAED,MAAM,KAAKX,MAAM,QAAQ,KAAKY,SAAS,KAAK;EAC5C,OAAO;CACT;AACF"}

package/dist/signer.d.mts

@@ -0,0 +1,3 @@
+import { t as NostrSigner } from "./types-BzyADqnw.mjs";
+import { a as Nip07Signer, c as isNip07Available, i as Nip46Transport, l as KeysSigner, n as Nip46SignerOptions, o as WindowNostr, r as Nip46SubscribeOptions, s as getWindowNostr, t as Nip46Signer } from "./index-BYMnhRIC.mjs";
+export { KeysSigner, Nip07Signer, Nip46Signer, type Nip46SignerOptions, type Nip46SubscribeOptions, type Nip46Transport, type NostrSigner, type WindowNostr, getWindowNostr, isNip07Available };

package/dist/signer.mjs

@@ -0,0 +1,2 @@
+import { a as KeysSigner, i as isNip07Available, n as Nip07Signer, r as getWindowNostr, t as Nip46Signer } from "./signer-CZ6K6FUc.mjs";
+export { KeysSigner, Nip07Signer, Nip46Signer, getWindowNostr, isNip07Available };