@qntx/nostr 0.10.1 → 0.12.1

package/dist/nips/nip10.d.mts

@@ -1,5 +1,5 @@
 import { h as Tag, t as Event } from "../event-j3BwI5dF.mjs";
-import { t as EventBuilder } from "../builder-GBddxj8i.mjs";
+import { t as EventBuilder } from "../builder-BrmLOVj_.mjs";
 import { f as ProfilePointer, i as EventPointer, t as AddressPointer } from "../nip19-DpPN17bY.mjs";
 //#region src/nips/nip10.d.ts
 /** Parsed NIP-10 thread references from an event's `e`/`q`/`p` tags. */

package/dist/nips/nip10.mjs

@@ -1,7 +1,7 @@
-import { h as EventValidationError, o as isHex32 } from "../util-DMF9AIO0.mjs";
+import { g as EventValidationError, s as isHex32 } from "../util-DDpPkiED.mjs";
 import { t as Kind } from "../kind-D8fENiiL.mjs";
-import { S as parseEventAddress, g as Tag, y as formatEventAddress } from "../event-C2eLiPpV.mjs";
-import { t as EventBuilder } from "../builder-CVRmUeNm.mjs";
+import { S as parseEventAddress, g as Tag, y as formatEventAddress } from "../event-B3ua2_oL.mjs";
+import { t as EventBuilder } from "../builder-Cf2N12CG.mjs";
 //#region src/nips/nip10.ts
 /**
 * NIP-10: Text Notes and Threads

package/dist/nips/nip11.mjs

@@ -1,4 +1,4 @@
-import { c as isRecord, v as NostrError } from "../util-DMF9AIO0.mjs";
+import { l as isRecord, y as NostrError } from "../util-DDpPkiED.mjs";
 import { n as requireGlobalFetch, t as fetchManual } from "../http-CuazNRIP.mjs";
 //#region src/nips/nip11.ts
 /**

package/dist/nips/nip13.mjs

@@ -1,4 +1,4 @@
-import { d as nowSeconds, i as bytesToHex, o as isHex32, p as utf8Encoder, v as NostrError } from "../util-DMF9AIO0.mjs";
+import { f as nowSeconds, i as bytesToHex, m as utf8Encoder, s as isHex32, y as NostrError } from "../util-DDpPkiED.mjs";
 import { t as abortReason } from "../abort-DBq2STPj.mjs";
 import { sha256 } from "@noble/hashes/sha2.js";
 //#region src/nips/nip13.ts

package/dist/nips/nip17.d.mts

@@ -1,2 +1,2 @@
-import { a as buildChatMessageRumor, c as normalizeRecipients, d as wrapDirectMessage, i as ReplyTo, l as parseDmRelayList, n as Nip17Error, o as dmRelayListEventBuilder, r as Recipient, s as dmRelayListToTags, t as ChatMessageOptions, u as requireDmRelays } from "../nip17-B7MI82Iq.mjs";
+import { a as buildChatMessageRumor, c as normalizeRecipients, d as wrapDirectMessage, i as ReplyTo, l as parseDmRelayList, n as Nip17Error, o as dmRelayListEventBuilder, r as Recipient, s as dmRelayListToTags, t as ChatMessageOptions, u as requireDmRelays } from "../nip17-BM4hJYBq.mjs";
 export { ChatMessageOptions, Nip17Error, Recipient, ReplyTo, buildChatMessageRumor, dmRelayListEventBuilder, dmRelayListToTags, normalizeRecipients, parseDmRelayList, requireDmRelays, wrapDirectMessage };

package/dist/nips/nip17.mjs

@@ -1,7 +1,7 @@
-import { h as EventValidationError, l as normalizeRelayUrls, n as assertHex32, v as NostrError } from "../util-DMF9AIO0.mjs";
+import { g as EventValidationError, n as assertHex32, u as normalizeRelayUrls, y as NostrError } from "../util-DDpPkiED.mjs";
 import { t as Kind } from "../kind-D8fENiiL.mjs";
-import { g as Tag } from "../event-C2eLiPpV.mjs";
-import { t as EventBuilder } from "../builder-CVRmUeNm.mjs";
+import { g as Tag } from "../event-B3ua2_oL.mjs";
+import { t as EventBuilder } from "../builder-Cf2N12CG.mjs";
 import { createGiftWrap, createRumor, createSeal } from "./nip59.mjs";
 //#region src/nips/nip17.ts
 /**
@@ -96,7 +96,7 @@ async function wrapDirectMessage(crypto, recipients, rumor, opts) {
 	const out = [];
 	const timeOpts = opts ? {
 		now: opts.now,
-		randomInt: opts.randomInt,
+		randomBytes: opts.randomBytes,
 		timestamps: opts.timestamps,
 		expiration: opts.expiration,
 		randomize: opts.randomize

package/dist/nips/nip17.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"nip17.mjs","names":["TagBuilder"],"sources":["../../src/nips/nip17.ts"],"sourcesContent":["/**\n * NIP-17: Private Direct Messages. Kind 10050 advertises where gift-wraps should be delivered. Kind\n * 14 rumor construction and per-recipient wrap live here. Envelope primitives live in nip59.ts.\n *\n * @see https://github.com/nostr-protocol/nips/blob/master/17.md\n */\nimport { EventBuilder } from \"../core/builder.ts\";\nimport { EventValidationError, NostrError } from \"../core/error.ts\";\nimport type { Event } from \"../core/event.ts\";\nimport { Kind } from \"../core/kind.ts\";\nimport type { Tag } from \"../core/tag.ts\";\nimport { Tag as TagBuilder } from \"../core/tag.ts\";\nimport { assertHex32, normalizeRelayUrls } from \"../core/util.ts\";\nimport { createGiftWrap, createRumor, createSeal } from \"./nip59.ts\";\nimport type { Nip59Crypto, Rumor, WrapOptions } from \"./nip59.ts\";\n\nexport class Nip17Error extends NostrError {\n  override name = \"Nip17Error\";\n}\n\nexport type Recipient = {\n  readonly pubkey: string;\n  readonly relayHint?: string | undefined;\n};\n\nexport type ReplyTo = {\n  readonly id: string;\n  readonly relayHint?: string | undefined;\n};\n\nexport type ChatMessageOptions = {\n  readonly created_at?: number | undefined;\n  readonly subject?: string | undefined;\n  readonly replyTo?: ReplyTo | undefined;\n};\n\n/** Parse kind:10050 DM relay list (`[\"relay\", url]` tags). */\nexport function parseDmRelayList(event: Pick<Event, \"kind\" | \"tags\">): string[] {\n  if (event.kind !== Kind.DirectMessageRelaysList) {\n    throw new EventValidationError(\n      `expected kind ${Kind.DirectMessageRelaysList}, got ${event.kind}`,\n    );\n  }\n  const urls: string[] = [];\n  for (const tag of event.tags) {\n    const value = tag.at(1);\n    if (tag[0] === \"relay\" && value !== undefined) {\n      urls.push(value);\n    }\n  }\n  return normalizeRelayUrls(urls);\n}\n\n/** Encode DM relay URLs as NIP-17 `relay` tags. */\nexport function dmRelayListToTags(relays: ReadonlyArray<string>): Tag[] {\n  return normalizeRelayUrls(relays).map((url) => [\"relay\", url]);\n}\n\n/** Build an unsigned kind:10050 EventBuilder. NIP-17 requires ≥1 relay tag. */\nexport function dmRelayListEventBuilder(relays: ReadonlyArray<string>): EventBuilder {\n  const tags = dmRelayListToTags(relays);\n  if (tags.length === 0) {\n    throw new Nip17Error(\"DM relay list requires at least one relay\");\n  }\n  return new EventBuilder(Kind.DirectMessageRelaysList, \"\").tags(tags);\n}\n\nfunction isRecipient(value: unknown): value is Recipient {\n  return typeof value === \"object\" && value !== null && \"pubkey\" in value;\n}\n\nfunction asRecipientList(\n  input: string | Recipient | ReadonlyArray<string | Recipient>,\n): ReadonlyArray<string | Recipient> {\n  if (typeof input === \"string\" || isRecipient(input)) {\n    return [input];\n  }\n  return input;\n}\n\n/** Accept a hex pubkey, a Recipient, or a readonly array of either. Dedup by pubkey. */\nexport function normalizeRecipients(\n  input: string | Recipient | ReadonlyArray<string | Recipient>,\n): Recipient[] {\n  const out: Recipient[] = [];\n  const seen = new Set<string>();\n  for (const item of asRecipientList(input)) {\n    const rec: Recipient = typeof item === \"string\" ? { pubkey: item } : item;\n    const pubkey = assertHex32(rec.pubkey, \"public key\");\n    if (seen.has(pubkey)) {\n      continue;\n    }\n    seen.add(pubkey);\n    out.push({ pubkey, relayHint: rec.relayHint });\n  }\n  return out;\n}\n\nexport function buildChatMessageRumor(\n  senderPubkey: string,\n  recipients: ReadonlyArray<Recipient>,\n  content: string,\n  opts?: ChatMessageOptions,\n): Rumor {\n  if (recipients.length === 0) {\n    throw new Nip17Error(\"recipients must not be empty\");\n  }\n  const tags: Tag[] = [];\n  for (const recipient of recipients) {\n    const pk = assertHex32(recipient.pubkey, \"public key\");\n    tags.push(TagBuilder.p(pk, recipient.relayHint));\n  }\n  if (opts?.replyTo) {\n    // Kind 14 reply e-tag is unmarked: [\"e\", <id>, <relay-url>]\n    tags.push(TagBuilder.e(assertHex32(opts.replyTo.id, \"event id\"), opts.replyTo.relayHint ?? \"\"));\n  }\n  if (opts?.subject !== undefined) {\n    tags.push([\"subject\", opts.subject]);\n  }\n  return createRumor(senderPubkey, {\n    kind: Kind.PrivateDirectMessage,\n    content,\n    tags,\n    created_at: opts?.created_at,\n  });\n}\n\nfunction wrapTargets(sender: string, recipients: ReadonlyArray<Recipient>): Recipient[] {\n  const senderPk = sender.toLowerCase();\n  const self = recipients.find((r) => r.pubkey.toLowerCase() === senderPk);\n  const out: Recipient[] = [{ pubkey: senderPk, relayHint: self?.relayHint }];\n  const seen = new Set<string>([senderPk]);\n  for (const recipient of recipients) {\n    const pk = recipient.pubkey.toLowerCase();\n    if (seen.has(pk)) {\n      continue;\n    }\n    seen.add(pk);\n    out.push({ pubkey: pk, relayHint: recipient.relayHint });\n  }\n  return out;\n}\n\nexport async function wrapDirectMessage(\n  crypto: Nip59Crypto,\n  recipients: ReadonlyArray<Recipient>,\n  rumor: Rumor,\n  opts?: Pick<\n    WrapOptions,\n    \"now\" | \"randomInt\" | \"timestamps\" | \"expiration\" | \"ephemeral\" | \"randomize\"\n  >,\n): Promise<ReadonlyArray<{ recipient: string; wrap: Event }>> {\n  if (recipients.length === 0) {\n    throw new Nip17Error(\"recipients must not be empty\");\n  }\n  const targets = wrapTargets(rumor.pubkey, recipients);\n  const out: Array<{ recipient: string; wrap: Event }> = [];\n  const timeOpts = opts\n    ? {\n        now: opts.now,\n        randomInt: opts.randomInt,\n        timestamps: opts.timestamps,\n        expiration: opts.expiration,\n        randomize: opts.randomize,\n      }\n    : undefined;\n  for (const target of targets) {\n    // oxlint-disable-next-line no-await-in-loop -- signer calls stay ordered, one recipient at a time\n    const seal = await createSeal(crypto, target.pubkey, rumor, timeOpts);\n    const wrap = createGiftWrap(seal, target.pubkey, {\n      ...timeOpts,\n      relayHint: target.relayHint,\n      ephemeral: opts?.ephemeral,\n    });\n    out.push({ recipient: target.pubkey, wrap });\n  }\n  return out;\n}\n\nexport function requireDmRelays(pubkey: string, relays: ReadonlyArray<string>): string[] {\n  if (relays.length === 0) {\n    throw new Nip17Error(`pubkey ${pubkey} is not ready to receive DMs (no kind 10050)`);\n  }\n  return [...relays];\n}\n"],"mappings":";;;;;;;;;;;;AAgBA,IAAa,aAAb,cAAgC,WAAW;CACzC,OAAgB;AAClB;;AAmBA,SAAgB,iBAAiB,OAA+C;CAC9E,IAAI,MAAM,SAAS,KAAK,yBACtB,MAAM,IAAI,qBACR,iBAAiB,KAAK,wBAAwB,QAAQ,MAAM,MAC9D;CAEF,MAAM,OAAiB,CAAC;CACxB,KAAK,MAAM,OAAO,MAAM,MAAM;EAC5B,MAAM,QAAQ,IAAI,GAAG,CAAC;EACtB,IAAI,IAAI,OAAO,WAAW,UAAU,KAAA,GAClC,KAAK,KAAK,KAAK;CAEnB;CACA,OAAO,mBAAmB,IAAI;AAChC;;AAGA,SAAgB,kBAAkB,QAAsC;CACtE,OAAO,mBAAmB,MAAM,CAAC,CAAC,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC;AAC/D;;AAGA,SAAgB,wBAAwB,QAA6C;CACnF,MAAM,OAAO,kBAAkB,MAAM;CACrC,IAAI,KAAK,WAAW,GAClB,MAAM,IAAI,WAAW,2CAA2C;CAElE,OAAO,IAAI,aAAa,KAAK,yBAAyB,EAAE,CAAC,CAAC,KAAK,IAAI;AACrE;AAEA,SAAS,YAAY,OAAoC;CACvD,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,YAAY;AACpE;AAEA,SAAS,gBACP,OACmC;CACnC,IAAI,OAAO,UAAU,YAAY,YAAY,KAAK,GAChD,OAAO,CAAC,KAAK;CAEf,OAAO;AACT;;AAGA,SAAgB,oBACd,OACa;CACb,MAAM,MAAmB,CAAC;CAC1B,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,QAAQ,gBAAgB,KAAK,GAAG;EACzC,MAAM,MAAiB,OAAO,SAAS,WAAW,EAAE,QAAQ,KAAK,IAAI;EACrE,MAAM,SAAS,YAAY,IAAI,QAAQ,YAAY;EACnD,IAAI,KAAK,IAAI,MAAM,GACjB;EAEF,KAAK,IAAI,MAAM;EACf,IAAI,KAAK;GAAE;GAAQ,WAAW,IAAI;EAAU,CAAC;CAC/C;CACA,OAAO;AACT;AAEA,SAAgB,sBACd,cACA,YACA,SACA,MACO;CACP,IAAI,WAAW,WAAW,GACxB,MAAM,IAAI,WAAW,8BAA8B;CAErD,MAAM,OAAc,CAAC;CACrB,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,KAAK,YAAY,UAAU,QAAQ,YAAY;EACrD,KAAK,KAAKA,IAAW,EAAE,IAAI,UAAU,SAAS,CAAC;CACjD;CACA,IAAI,MAAM,SAER,KAAK,KAAKA,IAAW,EAAE,YAAY,KAAK,QAAQ,IAAI,UAAU,GAAG,KAAK,QAAQ,aAAa,EAAE,CAAC;CAEhG,IAAI,MAAM,YAAY,KAAA,GACpB,KAAK,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC;CAErC,OAAO,YAAY,cAAc;EAC/B,MAAM,KAAK;EACX;EACA;EACA,YAAY,MAAM;CACpB,CAAC;AACH;AAEA,SAAS,YAAY,QAAgB,YAAmD;CACtF,MAAM,WAAW,OAAO,YAAY;CAEpC,MAAM,MAAmB,CAAC;EAAE,QAAQ;EAAU,WADjC,WAAW,MAAM,MAAM,EAAE,OAAO,YAAY,MAAM,QACH,CAAC,EAAE;CAAU,CAAC;CAC1E,MAAM,uBAAO,IAAI,IAAY,CAAC,QAAQ,CAAC;CACvC,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,KAAK,UAAU,OAAO,YAAY;EACxC,IAAI,KAAK,IAAI,EAAE,GACb;EAEF,KAAK,IAAI,EAAE;EACX,IAAI,KAAK;GAAE,QAAQ;GAAI,WAAW,UAAU;EAAU,CAAC;CACzD;CACA,OAAO;AACT;AAEA,eAAsB,kBACpB,QACA,YACA,OACA,MAI4D;CAC5D,IAAI,WAAW,WAAW,GACxB,MAAM,IAAI,WAAW,8BAA8B;CAErD,MAAM,UAAU,YAAY,MAAM,QAAQ,UAAU;CACpD,MAAM,MAAiD,CAAC;CACxD,MAAM,WAAW,OACb;EACE,KAAK,KAAK;EACV,WAAW,KAAK;EAChB,YAAY,KAAK;EACjB,YAAY,KAAK;EACjB,WAAW,KAAK;CAClB,IACA,KAAA;CACJ,KAAK,MAAM,UAAU,SAAS;EAE5B,MAAM,OAAO,MAAM,WAAW,QAAQ,OAAO,QAAQ,OAAO,QAAQ;EACpE,MAAM,OAAO,eAAe,MAAM,OAAO,QAAQ;GAC/C,GAAG;GACH,WAAW,OAAO;GAClB,WAAW,MAAM;EACnB,CAAC;EACD,IAAI,KAAK;GAAE,WAAW,OAAO;GAAQ;EAAK,CAAC;CAC7C;CACA,OAAO;AACT;AAEA,SAAgB,gBAAgB,QAAgB,QAAyC;CACvF,IAAI,OAAO,WAAW,GACpB,MAAM,IAAI,WAAW,UAAU,OAAO,6CAA6C;CAErF,OAAO,CAAC,GAAG,MAAM;AACnB"}
+{"version":3,"file":"nip17.mjs","names":["TagBuilder"],"sources":["../../src/nips/nip17.ts"],"sourcesContent":["/**\n * NIP-17: Private Direct Messages. Kind 10050 advertises where gift-wraps should be delivered. Kind\n * 14 rumor construction and per-recipient wrap live here. Envelope primitives live in nip59.ts.\n *\n * @see https://github.com/nostr-protocol/nips/blob/master/17.md\n */\nimport { EventBuilder } from \"../core/builder.ts\";\nimport { EventValidationError, NostrError } from \"../core/error.ts\";\nimport type { Event } from \"../core/event.ts\";\nimport { Kind } from \"../core/kind.ts\";\nimport type { Tag } from \"../core/tag.ts\";\nimport { Tag as TagBuilder } from \"../core/tag.ts\";\nimport { assertHex32, normalizeRelayUrls } from \"../core/util.ts\";\nimport { createGiftWrap, createRumor, createSeal } from \"./nip59.ts\";\nimport type { Nip59Crypto, Rumor, WrapOptions } from \"./nip59.ts\";\n\nexport class Nip17Error extends NostrError {\n  override name = \"Nip17Error\";\n}\n\nexport type Recipient = {\n  readonly pubkey: string;\n  readonly relayHint?: string | undefined;\n};\n\nexport type ReplyTo = {\n  readonly id: string;\n  readonly relayHint?: string | undefined;\n};\n\nexport type ChatMessageOptions = {\n  readonly created_at?: number | undefined;\n  readonly subject?: string | undefined;\n  readonly replyTo?: ReplyTo | undefined;\n};\n\n/** Parse kind:10050 DM relay list (`[\"relay\", url]` tags). */\nexport function parseDmRelayList(event: Pick<Event, \"kind\" | \"tags\">): string[] {\n  if (event.kind !== Kind.DirectMessageRelaysList) {\n    throw new EventValidationError(\n      `expected kind ${Kind.DirectMessageRelaysList}, got ${event.kind}`,\n    );\n  }\n  const urls: string[] = [];\n  for (const tag of event.tags) {\n    const value = tag.at(1);\n    if (tag[0] === \"relay\" && value !== undefined) {\n      urls.push(value);\n    }\n  }\n  return normalizeRelayUrls(urls);\n}\n\n/** Encode DM relay URLs as NIP-17 `relay` tags. */\nexport function dmRelayListToTags(relays: ReadonlyArray<string>): Tag[] {\n  return normalizeRelayUrls(relays).map((url) => [\"relay\", url]);\n}\n\n/** Build an unsigned kind:10050 EventBuilder. NIP-17 requires ≥1 relay tag. */\nexport function dmRelayListEventBuilder(relays: ReadonlyArray<string>): EventBuilder {\n  const tags = dmRelayListToTags(relays);\n  if (tags.length === 0) {\n    throw new Nip17Error(\"DM relay list requires at least one relay\");\n  }\n  return new EventBuilder(Kind.DirectMessageRelaysList, \"\").tags(tags);\n}\n\nfunction isRecipient(value: unknown): value is Recipient {\n  return typeof value === \"object\" && value !== null && \"pubkey\" in value;\n}\n\nfunction asRecipientList(\n  input: string | Recipient | ReadonlyArray<string | Recipient>,\n): ReadonlyArray<string | Recipient> {\n  if (typeof input === \"string\" || isRecipient(input)) {\n    return [input];\n  }\n  return input;\n}\n\n/** Accept a hex pubkey, a Recipient, or a readonly array of either. Dedup by pubkey. */\nexport function normalizeRecipients(\n  input: string | Recipient | ReadonlyArray<string | Recipient>,\n): Recipient[] {\n  const out: Recipient[] = [];\n  const seen = new Set<string>();\n  for (const item of asRecipientList(input)) {\n    const rec: Recipient = typeof item === \"string\" ? { pubkey: item } : item;\n    const pubkey = assertHex32(rec.pubkey, \"public key\");\n    if (seen.has(pubkey)) {\n      continue;\n    }\n    seen.add(pubkey);\n    out.push({ pubkey, relayHint: rec.relayHint });\n  }\n  return out;\n}\n\nexport function buildChatMessageRumor(\n  senderPubkey: string,\n  recipients: ReadonlyArray<Recipient>,\n  content: string,\n  opts?: ChatMessageOptions,\n): Rumor {\n  if (recipients.length === 0) {\n    throw new Nip17Error(\"recipients must not be empty\");\n  }\n  const tags: Tag[] = [];\n  for (const recipient of recipients) {\n    const pk = assertHex32(recipient.pubkey, \"public key\");\n    tags.push(TagBuilder.p(pk, recipient.relayHint));\n  }\n  if (opts?.replyTo) {\n    // Kind 14 reply e-tag is unmarked: [\"e\", <id>, <relay-url>]\n    tags.push(TagBuilder.e(assertHex32(opts.replyTo.id, \"event id\"), opts.replyTo.relayHint ?? \"\"));\n  }\n  if (opts?.subject !== undefined) {\n    tags.push([\"subject\", opts.subject]);\n  }\n  return createRumor(senderPubkey, {\n    kind: Kind.PrivateDirectMessage,\n    content,\n    tags,\n    created_at: opts?.created_at,\n  });\n}\n\nfunction wrapTargets(sender: string, recipients: ReadonlyArray<Recipient>): Recipient[] {\n  const senderPk = sender.toLowerCase();\n  const self = recipients.find((r) => r.pubkey.toLowerCase() === senderPk);\n  const out: Recipient[] = [{ pubkey: senderPk, relayHint: self?.relayHint }];\n  const seen = new Set<string>([senderPk]);\n  for (const recipient of recipients) {\n    const pk = recipient.pubkey.toLowerCase();\n    if (seen.has(pk)) {\n      continue;\n    }\n    seen.add(pk);\n    out.push({ pubkey: pk, relayHint: recipient.relayHint });\n  }\n  return out;\n}\n\nexport async function wrapDirectMessage(\n  crypto: Nip59Crypto,\n  recipients: ReadonlyArray<Recipient>,\n  rumor: Rumor,\n  opts?: Pick<\n    WrapOptions,\n    \"now\" | \"randomBytes\" | \"timestamps\" | \"expiration\" | \"ephemeral\" | \"randomize\"\n  >,\n): Promise<ReadonlyArray<{ recipient: string; wrap: Event }>> {\n  if (recipients.length === 0) {\n    throw new Nip17Error(\"recipients must not be empty\");\n  }\n  const targets = wrapTargets(rumor.pubkey, recipients);\n  const out: Array<{ recipient: string; wrap: Event }> = [];\n  const timeOpts = opts\n    ? {\n        now: opts.now,\n        randomBytes: opts.randomBytes,\n        timestamps: opts.timestamps,\n        expiration: opts.expiration,\n        randomize: opts.randomize,\n      }\n    : undefined;\n  for (const target of targets) {\n    // oxlint-disable-next-line no-await-in-loop -- signer calls stay ordered, one recipient at a time\n    const seal = await createSeal(crypto, target.pubkey, rumor, timeOpts);\n    const wrap = createGiftWrap(seal, target.pubkey, {\n      ...timeOpts,\n      relayHint: target.relayHint,\n      ephemeral: opts?.ephemeral,\n    });\n    out.push({ recipient: target.pubkey, wrap });\n  }\n  return out;\n}\n\nexport function requireDmRelays(pubkey: string, relays: ReadonlyArray<string>): string[] {\n  if (relays.length === 0) {\n    throw new Nip17Error(`pubkey ${pubkey} is not ready to receive DMs (no kind 10050)`);\n  }\n  return [...relays];\n}\n"],"mappings":";;;;;;;;;;;;AAgBA,IAAa,aAAb,cAAgC,WAAW;CACzC,OAAgB;AAClB;;AAmBA,SAAgB,iBAAiB,OAA+C;CAC9E,IAAI,MAAM,SAAS,KAAK,yBACtB,MAAM,IAAI,qBACR,iBAAiB,KAAK,wBAAwB,QAAQ,MAAM,MAC9D;CAEF,MAAM,OAAiB,CAAC;CACxB,KAAK,MAAM,OAAO,MAAM,MAAM;EAC5B,MAAM,QAAQ,IAAI,GAAG,CAAC;EACtB,IAAI,IAAI,OAAO,WAAW,UAAU,KAAA,GAClC,KAAK,KAAK,KAAK;CAEnB;CACA,OAAO,mBAAmB,IAAI;AAChC;;AAGA,SAAgB,kBAAkB,QAAsC;CACtE,OAAO,mBAAmB,MAAM,CAAC,CAAC,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC;AAC/D;;AAGA,SAAgB,wBAAwB,QAA6C;CACnF,MAAM,OAAO,kBAAkB,MAAM;CACrC,IAAI,KAAK,WAAW,GAClB,MAAM,IAAI,WAAW,2CAA2C;CAElE,OAAO,IAAI,aAAa,KAAK,yBAAyB,EAAE,CAAC,CAAC,KAAK,IAAI;AACrE;AAEA,SAAS,YAAY,OAAoC;CACvD,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,YAAY;AACpE;AAEA,SAAS,gBACP,OACmC;CACnC,IAAI,OAAO,UAAU,YAAY,YAAY,KAAK,GAChD,OAAO,CAAC,KAAK;CAEf,OAAO;AACT;;AAGA,SAAgB,oBACd,OACa;CACb,MAAM,MAAmB,CAAC;CAC1B,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,QAAQ,gBAAgB,KAAK,GAAG;EACzC,MAAM,MAAiB,OAAO,SAAS,WAAW,EAAE,QAAQ,KAAK,IAAI;EACrE,MAAM,SAAS,YAAY,IAAI,QAAQ,YAAY;EACnD,IAAI,KAAK,IAAI,MAAM,GACjB;EAEF,KAAK,IAAI,MAAM;EACf,IAAI,KAAK;GAAE;GAAQ,WAAW,IAAI;EAAU,CAAC;CAC/C;CACA,OAAO;AACT;AAEA,SAAgB,sBACd,cACA,YACA,SACA,MACO;CACP,IAAI,WAAW,WAAW,GACxB,MAAM,IAAI,WAAW,8BAA8B;CAErD,MAAM,OAAc,CAAC;CACrB,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,KAAK,YAAY,UAAU,QAAQ,YAAY;EACrD,KAAK,KAAKA,IAAW,EAAE,IAAI,UAAU,SAAS,CAAC;CACjD;CACA,IAAI,MAAM,SAER,KAAK,KAAKA,IAAW,EAAE,YAAY,KAAK,QAAQ,IAAI,UAAU,GAAG,KAAK,QAAQ,aAAa,EAAE,CAAC;CAEhG,IAAI,MAAM,YAAY,KAAA,GACpB,KAAK,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC;CAErC,OAAO,YAAY,cAAc;EAC/B,MAAM,KAAK;EACX;EACA;EACA,YAAY,MAAM;CACpB,CAAC;AACH;AAEA,SAAS,YAAY,QAAgB,YAAmD;CACtF,MAAM,WAAW,OAAO,YAAY;CAEpC,MAAM,MAAmB,CAAC;EAAE,QAAQ;EAAU,WADjC,WAAW,MAAM,MAAM,EAAE,OAAO,YAAY,MAAM,QACH,CAAC,EAAE;CAAU,CAAC;CAC1E,MAAM,uBAAO,IAAI,IAAY,CAAC,QAAQ,CAAC;CACvC,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,KAAK,UAAU,OAAO,YAAY;EACxC,IAAI,KAAK,IAAI,EAAE,GACb;EAEF,KAAK,IAAI,EAAE;EACX,IAAI,KAAK;GAAE,QAAQ;GAAI,WAAW,UAAU;EAAU,CAAC;CACzD;CACA,OAAO;AACT;AAEA,eAAsB,kBACpB,QACA,YACA,OACA,MAI4D;CAC5D,IAAI,WAAW,WAAW,GACxB,MAAM,IAAI,WAAW,8BAA8B;CAErD,MAAM,UAAU,YAAY,MAAM,QAAQ,UAAU;CACpD,MAAM,MAAiD,CAAC;CACxD,MAAM,WAAW,OACb;EACE,KAAK,KAAK;EACV,aAAa,KAAK;EAClB,YAAY,KAAK;EACjB,YAAY,KAAK;EACjB,WAAW,KAAK;CAClB,IACA,KAAA;CACJ,KAAK,MAAM,UAAU,SAAS;EAE5B,MAAM,OAAO,MAAM,WAAW,QAAQ,OAAO,QAAQ,OAAO,QAAQ;EACpE,MAAM,OAAO,eAAe,MAAM,OAAO,QAAQ;GAC/C,GAAG;GACH,WAAW,OAAO;GAClB,WAAW,MAAM;EACnB,CAAC;EACD,IAAI,KAAK;GAAE,WAAW,OAAO;GAAQ;EAAK,CAAC;CAC7C;CACA,OAAO;AACT;AAEA,SAAgB,gBAAgB,QAAgB,QAAyC;CACvF,IAAI,OAAO,WAAW,GACpB,MAAM,IAAI,WAAW,UAAU,OAAO,6CAA6C;CAErF,OAAO,CAAC,GAAG,MAAM;AACnB"}

package/dist/nips/nip19.mjs

@@ -1,4 +1,5 @@
-import { a as hexToBytes, f as utf8Decoder, i as bytesToHex, n as assertHex32, p as utf8Encoder, t as assertByteLength, v as NostrError, x as errorMessage } from "../util-DMF9AIO0.mjs";
+import { S as errorMessage, i as bytesToHex, m as utf8Encoder, n as assertHex32, o as hexToBytes, p as utf8Decoder, t as assertByteLength, y as NostrError } from "../util-DDpPkiED.mjs";
+import { secp256k1 } from "@noble/curves/secp256k1.js";
 import { bech32 } from "@scure/base";
 //#region src/nips/nip19.ts
 /** Maximum bech32 string length accepted by {@link decode} (NIP-19). */
@@ -29,7 +30,7 @@ function parseTLV(data) {
 	return result;
 }
 function assertNip19Kind(kind) {
-	if (!Number.isInteger(kind) || kind < 0 || kind > 4294967295) throw new Nip19Error(`invalid kind: ${kind}`);
+	if (!Number.isInteger(kind) || kind < 0 || kind > 65535) throw new Nip19Error(`invalid kind: ${kind}`);
 }
 function encodeTLV(tlv) {
 	const entries = [];
@@ -140,7 +141,10 @@ function decode(code) {
 			const author = tlv[2]?.[0];
 			if (author !== void 0) pointer.author = bytesToHex(author);
 			const kind = tlv[3]?.[0];
-			if (kind !== void 0) pointer.kind = readUint32(kind);
+			if (kind !== void 0) {
+				pointer.kind = readUint32(kind);
+				assertNip19Kind(pointer.kind);
+			}
 			return {
 				type: "nevent",
 				data: pointer
@@ -153,18 +157,21 @@ function decode(code) {
 			if (tlv[2][0].length !== 32) throw new Nip19Error("TLV 2 should be 32 bytes");
 			if (!tlv[3]?.[0]) throw new Nip19Error("missing TLV 3 for naddr");
 			if (tlv[3][0].length !== 4) throw new Nip19Error("TLV 3 should be 4 bytes");
+			const naddrKind = readUint32(tlv[3][0]);
+			assertNip19Kind(naddrKind);
 			return {
 				type: "naddr",
 				data: {
 					identifier: utf8Decoder.decode(tlv[0][0]),
 					pubkey: bytesToHex(tlv[2][0]),
-					kind: readUint32(tlv[3][0]),
+					kind: naddrKind,
 					relays: tlv[1] ? tlv[1].map((d) => utf8Decoder.decode(d)) : []
 				}
 			};
 		}
 		case "nsec":
 			if (data.length !== 32) throw new Nip19Error("nsec must be 32 bytes");
+			if (!secp256k1.utils.isValidSecretKey(data)) throw new Nip19Error("invalid nsec secret key");
 			return {
 				type: "nsec",
 				data

package/dist/nips/nip19.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"nip19.mjs","names":[],"sources":["../../src/nips/nip19.ts"],"sourcesContent":["import { bech32 } from \"@scure/base\";\n\nimport { NostrError, errorMessage } from \"../core/error.ts\";\nimport type { Mutable } from \"../core/util.ts\";\nimport {\n  assertByteLength,\n  assertHex32,\n  bytesToHex,\n  hexToBytes,\n  utf8Decoder,\n  utf8Encoder,\n} from \"../core/util.ts\";\n\n/** Bech32 `nprofile1…` string (TLV profile pointer). */\nexport type NProfile = `nprofile1${string}`;\n/** Bech32 `nevent1…` string (TLV event pointer). */\nexport type NEvent = `nevent1${string}`;\n/** Bech32 `naddr1…` string (TLV address pointer). */\nexport type NAddr = `naddr1${string}`;\n/** Bech32 `nsec1…` string (32-byte secret key). */\nexport type NSec = `nsec1${string}`;\n/** Bech32 `npub1…` string (32-byte public key). */\nexport type NPub = `npub1${string}`;\n/** Bech32 `note1…` string (32-byte event id). */\nexport type Note = `note1${string}`;\n\n/** Maximum bech32 string length accepted by {@link decode} (NIP-19). */\nexport const Bech32MaxSize = 5000;\n\n/** Decoded `nprofile` payload: a pubkey plus optional relay hints. */\nexport type ProfilePointer = {\n  readonly pubkey: string;\n  readonly relays?: ReadonlyArray<string> | undefined;\n};\n\n/** Decoded `nevent` payload: an event id plus optional relay/author/kind hints. */\nexport type EventPointer = {\n  readonly id: string;\n  readonly relays?: ReadonlyArray<string> | undefined;\n  readonly author?: string | undefined;\n  readonly kind?: number | undefined;\n};\n\n/** Decoded `naddr` payload: a replaceable-event coordinate plus optional relay hints. */\nexport type AddressPointer = {\n  readonly identifier: string;\n  readonly pubkey: string;\n  readonly kind: number;\n  readonly relays?: ReadonlyArray<string> | undefined;\n};\n\n/** Result of {@link decode}: the bech32 prefix and its decoded payload. */\nexport type DecodedResult =\n  | { readonly type: \"nprofile\"; readonly data: ProfilePointer }\n  | { readonly type: \"nevent\"; readonly data: EventPointer }\n  | { readonly type: \"naddr\"; readonly data: AddressPointer }\n  | { readonly type: \"nsec\"; readonly data: Uint8Array }\n  | { readonly type: \"npub\"; readonly data: string }\n  | { readonly type: \"note\"; readonly data: string };\n\n/** Error thrown by NIP-19 encoding/decoding failures. */\nexport class Nip19Error extends NostrError {\n  override name = \"Nip19Error\";\n}\n\ntype TLV = Record<number, Uint8Array[]>;\n\nfunction integerToUint8Array(number: number): Uint8Array {\n  const out = new Uint8Array(4);\n  new DataView(out.buffer).setUint32(0, number);\n  return out;\n}\n\nfunction parseTLV(data: Uint8Array): TLV {\n  const result: TLV = {};\n  let rest = data;\n  while (rest.length > 0) {\n    if (rest.length < 2) {\n      throw new Nip19Error(\"not enough data to read TLV\");\n    }\n    const t = rest.at(0);\n    const l = rest.at(1);\n    if (t === undefined || l === undefined) {\n      throw new Nip19Error(\"not enough data to read TLV\");\n    }\n    const v = rest.slice(2, 2 + l);\n    rest = rest.slice(2 + l);\n    if (v.length < l) {\n      throw new Nip19Error(`not enough data to read on TLV ${t}`);\n    }\n    result[t] = result[t] ?? [];\n    result[t].push(v);\n  }\n  return result;\n}\n\nfunction assertNip19Kind(kind: number): void {\n  if (!Number.isInteger(kind) || kind < 0 || kind > 0xffffffff) {\n    throw new Nip19Error(`invalid kind: ${kind}`);\n  }\n}\n\nfunction encodeTLV(tlv: TLV): Uint8Array {\n  const entries: Uint8Array[] = [];\n  for (const [t, vs] of Object.entries(tlv).reverse()) {\n    for (const v of vs) {\n      if (v.length > 255) {\n        throw new Nip19Error(\"TLV value exceeds 255 bytes\");\n      }\n      const entry = new Uint8Array(v.length + 2);\n      entry[0] = Math.trunc(Number(t));\n      entry[1] = v.length;\n      entry.set(v, 2);\n      entries.push(entry);\n    }\n  }\n  let total = 0;\n  for (const e of entries) {\n    total += e.length;\n  }\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const e of entries) {\n    out.set(e, offset);\n    offset += e.length;\n  }\n  return out;\n}\n\nfunction encodeBech32<Prefix extends string>(\n  prefix: Prefix,\n  data: Uint8Array,\n): `${Prefix}1${string}` {\n  const words = bech32.toWords(data);\n  // oxlint-disable-next-line no-unsafe-type-assertion -- bech32 output is `${prefix}1…` by construction\n  return bech32.encode(prefix, words, Bech32MaxSize) as `${Prefix}1${string}`;\n}\n\nexport function encodeBytes<Prefix extends string>(\n  prefix: Prefix,\n  bytes: Uint8Array,\n): `${Prefix}1${string}` {\n  return encodeBech32(prefix, bytes);\n}\n\n/** Encode a 32-byte secret key as `nsec1…`; throws {@link Nip19Error} on wrong length. */\nexport function nsecEncode(key: Uint8Array): NSec {\n  assertByteLength(key, 32, \"secret key\");\n  return encodeBytes(\"nsec\", key);\n}\n\n/** Encode a hex public key as `npub1…`; throws {@link HexError} on bad hex. */\nexport function npubEncode(hex: string): NPub {\n  return encodeBytes(\"npub\", hexToBytes(assertHex32(hex, \"pubkey\")));\n}\n\n/** Encode a hex event id as `note1…`; throws {@link HexError} on bad hex. */\nexport function noteEncode(hex: string): Note {\n  return encodeBytes(\"note\", hexToBytes(assertHex32(hex, \"event id\")));\n}\n\n/** Encode a profile pointer as `nprofile1…`. */\nexport function nprofileEncode(profile: ProfilePointer): NProfile {\n  const data = encodeTLV({\n    0: [hexToBytes(assertHex32(profile.pubkey, \"pubkey\"))],\n    1: (profile.relays ?? []).map((url) => utf8Encoder.encode(url)),\n  });\n  return encodeBech32(\"nprofile\", data);\n}\n\n/** Encode an event pointer as `nevent1…`. */\nexport function neventEncode(event: EventPointer): NEvent {\n  if (event.kind !== undefined) {\n    assertNip19Kind(event.kind);\n  }\n  const kindArray = event.kind === undefined ? undefined : integerToUint8Array(event.kind);\n  const data = encodeTLV({\n    0: [hexToBytes(assertHex32(event.id, \"event id\"))],\n    1: (event.relays ?? []).map((url) => utf8Encoder.encode(url)),\n    2:\n      event.author !== undefined && event.author !== \"\"\n        ? [hexToBytes(assertHex32(event.author, \"author\"))]\n        : [],\n    3: kindArray ? [kindArray] : [],\n  });\n  return encodeBech32(\"nevent\", data);\n}\n\n/** Encode an address pointer as `naddr1…`. */\nexport function naddrEncode(addr: AddressPointer): NAddr {\n  assertNip19Kind(addr.kind);\n  const kind = integerToUint8Array(addr.kind);\n  const data = encodeTLV({\n    0: [utf8Encoder.encode(addr.identifier)],\n    1: (addr.relays ?? []).map((url) => utf8Encoder.encode(url)),\n    2: [hexToBytes(assertHex32(addr.pubkey, \"pubkey\"))],\n    3: [kind],\n  });\n  return encodeBech32(\"naddr\", data);\n}\n\nfunction readUint32(bytes: Uint8Array): number {\n  return new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength).getUint32(0);\n}\n\n/** Decode a NIP-19 bech32 entity; throws {@link Nip19Error} on bad input or unknown prefix. */\nexport function decode(code: string): DecodedResult {\n  let prefix: string;\n  let data: Uint8Array;\n  try {\n    const { prefix: hrp, words } = bech32.decode(code, Bech32MaxSize);\n    prefix = hrp;\n    data = new Uint8Array(bech32.fromWords(words));\n  } catch (error) {\n    throw new Nip19Error(`invalid bech32: ${errorMessage(error)}`, { cause: error });\n  }\n\n  switch (prefix) {\n    case \"nprofile\": {\n      const tlv = parseTLV(data);\n      if (!tlv[0]?.[0]) {\n        throw new Nip19Error(\"missing TLV 0 for nprofile\");\n      }\n      if (tlv[0][0].length !== 32) {\n        throw new Nip19Error(\"TLV 0 should be 32 bytes\");\n      }\n      return {\n        type: \"nprofile\",\n        data: {\n          pubkey: bytesToHex(tlv[0][0]),\n          relays: tlv[1] ? tlv[1].map((d) => utf8Decoder.decode(d)) : [],\n        },\n      };\n    }\n    case \"nevent\": {\n      const tlv = parseTLV(data);\n      if (!tlv[0]?.[0]) {\n        throw new Nip19Error(\"missing TLV 0 for nevent\");\n      }\n      if (tlv[0][0].length !== 32) {\n        throw new Nip19Error(\"TLV 0 should be 32 bytes\");\n      }\n      if (tlv[2]?.[0] && tlv[2][0].length !== 32) {\n        throw new Nip19Error(\"TLV 2 should be 32 bytes\");\n      }\n      if (tlv[3]?.[0] && tlv[3][0].length !== 4) {\n        throw new Nip19Error(\"TLV 3 should be 4 bytes\");\n      }\n      const pointer: Mutable<EventPointer> = {\n        id: bytesToHex(tlv[0][0]),\n        relays: tlv[1] ? tlv[1].map((d) => utf8Decoder.decode(d)) : [],\n      };\n      const author = tlv[2]?.[0];\n      if (author !== undefined) {\n        pointer.author = bytesToHex(author);\n      }\n      const kind = tlv[3]?.[0];\n      if (kind !== undefined) {\n        pointer.kind = readUint32(kind);\n      }\n      return { type: \"nevent\", data: pointer };\n    }\n    case \"naddr\": {\n      const tlv = parseTLV(data);\n      if (!tlv[0]?.[0]) {\n        throw new Nip19Error(\"missing TLV 0 for naddr\");\n      }\n      if (!tlv[2]?.[0]) {\n        throw new Nip19Error(\"missing TLV 2 for naddr\");\n      }\n      if (tlv[2][0].length !== 32) {\n        throw new Nip19Error(\"TLV 2 should be 32 bytes\");\n      }\n      if (!tlv[3]?.[0]) {\n        throw new Nip19Error(\"missing TLV 3 for naddr\");\n      }\n      if (tlv[3][0].length !== 4) {\n        throw new Nip19Error(\"TLV 3 should be 4 bytes\");\n      }\n      return {\n        type: \"naddr\",\n        data: {\n          identifier: utf8Decoder.decode(tlv[0][0]),\n          pubkey: bytesToHex(tlv[2][0]),\n          kind: readUint32(tlv[3][0]),\n          relays: tlv[1] ? tlv[1].map((d) => utf8Decoder.decode(d)) : [],\n        },\n      };\n    }\n    case \"nsec\":\n      if (data.length !== 32) {\n        throw new Nip19Error(\"nsec must be 32 bytes\");\n      }\n      return { type: \"nsec\", data };\n    case \"npub\":\n    case \"note\":\n      if (data.length !== 32) {\n        throw new Nip19Error(`${prefix} must be 32 bytes`);\n      }\n      return { type: prefix, data: bytesToHex(data) };\n    default:\n      throw new Nip19Error(`unknown prefix ${prefix}`);\n  }\n}\n"],"mappings":";;;;AA2BA,MAAa,gBAAgB;;AAkC7B,IAAa,aAAb,cAAgC,WAAW;CACzC,OAAgB;AAClB;AAIA,SAAS,oBAAoB,QAA4B;CACvD,MAAM,sBAAM,IAAI,WAAW,CAAC;CAC5B,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,UAAU,GAAG,MAAM;CAC5C,OAAO;AACT;AAEA,SAAS,SAAS,MAAuB;CACvC,MAAM,SAAc,CAAC;CACrB,IAAI,OAAO;CACX,OAAO,KAAK,SAAS,GAAG;EACtB,IAAI,KAAK,SAAS,GAChB,MAAM,IAAI,WAAW,6BAA6B;EAEpD,MAAM,IAAI,KAAK,GAAG,CAAC;EACnB,MAAM,IAAI,KAAK,GAAG,CAAC;EACnB,IAAI,MAAM,KAAA,KAAa,MAAM,KAAA,GAC3B,MAAM,IAAI,WAAW,6BAA6B;EAEpD,MAAM,IAAI,KAAK,MAAM,GAAG,IAAI,CAAC;EAC7B,OAAO,KAAK,MAAM,IAAI,CAAC;EACvB,IAAI,EAAE,SAAS,GACb,MAAM,IAAI,WAAW,kCAAkC,GAAG;EAE5D,OAAO,KAAK,OAAO,MAAM,CAAC;EAC1B,OAAO,EAAE,CAAC,KAAK,CAAC;CAClB;CACA,OAAO;AACT;AAEA,SAAS,gBAAgB,MAAoB;CAC3C,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,YAChD,MAAM,IAAI,WAAW,iBAAiB,MAAM;AAEhD;AAEA,SAAS,UAAU,KAAsB;CACvC,MAAM,UAAwB,CAAC;CAC/B,KAAK,MAAM,CAAC,GAAG,OAAO,OAAO,QAAQ,GAAG,CAAC,CAAC,QAAQ,GAChD,KAAK,MAAM,KAAK,IAAI;EAClB,IAAI,EAAE,SAAS,KACb,MAAM,IAAI,WAAW,6BAA6B;EAEpD,MAAM,QAAQ,IAAI,WAAW,EAAE,SAAS,CAAC;EACzC,MAAM,KAAK,KAAK,MAAM,OAAO,CAAC,CAAC;EAC/B,MAAM,KAAK,EAAE;EACb,MAAM,IAAI,GAAG,CAAC;EACd,QAAQ,KAAK,KAAK;CACpB;CAEF,IAAI,QAAQ;CACZ,KAAK,MAAM,KAAK,SACd,SAAS,EAAE;CAEb,MAAM,MAAM,IAAI,WAAW,KAAK;CAChC,IAAI,SAAS;CACb,KAAK,MAAM,KAAK,SAAS;EACvB,IAAI,IAAI,GAAG,MAAM;EACjB,UAAU,EAAE;CACd;CACA,OAAO;AACT;AAEA,SAAS,aACP,QACA,MACuB;CACvB,MAAM,QAAQ,OAAO,QAAQ,IAAI;CAEjC,OAAO,OAAO,OAAO,QAAQ,OAAO,aAAa;AACnD;AAEA,SAAgB,YACd,QACA,OACuB;CACvB,OAAO,aAAa,QAAQ,KAAK;AACnC;;AAGA,SAAgB,WAAW,KAAuB;CAChD,iBAAiB,KAAK,IAAI,YAAY;CACtC,OAAO,YAAY,QAAQ,GAAG;AAChC;;AAGA,SAAgB,WAAW,KAAmB;CAC5C,OAAO,YAAY,QAAQ,WAAW,YAAY,KAAK,QAAQ,CAAC,CAAC;AACnE;;AAGA,SAAgB,WAAW,KAAmB;CAC5C,OAAO,YAAY,QAAQ,WAAW,YAAY,KAAK,UAAU,CAAC,CAAC;AACrE;;AAGA,SAAgB,eAAe,SAAmC;CAKhE,OAAO,aAAa,YAJP,UAAU;EACrB,GAAG,CAAC,WAAW,YAAY,QAAQ,QAAQ,QAAQ,CAAC,CAAC;EACrD,IAAI,QAAQ,UAAU,CAAC,EAAA,CAAG,KAAK,QAAQ,YAAY,OAAO,GAAG,CAAC;CAChE,CACmC,CAAC;AACtC;;AAGA,SAAgB,aAAa,OAA6B;CACxD,IAAI,MAAM,SAAS,KAAA,GACjB,gBAAgB,MAAM,IAAI;CAE5B,MAAM,YAAY,MAAM,SAAS,KAAA,IAAY,KAAA,IAAY,oBAAoB,MAAM,IAAI;CAUvF,OAAO,aAAa,UATP,UAAU;EACrB,GAAG,CAAC,WAAW,YAAY,MAAM,IAAI,UAAU,CAAC,CAAC;EACjD,IAAI,MAAM,UAAU,CAAC,EAAA,CAAG,KAAK,QAAQ,YAAY,OAAO,GAAG,CAAC;EAC5D,GACE,MAAM,WAAW,KAAA,KAAa,MAAM,WAAW,KAC3C,CAAC,WAAW,YAAY,MAAM,QAAQ,QAAQ,CAAC,CAAC,IAChD,CAAC;EACP,GAAG,YAAY,CAAC,SAAS,IAAI,CAAC;CAChC,CACiC,CAAC;AACpC;;AAGA,SAAgB,YAAY,MAA6B;CACvD,gBAAgB,KAAK,IAAI;CACzB,MAAM,OAAO,oBAAoB,KAAK,IAAI;CAO1C,OAAO,aAAa,SANP,UAAU;EACrB,GAAG,CAAC,YAAY,OAAO,KAAK,UAAU,CAAC;EACvC,IAAI,KAAK,UAAU,CAAC,EAAA,CAAG,KAAK,QAAQ,YAAY,OAAO,GAAG,CAAC;EAC3D,GAAG,CAAC,WAAW,YAAY,KAAK,QAAQ,QAAQ,CAAC,CAAC;EAClD,GAAG,CAAC,IAAI;CACV,CACgC,CAAC;AACnC;AAEA,SAAS,WAAW,OAA2B;CAC7C,OAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU,CAAC,CAAC,UAAU,CAAC;AACnF;;AAGA,SAAgB,OAAO,MAA6B;CAClD,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,MAAM,EAAE,QAAQ,KAAK,UAAU,OAAO,OAAO,MAAM,aAAa;EAChE,SAAS;EACT,OAAO,IAAI,WAAW,OAAO,UAAU,KAAK,CAAC;CAC/C,SAAS,OAAO;EACd,MAAM,IAAI,WAAW,mBAAmB,aAAa,KAAK,KAAK,EAAE,OAAO,MAAM,CAAC;CACjF;CAEA,QAAQ,QAAR;EACE,KAAK,YAAY;GACf,MAAM,MAAM,SAAS,IAAI;GACzB,IAAI,CAAC,IAAI,EAAE,GAAG,IACZ,MAAM,IAAI,WAAW,4BAA4B;GAEnD,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,IACvB,MAAM,IAAI,WAAW,0BAA0B;GAEjD,OAAO;IACL,MAAM;IACN,MAAM;KACJ,QAAQ,WAAW,IAAI,EAAE,CAAC,EAAE;KAC5B,QAAQ,IAAI,KAAK,IAAI,EAAE,CAAC,KAAK,MAAM,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC;IAC/D;GACF;EACF;EACA,KAAK,UAAU;GACb,MAAM,MAAM,SAAS,IAAI;GACzB,IAAI,CAAC,IAAI,EAAE,GAAG,IACZ,MAAM,IAAI,WAAW,0BAA0B;GAEjD,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,IACvB,MAAM,IAAI,WAAW,0BAA0B;GAEjD,IAAI,IAAI,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,IACtC,MAAM,IAAI,WAAW,0BAA0B;GAEjD,IAAI,IAAI,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,GACtC,MAAM,IAAI,WAAW,yBAAyB;GAEhD,MAAM,UAAiC;IACrC,IAAI,WAAW,IAAI,EAAE,CAAC,EAAE;IACxB,QAAQ,IAAI,KAAK,IAAI,EAAE,CAAC,KAAK,MAAM,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC;GAC/D;GACA,MAAM,SAAS,IAAI,EAAE,GAAG;GACxB,IAAI,WAAW,KAAA,GACb,QAAQ,SAAS,WAAW,MAAM;GAEpC,MAAM,OAAO,IAAI,EAAE,GAAG;GACtB,IAAI,SAAS,KAAA,GACX,QAAQ,OAAO,WAAW,IAAI;GAEhC,OAAO;IAAE,MAAM;IAAU,MAAM;GAAQ;EACzC;EACA,KAAK,SAAS;GACZ,MAAM,MAAM,SAAS,IAAI;GACzB,IAAI,CAAC,IAAI,EAAE,GAAG,IACZ,MAAM,IAAI,WAAW,yBAAyB;GAEhD,IAAI,CAAC,IAAI,EAAE,GAAG,IACZ,MAAM,IAAI,WAAW,yBAAyB;GAEhD,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,IACvB,MAAM,IAAI,WAAW,0BAA0B;GAEjD,IAAI,CAAC,IAAI,EAAE,GAAG,IACZ,MAAM,IAAI,WAAW,yBAAyB;GAEhD,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,GACvB,MAAM,IAAI,WAAW,yBAAyB;GAEhD,OAAO;IACL,MAAM;IACN,MAAM;KACJ,YAAY,YAAY,OAAO,IAAI,EAAE,CAAC,EAAE;KACxC,QAAQ,WAAW,IAAI,EAAE,CAAC,EAAE;KAC5B,MAAM,WAAW,IAAI,EAAE,CAAC,EAAE;KAC1B,QAAQ,IAAI,KAAK,IAAI,EAAE,CAAC,KAAK,MAAM,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC;IAC/D;GACF;EACF;EACA,KAAK;GACH,IAAI,KAAK,WAAW,IAClB,MAAM,IAAI,WAAW,uBAAuB;GAE9C,OAAO;IAAE,MAAM;IAAQ;GAAK;EAC9B,KAAK;EACL,KAAK;GACH,IAAI,KAAK,WAAW,IAClB,MAAM,IAAI,WAAW,GAAG,OAAO,kBAAkB;GAEnD,OAAO;IAAE,MAAM;IAAQ,MAAM,WAAW,IAAI;GAAE;EAChD,SACE,MAAM,IAAI,WAAW,kBAAkB,QAAQ;CACnD;AACF"}
+{"version":3,"file":"nip19.mjs","names":[],"sources":["../../src/nips/nip19.ts"],"sourcesContent":["import { secp256k1 } from \"@noble/curves/secp256k1.js\";\nimport { bech32 } from \"@scure/base\";\n\nimport { NostrError, errorMessage } from \"../core/error.ts\";\nimport type { Mutable } from \"../core/util.ts\";\nimport {\n  assertByteLength,\n  assertHex32,\n  bytesToHex,\n  hexToBytes,\n  utf8Decoder,\n  utf8Encoder,\n} from \"../core/util.ts\";\n\n/** Bech32 `nprofile1…` string (TLV profile pointer). */\nexport type NProfile = `nprofile1${string}`;\n/** Bech32 `nevent1…` string (TLV event pointer). */\nexport type NEvent = `nevent1${string}`;\n/** Bech32 `naddr1…` string (TLV address pointer). */\nexport type NAddr = `naddr1${string}`;\n/** Bech32 `nsec1…` string (32-byte secret key). */\nexport type NSec = `nsec1${string}`;\n/** Bech32 `npub1…` string (32-byte public key). */\nexport type NPub = `npub1${string}`;\n/** Bech32 `note1…` string (32-byte event id). */\nexport type Note = `note1${string}`;\n\n/** Maximum bech32 string length accepted by {@link decode} (NIP-19). */\nexport const Bech32MaxSize = 5000;\n\n/** Decoded `nprofile` payload: a pubkey plus optional relay hints. */\nexport type ProfilePointer = {\n  readonly pubkey: string;\n  readonly relays?: ReadonlyArray<string> | undefined;\n};\n\n/** Decoded `nevent` payload: an event id plus optional relay/author/kind hints. */\nexport type EventPointer = {\n  readonly id: string;\n  readonly relays?: ReadonlyArray<string> | undefined;\n  readonly author?: string | undefined;\n  readonly kind?: number | undefined;\n};\n\n/** Decoded `naddr` payload: a replaceable-event coordinate plus optional relay hints. */\nexport type AddressPointer = {\n  readonly identifier: string;\n  readonly pubkey: string;\n  readonly kind: number;\n  readonly relays?: ReadonlyArray<string> | undefined;\n};\n\n/** Result of {@link decode}: the bech32 prefix and its decoded payload. */\nexport type DecodedResult =\n  | { readonly type: \"nprofile\"; readonly data: ProfilePointer }\n  | { readonly type: \"nevent\"; readonly data: EventPointer }\n  | { readonly type: \"naddr\"; readonly data: AddressPointer }\n  | { readonly type: \"nsec\"; readonly data: Uint8Array }\n  | { readonly type: \"npub\"; readonly data: string }\n  | { readonly type: \"note\"; readonly data: string };\n\n/** Error thrown by NIP-19 encoding/decoding failures. */\nexport class Nip19Error extends NostrError {\n  override name = \"Nip19Error\";\n}\n\ntype TLV = Record<number, Uint8Array[]>;\n\nfunction integerToUint8Array(number: number): Uint8Array {\n  const out = new Uint8Array(4);\n  new DataView(out.buffer).setUint32(0, number);\n  return out;\n}\n\nfunction parseTLV(data: Uint8Array): TLV {\n  const result: TLV = {};\n  let rest = data;\n  while (rest.length > 0) {\n    if (rest.length < 2) {\n      throw new Nip19Error(\"not enough data to read TLV\");\n    }\n    const t = rest.at(0);\n    const l = rest.at(1);\n    if (t === undefined || l === undefined) {\n      throw new Nip19Error(\"not enough data to read TLV\");\n    }\n    const v = rest.slice(2, 2 + l);\n    rest = rest.slice(2 + l);\n    if (v.length < l) {\n      throw new Nip19Error(`not enough data to read on TLV ${t}`);\n    }\n    result[t] = result[t] ?? [];\n    result[t].push(v);\n  }\n  return result;\n}\n\n// NIP-01 kinds are u16, so the 4-byte wire TLV is limited to 0..=65535 on\n// both encode and decode.\nfunction assertNip19Kind(kind: number): void {\n  if (!Number.isInteger(kind) || kind < 0 || kind > 0xffff) {\n    throw new Nip19Error(`invalid kind: ${kind}`);\n  }\n}\n\nfunction encodeTLV(tlv: TLV): Uint8Array {\n  const entries: Uint8Array[] = [];\n  for (const [t, vs] of Object.entries(tlv).reverse()) {\n    for (const v of vs) {\n      if (v.length > 255) {\n        throw new Nip19Error(\"TLV value exceeds 255 bytes\");\n      }\n      const entry = new Uint8Array(v.length + 2);\n      entry[0] = Math.trunc(Number(t));\n      entry[1] = v.length;\n      entry.set(v, 2);\n      entries.push(entry);\n    }\n  }\n  let total = 0;\n  for (const e of entries) {\n    total += e.length;\n  }\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const e of entries) {\n    out.set(e, offset);\n    offset += e.length;\n  }\n  return out;\n}\n\nfunction encodeBech32<Prefix extends string>(\n  prefix: Prefix,\n  data: Uint8Array,\n): `${Prefix}1${string}` {\n  const words = bech32.toWords(data);\n  // oxlint-disable-next-line no-unsafe-type-assertion -- bech32 output is `${prefix}1…` by construction\n  return bech32.encode(prefix, words, Bech32MaxSize) as `${Prefix}1${string}`;\n}\n\nexport function encodeBytes<Prefix extends string>(\n  prefix: Prefix,\n  bytes: Uint8Array,\n): `${Prefix}1${string}` {\n  return encodeBech32(prefix, bytes);\n}\n\n/** Encode a 32-byte secret key as `nsec1…`; throws {@link Nip19Error} on wrong length. */\nexport function nsecEncode(key: Uint8Array): NSec {\n  assertByteLength(key, 32, \"secret key\");\n  return encodeBytes(\"nsec\", key);\n}\n\n/** Encode a hex public key as `npub1…`; throws {@link HexError} on bad hex. */\nexport function npubEncode(hex: string): NPub {\n  return encodeBytes(\"npub\", hexToBytes(assertHex32(hex, \"pubkey\")));\n}\n\n/** Encode a hex event id as `note1…`; throws {@link HexError} on bad hex. */\nexport function noteEncode(hex: string): Note {\n  return encodeBytes(\"note\", hexToBytes(assertHex32(hex, \"event id\")));\n}\n\n/** Encode a profile pointer as `nprofile1…`. */\nexport function nprofileEncode(profile: ProfilePointer): NProfile {\n  const data = encodeTLV({\n    0: [hexToBytes(assertHex32(profile.pubkey, \"pubkey\"))],\n    1: (profile.relays ?? []).map((url) => utf8Encoder.encode(url)),\n  });\n  return encodeBech32(\"nprofile\", data);\n}\n\n/** Encode an event pointer as `nevent1…`. */\nexport function neventEncode(event: EventPointer): NEvent {\n  if (event.kind !== undefined) {\n    assertNip19Kind(event.kind);\n  }\n  const kindArray = event.kind === undefined ? undefined : integerToUint8Array(event.kind);\n  const data = encodeTLV({\n    0: [hexToBytes(assertHex32(event.id, \"event id\"))],\n    1: (event.relays ?? []).map((url) => utf8Encoder.encode(url)),\n    2:\n      event.author !== undefined && event.author !== \"\"\n        ? [hexToBytes(assertHex32(event.author, \"author\"))]\n        : [],\n    3: kindArray ? [kindArray] : [],\n  });\n  return encodeBech32(\"nevent\", data);\n}\n\n/** Encode an address pointer as `naddr1…`. */\nexport function naddrEncode(addr: AddressPointer): NAddr {\n  assertNip19Kind(addr.kind);\n  const kind = integerToUint8Array(addr.kind);\n  const data = encodeTLV({\n    0: [utf8Encoder.encode(addr.identifier)],\n    1: (addr.relays ?? []).map((url) => utf8Encoder.encode(url)),\n    2: [hexToBytes(assertHex32(addr.pubkey, \"pubkey\"))],\n    3: [kind],\n  });\n  return encodeBech32(\"naddr\", data);\n}\n\nfunction readUint32(bytes: Uint8Array): number {\n  return new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength).getUint32(0);\n}\n\n/** Decode a NIP-19 bech32 entity; throws {@link Nip19Error} on bad input or unknown prefix. */\nexport function decode(code: string): DecodedResult {\n  let prefix: string;\n  let data: Uint8Array;\n  try {\n    const { prefix: hrp, words } = bech32.decode(code, Bech32MaxSize);\n    prefix = hrp;\n    data = new Uint8Array(bech32.fromWords(words));\n  } catch (error) {\n    throw new Nip19Error(`invalid bech32: ${errorMessage(error)}`, { cause: error });\n  }\n\n  switch (prefix) {\n    case \"nprofile\": {\n      const tlv = parseTLV(data);\n      if (!tlv[0]?.[0]) {\n        throw new Nip19Error(\"missing TLV 0 for nprofile\");\n      }\n      if (tlv[0][0].length !== 32) {\n        throw new Nip19Error(\"TLV 0 should be 32 bytes\");\n      }\n      return {\n        type: \"nprofile\",\n        data: {\n          pubkey: bytesToHex(tlv[0][0]),\n          relays: tlv[1] ? tlv[1].map((d) => utf8Decoder.decode(d)) : [],\n        },\n      };\n    }\n    case \"nevent\": {\n      const tlv = parseTLV(data);\n      if (!tlv[0]?.[0]) {\n        throw new Nip19Error(\"missing TLV 0 for nevent\");\n      }\n      if (tlv[0][0].length !== 32) {\n        throw new Nip19Error(\"TLV 0 should be 32 bytes\");\n      }\n      if (tlv[2]?.[0] && tlv[2][0].length !== 32) {\n        throw new Nip19Error(\"TLV 2 should be 32 bytes\");\n      }\n      if (tlv[3]?.[0] && tlv[3][0].length !== 4) {\n        throw new Nip19Error(\"TLV 3 should be 4 bytes\");\n      }\n      const pointer: Mutable<EventPointer> = {\n        id: bytesToHex(tlv[0][0]),\n        relays: tlv[1] ? tlv[1].map((d) => utf8Decoder.decode(d)) : [],\n      };\n      const author = tlv[2]?.[0];\n      if (author !== undefined) {\n        pointer.author = bytesToHex(author);\n      }\n      const kind = tlv[3]?.[0];\n      if (kind !== undefined) {\n        pointer.kind = readUint32(kind);\n        assertNip19Kind(pointer.kind);\n      }\n      return { type: \"nevent\", data: pointer };\n    }\n    case \"naddr\": {\n      const tlv = parseTLV(data);\n      if (!tlv[0]?.[0]) {\n        throw new Nip19Error(\"missing TLV 0 for naddr\");\n      }\n      if (!tlv[2]?.[0]) {\n        throw new Nip19Error(\"missing TLV 2 for naddr\");\n      }\n      if (tlv[2][0].length !== 32) {\n        throw new Nip19Error(\"TLV 2 should be 32 bytes\");\n      }\n      if (!tlv[3]?.[0]) {\n        throw new Nip19Error(\"missing TLV 3 for naddr\");\n      }\n      if (tlv[3][0].length !== 4) {\n        throw new Nip19Error(\"TLV 3 should be 4 bytes\");\n      }\n      const naddrKind = readUint32(tlv[3][0]);\n      assertNip19Kind(naddrKind);\n      return {\n        type: \"naddr\",\n        data: {\n          identifier: utf8Decoder.decode(tlv[0][0]),\n          pubkey: bytesToHex(tlv[2][0]),\n          kind: naddrKind,\n          relays: tlv[1] ? tlv[1].map((d) => utf8Decoder.decode(d)) : [],\n        },\n      };\n    }\n    case \"nsec\":\n      if (data.length !== 32) {\n        throw new Nip19Error(\"nsec must be 32 bytes\");\n      }\n      if (!secp256k1.utils.isValidSecretKey(data)) {\n        throw new Nip19Error(\"invalid nsec secret key\");\n      }\n      return { type: \"nsec\", data };\n    case \"npub\":\n    case \"note\":\n      if (data.length !== 32) {\n        throw new Nip19Error(`${prefix} must be 32 bytes`);\n      }\n      return { type: prefix, data: bytesToHex(data) };\n    default:\n      throw new Nip19Error(`unknown prefix ${prefix}`);\n  }\n}\n"],"mappings":";;;;;AA4BA,MAAa,gBAAgB;;AAkC7B,IAAa,aAAb,cAAgC,WAAW;CACzC,OAAgB;AAClB;AAIA,SAAS,oBAAoB,QAA4B;CACvD,MAAM,sBAAM,IAAI,WAAW,CAAC;CAC5B,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,UAAU,GAAG,MAAM;CAC5C,OAAO;AACT;AAEA,SAAS,SAAS,MAAuB;CACvC,MAAM,SAAc,CAAC;CACrB,IAAI,OAAO;CACX,OAAO,KAAK,SAAS,GAAG;EACtB,IAAI,KAAK,SAAS,GAChB,MAAM,IAAI,WAAW,6BAA6B;EAEpD,MAAM,IAAI,KAAK,GAAG,CAAC;EACnB,MAAM,IAAI,KAAK,GAAG,CAAC;EACnB,IAAI,MAAM,KAAA,KAAa,MAAM,KAAA,GAC3B,MAAM,IAAI,WAAW,6BAA6B;EAEpD,MAAM,IAAI,KAAK,MAAM,GAAG,IAAI,CAAC;EAC7B,OAAO,KAAK,MAAM,IAAI,CAAC;EACvB,IAAI,EAAE,SAAS,GACb,MAAM,IAAI,WAAW,kCAAkC,GAAG;EAE5D,OAAO,KAAK,OAAO,MAAM,CAAC;EAC1B,OAAO,EAAE,CAAC,KAAK,CAAC;CAClB;CACA,OAAO;AACT;AAIA,SAAS,gBAAgB,MAAoB;CAC3C,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,OAChD,MAAM,IAAI,WAAW,iBAAiB,MAAM;AAEhD;AAEA,SAAS,UAAU,KAAsB;CACvC,MAAM,UAAwB,CAAC;CAC/B,KAAK,MAAM,CAAC,GAAG,OAAO,OAAO,QAAQ,GAAG,CAAC,CAAC,QAAQ,GAChD,KAAK,MAAM,KAAK,IAAI;EAClB,IAAI,EAAE,SAAS,KACb,MAAM,IAAI,WAAW,6BAA6B;EAEpD,MAAM,QAAQ,IAAI,WAAW,EAAE,SAAS,CAAC;EACzC,MAAM,KAAK,KAAK,MAAM,OAAO,CAAC,CAAC;EAC/B,MAAM,KAAK,EAAE;EACb,MAAM,IAAI,GAAG,CAAC;EACd,QAAQ,KAAK,KAAK;CACpB;CAEF,IAAI,QAAQ;CACZ,KAAK,MAAM,KAAK,SACd,SAAS,EAAE;CAEb,MAAM,MAAM,IAAI,WAAW,KAAK;CAChC,IAAI,SAAS;CACb,KAAK,MAAM,KAAK,SAAS;EACvB,IAAI,IAAI,GAAG,MAAM;EACjB,UAAU,EAAE;CACd;CACA,OAAO;AACT;AAEA,SAAS,aACP,QACA,MACuB;CACvB,MAAM,QAAQ,OAAO,QAAQ,IAAI;CAEjC,OAAO,OAAO,OAAO,QAAQ,OAAO,aAAa;AACnD;AAEA,SAAgB,YACd,QACA,OACuB;CACvB,OAAO,aAAa,QAAQ,KAAK;AACnC;;AAGA,SAAgB,WAAW,KAAuB;CAChD,iBAAiB,KAAK,IAAI,YAAY;CACtC,OAAO,YAAY,QAAQ,GAAG;AAChC;;AAGA,SAAgB,WAAW,KAAmB;CAC5C,OAAO,YAAY,QAAQ,WAAW,YAAY,KAAK,QAAQ,CAAC,CAAC;AACnE;;AAGA,SAAgB,WAAW,KAAmB;CAC5C,OAAO,YAAY,QAAQ,WAAW,YAAY,KAAK,UAAU,CAAC,CAAC;AACrE;;AAGA,SAAgB,eAAe,SAAmC;CAKhE,OAAO,aAAa,YAJP,UAAU;EACrB,GAAG,CAAC,WAAW,YAAY,QAAQ,QAAQ,QAAQ,CAAC,CAAC;EACrD,IAAI,QAAQ,UAAU,CAAC,EAAA,CAAG,KAAK,QAAQ,YAAY,OAAO,GAAG,CAAC;CAChE,CACmC,CAAC;AACtC;;AAGA,SAAgB,aAAa,OAA6B;CACxD,IAAI,MAAM,SAAS,KAAA,GACjB,gBAAgB,MAAM,IAAI;CAE5B,MAAM,YAAY,MAAM,SAAS,KAAA,IAAY,KAAA,IAAY,oBAAoB,MAAM,IAAI;CAUvF,OAAO,aAAa,UATP,UAAU;EACrB,GAAG,CAAC,WAAW,YAAY,MAAM,IAAI,UAAU,CAAC,CAAC;EACjD,IAAI,MAAM,UAAU,CAAC,EAAA,CAAG,KAAK,QAAQ,YAAY,OAAO,GAAG,CAAC;EAC5D,GACE,MAAM,WAAW,KAAA,KAAa,MAAM,WAAW,KAC3C,CAAC,WAAW,YAAY,MAAM,QAAQ,QAAQ,CAAC,CAAC,IAChD,CAAC;EACP,GAAG,YAAY,CAAC,SAAS,IAAI,CAAC;CAChC,CACiC,CAAC;AACpC;;AAGA,SAAgB,YAAY,MAA6B;CACvD,gBAAgB,KAAK,IAAI;CACzB,MAAM,OAAO,oBAAoB,KAAK,IAAI;CAO1C,OAAO,aAAa,SANP,UAAU;EACrB,GAAG,CAAC,YAAY,OAAO,KAAK,UAAU,CAAC;EACvC,IAAI,KAAK,UAAU,CAAC,EAAA,CAAG,KAAK,QAAQ,YAAY,OAAO,GAAG,CAAC;EAC3D,GAAG,CAAC,WAAW,YAAY,KAAK,QAAQ,QAAQ,CAAC,CAAC;EAClD,GAAG,CAAC,IAAI;CACV,CACgC,CAAC;AACnC;AAEA,SAAS,WAAW,OAA2B;CAC7C,OAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU,CAAC,CAAC,UAAU,CAAC;AACnF;;AAGA,SAAgB,OAAO,MAA6B;CAClD,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,MAAM,EAAE,QAAQ,KAAK,UAAU,OAAO,OAAO,MAAM,aAAa;EAChE,SAAS;EACT,OAAO,IAAI,WAAW,OAAO,UAAU,KAAK,CAAC;CAC/C,SAAS,OAAO;EACd,MAAM,IAAI,WAAW,mBAAmB,aAAa,KAAK,KAAK,EAAE,OAAO,MAAM,CAAC;CACjF;CAEA,QAAQ,QAAR;EACE,KAAK,YAAY;GACf,MAAM,MAAM,SAAS,IAAI;GACzB,IAAI,CAAC,IAAI,EAAE,GAAG,IACZ,MAAM,IAAI,WAAW,4BAA4B;GAEnD,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,IACvB,MAAM,IAAI,WAAW,0BAA0B;GAEjD,OAAO;IACL,MAAM;IACN,MAAM;KACJ,QAAQ,WAAW,IAAI,EAAE,CAAC,EAAE;KAC5B,QAAQ,IAAI,KAAK,IAAI,EAAE,CAAC,KAAK,MAAM,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC;IAC/D;GACF;EACF;EACA,KAAK,UAAU;GACb,MAAM,MAAM,SAAS,IAAI;GACzB,IAAI,CAAC,IAAI,EAAE,GAAG,IACZ,MAAM,IAAI,WAAW,0BAA0B;GAEjD,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,IACvB,MAAM,IAAI,WAAW,0BAA0B;GAEjD,IAAI,IAAI,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,IACtC,MAAM,IAAI,WAAW,0BAA0B;GAEjD,IAAI,IAAI,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,GACtC,MAAM,IAAI,WAAW,yBAAyB;GAEhD,MAAM,UAAiC;IACrC,IAAI,WAAW,IAAI,EAAE,CAAC,EAAE;IACxB,QAAQ,IAAI,KAAK,IAAI,EAAE,CAAC,KAAK,MAAM,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC;GAC/D;GACA,MAAM,SAAS,IAAI,EAAE,GAAG;GACxB,IAAI,WAAW,KAAA,GACb,QAAQ,SAAS,WAAW,MAAM;GAEpC,MAAM,OAAO,IAAI,EAAE,GAAG;GACtB,IAAI,SAAS,KAAA,GAAW;IACtB,QAAQ,OAAO,WAAW,IAAI;IAC9B,gBAAgB,QAAQ,IAAI;GAC9B;GACA,OAAO;IAAE,MAAM;IAAU,MAAM;GAAQ;EACzC;EACA,KAAK,SAAS;GACZ,MAAM,MAAM,SAAS,IAAI;GACzB,IAAI,CAAC,IAAI,EAAE,GAAG,IACZ,MAAM,IAAI,WAAW,yBAAyB;GAEhD,IAAI,CAAC,IAAI,EAAE,GAAG,IACZ,MAAM,IAAI,WAAW,yBAAyB;GAEhD,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,IACvB,MAAM,IAAI,WAAW,0BAA0B;GAEjD,IAAI,CAAC,IAAI,EAAE,GAAG,IACZ,MAAM,IAAI,WAAW,yBAAyB;GAEhD,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,GACvB,MAAM,IAAI,WAAW,yBAAyB;GAEhD,MAAM,YAAY,WAAW,IAAI,EAAE,CAAC,EAAE;GACtC,gBAAgB,SAAS;GACzB,OAAO;IACL,MAAM;IACN,MAAM;KACJ,YAAY,YAAY,OAAO,IAAI,EAAE,CAAC,EAAE;KACxC,QAAQ,WAAW,IAAI,EAAE,CAAC,EAAE;KAC5B,MAAM;KACN,QAAQ,IAAI,KAAK,IAAI,EAAE,CAAC,KAAK,MAAM,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC;IAC/D;GACF;EACF;EACA,KAAK;GACH,IAAI,KAAK,WAAW,IAClB,MAAM,IAAI,WAAW,uBAAuB;GAE9C,IAAI,CAAC,UAAU,MAAM,iBAAiB,IAAI,GACxC,MAAM,IAAI,WAAW,yBAAyB;GAEhD,OAAO;IAAE,MAAM;IAAQ;GAAK;EAC9B,KAAK;EACL,KAAK;GACH,IAAI,KAAK,WAAW,IAClB,MAAM,IAAI,WAAW,GAAG,OAAO,kBAAkB;GAEnD,OAAO;IAAE,MAAM;IAAQ,MAAM,WAAW,IAAI;GAAE;EAChD,SACE,MAAM,IAAI,WAAW,kBAAkB,QAAQ;CACnD;AACF"}

package/dist/nips/nip21.mjs

@@ -1,4 +1,4 @@
-import { v as NostrError } from "../util-DMF9AIO0.mjs";
+import { y as NostrError } from "../util-DDpPkiED.mjs";
 import { decode } from "./nip19.mjs";
 //#region src/nips/nip21.ts
 /**

package/dist/nips/nip42.mjs

@@ -1,4 +1,4 @@
-import { d as nowSeconds } from "../util-DMF9AIO0.mjs";
+import { f as nowSeconds } from "../util-DDpPkiED.mjs";
 import { t as Kind } from "../kind-D8fENiiL.mjs";
 //#region src/nips/nip42.ts
 /**

package/dist/nips/nip44.d.mts

@@ -8,6 +8,11 @@
  */
 export declare const DEFAULT_MAX_PAYLOAD_CHARS: number;
 export declare function getConversationKey(privkeyA: Uint8Array, pubkeyB: string): Uint8Array;
+/**
+ * NIP-44 conversation key from the raw 32-byte ECDH x-coordinate instead of a secret key, for key
+ * holders that only expose ECDH ({@link NostrKeyOperations}).
+ */
+export declare function getConversationKeyFromSharedSecret(sharedX: Uint8Array): Uint8Array;
 /** NIP-44 `get_message_keys`: HKDF-expand the 76-byte key material. */
 export declare function getMessageKeys(conversationKey: Uint8Array, nonce: Uint8Array): {
   chacha_key: Uint8Array;

package/dist/nips/nip44.mjs

@@ -1,4 +1,4 @@
-import { a as hexToBytes$1, f as utf8Decoder, m as CryptoError, n as assertHex32, p as utf8Encoder, r as assertSecretKeyBytes } from "../util-DMF9AIO0.mjs";
+import { h as CryptoError, m as utf8Encoder, n as assertHex32, o as hexToBytes$1, p as utf8Decoder, r as assertSecretKeyBytes } from "../util-DDpPkiED.mjs";
 import { concatBytes, randomBytes } from "@noble/hashes/utils.js";
 import { sha256 } from "@noble/hashes/sha2.js";
 import { secp256k1 } from "@noble/curves/secp256k1.js";
@@ -25,7 +25,14 @@ function assert32(bytes, label) {
 function getConversationKey(privkeyA, pubkeyB) {
 	assertSecretKeyBytes(privkeyA);
 	assertHex32(pubkeyB, "public key");
-	const sharedX = secp256k1.getSharedSecret(privkeyA, hexToBytes$1(`02${pubkeyB.toLowerCase()}`)).subarray(1, 33);
+	return getConversationKeyFromSharedSecret(secp256k1.getSharedSecret(privkeyA, hexToBytes$1(`02${pubkeyB.toLowerCase()}`)).subarray(1, 33));
+}
+/**
+* NIP-44 conversation key from the raw 32-byte ECDH x-coordinate instead of a secret key, for key
+* holders that only expose ECDH ({@link NostrKeyOperations}).
+*/
+function getConversationKeyFromSharedSecret(sharedX) {
+	assert32(sharedX, "shared secret");
 	return extract(sha256, sharedX, utf8Encoder.encode("nip44-v2"));
 }
 /** NIP-44 `get_message_keys`: HKDF-expand the 76-byte key material. */
@@ -130,6 +137,6 @@ function decryptFromPubkey(payload, secretKey, peerPubkey, opts) {
 	return decrypt(payload, getConversationKey(secretKey, peerPubkey), opts);
 }
 //#endregion
-export { DEFAULT_MAX_PAYLOAD_CHARS, calcPaddedLen, decrypt, decryptFromPubkey, encrypt, encryptToPubkey, getConversationKey, getMessageKeys };
+export { DEFAULT_MAX_PAYLOAD_CHARS, calcPaddedLen, decrypt, decryptFromPubkey, encrypt, encryptToPubkey, getConversationKey, getConversationKeyFromSharedSecret, getMessageKeys };
 
 //# sourceMappingURL=nip44.mjs.map

package/dist/nips/nip44.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"nip44.mjs","names":["hexToBytes","hkdf_extract","hkdf_expand"],"sources":["../../src/nips/nip44.ts"],"sourcesContent":["import { chacha20 } from \"@noble/ciphers/chacha.js\";\nimport { equalBytes } from \"@noble/ciphers/utils.js\";\nimport { secp256k1 } from \"@noble/curves/secp256k1.js\";\nimport { extract as hkdf_extract, expand as hkdf_expand } from \"@noble/hashes/hkdf.js\";\nimport { hmac } from \"@noble/hashes/hmac.js\";\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport { concatBytes, randomBytes } from \"@noble/hashes/utils.js\";\nimport { base64 } from \"@scure/base\";\n\nimport { CryptoError } from \"../core/error.ts\";\nimport {\n  assertHex32,\n  assertSecretKeyBytes,\n  hexToBytes,\n  utf8Decoder,\n  utf8Encoder,\n} from \"../core/util.ts\";\n\nconst minPlaintextSize = 0x0001;\nconst maxPlaintextSize = 0xffffffff;\nconst extendedPrefixThreshold = 0x10000;\n\n/**\n * Default decode-side payload cap: the base64 length of a payload carrying exactly 1 MiB (0x100000\n * bytes) of plaintext — version(1) + nonce(32) + extended prefix(6) + calcPaddedLen(1 MiB) +\n * mac(32) bytes. NIP-44 asks implementations to enforce their own maximum payload size; relays cap\n * events far below this. Raise it via `opts.maxPayloadChars` in `decrypt`/ `decryptFromPubkey` for\n * large local payloads.\n */\nexport const DEFAULT_MAX_PAYLOAD_CHARS: number = Math.ceil((71 + calcPaddedLen(0x100000)) / 3) * 4;\n\nfunction assert32(bytes: Uint8Array, label: string): void {\n  if (bytes.length !== 32) {\n    throw new CryptoError(`${label} must be 32 bytes`);\n  }\n}\n\nexport function getConversationKey(privkeyA: Uint8Array, pubkeyB: string): Uint8Array {\n  assertSecretKeyBytes(privkeyA);\n  assertHex32(pubkeyB, \"public key\");\n  const sharedX = secp256k1\n    .getSharedSecret(privkeyA, hexToBytes(`02${pubkeyB.toLowerCase()}`))\n    .subarray(1, 33);\n  return hkdf_extract(sha256, sharedX, utf8Encoder.encode(\"nip44-v2\"));\n}\n\n/** NIP-44 `get_message_keys`: HKDF-expand the 76-byte key material. */\nexport function getMessageKeys(\n  conversationKey: Uint8Array,\n  nonce: Uint8Array,\n): { chacha_key: Uint8Array; chacha_nonce: Uint8Array; hmac_key: Uint8Array } {\n  assert32(conversationKey, \"conversation_key\");\n  assert32(nonce, \"nonce\");\n  const keys = hkdf_expand(sha256, conversationKey, nonce, 76);\n  return {\n    chacha_key: keys.subarray(0, 32),\n    chacha_nonce: keys.subarray(32, 44),\n    hmac_key: keys.subarray(44, 76),\n  };\n}\n\nexport function calcPaddedLen(len: number): number {\n  if (!Number.isSafeInteger(len) || len < 1) {\n    throw new CryptoError(\"expected positive integer\");\n  }\n  if (len <= 32) {\n    return 32;\n  }\n  const nextPower = 2 ** (Math.floor(Math.log2(len - 1)) + 1);\n  const chunk = nextPower <= 256 ? 32 : nextPower / 8;\n  return chunk * (Math.floor((len - 1) / chunk) + 1);\n}\n\nfunction writeU16BE(num: number): Uint8Array {\n  if (!Number.isSafeInteger(num) || num < minPlaintextSize || num > 0xffff) {\n    throw new CryptoError(\"invalid plaintext size: must be between 1 and 65535 bytes\");\n  }\n  const arr = new Uint8Array(2);\n  new DataView(arr.buffer).setUint16(0, num, false);\n  return arr;\n}\n\nfunction writeU32BE(num: number): Uint8Array {\n  if (!Number.isSafeInteger(num) || num < extendedPrefixThreshold || num > maxPlaintextSize) {\n    throw new CryptoError(\"invalid plaintext size: must be between 65536 and 4294967295 bytes\");\n  }\n  const arr = new Uint8Array(4);\n  new DataView(arr.buffer).setUint32(0, num, false);\n  return arr;\n}\n\nfunction pad(plaintext: string): Uint8Array {\n  const unpadded = utf8Encoder.encode(plaintext);\n  const unpaddedLen = unpadded.length;\n  if (unpaddedLen < minPlaintextSize || unpaddedLen > maxPlaintextSize) {\n    throw new CryptoError(\"invalid plaintext size: must be between 1 and 4294967295 bytes\");\n  }\n  const prefix =\n    unpaddedLen >= extendedPrefixThreshold\n      ? concatBytes(new Uint8Array([0, 0]), writeU32BE(unpaddedLen))\n      : writeU16BE(unpaddedLen);\n  const suffix = new Uint8Array(calcPaddedLen(unpaddedLen) - unpaddedLen);\n  return concatBytes(prefix, unpadded, suffix);\n}\n\nfunction unpad(padded: Uint8Array): string {\n  const dv = new DataView(padded.buffer, padded.byteOffset, padded.byteLength);\n  const firstTwo = dv.getUint16(0);\n  let unpaddedLen: number;\n  let prefixLen: number;\n  if (firstTwo === 0) {\n    unpaddedLen = dv.getUint32(2);\n    if (unpaddedLen < extendedPrefixThreshold) {\n      throw new CryptoError(\"invalid padding\");\n    }\n    prefixLen = 6;\n  } else {\n    unpaddedLen = firstTwo;\n    prefixLen = 2;\n  }\n  const unpadded = padded.subarray(prefixLen, prefixLen + unpaddedLen);\n  if (\n    unpaddedLen < minPlaintextSize ||\n    unpaddedLen > maxPlaintextSize ||\n    unpadded.length !== unpaddedLen ||\n    padded.length !== prefixLen + calcPaddedLen(unpaddedLen)\n  ) {\n    throw new CryptoError(\"invalid padding\");\n  }\n  return utf8Decoder.decode(unpadded);\n}\n\nfunction hmacAad(key: Uint8Array, message: Uint8Array, aad: Uint8Array): Uint8Array {\n  if (aad.length !== 32) {\n    throw new CryptoError(\"AAD associated data must be 32 bytes\");\n  }\n  return hmac(sha256, key, concatBytes(aad, message));\n}\n\nfunction decodePayload(\n  payload: string,\n  maxPayloadChars: number,\n): {\n  nonce: Uint8Array;\n  ciphertext: Uint8Array;\n  mac: Uint8Array;\n} {\n  if (typeof payload !== \"string\") {\n    throw new CryptoError(\"payload must be a valid string\");\n  }\n  if (payload.startsWith(\"#\")) {\n    throw new CryptoError(\"unknown encryption version\");\n  }\n  if (payload.length < 132 || payload.length > maxPayloadChars) {\n    throw new CryptoError(`invalid payload length: ${payload.length}`);\n  }\n  let data: Uint8Array;\n  try {\n    data = base64.decode(payload);\n  } catch (error) {\n    throw new CryptoError(\"invalid base64\", { cause: error });\n  }\n  if (data.length < 99) {\n    throw new CryptoError(`invalid data length: ${data.length}`);\n  }\n  const version = data.at(0);\n  if (version === undefined) {\n    throw new CryptoError(\"invalid data length\");\n  }\n  if (version !== 2) {\n    throw new CryptoError(`unknown encryption version ${version}`);\n  }\n  return {\n    nonce: data.subarray(1, 33),\n    ciphertext: data.subarray(33, -32),\n    mac: data.subarray(-32),\n  };\n}\n\nexport function encrypt(\n  plaintext: string,\n  conversationKey: Uint8Array,\n  nonce: Uint8Array = randomBytes(32),\n): string {\n  const { chacha_key, chacha_nonce, hmac_key } = getMessageKeys(conversationKey, nonce);\n  const padded = pad(plaintext);\n  const ciphertext = chacha20(chacha_key, chacha_nonce, padded);\n  const mac = hmacAad(hmac_key, ciphertext, nonce);\n  return base64.encode(concatBytes(new Uint8Array([2]), nonce, ciphertext, mac));\n}\n\nexport function decrypt(\n  payload: string,\n  conversationKey: Uint8Array,\n  opts?: { maxPayloadChars?: number },\n): string {\n  const { nonce, ciphertext, mac } = decodePayload(\n    payload,\n    opts?.maxPayloadChars ?? DEFAULT_MAX_PAYLOAD_CHARS,\n  );\n  const { chacha_key, chacha_nonce, hmac_key } = getMessageKeys(conversationKey, nonce);\n  const calculatedMac = hmacAad(hmac_key, ciphertext, nonce);\n  if (!equalBytes(calculatedMac, mac)) {\n    throw new CryptoError(\"invalid MAC\");\n  }\n  const padded = chacha20(chacha_key, chacha_nonce, ciphertext);\n  return unpad(padded);\n}\n\n/** Convenience: derive conversation key from secret/public pair and encrypt. */\nexport function encryptToPubkey(\n  plaintext: string,\n  secretKey: Uint8Array,\n  peerPubkey: string,\n): string {\n  return encrypt(plaintext, getConversationKey(secretKey, peerPubkey));\n}\n\n/** Convenience: decrypt a payload from a peer pubkey. */\nexport function decryptFromPubkey(\n  payload: string,\n  secretKey: Uint8Array,\n  peerPubkey: string,\n  opts?: { maxPayloadChars?: number },\n): string {\n  return decrypt(payload, getConversationKey(secretKey, peerPubkey), opts);\n}\n"],"mappings":";;;;;;;;;;AAkBA,MAAM,mBAAmB;AACzB,MAAM,mBAAmB;AACzB,MAAM,0BAA0B;;;;;;;;AAShC,MAAa,4BAAoC,KAAK,MAAM,KAAK,cAAc,OAAQ,KAAK,CAAC,IAAI;AAEjG,SAAS,SAAS,OAAmB,OAAqB;CACxD,IAAI,MAAM,WAAW,IACnB,MAAM,IAAI,YAAY,GAAG,MAAM,kBAAkB;AAErD;AAEA,SAAgB,mBAAmB,UAAsB,SAA6B;CACpF,qBAAqB,QAAQ;CAC7B,YAAY,SAAS,YAAY;CACjC,MAAM,UAAU,UACb,gBAAgB,UAAUA,aAAW,KAAK,QAAQ,YAAY,GAAG,CAAC,CAAC,CACnE,SAAS,GAAG,EAAE;CACjB,OAAOC,QAAa,QAAQ,SAAS,YAAY,OAAO,UAAU,CAAC;AACrE;;AAGA,SAAgB,eACd,iBACA,OAC4E;CAC5E,SAAS,iBAAiB,kBAAkB;CAC5C,SAAS,OAAO,OAAO;CACvB,MAAM,OAAOC,OAAY,QAAQ,iBAAiB,OAAO,EAAE;CAC3D,OAAO;EACL,YAAY,KAAK,SAAS,GAAG,EAAE;EAC/B,cAAc,KAAK,SAAS,IAAI,EAAE;EAClC,UAAU,KAAK,SAAS,IAAI,EAAE;CAChC;AACF;AAEA,SAAgB,cAAc,KAAqB;CACjD,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM,GACtC,MAAM,IAAI,YAAY,2BAA2B;CAEnD,IAAI,OAAO,IACT,OAAO;CAET,MAAM,YAAY,MAAM,KAAK,MAAM,KAAK,KAAK,MAAM,CAAC,CAAC,IAAI;CACzD,MAAM,QAAQ,aAAa,MAAM,KAAK,YAAY;CAClD,OAAO,SAAS,KAAK,OAAO,MAAM,KAAK,KAAK,IAAI;AAClD;AAEA,SAAS,WAAW,KAAyB;CAC3C,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM,oBAAoB,MAAM,OAChE,MAAM,IAAI,YAAY,2DAA2D;CAEnF,MAAM,sBAAM,IAAI,WAAW,CAAC;CAC5B,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,UAAU,GAAG,KAAK,KAAK;CAChD,OAAO;AACT;AAEA,SAAS,WAAW,KAAyB;CAC3C,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM,2BAA2B,MAAM,kBACvE,MAAM,IAAI,YAAY,oEAAoE;CAE5F,MAAM,sBAAM,IAAI,WAAW,CAAC;CAC5B,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,UAAU,GAAG,KAAK,KAAK;CAChD,OAAO;AACT;AAEA,SAAS,IAAI,WAA+B;CAC1C,MAAM,WAAW,YAAY,OAAO,SAAS;CAC7C,MAAM,cAAc,SAAS;CAC7B,IAAI,cAAc,oBAAoB,cAAc,kBAClD,MAAM,IAAI,YAAY,gEAAgE;CAExF,MAAM,SACJ,eAAe,0BACX,YAAY,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,WAAW,CAAC,IAC3D,WAAW,WAAW;CAC5B,MAAM,SAAS,IAAI,WAAW,cAAc,WAAW,IAAI,WAAW;CACtE,OAAO,YAAY,QAAQ,UAAU,MAAM;AAC7C;AAEA,SAAS,MAAM,QAA4B;CACzC,MAAM,KAAK,IAAI,SAAS,OAAO,QAAQ,OAAO,YAAY,OAAO,UAAU;CAC3E,MAAM,WAAW,GAAG,UAAU,CAAC;CAC/B,IAAI;CACJ,IAAI;CACJ,IAAI,aAAa,GAAG;EAClB,cAAc,GAAG,UAAU,CAAC;EAC5B,IAAI,cAAc,yBAChB,MAAM,IAAI,YAAY,iBAAiB;EAEzC,YAAY;CACd,OAAO;EACL,cAAc;EACd,YAAY;CACd;CACA,MAAM,WAAW,OAAO,SAAS,WAAW,YAAY,WAAW;CACnE,IACE,cAAc,oBACd,cAAc,oBACd,SAAS,WAAW,eACpB,OAAO,WAAW,YAAY,cAAc,WAAW,GAEvD,MAAM,IAAI,YAAY,iBAAiB;CAEzC,OAAO,YAAY,OAAO,QAAQ;AACpC;AAEA,SAAS,QAAQ,KAAiB,SAAqB,KAA6B;CAClF,IAAI,IAAI,WAAW,IACjB,MAAM,IAAI,YAAY,sCAAsC;CAE9D,OAAO,KAAK,QAAQ,KAAK,YAAY,KAAK,OAAO,CAAC;AACpD;AAEA,SAAS,cACP,SACA,iBAKA;CACA,IAAI,OAAO,YAAY,UACrB,MAAM,IAAI,YAAY,gCAAgC;CAExD,IAAI,QAAQ,WAAW,GAAG,GACxB,MAAM,IAAI,YAAY,4BAA4B;CAEpD,IAAI,QAAQ,SAAS,OAAO,QAAQ,SAAS,iBAC3C,MAAM,IAAI,YAAY,2BAA2B,QAAQ,QAAQ;CAEnE,IAAI;CACJ,IAAI;EACF,OAAO,OAAO,OAAO,OAAO;CAC9B,SAAS,OAAO;EACd,MAAM,IAAI,YAAY,kBAAkB,EAAE,OAAO,MAAM,CAAC;CAC1D;CACA,IAAI,KAAK,SAAS,IAChB,MAAM,IAAI,YAAY,wBAAwB,KAAK,QAAQ;CAE7D,MAAM,UAAU,KAAK,GAAG,CAAC;CACzB,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,YAAY,qBAAqB;CAE7C,IAAI,YAAY,GACd,MAAM,IAAI,YAAY,8BAA8B,SAAS;CAE/D,OAAO;EACL,OAAO,KAAK,SAAS,GAAG,EAAE;EAC1B,YAAY,KAAK,SAAS,IAAI,GAAG;EACjC,KAAK,KAAK,SAAS,GAAG;CACxB;AACF;AAEA,SAAgB,QACd,WACA,iBACA,QAAoB,YAAY,EAAE,GAC1B;CACR,MAAM,EAAE,YAAY,cAAc,aAAa,eAAe,iBAAiB,KAAK;CACpF,MAAM,SAAS,IAAI,SAAS;CAC5B,MAAM,aAAa,SAAS,YAAY,cAAc,MAAM;CAC5D,MAAM,MAAM,QAAQ,UAAU,YAAY,KAAK;CAC/C,OAAO,OAAO,OAAO,YAAY,IAAI,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,YAAY,GAAG,CAAC;AAC/E;AAEA,SAAgB,QACd,SACA,iBACA,MACQ;CACR,MAAM,EAAE,OAAO,YAAY,QAAQ,cACjC,SACA,MAAM,mBAAmB,yBAC3B;CACA,MAAM,EAAE,YAAY,cAAc,aAAa,eAAe,iBAAiB,KAAK;CACpF,MAAM,gBAAgB,QAAQ,UAAU,YAAY,KAAK;CACzD,IAAI,CAAC,WAAW,eAAe,GAAG,GAChC,MAAM,IAAI,YAAY,aAAa;CAGrC,OAAO,MADQ,SAAS,YAAY,cAAc,UAChC,CAAC;AACrB;;AAGA,SAAgB,gBACd,WACA,WACA,YACQ;CACR,OAAO,QAAQ,WAAW,mBAAmB,WAAW,UAAU,CAAC;AACrE;;AAGA,SAAgB,kBACd,SACA,WACA,YACA,MACQ;CACR,OAAO,QAAQ,SAAS,mBAAmB,WAAW,UAAU,GAAG,IAAI;AACzE"}
+{"version":3,"file":"nip44.mjs","names":["hexToBytes","hkdf_extract","hkdf_expand"],"sources":["../../src/nips/nip44.ts"],"sourcesContent":["import { chacha20 } from \"@noble/ciphers/chacha.js\";\nimport { equalBytes } from \"@noble/ciphers/utils.js\";\nimport { secp256k1 } from \"@noble/curves/secp256k1.js\";\nimport { extract as hkdf_extract, expand as hkdf_expand } from \"@noble/hashes/hkdf.js\";\nimport { hmac } from \"@noble/hashes/hmac.js\";\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport { concatBytes, randomBytes } from \"@noble/hashes/utils.js\";\nimport { base64 } from \"@scure/base\";\n\nimport { CryptoError } from \"../core/error.ts\";\nimport {\n  assertHex32,\n  assertSecretKeyBytes,\n  hexToBytes,\n  utf8Decoder,\n  utf8Encoder,\n} from \"../core/util.ts\";\n\nconst minPlaintextSize = 0x0001;\nconst maxPlaintextSize = 0xffffffff;\nconst extendedPrefixThreshold = 0x10000;\n\n/**\n * Default decode-side payload cap: the base64 length of a payload carrying exactly 1 MiB (0x100000\n * bytes) of plaintext — version(1) + nonce(32) + extended prefix(6) + calcPaddedLen(1 MiB) +\n * mac(32) bytes. NIP-44 asks implementations to enforce their own maximum payload size; relays cap\n * events far below this. Raise it via `opts.maxPayloadChars` in `decrypt`/ `decryptFromPubkey` for\n * large local payloads.\n */\nexport const DEFAULT_MAX_PAYLOAD_CHARS: number = Math.ceil((71 + calcPaddedLen(0x100000)) / 3) * 4;\n\nfunction assert32(bytes: Uint8Array, label: string): void {\n  if (bytes.length !== 32) {\n    throw new CryptoError(`${label} must be 32 bytes`);\n  }\n}\n\nexport function getConversationKey(privkeyA: Uint8Array, pubkeyB: string): Uint8Array {\n  assertSecretKeyBytes(privkeyA);\n  assertHex32(pubkeyB, \"public key\");\n  const sharedX = secp256k1\n    .getSharedSecret(privkeyA, hexToBytes(`02${pubkeyB.toLowerCase()}`))\n    .subarray(1, 33);\n  return getConversationKeyFromSharedSecret(sharedX);\n}\n\n/**\n * NIP-44 conversation key from the raw 32-byte ECDH x-coordinate instead of a secret key, for key\n * holders that only expose ECDH ({@link NostrKeyOperations}).\n */\nexport function getConversationKeyFromSharedSecret(sharedX: Uint8Array): Uint8Array {\n  assert32(sharedX, \"shared secret\");\n  return hkdf_extract(sha256, sharedX, utf8Encoder.encode(\"nip44-v2\"));\n}\n\n/** NIP-44 `get_message_keys`: HKDF-expand the 76-byte key material. */\nexport function getMessageKeys(\n  conversationKey: Uint8Array,\n  nonce: Uint8Array,\n): { chacha_key: Uint8Array; chacha_nonce: Uint8Array; hmac_key: Uint8Array } {\n  assert32(conversationKey, \"conversation_key\");\n  assert32(nonce, \"nonce\");\n  const keys = hkdf_expand(sha256, conversationKey, nonce, 76);\n  return {\n    chacha_key: keys.subarray(0, 32),\n    chacha_nonce: keys.subarray(32, 44),\n    hmac_key: keys.subarray(44, 76),\n  };\n}\n\nexport function calcPaddedLen(len: number): number {\n  if (!Number.isSafeInteger(len) || len < 1) {\n    throw new CryptoError(\"expected positive integer\");\n  }\n  if (len <= 32) {\n    return 32;\n  }\n  const nextPower = 2 ** (Math.floor(Math.log2(len - 1)) + 1);\n  const chunk = nextPower <= 256 ? 32 : nextPower / 8;\n  return chunk * (Math.floor((len - 1) / chunk) + 1);\n}\n\nfunction writeU16BE(num: number): Uint8Array {\n  if (!Number.isSafeInteger(num) || num < minPlaintextSize || num > 0xffff) {\n    throw new CryptoError(\"invalid plaintext size: must be between 1 and 65535 bytes\");\n  }\n  const arr = new Uint8Array(2);\n  new DataView(arr.buffer).setUint16(0, num, false);\n  return arr;\n}\n\nfunction writeU32BE(num: number): Uint8Array {\n  if (!Number.isSafeInteger(num) || num < extendedPrefixThreshold || num > maxPlaintextSize) {\n    throw new CryptoError(\"invalid plaintext size: must be between 65536 and 4294967295 bytes\");\n  }\n  const arr = new Uint8Array(4);\n  new DataView(arr.buffer).setUint32(0, num, false);\n  return arr;\n}\n\nfunction pad(plaintext: string): Uint8Array {\n  const unpadded = utf8Encoder.encode(plaintext);\n  const unpaddedLen = unpadded.length;\n  if (unpaddedLen < minPlaintextSize || unpaddedLen > maxPlaintextSize) {\n    throw new CryptoError(\"invalid plaintext size: must be between 1 and 4294967295 bytes\");\n  }\n  const prefix =\n    unpaddedLen >= extendedPrefixThreshold\n      ? concatBytes(new Uint8Array([0, 0]), writeU32BE(unpaddedLen))\n      : writeU16BE(unpaddedLen);\n  const suffix = new Uint8Array(calcPaddedLen(unpaddedLen) - unpaddedLen);\n  return concatBytes(prefix, unpadded, suffix);\n}\n\nfunction unpad(padded: Uint8Array): string {\n  const dv = new DataView(padded.buffer, padded.byteOffset, padded.byteLength);\n  const firstTwo = dv.getUint16(0);\n  let unpaddedLen: number;\n  let prefixLen: number;\n  if (firstTwo === 0) {\n    unpaddedLen = dv.getUint32(2);\n    if (unpaddedLen < extendedPrefixThreshold) {\n      throw new CryptoError(\"invalid padding\");\n    }\n    prefixLen = 6;\n  } else {\n    unpaddedLen = firstTwo;\n    prefixLen = 2;\n  }\n  const unpadded = padded.subarray(prefixLen, prefixLen + unpaddedLen);\n  if (\n    unpaddedLen < minPlaintextSize ||\n    unpaddedLen > maxPlaintextSize ||\n    unpadded.length !== unpaddedLen ||\n    padded.length !== prefixLen + calcPaddedLen(unpaddedLen)\n  ) {\n    throw new CryptoError(\"invalid padding\");\n  }\n  return utf8Decoder.decode(unpadded);\n}\n\nfunction hmacAad(key: Uint8Array, message: Uint8Array, aad: Uint8Array): Uint8Array {\n  if (aad.length !== 32) {\n    throw new CryptoError(\"AAD associated data must be 32 bytes\");\n  }\n  return hmac(sha256, key, concatBytes(aad, message));\n}\n\nfunction decodePayload(\n  payload: string,\n  maxPayloadChars: number,\n): {\n  nonce: Uint8Array;\n  ciphertext: Uint8Array;\n  mac: Uint8Array;\n} {\n  if (typeof payload !== \"string\") {\n    throw new CryptoError(\"payload must be a valid string\");\n  }\n  if (payload.startsWith(\"#\")) {\n    throw new CryptoError(\"unknown encryption version\");\n  }\n  if (payload.length < 132 || payload.length > maxPayloadChars) {\n    throw new CryptoError(`invalid payload length: ${payload.length}`);\n  }\n  let data: Uint8Array;\n  try {\n    data = base64.decode(payload);\n  } catch (error) {\n    throw new CryptoError(\"invalid base64\", { cause: error });\n  }\n  if (data.length < 99) {\n    throw new CryptoError(`invalid data length: ${data.length}`);\n  }\n  const version = data.at(0);\n  if (version === undefined) {\n    throw new CryptoError(\"invalid data length\");\n  }\n  if (version !== 2) {\n    throw new CryptoError(`unknown encryption version ${version}`);\n  }\n  return {\n    nonce: data.subarray(1, 33),\n    ciphertext: data.subarray(33, -32),\n    mac: data.subarray(-32),\n  };\n}\n\nexport function encrypt(\n  plaintext: string,\n  conversationKey: Uint8Array,\n  nonce: Uint8Array = randomBytes(32),\n): string {\n  const { chacha_key, chacha_nonce, hmac_key } = getMessageKeys(conversationKey, nonce);\n  const padded = pad(plaintext);\n  const ciphertext = chacha20(chacha_key, chacha_nonce, padded);\n  const mac = hmacAad(hmac_key, ciphertext, nonce);\n  return base64.encode(concatBytes(new Uint8Array([2]), nonce, ciphertext, mac));\n}\n\nexport function decrypt(\n  payload: string,\n  conversationKey: Uint8Array,\n  opts?: { maxPayloadChars?: number },\n): string {\n  const { nonce, ciphertext, mac } = decodePayload(\n    payload,\n    opts?.maxPayloadChars ?? DEFAULT_MAX_PAYLOAD_CHARS,\n  );\n  const { chacha_key, chacha_nonce, hmac_key } = getMessageKeys(conversationKey, nonce);\n  const calculatedMac = hmacAad(hmac_key, ciphertext, nonce);\n  if (!equalBytes(calculatedMac, mac)) {\n    throw new CryptoError(\"invalid MAC\");\n  }\n  const padded = chacha20(chacha_key, chacha_nonce, ciphertext);\n  return unpad(padded);\n}\n\n/** Convenience: derive conversation key from secret/public pair and encrypt. */\nexport function encryptToPubkey(\n  plaintext: string,\n  secretKey: Uint8Array,\n  peerPubkey: string,\n): string {\n  return encrypt(plaintext, getConversationKey(secretKey, peerPubkey));\n}\n\n/** Convenience: decrypt a payload from a peer pubkey. */\nexport function decryptFromPubkey(\n  payload: string,\n  secretKey: Uint8Array,\n  peerPubkey: string,\n  opts?: { maxPayloadChars?: number },\n): string {\n  return decrypt(payload, getConversationKey(secretKey, peerPubkey), opts);\n}\n"],"mappings":";;;;;;;;;;AAkBA,MAAM,mBAAmB;AACzB,MAAM,mBAAmB;AACzB,MAAM,0BAA0B;;;;;;;;AAShC,MAAa,4BAAoC,KAAK,MAAM,KAAK,cAAc,OAAQ,KAAK,CAAC,IAAI;AAEjG,SAAS,SAAS,OAAmB,OAAqB;CACxD,IAAI,MAAM,WAAW,IACnB,MAAM,IAAI,YAAY,GAAG,MAAM,kBAAkB;AAErD;AAEA,SAAgB,mBAAmB,UAAsB,SAA6B;CACpF,qBAAqB,QAAQ;CAC7B,YAAY,SAAS,YAAY;CAIjC,OAAO,mCAHS,UACb,gBAAgB,UAAUA,aAAW,KAAK,QAAQ,YAAY,GAAG,CAAC,CAAC,CACnE,SAAS,GAAG,EACiC,CAAC;AACnD;;;;;AAMA,SAAgB,mCAAmC,SAAiC;CAClF,SAAS,SAAS,eAAe;CACjC,OAAOC,QAAa,QAAQ,SAAS,YAAY,OAAO,UAAU,CAAC;AACrE;;AAGA,SAAgB,eACd,iBACA,OAC4E;CAC5E,SAAS,iBAAiB,kBAAkB;CAC5C,SAAS,OAAO,OAAO;CACvB,MAAM,OAAOC,OAAY,QAAQ,iBAAiB,OAAO,EAAE;CAC3D,OAAO;EACL,YAAY,KAAK,SAAS,GAAG,EAAE;EAC/B,cAAc,KAAK,SAAS,IAAI,EAAE;EAClC,UAAU,KAAK,SAAS,IAAI,EAAE;CAChC;AACF;AAEA,SAAgB,cAAc,KAAqB;CACjD,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM,GACtC,MAAM,IAAI,YAAY,2BAA2B;CAEnD,IAAI,OAAO,IACT,OAAO;CAET,MAAM,YAAY,MAAM,KAAK,MAAM,KAAK,KAAK,MAAM,CAAC,CAAC,IAAI;CACzD,MAAM,QAAQ,aAAa,MAAM,KAAK,YAAY;CAClD,OAAO,SAAS,KAAK,OAAO,MAAM,KAAK,KAAK,IAAI;AAClD;AAEA,SAAS,WAAW,KAAyB;CAC3C,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM,oBAAoB,MAAM,OAChE,MAAM,IAAI,YAAY,2DAA2D;CAEnF,MAAM,sBAAM,IAAI,WAAW,CAAC;CAC5B,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,UAAU,GAAG,KAAK,KAAK;CAChD,OAAO;AACT;AAEA,SAAS,WAAW,KAAyB;CAC3C,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM,2BAA2B,MAAM,kBACvE,MAAM,IAAI,YAAY,oEAAoE;CAE5F,MAAM,sBAAM,IAAI,WAAW,CAAC;CAC5B,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,UAAU,GAAG,KAAK,KAAK;CAChD,OAAO;AACT;AAEA,SAAS,IAAI,WAA+B;CAC1C,MAAM,WAAW,YAAY,OAAO,SAAS;CAC7C,MAAM,cAAc,SAAS;CAC7B,IAAI,cAAc,oBAAoB,cAAc,kBAClD,MAAM,IAAI,YAAY,gEAAgE;CAExF,MAAM,SACJ,eAAe,0BACX,YAAY,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,WAAW,CAAC,IAC3D,WAAW,WAAW;CAC5B,MAAM,SAAS,IAAI,WAAW,cAAc,WAAW,IAAI,WAAW;CACtE,OAAO,YAAY,QAAQ,UAAU,MAAM;AAC7C;AAEA,SAAS,MAAM,QAA4B;CACzC,MAAM,KAAK,IAAI,SAAS,OAAO,QAAQ,OAAO,YAAY,OAAO,UAAU;CAC3E,MAAM,WAAW,GAAG,UAAU,CAAC;CAC/B,IAAI;CACJ,IAAI;CACJ,IAAI,aAAa,GAAG;EAClB,cAAc,GAAG,UAAU,CAAC;EAC5B,IAAI,cAAc,yBAChB,MAAM,IAAI,YAAY,iBAAiB;EAEzC,YAAY;CACd,OAAO;EACL,cAAc;EACd,YAAY;CACd;CACA,MAAM,WAAW,OAAO,SAAS,WAAW,YAAY,WAAW;CACnE,IACE,cAAc,oBACd,cAAc,oBACd,SAAS,WAAW,eACpB,OAAO,WAAW,YAAY,cAAc,WAAW,GAEvD,MAAM,IAAI,YAAY,iBAAiB;CAEzC,OAAO,YAAY,OAAO,QAAQ;AACpC;AAEA,SAAS,QAAQ,KAAiB,SAAqB,KAA6B;CAClF,IAAI,IAAI,WAAW,IACjB,MAAM,IAAI,YAAY,sCAAsC;CAE9D,OAAO,KAAK,QAAQ,KAAK,YAAY,KAAK,OAAO,CAAC;AACpD;AAEA,SAAS,cACP,SACA,iBAKA;CACA,IAAI,OAAO,YAAY,UACrB,MAAM,IAAI,YAAY,gCAAgC;CAExD,IAAI,QAAQ,WAAW,GAAG,GACxB,MAAM,IAAI,YAAY,4BAA4B;CAEpD,IAAI,QAAQ,SAAS,OAAO,QAAQ,SAAS,iBAC3C,MAAM,IAAI,YAAY,2BAA2B,QAAQ,QAAQ;CAEnE,IAAI;CACJ,IAAI;EACF,OAAO,OAAO,OAAO,OAAO;CAC9B,SAAS,OAAO;EACd,MAAM,IAAI,YAAY,kBAAkB,EAAE,OAAO,MAAM,CAAC;CAC1D;CACA,IAAI,KAAK,SAAS,IAChB,MAAM,IAAI,YAAY,wBAAwB,KAAK,QAAQ;CAE7D,MAAM,UAAU,KAAK,GAAG,CAAC;CACzB,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,YAAY,qBAAqB;CAE7C,IAAI,YAAY,GACd,MAAM,IAAI,YAAY,8BAA8B,SAAS;CAE/D,OAAO;EACL,OAAO,KAAK,SAAS,GAAG,EAAE;EAC1B,YAAY,KAAK,SAAS,IAAI,GAAG;EACjC,KAAK,KAAK,SAAS,GAAG;CACxB;AACF;AAEA,SAAgB,QACd,WACA,iBACA,QAAoB,YAAY,EAAE,GAC1B;CACR,MAAM,EAAE,YAAY,cAAc,aAAa,eAAe,iBAAiB,KAAK;CACpF,MAAM,SAAS,IAAI,SAAS;CAC5B,MAAM,aAAa,SAAS,YAAY,cAAc,MAAM;CAC5D,MAAM,MAAM,QAAQ,UAAU,YAAY,KAAK;CAC/C,OAAO,OAAO,OAAO,YAAY,IAAI,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,YAAY,GAAG,CAAC;AAC/E;AAEA,SAAgB,QACd,SACA,iBACA,MACQ;CACR,MAAM,EAAE,OAAO,YAAY,QAAQ,cACjC,SACA,MAAM,mBAAmB,yBAC3B;CACA,MAAM,EAAE,YAAY,cAAc,aAAa,eAAe,iBAAiB,KAAK;CACpF,MAAM,gBAAgB,QAAQ,UAAU,YAAY,KAAK;CACzD,IAAI,CAAC,WAAW,eAAe,GAAG,GAChC,MAAM,IAAI,YAAY,aAAa;CAGrC,OAAO,MADQ,SAAS,YAAY,cAAc,UAChC,CAAC;AACrB;;AAGA,SAAgB,gBACd,WACA,WACA,YACQ;CACR,OAAO,QAAQ,WAAW,mBAAmB,WAAW,UAAU,CAAC;AACrE;;AAGA,SAAgB,kBACd,SACA,WACA,YACA,MACQ;CACR,OAAO,QAAQ,SAAS,mBAAmB,WAAW,UAAU,GAAG,IAAI;AACzE"}

package/dist/nips/nip46.mjs

@@ -1,4 +1,4 @@
-import { c as isRecord, o as isHex32, v as NostrError } from "../util-DMF9AIO0.mjs";
+import { l as isRecord, s as isHex32, y as NostrError } from "../util-DDpPkiED.mjs";
 //#region src/nips/nip46.ts
 /**
 * NIP-46 (Nostr Connect) protocol helpers: bunker URI, nostrconnect URI, RPC JSON.

package/dist/nips/nip49.d.mts

@@ -19,6 +19,12 @@ export type Nip49EncryptOptions = {
   scrypt?: Scrypt | undefined;
 };
 export type Nip49DecryptOptions = {
+  /**
+   * Scrypt log2(N) ceiling, an integer in 1..22. Required: scrypt needs `128 * r * 2^logn` bytes of
+   * memory (4 GiB at logn 22), so a crafted `ncryptsec` could exhaust the caller's memory. Payloads
+   * above the ceiling are rejected with {@link Nip49Error} before scrypt runs.
+   */
+  maxLogN: number;
   /** Scrypt implementation. Defaults to noble `scryptAsync`. */
   scrypt?: Scrypt | undefined;
 };
@@ -28,6 +34,6 @@ export declare class Nip49Error extends NostrError {
 /** Encrypt a 32-byte secret key to an `ncryptsec` bech32 string. */
 export declare function encrypt(secretKey: Uint8Array, password: string, opts?: Nip49EncryptOptions): Promise<Ncryptsec>;
 /** Decrypt an `ncryptsec` bech32 string to a 32-byte secret key. */
-export declare function decrypt(ncryptsec: string, password: string, opts?: Nip49DecryptOptions): Promise<Uint8Array>;
+export declare function decrypt(ncryptsec: string, password: string, opts: Nip49DecryptOptions): Promise<Uint8Array>;
 //#endregion
 //# sourceMappingURL=nip49.d.mts.map

package/dist/nips/nip49.mjs

@@ -1,6 +1,7 @@
-import { p as utf8Encoder, r as assertSecretKeyBytes, v as NostrError } from "../util-DMF9AIO0.mjs";
+import { m as utf8Encoder, r as assertSecretKeyBytes, y as NostrError } from "../util-DDpPkiED.mjs";
 import { Bech32MaxSize, encodeBytes } from "./nip19.mjs";
 import { concatBytes, randomBytes } from "@noble/hashes/utils.js";
+import { secp256k1 } from "@noble/curves/secp256k1.js";
 import { bech32 } from "@scure/base";
 import { xchacha20poly1305 } from "@noble/ciphers/chacha.js";
 import { scryptAsync } from "@noble/hashes/scrypt.js";
@@ -58,6 +59,8 @@ async function encrypt(secretKey, password, opts) {
 }
 /** Decrypt an `ncryptsec` bech32 string to a 32-byte secret key. */
 async function decrypt(ncryptsec, password, opts) {
+	const { maxLogN } = opts;
+	if (!Number.isInteger(maxLogN) || maxLogN < LOGN_MIN || maxLogN > LOGN_MAX) throw new Nip49Error(`invalid maxLogN ${maxLogN}, expected integer ${LOGN_MIN}..${LOGN_MAX}`);
 	let prefix;
 	let b;
 	try {
@@ -74,15 +77,26 @@ async function decrypt(ncryptsec, password, opts) {
 	if (version !== VERSION) throw new Nip49Error(`invalid version ${version}, expected 0x02`);
 	const logn = b.at(1);
 	if (logn === void 0) throw new Nip49Error("invalid ncryptsec length");
+	if (logn > maxLogN) throw new Nip49Error(`logn ${logn} exceeds maxLogN ${maxLogN}`);
 	const salt = b.subarray(2, 18);
 	const nonce = b.subarray(18, 42);
 	const ksb = b.at(42);
 	if (ksb === void 0) throw new Nip49Error("invalid ncryptsec length");
+	if (ksb !== 0 && ksb !== 1 && ksb !== 2) throw new Nip49Error(`invalid key security byte ${ksb}, expected 0x00, 0x01, or 0x02`);
 	const aad = Uint8Array.from([ksb]);
 	const ciphertext = b.subarray(43);
 	try {
-		const key = await deriveKey(password, salt, logn, opts?.scrypt ?? nobleScrypt);
-		return xchacha20poly1305(key, nonce, aad).decrypt(ciphertext);
+		const key = await deriveKey(password, salt, logn, opts.scrypt ?? nobleScrypt);
+		try {
+			const secret = xchacha20poly1305(key, nonce, aad).decrypt(ciphertext);
+			if (!secp256k1.utils.isValidSecretKey(secret)) {
+				secret.fill(0);
+				throw new Nip49Error("invalid secret key");
+			}
+			return secret;
+		} finally {
+			key.fill(0);
+		}
 	} catch (error) {
 		if (error instanceof Nip49Error) throw error;
 		throw new Nip49Error("failed to decrypt", { cause: error });

package/dist/nips/nip49.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"nip49.mjs","names":[],"sources":["../../src/nips/nip49.ts"],"sourcesContent":["/**\n * NIP-49: Private Key Encryption (`ncryptsec`).\n *\n * @see https://github.com/nostr-protocol/nips/blob/master/49.md\n */\nimport { xchacha20poly1305 } from \"@noble/ciphers/chacha.js\";\nimport { scryptAsync } from \"@noble/hashes/scrypt.js\";\nimport { concatBytes, randomBytes } from \"@noble/hashes/utils.js\";\nimport { bech32 } from \"@scure/base\";\n\nimport { NostrError } from \"../core/error.ts\";\nimport { assertSecretKeyBytes, utf8Encoder } from \"../core/util.ts\";\nimport { Bech32MaxSize, encodeBytes } from \"./nip19.ts\";\n\nexport type Ncryptsec = `ncryptsec1${string}`;\nexport type KeySecurityByte = 0x00 | 0x01 | 0x02;\n\nexport type ScryptParams = {\n  readonly N: number;\n  readonly r: number;\n  readonly p: number;\n  readonly dkLen: number;\n};\n\n/** Derive `params.dkLen` bytes from the NFKC-normalized UTF-8 password and salt (RFC 7914). */\nexport type Scrypt = (\n  password: Uint8Array,\n  salt: Uint8Array,\n  params: ScryptParams,\n) => Promise<Uint8Array>;\n\nexport type Nip49EncryptOptions = {\n  /** Scrypt log2(N) work factor, 1..22. Defaults to 16. */\n  logn?: number | undefined;\n  /** Key security byte recorded in the payload. Defaults to 0x02. */\n  ksb?: KeySecurityByte | undefined;\n  /** Scrypt implementation. Defaults to noble `scryptAsync`. */\n  scrypt?: Scrypt | undefined;\n};\n\nexport type Nip49DecryptOptions = {\n  /** Scrypt implementation. Defaults to noble `scryptAsync`. */\n  scrypt?: Scrypt | undefined;\n};\n\nconst VERSION = 0x02;\nconst SALT_LEN = 16;\nconst NONCE_LEN = 24;\nconst PAYLOAD_LEN = 91;\nconst LOGN_MIN = 1;\nconst LOGN_MAX = 22;\nconst SCRYPT_R = 8;\nconst SCRYPT_P = 1;\n\nexport class Nip49Error extends NostrError {\n  override name = \"Nip49Error\";\n}\n\nfunction assertLogn(logn: number): void {\n  if (!Number.isInteger(logn) || logn < LOGN_MIN || logn > LOGN_MAX) {\n    throw new Nip49Error(`invalid logn ${logn}, expected integer ${LOGN_MIN}..${LOGN_MAX}`);\n  }\n}\n\n// noble 2.3: V (N blocks) + p B blocks + one tmp scratch block.\nconst nobleScrypt: Scrypt = async (password, salt, params) =>\n  scryptAsync(password, salt, {\n    ...params,\n    maxmem: 128 * params.r * (params.N + params.p + 1),\n  });\n\nasync function deriveKey(\n  password: string,\n  salt: Uint8Array,\n  logn: number,\n  kdf: Scrypt,\n): Promise<Uint8Array> {\n  assertLogn(logn);\n  let key: Uint8Array;\n  try {\n    key = await kdf(utf8Encoder.encode(password.normalize(\"NFKC\")), salt, {\n      N: 2 ** logn,\n      r: SCRYPT_R,\n      p: SCRYPT_P,\n      dkLen: 32,\n    });\n  } catch (error) {\n    throw new Nip49Error(\"scrypt failed\", {\n      cause: error,\n    });\n  }\n  if (key.length !== 32) {\n    throw new Nip49Error(`scrypt returned ${key.length} bytes, expected 32`);\n  }\n  return key;\n}\n\n/** Encrypt a 32-byte secret key to an `ncryptsec` bech32 string. */\nexport async function encrypt(\n  secretKey: Uint8Array,\n  password: string,\n  opts?: Nip49EncryptOptions,\n): Promise<Ncryptsec> {\n  assertSecretKeyBytes(secretKey);\n  const logn = opts?.logn ?? 16;\n  const salt = randomBytes(SALT_LEN);\n  const key = await deriveKey(password, salt, logn, opts?.scrypt ?? nobleScrypt);\n  const nonce = randomBytes(NONCE_LEN);\n  const aad = Uint8Array.from([opts?.ksb ?? 0x02]);\n  const ciphertext = xchacha20poly1305(key, nonce, aad).encrypt(secretKey);\n  const bytes = concatBytes(\n    Uint8Array.from([VERSION]),\n    Uint8Array.from([logn]),\n    salt,\n    nonce,\n    aad,\n    ciphertext,\n  );\n  return encodeBytes(\"ncryptsec\", bytes);\n}\n\n/** Decrypt an `ncryptsec` bech32 string to a 32-byte secret key. */\nexport async function decrypt(\n  ncryptsec: string,\n  password: string,\n  opts?: Nip49DecryptOptions,\n): Promise<Uint8Array> {\n  let prefix: string;\n  let b: Uint8Array;\n  try {\n    const decoded = bech32.decode(ncryptsec, Bech32MaxSize);\n    ({ prefix } = decoded);\n    b = new Uint8Array(bech32.fromWords(decoded.words));\n  } catch (error) {\n    throw new Nip49Error(\"invalid ncryptsec\", {\n      cause: error,\n    });\n  }\n  if (prefix !== \"ncryptsec\") {\n    throw new Nip49Error(`invalid prefix ${prefix}, expected 'ncryptsec'`);\n  }\n  if (b.length !== PAYLOAD_LEN) {\n    throw new Nip49Error(\"invalid ncryptsec length\");\n  }\n  const version = b.at(0);\n  if (version === undefined) {\n    throw new Nip49Error(\"invalid ncryptsec length\");\n  }\n  if (version !== VERSION) {\n    throw new Nip49Error(`invalid version ${version}, expected 0x02`);\n  }\n  const logn = b.at(1);\n  if (logn === undefined) {\n    throw new Nip49Error(\"invalid ncryptsec length\");\n  }\n  const salt = b.subarray(2, 2 + SALT_LEN);\n  const nonce = b.subarray(2 + SALT_LEN, 2 + SALT_LEN + NONCE_LEN);\n  const ksb = b.at(2 + SALT_LEN + NONCE_LEN);\n  if (ksb === undefined) {\n    throw new Nip49Error(\"invalid ncryptsec length\");\n  }\n  const aad = Uint8Array.from([ksb]);\n  const ciphertext = b.subarray(2 + SALT_LEN + NONCE_LEN + 1);\n  try {\n    const key = await deriveKey(password, salt, logn, opts?.scrypt ?? nobleScrypt);\n    return xchacha20poly1305(key, nonce, aad).decrypt(ciphertext);\n  } catch (error) {\n    if (error instanceof Nip49Error) {\n      throw error;\n    }\n    throw new Nip49Error(\"failed to decrypt\", {\n      cause: error,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;AA6CA,MAAM,UAAU;AAChB,MAAM,WAAW;AACjB,MAAM,YAAY;AAClB,MAAM,cAAc;AACpB,MAAM,WAAW;AACjB,MAAM,WAAW;AACjB,MAAM,WAAW;AACjB,MAAM,WAAW;AAEjB,IAAa,aAAb,cAAgC,WAAW;CACzC,OAAgB;AAClB;AAEA,SAAS,WAAW,MAAoB;CACtC,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,YAAY,OAAO,UACvD,MAAM,IAAI,WAAW,gBAAgB,KAAK,qBAAqB,SAAS,IAAI,UAAU;AAE1F;AAGA,MAAM,cAAsB,OAAO,UAAU,MAAM,WACjD,YAAY,UAAU,MAAM;CAC1B,GAAG;CACH,QAAQ,MAAM,OAAO,KAAK,OAAO,IAAI,OAAO,IAAI;AAClD,CAAC;AAEH,eAAe,UACb,UACA,MACA,MACA,KACqB;CACrB,WAAW,IAAI;CACf,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,IAAI,YAAY,OAAO,SAAS,UAAU,MAAM,CAAC,GAAG,MAAM;GACpE,GAAG,KAAK;GACR,GAAG;GACH,GAAG;GACH,OAAO;EACT,CAAC;CACH,SAAS,OAAO;EACd,MAAM,IAAI,WAAW,iBAAiB,EACpC,OAAO,MACT,CAAC;CACH;CACA,IAAI,IAAI,WAAW,IACjB,MAAM,IAAI,WAAW,mBAAmB,IAAI,OAAO,oBAAoB;CAEzE,OAAO;AACT;;AAGA,eAAsB,QACpB,WACA,UACA,MACoB;CACpB,qBAAqB,SAAS;CAC9B,MAAM,OAAO,MAAM,QAAQ;CAC3B,MAAM,OAAO,YAAY,QAAQ;CACjC,MAAM,MAAM,MAAM,UAAU,UAAU,MAAM,MAAM,MAAM,UAAU,WAAW;CAC7E,MAAM,QAAQ,YAAY,SAAS;CACnC,MAAM,MAAM,WAAW,KAAK,CAAC,MAAM,OAAO,CAAI,CAAC;CAC/C,MAAM,aAAa,kBAAkB,KAAK,OAAO,GAAG,CAAC,CAAC,QAAQ,SAAS;CACvE,MAAM,QAAQ,YACZ,WAAW,KAAK,CAAC,OAAO,CAAC,GACzB,WAAW,KAAK,CAAC,IAAI,CAAC,GACtB,MACA,OACA,KACA,UACF;CACA,OAAO,YAAY,aAAa,KAAK;AACvC;;AAGA,eAAsB,QACpB,WACA,UACA,MACqB;CACrB,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,MAAM,UAAU,OAAO,OAAO,WAAW,aAAa;EACtD,CAAC,CAAE,UAAW;EACd,IAAI,IAAI,WAAW,OAAO,UAAU,QAAQ,KAAK,CAAC;CACpD,SAAS,OAAO;EACd,MAAM,IAAI,WAAW,qBAAqB,EACxC,OAAO,MACT,CAAC;CACH;CACA,IAAI,WAAW,aACb,MAAM,IAAI,WAAW,kBAAkB,OAAO,uBAAuB;CAEvE,IAAI,EAAE,WAAW,aACf,MAAM,IAAI,WAAW,0BAA0B;CAEjD,MAAM,UAAU,EAAE,GAAG,CAAC;CACtB,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,WAAW,0BAA0B;CAEjD,IAAI,YAAY,SACd,MAAM,IAAI,WAAW,mBAAmB,QAAQ,gBAAgB;CAElE,MAAM,OAAO,EAAE,GAAG,CAAC;CACnB,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,WAAW,0BAA0B;CAEjD,MAAM,OAAO,EAAE,SAAS,GAAG,EAAY;CACvC,MAAM,QAAQ,EAAE,SAAS,IAAc,EAAwB;CAC/D,MAAM,MAAM,EAAE,GAAG,EAAwB;CACzC,IAAI,QAAQ,KAAA,GACV,MAAM,IAAI,WAAW,0BAA0B;CAEjD,MAAM,MAAM,WAAW,KAAK,CAAC,GAAG,CAAC;CACjC,MAAM,aAAa,EAAE,SAAS,EAA4B;CAC1D,IAAI;EACF,MAAM,MAAM,MAAM,UAAU,UAAU,MAAM,MAAM,MAAM,UAAU,WAAW;EAC7E,OAAO,kBAAkB,KAAK,OAAO,GAAG,CAAC,CAAC,QAAQ,UAAU;CAC9D,SAAS,OAAO;EACd,IAAI,iBAAiB,YACnB,MAAM;EAER,MAAM,IAAI,WAAW,qBAAqB,EACxC,OAAO,MACT,CAAC;CACH;AACF"}
+{"version":3,"file":"nip49.mjs","names":[],"sources":["../../src/nips/nip49.ts"],"sourcesContent":["/**\n * NIP-49: Private Key Encryption (`ncryptsec`).\n *\n * @see https://github.com/nostr-protocol/nips/blob/master/49.md\n */\nimport { xchacha20poly1305 } from \"@noble/ciphers/chacha.js\";\nimport { secp256k1 } from \"@noble/curves/secp256k1.js\";\nimport { scryptAsync } from \"@noble/hashes/scrypt.js\";\nimport { concatBytes, randomBytes } from \"@noble/hashes/utils.js\";\nimport { bech32 } from \"@scure/base\";\n\nimport { NostrError } from \"../core/error.ts\";\nimport { assertSecretKeyBytes, utf8Encoder } from \"../core/util.ts\";\nimport { Bech32MaxSize, encodeBytes } from \"./nip19.ts\";\n\nexport type Ncryptsec = `ncryptsec1${string}`;\nexport type KeySecurityByte = 0x00 | 0x01 | 0x02;\n\nexport type ScryptParams = {\n  readonly N: number;\n  readonly r: number;\n  readonly p: number;\n  readonly dkLen: number;\n};\n\n/** Derive `params.dkLen` bytes from the NFKC-normalized UTF-8 password and salt (RFC 7914). */\nexport type Scrypt = (\n  password: Uint8Array,\n  salt: Uint8Array,\n  params: ScryptParams,\n) => Promise<Uint8Array>;\n\nexport type Nip49EncryptOptions = {\n  /** Scrypt log2(N) work factor, 1..22. Defaults to 16. */\n  logn?: number | undefined;\n  /** Key security byte recorded in the payload. Defaults to 0x02. */\n  ksb?: KeySecurityByte | undefined;\n  /** Scrypt implementation. Defaults to noble `scryptAsync`. */\n  scrypt?: Scrypt | undefined;\n};\n\nexport type Nip49DecryptOptions = {\n  /**\n   * Scrypt log2(N) ceiling, an integer in 1..22. Required: scrypt needs `128 * r * 2^logn` bytes of\n   * memory (4 GiB at logn 22), so a crafted `ncryptsec` could exhaust the caller's memory. Payloads\n   * above the ceiling are rejected with {@link Nip49Error} before scrypt runs.\n   */\n  maxLogN: number;\n  /** Scrypt implementation. Defaults to noble `scryptAsync`. */\n  scrypt?: Scrypt | undefined;\n};\n\nconst VERSION = 0x02;\nconst SALT_LEN = 16;\nconst NONCE_LEN = 24;\nconst PAYLOAD_LEN = 91;\nconst LOGN_MIN = 1;\nconst LOGN_MAX = 22;\nconst SCRYPT_R = 8;\nconst SCRYPT_P = 1;\n\nexport class Nip49Error extends NostrError {\n  override name = \"Nip49Error\";\n}\n\nfunction assertLogn(logn: number): void {\n  if (!Number.isInteger(logn) || logn < LOGN_MIN || logn > LOGN_MAX) {\n    throw new Nip49Error(`invalid logn ${logn}, expected integer ${LOGN_MIN}..${LOGN_MAX}`);\n  }\n}\n\n// noble 2.3: V (N blocks) + p B blocks + one tmp scratch block.\nconst nobleScrypt: Scrypt = async (password, salt, params) =>\n  scryptAsync(password, salt, {\n    ...params,\n    maxmem: 128 * params.r * (params.N + params.p + 1),\n  });\n\nasync function deriveKey(\n  password: string,\n  salt: Uint8Array,\n  logn: number,\n  kdf: Scrypt,\n): Promise<Uint8Array> {\n  assertLogn(logn);\n  let key: Uint8Array;\n  try {\n    key = await kdf(utf8Encoder.encode(password.normalize(\"NFKC\")), salt, {\n      N: 2 ** logn,\n      r: SCRYPT_R,\n      p: SCRYPT_P,\n      dkLen: 32,\n    });\n  } catch (error) {\n    throw new Nip49Error(\"scrypt failed\", {\n      cause: error,\n    });\n  }\n  if (key.length !== 32) {\n    throw new Nip49Error(`scrypt returned ${key.length} bytes, expected 32`);\n  }\n  return key;\n}\n\n/** Encrypt a 32-byte secret key to an `ncryptsec` bech32 string. */\nexport async function encrypt(\n  secretKey: Uint8Array,\n  password: string,\n  opts?: Nip49EncryptOptions,\n): Promise<Ncryptsec> {\n  assertSecretKeyBytes(secretKey);\n  const logn = opts?.logn ?? 16;\n  const salt = randomBytes(SALT_LEN);\n  const key = await deriveKey(password, salt, logn, opts?.scrypt ?? nobleScrypt);\n  const nonce = randomBytes(NONCE_LEN);\n  const aad = Uint8Array.from([opts?.ksb ?? 0x02]);\n  const ciphertext = xchacha20poly1305(key, nonce, aad).encrypt(secretKey);\n  const bytes = concatBytes(\n    Uint8Array.from([VERSION]),\n    Uint8Array.from([logn]),\n    salt,\n    nonce,\n    aad,\n    ciphertext,\n  );\n  return encodeBytes(\"ncryptsec\", bytes);\n}\n\n/** Decrypt an `ncryptsec` bech32 string to a 32-byte secret key. */\nexport async function decrypt(\n  ncryptsec: string,\n  password: string,\n  opts: Nip49DecryptOptions,\n): Promise<Uint8Array> {\n  const { maxLogN } = opts;\n  if (!Number.isInteger(maxLogN) || maxLogN < LOGN_MIN || maxLogN > LOGN_MAX) {\n    throw new Nip49Error(`invalid maxLogN ${maxLogN}, expected integer ${LOGN_MIN}..${LOGN_MAX}`);\n  }\n  let prefix: string;\n  let b: Uint8Array;\n  try {\n    const decoded = bech32.decode(ncryptsec, Bech32MaxSize);\n    ({ prefix } = decoded);\n    b = new Uint8Array(bech32.fromWords(decoded.words));\n  } catch (error) {\n    throw new Nip49Error(\"invalid ncryptsec\", {\n      cause: error,\n    });\n  }\n  if (prefix !== \"ncryptsec\") {\n    throw new Nip49Error(`invalid prefix ${prefix}, expected 'ncryptsec'`);\n  }\n  if (b.length !== PAYLOAD_LEN) {\n    throw new Nip49Error(\"invalid ncryptsec length\");\n  }\n  const version = b.at(0);\n  if (version === undefined) {\n    throw new Nip49Error(\"invalid ncryptsec length\");\n  }\n  if (version !== VERSION) {\n    throw new Nip49Error(`invalid version ${version}, expected 0x02`);\n  }\n  const logn = b.at(1);\n  if (logn === undefined) {\n    throw new Nip49Error(\"invalid ncryptsec length\");\n  }\n  if (logn > maxLogN) {\n    throw new Nip49Error(`logn ${logn} exceeds maxLogN ${maxLogN}`);\n  }\n  const salt = b.subarray(2, 2 + SALT_LEN);\n  const nonce = b.subarray(2 + SALT_LEN, 2 + SALT_LEN + NONCE_LEN);\n  const ksb = b.at(2 + SALT_LEN + NONCE_LEN);\n  if (ksb === undefined) {\n    throw new Nip49Error(\"invalid ncryptsec length\");\n  }\n  // NIP-49 defines 0x00, 0x01, and 0x02 as the key security byte.\n  if (ksb !== 0x00 && ksb !== 0x01 && ksb !== 0x02) {\n    throw new Nip49Error(`invalid key security byte ${ksb}, expected 0x00, 0x01, or 0x02`);\n  }\n  const aad = Uint8Array.from([ksb]);\n  const ciphertext = b.subarray(2 + SALT_LEN + NONCE_LEN + 1);\n  try {\n    const key = await deriveKey(password, salt, logn, opts.scrypt ?? nobleScrypt);\n    try {\n      const secret = xchacha20poly1305(key, nonce, aad).decrypt(ciphertext);\n      // Ruling N3: the decrypted bytes must form a valid secp256k1 scalar.\n      if (!secp256k1.utils.isValidSecretKey(secret)) {\n        secret.fill(0);\n        throw new Nip49Error(\"invalid secret key\");\n      }\n      return secret;\n    } finally {\n      key.fill(0);\n    }\n  } catch (error) {\n    if (error instanceof Nip49Error) {\n      throw error;\n    }\n    throw new Nip49Error(\"failed to decrypt\", {\n      cause: error,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAoDA,MAAM,UAAU;AAChB,MAAM,WAAW;AACjB,MAAM,YAAY;AAClB,MAAM,cAAc;AACpB,MAAM,WAAW;AACjB,MAAM,WAAW;AACjB,MAAM,WAAW;AACjB,MAAM,WAAW;AAEjB,IAAa,aAAb,cAAgC,WAAW;CACzC,OAAgB;AAClB;AAEA,SAAS,WAAW,MAAoB;CACtC,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,YAAY,OAAO,UACvD,MAAM,IAAI,WAAW,gBAAgB,KAAK,qBAAqB,SAAS,IAAI,UAAU;AAE1F;AAGA,MAAM,cAAsB,OAAO,UAAU,MAAM,WACjD,YAAY,UAAU,MAAM;CAC1B,GAAG;CACH,QAAQ,MAAM,OAAO,KAAK,OAAO,IAAI,OAAO,IAAI;AAClD,CAAC;AAEH,eAAe,UACb,UACA,MACA,MACA,KACqB;CACrB,WAAW,IAAI;CACf,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,IAAI,YAAY,OAAO,SAAS,UAAU,MAAM,CAAC,GAAG,MAAM;GACpE,GAAG,KAAK;GACR,GAAG;GACH,GAAG;GACH,OAAO;EACT,CAAC;CACH,SAAS,OAAO;EACd,MAAM,IAAI,WAAW,iBAAiB,EACpC,OAAO,MACT,CAAC;CACH;CACA,IAAI,IAAI,WAAW,IACjB,MAAM,IAAI,WAAW,mBAAmB,IAAI,OAAO,oBAAoB;CAEzE,OAAO;AACT;;AAGA,eAAsB,QACpB,WACA,UACA,MACoB;CACpB,qBAAqB,SAAS;CAC9B,MAAM,OAAO,MAAM,QAAQ;CAC3B,MAAM,OAAO,YAAY,QAAQ;CACjC,MAAM,MAAM,MAAM,UAAU,UAAU,MAAM,MAAM,MAAM,UAAU,WAAW;CAC7E,MAAM,QAAQ,YAAY,SAAS;CACnC,MAAM,MAAM,WAAW,KAAK,CAAC,MAAM,OAAO,CAAI,CAAC;CAC/C,MAAM,aAAa,kBAAkB,KAAK,OAAO,GAAG,CAAC,CAAC,QAAQ,SAAS;CACvE,MAAM,QAAQ,YACZ,WAAW,KAAK,CAAC,OAAO,CAAC,GACzB,WAAW,KAAK,CAAC,IAAI,CAAC,GACtB,MACA,OACA,KACA,UACF;CACA,OAAO,YAAY,aAAa,KAAK;AACvC;;AAGA,eAAsB,QACpB,WACA,UACA,MACqB;CACrB,MAAM,EAAE,YAAY;CACpB,IAAI,CAAC,OAAO,UAAU,OAAO,KAAK,UAAU,YAAY,UAAU,UAChE,MAAM,IAAI,WAAW,mBAAmB,QAAQ,qBAAqB,SAAS,IAAI,UAAU;CAE9F,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,MAAM,UAAU,OAAO,OAAO,WAAW,aAAa;EACtD,CAAC,CAAE,UAAW;EACd,IAAI,IAAI,WAAW,OAAO,UAAU,QAAQ,KAAK,CAAC;CACpD,SAAS,OAAO;EACd,MAAM,IAAI,WAAW,qBAAqB,EACxC,OAAO,MACT,CAAC;CACH;CACA,IAAI,WAAW,aACb,MAAM,IAAI,WAAW,kBAAkB,OAAO,uBAAuB;CAEvE,IAAI,EAAE,WAAW,aACf,MAAM,IAAI,WAAW,0BAA0B;CAEjD,MAAM,UAAU,EAAE,GAAG,CAAC;CACtB,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,WAAW,0BAA0B;CAEjD,IAAI,YAAY,SACd,MAAM,IAAI,WAAW,mBAAmB,QAAQ,gBAAgB;CAElE,MAAM,OAAO,EAAE,GAAG,CAAC;CACnB,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,WAAW,0BAA0B;CAEjD,IAAI,OAAO,SACT,MAAM,IAAI,WAAW,QAAQ,KAAK,mBAAmB,SAAS;CAEhE,MAAM,OAAO,EAAE,SAAS,GAAG,EAAY;CACvC,MAAM,QAAQ,EAAE,SAAS,IAAc,EAAwB;CAC/D,MAAM,MAAM,EAAE,GAAG,EAAwB;CACzC,IAAI,QAAQ,KAAA,GACV,MAAM,IAAI,WAAW,0BAA0B;CAGjD,IAAI,QAAQ,KAAQ,QAAQ,KAAQ,QAAQ,GAC1C,MAAM,IAAI,WAAW,6BAA6B,IAAI,+BAA+B;CAEvF,MAAM,MAAM,WAAW,KAAK,CAAC,GAAG,CAAC;CACjC,MAAM,aAAa,EAAE,SAAS,EAA4B;CAC1D,IAAI;EACF,MAAM,MAAM,MAAM,UAAU,UAAU,MAAM,MAAM,KAAK,UAAU,WAAW;EAC5E,IAAI;GACF,MAAM,SAAS,kBAAkB,KAAK,OAAO,GAAG,CAAC,CAAC,QAAQ,UAAU;GAEpE,IAAI,CAAC,UAAU,MAAM,iBAAiB,MAAM,GAAG;IAC7C,OAAO,KAAK,CAAC;IACb,MAAM,IAAI,WAAW,oBAAoB;GAC3C;GACA,OAAO;EACT,UAAU;GACR,IAAI,KAAK,CAAC;EACZ;CACF,SAAS,OAAO;EACd,IAAI,iBAAiB,YACnB,MAAM;EAER,MAAM,IAAI,WAAW,qBAAqB,EACxC,OAAO,MACT,CAAC;CACH;AACF"}

package/dist/nips/nip51.d.mts

@@ -1,2 +1,2 @@
-import { a as encryptPrivateTags, c as parseEmojiSet, d as parseMuteList, f as parseMuteListPrivate, g as pinListEventBuilder, h as parseUserEmojiList, i as decryptPrivateTags, l as parseFavoriteRelays, m as parseRelaySet, n as Nip51Crypto, o as muteListEventBuilder, p as parsePinList, r as bookmarkListEventBuilder, s as parseBookmarkList, t as MuteItem, u as parseFollowPack } from "../nip51-O_vhOiK2.mjs";
+import { a as encryptPrivateTags, c as parseEmojiSet, d as parseMuteList, f as parseMuteListPrivate, g as pinListEventBuilder, h as parseUserEmojiList, i as decryptPrivateTags, l as parseFavoriteRelays, m as parseRelaySet, n as Nip51Crypto, o as muteListEventBuilder, p as parsePinList, r as bookmarkListEventBuilder, s as parseBookmarkList, t as MuteItem, u as parseFollowPack } from "../nip51-D_bu8Hph.mjs";
 export { MuteItem, Nip51Crypto, bookmarkListEventBuilder, decryptPrivateTags, encryptPrivateTags, muteListEventBuilder, parseBookmarkList, parseEmojiSet, parseFavoriteRelays, parseFollowPack, parseMuteList, parseMuteListPrivate, parsePinList, parseRelaySet, parseUserEmojiList, pinListEventBuilder };

package/dist/nips/nip51.mjs

@@ -1,7 +1,7 @@
-import { h as EventValidationError, l as normalizeRelayUrls, n as assertHex32, o as isHex32 } from "../util-DMF9AIO0.mjs";
+import { g as EventValidationError, n as assertHex32, s as isHex32, u as normalizeRelayUrls } from "../util-DDpPkiED.mjs";
 import { t as Kind } from "../kind-D8fENiiL.mjs";
-import { b as getDTag, g as Tag, v as firstTagValue, x as isTag } from "../event-C2eLiPpV.mjs";
-import { t as EventBuilder } from "../builder-CVRmUeNm.mjs";
+import { b as getDTag, g as Tag, v as firstTagValue, x as isTag } from "../event-B3ua2_oL.mjs";
+import { t as EventBuilder } from "../builder-Cf2N12CG.mjs";
 //#region src/nips/nip51.ts
 /**
 * NIP-51: Lists Public tags plus NIP-44 private `.content` (author encrypts to self). Crypto is

package/dist/nips/nip57.mjs

@@ -1,7 +1,7 @@
-import { a as hexToBytes, d as nowSeconds, h as EventValidationError, p as utf8Encoder } from "../util-DMF9AIO0.mjs";
+import { f as nowSeconds, g as EventValidationError, m as utf8Encoder, o as hexToBytes } from "../util-DDpPkiED.mjs";
 import { r as isAddressableKind, t as Kind } from "../kind-D8fENiiL.mjs";
-import { S as parseEventAddress, _ as eventAddress, b as getDTag, g as Tag, h as validateSignedEvent, v as firstTagValue } from "../event-C2eLiPpV.mjs";
-import { n as verifyEvent } from "../verifier-uC_jd-Nw.mjs";
+import { S as parseEventAddress, _ as eventAddress, b as getDTag, g as Tag, h as validateSignedEvent, v as firstTagValue } from "../event-B3ua2_oL.mjs";
+import { n as verifyEvent } from "../verifier-CjH1vnP2.mjs";
 import { sha256 } from "@noble/hashes/sha2.js";
 import { bech32 } from "@scure/base";
 import { equalBytes } from "@noble/ciphers/utils.js";

package/dist/nips/nip59.d.mts

@@ -1,2 +1,2 @@
-import { _ as requireNip59Crypto, a as Rumor, b as wrap, c as TimestampRandomize, d as createRumor, f as createSeal, g as requireNip44Decryptor, h as randomPastTimestamp, i as Nip59Error, l as WrapOptions, m as isGiftWrapKind, n as Nip44Decryptor, o as SealOptions, p as eventToJson, r as Nip59Crypto, s as TWO_DAYS_SECS, t as GiftWrapTimestamps, u as createGiftWrap, v as rumorToJson, y as unwrap } from "../nip59-CdDoJptA.mjs";
+import { _ as requireNip59Crypto, a as Rumor, b as wrap, c as TimestampRandomize, d as createRumor, f as createSeal, g as requireNip44Decryptor, h as randomPastTimestamp, i as Nip59Error, l as WrapOptions, m as isGiftWrapKind, n as Nip44Decryptor, o as SealOptions, p as eventToJson, r as Nip59Crypto, s as TWO_DAYS_SECS, t as GiftWrapTimestamps, u as createGiftWrap, v as rumorToJson, y as unwrap } from "../nip59-CGWfoItR.mjs";
 export { GiftWrapTimestamps, Nip44Decryptor, Nip59Crypto, Nip59Error, Rumor, SealOptions, TWO_DAYS_SECS, TimestampRandomize, WrapOptions, createGiftWrap, createRumor, createSeal, eventToJson, isGiftWrapKind, randomPastTimestamp, requireNip44Decryptor, requireNip59Crypto, rumorToJson, unwrap, wrap };