nostr-bray 2.3.0 → 3.0.0

package/dist/zap/tools.js

@@ -1,23 +1,23 @@
 import { z } from 'zod';
-import { handleZapReceipts, handleZapDecode, handleZapSend, handleZapBalance, handleZapMakeInvoice, handleZapLookupInvoice, handleZapListTransactions, resolveNwcUri, loadWallets, saveWallets, parseNwcUri, } from './handlers.js';
+import { handleZapReceipts, handleZapDecode, handleZapSend, handleZapBalance, handleZapMakeInvoice, handleZapLookupInvoice, handleZapListTransactions, resolveNwcUri, loadWallets, saveWallets, } from './handlers.js';
+import { normaliseNwcUriFile } from './nwc-file.js';
 /** Resolve the NWC URI for the active identity, with per-identity and global fallback */
 function getNwcUri(deps) {
     return resolveNwcUri(deps.ctx, deps.walletsFile, deps.nwcUri);
 }
 export function registerZapTools(server, deps) {
     server.registerTool('zap-wallet-set', {
-        description: 'Set the NWC wallet URI for the active identity. Each persona can have its own Lightning wallet.',
+        description: 'Set the private local file containing the NWC wallet URI for the active identity. The bearer URI never crosses MCP.',
         inputSchema: {
-            nwcUri: z.string().describe('nostr+walletconnect:// URI for this identity'),
+            nwcUriFile: z.string().describe('Path to a local 0600 file containing the nostr+walletconnect:// URI'),
         },
-        annotations: { readOnlyHint: false },
-    }, async ({ nwcUri }) => {
-        // Validate URI format
-        parseNwcUri(nwcUri);
+        annotations: { readOnlyHint: false, destructiveHint: true },
+    }, async ({ nwcUriFile }) => {
+        const secretFile = normaliseNwcUriFile(nwcUriFile);
         const pubkey = deps.ctx.activePublicKeyHex;
         const npub = deps.ctx.activeNpub;
         const wallets = loadWallets(deps.walletsFile);
-        wallets[pubkey] = nwcUri;
+        wallets[pubkey] = secretFile;
         saveWallets(deps.walletsFile, wallets);
         return {
             content: [{ type: 'text', text: JSON.stringify({
@@ -28,7 +28,7 @@ export function registerZapTools(server, deps) {
         };
     });
     server.registerTool('zap-wallet-clear', {
-        description: 'Remove the NWC wallet for the active identity. Falls back to the global NWC_URI if set.',
+        description: 'Remove the NWC wallet file reference for the active identity. Falls back to global NWC_URI_FILE configuration.',
         annotations: { readOnlyHint: false },
     }, async () => {
         const pubkey = deps.ctx.activePublicKeyHex;
@@ -56,6 +56,10 @@ export function registerZapTools(server, deps) {
     }, async ({ invoice, confirm }) => {
         // Always decode first so the caller sees what they're paying
         const decoded = handleZapDecode(invoice);
+        if (decoded.expiry === undefined)
+            throw new Error('Invalid BOLT-11 invoice');
+        if (decoded.amountMsats === undefined)
+            throw new Error('Amountless BOLT-11 invoices are not supported');
         if (!confirm) {
             return {
                 content: [{ type: 'text', text: JSON.stringify({
@@ -70,9 +74,10 @@ export function registerZapTools(server, deps) {
         return {
             content: [{ type: 'text', text: JSON.stringify({
                         paid: true,
+                        verified: result.verified,
                         amountMsats: decoded.amountMsats,
-                        id: result.event.id,
-                        publish: result.publish,
+                        paymentHash: result.paymentHash,
+                        feesPaidMsats: result.fees_paid,
                     }, null, 2) }],
         };
     });
@@ -82,7 +87,7 @@ export function registerZapTools(server, deps) {
     }, async () => {
         const result = await handleZapBalance(deps.ctx, deps.pool, { nwcUri: getNwcUri(deps) });
         return {
-            content: [{ type: 'text', text: JSON.stringify({ id: result.event.id, publish: result.publish }, null, 2) }],
+            content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
         };
     });
     server.registerTool('zap-make-invoice', {
@@ -97,7 +102,7 @@ export function registerZapTools(server, deps) {
             amountMsats, description, nwcUri: getNwcUri(deps),
         });
         return {
-            content: [{ type: 'text', text: JSON.stringify({ id: result.event.id, publish: result.publish }, null, 2) }],
+            content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
         };
     });
     server.registerTool('zap-lookup-invoice', {
@@ -112,7 +117,7 @@ export function registerZapTools(server, deps) {
             paymentHash, invoice, nwcUri: getNwcUri(deps),
         });
         return {
-            content: [{ type: 'text', text: JSON.stringify({ id: result.event.id, publish: result.publish }, null, 2) }],
+            content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
         };
     });
     server.registerTool('zap-list-transactions', {
@@ -127,7 +132,7 @@ export function registerZapTools(server, deps) {
             limit, offset, nwcUri: getNwcUri(deps),
         });
         return {
-            content: [{ type: 'text', text: JSON.stringify({ id: result.event.id, publish: result.publish }, null, 2) }],
+            content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
         };
     });
     server.registerTool('zap-receipts', {

package/llms-full.txt

@@ -18,8 +18,7 @@ Single-process MCP server (stdio or HTTP transport) with 253 tools in 28 groups.
 | NOSTR_SECRET_KEY_FILE | Tier 3* | Path to file containing the secret key |
 | NOSTR_SECRET_KEY | Tier 4* | nsec bech32, 64-char hex, or BIP-39 mnemonic |
 | NOSTR_RELAYS | Yes | Comma-separated relay WebSocket URLs |
-| NWC_URI | No | Nostr Wallet Connect URI for zap operations |
-| NWC_URI_FILE | No | Path to file containing NWC URI |
+| NWC_URI_FILE | No | Path to a private 0600 file containing the NWC URI |
 | TOR_PROXY | No | SOCKS5h proxy URL (e.g. socks5h://127.0.0.1:9050) |
 | ALLOW_CLEARNET_WITH_TOR | No | Set to "1" to allow clearnet relays with Tor |
 | NIP04_ENABLED | No | Set to "1" to enable legacy NIP-04 DMs |
@@ -608,11 +607,11 @@ Recommend relays for your use case. Strategies: balanced, privacy, performance,
 ### Zap Tools (9)
 
 #### zap-wallet-set
-Set the NWC wallet URI for the active identity. Each persona can have its own Lightning wallet.
-- Input: nwcUri (nostr+walletconnect:// URI)
+Set the private local file containing the NWC wallet URI for the active identity. The bearer URI never crosses MCP.
+- Input: nwcUriFile (path to a regular 0600 secret file)
 
 #### zap-wallet-clear
-Remove the NWC wallet for the active identity. Falls back to global NWC_URI.
+Remove the NWC wallet file reference for the active identity. Falls back to global NWC_URI_FILE configuration.
 - No inputs
 
 #### zap-send
@@ -1130,7 +1129,9 @@ Execute an action found via search-actions.
 - Private keys never appear in tool responses
 - LRU cache with cryptographic zeroing on eviction (active entry never evicted)
 - Secrets deleted from process.env after parsing, references cleared after startup
-- NWC secret buffers zeroised in try/finally after each operation
+- NWC uses @forgesworn/nwc-kit with NIP-44 v2 and authenticated wallet events
+- Returned payment preimages are verified against the challenged BOLT-11 invoice with farrier-kit
+- Caller-owned NWC URI strings cannot be erased; library-owned key byte arrays are zeroised in try/finally after each operation
 - NIP-04 disabled by default (requires explicit opt-in)
 - Tor proxy support via SOCKS5h with clearnet blocking enforced on runtime relay additions
 - Per-identity relay separation to prevent linking

package/llms.txt

@@ -136,7 +136,7 @@ search-actions, execute-action
 - **Master/derived**: The master key derives child identities via nsec-tree. Children can be zeroised independently.
 - **NIP-65 relay chasing**: When messaging someone, bray fetches their NIP-65 relay list and writes to their preferred relays.
 - **NIP-17 default**: DMs use gift-wrapped NIP-17 by default. NIP-04 requires explicit opt-in.
-- **NWC wallet**: Per-persona Lightning wallets via Nostr Wallet Connect (NIP-47).
+- **NWC wallet**: Per-persona Lightning wallets via Nostr Wallet Connect (NIP-47). Bearer URIs are accepted only from private local files, never MCP arguments or raw environment values.
 - **Dispatch protocol**: AI-to-AI task collaboration over encrypted NIP-17 DMs with NIP-89 capability discovery.
 - **CANARY groups**: Multi-member verification with time-rotating spoken words and silent duress signalling.
 - **Marketplace**: Discover, compare, and consume L402/x402 paid APIs announced via kind 31402.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nostr-bray",
-  "version": "2.3.0",
+  "version": "3.0.0",
   "mcpName": "dev.forgesworn/bray",
   "description": "Trust-aware Nostr for AI and humans. Three dimensions of trust -- verification, proximity, and access -- woven into every interaction.",
   "type": "module",
@@ -115,10 +115,13 @@
     "build": "tsc && node scripts/build-widgets.mjs && node scripts/export-tool-schemas.mjs",
     "update:kind-registry": "node scripts/update-kind-registry.mjs",
     "test": "vitest run",
+    "test:release": "npm run check:publish-dependencies && npm test",
+    "check:publish-dependencies": "node scripts/check-publish-dependencies.mjs",
     "test:coverage": "vitest run --coverage",
     "test:watch": "vitest",
     "lint": "tsc --noEmit",
-    "start": "node dist/index.js"
+    "start": "node dist/index.js",
+    "prepublishOnly": "npm run check:publish-dependencies && npm run build && npm test"
   },
   "keywords": [
     "nostr",
@@ -149,9 +152,10 @@
   "homepage": "https://github.com/forgesworn/bray#readme",
   "license": "MIT",
   "engines": {
-    "node": ">=22.19.0"
+    "node": ">=24"
   },
   "dependencies": {
+    "@forgesworn/nwc-kit": "0.1.1",
     "@forgesworn/range-proof": "^2.0.1",
     "@forgesworn/ring-sig": "^3.0.0",
     "@forgesworn/shamir-words": "^1.0.4",
@@ -159,6 +163,7 @@
     "@modelcontextprotocol/sdk": "^1.27.1",
     "canary-kit": "^2.6.2",
     "dominion-protocol": "^1.0.0",
+    "farrier-kit": "1.1.2",
     "nostr-attestations": "^2.5.4",
     "nostr-tools": "^2.23.3",
     "nostr-veil": "^0.30.0",