onelobby 0.4.1 → 0.6.0

package/dist/nostr/relays.js

@@ -0,0 +1,315 @@
+import { sha256, toHex, fromHex } from "./crypto.js";
+import { schnorrPublicKey, schnorrSign } from "./secp256k1.js";
+export const NOSTR_KIND = 25050;
+/** NIP-01 event id: SHA-256 of `[0, pubkey, created_at, kind, tags, content]` serialised without whitespace. */
+export async function eventId(pubkey, createdAt, kind, tags, content) {
+    return toHex(await sha256(new TextEncoder().encode(JSON.stringify([0, pubkey, createdAt, kind, tags, content]))));
+}
+/** A signed kind-25050 event (BIP340 Schnorr over the id). */
+export async function makeEvent(secret, topic, content, createdAt) {
+    const pubkey = toHex(schnorrPublicKey(secret));
+    const tags = [["t", topic]];
+    const id = await eventId(pubkey, createdAt, NOSTR_KIND, tags, content);
+    const sig = toHex(await schnorrSign(fromHex(id), secret));
+    return { id, pubkey, created_at: createdAt, kind: NOSTR_KIND, tags, content, sig };
+}
+export const defaultRelayConnect = (url) => {
+    const WS = globalThis.WebSocket;
+    if (!WS)
+        throw new Error("no WebSocket in this runtime (Node 22+ has one; older Node needs advanced.nostrConnect)");
+    return new WS(url);
+};
+const SEEN_MAX = 4096;
+const SINCE_SLACK_S = 30;
+/** Every relay at once, each reconnected with backoff (1 s doubling to 30 s); events deduped by id. */
+export class RelayPool {
+    o;
+    relays;
+    seen = new Set();
+    sub = "ol" + Math.random().toString(16).slice(2, 10);
+    closed = false;
+    waiters = [];
+    constructor(o) {
+        this.o = o;
+        this.relays = o.urls.map((url) => ({ url, ws: null, open: false, attempted: false, skipped: false, backoff: 1000, cancelRetry: null }));
+    }
+    get total() {
+        return this.relays.length;
+    }
+    /** Relays connected right now (and not skipped). */
+    get connected() {
+        return this.relays.filter((r) => r.open && !r.skipped).length;
+    }
+    /** Every relay has either connected, failed a connect, or been skipped: waiting longer for the rest is pointless. */
+    get settled() {
+        return this.relays.every((r) => r.attempted || r.skipped);
+    }
+    start() {
+        for (const r of this.relays)
+            this.dial(r);
+    }
+    /** Resolves true once one relay is connected, false after `timeoutMs` (or when closed). */
+    whenUp(timeoutMs) {
+        if (this.connected > 0)
+            return Promise.resolve(true);
+        return new Promise((resolve) => {
+            const cancel = this.o.clock.setTimeout(() => done(false), timeoutMs);
+            const done = (v) => {
+                cancel();
+                this.waiters = this.waiters.filter((w) => w !== check);
+                resolve(v);
+            };
+            const check = () => {
+                if (this.connected > 0)
+                    done(true);
+                else if (this.closed)
+                    done(false);
+            };
+            this.waiters.push(check);
+        });
+    }
+    publish(ev) {
+        const msg = JSON.stringify(["EVENT", ev]);
+        for (const r of this.relays)
+            if (r.open && !r.skipped)
+                this.trySend(r, msg);
+    }
+    close() {
+        this.closed = true;
+        for (const r of this.relays) {
+            r.cancelRetry?.();
+            r.cancelRetry = null;
+            this.drop(r, false);
+        }
+        this.changed();
+    }
+    changed() {
+        for (const w of [...this.waiters])
+            w();
+        this.o.onChange?.();
+    }
+    trySend(r, msg) {
+        try {
+            r.ws?.send(msg);
+        }
+        catch {
+            /* a dying socket: its onclose reconnects */
+        }
+    }
+    dial(r) {
+        if (this.closed || r.skipped)
+            return;
+        let ws;
+        try {
+            ws = this.o.connect(r.url);
+        }
+        catch {
+            r.attempted = true;
+            this.retryLater(r);
+            return;
+        }
+        r.ws = ws;
+        ws.onopen = () => {
+            if (r.ws !== ws)
+                return;
+            r.open = true;
+            r.attempted = true;
+            r.backoff = 1000;
+            const since = Math.floor(this.o.wall() / 1000) - SINCE_SLACK_S;
+            this.trySend(r, JSON.stringify(["REQ", this.sub, { kinds: [NOSTR_KIND], "#t": [this.o.topic], since }]));
+            this.changed();
+        };
+        ws.onmessage = (e) => {
+            if (r.ws === ws)
+                this.onMessage(r, String(e.data));
+        };
+        const lost = () => {
+            if (r.ws !== ws)
+                return;
+            const wasOpen = r.open;
+            r.ws = null;
+            r.open = false;
+            r.attempted = true;
+            if (wasOpen)
+                this.changed();
+            this.retryLater(r);
+        };
+        ws.onclose = lost;
+        ws.onerror = () => {
+            /* onclose follows; Node's WebSocket may not fire it for a failed connect, so retry from here too */
+            lost();
+        };
+    }
+    drop(r, retry) {
+        const ws = r.ws;
+        r.ws = null;
+        r.open = false;
+        try {
+            ws?.close();
+        }
+        catch {
+            /* ignore */
+        }
+        if (retry)
+            this.retryLater(r);
+    }
+    retryLater(r) {
+        if (this.closed || r.skipped || r.cancelRetry)
+            return;
+        const wait = r.backoff;
+        r.backoff = Math.min(30_000, r.backoff * 2);
+        r.cancelRetry = this.o.clock.setTimeout(() => {
+            r.cancelRetry = null;
+            this.dial(r);
+        }, wait);
+    }
+    skip(r) {
+        if (r.skipped)
+            return;
+        r.skipped = true;
+        r.cancelRetry?.();
+        r.cancelRetry = null;
+        this.drop(r, false);
+        this.changed();
+    }
+    onMessage(r, text) {
+        let m;
+        try {
+            m = JSON.parse(text);
+        }
+        catch {
+            return;
+        }
+        if (!Array.isArray(m))
+            return;
+        switch (m[0]) {
+            case "EVENT": {
+                const ev = m[2];
+                if (!ev || typeof ev.id !== "string" || typeof ev.pubkey !== "string" || typeof ev.content !== "string" || typeof ev.created_at !== "number")
+                    return;
+                if (ev.kind !== NOSTR_KIND || !Array.isArray(ev.tags) || !ev.tags.some((t) => t[0] === "t" && t[1] === this.o.topic))
+                    return;
+                if (this.seen.has(ev.id))
+                    return;
+                this.seen.add(ev.id);
+                if (this.seen.size > SEEN_MAX)
+                    this.seen.delete(this.seen.values().next().value);
+                this.o.onEvent(ev);
+                return;
+            }
+            case "OK":
+                // refused (not a plain duplicate): this relay does not take our events, skip it for the session
+                if (m[2] === false && !String(m[3] ?? "").startsWith("duplicate"))
+                    this.skip(r);
+                return;
+            case "CLOSED":
+                this.skip(r);
+                return;
+        }
+    }
+}
+/** Default public relays (probed 2026-10-26, docs/design/no-server-fallback.md): all accept and echo ephemeral kind 25050. */
+export const DEFAULT_NOSTR_RELAYS = [
+    "wss://nos.lol",
+    "wss://relay.primal.net",
+    "wss://nostr-pub.wellorder.net",
+    "wss://nostr.oxtr.dev",
+    "wss://nostr.bitcoiner.social",
+    "wss://relay.nostr.net",
+    "wss://nostr.sathoarder.com",
+];
+/** Public STUN servers for Nostr joiners (spec s.5). */
+export const DEFAULT_NOSTR_STUN = ["stun:stun.l.google.com:19302", "stun:stun.cloudflare.com:3478"];
+/**
+ * Probes each relay: connect, subscribe, publish one kind-25050 event to itself under a random topic with a random
+ * key, and see it echoed. Anonymous (nothing about the player is sent). Use it to pick `hosting.nostrRelays`.
+ */
+export async function checkNostrRelays(urls, timeoutMs = 8000, opts = {}) {
+    const connect = opts.connect ?? defaultRelayConnect;
+    const setT = (fn, ms) => {
+        const h = setTimeout(fn, ms);
+        return () => clearTimeout(h);
+    };
+    return Promise.all(urls.map((url) => checkOne(url, timeoutMs, connect, opts.clock?.setTimeout.bind(opts.clock) ?? setT)));
+}
+async function checkOne(url, timeoutMs, connect, setT) {
+    const t0 = Date.now();
+    const secret = new Uint8Array(32);
+    globalThis.crypto.getRandomValues(secret);
+    secret[0] &= 0x7f; // far below the curve order
+    if (secret.every((b) => b === 0))
+        secret[31] = 1;
+    const topic = toHex(globalThis.crypto.getRandomValues(new Uint8Array(32)));
+    let ev;
+    try {
+        ev = await makeEvent(secret, topic, "probe", Math.floor(Date.now() / 1000));
+    }
+    catch (e) {
+        return { url, ok: false, ms: 0, error: String(e) };
+    }
+    return new Promise((resolve) => {
+        let ws = null;
+        let finished = false;
+        let accepted = false;
+        const finish = (ok, error) => {
+            if (finished)
+                return;
+            finished = true;
+            cancel();
+            try {
+                ws?.close();
+            }
+            catch {
+                /* ignore */
+            }
+            resolve({ url, ok, ms: Date.now() - t0, ...(error ? { error } : {}) });
+        };
+        const cancel = setT(() => finish(false, accepted ? "accepted but not echoed" : "timeout"), timeoutMs);
+        try {
+            ws = connect(url);
+        }
+        catch (e) {
+            finish(false, String(e));
+            return;
+        }
+        const sub = "chk" + topic.slice(0, 8);
+        let published = false;
+        const publish = () => {
+            if (published)
+                return;
+            published = true;
+            ws.send(JSON.stringify(["EVENT", ev]));
+        };
+        ws.onopen = () => {
+            ws.send(JSON.stringify(["REQ", sub, { kinds: [NOSTR_KIND], "#t": [topic], since: Math.floor(Date.now() / 1000) - 30 }]));
+            // some relays never send EOSE for a subscription with no stored events: publish shortly anyway
+            setT(publish, 1500);
+        };
+        ws.onerror = () => finish(false, "connection failed");
+        ws.onclose = () => finish(false, "closed");
+        ws.onmessage = (e) => {
+            let m;
+            try {
+                m = JSON.parse(String(e.data));
+            }
+            catch {
+                return;
+            }
+            if (!Array.isArray(m))
+                return;
+            if (m[0] === "EOSE")
+                publish();
+            else if (m[0] === "OK" && m[1] === ev.id) {
+                if (m[2] === true)
+                    accepted = true;
+                else
+                    finish(false, `refused: ${String(m[3] ?? "")}`.slice(0, 120));
+            }
+            else if (m[0] === "CLOSED")
+                finish(false, `closed: ${String(m[2] ?? "")}`.slice(0, 120));
+            else if (m[0] === "EVENT" && m[2]?.id === ev.id)
+                finish(true);
+        };
+    });
+}
+//# sourceMappingURL=relays.js.map

package/dist/nostr/relays.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relays.js","sourceRoot":"","sources":["../../src/nostr/relays.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE/D,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,CAAC;AAYhC,gHAAgH;AAChH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,SAAiB,EAAE,IAAY,EAAE,IAAgB,EAAE,OAAe;IAC9G,OAAO,KAAK,CAAC,MAAM,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpH,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAkB,EAAE,KAAa,EAAE,OAAe,EAAE,SAAiB;IACnG,MAAM,MAAM,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACrF,CAAC;AAKD,MAAM,CAAC,MAAM,mBAAmB,GAAiB,CAAC,GAAG,EAAE,EAAE;IACvD,MAAM,EAAE,GAAI,UAA2D,CAAC,SAAS,CAAC;IAClF,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IACpH,OAAO,IAAI,EAAE,CAAC,GAAG,CAAe,CAAC;AACnC,CAAC,CAAC;AAyBF,MAAM,QAAQ,GAAG,IAAI,CAAC;AACtB,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,uGAAuG;AACvG,MAAM,OAAO,SAAS;IAOS;IANZ,MAAM,CAAU;IAChB,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IACzB,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,GAAG,KAAK,CAAC;IACf,OAAO,GAAmB,EAAE,CAAC;IAErC,YAA6B,CAAmB;QAAnB,MAAC,GAAD,CAAC,CAAkB;QAC9C,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1I,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,oDAAoD;IACpD,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAChE,CAAC;IAED,qHAAqH;IACrH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK;QACH,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,2FAA2F;IAC3F,MAAM,CAAC,SAAiB;QACtB,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE;gBAC1B,MAAM,EAAE,CAAC;gBACT,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;gBACvD,OAAO,CAAC,CAAC,CAAC,CAAC;YACb,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,GAAG,EAAE;gBACjB,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC;qBAC9B,IAAI,IAAI,CAAC,MAAM;oBAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,EAAc;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO;gBAAE,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAClB,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,OAAO;QACb,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAAE,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IACtB,CAAC;IAEO,OAAO,CAAC,CAAQ,EAAE,GAAW;QACnC,IAAI,CAAC;YACH,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,CAAQ;QACnB,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO;QACrC,IAAI,EAAc,CAAC;QACnB,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;QACV,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE;YACf,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE;gBAAE,OAAO;YACxB,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;YACd,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;YACjB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,aAAa,CAAC;YAC/D,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YACzG,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC;QACF,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,EAAE;YACnB,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE;gBAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE;gBAAE,OAAO;YACxB,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC;YACvB,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;YACZ,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;YACf,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC;YACnB,IAAI,OAAO;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,EAAE,CAAC,OAAO,GAAG,IAAI,CAAC;QAClB,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;YAChB,oGAAoG;YACpG,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;IACJ,CAAC;IAEO,IAAI,CAAC,CAAQ,EAAE,KAAc;QACnC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAChB,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;QACZ,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QACf,IAAI,CAAC;YACH,EAAE,EAAE,KAAK,EAAE,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,IAAI,KAAK;YAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAEO,UAAU,CAAC,CAAQ;QACzB,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,WAAW;YAAE,OAAO;QACtD,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC;QACvB,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE;YAC3C,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAEO,IAAI,CAAC,CAAQ;QACnB,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO;QACtB,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAClB,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACpB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,SAAS,CAAC,CAAQ,EAAE,IAAY;QACtC,IAAI,CAAU,CAAC;QACf,IAAI,CAAC;YACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO;QAC9B,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACb,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAA2B,CAAC;gBAC1C,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC,UAAU,KAAK,QAAQ;oBAAE,OAAO;gBACrJ,IAAI,EAAE,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;oBAAE,OAAO;gBAC7H,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBAAE,OAAO;gBACjC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACrB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,QAAQ;oBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;gBAC3F,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,KAAK,IAAI;gBACP,gGAAgG;gBAChG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChF,OAAO;YACT,KAAK,QAAQ;gBACX,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO;QACX,CAAC;IACH,CAAC;CACF;AAED,8HAA8H;AAC9H,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,eAAe;IACf,wBAAwB;IACxB,+BAA+B;IAC/B,sBAAsB;IACtB,8BAA8B;IAC9B,uBAAuB;IACvB,4BAA4B;CAC7B,CAAC;AAEF,wDAAwD;AACxD,MAAM,CAAC,MAAM,kBAAkB,GAAsB,CAAC,8BAA8B,EAAE,+BAA+B,CAAC,CAAC;AASvH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAuB,EACvB,SAAS,GAAG,IAAI,EAChB,OAAkD,EAAE;IAEpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,mBAAmB,CAAC;IACpD,MAAM,IAAI,GAAG,CAAC,EAAc,EAAE,EAAU,EAAE,EAAE;QAC1C,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,SAAiB,EAAE,OAAqB,EAAE,IAAgD;IAC7H,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAClC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,4BAA4B;IAC/C,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,EAAc,CAAC;IACnB,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,EAAE;QACzC,IAAI,EAAE,GAAsB,IAAI,CAAC;QACjC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,KAAc,EAAE,EAAE;YAC7C,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,EAAE,EAAE,KAAK,EAAE,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;QACtG,IAAI,CAAC;YACH,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,GAAG,IAAI,CAAC;YACjB,EAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC;QACF,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE;YACf,EAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1H,+FAA+F;YAC/F,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QACtD,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC3C,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,EAAE;YACnB,IAAI,CAAU,CAAC;YACf,IAAI,CAAC;gBACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,OAAO;YAC9B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;gBAAE,OAAO,EAAE,CAAC;iBAC1B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;oBAAE,QAAQ,GAAG,IAAI,CAAC;;oBAC9B,MAAM,CAAC,KAAK,EAAE,YAAY,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACrE,CAAC;iBAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ;gBAAE,MAAM,CAAC,KAAK,EAAE,WAAW,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;iBACtF,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,IAAK,CAAC,CAAC,CAAC,CAA4B,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5F,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Nostr events and the relay pool (spec/nostr-signaling.md s.3 and s.6). Anonymous: every connection uses a throw-away\n * key and carries encrypted frames only.\n */\nimport type { Clock } from \"../clock.js\";\nimport type { SocketLike } from \"../transport.js\";\nimport { sha256, toHex, fromHex } from \"./crypto.js\";\nimport { schnorrPublicKey, schnorrSign } from \"./secp256k1.js\";\n\nexport const NOSTR_KIND = 25050;\n\nexport interface NostrEvent {\n  id: string;\n  pubkey: string;\n  created_at: number;\n  kind: number;\n  tags: string[][];\n  content: string;\n  sig: string;\n}\n\n/** NIP-01 event id: SHA-256 of `[0, pubkey, created_at, kind, tags, content]` serialised without whitespace. */\nexport async function eventId(pubkey: string, createdAt: number, kind: number, tags: string[][], content: string): Promise<string> {\n  return toHex(await sha256(new TextEncoder().encode(JSON.stringify([0, pubkey, createdAt, kind, tags, content]))));\n}\n\n/** A signed kind-25050 event (BIP340 Schnorr over the id). */\nexport async function makeEvent(secret: Uint8Array, topic: string, content: string, createdAt: number): Promise<NostrEvent> {\n  const pubkey = toHex(schnorrPublicKey(secret));\n  const tags = [[\"t\", topic]];\n  const id = await eventId(pubkey, createdAt, NOSTR_KIND, tags, content);\n  const sig = toHex(await schnorrSign(fromHex(id), secret));\n  return { id, pubkey, created_at: createdAt, kind: NOSTR_KIND, tags, content, sig };\n}\n\n/** The WebSocket constructor to a relay; the browser's, or Node 22+'s global one. Tests pass their own. */\nexport type RelayConnect = (url: string) => SocketLike;\n\nexport const defaultRelayConnect: RelayConnect = (url) => {\n  const WS = (globalThis as { WebSocket?: new (url: string) => unknown }).WebSocket;\n  if (!WS) throw new Error(\"no WebSocket in this runtime (Node 22+ has one; older Node needs advanced.nostrConnect)\");\n  return new WS(url) as SocketLike;\n};\n\nexport interface RelayPoolOptions {\n  urls: readonly string[];\n  topic: string;\n  connect: RelayConnect;\n  clock: Clock;\n  /** Unix ms. */\n  wall: () => number;\n  onEvent: (ev: NostrEvent) => void;\n  /** Called when the number of connected relays changes. */\n  onChange?: () => void;\n}\n\ninterface Relay {\n  url: string;\n  ws: SocketLike | null;\n  open: boolean;\n  /** The first connect to this relay has succeeded or failed (a dead relay is known to be dead). */\n  attempted: boolean;\n  skipped: boolean;\n  backoff: number;\n  cancelRetry: (() => void) | null;\n}\n\nconst SEEN_MAX = 4096;\nconst SINCE_SLACK_S = 30;\n\n/** Every relay at once, each reconnected with backoff (1 s doubling to 30 s); events deduped by id. */\nexport class RelayPool {\n  private readonly relays: Relay[];\n  private readonly seen = new Set<string>();\n  private readonly sub = \"ol\" + Math.random().toString(16).slice(2, 10);\n  private closed = false;\n  private waiters: (() => void)[] = [];\n\n  constructor(private readonly o: RelayPoolOptions) {\n    this.relays = o.urls.map((url) => ({ url, ws: null, open: false, attempted: false, skipped: false, backoff: 1000, cancelRetry: null }));\n  }\n\n  get total(): number {\n    return this.relays.length;\n  }\n\n  /** Relays connected right now (and not skipped). */\n  get connected(): number {\n    return this.relays.filter((r) => r.open && !r.skipped).length;\n  }\n\n  /** Every relay has either connected, failed a connect, or been skipped: waiting longer for the rest is pointless. */\n  get settled(): boolean {\n    return this.relays.every((r) => r.attempted || r.skipped);\n  }\n\n  start(): void {\n    for (const r of this.relays) this.dial(r);\n  }\n\n  /** Resolves true once one relay is connected, false after `timeoutMs` (or when closed). */\n  whenUp(timeoutMs: number): Promise<boolean> {\n    if (this.connected > 0) return Promise.resolve(true);\n    return new Promise((resolve) => {\n      const cancel = this.o.clock.setTimeout(() => done(false), timeoutMs);\n      const done = (v: boolean) => {\n        cancel();\n        this.waiters = this.waiters.filter((w) => w !== check);\n        resolve(v);\n      };\n      const check = () => {\n        if (this.connected > 0) done(true);\n        else if (this.closed) done(false);\n      };\n      this.waiters.push(check);\n    });\n  }\n\n  publish(ev: NostrEvent): void {\n    const msg = JSON.stringify([\"EVENT\", ev]);\n    for (const r of this.relays) if (r.open && !r.skipped) this.trySend(r, msg);\n  }\n\n  close(): void {\n    this.closed = true;\n    for (const r of this.relays) {\n      r.cancelRetry?.();\n      r.cancelRetry = null;\n      this.drop(r, false);\n    }\n    this.changed();\n  }\n\n  private changed(): void {\n    for (const w of [...this.waiters]) w();\n    this.o.onChange?.();\n  }\n\n  private trySend(r: Relay, msg: string): void {\n    try {\n      r.ws?.send(msg);\n    } catch {\n      /* a dying socket: its onclose reconnects */\n    }\n  }\n\n  private dial(r: Relay): void {\n    if (this.closed || r.skipped) return;\n    let ws: SocketLike;\n    try {\n      ws = this.o.connect(r.url);\n    } catch {\n      r.attempted = true;\n      this.retryLater(r);\n      return;\n    }\n    r.ws = ws;\n    ws.onopen = () => {\n      if (r.ws !== ws) return;\n      r.open = true;\n      r.attempted = true;\n      r.backoff = 1000;\n      const since = Math.floor(this.o.wall() / 1000) - SINCE_SLACK_S;\n      this.trySend(r, JSON.stringify([\"REQ\", this.sub, { kinds: [NOSTR_KIND], \"#t\": [this.o.topic], since }]));\n      this.changed();\n    };\n    ws.onmessage = (e) => {\n      if (r.ws === ws) this.onMessage(r, String(e.data));\n    };\n    const lost = () => {\n      if (r.ws !== ws) return;\n      const wasOpen = r.open;\n      r.ws = null;\n      r.open = false;\n      r.attempted = true;\n      if (wasOpen) this.changed();\n      this.retryLater(r);\n    };\n    ws.onclose = lost;\n    ws.onerror = () => {\n      /* onclose follows; Node's WebSocket may not fire it for a failed connect, so retry from here too */\n      lost();\n    };\n  }\n\n  private drop(r: Relay, retry: boolean): void {\n    const ws = r.ws;\n    r.ws = null;\n    r.open = false;\n    try {\n      ws?.close();\n    } catch {\n      /* ignore */\n    }\n    if (retry) this.retryLater(r);\n  }\n\n  private retryLater(r: Relay): void {\n    if (this.closed || r.skipped || r.cancelRetry) return;\n    const wait = r.backoff;\n    r.backoff = Math.min(30_000, r.backoff * 2);\n    r.cancelRetry = this.o.clock.setTimeout(() => {\n      r.cancelRetry = null;\n      this.dial(r);\n    }, wait);\n  }\n\n  private skip(r: Relay): void {\n    if (r.skipped) return;\n    r.skipped = true;\n    r.cancelRetry?.();\n    r.cancelRetry = null;\n    this.drop(r, false);\n    this.changed();\n  }\n\n  private onMessage(r: Relay, text: string): void {\n    let m: unknown;\n    try {\n      m = JSON.parse(text);\n    } catch {\n      return;\n    }\n    if (!Array.isArray(m)) return;\n    switch (m[0]) {\n      case \"EVENT\": {\n        const ev = m[2] as NostrEvent | undefined;\n        if (!ev || typeof ev.id !== \"string\" || typeof ev.pubkey !== \"string\" || typeof ev.content !== \"string\" || typeof ev.created_at !== \"number\") return;\n        if (ev.kind !== NOSTR_KIND || !Array.isArray(ev.tags) || !ev.tags.some((t) => t[0] === \"t\" && t[1] === this.o.topic)) return;\n        if (this.seen.has(ev.id)) return;\n        this.seen.add(ev.id);\n        if (this.seen.size > SEEN_MAX) this.seen.delete(this.seen.values().next().value as string);\n        this.o.onEvent(ev);\n        return;\n      }\n      case \"OK\":\n        // refused (not a plain duplicate): this relay does not take our events, skip it for the session\n        if (m[2] === false && !String(m[3] ?? \"\").startsWith(\"duplicate\")) this.skip(r);\n        return;\n      case \"CLOSED\":\n        this.skip(r);\n        return;\n    }\n  }\n}\n\n/** Default public relays (probed 2026-10-26, docs/design/no-server-fallback.md): all accept and echo ephemeral kind 25050. */\nexport const DEFAULT_NOSTR_RELAYS: readonly string[] = [\n  \"wss://nos.lol\",\n  \"wss://relay.primal.net\",\n  \"wss://nostr-pub.wellorder.net\",\n  \"wss://nostr.oxtr.dev\",\n  \"wss://nostr.bitcoiner.social\",\n  \"wss://relay.nostr.net\",\n  \"wss://nostr.sathoarder.com\",\n];\n\n/** Public STUN servers for Nostr joiners (spec s.5). */\nexport const DEFAULT_NOSTR_STUN: readonly string[] = [\"stun:stun.l.google.com:19302\", \"stun:stun.cloudflare.com:3478\"];\n\nexport interface RelayCheck {\n  url: string;\n  ok: boolean;\n  ms: number;\n  error?: string;\n}\n\n/**\n * Probes each relay: connect, subscribe, publish one kind-25050 event to itself under a random topic with a random\n * key, and see it echoed. Anonymous (nothing about the player is sent). Use it to pick `hosting.nostrRelays`.\n */\nexport async function checkNostrRelays(\n  urls: readonly string[],\n  timeoutMs = 8000,\n  opts: { connect?: RelayConnect; clock?: Clock } = {},\n): Promise<RelayCheck[]> {\n  const connect = opts.connect ?? defaultRelayConnect;\n  const setT = (fn: () => void, ms: number) => {\n    const h = setTimeout(fn, ms);\n    return () => clearTimeout(h);\n  };\n  return Promise.all(urls.map((url) => checkOne(url, timeoutMs, connect, opts.clock?.setTimeout.bind(opts.clock) ?? setT)));\n}\n\nasync function checkOne(url: string, timeoutMs: number, connect: RelayConnect, setT: (fn: () => void, ms: number) => () => void): Promise<RelayCheck> {\n  const t0 = Date.now();\n  const secret = new Uint8Array(32);\n  globalThis.crypto.getRandomValues(secret);\n  secret[0] &= 0x7f; // far below the curve order\n  if (secret.every((b) => b === 0)) secret[31] = 1;\n  const topic = toHex(globalThis.crypto.getRandomValues(new Uint8Array(32)));\n  let ev: NostrEvent;\n  try {\n    ev = await makeEvent(secret, topic, \"probe\", Math.floor(Date.now() / 1000));\n  } catch (e) {\n    return { url, ok: false, ms: 0, error: String(e) };\n  }\n  return new Promise<RelayCheck>((resolve) => {\n    let ws: SocketLike | null = null;\n    let finished = false;\n    let accepted = false;\n    const finish = (ok: boolean, error?: string) => {\n      if (finished) return;\n      finished = true;\n      cancel();\n      try {\n        ws?.close();\n      } catch {\n        /* ignore */\n      }\n      resolve({ url, ok, ms: Date.now() - t0, ...(error ? { error } : {}) });\n    };\n    const cancel = setT(() => finish(false, accepted ? \"accepted but not echoed\" : \"timeout\"), timeoutMs);\n    try {\n      ws = connect(url);\n    } catch (e) {\n      finish(false, String(e));\n      return;\n    }\n    const sub = \"chk\" + topic.slice(0, 8);\n    let published = false;\n    const publish = () => {\n      if (published) return;\n      published = true;\n      ws!.send(JSON.stringify([\"EVENT\", ev]));\n    };\n    ws.onopen = () => {\n      ws!.send(JSON.stringify([\"REQ\", sub, { kinds: [NOSTR_KIND], \"#t\": [topic], since: Math.floor(Date.now() / 1000) - 30 }]));\n      // some relays never send EOSE for a subscription with no stored events: publish shortly anyway\n      setT(publish, 1500);\n    };\n    ws.onerror = () => finish(false, \"connection failed\");\n    ws.onclose = () => finish(false, \"closed\");\n    ws.onmessage = (e) => {\n      let m: unknown;\n      try {\n        m = JSON.parse(String(e.data));\n      } catch {\n        return;\n      }\n      if (!Array.isArray(m)) return;\n      if (m[0] === \"EOSE\") publish();\n      else if (m[0] === \"OK\" && m[1] === ev.id) {\n        if (m[2] === true) accepted = true;\n        else finish(false, `refused: ${String(m[3] ?? \"\")}`.slice(0, 120));\n      } else if (m[0] === \"CLOSED\") finish(false, `closed: ${String(m[2] ?? \"\")}`.slice(0, 120));\n      else if (m[0] === \"EVENT\" && (m[2] as NostrEvent | undefined)?.id === ev.id) finish(true);\n    };\n  });\n}\n"]}

package/dist/nostr/room.d.ts

@@ -0,0 +1,43 @@
+/**
+ * One side's connection to a Nostr room: a fresh session key pair, the relay pool, and encrypted frames in and out
+ * (spec/nostr-signaling.md s.2-4). {@link NostrSocket} (joiner) and {@link NostrHostBridge} (host) sit on top.
+ */
+import type { Clock } from "../clock.js";
+import type { Frame, OutFrame } from "./link.js";
+import { type RelayConnect } from "./relays.js";
+export interface NostrRoomOptions {
+    /** The version 1 join code, any display form. */
+    code: string;
+    relays?: readonly string[];
+    connect?: RelayConnect;
+    clock: Clock;
+    /** Unix ms; default Date.now. */
+    wall?: () => number;
+    /** The number of connected relays changed. */
+    onChange?: () => void;
+}
+export declare class NostrRoom {
+    private readonly secret;
+    private readonly keys;
+    private readonly wall;
+    readonly pub: string;
+    /** Called for each valid frame addressed to nobody in particular or to us (`to` empty or our pubkey). */
+    onFrame: ((f: Frame) => void) | null;
+    private readonly pool;
+    private closed;
+    private readonly pending;
+    private constructor();
+    /** Derives the keys and starts connecting. Throws on a code that is not 11 alphabet characters. */
+    static open(o: NostrRoomOptions): Promise<NostrRoom>;
+    get relaysConnected(): number;
+    get relaysTotal(): number;
+    /** Every relay has connected, failed or been skipped. */
+    get relaysSettled(): boolean;
+    whenUp(timeoutMs: number): Promise<boolean>;
+    /** Stamps, encrypts, signs and publishes a frame to every relay. */
+    send(to: string, f: OutFrame): Promise<void>;
+    private sendNow;
+    /** Closes now, or (`flush`) once the frames already handed to `send` are published (a final `close` frame). */
+    close(flush?: boolean): void;
+    private onEvent;
+}

package/dist/nostr/room.js

@@ -0,0 +1,104 @@
+import { normalizeJoinCode } from "../joincode.js";
+import { decryptContent, deriveRoomKeys, encryptContent, toHex } from "./crypto.js";
+import { DEFAULT_NOSTR_RELAYS, RelayPool, defaultRelayConnect, makeEvent } from "./relays.js";
+import { randomSecretKey, schnorrPublicKey } from "./secp256k1.js";
+const MAX_AGE_S = 120;
+export class NostrRoom {
+    secret;
+    keys;
+    wall;
+    pub;
+    /** Called for each valid frame addressed to nobody in particular or to us (`to` empty or our pubkey). */
+    onFrame = null;
+    pool;
+    closed = false;
+    pending = new Set();
+    constructor(secret, keys, o, wall) {
+        this.secret = secret;
+        this.keys = keys;
+        this.wall = wall;
+        this.pub = toHex(schnorrPublicKey(secret));
+        this.pool = new RelayPool({
+            urls: o.relays && o.relays.length > 0 ? o.relays : DEFAULT_NOSTR_RELAYS,
+            topic: keys.topic,
+            connect: o.connect ?? defaultRelayConnect,
+            clock: o.clock,
+            wall,
+            onEvent: (ev) => void this.onEvent(ev),
+            onChange: o.onChange,
+        });
+    }
+    /** Derives the keys and starts connecting. Throws on a code that is not 11 alphabet characters. */
+    static async open(o) {
+        const norm = normalizeJoinCode(o.code);
+        if (!norm)
+            throw new Error(`not a join code: ${o.code}`);
+        const keys = await deriveRoomKeys(norm);
+        const room = new NostrRoom(randomSecretKey(), keys, o, o.wall ?? (() => Date.now()));
+        room.pool.start();
+        return room;
+    }
+    get relaysConnected() {
+        return this.pool.connected;
+    }
+    get relaysTotal() {
+        return this.pool.total;
+    }
+    /** Every relay has connected, failed or been skipped. */
+    get relaysSettled() {
+        return this.pool.settled;
+    }
+    whenUp(timeoutMs) {
+        return this.pool.whenUp(timeoutMs);
+    }
+    /** Stamps, encrypts, signs and publishes a frame to every relay. */
+    send(to, f) {
+        const p = this.sendNow(to, f);
+        this.pending.add(p);
+        void p.finally(() => this.pending.delete(p));
+        return p;
+    }
+    async sendNow(to, f) {
+        if (this.closed)
+            return;
+        const frame = { v: 1, type: f.type, from: this.pub, to, seq: f.seq, ack: f.ack, ...(f.msgs ? { msgs: f.msgs } : {}), ...(f.reason ? { reason: f.reason } : {}) };
+        const content = await encryptContent(this.keys.key, JSON.stringify(frame));
+        const ev = await makeEvent(this.secret, this.keys.topic, content, Math.floor(this.wall() / 1000));
+        if (!this.closed)
+            this.pool.publish(ev);
+    }
+    /** Closes now, or (`flush`) once the frames already handed to `send` are published (a final `close` frame). */
+    close(flush = false) {
+        if (flush && this.pending.size > 0) {
+            void Promise.allSettled([...this.pending]).then(() => this.close());
+            return;
+        }
+        this.closed = true;
+        this.onFrame = null;
+        this.pool.close();
+    }
+    async onEvent(ev) {
+        if (this.closed || ev.pubkey === this.pub)
+            return;
+        if (this.wall() / 1000 - ev.created_at > MAX_AGE_S)
+            return;
+        const text = await decryptContent(this.keys.key, ev.content);
+        if (text === null || this.closed)
+            return;
+        let f;
+        try {
+            f = JSON.parse(text);
+        }
+        catch {
+            return;
+        }
+        if (!f || f.v !== 1 || f.from !== ev.pubkey || f.from === this.pub)
+            return;
+        if (f.type !== "open" && f.type !== "data" && f.type !== "beat" && f.type !== "close")
+            return;
+        if (typeof f.to !== "string" || (f.to !== "" && f.to !== this.pub))
+            return;
+        this.onFrame?.(f);
+    }
+}
+//# sourceMappingURL=room.js.map

package/dist/nostr/room.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"room.js","sourceRoot":"","sources":["../../src/nostr/room.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpF,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,mBAAmB,EAAE,SAAS,EAAsC,MAAM,aAAa,CAAC;AAClI,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAcnE,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,MAAM,OAAO,SAAS;IAQiB;IAAqC;IAAgF;IAPjJ,GAAG,CAAS;IACrB,yGAAyG;IACzG,OAAO,GAAgC,IAAI,CAAC;IAC3B,IAAI,CAAY;IACzB,MAAM,GAAG,KAAK,CAAC;IACN,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IAEpD,YAAqC,MAAkB,EAAmB,IAAwC,EAAE,CAAmB,EAAmB,IAAkB;QAAvI,WAAM,GAAN,MAAM,CAAY;QAAmB,SAAI,GAAJ,IAAI,CAAoC;QAAwC,SAAI,GAAJ,IAAI,CAAc;QAC1K,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,IAAI,SAAS,CAAC;YACxB,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB;YACvE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,mBAAmB;YACzC,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,IAAI;YACJ,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC;IACL,CAAC;IAED,mGAAmG;IACnG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAmB;QACnC,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;IAC7B,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,yDAAyD;IACzD,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED,oEAAoE;IACpE,IAAI,CAAC,EAAU,EAAE,CAAW;QAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,CAAW;QAC3C,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,MAAM,KAAK,GAAU,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACxK,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAClG,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,+GAA+G;IAC/G,KAAK,CAAC,KAAK,GAAG,KAAK;QACjB,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACnC,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,EAAc;QAClC,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,GAAG;YAAE,OAAO;QAClD,IAAI,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,GAAG,EAAE,CAAC,UAAU,GAAG,SAAS;YAAE,OAAO;QAC3D,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACzC,IAAI,CAAQ,CAAC;QACb,IAAI,CAAC;YACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAU,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG;YAAE,OAAO;QAC3E,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO;QAC9F,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO;QAC3E,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;CACF","sourcesContent":["/**\n * One side's connection to a Nostr room: a fresh session key pair, the relay pool, and encrypted frames in and out\n * (spec/nostr-signaling.md s.2-4). {@link NostrSocket} (joiner) and {@link NostrHostBridge} (host) sit on top.\n */\nimport type { Clock } from \"../clock.js\";\nimport { normalizeJoinCode } from \"../joincode.js\";\nimport { decryptContent, deriveRoomKeys, encryptContent, toHex } from \"./crypto.js\";\nimport type { Frame, OutFrame } from \"./link.js\";\nimport { DEFAULT_NOSTR_RELAYS, RelayPool, defaultRelayConnect, makeEvent, type NostrEvent, type RelayConnect } from \"./relays.js\";\nimport { randomSecretKey, schnorrPublicKey } from \"./secp256k1.js\";\n\nexport interface NostrRoomOptions {\n  /** The version 1 join code, any display form. */\n  code: string;\n  relays?: readonly string[];\n  connect?: RelayConnect;\n  clock: Clock;\n  /** Unix ms; default Date.now. */\n  wall?: () => number;\n  /** The number of connected relays changed. */\n  onChange?: () => void;\n}\n\nconst MAX_AGE_S = 120;\n\nexport class NostrRoom {\n  readonly pub: string;\n  /** Called for each valid frame addressed to nobody in particular or to us (`to` empty or our pubkey). */\n  onFrame: ((f: Frame) => void) | null = null;\n  private readonly pool: RelayPool;\n  private closed = false;\n  private readonly pending = new Set<Promise<void>>();\n\n  private constructor(private readonly secret: Uint8Array, private readonly keys: { key: Uint8Array; topic: string }, o: NostrRoomOptions, private readonly wall: () => number) {\n    this.pub = toHex(schnorrPublicKey(secret));\n    this.pool = new RelayPool({\n      urls: o.relays && o.relays.length > 0 ? o.relays : DEFAULT_NOSTR_RELAYS,\n      topic: keys.topic,\n      connect: o.connect ?? defaultRelayConnect,\n      clock: o.clock,\n      wall,\n      onEvent: (ev) => void this.onEvent(ev),\n      onChange: o.onChange,\n    });\n  }\n\n  /** Derives the keys and starts connecting. Throws on a code that is not 11 alphabet characters. */\n  static async open(o: NostrRoomOptions): Promise<NostrRoom> {\n    const norm = normalizeJoinCode(o.code);\n    if (!norm) throw new Error(`not a join code: ${o.code}`);\n    const keys = await deriveRoomKeys(norm);\n    const room = new NostrRoom(randomSecretKey(), keys, o, o.wall ?? (() => Date.now()));\n    room.pool.start();\n    return room;\n  }\n\n  get relaysConnected(): number {\n    return this.pool.connected;\n  }\n\n  get relaysTotal(): number {\n    return this.pool.total;\n  }\n\n  /** Every relay has connected, failed or been skipped. */\n  get relaysSettled(): boolean {\n    return this.pool.settled;\n  }\n\n  whenUp(timeoutMs: number): Promise<boolean> {\n    return this.pool.whenUp(timeoutMs);\n  }\n\n  /** Stamps, encrypts, signs and publishes a frame to every relay. */\n  send(to: string, f: OutFrame): Promise<void> {\n    const p = this.sendNow(to, f);\n    this.pending.add(p);\n    void p.finally(() => this.pending.delete(p));\n    return p;\n  }\n\n  private async sendNow(to: string, f: OutFrame): Promise<void> {\n    if (this.closed) return;\n    const frame: Frame = { v: 1, type: f.type, from: this.pub, to, seq: f.seq, ack: f.ack, ...(f.msgs ? { msgs: f.msgs } : {}), ...(f.reason ? { reason: f.reason } : {}) };\n    const content = await encryptContent(this.keys.key, JSON.stringify(frame));\n    const ev = await makeEvent(this.secret, this.keys.topic, content, Math.floor(this.wall() / 1000));\n    if (!this.closed) this.pool.publish(ev);\n  }\n\n  /** Closes now, or (`flush`) once the frames already handed to `send` are published (a final `close` frame). */\n  close(flush = false): void {\n    if (flush && this.pending.size > 0) {\n      void Promise.allSettled([...this.pending]).then(() => this.close());\n      return;\n    }\n    this.closed = true;\n    this.onFrame = null;\n    this.pool.close();\n  }\n\n  private async onEvent(ev: NostrEvent): Promise<void> {\n    if (this.closed || ev.pubkey === this.pub) return;\n    if (this.wall() / 1000 - ev.created_at > MAX_AGE_S) return;\n    const text = await decryptContent(this.keys.key, ev.content);\n    if (text === null || this.closed) return;\n    let f: Frame;\n    try {\n      f = JSON.parse(text) as Frame;\n    } catch {\n      return;\n    }\n    if (!f || f.v !== 1 || f.from !== ev.pubkey || f.from === this.pub) return;\n    if (f.type !== \"open\" && f.type !== \"data\" && f.type !== \"beat\" && f.type !== \"close\") return;\n    if (typeof f.to !== \"string\" || (f.to !== \"\" && f.to !== this.pub)) return;\n    this.onFrame?.(f);\n  }\n}\n"]}

package/dist/nostr/secp256k1.d.ts

@@ -0,0 +1,10 @@
+export declare const bytesToInt: (b: Uint8Array) => bigint;
+export declare function intToBytes(n: bigint, len?: number): Uint8Array;
+/** The 32-byte x-only public key for a 32-byte secret key. */
+export declare function schnorrPublicKey(secret: Uint8Array): Uint8Array;
+/** A fresh random secret key (valid scalar) from the platform CSPRNG. */
+export declare function randomSecretKey(): Uint8Array;
+/** BIP340 signature (64 bytes) of a 32-byte message. `aux` is 32 bytes of randomness (default: fresh). */
+export declare function schnorrSign(msg: Uint8Array, secret: Uint8Array, aux?: Uint8Array): Promise<Uint8Array>;
+/** BIP340 verification. */
+export declare function schnorrVerify(sig: Uint8Array, msg: Uint8Array, pub: Uint8Array): Promise<boolean>;