fix: remove private key material from all log outputs

CRITICAL: seed phrases, nsec values, and private key hex were being
logged to console via structured logger data objects. Any logging
backend would capture users' private keys in plaintext.

Removed secret data from all logger.log/logger.error calls while
preserving descriptive log messages. Also fixed nsec being embedded
in Error message strings.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: vveerrgg

src/crypto/keys.ts

@@ -79,7 +79,7 @@ export function getEntropyFromSeedPhrase(seedPhrase: string): Uint8Array {
  * @returns True if the seed phrase is valid, false otherwise
  */
 export function validateSeedPhrase(seedPhrase: string): boolean {
-  logger.log({ seedPhrase }, "Validating seed phrase");
+  logger.log("Validating seed phrase");
   const isValid = validateMnemonic(seedPhrase);
   logger.log({ isValid }, "Validated seed phrase");
   return Boolean(isValid);

src/index.ts

@@ -100,8 +100,8 @@ export function getEntropyFromSeedPhrase(seedPhrase: string): Uint8Array {
  * console.log(isValid); // true
  */
 export function validateSeedPhrase(seedPhrase: string): boolean {
-  logger.log({ seedPhrase }, "Validating seed phrase");
-  logger.log({ seedPhrase }, "Input being validated");
+  logger.log("Validating seed phrase");
+  logger.log("Input being validated");
   const isValid = validateMnemonic(seedPhrase);
   logger.log({ isValid }, "Validated seed phrase");
   return Boolean(isValid);

src/nips/nip-19.ts

@@ -52,7 +52,7 @@ export function hexToNsec(hex: string): string {
   try {
     return nsecEncode(hex);
   } catch (error) {
-    logger.error({ error, hex }, "Failed to encode private key to nsec");
+    logger.error({ error }, "Failed to encode private key to nsec");
     throw error;
   }
 }
@@ -88,7 +88,7 @@ export function decode(str: string): { type: Nip19DataType; data: string } {
   try {
     return nip19Decode(str);
   } catch (error) {
-    logger.error({ error, str }, "Failed to decode bech32 string");
+    logger.error({ error }, "Failed to decode bech32 string");
     throw error;
   }
 }
@@ -107,11 +107,11 @@ export function nsecToHex(nsec: string): string {
   try {
     const decoded = decode(nsec);
     if (decoded.type !== "nsec") {
-      throw new Error(`Invalid nsec format: ${nsec}`);
+      throw new Error("Invalid nsec format");
     }
     return decoded.data;
   } catch (error) {
-    logger.error({ error, nsec }, "Failed to convert nsec to hex");
+    logger.error({ error }, "Failed to convert nsec to hex");
     throw error;
   }
 }