refactor: migrate gift-wrap to mostro-core 0.9.1 nip59 module

Bump mostro-core to 0.9.1 and nostr-sdk to 0.44.1, then replace the
local NIP-59 implementation with the centralized
`wrap_message` / `unwrap_message` / `validate_response` API exposed
by `mostro_core::nip59`.

- send_dm now delegates to wrap_message; identity_keys parameter is
  dropped because nostr-sdk 0.44 enforces rumor.pubkey == seal.pubkey
  (SenderMismatch). The single signer drives rumor authorship, seal
  signing, and the inner tuple signature.
- Admin flows (storage::admin_send_dm, take_dispute) now sign the
  whole pipeline with admin_keys, aligning with how
  send_admin_gift_wrap_dm already worked for plain DMs.
- parse_dm_events uses unwrap_message; print_dm_events uses
  validate_response, with one documented exception for `NewOrder`
  pushes that arrive without a request_id (range-trade child).
- Drops gift_wrap_from_seal_with_pow, create_gift_wrap_event,
  send_gift_wrap_dm{,_internal}, send_admin_gift_wrap_dm,
  determine_message_type, create_expiration_tags, and the
  MessageType enum, all subsumed by the new API.
- NIP-17 `PrivateDirectMessage` (kind 14) and the per-dispute
  shared-key chat transport are out of scope and left untouched.

Knock-on changes from the dependency bump: rename
NOSTR_REPLACEABLE_EVENT_KIND to NOSTR_ORDER_EVENT_KIND (same value
38383, preserves derived BIP32 keys), Timestamp::as_u64 →
as_secs, and add the new `initiator` / `solver_pubkey` fields
to RestoredDisputesInfo in tests.

Tests: 4 new wiring unit tests in messaging.rs (wrap→unwrap
roundtrip, SECRET semantics, PoW, wrong-keys → None) and 2 new
integration tests in tests/parser_dms.rs covering the
wrap_message → parse_dm_events handshake.

Closes #163

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: grunch

Cargo.lock

@@ -22,7 +22,7 @@ path = "src/main.rs"
 [dependencies]
 anyhow = "1.0.99"
 clap = { version = "4.5.46", features = ["derive"] }
-nostr-sdk = { version = "0.43.0", features = [
+nostr-sdk = { version = "0.44.1", features = [
   "nip06",
   "nip44",
   "nip59",
@@ -46,7 +46,7 @@ reqwest = { version = "0.12.23", default-features = false, features = [
   "json",
   "rustls-tls",
 ] }
-mostro-core = "0.6.56"
+mostro-core = "0.9.1"
 lnurl-rs = { version = "0.9.0", default-features = false, features = ["ureq"] }
 pretty_env_logger = "0.5.0"
 sqlx = { version = "0.8.6", features = ["sqlite", "runtime-tokio-rustls"] }

Cargo.toml

@@ -75,7 +75,6 @@ pub async fn execute_add_invoice(order_id: &Uuid, invoice: &str, ctx: &Context)
     // Send the DM
     let sent_message = send_dm(
         &ctx.client,
-        Some(&ctx.identity_keys),
         &order_trade_keys,
         &ctx.mostro_pubkey,
         message_json,

src/cli/add_invoice.rs

@@ -3,7 +3,7 @@ use crate::parser::common::{
     create_emoji_field_row, create_field_value_header, create_standard_table,
 };
 use crate::util::messaging::get_admin_keys;
-use crate::util::send_admin_gift_wrap_dm;
+use crate::util::send_plain_text_dm;
 use anyhow::Result;
 use nostr_sdk::prelude::*;
 
@@ -29,7 +29,7 @@ pub async fn execute_adm_send_dm(receiver: PublicKey, ctx: &Context, message: &s
     println!("{table}");
     println!("💡 Sending admin gift wrap message...\n");
 
-    send_admin_gift_wrap_dm(&ctx.client, admin_keys, &receiver, message).await?;
+    send_plain_text_dm(&ctx.client, admin_keys, &receiver, message).await?;
 
     println!(
         "✅ Admin gift wrap message sent successfully to {}",

src/cli/adm_send_dm.rs

@@ -26,7 +26,6 @@ pub async fn execute_last_trade_index(
     // Send the last trade index message to Mostro server
     let sent_message = send_dm(
         &ctx.client,
-        Some(identity_keys),
         &ctx.trade_keys,
         &mostro_key,
         message_json,

src/cli/last_trade_index.rs

@@ -183,7 +183,6 @@ pub async fn execute_new_order(
     // Send the DM
     let sent_message = send_dm(
         &ctx.client,
-        Some(&ctx.identity_keys),
         &ctx.trade_keys,
         &ctx.mostro_pubkey,
         message_json,

src/cli/new_order.rs

@@ -44,7 +44,6 @@ pub async fn execute_orders_info(order_ids: &[Uuid], ctx: &Context) -> Result<()
     // Send the DM
     let sent_message = send_dm(
         &ctx.client,
-        Some(&ctx.identity_keys),
         &ctx.trade_keys,
         &ctx.mostro_pubkey,
         message_json,

src/cli/orders_info.rs

@@ -60,7 +60,6 @@ pub async fn execute_rate_user(order_id: &Uuid, rating: &u8, ctx: &Context) -> R
 
     let sent_message = send_dm(
         &ctx.client,
-        Some(&ctx.identity_keys),
         &trade_keys,
         &ctx.mostro_pubkey,
         rate_message,

src/cli/rate_user.rs

@@ -22,7 +22,6 @@ pub async fn execute_restore(
     // Send the restore message to Mostro server
     let sent_message = send_dm(
         &ctx.client,
-        Some(identity_keys),
         &ctx.trade_keys,
         &mostro_key,
         message_json,

src/cli/restore.rs

@@ -82,7 +82,7 @@ async fn upload_to_blossom(trade_keys: &Keys, encrypted_blob: Vec<u8>) -> Result
         .collect::<String>();
 
     // Expiration: 1 hour from now (BUD-01 requires expiration in the future)
-    let expiration = Timestamp::from(Timestamp::now().as_u64() + 3600);
+    let expiration = Timestamp::from_secs(Timestamp::now().as_secs() + 3600);
 
     for server in BLOSSOM_SERVERS {
         let url_str = format!("{}/upload", server.trim_end_matches('/'));