Merge branch 'main' into dependabot/npm_and_yarn/fast-uri-3.1.2

Author: cameri

.changeset/funky-coins-know.md

@@ -0,0 +1,5 @@
+---
+"nostream": minor
+---
+
+feat: NIP-42 AUTH handler and WebSocket session wiring

.changeset/lemon-views-know.md

@@ -0,0 +1,5 @@
+---
+"nostream": minor
+---
+
+new user-facing config field

.changeset/quick-cats-agree.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+Refactor EventRepository query construction to reduce method complexity.

.changeset/remove-deprecated-remote-ip-header.md

@@ -0,0 +1,5 @@
+---
+"nostream": minor
+---
+
+refactor(http): remove deprecated network.remote_ip_header fallback and rely on network.remoteIpHeader

.changeset/response-types-integration-tests.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+test(integration): verify response content-type across core HTTP paths

.changeset/vast-friends-march.md

@@ -0,0 +1,5 @@
+---
+"nostream": minor
+---
+
+feat: add NIP-42 types, schemas and constants

.changeset/vast-signs-melt.md

@@ -0,0 +1,2 @@
+---
+---

resources/default-settings.yaml

@@ -62,6 +62,17 @@ nip05:
   domainBlacklist: []
 nip45:
   enabled: true
+wot:
+  # Web of Trust filtering. When enabled, only events from pubkeys within
+  # the relay owner's 2-hop follow graph are accepted.
+  enabled: false
+  # The relay owner's pubkey in hex. This is the root of the trust graph.
+  # Required when enabled is true.
+  seedPubkey: ""
+  # A pubkey must be followed by at least this many 1-hop accounts to be trusted.
+  minimumFollowers: 1
+  # Hours between full trust graph rebuilds.
+  refreshIntervalHours: 24
 network:
   maxPayloadSize: 524288
   # Uncomment only when using a trusted reverse proxy and configuring trustedProxies.

src/@types/adapters.ts

@@ -15,6 +15,9 @@ export type IWebSocketAdapter = EventEmitter & {
   getClientId(): string
   getClientAddress(): string
   getSubscriptions(): Map<string, SubscriptionFilter[]>
+  getChallenge(): string
+  getAuthenticatedPubkeys(): ReadonlySet<string>
+  addAuthenticatedPubkey(pubkey: string): void
 }
 
 export interface ICacheAdapter {

src/@types/messages.ts

@@ -12,13 +12,14 @@ export enum MessageType {
   OK = 'OK',
   COUNT = 'COUNT',
   CLOSED = 'CLOSED',
+  AUTH = 'AUTH',
 }
 
-export type IncomingMessage = (SubscribeMessage | IncomingEventMessage | UnsubscribeMessage | CountMessage) & {
+export type IncomingMessage = (SubscribeMessage | IncomingEventMessage | UnsubscribeMessage | CountMessage | AuthMessage) & {
   [ContextMetadataKey]?: ContextMetadata
 }
 
-export type OutgoingMessage = OutgoingEventMessage | EndOfStoredEventsNotice | NoticeMessage | CommandResult | CountResultMessage | ClosedMessage
+export type OutgoingMessage = OutgoingEventMessage | EndOfStoredEventsNotice | NoticeMessage | CommandResult | CountResultMessage | ClosedMessage | AuthChallengeMessage
 
 export type SubscribeMessage = {
   [index in Range<2, 100>]: SubscriptionFilter
@@ -89,3 +90,14 @@ export interface ClosedMessage {
   1: SubscriptionId
   2: string
 }
+
+// NIP-42
+export interface AuthMessage {
+  0: MessageType.AUTH
+  1: Event
+}
+
+export interface AuthChallengeMessage {
+  0: MessageType.AUTH
+  1: string
+}