nostr-zap

gem 'nostr-zap'

# Generate a new key pair
key_pair = NostrZap::KeyPair.generate
key_pair.public_key_hex  # => "abc123..."

# From an existing private key
key_pair = NostrZap::KeyPair.new("deadbeef" * 8)

# Low-level crypto
NostrZap::Crypto.generate_private_key       # => "64-char hex"
NostrZap::Crypto.derive_public_key(priv)    # => "64-char hex"
NostrZap::Crypto.valid_private_key?(hex)    # => true/false

event = NostrZap::Event.new(kind: 1, content: "hello", tags: [])
event.sign(key_pair)

event.to_h
# => { "id" => "...", "pubkey" => "...", "created_at" => 1234567890,
#      "kind" => 1, "tags" => [], "content" => "hello", "sig" => "..." }

event = NostrZap::Event.from_h(parsed_hash)
event.id_valid?        # recomputes ID from payload
event.signature_valid? # verifies BIP-340 signature

validator = NostrZap::Zap::RequestValidator.new(
  zap_request_json,
  verify_signatures: true  # set false to skip sig check (e.g. in tests)
)

if validator.valid?
  validator.recipient_pubkey  # => "hex pubkey"
  validator.relay_urls        # => ["wss://relay.example.com"]
  validator.amount_msats      # => 1000
  validator.zapped_event_id   # => "hex event id" or nil
else
  validator.errors  # => ["Invalid kind: expected integer 9734, got 1"]
end

builder = NostrZap::Zap::ReceiptBuilder.new(
  zap_request_json: original_zap_request_json,
  bolt11_invoice:   "lnbc10n1...",
  key_pair:         key_pair,
  paid_at:          Time.now,  # optional, defaults to now
  preimage:         "abc..."   # optional
)

event = builder.build       # => NostrZap::Event (kind 9735, signed)
relays = builder.relay_urls # => relay URLs from the original zap request

client = NostrZap::RelayClient.new(
  timeout: 10,          # connection timeout in seconds (default: 10)
  logger:  Rails.logger  # optional, any object responding to #error
)

# Publish to multiple relays concurrently
results = client.publish_event(
  event:      event.to_h,
  relay_urls: ["wss://relay1.example.com", "wss://relay2.example.com"]
)
# => { "wss://relay1.example.com" => { success: true, message: "Published" },
#      "wss://relay2.example.com" => { success: false, message: "rate-limited" } }

# Publish to a single relay
result = client.publish_to_relay(
  event:     event.to_h,
  relay_url: "wss://relay.example.com"
)

error = NostrZap::RelayUrlValidator.validate("wss://relay.example.com")
# => nil (valid)

error = NostrZap::RelayUrlValidator.validate("ws://localhost")
# => "Invalid relay URL scheme 'ws' (only wss is allowed): ws://localhost"

error = NostrZap::RelayUrlValidator.validate("wss://192.168.1.1")
# => "Relay URL points to a private/reserved address: wss://192.168.1.1"