Merge branch 'main' into fix/a11y-menu-toggle-aria-expanded

Author: Ferryx349

.changeset/advertise-nip-13-in-supported-nips.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+fix: advertise NIP-13 (Proof of Work) support in `supportedNips`

.changeset/dependabot-pr-647.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+chore(deps): bump ws from 8.20.1 to 8.21.0

.changeset/dependabot-pr-705.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+chore(deps): bump axios from 1.16.0 to 1.18.0

.changeset/dvm-job-ingestion.md

@@ -0,0 +1,5 @@
+---
+"nostream": minor
+---
+
+feat(dvm): trap NIP-90 job request events (kind 5000-5999) and record them via the job repository

.changeset/dvm-job-persistence.md

@@ -0,0 +1,5 @@
+---
+"nostream": minor
+---
+
+feat(dvm): add job persistence migration and repository for DVM job state

.changeset/dvm-worker-registry.md

@@ -0,0 +1,5 @@
+---
+"nostream": minor
+---
+
+feat(dvm): add worker registry settings and dvm-orchestrator process topology

.changeset/fix-csp-ws-http-scheme-mapping.md

@@ -0,0 +1,14 @@
+---
+"nostream": patch
+---
+
+Fix the Content-Security-Policy `connect-src` directive for relays served over plain `ws://`.
+
+The web app factory derived an HTTP(S) origin from the relay's WebSocket URL but mapped
+`ws:` to the invalid scheme `':'`, which the WHATWG URL API silently ignores. As a result the
+`connect-src` directive kept a `ws://…` entry instead of the intended `http://…` origin for
+local/dev, Tor, or reverse-proxied setups. The `ws:` protocol now correctly maps to `http:`.
+
+Adds regression test coverage for the protocol mapping (`getWebProtocolForRelay`, extracted from
+`createWebApp` so it can be unit tested directly), since this file previously had no test coverage
+at all.

.changeset/fix-event-expiration-validation.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+fix: reject expiration timestamp 0 and millisecond-scale values, and accept safe-integer second-based timestamps up to the Postgres int4 max (2038-01-19T03:14:07Z) in getEventExpiration()

.changeset/nip43-invite-cli.md

@@ -0,0 +1,5 @@
+---
+"nostream": minor
+---
+
+Add a CLI to mint NIP-43 invite codes (`nostream invite create`) so operators can issue a claim without SQL. New codes honor `nip43.defaultMaxUses` and `nip43.inviteCodeExpirySeconds`.

.changeset/nip66-probe-engine.md

@@ -0,0 +1,5 @@
+---
+"nostream": minor
+---
+
+feat(nip66): add shared relay probe engine for DNS, TLS, WebSocket RTT, and NIP-11 checks