// A remote signer (Amethyst) that wasn't heard the moment the app needed it // — the tab was frozen, a socket cut, the signer app asleep — put up // "Reconnect your signer" and then never tried the stored session again, so // every time meant a brand-new connection (Adam's phone, 2026-10-29: the // stored session answered in 0.7 s the moment anyone asked). Now the screen // keeps trying the stored session and closes itself once the signer answers. // The remote signer is played by this script over a shimmed relay. // Run: bun tools/signer-resume-test.js import puppeteer from './puppeteer.js'; import { cacheKeyFor } from '../src/wallet.js'; import { generateSecretKey, getPublicKey, finalizeEvent } from 'nostr-tools/pure'; import * as nip44 from 'nostr-tools/nip44'; import { buildHtml } from '../build.js'; const sleep = (ms) => new Promise((r) => setTimeout(r, ms)); let ok = true; const check = (n, c, d = '') => { console.log(` ${c ? '✓' : '✗'} ${n}${d ? ' — ' + d : ''}`); if (!c) ok = false; }; const SK = generateSecretKey(); const PK = getPublicKey(SK); // the account, held by the remote signer const CLIENT_SK = generateSecretKey(); const CLIENT = getPublicKey(CLIENT_SK); // the client key it authorised long ago const html = await buildHtml({ minify: true, pwa: false }); const server = Bun.serve({ port: 5319, fetch: (req) => { const p = new URL(req.url).pathname; if (p === '/verify-worker.js' || p === '/nip46.js' || p.startsWith('/punks')) return new Response(Bun.file('dist' + p)); return new Response(html, { headers: { 'content-type': 'text/html' } }); } }); const browser = await puppeteer.launch({ executablePath: '/usr/bin/google-chrome', headless: 'new', args: ['--no-sandbox'] }); const page = await browser.newPage(); await page.setUserAgent('Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0 Mobile Safari/537.36'); await page.evaluateOnNewDocument((fx) => { window.__amberUrls = []; window.__coinosAmberLaunch = (u) => { window.__amberUrls.push(u); }; window.__published = []; const subs = []; const fits = (ev, f) => (!f.kinds || f.kinds.includes(ev.kind)) && (!f['#p'] || ev.tags.some((t) => t[0] === 'p' && f['#p'].includes(t[1]))) && (!f.authors || f.authors.includes(ev.pubkey)) && (!f.since || ev.created_at >= f.since); // the test pushes the signer's answers through here, to every live sub that wants them window.__inject = (ev) => { for (const s of subs) if (s.fs.some((f) => fits(ev, f))) s.ws.dispatchEvent(new MessageEvent('message', { data: JSON.stringify(['EVENT', s.id, ev]) })); }; const Real = window.WebSocket; window.WebSocket = function (...a) { const ws = new Real(...a); const send = ws.send.bind(ws); ws.send = (d) => { try { const m = JSON.parse(d); if (m[0] === 'REQ') { const fs = m.slice(2); for (let i = subs.length - 1; i >= 0; i--) if (subs[i].ws === ws && subs[i].id === m[1]) subs.splice(i, 1); subs.push({ ws, id: m[1], fs }); const evs = fx.filter((ev) => fs.some((f) => fits(ev, f))); setTimeout(() => { for (const ev of evs) ws.dispatchEvent(new MessageEvent('message', { data: JSON.stringify(['EVENT', m[1], ev]) })); ws.dispatchEvent(new MessageEvent('message', { data: JSON.stringify(['EOSE', m[1]]) })); }, 0); return; } if (m[0] === 'CLOSE') { for (let i = subs.length - 1; i >= 0; i--) if (subs[i].ws === ws && subs[i].id === m[1]) subs.splice(i, 1); return; } if (m[0] === 'EVENT') { window.__published.push(m[1]); setTimeout(() => ws.dispatchEvent(new MessageEvent('message', { data: JSON.stringify(['OK', m[1].id, true, '']) })), 0); return; } } catch {} return send(d); }; return ws; }; window.WebSocket.prototype = Real.prototype; Object.assign(window.WebSocket, Real); }, []); const errs = []; page.on('pageerror', (e) => errs.push(String(e))); const click = (t) => page.evaluate((x) => { const e = [...document.querySelectorAll('button')].find((n) => n.textContent.trim().toLowerCase().includes(x)); if (e) { e.click(); return true; } return false; }, t); const text = () => page.evaluate(() => document.body.innerText); const waitText = async (x, ms = 20000) => { for (let i = 0; i < ms / 250; i++) { if ((await text()).toLowerCase().includes(x)) return true; await sleep(250); } return false; }; // The remote signer: answers the connect, then get_public_key / nip44_decrypt. let client = CLIENT, awake = false, handled = new Set(), decrypts = 0; const signerLoop = async () => { if (!awake) return; const pub = await page.evaluate(() => window.__published.filter((e) => e.kind === 24133)); for (const ev of pub) { if (handled.has(ev.id) || !client || ev.pubkey !== client) continue; handled.add(ev.id); const ck = nip44.getConversationKey(SK, ev.pubkey); const req = JSON.parse(nip44.decrypt(ev.content, ck)); let result; if (req.method === 'get_public_key') result = PK; else if (req.method === 'nip44_decrypt') { decrypts++; result = nip44.decrypt(req.params[1], nip44.getConversationKey(SK, req.params[0])); } else if (req.method === 'nip44_encrypt') result = nip44.encrypt(req.params[1], nip44.getConversationKey(SK, req.params[0])); else if (req.method === 'sign_event') { const u = JSON.parse(req.params[0]); result = JSON.stringify(finalizeEvent(u, SK)); } else if (req.method === 'ping') result = 'pong'; else if (req.method === 'connect') result = 'ack'; const resp = finalizeEvent({ kind: 24133, created_at: Math.floor(Date.now() / 1000), tags: [['p', ev.pubkey]], content: nip44.encrypt(JSON.stringify({ id: req.id, result }), ck) }, SK); await page.evaluate((e) => window.__inject(e), resp); } }; const waitFor = async (fn, ms = 15000) => { for (let i = 0; i < ms / 200; i++) { if (await page.evaluate(fn)) return true; await sleep(200); } return false; }; const pump = async (ms) => { for (let i = 0; i < ms / 250; i++) { await signerLoop(); await sleep(250); } }; try { await page.setViewport({ width: 390, height: 844 }); await page.goto('http://localhost:5319/', { waitUntil: 'domcontentloaded' }); await page.evaluate(() => localStorage.setItem('btc-wallet-network', 'regtest')); await page.reload({ waitUntil: 'domcontentloaded' }); await sleep(400); await click('create a new wallet'); await sleep(600); await page.waitForSelector('.words .w .t'); const mn = (await page.$$eval('.words .w .t', (l) => l.map((e) => e.textContent.trim()))).join(' '); await click('skip verification'); await waitText('receive', 20000); const base = cacheKeyFor(mn + '\n'); const local = Array.from(CLIENT_SK, (b) => b.toString(16).padStart(2, '0')).join(''); await page.evaluate(([k, pk, local]) => { localStorage.setItem(k + ':nostrlogin', JSON.stringify({ pubkey: pk, linked: Date.now(), via: 'bunker', session: { local, bp: { pubkey: pk, relays: ['wss://relay.coinos.io'], secret: null } } })); }, [base, PK, local]); console.log('\n[the signer is asleep when the app needs it]'); await page.reload({ waitUntil: 'domcontentloaded' }); await waitText('receive', 20000); await page.evaluate(() => document.querySelector('.app-nav-button[aria-label="Feed"]')?.click()); await waitFor(() => !!document.querySelector('.feed-post-fab')); await page.evaluate(() => document.querySelector('.feed-post-fab').click()); await waitFor(() => !!document.querySelector('.post-input'), 8000); await page.focus('.post-input'); await page.keyboard.type('hello', { delay: 10 }); await page.evaluate(() => document.querySelector('.post-actions .btn-primary').click()); check('the reconnect screen comes up', await waitText('reconnect your signer', 45000)); await sleep(16000); // let the screen's first try run out unanswered check('...and stays while the signer is silent', (await text()).toLowerCase().includes('reconnect your signer')); console.log('\n[the signer wakes up]'); awake = true; const t0 = Date.now(); let gone = false; for (let i = 0; i < 160 && !gone; i++) { await signerLoop(); gone = !(await text()).toLowerCase().includes('reconnect your signer'); if (!gone) await sleep(250); } check('the screen closes by itself, no new connection', gone, gone ? `${Math.round((Date.now() - t0) / 1000)} s after the signer answered` : 'still up after 40 s'); const st = await page.evaluate((k) => JSON.parse(localStorage.getItem(k + ':nostrlogin') || '{}'), base); check('the stored session is the same one', st.session && st.session.local === local); check('no nostrconnect link was needed', !(await page.evaluate((pk) => window.__published.some((e) => e.kind === 24133 && e.pubkey !== pk), CLIENT))); check('no page errors', errs.length === 0, errs.slice(0, 2).join(' | ')); } finally { await browser.close(); server.stop(true); } console.log(ok ? '\n✅ a stored remote-signer session comes back by itself' : '\n❌ failed'); process.exit(ok ? 0 : 1);