Enhance Directory Client Library for NIP-XX Protocol

- Introduced a TypeScript client library for the Distributed Directory Consensus Protocol (NIP-XX), providing a high-level API for managing directory events, identity resolution, and trust calculations.
- Implemented core functionalities including event parsing, trust score aggregation, and replication filtering, mirroring the Go implementation.
- Added comprehensive documentation and development guides for ease of use and integration.
- Updated the `.gitignore` to include additional dependencies and build artifacts for the TypeScript client.
- Enhanced validation mechanisms for group tag names and trust levels, ensuring robust input handling and security.
- Created a new `bun.lock` file to manage package dependencies effectively.

pkg/protocol/directory/validation.go

@@ -26,11 +26,34 @@ const (
 
 // Regular expressions for validation
 var (
-	hexKeyRegex = regexp.MustCompile(`^[0-9a-fA-F]{64}$`)
-	npubRegex   = regexp.MustCompile(`^npub1[0-9a-z]+$`)
-	wsURLRegex  = regexp.MustCompile(`^wss?://[a-zA-Z0-9.-]+(?::[0-9]+)?(?:/.*)?$`)
+	hexKeyRegex       = regexp.MustCompile(`^[0-9a-fA-F]{64}$`)
+	npubRegex         = regexp.MustCompile(`^npub1[0-9a-z]+$`)
+	wsURLRegex        = regexp.MustCompile(`^wss?://[a-zA-Z0-9.-]+(?::[0-9]+)?(?:/.*)?$`)
+	groupTagNameRegex = regexp.MustCompile(`^[a-zA-Z0-9._~-]+$`) // RFC 3986 URL-safe characters
 )
 
+// ValidateGroupTagName validates that a group tag name is URL-safe (RFC 3986).
+func ValidateGroupTagName(name string) (err error) {
+	if len(name) < 1 {
+		return errorf.E("group tag name cannot be empty")
+	}
+	if len(name) > 255 {
+		return errorf.E("group tag name cannot exceed 255 characters")
+	}
+
+	// Check for reserved prefixes
+	if strings.HasPrefix(name, ".") || strings.HasPrefix(name, "_") {
+		return errorf.E("group tag names starting with '.' or '_' are reserved for system use")
+	}
+
+	// Validate URL-safe character set
+	if !groupTagNameRegex.MatchString(name) {
+		return errorf.E("group tag name must contain only URL-safe characters (a-z, A-Z, 0-9, -, ., _, ~)")
+	}
+
+	return nil
+}
+
 // ValidateHexKey validates that a string is a valid 64-character hex key.
 func ValidateHexKey(key string) (err error) {
 	if !hexKeyRegex.MatchString(key) {