mirror of
https://github.com/vitorpamplona/amethyst.git
synced 2026-08-09 08:04:45 +00:00
The indexer fan-out already used lists.dmInbox (strict), but the LocalCache fast-path in DmInboxRelayResolver.resolve() — and the no-resolver fallback in DesktopIAccount — went through the lenient User.dmInboxRelays(), which falls back to NIP-65 read relays (kind:10002) when the recipient has no kind:10050. Because that fast-path returns first and short-circuits the strict indexer lookup, a recipient with NIP-65 read relays but no published DM-inbox would get gift wraps published to relays they never designated for DMs — re-introducing the metadata leak (recipient pubkey + send timing) the P0 fix was meant to close. LocalCache commonly holds kind:10002 but not kind:10050, so this path fired often. Switch both LocalCache lookups to dmInboxRelaysStrict(). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>