refactor: complete Tier A+B API surface cleanup

[AustinKelsay]

Summary

• Completes Tier A+B cleanup from the staging audit under spec #154: close stale shipped triage (Close shipped July triage issues #155 already done), publish ADR 0003 1.0 kill-list, archive agent-run dumps, add NIP-42 README, deprecate dual Zap/Simple Public Facades, align NIP-46 validators with canonical key-validation, and replace root/web type star-exports with explicit allowlists.
• Tickets: Publish 1.0 deprecation kill-list ADR #156 Archive docs/agents/runs session dumps #157 Add NIP-42 README #158 Deprecate ZapClient toward NostrZapClient #159 Deprecate SimpleNIP46 as demo Compatibility Alias #160 Align NIP-46 validators with canonical names #161 Replace root type star-exports with allowlist #162 ( Close shipped July triage issues #155 closed as gh-only ).
• Preserves all Compatibility Aliases through 0.x; no removals in this PR.

Test plan

• npx tsc --noEmit -p tsconfig.json
• npm run lint
• npm test -- --runInBand (1076 passed)
• focused NIP-46 validator + NIP-57 client + web-exports suites
• npm run build && npm run pack:verify && npm run commands:verify && npm run package-manager:verify
• standards/spec code-review vs staging; worthy findings fixed
• hosted CI on this PR
• @coderabbit full review (local CLI silent → fallback review recorded)

Local CodeRabbit / fallback

Local coderabbit review --agent --type all --base staging produced no output after >4 minutes and was terminated. Fallback standards/spec review findings were addressed before push (NIP-42 README accuracy, NIP-46 README API block, curve-order Security changelog, SimpleNIP46 wording, examples demo note).

Known risks / out of scope

• Compatibility Alias removals deferred to next major (ADR 0003).
• Tier C god-module splits (relay.ts / nostr.ts / NIP-47 facades) out of scope.
• Remaining NIP-46 boolean helpers (validateRequestPayload, etc.) keep legacy names; colliding security-validator names were the rename target.
• Production release/promotion out of scope.

Made with Cursor

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[AustinKelsay]

@CodeRabbit full review

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 0fa6d933-4320-42bf-a26b-86c63ff387d4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feature/cleanup-tier-ab-api-surface

---

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

✅ Action performed

Full review finished.

[AustinKelsay]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.