mirror of
https://github.com/PR0M3TH3AN/VoxVera.git
synced 2026-10-27 09:40:40 +00:00
thePR0M3TH3ANandClaude Opus 4.8
861407cbf6
Let authors publish a flyer under a stable, identifiable key when they want one, while keeping anonymous-by-default. The editor now signs under one of three identities, routed through activeIdentity()/signActiveEvent(): - Anonymous (default, unchanged): the per-device key, signed locally. - NIP-07 extension: signs via window.nostr.signEvent; the secret never enters the page. - Imported nsec: decoded to a key used to sign. By default the secret lives only in memory for the session. "Remember on this device" stores it encrypted with a PIN (PBKDF2 SHA-256, 600k iterations, random salt -> AES-GCM-256); the plaintext secret is never written to storage. On reload a remembered key is locked until the PIN is entered; a session-only key falls back to anonymous. The signer pill, author npub, naddr, and poster URL all follow the active identity. New identity controls are localized across all 14 languages. Security note (also in docs): a short numeric PIN is brute-forceable offline if the encrypted blob leaks, so it guards casual snooping, not a targeted attacker — the NIP-07 path is stronger, and NIP-46 is a documented follow-up. The minimum PIN is 4 digits but longer is allowed and encouraged. Also updates README, the client spec (new "Publishing identity" section), the roadmap (#1/#2 marked in progress with phases shipped), and the e2e README. Covered by the cross-engine Playwright suite (default-anonymous, NIP-07 connect + publish, session-only nsec without persistence, invalid nsec, PIN encrypt -> lock on reload -> wrong/right PIN -> unlock, and forget). Co-Authored-By: Claude Opus 4.8 <[email protected]>
VoxVera
VoxVera is a static, Nostr-powered flyer client.
The active app lives at the site root (site/). It lets anyone author flyer content, publish it as a public Nostr event, and re-render or reprint the flyer later from a Nostr address or event ID — no application server. The frontend is intentionally self-contained: Nostr relays store the content, and any static host can serve the client.
The previous Tor/OnionShare CLI version is preserved on the legacy-tor branch.
Features
- Author and publish. Fill in the flyer fields and publish them as a Nostr
30078parameterized replaceable event. Republishing with the same flyer name replaces the previous version. - Anonymous by default, your identity if you want it. The editor signs flyers under one of three identities: an anonymous per-device key (default, no setup), a NIP-07 browser extension (your secret never touches the page), or an imported
nsec. An imported key signs in-memory for the session; tick "Remember on this device" to keep it, encrypted with a PIN (PBKDF2 → AES-GCM) — the plaintext secret is never stored. A short PIN is a convenience lock, not protection against a targeted attacker (see the spec); the extension path is stronger. - Publish confirmation. After signing and publishing, a modal shows the new flyer's URL to copy, so authors know they're done and where to find it (localized, like everything else).
- Open from a link or ID. Load a flyer from an
naddr,nevent1,note1, raw 64-char event ID, ornostr:URL. The lookup field tolerates copy/paste whitespace and newlines, so an event ID copied off a printed tear-off (where it wraps across two lines) still resolves. - Short, scannable poster URLs. Each poster URL is a standard NIP-19
naddrcarrying a single relay hint, placed in the URL#fragment(no?addr=query). Shorter URLs make the tear-off QR code easier to scan. Older relay-listnaddrs and?addr=URLs still resolve. - Tear-off tabs. The printable flyer has ten tear-off tabs. Each tab is a single hyperlinked call to action (the URL is the link, not printed as text) and prints the full event ID so anyone can re-find the flyer by typing it.
- Loading state on shared links. Opening a poster/event link shows a localized "Loading content…" placeholder (and a "Could not load this flyer." state on failure) instead of the default flyer; the default sample content appears only on the bare site URL.
- 14 languages with RTL support. Flyer content and UI are localized; right-to-left scripts render correctly. Letter-spacing is applied per script so cursive (Arabic/Persian) and combining (Devanagari) scripts are not broken — see the spec.
- US Letter and A4. Print size defaults to the right paper for the visitor's country (from the browser locale's region —
en-US→ Letter,en-GB→ A4, no geolocation), with a manual override. Paper size is a local print preference and is never written into the event. See the spec. - Fits-the-page editing. Fields that would overflow the printable sheet are rejected as you type, with an inline error under the affected field. See the field length cheat sheet for how much text fits each field per language and paper size.
- QR codes. The tear-off QR points at the poster URL (re-open and reprint); the main flyer QR points at the creator's content URL.
- Bulletin board (members-only, trust-filtered). A small screen-only link below the flyer preview (outside the printed sheet, never printed) opens a spreadsheet-style page of the most recent flyers found on the relays — title, link, posting npub, language, and date — sortable by any column. Viewing the board requires connecting a Nostr identity — via a NIP-07 browser extension, by pasting a private key (
nsec, decoded in-page and never stored), or by creating a new key (revealed so you can save it). The board then shows only flyers from authors in your web of trust (your NIP-02 follow graph), with a "Show all" opt-out. A brand-new key with no follows is seeded from a curated trust anchor so the board is never an unmoderated firehose. Connecting is not required to author or print flyers, which stay fully anonymous. See the roadmap for the phased trust model. - Self-contained. No build step and no CDNs — Nostr and QR libraries are vendored under
site/vendor/.
What Is In main
site/index.html,site/nostr-client.js,site/nostr-client.css,site/locales.js: static editor/viewer clientsite/board.html,site/board.js: bulletin-board page listing recent flyers from the relayssite/vendor/: vendored browser dependencies for Nostr and QR generationsite/nostr/index.html: redirect stub so legacy/nostr/poster URLs and QR codes still resolvesite/CNAME: custom-domain targetvoxvera/nostr/: small Python schema/validation helpersdocs/nostr-static-client-spec.md: design notes and development plandocs/flyer-field-limits.md: per-language field length cheat sheetdocs/roadmap.md: known issues and future development directions
Local Development
Run the static site from the repo root:
python3 -m http.server 8768 --directory site
Then open:
http://127.0.0.1:8768/
No build command is required for the frontend.
Vercel
Point Vercel at this repository on main.
- Framework preset: Other
- Root directory: repo root
- Build command: leave empty
- Output directory:
site
The client is served from the domain root (site/index.html). site/nostr/index.html is a redirect stub that forwards the legacy /nostr/ path to the root while preserving the query/fragment, so older poster URLs and printed QR codes still resolve.
Verification
node --check site/nostr-client.js # client syntax
pytest -q # Nostr source schema
Cross-browser end-to-end tests
Playwright smoke tests run the client on Chromium, Firefox, and WebKit (Safari's engine), plus Android/iOS mobile emulations — covering rendering, the @media print path, WebCrypto key generation, the /nostr/ redirect, and the loading state.
npm install
npx playwright install # download the browser engines
npm run test:e2e
See e2e/README.md for per-engine coverage and the one-time Linux step for WebKit (sudo npx playwright install-deps).
The Python tests only cover the Nostr source schema. The frontend is static; the Playwright suite covers engine behavior, but real Safari/iOS print and clipboard behavior is still worth a manual pass before a release.
License
MIT (c) 2026 thePR0M3TH3AN