mirror of
https://github.com/PR0M3TH3AN/bitvid.git
synced 2026-10-27 07:52:24 +00:00
Swept every .signEvent(/window.nostr/ensureExtensionPermissions caller. No window.nostr is used to sign or encrypt anywhere; all publishing uses the active signer, and every extension-permission gate is guarded on signer type/capability so nsec + NIP-46 pass through. Recorded the findings + one dead-code note (auth/signingAdapter.js createNip07SigningAdapter is unused by app code). Co-Authored-By: Claude Opus 4.8 <[email protected]>