NIP-46 遠端簽名

bunker://<remote-signer-pubkey>?relay=<relay-url>&secret=<secret>

# 範例
bunker://a]7f6...?relay=wss://relay.nsec.app&secret=abc123

# 參數說明
- remote-signer-pubkey: 簽名器的公鑰
- relay: 用於通訊的中繼器
- secret: 可選的連接密鑰

nostrconnect://<client-pubkey>?relay=<relay>&metadata=<metadata>

# 範例
nostrconnect://b8e3...?relay=wss://relay.damus.io&metadata={
  "name": "My App",
  "url": "https://myapp.com",
  "description": "A cool Nostr app"
}

# 參數說明
- client-pubkey: 客戶端的臨時公鑰
- relay: 用於通訊的中繼器
- metadata: 應用程式資訊（JSON 編碼）

// 請求格式（加密前）
{
  "id": "<random-id>",
  "method": "sign_event",
  "params": ["<event-json>"]
}

// 作為 kind 24133 事件發送
{
  "kind": 24133,
  "pubkey": "<client-pubkey>",
  "content": "<nip04-encrypted-request>",
  "tags": [
    ["p", "<remote-signer-pubkey>"]
  ],
  ...
}

// 成功回應
{
  "id": "<request-id>",
  "result": "<signed-event-json>"
}

// 錯誤回應
{
  "id": "<request-id>",
  "error": "User rejected the request"
}

import { Nip46Signer } from 'nostr-tools/nip46'

// 從 bunker:// URI 建立連接
const bunkerUri = 'bunker://a7f6...?relay=wss://relay.nsec.app'
const signer = new Nip46Signer(bunkerUri)

// 等待連接建立
await signer.connect()

// 取得公鑰
const pubkey = await signer.getPublicKey()
console.log('公鑰:', pubkey)

// 簽署事件
const unsignedEvent = {
  kind: 1,
  created_at: Math.floor(Date.now() / 1000),
  tags: [],
  content: 'Hello from Nostr Connect!'
}

const signedEvent = await signer.signEvent(unsignedEvent)
console.log('已簽名:', signedEvent)

// 加密訊息
const encrypted = await signer.nip04Encrypt(recipientPubkey, 'Secret message')

// 斷開連接
signer.close()

import { generateSecretKey, getPublicKey } from 'nostr-tools'

function generateConnectUri(relay, appMetadata) {
  // 生成客戶端臨時密鑰
  const clientSecret = generateSecretKey()
  const clientPubkey = getPublicKey(clientSecret)

  // 編碼 metadata
  const metadata = encodeURIComponent(JSON.stringify(appMetadata))

  // 構建 URI
  const uri = `nostrconnect://${clientPubkey}?relay=${encodeURIComponent(relay)}&metadata=${metadata}`

  return { uri, clientSecret, clientPubkey }
}

// 使用
const { uri } = generateConnectUri(
  'wss://relay.damus.io',
  {
    name: 'My Nostr App',
    url: 'https://myapp.com',
    description: 'A cool Nostr application'
  }
)

// 顯示 QR 碼讓簽名器掃描
displayQRCode(uri)

// 權限字串格式
perms=sign_event:1,sign_event:4,nip04_encrypt,nip04_decrypt

// 常見權限
- sign_event:<kind>  // 簽署特定類型事件
- nip04_encrypt      // NIP-04 加密
- nip04_decrypt      // NIP-04 解密
- nip44_encrypt      // NIP-44 加密
- nip44_decrypt      // NIP-44 解密

// 範例：只允許發布貼文和私訊
perms=sign_event:1,sign_event:4,nip04_encrypt,nip04_decrypt