mirror of
https://github.com/vitorpamplona/amethyst.git
synced 2026-08-10 00:16:59 +00:00
The Connected Apps signer store is app-global, so a remote client keyed only by its own pubkey would share one trust level across every local account. Namespace the coordinate as `nip46:<signerPubKey>:<clientPubKey>` so the same client paired with two accounts on one device gets independent grants. - Nip46PermissionAuthorizer takes the user's signerPubKey; coordinateFor/belongsTo encode + match the namespace; clientPubKeyOf reads the trailing segment. - onLogout now revokes the client's grant (wired through the new quartz hook). - Connected Apps lists only the active account's remote clients (napplet/browser grants stay app-global); the signer screen counts the same way. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_015FHr2mu5SiHwYNR7evYUuF