Notary v0.8.1

Notary: a native NIP-46 remote signer for Nostr. macOS (Apple Silicon), ad-hoc signed (not notarized).

What's new in v0.8.1

The window could not reach its own signer. The toolchain began confining an app's file reads to its own directories unless the app asks for more. Notary's window reads the daemon's token from your home directory, which is outside all of them, so the read was refused and nothing said so: the token never arrived, the window never advanced, and the app sat on "Connecting to the signer…" forever, looking exactly like a network fault.

Released 0.8.0 was never affected. It was built against the older toolchain, and the pin moved the day after that release, so the break lived only on main. Nothing caught it because building, checking and testing all pass on an app that cannot reach its daemon, and none of them launches it. There is now a test that fails if that permission is ever dropped again.

The setup screen overclaimed. It said the app "only sends the passphrase". That is true when you create a key and false when you import one, which is the one moment the secret does pass through the window. It now says which is which.

The screenshots are current. The approval card in them shows the four answers it actually offers, allow once, allow for a day, allow always, and deny, along with who is asking and what would be signed. The old picture showed two buttons and neither.

Install

curl -fsSL https://raw.githubusercontent.com/zig-nostr/notary/main/scripts/install-macos.sh | bash

The installer downloads the latest release, verifies its SHA-256, installs Notary.app to /Applications, and opens it, ready to use.

Notary is ad-hoc signed, not notarized, on purpose: it holds your keys, so the trust anchor is a build you can reproduce, not an Apple signature. Read the installer or build from source. Your key never leaves the daemon.