What's Changed since v0.2.1

NIP-46 Remote Signer UX
- Cancellable pending requests — NIP-46 in-flight requests now show a cancel button (×) on the approval card and in the detail modal, so users can dismiss stuck remote signer operations instead of waiting indefinitely
- Abort infrastructure — All 5 NIP-46 call sites (signEvent, nip04/nip44 encrypt/decrypt) race against an AbortController for immediate cancellation
- Hide permissions for NIP-46 accounts — Since the remote signer handles approval, "Manage permissions" is replaced with a "Managed by your signer app" banner on the Home tab and in Settings > Permissions
- Filtered permission keys — NIP-46 accounts only show getPublicKey in the permissions editor (same as read-only), since signing permissions are meaningless locally

Fixes
- CI workflow updated to use .ts extensions and tsx loader

v0.2.1 Release Notes

Identity & Key Management
- NIP-07 signer — Sign events directly from the extension when websites request it, without exposing your private keys
- Multi-account vault
- HD sub-account derivation
- Seed & nsec import/export
- NIP-46 remote signer — Connect to bunker-based remote signers as an alternative to local keys
- Read-only accounts — Import npub for watch-only access with clear "read-only" badges in the topbar and account selector

Onboarding Wizard
- Follow suggestions — New accounts get curated follow suggestions with streaming profile data from relays before the WoT sync step

Approval & Permissions
- Approval drawer — Bottom drawer with reject-all, expand/group toggle, and individual request detail
- Per-site permission management — Grant, deny, or prompt per domain, per event kind, per account

UI & Settings
- Redesigned home screen — Controls grouped into Identity and WoT cards
- 6 languages — English, Spanish, Portuguese, German, French, Italian

Security
- Removed getMyPubkey from public WoT API — Prevents passive pubkey fingerprinting by unapproved websites

Technical
- Full TypeScript migration — Entire codebase migrated from JS/JSX

Release Notes — v0.1.2

API alignment with NIP proposal
- Renamed isConfigured() to getStatus() — returns { configured, mode, hasLocalGraph }
- Removed getDistanceBetween() (surveillance/privacy concern)
- Updated README with full API reference and link to the https://github.com/nostr-protocol/nips/issues/2236

Bug fixes
- Fixed sync crash when triggered without a valid pubkey configured
- Hot-fix for graph syncing reliability

Other
- Added Firefox Add-ons install link to README

Version 0.1.1

New Features

• npub support: Pubkey fields now accept both hex and npub formats
• Trust scoring: Calculate trust scores (0-1) based on social distance and path count
• Improved validation: Alert popups for missing/invalid pubkey when syncing

Improvements

• Better error messages for invalid pubkey formats
• Cleaner DOM manipulation (security improvements)

Bug Fixes

• Fixed edge cases in pubkey validation