Add NIP-98 auth for git push and test key hint

Author: melvincarvalho

demo.html

@@ -352,7 +352,8 @@ <h1>📝 Live Notes</h1>
     <div id="keyPanel" class="key-panel">
       <label>Nostr Private Key (hex)</label>
       <input type="password" id="privkeyInput" placeholder="Enter your private key to enable editing..." oninput="onPrivkeyChange()">
-      <div class="hint">Your key is stored locally and used to sign commits and Nostr events.</div>
+      <div class="hint">Your key is stored locally and used to sign commits and Nostr events.<br>
+      For testing: <code style="font-size:11px;color:#a78bfa;">07f689807708ca937e1fdbea750ea70802fdec379f890306f6dc4716d0798948</code></div>
       <div id="pubkeyDisplay" class="pubkey"></div>
     </div>
 
@@ -629,15 +630,14 @@ <h3>${titleCased}</h3>
 
         showSaving('Pushing to server...');
 
-        // Push to remote
-        const http = createHttpClient();
+        // Push to remote with NIP-98 auth
+        const http = createNip98HttpClient(privkey);
         await git.push({
           fs,
           http,
           dir,
           url: REPO,
-          ref: 'main',
-          onAuth: () => ({ username: privkey, password: '' })
+          ref: 'main'
         });
 
         showSaving('Publishing to Nostr...');
@@ -676,6 +676,43 @@ <h3>${titleCased}</h3>
       }
     };
 
+    // Create HTTP client with NIP-98 auth for git operations
+    function createNip98HttpClient(privkey) {
+      const baseHttp = createHttpClient();
+
+      return {
+        async request({ url, method, headers, body }) {
+          // Create NIP-98 auth event
+          const pubkey = nostrTools.getPublicKey(privkey);
+
+          const authEvent = {
+            kind: 27235,
+            pubkey,
+            created_at: Math.floor(Date.now() / 1000),
+            tags: [
+              ['u', url],
+              ['method', method || 'GET']
+            ],
+            content: ''
+          };
+
+          authEvent.id = nostrTools.getEventHash(authEvent);
+          authEvent.sig = nostrTools.getSignature(authEvent, privkey);
+
+          // Base64 encode the event
+          const authHeader = 'Nostr ' + btoa(JSON.stringify(authEvent));
+
+          // Add auth header
+          const authHeaders = {
+            ...headers,
+            'Authorization': authHeader
+          };
+
+          return baseHttp.request({ url, method, headers: authHeaders, body });
+        }
+      };
+    }
+
     async function publishNostrEvent(commit) {
       const pubkey = nostrTools.getPublicKey(privkey);