Initial scaffold: Nostr-based git sync daemon (NIP-34)

Subscribes to kind:30618 repo state events and triggers git pull
when trusted publishers announce new commits. Uses did:nostr keys
for unified identity across Nostr, Bitcoin (Blocktrails), and ACLs.

Author: melvincarvalho

.gitignore

@@ -0,0 +1,3 @@
+node_modules/
+repos.json
+*.log

README.md

@@ -0,0 +1,114 @@
+# nostr-git-sync
+
+Decentralized git sync daemon using Nostr (NIP-34).
+
+## Overview
+
+```
+┌─────────────────┐     ┌─────────────────┐     ┌─────────────────┐
+│   Publisher     │     │  Nostr Relays   │     │   Subscribers   │
+│  (git push)     │────▶│  (30618 events) │────▶│  (git pull)     │
+└─────────────────┘     └─────────────────┘     └─────────────────┘
+```
+
+When a publisher pushes to a repo, they broadcast a NIP-34 `kind:30618` event announcing the new state. Subscribers watching for that repo automatically pull the update.
+
+## Key Features
+
+- **Unified identity**: Same secp256k1 key for Nostr, Bitcoin (Blocktrails), and ACLs
+- **NIP-34 compatible**: Uses standard `kind:30618` repo state events
+- **ACL-based trust**: Only pull from `did:nostr:npub...` keys you trust
+- **Optional Blocktrails verification**: Require Bitcoin-anchored commits
+
+## Install
+
+```bash
+npm install
+cp repos.json.example repos.json
+# Edit repos.json with your config
+```
+
+## Usage
+
+### Subscriber (daemon)
+
+```bash
+# Start watching for updates
+npm start
+
+# Or with custom config
+node bin/nostr-git-sync.js /path/to/repos.json
+```
+
+### Publisher (after git push)
+
+```bash
+# Announce new repo state
+node src/publish.js <nsec> <repo-id> [repo-path]
+
+# Example
+node src/publish.js nsec1... JavaScriptSolidServer .
+```
+
+## Configuration
+
+```json
+{
+  "relays": ["wss://relay.damus.io", "wss://nos.lol"],
+  "repos": {
+    "JavaScriptSolidServer": {
+      "path": "/var/www/jss",
+      "cloneUrl": "https://github.com/...",
+      "branch": "gh-pages",
+      "trusted": ["did:nostr:npub1..."],
+      "requireAnchor": false,
+      "postSync": "npm install"
+    }
+  }
+}
+```
+
+| Field | Description |
+|-------|-------------|
+| `path` | Local path to git repo |
+| `cloneUrl` | Git remote URL (for future clone support) |
+| `branch` | Only sync this branch (optional) |
+| `trusted` | Array of `did:nostr:npub...` keys allowed to trigger sync |
+| `requireAnchor` | Require Blocktrails verification before sync |
+| `postSync` | Command to run after successful sync |
+
+## NIP-34 Event Structure
+
+### Kind 30618: Repository State
+
+```json
+{
+  "kind": 30618,
+  "pubkey": "<publisher-hex>",
+  "tags": [
+    ["d", "JavaScriptSolidServer"],
+    ["refs/heads/gh-pages", "7a356be..."]
+  ],
+  "content": ""
+}
+```
+
+## Identity Model
+
+The same secp256k1 keypair is used across:
+
+- **Nostr**: Signs 30618 events (`npub1...`)
+- **Bitcoin**: Controls UTXOs via Blocktrails key tweaking
+- **ACL**: `did:nostr:npub...` format in trusted list
+
+## Roadmap
+
+- [ ] 30617 discovery (fetch clone URLs from Nostr)
+- [ ] Blocktrails anchor verification
+- [ ] Git hook for auto-publish
+- [ ] Systemd service file
+- [ ] Multi-branch support
+
+## License
+
+MIT

bin/nostr-git-sync.js

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+
+import { startDaemon } from '../src/daemon.js'
+
+const configPath = process.argv[2] || 'repos.json'
+
+console.log(`Loading config from: ${configPath}`)
+
+startDaemon(configPath).catch(err => {
+  console.error('Fatal error:', err.message)
+  process.exit(1)
+})