feat: NostrKeep Signer rebrand + v2 native UI + PKPass wallet support

Rebrand from NostrKey to NostrKeep Signer (com.nostrkeep.signer).
Native SwiftUI v2 with identity cards, relay management, QR scanner,
deep link handling, and PKPass wallet integration. Updated entitlements,
App Groups, shared keychain, and CI workflow.

Author: vveerrgg

.github/workflows/ci.yml

@@ -16,8 +16,8 @@ jobs:
       - name: Build
         run: |
           xcodebuild build \
-            -project NostrKey.xcodeproj \
-            -scheme NostrKey \
+            -project NostrKeepSigner.xcodeproj \
+            -scheme NostrKeepSigner \
             -configuration Debug \
             -destination 'generic/platform=iOS Simulator' \
             CODE_SIGN_IDENTITY="" \

APP-STORE-SUBMISSION.md

@@ -1,8 +1,8 @@
-# App Store Submission — NostrKey Authenticator for iOS
+# App Store Submission — NostrKeep Signer Authenticator for iOS
 
-This document contains all the information needed to submit the NostrKey Authenticator for iOS to the Apple App Store.
+This document contains all the information needed to submit the NostrKeep Signer Authenticator for iOS to the Apple App Store.
 
-> **Two-Product Strategy:** This is the standalone **Authenticator** app (`com.nostrkey.authenticator`), distinct from the Safari Web Extension companion app at `nostrkey.browser.plugin.src/apple/` (`com.nostrkey.extension`). The two apps share a Keychain via App Groups but serve different primary functions and target different App Store categories. See "Relationship to Safari Extension" below.
+> **Two-Product Strategy:** This is the standalone **Authenticator** app (`com.nostrkeep.signer`), distinct from the Safari Web Extension companion app at `nostrkey.browser.plugin.src/apple/` (`com.nostrkeep.signer.extension`). The two apps share a Keychain via App Groups but serve different primary functions and target different App Store categories. See "Relationship to Safari Extension" below.
 
 ## Prerequisites
 
@@ -11,13 +11,13 @@ This document contains all the information needed to submit the NostrKey Authent
 - [x] App Store Connect access
 - [x] App icon (1024x1024px, SVG-rendered)
 - [ ] Screenshots for iPhone (6.9" / 6.7")
-- [ ] Privacy Policy URL live at nostrkey.com/privacy.html
+- [ ] Privacy Policy URL live at nostrkeep.com/privacy.html
 - [ ] Archive build uploaded
 
 ## App Store Listing
 
 ### App Name (30 chars max)
-**NostrKey**
+**NostrKeep Signer**
 
 ### Subtitle (30 chars max)
 **Nostr Identity Authenticator**
@@ -34,16 +34,16 @@ nostr,authenticator,identity,keys,qr,scanner,secure-enclave,nip-46,signing,npub,
 
 ### Description (4000 chars max)
 ```
-NostrKey is the authenticator for the Nostr protocol. Scan a QR code, and you're signed in. Your private keys live in the Secure Enclave — hardware-isolated, biometric-protected, never extractable.
+NostrKeep Signer is the authenticator for the Nostr protocol. Scan a QR code, and you're signed in. Your private keys live in the Secure Enclave — hardware-isolated, biometric-protected, never extractable.
 
-Think of NostrKey as the 1Password or Authy for Nostr. Websites and apps show you a QR code, you scan it with NostrKey, and you're authenticated — your private key never leaves your device.
+Think of NostrKeep Signer as the 1Password or Authy for Nostr. Websites and apps show you a QR code, you scan it with NostrKeep Signer, and you're authenticated — your private key never leaves your device.
 
 HOW IT WORKS
 
 1. Create or import your Nostr identity
 2. Your private key is stored in the Secure Enclave with Face ID protection
 3. When a Nostr app needs you to sign in, it shows a QR code
-4. Scan the QR code with NostrKey — authentication happens instantly
+4. Scan the QR code with NostrKeep Signer — authentication happens instantly
 5. Your key never touches the browser or the app you're signing into
 
 KEY FEATURES
@@ -55,12 +55,12 @@ KEY FEATURES
 • One-Tap Relay Management — add relays by scanning a QR code or tapping a deep link
 • Identity Card — your npub as a shareable QR code with copy and share actions
 • Apple Wallet Integration — add your Nostr identity as a Wallet pass for meetups and events
-• Deep Link Support — nostrkey:// URLs for add-relay, connect, import-keys, and wallet-pass
-• Dark Theme — Monokai color scheme matching the NostrKey browser extension
+• Deep Link Support — nostrkeepsigner:// URLs for add-relay, connect, import-keys, and wallet-pass
+• Dark Theme — NostrKeep teal-on-navy color scheme matching the NostrKeep Signer browser extension
 
-WORKS WITH THE NOSTRKEY SAFARI EXTENSION
+WORKS WITH THE NOSTRKEEP SIGNER SAFARI EXTENSION
 
-NostrKey Authenticator and the NostrKey Safari Web Extension share a secure Keychain via App Groups. When both are installed:
+NostrKeep Signer Authenticator and the NostrKeep Signer Safari Web Extension share a secure Keychain via App Groups. When both are installed:
 
 • The Safari extension detects your Secure Enclave keys automatically
 • Browser signing is upgraded from software keys to hardware-secured keys
@@ -71,7 +71,7 @@ You don't need both — each works independently — but together they form a tw
 
 SECURITY
 
-All private key material stays on your device. Keys are stored in the Secure Enclave with biometric access control — every signing operation requires Face ID or Touch ID. No data is collected, no analytics, no tracking. NostrKey is fully open source under the MIT license.
+All private key material stays on your device. Keys are stored in the Secure Enclave with biometric access control — every signing operation requires Face ID or Touch ID. No data is collected, no analytics, no tracking. NostrKeep Signer is fully open source under the MIT license.
 
 SUPPORTED NIPS
 
@@ -94,7 +94,7 @@ Completely rebuilt from the ground up as a native SwiftUI authenticator.
 • New: One-tap relay management via QR codes and deep links
 • New: Identity card with shareable npub QR code
 • New: Camera permission handling with Settings redirect
-• New: Monokai dark theme matching the browser extension
+• New: NostrKeep teal-on-navy dark theme
 • New: Shared Keychain bridge with Safari extension
 ```
 
@@ -112,21 +112,21 @@ Completely rebuilt from the ground up as a native SwiftUI authenticator.
 
 ## Relationship to Safari Extension
 
-NostrKey exists as two complementary products on the App Store:
+NostrKeep Signer exists as two complementary products on the App Store:
 
-| | NostrKey Authenticator | NostrKey Web Extension |
+| | NostrKeep Signer Authenticator | NostrKeep Signer Web Extension |
 |---|---|---|
-| **Bundle ID** | `com.nostrkey.authenticator` | `com.nostrkey.extension` |
+| **Bundle ID** | `com.nostrkeep.signer` | `com.nostrkeep.signer.extension` |
 | **Category** | Utilities | Safari Extensions |
 | **Primary UI** | Camera / QR scanner + dashboard | Browser toolbar popup |
 | **Key Storage** | Secure Enclave (hardware) | Keychain (software) |
 | **Authentication** | Face ID / Touch ID per operation | Master password + auto-lock |
 | **Primary Function** | QR-based identity authentication | NIP-07 browser signing injection |
-| **App Groups** | `group.com.nostrkey` (shared) | `group.com.nostrkey` (shared) |
+| **App Groups** | `group.com.nostrkeep.signer` (shared) | `group.com.nostrkeep.signer` (shared) |
 
 **Why two apps?** The Safari extension injects `window.nostr` into web pages for seamless browser-based signing. The authenticator app provides hardware-secured key storage and QR-based authentication that works with any Nostr client, not just browsers. Different app categories, different primary interfaces, different use cases — like how 1Password has both a Safari extension and a standalone app.
 
-**Bridge behavior:** When both apps are installed, the Safari extension automatically detects Secure Enclave keys stored by the authenticator via the shared App Group Keychain (`H48PW6TC25.group.com.nostrkey`). It upgrades its signing operations from software keys to hardware-secured keys transparently.
+**Bridge behavior:** When both apps are installed, the Safari extension automatically detects Secure Enclave keys stored by the authenticator via the shared App Group Keychain (`H48PW6TC25.group.com.nostrkeep.signer`). It upgrades its signing operations from software keys to hardware-secured keys transparently.
 
 ## Privacy Details (App Store Connect)
 
@@ -136,7 +136,7 @@ NostrKey exists as two complementary products on the App Store:
 Select: **Data Not Collected**
 
 ### Privacy Policy URL
-**https://nostrkey.com/privacy.html**
+**https://nostrkeep.com/privacy.html**
 
 ### Privacy Nutrition Label
 | Data Type | Collected | Linked to Identity | Tracking |
@@ -146,8 +146,8 @@ Select: **Data Not Collected**
 ## Required Assets
 
 ### App Icon
-- 1024x1024px PNG (rendered from NostrKey-logo.svg)
-- Located: `NostrKey/Assets.xcassets/AppIcon.appiconset/icon-1024.png`
+- 1024x1024px PNG (rendered from NostrKeepSigner-logo.svg)
+- Located: `NostrKeepSigner/Assets.xcassets/AppIcon.appiconset/icon-1024.png`
 
 ### Screenshots
 
@@ -169,13 +169,13 @@ Select: **Data Not Collected**
 ## App Review Information
 
 ### Demo Account
-Not applicable — NostrKey generates keys locally. No account, server, or subscription needed.
+Not applicable — NostrKeep Signer generates keys locally. No account, server, or subscription needed.
 
 ### Review Notes
 ```
-NostrKey Authenticator is a native SwiftUI app that provides QR-based Nostr identity authentication with Secure Enclave key storage. It is NOT a browser extension wrapper — it is a standalone authenticator built with AVFoundation (camera), Security framework (Keychain/Secure Enclave), LocalAuthentication (Face ID), and CoreImage (QR generation).
+NostrKeep Signer Authenticator is a native SwiftUI app that provides QR-based Nostr identity authentication with Secure Enclave key storage. It is NOT a browser extension wrapper — it is a standalone authenticator built with AVFoundation (camera), Security framework (Keychain/Secure Enclave), LocalAuthentication (Face ID), and CoreImage (QR generation).
 
-This app is distinct from our NostrKey Safari Web Extension (com.nostrkey.extension). The web extension injects window.nostr into Safari for browser-based signing. This authenticator app provides hardware-secured key storage and QR-based authentication — a different app category, different primary interface, and different use case. They share a Keychain via App Groups so users who install both get upgraded security automatically.
+This app is distinct from our NostrKeep Signer Safari Web Extension (com.nostrkeep.signer.extension). The web extension injects window.nostr into Safari for browser-based signing. This authenticator app provides hardware-secured key storage and QR-based authentication — a different app category, different primary interface, and different use case. They share a Keychain via App Groups so users who install both get upgraded security automatically.
 
 Key functionality:
 1. Generate or import Nostr private keys (nsec bech32 format)
@@ -185,14 +185,14 @@ Key functionality:
 5. View public key (npub) as a QR code for sharing
 6. Manage multiple Nostr identities with profile switching
 7. Configure relay connections with NIP-11 metadata fetching
-8. Deep link support for nostrkey:// and nostrconnect:// URI schemes
+8. Deep link support for nostrkeepsigner:// and nostrconnect:// URI schemes
 
 To test:
 1. Launch the app — tap "Create New Identity" on the onboarding screen
 2. The Home tab shows your active profile with npub QR code
 3. Tap profiles in the list to switch active identity
 4. Go to the Scanner tab — grant camera permission when prompted
-5. Visit nostrkey.com/test-qr-codes on another device to get test QR codes
+5. Visit nostrkeep.com/test-qr-codes on another device to get test QR codes
 6. Scan a relay URL QR (wss://relay.damus.io) — the app offers to add it
 7. Scan an npub QR — the app shows the profile view
 8. View the Identity tab for your full npub QR with copy/share actions
@@ -209,17 +209,17 @@ Precedent: This two-product model (browser extension + standalone authenticator)
 ```
 
 ### Contact Information
-- **Website:** https://nostrkey.com
-- **Support URL:** https://nostrkey.com/support.html
-- **Marketing URL:** https://nostrkey.com
+- **Website:** https://nostrkeep.com
+- **Support URL:** https://nostrkeep.com/support.html
+- **Marketing URL:** https://nostrkeep.com
 - **GitHub:** https://github.com/HumanjavaEnterprises/nostrkey.app.ios.src
 
 ## Build & Archive
 
 ### Version
 - `MARKETING_VERSION`: 2.0.0
 - `CURRENT_PROJECT_VERSION`: 1
-- Bundle ID: `com.nostrkey.authenticator`
+- Bundle ID: `com.nostrkeep.signer`
 - Minimum iOS: 17.0
 - Swift: 5.9
 - Xcode: 16.0+
@@ -231,14 +231,14 @@ cd nostrkey.app.ios.src
 xcodegen generate
 
 # 2. Open in Xcode
-open NostrKey.xcodeproj
+open NostrKeepSigner.xcodeproj
 
 # 3. Select signing team in project settings
-#    Xcode → NostrKey target → Signing & Capabilities → Team
+#    Xcode → NostrKeepSigner target → Signing & Capabilities → Team
 
 # 4. Verify entitlements
-#    - App Groups: group.com.nostrkey
-#    - Keychain Sharing: $(AppIdentifierPrefix)group.com.nostrkey
+#    - App Groups: group.com.nostrkeep.signer
+#    - Keychain Sharing: $(AppIdentifierPrefix)group.com.nostrkeep.signer
 
 # 5. Archive
 #    Product → Archive (requires "Any iOS Device" destination)
@@ -250,24 +250,24 @@ open NostrKey.xcodeproj
 ### Archive from command line
 ```bash
 # Archive
-xcodebuild -project NostrKey.xcodeproj \
-    -scheme NostrKey \
+xcodebuild -project NostrKeepSigner.xcodeproj \
+    -scheme NostrKeepSigner \
     -destination 'generic/platform=iOS' \
     -configuration Release \
-    -archivePath build/NostrKey.xcarchive \
+    -archivePath build/NostrKeepSigner.xcarchive \
     archive
 
 # Export for App Store
 xcodebuild -exportArchive \
-    -archivePath build/NostrKey.xcarchive \
+    -archivePath build/NostrKeepSigner.xcarchive \
     -exportOptionsPlist ExportOptions.plist \
     -exportPath build/AppStore
 ```
 
 ## Submission Checklist
 
 - [ ] Apple Developer account active
-- [ ] App Store Connect entry created for "NostrKey" (com.nostrkey.authenticator)
+- [ ] App Store Connect entry created for "NostrKeep Signer" (com.nostrkeep.signer)
 - [ ] Fill out app description, subtitle, keywords
 - [ ] Upload promotional text
 - [ ] Set categories (Utilities + Productivity)
@@ -295,7 +295,7 @@ xcodebuild -exportArchive \
 
 ### If Approved
 - Update README.md with App Store link and badge
-- Update nostrkey.com with iOS authenticator download link
+- Update nostrkeep.com with iOS authenticator download link
 - Add deep link from Safari extension to App Store listing
 - Announce on Nostr
 
@@ -308,5 +308,5 @@ xcodebuild -exportArchive \
 
 ---
 
-*Last updated: March 5, 2026*
+*Last updated: March 9, 2026*
 *Published by Humanjava Enterprises Inc.*

CLAUDE.md

@@ -1,30 +1,30 @@
 # CLAUDE.md — nostrkey.app.ios.src
 
 ## What This Is
-NostrKey iOS app — a native SwiftUI Nostr identity authenticator. QR scanner as primary interface, Secure Enclave key storage, NIP-46 remote signing, Apple Wallet integration, and deep link relay management.
+NostrKeep Signer iOS app — a native SwiftUI Nostr identity authenticator. QR scanner as primary interface, Secure Enclave key storage, NIP-46 remote signing, Apple Wallet integration, and deep link relay management.
 
 ## Architecture (v2 — March 2026 Rebuild)
 Complete rewrite from WebView-wrapper to native SwiftUI. No more bundled browser extension. The app is a standalone authenticator that holds keys and signs on behalf of any Nostr client.
 
-### Source: `NostrKey-v2/`
+### Source: `NostrKeepSigner-v2/`
 ```
-NostrKey-v2/
-├── App/           # SwiftUI app entry, AppState, ContentView, DeepLinkHandler
+NostrKeepSigner-v2/
+├── App/           # SwiftUI app entry (NostrKeepSignerApp.swift), AppState, ContentView, DeepLinkHandler
 ├── Scanner/       # AVFoundation QR camera view
 ├── Identity/      # KeyManager (Secure Enclave), NostrProfile, ProfileManager
 ├── Relay/         # RelayManager, RelayInfo, NIP-11 metadata
 ├── NIP46/         # NIP-46 remote signing session management
 ├── Crypto/        # Bech32, NostrCrypto (nsec/npub encoding), event hashing
-├── UI/            # IdentityCardView, RelayListView, SettingsView
+├── UI/            # IdentityCardView, RelayListView, SettingsView (NostrKeepSignerTheme colors)
 ├── Info.plist     # App config (camera + Face ID permissions, deep link schemes)
-└── NostrKey.entitlements  # App Groups + Keychain sharing
+└── NostrKeepSigner.entitlements  # App Groups + Keychain sharing
 ```
 
-### Legacy Source: `NostrKey/`
-The original WebView-wrapper app (v1.x) is preserved in `NostrKey/` for reference. The v2 project.yml points to `NostrKey-v2/` sources but still uses `NostrKey/Assets.xcassets` for icons.
+### Legacy Source: `NostrKeepSigner/`
+The original WebView-wrapper app (v1.x) is preserved in `NostrKeepSigner/` for reference. The v2 project.yml points to `NostrKeepSigner-v2/` sources but still uses `NostrKeepSigner/Assets.xcassets` for icons.
 
 ## Ecosystem Position
-The authenticator for Nostr. Holds keys in Secure Enclave, signs via NIP-46 for any client. Shares keys with the Safari extension via App Group Keychain (`group.com.nostrkey`).
+The authenticator for Nostr. Holds keys in Secure Enclave, signs via NIP-46 for any client. Shares keys with the Safari extension via App Group Keychain (`group.com.nostrkeep.signer`).
 
 ## Current Version
 v2.0.0 (Build 1) — Native SwiftUI rebuild
@@ -38,19 +38,24 @@ v2.0.0 (Build 1) — Native SwiftUI rebuild
 - URLSessionWebSocketTask (NIP-46 relay communication)
 - XcodeGen for project generation
 
+## Theme
+- Teal (#2dd4bf) on navy (#0f172a)
+- Color names: NostrKeepSignerTheme
+- Bundle ID: `com.nostrkeep.signer`
+
 ## Build
 ```bash
 xcodegen generate
-open NostrKey.xcodeproj
+open NostrKeepSigner.xcodeproj
 # Build & Run in Xcode (requires physical device for camera + Secure Enclave)
 ```
 
 ## Key Architecture Decisions
 - **SwiftUI-only** — no UIKit except for AVCaptureSession (camera requires UIKit)
 - **Secure Enclave via Keychain** — secp256k1 keys stored with biometric access policy
-- **App Group sharing** — `group.com.nostrkey` shared Keychain + UserDefaults
+- **App Group sharing** — `group.com.nostrkeep.signer` shared Keychain + UserDefaults
 - **NIP-46 over WebSocket** — remote signing without key exposure
-- **Deep links** — `nostrkey://add-relay`, `nostrkey://connect`, `nostrconnect://`
+- **Deep links** — `nostrkeepsigner://add-relay`, `nostrkeepsigner://connect`, `nostrconnect://`
 - **No web views** — pure native UI, no embedded browser extension
 
 ## TODO: Before Shipping
@@ -62,13 +67,13 @@ open NostrKey.xcodeproj
 - [ ] App Store screenshots for authenticator flow
 
 ## Deep Link Schemes
-- `nostrkey://add-relay?url=wss://...&name=...&paid=true`
-- `nostrkey://connect?pubkey=...&relay=wss://...`
-- `nostrkey://import-keys?nsec=nsec1...`
-- `nostrkey://wallet-pass?npub=npub1...`
+- `nostrkeepsigner://add-relay?url=wss://...&name=...&paid=true`
+- `nostrkeepsigner://connect?pubkey=...&relay=wss://...`
+- `nostrkeepsigner://import-keys?nsec=nsec1...`
+- `nostrkeepsigner://wallet-pass?npub=npub1...`
 - `nostrconnect://pubkey?relay=wss://...&secret=...`
 
 ## Related Repos
 - `nostrkey.browser.plugin.src` — Safari/Chrome extension (NIP-07)
 - `nostrkey.app.android.src` — Android equivalent
-- `nostrkey.bizdocs.src` — business strategy (see NostrKey-App-Architecture.md)
+- `nostrkey.bizdocs.src` — business strategy (see NostrKeep-Signer-App-Architecture.md)