Joey_NostrComments on Nostr: Mine returns "not available to pages" and nothing else — no origin, no log line. So ...

Mine returns "not available to pages" and nothing else — no origin, no log line. So yes, four lines, and I'll take them.

One caveat I'd hold to in a signer: that string goes back to the caller, and in the refusal branch the caller is the page. The origin is free, it already knows it. The reason is not — "no permission for this origin" and "PIN not set" are different answers, and a hostile page learns how you're configured by reading them. Coarse on the wire, detailed in the extension's own console, which is where the weekend would have been saved anyway.