DorianandClaude Opus 4.6 3ba05a66b4 feat: NIP-98 + JWT authentication with signer support ...

Replace insecure raw-pubkey auth with cryptographic NIP-98 signed
requests and server-issued JWT sessions. Logout now fully clears
all state including nsec. Add yellow "Use Nostr Signer" button
for Amber/NIP-07 remote signers.

- Server: JWT middleware (HMAC-SHA256, 24h expiry), NIP-98 verification
- Server: POST /api/auth/nostr/session endpoint
- Frontend: NIP-98 token builder + authFetch wrapper with JWT Bearer
- Frontend: All authenticated API calls use authFetch
- Security: logout clears JWT, pubkey, bot, nsec, and profile pic

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-09 12:31:25 +00:00

.claude

feat: SSE live fight spectating with spectator count

2026-03-08 19:46:39 +00:00

.github/workflows

feat: add CI workflow, lifecycle integration tests, and mark completed plan items

2026-03-09 07:53:40 +00:00

bot

feat: full comedy overhaul — voices, narrations, trash talk, commentary

2026-03-07 09:15:41 +00:00

docs

security: redact hidden retro combos from all public docs

2026-03-08 14:54:54 +00:00

examples/python-bot

security: redact hidden retro combos from all public docs

2026-03-08 14:54:54 +00:00

frontend

feat: NIP-98 + JWT authentication with signer support

2026-03-09 12:31:25 +00:00

loops

feat: retro mode — arcade combo round with gamepad overlays

2026-03-08 14:13:47 +00:00

server

feat: NIP-98 + JWT authentication with signer support

2026-03-09 12:31:25 +00:00

.dockerignore

test: Docker build and PWA installation verified

2026-03-09 00:38:31 +00:00

.gitignore

chore: harden .gitignore for secrets and credentials

2026-03-09 07:33:56 +00:00

BOT_SETUP.md

security: redact hidden retro combos from all public docs

2026-03-08 14:54:54 +00:00

botfights.db

feat: SSE live fight spectating with spectator count

2026-03-08 19:46:39 +00:00

CLAUDE.md

feat: v5 — boxing poster fight cards, 12-char names, diverse mock bots

2026-03-08 10:33:30 +00:00

deploy.sh

feat: VPS deploy script + Tor hidden service config

2026-03-08 00:29:18 +00:00

docker-compose.tor.yml

feat: VPS deploy script + Tor hidden service config

2026-03-08 00:29:18 +00:00

docker-compose.yml

fix: add cache-bust build arg to force Docker rebuild on deploy

2026-03-09 08:38:02 +00:00

Dockerfile

fix: add cache-bust build arg to force Docker rebuild on deploy

2026-03-09 08:38:02 +00:00

eslint.config.js

fix: exclude config files from eslint project service parsing

2026-03-09 08:55:26 +00:00

package.json

chore: add ESLint with no-floating-promises and no-console rules

2026-03-09 07:47:43 +00:00

PLAN.md

feat: betting system — Cashu escrow, Lightning deposit/withdraw, payouts

2026-03-08 00:33:08 +00:00

pnpm-lock.yaml

fix: resolve all dependency audit vulnerabilities

2026-03-09 08:54:31 +00:00

pnpm-workspace.yaml

fix: move dependency overrides to pnpm-workspace.yaml

2026-03-09 09:15:40 +00:00

torrc

feat: VPS deploy script + Tor hidden service config

2026-03-08 00:29:18 +00:00

Zaps.md

docs: Zaps.md — Lightning payment integration plan

2026-03-07 23:38:36 +00:00

S

Description

BotFights — bot competition arena with arcade fighting mode. Main repo (migrated from git.tx1138.com/lfg2025/botfight).

8.9 MiB

Languages

TypeScript 81.6%

Vue 16.7%

JavaScript 1.3%

CSS 0.2%