DorianandClaude Fable 5 8eb27ed9b4 fix(security-headers): allow iframe embedding when ARCHY_EMBEDDED=1 ...

secureHeaders() defaulted to X-Frame-Options: SAMEORIGIN, added as part of
the NIP-98/JWT auth hardening. This unconditionally blocked the Archipelago
node dashboard's iframe (a different origin by port) — 1.1.0 never sent
this header at all, so this was a hard regression for the platform's normal
embedded-app UX.

Fix: X-Frame-Options is now conditional on ARCHY_EMBEDDED=1, an env var the
archy manifest sets for the node-installed instance (first-party, trusted
embedding on the same host). Standalone/public-arena instances keep the
default SAMEORIGIN clickjacking protection unchanged.

Verified: with ARCHY_EMBEDDED=1 no X-Frame-Options header is sent; without
it, X-Frame-Options: SAMEORIGIN is still sent as before.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-31 05:38:48 -04:00

.claude

chore: remove duplicated archy skills and redundant hooks

2026-03-15 12:34:16 +00:00

.github/workflows

test: add test infrastructure for frontend and server

2026-03-12 22:30:43 +00:00

bot

feat: full comedy overhaul — voices, narrations, trash talk, commentary

2026-03-07 09:15:41 +00:00

docs

docs(09-05): record cross-instance fighter visibility proof (BOT-03)

2026-07-30 23:35:39 -04:00

e2e

feat(09-02): retire the bare-pubkey session path (BOT-01)

2026-07-30 22:31:26 -04:00

examples/python-bot

security: redact hidden retro combos from all public docs

2026-03-08 14:54:54 +00:00

frontend

docs(prompt): AI-agent consent preamble, operator-only LLM creds (drop ANTHROPIC_API_KEY pattern), accurate queue-join timing — feedback from first real AI agent test

2026-07-30 23:52:18 -04:00

loops

feat: retro mode — arcade combo round with gamepad overlays

2026-03-08 14:13:47 +00:00

server

fix(security-headers): allow iframe embedding when ARCHY_EMBEDDED=1

2026-07-31 05:38:48 -04:00

.dockerignore

test: Docker build and PWA installation verified

2026-03-09 00:38:31 +00:00

.gitignore

chore: add vitest coverage dep and gitignore test artifacts

2026-03-13 12:53:30 +00:00

botfights.db

feat: SSE live fight spectating with spectator count

2026-03-08 19:46:39 +00:00

BOTFIGHTS.md

docs(09-03): consolidate BOTFIGHTS setup docs into one self-contained AI prompt

2026-07-30 22:01:43 -04:00

CLAUDE.md

feat: v5 — boxing poster fight cards, 12-char names, diverse mock bots

2026-03-08 10:33:30 +00:00

deploy.sh

feat: VPS deploy script + Tor hidden service config

2026-03-08 00:29:18 +00:00

docker-compose.arena.yml

docs(prompt): AI-agent consent preamble, operator-only LLM creds (drop ANTHROPIC_API_KEY pattern), accurate queue-join timing — feedback from first real AI agent test

2026-07-30 23:52:18 -04:00

docker-compose.tor.yml

feat: VPS deploy script + Tor hidden service config

2026-03-08 00:29:18 +00:00

docker-compose.yml

feat(09-01): arena-proxy survives SSE, client-IP forwarding, upstream-down

2026-07-30 21:32:57 -04:00

Dockerfile

fix: add non-root user and healthcheck to Dockerfile

2026-03-13 12:37:47 +00:00

eslint.config.js

stuff

2026-04-11 19:46:37 +01:00

nostr-login-implementation.md

chore: add PromptDifficulty type and nostr login planning doc

2026-03-09 14:26:43 +00:00

package.json

feat(09-05): build + push botfights:1.2.0 to the vps2 registry

2026-07-30 23:01:03 -04:00

PLAN.md

feat: betting system — Cashu escrow, Lightning deposit/withdraw, payouts

2026-03-08 00:33:08 +00:00

pnpm-lock.yaml

feat(09-05): build + push botfights:1.2.0 to the vps2 registry

2026-07-30 23:01:03 -04:00

pnpm-workspace.yaml

feat(09-05): build + push botfights:1.2.0 to the vps2 registry

2026-07-30 23:01:03 -04:00

PRODUCTION_READY.md

docs: create PRODUCTION_READY.md — production sign-off document

2026-03-13 12:40:53 +00:00

torrc

feat: VPS deploy script + Tor hidden service config

2026-03-08 00:29:18 +00:00

vitest.workspace.ts

test: add test infrastructure for frontend and server

2026-03-12 22:30:43 +00:00

Zaps.md

docs: Zaps.md — Lightning payment integration plan

2026-03-07 23:38:36 +00:00

S

Description

BotFights — bot competition arena with arcade fighting mode. Main repo (migrated from git.tx1138.com/lfg2025/botfight).

8.9 MiB

Languages

TypeScript 81.6%

Vue 16.7%

JavaScript 1.3%

CSS 0.2%