- Sync now pulls every BTC Map place worldwide (~29k live), not just
Madeira — dropped BTCMAP_CENTER_LAT/LON/RADIUS_KM entirely.
- Incremental via a stored watermark (settings.btcmap_synced_since):
only fetches what changed since the last sync, not the whole dataset
every time. Handles deletions too (BTC Map delistings correctly evict
the local place + cascade its claim/links, not just go unclaimed).
- Real bug caught and fixed before it shipped: tried BTC Map's own
recommended updated_since+limit pagination first, but their timestamps
mix millisecond and whole-second precision, and naive string comparison
across that isn't chronologically safe — silently truncated a real
sync to ~4,000 of ~42,000 records with no error. Measured the
alternative (single unpaginated request) instead: 2-3s for the full
dataset, simpler and actually correct. Full writeup in
services/btcmap.ts, regression test for the specific bug in
services/btcmap.test.ts.
- @fastify/compress added — the places list is now tens of thousands of
rows, gzip/br/zstd auto-negotiated.
- Also fixed while touching dependencies: @fastify/static had a real
high-severity path-traversal/auth-bypass advisory (GHSA-pr96-94w5-mx2h
et al) affecting the version we were pinned to — bumped to the patched
10.1.2.
- Frontend: leaflet.markercluster (raw per-marker rendering doesn't scale
to tens of thousands of points), cyberpunk-themed cluster icons to
match the existing HUD styling, batch marker insertion (addLayers, not
a per-marker addLayer loop) since that's dramatically faster at this
scale. Default map view is now world-scale, recentering on the
player's location if geolocation is available.
- 60 backend tests passing throughout (7 new for the sync rewrite).
- Server: NIP-98 nostr auth (session cookies), BTC Map sync, claim/link/field
routes, physical-presence checks via geolocation distance. 31 tests passing.
- Frontend: Leaflet map, team pick, claim/link UI, Archipelago identity
bridge vendored (nostr-provider.js) for dashboard launch support.
- Verified end-to-end against the live BTC Map API (167 real Madeira places)
and via genuine NIP-98-signed HTTP requests against the built app.
ssmithx