Replit Agent 99ede5792e fix(#26): tighten token handling and verify API contract ...

- resolveNostrPubkey() now returns { pubkey, rejected } instead of string|null
  so invalid/expired tokens return 401 instead of silently falling to anonymous
- POST /sessions and POST /jobs: return 401 if nostr_token header/body is
  present but invalid or expired
- POST /identity/verify: now accepts optional top-level 'pubkey' field alongside
  'event'; asserts pubkey matches event.pubkey if both are provided — aligns
  API contract with { pubkey, event } spec shape and hardens against mismatch

2026-03-19 16:15:55 +00:00

..

.replit-artifact

fix: set artifact previewPath to / so landing page and /tower route in production

2026-03-19 14:15:13 +00:00

src

fix(#26): tighten token handling and verify API contract

2026-03-19 16:15:55 +00:00

build.ts

Add more dependencies to the API server build process

2026-03-18 17:12:00 +00:00

package.json

feat(#26): Nostr identity + trust engine

2026-03-19 15:59:14 +00:00

tsconfig.json

Add AI agent capabilities and integrate with Anthropic and LNbits

2026-03-18 14:59:02 +00:00