mirror of
https://github.com/Such-Software/such.software.git
synced 2026-10-17 05:32:05 +02:00
jwinterm
26a2707cf6
Written as working notes from the release window rather than an announcement, and framed as forthcoming: v0.3.0 is cut and in store review, not on anyone's machine, so the post says so instead of implying availability. Built around the design decision rather than the feature list. The interesting part of the Nostr work is not that there is a NIP-07 provider, it is that a signature is a bearer credential and so "remember this site" is a security decision. Hence the three event-kind tiers, and specifically why NIP-98 (27235) had to move to money-tier: the backend mints a full session from one, so leaving it session-grantable let a connected site collect an auth token for the user's own backend under a permission granted for social posts. Enforcement sits in the wallet handler rather than the approval dialog, so the rule survives a hostile UI. Then the federation half, which is what makes smirk-backend-core worth writing about: the wallet no longer assumes api.smirk.cash, which is only a real claim if there is something to point it at. Sourced from the repos, not from a summary: CHANGELOG.md, the tier table in packages/dapp-api/src/nostr-tiers.ts, and smirk-backend-core's README. Both linked repos verified public before publishing. 981 words, about a third shorter than the post it follows.