Smahbros
Smash Bros tournament bracket platform.
Project structure
Smahbros/
├── api.py ← FastAPI app entrypoint (lifespan startup, migrations, WebSocket routes)
├── database.py ← SQLAlchemy models
├── auth.py ← JWT auth helpers
├── routers/ ← One file per API resource (auth, brackets, matches, draft, …)
├── migrations.py ← _run_migrations() — ADD COLUMN IF NOT EXISTS style, no Alembic
└── web/ ← Frontend (Next.js 16 / React 19)
├── app/ ← Next.js app being migrated *to* — routes, components, lib/api.ts
└── public/ ← Legacy vanilla HTML/CSS/JS pages being migrated *from*
(still live; served statically alongside web/app)
See CLAUDE.md for the fuller architecture/conventions reference.
Deployment
| Layer | Where |
|---|
Backend API (api.py) | Render — smash-bracket-api.onrender.com |
Frontend (web/) | Vercel — bracket-self.vercel.app |
| Database | Supabase (PostgreSQL) in prod, SQLite locally |
| Character images | Supabase Storage bucket Characters |
Backend deploys manually via the Render dashboard or render.yaml. Frontend auto-deploys on push via Vercel.
Local development
Backend
pip install -r requirements.txt
SECRET_KEY=<any-string> DATABASE_URL=sqlite:///./smash.db uvicorn api:app --reload --port 8850
DATABASE_URL defaults to sqlite:///./smash.db if unset. Never commit that file — it's local-only.
Frontend
cd web
npm install
npm run dev -- -p 8851
For a fully isolated local stack (scratch DB, ports 8850/8851, temporarily re-pointing API_BASE/WS_ORIGIN at 127.0.0.1:8850 instead of production) see the Working Conventions section in CLAUDE.md — this is the pattern used to verify every change before it's called done.
Environment variables
| Variable | Where | Notes |
|---|
SECRET_KEY | backend | JWT signing key |
DATABASE_URL | backend | postgresql://… in prod (Supabase), sqlite:///./smash.db locally |
