morphit/package.json
Morphit Team 5199375ae9
Some checks failed
morphit-release / Build + publish release tarball (push) Has been cancelled
Release v1.0.0-beta.29
Bundles the post-beta.28 work:
- Keystore/2FA hardening: changePassword no longer drops the YubiKey wrap;
  CEK_NONCE_BYTES 12->24 (the broken layered/hardware-key write path); first
  automated 2FA round-trip coverage (enroll->unlock, TOTP enroll/verify/survives
  password change).
- YubiKey transport: full five-defect diagnosis written into transport.ts, plus a
  fail-closed enrollment-verification gate (verifyYubikeyChallengeResponse /
  buildVerifiedYubikeyWrap) so a broken transport can't commit a constant/zero-entropy
  2FA factor. Transport itself unchanged (hardware-gated).
- Post-beta.28 UI/operator batch: AGPL-3.0 FAQ article (10 locales), two-slot i2p,
  blurtwallet-matching voting power, RPC-list best-first sort + refresh, service-worker
  cache + desktop update-snackbar fixes, ops-cli alt-network Tor-wipe fix, and the
  rest of the 14-task batch.

Version bumped at all 19 touchpoints; package-lock synced; RELEASE-NOTES added.
Gates green; beta -> Forgejo only.
2026-06-23 20:11:14 -07:00

35 lines
766 B
JSON

{
"name": "morphit",
"version": "1.0.0-beta.29",
"private": true,
"description": "Morphit — non-custodial, no-KYC P2P fiat↔BTC/XMR/BLURT marketplace",
"license": "AGPL-3.0-only",
"workspaces": [
"apps/web",
"apps/relay",
"apps/indexer",
"apps/ops-cli",
"apps/matrix-bot",
"apps/mcp-server",
"packages/indexer-client",
"packages/relay-client",
"packages/operator-config",
"packages/asset-registry",
"packages/release-schema",
"packages/net-defense",
"packages/rpc-pool"
],
"engines": {
"node": ">=22.0.0"
},
"scripts": {
"typecheck": "npm run typecheck --workspaces --if-present",
"test": "npm run test --workspaces --if-present"
},
"dependencies": {
"jsdom": "^29.1.1"
},
"overrides": {
"undici": "^7.28.0"
}
}