Some checks failed
morphit-release / Build + publish release tarball (push) Has been cancelled
Bundles the post-beta.28 work: - Keystore/2FA hardening: changePassword no longer drops the YubiKey wrap; CEK_NONCE_BYTES 12->24 (the broken layered/hardware-key write path); first automated 2FA round-trip coverage (enroll->unlock, TOTP enroll/verify/survives password change). - YubiKey transport: full five-defect diagnosis written into transport.ts, plus a fail-closed enrollment-verification gate (verifyYubikeyChallengeResponse / buildVerifiedYubikeyWrap) so a broken transport can't commit a constant/zero-entropy 2FA factor. Transport itself unchanged (hardware-gated). - Post-beta.28 UI/operator batch: AGPL-3.0 FAQ article (10 locales), two-slot i2p, blurtwallet-matching voting power, RPC-list best-first sort + refresh, service-worker cache + desktop update-snackbar fixes, ops-cli alt-network Tor-wipe fix, and the rest of the 14-task batch. Version bumped at all 19 touchpoints; package-lock synced; RELEASE-NOTES added. Gates green; beta -> Forgejo only.
35 lines
766 B
JSON
35 lines
766 B
JSON
{
|
|
"name": "morphit",
|
|
"version": "1.0.0-beta.29",
|
|
"private": true,
|
|
"description": "Morphit — non-custodial, no-KYC P2P fiat↔BTC/XMR/BLURT marketplace",
|
|
"license": "AGPL-3.0-only",
|
|
"workspaces": [
|
|
"apps/web",
|
|
"apps/relay",
|
|
"apps/indexer",
|
|
"apps/ops-cli",
|
|
"apps/matrix-bot",
|
|
"apps/mcp-server",
|
|
"packages/indexer-client",
|
|
"packages/relay-client",
|
|
"packages/operator-config",
|
|
"packages/asset-registry",
|
|
"packages/release-schema",
|
|
"packages/net-defense",
|
|
"packages/rpc-pool"
|
|
],
|
|
"engines": {
|
|
"node": ">=22.0.0"
|
|
},
|
|
"scripts": {
|
|
"typecheck": "npm run typecheck --workspaces --if-present",
|
|
"test": "npm run test --workspaces --if-present"
|
|
},
|
|
"dependencies": {
|
|
"jsdom": "^29.1.1"
|
|
},
|
|
"overrides": {
|
|
"undici": "^7.28.0"
|
|
}
|
|
}
|