Commit Graph - pwap - Gitea: Git with a cup of tea

pezkuwichain/pwap

Fork 0

mirror of https://github.com/pezkuwichain/pwap.git synced 2026-10-20 18:56:16 +00:00

Commit Graph

Select branches

Hide Pull Requests

audit-remediation

chore/remove-mobile-subdir

ci/backend-deploy-guard

ci/extend-deploy-approval-window

db/baseline-schema

dependabot/github_actions/actions-e2a3053e32

dependabot/npm_and_yarn/multi-e35c97b5b1

dependabot/npm_and_yarn/web/source-map-js-1.2.2

feat/2fa-login-gate

feat/adopt-cloud-functions

feat/pez-20-badge

feat/unified-p2p-identity

feature/multisig-signing-portal

fix/audit-gate-prod-only

fix/function-authorization

fix/mobile-wallet-message-signature

fix/pex-rebrand-and-submodule-update

fix/remove-dead-email-verification

fix/repair-missing-db-functions

main

#1

#10

#11

#12

#13

#14

#15

#16

#17

#18

#19

#2

#20

#21

#22

#23

#24

#25

#26

#27

#28

#29

#3

#30

#31

#32

#33

#34

#35

#36

#37

#38

#39

#39/merge

#4

#40

#41

#42

#43

#44

#45

#46

#47

#48

#49

#49/merge

#5

#50

#50/merge

#51

#52

#53

#54

#55

#55/merge

#56

#57

#58

#59

#6

#7

#8

#9

ac730481d9 chore(dex): remove the XCM configuration wizard (#59) main SatoshiQaziMuhammed 2026-10-19 20:46:13 +04:00
b778493eaa docs(readme): point related repositories at pezkuwi-apps and pezkuwi-explorer (#58) SatoshiQaziMuhammed 2026-10-19 13:05:46 +04:00
a20ea4584b Replace the Events tile with KurdAI and point Loto at games.pex.mom (#57) SatoshiQaziMuhammed 2026-10-18 07:45:26 +04:00
d693b2a03a Apply npm audit fix within semver ranges in web and sign (#56) SatoshiQaziMuhammed 2026-10-16 09:04:15 +04:00
2c6f3d00f8 ci: bump the actions group across 1 directory with 11 updates dependabot/github_actions/actions-e2a3053e32 dependabot[bot] 2026-10-09 03:24:27 +00:00
c57e7e0ef4 web: make the typecheck a real gate, held to a ratchet (#54) SatoshiQaziMuhammed 2026-10-09 07:18:26 +04:00
b6c2ce3470 Node 24, and stop pointing at the mobile app that left the repository (#53) SatoshiQaziMuhammed 2026-10-09 07:15:39 +04:00
44f8e3d418 ci: let Dependabot keep the pinned workflow actions current (#52) SatoshiQaziMuhammed 2026-10-09 07:12:54 +04:00
3ba40d4e52 Deploy over pinned, single-purpose keys from GitHub-hosted runners (#51) SatoshiQaziMuhammed 2026-10-09 04:11:51 +04:00
6fdebc9e50 chore(deps): bump shell-quote and concurrently dependabot/npm_and_yarn/multi-e35c97b5b1 dependabot[bot] 2026-10-08 21:35:37 +00:00
1cd33482db chore(deps): bump source-map-js from 1.2.1 to 1.2.2 in /web dependabot/npm_and_yarn/web/source-map-js-1.2.2 dependabot[bot] 2026-10-08 21:35:36 +00:00
b09af9bfbd Move to the fixed crypto stack and patched dependencies; run quality CI on hosted runners (#47) SatoshiQaziMuhammed 2026-10-09 01:34:14 +04:00
3c5970b711 Accept the mobile wallet's message signature in identity auth fix/mobile-wallet-message-signature Satoshi Qazi Muhammed 2026-10-01 17:03:18 +04:00
74db90a5d4 Send the Rewshenbir button to rewshenbir.pezkiwi.app (#38) SatoshiQaziMuhammed 2026-10-01 15:53:08 +04:00
772cb72c73 Serve the whitepaper from one place, and stop cloning what cannot be cloned SatoshiQaziMuhammed 2026-09-04 03:25:35 +04:00
b289bbc0ae ops: make the drift check see rulesets, not just branch protection (#36) SatoshiQaziMuhammed 2026-08-01 21:04:26 -07:00
39b71a428e ci: make the approval notification able to fail (#35) SatoshiQaziMuhammed 2026-08-01 19:39:11 -07:00
78fd8b0514 ops: stop requiring an approval that nobody can give (#34) SatoshiQaziMuhammed 2026-08-01 10:31:51 -07:00
338472629d fix(auth): put the captcha challenge where the user is looking (#33) SatoshiQaziMuhammed 2026-08-01 06:16:44 -07:00
c26eeee12c feat(auth): require a captcha on the endpoints that send mail (#32) SatoshiQaziMuhammed 2026-08-01 03:45:51 -07:00
35884cb8c9 ci: put the approve button back in Telegram (#31) SatoshiQaziMuhammed 2026-08-01 02:30:20 -07:00
7c9fbfb4b2 ci: one approval per deploy, not two (#30) SatoshiQaziMuhammed 2026-08-01 00:55:13 -07:00
f9d784f3de Merge pull request #29 from pezkuwichain/feat/2fa-login-gate SatoshiQaziMuhammed 2026-07-31 23:07:22 -07:00
e8dd9f6c99 feat(auth): actually ask for 2FA at login feat/2fa-login-gate Satoshi Qazi Muhammed 2026-07-31 22:02:40 -07:00
a3fde0dc9d Merge pull request #28 from pezkuwichain/db/baseline-schema SatoshiQaziMuhammed 2026-07-31 20:26:56 -07:00
cec1dcf9be Merge pull request #27 from pezkuwichain/fix/remove-dead-email-verification SatoshiQaziMuhammed 2026-07-31 20:26:51 -07:00
e18ba679be db: replace the migration history with a baseline of the live schema db/baseline-schema Satoshi Qazi Muhammed 2026-07-31 18:49:59 -07:00
c0e1326c4b fix(security): remove the dead email-verification function fix/remove-dead-email-verification Satoshi Qazi Muhammed 2026-07-31 11:04:13 -07:00
b20cfc84ef Merge pull request #26 from pezkuwichain/ci/extend-deploy-approval-window SatoshiQaziMuhammed 2026-07-31 07:27:48 -07:00
7482421f3d ops: capture branch protection and the deploy environment as code ci/extend-deploy-approval-window Satoshi Qazi Muhammed 2026-07-31 02:07:21 -07:00
e4abb38757 ci: gate deploys on a GitHub Environment instead of a hand-rolled wait loop Satoshi Qazi Muhammed 2026-07-30 18:36:12 -07:00
6b368d9735 ci: widen the deploy approval window from 30 minutes to 6 hours Satoshi Qazi Muhammed 2026-07-30 16:23:38 -07:00
c4b22d0a14 Merge pull request #25 from pezkuwichain/fix/repair-missing-db-functions SatoshiQaziMuhammed 2026-07-30 14:56:21 -07:00
658c99b9bb fix(db): repair functions their migrations recorded but never created fix/repair-missing-db-functions Satoshi Qazi Muhammed 2026-07-30 09:16:01 -07:00
e95907ec87 Merge pull request #24 from pezkuwichain/fix/function-authorization SatoshiQaziMuhammed 2026-07-30 04:25:26 -07:00
0fe8c85dfe fix(security): identify the caller from their token, not the request body fix/function-authorization Satoshi Qazi Muhammed 2026-07-30 04:05:03 -07:00
46669aa72d Merge pull request #23 from pezkuwichain/feat/adopt-cloud-functions SatoshiQaziMuhammed 2026-07-30 02:40:23 -07:00
dc8533d707 feat(supabase): adopt two-factor-auth, notifications-manager, email-verification feat/adopt-cloud-functions Satoshi Qazi Muhammed 2026-07-30 02:17:29 -07:00
8cc3935b91 Merge pull request #22 from pezkuwichain/ci/backend-deploy-guard SatoshiQaziMuhammed 2026-07-30 02:05:16 -07:00
9e10eee977 Merge remote-tracking branch 'origin/main' into ci/backend-deploy-guard ci/backend-deploy-guard Satoshi Qazi Muhammed 2026-07-30 00:45:09 -07:00
08fd9d2b34 i18n(ar,ckb,fa,kmr): complete multisig operations and bridge withdrawal copy Satoshi Qazi Muhammed 2026-07-29 20:34:46 -07:00
cff5ae8032 fix(social): point KurdMedia links at the canonical accounts Satoshi Qazi Muhammed 2026-07-29 20:26:00 -07:00
c117b023b1 feat(wallet): surface multisig operations shortcut to bridge signatories Satoshi Qazi Muhammed 2026-07-29 20:26:00 -07:00
88f1eb7245 chore(images): drop unused assets, recompress HEZ token logo Satoshi Qazi Muhammed 2026-07-29 20:24:52 -07:00
ee384064c1 i18n(en,tr): add multisig operations strings, correct bridge withdrawal copy Satoshi Qazi Muhammed 2026-07-29 20:24:51 -07:00
30cca41d37 ci(supabase): deploy edge functions through the ownership gate Satoshi Qazi Muhammed 2026-07-29 20:22:03 -07:00
bb0b7d4183 Merge pull request #21 from pezkuwichain/ci/backend-deploy-guard SatoshiQaziMuhammed 2026-07-25 21:26:56 -07:00
90f94df24b ci: make backend indexer deploy self-contained + config-gated Satoshi Qazi Muhammed 2026-07-25 20:57:56 -07:00
3d786f47d3 Merge pull request #20 from pezkuwichain/audit-remediation SatoshiQaziMuhammed 2026-07-25 18:30:22 -07:00
85b2c48025 ci: automated Telegram-gated Supabase deploy (edge functions + migrations) audit-remediation Satoshi Qazi Muhammed 2026-07-25 17:53:31 -07:00
193ef34c3e ci: exclude Deno supabase tests from vitest sweep Satoshi Qazi Muhammed 2026-07-25 16:50:13 -07:00
5cf55aecbf ci: exclude Deno edge functions and migration tests from web eslint Satoshi Qazi Muhammed 2026-07-25 16:30:01 -07:00
3c7c4192b9 docs(backend): track backend deploy runbook (gitignored *.md override) Satoshi Qazi Muhammed 2026-07-25 11:02:16 -07:00
80d273ff11 ci/cd(backend): offline test suite + Dockerize + audit-grade deploy (b + c) Satoshi Qazi Muhammed 2026-07-25 11:01:47 -07:00
20a5602167 test(p2p): DB-backed proof of financial RLS + escrow REVOKE enforcement Satoshi Qazi Muhammed 2026-07-25 10:20:38 -07:00
cd9bc577ae test(p2p): DB-backed proof of the trade fund-routing freeze trigger (BYPASS #1) Satoshi Qazi Muhammed 2026-07-25 10:15:28 -07:00
a0492a41ac docs(p2p): track the security deploy runbook (ordered migrations, edge functions, secret names) Satoshi Qazi Muhammed 2026-07-25 02:46:40 -07:00
25ed29edcb security(p2p): freeze trade/offer fund-routing columns + atomic release (2 verify-found bypasses) + tests Satoshi Qazi Muhammed 2026-07-25 02:44:02 -07:00
165cb47c64 security(p2p): close escrow-RPC anon-drain (release/lock behind signed edge functions) Satoshi Qazi Muhammed 2026-07-25 00:21:20 -07:00
a8f41cd47f security(p2p): fix withdrawal BOLA, financial RLS exposure, admin dispute escrow Satoshi Qazi Muhammed 2026-07-25 00:09:03 -07:00
27b4057bd4 chore(ci/build): typecheck gate, npm ci, backend CI, dep+vuln fixes, hygiene Satoshi Qazi Muhammed 2026-07-24 23:43:37 -07:00
1c6ff3d578 fix(web): correct asset IDs/decimals + chain routing, string-BigInt amounts, presale signer Satoshi Qazi Muhammed 2026-07-24 22:55:54 -07:00
686eecc09e fix(web): repair 6 dead internal links + harden forum markdown against stored XSS Satoshi Qazi Muhammed 2026-07-24 22:43:30 -07:00
0651b80eb7 fix: sync renewal topup with the live bridge config (10K -> 200K wUSDT) Satoshi Qazi Muhammed 2026-07-19 01:48:13 -07:00
dd58fe9164 Add multisig pending-operations UI, fix broken multisig address calc, new signing portal feature/multisig-signing-portal Satoshi Qazi Muhammed 2026-07-14 07:19:34 -07:00
fe3c65a706 governance: redesign Assembly into on-chain parliament landing (6 languages) Satoshi Qazi Muhammed 2026-06-30 23:27:19 -07:00
ed07878646 fix(auth): make password reset work via Supabase native recovery flow (#19) SatoshiQaziMuhammed 2026-06-24 16:58:12 -07:00
7dddae633a identity: remove unused issueDate const (lint fix) Satoshi Qazi Muhammed 2026-06-20 18:28:38 -07:00
a92d61db8a identity: redesign e-ID + passport to match the Digital Kurdistan brand Satoshi Qazi Muhammed 2026-06-20 17:53:56 -07:00
6e55418703 assets: add pezkuwi-global-union image (for upcoming Global Union surface) Satoshi Qazi Muhammed 2026-06-20 06:35:35 -07:00
56b442fdff chore(web): drop dead bundled docs — app uses external docs.pezkuwichain.io Satoshi Qazi Muhammed 2026-06-20 06:05:51 -07:00
35d7ab38fa i18n: translate the P2P/Buy-Sell nav label per language Satoshi Qazi Muhammed 2026-06-20 05:57:19 -07:00
070d682759 feat(p2p): rename Finance tile to P2P/Buy-Sell + add 'Buy with Visa' nav action Satoshi Qazi Muhammed 2026-06-19 17:37:14 -07:00
cd56ab8fb6 feat(social): replace Help tile with Loto (Newroz) → loto.pex.mom Satoshi Qazi Muhammed 2026-06-19 17:32:57 -07:00
b012fcaaac fix(security): patch ws (high DoS) and dompurify (XSS) via npm audit fix Satoshi Qazi Muhammed 2026-06-15 18:07:37 -07:00
7a1d3e7917 feat(social): wire DKS Rojname → news.pex.mom and Events → kurdishtts.pezkiwi.app Satoshi Qazi Muhammed 2026-06-15 17:54:19 -07:00
2ee3caac0d fix(ci): audit only production deps in the deploy gate (--omit=dev) (#18) SatoshiQaziMuhammed 2026-06-12 23:39:55 -07:00
51eecf9e08 fix(ci): audit only production deps in the deploy gate (--omit=dev) fix/audit-gate-prod-only Satoshi Qazi Muhammed 2026-06-12 23:39:38 -07:00
78e93e9766 feat(web): PEZ-20 badge on PEZ & USDT balance cards (#17) SatoshiQaziMuhammed 2026-06-12 23:28:05 -07:00
920ddbf065 feat(web): PEZ-20 badge on PEZ and USDT balance cards feat/pez-20-badge Satoshi Qazi Muhammed 2026-06-12 21:34:49 -07:00
83d66feacc fix(ci): unblock deploy pipeline (audit gate + orphan submodule) (#16) SatoshiQaziMuhammed 2026-06-11 18:42:45 -07:00
a9786b2e70 fix(ci): unblock deploy pipeline (audit gate + orphan submodule) Satoshi Qazi Muhammed 2026-06-11 18:41:54 -07:00
d6ace14e70 fix(web): live collator/nominator counts after AHM + reliable B2B redirect (#15) SatoshiQaziMuhammed 2026-06-11 16:41:14 -07:00
2cbfd21539 fix(cosign): explicit GHCR login before sign + verify Kurdistan Tech Ministry 2026-05-09 13:41:29 +03:00
f7c070e45b fix(deps): drop invalid create-ecdh override (max version is 4.x not 5.x) Kurdistan Tech Ministry 2026-05-09 12:27:07 +03:00
06ed9734c6 ci(security): Faz 3 + ekstra — runner consolidation, auto-rollback, cosign, SRI, dep cleanup Kurdistan Tech Ministry 2026-05-09 12:08:49 +03:00
d93d4c6cd0 fix(docker): correct dist path after WORKDIR=/build/web Kurdistan Tech Ministry 2026-05-08 21:39:07 +03:00
faba2dee5d fix(docker): build context = pwap root so shared/ is reachable Kurdistan Tech Ministry 2026-05-08 20:44:19 +03:00
ca3976fe62 ci(security): Faz 1+2 — Telegram CEO gate, image-based deploy, hardened audits Kurdistan Tech Ministry 2026-05-08 20:32:48 +03:00
7fea37eb5d ci(deploy): allow workflow_dispatch to trigger deploy jobs Kurdistan Tech Ministry 2026-05-08 15:06:19 +03:00
68379dcf3a ci(deploy): mirror web build to pex.mom for geo-redundancy Kurdistan Tech Ministry 2026-05-08 14:07:35 +03:00
56f276af1b fix(wallet): add 20s timeout to web3Enable to prevent indefinite hang Kurdistan Tech Ministry 2026-05-05 13:12:36 +03:00
f024d21cf5 fix(wallet-modal): add loading state for extension connect, fix Play Store link Kurdistan Tech Ministry 2026-05-05 08:28:52 +03:00
67bc28cff4 docs(readme): fix exchange URL to pex.network, add pex.mom as alt website Kurdistan Tech Ministry 2026-05-04 00:36:26 +03:00
d7fa9dd570 docs(readme): update URLs to app.pezkuwichain.io, pex.mom, docs.pezkuwichain.io Kurdistan Tech Ministry 2026-05-04 00:34:22 +03:00
428b058cbc chore: add res/ to .gitignore (internal-only resources) Kurdistan Tech Ministry 2026-05-04 00:28:44 +03:00
0b5e318538 fix(deps): npm audit fix — patch 14 high/moderate vulnerabilities in web/ Kurdistan Tech MinistryandClaude Sonnet 4.6 2026-05-04 00:16:27 +03:00
568507ab98 chore: remove leftover dev artifacts (screenshots, Zone.Identifier, PS1 script, PDFs) Kurdistan Tech MinistryandClaude Sonnet 4.6 2026-05-04 00:08:25 +03:00
198f53b96f fix(config): point production WS endpoint to rpc.pezkuwichain.io Kurdistan Tech Ministry 2026-05-03 02:00:40 +03:00
9babb94e07 fix(auth): add pexsecBot for Telegram login on app.pezkuwichain.io Kurdistan Tech Ministry 2026-05-01 23:32:25 +03:00

1 2 3 4 5 ...