Merge to Prod

.env.example

@@ -1,53 +1,23 @@
-# Stellar Network Configuration
-NEXT_PUBLIC_STELLAR_NETWORK=testnet
-# Options: testnet, public
-
-# Application Configuration
-NEXT_PUBLIC_APP_URL=http://localhost:3000
-# Your application's public URL
-
-# API Configuration
-NEXT_PUBLIC_API_URL=http://localhost:8000/api
-# Your backend API URL
-
-# WalletConnect Configuration
-NEXT_PUBLIC_WALLET_CONNECT_PROJECT_ID=your_wallet_connect_project_id
-# Get this from https://cloud.walletconnect.com/
-
-# Stellar Horizon URLs (optional - defaults will be used)
-NEXT_PUBLIC_HORIZON_TESTNET_URL=https://horizon-testnet.stellar.org
-NEXT_PUBLIC_HORIZON_PUBLIC_URL=https://horizon.stellar.org
-
-# Application Metadata
-NEXT_PUBLIC_APP_NAME=Boundless
-NEXT_PUBLIC_APP_DESCRIPTION=Stellar-based application
-NEXT_PUBLIC_APP_ICON=/logo.svg
-
-# Development Settings
-NEXT_PUBLIC_DEBUG_MODE=false
-# Enable debug logging for wallet operations
-
-# Feature Flags
-NEXT_PUBLIC_ENABLE_WALLET_CONNECT=true
-NEXT_PUBLIC_ENABLE_MULTI_WALLET=true
-NEXT_PUBLIC_ENABLE_NETWORK_SWITCHING=true
-
-# NextAuth Configuration
-NEXTAUTH_SECRET=your_nextauth_secret_here
-# Generate a random string for this secret
-# You can use: openssl rand -base64 32
-
-NEXTAUTH_URL=http://localhost:3000
-# Your application's public URL (same as NEXT_PUBLIC_APP_URL)
-
-# Google OAuth Configuration
-GOOGLE_CLIENT_ID=your_google_client_id
-# Get this from Google Cloud Console
-
-GOOGLE_CLIENT_SECRET=your_google_client_secret
-# Get this from Google Cloud Console
-
-# Environment
-NODE_ENV=development
-# Options: development, production, test
-
+# Created by Vercel CLI
+GOOGLE_CLIENT_ID=""
+GOOGLE_CLIENT_SECRET="your_google_client_secret"
+NEXTAUTH_SECRET="PiRlq+7IyU5QJuCiVwjiuwZUGCqc/3qw1QPgLOt2AFg="
+NEXTAUTH_URL="http://localhost:3000"
+NEXT_PUBLIC_API_URL="https://stage-api.boundlessfi.xyz/api"
+NEXT_PUBLIC_APP_DESCRIPTION="Stellar-based application"
+NEXT_PUBLIC_APP_ICON="/logo.svg"
+NEXT_PUBLIC_APP_NAME="Boundless"
+NEXT_PUBLIC_APP_URL="http://localhost:3000"
+NEXT_PUBLIC_BETTER_AUTH_URL="https://stage-api.boundlessfi.xyz"
+NEXT_PUBLIC_BOUNDLESS_PLATFORM_ADDRESS=""
+NEXT_PUBLIC_DEBUG_MODE="false"
+NEXT_PUBLIC_ENABLE_MULTI_WALLET="true"
+NEXT_PUBLIC_ENABLE_NETWORK_SWITCHING="true"
+NEXT_PUBLIC_ENABLE_WALLET_CONNECT="true"
+NEXT_PUBLIC_GOOGLE_CLIENT_ID=""
+NEXT_PUBLIC_HORIZON_PUBLIC_URL="https://horizon.stellar.org"
+NEXT_PUBLIC_HORIZON_TESTNET_URL="https://horizon-testnet.stellar.org"
+NEXT_PUBLIC_STELLAR_NETWORK="testnet"
+NEXT_PUBLIC_TRUSTLESS_WORK_API_KEY=""
+NEXT_PUBLIC_WALLET_CONNECT_PROJECT_ID="your_wallet_connect_project_id"
+NODE_ENV="dev"

.github/workflows/ci.yml

@@ -123,7 +123,7 @@ jobs:
         run: |
           echo "🔒 Checking for known vulnerabilities..."
           npm audit --audit-level=moderate --json > audit-report.json
-          if jq -e '.metadata.vulnerabilities.total > 0' audit-report.json; then
+          if jq -e '(.metadata.vulnerabilities.moderate + .metadata.vulnerabilities.high + .metadata.vulnerabilities.critical) > 0' audit-report.json; then
             echo "❌ Found security vulnerabilities. Please fix them before merging."
             cat audit-report.json | jq '.metadata.vulnerabilities'
             exit 1
@@ -158,7 +158,12 @@ jobs:
           while IFS= read -r commit; do
             hash=$(echo "$commit" | cut -d' ' -f1)
             message=$(echo "$commit" | cut -d' ' -f2-)
-
+
+            # Skip git-generated merge commits
+            if echo "$message" | grep -qE "^Merge (branch|pull request|remote-tracking branch|[0-9a-f]{7,40}) "; then
+              continue
+            fi
+
             if ! echo "$message" | grep -qE "$commit_regex"; then
               invalid_commits="$invalid_commits\n$hash: $message"
             fi

.github/workflows/pre-commit-validation.yml

@@ -55,7 +55,11 @@ jobs:
           invalid_commits=""
 
           while IFS= read -r message; do
-            if [ -n "$message" ] && ! echo "$message" | grep -qE "$commit_regex"; then
+            # Skip empty lines and git-generated merge commits
+            if [ -z "$message" ] || echo "$message" | grep -qE "^Merge (branch|pull request|remote-tracking branch|[0-9a-f]{7,40}) "; then
+              continue
+            fi
+            if ! echo "$message" | grep -qE "$commit_regex"; then
               invalid_commits="$invalid_commits\n$message"
             fi
           done <<< "$commits"
@@ -85,7 +89,7 @@ jobs:
           console_log_found=false
 
           for file in $changed_files; do
-            if [[ "$file" =~ \.(ts|tsx|js|jsx)$ ]]; then
+            if [[ "$file" =~ \.(ts|tsx|js|jsx)$ ]] && [ -f "$file" ]; then
               if grep -q "console\.log" "$file"; then
                 echo "❌ Found console.log in $file"
                 console_log_found=true
@@ -115,7 +119,7 @@ jobs:
           todo_found=false
 
           for file in $changed_files; do
-            if [[ "$file" =~ \.(ts|tsx|js|jsx)$ ]]; then
+            if [[ "$file" =~ \.(ts|tsx|js|jsx)$ ]] && [ -f "$file" ]; then
               if grep -q "TODO\|FIXME" "$file"; then
                 echo "⚠️  Found TODO/FIXME in $file"
                 todo_found=true

.husky/pre-push

@@ -8,7 +8,7 @@ echo "🚀 Running pre-push checks..."
 
 # Run security audit
 echo "🔒 Running security audit..."
-npm audit --audit-level=moderate
+npm audit --omit=dev --audit-level=high
 
 # Run build check one more time
 # echo "🏗️ Final build check..."