Release: merge develop into main (89 commits)

.env.example

@@ -10,12 +10,57 @@
 
 # Web
 NEXT_PUBLIC_API_URL=http://localhost:3001
+NEXT_PUBLIC_GOOGLE_AUTH_ENABLED=false
 
 # API
 NODE_ENV=development
 HOST=0.0.0.0
 PORT=3001
 CORS_ORIGIN=http://localhost:3000
+TRUST_PROXY=false
+
+AUTH_JWT_SECRET=replace-with-a-long-random-secret
+AUTH_REFRESH_SECRET=replace-with-a-different-long-random-secret
+AUTH_JWT_ISSUER=hivelore
+AUTH_JWT_AUDIENCE=hivelore-web
+AUTH_ACCESS_TOKEN_TTL_SECONDS=900
+AUTH_REFRESH_TOKEN_TTL_SECONDS=1209600
+AUTH_CHALLENGE_TTL_SECONDS=300
+AUTH_COOKIE_DOMAIN=
+AUTH_COOKIE_SECURE=true
+PROPOSAL_COMMENT_WRITE_RATE_LIMIT_CACHE=10000
+PROPOSAL_COMMENT_WRITE_RATE_LIMIT_MAX=5
+PROPOSAL_COMMENT_WRITE_RATE_LIMIT_WINDOW_SECONDS=60
+HIVE_RPC_URL=https://api.hive.blog
+HIVE_AUTH_AUDIENCE=hivelore-local-api
+HIVE_MAINNET_CHAIN_ID=beeab0de00000000000000000000000000000000000000000000000000000000
+HIVE_MAINNET_RPC_NODES=https://api.hive.blog
+HIVE_MAINNET_HAF_URL=https://api.hive.blog/hafbe-api
+HIVE_BROADCAST_MAX_ATTEMPTS=4
+HIVE_BROADCAST_INITIAL_DELAY_MS=500
+HIVE_BROADCAST_MAX_DELAY_MS=5000
+HIVE_BROADCAST_BACKOFF_MULTIPLIER=2
+HIVE_BROADCAST_JITTER_RATIO=0.2
+HIVE_BROADCAST_TIMEOUT_MS=10000
+HIVE_BROADCAST_TOTAL_DEADLINE_MS=90000
+HIVE_CONFIRMATION_POLL_INTERVAL_MS=3000
+HIVE_CONFIRMATION_TIMEOUT_MS=60000
+HIVE_NODE_MAX_CONSECUTIVE_FAILURES=1
+HIVE_NODE_COOLDOWN_MS=30000
+
+# Local-only irreversible Hive mainnet smoke command inputs.
+# Set these only in your local shell when running the smoke script; never commit real keys.
+HIVE_SMOKE_ACCOUNT=
+
+GOOGLE_AUTH_ENABLED=false
+GOOGLE_CLIENT_ID=
+GOOGLE_CLIENT_SECRET=
+GOOGLE_REDIRECT_URI=http://localhost:3001/auth/google/callback
+
+GOOGLE_HIVE_PROVISIONING_ENABLED=false
+HIVE_RC_DELEGATION_ENABLED=false
+HIVE_RC_DELEGATOR_ACCOUNT=
+HIVE_RC_DELEGATION_AMOUNT=
 
 # PostgreSQL application connection through the Supabase pooler.
 DATABASE_URL="postgresql://USER:PASSWORD@POOLER_HOST:6543/postgres?pgbouncer=true"

.github/workflows/ci.yml

@@ -12,13 +12,28 @@ permissions:
 env:
   CI: true
   NEXT_PUBLIC_API_URL: http://localhost:3001
-  DATABASE_URL: postgresql://USER:PASSWORD@POOLER_HOST:6543/postgres?pgbouncer=true
-  DIRECT_URL: postgresql://USER:PASSWORD@DIRECT_HOST:5432/postgres
+  DATABASE_URL: postgresql://postgres:postgres@127.0.0.1:5432/postgres
+  DIRECT_URL: postgresql://postgres:postgres@127.0.0.1:5432/postgres
 
 jobs:
   quality:
     name: Quality
     runs-on: ubuntu-latest
+    timeout-minutes: 20
+    services:
+      postgres:
+        image: postgres:16
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: postgres
+          POSTGRES_DB: postgres
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U postgres -d postgres"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
 
     steps:
       - name: Checkout
@@ -33,9 +48,6 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
-      - name: Check formatting
-        run: npm run format:check
-
       - name: Format Prisma schema
         run: npm run db:format
 
@@ -45,11 +57,37 @@ jobs:
       - name: Generate Prisma Client
         run: npm run db:generate
 
-      - name: Lint
-        run: npm run lint
+      - name: Check fresh PostgreSQL migrations
+        run: npm run db:migrate:check:fresh
+        env:
+          TEST_DATABASE_ADMIN_URL: postgresql://postgres:postgres@127.0.0.1:5432/postgres
+
+      - name: Check PostgreSQL migration upgrade from develop
+        run: |
+          git fetch origin develop --depth=1
+          mkdir -p /tmp/hivelore-develop
+          git archive origin/develop apps/api/prisma | tar -x -C /tmp/hivelore-develop
+          npm run db:migrate:check:upgrade
+        env:
+          TEST_DATABASE_ADMIN_URL: postgresql://postgres:postgres@127.0.0.1:5432/postgres
+          TEST_DATABASE_BASE_PRISMA_SCHEMA: /tmp/hivelore-develop/apps/api/prisma/schema.prisma
 
       - name: Type-check
         run: npm run typecheck
 
+      - name: Test
+        run: npm test
+        env:
+          NODE_ENV: test
+          AUTH_JWT_SECRET: test-only-jwt-secret-with-enough-entropy
+          AUTH_REFRESH_SECRET: test-only-refresh-secret-with-enough-entropy
+          TEST_DATABASE_ADMIN_URL: postgresql://postgres:postgres@127.0.0.1:5432/postgres
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Check formatting
+        run: npm run format:check
+
       - name: Build
         run: npm run build

.gitignore

@@ -40,6 +40,7 @@ build/Release
 # Dependency directories
 node_modules/
 jspm_packages/
+.worktrees/
 
 # Snowpack dependency directory (https://snowpack.dev/)
 web_modules/

.prettierignore

@@ -1,4 +1,5 @@
 node_modules
+.worktrees
 .next
 dist
 coverage