🐛 app: avoid chain mismatch on bridge transfer

.changeset/bold-ram-dig.md

@@ -0,0 +1,5 @@
+---
+"@exactly/mobile": patch
+---
+
+♻️ flatten simulate-proposal api and batch contract reads

.changeset/brave-foxes-beam.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+✨ support factory selection in credential creation

.changeset/bright-eagle-catch.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+🥅 retry trace on resource not found

.changeset/bright-foxes-swim.md

@@ -0,0 +1,5 @@
+---
+"@exactly/mobile": patch
+---
+
+💄 restructure swap state screen layouts

.changeset/bright-panda-decline.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+✨ forward declined transaction webhook

.changeset/cool-icons-grow.md

@@ -0,0 +1,5 @@
+---
+"@exactly/mobile": patch
+---
+
+🐛 forward chain id in account client

.changeset/cool-snakes-reply.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+🗃️ setup better-auth database tables

.changeset/cuddly-streets-like.md

@@ -0,0 +1,6 @@
+---
+"@exactly/server": patch
+"@exactly/docs": patch
+---
+
+✨ improve nonce usage for encrypted kyc

.changeset/curly-pumas-jam.md

@@ -0,0 +1,5 @@
+---
+"@exactly/mobile": patch
+---
+
+🐛 fix owner wallet detection in siwe auth

.changeset/cute-buttons-roll.md

@@ -0,0 +1,5 @@
+---
+"@exactly/docs": patch
+---
+
+📝 add configuration resources

.changeset/cyan-flies-camp.md

@@ -0,0 +1,5 @@
+---
+"@exactly/mobile": patch
+---
+
+🐛 fix swaps query invalidation

.changeset/dry-peas-ring.md

@@ -0,0 +1,6 @@
+---
+"@exactly/server": patch
+"@exactly/docs": patch
+---
+
+🐛 fix update card webhook schema

.changeset/every-cameras-trade.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+✨ allow account on firewall

.changeset/fast-trees-prove.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+🔥 remove redundant type check

.changeset/fifty-friends-bet.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+🐛 fix webhook logging for text response

.changeset/four-canyons-mix.md

@@ -0,0 +1,5 @@
+---
+"@exactly/common": patch
+---
+
+🔧 setup all onesignal domains

.changeset/four-numbers-worry.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+✨ implement kyc data submission

.changeset/fresh-kings-buy.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+🦺 standardize card status

.changeset/gentle-brooms-say.md

@@ -0,0 +1,5 @@
+---
+"@exactly/docs": patch
+---
+
+📝 update siwe authentication example

.changeset/gold-cow-eat.md

@@ -0,0 +1,5 @@
+---
+"@exactly/mobile": patch
+---
+
+🐛 fix bridge simulation falling back to default account

.changeset/gold-ties-tan.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+🩹 return correct card status

.changeset/great-dryers-kick.md

@@ -0,0 +1,5 @@
+---
+"@exactly/mobile": patch
+---
+
+🐛 pass chain id to bridge calls

.changeset/hungry-impalas-sing.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+🔧 set card art for sandbox

.changeset/jolly-teeth-flow.md

@@ -0,0 +1,5 @@
+---
+"@exactly/mobile": patch
+---
+
+💄 fix repay amount selector font style

.changeset/long-moons-brake.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+🐛 fix webhook retries

.changeset/long-nails-doubt.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+📝 add sandbox dedicated ips

.changeset/loose-papers-take.md

@@ -0,0 +1,5 @@
+---
+"@exactly/mobile": patch
+---
+
+♻️ migrate remaining flows to send calls

.changeset/loud-shoes-visit.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+🐛 fix user webhook routing

.changeset/lucky-jokes-change.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+✨ use gcp kms for allower

.changeset/olive-onions-tan.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+✨ add webhook api

.changeset/open-beds-stand.md

@@ -0,0 +1,5 @@
+---
+"@exactly/mobile": patch
+---
+
+💄 add bottom padding to swaps screen on web

.changeset/pretty-chicken-hang.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+➕ install better-auth

.changeset/quick-ants-write.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+✨ add transaction receipt to webhook

.changeset/rare-pears-sort.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+✨ allow better auth users to change email

.changeset/sharp-squids-push.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+🗃️ add role to organization database table

.changeset/shy-foxes-trade.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+✨ forward exchange rate to webhooks

.changeset/silly-yaks-divide.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+✨ poke account after kyc

.changeset/soft-eggs-count.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+📝 add create card docs

.changeset/soft-trains-dig.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+✨ support multiple cards in statement

.changeset/sour-items-enjoy.md

@@ -0,0 +1,5 @@
+---
+"@exactly/mobile": patch
+---
+
+🐛 avoid chain mismatch on bridge transfer

.changeset/tidy-geese-batch.md

@@ -0,0 +1,5 @@
+---
+"@exactly/mobile": patch
+---
+
+♻️ replace proposal simulation with simulate blocks

.changeset/tidy-worms-sin.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+🐛 fix patch response validation

.changeset/upset-seas-sink.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+✨ add kyc role to organizations

.changeset/violet-plums-move.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+✨ forward webhooks to source

.changeset/warm-eagles-glow.md

@@ -0,0 +1,5 @@
+---
+"@exactly/mobile": patch
+---
+
+🐛 align propose and execute block timestamps

.changeset/wicked-lies-invent.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+✨ return card id

.changeset/wide-cats-hug.md

@@ -0,0 +1,5 @@
+---
+"@exactly/mobile": patch
+---
+
+♻️ pass explicit chain id to read hooks

.changeset/wild-points-lose.md

@@ -0,0 +1,5 @@
+---
+"@exactly/server": patch
+---
+
+🥅 improve weak pin error handling

.do/app.yaml

@@ -81,6 +81,19 @@ services:
       - key: DEBUG
         scope: RUN_TIME
         value: ${{ env.DEBUG }}
+      - key: GCP_KMS_KEY_RING
+        scope: RUN_TIME
+        value: ${{ env.GCP_KMS_KEY_RING }}
+      - key: GCP_KMS_KEY_VERSION
+        scope: RUN_TIME
+        value: ${{ env.GCP_KMS_KEY_VERSION }}
+      - key: GCP_PROJECT_ID
+        scope: RUN_TIME
+        value: ${{ env.GCP_PROJECT_ID }}
+      - key: GCP_BASE64_JSON
+        scope: RUN_TIME
+        type: SECRET
+        value: ${{ env.ENCRYPTED_GCP_BASE64_JSON || env.GCP_BASE64_JSON }}
       - key: INTERCOM_IDENTITY_KEY
         scope: RUN_TIME
         type: SECRET

.github/workflows/server-base.yaml

@@ -1,6 +1,6 @@
 name: server/base
 on:
-  push: { branches: [sandbox] }
+  push: { branches: [base] }
 jobs:
   build:
     uses: ./.github/workflows/server-build.yaml

.github/workflows/test.yaml

@@ -103,12 +103,13 @@ jobs:
           pnpm nx run-many -t build -p mobile e2e
           pnpm nx generate:app server
           pnpm nx e2e server > server.log 2>&1 &
-          for i in {1..180}; do
+          pnpm dlx serve server/app -l 8081 -s &
+          for i in {1..420}; do
             curl -f http://localhost:3000/api/auth/authentication > /dev/null 2>&1 && break
-            [ $i -eq 180 ] && cat server.log && exit 1
+            [ $i -eq 420 ] && cat server.log && exit 1
             sleep 1
           done
-          CHROME_LOG_FILE=$PWD/chrome.log xvfb-run maestro test .maestro/flows/web.yaml -e "APP_ID=http://localhost:3000" --format junit --output .maestro/junit.xml
+          CHROME_LOG_FILE=$PWD/chrome.log xvfb-run maestro test .maestro/flows/web.yaml --format junit --output .maestro/junit.xml
         env: { APP_DOMAIN: localhost, EXPO_PUBLIC_ENV: e2e }
       - if: always()
         run: |

common/onesignalAppId.web.ts

@@ -0,0 +1,10 @@
+import domain from "./domain";
+
+export default (process.env.EXPO_PUBLIC_ONESIGNAL_APP_ID || // eslint-disable-line @typescript-eslint/prefer-nullish-coalescing -- ignore empty string
+  {
+    "web.exactly.app": "31d4be98-1fa3-4a8c-9657-dc21c991adc7",
+    "base.exactly.app": "9f896065-637d-455c-baff-4041268dafce",
+    "sandbox.exactly.app": "15bd3cf9-f71e-43f2-96ff-e76916a832a3",
+    "base-sepolia.exactly.app": "893d33c6-d1bd-46cb-9047-d4d524f384f0",
+  }[domain]) ??
+  "2f79a35c-8b11-4725-84d8-fc096f3f216e";

common/pandaCertificate.ts

@@ -1,20 +1,26 @@
 import domain from "./domain";
 
-/* eslint-disable @typescript-eslint/prefer-nullish-coalescing -- ignore empty string */
-export default process.env.EXPO_PUBLIC_PANDA_PUBLIC_KEY ||
-  {
-    "web.exactly.app": `-----BEGIN PUBLIC KEY-----
+const production = `-----BEGIN PUBLIC KEY-----
 MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCeZ9uCoxi2XvOw1VmvVLo88TLk
 GE+OO1j3fa8HhYlJZZ7CCIAsaCorrU+ZpD5PUTnmME3DJk+JyY1BB3p8XI+C5uno
 QucrbxFbkM1lgR10ewz/LcuhleG0mrXL/bzUZbeJqI6v3c9bXvLPKlsordPanYBG
 FZkmBPxc8QEdRgH4awIDAQAB
------END PUBLIC KEY-----`,
-    "sandbox.exactly.app": `-----BEGIN PUBLIC KEY-----
+-----END PUBLIC KEY-----`;
+
+const sandbox = `-----BEGIN PUBLIC KEY-----
 MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCAP192809jZyaw62g/eTzJ3P9H
 +RmT88sXUYjQ0K8Bx+rJ83f22+9isKx+lo5UuV8tvOlKwvdDS/pVbzpG7D7NO45c
 0zkLOXwDHZkou8fuj8xhDO5Tq3GzcrabNLRLVz3dkx0znfzGOhnY4lkOMIdKxlQb
 LuVM/dGDC9UpulF+UwIDAQAB
------END PUBLIC KEY-----`,
+-----END PUBLIC KEY-----`;
+
+/* eslint-disable @typescript-eslint/prefer-nullish-coalescing -- ignore empty string */
+export default process.env.EXPO_PUBLIC_PANDA_PUBLIC_KEY ||
+  {
+    "web.exactly.app": production,
+    "base.exactly.app": production,
+    "base-sepolia.exactly.app": sandbox,
+    "sandbox.exactly.app": sandbox,
   }[domain] ||
   `-----BEGIN PUBLIC KEY-----
 MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCu2YOeObkaYiQmc49t2Cnk8syA