Skip to content

Extract hosted web/ app to private repo + mixed-license root#24

Open
tomcasaburi wants to merge 1 commit into
masterfrom
chore/extract-web-to-private
Open

Extract hosted web/ app to private repo + mixed-license root#24
tomcasaburi wants to merge 1 commit into
masterfrom
chore/extract-web-to-private

Conversation

@tomcasaburi
Copy link
Copy Markdown
Member

@tomcasaburi tomcasaburi commented Jun 2, 2026

Second of two mintpass PRs (depends conceptually on the new private repo, already created).

⚠️ MERGE BLOCKER — repoint the deploy first

This PR deletes web/ from the public repo. web/ is the Next.js site+API for mintpass.org. Before merging, repoint that deployment (Vercel/host) to the new private repo bitsocialnet/mintpass-web, or mintpass.org will break on its next build. (No CI/workspace build depends on web/, so the monorepo build/test is unaffected.)

Why

web/ is the SMS-OTP + NFT-mint hosted service — abuse-sensitive, cost-bearing, and meant to be closed-source. It was inheriting the root MIT license in a public repo, so anyone could legally clone the entire service. This aligns mintpass with the spam-blocker pattern (public packages + private server).

What moved

  • All of web/private repo bitsocialnet/mintpass-web (full history preserved via git subtree split; proprietary LICENSE.md; UNLICENSED).

Changes here

  • Remove web/ (80 files)
  • LICENSE: MIT → mixed-license explainer (challenge GPL-3.0-or-later, contracts MIT, web proprietary/elsewhere)
  • package.json: license MIT → UNLICENSED (private monorepo root, mirrors spam-blocker)
  • README.md + scripts/llms-config.json: drop web/ references

Authorized by cofounder. Licensing strategy, not legal advice.


Note

High Risk
Deleting web/ breaks mintpass.org unless production deploy is repointed to the private web repository before merge; licensing changes are broad but the operational risk is deployment.

Overview
This PR removes the entire web/ tree from the public monorepo (Next.js UI, API routes, Twilio/SMS, KV helpers, smoke scripts, and generated web/public/llms* assets). The hosted mintpass.org SMS-OTP and minting service is documented as proprietary and maintained only in the private bitsocialnet/mintpass-web repo.

Licensing and docs are updated to match: root LICENSE becomes a mixed-license index (challenge/ GPL-3.0-or-later, contracts/ MIT, web elsewhere); root package.json license changes from MIT to UNLICENSED; README.md and scripts/llms-config.json drop web/ from structure, getting-started, and LLM doc outputs (no more copies under web/public/).

Deploy impact: merging without repointing the mintpass.org deployment to the private web repo will break the live site on the next build; open-source contracts and challenge workspaces are unchanged.

Reviewed by Cursor Bugbot for commit 3f177c1. Bugbot is set up for automated code reviews on this repo. Configure here.

The hosted MintPass web app (web/) is the SMS-OTP + NFT-mint service for mintpass.org -- abuse-sensitive, cost-bearing, and intended to be closed-source. It was inheriting the repo-root MIT license while sitting in a public repo (anyone could legally clone the whole service).

Moved to the private repo bitsocialnet/mintpass-web (full history preserved via subtree split, proprietary LICENSE). This repo now ships only the open-source packages:
- challenge -> GPL-3.0-or-later
- contracts -> MIT

Changes:
- remove web/ (80 files)
- LICENSE: MIT -> mixed-license explainer
- package.json: license MIT -> UNLICENSED (private monorepo root)
- README + scripts/llms-config.json: drop web/ references

Authorized by cofounder / copyright holder.
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Jun 2, 2026

Warning

Review limit reached

@tomcasaburi, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 46 minutes and 57 seconds. Learn how PR review limits work.

Your organization has run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 7ccb4547-a96c-4482-8597-14573ce41071

📥 Commits

Reviewing files that changed from the base of the PR and between 7fdb537 and 3f177c1.

⛔ Files ignored due to path filters (9)
  • web/public/android-chrome-192x192.png is excluded by !**/*.png
  • web/public/android-chrome-512x512.png is excluded by !**/*.png
  • web/public/apple-touch-icon.png is excluded by !**/*.png
  • web/public/favicon-16x16.png is excluded by !**/*.png
  • web/public/favicon-32x32.png is excluded by !**/*.png
  • web/public/favicon.ico is excluded by !**/*.ico
  • web/public/favicon.png is excluded by !**/*.png
  • web/public/mintpass.png is excluded by !**/*.png
  • web/yarn.lock is excluded by !**/yarn.lock, !**/*.lock
📒 Files selected for processing (75)
  • LICENSE
  • README.md
  • package.json
  • scripts/llms-config.json
  • web/.env.example
  • web/.gitignore
  • web/.yarnrc.yml
  • web/README.md
  • web/components.json
  • web/eslint.config.mjs
  • web/lib/abi.ts
  • web/lib/admin-auth-edge.ts
  • web/lib/admin-auth.ts
  • web/lib/cooldowns.ts
  • web/lib/env.ts
  • web/lib/hash.ts
  • web/lib/ip-reputation.ts
  • web/lib/kv.ts
  • web/lib/phone-intel.ts
  • web/lib/policy.ts
  • web/lib/rate-limit.ts
  • web/lib/request-ip.ts
  • web/lib/session.ts
  • web/lib/sms.ts
  • web/middleware.ts
  • web/next.config.ts
  • web/package.json
  • web/postcss.config.mjs
  • web/public/llms-full.txt
  • web/public/llms.txt
  • web/public/site.webmanifest
  • web/scripts/smoke-test.sh
  • web/scripts/start-dev.mjs
  • web/src/components/confetti-celebration.tsx
  • web/src/components/footer.tsx
  • web/src/components/header.tsx
  • web/src/components/magicui/animated-theme-toggler.tsx
  • web/src/components/magicui/confetti.tsx
  • web/src/components/magicui/rainbow-button.tsx
  • web/src/components/page-card.tsx
  • web/src/components/ui/button.tsx
  • web/src/components/ui/card.tsx
  • web/src/components/ui/command.tsx
  • web/src/components/ui/dialog.tsx
  • web/src/components/ui/dropdown-menu.tsx
  • web/src/components/ui/input-otp.tsx
  • web/src/components/ui/input.tsx
  • web/src/components/ui/label.tsx
  • web/src/components/ui/phone-input.tsx
  • web/src/components/ui/popover.tsx
  • web/src/components/ui/scroll-area.tsx
  • web/src/components/ui/shadcn-io/hexagon-background/index.tsx
  • web/src/lib/utils.ts
  • web/src/pages/404.tsx
  • web/src/pages/_app.tsx
  • web/src/pages/_document.tsx
  • web/src/pages/admin.tsx
  • web/src/pages/api/admin/clear-user.ts
  • web/src/pages/api/admin/login.ts
  • web/src/pages/api/admin/logout.ts
  • web/src/pages/api/check-eligibility.ts
  • web/src/pages/api/debug/code.ts
  • web/src/pages/api/mint.ts
  • web/src/pages/api/pre-check-eligibility.ts
  • web/src/pages/api/sms/send.ts
  • web/src/pages/api/sms/verify.ts
  • web/src/pages/index.tsx
  • web/src/pages/privacy-policy.tsx
  • web/src/pages/request/[eth-address].tsx
  • web/src/pages/request/index.tsx
  • web/src/pages/terms-and-conditions.tsx
  • web/src/styles/globals.css
  • web/src/types/view-transitions.d.ts
  • web/tailwind.config.ts
  • web/tsconfig.json
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/extract-web-to-private

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant