Juno DEX

.github/workflows/check_artifacts.yml

@@ -35,12 +35,6 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-cargo-
 
-      - name: Restore cached artifacts
-        uses: actions/cache@v4
-        with:
-          path: artifacts
-          key: ${{ runner.os }}-artifacts-${{ hashFiles('**/Cargo.lock') }}
-
       - name: Build Artifacts
         run: |
           docker run \
@@ -55,6 +49,17 @@ jobs:
         run: |
           $GITHUB_WORKSPACE/scripts/check_artifacts_size.sh
 
+      - name: Check Juno v1 artifact set
+        run: |
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_artifacts.py
+
+      - name: Upload checked artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: cosmwasm-artifacts-${{ github.sha }}
+          path: artifacts
+          if-no-files-found: error
+
 
 
   cosmwasm-check:
@@ -72,12 +77,12 @@ jobs:
 
       - name: Checkout sources
         uses: actions/checkout@v4
-      - name: Restore cached artifacts
-        uses: actions/cache/restore@v4
+
+      - name: Download checked artifacts
+        uses: actions/download-artifact@v4
         with:
+          name: cosmwasm-artifacts-${{ github.sha }}
           path: artifacts
-          key: ${{ runner.os }}-artifacts-${{ hashFiles('**/Cargo.lock') }}
-          fail-on-cache-miss: true
 
       - name: Cosmwasm check
         run: |

.github/workflows/frontend.yml

@@ -0,0 +1,54 @@
+name: Frontend CI
+
+on:
+  pull_request:
+    paths:
+      - "frontend/**"
+      - "services/indexer/**"
+      - ".github/workflows/frontend.yml"
+  push:
+    paths:
+      - "frontend/**"
+      - "services/indexer/**"
+      - ".github/workflows/frontend.yml"
+
+jobs:
+  validate:
+    name: Typecheck, lint, test, and build
+    runs-on: ubuntu-latest
+
+    defaults:
+      run:
+        working-directory: frontend
+
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Typecheck
+        run: npm run typecheck
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Test
+        run: npm test
+
+      - name: Install Playwright browsers
+        run: npx playwright install --with-deps chromium
+
+      - name: Playwright E2E
+        run: npm run test:e2e
+
+      - name: Build
+        run: npm run build

.github/workflows/frontend_deploy.yml

@@ -0,0 +1,59 @@
+name: Frontend deploy
+
+on:
+  pull_request:
+    paths:
+      - "frontend/**"
+      - ".github/workflows/frontend_deploy.yml"
+  push:
+    branches:
+      - main
+    paths:
+      - "frontend/**"
+      - ".github/workflows/frontend_deploy.yml"
+
+permissions:
+  contents: read
+  deployments: write
+  pull-requests: read
+
+concurrency:
+  group: frontend-deploy-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  vercel:
+    name: Vercel preview/production
+    runs-on: ubuntu-latest
+    if: ${{ vars.VERCEL_ENABLED == 'true' }}
+    defaults:
+      run:
+        working-directory: frontend
+    env:
+      VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+      VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Install Vercel CLI
+        run: npm install --global vercel@latest
+
+      - name: Pull Vercel environment
+        run: vercel pull --yes --environment=${{ github.event_name == 'push' && 'production' || 'preview' }} --token=${{ secrets.VERCEL_TOKEN }}
+
+      - name: Build Vercel output
+        run: vercel build ${{ github.event_name == 'push' && '--prod' || '' }} --token=${{ secrets.VERCEL_TOKEN }}
+
+      - name: Deploy Vercel output
+        run: vercel deploy --prebuilt ${{ github.event_name == 'push' && '--prod' || '' }} --token=${{ secrets.VERCEL_TOKEN }}

.github/workflows/indexer.yml

@@ -0,0 +1,46 @@
+name: Indexer CI
+
+on:
+  pull_request:
+    paths:
+      - "services/indexer/**"
+      - ".github/workflows/indexer.yml"
+  push:
+    branches:
+      - main
+    paths:
+      - "services/indexer/**"
+      - ".github/workflows/indexer.yml"
+
+jobs:
+  validate:
+    name: Typecheck, test, build, and containerize
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: services/indexer
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: services/indexer/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Typecheck
+        run: npm run typecheck
+
+      - name: Test
+        run: npm test
+
+      - name: Build
+        run: npm run build
+
+      - name: Build Docker image
+        run: docker build -t astroport-juno-indexer:${{ github.sha }} .

.github/workflows/release_artifacts.yml

@@ -26,12 +26,6 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-cargo-
 
-      - name: Restore cached artifacts
-        uses: actions/cache@v4
-        with:
-          path: artifacts
-          key: ${{ runner.os }}-artifacts-${{ hashFiles('**/Cargo.lock') }}
-
       - name: Build Artifacts
         run: |
           $GITHUB_WORKSPACE/scripts/build_release.sh

.github/workflows/tests_and_checks.yml

@@ -22,6 +22,26 @@ jobs:
 
       - name: Checkout sources
         uses: actions/checkout@v4
+
+      - name: Check Juno v1 launch guards
+        run: |
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_scope.py
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_schemas.py
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_deployment_template.py
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_tx_extractor.py
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_deployment_command.py
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_secret_scan.py
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_operator_checklist.py
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_dry_run_txs.py
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_deployment_gitignore.py
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_deployment_readme.py
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_frontend_config.py
+          python3 $GITHUB_WORKSPACE/scripts/generate_juno_v1_frontend_types.py --check
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_frontend_example.py
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_frontend_handoff_sync.py
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_frontend_release_checklist.py
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_ci_wiring.py
+
       - uses: actions/cache@v4
         if: always()
         with:
@@ -57,5 +77,6 @@ jobs:
       - name: Generate and check schemas
         run: |
           $GITHUB_WORKSPACE/scripts/build_schemas.sh
+          python3 $GITHUB_WORKSPACE/scripts/check_juno_v1_schemas.py
           git add -A $GITHUB_WORKSPACE/schemas # consider new contract schemas
           git diff-index --cached HEAD --exit-code --

.gitignore

@@ -6,6 +6,7 @@
 
 # Build results
 target/
+/services/indexer/dist/
 
 # IDEs
 .vscode/
@@ -15,8 +16,15 @@ target/
 # Auto-gen
 .cargo-ok
 /scripts/.env
-*/node_modules/*
+**/node_modules/
 #/scripts/package-lock.json
 /artifacts/
 /contracts/**/schema/
 /e2e/config.json
+/deployment/tx/
+/deployment/juno-v1-testnet.json
+/deployment/juno-v1-mainnet.json
+
+# env
+.env
+.env.local

ACCESSIBILITY_AUDIT.md

@@ -0,0 +1,51 @@
+# JUNO DEX Accessibility Validation
+
+Date: 2026-07-13
+Target: WCAG 2.2 Level AA
+Scope: swap, pools, pool details, portfolio, liquidity, pool creation, transaction review/lifecycle, token selection, settings, and responsive navigation.
+
+## Automated evidence
+
+- Serious and critical axe findings fail Playwright across `/swap`, `/pools`, `/portfolio`, `/create`, `/liquidity`, and `/stats`.
+- Transaction review, wallet rejection, and confirmed transaction states receive the same axe gate.
+- The token selector dialog receives a dedicated axe gate.
+- A rendered-style audit fails if visible informative text on any core route is below 12 CSS pixels.
+- The 320 CSS-pixel viewport has no horizontal overflow and primary navigation, wallet, transaction, and quick-navigation controls are at least 44 pixels high.
+- Keyboard checks cover skip navigation, route focus, token selector focus entry/return, settings Escape/return, and modal focus containment.
+- Charts expose one keyboard focus target and an accessible data summary rather than one tab stop per candle.
+- Reduced-motion emulation verifies that confirmed-transaction feedback collapses to no meaningful animation.
+- Sort state, live transaction status, quote refresh state, and page changes have programmatic semantics.
+
+Current automated result: all 16 Playwright checks pass together in one run, including the six-route axe sweep with its appropriate 60-second scope timeout.
+
+## Manual release checks still required
+
+These checks require human perception or assistive-technology behavior and must be recorded before claiming full WCAG 2.2 AA conformance:
+
+- Complete swap, add/remove liquidity, incentives, and pool creation with current NVDA + Firefox or Chrome.
+- Repeat the primary swap and transaction-recovery journey with current VoiceOver + Safari on macOS and iOS.
+- Confirm announcement order and usefulness for quote refresh, validation errors, wallet rejection, timeout, confirmation, and delayed indexing.
+- Inspect focus visibility and reading order in Windows High Contrast/forced-colors mode.
+- Inspect text and non-text contrast for hover, focus, disabled, stale, warning, danger, verified, and success states with a contrast analyzer.
+- Validate browser text-only zoom to 200% and desktop page zoom to 400% without clipped controls or lost content.
+- Validate target spacing and fixed navigation with touch exploration on a physical narrow-screen device.
+
+Record browser, OS, assistive-technology version, tester, date, outcome, and linked defects for each run. `GOAL.md` keeps full WCAG 2.2 AA unchecked until this manual evidence is complete.
+
+## Evidence record
+
+Use `Pass`, `Fail`, or `N/A` with an explanation. A tool name without tester, version, date, and observed result is not evidence.
+
+| Environment | Journey/state | Tester and date | Result | Defect or evidence link |
+| --- | --- | --- | --- | --- |
+| NVDA + Firefox (current) | Swap, review, rejection, timeout, confirmation |  |  |  |
+| NVDA + Chrome (current) | Add/remove liquidity, rewards, pool creation |  |  |  |
+| VoiceOver + macOS Safari (current) | Swap, review, recovery, activity |  |  |  |
+| VoiceOver + iOS Safari (current) | Swap, navigation, review, recovery |  |  |  |
+| Windows forced colors | All core routes and transaction states |  |  |  |
+| Contrast analyzer | Text/non-text interactive states |  |  |  |
+| Desktop browser at 200% text zoom | All core routes |  |  |  |
+| Desktop browser at 400% page zoom | All core routes |  |  |  |
+| Physical narrow-screen touch device | Navigation, dialogs, forms, activity |  |  |  |
+
+For screen-reader journeys, record whether labels identify asset and action, changed content is announced once in a useful order, review bounds are understandable without visual context, focus never becomes lost or trapped, and the user can distinguish safe retry from an ambiguous submitted transaction.