feat(site): debug pass, SEO overhaul, and API rate limiting

[marinom2]

First of three PRs from the full-repo review (38-agent sweep, 22 confirmed critical/high findings).

Broken funnels fixed

• /api/download now resolves releases per product tag family: desktop installers from the newest v* release, the wallet zip from the newest wallet-v* release (new ?product=wallet form). The wallet release had hijacked releases/latest, sending every desktop download to a page with no installers.
• /wallet downloads through the resolver instead of a latest/download URL that would 404 after the next desktop release.

Review findings fixed

• Connect button: Ethereum (chain 1) accepted, it is registered on purpose for the bridge's inbound leg; previously the nav demanded a destructive switch mid-bridge.
• /wallet page: the four shipped features (worker hub, AI chat, DAO, swap+bridge) were still marked Soon; now Live with accurate copy.
• /wallet/privacy: discloses the AI-chat gateway proxy (lightnode.app pass-through, ciphertext only) and the relay WebSocket; drops the removed notifications permission; adds block-explorer APIs.
• DAO panels: epoch guards kill stale-response races on chain switches; voters panel distinguishes RPC failure from genuinely no votes; governor-drift stops rescanning full history on every visit.
• Bridge: native-side Max reserves gas, unknown balances render as dashes instead of fake zeros, executeBridge decomposed.
• Economics: static inputs labeled as estimates instead of "live".
• /worker/[address]: ops panel desktop-gated like /dashboard, errors humanized and cleared on refetch.
• API routes: net param allowlisted (no more internal TypeErrors), upstream error messages no longer leaked to clients, sdk-demo job id shape-checked before query interpolation, stale comments and contradictory paging docs corrected.
• Homepage: hero/h1 now server-rendered (was blank until JS mounted), CTAs balanced across both tracks, stale version pins removed from copy, button-in-anchor nesting fixed via asChild.

SEO

• Root metadata rewritten to the dual-track positioning with an og image (1200x630, brand mesh + wordmark); the old worker-only title was inherited by ~20 routes.
• Per-route metadata for every client page (new metadata-only layouts), full sitemap (27 routes, was 3), PWA manifest refreshed, /learn double-branding fixed, AppKit metadata icon 404 fixed.

Security

• middleware.ts adds in-memory sliding-window rate limiting on all /api/* routes (30/min on the gateway proxy, DAO scans, operator preview; 120/min default), keyed by IP + path class, with unit tests. Closes the project's own no-rate-limit gap.

Verification

• typecheck clean, 507 unit tests green, production build clean (35/35 pages).
• Headless renders of / and /wallet verified after the changes.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
lightnode	Building	Preview, Comment	Jun 11, 2026 9:00pm