Major updates, rework

.commitlintrc.cjs

@@ -0,0 +1,21 @@
+module.exports = {
+    extends: ["@commitlint/config-conventional"],
+    rules: {
+        "type-enum": [
+            2,
+            "always",
+            [
+                "feat",
+                "fix",
+                "docs",
+                "style",
+                "refactor",
+                "perf",
+                "test",
+                "chore",
+                "ci",
+                "build",
+            ],
+        ],
+    },
+};

.dockerignore

@@ -0,0 +1,53 @@
+# Node dependencies
+node_modules
+npm-debug.log
+yarn-error.log
+
+# Logs and runtime data
+*.log
+logs
+pids
+*.pid
+*.seed
+*.pid.lock
+
+# Build artifacts (if any)
+dist
+build
+coverage
+
+# Environment and secrets
+.env
+.env.*
+!.env.example
+
+# Version control and CI/CD
+.idea
+.git
+.gitignore
+.gitattributes
+.github
+.gitlab-ci.yml
+
+# Editor & OS files
+.DS_Store
+*.swp
+*.swo
+.vscode
+.idea
+*.bak
+Thumbs.db
+
+# Docker/OpenShift build files that shouldn’t go inside image
+openshift/
+docker-compose.yml
+Dockerfile.dev
+README.md
+test
+tests
+__tests__
+docs
+
+# Cache
+.npm
+.cache

.env

@@ -0,0 +1,8 @@
+MISTRAL_API_KEY=
+GEMINI_API_KEY=
+DATABASE_URL=
+ALLAS_ENDPOINT=https://a3s.fi
+ALLAS_BUCKET=
+ALLAS_ACCESS_KEY=
+ALLAS_SECRET_KEY=
+ALLAS_UPLOAD_ENDPOINT=

.github/codeql/codeql-config.yml

@@ -0,0 +1,33 @@
+name: "CodeQL Config"
+paths-ignore:
+  - "node_modules/"
+  - "openshift/"
+  - "dbinit/"
+  - "dist/"
+  - "build/"
+  - "coverage/"
+  - "**/.husky/**"
+  - "**/.idea/**"
+  - "scripts"
+  - "*.min.js"
+  - "*.test.ts"
+  - "*.test.js"
+  - "*.spec.ts"
+  - "*.spec.js"
+  - "__tests__/"
+  - "test/"
+  - "tests/"
+  - "*.d.ts"
+  - "public/"
+  - "static/"
+queries:
+  - name: security-extended
+    uses: security-extended
+  - name: security-and-quality
+    uses: security-and-quality
+# Query filters
+query-filters:
+  - exclude:
+      id: js/unused-local-variable
+  - exclude:
+      id: js/debugger-statement

.github/prompts/pr_summary_prompt.yml

@@ -0,0 +1,19 @@
+messages:
+  - role: user
+    content: |
+      Analyze this pull request and provide a clear, concise summary that anyone can understand.
+
+      Title: "{{title}}"
+      Description: "{{description}}"
+
+      Code Changes:
+      ```
+      {{diff}}
+      ```
+
+      Please summarize:
+      - What this PR does (the main purpose)
+      - Key changes made in the code
+      - Any important details worth noting
+
+      Keep it simple and focused. Use bullet points or short paragraphs as needed.

.github/workflows/codeql.yml

@@ -0,0 +1,32 @@
+name: "CodeQL Security Analysis"
+on:
+  workflow_run:
+    workflows: ["YAML Lint"]
+    types:
+      - completed
+  pull_request:
+    branches: ["main"]
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ['javascript', 'typescript']
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+          config-file: ./.github/codeql/codeql-config.yml
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:${{matrix.language}}"

.github/workflows/release-please.yml

@@ -0,0 +1,20 @@
+name: release-please
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    steps:
+      - uses: googleapis/release-please-action@v4
+        with:
+          release-type: node
+          token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/yaml-scanner.yml

@@ -0,0 +1,17 @@
+name: "YAML Lint"
+on:
+  pull_request:
+    branches: [main]
+jobs:
+  yaml-lint:
+    name: Lint YAML files
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Install yamllint
+        run: sudo apt-get update && sudo apt-get install -y yamllint
+      - name: Run yamllint
+        run: |-
+          yamllint -d '{"extends": "default", "rules": {"line-length": false}}' .
+        continue-on-error: true

.gitignore

@@ -1 +1,30 @@
-.node_modules
+# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
+
+# dependencies
+/node_modules
+/.pnp
+.pnp.*
+.yarn/*
+!.yarn/patches
+!.yarn/plugins
+!.yarn/releases
+!.yarn/versions
+
+# testing
+/coverage
+
+
+# production
+/build
+
+# misc
+.DS_Store
+.idea
+*.pem
+
+# debug
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+.pnpm-debug.log*
+

.husky/commit-msg

@@ -0,0 +1 @@
+npx --no -- commitlint --edit $1

.husky/pre-commit

@@ -0,0 +1 @@
+npx lint-staged

Dockerfile

@@ -0,0 +1,23 @@
+# Stage 1: Install dependencies
+FROM node:20-alpine AS deps
+WORKDIR /app
+COPY package*.json ./
+RUN npm ci --only=production && \
+    npm cache clean --force
+
+# Stage 2: Production runtime
+FROM node:20-alpine AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+
+# Copy dependencies and application code
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+
+EXPOSE 3000
+ENV HOST=0.0.0.0
+ENV PORT=3000
+
+# Stage 3: Start the application
+CMD ["node", "server.js"]

package.json

@@ -2,24 +2,43 @@
   "name": "PastePick-server",
   "version": "1.0.0",
   "description": "",
-  "main": "index.js",
+  "main": "server.js",
   "scripts": {
     "dev": "nodemon server.js",
     "start": "node server.js",
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "prepare": "husky"
+  },
+  "lint-staged": {
+    "*.{js,jsx,ts,tsx}": [
+      "biome format --write"
+    ]
   },
   "keywords": [],
   "author": "",
   "license": "MIT",
   "packageManager": "pnpm@10.13.1",
   "type": "module",
   "dependencies": {
+    "@aws-sdk/client-s3": "^3.917.0",
+    "@fastify/cors": "^11.1.0",
+    "@fastify/multipart": "^9.3.0",
+    "@google/genai": "^1.25.0",
     "@mistralai/mistralai": "^1.10.0",
+    "@xenova/transformers": "^2.17.2",
+    "axios": "^1.13.2",
     "dotenv": "^17.2.2",
     "fastify": "^5.6.0",
+    "form-data": "^4.0.4",
+    "fuse.js": "^7.1.0",
     "pg": "^8.16.3"
   },
   "devDependencies": {
+    "@biomejs/biome": "2.2.6",
+    "@commitlint/cli": "^20.1.0",
+    "@commitlint/config-conventional": "^20.0.0",
+    "husky": "^9.1.7",
+    "lint-staged": "^16.2.4",
     "nodemon": "^3.1.10"
   }
-}
+}