fix(deps)(deps): bump react-native-get-random-values from 1.11.0 to 2.0.0

.detoxrc.js

@@ -0,0 +1,111 @@
+/** @type {Detox.DetoxConfig} */
+module.exports = {
+  logger: {
+    level: process.env.CI ? 'debug' : undefined,
+  },
+  testRunner: {
+    args: {
+      $0: 'jest',
+      config: 'e2e/jest.config.js',
+      maxWorkers: process.env.E2E_MAX_WORKERS || 1,
+    },
+    jest: {
+      setupTimeout: 120000,
+    },
+  },
+  apps: {
+    'ios.debug': {
+      type: 'ios.app',
+      binaryPath: 'ios/build/Build/Products/Debug-iphonesimulator/SubTrackr.app',
+      build:
+        'xcodebuild -workspace ios/SubTrackr.xcworkspace -scheme SubTrackr -configuration Debug -sdk iphonesimulator -derivedDataPath ios/build',
+    },
+    'ios.release': {
+      type: 'ios.app',
+      binaryPath: 'ios/build/Build/Products/Release-iphonesimulator/SubTrackr.app',
+      build:
+        'xcodebuild -workspace ios/SubTrackr.xcworkspace -scheme SubTrackr -configuration Release -sdk iphonesimulator -derivedDataPath ios/build',
+    },
+    'android.debug': {
+      type: 'android.apk',
+      binaryPath: 'android/app/build/outputs/apk/debug/app-debug.apk',
+      build: 'cd android && ./gradlew assembleDebug assembleAndroidTest -DtestBuildType=debug',
+      reversePorts: [8081],
+    },
+    'android.release': {
+      type: 'android.apk',
+      binaryPath: 'android/app/build/outputs/apk/release/app-release.apk',
+      build: 'cd android && ./gradlew assembleRelease assembleAndroidTest -DtestBuildType=release',
+    },
+  },
+  devices: {
+    simulator: {
+      type: 'ios.simulator',
+      device: {
+        type: 'iPhone 15',
+      },
+    },
+    attached: {
+      type: 'android.attached',
+      device: {
+        adbName: '.*',
+      },
+    },
+    emulator: {
+      type: 'android.emulator',
+      device: {
+        avdName: 'Pixel_4_API_30',
+      },
+    },
+  },
+  configurations: {
+    'ios.sim.debug': {
+      device: 'simulator',
+      app: 'ios.debug',
+    },
+    'ios.sim.release': {
+      device: 'simulator',
+      app: 'ios.release',
+    },
+    'android.att.debug': {
+      device: 'attached',
+      app: 'android.debug',
+    },
+    'android.att.release': {
+      device: 'attached',
+      app: 'android.release',
+    },
+    'android.emu.debug': {
+      device: 'emulator',
+      app: 'android.debug',
+    },
+    'android.emu.release': {
+      device: 'emulator',
+      app: 'android.release',
+    },
+  },
+  behavior: {
+    init: {
+      exposeGlobals: true,
+      reinstallApp: true,
+    },
+    cleanup: {
+      shutdownDevice: false,
+    },
+  },
+  artifacts: {
+    rootDir: 'artifacts',
+    plugins: {
+      log: { enabled: true },
+      screenshot: {
+        enabled: true,
+        shouldTakeAutomaticSnapshots: false,
+        keepOnlyFailedTestsArtifacts: false,
+      },
+      video: {
+        enabled: true,
+        keepOnlyFailedTestsArtifacts: true,
+      },
+    },
+  },
+};

.env.example

@@ -0,0 +1,36 @@
+# SubTrackr Backend - Environment Variables
+# Copy this file to .env and fill in your values.
+
+# PostgreSQL
+DB_HOST=localhost
+DB_PORT=5432
+DB_NAME=subtrackr
+DB_USER=postgres
+# Required: set a strong password
+DB_PASSWORD=
+
+# Redis
+REDIS_HOST=localhost
+REDIS_PORT=6379
+# Optional: set if Redis requires authentication
+REDIS_PASSWORD=
+REDIS_DB=0
+REDIS_DEFAULT_TTL_SECONDS=3600
+REDIS_CONNECT_TIMEOUT_MS=5000
+# Docker Compose Port Configurations (Change in your local .env to fix port conflicts)
+COMPOSE_PORT_POSTGRES=5432
+COMPOSE_PORT_REDIS=6379
+COMPOSE_PORT_SOROBAN=8000
+COMPOSE_PORT_BACKEND=3000
+COMPOSE_PORT_ML=8001
+COMPOSE_PORT_EXPO=8081
+
+# Issue #600: serverless DB connection multiplexing via PgBouncer.
+# Point the app at PgBouncer (:6432), not Postgres directly.
+DB_PROXY_HOST=localhost
+DB_PROXY_PORT=6432
+DB_PROXY_AUTH_MODE=scram-256
+DB_PROXY_TXN_POOLING=true
+DB_PROXY_PREPARED_STATEMENTS=true
+DB_PROXY_MAX_CONN=50
+DB_LEAK_THRESHOLD_MS=30000

.eslintignore

@@ -0,0 +1,10 @@
+src/design-system/
+sandbox/
+app/
+backend/
+developer-portal/
+sdks/
+contracts/
+chaos/
+services/
+node_modules/

.eslintrc.json

@@ -0,0 +1,60 @@
+{
+  "extends": ["expo", "plugin:@typescript-eslint/recommended"],
+  "plugins": ["@typescript-eslint", "prettier"],
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2022,
+    "sourceType": "module",
+    "ecmaFeatures": {
+      "jsx": true
+    }
+  },
+  "rules": {
+    "prettier/prettier": "error",
+    "@typescript-eslint/no-unused-vars": [
+      "error",
+      {
+        "argsIgnorePattern": "^_",
+        "varsIgnorePattern": "^_",
+        "caughtErrorsIgnorePattern": "^_",
+        "destructuredArrayIgnorePattern": "^_"
+      }
+    ],
+    "@typescript-eslint/explicit-function-return-type": "off",
+    "@typescript-eslint/no-explicit-any": "warn",
+    "no-console": ["warn", { "allow": ["warn", "error"] }],
+    "import/no-unresolved": [
+      "error",
+      {
+        "ignore": [
+          "@sentry/react-native",
+          "bcryptjs",
+          "expo-image",
+          "expo-linking",
+          "expo-local-authentication",
+          "react-native-performance",
+          "../../backend/services/shared/monitoring"
+        ]
+      }
+    ]
+  },
+  "ignorePatterns": [
+    "node_modules/",
+    "dist/",
+    "android/",
+    "ios/",
+    ".expo/",
+    "src/contracts/types/",
+    "app/",
+    "backend/",
+    "acbu-backend/",
+    "src/animations/"
+  ],
+  "settings": {
+    "import/resolver": {
+      "node": {
+        "extensions": [".js", ".jsx", ".ts", ".tsx"]
+      }
+    }
+  }
+}

.github/BRANCH_PROTECTION.md

@@ -0,0 +1,49 @@
+# Branch Protection Rules
+
+To enforce the CI/CD pipeline quality gates, configure branch protection rules in your GitHub repository:
+
+## Settings Location
+
+Go to: Repository Settings → Branches → Add rule
+
+## Required Settings for `main` branch:
+
+### Branch name pattern
+
+```
+main
+```
+
+### ✅ Required checks (enable ALL):
+
+- [ ] **typescript-lint** - ESLint and Prettier checks
+- [ ] **typescript-typecheck** - TypeScript type validation
+- [ ] **typescript-tests** - Jest test suite
+- [ ] **typescript-build** - Expo build verification
+- [ ] **rust-format** - Rust formatting check
+- [ ] **rust-clippy** - Rust linting
+- [ ] **rust-tests** - Rust test suite
+- [ ] **rust-build** - Rust contract compilation
+
+### Additional protections:
+
+- [x] Require pull request before merging
+- [x] Require at least 1 approval (recommended)
+- [x] Dismiss stale reviews
+- [x] Require status checks to pass before merging
+- [x] Require branches to be up to date before merging
+- [x] Do not allow bypassing the above settings
+
+## Settings Location for `dev` branch (optional):
+
+Similar settings, but you may allow force pushes for rapid development.
+
+---
+
+## Verification
+
+After setting up, verify by:
+
+1. Creating a test PR
+2. Intentionally break a lint rule
+3. Verify the PR cannot be merged until fixed

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,28 @@
+## Pull Request Checklist
+
+### Quality Gates (All must pass before merge)
+
+- [ ] **Lint**: Code passes ESLint and Prettier checks
+- [ ] **Type Check**: TypeScript compilation succeeds
+- [ ] **Tests**: All tests pass
+- [ ] **Build**: Project builds successfully
+- [ ] **Rust Format**: Smart contract formatting is correct
+- [ ] **Rust Clippy**: Smart contract linting passes
+- [ ] **Rust Tests**: All smart contract tests pass
+- [ ] **Rust Build**: Smart contracts compile successfully
+
+### Additional Requirements
+
+- [ ] New code has appropriate TypeScript types
+- [ ] No hardcoded secrets or credentials
+- [ ] New features have corresponding tests
+- [ ] Documentation updated if needed
+
+### Reviewers
+
+- At least 1 approval required for merge
+- All CI checks must be green
+
+---
+
+_This PR will not be mergeable until all quality gates pass._

.github/corpus/rate_limit/rapid_create

@@ -0,0 +1 @@
+dddddddddddddddddddddddddddddddd

.github/corpus/rate_limit/slow_create

@@ -0,0 +1 @@
+

.github/dependabot.yml

@@ -0,0 +1,29 @@
+version: 2
+updates:
+  - package-ecosystem: 'npm'
+    directory: '/'
+    schedule:
+      interval: 'daily'
+    open-pull-requests-limit: 10
+    reviewers:
+      - 'Smartdevs17' # Based on the repo URL found in package.json
+    groups:
+      dependencies:
+        patterns:
+          - '*'
+        update-types:
+          - 'patch'
+          - 'minor'
+    commit-message:
+      prefix: 'fix(deps)'
+      include: 'scope'
+    labels:
+      - 'dependencies'
+      - 'security'
+
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+    commit-message:
+      prefix: 'ci(actions)'

.github/workflows/bundle-analysis.yml

@@ -0,0 +1,19 @@
+name: Bundle Size Analysis
+
+on: workflow_dispatch
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: npm
+      - run: npm ci --legacy-peer-deps
+      - run: npx expo export --platform web --output-dir dist
+      - name: Analyze bundle
+        run: |
+          npx size-limit
+          echo "Bundle size analysis complete"