Skip to content

feat: OSINT wallet monitoring router (Flowsint-inspired, A+ Codex audit)#27

Open
jratdish1 wants to merge 2 commits into
mainfrom
feat/osint-flowsint-router
Open

feat: OSINT wallet monitoring router (Flowsint-inspired, A+ Codex audit)#27
jratdish1 wants to merge 2 commits into
mainfrom
feat/osint-flowsint-router

Conversation

@jratdish1

Copy link
Copy Markdown
Owner

Summary

Adds a Flowsint-inspired OSINT wallet monitoring tRPC router to hero-dapp.

Source

Changes

  • server/routers/osint.ts: tRPC router with two procedures:
    • osint.investigateWallet: Graph-based OSINT investigation of any EVM wallet (depth 1-3, multi-chain)
    • osint.monitorContract: Register a contract for real-time monitoring with webhook alerts
  • server/osint.test.ts: 7 tests, all passing
  • server/routers.ts: Wired into appRouter as osint: osintRouter

Security Features (A+ Codex)

  • Zod schema validation on all inputs AND outputs
  • EVM address normalization to lowercase (prevents cache misses)
  • AbortController timeouts (30s investigate, 10s monitor)
  • Full error handling with server-side logging (no sensitive data leaked to client)
  • Production env guard: throws if FLOWSINT_URL not set in production
  • userId validation before sending to external service

Test Results

Tests  7 passed (7)

Env Required

FLOWSINT_URL — URL of self-hosted Flowsint service (not required for tests, required for production)

⚠️ DO NOT MERGE without explicit 'approve deploy' from VETS

jratdish1 added 2 commits June 12, 2026 22:29
…audit)

- server/routers/osint.ts: tRPC router with investigateWallet + monitorContract
- Zod schema validation on all inputs/outputs
- AbortController timeouts (30s investigate, 10s monitor)
- EVM address normalization to lowercase
- Full error handling with server-side logging
- server/osint.test.ts: 7 tests, all passing
- Wired into appRouter as osint: osintRouter

Source: Flowsint (reconurge/flowsint) — 6,584 stars
Grok-3: 9/10 | GPT-4.1-mini: 8/10 | Combined: 8.5/10
Codex audit: A+ (2 passes)

FLOWSINT_URL env var required for production deployment.
DO NOT DEPLOY without explicit approve deploy from VETS.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant