Revert "sys(sentinel): Project integrity restored; autonomous quality framework engaged"

This reverts commit 43df637.

Author: MStarRobotics

.dependency-cruiser.js

@@ -1,7 +1,35 @@
-# Firebase - get these from your Firebase project console
+VITE_GEMINI_API_KEY=YOUR_GEMINI_API_KEY
+VITE_PUBLIC_ONCHAINKIT_API_KEY=YOUR_CDP_CLIENT_KEY
+VITE_BASE_RPC_URL=https://sepolia.base.org
+VITE_FRACTAL_RECIPE_CONTRACT_ADDRESS=0xYourDeployedRegistryAddress
+VITE_FRACTAL_RECIPE_DEPLOY_BLOCK=0
+
+# Optional: Firebase client (enable if you want popup auth or phone/GitHub/anonymous flows)
 VITE_FIREBASE_API_KEY=
 VITE_FIREBASE_AUTH_DOMAIN=
 VITE_FIREBASE_PROJECT_ID=
 VITE_FIREBASE_STORAGE_BUCKET=
 VITE_FIREBASE_MESSAGING_SENDER_ID=
-VITE_FIREBASE_APP_ID=
+VITE_FIREBASE_APP_ID=
+VITE_FIREBASE_MEASUREMENT_ID=
+# reCAPTCHA v2 site key for phone auth (invisible or container-based)
+VITE_FIREBASE_RECAPTCHA_SITE_KEY=
+
+# Google Identity (frontend sign-in)
+VITE_GOOGLE_OAUTH_CLIENT_ID=
+
+# Backend / server configuration
+PORT=4000
+JWT_SECRET=update-this-secret
+JWT_TTL_SECONDS=3600
+CORS_ORIGIN=http://localhost:5173
+FIREBASE_PROJECT_ID=your-firebase-project-id
+FIREBASE_CLIENT_EMAIL=[email protected]
+# Remember to escape newlines as \n in the private key value when storing it in .env
+FIREBASE_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\nYOUR_PRIVATE_KEY_CONTENTS\n-----END PRIVATE KEY-----\n"
+GOOGLE_OAUTH_CLIENT_ID=your-google-oauth-client-id.apps.googleusercontent.com
+# Optional: GitHub Webhook secret for verifying signatures
+GITHUB_WEBHOOK_SECRET=your-webhook-secret
+PASSWORD_MIN_LENGTH=10
+PWD_RESET_OTP_TTL_MS=600000
+PWD_RESET_MAX_ATTEMPTS=5

.env.example

@@ -1,4 +1,4 @@
-name: Continuous Integration & Security
+name: Continuous Integration
 
 on:
   push:
@@ -10,10 +10,8 @@ permissions:
   contents: read
 
 jobs:
-  build-and-scan:
+  quality-gate:
     runs-on: ubuntu-latest
-    permissions:
-      security-events: write # for github/codeql-action/analyze to upload results
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -24,6 +22,18 @@ jobs:
           node-version: 20
           cache: npm
 
+      - name: Create env file for CI
+        run: |
+          cat <<'EOF' > .env
+          PORT=4000
+          JWT_SECRET=ci-secret
+          JWT_TTL_SECONDS=3600
+          CORS_ORIGIN=http://localhost:5173
+          PASSWORD_MIN_LENGTH=10
+          PWD_RESET_OTP_TTL_MS=600000
+          PWD_RESET_MAX_ATTEMPTS=5
+          EOF
+
       - name: Install dependencies
         run: npm install
 
@@ -35,23 +45,3 @@ jobs:
 
       - name: Build
         run: npm run build
-        env:
-          VITE_FIREBASE_API_KEY: ${{ secrets.VITE_FIREBASE_API_KEY }}
-          VITE_FIREBASE_AUTH_DOMAIN: ${{ secrets.VITE_FIREBASE_AUTH_DOMAIN }}
-          VITE_FIREBASE_PROJECT_ID: ${{ secrets.VITE_FIREBASE_PROJECT_ID }}
-          VITE_FIREBASE_STORAGE_BUCKET: ${{ secrets.VITE_FIREBASE_STORAGE_BUCKET }}
-          VITE_FIREBASE_MESSAGING_SENDER_ID: ${{ secrets.VITE_FIREBASE_MESSAGING_SENDER_ID }}
-          VITE_FIREBASE_APP_ID: ${{ secrets.VITE_FIREBASE_APP_ID }}
-          VITE_GEMINI_API_KEY: ${{ secrets.VITE_GEMINI_API_KEY }}
-
-      - name: Run dependency audit
-        run: npm audit --audit-level=high
-
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
-        with:
-          languages: 'javascript, typescript'
-          config-file: ./.github/codeql/codeql-config.yml
-
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2

.github/dependabot.yml

@@ -0,0 +1,70 @@
+name: Static Analysis
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: static-analysis-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  lint-and-typecheck:
+    name: ESLint and TypeScript
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'npm'
+
+      - name: Create CI .env
+        run: |
+          cat <<'EOF' > .env
+          # Frontend (Vite)
+          VITE_FIREBASE_API_KEY=
+          VITE_FIREBASE_AUTH_DOMAIN=
+          VITE_FIREBASE_PROJECT_ID=
+          VITE_FIREBASE_STORAGE_BUCKET=
+          VITE_FIREBASE_MESSAGING_SENDER_ID=
+          VITE_FIREBASE_APP_ID=
+          VITE_FIREBASE_MEASUREMENT_ID=
+          VITE_GOOGLE_OAUTH_CLIENT_ID=
+          VITE_GEMINI_API_KEY=
+          VITE_PUBLIC_ONCHAINKIT_API_KEY=
+          VITE_BASE_RPC_URL=https://sepolia.base.org
+          VITE_FRACTAL_RECIPE_CONTRACT_ADDRESS=
+          VITE_FRACTAL_RECIPE_DEPLOY_BLOCK=0
+
+          # Backend (server)
+          PORT=4000
+          JWT_SECRET=ci-secret
+          JWT_TTL_SECONDS=3600
+          CORS_ORIGIN=http://localhost:5173
+          FIREBASE_PROJECT_ID=ci
+          FIREBASE_CLIENT_EMAIL=
+          FIREBASE_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\n\n-----END PRIVATE KEY-----\n"
+          GOOGLE_OAUTH_CLIENT_ID=
+          PASSWORD_MIN_LENGTH=10
+          PWD_RESET_OTP_TTL_MS=600000
+          PWD_RESET_MAX_ATTEMPTS=5
+          WEBHOOK_SECRET=ci-webhook-secret
+          EOF
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Run ESLint
+        run: npm run lint
+
+      - name: Type check
+        run: npm run typecheck

.github/workflows/ci.yml

@@ -9,14 +9,6 @@ lerna-debug.log*
 
 node_modules
 dist
-
-# macOS
-.DS_Store
-
-# Logs
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
 dist-ssr
 *.local
 .env