Merge pull request #166 from abdegenius/feat/emergency-sweep

Feat/emergency sweep

Author: jhayniffy

.claude/settings.json

@@ -4,7 +4,15 @@
       "Bash(find /home/ljtwp/Desktop/drips/niff -type f -name *.sol -o -name *.rs -o -name *.ts -o -name *.tsx -o -name *.js -o -name *.jsx)",
       "Bash(cargo test:*)",
       "Bash(cargo fmt:*)",
-      "Bash(cargo clippy:*)"
+      "Bash(cargo clippy:*)",
+      "Bash(npm install:*)",
+      "Bash(node -e \"const { rpc } = require\\(''''@stellar/stellar-sdk''''\\); console.log\\(Object.keys\\(rpc\\)\\);\")",
+      "Bash(grep -r ThemeProvider /home/ljtwp/Desktop/drips/niff/frontend/src/ --include=*.tsx --include=*.ts -l)",
+      "Bash(grep -n \"toast\\\\|useToast\" /home/ljtwp/Desktop/drips/niff/frontend/src/app/policy/[id]/claim/page.tsx)",
+      "Bash(git -C /home/ljtwp/Desktop/drips/niff add frontend/package-lock.json)",
+      "Bash(git -C /home/ljtwp/Desktop/drips/niff status --short)",
+      "Bash(npm audit:*)",
+      "Bash(echo \"EXIT:$?\")"
     ]
   }
 }

.gitignore

@@ -17,6 +17,7 @@ build/
 *.tsbuildinfo
 pnpm-lock.yaml
 package-lock.json
+!frontend/package-lock.json
 
 # Env / secrets
 .env

backend/package-lock.json

@@ -196,7 +196,7 @@ The implementation uses Redis for O(1) counter operations, NestJS guards for req
     - Log initialization status
     - _Requirements: 6.1, 6.2, 6.3_
 
-- [x] 12. Add OpenAPI documentation
+- [ ] 12. Add OpenAPI documentation
   - [x] 12.1 Document rate limit responses
     - Add @ApiResponse decorators for 429 status to claim endpoints
     - Document RateLimitException response schema

backend/specs/claim-rate-limiting/tasks.md

@@ -103,8 +103,8 @@ describe("Feature: cors-helmet-security-headers, Property 2", () => {
           // Should echo the exact origin string (not true, not false)
           return (
             calledWith !== null &&
-            (calledWith as any).err === null &&
-            (calledWith as any).allow === origin
+            (calledWith as { err: unknown; allow: unknown }).err === null &&
+            (calledWith as { err: unknown; allow: unknown }).allow === origin
           );
         },
       ),
@@ -141,8 +141,8 @@ describe("Feature: cors-helmet-security-headers, Property 3", () => {
           // Should call cb with an Error and false
           return (
             calledWith !== null &&
-            (calledWith as any).err instanceof Error &&
-            (calledWith as any).allow === false
+            (calledWith as { err: unknown; allow: unknown }).err instanceof Error &&
+            (calledWith as { err: unknown; allow: unknown }).allow === false
           );
         },
       ),
@@ -159,7 +159,7 @@ describe("Feature: cors-helmet-security-headers, Property 4", () => {
      * Validates: Requirements 2.4
      */
     fc.assert(
-      fc.property(fc.constant(null), (_) => {
+      fc.property(fc.constant(null), () => {
         return CORS_CONFIG.credentials === true;
       }),
       { numRuns: 100 },
@@ -175,7 +175,7 @@ describe("Feature: cors-helmet-security-headers, Property 5", () => {
      * Validates: Requirements 2.6, 2.7
      */
     fc.assert(
-      fc.property(fc.constant(null), (_) => {
+      fc.property(fc.constant(null), () => {
         const requiredHeaders = [
           "Authorization",
           "Content-Type",
@@ -214,7 +214,7 @@ describe("Feature: cors-helmet-security-headers, Property 6", () => {
     fc.assert(
       fc.property(
         fc.array(fc.string({ minLength: 1 }), { minLength: 1 }),
-        (allowlist) => {
+        () => {
           return (
             CORS_CONFIG.maxAge === 86400 &&
             CORS_CONFIG.optionsSuccessStatus === 204 &&

backend/src/__tests__/cors.property.test.ts

@@ -59,7 +59,7 @@ function buildTestApp(frontendOrigins: string[], adminOrigins: string[] = []) {
       origin: (origin, cb) => {
         if (!origin) return cb(null, true);
         const allowed = [...frontendOrigins, ...adminOrigins];
-        if (allowed.includes(origin)) return cb(null, origin as any);
+        if (allowed.includes(origin)) return cb(null, origin);
         return cb(new Error("Not allowed by CORS"));
       },
       credentials: true,

backend/src/__tests__/cors.test.ts

@@ -114,7 +114,7 @@ export class AdminController {
   @HttpCode(HttpStatus.ACCEPTED)
   @ApiOperation({ summary: 'Submit a privacy request (anonymize or delete off-chain data)' })
   async submitPrivacyRequest(@Body() dto: PrivacyRequestDto, @Req() req: Request) {
-    const actor = (req.user as any)?.walletAddress ?? 'unknown';
+    const actor = (req.user as { walletAddress?: string })?.walletAddress ?? 'unknown';
     return this.privacyService.handleRequest({
       subjectWalletAddress: dto.subjectWalletAddress,
       requestType: dto.requestType,

backend/src/admin/admin.controller.ts

@@ -37,6 +37,10 @@ export class RedisService implements OnModuleDestroy {
     await this.client.quit();
   }
 
+  getClient(): Redis {
+    return this.client;
+  }
+
   /**
    * Get cached value
    */

backend/src/cache/redis.service.ts

@@ -26,6 +26,7 @@ import { SubmitTransactionDto } from './dto/submit-transaction.dto';
 import { JwtAuthGuard } from '../auth/guards/jwt-auth.guard';
 import { WalletAddress } from '../auth/decorators/wallet-address.decorator';
 import { RateLimitGuard } from '../rate-limit/rate-limit.guard';
+import { MAX_LIMIT, DEFAULT_LIMIT } from '../helpers/pagination';
 
 @ApiTags('claims')
 @Controller('claims')

backend/src/claims/claims.controller.ts

@@ -2,6 +2,9 @@ import { Injectable, Logger, NotFoundException } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
 import { Prisma } from '@prisma/client';
 import { SorobanService } from '../rpc/soroban.service';
+import { PrismaService } from '../prisma/prisma.service';
+import { RedisService } from '../cache/redis.service';
+import { SanitizationService } from './sanitization.service';
 import {
   ClaimDetailResponseDto,
   ClaimMetadataDto,