Merge branch 'main' into feat/251

Author: KayMuna

.github/workflows/backend-governance.yml

@@ -42,4 +42,7 @@ jobs:
             echo "❌ openapi.json is out of date. Run 'npm run generate:openapi' locally and commit the changes."
             git diff openapi.json
             exit 1
-          fi
+          fi
+
+      - name: Check for database schema drift
+        run: npm run db:check-drift

.github/workflows/cypress.yml

@@ -0,0 +1,47 @@
+name: Cypress Smoke Tests
+
+on:
+  pull_request:
+    paths:
+      - 'frontend/**'
+  push:
+    branches:
+      - main
+    paths:
+      - 'frontend/**'
+
+jobs:
+  cypress-run:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Install dependencies
+        working-directory: frontend
+        run: npm ci
+
+      - name: Cypress run
+        uses: cypress-io/github-action@v6
+        with:
+          working-directory: frontend
+          start: npm run dev
+          wait-on: 'http://localhost:5173'
+          browser: chrome
+          spec: cypress/e2e/smoke.cy.ts
+        env:
+          CYPRESS_RECORD_KEY: ${{ secrets.CYPRESS_RECORD_KEY }}
+
+      - name: Upload screenshots on failure
+        uses: actions/upload-artifact@v4
+        if: failure()
+        with:
+          name: cypress-screenshots
+          path: frontend/cypress/screenshots

.github/workflows/release.yml

@@ -0,0 +1,64 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v[0-9]+.[0-9]+.[0-9]+'
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    name: Generate changelog and publish release
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      # Generate the full CHANGELOG.md (all releases, written to file)
+      - name: Generate full CHANGELOG.md
+        uses: orhun/git-cliff-action@v4
+        with:
+          config: cliff.toml
+          args: --verbose
+        env:
+          OUTPUT: CHANGELOG.md
+          GITHUB_REPO: ${{ github.repository }}
+
+      # Generate release-only notes for the GitHub Release body
+      - name: Generate release notes for this tag
+        id: cliff
+        uses: orhun/git-cliff-action@v4
+        with:
+          config: cliff.toml
+          args: --latest --strip all
+        env:
+          OUTPUT: /tmp/release-notes.md
+          GITHUB_REPO: ${{ github.repository }}
+
+      # Commit the updated CHANGELOG.md back to the default branch
+      - name: Commit CHANGELOG.md
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add CHANGELOG.md
+          # Only commit if there are changes
+          if ! git diff --cached --quiet; then
+            git commit -m "chore(release): update CHANGELOG.md for ${{ github.ref_name }}"
+            git push origin HEAD:refs/heads/main
+          fi
+
+      # Create the GitHub Release with the generated notes
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          name: ${{ github.ref_name }}
+          tag_name: ${{ github.ref_name }}
+          body_path: /tmp/release-notes.md
+          draft: false
+          prerelease: ${{ contains(github.ref_name, '-') }}

CHANGELOG.md

@@ -0,0 +1,20 @@
+# Changelog
+
+All notable changes to YieldVault-RWA are documented here.
+Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
+Versioning follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+<!-- next-release -->
+
+## [Unreleased]
+
+### Features
+- CORS configuration for cross-origin API access
+- Structured logging, graceful shutdown, caching, and API key authentication
+- Network badge showing testnet vs mainnet status in the frontend
+
+### Bug Fixes
+- Vault performance dynamic date filter
+
+### Chores
+- Resolve merge conflict in Skeleton and dateUtils imports

CONTRIBUTING.md

@@ -0,0 +1,89 @@
+# Contributing to YieldVault-RWA
+
+First off, thank you for considering contributing to YieldVault-RWA! It's people like you that make this project great.
+
+## Branch Naming Convention
+
+To keep our repository organized, we follow a strict branch naming convention. Please name your branch according to the type of work you are doing:
+
+- **Features**: `feat/<issue-number>-<short-description>`
+  - Example: `feat/349-add-user-login`
+- **Bug Fixes**: `fix/<issue-number>-<short-description>`
+  - Example: `fix/350-resolve-auth-crash`
+
+## Pull Request Conventions
+
+When submitting a Pull Request, please ensure the title is descriptive and follows the format of the issue. The PR body **must** include the following sections:
+
+### PR Title Format
+`<Type>: <Short description>`
+Examples:
+- `Feature: Add user login flow`
+- `Fix: Resolve authentication crash on mobile`
+
+### Required PR Sections
+
+Please use the following template for your PR description:
+
+```markdown
+### Goal
+[Describe the goal of this PR and the problem it solves. Link to the relevant issue, e.g., "Closes #349".]
+
+### Changes
+- [List out the specific changes made in this PR]
+- [Keep it concise but detailed enough for reviewers to understand the scope]
+
+### Testing
+- [Explain how the changes were tested]
+- [Include steps for reviewers to verify the fix/feature locally]
+```
+
+## Local Development Setup
+
+YieldVault-RWA is composed of three main packages: Frontend, Backend, and Contracts. Follow the steps below to set up your local development environment end-to-end.
+
+### Prerequisites
+- Node.js (v18+)
+- npm, pnpm, or yarn
+- Rust and Cargo (for contracts)
+
+### 1. Contracts Setup
+The smart contracts are written in Rust.
+```bash
+cd contracts
+# Install dependencies and build contracts
+cargo build
+
+# Run contract tests
+cargo test
+```
+
+### 2. Backend Setup
+The backend handles API requests and application logic.
+```bash
+cd backend
+# Install dependencies
+npm install
+
+# Set up your environment variables
+cp .env.example .env
+
+# Start the backend development server
+npm run dev
+```
+
+### 3. Frontend Setup
+The frontend contains the user interface.
+```bash
+cd frontend
+# Install dependencies
+npm install
+
+# Set up your environment variables
+cp .env.example .env
+
+# Start the frontend development server
+npm run dev
+```
+
+Thank you for your contributions!

backend/.env.example

@@ -22,20 +22,20 @@ STELLAR_NETWORK_PASSPHRASE=Test SDF Network ; September 2015
 # Vault Configuration
 VAULT_CONTRACT_ID=
 
-# Optional: Database Configuration (for future use)
-# DATABASE_URL=
-# DATABASE_POOL_SIZE=10
-
-# Redis Configuration
-# Set REDIS_URL to enable Redis-backed rate limiting.
-# If unset, the rate limiter falls back to an in-memory store (suitable for local dev).
-REDIS_URL=redis://localhost:6379
-
-# Per-endpoint rate limit overrides (optional — compiled-in defaults shown below)
-# Deposits endpoint: max 10 requests per 60-second window
-DEPOSITS_RATE_LIMIT_MAX=10
-DEPOSITS_RATE_LIMIT_WINDOW_MS=60000
-
-# Summary endpoint: max 30 requests per 60-second window
-SUMMARY_RATE_LIMIT_MAX=30
-SUMMARY_RATE_LIMIT_WINDOW_MS=60000
+# Optional: Database Configuration
+DATABASE_URL=
+DATABASE_REPLICA_URL=
+DATABASE_POOL_SIZE=10
+
+# Optional: Cache Configuration (for future use)
+# REDIS_URL=redis://localhost:6379
+# CACHE_TTL=300
+
+# CORS Configuration
+# Comma-separated list of allowed origins. Supports strings or regex like /https?:\/\/.*\.yieldvault\.finance/
+CORS_ALLOWED_ORIGINS=http://localhost:3000,https://app.yieldvault.finance
+
+# Email Notification Configuration
+EMAIL_PROVIDER=resend
+EMAIL_API_KEY=
+EMAIL_FROM_ADDRESS=notifications@yieldvault.finance