Merge pull request #168 from N-thnI/chore/cleanup-ci-security-hardening

chore: remove dead code/stray files, add CI typecheck+lint+build gates, CodeQL, and Dependabot

Author: N-thnI

.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly

.github/workflows/ci.yml

@@ -6,9 +6,12 @@ on:
   pull_request:
     branches: [ '**' ]
 
+permissions:
+  contents: read
+
 jobs:
-  test:
-    name: Run tests
+  build:
+    name: Typecheck, lint, test, build
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -23,5 +26,14 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
+      - name: Type check
+        run: npx tsc --noEmit
+
+      - name: Lint
+        run: npm run lint
+
       - name: Run tests
-        run: npm test --if-present
+        run: npm test -- --ci
+
+      - name: Build
+        run: npm run build

.github/workflows/codeql.yml

@@ -0,0 +1,34 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ '**' ]
+  schedule:
+    - cron: '17 3 * * 1'
+
+permissions:
+  contents: read
+
+jobs:
+  analyze:
+    name: Analyze (javascript-typescript)
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: javascript-typescript
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: '/language:javascript-typescript'

.gitignore

@@ -1,4 +1,5 @@
 node_modules/
 .next/
 .env.local
-./node_modules/
+./node_modules/
+*.tsbuildinfo

ci.yml

@@ -11,6 +11,7 @@ import { I18nProvider } from '@/i18n';
 import { NetworkProvider } from '@/context/NetworkContext';
 import { SocketIOProvider } from '@/context/SocketIOContext';
 import DevWalletSwitcher from '@/components/DevWalletSwitcher';
+import { ErrorProvider } from '@/components/ErrorModal';
 
 const inter = Inter({ subsets: ['latin'] });
 

src/app/layout.tsx

@@ -1,5 +1,4 @@
 import { act, fireEvent, render, screen } from '@testing-library/react';
-import { describe, expect, it, jest, afterEach, beforeEach } from '@jest/globals';
 import AuditSessionTimer from '../AuditSessionTimer';
 import {
   formatDuration,

src/components/AuditSessionTimer/__tests__/AuditSessionTimer.test.tsx

@@ -1,5 +1,4 @@
 import { fireEvent, render, screen } from '@testing-library/react';
-import { describe, expect, it } from '@jest/globals';
 import ContractTimeTraveler from '../ContractTimeTraveler';
 import {
   appendSnapshot,

src/components/ContractTimeTraveler/__tests__/ContractTimeTraveler.test.tsx

@@ -1,5 +1,4 @@
 import { fireEvent, render, screen } from '@testing-library/react';
-import { describe, expect, it } from '@jest/globals';
 import IPFSDocViewer from '../IPFSDocViewer';
 import { buildGatewayUrl, IPFS_GATEWAY, isValidIpfsHash } from '../ipfsDocViewer';
 

src/components/IPFSDocViewer/__tests__/IPFSDocViewer.test.tsx

@@ -1,6 +1,5 @@
 import * as StellarSdk from '@stellar/stellar-sdk';
 import { fireEvent, render, screen, waitFor } from '@testing-library/react';
-import { describe, expect, it, jest } from '@jest/globals';
 import { MultiSigPreviewer } from '../MultiSigPreviewer';
 import {
   computeThreshold,
@@ -31,11 +30,11 @@ function buildTestXdr(): string {
 const VALID_XDR = buildTestXdr();
 
 function makeServer(result: Record<string, unknown>): (url: string) => SorobanServer {
-  return () => ({ simulateTransaction: jest.fn<() => Promise<Record<string, unknown>>>().mockResolvedValue(result) });
+  return () => ({ simulateTransaction: jest.fn().mockResolvedValue(result) });
 }
 
 function makeErrorServer(error: Error): (url: string) => SorobanServer {
-  return () => ({ simulateTransaction: jest.fn<() => Promise<never>>().mockRejectedValue(error) });
+  return () => ({ simulateTransaction: jest.fn().mockRejectedValue(error) });
 }
 
 // ---------------------------------------------------------------------------