Merge branch 'main' into feat/sep10-stellar-auth

Author: elizabetheonoja-art

.env.example

@@ -8,6 +8,37 @@ CREATOR_AUTH_AUDIENCE=substream-creators
 # Local database configuration
 DATABASE_FILENAME=./data/substream-protocol.sqlite
 
+# Soroban Event Indexer Configuration
+SOROBAN_RPC_URL=https://rpc.stellar.org
+SOROBAN_NETWORK_PASSPHRASE=Public Network
+SOROBAN_CONTRACT_ID=CAOUX2FZ65IDC4F2X7LJJ2SVF23A35CCTZB7KVVN475JCLKTTU4CEY6L
+SOROBAN_MAX_RETRIES=5
+SOROBAN_BASE_DELAY=1000
+SOROBAN_MAX_DELAY=30000
+SOROBAN_FAILURE_THRESHOLD=5
+SOROBAN_RESET_TIMEOUT=60000
+SOROBAN_REQUESTS_PER_SECOND=10
+
+# Soroban Indexer Configuration
+SOROBAN_PROCESSING_INTERVAL=5000
+SOROBAN_EVENT_TYPES=SubscriptionBilled,TrialStarted,PaymentFailed
+LOG_LEVEL=info
+
+# ActivityPub Federation Configuration
+ACTIVITYPUB_ENABLED=true
+ACTIVITYPUB_BASE_URL=https://your-domain.com
+ACTIVITYPUB_WORKER_INTERVAL=30000
+ACTIVITYPUB_MAX_RETRIES=3
+ACTIVITYPUB_SIGNING_SECRET=your-activitypub-signing-secret-key
+
+# Engagement Leaderboard Configuration
+LEADERBOARD_ENABLED=true
+LEADERBOARD_CACHE_TTL=21600
+LEADERBOARD_WORKER_INTERVAL=21600000
+LEADERBOARD_BATCH_SIZE=10
+LEADERBOARD_SEASON_LENGTH=monthly
+LEADERBOARD_CACHE_PREFIX=leaderboard:cret
+
 # CDN edge token configuration
 CDN_BASE_URL=https://cdn.example.com/private
 CDN_TOKEN_SECRET=replace-with-a-long-random-secret
@@ -44,6 +75,39 @@ WEB3STORAGE_API_KEY=your-web3-storage-api-key
 # Infura IPFS Configuration
 INFURA_API_KEY=your-infura-api-key
 
+# Security Alert Configuration
+SECURITY_ALERT_EMAIL=security@yourdomain.com
+
+# Behavioral Biometric Fraud Detection Configuration
+BEHAVIORAL_BIOMETRIC_ENABLED=false
+
+# Behavioral Collection Settings
+BEHAVIORAL_COLLECTION_ENABLED=true
+BEHAVIORAL_SAMPLE_RATE=1.0
+BEHAVIORAL_MAX_EVENTS_PER_SESSION=1000
+BEHAVIORAL_SESSION_TIMEOUT=1800000
+BEHAVIORAL_ANONYMIZE_IP=true
+BEHAVIORAL_HASH_SALT=your-behavioral-hash-salt
+
+# Behavioral Classifier Settings
+BEHAVIORAL_CLASSIFIER_ENABLED=true
+BEHAVIORAL_MODEL_TYPE=rule_based
+BEHAVIORAL_CONFIDENCE_THRESHOLD=0.7
+BEHAVIORAL_TRAINING_THRESHOLD=100
+BEHAVIORAL_RETRAIN_INTERVAL=604800000
+
+# Behavioral Risk Thresholds (0-1 scale)
+BEHAVIORAL_BOT_SCORE_THRESHOLD=0.8
+BEHAVIORAL_THROTTLING_THRESHOLD=0.6
+BEHAVIORAL_WATCH_LIST_THRESHOLD=0.9
+BEHAVIORAL_ANOMALY_THRESHOLD=0.75
+
+# Behavioral Privacy Settings
+BEHAVIORAL_DATA_RETENTION_DAYS=30
+BEHAVIORAL_HASH_PERSONAL_DATA=true
+BEHAVIORAL_EXCLUDE_PII=true
+BEHAVIORAL_GDPR_COMPLIANT=true
+
 # Database Configuration (for production)
 # DATABASE_URL=postgresql://username:password@localhost:5432/substream
 
@@ -94,6 +158,40 @@ RABBITMQ_NOTIFICATION_QUEUE=substream_notifications_queue
 RABBITMQ_EMAIL_QUEUE=substream_emails_queue
 RABBITMQ_LEADERBOARD_QUEUE=substream_leaderboard_queue
 
+# Social Token Gating Configuration
+SOCIAL_TOKEN_ENABLED=true
+SOCIAL_TOKEN_CACHE_TTL=300
+SOCIAL_TOKEN_REVERIFICATION_INTERVAL=60000
+SOCIAL_TOKEN_CACHE_PREFIX=social_token:
+STELLAR_MAX_RETRIES=3
+STELLAR_RETRY_DELAY=1000
+
+# Creator Collaboration Revenue Attribution Configuration
+COLLABORATION_ENABLED=true
+COLLABORATION_DEFAULT_SPLIT_RATIO=0.5
+COLLABORATION_MIN_WATCH_TIME_SECONDS=30
+COLLABORATION_CACHE_TTL=3600
+COLLABORATION_CACHE_PREFIX=collaboration:
+
 # Global Stats Caching Configuration
 GLOBAL_STATS_REFRESH_INTERVAL=60000
 GLOBAL_STATS_INITIAL_DELAY=5000
+
+# Predictive Churn Analysis Configuration
+CHURN_ANALYSIS_INTERVAL=3600000
+
+# Global Engagement Leaderboard Configuration
+LEADERBOARD_ENABLED=true
+LEADERBOARD_CACHE_TTL=21600
+LEADERBOARD_WORKER_INTERVAL=21600000
+LEADERBOARD_BATCH_SIZE=10
+LEADERBOARD_SEASON_LENGTH=monthly
+LEADERBOARD_CACHE_PREFIX=leaderboard:
+
+# Social Token Gating Configuration
+SOCIAL_TOKEN_ENABLED=true
+SOCIAL_TOKEN_CACHE_TTL=300
+SOCIAL_TOKEN_REVERIFICATION_INTERVAL=60000
+SOCIAL_TOKEN_CACHE_PREFIX=social_token:
+STELLAR_MAX_RETRIES=3
+STELLAR_RETRY_DELAY=1000

.github/dependabot.yml

@@ -0,0 +1,15 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 10
+    groups:
+      dependencies:
+        patterns:
+          - "*"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"

.github/workflows/test.yml

@@ -10,14 +10,16 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '20.11.0'
       - name: Install FFmpeg
         run: |
           sudo apt-get update
           sudo apt-get install -y ffmpeg
       - run: npm ci
+      - name: Security Audit
+        run: npm audit --audit-level=high
       - run: npm test

.gitignore

@@ -4,3 +4,7 @@ node_modules
 dist
 .DS_Store
 data
+logs/
+swagger_output.json
+swagger_output.yaml
+*.log