Fix/cr 1.4.2

.env.example

@@ -24,7 +24,46 @@ FIREBLOCKS_BASE_PATH=https://api.fireblocks.io
 
 # ── Iagon API (Required) ─────────────────────────────────────
 IAGON_API_KEY=<your-iagon-api-key>
+# Optional - override the Iagon API base URL (defaults to https://api.fireblocks.partners.iagon.com).
+# Set this for staging or private Iagon deployments.
+# IAGON_BASE_URL=https://api.fireblocks.partners.iagon.com
 
 # ── Cardano Network ──────────────────────────────────────────
 # Valid values: mainnet, preprod (defaults to mainnet)
 CARDANO_NETWORK=mainnet
+
+# ── Security (Optional) ─────────────────────────────────────
+# Max request body size (default: 1mb)
+MAX_BODY_SIZE=1mb
+
+# Rate limiting: requests per window (default: 100 requests per 15 min)
+RATE_LIMIT_WINDOW_MS=900000
+RATE_LIMIT_MAX_REQUESTS=100
+
+# Express "trust proxy" setting (default: false)
+# Set to the number of reverse-proxy hops in front of the server
+# (e.g. 1 for a single nginx/ALB), a preset/subnet string ("loopback",
+# "10.0.0.0/8"), or true to trust the entire X-Forwarded-For chain.
+# Required for rate limiting to key on the client IP behind a proxy.
+TRUST_PROXY=false
+
+# CORS: comma-separated list of allowed origins, or * for all.
+# Unset by default: no CORS headers are sent and browsers enforce
+# same-origin. Set only if browser clients must call this API directly.
+CORS_ORIGINS=
+
+# API Key authentication (default: disabled)
+# When enabled, all requests (except /health, /api-docs, /docs) require X-API-Key header
+API_KEY_ENABLED=false
+API_KEY=
+
+# ── Protocol Parameters (Optional) ──────────────────────────
+# Override Cardano protocol parameters if they change at a hard fork.
+# Only set these if you need to override the SDK defaults.
+# These are passed to SDK via createInstance({ protocolParams: {...} })
+#
+# MIN_FEE_A=44           # Fee coefficient: lovelace per tx byte
+# MIN_FEE_B=155381       # Fee constant: base lovelace fee
+# COINS_PER_UTXO_BYTE=4310  # For min-ada calculations
+# STAKE_KEY_DEPOSIT=2000000  # Stake key registration deposit
+# DREP_DEPOSIT=500000000     # DRep registration deposit

.github/workflows/ci.yml

@@ -0,0 +1,113 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  lint-and-build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Type check
+        run: npm run typecheck
+
+      - name: Build
+        run: npm run build
+
+  unit-tests:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Run unit tests
+        run: npm test
+
+  e2e-staking-info:
+    runs-on: ubuntu-latest
+    needs: [lint-and-build, unit-tests]
+    environment: tests
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Build
+        run: npm run build
+
+      - name: Run staking info test (read-only)
+        env:
+          FIREBLOCKS_API_USER_KEY: ${{ secrets.FIREBLOCKS_API_KEY }}
+          FIREBLOCKS_API_USER_SECRET_KEY: ${{ secrets.FIREBLOCKS_API_SECRET }}
+          IAGON_API_KEY: ${{ secrets.IAGON_API_KEY }}
+          CARDANO_NETWORK: mainnet
+          VAULT_ACCOUNT_ID: '1'
+          STAKING_ACTION: info
+          FIREBLOCKS_BASE_PATH: ${{ secrets.FIREBLOCKS_BASE_PATH }}
+        run: npx tsx scripts/test-staking.ts
+
+  e2e-ada-transfer:
+    runs-on: ubuntu-latest
+    needs: [lint-and-build, unit-tests]
+    environment: tests
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Build
+        run: npm run build
+
+      - name: Run ADA transfer test
+        env:
+          FIREBLOCKS_API_USER_KEY: ${{ secrets.FIREBLOCKS_API_KEY }}
+          FIREBLOCKS_API_USER_SECRET_KEY: ${{ secrets.FIREBLOCKS_API_SECRET }}
+          IAGON_API_KEY: ${{ secrets.IAGON_API_KEY }}
+          CARDANO_NETWORK: preprod
+          TRANSFER_AMOUNT_ADA: '3'
+          SOURCE_VAULT: '0'
+          DEST_VAULT: '1'
+          FIREBLOCKS_BASE_PATH: ${{ secrets.FIREBLOCKS_BASE_PATH }}
+        run: npx tsx scripts/test-ada-transfer.ts

.github/workflows/test-ada-transfer.yml

@@ -6,7 +6,7 @@ on:
       network:
         description: 'Cardano network'
         required: true
-        default: 'mainnet'
+        default: 'preprod'
         type: choice
         options:
           - preprod

.github/workflows/test-staking.yml

@@ -6,7 +6,7 @@ on:
       network:
         description: 'Cardano network'
         required: true
-        default: 'mainnet'
+        default: 'preprod'
         type: choice
         options:
           - preprod