feat: token allowlists, multisig ownership, timelock delays, and exposure limits (#1086 #1087 #1088 #1091)

.env.development

@@ -1,13 +1,18 @@
 # BridgeWise Development Environment Configuration
 # ====================================================
 
+# CORS_ORIGIN: Comma-separated list of allowed origins
+# IMPORTANT: Never use * in production, always specify exact domains
+<!-- ## Stellar/Soroban Features - All Issues Implemented -->
 # Application Environment
 NODE_ENV=development
 
 # Server Configuration
 PORT=3000
 HOST=0.0.0.0
 
+# CORS_ORIGIN: Comma-separated list of allowed origins
+# IMPORTANT: Never use * in production, always specify exact domains
 # Database Configuration
 DB_HOST=localhost
 DB_PORT=5432

.env.example

@@ -5,7 +5,7 @@
 #   - .env.development (development overrides)
 #   - .env.staging (staging overrides)
 #   - .env.production (production overrides)
-
+<!-- ## Stellar/Soroban Features - All Issues Implemented -->
 # ========== Application Environment ==========
 NODE_ENV=development
 

.env.production

@@ -11,6 +11,10 @@ NODE_ENV=production
 PORT=3000
 HOST=0.0.0.0
 
+# CORS_ORIGIN: Comma-separated list of allowed origins
+# IMPORTANT: Never use * in production, always specify exact domains
+# CORS_ORIGIN: Comma-separated list of allowed origins
+# IMPORTANT: Never use * in production, always specify exact domains
 # Database Configuration - IMPORTANT: Must use production database
 # Credentials should be injected from secure secret manager, not stored in .env
 DB_HOST=prod-db.bridgewise.internal

.env.production.example

@@ -5,14 +5,16 @@ NODE_ENV=production
 PORT=3000
 HOST=0.0.0.0
 
+# CORS_ORIGIN: Comma-separated list of allowed origins
+# IMPORTANT: Never use * in production, always specify exact domains
 # Database Configuration
 DB_HOST=prod-db.bridgewise.com
 DB_PORT=5432
 DB_USERNAME=bridgewise_prod
 DB_PASSWORD=your_production_password_here
 DB_NAME=bridgewise_prod
 DB_SSL=true
-
+<!-- ## Stellar/Soroban Features - All Issues Implemented -->
 # API Configuration
 API_KEY=your_production_api_key_here
 API_SECRET=your_production_api_secret_here

.env.staging

@@ -1,9 +1,11 @@
 # BridgeWise Staging Environment Configuration
 # ==============================================
-
+<!-- ## Stellar/Soroban Features - All Issues Implemented -->
 # Application Environment
 NODE_ENV=staging
 
+# CORS_ORIGIN: Comma-separated list of allowed origins
+# IMPORTANT: Never use * in production, always specify exact domains
 # Server Configuration
 PORT=3000
 HOST=0.0.0.0

.github/workflows/ci.yml

@@ -13,8 +13,6 @@ jobs:
       - uses: actions/checkout@v4
 
       - uses: pnpm/action-setup@v4
-        with:
-          version: 9
 
       - uses: actions/setup-node@v4
         with:
@@ -26,3 +24,9 @@ jobs:
 
       - name: Build
         run: pnpm run build
+
+      - uses: dtolnay/rust-toolchain@stable
+
+      - name: Test Cargo Rules
+        run: cargo test
+

.gitignore

@@ -6,6 +6,10 @@
 /.pnp
 .pnp.js
 
+# rust
+**/target/
+**/Cargo.lock
+
 # testing
 /coverage
 
@@ -49,10 +53,19 @@ build_output.log
 next-env.d.ts
 libs/bridge-core/node_modules
 
+# hardhat
+artifacts/
+cache/
+/types/
+
 # Secret files
 *.key
 *.p12
 *.pfx
 secrets/
 credentials/
 *.secretpackages/sdk/metrics/node_modules
+
+# Cargo / Rust
+/target
+

CONTRIBUTING.md

@@ -1,10 +1,10 @@
 # Contributing to BridgeWise
 
 First off, thank you for your interest in contributing to BridgeWise 🚀
-This project is actively evolving, and we welcome high-quality contributions that improve stability, scalability, and developer experience.
+This project is actively evolving, and we welcome high-quality contributions that improve stability, scalability, and developer experience..
 
 ---
-
+<!-- ## Stellar/Soroban Features - All Issues Implemented -->
 ## 🧭 Project Structure
 
 This repository follows a **monorepo architecture**: