perf: add compression filter and document HTTP/2 proxy setup (#744)

.all-contributorsrc

@@ -0,0 +1,21 @@
+{
+	"projectName": "learnvault",
+	"projectOwner": "bakeronchain",
+	"repoType": "github",
+	"repoHost": "https://github.com",
+	"files": ["README.md"],
+	"imageSize": 100,
+	"commit": true,
+	"commitConvention": "angular",
+	"contributors": [
+		{
+			"login": "bakeronchain",
+			"name": "bakeronchain",
+			"avatar_url": "https://avatars.githubusercontent.com/u/242071730?v=4",
+			"profile": "https://github.com/bakeronchain",
+			"contributions": ["code", "doc"]
+		}
+	],
+	"contributorsPerLine": 7,
+	"linkToUsage": true
+}

.cargo/audit.toml

@@ -0,0 +1,15 @@
+# cargo-audit configuration
+# Ignore transitive advisories from Soroban/Stellar ecosystem crates
+# that cannot be resolved without upstream fixes.
+# These are all INFO-level "unmaintained" notices, not exploitable vulnerabilities.
+
+[advisories]
+ignore = [
+    # derivative 2.2.0 — unmaintained, used transitively by soroban-sdk
+    "RUSTSEC-2024-0388",
+    # paste 1.0.x — unmaintained, used transitively by soroban-sdk
+    "RUSTSEC-2024-0436",
+    # rand 0.8/0.9 — unsoundness with custom logger, used transitively by soroban-sdk
+    # Not exploitable in contract context (no custom global logger)
+    "RUSTSEC-2026-0097",
+]

.env.example

@@ -1,3 +1,5 @@
+<<<<<<< feat/empty-and-error-states
+ADMIN_EMAILS=admin@example.com # comma-separated list of admin emails
 # The environment to use `development`, `testing`, `staging`, `production`
 STELLAR_SCAFFOLD_ENV=development
 
@@ -26,3 +28,73 @@ PUBLIC_STELLAR_HORIZON_URL="http://localhost:8000"
 # PUBLIC_STELLAR_NETWORK_PASSPHRASE="Public Global Stellar Network ; September 2015"
 # PUBLIC_STELLAR_RPC_URL=
 # PUBLIC_STELLAR_HORIZON_URL=
+
+# V1 Contract IDs (deployed to Testnet)
+# These will be populated after running ./scripts/deploy-testnet.sh
+
+# Core Platform Contracts
+VITE_LEARN_TOKEN_CONTRACT_ID=""
+VITE_GOVERNANCE_TOKEN_CONTRACT_ID=""
+
+# Scholarship System Contracts  
+VITE_COURSE_MILESTONE_CONTRACT_ID=""
+VITE_MILESTONE_ESCROW_CONTRACT_ID=""
+VITE_SCHOLARSHIP_TREASURY_CONTRACT_ID=""
+VITE_SCHOLAR_NFT_CONTRACT_ID=""
+
+# Token Contract
+PUBLIC_USDC_CONTRACT_ID="" # USDC token contract address (testnet or mainnet)
+
+# Optional: Friendbot-funded deployer address for testing
+# PUBLIC_DEPLOYER_ADDRESS=""
+
+# Backend API URL
+VITE_SERVER_URL=http://localhost:4000
+VITE_API_URL=
+RESEND_API_KEY=
+EMAIL_FROM=notifications@learnvault.xyz
+FRONTEND_URL=http://localhost:3000
+=======
+# LearnVault environment template for local development. Copy this file to `.env`.
+
+# Scaffold / local tooling
+STELLAR_SCAFFOLD_ENV=development # Scaffold Stellar environment profile used by local scripts and CLI commands.
+XDG_CONFIG_HOME=.config # Location where the Stellar CLI stores config files and identities on your machine.
+
+# Stellar network
+PUBLIC_STELLAR_NETWORK=TESTNET # Frontend Stellar network used by wallet and contract helpers.
+PUBLIC_STELLAR_NETWORK_PASSPHRASE="Test SDF Network ; September 2015" # Stellar Testnet passphrase required by the frontend contract client.
+PUBLIC_STELLAR_RPC_URL=https://soroban-testnet.stellar.org # Public Soroban RPC endpoint for Stellar Testnet.
+PUBLIC_STELLAR_HORIZON_URL=https://horizon-testnet.stellar.org # Public Horizon endpoint for Stellar Testnet.
+
+# LearnVault contract IDs
+VITE_LEARN_TOKEN_CONTRACT_ID= # LearnToken contract ID set after deployment.
+VITE_GOVERNANCE_TOKEN_CONTRACT_ID= # Governance token contract ID set after deployment.
+VITE_SCHOLAR_NFT_CONTRACT_ID= # Scholar NFT contract ID set after deployment.
+VITE_COURSE_MILESTONE_CONTRACT_ID= # Course milestone contract ID set after deployment.
+VITE_SCHOLARSHIP_TREASURY_CONTRACT_ID= # Scholarship treasury contract ID set after deployment.
+VITE_MILESTONE_ESCROW_CONTRACT_ID= # Milestone escrow contract ID set after deployment.
+
+# USDC on Stellar Testnet
+VITE_USDC_CONTRACT_ID= # USDC contract ID used by frontend funding flows.
+
+# Legacy frontend aliases still read by older screens/hooks
+PUBLIC_LEARN_TOKEN_CONTRACT= # Legacy alias for the LearnToken contract ID.
+PUBLIC_GOVERNANCE_TOKEN_CONTRACT= # Legacy alias for the governance token contract ID.
+PUBLIC_SCHOLAR_NFT_CONTRACT= # Legacy alias for the Scholar NFT contract ID.
+PUBLIC_COURSE_MILESTONE_CONTRACT= # Legacy alias for the course milestone contract ID.
+PUBLIC_SCHOLARSHIP_TREASURY_CONTRACT= # Legacy alias for the scholarship treasury contract ID.
+PUBLIC_MILESTONE_ESCROW_CONTRACT= # Legacy alias for the milestone escrow contract ID.
+PUBLIC_SCHOLARSHIP_GOVERNANCE_CONTRACT= # Legacy governance/event contract ID used by profile and activity feeds.
+PUBLIC_USDC_CONTRACT_ID= # Legacy alias for the USDC contract ID used by the current USDC utility.
+
+# Backend API
+VITE_API_URL=http://localhost:3001 # Base URL for frontend requests to the LearnVault backend when it runs locally.
+VITE_API_BASE_URL=/api # Relative API prefix used by upload and scholar milestone pages in the frontend.
+VITE_SERVER_URL=http://localhost:3001 # Backward-compatible alias still read by the current comment UI.
+
+# IPFS / Pinata
+PINATA_API_KEY= # Pinata API key used for authenticated file uploads to IPFS.
+PINATA_SECRET= # Pinata API secret used for authenticated file uploads to IPFS.
+VITE_IPFS_GATEWAY_URL=https://gateway.pinata.cloud/ipfs # Optional public IPFS gateway override for displaying uploaded files.
+>>>>>>> main

.github/CODEOWNERS

@@ -0,0 +1,11 @@
+# Global — all PRs
+* @bakeronchain
+
+# Smart contracts — any Rust changes
+/contracts/ @bakeronchain
+
+# Frontend — any TypeScript/React changes
+/src/ @bakeronchain
+
+# CI/CD — any workflow changes require extra scrutiny
+/.github/workflows/ @bakeronchain

.github/ISSUE_TEMPLATE/bounty_request.md

@@ -0,0 +1,41 @@
+---
+name: Bounty Request
+about: Request a bounty for a task or improvement
+title: '[BOUNTY] '
+labels: bounty, enhancement
+assignees: ''
+---
+
+## Bounty Description
+<!-- A clear and concise description of the task or improvement needed -->
+
+## Category
+- [ ] Development
+- [ ] Documentation
+- [ ] Design
+- [ ] Testing
+- [ ] Research
+- [ ] Other
+
+## Difficulty Level
+- [ ] Beginner
+- [ ] Intermediate
+- [ ] Advanced
+
+## Estimated Reward
+<!-- Suggested reward amount in tokens -->
+
+## Requirements
+<!-- Specific requirements and acceptance criteria -->
+
+## Deliverables
+<!-- What needs to be delivered to complete this bounty -->
+
+## Timeline
+<!-- Expected completion timeframe -->
+
+## Skills Required
+<!-- List of skills or technologies needed -->
+
+## Additional Context
+<!-- Add any other context about the bounty request here -->

.github/ISSUE_TEMPLATE/bug_report.md

@@ -1,42 +1,34 @@
 ---
-name: "Bug Report"
-about: "Report a bug to help us improve LearnVault."
-title: "[Bug] <describe the bug>"
-labels: ["bug", "help wanted"]
-assignees: ""
+name: Bug Report
+about: Create a report to help us improve
+title: '[BUG] '
+labels: bug
+assignees: ''
 ---
 
-## Describe the bug
-
-A clear and concise description of what the bug is.
-
-## To Reproduce
-
-Steps to reproduce the behavior:
+## Description
+<!-- A clear and concise description of the bug -->
 
+## Steps to Reproduce
 1. Go to '...'
 2. Click on '...'
 3. Scroll down to '...'
 4. See error
 
-## Expected behavior
-
-A clear and concise description of what you expected to happen.
-
-## Screenshots
+## Expected Behavior
+<!-- What you expected to happen -->
 
-If applicable, add screenshots to help explain your problem.
+## Actual Behavior
+<!-- What actually happened -->
 
-## Environment (please complete the following information):
+## Environment
+- **Network:** (e.g., testnet, mainnet, local)
+- **Browser:** (e.g., Chrome, Firefox, Safari)
+- **Wallet:** (e.g., Freighter, Albedo, LOBSTR)
+- **OS:** (e.g., Windows, macOS, Linux)
 
-- OS: [e.g. macOS, Windows, Linux]
-- Browser [e.g. Chrome, Safari]
-- Wallet [e.g. MetaMask, Freighter]
-
-## Additional context
-
-Add any other context about the problem here.
-
----
+## Screenshots
+<!-- If applicable, add screenshots to help explain your problem -->
 
-_Thank you for helping us improve LearnVault!_
+## Additional Context
+<!-- Add any other context about the problem here -->

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,50 @@
+name: Bug report
+description: Report something that is broken in LearnVault.
+title: "[Bug]: "
+labels:
+  - bug
+  - triage
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to file a bug report.
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+      description: Provide exact steps so we can reproduce the issue.
+      placeholder: |
+        1. Go to ...
+        2. Click ...
+        3. Observe ...
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+      description: What should have happened?
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior
+      description: What happened instead?
+    validations:
+      required: true
+  - type: input
+    id: environment
+    attributes:
+      label: Environment
+      description:
+        Include OS, browser, Node.js version, and wallet details if relevant.
+      placeholder: macOS 14.4, Chrome 123, Node 22.2.0, Freighter
+    validations:
+      required: true
+  - type: textarea
+    id: additional_context
+    attributes:
+      label: Additional context
+      description: Logs, screenshots, links, or any extra information.

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Ask a Question
+    url: https://github.com/bakeronchain/learnvault/discussions
+    about: Please ask and answer questions here
+  - name: Security Vulnerability
+    url: https://github.com/bakeronchain/learnvault/security/advisories
+    about: Please report security vulnerabilities privately

.github/ISSUE_TEMPLATE/feature_request.md

@@ -1,29 +1,26 @@
 ---
-name: "Feature Request"
-about: "Suggest a new feature for LearnVault."
-title: "[Feature] <describe your feature>"
-labels: ["enhancement", "feature", "help wanted"]
-assignees: ""
+name: Feature Request
+about: Suggest an idea for this project
+title: '[FEATURE] '
+labels: enhancement
+assignees: ''
 ---
 
-## Is your feature request related to a problem? Please describe.
+## Problem Statement
+<!-- Is your feature request related to a problem? Please describe -->
 
-A clear and concise description of what the problem is. Ex: I'm always
-frustrated when [...]
+## Proposed Solution
+<!-- Describe the solution you'd like -->
 
-## Describe the solution you'd like
+## Affected Layer
+- [ ] Frontend
+- [ ] Backend
+- [ ] Smart Contract
+- [ ] Documentation
+- [ ] Other
 
-A clear and concise description of what you want to happen.
+## Alternatives Considered
+<!-- Describe any alternative solutions or features you've considered -->
 
-## Describe alternatives you've considered
-
-A clear and concise description of any alternative solutions or features you've
-considered.
-
-## Additional context
-
-Add any other context or screenshots about the feature request here.
-
----
-
-_Thank you for helping improve LearnVault!_
+## Additional Context
+<!-- Add any other context or screenshots about the feature request here -->

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,30 @@
+name: Feature request
+description: Suggest a new capability or improvement for LearnVault.
+title: "[Feature]: "
+labels:
+  - enhancement
+  - triage
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem statement
+      description: What problem are you trying to solve?
+      placeholder: It is difficult to ... because ...
+    validations:
+      required: true
+  - type: textarea
+    id: proposed_solution
+    attributes:
+      label: Proposed solution
+      description: Describe the ideal implementation or behavior.
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description:
+        What alternatives did you evaluate and why were they insufficient?
+    validations:
+      required: false