0xsequence/master

.circleci/config.yml

@@ -0,0 +1,26 @@
+# Use the latest 2.1 version of CircleCI pipeline process engine.
+# See: https://circleci.com/docs/configuration-reference
+
+version: 2.1
+executors:
+  my-custom-executor:
+    docker:
+      - image: cimg/base:stable
+        auth:
+          # ensure you have first added these secrets
+           # visit app.circleci.com/settings/project/github/Dargon789/foundry/environment-variables
+          username: $DOCKER_HUB_USER
+          password: $DOCKER_HUB_PASSWORD
+jobs:
+  web3-defi-game-project-:
+
+    executor: my-custom-executor
+    steps:
+      - checkout
+      - run: |
+          # echo Hello, World!
+
+workflows:
+  my-custom-workflow:
+    jobs:
+      - web3-defi-game-project-

.env.local

@@ -0,0 +1,48 @@
+# Created by Vercel CLI
+BLOB_READ_WRITE_TOKEN="vercel_blob_rw_UjLrE6dsiV479Qsc_33IFgbOPKXFn39IKTAB9tU9UONZT57"
+BLOB_READ_WRITE_TOKEN_READ_WRITE_TOKEN="vercel_blob_rw_LVSrn58fbTnQ0sUx_smK9kW4VAlKQs96B9hCuyv9JAgKeiQ"
+BLOB_READ_WRITE_TOKEN_READ_WRITE_TOKEN_READ_WRITE_TOKEN="vercel_blob_rw_yCiNyAiGheZettr5_pOfrxb9f5zVdMnzSALORmbXNGXVdkd"
+BLOB_READ_WRITE_TOKEN_READ_WRITE_TOKEN_READ_WRITE_TOKEN_READ_WRITE_TOKEN="vercel_blob_rw_NZBM9WIRhtWjs2ND_3Qs1jTvqlIJZ3TypmxRJc1Dzoojprf"
+DATABASE_URL="postgres://default:wcGa0bBN5mYF@ep-mute-lake-a400aq2a-pooler.us-east-1.aws.neon.tech/verceldb?sslmode=require"
+DATABASE_URL_UNPOOLED="postgresql://default:wcGa0bBN5mYF@ep-mute-lake-a400aq2a.us-east-1.aws.neon.tech/verceldb?sslmode=require"
+DESCOPE_DISCOVERY_URL="https://api.descope.com/v1/apps/P37uqEcVotbqEU9foQKIZlfV7qUo/.well-known/openid-configuration"
+DESCOPE_ISSUER="https://api.descope.com/v1/apps/P37uqEcVotbqEU9foQKIZlfV7qUo"
+DESCOPE_PROJECT_ID="P37uqEcVotbqEU9foQKIZlfV7qUo"
+KV_REST_API_READ_ONLY_TOKEN="AkPLAAIgcDHF1sKSB-xzXwFgRTIocEH4CpplboXPAh86hYbp-VhUCQ"
+KV_REST_API_TOKEN="AUPLAAIjcDE1YmQ5MWU0ZGIyODI0ODNkYTMyZWIxODdjMWEwMmJlMXAxMA"
+KV_REST_API_URL="https://cute-turtle-17355.upstash.io"
+KV_URL="rediss://default:AUPLAAIjcDE1YmQ5MWU0ZGIyODI0ODNkYTMyZWIxODdjMWEwMmJlMXAxMA@cute-turtle-17355.upstash.io:6379"
+MOTHERDUCK_READ_SCALING_TOKEN="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6Im1vdGhlcmR1Y2stbGltZS1wYXJraC1lV0BzYS5tb3RoZXJkdWNrLmNvbSIsInNlc3Npb24iOiJtb3RoZXJkdWNrLWxpbWUtcGFya2gtZVcuc2EubW90aGVyZHVjay5jb20iLCJwYXQiOiJCbWZCd2otRmJXWjNmN2ZVblJLbUJPUzhZX1gwck9nNW9WTVRkVFRwTFRBIiwidXNlcklkIjoiYjNlNjJjMTgtMTc5YS00ZmY0LWE4NmEtMWY1OTgxZDc1NGIwIiwiaXNzIjoibWRfcGF0IiwicmVhZE9ubHkiOnRydWUsInRva2VuVHlwZSI6InJlYWRfc2NhbGluZyIsImlhdCI6MTczOTk2NDMyM30.BgfG_dMSJmjSsk319lG56vd_GPT5APQhfr3jWZ5chDk"
+MOTHERDUCK_TOKEN="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6Im1vdGhlcmR1Y2stbGltZS1wYXJraC1lV0BzYS5tb3RoZXJkdWNrLmNvbSIsInNlc3Npb24iOiJtb3RoZXJkdWNrLWxpbWUtcGFya2gtZVcuc2EubW90aGVyZHVjay5jb20iLCJwYXQiOiJMTFhIdTkxT0dIMFZRMmtFQXQ5U3lyNDJEX3prQkhlX3FVcnVoVVYzcmY4IiwidXNlcklkIjoiYjNlNjJjMTgtMTc5YS00ZmY0LWE4NmEtMWY1OTgxZDc1NGIwIiwiaXNzIjoibWRfcGF0IiwicmVhZE9ubHkiOmZhbHNlLCJ0b2tlblR5cGUiOiJyZWFkX3dyaXRlIiwiaWF0IjoxNzM5OTY0MzIzfQ.jLRpmzMwNtiRhC1UfncuNE5sGn3Fcq66fwSJdLexyrQ"
+NEXT_PUBLIC_DESCOPE_BASE_URL="https://api.descope.com"
+NEXT_PUBLIC_DESCOPE_PROJECT_ID="P37uqEcVotbqEU9foQKIZlfV7qUo"
+NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY="pk_test_51SFhvRRM3HLKVFHZGbLlvvLFxpaiSAQbB9A9swyVweExk2TNCeOIriobs2LWRgI1j9SiLM4fZOkOAorx5qt3ZON500oMBDR7xN"
+NILEDB_API_URL="https://eu-central-1.api.thenile.dev/v2/databases/0193de50-f30f-7633-9d02-c41c7239f27a"
+NILEDB_PASSWORD="4dc80077-f364-4305-b23a-a1d61a2f6010"
+NILEDB_POSTGRES_URL="postgres://eu-central-1.db.thenile.dev/nile_lime_flower"
+NILEDB_URL="postgres://0193de50-f6e3-756f-b089-cfa890da133c:4dc80077-f364-4305-b23a-a1d61a2f6010@eu-central-1.db.thenile.dev/nile_lime_flower"
+NILEDB_USER="0193de50-f6e3-756f-b089-cfa890da133c"
+PGDATABASE="verceldb"
+PGHOST="ep-mute-lake-a400aq2a-pooler.us-east-1.aws.neon.tech"
+PGHOST_UNPOOLED="ep-mute-lake-a400aq2a.us-east-1.aws.neon.tech"
+PGPASSWORD="wcGa0bBN5mYF"
+PGUSER="default"
+POSTGRES_DATABASE="verceldb"
+POSTGRES_HOST="ep-mute-lake-a400aq2a-pooler.us-east-1.aws.neon.tech"
+POSTGRES_PASSWORD="wcGa0bBN5mYF"
+POSTGRES_PRISMA_URL="postgres://default:wcGa0bBN5mYF@ep-mute-lake-a400aq2a-pooler.us-east-1.aws.neon.tech/verceldb?pgbouncer=true&connect_timeout=15&sslmode=require"
+POSTGRES_URL="postgres://default:wcGa0bBN5mYF@ep-mute-lake-a400aq2a-pooler.us-east-1.aws.neon.tech/verceldb?sslmode=require"
+POSTGRES_URL_NON_POOLING="postgres://default:wcGa0bBN5mYF@ep-mute-lake-a400aq2a.us-east-1.aws.neon.tech/verceldb?sslmode=require"
+POSTGRES_URL_NO_SSL="postgres://default:wcGa0bBN5mYF@ep-mute-lake-a400aq2a-pooler.us-east-1.aws.neon.tech/verceldb"
+POSTGRES_USER="default"
+QSTASH_CURRENT_SIGNING_KEY="sig_86r5s4G8GT7m8swap1TP6yEmJiaH"
+QSTASH_NEXT_SIGNING_KEY="sig_5uYvvAV8bQyGQxVW42NxkiGjmreT"
+QSTASH_TOKEN="eyJVc2VySUQiOiI0YmZjNmMxMC1mODk3LTQyMjgtOGUzNS00NWUwZWI0NzUxYTYiLCJQYXNzd29yZCI6IjYxZDAyNGM0M2Q1ZTRmYjE4ZDIzMzk3NjBkMmM0Njc2In0="
+QSTASH_URL="https://qstash.upstash.io"
+STRIPE_MCP_KEY="ek_test_YWNjdF8xU0ZodlJSTTNITEtWRkhaLDR3eVZwVnd6N1JQYUR5QWREbGZXQ0tpOElaNEJDbXo_00hYmVqZLB"
+STRIPE_PUBLISHABLE_KEY="pk_test_51SFhvRRM3HLKVFHZGbLlvvLFxpaiSAQbB9A9swyVweExk2TNCeOIriobs2LWRgI1j9SiLM4fZOkOAorx5qt3ZON500oMBDR7xN"
+STRIPE_SECRET_KEY="sk_test_51SFhvRRM3HLKVFHZtXc63GiKTEmW1SitoCaVBKbEYYaazFR3nEnoZdiG3k7gEdXGXhDbYh4ocBqxTBrT1Pwlk3Hi001TnKkuI1"
+UPSTASH_VECTOR_REST_READONLY_TOKEN="ABYIMHN1cmUtcGVuZ3Vpbi04ODA0OC11czFyZWFkb25seVpUQmxaR1k0TlRNdFl6azVZeTAwTm1VM0xXSTVORGd0TURReFlUSTRZemt4TW1NMg=="
+UPSTASH_VECTOR_REST_TOKEN="ABYFMHN1cmUtcGVuZ3Vpbi04ODA0OC11czFhZG1pblpXTm1NR001T1RZdFl6UmtZeTAwTTJWaUxUazJOVEl0Wm1WbE5XVXdZbU15T0dRNA=="
+UPSTASH_VECTOR_REST_URL="https://sure-penguin-88048-us1-vector.upstash.io"
+VERCEL_OIDC_TOKEN="eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Im1yay00MzAyZWMxYjY3MGY0OGE5OGFkNjFkYWRlNGEyM2JlNyJ9.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.eH0A5AMBIvvXstPbxDPRZXIR3NJyymZ82PQptPgHfJ3a-hjWJSDsPYgAYZuX74aQIvtPDi1o3JoLnF79RbLGeEPsClZPw0K73RODcGOs-mvTXkkuyratfKPkKrUqITTntgulxSQkz3tO3BuW3e8_waMCL01_XsIzGSUiEFJSowIzuelWp8tUTPISL66zz8Yuvmcf5_xHz0WlSb9BQvPNJSgrU9uze7kdYo5tHa3oTCjxuEu_qhdaKpqUh4AyVE1FXZvsaxM_XP-gujYC30nyot4W0BUIzuVTRLYPE4we4--U7MaxeM3H0J1QaGkDq9j6gPEwFdt5V54jBSv5v7Vj3A"

.github/workflows/azure-pipelines.yml

@@ -0,0 +1,11 @@
+#file: noinspection YAMLSchemaValidation
+# Node.js
+# Build a general Node.js project with npm.
+# Add steps that analyze code, save build artifacts, deploy, and more:
+# https://docs.microsoft.com/azure/devops/pipelines/languages/javascript
+
+
+
+
+on:
+jobs:

.github/workflows/neuralegion.yml

@@ -0,0 +1,177 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+#
+# Run a Nexploit Scan
+# This action runs a new security scan in Nexploit, or reruns an existing one.
+# Build Secure Apps & APIs. Fast.
+# [NeuraLegion](https://www.neuralegion.com) is a powerful dynamic application & API security testing (DAST) platform that security teams trust and developers love.
+# Automatically Tests Every Aspect of Your Apps & APIs
+# Scans any target, whether Web Apps, APIs (REST. & SOAP, GraphQL & more), Web sockets or mobile, providing actionable reports
+# Seamlessly integrates with the Tools and Workflows You Already Use
+#
+# NeuraLegion works with your existing CI/CD pipelines – trigger scans on every commit, pull request or build with unit testing.
+# Spin-Up, Configure and Control Scans with Code
+# One file. One command. One scan. No UI needed.
+#
+# Super-Fast Scans
+#
+# Interacts with applications and APIs, instead of just crawling them and guessing.
+# Scans are fast as our AI-powered engine can understand application architecture and generate sophisticated and targeted attacks.
+#
+# No False Positives
+#
+# Stop chasing ghosts and wasting time. NeuraLegion doesn’t return false positives, so you can focus on releasing code.
+#
+# Comprehensive Security Testing
+#
+# NeuraLegion tests for all common vulnerabilities, such as SQL injection, CSRF, XSS, and XXE -- as well as uncommon vulnerabilities, such as business logic vulnerabilities.
+#
+# More information is available on NeuraLegion’s:
+# * [Website](https://www.neuralegion.com/)
+# * [Knowledge base](https://docs.neuralegion.com/docs/quickstart)
+# * [YouTube channel](https://www.youtube.com/channel/UCoIC0T1pmozq3eKLsUR2uUw)
+# * [GitHub Actions](https://github.com/marketplace?query=neuralegion+)
+#
+# Inputs
+#
+# `name`
+#
+# **Required**. Scan name.
+#
+# _Example:_ `name: GitHub scan ${{ github.sha }}`
+#
+# `api_token`
+#
+# **Required**. Your Nexploit API authorization token (key). You can generate it in the **Organization** section on [nexploit.app](https://nexploit.app/login). Find more information [here](https://kb.neuralegion.com/#/guide/np-web-ui/advanced-set-up/managing-org?id=managing-organization-apicli-authentication-tokens).
+#
+# _Example:_ `api_token: ${{ secrets.NEXPLOIT_TOKEN }}`
+#
+# `restart_scan`
+#
+# **Required** when restarting an existing scan by its ID. You can get the scan ID in the Scans section on [nexploit.app](https://nexploit.app/login).<br> Please make sure to only use the necessary parameters. Otherwise, you will get a response with the parameter usage requirements.
+#
+# _Example:_ `restart_scan: ai3LG8DmVn9Rn1YeqCNRGQ)`
+#
+# `discovery_types`
+#
+# **Required**. Array of discovery types. The following types are available:
+# * `archive` - uses an uploaded HAR-file for a scan
+# * `crawler` - uses a crawler to define the attack surface for a scan
+# * `oas` - uses an uploaded OpenAPI schema for a scan <br>
+# If no discovery type is specified, `crawler` is applied by default.
+#
+# _Example:_
+#
+# ```yml
+# discovery_types: |
+#   [ "crawler", "archive" ]
+# ```
+#
+# `file_id`
+#
+# **Required** if the discovery type is set to `archive` or `oas`. ID of a HAR-file or an OpenAPI schema you want to use for a scan. You can get the ID of an uploaded HAR-file or an OpenAPI schema in the **Storage** section on [nexploit.app](https://nexploit.app/login).
+#
+# _Example:_
+#
+# ```
+# FILE_ID=$(nexploit-cli archive:upload   \
+# --token ${{ secrets.NEXPLOIT_TOKEN }}   \
+# --discard true                          \
+# ./example.har)
+# ```
+#
+# `crawler_urls`
+#
+# **Required** if the discovery type is set to `crawler`. Target URLs to be used by the crawler to define the attack surface.
+#
+# _Example:_
+#
+# ```
+# crawler_urls: |
+#   [ "http://vulnerable-bank.com" ]
+# ```
+#
+# `hosts_filter`
+#
+# **Required** when the the discovery type is set to `archive`. Allows selecting specific hosts for a scan.
+#
+# Outputs
+#
+# `url`
+#
+# Url of the resulting scan
+#
+# `id`
+#
+# ID of the created scan. This ID could then be used to restart the scan, or for the following GitHub actions:
+# * [Nexploit Wait for Issues](https://github.com/marketplace/actions/nexploit-wait-for-issues)
+# * [Nexploit Stop Scan](https://github.com/marketplace/actions/nexploit-stop-scan)
+#
+# Example usage
+#
+# Start a new scan with parameters
+#
+# ```yml
+# steps:
+#     - name: Start Nexploit Scan
+#       id: start
+#       uses: NeuraLegion/run-scan@29ebd17b4fd6292ce7a238a59401668953b37fbe
+#       with:
+#         api_token: ${{ secrets.NEXPLOIT_TOKEN }}
+#         name: GitHub scan ${{ github.sha }}
+#         discovery_types: |
+#           [ "crawler", "archive" ]
+#         crawler_urls: |
+#           [ "http://vulnerable-bank.com" ]
+#         file_id: LiYknMYSdbSZbqgMaC9Sj
+#         hosts_filter: |
+#           [ ]
+#     - name: Get the output scan url
+#       run: echo "The scan was started on ${{ steps.start.outputs.url }}"
+# ```
+#
+# Restart an existing scan
+#
+# ```yml
+# steps:
+#     - name: Start Nexploit Scan
+#       id: start
+#       uses: NeuraLegion/run-scan@29ebd17b4fd6292ce7a238a59401668953b37fbe
+#       with:
+#         api_token: ${{ secrets.NEXPLOIT_TOKEN }}
+#         name: GitHub scan ${{ github.sha }}
+#         restart_scan: ai3LG8DmVn9Rn1YeqCNRGQ
+#     - name: Get the output scan url
+#       run: echo "The scan was started on ${{ steps.start.outputs.url }}"
+
+
+name: "NeuraLegion"
+
+on:
+  push:
+    branches: [ "master" ]
+  pull_request:
+    branches: [ "master" ]
+  schedule:
+    - cron: '31 8 * * 2'
+
+jobs:
+  neuralegion_scan:
+    runs-on: ubuntu-18.04
+    name: A job to run a Nexploit scan
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+      - name: Start Nexploit Scan 🏁
+        id: start
+        uses: NeuraLegion/run-scan@29ebd17b4fd6292ce7a238a59401668953b37fbe
+        with:
+          api_token: ${{ secrets.NEURALEGION_TOKEN }}
+          name: GitHub scan ${{ github.sha }}
+          discovery_types: |
+            [ "crawler" ]
+          crawler_urls: |
+            [ "https://brokencrystals.com" ] # ✏️ Update this to the url you wish to scan

.hintrc

@@ -0,0 +1,8 @@
+{
+  "extends": [
+    "development"
+  ],
+  "hints": {
+    "typescript-config/strict": "off"
+  }
+}

.husky/pre-commit

@@ -0,0 +1,71 @@
+#!/bin/sh
+
+if [ "$LEFTHOOK_VERBOSE" = "1" -o "$LEFTHOOK_VERBOSE" = "true" ]; then
+  set -x
+fi
+
+if [ "$LEFTHOOK" = "0" ]; then
+  exit 0
+fi
+
+call_lefthook()
+{
+  if test -n "$LEFTHOOK_BIN"
+  then
+    "$LEFTHOOK_BIN" "$@"
+  elif lefthook -h >/dev/null 2>&1
+  then
+    lefthook "$@"
+  elif /mnt/c/Users/Legion/sequence.js/node_modules/.pnpm/lefthook-linux-x64@2.1.1/node_modules/lefthook-linux-x64/bin/lefthook -h >/dev/null 2>&1
+  then
+    /mnt/c/Users/Legion/sequence.js/node_modules/.pnpm/lefthook-linux-x64@2.1.1/node_modules/lefthook-linux-x64/bin/lefthook "$@"
+  else
+    dir="$(git rev-parse --show-toplevel)"
+    osArch=$(uname | tr '[:upper:]' '[:lower:]')
+    cpuArch=$(uname -m | sed 's/aarch64/arm64/;s/x86_64/x64/')
+    if test -f "$dir/node_modules/lefthook-${osArch}-${cpuArch}/bin/lefthook"
+    then
+      "$dir/node_modules/lefthook-${osArch}-${cpuArch}/bin/lefthook" "$@"
+    elif test -f "$dir/node_modules/@evilmartians/lefthook/bin/lefthook-${osArch}-${cpuArch}/lefthook"
+    then
+      "$dir/node_modules/@evilmartians/lefthook/bin/lefthook-${osArch}-${cpuArch}/lefthook" "$@"
+    elif test -f "$dir/node_modules/@evilmartians/lefthook-installer/bin/lefthook"
+    then
+      "$dir/node_modules/@evilmartians/lefthook-installer/bin/lefthook" "$@"
+    elif test -f "$dir/node_modules/lefthook/bin/index.js"
+    then
+      "$dir/node_modules/lefthook/bin/index.js" "$@"
+    elif go tool lefthook -h >/dev/null 2>&1
+    then
+      go tool lefthook "$@"
+    elif bundle exec lefthook -h >/dev/null 2>&1
+    then
+      bundle exec lefthook "$@"
+    elif yarn lefthook -h >/dev/null 2>&1
+    then
+      yarn lefthook "$@"
+    elif pnpm lefthook -h >/dev/null 2>&1
+    then
+      pnpm lefthook "$@"
+    elif swift package lefthook >/dev/null 2>&1
+    then
+      swift package --build-path .build/lefthook --disable-sandbox lefthook "$@"
+    elif command -v mint >/dev/null 2>&1
+    then
+      mint run csjones/lefthook-plugin "$@"
+    elif uv run lefthook -h >/dev/null 2>&1
+    then
+      uv run lefthook "$@"
+    elif mise exec -- lefthook -h >/dev/null 2>&1
+    then
+      mise exec -- lefthook "$@"
+    elif devbox run lefthook -h >/dev/null 2>&1
+    then
+      devbox run lefthook "$@"
+    else
+      echo "Can't find lefthook in PATH"
+    fi
+  fi
+}
+
+call_lefthook run "pre-commit" "$@"