core db track 1

.env.example

@@ -22,4 +22,9 @@ HTTP_PORT=80
 HTTPS_PORT=443
 
 # Environment
-ENVIRONMENT=development
+ENVIRONMENT=development
+# =====================
+# Authentication / JWT
+# =====================
+# Set a strong random secret in real deployments. If unset, a dev fallback is used (unsafe for production).
+JWT_SECRET=please-change-me-in-production

.github/CODEOWNERS

@@ -0,0 +1,135 @@
+# CODEOWNERS file for Jive Money project
+# This file defines code review assignments for different parts of the codebase
+# See: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+
+# Global fallback - all files require review from project maintainer
+* @huazhou
+
+# Rust API backend code
+/jive-api/ @huazhou
+/jive-core/ @huazhou
+
+# Rust specific configurations
+*.toml @huazhou
+Cargo.lock @huazhou
+/deny.toml @huazhou
+
+# Flutter frontend code
+/jive-flutter/ @huazhou
+/jive-flutter/lib/ @huazhou
+/jive-flutter/pubspec.yaml @huazhou
+/jive-flutter/pubspec.lock @huazhou
+
+# Database and migration files
+/database/ @huazhou
+**/migrations/ @huazhou
+*.sql @huazhou
+
+# CI/CD and deployment configuration
+/.github/ @huazhou
+/.github/workflows/ @huazhou
+/.github/dependabot.yml @huazhou
+/docker-compose*.yml @huazhou
+/Dockerfile* @huazhou
+*.dockerfile @huazhou
+
+# Documentation files (require careful review)
+*.md @huazhou
+/docs/ @huazhou
+/README.md @huazhou
+/CLAUDE.md @huazhou
+
+# Security-sensitive files
+/jive-api/src/auth/ @huazhou
+/jive-api/src/middleware/ @huazhou
+/jive-api/src/security/ @huazhou
+**/auth_* @huazhou
+**/security_* @huazhou
+
+# Configuration files
+*.env* @huazhou
+*.config.* @huazhou
+/config/ @huazhou
+
+# Test files (require review to ensure proper coverage)
+**/tests/ @huazhou
+**/*_test.* @huazhou
+**/*_test_* @huazhou
+/jive-flutter/test/ @huazhou
+/jive-api/tests/ @huazhou
+
+# Build and deployment scripts
+*.sh @huazhou
+*.py @huazhou
+/scripts/ @huazhou
+/Makefile @huazhou
+**/Makefile @huazhou
+
+# Package management files
+/package*.json @huazhou
+/yarn.lock @huazhou
+/pnpm-lock.yaml @huazhou
+
+# Git configuration and workflow files
+/.gitignore @huazhou
+/.gitattributes @huazhou
+/.git* @huazhou
+
+# IDE and editor configurations
+/.vscode/ @huazhou
+/.idea/ @huazhou
+*.code-workspace @huazhou
+
+# Docker and containerization
+/*docker* @huazhou
+/docker/ @huazhou
+
+# API routes and handlers (critical for security)
+/jive-api/src/routes/ @huazhou
+/jive-api/src/handlers/ @huazhou
+/jive-api/src/controllers/ @huazhou
+
+# Database models and schema
+/jive-api/src/models/ @huazhou
+/jive-api/src/schema/ @huazhou
+/jive-flutter/lib/models/ @huazhou
+
+# Service layer (business logic)
+/jive-api/src/services/ @huazhou
+/jive-flutter/lib/services/ @huazhou
+
+# Provider layer (state management)
+/jive-flutter/lib/providers/ @huazhou
+
+# UI components and screens (require UX review)
+/jive-flutter/lib/screens/ @huazhou
+/jive-flutter/lib/widgets/ @huazhou
+/jive-flutter/lib/ui/ @huazhou
+
+# Theme and styling
+/jive-flutter/lib/theme/ @huazhou
+/jive-flutter/lib/core/theme/ @huazhou
+
+# Networking and API client code
+/jive-flutter/lib/core/network/ @huazhou
+/jive-api/src/client/ @huazhou
+
+# Storage and database adapters
+/jive-flutter/lib/core/storage/ @huazhou
+/jive-api/src/db/ @huazhou
+
+# External integrations and third-party code
+/jive-api/src/integrations/ @huazhou
+/jive-flutter/lib/integrations/ @huazhou
+
+# Utility and helper functions
+/jive-api/src/utils/ @huazhou
+/jive-flutter/lib/utils/ @huazhou
+
+# Localization and internationalization
+/jive-flutter/lib/l10n/ @huazhou
+/jive-flutter/assets/i18n/ @huazhou
+
+# Assets and static files
+/jive-flutter/assets/ @huazhou
+/jive-flutter/web/ @huazhou

.github/DOCKER_AUTH_SETUP.md

@@ -0,0 +1,44 @@
+# Docker Hub Authentication Setup for CI
+
+## Problem
+GitHub Actions CI workflows were failing with Docker Hub authentication errors:
+```
+unauthorized: authentication required
+```
+
+This happens when GitHub Actions tries to pull Docker images (postgres:15, redis:7) but hits Docker Hub rate limits for unauthenticated requests.
+
+## Solution Implemented
+
+### 1. CI Workflow Changes
+- Added Docker Hub credential environment variables to the workflow
+- Added Docker login step before jobs that use Docker service containers
+- Made authentication optional with `continue-on-error: true` so CI still works without credentials
+
+### 2. Required GitHub Secrets Setup
+
+To enable Docker Hub authentication, add these secrets to your repository:
+
+1. Go to Settings → Secrets and variables → Actions
+2. Add two new repository secrets:
+   - `DOCKERHUB_USERNAME`: Your Docker Hub username
+   - `DOCKERHUB_TOKEN`: Your Docker Hub access token (NOT your password)
+
+### 3. How to Create Docker Hub Access Token
+
+1. Log in to [Docker Hub](https://hub.docker.com)
+2. Click on your username → Account Settings
+3. Select "Security" → "New Access Token"
+4. Give it a descriptive name like "GitHub Actions CI"
+5. Copy the token and save it as `DOCKERHUB_TOKEN` secret in GitHub
+
+## Benefits
+- Avoids Docker Hub rate limits (100 pulls/6hr for anonymous vs 200 pulls/6hr for authenticated)
+- CI runs more reliably without authentication failures
+- Optional - CI still works without credentials, just with lower rate limits
+
+## Files Modified
+- `.github/workflows/ci.yml`: Added Docker authentication steps
+
+## Testing
+After adding the secrets, the CI will automatically use Docker Hub authentication for all Docker image pulls.

.github/dependabot.yml

@@ -0,0 +1,127 @@
+version: 2
+updates:
+  # Rust dependencies for jive-api
+  - package-ecosystem: "cargo"
+    directory: "/jive-api"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 5
+    reviewers:
+      - "huazhou"
+    assignees:
+      - "huazhou"
+    commit-message:
+      prefix: "cargo"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "rust"
+      - "jive-api"
+    ignore:
+      # Ignore major version updates for stable dependencies
+      - dependency-name: "tokio"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "sqlx"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "axum"
+        update-types: ["version-update:semver-major"]
+
+  # Rust dependencies for jive-core
+  - package-ecosystem: "cargo"
+    directory: "/jive-core"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:30"
+      timezone: "UTC"
+    open-pull-requests-limit: 3
+    reviewers:
+      - "huazhou"
+    assignees:
+      - "huazhou"
+    commit-message:
+      prefix: "cargo(core)"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "rust"
+      - "jive-core"
+
+  # Flutter/Dart dependencies
+  - package-ecosystem: "pub"
+    directory: "/jive-flutter"
+    schedule:
+      interval: "weekly"
+      day: "tuesday"
+      time: "09:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 5
+    reviewers:
+      - "huazhou"
+    assignees:
+      - "huazhou"
+    commit-message:
+      prefix: "flutter"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "flutter"
+      - "dart"
+    ignore:
+      # Ignore major Flutter SDK updates (handle manually)
+      - dependency-name: "flutter"
+        update-types: ["version-update:semver-major"]
+      # Ignore breaking changes in UI libraries
+      - dependency-name: "provider"
+        update-types: ["version-update:semver-major"]
+
+  # GitHub Actions dependencies
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+      day: "first-monday"
+      time: "10:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 3
+    reviewers:
+      - "huazhou"
+    assignees:
+      - "huazhou"
+    commit-message:
+      prefix: "ci"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "github-actions"
+      - "ci"
+
+  # Docker dependencies
+  - package-ecosystem: "docker"
+    directory: "/jive-api"
+    schedule:
+      interval: "monthly"
+      day: "second-monday"
+      time: "10:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 2
+    reviewers:
+      - "huazhou"
+    assignees:
+      - "huazhou"
+    commit-message:
+      prefix: "docker"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "docker"
+    ignore:
+      # Ignore PostgreSQL major version updates (handle manually)
+      - dependency-name: "postgres"
+        update-types: ["version-update:semver-major"]
+      # Ignore Redis major version updates (handle manually)
+      - dependency-name: "redis"
+        update-types: ["version-update:semver-major"]