fix(frontend): remove stray Token label from handleWithdraw

.github/workflows/ci.yml

@@ -42,6 +42,17 @@ jobs:
         run: npm run test:coverage
         working-directory: frontend
 
+      - name: Upload frontend coverage to Codecov
+        uses: codecov/codecov-action@v5
+        with:
+          files: frontend/coverage/lcov.info
+          flags: frontend
+          name: frontend-coverage
+          fail_ci_if_error: false
+          verbose: true
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+
       - name: Build
         run: npm run build
         working-directory: frontend

backend/.env.example

@@ -50,6 +50,9 @@ STREAM_CREATE_RATE_LIMIT=10
 # (cancel_stream, top_up_stream). Must be funded on the target network.
 KEEPER_SECRET_KEY=
 
+# Max stream creation requests per wallet per minute (default: 10)
+STREAM_CREATE_RATE_LIMIT=10
+
 # ─── Auth ─────────────────────────────────────────────────────────────────────
 # Secret used to sign JWTs (generate with: openssl rand -hex 32)
 JWT_SECRET=

backend/Dockerfile

@@ -8,6 +8,7 @@ RUN npm install
 COPY tsconfig.json ./
 COPY src ./src
 COPY prisma ./prisma
+COPY prisma.config.ts ./
 
 RUN npm run build
 

backend/package.json

@@ -32,6 +32,7 @@
     "express-rate-limit": "^8.5.2",
     "ioredis": "^5.11.1",
     "pg": "^8.21.0",
+    "stellar-sdk": "^13.3.0",
     "swagger-jsdoc": "^6.3.0",
     "swagger-ui-express": "^5.0.1",
     "winston": "^3.11.0",
@@ -46,7 +47,7 @@
     "@types/supertest": "^7.2.0",
     "@types/swagger-jsdoc": "^6.0.4",
     "@types/swagger-ui-express": "^4.1.6",
-    "@vitest/coverage-v8": "^2.1.8",
+    "@vitest/coverage-v8": "^2.1.9",
     "eventsource": "^2.0.2",
     "nodemon": "^3.1.11",
     "prisma": "^7.8.0",

backend/src/app.ts

@@ -113,6 +113,17 @@ app.use((req: Request, res: Response, next: NextFunction) => {
     return next(); // Not versioned, continue to deprecated handlers
 });
 
+// Deprecated routes fallback
+app.use(['/streams', '/events'], (req: Request, res: Response) => {
+    res.status(410).json({
+        deprecated: true,
+        migration: {
+            old: req.originalUrl,
+            new: `/v1${req.originalUrl}`
+        }
+    });
+});
+
 // Health check routes
 app.use('/health', healthRoutes);
 

backend/src/controllers/sse.controller.ts

@@ -88,6 +88,7 @@ export const subscribe = async (req: Request, res: Response) => {
     res.write(`data: ${JSON.stringify({ type: 'connected', clientId, requestId })}\n\n`);
 
     sseService.addClient(clientId, res, subscriptions, sourceIp);
+
     return;
   } catch (error: unknown) {
     if (error instanceof z.ZodError) {

backend/src/controllers/stream.controller.ts

@@ -774,4 +774,4 @@ export const resumeStream = async (req: Request, res: Response) => {
     logger.error('Error resuming stream:', error);
     return res.status(500).json({ error: 'Internal server error' });
   }
-};
+};

frontend/src/components/dashboard/dashboard-view.tsx

@@ -15,6 +15,7 @@ import toast from "react-hot-toast";
  *  - Error state: "Failed to load streams" with a retry button
  */
 
+import { Skeleton } from "@/components/ui/Skeleton";
 
 import {
   getDashboardAnalytics,
@@ -108,6 +109,8 @@ const SIDEBAR_ITEMS: SidebarItem[] = [
 /** Shimmer card used as a placeholder while data loads */
 function SkeletonCard({ className = "" }: { className?: string }) {
   return (
+    <div className={`relative overflow-hidden rounded-2xl ${className}`} aria-hidden="true">
+      <Skeleton className="w-full h-full" />
     <div
       className={`animate-pulse bg-gray-200 dark:bg-gray-700 rounded-2xl relative overflow-hidden ${className}`}
       aria-hidden="true"