feat: implement issues #592, #594, #595, #596

[lordstephen9]

#592 — Payment retry engine with intelligent scheduling

• backend/src/services/paymentRetry.ts: failure categorisation (INSUFFICIENT_FUNDS, CARD_EXPIRED, NETWORK_ERROR, etc.), exponential back-off scheduling, payment-method fallback chains, dunning steps, account-suspension tracking
• backend/src/jobs/payment-retry.ts: cron jobs for retry processor, suspension checker, and weekly cleanup
• backend/src/routes/payments.ts: REST API for retries (create, execute, abandon, outcome recording, stats, failure categorisation)
• frontend/app/dashboard/billing/page.tsx: payment retry dashboard UI with attempt history, stats cards, and inline retry/abandon actions

#594 — Automated security scanning pipeline

• .github/workflows/security-audit-pipeline.yml: SAST (ESLint + Semgrep), dependency scanning (npm audit + Snyk + cargo audit), DAST (OWASP ZAP), smart-contract analysis (Slither), PR comment summary
• backend/src/services/security.ts: vulnerability tracking with SLA, scan reports, severity scoring, remediation workflow
• backend/src/routes/security.ts: REST API for scans and vulnerabilities
• frontend/app/dashboard/security/page.tsx: security score dashboard with vulnerability list, scan history, and severity filters
• scripts/security-scan.sh: unified local/CI security scan script

#595 — GDPR-compliant data export API

• backend/src/services/dataExport.ts: export jobs (JSON/CSV/PDF), scheduled exports, anonymisation, audit trail, expiry
• backend/src/routes/dataExport.ts: REST API for exports and schedules
• backend/src/jobs/export-jobs.ts: cron jobs for export processing, schedule triggering, and expiry cleanup
• frontend/app/dashboard/settings/export/page.tsx: export management UI

#596 — Project collaboration with comments and activity feeds

• backend/src/services/comments.ts: threaded comments, @mentions, reactions, voting, file annotations, activity feed
• backend/src/routes/comments.ts: REST API for comments, threads, reactions, votes, search, and mention notifications
• frontend/components/collaboration/CommentThread.tsx: full comment thread UI with inline editing, reactions, voting, replies
• frontend/components/collaboration/ActivityFeed.tsx: real-time activity feed with mention notifications and auto-refresh

Misc:

• .gitignore / frontend/.gitignore: added test snapshots (*.snap, snapshots/), playwright artifacts, security-reports/, storybook

What this PR does

• Summary of the implemented changes related to issue(s) DevTooling: Implement Monorepo with Turborepo for Shared Packages #240 and DevTooling: Implement Real-Time Error Monitoring with Sentry and Custom Dashboards #242
• Any breaking changes introduced (if any)
• Any migrations or data changes (if applicable)

Changes

• List of notable files and modules touched (monorepo wiring, Sentry integration, dashboards, etc.)
• Notes about the Turborepo configuration, shared packages, and ESLint/TS config

Why

• Rationale for the changes and how they solve the Acceptance Criteria

How to test

• Steps to reproduce locally, including commands to run build/test
• Any environment variables needed (e.g., SENTRY_DSN)
• How to verify the dashboards/alerts configuration (stubs or real)

Notes

• Any caveats, risks, or follow-up tasks
• If you want to close issues automatically, include:
  • Closes DevTooling: Implement Monorepo with Turborepo for Shared Packages #240
  • Closes DevTooling: Implement Real-Time Error Monitoring with Sentry and Custom Dashboards #242
    close Build payment retry engine with intelligent scheduling and failure recovery #592
    close Build automated security scanning pipeline with vulnerability remediation tracking #594
    close Implement data export API with GDPR compliance and scheduled reports #595
    close Build project collaboration tools with comments, annotations, and activity feeds #596

[vercel]

@lordstephen9 is attempting to deploy a commit to the smartdevs17's projects Team on Vercel.

A member of the Team first needs to authorize it.

[drips-wave]

@lordstephen9 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits