Repo cleanup: purge leaked creds, dedupe structure, align tech stack

[vic-Gray]

Summary

Security and hygiene cleanup to meet technical-quality standards. All changes are applied as normal commits on top of main so this is a clean, reviewable PR.

security — remove leaked credential-harvesting files

• Removed get_cred.vbs (a Windows Credential Manager GitHub-credential harvester) and git_cred_input.txt from the tree.

chore — stop tracking node_modules

• Untracked all node_modules; .gitignore now ignores them everywhere. Tracked files 2013 → 878.

chore — consolidate duplicate project structure

• harvest-finance/{backend,frontend} is now canonical at repo root; removed old root backend, src, test, and the harvest-finance wrapper. Updated docker-compose, CI, CD, security workflows and Makefile paths. Removed junk (redis dump.rdb, jest artifacts, log files, *-pwd.log).

chore — remove scratch/PR-note files

• Deleted 22 root scratch/PR-note .md files; kept real docs (README, CONTRIBUTING, docs/, API_VERSIONING_*, IMPLEMENTATION_SUMMARY).

chore — fix Solidity/Stellar mismatch

• Archived Solidity/Foundry contracts/ → contracts-legacy/ with a deprecation README.
• Added the active Soroban (Rust) vault in contracts-soroban/ + NOTES.md + integration tests.

ci — stop masking failures

• Removed nest build || true mask and unmasked npm ci/lint/build/test in CI so real failures surface.

Verification still required (no toolchain in build sandbox)

• Run npm ci && npm run build && npm run test for backend/frontend and forge test for contracts-legacy in a toolchain-equipped environment.
• cargo test for contracts-soroban (Soroban SDK) added but not yet compiled here; the i128 share-math overflow risk noted in NOTES.md must be resolved before mainnet.
• If the credential-harvesting script was ever actually run, rotate the targeted GitHub credential.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
harvestfine	Error		Jul 15, 2026 6:49pm