feat: align ui-kit password policy, wire useAccountData to horizon client, and connect validation.rs helpers

[linesofcodes0-cloud]

Description

This PR resolves issues #1405, #1408, #1409, and #1402 across @ancore/ui-kit, @ancore/web-dashboard, and contracts/account.

• UI-KIT Password Policy Alignment (Fixes [UI-KIT] Form/validation.ts's exported passwordSchema/getPasswordStrength duplicate password policy with materially weaker rules than the canonical @ancore/crypto implementation #1405):

  • Updated @ancore/ui-kit's passwordSchema and getPasswordStrength to import and enforce @ancore/crypto's canonical validatePasswordStrength implementation.
  • Enforced 12-character minimum length and complexity rules (uppercase, lowercase, digit, special character, no weak patterns).
  • Capped password strength scores for invalid passwords.

• Web Dashboard Account Data & Horizon Integration (Fixes [WEB-DASHBOARD] useAccountData hook is fully mocked and wired into two real pages (Dashboard, Account) #1408, [WEB-DASHBOARD] lib/horizon.ts is dead code — a fully-implemented Horizon client with zero importers anywhere in the app #1409):

  • Removed hardcoded $1250.75 mock data and MOCK_TRANSACTIONS from useAccountData.ts.
  • Wired useAccountData to call fetchAccountData from apps/web-dashboard/src/lib/horizon.ts.
  • Created unit tests in apps/web-dashboard/src/lib/__tests__/horizon.test.ts to cover fetchAccountBalance, fetchAccountData, and getHorizonUrl.

• Contract Validation Helper Integration (Fixes [CONTRACT] validation.rs's trust-boundary helper functions are dead code — lib.rs re-implements the same checks inline, diverging from what's actually tested #1402):

  • Updated contracts/account/src/lib.rs to call validation.rs pure trust-boundary helper functions (validation::nonce_matches, validation::session_key_is_expired, validation::allowlist_permits_address, validation::validate_expiry).
  • Verified all 65 contract unit and property tests pass cleanly.

Closes #1405
Closes #1408
Closes #1409
Closes #1402

[drips-wave]

@linesofcodes0-cloud Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: f156167b-b2f4-42a6-a454-80d5d4ae0213

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}