Fix backend, frontend, and contract build/test/lint failures

Backend:
- Fix missing WalletSignatureService provider in AuthModule (would have
  broken real login, not just tests)
- Fix missing await in ProfileService.update() that let a Prisma unique
  constraint error bypass the catch block and leak as a raw 500 instead
  of a 409 ConflictException
- Fix duplicate queueDepth metric registration and mismatched
  recordQueueDepth call signature
- Add missing MetricsService methods (recordVacuumOperation,
  recordTableBloat, recordClaimNotificationBatch, recordJobProcessingDuration)
- Fix various DI wiring gaps in test files (AdminClaimsExportService,
  TokenBlacklistService, MetricsCardinalityGuard, TenantOnboardingService, etc.)
- Fix bullmq API mismatches (getCountsPerState -> getJobCounts)
- Fix xdr-decode controller's base64 handling and removed reference to a
  non-existent xdr.Envelope type
- Clean up all ESLint errors (unused imports/vars, explicit any)

Frontend:
- Fix missing useMemo import, missing useWallet import
- Install missing @radix-ui/react-alert-dialog dependency
- Wire up TransactionFilterBar component that was built but never rendered
- Clean up all ESLint errors (unused imports/vars)

Contracts:
- Target wasm32v1-none instead of wasm32-unknown-unknown (required for
  soroban-sdk with Rust 1.82+, matches contracts-ci.yml)
- Add missing InsufficientAllowanceForFee and VoterCapReached error variants
- Add missing token_decimals field to Policy struct in policy_lifecycle.rs
- Fix silently-swallowed Result in finalize_appeal_outcome
- Fix hard panic in calculator::call_external when querying abi_version on
  an unreachable calculator address (now returns typed CalculatorCallFailed)
- Fix compute_quote silently falling back to the local pricing engine on
  calculator failures, contradicting its own documented fail-closed contract
- Fix various tests calling .unwrap()/.expect() on infallible client methods
- Fix test bugs where a claimant voted on their own claim, masking the
  behavior actually under test

CI:
- Fix frontend-ci.yml missing required NEXT_PUBLIC_CONTRACT_ID env var,
  which would have failed the build step

Author: jhayniffy

.github/workflows/frontend-ci.yml

@@ -26,6 +26,7 @@ jobs:
         working-directory: frontend
     env:
       NEXT_PUBLIC_API_URL: https://api.example.com
+      NEXT_PUBLIC_CONTRACT_ID: CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 

backend/src/admin/admin.controller.spec.ts

@@ -5,6 +5,7 @@ import { Request, Response } from 'express';
 import { AdminController } from './admin.controller';
 import { AdminService } from './admin.service';
 import { AdminPoliciesService } from './admin-policies.service';
+import { AdminClaimsExportService } from './admin-claims-export.service';
 import { AuditService } from './audit.service';
 import { PrivacyService } from '../maintenance/privacy.service';
 import { RateLimitService } from '../rate-limit/rate-limit.service';
@@ -16,6 +17,10 @@ import { AdminTenantsService } from './admin-tenants.service';
 import { AdminStatsService } from './admin-stats.service';
 import { SorobanService } from '../rpc/soroban.service';
 import { AdminAnalyticsService } from './admin-analytics.service';
+import { TokenBlacklistService } from '../auth/token-blacklist.service';
+import { SupportService } from '../support/support.service';
+import { CommentRepository } from '../claims/comments/comment.repository';
+import { TenantConfigAuditService } from '../tenant/tenant-config-audit.service';
 
 const mockSorobanService = {
   simulateGetEvidenceLimits: jest.fn(),
@@ -70,6 +75,23 @@ const mockPrismaService = {
   registeredVoter: { findMany: jest.fn() },
   claim: { findMany: jest.fn() },
 };
+const mockAdminClaimsExportService = {
+  streamCsv: jest.fn(),
+};
+const mockTokenBlacklistService = {
+  isBlacklisted: jest.fn(),
+  blacklist: jest.fn(),
+};
+const mockSupportService = {
+  listTickets: jest.fn(),
+  getTicket: jest.fn(),
+};
+const mockCommentRepository = {
+  findByClaimId: jest.fn(),
+};
+const mockTenantConfigAuditService = {
+  getHistory: jest.fn(),
+};
 
 const adminReq = (role = 'admin', scopes: string[] = ['admin:claims:override']) =>
   ({
@@ -114,6 +136,11 @@ describe('AdminController', () => {
         { provide: AdminTenantsService, useValue: mockAdminTenantsService },
         { provide: require('../prisma/prisma.service').PrismaService, useValue: mockPrismaService },
         { provide: SorobanService, useValue: mockSorobanService },
+        { provide: AdminClaimsExportService, useValue: mockAdminClaimsExportService },
+        { provide: TokenBlacklistService, useValue: mockTokenBlacklistService },
+        { provide: SupportService, useValue: mockSupportService },
+        { provide: CommentRepository, useValue: mockCommentRepository },
+        { provide: TenantConfigAuditService, useValue: mockTenantConfigAuditService },
       ],
     })
       .overrideGuard(JwtAuthGuard)
@@ -459,6 +486,11 @@ describe('Admin Role Guard Enforcement', () => {
         { provide: AdminTenantsService, useValue: mockAdminTenantsService },
         { provide: require('../prisma/prisma.service').PrismaService, useValue: mockPrismaService },
         { provide: SorobanService, useValue: mockSorobanService },
+        { provide: AdminClaimsExportService, useValue: mockAdminClaimsExportService },
+        { provide: TokenBlacklistService, useValue: mockTokenBlacklistService },
+        { provide: SupportService, useValue: mockSupportService },
+        { provide: CommentRepository, useValue: mockCommentRepository },
+        { provide: TenantConfigAuditService, useValue: mockTenantConfigAuditService },
       ],
     })
       .overrideGuard(JwtAuthGuard)

backend/src/auth/auth.module.ts

@@ -9,6 +9,7 @@ import { RefreshTokenService } from './refresh-token.service';
 import { AuthController } from './auth.controller';
 import { AuthIdentityService } from './auth-identity.service';
 import { TokenBlacklistService } from './token-blacklist.service';
+import { WalletSignatureService } from './wallet-signature.service';
 import { CacheModule } from '../cache/cache.module';
 
 @Module({
@@ -25,7 +26,7 @@ import { CacheModule } from '../cache/cache.module';
     }),
   ],
   controllers: [AuthController],
-  providers: [JwtStrategy, WalletAuthService, NonceService, RefreshTokenService, AuthIdentityService, TokenBlacklistService],
+  providers: [JwtStrategy, WalletAuthService, NonceService, RefreshTokenService, AuthIdentityService, TokenBlacklistService, WalletSignatureService],
   exports: [PassportModule, JwtModule, AuthIdentityService, TokenBlacklistService],
 })
 export class AuthModule {}

backend/src/auth/refresh-token.integration.spec.ts

@@ -17,6 +17,7 @@ import { AuthController } from './auth.controller';
 import { WalletAuthService } from './wallet-auth.service';
 import { RefreshTokenService } from './refresh-token.service';
 import { NonceService } from './nonce.service';
+import { WalletSignatureService } from './wallet-signature.service';
 import { RedisService } from '../cache/redis.service';
 
 // ── In-memory Redis mock ──────────────────────────────────────────────────
@@ -83,6 +84,7 @@ async function buildApp() {
     providers: [
       WalletAuthService,
       RefreshTokenService,
+      WalletSignatureService,
       { provide: NonceService, useValue: nonceService },
       { provide: RedisService, useValue: redisStore },
     ],

backend/src/auth/token-blacklist.service.spec.ts

@@ -12,7 +12,7 @@ describe('TokenBlacklistService', () => {
       exists: jest.fn().mockResolvedValue(0),
     };
     redisService = {
-      client: mockRedisClient as any,
+      getClient: jest.fn().mockReturnValue(mockRedisClient),
     };
     service = new TokenBlacklistService(redisService as RedisService);
   });

backend/src/cache/allowed-assets-cache.service.spec.ts

@@ -73,37 +73,41 @@ describe('AllowedAssetsCacheService', () => {
       const jitterMs = 200;
 
       service.onModuleInit();
-
-      // The first refresh should happen within baseInterval + jitterMs
       expect(jest.getTimerCount()).toBe(1);
 
-      const timers = jest.getTimerIntervalById(
-        jest.getTimerIntervalById.toString().match(/\d+/)?.[0] as any,
-      );
-      expect(timers).toBeGreaterThanOrEqual(baseInterval);
-      expect(timers).toBeLessThanOrEqual(baseInterval + jitterMs);
+      const beforeTime = Date.now();
+      jest.runOnlyPendingTimers();
+      const elapsed = Date.now() - beforeTime;
+
+      expect(elapsed).toBeGreaterThanOrEqual(baseInterval);
+      expect(elapsed).toBeLessThanOrEqual(baseInterval + jitterMs);
 
       jest.useRealTimers();
     });
 
-    it('reschedules refresh after completion', (done) => {
+    it('reschedules refresh after completion', async () => {
       jest.useFakeTimers();
       const setSpy = jest.spyOn(mockRedis, 'set' as any);
 
       service.onModuleInit();
       expect(jest.getTimerCount()).toBe(1);
 
       jest.runOnlyPendingTimers();
+      // refresh() is async (awaits fetchAssets() then redis.set()); flush
+      // the microtask queue so those awaited calls resolve before asserting.
+      await Promise.resolve();
+      await Promise.resolve();
+
       expect(setSpy).toHaveBeenCalled();
 
-      // After refresh completes, a new timer should be scheduled
-      setTimeout(() => {
-        expect(jest.getTimerCount()).toBeGreaterThan(0);
-        jest.useRealTimers();
-        done();
-      }, 0);
+      // After refresh completes, a new timer should be scheduled. scheduleRefresh()
+      // runs after the outer async callback's `await this.refresh()` resolves, one
+      // more microtask tick beyond the redis.set() call above — flush a few more.
+      await Promise.resolve();
+      await Promise.resolve();
+      expect(jest.getTimerCount()).toBeGreaterThan(0);
 
-      jest.runOnlyPendingTimers();
+      jest.useRealTimers();
     });
   });
 

backend/src/config/env.validation.spec.ts

@@ -17,6 +17,7 @@ function validEnv(overrides: Record<string, unknown> = {}): Record<string, unkno
     FRONTEND_ORIGINS: 'http://localhost:3001',
     CAPTCHA_SECRET_KEY: 'dev-skip',
     IP_HASH_SALT: '0123456789abcdef0123456789abcdef',
+    API_BASE_URL: 'http://localhost:3000',
     ...overrides,
   };
 }

backend/src/dto/oracle-hooks-payload.dto.ts

@@ -1,4 +1,5 @@
-import { IsString, IsNumber, IsOptional, ValidateNested, Type, IsArray } from 'class-validator';
+import { IsString, IsNumber, IsOptional, ValidateNested, IsArray } from 'class-validator';
+import { Type } from 'class-transformer';
 
 export class OracleHooksPayloadDto {
   @IsString()

backend/src/experimental/__tests__/experimental-access-log.interceptor.spec.ts

@@ -1,4 +1,3 @@
-import { Test, TestingModule } from '@nestjs/testing';
 import { ExecutionContext, Logger } from '@nestjs/common';
 import { of } from 'rxjs';
 import { ExperimentalAccessLogInterceptor } from '../experimental-access-log.interceptor';

backend/src/experimental/__tests__/oracle-hooks.controller.spec.ts

@@ -1,5 +1,4 @@
 import { Test, TestingModule } from '@nestjs/testing';
-import { BadRequestException, ValidationPipe } from '@nestjs/common';
 import { OracleHooksController } from '../oracle-hooks.controller';
 import { OracleHooksPayloadDto } from '../../dto/oracle-hooks-payload.dto';