Merge pull request InsurNiffy#1036 from aji70/main

This PR addresses four backend infrastructure improvements to enhance data consistency, operational observability, and database performance

Author: jhayniffy

backend/prisma/migrations/20260627101258_add_evidence_metadata/migration.sql

@@ -0,0 +1,17 @@
+-- Add evidence metadata table to store IPFS CID, file size, and MIME type
+CREATE TABLE "evidence_metadata" (
+    "id" SERIAL NOT NULL,
+    "claim_id" INTEGER NOT NULL,
+    "cid" TEXT,
+    "url" TEXT,
+    "file_size_bytes" INTEGER,
+    "mime_type" TEXT,
+    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "evidence_metadata_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "evidence_metadata_claim_id_key" ON "evidence_metadata"("claim_id");
+CREATE INDEX "evidence_metadata_claim_id_idx" ON "evidence_metadata"("claim_id");
+
+ALTER TABLE "evidence_metadata" ADD CONSTRAINT "evidence_metadata_claim_id_fkey" FOREIGN KEY ("claim_id") REFERENCES "claims"("id") ON DELETE CASCADE ON UPDATE CASCADE;

backend/prisma/schema.prisma

@@ -40,6 +40,7 @@ model Claim {
   policy            Policy    @relation(fields: [policyId], references: [id])
   votes             Vote[]
   comments          ClaimComment[]
+  evidenceMetadata  EvidenceMetadata?
 
   @@index([status])
   @@index([severity])
@@ -389,6 +390,22 @@ model ClaimComment {
   @@map("claim_comments")
 }
 
+model EvidenceMetadata {
+  id              Int       @id @default(autoincrement())
+  claimId         Int       @map("claim_id")
+  cid             String?   /// IPFS Content Identifier
+  url             String?   /// Gateway URL
+  fileSizeBytes   Int?      @map("file_size_bytes")
+  mimeType        String?   @map("mime_type")
+  createdAt       DateTime  @default(now()) @map("created_at")
+
+  claim           Claim     @relation(fields: [claimId], references: [id], onDelete: Cascade)
+
+  @@unique([claimId])
+  @@index([claimId])
+  @@map("evidence_metadata")
+}
+
 /// Tracks voters registered on-chain via admin governance actions.
 model RegisteredVoter {
   walletAddress  String   @id @map("wallet_address")

backend/src/auth/nonce.store.ts

@@ -10,7 +10,7 @@
  */
 
 import Redis from 'ioredis';
-import { config } from '../config/env';
+import { buildRedisConfig } from '../redis/config';
 
 export interface NonceStore {
   set(nonce: string, data: string, ttlSeconds: number): Promise<void>;
@@ -76,7 +76,14 @@ export async function getNonceStore(): Promise<NonceStore> {
   if (_store) return _store;
 
   try {
-    const redis = new Redis(config.redis.url, {
+    const cfg = buildRedisConfig();
+    const redis = new Redis({
+      host: cfg.host,
+      port: cfg.port,
+      password: cfg.password,
+      tls: cfg.tls ? {} : undefined,
+      db: cfg.db,
+      keyPrefix: cfg.keyPrefix,
       lazyConnect: true,
       enableOfflineQueue: false,
       connectTimeout: 2000,

backend/src/cache/redis.service.ts

@@ -1,9 +1,7 @@
 import { Injectable, OnModuleDestroy, Logger } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
 import Redis from 'ioredis';
-
-
-
+import { buildRedisConfig } from '../redis/config';
 
 
 @Injectable()
@@ -12,8 +10,14 @@ export class RedisService implements OnModuleDestroy {
   private readonly logger = new Logger(RedisService.name);
 
   constructor(private readonly configService: ConfigService) {
-    const redisUrl = this.configService.get<string>('REDIS_URL', 'redis://localhost:6379');
-    this.client = new Redis(redisUrl, {
+    const cfg = buildRedisConfig();
+    this.client = new Redis({
+      host: cfg.host,
+      port: cfg.port,
+      password: cfg.password,
+      tls: cfg.tls ? {} : undefined,
+      db: cfg.db,
+      keyPrefix: cfg.keyPrefix,
       lazyConnect: true,
       retryStrategy: (times) => {
         if (times > 3) {

backend/src/claims/claim-view.mapper.ts

@@ -20,6 +20,7 @@ const SECONDS_PER_LEDGER = 5;
 export type ClaimWithVotes = Prisma.ClaimGetPayload<{
   include: {
     votes: { select: { vote: true } };
+    evidenceMetadata: true;
   };
 }>;
 
@@ -141,6 +142,9 @@ export class ClaimViewMapper {
       evidence: {
         gatewayUrl: sanitizedHash ? `${this.ipfsGateway}/ipfs/${sanitizedHash}` : '',
         hash: sanitizedHash,
+        cid: claim.evidenceMetadata?.cid ?? null,
+        fileSizeBytes: claim.evidenceMetadata?.fileSizeBytes ?? null,
+        mimeType: claim.evidenceMetadata?.mimeType ?? null,
       } as SanitizedEvidenceDto,
       consistency: {
         isFinalized: claim.isFinalized,

backend/src/claims/claims.controller.ts

@@ -157,6 +157,21 @@ export class ClaimsController {
     return this.claimsService.getClaimById(id, walletAddress);
   }
 
+  @Post(':id/evidence/metadata')
+  @UseGuards(JwtAuthGuard)
+  @HttpCode(HttpStatus.OK)
+  @ApiBearerAuth()
+  @ApiOperation({ summary: 'Store evidence metadata for a claim' })
+  @ApiResponse({ status: 200, description: 'Metadata stored successfully' })
+  @ApiResponse({ status: 404, description: 'Claim not found' })
+  async storeEvidenceMetadata(
+    @Param('id', ParseIntPipe) id: number,
+    @Body() dto: { cid?: string; url?: string; fileSizeBytes?: number; mimeType?: string }
+  ): Promise<{ success: boolean }> {
+    await this.claimsService.storeEvidenceMetadata(id, dto);
+    return { success: true };
+  }
+
   @Get(':id/evidence/:index')
   @UseGuards(JwtAuthGuard)
   @ApiBearerAuth()

backend/src/claims/claims.service.ts

@@ -3,6 +3,7 @@ import { ConfigService } from '@nestjs/config';
 import { Prisma } from '@prisma/client';
 import { SorobanService } from '../rpc/soroban.service';
 import { PrismaService } from '../prisma/prisma.service';
+import { PrismaReplicaService } from '../prisma/prisma-replica.service';
 import { RedisService } from '../cache/redis.service';
 import { TenantContextService } from '../tenant/tenant-context.service';
 import { claimTenantWhere, assertTenantOwnership } from '../tenant/tenant-filter.helper';
@@ -34,6 +35,7 @@ export class ClaimsService {
 
   constructor(
     private readonly prisma: PrismaService,
+    private readonly prismaReplica: PrismaReplicaService,
     private readonly redis: RedisService,
     private readonly claimViewMapper: ClaimViewMapper,
     private readonly config: ConfigService,
@@ -47,6 +49,11 @@ export class ClaimsService {
     this.indexerNetwork = this.config.get<string>('STELLAR_NETWORK', 'testnet');
   }
 
+  /** Get the appropriate client for reads — replica if enabled, otherwise primary. */
+  private getReadClient() {
+    return this.prismaReplica.isEnabled() ? this.prismaReplica : this.prisma;
+  }
+
   async listClaims(params: ListClaimsParams): Promise<ClaimsListResponseDto> {
     const { after, status } = params;
     const limit = clampLimit(params.limit);
@@ -66,16 +73,18 @@ export class ClaimsService {
         ...(keysetWhere ?? {}),
       });
 
+      const readClient = this.getReadClient();
       const [claims, total] = await Promise.all([
-        this.prisma.claim.findMany({
+        readClient.claim.findMany({
           where,
           include: {
             votes: { where: { deletedAt: null }, select: { vote: true } },
+            evidenceMetadata: true,
           },
           orderBy: [{ createdAt: 'desc' }, { id: 'desc' }],
           take: limit,
         }),
-        this.prisma.claim.count({ where: claimTenantWhere(tenantId, statusFilter) }),
+        readClient.claim.count({ where: claimTenantWhere(tenantId, statusFilter) }),
       ]);
 
       return {
@@ -106,7 +115,8 @@ export class ClaimsService {
     const tenantId = this.tenantCtx.tenantId;
     const lastLedger = await this.getLastLedger();
 
-    const votedClaimIds = await this.prisma.vote.findMany({
+    const readClient = this.getReadClient();
+    const votedClaimIds = await readClient.vote.findMany({
       where: { voterAddress: walletAddress.toLowerCase(), deletedAt: null },
       select: { claimId: true },
     });
@@ -119,11 +129,12 @@ export class ClaimsService {
     });
 
     const [allOpen, page] = await Promise.all([
-      this.prisma.claim.count({ where: baseWhere }),
-      this.prisma.claim.findMany({
+      readClient.claim.count({ where: baseWhere }),
+      readClient.claim.findMany({
         where: { ...baseWhere, ...(keysetWhere ?? {}) },
         include: {
           votes: { where: { deletedAt: null }, select: { vote: true } },
+          evidenceMetadata: true,
         },
         orderBy: [{ createdAt: 'desc' }, { id: 'desc' }],
         take: limit,
@@ -163,13 +174,15 @@ export class ClaimsService {
     }
 
     const lastLedger = await this.getLastLedger();
-    const claim = await this.prisma.claim.findFirst({
+    const readClient = this.getReadClient();
+    const claim = await readClient.claim.findFirst({
       where: claimTenantWhere(tenantId, { id }),
       include: {
         votes: {
           where: { deletedAt: null },
           select: { vote: true },
         },
+        evidenceMetadata: true,
       },
     });
 
@@ -214,7 +227,8 @@ export class ClaimsService {
     }
 
     const lastLedger = await this.getLastLedger();
-    const claims = await this.prisma.claim.findMany({
+    const readClient = this.getReadClient();
+    const claims = await readClient.claim.findMany({
       where: claimTenantWhere(tenantId, {
         policyId: { in: uniquePolicyIds },
       }),
@@ -223,6 +237,7 @@ export class ClaimsService {
           where: { deletedAt: null },
           select: { vote: true },
         },
+        evidenceMetadata: true,
       },
       orderBy: [{ createdAt: 'desc' }, { id: 'desc' }],
     });
@@ -303,6 +318,45 @@ export class ClaimsService {
     this.logger.log(`Cache invalidated for claim ${claimId || 'all'}`);
   }
 
+  /**
+   * Store evidence metadata for a claim
+   */
+  async storeEvidenceMetadata(
+    claimId: number,
+    metadata: { cid?: string; url?: string; fileSizeBytes?: number; mimeType?: string }
+  ): Promise<void> {
+    const tenantId = this.tenantCtx.tenantId;
+
+    // Verify claim exists and belongs to tenant
+    const claim = await this.prisma.claim.findFirst({
+      where: claimTenantWhere(tenantId, { id: claimId }),
+      select: { id: true },
+    });
+
+    if (!claim) {
+      throw new NotFoundException(`Claim with ID ${claimId} not found`);
+    }
+
+    await this.prisma.evidenceMetadata.upsert({
+      where: { claimId },
+      create: {
+        claimId,
+        cid: metadata.cid,
+        url: metadata.url,
+        fileSizeBytes: metadata.fileSizeBytes,
+        mimeType: metadata.mimeType,
+      },
+      update: {
+        cid: metadata.cid,
+        url: metadata.url,
+        fileSizeBytes: metadata.fileSizeBytes,
+        mimeType: metadata.mimeType,
+      },
+    });
+
+    await this.invalidateCache(claimId);
+  }
+
   /**
    * Build an unsigned file_claim transaction
    */

backend/src/claims/dto/claim.dto.ts

@@ -216,6 +216,24 @@ export class SanitizedEvidenceDto {
   @IsString()
   @Matches(/^https?:\/\/.+/i)
   cachedUrl?: string;
+
+  @ApiPropertyOptional({ description: 'IPFS Content Identifier (CID)' })
+  @Expose()
+  @IsOptional()
+  @IsString()
+  cid?: string | null;
+
+  @ApiPropertyOptional({ description: 'File size in bytes' })
+  @Expose()
+  @IsOptional()
+  @IsNumber()
+  fileSizeBytes?: number | null;
+
+  @ApiPropertyOptional({ description: 'MIME type of the evidence file' })
+  @Expose()
+  @IsOptional()
+  @IsString()
+  mimeType?: string | null;
 }
 
 export class ConsistencyMetadataDto {

backend/src/claims/dto/evidence-upload.dto.ts

@@ -19,4 +19,6 @@ export const EVIDENCE_UPLOAD_RATE_LIMIT_WINDOW_SECONDS_DEFAULT = 3600;
 export interface EvidenceUploadResponseDto {
   cid: string;
   gatewayUrl: string;
+  fileSizeBytes?: number;
+  mimeType?: string;
 }

backend/src/claims/services/evidence-upload.service.ts

@@ -60,7 +60,12 @@ export class EvidenceUploadService {
       size: file.size,
     });
 
-    return { cid, gatewayUrl };
+    return {
+      cid,
+      gatewayUrl,
+      fileSizeBytes: file.size,
+      mimeType: file.mimetype,
+    };
   }
 
   private validateFile(file: Express.Multer.File): void {