@valentine-efagene/qshelter-common 2.0.32 → 2.0.33

package/dist/src/config/config.service.d.ts

@@ -69,8 +69,13 @@ export declare class ConfigService {
     /**
      * Get database credentials - combines secret and infrastructure config
      * Returns a complete DatabaseCredentials object ready to use
+     * For test stage (LocalStack), reads directly from SSM parameters
      */
     getDatabaseCredentials(stage?: string): Promise<DatabaseCredentials>;
+    /**
+     * Get a secure parameter from SSM (with decryption)
+     */
+    getSecureParameter(name: string): Promise<string>;
     /**
      * Get encryption secrets from Secrets Manager
      */

package/dist/src/config/config.service.js

@@ -8,8 +8,20 @@ export class ConfigService {
     cacheTimestamps = new Map();
     CACHE_TTL = 5 * 60 * 1000; // 5 minutes
     constructor(region = 'us-east-1') {
-        this.ssmClient = new SSMClient({ region });
-        this.secretsClient = new SecretsManagerClient({ region });
+        const stage = process.env.NODE_ENV || process.env.STAGE || 'dev';
+        const isLocalStack = stage === 'test' || process.env.LOCALSTACK_ENDPOINT;
+        // Configure AWS clients for LocalStack or AWS
+        const clientConfig = { region };
+        if (isLocalStack) {
+            const endpoint = process.env.LOCALSTACK_ENDPOINT || 'http://localhost:4566';
+            clientConfig.endpoint = endpoint;
+            clientConfig.credentials = {
+                accessKeyId: 'test',
+                secretAccessKey: 'test',
+            };
+        }
+        this.ssmClient = new SSMClient(clientConfig);
+        this.secretsClient = new SecretsManagerClient(clientConfig);
     }
     static getInstance(region) {
         if (!ConfigService.instance) {
@@ -92,24 +104,67 @@ export class ConfigService {
     /**
      * Get database credentials - combines secret and infrastructure config
      * Returns a complete DatabaseCredentials object ready to use
+     * For test stage (LocalStack), reads directly from SSM parameters
      */
     async getDatabaseCredentials(stage = process.env.NODE_ENV || 'dev') {
         const cacheKey = `db-credentials-${stage}`;
         const cached = this.getFromCache(cacheKey);
         if (cached)
             return cached;
-        const infraConfig = await this.getInfrastructureConfig(stage);
-        const dbSecret = await this.getSecret(infraConfig.databaseSecretArn);
-        const credentials = {
-            username: dbSecret.username,
-            password: dbSecret.password,
-            host: infraConfig.dbHost,
-            port: infraConfig.dbPort,
-            database: `qshelter_${stage}`,
-        };
+        let credentials;
+        // For test stage (LocalStack), read directly from SSM parameters
+        if (stage === 'test') {
+            const pathPrefix = `/qshelter/${stage}/`;
+            const host = await this.getParameter(`${pathPrefix}DB_HOST`);
+            const port = await this.getParameter(`${pathPrefix}DB_PORT`);
+            const username = await this.getParameter(`${pathPrefix}DB_USER`);
+            const password = await this.getSecureParameter(`${pathPrefix}DB_PASSWORD`);
+            const database = await this.getParameter(`${pathPrefix}DB_NAME`);
+            credentials = {
+                username,
+                password,
+                host,
+                port: parseInt(port, 10),
+                database,
+            };
+        }
+        else {
+            // For dev/prod, use infrastructure config + Secrets Manager
+            const infraConfig = await this.getInfrastructureConfig(stage);
+            const dbSecret = await this.getSecret(infraConfig.databaseSecretArn);
+            credentials = {
+                username: dbSecret.username,
+                password: dbSecret.password,
+                host: infraConfig.dbHost,
+                port: infraConfig.dbPort,
+                database: `qshelter_${stage}`,
+            };
+        }
         this.setCache(cacheKey, credentials);
         return credentials;
     }
+    /**
+     * Get a secure parameter from SSM (with decryption)
+     */
+    async getSecureParameter(name) {
+        const cached = this.getFromCache(`secure-${name}`);
+        if (cached)
+            return cached;
+        try {
+            const command = new GetParameterCommand({
+                Name: name,
+                WithDecryption: true,
+            });
+            const response = await this.ssmClient.send(command);
+            const value = response.Parameter?.Value || '';
+            this.setCache(`secure-${name}`, value);
+            return value;
+        }
+        catch (error) {
+            console.error(`Error fetching secure parameter ${name}:`, error);
+            throw new Error(`Failed to load secure parameter ${name}: ${error.message}`);
+        }
+    }
     /**
      * Get encryption secrets from Secrets Manager
      */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@valentine-efagene/qshelter-common",
-  "version": "2.0.32",
+  "version": "2.0.33",
   "description": "Shared database schemas and utilities for QShelter services",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",

package/prisma/schema.prisma

@@ -672,7 +672,7 @@ model PaymentPlan {
   // Fund collection behavior
   // true = we collect funds via wallet/gateway (e.g., downpayment)
   // false = external payment, we only track/reconcile (e.g., bank mortgage)
-  collectFunds           Boolean          @default(true)
+  collectFunds Boolean @default(true)
 
   createdAt DateTime @default(now())
   updatedAt DateTime @updatedAt
@@ -773,7 +773,7 @@ model PropertyPaymentMethodPhase {
   // Fund collection behavior (inherited from PaymentPlan if not set)
   // true = we collect funds via wallet/gateway (e.g., downpayment)
   // false = external payment, we only track/reconcile (e.g., bank mortgage)
-  collectFunds   Boolean? // null = inherit from PaymentPlan
+  collectFunds Boolean? // null = inherit from PaymentPlan
 
   // Activation rules
   requiresPreviousPhaseCompletion Boolean              @default(true)
@@ -941,7 +941,7 @@ model ContractPhase {
   // Fund collection behavior (snapshotted from template at contract creation)
   // true = we collect funds via wallet/gateway (e.g., downpayment)
   // false = external payment, we only track/reconcile (e.g., bank mortgage)
-  collectFunds    Boolean @default(true)
+  collectFunds Boolean @default(true)
 
   // Progress counters (for efficient activation checks)
   approvedDocumentsCount Int @default(0)