account-lookup-service 17.13.0-snapshot.9 → 17.14.0-snapshot.1

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [17.13.0](https://github.com/mojaloop/account-lookup-service/compare/v17.12.10...v17.13.0) (2025-09-16)
+
+
+### Features
+
+* **oss-4203:** added validation of local destination for external source ([#574](https://github.com/mojaloop/account-lookup-service/issues/574)) ([8ca46d6](https://github.com/mojaloop/account-lookup-service/commit/8ca46d6bbacbf30bb4b6dcc739df970e1b46d268))
+
+
+### Chore
+
+* **sbom:** update sbom [skip ci] ([f68b088](https://github.com/mojaloop/account-lookup-service/commit/f68b088b9fa01b96682761bfb946048ea24de54f))
+
 ### [17.12.10](https://github.com/mojaloop/account-lookup-service/compare/v17.12.9...v17.12.10) (2025-09-10)
 
 

package/CLAUDE.md

@@ -0,0 +1,100 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Development Commands
+
+### Running the Service
+- `npm start` - Start both API and Admin servers
+- `npm run start:api` - Start only the API server (port 3000)
+- `npm run start:admin` - Start only the Admin server (port 3001)
+- `npm run start:handlers` - Start message handlers with timeout
+- `npm run dev` - Start in development mode with nodemon
+
+### Testing
+- `npm test` or `npm run test:unit` - Run unit tests with Jest
+- `npm run test:coverage-check` - Run tests with coverage validation (90% threshold)
+- `npm run test:int` - Run integration tests (requires database)
+- `npm run test:integration` - Full integration test suite with Docker containers
+- `npm run test:functional` - Run functional tests
+
+### Database Operations
+- `npm run migrate` - Run database migrations and seed data (requires database connection)
+- `npm run migrate:latest` - Run latest migrations
+- `npm run migrate:rollback` - Rollback last migration
+- `npm run seed:run` - Run database seeds
+
+### Code Quality
+- `npm run lint` - Run StandardJS linting
+- `npm run lint:fix` - Auto-fix linting issues
+- `npm run audit:check` - Check for security vulnerabilities
+- `npm run dep:check` - Check for dependency updates
+
+### Docker Development
+- `npm run dc:up` - Start all services with Docker Compose
+- `npm run dc:down` - Stop and remove containers
+- `npm run wait-4-docker` - Wait for Docker services to be ready
+
+## Architecture Overview
+
+### Service Structure
+This is a **Mojaloop Account Lookup Service** built with **Hapi.js** and **MySQL**. The service provides two main servers:
+
+- **API Server** (`src/server.js:initializeApi`) - Handles party lookup requests and participant queries
+- **Admin Server** (`src/server.js:initializeAdmin`) - Provides administrative endpoints and health checks
+- **Message Handlers** (`src/handlers/`) - Processes asynchronous messages for timeout handling
+
+### Key Components
+
+#### Domain Layer (`src/domain/`)
+- **parties/** - Core party lookup logic and validation
+- **participants/** - Participant management operations  
+- **oracle/** - Oracle endpoint resolution
+- **timeout/** - Message timeout handling
+
+#### API Layer (`src/api/`)
+- Uses **OpenAPI 3.0** specifications for endpoint definitions
+- Swagger files: `src/interface/api-swagger.yaml` and `src/interface/admin-swagger.yaml`
+- Route handlers split between API and Admin functionality
+
+#### Data Access (`src/models/`)
+- **Knex.js** for database operations and migrations
+- MySQL database with connection pooling
+- Cached oracle endpoints for performance
+
+#### Caching Strategy
+The service uses multiple cache layers:
+- **ParticipantEndpointCache** - Caches participant endpoints from central ledger
+- **ParticipantCache** - Caches participant information
+- **OracleEndpointCache** - Caches oracle endpoint mappings
+- **ProxyCache** - For inter-scheme proxy operations (Redis/Memory)
+
+### Configuration
+- Main config: `src/lib/config/default.json`
+- Environment-specific configs in `config/` directory
+- Database config: `config/knexfile.js` 
+- Docker: `docker-compose.yml` for full service stack
+
+### Testing Strategy
+- **Unit Tests**: Jest with 90% coverage requirement (`jest.config.js`)
+- **Integration Tests**: Docker-based with real database (`jest-int.config.js`)
+- **Functional Tests**: End-to-end API testing
+- Test setup: `test/unit/setup.js`
+
+### Key Dependencies
+- **@hapi/hapi** - Web framework
+- **@mojaloop/central-services-*** - Mojaloop shared libraries for logging, metrics, caching
+- **knex** + **mysql2** - Database ORM and driver
+- **joi** - Request/response validation
+- **commander** - CLI interface
+
+### Database Schema
+Uses Knex migrations in `migrations/` directory. Key tables include participant and oracle endpoint mappings. Always run `npm run migrate` before development.
+
+## Development Notes
+
+- Use `standard` for code formatting (no semicolons, 2-space indentation)
+- All database operations should go through the domain layer
+- OpenAPI specs are the source of truth for API contracts
+- Integration tests require Docker and can be run in "wait" mode for debugging
+- The service supports ISO20022 message formats alongside FSPIOP

package/config/default.json

@@ -79,7 +79,7 @@
     "MONITORING_PORT": 4003,
     "TIMEOUT": {
       "DISABLED": false,
-      "TIMEXP": "*/30 * * * * *",
+      "TIMEXP": "*/15 * * * * *",
       "TIMEZONE": "UTC",
       "BATCH_SIZE": 100,
       "DIST_LOCK": {

package/docker-compose.yml

@@ -4,7 +4,7 @@ networks:
 
 # @see https://uninterrupted.tech/blog/hassle-free-redis-cluster-deployment-using-docker/
 x-redis-node: &REDIS_NODE
-  image: docker.io/bitnami/redis-cluster:6.2.14
+  image: docker.io/bitnamilegacy/redis-cluster:6.2.14
   environment: &REDIS_ENVS
     ALLOW_EMPTY_PASSWORD: yes
     REDIS_CLUSTER_DYNAMIC_IPS: no

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "account-lookup-service",
   "description": "Account Lookup Service is used to validate Party and Participant lookups.",
-  "version": "17.13.0-snapshot.9",
+  "version": "17.14.0-snapshot.1",
   "license": "Apache-2.0",
   "author": "ModusBox",
   "contributors": [
@@ -91,17 +91,17 @@
     "@hapi/hapi": "21.4.3",
     "@hapi/inert": "7.1.0",
     "@hapi/vision": "7.0.3",
-    "@mojaloop/central-services-error-handling": "13.1.2-snapshot.0",
+    "@mojaloop/central-services-error-handling": "13.1.2",
     "@mojaloop/central-services-health": "15.1.0",
-    "@mojaloop/central-services-logger": "11.9.3",
+    "@mojaloop/central-services-logger": "11.10.0",
     "@mojaloop/central-services-metrics": "12.7.1",
-    "@mojaloop/central-services-shared": "18.33.0",
+    "@mojaloop/central-services-shared": "18.33.3",
     "@mojaloop/central-services-stream": "11.8.7",
     "@mojaloop/database-lib": "^11.3.2",
     "@mojaloop/event-sdk": "14.7.0",
-    "@mojaloop/inter-scheme-proxy-cache-lib": "2.6.0",
+    "@mojaloop/inter-scheme-proxy-cache-lib": "2.7.0-snapshot.2",
     "@mojaloop/ml-schema-transformer-lib": "2.7.8",
-    "@mojaloop/sdk-standard-components": "19.16.9",
+    "@mojaloop/sdk-standard-components": "19.17.0",
     "@now-ims/hapi-now-auth": "2.1.0",
     "ajv": "8.17.1",
     "ajv-keywords": "5.1.0",
@@ -113,7 +113,7 @@
     "knex": "3.1.0",
     "mustache": "4.2.0",
     "mysql": "2.18.1",
-    "mysql2": "^3.14.5",
+    "mysql2": "^3.15.0",
     "npm-run-all": "4.1.5",
     "parse-strings-in-object": "2.0.0",
     "rc": "1.2.8"
@@ -124,7 +124,6 @@
     "postcss": {
       "nanoid": "^3.3.8"
     },
-    "@mojaloop/central-services-error-handling": "13.1.2-snapshot.0",
     "@mojaloop/central-services-health": {
       "@mojaloop/central-services-logger": ">=11.4.0"
     },
@@ -176,7 +175,7 @@
     "jest-junit": "16.0.0",
     "jsdoc": "4.0.4",
     "nodemon": "3.1.10",
-    "npm-check-updates": "18.1.1",
+    "npm-check-updates": "18.3.0",
     "nyc": "17.1.0",
     "pre-commit": "1.2.2",
     "proxyquire": "2.1.3",