feat(stats): add GET /stats/transparency and POST /stats/verify endpoints

[Danielobito009]

Summary

Implements Issue #834 — GET /stats/transparency and POST /stats/verify
endpoints for on-chain proof verification, plus paginated audit log
via GET /transparency.

Endpoints Implemented

GET /stats/transparency

Returns platform aggregate stats with oracle key and recent audit log.

Response:

{
  "date": "2026-06-27",
  "total_raffles": 100,
  "total_tickets": 5000,
  "total_volume_xlm": "250000000000",
  "unique_participants": 1000,
  "prizes_distributed_xlm": "50000000000",
  "oracle_public_key": "0xabcd1234",
  "draws_completed": 1,
  "recent_audit_log": [...]
}

POST /stats/verify

Verifies Ed25519 VRF proof signature. Always returns 200.

Response:

{ "valid": true }
// or
{ "valid": false, "reason": "Invalid proof signature" }

GET /transparency?limit=20&offset=0&raffle_id=X

Returns paginated audit log entries from Supabase.

Response:

{ "entries": [...], "total": 50 }

Files Changed

• stats.controller.ts — 2 new endpoints
• stats.service.ts — getTransparencyStats(), verifyDraw()
• transparency.controller.ts — paginated audit log
• stats.module.ts — module registration
• api.module.ts — transparency controller registration
• Test files — 3 new test files

Cache Implementation

Endpoint	Cache Key	TTL
GET /stats/transparency	stats:transparency:60	60s
POST /stats/verify	stats:verify:{pubkey}:{requestId}:{proof}:{seed}	60s
GET /transparency	transparency:{limit}:{offset}:{raffle_id?}	60s

Test Coverage (77 tests)

File	Tests
Stats controller	21
Stats service	28
Transparency controller	28

Error Handling

• POST /stats/verify never returns 500 — all errors → { valid: false, reason }
• GET /transparency Supabase errors → { entries: [], total: 0 }
• Cache failures degrade gracefully — requests continue

Acceptance Criteria

• ✅ Transparency page renders real data from endpoints
• ✅ /stats/verify returns { verified: false } for invalid tx hash
• ✅ Never throws 500 on invalid input
• ✅ 60-second cache on all endpoints
• ✅ Paginated audit log with raffle_id filter

Closes #834

[vercel]

@Alu-card19 is attempting to deploy a commit to the otaiki1's projects Team on Vercel.

A member of the Team first needs to authorize it.