feat: add rewards endpoints

[brunocalza]

Context

Closes APP-318

Adds the following 3 endpoints:

1. GET /user/rewards/total
2. GET /user/rewards/proofs
3. POST /user/rewards/claim/

These will be used to implement the CLAIM flow button in the navbar:

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
comps	Ready	Preview	Comment	Oct 6, 2025 0:54am
comps-staging2	Ready	Preview	Comment	Oct 6, 2025 0:54am
portal	Ready	Preview	Comment	Oct 6, 2025 0:54am

[brunocalza]

Before each test, we add some entries in the rewards table. We also call the mocked allocate call that will add entries to rewards_tree and rewards_roots tables. With that data in the database, we can test the 3 endpoints.

[joewagner]

Nice!
I put a few nits inline, but looks good

[github-actions]

📊 Test Coverage Report

Package	Lines	Statements	Functions	Branches
apps/api	3.53% (-0.02%)	3.53% (-0.02%)	43.80% (+0.47%)	50.79% (+0.26%)
apps/comps	0.00%	0.00%	40.89%	40.89%
packages/conversions	100.00%	100.00%	100.00%	100.00%
packages/db	0.00%	0.00%	16.27%	16.27%
packages/rewards	100.00%	100.00%	100.00%	100.00%
packages/services	35.90% (-0.12%)	35.90% (-0.12%)	63.81% (-0.36%)	77.94%
packages/staking-contracts	100.00%	100.00%	100.00%	100.00%

[vercel]

The method uses address.toLocaleLowerCase() instead of address.toLowerCase() for Ethereum address normalization, which is incorrect and inconsistent with the codebase pattern.

View Details

📝 Patch Details

diff --git a/packages/db/src/repositories/rewards.ts b/packages/db/src/repositories/rewards.ts
index 5c34101..b0a7ae5 100644
--- a/packages/db/src/repositories/rewards.ts
+++ b/packages/db/src/repositories/rewards.ts
@@ -199,7 +199,7 @@ export class RewardsRepository {
         .from(rewards)
         .where(
           and(
-            eq(rewards.address, address.toLocaleLowerCase()),
+            eq(rewards.address, address.toLowerCase()),
             eq(rewards.claimed, false),
           ),
         );
@@ -236,7 +236,7 @@ export class RewardsRepository {
         )
         .where(
           and(
-            eq(rewards.address, address.toLocaleLowerCase()),
+            eq(rewards.address, address.toLowerCase()),
             eq(rewards.claimed, false),
           ),
         );

Analysis

Inconsistent address normalization method in RewardsRepository

What fails: RewardsRepository uses toLocaleLowerCase() instead of toLowerCase() for Ethereum address normalization, creating inconsistency with other repositories

How to reproduce:

// In packages/db/src/repositories/rewards.ts lines 202 and 239:
eq(rewards.address, address.toLocaleLowerCase()) // Inconsistent method
// vs other repositories like agent.ts, user.ts:
eq(users.walletAddress, normalizedWalletAddress.toLowerCase()) // Standard method

Result: Code inconsistency across repositories using different case conversion methods

Expected: All repositories should use toLowerCase() for Ethereum address normalization per codebase patterns in AgentRepository and UserRepository

Note: While both methods produce identical results for hexadecimal Ethereum addresses, toLowerCase() is the established pattern and avoids potential locale-specific behavior per MDN documentation