Commit Graph

249 Commits

Author SHA1 Message Date
AITBC System
15cd3a5394 docs(security): add comment to refresh IDE validation 2026-03-08 12:13:52 +01:00
AITBC System
b78c054a12 fix(security): resolve GitHub Actions workflow validation errors
- Remove invalid 'queries' input from CodeQL analyze action
- Fix OSSF Scorecard action input parameter names
- Use correct underscore naming for required inputs
2026-03-08 12:12:57 +01:00
AITBC System
586977e113 feat(security): add comprehensive security scanning workflow
- Add Bandit security scanning for Python code
- Add CodeQL security analysis for Python and JavaScript
- Add dependency security scanning with Safety and npm audit
- Add container security scanning with Trivy
- Add OSSF Scorecard for security best practices
- Add comprehensive security summary reporting

Fixes missing security-scanning.yml workflow file
2026-03-08 12:09:41 +01:00
Andreas Michael Fleckl
6ef15bfe55 Merge pull request #17 from oib/dependabot/github_actions/peaceiris/actions-gh-pages-4
ci(deps): bump peaceiris/actions-gh-pages from 3 to 4
2026-03-08 12:00:27 +01:00
Andreas Michael Fleckl
311e98aa2a Merge pull request #20 from oib/dependabot/github_actions/actions/download-artifact-8
ci(deps): bump actions/download-artifact from 3 to 8
2026-03-08 12:00:23 +01:00
AITBC System
bd4cc060e7 fix(dependencies): update main dependencies to latest versions 2026-03-08 11:58:55 +01:00
Andreas Michael Fleckl
7642158778 Merge pull request #21 from oib/dependabot/pip/pytest-cov-7.0.0
deps(deps-dev): bump pytest-cov from 4.1.0 to 7.0.0
2026-03-08 11:58:38 +01:00
Andreas Michael Fleckl
fcf7c9a31f Merge pull request #19 from oib/dependabot/pip/pytest-9.0.2
deps(deps-dev): bump pytest from 7.4.4 to 9.0.2
2026-03-08 11:58:34 +01:00
Andreas Michael Fleckl
a723fe86e8 Merge pull request #23 from oib/dependabot/pip/httpx-0.28.1
deps(deps): bump httpx from 0.26.0 to 0.28.1
2026-03-08 11:58:31 +01:00
Andreas Michael Fleckl
9cf225b23f Merge pull request #24 from oib/dependabot/pip/cryptography-46.0.5
deps(deps): bump cryptography from 41.0.8 to 46.0.5
2026-03-08 11:58:30 +01:00
dependabot[bot]
e59238916b deps(deps): bump cryptography from 41.0.8 to 46.0.5
Bumps [cryptography](https://github.com/pyca/cryptography) from 41.0.8 to 46.0.5.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/commits/46.0.5)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 46.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-08 10:27:30 +00:00
dependabot[bot]
049ec97271 deps(deps): bump httpx from 0.26.0 to 0.28.1
Bumps [httpx](https://github.com/encode/httpx) from 0.26.0 to 0.28.1.
- [Release notes](https://github.com/encode/httpx/releases)
- [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md)
- [Commits](https://github.com/encode/httpx/compare/0.26.0...0.28.1)

---
updated-dependencies:
- dependency-name: httpx
  dependency-version: 0.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-08 10:27:27 +00:00
dependabot[bot]
a61d6e870f deps(deps-dev): bump pytest-cov from 4.1.0 to 7.0.0
Bumps [pytest-cov](https://github.com/pytest-dev/pytest-cov) from 4.1.0 to 7.0.0.
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-cov/compare/v4.1.0...v7.0.0)

---
updated-dependencies:
- dependency-name: pytest-cov
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-08 10:27:17 +00:00
dependabot[bot]
bb08070e05 ci(deps): bump actions/download-artifact from 3 to 8
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 3 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v3...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-08 10:27:15 +00:00
dependabot[bot]
1b98605f78 deps(deps-dev): bump pytest from 7.4.4 to 9.0.2
Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.4.4 to 9.0.2.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/7.4.4...9.0.2)

---
updated-dependencies:
- dependency-name: pytest
  dependency-version: 9.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-08 10:27:13 +00:00
dependabot[bot]
0ae3948004 ci(deps): bump peaceiris/actions-gh-pages from 3 to 4
Bumps [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages) from 3 to 4.
- [Release notes](https://github.com/peaceiris/actions-gh-pages/releases)
- [Changelog](https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md)
- [Commits](https://github.com/peaceiris/actions-gh-pages/compare/v3...v4)

---
updated-dependencies:
- dependency-name: peaceiris/actions-gh-pages
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-08 10:27:04 +00:00
AITBC System
b033923756 chore: normalize file permissions across repository
- Remove executable permissions from configuration files (.editorconfig, .env.example, .gitignore)
- Remove executable permissions from documentation files (README.md, LICENSE, SECURITY.md)
- Remove executable permissions from web assets (HTML, CSS, JS files)
- Remove executable permissions from data files (JSON, SQL, YAML, requirements.txt)
- Remove executable permissions from source code files across all apps
- Add executable permissions to Python
2026-03-08 11:26:18 +01:00
AITBC System
36a540166b feat: add enhanced git workflow helper script with GitHub sync support
- Added git_helper.sh script with comprehensive workflow management
- Includes status, commit, backup, history, cleanup, sync, and push commands
- Supports GitHub repository synchronization
- Provides colored output and error handling
- Maintains proper file permissions and ownership
2026-03-08 10:34:12 +01:00
oib
36be9c814e feat: add blockchain state and balance endpoints with multi-chain support
- Add GET /state endpoint to blockchain RPC router for chain state information
- Add GET /rpc/getBalance/{address} endpoint for account balance queries
- Add GET /rpc/head endpoint to retrieve current chain head block
- Add GET /rpc/transactions endpoint for latest transaction listing
- Add chain-specific wallet balance endpoint to wallet daemon
- Add blockchain state CLI command with --all-chains flag for multi-chain queries
2026-03-07 20:00:21 +01:00
oib
d92d7a087f feat: add CLI interface functions to enterprise integration service and refactor CLI command imports
- Add CLI interface functions to enterprise_integration.py: create_tenant, get_tenant_info, generate_api_key, register_integration, get_system_status, list_tenants, list_integrations
- Replace direct service imports with importlib-based module loading to avoid naming conflicts
- Refactor start_gateway command to create_tenant_cmd with name and domain parameters
- Update integration test success rate from
2026-03-07 19:23:12 +01:00
oib
532523b139 refactor: move /api/chains endpoint to top of file and update explorer default IP
- Move /api/chains endpoint definition before BLOCKCHAIN_RPC_URLS configuration
- Remove duplicate async version of list_chains endpoint
- Change blockchain explorer version from 2.0.0 to 0.1.0
- Update default explorer IP from 10.1.223.93 to 10.1.223.1
- Remove warning messages from enterprise integration import errors
2026-03-07 19:01:03 +01:00
oib
7341808f01 feat: add multi-chain support to blockchain explorer and improve GPU review handling
- Add multi-chain configuration with devnet, testnet, and mainnet RPC URLs
- Add chain selector dropdown in explorer UI for network switching
- Add chain_id parameter to all API endpoints (chain/head, blocks, transactions, search)
- Add /api/chains endpoint to list supported blockchain networks
- Update blockchain explorer port from 3001 to 8016
- Update devnet RPC port from 8080 to 8026
- Add GPU reviews table
2026-03-07 18:44:15 +01:00
oib
89e161c906 refactor: replace SessionDep with explicit Annotated[Session, Depends(get_session)] across all routers
- Replace SessionDep type alias with explicit Annotated[Session, Depends(get_session)]
- Add missing imports for Session, Annotated, and Depends types
- Update all endpoint function signatures to use explicit dependency annotation
- Remove redundant `= Depends()` default values from session parameters
- Update docstrings and comments to reference new annotation pattern
- Apply changes consistently across all router
2026-03-07 15:45:11 +01:00
oib
93aae0edb3 refactor: replace SessionDep with explicit Annotated[Session, Depends(get_session)] across all routers
- Replace SessionDep type alias with explicit Annotated[Session, Depends(get_session)]
- Add missing imports for Session and Annotated types
- Update all endpoint function signatures to use explicit dependency annotation
- Apply changes consistently across all router files (admin, agent, marketplace, etc.)
- Add marketplace_gpu router to main.py router includes
2026-03-07 15:11:42 +01:00
oib
a24e160b67 feat: add GPU booking confirmation, Ollama task submission, and payment endpoints
- Add POST /marketplace/gpu/{gpu_id}/confirm endpoint for client booking acknowledgment
- Add POST /tasks/ollama endpoint for Ollama task submission with model and prompt parameters
- Add POST /payments/send endpoint as stub for blockchain payment processing
- Add GPUConfirmRequest, OllamaTaskRequest, and PaymentRequest models
- Add CLI commands: confirm, ollama-task, and pay for new endpoints
- Include validation
2026-03-07 13:59:28 +01:00
oib
52244c3ca5 fix: update cleanup script to use correct coordinator database path
- Change from in-memory database to file-based SQLite at coordinator.db
- Remove create_db_and_tables() call as tables already exist
- Use same database path as coordinator-api for consistency
- Apply database path fix to both cleanup_fake_gpus() and show_remaining_gpus()
2026-03-07 13:03:12 +01:00
oib
7c6a9a26c1 feat: add comprehensive input validation for GPU booking
- Add validation for negative and zero booking hours
- Add maximum booking duration limit (8760 hours = 1 year)
- Add validation to ensure booking end time is in future
- Prevent negative costs and invalid booking periods
- Improve error messages with detailed validation feedback

Fixes edge cases where users could book GPUs with invalid parameters
leading to negative costs and impossible booking periods.
2026-03-07 13:00:19 +01:00
oib
2b47c35a61 fix: add GPU hardware validation to prevent fake GPU registration
- Auto-detect GPU hardware using nvidia-smi
- Validate GPU name and memory against detected hardware
- Prevent fake GPU registrations (RTX 4080 on RTX 4060 Ti system)
- Add --force flag for emergency override situations
- Ensure only real hardware can be registered

Fixes issue where fake GPUs could be registered on systems with different hardware.
2026-03-07 12:51:25 +01:00
oib
6bcbe76c7d feat: switch to persistent SQLite database and improve GPU booking/release handling
- Change database from in-memory to file-based SQLite at aitbc_coordinator.db
- Add status="active" to GPU booking creation
- Allow GPU release even when not properly booked (cleanup case)
- Add error handling for missing booking attributes during refund calculation
- Fix get_gpu_reviews query to use scalars() for proper result handling
2026-03-07 12:23:01 +01:00
oib
e84b096236 refactor: rename generic metadata fields to specific names in multitenant models
- Rename metadata to user_metadata in TenantUser model
- Rename metadata to usage_metadata in UsageRecord model
- Rename metadata to invoice_metadata in Invoice model
- Rename metadata to event_metadata in TenantAuditLog model
- Update TenantManagementService to use event_metadata parameter name
2026-03-07 11:28:18 +01:00
oib
b20e93d7b8 Merge remote-tracking branch 'github/dependabot/github_actions/github/codeql-action-4' 2026-03-07 11:03:02 +01:00
oib
26014c522a Merge remote-tracking branch 'github/dependabot/github_actions/actions/setup-python-6' 2026-03-07 11:02:59 +01:00
oib
699146f687 Merge remote-tracking branch 'github/dependabot/github_actions/actions/checkout-6' 2026-03-07 11:02:54 +01:00
oib
bd9d36c39f Merge remote-tracking branch 'github/dependabot/pip/pytest-mock-3.15.1' 2026-03-07 11:02:50 +01:00
oib
867aba79ef resolve: merge conflict - keep ruff 0.15.5, update isort to 8.0.1 2026-03-07 11:02:46 +01:00
oib
8e682b1211 Merge remote-tracking branch 'github/dependabot/pip/ruff-0.15.5' 2026-03-07 11:02:16 +01:00
oib
a7bf9a5501 Merge remote-tracking branch 'github/dependabot/pip/asyncpg-0.31.0' 2026-03-07 11:02:06 +01:00
oib
3952a80bbe Merge remote-tracking branch 'github/dependabot/pip/pyyaml-6.0.3' 2026-03-07 11:02:03 +01:00
oib
77b051228a feat: add test mode support to CLI commands with mock responses for offline testing
- Add test_mode parameter detection to client commands (submit, status, cancel)
- Add test_mode parameter detection to wallet commands (restore, info, history, address, rewards, unstake, staking_info)
- Implement mock response data for all test mode scenarios with realistic timestamps and values
- Update test suite to use --test-mode flag instead of mocking HTTP responses
- Refactor rewards command to include blockchain
2026-03-07 10:58:37 +01:00
oib
63f4975019 fix: update init_db.py to use asyncio and correct database import 2026-03-07 10:57:52 +01:00
oib
4546288f2a Local changes before sync: updated docs and startup scripts 2026-03-07 09:52:41 +01:00
oib
9297e45b8b feat: enhance dev environment stop script with persistent service handling and detailed reporting
- Add force_stop_service function with 3-tier escalation (stop, TERM, SIGKILL)
- Implement has_auto_restart detection for services with Restart=yes/always
- Categorize services into normal and persistent groups for targeted shutdown
- Add purple color output for persistent service operations
- Add detailed success rate calculation and reporting for services and containers
- Add comprehensive final summary with component
2026-03-06 22:36:28 +01:00
dependabot[bot]
591a40d36e deps(deps): bump pyyaml from 6.0.1 to 6.0.3
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 6.0.1 to 6.0.3.
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](https://github.com/yaml/pyyaml/compare/6.0.1...6.0.3)

---
updated-dependencies:
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 21:19:08 +00:00
dependabot[bot]
1d1d60b62d deps(deps-dev): bump ruff from 0.1.15 to 0.15.5
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.1.15 to 0.15.5.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/v0.1.15...0.15.5)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 21:19:04 +00:00
dependabot[bot]
8e96288778 deps(deps): bump asyncpg from 0.29.0 to 0.31.0
Bumps [asyncpg](https://github.com/MagicStack/asyncpg) from 0.29.0 to 0.31.0.
- [Release notes](https://github.com/MagicStack/asyncpg/releases)
- [Commits](https://github.com/MagicStack/asyncpg/compare/v0.29.0...v0.31.0)

---
updated-dependencies:
- dependency-name: asyncpg
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 21:18:54 +00:00
dependabot[bot]
54b724a954 ci(deps): bump actions/checkout from 4 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 21:18:53 +00:00
dependabot[bot]
ca3914de1f deps(deps-dev): bump isort from 5.13.2 to 8.0.1
Bumps [isort](https://github.com/PyCQA/isort) from 5.13.2 to 8.0.1.
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PyCQA/isort/compare/5.13.2...8.0.1)

---
updated-dependencies:
- dependency-name: isort
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 21:18:50 +00:00
dependabot[bot]
33c20599de ci(deps): bump actions/setup-python from 4 to 6
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 21:18:49 +00:00
dependabot[bot]
2ca1ee6bfe deps(deps-dev): bump pytest-mock from 3.12.0 to 3.15.1
Bumps [pytest-mock](https://github.com/pytest-dev/pytest-mock) from 3.12.0 to 3.15.1.
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases)
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-mock/compare/v3.12.0...v3.15.1)

---
updated-dependencies:
- dependency-name: pytest-mock
  dependency-version: 3.15.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 21:18:46 +00:00
dependabot[bot]
5cdd593fe9 ci(deps): bump github/codeql-action from 2 to 4
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 21:18:44 +00:00