307 Commits

Author	SHA1	Message	Date
aitbc	4955e64ec9	Fix chain isolation violations and add monitoring ... - Fix supported_chains configuration: aitbc now only supports ait-mainnet, aitbc1 only supports ait-testnet - Clean up contaminated databases: removed cross-chain blocks and accounts - Add transaction chain_id validation with audit logging in state_transition.py - Fix cross-chain bridge import errors in cross_chain_integration.py - Add bridge request validation whitelist to prevent unauthorized cross-chain transfers - Create chain isolation verification script for ongoing monitoring - Add Prometheus metrics for chain isolation violations - Create alert rules for chain isolation violations - Create systemd service and timer for ongoing monitoring - Deploy fixes to aitbc1 node	2026-05-14 10:10:04 +02:00
aitbc	2b6f4c2826	refactor: add rate limiting to agent coordinator routers ... - Added Request parameter to all endpoint functions in agents.py, ai.py, alerts.py, auth.py, and consensus.py - Added @rate_limit decorator to all endpoints with appropriate limits: - Write operations (POST/PUT/DELETE): 50 requests per 60 seconds - Read operations (GET): 200 requests per 60 seconds - High-frequency operations (heartbeat, token refresh): 100 requests per 60 seconds - Renamed conflicting request parameters (request -> request_http, request_status)	2026-05-13 09:32:53 +02:00
aitbc	745f791eda	refactor: improve error handling and remove hardcoded credentials ... - Changed bare except clauses to specific exception types in web3_utils.py, testing.py, messages.py, and message_storage.py - Replaced print() calls with logger in testing.py, agent_discovery.py, compliance_agent.py, coordinator.py, trading_agent.py, keys.py, escrow.py, persistent_spending_tracker.py, sync_cli.py, and client.py - Added logger initialization using get_logger(__name__) in compliance_agent.py, coordinator.py, trading_agent.py, keys.py, escrow.py, persistent_spending_tracker.py, and client.py - Removed hardcoded secret	2026-05-12 17:01:57 +02:00
aitbc	9133609603	refactor: improve security, error handling, and service configuration ... - Added PACKAGE_VERSION to aitbc/__init__.py exports - Added block height validation and duplicate block handling in blockchain-node RPC router - Added HTTP 409 conflict response for duplicate block heights with different hashes - Changed certification router to use PartnershipProgramRequest model instead of individual parameters - Fixed import paths: certification_service -> certification, advanced_reinforcement_learning -> advanced_rl - Added MarketplaceStrategyOptimizer to advanced_rl module exports	2026-05-12 10:42:48 +02:00
aitbc	99205f97b0	ci: refactor Gitea workflows to use environment variables for workspace paths ... - Added WORKSPACE env variable to all workflow jobs - Changed hardcoded workspace paths to use ${{ env.WORKSPACE }} - Added pull_request path filters to blockchain-sync-verification.yml - Updated cross-chain-tests.yml path filters to apps/blockchain-node/** and scripts/multi-node/** - Removed ait-devnet from default chains in cross-chain-tests.yml - Disabled test-cross-chain-bridge job (test file not implemented) - Removed test-cross-chain-bridge from aggregate	2026-05-11 14:26:44 +02:00
aitbc	e4f1a96172	ci: standardize pytest invocation and add security scanning ... - Changed pytest calls to use `venv/bin/python -m pytest` with explicit config - Added `--rootdir "$PWD"` and `--import-mode=importlib` for consistent imports - Fixed PYTHONPATH to use absolute paths with $PWD prefix - Added smart contract security scanning for Solidity files - Added Circom circuit security checks for ZK proof circuits - Added ZK proof implementation security validation - Added contracts/** to security scanning workflow	2026-05-11 13:46:42 +02:00
aitbc	a9adcc17b7	fix: ensure session_scope uses chain-specific databases for multi-chain support ... - Modified main.py to pass chain_id to session_factory lambda functions - Fixed session_scope calls in _ensure_genesis_for_chains, block processing, and proposer initialization - Added debug logging to sync.py to track database queries during bulk sync - Fixed state root validation skip during bulk import with skip_state_root_validation parameter This fixes the issue where all chains were using the same default database, causing cross-chain data corruption and sync failures.	2026-05-09 20:44:58 +02:00
aitbc	bff1991303	docs: add block production configuration to node-specific settings documentation ... - Add block_production_chains and enable_block_production to node-specific configuration list - Clarify that block production settings belong in node.env, not blockchain.env - Update example configurations for aitbc, aitbc1, and gitea-runner to show proper file separation - Move block production settings from blockchain.env examples to node.env examples	2026-05-09 20:23:49 +02:00
aitbc	119ab33a75	Update fix_env_path.py to use blockchain.env instead of legacy .env	2026-05-09 19:48:48 +02:00
aitbc	476eb496e8	Fix genesis state root sync issue: use RPC-provided state_root during bootstrap ... - Modify _load_genesis_allocations_from_rpc() to extract and return genesis_state_root from RPC response - Update _initialize_genesis_allocations() to receive and store the RPC genesis_state_root - Modify _ensure_genesis_block() to use RPC-provided state_root instead of computing it locally - Remove state root recomputation after account initialization This fixes the state root mismatch between aitbc and aitbc1 genesis blocks that was preventing successful block sync. When aitbc1 bootstraps via RPC, it now uses the original genesis state_root from aitbc instead of recomputing it locally, ensuring state roots match during sync.	2026-05-09 19:26:23 +02:00
aitbc	b77d5045aa	fix: include genesis_state_root in RPC bootstrap to match source chain	2026-05-09 19:20:53 +02:00
aitbc	239effc3fd	fix: make bulk_import_from public method (remove underscore prefix)	2026-05-09 19:12:28 +02:00
aitbc	5fe7862c02	fix: remove duplicate protocol check and add better logging	2026-05-09 19:04:54 +02:00
aitbc	8faebf0318	fix: add http:// prefix to bulk sync source URL if missing	2026-05-09 19:02:19 +02:00
aitbc	13e865ae74	debug: add chain_id to all genesis initialization log messages	2026-05-09 18:47:52 +02:00
aitbc	63aac21a59	debug: add chain_id logging to genesis initialization	2026-05-09 18:46:08 +02:00
aitbc	08b33bffd8	revert: remove keystore path from genesis file search	2026-05-09 18:45:09 +02:00
aitbc	93b0393736	fix: remove duplicate keystore genesis file check to prevent double initialization	2026-05-09 18:42:56 +02:00
aitbc	f85fce3f47	fix: skip local genesis allocations for metadata to prevent double initialization	2026-05-09 18:40:57 +02:00
aitbc	c188d2a13f	fix: return early after RPC bootstrap to avoid fallback to local file	2026-05-09 18:36:59 +02:00
aitbc	865bbfcf96	fix: always strip http:// prefix from default_peer_rpc_url before adding it back	2026-05-09 18:34:56 +02:00
aitbc	76175c0b78	fix: improve genesis bootstrap RPC endpoint and logging	2026-05-09 18:29:24 +02:00
aitbc	d26e6d3772	fix: replace datetime.UTC with timezone.utc for Python 3.12+ compatibility	2026-05-09 12:03:26 +02:00
aitbc	138822b1bf	feat: add default_peer_rpc_url configuration to ProposerConfig ... - Add default_peer_rpc_url field to ProposerConfig in config.py - Pass default_peer_rpc_url to proposer_config in app.py and main.py - Add Features Combined section to scenarios 19-20 for consistency - Fix formatting in OPERATIONS_AUDIT.md Stage 9 section - Add version metadata to training_schema.json	2026-05-09 11:46:02 +02:00
aitbc	852f2e5a8a	Rename openclaw to hermes across documentation and workflows ... - Update workflow paths from docs/openclaw to docs/hermes - Rename skill prefixes from openclaw-* to hermes-* - Update agent skill references in refactoring and analysis docs - Rename OPENCLAW_AITBC_MASTERY_PLAN.md to reflect hermes branding - Update CLI examples and command references throughout documentation	2026-05-07 11:42:06 +02:00
aitbc	b2aa977197	feat: implement contract CLI commands for smart contract operations ... - Add contract CLI handlers (list, deploy, call, verify) in cli/handlers/contract.py - Register contract parser in cli/parsers/contract.py - Add contract command handlers to unified_cli.py - Add RPC endpoints for contract operations in blockchain RPC router - Update Stage 2 training script to use correct contract CLI syntax - Contract commands now work without warnings in Stage 2 training Contract operations: - contract list: List deployed contracts - contract deploy: Deploy new smart contract (supports zk-verifier type) - contract call: Call contract method - contract verify: Verify ZK proof against contract	2026-05-04 12:37:03 +02:00
aitbc	dec85036ad	fix: resolve mempool deadlock and node service crash-loop ... - Change DatabaseMempool lock from Lock to RLock to prevent self-deadlock in add() -> _update_gauge() -> size() call chain - Switch aitbc-blockchain-node.service from combined_main to aitbc_chain.main to avoid port 8006 conflict with RPC service - Enable block production in node service (RPC remains disabled) This fixes POST /rpc/transaction timeout for funded senders and allows genesis-to-training-wallet funding to complete successfully.	2026-05-04 11:57:11 +02:00
aitbc	7a0054b53d	fix: disable block production in RPC-only blockchain service ... Prevented RPC service from producing blocks by: - Added AITBC_FORCE_ENABLE_BLOCK_PRODUCTION environment variable (highest priority) - Updated _env_value() helper to check multiple env var names in priority order - Set all block production env vars to false in RPC wrapper script - Added AITBC_FORCE_ENABLE_BLOCK_PRODUCTION=false to systemd service file - Fixed CLI get_balance() to use requests library instead of AITBCHTTPClient - Added 404 handling in	2026-05-04 11:05:32 +02:00
aitbc	eb5750a04b	fix: configure blockchain node to start HTTP RPC server on port 8006 ... Fixed blockchain node HTTP RPC server not responding to requests by: - Updated wrapper script to use combined_main.py instead of main.py - Updated combined_main.py to use port 8006 for HTTP RPC server - combined_main.py runs both blockchain node logic and HTTP RPC server together Root cause: - aitbc_chain.main only runs blockchain node logic (block production, gossip) - HTTP RPC server was not being started - Separate uvicorn process on port 8006 was hung/not responding Solution: - Use combined_main.py which starts both node and HTTP RPC server - Configure HTTP RPC to run on port 8006 (not 8005 to avoid conflict with AI service) - Blockchain node HTTP RPC now responds correctly on port 8006 This fixes the training script wallet balance timeout errors.	2026-05-04 09:48:40 +02:00
aitbc	7d14970392	feat: implement all placeholder implementations from codemap ... Security-critical implementations: - Implement HMAC-SHA256 MAC computation in setup_production.py (3b) - Implement HMAC-SHA256 MAC computation in keystore.py (3c) - Implement agent SDK signature verification using coordinator API (2a) Database cleanup: - Remove backward compatibility engine from database.py (3a) - Update fix_db.py to use get_engine() instead of direct engine import Agent integration service deployment: - Implement systemd-based agent instance deployment (1a) - Implement HTTP health check for agent instances (1b) - Implement systemd service removal for agent instances (1c) - Implement deployment rollback with previous version redeployment (1d) - Implement metrics collection from agent endpoints with fallback (agent_integration.py:828) - Implement alerting rules with configurable thresholds (agent_integration.py:856) All implementations follow the plan priorities: - Security-critical items first (MAC computation, signature verification) - Database cleanup second (backward compatibility removal) - Agent integration service deployment third (systemd deployment, health checks, removal, rollback, metrics, alerting)	2026-05-03 23:30:57 +02:00
aitbc	11119a022e	refactor: remove warning-only code path for state root validation ... - Remove conditional checks for settings.enforce_state_root_validation - Always enforce state root validation (no warning-only path) - Simplify error handling to always reject on mismatch - Update genesis metadata validation to always enforce - State root validation is now mandatory across all nodes	2026-05-03 21:56:16 +02:00
aitbc	36cdd9b188	feat: implement Phase 1.3 state root validation enforcement ... - Add genesis metadata validation to sync.py - Compute expected state root from allocations and verify against block state_root - Add auto-resync configuration (auto_resync_enabled, auto_resync_after_rejections) - Implement hybrid re-sync trigger mechanism - Track consecutive state root rejections per chain - Trigger automatic re-sync after N consecutive rejections - Reset rejection counter on successful block import	2026-05-03 21:51:55 +02:00
aitbc	2f699c3a8b	fix: use func.count() for mempool count queries in PostgreSQL ... - Add func import from sqlalchemy - Replace .count() with select(func.count()).select_from() for PostgreSQL compatibility - Remove [0] subscripting as func.count().one() returns int directly	2026-05-03 21:17:27 +02:00
aitbc	4f870e9d8d	fix: update init_mempool calls to use db_url instead of db_path ... - Update scripts/utils/init_production_genesis.py to use db_url - Update apps/blockchain-node/tests/test_mempool.py to use db_url - Update apps/blockchain-node/src/aitbc_chain/p2p_network.py to use db_url - Add MEMPOOL_DB_URL to /etc/aitbc/.env on both nodes for PostgreSQL mempool	2026-05-03 21:14:26 +02:00
aitbc	f07a5de9b1	refactor: implement proper Merkle Patricia Trie with node types and proof generation ... - Add LeafNode, ExtensionNode, and BranchNode dataclasses for trie structure - Replace cache-based implementation with recursive node-based trie operations - Implement nibble-based path encoding for efficient prefix matching - Add proper node insertion, deletion, and retrieval with path normalization - Implement node encoding/decoding for serialization and hashing - Add get_proof method for generating Merkle pro	2026-05-03 20:11:26 +02:00
aitbc	19d415a235	feat: add SQLCipher database encryption support and consolidate agent documentation ... - Add SQLCipher encryption for ait-mainnet database with configurable flag - Add db_encryption_enabled and db_encryption_key_path config settings - Implement encryption key loading and PRAGMA key setup via connection events - Add shutdown_db function for proper database cleanup - Export middleware classes in aitbc/__init__.py - Fix import path in sync.py for settings - Remove duplicate agent documentation from docs	2026-05-03 12:00:38 +02:00
aitbc	8f6a2f208c	Fix missing _fetch_chain_head method in PoAProposer	2026-05-03 10:20:59 +02:00
aitbc	789d309f8c	Implement Phase 1.3 state root enforcement with RPC bootstrap ... - Embed genesis allocations in block metadata - Add RPC endpoint for genesis allocations bootstrap - Update genesis initialization to support RPC bootstrap - Add genesis metadata validation in sync - Add ENFORCE_STATE_ROOT_VALIDATION config flag - Implement state root enforcement with configurable flag	2026-05-03 10:15:38 +02:00
aitbc	7f7e01be10	feat: add composite unique constraint for chain_id and block hash ... - Replace single unique constraint on hash with composite constraint on (chain_id, hash) - Allow same block hash across different chains while preventing duplicates within a chain - Update Block model table args to include uix_block_chain_hash constraint	2026-05-03 09:50:18 +02:00
aitbc	a332ba18b5	feat: add multi-chain support to agent daemon and improve fork detection logging ... - Add chain_id parameter to agent daemon with default "ait-mainnet" - Filter transactions by chain_id in daemon polling - Update agent daemon wrapper to support multiple chains via AGENT_DAEMON_CHAINS env var - Add chain_id validation in fork detection to reject incompatible chains - Improve logging in sync module with more detailed fork and import failure messages	2026-05-03 09:41:30 +02:00
aitbc	fb93828e9d	debug: add BROKER SUB logging to track Redis message reception	2026-05-02 18:21:48 +02:00
aitbc	12fc0d729f	debug: add detailed broadcast logging to verify gossip topic usage	2026-05-02 18:05:35 +02:00
aitbc	c627bba425	fix: add missing Account import for bulk sync	2026-05-02 17:09:35 +02:00
aitbc	4eaea431fd	fix: add missing StateManager import for bulk sync	2026-05-02 17:08:08 +02:00
aitbc	f44d6d3149	cleanup: remove debug logging from blockchain sync investigation	2026-05-02 17:01:23 +02:00
aitbc	b63cb80266	debug: add block source logging from gossip	2026-05-02 16:53:37 +02:00
aitbc	000eb998f1	debug: add database query logging to import_block	2026-05-02 16:52:03 +02:00
aitbc	989e298622	debug: add database path logging to ChainSync	2026-05-02 16:51:17 +02:00
aitbc	83c4dd6820	debug: add parent_exists check logging	2026-05-02 16:43:10 +02:00
aitbc	4b7d959802	debug: add print statement for bulk sync failure reason	2026-05-02 16:41:39 +02:00