90 Commits

Author	SHA1	Message	Date
aitbc	8ef559a12c	Mypy contexts remediation: Fix type errors in coordinator-api contexts ... - Added missing logger definitions (74 errors fixed) - Added missing return type annotations (185 errors fixed) - Fixed undefined names and missing imports - Fixed SQLAlchemy ORM typing patterns - Added explicit type annotations for class variables - Added inline type: ignore comments for 6 false positives - translation_engine.py: mypy control flow unreachable (false positive) - certification.py: SQLAlchemy desc() arg-type (false positive) - Removed broad contexts.* from mypy ignore_errors in pyproject.toml - Reduced mypy errors in contexts directory from 1376 to 6 (all false positives)	2026-05-25 15:09:13 +02:00
aitbc	a80415321a	mypy: routers.* now fully type-checked — remove from ignore_errors override ... - Fixed 253 errors across 31 router files - Removed 25 unused type: ignore comments - Fixed services.__init__ __getattr__ return type (object -> Any) - Added dict type annotations for validation_result - Suppressed remaining false positives (Request[State], Session types, Depends) - Removed apps.coordinator-api.src.app.routers.* from pyproject.toml ignore_errors - Remaining ignore_errors entries: contexts.* and core apps	2026-05-25 12:50:10 +02:00
aitbc	48eded61b8	security: upgrade starlette to 1.0.1 to fix PYSEC-2026-161 ... - starlette 0.52.1 had Host header injection vulnerability (auth bypass) - Upgraded to 1.0.1 which fixes the issue - Removed unused prometheus-fastapi-instrumentator (conflicting constraint) - Updated pyproject.toml starlette >= 1.0.1	2026-05-25 12:08:29 +02:00
aitbc	4e83877faf	mypy: services.* now fully type-checked — remove from ignore_errors override ... - All 72 service files pass mypy with 0 errors - Bulk suppressed SQLAlchemy false positives (.where/and_/count/desc) - Fixed missing return type annotations on multi-line function defs - Fixed dict var annotations (compliance, ipfs, security modules) - Fixed adaptive_learning_app route return types - Removed apps.coordinator-api.src.app.services.* from pyproject.toml ignore_errors - Remaining ignore_errors entries: routers.* and contexts.* (still in tech debt)	2026-05-25 11:57:48 +02:00
aitbc	112a7b8190	fix: clean mypy errors in storage and utils layers ... storage/ — 0 errors (4 files): - db.py: import Engine/AsyncEngine from sqlalchemy, annotate get_session - db_pg.py: annotate all methods, fix Optional params to X|None, fix execute_update/batch rowcount casts, fix create_job return str cast - models_governance.py: add timezone import, wrap datetime.now in lambda, remove invalid ConfigDict(indexes=...) key (use __table_args__ instead), remove now-unused ConfigDict import - (other storage files had no errors) utils/ — 0 errors (4 files): - cache.py: add asyncio/gc/Callable imports, annotate all methods/wrappers, fix no-any-return in cache_middleware and warm_marketplace_stats - cache_management.py: add asyncio import, annotate all methods, fix str.in_ -> column().in_(), fix Optional param, fix cleanup_expired_cache call (was async background loop; use cache_manager.cleanup_expired() directly) - circuit_breaker.py: fix expected_exception type to type[BaseException], fix name param Optional, annotate all methods, fix exception handler pattern, fix response.json() no-any-return - metrics.py: add -> None to __init__ pyproject.toml: - Remove storage.* and utils.* from ignore_errors override (layers now clean) - Update clean-layer comment 61 source files now pass mypy with no errors. Remaining ignore_errors: routers, services, contexts (coordinator-api) and all blanket-suppressed apps.	2026-05-25 10:39:28 +02:00
aitbc	3d66d34173	fix: clean mypy errors in schemas, models, auth, exceptions layers ... schemas/ — 0 errors (11 files): - federated_learning, decentralized_memory, dao_governance, atomic_swap: fix self-imports to import enums from domain layer - pricing.py: add timezone import, fix default_factory lambda, annotate validator - __init__.py: remove invalid ser_json_tuples from ConfigDict models/ — 0 errors (10 files): - registry.py: add timezone import, fix default_factory lambda, annotate validator, add items field to ParameterDefinition (used at callsites) - services.py: annotate validators with proper types, use ValidationInfo, fix no-any-return with explicit typed local - confidential.py: rename metadata->extra_metadata (conflicts with SQLModel), add mypy disable for pydantic-field (raw SQLAlchemy Column pattern) auth.py: add -> str return type exceptions.py: fix Optional param defaults to use X | None annotations pyproject.toml: - Add pydantic.mypy plugin (fixes false Pydantic v2 positive errors) - Remove models.* from ignore_errors override (layer now clean) - Update clean-layer comment 51 source files now pass mypy with no errors. Remaining ignore_errors: routers, services, storage, utils, contexts (coordinator-api) and all blanket-suppressed apps.	2026-05-25 10:32:34 +02:00
aitbc	814c2ce891	fix: clean domain type errors and tighten mypy overrides ... Domain layer (coordinator-api) now passes mypy with no errors: - multi_chain_transaction.py: add missing 'from typing import Any' - bounty.py: annotate all __table_args__ as dict[str, object] - pricing_models.py: fix sa_column=Text -> sa_column=Column(Text) - pricing_strategies.py: add return type annotations to __init__ and _apply_rule_action pyproject.toml mypy overrides: - Remove stale domain-specific ignore_errors entries (domain is clean) - Remove unused ignore_missing_imports for alembic, uvicorn, fastapi - Add explicit ignore_errors for coordinator-api non-domain modules (routers, services, schemas, models, auth, exceptions, contexts) replacing the vague blanket excludes with granular module-level tracking - Add tech-debt comment explaining the remaining ignore_errors blocks	2026-05-25 10:24:41 +02:00
aitbc	573aae065b	feat: complete codebase remediation with all phases ... Phase 1: Security fixes - Added CORSMiddleware to marketplace-service with specific origins - Fixed blockchain-node auth to fail closed on JWT errors - Added security regression tests (test_cors_configuration.py, test_dispute_auth.py) Phase 2: Repository cleanup - Removed 51 fix/backup/legacy files - Deleted marketplace-service-debug directory Phase 3.1: Python version constraints - Updated aitbc-crypto and aitbc-sdk with requires-python >=3.13 - Added explicit [tool.poetry].packages declarations Phase 3.2: Agent service DI architecture - Created aitbc-agent-core package with protocols and shared service - Implemented adapters for agent-management and coordinator-api - Created factory functions for gradual migration - Added migration comments to existing integration files Phase 4.1: Auth/utils extraction - Created auth.py module with JWT validation and security utilities - Created utils.py module with common helpers Phase 4.2: Router decomposition - Decomposed router.py into 10 domain modules (58 endpoints) - Created route table snapshot for verification - Preserved router_old.py as reference Phase 5: App shell classification - Documented app shell patterns across services Phase 6: Quality gates - Verified mypy type checking (75% error reduction) - Analyzed logging inconsistencies with structlog migration plan - Removed unused orjson dependency Documentation: - Created comprehensive remediation report - Added architecture documentation for DI pattern - Added quality analysis documents	2026-05-24 20:21:23 +02:00
aitbc	494bd962b4	Add authentication to dispute endpoints and improve test coverage infrastructure ... - Add get_authenticated_address() helper to extract wallet address from X-Wallet-Address header or JWT token - Add authentication to dispute filing, evidence submission, verification, voting, and arbitrator authorization endpoints - Replace hardcoded zero addresses with authenticated addresses from request headers - Add DEV_MODE fallback for development without authentication - Add --mock flag to experimental resource	2026-05-22 23:13:47 +02:00
aitbc	56938fb2c4	security: update vulnerable dependencies in subdirectory pyproject.toml files ... - Root pyproject.toml: urllib3 >=2.6.3 -> >=2.7.0 - packages/py/aitbc-sdk: requests >=2.31.0 -> >=2.32.4, httpx >=0.25.0 -> >=0.28.1 - packages/py/aitbc-agent-sdk: requests >=2.31.0 -> >=2.32.4, pydantic >=2.5.0 -> >=2.11.0 - apps/aitbc-edge-api: updated all dependencies to match secure versions - apps/api-gateway: uvicorn ^0.24.0 -> >=0.34.0 - examples/stubs/aitbc-ai-service: updated uvicorn, sqlmodel, sqlalchemy, pydantic, pydantic-settings	2026-05-20 08:23:30 +02:00
aitbc	40cee6d791	refactor: enhance configuration with security validation, database pooling, and rate limiting ... - Added List import and field_validator to config.py - Added database connection pooling settings (max_overflow, pool_recycle, pool_pre_ping, echo) - Added rate limiting settings (rate_limit_requests, rate_limit_window_seconds) - Added CORS allow_origins field with default empty list - Added validate_secrets() method to check required secrets in production - Added validate_secret_length() validator for secret_key and jwt_secret (minimum	2026-05-12 21:17:54 +02:00
aitbc	6895770510	refactor: reorganize agent services into agent_coordination package and improve error handling ... - Moved agent services to agent_coordination bounded context package: - agent_integration.py → agent_coordination/integration.py - agent_performance_service.py → agent_coordination/performance.py - agent_service.py → agent_coordination/agent_service.py - agent_security.py → agent_coordination/security.py - Deleted agent_communication.py (988 lines removed) - Updated import paths across routers to use new agent	2026-05-12 17:24:15 +02:00
aitbc	745f791eda	refactor: improve error handling and remove hardcoded credentials ... - Changed bare except clauses to specific exception types in web3_utils.py, testing.py, messages.py, and message_storage.py - Replaced print() calls with logger in testing.py, agent_discovery.py, compliance_agent.py, coordinator.py, trading_agent.py, keys.py, escrow.py, persistent_spending_tracker.py, sync_cli.py, and client.py - Added logger initialization using get_logger(__name__) in compliance_agent.py, coordinator.py, trading_agent.py, keys.py, escrow.py, persistent_spending_tracker.py, and client.py - Removed hardcoded secret	2026-05-12 17:01:57 +02:00
aitbc	3897bcbf24	refactor: move version to separate module and improve logging ... - Created aitbc/_version.py with centralized version definition - Updated aitbc/__init__.py to import __version__ from _version module - Updated constants.py to use __version__ for PACKAGE_VERSION - Replaced print() calls with logger in decorators.py, events.py, queue_manager.py, and state.py - Added logger initialization using get_logger(__name__) in config.py, decorators.py, events.py, queue_manager.py, and state.py - Added cli/commands	2026-05-11 20:12:01 +02:00
aitbc	d58c901b92	release: bump to v0.3.4 with hermes switch from openclaw ... - Created comprehensive RELEASE_v0.3.4.md with Hermes migration details - Updated release history in releases README.md - Updated pyproject.toml version to v0.3.4 - Release covers Hermes agent system migration, blockchain sync improvements, security fixes, and documentation cleanup	2026-05-09 21:08:22 +02:00
aitbc	d26d937fb1	security: update python-multipart and starlette to fix high-severity vulnerabilities ... - Updated python-multipart from >=0.0.24 to >=0.0.27 (fixes 3 DoS alerts) - Updated starlette from >=0.27.0 to >=0.49.1 (fixes 1 O(n^2) DoS alert) - Updated in requirements.txt, pyproject.toml, coordinator-api requirements, aitbc-core This addresses 4 of the 11 high-severity security vulnerabilities reported by GitHub Dependabot.	2026-05-09 20:55:36 +02:00
aitbc	607ad2105f	ci: refactor docs-validation workflow to use environment variables ... - Add env section with WORKSPACE_BASE, REPO_URL, STANDARD_DIRS - Replace hardcoded paths with environment variable references - Extract standard directory creation to dedicated step - Remove duplicate directory creation from lint steps - Remove duplicate error message in documentation structure check - Update all workspace paths to use WORKSPACE_BASE variable - Update repository URL to use REPO_URL variable test: fix import path in test_import_surface.py after utils reorgan	2026-05-09 17:41:40 +02:00
aitbc1	5e841fde03	Bump mypy to 2.0.0	2026-05-07 17:39:16 +02:00
aitbc	e7aadb3ee0	fix: update dependencies to resolve security vulnerabilities ... - Remove invalid dependencies (broadcaster, sqlcipher3-binary) - Update all packages to latest secure versions via poetry update - This should resolve many of the 29 GitHub Dependabot vulnerabilities	2026-05-05 17:05:13 +02:00
aitbc	19d415a235	feat: add SQLCipher database encryption support and consolidate agent documentation ... - Add SQLCipher encryption for ait-mainnet database with configurable flag - Add db_encryption_enabled and db_encryption_key_path config settings - Implement encryption key loading and PRAGMA key setup via connection events - Add shutdown_db function for proper database cleanup - Export middleware classes in aitbc/__init__.py - Fix import path in sync.py for settings - Remove duplicate agent documentation from docs	2026-05-03 12:00:38 +02:00
aitbc	9036e8db08	deps: add broadcaster to dependencies for Redis gossip backend	2026-05-02 18:26:27 +02:00
aitbc	ac299b19b8	Extract shared utilities to aitbc-core package ... - Updated aitbc-core pyproject.toml with structlog and starlette dependencies - Created middleware directory with 4 middleware files: - RequestIDMiddleware for request correlation - PerformanceLoggingMiddleware for performance tracking - RequestValidationMiddleware for size validation - ErrorHandlerMiddleware for standardized error responses - Added structlog logging functions (configure_logging, get_logger) to aitbc-core - Updated coordinator-api main.py to use aitbc-core middleware and logging - Removed local middleware files from coordinator-api - Removed app_logging.py from coordinator-api - Added aitbc-core as workspace package to root pyproject.toml This completes Phase 4.1: Extract shared utilities to aitbc-core	2026-04-30 11:16:39 +02:00
aitbc	4c26f742dc	Update ruff rules and document logging patterns ... - Added logging-related ruff rules (G, LOG) to pyproject.toml - Temporarily ignored G001, G002 during migration - Created comprehensive logging patterns documentation - Documented structured logging configuration and patterns - Provided migration guide from standard to structured logging This completes Phase 5.5-5.6: Update ruff rules and document logging patterns	2026-04-30 11:07:06 +02:00
aitbc	884d8d61a3	Configure pytest coverage reporting with 50% minimum threshold ... - Added coverage configuration to pytest.ini_options - Set minimum coverage threshold to 50% - Configured coverage to run on apps, packages, and cli directories - Added coverage report formats (term-missing, html) - Configured coverage exclusions for tests, migrations, venv - Added coverage exclude lines for common patterns This is Phase 2: Test Coverage Improvement	2026-04-30 10:51:48 +02:00
aitbc	db98867c6b	Fix dependency conflicts and update poetry.lock ... - Changed from exact pins to version ranges in root pyproject.toml - This allows Poetry to resolve compatible versions automatically - Successfully ran poetry lock to generate consistent dependency resolution - This completes dependency consolidation with single source of truth	2026-04-30 10:50:41 +02:00
aitbc	4f2f5869f4	Consolidate dependencies to root pyproject.toml ... - Added all dependencies from requirements.txt to root pyproject.toml - Organized dependencies into main and dev groups - Pinned exact versions for reproducibility - This is Phase 1 of dependency management consolidation	2026-04-30 10:46:19 +02:00
aitbc	4d76bf4d97	fix: add E722 to ruff select list to enforce bare except detection ... - Explicitly add E722 rule to catch bare except clauses - Addresses report item #5 (80 bare except clauses)	2026-04-30 08:35:26 +02:00
aitbc	1d02c66465	fix: update black to 26.3.1 to fix CVE-2026-32274 ... - Updated black from ^24.0.0 to ^26.3.1 in pyproject.toml - Regenerated poetry.lock to apply the update - Fixes arbitrary file writes from unsanitized user input in cache file name	2026-04-28 10:13:54 +02:00
aitbc	fb587b883b	fix: update pytest to 9.0.3 to fix CVE-2025-71176 ... - Updated pytest from ^8.2.0 to ^9.0.3 in pyproject.toml - Regenerated poetry.lock to apply the update - Fixes vulnerable tmpdir handling in pytest < 9.0.3	2026-04-28 09:57:23 +02:00
aitbc	1c049960a1	chore: bump version to v0.3.3 ... - Added RELEASE_v0.3.3.md with blockchain sync fix and security vulnerability resolution - Updated releases README.md with v0.3.3 - Updated pyproject.toml version to v0.3.3	2026-04-28 09:55:34 +02:00
aitbc	ecb76a0ef9	docs: update mastery plan to v2.0 with multi-chain support, hub/follower topology, and workflow integration ... - Bump version from 1.0 to 2.0 in OPENCLAW_AITBC_MASTERY_PLAN.md - Add comprehensive workflow integration section with links to multi-node setup, operations, marketplace, and production workflows - Document multi-chain runtime support (ait-testnet, ait-devnet) with shared database and chain-aware RPC - Document hub/follower topology with island management and P2P network architecture - Add new	2026-04-13 18:22:47 +02:00
aitbc	9db720add8	docs: add code quality and type checking workflows to master index ... - Add Code Quality Module section with pre-commit hooks and quality checks - Add Type Checking CI/CD Module section with MyPy workflow and coverage - Update README with code quality achievements and project structure - Migrate FastAPI apps from deprecated on_event to lifespan context manager - Update pyproject.toml files to reference consolidated dependencies - Remove unused app.py import in coordinator-api - Add type hints to agent	2026-03-31 21:45:43 +02:00
aitbc	2dafa5dd73	feat: update service versions to v0.2.3 release ... - Updated blockchain-node from v0.2.2 to v0.2.3 - Updated coordinator-api from 0.1.0 to v0.2.3 - Updated pool-hub from 0.1.0 to v0.2.3 - Updated wallet from 0.1.0 to v0.2.3 - Updated root project from 0.1.0 to v0.2.3 All services now match RELEASE_v0.2.3	2026-03-31 15:11:44 +02:00
aitbc1	d2f7100594	fix: update idna to address security vulnerability	2026-03-31 14:03:38 +02:00
aitbc1	6b6653eeae	fix: update requests and urllib3 to address security vulnerabilities	2026-03-31 14:03:38 +02:00
aitbc1	e2844f44f8	add: root pyproject.toml for development environment health checks	2026-03-31 14:03:36 +02:00
aitbc	e23438a99e	fix: update Poetry configuration to modern pyproject.toml format ... - Add root pyproject.toml for poetry check in dev_heartbeat.py - Convert all packages from deprecated [tool.poetry.*] to [project.*] format - Update aitbc-core, aitbc-sdk, aitbc-crypto, aitbc-agent-sdk packages - Regenerate poetry.lock files for all packages - Fix poetry check failing issue in development environment This resolves the 'poetry check: FAIL' issue in dev_heartbeat.py while maintaining all package dependencies and build compatibility.	2026-03-30 15:40:54 +02:00
aitbc1	430120e94c	chore: remove configuration files and reorganize production workflow documentation ... 🧹 Configuration Cleanup: • Remove .aitbc.yaml test configuration file • Remove .editorconfig editor settings • Remove .env.example environment template • Remove .gitea-token authentication file • Remove .pre-commit-config.yaml hooks configuration 📋 Workflow Documentation Restructuring: • Replace immediate actions with complete optimization workflow (step 1) • Add production deployment workflow as	2026-03-29 20:06:51 +02:00
aitbc1	39e4282525	fix: add eth-account dependency for blockchain testing ... - Add eth-account>=0.13.0 to pyproject.toml dependencies - Add eth-account>=0.13.0 to central requirements.txt - Fixes CI test failure: ModuleNotFoundError: No module named 'eth_account' - Ensures blockchain contract tests can import eth_account properly - Required for Guardian Contract and other blockchain functionality	2026-03-29 11:59:58 +02:00
aitbc1	848162ae21	chore(deps): bump cryptography from 46.0.5 to 46.0.6 in /apps/blockchain-node in the pip group across 1 directory	2026-03-29 09:51:09 +02:00
aitbc1	8cac82d959	Update to v0.2.2 - fix pyproject.toml and package build	2026-03-28 10:58:06 +01:00
aitbc1	d0c33ca3c6	chore: update pydantic and pydantic-core	2026-03-28 09:16:58 +01:00
aitbc1	b843c89a1c	chore: final dependency updates	2026-03-28 09:16:36 +01:00
aitbc1	7b09272999	chore: update dependencies and fix pyproject.toml constraints	2026-03-28 09:16:10 +01:00
aitbc1	783659ff5f	fix: correct invalid Python classifier in pyproject.toml	2026-03-28 09:14:09 +01:00
aitbc1	16224c6103	fix: adjust Python version requirement for slowapi compatibility ... PYTHON VERSION FIX: Make project compatible with slowapi Issue: - Project requires Python >=3.14 but slowapi only supports Python <4.0 - Poetry dependency resolution failing due to Python version conflict - slowapi versions 0.1.0-0.1.9 all require Python >=3.6,<4.0 Solution: - Change requires-python from '>=3.13.5' to '>=3.13.5,<4.0' - This makes the project compatible with slowapi Python requirements - Maintains minimum Python version while adding upper bound Expected results: - Poetry dependency resolution should succeed - slowapi should install properly - All dependencies should be compatible - Test workflow should proceed to execution This resolves the Python version compatibility issue that was blocking dependency installation.	2026-03-27 21:03:21 +01:00
aitbc1	cb768adb3a	feat: fix missing modules and dependencies for test compatibility ... CODEBASE FIXES: Resolve real import and dependency issues Fixed Issues: 1. Missing aitbc.logging module - created aitbc/ package with logging.py 2. Missing src.message_protocol - created agent-protocols/src/message_protocol.py 3. Missing src.task_manager - created agent-protocols/src/task_manager.py 4. SQLAlchemy metadata conflicts - added extend_existing=True to Block model 5. Missing dependencies - added slowapi>=0.1.0 and pynacl>=1.5.0 New Modules Created: - aitbc/__init__.py - AITBC package initialization - aitbc/logging.py - Centralized logging utilities with get_logger() - apps/agent-protocols/src/__init__.py - Agent protocols package - apps/agent-protocols/src/message_protocol.py - MessageProtocol, MessageTypes, AgentMessageClient - apps/agent-protocols/src/task_manager.py - TaskManager, TaskStatus, TaskPriority, Task Database Fixes: - apps/blockchain-node/src/aitbc_chain/models.py - Added extend_existing=True to resolve metadata conflicts Dependencies Added: - slowapi>=0.1.0 - For slowapi.errors import - pynacl>=1.5.0 - For nacl.signing import Expected Results: - aitbc.logging imports should work - src.message_protocol imports should work - src.task_manager imports should work - SQLAlchemy metadata conflicts resolved - Missing dependency imports resolved - More tests should collect and run successfully This addresses the root cause issues in the codebase rather than working around them with test filtering.	2026-03-27 20:59:45 +01:00
aitbc	5d066b1db8	FIX: Bot node server should ONLY have Python 3.13.5 classifier ... ✅ CORRECTED PYTHON CLASSIFIERS: - REMOVED: Programming Language :: Python :: 3.11 (not installed) - REMOVED: Programming Language :: Python :: 3.12 (not installed) - UPDATED: Programming Language :: Python :: 3.13 → 3.13.5 (exact version) - KEPT: Programming Language :: Python :: 3 (generic) - KEPT: requires-python = >=3.13.5 (correct) 🔍 ROOT CAUSE: Previous commit a0e330d incorrectly removed Python 3.13.5 as invalid and added Python 3.11/3.12 which are not installed on this server. ✅ SYSTEM REALITY: - Only Python 3.13.5 is installed on aitbc server - No Python 3.11 or 3.12 packages available - CI/CD workflows all use Python 3.13.5 - Project requires Python >=3.13.5 🎯 ALIGNMENT: - pyproject.toml now matches system reality - No false claims about unsupported Python versions - Consistent with requires-python constraint - Aligns with CI/CD configuration	2026-03-27 07:55:11 +01:00
aitbc	d02e512148	Add Python 3.13 classifier back - we are using Python 3.13.5	2026-03-27 07:51:39 +01:00
aitbc	a0e330d568	fix: remove invalid Python 3.13 classifier from pyproject.toml	2026-03-27 07:51:18 +01:00