5 Commits

Author	SHA1	Message	Date
aitbc	9609924d56	fix: populate feature_flags.json and remove sys.path bootstrap inserts ... - feature_flags.json: populated with 6 well-described flags reflecting current system state (DI migration, structlog, CORS enforcement, X-Wallet-Address trust, ZK proof, marketplace rate limiting) - Remove sys.path.insert bootstrap from app main.py files: - apps/agent-management/src/app/main.py - apps/marketplace-service/src/marketplace_service/main.py - apps/wallet/src/app/main.py - apps/blockchain-node/src/aitbc_chain/combined_main.py PYTHONPATH is set correctly by the wrapper scripts in scripts/wrappers/ so the inserts are redundant and misleading. Wrapper scripts (scripts/wrappers/*.py) and lazy cross-app imports in blockchain-event-bridge are intentionally left unchanged.	2026-05-25 10:18:14 +02:00
aitbc	573aae065b	feat: complete codebase remediation with all phases ... Phase 1: Security fixes - Added CORSMiddleware to marketplace-service with specific origins - Fixed blockchain-node auth to fail closed on JWT errors - Added security regression tests (test_cors_configuration.py, test_dispute_auth.py) Phase 2: Repository cleanup - Removed 51 fix/backup/legacy files - Deleted marketplace-service-debug directory Phase 3.1: Python version constraints - Updated aitbc-crypto and aitbc-sdk with requires-python >=3.13 - Added explicit [tool.poetry].packages declarations Phase 3.2: Agent service DI architecture - Created aitbc-agent-core package with protocols and shared service - Implemented adapters for agent-management and coordinator-api - Created factory functions for gradual migration - Added migration comments to existing integration files Phase 4.1: Auth/utils extraction - Created auth.py module with JWT validation and security utilities - Created utils.py module with common helpers Phase 4.2: Router decomposition - Decomposed router.py into 10 domain modules (58 endpoints) - Created route table snapshot for verification - Preserved router_old.py as reference Phase 5: App shell classification - Documented app shell patterns across services Phase 6: Quality gates - Verified mypy type checking (75% error reduction) - Analyzed logging inconsistencies with structlog migration plan - Removed unused orjson dependency Documentation: - Created comprehensive remediation report - Added architecture documentation for DI pattern - Added quality analysis documents	2026-05-24 20:21:23 +02:00
aitbc	83ca64f7b8	feat: add /v1 API prefix to all business logic endpoints and create CLI test suite ... - Added /v1 prefix to all business logic routers in coordinator-api (analytics, portfolio, reputation, rewards, staking) - Updated agent-coordinator to include /v1 prefix for all routers - Changed agent-management API prefix from /api/v1 to /v1 - Updated api-gateway service prefixes to include /v1 for all proxied services - Fixed coordinator-api routers to use correct service imports (AgentServiceMarketplace instead	2026-05-19 12:46:59 +02:00
aitbc	2b6f4c2826	refactor: add rate limiting to agent coordinator routers ... - Added Request parameter to all endpoint functions in agents.py, ai.py, alerts.py, auth.py, and consensus.py - Added @rate_limit decorator to all endpoints with appropriate limits: - Write operations (POST/PUT/DELETE): 50 requests per 60 seconds - Read operations (GET): 200 requests per 60 seconds - High-frequency operations (heartbeat, token refresh): 100 requests per 60 seconds - Renamed conflicting request parameters (request -> request_http, request_status)	2026-05-13 09:32:53 +02:00
aitbc	745f791eda	refactor: improve error handling and remove hardcoded credentials ... - Changed bare except clauses to specific exception types in web3_utils.py, testing.py, messages.py, and message_storage.py - Replaced print() calls with logger in testing.py, agent_discovery.py, compliance_agent.py, coordinator.py, trading_agent.py, keys.py, escrow.py, persistent_spending_tracker.py, sync_cli.py, and client.py - Added logger initialization using get_logger(__name__) in compliance_agent.py, coordinator.py, trading_agent.py, keys.py, escrow.py, persistent_spending_tracker.py, and client.py - Removed hardcoded secret	2026-05-12 17:01:57 +02:00