330 Commits

Author	SHA1	Message	Date
aitbc	9609924d56	fix: populate feature_flags.json and remove sys.path bootstrap inserts ... - feature_flags.json: populated with 6 well-described flags reflecting current system state (DI migration, structlog, CORS enforcement, X-Wallet-Address trust, ZK proof, marketplace rate limiting) - Remove sys.path.insert bootstrap from app main.py files: - apps/agent-management/src/app/main.py - apps/marketplace-service/src/marketplace_service/main.py - apps/wallet/src/app/main.py - apps/blockchain-node/src/aitbc_chain/combined_main.py PYTHONPATH is set correctly by the wrapper scripts in scripts/wrappers/ so the inserts are redundant and misleading. Wrapper scripts (scripts/wrappers/*.py) and lazy cross-app imports in blockchain-event-bridge are intentionally left unchanged.	2026-05-25 10:18:14 +02:00
aitbc	fd6ade31dc	fix: remove backup files and fix zero-address defaults ... - Removed router_old.py (2473 lines - backup reference file) - Removed cli/aitbc_cli.legacy.py (3256 lines - legacy CLI) - Fixed zero-address defaults in dispute_resolution.py: - Dispute.winner: changed from "0x0000000000000000000000000000000000000000" to None - Evidence.verified_by: changed from "0x0000000000000000000000000000000000000000" to None These changes address remaining cleanup items from the gap analysis.	2026-05-25 10:08:41 +02:00
aitbc	573aae065b	feat: complete codebase remediation with all phases ... Phase 1: Security fixes - Added CORSMiddleware to marketplace-service with specific origins - Fixed blockchain-node auth to fail closed on JWT errors - Added security regression tests (test_cors_configuration.py, test_dispute_auth.py) Phase 2: Repository cleanup - Removed 51 fix/backup/legacy files - Deleted marketplace-service-debug directory Phase 3.1: Python version constraints - Updated aitbc-crypto and aitbc-sdk with requires-python >=3.13 - Added explicit [tool.poetry].packages declarations Phase 3.2: Agent service DI architecture - Created aitbc-agent-core package with protocols and shared service - Implemented adapters for agent-management and coordinator-api - Created factory functions for gradual migration - Added migration comments to existing integration files Phase 4.1: Auth/utils extraction - Created auth.py module with JWT validation and security utilities - Created utils.py module with common helpers Phase 4.2: Router decomposition - Decomposed router.py into 10 domain modules (58 endpoints) - Created route table snapshot for verification - Preserved router_old.py as reference Phase 5: App shell classification - Documented app shell patterns across services Phase 6: Quality gates - Verified mypy type checking (75% error reduction) - Analyzed logging inconsistencies with structlog migration plan - Removed unused orjson dependency Documentation: - Created comprehensive remediation report - Added architecture documentation for DI pattern - Added quality analysis documents	2026-05-24 20:21:23 +02:00
aitbc	13ada12b49	Security fixes: wildcard CORS, JWT auth, zero-address fallback ... Phase 1 security remediation from codebase analysis: CORS fixes: - Replace wildcard CORS with safe localhost defaults in agent-coordinator - Replace wildcard CORS with safe localhost defaults in marketplace - Fix 8 additional wildcard CORS instances in coordinator-api apps: - hermes_enhanced_app.py - api_gateway.py - modality_optimization_app.py - multimodal_app.py - gpu_multimodal_app.py - marketplace_enhanced_app.py - advanced_ai_service.py - adaptive_learning_app.py - Add CORS configuration security tests Blockchain-node auth fixes: - JWT authentication now fails closed with clear error message - X-Wallet-Address already gated behind TRUST_X_WALLET_ADDRESS env var - Remove zero-address fallback from arbitration vote submission - Add regression test for zero-address rejection in arbitration Tests: - Update dispute auth tests to reflect new JWT error message - Add test_arbitration_vote_zero_address_rejected - Add test_cors_configuration.py with 5 CORS validation tests	2026-05-24 19:31:26 +02:00
aitbc	494bd962b4	Add authentication to dispute endpoints and improve test coverage infrastructure ... - Add get_authenticated_address() helper to extract wallet address from X-Wallet-Address header or JWT token - Add authentication to dispute filing, evidence submission, verification, voting, and arbitrator authorization endpoints - Replace hardcoded zero addresses with authenticated addresses from request headers - Add DEV_MODE fallback for development without authentication - Add --mock flag to experimental resource	2026-05-22 23:13:47 +02:00
aitbc	0bd59a142a	fix: use BigInteger for Account nonce field ... - Change Account.nonce from INTEGER to BigInteger to support large values - Part of fixing SQLite INTEGER overflow error in genesis allocations	2026-05-20 10:26:28 +02:00
aitbc	236bfb7109	fix: use BigInteger for Account balance field ... - Change Account.balance from INTEGER to BigInteger to support large values - Fixes SQLite INTEGER overflow error when creating accounts from genesis allocations - Allows wallet to receive initial coin allocation from genesis block	2026-05-20 10:23:44 +02:00
aitbc	9430563e9e	refactor: make blockchain config use environment variables ... - Add import os for environment variable support - Change env_file from /etc/aitbc/.env to /etc/aitbc/blockchain.env (standard) - Make gossip_broadcast_url configurable via GOSSIP_BROADCAST_URL env var - Add cross_site_remote_endpoints configuration via CROSS_SITE_REMOTE_ENDPOINTS env var - Remove hardcoded URLs and IPs from source code - Align local codebase with container configuration	2026-05-20 09:20:08 +02:00
aitbc	88ed8a70cc	fix: parent block validation in importBlock + no retry on 4xx in AITBCHTTPClient ... - importBlock now returns 400 'Parent block not found' when parent_hash is not in the DB (skipped for genesis height 1) - AITBCHTTPClient._retry_request now immediately re-raises HTTPError for 4xx responses instead of retrying - fixes RetryError wrapping 400/409 in test_block_import_complete	2026-05-19 17:06:42 +02:00
aitbc	0a77f766e5	fix: use current UTC timestamp for genesis blocks and fix lambda closure bugs ... - Changed genesis block timestamp from hardcoded 2025-01-01 to datetime.now(timezone.utc) - Fixes unified_genesis.py, poa.py genesis creation, and fallback genesis timestamp - Fixed lambda closure bugs in session_factory by capturing chain_id with default parameter - Removed localhost:8006 from default bootstrap peers (hub nodes create own genesis) - Updated comments to reflect genesis timestamp change from deterministic to current time	2026-05-19 16:49:17 +02:00
aitbc	83e579a687	fix: add hash format validation to importBlock endpoint ... - Validate block hash is 0x + 64 hex chars; return 400 for invalid format - Fixes test_block_import and test_block_import_complete CI failures - Update test_block_import_complete Test 2 to expect 400 (invalid hash format) instead of 409 (conflict); invalid hash is now rejected before DB lookup - Move re import to top of router.py	2026-05-19 16:39:45 +02:00
aitbc	222a780167	feat: add account management, faucet, bridge, and staking endpoints ... - Added balance tracker initialization in blockchain node startup - Created CrossChainTransfer and Stake database models - Implemented GET /accounts/{address} endpoint for account details - Implemented POST /register-account endpoint for account creation - Implemented POST /faucet endpoint with rate limiting (10/hour) and auto-account creation - Implemented bridge endpoints: - POST /bridge/lock to initiate cross-chain transfers -	2026-05-19 08:51:02 +02:00
aitbc	45556e9ca3	fix: edge-api and wallet infrastructure fixes ... - Add islands proxy router to coordinator-api for unified API surface - Fix edge-api PostgreSQL connection pool settings (pool_size, max_overflow, pool_pre_ping, pool_recycle) - Fix edge-api islands router import and include_router calls - Fix edge-api datetime timezone issue (use datetime.utcnow() instead of datetime.now(timezone.utc)) - Fix edge-api SQLAlchemy enum handling (values_only=True, move index to Column) - Fix edge-api IslandService to map blockchain status 'joined' to 'active' for PostgreSQL enum compatibility - Fix wallet create_wallet deadlock (get_wallet called while lock already held) - Fix wallet port conflict (killed stale processes on port 8015) - Fix ZK mock proof verification (add test_mode parameter) - Fix blockchain balance update issue (add session.flush() after SQL UPDATEs) - Update ROADMAP.md and scenario documentation	2026-05-18 22:37:19 +02:00
aitbc	f86d9379ae	fix: island leave endpoint now working ... The leave endpoint was returning 503 due to RequestLoggingMiddleware catching HTTPException. Fixed by adding 'except HTTPException: raise' before the generic except block in the middleware. All island operations now work: join, list, get, bridge, leave.	2026-05-15 06:19:18 +02:00
aitbc	ef8c1f216e	fix: re-raise HTTPException in RequestLoggingMiddleware ... The middleware was catching all exceptions including HTTPException and returning a generic 503 'Internal server error', masking the real error details. Added 'except HTTPException: raise' before the generic except block so HTTPExceptions propagate correctly with their original status code and detail message. Also removed debug logging from leave_island handler.	2026-05-15 06:05:01 +02:00
aitbc	a8440e12d1	Clean up debug code from router.py - restore proper leave_island handler ... Router cleanup: - Restored proper leave_island handler with IslandManager integration - Re-added @rate_limit decorator - Removed debug print statements - Removed test endpoint /test/leave-debug - Removed UNIQUE_MARKER_TEST_12345 comment Leave handler now: - Calls IslandManager.leave_island - Returns LeaveIslandResponse with proper success/failure status - Includes proper error handling for unavailable island manager - Maintains rate limiting protection	2026-05-15 05:57:17 +02:00
aitbc	d3c2d0c263	Implement dispute resolution contract and service integration ... Contract: - Added DisputeResolutionContract in contracts/dispute_resolution.py - In-memory implementation with dispute, evidence, vote tracking - Supports file_dispute, submit_evidence, verify_evidence, submit_arbitration_vote - Supports authorize_arbitrator, get_dispute, get_dispute_evidence - Supports get_arbitration_votes, get_user_disputes, get_arbitrator_disputes - Supports get_authorized_arbitrators, get_active_disputes - Includes default arbitrators with reputation scores Service: - Updated dispute_resolution_service.py to use actual contract - Removed all mock implementations - All service methods now call dispute_resolution_contract - Router already integrated with service in previous commits Replaces mock dispute resolution with functional contract implementation	2026-05-15 00:55:29 +02:00
aitbc	9e17f5d928	Fix INVALID_AGENT error in messaging contract - auto-register new agents ... Blockchain node: - Modified _validate_agent to auto-register agents on first message post - Fixes INVALID_AGENT error when posting messages without prior registration - Allows testing/demo workflows to post messages without manual agent setup	2026-05-14 23:59:32 +02:00
aitbc	7139e28b4e	fix: IPFS integration improvements ... - Fix IPFS storage service: handle session=True response format (CID string vs dict) - Fix metadata cache: use in-memory dict instead of no-op pass - Fix IPFS router: use singleton pattern for service instance - Fix IPFS cat: use POST method instead of GET - Add _metadata_cache initialization to IPFSStorageService - Coordinator IPFS upload/retrieve now fully functional with integrity verification	2026-05-14 23:56:14 +02:00
aitbc	4123d9aa43	Start island manager background tasks in blockchain node ... Blockchain Node: - Added asyncio.create_task(island_manager.start()) to start background tasks - Updated log message to indicate manager is started, not just initialized Coordinator API: - Added portfolio_router to main app - Made IPFS initialization more resilient to version incompatibilities - Added session=True to ipfshttpclient.connect() call - Changed IPFS init errors from raise to warnings with graceful degradation - Added None checks	2026-05-14 23:46:36 +02:00
aitbc	4097c71276	Phase 2 complete: Island operations endpoints ... Blockchain Node RPC: - Added island management endpoints (join, leave, list, get, bridge) - Initialized island manager in RPC service lifespan - Fixed create_backend call signature Edge API: - Implemented blockchain RPC client with island operations - Implemented island service to call RPC and store in database - Implemented island router endpoints with proper request models Testing: - Blockchain RPC island endpoints working on port 8006 - Edge API island endpoints working on port 8103 - Both services successfully return island data	2026-05-14 22:15:29 +02:00
aitbc	60559efb47	Implement edge database operations and fix island RPC endpoint paths ... - Implement full DatabaseService with init, get, delete, sync, and list operations - Add database CRUD operations with SQLAlchemy queries and proper error handling - Add UUID-based database_id generation and status tracking (initialized, syncing, idle, error) - Add capacity management (capacity_gb, used_gb) and sync metadata (last_sync_at, records_synced) - Update database router with Query parameters and HTTPException error handling - Support filtering by island_id or database_id in get_edge_database endpoint - Add list_all_databases method	2026-05-14 22:08:12 +02:00
aitbc	ab8c23dba1	Add island management RPC endpoints and enhance governance service ... - Add island management endpoints to blockchain-node RPC router (join, leave, list, get, bridge) - Create request/response models for island operations (JoinIslandRequest, LeaveIslandRequest, BridgeRequestRequest) - Import get_island_manager and integrate with IslandManager for island operations - Fix coordinator-api blockchain router import path (settings from ....config) - Add exception handling to get_validators endpoint - Fix	2026-05-14 22:00:02 +02:00
aitbc	4955e64ec9	Fix chain isolation violations and add monitoring ... - Fix supported_chains configuration: aitbc now only supports ait-mainnet, aitbc1 only supports ait-testnet - Clean up contaminated databases: removed cross-chain blocks and accounts - Add transaction chain_id validation with audit logging in state_transition.py - Fix cross-chain bridge import errors in cross_chain_integration.py - Add bridge request validation whitelist to prevent unauthorized cross-chain transfers - Create chain isolation verification script for ongoing monitoring - Add Prometheus metrics for chain isolation violations - Create alert rules for chain isolation violations - Create systemd service and timer for ongoing monitoring - Deploy fixes to aitbc1 node	2026-05-14 10:10:04 +02:00
aitbc	2b6f4c2826	refactor: add rate limiting to agent coordinator routers ... - Added Request parameter to all endpoint functions in agents.py, ai.py, alerts.py, auth.py, and consensus.py - Added @rate_limit decorator to all endpoints with appropriate limits: - Write operations (POST/PUT/DELETE): 50 requests per 60 seconds - Read operations (GET): 200 requests per 60 seconds - High-frequency operations (heartbeat, token refresh): 100 requests per 60 seconds - Renamed conflicting request parameters (request -> request_http, request_status)	2026-05-13 09:32:53 +02:00
aitbc	745f791eda	refactor: improve error handling and remove hardcoded credentials ... - Changed bare except clauses to specific exception types in web3_utils.py, testing.py, messages.py, and message_storage.py - Replaced print() calls with logger in testing.py, agent_discovery.py, compliance_agent.py, coordinator.py, trading_agent.py, keys.py, escrow.py, persistent_spending_tracker.py, sync_cli.py, and client.py - Added logger initialization using get_logger(__name__) in compliance_agent.py, coordinator.py, trading_agent.py, keys.py, escrow.py, persistent_spending_tracker.py, and client.py - Removed hardcoded secret	2026-05-12 17:01:57 +02:00
aitbc	9133609603	refactor: improve security, error handling, and service configuration ... - Added PACKAGE_VERSION to aitbc/__init__.py exports - Added block height validation and duplicate block handling in blockchain-node RPC router - Added HTTP 409 conflict response for duplicate block heights with different hashes - Changed certification router to use PartnershipProgramRequest model instead of individual parameters - Fixed import paths: certification_service -> certification, advanced_reinforcement_learning -> advanced_rl - Added MarketplaceStrategyOptimizer to advanced_rl module exports	2026-05-12 10:42:48 +02:00
aitbc	99205f97b0	ci: refactor Gitea workflows to use environment variables for workspace paths ... - Added WORKSPACE env variable to all workflow jobs - Changed hardcoded workspace paths to use ${{ env.WORKSPACE }} - Added pull_request path filters to blockchain-sync-verification.yml - Updated cross-chain-tests.yml path filters to apps/blockchain-node/** and scripts/multi-node/** - Removed ait-devnet from default chains in cross-chain-tests.yml - Disabled test-cross-chain-bridge job (test file not implemented) - Removed test-cross-chain-bridge from aggregate	2026-05-11 14:26:44 +02:00
aitbc	e4f1a96172	ci: standardize pytest invocation and add security scanning ... - Changed pytest calls to use `venv/bin/python -m pytest` with explicit config - Added `--rootdir "$PWD"` and `--import-mode=importlib` for consistent imports - Fixed PYTHONPATH to use absolute paths with $PWD prefix - Added smart contract security scanning for Solidity files - Added Circom circuit security checks for ZK proof circuits - Added ZK proof implementation security validation - Added contracts/** to security scanning workflow	2026-05-11 13:46:42 +02:00
aitbc	a9adcc17b7	fix: ensure session_scope uses chain-specific databases for multi-chain support ... - Modified main.py to pass chain_id to session_factory lambda functions - Fixed session_scope calls in _ensure_genesis_for_chains, block processing, and proposer initialization - Added debug logging to sync.py to track database queries during bulk sync - Fixed state root validation skip during bulk import with skip_state_root_validation parameter This fixes the issue where all chains were using the same default database, causing cross-chain data corruption and sync failures.	2026-05-09 20:44:58 +02:00
aitbc	bff1991303	docs: add block production configuration to node-specific settings documentation ... - Add block_production_chains and enable_block_production to node-specific configuration list - Clarify that block production settings belong in node.env, not blockchain.env - Update example configurations for aitbc, aitbc1, and gitea-runner to show proper file separation - Move block production settings from blockchain.env examples to node.env examples	2026-05-09 20:23:49 +02:00
aitbc	119ab33a75	Update fix_env_path.py to use blockchain.env instead of legacy .env	2026-05-09 19:48:48 +02:00
aitbc	476eb496e8	Fix genesis state root sync issue: use RPC-provided state_root during bootstrap ... - Modify _load_genesis_allocations_from_rpc() to extract and return genesis_state_root from RPC response - Update _initialize_genesis_allocations() to receive and store the RPC genesis_state_root - Modify _ensure_genesis_block() to use RPC-provided state_root instead of computing it locally - Remove state root recomputation after account initialization This fixes the state root mismatch between aitbc and aitbc1 genesis blocks that was preventing successful block sync. When aitbc1 bootstraps via RPC, it now uses the original genesis state_root from aitbc instead of recomputing it locally, ensuring state roots match during sync.	2026-05-09 19:26:23 +02:00
aitbc	b77d5045aa	fix: include genesis_state_root in RPC bootstrap to match source chain	2026-05-09 19:20:53 +02:00
aitbc	239effc3fd	fix: make bulk_import_from public method (remove underscore prefix)	2026-05-09 19:12:28 +02:00
aitbc	5fe7862c02	fix: remove duplicate protocol check and add better logging	2026-05-09 19:04:54 +02:00
aitbc	8faebf0318	fix: add http:// prefix to bulk sync source URL if missing	2026-05-09 19:02:19 +02:00
aitbc	13e865ae74	debug: add chain_id to all genesis initialization log messages	2026-05-09 18:47:52 +02:00
aitbc	63aac21a59	debug: add chain_id logging to genesis initialization	2026-05-09 18:46:08 +02:00
aitbc	08b33bffd8	revert: remove keystore path from genesis file search	2026-05-09 18:45:09 +02:00
aitbc	93b0393736	fix: remove duplicate keystore genesis file check to prevent double initialization	2026-05-09 18:42:56 +02:00
aitbc	f85fce3f47	fix: skip local genesis allocations for metadata to prevent double initialization	2026-05-09 18:40:57 +02:00
aitbc	c188d2a13f	fix: return early after RPC bootstrap to avoid fallback to local file	2026-05-09 18:36:59 +02:00
aitbc	865bbfcf96	fix: always strip http:// prefix from default_peer_rpc_url before adding it back	2026-05-09 18:34:56 +02:00
aitbc	76175c0b78	fix: improve genesis bootstrap RPC endpoint and logging	2026-05-09 18:29:24 +02:00
aitbc	d26e6d3772	fix: replace datetime.UTC with timezone.utc for Python 3.12+ compatibility	2026-05-09 12:03:26 +02:00
aitbc	138822b1bf	feat: add default_peer_rpc_url configuration to ProposerConfig ... - Add default_peer_rpc_url field to ProposerConfig in config.py - Pass default_peer_rpc_url to proposer_config in app.py and main.py - Add Features Combined section to scenarios 19-20 for consistency - Fix formatting in OPERATIONS_AUDIT.md Stage 9 section - Add version metadata to training_schema.json	2026-05-09 11:46:02 +02:00
aitbc	852f2e5a8a	Rename openclaw to hermes across documentation and workflows ... - Update workflow paths from docs/openclaw to docs/hermes - Rename skill prefixes from openclaw-* to hermes-* - Update agent skill references in refactoring and analysis docs - Rename OPENCLAW_AITBC_MASTERY_PLAN.md to reflect hermes branding - Update CLI examples and command references throughout documentation	2026-05-07 11:42:06 +02:00
aitbc	b2aa977197	feat: implement contract CLI commands for smart contract operations ... - Add contract CLI handlers (list, deploy, call, verify) in cli/handlers/contract.py - Register contract parser in cli/parsers/contract.py - Add contract command handlers to unified_cli.py - Add RPC endpoints for contract operations in blockchain RPC router - Update Stage 2 training script to use correct contract CLI syntax - Contract commands now work without warnings in Stage 2 training Contract operations: - contract list: List deployed contracts - contract deploy: Deploy new smart contract (supports zk-verifier type) - contract call: Call contract method - contract verify: Verify ZK proof against contract	2026-05-04 12:37:03 +02:00
aitbc	dec85036ad	fix: resolve mempool deadlock and node service crash-loop ... - Change DatabaseMempool lock from Lock to RLock to prevent self-deadlock in add() -> _update_gauge() -> size() call chain - Switch aitbc-blockchain-node.service from combined_main to aitbc_chain.main to avoid port 8006 conflict with RPC service - Enable block production in node service (RPC remains disabled) This fixes POST /rpc/transaction timeout for funded senders and allows genesis-to-training-wallet funding to complete successfully.	2026-05-04 11:57:11 +02:00