14 Commits

Author	SHA1	Message	Date
aitbc	56938fb2c4	security: update vulnerable dependencies in subdirectory pyproject.toml files ... - Root pyproject.toml: urllib3 >=2.6.3 -> >=2.7.0 - packages/py/aitbc-sdk: requests >=2.31.0 -> >=2.32.4, httpx >=0.25.0 -> >=0.28.1 - packages/py/aitbc-agent-sdk: requests >=2.31.0 -> >=2.32.4, pydantic >=2.5.0 -> >=2.11.0 - apps/aitbc-edge-api: updated all dependencies to match secure versions - apps/api-gateway: uvicorn ^0.24.0 -> >=0.34.0 - examples/stubs/aitbc-ai-service: updated uvicorn, sqlmodel, sqlalchemy, pydantic, pydantic-settings	2026-05-20 08:23:30 +02:00
aitbc	83ca64f7b8	feat: add /v1 API prefix to all business logic endpoints and create CLI test suite ... - Added /v1 prefix to all business logic routers in coordinator-api (analytics, portfolio, reputation, rewards, staking) - Updated agent-coordinator to include /v1 prefix for all routers - Changed agent-management API prefix from /api/v1 to /v1 - Updated api-gateway service prefixes to include /v1 for all proxied services - Fixed coordinator-api routers to use correct service imports (AgentServiceMarketplace instead	2026-05-19 12:46:59 +02:00
aitbc	745f791eda	refactor: improve error handling and remove hardcoded credentials ... - Changed bare except clauses to specific exception types in web3_utils.py, testing.py, messages.py, and message_storage.py - Replaced print() calls with logger in testing.py, agent_discovery.py, compliance_agent.py, coordinator.py, trading_agent.py, keys.py, escrow.py, persistent_spending_tracker.py, sync_cli.py, and client.py - Added logger initialization using get_logger(__name__) in compliance_agent.py, coordinator.py, trading_agent.py, keys.py, escrow.py, persistent_spending_tracker.py, and client.py - Removed hardcoded secret	2026-05-12 17:01:57 +02:00
aitbc	852f2e5a8a	Rename openclaw to hermes across documentation and workflows ... - Update workflow paths from docs/openclaw to docs/hermes - Rename skill prefixes from openclaw-* to hermes-* - Update agent skill references in refactoring and analysis docs - Rename OPENCLAW_AITBC_MASTERY_PLAN.md to reflect hermes branding - Update CLI examples and command references throughout documentation	2026-05-07 11:42:06 +02:00
aitbc	bfcc8e3663	security: update vulnerable dependencies in Python services ... - Update FastAPI to >=0.115.6 across services (fixes starlette vulnerabilities) - Update httpx to >=0.28.1 across services - Update pytest to >=9.0.3 (fixes tmpdir handling vulnerability) - Update pytest-asyncio to >=1.3.0 - Update black to >=26.3.1 (fixes high severity vulnerability) Affected services: - api-gateway - ai-service - monitoring-service - openclaw-service - plugin-service Addresses GitHub dependabot alerts for: - starlette (high/medium severity DoS vulnerabilities) - pytest (medium severity tmpdir handling) - black (high severity vulnerability) Note: contracts uuid vulnerability deferred due to npm dependency conflicts	2026-05-02 16:23:28 +02:00
aitbc	07f988bc1f	fix: address gateway resilience and readiness review items	2026-05-02 16:17:15 +02:00
aitbc	c38aebca4d	Add nosec B104 comments to 0.0.0.0 bindings and fix datetime.UTC references ... - Add nosec B104 comments to 4 uvicorn.run() and 1 api_host binding using 0.0.0.0 (api-gateway, coordinator-api, exchange, wallet) - Replace datetime.UTC with datetime.timezone.utc in 10 locations across agent SDK (agent.py, compute_provider.py, swarm_coordinator.py) - Add Union and Callable to contract_integration.py imports	2026-05-02 14:55:21 +02:00
aitbc	0784080465	fix: address post-push review issues - security, resilience, and code quality ... - Fix hardcoded DATABASE_URL in 4 new microservices (gpu-service, governance-service, trading-service, marketplace-service) - now use os.getenv() with SQLite fallback - Move httpx.AsyncClient to API gateway lifespan for connection pooling - Add 30-second timeout to API gateway proxy calls - Move hardcoded service URLs to environment variables in API gateway (GPU_SERVICE_URL, MARKETPLACE_SERVICE_URL, etc.) - Add cli/build/ and cli/dist/ to .gitignore and remove 42 stale build artifacts from git - Fix version pinning conflicts in 4 new service pyproject.toml files (align with root: fastapi >=0.115.6, sqlmodel >=0.0.38, pytest >=9.0.3) - Fix 18 remaining datetime.utcnow() calls in monitoring-service and ai-service (replace with datetime.now(timezone.utc)) - Add retries (3 attempts), authentication (Bearer token), rate limiting (100/min via slowapi), and circuit breaker to API gateway - Add /ready and /live endpoints to 4 new microservices for production readiness/liveness probes - Audit debug logging - confirmed no sensitive data (passwords, keys, secrets, tokens) is logged; cache keys and masked API keys are safe	2026-05-02 14:51:13 +02:00
aitbc	27993bee72	Update documentation to reflect 12 atomic skills and current service ports	2026-05-02 14:38:19 +02:00
aitbc	8602732d46	Convert API gateway to old Poetry format and add service routing for new microservices ... - Convert api-gateway pyproject.toml to old Poetry format for workspace compatibility - Add routing configuration for AI service (port 8106) - Add routing configuration for Monitoring service (port 8107) - Add routing configuration for OpenClaw service (port 8108) - Add routing configuration for Plugin service (port 8109) - Remove duplicate middleware implementations from coordinator-api (app_logging.py, error	2026-04-30 16:15:05 +02:00
aitbc	11030a3980	Fix API gateway prefix stripping logic for service routing ... - Fixed prefix stripping to correctly remove service prefix from path - Gateway now correctly routes requests to microservices - Tested routing to GPU, Marketplace, and Governance services successfully	2026-04-30 12:32:42 +02:00
aitbc	f6900d6bf6	Add pytest test files for microservices ... - Created test files for GPU service (tests/test_main.py) - Created test files for Marketplace service (tests/test_main.py) - Created test files for Trading service (tests/test_main.py) - Created test files for Governance service (tests/test_main.py) - Created integration tests for API gateway (tests/test_gateway.py) - Added pytest dependencies to all service pyproject.toml files - Created TEST_COVERAGE_REQUIREMENTS.md documenting coverage targets and best practices This completes Phase 8: Create pytest test files for microservices	2026-04-30 11:57:09 +02:00
aitbc	1315884dec	Add comprehensive testing documentation for microservices ... - Created MICROSERVICES_TESTING_GUIDE.md with detailed testing procedures - Updated GPU service README with detailed testing steps and expected responses - Updated Marketplace service README with detailed testing steps and expected responses - Updated Trading service README with detailed testing steps and expected responses - Updated Governance service README with detailed testing steps and expected responses - Updated API gateway README with detailed testing steps and routing tests This completes Phase 7b: Update service READMEs with detailed testing steps	2026-04-30 11:50:20 +02:00
aitbc	bd722892e8	Create FastAPI gateway for routing to microservices ... - Created api-gateway application structure - Added pyproject.toml with FastAPI, httpx, and aitbc-core dependencies - Implemented main.py with routing logic to proxy requests to microservices - Added service registry for GPU, Marketplace, Agent, Trading, Governance, and Coordinator services - Configured middleware (request ID, performance logging, validation, error handling) - Created systemd service file for api-gateway - Added README.md with service registry information This completes Phase 4.2: Create FastAPI gateway for routing	2026-04-30 11:18:03 +02:00