282 Commits

Author	SHA1	Message	Date
aitbc	7139e28b4e	fix: IPFS integration improvements ... - Fix IPFS storage service: handle session=True response format (CID string vs dict) - Fix metadata cache: use in-memory dict instead of no-op pass - Fix IPFS router: use singleton pattern for service instance - Fix IPFS cat: use POST method instead of GET - Add _metadata_cache initialization to IPFSStorageService - Coordinator IPFS upload/retrieve now fully functional with integrity verification	2026-05-14 23:56:14 +02:00
aitbc	4123d9aa43	Start island manager background tasks in blockchain node ... Blockchain Node: - Added asyncio.create_task(island_manager.start()) to start background tasks - Updated log message to indicate manager is started, not just initialized Coordinator API: - Added portfolio_router to main app - Made IPFS initialization more resilient to version incompatibilities - Added session=True to ipfshttpclient.connect() call - Changed IPFS init errors from raise to warnings with graceful degradation - Added None checks	2026-05-14 23:46:36 +02:00
aitbc	026e2ccdcd	Fix chain_id query parameter in cross-chain wallet balance endpoint ... Coordinator API: - Added Query() decorator to chain_id parameter - Fixes validation error: Field required for chain_id - chain_id is a query parameter, not a path parameter	2026-05-14 23:24:40 +02:00
aitbc	c7091fb52e	Fix UTC NameError in exceptions.py ... Coordinator API: - Changed datetime.now(UTC) to datetime.now(timezone.utc) - Fixes NameError: name 'UTC' is not defined - File already imports timezone, just needed to use it correctly	2026-05-14 23:23:37 +02:00
aitbc	b8a395f341	Make IPFS/Web3 dependencies optional in ipfs_storage_service ... Coordinator API: - Changed ipfshttpclient and web3 imports to optional - Service now starts without IPFS/Web3 dependencies - Logs warning instead of raising ImportError - IPFS features disabled when dependencies not available	2026-05-14 23:13:12 +02:00
aitbc	94215d96c0	Fix logging import error in ipfs_storage_service ... Coordinator API: - Changed logging.error to logger.error - File already imports get_logger from aitbc - Fixes NameError: name 'logging' is not defined	2026-05-14 23:11:23 +02:00
aitbc	4ce9d2b8a5	Create missing secure_pickle module for Coordinator API ... Coordinator API: - Created secure_pickle.py module with safe_loads function - Implements safe deserialization with size limits - Added compute_integrity_hash for data verification - Fixes ModuleNotFoundError: No module named 'app.services.secure_pickle' The secure_pickle module was missing but imported by: - ipfs_storage_service.py - translation_cache.py	2026-05-14 23:09:57 +02:00
aitbc	a3cedae262	Fix IPFS router import path error ... Coordinator API: - Fixed import path in ipfs.py from ...services to ....services - File is in contexts/ipfs/routers/, needs 4 dots to reach services/ - Corrected both services and config imports This fixes ModuleNotFoundError: No module named 'app.contexts.services'	2026-05-14 23:03:55 +02:00
aitbc	2ccf80ad5e	Fix Coordinator Concrete ML import error for Python 3.13 ... Coordinator API: - Changed FHEService from module-level instantiation to lazy loading - Added get_fhe_service() function to instantiate on first use - Updated fhe_ml_inference endpoint to use lazy-loaded service - Prevents import-time Concrete ML errors on Python 3.13 Concrete ML requires Python <3.13, but current version is 3.13.5. The FHEService gracefully handles the ImportError, but the module-level instantiation was causing the error during app startup. Lazy loading defers the instantiation until the endpoint is actually called.	2026-05-14 23:03:12 +02:00
aitbc	b4675840cd	Refactor edge database service to use dependency injection and simplify API ... - Replace Query parameters with Pydantic request models (InitDatabaseRequest, SyncDatabaseRequest) - Add get_database_service dependency injection for DatabaseService - Simplify database operations: remove island_id/capacity_gb, use db_name/db_type/config - Change endpoint paths: /init, /{db_id}, /{db_id}/sync with proper REST semantics - Remove list_all_databases method and island-specific database logic - Use scalar_one_or_none() instead of first() for cleaner SQLAlchemy queries - Add IPFS router to	2026-05-14 22:34:07 +02:00
aitbc	ab8c23dba1	Add island management RPC endpoints and enhance governance service ... - Add island management endpoints to blockchain-node RPC router (join, leave, list, get, bridge) - Create request/response models for island operations (JoinIslandRequest, LeaveIslandRequest, BridgeRequestRequest) - Import get_island_manager and integrate with IslandManager for island operations - Fix coordinator-api blockchain router import path (settings from ....config) - Add exception handling to get_validators endpoint - Fix	2026-05-14 22:00:02 +02:00
aitbc	05e2d1ec39	Fix Pydantic V2 and FastAPI deprecation warnings ... - Replace orm_mode with from_attributes in Pydantic Config classes (federated_learning.py, wallet.py, decentralized_memory.py, atomic_swap.py) - Replace regex with pattern in FastAPI Query parameters (staking.py)	2026-05-14 16:37:09 +02:00
aitbc	836921e616	Fix PyCUDA initialization to handle nodes without CUDA-capable devices ... - Catch RuntimeError from cuda.init() when no GPU is available - Allow coordinator-api to start on nodes without GPUs (simulation mode) - gitea-runner node doesn't have GPU, needs simulation mode fallback	2026-05-14 16:33:37 +02:00
aitbc	3a5b80a98f	Refactor AITBCWalletAdapter for cleaner code and add mainnet/testnet subclasses ... - Remove verbose comments and consolidate code formatting throughout AITBCWalletAdapter - Simplify chain ID mapping to inline ternary expression - Condense multi-line dictionaries and function signatures to single lines where appropriate - Remove redundant variable assignments (return directly where possible) - Create AITBCMainnetWalletAdapter and AITBCTestnetWalletAdapter subclasses with fixed chain_id - Update WalletAdapterFactory to use new	2026-05-14 15:26:41 +02:00
aitbc	ffc9e648b5	Fix bridge request creation and clean up debug statements ... - Bridge request creation now works with both 0x and ait1 addresses - ait1 addresses must be at least 39 characters (Bech32 format) - AITBCWalletAdapter correctly selected for chain IDs 1000/1001 - Removed debug print statements from create_bridge_request, validate_address, factory, and bridge initialization - Bridge ID auto-generated by database (no manual assignment)	2026-05-14 13:22:58 +02:00
aitbc	a63a85bc6e	Fix BridgeRequest ID type mismatch and address validation ... - Remove manual id assignment from create_bridge_request (let database auto-generate) - Update bridge request fields to match BridgeRequest model schema - Fix add_allowed_transfer to update class-level whitelist directly - Add debug logging to validate_address and adapter creation - Bridge request creation now succeeds with 0x addresses - ait1 addresses still rejected (adapter selection issue to investigate)	2026-05-14 13:17:51 +02:00
aitbc	dc6a66d477	Implement AITBC wallet adapter using native RPC protocol ... - Create AITBCWalletAdapter class in wallet_adapter_enhanced.py - Add AITBC chain IDs (1000 for mainnet, 1001 for testnet) to WalletAdapterFactory - Update cross-chain integration router to use AITBC chain IDs and RPC URLs - Add AITBC to ChainType enum in agent_identity domain - Fix undefined session reference in MultiChainTransactionManager - Add missing _get_gas_price method to AITBCWalletAdapter (returns 0 for fixed fee system) - Fix bridge statistics to use bridge_fee field instead of non-existent total_fee - Add logger import to cross_chain_integration.py for error logging - Fix health endpoint to use correct key name from transaction statistics - Health endpoint now returns healthy status with 8 supported chains This resolves the cross-chain bridge initialization failure that was blocking Scenario 27.	2026-05-14 12:21:10 +02:00
aitbc	fd7a04cc27	Fix cross-chain bridge web3 import and RPC URL configuration ... - Move web3 import to top of web3_utils.py to resolve import context issue - Add direct Web3Client import to aitbc/__init__.py for early loading - Replace all mock RPC URLs with actual AITBC blockchain RPC endpoint (http://localhost:8006) - Note: Bridge service still has fundamental incompatibility - uses Ethereum web3 but AITBC is not Ethereum-compatible - This blocks Scenario 27 cross-chain trading test until AITBC-specific adapter is implemented	2026-05-14 12:07:11 +02:00
aitbc	58376a3aec	Fix coordinator-api PostgreSQL permissions and deploy to aitbc1 ... - Grant ALL ON SCHEMA public TO aitbc on aitbc_prod database - Grant ALTER DEFAULT PRIVILEGES and CREATE ON DATABASE to aitbc - Create aitbc role on aitbc1 and grant permissions on aitbc_coordinator - Uncomment DATABASE_URL in blockchain.env on aitbc1 - Fund proposer wallet (ait1da1d84c7b8e5456b89672b6ca810bef3) with 997000 on mainnet - Verify testnet proposer wallet (ait18338cd342f83d9bde2f96eec81e2727be6b1596f) exists with 1000000000 balance - Both coordinator-apis now running successfully on port 8011	2026-05-14 11:53:05 +02:00
aitbc	bb41572956	Activate cross-chain bridge service in coordinator API ... - Fix import paths in cross_chain_integration.py (relative to absolute imports) - Add cross-chain router to coordinator API main.py - Fix storage.db import path to use app.storage.db - Restart coordinator-api service on aitbc - Deploy changes to aitbc1 and restart coordinator-api - Verify chain isolation is maintained with bridge active - Bridge whitelist remains empty (default) - no unauthorized transfers allowed	2026-05-14 10:20:49 +02:00
aitbc	4955e64ec9	Fix chain isolation violations and add monitoring ... - Fix supported_chains configuration: aitbc now only supports ait-mainnet, aitbc1 only supports ait-testnet - Clean up contaminated databases: removed cross-chain blocks and accounts - Add transaction chain_id validation with audit logging in state_transition.py - Fix cross-chain bridge import errors in cross_chain_integration.py - Add bridge request validation whitelist to prevent unauthorized cross-chain transfers - Create chain isolation verification script for ongoing monitoring - Add Prometheus metrics for chain isolation violations - Create alert rules for chain isolation violations - Create systemd service and timer for ongoing monitoring - Deploy fixes to aitbc1 node	2026-05-14 10:10:04 +02:00
aitbc	83b661c4b4	refactor: update PYTHONPATH in systemd services and fix import paths ... - Added configure_logging to __all__ exports in aitbc/__init__.py - Updated adaptive_learning_app.py import to use contexts.ai_analytics.services path - Fixed aitbc-hermes-wrapper.py PYTHONPATH to use examples/stubs/hermes-service - Added /opt/aitbc to PYTHONPATH in systemd service files (api-gateway, governance, gpu, trading)	2026-05-14 08:53:02 +02:00
aitbc	c83f51e0b9	refactor: reorganize imports to use bounded context structure ... - Updated import paths across agent_identity modules to use contexts.agent_identity.domain - Updated import paths in routers to use context-based service locations - Fixed database configuration fields in config.py (db_echo, db_pool_size, db_max_overflow, db_pool_recycle, db_pool_pre_ping) - Changed IdentityVerification table name from IDENTITY_VERIFICATION_TABLE constant to hardcoded "identity_verifications" - Added BlockchainService	2026-05-13 11:06:32 +02:00
aitbc	2b6f4c2826	refactor: add rate limiting to agent coordinator routers ... - Added Request parameter to all endpoint functions in agents.py, ai.py, alerts.py, auth.py, and consensus.py - Added @rate_limit decorator to all endpoints with appropriate limits: - Write operations (POST/PUT/DELETE): 50 requests per 60 seconds - Read operations (GET): 200 requests per 60 seconds - High-frequency operations (heartbeat, token refresh): 100 requests per 60 seconds - Renamed conflicting request parameters (request -> request_http, request_status)	2026-05-13 09:32:53 +02:00
aitbc	6025df7013	refactor: add rate limiting to agent performance, cache management, confidential, dynamic pricing, and edge GPU routers ... - Added Request parameter to all endpoint functions in agent_performance.py, cache_management.py, confidential.py, dynamic_pricing.py, and edge_gpu.py - Added @rate_limit decorator to all endpoints with appropriate limits: - Write operations (POST): 20 requests per 60 seconds - Read operations (GET): 200 requests per 60 seconds - High-frequency reads (health checks, available strategies): 500-1000 requests per 60	2026-05-12 21:59:39 +02:00
aitbc	86137daf5f	refactor: add rate limiting to all API endpoints across routers ... - Added Request parameter to all endpoint functions in agent_security_router.py, analytics.py, bounty.py, and certification.py - Added @rate_limit decorator to all endpoints with appropriate limits: - Write operations (POST/PUT/DELETE): 20 requests per 60 seconds - Read operations (GET): 200 requests per 60 seconds - High-frequency reads (categories/tags): 500 requests per 60 seconds - Validation/monitoring operations: 50 requests per 60 seconds	2026-05-12 21:52:10 +02:00
aitbc	a266b3b70e	ci: replace artifact upload with Gitea release API and add structured logging with rate limiting ... - Replaced actions/upload-artifact with Gitea API release creation in build-miner-binary.yml - Added separate steps for uploading binary, package, and checksums to Gitea release - Added StructuredFormatter class for JSON log output in aitbc_logging.py - Added structured logging support with log_context() context manager and LogContext class - Added structured parameter to setup_logger() and configure_logging()	2026-05-12 21:33:20 +02:00
aitbc	40cee6d791	refactor: enhance configuration with security validation, database pooling, and rate limiting ... - Added List import and field_validator to config.py - Added database connection pooling settings (max_overflow, pool_recycle, pool_pre_ping, echo) - Added rate limiting settings (rate_limit_requests, rate_limit_window_seconds) - Added CORS allow_origins field with default empty list - Added validate_secrets() method to check required secrets in production - Added validate_secret_length() validator for secret_key and jwt_secret (minimum	2026-05-12 21:17:54 +02:00
aitbc	f4688aefbd	refactor: improve imports, fix datetime usage, and reorganize cross-chain services ... - Added logger initialization to EventRouter in events.py - Fixed datetime.timedelta references to use timedelta directly in security_hardening.py - Fixed StateTransition timestamp default_factory to use lambda in state.py - Fixed StateValidator.validate_transitions to only check source states exist - Moved cross_chain_bridge_enhanced.py to cross_chain/bridge_enhanced.py - Updated import paths in global_marketplace	2026-05-12 20:49:01 +02:00
aitbc	c87806b68b	refactor: reorganize services into bounded contexts and implement async database support ... - Moved services to bounded context packages: - adaptive_learning.py → ai_analytics/adaptive_learning.py - analytics_service.py → ai_analytics/analytics.py - dynamic_pricing_engine.py → trading_marketplace/dynamic_pricing.py - trading_service.py → trading_marketplace/trading.py - Implemented async database module (database_async.py): - Added async SQLAlchemy engine with connection pooling - Added	2026-05-12 18:10:58 +02:00
aitbc	6895770510	refactor: reorganize agent services into agent_coordination package and improve error handling ... - Moved agent services to agent_coordination bounded context package: - agent_integration.py → agent_coordination/integration.py - agent_performance_service.py → agent_coordination/performance.py - agent_service.py → agent_coordination/agent_service.py - agent_security.py → agent_coordination/security.py - Deleted agent_communication.py (988 lines removed) - Updated import paths across routers to use new agent	2026-05-12 17:24:15 +02:00
aitbc	745f791eda	refactor: improve error handling and remove hardcoded credentials ... - Changed bare except clauses to specific exception types in web3_utils.py, testing.py, messages.py, and message_storage.py - Replaced print() calls with logger in testing.py, agent_discovery.py, compliance_agent.py, coordinator.py, trading_agent.py, keys.py, escrow.py, persistent_spending_tracker.py, sync_cli.py, and client.py - Added logger initialization using get_logger(__name__) in compliance_agent.py, coordinator.py, trading_agent.py, keys.py, escrow.py, persistent_spending_tracker.py, and client.py - Removed hardcoded secret	2026-05-12 17:01:57 +02:00
aitbc	9133609603	refactor: improve security, error handling, and service configuration ... - Added PACKAGE_VERSION to aitbc/__init__.py exports - Added block height validation and duplicate block handling in blockchain-node RPC router - Added HTTP 409 conflict response for duplicate block heights with different hashes - Changed certification router to use PartnershipProgramRequest model instead of individual parameters - Fixed import paths: certification_service -> certification, advanced_reinforcement_learning -> advanced_rl - Added MarketplaceStrategyOptimizer to advanced_rl module exports	2026-05-12 10:42:48 +02:00
aitbc	3897bcbf24	refactor: move version to separate module and improve logging ... - Created aitbc/_version.py with centralized version definition - Updated aitbc/__init__.py to import __version__ from _version module - Updated constants.py to use __version__ for PACKAGE_VERSION - Replaced print() calls with logger in decorators.py, events.py, queue_manager.py, and state.py - Added logger initialization using get_logger(__name__) in config.py, decorators.py, events.py, queue_manager.py, and state.py - Added cli/commands	2026-05-11 20:12:01 +02:00
aitbc	e4f1a96172	ci: standardize pytest invocation and add security scanning ... - Changed pytest calls to use `venv/bin/python -m pytest` with explicit config - Added `--rootdir "$PWD"` and `--import-mode=importlib` for consistent imports - Fixed PYTHONPATH to use absolute paths with $PWD prefix - Added smart contract security scanning for Solidity files - Added Circom circuit security checks for ZK proof circuits - Added ZK proof implementation security validation - Added contracts/** to security scanning workflow	2026-05-11 13:46:42 +02:00
aitbc	d26d937fb1	security: update python-multipart and starlette to fix high-severity vulnerabilities ... - Updated python-multipart from >=0.0.24 to >=0.0.27 (fixes 3 DoS alerts) - Updated starlette from >=0.27.0 to >=0.49.1 (fixes 1 O(n^2) DoS alert) - Updated in requirements.txt, pyproject.toml, coordinator-api requirements, aitbc-core This addresses 4 of the 11 high-severity security vulnerabilities reported by GitHub Dependabot.	2026-05-09 20:55:36 +02:00
aitbc	d26e6d3772	fix: replace datetime.UTC with timezone.utc for Python 3.12+ compatibility	2026-05-09 12:03:26 +02:00
aitbc	5502d2533a	Add /jobs endpoint to monitor routers and improve service status handling in dashboard ... - Add /jobs endpoint to both agent-coordinator and coordinator-api monitor routers - Add get_jobs function returning empty list for history and metrics commands - Update dashboard command to handle both string and dict formats for service status - Initialize campaigns file when empty in addition to when missing	2026-05-08 13:06:19 +02:00
aitbc	d13b27479e	Add monitor router to both coordinator APIs and improve campaign file error handling ... - Import monitor module in agent-coordinator routers __init__.py - Add monitor.router to ROUTERS list in agent-coordinator - Add monitor.router to coordinator-api main.py for CLI compatibility - Add monitoring endpoints to swarm router in both APIs: /api/v1/dashboard, /status, /miners, /dashboard - Add error handling for JSON decode and IO errors in campaigns and campaign_stats commands - Recreate campaigns file when corrupted or empty	2026-05-08 12:52:53 +02:00
aitbc	f8d8d41807	Add HTTP status codes to swarm join and coordinate endpoints ... - Add status_code=201 to /join endpoint in both coordinator APIs - Add status_code=202 to /coordinate endpoint in both coordinator APIs	2026-05-08 12:39:45 +02:00
aitbc	094fa268fc	Add swarm coordination endpoints and request models to both coordinator APIs ... - Add JoinRequest, CoordinateRequest, TaskStatus, and ConsensusRequest models - Add /join endpoint for joining agent swarms with role, capability, and priority - Add /coordinate endpoint for coordinating swarm task execution - Add /tasks/{task_id}/status endpoint for getting task status - Add /{swarm_id}/leave endpoint for leaving swarms - Add /tasks/{task_id}/consensus endpoint for achieving consensus on task results - Return	2026-05-08 12:36:56 +02:00
aitbc	3e238eb16f	Remove /agents prefix from agent router ... - Remove prefix="/agents" from APIRouter initialization - Keep tags=["AI Agents"] for API documentation	2026-05-08 11:49:17 +02:00
aitbc	0333da0f77	Add swarm router and update arbitrage command parameters ... - Import swarm router in main.py - Add swarm router with /v1 prefix and root prefix for CLI compatibility - Add duplicate agent router at /api/v1/agents for CLI compatibility - Update scenario 25 arbitrage analyze command parameters from wallet/resource-type/timeframe to market-a/market-b/token	2026-05-08 11:47:14 +02:00
aitbc	68b08192f7	Rename OpenClaw router files to Hermes in coordinator-api	2026-05-07 17:16:29 +02:00
aitbc	852f2e5a8a	Rename openclaw to hermes across documentation and workflows ... - Update workflow paths from docs/openclaw to docs/hermes - Rename skill prefixes from openclaw-* to hermes-* - Update agent skill references in refactoring and analysis docs - Rename OPENCLAW_AITBC_MASTERY_PLAN.md to reflect hermes branding - Update CLI examples and command references throughout documentation	2026-05-07 11:42:06 +02:00
aitbc	385ff0878c	fix: add APIKeyValidator class back to deps.py for backward compatibility with integration tests	2026-05-06 07:59:33 +02:00
aitbc	43c1919318	fix: remove stack-trace exposure in exception handlers ... - Add logging to multi_modal_rl.py and log errors instead of exposing exception details - Log NetworkError exceptions in blockchain.py instead of exposing exception details - Replace str(e) with generic error messages in consensus.py exception handlers - Replace str(e) with generic error messages in users.py exception handlers - Fixes py/stack-trace-exposure security alerts	2026-05-05 17:23:32 +02:00
aitbc	ce750b46ca	fix: add argument validation to prevent command-line injection in edge_gpu.py ... - Validate nvidia-smi arguments to only allow safe prefixes - Prevents py/command-line-injection vulnerability - Addresses critical security alert #2956	2026-05-05 17:21:56 +02:00
aitbc	7d14970392	feat: implement all placeholder implementations from codemap ... Security-critical implementations: - Implement HMAC-SHA256 MAC computation in setup_production.py (3b) - Implement HMAC-SHA256 MAC computation in keystore.py (3c) - Implement agent SDK signature verification using coordinator API (2a) Database cleanup: - Remove backward compatibility engine from database.py (3a) - Update fix_db.py to use get_engine() instead of direct engine import Agent integration service deployment: - Implement systemd-based agent instance deployment (1a) - Implement HTTP health check for agent instances (1b) - Implement systemd service removal for agent instances (1c) - Implement deployment rollback with previous version redeployment (1d) - Implement metrics collection from agent endpoints with fallback (agent_integration.py:828) - Implement alerting rules with configurable thresholds (agent_integration.py:856) All implementations follow the plan priorities: - Security-critical items first (MAC computation, signature verification) - Database cleanup second (backward compatibility removal) - Agent integration service deployment third (systemd deployment, health checks, removal, rollback, metrics, alerting)	2026-05-03 23:30:57 +02:00
aitbc	70b1a9a83f	fix: improve error handling in multi-modal RL health endpoint ... Added better error handling for AI service unavailability. Returns degraded status with informative note when AI service is not running on the node.	2026-05-03 23:11:21 +02:00