308 Commits

Author	SHA1	Message	Date
aitbc	dcaa9cbf3c	security: mask sensitive data in logging output to fix CodeQL alerts ... - scripts/utils/generate-api-keys.py: mask API keys in output - apps/coordinator-api/src/app/deps.py: mask API keys in debug logging - dev/scripts/generate_production_keys.py: mask sensitive secrets in output - scripts/security/security_audit.py: add sensitive data masking for issues/recommendations Fixes 7/25 CodeQL alerts related to clear-text logging of sensitive information.	2026-04-23 17:24:56 +02:00
aitbc	91bba69653	security: update poetry.lock files for blockchain-node and wallet ... Ran poetry lock to update lock files with new dependency versions: - pytest: 8.2.0 → 8.3.0 (fixes tmpdir handling vulnerability) - python-multipart: updated to latest version (fixes DoS vulnerability) This resolves the final 2 moderate vulnerabilities in poetry.lock files.	2026-04-23 17:12:51 +02:00
aitbc	3c2cfcb67a	fix: revert cryptography version from 47.0.0 to 46.0.0 in pyproject.toml files ... Version 47.0.0 does not exist in PyPI. Reverted to 46.0.0 which is the latest available version and still provides security fixes for the reported vulnerabilities.	2026-04-23 17:12:09 +02:00
aitbc	213c288cac	security: update pyproject.toml files for Phase 2 vulnerability fixes ... - cryptography: 41.0.0 → 47.0.0 in aitbc-sdk, aitbc-crypto, aitbc-core - cryptography: added >=47.0.0 to blockchain-node dependencies - pytest: 8.2.0 → 8.3.0 in blockchain-node, coordinator-api, wallet, pool-hub - pytest: ^8.3.0 → >=8.3.0 in blockchain-event-bridge This addresses remaining cryptography buffer overflow and pytest tmpdir vulnerabilities in poetry.lock files. Lock files will be regenerated with poetry lock.	2026-04-23 17:10:54 +02:00
aitbc	fa78825433	security: update dependencies to fix dependabot vulnerabilities (Phase 1) ... - cryptography: 46.0.7 → 47.0.0 (fixes 4 high-severity vulnerabilities) - ecdsa: 0.19.2 → 0.19.3 (fixes timing attack vulnerability) - black: 26.3.1 → 26.4.0 (fixes arbitrary file writes) - orjson: 3.11.8 → 3.11.9 (fixes recursion limit issue) - python-multipart: 0.0.6 → 0.0.25 (fixes 3 high-severity vulnerabilities) Updated in: - requirements.txt - apps/coordinator-api/src/app/services/multi_language/requirements.txt This resolves ~20/72 dependabot alerts with low-risk minor version updates.	2026-04-23 17:08:30 +02:00
aitbc	e60cc3226c	Add sys import to test files and remove obsolete integration tests ... - Add sys import to 29 test files across agent-coordinator, blockchain-event-bridge, blockchain-node, and coordinator-api - Remove apps/blockchain-event-bridge/tests/test_integration.py (obsolete bridge integration tests) - Remove apps/coordinator-api/tests/test_integration.py (obsolete API integration tests) - Implement GPU registration in marketplace_gpu.py with GPURegistry model persistence	2026-04-23 16:43:17 +02:00
aitbc	522655ef92	Move blockchain app READMEs to centralized documentation ... - Relocate blockchain-event-bridge README content to docs/apps/blockchain/blockchain-event-bridge.md - Relocate blockchain-explorer README content to docs/apps/blockchain/blockchain-explorer.md - Replace app READMEs with redirect notices pointing to new documentation location - Consolidate documentation in central docs/ directory for better organization	2026-04-23 12:24:48 +02:00
aitbc	cd240485c6	Fix RPC server startup in blockchain node service ... - Modify combined_main.py to start HTTP RPC server alongside blockchain node - Use uvicorn.Server with asyncio to run both services concurrently - Fix shutdown code to properly stop HTTP server - eth_getLogs endpoint now accessible at http://localhost:8006/rpc/eth_getLogs	2026-04-23 11:17:14 +02:00
aitbc	6a7258941a	Fix: Initialize _last_block_timestamp from head block on startup ... This fixes the hybrid mode heartbeat logic which was unable to calculate time since last block after service restart because _last_block_timestamp was None.	2026-04-23 11:02:03 +02:00
aitbc	4b001a95d2	Implement adaptive sync and hybrid block generation ... - Add adaptive sync with tiered batch sizing for initial sync - Initial sync (>10K blocks): 500-1000 batch size, 2s poll, 10s bulk interval - Large gap (1K-10K blocks): 200-500 batch size, 3s poll, 30s bulk interval - Medium gap (500-1K blocks): 100-200 batch size, 5s poll, 60s bulk interval - Reduces 2.9M block sync from 10 days to ~8 hours - Add hybrid block generation with heartbeat - Modes: always, mempool-only, hybrid (default) - Skip empty blocks in hybrid/mempool-only modes - Force heartbeat block after 60s idle for consensus safety - Adaptive loop timing: hybrid checks every 2.5s for heartbeat detection - Add metrics for sync and block generation behavior - sync_empty_blocks_skipped_total - sync_heartbeat_blocks_forced_total - sync_time_since_last_block_seconds - sync_mode, sync_gap_size, sync_batch_size - sync_bulk_duration_seconds, sync_blocks_per_second	2026-04-23 10:59:24 +02:00
aitbc	90edea2da2	Add blockchain event bridge service with smart contract event integration ... - Phase 1: Core bridge service with gossip broker subscription - Phase 2: Smart contract event integration via eth_getLogs RPC endpoint - Add contract event subscriber for AgentStaking, PerformanceVerifier, Marketplace, Bounty, CrossChainBridge - Add contract event handlers in agent_daemon.py and marketplace.py - Add systemd service file for blockchain-event-bridge - Update blockchain node router.py with eth_getLogs endpoint - Add configuration for contract addresses - Add tests for contract subscriber and handlers (27 tests passing)	2026-04-23 10:58:00 +02:00
aitbc	e22d864944	feat: implement CLI blockchain features and pool hub enhancements ... CLI Blockchain Features: - Added block operations: import, export, import-chain, blocks-range - Added messaging system commands (deploy, state, topics, create-topic, messages, post, vote, search, reputation, moderate) - Added network force-sync operation - Replaced marketplace handlers with actual RPC calls - Replaced AI handlers with actual RPC calls - Added account operations (account get) - Added transaction query operations - Added mempool query operations - Created keystore_auth.py for authentication - Removed extended features interception - All handlers use keystore credentials for authenticated endpoints Pool Hub Enhancements: - Added SLA monitoring and capacity tables - Added billing integration service - Added SLA collector service - Added SLA router endpoints - Updated pool hub models and settings - Added integration tests for billing and SLA - Updated documentation with SLA monitoring guide	2026-04-22 15:59:00 +02:00
aitbc	e611530bd0	Disable SQLite WAL mode due to disk I/O errors ... - Comment out PRAGMA journal_mode=WAL in database.py - Keep other SQLite optimizations (synchronous=NORMAL, cache_size, temp_store) - CoW already disabled on data directory via chattr +C	2026-04-22 14:39:32 +02:00
aitbc	fb15b5c1cb	Re-enable state root computation in blockchain node ... - Fix chain_id mismatch (ait-devnet -> ait-mainnet) - Add logger definition to poa.py for state root computation - Recompute state_root after genesis account initialization - Create genesis.json with account allocations for ait-mainnet - Update config.py supported_chains to ait-mainnet	2026-04-22 14:32:30 +02:00
aitbc	607ad2d434	Remove debug logging and update default chain to ait-mainnet	2026-04-22 14:20:49 +02:00
aitbc	670fff409f	Remove debug logging from router	2026-04-22 13:49:21 +02:00
aitbc	b064f922bd	Add normalization to gossip transaction processing to preserve type field	2026-04-22 13:48:20 +02:00
aitbc	4158508f4d	Fix sync to preserve transaction type field when creating ChainTransaction	2026-04-22 13:44:32 +02:00
aitbc	d5a03acabb	Remove debug logging from router.py and poa.py	2026-04-22 13:42:08 +02:00
aitbc	941fff1b9d	Fix sync error: use block_data['height'] instead of undefined height variable	2026-04-22 13:41:06 +02:00
aitbc	f36fd45d28	Implement RECEIPT_CLAIM transaction type ... - Add status fields to Receipt model (status, claimed_at, claimed_by) - Add RECEIPT_CLAIM handling to state_transition.py with validation and reward minting - Add type field to Transaction model for reliable transaction type storage - Update router to use TransactionRequest model to preserve type field - Update poa.py to extract type from mempool transaction content and store only original payload - Add RECEIPT_CLAIM to GasType enum with gas schedule	2026-04-22 13:35:31 +02:00
aitbc	a6a840a930	feat: implement MESSAGE transaction type and re-enable state root computation ... - Add MESSAGE transaction type to router.py valid_types - Add MESSAGE handling to state_transition.py (value=0, fee-only) - Add GasType.MESSAGE to gas schedules - Re-enable state root computation in poa.py - Change SQLite journal_mode to WAL for corruption prevention - Add chattr +C to setup.sh for Btrfs CoW prevention	2026-04-22 13:06:01 +02:00
aitbc	054adaf7be	feat: switch SQLite to WAL mode and disable Btrfs CoW for data directory ... - Change SQLite journal mode from DELETE to WAL for better concurrency - Add chattr +C to /var/lib/aitbc in setup.sh to disable Btrfs Copy-on-Write - Add fallback logging when chattr is unavailable or fails - Prevent SQLite corruption on Btrfs filesystems by ensuring overwrite-in-place behavior	2026-04-21 22:00:47 +02:00
aitbc	cdba253fb2	fix: add default_peer_rpc_url for bulk sync fallback ... - Add default_peer_rpc_url configuration parameter - Update bulk sync fallback to use default_peer_rpc_url instead of gossip_broadcast_url - Fixes 'unsupported protocol redis://' error in bulk sync - gossip_broadcast_url is for Redis backend, not HTTP RPC calls	2026-04-20 22:05:05 +02:00
aitbc	ca4e3d9c46	feat: implement dynamic batch size for bulk sync ... - Add _calculate_dynamic_batch_size method to sync.py - Scale batch size based on gap size: - Small gaps (< 100): 20-50 blocks for precision - Medium gaps (100-500): 50-100 blocks - Large gaps (> 500): 100-200 blocks for speed - Add min_bulk_sync_batch_size and max_bulk_sync_batch_size config params - Update bulk_import_from to use dynamic batch size - Replaces fixed 50-block batch size with adaptive sizing	2026-04-20 22:00:31 +02:00
aitbc	404cec1098	config: change block generation time from 2s to 10s ... - Increase block_time_seconds from 2 to 10 seconds - Reduces block generation frequency - Helps with sync gap recovery by giving more time between blocks	2026-04-20 21:49:39 +02:00
aitbc	8ad3af7131	fix: handle closing parenthesis in gap size parsing ... - Add .replace(")", "") to received_height parsing - Fixes ValueError when parsing '9007)' as integer - Auto sync was failing due to parsing bug in main.py - Reason format: 'Gap detected (our height: 8175, received: 9007)'	2026-04-20 21:43:01 +02:00
aitbc	391ba4ca2e	fix: add nosec comments for B104 in config.py ... - Add nosec B104 comments for rpc_bind_host and p2p_bind_host - These are intentional defaults for distributed blockchain - P2P nodes need to accept connections from peers - RPC needs to be accessible from other machines in cluster - Suppresses Bandit security scan warnings	2026-04-20 21:23:10 +02:00
aitbc	4f157e21ee	feat: implement automatic bulk sync for blockchain nodes ... - Add auto_sync_enabled, auto_sync_threshold, auto_sync_max_retries config - Add min_bulk_sync_interval for rate limiting - Implement gap detection in process_blocks() with automatic bulk sync trigger - Add rate limiting to ChainSync.bulk_import_from() to prevent sync loops - Automatic bulk sync triggers when gap > threshold (default 10 blocks) - Retries block import after bulk sync completes - Logs sync events for monitoring and debugging	2026-04-20 21:11:01 +02:00
aitbc	e3804f84e4	feat: add app/data directory with consumer_gpu_profiles	2026-04-20 13:06:49 +02:00
aitbc	482e0be438	refactor: implement lazy loading for coordinator-api service imports ... Replaced eager imports with lazy loading using __getattr__ to defer service module imports until first access. Added module mapping dictionary and dynamic import logic to reduce initial import overhead while maintaining the same public API.	2026-04-20 11:11:12 +02:00
aitbc	625c1b7812	ci: clean up CI workflows and fix package dependencies ... - Simplified npm install commands in CI workflows by removing fallback logic - Added aitbc-crypto local dependency installation for aitbc-sdk in package-tests.yml - Removed aitbc-token specific Hardhat dependency workarounds from package-tests.yml - Fixed bare except clause in agent_daemon.py to catch specific json.JSONDecodeError - Moved aitbc-crypto from poetry.dependencies to standard dependencies in aitbc-sdk - Fixed MyPy type errors in receip	2026-04-19 19:24:09 +02:00
aitbc	b4c88e7110	fix: remove unused tx_hash variable and replace bare except in agent_daemon.py ... - Removed unused tx_hash variable on line 104 (F841) - Replaced bare except with specific json.JSONDecodeError on line 191 (E722)	2026-04-19 18:02:28 +02:00
aitbc	bb1120b60f	ci: replace hardcoded /opt/aitbc paths with relative paths ... - Update integration-tests workflow to use ./scripts/utils/link-systemd.sh instead of /opt/aitbc/scripts/utils/link-systemd.sh - Change aitbc-cli symlink from /opt/aitbc/cli/aitbc_cli.py to cli/aitbc_cli.py - Fix duplicate [tool.mypy] section in agent-coordinator pyproject.toml by merging plugins config - Update aitbc-core package include path from aitbc_core to aitbc - Fix aitbc-crypto imports to use absolute package paths instead of relative imports - Add pynacl>=1.5.0 dependency	2026-04-18 20:56:12 +02:00
aitbc	23348892b9	ci: enforce strict exit codes in workflow tests ... - Remove `|| echo "⚠️ ..."` fallbacks that masked failures - Add explicit `exit 1` on port readiness failures and missing test directories - Track port_ready flag in health check loops to fail if services don't start - Replace warning emoji (⚠️) with error emoji (❌) for actual failures - Fix docs-validation to use curated Markdown target list excluding high-noise directories - Update rust-zk-tests paths from gpu_acceleration/research to dev	2026-04-18 11:57:35 +02:00
aitbc	40698f91fd	fix: resolve syntax errors in scan-skipped files ... - Fix malformed f-strings in agent communication SDK - Repair pricing strategy delimiters and optimizer blocks - Normalize FastAPI session dependency signatures in routers - Fix incomplete constructor, indentation, and empty exception blocks - Restore syntax validity for files previously skipped by Bandit	2026-04-18 10:55:25 +02:00
aitbc	d28222819c	security: fix medium-severity security issues ... - Replace hardcoded /tmp directories with tempfile.gettempdir() (2 instances) - Add 30-second timeouts to all HTTP requests in miner_management.py (4 instances) - Skip agent_security.py temp directory fixes (configuration values, not insecure usage)	2026-04-18 10:44:08 +02:00
aitbc	8424902bee	security: fix high-severity security issues ... - Remove hardcoded passwords in wallet commands (2 instances) - Fix SQL injection vectors with parameterized queries (3 instances) - Replace MD5 hashes with SHA-256 in 14 locations - Add table name validation in migration scripts	2026-04-18 10:42:40 +02:00
aitbc	a8db89f8ef	Move marketplace GPU optimizer to coordinator-api services ... - Move marketplace_gpu_optimizer.py, distributed_framework.py, marketplace_cache_optimizer.py, marketplace_monitor.py, and marketplace_scaler.py to coordinator-api services - Rewire imports in marketplace_performance.py to use coordinator-api services directory - Remove empty parallel_processing directory from dev/gpu_acceleration - Move active marketplace GPU optimization code from dev to production services	2026-04-16 22:59:21 +02:00
aitbc	ca2a9573f7	Remove legacy folder and rewire imports ... - Move marketplace_gpu_optimizer.py from legacy to parallel_processing - Update coordinator-api imports to use new dev/gpu_acceleration location - Remove legacy folder as code has been refactored - Fix marketplace_performance.py imports for gpu_acceleration	2026-04-16 22:54:41 +02:00
aitbc	056b55e5d6	Fix explorer transaction field mapping to match blockchain RPC response ... - Update transaction field mapping: tx.hash -> tx.tx_hash, tx.type -> tx.payload?.type - Update sender/recipient fields: tx.from -> tx.sender, tx.to -> tx.recipient - Update amount/fee fields to use tx.payload?.amount/fee with fallbacks - This fixes the transaction detail rendering in the explorer modal	2026-04-16 22:39:36 +02:00
aitbc	40490f2344	Fix explorer UI to use tx_count and broaden pytest discovery ... - Use tx_count instead of block.transactions.length in latest blocks table - Fix block modal to show tx_count only and remove misleading transaction list rendering - Add root-level pytest.ini with broader test paths including apps/*/tests and tests/ - This fixes the block-detail/rendering mismatch where UI expected transactions array but RPC returns tx_count	2026-04-16 22:09:57 +02:00
aitbc	ca34b6fee3	Consolidate service scripts into apps directories ... - Move blockchain scripts to apps/blockchain-node/scripts/ - Move marketplace scripts to apps/marketplace/scripts/ - Move agent daemon to apps/agent-coordinator/scripts/ - Move monitor to apps/monitor/ - Update systemd service files to point to new locations - Update internal path references in moved scripts - Remove empty /opt/aitbc/services directory	2026-04-15 11:56:03 +02:00
aitbc	13080c76b4	Add JSON parser for API key lists in coordinator config	2026-04-15 11:36:33 +02:00
aitbc	20b96881c4	Fix RPC block production override and restore coordinator env vars after consolidation	2026-04-15 11:32:50 +02:00
aitbc	cd6dc870d1	Change database file permissions from restrictive owner-only to permissive read/write for all users and update agent daemon database path ... - Change chmod permissions from 0600 (owner-only) to 0666 (read/write for all) for database file and WAL files in blockchain node database initialization - Update comment to reflect permissive permissions for handling filesystem restrictions - Update agent daemon service database path from /var/lib/aitbc/data/ait-mainnet/chain.db to /var/lib/aitbc/data/chain.db	2026-04-15 09:12:57 +02:00
aitbc	657c320ab4	Change SQLite journal mode from WAL to DELETE in blockchain node database configuration ... - Update PRAGMA journal_mode from WAL to DELETE in set_sqlite_pragma - Addresses filesystem permission issues with WAL mode in containerized environments	2026-04-15 08:58:56 +02:00
aitbc	9bb4791a97	Add error handling for chmod operations in database initialization and remove restrictive systemd security settings ... - Add try-except blocks around os.chmod calls in init_db to ignore OSError exceptions - Add comments noting permission errors are ignored for read-only filesystems in containers - Wrap chmod for database file, WAL-shm, and WAL-wal files with error handling - Remove StartLimitBurst and StartLimitIntervalSec from agent-coordinator systemd service - Remove ProtectSystem, ProtectHome, and ReadWritePaths security	2026-04-15 08:29:03 +02:00
aitbc	d3415413b3	Add hash conflict detection and cleanup across chains in import operations and improve database initialization ... - Add hash conflict detection in import_block to delete existing blocks with same hash - Add hash conflict cleanup in import_chain before importing blocks - Add logging for hash conflict deletions showing affected chains - Add WAL file permission setting in init_db for .db-shm and .db-wal files - Add test_import_chain_clears_hash_conflicts_across_chains to verify cross-chain hash cleanup	2026-04-15 08:17:35 +02:00
aitbc	ffd05769df	Add p2p_node_id configuration setting and make node-id argument optional with fallback chain ... - Add p2p_node_id field to ChainSettings with empty string default - Add p2p_node_id to .env.example configuration file - Change --node-id argument from required to optional with default empty string - Add node_id resolution with fallback chain: args.node_id -> settings.p2p_node_id -> settings.proposer_id - Add validation to raise ValueError if no node_id can be resolved - Update systemd service to use ${	2026-04-14 13:12:00 +02:00