81 Commits

Author	SHA1	Message	Date
aitbc	56938fb2c4	security: update vulnerable dependencies in subdirectory pyproject.toml files ... - Root pyproject.toml: urllib3 >=2.6.3 -> >=2.7.0 - packages/py/aitbc-sdk: requests >=2.31.0 -> >=2.32.4, httpx >=0.25.0 -> >=0.28.1 - packages/py/aitbc-agent-sdk: requests >=2.31.0 -> >=2.32.4, pydantic >=2.5.0 -> >=2.11.0 - apps/aitbc-edge-api: updated all dependencies to match secure versions - apps/api-gateway: uvicorn ^0.24.0 -> >=0.34.0 - examples/stubs/aitbc-ai-service: updated uvicorn, sqlmodel, sqlalchemy, pydantic, pydantic-settings	2026-05-20 08:23:30 +02:00
aitbc	40cee6d791	refactor: enhance configuration with security validation, database pooling, and rate limiting ... - Added List import and field_validator to config.py - Added database connection pooling settings (max_overflow, pool_recycle, pool_pre_ping, echo) - Added rate limiting settings (rate_limit_requests, rate_limit_window_seconds) - Added CORS allow_origins field with default empty list - Added validate_secrets() method to check required secrets in production - Added validate_secret_length() validator for secret_key and jwt_secret (minimum	2026-05-12 21:17:54 +02:00
aitbc	6895770510	refactor: reorganize agent services into agent_coordination package and improve error handling ... - Moved agent services to agent_coordination bounded context package: - agent_integration.py → agent_coordination/integration.py - agent_performance_service.py → agent_coordination/performance.py - agent_service.py → agent_coordination/agent_service.py - agent_security.py → agent_coordination/security.py - Deleted agent_communication.py (988 lines removed) - Updated import paths across routers to use new agent	2026-05-12 17:24:15 +02:00
aitbc	745f791eda	refactor: improve error handling and remove hardcoded credentials ... - Changed bare except clauses to specific exception types in web3_utils.py, testing.py, messages.py, and message_storage.py - Replaced print() calls with logger in testing.py, agent_discovery.py, compliance_agent.py, coordinator.py, trading_agent.py, keys.py, escrow.py, persistent_spending_tracker.py, sync_cli.py, and client.py - Added logger initialization using get_logger(__name__) in compliance_agent.py, coordinator.py, trading_agent.py, keys.py, escrow.py, persistent_spending_tracker.py, and client.py - Removed hardcoded secret	2026-05-12 17:01:57 +02:00
aitbc	3897bcbf24	refactor: move version to separate module and improve logging ... - Created aitbc/_version.py with centralized version definition - Updated aitbc/__init__.py to import __version__ from _version module - Updated constants.py to use __version__ for PACKAGE_VERSION - Replaced print() calls with logger in decorators.py, events.py, queue_manager.py, and state.py - Added logger initialization using get_logger(__name__) in config.py, decorators.py, events.py, queue_manager.py, and state.py - Added cli/commands	2026-05-11 20:12:01 +02:00
aitbc	d58c901b92	release: bump to v0.3.4 with hermes switch from openclaw ... - Created comprehensive RELEASE_v0.3.4.md with Hermes migration details - Updated release history in releases README.md - Updated pyproject.toml version to v0.3.4 - Release covers Hermes agent system migration, blockchain sync improvements, security fixes, and documentation cleanup	2026-05-09 21:08:22 +02:00
aitbc	d26d937fb1	security: update python-multipart and starlette to fix high-severity vulnerabilities ... - Updated python-multipart from >=0.0.24 to >=0.0.27 (fixes 3 DoS alerts) - Updated starlette from >=0.27.0 to >=0.49.1 (fixes 1 O(n^2) DoS alert) - Updated in requirements.txt, pyproject.toml, coordinator-api requirements, aitbc-core This addresses 4 of the 11 high-severity security vulnerabilities reported by GitHub Dependabot.	2026-05-09 20:55:36 +02:00
aitbc	607ad2105f	ci: refactor docs-validation workflow to use environment variables ... - Add env section with WORKSPACE_BASE, REPO_URL, STANDARD_DIRS - Replace hardcoded paths with environment variable references - Extract standard directory creation to dedicated step - Remove duplicate directory creation from lint steps - Remove duplicate error message in documentation structure check - Update all workspace paths to use WORKSPACE_BASE variable - Update repository URL to use REPO_URL variable test: fix import path in test_import_surface.py after utils reorgan	2026-05-09 17:41:40 +02:00
aitbc1	5e841fde03	Bump mypy to 2.0.0	2026-05-07 17:39:16 +02:00
aitbc	e7aadb3ee0	fix: update dependencies to resolve security vulnerabilities ... - Remove invalid dependencies (broadcaster, sqlcipher3-binary) - Update all packages to latest secure versions via poetry update - This should resolve many of the 29 GitHub Dependabot vulnerabilities	2026-05-05 17:05:13 +02:00
aitbc	19d415a235	feat: add SQLCipher database encryption support and consolidate agent documentation ... - Add SQLCipher encryption for ait-mainnet database with configurable flag - Add db_encryption_enabled and db_encryption_key_path config settings - Implement encryption key loading and PRAGMA key setup via connection events - Add shutdown_db function for proper database cleanup - Export middleware classes in aitbc/__init__.py - Fix import path in sync.py for settings - Remove duplicate agent documentation from docs	2026-05-03 12:00:38 +02:00
aitbc	9036e8db08	deps: add broadcaster to dependencies for Redis gossip backend	2026-05-02 18:26:27 +02:00
aitbc	ac299b19b8	Extract shared utilities to aitbc-core package ... - Updated aitbc-core pyproject.toml with structlog and starlette dependencies - Created middleware directory with 4 middleware files: - RequestIDMiddleware for request correlation - PerformanceLoggingMiddleware for performance tracking - RequestValidationMiddleware for size validation - ErrorHandlerMiddleware for standardized error responses - Added structlog logging functions (configure_logging, get_logger) to aitbc-core - Updated coordinator-api main.py to use aitbc-core middleware and logging - Removed local middleware files from coordinator-api - Removed app_logging.py from coordinator-api - Added aitbc-core as workspace package to root pyproject.toml This completes Phase 4.1: Extract shared utilities to aitbc-core	2026-04-30 11:16:39 +02:00
aitbc	4c26f742dc	Update ruff rules and document logging patterns ... - Added logging-related ruff rules (G, LOG) to pyproject.toml - Temporarily ignored G001, G002 during migration - Created comprehensive logging patterns documentation - Documented structured logging configuration and patterns - Provided migration guide from standard to structured logging This completes Phase 5.5-5.6: Update ruff rules and document logging patterns	2026-04-30 11:07:06 +02:00
aitbc	884d8d61a3	Configure pytest coverage reporting with 50% minimum threshold ... - Added coverage configuration to pytest.ini_options - Set minimum coverage threshold to 50% - Configured coverage to run on apps, packages, and cli directories - Added coverage report formats (term-missing, html) - Configured coverage exclusions for tests, migrations, venv - Added coverage exclude lines for common patterns This is Phase 2: Test Coverage Improvement	2026-04-30 10:51:48 +02:00
aitbc	db98867c6b	Fix dependency conflicts and update poetry.lock ... - Changed from exact pins to version ranges in root pyproject.toml - This allows Poetry to resolve compatible versions automatically - Successfully ran poetry lock to generate consistent dependency resolution - This completes dependency consolidation with single source of truth	2026-04-30 10:50:41 +02:00
aitbc	4f2f5869f4	Consolidate dependencies to root pyproject.toml ... - Added all dependencies from requirements.txt to root pyproject.toml - Organized dependencies into main and dev groups - Pinned exact versions for reproducibility - This is Phase 1 of dependency management consolidation	2026-04-30 10:46:19 +02:00
aitbc	4d76bf4d97	fix: add E722 to ruff select list to enforce bare except detection ... - Explicitly add E722 rule to catch bare except clauses - Addresses report item #5 (80 bare except clauses)	2026-04-30 08:35:26 +02:00
aitbc	1d02c66465	fix: update black to 26.3.1 to fix CVE-2026-32274 ... - Updated black from ^24.0.0 to ^26.3.1 in pyproject.toml - Regenerated poetry.lock to apply the update - Fixes arbitrary file writes from unsanitized user input in cache file name	2026-04-28 10:13:54 +02:00
aitbc	fb587b883b	fix: update pytest to 9.0.3 to fix CVE-2025-71176 ... - Updated pytest from ^8.2.0 to ^9.0.3 in pyproject.toml - Regenerated poetry.lock to apply the update - Fixes vulnerable tmpdir handling in pytest < 9.0.3	2026-04-28 09:57:23 +02:00
aitbc	1c049960a1	chore: bump version to v0.3.3 ... - Added RELEASE_v0.3.3.md with blockchain sync fix and security vulnerability resolution - Updated releases README.md with v0.3.3 - Updated pyproject.toml version to v0.3.3	2026-04-28 09:55:34 +02:00
aitbc	ecb76a0ef9	docs: update mastery plan to v2.0 with multi-chain support, hub/follower topology, and workflow integration ... - Bump version from 1.0 to 2.0 in OPENCLAW_AITBC_MASTERY_PLAN.md - Add comprehensive workflow integration section with links to multi-node setup, operations, marketplace, and production workflows - Document multi-chain runtime support (ait-testnet, ait-devnet) with shared database and chain-aware RPC - Document hub/follower topology with island management and P2P network architecture - Add new	2026-04-13 18:22:47 +02:00
aitbc	9db720add8	docs: add code quality and type checking workflows to master index ... - Add Code Quality Module section with pre-commit hooks and quality checks - Add Type Checking CI/CD Module section with MyPy workflow and coverage - Update README with code quality achievements and project structure - Migrate FastAPI apps from deprecated on_event to lifespan context manager - Update pyproject.toml files to reference consolidated dependencies - Remove unused app.py import in coordinator-api - Add type hints to agent	2026-03-31 21:45:43 +02:00
aitbc	2dafa5dd73	feat: update service versions to v0.2.3 release ... - Updated blockchain-node from v0.2.2 to v0.2.3 - Updated coordinator-api from 0.1.0 to v0.2.3 - Updated pool-hub from 0.1.0 to v0.2.3 - Updated wallet from 0.1.0 to v0.2.3 - Updated root project from 0.1.0 to v0.2.3 All services now match RELEASE_v0.2.3	2026-03-31 15:11:44 +02:00
aitbc1	d2f7100594	fix: update idna to address security vulnerability	2026-03-31 14:03:38 +02:00
aitbc1	6b6653eeae	fix: update requests and urllib3 to address security vulnerabilities	2026-03-31 14:03:38 +02:00
aitbc1	e2844f44f8	add: root pyproject.toml for development environment health checks	2026-03-31 14:03:36 +02:00
aitbc	e23438a99e	fix: update Poetry configuration to modern pyproject.toml format ... - Add root pyproject.toml for poetry check in dev_heartbeat.py - Convert all packages from deprecated [tool.poetry.*] to [project.*] format - Update aitbc-core, aitbc-sdk, aitbc-crypto, aitbc-agent-sdk packages - Regenerate poetry.lock files for all packages - Fix poetry check failing issue in development environment This resolves the 'poetry check: FAIL' issue in dev_heartbeat.py while maintaining all package dependencies and build compatibility.	2026-03-30 15:40:54 +02:00
aitbc1	430120e94c	chore: remove configuration files and reorganize production workflow documentation ... 🧹 Configuration Cleanup: • Remove .aitbc.yaml test configuration file • Remove .editorconfig editor settings • Remove .env.example environment template • Remove .gitea-token authentication file • Remove .pre-commit-config.yaml hooks configuration 📋 Workflow Documentation Restructuring: • Replace immediate actions with complete optimization workflow (step 1) • Add production deployment workflow as	2026-03-29 20:06:51 +02:00
aitbc1	39e4282525	fix: add eth-account dependency for blockchain testing ... - Add eth-account>=0.13.0 to pyproject.toml dependencies - Add eth-account>=0.13.0 to central requirements.txt - Fixes CI test failure: ModuleNotFoundError: No module named 'eth_account' - Ensures blockchain contract tests can import eth_account properly - Required for Guardian Contract and other blockchain functionality	2026-03-29 11:59:58 +02:00
aitbc1	848162ae21	chore(deps): bump cryptography from 46.0.5 to 46.0.6 in /apps/blockchain-node in the pip group across 1 directory	2026-03-29 09:51:09 +02:00
aitbc1	8cac82d959	Update to v0.2.2 - fix pyproject.toml and package build	2026-03-28 10:58:06 +01:00
aitbc1	d0c33ca3c6	chore: update pydantic and pydantic-core	2026-03-28 09:16:58 +01:00
aitbc1	b843c89a1c	chore: final dependency updates	2026-03-28 09:16:36 +01:00
aitbc1	7b09272999	chore: update dependencies and fix pyproject.toml constraints	2026-03-28 09:16:10 +01:00
aitbc1	783659ff5f	fix: correct invalid Python classifier in pyproject.toml	2026-03-28 09:14:09 +01:00
aitbc1	16224c6103	fix: adjust Python version requirement for slowapi compatibility ... PYTHON VERSION FIX: Make project compatible with slowapi Issue: - Project requires Python >=3.14 but slowapi only supports Python <4.0 - Poetry dependency resolution failing due to Python version conflict - slowapi versions 0.1.0-0.1.9 all require Python >=3.6,<4.0 Solution: - Change requires-python from '>=3.13.5' to '>=3.13.5,<4.0' - This makes the project compatible with slowapi Python requirements - Maintains minimum Python version while adding upper bound Expected results: - Poetry dependency resolution should succeed - slowapi should install properly - All dependencies should be compatible - Test workflow should proceed to execution This resolves the Python version compatibility issue that was blocking dependency installation.	2026-03-27 21:03:21 +01:00
aitbc1	cb768adb3a	feat: fix missing modules and dependencies for test compatibility ... CODEBASE FIXES: Resolve real import and dependency issues Fixed Issues: 1. Missing aitbc.logging module - created aitbc/ package with logging.py 2. Missing src.message_protocol - created agent-protocols/src/message_protocol.py 3. Missing src.task_manager - created agent-protocols/src/task_manager.py 4. SQLAlchemy metadata conflicts - added extend_existing=True to Block model 5. Missing dependencies - added slowapi>=0.1.0 and pynacl>=1.5.0 New Modules Created: - aitbc/__init__.py - AITBC package initialization - aitbc/logging.py - Centralized logging utilities with get_logger() - apps/agent-protocols/src/__init__.py - Agent protocols package - apps/agent-protocols/src/message_protocol.py - MessageProtocol, MessageTypes, AgentMessageClient - apps/agent-protocols/src/task_manager.py - TaskManager, TaskStatus, TaskPriority, Task Database Fixes: - apps/blockchain-node/src/aitbc_chain/models.py - Added extend_existing=True to resolve metadata conflicts Dependencies Added: - slowapi>=0.1.0 - For slowapi.errors import - pynacl>=1.5.0 - For nacl.signing import Expected Results: - aitbc.logging imports should work - src.message_protocol imports should work - src.task_manager imports should work - SQLAlchemy metadata conflicts resolved - Missing dependency imports resolved - More tests should collect and run successfully This addresses the root cause issues in the codebase rather than working around them with test filtering.	2026-03-27 20:59:45 +01:00
aitbc	5d066b1db8	FIX: Bot node server should ONLY have Python 3.13.5 classifier ... ✅ CORRECTED PYTHON CLASSIFIERS: - REMOVED: Programming Language :: Python :: 3.11 (not installed) - REMOVED: Programming Language :: Python :: 3.12 (not installed) - UPDATED: Programming Language :: Python :: 3.13 → 3.13.5 (exact version) - KEPT: Programming Language :: Python :: 3 (generic) - KEPT: requires-python = >=3.13.5 (correct) 🔍 ROOT CAUSE: Previous commit a0e330d incorrectly removed Python 3.13.5 as invalid and added Python 3.11/3.12 which are not installed on this server. ✅ SYSTEM REALITY: - Only Python 3.13.5 is installed on aitbc server - No Python 3.11 or 3.12 packages available - CI/CD workflows all use Python 3.13.5 - Project requires Python >=3.13.5 🎯 ALIGNMENT: - pyproject.toml now matches system reality - No false claims about unsupported Python versions - Consistent with requires-python constraint - Aligns with CI/CD configuration	2026-03-27 07:55:11 +01:00
aitbc	d02e512148	Add Python 3.13 classifier back - we are using Python 3.13.5	2026-03-27 07:51:39 +01:00
aitbc	a0e330d568	fix: remove invalid Python 3.13 classifier from pyproject.toml	2026-03-27 07:51:18 +01:00
aitbc1	5cc4969e67	fix: resolve dev heartbeat issues - fix poetry check, CLI syntax check, and missing README	2026-03-27 07:34:23 +01:00
aitbc1	8ed7022189	ci: pin Python version to 3.13.5 across all workflows ... - Update all GitHub Actions workflows to use Python 3.13.5 specifically - Replace flexible '3.13' with exact '3.13.5' version pinning - Update pyproject.toml requires-python and classifiers to match - Align CI/CD with local development environment (Python 3.13.5) - Prevent Dependabot from testing with newer Python versions like 3.13.12	2026-03-26 08:52:39 +01:00
aitbc1	7e24c3b037	ci: align Python version support to 3.13 only ... - Update CI/CD workflows to test only Python 3.13 - Remove Python 3.11 and 3.12 from test matrix - Update package classifiers to reflect Python 3.13 only support - Align with requires-python = '>=3.13' constraint	2026-03-26 08:50:17 +01:00
aitbc1	8efaf9fa08	Merge dependency updates from GitHub ... - Updated black from 24.3.0 to 26.3.1 - Kept ruff at 0.15.7 (our updated version) - All other dependency updates already applied	2026-03-26 08:31:46 +01:00
aitbc1	b00724a783	deps: update Python dependencies ... - Update rich from 13.7.0 to 14.3.3 - Update pytest-cov from 7.0.0 to 7.1.0 - Update ruff from 0.15.5 to 0.15.7 - Update types-PyYAML from 6.0.12 to 6.0.12.20250915 Resolves Dependabot PRs #43, #44, #45, #46	2026-03-26 08:30:28 +01:00
AITBC System	0cd711276f	Merge gitea/main, preserving security fixes and current dependency versions	2026-03-24 16:18:25 +01:00
aitbc	fb3ac34ed3	Fix poetry lock file and update mypy dependency version	2026-03-20 10:37:52 +01:00
AITBC System	1ee2238cc8	feat: implement complete OpenClaw DAO governance system ... 🏛️ OpenClawDAO Smart Contract Implementation: Core Governance Contract: - Enhanced OpenClawDAO with snapshot security and anti-flash-loan protection - Token-weighted voting with 24-hour TWAS calculation - Multi-sig protection for critical proposals (emergency/protocol upgrades) - Agent swarm role integration (Provider/Consumer/Builder/Coordinator) - Proposal types: Parameter Change, Protocol Upgrade, Treasury, Emergency, Agent Trading, DAO Grants - Maximum voting power limits (5% per address) and vesting periods Security Features: - Snapshot-based voting power capture prevents flash-loan manipulation - Proposal bonds and challenge mechanisms for proposal validation - Multi-signature requirements for critical governance actions - Reputation-based voting weight enhancement for agents - Emergency pause and recovery mechanisms Agent Wallet Contract: - Autonomous agent voting with configurable strategies - Role-specific voting preferences based on agent type - Reputation-based voting power bonuses - Authorized caller management for agent control - Emergency stop and reactivate functionality - Autonomous vote execution based on predefined strategies GPU Staking Contract: - GPU resource staking with AITBC token collateral - Reputation-based reward rate calculations - Utilization-based reward scaling - Lock period enforcement with flexible durations - Provider reputation tracking and updates - Multi-pool support with different reward rates Deployment & Testing: - Complete deployment script with system configuration - Comprehensive test suite covering all major functionality - Multi-sig setup and initial agent registration - Snapshot creation and staking pool initialization - Test report generation with detailed results 🔐 Security Implementation: - Anti-flash-loan protection through snapshot voting - Multi-layer security (proposal bonds, challenges, multi-sig) - Reputation-based access control and voting enhancement - Emergency mechanisms for system recovery - Comprehensive input validation and access controls 📊 Governance Features: - 6 proposal types covering all governance scenarios - 4 agent swarm roles with specialized voting preferences - Token-weighted voting with reputation bonuses - 7-day voting period with 1-day delay - 4% quorum requirement and 1000 AITBC proposal threshold 🚀 Ready for deployment and integration with AITBC ecosystem	2026-03-18 20:32:44 +01:00
AITBC System	dda703de10	feat: implement v0.2.0 release features - agent-first evolution ... ✅ v0.2 Release Preparation: - Update version to 0.2.0 in pyproject.toml - Create release build script for CLI binaries - Generate comprehensive release notes ✅ OpenClaw DAO Governance: - Implement complete on-chain voting system - Create DAO smart contract with Governor framework - Add comprehensive CLI commands for DAO operations - Support for multiple proposal types and voting mechanisms ✅ GPU Acceleration CI: - Complete GPU benchmark CI workflow - Comprehensive performance testing suite - Automated benchmark reports and comparison - GPU optimization monitoring and alerts ✅ Agent SDK Documentation: - Complete SDK documentation with examples - Computing agent and oracle agent examples - Comprehensive API reference and guides - Security best practices and deployment guides ✅ Production Security Audit: - Comprehensive security audit framework - Detailed security assessment (72.5/100 score) - Critical issues identification and remediation - Security roadmap and improvement plan ✅ Mobile Wallet & One-Click Miner: - Complete mobile wallet architecture design - One-click miner implementation plan - Cross-platform integration strategy - Security and user experience considerations ✅ Documentation Updates: - Add roadmap badge to README - Update project status and achievements - Comprehensive feature documentation - Production readiness indicators 🚀 Ready for v0.2.0 release with agent-first architecture	2026-03-18 20:17:23 +01:00