Devin
cd36ff6b38
Machine-form obligation layer (terms-as-data)
...
CI / Frontend Lint (pull_request) Failing after 7s
CI / Frontend Type Check (pull_request) Failing after 5s
CI / Frontend Build (pull_request) Failing after 7s
CI / Frontend E2E Tests (pull_request) Failing after 7s
CI / Orchestrator Build (pull_request) Failing after 7s
CI / Contracts Compile (pull_request) Failing after 6s
CI / Contracts Test (pull_request) Failing after 5s
Code Quality / SonarQube Analysis (pull_request) Failing after 19s
Code Quality / Code Quality Checks (pull_request) Failing after 4s
Security Scan / Dependency Vulnerability Scan (pull_request) Failing after 4s
Security Scan / OWASP ZAP Scan (pull_request) Failing after 4s
Closes gap-analysis v2 §4.1 partial (Legal / Obligation Layer) —
today a Plan only carries a templateHash (hash-reference to an
off-chain document). This PR lifts the governing-terms object into
structured, machine-enforceable data.
- services/obligations/types.ts — ObligationTerms schema:
Consideration, validIssuance[], validPayment[], commit[], abort[],
unwind[], AuthorizedParticipant[] (role set matches PR M SoD),
GoverningDocument[] (keyed by templateRef + SHA-256 templateHash
that reuses the existing InstrumentTerms convention).
- services/obligations/evaluator.ts — closed-operator condition
engine (eq, neq, gt, gte, lt, lte, in, not_in, exists, matches,
length_gte, length_lte) + all/any/not combinators, dotted +
indexed path resolution (e.g. plan.steps[1].type). No eval, no
code execution, deterministic.
- services/obligations/index.ts — public surface:
canonicalize(), hashObligationTerms(), validateObligationTerms(),
evaluateClauses(), evaluateCommit(), evaluateAbort(),
buildIssueInstrumentObligation() (derives a sensible default
obligation from an issueInstrument step's InstrumentTerms —
binds commit, abort, unwind, validIssuance, validPayment clauses
that reflect UCP 600 / URDG 758 semantics, including the
"MT760 is irrevocable so unwind only applies when payment
failed AFTER instrument dispatch" rule from amendment H/§4.1).
- tests/unit/obligations.test.ts — 20 tests covering:
* canonicalize() key-sorting invariance + array preservation
* SHA-256 hash stability and sensitivity to mutation
* validateObligationTerms() (shape, ISO-4217 currency, hex hash,
authorizedParticipants role required, non-empty docs)
* evaluator primitives (eq/gt/lt/in/matches/length_*)
* all/any/not combinators
* dotted + indexed path resolution
* evaluateCommit ok-true + failure attribution
* evaluateAbort firing on an active exception
* buildIssueInstrumentObligation binding the template hash +
governingLaw into governingDocuments
* non-throwing error surfacing on bad regex
- Full suite: 8 suites, 100/100 passing. tsc --noEmit clean.
2026-04-22 18:44:12 +00:00
b66ec0a78f
PR G: portal /transactions page + 12-state machine view ( #11 )
CI / Frontend Lint (push) Failing after 6s
CI / Frontend Type Check (push) Failing after 6s
CI / Frontend Build (push) Failing after 6s
CI / Frontend E2E Tests (push) Failing after 9s
CI / Orchestrator Build (push) Failing after 6s
CI / Contracts Compile (push) Failing after 6s
CI / Contracts Test (push) Failing after 6s
Security Scan / Dependency Vulnerability Scan (push) Failing after 4s
Security Scan / OWASP ZAP Scan (push) Failing after 4s
2026-04-22 17:18:52 +00:00
3ef71332dc
PR F: Idempotency-Key + replay protection on POST /plans and /execute ( #10 )
CI / Frontend Lint (push) Has been cancelled
CI / Frontend Type Check (push) Has been cancelled
CI / Frontend Build (push) Has been cancelled
CI / Frontend E2E Tests (push) Has been cancelled
CI / Orchestrator Build (push) Has been cancelled
CI / Contracts Compile (push) Has been cancelled
CI / Contracts Test (push) Has been cancelled
Security Scan / Dependency Vulnerability Scan (push) Has been cancelled
Security Scan / OWASP ZAP Scan (push) Has been cancelled
2026-04-22 17:18:25 +00:00
fd575000fe
PR E: SWIFT gateway (MT760, pacs.009, MT202, camt.025/054) ( #9 )
CI / Frontend Lint (push) Has been cancelled
CI / Frontend Type Check (push) Has been cancelled
CI / Frontend Build (push) Has been cancelled
CI / Frontend E2E Tests (push) Has been cancelled
CI / Orchestrator Build (push) Has been cancelled
CI / Contracts Compile (push) Has been cancelled
CI / Contracts Test (push) Has been cancelled
Security Scan / Dependency Vulnerability Scan (push) Has been cancelled
Security Scan / OWASP ZAP Scan (push) Has been cancelled
2026-04-22 17:17:51 +00:00
cb376eda31
PR D: typed + signed event bus + events table + SSE (arch step 5) ( #8 )
CI / Frontend Lint (push) Has been cancelled
CI / Frontend Type Check (push) Has been cancelled
CI / Frontend Build (push) Has been cancelled
CI / Frontend E2E Tests (push) Has been cancelled
CI / Orchestrator Build (push) Has been cancelled
CI / Contracts Compile (push) Has been cancelled
CI / Contracts Test (push) Has been cancelled
Security Scan / Dependency Vulnerability Scan (push) Has been cancelled
Security Scan / OWASP ZAP Scan (push) Has been cancelled
2026-04-22 17:17:40 +00:00
b4d28c77d8
PR B: VALIDATING phase + unified ExceptionManager (arch steps 3, 7) ( #6 )
CI / Frontend Lint (push) Failing after 6s
CI / Frontend Type Check (push) Failing after 7s
CI / Frontend Build (push) Has started running
CI / Frontend E2E Tests (push) Has been cancelled
CI / Orchestrator Build (push) Has been cancelled
CI / Contracts Compile (push) Has been cancelled
CI / Contracts Test (push) Has been cancelled
Security Scan / Dependency Vulnerability Scan (push) Failing after 5s
Security Scan / OWASP ZAP Scan (push) Failing after 5s
2026-04-22 17:15:57 +00:00
84f199fb65
PR A: 12-state transaction machine + issueInstrument step + SoD matrix ( #5 )
CI / Frontend Lint (push) Has been cancelled
CI / Frontend Type Check (push) Has been cancelled
CI / Frontend Build (push) Has been cancelled
CI / Frontend E2E Tests (push) Has been cancelled
CI / Orchestrator Build (push) Has been cancelled
CI / Contracts Compile (push) Has been cancelled
CI / Contracts Test (push) Has been cancelled
Security Scan / Dependency Vulnerability Scan (push) Has been cancelled
Security Scan / OWASP ZAP Scan (push) Has been cancelled
2026-04-22 17:15:46 +00:00
c732c1c71a
Merge pull request 'feat(portal): wire Solace portal (all 7 pages) to live Chain-138 RPC + SolaceScan Explorer' ( #2 ) from devin/1776532671-solace-bank-portal into main
CI / Frontend Lint (push) Has been cancelled
CI / Frontend Type Check (push) Has been cancelled
CI / Frontend Build (push) Has been cancelled
CI / Frontend E2E Tests (push) Has been cancelled
CI / Orchestrator Build (push) Has been cancelled
CI / Contracts Compile (push) Has been cancelled
CI / Contracts Test (push) Has been cancelled
Security Scan / Dependency Vulnerability Scan (push) Has been cancelled
Security Scan / OWASP ZAP Scan (push) Has been cancelled
2026-04-22 17:15:28 +00:00
Devin
d425f75d02
chore: merge main into portal branch (resolve unrelated histories)
CI / Frontend Lint (pull_request) Failing after 10s
CI / Frontend Type Check (pull_request) Failing after 7s
CI / Frontend Build (pull_request) Failing after 7s
CI / Frontend E2E Tests (pull_request) Failing after 11s
CI / Orchestrator Build (pull_request) Failing after 9s
CI / Contracts Compile (pull_request) Failing after 8s
CI / Contracts Test (pull_request) Failing after 6s
Code Quality / SonarQube Analysis (pull_request) Failing after 23s
Code Quality / Code Quality Checks (pull_request) Failing after 5s
Security Scan / Dependency Vulnerability Scan (pull_request) Failing after 5s
Security Scan / OWASP ZAP Scan (pull_request) Failing after 3s
2026-04-22 17:15:01 +00:00
6166c48426
PR H: architecture note amendments (§5.1 trust / §9.2 settlement / §4.1 unwind) ( #12 )
CI / Frontend Lint (push) Failing after 8s
CI / Frontend Type Check (push) Failing after 7s
CI / Frontend Build (push) Failing after 6s
CI / Frontend E2E Tests (push) Failing after 7s
CI / Orchestrator Build (push) Failing after 6s
CI / Contracts Compile (push) Failing after 7s
CI / Contracts Test (push) Failing after 5s
Security Scan / Dependency Vulnerability Scan (push) Failing after 4s
Security Scan / OWASP ZAP Scan (push) Failing after 4s
2026-04-22 17:12:59 +00:00
3e1fb9ef7e
PR C: wire real NotaryRegistry on Chain 138 (arch step 4) ( #7 )
CI / Frontend Lint (push) Failing after 6s
CI / Frontend Type Check (push) Failing after 6s
CI / Frontend Build (push) Failing after 6s
CI / Frontend E2E Tests (push) Failing after 8s
CI / Contracts Compile (push) Has been cancelled
CI / Contracts Test (push) Has been cancelled
CI / Orchestrator Build (push) Has been cancelled
Security Scan / OWASP ZAP Scan (push) Has been cancelled
Security Scan / Dependency Vulnerability Scan (push) Has been cancelled
2026-04-22 17:11:50 +00:00
e4b0be8a63
feat(orchestrator): Proxmox BFF route (CF-Access service token proxy) ( #3 )
...
CI / Frontend Type Check (push) Has been cancelled
CI / Frontend Build (push) Has been cancelled
CI / Frontend E2E Tests (push) Has been cancelled
CI / Frontend Lint (push) Has started running
CI / Orchestrator Build (push) Has been cancelled
CI / Contracts Compile (push) Has been cancelled
CI / Contracts Test (push) Has been cancelled
Security Scan / Dependency Vulnerability Scan (push) Failing after 4s
Security Scan / OWASP ZAP Scan (push) Has been cancelled
Co-authored-by: Nakamoto, S <nsatoshi2007@hotmail.com >
Co-committed-by: Nakamoto, S <nsatoshi2007@hotmail.com >
2026-04-22 17:11:42 +00:00
9f1e919dac
fix: remove dead webapp/ gitlink on main (commit 404s, no .gitmodules) ( #4 )
Security Scan / Dependency Vulnerability Scan (push) Has been cancelled
Security Scan / OWASP ZAP Scan (push) Has been cancelled
CI / Frontend Lint (push) Has been cancelled
CI / Frontend Type Check (push) Has been cancelled
CI / Frontend Build (push) Has been cancelled
CI / Frontend E2E Tests (push) Has been cancelled
CI / Orchestrator Build (push) Has been cancelled
CI / Contracts Compile (push) Has been cancelled
CI / Contracts Test (push) Has been cancelled
2026-04-22 17:11:28 +00:00
5ea631ad2f
fix(ci): remove orphan <<<<<<< HEAD merge-conflict markers in ci.yml ( #1 )
CI / Frontend Lint (push) Has been cancelled
CI / Frontend Type Check (push) Has been cancelled
CI / Frontend Build (push) Has been cancelled
CI / Frontend E2E Tests (push) Has been cancelled
CI / Orchestrator Build (push) Has been cancelled
CI / Contracts Compile (push) Has been cancelled
CI / Contracts Test (push) Has been cancelled
Security Scan / Dependency Vulnerability Scan (push) Failing after 8s
Security Scan / OWASP ZAP Scan (push) Has been cancelled
2026-04-22 17:11:21 +00:00
Devin AI
23638844e4
fix(portal/reporting): normalize Blockscout avg_block_time ms->s
...
Blockscout /api/v2/stats returns average_block_time in milliseconds;
ReportingPage displays it as `${value.toFixed(1)}s` which rendered
~4424s instead of the real ~4.4s. Normalize in the service layer so
every caller gets seconds regardless of upstream format.
Co-Authored-By: Nakamoto, S <defi@defi-oracle.io >
2026-04-19 09:53:44 +00:00
7253ad1974
feat(portal): wire Accounts/Treasury/Reporting/Compliance/Settlements/TransactionBuilder to live Chain-138 + SolaceScan
...
Extends the POC from #2 beyond the Dashboard so every portal page that
can benefit from on-chain signal now pulls from live backends while
preserving its existing UX. Pages without an on-chain analogue (the
IFRS/GAAP/IPSAS report rows, the dbis_core compliance alerts) stay on
sample data with an explicit 'mocked' note.
New shared primitives
---------------------
src/hooks/useLatestTransactions.ts — polls SolaceScan /transactions every 15s
src/hooks/useAddressTransactions.ts — per-address tx feed, 60s polling
src/components/portal/LiveTransactionsPanel.tsx — reusable live-tx card
src/components/portal/LiveChainBanner.tsx — slim status banner
src/components/portal/OnChainBalanceTag.tsx — shared live/off-chain pill
Per-page wiring
---------------
AccountsPage — on-chain pill + META balance + SolaceScan link on
each account row that carries a walletAddress;
overlay renders only on wallet rows (negative check).
SettlementsPage — replaces the static 'Settlement Rate' tile with a
live Chain-138 block + tx-today tile; adds a
LiveTransactionsPanel above the CSD queue so the
page no longer renders identical output when RPC
is dead.
ReportingPage — new On-Chain Reporting Snapshot row (Blockscout
/stats: block depth, total tx, total addrs,
utilisation, avg block time). Clear note that
the IFRS/GAAP/IPSAS rows come from dbis_core and
are still mocked.
TreasuryPage — two new summary tiles: live Chain-138 gas +
aggregated on-chain custody (META) from sample
wallet addresses. Uses the same
useOnChainBalances hook as Accounts.
CompliancePage — AML monitor strip with wallet selector; dedicated
'On-Chain Tx Feed' card shows IN/OUT per tracked
wallet via SolaceScan. dbis_core alerts still
mocked (no public deploy).
TransactionBuilder — LiveChainBanner inserted above the composer so
users know chain health + gas + latency before
composing; transaction-builder-module made a
flex column so the banner doesn't cover the
canvas.
Assertions baked into every live widget
---------------------------------------
- RPC failure flips colour + text to 'degraded'/'—' (no silent freeze).
- Loading state is distinct from both live and degraded.
- Each overlay is only rendered where real data differs from sample data
(walletAddress rows for balances, tracked custody for AML, etc.) so a
page without live overlays is proof-of-scope, not proof-of-brokenness.
Verified locally
----------------
- tsc --noEmit: clean
- npm run build: clean (2066 modules, 565 ms)
Still intentionally mocked
--------------------------
- proxmox.ts — CF-Access protected; a BFF route is now open in
orchestrator PR (see companion PR for /api/proxmox/*).
- dbisCore.ts — no public deployment exists yet.
2026-04-19 08:31:04 +00:00
Devin AI
007c79d7a9
feat(portal): wire DashboardPage to live Chain-138 RPC + SolaceScan Explorer
...
- Add services/{http,chain138,explorer,proxmox,dbisCore} + hooks/{useLiveChain,useOnChainBalances}
- Add BackendStatusBar + LiveNetworkPanel components on DashboardPage
- Overlay on-chain META balance on account rows carrying a walletAddress
- Normalize EIP-55 checksum in chain138.getNativeBalance so hand-typed
sample custody addresses (e.g. 0x742d35Cc...bD38) don't silently drop
out of the balance map
- Default RPC: https://rpc.d-bis.org (user-preferred gateway)
- proxmox.ts stays mocked (CF-Access, needs BFF); dbisCore.ts stays
mocked (no public deployment yet)
Co-Authored-By: Nakamoto, S <defi@defi-oracle.io >
2026-04-19 00:33:46 +00:00
Devin AI
52676016fb
feat: Solace Bank Group PLC Treasury Management Portal
...
- Web3 authentication with MetaMask, WalletConnect, Coinbase wallet options
- Demo mode for testing without wallet
- Overview dashboard with KPI cards, asset allocation, positions, accounts, alerts
- Transaction Builder module (full IDE-style drag-and-drop canvas with 28 gap fixes)
- Accounts module with multi-account/subaccount hierarchical structures
- Treasury Management module with positions table and 14-day cash forecast
- Financial Reporting module with IPSAS, US GAAP, IFRS compliance
- Compliance & Risk module with KYC/AML/Sanctions monitoring
- Settlement & Clearing module with DVP/FOP/PVP operations
- Settings with role-based permissions and enterprise controls
- Dark theme professional UI with Solace Bank branding
- HashRouter for static hosting compatibility
Co-Authored-By: Nakamoto, S <defi@defi-oracle.io >
2026-04-18 17:20:13 +00:00
Devin AI
eb801df552
Initial repository setup
...
Co-Authored-By: Nakamoto, S <defi@defi-oracle.io >
2026-04-18 17:19:24 +00:00
defiQUG
b118b2be9c
docs: Update README and FINAL_STATUS for quick start setup and project readiness
...
Security Scan / OWASP ZAP Scan (push) Failing after 8s
Security Scan / Dependency Vulnerability Scan (push) Failing after 14m23s
- Added quick start instructions in README.md for first-time setup, including commands for complete setup, verification, and service start.
- Revised FINAL_STATUS.md to reflect the project's infrastructure completion and readiness for execution, detailing scripts created and documentation status.
2025-11-06 21:31:55 -08:00
defiQUG
3dc8592b83
docs: Update CHANGELOG and README for deployment models and troubleshooting
...
- Added multi-platform deployment architecture details (Web App, PWA, DApp) to README.md.
- Included comprehensive troubleshooting guides and fix scripts in README.md.
- Enhanced CHANGELOG.md with new features, fixes, and improvements, including TypeScript error resolutions and updated documentation structure.
- Revised development setup instructions in DEV_SETUP.md to reflect changes in script usage and environment variable setup.
2025-11-06 08:09:54 -08:00
defiQUG
513baa15ae
docs: Update development setup documentation and enhance error handling
...
- Revised the development setup section in CURRENT_STATUS.md for clarity and completeness.
- Improved environment variable validation with default values in env.ts.
- Enhanced error handling in errorHandler.ts to provide clearer feedback on validation issues.
2025-11-05 19:07:52 -08:00
defiQUG
14dfd3c9bf
docs: Enhance development setup documentation and update environment variable validation
...
- Added a new section in CURRENT_STATUS.md detailing prerequisites and quick start instructions for development setup.
- Updated environment variable validation to include defaults for missing variables in env.ts.
- Improved error handling in errorHandler.ts for better validation feedback.
- Made various code adjustments across services to ensure robustness and clarity.
2025-11-05 19:00:46 -08:00
defiQUG
c872168d23
chore: Update GitHub Actions workflows for improved performance and reliability
2025-11-05 18:52:59 -08:00
defiQUG
446e9495ce
docs: Add final branch consolidation summary
2025-11-05 18:09:34 -08:00
defiQUG
4b7861225b
chore: Consolidate GitHub Actions updates - checkout v5, setup-node v6, upload-artifact v5
2025-11-05 18:08:55 -08:00
defiQUG
4693645a12
docs: Add branch consolidation status tracking
2025-11-05 18:05:16 -08:00
defiQUG
9f568beb94
docs: Add consolidation completion summary
2025-11-05 18:04:32 -08:00
defiQUG
72fa2240ca
docs: Add dependency update plan for breaking changes
2025-11-05 18:03:55 -08:00
defiQUG
735a24c895
Merge remote-tracking branch 'Origin/dependabot/github_actions/actions/checkout-5' into consolidate-dependabot
2025-11-05 18:02:16 -08:00
defiQUG
ad5535df69
docs: Add branch consolidation plan and scripts
2025-11-05 18:02:01 -08:00
defiQUG
f52313e7c6
Enhance ComboHandler and orchestrator functionality with access control and error handling improvements
...
- Added AccessControl to ComboHandler for role-based access management.
- Implemented gas estimation for plan execution and improved gas limit checks.
- Updated execution and preparation methods to enforce step count limits and role restrictions.
- Enhanced error handling in orchestrator API endpoints with AppError for better validation feedback.
- Integrated request timeout middleware for improved request management.
- Updated Swagger documentation to reflect new API structure and parameters.
2025-11-05 17:55:48 -08:00
defiQUG
f600b7b15e
Add ECDSA signature verification and enhance ComboHandler functionality
...
- Integrated ECDSA for signature verification in ComboHandler.
- Updated event emissions to include additional parameters for better tracking.
- Improved gas tracking during execution of combo plans.
- Enhanced database interactions for storing and retrieving plans, including conflict resolution and status updates.
- Added new dependencies for security and database management in orchestrator.
2025-11-05 16:28:48 -08:00
dependabot[bot]
e994dc36d6
Bump actions/setup-node from 4 to 6
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-06 00:13:50 +00:00
dependabot[bot]
582ef0ac23
Bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-06 00:13:47 +00:00
defiQUG
3b09c35c47
Consolidate webapp structure by merging nested components into the main repository
2025-11-05 16:12:53 -08:00
defiQUG
09c5a1fd5e
Flatten nested webapp repo into main repo
2025-11-05 13:36:49 -08:00