185 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
defiQUG	9402317eb2	feat(atomic): add x402 intent bridge adapters ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-08 10:02:12 -07:00
defiQUG	869d61bcc7	fix(token-aggregation): enforce wallet-safe Chain 138 RPC URLs ... Ensure MetaMask add-chain payloads never inherit LAN HTTP RPCs by routing Chain 138 wallet payloads through a public HTTPS-only resolver. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-07 09:58:44 -07:00
defiQUG	8abbdf997d	chore(gru): retarget local contracts symlink ... Point the GRU contracts link at the official monetary policy checkout used by the current operator workspace. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-07 09:57:36 -07:00
defiQUG	d249ee5d05	chore(deploy): harden scoped verification profiles ... Capture targeted Foundry profile and deploy-script updates needed for the operator verification and PMM mesh workflows. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-07 09:57:14 -07:00
defiQUG	c55fab257c	feat(token-aggregation): add Chain 138 wallet routing surfaces ... Add MetaMask Snap metadata, wallet image helpers, and n-hop planning surfaces so Chain 138 routing and wallet-add flows have consistent API coverage. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-07 09:57:09 -07:00
defiQUG	6dcadc86a2	chore(omnl): consolidate portal and domain routing updates ... Capture non-secret OMNL portal, journal, chain, and nginx routing updates from the operator cleanup session while leaving generated auth includes unstaged. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-07 09:57:01 -07:00
defiQUG	8ee8930b5b	Harden OMNL dotenv layering and local health	2026-07-05 17:31:33 -07:00
defiQUG	abdd8881e2	Add Z Bank mainnet payment presets	2026-07-05 16:48:36 -07:00
defiQUG	b5d4f268bf	docs(portal): internal same-origin path map on /docs and hub links ... Add omnlInternalPaths config, expand DocsPage with path-only API tables, and switch QuickPortalLinks to relative routes instead of hardcoded FQDNs. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-02 15:09:36 -07:00
defiQUG	2b72242eb6	refactor(omnl-portal): retire Ali naming in docs and LXC sync path ... Redirect legacy ALI_* docs to Zardasht canonical workflow, delegate sync-ali to proxmox zardasht:banking-portal:sync, and align host config with /srv/zardasht-portal deploy root. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-01 10:12:27 -07:00
defiQUG	d80ebe146a	fix(omnl-portal): auth-source mapping for omdnl LXCs and LXC env fragments ... Allow nginx auth snippets to use super-admin keys from paired d-bis.org VMIDs (5820→5826 exchange, etc.), generate snippets for all 5820–5828 on deploy, and add build-portal-lxc-env-fragment.sh for sync-time .env push with internal secret. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-01 02:16:25 -07:00
defiQUG	a748a504f5	feat(omnl-banking-portal): hub/bridge routes, hash anchors, and /omnl nginx proxy ... Add DBIS Hub landing page with /hub and /bridge routes, central-bank hash scroll targets, nginx /omnl/ proxy to token-aggregation for local dev and production hosts, and a public-url-zardasht tunnel URL template for operator handoff. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-01 01:41:42 -07:00
defiQUG	cad927816e	fix(token-list): align cUSDC_V2/cUSDT_V2 logoURI with registry policy ... Use dedicated cusdc_v2/cusdt_v2 SVG paths so GRU token alignment validation passes.	2026-06-30 15:31:55 -07:00
zaragoza444	886a373356	fix: Phase C IPSAS matrix (2100/2410 HO legs) and runtime double-entry guards ... Align interoffice HO allocations to 2100→2410 with branch 1410→2100 two-leg entries, registry v1.2.1, explicit same-GL rejection in validators, doc matrices, and validation tests. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 10:11:44 -07:00
zaragoza444	9b3059beeb	fix: IPSAS double-entry compliance matrix for M0-M4 journals ... Replace invalid same-GL pairs (2000/2000) with proper Dr/Cr legs, add M2-M4 and inter-office entries (1410/2410), extend IPSAS registry accounts, and reject same-account pairs at validation load time. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 08:14:47 -07:00
zaragoza444	771697563e	fix: separate M4 near-money from interoffice GL 1410 ... M4 aggregate now sums GL 1000 suspense plus in-flight SWIFT only; GL 1410 stays under interoffice HO receivable. SWIFT/RTGS outbound journals route M2/M1 into M4 suspense via resolveM4OutboundJournal. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 07:26:34 -07:00
zaragoza444	7aaf5ca086	fix(deploy): normalize CRLF in portal start script before LXC bundle ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 07:16:22 -07:00
zaragoza444	81b1c2c75d	fix(deploy): strip CRLF from portal shell scripts inside LXC ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 07:13:43 -07:00
zaragoza444	b84ecbbb84	fix(deploy): LXC portal sync tolerates unset optional .env vars ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 07:10:52 -07:00
zaragoza444	c377e93849	fix(token-aggregation): resolve mint tokenAddress without const reassignment ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 06:49:05 -07:00
zaragoza444	5229c2d888	fix(omnl): production blockers for M0-M4 settlement stack ... Exempt dashboard read APIs from anonymous rate limits, preserve nginx-injected auth, wire chain-mint and DB env through deploy/LXC scripts, resolve M3 token addresses from registry, and harden super-admin seeding. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 06:47:20 -07:00
zaragoza444	5007e74532	chore(config): declare M3/M4 GL codes in Office 24 and production profiles ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 06:34:59 -07:00
zaragoza444	83305b8829	fix(deploy): tolerate unset optional vars when sourcing .env ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 06:30:03 -07:00
zaragoza444	fce988dceb	feat(settlement): add M3 and M4 money layers for full M0-M4 production ... Extend settlement-core with GL 2300 token liabilities (M3) and near-money aggregate (M4), wire middleware workflows and dashboards to expose all five layers end-to-end. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 06:27:23 -07:00
zaragoza444	a5c16330ca	feat: add credentials-only mode for super-admin seed ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 05:46:01 -07:00
zaragoza444	62c7005abe	fix: bootstrap admin_users table in super-admin seed script ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 05:42:13 -07:00
zaragoza444	604f493ff1	chore: assign four super-admin emails to portal operators ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 05:29:10 -07:00
zaragoza444	4ebca7d550	fix: ship nginx auth placeholder so LXC portals start before env push ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 05:20:58 -07:00
zaragoza444	064239be13	feat: four super-admin keys and production customer API security ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 05:09:08 -07:00
zaragoza444	84f12c7edc	chore: skip single-leg seed when Office 24 funding already posted ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 04:00:40 -07:00
zaragoza444	458f3b420b	feat: wire production settlement rails for M2 mint, transfers, and bank SWIFT ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 02:54:53 -07:00
zaragoza444	17e5cb3222	chore: sync Office 24 Zardasht identity and deploy paths ... Align externalId, office name, and portal topology with live Fineract (HOSPITALLERS-ZARDASHT-IRAQ-IRAN). Default LXC root to /srv/zardasht-portal and SSH alias dev-bis-zardasht in host config. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 01:58:03 -07:00
zaragoza444	abed3d9f8a	fix: resilient dashboard loading when ledger API unavailable ... Tolerate partial API failures and infer Fineract connected state from health. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 01:31:07 -07:00
zaragoza444	156591d707	fix: add /health/ledger path for NPM-safe dashboard data ... Query params may be stripped by reverse proxy; use dedicated path for ledger. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 01:17:52 -07:00
zaragoza444	c10f6e7868	fix: dashboard ledger fallback via health?ledger=1 ... NPM proxies block dedicated money-supply paths; embed public ledger snapshot in /health when ledger=1 and fall back from dashboard hooks. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 01:13:12 -07:00
zaragoza444	32f06ecc56	fix: validate numeric office id on money-supply route ... Avoid TypeScript express param regex; return 404 for non-numeric ids like public. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 01:00:15 -07:00
zaragoza444	a2c088bed0	fix: public ledger endpoint for dashboard money-supply ... Add /public/money-supply route and restrict office param to numeric IDs so NPM proxies no longer hit the authenticated /money-supply/:id handler. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 00:59:49 -07:00
zaragoza444	a29b32f042	fix: dashboard API paths for nginx/NPM proxy routing ... Use short /settlement and /exchange paths in production so nginx maps them to backend /api/v1/* without double-prefix 404s. Align all nginx configs. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 00:53:46 -07:00
zaragoza444	543482eddc	fix: pct push env fragment into LXC before merge ... SCP to PVE host alone left /tmp/omnl-portal-env.frag missing inside CTs. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 20:14:53 -07:00
zaragoza444	902e3bb57c	fix: GL lookup for Office 24 journal seed and add production activation ... Resolve Fineract account IDs by GL code instead of parsing codes as IDs. Add activate-omnl-production.sh and push-portal-env-to-lxc.sh for full deploy. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 20:03:09 -07:00
zaragoza444	d182a1d624	fix: nginx API proxy inside banking portal LXCs ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 19:48:00 -07:00
zaragoza444	b17df7ef14	fix: resolve black-screen UI from stale CDN assets and API paths ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 19:31:33 -07:00
zaragoza444	3c7abd5a01	fix: replace near-black NASA dashboard void with mission blue panels ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 18:42:12 -07:00
zaragoza444	5fc98ed803	fix: normalize CRLF in deploy .env and safe env merge helper ... Prevent Fineract connection failures when .env is uploaded from Windows, and add merge-env-fragment.sh to update keys without wiping existing vars. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 18:35:00 -07:00
zaragoza444	324bdc33fd	fix: sync only running banking LXCs 5825-5828 on r630-03 ... Load CTIDs from config, ensure containers are running before pct push, and skip missing legacy IDs instead of failing the whole sync. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 17:35:30 -07:00
zaragoza444	3a7358b6b5	fix: PVE LXC sync via sudo SSH and single build pass ... Use sudo ssh with ProxyJump=none from dev-bis-ali to Proxmox, build once before syncing all nine banking LXCs, and track deploy scripts as executable. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 17:29:29 -07:00
zaragoza444	cbd669c762	feat: NASA mission-control theme for all OMNL dashboards ... Replace Binance-style dashboard chrome with a shared telemetry UI, SVG icons, and mission headers across Central Bank, Office 24, trade, swap, and admin screens. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 17:10:24 -07:00
zaragoza444	4e047b9429	feat: clarify Central Bank and Office 24 dashboard layout ... Add status banners, grouped money-supply sections, public portal links, and shared dashboard components for clearer operator views. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 16:19:56 -07:00
zaragoza444	b72b986a12	fix: Fineract GL balances via journal fallback when report missing ... Use journalentry replay when General Ledger Report is unavailable, and expose fineractConnected on the public money-supply endpoint. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 15:55:15 -07:00
zaragoza444	34d11d8f61	fix: kill stale process on port before OMNL service restart ... Use fuser to free the listen port when pkill misses orphaned node processes. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 15:46:48 -07:00