183 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
zaragoza444	95a01c5953	fix(deploy): install devDependencies for TypeScript builds on production hosts ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-03 02:09:48 -07:00
zaragoza444	46ab06d634	fix(swift-listener): use npx tsc for production build on PATH-less hosts ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-03 02:08:35 -07:00
zaragoza444	c80c5364ca	fix(settlement): add z-bank M0-M4 workflow source for production build ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-03 02:07:02 -07:00
zaragoza444	abb63b4336	fix(omnl): coerce gazette documentId param for TypeScript build ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-03 02:04:57 -07:00
zaragoza444	14238dc81d	feat(guosmm): deploy gazette notices across API, portal, and office configs ... Register GUOSMM-B-2026-001 and C-2026-003/004/005 in SSOT, expose via /api/v1/omnl/gazette/notices, hub and central-bank UI, offices 29-31, compliance console, and production deploy sync script. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-03 02:03:38 -07:00
zaragoza444	4919328162	feat(swift): production listener config, MT202/910 outbound, activate scripts	2026-07-03 00:36:21 -07:00
defiQUG	b5d4f268bf	docs(portal): internal same-origin path map on /docs and hub links ... Add omnlInternalPaths config, expand DocsPage with path-only API tables, and switch QuickPortalLinks to relative routes instead of hardcoded FQDNs. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-02 15:09:36 -07:00
defiQUG	2b72242eb6	refactor(omnl-portal): retire Ali naming in docs and LXC sync path ... Redirect legacy ALI_* docs to Zardasht canonical workflow, delegate sync-ali to proxmox zardasht:banking-portal:sync, and align host config with /srv/zardasht-portal deploy root. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-01 10:12:27 -07:00
defiQUG	d80ebe146a	fix(omnl-portal): auth-source mapping for omdnl LXCs and LXC env fragments ... Allow nginx auth snippets to use super-admin keys from paired d-bis.org VMIDs (5820→5826 exchange, etc.), generate snippets for all 5820–5828 on deploy, and add build-portal-lxc-env-fragment.sh for sync-time .env push with internal secret. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-01 02:16:25 -07:00
defiQUG	a748a504f5	feat(omnl-banking-portal): hub/bridge routes, hash anchors, and /omnl nginx proxy ... Add DBIS Hub landing page with /hub and /bridge routes, central-bank hash scroll targets, nginx /omnl/ proxy to token-aggregation for local dev and production hosts, and a public-url-zardasht tunnel URL template for operator handoff. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-01 01:41:42 -07:00
defiQUG	cad927816e	fix(token-list): align cUSDC_V2/cUSDT_V2 logoURI with registry policy ... Use dedicated cusdc_v2/cusdt_v2 SVG paths so GRU token alignment validation passes.	2026-06-30 15:31:55 -07:00
zaragoza444	886a373356	fix: Phase C IPSAS matrix (2100/2410 HO legs) and runtime double-entry guards ... Align interoffice HO allocations to 2100→2410 with branch 1410→2100 two-leg entries, registry v1.2.1, explicit same-GL rejection in validators, doc matrices, and validation tests. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 10:11:44 -07:00
zaragoza444	9b3059beeb	fix: IPSAS double-entry compliance matrix for M0-M4 journals ... Replace invalid same-GL pairs (2000/2000) with proper Dr/Cr legs, add M2-M4 and inter-office entries (1410/2410), extend IPSAS registry accounts, and reject same-account pairs at validation load time. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 08:14:47 -07:00
zaragoza444	771697563e	fix: separate M4 near-money from interoffice GL 1410 ... M4 aggregate now sums GL 1000 suspense plus in-flight SWIFT only; GL 1410 stays under interoffice HO receivable. SWIFT/RTGS outbound journals route M2/M1 into M4 suspense via resolveM4OutboundJournal. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 07:26:34 -07:00
zaragoza444	7aaf5ca086	fix(deploy): normalize CRLF in portal start script before LXC bundle ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 07:16:22 -07:00
zaragoza444	81b1c2c75d	fix(deploy): strip CRLF from portal shell scripts inside LXC ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 07:13:43 -07:00
zaragoza444	b84ecbbb84	fix(deploy): LXC portal sync tolerates unset optional .env vars ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 07:10:52 -07:00
zaragoza444	c377e93849	fix(token-aggregation): resolve mint tokenAddress without const reassignment ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 06:49:05 -07:00
zaragoza444	5229c2d888	fix(omnl): production blockers for M0-M4 settlement stack ... Exempt dashboard read APIs from anonymous rate limits, preserve nginx-injected auth, wire chain-mint and DB env through deploy/LXC scripts, resolve M3 token addresses from registry, and harden super-admin seeding. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 06:47:20 -07:00
zaragoza444	5007e74532	chore(config): declare M3/M4 GL codes in Office 24 and production profiles ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 06:34:59 -07:00
zaragoza444	83305b8829	fix(deploy): tolerate unset optional vars when sourcing .env ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 06:30:03 -07:00
zaragoza444	fce988dceb	feat(settlement): add M3 and M4 money layers for full M0-M4 production ... Extend settlement-core with GL 2300 token liabilities (M3) and near-money aggregate (M4), wire middleware workflows and dashboards to expose all five layers end-to-end. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 06:27:23 -07:00
zaragoza444	a5c16330ca	feat: add credentials-only mode for super-admin seed ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 05:46:01 -07:00
zaragoza444	62c7005abe	fix: bootstrap admin_users table in super-admin seed script ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 05:42:13 -07:00
zaragoza444	604f493ff1	chore: assign four super-admin emails to portal operators ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 05:29:10 -07:00
zaragoza444	4ebca7d550	fix: ship nginx auth placeholder so LXC portals start before env push ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 05:20:58 -07:00
zaragoza444	064239be13	feat: four super-admin keys and production customer API security ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 05:09:08 -07:00
zaragoza444	84f12c7edc	chore: skip single-leg seed when Office 24 funding already posted ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 04:00:40 -07:00
zaragoza444	458f3b420b	feat: wire production settlement rails for M2 mint, transfers, and bank SWIFT ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 02:54:53 -07:00
zaragoza444	17e5cb3222	chore: sync Office 24 Zardasht identity and deploy paths ... Align externalId, office name, and portal topology with live Fineract (HOSPITALLERS-ZARDASHT-IRAQ-IRAN). Default LXC root to /srv/zardasht-portal and SSH alias dev-bis-zardasht in host config. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 01:58:03 -07:00
zaragoza444	abed3d9f8a	fix: resilient dashboard loading when ledger API unavailable ... Tolerate partial API failures and infer Fineract connected state from health. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 01:31:07 -07:00
zaragoza444	156591d707	fix: add /health/ledger path for NPM-safe dashboard data ... Query params may be stripped by reverse proxy; use dedicated path for ledger. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 01:17:52 -07:00
zaragoza444	c10f6e7868	fix: dashboard ledger fallback via health?ledger=1 ... NPM proxies block dedicated money-supply paths; embed public ledger snapshot in /health when ledger=1 and fall back from dashboard hooks. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 01:13:12 -07:00
zaragoza444	32f06ecc56	fix: validate numeric office id on money-supply route ... Avoid TypeScript express param regex; return 404 for non-numeric ids like public. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 01:00:15 -07:00
zaragoza444	a2c088bed0	fix: public ledger endpoint for dashboard money-supply ... Add /public/money-supply route and restrict office param to numeric IDs so NPM proxies no longer hit the authenticated /money-supply/:id handler. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 00:59:49 -07:00
zaragoza444	a29b32f042	fix: dashboard API paths for nginx/NPM proxy routing ... Use short /settlement and /exchange paths in production so nginx maps them to backend /api/v1/* without double-prefix 404s. Align all nginx configs. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-29 00:53:46 -07:00
zaragoza444	543482eddc	fix: pct push env fragment into LXC before merge ... SCP to PVE host alone left /tmp/omnl-portal-env.frag missing inside CTs. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 20:14:53 -07:00
zaragoza444	902e3bb57c	fix: GL lookup for Office 24 journal seed and add production activation ... Resolve Fineract account IDs by GL code instead of parsing codes as IDs. Add activate-omnl-production.sh and push-portal-env-to-lxc.sh for full deploy. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 20:03:09 -07:00
zaragoza444	d182a1d624	fix: nginx API proxy inside banking portal LXCs ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 19:48:00 -07:00
zaragoza444	b17df7ef14	fix: resolve black-screen UI from stale CDN assets and API paths ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 19:31:33 -07:00
zaragoza444	3c7abd5a01	fix: replace near-black NASA dashboard void with mission blue panels ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 18:42:12 -07:00
zaragoza444	5fc98ed803	fix: normalize CRLF in deploy .env and safe env merge helper ... Prevent Fineract connection failures when .env is uploaded from Windows, and add merge-env-fragment.sh to update keys without wiping existing vars. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 18:35:00 -07:00
zaragoza444	324bdc33fd	fix: sync only running banking LXCs 5825-5828 on r630-03 ... Load CTIDs from config, ensure containers are running before pct push, and skip missing legacy IDs instead of failing the whole sync. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 17:35:30 -07:00
zaragoza444	3a7358b6b5	fix: PVE LXC sync via sudo SSH and single build pass ... Use sudo ssh with ProxyJump=none from dev-bis-ali to Proxmox, build once before syncing all nine banking LXCs, and track deploy scripts as executable. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 17:29:29 -07:00
zaragoza444	cbd669c762	feat: NASA mission-control theme for all OMNL dashboards ... Replace Binance-style dashboard chrome with a shared telemetry UI, SVG icons, and mission headers across Central Bank, Office 24, trade, swap, and admin screens. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 17:10:24 -07:00
zaragoza444	4e047b9429	feat: clarify Central Bank and Office 24 dashboard layout ... Add status banners, grouped money-supply sections, public portal links, and shared dashboard components for clearer operator views. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 16:19:56 -07:00
zaragoza444	b72b986a12	fix: Fineract GL balances via journal fallback when report missing ... Use journalentry replay when General Ledger Report is unavailable, and expose fineractConnected on the public money-supply endpoint. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 15:55:15 -07:00
zaragoza444	34d11d8f61	fix: kill stale process on port before OMNL service restart ... Use fuser to free the listen port when pkill misses orphaned node processes. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 15:46:48 -07:00
zaragoza444	1fe57901e5	feat: wire live Fineract M1 to Central Bank UI and Office 24 journal seed ... Add a read-only money-supply endpoint for Office 24 dashboards, pass Fineract env through deploy scripts, and provide a seed script for the opening Dr 1410 / Cr 2100 journal. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 15:41:23 -07:00
zaragoza444	37e280f372	docs: two-repo Gitea workflow and LXC sync script for Ali operator ... Add FORGE_CANONICAL_REGISTRY, ALI_GITEA_TWO_REPO_WORKFLOW, and sync-ali-omnl-banking-portal-lxcs.sh for banking LXCs 5820-5828. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-28 15:30:24 -07:00