Chore: Release v3.1.0 by dev-adamant-im · Pull Request #16 · Adamant-im/pool

dev-adamant-im · 2026-07-01T14:19:26Z

Summary

Release ADAMANT Forging Pool v3.1.0 by merging dev into master.

Closes #15.

Diff Summary

Compared with master, dev is ahead by 93 commits and changes 89 files:

24,463 insertions
19,415 deletions

Main merged work included in this release:

Chore: Upgrade and refactor pool for v3.1.0 #4 — Chore: Upgrade and refactor pool for v3.1.0
Docs: Add AI agent instructions #8 — Docs: Add AI agent instructions
Refactor: Harden server accounting, logging, and tests #11 — Refactor: Harden server accounting, logging, and tests
Feat: Encrypt pool passphrase with operator password, add adm-pool CLI and /api/health #13 — Feat: Encrypt pool passphrase with operator password, add adm-pool CLI and /api/health
Fix: Address security review findings in server and web #14 — Fix: Address security review findings in server and web

Runtime, Dependencies, and Tooling

Updates root, server, and web package metadata to v3.1.0
Raises the runtime baseline to Node.js 22.13.0+ and npm 10+
Refreshes dependencies and lockfiles across root, server, web, and the migration helper
Moves ESLint configuration to flat config and removes obsolete .eslintignore / .eslintrc.cjs files
Adds Prettier and markdownlint configuration
Updates Husky hooks and removes the old commit-msg hook

Storage and Migration

Moves runtime storage to MongoDB-backed collections
Keeps LowDB support under server/src/repository/lowdb/ for older data and migration tests
Adds scripts/migrate-lowdb-mongodb/ with migration logic, tests, and package metadata
Adds MongoDB indexes for block, transaction, and voter queries
Makes MongoDB connection parameters configurable through the public config reference

Reward, Payout, and Accounting Safety

Hardens reward distribution and payout flows with async DB handling and focused tests
Persists per-voter block reward progress so retry/crash paths do not duplicate rewards
Normalizes pending reward values before payout accounting
Improves block parsing, block checking, payout retry behavior, and payout logging
Adds tests for reward distribution, payout behavior, block parsing, cron deferral, and store helpers

Secret Safety and Operator Controls

Adds optional operator-password-encrypted pool passphrases
Adds adm-pool encrypt, unlock, lock, and status CLI commands
Adds a local Unix control socket with owner-only runtime directory handling
Supports locked startup where block sync and public API stay available while payouts and ADM notifications are paused
Adds lock/unlock notifications and passphrase crypto tests

Public API and Monitoring

Adds /api/health for secret-free external monitoring
Refactors server API routing and public configuration responses
Preserves CORS configuration behavior and avoids exposing framework internals
Adds public locked-payout status for the dashboard

Dashboard and Web UI

Updates the dashboard to Svelte 5 and current Vite tooling
Adds voter and transaction filtering by address or name
Shows delegate/voter names under addresses when available
Fixes numeric sorting and weight percentage formatting
Improves dashboard metric layout, table alignment, footer links, and explorer links
Adds a theme-aware README logo through GitHub-supported <picture> markup

Documentation and Governance

Replaces older repo-local issue templates with organization-level issue forms
Adds root CONTRIBUTING.md
Adds AGENTS.md with repository-specific AI agent operating rules
Rewrites README setup, configuration, security, monitoring, and migration guidance for v3.1.0
Updates references from ADAMANT Foundation to ADAMANT developer community where appropriate

Risk Areas

Payout and reward accounting: review retry-safe reward distribution, pending reward normalization, and payout updates carefully
Secret safety: review encrypted passphrase handling, control socket permissions, prompt behavior, and notification logs
Migration: review LowDB-to-MongoDB migration behavior, block limits, and ADM address validation
Operations: verify locked-start behavior, adm-pool CLI flows, /api/health, MongoDB config, and deployment startup
Dashboard: verify table filtering, sorting, delegate/voter names, mobile layout, and explorer links

Verification

Release PR verification should include:

Release Notes

After merge, publish v3.1.0 with release notes covering:

MongoDB-backed storage and migration from older LowDB data
encrypted passphrase and adm-pool operator workflow
/api/health monitoring
Node.js 22.13.0+ runtime requirement
dashboard filtering/sorting/name-display improvements
payout/reward accounting hardening and retry safety

docs: add a note in the README

…tartup

… socket

…irectory

Feat: Encrypt pool passphrase with operator password, add adm-pool CLI and /api/health

Full security review of server/ and web/ per issue #10. Adds input validation and fail-closed config checks on the untrusted-node and payout-destination paths, and hardens the HTTP API. No reward math, accounting invariants, retry behavior, or signing flow changed. - validate node-supplied voter addresses and block ids before any MongoDB query, DB write, or transaction signing, preventing NoSQL operator injection and malformed payout destinations from a malicious/malformed node response (new ADM_ADDRESS_REGEX and utils.isAdmAddress) - validate maintenancewallet/donatewallet ADM address format and reward/donate percentage ranges at startup, failing closed on a typo - default CORS credentials to false (the API is public, read-only, and cookieless; a wildcard origin with credentials is an invalid combination) - add a generic Express error handler so internal errors and stack traces are not disclosed to clients, and disable the X-Powered-By banner - add focused tests for address validation across distribution, payout, and block parsing Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

…ss validation

Fix: Address security review findings in server and web

… props, add filtering functionality

al-onyxprotocol

gw

martiliones and others added 30 commits April 23, 2023 03:12

docs: add a note in the README

02ac1e6

Merge pull request #2 from Adamant-im/docs/note

bd6b6be

docs: add a note in the README

chore: add dev files and dirs

49fcde4

chore: update dev deps

1913b95

chore: update eslint 8 -> 9

62b84fe

chore: init husky again to remove deprecated stuff

1d61952

chore: add tests script

b30c12e

chore: minor update of dep

4102daa

chore: update vite v4 -> v7

ca532f3

feat: add link to explorer at address cell

1f0ed27

chore: add links at transation table

54befdd

chore: mark whole number part bold

5fd6489

chore: mark whole number part bold

18055f2

chore: update enpoints naming

d476ed8

chore: update svelte 3 -> 5

e5dba6b

chore: update adamant-api

9da85d9

fix: refresh button

4630d1b

chore: minor deps update

3a3f2e6

chore: update small deps

7517342

chore: update eslint to v9

6c605b1

chore: update express

82ad86b

chore: update lowdb

d7b895c

chore: add tags to README

e2e4f5a

chore: update npm scripts and resolve eslint issues

c3ed183

chore: update husky pre-commit

778c2b5

fix: setInterval

3e853ba

fix: setIntreval ms

f491c5c

chore: add stylistic config

b0ca1b8

chore: rename, make exit code constant

c35a1b2

chore: update cors options

1ee272c

massivedev0 and others added 16 commits June 30, 2026 17:49

feat: add delay for unlock prompt to improve user experience during s…

338f082

…tartup

fix: improve unlock failure logging message for clarity

d531971

feat: change log level to info for successful pool unlock via control…

80ea6de

… socket

feat: implement secure control socket handling and per-user runtime d…

608b8f3

…irectory

Merge pull request #13 from Adamant-im/feat/encrypted-passphrase

64b37c9

Feat: Encrypt pool passphrase with operator password, add adm-pool CLI and /api/health

fix: enhance migration logic and tests for block limits and ADM addre…

50ad67c

…ss validation

Merge pull request #14 from Adamant-im/fix/security-review

c45161b

Fix: Address security review findings in server and web

fix: update links in README and footer to point to news.adamant.im

dccde07

feat: add pool lock notifications and corresponding tests

74b87f6

fix: remove unnecessary blank line in maybeUnlockInteractively function

1a19529

feat: enhance TransactionTable and VoterTable with delegate and names…

f9ca358

… props, add filtering functionality

feat: enhance voter metadata handling and update related components

606cd9a

fix: correct formatting for weight percentage display in VoterTable

7583604

feat: update logo display in README for better theme support

39777dc

chore: remove trailing blank line in payout cron

c7ed081

dev-adamant-im mentioned this pull request Jul 1, 2026

[Task] Release v3.1.0 #15

Closed

6 tasks

dev-adamant-im linked an issue Jul 1, 2026 that may be closed by this pull request

[Task] Release v3.1.0 #15

Closed

6 tasks

dev-adamant-im requested review from adamant-al, adamantmm and al-onyxprotocol July 1, 2026 14:25

dev-adamant-im self-assigned this Jul 1, 2026

al-onyxprotocol approved these changes Jul 1, 2026

View reviewed changes

dev-adamant-im merged commit e11affc into master Jul 1, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Chore: Release v3.1.0#16

Chore: Release v3.1.0#16
dev-adamant-im merged 93 commits into
masterfrom
dev

dev-adamant-im commented Jul 1, 2026

Uh oh!

al-onyxprotocol left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Uh oh!

Uh oh!

Conversation

dev-adamant-im commented Jul 1, 2026

Summary

Diff Summary

Runtime, Dependencies, and Tooling

Storage and Migration

Reward, Payout, and Accounting Safety

Secret Safety and Operator Controls

Public API and Monitoring

Dashboard and Web UI

Documentation and Governance

Risk Areas

Verification

Release Notes

Uh oh!

al-onyxprotocol left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants