cryptorugmunch
e13bd4d774
Adds missing standard artifacts: - README.md (if missing) - AGENTS.md (AI agent contract) - PLAN.md (current sprint) - STATUS.md (where we are) - DEVELOPMENT.md (dev workflow) - DEPLOYMENT.md (deploy procedure) - TESTING.md (test strategy) - DECISIONS.md (ADR index + templates) - .github/CODEOWNERS - .github/workflows/ci.yml Preserves all existing artifacts. Refs: RugMunchMedia/fleet-template
150 lines
5.8 KiB
Markdown
150 lines
5.8 KiB
Markdown
# WalletPress — Build Progress
|
|
|
|
## Complete (41/41 features)
|
|
|
|
### Trust Architecture
|
|
- [x] 55-chain wallet generation (BIP39/BIP44/BIP49/BIP84)
|
|
- [x] AES-256-GCM + Argon2id encrypted vault
|
|
- [x] Deterministic generation (same mnemonic → same address)
|
|
- [x] Keccak256 fix for EVM addresses (was using wrong hash)
|
|
- [x] 12/12 BIP39 test vectors pass (verified against web3.py, nacl, coincurve)
|
|
- [x] Mnenomic wordlist (2048 BIP39 words)
|
|
- [x] TRON address format (T-prefix base58)
|
|
- [x] XRP address format (r-prefix base58 with 0x7a)
|
|
- [x] DOT/KSM SS58 address encoding
|
|
- [x] Monero real address generation (95-char, starts with 4)
|
|
- [x] Wallet generation modes (client-side, server-side, ephemeral)
|
|
|
|
### API & Storage
|
|
- [x] FastAPI backend (~2000+ lines, 50+ endpoints)
|
|
- [x] SQLite vault with WAL mode and FTS5 full-text search
|
|
- [x] API key authentication with scoped permissions
|
|
- [x] Key store with HMAC verification
|
|
- [x] Rate limiting (per-IP + per-API-key token bucket)
|
|
- [x] CORS middleware
|
|
- [x] Append-only immutable audit trail (JSONL)
|
|
- [x] Global exception handler (clean JSON, no tracebacks)
|
|
- [x] Request logging middleware
|
|
|
|
### Balance Checking & Transactions
|
|
- [x] EVM balance (23 chains via eth_getBalance)
|
|
- [x] Solana balance (public RPC)
|
|
- [x] TRON balance (TronGrid API)
|
|
- [x] Bitcoin-family balances (Blockchair + blockchain.info)
|
|
- [x] Cosmos balances (LCD REST API)
|
|
- [x] Substrate balances (Subscan API)
|
|
- [x] Algorand, Stellar, Filecoin, Ripple, Cardano balances
|
|
- [x] Transaction broadcast (EVM, Solana, BTC-family, TRON via RPC)
|
|
|
|
### Proof of Generation (Big Idea)
|
|
- [x] Merkle tree attestation per wallet
|
|
- [x] SQLite merkle root commitment
|
|
- [x] Arweave commitment stub
|
|
- [x] `/proof/verify/{id}` endpoint
|
|
- [x] `/proof/roots` listing
|
|
- [x] `/proof/stats` with commitment options
|
|
|
|
### Security
|
|
- [x] TOTP 2FA (Google Authenticator compatible)
|
|
- [x] IP allowlisting middleware (`WP_ALLOWED_IPS`)
|
|
- [x] Rate limit middleware (token bucket)
|
|
- [x] security.txt (RFC 9116)
|
|
- [x] CONTRIBUTING.md
|
|
- [x] Reproducible Docker builds (SOURCE_DATE_EPOCH)
|
|
- [x] Build hash verification script
|
|
|
|
### Webhooks & Notifications
|
|
- [x] Webhook delivery with 3 retries (exponential backoff)
|
|
- [x] HMAC-SHA256 signed payloads
|
|
- [x] Delivery logging (status, code, error, attempt count)
|
|
- [x] Webhook test endpoint
|
|
- [x] Webhook retry endpoint
|
|
- [x] Webhook event replay (by date range)
|
|
- [x] Email notifications (SMTP, 5 templates)
|
|
- [x] WebSocket event stream at `/ws/events`
|
|
|
|
### WordPress Plugin
|
|
- [x] Free tier (3 chains: BTC, ETH, SOL)
|
|
- [x] Wallet connect (MetaMask, Phantom)
|
|
- [x] Token gating (WalletPressGate shortcode)
|
|
- [x] Crypto payments (WalletPressPay shortcode)
|
|
- [x] Mobile responsive CSS (4 breakpoints: 320/480/768/1024)
|
|
- [x] Admin dashboard with setup wizard
|
|
- [x] Vault browser with search/filter
|
|
- [x] API key management
|
|
- [x] Webhook configuration
|
|
- [x] Alert configuration
|
|
- [x] Audit trail viewer
|
|
|
|
### Market-Leading Features
|
|
- [x] Batch CSV import (1000+ wallets at once)
|
|
- [x] Wallet groups/folders (hierarchical organization)
|
|
- [x] Wallet compatibility report (MetaMask, Ledger, Phantom, etc.)
|
|
- [x] Gas estimation per chain (funding suggestions)
|
|
- [x] Portfolio dashboard (USD totals, by chain, by group)
|
|
- [x] Audit log CSV export (compliance-ready)
|
|
- [x] Seed phrase repair (Levenshtein BIP39 word matching)
|
|
- [x] Team access keys (admin/operator/viewer roles)
|
|
- [x] Python SDK (WalletPress client class)
|
|
- [x] Paper wallet PDF (reportlab, QR code, printable)
|
|
- [x] Wallet birth certificate (provenance PDF with proof hash)
|
|
- [x] QR codes on all wallet responses (`?include_qr=true`)
|
|
- [x] Temporal wallet auto-cleanup (background task)
|
|
- [x] Backup/restore CLI (`walletpress backup`, `walletpress restore`)
|
|
|
|
### Hosted & Marketplace
|
|
- [x] User registration/login
|
|
- [x] Plan tiers (Free/Starter $49/Pro $199/Enterprise $499)
|
|
- [x] Usage tracking and daily limits
|
|
- [x] Stripe subscription stub
|
|
- [x] x402 marketplace (separate service, $0.01/wallet)
|
|
|
|
### License & Pricing
|
|
- [x] Community edition (free, 3 chains)
|
|
- [x] Pro license ($199 one-time, 55 chains, all features)
|
|
- [x] Hosted subscription ($29/mo)
|
|
- [x] License key generation (HMAC-signed JWT)
|
|
- [x] License middleware (enforces tier limits)
|
|
- [x] `walletpress deploy` (requires Pro license)
|
|
- [x] `walletpress doctor` (shows 9+ setup issues)
|
|
|
|
### CLI
|
|
- [x] `walletpress serve` (start API server)
|
|
- [x] `walletpress init` (initialize data directory)
|
|
- [x] `walletpress generate` (generate wallet from CLI)
|
|
- [x] `walletpress validate` (validate address format)
|
|
- [x] `walletpress deploy` (one-command production setup)
|
|
- [x] `walletpress doctor` (system diagnostics)
|
|
- [x] `walletpress backup` / `walletpress restore`
|
|
- [x] Help support for all commands
|
|
|
|
### Marketing Site
|
|
- [x] Landing page (v2 design, dark theme)
|
|
- [x] Pricing page (buy.html with real QR codes via qrcodejs)
|
|
- [x] Feature comparison page
|
|
- [x] Documentation page
|
|
- [x] BIP39 test vectors page (verify.html)
|
|
- [x] Privacy policy (privacy.html)
|
|
- [x] Terms of service (terms.html)
|
|
- [x] Contact page
|
|
- [x] Clean robots.txt (no cross-domain leakage)
|
|
- [x] Proper sitemap.xml
|
|
|
|
### Strategy & Documentation
|
|
- [x] STRATEGY.md (complete go-to-market plan)
|
|
- [x] ROADMAP.md (10 improvements for market leadership)
|
|
- [x] ROADMAP_V2.md (15 market-leading features)
|
|
- [x] Open source README.md (31 lines, minimal, no hand-holding)
|
|
- [x] Installers documentation for paid version
|
|
|
|
## Known Issues
|
|
- TRX, DOT, XRP format bugs from earlier fixed
|
|
- x402 marketplace is a separate service (not part of self-hosted)
|
|
- `email_notify.py` renamed to avoid stdlib shadow
|
|
- All singletons need clearing between test runs
|
|
|
|
## Build Metrics
|
|
- Backend: ~3500+ lines of Python across 20+ files
|
|
- WP Plugin: ~1400+ lines (PHP, JS, CSS)
|
|
- Documentation: ~500+ lines (markdown)
|
|
- Test vectors: 12/12 pass, BTC/ETH/SOL verified against industry standards
|