Merge pull request #22 from sekuba/v2-backend

V2 backend and tings

Author: sekuba

.env.example

@@ -1,26 +1,27 @@
-# ============================================================
-# Required: Mainnet Configuration
-# ============================================================
+# Slashmon frontend build configuration.
+# Every VITE_* value is shipped to every browser. Secrets do not belong here.
 
-# L1 RPC URL (supports comma-separated URLs for automatic failover)
+# Production Pages builds use https://api.slashveto.me. Empty means same-origin
+# for local development or a combined frontend/backend deployment.
+VITE_API_BASE_URL=
+
+# Optional development-only same-origin proxy. This lets a localhost Vite UI
+# exercise a production backend without weakening that backend's exact CORS
+# origin. Keep VITE_API_BASE_URL empty when using it.
+# SLASHMON_DEV_API_PROXY_TARGET=https://api.slashveto.me
+
+# URL path where the static PWA is installed. Keep / for local development and
+# dedicated same-origin hosting. /slashmon/ supports a public GitHub project
+# Pages monitor, but private notification watches are disabled on *.github.io.
+VITE_BASE_PATH=/
+
+# Public Ethereum RPCs used by the browser's independent L1 view.
+# Comma-separated URLs enable failover. A missing value fails visibly instead
+# of probing the browser user's localhost.
 VITE_L1_RPC_URL=https://1rpc.io/eth
 VITE_REGISTRY_ADDRESS=0x35b22e09Ee0390539439E24f06Da43D83f90e298
-
-# testnet
 VITE_TESTNET_L1_RPC_URL=https://0xrpc.io/sep
 VITE_TESTNET_REGISTRY_ADDRESS=0xA0BFb1B494FB49041e5c6e8c2C1BE09cD171c6Ba
 
-# ============================================================
-# Performance & Behavior Configuration (Optional)
-# All values below have sensible defaults and can be omitted
-# ============================================================
-
-# Polling & Update Intervals (in milliseconds)
-# VITE_POLL_INTERVAL=180000                 # Background L1 poll interval (default: 3 minutes)
-# VITE_REALTIME_COUNTDOWN_INTERVAL=1000     # Countdown timer update interval (default: 1 second)
-
-# UI/UX Configuration
-# VITE_HOURS_THRESHOLD_FOR_DAY_DISPLAY=24   # Hours before showing days (default: 24)
-
-# Debug Configuration
-# VITE_CONSOLE_LOG_PROBABILITY=0.2          # Probability of logging polls (0-1, default: 0.2 = 20%)
+# The Web Push public key is deliberately not a VITE_* variable. The frontend
+# fetches it from GET /api/v2/config; its private half stays on the backend.

.github/workflows/ci.yml

@@ -0,0 +1,45 @@
+name: Checks
+
+on:
+  pull_request:
+  push:
+    branches-ignore: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          run_install: false
+
+      - name: Get pnpm store directory
+        id: pnpm-cache
+        run: echo "STORE_PATH=$(pnpm store path --silent)" >> "$GITHUB_OUTPUT"
+
+      - name: Cache pnpm store
+        uses: actions/cache@v4
+        with:
+          path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
+          key: ${{ runner.os }}-pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Lint, test, syntax-check, and build
+        run: pnpm check

.github/workflows/deploy.yml

@@ -1,4 +1,4 @@
-name: Deploy to GitHub Pages
+name: Deploy public monitor to GitHub Pages
 
 on:
   push:
@@ -26,7 +26,7 @@ jobs:
         with:
           node-version: '24'
 
-      - name: Setup PNPM
+      - name: Setup pnpm
         uses: pnpm/action-setup@v4
         with:
           run_install: false
@@ -35,7 +35,8 @@ jobs:
         id: pnpm-cache
         run: echo "STORE_PATH=$(pnpm store path --silent)" >> "$GITHUB_OUTPUT"
 
-      - uses: actions/cache@v4
+      - name: Cache pnpm store
+        uses: actions/cache@v4
         with:
           path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
           key: ${{ runner.os }}-pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -45,13 +46,49 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
-      - name: Build
-        run: pnpm build
+      - name: Require reachable HTTPS endpoints for the PWA
         env:
-          VITE_L1_RPC_URL: ${{ secrets.VITE_L1_RPC_URL }}
-          VITE_REGISTRY_ADDRESS: ${{ secrets.VITE_REGISTRY_ADDRESS }}
-          VITE_TESTNET_L1_RPC_URL: ${{ secrets.VITE_TESTNET_L1_RPC_URL }}
-          VITE_TESTNET_REGISTRY_ADDRESS: ${{ secrets.VITE_TESTNET_REGISTRY_ADDRESS }}
+          PUBLIC_API_ORIGIN: https://api.slashveto.me
+          MAINNET_L1_RPC_URLS: ${{ vars.VITE_L1_RPC_URL }}
+          TESTNET_L1_RPC_URLS: ${{ vars.VITE_TESTNET_L1_RPC_URL }}
+        run: |
+          require_https_list() {
+            local name="$1"
+            local value="$2"
+
+            if [[ -z "$value" ]]; then
+              echo "Set the $name repository variable; Pages must never ship a localhost fallback."
+              return 1
+            fi
+
+            local endpoints
+            IFS=',' read -ra endpoints <<< "$value"
+            for endpoint in "${endpoints[@]}"; do
+              endpoint="${endpoint#"${endpoint%%[![:space:]]*}"}"
+              endpoint="${endpoint%"${endpoint##*[![:space:]]}"}"
+              if [[ "$endpoint" != https://* ]]; then
+                echo "$name must contain only HTTPS URLs."
+                return 1
+              fi
+            done
+          }
+
+          if [[ -z "$PUBLIC_API_ORIGIN" || "$PUBLIC_API_ORIGIN" != https://* || "$PUBLIC_API_ORIGIN" == *,* ]]; then
+            echo "VITE_API_BASE_URL must be one public HTTPS API origin."
+            exit 1
+          fi
+          require_https_list VITE_L1_RPC_URL "$MAINNET_L1_RPC_URLS"
+          require_https_list VITE_TESTNET_L1_RPC_URL "$TESTNET_L1_RPC_URLS"
+
+      - name: Lint, test, syntax-check, and build
+        run: pnpm check
+        env:
+          VITE_API_BASE_URL: https://api.slashveto.me
+          VITE_BASE_PATH: ${{ vars.VITE_BASE_PATH || '/slashmon/' }}
+          VITE_L1_RPC_URL: ${{ vars.VITE_L1_RPC_URL }}
+          VITE_REGISTRY_ADDRESS: ${{ vars.VITE_REGISTRY_ADDRESS }}
+          VITE_TESTNET_L1_RPC_URL: ${{ vars.VITE_TESTNET_L1_RPC_URL }}
+          VITE_TESTNET_REGISTRY_ADDRESS: ${{ vars.VITE_TESTNET_REGISTRY_ADDRESS }}
 
       - name: Setup Pages
         uses: actions/configure-pages@v4

README.md

@@ -1,15 +1,66 @@
-# Aztec Slashing Monitor
+# Slashmon
 
-This is a tool by and for the [Slash Veto Council](https://github.com/aztec-slash-veto/council/) and the Aztec community. It shows slashing rounds before they execute, including the targeted validators, amounts, veto status, and precomputed payload address.
+Slashmon watches Aztec slashing and has two deliberately separate parts:
 
-The monitor discovers the canonical Rollup, Slasher, and SlashingProposer from Aztec's stable Registry contract. It checks that the contracts point back to each other and follows Registry upgrades automatically.
+- **Monitor** is a browser-only view of public Ethereum state. It resolves the
+  canonical Aztec contracts and checks slashing rounds directly through public
+  L1 RPCs. Its on-page details panel can select a browser-local RPC and inspect
+  the resolved deployment metadata.
+- **PINGME** is the alerting UI for the backend. The backend journals early
+  offenses from one Aztec node, verifies L1 slashing state, and sends matched
+  alerts through Telegram or Web Push.
 
-See [V5_UPGRADE_REVIEW.md](V5_UPGRADE_REVIEW.md) for the contract/source review, cutover details, and monitor impact.
+Node-local offenses are early warnings, not consensus. Slashmon labels them
+`pending`. Ethereum observations are labelled `confirmed`. The backend never
+turns one node's opinion into L1 truth.
 
-To run it locally:
+## Repository
 
-- Use Node 24.
-- Copy [.env.example](.env.example) to `.env` and optionally replace the public RPC endpoints.
-- Run `pnpm install` and `pnpm dev`.
+- `src/` — React/Vite PWA containing Monitor and PINGME
+- `collector/` — Node backend, SQLite journal, and notification delivery
+- [`docs/architecture.md`](docs/architecture.md) — data flow and trust boundaries
+- [`docs/runbook.md`](docs/runbook.md) — production deployment and operations
+- [`docs/privacy.md`](docs/privacy.md) — stored data and provider exposure
 
-Mainnet is the default. Add `?network=testnet` to the URL for Sepolia testnet.
+The ignored `apiReference.md` and `onchainSources.md` files are research
+material. Runtime behavior must live in committed code, ABIs, and tests.
+
+## Development
+
+Use Node 24 and the pinned pnpm release:
+
+```bash
+corepack enable
+pnpm install
+cp .env.example .env
+cp collector/.env.example collector/.env
+```
+
+Run the two processes in separate terminals:
+
+```bash
+pnpm dev
+pnpm dev:backend
+```
+
+For local cross-origin development, set
+`VITE_API_BASE_URL=http://127.0.0.1:8790`; the backend example already allows
+`http://localhost:5173`. Alternatively leave `VITE_API_BASE_URL` empty and set
+`SLASHMON_DEV_API_PROXY_TARGET` for Vite's same-origin development proxy.
+
+Run the complete quality gate with:
+
+```bash
+pnpm check
+```
+
+All `VITE_*` values are public browser configuration. Backend RPC credentials,
+Telegram tokens, and VAPID private keys belong only in `collector/.env` or the
+production environment file.
+
+Notification watches use a bearer capability stored by browser origin. Host a
+production PINGME installation on a dedicated origin and do not add third-party
+scripts. A shared GitHub Pages origin is suitable only for the public Monitor.
+
+The destructive one-time backend switch is documented in the runbook and runs
+as `scripts/switch-backend.sh --fresh`.

SLASHING_DURATIONS.md

@@ -1,20 +1,30 @@
-# Aztec admin JSON-RPC endpoint. Keep this port private.
-AZTEC_ADMIN_URL=http://127.0.0.1:8880
+# Backend identity and browser origin.
+SLASHMON_NETWORK=mainnet
+SLASHMON_PUBLIC_URL=http://localhost:5173
+BACKEND_CORS_ORIGIN=http://localhost:5173
 
-# API key printed by the Aztec node at startup. Leave unset only if admin API
-# authentication was explicitly disabled on the local node.
+# Public node RPC and private admin RPC for the same Aztec node.
+AZTEC_NODE_URL=http://127.0.0.1:8080
+AZTEC_NODE_API_KEY=
+AZTEC_ADMIN_URL=http://127.0.0.1:8880
 AZTEC_ADMIN_API_KEY=
 
-# Collector storage and polling.
-COLLECTOR_DATABASE_PATH=./data/offenses.sqlite
-COLLECTOR_POLL_INTERVAL_MS=15000
-COLLECTOR_MAX_BACKOFF_MS=60000
-COLLECTOR_REQUEST_TIMEOUT_MS=10000
-COLLECTOR_STALE_AFTER_MS=60000
-COLLECTOR_WITHDRAW_AFTER_MISSED_POLLS=3
+# Comma-separated Ethereum RPCs. The network selects the chain and Registry.
+L1_RPC_URL=http://127.0.0.1:8545
+# L1_REGISTRY_ADDRESS=
+L1_SLASH_LOG_LOOKBACK_BLOCKS=50000
+
+# Enable Telegram only when both values are set.
+TELEGRAM_BOT_TOKEN=
+TELEGRAM_BOT_USERNAME=
+
+# Enable Web Push only when all three values are set.
+VAPID_SUBJECT=
+VAPID_PUBLIC_KEY=
+VAPID_PRIVATE_KEY=
 
-# Read-only HTTP API. It binds to loopback by default.
-COLLECTOR_BIND_HOST=127.0.0.1
-COLLECTOR_PORT=8790
-COLLECTOR_CORS_ORIGIN=*
-COLLECTOR_LOG_LEVEL=info
+BACKEND_DATABASE_PATH=./data/slashmon.sqlite
+BACKEND_BIND_HOST=127.0.0.1
+BACKEND_PORT=8790
+BACKEND_TRUST_PROXY=false
+BACKEND_LOG_LEVEL=info