v1.0.0 Platform

[echobt]

This PR introduces the centralized Platform Server architecture, enabling dynamic challenge management and unified validator deployment.

Summary by CodeRabbit

• New Features

  • New Platform Server application for managing and orchestrating challenges with APIs for validators, submissions, evaluations, and leaderboard management.
  • Unified platform binary supporting both server and validator modes via single CLI.
  • Real-time WebSocket event streaming for challenge updates and server communications.
  • Challenge SDK with HTTP server framework and platform client for improved challenge integration.
  • Container broker for secure WebSocket-based challenge communication.

• Infrastructure

  • Docker compose configurations for streamlined server deployment.
  • Environment configuration examples for server setup.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

Caution

Review failed

The pull request is closed.

📝 Walkthrough

Walkthrough

Introduces a centralized Platform Server as a new Rust crate with comprehensive HTTP APIs, PostgreSQL database integration, WebSocket support, role-based authentication, dynamic challenge orchestration, and task management. Simultaneously introduces a unified platform binary that dispatches to either server or validator modes via CLI. Extends the challenge SDK with new platform client and server modules, modernizing from P2P to centralized architecture. Updates validator-node integration to communicate with the platform server. Adds WebSocket transport to secure container runtime. Refreshes Docker infrastructure, CI/CD workflows, and dependency configurations.

Changes

Cohort / File(s)	Summary
Platform Server Core crates/platform-server/Cargo.toml, crates/platform-server/src/main.rs, crates/platform-server/src/lib.rs	New server crate with complete HTTP/WebSocket infrastructure, database initialization, and router configuration with health, control plane, data API, and dynamic challenge proxy endpoints.
Server API Handlers crates/platform-server/src/api/{auth,challenges,evaluations,leaderboard,submissions,validators}.rs, crates/platform-server/src/api/mod.rs	Six API modules: authentication with role-based access control, challenge configuration management, evaluation submission/retrieval, leaderboard ranking, agent submissions, and validator registration with heartbeat and event broadcasting.
Database Layer crates/platform-server/src/db/{mod,queries,schema}.rs	PostgreSQL integration with connection pooling, comprehensive query functions for validators, submissions, evaluations, leaderboard, challenges, tasks, and network state; includes schema definition with migrations and multi-database support for per-challenge isolation.
Server State & Infrastructure crates/platform-server/src/{state,challenge_proxy,orchestration,data_api}.rs	Application state management with session/event broadcasting, HTTP proxy to challenge containers with health checks and weight fetching, challenge orchestrator integration for Docker-based container management, and data API for task claiming/leasing workflows.
Observability & Security crates/platform-server/src/{observability,rule_engine}.rs	Sentry integration with structured audit logging, rate limiting, and validation rules; audit event tracking for auth, submissions, evaluations, and tasks; rule engine for submission/evaluation/claim validation with per-hotkey rate limiting.
WebSocket Real-Time crates/platform-server/src/websocket/{mod,events,handler}.rs	Broadcast-based WebSocket event system with connection tracking, authentication via bearer tokens, and message handling for real-time platform events (submissions, evaluations, leaderboard updates, validator joins, task claims).
Models crates/platform-server/src/models/mod.rs	Complete data model layer: validators, submissions, evaluations, leaderboards, tasks, challenges, auth sessions, WebSocket events with multiple payload types, and configuration structures.
Dockerfile.server crates/platform-server/Dockerfile	Multi-stage Docker build (chef, planner, builder, runtime) for server with dependency caching, stripped binary optimization, minimal runtime image with healthcheck and OCI labels.
Unified Platform Binary bins/platform/Cargo.toml, bins/platform/src/{main,server,validator}.rs	New binary with CLI dispatching to server or validator subcommands via clap; server mode integrates with new platform-server crate; validator mode delegates to validator-node binary with constructed CLI arguments.
Challenge SDK Modernization crates/challenge-sdk/Cargo.toml, crates/challenge-sdk/src/{lib,error,platform_client,server}.rs	SDK refactored with new centralized client/server architecture: PlatformClient for WebSocket-based challenge-to-server communication, ServerChallenge trait and ChallengeServer for server-mode operation, feature-gated HTTP server, new error variants (Connection, Auth, Config, Io), and updated public exports with deprecation markers.
Validator Integration bins/validator-node/{Cargo.toml,src/{lib,main}.rs}	Validator-node now integrates with platform server: added PlatformServerClient to fetch challenge weights/health, container broker initialization with JWT security, WebSocket communication to broker, and weight submission to centralized server. Enhanced CLI with platform-server, broker-port, and docker-challenges options.
Secure Container Runtime crates/secure-container-runtime/{Cargo.toml,src/{lib,types,ws_transport.rs}, crates/secure-container-runtime/src/bin/container-broker.rs	New WebSocket transport module (run_ws_server, WsConfig, WsClaims, generate_token) supporting JWT authentication and per-challenge connection limits. Container broker binary enhanced with optional WebSocket server (--ws-port, --ws-only) alongside Unix socket, environment-based configuration (BROKER_WS_PORT, BROKER_JWT_SECRET), and dev/strict security modes.
Challenge Orchestrator Updates crates/challenge-orchestrator/src/{docker,evaluator,lib}.rs	Docker containers now receive broker integration (CONTAINER_BROKER_WS_URL, CONTAINER_BROKER_JWT). Evaluator refactored to generic JSON proxy: removed typed EvaluateRequest/Response, added evaluate_generic and proxy_request for flexible per-challenge routing. ChallengeInfo extended with mechanism_id, emission_weight, tasks_count. Health check now returns boolean.
CLI Tools bins/csudo/src/main.rs	Minor refactoring of Monitor command from nested match to flatter structure; preserves functional behavior for challenges, validators, logs, and health subcommands.
Docker & Compose Dockerfile, Dockerfile.full, docker-compose.server.yml, docker-compose.yml, docker/Dockerfile.{challenge,validator}	Dockerfile unified for server/validator with simplified multi-stage (cacher, final-builder) and Ubuntu 24.04 base; Dockerfile.full updated to rust:1.92-bookworm. New docker-compose.server.yml for platform server service with healthcheck and networking. Removed version key from docker-compose.yml.
Configuration & CI/CD .env.server.example, .github/workflows/ci.yml, .githooks/pre-push, Cargo.toml	New environment template for server (database, owner, URLs, logging). CI workflow now requires build/clippy/test for Docker job. Pre-push hook expanded with comprehensive clippy allowances. Workspace members added: crates/platform-server, bins/platform. Dependencies: clap enhanced with "env" feature, reqwest added.

Sequence Diagram(s)

sequenceDiagram
    participant Client as Challenge Client
    participant Server as Platform Server
    participant DB as Database
    participant Broker as Container Broker
    participant Validator as Validator Node

    rect rgb(200, 220, 255)
    Note over Client,Validator: Authentication & Registration
    Client->>Server: POST /api/v1/auth<br/>(hotkey, timestamp, signature)
    Server->>DB: verify_signature() & check owner
    DB-->>Server: valid
    Server->>DB: create session (UUID token)
    Server-->>Client: AuthResponse (token, session_id)
    end

    rect rgb(220, 200, 255)
    Note over Server,DB: Submission & Task Management
    Client->>Server: POST /api/v1/submissions<br/>(miner_hotkey, source_code)
    Server->>DB: compute_agent_hash()
    Server->>DB: create_submission()
    DB-->>Server: submission_id
    Server->>Server: broadcast SubmissionEvent
    Server-->>Client: SubmitAgentResponse (id, agent_hash)
    end

    rect rgb(220, 255, 220)
    Note over Validator,Server: Task Claim & Evaluation Workflow
    Validator->>Server: POST /api/v1/data/tasks/claim<br/>(validator_hotkey)
    Server->>DB: claim_task() atomic check
    DB-->>Server: TaskLease granted
    Server->>Server: broadcast TaskClaimedEvent
    Server-->>Validator: task_id, submission_id, data
    
    Validator->>Broker: establish WebSocket connection
    Broker->>Validator: challenge execution environment
    Validator->>Broker: submit evaluation result
    Broker-->>Validator: ack
    
    Validator->>Server: POST /api/v1/data/results<br/>(agent_hash, score, results)
    Server->>DB: create_evaluation()
    Server->>DB: update_leaderboard()
    Server->>Server: broadcast EvaluationEvent
    Server-->>Validator: evaluation_id
    end

    rect rgb(255, 240, 200)
    Note over Client,Server: Leaderboard & Network State Query
    Client->>Server: GET /api/v1/leaderboard?limit=100
    Server->>DB: get_leaderboard(100)
    DB-->>Server: Vec\<LeaderboardEntry\>
    Server-->>Client: JSON array (rank, agent_hash, score)
    
    Client->>Server: GET /api/v1/challenges/network-state
    Server->>DB: multi-query (epoch, stake, validators)
    DB-->>Server: aggregated state
    Server-->>Client: NetworkStateEvent JSON
    end

Loading

Estimated code review effort

🎯 5 (Critical) | ⏱️ ~120 minutes

---

🐰 A platform grand, with server's hand,
Orchestrates each challenge's land,
WebSockets whisper, tasks align,
Where validators and agents entwine—
Hop along this feature design! 🚀

✨ Finishing touches

• 📝 Generate docstrings

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch dev

---

📜 Recent review details

Configuration used: defaults

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 616dfac and 19d4298.

⛔ Files ignored due to path filters (1)

• Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (59)

• .env.server.example
• .githooks/pre-push
• .github/workflows/ci.yml
• Cargo.toml
• Dockerfile
• Dockerfile.full
• Dockerfile.server
• bins/csudo/src/main.rs
• bins/platform/Cargo.toml
• bins/platform/src/main.rs
• bins/platform/src/server.rs
• bins/platform/src/validator.rs
• bins/validator-node/Cargo.toml
• bins/validator-node/src/lib.rs
• bins/validator-node/src/main.rs
• crates/challenge-orchestrator/src/docker.rs
• crates/challenge-orchestrator/src/evaluator.rs
• crates/challenge-orchestrator/src/lib.rs
• crates/challenge-sdk/Cargo.toml
• crates/challenge-sdk/src/error.rs
• crates/challenge-sdk/src/lib.rs
• crates/challenge-sdk/src/platform_client.rs
• crates/challenge-sdk/src/server.rs
• crates/core/src/schema_guard.rs
• crates/network/src/node.rs
• crates/platform-server/Cargo.toml
• crates/platform-server/Dockerfile
• crates/platform-server/src/api/auth.rs
• crates/platform-server/src/api/challenges.rs
• crates/platform-server/src/api/evaluations.rs
• crates/platform-server/src/api/leaderboard.rs
• crates/platform-server/src/api/mod.rs
• crates/platform-server/src/api/submissions.rs
• crates/platform-server/src/api/validators.rs
• crates/platform-server/src/challenge_proxy.rs
• crates/platform-server/src/data_api.rs
• crates/platform-server/src/db/mod.rs
• crates/platform-server/src/db/queries.rs
• crates/platform-server/src/db/schema.rs
• crates/platform-server/src/lib.rs
• crates/platform-server/src/main.rs
• crates/platform-server/src/models/mod.rs
• crates/platform-server/src/observability.rs
• crates/platform-server/src/orchestration.rs
• crates/platform-server/src/rule_engine.rs
• crates/platform-server/src/state.rs
• crates/platform-server/src/websocket/events.rs
• crates/platform-server/src/websocket/handler.rs
• crates/platform-server/src/websocket/mod.rs
• crates/rpc-server/src/jsonrpc.rs
• crates/secure-container-runtime/Cargo.toml
• crates/secure-container-runtime/src/bin/container-broker.rs
• crates/secure-container-runtime/src/lib.rs
• crates/secure-container-runtime/src/types.rs
• crates/secure-container-runtime/src/ws_transport.rs
• docker-compose.server.yml
• docker-compose.yml
• docker/Dockerfile.challenge
• docker/Dockerfile.validator

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}