23808195253

Committed 31 Mar 2026 04:28PM UTC coverage: 10.941% (-0.3%) from 11.195%

Build # 23808195253

Build Type

push

github

Committed by Martian Congress

Commit Message

feat: civic wallet migration — MG_ OP_RETURN on-chain identity swap

New feature allowing citizens to migrate their civic wallet to a new
address. Follows the same OP_RETURN standard as other on-chain actions:

  MG_<new_civic_address>

The flow:
1. User generates a new wallet (new mnemonic → new civic address)
2. Signs a migration tx from OLD address with OP_RETURN MG_<new_addr>
3. Broadcasts to blockchain
4. Blockchain scanner picks up MG_ tx and completes the swap

Architecture: The web UI only records the broadcast (status='broadcast').
The blockchain scanner is the authority that completes the migration
(status='confirmed') — Laravel is just a reference implementation,
the blockchain is the trail of truth.

Includes:
- MigrationController with initiate/confirm/history endpoints
- civic_wallet_migrations table (preserves full audit trail)
- 30-day rate limit on migrations
- Full-page wizard UI (4 steps: intent → generate → sign → complete)
- Old wallet preserved as HD wallet (funds remain accessible)
- Warning: do NOT discard old seed before moving funds

Scanner integration (track_blockchain.py) to be added in next session
to handle the MG_ head code and complete the DB swap.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Coverage Stats

0 of 129 new or added lines in 1 file covered. (0.0%)

620 of 5667 relevant lines covered (10.94%)

1.5 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

0.0

/app/Http/Controllers/Wallet/MigrationController.php

<?php

namespace App\Http\Controllers\Wallet;

use App\Http\Controllers\Controller;
use App\Models\Citizen;
use App\Models\CivicWallet;
use App\Models\HDWallet;
use App\Models\Profile;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\DB;
use Illuminate\Support\Facades\Log;

class MigrationController extends Controller
{
    /**
     * Show the civic wallet migration page.
     */
    public function show()
    {
        if (! Auth::check()) {
            return redirect('/login');
        }

        $uid = Auth::user()->id;
        $profile = Profile::where('userid', $uid)->first();

        if (! $profile) {
            return redirect('/twofa');
        }
        if ($profile->openchallenge == 1 || is_null($profile->openchallenge)) {
            return redirect('/twofachallenge');
        }

        $civic = CivicWallet::where('user_id', $uid)->first();
        $citizen = Citizen::where('userid', $uid)->first();

        // Get migration history
        $migrations = DB::table('civic_wallet_migrations')
            ->where('user_id', $uid)
            ->orderBy('created_at', 'desc')
            ->get();

        $data = json_decode(file_get_contents('/home/mars/constitution/marswallet.json'), true);

        return view('wallet.migrate', [
            'civic_wallet' => $civic,
            'citizen' => $citizen,
            'migrations' => $migrations,
            'SALT' => $data['salt'],
            'iv' => $data['iv'],
            'wallet_open' => $profile->civic_wallet_open,
        ]);
    }

    /**
     * Step 1: Register the migration intent.
     * Client will then sign a tx from the old address with OP_RETURN announcing the new address.
     */
    public function initiate(Request $request)
    {
        if (! Auth::check()) {
            return response()->json(['error' => 'Unauthorized'], 401);
        }

        $request->validate([
            'old_address' => 'required|string|max:50',
            'new_address' => 'required|string|max:50',
        ]);

        $uid = Auth::user()->id;
        $oldAddr = $request->input('old_address');
        $newAddr = $request->input('new_address');

        // Verify old address belongs to this user
        $civic = CivicWallet::where('user_id', $uid)->where('public_addr', $oldAddr)->first();
        if (! $civic) {
            return response()->json(['error' => 'Old civic wallet not found for this user'], 404);
        }

        // Check new address isn't already claimed
        $existing = CivicWallet::where('public_addr', $newAddr)->first();
        if ($existing && $existing->user_id !== $uid) {
            return response()->json(['error' => 'New address already belongs to another user'], 409);
        }

        // Create pending migration record
        $migrationId = DB::table('civic_wallet_migrations')->insertGetId([
            'user_id' => $uid,
            'old_address' => $oldAddr,
            'new_address' => $newAddr,
            'old_encrypted_seed' => $civic->encrypted_seed,
            'status' => 'pending',
            'created_at' => now(),
            'updated_at' => now(),
        ]);

        Log::info("Civic wallet migration initiated for user {$uid}: {$oldAddr} → {$newAddr} (migration #{$migrationId})");

        return response()->json([
            'success' => true,
            'migration_id' => $migrationId,
            'message' => 'Migration initiated. Sign a transaction from your old address to confirm.',
            'op_return_data' => 'MIGRATE:' . $newAddr,
        ]);
    }

    /**
     * Step 2: Confirm the migration with the broadcast txid.
     * The client has signed and broadcast a tx from old_address with OP_RETURN "MIGRATE:<new_address>".
     */
    public function confirm(Request $request)
    {
        if (! Auth::check()) {
            return response()->json(['error' => 'Unauthorized'], 401);
        }

        $request->validate([
            'migration_id' => 'required|integer',
            'txid' => 'required|string|max:200',
            'encrypted_seed' => 'required|string',
        ]);

        $uid = Auth::user()->id;
        $migrationId = $request->input('migration_id');
        $txid = $request->input('txid');
        $encryptedSeed = $request->input('encrypted_seed');

        $migration = DB::table('civic_wallet_migrations')
            ->where('id', $migrationId)
            ->where('user_id', $uid)
            ->where('status', 'pending')
            ->first();

        if (! $migration) {
            return response()->json(['error' => 'Pending migration not found'], 404);
        }

        try {
            DB::beginTransaction();

            // 1. Update migration record with txid
            DB::table('civic_wallet_migrations')
                ->where('id', $migrationId)
                ->update([
                    'migration_txid' => $txid,
                    'status' => 'confirmed',
                    'confirmed_at' => now(),
                    'updated_at' => now(),
                ]);

            // 2. Preserve old civic wallet as HD wallet (funds remain accessible)
            $oldHd = HDWallet::where('user_id', $uid)
                ->where('public_addr', $migration->old_address)
                ->first();

            if (! $oldHd) {
                HDWallet::create([
                    'user_id' => $uid,
                    'wallet_type' => 'Migrated',
                    'public_addr' => $migration->old_address,
                    'encrypted_seed' => $migration->old_encrypted_seed,
                ]);
            }

            // 3. Update civic wallet to new address + seed
            $civic = CivicWallet::where('user_id', $uid)->first();
            if ($civic) {
                $civic->public_addr = $migration->new_address;
                $civic->encrypted_seed = $encryptedSeed;
                $civic->save();
            }

            // 4. Update citizen record
            $citizen = Citizen::where('userid', $uid)->first();
            if ($citizen) {
                $citizen->public_address = $migration->new_address;
                $citizen->save();
            }

            // 5. Reset wallet session
            $profile = Profile::where('userid', $uid)->first();
            if ($profile) {
                $profile->civic_wallet_open = 0;
                $profile->wallet_open = 0;
                $profile->save();
            }

            DB::commit();

            Log::info("Civic wallet migration confirmed for user {$uid}: {$migration->old_address} → {$migration->new_address} (txid: {$txid})");

            return response()->json([
                'success' => true,
                'old_address' => $migration->old_address,
                'new_address' => $migration->new_address,
                'txid' => $txid,
                'message' => 'Civic wallet migrated successfully. Old wallet preserved as HD wallet. Please reconnect to use your new civic identity.',
            ]);
        } catch (\Exception $e) {
            DB::rollBack();
            Log::error("Civic wallet migration failed for user {$uid}: " . $e->getMessage());

            return response()->json(['error' => 'Migration failed: ' . $e->getMessage()], 500);
        }
    }

    /**
     * Get migration history for the current user.
     */
    public function history()
    {
        if (! Auth::check()) {
            return response()->json(['error' => 'Unauthorized'], 401);
        }

        $migrations = DB::table('civic_wallet_migrations')
            ->where('user_id', Auth::id())
            ->orderBy('created_at', 'desc')
            ->get();

        return response()->json($migrations);
    }
}

1	<?php
2
3	namespace App\Http\Controllers\Wallet;
4
5	use App\Http\Controllers\Controller;
6	use App\Models\Citizen;
7	use App\Models\CivicWallet;
8	use App\Models\HDWallet;
9	use App\Models\Profile;
10	use Illuminate\Http\Request;
11	use Illuminate\Support\Facades\Auth;
12	use Illuminate\Support\Facades\DB;
13	use Illuminate\Support\Facades\Log;
14
15	class MigrationController extends Controller
16	{
17	/**
18	* Show the civic wallet migration page.
19	*/
NEW 20	public function show()	×
21	{
NEW 22	if (! Auth::check()) {	×
NEW 23	return redirect('/login');	×
24	}
25
NEW 26	$uid = Auth::user()->id;	×
NEW 27	$profile = Profile::where('userid', $uid)->first();	×
28
NEW 29	if (! $profile) {	×
NEW 30	return redirect('/twofa');	×
31	}
NEW 32	if ($profile->openchallenge == 1 \|\| is_null($profile->openchallenge)) {	×
NEW 33	return redirect('/twofachallenge');	×
34	}
35
NEW 36	$civic = CivicWallet::where('user_id', $uid)->first();	×
NEW 37	$citizen = Citizen::where('userid', $uid)->first();	×
38
39	// Get migration history
NEW 40	$migrations = DB::table('civic_wallet_migrations')	×
NEW 41	->where('user_id', $uid)	×
NEW 42	->orderBy('created_at', 'desc')	×
NEW 43	->get();	×
44
NEW 45	$data = json_decode(file_get_contents('/home/mars/constitution/marswallet.json'), true);	×
46
NEW 47	return view('wallet.migrate', [	×
NEW 48	'civic_wallet' => $civic,	×
NEW 49	'citizen' => $citizen,	×
NEW 50	'migrations' => $migrations,	×
NEW 51	'SALT' => $data['salt'],	×
NEW 52	'iv' => $data['iv'],	×
NEW 53	'wallet_open' => $profile->civic_wallet_open,	×
NEW 54	]);	×
55	}
56
57	/**
58	* Step 1: Register the migration intent.
59	* Client will then sign a tx from the old address with OP_RETURN announcing the new address.
60	*/
NEW 61	public function initiate(Request $request)	×
62	{
NEW 63	if (! Auth::check()) {	×
NEW 64	return response()->json(['error' => 'Unauthorized'], 401);	×
65	}
66
NEW 67	$request->validate([	×
NEW 68	'old_address' => 'required\|string\|max:50',	×
NEW 69	'new_address' => 'required\|string\|max:50',	×
NEW 70	]);	×
71
NEW 72	$uid = Auth::user()->id;	×
NEW 73	$oldAddr = $request->input('old_address');	×
NEW 74	$newAddr = $request->input('new_address');	×
75
76	// Verify old address belongs to this user
NEW 77	$civic = CivicWallet::where('user_id', $uid)->where('public_addr', $oldAddr)->first();	×
NEW 78	if (! $civic) {	×
NEW 79	return response()->json(['error' => 'Old civic wallet not found for this user'], 404);	×
80	}
81
82	// Check new address isn't already claimed
NEW 83	$existing = CivicWallet::where('public_addr', $newAddr)->first();	×
NEW 84	if ($existing && $existing->user_id !== $uid) {	×
NEW 85	return response()->json(['error' => 'New address already belongs to another user'], 409);	×
86	}
87
88	// Create pending migration record
NEW 89	$migrationId = DB::table('civic_wallet_migrations')->insertGetId([	×
NEW 90	'user_id' => $uid,	×
NEW 91	'old_address' => $oldAddr,	×
NEW 92	'new_address' => $newAddr,	×
NEW 93	'old_encrypted_seed' => $civic->encrypted_seed,	×
NEW 94	'status' => 'pending',	×
NEW 95	'created_at' => now(),	×
NEW 96	'updated_at' => now(),	×
NEW 97	]);	×
98
NEW 99	Log::info("Civic wallet migration initiated for user {$uid}: {$oldAddr} → {$newAddr} (migration #{$migrationId})");	×
100
NEW 101	return response()->json([	×
NEW 102	'success' => true,	×
NEW 103	'migration_id' => $migrationId,	×
NEW 104	'message' => 'Migration initiated. Sign a transaction from your old address to confirm.',	×
NEW 105	'op_return_data' => 'MIGRATE:' . $newAddr,	×
NEW 106	]);	×
107	}
108
109	/**
110	* Step 2: Confirm the migration with the broadcast txid.
111	* The client has signed and broadcast a tx from old_address with OP_RETURN "MIGRATE:<new_address>".
112	*/
NEW 113	public function confirm(Request $request)	×
114	{
NEW 115	if (! Auth::check()) {	×
NEW 116	return response()->json(['error' => 'Unauthorized'], 401);	×
117	}
118
NEW 119	$request->validate([	×
NEW 120	'migration_id' => 'required\|integer',	×
NEW 121	'txid' => 'required\|string\|max:200',	×
NEW 122	'encrypted_seed' => 'required\|string',	×
NEW 123	]);	×
124
NEW 125	$uid = Auth::user()->id;	×
NEW 126	$migrationId = $request->input('migration_id');	×
NEW 127	$txid = $request->input('txid');	×
NEW 128	$encryptedSeed = $request->input('encrypted_seed');	×
129
NEW 130	$migration = DB::table('civic_wallet_migrations')	×
NEW 131	->where('id', $migrationId)	×
NEW 132	->where('user_id', $uid)	×
NEW 133	->where('status', 'pending')	×
NEW 134	->first();	×
135
NEW 136	if (! $migration) {	×
NEW 137	return response()->json(['error' => 'Pending migration not found'], 404);	×
138	}
139
140	try {
NEW 141	DB::beginTransaction();	×
142
143	// 1. Update migration record with txid
NEW 144	DB::table('civic_wallet_migrations')	×
NEW 145	->where('id', $migrationId)	×
NEW 146	->update([	×
NEW 147	'migration_txid' => $txid,	×
NEW 148	'status' => 'confirmed',	×
NEW 149	'confirmed_at' => now(),	×
NEW 150	'updated_at' => now(),	×
NEW 151	]);	×
152
153	// 2. Preserve old civic wallet as HD wallet (funds remain accessible)
NEW 154	$oldHd = HDWallet::where('user_id', $uid)	×
NEW 155	->where('public_addr', $migration->old_address)	×
NEW 156	->first();	×
157
NEW 158	if (! $oldHd) {	×
NEW 159	HDWallet::create([	×
NEW 160	'user_id' => $uid,	×
NEW 161	'wallet_type' => 'Migrated',	×
NEW 162	'public_addr' => $migration->old_address,	×
NEW 163	'encrypted_seed' => $migration->old_encrypted_seed,	×
NEW 164	]);	×
165	}
166
167	// 3. Update civic wallet to new address + seed
NEW 168	$civic = CivicWallet::where('user_id', $uid)->first();	×
NEW 169	if ($civic) {	×
NEW 170	$civic->public_addr = $migration->new_address;	×
NEW 171	$civic->encrypted_seed = $encryptedSeed;	×
NEW 172	$civic->save();	×
173	}
174
175	// 4. Update citizen record
NEW 176	$citizen = Citizen::where('userid', $uid)->first();	×
NEW 177	if ($citizen) {	×
NEW 178	$citizen->public_address = $migration->new_address;	×
NEW 179	$citizen->save();	×
180	}
181
182	// 5. Reset wallet session
NEW 183	$profile = Profile::where('userid', $uid)->first();	×
NEW 184	if ($profile) {	×
NEW 185	$profile->civic_wallet_open = 0;	×
NEW 186	$profile->wallet_open = 0;	×
NEW 187	$profile->save();	×
188	}
189
NEW 190	DB::commit();	×
191
NEW 192	Log::info("Civic wallet migration confirmed for user {$uid}: {$migration->old_address} → {$migration->new_address} (txid: {$txid})");	×
193
NEW 194	return response()->json([	×
NEW 195	'success' => true,	×
NEW 196	'old_address' => $migration->old_address,	×
NEW 197	'new_address' => $migration->new_address,	×
NEW 198	'txid' => $txid,	×
NEW 199	'message' => 'Civic wallet migrated successfully. Old wallet preserved as HD wallet. Please reconnect to use your new civic identity.',	×
NEW 200	]);	×
NEW 201	} catch (\Exception $e) {	×
NEW 202	DB::rollBack();	×
NEW 203	Log::error("Civic wallet migration failed for user {$uid}: " . $e->getMessage());	×
204
NEW 205	return response()->json(['error' => 'Migration failed: ' . $e->getMessage()], 500);	×
206	}
207	}
208
209	/**
210	* Get migration history for the current user.
211	*/
NEW 212	public function history()	×
213	{
NEW 214	if (! Auth::check()) {	×
NEW 215	return response()->json(['error' => 'Unauthorized'], 401);	×
216	}
217
NEW 218	$migrations = DB::table('civic_wallet_migrations')	×
NEW 219	->where('user_id', Auth::id())	×
NEW 220	->orderBy('created_at', 'desc')	×
NEW 221	->get();	×
222
NEW 223	return response()->json($migrations);	×
224	}
225	}

marscoin / martianrepublic / 23808195253

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous