Pre-launch hardening: KOL module, Telegram, scanners, WS resilience

Big-picture changes since b941223:

KOL pipeline (new) — Substack/podcast/blog RSS → AI ticker extraction →
on-chain wallet diff → talks-vs-trades divergence detection. Daily polls,
19 feeds, divergence emits Post + Telegram fan-out.

Telegram push (new) — walletless free tier + wallet-linked Pro upgrade,
in-bot preference commands (/trump /btc /funding /kol /conf /quiet),
signed-envelope API for dashboard. Disconnect-wallet keeps free
subscription.

BTC funding-rate reversal scanner (new) — hourly cron, 30d cumulative
funding threshold + mean-revert + 7d price confirm, emits via
/api/signals/ingest. BTC bottom-reversal scanner promoted to System 2.

WS broadcast rewrite — per-client send timeout + parallel fan-out
(asyncio.gather). Fixes "Binance WS no close frame" reconnect storms +
APScheduler 11-min job misses, both caused by one slow client stalling
the kline loop.

Error visibility — three silent-error sites (trumpstruth/truth_social
fetchers, funding_reversal scanner) now include exception type name so
httpx ConnectError-style empty-message errors stop logging blank lines.
Telegram bot loop now classifies ReadTimeout vs network vs unknown +
logger.exception for the unknown bucket.

Security hygiene — trumpsignal.db untracked from git (held subscriber
wallets + encrypted HL keys + 22 bot trades); .gitignore now blocks
*.db/.next/backups. CORS only allows FRONTEND_URL in production.

New ops scripts —
  - scripts/preflight.py: env/DB/Telegram/AI auth verification gate
  - scripts/backup_db.sh: cron-friendly daily DB backup (SQLite + Postgres)
  - scripts/seed_kol_wallets.py: idempotent KOL on-chain wallet seeder

15 new Alembic migrations (007-021) covering convex strategy fields,
phase-1 safety, two-system frozen exits, invalidation prices, dynamic
SYS2 leverage, staged de-risk + pyramiding, peak gain tracking, risk
mode, auto-trade + grow flags, KOL module, KOL on-chain, KOL divergence,
Telegram bindings + walletless.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

app/api/trades.py

@@ -3,17 +3,31 @@ from typing import List
 
 from fastapi import APIRouter, Depends, Query
 from sqlalchemy import select
+from sqlalchemy.orm import joinedload
 from sqlalchemy.ext.asyncio import AsyncSession
 
 from app.database import get_db
 from app.models import BotTrade, iso_utc
 from app.schemas import BotTrade as BotTradeSchema
+from app.services.signed_request import verify_signed_request
 
 router = APIRouter()
 logger = logging.getLogger(__name__)
 
+ACTION_VIEW_TRADES = "view_trades"
+
 
 def _trade_to_schema(trade: BotTrade) -> BotTradeSchema:
+    # Join against trigger_post to surface the source tag. When a trade was
+    # opened by an ingested signal (VCP scanner, user's module, etc.) the
+    # source reveals WHICH module produced it — critical for "is module X
+    # actually making money?" attribution analysis.
+    trigger_source = None
+    if trade.trigger_post is not None:
+        trigger_source = trade.trigger_post.source
+    # Paper trades are tagged via hl_order_id at open time; that's the only
+    # stable signal we have to distinguish them in aggregate views.
+    is_paper = (trade.hl_order_id == "paper")
     return BotTradeSchema(
         id=trade.id,
         asset=trade.asset,
@@ -25,18 +39,36 @@ def _trade_to_schema(trade: BotTrade) -> BotTradeSchema:
         trigger_post_id=trade.trigger_post_id or 0,
         opened_at=iso_utc(trade.opened_at) or "",
         closed_at=iso_utc(trade.closed_at) or "",
+        trigger_source=trigger_source,
+        is_paper=is_paper,
     )
 
 
 @router.get("/trades", response_model=List[BotTradeSchema])
 async def get_trades(
+    wallet: str = Query(..., description="Wallet address (lower-cased internally)"),
+    ts: int = Query(..., description="Signed timestamp (ms)"),
+    sig: str = Query(..., description="EIP-191 signature"),
     limit: int = Query(default=20, ge=1, le=100),
-    page: int = Query(default=1, ge=1),
+    page:  int = Query(default=1,  ge=1),
     db: AsyncSession = Depends(get_db),
 ):
+    wallet = wallet.lower().strip()
+    verify_signed_request(
+        action=ACTION_VIEW_TRADES,
+        wallet=wallet,
+        timestamp_ms=ts,
+        signature=sig,
+        body=None,
+        allow_replay=True,
+    )
     offset = (page - 1) * limit
+    # joinedload pulls trigger_post in the same query — avoids N+1 lookups
+    # when serialising 100 trades.
     result = await db.execute(
         select(BotTrade)
+        .options(joinedload(BotTrade.trigger_post))
+        .where(BotTrade.wallet_address == wallet)
         .where(BotTrade.closed_at.is_not(None))
         .order_by(BotTrade.opened_at.desc())
         .offset(offset)