Pre-launch hardening: KOL module, Telegram, scanners, WS resilience

Big-picture changes since b941223:

KOL pipeline (new) — Substack/podcast/blog RSS → AI ticker extraction →
on-chain wallet diff → talks-vs-trades divergence detection. Daily polls,
19 feeds, divergence emits Post + Telegram fan-out.

Telegram push (new) — walletless free tier + wallet-linked Pro upgrade,
in-bot preference commands (/trump /btc /funding /kol /conf /quiet),
signed-envelope API for dashboard. Disconnect-wallet keeps free
subscription.

BTC funding-rate reversal scanner (new) — hourly cron, 30d cumulative
funding threshold + mean-revert + 7d price confirm, emits via
/api/signals/ingest. BTC bottom-reversal scanner promoted to System 2.

WS broadcast rewrite — per-client send timeout + parallel fan-out
(asyncio.gather). Fixes "Binance WS no close frame" reconnect storms +
APScheduler 11-min job misses, both caused by one slow client stalling
the kline loop.

Error visibility — three silent-error sites (trumpstruth/truth_social
fetchers, funding_reversal scanner) now include exception type name so
httpx ConnectError-style empty-message errors stop logging blank lines.
Telegram bot loop now classifies ReadTimeout vs network vs unknown +
logger.exception for the unknown bucket.

Security hygiene — trumpsignal.db untracked from git (held subscriber
wallets + encrypted HL keys + 22 bot trades); .gitignore now blocks
*.db/.next/backups. CORS only allows FRONTEND_URL in production.

New ops scripts —
  - scripts/preflight.py: env/DB/Telegram/AI auth verification gate
  - scripts/backup_db.sh: cron-friendly daily DB backup (SQLite + Postgres)
  - scripts/seed_kol_wallets.py: idempotent KOL on-chain wallet seeder

15 new Alembic migrations (007-021) covering convex strategy fields,
phase-1 safety, two-system frozen exits, invalidation prices, dynamic
SYS2 leverage, staged de-risk + pyramiding, peak gain tracking, risk
mode, auto-trade + grow flags, KOL module, KOL on-chain, KOL divergence,
Telegram bindings + walletless.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

app/config.py

@@ -11,10 +11,14 @@ class Settings(BaseSettings):
         "?streams=btcusdt@kline_1m/ethusdt@kline_1m"
     )
     binance_rest_url: str = "https://data-api.binance.vision"
-    environment: str = "development"
+    environment: str = "production"
     ai_api_key: str = ""
-    ai_base_url: str = "https://api.gptsapi.net/v1"
-    ai_model: str = "claude-haiku-4-5-20251001"
+    ai_base_url: str = "https://api.deepseek.com/v1"
+    ai_model: str = "deepseek-v4-pro"        # batch / reanalysis (quality over speed)
+    ai_live_model: str = "deepseek-v4-flash" # live post analysis (latency-sensitive, ~2s)
+    # Native Anthropic API key — if set, takes priority over ai_api_key + ai_base_url.
+    # Get from https://console.anthropic.com → API Keys
+    anthropic_api_key: str = ""
 
     # Hyperliquid — API wallet private key (NOT your MetaMask key)
     # Created at https://app.hyperliquid.xyz/API and authorized by MetaMask
@@ -30,7 +34,30 @@ class Settings(BaseSettings):
     # Generate with: openssl rand -hex 32
     encryption_key: str = ""
 
-    model_config = {"env_file": ".env", "env_file_encoding": "utf-8"}
+    # Shared secret for /api/signals/ingest — external trading modules pass it
+    # in the X-Ingest-Key header. Empty (default) = ingest endpoint is REJECTED
+    # entirely until a key is configured (fail-closed).
+    ingest_api_key: str = ""
+
+    # Glassnode on-chain data. Used only by the BTC bottom-reversal state
+    # machine (MVRV-Z + STH-SOPR). Empty = scanner logs and skips fail-closed.
+    glassnode_api_key: str = ""
+
+    # Etherscan API key — free at etherscan.io/register → My API Keys.
+    # Used for KOL A-tier: fetch all ERC-20 token balances for a given ETH address.
+    # Empty = skip Ethereum wallet snapshots (only HL perp positions polled).
+    etherscan_api_key: str = ""
+
+    # ── Telegram push alerts ─────────────────────────────────────────────────
+    # Bot token from @BotFather (https://t.me/BotFather → /newbot). Free.
+    # Empty (default) = Telegram alerts disabled completely (bot loop skipped,
+    # notify_signal becomes a no-op, API endpoints return 503).
+    telegram_bot_token: str = ""
+    # Bot username (no @) — used by the Settings UI to render the deep link
+    # t.me/<username>?start=<code>. Example: "trumpalpha_bot".
+    telegram_bot_username: str = ""
+
+    model_config = {"env_file": ".env", "env_file_encoding": "utf-8", "extra": "ignore"}
 
 
 settings = Settings()