4 Commits

Author	SHA1	Message	Date
k	752652f463	fix(safety): force Auto-Trade OFF on paper→live promotion ... Money-safety bug: subscribe() changed paper_mode on a paper→live promotion but left auto_trade untouched. A user could flip Auto-Trade ON while in paper mode (harmless — SystemControl only checks 'subscribed', not paper), then promote to live and add an API key — at which point the next high-confidence Trump signal opens a REAL position, carried over from a switch they flipped when it cost nothing. Now: when paper_mode transitions True→False AND auto_trade is on, force auto_trade=False. The user must re-enable it explicitly while live (a signed, intentional action). Risk-raising transition resets the dangerous switch — standard financial-product safety. Frontend handleUpgradeToLive copy updated to say Auto-Trade is turned off on the switch. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-30 01:03:02 +08:00
k	5fb1d52026	Pre-launch hardening: KOL module, Telegram, scanners, WS resilience ... Big-picture changes since b941223: KOL pipeline (new) — Substack/podcast/blog RSS → AI ticker extraction → on-chain wallet diff → talks-vs-trades divergence detection. Daily polls, 19 feeds, divergence emits Post + Telegram fan-out. Telegram push (new) — walletless free tier + wallet-linked Pro upgrade, in-bot preference commands (/trump /btc /funding /kol /conf /quiet), signed-envelope API for dashboard. Disconnect-wallet keeps free subscription. BTC funding-rate reversal scanner (new) — hourly cron, 30d cumulative funding threshold + mean-revert + 7d price confirm, emits via /api/signals/ingest. BTC bottom-reversal scanner promoted to System 2. WS broadcast rewrite — per-client send timeout + parallel fan-out (asyncio.gather). Fixes "Binance WS no close frame" reconnect storms + APScheduler 11-min job misses, both caused by one slow client stalling the kline loop. Error visibility — three silent-error sites (trumpstruth/truth_social fetchers, funding_reversal scanner) now include exception type name so httpx ConnectError-style empty-message errors stop logging blank lines. Telegram bot loop now classifies ReadTimeout vs network vs unknown + logger.exception for the unknown bucket. Security hygiene — trumpsignal.db untracked from git (held subscriber wallets + encrypted HL keys + 22 bot trades); .gitignore now blocks *.db/.next/backups. CORS only allows FRONTEND_URL in production. New ops scripts — - scripts/preflight.py: env/DB/Telegram/AI auth verification gate - scripts/backup_db.sh: cron-friendly daily DB backup (SQLite + Postgres) - scripts/seed_kol_wallets.py: idempotent KOL on-chain wallet seeder 15 new Alembic migrations (007-021) covering convex strategy fields, phase-1 safety, two-system frozen exits, invalidation prices, dynamic SYS2 leverage, staged de-risk + pyramiding, peak gain tracking, risk mode, auto-trade + grow flags, KOL module, KOL on-chain, KOL divergence, Telegram bindings + walletless. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-25 00:52:56 +08:00
k	3268080401	done	2026-04-21 19:33:24 +08:00
k	9a72566753	first commit	2026-04-20 23:05:59 +08:00