diff --git a/.github/release.yml b/.github/release.yml new file mode 100644 index 0000000..f62a934 --- /dev/null +++ b/.github/release.yml @@ -0,0 +1,24 @@ +changelog: + exclude: + labels: + - ignore-for-release + authors: + - dependabot + categories: + - title: Security + labels: + - security + - title: Features + labels: + - enhancement + - feature + - title: Fixes + labels: + - bug + - fix + - title: Dependencies + labels: + - dependencies + - title: Other Changes + labels: + - "*" diff --git a/CHANGELOG.md b/CHANGELOG.md new file mode 100644 index 0000000..1091ff7 --- /dev/null +++ b/CHANGELOG.md @@ -0,0 +1,21 @@ +# Changelog + +## [0.1.1-alpha] - 2026-05-14 + +### Security +- Stop reading exchange and Gemini API keys from `config.json`; secrets are loaded from environment variables only. +- Enforce bounded IPC header/body reads with oversized request rejection. +- Add whitelist and range validation for runtime config updates. + +### Fixed +- Consolidate `TradingSignal` on one canonical dataclass. +- Keep AI signal sizing data in metadata so pipeline contracts stay compatible. + +### Changed +- Refresh Money Machine desktop logo/icons and Shadow Mode dashboard UI. +- Add Vercel and Cloudflare Pages security headers for the dashboard build. + +## [0.1.0-alpha] - 2026-05-14 + +### Added +- Initial alpha release tag for AlphaAxiom Money Machine. diff --git a/README.md b/README.md index a1f428a..c2ed1c3 100644 --- a/README.md +++ b/README.md @@ -55,7 +55,7 @@
🤖 Telegram Bot • - 🌐 Dashboard • + 🌐 Dashboard • ⚡ Oracle API • 📦 Downloads
@@ -77,7 +77,7 @@ | المنتج | الوصف | الرابط | |--------|-------|--------| | 🤖 **Telegram Bot** | تنبيهات فورية + أوامر التداول | [@AlphaAxiomBot](https://t.me/AlphaAxiomBot) | -| 🌐 **Dashboard** | لوحة تحكم الويب | [aqt.axiomid.app](https://aqt.axiomid.app) | +| 🌐 **Dashboard** | لوحة تحكم الويب | [aitrading.axiomid.app](https://aitrading.axiomid.app) | | 💻 **Money Machine** | تطبيق سطح المكتب (Ghost/Overlay) | [تحميل](https://github.com/Moeabdelaziz007/AlphaAxiom/releases) | | 📊 **AlphaReceiver.mq5** | EA لتنفيذ الصفقات على MT5 | [تحميل](https://github.com/Moeabdelaziz007/AlphaAxiom/tree/main/frontend/public) | @@ -134,7 +134,7 @@ | Product | Description | Link | |---------|-------------|------| | 🤖 **Telegram Bot** | Instant alerts + Trading commands | [@AlphaAxiomBot](https://t.me/AlphaAxiomBot) | -| 🌐 **Dashboard** | Web-based control panel | [aqt.axiomid.app](https://aqt.axiomid.app) | +| 🌐 **Dashboard** | Web-based control panel | [aitrading.axiomid.app](https://aitrading.axiomid.app) | | 💻 **Money Machine** | Desktop overlay app (Ghost Mode) | [Download](https://github.com/Moeabdelaziz007/AlphaAxiom/releases) | | 📊 **AlphaReceiver.mq5** | MT5 Expert Advisor for trade execution | [Download](https://github.com/Moeabdelaziz007/AlphaAxiom/tree/main/frontend/public) | @@ -208,7 +208,7 @@ npm run tauri dev ├─────────────────────────────────────────────────────────────────┤ │ 📡 DELIVERY CHANNELS │ │ ├── Telegram Bot (@AlphaAxiomBot) │ -│ ├── Web Dashboard (aqt.axiomid.app) │ +│ ├── Web Dashboard (aitrading.axiomid.app) │ │ ├── Desktop App (Money Machine) │ │ └── Oracle API (oracle.axiomid.app) │ ├─────────────────────────────────────────────────────────────────┤ @@ -226,7 +226,7 @@ npm run tauri dev | Resource | URL | |----------|-----| | 🤖 Telegram Bot | [t.me/AlphaAxiomBot](https://t.me/AlphaAxiomBot) | -| 🌐 Dashboard | [aqt.axiomid.app](https://aqt.axiomid.app) | +| 🌐 Dashboard | [aitrading.axiomid.app](https://aitrading.axiomid.app) | | ⚡ Oracle API | [oracle.axiomid.app](https://oracle.axiomid.app) | | 📦 Releases | [GitHub Releases](https://github.com/Moeabdelaziz007/AlphaAxiom/releases) | | 📊 EA Download | [AlphaReceiver.mq5](https://github.com/Moeabdelaziz007/AlphaAxiom/tree/main/frontend/public) | diff --git a/money-machine/.github/workflows/build.yml b/money-machine/.github/workflows/build.yml index 425f074..67a1876 100644 --- a/money-machine/.github/workflows/build.yml +++ b/money-machine/.github/workflows/build.yml @@ -51,24 +51,25 @@ jobs: - name: Setup Node.js uses: actions/setup-node@v4 with: - node-version: 20 + node-version: 22 cache: "npm" + cache-dependency-path: money-machine/package-lock.json - name: Install frontend dependencies - run: npm ci + run: npm --prefix money-machine ci - name: Build frontend - run: npm run build + run: npm --prefix money-machine run build - name: Setup Python (for sidecar) uses: actions/setup-python@v5 with: - python-version: "3.11" + python-version: "3.12" - name: Install Python dependencies run: | - cd src-python - pip install -r requirements.txt + python -m pip install --upgrade pip + python -m pip install -r money-machine/src-python/requirements.txt - name: Build Tauri app uses: tauri-apps/tauri-action@v0 @@ -77,11 +78,12 @@ jobs: TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }} TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }} with: + projectPath: money-machine args: ${{ matrix.args }} tagName: ${{ github.ref_name }} - releaseName: "Money Machine v__VERSION__" - releaseBody: "See the assets below for your platform." - releaseDraft: false + releaseName: "Money Machine ${{ github.ref_name }}" + releaseBody: "See CHANGELOG.md and the assets below for your platform." + releaseDraft: true prerelease: ${{ contains(github.ref, 'alpha') || contains(github.ref, 'beta') }} - name: Upload artifacts @@ -89,12 +91,12 @@ jobs: with: name: money-machine-${{ matrix.platform }}-${{ matrix.target || 'default' }} path: | - src-tauri/target/release/bundle/**/*.dmg - src-tauri/target/release/bundle/**/*.app - src-tauri/target/release/bundle/**/*.deb - src-tauri/target/release/bundle/**/*.AppImage - src-tauri/target/release/bundle/**/*.msi - src-tauri/target/release/bundle/**/*.exe + money-machine/src-tauri/target/release/bundle/**/*.dmg + money-machine/src-tauri/target/release/bundle/**/*.app + money-machine/src-tauri/target/release/bundle/**/*.deb + money-machine/src-tauri/target/release/bundle/**/*.AppImage + money-machine/src-tauri/target/release/bundle/**/*.msi + money-machine/src-tauri/target/release/bundle/**/*.exe release: needs: build @@ -110,9 +112,9 @@ jobs: path: artifacts - name: Create Release - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@v2 with: files: artifacts/**/* generate_release_notes: true - draft: false + draft: true prerelease: ${{ contains(github.ref, 'alpha') || contains(github.ref, 'beta') }} diff --git a/money-machine/.gitignore b/money-machine/.gitignore index 8cad23c..191b89d 100644 --- a/money-machine/.gitignore +++ b/money-machine/.gitignore @@ -10,6 +10,7 @@ dist/ # Tauri src-tauri/target/ +src-tauri/gen/ # System Files .DS_Store diff --git a/money-machine/eslint.config.mjs b/money-machine/eslint.config.mjs index 05e726d..94d0bf1 100644 --- a/money-machine/eslint.config.mjs +++ b/money-machine/eslint.config.mjs @@ -11,6 +11,8 @@ const eslintConfig = defineConfig([ ".next/**", "out/**", "build/**", + "src-tauri/target/**", + "src-tauri/gen/**", "next-env.d.ts", ]), ]); diff --git a/money-machine/next-env.d.ts b/money-machine/next-env.d.ts new file mode 100644 index 0000000..9edff1c --- /dev/null +++ b/money-machine/next-env.d.ts @@ -0,0 +1,6 @@ +///Autonomous AI trading overlay for AlphaAxiom
+- Autonomous AI Trading Agent -
AlphaQuanTopology
+