From 6d674e62ef103e55109f0485074a50d42a1059d8 Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Thu, 14 May 2026 05:12:08 +0000 Subject: [PATCH 1/2] fix(money-machine): harden desktop security --- README.md | 10 +- money-machine/.gitignore | 1 + money-machine/eslint.config.mjs | 2 + money-machine/next-env.d.ts | 6 + money-machine/package-lock.json | 246 +- money-machine/package.json | 9 +- money-machine/public/_headers | 6 + money-machine/public/images/logo.png | Bin 408092 -> 98126 bytes .../src-python/engine/signal_generator.py | 26 +- .../src-python/engine/strategies/base.py | 1 + .../src-python/engine/trading_core.py | 29 +- .../src-python/tests/test_config_security.py | 82 + .../src-python/tests/test_ipc_auth.py | 29 +- money-machine/src-python/utils/config.py | 30 +- money-machine/src-python/utils/ipc_server.py | 49 +- money-machine/src-tauri/Cargo.lock | 6506 +++++++++++++++++ money-machine/src-tauri/Cargo.toml | 3 +- money-machine/src-tauri/icons/128x128.png | Bin 11059 -> 24714 bytes money-machine/src-tauri/icons/128x128@2x.png | Bin 23137 -> 62306 bytes money-machine/src-tauri/icons/32x32.png | Bin 2225 -> 2985 bytes money-machine/src-tauri/icons/icon.png | Bin 49979 -> 98126 bytes money-machine/src-tauri/src/lib.rs | 12 +- money-machine/src-tauri/tauri.conf.json | 10 +- money-machine/src/app/globals.css | 67 +- money-machine/src/app/layout.tsx | 4 +- money-machine/src/app/page.tsx | 56 +- money-machine/src/components/ControlPanel.tsx | 35 +- money-machine/src/components/PnLWidget.tsx | 4 + money-machine/src/components/StatusWidget.tsx | 11 +- money-machine/src/components/TradesTable.tsx | 21 +- money-machine/src/lib/tauri.ts | 6 +- money-machine/src/store/useAppStore.ts | 2 +- money-machine/tsconfig.json | 70 +- vercel.json | 40 + 34 files changed, 7198 insertions(+), 175 deletions(-) create mode 100644 money-machine/next-env.d.ts create mode 100644 money-machine/public/_headers create mode 100644 money-machine/src-python/tests/test_config_security.py create mode 100644 money-machine/src-tauri/Cargo.lock create mode 100644 vercel.json diff --git a/README.md b/README.md index a1f428a..c2ed1c3 100644 --- a/README.md +++ b/README.md @@ -55,7 +55,7 @@
🤖 Telegram Bot • - 🌐 Dashboard • + 🌐 Dashboard • ⚡ Oracle API • 📦 Downloads
@@ -77,7 +77,7 @@ | المنتج | الوصف | الرابط | |--------|-------|--------| | 🤖 **Telegram Bot** | تنبيهات فورية + أوامر التداول | [@AlphaAxiomBot](https://t.me/AlphaAxiomBot) | -| 🌐 **Dashboard** | لوحة تحكم الويب | [aqt.axiomid.app](https://aqt.axiomid.app) | +| 🌐 **Dashboard** | لوحة تحكم الويب | [aitrading.axiomid.app](https://aitrading.axiomid.app) | | 💻 **Money Machine** | تطبيق سطح المكتب (Ghost/Overlay) | [تحميل](https://github.com/Moeabdelaziz007/AlphaAxiom/releases) | | 📊 **AlphaReceiver.mq5** | EA لتنفيذ الصفقات على MT5 | [تحميل](https://github.com/Moeabdelaziz007/AlphaAxiom/tree/main/frontend/public) | @@ -134,7 +134,7 @@ | Product | Description | Link | |---------|-------------|------| | 🤖 **Telegram Bot** | Instant alerts + Trading commands | [@AlphaAxiomBot](https://t.me/AlphaAxiomBot) | -| 🌐 **Dashboard** | Web-based control panel | [aqt.axiomid.app](https://aqt.axiomid.app) | +| 🌐 **Dashboard** | Web-based control panel | [aitrading.axiomid.app](https://aitrading.axiomid.app) | | 💻 **Money Machine** | Desktop overlay app (Ghost Mode) | [Download](https://github.com/Moeabdelaziz007/AlphaAxiom/releases) | | 📊 **AlphaReceiver.mq5** | MT5 Expert Advisor for trade execution | [Download](https://github.com/Moeabdelaziz007/AlphaAxiom/tree/main/frontend/public) | @@ -208,7 +208,7 @@ npm run tauri dev ├─────────────────────────────────────────────────────────────────┤ │ 📡 DELIVERY CHANNELS │ │ ├── Telegram Bot (@AlphaAxiomBot) │ -│ ├── Web Dashboard (aqt.axiomid.app) │ +│ ├── Web Dashboard (aitrading.axiomid.app) │ │ ├── Desktop App (Money Machine) │ │ └── Oracle API (oracle.axiomid.app) │ ├─────────────────────────────────────────────────────────────────┤ @@ -226,7 +226,7 @@ npm run tauri dev | Resource | URL | |----------|-----| | 🤖 Telegram Bot | [t.me/AlphaAxiomBot](https://t.me/AlphaAxiomBot) | -| 🌐 Dashboard | [aqt.axiomid.app](https://aqt.axiomid.app) | +| 🌐 Dashboard | [aitrading.axiomid.app](https://aitrading.axiomid.app) | | ⚡ Oracle API | [oracle.axiomid.app](https://oracle.axiomid.app) | | 📦 Releases | [GitHub Releases](https://github.com/Moeabdelaziz007/AlphaAxiom/releases) | | 📊 EA Download | [AlphaReceiver.mq5](https://github.com/Moeabdelaziz007/AlphaAxiom/tree/main/frontend/public) | diff --git a/money-machine/.gitignore b/money-machine/.gitignore index 8cad23c..191b89d 100644 --- a/money-machine/.gitignore +++ b/money-machine/.gitignore @@ -10,6 +10,7 @@ dist/ # Tauri src-tauri/target/ +src-tauri/gen/ # System Files .DS_Store diff --git a/money-machine/eslint.config.mjs b/money-machine/eslint.config.mjs index 05e726d..94d0bf1 100644 --- a/money-machine/eslint.config.mjs +++ b/money-machine/eslint.config.mjs @@ -11,6 +11,8 @@ const eslintConfig = defineConfig([ ".next/**", "out/**", "build/**", + "src-tauri/target/**", + "src-tauri/gen/**", "next-env.d.ts", ]), ]); diff --git a/money-machine/next-env.d.ts b/money-machine/next-env.d.ts new file mode 100644 index 0000000..9edff1c --- /dev/null +++ b/money-machine/next-env.d.ts @@ -0,0 +1,6 @@ +///