phase G: data minimisation + passwordless auth + DeepSeek-first LLM

Server no longer holds portfolios. Holdings live in the browser
(localStorage); the server publishes an anonymous ticker_universe and a
gzipped /api/universe payload identical for every authenticated user, so
access patterns can't betray which tickers a user holds. AI commentary
is generated ephemerally from the browser-supplied pie and the cost
ledger row records no positions. Migrations 0009-0011 added the
universe table and dropped positions / portfolio_snapshots /
portfolios.

Authentication is now e-mail OTP only. Migration 0010 dropped
password_hash and email_verified (every active session is by
construction proof of email control). The /signup endpoint is gone;
signup and login share a single email-entry page. Email rendering is
HTML+plain-text multipart with a shared brand palette (app/branding.py)
asserted in sync with the CSS by a drift-detection test.

LLM provider defaults to DeepSeek-direct (cheaper, api.deepseek.com)
with OpenRouter as automatic fallback if DeepSeek fails. ai_log_job and
indicator_summary_job now iterate the two tones (NOVICE, INTERMEDIATE)
per cycle so the dashboard's tone toggle is instant; PROMPT_VERSION
bumped to 6 with an educational anti-TA / anti-gambling stance baked
into _CORE. NOVICE mode renders a curated glossary inline (CBOE VIX,
yield curve, HY OAS, etc.) with JS-positioned tooltips that survive
viewport edges and sticky bars. Model name and tokens hidden from the
user UI; still recorded in StrategicLog.model and AICall for admin.

Layout adds a sticky top nav, a sticky bottom markets bar (one chip per
exchange with status LED + headline index + 1d change), and
Phase H feedback reporting is queued in tasks/todo.md.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Giorgio Gilestro 2026-05-18 14:16:57 +01:00
parent 480fd311c5
commit 6e7f57c6b2
54 changed files with 5005 additions and 916 deletions

View file

@ -12,8 +12,8 @@ from apscheduler.triggers.cron import CronTrigger
from app.db import get_engine
from app.logging import configure_logging, get_logger
from app.jobs import (
market_job, news_job, portfolio_job, ai_log_job, rollup_job,
indicator_summary_job,
market_job, news_job, ai_log_job, rollup_job,
indicator_summary_job, universe_flush_job,
)
@ -41,10 +41,19 @@ async def main() -> None:
sched = AsyncIOScheduler(timezone="UTC")
sched.add_job(market_job.run, CronTrigger(minute=5), name="market_job", id="market_job")
sched.add_job(news_job.run, CronTrigger(minute=10), name="news_job", id="news_job")
sched.add_job(portfolio_job.run, CronTrigger(minute=15), name="portfolio_job", id="portfolio_job")
# portfolio_job removed in Phase G — server no longer holds holdings.
sched.add_job(indicator_summary_job.run, CronTrigger(minute=7), name="indicator_summary_job", id="indicator_summary_job")
sched.add_job(ai_log_job.run, CronTrigger(minute=20), name="ai_log_job", id="ai_log_job")
sched.add_job(rollup_job.run, CronTrigger(hour=0, minute=5), name="rollup_job", id="rollup_job")
# Phase G: flush the Redis ticker-add buffer every 5 minutes (xx:01,
# xx:06, ...). The 1-min offset gives the bucket boundary time to
# close before we read the previous one.
sched.add_job(universe_flush_job.run,
CronTrigger(minute="1-59/5"),
name="universe_flush_job", id="universe_flush_job")
sched.add_job(universe_flush_job.evict_run,
CronTrigger(hour=0, minute=15),
name="universe_evict_job", id="universe_evict_job")
sched.start()
log.info("scheduler.started", jobs=[j.id for j in sched.get_jobs()])