feat: add full Supabase integration (auth, db, realtime, storage)

.env.example

@@ -1,3 +1,19 @@
+# ── API Keys ──────────────────────────────────────────────────────────────────
+# Anthropic Claude — api/claude.js + bot/
+ANTHROPIC_API_KEY=
+
+# Google Gemini — future AI features
+GEMINI_API_KEY=
+
+# Groq — fast inference alternative to Anthropic
+GROQ_API_KEY=
+
+# OpenRouter — multi-model proxy
+OPENROUTER_API_KEY=
+
+# Nansen Smart Money — api/nansen.js + backend/
+NANSEN_API_KEY=
+
 # Primary wallet to monitor
 PRIMARY_WALLET=0x6e4c6da09f06690cc4db53d42ab539d3d4882015
 
@@ -7,3 +23,14 @@ TELEGRAM_CHAT_ID=
 
 # Monitoring interval in seconds
 POLL_INTERVAL=30
+
+# ── Supabase ──────────────────────────────────────────────────────────────────
+# Project URL (safe to commit — it's your project endpoint)
+SUPABASE_URL=https://eiqlvbylkcmgvksrxqld.supabase.co
+
+# Anon/publishable key — safe for client-side use, limited by RLS
+SUPABASE_ANON_KEY=
+
+# Service role key — NEVER commit this; only used in the backend
+# Get it from: Supabase Dashboard → Project Settings → API → service_role
+SUPABASE_SERVICE_ROLE_KEY=

README.md

@@ -0,0 +1,209 @@
+# Hype — Hyperliquid Dashboard
+
+A personal trading dashboard for [Hyperliquid](https://hyperliquid.xyz). Runs entirely in the browser — no backend required for the web UI. Directly queries the Hyperliquid public API and connects over WebSocket for live price feeds.
+
+**Live:** [ravellerh.github.io/Hype](https://ravellerh.github.io/Hype)
+
+---
+
+## Tabs
+
+| Tab | What it does |
+|-----|-------------|
+| **Portfolio** | Account value, open perp positions, spot holdings, unrealized PnL, open orders, portfolio growth chart, health score with risk flags. Supports unified accounts. |
+| **Trades** | Fill history split into Perp / Spot sub-tabs. Coin filter, realized PnL, win rate, fees. Sorted latest-first, 100 rows per view. |
+| **Funding** | Funding paid/received over 7 / 30 / 90 days. Daily bar chart, by-coin breakdown with avg rate, cost-alert pills for positions bleeding funding. |
+| **Flows** | Deposit & withdrawal history with historical USD/IDR rate at the exact transaction date (fetched from frankfurter.app), running balance, cumulative flow chart. |
+| **Live** | WebSocket price monitor — live mark prices and 24h change for all perp markets. |
+| **Markets** | Global market overview — volume, OI, funding, 24h change across all Hyperliquid perps. |
+| **Phases** | Wyckoff market-phase detector (Accumulation / Markup / Distribution / Markdown / Neutral) per coin and interval. |
+| **Intel** | Smart-money wallet tracking — open positions and recent trades of known top traders. |
+| **MVRV** | On-chain MVRV-Z score and market cycle context. |
+| **AI** | AI-assisted trade analysis and market commentary. |
+| **Watchlist** | Monitor any Hyperliquid address. Get alerts on position changes. |
+| **Journal** | Personal trade journal — log entries, notes, outcome tagging. |
+| **Indicators** | Technical indicator dashboard — RSI, MACD, Bollinger Bands across timeframes. |
+| **Smart Money** | Aggregated signal feed from tracked whale wallets. |
+| **Analytics** | PnL analytics, fee breakdown, win/loss streaks, equity curve. |
+| **KB** | Personal knowledge base for trading notes and playbooks. |
+
+---
+
+## Key Features
+
+- **Unified account support** — correctly reads `crossMarginSummary` vs `marginSummary` for accounts where spot USDC is perp collateral
+- **IDR conversion** — all monetary values can be viewed in Indonesian Rupiah using live and historical rates; Flows tab shows the exact IDR value at the time of each deposit/withdrawal
+- **Real-time WebSocket** — live prices, position updates, and wallet-change alerts without polling; exponential backoff reconnect (3 s → 30 s max) prevents hammering the server during outages
+- **Portfolio health score** — composite risk score with per-position flags (leverage, liquidation distance, smart-money divergence, BMSB)
+- **PWA** — installable on iOS, Android, and desktop; works offline for cached views
+- **No sign-in** — enter any wallet address; read-only, no keys required
+
+---
+
+## Architecture
+
+```
+Hype/
+├── frontend/           # Static SPA — the main dashboard (no backend needed)
+│   ├── js/app.js           # All UI logic, API calls, WebSocket, charts
+│   └── css/styles.css
+│
+├── index.html          # Entry point (gh-pages root)
+├── styles.css
+├── app.js
+├── *.js                # Feature modules (intel, analytics, journal, kb, …)
+│
+├── backend/            # Optional FastAPI server (Telegram alerts, phase scheduling)
+│   ├── main.py
+│   ├── phase_detector.py
+│   ├── wallet_tracker.py
+│   ├── telegram_bot.py
+│   └── requirements.txt
+│
+├── bot/                # Optional autonomous trading bot
+│   ├── main.py             # Trading loop
+│   ├── phase_analyzer.py
+│   ├── risk_manager.py
+│   ├── backtest.py
+│   └── requirements.txt
+│
+└── vercel.json         # Frontend deploy config
+```
+
+The frontend calls the Hyperliquid public API (`api.hyperliquid.xyz`) and `frankfurter.app` (exchange rates) directly from the browser. The backend and bot are optional extras for Telegram notifications and automated trading.
+
+The backend uses a shared persistent `httpx.AsyncClient` (connection pooling) for all Hyperliquid API calls, and parallelises independent fetches with `asyncio.gather` where possible.
+
+---
+
+## Quick Start
+
+### Dashboard only (no backend)
+
+Open [ravellerh.github.io/Hype](https://ravellerh.github.io/Hype) in a browser, or self-host the static files anywhere.
+
+### Self-host on Vercel
+
+```bash
+git clone https://github.com/ravellerh/hype.git
+cd hype
+vercel --prod
+```
+
+### Run with backend (Telegram alerts + phase scheduling)
+
+```bash
+git clone https://github.com/ravellerh/hype.git
+cd hype
+cp .env.example .env
+# fill in PRIMARY_WALLET, TELEGRAM_BOT_TOKEN, TELEGRAM_CHAT_ID
+chmod +x start.sh
+./start.sh          # starts FastAPI at http://localhost:8000
+```
+
+### Trading bot (optional, trades on your behalf)
+
+```bash
+cd bot
+cp .env.example .env    # fill in HL_PRIVATE_KEY, HL_WALLET_ADDRESS
+pip install -r requirements.txt
+python main.py
+```
+
+---
+
+## Trading Bot
+
+Entry requires **all** of:
+
+| Condition | Default |
+|-----------|---------|
+| Coin phase | Wyckoff Accumulation (4h) |
+| Phase confidence | ≥ 40 % |
+| Accumulation age | Not late-stage (< 80 % of typical duration) |
+| 1h TA | EMA bullish + MACD bullish + RSI > 50 |
+| 15m TA | MACD bullish + RSI > 50 |
+| Volume vs average | ≥ 1.2× |
+| Funding rate | < 0.20 %/8h (not crowded) |
+| Smart-wallet longs | ≥ 1 confirmed wallet |
+| Confluence score | ≥ 5 / 10 (multi-pillar scoring) |
+| BTC macro gate | BTC 4h move not > −3 % (hostile) |
+| Risk guardrails | Daily loss < 3 %, no streak of ≥ 3 straight losses |
+
+Confluence score (0–10) weights: phase confidence (0–3 pts), 1h TA signals (0–3 pts), 15m momentum (0–1 pt), volume strength (0–1 pt), smart-wallet consensus (0–2 pts). Leverage scales 3×–10× with score.
+
+**LLM veto layer** (optional): when `ANTHROPIC_API_KEY` is set, Claude reviews signals scoring ≥ 6 as a final judgment gate, filtering ~30–40 % of borderline entries.
+
+Risk defaults:
+
+| Parameter | Value |
+|-----------|-------|
+| Margin per trade | 10 % of account |
+| Leverage | 3×–10× (scales with confluence score) |
+| Stop-loss | 8 % |
+| Take-profit | 75 % (fallback) |
+| Max open bot positions | 3 |
+| Per-asset loss cooldown | 120 min |
+
+**Exit strategy:**
+- **DSL ratcheting trail** — at +10 % gain: locks 3.5 %; at +20 %: locks 11 %; at +35 %: locks 24.5 %. Inspired by Senpi AI's two-phase DSL exit engine.
+- **Phase exit** — closes on flip to Distribution / Markdown.
+- **Breakeven trail** — fallback SL move to entry + 0.3 % buffer when phase reaches Markup.
+
+**Risk guardrails** — halt new entries if: daily realised loss > 3 % of account, or 3+ consecutive losses (24 h cooldown), or individual asset lost (120 min cooldown).
+
+Backtest: `cd bot && python backtest.py`
+
+---
+
+## Environment Variables
+
+| Variable | Where | Description |
+|----------|-------|-------------|
+| `PRIMARY_WALLET` | `.env` | Hyperliquid address to monitor |
+| `TELEGRAM_BOT_TOKEN` | `.env` | Dashboard Telegram bot token |
+| `TELEGRAM_CHAT_ID` | `.env` | Dashboard Telegram chat ID |
+| `POLL_INTERVAL` | `.env` | Wallet poll interval in seconds (default 30) |
+| `ALLOWED_ORIGINS` | `.env` | Comma-separated CORS origins (default `http://localhost:8000,http://127.0.0.1:8000`) |
+| `HL_PRIVATE_KEY` | `bot/.env` | Private key for bot trading |
+| `HL_WALLET_ADDRESS` | `bot/.env` | Bot wallet address |
+| `TG_TOKEN` | `bot/.env` | Bot Telegram token |
+| `TG_CHAT_ID` | `bot/.env` | Bot Telegram chat ID |
+| `ANTHROPIC_API_KEY` | `bot/.env` | Enables LLM veto layer (Claude reviews top signals) |
+
+---
+
+## Reliability & Security Notes
+
+| Area | Detail |
+|------|--------|
+| **WS reconnect** | Exponential backoff — 3 s, 6 s, 12 s, 24 s, 30 s max. Retry counter resets on successful connect. |
+| **Silent refresh** | 60 s auto-refresh is concurrency-guarded; a second call while one is in flight is a no-op. Scroll position is preserved if the user hasn't moved. |
+| **Market modal** | Stale-request cancellation — clicking a coin while the previous modal is still loading discards the old result. |
+| **Chart.js** | Indicator sparklines destroy the previous Chart instance before re-creating to prevent canvas memory leaks. |
+| **Backend HTTP** | Single shared `httpx.AsyncClient` with connection pooling replaces per-call client construction. |
+| **MVRV endpoint** | CoinGecko chart fetches for all coins are parallelised; previously ran sequentially. |
+| **Polling failures** | Backend counts consecutive poll errors and sends a Telegram alert after 5 in a row. |
+| **CORS** | Restricted to `localhost` by default; override via `ALLOWED_ORIGINS` env var for custom deployments. |
+| **Telegram config** | Bot token validated against `<id>:<hash>` format before being written to `.env`. |
+
+---
+
+## Tech Stack
+
+| Layer | Technology |
+|-------|-----------|
+| Frontend | Vanilla JS, CSS custom properties, Chart.js |
+| Real-time | Hyperliquid WebSocket API |
+| Exchange rates | frankfurter.app (historical USD/IDR) |
+| PWA | Web App Manifest + Service Worker |
+| Backend (optional) | Python 3.11+, FastAPI, APScheduler |
+| Bot SDK | hyperliquid-python-sdk |
+| Notifications | python-telegram-bot |
+| Deploy | GitHub Pages (frontend), Vercel, or any static host |
+
+---
+
+## License
+
+MIT

api/claude.js

@@ -0,0 +1,33 @@
+export default async function handler(req, res) {
+  res.setHeader('Access-Control-Allow-Origin', '*');
+  res.setHeader('Access-Control-Allow-Methods', 'POST, OPTIONS');
+  res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
+  if (req.method === 'OPTIONS') return res.status(200).end();
+
+  const { prompt, key } = req.body || {};
+  const apiKey = key || process.env.ANTHROPIC_API_KEY;
+  if (!apiKey)  return res.status(400).json({ error: 'No API key provided' });
+  if (!prompt)  return res.status(400).json({ error: 'No prompt provided' });
+
+  const resp = await fetch('https://api.anthropic.com/v1/messages', {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'x-api-key': apiKey,
+      'anthropic-version': '2023-06-01',
+    },
+    body: JSON.stringify({
+      model: 'claude-haiku-4-5-20251001',
+      max_tokens: 1024,
+      messages: [{ role: 'user', content: prompt }],
+    }),
+  });
+
+  if (!resp.ok) {
+    const err = await resp.json().catch(() => ({}));
+    return res.status(resp.status).json({ error: err.error?.message || `Anthropic ${resp.status}` });
+  }
+
+  const data = await resp.json();
+  return res.json({ text: data.content?.[0]?.text || '' });
+}

api/nansen.js

@@ -0,0 +1,44 @@
+const NANSEN_BASE = 'https://api.nansen.ai/api/v1';
+
+export default async function handler(req, res) {
+  res.setHeader('Access-Control-Allow-Origin', '*');
+  res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
+  res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
+  if (req.method === 'OPTIONS') return res.status(200).end();
+
+  const apiKey = req.query.key || process.env.NANSEN_API_KEY;
+  if (!apiKey) return res.status(400).json({ error: 'No API key' });
+
+  const chains = ['ethereum', 'solana', 'base', 'arbitrum', 'optimism', 'bnb', 'hyperevm'];
+  const headers = { 'Content-Type': 'application/json', 'apikey': apiKey };
+
+  const [netflowRes, holdingsRes] = await Promise.allSettled([
+    fetch(`${NANSEN_BASE}/smart-money/netflow`, {
+      method: 'POST',
+      headers,
+      body: JSON.stringify({ chains, pagination: { page: 1, per_page: 100 } })
+    }),
+    fetch(`${NANSEN_BASE}/smart-money/holdings`, {
+      method: 'POST',
+      headers,
+      body: JSON.stringify({ chains })
+    })
+  ]);
+
+  let netflows = [], holdings = null;
+
+  if (netflowRes.status === 'fulfilled' && netflowRes.value.ok) {
+    netflows = await netflowRes.value.json();
+  } else {
+    const status = netflowRes.status === 'fulfilled' ? netflowRes.value.status : 0;
+    if (status === 401 || status === 403) {
+      return res.status(401).json({ error: 'Invalid Nansen API key' });
+    }
+  }
+
+  if (holdingsRes.status === 'fulfilled' && holdingsRes.value.ok) {
+    holdings = await holdingsRes.value.json();
+  }
+
+  return res.json({ netflows, holdings, fetched_at: Date.now() });
+}

backend/config.py

@@ -10,3 +10,15 @@
 
 HL_API_URL = "https://api.hyperliquid.xyz/info"
 HL_WS_URL = "wss://api.hyperliquid.xyz/ws"
+
+WATCH_COINS = ["BTC", "ETH", "SOL", "HYPE", "SUI", "AVAX"]
+PHASE_RECORD_INTERVAL = 3600   # record every hour (seconds)
+PHASE_RETENTION_DAYS  = 14     # keep 2 weeks of history
+PHASE_LOG_CSV         = os.path.join(os.path.dirname(__file__), "phase_log.csv")
+
+NANSEN_API_KEY = os.getenv("NANSEN_API_KEY", "")
+
+# Supabase
+SUPABASE_URL              = os.getenv("SUPABASE_URL", "https://eiqlvbylkcmgvksrxqld.supabase.co")
+SUPABASE_ANON_KEY         = os.getenv("SUPABASE_ANON_KEY", "")
+SUPABASE_SERVICE_ROLE_KEY = os.getenv("SUPABASE_SERVICE_ROLE_KEY", "")