jaxperro
58b89c106a
- start.sh: COPYBOT_ROLE=live — unarmed (missing LIVE_PRIVATE_KEY / LIVE_FUNDER_ADDRESS / LIVE_CONFIRM) idles in geocheck, no clone, no book, no orders; armed runs config.live.example.json + own state file copybot_state.live.json, --live, poll mode (webhook stays on paper). - confirm_live: accepts the phrase from LIVE_CONFIRM env — the USER types it into flyctl secrets set (rule 0.7 human checkpoint, headless); wrong value aborts, unset disarms at next boot. - config.live.example.json: Set E + pinned floors (mirrors paper), bankroll $50 @ 10% = $5 stakes, caps untouched (rule 0.6), leaked Discord webhook URL removed (ROTATE it — was committed publicly). - fly.live.toml: separate app wwf-copybot-live, arn, no inbound, no checks, role env baked. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
90 lines
4.2 KiB
Bash
Executable File
90 lines
4.2 KiB
Bash
Executable File
#!/bin/bash
|
|
# 24/7 copybot runner for an always-on host (Railway worker / Fly.io / any $5 VPS).
|
|
#
|
|
# Why a fresh clone: cloud build images usually ship the source WITHOUT .git, but
|
|
# the bot persists its book by committing state + feed + fills back to GitHub
|
|
# (copybot.publish_feed). Cloning at boot gives it a real repo, and the last
|
|
# committed copybot_state.json — so the $1k book survives restarts and redeploys
|
|
# with no volume attached.
|
|
#
|
|
# Required env:
|
|
# GITHUB_TOKEN fine-grained PAT with Contents: read+write on
|
|
# jaxperro/winning-wallet-finder (the push credential)
|
|
# Optional env:
|
|
# ALCHEMY_SIGNING_KEY presence switches the bot to PUSH mode: it serves
|
|
# POST /alchemy for the Alchemy address-activity
|
|
# webhook (~2-5s detection) with a 60s housekeeping
|
|
# heartbeat + 5min backstop poll. Requires the service
|
|
# to have a public domain. Absent -> classic poll mode.
|
|
# POLL_SECONDS poll cadence in poll mode (default 60 — keep well
|
|
# under the bot's 600s stale window)
|
|
#
|
|
# Railway setup (one time):
|
|
# 1. New service -> Deploy from GitHub repo -> jaxperro/winning-wallet-finder
|
|
# 2. Settings -> Deploy -> Custom Start Command: bash host/start.sh
|
|
# 3. Variables -> add GITHUB_TOKEN (and DISCORD_WEBHOOK if wanted)
|
|
# 4. No public networking needed (poll mode makes outbound calls only)
|
|
# Then STOP the Mac poller so the book has one writer:
|
|
# launchctl unload ~/Library/LaunchAgents/com.jaxperro.copybot.plist
|
|
set -euo pipefail
|
|
|
|
# geo-gate probe first (host/geocheck.py, no keys needed). GEOCHECK_ONLY=1 ->
|
|
# probe and idle WITHOUT starting the bot: lets a new host/region prove it
|
|
# passes Polymarket's IP geoblock while the old deployment is still the book's
|
|
# single writer. Otherwise the probe is informational — the PAPER bot only
|
|
# reads, so a blocked region only matters once real orders are on the table.
|
|
if [ -n "${GEOCHECK_ONLY:-}" ]; then
|
|
exec python3 "$(dirname "$0")/geocheck.py" --idle
|
|
fi
|
|
python3 "$(dirname "$0")/geocheck.py" \
|
|
|| echo "⚠ geo-gate BLOCKED/unknown here — fine for paper, do NOT go live from this box"
|
|
|
|
# COPYBOT_ROLE=live -> the REAL MONEY worker (separate Fly app
|
|
# wwf-copybot-live; NEVER convert the paper worker — the two roles must never
|
|
# share a process or a state file). Unarmed = missing any of
|
|
# LIVE_PRIVATE_KEY / LIVE_FUNDER_ADDRESS / LIVE_CONFIRM -> idle harmlessly
|
|
# (no clone, no book, no orders) so the machine can exist safely before
|
|
# Phase 2 funding. Arming is three `flyctl secrets set` calls by the USER;
|
|
# copybot.py additionally re-checks the geo-gate fatally and validates the
|
|
# phrase itself (LIVE_ROLLOUT 0.7, 1.5).
|
|
if [ "${COPYBOT_ROLE:-paper}" = "live" ]; then
|
|
if [ -z "${LIVE_PRIVATE_KEY:-}" ] || [ -z "${LIVE_FUNDER_ADDRESS:-}" ] || [ -z "${LIVE_CONFIRM:-}" ]; then
|
|
echo "live role UNARMED (need LIVE_PRIVATE_KEY + LIVE_FUNDER_ADDRESS + LIVE_CONFIRM) — idling"
|
|
exec python3 "$(dirname "$0")/geocheck.py" --idle
|
|
fi
|
|
fi
|
|
|
|
: "${GITHUB_TOKEN:?set GITHUB_TOKEN (PAT with repo contents read+write)}"
|
|
REPO_URL="https://x-access-token:${GITHUB_TOKEN}@github.com/jaxperro/winning-wallet-finder.git"
|
|
DIR="${COPYBOT_DIR:-/tmp/wwf}"
|
|
|
|
rm -rf "$DIR"
|
|
git clone --depth 20 "$REPO_URL" "$DIR"
|
|
cd "$DIR"
|
|
git config user.name "copybot[bot]"
|
|
git config user.email "copybot@users.noreply.github.com"
|
|
|
|
# live role, ARMED: own config (committed template + env secrets), own state
|
|
# file, own feed/fills (config paths), ALWAYS poll mode — the Alchemy push
|
|
# webhook stays pointed at the paper app (LIVE_ROLLOUT Phase 3.3).
|
|
if [ "${COPYBOT_ROLE:-paper}" = "live" ]; then
|
|
exec python3 copybot.py \
|
|
--config config.live.example.json \
|
|
--state copybot_state.live.json \
|
|
--live \
|
|
--poll "${POLL_SECONDS:-60}"
|
|
fi
|
|
|
|
# paper config is committed (no secrets); state resumes from the last commit.
|
|
# ALCHEMY_SIGNING_KEY set -> push mode (webhook server); else 60s poll mode.
|
|
if [ -n "${ALCHEMY_SIGNING_KEY:-}" ]; then
|
|
exec python3 copybot.py \
|
|
--config live/copybot.paper.json \
|
|
--state copybot_state.json
|
|
else
|
|
exec python3 copybot.py \
|
|
--config live/copybot.paper.json \
|
|
--state copybot_state.json \
|
|
--poll "${POLL_SECONDS:-60}"
|
|
fi
|