v3.0.14

Signed-off-by: Dinger <[email protected]>

Author: quantdinger-lab

.gitignore

@@ -29,6 +29,7 @@ backend_api_python/.env
 # ========================
 .idea/
 .vscode/
+agent-tools/
 *.swp
 *.swo
 *~

README.md

@@ -633,17 +633,27 @@ Yes—see **[QuantDinger-Mobile](https://github.com/brokermr810/QuantDinger-Mobi
 
 ## Exchange Partner Links
 
-The following links are available in-app under **Profile -> Open account** and may qualify users for trading-fee rebates depending on venue policies.
+The following links are available in-app under **Profile → Open account** or **Broker Accounts → Open account**, and may qualify users for trading-fee rebates depending on venue policies.
+
+### Crypto exchanges (API keys)
 
 | Exchange | Signup Link |
 |----------|-------------|
 | Binance | [Register](https://www.bsmkweb.cc/register?ref=QUANTDINGER) |
 | Bitget | [Register](https://partner.hdmune.cn/bg/7r4xz8kd) |
 | Bybit | [Register](https://partner.bybit.com/b/DINGER) |
 | OKX | [Register](https://www.xqmnobxky.com/join/QUANTDINGER) |
-| Gate.io | [Register](https://www.gateport.company/share/DINGER) |
+| Gate.io | [Register](https://www.gateport.business/share/DINGER) |
 | HTX | [Register](https://www.htx.com/invite/zh-cn/1f?invite_code=dinger) |
 
+### Forex / CFD — TMGM (MetaTrader 5)
+
+| Broker | Signup Link |
+|--------|-------------|
+| TMGM (MT5) | [Register](https://portal.tmgm.com/register?node=MTM0Mzc5&language=en) |
+
+After opening a TMGM account, install MetaTrader 5 and bind your server/login under **Profile → Exchange** or **Broker Accounts**.
+
 ## License and Commercial Terms
 
 - Backend source code is licensed under **Apache License 2.0**. See `LICENSE`.

VERSION

@@ -1 +1 @@
-3.0.11
+3.0.14

backend_api_python/app/_version.py

@@ -5,4 +5,4 @@
 CI). Do **not** edit by hand — run the bump script instead.
 """
 
-APP_VERSION = "3.0.11"
+APP_VERSION = "3.0.14"

backend_api_python/app/routes/credentials.py

@@ -252,6 +252,53 @@ def create_credential():
         return jsonify({'code': 0, 'msg': str(e), 'data': None}), 500
 
 
+@credentials_bp.route('/update-name', methods=['PUT', 'PATCH'])
+@login_required
+def update_credential_name():
+    """Update display name (alias) only — API keys in encrypted_config are untouched."""
+    try:
+        user_id = g.user_id
+        data = request.get_json() or {}
+        cred_id = data.get('id')
+        if cred_id is None:
+            cred_id = request.args.get('id', type=int)
+        try:
+            cred_id = int(cred_id)
+        except (TypeError, ValueError):
+            cred_id = None
+        if not cred_id:
+            return jsonify({'code': 0, 'msg': 'Missing id', 'data': None}), 400
+
+        name = (data.get('name') or '').strip()
+        if len(name) > 128:
+            return jsonify({'code': 0, 'msg': 'Name too long (max 128 characters)', 'data': None}), 400
+
+        with get_db_connection() as db:
+            cur = db.cursor()
+            cur.execute(
+                """
+                UPDATE qd_exchange_credentials
+                SET name = %s, updated_at = NOW()
+                WHERE id = %s AND user_id = %s
+                RETURNING id, name, exchange_id, api_key_hint, created_at, updated_at
+                """,
+                (name, cred_id, user_id),
+            )
+            row = cur.fetchone()
+            if not row:
+                cur.close()
+                return jsonify({'code': 0, 'msg': 'Not found', 'data': None}), 404
+            db.commit()
+            cur.close()
+
+        item = dict(row or {})
+        return jsonify({'code': 1, 'msg': 'success', 'data': item})
+    except Exception as e:
+        logger.error(f"update_credential_name failed: {str(e)}")
+        logger.error(traceback.format_exc())
+        return jsonify({'code': 0, 'msg': str(e), 'data': None}), 500
+
+
 @credentials_bp.route('/delete', methods=['DELETE'])
 @login_required
 def delete_credential():

backend_api_python/app/routes/indicator.py

@@ -738,6 +738,44 @@ def delete_indicator():
         return jsonify({"code": 0, "msg": str(e), "data": None}), 500
 
 
+@indicator_bp.route("/applyParamDefaults", methods=["POST"])
+@login_required
+def apply_param_defaults():
+    """
+    Apply tuned indicator parameter values into ``# @param`` lines in source code.
+
+    Body: { "code": "...", "indicatorParams": { "sma_short": 11, "sma_long": 35 } }
+    or flat keys: { "indicator_params.sma_short": 11, ... }
+    """
+    try:
+        data = request.get_json() or {}
+        code = str(data.get("code") or "")
+        if not code.strip():
+            return jsonify({"code": 0, "msg": "code is required", "data": None}), 400
+
+        params = data.get("indicatorParams") or data.get("indicator_params") or {}
+        if not isinstance(params, dict):
+            params = {}
+        for key, value in list((data.get("overrides") or {}).items()):
+            k = str(key or "")
+            if k.startswith("indicator_params."):
+                params[k.split(".", 1)[1]] = value
+
+        from app.services.experiment.overrides import enrich_experiment_overrides
+
+        nested = enrich_experiment_overrides({"indicatorParams": params}).get("indicatorParams") or params
+        new_code = IndicatorParamsParser.apply_defaults_to_code(code, nested)
+        changed = new_code != code
+        return jsonify({
+            "code": 1,
+            "msg": "success",
+            "data": {"code": new_code, "changed": changed, "indicatorParams": nested},
+        })
+    except Exception as e:
+        logger.error("apply_param_defaults failed: %s", e, exc_info=True)
+        return jsonify({"code": 0, "msg": str(e), "data": None}), 500
+
+
 @indicator_bp.route("/getIndicatorParams", methods=["GET"])
 @login_required
 def get_indicator_params():

backend_api_python/app/routes/quick_trade.py

@@ -1534,6 +1534,29 @@ def close_position():
             actual_close_size = position_size
         if actual_close_size <= 0:
             return jsonify({"code": 0, "msg": "Close size is zero"}), 400
+
+        if market_type == "spot":
+            from app.services.live_trading.spot_sizing import clamp_spot_close_quantity
+
+            adjusted, spot_meta = clamp_spot_close_quantity(
+                client, symbol=symbol, requested_qty=actual_close_size
+            )
+            if adjusted <= 0:
+                return jsonify(
+                    {
+                        "code": 0,
+                        "msg": "可卖余额不足，无法平仓（可能因买入手续费导致可用数量小于持仓记录）",
+                    }
+                ), 400
+            if spot_meta.get("adjusted"):
+                logger.info(
+                    "quick_trade spot close adjusted: symbol=%s requested=%s final=%s meta=%s",
+                    symbol,
+                    actual_close_size,
+                    adjusted,
+                    spot_meta,
+                )
+            actual_close_size = adjusted
 
         # ---- determine signal type based on position side ----
         if market_type == "spot":

backend_api_python/app/routes/settings.py

@@ -648,6 +648,20 @@ def _refresh_runtime_services() -> None:
                 'default': '10',
                 'description': 'Wait time for limit order fill before switching to market order'
             },
+            {
+                'key': 'SPOT_CLOSE_SAFETY_RATIO',
+                'label': 'Spot Close Safety Ratio',
+                'type': 'number',
+                'default': '0.998',
+                'description': 'When closing spot long, sell qty is capped to (exchange free base × this ratio), then floored to lot step. Lower if full close fails due to fees (valid range 0.9–1.0).'
+            },
+            {
+                'key': 'SPOT_OPEN_QUOTE_BUFFER',
+                'label': 'Spot Open Quote Buffer',
+                'type': 'number',
+                'default': '0.995',
+                'description': 'Fraction of USDT/notional used on spot open (reserve headroom for buy fees). Example 0.995 uses 99.5% of allocated quote (valid range 0.9–1.0).'
+            },
             {
                 'key': 'ALLOW_LOCAL_DESKTOP_BROKERS',
                 'label': 'Allow IBKR / MT5 (local desktop brokers)',

backend_api_python/app/routes/user.py

@@ -1123,6 +1123,81 @@ def _safe_json_loads(s, default=None):
         return default
 
 
+def _strategy_exchange_display_name(
+    exchange_config: dict,
+    *,
+    credential_map: dict,
+    user_id: int = 0,
+) -> str:
+    """Resolve exchange label for admin strategy lists.
+
+    Strategies often persist ``exchange_config`` as ``{credential_id: N}`` only
+  (API secrets live in ``qd_exchange_credentials``).  Read inline ``exchange_id``
+    first, then the credential row's ``exchange_id``, then ``resolve_exchange_config``
+    as a last resort.
+    """
+    if not isinstance(exchange_config, dict):
+        return ''
+
+    direct = (
+        exchange_config.get('exchange_id')
+        or exchange_config.get('exchange')
+        or exchange_config.get('broker')
+        or ''
+    )
+    direct = str(direct or '').strip()
+    if direct:
+        return direct
+
+    cred_id = exchange_config.get('credential_id') or exchange_config.get('credentials_id')
+    if cred_id:
+        try:
+            row = credential_map.get(int(cred_id))
+        except (TypeError, ValueError):
+            row = None
+        if row:
+            ex = str(row.get('exchange_id') or '').strip()
+            if ex:
+                return ex
+
+        try:
+            from app.services.exchange_execution import resolve_exchange_config
+
+            resolved = resolve_exchange_config(exchange_config, user_id=int(user_id or 1))
+            ex = str(resolved.get('exchange_id') or resolved.get('exchange') or '').strip()
+            if ex:
+                return ex
+        except Exception:
+            pass
+
+    return ''
+
+
+def _batch_load_credential_exchange_map(credential_ids: set) -> dict:
+    """Map credential id -> {id, exchange_id, name} for display (no decrypt)."""
+    if not credential_ids:
+        return {}
+    ids = sorted({int(i) for i in credential_ids if i})
+    if not ids:
+        return {}
+    placeholders = ','.join(['?'] * len(ids))
+    credential_map = {}
+    with get_db_connection() as db:
+        cur = db.cursor()
+        cur.execute(
+            f"""
+            SELECT id, exchange_id, name
+            FROM qd_exchange_credentials
+            WHERE id IN ({placeholders})
+            """,
+            tuple(ids),
+        )
+        for row in (cur.fetchall() or []):
+            credential_map[int(row['id'])] = dict(row)
+        cur.close()
+    return credential_map
+
+
 @user_bp.route('/system-strategies', methods=['GET'])
 @login_required
 @admin_required
@@ -1299,7 +1374,18 @@ def get_system_strategies():
 
             cur.close()
 
-        # Build response
+        # Build response — batch-resolve exchange names for credential_id-only configs.
+        cred_ids = set()
+        for s in strategies:
+            ec = _safe_json_loads(s.get('exchange_config'), {})
+            cid = ec.get('credential_id') or ec.get('credentials_id')
+            if cid:
+                try:
+                    cred_ids.add(int(cid))
+                except (TypeError, ValueError):
+                    pass
+        credential_map = _batch_load_credential_exchange_map(cred_ids)
+
         items = []
         for s in strategies:
             sid = s['id']
@@ -1322,10 +1408,12 @@ def get_system_strategies():
                 else:
                     indicator_name = s.get('strategy_name') or ''
 
-            # Extract exchange name
-            exchange_name = ''
-            if isinstance(exchange_config, dict):
-                exchange_name = exchange_config.get('exchange_id') or exchange_config.get('exchange') or ''
+            # Extract exchange name (inline config or saved credential reference).
+            exchange_name = _strategy_exchange_display_name(
+                exchange_config,
+                credential_map=credential_map,
+                user_id=int(s.get('user_id') or 0),
+            )
 
             # Positions data
             positions = positions_map.get(sid, [])

backend_api_python/app/services/alpaca_trading/README.md

@@ -132,6 +132,23 @@ All endpoints require `@login_required`:
 | Extended hours | Configurable per-order | Configurable per-order (limit only) |
 | Crypto | No (separate IBKR Crypto product) | Yes, same client |
 
+## Troubleshooting: WebSocket `400 invalid syntax`
+
+QuantDinger **connection test** and live orders use the **REST Trading API** (`TradingClient.get_account()`), **not** the market-data WebSocket at `wss://stream.data.alpaca.markets/...`.
+
+If you see Alpaca error **code 400 / invalid syntax** from the [streaming docs](https://docs.alpaca.markets/us/docs/streaming-market-data#authentication), that is almost always from a **WebSocket client** (custom script, another app, or a chart feed), not from `/api/alpaca/connect` or `/strategies/test-connection`.
+
+Common causes:
+
+| Issue | Fix |
+|-------|-----|
+| Subscribe before auth | After `connected`, send `{"action":"auth","key":"...","secret":"..."}` within 10s |
+| Wrong JSON shape | Use `action` + channel keys, e.g. `{"action":"subscribe","trades":["AAPL"]}` |
+| Invalid symbol | US stocks: `AAPL` (no `BTC/USDT`). Crypto: `BTC/USD` (Alpaca does **not** use `BTC/USDT`) |
+| Class shares | `BRK/B` → `BRK.B` for REST; do not treat as a crypto pair |
+
+This module normalizes symbols (`symbols.py`): `BTC/USDT` → `BTC/USD` for crypto, `BRK/B` → `BRK.B` for equities.
+
 ## Limitations / TODO
 
 - [ ] No bracket orders yet (Alpaca supports them; not yet wrapped)