torch-liquidation-bot 1.0.4 → 2.0.1

package/dist/wallet-profiler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-profiler.js","sourceRoot":"","sources":["../src/wallet-profiler.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAGH,uCAAkD;AAGlD,mCAA+B;AAE/B,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,+BAA+B;AACzE,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,kCAAkC;AAC1E,MAAM,cAAc,GAAG,IAAI,CAAA,CAAC,4BAA4B;AAExD,MAAa,cAAc;IAIzB,YAAY,GAAW;QAHf,UAAK,GAAG,IAAI,GAAG,EAAyB,CAAA;QAI9C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;IAChB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAAsB,EAAE,OAAe,EAAE,IAAY;QACjE,IAAI,CAAC,UAAU,EAAE,CAAA;QAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACtC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,GAAG,mBAAmB,EAAE,CAAC;YACpE,OAAO,MAAM,CAAA;QACf,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,oBAAoB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;QAE5D,kBAAkB;QAClB,MAAM,IAAI,GAAG,MAAM,IAAA,qBAAU,EAAC,OAAO,CAAC,CAAA;QAEtC,8BAA8B;QAC9B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAE5E,oCAAoC;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAEpE,MAAM,OAAO,GAAkB;YAC7B,OAAO;YACP,YAAY,EAAE,IAAI,CAAC,QAAQ;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU;YACV,SAAS;YACT,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAA;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAChC,OAAO,OAAO,CAAA;IAChB,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,UAAsB,EACtB,IAAY,EACZ,OAAe;QAEf,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAA,sBAAW,EAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;YAE5D,iEAAiE;YACjE,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAA;YAEnF,IAAI,IAAI,GAAG,CAAC,CAAA;YACZ,IAAI,MAAM,GAAG,CAAC,CAAA;YACd,IAAI,SAAS,GAAG,CAAC,CAAA;YAEjB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,GAA2B,CAAA;gBACrC,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC5B,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC;wBAAE,IAAI,EAAE,CAAA;;wBACpB,MAAM,EAAE,CAAA;oBACb,SAAS,IAAI,CAAC,CAAC,OAAO,CAAA;gBACxB,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,GAAG,MAAM,CAAA;YACjC,OAAO;gBACL,WAAW;gBACX,IAAI;gBACJ,MAAM;gBACN,OAAO,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG;gBACnD,SAAS;aACV,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;YAChD,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;QAC3E,CAAC;IACH,CAAC;IAEO,iBAAiB,CACvB,SAA2C,EAC3C,KAAiB;QAEjB,4BAA4B;QAC5B,MAAM,QAAQ,GAA2B;YACvC,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,EAAE;YACV,GAAG,EAAE,EAAE;SACR,CAAA;QACD,IAAI,IAAI,GAAG,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,EAAE,CAAA,CAAC,kBAAkB;QAE7D,uDAAuD;QACvD,IAAI,KAAK,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YAC1B,0DAA0D;YAC1D,MAAM,eAAe,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAA,CAAC,aAAa;YAChE,IAAI,IAAI,eAAe,CAAA;YAEvB,2BAA2B;YAC3B,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;gBACxB,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA,CAAC,YAAY;YAClE,CAAC;QACH,CAAC;QAED,OAAO,IAAA,aAAK,EAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;IACxC,CAAC;IAEO,UAAU;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACxC,IAAI,GAAG,GAAG,OAAO,CAAC,WAAW,GAAG,gBAAgB,EAAE,CAAC;gBACjD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;QACD,qDAAqD;QACrD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;YAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,cAAc,CAAC,CAAA;YACjE,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAzHD,wCAyHC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "torch-liquidation-bot",
-  "version": "1.0.4",
+  "version": "2.0.1",
   "description": "lending position monitor and auto-liquidation skill using the torchsdk",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -13,7 +13,8 @@
   "scripts": {
     "build": "tsc",
     "clean": "rm -rf dist",
-    "test": "npx tsx tests/test_lending.ts",
+    "test": "npx tsx tests/test_readonly.ts",
+    "test:lending": "npx tsx tests/test_lending.ts",
     "test:bot": "npx tsx tests/test_bot.ts",
     "format": "prettier --write src/ tests/"
   },
@@ -22,7 +23,7 @@
     "@solana/spl-token": "^0.4.14",
     "@solana/web3.js": "^1.98.4",
     "bs58": "^6.0.0",
-    "torchsdk": "^1.0.0"
+    "torchsdk": "^1.0.5"
   },
   "devDependencies": {
     "@types/node": "^20",

package/readme.md

@@ -1,6 +1,8 @@
-# torch-liquidation-bot
+# torch-liquidation-bot v2.0.0 (Read-Only)
 
-Multi-token liquidation bot for [Torch Market](https://torch.market) lending on Solana. Discovers lending markets, profiles borrower wallets, predicts which loans are likely to fail, and executes profitable liquidations.
+Read-only lending market scanner for [Torch Market](https://torch.market) on Solana. No wallet required. Only an RPC endpoint is needed.
+
+> **v2.0.0 Breaking Change:** All wallet-dependent functionality (bot mode, watch mode, transaction signing) is deprecated. The entry point no longer imports or references any wallet, keypair, or signing code. Only read-only info mode is available.
 
 ## Install
 
@@ -8,98 +10,83 @@ Multi-token liquidation bot for [Torch Market](https://torch.market) lending on
 npm install torch-liquidation-bot
 ```
 
-## How It Works
-
-Every migrated token on Torch has a built-in lending market. Holders borrow SOL against their tokens. When a borrower's loan-to-value ratio exceeds 65%, anyone can liquidate the position and collect a 10% bonus on the collateral.
-
-This bot finds those opportunities before other bots do by **predicting** which positions will go underwater:
-
-1. **Scan** -- discovers all tokens with active lending markets
-2. **Profile** -- checks each borrower's SAID reputation and trade history
-3. **Score** -- rates every loan on a 4-factor risk model (0-100)
-4. **Liquidate** -- executes when a position crosses the threshold and the profit exceeds your minimum
-
 ## Quick Start
 
 ```bash
-MODE=bot WALLET=<base58-private-key> RPC_URL=<rpc-endpoint> npx torch-liquidation-bot
-```
-
-## Modes
-
-### `bot` (default) -- full liquidation bot
+# show lending info for all migrated tokens
+RPC_URL=<rpc> npx torch-liquidation-bot
 
-Runs two concurrent loops:
-- **Scan loop** (every 60s) -- finds tokens with active lending, snapshots prices
-- **Score loop** (every 15s) -- profiles borrowers, scores loans, executes liquidations
-
-```bash
-MODE=bot WALLET=<key> RPC_URL=<rpc> npx torch-liquidation-bot
+# show lending info for a specific token
+MINT=<mint> RPC_URL=<rpc> npx torch-liquidation-bot
 ```
 
-### `info` -- display lending parameters
-
-```bash
-# all migrated tokens with lending
-MODE=info RPC_URL=<rpc> npx torch-liquidation-bot
+## What It Does
 
-# specific token
-MODE=info MINT=<mint> RPC_URL=<rpc> npx torch-liquidation-bot
-```
+Every migrated token on Torch has a built-in lending market. This skill discovers those markets and displays their parameters — interest rates, LTV thresholds, treasury balances, and active loan counts.
 
-### `watch` -- monitor your own loan health
+That's it. No wallet loaded. No transactions built. No state changes.
 
-```bash
-MODE=watch MINT=<mint> WALLET=<key> RPC_URL=<rpc> npx torch-liquidation-bot
+## Configuration
 
-# with auto-repay if your position becomes liquidatable
-MODE=watch MINT=<mint> WALLET=<key> AUTO_REPAY=true RPC_URL=<rpc> npx torch-liquidation-bot
-```
+| Variable | Required | Default | Description |
+|----------|----------|---------|-------------|
+| `RPC_URL` | yes | -- | Solana RPC endpoint |
+| `MINT` | no | -- | Token mint address (omit to show all tokens) |
+| `LOG_LEVEL` | no | `info` | `debug`, `info`, `warn`, `error` |
 
-## Risk Scoring
+No `WALLET`, no `MODE`, no bot-specific config.
 
-Every loan gets a composite score from four weighted factors:
+## Programmatic Usage
 
-| Factor | Weight | What It Measures |
-|--------|--------|------------------|
-| LTV proximity | 40% | How close to the 65% liquidation threshold |
-| Price momentum | 30% | Collateral price trend (linear regression on recent snapshots) |
-| Wallet risk | 20% | SAID trust tier + trade win/loss ratio |
-| Interest burden | 10% | Accrued interest relative to collateral value |
+```typescript
+import { loadReadOnlyConfig } from 'torch-liquidation-bot/config'
+import { Connection } from '@solana/web3.js'
+import { getTokens, getLendingInfo } from 'torchsdk'
 
-Positions above the risk threshold (default: 60) are flagged and watched closely. Liquidatable positions with profit above your minimum are executed immediately, highest profit first.
+const config = loadReadOnlyConfig()
+const connection = new Connection(config.rpcUrl, 'confirmed')
 
-## Configuration
+const { tokens } = await getTokens(connection, {
+  status: 'migrated',
+  sort: 'volume',
+  limit: 50,
+})
 
-| Variable | Required | Default | Description |
-|----------|----------|---------|-------------|
-| `RPC_URL` | yes | -- | Solana RPC endpoint |
-| `WALLET` | bot/watch | -- | Base58 private key |
-| `MODE` | no | `bot` | `bot`, `info`, or `watch` |
-| `MINT` | info/watch | -- | Token mint address |
-| `SCAN_INTERVAL_MS` | no | `60000` | Token discovery interval |
-| `SCORE_INTERVAL_MS` | no | `15000` | Position scoring interval |
-| `MIN_PROFIT_SOL` | no | `0.01` | Minimum profit to execute liquidation |
-| `RISK_THRESHOLD` | no | `60` | Risk score cutoff for close monitoring |
-| `PRICE_HISTORY` | no | `20` | Price snapshots to keep for momentum |
-| `LOG_LEVEL` | no | `info` | `debug`, `info`, `warn`, `error` |
+for (const t of tokens) {
+  const lending = await getLendingInfo(connection, t.mint)
+  console.log(`${t.symbol}: ${lending.active_loans} active loans`)
+}
+```
 
 ## Architecture
 
 ```
-src/
-├── types.ts            — interfaces and contracts
-├── config.ts           — env vars → typed config
-├── logger.ts           — structured logging
+packages/bot/src/
+├── types.ts            — interfaces (ReadOnlyConfig + dormant BotConfig)
+├── config.ts           — loadReadOnlyConfig() (active) + loadConfig() (dormant)
 ├── utils.ts            — shared helpers
-├── scanner.ts          — discovers tokens with active lending
+└── index.ts            — read-only entry point
+
+dormant (retained for future release, not imported by index.ts):
+├── logger.ts           — structured logging
+├── scanner.ts          — token discovery
 ├── wallet-profiler.ts  — SAID reputation + trade history
 ├── risk-scorer.ts      — 4-factor risk model
-├── liquidator.ts       — executes liquidation txs
-├── monitor.ts          — scan + score orchestration
-└── index.ts            — entry point
+├── liquidator.ts       — liquidation execution
+└── monitor.ts          — scan + score orchestration
 ```
 
+## Deprecated (v1.x)
+
+The following functionality is preserved in the source files but is not imported or reachable from the entry point. It will be re-enabled in a future version after further security review.
+
+- `bot` mode — scan, score, and liquidate positions
+- `watch` mode — monitor loan health + auto-repay
+- `loadConfig()` — wallet keypair decoding
+- `loadWallet()` — private key loading
+- All transaction signing (`sendAndConfirmTransaction`)
+- All SAID Protocol write operations (`confirmTransaction`)
+
 ## Lending Parameters
 
 | Parameter | Value |
@@ -116,23 +103,22 @@ Requires [Surfpool](https://github.com/nicholasgasior/surfpool) running a mainne
 
 ```bash
 surfpool start --network mainnet --no-tui
-pnpm test        # lending lifecycle test
-pnpm test:bot    # bot module test (scanner, profiler, scorer, liquidator)
+pnpm test            # read-only test (default)
+pnpm test:lending    # v1.x lending lifecycle test (requires wallet)
+pnpm test:bot        # v1.x bot module test (requires wallet)
 ```
 
 ## Security
 
-- Private keys loaded from env, never logged or transmitted
-- All transactions built locally via [torchsdk](https://github.com/mrsirg97-rgb/torchsdk) Anchor IDL
-- Unsigned transactions signed with your own keypair -- keys never leave your environment
-- Minimum profit threshold prevents unprofitable executions
-- Graceful shutdown on SIGINT
+- No wallet loaded, no keypair decoded, no private key in memory
+- No transaction building, no signing, no state changes
+- Outbound connections: Solana RPC only (no SAID API in active codepath)
+- Distributed via npm — no post-install hooks, no remote code fetching
 
 ## Links
 
-- [torchsdk](https://github.com/mrsirg97-rgb/torchsdk) -- the SDK this bot is built on
+- [torchsdk](https://github.com/mrsirg97-rgb/torchsdk) -- the SDK this skill reads from
 - [Torch Market](https://torch.market) -- the protocol
-- [SAID Protocol](https://saidprotocol.com) -- wallet reputation layer
 - [ClawHub](https://clawhub.ai/mrsirg97-rgb/torchliquidationbot) -- skill registry
 
 ## License