Release: merge dev into main

.github/workflows/release-dev.yml

@@ -0,0 +1,88 @@
+name: Dev Release
+
+on:
+  push:
+    branches:
+      - dev
+
+permissions:
+  contents: write
+
+jobs:
+  release-dev:
+    runs-on: ubuntu-latest
+    env:
+      BOT_TOKEN: ${{ secrets.MAIN_BOT_TOKEN }}
+      CHAT_ID: ${{ vars.DEV_RELEASE_CHAT_IDS }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@v6
+        with:
+          go-version: '1.21'
+
+      - name: Get short SHA
+        id: vars
+        run: echo "sha_short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
+
+      - name: Calculate next version
+        id: calc_version
+        uses: mathieudutour/github-tag-action@v6.1
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          dry_run: true
+          tag_prefix: "v"
+
+      - name: Tag dev build
+        id: tag_version
+        uses: mathieudutour/github-tag-action@v6.1
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          custom_tag: v${{ steps.calc_version.outputs.major }}.${{ steps.calc_version.outputs.minor }}.${{ steps.calc_version.outputs.patch }}-${{ steps.vars.outputs.sha_short }}
+          tag_prefix: ""
+
+      - name: Create local tag
+        run: git tag ${{ steps.tag_version.outputs.new_tag }}
+
+      - name: Run GoReleaser (dev)
+        uses: goreleaser/goreleaser-action@v5
+        with:
+          distribution: goreleaser
+          version: latest
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Mark as prerelease
+        run: gh release edit ${{ steps.tag_version.outputs.new_tag }} --prerelease
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Notify Telegram (Dev)
+        if: success()
+        run: |
+          IFS=',' read -ra TARGETS <<< "${{ env.CHAT_ID }}"
+          for target in "${TARGETS[@]}"; do
+            target=$(echo "$target" | xargs)
+            if [[ -z "$target" ]]; then
+              continue
+            fi
+            if [[ "$target" == *":"* ]]; then
+              chat_id=${target%%:*}
+              thread_id=${target#*:}
+              curl -s -X POST https://api.telegram.org/bot${{ env.BOT_TOKEN }}/sendMessage \
+                -d chat_id="$chat_id" \
+                -d message_thread_id="$thread_id" \
+                -d text="🧪 *New Dev Build Published!*%0A%0A*Tag:* ${{ steps.tag_version.outputs.new_tag }}%0A*Commit:* ${{ github.sha }}%0A*Author:* ${{ github.actor }}%0A%0A[View Release](https://github.com/${{ github.repository }}/releases/tag/${{ steps.tag_version.outputs.new_tag }})" \
+                -d parse_mode="Markdown"
+            else
+              curl -s -X POST https://api.telegram.org/bot${{ env.BOT_TOKEN }}/sendMessage \
+                -d chat_id="$target" \
+                -d text="🧪 *New Dev Build Published!*%0A%0A*Tag:* ${{ steps.tag_version.outputs.new_tag }}%0A*Commit:* ${{ github.sha }}%0A*Author:* ${{ github.actor }}%0A%0A[View Release](https://github.com/${{ github.repository }}/releases/tag/${{ steps.tag_version.outputs.new_tag }})" \
+                -d parse_mode="Markdown"
+            fi
+          done

.github/workflows/release.yml

@@ -0,0 +1,81 @@
+name: Release
+
+on:
+  pull_request:
+    types: [closed]
+    branches:
+      - main
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    if: github.event.pull_request.merged == true
+    runs-on: ubuntu-latest
+    env:
+      BOT_TOKEN: ${{ secrets.MAIN_BOT_TOKEN }}
+      CHAT_ID: ${{ vars.RELEASE_CHAT_IDS }}
+      PR_TITLE: ${{ github.event.pull_request.title }}
+      PR_BODY: ${{ github.event.pull_request.body }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@v6
+        with:
+          go-version: '1.21'
+
+      - name: Bump version and push tag
+        id: tag_version
+        uses: mathieudutour/github-tag-action@v6.1
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          default_bump: patch
+
+      - name: Create local tag
+        run: git tag ${{ steps.tag_version.outputs.new_tag }}
+
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v5
+        with:
+          distribution: goreleaser
+          version: latest
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Notify Telegram Success
+        if: success()
+        run: |
+          # Escape PR body for JSON
+          ESCAPED_BODY=$(echo "$PR_BODY" | jq -R -s '.')
+          # Remove enclosing quotes from jq output
+          ESCAPED_BODY="${ESCAPED_BODY:1:-1}"
+          # Truncate if too long (Telegram limit is 4096 chars, so 3000 is safe)
+          if [ ${#ESCAPED_BODY} -gt 3000 ]; then
+            ESCAPED_BODY="${ESCAPED_BODY:0:3000}..."
+          fi
+
+          IFS=',' read -ra TARGETS <<< "${{ env.CHAT_ID }}"
+          for target in "${TARGETS[@]}"; do
+            target=$(echo "$target" | xargs)
+            if [[ "$target" == *":"* ]]; then
+              chat_id=${target%%:*}
+              thread_id=${target#*:}
+              curl -s -X POST https://api.telegram.org/bot${{ env.BOT_TOKEN }}/sendMessage \
+                -d chat_id="$chat_id" \
+                -d message_thread_id="$thread_id" \
+                -d text="🚀 *New Release Published!*%0A%0A*Version:* ${{ steps.tag_version.outputs.new_tag }}%0A*Title:* ${PR_TITLE}%0A*Author:* ${{ github.actor }}%0A%0A*Description:*%0A${ESCAPED_BODY}%0A%0A🔗 *Release Link:*%0Ahttps://github.com/${{ github.repository }}/releases/tag/${{ steps.tag_version.outputs.new_tag }}" \
+                -d parse_mode="Markdown"
+            else
+              curl -s -X POST https://api.telegram.org/bot${{ env.BOT_TOKEN }}/sendMessage \
+                -d chat_id="$target" \
+                -d text="🚀 *New Release Published!*%0A%0A*Version:* ${{ steps.tag_version.outputs.new_tag }}%0A*Title:* ${PR_TITLE}%0A*Author:* ${{ github.actor }}%0A%0A*Description:*%0A${ESCAPED_BODY}%0A%0A🔗 *Release Link:*%0Ahttps://github.com/${{ github.repository }}/releases/tag/${{ steps.tag_version.outputs.new_tag }}" \
+                -d parse_mode="Markdown"
+            fi
+          done
+

.gitignore

@@ -5,4 +5,11 @@ data/*
 LightningTipBot
 LightningTipBot.exe
 BitcoinDeepaBot
-test_pay_api.sh
+test_pay_api.sh
+
+.DS_Store
+.claude/settings.local.json
+analytics_export.py
+analytics_requirements.txt
+ANALYTICS_API.md
+ANALYTICS_QUICKSTART.md

.goreleaser.yaml

@@ -0,0 +1,24 @@
+project_name: BitcoinDeepaBot
+builds:
+  - env:
+      - CGO_ENABLED=1
+    goos:
+      - linux
+    goarch:
+      - amd64
+    flags:
+      - -a
+      - -installsuffix
+      - cgo
+    ldflags:
+      - -s -w
+checksum:
+  name_template: 'checksums.txt'
+snapshot:
+  name_template: "{{ .Tag }}-next"
+changelog:
+  sort: asc
+  filters:
+    exclude:
+      - '^docs:'
+      - '^test:'

config.yaml.example

@@ -36,8 +36,23 @@ generate:
 nostr:
   private_key: "hex private key here"
 
-# API Send Configuration
+# API Configuration
 api:
+  # Analytics API - HMAC authenticated endpoints for data export
+  # Generate secrets with: openssl rand -hex 32
+  analytics:
+    enabled: true
+    timestamp_tolerance: 300  # seconds (5 minutes)
+    api_keys:
+      data-team:
+        name: "Data Team"
+        hmac_secret: "your-analytics-hmac-secret-here"
+      # Add more keys for different consumers:
+      # dashboard:
+      #   name: "Internal Dashboard"
+      #   hmac_secret: "another-secure-secret-here"
+
+  # Send API - wallet-based HMAC authenticated endpoints
   send:
     enabled: true
     internal_network: "10.0.0.0/24"