Change Log

Operator console overhaul.. `/admin` now has tabs: Orders, Wallet,

Settings, Admins, and Audit.

Settings. (new `app_settings` table): live-editable spread (bps),

order expiry window, min/max order size, kill switch with custom

reason shown to users, and minimum order size that fires the

Telegram "new order" alert. Replaces the hardcoded `PREMIUM_BPS`

constant; quotes and order creation now read from the DB with a 5s

server cache.

Wallet. : scans every derived HD deposit address (across

Ethereum, BNB Chain, Base, Arbitrum, Polygon) for native + USDT /

USDC / DAI balances. Shows per-chain totals, RPC latency, current

block, and a per-address table linking to the originating order.

Auto-refreshes every 60s.

Admins. : list current admin accounts, invite a new one by email

(auto-creates the auth user if needed; magic-link sign-in), and

revoke. Self-revoke is blocked.

Audit. : viewer for the existing `admin_audit` table; every

setting change, retry, admin invite/revoke, and Telegram test is

logged.

Telegram. : "Send test ping" button in Settings → verifies the Files: `src/routes/admin.tsx`, `src/lib/admin.functions.ts`,

bot can post to `TELEGRAM_CHAT_ID`.

`src/lib/settings.server.ts` (new),

`src/lib/wallet-scan.server.ts` (new),

`src/lib/quote.functions.ts`, `src/lib/orders.functions.ts`,

migration `app_settings`.

Admin login switched to magic link.. Removed password sign-in from Files: `src/routes/admin.tsx`, migration `grant_admin_to_seed_emails`.

`/admin`. Admins now enter their email and receive a one-time magic link.

Seeded `bobby@blockchainmint.com` as an admin — the role is granted

automatically on first sign-in via an `auth.users` insert trigger.

Telegram notifications for order lifecycle.. Sends messages to a single Files: `src/lib/telegram.server.ts` (new),

admin chat (`TELEGRAM_CHAT_ID`) on: order created, deposit detected, deposit

confirmed, Bitmart buy filled, completed, failed, and expired. Uses the

Lovable Telegram connector gateway — no raw bot token in the codebase.

Notifications are best-effort; failures are logged but never break

fulfillment.

`src/lib/orders.functions.ts`,

`src/routes/api/public/hooks/swap-tick.ts`

Swap fulfillment: buy on actual deposited amount.. The Bitmart market buy File: `src/routes/api/public/hooks/swap-tick.ts`

now uses the summed USD of all on-chain deposits for the order (supports

multi-transaction payments), not the quoted/intended amount. `paid_amount_usd`

is kept in sync as additional transfers arrive. The 5% premium still applies

to the actual received amount.

Swap form: "Get a wallet" button.. Added a wallet icon button to the right File: `src/routes/swap.tsx`

of the TXC destination address field linking to

https://wallet.texitcoin.org, with a tooltip.

CHANGELOG.md created.. Keeping a running log of user-visible and File: `CHANGELOG.md` (new)

behavioral changes.

Security: lock down `user_roles` writes.. Added explicit RLS policies so Migration: `20260601161050_*.sql`

only admins can INSERT/UPDATE/DELETE rows in `user_roles` (prevents

self-elevation to admin). SELECT remains admin-all + self-read.

Initial swap platform build.. End-to-end stablecoin → native TXC swap Database: `orders`, `deposits`, `user_roles`, `admin_audit`, Bitmart integration: live TXC/USDT spot price, market buy, withdrawal EVM scanning: ERC-20 transfer detection on Ethereum, Base, Arbitrum, HD deposit addresses: deterministic hot-wallet addresses per order. Swap form (`/swap`): chain + token + amount selection, live quote with 5% Order tracking (`/swap/$orderId`): real-time status, QR code, countdown, Admin dashboard (`/admin`): auth-gated order table, Bitmart balance Fulfillment cron (`/api/public/hooks/swap-tick`): pg_cron-driven tick Live price ticker in header. Files: `src/lib/bitmart.server.ts`, `src/lib/evm-scan.server.ts`,

pipeline. Core components:

`hd_address_counter` tables with RLS policies.

polling, wallet balances.

Polygon, BSC via Alchemy RPC.

premium, unique deposit address generation.

on-chain TX links.

cards, retry action with audit logging.

that watches deposits, buys TXC, triggers withdrawals, and polls completion.

`src/lib/hd.server.ts`, `src/lib/orders.functions.ts`,

`src/lib/quote.functions.ts`, `src/lib/admin.functions.ts`,

`src/routes/swap.tsx`, `src/routes/swap.$orderId.tsx`,

`src/routes/admin.tsx`, `src/routes/api/public/hooks/swap-tick.ts`,

`src/components/live-ticker.tsx`, `src/components/site-shell.tsx`