📊 Configurable Platform Fee

• Per Price Plan: Each operator price plan can have its own platform fee percentage
• Automatic Collection: Platform fee is automatically deducted via Stripe Connect (application_fee)
• Applies to All Modules: Fee is charged on Subscription, Pay-per-Trade, Performance Fee, and Volume Fee
• Provider Stripe Connect: Providers need Stripe Connect Express account for platform fee collection
• Transparent: Platform fee is visible in Ops dashboard and provider earnings

💵 Flexible Revenue Configuration

• Fully Customizable: You define your own pricing model (monthly fees, setup fees, platform fee %)
• Platform Fee %: Configurable percentage on all provider revenue from followers (optional per plan)
• Account Limits: You set the account pool limits per plan (Master+Slave combined, fully configurable)
• Module Activation: You control which billing modules are available per plan
• Complete Control: All pricing, limits, and fees are configured by you as the platform owner

✅ Certified Idempotency

Protection against double-billing through database-level locks (Serializable Isolation).

Stress test verified: 5 parallel billing attempts → Only 1 charge succeeded. Zero duplicate transactions possible.

✅ Penny-Shaving Protection

Zero money loss from rounding errors.

Audited mathematical precision across thousands of micro-trades. Cent-based integer arithmetic eliminates floating-point drift.

✅ High-Water-Mark Guarantee

Fair performance fee calculation.

No fees charged on losses or recovery periods. HWM state persistence ensures followers only pay on genuine new profits.

✅ Revenue Assurance

Automatic platform fee collection via Stripe Connect.

Configurable percentage (e.g., 8%) hard-coded in billing logic. Application fee automatically deducted on every provider transaction.

🔧 Operator Board (Platform Owner)

Full Platform Control & Revenue Management

• Provider Management (Create/Edit/Activate/Disable/Delete)
• Price Plans (Fully Configurable: Recurring Fee, Setup Fee, Platform Fee %, Account Limits, Module Activation)
• Stripe Integration (TEST/LIVE modes, Connect Client ID, Webhook Secret)
• Partner API Credentials (Multiple credential sets, encrypted storage, connectivity checks)
• Revenue Dashboard (Total Providers, Active Providers, Paid Providers, Monthly Revenue, Avg Platform Fee %)
• System Health Monitoring (DB latency, Redis latency, Partner API status, Stripe status, Worker heartbeats, Queue backlogs)
• Module Activation per Plan (Subscription, Pay-per-Trade, Performance Fee, Volume Fee – you decide which to enable)
• Account Pool Limits (Master + Slave combined, you set the limits per plan, enforced before external account creation)
• Billing Status Overview (PAID/UNPAID/DISPUTE/NO_SUBSCRIPTION per provider)
• Provider Invite System (Email invites with token-based password setup)

📊 Provider Board (Master Trader)

Trade Signal Management & Follower Monetization

• Master Account Management (Add/Edit/Toggle/Delete external accounts via Partner API)
• Follower Management (View all followers, edit settings, assign plans, view billing status)
• Earnings Dashboard (Total Revenue, Total Lots Traded, Fees Collected, Active Followers, Active Slaves)
• Pricing Plans for Followers (Create offerings with Subscription/PPT/Performance/Volume modules)
• Signal Profile (Public page with slug, description, strategy, performance stats)
• SMTP Configuration (Custom email server for notifications to followers)
• Stripe Connect Onboarding (Express account setup for receiving payments from followers)
• Performance Analytics (Monthly P&L charts, Drawdown, Win Rate, Profit Factor, 24-month history)
• Account Pool Status (Used/Max accounts from operator plan + bonus)
• Risk Settings Templates (Define default risk settings for follower plans)
• Copy Settings (SL/TP updates, position limits, symbol filters, global protection)

👥 Follower Board

Copy Trading & Subscription Management

• Slave Account Management (Add/Edit/Toggle/Delete slave accounts)
• Plan Selection & Checkout (Browse provider offerings, Stripe checkout, instant activation)
• Performance Overview (Real-time Equity, Balance, P&L, Fees Paid, Lots Traded)
• Risk Settings (10 Risk Factor Types: Fixed Lot, Multiplier, Balance %, Equity %, Free Margin %, etc.)
• Copy Controls (Enable/Disable SL/TP updates, Max Open Positions, Max Lot Size, Reverse Copy)
• Symbol Mappings & Filters (Map master symbols to slave symbols, include/exclude symbols)
• Global Protection (Account-wide max drawdown, max daily loss, emergency stop)
• Real-Time Status (Active/Inactive, Billing Status, External Account Status)
• Billing History (View all payments, invoices, fees charged)
• Pay-per-Trade Allowance (View remaining trades for PPT plans)
• Performance Fee HWM (High-Water-Mark tracking for performance fee plans)
• Volume Fee Tracking (Weekly lot volume for volume fee plans)

📅 Subscription Module

• Recurring monthly/quarterly/yearly payments
• Configurable price & billing interval
• Auto-renewal via Stripe subscriptions
• Instant activation after successful payment
• Automatic deactivation on payment failure/cancellation
• Proration support for plan changes

📦 Pay-Per-Trade Module

• One-time payment for X trades (e.g., 20 EUR for 20 trades)
• Trade counting with deduplication (unique order IDs)
• Auto-disable when allowance fully used
• Copy-only trades counted (manual trades excluded)
• Cursor-based position sync (delta sync every 1h)
• Ledger-based tracking (3-month retention)

📈 Performance Fee Module

• Weekly fee on profits (percentage-based, e.g., 25%)
• High-Water-Mark (HWM) protection (only charge on new profits)
• Floating P&L included (unrealized positions counted)
• Auto-charge every Friday 23:00 CET (DST-safe)
• Weekly window: Sunday 23:00 → Friday 23:00 (Europe/Berlin)
• Stripe payment intent creation & processing
• HWM state persistence (per follower)

📊 Volume Fee Module

• Weekly fee per lot traded (e.g., 5 EUR/lot)
• Configurable €/lot rate
• Copy-only volume counting (manual trades excluded)
• Auto-charge every Friday 23:00 CET (DST-safe)
• Weekly window: Sunday 23:00 → Friday 23:00 (Europe/Berlin)
• Closed positions sync (cursor-based delta sync)
• Stripe payment intent creation & processing

🤖 Auto-Provisioning

• Follower pays → Slave account created automatically at Partner API
• Master-Slave mapping configured (setSettings with risk factor, limits, filters)
• Risk settings applied from provider’s plan template
• External account ID persisted in DB (PartnerExternalAccount table)
• Runs every 5 minutes (BullMQ repeatable job)
• Idempotent (safe to retry, checks existing mappings)
• Concurrency-safe (DB locks prevent double-provisioning)

💰 Billing Enforcement

• Stripe webhook processing (payment_failed, invoice.payment_failed, customer.subscription.deleted, charge.dispute.created)
• Instant external deactivation (Partner API updateAccount status=0)
• Cascade rules: Provider unpaid → all provider’s accounts disabled (Master + Slave)
• Cascade rules: Follower unpaid → only that follower’s slave disabled
• Idempotent retry with exponential backoff (max 5 attempts)
• Failsafe daily recheck (in case webhook missed)
• Delete pipeline: DELETE_PENDING → updateAccount(status=0) → deleteAllMappings → DELETED
• State machine: ACTIVE → DELETE_PENDING → DELETED/DELETE_FAILED

📊 Performance Sync (Reporting)

• Reporting data sync every 12h (Partner API getReporting)
• Monthly aggregation (P&L, Drawdown, Win Rate, Profit Factor)
• 24-month history for charts (Master performance analytics)
• Batch API calls (rate-limit friendly, max 1000 records per call)
• Cursor-based pagination for large datasets
• Aggregated data cached in DB (fast dashboard loading)

🚨 Daily Limit (Anti-Scalper)

• Max positions per day enforcement (configurable per provider)
• Master order counting via Partner API getMasterOrders
• Auto-disable mapping when limit reached
• Auto-reset at 00:00 Berlin time (DST-safe)
• Window calculation: today 00:00 → now (Europe/Berlin timezone)
• Runs every 30 minutes (BullMQ repeatable job)

🧹 Maintenance Jobs

• Daily pruning: AuditLog (12-month retention), SlaveOrderLedger (3-month retention)
• Stripe webhook events cleanup (30-day retention)
• Invite token expiration (7-day validity)
• DB housekeeping & optimization (VACUUM, ANALYZE)
• Runs daily at 03:00 UTC (BullMQ repeatable job)

🔄 Position Sync (Closed Positions)

• Closed positions sync every 1h (Partner API getClosedPositions)
• Copy-only detection (ticket matching Master→Slave)
• Deduplication via unique order IDs (SlaveOrderLedger table)
• Cursor-based delta sync (last_sync_start_position tracking)
• Used for Pay-per-Trade counting and Volume Fee calculation

💸 Performance Fee Job

• Runs every Friday 23:00 CET (BullMQ repeatable job, DST-safe)
• Window: Sunday 23:00 → Friday 23:00 (Europe/Berlin)
• Calculates follower P&L (realized + unrealized)
• High-Water-Mark (HWM) logic (only charge on new profits)
• Stripe payment intent creation (provider receives fee via Connect)
• Platform fee automatically deducted (application_fee_amount)
• State persistence (HWM, last window, last unrealized P&L)

📦 Volume Fee Job

• Runs every Friday 23:00 CET (BullMQ repeatable job, DST-safe)
• Window: Sunday 23:00 → Friday 23:00 (Europe/Berlin)
• Counts lots traded (copy-only, from closed positions)
• Calculates fee (lots × €/lot rate)
• Stripe payment intent creation (provider receives fee via Connect)
• Platform fee automatically deducted (application_fee_amount)

🔒 Security & Compliance

• Encrypted credentials (AES-256, master key in ENV)
• JWT authentication with refresh tokens
• Role-based access control (OPERATOR/PROVIDER/FOLLOWER)
• Stripe webhook signature verification
• Rate limiting (Throttler, configurable per endpoint)
• CORS protection (configurable origins)
• Helmet security headers (CSP, HSTS, etc.)
• Password hashing (bcrypt with salt rounds)
• Audit log (12-month retention, all critical actions)

⚡ Performance & Scalability

• Redis caching (Provider cache, Ops cache, TTL-based invalidation)
• Batch API calls (rate-limit friendly, max 1000 records)
• Cursor-based pagination (efficient for large datasets)
• Deduplication (unique keys, idempotent operations)
• DB connection pooling (configurable pool size)
• Next.js Standalone runtime (smaller Docker images)
• Optimized Docker images (multi-stage builds, non-root user)
• Lazy loading & code splitting (Next.js dynamic imports)

🔄 Reliability & Resilience

• Idempotent workers (retry-safe, no duplicate charges)
• Exponential backoff (max 5 attempts, configurable delays)
• Concurrency-safe limits (DB locks, transactions)
• Stripe webhook async processing (BullMQ job queue)
• Heartbeat monitoring (worker liveness checks)
• Queue health checks (backlog tracking, stalled jobs)
• Failsafe daily rechecks (in case webhooks missed)
• State machine for deprovisioning (ACTIVE → DELETE_PENDING → DELETED)

📊 Observability & Monitoring

• System health dashboard (DB/Redis/Partner API/Stripe status)
• DB/Redis latency monitoring (real-time ping checks)
• Queue backlog tracking (pending jobs per queue)
• Worker heartbeats (last seen timestamp, stale detection)
• Audit log (12-month retention, searchable, filterable)
• Partner API connectivity checks (credential set validation)
• Stripe Connect status (account status, capabilities)
• Revenue dashboard (KPIs, monthly revenue, platform fee tracking)

🌍 Multi-Tenant Architecture

• Single-server architecture (one installation, multiple providers)
• Provider isolation (provider_id scoping, row-level security)
• Shared infrastructure (DB, Redis, workers, scheduler)
• Per-provider limits (max followers, max positions/day, account pool)
• Account pool management (Master + Slave combined, enforced before external creation)
• Module activation per plan (Subscription/PPT/Performance/Volume)
• Platform fee per plan (configurable %, automatic collection via Stripe)
• Multi-credential support (different Partner API credentials per provider)

📧 Notifications & Communication

• SMTP integration (Nodemailer, configurable per provider)
• Invite emails (token-based, 7-day validity)
• Password reset (secure token, email verification)
• Payment notifications (successful payment, payment failed)
• Dispute alerts (charge dispute created, fraud detected)
• Fee charged confirmations (performance fee, volume fee)
• Limit reached warnings (account pool full, daily limit reached)
• Email templates (HTML + plain text, i18n support)

🧪 Testing & Quality

• Jest unit tests (API, services, jobs)
• Integration tests (DB, Stripe webhooks, Partner API)
• Stress tests (billing enforcement, concurrency)
• Evidence reports (test results, verification logs)
• Docker-first testing (tests run in containers)
• Test mode (NODE_ENV=test, Bull/BullMQ disabled)
• Mock Partner API (stub for testing without external calls)

🚀 Deployment & DevOps

• Docker Compose (single-command deployment)
• Multi-stage Docker builds (optimized image sizes)
• Non-root runtime (security best practice)
• ENV-based configuration (no secrets in code)
• .env templates (.env.example, .env.server.template)
• DB migrations (Prisma Migrate, versioned schema changes)
• Seed scripts (demo data, price plans, bootstrap)
• Health checks (Docker HEALTHCHECK, liveness probes)

🎨 UI/UX Features

• Responsive design (mobile, tablet, desktop)
• Dark mode support (user preference)
• Loading states (skeletons, spinners)
• Error handling (user-friendly messages, retry buttons)
• Form validation (client + server-side)
• Toast notifications (success, error, info)
• Modal dialogs (confirmation, forms)
• Charts & graphs (ECharts, performance analytics)
• Tables (sortable, filterable, paginated)

🔧 Admin & Configuration

• Price plan management (create, edit, delete, sync with Stripe)
• Provider management (create, edit, activate, disable, delete)
• Stripe configuration (TEST/LIVE modes, webhook secret, Connect client ID)
• Partner API configuration (multiple credential sets, encrypted storage)
• Module activation (enable/disable billing modules per plan)
• Account limits (max accounts per plan, bonus accounts)
• Platform fee configuration (% per plan, automatic collection)
• SMTP configuration (per provider, encrypted credentials)

📈 Analytics & Reporting

• Revenue dashboard (total revenue, monthly revenue, platform fee)
• Provider KPIs (total providers, active, paid, unpaid)
• Follower KPIs (total followers, active, paid, unpaid)
• Account pool usage (used/max, Master/Slave breakdown)
• Performance analytics (monthly P&L, drawdown, win rate, profit factor)
• Billing history (invoices, payments, fees charged)
• Audit log (searchable, filterable, exportable)
• Charts (24-month history, monthly aggregation)

🔐 Authentication & Authorization

• Email/Username login (flexible login identifier)
• Password reset (email-based, secure token)
• Invite system (token-based, 7-day validity)
• JWT tokens (access + refresh, configurable expiry)
• Role-based access control (OPERATOR/PROVIDER/FOLLOWER)
• Session management (refresh token rotation)
• Email verification (double opt-in for self-signup)
• Password strength requirements (configurable)