TradeTrack Pro Updates

Professional Trade Journaling & Portfolio Management System
Lead Developer: Murat Kahveci, Ph.D. β€’ mkahveci@gmail.com
Added Improved Fixed Security
Latest
v2.15.1

v2.15series

2 releases

v2.15.1 LATEST β€” P&L Integrity & Inbox Precision Alignment

Jan 06, 2026
Added
  • Trade-level P&L breakdown now displays Gross P&L, Net P&L, and total Fees/Commissions for audit clarity.
  • Dashboard archived metrics now include separate cards for Total Net P&L, Total Gross P&L, and Total Fees/Commissions.
  • Calculator now exposes group-level rollups: net_pl, gross_pl, and total_fees_all.
Improved
  • Standardized system-wide P&L definitions: Net P&L is stored; Gross P&L is derived as Net + Fees + Commissions.
  • Aligned Inbox β†’ Trade β†’ Dashboard β†’ Analytics precision rules to eliminate rounding drift between modules.
  • Improved archived-trade financial reporting to mirror broker-style statements with explicit fee transparency.
Fixed
  • Resolved double-subtraction of fees/commissions in Dashboard and Analytics by standardizing premium_paid_received as Net P&L.
  • Corrected trade card P&L semantics so Gross ↔ Net relationship is always consistent across views.
  • Fixed trade leg ordering so legs sort newest entry_date first and master leg is forced to the bottom across Active and Archived trades.
  • Inbox: Fixed price truncation by aligning fill_price and strike_price precision to 4 decimals and normalizing IVR to 2 decimals end-to-end.
  • Inbox inline editing now blocks invalid numeric formats for fill_price, strike_price, iv_rank, and quantity to prevent silent data corruption.

v2.15.0 β€” UX Persistence & Preference Hardening

Jan 05, 2026
Added
  • Server-side accordion state persistence with per-tab isolation (Active vs. Archived).
  • Visible 'MASTER' leg indicators and row highlighting for trade group clarity.
  • Dedicated 'Delete Trade Group' control with explicit destructive confirmation.
  • Atomic read-modify-write support for JSON user preferences in save_preference.php.
Improved
  • Extended Preference API to support normalization and sanitization of tab-specific keys.
  • Improved dashboard high-stress usability with darkened '+ Add Leg' buttons and recalibrated spacing.
  • Migrated accordion state truth-source from local storage to server-side user preferences.
Fixed
  • Resolved preference persistence failure where client-side events failed to commit to DB.
  • Eliminated layout flicker by aligning server-side render state with persisted accordion preferences.
  • Corrected DOM-safe ID generation (trade-<groupId>) for consistent JS/CSS targeting.
  • Removed accidental deletion risk by hiding individual leg trash icons on master legs.

v2.14series

2 releases

v2.14.1 β€” Knowledge Base UX, Comments & Security Patch

Jan 04, 2026
Added
  • Per-user Knowledge Base pinning with persistent, user-specific ordering.
  • Threaded comments system for Knowledge Base articles with role-gated posting (Admin / SuperAdmin / SDET).
  • Soft-delete support for Knowledge Base comments with audit-safe behavior.
  • New database tables: `kb_pins` (per-user article pinning) and `kb_comments` (threaded comments with soft-delete).
Improved
  • Knowledge Base comments now display a safe user identity (username, fallback to email or User #ID).
  • Restored full Knowledge Base article layout after truncation regression and corrected sidebar alignment.
  • Improved comment card spacing and visual hierarchy for readability.
  • Enforced CSRF protection on Knowledge Base pin/unpin and comment add/delete actions.
  • Standardized Knowledge Base foreign keys to signed INT to match `kb_articles.id`.
Fixed
  • Resolved missing JavaScript globals for Knowledge Base CSRF and comment endpoints.
  • Fixed comment submit spinner hanging without a network request.
  • Prevented soft-deleted comments from rendering as visible placeholder cards.
  • Eliminated PHP warnings caused by stale `user_email` references.
  • Corrected pin icon state not updating due to missing class toggle logic.
  • Aligned signed/unsigned INT foreign key mismatches for Knowledge Base tables.

v2.14.0 β€” Application Routing & Endpoint Hardening

Jan 04, 2026
Added
  • Front Controller Architecture: Introduced a single public entry point (index.php) routing all requests through internal controllers and views.
  • Clean Public URLs: Enabled executable-free routes (e.g., /share?group_id=186&token=...) for improved security and readability.
Improved
  • Endpoint Security: Blocked direct web access to PHP endpoints via server rules and denied PHP execution in assets/uploads directories.
  • Server Hardening: Disabled directory listing across public paths to prevent unintended file exposure.

v2.13series

2 releases

v2.13.1 β€” Knowledge Base Tab Persistence Fix

Jan 02, 2026
Added
  • Knowledge Base: Auto-saves active tab selection to user preferences on click for consistent return behavior.
Improved
  • Knowledge Base: Tab restore logic now prioritizes saved `active_kb_tab` preference over role defaults for predictable navigation.
Fixed
  • Knowledge Base: Prevented role-based default tabs (Admin SOP/Tutorial) from overriding the user's last active tab on refresh or after viewing an article.

v2.13.0 β€” Directional Intelligence & Finance Ops

Jan 02, 2026
Added
  • Directional Lab Engine: Integrated Futures Tick Model automatically populating tick sizes and values from the global instrument database.
  • Risk/Reward Calculator: Implemented automated R:R framework (Default 1:3) with presets and auto-calculation of Stop Loss/Profit Target prices.
  • Finance Administration Suite: Overhauled manage_finance.php with a persistent tabbed interface.
  • Instrument Governance: Added full 'Edit/Update' capabilities for Global Instruments and Commission Rules.
  • Directional State Persistence: Expanded autosave payload to include directional inputs (stop_risk_pct, rr_ratio, profit_target).
Improved
  • Inbox Staging Logic: Updated ingestion workflow to map the Staged entry_price directly to fill_price.
  • Lab UX Redesign: Consolidated helper functions and cleaned up layout overlaps in the Directional Trading module.
  • Tick Precision: Enforced strict rounding logic to align calculated Futures prices with specific tick increments.
Fixed
  • DOM Integrity: Removed duplicate element IDs across the Strategy Lab to ensure canonical validation.
  • Tab Visibility: Resolved styling conflicts in the Finance Admin tabs for Dark Mode.
  • Security Hardening: Applied strict CSRF token validation and numeric casting across Finance POST actions.

v2.12series

1 release

v2.12.0 β€” Session Security & Preference Controls

Jan 02, 2026
Added
  • Idle Auto-Logout: Server-side enforcement mechanism automatically terminating sessions after inactivity.
  • Timeout Preferences: User-configurable session duration settings (15m, 30m, 1h, 8h, 24h) in user profile.
Improved
  • Session Hardening: Implemented strict ID regeneration on privilege changes and enforced HttpOnly/Secure/SameSite cookie flags.

v2.11series

1 release

v2.11.0 β€” Identity Security & Fee Governance

Jan 01, 2026
Added
  • Forgot Password Flow: Complete secure reset workflow with email token validation.
  • CSRF Defense: Implemented anti-CSRF token validation across manage_finance.php.
  • Database Integrity: Added unique_fee_rule constraint to fee_schedule table.
  • Migration: 20260101_01_governance_fixes.sql provisioning password reset tables.
Improved
  • Governance Logic: Updated manage_finance.php to block duplicate fee rule creation.
  • Input Validation: Enforced strict uppercase logic for symbols and numeric constraints.
Fixed
  • Session Leaks: Hardened bootstrap.php with Cache-Control: no-store headers.
  • UI Restoration: Restored missing HTML containers in 'Commission Rules'.

v2.10series

1 release

v2.10.0 β€” Release Intelligence & Roadmap Ops

Jan 01, 2026
Added
  • Roadmap Admin Console: Full-featured JSON editor with real-time validation and auto-save.
  • AI Prompt Builder: Integrated context engine for conflict-free release planning.
  • Version Drift Scan: Visual intelligence system identifying milestone version lags.
  • Static Gatekeeping: Added User::isSuperAdminStatic() for safe permission checks.
Improved
  • Roadmap Schema: Updated data structure to support target_version at Phase and Milestone levels.
Fixed
  • Admin Stability: Resolved HTTP 500 errors in roadmap_admin.php.
  • Static Context Logic: Fixed fatal error on non-static method calls.

v2.9series

1 release

v2.9.0 β€” High-Contrast UI & Workflow Velocity

Jan 01, 2026
Added
  • Copy & Go Workflow: implemented synchronous action bypassing pop-up blockers for AI launch.
  • Visual Feedback Engine: Added immediate interaction states to clipboard buttons.
  • High-Contrast Interface: Upgraded Action Buttons to 'Solid Cyan' for superior visibility.
Improved
  • AI System Prompt: Refined Master Prompt to exclude unreliable fields and standardize JSON structure.
Fixed
  • Manual Leg Logic: Removed hardcoded '+45 Days' default expiration for manual entries.

v2.8series

1 release

v2.8.0 β€” Precision Asset Logic & QA Architecture

Dec 31, 2025
Added
  • Asset Class Granularity: Explicitly distinct CALL, PUT, STOCK, and FUTURES types.
  • Dev Cycle Manager: Tool to generate AI prompts and update qa_plans.json.
  • Data Purge Utility: Added 'Purge Data' button in Settings with cascading delete protection.
  • Smart Import Logic: Automated tagging for Strategy Lab templates.
  • Real-Time Import Math: Integrated P&L and fee calculations directly into the import loop.
Improved
  • QA Architecture: Decoupled test plans into standalone qa_plans.json.
  • Strategy Standardization: Consolidated redundant naming conventions.
  • Frontend Logic: Updated trade_form.php to map types to specific fee schedules.
Fixed
  • Multiplier Resolution: Fixed 'Partial Match' bug for micro-futures via length-priority sorting.
  • Blob Parsing: Resolved issues with parsing raw JSON blobs during AI import.
  • Schema Gaps: Added missing persistence for multiplier, iv_rank, and pop fields.

v2.7series

1 release

v2.7.0 β€” Database Integrity & Performance Core

Dec 30, 2025
Added
  • Performance Engine: Implemented optimized composite indexes for high-frequency queries.
  • Schema Hardening: Normalized all Primary and Foreign Keys to INT UNSIGNED.
  • Migration Architecture: Established idempotent migration strategy for DEV/PROD sync.
Improved
  • Database Core: Refactored entire Foreign Key constraint layer to enforce strict integrity.
Fixed
  • Referential Integrity: Resolved long-standing Foreign Key conflicts and orphaned records.
  • Type Safety: Corrected data type mismatches between parent and child tables.
  • Auto-Increment Logic: Fixed monotonic sequence definitions for scalability.

v2.6series

1 release

v2.6.0 β€” Dynamic Commission Engine & Inbox Automation

Dec 30, 2025
Added
  • Dynamic Commission Engine: Database-driven configuration system via window.appConfig.
  • Inbox Automation: Implemented automatic expiry calculation and Bulk Delete capability.
  • Futures Intelligence: Supported comprehensive root symbols with automatic normalization.
  • Visual Status Logic: Updated Strategy Lab to display 'OFFLINE' for empty inputs.
  • Schema Expansion: Added expiry_date column to trade_inbox table.
Fixed
  • Initialization Race Condition: Resolved commission calculation failure on load.
  • Staging Data Integrity: Fixed regression where IVR values were dropped during transfer.
  • Dashboard Visibility: Updated 'High IVR' badge styling for contrast.
  • State Reset: Refined clearLab() to correctly send null values to API.

v2.5series

1 release

v2.5.0 β€” Strategy Lab Persistence & Visual Overhaul

Dec 30, 2025
Added
  • Session Persistence Engine: Implemented strategy_lab_state table and save API.
  • Auto-Save Architecture: Added debounce logic to strategy_lab.php.
  • Visual Selection State: Upgraded 'Selected Strategy' UI with blue glow and scale pop.
  • High-Contrast Metrics: Updated Contract Size indicator to Neon Purple theme.
  • Clear Lab Utility: Added button to wipe persisted database state.
Improved
  • Field Formatting: Applied industrial CSS classes to Asset and IVR fields.
Fixed
  • Staging Connectivity: Fixed 'Send to Staging' button responsiveness.
  • State Restoration: Resolved issue where HTML inputs were not pre-filling on load.

v2.4series

1 release

v2.4.0 β€” Global Bootstrap & Environment Isolation

Dec 30, 2025
Added
  • Centralized Boot Sequence: Implemented bootstrap.php for unified initialization.
  • Environment DNA (config/local.php): Introduced protected, non-synced configuration.
  • Dynamic URL Resolution: Added app_url() helper for SSL and reverse proxies.
  • Multi-Role Hierarchy: Refined User class for inherited permissions.
Improved
  • Registration Overhaul: Refactored register.php to Industrial Dark theme.
  • Branding Centralization: Implemented APP_NAME global constant.
  • Migration Engine Integration: Hooked migrate_db.php into bootstrap.
Fixed
  • Standardized Guardrails: Replaced inconsistent session checks with User::requireLogin().
  • Path Absolute Resolution: Converted inclusions to use **DIR**.
  • Redundancy Cleanup: Removed duplicate logic across API and root.

v2.3series

1 release

v2.3.0 β€” Super Admin Architecture & Brand Centralization

Dec 29, 2025
Added
  • Super Admin Role: Tier with exclusive access to AI Tools and Release Management.
  • Role Hierarchy Engine: Implemented strict inheritance model.
  • Centralized Branding: Created config/branding.php for global identity.
  • RBAC for User Management: Added privilege escalation protection.
Improved
  • Security Hardening: Locked down deploy and migrate scripts to super_admin.
  • Code Cleanup: Deprecated hardcoded arrays in favor of User::isSuperAdmin().
Fixed
  • KB Editor Access: Fixed logic error blocking valid Admins.
  • Settings Page Visibility: Resolved panel visibility for admins.
  • Session Role Persistence: Addressed role update persistence issues.

v2.2series

1 release

v2.2.0 β€” Infrastructure Integrity & Admin SOPs

Dec 29, 2025
Added
  • Atomic Deployment Pipeline: Implemented SHA-256 checks for Dev -> Prod sync.
  • Migration Safety Engine: Added sys_migrations tracking and pre-migration backups.
  • Deployment Locking: System-wide lock to prevent concurrent releases.
  • Admin SOP Module: New category for internal operational documentation.
Improved
  • Asset Preservation: Upgraded upload logic to perform non-destructive merges.
  • Idempotency: Refined scripts to perform zero operations if no changes detected.
  • CMS Workflow: Smart visibility defaults for Admin vs Public docs.
Fixed
  • Transaction Safety: Implemented DDL-safe execution logic.
  • Error Containment: Migration failures now trigger immediate deployment halt.

v2.1series

1 release

v2.1.0 β€” Automated Deployment & Migration Engine

Dec 28, 2025
Added
  • Automated Deployment Engine: Secure interface to push files with terminal UI.
  • Database Migration System: Zero-dependency engine for incremental SQL updates.
  • Schema Versioning Workflow: Structured directory for non-destructive updates.
  • Production Deployment Trigger: Integrated 'Deploy System Updates' button.
Improved
  • AI Prompt Intelligence: Upgraded System Prompt to v1.5 with Migration Awareness.
  • Security Hardening: Enforced strict admin-role headers on scripts.
Fixed
  • Migration Auth Bypass: Implemented DEPLOYMENT_RUNNING constant whitelist.
  • State Persistence Synchronization: Prevented redundant SQL execution.

v2.0series

1 release

v2.0.0 β€” SDET & QA Protocol Integration

Dec 28, 2025
Added
  • Multi-Role Architecture: Support for concurrent roles (e.g., Admin + SDET).
  • QA / SDET Module: Implemented qa_reports schema and interactive protocol table.
  • Test Plan Installer: Script to auto-generate standard test cases.
  • Knowledge Base Segmentation: Introduced dedicated 'QA Test Plans' tab.
Improved
  • Role Management UI: Refactored for checkbox-based multi-role assignment.
  • Access Control Logic: Hardened ACL for non-admin profile views.
  • Global Timezone Synchronization: Forced America/Chicago (CST) for PHP and MySQL.
Fixed
  • Tab State Persistence: Resolved KB tab reset on reload.
  • Preview Engine Stability: Added null-safety to clean_preview().

v1.11series

2 releases

v1.11.1 β€” Print System Overhaul & Analytics Patch

Dec 27, 2025
Added
  • Site-Wide Print Engine: Global @media print strategy for all modules.
  • Nuclear Contrast Mode: CSS overrides to force black-on-white text for printing.
Improved
  • Smart Content Expansion: Print layouts now expand to 100% width.
Fixed
  • Analytics Table Readability: Fixed dark header printing issues.

v1.11.0 β€” Media Management & Dashboard Intelligence

Dec 27, 2025
Added
  • Integrated Image Uploader: Secure API for direct Markdown screenshot uploads.
  • Automated Garbage Collection: 'Diff & Destroy' logic for orphaned images.
  • Dashboard 'Latest Intel' Widget: Displays recent public KB articles.
Improved
  • Smart Image Constraints: Constrained screenshots to 85% width for Safari compatibility.
  • Strategy Lab UI: Replaced video players with lightweight link cards.

v1.10series

1 release

v1.10.0 β€” Knowledge Base CMS & AI Writer

Dec 27, 2025
Added
  • Knowledge Base CMS: Article system with Draft/Publish workflow.
  • AI Writer Suite: Integrated 4-mode generative AI into the editor.
  • Editor Power Tools: Added 'Save & Stay' and safety-check deletion.
  • State Persistence: Session-based tab retention for KB navigation.
  • RBAC Security: Enforced Role-Based Access Control at data fetch level.
Improved
  • Video Integration: Replaced embedded players with lightweight cards.
  • UI Modernization: Applied 'Industrial Glass' theme and unified icons.
  • Preview Logic: Stripped Markdown artifacts from article summaries.
Fixed
  • Redirect Loops: Resolved session_start() omission in knowledge_base.php.
  • Layout Gaps: Fixed whitespace rendering in video containers.

v1.9series

1 release

v1.9.0 β€” SaaS Gold Master & Core Stability

Dec 26, 2025
Added
  • User Class 'Gold Master': Finalized 16-method core architecture.
  • Private Beta Gatekeeper: Implemented invite code and registration logic.
  • System Settings Engine: Added APIs for dynamic platform control.
  • Search Persistence: Pagination links now retain search queries.
Improved
  • Pagination Logic: Refactored user list sorting to ID ASC.
Fixed
  • Critical Search Crash: Resolved HTTP 500 error in PDO parameters.
  • Admin User Creation: Restored missing createUser method.
  • Syntax Sanitization: Stripped invisible formatting characters.

v1.8series

1 release

v1.8.0 β€” Binary Event Logic & Risk Guardrails

Dec 26, 2025
Added
  • Binary Event Intelligence: Added 'Event Date' input to Recon module.
  • Critical Warning System: Automatic alerts for high-volatility events.
Improved
  • Strategy Safety Logic: Programmatically disabled high-risk strategies during binary events.

v1.7series

1 release

v1.7.0 β€” SaaS Foundation & Dynamic Finance Engine

Dec 26, 2025
Added
  • SaaS Registration Engine: Full onboarding flow with password hashing.
  • Dynamic Fee Architecture: Implemented 3-tier commission lookup logic.
  • Smart Fee Manager: Added self-healing rule copying.
Improved
  • Security Scoping: Enforced strict ownership boundaries for fee schedules.
  • Dashboard UX: Re-routed 'New Trade' to Inbox workflow.
Fixed
  • Inbox SQL Integrity: Resolved crashes by enforcing strategy and user ID injection.
  • Asset Logic Alignment: Standardized Inbox dropdowns.

v1.6series

1 release

v1.6.0 β€” Strategy Lab & Risk Command Intelligence

Dec 25, 2025
Added
  • The Strategy Lab (Pre-Trade GPS): Module for strategy identification based on IVR.
  • Risk Command Center: Integrated portfolio risk calculator.
  • Automated Leg Explosion: Auto-expansion for complex strategies.
  • Source Context Indicators: UI icons differentiating manual vs AI inputs.
  • Schema Expansion: Added database support for strike_price.
Improved
  • Staging Area UI: Enhanced with dedicated 'Strike' column.
Fixed
  • AI UI Restoration: Restored AI JSON Injection panel functionality.

v1.5series

1 release

v1.5.0 β€” Strategy Lab & Intelligent Template Architecture

Dec 25, 2025
Added
  • Strategy Lab Module: Specialized UI for pre-trade planning.
  • Automated Template Engine: Core integration for multi-leg structures.
  • Schema Expansion: Added strike_price support across tables.
  • Enhanced Inbox Intelligence: Integrated Strike column visibility.
Improved
  • Inbox Metadata: Upgraded workflow to capture strike-specific data.
Fixed
  • AI UI Restoration: Resolved regression in Inbox interface.

v1.4series

1 release

v1.4.0 β€” Staging Workflow Enforcement & AI Data Integrity

Dec 25, 2025
Added
  • Inbox Workflow Enforcement: Mandated 'Staging First' methodology.
  • Advanced Staging Interface: Full inline editing with Smart Asset dropdowns.
  • AI 'Copy & Go' UX: Integrated Quick Action buttons for AI launch.
Improved
  • Default Strategy Configuration: Set default to 'Put (Short)'.
Fixed
  • Critical Data Loss: Resolved IV Rank persistence failure.
  • DTE Calculation Logic: Updated formula to be dynamic.
  • Group Status Logic: Corrected Group Close trigger states.
  • AJAX Security: Expanded whitelist for inline updates.

v1.3series

1 release

v1.3.0 β€” Industrial Command Center & State Intelligence

Dec 24, 2025
Added
  • Industrial Command Center: UI overhaul with glass-morphism.
  • State Persistence Engine: Database saving for accordion states.
  • Portfolio & Strategy Manager: New CRUD and tracking interfaces.
  • Developer Zone: Admin console for AI and Release Management.
  • Database Schema Migration: Added user_id to strategies table.
Improved
  • Social Sharing Workflow: Integrated Public Share Link to clipboard.
  • Branding Assets: Updated SVG logo and verification barcodes.
  • Dashboard Cleanup: Removed legacy links and redundant overlays.
Fixed
  • Smart Markdown Parser: Resolved rendering and character issues.
  • Navbar Access Control: Restricted visibility to authenticated users.
  • Safe Mode Protection: Added crash prevention for missing columns.

v1.2series

1 release

v1.2.0 β€” AI Magic Injection & Multi-Leg Workflow

Dec 20, 2025
Added
  • AI Magic Import Engine: Extraction layer for Gemini JSON arrays.
  • Intelligent Image-to-JSON OCR: Extraction pipeline for TastyTrade screenshots.
  • Sequential Multi-Leg Queue: Session-based queuing for spread legs.
  • AI Injection Command Center: Dedicated landing page for validation.
  • UI Integration: Quick-access robot icon in dashboard header.
Improved
  • Re-engineered api/add_trade.php for last_group_id feedback.
Fixed
  • Persistent Grouping Bridge: Engineered API to maintain group integrity.

v1.1series

1 release

v1.1.0 β€” Tasty Mechanics & UI Synchronization Update

Dec 20, 2025
Added
  • Persistent Dashboard State: Server-side tab persistence.
  • One-Click Side Selector: LONG/SHORT pill buttons in modal.
  • Rich Media Sharing: Emoji-optimized summaries for social apps.
  • Enhanced Share View: Integrated portfolio stats into share.php.
Improved
  • Consolidated Logic: Reduced core file sizes by ~35%.
  • DRY Architecture: Centralized event handling.
Fixed
  • Exact-Copy Duplication: Re-engineered logic for scale-ins.
  • AI Analysis Restoration: Ensured reports remain visible after updates.
  • UTF-8 Secure Encoding: Base64 encoding for PHP-to-JS passing.
  • Global Calculation Engine: Centralized DTE, Fee, and P&L logic.

v1.0series

1 release

v1.0.0 β€” Production Release (MVP)

Dec 20, 2025
Added
  • Core Dashboard with 'Active' and 'Archived' trade views.
  • Smart 'Add Trade' Modal with auto-calculations.
  • AI Coach Integration (Gemini 1.5) for mechanics analysis.
  • Secure 'Share' system using HMAC encryption.
  • User Manual integrated directly into the application.
Improved
  • Refined UI to a high-contrast Dark Mode theme.
  • Optimized database queries for trade grouping logic.
Fixed
  • Resolved truncation issues in AI Analysis responses.
  • Fixed 'Duplicate Leg' logic to correctly copy data.
  • Corrected modal backdrop freezing issues.
Tip: use the β€œJump to Version” bar to move horizontally across releases.