145 Commits

Author	SHA1	Message	Date
kjh2064	8dabffc08a	chore: commit pre-existing untracked work + finish archived-doc notes ... Commits work that predated this session and was sitting untracked: qualitative sell strategy module (src/quant_engine), the t20 outcome ledger cron workflow, the QuantEngine masterpiece roadmap doc, a WBS execution yaml, and shared Razor Pages partials (page header, delete confirm modal) with their view models. Verified these build clean (0 errors, 0 warnings) before committing. Also includes the "ARCHIVED" header notes on 6 docs archived in the previous commit - the git-mv landed there, but the note text itself was missed from that commit's staged file list. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-30 12:21:32 +09:00
kjh2064	70824c2afb	fix: security, data-integrity, and doc-drift findings from repo audit ... Consolidates duplicate KIS API client implementations (governance tests were exercising an unused class instead of the one actually running in production), closes a SQL injection path in the DB admin page, fixes a migration that used MySQL-only syntax and had never actually applied (confirmed against production), resyncs docs/db/quantengine.dbml with all migrations, and removes a duplicate OMS·WMS·ERP frontend tree in favor of src/frontend/. Also corrects several unverifiable/inflated claims in the OMS planning docs and realigns CI/CD and architecture documentation with what's actually in the repo. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-30 11:20:02 +09:00
kjh2064	24f288655f	refactor(wbs-ux): route root authenticated users to Vue templates and map SPA fallback	2026-07-25 11:51:24 +09:00
kjh2064	1a06a01018	ui(wbs-ux): inject prototype gallery link to CSHTML server layout navigation menu	2026-07-25 11:50:34 +09:00
kjh2064	f1ec1a3ee1	feat(wbs-ux): implement real-world CRUD templates and refactor QuantDataGrid to AG Grid	2026-07-25 11:28:34 +09:00
kjh2064	da3964c562	feat(wbs): Vue 3 CRUD templates and OpenAPI Axios client refactoring	2026-07-24 17:49:50 +09:00
kjh2064	781e04f6e9	feat: display deployment version in admin footer ... - Add AppVersion to appsettings.Production.json in prepare-release.yml - Display version in _AdminLayout.cshtml footer via IConfiguration - Shows deployed version (e.g., v0.1.20260724.165410.7bd491e) for users Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>	2026-07-24 17:06:56 +09:00
kjh2064	58980a4c7a	feat(api): add emergency password reset FastEndpoint API [WBS-10]	2026-07-24 12:20:47 +09:00
kjh2064	757f2439af	feat(wbs): WBS M4/M5 C# domain engines & Vue 3 PrimeVue AG-Grid migration [WBS-10]	2026-07-24 11:31:36 +09:00
kjh2064	2fe4cb288f	feat(quant): WBS-FE-BE-100 complete Vue3 Vite8 SPA & .NET10 FastEndpoints refactoring	2026-07-22 15:14:28 +09:00
kjh2064	bea5462c5e	feat(dotnet): add collection bootstrap hosted service	2026-07-13 01:15:25 +09:00
kjh2064	7fa78f4c7c	refactor(dotnet): materialize scheduler report artifacts	2026-07-13 01:12:28 +09:00
kjh2064	ca3b394ec2	refactor(dotnet): remove aggregate collection repository contract	2026-07-13 01:09:57 +09:00
kjh2064	ae32f86685	refactor(dotnet): move collection schema init to service	2026-07-13 01:06:02 +09:00
kjh2064	e0d278e6eb	refactor(dotnet): split collection read and write contracts	2026-07-13 01:00:36 +09:00
kjh2064	99377e9ca9	refactor(dotnet): centralize runtime audit trail	2026-07-13 00:52:32 +09:00
kjh2064	bccefed35e	refactor(dotnet): separate collection read model service	2026-07-13 00:44:43 +09:00
kjh2064	c852ad49cf	refactor(dotnet): externalize scheduler definitions	2026-07-13 00:39:59 +09:00
kjh2064	ee4ae5583d	refactor(dotnet): add scheduler audit trail	2026-07-13 00:11:52 +09:00
kjh2064	d7c106f292	refactor(dotnet): standardize scheduler state and definitions	2026-07-13 00:08:28 +09:00
kjh2064	528a1b4425	refactor(dotnet): standardize scheduler job definitions	2026-07-13 00:04:39 +09:00
kjh2064	ea9614be13	feat(qe-m3-05): complete scores frontend DOM verification E2E test and fix Gitea CI migration sequence	2026-07-12 22:17:45 +09:00
kjh2064	f698880aaa	build(harness): integrate TreatWarningsAsErrors into all csproj files and prioritize dotnet tests in CI	2026-07-12 21:57:36 +09:00
kjh2064	b0c9776601	feat(qe-m3-01): implement GetBarsAsOf with lookahead bias prevention and complete unit tests	2026-07-12 21:46:38 +09:00
kjh2064	5589a0432b	feat(collection): wire KIS collection end-to-end, add price-history pipeline (WBS QE-M0/M1/M2) ... Critical re-review of the QuantEngine WBS evidence system found several regressions of the "no fake gates" discipline established by M0, plus a still-unwired M1 collection path. This closes 10 more WBS tasks (QE-M1-01..06, QE-M2-01/02/04/05/06 — see spec/60_quant_engine_wbs.yaml) with real, gate-verified evidence (18/34 total). M1 — real KIS data now lands in PostgreSQL end-to-end: - SchedulerService: load ticker universe from GatherTradingData.json instead of a hardcoded array; fix a Hangfire scoped-service resolution bug. - KisDataCollectionOrchestrator: restore logging on the lineage-event write path (was a bare `catch {}` swallowing all failures silently); persist daily OHLCV bars into quantengine.price_history_daily per run. - Verified live: POST /api/collection/run -> Hangfire -> orchestrator -> KIS mock API -> PostgreSQL, with Playwright DOM/API parity evidence. M2 — historical price-history pipeline: - CollectionRepository: SavePriceHistoryDailyAsync (idempotent upsert), GetPriceHistorySummaryAsync (per-ticker aggregation) + a new DateOnlyTypeHandler registered globally, since Dapper has no built-in System.DateOnly support in either direction (write threw NotSupportedException, read threw a constructor-mismatch InvalidOperationException — found by exercising both paths live). - tools/validate_price_history_integrity_v1.py: gap-freeness (vs KIS trading calendar) + price-sanity gate over collected history. - Admin Collection page: new "히스토리 현황" summary table + GET /api/collection/history-summary, with Playwright evidence. Governance/gate fixes: - validate_market_time_series_schema_v1.py mislabeled its own output "runtime_database_query": "DATA_GATED" despite never opening a DB connection (pure file/regex check) — relabeled "check_scope": "STATIC_STRUCTURAL_ONLY" and wired the node into the release DAG so it isn't only reachable from ci.yml, matching every other validator. Live-data authority for the same claim stays with QE-M2-01's pg_query gate (spec/60), documented in spec/64. - Fixed a WBS log_pattern check (QE-M1-06) that couldn't match its own multi-line target; loosened two depends_on edges (QE-M1-05/06, QE-M2-04/05) that encoded "needs X verified" when the real requirement was only "needs X's code merged." - Discovered and fixed admin-pages.spec.ts logging in with the wrong seeded password (admin/admin instead of admin/quant123!, per CLAUDE.md) — every test in that suite had been silently failing at the login step. Deferred: QE-M2-03 (2-year backfill) — the KIS mock/VTS token endpoint started returning 403 after the first successful call this session; looks like a token-issuance rate limit or credential issue on KIS's side, not a code defect. Backfilling at scale right now would just generate more 403s, so left QE-M2-03 PENDING pending KIS account/console verification. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-12 21:07:53 +09:00
kjh2064	1c192ecdea	feat(web): add DB Table Management admin page supporting dynamic view and CRUD row modification	2026-07-12 14:24:36 +09:00
kjh2064	6d9937c590	fix(web): calculate correct Hangfire job StartedAt using TotalDuration metadata	2026-07-12 14:15:46 +09:00
kjh2064	ef6f9c74f6	fix(web): define explicit action endpoint with handler query for operations manual trigger form	2026-07-12 14:10:40 +09:00
kjh2064	24ec410f3d	feat(web): publish version.txt in build pipeline for deterministic live server versioning	2026-07-12 14:05:10 +09:00
kjh2064	024122d310	fix(web): resolve path separator mismatch in git commit hash parsing, and update fallback release values	2026-07-12 13:57:42 +09:00
kjh2064	688ee3350d	chore(web): update hourly price update scheduler to run every 2 hours during market hours	2026-07-12 13:42:51 +09:00
kjh2064	f40da64a05	fix(web): support runId in Detail page from both route parameters and query strings	2026-07-12 13:37:33 +09:00
kjh2064	475950be36	feat(web): add manual trigger action support for Hangfire recurring jobs	2026-07-12 13:36:52 +09:00
kjh2064	27a56e65b7	feat(web): update AppVersion format to comply with quant_YYYYMMDD.count.hash rule	2026-07-12 13:31:46 +09:00
kjh2064	a9986fbc4c	feat(web): implement progressive IP lockout duration scaling based on block counts	2026-07-12 13:26:30 +09:00
kjh2064	ee14f5fbe4	feat(web): dynamically fetch release version from AssemblyInformationalVersion	2026-07-12 13:21:27 +09:00
kjh2064	3f45fbc36e	feat(web): display application version on login and admin dashboard pages	2026-07-12 13:19:47 +09:00
kjh2064	a3fe301308	security(web): secure Hangfire Dashboard with cookie authentication filter	2026-07-12 13:14:20 +09:00
kjh2064	bcc9b76212	fix(web): resolve User Edit routing mismatch and apply asp-page Tag Helpers	2026-07-12 13:12:24 +09:00
kjh2064	6582ffc02a	chore: deprecate and remove blazor client code and project configurations	2026-07-12 13:06:57 +09:00
kjh2064	92efa934a2	fix: restore authoritative database connection setting	2026-07-12 12:22:17 +09:00
kjh2064	606664404b	chore: protect external runtime connection settings	2026-07-12 12:19:34 +09:00
kjh2064	a7f9b27a55	fix: require production database connection environment	2026-07-12 12:16:22 +09:00
kjh2064	21da79cb46	feat: ingest canonical JSON seeds into PostgreSQL	2026-07-12 11:57:35 +09:00
kjh2064	49637f1b02	feat: export PostgreSQL training dataset as JSON	2026-07-12 11:55:17 +09:00
kjh2064	6e666844f0	feat: add canonical decision learning service	2026-07-12 11:53:17 +09:00
kjh2064	5d89c6ad02	feat: wire normalized learning store into dotnet	2026-07-12 11:48:32 +09:00
kjh2064	1c46d7b558	fix: add admin collection start route	2026-07-12 11:10:15 +09:00
kjh2064	e7d1069222	feat: add quant engine WBS verification harness	2026-07-12 10:58:22 +09:00
kjh2064	a274ef448a	fix: Auth cookies invalidated on every deployment (Data Protection discriminator) ... User reported: "배포가 되면 인증이 풀린다" (auth resets after every deployment). Root cause: Program.cs had no explicit Data Protection configuration. Without SetApplicationName, ASP.NET Core derives the key-ring discriminator from the app's physical content root path. Every deployment lands in a brand-new directory (~/deployments/quantengine_{tag}_{hash}/), so the discriminator changed on every single release. The cookie authentication ticket is encrypted/signed via this key ring, so once the discriminator changed, every previously-issued auth cookie became undecryptable -- forcing all logged-in users to authenticate again after each deploy, even well inside their 12-hour ExpireTimeSpan. Fix: explicit .SetApplicationName("QuantEngine") pins a stable discriminator across deployments, and .PersistKeysToFileSystem points at %LOCALAPPDATA%/quantengine-keys (Linux: ~/.local/share/quantengine-keys via User=kjh2064 in the systemd unit) -- a location outside the versioned deployment directories, so the actual key material also survives every redeploy and service restart instead of only the discriminator being stable.	2026-07-12 02:04:03 +09:00