refactor: harden trading paths and consolidate IPC architecture#15
Open
Rogers-F wants to merge 1 commit into
Open
refactor: harden trading paths and consolidate IPC architecture#15Rogers-F wants to merge 1 commit into
Rogers-F wants to merge 1 commit into
Conversation
Squashed from 63 commits of audit and hardening work on top of 8ff648c: - Trading guard: single-source preconditions (shared/lib/trading-guard), authoritative setAutoTrading ack from main, fail-closed enable path, enforceTradingOff with bounded rocket kill confirmation - IPC: handlers moved from preload to src/main/ipc, channel constants single-sourced, listener lifecycle fixes, snapshot-tested channel set - Hono callback server bound to 127.0.0.1, resolves only when listening - Windows: explicit contextIsolation, single app-ready sequence, tray and powerMonitor registered once; powerMonitor enabled on Windows with fail-closed suspend handling - Dead code removal (13 unused hooks, send-python-output feature), formatter single-sourcing, typecheck baseline cleaned to zero - CI: bump checkout/setup-node/gh-release actions to current majors
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
概要
对 v4.0.x 客户端做的一轮系统性审计与加固，为便于审阅已汇总为单个提交（原始开发历史共 63 个提交）。净改动 175 文件、+2820 / -8139（净减约 5300 行）。
主要内容
实盘控制路径加固（资金安全）
src/shared/lib/trading-guard.ts：开启实盘的前置校验单源化（权重结构化校验、QMT 配置校验、固定顺序）setAutoTrading改为 async 权威 ack：main 侧自校验，enable 失败/调度失败/disable 统一走enforceTradingOff（置 OFF + 落盘 + 强杀 rocket + 有界确认），renderer 端 fail-closedwakeUpRocket四道前置门控；account_id === '0'手动下单哨兵并入守卫IPC 架构整理
src/main/ipc（修复进程层级倒置）启动与系统层
contextIsolation: true127.0.0.1，真实 listening 后才上报端口卫生
验证
pnpm typecheck（node + web）= 0 错误说明
本分支基于 8ff648c，晚于其后的 3 个最新提交（加速数据源 / min-data / client.env），与之存在 6 个文件的冲突（主要因 IPC 处理器回迁 main）。如方向认可，我可以跟进 rebase，把这 3 个提交的改动迁入回迁后的结构。