@tony01/astroneum 0.4.1-beta.2 → 0.4.1-beta.25

package/CHANGELOG.md

@@ -1,237 +1,281 @@
-# Changelog
-
-All notable changes to **astroneum** are documented in this file.
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html)
-once it reaches v1.0. Until then, minor releases may include breaking changes
-— always check this file before upgrading.
-
-## [Unreleased]
-
-### Added — Full Indicator Parity (50 total, +23 new)
-
-Astroneum now ships **50 technical indicators** — up from 27 — achieving full
-parity with the comparison table against TradingView Pro. Every indicator in the
-original roadmap (Phases 1–4) is implemented.
-
-**Phase 1 — Critical (MVP)**
-- **ATR** (Average True Range) — `averageTrueRange.ts` — market volatility
-  measure used for position sizing and stop-loss placement.
-- **ADX** (Average Directional Index) — `averageDirectionalIndex.ts` —
-  standalone trend-strength indicator (0–25 weak, 25–50 strong, 50+ very
-  strong).
-- **A/D** (Accumulation/Distribution) — `accumulationDistribution.ts` —
-  cumulative volume + CLV money flow, divergence signals for reversals.
-
-**Phase 2 — Important (Competitive Feature)**
-- **CMF** (Chaikin Money Flow) — `chaikinMoneyFlow.ts` — money flow over N
-  periods using close-location-within-range (default 20).
-- **MFI** (Money Flow Index) — `moneyFlowIndex.ts` — volume-weighted RSI
-  using typical price, overbought >80 / oversold <20.
-- **VWAP** (Volume Weighted Average Price) — `volumeWeightedAveragePrice.ts`
-  — cumulative volume-weighted typical price overlay.
-- **Ichimoku Cloud** — `ichimokuCloud.ts` — 5-line comprehensive trend
-  system (Tenkan/Kijun/Senkou A/B/Chikou), default periods 9/26/52.
-
-**Phase 3 — Polish (Market Completeness)**
-- **DEMA / TEMA / WMA / VWMA** — double/triple/weighted/volume-weighted
-  moving averages (`doubleExponentialMovingAverage.ts`,
-  `tripleExponentialMovingAverage.ts`, `weightedMovingAverage.ts`,
-  `volumeWeightedMovingAverage.ts`).
-- **HV** (Historical Volatility) — `historicalVolatility.ts` — annualized
-  volatility from log returns × √252.
-- **DC** (Donchian Channels) — `donchianChannels.ts` — highest-high /
-  lowest-low channels with midline.
-- **KC** (Keltner Channels) — `keltnerChannels.ts` — EMA middle line with
-  ATR-based upper/lower bands.
-- **SuperTrend** — `superTrend.ts` — trend-following volatility stop with
-  direction tracking.
-
-**Phase 4 — Advanced (Niche Features)**
-- **STDDEV** (Standard Deviation) — `standardDeviation.ts` — population
-  standard deviation of close over N periods.
-- **VROC** (Volume Rate of Change) — `volumeRateOfChange.ts` — percentage
-  change in volume over N periods.
-- **PP** (Pivot Points) — `pivotPoints.ts` — classic pivot points with
-  R1–R3 resistance and S1–S3 support levels.
-- **CORR** (Correlation Coefficient) — `correlationCoefficient.ts` —
-  Pearson's R between close and linear sequence 1..N.
-- **LinReg** (Linear Regression) — `linearRegression.ts` — least-squares
-  regression line on close prices.
-- **AMA** (Adaptive Moving Average / KAMA) — `adaptiveMovingAverage.ts` —
-  Kaufman's adaptive MA with efficiency-ratio smoothing.
-- **HMA** (Hull Moving Average) — `hullMovingAverage.ts` — WMA-based
-  lag-reduced moving average.
-- **ZZ** (ZigZag) — `zigzag.ts` — pivot-based trend-reversal detection
-  with configurable deviation percentage.
-
-### Changed
-
-- **Demo page expanded** — category-organised indicator picker displaying all
-  50 indicators with tooltips, overlay vs. sub-pane visual distinction
-  (amber/green), and active-indicator status bar with counts.
-- **`INDICATOR_COMPARISON.md`** fully rewritten to track all indicators,
-  coverage percentages per category, and completed roadmap.
-
-### Fixed
-
-- **SuperTrend state tracking** — replaced fragile float comparison
-  `prevSuperTrend === upperBand` with `direction` variable for correct
-  trend-state transitions.
-- **HMA performance** — reduced from O(n³) to O(n²) by pre-computing
-  `2*WMA(n/2) - WMA(n)` values before the final WMA pass.
-- **ZigZag pivot detection** — replaced adjacent-bar comparison with
-  running extreme tracking to reliably capture peaks/troughs during
-  consolidation phases.
-
----
-
-### Added — TradingView Competitive Parity
-
-- **Heikin-Ashi candle type** — `barStyle="heikin_ashi"` prop. `heikinAshi(data)` exported.
-- **Crosshair sync** in `MultiChartLayout` — `onCrosshairMove()` / `setCrosshair()` on handle.
-- **Measure tool** — 18th drawing tool in extension. Pixel distance label + risk/reward line.
-- **Magnet/Snap helpers** — `snapToOhlc()` and `snapAngle()` in `DrawingSnapper`.
-- **Undo/Redo manager** — `UndoManager` class using `serializeState()`/`loadState()`.
-- **Extended keyboard shortcuts** — arrow keys pan, Page/Home/End, mouse wheel zoom at cursor.
-- **Copy/paste drawings** — Ctrl+C copies overlays as JSON, Ctrl+V pastes.
-- **Session Visualizer** — `SessionVisualizer` renders session high/low/open/close lines.
-- **Volume Profile** — `volumeProfilePlugin` horizontal histogram with POC + Value Area.
-- **Position Visualizer** — `PositionVisualizer` entry/stop/target lines on chart.
-- **Compare Overlay** — `createCompareIndicator()` overlays second symbol normalized to %.
-- **Lock all drawings** — `lockAllDrawings(locked)` on `AstroneumHandle`.
-- **Drawing live preview** — `DrawingTemplates.preview()` + `applyColor()` per-overlay.
-- **Price axis scaling** — `priceScale='linear'|'log'|'percent'|'indexed'` prop + `PriceScaleTransform`.
-- **Chart templates** — `ChartTemplateManager` singleton saves/loads named configs to localStorage.
-- **Multi-timeframe resampling** — `resampleBars()`, `forwardFill()`, `mtfIndicator()`.
-- **Non-time-based bars** — `generateRenko()`, `generateKagi()`, `generateTickBars()`, `generateRangeBars()`.
-- **Point & Figure** — `generatePointAndFigure()`, `computePFColumns()`, `pfColumnsToBars()`.
-- **Multi-period layout** — `MultiPeriodLayout` stacked same-symbol different periods.
-- **Auto pattern detection** — `zigzag()`, `detectSupportResistance()`, `zigzagPlugin`.
-- **DOM visualization** — `domPlugin` bid/ask volume ladder.
-
-### Fixed — Bug, Perf & Security Hardening
-
-- **Bug: `rafMergeTick` low-merge inverted** — comparison operator fixed (was `<`, now `>`).
-- **Bug: `ScriptEngine` figures mutation** — shared `this.figures` now uses `[...result.figures]`.
-- **Bug: Plugin `figureKeys` closure leak** — moved to per-instance `extendData`.
-- **Bug: `Math.max(...arr)` stack overflow risk** — replaced with iterative loops in `DrawingSnapper`/`GlyphAtlas`.
-- **Bug: LTTB decimation NaN** — empty bucket guard added in `PerformanceMode.decimate()`.
-- **Bug: `virtualizeWindow` overlap** — startIdx/endIdx clamp added.
-- **Bug: `useKeyboardShortcuts` stale ref** — fixed stable wrapper pattern.
-- **Perf: Tooltip style objects pre-computed** at module scope (no per-render allocation).
-- **Perf: `adjustFromTo()` integer math** for week/month/year (eliminates `new Date()` allocations).
-- **Perf: `serializeState()` uses `structuredClone`** instead of recursive `deepClone`.
-- **Perf: 6 `useEffect` hooks batched** into one for engine prop sync.
-- **Perf: `sortBarsAsc()` O(n) validation** before sort (99% of API responses are pre-sorted).
-- **Perf: Shared color helpers** extracted to `candleShaders.ts` (~160 lines duplicated code removed).
-- **Perf: `TaskScheduler` priority queue** — data > indicator > overlay priority ordering.
-- **Perf: `IndicatorWorkerPool` SAB transfer** when `crossOriginIsolated`.
-- **Perf: `packBars()` optional columns** bitmap for skipping unused columns.
-- **Perf: `SharedIndicatorGLCanvas` FinalizationRegistry** for auto-cleanup.
-- **Perf: aria-live string buffer reuse** instead of template-string allocation per move.
-- **Security: ScriptEngine sandbox hardened** — `Object.freeze(Object/Array.prototype)` + `eval` blocked.
-- **Security: AlertManager webhook URL validated** — https-only, block private IPs/localhost.
-- **Security: localStorage writes debounced** — `AlertManager.check()` saves at most 1/s.
-- **Security: localStorage schema validation** on load — corrupted data rejected.
-- **Security: WebSocket URL scheme validation** — `wss://`/`ws://` required.
-- **Security: Polygon API key** moved from URL query param to `Authorization: Bearer` header.
-- **Security: `#apiKey` private class field** — non-enumerable, safe from `JSON.stringify`.
-- **Security: Locale strings stripped of HTML tags** — XSS prevention.
-- **Security: `BarsCodec.decode()` capped** at 500k bars to prevent OOM.
-- **Security: `pnpm audit` in all CI workflows.**
-- **Security: TA surface gating + OPFS path safety** documented.
-
-## [0.3.0] — 2026-06-15
-
-### Added — v0.5 Polish (partial)
-
-- **Lazy locale loading** ([src/i18n/index.ts](src/i18n/index.ts)) —
-  only `en-US` is bundled eagerly; the other 18 locales are loaded on
-  demand via dynamic `import()`. New public exports:
-  - `loadLocale(key)` — async loader for built-in locales
-  - `BUILTIN_LOCALES` — the canonical list
-  - Existing `loadLocales(key, dictionary)` continues to work for custom
-    translations.
-- **Drawing & layout persistence** — `serializeState()` and `loadState(state)`
-  on `AstroneumHandle` capture / restore theme, locale, timezone, symbol,
-  period, styles, indicators, and overlays as JSON.
-  See [docs/api.md](docs/api.md#serializestate--loadstate).
-- **Accessibility pass** — opt-in via the new `accessible` prop on
-  `<AstroneumChart>`. When enabled, the chart container gets `tabindex=0`,
-  `role="img"`, and an `aria-label`; a visually-hidden `aria-live="polite"`
-  region announces OHLCV on crosshair changes (throttled to ~10/s).
-- **High-contrast theme** — set `theme="high-contrast"` for a
-  WCAG-conscious black/white/yellow palette with strong focus rings.
-- **Benchmark CI workflow**
-  ([.github/workflows/benchmark.yml](.github/workflows/benchmark.yml)) —
-  runs `pnpm size` and the perf tests on every PR and posts the perf
-  output as a sticky comment.
-
-### Changed
-
-- `WasmIndicators.ts` renamed to **`TypedArrayIndicators.ts`** to match
-  what it actually is (a column-store TS implementation). A back-compat
-  shim is kept at the old path with `@deprecated` JSDoc and will be
-  removed in v1.0.
-
-### Deferred
-
-Still tracked for v0.6 – v1.0; not in this release:
-
-- WebGPU renderer / real Rust + WASM SIMD indicators
-- `OrderManager` + broker package
-- Heatmap / footprint / options-chain panes
-- Full mobile audit & Storybook site
-- React component tests (jsdom + RTL) + Playwright visual regression
-- Compare overlay UI
-
----
-
-## [0.2.0] — 2026-05-30
-
-### Added — v0.3 Hardening
-
-- **Subpath exports** for tree-shakeable, opt-in feature modules
-  ([#roadmap-4](README.md#v04--modularization)):
-  - `astroneum/replay` — `BarReplay`
-  - `astroneum/multichart` — `MultiChartLayout`
-  - `astroneum/watchlist` — `WatchlistManager`
-  - `astroneum/portfolio` — `PortfolioTracker`
-  - `astroneum/alerts` — `AlertManager`
-  - `astroneum/script` — `ScriptEngine`
-  - `astroneum/datafeeds/polygon` — `DefaultDatafeed` + `WebSocketDatafeed`
-  - `astroneum/datafeeds/crypto` — `createStandardCryptoDatafeed` + adapters
-- **`size-limit` budget** ([.size-limit.json](.size-limit.json)) with one
-  budget per entry. Run `pnpm size` after `pnpm build`.
-- **Datafeed contract tests** ([src/__tests__/datafeed-contract.test.ts](src/__tests__/datafeed-contract.test.ts))
-  — type-level + behavioural checks for any `Datafeed` implementation.
-- **SSR smoke tests** ([src/__tests__/ssr-smoke.test.ts](src/__tests__/ssr-smoke.test.ts))
-  — verifies the root entry and all subpath entries import cleanly with no
-  DOM globals defined, and that the root entry's public API surface is stable.
-- **`CONTRIBUTING.md`**, **`SECURITY.md`**, **`CODE_OF_CONDUCT.md`**,
-  and this `CHANGELOG.md`.
-- **Browser support matrix** documented in [README](README.md#browser-support).
-
-### Changed
-
-- `pnpm verify` order is now `lint → typecheck → build → test` so SSR and
-  bundle tests can assert against fresh `dist/` output.
-- `tsup.config.ts` now bundles every subpath entry and injects `'use client'`
-  into every emitted JS file (not just `dist/index.js`).
-- `package.json#files` widened from `dist/*.{js,css,d.ts}` to
-  `dist/**/*.{js,css,d.ts}` so nested subpath artifacts ship.
-
-### Fixed
-
-- `src/index.ts` no longer side-imports the non-existent
-  `./styles/index.less` (was a leftover from a SCSS migration and caused the
-  build to fail outright on a clean install).
-
----
-
-## [0.2.0-baseline] — 2026-05-30
-
-Initial public roadmap baseline. See git history for details prior to this
-changelog being introduced.
+# Changelog
+
+All notable changes to **astroneum** are documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html)
+once it reaches v1.0. Until then, minor releases may include breaking changes
+— always check this file before upgrading.
+
+## [0.4.1-beta.25] - 2026-08-31
+
+The `0.4.1-beta.22` and `0.4.1-beta.23` tags failed their package-content gates before npm publication and are not consumable releases.
+The published `0.4.1-beta.24` artifact included internal/reference documentation and is not accepted for Barwise consumption. `0.4.1-beta.25` restricts the package to license, public release documentation, package metadata, and built distribution files.
+
+### Added — Headless engine package
+- Added `@tony01/astroneum/headless` with a React-free declaration/runtime graph, no native UI, stylesheet, datafeed, keyboard-shortcut, or implicit-network dependency.
+- Added validated host-owned `replaceBars()`, `updateBar()`, and copied `getBars()` data APIs for strictly ascending UTC-millisecond OHLCV data.
+- Added explicit optional indicator/drawing registration and an immutable version-1 capability manifest.
+- Added idempotent duplicate initialization, multiple-container isolation, deterministic teardown, SSR/package isolation, direct-bar, and size tests.
+- Added React-independent typed study-plugin exports and bounded version-1 viewport capture/restore for headless consumers.
+- Added browser coverage for 16 study outputs, 16 host overlays, left-scrolled viewport restoration, and teardown during active animation.
+
+### Changed — Headless engine ownership
+- Engine rendering no longer installs keyboard shortcuts; the existing React host keyboard hook remains the shortcut owner.
+- Headless teardown now cancels chart animations, unsubscribes configured loaders, and ignores late loader and indicator scheduling work.
+- Screenshot export now composites ordered Canvas2D, WebGL, WebGPU, worker-canvas, and GPU-text layers and has browser pixel coverage.
+
+### Changed
+- The right rail now keeps its 52px toggle strip on the viewport's outer-right edge; panels open immediately to its left and collapse without hiding the strip.
+- The Watchlist panel now uses Watchlist/Details/News sub-tabs, horizontal list tabs, sortable configurable quote columns, Simple/Advanced presets, list colors, validated symbol search, context actions, and same-list/cross-list symbol drag.
+- The Details sub-tab follows the active chart symbol and shows current OHLC data and metadata; News remains an honest provider-dependent empty state.
+- Hidden panel content is inert and excluded from keyboard navigation while the collapsed rail remains interactive.
+
+### Added — Watchlist live quotes and persistence
+- Added optional `Datafeed.getQuotes?(symbols: SymbolInfo[]): Promise<QuoteSnapshot[]>`.
+- Added Binance, Bitget, and OKX ticker snapshots to `StandardCryptoDatafeed`.
+- Extended `WatchlistManager` with symbol metadata, cross-list moves, persisted columns/sort/colors, and non-persisted live quote updates.
+- Added watchlist manager and quote batching tests; the suite now passes 38 tests.
+
+### Added — Forecasting group + popup clipping fix (drawing tools 20 to 32)
+- 12 new drawing overlays in `src/extension/`: `longPosition`, `shortPosition`, `positionForecast`, `barsPattern`, `ghostFeed`, `sector`, `anchoredVwap`, `fixedRangeVolumeProfile`, `anchoredVolumeProfile`, `priceRange`, `dateRange`, `dateAndPriceRange`.
+- New `forecasting` group in `DrawingBar` with 3 section headers (Forecasting, Volume-based, Measurers) using `isHeader` on `SelectDataSourceItem`.
+- 13 new SVG icons extracted from TV reference. 15 new i18n keys in `en-US.json`.
+- Fixed popup clipping: `demo/terminal.css` `.astroneum-drawing-bar` overflow override moved to `@media(max-height:620px)` ??? all drawing-bar popups now visible on normal viewports, scroll preserved on short ones.
+- Fixed 3 pre-existing lint errors in `AstroneumChart.tsx` (unnecessary type assertions).
+
+### Added — TV mirror workspace and strategy foundation
+- Default demo route now mounts the terminal workspace with dismissible curtains and in-app split view.
+- Unified terminal alert creation with the library `AlertModal`; drawing controls now expose semantic accessibility state.
+- Added deterministic backtest types/core, bounded `strategySignals()` compilation, strategy tests, and the initial strategy report UI.
+- Wired compiled strategies to current chart history in the terminal and replaced fixture-only strategy reports with runtime results.
+- Added persistent dock report tabs with Rename/Duplicate/Close, More, keyboard navigation, resize, and maximize/restore.
+- Fixed dock/rail geometry: explicit CSS Grid chart+dock rows prevent chart bleed; the real left drawing rail remains pinned through dock height, scrolls on short viewports, and dock maximize no longer reflows it.
+- Added `docs/WORKSTREAMS.md` and the strategy-builder agent for scoped AI handoffs.
+
+### Added — Full Indicator Parity (50 total, +23 new)
+
+Astroneum now ships **50 technical indicators** — up from 27 — achieving full
+parity with the comparison table against TradingView Pro. Every indicator in the
+original roadmap (Phases 1–4) is implemented.
+
+**Phase 1 — Critical (MVP)**
+- **ATR** (Average True Range) — `averageTrueRange.ts` — market volatility
+  measure used for position sizing and stop-loss placement.
+- **ADX** (Average Directional Index) — `averageDirectionalIndex.ts` —
+  standalone trend-strength indicator (0–25 weak, 25–50 strong, 50+ very
+  strong).
+- **A/D** (Accumulation/Distribution) — `accumulationDistribution.ts` —
+  cumulative volume + CLV money flow, divergence signals for reversals.
+
+**Phase 2 — Important (Competitive Feature)**
+- **CMF** (Chaikin Money Flow) — `chaikinMoneyFlow.ts` — money flow over N
+  periods using close-location-within-range (default 20).
+- **MFI** (Money Flow Index) — `moneyFlowIndex.ts` — volume-weighted RSI
+  using typical price, overbought >80 / oversold <20.
+- **VWAP** (Volume Weighted Average Price) — `volumeWeightedAveragePrice.ts`
+  — cumulative volume-weighted typical price overlay.
+- **Ichimoku Cloud** — `ichimokuCloud.ts` — 5-line comprehensive trend
+  system (Tenkan/Kijun/Senkou A/B/Chikou), default periods 9/26/52.
+
+**Phase 3 — Polish (Market Completeness)**
+- **DEMA / TEMA / WMA / VWMA** — double/triple/weighted/volume-weighted
+  moving averages (`doubleExponentialMovingAverage.ts`,
+  `tripleExponentialMovingAverage.ts`, `weightedMovingAverage.ts`,
+  `volumeWeightedMovingAverage.ts`).
+- **HV** (Historical Volatility) — `historicalVolatility.ts` — annualized
+  volatility from log returns × √252.
+- **DC** (Donchian Channels) — `donchianChannels.ts` — highest-high /
+  lowest-low channels with midline.
+- **KC** (Keltner Channels) — `keltnerChannels.ts` — EMA middle line with
+  ATR-based upper/lower bands.
+- **SuperTrend** — `superTrend.ts` — trend-following volatility stop with
+  direction tracking.
+
+**Phase 4 — Advanced (Niche Features)**
+- **STDDEV** (Standard Deviation) — `standardDeviation.ts` — population
+  standard deviation of close over N periods.
+- **VROC** (Volume Rate of Change) — `volumeRateOfChange.ts` — percentage
+  change in volume over N periods.
+- **PP** (Pivot Points) — `pivotPoints.ts` — classic pivot points with
+  R1–R3 resistance and S1–S3 support levels.
+- **CORR** (Correlation Coefficient) — `correlationCoefficient.ts` —
+  Pearson's R between close and linear sequence 1..N.
+- **LinReg** (Linear Regression) — `linearRegression.ts` — least-squares
+  regression line on close prices.
+- **AMA** (Adaptive Moving Average / KAMA) — `adaptiveMovingAverage.ts` —
+  Kaufman's adaptive MA with efficiency-ratio smoothing.
+- **HMA** (Hull Moving Average) — `hullMovingAverage.ts` — WMA-based
+  lag-reduced moving average.
+- **ZZ** (ZigZag) — `zigzag.ts` — pivot-based trend-reversal detection
+  with configurable deviation percentage.
+
+### Changed
+
+- **Demo page expanded** — category-organised indicator picker displaying all
+  50 indicators with tooltips, overlay vs. sub-pane visual distinction
+  (amber/green), and active-indicator status bar with counts.
+- **`INDICATOR_COMPARISON.md`** fully rewritten to track all indicators,
+  coverage percentages per category, and completed roadmap.
+
+### Fixed
+
+- **SuperTrend state tracking** — replaced fragile float comparison
+  `prevSuperTrend === upperBand` with `direction` variable for correct
+  trend-state transitions.
+- **HMA performance** — reduced from O(n³) to O(n²) by pre-computing
+  `2*WMA(n/2) - WMA(n)` values before the final WMA pass.
+- **ZigZag pivot detection** — replaced adjacent-bar comparison with
+  running extreme tracking to reliably capture peaks/troughs during
+  consolidation phases.
+
+---
+
+### Added — TradingView Competitive Parity
+
+- **Heikin-Ashi candle type** — `barStyle="heikin_ashi"` prop. `heikinAshi(data)` exported.
+- **Crosshair sync** in `MultiChartLayout` — `onCrosshairMove()` / `setCrosshair()` on handle.
+- **Measure tool** — 18th drawing tool in extension. Pixel distance label + risk/reward line.
+- **Magnet/Snap helpers** — `snapToOhlc()` and `snapAngle()` in `DrawingSnapper`.
+- **Undo/Redo manager** — `UndoManager` class using `serializeState()`/`loadState()`.
+- **Extended keyboard shortcuts** — arrow keys pan, Page/Home/End, mouse wheel zoom at cursor.
+- **Copy/paste drawings** — Ctrl+C copies overlays as JSON, Ctrl+V pastes.
+- **Session Visualizer** — `SessionVisualizer` renders session high/low/open/close lines.
+- **Volume Profile** — `volumeProfilePlugin` horizontal histogram with POC + Value Area.
+- **Position Visualizer** — `PositionVisualizer` entry/stop/target lines on chart.
+- **Compare Overlay** — `createCompareIndicator()` overlays second symbol normalized to %.
+- **Lock all drawings** — `lockAllDrawings(locked)` on `AstroneumHandle`.
+- **Drawing live preview** — `DrawingTemplates.preview()` + `applyColor()` per-overlay.
+- **Price axis scaling** — `priceScale='linear'|'log'|'percent'|'indexed'` prop + `PriceScaleTransform`.
+- **Chart templates** — `ChartTemplateManager` singleton saves/loads named configs to localStorage.
+- **Multi-timeframe resampling** — `resampleBars()`, `forwardFill()`, `mtfIndicator()`.
+- **Non-time-based bars** — `generateRenko()`, `generateKagi()`, `generateTickBars()`, `generateRangeBars()`.
+- **Point & Figure** — `generatePointAndFigure()`, `computePFColumns()`, `pfColumnsToBars()`.
+- **Multi-period layout** — `MultiPeriodLayout` stacked same-symbol different periods.
+- **Auto pattern detection** — `zigzag()`, `detectSupportResistance()`, `zigzagPlugin`.
+- **DOM visualization** — `domPlugin` bid/ask volume ladder.
+
+### Fixed — Bug, Perf & Security Hardening
+
+- **Bug: `rafMergeTick` low-merge inverted** — comparison operator fixed (was `<`, now `>`).
+- **Bug: `ScriptEngine` figures mutation** — shared `this.figures` now uses `[...result.figures]`.
+- **Bug: Plugin `figureKeys` closure leak** — moved to per-instance `extendData`.
+- **Bug: `Math.max(...arr)` stack overflow risk** — replaced with iterative loops in `DrawingSnapper`/`GlyphAtlas`.
+- **Bug: LTTB decimation NaN** — empty bucket guard added in `PerformanceMode.decimate()`.
+- **Bug: `virtualizeWindow` overlap** — startIdx/endIdx clamp added.
+- **Bug: `useKeyboardShortcuts` stale ref** — fixed stable wrapper pattern.
+- **Perf: Tooltip style objects pre-computed** at module scope (no per-render allocation).
+- **Perf: `adjustFromTo()` integer math** for week/month/year (eliminates `new Date()` allocations).
+- **Perf: `serializeState()` uses `structuredClone`** instead of recursive `deepClone`.
+- **Perf: 6 `useEffect` hooks batched** into one for engine prop sync.
+- **Perf: `sortBarsAsc()` O(n) validation** before sort (99% of API responses are pre-sorted).
+- **Perf: Shared color helpers** extracted to `candleShaders.ts` (~160 lines duplicated code removed).
+- **Perf: `TaskScheduler` priority queue** — data > indicator > overlay priority ordering.
+- **Perf: `IndicatorWorkerPool` SAB transfer** when `crossOriginIsolated`.
+- **Perf: `packBars()` optional columns** bitmap for skipping unused columns.
+- **Perf: `SharedIndicatorGLCanvas` FinalizationRegistry** for auto-cleanup.
+- **Perf: aria-live string buffer reuse** instead of template-string allocation per move.
+- **Security: ScriptEngine sandbox hardened** — `Object.freeze(Object/Array.prototype)` + `eval` blocked.
+- **Security: AlertManager webhook URL validated** — https-only, block private IPs/localhost.
+- **Security: localStorage writes debounced** — `AlertManager.check()` saves at most 1/s.
+- **Security: localStorage schema validation** on load — corrupted data rejected.
+- **Security: WebSocket URL scheme validation** — `wss://`/`ws://` required.
+- **Security: Polygon API key** moved from URL query param to `Authorization: Bearer` header.
+- **Security: `#apiKey` private class field** — non-enumerable, safe from `JSON.stringify`.
+- **Security: Locale strings stripped of HTML tags** — XSS prevention.
+- **Security: `BarsCodec.decode()` capped** at 500k bars to prevent OOM.
+- **Security: `pnpm audit` in all CI workflows.**
+- **Security: TA surface gating + OPFS path safety** documented.
+
+## [0.3.0] — 2026-06-15
+
+### Added — v0.5 Polish (partial)
+
+- **Lazy locale loading** ([src/i18n/index.ts](src/i18n/index.ts)) —
+  only `en-US` is bundled eagerly; the other 18 locales are loaded on
+  demand via dynamic `import()`. New public exports:
+  - `loadLocale(key)` — async loader for built-in locales
+  - `BUILTIN_LOCALES` — the canonical list
+  - Existing `loadLocales(key, dictionary)` continues to work for custom
+    translations.
+- **Drawing & layout persistence** — `serializeState()` and `loadState(state)`
+  on `AstroneumHandle` capture / restore theme, locale, timezone, symbol,
+  period, styles, indicators, and overlays as JSON.
+  See [docs/api.md](docs/api.md#serializestate--loadstate).
+- **Accessibility pass** — opt-in via the new `accessible` prop on
+  `<AstroneumChart>`. When enabled, the chart container gets `tabindex=0`,
+  `role="img"`, and an `aria-label`; a visually-hidden `aria-live="polite"`
+  region announces OHLCV on crosshair changes (throttled to ~10/s).
+- **High-contrast theme** — set `theme="high-contrast"` for a
+  WCAG-conscious black/white/yellow palette with strong focus rings.
+- **Benchmark CI workflow**
+  ([.github/workflows/benchmark.yml](.github/workflows/benchmark.yml)) —
+  runs `pnpm size` and the perf tests on every PR and posts the perf
+  output as a sticky comment.
+
+### Changed
+
+- `WasmIndicators.ts` renamed to **`TypedArrayIndicators.ts`** to match
+  what it actually is (a column-store TS implementation). A back-compat
+  shim is kept at the old path with `@deprecated` JSDoc and will be
+  removed in v1.0.
+
+### Deferred
+
+Still tracked for v0.6 – v1.0; not in this release:
+
+- WebGPU renderer / real Rust + WASM SIMD indicators
+- `OrderManager` + broker package
+- Heatmap / footprint / options-chain panes
+- Full mobile audit & Storybook site
+- React component tests (jsdom + RTL) + Playwright visual regression
+- Compare overlay UI
+
+---
+
+## [0.2.0] — 2026-05-30
+
+### Added — v0.3 Hardening
+
+- **Subpath exports** for tree-shakeable, opt-in feature modules
+  ([#roadmap-4](README.md#v04--modularization)):
+  - `@tony01/astroneum/replay` — `BarReplay`
+  - `@tony01/astroneum/multichart` — `MultiChartLayout`
+  - `@tony01/astroneum/watchlist` — `WatchlistManager`
+  - `@tony01/astroneum/portfolio` — `PortfolioTracker`
+  - `@tony01/astroneum/alerts` — `AlertManager`
+  - `@tony01/astroneum/script` — `ScriptEngine`
+  - `@tony01/astroneum/datafeeds/polygon` — `DefaultDatafeed` + `WebSocketDatafeed`
+  - `@tony01/astroneum/datafeeds/crypto` — `createStandardCryptoDatafeed` + adapters
+- **`size-limit` budget** ([.size-limit.json](.size-limit.json)) with one
+  budget per entry. Run `pnpm size` after `pnpm build`.
+- **Datafeed contract tests** ([src/__tests__/datafeed-contract.test.ts](src/__tests__/datafeed-contract.test.ts))
+  — type-level + behavioural checks for any `Datafeed` implementation.
+- **SSR smoke tests** ([src/__tests__/ssr-smoke.test.ts](src/__tests__/ssr-smoke.test.ts))
+  — verifies the root entry and all subpath entries import cleanly with no
+  DOM globals defined, and that the root entry's public API surface is stable.
+- **`CONTRIBUTING.md`**, **`SECURITY.md`**, **`CODE_OF_CONDUCT.md`**,
+  and this `CHANGELOG.md`.
+- **Browser support matrix** documented in [README](README.md#browser-support).
+
+### Changed
+
+- `pnpm verify` order is now `lint → typecheck → build → test` so SSR and
+  bundle tests can assert against fresh `dist/` output.
+- `tsup.config.ts` now bundles every subpath entry and injects `'use client'`
+  into every emitted JS file (not just `dist/index.js`).
+- `package.json#files` widened from `dist/*.{js,css,d.ts}` to
+  `dist/**/*.{js,css,d.ts}` so nested subpath artifacts ship.
+
+### Fixed
+
+- `src/index.ts` no longer side-imports the non-existent
+  `./styles/index.less` (was a leftover from a SCSS migration and caused the
+  build to fail outright on a clean install).
+
+---
+
+## [0.2.0-baseline] — 2026-05-30
+
+Initial public roadmap baseline. See git history for details prior to this
+changelog being introduced.

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 Kowit Charoenratchatabhan
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 Kowit Charoenratchatabhan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.