aether-quant 0.9.0__tar.gz → 1.0.0__tar.gz

aether_quant-1.0.0/.devcontainer/devcontainer.json

@@ -0,0 +1,14 @@
+{
+    "name": "Aether Quant",
+    "image": "mcr.microsoft.com/devcontainers/python:3.11",
+    "features": {
+        "ghcr.io/devcontainers/features/sshd:1": {
+            "version": "latest"
+        }
+    },
+    "hostRequirements": {
+        "cpus": 2,
+        "memory": "8gb"
+    },
+    "postCreateCommand": "pip install torch --index-url https://download.pytorch.org/whl/cpu && pip install -r requirements/requirements.txt && pip install -r requirements/requirements-dev.txt"
+}

aether_quant-1.0.0/.devcontainer/dind-v1-test/devcontainer.json

@@ -0,0 +1,14 @@
+{
+    "name": "Aether Quant DinD v1 Test",
+    "image": "mcr.microsoft.com/devcontainers/python:3.11",
+    "features": {
+        "ghcr.io/devcontainers/features/sshd:1": {
+            "version": "latest"
+        },
+        "ghcr.io/devcontainers/features/docker-in-docker:1": {}
+    },
+    "hostRequirements": {
+        "cpus": 2,
+        "memory": "8gb"
+    }
+}

aether_quant-1.0.0/.dockerignore

@@ -0,0 +1,39 @@
+__pycache__/
+*.pyc
+*.pyo
+.venv/
+node_modules/
+webui/node_modules/
+webui/dist/
+backtests/
+.lean/
+.git/
+.claude/
+Aether-quant-Obsidian-Vault/
+# Large data directories not needed by the FastAPI server
+data/
+ml/
+storage/
+
+# Local secrets and broker/API credentials - mirrors .gitignore's own list.
+# Being .gitignore'd does NOT keep a file out of the image: the engine build
+# does `COPY . .`, and that same image is published to ghcr (single fat
+# target, no slim variant), so anything not excluded here is baked into a
+# public registry layer - recoverable via `docker history`/`docker save` even
+# if a later commit removes it. lean.live.json is the rendered, secret-bearing
+# config `aq render-lean-config` produces (execution/lean_config_render.py);
+# lean.json itself is git-tracked with empty placeholders but is excluded too,
+# so a locally-populated copy can never leak. Keep this list in sync with
+# .gitignore's "Local secrets" block.
+.env
+.env.*
+!.env.compose.example
+!.env.live.example
+ib_config.py
+*_config.local.py
+config.local.json
+lean.local.json
+lean.live.json
+lean.json
+*.key
+*.pem

aether_quant-1.0.0/.env.live.example

@@ -0,0 +1,33 @@
+# Copy this file to .env.live (untracked, .gitignore'd) and fill in real
+# values before switching phase_v2.runtime.mode to "live" (V2-22). Never
+# commit .env.live.
+#
+# Two consumers read these AETHER_* vars:
+#  1. execution/live_credentials_io.py - a pre-flight credential-presence check.
+#  2. scripts/render_lean_credentials.py (`aq render-lean-config`) - renders a
+#     gitignored lean.live.json with these values overlaid onto the empty,
+#     tracked lean.json template, which live/paper deployment then uses via
+#     `--lean-config lean.live.json`. Lean does NOT expand env vars out of
+#     lean.json itself, which is why this render step exists (the tracked
+#     lean.json stays all-empty so it is safe to share; see
+#     development/infrastructure.md's "Live Deployment Betreiben (V2-22)"
+#     runbook and execution/lean_config_render.py).
+
+# --- Interactive Brokers live credentials ---
+AETHER_IB_ACCOUNT=
+AETHER_IB_USER_NAME=
+AETHER_IB_PASSWORD=
+AETHER_IB_TRADING_MODE=paper
+
+# --- Live market-data provider keys (only the one you actually use) ---
+# Populate whichever feed lean.json's live-paper/live environment is configured
+# for; leave the rest blank. These render into lean.json's matching fields.
+AETHER_POLYGON_API_KEY=
+AETHER_IEX_CLOUD_API_KEY=
+
+# --- Database password for live deployments ---
+# The default 'aether_dev_password' is fine for local dev but is published in
+# the repo. Live mode refuses to start while the Postgres DSN still uses that
+# default (execution/live_credentials.py::postgres_dsn_is_live_safe). Set a real
+# one here (and in .env / .env.compose) before going live.
+POSTGRES_PASSWORD=

aether_quant-1.0.0/.githooks/pre-commit

@@ -0,0 +1,29 @@
+#!/bin/sh
+# Aether Quant pre-commit secret guard (Phase V2-22 security).
+#
+# Blocks a commit that would publish a secret: a populated secret field in the
+# tracked lean.json, or a tracked real `.env` file. All detection lives in
+# `aq secrets-check` (execution/secret_scan.py) - this hook just invokes it.
+#
+# Enable once per clone (opt-in, so it never surprises a fresh checkout):
+#     git config core.hooksPath .githooks
+#
+# Runs under git's POSIX sh (git-bash on Windows), so keep it portable.
+
+set -e
+
+repo_root=$(git rev-parse --show-toplevel)
+cd "$repo_root"
+
+# Prefer the installed `aq` console script; fall back to running the module
+# directly with whichever Python is on PATH (venv-activated shells get theirs).
+if command -v aq >/dev/null 2>&1; then
+    aq secrets-check
+elif command -v python >/dev/null 2>&1; then
+    python aq_cli.py secrets-check
+elif command -v python3 >/dev/null 2>&1; then
+    python3 aq_cli.py secrets-check
+else
+    echo "pre-commit: could not find 'aq' or 'python' to run secrets-check" >&2
+    exit 1
+fi

{aether_quant-0.9.0 → aether_quant-1.0.0}/.github/workflows/ci.yml

@@ -20,8 +20,11 @@ jobs:
 
       - name: Run tests
         run: pytest
-        # tests/test_lean_backtest_ml_coverage.py self-skips: it requires the
-        # QuantConnect Lean CLI, which GitHub-hosted runners don't have.
+        # tests/test_lean_backtest_ml_coverage.py self-skips: this runner
+        # does have the `lean` binary (installed via requirements-dev.txt),
+        # but not a usable local Lean Data folder (data/** is gitignored -
+        # see .gitignore) that a real `lean backtest .` needs just to boot,
+        # regardless of universe/config. See development/Problems.md#10.
 
   webui:
     runs-on: ubuntu-latest

aether_quant-1.0.0/.gitignore

@@ -0,0 +1,153 @@
+# Python cache and virtual environments
+__pycache__/
+*.py[cod]
+*$py.class
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.venv/
+venv/
+env/
+*.egg-info/
+/dist/
+/build/
+
+# Local secrets and broker/API credentials
+.env
+.env.*
+!.env.compose.example
+!.env.live.example
+ib_config.py
+*_config.local.py
+config.local.json
+lean.local.json
+# Rendered, secret-bearing Lean config produced by
+# scripts/render_lean_credentials.py / `aq render-lean-config` from .env.live.
+# The tracked lean.json stays all-empty; this is the copy with real keys filled.
+lean.live.json
+
+*.key
+*.pem
+
+# OS/editor noise
+.DS_Store
+Thumbs.db
+.idea/
+.vscode/
+.claude/
+docker-compose.override.yml
+postgres-data/
+redis-data/
+grafana-data/
+pgdata/
+
+# Lean market data: too large for a public GitHub repo
+data/**
+!data/**/
+!data/**/.keep
+!data/**/.gitkeep
+
+# Exception: small, hand-authored reference/config JSON files that this
+# codebase documents as "checked in" and reads at runtime/test time (not
+# bulk market data) - see tests/test_futures_risk.py, tests/test_ib_backfill.py,
+# tests/test_train_cross_sectional_features.py, and development/Problems.md#10.
+# The blanket data/** rule above silently excluded these from every fresh
+# clone (including CI), which is why the tests reading them failed there.
+!data/reference/*.json
+
+# Lean object store / local runtime output
+storage/
+objectstore/
+
+# Backtest results and generated reports
+backtests/**
+!backtests/
+!backtests/.gitkeep
+
+# Generated ML datasets and binary artifacts
+ml/datasets/
+ml/expert_datasets/
+ml/expert_models/
+ml/versions/
+# Manual pre-rank-pivot snapshot (rollback point for the Stage 1-5
+# rank-pivot roadmap work, development/Problems.md#43) - a local backup,
+# never meant to be committed.
+ml/_backup_pre_rank_pivot/
+ml/model.pt
+ml/scaler.pkl
+ml/*.pkl
+ml/*.pt
+ml/*.pth
+ml/*.onnx
+
+# Generated ML/runtime JSON artifacts
+ml/dataset_inventory.json
+ml/dataset_manifest.json
+ml/expert_dataset_manifest.json
+ml/feature_schema.json
+ml/model_weights.json
+ml/scaler_stats.json
+ml/training_metrics.json
+ml/expert_training_metrics.json
+# Multitask/sequence/gating model artifacts - these were previously tracked
+# (an inconsistency with every other generated model artifact above, which
+# was already gitignored), so a real trained model's weights could end up
+# committed to the public repo. Untracked via `git rm --cached` alongside
+# this rule so it's actually impossible, not just something to remember.
+ml/multitask_model.json
+ml/multitask_feature_schema.json
+ml/multitask_training_metrics.json
+ml/sequence_model.json
+ml/sequence_feature_schema.json
+ml/sequence_training_metrics.json
+ml/gating_model.json
+ml/gating_feature_schema.json
+ml/gating_training_metrics.json
+
+# Generated visualization/runtime feeds
+visualization/state.json
+visualization/scene.json
+visualization/topology_state.json
+visualization/grafana/
+
+# Logs and temporary files
+.coverage
+coverage.xml
+htmlcov/
+*.log
+*.tmp
+*.bak
+# Obsidian vault for project graphs and AI handoffs
+Aether-quant-Obsidian-Vault/
+
+# Webui (React/Vite) build artifacts and dependencies
+webui/node_modules/
+webui/dist/
+
+# Matplotlib font cache, redirected here by main.py so it persists across
+# Lean CLI's ephemeral per-backtest Docker containers instead of rebuilding
+# every run (see Problems.md)
+.matplotlib_cache/
+
+# scripts/profile_inference.py's pstats dump - regenerable output, not source
+scripts/profile_inference_output*.txt
+scripts/profile_subsystems_output*.txt
+
+# cpp_inference_ext/'s compiled build artifacts - regenerable via
+# `pip install -e cpp_inference_ext/`, never source. The .pyd itself is
+# also gitignored (never a hard dependency - the whole point is that
+# most checkouts run without it, falling back to NumPy).
+cpp_inference_ext/build/
+cpp_inference_ext/*.egg-info/
+cpp_inference_ext/*.pyd
+cpp_inference_ext/*.so
+cpp_inference_ext/install_log*.txt
+
+# Aether-Vault (`av` CLI) local repo bootstrap - machine-local tool state
+# (retraining/vault_client.py's commit target), not project source.
+.av/
+
+# scripts/profile_subsystems.py's main.py::_build_model_input() profiling
+# side-channel log (development/Problems.md #36) - regenerable diagnostic
+# output, not source.
+model_input_timing.log

aether_quant-1.0.0/Dockerfile

@@ -0,0 +1,29 @@
+# Stage 1: build webui
+FROM node:20-alpine AS webui-builder
+WORKDIR /app/webui
+COPY webui/package*.json ./
+RUN npm ci
+COPY webui/ .
+RUN npm run build
+
+# Stage 2: consolidated engine image - serves the FastAPI app AND every
+# worker (experience/performance-trigger/telegram/paper-readiness/
+# retraining). One image, one COPY of the whole source tree (respecting
+# .dockerignore's exclusions - .venv/, node_modules/, data/, ml/,
+# backtests/, etc., which arrive at runtime via compose volume mounts
+# instead) rather than a hand-maintained per-worker COPY allow-list.
+# This is the direct fix for development/Problems.md #1/#2/#20/#30 - four
+# separate incidents where a per-worker Dockerfile's COPY list drifted out
+# of sync with that worker's actual import graph and crash-looped on
+# ModuleNotFoundError. With one image copying everything, that whole bug
+# class is structurally impossible now. Each service's actual entrypoint
+# is selected via docker-compose.yml's per-service `command:` override
+# (CMD below is just the default/app entrypoint).
+FROM python:3.11-slim
+WORKDIR /app
+COPY requirements/requirements.txt ./requirements/
+RUN pip install --no-cache-dir -r requirements/requirements.txt
+COPY . .
+COPY --from=webui-builder /app/webui/dist ./webui/dist
+EXPOSE 8000
+CMD ["uvicorn", "monitoring.api_server:app", "--host", "0.0.0.0", "--port", "8000"]

{aether_quant-0.9.0 → aether_quant-1.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aether-quant
-Version: 0.9.0
+Version: 1.0.0
 Summary: Aether Quant convenience CLI
 Requires-Python: >=3.10
 License-File: LICENSE