12 Commits

Author SHA1 Message Date
TPTBusiness e4aea618b8 fix: bump axios 1.15.2→1.16.0, postcss 8.4.31→8.5.14 (Dependabot CVEs) 2026-05-10 22:16:09 +02:00
TPTBusiness efd77b434c chore: remaining Predix→NexQuant renames in docs and web 2026-05-09 18:06:51 +02:00
TPTBusiness cbe1c52e00 refactor: rename project from Predix to NexQuant
Rename all source files, scripts, tests, documentation, and configuration
from Predix/predix to NexQuant/nexquant across the entire codebase.
2026-05-09 17:48:22 +02:00
dependabot[bot] fddc472e16 chore(deps): Bump axios from 1.15.0 to 1.15.2 in /web (#55)
Bumps [axios](https://github.com/axios/axios) from 1.15.0 to 1.15.2.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.15.0...v1.15.2)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.15.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-05 07:22:00 +02:00
dependabot[bot] 5a6446a287 chore(deps): Bump follow-redirects from 1.15.11 to 1.16.0 in /web
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.11 to 1.16.0.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.11...v1.16.0)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-version: 1.16.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-15 22:09:10 +00:00
dependabot[bot] 009f18eb46 chore(deps): Bump axios from 1.14.0 to 1.15.0 in /web
Bumps [axios](https://github.com/axios/axios) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.14.0...v1.15.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.15.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-10 10:09:37 +00:00
TPTBusiness 9925b3132c fix: Resolve security vulnerabilities (Dependabot + Code Scanning)
npm vulnerabilities fixed (4 → 0):
- vite: 8.0.x → 6.4.2 (Path Traversal, File Read bypass)
- micromatch: Added override to ^4.0.8 (ReDoS)
- braces: Already overridden to ^3.0.3
- lodash/lodash-es: Already overridden to ^4.18.0
- postcss: Already overridden to ^8.4.31
- picomatch: Already overridden to ^4.0.4

.bandit.yml restored to root:
- Security scanning configuration for pre-commit hooks
- Proper skips for false positives and intentional patterns

Result: 0 npm vulnerabilities, 0 bandit issues
2026-04-09 15:21:43 +02:00
TPTBusiness e0a5e6d86c chore: Clean up root directory - move generated files to proper locations
Moved from root to results/:
- 45+ fin_quant_run*.log files (30+ GB total) → results/logs/
- selector.log → results/logs/
- .coverage → results/
- data_raw/ → results/
- .env.backup, .env.local → results/
- log/ → results/
- pickle_cache/ → results/
- predix.egg-info/ → results/
- prompt_cache.db → results/
- intraday_pv_*.h5 → git_ignore_folder/

Updated .gitignore:
- *.log, fin_quant*.log
- .coverage, htmlcov/
- ..bfg-report/
- .env.backup, .env.local
- data_raw/
- *.h5, intraday_pv*.h5
- pickle_cache/, predix.egg-info/, __pycache__/
- log/, prompt_cache.db, strategies_new/

Root directory: 53 files → 44 files (clean)
2026-04-09 14:42:25 +02:00
TPTBusiness 18416da2c9 feat: Centralize all prompts in prompts/ directory
New structure:
- prompts/standard_prompts.yaml: Default prompts (committed to Git)
- prompts/local/: Your improved prompts (NOT in Git!)
- prompts/README.md: Documentation
- rdagent/components/loader.py: Prompt loader with priority

Features:
- Loader checks prompts/local/ first (your better prompts)
- Falls back to standard_prompts.yaml if no local version
- Supports sections (system/user)
- Lists available prompts
- Test function included

.gitignore updated:
- prompts/local/ excluded (your proprietary prompts)
- *.local.yaml excluded
- *_private.yaml excluded

Usage:
  from rdagent.components.loader import load_prompt
  prompt = load_prompt('factor_discovery')  # Auto-loads your better version!
2026-04-02 22:29:51 +02:00
TPTBusiness ab5fa78611 fix: Disable Flask debug mode by default (Security Alert #2)
- Change debug=True to debug=False by default
- Add FLASK_DEBUG environment variable for development
- Show warning when debug mode is enabled
- Prevents arbitrary code execution via Werkzeug debugger
- Fixes GitHub Security Alert #2 (py/flask-debug)

Production deployments are now secure by default.
For development: export FLASK_DEBUG=1

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
2026-04-02 22:10:44 +02:00
TPTBusiness 52d2b89148 feat: Auto-start dashboard for fin_quant
Add automatic dashboard launch options for trading loop:

1. CLI integration (rdagent/app/cli.py)
   - --with-dashboard/-d flag for web dashboard
   - --cli-dashboard/-c flag for terminal UI
   - --dashboard-port for custom port configuration
   - Automatic background process spawning

2. Dashboard auto-start
   - Web dashboard launches in background thread
   - CLI dashboard opens in separate terminal window
   - Graceful startup with 2-second delay

3. Process management
   - Dashboard runs as daemon thread
   - Automatic cleanup on main process exit
   - Error handling for dashboard startup failures

4. Documentation
   - Updated help text with examples
   - Usage instructions in README
   - Dashboard URLs displayed on startup

Usage examples:
  rdagent fin_quant -d              # Web dashboard
  rdagent fin_quant -c              # CLI dashboard
  rdagent fin_quant -d -c           # Both dashboards
  rdagent fin_quant -d --port 5001  # Custom port
2026-04-02 19:17:03 +02:00
XianBW 14395488b9 feat: add a web UI server (#1345)
* update rdagent cmd

* fix log error message

* use multiProcessing.Process instead of subprocess.Popen

* add traces to gitignore

* add user interactor in RDLoop (finance scenarios)

* add interactor (feedback, hypothesis) for quant scens

* fix the test_end in qlib conf

* add features init config, general instruction to qlib scenarios

* set base features for based exp

* fix bug when combine factors

* move traces folder to git_ignore_folder

* fix bug in features init

* fix quant interact bug

* fix logger warning error

* bug fixes

* modify rdagent logger, now it can set file output

* adjust cli functions and fix logger bug

* fix server port transport problem

* update server_ui in cli

* add web code

* fix CI problem

* black fix

* update web ui README

* update README

* update readme
2026-03-18 14:04:52 +08:00