27 Commits

Include renames

Author	SHA1	Message	Date
asepharyana	9ea9a4291c	feat: scheduler tangkap company name dari top-changes (n=750) — gratis, isi yang kosong saja	2026-09-16 16:54:27 +07:00
asepharyana	41325ba574	feat: tangkap company name dari snapshot top-changes (n=750, gratis) + SetCompanyNames fill-blank	2026-09-16 16:53:50 +07:00
asepharyana	6d3c17d19d	fix: PDF export kini Unicode — ganti core font Helvetica (latin1 → '?') dengan DejaVuSans ter-embed	2026-09-16 16:48:27 +07:00
asepharyana	05a3bc7471	fix: audit round 4 — XSS in HTML report export, SSRF webhook guard, body limit ... - ToHTML() now html.EscapeString on ticker, generated_at, section name/body, citations (stored/LLM content can't inject script into exported file) - Discord destination webhook_url restricted to discord.com/discordapp.com hosts (SSRF guard: server POSTs alert cards; no private IPs or arbitrary hosts) - Router middleware caps POST/PUT/PATCH bodies at 1 MiB (MaxBytesReader) - TestDestinations updated: non-discord host must 422, uses realistic discord.com webhook URL	2026-09-16 14:43:56 +07:00
asepharyana	b19b9c71d1	test: universe save + local ticker search (ticker & company-name lookup)	2026-09-16 14:32:54 +07:00
asepharyana	49dd2101e0	fix: local ticker search for screener (Sectors companies/ 401s on sub) ... - q= now searches universe table locally (ticker + company_name LIKE, order by close) instead of calling the Sectors companies/ endpoint, which returns SUBSCRIPTION_DOES_NOT_ALLOW on the current subscription and silently fell back to the full 780-ticker universe - removes the broken name-fill cmd + scheduler/one-shot Screen() name enrichment (wasted credits, empty names) - Screener UI: search card says 'kode saham', results still show company name when present	2026-09-16 14:30:22 +07:00
asepharyana	d7eb0a3abf	feat: company names in screener + universe enrichment ... - migration 0010: universe.company_name column - SaveUniverse persists company names; new CompanyNames() store lookup - scheduler universe sweep + universe-sweep cmd fetch names via one Screen() call (best effort) - /api/screen now returns real company names (live when keyed, stored as fallback) - Screener card shows 'PT Bank ...' name under the ticker symbol for search results	2026-09-16 14:23:09 +07:00
asepharyana	1ec860f9be	fix: audit round 3 — IDOR report-scoping, auth rate-limit, briefing chat scoping, DailyVolumes dedup, N+1 list routines, FE export/ask error handling ... - IDOR: interrogate without report_id now scoped to user_key (LatestReportForUser); regression test TestInterrogateIDORScoped - auth: signup/login per-IP rate limit 10/60s (new internal/api/ratelimit.go) + test - chat unscoped grounding: build caller's own briefing instead of global LatestBriefing - DailyVolumes: dedupe by bar date (snapshot rows hold 30-day windows) — fixes volume-anomaly skew - GetDestination: direct (id,user_key) query instead of listing all - ListRoutines: single LastRunsByRoutine query instead of N+1 RunHistory - FE: exportMd/ask/HTML/PDF export now surface errors; alerts create clears channels	2026-09-16 14:12:32 +07:00
asepharyana	0b00daed39	fix: foreign_tickers selalu include semua ticker dengan foreign data (bukan hanya saat watchlist>60)	2026-09-16 01:29:01 +07:00
asepharyana	5f7b6c9c29	chore: remove stray committed binary	2026-09-16 01:27:32 +07:00
asepharyana	b09ff92174	fix: Sectors API dates pakai UTC (WIB midnight ditolak 'future') — tickerDepth + foreign-backfill	2026-09-16 01:27:24 +07:00
asepharyana	defe8b46db	perf: rotateDepth batch 30/cycle (90 credit) — full universe coverage ~26 cycle	2026-09-16 01:13:23 +07:00
asepharyana	6fd89b6c19	feat: full IDX universe (780 ticker) — universe table + close sweep harian, dashboard foreign-flow picker dari semua ticker, rotateDepth incremental fill 10/cylcle, strip .JK, backfill cmd/universe-sweep	2026-09-16 01:06:42 +07:00
asepharyana	07ece10474	fix: audit round 2 — session cookie Secure kondisional, logout clear cookie, IDOR report owner-scoping (migrasi 0008), health force login-gate, SSE stream login-gate, FE: Gate undefined-flicker, auth-expired global redirect, X-User-Key demo dihapus, error handling alerts/routines/watchlist, chart label, encodeURIComponent, Screener onMount	2026-09-15 23:19:56 +07:00
asepharyana	96be4d0922	fix: version commit dibaca live per-request + CI polling anti-stale 20x15s	2026-09-15 22:19:53 +07:00
asepharyana	79f42dfefa	feat: default watchlist semua, login-gate fitur, CI anti-stale via /api/version	2026-09-15 22:12:09 +07:00
asepharyana	5c953289b1	fix: report 504 — cap triase LLM 5 artikel, narasi_awam persist ke payload; report FE bahasa awam	2026-09-15 21:15:49 +07:00
asepharyana	793e0724ed	feat: dashboard substansial — harga close per kartu, konteks pasar, grafik berformat Rp + periode	2026-09-15 20:55:38 +07:00
asepharyana	9fa47240dc	feat: auto-narasi LLM (OmniRoute sonnet-5) — hero briefing + narasi_awam report, migrasi 0006	2026-09-15 19:50:48 +07:00
asepharyana	1bda859def	fix: seed bundle path ../share/flowsight (Nix layout), prod boots with offline data	2026-09-15 17:55:40 +07:00
asepharyana	94a7f1dfd9	feat: briefing auto-generate, pages overhaul (dashboard/screener/report/routines), delete routine	2026-09-15 16:39:27 +07:00
asepharyana	1881e7c6b1	feat: Google OAuth login + server sessions (user_key u:<sub>)	2026-09-15 16:29:57 +07:00
asepharyana	fee313ce97	fix: empty JSON arrays instead of null for alerts/events/runs	2026-09-15 15:44:27 +07:00
asepharyana	9a441c71a6	fix: tolerate already-applied migrations, heal poisoned prod DB on boot	2026-09-15 15:03:07 +07:00
asepharyana	2b0c692ac5	fix: journaled migrations (schema_migrations), rerun-safe on existing prod DB	2026-09-15 14:52:54 +07:00
asepharyana	21e8568108	feat: CI + Nix deploy + prod sectors-hackaton.asepharyana.my.id ... - Backend serve web dist (WEB_DIST_DIR + SPA fallback, /api 404 JSON) - flake.nix: single flowsight derivation (go 1.25 + pnpm build) - deploy/flowsight.service: systemd on :4022 via bws-exec - .github/workflows/ci.yml: go test + tsc gate, nix build, attic, SSH deploy	2026-09-15 14:45:23 +07:00
asepharyana	8c184ccae1	feat: add Citations and WatchlistChat components, integrate with API ... - Implemented Citations component to display citation data. - Created WatchlistDrawer and ChatSidebar components for managing watchlists and AI chat functionality. - Integrated API calls for watchlist management and chat interactions. - Updated index.tsx to include new components in the main application layout. - Added API client in lib/api.ts for structured API interactions. - Developed Alerts, Dashboard, Portfolio, Routines, Screener, and Report pages with relevant data fetching and UI components. - Introduced styles in tokens.css for consistent theming across the application. - Configured TypeScript and Vite for project setup and development.	2026-09-15 12:36:48 +07:00