dcy-007(core 자율 안전 매도) 전체 delivery. BAT-010 기반 인프라가 미커밋 상태였고 BAT-011 트리거 레이어와 공유 파일에서 섞여 있어 한 커밋으로 묶음. BAT-010 (REQ-034/035/036/041, release-candidate): - WatchdogStore(application/watchdog.py) + snapshot RPC 워치독 갱신 - Slot stop_loss_price/take_profit_price 필드 + 004_add_price_thresholds.sql - SlotService.sell() 자율 매도 내부 경로 + idempotency - SafetySellConfig env 5종 파싱 BAT-011 (REQ-037/038/039/040/042, release-candidate): - SafetySellService(application/safety_sell.py): forced_close 만기 / stop-loss· take-profit KIS polling / 장 마감 강제 청산 + trex-safety-sell 7번째 스레드 - BrokerPort.get_current_price + KIS inquire-price(TTTC8397R/VTTC8397R, stck_prpr) + paper stub - SlotService.update_thresholds() + intent RPC update_thresholds 액션 (부분 갱신/null 해제, 워치독 last_seen_at 리셋) - baseline 3문서 정합(interface-contract/runtime-flows/project-structure) 거버넌스: REQ-034~042 Implemented 동기화, BAT-010/011 release-candidate, dcy-007 discovery 포함. 검증: 신규 38 테스트 green, 단위 236 passed/23 skipped, 인프라 게이트(PG+RabbitMQ) 259 passed(마이그레이션 001~004 round-trip 포함), ruff clean. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
50 lines
2.0 KiB
Python
50 lines
2.0 KiB
Python
"""Per-slot watchdog store for safety-sell (REQ-034 / BAT-010).
|
|
|
|
WatchdogStore tracks the last time a snapshot RPC response included each
|
|
holding slot. BAT-011 trigger loops use is_expired() to decide whether a
|
|
slot is unmonitored (strategy module absent) and therefore eligible for
|
|
autonomous safety-sell actions.
|
|
|
|
Thread-safety: dict reads and writes in CPython are GIL-atomic for simple
|
|
assignments, which is sufficient here — one writer (snapshot-rpc thread)
|
|
and one or more readers (BAT-011 trigger-loop threads). No explicit lock
|
|
is needed.
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
from datetime import datetime, timezone
|
|
|
|
|
|
class WatchdogStore:
|
|
"""In-memory per-slot last_seen_at tracker (REQ-034)."""
|
|
|
|
def __init__(self) -> None:
|
|
self._store: dict[str, datetime] = {}
|
|
self._started_at: datetime = datetime.now(tz=timezone.utc)
|
|
|
|
def update(self, slot_id: str) -> None:
|
|
"""Record that slot_id appeared in a snapshot RPC response."""
|
|
self._store[slot_id] = datetime.now(tz=timezone.utc)
|
|
|
|
def is_expired(self, slot_id: str, timeout_sec: int) -> bool:
|
|
"""Return True if slot_id has not been seen for longer than timeout_sec.
|
|
|
|
A slot that has never been seen is treated as expired (returns True)
|
|
unless in_grace_period() is True — callers must check grace period
|
|
before calling this method when they want to suppress false positives.
|
|
"""
|
|
last = self._store.get(slot_id)
|
|
if last is None:
|
|
return True
|
|
elapsed = (datetime.now(tz=timezone.utc) - last).total_seconds()
|
|
return elapsed > timeout_sec
|
|
|
|
def in_grace_period(self, grace_sec: int) -> bool:
|
|
"""Return True if the daemon started less than grace_sec seconds ago.
|
|
|
|
During the grace period ALL expiry judgements must be deferred —
|
|
no slot should be treated as watchdog-expired (REQ-034 AC-4).
|
|
"""
|
|
elapsed = (datetime.now(tz=timezone.utc) - self._started_at).total_seconds()
|
|
return elapsed < grace_sec
|