fix: 하드닝 루프 8회차 — 체결 보정·고아 감지·청산 경보·실시간/차트·리스크 가드 일괄 수정

- 스윙 체결가 확인 전 executed_price NULL + fill_sweep, 진입가 resolve(ActiveTrade↔Portfolio), 0체결/부분체결 매수 장부 원복
- DT 고아 감지(근거 한정)·0체결 매도 복원·stale 점검 확대, 시간손절 -0.3% 원복
- 폴백 손절 ATR 캐시, 거래량부족-차단 신호 매수 차단, 현금 5% 유보 재적용, MDD peak/reset 수정
- KIS 서킷브레이커 청산 우회·경보, db_worker 재큐잉 순서, heartbeat·health-watch 사이드카
- 실시간 WS 재구독·41건 우선순위·다건 프레임 분할, 차트 샘플 제거·당일봉 합성, WS 서브프로토콜 인증
- 프론트: 미관리 그룹·확인 모달·차트 실시간 반영·예수금 표시 정정
- 전문가 에이전트 6종 추가(.claude/agents)
- 유닛 스위트 2667 passed (소켓 차단 하), tsc OK

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y83Za98XsNw9zuA4FTUytN

backend/tests/test_kis_breaker_orders_r4.py

@@ -0,0 +1,98 @@
+"""R4: KIS 서킷브레이커는 주문(청산 포함)을 차단하지 않고, 주문 실패는 조회 breaker 에 세지 않는다."""
+import asyncio
+import pytest
+
+from app.services import korea_investment_api as kia
+from app.services.utils import CircuitBreakerState
+
+ORDER_EP = "/uapi/domestic-stock/v1/trading/order-cash"
+QUOTE_EP = "/uapi/domestic-stock/v1/quotations/inquire-price"
+
+
+class _Resp:
+    def __init__(self, status=200, body=None):
+        self.status_code, self._b, self.headers, self.text = status, body or {}, {}, ""
+
+    def json(self):
+        return self._b
+
+
+class _Client:
+    def __init__(self, resp):
+        self.resp, self.calls = resp, 0
+
+    async def request(self, *a, **k):
+        self.calls += 1
+        return self.resp
+
+
+def _api(monkeypatch, resp):
+    api = kia.KoreaInvestmentAPI.__new__(kia.KoreaInvestmentAPI)
+    api.circuit_breaker = kia.CircuitBreaker(failure_threshold=2, recovery_timeout=120)
+    api.monitor = kia.APICallMonitor()
+    api.semaphore = asyncio.Semaphore(2)
+    api._throttle_lock = asyncio.Lock()
+    api.last_request_time = None
+    api.min_request_interval = 0
+    api.max_retries = 0
+    api.retry_delay = 0
+    api.retry_backoff = 1
+    api.timeout = 1
+    api.app_key = api.app_secret = "x"
+    api.base_url = "http://x"
+    client = _Client(resp)
+
+    async def _tok(*a, **k):
+        return "tok"
+
+    async def _cl():
+        return client
+    monkeypatch.setattr(api, "_get_access_token", _tok, raising=False)
+    monkeypatch.setattr(api, "_get_http_client", _cl, raising=False)
+    return api, client
+
+
+def _open(api):
+    for _ in range(api.circuit_breaker.failure_threshold):
+        api.circuit_breaker.record_failure()
+    assert api.circuit_breaker.state == CircuitBreakerState.OPEN
+
+
+@pytest.mark.asyncio
+async def test_order_not_blocked_when_breaker_open(monkeypatch):
+    api, client = _api(monkeypatch, _Resp(200, {"rt_cd": "0"}))
+    _open(api)
+    out, _ = await api._make_request("POST", ORDER_EP, "TTTC0801U")
+    assert out["rt_cd"] == "0" and client.calls == 1
+    with pytest.raises(Exception, match="Circuit breaker open"):
+        await api._make_request("GET", QUOTE_EP, "X")
+    assert client.calls == 1
+
+
+@pytest.mark.asyncio
+async def test_order_failures_do_not_trip_breaker(monkeypatch):
+    api, _ = _api(monkeypatch, _Resp(500, {"rt_cd": "1", "msg_cd": "EGW00201"}))
+    for _ in range(api.circuit_breaker.failure_threshold + 3):
+        await api._make_request("POST", ORDER_EP, "TTTC0801U")
+    assert api.circuit_breaker.state == CircuitBreakerState.CLOSED
+    assert api.circuit_breaker.failure_count == 0
+
+
+@pytest.mark.asyncio
+async def test_query_failures_still_trip_and_alert(monkeypatch):
+    sent = []
+    from app.services import telegram_notifier as tn
+
+    async def _warn(cat, msg):
+        sent.append(cat)
+    monkeypatch.setattr(tn.telegram_notifier, "notify_system_warning", _warn)
+    api, _ = _api(monkeypatch, _Resp(500, {}))
+    for _ in range(api.circuit_breaker.failure_threshold):
+        with pytest.raises(Exception):
+            await api._make_request("GET", QUOTE_EP, "X")
+    await asyncio.sleep(0)
+    assert api.circuit_breaker.state == CircuitBreakerState.OPEN
+    assert api.circuit_breaker.open_count == 1
+    assert sent == ["KIS_CIRCUIT_BREAKER"]
+    assert api.circuit_breaker.health()["open_count"] == 1
+    assert "korea_investment_api" in kia.get_kis_breaker_health_v2()