fix: isolate quant monitor repository sync

Co-Authored-By: Codex <noreply@openai.com>

Author: Pigbibi

ops/quant-monitor/scripts/common_env.sh

@@ -7,7 +7,10 @@ AAB_ROOT="${AIAUDIT_BRIDGE_ROOT:-$(cd "$ROOT/../.." && pwd)}"
 PROJECTS_ROOT="${PROJECTS_ROOT:-$HOME/Projects}"
 QUANT_PROJECTS_ROOT="${QUANT_PROJECTS_ROOT:-$ROOT/data/lifecycle-projects}"
 LIFECYCLE_LOCAL_ROOT="${LIFECYCLE_LOCAL_ROOT:-$ROOT/data/lifecycle-store}"
-QPK_ROOT="${QUANT_PLATFORM_KIT_ROOT:-$PROJECTS_ROOT/QuantPlatformKit}"
+# Monitoring must never import an editable QuantPlatformKit checkout from a
+# developer workspace: the monitor synchronizes and consumes this dedicated
+# mirror instead.
+QPK_ROOT="${QUANT_PLATFORM_KIT_ROOT:-$QUANT_PROJECTS_ROOT/QuantPlatformKit}"
 VENV="${QUANT_MONITOR_VENV:-$ROOT/.venv}"
 
 export QUANT_MONITOR_ROOT="$ROOT"

ops/quant-monitor/scripts/sync_strategy_repos.sh

@@ -7,29 +7,34 @@ REPOS=(
   UsEquityStrategies
   CryptoStrategies
 )
-ROOT="${PROJECTS_ROOT:-$HOME/Projects}"
+ROOT="${QUANT_MONITOR_ROOT:-$(cd "$(dirname "$0")/.." && pwd)}"
+MIRROR_ROOT="${QUANT_PROJECTS_ROOT:-$ROOT/data/lifecycle-projects}"
+REPOSITORY_BASE_URL="${QUANT_MONITOR_REPOSITORY_BASE_URL:-https://github.com/QuantStrategyLab}"
 failed=0
+
+mkdir -p "$MIRROR_ROOT"
+
 for repo in "${REPOS[@]}"; do
-  dir="$ROOT/$repo"
+  dir="$MIRROR_ROOT/$repo"
   if [[ -d "$dir/.git" ]]; then
     if ! git -C "$dir" fetch origin main --quiet; then
       echo "[sync] $repo fetch failed" >&2
       failed=1
       continue
     fi
-    if ! git -C "$dir" checkout main --quiet; then
+    if ! git -C "$dir" checkout --detach --quiet origin/main; then
       echo "[sync] $repo checkout failed" >&2
       failed=1
       continue
     fi
-    if ! git -C "$dir" pull --ff-only origin main --quiet; then
-      echo "[sync] $repo pull failed" >&2
+    echo "[sync] $repo ok"
+  else
+    if ! git clone --depth 1 "$REPOSITORY_BASE_URL/$repo.git" "$dir" --quiet; then
+      echo "[sync] $repo clone failed" >&2
       failed=1
       continue
     fi
-    echo "[sync] $repo ok"
-  else
-    echo "[sync] skip missing $dir" >&2
+    echo "[sync] $repo cloned"
   fi
 done
 exit "$failed"

ops/quant-monitor/systemd/codex-daily-briefing.service.example

@@ -10,7 +10,7 @@ Group=ubuntu
 WorkingDirectory=/home/ubuntu/Projects/AIAuditBridge/ops/quant-monitor
 Environment=QUANT_MONITOR_ROOT=/home/ubuntu/Projects/AIAuditBridge/ops/quant-monitor
 Environment=AIAUDIT_BRIDGE_ROOT=/home/ubuntu/Projects/AIAuditBridge
-Environment=QUANT_PLATFORM_KIT_ROOT=/home/ubuntu/Projects/QuantPlatformKit
+Environment=QUANT_PLATFORM_KIT_ROOT=/home/ubuntu/Projects/AIAuditBridge/ops/quant-monitor/data/lifecycle-projects/QuantPlatformKit
 Environment=QUANT_SENTINEL_TELEGRAM_SECRET_NAME=quant-sentinel-telegram-bot-token
 Environment=QUANT_SENTINEL_GCP_PROJECT=firstradequant
 Environment=GLOBAL_TELEGRAM_CHAT_ID=

ops/quant-monitor/systemd/codex-quant.service.example

@@ -10,7 +10,7 @@ Group=ubuntu
 WorkingDirectory=/home/ubuntu/Projects/AIAuditBridge/ops/quant-monitor
 Environment=QUANT_MONITOR_ROOT=/home/ubuntu/Projects/AIAuditBridge/ops/quant-monitor
 Environment=AIAUDIT_BRIDGE_ROOT=/home/ubuntu/Projects/AIAuditBridge
-Environment=QUANT_PLATFORM_KIT_ROOT=/home/ubuntu/Projects/QuantPlatformKit
+Environment=QUANT_PLATFORM_KIT_ROOT=/home/ubuntu/Projects/AIAuditBridge/ops/quant-monitor/data/lifecycle-projects/QuantPlatformKit
 Environment=QUANT_SENTINEL_TELEGRAM_SECRET_NAME=quant-sentinel-telegram-bot-token
 Environment=QUANT_SENTINEL_GCP_PROJECT=firstradequant
 # Set on VPS only — do not commit real chat id to git:

ops/quant-monitor/tests/test_deploy_scripts.py

@@ -46,10 +46,18 @@ def test_common_env_separates_code_and_lifecycle_data_roots(self) -> None:
                 str(Path(home) / "Projects"),
                 str(monitor_root / "data" / "lifecycle-projects"),
                 str(monitor_root / "data" / "lifecycle-store"),
-                str(Path(home) / "Projects" / "QuantPlatformKit"),
+                str(monitor_root / "data" / "lifecycle-projects" / "QuantPlatformKit"),
             ],
         )
 
+    def test_strategy_sync_uses_dedicated_mirrors(self) -> None:
+        script = (ROOT / "scripts" / "sync_strategy_repos.sh").read_text(encoding="utf-8")
+
+        self.assertIn('MIRROR_ROOT="${QUANT_PROJECTS_ROOT:-$ROOT/data/lifecycle-projects}"', script)
+        self.assertIn('dir="$MIRROR_ROOT/$repo"', script)
+        self.assertIn("checkout --detach --quiet origin/main", script)
+        self.assertNotIn("pull --ff-only", script)
+
     def test_health_check_syncs_artifacts_before_monitoring(self) -> None:
         script = (ROOT / "scripts" / "health_check.sh").read_text(encoding="utf-8")