Ship TradingCodex 0.1.0a5

Author: monarchjuno

docs/deployment.md

@@ -133,7 +133,7 @@ python3.14 -m venv /tmp/tcx-testpypi
 /tmp/tcx-testpypi/bin/pip install \
   --index-url https://test.pypi.org/simple/ \
   --extra-index-url https://pypi.org/simple/ \
-  tradingcodex==0.1.0a4
+  tradingcodex==0.1.0a5
 rm -rf /tmp/tcx-testpypi-smoke
 mkdir -p /tmp/tcx-testpypi-smoke
 cd /tmp/tcx-testpypi-smoke
@@ -162,7 +162,7 @@ After the PyPI workflow completes:
 
 ```bash
 python3.14 -m venv /tmp/tcx-pypi
-/tmp/tcx-pypi/bin/pip install tradingcodex==0.1.0a4
+/tmp/tcx-pypi/bin/pip install tradingcodex==0.1.0a5
 rm -rf /tmp/tcx-pypi-smoke
 mkdir -p /tmp/tcx-pypi-smoke
 cd /tmp/tcx-pypi-smoke
@@ -183,7 +183,7 @@ cd /tmp/tcx-install-sh-smoke
 
 Use PEP 440 versions:
 
-- `0.1.0a1`, `0.1.0a2`, `0.1.0a3`, `0.1.0a4` for alpha releases
+- `0.1.0a1`, `0.1.0a2`, `0.1.0a3`, `0.1.0a4`, `0.1.0a5` for alpha releases
 - `0.1.0b1` for beta releases
 - `0.1.0rc1` for release candidates
 - `0.1.0` only after install, docs, DB migration, and generated workspace

docs/tradingcodex-prd.md

@@ -58,7 +58,7 @@ Multiple Codex projects / subagents / local CLI
   -> product web review dashboard, Django-hosted MCP endpoint, or stdio bridge
   -> Django service layer
   -> central Django DB-backed policy, research, orders, portfolio, audit, harness, integrations
-  -> paper/stub/live adapter boundary
+  -> paper/stub adapter boundary; future live adapters only after separate installation and policy approval
 ```
 
 The source tree is organized around the Python product:
@@ -229,6 +229,12 @@ Django Ninja provides local/staff typed control APIs:
 - `POST /api/research/search`
 - `POST /api/research/source-snapshots`
 
+The canonical approval and execution routes are `/api/approvals` and
+`/api/executions/submit-approved`. The service may also keep compatibility
+aliases under `/api/orders/approvals` and `/api/orders/executions/submit-approved`;
+these aliases call the same service-layer functions and do not widen execution
+permissions.
+
 OpenAPI docs are staff-protected. REST is for operations, validation, inspection, and local control; it must not bypass MCP/service-layer execution checks.
 
 ## MCP Boundary

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "tradingcodex"
-version = "0.1.0a4"
+version = "0.1.0a5"
 description = "Codex-native trading harness with a Django service plane and MCP execution boundary."
 readme = "README.md"
 requires-python = ">=3.14,<3.15"

tests/test_python_migration.py

@@ -21,6 +21,7 @@
     validate_order_intent,
 )
 from tradingcodex_service.mcp_runtime import static_mcp_tools
+from tradingcodex_service.version import TRADINGCODEX_VERSION
 
 
 ROOT = Path(__file__).resolve().parents[1]
@@ -72,6 +73,7 @@ def test_template_copy_skips_python_bytecode_cache(tmp_path: Path) -> None:
 def test_python_generator_creates_workspace_contract(tmp_path: Path) -> None:
     workspace = make_workspace(tmp_path)
     assert (workspace / "pyproject.toml").exists()
+    assert f'version = "{TRADINGCODEX_VERSION}"' in (workspace / "pyproject.toml").read_text(encoding="utf-8")
     assert not (workspace / "package.json").exists()
     assert (workspace / "tcx").exists()
     assert not (workspace / "tradingcodex").exists()
@@ -101,13 +103,32 @@ def test_python_generator_creates_workspace_contract(tmp_path: Path) -> None:
     assert "head-manager MCP execution submit excluded" in doctor
     assert "execution-operator MCP execution allowlist configured" in doctor
     assert "risk-manager MCP approval allowlist configured" in doctor
+    hooks = json.loads((workspace / ".codex" / "hooks.json").read_text(encoding="utf-8"))["hooks"]
+    expected_hook_events = {
+        "SessionStart",
+        "PreToolUse",
+        "PermissionRequest",
+        "PostToolUse",
+        "UserPromptSubmit",
+        "SubagentStart",
+        "SubagentStop",
+        "Stop",
+    }
+    assert set(hooks) == expected_hook_events
+    assert "matcher" not in hooks["UserPromptSubmit"][0]
+    assert "matcher" not in hooks["Stop"][0]
+    assert hooks["PreToolUse"][0]["matcher"] == "Bash|mcp__.*"
+    assert hooks["SubagentStart"][0]["matcher"]
     service_usage = run(["./tcx", "service", "nope"], workspace, expect_ok=False)
     assert "Usage: tcx service runserver [addrport] [django runserver args]" in service_usage.stderr
     agent_files = sorted((workspace / ".codex" / "agents").glob("*.toml"))
     assert len(agent_files) == 9
     actual_mcp_tools = {tool["name"] for tool in static_mcp_tools()}
     stale_mcp_tool_names = {"evaluate_policy", "get_positions_snapshot", "write_audit_event"}
     root_config = tomllib.loads((workspace / ".codex" / "config.toml").read_text(encoding="utf-8"))
+    assert root_config["default_permissions"] == "tradingcodex"
+    assert root_config["permissions"]["tradingcodex"]["extends"] == ":workspace"
+    assert root_config["permissions"]["tradingcodex"]["network"]["enabled"] is False
     root_mcp = root_config["mcp_servers"]["tradingcodex"]
     assert root_mcp["command"] == "uvx"
     assert root_mcp["args"] == ["--python", "3.14", "--from", "tradingcodex", "tcx", "mcp", "stdio"]
@@ -124,9 +145,12 @@ def test_python_generator_creates_workspace_contract(tmp_path: Path) -> None:
     assert "cancel_approved_order" not in root_mcp["enabled_tools"]
     for agent_file in agent_files:
         agent_config = agent_file.read_text(encoding="utf-8")
+        agent_toml = tomllib.loads(agent_config)
+        assert agent_toml["name"] == agent_file.stem
+        assert agent_toml["description"]
+        assert agent_toml["developer_instructions"]
         assert 'model = "gpt-5.5"' in agent_config
         assert 'model_reasoning_effort = "high"' in agent_config
-        agent_toml = tomllib.loads(agent_config)
         agent_mcp = agent_toml["mcp_servers"]["tradingcodex"]
         assert agent_mcp["command"] == "uvx"
         assert agent_mcp["args"] == ["--python", "3.14", "--from", "tradingcodex", "tcx", "mcp", "stdio"]
@@ -189,7 +213,7 @@ def test_init_current_directory_and_overwrite_language(tmp_path: Path) -> None:
 
     assert f"TradingCodex workspace created: {workspace.resolve()}" in result.stdout
     assert (workspace / "tcx").exists()
-    assert json.loads((workspace / ".tradingcodex" / "generated" / "module-lock.json").read_text(encoding="utf-8"))["tradingcodex_version"] == "0.1.0a4"
+    assert json.loads((workspace / ".tradingcodex" / "generated" / "module-lock.json").read_text(encoding="utf-8"))["tradingcodex_version"] == TRADINGCODEX_VERSION
 
     repeated = run([sys.executable, "-m", "tradingcodex_cli", "init", "."], workspace, expect_ok=False, env_extra=env_extra)
     assert "--overwrite" in repeated.stderr

tradingcodex_cli/generator.py

@@ -9,6 +9,8 @@
 from pathlib import Path
 from typing import Any
 
+from tradingcodex_service.version import TRADINGCODEX_VERSION
+
 DEFAULT_MODULE_IDS = [
     "codex-base",
     "fixed-subagents",
@@ -51,7 +53,7 @@ def bootstrap_workspace(project_dir: Path | str, force: bool = False, dry_run: b
         "SOURCE_ROOT": str(repo_root()),
         "PYTHON_EXECUTABLE": sys.executable,
         "GENERATED_AT": datetime.now(timezone.utc).isoformat().replace("+00:00", "Z"),
-        "TRADINGCODEX_VERSION": "0.1.0a4",
+        "TRADINGCODEX_VERSION": TRADINGCODEX_VERSION,
         "TRADINGCODEX_MCP_PACKAGE_SPEC": os.environ.get("TRADINGCODEX_MCP_PACKAGE_SPEC", "tradingcodex"),
         "SUBAGENT_COUNT": str(len(subagents)),
     }

tradingcodex_cli/workspace.py

@@ -1,6 +1,5 @@
 from __future__ import annotations
 
-import argparse
 import json
 import os
 import sys

tradingcodex_service/__init__.py

@@ -1,3 +1,5 @@
+from tradingcodex_service.version import TRADINGCODEX_VERSION
+
 __all__ = ["__version__"]
 
-__version__ = "0.1.0a4"
+__version__ = TRADINGCODEX_VERSION

tradingcodex_service/domain.py

@@ -10,8 +10,8 @@
 from pathlib import Path
 from typing import Any
 
+from tradingcodex_service.version import TRADINGCODEX_VERSION
 
-TRADINGCODEX_VERSION = "0.1.0a4"
 DEFAULT_MAX_SINGLE_ORDER_KRW = 100_000_000
 DEFAULT_ALLOWED_ADAPTERS = {"stub-execution", "paper-trading"}
 DEFAULT_PAPER_CASH_KRW = 100_000_000

tradingcodex_service/version.py

@@ -0,0 +1 @@
+TRADINGCODEX_VERSION = "0.1.0a5"

workspace_templates/modules/codex-base/files/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "{{PROJECT_NAME}}"
-version = "0.1.0a4"
+version = "{{TRADINGCODEX_VERSION}}"
 requires-python = ">=3.14,<3.15"
 dependencies = [
   "django>=5.2,<5.3",