@alphafox/cli 0.3.5 → 0.3.7

package/dist/skills-manifest.json

@@ -1,141 +1,141 @@
 {
   "schemaVersion": 1,
   "packageName": "@alphafox/cli",
-  "packageVersion": "0.3.5",
+  "packageVersion": "0.3.7",
   "contractVersion": "2026-08-13",
-  "bundleHash": "797ff48c83d6f0274e8726c4c6b5a3c9271c79116e9d8f90a268b4936efaeb65",
+  "bundleHash": "e12e1922538778707e60e931a247ecebb3e028cefeba295f4ca299d8d82d661b",
   "skills": [
     {
       "name": "alphafox",
-      "version": "0.3.5",
+      "version": "0.3.7",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "9b96984c09a656ef1f0c2b8c2d4c0c7a2ae10177d1b0abe0470ea9e5687095cd",
-          "size": 2184
+          "sha256": "2cd53898008075e68afd8ce955b63cf61f2971ef28f6c13c41853b1c5de967c8",
+          "size": 3553
         }
       ],
-      "hash": "1662dc2d889ef7429a4abf53061c6b5e83b2665998b4ccbfbf43338f373ef938"
+      "hash": "d687ecf8cc366e26dcb535bf31a30faceb037f021c818fa24997d144a22d3c20"
     },
     {
       "name": "alphafox-account",
-      "version": "0.3.5",
+      "version": "0.3.7",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "5e6244d3072e7cd9c9a5603d9c72e8ddf959cbca870f81603b7cfcb8d35b6212",
+          "sha256": "fc5675dc44494227679994b761ca2e014d36acc207c68e3fb6d833912a7644ee",
           "size": 783
         }
       ],
-      "hash": "674fe691cdf52c64af5360c09475b7444e8ce6a1c59fa061c39d9ed6b1dfd78e"
+      "hash": "bc1352e9d352f313f69f5257ba351137778c3ee1d8714d2d80fc39c0824c5cec"
     },
     {
       "name": "alphafox-admin",
-      "version": "0.3.5",
+      "version": "0.3.7",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "cf3503e7d8114767b806d3d2349695b0a2af582d470c16c99064df60792baaca",
+          "sha256": "6594e6cbfd319a41ae3abf9bf4f8239bb42bc25e6eec295999fe39cd694b2b8b",
           "size": 787
         }
       ],
-      "hash": "e33bb16a3f241ff29423023aebc044c26c6b4689feabe9b5f780dc3a5bdbb4a5"
+      "hash": "d6c5573444a020f376d51a73d44f39da9de8ea20bfd160f838b0de01bbb5e798"
     },
     {
       "name": "alphafox-auth",
-      "version": "0.3.5",
+      "version": "0.3.7",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "848fcd9422977c0bb3ee3355c2359c6efbb54e964b64ea253660e7ee12598f1a",
+          "sha256": "b7b2694cbcf6e784d89943950435cb34454309cfbe07e383cc028a435dfec77d",
           "size": 1919
         }
       ],
-      "hash": "c17ebdb46ebb36036d9958d8a6a31717af6945267575d7464561728e0c9d3205"
+      "hash": "aa7e2a39058660c4c803ed6e1bed94da0559aa943998336d6f0c83d8930a1d9d"
     },
     {
       "name": "alphafox-engine-backtest",
-      "version": "0.3.5",
+      "version": "0.3.7",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "8e91f3779ee93b680b90fa21d0e7e8fa7cc5ad4ca89941e1b9076526f09075e2",
-          "size": 7346
+          "sha256": "e09e938c9dd90d0be156b2d8bd83ba854c4d1a190a1b4aa575ca67db70184ebc",
+          "size": 7584
         }
       ],
-      "hash": "73943798e3787ad78a9955aad937154ca0b8a975e44117b78f1afecc9866f13b"
+      "hash": "91de2131ffde0b9fef16221d5589a8c430ae48ddfc4f2dc781d510b9d4c90532"
     },
     {
       "name": "alphafox-exchange",
-      "version": "0.3.5",
+      "version": "0.3.7",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "ea7d153cd5806f471e45e5df2f0558835aa6ad413abe92667352288fa534ff2a",
+          "sha256": "53cba327c5507266b4dca7193fad67ba33c0c7bb745be41fd194425b9ef5928e",
           "size": 743
         }
       ],
-      "hash": "88d3826590356eed7b3a3405188242ca7e3936856fcd74400c06da701da0b062"
+      "hash": "910f451fc7939926cfbeee27ee72f2aae86fcdd78f343e9f02c30df105ac6480"
     },
     {
       "name": "alphafox-market",
-      "version": "0.3.5",
+      "version": "0.3.7",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "c816116463f6b8ef7d7281593500153119bd62d6635517faf71e769e36522385",
-          "size": 1801
+          "sha256": "6589628478dc9c98c20479a2ffdded4014ce71b9c488dd386a606fef25a37d26",
+          "size": 3078
         }
       ],
-      "hash": "01ae4ac923c4284af527f78991784e9b1bf2599daa57dcead89f2f72510278df"
+      "hash": "84d243b7c53c519cba34c8c487ba23eae60bde8440c4dcfff06e20efd63c07fa"
     },
     {
       "name": "alphafox-notification",
-      "version": "0.3.5",
+      "version": "0.3.7",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "00c6b87f4742c3c5ea07276228c4b1ba718683abdf6e40c35024b270ec4abd49",
+          "sha256": "8b985ff7f33696eb11427147cd021d32654f525eea54f8098f368e8750a59381",
           "size": 698
         }
       ],
-      "hash": "c23e5ed2458d8d2fa58f04b24a1efe300c554b2029f9b218685d204c5f9ed2b7"
+      "hash": "1f316dc3fe251699b3f90102cbc16cb4fbd3a3c5c07b923297c075fe2e73a4b3"
     },
     {
       "name": "alphafox-shared",
-      "version": "0.3.5",
+      "version": "0.3.7",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "c8b7624e43242c3bf1a5f5e8d2101a6b53a0a7c62f04afac079e49a478eaaca9",
-          "size": 4750
+          "sha256": "3aac1ab46a759a2c6748516936f886ec028e680bff7deb3ff1abc51af99ed18a",
+          "size": 5163
         }
       ],
-      "hash": "a8d5bedffabb5b0c715bf88bd94f7a3ef4e3be77f854065806d4dd1440ef606f"
+      "hash": "72a7255ab23ff7c1adf41b1ff2e22834d1b58ee9e2ccea990c64f9277bf8b0a3"
     },
     {
       "name": "alphafox-strategy",
-      "version": "0.3.5",
+      "version": "0.3.7",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "8f94ea6fc3d36ddc8e6808e1e6ebdfcec56973a93fc86d0c6832eff2d6cf4022",
-          "size": 1450
+          "sha256": "1ef2a00dd1c74922a3d0248041813609fc58701e7857bb069cbed511b0c46168",
+          "size": 1826
         }
       ],
-      "hash": "b1f5c6ae08bc2ea486b32c34c2e271ea504843972ccc7dbbb1e7e68d6a714f7d"
+      "hash": "44c2bf74ff053977f3a8631115ebf868af7cff33856e0c6a4fe55080049c1ae1"
     },
     {
       "name": "alphafox-trading",
-      "version": "0.3.5",
+      "version": "0.3.7",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "2eddaa9c903daa62790ead007db4f0f6f412d1a14b291025937927eda6719d03",
-          "size": 1435
+          "sha256": "db065fcc272e66d091cfe7469317d7911946f96094f475f64d34d201c392424c",
+          "size": 3122
         }
       ],
-      "hash": "d4b9e260145aca858e4d3a1f13bf81081c96bd8048d8d6eeb487e35dd78129fb"
+      "hash": "af36dc51e47ca91cb4a2f5ca78e03e17f003ee47b5354cef42947f401fbe48c0"
     }
   ]
 }

package/dist/update/notify.d.ts

@@ -0,0 +1,24 @@
+export declare const UPDATE_CHECK_INTERVAL_MS: number;
+export interface UpdateCheckState {
+    readonly schemaVersion: 1;
+    readonly checkedAt: string;
+    readonly currentVersion: string;
+    readonly latestVersion: string | null;
+    readonly updateAvailable: boolean;
+}
+export interface UpdateNoticeResult {
+    readonly checked: boolean;
+    readonly notified: boolean;
+    readonly latestVersion: string | null;
+}
+export interface UpdateNoticeDeps {
+    readonly env?: NodeJS.ProcessEnv;
+    readonly currentVersion?: string;
+    readonly now?: Date;
+    readonly fetchLatest?: () => Promise<string>;
+    readonly writeNotice?: (line: string) => void;
+}
+export declare function updateCheckStatePath(env?: NodeJS.ProcessEnv): string;
+export declare function formatUpdateNotice(currentVersion: string, latestVersion: string): string;
+export declare function shouldSkipUpdateCheck(command: string | undefined, env?: NodeJS.ProcessEnv): boolean;
+export declare function maybeNotifyCliUpdate(deps?: UpdateNoticeDeps): Promise<UpdateNoticeResult>;

package/dist/update/notify.js

@@ -0,0 +1,109 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UPDATE_CHECK_INTERVAL_MS = void 0;
+exports.updateCheckStatePath = updateCheckStatePath;
+exports.formatUpdateNotice = formatUpdateNotice;
+exports.shouldSkipUpdateCheck = shouldSkipUpdateCheck;
+exports.maybeNotifyCliUpdate = maybeNotifyCliUpdate;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const profiles_1 = require("../config/profiles");
+const exec_1 = require("../install/exec");
+const wizard_1 = require("../install/wizard");
+const version_1 = require("../version");
+exports.UPDATE_CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
+const NPM_VIEW_TIMEOUT_MS = 4_000;
+function updateCheckStatePath(env = process.env) {
+    return (0, node_path_1.join)((0, profiles_1.defaultConfigDir)(env), "update-check.json");
+}
+function formatUpdateNotice(currentVersion, latestVersion) {
+    return `[alphafox] update available: ${currentVersion} -> ${latestVersion}. After the user confirms, run: alphafox update --format json --no-input`;
+}
+function shouldSkipUpdateCheck(command, env = process.env) {
+    if (env.ALPHAFOX_SKIP_UPDATE_CHECK === "1")
+        return true;
+    return command === "update" || command === "install";
+}
+async function maybeNotifyCliUpdate(deps = {}) {
+    const env = deps.env ?? process.env;
+    const currentVersion = deps.currentVersion ?? version_1.CLI_VERSION;
+    const now = deps.now ?? new Date();
+    const writeNotice = deps.writeNotice ??
+        ((line) => {
+            process.stderr.write(`${line}\n`);
+        });
+    const previous = loadUpdateCheckState(updateCheckStatePath(env));
+    if (previous &&
+        now.getTime() - Date.parse(previous.checkedAt) < exports.UPDATE_CHECK_INTERVAL_MS) {
+        return {
+            checked: false,
+            notified: false,
+            latestVersion: previous.latestVersion,
+        };
+    }
+    let latestVersion = null;
+    try {
+        latestVersion = await (deps.fetchLatest ?? defaultFetchLatest)(env);
+    }
+    catch {
+        saveUpdateCheckState(updateCheckStatePath(env), {
+            schemaVersion: 1,
+            checkedAt: now.toISOString(),
+            currentVersion,
+            latestVersion: previous?.latestVersion ?? null,
+            updateAvailable: false,
+        });
+        return {
+            checked: true,
+            notified: false,
+            latestVersion: previous?.latestVersion ?? null,
+        };
+    }
+    const updateAvailable = (0, wizard_1.semverLessThan)(currentVersion, latestVersion);
+    saveUpdateCheckState(updateCheckStatePath(env), {
+        schemaVersion: 1,
+        checkedAt: now.toISOString(),
+        currentVersion,
+        latestVersion,
+        updateAvailable,
+    });
+    if (updateAvailable) {
+        writeNotice(formatUpdateNotice(currentVersion, latestVersion));
+    }
+    return {
+        checked: true,
+        notified: updateAvailable,
+        latestVersion,
+    };
+}
+function loadUpdateCheckState(path) {
+    if (!(0, node_fs_1.existsSync)(path))
+        return null;
+    try {
+        const parsed = JSON.parse((0, node_fs_1.readFileSync)(path, "utf8"));
+        if (parsed.schemaVersion !== 1 ||
+            typeof parsed.checkedAt !== "string" ||
+            Number.isNaN(Date.parse(parsed.checkedAt))) {
+            return null;
+        }
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+function saveUpdateCheckState(path, state) {
+    (0, node_fs_1.mkdirSync)((0, node_path_1.join)(path, ".."), { recursive: true });
+    (0, node_fs_1.writeFileSync)(path, `${JSON.stringify(state, null, 2)}\n`, { mode: 0o600 });
+}
+async function defaultFetchLatest(env) {
+    const runner = (0, exec_1.createDefaultInstallRunner)(env, []);
+    const { stdout } = await runner.exec("npm", ["view", version_1.CLI_PACKAGE, "version"], {
+        timeoutMs: NPM_VIEW_TIMEOUT_MS,
+    });
+    const version = stdout.trim();
+    if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version)) {
+        throw new Error(`invalid npm version: ${version}`);
+    }
+    return version;
+}

package/dist/version.d.ts

@@ -1,4 +1,4 @@
 export declare const CLI_NAME = "alphafox";
 export declare const CLI_PACKAGE = "@alphafox/cli";
-export declare const CLI_VERSION = "0.3.5";
+export declare const CLI_VERSION = "0.3.7";
 export { CATALOG_VERSION as CLI_CONTRACT_VERSION } from "./catalog/operations";

package/dist/version.js

@@ -3,6 +3,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CLI_CONTRACT_VERSION = exports.CLI_VERSION = exports.CLI_PACKAGE = exports.CLI_NAME = void 0;
 exports.CLI_NAME = "alphafox";
 exports.CLI_PACKAGE = "@alphafox/cli";
-exports.CLI_VERSION = "0.3.5";
+exports.CLI_VERSION = "0.3.7";
 var operations_1 = require("./catalog/operations");
 Object.defineProperty(exports, "CLI_CONTRACT_VERSION", { enumerable: true, get: function () { return operations_1.CATALOG_VERSION; } });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alphafox/cli",
-  "version": "0.3.5",
+  "version": "0.3.7",
   "description": "AlphaFox CLI — Agent/Human entry for the public Application API.",
   "type": "commonjs",
   "bin": {

package/skills/account/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-account
 description: Account, wallet, and subscription read paths.
-version: 0.3.5
+version: 0.3.7
 ---
 
 # Account / wallet

package/skills/admin/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-admin
 description: Admin-only operations reusing Web role authorization.
-version: 0.3.5
+version: 0.3.7
 ---
 
 # Admin

package/skills/alphafox/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox
-description: AlphaFox CLI entry router. Use for any AlphaFox request — install, update, login, whoami, 回测, engine backtest, strategy chat, traders, ticker/标的 resolve, market data, exchange connectors, wallet, subscriptions, notifications, or admin. Start here, then open the routed domain skill. Do not guess alphafox-engine-backtest vs alphafox-strategy from memory.
-version: 0.3.5
+description: AlphaFox CLI entry router. Use for any AlphaFox request — install, update, login, whoami, 回测, engine backtest, strategy definitions, create/list/start/stop a running strategy (trader), ticker/标的 resolve (美股 or crypto), market data, exchange connectors, wallet, subscriptions, notifications, or admin. If a CLI command prints `[alphafox] update available`, ask the user「检测到新的版本，是否需要我帮你升级？」and only then run `alphafox update --format json --no-input`. Start here, then open the routed domain skill. Do not guess alphafox-engine-backtest vs alphafox-strategy vs alphafox-trading from memory.
+version: 0.3.7
 ---
 
 # AlphaFox
@@ -10,7 +10,9 @@ This skill only routes. After choosing a row, **read that skill's `SKILL.md` and
 
 Also read `alphafox-shared` before any CLI invocation (envelope, auth, risk, schema-first writes). Always `--format json --no-input`. Never `--token`.
 
-Human-mentioned tickers go through `alphafox-market` (`alphafox resolve-symbols`) **before** they enter config, backtest, or writes.
+Human-mentioned tickers go through `alphafox-market` (`alphafox resolve-symbols`) **before** they enter config, backtest, or writes. Keep the operator's asset class (美股 → `equity_perp` on `binance_perp_usdt`).
+
+A **trader** is a running strategy instance (paper or live), not a person. Creating a strategy means creating a trader.
 
 ## Route
 
@@ -18,21 +20,43 @@ Human-mentioned tickers go through `alphafox-market` (`alphafox resolve-symbols`
 |---|---|
 | Install, update, Skills status/sync, doctor, version, catalog, how to call the CLI | `alphafox-shared` |
 | Login, logout, whoami, profile, staging vs production | `alphafox-auth` |
-| Coin / ticker / 标的 / `BTC/USDT:USDT` / resolve a misspelled symbol | `alphafox-market` |
+| Ticker / 标的 / 美股 / crypto / resolve a misspelled symbol | `alphafox-market` |
 | Engine WASM backtest, experiment, `engine-backtest run`, persist a local run | `alphafox-engine-backtest` |
-| Strategy chat, compiled strategy | `alphafox-strategy` |
-| List / start / stop traders | `alphafox-trading` |
+| Strategy types / definitions / validate config (grid, dca, copy, …) | `alphafox-strategy` |
+| Create, list, start, or stop a running strategy (trader), including copy | `alphafox-trading` |
 | Exchange connectors | `alphafox-exchange` |
 | Account, wallet, subscription | `alphafox-account` |
 | Notification channels | `alphafox-notification` |
 | Admin-only operations | `alphafox-admin` |
 
-If several rows apply, load **all** of them (typical: `alphafox-shared` + `alphafox-market` + one domain skill).
+If several rows apply, load **all** of them (typical: `alphafox-shared` + `alphafox-market` + one domain skill). “帮我建一个网格/DCA/跟单策略” → `alphafox-strategy` (pick the definition) **and** `alphafox-trading` (create the trader).
+
+## Upgrade reminder
+
+The CLI may print this on **stderr** at most once every 24 hours:
+
+```text
+[alphafox] update available: 0.3.6 -> 0.3.7. After the user confirms, run: alphafox update --format json --no-input,
+```
+
+If you see that notice (or `updateAvailable: true` from `alphafox update --check`):
+
+1. Ask the user: **检测到新的版本，是否需要我帮你升级？**
+2. Wait for an explicit yes. Do not upgrade on your own.
+3. After they confirm:
+
+```bash
+alphafox update --format json --no-input
+```
+
+4. Tell the user to **restart the AI tool** so the new Skills load.
+
+Do not install Skills from GitHub. Details and dry-run / check commands live in `alphafox-shared`.
 
 ## Do not mix these backtest paths
 
 - Local Engine tape + wasm + optional persist → `alphafox-engine-backtest` (`alphafox engine-backtest run`, hyphen).
 - Experiment catalog CRUD → same skill, underscore catalog `engine_backtest.*`.
-- Chat-attached `/api/v1/backtests` (`backtests.*`) is **not** a CLI surface. Do not call it via typed commands, `schema`, or `alphafox api`.
+- Web `/api/v1/backtests` (`backtests.*`) is **not** a CLI surface. Do not call it via typed commands, `schema`, or `alphafox api`.
 
 Ambiguous “帮我回测” → `alphafox-engine-backtest`, after resolving symbols.

package/skills/alphafox-shared/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-shared
 description: Shared AlphaFox CLI rules for Agents — auth, profiles, envelopes, risk gates, and public operationIds only.
-version: 0.3.5
+version: 0.3.7
 ---
 
 # AlphaFox shared Agent contract
@@ -24,7 +24,13 @@ npx @alphafox/cli version --format json --no-input
 npx @alphafox/cli doctor --format json --no-input
 ```
 
-Update checks are read-only. A real update keeps CLI and Skills co-versioned:
+The CLI checks npm at most once every 24 hours and only prints a notice on
+**stderr**. It never auto-upgrades. If you see
+`[alphafox] update available` (or `updateAvailable: true`), ask the user:
+
+**检测到新的版本，是否需要我帮你升级？**
+
+Wait for an explicit yes. Then keep CLI and Skills co-versioned:
 
 ```bash
 alphafox update --check --format json --no-input
@@ -32,6 +38,8 @@ alphafox update --format json --no-input
 alphafox skills status --format json --no-input
 ```
 
+After a successful `alphafox update`, tell the user to restart the AI tool.
+
 Never update AlphaFox Skills independently from GitHub. If `skills status`
 reports local modifications, stop and ask before using
 `alphafox skills sync --force --yes`; the CLI backs up replaced files.
@@ -68,7 +76,7 @@ Wrong environment / missing permission / missing `--yes`: stop. Do not retry wit
 
 ## Commands
 
-User-mentioned tickers (including typos) must be resolved with `alphafox resolve-symbols` before they are written into config. See `skills/market`.
+User-mentioned tickers (including typos) must be resolved with `alphafox resolve-symbols` before they are written into config. See `skills/market`. 美股 are `equity_perp` on `binance_perp_usdt`; do not swap them for a crypto coin.
 
 1. Prefer typed catalog: `alphafox schema <operationId>` then invoke domain commands.
 2. Raw escape hatch only for allowlisted facade:
@@ -96,7 +104,7 @@ Uncataloged writes cannot carry a non-empty body. Find the `operationId` first.
 ## Risk
 
 - `high-risk-write` and uncataloged mutations (`unknown`) require `--yes` (exit code `10` if missing).
-- Prefer `--dry-run` first for trader start/stop, withdrawals, admin writes.
+- Prefer `--dry-run` first for trader create/start/stop, withdrawals, admin writes.
 - Never auto-retry unknown write outcomes.
 - CLI `--yes` is UX only; the server still enforces role, ownership, and scopes.
 

package/skills/auth/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-auth
 description: Login, status, logout, whoami, and environment isolation for AlphaFox CLI.
-version: 0.3.5
+version: 0.3.7
 ---
 
 # Auth Skill

package/skills/engine-backtest/SKILL.md

@@ -1,25 +1,25 @@
 ---
 name: alphafox-engine-backtest
 description: Local Engine WASM backtest (alphafox engine-backtest run|sweep) vs catalog experiment CRUD.
-version: 0.3.5
+version: 0.3.7
 ---
 
 # Engine Backtest
 
 Always `--format json --no-input` (or `--format jsonl` when you need progress). Never `--token`. Tokens live in the OS keychain via `alphafox auth login`.
 
-Human-mentioned tickers must be resolved with `alphafox resolve-symbols` (`skills/market`) before they go into `--config`. Use `data.queries[].resolved` only when `status` is `exact`, or `close` after confirming with the human. Do not invent `BTC/USDT:USDT`. Aster is in the public catalog but is **not** an Engine tape source.
+Human-mentioned tickers must be resolved with `alphafox resolve-symbols` (`skills/market`) before they go into `--config`. Use `data.queries[].resolved` only when `status` is `exact`, or `close` after confirming with the human, and only when `assetClass` matches the operator (美股 → `equity_perp`). Local Engine tape is Binance-style USDT-M perps (`binance|okx|bybit|bitget|hyperliquid`), which is the same catalog that lists equity perps. Aster is in the public catalog but is **not** an Engine tape source. Do not rewrite `NVDA/USDT:USDT` into a crypto coin to force a backtest.
 
 ## Which command
 
 | Intent | Use | Do not |
 |---|---|---|
 | Iterate a strategy locally (pull tape + run wasm + optional persist) | `alphafox engine-backtest run` (hyphen, built-in) | Do not treat this as server-side execution of `engine_backtest.experiments.byId.runs.create` |
-| Local parameter search with explicit axes; persist one Sweep after completion | `alphafox engine-backtest sweep` | Never loop `runs.create` per coordinate. Do not call Chat `backtests.*` |
+| Local parameter search with explicit axes; persist one Sweep after completion | `alphafox engine-backtest sweep` | Never loop `runs.create` per coordinate. Do not call `backtests.*` |
 | Local search with zero writes | `alphafox engine-backtest sweep ... --no-persist` | Do not persist a cancelled or incomplete search |
 | List / get / delete persisted Sweeps | Catalog `engine_backtest.experiments.byId.sweeps.*` | Do not invent a second catalog. Delete is high-risk and needs `--yes` |
 | List / get / create / rename / delete experiments and persisted runs | Catalog `engine_backtest.*` (underscore) | Do not invent a second catalog |
-| Chat-attached `/api/v1/backtests` job | — | Not a CLI surface. Do not call `backtests.*` or `/api/v1/backtests` |
+| Web `/api/v1/backtests` job | — | Not a CLI surface. Do not call `backtests.*` or `/api/v1/backtests` |
 
 Read the create-experiment body with `alphafox schema` **before** composing JSON. Do not invent experiment fields. Large create/run/sweep payloads use `--config @file`, never a guessed `--body`.
 
@@ -110,4 +110,4 @@ Owner isolation and 7-day expiry are enforced by the server. Applying a coordina
 - `engine_backtest.experiments.byId.sweeps.byId.get`
 - High-risk (not this skill's run/sweep path): `engine_backtest.experiments.byId.update` / `.byId.delete` / `.byId.runs.byId.delete` / `.byId.sweeps.byId.delete`
 
-Chat `backtests.*` is not an Engine Sweep or Engine Run surface. Do not call it from this skill.
+`backtests.*` is not an Engine Sweep or Engine Run surface. Do not call it from this skill.

package/skills/exchange/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-exchange
 description: Exchange connectors list and connection management via Public API.
-version: 0.3.5
+version: 0.3.7
 ---
 
 # Exchange connectors

package/skills/market/SKILL.md

@@ -1,33 +1,53 @@
 ---
 name: alphafox-market
-description: Market data, ticker resolution, and spread-radar readonly queries.
-version: 0.3.5
+description: Market data and ticker resolution for US equity perps, RWAs, and crypto on the same perp catalog. Use when the user names 美股, NVDA, AAPL, BTC, or any 标的. Keep the operator's asset class via symbolMetadata — do not rewrite NVDA into a crypto coin.
+version: 0.3.7
 ---
 
 # Market
 
 Always `--format json --no-input`. Prefer readonly scopes. No mock success if upstream fails.
 
-## Resolve tickers first
+## Asset class first
 
-Whenever a human mentions a coin, ticker, or contract — including typos — resolve it **before** putting a symbol into strategy config, backtest, chat settings, or any write.
+Binance US stocks are **equity perps in the same** `binance_perp_usdt` catalog (`NVDA/USDT:USDT`). They are not a second exchange. `symbolMetadata` tags them:
+
+| Tag | Meaning |
+|---|---|
+| `assetClass: "equity_perp"` and `isTradFiRwa: true` | US stock perp (NVDA, AAPL, TSLA) |
+| `assetClass: "rwa_perp"` and `isTradFiRwa: true` | TradFi RWA perp (XAU, XAG) |
+| untagged / not TradFi | Crypto perp (BTC, ETH) |
+
+| Operator said | Resolve with |
+|---|---|
+| 美股 / US stocks / 持仓 / NVDA the company | `--exchange binance --asset-class equity_perp` |
+| 黄金 / 白银 / RWA | `--exchange binance --asset-class rwa_perp` |
+| BTC / ETH / 加密永续 | `--exchange binance` or `--asset-class crypto` |
+
+`NVDA/USDT:USDT` with `equity_perp` **is** the US stock product. Do not replace it with a different crypto base.
+
+## Resolve tickers
+
+Whenever a human mentions a stock, coin, ticker, or contract — including typos — resolve it **before** putting a symbol into strategy config, backtest, trader settings, or any write.
 
 ```bash
-alphafox resolve-symbols BTC ETH 龙虾 --exchange binance --format json --no-input
+alphafox resolve-symbols BTC ETH --exchange binance --format json --no-input
+alphafox resolve-symbols NVDA AAPL TSLA --exchange binance --asset-class equity_perp --format json --no-input
 ```
 
 - Default `--exchange` is Binance (`binance_perp_usdt`). Aliases: `binance|okx|bybit|bitget|hyperliquid|aster`.
-- This built-in loads the public linear-perp catalog via `market.symbols.list` (`GET /api/v1/market/symbols?exchange=...`) and matches locally. Do not guess `BTC/USDT:USDT` from memory. Do not pull a second ccxt universe.
-- Read `data.queries[]`. `resolved` is a CCXT linear swap id (`BTC/USDT:USDT`). `matchCount` is the full hit count; `matches` may be capped by `--limit`.
+- This built-in loads `GET /api/v1/market/symbols?exchange=...` (includes `symbolMetadata`) and matches locally. Do not invent a symbol from memory. Do not pull a second ccxt universe.
+- Read `data.queries[]`. `resolved` is a catalog id such as `NVDA/USDT:USDT` or `BTC/USDT:USDT`. Also read `assetClass` and `isTradFiRwa` on the query and on `matches[]`.
+- `matchCount` is the full hit count; `matches` may be capped by `--limit`.
 
 | `status` | Agent action |
 |---|---|
-| `exact` | Use `resolved`. No confirmation. |
-| `close` | One near match already in `resolved`. Use it, then **confirm with the human**. |
-| `ambiguous` | `resolved` is null. Show `matches[].symbol` and ask the human to pick. Do not pick. |
-| `none` | Stop. Ask the human for another ticker. Do not invent a symbol. |
+| `exact` | Use `resolved` when `assetClass` matches the operator (美股 → `equity_perp`). |
+| `close` | One near match already in `resolved`. Confirm with the human, and confirm the asset class. |
+| `ambiguous` | `resolved` is null. Show `matches[].symbol` plus `assetClass` and ask the human to pick. Do not pick. |
+| `none` | Stop. Ask for another ticker. Do not invent a symbol and do not swap in a crypto coin. |
 
-Do not treat `close` as exact. Do not retry a failed resolve as a different exchange unless the operator names one.
+Do not treat `close` as exact. Do not retry a failed equity resolve as a different crypto base.
 
 Raw catalog dump (no matching):
 

package/skills/notification/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-notification
 description: Notification channels and subscriptions.
-version: 0.3.5
+version: 0.3.7
 ---
 
 # Notification