@dshtrading/connector-yahoo 0.5.0 → 0.6.1

package/lib/index.d.ts

@@ -11,7 +11,7 @@ declare const name = "dsh-trading-us-connector-yahoo";
 interface Config {
   /** 交易安全闸门（铁律 #3）：true 时下单类工具强制 dry-run。 */
   dryRun: boolean;
-  /** 实盘总闸门：默认 false；false 时无论 dryRun 与否都拒绝实盘下单 [S4]。 */
+  /** 实盘镜像：默认 false。它是非权威镜像——只能收紧、永不能授予；实盘授权由 @dshtrading/authority 的人工签署平面裁定 [S4]。 */
   liveTrading: boolean;
 }
 declare const Config: Schema<Config>;
@@ -68,7 +68,7 @@ declare function buildDryRunReceipt(args: PlaceOrderArgs, marketData: Pick<Marke
 interface PlaceOrderToolDeps {
   /** 行情服务（dry-run 回执的市价参照），按接口取用，不直连 HTTP。 */
   readonly marketData: Pick<MarketDataService, 'getTicker'>;
-  /** 插件配置（dryRun 强制模拟 / liveTrading 总闸门）。 */
+  /** 插件配置（dryRun 强制模拟 / liveTrading 非权威镜像——实盘授权由 @dshtrading/authority 的人工签署平面裁定）。 */
   readonly config: Config;
 }
 /**

package/lib/index.js

@@ -1,9 +1,27 @@
 import { INTERVAL_VOCABULARY, TradingServiceError, YahooRestClient, isSupportedInterval, normalizeYahooSymbol, parseChartBars } from "./rest.js";
+import { liveTradingEnabled } from "@dshtrading/authority";
 import { Service } from "@deepseek-ai/cordis";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 import Schema from "@deepseek-ai/schemastery";
 //#region src/index.ts
 /**
+* Yahoo Finance 连接器插件（dsh-trading us 切片，任务 G 数据面切换）。
+*
+* 能力三角色（与 connector-stooq/binance 同构）：
+* - 声明：ctx 键 `tradingUsMarketData` 由 @dshtrading/api 的模块增强统一声明；
+* - provide：YahooMarketDataService（Service 基类，随插件 fiber 自动注销）；
+* - inject：工具经 ctx.inject 等待服务就绪后注册，一律经服务执行，不直连 HTTP。
+*
+* 下单三段闸门语义照抄 crypto/us 切片（README 铁律 #3 / S4 修订）：工具名 `us_place_order`
+* 落在 base 闸门模式 `/^(?:crypto|us|cn|hk)_(?:place|cancel)_order$/`；审批不在工具内做。
+* Yahoo 本身无交易 API——live 路径恒为 TRADING_NOT_IMPLEMENTED（券商 API 是后续任务）。
+*
+* 合规（README 铁律 #5）：Yahoo Finance 非官方 API，个人使用属灰色但被普遍使用的边界；
+* 无 key、本仓不缓存不再分发（详见 README 数据源节与 src/rest.ts 头注）。
+*
+* @module @dshtrading/connector-yahoo
+*/
+/**
 * Cordis 插件名 = patch 行 id（TEMPLATES §8）：`dsh-trading-us-*` 市场命名空间，
 * 全仓唯一（insert-only 铁律 #1）。
 */
@@ -42,10 +60,10 @@ var YahooMarketDataService = class extends Service {
 };
 function evaluateOrderGate(config, args) {
 	const requestedDryRun = args.dryRun ?? true;
-	if (!requestedDryRun && !config.liveTrading) return {
+	if (!requestedDryRun && !liveTradingEnabled(config.liveTrading)) return {
 		action: "reject",
 		code: "TRADING_LIVE_TRADING_DISABLED",
-		message: `us_place_order rejected: the call requests real execution (dryRun=${String(args.dryRun)}) but live trading is disabled (liveTrading=false). Ask the user to enable liveTrading explicitly after confirmation, or keep dryRun=true for a simulated fill.`
+		message: `us_place_order rejected: the call requests real execution (dryRun=${String(args.dryRun)}) but live trading is disabled (no signed live-trading grant from the authority plane). Ask the operator to sign a live-trading grant (packages/authority/bin/sign-live-trading.mjs) after confirmation, or keep dryRun=true for a simulated fill.`
 	};
 	if (requestedDryRun || config.dryRun) return { action: "simulate" };
 	return { action: "live" };
@@ -141,7 +159,7 @@ function createPlaceOrderTool(deps) {
 			},
 			dryRun: {
 				type: "boolean",
-				description: "true (default) = simulate only and return a DRY-RUN receipt; false = request real execution (gated by liveTrading and user approval)",
+				description: "true (default) = simulate only and return a DRY-RUN receipt; false = request real execution (gated by the signed live-trading authority and user approval)",
 				default: true
 			}
 		},

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@dshtrading/connector-yahoo",
   "description": "US market connector plugin for dsh-trading: public market data from the Yahoo Finance v8 chart API implementing the @dshtrading/api contracts (unofficial API, no key; personal use per Yahoo terms of use)",
-  "version": "0.5.0",
+  "version": "0.6.1",
   "type": "module",
   "main": "lib/index.js",
   "types": "./lib/index.d.ts",
@@ -21,7 +21,8 @@
   ],
   "license": "PolyForm-Noncommercial-1.0.0",
   "dependencies": {
-    "@dshtrading/api": "^0.5.0"
+    "@dshtrading/authority": "^0.6.1",
+    "@dshtrading/api": "^0.6.1"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": ">=4.0.0",