@farazirfan/costar-server-executor 1.7.25 → 1.7.27

package/public/index.html

@@ -1009,6 +1009,9 @@
             <span class="icon">&#9889;</span> Skills
             <span class="badge" id="skills-badge">0</span>
           </button>
+          <button class="nav-item" data-page="integrations" onclick="navigate('integrations')">
+            <span class="icon">&#128279;</span> Integrations
+          </button>
           <button class="nav-item" data-page="workspace" onclick="navigate('workspace')">
             <span class="icon">&#128196;</span> Workspace
           </button>
@@ -1199,6 +1202,82 @@
           </div>
         </div>
 
+        <!-- ═══ Integrations Page ═══ -->
+        <div class="page" id="page-integrations">
+          <div class="card">
+            <div class="card-header">
+              <h3>🔌 Trading Platforms</h3>
+              <p style="font-size:13px;color:var(--text-secondary);margin-top:8px;">Connect your trading accounts for autonomous execution across crypto, forex, stocks, and metals.</p>
+            </div>
+
+            <!-- Saxo Bank Integration -->
+            <div class="integration-item" style="padding:20px;border-bottom:1px solid var(--border);">
+              <div style="display:flex;align-items:start;justify-content:space-between;">
+                <div style="flex:1;">
+                  <div style="display:flex;align-items:center;gap:12px;margin-bottom:8px;">
+                    <div style="width:48px;height:48px;background:linear-gradient(135deg,#002855,#0047AB);border-radius:8px;display:flex;align-items:center;justify-content:center;color:white;font-weight:700;font-size:18px;">S</div>
+                    <div>
+                      <h4 style="font-size:16px;font-weight:600;margin-bottom:4px;">Saxo Bank OpenAPI</h4>
+                      <div style="font-size:12px;color:var(--text-secondary);">
+                        <span id="saxo-status-text">Not connected</span>
+                        <span id="saxo-env-badge" style="display:none;margin-left:8px;padding:2px 8px;background:var(--blue-dim);color:var(--blue);border-radius:4px;font-size:11px;"></span>
+                      </div>
+                    </div>
+                  </div>
+                  <p style="font-size:13px;color:var(--text-secondary);margin-bottom:12px;">Trade forex, stocks, gold, silver, and 71,000+ instruments globally.</p>
+
+                  <!-- Demo Token Section -->
+                  <div id="saxo-demo-section" style="margin-top:12px;">
+                    <div style="font-size:12px;font-weight:600;color:var(--text-primary);margin-bottom:8px;">Quick Start: Demo Token (24-hour validity)</div>
+                    <div style="display:flex;gap:8px;">
+                      <input type="text" id="saxo-demo-token" placeholder="Paste 24-hour demo token from developer.saxo" style="flex:1;padding:8px 12px;background:var(--bg-secondary);border:1px solid var(--border);border-radius:var(--radius);color:var(--text-primary);font-size:13px;" />
+                      <button class="btn btn-sm btn-primary" onclick="connectSaxoDemo()">Connect</button>
+                    </div>
+                    <div style="font-size:11px;color:var(--text-muted);margin-top:6px;">Get token: <a href="https://www.developer.saxo/openapi/appmanagement" target="_blank" style="color:var(--accent);">developer.saxo/openapi/appmanagement</a></div>
+                  </div>
+
+                  <!-- OAuth Section (TODO) -->
+                  <div id="saxo-oauth-section" style="display:none;margin-top:16px;padding-top:16px;border-top:1px solid var(--border);">
+                    <div style="font-size:12px;font-weight:600;color:var(--text-primary);margin-bottom:8px;">Live Trading: Full OAuth</div>
+                    <button class="btn btn-sm" onclick="connectSaxoOAuth()">Connect via OAuth</button>
+                    <div style="font-size:11px;color:var(--text-muted);margin-top:6px;">Auto-refreshing tokens, 20-minute validity</div>
+                  </div>
+                </div>
+
+                <div style="display:flex;gap:8px;" id="saxo-actions">
+                  <button class="btn btn-sm" onclick="checkSaxoStatus()" style="display:none;" id="saxo-refresh-btn">Refresh</button>
+                  <button class="btn btn-sm" onclick="disconnectSaxo()" style="display:none;" id="saxo-disconnect-btn">Disconnect</button>
+                </div>
+              </div>
+            </div>
+
+            <!-- Coinbase Integration (Already configured via ENV) -->
+            <div class="integration-item" style="padding:20px;border-bottom:1px solid var(--border);">
+              <div style="display:flex;align-items:start;justify-content:space-between;">
+                <div style="flex:1;">
+                  <div style="display:flex;align-items:center;gap:12px;margin-bottom:8px;">
+                    <div style="width:48px;height:48px;background:linear-gradient(135deg,#0052FF,#2C72FF);border-radius:8px;display:flex;align-items:center;justify-content:center;color:white;font-weight:700;font-size:18px;">₿</div>
+                    <div>
+                      <h4 style="font-size:16px;font-weight:600;margin-bottom:4px;">Coinbase Advanced Trade</h4>
+                      <div style="font-size:12px;color:var(--text-secondary);">Configure via Environment Variables</div>
+                    </div>
+                  </div>
+                  <p style="font-size:13px;color:var(--text-secondary);margin-bottom:12px;">Trade crypto (BTC, ETH, SOL, etc.) with API keys.</p>
+                  <div style="font-size:11px;color:var(--text-muted);">
+                    Required: <code style="background:var(--bg-secondary);padding:2px 6px;border-radius:4px;font-family:var(--mono);">COINBASE_API_KEY</code> and <code style="background:var(--bg-secondary);padding:2px 6px;border-radius:4px;font-family:var(--mono);">COINBASE_API_SECRET</code><br>
+                    <a href="#" onclick="navigate('settings');return false;" style="color:var(--accent);margin-top:4px;display:inline-block;">→ Add in Settings</a>
+                  </div>
+                </div>
+              </div>
+            </div>
+
+            <!-- Future Integrations Placeholder -->
+            <div style="padding:20px;text-align:center;color:var(--text-muted);font-size:13px;">
+              More integrations coming soon: IBKR, Alpaca, OANDA, etc.
+            </div>
+          </div>
+        </div>
+
         <!-- ═══ Settings Page ═══ -->
         <div class="page" id="page-settings">
           <div class="card">
@@ -1344,6 +1423,7 @@
         chat: 'Chat',
         cron: 'Cron Jobs',
         skills: 'Skills',
+        integrations: 'Integrations',
         workspace: 'Workspace',
         logs: 'Logs',
         settings: 'Settings',
@@ -1356,6 +1436,7 @@
         case 'chat': initChat(); break;
         case 'cron': loadCronJobs(); loadCronStatus(); break;
         case 'skills': loadSkills(); break;
+        case 'integrations': checkSaxoStatus(); break;
         case 'workspace': loadWorkspaceFiles(); break;
         case 'logs': loadLogs(); startLogStream(); break;
         case 'settings': loadSettings(); break;
@@ -2506,6 +2587,90 @@
         document.querySelectorAll('.modal-overlay.open').forEach(m => m.classList.remove('open'));
       }
     });
+
+    // ─── Saxo Integration Functions ────────────────────────
+
+    async function checkSaxoStatus() {
+      try {
+        const data = await api('/api/integrations/saxo/status');
+        updateSaxoUI(data);
+      } catch (err) {
+        console.error('Failed to check Saxo status:', err);
+      }
+    }
+
+    function updateSaxoUI(status) {
+      const statusText = document.getElementById('saxo-status-text');
+      const envBadge = document.getElementById('saxo-env-badge');
+      const refreshBtn = document.getElementById('saxo-refresh-btn');
+      const disconnectBtn = document.getElementById('saxo-disconnect-btn');
+      const demoSection = document.getElementById('saxo-demo-section');
+
+      if (status.connected) {
+        statusText.textContent = '✓ Connected';
+        statusText.style.color = 'var(--green)';
+        envBadge.textContent = status.environment || 'simulation';
+        envBadge.style.display = 'inline-block';
+        refreshBtn.style.display = 'inline-block';
+        disconnectBtn.style.display = 'inline-block';
+        demoSection.style.display = 'none';
+
+        if (status.expiresAt) {
+          const expiresIn = Math.floor((status.expiresAt - Date.now()) / 1000 / 60);
+          if (expiresIn < 60) {
+            statusText.textContent = `✓ Connected (expires in ${expiresIn}m)`;
+          }
+        }
+      } else {
+        statusText.textContent = 'Not connected';
+        statusText.style.color = 'var(--text-secondary)';
+        envBadge.style.display = 'none';
+        refreshBtn.style.display = 'none';
+        disconnectBtn.style.display = 'none';
+        demoSection.style.display = 'block';
+      }
+    }
+
+    async function connectSaxoDemo() {
+      const token = document.getElementById('saxo-demo-token').value.trim();
+      if (!token) {
+        alert('Please paste your 24-hour demo token');
+        return;
+      }
+
+      try {
+        await api('/api/integrations/saxo/connect/demo', {
+          method: 'POST',
+          body: JSON.stringify({ token }),
+        });
+        alert('✓ Saxo demo token saved! Valid for 24 hours.');
+        document.getElementById('saxo-demo-token').value = '';
+        checkSaxoStatus();
+      } catch (err) {
+        alert('Failed to save token: ' + err.message);
+      }
+    }
+
+    async function connectSaxoOAuth() {
+      try {
+        const data = await api('/api/integrations/saxo/auth-url');
+        window.location.href = data.authUrl;
+      } catch (err) {
+        alert('Failed to start OAuth flow: ' + err.message);
+      }
+    }
+
+    async function disconnectSaxo() {
+      if (!confirm('Disconnect Saxo account? You\'ll need to reconnect to trade.')) return;
+
+      try {
+        await api('/api/integrations/saxo/disconnect', { method: 'POST' });
+        alert('✓ Saxo disconnected');
+        checkSaxoStatus();
+      } catch (err) {
+        alert('Failed to disconnect: ' + err.message);
+      }
+    }
   </script>
 </body>
 </html>

package/skills/coinbase/LEARNING.md

@@ -1,6 +1,7 @@
-# Coinbase Trading Journal
+# Coinbase Trading Log
 
-> **Read this before every Coinbase operation.** Update after every trade.
+> **Read this before every Coinbase operation.** Write freely after every trade.
+> This is YOUR space — write whatever you think will make the next trade better.
 > Never delete entries — mark outdated ones as `[OUTDATED]` with date and reason.
 
 ---
@@ -13,80 +14,13 @@
 
 ---
 
-## API Quirks & Gotchas
+## Learnings
 
-> Things that tripped you up. Save others (your future self) the pain.
+> Write freely here. Patterns you noticed, strategies that worked, execution insights,
+> things to do differently, market observations, risk lessons, anything that will make
+> the next trade better. No rigid format — just honest reflection.
 
-1. All numeric values must be strings — `"100.00"` not `100`
-2. HTTP 200 doesn't mean success — always check `order.success`
-3. Duplicate `client_order_id` returns existing order, not error
-
-*(Add more as you discover them)*
-
----
-
-## Fee Insights
-
-> Track fee rates and patterns to optimize execution.
-
-- **Current fee tier:** *Unknown — check with `getTransactionSummary()`*
-- **Maker rate:** *TBD*
-- **Taker rate:** *TBD*
-
-<!--
-- [DATE] Fee observation. Example: post_only limit orders save 0.2% in fees vs market orders
--->
-
----
-
-## Order Patterns That Work
-
-> Reusable patterns you've validated with real trades.
-
-<!--
-- [DATE] PATTERN: description. PAIR: which pair. RESULT: outcome.
-Example:
-- [2026-02-14] PATTERN: Limit buy 0.5% below current price with GTD 1-hour expiry. PAIR: BTC-USD. RESULT: Filled 70% of the time, saved avg $15 in slippage vs market orders.
--->
-
----
-
-## Order Patterns That Failed
-
-> Equally important — what NOT to do.
-
-<!--
-- [DATE] PATTERN: description. PAIR: which pair. PROBLEM: what went wrong.
-Example:
-- [2026-02-14] PATTERN: Market sell large SOL position ($5000). PAIR: SOL-USD. PROBLEM: 1.2% slippage due to thin order book. Should have used limit or split into smaller orders.
--->
-
----
-
-## Product-Specific Notes
-
-> Observations about specific trading pairs.
-
-<!--
-- [DATE] PRODUCT: observation
-Example:
-- [2026-02-14] BTC-USD: min order $1, base_increment 0.00000001, quote_increment 0.01
-- [2026-02-14] SOL-USD: wider spreads after hours, better to trade during US market hours
--->
-
----
-
-## Scripts I've Created
-
-| Script | Purpose | Works Well? | Last Modified |
-|--------|---------|-------------|---------------|
-| *(None yet)* | | | |
-
----
-
-## Mistakes to Never Repeat
-
-1. *(Will accumulate from real trading)*
+*(Will grow with every trade. Write what matters most to future you.)*
 
 ---
 
@@ -96,7 +30,6 @@ Example:
 - **Total Trades:** 0
 - **Total Fees Paid:** $0
 - **Net P&L:** $0
-- **Avg Slippage:** N/A
 
 ### Current Week
 - **Trades:** 0
@@ -105,13 +38,4 @@ Example:
 
 ---
 
-## Open Questions
-
-1. What are the actual minimum order sizes for each product?
-2. How much slippage to expect on market orders for different pair sizes?
-3. What's the optimal order type for different trade sizes?
-4. When does `post_only` get rejected vs filled?
-
----
-
-> Every entry makes your next trade better. Record everything.
+> Every entry makes your next trade better. Record everything that matters.

package/skills/coinbase/SKILL.md

@@ -9,31 +9,20 @@ metadata:
 
 # Coinbase Trading Executor
 
-You can execute real trades on Coinbase using the Advanced Trade API. This is real money — be precise, confirm with the user, and never skip risk checks.
+Execute real trades on Coinbase via the Advanced Trade API. This is real money — be precise and never skip risk checks.
 
-## CRITICAL: Always Read LEARNING.md First
-
-**Before ANY Coinbase action, read [LEARNING.md](LEARNING.md).** It contains API quirks you've discovered, order patterns that work, mistakes to avoid, and fee insights from real trades.
-
-## Authentication
-
-The user's Coinbase API credentials are available as environment variables:
-- `COINBASE_API_KEY` — format: `organizations/{org_id}/apiKeys/{key_id}`
-- `COINBASE_API_SECRET` — EC private key in PEM format
-
-These use **CDP (Coinbase Developer Platform) keys** with **ES256 JWT** authentication. The `coinbase-api` npm package handles JWT generation internally.
+Coinbase is the execution layer. The Trading skill is the brain. Before ANY action, read all three:
+1. [../trading/SKILL.md](../trading/SKILL.md) — risk rules, position sizing, market regime
+2. [../trading/LEARNING.md](../trading/LEARNING.md) — what's working now, past lessons
+3. [LEARNING.md](LEARNING.md) — Coinbase-specific execution learnings
 
 ## Setup
 
-Before first use, ensure the SDK is installed in the workspace:
-
 ```bash
 npm list coinbase-api 2>/dev/null || npm install coinbase-api
 ```
 
-## How to Execute Trades
-
-All Coinbase operations use TypeScript/JavaScript scripts via `execute_code` or shell commands. Use the `coinbase-api` package:
+Auth uses CDP keys with ES256 JWT via env vars `COINBASE_API_KEY` and `COINBASE_API_SECRET`. The `coinbase-api` package handles JWT internally.
 
 ```typescript
 import { CBAdvancedTradeClient } from 'coinbase-api';
@@ -44,19 +33,20 @@ const client = new CBAdvancedTradeClient({
 });
 ```
 
-## Execution Workflow
+## Workflow
 
 ```
-- [ ] Step 1: Read LEARNING.md
-- [ ] Step 2: Verify balances and account status
-- [ ] Step 3: Get current price and market data
-- [ ] Step 4: Preview the order (estimate fees/slippage)
-- [ ] Step 5: Execute the order
-- [ ] Step 6: Verify order fill and record result
-- [ ] Step 7: Update LEARNING.md
+- [ ] 1. Read Trading SKILL.md + both LEARNING.md files
+- [ ] 2. Validate against risk rules
+- [ ] 3. Check balances
+- [ ] 4. Get price and market data
+- [ ] 5. Preview order
+- [ ] 6. Execute order
+- [ ] 7. Verify fill
+- [ ] 8. Evolve
 ```
 
-### Step 2: Check Balances
+### Check Balances
 
 ```typescript
 const accounts = await client.getAccounts();
@@ -67,17 +57,14 @@ for (const acct of accounts.accounts) {
 }
 ```
 
-### Step 3: Get Price Data
+### Get Price Data
 
 ```typescript
-// Current price
 const product = await client.getProduct({ product_id: 'BTC-USD' });
 console.log(`Price: $${product.price}, 24h change: ${product.price_percentage_change_24h}%`);
 
-// Best bid/ask spread
 const spread = await client.getBestBidAsk({ product_ids: ['BTC-USD'] });
 
-// OHLCV candles (last 24h, 1-hour granularity)
 const candles = await client.getProductCandles({
   product_id: 'BTC-USD',
   start: String(Math.floor(Date.now() / 1000) - 86400),
@@ -86,9 +73,9 @@ const candles = await client.getProductCandles({
 });
 ```
 
-### Step 4: Preview Order
+### Preview Order
 
-**Always preview before executing.** This shows estimated fees and slippage:
+Always preview before executing:
 
 ```typescript
 const preview = await client.previewOrder({
@@ -98,38 +85,37 @@ const preview = await client.previewOrder({
     market_market_ioc: { quote_size: '100.00' },
   },
 });
-// Shows: quote_size, base_size, best_bid, best_ask, total_fees, slippage
 ```
 
-### Step 5: Place Orders
+### Place Orders
 
-See [references/order-types.md](references/order-types.md) for all order types and configurations.
+See [references/order-types.md](references/order-types.md) for all types.
 
-**Market Buy** (spend $X of quote currency):
+Market buy (spend $100):
 ```typescript
 const order = await client.submitOrder({
   client_order_id: crypto.randomUUID(),
   product_id: 'BTC-USD',
   side: 'BUY',
   order_configuration: {
-    market_market_ioc: { quote_size: '100.00' },  // spend $100
+    market_market_ioc: { quote_size: '100.00' },
   },
 });
 ```
 
-**Market Sell** (sell X units of base asset):
+Market sell (sell 0.001 BTC):
 ```typescript
 const order = await client.submitOrder({
   client_order_id: crypto.randomUUID(),
   product_id: 'BTC-USD',
   side: 'SELL',
   order_configuration: {
-    market_market_ioc: { base_size: '0.001' },  // sell 0.001 BTC
+    market_market_ioc: { base_size: '0.001' },
   },
 });
 ```
 
-**Limit Buy** (Good Till Cancel):
+Limit buy (GTC):
 ```typescript
 const order = await client.submitOrder({
   client_order_id: crypto.randomUUID(),
@@ -145,73 +131,64 @@ const order = await client.submitOrder({
 });
 ```
 
-### Step 6: Verify Order
+### Verify Order
+
+Coinbase returns HTTP 200 even on failure. Always check `order.success`:
 
 ```typescript
-// Check response immediately
 if (order.success) {
-  const orderId = order.success_response.order_id;
-  // Get fill details
-  const status = await client.getOrder({ order_id: orderId });
+  const status = await client.getOrder({ order_id: order.success_response.order_id });
   console.log(`Status: ${status.status}, Filled: ${status.filled_size} @ ${status.average_filled_price}`);
 } else {
   console.error(`Order failed: ${order.error_response.message}`);
 }
 ```
 
-**IMPORTANT:** Coinbase returns HTTP 200 even on order failure. Always check `order.success === true`.
+### Post-Execution Evolution
+
+After every trade, ask: "What would make the next execution better?" Then do it.
 
-### Step 7: Update LEARNING.md
+- Update both [LEARNING.md](LEARNING.md) and [../trading/LEARNING.md](../trading/LEARNING.md)
+- If you had slippage, research better order types or timing. Update references
+- If a script could do it better, build one in `scripts/`
+- Feed execution insights back to Trading skill references
+- Use `web_search` and `browser` to research better execution strategies, GitHub tools, market microstructure
+- Use `cron` to schedule portfolio snapshots, price alerts, or execution quality tracking
 
-After every trade, record: asset, side, type, size, fill price, fees, outcome, and any API quirks encountered.
+No limits. If something makes execution better, do it.
 
 ## Order Management
 
 ```typescript
-// List open orders
 const orders = await client.getOrders({ order_status: ['OPEN', 'PENDING'] });
-
-// Cancel specific orders
 const cancel = await client.cancelOrders({ order_ids: ['order-id-here'] });
-
-// Get fills (trade executions)
 const fills = await client.getFills({ order_id: 'order-id-here' });
 ```
 
-## Portfolio & Fees
+## Portfolio and Fees
 
 ```typescript
-// Portfolio breakdown
 const portfolios = await client.getPortfolios({});
 const breakdown = await client.getPortfolioBreakdown({ portfolio_id: portfolios.portfolios[0].uuid });
-
-// Fee tier info
 const fees = await client.getTransactionSummary({});
-// Shows: fee_tier, total_volume, maker_fee_rate, taker_fee_rate
 ```
 
 ## Critical Rules
 
-1. **ALWAYS preview orders before executing** — know the fees and slippage
-2. **All values are STRINGS** — `"100.00"` not `100`. The API rejects numbers.
-3. **client_order_id must be unique** — always use `crypto.randomUUID()`
-4. **Check `order.success`** — HTTP 200 doesn't mean order succeeded
-5. **Product ID format** — always `BASE-QUOTE` e.g. `BTC-USD`, `ETH-USD`, `SOL-USD`
-6. **Minimum order sizes vary** — check product details before ordering
-7. **Rate limits** — ~10 requests/second for private endpoints
-8. **Never place orders in a loop without delays** — respect rate limits
-9. **Log everything in LEARNING.md** — every trade, every error, every quirk
+- Always preview orders before executing
+- All values are strings — `"100.00"` not `100`
+- `client_order_id` must be unique — use `crypto.randomUUID()`
+- Check `order.success` — HTTP 200 doesn't mean success
+- Product IDs are `BASE-QUOTE` format (BTC-USD, ETH-USD, SOL-USD)
+- Minimum order sizes vary — check product details first
+- Rate limits ~10 req/sec — never loop orders without delays
 
-## Reference Files
+## References
 
-- [references/order-types.md](references/order-types.md) — All order configurations with examples
-- [references/api-reference.md](references/api-reference.md) — Complete API endpoint list
-- [references/products.md](references/products.md) — Common trading pairs and their details
+- [references/order-types.md](references/order-types.md) — all order configurations
+- [references/api-reference.md](references/api-reference.md) — complete API endpoints
+- [references/products.md](references/products.md) — trading pairs and details
 
 ## Self-Evolution
 
-You can modify any file in this skill:
-- Found an API quirk? Update LEARNING.md and references
-- Built a reusable script? Save it in `scripts/`
-- Discovered a better workflow? Update this SKILL.md
-- New order type pattern? Add to `references/order-types.md`
+You own every file in this skill. Improve anything — scripts, references, this SKILL.md itself. Use the internet to research Coinbase execution strategies, find tools, stay current on platform changes. Your `scripts/` directory should grow into a comprehensive execution toolkit.

package/skills/saxo/LEARNING.md

@@ -0,0 +1,42 @@
+# Saxo Trading Log
+
+> **Read this before every Saxo operation.** Write freely after every trade.
+> This is YOUR space — write whatever you think will make the next trade better.
+> Never delete entries — mark outdated ones as `[OUTDATED]` with date and reason.
+
+---
+
+## Trade Log
+
+| Date | Asset | Type | Side | Size | Entry | Exit | Fees | P&L | Notes |
+|------|-------|------|------|------|-------|------|------|-----|-------|
+| *(No trades yet)* | | | | | | | | | |
+
+---
+
+## Learnings
+
+> Write freely here. Patterns you noticed, strategies that worked, execution insights,
+> things to do differently, market observations, risk lessons, session timing discoveries,
+> asset-specific quirks, margin behavior, correlation findings, anything that will make
+> the next trade better. No rigid format — just honest reflection.
+
+*(Will grow with every trade. Write what matters most to future you.)*
+
+---
+
+## Performance Summary
+
+### All Time
+- **Total Trades:** 0
+- **Total Fees Paid:** $0
+- **Net P&L:** $0
+
+### Current Week
+- **Trades:** 0
+- **Fees:** $0
+- **P&L:** $0
+
+---
+
+> Every entry makes your next trade better. Record everything that matters.