@liquiditytech/rapidx-cli 1.0.29 → 1.0.31

package/dist/cli/commands/account.js

@@ -1,4 +1,4 @@
-import { executeRapidXCapability, findCapabilityById, normalizeUnknownError } from "../../core/index.js";
+import { executeRapidXCapability, findCapabilityById, normalizeUnknownError, publicErrorDetails } from "../../core/index.js";
 import { writeCliAudit } from "../audit.js";
 import { fail, ok } from "../envelope.js";
 import { enforceCliPreviewGate } from "./trade-gate.js";
@@ -29,6 +29,6 @@ export async function runAccountCommand(action, input) {
     }
     catch (error) {
         const productError = normalizeUnknownError(error, "RCLI01001");
-        return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, `rapidx account ${action}`);
+        return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, `rapidx account ${action}`, publicErrorDetails(productError));
     }
 }

package/dist/cli/commands/algo.js

@@ -1,4 +1,4 @@
-import { executeRapidXCapability, findCapabilityById, normalizeUnknownError } from "../../core/index.js";
+import { executeRapidXCapability, findCapabilityById, normalizeUnknownError, publicErrorDetails } from "../../core/index.js";
 import { writeCliAudit } from "../audit.js";
 import { fail, ok } from "../envelope.js";
 import { enforceCliPreviewGate } from "./trade-gate.js";
@@ -30,6 +30,6 @@ export async function runAlgoCommand(action, input) {
     }
     catch (error) {
         const productError = normalizeUnknownError(error, "RCLI12001");
-        return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, `rapidx algo ${action}`);
+        return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, `rapidx algo ${action}`, publicErrorDetails(productError));
     }
 }

package/dist/cli/commands/market.js

@@ -1,4 +1,4 @@
-import { executeRapidXCapability, normalizeUnknownError } from "../../core/index.js";
+import { executeRapidXCapability, normalizeUnknownError, publicErrorDetails } from "../../core/index.js";
 import { ok } from "../envelope.js";
 import { fail } from "../envelope.js";
 const MARKET_CAPABILITY_BY_ACTION = {
@@ -21,6 +21,6 @@ export async function runMarketCommand(action, input) {
     }
     catch (error) {
         const productError = normalizeUnknownError(error, "RCLI12001");
-        return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, `rapidx market ${action}`);
+        return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, `rapidx market ${action}`, publicErrorDetails(productError));
     }
 }

package/dist/cli/commands/order.js

@@ -1,4 +1,4 @@
-import { consumePreview, createTargetedTradePreview, createTradePreview, defaultSafetyPolicy, executeRapidXCapability, findCapabilityById, loadPreviewStoreFromFile, makeSafetyState, normalizeUnknownError, resolvePreviewStoreFile, runPreviewPreflight, savePreviewStoreToFile, verifyPreview } from "../../core/index.js";
+import { consumePreview, createTargetedTradePreview, createTradePreview, defaultSafetyPolicy, executeRapidXCapability, findCapabilityById, loadPreviewStoreFromFile, makeSafetyState, normalizeUnknownError, publicErrorDetails, resolvePreviewStoreFile, runPreviewPreflight, savePreviewStoreToFile, verifyPreview } from "../../core/index.js";
 import { fail, ok } from "../envelope.js";
 import { writeCliAudit } from "../audit.js";
 const safetyState = makeSafetyState();
@@ -18,7 +18,7 @@ export async function runOrderCommand(action, input) {
         }
         catch (error) {
             const productError = normalizeUnknownError(error, "RCLI20002");
-            return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, `rapidx order ${action}`);
+            return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, `rapidx order ${action}`, publicErrorDetails(productError));
         }
     }
     const previewTarget = previewTargetForAction(action);
@@ -35,7 +35,7 @@ export async function runOrderCommand(action, input) {
         }
         catch (error) {
             const productError = normalizeUnknownError(error, "RCLI20002");
-            return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, `rapidx order ${action}`);
+            return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, `rapidx order ${action}`, publicErrorDetails(productError));
         }
     }
     const capability = findCapabilityById(`order.${action}`);
@@ -69,7 +69,7 @@ export async function runOrderCommand(action, input) {
     }
     catch (error) {
         const productError = normalizeUnknownError(error, "RCLI12001");
-        return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, `rapidx order ${action}`);
+        return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, `rapidx order ${action}`, publicErrorDetails(productError));
     }
 }
 function previewTargetForAction(action) {

package/dist/cli/commands/position.js

@@ -1,4 +1,4 @@
-import { executeRapidXCapability, findCapabilityById, normalizeUnknownError } from "../../core/index.js";
+import { executeRapidXCapability, findCapabilityById, normalizeUnknownError, publicErrorDetails } from "../../core/index.js";
 import { writeCliAudit } from "../audit.js";
 import { fail, ok } from "../envelope.js";
 import { enforceCliPreviewGate } from "./trade-gate.js";
@@ -30,6 +30,6 @@ export async function runPositionCommand(action, input) {
     }
     catch (error) {
         const productError = normalizeUnknownError(error, "RCLI12001");
-        return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, `rapidx position ${action}`);
+        return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, `rapidx position ${action}`, publicErrorDetails(productError));
     }
 }

package/dist/cli/commands/trade.js

@@ -1,4 +1,4 @@
-import { createTargetedTradePreview, defaultSafetyPolicy, findCapabilityById, loadPreviewStoreFromFile, makeSafetyState, normalizeUnknownError, resolvePreviewStoreFile, runPreviewPreflight, savePreviewStoreToFile } from "../../core/index.js";
+import { createTargetedTradePreview, defaultSafetyPolicy, findCapabilityById, loadPreviewStoreFromFile, makeSafetyState, normalizeUnknownError, publicErrorDetails, resolvePreviewStoreFile, runPreviewPreflight, savePreviewStoreToFile } from "../../core/index.js";
 import { fail, ok } from "../envelope.js";
 const safetyState = makeSafetyState();
 export async function runTradeCommand(action, input) {
@@ -23,7 +23,7 @@ export async function runTradeCommand(action, input) {
     }
     catch (error) {
         const productError = normalizeUnknownError(error, "RCLI20002");
-        return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, "rapidx trade preview");
+        return fail(productError.code.replace(/^RCORE/, "RCLI"), productError.message, productError.status, "rapidx trade preview", publicErrorDetails(productError));
     }
 }
 function isPreviewCapability(capabilityId) {

package/dist/cli/envelope.js

@@ -8,12 +8,13 @@ export function ok(data, evidenceText, status = "PASS", source = "local_check",
         evidence: [makeEvidence(evidenceText, source)]
     };
 }
-export function fail(code, message, status = "FAIL", evidenceText = "rapidx cli") {
+export function fail(code, message, status = "FAIL", evidenceText = "rapidx cli", details) {
     return {
         ok: false,
         status,
         code,
         message,
+        ...(details ? { details } : {}),
         evidence: [makeEvidence(evidenceText)]
     };
 }

package/dist/core/client/capability-executor.js

@@ -1,6 +1,7 @@
 import { ProductError } from "../errors/product-error.js";
 import { parseRapidXSymbol } from "./symbol.js";
 import { RapidXClient } from "./rapid-x-client.js";
+import { assertOrderLookupReference, assertValidOrderId } from "./order-id.js";
 import { findCapabilityById } from "../contracts/capabilities.js";
 import { assertInputMatchesSchema } from "../contracts/input-schema.js";
 export async function executeRapidXCapability(capabilityId, input = {}, options = {}) {
@@ -34,7 +35,7 @@ export async function executeRapidXCapability(capabilityId, input = {}, options
         case "order.cancel":
             return executeOrderCancelCapability(client, input);
         case "order.get":
-            return client.get("/api/v1/trading/order", optionalParams(input, ["orderId", "clientOrderId", "symbol"]));
+            return client.get("/api/v1/trading/order", orderReadParams(input));
         case "order.list":
             return client.get("/api/v1/trading/orders", { pageSize: stringValue(input.pageSize, "1000"), ...optionalParams(input, ["symbol"]) });
         case "order.history":
@@ -271,6 +272,7 @@ function orderPlaceBody(input) {
     };
 }
 function orderAmendBody(input) {
+    assertValidOrderId(input.orderId);
     const body = optionalParams(input, ["orderId", "clientOrderId"]);
     if (input.quantity !== undefined) {
         body.replaceQty = String(input.quantity);
@@ -281,8 +283,13 @@ function orderAmendBody(input) {
     return body;
 }
 function orderCancelBody(input) {
+    assertValidOrderId(input.orderId);
     return optionalParams(input, ["orderId", "clientOrderId"]);
 }
+function orderReadParams(input) {
+    assertOrderLookupReference(input);
+    return optionalParams(input, ["orderId", "clientOrderId", "symbol"]);
+}
 function positionCloseBody(input) {
     const body = {
         sym: String(input.symbol)

package/dist/core/client/order-id.js

@@ -0,0 +1,24 @@
+import { CORE_ERRORS, ProductError } from "../errors/product-error.js";
+export function assertValidOrderId(orderId) {
+    if (orderId === undefined || orderId === null || orderId === "") {
+        return;
+    }
+    if (!/^\d{16}$/.test(String(orderId))) {
+        throw new ProductError({
+            code: CORE_ERRORS.INVALID_ORDER_ID,
+            status: "INVALID_INPUT",
+            message: "orderId must be 16 digits."
+        });
+    }
+}
+export function assertOrderLookupReference(input) {
+    assertValidOrderId(input.orderId);
+    if ((input.orderId === undefined || input.orderId === null || input.orderId === "")
+        && (input.clientOrderId === undefined || input.clientOrderId === null || input.clientOrderId === "")) {
+        throw new ProductError({
+            code: "RCORE00001",
+            status: "INVALID_INPUT",
+            message: "orderId or clientOrderId is required."
+        });
+    }
+}

package/dist/core/client/rapid-x-client.js

@@ -70,7 +70,7 @@ export class RapidXClient {
                     code: upstreamHttpErrorCode(path, response.status, text),
                     status: upstreamHttpErrorStatus(path, response.status, text),
                     message: hint ? `RapidX upstream error ${response.status}. ${hint}` : `RapidX upstream error ${response.status}`,
-                    details: { status: response.status, body: text.slice(0, 500), attempts: attempt, ...(hint ? { hint } : {}) }
+                    details: { upstreamStatus: response.status, status: response.status, body: text.slice(0, 500), attempts: attempt, ...(hint ? { hint } : {}) }
                 });
             }
             if (!text) {
@@ -145,6 +145,9 @@ function isAccountBalanceScopeError(path, status, body) {
     if (path !== "/api/v1/account/balance" || status < 400) {
         return false;
     }
+    if (status >= 500) {
+        return true;
+    }
     const lowerBody = body.toLowerCase();
     return lowerBody.includes("account-level")
         || lowerBody.includes("permission scope")

package/dist/core/contracts/compatibility.js

@@ -1,7 +1,7 @@
 import { SCHEMA_VERSION } from "./types.js";
 import { RAPIDX_VERSION } from "../version.js";
 export const RAPIDX_SKILLS_DISTRIBUTION = "github";
-export const RAPIDX_SKILLS_VERSION = "1.0.3";
+export const RAPIDX_SKILLS_VERSION = "1.0.5";
 export const RAPIDX_SKILLS_SCHEMA_VERSION = "1.0.0";
 export function buildCompatibilityReport(input = {}) {
     const checks = [

package/dist/core/contracts/input-schema.js

@@ -86,7 +86,7 @@ const targetCapabilityIdSchema = {
 const orderIdSchema = {
     type: "string",
     description: "RapidX order id returned by order.place, order.list, or order.get.",
-    examples: ["1234567890"]
+    examples: ["2173374713391199"]
 };
 const accountBalanceModeSchema = {
     type: "string",
@@ -117,7 +117,10 @@ export function inputSchemaForName(name) {
         case "AccountBalanceInput":
             return objectSchema({ mode: accountBalanceModeSchema, currency: stringSchema });
         case "OrderLookupInput":
-            return objectSchema({ orderId: orderIdSchema, clientOrderId: clientOrderIdSchema, symbol: symbolSchema });
+            return {
+                ...objectSchema({ orderId: orderIdSchema, clientOrderId: clientOrderIdSchema, symbol: symbolSchema }),
+                anyOf: [{ required: ["orderId"] }, { required: ["clientOrderId"] }]
+            };
         case "OrderListInput":
         case "OrderHistoryInput":
             return objectSchema({ symbol: symbolSchema, pageSize: numberSchema, startTime: stringSchema, endTime: stringSchema });

package/dist/core/errors/product-error.js

@@ -12,11 +12,13 @@ export class ProductError extends Error {
         }
     }
     toEnvelope(evidence = []) {
+        const details = publicErrorDetails(this);
         return {
             ok: false,
             status: this.status,
             code: this.code,
             message: this.message,
+            ...(details ? { details } : {}),
             evidence
         };
     }
@@ -26,6 +28,7 @@ export const CORE_ERRORS = {
     INVALID_CREDENTIAL: "RCORE01002",
     MISSING_API_HOST: "RCORE01003",
     SECRET_REDACTION_RISK: "RCORE90002",
+    INVALID_ORDER_ID: "RCORE00002",
     UPSTREAM_REJECTED: "RCORE22001",
     PERMISSION_SCOPE_ERROR: "RCORE01004",
     NOT_FOUND: "RCORE22004",
@@ -51,6 +54,18 @@ export function normalizeUnknownError(error, fallbackCode = "RCORE00001") {
         message
     });
 }
+export function publicErrorDetails(error) {
+    if (!error.details) {
+        return undefined;
+    }
+    const details = {};
+    for (const key of ["upstreamStatus", "upstreamCode", "upstreamMessage", "hint", "attempts"]) {
+        if (error.details[key] !== undefined) {
+            details[key] = error.details[key];
+        }
+    }
+    return Object.keys(details).length > 0 ? details : undefined;
+}
 function isUpstreamNetworkError(error) {
     if (!(error instanceof Error)) {
         return false;

package/dist/core/index.js

@@ -12,6 +12,7 @@ export * from "./errors/product-error.js";
 export * from "./client/signing.js";
 export * from "./client/rapid-x-client.js";
 export * from "./client/capability-executor.js";
+export * from "./client/order-id.js";
 export * from "./client/symbol.js";
 export * from "./safety/policy.js";
 export * from "./safety/raw-api.js";

package/dist/core/trading/preview-preflight.js

@@ -1,4 +1,5 @@
 import { RapidXClient } from "../client/rapid-x-client.js";
+import { assertOrderLookupReference } from "../client/order-id.js";
 import { parseRapidXSymbol } from "../client/symbol.js";
 import { ProductError } from "../errors/product-error.js";
 export async function runPreviewPreflight(capabilityId, input, options = {}) {
@@ -236,18 +237,12 @@ function estimateNotional(input) {
     return price * quantity;
 }
 function orderLookupParams(input) {
+    assertOrderLookupReference(input);
     const params = compactObject({
         orderId: input.orderId,
         clientOrderId: input.clientOrderId,
         symbol: input.symbol
     });
-    if (!params.orderId && !params.clientOrderId) {
-        throw new ProductError({
-            code: "RCORE00001",
-            status: "FAIL",
-            message: "orderId or clientOrderId is required."
-        });
-    }
     return params;
 }
 function extractOrderReadback(response) {

package/dist/core/version.js

@@ -1 +1 @@
-export const RAPIDX_VERSION = "1.0.29";
+export const RAPIDX_VERSION = "1.0.31";

package/dist/mcp/tool-runner.js

@@ -1,4 +1,4 @@
-import { consumePreview, createTargetedTradePreview, createTradePreview, defaultSafetyPolicy, executeRapidXCapability, findCapabilityById, getSchemaResult, makeEvidence, makePreviewStore, makeSafetyState, normalizeUnknownError, runSelfCheck, runPreviewPreflight, runTradingVerification, verifyPreview, buildLiveReadOnlySelfCheck, buildLiveTradingVerificationProbes, checkForUpdate, } from "../core/index.js";
+import { consumePreview, createTargetedTradePreview, createTradePreview, defaultSafetyPolicy, executeRapidXCapability, findCapabilityById, getSchemaResult, makeEvidence, makePreviewStore, makeSafetyState, normalizeUnknownError, publicErrorDetails, runSelfCheck, runPreviewPreflight, runTradingVerification, verifyPreview, buildLiveReadOnlySelfCheck, buildLiveTradingVerificationProbes, checkForUpdate, } from "../core/index.js";
 import { capabilityForTool, getMcpToolDefinitions } from "./tool-registry.js";
 import { writeMcpAudit } from "./audit.js";
 const previewStore = makePreviewStore();
@@ -124,11 +124,13 @@ export async function runMcpTool(toolName, input = {}) {
     }
     catch (error) {
         const productError = normalizeUnknownError(error, "RMCP12003");
+        const details = publicErrorDetails(productError);
         return {
             ok: false,
             status: productError.status,
             code: productError.code.replace(/^RCORE/, "RMCP"),
             message: productError.message,
+            ...(details ? { details } : {}),
             evidence: [makeEvidence(toolName)]
         };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@liquiditytech/rapidx-cli",
-  "version": "1.0.29",
+  "version": "1.0.31",
   "description": "RapidX CLI, MCP server mode, registry, and release assets.",
   "type": "module",
   "private": false,

package/packages/distribution/docs/cli.md

@@ -52,6 +52,8 @@ rapidx account set-position-mode --input @/absolute/path/set-position-mode.json
 
 `rapidx order cancel` is asynchronous. A successful response can mean cancel accepted but not terminal. Poll `rapidx order get --json` when `terminalStateConfirmed=false`.
 
+When using `orderId`, pass the RapidX 16-digit numeric order id. Invalid `orderId` format is rejected locally as `INVALID_INPUT`. `clientOrderId` can be used instead and does not need to satisfy the `orderId` format. Preview commands for amend/cancel perform a RapidX readback after local format validation; valid-but-missing orders return `NOT_FOUND` or a blocked non-open state.
+
 Automation mode still uses preview. Pass `automationMode=true` and the user's exact `automationConsentText` to preview only when the user has enabled automation in chat for the current scope.
 
 `rapidx position close` is a close-position action. Do not pass `side` or `quantity`; RapidX determines BUY or SELL from the current position and closes the target symbol/positionSide. Use a reduce-only order flow for partial closes. Verify the final exposure with `rapidx position list --json`, and do not rely only on `order get` to interpret the close intent.

package/packages/distribution/docs/tools.md

@@ -53,6 +53,8 @@ Preview ids are runtime-local. A preview created by MCP must be submitted throug
 
 `order.cancel` is asynchronous. A successful cancel response means the cancel request was accepted; it may not prove a terminal order state yet. The response includes `cancelAccepted`, `terminalStateConfirmed`, `lastObservedOrderState`, and `recommendedAction`. Poll `order.get` until `CANCELED`, `REJECTED`, `EXPIRED`, or timeout when `terminalStateConfirmed=false`.
 
+Order identifiers use two validation layers. If `orderId` is provided, RapidX validates it locally as a 16-digit numeric id and returns `INVALID_INPUT` before any upstream call when the format is wrong. If `clientOrderId` is provided instead, do not apply `orderId` validation. For `order.get`, `order.amend-preview`, and `order.cancel-preview`, a syntactically valid `orderId` or `clientOrderId` is checked through RapidX readback; missing or non-open orders return `NOT_FOUND` or `BLOCKED` depending on the observed state.
+
 For automation, keep preview-first execution. Set `automationMode=true` and pass the user's exact `automationConsentText` only when the user has explicitly enabled RapidX automation mode in chat. The preview response still returns `confirmation.submitToken`; automation mode only means the agent may use that submit token without asking for another per-order chat confirmation within the authorized scope.
 
 For TPSL or conditional algo orders, use `rapidx/trade/preview` with `targetCapabilityId="algo.place"`, then submit `rapidx/algo/place`. `conditionType="ENTIRE_CLOSE_POSITION"` may use `orderType="MARKET"` without `quantity` or `amount`; provide at least one take-profit or stop-loss trigger and verify with `rapidx/algo/list`.

package/packages/distribution/manifests/offline-manifest.json

@@ -1,11 +1,11 @@
 {
-  "version": "1.0.29",
+  "version": "1.0.31",
   "artifacts": [
     {
       "name": "rapidx-mcp-registry",
       "path": "packages/distribution/registry/rapidx.mcp.json",
       "channel": "offline",
-      "checksum": "sha256:8a462f111ce2e1496b670978113277deeb49fc8ebcc9bfb2f9af3a91e5c8f9eb",
+      "checksum": "sha256:d3ee1491bd542f204e765f04ae98daa5970e0e32b8edd06ff5fab47189b20b6f",
       "status": "ready"
     },
     {
@@ -19,7 +19,7 @@
       "name": "rapidx-tools-doc",
       "path": "packages/distribution/docs/tools.md",
       "channel": "offline",
-      "checksum": "sha256:e6ba0a1cbafa47fef2d6a2de6baffeb0a786d1d38886961c1347b9ffbd870e54",
+      "checksum": "sha256:fc80e63eabc8407c74b01ed707187505c90497af53a25f201c07e13ef948bf18",
       "status": "ready"
     }
   ]

package/packages/distribution/registry/rapidx.mcp.json

@@ -1,7 +1,7 @@
 {
   "name": "rapidx",
   "packageName": "@liquiditytech/rapidx-cli",
-  "version": "1.0.29",
+  "version": "1.0.31",
   "command": "rapidx",
   "args": ["mcp", "serve"],
   "launchCommand": "rapidx",