@openfinclaw/openfinclaw-strategy 2026.3.272 → 2026.3.274

package/SKILL.md

@@ -7,6 +7,7 @@ metadata:
     requires:
       extensions: ["openfinclaw-strategy"]
 ---
+
 # OpenFinClaw
 
 统一金融工具平台，一个 API Key 即可使用所有功能：
@@ -121,42 +122,42 @@ export OPENFINCLAW_API_KEY=YOUR_API_KEY
 
 ### 行情数据工具
 
-| 工具名              | 用途                        | 需要 API Key |
-| ------------------- | --------------------------- | ------------ |
-| `fin_price`       | 价格查询（股票/加密/指数）  | **是** |
-| `fin_kline`       | K线/OHLCV 数据              | **是** |
-| `fin_crypto`      | 加密市场数据（21个端点）    | **是** |
-| `fin_compare`     | 多资产价格对比（2-5个资产） | **是** |
-| `fin_slim_search` | 代码/名称搜索               | **是** |
+| 工具名            | 用途                        | 需要 API Key |
+| ----------------- | --------------------------- | ------------ |
+| `fin_price`       | 价格查询（股票/加密/指数）  | **是**       |
+| `fin_kline`       | K线/OHLCV 数据              | **是**       |
+| `fin_crypto`      | 加密市场数据（21个端点）    | **是**       |
+| `fin_compare`     | 多资产价格对比（2-5个资产） | **是**       |
+| `fin_slim_search` | 代码/名称搜索               | **是**       |
 
 ### 策略工具
 
-| 工具名                   | 用途                                   | 需要 API Key |
-| ------------------------ | -------------------------------------- | ------------ |
+| 工具名                 | 用途                                   | 需要 API Key |
+| ---------------------- | -------------------------------------- | ------------ |
 | `skill_leaderboard`    | 查询排行榜（综合/收益/风控/人气/新星） | 否           |
 | `skill_get_info`       | 获取 Hub 策略公开详情                  | 否           |
 | `skill_validate`       | 本地验证策略包格式（FEP v2.0）         | 否           |
 | `skill_list_local`     | 列出本地已下载的策略                   | 否           |
-| `skill_fork`           | 从 Hub 下载公开策略到本地              | **是** |
-| `skill_publish`        | 发布策略 ZIP 到 Hub，自动触发回测      | **是** |
-| `skill_publish_verify` | 查询发布状态和回测报告                 | **是** |
+| `skill_fork`           | 从 Hub 下载公开策略到本地              | **是**       |
+| `skill_publish`        | 发布策略 ZIP 到 Hub，自动触发回测      | **是**       |
+| `skill_publish_verify` | 查询发布状态和回测报告                 | **是**       |
 
 ### Skills（指导文档）
 
 #### 行情数据 Skills
 
-| Skill           | 触发场景           | 说明             |
-| --------------- | ------------------ | ---------------- |
+| Skill         | 触发场景           | 说明             |
+| ------------- | ------------------ | ---------------- |
 | `price-check` | 快速查价、XX多少钱 | 最简单的价格查询 |
 
 #### 策略 Skills
 
-| Skill                | 触发场景                 | 说明                             |
-| -------------------- | ------------------------ | -------------------------------- |
-| `strategy-builder` | 创建新策略、生成策略代码 | 自然语言 → FEP v2.0 策略包      |
+| Skill              | 触发场景                 | 说明                          |
+| ------------------ | ------------------------ | ----------------------------- |
+| `strategy-builder` | 创建新策略、生成策略代码 | 自然语言 → FEP v2.0 策略包    |
 | `skill-publish`    | 发布策略到服务器         | 验证 → 打包 → 发布 → 查询回测 |
-| `strategy-fork`    | 下载/克隆 Hub 策略       | Fork → 本地编辑 → 发布新版本   |
-| `strategy-pack`    | 创建回测策略包           | 生成 fep.yaml + strategy.py      |
+| `strategy-fork`    | 下载/克隆 Hub 策略       | Fork → 本地编辑 → 发布新版本  |
+| `strategy-pack`    | 创建回测策略包           | 生成 fep.yaml + strategy.py   |
 
 ### 典型工作流
 
@@ -186,8 +187,8 @@ openclaw strategy leaderboard popular --offset 20 --limit 20
 
 **榜单类型**：
 
-| 榜单类型      | 说明           | 排序依据         |
-| ------------- | -------------- | ---------------- |
+| 榜单类型    | 说明           | 排序依据         |
+| ----------- | -------------- | ---------------- |
 | `composite` | 综合榜（默认） | FCS 综合分       |
 | `returns`   | 收益榜         | 收益率           |
 | `risk`      | 风控榜         | 风控分           |
@@ -252,8 +253,8 @@ openclaw strategy show 550e8400-e29b-41d4-a716-446655440001 --remote
 
 看板包含 4 个标签页：
 
-| 标签页   | 数据来源               | 说明                           |
-| -------- | ---------------------- | ------------------------------ |
+| 标签页   | 数据来源             | 说明                           |
+| -------- | -------------------- | ------------------------------ |
 | 活动日志 | `agent_activity_log` | 所有 12 个工具的每次执行记录   |
 | 事件流   | `agent_events`       | Fork、发布、回测完成等关键事件 |
 | 策略列表 | `strategies`         | 本地策略生命周期状态           |
@@ -261,8 +262,8 @@ openclaw strategy show 550e8400-e29b-41d4-a716-446655440001 --remote
 
 **REST API**（供前端或其他工具调用）：
 
-| 端点                          | 说明                     |
-| ----------------------------- | ------------------------ |
+| 端点                        | 说明                     |
+| --------------------------- | ------------------------ |
 | `GET /api/activity-log`     | 工具调用日志（分页）     |
 | `GET /api/agent-events`     | 事件流（分页）           |
 | `GET /api/strategies`       | 策略列表                 |
@@ -283,19 +284,19 @@ openclaw strategy show 550e8400-e29b-41d4-a716-446655440001 --remote
 
 当用户提到以下内容时，应引导阅读对应的 Skill：
 
-| 触发关键词                     | Skill                | 说明                 |
-| ------------------------------ | -------------------- | -------------------- |
-| XX多少钱、什么价格、查价       | `price-check`      | 最简单的价格查询     |
+| 触发关键词                     | Skill              | 说明                |
+| ------------------------------ | ------------------ | ------------------- |
+| XX多少钱、什么价格、查价       | `price-check`      | 最简单的价格查询    |
 | 创建策略、写策略、生成策略包   | `strategy-builder` | 自然语言 → FEP v2.0 |
-| 发布策略、上传策略、提交策略   | `skill-publish`    | 验证 → 打包 → 发布 |
-| Fork 策略、下载策略、克隆策略  | `strategy-fork`    | 从 Hub Fork 策略     |
-| 策略包格式、FEP 规范、打包回测 | `strategy-pack`    | FEP v2.0 规范详解    |
+| 发布策略、上传策略、提交策略   | `skill-publish`    | 验证 → 打包 → 发布  |
+| Fork 策略、下载策略、克隆策略  | `strategy-fork`    | 从 Hub Fork 策略    |
+| 策略包格式、FEP 规范、打包回测 | `strategy-pack`    | FEP v2.0 规范详解   |
 
 ## 配置选项
 
-| 配置项                | 环境变量                  | 说明             | 默认值                         |
-| --------------------- | ------------------------- | ---------------- | ------------------------------ |
-| `apiKey`            | `OPENFINCLAW_API_KEY`   | 统一 API Key     | 必填                           |
+| 配置项              | 环境变量                | 说明             | 默认值                       |
+| ------------------- | ----------------------- | ---------------- | ---------------------------- |
+| `apiKey`            | `OPENFINCLAW_API_KEY`   | 统一 API Key     | 必填                         |
 | `hubApiUrl`         | `HUB_API_URL`           | Hub 服务地址     | `https://hub.openfinclaw.ai` |
 | `datahubGatewayUrl` | `DATAHUB_GATEWAY_URL`   | DataHub 网关地址 | `http://43.134.61.136:9080`  |
 | `requestTimeoutMs`  | `REQUEST_TIMEOUT_MS`    | 请求超时（毫秒） | `60000`                      |

package/index.test.ts

@@ -44,7 +44,7 @@ function createFakeApi(pluginConfig: Record<string, unknown>): {
     },
     registerHook() {},
     registerHttpHandler() {},
-    registerHttpRoute() {},
+    registerHttpRoute: vi.fn(),
     registerChannel() {},
     registerGatewayMethod() {},
     registerCli() {},
@@ -70,11 +70,23 @@ describe("openfinclaw plugin", () => {
     expect(plugin.name).toBe("OpenFinClaw");
   });
 
-  it("registers all 3 tools", () => {
+  it("registers gateway HTTP proxy for Control UI", () => {
+    const { api } = createFakeApi({});
+    plugin.register(api);
+    expect(api.registerHttpRoute).toHaveBeenCalledWith(
+      expect.objectContaining({
+        path: "/plugins/openfinclaw",
+        match: "prefix",
+        auth: "gateway",
+      }),
+    );
+  });
+
+  it("registers expected strategy and market tools", () => {
     const { api, tools } = createFakeApi({});
     plugin.register(api);
 
-    expect(tools.size).toBe(7);
+    expect(tools.size).toBeGreaterThanOrEqual(7);
     expect(tools.has("skill_publish")).toBe(true);
     expect(tools.has("skill_publish_verify")).toBe(true);
     expect(tools.has("skill_validate")).toBe(true);

package/index.ts

@@ -13,7 +13,9 @@ import { registerStrategyCli } from "./src/cli.js";
 import { resolvePluginConfig } from "./src/config.js";
 import { registerDatahubTools } from "./src/datahub/tools.js";
 import { getDb } from "./src/db/db.js";
+import { createOpenFinclawGatewayProxy } from "./src/http/gateway-proxy.js";
 import { startHttpServer } from "./src/http/server.js";
+import { OPENFINCLAW_AGENT_GUIDANCE } from "./src/prompt-guidance.js";
 import { registerStrategyTools } from "./src/strategy/tools.js";
 
 const openfinclawPlugin = {
@@ -51,6 +53,20 @@ const openfinclawPlugin = {
     // startHttpServer() closes any previous server from a prior hot-reload
     // before binding, so EADDRINUSE is avoided without a try/catch here.
     startHttpServer(config.httpPort, api.logger);
+
+    // Same-origin proxy for Control UI (avoids CSP connect-src to loopback)
+    // auth: "plugin" — no gateway auth required; upstream is loopback-only (127.0.0.1)
+    api.registerHttpRoute({
+      path: "/plugins/openfinclaw",
+      match: "prefix",
+      auth: "plugin",
+      handler: createOpenFinclawGatewayProxy({ port: config.httpPort, logger: api.logger }),
+    });
+
+    // Inject agent system prompt: prioritise tool calls so data lands in SQLite
+    api.on("before_prompt_build", async () => ({
+      prependSystemContext: OPENFINCLAW_AGENT_GUIDANCE,
+    }));
   },
 };
 

package/openclaw.plugin.json

@@ -3,6 +3,7 @@
   "name": "OpenFinClaw",
   "description": "Unified financial tools: market data (price/K-line/crypto/compare/search), strategy publishing, fork, and validation. Single API key for Hub and DataHub.",
   "kind": "financial",
+  "enabledByDefault": true,
   "version": "2026.3.25",
   "skills": ["."],
   "configSchema": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openfinclaw/openfinclaw-strategy",
-  "version": "2026.3.272",
+  "version": "2026.3.274",
   "description": "OpenFinClaw - Unified financial tools: market data (price/K-line/crypto/compare/search), strategy publishing, fork, and validation. Single API key for Hub and DataHub.",
   "keywords": [
     "backtest",

package/src/cli.ts

@@ -101,7 +101,7 @@ export function registerStrategyCli(params: {
             const perf = s.performance || {};
             const returnStr =
               typeof perf.returnSincePublish === "number"
-                ? `收益: ${(perf.returnSincePublish * 100).toFixed(1)}%`
+                ? `收益: ${perf.returnSincePublish.toFixed(1)}%`
                 : "收益: --";
             const sharpeStr =
               typeof perf.sharpeRatio === "number"
@@ -109,7 +109,7 @@ export function registerStrategyCli(params: {
                 : "夏普: --";
             const ddStr =
               typeof perf.maxDrawdown === "number"
-                ? `回撤: ${(perf.maxDrawdown * 100).toFixed(1)}%`
+                ? `回撤: ${perf.maxDrawdown.toFixed(1)}%`
                 : "回撤: --";
             const author = s.author?.displayName || "未知";
 

package/src/http/gateway-proxy.ts

@@ -0,0 +1,73 @@
+/**
+ * Reverse-proxy OpenFinclaw loopback dashboard API through the gateway under
+ * `/plugins/openfinclaw/*` so the Control UI can use same-origin fetch (CSP connect-src 'self').
+ */
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { DashboardLogger } from "./server.js";
+
+export const OPENFINCLAW_GATEWAY_PROXY_PREFIX = "/plugins/openfinclaw";
+
+const HOP_BY_HOP = new Set([
+  "connection",
+  "keep-alive",
+  "proxy-authenticate",
+  "proxy-authorization",
+  "te",
+  "trailers",
+  "transfer-encoding",
+  "upgrade",
+]);
+
+export function createOpenFinclawGatewayProxy(params: {
+  port: number;
+  logger: DashboardLogger;
+}): (req: IncomingMessage, res: ServerResponse) => Promise<boolean> {
+  const upstream = `http://127.0.0.1:${params.port}`;
+
+  return async (req: IncomingMessage, res: ServerResponse): Promise<boolean> => {
+    const raw = req.url ?? "/";
+    const u = new URL(raw, "http://localhost");
+    if (!u.pathname.startsWith(OPENFINCLAW_GATEWAY_PROXY_PREFIX)) {
+      return false;
+    }
+
+    const subPath =
+      u.pathname === OPENFINCLAW_GATEWAY_PROXY_PREFIX
+        ? "/"
+        : u.pathname.slice(OPENFINCLAW_GATEWAY_PROXY_PREFIX.length) || "/";
+    const targetUrl = `${upstream}${subPath.startsWith("/") ? subPath : `/${subPath}`}${u.search}`;
+
+    const method = req.method ?? "GET";
+    if (method !== "GET" && method !== "HEAD") {
+      res.statusCode = 405;
+      res.setHeader("Content-Type", "text/plain; charset=utf-8");
+      res.end("Method Not Allowed");
+      return true;
+    }
+
+    try {
+      const r = await fetch(targetUrl, {
+        method,
+        headers: { Accept: (req.headers.accept as string) || "application/json" },
+        signal: AbortSignal.timeout(30_000),
+      });
+
+      r.headers.forEach((value, key) => {
+        if (!HOP_BY_HOP.has(key.toLowerCase())) {
+          res.setHeader(key, value);
+        }
+      });
+      res.statusCode = r.status;
+      res.end(Buffer.from(await r.arrayBuffer()));
+      return true;
+    } catch (e) {
+      params.logger.info(`[OpenFinClaw] Gateway proxy → ${targetUrl} failed: ${String(e)}`);
+      if (!res.headersSent) {
+        res.statusCode = 502;
+        res.setHeader("Content-Type", "text/plain; charset=utf-8");
+        res.end("Bad Gateway (OpenFinClaw loopback server unreachable)");
+      }
+      return true;
+    }
+  };
+}

package/src/prompt-guidance.ts

@@ -0,0 +1,11 @@
+/**
+ * Agent system prompt guidance for OpenFinClaw plugin.
+ * Injected via before_prompt_build hook so the AI prioritises tool calls
+ * over CLI/HTTP workarounds — only tool executions write to SQLite.
+ */
+export const OPENFINCLAW_AGENT_GUIDANCE = [
+  "当用户需要策略发布、验证、Fork、排行榜、策略详情查询等操作时，必须使用对应的 plugin tool（skill_publish, skill_publish_verify, skill_validate, skill_fork, skill_leaderboard, skill_get_info, skill_list_local），不要尝试通过 CLI 命令或 HTTP 请求替代。",
+  "当用户需要市场行情数据（价格、K线、加密货币、对比、搜索）时，必须使用 fin_price, fin_kline, fin_crypto, fin_compare, fin_slim_search 等 tool。",
+  "只有通过 tool 执行的操作才会写入 SQLite 数据库并在 Dashboard 中展示，绕过 tool 调用的数据不会落库。",
+  "tool 调用失败时优先检查 API Key 是否配置（OPENFINCLAW_API_KEY 环境变量或插件配置 apiKey）。",
+].join("\n");

package/src/strategy/tools.ts

@@ -237,14 +237,31 @@ export function registerStrategyTools(
             // Update backtest result metrics and strategy level
             const verifyStrategyId = resp.entryId as string | undefined;
             if (resp.backtestStatus === "completed" && backtestTaskId) {
-              const perf = (resp.backtestReport as Record<string, unknown> | undefined)
-                ?.performance as Record<string, unknown> | undefined;
+              const report = resp.backtestReport as Record<string, unknown> | undefined;
+              const perf = report?.performance as Record<string, unknown> | undefined;
               updateBacktestResult(db, backtestTaskId, {
                 status: "completed",
                 total_return: typeof perf?.totalReturn === "number" ? perf.totalReturn : undefined,
                 sharpe: typeof perf?.sharpe === "number" ? perf.sharpe : undefined,
+                sortino: typeof perf?.sortino === "number" ? perf.sortino : undefined,
                 max_drawdown: typeof perf?.maxDrawdown === "number" ? perf.maxDrawdown : undefined,
                 win_rate: typeof perf?.winRate === "number" ? perf.winRate : undefined,
+                profit_factor:
+                  typeof perf?.profitFactor === "number" ? perf.profitFactor : undefined,
+                total_trades: typeof perf?.totalTrades === "number" ? perf.totalTrades : undefined,
+                final_equity: typeof perf?.finalEquity === "number" ? perf.finalEquity : undefined,
+                equity_curve: Array.isArray(report?.equity_curve)
+                  ? JSON.stringify(report.equity_curve)
+                  : undefined,
+                trade_journal: Array.isArray(report?.trade_journal)
+                  ? JSON.stringify(report.trade_journal)
+                  : undefined,
+                monthly_returns:
+                  report?.monthly_returns && typeof report.monthly_returns === "object"
+                    ? JSON.stringify(report.monthly_returns)
+                    : undefined,
+                tearsheet_html:
+                  typeof report?.tearsheet_html === "string" ? report.tearsheet_html : undefined,
                 completed_at: new Date().toISOString(),
               });
               // Backtest completed → strategy stays at L1
@@ -416,7 +433,7 @@ export function registerStrategyTools(
             const perf = s.performance || {};
             const returnStr =
               typeof perf.returnSincePublish === "number"
-                ? `收益: ${(perf.returnSincePublish * 100).toFixed(1)}%`
+                ? `收益: ${perf.returnSincePublish.toFixed(1)}%`
                 : "收益: --";
             const sharpeStr =
               typeof perf.sharpeRatio === "number"
@@ -622,7 +639,7 @@ export function registerStrategyTools(
                 lines.push("");
                 lines.push("绩效指标:");
                 if (typeof info.backtestResult.totalReturn === "number")
-                  lines.push(`- 总收益率: ${(info.backtestResult.totalReturn * 100).toFixed(2)}%`);
+                  lines.push(`- 总收益率: ${info.backtestResult.totalReturn.toFixed(2)}%`);
                 if (typeof info.backtestResult.sharpe === "number")
                   lines.push(`- 夏普比率: ${info.backtestResult.sharpe.toFixed(3)}`);
               }