create-tradejs 3.1.22 → 3.1.23-beta.239

package/README.md

@@ -18,9 +18,20 @@ npx create-tradejs my-trading-project
 
 Docker with the Compose plugin and Node.js 20.19 or newer are required.
 
-## Codex strategy skills
+## Codex TradeJS skills
 
-Every generated project includes focused workflow skills in `.codex/skills`:
+Every generated project includes the complete checksum-managed TradeJS skill
+set in `.codex/skills`. The supporting skills execute one bounded operation:
+
+- `$strategy-backtest-research` — implement or execute one preregistered core
+  backtest experiment;
+- `$ai-train-local-research` — analyze a frozen core/export's deterministic
+  gate;
+- `$backtest-config-redis` and `$save-strategy-config-from-backtest` — read a
+  research grid or explicitly promote it into the Git-owned Project;
+- `$runtime-parity-mismatch-analysis` — diagnose an existing parity artifact.
+
+The focused lifecycle skills own user-level decisions:
 
 - `$strategy-candidate-report` — show the latest selected candidate;
 - `$strategy-candidate-compare` — compare it with production;
@@ -34,6 +45,9 @@ Every generated project includes focused workflow skills in `.codex/skills`:
 - `$strategy-risk-scale` — change only `MAX_LOSS_VALUE` after an explicit
   scaling request.
 
+`$strategy-release` remains only as a deprecated compatibility router to one
+focused lifecycle skill. It is not another research/deployment workflow.
+
 Invoke one skill with one strategy name, for example:
 
 ```text
@@ -57,7 +71,9 @@ npx create-tradejs@<approved-version> --update-skills .
 ```
 
 The updater preserves unrelated custom skills and refuses to overwrite a
-managed file that no longer matches its installed checksum.
+modified managed file. When a new release first brings an existing official
+TradeJS skill under bundle management, the explicit update adopts that
+same-named official snapshot from the canonical bundle.
 
 ## License
 

package/dist/index.js

@@ -52,6 +52,11 @@ var import_node_fs = require("fs");
 var import_node_path = __toESM(require("path"));
 var PROJECT_SKILL_BUNDLE_MANIFEST = ".codex/tradejs-skill-bundle.json";
 var PROJECT_SKILL_NAMES = [
+  "ai-train-local-research",
+  "backtest-config-redis",
+  "runtime-parity-mismatch-analysis",
+  "save-strategy-config-from-backtest",
+  "strategy-backtest-research",
   "strategy-candidate-report",
   "strategy-candidate-compare",
   "strategy-improvement-plan",
@@ -59,7 +64,8 @@ var PROJECT_SKILL_NAMES = [
   "strategy-period-revalidate",
   "strategy-forward-start",
   "strategy-forward-status",
-  "strategy-risk-scale"
+  "strategy-risk-scale",
+  "strategy-release"
 ];
 var sha256 = (contents) => (0, import_node_crypto.createHash)("sha256").update(contents).digest("hex");
 var toProjectPath = (...parts) => import_node_path.default.posix.join(...parts);
@@ -86,6 +92,17 @@ var calculateBundleSha256 = (fileHashes) => sha256(
 );
 var createProjectSkillBundle = (canonicalSkillsRoot) => {
   const files = {};
+  const canonicalSkillNames = (0, import_node_fs.readdirSync)(canonicalSkillsRoot, {
+    withFileTypes: true
+  }).filter(
+    (entry) => entry.isDirectory() && (0, import_node_fs.existsSync)(import_node_path.default.join(canonicalSkillsRoot, entry.name, "SKILL.md"))
+  ).map((entry) => entry.name).sort();
+  const managedSkillNames = [...PROJECT_SKILL_NAMES].sort();
+  if (JSON.stringify(canonicalSkillNames) !== JSON.stringify(managedSkillNames)) {
+    throw new Error(
+      "PROJECT_SKILL_NAMES must include every canonical TradeJS skill exactly once"
+    );
+  }
   for (const skillName of PROJECT_SKILL_NAMES) {
     const skillRoot = import_node_path.default.join(canonicalSkillsRoot, skillName);
     if (!(0, import_node_fs.existsSync)(import_node_path.default.join(skillRoot, "SKILL.md"))) {
@@ -179,6 +196,11 @@ var syncProjectSkillBundle = (projectRoot, bundleFiles) => {
     bundleFiles[PROJECT_SKILL_BUNDLE_MANIFEST]
   );
   const installedManifest = readInstalledManifest(projectRoot);
+  const newlyManagedSkills = new Set(
+    newManifest.skills.filter(
+      (skillName) => !installedManifest?.skills.includes(skillName)
+    )
+  );
   for (const [relativePath, contents] of Object.entries(bundleFiles)) {
     if (!isManagedSkillPath(relativePath)) {
       throw new Error(`Unsafe managed skill path: ${relativePath}`);
@@ -193,7 +215,9 @@ var syncProjectSkillBundle = (projectRoot, bundleFiles) => {
       const currentContents = (0, import_node_fs.readFileSync)(destination, "utf8");
       const installedSha256 = installedManifest?.files[relativePath];
       const isKnownInstalledFile = installedSha256 !== void 0 && sha256(currentContents) === installedSha256;
-      if (!isKnownInstalledFile && currentContents !== contents) {
+      const skillName = relativePath.split("/")[2];
+      const isNewlyManagedOfficialSkill = newlyManagedSkills.has(skillName);
+      if (!isKnownInstalledFile && !isNewlyManagedOfficialSkill && currentContents !== contents) {
         throw new Error(
           `Refusing to overwrite a modified skill: ${relativePath}`
         );
@@ -421,10 +445,13 @@ npm run dev
 Open [http://localhost:${port}/routes/dashboard](http://localhost:${port}/routes/dashboard).
 On the first launch, TradeJS asks you to create the local root password.
 
-## Codex strategy workflow
+## Codex TradeJS workflows
 
-The project includes focused TradeJS skills under \`.codex/skills\`. Invoke a
-skill with a strategy name, for example:
+The project includes the complete checksum-managed TradeJS skill set under
+\`.codex/skills\`. Use \`$strategy-improvement-research\` to orchestrate a full
+bounded lineage, \`$strategy-backtest-research\` for one preregistered core
+experiment, and \`$ai-train-local-research\` for the frozen gate stage. For
+example:
 
 \`$strategy-candidate-report MarketFlushReversal\`
 
@@ -432,6 +459,10 @@ Use \`$strategy-forward-start <Strategy>\` only when you want Codex to publish
 and launch the selected candidate as a bounded forward test. It installs the
 exact candidate configuration with \`MAX_LOSS_VALUE=1\` and requires an exact
 deployment/account binding.
+
+Update the complete official skill snapshot only through:
+
+\`npx create-tradejs@<approved-version> --update-skills .\`
 `,
     ...readProjectSkillBundle().files
   };