create-tradejs 3.1.29-beta.262 → 3.1.29-beta.263

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.js CHANGED
@@ -64,6 +64,7 @@ var PROJECT_SKILL_NAMES = [
64
64
  "strategy-period-revalidate",
65
65
  "strategy-forward-start",
66
66
  "strategy-forward-status",
67
+ "tradejs-mcp",
67
68
  "strategy-risk-scale",
68
69
  "strategy-release"
69
70
  ];
@@ -399,6 +400,7 @@ var buildProjectFiles = (targetDir, port, infrastructurePorts = DEFAULT_INFRASTR
399
400
  scripts: {
400
401
  dev: "tradejs-app dev",
401
402
  backtest: "tradejs backtest",
403
+ "mcp:worker": "tradejs mcp-worker",
402
404
  doctor: "tradejs doctor --skip-ml",
403
405
  "infra-up": "tradejs infra-up",
404
406
  "infra-down": "tradejs infra-down"
@@ -425,6 +427,8 @@ PG_PORT=${infrastructurePorts.postgres}
425
427
  REDIS_PORT=${infrastructurePorts.redis}
426
428
  REDIS_INSIGHT_PORT=${infrastructurePorts.redisInsight}
427
429
  `,
430
+ "CLAUDE.md": "@AGENTS.md\n\nRead the matching complete skill from .codex/skills before using a TradeJS workflow. OAuth login and consent are performed by the human user.\n",
431
+ "AGENTS.md": "# TradeJS Project\n\nUse .codex/skills/tradejs-mcp/SKILL.md for remote MCP reads. Verify host, user, deployment/account, revisions, periods and artifact checksums. Missing local data never proves no production activity. Start or cancel jobs only on explicit user request. Never initiate OAuth, change live orders, deploy, send notifications or silently fall back to SSH. Read the complete matching skill under .codex/skills for strategy research; it does not grant production permissions.\n",
428
432
  ".gitignore": `node_modules
429
433
  .tradejs
430
434
  .next
@@ -445,6 +449,18 @@ npm run dev
445
449
  Open [http://localhost:${port}/routes/dashboard](http://localhost:${port}/routes/dashboard).
446
450
  On the first launch, TradeJS asks you to create the local root password.
447
451
 
452
+ ## MCP for Codex and Claude Code
453
+
454
+ Connect your client to the app's \`/mcp\` endpoint using OAuth; the human
455
+ performs login and consent. See https://docs.tradejs.dev/guides/mcp and the
456
+ included \`$tradejs-mcp\` skill. Remote reads must verify the host, user,
457
+ deployment/account and evidence checksums. Do not infer production state from
458
+ local Redis. Start background jobs only on explicit request and never silently
459
+ fall back to SSH. MCP has no live trading, deployment or notification tools.
460
+ Run \`npm run mcp:worker\` separately for bounded cached jobs, after generating
461
+ the exact runtime package manifest. Feedback replay also needs isolated Redis
462
+ and read-only Timescale.
463
+
448
464
  ## Codex TradeJS workflows
449
465
 
450
466
  The project includes the complete checksum-managed TradeJS skill set under
@@ -15,3 +15,12 @@ description: Fetch a TradeJS backtest or strategy configuration from the local R
15
15
  - If the container name differs from `inv-redis`, ask for the correct name.
16
16
  - For research lineage, embed the returned JSON and a canonical checksum in the
17
17
  note. The mutable Redis key alone is not reproduction evidence.
18
+
19
+ ## Remote data through MCP
20
+
21
+ When a TradeJS MCP server is configured, follow `$tradejs-mcp` for remote reads.
22
+ Check server/user/deployment identity before interpreting the result. Prefer
23
+ verified diagnostic artifacts and validate their SHA-256 after download;
24
+ keep existing local research evidence as the source for candidate selection.
25
+ Use `backtest_list_configs` for remote named grids. Do not initiate OAuth,
26
+ start a new job from this read-only workflow, or silently fall back to SSH.
@@ -144,3 +144,12 @@ For each case:
144
144
  4. Give the next 1-3 checks in the TradeJS codebase.
145
145
  If several cases share one cause, group them.
146
146
  ```
147
+
148
+ ## Remote data through MCP
149
+
150
+ When a TradeJS MCP server is configured, follow `$tradejs-mcp` for remote reads.
151
+ Check server/user/deployment identity before interpreting the result. Prefer
152
+ verified diagnostic artifacts and validate their SHA-256 after download;
153
+ keep existing local research evidence as the source for candidate selection.
154
+ Use `backtest_list_configs` for remote named grids. Do not initiate OAuth,
155
+ start a new job from this read-only workflow, or silently fall back to SSH.
@@ -52,3 +52,12 @@ Conclude with:
52
52
  - whether the candidate remains the selected best candidate under the frozen
53
53
  objective;
54
54
  - one exact next action. Do not launch it from this skill.
55
+
56
+ ## Remote data through MCP
57
+
58
+ When a TradeJS MCP server is configured, follow `$tradejs-mcp` for remote reads.
59
+ Check server/user/deployment identity before interpreting the result. Prefer
60
+ verified diagnostic artifacts and validate their SHA-256 after download;
61
+ keep existing local research evidence as the source for candidate selection.
62
+ Use `backtest_list_configs` for remote named grids. Do not initiate OAuth,
63
+ start a new job from this read-only workflow, or silently fall back to SSH.
@@ -49,3 +49,12 @@ sparse 7d/30d row must remain visible, but it is not a standalone veto and does
49
49
  not imply that anyone must wait for a calendar deadline.
50
50
 
51
51
  Finish with one exact next skill: compare, plan, revalidate, or forward-start.
52
+
53
+ ## Remote data through MCP
54
+
55
+ When a TradeJS MCP server is configured, follow `$tradejs-mcp` for remote reads.
56
+ Check server/user/deployment identity before interpreting the result. Prefer
57
+ verified diagnostic artifacts and validate their SHA-256 after download;
58
+ keep existing local research evidence as the source for candidate selection.
59
+ Use `backtest_list_configs` for remote named grids. Do not initiate OAuth,
60
+ start a new job from this read-only workflow, or silently fall back to SSH.
@@ -42,3 +42,12 @@ alone is not success or failure; weight the number and diversity of independent
42
42
  events. Finish with one exact recommendation: keep collecting, diagnose via a
43
43
  new research task, stop through the deployment runbook, or invoke
44
44
  `$strategy-risk-scale`.
45
+
46
+ ## Remote data through MCP
47
+
48
+ When a TradeJS MCP server is configured, follow `$tradejs-mcp` for remote reads.
49
+ Check server/user/deployment identity before interpreting the result. Prefer
50
+ verified diagnostic artifacts and validate their SHA-256 after download;
51
+ keep existing local research evidence as the source for candidate selection.
52
+ Use `backtest_list_configs` for remote named grids. Do not initiate OAuth,
53
+ start a new job from this read-only workflow, or silently fall back to SSH.
@@ -0,0 +1,43 @@
1
+ ---
2
+ name: tradejs-mcp
3
+ description: Use an authenticated TradeJS MCP server from Codex or Claude Code to inspect coins, charts, runtime strategies, signals, orders, cached backtests, and verified runtime feedback/parity. Use for remote TradeJS inspection that previously required SSH; never authorize OAuth or trade live on the user's behalf.
4
+ ---
5
+
6
+ # TradeJS through MCP
7
+
8
+ 1. Use the configured TradeJS server. If missing, give the human the connection
9
+ commands from the knowledge base at `/guides/mcp`. Never start OAuth consent,
10
+ device authorization, re-login or permission elevation yourself.
11
+ 2. Call `tradejs_info`, then `runtime_get_status` for runtime work. Verify the
12
+ host URL, authenticated user, available scopes, account/deployment and
13
+ observed times. A local server is not production evidence.
14
+ 3. Read `market_list_symbols`, `market_get_snapshot`, `chart_get_context` for
15
+ coins/charts. Preserve provider, universe, symbol, interval and period.
16
+ Cached history is the default; report incomplete coverage. Strategy figures
17
+ come from the recorded signal, not inferred chart annotations.
18
+ 4. Use `runtime_list_strategies`, `runtime_list_signals`,
19
+ `runtime_list_evaluations`, `runtime_list_orders` and
20
+ `runtime_get_evaluation_summary`. Follow cursors to `0`, including empty
21
+ pages. Runtime cursors expire after ten minutes and are bound to filters.
22
+ `runtime_get_signal` takes signalId, deploymentId, timestamp and strategy
23
+ from the list. Explain the saved decision, gate, order status and evidence.
24
+ Do not turn missing retained records into proof that nothing happened.
25
+ 5. Prefer existing verified `diagnostics_list_reports` / `diagnostics_get_report`
26
+ before new jobs. For full artifacts call `artifact_get`, concatenate decoded
27
+ base64 chunks in offset order, verify byte count and SHA-256, then use the
28
+ relevant local analysis skill. Debug counters never replace sealed evidence.
29
+ 6. On an explicit user request, use `backtest_start` or `diagnostics_start`,
30
+ retain the job id and idempotency key, and poll `job_get`. Backtests snapshot
31
+ the named grid; limits are 90 days, 20 symbols, eight combinations, cached
32
+ history, one worker. Evidence capture is limited to seven days. Feedback
33
+ replay requires a verified evidence id for that deployment and an isolated
34
+ replay worker. Disconnects do not cancel work; never automatically retry a
35
+ failed job. Use `job_cancel` only when requested.
36
+ 7. Include source host, time bounds, revisions, coverage, checksums and missing
37
+ evidence in the result. Use local CLI for offline analysis or work exceeding
38
+ the bounded MCP job contract. SSH needs a separate explicit operational
39
+ request; do not broaden access to compensate for a missing tool or scope.
40
+
41
+ MCP has no tools for live order placement/cancellation, runtime config writes,
42
+ release publication, deployment or notifications. OAuth scopes do not grant
43
+ permission to perform those actions. Skills and AGENTS.md do not change that.
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "schema": "tradejs-skill-bundle/v1",
3
3
  "source": "TradeJS-Dev/TradeJS:.codex/skills",
4
- "bundleSha256": "650502f532888b4d8e63ae8c52745bdf8d114feb2398831858d7e9f035b1e4bd",
4
+ "bundleSha256": "de2e0a452cd29dc40f183a68c246cf6d4af7710c8fac599a6030b6713accedc6",
5
5
  "skills": [
6
6
  "ai-train-local-research",
7
7
  "backtest-config-redis",
@@ -15,6 +15,7 @@
15
15
  "strategy-period-revalidate",
16
16
  "strategy-forward-start",
17
17
  "strategy-forward-status",
18
+ "tradejs-mcp",
18
19
  "strategy-risk-scale",
19
20
  "strategy-release"
20
21
  ],
@@ -26,8 +27,8 @@
26
27
  ".codex/skills/ai-train-local-research/scripts/ai-gate-ablation.test.mjs": "c21f36e88888ad5f444e615b5ddf3419e834d945ff9517318288516d7dd489bf",
27
28
  ".codex/skills/ai-train-local-research/SKILL.md": "b75a1e737a13f71c96a8c45ff11891dc4d1c415c784d4146dab9cdcbe376f49a",
28
29
  ".codex/skills/backtest-config-redis/scripts/get_backtest_config.sh": "833e950d6348c5b7a4bd3f00d25af60f6394190bff744bd5ab64db9e43d826d5",
29
- ".codex/skills/backtest-config-redis/SKILL.md": "85e7b1fa425aa23dfa7950de05c1d3ce046d044dc3872f3665705e9e2f2a1977",
30
- ".codex/skills/runtime-parity-mismatch-analysis/SKILL.md": "289925c0069d1933ec3b09d5d6a020632170716c61aafb7031a0998acf3736f6",
30
+ ".codex/skills/backtest-config-redis/SKILL.md": "ac4f9d685c12f748a87b1882df1f731dd3ae9ec8bd7c11cb652221fe0463febc",
31
+ ".codex/skills/runtime-parity-mismatch-analysis/SKILL.md": "f9cbc571baaba7a185550415c3ef31f0f55a9503107c8ace2314fac88ba025bd",
31
32
  ".codex/skills/save-strategy-config-from-backtest/agents/openai.yaml": "ba163f9449562241ed954ca2e0f12e22562390740cdcf0d09d7f99f0ef791741",
32
33
  ".codex/skills/save-strategy-config-from-backtest/SKILL.md": "a73cddc29fb8fa741fe6226c051e19b0f9a19747babf96d336e7f165fb1fd298",
33
34
  ".codex/skills/strategy-backtest-research/references/research-notes.md": "e7b85dce73c612ba6821857e511b63754a574cc14d8ba5224466002fe27509aa",
@@ -37,10 +38,10 @@
37
38
  ".codex/skills/strategy-backtest-research/scripts/fast-ai-export-metrics.test.mjs": "4caab52646504afd2a6f1e4ba9f43d6b07d714baca89d2a2010545fb4210a9da",
38
39
  ".codex/skills/strategy-backtest-research/scripts/research-notes-check.mjs": "435aa6560abcf4e8a60fb86230d8d8de2f2dc9e4c52acc7a272ce30287d40325",
39
40
  ".codex/skills/strategy-backtest-research/SKILL.md": "526197e5f196d80dc4f4cc3688d2e0d232eb010267c53d2a71589e4ddddac4e4",
40
- ".codex/skills/strategy-candidate-compare/SKILL.md": "34dbca2c77ce74836f5c264131cefb751313147128ab1c3f947002f975be051c",
41
- ".codex/skills/strategy-candidate-report/SKILL.md": "3cad1241ce2107d7e30a5d78eafd6429514a10d1a8e9cf3d0e97ffef9d691ab6",
41
+ ".codex/skills/strategy-candidate-compare/SKILL.md": "62f44b986c879f6247ecce7b98e6286c523e8d690d6f1f9015fddaa56b70a4bf",
42
+ ".codex/skills/strategy-candidate-report/SKILL.md": "ec4399494dd545268c74dd5b4d84a3fa6f283801a7f95449ce956a9f22db6713",
42
43
  ".codex/skills/strategy-forward-start/SKILL.md": "a86311aeb4c5b46e43011806ffa0f665c4ec0fddce8d7f8c1232184e4a14bfa7",
43
- ".codex/skills/strategy-forward-status/SKILL.md": "b41f117680259fd7b4d5cbe3c0a1be75a42f08c8cf78f9ad7ccb0d90bfc66269",
44
+ ".codex/skills/strategy-forward-status/SKILL.md": "7cb021991ff40bb3407eb58e1c9e2bcf597f67b0201059b9e20e4f37fd3320b9",
44
45
  ".codex/skills/strategy-improvement-plan/SKILL.md": "f5f0f390941dd3332890a2f0ffae1248abde4925db2cf49a41c0c0c1b47e7864",
45
46
  ".codex/skills/strategy-improvement-research/references/final-composition-board.md": "d7c4c9575af37fdff60548754da434511d2ef1ab9f0fca8dd211edf45e73e8d3",
46
47
  ".codex/skills/strategy-improvement-research/scripts/build-final-composition-spec.mjs": "b51873691fafbcf2dd70d8c9a6da842fec5f8358346c632cfe79211db08b18ba",
@@ -69,6 +70,7 @@
69
70
  ".codex/skills/strategy-release/scripts/release-progress-checkpoint.mjs": "28da8715ab51ee7217d633c675d014b8004e5ddda8faf9489ebacacef98f6b9b",
70
71
  ".codex/skills/strategy-release/scripts/release-progress-checkpoint.test.mjs": "d378b0ab87cd3ee7bbf384ec5f5810565b480b56533ad3c6700edf5938286a38",
71
72
  ".codex/skills/strategy-release/SKILL.md": "590948c2c1ad222c7784b050e0fa0a8fea60efa7b0f23d8d355fd56a3e8a1291",
72
- ".codex/skills/strategy-risk-scale/SKILL.md": "2c07846c9da2fd622ea6f5586c42863fc27b35a7d1d00614d5bbe0719da4d39f"
73
+ ".codex/skills/strategy-risk-scale/SKILL.md": "2c07846c9da2fd622ea6f5586c42863fc27b35a7d1d00614d5bbe0719da4d39f",
74
+ ".codex/skills/tradejs-mcp/SKILL.md": "a9c5dfde4ccab13e1fa2c3e56f6f3132fb0ed99e492b119a5017588db55b34c4"
73
75
  }
74
76
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "create-tradejs",
3
- "version": "3.1.29-beta.262",
3
+ "version": "3.1.29-beta.263",
4
4
  "description": "Create a ready-to-run TradeJS project with local infrastructure and the Web UI.",
5
5
  "keywords": [
6
6
  "tradejs",