opencandle 0.11.1 → 0.13.0

package/dist/memory/sqlite.js

@@ -2,7 +2,7 @@ import { mkdirSync } from "node:fs";
 import { dirname } from "node:path";
 import Database from "better-sqlite3";
 import { ensureOpenCandleHomeDir, getStateDbPath } from "../infra/opencandle-paths.js";
-const CURRENT_SCHEMA_VERSION = 8;
+const CURRENT_SCHEMA_VERSION = 9;
 const CURRENT_SCHEMA = `
   CREATE TABLE IF NOT EXISTS schema_version (
     version INTEGER NOT NULL
@@ -105,7 +105,8 @@ const CURRENT_SCHEMA = `
     name TEXT NOT NULL,
     is_default INTEGER NOT NULL DEFAULT 0,
     created_at TEXT NOT NULL,
-    updated_at TEXT NOT NULL
+    updated_at TEXT NOT NULL,
+    UNIQUE(name)
   );
 
   CREATE UNIQUE INDEX IF NOT EXISTS idx_watchlists_one_default
@@ -116,12 +117,6 @@ const CURRENT_SCHEMA = `
     id INTEGER PRIMARY KEY AUTOINCREMENT,
     watchlist_id INTEGER NOT NULL,
     instrument_id INTEGER NOT NULL,
-    thesis TEXT,
-    notes TEXT,
-    tags_json TEXT,
-    target_price REAL,
-    stop_price REAL,
-    price_currency TEXT,
     source TEXT,
     source_row_id TEXT,
     source_metadata_json TEXT,
@@ -355,19 +350,26 @@ function ensureCurrentSchema(db) {
         db.exec(CURRENT_SCHEMA);
         return;
     }
+    if (currentVersion === 8) {
+        migrateV8ToV9(db);
+        return;
+    }
     if (currentVersion === 7) {
         migrateV7ToV8(db);
+        migrateV8ToV9(db);
         return;
     }
     if (currentVersion === 6) {
         migrateV6ToV7(db);
         migrateV7ToV8(db);
+        migrateV8ToV9(db);
         return;
     }
     if (currentVersion === 5) {
         migrateV5ToV6(db);
         migrateV6ToV7(db);
         migrateV7ToV8(db);
+        migrateV8ToV9(db);
         return;
     }
     if (currentVersion === 4) {
@@ -375,6 +377,7 @@ function ensureCurrentSchema(db) {
         migrateV5ToV6(db);
         migrateV6ToV7(db);
         migrateV7ToV8(db);
+        migrateV8ToV9(db);
         return;
     }
     if (currentVersion === 3) {
@@ -383,10 +386,12 @@ function ensureCurrentSchema(db) {
         migrateV5ToV6(db);
         migrateV6ToV7(db);
         migrateV7ToV8(db);
+        migrateV8ToV9(db);
         return;
     }
-    // Additive v2 → v3 → ... → v7 migration without dropping data (v8 drops
-    // prediction_records as the explicit removal of the predictions feature).
+    // Additive v2 → v3 → ... migration without dropping data (v8 drops
+    // prediction_records and v9 drops watchlist item annotation columns as
+    // explicit feature removals).
     if (currentVersion === 2) {
         migrateV2ToV3(db);
         migrateV3ToV4(db);
@@ -394,6 +399,7 @@ function ensureCurrentSchema(db) {
         migrateV5ToV6(db);
         migrateV6ToV7(db);
         migrateV7ToV8(db);
+        migrateV8ToV9(db);
         return;
     }
     // Any other mismatch (null first-run, or a foreign schema): reset.
@@ -456,6 +462,50 @@ function migrateV7ToV8(db) {
     // Predictions feature removal: dropping prediction_records is the explicit,
     // documented destructive step for this table; all other rows are preserved.
     db.exec("DROP TABLE IF EXISTS prediction_records");
+    db.exec(CURRENT_SCHEMA);
+    db.prepare("DELETE FROM schema_version").run();
+    db.prepare("INSERT INTO schema_version (version) VALUES (?)").run(8);
+}
+function migrateV8ToV9(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS watchlists_v9 (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      name TEXT NOT NULL,
+      is_default INTEGER NOT NULL DEFAULT 0,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL,
+      UNIQUE(name)
+    );
+
+    INSERT OR IGNORE INTO watchlists_v9 (id, name, is_default, created_at, updated_at)
+      SELECT id, name, is_default, created_at, updated_at FROM watchlists;
+
+    DROP TABLE IF EXISTS watchlist_items_v9;
+    CREATE TABLE watchlist_items_v9 (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      watchlist_id INTEGER NOT NULL,
+      instrument_id INTEGER NOT NULL,
+      source TEXT,
+      source_row_id TEXT,
+      source_metadata_json TEXT,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL,
+      UNIQUE(watchlist_id, instrument_id),
+      FOREIGN KEY (watchlist_id) REFERENCES watchlists_v9(id) ON DELETE CASCADE,
+      FOREIGN KEY (instrument_id) REFERENCES instruments(id) ON DELETE RESTRICT
+    );
+
+    INSERT OR IGNORE INTO watchlist_items_v9 (
+      id, watchlist_id, instrument_id, source, source_row_id, source_metadata_json, created_at, updated_at
+    )
+      SELECT id, watchlist_id, instrument_id, source, source_row_id, source_metadata_json, created_at, updated_at
+      FROM watchlist_items;
+
+    DROP TABLE watchlist_items;
+    DROP TABLE watchlists;
+    ALTER TABLE watchlists_v9 RENAME TO watchlists;
+    ALTER TABLE watchlist_items_v9 RENAME TO watchlist_items;
+  `);
     db.exec(CURRENT_SCHEMA);
     db.prepare("DELETE FROM schema_version").run();
     db.prepare("INSERT INTO schema_version (version) VALUES (?)").run(CURRENT_SCHEMA_VERSION);
@@ -524,4 +574,3 @@ export function getSchemaVersion(db) {
     const row = db.prepare("SELECT version FROM schema_version LIMIT 1").get();
     return row?.version ?? 0;
 }
-//# sourceMappingURL=sqlite.js.map

package/dist/memory/storage.js

@@ -120,4 +120,3 @@ function safeParseJson(json) {
         return json;
     }
 }
-//# sourceMappingURL=storage.js.map

package/dist/memory/tool-defaults.js

@@ -92,4 +92,3 @@ function setPath(target, path, value) {
 function isPlainObject(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-//# sourceMappingURL=tool-defaults.js.map

package/dist/memory/types.js

@@ -48,4 +48,3 @@ export const NEVER_TRUST_FROM_MEMORY = new Set([
     "entry_price",
     "stop_loss",
 ]);
-//# sourceMappingURL=types.js.map

package/dist/monitor.js

@@ -102,4 +102,3 @@ async function main() {
     process.once("SIGTERM", stop);
 }
 await main();
-//# sourceMappingURL=monitor.js.map

package/dist/onboarding/connect.js

@@ -120,4 +120,3 @@ export async function runProviderConnect(ctx, providerId) {
     ctx.ui.notify(`${descriptor.displayName} connected. Your key has been saved.`, "info");
     return { status: "connected" };
 }
-//# sourceMappingURL=connect.js.map

package/dist/onboarding/credential-interceptor.js

@@ -69,4 +69,3 @@ export function resolveCredentialRequired(input) {
     // 7. Default: prompt.
     return { action: "prompt", provider, reason };
 }
-//# sourceMappingURL=credential-interceptor.js.map

package/dist/onboarding/degradation-accumulator.js

@@ -50,4 +50,3 @@ export function createDegradationAccumulator() {
         },
     };
 }
-//# sourceMappingURL=degradation-accumulator.js.map

package/dist/onboarding/prompt-user.d.ts

@@ -20,4 +20,4 @@ export interface PromptResult {
  *
  * When neither a handler nor a UI is available, returns `{answer: null, cancelled: true}`.
  */
-export declare function promptUser(ctx: ExtensionContext, opts: PromptOptions, handler?: AskUserHandler): Promise<PromptResult>;
+export declare function promptUser(ctx: ExtensionContext | undefined, opts: PromptOptions, handler?: AskUserHandler): Promise<PromptResult>;

package/dist/onboarding/prompt-user.js

@@ -58,4 +58,3 @@ export async function promptUser(ctx, opts, handler) {
         }
     }
 }
-//# sourceMappingURL=prompt-user.js.map

package/dist/onboarding/provider-status.js

@@ -253,4 +253,3 @@ export const runCommand = (command, args, options) => runExternalToolCommand(com
     timeoutMs: options?.timeoutMs ?? COMMAND_TIMEOUT_MS,
     maxOutputChars: MAX_OUTPUT_CHARS,
 });
-//# sourceMappingURL=provider-status.js.map

package/dist/onboarding/providers.d.ts

@@ -1,4 +1,4 @@
-export type ApiKeyProviderId = "alpha_vantage" | "fred" | "finnhub" | "brave" | "exa";
+export type ApiKeyProviderId = "alpha_vantage" | "fred" | "finnhub" | "brave" | "exa" | "lse";
 export type ExternalToolProviderId = "twitter" | "reddit";
 export type PublicHttpProviderId = "polymarket" | "tradingview" | "yahoo";
 export type ProviderId = ApiKeyProviderId | ExternalToolProviderId | PublicHttpProviderId;
@@ -127,6 +127,21 @@ export declare const PROVIDERS: readonly [{
     readonly fallbackDescription: "Exa search continues to work via the keyless Exa MCP endpoint, which has lower rate limits but similar quality";
     readonly snoozeDurationDays: 7;
     readonly instructionsHint: "Paid with free tier, signup opens in your browser";
+}, {
+    readonly id: "lse";
+    readonly kind: "api-key";
+    readonly displayName: "London Strategic Edge";
+    readonly category: "market";
+    readonly tier: "soft";
+    readonly aliases: readonly ["lse", "london strategic edge", "londonstrategicedge"];
+    readonly signupUrl: "https://londonstrategicedge.com/databank";
+    readonly freeTier: true;
+    readonly envVar: "LSE_API_KEY";
+    readonly configPath: readonly ["providers", "lse", "apiKey"];
+    readonly unlocks: readonly ["financial statements (income, balance sheet, and cash flow)", "deep split-adjusted intraday history back to 2003"];
+    readonly fallbackDescription: "Market data continues through Yahoo Finance and Alpha Vantage when London Strategic Edge is unavailable";
+    readonly snoozeDurationDays: 7;
+    readonly instructionsHint: "Free, about 30 seconds, signup opens in your browser";
 }, {
     readonly id: "yahoo";
     readonly kind: "public-http";

package/dist/onboarding/providers.js

@@ -112,6 +112,25 @@ export const PROVIDERS = [
         snoozeDurationDays: 7,
         instructionsHint: "Paid with free tier, signup opens in your browser",
     },
+    {
+        id: "lse",
+        kind: "api-key",
+        displayName: "London Strategic Edge",
+        category: "market",
+        tier: "soft",
+        aliases: ["lse", "london strategic edge", "londonstrategicedge"],
+        signupUrl: "https://londonstrategicedge.com/databank",
+        freeTier: true,
+        envVar: "LSE_API_KEY",
+        configPath: ["providers", "lse", "apiKey"],
+        unlocks: [
+            "financial statements (income, balance sheet, and cash flow)",
+            "deep split-adjusted intraday history back to 2003",
+        ],
+        fallbackDescription: "Market data continues through Yahoo Finance and Alpha Vantage when London Strategic Edge is unavailable",
+        snoozeDurationDays: 7,
+        instructionsHint: "Free, about 30 seconds, signup opens in your browser",
+    },
     {
         id: "yahoo",
         kind: "public-http",
@@ -255,6 +274,7 @@ const CONFIG_FIELD_BY_ID = {
     finnhub: "finnhubApiKey",
     brave: "braveApiKey",
     exa: "exaApiKey",
+    lse: "lseApiKey",
 };
 export function hasCredential(id) {
     const descriptor = getProvider(id);
@@ -327,4 +347,3 @@ export function resolveProviderFromArgument(arg) {
     }
     return undefined;
 }
-//# sourceMappingURL=providers.js.map

package/dist/onboarding/state.js

@@ -161,4 +161,3 @@ export function shouldShowWelcome(state, hasUI) {
         return false;
     return state.welcomeShownAt === undefined;
 }
-//# sourceMappingURL=state.js.map

package/dist/onboarding/tool-helpers.js

@@ -77,4 +77,3 @@ export async function withCredentialCheck(providerId, fn) {
         throw error;
     }
 }
-//# sourceMappingURL=tool-helpers.js.map

package/dist/onboarding/tool-tags.js

@@ -178,4 +178,3 @@ export function parseToolTag(text) {
             return undefined;
     }
 }
-//# sourceMappingURL=tool-tags.js.map

package/dist/onboarding/validate-model-key.d.ts

@@ -0,0 +1,17 @@
+export type ModelKeyProviderId = "google" | "openai" | "anthropic";
+export type ModelKeyValidationResult = {
+    status: "valid";
+    providerLabel: string;
+} | {
+    status: "invalid";
+    providerLabel: string;
+} | {
+    status: "transient";
+    providerLabel: string;
+    reason: string;
+};
+/**
+ * Checks whether an API key is accepted by a model provider without saving it.
+ * Transient failures deliberately permit saving so offline setup remains usable.
+ */
+export declare function validateModelKey(providerId: ModelKeyProviderId, key: string): Promise<ModelKeyValidationResult>;

package/dist/onboarding/validate-model-key.js

@@ -0,0 +1,86 @@
+const VALIDATION_TIMEOUT_MS = 5_000;
+const MODEL_KEY_PROBE_BASE_URL_ENV = "OPENCANDLE_MODEL_KEY_PROBE_BASE_URL";
+const MODEL_KEY_PROBES = {
+    google: {
+        label: "Google Gemini",
+        url: "https://generativelanguage.googleapis.com/v1beta/models",
+        headers: (key) => ({ "x-goog-api-key": key }),
+    },
+    openai: {
+        label: "OpenAI",
+        url: "https://api.openai.com/v1/models",
+        headers: (key) => ({ Authorization: `Bearer ${key}` }),
+    },
+    anthropic: {
+        label: "Anthropic",
+        url: "https://api.anthropic.com/v1/models",
+        headers: (key) => ({ "x-api-key": key, "anthropic-version": "2023-06-01" }),
+    },
+};
+/**
+ * Checks whether an API key is accepted by a model provider without saving it.
+ * Transient failures deliberately permit saving so offline setup remains usable.
+ */
+export async function validateModelKey(providerId, key) {
+    const probe = MODEL_KEY_PROBES[providerId];
+    try {
+        const response = await fetch(resolveProbeUrl(probe.url), {
+            method: "GET",
+            headers: probe.headers(key),
+            signal: AbortSignal.timeout(VALIDATION_TIMEOUT_MS),
+            // Probes carry the typed key in headers that survive cross-origin
+            // redirects (x-goog-api-key, x-api-key); provider probe endpoints do
+            // not redirect, so any redirect is treated as a transient failure
+            // rather than followed.
+            redirect: "error",
+        });
+        if (response.status === 401 || response.status === 403) {
+            return { status: "invalid", providerLabel: probe.label };
+        }
+        if (!response.ok) {
+            // Google reports bad keys as 400 INVALID_ARGUMENT / API_KEY_INVALID
+            // rather than 401.
+            if (response.status === 400) {
+                const body = await response.text().catch(() => "");
+                if (/API_KEY_INVALID|API key not valid/i.test(body)) {
+                    return { status: "invalid", providerLabel: probe.label };
+                }
+            }
+            return { status: "transient", providerLabel: probe.label, reason: `HTTP ${response.status}` };
+        }
+        return { status: "valid", providerLabel: probe.label };
+    }
+    catch (error) {
+        return {
+            status: "transient",
+            providerLabel: probe.label,
+            reason: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+function resolveProbeUrl(probeUrl) {
+    const override = process.env[MODEL_KEY_PROBE_BASE_URL_ENV]?.trim();
+    if (!override)
+        return probeUrl;
+    // Test-support hook only. Overrides are limited to loopback hosts because
+    // the probe request carries the typed API key in its headers; honoring an
+    // arbitrary origin (for example from a poisoned .env) would forward that
+    // key to a foreign host.
+    let baseUrl;
+    try {
+        baseUrl = new URL(override);
+    }
+    catch {
+        return probeUrl;
+    }
+    if (!isLoopbackHostname(baseUrl.hostname))
+        return probeUrl;
+    const url = new URL(probeUrl);
+    url.protocol = baseUrl.protocol;
+    url.host = baseUrl.host;
+    return url.toString();
+}
+function isLoopbackHostname(hostname) {
+    const host = hostname.toLowerCase();
+    return (host === "localhost" || host === "::1" || host === "[::1]" || /^127(\.\d{1,3}){3}$/.test(host));
+}

package/dist/onboarding/validation.js

@@ -112,6 +112,13 @@ export async function validateCredential(providerId, key) {
                 },
                 body: JSON.stringify({ query: "test", numResults: 1 }),
             });
+        case "lse":
+            return validateWithFetch("https://api.londonstrategicedge.com/vault/candles?symbol=AAPL&timeframe=1d&limit=1", {
+                method: "GET",
+                headers: {
+                    "x-api-key": key,
+                    Accept: "application/json",
+                },
+            });
     }
 }
-//# sourceMappingURL=validation.js.map

package/dist/pi/opencandle-extension.d.ts

@@ -1,8 +1,9 @@
-import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import type { ExtensionAPI, ModelRuntime } from "@earendil-works/pi-coding-agent";
 import type { InstrumentCandidate } from "../market-state/resolve.js";
 import type { RouterLlmClient } from "../routing/router-types.js";
 import type { AskUserHandler } from "../types/index.js";
 export interface OpenCandleExtensionOptions {
+    modelRuntime?: ModelRuntime;
     askUserHandler?: AskUserHandler;
     /**
      * Optional router LLM client. When provided, this instance is used instead

package/dist/pi/opencandle-extension.js

@@ -78,7 +78,7 @@ export default function openCandleExtension(pi, options) {
     pi.registerCommand("setup", {
         description: "Reconfigure the OpenCandle AI model (sign-in or API key)",
         handler: async (_args, ctx) => {
-            const result = await coordinator.runSetup(pi, ctx, { mode: "manual" });
+            const result = await coordinator.runSetup(pi, ctx, { mode: "manual" }, options?.modelRuntime);
             if (result === "ready") {
                 ctx.ui.notify("OpenCandle setup complete.", "info");
             }
@@ -173,7 +173,7 @@ export default function openCandleExtension(pi, options) {
         // entering the LLM's conversation context (unlike `sendMessage`, which Pi
         // reinjects as a `role:"user"` message every turn).
         ctx.ui.setStatus("opencandle-disclaimer", DISCLAIMER_TEXT);
-        const result = await coordinator.runSetup(pi, ctx, { mode: "startup" });
+        const result = await coordinator.runSetup(pi, ctx, { mode: "startup" }, options?.modelRuntime);
         if (result === "shutdown") {
             return;
         }
@@ -690,6 +690,8 @@ export default function openCandleExtension(pi, options) {
     }
     async function dispatchRouterWorkflow(output, ctx, originalText) {
         const workflow = output.workflow;
+        if (!workflow)
+            return false;
         const storage = coordinator.getStorage();
         const workflowPrefs = storage?.getWorkflowPreferences("global") ?? {};
         const entities = mergeRouterSlotsIntoEntities(output);
@@ -988,7 +990,6 @@ export default function openCandleExtension(pi, options) {
         const model = ctx.model;
         if (!model)
             return null;
-        // biome-ignore lint/suspicious/noExplicitAny: Pi typings keep Model generic
         return createPiAiRouterClient(model);
     }
     // System prompt assembly — delegate to coordinator. When a fallback context
@@ -1065,4 +1066,3 @@ function isPlaceholderSessionName(name, candidates) {
     }
     return false;
 }
-//# sourceMappingURL=opencandle-extension.js.map

package/dist/pi/session-action-dedupe.js

@@ -123,4 +123,3 @@ function acceptedActionStorePath(sessionManager) {
         ? `${scope}.accepted-actions.json`
         : join(scope, "accepted-actions.json");
 }
-//# sourceMappingURL=session-action-dedupe.js.map

package/dist/pi/session-storage.js

@@ -2,4 +2,3 @@ import { SessionManager } from "@earendil-works/pi-coding-agent";
 export function continueOpenCandleSession(cwd, sessionDir) {
     return SessionManager.continueRecent(cwd, sessionDir);
 }
-//# sourceMappingURL=session-storage.js.map

package/dist/pi/session-writer-lock.js

@@ -320,4 +320,3 @@ function isFileScope(scopePath) {
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
-//# sourceMappingURL=session-writer-lock.js.map

package/dist/pi/session.d.ts

@@ -1,10 +1,9 @@
-import { type AuthStorage, type CreateAgentSessionResult, type ModelRegistry, type SessionManager, type SettingsManager } from "@earendil-works/pi-coding-agent";
+import { type CreateAgentSessionResult, type ModelRuntime, type SessionManager, type SettingsManager } from "@earendil-works/pi-coding-agent";
 import type { AskUserHandler } from "../types/index.js";
 export interface CreateOpenCandleSessionOptions {
     cwd?: string;
     agentDir?: string;
-    authStorage?: AuthStorage;
-    modelRegistry?: ModelRegistry;
+    modelRuntime?: ModelRuntime;
     settingsManager?: SettingsManager;
     sessionManager?: SessionManager;
     useInlineExtension?: boolean;

package/dist/pi/session.js

@@ -14,7 +14,10 @@ export async function createOpenCandleSession(options = {}) {
             agentDir,
             settingsManager: options.settingsManager,
             extensionFactories: [
-                (pi) => openCandleExtension(pi, { askUserHandler: options.askUserHandler }),
+                (pi) => openCandleExtension(pi, {
+                    askUserHandler: options.askUserHandler,
+                    modelRuntime: options.modelRuntime,
+                }),
             ],
         })
         : undefined;
@@ -24,8 +27,7 @@ export async function createOpenCandleSession(options = {}) {
     const result = await createAgentSession({
         cwd,
         agentDir,
-        authStorage: options.authStorage,
-        modelRegistry: options.modelRegistry,
+        modelRuntime: options.modelRuntime,
         sessionManager: options.sessionManager,
         settingsManager: options.settingsManager,
         resourceLoader,
@@ -42,12 +44,11 @@ async function applySavedDefaultModel(result) {
     const modelId = result.session.settingsManager.getDefaultModel();
     if (!provider || !modelId)
         return;
-    const savedDefault = result.session.modelRegistry.find(provider, modelId);
-    if (!savedDefault || !result.session.modelRegistry.hasConfiguredAuth(savedDefault))
+    const savedDefault = result.session.modelRuntime.getModel(provider, modelId);
+    if (!savedDefault || !result.session.modelRuntime.hasConfiguredAuth(savedDefault.provider))
         return;
     const current = result.session.model;
     if (current?.provider === savedDefault.provider && current.id === savedDefault.id)
         return;
     await result.session.setModel(savedDefault);
 }
-//# sourceMappingURL=session.js.map

package/dist/pi/setup.d.ts

@@ -1,9 +1,11 @@
-import { type ExtensionAPI, type ExtensionContext } from "@earendil-works/pi-coding-agent";
+import { type ExtensionAPI, type ExtensionContext, type ModelRuntime } from "@earendil-works/pi-coding-agent";
 type SetupMode = "startup" | "manual";
 type SetupRequirement = "ready" | "select_model" | "connect_auth";
+type ApiKeyProviderId = "google" | "openai" | "anthropic";
 type SetupResult = "ready" | "shutdown" | "cancelled";
 export declare function getLlmSetupRequirement(ctx: Pick<ExtensionContext, "model" | "modelRegistry">): SetupRequirement;
+export declare function runApiKeySetup(ctx: ExtensionContext, provider: ApiKeyProviderId, modelRuntime: ModelRuntime): Promise<boolean>;
 export declare function runOpenCandleSetup(api: ExtensionAPI, ctx: ExtensionContext, options?: {
     mode: SetupMode;
-}): Promise<SetupResult>;
+}, modelRuntime?: ModelRuntime): Promise<SetupResult>;
 export {};