tradingcodex 0.1.0__py3-none-any.whl

apps/policy/migrations/0001_initial.py

@@ -0,0 +1,75 @@
+# Generated by Django 5.2.5 on 2026-06-12 16:32
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='PolicyDecision',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('principal_id', models.CharField(max_length=128)),
+                ('action', models.CharField(max_length=160)),
+                ('resource', models.CharField(blank=True, max_length=255)),
+                ('decision', models.CharField(max_length=16)),
+                ('reasons', models.JSONField(blank=True, default=list)),
+                ('workspace_context', models.JSONField(blank=True, default=dict)),
+            ],
+            options={
+                'verbose_name': 'Policy decision',
+                'verbose_name_plural': 'Policy decisions',
+                'ordering': ['-created_at', '-id'],
+            },
+        ),
+        migrations.CreateModel(
+            name='Principal',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('principal_id', models.CharField(max_length=128, unique=True)),
+                ('role', models.CharField(max_length=128)),
+                ('active', models.BooleanField(default=True)),
+            ],
+            options={
+                'verbose_name': 'Principal',
+                'verbose_name_plural': 'Principals',
+            },
+        ),
+        migrations.CreateModel(
+            name='RestrictedSymbol',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('symbol', models.CharField(max_length=64, unique=True)),
+                ('reason', models.TextField(blank=True)),
+                ('active', models.BooleanField(default=True)),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+            ],
+            options={
+                'verbose_name': 'Restricted symbol',
+                'verbose_name_plural': 'Restricted symbols',
+            },
+        ),
+        migrations.CreateModel(
+            name='Capability',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('action', models.CharField(max_length=160)),
+                ('resource_pattern', models.CharField(default='*', max_length=255)),
+                ('effect', models.CharField(choices=[('allow', 'Allow'), ('deny', 'Deny')], default='allow', max_length=16)),
+                ('principal', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='capabilities', to='policy.principal')),
+            ],
+            options={
+                'verbose_name': 'Capability',
+                'verbose_name_plural': 'Capabilities',
+                'unique_together': {('principal', 'action', 'resource_pattern')},
+            },
+        ),
+    ]

apps/policy/models.py

@@ -0,0 +1,61 @@
+from django.db import models
+
+
+class Principal(models.Model):
+    principal_id = models.CharField(max_length=128, unique=True)
+    role = models.CharField(max_length=128)
+    active = models.BooleanField(default=True)
+
+    class Meta:
+        verbose_name = "Principal"
+        verbose_name_plural = "Principals"
+
+    def __str__(self) -> str:
+        return self.principal_id
+
+
+class Capability(models.Model):
+    principal = models.ForeignKey(Principal, on_delete=models.CASCADE, related_name="capabilities")
+    action = models.CharField(max_length=160)
+    resource_pattern = models.CharField(max_length=255, default="*")
+    effect = models.CharField(max_length=16, choices=[("allow", "Allow"), ("deny", "Deny")], default="allow")
+
+    class Meta:
+        unique_together = [("principal", "action", "resource_pattern")]
+        verbose_name = "Capability"
+        verbose_name_plural = "Capabilities"
+
+    def __str__(self) -> str:
+        return f"{self.principal_id if hasattr(self, 'principal_id') else self.principal} {self.effect} {self.action}"
+
+
+class RestrictedSymbol(models.Model):
+    symbol = models.CharField(max_length=64, unique=True)
+    reason = models.TextField(blank=True)
+    active = models.BooleanField(default=True)
+    created_at = models.DateTimeField(auto_now_add=True)
+
+    class Meta:
+        verbose_name = "Restricted symbol"
+        verbose_name_plural = "Restricted symbols"
+
+    def __str__(self) -> str:
+        return self.symbol
+
+
+class PolicyDecision(models.Model):
+    created_at = models.DateTimeField(auto_now_add=True)
+    principal_id = models.CharField(max_length=128)
+    action = models.CharField(max_length=160)
+    resource = models.CharField(max_length=255, blank=True)
+    decision = models.CharField(max_length=16)
+    reasons = models.JSONField(default=list, blank=True)
+    workspace_context = models.JSONField(default=dict, blank=True)
+
+    class Meta:
+        ordering = ["-created_at", "-id"]
+        verbose_name = "Policy decision"
+        verbose_name_plural = "Policy decisions"
+
+    def __str__(self) -> str:
+        return f"{self.decision}: {self.principal_id} {self.action}"

apps/policy/services.py

@@ -0,0 +1,110 @@
+from __future__ import annotations
+
+from fnmatch import fnmatch
+from typing import Any, Iterable
+
+from django.db.models import QuerySet
+
+from apps.policy.models import Capability, Principal, RestrictedSymbol
+
+
+BUILTIN_ROLE_IDS = {
+    "head-manager",
+    "fundamental-analyst",
+    "technical-analyst",
+    "news-analyst",
+    "macro-analyst",
+    "instrument-analyst",
+    "valuation-analyst",
+    "portfolio-manager",
+    "risk-manager",
+    "execution-operator",
+}
+
+
+def tool_capability_action(tool_name: str, capability_required: str = "") -> str:
+    return capability_required or f"mcp.tradingcodex.{tool_name}"
+
+
+def sync_builtin_principals_and_capabilities(tool_specs: Iterable[Any] | None = None) -> None:
+    if tool_specs is None:
+        from tradingcodex_service.mcp_runtime import TOOL_SPECS
+
+        tool_specs = TOOL_SPECS
+
+    for role in sorted(BUILTIN_ROLE_IDS):
+        Principal.objects.get_or_create(principal_id=role, defaults={"role": role, "active": True})
+
+    for tool in tool_specs:
+        action = tool_capability_action(tool.name, tool.capability_required)
+        for role in tool.allowed_roles:
+            principal, _ = Principal.objects.get_or_create(principal_id=role, defaults={"role": role, "active": True})
+            if principal.role != role:
+                principal.role = role
+                principal.save(update_fields=["role"])
+            Capability.objects.get_or_create(
+                principal=principal,
+                action=action,
+                resource_pattern="*",
+                defaults={"effect": "allow"},
+            )
+
+
+def role_for_principal_id(principal_id: str) -> str:
+    principal = Principal.objects.filter(principal_id=principal_id).first()
+    if principal is not None:
+        return principal.role if principal.active else ""
+    if principal_id in BUILTIN_ROLE_IDS:
+        return principal_id
+    return principal_id or "unknown"
+
+
+def capability_check(principal_id: str, action: str, resource: str | None = None) -> tuple[bool, list[str]]:
+    principal = Principal.objects.filter(principal_id=principal_id).first()
+    if principal is None:
+        return False, [f"principal is unknown: {principal_id}"]
+    if not principal.active:
+        return False, [f"principal is inactive: {principal_id}"]
+
+    resource_value = str(resource or "*")
+    candidates = [
+        capability
+        for capability in Capability.objects.filter(principal=principal, action=action)
+        if resource_matches(capability.resource_pattern, resource_value)
+    ]
+    if any(capability.effect == "deny" for capability in candidates):
+        return False, [f"capability denied: {principal_id} {action} {resource_value}"]
+    if any(capability.effect == "allow" for capability in candidates):
+        return True, []
+    return False, [f"principal lacks capability: {principal_id} {action} {resource_value}"]
+
+
+def resource_matches(pattern: str, resource: str) -> bool:
+    normalized = pattern or "*"
+    return normalized == "*" or fnmatch(resource, normalized)
+
+
+def set_principal_active(queryset: QuerySet[Principal], active: bool, actor: str = "admin") -> int:
+    count = queryset.update(active=active)
+    _audit("principal.activated" if active else "principal.deactivated", {"count": count}, actor)
+    return count
+
+
+def set_capability_effect(queryset: QuerySet[Capability], effect: str, actor: str = "admin") -> int:
+    if effect not in {"allow", "deny"}:
+        raise ValueError("capability effect must be allow or deny")
+    count = queryset.update(effect=effect)
+    _audit("capability.allowed" if effect == "allow" else "capability.denied", {"count": count}, actor)
+    return count
+
+
+def set_restricted_symbols_active(queryset: QuerySet[RestrictedSymbol], active: bool, actor: str = "admin") -> int:
+    count = queryset.update(active=active)
+    _audit("restricted_symbol.activated" if active else "restricted_symbol.deactivated", {"count": count}, actor)
+    return count
+
+
+def _audit(action: str, payload: dict[str, Any], actor: str) -> None:
+    from tradingcodex_service.application.audit import write_audit_event_if_available
+
+    write_audit_event_if_available(None, actor, "admin", {"type": action, "payload": payload})

apps/portfolio/__init__.py

@@ -0,0 +1 @@
+

apps/portfolio/admin.py

@@ -0,0 +1,6 @@
+from django.contrib import admin
+
+from apps.portfolio.models import CashBalance, PortfolioSnapshot, Position
+
+
+admin.site.register([CashBalance, PortfolioSnapshot, Position])

apps/portfolio/apps.py

@@ -0,0 +1,8 @@
+from django.apps import AppConfig
+
+
+class PortfolioConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "apps.portfolio"
+    label = "portfolio"
+    verbose_name = "Portfolio State"

apps/portfolio/migrations/0001_initial.py

@@ -0,0 +1,67 @@
+# Generated by Django 5.2.5 on 2026-06-12 16:32
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='PortfolioSnapshot',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('source', models.CharField(default='paper-trading', max_length=64)),
+                ('portfolio_id', models.CharField(default='default-paper', max_length=120)),
+                ('account_id', models.CharField(default='local-paper', max_length=120)),
+                ('strategy_id', models.CharField(default='default-strategy', max_length=120)),
+                ('workspace_context', models.JSONField(blank=True, default=dict)),
+                ('payload', models.JSONField(blank=True, default=dict)),
+            ],
+            options={
+                'verbose_name': 'Portfolio snapshot',
+                'verbose_name_plural': 'Portfolio snapshots',
+                'ordering': ['-created_at', '-id'],
+            },
+        ),
+        migrations.CreateModel(
+            name='CashBalance',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('currency', models.CharField(default='KRW', max_length=16)),
+                ('amount', models.DecimalField(decimal_places=2, max_digits=24)),
+                ('portfolio_id', models.CharField(default='default-paper', max_length=120)),
+                ('account_id', models.CharField(default='local-paper', max_length=120)),
+                ('strategy_id', models.CharField(default='default-strategy', max_length=120)),
+                ('snapshot', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='cash_balances', to='portfolio.portfoliosnapshot')),
+            ],
+            options={
+                'verbose_name': 'Cash balance',
+                'verbose_name_plural': 'Cash balances',
+            },
+        ),
+        migrations.CreateModel(
+            name='Position',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('symbol', models.CharField(max_length=64)),
+                ('quantity', models.DecimalField(decimal_places=6, max_digits=20)),
+                ('average_price', models.DecimalField(decimal_places=6, max_digits=20)),
+                ('currency', models.CharField(default='KRW', max_length=16)),
+                ('portfolio_id', models.CharField(default='default-paper', max_length=120)),
+                ('account_id', models.CharField(default='local-paper', max_length=120)),
+                ('strategy_id', models.CharField(default='default-strategy', max_length=120)),
+                ('snapshot', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='positions', to='portfolio.portfoliosnapshot')),
+            ],
+            options={
+                'verbose_name': 'Position',
+                'verbose_name_plural': 'Positions',
+            },
+        ),
+    ]

apps/portfolio/models.py

@@ -0,0 +1,53 @@
+from django.db import models
+
+
+class PortfolioSnapshot(models.Model):
+    created_at = models.DateTimeField(auto_now_add=True)
+    source = models.CharField(max_length=64, default="paper-trading")
+    portfolio_id = models.CharField(max_length=120, default="default-paper")
+    account_id = models.CharField(max_length=120, default="local-paper")
+    strategy_id = models.CharField(max_length=120, default="default-strategy")
+    workspace_context = models.JSONField(default=dict, blank=True)
+    payload = models.JSONField(default=dict, blank=True)
+
+    class Meta:
+        ordering = ["-created_at", "-id"]
+        verbose_name = "Portfolio snapshot"
+        verbose_name_plural = "Portfolio snapshots"
+
+    def __str__(self) -> str:
+        return f"{self.source} {self.created_at:%Y-%m-%d %H:%M:%S}"
+
+
+class Position(models.Model):
+    snapshot = models.ForeignKey(PortfolioSnapshot, on_delete=models.CASCADE, related_name="positions")
+    symbol = models.CharField(max_length=64)
+    quantity = models.DecimalField(max_digits=20, decimal_places=6)
+    average_price = models.DecimalField(max_digits=20, decimal_places=6)
+    currency = models.CharField(max_length=16, default="KRW")
+    portfolio_id = models.CharField(max_length=120, default="default-paper")
+    account_id = models.CharField(max_length=120, default="local-paper")
+    strategy_id = models.CharField(max_length=120, default="default-strategy")
+
+    class Meta:
+        verbose_name = "Position"
+        verbose_name_plural = "Positions"
+
+    def __str__(self) -> str:
+        return f"{self.symbol} {self.quantity}"
+
+
+class CashBalance(models.Model):
+    snapshot = models.ForeignKey(PortfolioSnapshot, on_delete=models.CASCADE, related_name="cash_balances")
+    currency = models.CharField(max_length=16, default="KRW")
+    amount = models.DecimalField(max_digits=24, decimal_places=2)
+    portfolio_id = models.CharField(max_length=120, default="default-paper")
+    account_id = models.CharField(max_length=120, default="local-paper")
+    strategy_id = models.CharField(max_length=120, default="default-strategy")
+
+    class Meta:
+        verbose_name = "Cash balance"
+        verbose_name_plural = "Cash balances"
+
+    def __str__(self) -> str:
+        return f"{self.currency} {self.amount}"

apps/research/__init__.py

@@ -0,0 +1 @@
+

apps/research/admin.py

@@ -0,0 +1 @@
+"""Research artifacts are workspace files, not Django Admin models."""

apps/research/apps.py

@@ -0,0 +1,8 @@
+from django.apps import AppConfig
+
+
+class ResearchConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "apps.research"
+    label = "research"
+    verbose_name = "Research Memory"

apps/research/models.py

@@ -0,0 +1 @@
+"""Research is file-native; this Django app intentionally owns no DB models."""

apps/workflows/__init__.py

@@ -0,0 +1 @@
+

apps/workflows/admin.py

@@ -0,0 +1,6 @@
+from django.contrib import admin
+
+from apps.workflows.models import ArtifactRef, WorkflowRun
+
+
+admin.site.register([ArtifactRef, WorkflowRun])

apps/workflows/apps.py

@@ -0,0 +1,8 @@
+from django.apps import AppConfig
+
+
+class WorkflowsConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "apps.workflows"
+    label = "workflows"
+    verbose_name = "Workflow Runs"

apps/workflows/migrations/0001_initial.py

@@ -0,0 +1,51 @@
+# Generated by Django 5.2.5 on 2026-06-12 16:32
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='WorkflowRun',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('run_id', models.CharField(max_length=180, unique=True)),
+                ('lane', models.CharField(max_length=80)),
+                ('universe', models.CharField(default='public_equity', max_length=80)),
+                ('readiness_label', models.CharField(default='factual-baseline', max_length=80)),
+                ('status', models.CharField(default='open', max_length=32)),
+                ('original_request', models.TextField(blank=True)),
+                ('workspace_context', models.JSONField(blank=True, default=dict)),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('updated_at', models.DateTimeField(auto_now=True)),
+            ],
+            options={
+                'verbose_name': 'Workflow run',
+                'verbose_name_plural': 'Workflow runs',
+            },
+        ),
+        migrations.CreateModel(
+            name='ArtifactRef',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('path', models.CharField(max_length=512)),
+                ('artifact_type', models.CharField(max_length=80)),
+                ('role', models.CharField(blank=True, max_length=128)),
+                ('handoff_state', models.CharField(choices=[('accepted', 'accepted'), ('revise', 'revise'), ('blocked', 'blocked'), ('waiting', 'waiting')], default='waiting', max_length=32)),
+                ('hero', models.BooleanField(default=False)),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('workflow', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='artifacts', to='workflows.workflowrun')),
+            ],
+            options={
+                'verbose_name': 'Artifact reference',
+                'verbose_name_plural': 'Artifact references',
+            },
+        ),
+    ]

apps/workflows/models.py

@@ -0,0 +1,44 @@
+from django.db import models
+
+HANDOFF_STATE_CHOICES = [
+    ("accepted", "accepted"),
+    ("revise", "revise"),
+    ("blocked", "blocked"),
+    ("waiting", "waiting"),
+]
+
+
+class WorkflowRun(models.Model):
+    run_id = models.CharField(max_length=180, unique=True)
+    lane = models.CharField(max_length=80)
+    universe = models.CharField(max_length=80, default="public_equity")
+    readiness_label = models.CharField(max_length=80, default="factual-baseline")
+    status = models.CharField(max_length=32, default="open")
+    original_request = models.TextField(blank=True)
+    workspace_context = models.JSONField(default=dict, blank=True)
+    created_at = models.DateTimeField(auto_now_add=True)
+    updated_at = models.DateTimeField(auto_now=True)
+
+    class Meta:
+        verbose_name = "Workflow run"
+        verbose_name_plural = "Workflow runs"
+
+    def __str__(self) -> str:
+        return self.run_id
+
+
+class ArtifactRef(models.Model):
+    workflow = models.ForeignKey(WorkflowRun, on_delete=models.CASCADE, related_name="artifacts")
+    path = models.CharField(max_length=512)
+    artifact_type = models.CharField(max_length=80)
+    role = models.CharField(max_length=128, blank=True)
+    handoff_state = models.CharField(max_length=32, choices=HANDOFF_STATE_CHOICES, default="waiting")
+    hero = models.BooleanField(default=False)
+    created_at = models.DateTimeField(auto_now_add=True)
+
+    class Meta:
+        verbose_name = "Artifact reference"
+        verbose_name_plural = "Artifact references"
+
+    def __str__(self) -> str:
+        return self.path