tradingcodex 0.3.2__tar.gz → 0.3.3__tar.gz

{tradingcodex-0.3.2 → tradingcodex-0.3.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tradingcodex
-Version: 0.3.2
+Version: 0.3.3
 Summary: Agentic investment workflow harness for Codex-native research and service-gated execution checks.
 Author: TradingCodex Authors
 License-Expression: Apache-2.0
@@ -229,7 +229,7 @@ provide investment recommendations or guarantee returns.
 | Status | Milestone |
 | --- | --- |
 | Shipped | Generated Codex workspace, fixed role roster, project MCP config, Django service plane, local web dashboard, Admin, Ninja API, file-native research memory, component registry, policy/audit primitives. |
-| Current `0.3.2` | Brief research chat replies with saved head-manager synthesis reports, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
+| Current `0.3.3` | Flexible package/workspace update status, skipped-version Django migration smoke coverage, brief research chat replies with saved head-manager synthesis reports, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
 | Next | Deeper validation scenarios, richer provider capability profiles, stronger generated-workspace smoke coverage, and improved artifact quality tooling. |
 | Future | Separately governed verified adapters, hosted/managed services, enterprise policy/compliance packs, and broker-specific live providers only after explicit product, policy, adapter, and validation work. |
 

{tradingcodex-0.3.2 → tradingcodex-0.3.3}/README.md

@@ -198,7 +198,7 @@ provide investment recommendations or guarantee returns.
 | Status | Milestone |
 | --- | --- |
 | Shipped | Generated Codex workspace, fixed role roster, project MCP config, Django service plane, local web dashboard, Admin, Ninja API, file-native research memory, component registry, policy/audit primitives. |
-| Current `0.3.2` | Brief research chat replies with saved head-manager synthesis reports, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
+| Current `0.3.3` | Flexible package/workspace update status, skipped-version Django migration smoke coverage, brief research chat replies with saved head-manager synthesis reports, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
 | Next | Deeper validation scenarios, richer provider capability profiles, stronger generated-workspace smoke coverage, and improved artifact quality tooling. |
 | Future | Separately governed verified adapters, hosted/managed services, enterprise policy/compliance packs, and broker-specific live providers only after explicit product, policy, adapter, and validation work. |
 

{tradingcodex-0.3.2 → tradingcodex-0.3.3}/docs/README.md

@@ -64,7 +64,7 @@ If these layers disagree, treat `docs/` as the durable product intent and fix th
 | [interfaces-and-surfaces.md](./interfaces-and-surfaces.md) | Product web, Django Admin, Django Ninja API, MCP boundary, CLI, generated wrapper behavior, and external MCP surface. |
 | [generated-workspaces.md](./generated-workspaces.md) | `tcx attach`, `tcx init`, `tcx update`, generated files, project-scoped MCP config, hooks, workspace provenance, profile scope, and template rules. |
 | [validation-and-test-plan.md](./validation-and-test-plan.md) | Required validation commands, unit/API/generator/smoke coverage, MCP smokes, broker provider smokes, routing scenarios, and release-sensitive checks. |
-| [deployment.md](./deployment.md) | PyPI/TestPyPI release process, CI/CD, Trusted Publishing, installer/update policy, versioning, and what is not deployed. |
+| [deployment.md](./deployment.md) | PyPI release process, CI/CD, Trusted Publishing, installer/update policy, versioning, and what is not deployed. |
 | [licensing-and-commercialization.md](./licensing-and-commercialization.md) | Apache-2.0 open-core boundary, generated workspace ownership, contributions, trademark posture, and legal review needs. |
 
 ## Change-To-Docs Map

{tradingcodex-0.3.2 → tradingcodex-0.3.3}/docs/deployment.md

@@ -34,9 +34,6 @@ Use Python 3.11 for release build verification and keep CI green across the
 supported range. The package metadata requires `>=3.11,<3.15`, and CI runs on
 Python 3.11, 3.12, 3.13, and 3.14.
 
-Create separate PyPI and TestPyPI accounts. TestPyPI is a separate service and
-does not share login state with PyPI.
-
 Configure Trusted Publishing before the first upload. Do not store long-lived
 PyPI API tokens in GitHub repository secrets unless Trusted Publishing is not
 available.
@@ -46,12 +43,9 @@ Trusted Publisher settings:
 | Index | Project | Owner | Repository | Workflow | Environment |
 | --- | --- | --- | --- | --- | --- |
 | PyPI | `tradingcodex` | repository owner/org | repository name | `release.yml` | `pypi` |
-| TestPyPI | `tradingcodex` | repository owner/org | repository name | `release.yml` | `testpypi` |
-
-On GitHub, create both environments:
 
-- `testpypi`: no manual approval required by default
-- `pypi`: require manual approval before deployment
+On GitHub, create the `pypi` environment and require manual approval before
+deployment.
 
 ## Local Build Verification
 
@@ -101,27 +95,25 @@ It runs on pull requests and pushes to `main` or `develop`:
 - builds the package for validation only
 - validates distribution metadata with `twine check`
 
-The CI workflow never uploads to TestPyPI or PyPI. Pushes to `main` or
-`develop` run tests and packaging checks only.
+The CI workflow never uploads to PyPI. Pushes to `main` or `develop` run tests
+and packaging checks only.
 
 Release automation is defined in `.github/workflows/release.yml` and appears as
 `Manual Release` in GitHub Actions.
 
 The release workflow is manual-only. Branch pushes and tag pushes must not
-publish package artifacts to TestPyPI or PyPI.
+publish package artifacts to PyPI.
 
 The release workflow has additional guardrails:
 
 - publication requires `workflow_dispatch`
 - PyPI publication is allowed only from the `main` branch
-- TestPyPI and PyPI publication must be run as separate manual workflow runs
 - concurrent release runs on the same ref are serialized instead of cancelled
 
-Manual `workflow_dispatch` can publish to TestPyPI when
-`publish_testpypi=true`, and to PyPI when `publish_pypi=true`.
+Manual `workflow_dispatch` can publish to PyPI when `publish_pypi=true`.
 
-Keep both publish inputs set to `false` when the run should only build and
-verify distributions.
+Keep `publish_pypi=false` when the run should only build and verify
+distributions.
 
 The workflow uses PyPI Trusted Publishing. The publish jobs request only an
 OIDC token through `id-token: write`; they do not require API-token secrets.
@@ -134,32 +126,6 @@ and download do not depend on the deprecated Node.js 20 action runtime.
 `tcx update` applies central DB migrations before the updated workspace is used.
 Product flows create, check, approve, and submit `OrderTicket` records directly.
 
-## TestPyPI Release
-
-Use TestPyPI before the first public PyPI release and after packaging changes.
-
-1. Confirm the local build verification steps pass.
-2. Run the `Manual Release` workflow manually with `publish_testpypi=true`.
-3. Install from TestPyPI in a clean environment.
-
-Example:
-
-```bash
-python3.11 -m venv /tmp/tcx-testpypi
-/tmp/tcx-testpypi/bin/pip install \
-  --index-url https://test.pypi.org/simple/ \
-  --extra-index-url https://pypi.org/simple/ \
-  tradingcodex==0.3.2
-rm -rf /tmp/tcx-testpypi-smoke
-mkdir -p /tmp/tcx-testpypi-smoke
-cd /tmp/tcx-testpypi-smoke
-/tmp/tcx-testpypi/bin/tcx attach .
-./tcx doctor
-```
-
-`--extra-index-url` is used because dependencies such as Django may not be
-available on TestPyPI.
-
 ## PyPI Release
 
 Before pushing the release tag:
@@ -168,7 +134,6 @@ Before pushing the release tag:
 - verify `README.md` describes execution as service-gated
 - verify docs mention that live broker execution requires installed providers and explicit gates
 - run local build verification
-- run a TestPyPI release when packaging changed
 
 Then create or update the GitHub release/tag as needed, and run the
 `Manual Release` workflow manually with `publish_pypi=true`. Do not rely on tag push for
@@ -178,7 +143,7 @@ After the PyPI workflow completes:
 
 ```bash
 python3.11 -m venv /tmp/tcx-pypi
-/tmp/tcx-pypi/bin/pip install tradingcodex==0.3.2
+/tmp/tcx-pypi/bin/pip install tradingcodex==0.3.3
 rm -rf /tmp/tcx-pypi-smoke
 mkdir -p /tmp/tcx-pypi-smoke
 cd /tmp/tcx-pypi-smoke
@@ -279,7 +244,10 @@ Use PEP 440 versions:
   state fixes after `0.3.0`
 - `0.3.2` for brief research chat replies with saved head-manager synthesis
   reports after `0.3.1`
-- later patch releases for compatible fixes after `0.3.2`
+- `0.3.3` for flexible update status across package/workspace drift,
+  skipped-version Django migration smoke coverage, and PyPI-only release flow
+  after `0.3.2`
+- later patch releases for compatible fixes after `0.3.3`
 - pre-releases such as `0.4.0a1`, `0.4.0b1`, or `0.4.0rc1` when preparing
   the next minor contract
 

{tradingcodex-0.3.2 → tradingcodex-0.3.3}/docs/generated-workspaces.md

@@ -250,8 +250,9 @@ user-terminal workspace-only path:
 step. If startup health reports `update_status.workspace_update_allowed=true`,
 `head-manager` should tell the user to run
 `update_status.workspace_update_command` from their terminal. If startup health
-reports `update_status.package_update_required_first=true`, package refresh is
-also a user-terminal action, normally:
+reports `update_status.package_update_required_first=true`, including when the
+generated workspace and installed wrapper both match an older release, package
+refresh is also a user-terminal action, normally:
 
 ```bash
 uvx --refresh --from tradingcodex tcx update .
@@ -366,7 +367,10 @@ must explain the two supported paths: switch Codex to full access and enable
 TradingCodex build mode, or run the recommended `update_status.command` from a
 terminal. Self-update is allowed only when Codex full access and explicit
 workspace build mode are both active and the user asks for the update. After
-self-update, `head-manager` stops and tells the user to restart Codex.
+self-update, `head-manager` stops and tells the user to restart Codex. If a
+same-DB service is already running with a newer TradingCodex version than the
+current wrapper, startup health treats that service version as an update hint
+and should recommend package/workspace refresh before service stop.
 
 Build mode is per workspace and explicit:
 

{tradingcodex-0.3.2 → tradingcodex-0.3.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "tradingcodex"
-version = "0.3.2"
+version = "0.3.3"
 description = "Agentic investment workflow harness for Codex-native research and service-gated execution checks."
 readme = "README.md"
 requires-python = ">=3.11,<3.15"

{tradingcodex-0.3.2 → tradingcodex-0.3.3}/tests/test_python_migration.py

@@ -150,7 +150,7 @@ def test_service_autostart_rejects_version_and_db_mismatch(monkeypatch) -> None:
     )
     with pytest.raises(RuntimeError, match="version mismatch") as version_mismatch:
         service_autostart._assert_compatible_service("127.0.0.1", 48267)
-    assert "tcx service stop 127.0.0.1:48267" in str(version_mismatch.value)
+    assert "uvx --refresh --from tradingcodex tcx update ." in str(version_mismatch.value)
 
     monkeypatch.setattr(service_autostart, "tradingcodex_db_path", lambda: Path("/tmp/current.sqlite3"))
     monkeypatch.setattr(
@@ -195,6 +195,24 @@ def test_service_autostart_replaces_stale_same_db_service(monkeypatch, tmp_path:
     assert state["started"] is True
 
 
+def test_service_autostart_does_not_replace_newer_same_db_service(monkeypatch, tmp_path: Path) -> None:
+    from tradingcodex_cli import service_autostart
+
+    current_db = tmp_path / "current.sqlite3"
+    monkeypatch.setattr(service_autostart, "tradingcodex_db_path", lambda: current_db)
+    monkeypatch.setattr(service_autostart, "_tcp_open", lambda host, port: True)
+    monkeypatch.setattr(
+        service_autostart,
+        "_service_health",
+        lambda host, port: {"service": "tradingcodex", "version": "999.0.0", "db_path": str(current_db)},
+    )
+    monkeypatch.setattr(service_autostart, "stop_service", lambda *args, **kwargs: (_ for _ in ()).throw(AssertionError("stopped newer service")))
+    monkeypatch.setattr(service_autostart, "_start_service", lambda *args: (_ for _ in ()).throw(AssertionError("started over newer service")))
+
+    with pytest.raises(RuntimeError, match="uvx --refresh --from tradingcodex tcx update"):
+        service_autostart.ensure_service_up(tmp_path, timeout=0.01)
+
+
 def test_service_status_reports_actionable_state(monkeypatch) -> None:
     from tradingcodex_cli import service_autostart
 
@@ -218,6 +236,15 @@ def test_service_status_reports_actionable_state(monkeypatch) -> None:
     assert mismatch["package_version"] == TRADINGCODEX_VERSION
     assert "tcx service stop 127.0.0.1:48267" in mismatch["next_action"]
 
+    monkeypatch.setattr(
+        service_autostart,
+        "_service_health",
+        lambda host, port: {"service": "tradingcodex", "version": "999.0.0", "db_path": str(Path("/tmp/current.sqlite3"))},
+    )
+    newer_service = service_autostart.service_status("127.0.0.1:48267")
+    assert newer_service["issue"] == "version_mismatch"
+    assert "uvx --refresh --from tradingcodex tcx update ." in newer_service["next_action"]
+
     monkeypatch.setattr(service_autostart, "tradingcodex_db_path", lambda: Path("/tmp/current.sqlite3"))
     monkeypatch.setattr(
         service_autostart,
@@ -230,6 +257,67 @@ def test_service_status_reports_actionable_state(monkeypatch) -> None:
     assert compatible["next_action"] == "No action needed."
 
 
+def test_db_migrate_applies_skipped_django_migrations_and_legacy_order_data(tmp_path: Path) -> None:
+    workspace = tmp_path / "skip-migration-workspace"
+    workspace.mkdir()
+    home = tmp_path / "tc-home-skip-migration"
+    env_extra = {"TRADINGCODEX_HOME": str(home), "TRADINGCODEX_DB_NAME": None}
+
+    run([sys.executable, "manage.py", "migrate", "orders", "0001", "--noinput"], ROOT, env_extra=env_extra)
+    db_path = home / "state" / "tradingcodex.sqlite3"
+    with sqlite3.connect(db_path) as connection:
+        connection.execute(
+            """
+            INSERT INTO orders_orderintent (
+              intent_id, symbol, side, quantity, limit_price, currency, broker,
+              estimated_notional_krw, created_by, created_at, portfolio_id,
+              account_id, strategy_id, workspace_context, payload
+            )
+            VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+            """,
+            (
+                "legacy-intent-1",
+                "NVDA",
+                "buy",
+                "1",
+                "100",
+                "USD",
+                "paper",
+                "100",
+                "portfolio-manager",
+                "2026-01-01 00:00:00",
+                "default-paper",
+                "local-paper",
+                "default-strategy",
+                "{}",
+                json.dumps({"order_intent": {"order_ticket_id": "legacy-ticket-1", "symbol": "NVDA", "side": "buy", "quantity": "1"}}),
+            ),
+        )
+
+    migrated = json.loads(run([sys.executable, "-m", "tradingcodex_cli", "db", "migrate"], workspace, env_extra=env_extra).stdout)
+    assert migrated["status"] == "migrated"
+    with sqlite3.connect(db_path) as connection:
+        applied = {
+            (row[0], row[1])
+            for row in connection.execute("SELECT app, name FROM django_migrations")
+        }
+        tables = {
+            row[0]
+            for row in connection.execute("SELECT name FROM sqlite_master WHERE type='table'")
+        }
+        ticket = connection.execute(
+            "SELECT ticket_id, symbol, side, payload_hash FROM orders_orderticket WHERE ticket_id = ?",
+            ("legacy-ticket-1",),
+        ).fetchone()
+
+    assert ("orders", "0004_remove_order_intent_compat_fields") in applied
+    assert ("integrations", "0002_brokerconnection_brokeraccount_instrumentmap") in applied
+    assert "orders_orderintent" not in tables
+    assert ticket is not None
+    assert ticket[:3] == ("legacy-ticket-1", "NVDA", "buy")
+    assert ticket[3]
+
+
 def test_service_runserver_uses_fixed_port_and_skips_duplicate(monkeypatch, tmp_path: Path, capsys) -> None:
     from django.core import management
     from tradingcodex_cli import __main__ as cli_main
@@ -351,6 +439,49 @@ def test_startup_status_preserves_service_mismatch_details(monkeypatch, tmp_path
     assert status["allowed_next_actions"][0] == service_detail["next_action"]
 
 
+def test_startup_status_uses_same_db_newer_service_as_update_hint(monkeypatch, tmp_path: Path) -> None:
+    from tradingcodex_cli import startup_status
+
+    workspace = make_workspace(tmp_path)
+    module_lock_path = workspace / ".tradingcodex" / "generated" / "module-lock.json"
+    module_lock = json.loads(module_lock_path.read_text(encoding="utf-8"))
+    module_lock["tradingcodex_version"] = "0.3.1"
+    module_lock_path.write_text(json.dumps(module_lock, indent=2) + "\n", encoding="utf-8")
+    db_path = "/tmp/current.sqlite3"
+    monkeypatch.setattr(startup_status, "TRADINGCODEX_VERSION", "0.3.1")
+    monkeypatch.setattr(
+        startup_status,
+        "latest_release_info",
+        lambda: (_ for _ in ()).throw(AssertionError("latest release check should use service hint")),
+    )
+    monkeypatch.setattr(
+        startup_status,
+        "inspect_service_status",
+        lambda addr: {
+            "addr": addr,
+            "url": f"http://{addr}/",
+            "reachable": True,
+            "compatible": False,
+            "service": "tradingcodex",
+            "version": "0.3.2",
+            "package_version": "0.3.1",
+            "db_path": db_path,
+            "expected_db_path": db_path,
+            "issue": "version_mismatch",
+            "next_action": "Run package refresh.",
+        },
+    )
+    monkeypatch.setattr(startup_status, "_read_health", lambda url: {"service": "tradingcodex", "version": "0.3.2", "db_path": db_path})
+
+    status = startup_status.build_server_status(workspace)
+
+    update_status = status["update_status"]
+    assert update_status["versions_match"] is True
+    assert update_status["latest_release_source"] == "service_status"
+    assert update_status["package_update_required"] is True
+    assert update_status["command"] == "uvx --refresh --from tradingcodex tcx update ."
+
+
 def test_manage_runserver_uses_fixed_port_and_skips_duplicate(monkeypatch, capsys) -> None:
     from tradingcodex_cli import service_autostart
 
@@ -898,6 +1029,55 @@ def test_session_start_update_recommendation_respects_home_preference(tmp_path:
     assert run_user_prompt_hook(workspace, "Create a quality income strategy for dividend stocks") is None
 
 
+def test_update_status_detects_stale_package_when_workspace_matches_installed(monkeypatch, tmp_path: Path) -> None:
+    from tradingcodex_cli import startup_status
+
+    workspace = make_workspace(tmp_path)
+    module_lock_path = workspace / ".tradingcodex" / "generated" / "module-lock.json"
+    module_lock = json.loads(module_lock_path.read_text(encoding="utf-8"))
+    module_lock["tradingcodex_version"] = "0.3.1"
+    module_lock_path.write_text(json.dumps(module_lock, indent=2) + "\n", encoding="utf-8")
+    monkeypatch.setattr(startup_status, "TRADINGCODEX_VERSION", "0.3.1")
+    monkeypatch.setattr(
+        startup_status,
+        "latest_release_info",
+        lambda: {"latest_release_version": "0.3.2", "latest_release_status": "ok", "latest_release_source": "test"},
+    )
+
+    update_status = startup_status.build_update_status(workspace, check_latest_release=True)
+
+    assert update_status["versions_match"] is True
+    assert update_status["workspace_update_available"] is False
+    assert update_status["package_update_required"] is True
+    assert update_status["package_update_required_first"] is True
+    assert update_status["update_available"] is True
+    assert update_status["command"] == "uvx --refresh --from tradingcodex tcx update ."
+
+
+def test_update_status_uses_service_hint_when_latest_check_unavailable(monkeypatch, tmp_path: Path) -> None:
+    from tradingcodex_cli import startup_status
+
+    workspace = make_workspace(tmp_path)
+    module_lock_path = workspace / ".tradingcodex" / "generated" / "module-lock.json"
+    module_lock = json.loads(module_lock_path.read_text(encoding="utf-8"))
+    module_lock["tradingcodex_version"] = "0.3.0"
+    module_lock_path.write_text(json.dumps(module_lock, indent=2) + "\n", encoding="utf-8")
+    monkeypatch.setattr(startup_status, "TRADINGCODEX_VERSION", "0.3.1")
+    monkeypatch.setattr(
+        startup_status,
+        "latest_release_info",
+        lambda: {"latest_release_version": "unknown", "latest_release_status": "unavailable", "latest_release_source": "test"},
+    )
+
+    update_status = startup_status.build_update_status(workspace, latest_version_hint="0.3.2")
+
+    assert update_status["workspace_update_available"] is True
+    assert update_status["latest_release_source"] == "service_status"
+    assert update_status["package_update_required"] is True
+    assert update_status["workspace_update_allowed"] is False
+    assert update_status["command"] == "uvx --refresh --from tradingcodex tcx update ."
+
+
 def test_repo_skill_templates_keep_instruction_boundary() -> None:
     skill_root = ROOT / "workspace_templates" / "modules" / "repo-skills" / "files" / ".agents" / "skills"
     subagent_skill_root = ROOT / "workspace_templates" / "modules" / "repo-skills" / "files" / ".tradingcodex" / "subagents" / "skills"
@@ -1393,7 +1573,7 @@ def test_runtime_mode_update_and_connector_build_cli(tmp_path: Path) -> None:
     module_lock_path.write_text(json.dumps(module_lock, indent=2) + "\n", encoding="utf-8")
     update_status = json.loads(
         run(
-            ["./tcx", "update", "status", "--json"],
+            ["./tcx", "update", "status", "--json", "--skip-refresh"],
             workspace,
             env_extra={"TRADINGCODEX_CODEX_PERMISSION": "danger-full-access", "TRADINGCODEX_LATEST_RELEASE_VERSION": TRADINGCODEX_VERSION},
         ).stdout
@@ -1693,6 +1873,7 @@ def test_update_refreshes_workspace_contract_and_preserves_identity(tmp_path: Pa
     assert module_lock["tradingcodex_version"] == TRADINGCODEX_VERSION
     assert module_lock["tradingcodex_package_spec"] == "tradingcodex"
     assert 'TRADINGCODEX_UPDATE_SKIP_REFRESH="${TRADINGCODEX_UPDATE_SKIP_REFRESH:-0}"' in wrapper
+    assert 'if [ "${1:-}" = "update" ] && [ "${2:-}" = "status" ]; then' not in wrapper
     assert 'if [ "${1:-}" = "update" ] && [ "$TRADINGCODEX_UPDATE_SKIP_REFRESH" != "1" ] && command -v uvx >/dev/null 2>&1; then' in wrapper
     assert '"--skip-refresh"' in wrapper
     assert "  ./tcx doctor" in updated.stdout
@@ -4601,7 +4782,7 @@ def test_product_web_does_not_create_approvals_or_executions(monkeypatch) -> Non
     assert "Idea translated" in decision_body
     assert "candidate thesis" in decision_body
     assert "Portfolio fit" in decision_body
-    assert "Reviews the business, financial drivers" in decision_body
+    assert "Reviews the business, financial drivers" not in decision_body
     assert "workflow reaches portfolio/order readiness" in decision_body
     assert "Next allowed actions" in decision_body
     assert "Answer missing profile questions" in decision_body

{tradingcodex-0.3.2 → tradingcodex-0.3.3}/tradingcodex.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tradingcodex
-Version: 0.3.2
+Version: 0.3.3
 Summary: Agentic investment workflow harness for Codex-native research and service-gated execution checks.
 Author: TradingCodex Authors
 License-Expression: Apache-2.0
@@ -229,7 +229,7 @@ provide investment recommendations or guarantee returns.
 | Status | Milestone |
 | --- | --- |
 | Shipped | Generated Codex workspace, fixed role roster, project MCP config, Django service plane, local web dashboard, Admin, Ninja API, file-native research memory, component registry, policy/audit primitives. |
-| Current `0.3.2` | Brief research chat replies with saved head-manager synthesis reports, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
+| Current `0.3.3` | Flexible package/workspace update status, skipped-version Django migration smoke coverage, brief research chat replies with saved head-manager synthesis reports, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
 | Next | Deeper validation scenarios, richer provider capability profiles, stronger generated-workspace smoke coverage, and improved artifact quality tooling. |
 | Future | Separately governed verified adapters, hosted/managed services, enterprise policy/compliance packs, and broker-specific live providers only after explicit product, policy, adapter, and validation work. |
 

{tradingcodex-0.3.2 → tradingcodex-0.3.3}/tradingcodex_cli/commands/bootstrap.py

@@ -115,7 +115,7 @@ def update_status(argv: list[str]) -> None:
     parser.add_argument("project_dir", nargs="?", default=".")
     args = parser.parse_args(argv)
     root = configure_workspace_env(Path(args.project_dir).resolve(), force=True)
-    status = build_update_status(root)
+    status = build_update_status(root, check_latest_release=True)
     if args.json:
         print_json(status)
         return

{tradingcodex-0.3.2 → tradingcodex-0.3.3}/tradingcodex_cli/service_autostart.py

@@ -3,6 +3,8 @@ from __future__ import annotations
 import os
 import json
 import signal
+import re
+import shlex
 import socket
 import subprocess
 import sys
@@ -111,7 +113,7 @@ def service_status(addr: str = DEFAULT_SERVICE_ADDR) -> dict:
     })
     if status["version"] != TRADINGCODEX_VERSION:
         status["issue"] = "version_mismatch"
-        status["next_action"] = f"Run `tcx service stop {normalized_addr}` and then restart Codex if MCP uses the default address."
+        status["next_action"] = _version_mismatch_next_action(status["version"], normalized_addr)
         return status
     if status["db_path"] and status["db_path"] != current_db:
         status["issue"] = "db_mismatch"
@@ -179,7 +181,7 @@ def _replace_stale_tradingcodex_service_or_raise(host: str, port: int, *, timeou
     service_db = str(health.get("db_path") or "")
     if (
         health.get("service") == "tradingcodex"
-        and health.get("version") != TRADINGCODEX_VERSION
+        and _version_less_than(str(health.get("version") or ""), TRADINGCODEX_VERSION)
         and (not service_db or service_db == str(tradingcodex_db_path()))
     ):
         stop_service(f"{host}:{port}", timeout=max(1.0, min(timeout, 5.0)))
@@ -198,8 +200,7 @@ def _assert_compatible_service(host: str, port: int) -> None:
     if health.get("version") != TRADINGCODEX_VERSION:
         raise RuntimeError(
             f"TradingCodex service version mismatch: service={health.get('version')} package={TRADINGCODEX_VERSION}. "
-            f"Run `tcx service stop {addr}` or choose a free service address, "
-            "then fully restart Codex if project MCP uses the default address."
+            f"{_version_mismatch_next_action(str(health.get('version') or ''), addr)}"
         )
     service_db = str(health.get("db_path") or "")
     current_db = str(tradingcodex_db_path())
@@ -237,3 +238,26 @@ def _service_pids(host: str, port: int, health: dict) -> list[int]:
     except Exception:
         pass
     return sorted(pids)
+
+
+def _version_mismatch_next_action(service_version: str, addr: str) -> str:
+    if _version_less_than(TRADINGCODEX_VERSION, service_version):
+        package_spec = shlex.quote(os.environ.get("TRADINGCODEX_MCP_PACKAGE_SPEC", "tradingcodex"))
+        return f"Run `uvx --refresh --from {package_spec} tcx update .`, then fully restart Codex so MCP reloads the refreshed package."
+    return f"Run `tcx service stop {addr}` and then restart Codex if MCP uses the default address."
+
+
+def _version_less_than(left: str, right: str) -> bool:
+    left_key = _release_version_key(left)
+    right_key = _release_version_key(right)
+    if not left_key or not right_key:
+        return False
+    length = max(len(left_key), len(right_key))
+    return left_key + (0,) * (length - len(left_key)) < right_key + (0,) * (length - len(right_key))
+
+
+def _release_version_key(version: str) -> tuple[int, ...]:
+    match = re.match(r"^\s*(\d+(?:\.\d+)*)", version)
+    if not match:
+        return ()
+    return tuple(int(part) for part in match.group(1).split("."))

{tradingcodex-0.3.2 → tradingcodex-0.3.3}/tradingcodex_cli/startup_status.py

@@ -28,8 +28,14 @@ def build_server_status(workspace_root: Path | str, addr: str | None = None) ->
     health_url = f"{dashboard_url.rstrip('/')}/api/health"
     permission_status = detect_codex_permission_status(root)
     mode_status = get_runtime_mode_status(root, full_access_detected=permission_status["full_access_detected"])
-    update_status = build_update_status(root, permission_status=permission_status, mode_status=mode_status)
     service_detail = inspect_service_status(service_addr)
+    latest_version_hint = _latest_version_hint_from_service(service_detail)
+    update_status = build_update_status(
+        root,
+        permission_status=permission_status,
+        mode_status=mode_status,
+        latest_version_hint=latest_version_hint,
+    )
     health = _read_health(health_url) if service_detail.get("reachable") else {}
     service_state = _service_state_from_detail(service_detail)
     mcp_config_present = _is_project_mcp_config_present(root)
@@ -121,6 +127,8 @@ def build_update_status(
     *,
     permission_status: dict[str, Any] | None = None,
     mode_status: dict[str, Any] | None = None,
+    check_latest_release: bool = False,
+    latest_version_hint: str = "",
 ) -> dict[str, Any]:
     root = Path(workspace_root).expanduser().resolve()
     permission_status = permission_status or detect_codex_permission_status(root)
@@ -134,8 +142,21 @@ def build_update_status(
     suppressed = bool(preferences.get("suppress_update_recommendation"))
     versions_match = workspace_version == installed_version
     workspace_update_available = workspace_version not in {"", "unknown"} and not versions_match
-    if workspace_update_available:
+    latest_version_hint = latest_version_hint.strip()
+    if workspace_update_available or check_latest_release:
         latest = latest_release_info()
+        if latest["latest_release_status"] != "ok" and latest_version_hint and version_less_than(installed_version, latest_version_hint):
+            latest = {
+                "latest_release_version": latest_version_hint,
+                "latest_release_status": "ok",
+                "latest_release_source": "service_status",
+            }
+    elif latest_version_hint and version_less_than(installed_version, latest_version_hint):
+        latest = {
+            "latest_release_version": latest_version_hint,
+            "latest_release_status": "ok",
+            "latest_release_source": "service_status",
+        }
     else:
         latest = {
             "latest_release_version": "not_checked",
@@ -145,14 +166,15 @@ def build_update_status(
     latest_version = latest["latest_release_version"]
     latest_status = latest["latest_release_status"]
     installed_release_is_stale = latest_status == "ok" and version_less_than(installed_version, latest_version)
-    package_update_required_first = workspace_update_available and installed_release_is_stale
+    package_update_required = installed_release_is_stale
+    package_update_required_first = package_update_required
     workspace_update_allowed = workspace_update_available and not package_update_required_first
     workspace_update_recommended = workspace_update_allowed and not suppressed
-    blocked_reason = "installed tcx is older than the latest release; update the package before refreshing this workspace" if package_update_required_first else ""
+    blocked_reason = "installed tcx is older than the latest release; update the package before refreshing this workspace" if package_update_required else ""
     workspace_update_command = "./tcx update --skip-refresh"
     update_available = workspace_update_available or installed_release_is_stale
     user_update_command = f"uvx --refresh --from {shlex.quote(package_spec)} tcx update ."
-    self_update_command = user_update_command if package_update_required_first else workspace_update_command
+    self_update_command = user_update_command if package_update_required else workspace_update_command
     can_self_update = bool(update_available and mode_status.get("build_enabled"))
     head_manager_update_allowed = can_self_update
     head_manager_update_command = self_update_command if can_self_update else ""
@@ -162,7 +184,7 @@ def build_update_status(
         head_manager_update_blocked_reason = "package refresh must run outside restricted Codex permissions or inside build mode with full access"
     else:
         head_manager_update_blocked_reason = ""
-    if package_update_required_first:
+    if package_update_required:
         recommended_action = f"Use build mode with full access for self-update, or ask the user to run from a terminal: {user_update_command}"
     elif workspace_update_recommended:
         recommended_action = f"Use build mode with full access for self-update, or ask the user to run from a terminal: {workspace_update_command}"
@@ -183,7 +205,7 @@ def build_update_status(
         "workspace_update_required": workspace_update_available,
         "workspace_update_allowed": workspace_update_allowed,
         "workspace_update_recommended": workspace_update_recommended,
-        "package_update_required": package_update_required_first,
+        "package_update_required": package_update_required,
         "package_update_required_first": package_update_required_first,
         "workspace_update_command": workspace_update_command,
         "command": self_update_command,
@@ -320,6 +342,16 @@ def build_startup_notice(*, service_detail: dict[str, Any], service_status: str)
     return next_action
 
 
+def _latest_version_hint_from_service(service_detail: dict[str, Any]) -> str:
+    if service_detail.get("service") != "tradingcodex":
+        return ""
+    service_db = str(service_detail.get("db_path") or "")
+    expected_db = str(service_detail.get("expected_db_path") or tradingcodex_db_path())
+    if service_db and service_db != expected_db:
+        return ""
+    return str(service_detail.get("version") or "")
+
+
 def latest_release_info() -> dict[str, str]:
     override = os.environ.get("TRADINGCODEX_LATEST_RELEASE_VERSION", "").strip()
     if override:

{tradingcodex-0.3.2 → tradingcodex-0.3.3}/tradingcodex_service/mcp_runtime.py

@@ -914,7 +914,7 @@ def raw_call_tool(workspace_root: Path | str, tool: McpToolSpec, args: dict[str,
     def get_update_status() -> dict[str, Any]:
         from tradingcodex_cli.startup_status import build_update_status
 
-        return build_update_status(workspace_root)
+        return build_update_status(workspace_root, check_latest_release=True)
 
     with_principal = {**args, "principal_id": principal_id}
     handlers: dict[str, Callable[[], dict[str, Any]]] = {