tradingcodex 0.3.4__tar.gz → 0.3.5__tar.gz

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tradingcodex
-Version: 0.3.4
+Version: 0.3.5
 Summary: Agentic investment workflow harness for Codex-native research and service-gated execution checks.
 Author: TradingCodex Authors
 License-Expression: Apache-2.0
@@ -229,7 +229,7 @@ provide investment recommendations or guarantee returns.
 | Status | Milestone |
 | --- | --- |
 | Shipped | Generated Codex workspace, fixed role roster, project MCP config, Django service plane, local web dashboard, Admin, Ninja API, file-native research memory, component registry, policy/audit primitives. |
-| Current `0.3.4` | Build Center customization, Codex MCP discovery/import, external MCP permission approval UX, head-manager research synthesis depth, flexible package/workspace update status, skipped-version Django migration smoke coverage, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
+| Current `0.3.5` | Safe TradingCodex MCP tools auto-approved for subagents, execution tools hidden outside `execution-operator`, Build Center customization, Codex MCP discovery/import, external MCP permission approval UX, head-manager research synthesis depth, flexible package/workspace update status, skipped-version Django migration smoke coverage, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
 | Next | Deeper validation scenarios, richer provider capability profiles, stronger generated-workspace smoke coverage, and improved artifact quality tooling. |
 | Future | Separately governed verified adapters, hosted/managed services, enterprise policy/compliance packs, and broker-specific live providers only after explicit product, policy, adapter, and validation work. |
 

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/README.md

@@ -198,7 +198,7 @@ provide investment recommendations or guarantee returns.
 | Status | Milestone |
 | --- | --- |
 | Shipped | Generated Codex workspace, fixed role roster, project MCP config, Django service plane, local web dashboard, Admin, Ninja API, file-native research memory, component registry, policy/audit primitives. |
-| Current `0.3.4` | Build Center customization, Codex MCP discovery/import, external MCP permission approval UX, head-manager research synthesis depth, flexible package/workspace update status, skipped-version Django migration smoke coverage, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
+| Current `0.3.5` | Safe TradingCodex MCP tools auto-approved for subagents, execution tools hidden outside `execution-operator`, Build Center customization, Codex MCP discovery/import, external MCP permission approval UX, head-manager research synthesis depth, flexible package/workspace update status, skipped-version Django migration smoke coverage, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
 | Next | Deeper validation scenarios, richer provider capability profiles, stronger generated-workspace smoke coverage, and improved artifact quality tooling. |
 | Future | Separately governed verified adapters, hosted/managed services, enterprise policy/compliance packs, and broker-specific live providers only after explicit product, policy, adapter, and validation work. |
 

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/docs/deployment.md

@@ -143,7 +143,7 @@ After the PyPI workflow completes:
 
 ```bash
 python3.11 -m venv /tmp/tcx-pypi
-/tmp/tcx-pypi/bin/pip install tradingcodex==0.3.4
+/tmp/tcx-pypi/bin/pip install tradingcodex==0.3.5
 rm -rf /tmp/tcx-pypi-smoke
 mkdir -p /tmp/tcx-pypi-smoke
 cd /tmp/tcx-pypi-smoke
@@ -250,7 +250,10 @@ Use PEP 440 versions:
 - `0.3.4` for Build Center customization, Codex MCP discovery/import, external
   MCP permission approval UX, and head-manager research synthesis depth after
   `0.3.3`
-- later patch releases for compatible fixes after `0.3.4`
+- `0.3.5` for safe built-in TradingCodex MCP auto-approval, execution-tool
+  hiding outside `execution-operator`, and service-gated execution UX after
+  `0.3.4`
+- later patch releases for compatible fixes after `0.3.5`
 - pre-releases such as `0.4.0a1`, `0.4.0b1`, or `0.4.0rc1` when preparing
   the next minor contract
 

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/docs/generated-workspaces.md

@@ -281,6 +281,14 @@ The config follows the OpenAI Codex MCP shape:
 - `startup_timeout_sec`
 - `tool_timeout_sec`
 
+The built-in `tradingcodex` MCP server defaults safe enabled tools to
+`approve` so routine research, audit, status, and reviewed service calls do not
+bury Codex permission prompts inside subagent transcripts. Execution-sensitive
+tools remain excluded from non-execution roles; `execution-operator` exposes
+only the TradingCodex approved-order submit/cancel tools, and the service layer
+still revalidates permission, policy, approval, duplicate-request state,
+connection, and audit before any adapter call.
+
 Project-scoped Codex config applies only when the generated workspace is
 trusted by Codex.
 
@@ -298,6 +306,8 @@ Generated permission profiles allow network access for public evidence
 gathering, such as filings, disclosures, news, web sources, and market-data
 references. They still deny workspace secret paths and do not authorize direct
 broker APIs, broker-specific Codex MCP servers, approval bypass, or execution.
+Managed external Codex MCP entries written through `tcx build codex-mcp add`
+default to `prompt`; import them into the External MCP Gate before use.
 Broker APIs are attached through provider-driven TradingCodex connector profiles
 using canonical MCP tools such as `list_broker_adapter_providers`,
 `scaffold_broker_connector`, `register_broker_connector`,

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/docs/safety-policy-and-execution.md

@@ -137,6 +137,12 @@ External MCP permission is not execution authorization. Even if an external
 broker order tool is present and reviewed, order submission must still pass the
 TradingCodex order-ticket, approval, duplicate-request, connection, and audit lifecycle.
 
+The built-in TradingCodex MCP server auto-approves safe enabled tools to avoid
+buried subagent prompts for routine research and audit writes. Execution
+submission and cancellation are the exception: non-execution roles do not see
+those tools, and `execution-operator` can only submit or cancel through
+TradingCodex service-layer checks.
+
 Reviewed external MCP calls that expose private account state, write research
 state, use workflow prompts, or map to execution require an explicit user
 permission request before proxy evaluation returns `allow`. The request is

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "tradingcodex"
-version = "0.3.4"
+version = "0.3.5"
 description = "Agentic investment workflow harness for Codex-native research and service-gated execution checks."
 readme = "README.md"
 requires-python = ">=3.11,<3.15"

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/tests/test_python_migration.py

@@ -1355,7 +1355,9 @@ def test_python_generator_creates_workspace_contract(tmp_path: Path) -> None:
     assert "TradingCodex doctor passed" in doctor
     assert "improvement" in doctor
     assert "TradingCodex MCP autostarts local service" in doctor
+    assert "TradingCodex MCP safe tools auto-approved" in doctor
     assert "head-manager MCP execution submit excluded" in doctor
+    assert "non-execution roles block execution MCP tools" in doctor
     assert "execution-operator MCP execution allowlist configured" in doctor
     assert "risk-manager MCP approval allowlist configured" in doctor
     improvement_doctor = run(["./tcx", "doctor", "--layer", "improvement"], workspace).stdout
@@ -1482,6 +1484,7 @@ def test_python_generator_creates_workspace_contract(tmp_path: Path) -> None:
     assert root_mcp["command"] == "uvx"
     assert root_mcp["args"] == expected_tcx_mcp_args
     assert root_mcp["enabled"] is True
+    assert root_mcp["default_tools_approval_mode"] == "approve"
     assert root_mcp["env"]["TRADINGCODEX_MCP_AUTOSTART_SERVICE"] == "1"
     assert root_mcp["env"]["TRADINGCODEX_SERVICE_ADDR"] == "127.0.0.1:48267"
     assert root_mcp["env"]["TRADINGCODEX_WORKSPACE_ROOT"] == str(workspace)
@@ -1510,6 +1513,7 @@ def test_python_generator_creates_workspace_contract(tmp_path: Path) -> None:
     assert "preview_order_translation" in root_mcp["enabled_tools"]
     assert "submit_approved_order" not in root_mcp["enabled_tools"]
     assert "cancel_approved_order" not in root_mcp["enabled_tools"]
+    sensitive_execution_tools = {"submit_approved_order", "cancel_approved_order"}
     for agent_file in agent_files:
         agent_config = agent_file.read_text(encoding="utf-8")
         agent_toml = tomllib.loads(agent_config)
@@ -1527,6 +1531,7 @@ def test_python_generator_creates_workspace_contract(tmp_path: Path) -> None:
         agent_mcp = agent_toml["mcp_servers"]["tradingcodex"]
         assert agent_mcp["command"] == "uvx"
         assert agent_mcp["args"] == expected_tcx_mcp_args
+        assert agent_mcp["default_tools_approval_mode"] == "approve"
         assert agent_mcp["env"]["TRADINGCODEX_MCP_AUTOSTART_SERVICE"] == "1"
         assert agent_mcp["env"]["TRADINGCODEX_WORKSPACE_ROOT"] == str(workspace)
         configured_tools = set(agent_mcp.get("enabled_tools", [])) | set(agent_mcp.get("disabled_tools", []))
@@ -1543,8 +1548,12 @@ def test_python_generator_creates_workspace_contract(tmp_path: Path) -> None:
             assert "create_order_ticket" not in agent_mcp["enabled_tools"]
         if agent_file.stem == "execution-operator":
             assert "submit_approved_order" in agent_mcp["enabled_tools"]
+            assert "cancel_approved_order" in agent_mcp["enabled_tools"]
             assert "request_order_approval" not in agent_mcp["enabled_tools"]
             assert {"place_order", "replace_order", "withdraw"}.isdisjoint(set(agent_mcp["enabled_tools"]))
+        else:
+            assert sensitive_execution_tools.isdisjoint(set(agent_mcp["enabled_tools"]))
+            assert sensitive_execution_tools.issubset(set(agent_mcp.get("disabled_tools", [])))
     assert run(["./tcx", "skills", "list"], workspace).stdout.splitlines() == [
         "plan-workflow",
         "tcx-workflow",
@@ -3740,6 +3749,7 @@ env = { TOKEN = "also-hidden" }
     assert "[mcp_servers.managed_one]" in text
     assert "[mcp_servers.managed_two]" in text
     assert "MANAGED_KEY" in text
+    assert 'default_tools_approval_mode = "prompt"' in text
 
     with pytest.raises(ValueError, match="outside TradingCodex managed block"):
         write_codex_mcp_server_config(workspace, name="user_mcp", command="uvx", full_access_detected=True)
@@ -3780,6 +3790,7 @@ def test_tcx_build_cli_status_and_codex_mcp_dry_run(tmp_path: Path) -> None:
     )
     assert dry_run["status"] == "dry_run"
     assert "[mcp_servers.cli_mcp]" in dry_run["preview"]
+    assert 'default_tools_approval_mode = "prompt"' in dry_run["preview"]
 
     run([sys.executable, "-m", "tradingcodex_cli", "mode", "set", "build", "--reason", "cli build smoke"], workspace, env_extra=env_extra)
     status = json.loads(run([sys.executable, "-m", "tradingcodex_cli", "build", "status", "--json"], workspace, env_extra=env_extra).stdout)

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/tradingcodex.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tradingcodex
-Version: 0.3.4
+Version: 0.3.5
 Summary: Agentic investment workflow harness for Codex-native research and service-gated execution checks.
 Author: TradingCodex Authors
 License-Expression: Apache-2.0
@@ -229,7 +229,7 @@ provide investment recommendations or guarantee returns.
 | Status | Milestone |
 | --- | --- |
 | Shipped | Generated Codex workspace, fixed role roster, project MCP config, Django service plane, local web dashboard, Admin, Ninja API, file-native research memory, component registry, policy/audit primitives. |
-| Current `0.3.4` | Build Center customization, Codex MCP discovery/import, external MCP permission approval UX, head-manager research synthesis depth, flexible package/workspace update status, skipped-version Django migration smoke coverage, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
+| Current `0.3.5` | Safe TradingCodex MCP tools auto-approved for subagents, execution tools hidden outside `execution-operator`, Build Center customization, Codex MCP discovery/import, external MCP permission approval UX, head-manager research synthesis depth, flexible package/workspace update status, skipped-version Django migration smoke coverage, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
 | Next | Deeper validation scenarios, richer provider capability profiles, stronger generated-workspace smoke coverage, and improved artifact quality tooling. |
 | Future | Separately governed verified adapters, hosted/managed services, enterprise policy/compliance packs, and broker-specific live providers only after explicit product, policy, adapter, and validation work. |
 

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/tradingcodex_cli/commands/doctor.py

@@ -128,6 +128,15 @@ def _codex_mcp_config_checks(root: Path) -> list[dict[str, Any]]:
     root_tools = set(root_mcp.get("enabled_tools") or [])
     execution_tools = set(execution_mcp.get("enabled_tools") or [])
     risk_tools = set(risk_mcp.get("enabled_tools") or [])
+    sensitive_execution_tools = {"submit_approved_order", "cancel_approved_order"}
+    non_execution_exposure = []
+    for agent_path in sorted((root / ".codex" / "agents").glob("*.toml")):
+        if agent_path.stem == "execution-operator":
+            continue
+        enabled = set((_read_codex_mcp_config(agent_path).get("enabled_tools") or []))
+        exposed = sensitive_execution_tools & enabled
+        if exposed:
+            non_execution_exposure.append(f"{agent_path.stem}: {', '.join(sorted(exposed))}")
     raw_broker_tools = {"place_order", "replace_order", "cancel_order", "withdraw", "transfer"}
     broker_connector_tools = {
         "list_broker_adapter_providers",
@@ -153,6 +162,13 @@ def _codex_mcp_config_checks(root: Path) -> list[dict[str, Any]]:
             "codexNative": True,
             "detail": "MCP env enables dashboard/service autostart" if root_mcp.get("env", {}).get("TRADINGCODEX_MCP_AUTOSTART_SERVICE") == "1" else "missing TRADINGCODEX_MCP_AUTOSTART_SERVICE=1",
         },
+        {
+            "layer": "enforcement",
+            "name": "TradingCodex MCP safe tools auto-approved",
+            "ok": root_mcp.get("default_tools_approval_mode") == "approve",
+            "codexNative": True,
+            "detail": "default tool approval is approve" if root_mcp.get("default_tools_approval_mode") == "approve" else "default tool approval should be approve",
+        },
         {
             "layer": "enforcement",
             "name": "head-manager MCP execution submit excluded",
@@ -181,6 +197,13 @@ def _codex_mcp_config_checks(root: Path) -> list[dict[str, Any]]:
             "codexNative": True,
             "detail": "execution-operator allowlist includes submit_approved_order" if "submit_approved_order" in execution_tools else "missing submit_approved_order",
         },
+        {
+            "layer": "enforcement",
+            "name": "non-execution roles block execution MCP tools",
+            "ok": not non_execution_exposure,
+            "codexNative": True,
+            "detail": "submit/cancel disabled outside execution-operator" if not non_execution_exposure else "; ".join(non_execution_exposure),
+        },
         {
             "layer": "enforcement",
             "name": "execution-operator raw broker MCP tools excluded",

tradingcodex-0.3.5/tradingcodex_service/version.py

@@ -0,0 +1 @@
+TRADINGCODEX_VERSION = "0.3.5"

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/workspace_templates/modules/codex-base/files/.codex/config.toml

@@ -345,7 +345,7 @@ enabled_tools = [
   "review_external_mcp_tool",
   "record_audit_event"
 ]
-default_tools_approval_mode = "prompt"
+default_tools_approval_mode = "approve"
 startup_timeout_sec = 20
 tool_timeout_sec = 30
 

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/workspace_templates/modules/fixed-subagents/files/.codex/agents/execution-operator.toml

@@ -68,7 +68,4 @@ enabled_tools = [
   "list_workflow_artifacts",
   "record_audit_event"
 ]
-default_tools_approval_mode = "prompt"
-
-[mcp_servers.tradingcodex.tools.submit_approved_order]
-approval_mode = "prompt"
+default_tools_approval_mode = "approve"

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/workspace_templates/modules/fixed-subagents/files/.codex/agents/fundamental-analyst.toml

@@ -53,3 +53,4 @@ enabled = true
 env = { TRADINGCODEX_MCP_AUTOSTART_SERVICE = "1", TRADINGCODEX_SERVICE_ADDR = "127.0.0.1:48267", TRADINGCODEX_WORKSPACE_ROOT = "{{PROJECT_DIR}}" }
 enabled_tools = ["list_workflow_artifacts", "create_research_artifact", "get_research_artifact", "list_research_artifacts", "search_research_artifacts", "append_research_artifact_version", "export_research_artifact_md", "record_source_snapshot", "record_audit_event"]
 disabled_tools = ["run_order_checks", "validate_approval_receipt", "request_order_approval", "submit_approved_order", "cancel_approved_order", "get_order_status", "get_positions", "get_portfolio_snapshot"]
+default_tools_approval_mode = "approve"

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/workspace_templates/modules/fixed-subagents/files/.codex/agents/instrument-analyst.toml

@@ -55,3 +55,4 @@ enabled = true
 env = { TRADINGCODEX_MCP_AUTOSTART_SERVICE = "1", TRADINGCODEX_SERVICE_ADDR = "127.0.0.1:48267", TRADINGCODEX_WORKSPACE_ROOT = "{{PROJECT_DIR}}" }
 enabled_tools = ["list_workflow_artifacts", "create_research_artifact", "get_research_artifact", "list_research_artifacts", "search_research_artifacts", "append_research_artifact_version", "export_research_artifact_md", "record_source_snapshot", "get_broker_instrument_constraints", "record_audit_event"]
 disabled_tools = ["run_order_checks", "validate_approval_receipt", "request_order_approval", "submit_approved_order", "cancel_approved_order", "get_order_status", "get_positions", "get_portfolio_snapshot"]
+default_tools_approval_mode = "approve"

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/workspace_templates/modules/fixed-subagents/files/.codex/agents/judgment-reviewer.toml

@@ -49,3 +49,4 @@ enabled = true
 env = { TRADINGCODEX_MCP_AUTOSTART_SERVICE = "1", TRADINGCODEX_SERVICE_ADDR = "127.0.0.1:48267", TRADINGCODEX_WORKSPACE_ROOT = "{{PROJECT_DIR}}" }
 enabled_tools = ["list_workflow_artifacts", "create_research_artifact", "get_research_artifact", "list_research_artifacts", "search_research_artifacts", "append_research_artifact_version", "export_research_artifact_md", "record_audit_event"]
 disabled_tools = ["simulate_policy", "run_order_checks", "validate_approval_receipt", "request_order_approval", "submit_approved_order", "cancel_approved_order", "get_order_status", "get_positions", "get_portfolio_snapshot"]
+default_tools_approval_mode = "approve"

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/workspace_templates/modules/fixed-subagents/files/.codex/agents/macro-analyst.toml

@@ -55,3 +55,4 @@ enabled = true
 env = { TRADINGCODEX_MCP_AUTOSTART_SERVICE = "1", TRADINGCODEX_SERVICE_ADDR = "127.0.0.1:48267", TRADINGCODEX_WORKSPACE_ROOT = "{{PROJECT_DIR}}" }
 enabled_tools = ["list_workflow_artifacts", "create_research_artifact", "get_research_artifact", "list_research_artifacts", "search_research_artifacts", "append_research_artifact_version", "export_research_artifact_md", "record_source_snapshot", "record_audit_event"]
 disabled_tools = ["run_order_checks", "validate_approval_receipt", "request_order_approval", "submit_approved_order", "cancel_approved_order", "get_order_status", "get_positions", "get_portfolio_snapshot"]
+default_tools_approval_mode = "approve"

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/workspace_templates/modules/fixed-subagents/files/.codex/agents/news-analyst.toml

@@ -54,3 +54,4 @@ enabled = true
 env = { TRADINGCODEX_MCP_AUTOSTART_SERVICE = "1", TRADINGCODEX_SERVICE_ADDR = "127.0.0.1:48267", TRADINGCODEX_WORKSPACE_ROOT = "{{PROJECT_DIR}}" }
 enabled_tools = ["list_workflow_artifacts", "create_research_artifact", "get_research_artifact", "list_research_artifacts", "search_research_artifacts", "append_research_artifact_version", "export_research_artifact_md", "record_source_snapshot", "record_audit_event"]
 disabled_tools = ["run_order_checks", "validate_approval_receipt", "request_order_approval", "submit_approved_order", "cancel_approved_order", "get_order_status", "get_positions", "get_portfolio_snapshot"]
+default_tools_approval_mode = "approve"

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/workspace_templates/modules/fixed-subagents/files/.codex/agents/portfolio-manager.toml

@@ -53,3 +53,4 @@ enabled = true
 env = { TRADINGCODEX_MCP_AUTOSTART_SERVICE = "1", TRADINGCODEX_SERVICE_ADDR = "127.0.0.1:48267", TRADINGCODEX_WORKSPACE_ROOT = "{{PROJECT_DIR}}" }
 enabled_tools = ["list_workflow_artifacts", "list_broker_connections", "get_broker_connection_status", "sync_broker_account", "list_reconciliation_runs", "get_positions", "get_portfolio_snapshot", "create_order_ticket", "run_order_checks", "get_order_ticket", "list_order_tickets", "record_audit_event"]
 disabled_tools = ["validate_approval_receipt", "request_order_approval", "submit_approved_order", "cancel_approved_order"]
+default_tools_approval_mode = "approve"

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/workspace_templates/modules/fixed-subagents/files/.codex/agents/risk-manager.toml

@@ -52,3 +52,4 @@ enabled = true
 env = { TRADINGCODEX_MCP_AUTOSTART_SERVICE = "1", TRADINGCODEX_SERVICE_ADDR = "127.0.0.1:48267", TRADINGCODEX_WORKSPACE_ROOT = "{{PROJECT_DIR}}" }
 enabled_tools = ["simulate_policy", "validate_approval_receipt", "list_broker_connections", "get_broker_connection_status", "list_reconciliation_runs", "get_positions", "get_portfolio_snapshot", "run_order_checks", "request_order_approval", "get_order_ticket", "list_order_tickets", "record_broker_mapping_review", "list_workflow_artifacts", "record_audit_event"]
 disabled_tools = ["submit_approved_order", "cancel_approved_order"]
+default_tools_approval_mode = "approve"

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/workspace_templates/modules/fixed-subagents/files/.codex/agents/technical-analyst.toml

@@ -54,3 +54,4 @@ enabled = true
 env = { TRADINGCODEX_MCP_AUTOSTART_SERVICE = "1", TRADINGCODEX_SERVICE_ADDR = "127.0.0.1:48267", TRADINGCODEX_WORKSPACE_ROOT = "{{PROJECT_DIR}}" }
 enabled_tools = ["list_workflow_artifacts", "create_research_artifact", "get_research_artifact", "list_research_artifacts", "search_research_artifacts", "append_research_artifact_version", "export_research_artifact_md", "record_source_snapshot", "record_audit_event"]
 disabled_tools = ["run_order_checks", "validate_approval_receipt", "request_order_approval", "submit_approved_order", "cancel_approved_order", "get_order_status", "get_positions", "get_portfolio_snapshot"]
+default_tools_approval_mode = "approve"

{tradingcodex-0.3.4 → tradingcodex-0.3.5}/workspace_templates/modules/fixed-subagents/files/.codex/agents/valuation-analyst.toml

@@ -54,3 +54,4 @@ enabled = true
 env = { TRADINGCODEX_MCP_AUTOSTART_SERVICE = "1", TRADINGCODEX_SERVICE_ADDR = "127.0.0.1:48267", TRADINGCODEX_WORKSPACE_ROOT = "{{PROJECT_DIR}}" }
 enabled_tools = ["list_workflow_artifacts", "create_research_artifact", "get_research_artifact", "list_research_artifacts", "search_research_artifacts", "append_research_artifact_version", "export_research_artifact_md", "record_source_snapshot", "record_audit_event"]
 disabled_tools = ["simulate_policy", "run_order_checks", "validate_approval_receipt", "request_order_approval", "submit_approved_order", "cancel_approved_order"]
+default_tools_approval_mode = "approve"

tradingcodex-0.3.4/tradingcodex_service/version.py

@@ -1 +0,0 @@
-TRADINGCODEX_VERSION = "0.3.4"