tradingcodex 0.3.4__tar.gz → 0.3.6__tar.gz

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tradingcodex
-Version: 0.3.4
+Version: 0.3.6
 Summary: Agentic investment workflow harness for Codex-native research and service-gated execution checks.
 Author: TradingCodex Authors
 License-Expression: Apache-2.0
@@ -229,7 +229,7 @@ provide investment recommendations or guarantee returns.
 | Status | Milestone |
 | --- | --- |
 | Shipped | Generated Codex workspace, fixed role roster, project MCP config, Django service plane, local web dashboard, Admin, Ninja API, file-native research memory, component registry, policy/audit primitives. |
-| Current `0.3.4` | Build Center customization, Codex MCP discovery/import, external MCP permission approval UX, head-manager research synthesis depth, flexible package/workspace update status, skipped-version Django migration smoke coverage, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
+| Current `0.3.6` | Reviewer follow-up loop fixes, duplicate pending-task protection, harness cleanup, safe TradingCodex MCP tools auto-approved for subagents, execution tools hidden outside `execution-operator`, Build Center customization, Codex MCP discovery/import, external MCP permission approval UX, head-manager research synthesis depth, flexible package/workspace update status, skipped-version Django migration smoke coverage, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
 | Next | Deeper validation scenarios, richer provider capability profiles, stronger generated-workspace smoke coverage, and improved artifact quality tooling. |
 | Future | Separately governed verified adapters, hosted/managed services, enterprise policy/compliance packs, and broker-specific live providers only after explicit product, policy, adapter, and validation work. |
 

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/README.md

@@ -198,7 +198,7 @@ provide investment recommendations or guarantee returns.
 | Status | Milestone |
 | --- | --- |
 | Shipped | Generated Codex workspace, fixed role roster, project MCP config, Django service plane, local web dashboard, Admin, Ninja API, file-native research memory, component registry, policy/audit primitives. |
-| Current `0.3.4` | Build Center customization, Codex MCP discovery/import, external MCP permission approval UX, head-manager research synthesis depth, flexible package/workspace update status, skipped-version Django migration smoke coverage, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
+| Current `0.3.6` | Reviewer follow-up loop fixes, duplicate pending-task protection, harness cleanup, safe TradingCodex MCP tools auto-approved for subagents, execution tools hidden outside `execution-operator`, Build Center customization, Codex MCP discovery/import, external MCP permission approval UX, head-manager research synthesis depth, flexible package/workspace update status, skipped-version Django migration smoke coverage, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
 | Next | Deeper validation scenarios, richer provider capability profiles, stronger generated-workspace smoke coverage, and improved artifact quality tooling. |
 | Future | Separately governed verified adapters, hosted/managed services, enterprise policy/compliance packs, and broker-specific live providers only after explicit product, policy, adapter, and validation work. |
 

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/docs/deployment.md

@@ -143,7 +143,7 @@ After the PyPI workflow completes:
 
 ```bash
 python3.11 -m venv /tmp/tcx-pypi
-/tmp/tcx-pypi/bin/pip install tradingcodex==0.3.4
+/tmp/tcx-pypi/bin/pip install tradingcodex==0.3.6
 rm -rf /tmp/tcx-pypi-smoke
 mkdir -p /tmp/tcx-pypi-smoke
 cd /tmp/tcx-pypi-smoke
@@ -250,7 +250,12 @@ Use PEP 440 versions:
 - `0.3.4` for Build Center customization, Codex MCP discovery/import, external
   MCP permission approval UX, and head-manager research synthesis depth after
   `0.3.3`
-- later patch releases for compatible fixes after `0.3.4`
+- `0.3.5` for safe built-in TradingCodex MCP auto-approval, execution-tool
+  hiding outside `execution-operator`, and service-gated execution UX after
+  `0.3.4`
+- `0.3.6` for reviewer follow-up loop fixes, duplicate pending-task protection,
+  and harness cleanup after `0.3.5`
+- later patch releases for compatible fixes after `0.3.6`
 - pre-releases such as `0.4.0a1`, `0.4.0b1`, or `0.4.0rc1` when preparing
   the next minor contract
 

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/docs/generated-workspaces.md

@@ -281,6 +281,14 @@ The config follows the OpenAI Codex MCP shape:
 - `startup_timeout_sec`
 - `tool_timeout_sec`
 
+The built-in `tradingcodex` MCP server defaults safe enabled tools to
+`approve` so routine research, audit, status, and reviewed service calls do not
+bury Codex permission prompts inside subagent transcripts. Execution-sensitive
+tools remain excluded from non-execution roles; `execution-operator` exposes
+only the TradingCodex approved-order submit/cancel tools, and the service layer
+still revalidates permission, policy, approval, duplicate-request state,
+connection, and audit before any adapter call.
+
 Project-scoped Codex config applies only when the generated workspace is
 trusted by Codex.
 
@@ -298,6 +306,8 @@ Generated permission profiles allow network access for public evidence
 gathering, such as filings, disclosures, news, web sources, and market-data
 references. They still deny workspace secret paths and do not authorize direct
 broker APIs, broker-specific Codex MCP servers, approval bypass, or execution.
+Managed external Codex MCP entries written through `tcx build codex-mcp add`
+default to `prompt`; import them into the External MCP Gate before use.
 Broker APIs are attached through provider-driven TradingCodex connector profiles
 using canonical MCP tools such as `list_broker_adapter_providers`,
 `scaffold_broker_connector`, `register_broker_connector`,
@@ -438,7 +448,6 @@ enforcement.
   route to the `connector_build` lane and `$tcx-build`, not investment
   thesis review; their workflow packages use workflow lifecycle and boundary
   sections rather than thesis lifecycle or portfolio/risk sections
-  dispatch
 - secret-only routing: credential, token, password, broker-key, or `.env`
   storage/read/rotation prompts create warning context without activating
   investment subagent dispatch unless a separate investment or execution

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/docs/safety-policy-and-execution.md

@@ -137,6 +137,12 @@ External MCP permission is not execution authorization. Even if an external
 broker order tool is present and reviewed, order submission must still pass the
 TradingCodex order-ticket, approval, duplicate-request, connection, and audit lifecycle.
 
+The built-in TradingCodex MCP server auto-approves safe enabled tools to avoid
+buried subagent prompts for routine research and audit writes. Execution
+submission and cancellation are the exception: non-execution roles do not see
+those tools, and `execution-operator` can only submit or cancel through
+TradingCodex service-layer checks.
+
 Reviewed external MCP calls that expose private account state, write research
 state, use workflow prompts, or map to execution require an explicit user
 permission request before proxy evaluation returns `allow`. The request is

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "tradingcodex"
-version = "0.3.4"
+version = "0.3.6"
 description = "Agentic investment workflow harness for Codex-native research and service-gated execution checks."
 readme = "README.md"
 requires-python = ">=3.11,<3.15"

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/tests/test_python_migration.py

@@ -36,14 +36,8 @@ from tradingcodex_service.application.harness import (
     get_harness_health,
     build_subagent_starter_prompt,
     build_workflow_intake_summary,
-    classify_starter_request,
     evaluate_artifact_supervisor_loop,
-    is_connector_build_request,
-    is_investment_workflow_request,
-    is_secret_only_request,
     list_workflow_improvements,
-    normalize_investment_intent,
-    plan_follow_up_request,
 )
 from tradingcodex_service.application.decision_packages import (
     build_workflow_plan,
@@ -59,6 +53,12 @@ from tradingcodex_service.application.workflow_planner import (
 )
 from tradingcodex_service.application.workflow_routing import (
     build_loop_exit_criteria,
+    classify_starter_request,
+    is_connector_build_request,
+    is_investment_workflow_request,
+    is_secret_only_request,
+    normalize_investment_intent,
+    plan_follow_up_request,
     selected_workflow_roles,
     workflow_plan_has_role,
 )
@@ -1355,7 +1355,9 @@ def test_python_generator_creates_workspace_contract(tmp_path: Path) -> None:
     assert "TradingCodex doctor passed" in doctor
     assert "improvement" in doctor
     assert "TradingCodex MCP autostarts local service" in doctor
+    assert "TradingCodex MCP safe tools auto-approved" in doctor
     assert "head-manager MCP execution submit excluded" in doctor
+    assert "non-execution roles block execution MCP tools" in doctor
     assert "execution-operator MCP execution allowlist configured" in doctor
     assert "risk-manager MCP approval allowlist configured" in doctor
     improvement_doctor = run(["./tcx", "doctor", "--layer", "improvement"], workspace).stdout
@@ -1482,6 +1484,7 @@ def test_python_generator_creates_workspace_contract(tmp_path: Path) -> None:
     assert root_mcp["command"] == "uvx"
     assert root_mcp["args"] == expected_tcx_mcp_args
     assert root_mcp["enabled"] is True
+    assert root_mcp["default_tools_approval_mode"] == "approve"
     assert root_mcp["env"]["TRADINGCODEX_MCP_AUTOSTART_SERVICE"] == "1"
     assert root_mcp["env"]["TRADINGCODEX_SERVICE_ADDR"] == "127.0.0.1:48267"
     assert root_mcp["env"]["TRADINGCODEX_WORKSPACE_ROOT"] == str(workspace)
@@ -1510,6 +1513,7 @@ def test_python_generator_creates_workspace_contract(tmp_path: Path) -> None:
     assert "preview_order_translation" in root_mcp["enabled_tools"]
     assert "submit_approved_order" not in root_mcp["enabled_tools"]
     assert "cancel_approved_order" not in root_mcp["enabled_tools"]
+    sensitive_execution_tools = {"submit_approved_order", "cancel_approved_order"}
     for agent_file in agent_files:
         agent_config = agent_file.read_text(encoding="utf-8")
         agent_toml = tomllib.loads(agent_config)
@@ -1527,6 +1531,7 @@ def test_python_generator_creates_workspace_contract(tmp_path: Path) -> None:
         agent_mcp = agent_toml["mcp_servers"]["tradingcodex"]
         assert agent_mcp["command"] == "uvx"
         assert agent_mcp["args"] == expected_tcx_mcp_args
+        assert agent_mcp["default_tools_approval_mode"] == "approve"
         assert agent_mcp["env"]["TRADINGCODEX_MCP_AUTOSTART_SERVICE"] == "1"
         assert agent_mcp["env"]["TRADINGCODEX_WORKSPACE_ROOT"] == str(workspace)
         configured_tools = set(agent_mcp.get("enabled_tools", [])) | set(agent_mcp.get("disabled_tools", []))
@@ -1543,8 +1548,12 @@ def test_python_generator_creates_workspace_contract(tmp_path: Path) -> None:
             assert "create_order_ticket" not in agent_mcp["enabled_tools"]
         if agent_file.stem == "execution-operator":
             assert "submit_approved_order" in agent_mcp["enabled_tools"]
+            assert "cancel_approved_order" in agent_mcp["enabled_tools"]
             assert "request_order_approval" not in agent_mcp["enabled_tools"]
             assert {"place_order", "replace_order", "withdraw"}.isdisjoint(set(agent_mcp["enabled_tools"]))
+        else:
+            assert sensitive_execution_tools.isdisjoint(set(agent_mcp["enabled_tools"]))
+            assert sensitive_execution_tools.issubset(set(agent_mcp.get("disabled_tools", [])))
     assert run(["./tcx", "skills", "list"], workspace).stdout.splitlines() == [
         "plan-workflow",
         "tcx-workflow",
@@ -2333,9 +2342,44 @@ def test_dynamic_workflow_plan_validation_and_recording(tmp_path: Path) -> None:
     loop_state = json.loads((workspace / result["loop_state_path"]).read_text(encoding="utf-8"))
     assert loop_state["state_mode"] == "validated_dynamic_workflow_plan"
     assert loop_state["pending_tasks"][0]["status"] == "pending"
+    assert loop_state["pending_tasks"][0]["active_roles"] == []
+    assert loop_state["pending_tasks"][0]["completed_roles"] == []
     latest_loop_state = json.loads((workspace / ".tradingcodex/mainagent/workflow-loop-state.json").read_text(encoding="utf-8"))
     assert latest_loop_state["selected_team"] == loop_state["selected_team"]
     assert latest_loop_state["allowed_followup_team"] == loop_state["allowed_followup_team"]
+
+    hook = workspace / ".codex" / "hooks" / "tradingcodex_hook.py"
+    for event, role in (
+        ("subagent-start", "fundamental-analyst"),
+        ("subagent-stop", "fundamental-analyst"),
+    ):
+        run(
+            [sys.executable, str(hook), event],
+            workspace,
+            input_text=json.dumps({"workflow_run_id": preview["workflow_run_id"], "agent_type": role, "task_name": f"{role} evidence"}),
+        )
+    partial_state = json.loads((workspace / result["loop_state_path"]).read_text(encoding="utf-8"))
+    evidence_task = next(task for task in partial_state["pending_tasks"] if task["stage_id"] == "evidence")
+    judgment_task = next(task for task in partial_state["pending_tasks"] if task["stage_id"] == "judgment_review")
+    assert evidence_task["status"] == "active"
+    assert evidence_task["completed_roles"] == ["fundamental-analyst"]
+    assert evidence_task["active_roles"] == []
+    assert judgment_task["status"] == "blocked_by_dependency"
+
+    for role in ("technical-analyst", "news-analyst"):
+        for event in ("subagent-start", "subagent-stop"):
+            run(
+                [sys.executable, str(hook), event],
+                workspace,
+                input_text=json.dumps({"workflow_run_id": preview["workflow_run_id"], "agent_type": role, "task_name": f"{role} evidence"}),
+            )
+    complete_state = json.loads((workspace / result["loop_state_path"]).read_text(encoding="utf-8"))
+    evidence_task = next(task for task in complete_state["pending_tasks"] if task["stage_id"] == "evidence")
+    judgment_task = next(task for task in complete_state["pending_tasks"] if task["stage_id"] == "judgment_review")
+    assert evidence_task["status"] == "completed"
+    assert evidence_task["completed_roles"] == ["fundamental-analyst", "technical-analyst", "news-analyst"]
+    assert judgment_task["status"] == "pending"
+
     dict_role_plan = {
         **preview,
         "workflow_run_id": preview["workflow_run_id"] + "-dict-role",
@@ -2918,7 +2962,18 @@ improvements:
     assert listed_improvements["index_path"] == ".tradingcodex/mainagent/improve-index.json"
     assert listed_improvements["index_status"] == "current"
     assert listed_improvements["summary"]["by_type"]["valuation_sensitivity"] == 1
+    queued_task_ids = [
+        task["task_id"]
+        for task in recorded_state["pending_tasks"]
+        if task.get("task_type") == "artifact_follow_up"
+    ]
     evaluate_artifact_supervisor_loop(workspace, request, ["trading/reports/news/nvda-news.md"], record=True)
+    recorded_again_state = json.loads((workspace / ".tradingcodex" / "mainagent" / "workflow-loop-state.json").read_text(encoding="utf-8"))
+    assert [
+        task["task_id"]
+        for task in recorded_again_state["pending_tasks"]
+        if task.get("task_type") == "artifact_follow_up"
+    ] == queued_task_ids
     listed_again = json.loads(run(["./tcx", "workflow", "improve"], workspace).stdout)
     assert listed_again["improvement_count"] == listed_improvements["improvement_count"]
     improve_index.unlink()
@@ -2979,6 +3034,50 @@ improvements:
     assert revise_loop["pending_tasks"][0]["planner_action"] == "revise_same_role"
     assert revise_loop["pending_tasks"][0]["role"] == "news-analyst"
 
+    judgment_artifact = workspace / "trading" / "reports" / "judgment" / "nvda-judgment.md"
+    judgment_artifact.parent.mkdir(parents=True, exist_ok=True)
+    judgment_artifact.write_text(
+        """---
+artifact_id: nvda-judgment
+artifact_type: judgment_review
+role: judgment-reviewer
+title: NVDA judgment review
+source_as_of: "2026-06-30"
+readiness_label: needs-news-revision
+context_summary: Reviewer found a source freshness gap owned by news.
+reader_summary: Judgment review asks news to refresh one evidence point.
+next_action: Ask news to refresh the source timestamp before synthesis.
+handoff_state: revise
+confidence: medium
+next_recipient: news-analyst
+missing_evidence: [refreshed news source timestamp]
+blocked_actions: [synthesis]
+source_snapshot_ids: [judgment-source-001]
+follow_up_requests:
+  - trigger: freshness_gap
+    suggested_role: news-analyst
+    question: Refresh the stale source timestamp before synthesis.
+    reason: Judgment review found a freshness gap in the news artifact.
+    materiality: medium
+    requested_by_role: judgment-reviewer
+    source_artifact_id: nvda-judgment
+    source_artifact_path: trading/reports/judgment/nvda-judgment.md
+    source_artifact_version: 1
+    source_artifact_content_hash: sha256:judgment
+    required_inputs: [accepted judgment review]
+    suggested_consent_posture: no_consent_expected
+    blocked_actions: [synthesis]
+---
+
+[factual] Reviewer found a freshness gap.
+""",
+        encoding="utf-8",
+    )
+    judgment_loop = evaluate_artifact_supervisor_loop(workspace, request, ["trading/reports/judgment/nvda-judgment.md"])
+    assert judgment_loop["pending_tasks"][0]["planner_action"] == "follow_up_existing_team"
+    assert judgment_loop["pending_tasks"][0]["role"] == "news-analyst"
+    assert all(task.get("role") != "judgment-reviewer" for task in judgment_loop["pending_tasks"])
+
     bad_artifact = workspace / "trading" / "reports" / "news" / "bad-followup.md"
     bad_artifact.write_text(
         artifact.read_text(encoding="utf-8").replace(
@@ -3740,6 +3839,7 @@ env = { TOKEN = "also-hidden" }
     assert "[mcp_servers.managed_one]" in text
     assert "[mcp_servers.managed_two]" in text
     assert "MANAGED_KEY" in text
+    assert 'default_tools_approval_mode = "prompt"' in text
 
     with pytest.raises(ValueError, match="outside TradingCodex managed block"):
         write_codex_mcp_server_config(workspace, name="user_mcp", command="uvx", full_access_detected=True)
@@ -3780,6 +3880,7 @@ def test_tcx_build_cli_status_and_codex_mcp_dry_run(tmp_path: Path) -> None:
     )
     assert dry_run["status"] == "dry_run"
     assert "[mcp_servers.cli_mcp]" in dry_run["preview"]
+    assert 'default_tools_approval_mode = "prompt"' in dry_run["preview"]
 
     run([sys.executable, "-m", "tradingcodex_cli", "mode", "set", "build", "--reason", "cli build smoke"], workspace, env_extra=env_extra)
     status = json.loads(run([sys.executable, "-m", "tradingcodex_cli", "build", "status", "--json"], workspace, env_extra=env_extra).stdout)

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/tradingcodex.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tradingcodex
-Version: 0.3.4
+Version: 0.3.6
 Summary: Agentic investment workflow harness for Codex-native research and service-gated execution checks.
 Author: TradingCodex Authors
 License-Expression: Apache-2.0
@@ -229,7 +229,7 @@ provide investment recommendations or guarantee returns.
 | Status | Milestone |
 | --- | --- |
 | Shipped | Generated Codex workspace, fixed role roster, project MCP config, Django service plane, local web dashboard, Admin, Ninja API, file-native research memory, component registry, policy/audit primitives. |
-| Current `0.3.4` | Build Center customization, Codex MCP discovery/import, external MCP permission approval UX, head-manager research synthesis depth, flexible package/workspace update status, skipped-version Django migration smoke coverage, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
+| Current `0.3.6` | Reviewer follow-up loop fixes, duplicate pending-task protection, harness cleanup, safe TradingCodex MCP tools auto-approved for subagents, execution tools hidden outside `execution-operator`, Build Center customization, Codex MCP discovery/import, external MCP permission approval UX, head-manager research synthesis depth, flexible package/workspace update status, skipped-version Django migration smoke coverage, Codex-native Decision Packages, independent judgment-review gate, staged workflow planning, artifact-supervisor loop closure state, Evidence Run/Validation Cards, provider capability profiles, and Python `>=3.11,<3.15` support. |
 | Next | Deeper validation scenarios, richer provider capability profiles, stronger generated-workspace smoke coverage, and improved artifact quality tooling. |
 | Future | Separately governed verified adapters, hosted/managed services, enterprise policy/compliance packs, and broker-specific live providers only after explicit product, policy, adapter, and validation work. |
 

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/tradingcodex_cli/commands/doctor.py

@@ -19,7 +19,6 @@ from tradingcodex_service.application.runtime import (
     tradingcodex_db_path,
 )
 from tradingcodex_cli.commands.utils import (
-    _safe_read,
     list_subagents,
     path_check,
     read_thread_policy,
@@ -128,6 +127,15 @@ def _codex_mcp_config_checks(root: Path) -> list[dict[str, Any]]:
     root_tools = set(root_mcp.get("enabled_tools") or [])
     execution_tools = set(execution_mcp.get("enabled_tools") or [])
     risk_tools = set(risk_mcp.get("enabled_tools") or [])
+    sensitive_execution_tools = {"submit_approved_order", "cancel_approved_order"}
+    non_execution_exposure = []
+    for agent_path in sorted((root / ".codex" / "agents").glob("*.toml")):
+        if agent_path.stem == "execution-operator":
+            continue
+        enabled = set((_read_codex_mcp_config(agent_path).get("enabled_tools") or []))
+        exposed = sensitive_execution_tools & enabled
+        if exposed:
+            non_execution_exposure.append(f"{agent_path.stem}: {', '.join(sorted(exposed))}")
     raw_broker_tools = {"place_order", "replace_order", "cancel_order", "withdraw", "transfer"}
     broker_connector_tools = {
         "list_broker_adapter_providers",
@@ -153,6 +161,13 @@ def _codex_mcp_config_checks(root: Path) -> list[dict[str, Any]]:
             "codexNative": True,
             "detail": "MCP env enables dashboard/service autostart" if root_mcp.get("env", {}).get("TRADINGCODEX_MCP_AUTOSTART_SERVICE") == "1" else "missing TRADINGCODEX_MCP_AUTOSTART_SERVICE=1",
         },
+        {
+            "layer": "enforcement",
+            "name": "TradingCodex MCP safe tools auto-approved",
+            "ok": root_mcp.get("default_tools_approval_mode") == "approve",
+            "codexNative": True,
+            "detail": "default tool approval is approve" if root_mcp.get("default_tools_approval_mode") == "approve" else "default tool approval should be approve",
+        },
         {
             "layer": "enforcement",
             "name": "head-manager MCP execution submit excluded",
@@ -181,6 +196,13 @@ def _codex_mcp_config_checks(root: Path) -> list[dict[str, Any]]:
             "codexNative": True,
             "detail": "execution-operator allowlist includes submit_approved_order" if "submit_approved_order" in execution_tools else "missing submit_approved_order",
         },
+        {
+            "layer": "enforcement",
+            "name": "non-execution roles block execution MCP tools",
+            "ok": not non_execution_exposure,
+            "codexNative": True,
+            "detail": "submit/cancel disabled outside execution-operator" if not non_execution_exposure else "; ".join(non_execution_exposure),
+        },
         {
             "layer": "enforcement",
             "name": "execution-operator raw broker MCP tools excluded",

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/tradingcodex_cli/commands/mcp.py

@@ -103,7 +103,6 @@ def mcp(root: Path, argv: list[str]) -> None:
         "follow_up_requests": _list_option(args, "--follow-up-requests"),
         "query": _option_value(args, "--query") or _option_value(args, "--q"),
         "limit": _int_option(args, "--limit"),
-        "provider": _option_value(args, "--provider"),
         "source_category": _option_value(args, "--source-category") or _option_value(args, "--category"),
         "as_of": _option_value(args, "--as-of"),
         "live_confirmation": _option_value(args, "--live-confirmation"),

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/tradingcodex_service/application/agents.py

@@ -742,7 +742,6 @@ def create_or_update_strategy_skill(
         raise ValueError("; ".join(validation_errors))
     _atomic_write_text(skill_path, text)
     _atomic_write_text(skill_dir / "agents" / "openai.yaml", _render_openai_yaml(_strategy_display_name(name, body), description, f"Use ${name} to apply this user-approved strategy."))
-    record = _strategy_record_payload(root, skill_path)
     project_agent_configuration(root, applied_by=actor)
     return _strategy_record_payload(root, skill_path)
 

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/tradingcodex_service/application/customization.py

@@ -1,6 +1,5 @@
 from __future__ import annotations
 
-import json
 import os
 import re
 import shutil

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/tradingcodex_service/application/decision_packages.py

@@ -205,7 +205,6 @@ def _decision_markdown(metadata: dict[str, Any], plan: dict[str, Any]) -> str:
         frontmatter["workflow_lifecycle"] = metadata["workflow_lifecycle"]
     next_actions = "\n".join(f"- {item['label']}: {item['detail']}" for item in metadata["allowed_next_actions"]) or "- None yet."
     roles = ", ".join(metadata["selected_roles"]) or "head-manager"
-    blocked = ", ".join(metadata["blocked_actions"]) or "none"
     profile = "\n".join(f"- {item}" for item in metadata["missing_profile"]) or "- No required profile gaps for this lane."
     stages = "\n".join(f"- {stage['label']}: {stage['summary']}" for stage in plan["intake_summary"].get("workflow_stages") or [])
     artifact_waiting = "waiting for workflow artifacts" if metadata.get("workflow_lifecycle") else "waiting for accepted role artifacts"

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/tradingcodex_service/application/harness.py

@@ -14,9 +14,7 @@ from tradingcodex_service.application.agents import (
     ROLE_FORBIDDEN_ACTIONS,
     ROLE_HANDOFF_CONTRACTS,
     ROLE_PURPOSES,
-    ROLE_PERMISSION_PROFILES,
     ROLE_SKILL_MAP,
-    USER_VISIBLE_SKILLS,
     read_strategy_skill_records,
 )
 from tradingcodex_service.application.components import count_harness_component_tags, list_harness_components
@@ -25,17 +23,13 @@ from tradingcodex_service.application.research import list_workspace_research_ar
 from tradingcodex_service.application.runtime import active_profile_for_workspace, ensure_runtime_database, tradingcodex_db_path, workspace_context_payload
 from tradingcodex_service.mcp_runtime import static_mcp_tools as _static_mcp_tools
 from tradingcodex_service.application.workflow_routing import (
-    ARTIFACT_EVALUATION_STATES,
     BLOCKED_ACTION_COPY,
-    DEFAULT_LOOP_POLICY,
     EDGE_GROUP_CONTRACTS,
-    FIXED_INVESTMENT_ROLES,
     HANDOFF_STATES,
     IDEA_TRANSLATION_COPY,
     INVESTMENT_UNIVERSE_LABELS,
     JUDGMENT_CONTROL_COPY,
     JUDGMENT_REVIEW_ROLE,
-    LANE_LOOP_POLICY_OVERRIDES,
     LOOP_CONTROL_COPY,
     LOOP_RUNS_DIR,
     LOOP_RUN_STATE_FILENAME,
@@ -48,33 +42,16 @@ from tradingcodex_service.application.workflow_routing import (
     PROFILE_FIELD_KEYS,
     PROFILE_QUESTION_COPY,
     PROFILE_REQUIRED_LANES,
-    RESEARCH_AND_DECISION_ROLES,
     RESEARCH_STAGE_ROLES,
     ROLE_SELECTION_COPY,
     SUITABILITY_PROFILE_FIELDS,
     TERMINAL_WORKFLOW_ACTIONS,
     WORKFLOW_LANE_COPY,
-    NormalizedInvestmentIntent,
-    base_research_team,
-    build_artifact_supervisor_loop_contract,
-    build_delta_follow_up_brief,
     build_loop_exit_criteria,
     build_loop_policy,
-    classify_investment_universe,
     classify_starter_request,
-    explicit_public_equity_research_team,
-    is_connector_build_request,
-    is_connector_operations_only_request,
-    is_investment_workflow_request,
-    is_secret_only_request,
-    is_secret_warning_request,
-    negates_scope,
-    normalize_investment_intent,
     plan_follow_up_request,
     workflow_plan_has_role,
-    strip_guardrail_verification_phrases,
-    strip_negated_action_phrases,
-    strip_skill_invocation_tokens,
 )
 
 
@@ -211,7 +188,7 @@ def evaluate_artifact_supervisor_loop(
     root = Path(workspace_root or ".")
     state = read_workflow_loop_state(root)
     plan = _loop_plan_for_runtime(request, state)
-    policy = plan.get("loopPolicy") or build_loop_policy(str(plan.get("lane") or "research_only"))
+    policy = {**build_loop_policy(str(plan.get("lane") or "research_only")), **(plan.get("loopPolicy") or {})}
     workflow_run_id = str(state.get("workflow_run_id") or f"workflow-preview-{stable_hash({'request': request, 'artifacts': artifact_paths})[:12]}")
     pending_tasks: list[dict[str, Any]] = []
     escalation_proposals: list[dict[str, Any]] = []
@@ -225,8 +202,17 @@ def evaluate_artifact_supervisor_loop(
         for task in state.get("pending_tasks", [])
         if isinstance(task, dict) and task.get("task_type") in {"artifact_follow_up", "same_role_revision"}
     ]
+    existing_task_ids = {str(task.get("task_id") or "") for task in existing_loop_tasks}
+    same_role_revision_counts: dict[str, int] = {}
+    for task in existing_loop_tasks:
+        if task.get("task_type") == "same_role_revision":
+            role = str(task.get("role") or "")
+            same_role_revision_counts[role] = same_role_revision_counts.get(role, 0) + 1
     remaining_budget = max(0, task_budget - len(existing_loop_tasks))
     followups_this_iteration = int(policy.get("max_followups_per_iteration") or 0)
+    revision_limit = int(policy.get("max_same_role_revisions") or 0)
+    max_iterations = int(policy.get("max_iterations") or 0)
+    iteration_exhausted = max_iterations > 0 and int(state.get("iteration") or 0) >= max_iterations
 
     for artifact_path in artifact_paths:
         quality = evaluate_artifact_quality(root, artifact_path, strict=True)
@@ -248,9 +234,19 @@ def evaluate_artifact_supervisor_loop(
         artifact_evaluations.append(artifact_record)
         improvements.extend(_artifact_improvements(workflow_run_id, artifact_record, frontmatter))
 
-        if evaluation_action == "revise_artifact":
-            pending_tasks.append(_same_role_revision_task(workflow_run_id, plan, artifact_record, quality))
-            loop_decisions.append(_loop_decision("revise_same_role", f"{role} artifact needs repair before downstream use", artifact_record))
+        revision_followups = frontmatter.get("follow_up_requests") if role == JUDGMENT_REVIEW_ROLE and isinstance(frontmatter.get("follow_up_requests"), list) else []
+        if evaluation_action == "revise_artifact" and not (quality.get("status") == "pass" and revision_followups):
+            task = _same_role_revision_task(workflow_run_id, plan, artifact_record, quality)
+            if task["task_id"] in existing_task_ids:
+                loop_decisions.append(_loop_decision("waiting", f"{role} revision is already queued", {**artifact_record, "task_id": task["task_id"]}))
+            elif iteration_exhausted or remaining_budget <= 0 or same_role_revision_counts.get(role, 0) >= revision_limit:
+                loop_decisions.append(_loop_decision("waiting", f"{role} revision could not be queued within loop policy", {**artifact_record, "budget_exhausted": True}))
+            else:
+                pending_tasks.append(task)
+                existing_task_ids.add(task["task_id"])
+                same_role_revision_counts[role] = same_role_revision_counts.get(role, 0) + 1
+                remaining_budget -= 1
+                loop_decisions.append(_loop_decision("revise_same_role", f"{role} artifact needs repair before downstream use", artifact_record))
             continue
         if evaluation_action == "block_artifact":
             blocked_actions = _unique([*blocked_actions, *[str(item) for item in frontmatter.get("blocked_actions") or []]])
@@ -276,8 +272,13 @@ def evaluate_artifact_supervisor_loop(
                 "requested_by_role": request_with_source.get("requested_by_role") or role,
                 "materiality": request_with_source.get("materiality"),
             }
-            if planner_action in {"follow_up_existing_team", "challenge_conflict"} and len(pending_tasks) < followups_this_iteration and remaining_budget > 0:
-                pending_tasks.append(_follow_up_task(workflow_run_id, plan, request_with_source, decision, index))
+            if planner_action in {"follow_up_existing_team", "challenge_conflict"}:
+                task = _follow_up_task(workflow_run_id, plan, request_with_source, decision, index)
+            if planner_action in {"follow_up_existing_team", "challenge_conflict"} and task["task_id"] in existing_task_ids:
+                loop_decisions.append(_loop_decision("waiting", "loop task already queued", {**decision_record, "task_id": task["task_id"]}))
+            elif planner_action in {"follow_up_existing_team", "challenge_conflict"} and len(pending_tasks) < followups_this_iteration and remaining_budget > 0 and not iteration_exhausted:
+                pending_tasks.append(task)
+                existing_task_ids.add(task["task_id"])
                 remaining_budget -= 1
                 loop_decisions.append(_loop_decision(planner_action, decision["policy_reason"], decision_record))
             elif planner_action == "lane_escalation_proposal":
@@ -321,6 +322,7 @@ def _loop_plan_for_runtime(request: str, state: dict[str, Any]) -> dict[str, Any
         return classify_starter_request(request)
     lane = str(state.get("lane") or "research_only")
     selected = [str(role) for role in state.get("selected_team") or []]
+    state_policy = state.get("loop_policy") if isinstance(state.get("loop_policy"), dict) else {}
     plan: dict[str, Any] = {
         "universe": "public_equity",
         "lane": lane,
@@ -329,7 +331,7 @@ def _loop_plan_for_runtime(request: str, state: dict[str, Any]) -> dict[str, Any
         "selectedTeam": selected,
         "allowedFollowupTeam": [str(role) for role in state.get("allowed_followup_team") or selected],
         "escalationTeam": [str(role) for role in state.get("escalation_team") or []],
-        "loopPolicy": state.get("loop_policy") or build_loop_policy(lane),
+        "loopPolicy": {**build_loop_policy(lane), **state_policy},
         "loopStatePath": LOOP_STATE_PATH,
         "exitCriteria": build_loop_exit_criteria(lane, selected),
         "terminalWorkflowActions": list(TERMINAL_WORKFLOW_ACTIONS),

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/tradingcodex_service/application/workflow_planner.py

@@ -1,7 +1,6 @@
 from __future__ import annotations
 
 import hashlib
-import json
 from datetime import datetime, timezone
 from pathlib import Path
 from typing import Any
@@ -215,7 +214,7 @@ def record_workflow_plan(workspace_root: Path | str, plan: dict[str, Any], *, in
     write_json(root / LATEST_PLAN_PATH, plan)
     loop_state = _initial_loop_state(plan, intake)
     write_json(root / workflow_loop_relpath(run_id), loop_state)
-    write_json(root / LATEST_LOOP_STATE_PATH, _compact_loop_state(loop_state))
+    write_json(root / LATEST_LOOP_STATE_PATH, compact_workflow_loop_state(loop_state))
     append_jsonl(root / "trading" / "audit" / "workflow-plan-events.jsonl", {
         "ts": _now(),
         "event": "workflow-plan-recorded",
@@ -345,6 +344,8 @@ def _initial_loop_state(plan: dict[str, Any], intake: dict[str, Any] | None) ->
             "roles": _role_names(stage.get("roles") or []),
             "task_type": "stage_dispatch",
             "status": "pending" if not stage.get("depends_on") else "blocked_by_dependency",
+            "active_roles": [],
+            "completed_roles": [],
             "depends_on": stage.get("depends_on") or [],
             "planner_action": "dispatch_ready_stage",
             "delta_brief": stage.get("purpose", ""),
@@ -381,7 +382,7 @@ def _initial_loop_state(plan: dict[str, Any], intake: dict[str, Any] | None) ->
     }
 
 
-def _compact_loop_state(state: dict[str, Any]) -> dict[str, Any]:
+def compact_workflow_loop_state(state: dict[str, Any]) -> dict[str, Any]:
     return {
         "workflow_run_id": state.get("workflow_run_id", ""),
         "lane": state.get("lane", ""),

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/tradingcodex_service/urls.py

@@ -3,7 +3,6 @@ from django.templatetags.static import static
 from django.urls import path
 from django.views.generic import RedirectView
 
-import tradingcodex_service.admin
 from tradingcodex_service.api import api
 from tradingcodex_service import web
 

tradingcodex-0.3.6/tradingcodex_service/version.py

@@ -0,0 +1 @@
+TRADINGCODEX_VERSION = "0.3.5"

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/tradingcodex_service/web.py

@@ -14,7 +14,6 @@ from django.views.decorators.http import require_GET, require_POST
 
 from tradingcodex_cli.generator import bootstrap_workspace
 from tradingcodex_service.application.agents import (
-    AGENT_SPECS,
     EXPECTED_SUBAGENTS,
     SKILL_SPECS,
     build_projection_state,
@@ -29,8 +28,6 @@ from tradingcodex_service.application.harness import (
     build_workflow_loop_preview,
     build_workflow_intake_summary,
     build_subagent_starter_prompt,
-    get_harness_health,
-    get_harness_topology,
     get_role_detail,
     investment_universe_label,
     list_policy_overview,

{tradingcodex-0.3.4 → tradingcodex-0.3.6}/workspace_templates/modules/codex-base/files/.codex/config.toml

@@ -345,7 +345,7 @@ enabled_tools = [
   "review_external_mcp_tool",
   "record_audit_event"
 ]
-default_tools_approval_mode = "prompt"
+default_tools_approval_mode = "approve"
 startup_timeout_sec = 20
 tool_timeout_sec = 30