tradingcodex 1.0.1__tar.gz → 1.0.2__tar.gz

{tradingcodex-1.0.1 → tradingcodex-1.0.2}/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 ## Unreleased
 
+## 1.0.2 - 2026-07-15
+
+- Preserve an attached release workspace's explicit `TRADINGCODEX_HOME`,
+  explicit database override, and projected service address when an update is
+  launched through `uvx` instead of the generated wrapper. This prevents a
+  custom or isolated v1.0.0 workspace from silently switching to the platform
+  default ledger during a package refresh.
+- Fix the public guide's full-width desktop grid so viewport gutters no longer
+  collapse the reading column, and align the provider-to-order header with the
+  primary Guide/Reference/GitHub navigation. Add route, fragment, mobile-menu,
+  and desktop-layout contract tests.
+- Reduce hosted automation usage: normal CI, GitHub Pages deployment, and
+  release verification now use one job each; PyPI publication adds only its
+  protected upload job. Guide-only pushes skip the source CI workflow.
+
 ## 1.0.1 - 2026-07-15
 
 - Add the shared `tcx-artifact` skill to all nine producing fixed roles so

{tradingcodex-1.0.1/tradingcodex.egg-info → tradingcodex-1.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tradingcodex
-Version: 1.0.1
+Version: 1.0.2
 Summary: Local-first investment operating system for Codex-native research and service-gated execution.
 Author: TradingCodex Authors
 License-Expression: Apache-2.0

{tradingcodex-1.0.1 → tradingcodex-1.0.2}/docs/deployment.md

@@ -109,8 +109,12 @@ files are never replaced.
 
 ## Maintainer Prerequisites
 
-Release verification uses Python 3.11 and Node 22, while CI keeps the supported
-Python 3.11, 3.12, 3.13, and 3.14 range green. Node is a maintainer-only build
+Release verification uses Python 3.11 and Node 22. The hosted CI budget runs
+the complete source, frontend, and package gates once on Python 3.11 instead
+of multiplying every push across the supported Python range and native
+platforms. Maintainers run additional supported-version or native-platform
+checks locally or through an explicit temporary/manual workflow when a change
+touches compatibility-sensitive code. Node is a maintainer-only build
 dependency.
 
 Configure PyPI Trusted Publishing for:
@@ -159,9 +163,11 @@ also require the disposable-workspace and Codex-native checks documented in
 
 ## CI And Release Automation
 
-`.github/workflows/ci.yml` is test-only. It runs frontend verification, safety
-invariants, the supported Python matrix, clean package construction, and native
-macOS and Windows wheel smokes. It never publishes.
+`.github/workflows/ci.yml` is test-only. One Ubuntu/Python 3.11 job runs the
+frontend build, complete Python suite and framework gates, clean package
+construction, and the wheel smoke. Guide-only pushes skip this workflow because
+the Pages workflow validates and deploys only static guide files. CI never
+publishes.
 
 `.github/workflows/release.yml` is manual-only. Every run requires an explicit
 `release_version`. A dry run may build from any selected ref with
@@ -174,11 +180,13 @@ macOS and Windows wheel smokes. It never publishes.
 - the tagged commit is on `origin/main`
 - the wheel and source-distribution filenames carry the same version
 - the built wheel passes the Ubuntu smoke
-- the exact uploaded artifact passes native macOS and Windows smokes
 - the protected `pypi` environment approves Trusted Publishing
 
-The same uploaded artifact is downloaded by both native jobs and the PyPI
-publisher. No job rebuilds the distribution after verification.
+The release workflow has one build/verification job. When publication is
+requested, one protected PyPI job downloads that exact artifact and uploads it;
+no job rebuilds the distribution after verification. Native macOS and Windows
+release smokes are local or explicitly scheduled maintainer gates rather than
+automatic jobs on every release.
 
 ## User Guide Pages
 
@@ -189,10 +197,10 @@ prompts, workspace viewing, reusable skills, and everyday recovery. The detailed
 product rules remain canonical in `README.md`, `installation.md`, and `docs/`;
 the guide links back to those sources rather than replacing them.
 
-`.github/workflows/deploy-user-guide.yml` uploads only `guidebook/` and deploys
-it to GitHub Pages after a push to `main` that changes the guide or its workflow.
-It can also be run manually. It does not build or deploy the Python package,
-the Django service, or a production Node runtime.
+`.github/workflows/deploy-user-guide.yml` uses one job to configure, upload,
+and deploy only `guidebook/` to GitHub Pages after a push to `main` that changes
+the guide or its workflow. It can also be run manually. It does not build or
+deploy the Python package, the Django service, or a production Node runtime.
 
 GitHub Pages is configured to use **GitHub Actions** as its publishing source.
 The guide for this repository is published at
@@ -214,8 +222,9 @@ The guide for this repository is published at
    ```
 
 5. In GitHub Actions, run `Manual Release` from that tag with the exact
-   `release_version`. Use `publish_pypi=false` for a rehearsal and
-   `publish_pypi=true` only for the approved publication.
+   `release_version`. Use `publish_pypi=true` for an approved publication; use
+   the optional `publish_pypi=false` rehearsal when release risk warrants an
+   additional hosted build.
 
 Pushing a branch or tag does not publish by itself.
 
@@ -252,7 +261,7 @@ sh "$SOURCE_ROOT/install.sh" \
 On native Windows PowerShell:
 
 ```powershell
-$ReleaseVersion = "1.0.1"
+$ReleaseVersion = "1.0.2"
 $Workspace = Join-Path $env:TEMP "tcx-pypi-$ReleaseVersion"
 New-Item -ItemType Directory -Force $Workspace | Out-Null
 Set-Location $Workspace

{tradingcodex-1.0.1 → tradingcodex-1.0.2}/docs/generated-workspaces.md

@@ -1212,6 +1212,15 @@ service address projected by the launcher. Explicit process environment values s
 doctor then validates both home and DB projection and requires update when the
 generated ledger contract is stale.
 
+An index/package-runner update such as `uvx --refresh --from tradingcodex tcx
+update . --from tradingcodex` does not pass through the generated wrapper.
+Before regeneration, update therefore restores a validated workspace's
+recorded explicit home and DB override plus the service address from its
+generated project MCP configuration. It does not pin a recorded
+`platform_default` absolute path, so a copied workspace can resolve the native
+default on its destination platform. A new explicit process value remains the
+only implicit-free way to select a different runtime identity.
+
 TOML, YAML, JSON, POSIX shell, CMD, and Python values are serialized with
 format-specific literals. This is required for macOS paths with spaces and
 Windows drive-letter/backslash paths. Generated code/config uses LF line

{tradingcodex-1.0.1 → tradingcodex-1.0.2}/docs/release-readiness.md

@@ -1,15 +1,14 @@
-# TradingCodex 1.0.1 Release Status
+# TradingCodex 1.0.2 Release Status
 
 Status: local source, frontend, disposable native workflow, and exact
-distribution gates complete; candidate CI, tag-bound rehearsal, tag, and
-publication remain pending
+distribution gates complete; candidate CI, tag, and publication remain pending
 Updated: 2026-07-15
 
-This page records the current `1.0.1` release state. It is not an implementation
+This page records the current `1.0.2` release state. It is not an implementation
 roadmap and does not treat source changes as proof that an exact distribution
 artifact or public release has passed its gates.
 
-## v1.0.1 Contract
+## v1.0.2 Contract
 
 - `tradingcodex_service/version.py` is the single version source for package
   metadata, `tcx --version`, generated workspaces, release input, and tags.
@@ -26,37 +25,44 @@ artifact or public release has passed its gates.
   requires an installed provider plus every documented safety gate.
 - The React viewer is a committed static build served by Django and
   WhiteNoise; Node remains a maintainer-only build dependency.
-- PyPI publication is manual, tag-bound, and reuses one verified sdist and
-  wheel across Ubuntu, macOS, Windows, and publication jobs.
+- Package-runner updates preserve validated explicit home, database, and
+  service-address identity unless the operator supplies a replacement.
+- PyPI publication is manual and tag-bound. Hosted automation uses one full CI
+  job, one Pages job, and one release build job; publication adds only the
+  protected artifact-upload job.
 
 ## Current Readiness
 
 | Area | Current state | Evidence or remaining gate |
 | --- | --- | --- |
-| Version identity | Verified in the working tree | `TRADINGCODEX_VERSION` is `1.0.1`; `pyproject.toml` reads it dynamically; `tcx --version` uses the same source. |
+| Version identity | Verified in the working tree | `TRADINGCODEX_VERSION` is `1.0.2`; `pyproject.toml` reads it dynamically; `tcx --version` uses the same source. |
 | Schema baseline | Verified in the working tree | Project apps contain only `0001_v1_initial`; migration-graph and model-state checks live in `tests/test_v1_migrations.py`. |
-| Workspace baseline | Exact candidate native acceptance passes locally | The v1.0.1 candidate projects the shared artifact skill to all producing roles, requires the current reference Codex client, and exposes the nested MCP contracts. A disposable generated workspace passed strict config/hook preflight plus artifact, forecast, and proof-protected Brain MCP smokes. |
+| Workspace baseline | Exact candidate update acceptance passes locally | A disposable explicit-home/explicit-DB workspace updated through a package-runner-style process with those paths and its custom service address preserved. Prior v1.0.1 native role/artifact acceptance remains the unchanged harness baseline. |
 | Interfaces and safety | Full local candidate suite passes | MCP schema, lifecycle-error, skill-projection, resource-template discovery, Codex-version, forecast receipt-time, Django, migration, compile, and full test gates pass. |
-| Frontend | Viewer source, build, and browser acceptance pass | Ten focused tests, typecheck/build, deterministic committed assets, three-section routing, read-only source checks, 1440px/900px/600px layouts, keyboard focus, workspace switching, long-label containment, and invalid-selection failure rendering pass. |
-| Release automation | Structurally verified | The release contract suite verifies tag and artifact gating; a manual `publish_pypi=false` rehearsal remains required. |
-| Distribution artifacts | Exact local candidate passes | Fresh `1.0.1` sdist/wheel build, `twine check`, and the isolated macOS packaged-wheel smoke pass. Native CI reuse on Ubuntu, macOS, and Windows remains required. |
-| Git tag and PyPI | Not performed by this status | Merge/CI, annotated `v1.0.1` tag, protected-environment approval, and manual publication remain release-operator actions. |
+| Frontend and guidebook | Viewer and guide browser acceptance pass | Ten viewer tests and deterministic build pass. The guide passes local route/fragment checks, 1920px layout with a 768px reading column, consistent provider navigation, and real 390px mobile menu routing without horizontal overflow. |
+| Release automation | Structurally verified | Contract tests enforce one normal CI job, one Pages deploy job, and one release build plus optional protected publication job. A dry-run rehearsal remains available when release risk warrants the extra hosted run. |
+| Distribution artifacts | Exact local candidate passes | Fresh `1.0.2` sdist/wheel, `twine check`, and isolated packaged-wheel smoke passed on macOS. |
+| Git tag and PyPI | Not performed by this status | Main CI, annotated `v1.0.2` tag, protected-environment approval, and manual publication remain release-operator actions. |
 | Post-publish verification | Blocked on publication | Exact-version POSIX and native Windows attach/doctor smokes run only after PyPI contains the immutable artifacts. |
 
 Release-branch status describes candidate source shape, not release sign-off.
 The merged commit and exact uploaded artifacts remain authoritative.
 
-The local v1.0.1 candidate evidence recorded on 2026-07-15 is:
+The local v1.0.2 candidate evidence recorded on 2026-07-15 is:
 
-- `python3.11 -m pytest`: **617 passed** with three dependency-level Pydantic
-  deprecation warnings and no failures.
+- The first full suite found six stale next-version fixtures after the version
+  bump; after correcting those fixtures, the final full-suite rerun reported
+  **624 passed** with three existing Pydantic deprecation warnings.
 - `python3.11 manage.py check`, migration dry-run, compile pass, skill
   validation, JSON-schema validation, and diff checks: passed.
 - `npm ci --prefix frontend`, the ten-test frontend suite, typecheck/build, and
   deterministic committed-asset comparison: passed.
-- A fresh `tradingcodex-1.0.1` sdist and wheel built in isolation; both passed
-  `twine check`, and the wheel passed the macOS isolated-install platform smoke
-  with runtime version `1.0.1`.
+- A package-runner-style update smoke preserved an explicit home, explicit DB,
+  and custom loopback service address while moving the workspace runtime to
+  `1.0.2`.
+- Fresh `1.0.2` source and wheel distributions passed `twine check`; an
+  isolated macOS wheel install reported runtime version `1.0.2` and completed
+  the native platform smoke with a user-home path containing spaces.
 - A fresh generated development workspace passed `tcx doctor` and the strict
   current-reference Codex CLI contract, including all eight trusted hooks.
 - Native artifact persistence completed with one exact
@@ -74,8 +80,8 @@ The local v1.0.1 candidate evidence recorded on 2026-07-15 is:
   deferred MCP proof path.
 
 The v1.0.0 baseline evidence recorded on 2026-07-15 is listed below. It does
-not substitute for v1.0.1 validation, CI on the candidate commit, or the
-tag-bound rehearsal of the immutable patch artifacts:
+not substitute for v1.0.2 validation, CI on the candidate commit, or the
+tag-bound verification of the immutable patch artifacts:
 
 - GitHub Actions [CI run 29403737708](https://github.com/monarchjuno/tradingcodex/actions/runs/29403737708)
   passed on release-branch commit `12649b0`: the safety and financial invariant
@@ -195,8 +201,9 @@ and created no child event, role artifact, or synthesis.
 
 This is release-branch evidence. The candidate is ready to merge, but the
 release remains not ready to tag until the merged commit passes GitHub CI. The
-tagged immutable artifacts must then pass the manual `publish_pypi=false`
-rehearsal before publication.
+tag-bound release build must verify the immutable artifacts before its optional
+protected publication job can run. Use the separate `publish_pypi=false`
+rehearsal when release risk warrants another hosted run.
 
 ### Workspace viewer browser acceptance
 
@@ -243,22 +250,23 @@ python3.11 -m twine check dist/*
 python3.11 tests/platform_wheel_smoke.py --wheel-dir dist
 ```
 
-CI and the manual release rehearsal must run the exact uploaded artifact on
-Ubuntu, native macOS, and native Windows. The protected `pypi` environment and
-Trusted Publisher configuration must be reviewed before publication.
+The hosted release build validates the exact uploaded artifact on Ubuntu.
+Compatibility-sensitive native macOS, Windows, or alternate-Python checks are
+local or explicitly scheduled maintainer gates instead of default jobs. The
+protected `pypi` environment and Trusted Publisher configuration must be
+reviewed before publication.
 
 ## Tag And Publication State
 
 This document does not assert that the final commit is on `main`, CI is green,
-the tag exists, or PyPI contains `1.0.1`. After every final-commit and artifact
+the tag exists, or PyPI contains `1.0.2`. After every final-commit and artifact
 gate passes:
 
 1. Merge the release commit to `main` and wait for CI.
-2. Create and push the annotated tag `v1.0.1` at that commit.
-3. Rehearse the manual workflow with `publish_pypi=false` and
-   `release_version=1.0.1`.
-4. With protected-environment approval, run the same tag with
-   `publish_pypi=true`.
+2. Create and push the annotated tag `v1.0.2` at that commit.
+3. When release risk warrants the extra hosted run, rehearse with
+   `publish_pypi=false` and `release_version=1.0.2`.
+4. With protected-environment approval, run the tag with `publish_pypi=true`.
 5. Verify the immutable PyPI files, release notes, and exact-version POSIX and
    native Windows attach/doctor flows.
 

{tradingcodex-1.0.1 → tradingcodex-1.0.2}/installation.md

@@ -227,6 +227,14 @@ uvx --refresh --from tradingcodex tcx update . --from tradingcodex
 refreshes generated indexes, applies central DB migrations, records workspace
 provenance, and runs `./tcx doctor` unless `--no-doctor` is passed.
 
+When the package refresh is launched directly through `uvx`, the updater also
+restores an existing explicit `TRADINGCODEX_HOME`, explicit
+`TRADINGCODEX_DB_NAME`, and projected loopback service address from the
+validated workspace before regeneration. Explicit environment values on the
+new update command still win, so a deliberate runtime move remains possible.
+Platform-default homes are resolved again on the destination platform rather
+than pinning an absolute path from a copied workspace.
+
 Inside a generated Codex workspace, the default `trading-research` profile and
 Plan mode cannot run workspace updates because update rewrites protected `.codex`
 prompt/config/hook surfaces. Research may still create and edit ordinary

tradingcodex-1.0.2/tests/test_guidebook_contract.py

@@ -0,0 +1,71 @@
+from __future__ import annotations
+
+import re
+from pathlib import Path
+from urllib.parse import unquote, urlsplit
+
+
+ROOT = Path(__file__).resolve().parents[1]
+GUIDEBOOK = ROOT / "guidebook"
+HREF_RE = re.compile(r'href="([^"]+)"')
+ID_RE = re.compile(r'id="([^"]+)"')
+
+
+def _html(path: Path) -> str:
+    return path.read_text(encoding="utf-8")
+
+
+def test_guidebook_local_routes_and_fragments_resolve() -> None:
+    pages = sorted(GUIDEBOOK.glob("*.html"))
+    known_fragments = {
+        page.resolve(): set(ID_RE.findall(_html(page)))
+        for page in pages
+    }
+
+    for page in pages:
+        for raw_href in HREF_RE.findall(_html(page)):
+            parsed = urlsplit(raw_href)
+            if parsed.scheme or parsed.netloc or raw_href.startswith(("mailto:", "tel:")):
+                continue
+            target = page if not parsed.path else (page.parent / unquote(parsed.path)).resolve()
+            assert target.exists(), f"{page.name}: missing route {raw_href}"
+            if parsed.fragment and target.suffix == ".html":
+                assert parsed.fragment in known_fragments[target], (
+                    f"{page.name}: missing fragment {raw_href}"
+                )
+
+
+def test_provider_onboarding_uses_the_primary_guide_navigation() -> None:
+    page = _html(GUIDEBOOK / "provider-to-order.html")
+    header = page.split('<header class="global-header">', 1)[1].split("</header>", 1)[0]
+    assert re.findall(r">([^<>]+)</a>", header)[-3:] == ["Guide", "Reference", "GitHub"]
+    assert 'href="index.html" aria-current="page">Guide</a>' in header
+    assert 'href="https://github.com/monarchjuno/tradingcodex/tree/main/docs">Reference</a>' in header
+
+
+def test_provider_mobile_menu_reaches_every_guide_section() -> None:
+    page = _html(GUIDEBOOK / "provider-to-order.html")
+    mobile = page.split('<details class="mobile-nav">', 1)[1].split("</details>", 1)[0]
+    assert HREF_RE.findall(mobile) == [
+        "index.html",
+        "dynamic-workflow.html",
+        "harness.html",
+        "decision-memory.html",
+        "reusable-context.html",
+        "execution-boundary.html",
+        "provider-to-order.html",
+        "skills.html",
+        "research.html",
+        "order.html",
+        "improve.html",
+        "customize.html",
+        "help-status.html",
+    ]
+
+
+def test_full_desktop_shell_does_not_double_count_viewport_gutters() -> None:
+    css = (GUIDEBOOK / "assets" / "site.css").read_text(encoding="utf-8")
+    shell_rule = css.split(".docs-shell {", 1)[1].split("}", 1)[0]
+    assert "max-width: 1460px" in shell_rule
+    assert "padding: 2.75rem 1.5rem" in shell_rule
+    assert "calc((100vw - 1460px) / 2)" not in shell_rule

{tradingcodex-1.0.1 → tradingcodex-1.0.2}/tests/test_platform_runtime.py

@@ -786,7 +786,7 @@ def test_service_version_mismatch_never_exposes_explicit_local_source(
     monkeypatch.setenv("TRADINGCODEX_MCP_PACKAGE_SPEC", str(local_source))
     monkeypatch.setenv(PACKAGE_SOURCE_KIND_ENV, "local-explicit")
 
-    action = _version_mismatch_next_action("1.0.2", "127.0.0.1:48267")
+    action = _version_mismatch_next_action("1.0.3", "127.0.0.1:48267")
 
     assert str(local_source) not in action
     assert "<package-spec>" in action
@@ -859,7 +859,7 @@ def test_real_custom_source_attach_patch_update_and_same_version_refresh(
     assert first_python.is_file()
 
     version_path = source / "tradingcodex_service/version.py"
-    version_path.write_text('TRADINGCODEX_VERSION = "1.0.2"\n', encoding="utf-8")
+    version_path.write_text('TRADINGCODEX_VERSION = "1.0.3"\n', encoding="utf-8")
     before_explicit_override = {
         path: path.read_bytes()
         for path in (
@@ -914,7 +914,7 @@ def test_real_custom_source_attach_patch_update_and_same_version_refresh(
     lock = json.loads(
         (workspace / ".tradingcodex/generated/module-lock.json").read_text(encoding="utf-8")
     )
-    assert lock["tradingcodex_version"] == "1.0.2"
+    assert lock["tradingcodex_version"] == "1.0.3"
     assert lock["tradingcodex_package_spec"] == LOCAL_EXECUTABLE_SOURCE_PROVENANCE
 
     main_path = source / "tradingcodex_cli/__main__.py"
@@ -957,7 +957,7 @@ def test_real_custom_source_attach_patch_update_and_same_version_refresh(
         timeout=60,
         check=True,
     )
-    assert version.stdout.strip() == f"{marker}:1.0.2"
+    assert version.stdout.strip() == f"{marker}:1.0.3"
 
     request = '{"jsonrpc":"2.0","id":1,"method":"tools/list"}\n'
     config_paths = [
@@ -1446,7 +1446,7 @@ def test_update_rejects_workspace_downgrade_before_writing(
     bootstrap_workspace(workspace)
     lock_path = workspace / ".tradingcodex/generated/module-lock.json"
     lock = json.loads(lock_path.read_text(encoding="utf-8"))
-    lock["tradingcodex_version"] = "1.0.2"
+    lock["tradingcodex_version"] = "1.0.3"
     lock_path.write_text(json.dumps(lock, indent=2) + "\n", encoding="utf-8")
     before = {path.relative_to(workspace).as_posix(): path.read_bytes() for path in workspace.rglob("*") if path.is_file()}
 
@@ -1475,6 +1475,61 @@ def test_v1_update_keeps_an_explicit_home_override(
     assert updated["home_source"] == "environment_override"
 
 
+def test_package_runner_update_restores_recorded_explicit_runtime_identity(
+    monkeypatch: pytest.MonkeyPatch,
+    tmp_path: Path,
+) -> None:
+    from tradingcodex_cli.commands.bootstrap import _configure_recorded_update_runtime
+
+    workspace = tmp_path / "workspace"
+    selected_home = tmp_path / "custom-home"
+    selected_db = tmp_path / "custom-ledger" / "tradingcodex.sqlite3"
+    selected_addr = "127.0.0.1:49123"
+    monkeypatch.setenv("TRADINGCODEX_HOME", str(selected_home))
+    monkeypatch.setenv("TRADINGCODEX_DB_NAME", str(selected_db))
+    monkeypatch.setenv("TRADINGCODEX_SERVICE_ADDR", selected_addr)
+    bootstrap_workspace(workspace)
+    lock = read_module_lock(workspace)
+
+    for name in (
+        "TRADINGCODEX_HOME",
+        "TRADINGCODEX_HOME_SOURCE",
+        "TRADINGCODEX_DB_NAME",
+        "TRADINGCODEX_SERVICE_ADDR",
+    ):
+        monkeypatch.delenv(name, raising=False)
+
+    _configure_recorded_update_runtime(workspace, lock)
+
+    assert os.environ["TRADINGCODEX_HOME"] == str(selected_home.resolve())
+    assert os.environ["TRADINGCODEX_HOME_SOURCE"] == "environment_override"
+    assert os.environ["TRADINGCODEX_DB_NAME"] == str(selected_db.resolve())
+    assert os.environ["TRADINGCODEX_SERVICE_ADDR"] == selected_addr
+
+
+def test_package_runner_update_does_not_pin_a_platform_default_home(
+    monkeypatch: pytest.MonkeyPatch,
+    tmp_path: Path,
+) -> None:
+    from tradingcodex_cli.commands.bootstrap import _configure_recorded_update_runtime
+
+    workspace = tmp_path / "workspace"
+    workspace.mkdir()
+    lock = {
+        "home_source": "platform_default",
+        "tradingcodex_home": str(tmp_path / "recorded-platform-home"),
+        "db_source": "home_default",
+        "tradingcodex_db_path": str(tmp_path / "recorded-platform-home" / "state" / "tradingcodex.sqlite3"),
+    }
+    monkeypatch.delenv("TRADINGCODEX_HOME", raising=False)
+    monkeypatch.delenv("TRADINGCODEX_HOME_SOURCE", raising=False)
+
+    _configure_recorded_update_runtime(workspace, lock)
+
+    assert "TRADINGCODEX_HOME" not in os.environ
+    assert "TRADINGCODEX_HOME_SOURCE" not in os.environ
+
+
 def test_native_process_kwargs_and_external_mcp_pipe_reader() -> None:
     assert _detached_process_kwargs("posix") == {"start_new_session": True}
     assert "creationflags" in _detached_process_kwargs("nt")

{tradingcodex-1.0.1 → tradingcodex-1.0.2}/tests/test_release_contract.py

@@ -80,7 +80,7 @@ def test_cli_hook_dispatch_preserves_standard_input_and_output(
 def test_v1_package_metadata_has_one_stable_version_source() -> None:
     project = tomllib.loads((ROOT / "pyproject.toml").read_text(encoding="utf-8"))
 
-    assert TRADINGCODEX_VERSION == "1.0.1"
+    assert TRADINGCODEX_VERSION == "1.0.2"
     assert str(Version(TRADINGCODEX_VERSION)) == TRADINGCODEX_VERSION
     assert project["project"]["dynamic"] == ["version"]
     assert "version" not in project["project"]
@@ -145,7 +145,7 @@ def test_v1_release_checklist_does_not_preapprove_gates() -> None:
     assert re.search(r"(?<![\d.])v?0\.\d+\.\d+\b", deployment) is None
     assert re.search(r"(?<![\d.])v?0\.\d+\.\d+\b", checklist) is None
     assert "- [x]" not in checklist.lower()
-    assert "release_version=1.0.1" in checklist
+    assert "release_version=1.0.2" in checklist
 
 
 def test_attach_contract_has_no_overwrite_or_init_compatibility() -> None:
@@ -374,7 +374,7 @@ def test_update_status_requires_package_refresh_for_newer_workspace(monkeypatch,
             "schema_version": 1,
             "generated_at": "2026-07-11T00:00:00Z",
             "workspace_id": "tcxw_" + "a" * 32,
-            "tradingcodex_version": "1.0.2",
+            "tradingcodex_version": "1.0.3",
             "tradingcodex_package_spec": "tradingcodex",
             "tradingcodex_home": str((tmp_path / "home").resolve()),
             "home_source": "environment_override",
@@ -534,7 +534,7 @@ def test_update_status_never_treats_local_provenance_as_an_executable_spec(
                 "schema_version": 1,
                 "generated_at": "2026-07-11T00:00:00Z",
                 "workspace_id": "tcxw_" + "a" * 32,
-                "tradingcodex_version": "1.0.2",
+                "tradingcodex_version": "1.0.3",
                 "tradingcodex_package_spec": "local-explicit",
                 "tradingcodex_home": str((tmp_path / "home").resolve()),
                 "home_source": "environment_override",
@@ -721,7 +721,7 @@ def test_external_mcp_operator_actions_reject_noninteractive_callers(
     assert issued == []
 
 
-def test_release_publish_is_tag_bound_and_waits_for_native_wheel_smokes() -> None:
+def test_release_publish_is_tag_bound_and_reuses_one_verified_build() -> None:
     workflow = yaml.safe_load((ROOT / ".github/workflows/release.yml").read_text(encoding="utf-8"))
     trigger = workflow.get("on") or workflow.get(True)
     assert trigger["workflow_dispatch"]["inputs"]["release_version"]["required"] is True
@@ -742,12 +742,23 @@ def test_release_publish_is_tag_bound_and_waits_for_native_wheel_smokes() -> Non
         if step["name"] == "Validate distribution metadata and filenames"
     )
     assert "parse_wheel_filename" in distribution["run"]
-    native = jobs["native-platform-wheel-smoke"]
-    assert native["needs"] == "build"
-    assert native["runs-on"] == "${{ matrix.os }}"
-    assert native["strategy"]["matrix"]["os"] == ["macos-latest", "windows-latest"]
-    assert jobs["publish-pypi"]["needs"] == "native-platform-wheel-smoke"
-    assert any("platform_wheel_smoke.py" in step.get("run", "") for step in native["steps"])
+    assert set(jobs) == {"build", "publish-pypi"}
+    assert jobs["publish-pypi"]["needs"] == "build"
+    assert any(
+        "platform_wheel_smoke.py" in step.get("run", "")
+        for step in jobs["build"]["steps"]
+    )
     assert (ROOT / ".github/workflows/release.yml").read_text(encoding="utf-8").count("python -m build") == 1
     assert any("download-artifact" in step.get("uses", "") for step in jobs["publish-pypi"]["steps"])
     assert not any("python -m build" in step.get("run", "") for step in jobs["publish-pypi"]["steps"])
+
+
+def test_github_actions_keep_the_normal_and_pages_paths_to_one_job_each() -> None:
+    ci = yaml.safe_load((ROOT / ".github/workflows/ci.yml").read_text(encoding="utf-8"))
+    pages = yaml.safe_load(
+        (ROOT / ".github/workflows/deploy-user-guide.yml").read_text(encoding="utf-8")
+    )
+    assert set(ci["jobs"]) == {"quality"}
+    assert set(pages["jobs"]) == {"deploy"}
+    assert len(ci["jobs"]["quality"]["steps"]) <= 7
+    assert len(pages["jobs"]["deploy"]["steps"]) == 4

{tradingcodex-1.0.1 → tradingcodex-1.0.2/tradingcodex.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tradingcodex
-Version: 1.0.1
+Version: 1.0.2
 Summary: Local-first investment operating system for Codex-native research and service-gated execution.
 Author: TradingCodex Authors
 License-Expression: Apache-2.0

{tradingcodex-1.0.1 → tradingcodex-1.0.2}/tradingcodex.egg-info/SOURCES.txt

@@ -113,6 +113,7 @@ tests/test_dynamic_artifact_quality.py
 tests/test_e2e_user_scenarios.py
 tests/test_evaluation_lab_hardening.py
 tests/test_evaluation_profiles.py
+tests/test_guidebook_contract.py
 tests/test_investment_analysis.py
 tests/test_investment_brain_cli.py
 tests/test_investment_brain_prompt_layers.py

{tradingcodex-1.0.1 → tradingcodex-1.0.2}/tradingcodex_cli/commands/bootstrap.py

@@ -3,6 +3,7 @@ from __future__ import annotations
 import argparse
 import hashlib
 import os
+import tomllib
 from pathlib import Path
 
 from tradingcodex_cli.commands.doctor import doctor
@@ -85,14 +86,16 @@ def update(argv: list[str]) -> None:
     args = parser.parse_args(argv)
     target = Path(args.project_dir).resolve()
     validated_workspace = validate_generated_workspace(target)
+    existing_lock = validated_workspace["module_lock"]
     if args.dev:
         development_source = _development_source_root()
         _configure_development_runtime(
             development_source,
-            existing_lock=validated_workspace["module_lock"],
+            existing_lock=existing_lock,
         )
         explicit_source = development_source
     else:
+        _configure_recorded_update_runtime(target, existing_lock)
         explicit_source = args.package_spec
     _configure_bootstrap_source(
         explicit_source,
@@ -221,6 +224,48 @@ def _configure_development_runtime(
         os.environ["TRADINGCODEX_SERVICE_ADDR"] = _development_service_addr(resolution.home)
 
 
+def _configure_recorded_update_runtime(
+    target: Path,
+    existing_lock: dict[str, object],
+) -> None:
+    """Restore explicit release-workspace runtime identity for package-runner updates.
+
+    ``uvx ... tcx update`` does not execute the generated workspace wrapper, so
+    custom home, database, and service-address values would otherwise fall back
+    to platform defaults. Explicit process values remain authoritative so users
+    can deliberately move a workspace to a new runtime identity.
+    """
+
+    if (
+        existing_lock.get("home_source") == "environment_override"
+        and not str(os.environ.get("TRADINGCODEX_HOME") or "").strip()
+    ):
+        os.environ["TRADINGCODEX_HOME"] = str(existing_lock["tradingcodex_home"])
+        os.environ["TRADINGCODEX_HOME_SOURCE"] = "environment_override"
+    if (
+        existing_lock.get("db_source") == "environment_override"
+        and not str(os.environ.get("TRADINGCODEX_DB_NAME") or "").strip()
+    ):
+        os.environ["TRADINGCODEX_DB_NAME"] = str(existing_lock["tradingcodex_db_path"])
+    if not str(os.environ.get("TRADINGCODEX_SERVICE_ADDR") or "").strip():
+        recorded_addr = _recorded_service_addr(target)
+        if recorded_addr:
+            os.environ["TRADINGCODEX_SERVICE_ADDR"] = recorded_addr
+
+
+def _recorded_service_addr(target: Path) -> str:
+    config_path = target / ".codex" / "config.toml"
+    try:
+        config = tomllib.loads(config_path.read_text(encoding="utf-8"))
+    except (OSError, tomllib.TOMLDecodeError):
+        return ""
+    servers = config.get("mcp_servers")
+    tradingcodex = servers.get("tradingcodex") if isinstance(servers, dict) else None
+    environment = tradingcodex.get("env") if isinstance(tradingcodex, dict) else None
+    value = environment.get("TRADINGCODEX_SERVICE_ADDR") if isinstance(environment, dict) else None
+    return str(value or "").strip()
+
+
 def _development_service_addr(home: Path | str) -> str:
     identity = os.path.normcase(str(Path(home).expanduser().resolve(strict=False)))
     offset = int(hashlib.sha256(identity.encode("utf-8")).hexdigest()[:8], 16)

tradingcodex-1.0.2/tradingcodex_service/version.py

@@ -0,0 +1 @@
+TRADINGCODEX_VERSION = "1.0.2"

tradingcodex-1.0.1/tradingcodex_service/version.py

@@ -1 +0,0 @@
-TRADINGCODEX_VERSION = "1.0.1"