wq-pilot 0.2.2__py3-none-any.whl

wq/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.1.0"

wq/__main__.py

@@ -0,0 +1,4 @@
+from .cli import main
+
+if __name__ == "__main__":
+    raise SystemExit(main())

wq/account.py

@@ -0,0 +1,67 @@
+"""只读账户快照：等级、pyramid 乘数与数量、连击。社区工具（wqb-agent-tools MIT）记录的端点，
+本账号可用性未核验；任一端点 4xx 即记录为不可用并继续，不重试、不枚举其他接口。快照写私有目录，不含凭证。"""
+import os
+from . import util
+
+# 端点 → 快照键。用途：判断是否存在本账号可用的高乘数 pyramid，是否改变研究设置由人工另行决定。
+ENDPOINTS = (('/users/self', 'profile'),
+             ('/users/self/activities/pyramid-multipliers', 'pyramid_multipliers'),
+             ('/users/self/activities/pyramid-alphas', 'pyramid_alphas'),
+             ('/users/self/streak', 'streak'))
+PROFILE_KEYS = ('id', 'level', 'geniusLevel', 'points', 'permissions', 'stage', 'dateCreated')
+
+
+def snapshot(get, client, cfg):
+    """get(client, cfg, path) -> (status, headers, data)；每个端点最多一次请求。"""
+    from .errors import AdapterError
+    out = {'schema': 'wq.account-snapshot/v1', 'queried_at': util.now_iso(), 'endpoints': {}}
+    for path, key in ENDPOINTS:
+        try:
+            status, _, data = get(client, cfg, path)
+            out['endpoints'][key] = {'path': path, 'status': status, 'data': data}
+        except AdapterError as exc:
+            out['endpoints'][key] = {'path': path, 'status': None, 'error': str(exc), 'kind': exc.kind}
+            if exc.kind in (AdapterError.NETWORK, AdapterError.RATE_LIMIT, AdapterError.AUTH):
+                break   # 网络/限流/认证问题不继续打其余端点
+    profile = (out['endpoints'].get('profile') or {}).get('data') or {}
+    if isinstance(profile, dict):
+        # 只保留等级/权限类字段；邮箱、姓名等身份信息不落盘。
+        out['endpoints']['profile']['data'] = {k: profile.get(k) for k in PROFILE_KEYS if k in profile}
+    path = os.path.join(cfg.private_dir, 'brain-account', 'snapshot-' + out['queried_at'].replace(':', '').replace('+', 'Z') + '.json')
+    os.makedirs(os.path.dirname(path), exist_ok=True, mode=0o700)
+    util.write_json(path, out)
+    os.chmod(path, 0o600)
+    out['saved_to'] = path
+    return out
+
+
+def _rows(data):
+    if isinstance(data, dict):
+        for key in ('pyramids', 'results'):
+            if isinstance(data.get(key), list): return data[key]
+    return data if isinstance(data, list) else []
+
+
+def summary(snap):
+    """人读摘要：可用端点、pyramid 乘数排序（高→低）与本账号各 pyramid 的 alpha 数、连击。"""
+    ep = snap['endpoints']
+    profile = (ep.get('profile') or {}).get('data') or {}
+    mult = {}
+    for row in _rows((ep.get('pyramid_multipliers') or {}).get('data')):
+        if not isinstance(row, dict): continue
+        cat = row.get('category'); cat = cat.get('id') if isinstance(cat, dict) else cat
+        mult[(str(cat), str(row.get('region')), str(row.get('delay')))] = row.get('multiplier')
+    counts = {}
+    for row in _rows((ep.get('pyramid_alphas') or {}).get('data')):
+        if not isinstance(row, dict): continue
+        cat = row.get('category'); cat = cat.get('id') if isinstance(cat, dict) else cat
+        counts[(str(cat), str(row.get('region')), str(row.get('delay')))] = row.get('alphaCount')
+    pyramids = [{'category': k[0], 'region': k[1], 'delay': k[2], 'multiplier': mult.get(k), 'alpha_count': counts.get(k)}
+                for k in sorted(set(mult) | set(counts), key=lambda k: (-(mult.get(k) or 0), k))]
+    return {'saved_to': snap.get('saved_to'),
+            'available': {k: (v.get('status') if v.get('status') else 'unavailable: ' + str(v.get('error'))) for k, v in ep.items()},
+            'level': {k: profile.get(k) for k in ('level', 'geniusLevel', 'points', 'stage') if k in profile},
+            'permissions': profile.get('permissions'),
+            'pyramids': pyramids,
+            'streak': (ep.get('streak') or {}).get('data'),
+            'note': '只读快照；乘数是否适用于本账号积分/报酬以平台说明为准。改变研究设置（region/delay）不由本命令自动触发。'}

wq/adapters/base.py

@@ -0,0 +1,30 @@
+"""Adapter 协议与错误分类。真实 adapter 必须遵守：
+
+- 401/403 → AdapterError(AUTH)，上层暂停并标记身份/权限问题；
+- 429 → AdapterError(RATE_LIMIT, retry_after=官方 Retry-After)，上层退避且总等待有上限；
+- 超时/连接中断 → AdapterError(UNKNOWN_REMOTE)：远端可能已接受，先对账，绝不盲目重发；
+- 没有官方幂等键就不要伪造；dedup_key 只做本地去重，不构成远端幂等。
+
+模拟通过 / 提交接受 / 最终有效 / 报酬资格 / 实际到账是五个不同状态。
+"""
+from __future__ import annotations
+
+from ..errors import AdapterError  # re-export
+
+
+class SimAdapter:
+    name = "abstract"
+
+    def status(self) -> dict:
+        return {"adapter": self.name}
+
+    def simulate(self, payload: dict) -> dict:
+        """返回 {remote_id: str} 回执。抛 AdapterError 表达失败类别。"""
+        raise AdapterError(AdapterError.NOT_IMPLEMENTED, "simulate 未实现")
+
+    def submit(self, payload: dict) -> dict:
+        raise AdapterError(AdapterError.NOT_IMPLEMENTED, "submit 未实现")
+
+    def reconcile(self, unknown: dict) -> dict:
+        """对账 unknown 任务/模拟/提交。返回每项的可核实结论或仍需人工。"""
+        raise AdapterError(AdapterError.NOT_IMPLEMENTED, "reconcile 未实现")

wq/adapters/brain.py

@@ -0,0 +1,43 @@
+"""旧 simulation/submission adapter 保留为阻断入口。
+
+真实单次模拟使用 brain_jobs 的 brain_simulation 状态机；此类不转发，
+避免旧任务绕过新路径的证据、幂等与授权门禁。自动提交未实现。
+"""
+from __future__ import annotations
+
+from ..errors import AdapterError
+from .base import SimAdapter
+
+_REASON = "旧adapter不发网络请求；真实模拟请用 wq brain enqueue，提交仍需本人处理"
+
+
+class BrainAPIAdapter(SimAdapter):
+    name = "brain-api"
+
+    def __init__(self, endpoint: str | None = None, verified: bool = False):
+        self.endpoint = endpoint
+        self.verified = verified
+
+    def status(self) -> dict:
+        return {"adapter": self.name, "endpoint": self.endpoint,
+                "verified": self.verified, "state": "not_implemented", "reason": _REASON}
+
+    def _ni(self, op: str):
+        raise AdapterError(AdapterError.NOT_IMPLEMENTED, f"{op}: {_REASON}")
+
+    def simulate(self, payload: dict) -> dict:
+        self._ni("simulate")
+
+    def submit(self, payload: dict) -> dict:
+        self._ni("submit")
+
+    def reconcile(self, unknown: dict) -> dict:
+        self._ni("reconcile")
+
+
+def build_adapter(cfg) -> SimAdapter:
+    from .manual import ManualAdapter
+    if cfg.adapter_mode() == "api":
+        return BrainAPIAdapter(endpoint=cfg.get("adapters", "brain", "endpoint"),
+                               verified=bool(cfg.get("adapters", "brain", "verified")))
+    return ManualAdapter()

wq/adapters/manual.py

@@ -0,0 +1,43 @@
+"""manual-import adapter：API 不可用时的默认模式。
+
+模拟/提交由用户在 BRAIN 官方 UI 手工完成，结果经 `wq import-results` 入库。
+这里不做任何网络动作；simulate/submit 一律 POLICY 拒绝并指明人工步骤。
+"""
+from __future__ import annotations
+
+from ..errors import AdapterError
+from .base import SimAdapter
+
+
+class ManualAdapter(SimAdapter):
+    name = "manual"
+
+    def status(self) -> dict:
+        return {"adapter": self.name,
+                "note": "人工模式：在 BRAIN UI 完成模拟后用 import-results 导入回执"}
+
+    def simulate(self, payload: dict) -> dict:
+        raise AdapterError(
+            AdapterError.POLICY,
+            "manual 模式不发请求：请在 BRAIN UI 运行该配置，再用 "
+            "`wq import-results <file> --real` 导入真实结果")
+
+    def submit(self, payload: dict) -> dict:
+        raise AdapterError(
+            AdapterError.POLICY,
+            "manual 模式不提交：提交需本人确认后在官方入口完成，再用对账/导入登记状态")
+
+    def reconcile(self, unknown: dict) -> dict:
+        # 离线可完成的部分：列出需要人工核实的清单，不编造远端状态。
+        items = []
+        for t in unknown.get("tasks", []):
+            items.append({"kind": "task", "id": t["task_id"],
+                          "action": "在 BRAIN UI 核对该远端动作是否已被接受，"
+                                    "然后 `wq reconcile --resolve <task_id> --outcome accepted|lost`"})
+        for s in unknown.get("simulations", []):
+            items.append({"kind": "simulation", "id": s["sim_id"],
+                          "action": "核对 remote_id 对应模拟的最终状态并重新导入"})
+        for s in unknown.get("submissions", []):
+            items.append({"kind": "submission", "id": s["submission_id"],
+                          "action": "核对提交最终有效性（accepted≠final_valid）并更新状态"})
+        return {"adapter": self.name, "manual_actions": items}

wq/assets/__init__.py

@@ -0,0 +1,6 @@
+"""包内运行时资产：config 模板与独立辅助脚本，wheel 安装后可用。"""
+from importlib.resources import files
+
+
+def path(name):
+    return files(__name__) / name

wq/assets/autopilot-policy.example.json

@@ -0,0 +1,49 @@
+{
+  "version": 1,
+  "scope": "exploratory_only_no_submission",
+  "verified_at": null,
+  "valid_until": null,
+  "source": "REPLACE_WITH_VERIFIED_SOURCE",
+  "bindings": {
+    "daily_return": {
+      "expression": "",
+      "fields": [],
+      "source": "",
+      "description": "Model-visible description: what the role measures and what it does NOT mean. Never put platform field IDs here.",
+      "cluster": "pv"
+    },
+    "activity_rank": {
+      "expression": "",
+      "fields": [],
+      "source": ""
+    },
+    "cashflow_strength": {
+      "expression": "",
+      "fields": [],
+      "source": ""
+    },
+    "market_cap_rank": {
+      "expression": "",
+      "fields": [],
+      "source": ""
+    },
+    "price_vwap_gap": {
+      "expression": "",
+      "fields": [],
+      "source": ""
+    }
+  },
+  "evidence_files": [],
+  "settings": {},
+  "limits": "Only exploratory screens. No automatic submission. Register more roles with `wq policy add-role`; setting_variants are preregistered per cycle (max 2, decay/neutralization/truncation only).",
+  "setting_variants": [
+    {
+      "label": "decay8",
+      "decay": 8
+    },
+    {
+      "label": "subindustry",
+      "neutralization": "SUBINDUSTRY"
+    }
+  ]
+}

wq/assets/config.example.json

@@ -0,0 +1,122 @@
+{
+  "account_alias": "default",
+  "paths": {
+    "db": "var/wq.db",
+    "run_dir": "var/run",
+    "private_dir": "~/.worldquant-pilot"
+  },
+  "limits": {
+    "sims_per_week": 24,
+    "sim_concurrency": 1,
+    "grok_calls_per_week": 3,
+    "devin_tickets_per_week": 1,
+    "max_repair_attempts_per_incident": 2,
+    "families_max": 3,
+    "configs_per_family_max": 4,
+    "rate_limit_max_wait_s": 900
+  },
+  "budgets": {
+    "simulation": {
+      "enabled": false,
+      "remaining": null,
+      "unit": "unknown"
+    },
+    "grok": {
+      "enabled": false,
+      "remaining": null,
+      "unit": "unknown"
+    },
+    "devin": {
+      "enabled": false,
+      "remaining": null,
+      "unit": "unknown"
+    },
+    "cursor": {
+      "enabled": false,
+      "remaining": null,
+      "unit": "calls"
+    },
+    "zcode": {
+      "enabled": false,
+      "remaining": null,
+      "unit": "calls"
+    }
+  },
+  "adapters": {
+    "brain": {
+      "mode": "manual",
+      "endpoint": null,
+      "verified": false
+    }
+  },
+  "models": {
+    "grok": {
+      "bin": "~/.grok/bin/grok",
+      "enabled": false,
+      "timeout_s": 900,
+      "workdir": null,
+      "extra_args": []
+    },
+    "devin": {
+      "bin": "~/.local/bin/devin",
+      "enabled": false,
+      "timeout_s": 1800,
+      "workdir": null,
+      "extra_args": []
+    },
+    "cursor": {
+      "enabled": false,
+      "timeout_s": 900
+    },
+    "zcode": {
+      "enabled": false,
+      "timeout_s": 900
+    }
+  },
+  "debug_authorization": {
+    "enabled": false,
+    "starts_at": null,
+    "expires_at": null,
+    "agents": [],
+    "unlimited": false,
+    "evidence": ""
+  },
+  "brain_api": {
+    "enabled": false,
+    "authorized_until": null,
+    "max_posts_per_24h": 4,
+    "min_post_interval_s": 60,
+    "auto_login": false,
+    "auto_login_email": null,
+    "keychain_service": "com.worldquant.wq.brain"
+  },
+  "routing": {
+    "profiles_file": "config/profiles.json",
+    "work_root": "{runtime}/jobs",
+    "authorized_until": null
+  },
+  "autopilot": {
+    "enabled": false,
+    "policy_file": "config/autopilot-policy.json",
+    "interval_s": 3600,
+    "error_cooldown_s": 3600,
+    "max_cycles_per_day": 4,
+    "max_simulations_per_week": 24,
+    "max_cycles_total": null,
+    "sign_flip_rescue_sharpe": -0.8
+  },
+  "brain_submission": {
+    "enabled": false,
+    "authorized_until": null
+  },
+  "research_feedback": {
+    "enabled": false,
+    "max_combination_plans": 2,
+    "segment_rules": {
+      "min_sharpe": 1.25,
+      "min_fitness": 1.0,
+      "min_years": 3,
+      "max_negative_years": 0
+    }
+  }
+}

wq/assets/docker_provider.py

@@ -0,0 +1,91 @@
+#!/usr/bin/env python3
+"""Run one owned provider container, with bounded lifetime and no host credentials mount."""
+import argparse
+import hashlib
+import json
+import os
+from pathlib import Path
+import re
+import signal
+import subprocess
+import sys
+
+
+def command(config, provider, workdir, prompt, model):
+    work = Path(workdir).resolve()
+    jobs = Path(config['jobs_root']).resolve()
+    source = Path(prompt)
+    if not work.is_relative_to(jobs) or work == jobs or source.is_symlink():
+        raise ValueError('Only a single screened task directory may be mounted')
+    source = source.resolve()
+    if not source.is_relative_to(work) or not source.is_file():
+        raise ValueError('Prompt must be a regular file inside the task directory')
+    if any(p.is_symlink() for p in work.rglob('*')):
+        raise ValueError('Task directory contains symlinks')
+    if ',' in str(work):
+        raise ValueError('Docker mount source must not contain commas')
+    item = config['providers'][provider]
+    image, volume = item['image'], item['home_volume']
+    if not image or image.startswith('-') or not re.fullmatch(r'[A-Za-z0-9][A-Za-z0-9_.-]+', volume):
+        raise ValueError('Invalid image or isolated home volume')
+    ttl = item.get('timeout_s', 900)
+    if type(ttl) is not int or not 1 <= ttl <= 3600:
+        raise ValueError('Container timeout must be 1..3600 seconds')
+    name = 'autowq-' + hashlib.sha256((str(work)+provider).encode()).hexdigest()[:24]
+    substitutions = {'{cwd}':'/work', '{prompt}':'/work/'+source.relative_to(work).as_posix(), '{model}':model}
+    argv = item['argv']
+    if not isinstance(argv,list) or not argv or not all(isinstance(x,str) for x in argv):
+        raise ValueError('Provider argv must be a nonempty string array')
+    for a,b in substitutions.items(): argv=[x.replace(a,b) for x in argv]
+    cmd = [config.get('docker_bin','docker'),'run','--rm','--init','--pull=never','--name',name,
+           '--label','autowq.managed=true','--read-only','--cap-drop=ALL',
+           '--security-opt=no-new-privileges','--pids-limit=256','--memory=2g','--cpus=2',
+           '--user',f'{os.getuid()}:{os.getgid()}',
+           '--tmpfs','/tmp:rw,nosuid,nodev,size=256m',
+           '--mount',f'type=bind,source={work},target=/work',
+           '--mount',f'type=volume,source={volume},target=/home/agent',
+           '--workdir','/work','--env','HOME=/home/agent',
+           '--entrypoint','/usr/bin/timeout',image,'--signal=TERM','--kill-after=5',str(ttl),*argv]
+    return cmd, name, ttl
+
+
+def run(config, provider, workdir, prompt, model=''):
+    argv, name, ttl = command(config,provider,workdir,prompt,model)
+    docker=argv[0]
+    # A surviving container belongs to the old attempt. Never replace/restart it.
+    existing=subprocess.run([docker,'container','inspect',name],stdout=subprocess.DEVNULL,stderr=subprocess.DEVNULL,timeout=15)
+    if existing.returncode==0:
+        raise ValueError('Previous container exists; reconcile it before retrying')
+    proc=None
+    previous={}
+    def stop(signum, frame):
+        raise SystemExit(128+signum)
+    try:
+        for sig in (signal.SIGTERM,signal.SIGINT):previous[sig]=signal.signal(sig,stop)
+        proc=subprocess.Popen(argv,stdin=subprocess.DEVNULL)
+        try:return proc.wait(timeout=ttl+30)
+        except subprocess.TimeoutExpired:return 124
+    finally:
+        # Only the deterministic name owned by this newly launched attempt is removed.
+        if proc is not None:
+            try:subprocess.run([docker,'rm','-f',name],stdout=subprocess.DEVNULL,stderr=subprocess.DEVNULL,timeout=3)
+            except (OSError,subprocess.TimeoutExpired):pass
+            if proc.poll() is None:
+                proc.terminate()
+                try:proc.wait(timeout=1)
+                except subprocess.TimeoutExpired:proc.kill();proc.wait()
+        for sig,handler in previous.items():signal.signal(sig,handler)
+
+
+def main():
+    p=argparse.ArgumentParser(description=__doc__)
+    p.add_argument('--config',required=True)
+    p.add_argument('provider');p.add_argument('workdir');p.add_argument('prompt');p.add_argument('model',nargs='?',default='')
+    a=p.parse_args()
+    try:
+        config=json.loads(Path(a.config).read_text())
+        return run(config,a.provider,a.workdir,a.prompt,a.model)
+    except (OSError,ValueError,KeyError,subprocess.TimeoutExpired) as exc:
+        print('Container runner: '+str(exc),file=sys.stderr);return 2
+
+if __name__=='__main__':sys.exit(main())

wq/assets/profiles.example.json

@@ -0,0 +1,173 @@
+{
+  "default": "steady",
+  "providers": {
+    "grok": {
+      "label": "Grok Build",
+      "argv": [
+        "{launcher_dir}/grok",
+        "--cwd",
+        "{cwd}",
+        "--no-subagents",
+        "--max-turns",
+        "12",
+        "--output-format",
+        "json",
+        "--verbatim",
+        "--always-approve",
+        "--prompt-file",
+        "{prompt}"
+      ],
+      "timeout_s": 900,
+      "terminal_protocol": "grok"
+    },
+    "devin": {
+      "label": "Devin",
+      "argv": [
+        "{launcher_dir}/devin",
+        "-p",
+        "--prompt-file",
+        "{prompt}",
+        "--permission-mode",
+        "dangerous",
+        "--respect-workspace-trust",
+        "false"
+      ],
+      "timeout_s": 1800
+    },
+    "cursor": {
+      "label": "Cursor / Grok 4.6",
+      "argv": [
+        "{launcher_dir}/cursor",
+        "{cwd}",
+        "{prompt}",
+        "{model}"
+      ],
+      "model": "cursor-grok-4.6-high",
+      "timeout_s": 900,
+      "terminal_protocol": "cursor"
+    },
+    "zcode": {
+      "label": "ZCode / Z.ai v1 Lite",
+      "argv": [
+        "{launcher_dir}/zcode",
+        "{cwd}",
+        "{prompt}",
+        "{model}"
+      ],
+      "model": "ZCode current configured model",
+      "timeout_s": 1200
+    }
+  },
+  "presets": {
+    "steady": {
+      "description": "默认稳定：Grok 做研究，Devin 做工程和审查，其他渠道备用",
+      "routes": {
+        "research": [
+          "grok",
+          "cursor",
+          "zcode",
+          "devin"
+        ],
+        "engineering": [
+          "devin",
+          "zcode",
+          "cursor",
+          "grok"
+        ],
+        "review": [
+          "devin",
+          "zcode",
+          "cursor",
+          "grok"
+        ]
+      },
+      "retries": 3,
+      "retry_delays_s": [
+        30,
+        60,
+        120
+      ]
+    },
+    "cursor-rich": {
+      "description": "Cursor 额度充足：优先 Cursor，审查先用不同模型渠道",
+      "routes": {
+        "research": [
+          "cursor",
+          "grok",
+          "zcode",
+          "devin"
+        ],
+        "engineering": [
+          "cursor",
+          "devin",
+          "zcode",
+          "grok"
+        ],
+        "review": [
+          "zcode",
+          "devin",
+          "cursor",
+          "grok"
+        ]
+      },
+      "retries": 3,
+      "retry_delays_s": [
+        30,
+        60,
+        120
+      ]
+    },
+    "zcode-rich": {
+      "description": "Z.ai 额度充足：ZCode 优先工程与审查，Grok 优先研究",
+      "routes": {
+        "research": [
+          "grok",
+          "zcode",
+          "cursor",
+          "devin"
+        ],
+        "engineering": [
+          "zcode",
+          "devin",
+          "cursor",
+          "grok"
+        ],
+        "review": [
+          "zcode",
+          "devin",
+          "cursor",
+          "grok"
+        ]
+      },
+      "retries": 3,
+      "retry_delays_s": [
+        30,
+        60,
+        120
+      ]
+    },
+    "core-only": {
+      "description": "保留 Cursor / ZCode 额度：只使用 Grok Build 和 Devin",
+      "routes": {
+        "research": [
+          "grok",
+          "devin"
+        ],
+        "engineering": [
+          "devin",
+          "grok"
+        ],
+        "review": [
+          "devin",
+          "grok"
+        ]
+      },
+      "retries": 3,
+      "retry_delays_s": [
+        30,
+        60,
+        120
+      ]
+    }
+  }
+}

wq/assets/provider_entry.py

@@ -0,0 +1,23 @@
+"""本机官方 CLI 入口；不读取或复制登录凭证。由外层 sandbox-exec 启动。"""
+import os
+from pathlib import Path
+import sys
+import shutil
+
+provider, workdir, prompt_file, model = sys.argv[1:]
+prompt = Path(prompt_file).read_text()
+if provider == 'cursor':
+    binary = os.environ.get('WQ_CURSOR_BIN') or str(Path.home()/'.local/bin/cursor-agent')
+    argv = [binary, '--workspace', workdir, '--model', model, '--print', '--force',
+            '--trust', '--output-format', 'json', prompt]
+elif provider == 'zcode':
+    os.environ['ZCODE_BUILTIN_PROVIDER_CONFIG_FILE'] = '/Applications/ZCode.app/Contents/Resources/config/provider/zcode-builtin.json'
+    binary = os.environ.get('WQ_NODE_BIN') or shutil.which('node')
+    if not binary:
+        raise SystemExit('node not found; set WQ_NODE_BIN')
+    argv = [binary, '/Applications/ZCode.app/Contents/Resources/glm/zcode.cjs',
+            '--cwd', workdir, '--mode', 'yolo', '--json', '--prompt', prompt,
+            '--disallowed-tools', 'BrowserUse,WebSearch,WebFetch,Agent,Task']
+else:
+    raise SystemExit('unknown provider')
+os.execv(binary, argv)