Vibe-Trading

<p align="center"> <b>English</b> | <a href="README_zh.md">中文</a> | <a href="README_ja.md">日本語</a> | <a href="README_ko.md">한국어</a> | <a href="README_ar.md">العربية</a> </p> <p align="center"> <img src="assets/icon.png" width="120" alt="Vibe-Trading Logo"/> </p> <h1 align="center">Vibe-Trading: Your Personal Trading Agent</h1> <p align="center"> <b>One Command to Empower Your Agent with Comprehensive Trading Capabilities</b> </p> <p align="center"> <a href="https://trendshift.io/repositories/25527" target="_blank"><img src="https://trendshift.io/api/badge/repositories/25527" alt="HKUDS%2FVibe-Trading | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a> </p> <p align="center"> <img src="https://img.shields.io/badge/Python-3.11%2B-3776AB?style=flat&logo=python&logoColor=white" alt="Python"> <img src="https://img.shields.io/badge/Backend-FastAPI-009688?style=flat" alt="FastAPI"> <img src="https://img.shields.io/badge/Frontend-React%2019-61DAFB?style=flat&logo=react&logoColor=white" alt="React"> <a href="https://pypi.org/project/vibe-trading-ai/"><img src="https://img.shields.io/pypi/v/vibe-trading-ai?style=flat&logo=pypi&logoColor=white" alt="PyPI"></a> <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow?style=flat" alt="License"></a> <br> <a href="https://github.com/HKUDS/.github/blob/main/profile/README.md"><img src="https://img.shields.io/badge/Feishu-Group-E9DBFC?style=flat-square&logo=feishu&logoColor=white" alt="Feishu"></a> <a href="https://github.com/HKUDS/.github/blob/main/profile/README.md"><img src="https://img.shields.io/badge/WeChat-Group-C5EAB4?style=flat-square&logo=wechat&logoColor=white" alt="WeChat"></a> <a href="https://discord.gg/6TdQnT5xcF"><img src="https://img.shields.io/badge/Discord-Join-7289DA?style=flat-square&logo=discord&logoColor=white" alt="Discord"></a> </p> <p align="center"> <a href="https://vibetrading.wiki/">Website</a> &nbsp;&middot;&nbsp; <a href="https://vibetrading.wiki/docs/">Docs</a> &nbsp;&middot;&nbsp; <a href="#-news">News</a> &nbsp;&middot;&nbsp; <a href="#-key-features">Features</a> &nbsp;&middot;&nbsp; <a href="#-shadow-account">Shadow Account</a> &nbsp;&middot;&nbsp; <a href="#-demo">Demo</a> &nbsp;&middot;&nbsp; <a href="#-quick-start">Quick Start</a> &nbsp;&middot;&nbsp; <a href="#-examples">Examples</a> &nbsp;&middot;&nbsp; <a href="#-api-server">API / MCP</a> &nbsp;&middot;&nbsp; <a href="#-roadmap">Roadmap</a> &nbsp;&middot;&nbsp; <a href="#contributing">Contributing</a> </p> <p align="center"> <a href="#-quick-start"><img src="assets/pip-install.svg" height="45" alt="pip install vibe-trading-ai"></a> </p>

---

📰 News

⚠️ Security warning: The X account VibeTrading_HKU, Virtuals project 101845, and token contract 0x640BDBF77b6447E8b7DB7894cED84BD1c40571f4 are not official Vibe-Trading assets. We have never launched or endorsed any token or memecoin. Do not buy, connect a wallet, or sign anything. Details.

• 2026-08-10 🚀 v0.1.13 released (Release notes, pip install -U vibe-trading-ai): 408 commits and 162 merged pull requests since 0.1.12 — the largest release so far. The headline is a fix, not a feature: the identity gate stops refusing answers it already had the evidence for. A well-formed question would spend minutes on real tool calls and then return "cannot safely confirm instrument identity or price evidence". The causes: .SS and .SH were treated as different instruments, so every Shanghai ticker was permanently ambiguous; a failed side query could demote an already-locked identity; Yahoo's HTTP 400 on every CJK query was recorded as a source failure instead of "not listed here"; a hardcoded per-tool whitelist blocked 11 of the 17 documented argument spellings; Chinese answers were rejected for writing 雅虎 or 元 rather than the ASCII loader name; and a thousands separator split ¥1,309.22 so 1 was compared against the observed range. Conceptual questions and comparison reports no longer dead-end either. A quote outside recorded OHLC evidence is still refused. New: src/quantlib — 249 tested functions across 17 modules (options, bonds, credit, econometrics, VaR/CVaR/EVT, attribution, event studies, purged CV) reachable from the CLI, Web UI, REST API and MCP through the read-only quantlib_call, so skills import finance math instead of carrying formulas in markdown; a valuation engine (run_dcf / run_comps / three-statement) whose one rule is that a missing input makes a model NOT RUNNABLE rather than silently defaulted; an entity + irregular cash-flow spine (XIRR / MOIC / DPI / TVPI, TWR / Modified Dietz via cashflow_performance) kept deliberately parallel to the bar engines; governance in every run — a hash manifest over prompt, skills, tool registry and package versions, plus a hash-chained fsynced audit ledger where even a self-rehashed edit is caught one record later; four read-only data tools on free public sources (SEC 13F with quarter-over-quarter diffs, ETF look-through where a CSI-300 tracker resolves to 342 positions covering 98.66% of net assets instead of the quarterly top ten, prediction markets as labelled implied probability, and arXiv/OpenAlex with source-anchored claims); six institutional commands (/comps /dcf /attrib /memo /earnings /screen); investor lenses as a standalone skill; five scheduled-research playbooks; a desktop Electron shell with checksum-pinned Windows packaging and safeStorage; eToro as the 13th broker connector; Korea (KRX) as the 9th backtest engine; an OpenBB Workspace bridge; Canadian equities end to end; and sentiment, technical_indicators, options_payoff, orderbook_depth, ModelScope and vibe-trading update. Correctness: SEC periods are keyed on their (start, end) span — annual figures had been returning a single quarter, a 4.2× understatement; Tushare A-share prices are corporate-action adjusted, where a raw return across an ex-date was off by up to 47 percentage points; bar_returns no longer records a trading halt as a 0% move; annualisation covers all 24 data sources; a sandbox gap is closed where generated code could import the broker layer or reach socket/subprocess through a renamed binding; and mixed-currency composite backtests are refused instead of summed into one equity curve. Thanks @santhreal, @shadowinlife, @Robin1987China, @he-yufeng, @QCYTSN, @Shizoqua, @honginp, @cgycorey, @wiliao, @ngoanpv, @x-lambda, @ofeksh-tr, @00EVA, @zwrong, @yrk111222, @su322, @hhj123123, @dineeshd, @sambazhu, @ddy4633, @tyj147454413-cmd, @y85998607, @JungHoonGhae, @shugaoye, @TSENGCHIENFENG, @darkknight4563, @MuggleJinx, @klmtseng, @ebujinovch, @g0rdonL, @AmirF194, @Echoandelementwebsites, @yagnikpipaliya, @dvirarad and @1anter.
• 2026-08-09 🪟 Secure Windows packaging, Canada markets, ModelScope, and Alpha Zoo over MCP: Windows desktop packaging now assembles a checksum-pinned embedded Python 3.12 runtime and x64 NSIS review/signing paths, plus Electron safeStorage for an allowlisted credential set. The renderer can set or clear secrets but never read them; plaintext configuration migrates once; decrypted values reach only the owned backend; and both unsigned review and signed builds fail closed on the wrong signature state. No installer artifact was published from this PR (#1015). Canadian equities now work end to end: .TO/.V symbols are classified in CAD, route through Yahoo → yfinance → local fallback, execute under Canada-specific GlobalEquity rules, benchmark against XIC.TO, and refuse mixed-currency aggregation. Strict USD-M historical backtests can also opt into position_adjustment=rebalance while preserving collateral, funding, fees, realized P&L, liquidation behavior, and immutable fill evidence across increases and reductions (#1024, #1019, closes #952). ModelScope joins the built-in providers through its official OpenAI-compatible hosted-inference endpoint, with Qwen/Qwen3.5-27B as the default (#1011); the new vibe-trading update distinguishes wheel installs from editable/source checkouts, installs the exact release it checked, and verifies fresh metadata without downgrading (#1020); and alpha_zoo plus bounded alpha_bench now reach MCP (64 tools), with horizon/result/output-path limits and safe report creation (#979). Verified Python and frontend lock refreshes also update grouped dependencies, postcss, and akshare (#1021, #1023, #1026, #1027). Thanks @QCYTSN, @wiliao, @honginp, @yrk111222, @zwrong, and @cgycorey.
• 2026-08-08 🧱 Desktop shell, eToro, atomic rebalancing, and a broad reliability pass: A source-first Electron host now owns the existing backend lifecycle — random loopback port, per-launch secret, five-locale startup recovery, and owned-process cleanup — while eToro joins with path-separated demo/real profiles; live risk-increasing actions remain mandate-gated and audited, and API capability surfaces are authenticated under enforced CSP (#923, #989, #961). Backtests gain opt-in atomic same-direction rebalancing with immutable fill evidence; Shadow splits mixed markets by settlement currency without invented FX aggregation and honors the configured runtime root; indicators use consecutive unsampled history; negative-equity drawdown and empty insolvent cross accounts are handled correctly (#951, #997, #1017, #1005, #958, #959). OpenAI Codex OAuth gets a separate synchronized credential store and one-shot 401 recovery; proxy opt-out covers sync and async clients; sandboxed runs retain their canonical root; scheduled research isolates malformed records and fixes interval-timezone validation; lowercase 4h requests return true four-hour bars (#1014, #995, #1012, #1003, #1004, #1013). QQ replies retain source message IDs, long model slugs remain readable, and the agent stops when evidence is sufficient (#1008, #1006, #1010). Thanks @QCYTSN, @Shizoqua, @ngoanpv, @hhj123123, @su322, [@Robin1987China](https://git