From cd281c96c2673e0a23c06b326e3d528aff3e1362 Mon Sep 17 00:00:00 2001 From: Elmehdi Aitbrahim Date: Wed, 30 Sep 2026 06:22:13 -0400 Subject: [PATCH] chore(release): 0.21.0 -- the sell side in preview, and three review fixes MINOR: new preview-only commands and a rail change of scope; schema 21 -> 22, additive (sell_proposals). P17/P18 -- live sell placement -- are NOT built; every sell rule is preview-only. What lands: #889 (#799) -- a bracket leg that throws after a filled entry downgrades to open-unbracketed. #896 (#811) -- keel doctor: position.unmanaged, position.unprotected. #898 (#799, #798) -- ledger.drift and ledger.venue_drift, fed by a per-cycle venue-holdings record. #901 (#798) -- keel positions close : an operator-declared exit. #905 (#900 forward fix) -- tranches and brackets book at the venue's filled size; spend rails keep counting the full quote, fee included. #908-#914 -- sell-side contracts, sell_proposals (schema v22), executor.reduce in preview, reductions running last in the cycle. #918-#928 -- reverse_dca, keel dca distribute --preview, the sim reverse path, and the sleeve_sell promotion gate (CLI-only). #935, #936 -- keel dca trim --preview (lots, bands, gain) and profit_take. #937, #939 -- the sleeve exit monitor and keel dca exit --preview, sleeve_exit. #927 -- pyjwt 2.13.0 -> 2.14.0 (CVE-2026-102274). #946 (#943) -- exposure resets at the moment a product goes flat. #947 (#944) -- a watching rule's fee quote can no longer halt the next day's buys; paper sleeve rules propose offline (R78), a sell-preview refusal stays on its row (R79). #948 (#945) -- a permissions refusal on a bracket leg is definite: rejected and retried, not state-unknown (R80). --- packages/keel-broker-alpaca/pyproject.toml | 4 ++-- packages/keel-broker-api/pyproject.toml | 4 ++-- packages/keel-broker-coinbase/pyproject.toml | 4 ++-- packages/keel-broker-fake/pyproject.toml | 4 ++-- packages/keel-broker-kraken/pyproject.toml | 4 ++-- packages/keel-broker-robinhood/pyproject.toml | 4 ++-- packages/keel-core/pyproject.toml | 2 +- pyproject.toml | 8 ++++---- uv.lock | 16 ++++++++-------- 9 files changed, 25 insertions(+), 25 deletions(-) diff --git a/packages/keel-broker-alpaca/pyproject.toml b/packages/keel-broker-alpaca/pyproject.toml index 1f399752..6e9acca1 100644 --- a/packages/keel-broker-alpaca/pyproject.toml +++ b/packages/keel-broker-alpaca/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "keel-broker-alpaca" -version = "0.20.0" +version = "0.21.0" description = "Alpaca Trading API adapter for keel (US equities, cash account)" license = "Apache-2.0" requires-python = ">=3.14" @@ -9,7 +9,7 @@ requires-python = ">=3.14" # deliberately NO `alpaca-py` SDK: Alpaca's Trading + Market Data APIs are plain # JSON-over-HTTPS with two header credentials, so the SDK would add a version-churning # dependency for nothing the port needs. -dependencies = ["keel-core==0.20.0", "keel-broker-api==0.20.0", "requests>=2.32.0"] +dependencies = ["keel-core==0.21.0", "keel-broker-api==0.21.0", "requests>=2.32.0"] [project.entry-points."keel.brokers"] alpaca = "keel_broker_alpaca:AlpacaAdapter" diff --git a/packages/keel-broker-api/pyproject.toml b/packages/keel-broker-api/pyproject.toml index 2c238afe..c641fec4 100644 --- a/packages/keel-broker-api/pyproject.toml +++ b/packages/keel-broker-api/pyproject.toml @@ -1,12 +1,12 @@ [project] name = "keel-broker-api" -version = "0.20.0" +version = "0.21.0" description = "Broker port, domain types, capability model, and conformance suite for keel" license = "Apache-2.0" requires-python = ">=3.14" # Pinned `==`: see the note in the root `pyproject.toml`. An unpinned sibling is satisfied by # whatever is already installed, which is how a deployment ends up running mixed versions. -dependencies = ["keel-core==0.20.0"] +dependencies = ["keel-core==0.21.0"] [project.optional-dependencies] conformance = ["pytest>=9.1.1"] diff --git a/packages/keel-broker-coinbase/pyproject.toml b/packages/keel-broker-coinbase/pyproject.toml index dc187099..2b5b51d8 100644 --- a/packages/keel-broker-coinbase/pyproject.toml +++ b/packages/keel-broker-coinbase/pyproject.toml @@ -1,12 +1,12 @@ [project] name = "keel-broker-coinbase" -version = "0.20.0" +version = "0.21.0" description = "Coinbase Advanced Trade adapter for keel" license = "Apache-2.0" requires-python = ">=3.14" # Siblings pinned `==` (see the root `pyproject.toml`); the third-party SDK is not, because it # has its own release cycle and is not cut from this repo. -dependencies = ["keel-core==0.20.0", "keel-broker-api==0.20.0", "coinbase-advanced-py>=1.8.4"] +dependencies = ["keel-core==0.21.0", "keel-broker-api==0.21.0", "coinbase-advanced-py>=1.8.4"] [project.entry-points."keel.brokers"] coinbase = "keel_broker_coinbase:CoinbaseAdapter" diff --git a/packages/keel-broker-fake/pyproject.toml b/packages/keel-broker-fake/pyproject.toml index 75ed5124..ecd8b777 100644 --- a/packages/keel-broker-fake/pyproject.toml +++ b/packages/keel-broker-fake/pyproject.toml @@ -1,11 +1,11 @@ [project] name = "keel-broker-fake" -version = "0.20.0" +version = "0.21.0" description = "A deliberately divergent second broker adapter, to keep the port honest" license = "Apache-2.0" requires-python = ">=3.14" # Pinned `==`: see the note in the root `pyproject.toml`. -dependencies = ["keel-core==0.20.0", "keel-broker-api==0.20.0"] +dependencies = ["keel-core==0.21.0", "keel-broker-api==0.21.0"] [project.entry-points."keel.brokers"] fake = "keel_broker_fake:FakeAdapter" diff --git a/packages/keel-broker-kraken/pyproject.toml b/packages/keel-broker-kraken/pyproject.toml index b63e8b96..4e0f1137 100644 --- a/packages/keel-broker-kraken/pyproject.toml +++ b/packages/keel-broker-kraken/pyproject.toml @@ -1,13 +1,13 @@ [project] name = "keel-broker-kraken" -version = "0.20.0" +version = "0.21.0" description = "Kraken adapter for keel (port-complete stub; every data/market method raises)" license = "Apache-2.0" requires-python = ">=3.14" # Siblings pinned `==` (see the root `pyproject.toml`). There is deliberately NO third-party # dependency: this package is a stub (#313) that handles no keys and makes no network calls, # so a Kraken SDK (and its credentials) arrive with the real implementation, not before it. -dependencies = ["keel-core==0.20.0", "keel-broker-api==0.20.0"] +dependencies = ["keel-core==0.21.0", "keel-broker-api==0.21.0"] [project.entry-points."keel.brokers"] kraken = "keel_broker_kraken:KrakenAdapter" diff --git a/packages/keel-broker-robinhood/pyproject.toml b/packages/keel-broker-robinhood/pyproject.toml index 91bdb83e..244c69b6 100644 --- a/packages/keel-broker-robinhood/pyproject.toml +++ b/packages/keel-broker-robinhood/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "keel-broker-robinhood" -version = "0.20.0" +version = "0.21.0" description = "Robinhood Crypto Trading API v2 adapter for keel" license = "Apache-2.0" requires-python = ">=3.14" @@ -8,7 +8,7 @@ requires-python = ">=3.14" # Ed25519 key, which no other venue keel talks to requires. Keeping it a dependency of this # package alone means an engine that never installs this adapter never installs the crypto stack # either -- the whole point of adapters being separate distributions. -dependencies = ["keel-core==0.20.0", "keel-broker-api==0.20.0", "pynacl>=1.5.0", "requests>=2.32.0"] +dependencies = ["keel-core==0.21.0", "keel-broker-api==0.21.0", "pynacl>=1.5.0", "requests>=2.32.0"] [project.entry-points."keel.brokers"] robinhood = "keel_broker_robinhood:RobinhoodAdapter" diff --git a/packages/keel-core/pyproject.toml b/packages/keel-core/pyproject.toml index a9ca8971..acdc7702 100644 --- a/packages/keel-core/pyproject.toml +++ b/packages/keel-core/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "keel-core" -version = "0.20.0" +version = "0.21.0" description = "Shared domain types, configuration, and logging for keel" license = "Apache-2.0" requires-python = ">=3.14" diff --git a/pyproject.toml b/pyproject.toml index 17557629..8a5192aa 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "keel-trader" -version = "0.20.0" +version = "0.21.0" description = "Offline-first, broker-agnostic, rule-based spot-trading agent (halal policy by default)" license = "Apache-2.0" readme = "README.md" @@ -23,15 +23,15 @@ dependencies = [ # in one build, so `==` states a fact rather than guessing at compatibility. The cost is that # a version bump must move these numbers too -- the bump already edits every package's # `version`, and `tests/test_packaging.py` fails the build if a pin is left behind. - "keel-core==0.20.0", - "keel-broker-api==0.20.0", + "keel-core==0.21.0", + "keel-broker-api==0.21.0", # The default venue resolves through the keel.brokers entry points (#524), so the adapter # is a hard runtime dependency, not a convenience: without it installed, every config -- # including one with no `broker:` section -- fails at broker construction. The CLI also # imports the SDK directly to build the adapter's RESTClient transport # (`keel/commands/_common.py`); moving that construction into the adapter package is # Phase B's, with cb_client.py's deletion. - "keel-broker-coinbase==0.20.0", + "keel-broker-coinbase==0.21.0", ] [project.scripts] diff --git a/uv.lock b/uv.lock index 0b1ecb86..9fa23cf8 100644 --- a/uv.lock +++ b/uv.lock @@ -454,7 +454,7 @@ wheels = [ [[package]] name = "keel-broker-alpaca" -version = "0.20.0" +version = "0.21.0" source = { editable = "packages/keel-broker-alpaca" } dependencies = [ { name = "keel-broker-api" }, @@ -471,7 +471,7 @@ requires-dist = [ [[package]] name = "keel-broker-api" -version = "0.20.0" +version = "0.21.0" source = { editable = "packages/keel-broker-api" } dependencies = [ { name = "keel-core" }, @@ -491,7 +491,7 @@ provides-extras = ["conformance"] [[package]] name = "keel-broker-coinbase" -version = "0.20.0" +version = "0.21.0" source = { editable = "packages/keel-broker-coinbase" } dependencies = [ { name = "coinbase-advanced-py" }, @@ -508,7 +508,7 @@ requires-dist = [ [[package]] name = "keel-broker-fake" -version = "0.20.0" +version = "0.21.0" source = { editable = "packages/keel-broker-fake" } dependencies = [ { name = "keel-broker-api" }, @@ -523,7 +523,7 @@ requires-dist = [ [[package]] name = "keel-broker-kraken" -version = "0.20.0" +version = "0.21.0" source = { editable = "packages/keel-broker-kraken" } dependencies = [ { name = "keel-broker-api" }, @@ -538,7 +538,7 @@ requires-dist = [ [[package]] name = "keel-broker-robinhood" -version = "0.20.0" +version = "0.21.0" source = { editable = "packages/keel-broker-robinhood" } dependencies = [ { name = "keel-broker-api" }, @@ -557,7 +557,7 @@ requires-dist = [ [[package]] name = "keel-core" -version = "0.20.0" +version = "0.21.0" source = { editable = "packages/keel-core" } dependencies = [ { name = "keyring" }, @@ -574,7 +574,7 @@ requires-dist = [ [[package]] name = "keel-trader" -version = "0.20.0" +version = "0.21.0" source = { editable = "." } dependencies = [ { name = "click" },