Login writes access/refresh tokens (and often client_secret) to
tokens.json at mode 0600. Without a gitignore entry, git add . after a
local login can stage live Agentic credentials.
Closes: #20
Live Agentic get_equity_historicals returns
data.results[].bars[] with open_price/high_price/low_price/close_price.
parseHistoricals only read historicals[].data_points[] with short OHLC
names, so CT113 saw bars_len=30 on the wire but 0 parsed bars and VWAP
stayed 0 all day (insufficient_data mass skip).
Accept results|historicals envelopes, bars|data_points arrays, and
*_price aliases alongside short names. Fixture uses the live shape;
legacy short-name envelope stays covered.
Link: #18
get_equity_historicals can return MCP StructuredContent with empty or
non-JSON TextContent. Prefer StructuredContent (marshal to RawMessage)
so paper tradey once/run can parse historicals.
#13
The implementation plan still said "oauth not wired" in a Task 5
error-string sketch. Prefer "not implemented" so unfinished
wiring language does not read like a sibling-product leak.
Pushes and pull requests had no automated test or build on Gitea.
A CI workflow matching the existing Go module runs go test -race and
go build on master, develop, and pull requests.
Fixes#7
Outsiders reading this module should not see private sibling
names (tradey), unfinished rewire notes, or /fast/projects
lab paths. Keep the library self-contained in README, design,
plan, and test fixtures/identity strings.
The repo had no contributor guide, so PRs and leftover-issue citations
were unstated. Add the forge sibling CONTRIBUTING.md so landings go
against develop, commit subjects use area: Imperative form, and leftover
issues are cited by full URL.
Fixes#2
Callers set MCP/OAuth identity on Config before Login/Connect.
Unparseable money errors instead of silent zero. Tests hit an
httptest Robinhood MCP mock, not only injected Callers.