@coinrithm/mcp-trading 0.7.8 → 0.7.10

package/CHANGELOG.md

@@ -5,6 +5,127 @@ ships two binaries — `coinrithm-mcp` (the MCP server) and `coinrithm-agent` (t
 self-host agent runner) — versioned together. The CoinRithm **API contract** is
 versioned separately (see `openapi.yaml` `info.version`, currently `1.7.0`).
 
+## 0.7.10 — 2026-09-15
+
+Source changes following the published 0.7.9 release. The TypeScript SDK remains
+0.3.1 and Python remains 1.8.1; their runtime source is unchanged.
+
+- Persist file-backed run identity before execution so a first-cycle process
+  crash cannot discard the idempotency identity. Transport uncertainty is still
+  not automatically replayed or recorded as a completed trade.
+- Fix runner startup on Node 18: use the imported Node crypto API instead of
+  depending on a global crypto object. The installed-package matrix reproduced
+  this failure on Linux, Windows and macOS.
+- Add the supported `@coinrithm/mcp-trading/engine` entry point, preserving
+  existing deep imports, and separate observation accounting and opportunity
+  reporting from cycle ordering.
+- Add opt-in, machine-checked crypto return predicates and visible warnings for
+  inactive/reserved configuration. Existing agents are not automatically opted in.
+- Serialize scheduler migrations in a bounded transaction; add an offline
+  credential-rotation helper and interruption/recovery rehearsal.
+- Pin workflow actions and verify release-tool checksums. Add installed-package
+  compatibility and restart smoke checks across operating systems and runtimes.
+
+Source/CI checks, registry publication and production deployment are separate.
+This entry does not claim that 0.7.10 is published or deployed.
+
+## 0.7.9 - 2026-09-15
+
+Published on npm and verified on 2026-09-15: the registry archive matches the
+reviewed artifact and passes fresh-install checks. See the
+[combined release notes](https://github.com/CoinRithm/coinrithm-agent-trading/releases/tag/mcp-trading-v0.7.9)
+for source provenance, verification and community acknowledgments.
+
+Public market-data fidelity and runner reliability release. No MCP tool was
+renamed or removed, and the API **contract stays 1.7.0**.
+
+**PM evaluation budget.** Event-driven periodic prediction-market evaluations
+now respect `maxLlmCallsPerHour` after their cooldown elapses. Budget skips make
+no provider call and consume no call allowance. PM keeps its own cooldown;
+open-position management and explicit always-on behavior retain their existing
+exemptions. This runner gate is separate from hosted provider-capacity admission.
+
+**Retry-After parsing.** Missing, blank or malformed headers no longer become
+zero-delay retries. The runner API client uses its existing five-second fallback;
+explicit zero, numeric seconds and HTTP dates remain supported. Model-provider
+cooldowns share the parser and retain their existing one-hour cap.
+
+**API request deadlines.** Each runner API operation now has a 30-second total
+deadline covering response headers, body reads and all 429 retry waits. The
+same client serves the hosted scheduler. Embedded callers can set a finite
+`requestTimeoutMs` and supply an `AbortSignal`. A timeout or cancellation returns
+an uncertain transport result without automatically replaying a trading write.
+Timers and listeners are removed when the operation finishes.
+
+**State persistence.** Self-host state is serialized to a private temporary file
+and atomically renamed over the previous state. A failed serialization or rename
+leaves the prior state intact. This is atomic replacement, not a claim of durable
+storage across power loss.
+
+**Agent conversion.** `coinrithm-agent eject` preserves explicit `triggerPolicy`
+and `capitalSizing` blocks. Previously conversion could restore default hourly
+budgets and drop equity sizing.
+
+**Release verification.** All-source coverage gates, mandatory PostgreSQL CI,
+dependency updates and corrected client setup docs are included. See the
+[reliability record](https://github.com/CoinRithm/coinrithm-agent-trading/blob/main/docs/RELIABILITY.md).
+
+**Confirmed-action journal.** Completed-action memory now requires an action
+to be both accepted and executed. Failed writes and uncertain transport results
+retain their attempt evidence without becoming completed moves in the next
+decision prompt. Dry-run proposals remain unexecuted.
+
+**Direct NVIDIA retry.** One complete HTTP 500/502/503/504 response can be
+retried once on the identical direct NVIDIA route within the original deadline.
+Both attempts are retained. This does not retry trading writes or change the
+hosted shared-pool routing policy.
+
+**Capital reconciliation.** Frozen-balance rounding residue down to -1e-8 is
+normalized only in the sizing calculation after the independent reads agree.
+Negative spendable cash still fails closed; wallet balances are not changed.
+
+**Private decision input evidence.** The bounded numeric projection includes
+nested indicator inputs and context movers, with legacy v1 records still readable.
+It does not retain hidden reasoning or raw model output.
+
+**Compact prediction-market evidence.** Discovery and compact event-detail
+responses now retain the API's `source.quoteScale`, `source.methodology` and
+`source.supportsMarketMetrics`, plus `spreadPoints`, `probabilityBook` and
+each retained outcome's `normalizedProbability`. Venue-native bid/ask quotes
+are never rescaled or interpreted from magnitude. Normalization remains the
+API's calculation over the original full book, not the truncated top-five
+outcome list. Existing payload bounds and explicit `detail: full` behavior
+are unchanged.
+
+**Settlement-time provenance.** Compact events retain `resolvedAtBasis` and
+`settlementWindowClosedAt`, keeping provider expiration distinct from an
+announced settlement time. Null and absent upstream evidence stay null and
+absent; the MCP does not infer missing values.
+
+**Candle semantics.** The `get_candles` description now states that these are
+sampled composite-price bars. Each bar's `v` is a mean rolling 24-hour
+quote-volume observation in USD, not volume traded during the candle, and
+must not be summed across bars.
+
+**HTTP completion diagnostics.** The hosted HTTP
+entry now has a bounded, stderr-only completion observer with final SDK-result
+and finish/abort accounting. Initialization, discovery, tool failures and
+successful delivery are distinct; unknown tool names are normalized. Records
+contain no arguments, bodies, credentials, caller/RPC IDs or caller-origin labels.
+Credential presence is not authentication. Durations describe the HTTP request,
+shared by batch members; server finish does not prove client receipt or use.
+Stdio, tools, authentication and dependency versions are unchanged. See
+`DEPLOY.md` for the measurement and retention limits. Hosted source/image
+`18a0bb6a8a0665e91cebc10225fec6f7ebcdaaf7` passed a bounded anonymous smoke on
+2026-09-13. Hosted verification and npm publication are separate release steps.
+
+**Deployment boundaries.** Hosted scheduler admission reasons are private
+scheduler telemetry, not a new SDK or MCP response field. The API's corrected
+comparison probabilities and enriched spread names use the existing response
+shape and reach current clients through fresh API reads. Outcome display names
+may change; use source/event/outcome identifiers for identity, never summed
+prices or matching labels alone. These fixes do not establish trading returns.
+
 ## 0.7.8
 
 Runner decision-quality, evidence and paper-capital release. Additive: no MCP

package/README.md

@@ -4,16 +4,18 @@
 (Claude, GPT, Gemini, Llama…) a 50,000 mUSD virtual account and let it trade
 spot, futures, and prediction markets on
 [CoinRithm](https://coinrithm.com/agentic-trading). No real money, no exchange,
-no risk — a proving ground to show an agent works *before* anything is on the
-line, with a public **Agent Arena** leaderboard using a versioned,
-confidence-weighted realized-PnL methodology.
+with virtual funds and a public **Agent Arena** leaderboard using a versioned,
+confidence-weighted realized-PnL methodology. Paper results do not establish
+future returns or live execution performance.
 
 **Plus a free prediction-market data surface — no key at all.** The same server
 ships ten keyless `pm_data_*` tools serving CoinRithm's public cross-venue
-dataset: live odds across 12 venues (Polymarket, Kalshi, Smarkets, Limitless,
-Manifold, Metaculus, PredictIt, Rothera, Futuur, Myriad, ForecastEx, Gemini), cross-venue matches with a
-liquidity-aware reference probability, a whale-trade tape, and market-wide
-volume stats ($90B+ all-time tracked). Point any MCP client at the hosted
+dataset: odds, cross-venue matches with a liquidity-aware reference probability,
+a whale-trade tape, and market-wide volume statistics. Availability and freshness
+vary by source; inspect the returned source-health and observation metadata.
+The catalog covers 12 venues: Polymarket, Kalshi, Smarkets, Limitless, Manifold,
+Metaculus, PredictIt, Rothera, Futuur, Myriad, ForecastEx and Gemini.
+Point an MCP client that supports Streamable HTTP at the hosted
 endpoint `https://mcp.coinrithm.com/mcp` and call them anonymously — the API
 key is only needed for the trading tools.
 
@@ -23,8 +25,9 @@ Agents are **OKF bundles** — an open, model-agnostic folder of markdown + YAML
 
 - **Managed — nothing to install.** Build and deploy an agent in your browser
   with the **Agent Studio** (CoinRithm → My Agents → Studio): fork a house agent
-  or write one from scratch, and CoinRithm runs it **free on Nemotron 3 Nano 30B**
-  (NVIDIA NIM) on an always-on scheduler. The fastest path to a live agent.
+  or write one from scratch, and CoinRithm runs it on an always-on scheduler.
+  Studio shows the configured model; shared-pool routing can use another
+  eligible model. Check each agent's configuration and run evidence.
 - **Self-host — this package.** Bring your own model key and run the
   `observe→decide→validate→act` loop on your machine, or wire the MCP server
   into Claude Desktop / Cursor / Codex.
@@ -39,6 +42,24 @@ This package ships two binaries:
 
 > **Paper trading only** — virtual funds (50,000 mUSD). Not financial advice.
 
+## Version 0.7.10
+
+This source version adds restart identity persistence, a supported engine
+import, opt-in entry predicates and configuration warnings. It also fixes
+runner startup on Node 18 by importing the Node crypto API explicitly. See
+[CHANGELOG.md](./CHANGELOG.md). Check `npm view @coinrithm/mcp-trading
+version` for the latest published version. Hosted deployments and npm releases
+are separate.
+
+Runner API operations have a 30-second total deadline, including response
+bodies and 429 retry waits. Timeout and cancellation results remain unconfirmed;
+the client does not automatically replay an uncertain trading write.
+
+Embedding the runner? Import from `@coinrithm/mcp-trading/engine` for the
+supported engine and state helpers. Existing `dist/agent/engine.js` imports
+remain compatible. See the [entry conditions and engine guide](https://github.com/CoinRithm/coinrithm-agent-trading/blob/main/docs/agent-runner.md#binding-entry-conditions-and-strategy-prose)
+for the exact opt-in policy and persistence contract.
+
 ## Quick start
 
 ```bash
@@ -48,13 +69,15 @@ COINRITHM_API_KEY=crk_live_… npx -y @coinrithm/mcp-trading
 
 Get a `crk_live_…` key from CoinRithm → Profile → API Keys. To author and run a
 self-host agent instead, see [Agent runner](#agent-runner-coinrithm-agent).
-Building from source? `npm install && npm run build`.
+Building from source? Use Node 20.19+ or 22.12+, then `npm ci && npm run build`.
+Run `npm run test:coverage` for the enforced 90% statement, branch, function,
+and line gates. See the [coverage scope and reliability checks](https://github.com/CoinRithm/coinrithm-agent-trading/blob/main/docs/RELIABILITY.md).
 
 ## Agent runner (`coinrithm-agent`)
 
 This package also ships a **self-host agent runner**. You write an agent as a
 folder (strategy + hard caps in markdown/YAML); the runner compiles it and runs
-an `observe → decide → validate → act` loop, asking *your* model (bring-your-own
+an `observe → decide → validate → act` loop, asking _your_ model (bring-your-own
 key) for structured decisions and executing only the ones that pass your caps —
 **dry-run by default**, paper-only across spot, futures, and prediction markets.
 
@@ -68,15 +91,15 @@ COINRITHM_API_KEY=crk_live_… ANTHROPIC_API_KEY=sk-ant-… \
 Full guide (env vars, fail-closed guarantees, folder layout):
 **[docs/agent-runner.md](https://github.com/CoinRithm/coinrithm-agent-trading/blob/main/docs/agent-runner.md)**.
 The CoinRithm hosted scheduler runs this same engine for you — see the
-[scheduler README](../../packages/scheduler/README.md) for the built,
+[scheduler README](https://github.com/CoinRithm/coinrithm-agent-trading/blob/main/packages/scheduler/README.md) for the built,
 DB-driven runtime.
 
 ## Two ways to run
 
-| Mode | Entry | Auth | Who it's for |
-| --- | --- | --- | --- |
-| **stdio** (single-user, local) | `dist/index.js` | `COINRITHM_API_KEY` env var | Claude Desktop / Cursor / Codex on your machine |
-| **Streamable HTTP** (multi-user, hosted) | `dist/http.js` | **per-request** `Authorization: Bearer` header | The shared hosted endpoint at `mcp.coinrithm.com` |
+| Mode                                     | Entry           | Auth                                           | Who it's for                                      |
+| ---------------------------------------- | --------------- | ---------------------------------------------- | ------------------------------------------------- |
+| **stdio** (single-user, local)           | `dist/index.js` | `COINRITHM_API_KEY` env var                    | Claude Desktop / Cursor / Codex on your machine   |
+| **Streamable HTTP** (multi-user, hosted) | `dist/http.js`  | **per-request** `Authorization: Bearer` header | The shared hosted endpoint at `mcp.coinrithm.com` |
 
 The hosted HTTP server holds **no** key: each request brings its own
 `crk_live_…` in the Authorization header, and the server forwards exactly that
@@ -89,15 +112,16 @@ tool requires it. See [`DEPLOY.md`](./DEPLOY.md).
 The hosted Agent Studio runs your agent free on a shared pool of NVIDIA-hosted
 models. That pool is a **fixed budget shared by every hosted agent**, so the
 scheduler floors how often a shared agent may run, and the floor stretches as
-more agents join. Bringing your own model key removes that floor entirely:
-your quota is yours, so there is nothing for us to ration.
+more agents join. Bringing your own model key removes the shared-pool interval
+floor. Provider quotas, execution time, trigger policies and account protections
+still apply.
 
-| | Shared free pool | Your own key |
-| --- | --- | --- |
-| Models | the free hosted picks | any model your provider serves |
-| Interval | floored by fleet size | exactly what you configure |
-| Rerouting | we may serve a live alternate when a model is rate-limited | never rerouted, your route is pinned |
-| Cost | free | you pay your provider, not CoinRithm |
+|           | Shared free pool                                           | Your own key                                                 |
+| --------- | ---------------------------------------------------------- | ------------------------------------------------------------ |
+| Models    | the free hosted picks                                      | any model your provider serves                               |
+| Interval  | floored by fleet size                                      | configured interval after completion, subject to other gates |
+| Rerouting | we may serve a live alternate when a model is rate-limited | never rerouted, your route is pinned                         |
+| Cost      | free                                                       | you pay your provider, not CoinRithm                         |
 
 Providers accepted: `nvidia`, `openai`, `groq`, `anthropic`, and any
 `openai-compatible` endpoint (https base URL required). The key is validated by
@@ -113,11 +137,11 @@ agent file.
 
 ## Configure (stdio)
 
-| Env var | Required | Default | Notes |
-| --- | --- | --- | --- |
-| `COINRITHM_API_KEY` | yes (stdio only) | — | A `crk_live_…` key from CoinRithm → Profile → API Keys. **Ignored by the HTTP entry.** |
-| `COINRITHM_API_URL` | no | `https://api.coinrithm.com` | Upstream base URL (live) |
-| `PORT` | no | `8787` | HTTP entry only |
+| Env var             | Required         | Default                     | Notes                                                                                  |
+| ------------------- | ---------------- | --------------------------- | -------------------------------------------------------------------------------------- |
+| `COINRITHM_API_KEY` | yes (stdio only) | —                           | A `crk_live_…` key from CoinRithm → Profile → API Keys. **Ignored by the HTTP entry.** |
+| `COINRITHM_API_URL` | no               | `https://api.coinrithm.com` | Upstream base URL (live)                                                               |
+| `PORT`              | no               | `8787`                      | HTTP entry only                                                                        |
 
 ## Run
 
@@ -136,46 +160,46 @@ agent file.
 
 ## Tools
 
-| Tool | Scope | Wraps |
-| --- | --- | --- |
-| `whoami` | any | `GET /api/agent/me` |
-| `get_portfolio` | read | `GET /api/agent/portfolio` |
-| `get_wallet` | read | `GET /api/agent/wallet` |
-| `resolve_symbol` | read | `GET /api/agent/resolve` |
-| `get_equity_curve` | read | `GET /api/agent/equity-curve` |
-| `get_my_trades` (venue) | read | `GET /api/agent/trades` |
-| `get_market_context` (coinId) | read | `GET /api/agent/market/:coinId` |
-| `get_candles` (coinId, range) | read | `GET /api/agent/market/:coinId/candles` |
-| `discover_pm_markets` | read | `GET /api/agent/pm/discover` |
-| `get_performance` | read | `GET /api/agent/performance` |
-| `get_agent_ledger` | read | `GET /api/agent/ledger` |
-| `export_agent_ledger` | read | `GET /api/agent/ledger/export` |
-| `export_run_evidence` | read | `GET /api/agent/ledger/export?runId=...` |
-| `get_arena_leaderboard` | read | `GET /api/arena` |
-| `get_arena_agent` (handle) | read | `GET /api/arena/:handle` |
-| `list_open_orders` | read | `GET /api/agent/orders/open` |
-| `get_positions` (venue) | read | `GET /api/agent/positions/{futures,pm}` |
-| `spot_quote` | read | `POST /api/agent/spot/quote` |
-| `futures_quote` | read | `POST /api/agent/futures/quote` |
-| `pm_quote` | read | `POST /api/agent/pm/quote` |
-| `place_spot_order` | trade:spot | `POST /api/agent/spot/order` |
-| `cancel_spot_order` | trade:spot | `POST /api/agent/spot/order/:id/cancel` |
-| `open_futures_position` | trade:futures | `POST /api/agent/futures/open` ¹ |
-| `set_futures_sl_tp` | trade:futures | `POST /api/agent/futures/sl-tp` ² |
-| `close_futures_position` | trade:futures | `POST /api/agent/futures/close` |
-| `open_pm_position` | trade:pm | `POST /api/agent/pm/open` ¹ |
-| `report_pm_opportunity` | read | `POST /api/agent/pm/opportunity` |
-| `pm_data_overview` | none (public) | compact `GET /api/prediction-markets/overview` |
-| `pm_data_sources` | none (public) | venue methodology, coverage, and comparable volume bases |
-| `pm_data_sources_health` | none (public) | per-venue freshness, lag, and degraded reasons |
-| `pm_data_events` | none (public) | compact `GET /api/prediction-markets/events` |
-| `pm_data_event` (source, slug, detail?) | none (public) | bounded event evidence by default; `detail: "full"` returns the untouched API record |
-| `pm_data_whales` (limit, default 10) | none (public) | compact `GET /api/prediction-markets/whales` |
-| `pm_data_disagreements` (limit, sort, sourceKind, ...) | none (public) | compact `GET /api/prediction-markets/matches/public` |
-| `pm_data_calibration` | none (public) | `GET /api/prediction-markets/calibration` |
-| `pm_data_canonical` (key?, limit, cursor) | none (public) | `GET /api/prediction-markets/canonical` (+ `/:key` detail) |
-| `pm_data_volume_history` | none (public) | `GET /api/prediction-markets/volume-history` |
-| `get_crypto_movers` (direction, limit) | none (public) | `GET /api/coins/top-{gainers,losers}` |
+| Tool                                                   | Scope         | Wraps                                                                                |
+| ------------------------------------------------------ | ------------- | ------------------------------------------------------------------------------------ |
+| `whoami`                                               | any           | `GET /api/agent/me`                                                                  |
+| `get_portfolio`                                        | read          | `GET /api/agent/portfolio`                                                           |
+| `get_wallet`                                           | read          | `GET /api/agent/wallet`                                                              |
+| `resolve_symbol`                                       | read          | `GET /api/agent/resolve`                                                             |
+| `get_equity_curve`                                     | read          | `GET /api/agent/equity-curve`                                                        |
+| `get_my_trades` (venue)                                | read          | `GET /api/agent/trades`                                                              |
+| `get_market_context` (coinId)                          | read          | `GET /api/agent/market/:coinId`                                                      |
+| `get_candles` (coinId, range)                          | read          | `GET /api/agent/market/:coinId/candles`                                              |
+| `discover_pm_markets`                                  | read          | `GET /api/agent/pm/discover`                                                         |
+| `get_performance`                                      | read          | `GET /api/agent/performance`                                                         |
+| `get_agent_ledger`                                     | read          | `GET /api/agent/ledger`                                                              |
+| `export_agent_ledger`                                  | read          | `GET /api/agent/ledger/export`                                                       |
+| `export_run_evidence`                                  | read          | `GET /api/agent/ledger/export?runId=...`                                             |
+| `get_arena_leaderboard`                                | read          | `GET /api/arena`                                                                     |
+| `get_arena_agent` (handle)                             | read          | `GET /api/arena/:handle`                                                             |
+| `list_open_orders`                                     | read          | `GET /api/agent/orders/open`                                                         |
+| `get_positions` (venue)                                | read          | `GET /api/agent/positions/{futures,pm}`                                              |
+| `spot_quote`                                           | read          | `POST /api/agent/spot/quote`                                                         |
+| `futures_quote`                                        | read          | `POST /api/agent/futures/quote`                                                      |
+| `pm_quote`                                             | read          | `POST /api/agent/pm/quote`                                                           |
+| `place_spot_order`                                     | trade:spot    | `POST /api/agent/spot/order`                                                         |
+| `cancel_spot_order`                                    | trade:spot    | `POST /api/agent/spot/order/:id/cancel`                                              |
+| `open_futures_position`                                | trade:futures | `POST /api/agent/futures/open` ¹                                                     |
+| `set_futures_sl_tp`                                    | trade:futures | `POST /api/agent/futures/sl-tp` ²                                                    |
+| `close_futures_position`                               | trade:futures | `POST /api/agent/futures/close`                                                      |
+| `open_pm_position`                                     | trade:pm      | `POST /api/agent/pm/open` ¹                                                          |
+| `report_pm_opportunity`                                | read          | `POST /api/agent/pm/opportunity`                                                     |
+| `pm_data_overview`                                     | none (public) | compact `GET /api/prediction-markets/overview`                                       |
+| `pm_data_sources`                                      | none (public) | venue methodology, coverage, and comparable volume bases                             |
+| `pm_data_sources_health`                               | none (public) | per-venue freshness, lag, and degraded reasons                                       |
+| `pm_data_events`                                       | none (public) | compact `GET /api/prediction-markets/events`                                         |
+| `pm_data_event` (source, slug, detail?)                | none (public) | bounded event evidence by default; `detail: "full"` returns the untouched API record |
+| `pm_data_whales` (limit, default 10)                   | none (public) | compact `GET /api/prediction-markets/whales`                                         |
+| `pm_data_disagreements` (limit, sort, sourceKind, ...) | none (public) | compact `GET /api/prediction-markets/matches/public`                                 |
+| `pm_data_calibration`                                  | none (public) | `GET /api/prediction-markets/calibration`                                            |
+| `pm_data_canonical` (key?, limit, cursor)              | none (public) | `GET /api/prediction-markets/canonical` (+ `/:key` detail)                           |
+| `pm_data_volume_history`                               | none (public) | `GET /api/prediction-markets/volume-history`                                         |
+| `get_crypto_movers` (direction, limit)                 | none (public) | `GET /api/coins/top-{gainers,losers}`                                                |
 
 `get_crypto_movers` is the universe scan: the biggest 24h movers across every
 coin CoinRithm tracks, so an agent can find candidates it was never configured

package/dist/agent/capitalSizing.js

@@ -8,6 +8,11 @@ export const CAPITAL_VALUATION_BASIS = "wallet_assets_spot_marked_futures_pm_at_
 // This is not an exchange-fill, funding or stop-execution guarantee.
 export const CAPITAL_FEE_BUFFER_BPS = 10;
 const CENT_TOLERANCE = 0.011;
+// Paper settlement writers use EPS=1e-8 on floating-point frozen balances.
+// Thawing the final position can leave negative dust (observed: -6.82e-13).
+// Normalize only that bounded frozen residue, never spendable cash or debt.
+// This is much tighter than reconciliation tolerance and does not edit balances.
+const FROZEN_RESIDUE_TOLERANCE = 1e-8;
 const centsDown = (n) => Math.floor(n * 100) / 100;
 const positive = (n) => asNum(n) !== undefined && n > 0;
 const nonnegative = (n) => asNum(n) !== undefined && n >= 0;
@@ -18,7 +23,8 @@ const nonnegative = (n) => asNum(n) !== undefined && n >= 0;
  * for management; only explicitly attributed current-book rows reconcile its
  * cash and marks. Closed history never contributes unrealized. */
 export function deriveCapitalBook(portfolio, wallet, futures, pm) {
-    const p = asObj(portfolio), w = asObj(wallet), eq = asObj(p.equity), cash = asObj(w.usdt);
+    const p = asObj(portfolio), w = asObj(wallet), eq = asObj(p.equity), rawCash = asObj(w.usdt);
+    const cash = { ...rawCash };
     const unavailable = (reason) => ({
         status: "unavailable",
         reason,
@@ -35,10 +41,17 @@ export function deriveCapitalBook(portfolio, wallet, futures, pm) {
         return unavailable("held_spot_valuation_unproven");
     const buckets = ["available", "frozen", "frozenPm", "frozenFutures"];
     for (const key of buckets) {
-        if (!nonnegative(cash[key]) ||
-            !nonnegative(eq[key]) ||
-            Math.abs(cash[key] - eq[key]) > CENT_TOLERANCE)
+        const walletValue = asNum(rawCash[key]);
+        const portfolioValue = asNum(eq[key]);
+        const minimum = key === "available" ? 0 : -FROZEN_RESIDUE_TOLERANCE;
+        if (walletValue === undefined ||
+            portfolioValue === undefined ||
+            walletValue < minimum ||
+            portfolioValue < minimum ||
+            // Compare raw reads first: normalization must not hide snapshot drift.
+            Math.abs(walletValue - portfolioValue) > CENT_TOLERANCE)
             return unavailable("cash_partitions_incomplete_or_changed");
+        cash[key] = Math.max(0, walletValue);
     }
     const cashTotal = buckets.reduce((sum, k) => sum + cash[k], 0);
     if (eq.totalUsd + CENT_TOLERANCE < cashTotal)

package/dist/agent/cli.js

@@ -1,3 +1,4 @@
+import { configurationWarnings } from "./configurationWarnings.js";
 // coinrithm-agent — the public scaffolder/inspector CLI.
 //
 // Authors, validates, ejects, locks, and inspects agent DEFINITIONS. It does
@@ -101,6 +102,7 @@ export function cmdValidate(path, mode = "self-host") {
     const spec = buildSpec(raw);
     const lint = [...strictLint(raw), ...checkCapabilityDrift(resolved, spec)];
     const v = validateSkill({ spec, body: resolved.mergedProse, raw }, mode);
+    const warnings = configurationWarnings(raw);
     // Hosted-only: the managed deploy/edit API caps the merged strategy prose at
     // HOSTED_PROSE_MAX_CHARS and REVERTS the save when it is exceeded, so a
     // bundle that resolves and lints perfectly can still be undeployable through
@@ -129,10 +131,16 @@ export function cmdValidate(path, mode = "self-host") {
     }
     for (const i of v.issues)
         lines.push(`✗ ${i.code}: ${i.reason}`);
+    lines.push(...warnings.map((warning) => `⚠ ${warning}`));
     lines.push(...pinWarnings(path));
     const ok = v.valid && (!lintFatal || lint.length === 0);
     lines.unshift(ok ? `✓ valid (${mode})` : `✗ invalid (${mode})`);
-    return { ok, code: ok ? 0 : 1, lines, data: { lint, validation: v } };
+    return {
+        ok,
+        code: ok ? 0 : 1,
+        lines,
+        data: { lint, validation: v, warnings },
+    };
 }
 export function cmdLock(path) {
     const v = cmdValidate(path, "self-host");
@@ -215,6 +223,7 @@ export function cmdInspect(path, json = false) {
     ];
     const v = validateSkill({ spec, body: resolved.mergedProse, raw: resolved.rawFrontmatter }, "self-host");
     const output = {
+        warnings: configurationWarnings(resolved.rawFrontmatter),
         resolvedConfig: resolved.rawFrontmatter,
         provenance: resolved.provenance,
         contentHashes: resolved.contentHashes,
@@ -236,6 +245,7 @@ export function cmdInspect(path, json = false) {
         `risk:        maxLeverage=${spec.risk.maxLeverage} perTradeMargin=${spec.risk.perTradeMarginMusd} requireStopLoss=${spec.risk.requireStopLoss}`,
         `sources:     ${Object.keys(resolved.contentHashes).length} file(s)`,
         `validation:  ${v.valid ? "valid" : "INVALID"}${lint.length ? ` (+${lint.length} lint note(s))` : ""}`,
+        ...output.warnings.map((warning) => `⚠ ${warning}`),
     ];
     return { ok: v.valid, code: 0, lines, data: output };
 }

package/dist/agent/client.d.ts

@@ -1,5 +1,6 @@
 import { AgentTrace, ApiResult } from "./types.js";
 export declare const DEFAULT_BASE_URL = "https://api.coinrithm.com";
+export declare const DEFAULT_REQUEST_TIMEOUT_MS = 30000;
 export type ProvenanceReport = {
     runtimeKind?: "hosted_scheduler" | "self_host_runner" | "byo_api" | "mcp_tool";
     packageVersion?: string;
@@ -21,14 +22,20 @@ export interface ClientConfig {
     fetchFn?: typeof fetch;
     sleepFn?: (ms: number) => Promise<void>;
     maxRetries?: number;
+    /** Total deadline, including response bodies and all 429 retry waits. */
+    requestTimeoutMs?: number;
+    /** Optional caller cancellation, applied to each request from this client. */
+    signal?: AbortSignal;
     extraHeaders?: Record<string, string>;
 }
 export declare class CoinRithmClient {
     private readonly apiKey;
     private readonly baseUrl;
     private readonly fetchFn;
-    private readonly sleepFn;
+    private readonly sleepFn?;
     private readonly maxRetries;
+    private readonly requestTimeoutMs;
+    private readonly signal?;
     private readonly extraHeaders?;
     rateLimitHits: number;
     constructor(cfg: ClientConfig);