@senpi/runtime 1.0.95-dev.runtime-phase-2.20260506193916 → 1.0.95-dev.runtime-phase-2-api.20260507130312

package/dist/runtime-api/routes/audit.schema.js

@@ -0,0 +1,78 @@
+/**
+ * TypeBox schema for the `GET /audit` query string.
+ *
+ * All Fastify query-string values arrive as strings. Integer fields
+ * (`min_duration_ms`, `max_duration_ms`, `limit`, `offset`) and the `success`
+ * boolean are declared as strings here so TypeBox validation passes on the raw
+ * HTTP input. The route handler coerces them to the appropriate types before
+ * forwarding to `auditHandler`.
+ *
+ * Fields excluded from the caller-visible surface (per plan Section 6):
+ *  - `resource_type` — always `"strategy"`, set by `RuntimeHandle.auditQuery`.
+ *  - `resource_id`   — resolved wallet → strategyId, set by the handle.
+ *  - `user_ids`      — server-controlled (the MCP API-key user).
+ *  - `usernames`     — server-controlled (the MCP API-key user).
+ *
+ * @see senpi-hyperliquid-mcp/src/tools/audit.tools.ts `auditQueryInputSchema`
+ *   for the upstream MCP Zod schema this mirrors.
+ */
+import { Type } from "@sinclair/typebox";
+/** TypeBox schema for `GET /audit` query-string parameters. */
+export const AuditQuery = Type.Object({
+    /**
+     * Wallet address to scope the audit query.
+     * Required — used to look up the matching runtime handle.
+     */
+    address: Type.String({ minLength: 1 }),
+    /** Filter by exact tool name (e.g. `create_position`). */
+    tool_name: Type.Optional(Type.String()),
+    /**
+     * Filter by action classification.
+     * One of: `read`, `create`, `update`, `delete`.
+     */
+    action_type: Type.Optional(Type.Union([
+        Type.Literal("read"),
+        Type.Literal("create"),
+        Type.Literal("update"),
+        Type.Literal("delete"),
+    ])),
+    /**
+     * Filter by success/failure.
+     * Query strings arrive as text — coerce `"true"` / `"false"` in the route.
+     */
+    success: Type.Optional(Type.Union([Type.Literal("true"), Type.Literal("false")])),
+    /** ISO 8601 inclusive lower bound on `requested_at`. */
+    start_time: Type.Optional(Type.String()),
+    /** ISO 8601 inclusive upper bound on `requested_at`. */
+    end_time: Type.Optional(Type.String()),
+    /**
+     * Minimum end-to-end duration in ms.
+     * Arrives as a string; pattern restricts to non-negative integers so
+     * `parseInt` never produces NaN. Coerced to integer in the route handler.
+     */
+    min_duration_ms: Type.Optional(Type.String({ pattern: "^\\d+$" })),
+    /**
+     * Maximum end-to-end duration in ms.
+     * Arrives as a string; pattern restricts to non-negative integers so
+     * `parseInt` never produces NaN. Coerced to integer in the route handler.
+     */
+    max_duration_ms: Type.Optional(Type.String({ pattern: "^\\d+$" })),
+    /**
+     * Page size (1–1000, MCP default 100).
+     * Arrives as a string; pattern restricts to non-negative integers.
+     * Coerced to integer in the route handler. Default `100` applied on
+     * missing value. MCP enforces the 1–1000 range.
+     */
+    limit: Type.Optional(Type.String({ pattern: "^\\d+$" })),
+    /**
+     * Offset-based pagination skip count (≥0, MCP default 0).
+     * Arrives as a string; pattern restricts to non-negative integers.
+     * Coerced to integer in the route handler.
+     */
+    offset: Type.Optional(Type.String({ pattern: "^\\d+$" })),
+    /** Cursor timestamp for keyset pagination (ISO 8601). Must pair with `cursor_id`. */
+    cursor_requested_at: Type.Optional(Type.String()),
+    /** Cursor UUID for keyset pagination. Must pair with `cursor_requested_at`. */
+    cursor_id: Type.Optional(Type.String()),
+}, { additionalProperties: false });
+//# sourceMappingURL=audit.schema.js.map

package/dist/runtime-api/routes/audit.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.schema.js","sourceRoot":"","sources":["../../../src/runtime-api/routes/audit.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AAEtD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CACnC;IACE;;;OAGG;IACH,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAEtC,0DAA0D;IAC1D,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAEvC;;;OAGG;IACH,WAAW,EAAE,IAAI,CAAC,QAAQ,CACxB,IAAI,CAAC,KAAK,CAAC;QACT,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;KACvB,CAAC,CACH;IAED;;;OAGG;IACH,OAAO,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAC1D;IAED,wDAAwD;IACxD,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAExC,wDAAwD;IACxD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAEtC;;;;OAIG;IACH,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAElE;;;;OAIG;IACH,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAElE;;;;;OAKG;IACH,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAExD;;;;OAIG;IACH,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEzD,qFAAqF;IACrF,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAEjD,+EAA+E;IAC/E,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CACxC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC"}

package/dist/runtime-api/routes/health.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Fastify route: `GET /health`.
+ *
+ * Returns a three-state readiness signal (`starting` | `ok` | `draining`)
+ * suitable for load-balancer / Kubernetes liveness and readiness probes.
+ * Also exposes per-runtime signal-queue depth for capacity planning.
+ *
+ * HTTP status:
+ *  - `200` when `status === "ok"`.
+ *  - `503` when `status === "starting"` or `"draining"` — load balancer
+ *    should stop routing new requests but the process is still alive.
+ */
+import type { FastifyInstance } from "fastify";
+import type { Readiness } from "../readiness.js";
+import type { RuntimeHandle } from "../../runtime/run.js";
+/**
+ * Dependencies injected into the `/health` route at registration time.
+ */
+export interface HealthRouteDeps {
+    /** Live runtime handles maintained by the plugin, keyed by lowercased address. */
+    runtimeHandles: Map<string, RuntimeHandle>;
+    /** Subset of `ApiConfig` needed for the response body. */
+    apiConfig: {
+        host: string;
+        port: number;
+    };
+    /**
+     * Three-state readiness flag.
+     * S5 (lifecycle) flips it to `"ok"` after the server binds and to
+     * `"draining"` during graceful shutdown.
+     */
+    readiness: Readiness;
+    /**
+     * Plugin version string (read from `openclaw.plugin.json` at boot).
+     * Included in the response so callers can correlate logs with deployments.
+     */
+    version: string;
+    /** Unix epoch ms timestamp recorded when `createApi()` was called. */
+    bootedAt: number;
+}
+/**
+ * Register `GET /health` on the given Fastify instance.
+ *
+ * Response is never cached (`Cache-Control: no-store`). The shape is stable
+ * across minor versions — callers may rely on `status`, `runtimes.count`, and
+ * `runtimes.items[].signalQueueDepth` being present whenever the server is
+ * reachable.
+ *
+ * @param fastify  Fastify instance to register the route on.
+ * @param deps     Route dependencies injected at plugin start.
+ */
+export declare function registerHealthRoute(fastify: FastifyInstance, deps: HealthRouteDeps): void;
+//# sourceMappingURL=health.d.ts.map

package/dist/runtime-api/routes/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../src/runtime-api/routes/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3C,0DAA0D;IAC1D,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C;;;;OAIG;IACH,SAAS,EAAE,SAAS,CAAC;IACrB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,eAAe,GACpB,IAAI,CAyBN"}

package/dist/runtime-api/routes/health.js

@@ -0,0 +1,48 @@
+/**
+ * Fastify route: `GET /health`.
+ *
+ * Returns a three-state readiness signal (`starting` | `ok` | `draining`)
+ * suitable for load-balancer / Kubernetes liveness and readiness probes.
+ * Also exposes per-runtime signal-queue depth for capacity planning.
+ *
+ * HTTP status:
+ *  - `200` when `status === "ok"`.
+ *  - `503` when `status === "starting"` or `"draining"` — load balancer
+ *    should stop routing new requests but the process is still alive.
+ */
+/**
+ * Register `GET /health` on the given Fastify instance.
+ *
+ * Response is never cached (`Cache-Control: no-store`). The shape is stable
+ * across minor versions — callers may rely on `status`, `runtimes.count`, and
+ * `runtimes.items[].signalQueueDepth` being present whenever the server is
+ * reachable.
+ *
+ * @param fastify  Fastify instance to register the route on.
+ * @param deps     Route dependencies injected at plugin start.
+ */
+export function registerHealthRoute(fastify, deps) {
+    fastify.get("/health", async (_req, reply) => {
+        const status = deps.readiness.state();
+        const httpStatus = status === "ok" ? 200 : 503;
+        const items = Array.from(deps.runtimeHandles, ([_id, handle]) => ({
+            address: handle.wallet.toLowerCase(),
+            signalQueueDepth: handle.getSignalQueueDepth(),
+        }));
+        return reply
+            .status(httpStatus)
+            .header("Cache-Control", "no-store")
+            .send({
+            status,
+            version: deps.version,
+            uptime_ms: Date.now() - deps.bootedAt,
+            runtimes: { count: items.length, items },
+            api: { host: deps.apiConfig.host, port: deps.apiConfig.port },
+            build: {
+                commit: process.env.SENPI_GIT_COMMIT ?? null,
+                node: process.version,
+            },
+        });
+    });
+}
+//# sourceMappingURL=health.js.map

package/dist/runtime-api/routes/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../src/runtime-api/routes/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA6BH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAwB,EACxB,IAAqB;IAErB,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAE/C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAChE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE;YACpC,gBAAgB,EAAE,MAAM,CAAC,mBAAmB,EAAE;SAC/C,CAAC,CAAC,CAAC;QAEJ,OAAO,KAAK;aACT,MAAM,CAAC,UAAU,CAAC;aAClB,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC;aACnC,IAAI,CAAC;YACJ,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ;YACrC,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE;YACxC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;YAC7D,KAAK,EAAE;gBACL,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI;gBAC5C,IAAI,EAAE,OAAO,CAAC,OAAO;aACtB;SACF,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime-api/routes/signals.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Fastify route: `POST /signals`.
+ *
+ * Accepts a batch of signal items targeting one or more runtime wallets,
+ * groups them by `(address, scanner)` to avoid the per-key ingest lock, fans
+ * out groups in parallel, processes items within each group sequentially, and
+ * returns per-item results in input order.
+ *
+ * Business logic lives entirely in:
+ *  - `handlers/ingest-signals.ts` — per-item dispatch + error translation.
+ *  - `handlers/group-by-scanner.ts` — lock-aware grouping helper.
+ *
+ * This file contains only Fastify wiring and the handler-level cap check.
+ */
+import type { FastifyInstance } from "fastify";
+import type { RuntimeHandle } from "../../runtime/run.js";
+import type { Logger } from "../../utils/logger.js";
+/**
+ * Dependencies injected into the `/signals` route at registration time.
+ */
+export interface SignalsRouteDeps {
+    /** Live runtime handles maintained by the plugin, keyed by lowercased address. */
+    runtimeHandles: Map<string, RuntimeHandle>;
+    /** Logger instance for unexpected errors. */
+    logger: Logger;
+    /**
+     * Maximum number of items allowed in a single request.
+     * Sourced from `config.api.maxItemsPerSignalsRequest` (default 10).
+     */
+    maxItems: number;
+    /**
+     * Transport tag forwarded to the ingest handler for telemetry.
+     * Fixed as `"http"` for this route; the gateway shim passes `"gateway"`.
+     */
+    transport: "http" | "gateway";
+}
+/**
+ * Register `POST /signals` on the given Fastify instance.
+ *
+ * The route validates the body against the `SignalsBody` TypeBox schema, then:
+ * 1. Rejects oversized batches (handler-level cap, configurable).
+ * 2. Groups items by `(address, scanner)` via `groupByAddressScanner`.
+ * 3. Runs groups in parallel; items within each group run sequentially.
+ * 4. Re-flattens results back to input order before responding.
+ *
+ * @param fastify  Fastify instance to register the route on.
+ * @param deps     Route dependencies injected at plugin start.
+ */
+export declare function registerSignalsRoute(fastify: FastifyInstance, deps: SignalsRouteDeps): void;
+//# sourceMappingURL=signals.d.ts.map

package/dist/runtime-api/routes/signals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signals.d.ts","sourceRoot":"","sources":["../../../src/runtime-api/routes/signals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAM/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAwDpD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kFAAkF;IAClF,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3C,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,gBAAgB,GACrB,IAAI,CA+CN"}

package/dist/runtime-api/routes/signals.js

@@ -0,0 +1,90 @@
+/**
+ * Fastify route: `POST /signals`.
+ *
+ * Accepts a batch of signal items targeting one or more runtime wallets,
+ * groups them by `(address, scanner)` to avoid the per-key ingest lock, fans
+ * out groups in parallel, processes items within each group sequentially, and
+ * returns per-item results in input order.
+ *
+ * Business logic lives entirely in:
+ *  - `handlers/ingest-signals.ts` — per-item dispatch + error translation.
+ *  - `handlers/group-by-scanner.ts` — lock-aware grouping helper.
+ *
+ * This file contains only Fastify wiring and the handler-level cap check.
+ */
+import { SignalsBody } from "./signals.schema.js";
+import { ingestSignalsHandler } from "../handlers/ingest-signals.js";
+import { groupByAddressScanner } from "../handlers/group-by-scanner.js";
+function toWire(r) {
+    if (r.success) {
+        return {
+            success: true,
+            address: r.address,
+            scanner: r.scanner,
+            data: {
+                timestamp: r.timestamp,
+                signalCount: r.signalCount,
+                contextUpdated: r.contextUpdated,
+            },
+        };
+    }
+    return {
+        success: false,
+        address: r.address,
+        scanner: r.scanner,
+        error: {
+            code: r.code,
+            message: r.message,
+        },
+    };
+}
+/**
+ * Register `POST /signals` on the given Fastify instance.
+ *
+ * The route validates the body against the `SignalsBody` TypeBox schema, then:
+ * 1. Rejects oversized batches (handler-level cap, configurable).
+ * 2. Groups items by `(address, scanner)` via `groupByAddressScanner`.
+ * 3. Runs groups in parallel; items within each group run sequentially.
+ * 4. Re-flattens results back to input order before responding.
+ *
+ * @param fastify  Fastify instance to register the route on.
+ * @param deps     Route dependencies injected at plugin start.
+ */
+export function registerSignalsRoute(fastify, deps) {
+    fastify.post("/signals", { schema: { body: SignalsBody } }, async (req, reply) => {
+        const items = req.body;
+        // Handler-level cap — operator-tunable, not encoded in the TypeBox schema.
+        if (items.length > deps.maxItems) {
+            return reply.status(400).send({
+                success: false,
+                error: {
+                    code: "INVALID_REQUEST",
+                    message: `Exceeded api.maxItemsPerSignalsRequest=${deps.maxItems}; got ${items.length}.`,
+                },
+            });
+        }
+        // Group by (address, scanner) — each group is a SignalGroup (IndexedSignalItem[]).
+        const groups = groupByAddressScanner(items);
+        // Fan out across groups in parallel; process items within each group sequentially.
+        const grouped = await Promise.all(groups.map(async (group) => {
+            const out = [];
+            for (const { index, item } of group) {
+                out.push({
+                    index,
+                    result: await ingestSignalsHandler(item, {
+                        runtimeHandles: deps.runtimeHandles,
+                        logger: deps.logger,
+                        transport: deps.transport,
+                    }),
+                });
+            }
+            return out;
+        }));
+        // Re-flatten in input order.
+        const flat = grouped.flat();
+        flat.sort((a, b) => a.index - b.index);
+        const results = flat.map((entry) => toWire(entry.result));
+        return reply.send({ success: true, data: { results } });
+    });
+}
+//# sourceMappingURL=signals.js.map

package/dist/runtime-api/routes/signals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signals.js","sourceRoot":"","sources":["../../../src/runtime-api/routes/signals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAoCxE,SAAS,MAAM,CAAC,CAAe;IAC7B,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE;gBACJ,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,cAAc,EAAE,CAAC,CAAC,cAAc;aACjC;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,KAAK,EAAE;YACL,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB;KACF,CAAC;AACJ,CAAC;AAsBD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAwB,EACxB,IAAsB;IAEtB,OAAO,CAAC,IAAI,CACV,UAAU,EACV,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EACjC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAoB,CAAC;QAEvC,2EAA2E;QAC3E,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,0CAA0C,IAAI,CAAC,QAAQ,SAAS,KAAK,CAAC,MAAM,GAAG;iBACzF;aACF,CAAC,CAAC;QACL,CAAC;QAED,mFAAmF;QACnF,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAE5C,mFAAmF;QACnF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACzB,MAAM,GAAG,GAAmD,EAAE,CAAC;YAC/D,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC;gBACpC,GAAG,CAAC,IAAI,CAAC;oBACP,KAAK;oBACL,MAAM,EAAE,MAAM,oBAAoB,CAAC,IAAI,EAAE;wBACvC,cAAc,EAAE,IAAI,CAAC,cAAc;wBACnC,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;qBAC1B,CAAC;iBACH,CAAC,CAAC;YACL,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CACH,CAAC;QAEF,6BAA6B;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,OAAO,GAAuB,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAE9E,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/runtime-api/routes/signals.schema.d.ts

@@ -0,0 +1,94 @@
+/**
+ * TypeBox schema for the `POST /signals` request body.
+ *
+ * `SignalItemT` is derived from TypeBox `Static<>` and is structurally
+ * compatible with the hand-written {@link SignalItem} interface in
+ * `handlers/types.ts`. The interface in `handlers/types.ts` is kept as the
+ * canonical description (referenced by JSDoc across the codebase); this module
+ * derives the runtime-validatable form from TypeBox so both shapes stay in
+ * sync at compile-time.
+ *
+ * Note on `direction`: the TypeBox schema accepts any string so
+ * `SignalItemT["direction"]` is `string | undefined`, matching
+ * `Signal["direction"]` in `scanners/types.ts`. The tighter
+ * `"long" | "short" | null` constraint lives in the MCP layer; the runtime
+ * applies it implicitly during scanner-engine ingest.
+ *
+ * Note on `maxItems`: enforced at handler level using the configured
+ * `api.maxItemsPerSignalsRequest` value (default 10). Schema-level cap is
+ * kept open-ended so the shape works in tests without recompiling.
+ */
+import { type Static } from "@sinclair/typebox";
+/** TypeBox schema for one item in the `POST /signals` body. */
+export declare const SignalItem: import("@sinclair/typebox").TObject<{
+    /** Wallet address of the target runtime. Lowercased server-side. */
+    address: import("@sinclair/typebox").TString;
+    /** Configured scanner id. */
+    scanner: import("@sinclair/typebox").TString;
+    /** Asset for a single ingested signal. */
+    asset: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    /**
+     * Direction for a single ingested signal.
+     * Accepts any string — `"long"` / `"short"` are the conventional values.
+     */
+    direction: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    /** Confidence score for a single ingested signal (0–1). */
+    score: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+    /** Signal classification override for a single ingested signal. */
+    signal_type: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    /**
+     * Single ingest payload for signal-producing or context-producing scanners.
+     * Mutually exclusive with `signals[]`.
+     */
+    data: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>>;
+    /**
+     * Batch signal payloads for signal-producing external scanners.
+     * Mutually exclusive with `data`.
+     */
+    signals: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        asset: import("@sinclair/typebox").TString;
+        direction: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        score: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+        signal_type: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        data: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>;
+    }>>>;
+}>;
+/** TypeBox schema for the full `POST /signals` request body array. */
+export declare const SignalsBody: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+    /** Wallet address of the target runtime. Lowercased server-side. */
+    address: import("@sinclair/typebox").TString;
+    /** Configured scanner id. */
+    scanner: import("@sinclair/typebox").TString;
+    /** Asset for a single ingested signal. */
+    asset: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    /**
+     * Direction for a single ingested signal.
+     * Accepts any string — `"long"` / `"short"` are the conventional values.
+     */
+    direction: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    /** Confidence score for a single ingested signal (0–1). */
+    score: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+    /** Signal classification override for a single ingested signal. */
+    signal_type: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    /**
+     * Single ingest payload for signal-producing or context-producing scanners.
+     * Mutually exclusive with `signals[]`.
+     */
+    data: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>>;
+    /**
+     * Batch signal payloads for signal-producing external scanners.
+     * Mutually exclusive with `data`.
+     */
+    signals: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        asset: import("@sinclair/typebox").TString;
+        direction: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        score: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+        signal_type: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        data: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>;
+    }>>>;
+}>>;
+/** TypeScript type for one signal item — derived from TypeBox, single source of truth. */
+export type SignalItemT = Static<typeof SignalItem>;
+/** TypeScript type for the `POST /signals` request body. */
+export type SignalsBodyT = Static<typeof SignalsBody>;
+//# sourceMappingURL=signals.schema.d.ts.map

package/dist/runtime-api/routes/signals.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signals.schema.d.ts","sourceRoot":"","sources":["../../../src/runtime-api/routes/signals.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEtD,+DAA+D;AAC/D,eAAO,MAAM,UAAU;IAEnB,oEAAoE;;IAEpE,6BAA6B;;IAE7B,0CAA0C;;IAE1C;;;OAGG;;IAEH,2DAA2D;;IAE3D,mEAAmE;;IAEnE;;;OAGG;;IAEH;;;OAGG;;;;;;;;EAcN,CAAC;AAEF,sEAAsE;AACtE,eAAO,MAAM,WAAW;IAxCpB,oEAAoE;;IAEpE,6BAA6B;;IAE7B,0CAA0C;;IAE1C;;;OAGG;;IAEH,2DAA2D;;IAE3D,mEAAmE;;IAEnE;;;OAGG;;IAEH;;;OAGG;;;;;;;;GAiB2D,CAAC;AAEnE,0FAA0F;AAC1F,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,4DAA4D;AAC5D,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,WAAW,CAAC,CAAC"}

package/dist/runtime-api/routes/signals.schema.js

@@ -0,0 +1,58 @@
+/**
+ * TypeBox schema for the `POST /signals` request body.
+ *
+ * `SignalItemT` is derived from TypeBox `Static<>` and is structurally
+ * compatible with the hand-written {@link SignalItem} interface in
+ * `handlers/types.ts`. The interface in `handlers/types.ts` is kept as the
+ * canonical description (referenced by JSDoc across the codebase); this module
+ * derives the runtime-validatable form from TypeBox so both shapes stay in
+ * sync at compile-time.
+ *
+ * Note on `direction`: the TypeBox schema accepts any string so
+ * `SignalItemT["direction"]` is `string | undefined`, matching
+ * `Signal["direction"]` in `scanners/types.ts`. The tighter
+ * `"long" | "short" | null` constraint lives in the MCP layer; the runtime
+ * applies it implicitly during scanner-engine ingest.
+ *
+ * Note on `maxItems`: enforced at handler level using the configured
+ * `api.maxItemsPerSignalsRequest` value (default 10). Schema-level cap is
+ * kept open-ended so the shape works in tests without recompiling.
+ */
+import { Type } from "@sinclair/typebox";
+/** TypeBox schema for one item in the `POST /signals` body. */
+export const SignalItem = Type.Object({
+    /** Wallet address of the target runtime. Lowercased server-side. */
+    address: Type.String({ minLength: 1 }),
+    /** Configured scanner id. */
+    scanner: Type.String({ minLength: 1 }),
+    /** Asset for a single ingested signal. */
+    asset: Type.Optional(Type.String()),
+    /**
+     * Direction for a single ingested signal.
+     * Accepts any string — `"long"` / `"short"` are the conventional values.
+     */
+    direction: Type.Optional(Type.String()),
+    /** Confidence score for a single ingested signal (0–1). */
+    score: Type.Optional(Type.Number({ minimum: 0, maximum: 1 })),
+    /** Signal classification override for a single ingested signal. */
+    signal_type: Type.Optional(Type.String()),
+    /**
+     * Single ingest payload for signal-producing or context-producing scanners.
+     * Mutually exclusive with `signals[]`.
+     */
+    data: Type.Optional(Type.Record(Type.String(), Type.Unknown())),
+    /**
+     * Batch signal payloads for signal-producing external scanners.
+     * Mutually exclusive with `data`.
+     */
+    signals: Type.Optional(Type.Array(Type.Object({
+        asset: Type.String(),
+        direction: Type.Optional(Type.String()),
+        score: Type.Optional(Type.Number({ minimum: 0, maximum: 1 })),
+        signal_type: Type.Optional(Type.String()),
+        data: Type.Record(Type.String(), Type.Unknown()),
+    }))),
+}, { additionalProperties: false });
+/** TypeBox schema for the full `POST /signals` request body array. */
+export const SignalsBody = Type.Array(SignalItem, { minItems: 1 });
+//# sourceMappingURL=signals.schema.js.map

package/dist/runtime-api/routes/signals.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signals.schema.js","sourceRoot":"","sources":["../../../src/runtime-api/routes/signals.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AAEtD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CACnC;IACE,oEAAoE;IACpE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACtC,6BAA6B;IAC7B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACtC,0CAA0C;IAC1C,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC;;;OAGG;IACH,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACvC,2DAA2D;IAC3D,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7D,mEAAmE;IACnE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACzC;;;OAGG;IACH,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D;;;OAGG;IACH,OAAO,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,KAAK,CACR,IAAI,CAAC,MAAM,CAAC;QACV,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;QACpB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACvC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7D,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACzC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;KACjD,CAAC,CACH,CACF;CACF,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAEF,sEAAsE;AACtE,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC"}

package/dist/runtime-api/server.d.ts

@@ -0,0 +1,79 @@
+/**
+ * `createApi()` — Fastify server factory for the runtime HTTP API.
+ *
+ * Wires the Fastify instance with:
+ *  - `POST /signals` — ingest signals for one or more wallets.
+ *  - `GET  /audit`   — MCP audit-query proxy scoped to one wallet.
+ *  - `GET  /health`  — three-state readiness + per-runtime queue depth.
+ *
+ * Returns the Fastify instance, the mutable readiness flag, and the boot
+ * timestamp. The lifecycle layer (S5) calls `fastify.listen()` and flips
+ * `readiness.setOk()` / `readiness.setDraining()` around start/stop.
+ *
+ * This module owns only wiring — no business logic. All route logic
+ * delegates to the shared handlers in `handlers/`.
+ */
+import { type FastifyInstance } from "fastify";
+import { createReadiness } from "./readiness.js";
+import type { RuntimeHandle } from "../runtime/run.js";
+import type { Logger } from "../utils/logger.js";
+import type { ApiConfig } from "./config.js";
+/**
+ * Dependencies passed to {@link createApi}.
+ */
+export interface CreateApiDeps {
+    /** Live runtime handles maintained by the plugin, keyed by lowercased address. */
+    runtimeHandles: Map<string, RuntimeHandle>;
+    /** Validated `api` config block (host, port, maxItemsPerSignalsRequest). */
+    apiConfig: ApiConfig;
+    /** Logger instance — forwarded to shared handlers for structured error logging. */
+    logger: Logger;
+    /**
+     * Plugin version string read from `openclaw.plugin.json` at boot.
+     * Exposed in `GET /health` so callers can correlate requests with deployments.
+     */
+    version: string;
+}
+/**
+ * Artifacts returned by {@link createApi}.
+ *
+ * Ownership:
+ *  - `fastify`   — call `.listen()` and `.close()` in the lifecycle layer (S5).
+ *  - `readiness` — call `setOk()` after `.listen()` resolves; `setDraining()`
+ *                  before `.close()` during graceful shutdown.
+ *  - `bootedAt`  — Unix epoch ms recorded when `createApi()` was called;
+ *                  used by `GET /health` to compute `uptime_ms`.
+ */
+export interface ApiArtifacts {
+    fastify: FastifyInstance;
+    readiness: ReturnType<typeof createReadiness>;
+    bootedAt: number;
+}
+/**
+ * Create and configure the Fastify HTTP server.
+ *
+ * Does NOT start listening. Call `artifacts.fastify.listen(...)` from the
+ * lifecycle layer (S5) after `createApi()` returns.
+ *
+ * Error handler behaviour:
+ *  - `400` (schema validation), `413` (body too large), `415` (wrong
+ *    content-type) are passed through as `INVALID_REQUEST` with the original
+ *    Fastify message so callers can read the validation detail.
+ *  - All other errors are logged and returned as `500 / UNAVAILABLE`.
+ *
+ * Request timeout strategy (resolved in S5):
+ *  A single server-wide `requestTimeout: 30_000` covers all routes.
+ *  The plan called for per-route values (10s for `/signals` + `/health`,
+ *  30s for `/audit`), but Fastify v5 does not expose a declarative per-route
+ *  `requestTimeout` and wiring an `onRequest` hook with manual `setTimeout`
+ *  calls adds meaningful complexity for a localhost-only server where requests
+ *  that genuinely hang are almost always MCP-side.  The 30s ceiling is driven
+ *  entirely by `/audit` (MCP round-trip); `/signals` and `/health` both
+ *  complete in well under 1s in practice.  If per-route enforcement becomes
+ *  necessary, add an `onRequest` hook in this file.
+ *
+ * @param deps  Dependencies injected by the plugin entry point.
+ * @returns     `{ fastify, readiness, bootedAt }`.
+ */
+export declare function createApi(deps: CreateApiDeps): ApiArtifacts;
+//# sourceMappingURL=server.d.ts.map

package/dist/runtime-api/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/runtime-api/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,SAAS,CAAC;AAIxD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kFAAkF;IAClF,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3C,4EAA4E;IAC5E,SAAS,EAAE,SAAS,CAAC;IACrB,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,eAAe,CAAC;IACzB,SAAS,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;IAC9C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,YAAY,CAqE3D"}