@senpi/runtime 3.0.0-dev.runtime-phase-2.20260623210537 → 3.0.1-dev.openclaw-upgrade-mai.20260625140818

package/dist/runtime-api/intake/scanner-launcher.d.ts

@@ -24,14 +24,18 @@ export interface ExternalScannerSpec {
     path: string;
     /** Function name inside the module that the scaffold calls. */
     entrypoint: string;
-    /** Interval in seconds (numeric; already parsed from e.g. "30s"). */
+    /** Tick cadence in integer seconds (read directly from recipe `interval_seconds`). */
     intervalSeconds: number;
     /** Optional per-tick timeout in seconds. */
     timeoutSeconds?: number;
-    /** Field schema passed verbatim from the recipe. */
+    /** Per-signal `data{}` schema (recipe `signal_data_schema`). */
     fields: Record<string, ExternalFieldDefinition>;
-    /** Optional scanner-specific parameters forwarded to the scaffold. */
-    params?: Record<string, unknown>;
+    /** Author-tunable knobs (recipe `inputs`) passed as the scan() first arg. Optional. */
+    inputs?: Record<string, unknown>;
+    /** Required fallback signal TTL in integer seconds (recipe `default_signal_validity_seconds`). */
+    defaultSignalValiditySeconds: number;
+    /** Bound on the persisted state series (recipe `state_history_max_count`); 0/unset = disabled. */
+    stateHistoryMaxCount?: number;
 }
 /**
  * The behavioral contract the launcher requires of a supervisor — an
@@ -78,6 +82,16 @@ export interface ScannerLauncherDeps {
      */
     launchConfigDir: string;
     logger: Logger;
+    /**
+     * MCP creds injected into the scaffold child so ctx.senpi_mcp can reach the
+     * server. When unset, the launcher falls back to process.env.SENPI_API_KEY /
+     * process.env.SENPI_MCP_URL ("regardless of how the key was supplied").
+     * Explicit deps win over the env. Absent/empty values are OMITTED from
+     * spec.env — never written as "" — so the Python client stays loud at first
+     * use rather than masked by a fabricated empty cred.
+     */
+    senpiApiKey?: string;
+    senpiMcpUrl?: string;
     /** Default: makeId("scanner"). Inject for deterministic ids in tests. */
     mintScannerId?: () => string;
     /** Default: new LongRunningSupervisor(spec, logger). Inject to avoid forking. */

package/dist/runtime-api/intake/scanner-launcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanner-launcher.d.ts","sourceRoot":"","sources":["../../../src/runtime-api/intake/scanner-launcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAEpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qDAAqD,CAAC;AAE3F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIzD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,eAAe,EAAE,MAAM,CAAC;IACxB,4CAA4C;IAC5C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAChD,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,IAAI,IAAI,CAAC;IACd,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,QAAQ,EAAE,eAAe,CAAC;IAC1B,uEAAuE;IACvE,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,aAAa,CAAC;IACxB,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;;;;;OAQG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IAGf,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;IAC7B,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,KAAK,kBAAkB,CAAC;IACjF,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,CAAC,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IACxF,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;CAC9C;AAYD,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAeyF;IAE9G,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C;;;;OAIG;IACH,OAAO,CAAC,YAAY,CAAS;gBAEjB,OAAO,EAAE,mBAAmB;IAIxC;;;;;;;;;;OAUG;IACH,iBAAiB,IAAI,IAAI;IAkKnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAOtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAS5B"}
+{"version":3,"file":"scanner-launcher.d.ts","sourceRoot":"","sources":["../../../src/runtime-api/intake/scanner-launcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAEpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qDAAqD,CAAC;AAE3F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIzD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,sFAAsF;IACtF,eAAe,EAAE,MAAM,CAAC;IACxB,4CAA4C;IAC5C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAChD,uFAAuF;IACvF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,kGAAkG;IAClG,4BAA4B,EAAE,MAAM,CAAC;IACrC,kGAAkG;IAClG,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,IAAI,IAAI,CAAC;IACd,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,QAAQ,EAAE,eAAe,CAAC;IAC1B,uEAAuE;IACvE,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,aAAa,CAAC;IACxB,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;;;;;OAQG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IAEf;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;IAC7B,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,KAAK,kBAAkB,CAAC;IACjF,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,CAAC,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IACxF,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;CAC9C;AAYD,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAkBjB;IAEJ,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C;;;;OAIG;IACH,OAAO,CAAC,YAAY,CAAS;gBAEjB,OAAO,EAAE,mBAAmB;IAIxC;;;;;;;;;;OAUG;IACH,iBAAiB,IAAI,IAAI;IAwLnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAOtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAS5B"}

package/dist/runtime-api/intake/scanner-launcher.js

@@ -43,6 +43,10 @@ export class ScannerLauncher {
         if (this._initialized)
             return;
         const { runtimeId, wallet, scanners, registry, liveness, intakeUrl, scaffoldPackageDir, launchConfigDir, logger, supervisorOptions = {}, } = this.deps;
+        // Resolve MCP creds: explicit deps win, else fall back to process.env.
+        // Empty/absent values are dropped so we never inject a misleading "".
+        const senpiApiKey = this.deps.senpiApiKey || process.env.SENPI_API_KEY || undefined;
+        const senpiMcpUrl = this.deps.senpiMcpUrl || process.env.SENPI_MCP_URL || undefined;
         const mintScannerId = this.deps.mintScannerId ?? (() => makeId("scanner"));
         const createSupervisor = this.deps.createSupervisor ??
             ((spec, lg) => new LongRunningSupervisor(spec, lg));
@@ -82,17 +86,30 @@ export class ScannerLauncher {
                 // position), so state and the journal survive a restart.
                 const stateDir = path.join(launchConfigDir, "scanner-state", `${safeName}-${i}`);
                 fs.mkdirSync(stateDir, { recursive: true });
+                // Launch-config JSON — the FROZEN launcher↔scaffold key contract (design §4a).
+                // Hard cut: `interval` → `interval_seconds`, `params` → `inputs`.
                 const launchCfg = {
                     path: scanner.path,
                     entrypoint: scanner.entrypoint,
-                    interval: scanner.intervalSeconds,
+                    interval_seconds: scanner.intervalSeconds,
                     state_path: path.join(stateDir, "state.json"),
+                    default_signal_validity_seconds: scanner.defaultSignalValiditySeconds,
+                    // Per-signal data{} schema (recipe `signal_data_schema`, held here as
+                    // `scanner.fields`). The scaffold reads it and validates each signal's
+                    // `data` scaffold-side, POSTing a violation to /errors for early, loud
+                    // feedback. Additive — intake keeps its authoritative server-side check.
+                    signal_data_schema: scanner.fields,
+                    wallet,
+                    scanner_name: scanner.name,
                 };
                 if (scanner.timeoutSeconds !== undefined) {
                     launchCfg.timeout_seconds = scanner.timeoutSeconds;
                 }
-                if (scanner.params !== undefined) {
-                    launchCfg.params = scanner.params;
+                if (scanner.inputs !== undefined) {
+                    launchCfg.inputs = scanner.inputs;
+                }
+                if (scanner.stateHistoryMaxCount !== undefined) {
+                    launchCfg.state_history_max_count = scanner.stateHistoryMaxCount;
                 }
                 fs.writeFileSync(cfgPath, JSON.stringify(launchCfg, null, 2), "utf8");
                 // Mutable id holder so the lastAliveAt closure always reads the current id.
@@ -111,6 +128,10 @@ export class ScannerLauncher {
                         EXTERNAL_SCANNER_ID: scannerId,
                         SIGNAL_INGESTION_URL: intakeUrl,
                         PYTHONPATH: pythonPath,
+                        // Inject MCP creds only when present — omit (never "") when absent so
+                        // the Python ctx.senpi_mcp client stays loud at first use.
+                        ...(senpiApiKey ? { SENPI_API_KEY: senpiApiKey } : {}),
+                        ...(senpiMcpUrl ? { SENPI_MCP_URL: senpiMcpUrl } : {}),
                     },
                     marker: runtimeId,
                     initialDelayMs: i * 250,

package/dist/runtime-api/intake/scanner-launcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"scanner-launcher.js","sourceRoot":"","sources":["../../../src/runtime-api/intake/scanner-launcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAIlC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAE5F,OAAO,EAAE,MAAM,EAAE,MAAM,8CAA8C,CAAC;AAyFtE,kFAAkF;AAElF,MAAM,OAAO,eAAe;IACT,IAAI,CAeyF;IAE7F,MAAM,GAAoB,EAAE,CAAC;IAC9C;;;;OAIG;IACK,YAAY,GAAG,KAAK,CAAC;IAE7B,YAAY,OAA4B;QACtC,IAAI,CAAC,IAAI,GAAG,OAA2B,CAAC;IAC1C,CAAC;IAED;;;;;;;;;;OAUG;IACH,iBAAiB;QACf,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAE9B,MAAM,EACJ,SAAS,EACT,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,eAAe,EACf,MAAM,EACN,iBAAiB,GAAG,EAAE,GACvB,GAAG,IAAI,CAAC,IAAI,CAAC;QAEd,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3E,MAAM,gBAAgB,GACpB,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAC1B,CAAC,CAAC,IAAqB,EAAE,EAAU,EAAsB,EAAE,CACzD,IAAI,qBAAqB,CAAC,IAAI,EAAE,EAAE,CAAkC,CAAC,CAAC;QAC1E,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAEtD,4EAA4E;QAC5E,MAAM,oBAAoB,GAAa,EAAE,CAAC;QAE1C,IAAI,CAAC;YACL,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAE5B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CACb,6BAA6B,OAAO,CAAC,IAAI,oCAAoC,CAC9E,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;oBACxB,MAAM,IAAI,KAAK,CACb,6BAA6B,OAAO,CAAC,IAAI,0CAA0C,CACpF,CAAC;gBACJ,CAAC;gBAED,WAAW;gBACX,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;gBAElC,eAAe;gBACf,QAAQ,CAAC,QAAQ,CAAC;oBAChB,SAAS;oBACT,SAAS;oBACT,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,MAAM;oBACN,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC,CAAC;gBACH,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAErC,yEAAyE;gBACzE,2EAA2E;gBAC3E,sEAAsE;gBACtE,yEAAyE;gBACzE,8EAA8E;gBAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,SAAS,cAAc,CAAC,CAAC;gBACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;gBAC9D,0EAA0E;gBAC1E,yEAAyE;gBACzE,wEAAwE;gBACxE,yDAAyD;gBACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,EAAE,GAAG,QAAQ,IAAI,CAAC,EAAE,CAAC,CAAC;gBACjF,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5C,MAAM,SAAS,GAA4B;oBACzC,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,QAAQ,EAAE,OAAO,CAAC,eAAe;oBACjC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC;iBAC9C,CAAC;gBACF,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACzC,SAAS,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;gBACrD,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACjC,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBACpC,CAAC;gBACD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBAEtE,4EAA4E;gBAC5E,MAAM,QAAQ,GAAsB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;gBAEzD,uBAAuB;gBACvB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC;gBAClD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;gBACxD,MAAM,UAAU,GAAG,kBAAkB;oBACnC,CAAC,CAAC,GAAG,kBAAkB,IAAI,kBAAkB,EAAE;oBAC/C,CAAC,CAAC,kBAAkB,CAAC;gBAEvB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;gBAEtE,MAAM,IAAI,GAAoB;oBAC5B,OAAO,EAAE,SAAS;oBAClB,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC;oBACjC,GAAG,EAAE;wBACH,mBAAmB,EAAE,SAAS;wBAC9B,oBAAoB,EAAE,SAAS;wBAC/B,UAAU,EAAE,UAAU;qBACvB;oBACD,MAAM,EAAE,SAAS;oBACjB,cAAc,EAAE,CAAC,GAAG,GAAG;oBACvB,WAAW,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACvD,YAAY;oBACZ,GAAG,iBAAiB;iBACrB,CAAC;gBAEF,gFAAgF;gBAChF,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAElD,+DAA+D;gBAC/D,IAAI,iBAAiB,EAAE,CAAC;oBACtB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAU,EAAE,EAAE;wBACpC,iBAAiB,CAAC,CAAmC,CAAC,CAAC;oBACzD,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,yCAAyC;gBACzC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAU,EAAE,EAAE;oBACpC,MAAM,GAAG,GAAG,CAAqB,CAAC;oBAClC,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;wBAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;wBAC7B,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;wBAE3B,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;wBAC9B,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;wBAEvB,QAAQ,CAAC,QAAQ,CAAC;4BAChB,SAAS,EAAE,KAAK;4BAChB,SAAS;4BACT,WAAW,EAAE,OAAO,CAAC,IAAI;4BACzB,MAAM;4BACN,MAAM,EAAE,OAAO,CAAC,MAAM;yBACvB,CAAC,CAAC;wBAEH,oDAAoD;wBACpD,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG;4BACpB,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG;4BACtB,mBAAmB,EAAE,KAAK;yBAC3B,CAAC;oBACJ,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,sEAAsE;YACtE,sDAAsD;YACtD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,wEAAwE;YACxE,KAAK,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;gBACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;YACD,yEAAyE;YACzE,4CAA4C;YAC5C,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YACvB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,KAAK,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE;YAClD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC,CAAC,CACH,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"scanner-launcher.js","sourceRoot":"","sources":["../../../src/runtime-api/intake/scanner-launcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAIlC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAE5F,OAAO,EAAE,MAAM,EAAE,MAAM,8CAA8C,CAAC;AAwGtE,kFAAkF;AAElF,MAAM,OAAO,eAAe;IACT,IAAI,CAkBjB;IAEa,MAAM,GAAoB,EAAE,CAAC;IAC9C;;;;OAIG;IACK,YAAY,GAAG,KAAK,CAAC;IAE7B,YAAY,OAA4B;QACtC,IAAI,CAAC,IAAI,GAAG,OAA2B,CAAC;IAC1C,CAAC;IAED;;;;;;;;;;OAUG;IACH,iBAAiB;QACf,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAE9B,MAAM,EACJ,SAAS,EACT,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,eAAe,EACf,MAAM,EACN,iBAAiB,GAAG,EAAE,GACvB,GAAG,IAAI,CAAC,IAAI,CAAC;QAEd,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC;QACpF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC;QAEpF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3E,MAAM,gBAAgB,GACpB,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAC1B,CAAC,CAAC,IAAqB,EAAE,EAAU,EAAsB,EAAE,CACzD,IAAI,qBAAqB,CAAC,IAAI,EAAE,EAAE,CAAkC,CAAC,CAAC;QAC1E,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAEtD,4EAA4E;QAC5E,MAAM,oBAAoB,GAAa,EAAE,CAAC;QAE1C,IAAI,CAAC;YACL,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAE5B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CACb,6BAA6B,OAAO,CAAC,IAAI,oCAAoC,CAC9E,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;oBACxB,MAAM,IAAI,KAAK,CACb,6BAA6B,OAAO,CAAC,IAAI,0CAA0C,CACpF,CAAC;gBACJ,CAAC;gBAED,WAAW;gBACX,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;gBAElC,eAAe;gBACf,QAAQ,CAAC,QAAQ,CAAC;oBAChB,SAAS;oBACT,SAAS;oBACT,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,MAAM;oBACN,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC,CAAC;gBACH,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAErC,yEAAyE;gBACzE,2EAA2E;gBAC3E,sEAAsE;gBACtE,yEAAyE;gBACzE,8EAA8E;gBAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,SAAS,cAAc,CAAC,CAAC;gBACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;gBAC9D,0EAA0E;gBAC1E,yEAAyE;gBACzE,wEAAwE;gBACxE,yDAAyD;gBACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,EAAE,GAAG,QAAQ,IAAI,CAAC,EAAE,CAAC,CAAC;gBACjF,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5C,+EAA+E;gBAC/E,kEAAkE;gBAClE,MAAM,SAAS,GAA4B;oBACzC,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,gBAAgB,EAAE,OAAO,CAAC,eAAe;oBACzC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC;oBAC7C,+BAA+B,EAAE,OAAO,CAAC,4BAA4B;oBACrE,sEAAsE;oBACtE,uEAAuE;oBACvE,uEAAuE;oBACvE,yEAAyE;oBACzE,kBAAkB,EAAE,OAAO,CAAC,MAAM;oBAClC,MAAM;oBACN,YAAY,EAAE,OAAO,CAAC,IAAI;iBAC3B,CAAC;gBACF,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACzC,SAAS,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;gBACrD,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACjC,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBACpC,CAAC;gBACD,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;oBAC/C,SAAS,CAAC,uBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC;gBACnE,CAAC;gBACD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBAEtE,4EAA4E;gBAC5E,MAAM,QAAQ,GAAsB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;gBAEzD,uBAAuB;gBACvB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC;gBAClD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;gBACxD,MAAM,UAAU,GAAG,kBAAkB;oBACnC,CAAC,CAAC,GAAG,kBAAkB,IAAI,kBAAkB,EAAE;oBAC/C,CAAC,CAAC,kBAAkB,CAAC;gBAEvB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;gBAEtE,MAAM,IAAI,GAAoB;oBAC5B,OAAO,EAAE,SAAS;oBAClB,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC;oBACjC,GAAG,EAAE;wBACH,mBAAmB,EAAE,SAAS;wBAC9B,oBAAoB,EAAE,SAAS;wBAC/B,UAAU,EAAE,UAAU;wBACtB,sEAAsE;wBACtE,2DAA2D;wBAC3D,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACtD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACvD;oBACD,MAAM,EAAE,SAAS;oBACjB,cAAc,EAAE,CAAC,GAAG,GAAG;oBACvB,WAAW,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACvD,YAAY;oBACZ,GAAG,iBAAiB;iBACrB,CAAC;gBAEF,gFAAgF;gBAChF,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAElD,+DAA+D;gBAC/D,IAAI,iBAAiB,EAAE,CAAC;oBACtB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAU,EAAE,EAAE;wBACpC,iBAAiB,CAAC,CAAmC,CAAC,CAAC;oBACzD,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,yCAAyC;gBACzC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAU,EAAE,EAAE;oBACpC,MAAM,GAAG,GAAG,CAAqB,CAAC;oBAClC,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;wBAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;wBAC7B,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;wBAE3B,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;wBAC9B,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;wBAEvB,QAAQ,CAAC,QAAQ,CAAC;4BAChB,SAAS,EAAE,KAAK;4BAChB,SAAS;4BACT,WAAW,EAAE,OAAO,CAAC,IAAI;4BACzB,MAAM;4BACN,MAAM,EAAE,OAAO,CAAC,MAAM;yBACvB,CAAC,CAAC;wBAEH,oDAAoD;wBACpD,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG;4BACpB,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG;4BACtB,mBAAmB,EAAE,KAAK;yBAC3B,CAAC;oBACJ,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,sEAAsE;YACtE,sDAAsD;YACtD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,wEAAwE;YACxE,KAAK,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;gBACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;YACD,yEAAyE;YACzE,4CAA4C;YAC5C,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YACvB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,KAAK,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE;YAClD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC,CAAC,CACH,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC;CACF"}

package/dist/runtime-api/intake/types.d.ts

@@ -6,12 +6,28 @@
  */
 /** One signal in a POST /signals batch. */
 export interface IntakeSignal {
+    /**
+     * Producer-minted idempotency key (the scaffold journal eid). REQUIRED on the
+     * wire — it is the dedup key intake uses. It is a SEPARATE id from
+     * `correlationId` on PerSignalStatus (which intake mints server-side).
+     */
+    signal_id: string;
     asset: string;
     direction: "LONG" | "SHORT";
     produced_at: number;
     valid_until: number;
     data: Record<string, unknown>;
     signal_type?: string;
+    /**
+     * Per-signal sizing, optional. The producer scaffold lifts these to the top
+     * level and the open-position action reads them directly. `marginUsd` is the
+     * canonical USD margin; `margin` is the legacy alias the consumer still
+     * accepts; `leverage` is the per-signal leverage override. All positive when
+     * present (the wire schema rejects zero/negative/non-number).
+     */
+    marginUsd?: number;
+    margin?: number;
+    leverage?: number;
 }
 /** Request body for POST /signals. */
 export interface SignalsBody {

package/dist/runtime-api/intake/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/runtime-api/intake/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,sCAAsC;AACtC,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,YAAY,EAAE,CAAC;CACzB;AAED,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,YAAY,GAAG,UAAU,CAAC;IAC3D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,0CAA0C;AAC1C,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED,gDAAgD;AAChD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qCAAqC;AACrC,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,iCAAiC;AACjC,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/runtime-api/intake/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,sCAAsC;AACtC,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,YAAY,EAAE,CAAC;CACzB;AAED,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,YAAY,GAAG,UAAU,CAAC;IAC3D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,0CAA0C;AAC1C,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED,gDAAgD;AAChD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qCAAqC;AACrC,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,iCAAiC;AACjC,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/runtime-api/routes/signals.schema.d.ts

@@ -12,12 +12,16 @@
 export declare const SignalsBodySchema: import("@sinclair/typebox").TObject<{
     scanner_id: import("@sinclair/typebox").TString;
     signals: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        signal_id: import("@sinclair/typebox").TString;
         asset: import("@sinclair/typebox").TString;
         direction: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"LONG">, import("@sinclair/typebox").TLiteral<"SHORT">]>;
         produced_at: import("@sinclair/typebox").TNumber;
         valid_until: import("@sinclair/typebox").TNumber;
         data: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>;
         signal_type: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        marginUsd: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+        margin: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+        leverage: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
     }>>;
 }>;
 /** TypeBox schema for the /errors request body. */

package/dist/runtime-api/routes/signals.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signals.schema.d.ts","sourceRoot":"","sources":["../../../src/runtime-api/routes/signals.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAiBH,yDAAyD;AACzD,eAAO,MAAM,iBAAiB;;;;;;;;;;EAM7B,CAAC;AAEF,mDAAmD;AACnD,eAAO,MAAM,gBAAgB;;;EAM5B,CAAC"}
+{"version":3,"file":"signals.schema.d.ts","sourceRoot":"","sources":["../../../src/runtime-api/routes/signals.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA6BH,yDAAyD;AACzD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;EAM7B,CAAC;AAEF,mDAAmD;AACnD,eAAO,MAAM,gBAAgB;;;EAM5B,CAAC"}

package/dist/runtime-api/routes/signals.schema.js

@@ -11,12 +11,24 @@
 import { Type } from "@sinclair/typebox";
 /** TypeBox schema for one signal in an intake /signals batch. */
 const IntakeSignalSchema = Type.Object({
+    // Producer-minted idempotency key (the journal eid). REQUIRED end-to-end: it
+    // is the dedup key intake relies on, so a body without it is rejected here at
+    // the wire layer. It is a SEPARATE id from `correlationId` (which intake mints
+    // server-side and never appears in the request body).
+    signal_id: Type.String({ minLength: 1 }),
     asset: Type.String({ minLength: 1 }),
     direction: Type.Union([Type.Literal("LONG"), Type.Literal("SHORT")]),
     produced_at: Type.Number(),
     valid_until: Type.Number(),
     data: Type.Record(Type.String(), Type.Unknown()),
     signal_type: Type.Optional(Type.String()),
+    // Per-signal sizing, lifted to the top level by the producer scaffold and read
+    // directly by the open-position action. Optional; positive-only matches what the
+    // producer emits, so zero / negative / non-number is rejected at the wire
+    // (fail-closed). No max here — leverage is clamped downstream by the exchange.
+    marginUsd: Type.Optional(Type.Number({ exclusiveMinimum: 0 })),
+    margin: Type.Optional(Type.Number({ exclusiveMinimum: 0 })),
+    leverage: Type.Optional(Type.Number({ exclusiveMinimum: 0 })),
 }, { additionalProperties: false });
 /** TypeBox schema for the full /signals request body. */
 export const SignalsBodySchema = Type.Object({

package/dist/runtime-api/routes/signals.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"signals.schema.js","sourceRoot":"","sources":["../../../src/runtime-api/routes/signals.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEzC,iEAAiE;AACjE,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CACpC;IACE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACpC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;IAC1B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAChD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC1C,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAEF,yDAAyD;AACzD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAC1C;IACE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACzC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACxC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAEF,mDAAmD;AACnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CACzC;IACE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACzC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;CAClD,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC"}
+{"version":3,"file":"signals.schema.js","sourceRoot":"","sources":["../../../src/runtime-api/routes/signals.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEzC,iEAAiE;AACjE,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CACpC;IACE,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,sDAAsD;IACtD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACpC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;IAC1B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAChD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACzC,+EAA+E;IAC/E,iFAAiF;IACjF,0EAA0E;IAC1E,+EAA+E;IAC/E,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9D,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3D,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC;CAC9D,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAEF,yDAAyD;AACzD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAC1C;IACE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACzC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACxC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAEF,mDAAmD;AACnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CACzC;IACE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACzC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;CAClD,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC"}

package/dist/scanners/external/scaffold/__main__.py

@@ -1,17 +1,25 @@
-"""Process entry for the scaffold core.
+"""Process entry for the scaffold core (v2).
 
 Usage: python3 -m scaffold <launch-config.json>
 
-The launch config JSON must contain:
-    path        — directory added to sys.path (the scanner's working directory).
-    entrypoint  — module name to import from `path`.
-    interval    — seconds between tick starts.
-
-Optional fields:
-    timeout_seconds — per-tick wall-clock budget (default: interval).
-    params          — tunables dict passed to scan() as the first argument.
-    state_path      — path to the JSON state file.
-    max_ticks       — cap on tick count (for tests).
+The launch config JSON is the FROZEN launcher<->scaffold contract (design §4a).
+This side READS every §4a key the B1 launcher writes and threads them into
+run_scaffold. Hard cut: old key names are gone (`interval` -> `interval_seconds`,
+`params` -> `inputs`).
+
+Required keys (missing => fail loud, non-zero exit):
+    path                            — directory added to sys.path (scanner working dir).
+    entrypoint                      — module name to import from `path`.
+    interval_seconds                — tick cadence in seconds (was `interval`).
+    default_signal_validity_seconds — fallback signal TTL (seconds); no magic default.
+    wallet                          — strategy wallet (-> ctx.wallet).
+    scanner_name                    — this scanner's recipe name (-> ctx.scanner_name).
+
+Optional keys:
+    timeout_seconds                 — per-tick wall-clock budget (default: interval_seconds).
+    state_path                      — JSON state file path (None => no persistence).
+    inputs                          — tunables dict for scan() (was `params`); default {}.
+    state_history_max_count         — state series bound; default 0 = history disabled.
 
 Delivery sink is wired when EXTERNAL_SCANNER_ID and SIGNAL_INGESTION_URL are set in
 the environment. If either is absent the scaffold runs with the default no-op sink
@@ -23,15 +31,18 @@ import os
 import sys
 
 
-def _main() -> int:
-    if len(sys.argv) < 2:
+def _main(argv=None) -> int:
+    if argv is None:
+        argv = sys.argv
+
+    if len(argv) < 2:
         print(
             "Usage: python3 -m scaffold <launch-config.json>",
             file=sys.stderr,
         )
         return 1
 
-    config_path = sys.argv[1]
+    config_path = argv[1]
     try:
         with open(config_path, "r", encoding="utf-8") as fh:
             config = json.load(fh)
@@ -39,22 +50,43 @@ def _main() -> int:
         print(f"[scaffold] launch config error: {exc}", file=sys.stderr)
         return 1
 
+    # ---- Required §4a keys: missing => fail loud (no magic default) ----
     try:
         path = config["path"]
         entrypoint = config["entrypoint"]
-        interval = float(config["interval"])
+        interval = float(config["interval_seconds"])
+        default_signal_validity_seconds = int(config["default_signal_validity_seconds"])
+        wallet = config["wallet"]
+        scanner_name = config["scanner_name"]
     except (KeyError, TypeError, ValueError) as exc:
-        print(f"[scaffold] launch config missing required field: {exc}", file=sys.stderr)
+        print(
+            f"[scaffold] launch config missing/invalid required field: {exc}",
+            file=sys.stderr,
+        )
         return 1
 
+    # ---- Optional §4a keys ----
     timeout_seconds = config.get("timeout_seconds")
-    params = config.get("params") or {}
+    # Hard cut: only `inputs` is read. The legacy `params` key is NOT honored.
+    inputs = config.get("inputs") or {}
     state_path = config.get("state_path")
+    state_history_max_count = config.get("state_history_max_count") or 0
+    # Per-signal data{} schema (§4a). None / absent => no scaffold-side validation
+    # (intake still validates authoritatively). A dict turns on early, loud
+    # scaffold-side validation that POSTs a violation to /errors.
+    signal_data_schema = config.get("signal_data_schema")
+    if signal_data_schema is not None and not isinstance(signal_data_schema, dict):
+        signal_data_schema = None
     max_ticks = config.get("max_ticks")
 
-    from scaffold import ScanEntrypointError, ScanSignatureError, run_scaffold
+    import scaffold as scaffold_pkg
+    from scaffold import ScanEntrypointError, ScanSignatureError
     from scaffold.loop_primitives import log_event
 
+    # Resolve run_scaffold via the package symbol so a test stub patched onto the
+    # package (or this module) is picked up.
+    run_scaffold = globals().get("run_scaffold") or scaffold_pkg.run_scaffold
+
     # Build the delivery sink when scanner_id and intake URL are available.
     sink = None
     scanner_id = os.environ.get("EXTERNAL_SCANNER_ID", "").strip()
@@ -67,19 +99,24 @@ def _main() -> int:
             post_timeout = float(os.environ.get("SIGNAL_POST_TIMEOUT_SECONDS", "5"))
 
             # Derive journal path from the state file directory when available.
-            journal_path: str | None = None
+            journal_path = None
             if state_path:
-                import os as _os
-                journal_path = _os.path.join(
-                    _os.path.dirname(_os.path.abspath(state_path)),
+                journal_path = os.path.join(
+                    os.path.dirname(os.path.abspath(state_path)),
                     "delivery-journal.jsonl",
                 )
 
+            # §4a threads the per-data-key schema (`signal_data_schema`) to the
+            # scaffold so the envelope validates each signal's `data` scaffold-side
+            # and POSTs a violation to /errors (early, loud feedback). None ⇒ no
+            # scaffold-side validation. The intake still performs authoritative
+            # server-side schema validation regardless (this is additive).
             sink = build_delivery_sink(
                 scanner_id=scanner_id,
                 intake_url=intake_url,
-                interval=interval,
                 journal_path=journal_path,
+                signal_data_schema=signal_data_schema,
+                default_signal_validity_seconds=default_signal_validity_seconds,
                 timeout=post_timeout,
             )
             log_event("delivery_sink_enabled", scanner_id=scanner_id, intake_url=intake_url)
@@ -98,8 +135,12 @@ def _main() -> int:
             entrypoint,
             interval=interval,
             timeout_seconds=timeout_seconds,
-            params=params,
+            inputs=inputs,
             state_path=state_path,
+            scanner_name=scanner_name,
+            wallet=wallet,
+            default_signal_validity_seconds=default_signal_validity_seconds,
+            state_history_max_count=state_history_max_count,
             sink=sink,
             max_ticks=max_ticks,
         )

package/dist/scanners/external/scaffold/ctx.py

@@ -0,0 +1,78 @@
+"""The author-facing `ctx` object handed to scan(inputs, ctx).
+
+`ScanContext` is the second argument to the author's `scan(inputs, ctx)`. It is
+two tiers (design §2.1):
+
+  Capabilities you CALL:
+    state       — the StateManager (B2): a disk-persisted, bounded, transactional
+                  series. Passed in AS-IS (never wrapped/copied) so author mutations
+                  and the scaffold's commit/rollback hit the SAME object. May be None
+                  when history is disabled (state_history_max_count 0/unset).
+    senpi_mcp   — the MCP client capability. PRESENT but EMPTY this block (None);
+                  B5 fills it. The slot exists now so B5 is purely additive — no
+                  structural change to ctx later.
+
+  Read-only metadata you READ:
+    wallet            — str, the strategy wallet (routing identity).
+    scanner_name      — str, this scanner's recipe name.
+    interval_seconds  — int, tick cadence in seconds.
+
+The metadata is FROZEN: mutating, deleting, or adding any attribute raises. The
+author can read `ctx.wallet` but cannot rebind it (or scribble a backdoor onto
+ctx). `state` and `senpi_mcp` are likewise immutable bindings on ctx — the author
+uses them through their own APIs, never by reassigning the slot.
+"""
+
+from __future__ import annotations
+
+from typing import Any, Optional
+
+
+class ScanContext:
+    """Frozen, read-only metadata + capability handles for scan(inputs, ctx).
+
+    Construction seam the scaffold uses:
+
+        ScanContext(
+            *,
+            state,              # a StateManager instance (or None when history disabled)
+            wallet: str,
+            scanner_name: str,
+            interval_seconds: int,
+            senpi_mcp=None,     # B5 fills this; None/absent this block
+        )
+    """
+
+    # Lock the attribute set: no __dict__, so any unknown attribute (mutate / add /
+    # delete) raises AttributeError. The five documented slots are the only ones.
+    __slots__ = ("state", "senpi_mcp", "wallet", "scanner_name", "interval_seconds")
+
+    def __init__(
+        self,
+        *,
+        state: Any,
+        wallet: str,
+        scanner_name: str,
+        interval_seconds: int,
+        senpi_mcp: Optional[Any] = None,
+    ) -> None:
+        # Bypass our own frozen __setattr__ to populate the slots once at
+        # construction. object.__setattr__ writes the slot directly.
+        object.__setattr__(self, "state", state)
+        object.__setattr__(self, "senpi_mcp", senpi_mcp)
+        object.__setattr__(self, "wallet", wallet)
+        object.__setattr__(self, "scanner_name", scanner_name)
+        object.__setattr__(self, "interval_seconds", interval_seconds)
+
+    # -- frozen: block every post-construction mutation --------------------
+
+    def __setattr__(self, name: str, value: Any) -> None:
+        raise AttributeError(
+            f"ctx is read-only: cannot set {name!r}. The metadata "
+            "(wallet/scanner_name/interval_seconds) is frozen, and the "
+            "capability slots (state/senpi_mcp) are used through their own APIs, "
+            "never reassigned."
+        )
+
+    def __delattr__(self, name: str) -> None:
+        raise AttributeError(f"ctx is read-only: cannot delete {name!r}.")

package/dist/scanners/external/scaffold/delivery.py

@@ -4,8 +4,9 @@ build_delivery_sink(
     *,
     scanner_id: str,
     intake_url: str,
-    interval: float,          # seconds; valid_until default = produced_at + 2*interval
     journal_path: str | None,
+    signal_data_schema: dict | None,        # per-data-key {type, required?}; None = no validation
+    default_signal_validity_seconds: int,   # fallback signal TTL (seconds)
     timeout: float = 5.0,
     clock: Callable[[], float] = time.time,
 ) -> sink
@@ -32,6 +33,7 @@ from __future__ import annotations
 
 import sys
 import time
+import uuid
 from typing import Any, Callable
 
 from .http_post import ERRORS_PATH, SIGNALS_PATH, TransportError, post_json
@@ -47,14 +49,14 @@ def build_delivery_sink(
     *,
     scanner_id: str,
     intake_url: str,
-    interval: float,
     journal_path: str | None,
+    signal_data_schema: dict | None,
+    default_signal_validity_seconds: int,
     timeout: float = 5.0,
     clock: Callable[[], float] = time.time,
 ):
     """Factory: build and return the delivery sink callable."""
 
-    interval_ms = int(interval * 1000)
     journal = Journal(journal_path)
     replayed = [False]  # mutable cell; replay runs once on first invocation
 
@@ -87,16 +89,35 @@ def build_delivery_sink(
             log_event("delivery_dropped_expired", entry_id=entry.id, asset=entry.asset)
         return to_send
 
+    def _on_reject(reason: dict) -> None:
+        """Loud rejection: log AND POST to /errors (design §4 — never a silent drop)."""
+        log_event("delivery_candidate_invalid", **reason)
+        _post_error({"type": "candidate_rejected", **reason})
+
     def _wrap_candidates(candidates, produced_at_ms: int) -> list[tuple]:
-        """Wrap candidates into (signal, entry_id) pairs, skipping invalid ones."""
+        """Wrap candidates into (signal, entry_id) pairs, skipping invalid ones.
+
+        Schema-rejected candidates are NOT silently dropped: candidate_to_signal
+        calls _on_reject, which logs AND POSTs to /errors.
+        """
         result = []
         for c in candidates:
-            sig = candidate_to_signal(c, produced_at_ms, interval_ms)
+            # Mint the stable signal_id (the journal eid) up front and thread it
+            # through the envelope so the POSTed signal carries it. record_produced
+            # re-uses this same id as the entry id, so wire signal_id == journal eid.
+            eid = uuid.uuid4().hex
+            sig = candidate_to_signal(
+                c,
+                produced_at_ms,
+                signal_id=eid,
+                signal_data_schema=signal_data_schema,
+                default_signal_validity_seconds=default_signal_validity_seconds,
+                on_reject=_on_reject,
+            )
             if sig is None:
-                log_event("delivery_candidate_invalid", candidate=repr(c))
                 continue
-            eid = journal.record_produced(sig, now_ms=produced_at_ms)
-            result.append((sig, eid))
+            entry_id = journal.record_produced(sig, now_ms=produced_at_ms)
+            result.append((sig, entry_id))
         return result
 
     def _post_signals(signals: list[dict]) -> tuple[int, Any]:
@@ -125,20 +146,33 @@ def build_delivery_sink(
         if not isinstance(per_signal, list):
             per_signal = []
 
-        for i, eid in enumerate(pending_eids):
-            if i < len(per_signal):
-                sig_status = per_signal[i]
-                st = sig_status.get("status") if isinstance(sig_status, dict) else None
-                if st == "accepted":
-                    journal.record_outcome(eid, "delivered", correlationId=sig_status.get("correlationId", ""))
-                elif st == "rejected":
-                    journal.record_outcome(eid, "rejected", reason=sig_status.get("reason", ""))
-                elif st in ("expired", "superseded"):
-                    journal.record_outcome(eid, st)
-                else:
-                    # Unknown status — treat as undelivered (no outcome written)
-                    log_event("delivery_unknown_status", entry_id=eid, status=st)
-            # If no per-signal status returned for this entry, leave it pending (retry)
+        # Match per-signal outcomes BY signal_id, NEVER by array position. The wire
+        # signal_id IS the journal entry id, so a pending eid set is the lookup key.
+        # Index-matching would cross-attribute outcomes (asset A's "accepted"
+        # recorded against asset B) under out-of-order or partial responses —
+        # capital-sensitive. Robust to: out-of-order, partial (fewer statuses than
+        # signals), and unknown/missing signal_id (ignored safely, never applied by
+        # position). An unmatched entry stays pending and is retried.
+        pending = set(pending_eids)
+        for sig_status in per_signal:
+            if not isinstance(sig_status, dict):
+                continue
+            eid = sig_status.get("signal_id")
+            # Missing or unknown signal_id: cannot be matched -> ignore safely.
+            if not isinstance(eid, str) or eid not in pending:
+                log_event("delivery_status_unmatched", signal_id=eid)
+                continue
+            st = sig_status.get("status")
+            if st == "accepted":
+                journal.record_outcome(eid, "delivered", correlationId=sig_status.get("correlationId", ""))
+            elif st == "rejected":
+                journal.record_outcome(eid, "rejected", reason=sig_status.get("reason", ""))
+            elif st in ("expired", "superseded"):
+                journal.record_outcome(eid, st)
+            else:
+                # Unknown status — treat as undelivered (no outcome written)
+                log_event("delivery_unknown_status", entry_id=eid, status=st)
+        # Entries with no matching status returned stay pending (retry next tick).
 
         return True