@senpi/runtime 3.0.22 → 3.0.24

package/dist/runtime/notifications.js

@@ -1,92 +1,225 @@
+import { toPayload, truncateForPush, PUSH_TITLE_MAX, PUSH_BODY_MAX } from "../types/notification.js";
+import { decodeSenpiUserId } from "../telemetry/otel-sdk.js";
 import { createLogger } from "../utils/logger.js";
 import { classifyDecisionError } from "./decision-errors.js";
+import { randomUUID } from "node:crypto";
 const logger = createLogger("[senpi-core][notifications]");
 /**
- * Map a raw LLM-decision error string to the user-facing Telegram message.
+ * Every notification the runtime emits is a strategy/trading alert, so the ingest
+ * envelope's top-level category is fixed. Per-alert differentiation (limit trip,
+ * decision error, scanner alert, ...) travels in `actionMetadata.notificationSubtype`.
+ */
+const NOTIFICATION_CATEGORY = "PERPS";
+const NOTIFICATION_SOURCE = "senpi-trading-runtime";
+/**
+ * Bounded per-request timeout for the ingest POST. The service is called both
+ * fire-and-forget and awaited inline by producers on the serial signal path, so
+ * this must never hang indefinitely: one retry on a retryable failure, no more.
+ * Worst-case latency is therefore ~2x this value, never unbounded.
+ */
+const DEFAULT_TIMEOUT_MS = 5000;
+/** Only one retry attempt on a retryable failure — see {@link classifyOutcome}. */
+const MAX_ATTEMPTS = 2;
+/** Suppress repeat WARN logs for the same failure reason within this window. */
+const WARN_REPEAT_WINDOW_MS = 30_000;
+/**
+ * Map a raw LLM-decision error string to a user-facing notification message.
  *
- * Thin wrapper over {@link classifyDecisionError} — all message wording and the
+ * Thin wrapper over {@link classifyDecisionError} — the two-bucket copy and the
  * failure-mode lookup live in `decision-errors.ts` (the single source of truth
  * shared with the retry logic in `openclaw-llm-decision.ts`). The runtime catches
  * errors from the LLM-decision call and passes `err.message` here.
  *
  * @param rawMessage - Error message thrown by the decision client (may embed an
  *   OpenClaw gateway message).
- * @param ctx - Optional plugin-side context (action name, configured model) for
- *   placeholders the gateway error string cannot supply.
  */
-export function formatDecisionErrorNotification(rawMessage, ctx) {
-    return classifyDecisionError(rawMessage, ctx).userMessage;
+export function formatDecisionErrorNotification(rawMessage) {
+    return classifyDecisionError(rawMessage).userMessage;
+}
+/** Strip anything shaped like a bearer credential before it can reach a log line. */
+function redactSecrets(text) {
+    return text.replace(/Bearer\s+\S+/gi, "Bearer [REDACTED]");
+}
+function describeError(err) {
+    const raw = err instanceof Error ? err.message : String(err);
+    return redactSecrets(raw);
+}
+/** Classify an HTTP response status into a delivery outcome. 503 and any 5xx are
+ * transient (server-side produce failure) and get one retry; every other non-2xx
+ * (400 malformed envelope, 401 bad/expired token, 403 recipient mismatch, or any
+ * other 4xx) is a caller-side condition a retry cannot fix, so it drops immediately. */
+function classifyStatus(status) {
+    if (status >= 200 && status < 300)
+        return "ok";
+    if (status === 503 || status >= 500)
+        return "retry";
+    return "drop";
+}
+const lastWarnedAt = new Map();
+/** Log a WARN, but suppress repeats of the same reason within {@link WARN_REPEAT_WINDOW_MS}
+ * so a hot failure path (e.g. a sustained outage) doesn't flood the log. */
+function warnRateLimited(key, message, attributes) {
+    const now = Date.now();
+    const last = lastWarnedAt.get(key);
+    if (last !== undefined && now - last < WARN_REPEAT_WINDOW_MS)
+        return;
+    lastWarnedAt.set(key, now);
+    logger.warn(message, undefined, attributes);
+}
+async function postOnce(ingestUrl, authToken, envelope, timeoutMs) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const res = await fetch(ingestUrl, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${authToken}`,
+            },
+            body: JSON.stringify(envelope),
+            signal: controller.signal,
+        });
+        if (res.ok)
+            return { kind: "ok" };
+        const bodyText = await res.text().catch(() => "");
+        const kind = classifyStatus(res.status);
+        return { kind, status: res.status, reason: redactSecrets(bodyText).slice(0, 300) };
+    }
+    catch (err) {
+        // Network failure, DNS failure, connection refused, or our own timeout abort.
+        return { kind: "retry", reason: describeError(err) };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/** POST the envelope with a single bounded retry on a transient failure (5xx / network / timeout).
+ * Never throws — every outcome resolves, so a delivery failure can never surface as a rejected
+ * promise into the caller's (often serial, trading-critical) code path. */
+async function deliver(ingestUrl, authToken, envelope, timeoutMs) {
+    let outcome = await postOnce(ingestUrl, authToken, envelope, timeoutMs);
+    for (let attempt = 2; outcome.kind === "retry" && attempt <= MAX_ATTEMPTS; attempt++) {
+        outcome = await postOnce(ingestUrl, authToken, envelope, timeoutMs);
+    }
+    if (outcome.kind === "ok")
+        return;
+    const notificationId = envelope.notificationId;
+    const subtype = envelope.actionMetadata?.notificationSubtype;
+    const rateLimitKey = `${outcome.status ?? "network"}:${typeof subtype === "string" ? subtype : "unknown"}`;
+    warnRateLimited(rateLimitKey, `Notification delivery dropped notificationId=${String(notificationId)} status=${outcome.status ?? "n/a"}: ${outcome.reason}`, { notificationId, status: outcome.status });
 }
 /**
- * IMPORTANT: Do NOT use logger.error(...) anywhere inside this service.
- * NotificationService is itself the Telegram delivery path for error notifications.
- * Using logger.error here would trigger the error notifier hook recursively,
- * which is blocked by the reentrancy guard (causing the notification to be silently dropped)
- * or could cause unexpected feedback loops in future. Use logger.warn for all failure paths.
+ * Create the runtime's notification service. Every notification is delivered by
+ * POSTing the full structured envelope to the authenticated notification-ingest
+ * endpoint (`NOTIFICATIONS_INGEST_URL`) — there is no other delivery path. Missing
+ * configuration is a startup error (thrown here, not discovered later as silent
+ * notification loss), so callers must construct this before a runtime starts
+ * trading, not lazily on first notify.
+ *
+ * Failure paths inside this service log at warn, not error: a delivery failure is a
+ * handled, degraded condition — the caller's notify() contract is fire-and-forget and
+ * the next notification retries the transport fresh.
  */
 export function createNotificationService(options) {
-    const chatId = typeof options?.telegram_chat_id === "string" ? options.telegram_chat_id.trim() : undefined;
     const mcpTransport = options?.mcpTransport;
-    const gatewayUrl = options?.gateway_url || process.env.OPENCLAW_GATEWAY_URL || "http://127.0.0.1:18789";
-    const gatewayToken = options?.gateway_token || process.env.OPENCLAW_GATEWAY_TOKEN;
-    if (chatId) {
-        logger.info(`Notifications enabled for ${chatId}; routing via OpenClaw /tools/invoke`);
+    const ingestUrl = (options?.ingest_url || process.env.NOTIFICATIONS_INGEST_URL)?.trim();
+    if (!ingestUrl) {
+        throw new Error("NotificationService misconfigured: NOTIFICATIONS_INGEST_URL is not set. " +
+            "The runtime has no notification transport — set NOTIFICATIONS_INGEST_URL " +
+            "(or pass options.ingest_url) before starting.");
+    }
+    const authToken = (options?.senpi_auth_token ||
+        process.env.SENPI_AUTH_TOKEN ||
+        process.env.SENPI_API_KEY)?.trim();
+    if (!authToken) {
+        throw new Error("NotificationService misconfigured: no Senpi auth token available. " +
+            "Set options.senpi_auth_token, or SENPI_AUTH_TOKEN / SENPI_API_KEY in the environment — " +
+            "the runtime authenticates to the notification-ingest endpoint with its own Senpi token.");
     }
+    const timeoutMs = options?.ingest_timeout_ms ?? DEFAULT_TIMEOUT_MS;
+    // Telegram delivery is gone; a recipe still carrying telegram_chat_id from before
+    // the cutover is a silent misconfiguration footgun otherwise — the operator set it
+    // expecting delivery and gets nothing. Ignore it, but say so loudly once.
+    if (typeof options?.telegram_chat_id === "string" && options.telegram_chat_id.trim().length > 0) {
+        logger.warn("telegram_chat_id is set but ignored: Telegram delivery has been removed.");
+    }
+    // Resolve the recipient once from THIS service's own token — never a process
+    // global — so sibling services with different tokens stamp different users.
+    const recipientUserId = decodeSenpiUserId(authToken);
+    if (recipientUserId === undefined) {
+        // A live runtime always holds a valid token, so an undecodable one is an
+        // anomaly. WARN only (never logger.error — see the reentrancy note above);
+        // delivery still proceeds unstamped.
+        logger.warn("Could not resolve recipient senpi_user_id from auth token; delivering notification unstamped.");
+    }
+    logger.info(`Notifications enabled; routing via POST ${ingestUrl}`);
     return {
-        async notify(message) {
+        async notify(input) {
+            const p = toPayload(input);
+            const message = p.message;
             if (typeof message !== "string" || message.length === 0)
                 return;
+            // Precedence: the service's own resolved recipient wins, but an
+            // unresolved token must never clobber a value already on the payload.
+            const recipient = recipientUserId ?? p.recipientUserId;
             const preview = message.length > 120 ? message.slice(0, 120) + "…" : message;
             logger.info("Notification service invoked", { messagePreview: preview });
-            if (!chatId) {
-                logger.warn("Notification not sent: no telegram_chat_id in runtime config.");
-                return;
-            }
-            // 1. Prefer MCP transport if host injects it in the future
+            // The openability fields (canOpenAgentChat + context) forward verbatim — never inferred,
+            // never repaired. notificationId/subtype fall back to the payload's own
+            // context when present (the producer already minted one), else this is the
+            // first and only place an id is minted for a bare-string/non-openable call.
+            const notificationId = p.context?.notificationId ?? randomUUID();
+            const subtype = p.subtype ?? p.context?.subtype;
+            // notifications-service renders user-visible text ONLY from these three
+            // actionMetadata fields (each `|| ""`) — it never displays the top-level
+            // `message`. A bare-string / copy-less notify() would otherwise ship a
+            // blank notification, so a copy-less payload always gets a synthesized
+            // fallback derived from `message` — every family ships non-empty copy.
+            const copy = p.copy ?? {
+                pushTitle: truncateForPush(message.split("\n")[0], PUSH_TITLE_MAX),
+                pushBody: truncateForPush(message.replace(/\n/g, " · "), PUSH_BODY_MAX),
+                inApp: message,
+            };
+            const envelope = {
+                notificationId,
+                message,
+                category: NOTIFICATION_CATEGORY,
+                source: NOTIFICATION_SOURCE,
+                timestamp: p.context?.createdAt ?? new Date().toISOString(),
+                canOpenAgentChat: p.canOpenAgentChat === true,
+                actionMetadata: {
+                    uniqueKeys: [notificationId],
+                    ...(subtype !== undefined ? { notificationSubtype: subtype } : {}),
+                    id: notificationId,
+                    pushNotificationTitle: copy.pushTitle,
+                    pushNotificationMessage: copy.pushBody,
+                    inAppNotificationMessage: copy.inApp,
+                    senpiFormattedMessage: copy.inApp,
+                    ctas: [],
+                    category: NOTIFICATION_CATEGORY,
+                },
+                // Same id drives the ingest endpoint's idempotency precedence, so the two
+                // attempts of one delivery (see `deliver`'s bounded retry) collapse to a
+                // single ledger row even if the first attempt's response was lost.
+                idempotencyKey: notificationId,
+            };
+            if (p.context !== undefined)
+                envelope.context = p.context;
+            if (recipient !== undefined)
+                envelope.recipientUserId = recipient;
+            // Test-only seam: the deployed OpenClaw gateway never injects mcpTransport
+            // for notifications, so this branch only ever runs under test. When present
+            // it short-circuits before any HTTP call.
             if (mcpTransport) {
                 try {
-                    await mcpTransport("send_telegram_notification", { target: `telegram:${chatId}`, message });
-                    return;
-                }
-                catch (err) {
-                    logger.warn("MCP transport failed; falling back to Gateway HTTP", err);
-                }
-            }
-            // 2. HTTP Gateway Tool Invocation (Matches your LLM Engine)
-            if (gatewayToken) {
-                try {
-                    const baseUrl = gatewayUrl.endsWith("/") ? gatewayUrl.slice(0, -1) : gatewayUrl;
-                    const res = await fetch(`${baseUrl}/tools/invoke`, {
-                        method: "POST",
-                        headers: {
-                            "Content-Type": "application/json",
-                            "Authorization": `Bearer ${gatewayToken}`
-                        },
-                        body: JSON.stringify({
-                            tool: "message",
-                            args: {
-                                action: "send",
-                                target: `telegram:${chatId}`,
-                                message: message,
-                            },
-                        })
-                    });
-                    if (!res.ok) {
-                        const errText = await res.text().catch(() => "No response body");
-                        throw new Error(`HTTP ${res.status}: ${errText}`);
-                    }
-                    const body = await res.json();
-                    if (!body.ok) {
-                        throw new Error(`Gateway rejected message tool: ${body.error ?? JSON.stringify(body)}`);
-                    }
-                    return;
+                    await mcpTransport("notify", envelope);
                 }
                 catch (err) {
-                    logger.warn("Gateway tool invocation failed", err);
+                    logger.warn("mcpTransport notify failed", undefined, { err: describeError(err) });
                 }
                 return;
             }
-            logger.warn("Notification dropped: Missing OPENCLAW_GATEWAY_TOKEN in environment.");
+            await deliver(ingestUrl, authToken, envelope, timeoutMs);
         },
     };
 }

package/dist/runtime/notifications.js.map

@@ -1 +1 @@
-{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../src/runtime/notifications.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAA6B,MAAM,sBAAsB,CAAC;AAExF,MAAM,MAAM,GAAG,YAAY,CAAC,6BAA6B,CAAC,CAAC;AAU3D;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,+BAA+B,CAC7C,UAAkB,EAClB,GAA0B;IAE1B,OAAO,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAoC;IAC5E,MAAM,MAAM,GAAG,OAAO,OAAO,EAAE,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3G,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;IAC3C,MAAM,UAAU,GAAG,OAAO,EAAE,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,wBAAwB,CAAC;IACxG,MAAM,YAAY,GAAG,OAAO,EAAE,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAElF,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,6BAA6B,MAAM,sCAAsC,CAAC,CAAC;IACzF,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,OAAe;YAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAEhE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7E,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;YAEzE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;gBAC7E,OAAO;YACT,CAAC;YAED,2DAA2D;YAC3D,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,YAAY,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,YAAY,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC5F,OAAO;gBACT,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;YAED,4DAA4D;YAC5D,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;oBAEhF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,eAAe,EAAE;wBACjD,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE;4BACP,cAAc,EAAE,kBAAkB;4BAClC,eAAe,EAAE,UAAU,YAAY,EAAE;yBAC1C;wBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE;gCACJ,MAAM,EAAE,MAAM;gCACd,MAAM,EAAE,YAAY,MAAM,EAAE;gCAC5B,OAAO,EAAE,OAAO;6BACjB;yBACF,CAAC;qBACH,CAAC,CAAC;oBAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;wBACZ,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,CAAC;wBACjE,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC;oBACpD,CAAC;oBAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAuD,CAAC;oBACnF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;wBACb,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC1F,CAAC;oBAED,OAAO;gBACT,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBACD,OAAO;YACT,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACtF,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../src/runtime/notifications.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACrG,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,MAAM,GAAG,YAAY,CAAC,6BAA6B,CAAC,CAAC;AAE3D;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,OAAO,CAAC;AACtC,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,mFAAmF;AACnF,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB,gFAAgF;AAChF,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAerC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,+BAA+B,CAAC,UAAkB;IAChE,OAAO,qBAAqB,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC;AACvD,CAAC;AAED,qFAAqF;AACrF,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAOD;;;wFAGwF;AACxF,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,OAAO,CAAC;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE/C;4EAC4E;AAC5E,SAAS,eAAe,CAAC,GAAW,EAAE,OAAe,EAAE,UAAoC;IACzF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,GAAG,qBAAqB;QAAE,OAAO;IACrE,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,SAAiB,EACjB,SAAiB,EACjB,QAAiC,EACjC,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,SAAS,EAAE;aACrC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC9B,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,8EAA8E;QAC9E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;IACvD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;2EAE2E;AAC3E,KAAK,UAAU,OAAO,CACpB,SAAiB,EACjB,SAAiB,EACjB,QAAiC,EACjC,SAAiB;IAEjB,IAAI,OAAO,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACxE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,IAAI,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;QACrF,OAAO,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO;IAElC,MAAM,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAC;IAC/C,MAAM,OAAO,GAAI,QAAQ,CAAC,cAAsD,EAAE,mBAAmB,CAAC;IACtG,MAAM,YAAY,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC3G,eAAe,CACb,YAAY,EACZ,gDAAgD,MAAM,CAAC,cAAc,CAAC,WAAW,OAAO,CAAC,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC,MAAM,EAAE,EAC7H,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAC3C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAoC;IAC5E,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;IAE3C,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,CAAC;IACxF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,2EAA2E;YAC3E,+CAA+C,CAClD,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,CAChB,OAAO,EAAE,gBAAgB;QACzB,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5B,OAAO,CAAC,GAAG,CAAC,aAAa,CAC1B,EAAE,IAAI,EAAE,CAAC;IACV,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,oEAAoE;YAClE,yFAAyF;YACzF,yFAAyF,CAC5F,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,EAAE,iBAAiB,IAAI,kBAAkB,CAAC;IAEnE,kFAAkF;IAClF,mFAAmF;IACnF,0EAA0E;IAC1E,IAAI,OAAO,OAAO,EAAE,gBAAgB,KAAK,QAAQ,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChG,MAAM,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IAC1F,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,eAAe,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,yEAAyE;QACzE,2EAA2E;QAC3E,qCAAqC;QACrC,MAAM,CAAC,IAAI,CAAC,+FAA+F,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,2CAA2C,SAAS,EAAE,CAAC,CAAC;IAEpE,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAmC;YAC9C,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;YAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAEhE,gEAAgE;YAChE,sEAAsE;YACtE,MAAM,SAAS,GAAG,eAAe,IAAI,CAAC,CAAC,eAAe,CAAC;YAEvD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7E,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;YAEzE,yFAAyF;YACzF,wEAAwE;YACxE,2EAA2E;YAC3E,4EAA4E;YAC5E,MAAM,cAAc,GAAG,CAAC,CAAC,OAAO,EAAE,cAAc,IAAI,UAAU,EAAE,CAAC;YACjE,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC;YAEhD,wEAAwE;YACxE,yEAAyE;YACzE,uEAAuE;YACvE,uEAAuE;YACvE,uEAAuE;YACvE,MAAM,IAAI,GAAqB,CAAC,CAAC,IAAI,IAAI;gBACvC,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC;gBAClE,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,aAAa,CAAC;gBACvE,KAAK,EAAE,OAAO;aACf,CAAC;YAEF,MAAM,QAAQ,GAA4B;gBACxC,cAAc;gBACd,OAAO;gBACP,QAAQ,EAAE,qBAAqB;gBAC/B,MAAM,EAAE,mBAAmB;gBAC3B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC3D,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,KAAK,IAAI;gBAC7C,cAAc,EAAE;oBACd,UAAU,EAAE,CAAC,cAAc,CAAC;oBAC5B,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClE,EAAE,EAAE,cAAc;oBAClB,qBAAqB,EAAE,IAAI,CAAC,SAAS;oBACrC,uBAAuB,EAAE,IAAI,CAAC,QAAQ;oBACtC,wBAAwB,EAAE,IAAI,CAAC,KAAK;oBACpC,qBAAqB,EAAE,IAAI,CAAC,KAAK;oBACjC,IAAI,EAAE,EAAE;oBACR,QAAQ,EAAE,qBAAqB;iBAChC;gBACD,0EAA0E;gBAC1E,yEAAyE;gBACzE,mEAAmE;gBACnE,cAAc,EAAE,cAAc;aAC/B,CAAC;YACF,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;gBAAE,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;YAC1D,IAAI,SAAS,KAAK,SAAS;gBAAE,QAAQ,CAAC,eAAe,GAAG,SAAS,CAAC;YAElE,2EAA2E;YAC3E,4EAA4E;YAC5E,0CAA0C;YAC1C,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACzC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpF,CAAC;gBACD,OAAO;YACT,CAAC;YAED,MAAM,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC3D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/runtime.d.ts

@@ -63,8 +63,10 @@ export declare class Runtime {
     private cachedStrategyId;
     /** In-flight resolution promise; ensures concurrent first-burst callers reuse one `listStrategies`. */
     private strategyIdResolution;
-    /** Action-layer Telegram subscriber (open submit / close); disposed in {@link Runtime.stop}. */
-    private actionNotificationSubscriber;
+    /** Scanner-alert dedupe: (scannerId, message) key → last-emitted ms. Pruned opportunistically. */
+    private scannerAlertLastEmitted;
+    /** Suppression-WARN rate limiting for the same keyspace — at most one WARN per key per window. */
+    private scannerAlertLastWarned;
     /** Serializes reconcile vs the trade loop. One shared key "reconcile". */
     private reconcileMutex;
     /** Deferred gate: consumer awaits this before touching slot counts / running actions. */
@@ -156,6 +158,18 @@ export declare class Runtime {
      * states. Best-effort: a failure here must not block runtime start.
      */
     private rehydratePositionIdRegistry;
+    /**
+     * Filter one scan run's alerts down to the ones fresh enough to notify on,
+     * per (scannerId, message) — see {@link SCANNER_ALERT_DEDUPE_MS}. A run
+     * mixing a brand-new alert with a repeat of one already notified within the
+     * window still surfaces the new one; the repeat is silently dropped from
+     * the result and, on its first suppression this window, logs one rate-limited
+     * WARN. Freshly-emitted keys record `now` so the next occurrence inside the
+     * window is recognized as a repeat.
+     */
+    private freshScannerAlerts;
+    /** Opportunistic cleanup of scanner-alert dedupe state — bounds memory for long-running runtimes. */
+    private pruneScannerAlertDedupe;
     /**
      * Cached wallet → strategy-id lookup. Concurrent callers share one
      * in-flight `listStrategies` promise; the cached id is reused across

package/dist/runtime/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/runtime/runtime.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAI/E,OAAO,KAAK,EACV,4BAA4B,EAC5B,2BAA2B,EAC5B,MAAM,0CAA0C,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAiCjF,OAAO,EAAE,SAAS,IAAI,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAiBrE,OAAO,KAAK,EAKV,mBAAmB,EACnB,kBAAkB,EAEnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,qBAAqB,EACrB,YAAY,EACZ,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,2BAA2B,CAAC;AA6CnC,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAcD,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,GAAG,CAAiB;IAC5B,OAAO,CAAC,UAAU,CAAuC;IACzD,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,kBAAkB,CAAsB;IAChD,OAAO,CAAC,aAAa,CAAwB;IAC7C,OAAO,CAAC,SAAS,CAA+B;IAEhD,OAAO,CAAC,KAAK,CAA4B;IACzC,OAAO,CAAC,iBAAiB,CAAkC;IAC3D,OAAO,CAAC,qBAAqB,CAAsC;IACnE,6FAA6F;IAC7F,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,2FAA2F;IAC3F,OAAO,CAAC,kBAAkB,CAAC,CAAyB;IACpD,OAAO,CAAC,aAAa,CAAC,CAAmB;IACzC,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAuB;IAExC,4FAA4F;IAC5F,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,eAAe,CAA6B;IACpD,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,kBAAkB,CAA8B;IACxD,yGAAyG;IACzG,OAAO,CAAC,sBAAsB,CAA6B;IAC3D,0GAA0G;IAC1G,OAAO,CAAC,8BAA8B,CAA6B;IACnE,0FAA0F;IAC1F,OAAO,CAAC,sBAAsB,CAA+C;IAC7E,OAAO,CAAC,mBAAmB,CAAuC;IAClE,OAAO,CAAC,cAAc,CAAkB;IACxC,OAAO,CAAC,mBAAmB,CAAuB;IAElD,kGAAkG;IAClG,OAAO,CAAC,oBAAoB,CAA8E;IAE1G,4FAA4F;IAC5F,OAAO,CAAC,gBAAgB,CAAuB;IAE/C,uGAAuG;IACvG,OAAO,CAAC,oBAAoB,CAAgC;IAE5D,gGAAgG;IAChG,OAAO,CAAC,4BAA4B,CAAoC;IAGxE,0EAA0E;IAC1E,OAAO,CAAC,cAAc,CAAgC;IACtD,yFAAyF;IACzF,OAAO,CAAC,aAAa,CAAmF;IACxG,4FAA4F;IAC5F,OAAO,CAAC,gBAAgB,CAAS;IACjC,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,CAA8C;IACzE,+IAA+I;IAC/I,OAAO,CAAC,cAAc,CAAuB;IAC7C,wEAAwE;IACxE,OAAO,CAAC,mBAAmB,CAAK;IAEhC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;gBAElC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc;IAK1D,IAAI,GAAG,IAAI,cAAc,GAAG,IAAI,CAE/B;IAEK,eAAe,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAItD,cAAc,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAI1D;;;OAGG;IACH,sBAAsB,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAI3E,wEAAwE;IACxE,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAI5F,sDAAsD;IACtD,yBAAyB,CACvB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,wBAAwB,GAC9B,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAInC;;;;;;;;;OASG;IACG,yBAAyB,CAC7B,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,2BAA2B,CAAC;IAQvC;;;;;OAKG;IACI,mBAAmB,IAAI,MAAM;IAIpC;;;;;;;;;;;OAWG;IACI,aAAa,IAAI,MAAM,GAAG,IAAI;IAIrC;;;;;;;;;;;;;;;;;;;;OAoBG;IACU,UAAU,CACrB,IAAI,EAAE,cAAc,EACpB,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC9B,OAAO,CAAC,gBAAgB,CAAC;IAkC5B;;;OAGG;YACW,2BAA2B;IASzC;;;;;OAKG;YACW,iBAAiB;IA6CzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAya5B;;OAEG;IACH,uEAAuE;IACjE,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAStD,0FAA0F;IACpF,6BAA6B,IAAI,OAAO,CAAC,IAAI,CAAC;IAIpD;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAY5B;;OAEG;YACW,iBAAiB;IAyI/B;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAO5B;;;;OAIG;YACW,oBAAoB;IAiElC;;;OAGG;YACW,kBAAkB;IAc1B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAgE5B"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/runtime/runtime.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAI/E,OAAO,KAAK,EACV,4BAA4B,EAC5B,2BAA2B,EAC5B,MAAM,0CAA0C,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAmCjF,OAAO,EAAE,SAAS,IAAI,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAgBrE,OAAO,KAAK,EAKV,mBAAmB,EACnB,kBAAkB,EAEnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,qBAAqB,EACrB,YAAY,EACZ,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,2BAA2B,CAAC;AAgEnC,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAcD,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,GAAG,CAAiB;IAC5B,OAAO,CAAC,UAAU,CAAuC;IACzD,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,kBAAkB,CAAsB;IAChD,OAAO,CAAC,aAAa,CAAwB;IAC7C,OAAO,CAAC,SAAS,CAA+B;IAEhD,OAAO,CAAC,KAAK,CAA4B;IACzC,OAAO,CAAC,iBAAiB,CAAkC;IAC3D,OAAO,CAAC,qBAAqB,CAAsC;IACnE,6FAA6F;IAC7F,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,2FAA2F;IAC3F,OAAO,CAAC,kBAAkB,CAAC,CAAyB;IACpD,OAAO,CAAC,aAAa,CAAC,CAAmB;IACzC,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAuB;IAExC,4FAA4F;IAC5F,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,eAAe,CAA6B;IACpD,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,kBAAkB,CAA8B;IACxD,yGAAyG;IACzG,OAAO,CAAC,sBAAsB,CAA6B;IAC3D,0GAA0G;IAC1G,OAAO,CAAC,8BAA8B,CAA6B;IACnE,0FAA0F;IAC1F,OAAO,CAAC,sBAAsB,CAA+C;IAC7E,OAAO,CAAC,mBAAmB,CAAuC;IAClE,OAAO,CAAC,cAAc,CAAkB;IACxC,OAAO,CAAC,mBAAmB,CAAuB;IAElD,kGAAkG;IAClG,OAAO,CAAC,oBAAoB,CAA8E;IAE1G,4FAA4F;IAC5F,OAAO,CAAC,gBAAgB,CAAuB;IAE/C,uGAAuG;IACvG,OAAO,CAAC,oBAAoB,CAAgC;IAE5D,kGAAkG;IAClG,OAAO,CAAC,uBAAuB,CAA6B;IAC5D,kGAAkG;IAClG,OAAO,CAAC,sBAAsB,CAA6B;IAG3D,0EAA0E;IAC1E,OAAO,CAAC,cAAc,CAAgC;IACtD,yFAAyF;IACzF,OAAO,CAAC,aAAa,CAAmF;IACxG,4FAA4F;IAC5F,OAAO,CAAC,gBAAgB,CAAS;IACjC,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,CAA8C;IACzE,+IAA+I;IAC/I,OAAO,CAAC,cAAc,CAAuB;IAC7C,wEAAwE;IACxE,OAAO,CAAC,mBAAmB,CAAK;IAEhC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;gBAElC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc;IAK1D,IAAI,GAAG,IAAI,cAAc,GAAG,IAAI,CAE/B;IAEK,eAAe,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAItD,cAAc,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAI1D;;;OAGG;IACH,sBAAsB,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAI3E,wEAAwE;IACxE,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAI5F,sDAAsD;IACtD,yBAAyB,CACvB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,wBAAwB,GAC9B,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAInC;;;;;;;;;OASG;IACG,yBAAyB,CAC7B,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,2BAA2B,CAAC;IAQvC;;;;;OAKG;IACI,mBAAmB,IAAI,MAAM;IAIpC;;;;;;;;;;;OAWG;IACI,aAAa,IAAI,MAAM,GAAG,IAAI;IAIrC;;;;;;;;;;;;;;;;;;;;OAoBG;IACU,UAAU,CACrB,IAAI,EAAE,cAAc,EACpB,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC9B,OAAO,CAAC,gBAAgB,CAAC;IAkC5B;;;OAGG;YACW,2BAA2B;IASzC;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAqB1B,qGAAqG;IACrG,OAAO,CAAC,uBAAuB;IAS/B;;;;;OAKG;YACW,iBAAiB;IA6CzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAsc5B;;OAEG;IACH,uEAAuE;IACjE,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAStD,0FAA0F;IACpF,6BAA6B,IAAI,OAAO,CAAC,IAAI,CAAC;IAIpD;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAY5B;;OAEG;YACW,iBAAiB;IAyI/B;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAO5B;;;;OAIG;YACW,oBAAoB;IAiElC;;;OAGG;YACW,kBAAkB;IAc1B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CA4D5B"}

package/dist/runtime/runtime.js

@@ -28,7 +28,6 @@ import { initRisk } from "../risk/index.js";
 import { createHealthStateModule, } from "../health/index.js";
 import { DslPlugin as DslPluginClass } from "../dsl/plugin/index.js";
 import { HOOK_EVENT } from "../types/hooks.js";
-import { createActionNotificationSubscriber, isActionLifecycleNotificationsEnabled } from "../actions/notifications/index.js";
 import { MaxLeverageCache } from "../leverage/max-leverage-cache.js";
 import { buildStateLayout } from "./state-layout.js";
 import { createLogger } from "../utils/logger.js";
@@ -58,6 +57,23 @@ const RECONCILE_RETRY_INTERVAL_MS = 15_000;
 const SIGNAL_QUEUE_BACKPRESSURE_THRESHOLD = 10;
 /** Default liveness-heartbeat window (~15 min) when `health.window_seconds` is unset. */
 const DEFAULT_LIVENESS_WINDOW_SECONDS = 900;
+/**
+ * Scanner-alert dedupe window: scanner intervals run in minutes, so an identical
+ * alert re-firing inside this window is noise from the same condition, not a new
+ * signal. Long enough to suppress a watchdog repeating every scan interval, short
+ * enough that a genuinely persistent condition still re-notifies within the hour.
+ */
+const SCANNER_ALERT_DEDUPE_MS = 10 * 60_000;
+/**
+ * Dedupe key for one scanner alert: NUL-joined so a scannerId/message never
+ * collides across the pair. Numeric runs in the message are collapsed to `#`
+ * before keying — watchdog-style alerts embed live floats (prices, margins)
+ * that drift every scan tick, and keying on the raw text would make every
+ * tick look like a new alert. Key-only: the delivered message is untouched.
+ */
+function scannerAlertDedupeKey(scannerId, message) {
+    return `${scannerId}\u0000${message.replace(/\d+(?:\.\d+)?/g, "#")}`;
+}
 export class Runtime {
     config;
     options;
@@ -99,8 +115,10 @@ export class Runtime {
     cachedStrategyId = null;
     /** In-flight resolution promise; ensures concurrent first-burst callers reuse one `listStrategies`. */
     strategyIdResolution = null;
-    /** Action-layer Telegram subscriber (open submit / close); disposed in {@link Runtime.stop}. */
-    actionNotificationSubscriber = null;
+    /** Scanner-alert dedupe: (scannerId, message) key → last-emitted ms. Pruned opportunistically. */
+    scannerAlertLastEmitted = new Map();
+    /** Suppression-WARN rate limiting for the same keyspace — at most one WARN per key per window. */
+    scannerAlertLastWarned = new Map();
     // ─── reconcile gate + mutex ──────────────────────────────────────────────────
     /** Serializes reconcile vs the trade loop. One shared key "reconcile". */
     reconcileMutex = new KeyedMutex();
@@ -251,6 +269,42 @@ export class Runtime {
             logger.warn("position.id registry rehydrate failed, continuing with empty registry", { err });
         }
     }
+    /**
+     * Filter one scan run's alerts down to the ones fresh enough to notify on,
+     * per (scannerId, message) — see {@link SCANNER_ALERT_DEDUPE_MS}. A run
+     * mixing a brand-new alert with a repeat of one already notified within the
+     * window still surfaces the new one; the repeat is silently dropped from
+     * the result and, on its first suppression this window, logs one rate-limited
+     * WARN. Freshly-emitted keys record `now` so the next occurrence inside the
+     * window is recognized as a repeat.
+     */
+    freshScannerAlerts(scannerId, alerts, now) {
+        return alerts.filter((alert) => {
+            const key = scannerAlertDedupeKey(scannerId, alert.message ?? "");
+            const lastEmitted = this.scannerAlertLastEmitted.get(key);
+            if (lastEmitted !== undefined && now - lastEmitted < SCANNER_ALERT_DEDUPE_MS) {
+                const lastWarned = this.scannerAlertLastWarned.get(key);
+                if (lastWarned === undefined || now - lastWarned >= SCANNER_ALERT_DEDUPE_MS) {
+                    this.scannerAlertLastWarned.set(key, now);
+                    logger.warn("scanner alert suppressed (dedupe)", { scannerId, window_ms: SCANNER_ALERT_DEDUPE_MS });
+                }
+                return false;
+            }
+            this.scannerAlertLastEmitted.set(key, now);
+            return true;
+        });
+    }
+    /** Opportunistic cleanup of scanner-alert dedupe state — bounds memory for long-running runtimes. */
+    pruneScannerAlertDedupe(now) {
+        for (const [key, ts] of this.scannerAlertLastEmitted) {
+            if (now - ts >= SCANNER_ALERT_DEDUPE_MS)
+                this.scannerAlertLastEmitted.delete(key);
+        }
+        for (const [key, ts] of this.scannerAlertLastWarned) {
+            if (now - ts >= SCANNER_ALERT_DEDUPE_MS)
+                this.scannerAlertLastWarned.delete(key);
+        }
+    }
     /**
      * Cached wallet → strategy-id lookup. Concurrent callers share one
      * in-flight `listStrategies` promise; the cached id is reused across
@@ -344,6 +398,9 @@ export class Runtime {
         this.senpi = senpi;
         this.strategyConfig = resolveStrategyConfig(this.config);
         await this.rehydratePositionIdRegistry();
+        // Human strategy label for every runtime notification family: the operator's
+        // `group` when set, else the recipe `name` (schema-required, always resolves).
+        const notificationLabel = this.config.group ?? this.config.name;
         // The OTLP exporter env is the telemetry master switch: the OTel SDK (stood up at plugin
         // register()) and the domain-event log both gate on it.
         const telemetryEnabled = isOtlpEndpointConfigured();
@@ -379,6 +436,7 @@ export class Runtime {
             const notifications = createNotificationService({
                 ...this.config.notifications,
                 mcpTransport: this.options.mcpTransport,
+                senpi_auth_token: this.options.apiKey ?? process.env.SENPI_AUTH_TOKEN ?? process.env.SENPI_API_KEY,
             });
             const riskBlock = this.config.risk;
             const strategyAddress = this.strategyConfig.address;
@@ -402,7 +460,7 @@ export class Runtime {
                     strategies: new Map([[strategyAddress, this.strategyConfig]]),
                     // Human strategy label for alerts; risk-guard falls back to the
                     // truncated address when an address has no name here.
-                    strategyNames: { [strategyAddress]: this.config.name },
+                    strategyNames: { [strategyAddress]: notificationLabel },
                     auditLog,
                     lifecycleTracker: lifecycle,
                 })
@@ -436,6 +494,7 @@ export class Runtime {
                 scannerModule: this.scannerModule,
                 maxLeverageCache,
                 positionIdRegistry: this.positionIdRegistry,
+                notificationLabel,
             });
             this.actionRuntimeModule = new ActionRuntimeModule({ stateDir: layout.actionRoot });
             const { runActionsForSignal } = await createActions(this.config, {
@@ -470,7 +529,7 @@ export class Runtime {
             const notificationsConfig = this.config.notifications;
             if (hasDsl) {
                 const dslNotificationsDisabled = notificationsConfig?.dsl_lifecycle === false;
-                const dslNotifySlUpdates = notificationsConfig?.dsl_notify_sl_updates === true;
+                const dslNotifySlUpdates = notificationsConfig?.dsl_notify_sl_updates !== false;
                 this.dslPlugin = await DslPluginClass.create({
                     config: exitConfig,
                     bus: this.bus,
@@ -480,7 +539,7 @@ export class Runtime {
                     strategyStates: strategyStatesMap,
                     notifications: dslNotificationsDisabled ? undefined : notifications,
                     notifySlUpdates: dslNotifySlUpdates,
-                    strategyName: this.config.name,
+                    strategyName: notificationLabel,
                     // Monitor runs the unified periodic reconcile (adopt/resize/gone), serialized
                     // against the trade loop on the same reconcileMutex key, and can resolve the boot gate.
                     reconcileSerialize: (fn) => this.reconcileMutex.withKeyLock("reconcile", fn),
@@ -499,14 +558,6 @@ export class Runtime {
             void this.runBootReconcileLoop(strategyStatesMap).catch((err) => {
                 logger.error("[runtime][reconcile] boot reconcile loop crashed", { err });
             });
-            if (isActionLifecycleNotificationsEnabled(notificationsConfig)) {
-                this.actionNotificationSubscriber = createActionNotificationSubscriber(this.bus, notifications, {
-                    strategyName: this.config.name,
-                });
-            }
-            else {
-                this.actionNotificationSubscriber = null;
-            }
             initRisk(this.bus);
             this.healthStateModule = createHealthStateModule({
                 runtimeName: this.config.name,
@@ -556,12 +607,49 @@ export class Runtime {
                 // disturbs the scan path.
                 emitEvent(logger, () => buildScannerSummaryEvent(scannerRunPayload, Date.now()));
                 recordScannerRun({ scannerId: event.result.scannerId, outcome: event.result.status });
-                // Forward scanner summary alerts (e.g. watchdog) to notification service
+                // Forward scanner summary alerts (e.g. watchdog) to notification service, deduped
+                // per (scannerId, message) within SCANNER_ALERT_DEDUPE_MS — see freshScannerAlerts.
                 const alerts = event.result.summary?.alerts;
                 if (Array.isArray(alerts) && alerts.length > 0) {
-                    const header = `[${event.result.scannerId}] ${alerts.length} alert(s):`;
-                    const lines = alerts.map((a) => `  ${a.level ?? "ALERT"}: ${a.message ?? ""}`);
-                    notifications.notify(`${header}\n${lines.join("\n")}`).catch(() => { });
+                    const scannerId = event.result.scannerId;
+                    const now = Date.now();
+                    const freshAlerts = this.freshScannerAlerts(scannerId, alerts, now);
+                    this.pruneScannerAlertDedupe(now);
+                    if (freshAlerts.length > 0) {
+                        // Push disabled until per-type notification opt-in exists; re-enable then.
+                        // Push and in-app share this notify() payload, so both are disabled together.
+                        //
+                        // const copy: NotificationCopy = {
+                        //   pushTitle: "🔔 Market alert",
+                        //   pushBody: freshAlerts[0]?.message ?? "",
+                        //   inApp:
+                        //     `🔔 ${freshAlerts.length} market alert(s)<br>` +
+                        //     freshAlerts
+                        //       .map((a: { level?: string; message?: string }) => `${a.level ?? "ALERT"}: ${a.message ?? ""}`)
+                        //       .join("<br>"),
+                        // };
+                        // // Address-less by design: the scanner watches the market, not one
+                        // // strategy, so the strategy wallet in scope must not leak into the seed.
+                        // // The agent answers from the runtime's event log, so the alert opens a
+                        // // chat by category alone.
+                        // const createdAt = new Date().toISOString();
+                        // const payload = applyMessagePrefix(
+                        //   {
+                        //     message: copy.inApp,
+                        //     canOpenAgentChat: true,
+                        //     subtype: "MARKET_SCANNER",
+                        //     copy,
+                        //     context: {
+                        //       notificationId: randomUUID(),
+                        //       subtype: "MARKET_SCANNER",
+                        //       createdAt,
+                        //       contextText: copy.inApp,
+                        //     },
+                        //   },
+                        //   labelPrefix(notificationLabel),
+                        // );
+                        // notifications.notify(payload).catch(() => {});
+                    }
                 }
             };
             this.scannerModule.on("scanner:run:complete", this.onScannerRunComplete);
@@ -608,10 +696,6 @@ export class Runtime {
                     this.scannerModule.off("scanner:run:complete", this.onScannerRunComplete);
                     this.onScannerRunComplete = null;
                 }
-                if (this.actionNotificationSubscriber != null) {
-                    this.actionNotificationSubscriber.dispose();
-                    this.actionNotificationSubscriber = null;
-                }
                 if (this.dslPlugin) {
                     this.dslPlugin.stop();
                     this.dslPlugin = null;
@@ -978,10 +1062,6 @@ export class Runtime {
             this.scannerModule.off("scanner:run:complete", this.onScannerRunComplete);
             this.onScannerRunComplete = null;
         }
-        if (this.actionNotificationSubscriber != null) {
-            this.actionNotificationSubscriber.dispose();
-            this.actionNotificationSubscriber = null;
-        }
         await this.scannerModule.stop();
         if (this.dslPlugin) {
             this.dslPlugin.stop();