@senpi/runtime 3.0.56 → 3.0.58

package/dist/validate/import-stage.js

@@ -0,0 +1,244 @@
+/**
+ * The import depth: run the loadability checks and turn what they find into findings.
+ *
+ * The checks themselves live in Python, next to the loader the scaffold uses before its own first
+ * tick — so a package that passes has satisfied the contract production applies. This side spawns
+ * that checker, one process per scanner, and translates its output.
+ *
+ * ## Why a process per scanner
+ *
+ * Importing puts the scanner's directory at the front of the module search path, and two scanners
+ * routinely contain files of the same name. Checking several in one interpreter lets one scanner's
+ * `scoring` satisfy another's import of a file that does not exist — a broken package reporting
+ * clean. Production spawns a process per scanner for the same reason, so this matches it.
+ */
+// Via the repo's wrapper, never the stdlib module directly: OpenClaw's install gate
+// blocks any plugin file matching BOTH a spawn-like call AND the literal module name,
+// and `safe-spawn` exists to keep those bytes out of a file. Importing it directly here
+// shipped in 3.0.57, whose published dist the gate refuses outright — a hard failure,
+// not a warning, because senpi-agent's bootstrap deliberately stopped passing
+// --dangerously-force-unsafe-install so that exactly this regression would be loud.
+import { spawn } from "../utils/safe-spawn.js";
+import { isAbsolute, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { VALIDATE_CODE } from "./codes.js";
+/**
+ * Loading must terminate. Importing a module runs its body, so a `while True:` or a blocking
+ * connection at module level — exactly the class of defect this depth exists to find — would
+ * otherwise hang the command looking for it. Generous, because a large package legitimately takes
+ * a moment; the point is that it ends.
+ */
+const IMPORT_BUDGET_MS = 60_000;
+/** The directory the `scaffold` package is importable from, in dev and in the built package alike. */
+export function scaffoldPackageDir() {
+    return fileURLToPath(new URL("../scanners/external", import.meta.url));
+}
+function importFinding(code, fixKind, parts) {
+    const severity = code.startsWith("W_") ? "warning" : "error";
+    return { code, severity, stage: "import", actor: "agent", fix_kind: fixKind, ...parts };
+}
+/**
+ * Turn one raw result into findings.
+ *
+ * The Python side reports *what it observed*; the reasons and remedies are composed here, so all
+ * message policy lives in one language rather than being split across the boundary.
+ */
+export function toFindings(scanner, raw) {
+    const at = (file, line) => file === undefined ? undefined : { file, ...(line != null ? { line } : {}) };
+    switch (raw.code) {
+        case "SYNTAX":
+            return [
+                importFinding(VALIDATE_CODE.syntax, "edit", {
+                    what: `${raw.file} does not compile: ${raw.message}`,
+                    why: "Every file under the scanner directory is compiled, not only the ones the entrypoint " +
+                        "imports — a broken helper behind a condition would otherwise stay invisible until that " +
+                        "condition is true, in production.",
+                    fix: `Correct the syntax at ${raw.file}${raw.line != null ? `:${raw.line}` : ""}.`,
+                    where: at(raw.file, raw.line),
+                }),
+            ];
+        case "IMPORT_FAILED": {
+            const chain = raw.import_chain ?? [];
+            const trail = chain.length > 1 ? `${chain.join(" → ")}: ` : "";
+            return [
+                importFinding(VALIDATE_CODE.importFailed, "edit", {
+                    what: `${trail}${raw.error_type}: ${raw.message}`,
+                    why: "This runs while the module is being imported, which the runtime does before the first " +
+                        "tick. The scanner would die on launch and never produce a signal.",
+                    fix: raw.where !== null && raw.where !== undefined
+                        ? `Fix ${raw.where.file}:${raw.where.line} — that is where the import chain actually broke, not ${scanner.entrypoint ?? "the entrypoint"}.`
+                        : `Resolve the failed import in ${scanner.entrypoint ?? "the entrypoint"}.`,
+                    where: raw.where ?? undefined,
+                    evidence: { traceback: raw.traceback, import_chain: chain },
+                }),
+            ];
+        }
+        case "SCAN_MISSING":
+            return [
+                importFinding(VALIDATE_CODE.scanMissing, "edit", {
+                    what: `${raw.file} imports, but defines no \`scan\` function`,
+                    why: "The runtime looks up exactly this name. A module that imports cleanly with the entry " +
+                        "function named anything else passes every check that does not run it, and then does " +
+                        "nothing forever.",
+                    fix: "Rename the entry function to `scan`, taking exactly two parameters: `def scan(inputs, ctx)`.",
+                    where: at(raw.file),
+                }),
+            ];
+        case "SCAN_NOT_CALLABLE":
+            return [
+                importFinding(VALIDATE_CODE.scanNotCallable, "edit", {
+                    what: `\`scan\` exists in ${raw.file} but is not callable: ${raw.message}`,
+                    why: "The runtime calls it every interval; a value cannot be called.",
+                    fix: "Define `scan` as a function: `def scan(inputs, ctx)`.",
+                    where: at(raw.file),
+                }),
+            ];
+        case "SCAN_BAD_ARITY":
+            return [
+                importFinding(VALIDATE_CODE.scanBadArity, "edit", {
+                    what: raw.message ?? "scan has the wrong number of parameters",
+                    why: "The runtime calls `scan(inputs, ctx)` with exactly two arguments. Any other required shape raises on the first tick.",
+                    fix: "Change the signature to `def scan(inputs, ctx)`. Extra parameters are allowed only with defaults.",
+                    where: at(raw.file),
+                }),
+            ];
+        case "SCANNERS_IS_PACKAGE":
+            return [
+                importFinding(VALIDATE_CODE.scannersIsPackage, "edit", {
+                    what: `${scanner.root} contains __init__.py`,
+                    why: "The runtime imports these files as loose top-level modules, never as a package. The " +
+                        "marker suggests relative imports are available; they resolve in an editor and fail at " +
+                        "run time.",
+                    fix: "Delete __init__.py and import siblings by plain name — `import scoring`, not `from .scoring import …`.",
+                    where: at(raw.file),
+                }),
+            ];
+        case "SHADOWS_STDLIB":
+            return [
+                importFinding(VALIDATE_CODE.shadowsStdlib, "edit", {
+                    what: `${raw.file} shadows the standard-library module \`${raw.module}\``,
+                    why: "The scanner directory goes to the front of the module search path, so everything " +
+                        "imported afterwards — including the runtime's own dependencies — resolves to this file " +
+                        "instead of the real module.",
+                    fix: `Rename ${raw.file} to something outside the standard library, and update its importers.`,
+                    where: at(raw.file),
+                }),
+            ];
+        case "NON_MCP_SOURCE":
+            return [
+                importFinding(VALIDATE_CODE.nonMcpSource, "edit", {
+                    what: `${raw.file} imports \`${raw.module}\``,
+                    why: "Data fetched outside the sanctioned client is invisible to the runtime, and to the " +
+                        "check that decides whether a tick read anything at all — a scanner sourcing this way " +
+                        "cannot be proven to work.",
+                    fix: "Fetch through the context's data client so reads are observable.",
+                    where: at(raw.file, raw.line),
+                }),
+            ];
+        default:
+            // A code the Python side emits that this side does not know is a wiring mistake between the
+            // two, and silently dropping it would hide a check that is running but never reported.
+            return [
+                importFinding(VALIDATE_CODE.importFailed, "locate-only", {
+                    what: `The loadability checker reported an unrecognised result: ${raw.code}`,
+                    why: "This is a defect in the validator itself rather than in the strategy.",
+                    fix: "Report this — the checker and its reader are out of step.",
+                    evidence: { raw: raw },
+                }),
+            ];
+    }
+}
+/** Run the Python checker for one scanner. */
+export async function checkScanner(scanner, options = {}) {
+    const python = options.pythonBin ?? process.env.PYTHON ?? "python3";
+    const budgetMs = options.budgetMs ?? IMPORT_BUDGET_MS;
+    const args = ["-m", "scaffold.import_check", scanner.root];
+    if (scanner.entrypoint !== undefined)
+        args.push(scanner.entrypoint);
+    const existing = process.env.PYTHONPATH;
+    const pythonPath = existing ? `${scaffoldPackageDir()}:${existing}` : scaffoldPackageDir();
+    const raw = await new Promise((done) => {
+        const child = spawn(python, args, {
+            cwd: options.cwd,
+            env: { ...process.env, PYTHONPATH: pythonPath },
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        let stdout = "";
+        let stderr = "";
+        let settled = false;
+        const finish = (r) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            done(r);
+        };
+        // Importing a module executes its body, and a `while True:` or a blocking connection at module
+        // level is exactly the broken code this depth exists to find — so it must not be able to hang
+        // the command that is looking for it. Generous, because a large package legitimately takes a
+        // moment; the point is that it terminates.
+        const timer = setTimeout(() => {
+            child.kill("SIGKILL");
+            finish({ code: null, stdout, stderr, timedOut: true });
+        }, budgetMs);
+        child.stdout.on("data", (chunk) => (stdout += String(chunk)));
+        child.stderr.on("data", (chunk) => (stderr += String(chunk)));
+        child.on("error", (err) => finish({ code: null, stdout, stderr: String(err) }));
+        child.on("close", (code) => finish({ code, stdout, stderr }));
+    });
+    if (raw.timedOut) {
+        return [
+            {
+                code: VALIDATE_CODE.importTimeout,
+                severity: "error",
+                stage: "import",
+                actor: "agent",
+                fix_kind: "locate-only",
+                what: `Loading scanner '${scanner.name}' did not finish within ${budgetMs / 1000}s`,
+                why: "Importing a module runs its body. Work at module level — a loop, a blocking connection, a long computation — runs on every launch in production too, before the scanner has ticked once.",
+                fix: "Move work out of the module body and into scan(), where the tick budget governs it.",
+                evidence: { stdout: raw.stdout.slice(-2000), stderr: raw.stderr.slice(-2000) },
+            },
+        ];
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw.stdout);
+    }
+    catch {
+        // Reaching here means the interpreter could not be started, or died before writing. That is an
+        // environment fault: an agent responding by editing the strategy would be editing working code.
+        return [
+            {
+                code: VALIDATE_CODE.importHarnessFailed,
+                severity: "error",
+                stage: "import",
+                actor: "ops",
+                fix_kind: "command",
+                what: `The loadability checker could not be run for scanner '${scanner.name}'`,
+                why: "Checking whether the code loads needs a Python interpreter that can import the runtime's scaffold package.",
+                fix: `Ensure \`${python}\` is on PATH. This is an environment problem, not a problem with the strategy.`,
+                evidence: { exit_code: raw.code, stderr: raw.stderr.slice(0, 2000) },
+            },
+        ];
+    }
+    if (!parsed.ok) {
+        return [
+            importFinding(VALIDATE_CODE.importFailed, "locate-only", {
+                what: parsed.error ?? "the loadability checker could not run",
+                why: "Nothing about this scanner's code could be established.",
+                fix: `Check that ${scanner.root} exists and is readable.`,
+            }),
+        ];
+    }
+    return (parsed.findings ?? []).flatMap((finding) => toFindings(scanner, finding));
+}
+/** Absolute scanner root for a declared path, resolved against the recipe's directory. */
+export function resolveRoot(declared, baseDir) {
+    if (isAbsolute(declared))
+        return declared;
+    if (baseDir === undefined)
+        return undefined;
+    return resolve(baseDir, declared);
+}
+//# sourceMappingURL=import-stage.js.map

package/dist/validate/import-stage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-stage.js","sourceRoot":"","sources":["../../src/validate/import-stage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,oFAAoF;AACpF,sFAAsF;AACtF,wFAAwF;AACxF,sFAAsF;AACtF,8EAA8E;AAC9E,oFAAoF;AACpF,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG3C;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,MAAM,CAAC;AA6BhC,sGAAsG;AACtG,MAAM,UAAU,kBAAkB;IAChC,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CACpB,IAAY,EACZ,OAAgB,EAChB,KAA8G;IAE9G,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;AAC1F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,OAAsB,EAAE,GAAe;IAChE,MAAM,EAAE,GAAG,CAAC,IAAa,EAAE,IAAoB,EAA+B,EAAE,CAC9E,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAE/E,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO;gBACL,aAAa,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE;oBAC1C,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,sBAAsB,GAAG,CAAC,OAAO,EAAE;oBACpD,GAAG,EACD,uFAAuF;wBACvF,yFAAyF;wBACzF,mCAAmC;oBACrC,GAAG,EAAE,yBAAyB,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;oBAClF,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC;iBAC9B,CAAC;aACH,CAAC;QAEJ,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO;gBACL,aAAa,CAAC,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE;oBAChD,IAAI,EAAE,GAAG,KAAK,GAAG,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,OAAO,EAAE;oBACjD,GAAG,EACD,wFAAwF;wBACxF,mEAAmE;oBACrE,GAAG,EACD,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;wBAC3C,CAAC,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,yDAAyD,OAAO,CAAC,UAAU,IAAI,gBAAgB,GAAG;wBAC3I,CAAC,CAAC,gCAAgC,OAAO,CAAC,UAAU,IAAI,gBAAgB,GAAG;oBAC/E,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,SAAS;oBAC7B,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE;iBAC5D,CAAC;aACH,CAAC;QACJ,CAAC;QAED,KAAK,cAAc;YACjB,OAAO;gBACL,aAAa,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE;oBAC/C,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,4CAA4C;oBAC7D,GAAG,EACD,uFAAuF;wBACvF,sFAAsF;wBACtF,kBAAkB;oBACpB,GAAG,EAAE,8FAA8F;oBACnG,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;iBACpB,CAAC;aACH,CAAC;QAEJ,KAAK,mBAAmB;YACtB,OAAO;gBACL,aAAa,CAAC,aAAa,CAAC,eAAe,EAAE,MAAM,EAAE;oBACnD,IAAI,EAAE,sBAAsB,GAAG,CAAC,IAAI,yBAAyB,GAAG,CAAC,OAAO,EAAE;oBAC1E,GAAG,EAAE,gEAAgE;oBACrE,GAAG,EAAE,uDAAuD;oBAC5D,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;iBACpB,CAAC;aACH,CAAC;QAEJ,KAAK,gBAAgB;YACnB,OAAO;gBACL,aAAa,CAAC,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE;oBAChD,IAAI,EAAE,GAAG,CAAC,OAAO,IAAI,yCAAyC;oBAC9D,GAAG,EAAE,sHAAsH;oBAC3H,GAAG,EAAE,mGAAmG;oBACxG,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;iBACpB,CAAC;aACH,CAAC;QAEJ,KAAK,qBAAqB;YACxB,OAAO;gBACL,aAAa,CAAC,aAAa,CAAC,iBAAiB,EAAE,MAAM,EAAE;oBACrD,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,uBAAuB;oBAC5C,GAAG,EACD,sFAAsF;wBACtF,wFAAwF;wBACxF,WAAW;oBACb,GAAG,EAAE,wGAAwG;oBAC7G,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;iBACpB,CAAC;aACH,CAAC;QAEJ,KAAK,gBAAgB;YACnB,OAAO;gBACL,aAAa,CAAC,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE;oBACjD,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,0CAA0C,GAAG,CAAC,MAAM,IAAI;oBACzE,GAAG,EACD,mFAAmF;wBACnF,yFAAyF;wBACzF,6BAA6B;oBAC/B,GAAG,EAAE,UAAU,GAAG,CAAC,IAAI,uEAAuE;oBAC9F,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;iBACpB,CAAC;aACH,CAAC;QAEJ,KAAK,gBAAgB;YACnB,OAAO;gBACL,aAAa,CAAC,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE;oBAChD,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,cAAc,GAAG,CAAC,MAAM,IAAI;oBAC7C,GAAG,EACD,qFAAqF;wBACrF,uFAAuF;wBACvF,2BAA2B;oBAC7B,GAAG,EAAE,kEAAkE;oBACvE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC;iBAC9B,CAAC;aACH,CAAC;QAEJ;YACE,4FAA4F;YAC5F,uFAAuF;YACvF,OAAO;gBACL,aAAa,CAAC,aAAa,CAAC,YAAY,EAAE,aAAa,EAAE;oBACvD,IAAI,EAAE,4DAA4D,GAAG,CAAC,IAAI,EAAE;oBAC5E,GAAG,EAAE,uEAAuE;oBAC5E,GAAG,EAAE,2DAA2D;oBAChE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAyC,EAAE;iBAC7D,CAAC;aACH,CAAC;IACN,CAAC;AACH,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAsB,EACtB,UAAmE,EAAE;IAErE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IACtD,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,uBAAuB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEpE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,kBAAkB,EAAE,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAE3F,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAA8E,CAAC,IAAI,EAAE,EAAE;QAClH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE;YAChC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE;YAC/C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,CAA8E,EAAE,EAAE;YAChG,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC,CAAC;QACF,+FAA+F;QAC/F,8FAA8F;QAC9F,6FAA6F;QAC7F,2CAA2C;QAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC,EAAE,QAAQ,CAAC,CAAC;QACb,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,OAAO;YACL;gBACE,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,QAAQ;gBACf,KAAK,EAAE,OAAO;gBACd,QAAQ,EAAE,aAAa;gBACvB,IAAI,EAAE,oBAAoB,OAAO,CAAC,IAAI,2BAA2B,QAAQ,GAAG,IAAI,GAAG;gBACnF,GAAG,EAAE,0LAA0L;gBAC/L,GAAG,EAAE,qFAAqF;gBAC1F,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE;aAC/E;SACF,CAAC;IACJ,CAAC;IAED,IAAI,MAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAc,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,+FAA+F;QAC/F,gGAAgG;QAChG,OAAO;YACL;gBACE,IAAI,EAAE,aAAa,CAAC,mBAAmB;gBACvC,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,QAAQ;gBACf,KAAK,EAAE,KAAK;gBACZ,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,yDAAyD,OAAO,CAAC,IAAI,GAAG;gBAC9E,GAAG,EAAE,4GAA4G;gBACjH,GAAG,EAAE,YAAY,MAAM,iFAAiF;gBACxG,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE;aACrE;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO;YACL,aAAa,CAAC,aAAa,CAAC,YAAY,EAAE,aAAa,EAAE;gBACvD,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,uCAAuC;gBAC7D,GAAG,EAAE,yDAAyD;gBAC9D,GAAG,EAAE,cAAc,OAAO,CAAC,IAAI,0BAA0B;aAC1D,CAAC;SACH,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,OAA2B;IACvE,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AACpC,CAAC"}

package/dist/validate/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * `senpi validate` — proving a strategy can actually run, before it is funded.
+ *
+ * This layer is the vocabulary: the finding shape every check speaks, the closed set of codes, and
+ * the accounting that keeps the two honest. Checks themselves live in sibling modules.
+ */
+export type { Actor, Depth, Finding, FindingLocation, FixKind, Severity, ValidationStage, } from "./types.js";
+export { DEPTH_ORDER, depthsUpTo } from "./types.js";
+export { resolveTarget, type ResolvedTarget, type TargetInput, type TargetKind, type TargetResolution, } from "./target.js";
+export { ALL_VALIDATE_CODES, VALIDATE_CODE, VALIDATE_CODE_META, codesForStage, severityOf, type ValidateCode, type ValidateCodeMeta, } from "./codes.js";
+export { findUncoveredCodes, findUnknownCodes, type CoverageOptions } from "./coverage.js";
+export { findLlmActionsWithoutModel, findMarginPctFraction, findMissingEntrypoints, findUngatedStrategy, findUnsizedStrategy, } from "./recipe-checks.js";
+export { collectRecipeFindings, type RecipeSource, type RecipeValidation, } from "./recipe.js";
+export { isImplemented, runValidation, type ExitCode, type ValidateOptions, type ValidateResult, type Verdict, type VerdictBasis, } from "./run.js";
+export { renderFinding, renderHuman, renderJson } from "./report.js";
+/**
+ * What the runtime refuses to install. Wired into `senpi.installRuntime`; the boot loop
+ * deliberately does NOT use it — see the module header for why.
+ */
+export { INSTALL_BLOCKING_CODES, checkInstallGate, type InstallGateResult } from "./install-gate.js";
+/**
+ * The deploy verb's half of the gate. `verifyProof(packageDir)` answers "is this package's
+ * content the content that passed?" — pure observation, never throws, and every refusal carries
+ * a finding whose fix is the same one command. Enforcement belongs to the caller.
+ */
+export { PROOF_FILENAME, fingerprintPackage, verifyProof, writeProof, type ProofRecord, type ScannerObservation, type VerifyOptions, type VerifyReason, type VerifyResult, } from "./proof.js";
+export { checkScanner, resolveRoot, scaffoldPackageDir, toFindings, type ScannerTarget, } from "./import-stage.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/validate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/validate/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EACV,KAAK,EACL,KAAK,EACL,OAAO,EACP,eAAe,EACf,OAAO,EACP,QAAQ,EACR,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,EACL,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,KAAK,YAAY,EACjB,KAAK,gBAAgB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAE3F,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,aAAa,EACb,aAAa,EACb,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,OAAO,EACZ,KAAK,YAAY,GAClB,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErE;;;GAGG;AACH,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAErG;;;;GAIG;AACH,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,UAAU,EACV,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,YAAY,GAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,UAAU,EACV,KAAK,aAAa,GACnB,MAAM,mBAAmB,CAAC"}

package/dist/validate/index.js

@@ -0,0 +1,27 @@
+/**
+ * `senpi validate` — proving a strategy can actually run, before it is funded.
+ *
+ * This layer is the vocabulary: the finding shape every check speaks, the closed set of codes, and
+ * the accounting that keeps the two honest. Checks themselves live in sibling modules.
+ */
+export { DEPTH_ORDER, depthsUpTo } from "./types.js";
+export { resolveTarget, } from "./target.js";
+export { ALL_VALIDATE_CODES, VALIDATE_CODE, VALIDATE_CODE_META, codesForStage, severityOf, } from "./codes.js";
+export { findUncoveredCodes, findUnknownCodes } from "./coverage.js";
+export { findLlmActionsWithoutModel, findMarginPctFraction, findMissingEntrypoints, findUngatedStrategy, findUnsizedStrategy, } from "./recipe-checks.js";
+export { collectRecipeFindings, } from "./recipe.js";
+export { isImplemented, runValidation, } from "./run.js";
+export { renderFinding, renderHuman, renderJson } from "./report.js";
+/**
+ * What the runtime refuses to install. Wired into `senpi.installRuntime`; the boot loop
+ * deliberately does NOT use it — see the module header for why.
+ */
+export { INSTALL_BLOCKING_CODES, checkInstallGate } from "./install-gate.js";
+/**
+ * The deploy verb's half of the gate. `verifyProof(packageDir)` answers "is this package's
+ * content the content that passed?" — pure observation, never throws, and every refusal carries
+ * a finding whose fix is the same one command. Enforcement belongs to the caller.
+ */
+export { PROOF_FILENAME, fingerprintPackage, verifyProof, writeProof, } from "./proof.js";
+export { checkScanner, resolveRoot, scaffoldPackageDir, toFindings, } from "./import-stage.js";
+//# sourceMappingURL=index.js.map

package/dist/validate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/validate/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,EACL,aAAa,GAKd,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,UAAU,GAGX,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAwB,MAAM,eAAe,CAAC;AAE3F,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,qBAAqB,GAGtB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,aAAa,EACb,aAAa,GAMd,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErE;;;GAGG;AACH,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAA0B,MAAM,mBAAmB,CAAC;AAErG;;;;GAIG;AACH,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,UAAU,GAMX,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,UAAU,GAEX,MAAM,mBAAmB,CAAC"}

package/dist/validate/install-gate.d.ts

@@ -0,0 +1,44 @@
+/**
+ * What the runtime refuses to install.
+ *
+ * `senpi validate` reports these same problems, but reporting is advisory: nothing stops an
+ * operator installing a recipe validate would refuse. This closes that from the other side — at
+ * the one boundary where refusing is free of consequence.
+ *
+ * ## Why install and not boot
+ *
+ * Refusing an install affects only the thing being installed: the gateway answers an error and
+ * everything already running is untouched. The boot loop is not like that — it starts runtimes in
+ * a single `try` whose `catch` stops every runtime already started, so a throw there takes the box
+ * down. A boot-time refusal would convert "one bad recipe trades" into "one bad recipe stops every
+ * other strategy", which is strictly worse than the problem. Boot-side enforcement waits for the
+ * per-entry degrade the supervised-scanner mount already uses.
+ *
+ * ## What it refuses, and what it deliberately does not
+ *
+ * Only conditions that make the recipe **inert or unsafe on every tick**, never a matter of taste:
+ * an entry action with no reachable margin source declines every signal it ever sees; one with no
+ * guardrails trades with no daily-loss or drawdown ceiling; a declared scanner file that does not
+ * exist can never start. Warnings stay warnings — this gate is not `--strict`, because an install
+ * refusal an operator disagrees with is how a safety check gets routed around.
+ *
+ * Measured before it was enforced: none of the 124 deployed instances trips any of these.
+ */
+import type { Finding } from "./types.js";
+export interface InstallGateResult {
+    ok: boolean;
+    /** The findings that blocked, in report order. Empty when `ok`. */
+    blocking: Finding[];
+    /** Ready to hand to the gateway's error responder. Present exactly when blocked. */
+    message?: string;
+}
+/**
+ * Decide whether a parsed recipe may be installed.
+ *
+ * Takes findings rather than a config so the caller owns how they were produced, and so this stays
+ * a pure decision over data — the same findings the CLI would print.
+ */
+export declare function checkInstallGate(findings: Finding[]): InstallGateResult;
+/** The codes this gate blocks on. Exported so a test can assert the list, not infer it. */
+export declare const INSTALL_BLOCKING_CODES: readonly string[];
+//# sourceMappingURL=install-gate.d.ts.map

package/dist/validate/install-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-gate.d.ts","sourceRoot":"","sources":["../../src/validate/install-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAgB1C,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,mEAAmE;IACnE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,oFAAoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAgBD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAKvE;AAED,2FAA2F;AAC3F,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAAkB,CAAC"}

package/dist/validate/install-gate.js

@@ -0,0 +1,66 @@
+/**
+ * What the runtime refuses to install.
+ *
+ * `senpi validate` reports these same problems, but reporting is advisory: nothing stops an
+ * operator installing a recipe validate would refuse. This closes that from the other side — at
+ * the one boundary where refusing is free of consequence.
+ *
+ * ## Why install and not boot
+ *
+ * Refusing an install affects only the thing being installed: the gateway answers an error and
+ * everything already running is untouched. The boot loop is not like that — it starts runtimes in
+ * a single `try` whose `catch` stops every runtime already started, so a throw there takes the box
+ * down. A boot-time refusal would convert "one bad recipe trades" into "one bad recipe stops every
+ * other strategy", which is strictly worse than the problem. Boot-side enforcement waits for the
+ * per-entry degrade the supervised-scanner mount already uses.
+ *
+ * ## What it refuses, and what it deliberately does not
+ *
+ * Only conditions that make the recipe **inert or unsafe on every tick**, never a matter of taste:
+ * an entry action with no reachable margin source declines every signal it ever sees; one with no
+ * guardrails trades with no daily-loss or drawdown ceiling; a declared scanner file that does not
+ * exist can never start. Warnings stay warnings — this gate is not `--strict`, because an install
+ * refusal an operator disagrees with is how a safety check gets routed around.
+ *
+ * Measured before it was enforced: none of the 124 deployed instances trips any of these.
+ */
+import { VALIDATE_CODE } from "./codes.js";
+/**
+ * The conditions that block an install.
+ *
+ * A closed list rather than "any error-severity finding": the static depth also reports things
+ * that are wrong but not dangerous, and an install gate that grows silently as checks are added
+ * is one that will one day refuse something nobody intended it to.
+ */
+const BLOCKING = new Set([
+    VALIDATE_CODE.unsized,
+    VALIDATE_CODE.ungated,
+    VALIDATE_CODE.entrypointMissing,
+    VALIDATE_CODE.unresolvableScannerPath,
+]);
+/**
+ * Render a refusal the recipient can act on without seeing this code.
+ *
+ * The gateway's error string is often the only thing an operator or agent ever reads, so it
+ * carries the same what/why/fix the findings do rather than a count and a pointer to logs.
+ */
+function render(blocking) {
+    const lines = blocking.map((f) => `  • ${f.what}\n    why: ${f.why}\n    fix: ${f.fix}`);
+    return (`This recipe cannot be installed — it would not trade.\n\n${lines.join("\n\n")}\n\n` +
+        `Run \`senpi validate\` on the package for the full report.`);
+}
+/**
+ * Decide whether a parsed recipe may be installed.
+ *
+ * Takes findings rather than a config so the caller owns how they were produced, and so this stays
+ * a pure decision over data — the same findings the CLI would print.
+ */
+export function checkInstallGate(findings) {
+    const blocking = findings.filter((f) => BLOCKING.has(f.code) && f.severity === "error");
+    return blocking.length === 0
+        ? { ok: true, blocking: [] }
+        : { ok: false, blocking, message: render(blocking) };
+}
+/** The codes this gate blocks on. Exported so a test can assert the list, not infer it. */
+export const INSTALL_BLOCKING_CODES = [...BLOCKING];
+//# sourceMappingURL=install-gate.js.map

package/dist/validate/install-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-gate.js","sourceRoot":"","sources":["../../src/validate/install-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG3C;;;;;;GAMG;AACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS;IAC/B,aAAa,CAAC,OAAO;IACrB,aAAa,CAAC,OAAO;IACrB,aAAa,CAAC,iBAAiB;IAC/B,aAAa,CAAC,uBAAuB;CACtC,CAAC,CAAC;AAUH;;;;;GAKG;AACH,SAAS,MAAM,CAAC,QAAmB;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACzF,OAAO,CACL,4DAA4D,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;QACpF,4DAA4D,CAC7D,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAmB;IAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACxF,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC5B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,MAAM,sBAAsB,GAAsB,CAAC,GAAG,QAAQ,CAAC,CAAC"}

package/dist/validate/live-stage.d.ts

@@ -0,0 +1,134 @@
+/**
+ * The live depth: run one tick against real data, and say what it established.
+ *
+ * The harness is in Python, beside the loop production uses. This side builds its launch
+ * configuration, runs it, and judges the outcome.
+ *
+ * ## The judgement that matters
+ *
+ * A tick returning nothing is ambiguous. It could be a healthy scanner with no setups, or one that
+ * stopped before touching anything, or one whose every read failed. Those look identical from the
+ * outside and mean completely different things, so the verdict keys on **successful reads** rather
+ * than on the tick completing.
+ *
+ * A read that failed is not a read. Observed in practice: an authentication failure arrives as an
+ * ordinary response carrying a false flag, raising nothing, so a scanner's own error handling never
+ * fires and it computes a confidently wrong answer from missing input. Counting that as a read
+ * would report the run clean.
+ */
+import { type ScannerTarget } from "./import-stage.js";
+import { type SignalRecord } from "./signal-stage.js";
+import type { Finding, FindingLocation } from "./types.js";
+import type { ResolvedWallet } from "./wallet.js";
+/** One recorded call, as the harness reports it. */
+export interface ReadRecord {
+    tool: string;
+    ms: number;
+    ok: boolean;
+    error?: string;
+    error_type?: string;
+    response_keys?: string[];
+    cast_dropped?: boolean;
+    /** The call would have changed state and was refused rather than made. */
+    blocked?: boolean;
+    /** The response came back and the scanner never looked inside it. */
+    unread?: boolean;
+}
+export interface TickOutcome {
+    ok: boolean;
+    reason?: string;
+    detail?: string;
+    status?: "ok" | "error" | "timeout";
+    failure?: {
+        type: string;
+        message: string;
+        where?: {
+            file: string;
+            line: number;
+        } | null;
+    } | null;
+    reads?: ReadRecord[];
+    reads_ok?: number;
+    reads_failed?: number;
+    signals?: SignalRecord[];
+    suppressed?: {
+        file: string;
+        line: number;
+        type: string;
+        message: string;
+    }[];
+    last_return?: {
+        file: string;
+        line: number;
+        function: string;
+    } | null;
+    stdout?: string;
+    stderr?: string;
+}
+export interface LiveOptions {
+    scanner: ScannerTarget;
+    wallet: ResolvedWallet;
+    /** Per-scanner budget. Defaults to what the recipe declares — never to the cadence. */
+    timeoutSeconds: number;
+    intervalSeconds: number;
+    defaultSignalValiditySeconds: number;
+    inputs?: Record<string, unknown>;
+    signalDataSchema?: Record<string, unknown>;
+    stateHistoryMaxCount?: number;
+    pythonBin?: string;
+}
+/**
+ * Group failed reads by the service they belong to.
+ *
+ * One failed call among many is noise; every call to one service failing means a whole input is
+ * missing and the scanner scored without it. The tool-name prefix is the service, which is enough
+ * to tell those apart without knowing anything about the catalogue.
+ */
+export declare function groupFailuresByService(reads: ReadRecord[]): Map<string, ReadRecord[]>;
+/** What an earlier depth found that changes how this one reads its own result. */
+export interface TickContext {
+    /**
+     * Places the import depth saw a data route the runtime cannot observe.
+     *
+     * Carried here because a tick that read nothing through the client, in a scanner that imports
+     * `requests`, is a different situation from one that stopped early — and pointing the second
+     * diagnosis at the first sends someone hunting a gate that does not exist.
+     */
+    nonMcpSources?: FindingLocation[];
+    /**
+     * What this run allowed a tick, and what production would allow it.
+     *
+     * They are not the same number. Validate caps at its own default so a six-hour-cadence scanner
+     * does not make the command hang for six hours; production, when the recipe declares no
+     * `timeout_seconds`, falls back to the interval (`scaffold.py`: `timeout_seconds = interval`).
+     * Carried here because a timeout finding that says "this would time out in production too" is
+     * simply false in that case, and a validator that states something untrue about production has
+     * failed at the one job it has.
+     */
+    budget?: TickBudget;
+}
+export interface TickBudget {
+    /** The budget this run enforced. */
+    validateSeconds: number;
+    /** The budget production would enforce for the same scanner. */
+    productionSeconds: number;
+    /** Whether the recipe declared `timeout_seconds`. When it did, the two agree. */
+    declared: boolean;
+}
+/**
+ * Production's tick budget for a scanner, mirroring the scaffold's own fallback.
+ *
+ * Kept beside the judgement that reports it, with the source named, because the whole point is
+ * that this number is production's and not ours.
+ */
+export declare function productionBudgetSeconds(declaredTimeout: number | undefined, intervalSeconds: number): number;
+/**
+ * Turn one tick into findings.
+ *
+ * Exported separately from running it so the judgement can be tested against recorded outcomes
+ * without spawning anything or needing credentials.
+ */
+export declare function judgeTick(scanner: ScannerTarget, outcome: TickOutcome, context?: TickContext): Finding[];
+/** Run one tick for one scanner. */
+export declare function runTick(options: LiveOptions): Promise<TickOutcome>;
+//# sourceMappingURL=live-stage.d.ts.map

package/dist/validate/live-stage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-stage.d.ts","sourceRoot":"","sources":["../../src/validate/live-stage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAaH,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAW,MAAM,YAAY,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,oDAAoD;AACpD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qEAAqE;IACrE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,IAAI,GAAG,OAAO,GAAG,SAAS,CAAC;IACpC,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAClG,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7E,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,cAAc,CAAC;IACvB,uFAAuF;IACvF,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,4BAA4B,EAAE,MAAM,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAaD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAQrF;AAkBD,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,eAAe,EAAE,CAAC;IAClC;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,gEAAgE;IAChE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,eAAe,EAAE,MAAM,GACtB,MAAM,CAER;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CACvB,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,WAAW,EACpB,OAAO,GAAE,WAAgB,GACxB,OAAO,EAAE,CAmQX;AAyFD,oCAAoC;AACpC,wBAAsB,OAAO,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAmGxE"}