@senpi/runtime 3.0.59 → 3.0.63

package/dist/runtime/managed-wallet-guard.d.ts

@@ -1,47 +0,0 @@
-/**
- * Managed-wallet hard block: a `before_tool_call` hook that vetoes agent-issued
- * `create_position` calls targeting a wallet an installed trading runtime
- * manages — the runtime's DSL treats a manually-opened position as foreign and
- * flattens it.
- *
- * The runtime's own trading is direct HTTP from the plugin and never enters the
- * agent tool loop, so this hook cannot affect autonomous execution.
- */
-import type { Logger } from "../utils/logger.js";
-export interface ManagedWalletGuardOptions {
-    /**
-     * Resolve the state dir holding `installed_runtimes.json` — must be the
-     * plugin's resolved base dir (the one the runtime CRUD path writes), not the
-     * raw openclaw stateDir.
-     */
-    resolveStateDir: () => string;
-    /**
-     * Wallets currently managed by live runtime handles, whose wallet is parsed
-     * from the YAML at start. Covers registry entries with a missing wallet
-     * (pre-2026-03-26 installs migrate without one) or a stale wallet (on-disk
-     * YAML edited after a path-based install).
-     */
-    getLiveWallets?: () => Iterable<{
-        id: string;
-        wallet: string;
-    }>;
-    logger: Logger;
-}
-/** Veto shape understood by OpenClaw's before_tool_call dispatcher. */
-export interface ManagedWalletGuardBlock {
-    block: true;
-    blockReason: string;
-}
-export type ManagedWalletGuardHandler = (event: unknown) => Promise<ManagedWalletGuardBlock | undefined>;
-/**
- * Reduce a tool name to the fragment after its last `__` (bare names pass
- * through). Exported so sibling hooks (e.g. the protection gate/nudge) match
- * the bare and MCP-prefixed forms identically instead of re-deriving it.
- */
-export declare function baseToolName(name: string): string;
-/**
- * Build the `before_tool_call` handler. The hook fires on EVERY tool call, so
- * the non-gated fast path is a string check only — no file I/O.
- */
-export declare function createManagedWalletGuard(options: ManagedWalletGuardOptions): ManagedWalletGuardHandler;
-//# sourceMappingURL=managed-wallet-guard.d.ts.map

package/dist/runtime/managed-wallet-guard.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"managed-wallet-guard.d.ts","sourceRoot":"","sources":["../../src/runtime/managed-wallet-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAYjD,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,eAAe,EAAE,MAAM,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChE,MAAM,EAAE,MAAM,CAAC;CAChB;AAWD,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,IAAI,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,yBAAyB,GAAG,CACtC,KAAK,EAAE,OAAO,KACX,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;AAElD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGjD;AAsBD;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,yBAAyB,GACjC,yBAAyB,CAgE3B"}

package/dist/runtime/managed-wallet-guard.js

@@ -1,106 +0,0 @@
-/**
- * Managed-wallet hard block: a `before_tool_call` hook that vetoes agent-issued
- * `create_position` calls targeting a wallet an installed trading runtime
- * manages — the runtime's DSL treats a manually-opened position as foreign and
- * flattens it.
- *
- * The runtime's own trading is direct HTTP from the plugin and never enters the
- * agent tool loop, so this hook cannot affect autonomous execution.
- */
-import { readRegistry } from "./strategy-registry.js";
-/**
- * Matched by base name (the fragment after the last `__`) so both the bare and
- * MCP-prefixed (`<server>__create_position`) forms are covered.
- */
-const GATED_TOOLS = new Set(["create_position"]);
-/** The MCP tool-name namespace separator OpenClaw stamps: `<server>__<tool>`. */
-const TOOL_NAME_SEPARATOR = "__";
-/**
- * Reduce a tool name to the fragment after its last `__` (bare names pass
- * through). Exported so sibling hooks (e.g. the protection gate/nudge) match
- * the bare and MCP-prefixed forms identically instead of re-deriving it.
- */
-export function baseToolName(name) {
-    const idx = name.lastIndexOf(TOOL_NAME_SEPARATOR);
-    return idx >= 0 ? name.slice(idx + TOOL_NAME_SEPARATOR.length) : name;
-}
-/** True when the (lowercased) tool name is one of the gated position tools. */
-function isGatedTool(toolName) {
-    const lower = toolName.toLowerCase();
-    return GATED_TOOLS.has(lower) || GATED_TOOLS.has(baseToolName(lower));
-}
-function buildBlockReason(wallet, runtimeId) {
-    return [
-        `Blocked ${wallet}: this wallet is managed by an installed trading runtime (${runtimeId}); ` +
-            `its DSL will treat a manually-opened position as foreign and flatten it — the trade is ` +
-            `doomed and will lose the round-trip.`,
-        `Do NOT retry this order into this wallet.`,
-        `Instead: open one-off positions in a wallet with NO installed runtime — use an existing ` +
-            `runtime-free strategy wallet, or create one with strategy_create_custom_strategy ` +
-            `(positions may be empty) and fund it with strategy_top_up. Flat SL/TP and ` +
-            `ratchet_stop_add trailing protection work there.`,
-        `To trade under this strategy, edit and redeploy its runtime.`,
-    ].join(" ");
-}
-/**
- * Build the `before_tool_call` handler. The hook fires on EVERY tool call, so
- * the non-gated fast path is a string check only — no file I/O.
- */
-export function createManagedWalletGuard(options) {
-    const { resolveStateDir, getLiveWallets, logger } = options;
-    return async (event) => {
-        const ev = (event ?? {});
-        const toolName = typeof ev.toolName === "string" ? ev.toolName : "";
-        if (!toolName || !isGatedTool(toolName)) {
-            return undefined;
-        }
-        const params = ev.params;
-        const wallet = params && typeof params === "object"
-            ? params.strategyWalletAddress
-            : undefined;
-        // Absent/non-string wallet: allow through — the MCP server's schema owns that error.
-        if (typeof wallet !== "string" || wallet.length === 0) {
-            return undefined;
-        }
-        const normalizedWallet = wallet.toLowerCase();
-        let match;
-        try {
-            // Live handles first: no file I/O, and their wallet comes from the parsed
-            // YAML, so they catch runtimes the registry's wallet field misses.
-            if (getLiveWallets) {
-                for (const live of getLiveWallets()) {
-                    if (live.wallet && live.wallet.toLowerCase() === normalizedWallet) {
-                        match = live;
-                        break;
-                    }
-                }
-            }
-            if (!match) {
-                const registry = await readRegistry(resolveStateDir());
-                // Block on ANY registered runtime for this wallet, running or stopped:
-                // a stopped runtime still owns the wallet's DSL config and can resume.
-                match = registry.runtimes.find((entry) => typeof entry.wallet === "string" && entry.wallet.toLowerCase() === normalizedWallet);
-            }
-        }
-        catch (err) {
-            // Fail open: a lookup failure must not block a legitimate trade. (A
-            // throw from this handler would fail closed — the host blocks on hook
-            // errors — so everything after the fast path stays inside this try.)
-            logger.warn("[managed-wallet-guard] managed-wallet lookup failed; allowing tool call", err, {
-                toolName,
-                wallet: normalizedWallet,
-            });
-            return undefined;
-        }
-        if (!match) {
-            return undefined;
-        }
-        logger.warn("[managed-wallet-guard] blocked position tool on runtime-managed wallet", {
-            toolName,
-            wallet: normalizedWallet,
-            runtimeId: match.id,
-        });
-        return { block: true, blockReason: buildBlockReason(wallet, match.id) };
-    };
-}
-//# sourceMappingURL=managed-wallet-guard.js.map

package/dist/runtime/managed-wallet-guard.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"managed-wallet-guard.js","sourceRoot":"","sources":["../../src/runtime/managed-wallet-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD;;;GAGG;AACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAEjD,iFAAiF;AACjF,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAsCjC;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAClD,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,SAAiB;IACzD,OAAO;QACL,WAAW,MAAM,6DAA6D,SAAS,KAAK;YAC1F,yFAAyF;YACzF,sCAAsC;QACxC,2CAA2C;QAC3C,0FAA0F;YACxF,mFAAmF;YACnF,4EAA4E;YAC5E,kDAAkD;QACpD,8DAA8D;KAC/D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAkC;IAElC,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAE5D,OAAO,KAAK,EAAE,KAAc,EAAgD,EAAE;QAC5E,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAwB,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC;QACzB,MAAM,MAAM,GACV,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAClC,CAAC,CAAE,MAAkC,CAAC,qBAAqB;YAC3D,CAAC,CAAC,SAAS,CAAC;QAChB,qFAAqF;QACrF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAE9C,IAAI,KAAiC,CAAC;QACtC,IAAI,CAAC;YACH,0EAA0E;YAC1E,mEAAmE;YACnE,IAAI,cAAc,EAAE,CAAC;gBACnB,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,EAAE,CAAC;oBACpC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,gBAAgB,EAAE,CAAC;wBAClE,KAAK,GAAG,IAAI,CAAC;wBACb,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,eAAe,EAAE,CAAC,CAAC;gBACvD,uEAAuE;gBACvE,uEAAuE;gBACvE,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAC5B,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,gBAAgB,CACtF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,sEAAsE;YACtE,qEAAqE;YACrE,MAAM,CAAC,IAAI,CAAC,yEAAyE,EAAE,GAAG,EAAE;gBAC1F,QAAQ;gBACR,MAAM,EAAE,gBAAgB;aACzB,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,wEAAwE,EAAE;YACpF,QAAQ;YACR,MAAM,EAAE,gBAAgB;YACxB,SAAS,EAAE,KAAK,CAAC,EAAE;SACpB,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IAC1E,CAAC,CAAC;AACJ,CAAC"}

package/dist/runtime/protection-nudge.d.ts

@@ -1,67 +0,0 @@
-/**
- * Manual-trade protection: a `before_tool_call` gate plus a
- * `tool_result_persist` nudge for agent-issued position tools on non-runtime
- * (manual) wallets — the only wallets where `create_position` succeeds, since
- * runtime-managed wallets are vetoed upstream by the managed-wallet guard.
- *
- * Gate (veto-until-protected): a manual `create_position` must carry a stop
- * loss on every order, or an explicit top-level `protection: "none"` marker
- * showing the agent means it. `edit_position` is gated narrowly — only an
- * explicit stop-loss cancel is blocked, because the hook cannot see current
- * server-side state and must not demand a stop on every edit.
- *
- * Nudge: after a successful `create_position`, a message is appended to the
- * tool result telling the agent what protection the order carries, to attach
- * `ratchet_stop_add` (server-side trailing protection that takes over driving
- * the stop) unless the user opted out, and to report active protection to the
- * user and offer to adjust it.
- *
- * The `protection` marker is stripped harmlessly by the MCP server's zod schema
- * (plain `z.object`, no `.strict()`/`.passthrough()`), so it is visible to this
- * hook but never reaches execution.
- */
-import type { Logger } from "../utils/logger.js";
-/**
- * Correlates the gate and the nudge across the two hook events. The
- * `tool_result_persist` event carries tool identity (toolName/toolCallId) and
- * the result, but NOT the call params — so the gate (which sees params) stashes
- * the computed protection summary keyed by toolCallId and the nudge reads it
- * back. Bounded: a `create_position` the gate allowed but whose result is never
- * persisted (an aborted turn) would otherwise leak an entry forever.
- */
-export interface ProtectionSummaryCapture {
-    record(toolCallId: string, summary: string): void;
-    take(toolCallId: string): string | undefined;
-}
-export declare function createProtectionSummaryCapture(maxEntries?: number): ProtectionSummaryCapture;
-export interface ProtectionGateOptions {
-    logger: Logger;
-    capture?: ProtectionSummaryCapture;
-}
-export interface ProtectionNudgeOptions {
-    logger: Logger;
-    capture?: ProtectionSummaryCapture;
-}
-/** Veto shape understood by OpenClaw's before_tool_call dispatcher. */
-export interface ProtectionGateBlock {
-    block: true;
-    blockReason: string;
-}
-/** Result shape understood by OpenClaw's tool_result_persist dispatcher. */
-export interface ProtectionNudgeResult {
-    message: Record<string, unknown>;
-}
-export type ProtectionGateHandler = (event: unknown) => Promise<ProtectionGateBlock | undefined>;
-export type ProtectionNudgeHandler = (event: unknown) => ProtectionNudgeResult | undefined;
-/**
- * Build the `before_tool_call` gate. The hook fires on EVERY tool call, so the
- * non-gated fast path is a string check only.
- */
-export declare function createProtectionGate(options: ProtectionGateOptions): ProtectionGateHandler;
-/**
- * Build the `tool_result_persist` nudge. Synchronous by contract — the host
- * runs this on the transcript-append hot path and warns-and-ignores any handler
- * that returns a Promise.
- */
-export declare function createProtectionNudge(options: ProtectionNudgeOptions): ProtectionNudgeHandler;
-//# sourceMappingURL=protection-nudge.d.ts.map

package/dist/runtime/protection-nudge.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"protection-nudge.d.ts","sourceRoot":"","sources":["../../src/runtime/protection-nudge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAQjD;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAClD,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED,wBAAgB,8BAA8B,CAAC,UAAU,SAAM,GAAG,wBAAwB,CAiBzF;AAUD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,wBAAwB,CAAC;CACpC;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,wBAAwB,CAAC;CACpC;AAED,uEAAuE;AACvE,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,IAAI,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,qBAAqB,GAAG,CAClC,KAAK,EAAE,OAAO,KACX,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;AAE9C,MAAM,MAAM,sBAAsB,GAAG,CACnC,KAAK,EAAE,OAAO,KACX,qBAAqB,GAAG,SAAS,CAAC;AAwGvC;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,qBAAqB,CAoE1F;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,sBAAsB,CAwC7F"}

package/dist/runtime/protection-nudge.js

@@ -1,244 +0,0 @@
-/**
- * Manual-trade protection: a `before_tool_call` gate plus a
- * `tool_result_persist` nudge for agent-issued position tools on non-runtime
- * (manual) wallets — the only wallets where `create_position` succeeds, since
- * runtime-managed wallets are vetoed upstream by the managed-wallet guard.
- *
- * Gate (veto-until-protected): a manual `create_position` must carry a stop
- * loss on every order, or an explicit top-level `protection: "none"` marker
- * showing the agent means it. `edit_position` is gated narrowly — only an
- * explicit stop-loss cancel is blocked, because the hook cannot see current
- * server-side state and must not demand a stop on every edit.
- *
- * Nudge: after a successful `create_position`, a message is appended to the
- * tool result telling the agent what protection the order carries, to attach
- * `ratchet_stop_add` (server-side trailing protection that takes over driving
- * the stop) unless the user opted out, and to report active protection to the
- * user and offer to adjust it.
- *
- * The `protection` marker is stripped harmlessly by the MCP server's zod schema
- * (plain `z.object`, no `.strict()`/`.passthrough()`), so it is visible to this
- * hook but never reaches execution.
- */
-import { baseToolName } from "./managed-wallet-guard.js";
-/** Base tool name whose orders must be protected (or explicitly opted out). */
-const CREATE_POSITION = "create_position";
-/** Base tool name gated only against an explicit stop-loss cancel. */
-const EDIT_POSITION = "edit_position";
-export function createProtectionSummaryCapture(maxEntries = 256) {
-    const store = new Map();
-    return {
-        record(toolCallId, summary) {
-            if (store.size >= maxEntries) {
-                // Map preserves insertion order — evicting the first key drops the oldest.
-                const oldest = store.keys().next().value;
-                if (oldest !== undefined)
-                    store.delete(oldest);
-            }
-            store.set(toolCallId, summary);
-        },
-        take(toolCallId) {
-            const summary = store.get(toolCallId);
-            if (summary !== undefined)
-                store.delete(toolCallId);
-            return summary;
-        },
-    };
-}
-/**
- * Default shared capture, used when a factory is called with `{ logger }` only.
- * Lets the gate and nudge correlate without the caller threading a capture, but
- * the plugin registration passes one explicit instance to both (and tests pass
- * their own) so the coupling is visible rather than global.
- */
-const sharedCapture = createProtectionSummaryCapture();
-function asObject(value) {
-    return value && typeof value === "object" && !Array.isArray(value)
-        ? value
-        : undefined;
-}
-/** True when the base tool name (after the last `__`) equals `expected`. */
-function isTool(toolName, expected) {
-    return typeof toolName === "string" && baseToolName(toolName.toLowerCase()) === expected;
-}
-/**
- * True when a stop-loss value is zero — numeric `0` or a string that parses to
- * it (`"0"`, `"0.0"`). Zero is the cancel sentinel (see the `edit_position`
- * gate), not real protection, so both gates read it as "no stop" via this one
- * helper. An empty/absent value is not zero.
- */
-function isZeroStop(value) {
-    if (value == null)
-        return false;
-    if (typeof value === "number")
-        return value === 0;
-    if (typeof value === "string")
-        return value.trim() !== "" && Number(value) === 0;
-    return false;
-}
-/**
- * An exit object counts as a real stop loss when it carries a non-zero
- * `percentage` or `price`. A zero value is the cancel sentinel (`isZeroStop`),
- * not protection — so a `create_position` with `stopLoss: { percentage: 0 }` or
- * `{ price: 0 }` is rejected, matching how the `edit_position` gate reads 0.
- */
-function hasStopLoss(order) {
-    const sl = asObject(order.stopLoss);
-    if (sl == null)
-        return false;
-    const hasPct = sl.percentage != null && !isZeroStop(sl.percentage);
-    const hasPrice = sl.price != null && !isZeroStop(sl.price);
-    return hasPct || hasPrice;
-}
-/** One order's protection, e.g. `#1 SL 5% TP 10%` or `#2 SL @42000`. */
-function summarizeOrder(order, index) {
-    const sl = describeExit("SL", asObject(order.stopLoss));
-    const tp = describeExit("TP", asObject(order.takeProfit));
-    return `#${index + 1} ${sl ?? "no SL"}${tp ? ` ${tp}` : ""}`;
-}
-function describeExit(label, exit) {
-    if (!exit)
-        return undefined;
-    if (exit.percentage != null)
-        return `${label} ${String(exit.percentage)}%`;
-    if (exit.price != null)
-        return `${label} @${String(exit.price)}`;
-    return undefined;
-}
-function buildCreateBlockReason() {
-    return [
-        `Blocked create_position: every manual order needs a flat stop loss (a "stopLoss" with either "percentage" or "price") — the safety floor from the first fill.`,
-        `Resubmit with a stopLoss on each order.`,
-        `After the fill, attach ratchet_stop_add — server-side trailing protection that takes over driving the stop loss as price moves in your favor.`,
-        `Take profit ("takeProfit") is optional.`,
-        `If the user explicitly wants no protection, resubmit the identical call with a top-level "protection": "none".`,
-    ].join(" ");
-}
-function buildEditBlockReason() {
-    return [
-        `Blocked edit_position: this edit cancels the stop loss (stopLoss.percentage: 0), leaving the position unprotected.`,
-        `Keep a stop loss, or hand the stop to ratchet_stop_add for server-side trailing protection.`,
-        `If the user explicitly wants to remove all protection, resubmit the identical call with a top-level "protection": "none".`,
-    ].join(" ");
-}
-function buildNudge(summary) {
-    return [
-        `[senpi] Manual position opened. Protection on this order: ${summary}.`,
-        `A flat stop loss is only the initial safety floor — now attach server-side trailing protection: call ratchet_stop_add for this wallet so the runtime drives the stop as price moves in your favor, unless the user has explicitly opted out of protection.`,
-        `Then tell the user exactly what protection is active on the position and offer to adjust it.`,
-    ].join(" ");
-}
-const UNPROTECTED_SUMMARY = `explicitly unprotected (protection: "none")`;
-/**
- * Build the `before_tool_call` gate. The hook fires on EVERY tool call, so the
- * non-gated fast path is a string check only.
- */
-export function createProtectionGate(options) {
-    const { logger, capture = sharedCapture } = options;
-    return async (event) => {
-        const ev = (event ?? {});
-        const gatesCreate = isTool(ev.toolName, CREATE_POSITION);
-        const gatesEdit = isTool(ev.toolName, EDIT_POSITION);
-        if (!gatesCreate && !gatesEdit) {
-            return undefined;
-        }
-        try {
-            const params = asObject(ev.params);
-            // Malformed/missing params: allow — the MCP server's schema owns that error.
-            if (!params) {
-                return undefined;
-            }
-            const optedOut = params.protection === "none";
-            const toolCallId = typeof ev.toolCallId === "string" ? ev.toolCallId : undefined;
-            if (gatesEdit) {
-                // Narrow gate: block ONLY an explicit stop-loss cancel. The hook can't
-                // see current server-side state, so an edit touching other fields (or a
-                // take-profit-only edit) must pass.
-                const sl = asObject(params.stopLoss);
-                if (sl != null && isZeroStop(sl.percentage) && !optedOut) {
-                    logger.warn("[protection-gate] blocked edit_position stop-loss cancel without protection:none", {
-                        toolName: ev.toolName,
-                    });
-                    return { block: true, blockReason: buildEditBlockReason() };
-                }
-                return undefined;
-            }
-            // create_position: require a stop loss on every order unless opted out.
-            const orders = Array.isArray(params.orders) ? params.orders.map(asObject) : undefined;
-            // Missing/empty/malformed orders: allow — the server schema owns those.
-            if (!orders || orders.length === 0 || orders.some((o) => o === undefined)) {
-                return undefined;
-            }
-            if (optedOut) {
-                if (toolCallId)
-                    capture.record(toolCallId, UNPROTECTED_SUMMARY);
-                return undefined;
-            }
-            if (orders.some((o) => !hasStopLoss(o))) {
-                logger.warn("[protection-gate] blocked create_position without a stop loss on every order", {
-                    toolName: ev.toolName,
-                });
-                return { block: true, blockReason: buildCreateBlockReason() };
-            }
-            // All orders protected: allow, and stash the per-order summary so the
-            // nudge (which never sees params) can report it after the fill.
-            if (toolCallId) {
-                capture.record(toolCallId, orders.map((o, i) => summarizeOrder(o, i)).join("; "));
-            }
-            return undefined;
-        }
-        catch (err) {
-            // Fail open: a gate error must never block a legitimate trade. (A throw
-            // would fail closed — the host blocks on hook errors.)
-            logger.warn("[protection-gate] gate check failed; allowing tool call", err, {
-                toolName: ev.toolName,
-            });
-            return undefined;
-        }
-    };
-}
-/**
- * Build the `tool_result_persist` nudge. Synchronous by contract — the host
- * runs this on the transcript-append hot path and warns-and-ignores any handler
- * that returns a Promise.
- */
-export function createProtectionNudge(options) {
-    const { logger, capture = sharedCapture } = options;
-    return (event) => {
-        try {
-            const ev = (event ?? {});
-            // A synthetic result is a host placeholder, not a real create_position fill.
-            if (ev.isSynthetic === true || !isTool(ev.toolName, CREATE_POSITION)) {
-                return undefined;
-            }
-            const message = asObject(ev.message);
-            if (!message) {
-                return undefined;
-            }
-            // Silent on failed results: no position was opened, nothing to protect.
-            if (message.isError === true) {
-                return undefined;
-            }
-            // Append a text block to the existing content; never replace it, so the
-            // real tool result reaches the model intact. If content isn't an array we
-            // can't append safely — leave the result untouched.
-            const content = message.content;
-            if (!Array.isArray(content)) {
-                return undefined;
-            }
-            const toolCallId = typeof ev.toolCallId === "string" ? ev.toolCallId : undefined;
-            const summary = (toolCallId ? capture.take(toolCallId) : undefined) ?? "see the order you just submitted";
-            return {
-                message: {
-                    ...message,
-                    content: [...content, { type: "text", text: buildNudge(summary) }],
-                },
-            };
-        }
-        catch (err) {
-            logger.warn("[protection-nudge] nudge build failed; leaving tool result unchanged", err);
-            return undefined;
-        }
-    };
-}
-//# sourceMappingURL=protection-nudge.js.map

package/dist/runtime/protection-nudge.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"protection-nudge.js","sourceRoot":"","sources":["../../src/runtime/protection-nudge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEzD,+EAA+E;AAC/E,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAC1C,sEAAsE;AACtE,MAAM,aAAa,GAAG,eAAe,CAAC;AAetC,MAAM,UAAU,8BAA8B,CAAC,UAAU,GAAG,GAAG;IAC7D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,OAAO;QACL,MAAM,CAAC,UAAU,EAAE,OAAO;YACxB,IAAI,KAAK,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC7B,2EAA2E;gBAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;gBACzC,IAAI,MAAM,KAAK,SAAS;oBAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACjD,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,UAAU;YACb,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,OAAO,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACpD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,aAAa,GAAG,8BAA8B,EAAE,CAAC;AAqDvD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,4EAA4E;AAC5E,SAAS,MAAM,CAAC,QAAiB,EAAE,QAAgB;IACjD,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,QAAQ,CAAC;AAC3F,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,KAAK,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,KAA8B;IACjD,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAC3D,OAAO,MAAM,IAAI,QAAQ,CAAC;AAC5B,CAAC;AAED,wEAAwE;AACxE,SAAS,cAAc,CAAC,KAA8B,EAAE,KAAa;IACnE,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1D,OAAO,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,IAAI,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,IAAyC;IAC5E,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI;QAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IAC3E,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI;QAAE,OAAO,GAAG,KAAK,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IACjE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,sBAAsB;IAC7B,OAAO;QACL,+JAA+J;QAC/J,yCAAyC;QACzC,+IAA+I;QAC/I,yCAAyC;QACzC,gHAAgH;KACjH,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO;QACL,oHAAoH;QACpH,6FAA6F;QAC7F,2HAA2H;KAC5H,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO;QACL,6DAA6D,OAAO,GAAG;QACvE,4PAA4P;QAC5P,8FAA8F;KAC/F,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,mBAAmB,GAAG,6CAA6C,CAAC;AAE1E;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,aAAa,EAAE,GAAG,OAAO,CAAC;IAEpD,OAAO,KAAK,EAAE,KAAc,EAA4C,EAAE;QACxE,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAwB,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;YACnC,6EAA6E;YAC7E,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,EAAE,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAEjF,IAAI,SAAS,EAAE,CAAC;gBACd,uEAAuE;gBACvE,wEAAwE;gBACxE,oCAAoC;gBACpC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACrC,IAAI,EAAE,IAAI,IAAI,IAAI,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACzD,MAAM,CAAC,IAAI,CAAC,kFAAkF,EAAE;wBAC9F,QAAQ,EAAE,EAAE,CAAC,QAAQ;qBACtB,CAAC,CAAC;oBACH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,oBAAoB,EAAE,EAAE,CAAC;gBAC9D,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,wEAAwE;YACxE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,wEAAwE;YACxE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;gBAC1E,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,UAAU;oBAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;gBAChE,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAE,CAAC,CAAC,EAAE,CAAC;gBACzC,MAAM,CAAC,IAAI,CAAC,8EAA8E,EAAE;oBAC1F,QAAQ,EAAE,EAAE,CAAC,QAAQ;iBACtB,CAAC,CAAC;gBACH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE,EAAE,CAAC;YAChE,CAAC;YAED,sEAAsE;YACtE,gEAAgE;YAChE,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,uDAAuD;YACvD,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE,GAAG,EAAE;gBAC1E,QAAQ,EAAE,EAAE,CAAC,QAAQ;aACtB,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,aAAa,EAAE,GAAG,OAAO,CAAC;IAEpD,OAAO,CAAC,KAAc,EAAqC,EAAE;QAC3D,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAA2B,CAAC;YACnD,6EAA6E;YAC7E,IAAI,EAAE,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC;gBACrE,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,wEAAwE;YACxE,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC7B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,wEAAwE;YACxE,0EAA0E;YAC1E,oDAAoD;YACpD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,UAAU,GAAG,OAAO,EAAE,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,kCAAkC,CAAC;YAE1G,OAAO;gBACL,OAAO,EAAE;oBACP,GAAG,OAAO;oBACV,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;iBACnE;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,sEAAsE,EAAE,GAAG,CAAC,CAAC;YACzF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}