@senpi/runtime 3.0.65 → 3.0.67

package/dist/index.js

@@ -56,6 +56,7 @@ import { createIntakeContext } from "./runtime-api/intake/intake-context.js";
 import { wireRuntime, intakeUrlFor, selectScanners } from "./runtime-api/intake/intake-mount.js";
 import { ingestDispatchMutex, ingestDispatchKey } from "./runtime-api/intake/ingest-mutex.js";
 import { loadRuntimeConfig } from "./runtime/load-runtime-config.js";
+import { createLiveTelemetry } from "./telemetry/live-telemetry.js";
 /** Initialize all core features (DSL, risk, health) on the given event bus. */
 export function initCore(bus) {
     initDsl(bus);
@@ -116,6 +117,35 @@ const PLUGIN_MANIFEST_VERSION = readPluginManifestVersion();
  * See `runtime/auto-update/resolve-package-name.ts`.
  */
 const PLUGIN_PACKAGE_NAME = resolvePackageName();
+/**
+ * The taxonomy code both one-runtime-per-wallet refusals lead with.
+ *
+ * `openclaw gateway call` collapses two different worlds into one process status — it catches
+ * whatever its RPC throws, prints `Gateway call failed: <error>` and exits 1, whether the gateway
+ * was unreachable or the gateway ANSWERED with a refusal. So the CLI separates them by message
+ * taxonomy instead: `isRefusalMessage` (`deploy/taxonomy.ts`) reads a leading bracketed code, and
+ * no transport failure carries one. These two refusals were bare prose, so the classifier could not
+ * see them and a deliberate policy decision reached its reader framed as a broken gateway — the one
+ * conclusion that is false here, and the one that sends whoever reads it to look at infrastructure
+ * instead of at their own action.
+ *
+ * ONE code for both branches. The condition is identical — this wallet already has a runtime, and
+ * two exit engines on one wallet's margin disagree about what is protected and stop each other's
+ * positions out on different floors. What differs between the two messages is only how much this
+ * gateway could see (a live handle, or a registry row), which the prose states and which changes
+ * nothing about the decision a caller has to make.
+ */
+const WALLET_HAS_RUNTIME = "[E_WALLET_HAS_RUNTIME]";
+/**
+ * The id-collision refusal's code — the third gate on the same `senpi runtime create` path, and
+ * plausibly the one hit most often, since re-running create with the same id lands on it.
+ *
+ * A SEPARATE code from `WALLET_HAS_RUNTIME`, where those two share one: the condition here is an
+ * id already taken, not a wallet already under management, and the remedy differs with it — pick
+ * another id, rather than stop or inspect the runtime holding a margin account. Nothing about
+ * anyone's money is being claimed, which is precisely why it must not answer with the wallet code.
+ */
+const RUNTIME_ID_TAKEN = "[E_RUNTIME_ID_TAKEN]";
 /**
  * OpenClaw plugin entry.
  * Boots from internal registry (installed_runtimes.json) in stateDir; does not read runtime list from config.
@@ -287,10 +317,140 @@ const senpiRuntimePlugin = {
         // cleared on a successful wire/install. senpi.listRuntimes reads it to render
         // "running — NO ENTRY SCANNERS" instead of a bare "running" for a blind runtime.
         const unwiredRuntimes = new Map();
+        // ── Live telemetry ────────────────────────────────────────────────
+        // Every runtime this box knows about, running or not, keyed runtimeId. The topology payload has
+        // to name a stopped strategy too, so this is populated from the registry rather than from
+        // `runtimeHandles` (which holds only the live ones) and is the source of the two facts the
+        // registry entry does not carry: the strategy's display name and its declared scanners. Both come
+        // from the parsed YAML — `name` is the same `config.name` that `RuntimeHealthStatus.runtimeName`
+        // is built from, so a runtime whose config never parsed falls back to its id rather than to a
+        // guess, and its scanner list stays empty rather than inventing rows.
+        const telemetryStrategies = new Map();
+        const noteTelemetryRuntime = (runtimeId, address) => {
+            const existing = telemetryStrategies.get(runtimeId);
+            telemetryStrategies.set(runtimeId, {
+                address,
+                name: existing?.name ?? runtimeId,
+                scanners: existing?.scanners ?? [],
+            });
+        };
+        const noteTelemetryRuntimeConfig = (runtimeId, config) => {
+            telemetryStrategies.set(runtimeId, {
+                address: config.strategy?.wallet ?? telemetryStrategies.get(runtimeId)?.address ?? "",
+                name: config.name,
+                scanners: config.scanners ?? [],
+            });
+        };
         // Dedicated logger for the runtime-api subtree — required because the
         // PluginLogger surface (info/warn/error) lacks `debug`, while the
         // Logger contract used by `runtime-api/` includes it.
         const apiLogger = createLogger("[senpi-core][api]");
+        /**
+         * One gather per publish tick. Health and system state are read together because the two payloads
+         * need both: the topology reads health and `runtimeName`, the stats read the per-scanner rows,
+         * and `restartCount` / `degradedReason` live only on the health rows while every other scanner
+         * field lives only on the system-state rows — so they are joined here on `(runtimeId, scannerId)`.
+         */
+        const collectTelemetryFacts = async () => {
+            const [statuses, states] = await Promise.all([
+                collectRuntimeHealthStatuses(runtimeHandles, api.logger),
+                collectRuntimeSystemStates(runtimeHandles, api.logger, baseStateDir),
+            ]);
+            const healthByRuntime = new Map();
+            for (const status of statuses) {
+                if (status.runtimeId !== undefined)
+                    healthByRuntime.set(status.runtimeId, status);
+            }
+            const scannerState = [];
+            // Registration facts per (runtimeId, scannerId), so the topology can report a scanner's live
+            // schedule rather than only what its YAML declared.
+            const registrations = new Map();
+            for (const state of states) {
+                const runtimeId = state.runtimeId;
+                const healthRows = runtimeId === undefined
+                    ? []
+                    : healthByRuntime.get(runtimeId)?.components.scanners.scanners ?? [];
+                for (const row of state.components.scanners.state.scanners) {
+                    const supervision = healthRows.find((r) => r.scannerId === row.scannerId);
+                    const snapshot = {
+                        address: row.address,
+                        scannerId: row.scannerId,
+                        health: row.health,
+                        degradedReason: supervision?.degradedReason ?? null,
+                        enabled: row.enabled,
+                        inFlightSince: row.inFlightSince,
+                        lastRunStartedAt: row.lastRunStartedAt,
+                        lastRunFinishedAt: row.lastRunFinishedAt,
+                        lastRunStatus: row.lastRunStatus,
+                        lastRunReason: row.lastRunReason,
+                        nextRunAt: row.nextRunAt,
+                        lastAliveAt: row.lastAliveAt,
+                        // No supervision row means the restart count is unknown, not zero. A zero here would
+                        // read as "this scanner has never restarted" on a scanner nobody is supervising.
+                        restartCount: supervision?.restartCount ?? null,
+                    };
+                    scannerState.push(snapshot);
+                    if (runtimeId !== undefined) {
+                        registrations.set(`${runtimeId}::${row.scannerId}`, {
+                            ...snapshot,
+                            scheduleMode: row.scheduleMode,
+                            configVersion: row.configVersion,
+                            intervalSeconds: row.intervalSeconds,
+                        });
+                    }
+                }
+            }
+            const strategies = [];
+            for (const [runtimeId, entry] of telemetryStrategies) {
+                const health = healthByRuntime.get(runtimeId);
+                const scanners = entry.scanners.map((declared) => {
+                    const live = registrations.get(`${runtimeId}::${declared.name}`);
+                    return live === undefined
+                        ? { entry: declared }
+                        : {
+                            entry: declared,
+                            registration: {
+                                enabled: live.enabled,
+                                scheduleMode: live.scheduleMode,
+                                // The engine's own cadence, which is what the scanner actually polls on — a
+                                // recipe may omit it and take the scanner definition's default. An external
+                                // scanner registers zero because it is POSTed to rather than polled, and only
+                                // the recipe knows the cadence its scaffold was told to tick at.
+                                intervalSeconds: live.intervalSeconds > 0 ? live.intervalSeconds : declared.interval_seconds ?? null,
+                                configVersion: live.configVersion,
+                            },
+                        };
+                });
+                strategies.push({
+                    runtimeId,
+                    address: entry.address,
+                    // `runtimeName` is built from the same `config.name`; the indexed value is used because it
+                    // is available for a stopped runtime too, where there is no health status to read.
+                    name: health?.runtimeName ?? entry.name,
+                    scanners,
+                });
+            }
+            return {
+                strategies,
+                runningRuntimeIds: runtimeHandles,
+                unwiredRuntimeIds: unwiredRuntimes,
+                readHealth: (runtimeId) => healthByRuntime.get(runtimeId),
+                scannerState,
+            };
+        };
+        const liveTelemetry = createLiveTelemetry({ collectFacts: collectTelemetryFacts });
+        /**
+         * Every gateway method goes through here so the broadcast handle is captured on the FIRST request
+         * of any kind. `ctx.context` is the only route to the websocket push layer and it exists only
+         * inside a handler — capturing it in the subscribe method alone would mean a box whose client
+         * never subscribes can never publish anything, silently.
+         */
+        const registerGatewayMethod = (name, handler, opts) => {
+            api.registerGatewayMethod(name, (ctx) => {
+                liveTelemetry.captureBroadcast(ctx, name);
+                return handler(ctx);
+            }, opts);
+        };
         // A gateway seam failed to wire/launch a runtime's external scanner stack: the runtime is up but
         // runs blind on internal scanners only. Two records, by design: a first-class `runtime.scanners_unwired`
         // event (the queryable/alertable fact, by phase) and the migrated exception-form `logger.error`
@@ -498,6 +658,9 @@ const senpiRuntimePlugin = {
                             continue;
                         const pathOrContent = entry.runtimeYamlPath ?? entry.runtimeYamlContent;
                         const entryStateDir = buildRuntimeStateDir(baseStateDir, entry.id, entry.wallet ?? "");
+                        // Indexed before the boot attempt: a runtime whose start throws is installed but stopped,
+                        // and the telemetry topology has to be able to say so.
+                        noteTelemetryRuntime(entry.id, entry.wallet ?? "");
                         const handle = await run(pathOrContent, {
                             fromPath: hasPath,
                             stateDir: entryStateDir,
@@ -520,6 +683,7 @@ const senpiRuntimePlugin = {
                         if (sharedIntakeContext) {
                             try {
                                 const runtimeConfig = await loadRuntimeConfig(pathOrContent, { fromPath: hasPath });
+                                noteTelemetryRuntimeConfig(entry.id, runtimeConfig);
                                 // Content-installed runtimes carry their recipe dir in the registry
                                 // entry (runtimeYamlDir) so relative scanner paths still resolve
                                 // after a restart; path-installed ones derive it from the path.
@@ -571,6 +735,7 @@ const senpiRuntimePlugin = {
                             // event) so listRuntimes/health don't render a bare "running".
                             try {
                                 const runtimeConfig = await loadRuntimeConfig(pathOrContent, { fromPath: hasPath });
+                                noteTelemetryRuntimeConfig(entry.id, runtimeConfig);
                                 if (selectScanners(runtimeConfig).length > 0) {
                                     unwiredRuntimes.set(entry.id, "no_intake");
                                     handle.attachSupervisionSource(() => ({
@@ -672,8 +837,19 @@ const senpiRuntimePlugin = {
                         }
                     }
                 }
+                // Publish ticks start only once the runtimes are up, so the first frames describe a real
+                // box. Gated by the same switch the skills coordinator uses: unit tests boot `register()`
+                // and must not acquire background timers. The subscribe method still answers without them.
+                if (process.env.SENPI_RUNTIME_API_DISABLED !== "true") {
+                    liveTelemetry.start();
+                }
             },
             async stop() {
+                // Live telemetry goes first: it owns a timer and an in-memory buffer, nothing downstream
+                // depends on it, and stopping it here guarantees no publish tick reads a half-torn-down
+                // runtime handle. Records emitted during the teardown below land in a buffer nobody drains,
+                // which is the right trade for a process on its way out.
+                liveTelemetry.stop();
                 // Drain the HTTP server FIRST so in-flight POST /signals requests
                 // finish before the underlying runtime they target is torn down.
                 // `apiHandle.close()` never throws.
@@ -839,7 +1015,7 @@ const senpiRuntimePlugin = {
                 ? (sanitizeId(id) || "runtime")
                 : deriveRuntimeId(runtimeName, wallet);
             if (hasId(registry, resolvedId)) {
-                return { ok: false, error: toError(`A runtime with id "${resolvedId}" already exists. Use a different id (e.g. --runtime-id another-name) or remove the existing one first: openclaw senpi runtime delete ${resolvedId}`) };
+                return { ok: false, error: toError(`${RUNTIME_ID_TAKEN} A runtime with id "${resolvedId}" already exists. Use a different id (e.g. --runtime-id another-name) or remove the existing one first: openclaw senpi runtime delete ${resolvedId}`) };
             }
             /**
              * One runtime per wallet address — asked of PERSISTED state, not only of this process.
@@ -875,7 +1051,7 @@ const senpiRuntimePlugin = {
                     // two reads found it. They agree in practice; the refusal has to agree with the surface
                     // it sends the reader to, because that is where the reader checks it.
                     if (runtimeHandles.has(holderId)) {
-                        return { ok: false, error: toError(`A runtime for wallet "${wallet}" is already running (runtime "${holderId}"). ` +
+                        return { ok: false, error: toError(`${WALLET_HAS_RUNTIME} A runtime for wallet "${wallet}" is already running (runtime "${holderId}"). ` +
                                 `Stop it first: openclaw senpi runtime delete --id ${holderId}`) };
                     }
                     return { ok: false, error: toError(
@@ -886,7 +1062,7 @@ const senpiRuntimePlugin = {
                         // next restart TRIES. The next step leads with the read, because the operator has to
                         // find out which of the two runtimes they actually want before removing either, and
                         // deleting the wrong one leaves a funded wallet watched by nothing.
-                        `A runtime for wallet "${wallet}" is already installed (runtime "${holderId}"). ` +
+                        `${WALLET_HAS_RUNTIME} A runtime for wallet "${wallet}" is already installed (runtime "${holderId}"). ` +
                             `It is not running in this gateway right now, but it is in the registry, so the next ` +
                             `restart will try to start it — installing a second runtime on the same wallet would ` +
                             `put two exit engines on one wallet's margin, each tracking its own high-water floor. ` +
@@ -980,6 +1156,10 @@ const senpiRuntimePlugin = {
                     runtimeId: resolvedId,
                 });
                 runtimeHandles.set(resolvedId, handle);
+                if (parsedConfig)
+                    noteTelemetryRuntimeConfig(resolvedId, parsedConfig);
+                else
+                    noteTelemetryRuntime(resolvedId, wallet);
                 // Registry create fact — distinct from the runtime.started boot transition (which also fires
                 // on a transient restart). Emitted inside emitEvent's guard so telemetry never fails the install.
                 emitEvent(apiLogger, () => buildRuntimeCreatedEvent({ runtimeId: resolvedId, address: wallet, recipeName: runtimeName }));
@@ -1085,7 +1265,7 @@ const senpiRuntimePlugin = {
             }
         }
         /** Gateway respond accepts (ok, payload?, error?) with error as { code, message }; plugin SDK types may omit the third arg. */
-        api.registerGatewayMethod("senpi.installRuntime", async (ctx) => {
+        registerGatewayMethod("senpi.installRuntime", async (ctx) => {
             const respond = ctx.respond;
             const result = await installRuntimeCore(ctx.params);
             if (result.ok)
@@ -1093,7 +1273,7 @@ const senpiRuntimePlugin = {
             else
                 respond(false, undefined, result.error);
         }, { scope: "operator.write" });
-        api.registerGatewayMethod("senpi.listRuntimes", async (ctx) => {
+        registerGatewayMethod("senpi.listRuntimes", async (ctx) => {
             const respond = ctx.respond;
             const { readRegistry } = await import("./runtime/strategy-registry.js");
             const registry = await readRegistry(baseStateDir);
@@ -1172,6 +1352,9 @@ const senpiRuntimePlugin = {
             // "running — NO ENTRY SCANNERS" forever. The map is otherwise only cleared on a
             // successful wire/install, which a scanner-less reinstall never reaches.
             unwiredRuntimes.delete(targetId);
+            // Same reuse hazard: a deleted id left in the index would keep publishing a strategy that no
+            // longer exists, and would hand a reinstall the old name and scanner list.
+            telemetryStrategies.delete(targetId);
             // Archive state directory before removing from registry
             if (deletedEntry) {
                 const runtimeStateDir = buildRuntimeStateDir(baseStateDir, targetId, deletedEntry.wallet ?? "");
@@ -1198,7 +1381,7 @@ const senpiRuntimePlugin = {
             }));
             return { ok: true, payload: { id: targetId } };
         }
-        api.registerGatewayMethod("senpi.deleteRuntime", async (ctx) => {
+        registerGatewayMethod("senpi.deleteRuntime", async (ctx) => {
             const respond = ctx.respond;
             const result = await deleteRuntimeCore(ctx.params);
             if (result.ok)
@@ -1292,7 +1475,7 @@ const senpiRuntimePlugin = {
          * producers — slated for removal in Task 5 once the migration counter
          * decays to zero (see `runtime-phase-2-api-plan.md` Section 8).
          */
-        api.registerGatewayMethod("senpi.ingestExternalScannerData", async (ctx) => {
+        registerGatewayMethod("senpi.ingestExternalScannerData", async (ctx) => {
             const respond = ctx.respond;
             // TODO(s11): wire actual telemetry counter for
             //   runtime.deprecated_gateway_ingest_call (event name, properties:
@@ -1368,7 +1551,7 @@ const senpiRuntimePlugin = {
                 });
             }
         }, { scope: "operator.write" });
-        api.registerGatewayMethod("senpi.listDslPositions", async (ctx) => {
+        registerGatewayMethod("senpi.listDslPositions", async (ctx) => {
             const respond = ctx.respond;
             const runtimeId = typeof ctx.params?.runtimeId === "string" ? ctx.params.runtimeId : undefined;
             const address = typeof ctx.params?.address === "string" ? ctx.params.address : undefined;
@@ -1393,7 +1576,7 @@ const senpiRuntimePlugin = {
             }
             respond(true, { positions });
         }, { scope: "operator.read" });
-        api.registerGatewayMethod("senpi.getDslPositionState", async (ctx) => {
+        registerGatewayMethod("senpi.getDslPositionState", async (ctx) => {
             const respond = ctx.respond;
             const asset = typeof ctx.params?.asset === "string" ? ctx.params.asset : undefined;
             if (!asset) {
@@ -1434,7 +1617,7 @@ const senpiRuntimePlugin = {
             }
             respond(true, { positions: matches });
         }, { scope: "operator.read" });
-        api.registerGatewayMethod("senpi.listDslArchives", async (ctx) => {
+        registerGatewayMethod("senpi.listDslArchives", async (ctx) => {
             const respond = ctx.respond;
             const runtimeId = typeof ctx.params?.runtimeId === "string" ? ctx.params.runtimeId : undefined;
             const address = typeof ctx.params?.address === "string" ? ctx.params.address : undefined;
@@ -1460,7 +1643,7 @@ const senpiRuntimePlugin = {
                 closes = closes.slice(0, limit);
             respond(true, { closes });
         }, { scope: "operator.read" });
-        api.registerGatewayMethod("senpi.getHealthStatus", async (ctx) => {
+        registerGatewayMethod("senpi.getHealthStatus", async (ctx) => {
             const respond = ctx.respond;
             const updater = autoUpdateCoordinator.getSnapshot();
             const runtimeId = typeof ctx.params?.runtimeId === "string" ? ctx.params.runtimeId : undefined;
@@ -1488,7 +1671,7 @@ const senpiRuntimePlugin = {
             const statuses = await collectRuntimeHealthStatuses(runtimeHandles, api.logger);
             respond(true, { statuses, updater });
         }, { scope: "operator.read" });
-        api.registerGatewayMethod("senpi.getSystemState", async (ctx) => {
+        registerGatewayMethod("senpi.getSystemState", async (ctx) => {
             const respond = ctx.respond;
             const updater = autoUpdateCoordinator.getSnapshot();
             const runtimeId = typeof ctx.params?.runtimeId === "string" ? ctx.params.runtimeId : undefined;
@@ -1516,6 +1699,36 @@ const senpiRuntimePlugin = {
             const states = await collectRuntimeSystemStates(runtimeHandles, api.logger, baseStateDir);
             respond(true, { states, updater });
         }, { scope: "operator.read" });
+        /**
+         * Live telemetry — the one method of the stream, called once per connect.
+         *
+         * It returns the current value of all three broadcast payloads plus the recent record window, so
+         * a client joining a box that has been running for hours renders a full screen immediately
+         * instead of waiting for the next thing to happen. `(afterEpoch, afterSeq)` resumes a client that
+         * already holds part of this epoch's run — a cursor naming any other epoch is dropped, because a
+         * seq from a previous run cannot address these records. `truncated` says when the records between
+         * a cursor of this epoch and the oldest record still held are gone, which nothing in `recent`
+         * alone can express.
+         *
+         * Read-only, like every other inspection method here. The scope that decides who RECEIVES the
+         * broadcasts is a property of the client's own connection, not of this method.
+         */
+        registerGatewayMethod("senpi.telemetry.subscribe", async (ctx) => {
+            const respond = ctx.respond;
+            try {
+                respond(true, await liveTelemetry.snapshot({
+                    afterEpoch: ctx.params?.afterEpoch,
+                    afterSeq: ctx.params?.afterSeq,
+                }));
+            }
+            catch (err) {
+                api.logger.warn("[senpi-runtime] telemetry subscribe error", { err });
+                respond(false, undefined, {
+                    code: "INTERNAL_ERROR",
+                    message: `Failed to build the telemetry snapshot: ${formatGatewayError(err)}`,
+                });
+            }
+        }, { scope: "operator.read" });
         /**
          * Action layer — read-only inspection.
          *
@@ -1535,7 +1748,7 @@ const senpiRuntimePlugin = {
          * persisted action-store machinery (`src/actions/store/`) usable
          * from the operator-facing CLI again.
          */
-        api.registerGatewayMethod("senpi.listActions", async (ctx) => {
+        registerGatewayMethod("senpi.listActions", async (ctx) => {
             const respond = ctx.respond;
             const runtimeId = typeof ctx.params?.runtimeId === "string" ? ctx.params.runtimeId : undefined;
             const address = typeof ctx.params?.address === "string" ? ctx.params.address : undefined;
@@ -1565,7 +1778,7 @@ const senpiRuntimePlugin = {
             }
             respond(true, { actions: merged });
         }, { scope: "operator.read" });
-        api.registerGatewayMethod("senpi.getActionState", async (ctx) => {
+        registerGatewayMethod("senpi.getActionState", async (ctx) => {
             const respond = ctx.respond;
             const runtimeId = typeof ctx.params?.runtimeId === "string" ? ctx.params.runtimeId : undefined;
             const actionName = typeof ctx.params?.actionName === "string" ? ctx.params.actionName : undefined;
@@ -1602,7 +1815,7 @@ const senpiRuntimePlugin = {
                 });
             }
         }, { scope: "operator.read" });
-        api.registerGatewayMethod("senpi.getActionHistory", async (ctx) => {
+        registerGatewayMethod("senpi.getActionHistory", async (ctx) => {
             const respond = ctx.respond;
             const runtimeId = typeof ctx.params?.runtimeId === "string" ? ctx.params.runtimeId : undefined;
             const actionName = typeof ctx.params?.actionName === "string" ? ctx.params.actionName : undefined;
@@ -1670,7 +1883,7 @@ const senpiRuntimePlugin = {
         // reachable on HTTP `/audit`. Passes through the caller-controlled subset
         // of the audit_query contract; resource scoping (wallet → strategyId) is
         // owned by handle.auditQuery, never the caller.
-        api.registerGatewayMethod("senpi.auditQuery", async (ctx) => {
+        registerGatewayMethod("senpi.auditQuery", async (ctx) => {
             const respond = ctx.respond;
             const runtimeId = typeof ctx.params?.runtimeId === "string" ? ctx.params.runtimeId : undefined;
             if (!runtimeId) {
@@ -1718,7 +1931,7 @@ const senpiRuntimePlugin = {
         // its state root private, so re-derive it from baseStateDir + the handle's
         // wallet (same helper the writer's stateDir was built with); the writer
         // nests entries under `<root>/<address>/risk-guard/audit.jsonl`.
-        api.registerGatewayMethod("senpi.getRiskAudit", async (ctx) => {
+        registerGatewayMethod("senpi.getRiskAudit", async (ctx) => {
             const respond = ctx.respond;
             const runtimeId = typeof ctx.params?.runtimeId === "string" ? ctx.params.runtimeId : undefined;
             if (!runtimeId) {
@@ -1761,7 +1974,7 @@ const senpiRuntimePlugin = {
         // Per-strategy local domain-event ring (on-disk JSONL) — the trade narrative, queryable locally.
         // Same state-root re-derivation as getRiskAudit: the Runtime keeps its root private, so rebuild it
         // from baseStateDir + the handle's wallet; the writer nests rows under `<root>/strategies/<address>/events/`.
-        api.registerGatewayMethod("senpi.getEvents", async (ctx) => {
+        registerGatewayMethod("senpi.getEvents", async (ctx) => {
             const respond = ctx.respond;
             const runtimeId = typeof ctx.params?.runtimeId === "string" ? ctx.params.runtimeId : undefined;
             if (!runtimeId) {
@@ -1818,12 +2031,12 @@ const senpiRuntimePlugin = {
             }
         }, { scope: "operator.read" });
         // ─── Skills manager — read + mutate ──────────────────────────────────────
-        api.registerGatewayMethod("senpi.skills.status", async (ctx) => {
+        registerGatewayMethod("senpi.skills.status", async (ctx) => {
             const respond = ctx.respond;
             const snapshot = skillsCoordinator.getSnapshot();
             respond(true, { snapshot });
         }, { scope: "operator.read" });
-        api.registerGatewayMethod("senpi.skills.update", async (ctx) => {
+        registerGatewayMethod("senpi.skills.update", async (ctx) => {
             const respond = ctx.respond;
             const name = typeof ctx.params?.name === "string" ? ctx.params.name.trim() : undefined;
             if (!name) {
@@ -1848,7 +2061,7 @@ const senpiRuntimePlugin = {
                 });
             }
         }, { scope: "operator.write" });
-        api.registerGatewayMethod("senpi.skills.updateAll", async (ctx) => {
+        registerGatewayMethod("senpi.skills.updateAll", async (ctx) => {
             const respond = ctx.respond;
             try {
                 const results = await skillsCoordinator.updateAll();