@tradejs/cli 3.1.29-beta.262 → 3.1.29-beta.263

package/dist/lib/runtimeEvidenceSync.js

@@ -17,6 +17,7 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
 var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
   // If the importer is in node compatibility mode or this is not an ESM
   // file that has been converted to a CommonJS file using a Babel-
@@ -37,285 +38,17 @@ __export(runtimeEvidenceSync_exports, {
 });
 module.exports = __toCommonJS(runtimeEvidenceSync_exports);
 var import_node_child_process = require("child_process");
-var import_promises2 = __toESM(require("fs/promises"));
-var import_node_path2 = __toESM(require("path"));
+var import_promises = __toESM(require("fs/promises"));
+var import_node_path = __toESM(require("path"));
 var import_node_util = require("util");
 
 // src/lib/runtimeEvidenceArtifacts.ts
-var import_node_crypto = require("crypto");
-var import_promises = __toESM(require("fs/promises"));
-var import_node_path = __toESM(require("path"));
+var runtimeEvidenceArtifacts_exports = {};
+__reExport(runtimeEvidenceArtifacts_exports, require("@tradejs/node/diagnostics"));
 
 // src/lib/runtimeEvidenceDeployment.ts
-var import_runtimeStrategies = require("@tradejs/node/runtimeStrategies");
-var isRecord = (value) => value != null && typeof value === "object" && !Array.isArray(value);
-var isNonEmptyString = (value) => typeof value === "string" && value.trim().length > 0;
-var isPackageVersionMap = (value) => isRecord(value) && Object.keys(value).length > 0 && Object.entries(value).every(
-  ([name, version]) => name.startsWith("@tradejs/") && isNonEmptyString(version)
-);
-var INTERVALS = /* @__PURE__ */ new Set([
-  "1",
-  "3",
-  "5",
-  "15",
-  "30",
-  "60",
-  "120",
-  "240",
-  "360",
-  "720",
-  "D",
-  "W",
-  "M"
-]);
-var UNIVERSES = /* @__PURE__ */ new Set(["crypto", "tradfi"]);
-var isRuntimeStrategySelection = (value) => value === void 0 || isRecord(value) && Object.keys(value).length === 1 && Object.keys(value).every((key) => key === "tickers") && Array.isArray(value.tickers) && value.tickers.length > 0 && value.tickers.every((ticker) => isNonEmptyString(ticker));
-var samePackageVersions = (left, right) => {
-  if (!left || !right) return false;
-  const leftEntries = Object.entries(left).sort(
-    ([a], [b]) => a.localeCompare(b)
-  );
-  const rightEntries = Object.entries(right).sort(
-    ([a], [b]) => a.localeCompare(b)
-  );
-  return JSON.stringify(leftEntries) === JSON.stringify(rightEntries);
-};
-var runtimeLineageMatchesStrategySnapshot = ({
-  lineage,
-  deployment,
-  strategy
-}) => lineage?.schemaVersion === 3 && lineage.strategyRevision === strategy.strategyRevision && lineage.deploymentCompositionId === deployment.deploymentCompositionId && lineage.strategyPackageVersion === strategy.strategyPackageVersion && lineage.runtimePackageVersion === strategy.runtimePackageVersion && samePackageVersions(
-  lineage.strategyDependencyVersions,
-  strategy.strategyDependencyVersions
-);
-var parseRuntimeEvidenceDeploymentSnapshot = (value) => {
-  if (!isRecord(value) || value.schemaVersion !== 2 || !isNonEmptyString(value.id) || !isNonEmptyString(value.deploymentCompositionId) || !/^dc1:[a-f0-9]{16}$/.test(value.deploymentCompositionId) || !isNonEmptyString(value.label) || !isNonEmptyString(value.connectorName) || !isNonEmptyString(value.provider) || !isNonEmptyString(value.accountId) || typeof value.enabled !== "boolean" || !Array.isArray(value.strategies)) {
-    throw new Error(
-      "Runtime evidence deployment snapshot is missing or invalid"
-    );
-  }
-  const strategies = value.strategies.map((candidate) => {
-    if (!isRecord(candidate) || !isNonEmptyString(candidate.strategyName) || !isNonEmptyString(candidate.strategyRevision) || !/^sr1:[a-f0-9]{16}$/.test(candidate.strategyRevision) || typeof candidate.enabled !== "boolean" || !["active", "entries_paused"].includes(String(candidate.controlState)) || !INTERVALS.has(String(candidate.interval)) || !UNIVERSES.has(String(candidate.universe)) || !isNonEmptyString(candidate.strategyPackage) || !isNonEmptyString(candidate.strategyPackageVersion) || !isPackageVersionMap(candidate.strategyDependencyVersions) || !isNonEmptyString(candidate.runtimePackageVersion) || !isRecord(candidate.strategyConfig) || !isRuntimeStrategySelection(candidate.selection)) {
-      throw new Error(
-        "Runtime evidence deployment strategy snapshot is invalid"
-      );
-    }
-    if (String(candidate.strategyConfig.INTERVAL) !== String(candidate.interval) || String(candidate.strategyConfig.UNIVERSE) !== String(candidate.universe)) {
-      throw new Error(
-        `Runtime evidence strategy config does not match its scope: ${candidate.strategyName}`
-      );
-    }
-    if (candidate.accountId != null && (!isNonEmptyString(candidate.accountId) || candidate.accountId !== value.accountId)) {
-      throw new Error(
-        `Runtime evidence strategy account does not match deployment: ${candidate.strategyName}`
-      );
-    }
-    return candidate;
-  });
-  const identities = /* @__PURE__ */ new Set();
-  for (const strategy of strategies) {
-    if (identities.has(strategy.strategyName)) {
-      throw new Error(
-        `Duplicate runtime evidence strategy: ${strategy.strategyName}`
-      );
-    }
-    identities.add(strategy.strategyName);
-  }
-  return {
-    ...value,
-    strategies
-  };
-};
-var activeRuntimeEvidenceStrategies = (deployment) => deployment.enabled ? deployment.strategies.filter((strategy) => strategy.enabled) : [];
-var unwrapRuntimeEvidenceRows = (value, field) => (Array.isArray(value) ? value : []).map((candidate) => {
-  const record = isRecord(candidate) ? candidate : null;
-  const nested = record && isRecord(record[field]) ? record[field] : null;
-  return nested ?? record;
-}).filter((record) => record != null);
-var assertCurrentRuntimeEvidenceArtifact = (artifact) => {
-  if (!isRecord(artifact) || artifact.reportType !== "runtime-evidence") {
-    throw new Error("Invalid runtime evidence artifact");
-  }
-  const deployment = parseRuntimeEvidenceDeploymentSnapshot(
-    artifact.deployment
-  );
-  const activeStrategies = activeRuntimeEvidenceStrategies(deployment);
-  if (activeStrategies.length === 0) {
-    throw new Error("Runtime evidence deployment has no enabled strategies");
-  }
-  const runtime = isRecord(artifact.runtime) ? artifact.runtime : null;
-  if (!runtime) {
-    throw new Error("Runtime evidence payload is missing");
-  }
-  if ("strategyConfigs" in runtime) {
-    throw new Error(
-      "Runtime evidence payload contains removed strategyConfigs data"
-    );
-  }
-  if ("evaluationStatsBuckets" in runtime) {
-    throw new Error(
-      "Runtime evidence payload contains removed lineage-less evaluationStatsBuckets data"
-    );
-  }
-  const rowFields = [
-    "trades",
-    "signals",
-    "evaluations",
-    "lineageScopes"
-  ];
-  for (const field of rowFields) {
-    if (!Array.isArray(runtime[field])) {
-      throw new Error(`Runtime evidence payload ${field} must be an array`);
-    }
-  }
-  const snapshots = new Map(
-    activeStrategies.map((strategy) => [strategy.strategyName, strategy])
-  );
-  const assertRows = (label, rows, lineageField) => {
-    for (const row of rows) {
-      const strategyName = String(row.strategy ?? "").trim();
-      const strategy = snapshots.get(strategyName);
-      if (!strategy || row.deploymentId !== deployment.id || row.accountId !== deployment.accountId || !runtimeLineageMatchesStrategySnapshot({
-        lineage: isRecord(row[lineageField]) ? row[lineageField] : void 0,
-        deployment,
-        strategy
-      })) {
-        throw new Error(
-          `Runtime evidence ${label} row is outside the current embedded deployment lineage`
-        );
-      }
-    }
-  };
-  assertRows(
-    "trade",
-    unwrapRuntimeEvidenceRows(runtime.trades, "trade"),
-    "runtimeLineage"
-  );
-  assertRows(
-    "signal",
-    unwrapRuntimeEvidenceRows(runtime.signals, "signal"),
-    "runtimeLineage"
-  );
-  assertRows(
-    "evaluation",
-    unwrapRuntimeEvidenceRows(runtime.evaluations, "evaluation"),
-    "runtimeLineage"
-  );
-  assertRows(
-    "lineage scope",
-    unwrapRuntimeEvidenceRows(runtime.lineageScopes, "lineageScope"),
-    "lineage"
-  );
-  return deployment;
-};
-
-// src/lib/runtimeEvidenceArtifacts.ts
-var RUNTIME_EVIDENCE_MANIFEST_FILE = "manifest.json";
-var RUNTIME_EVIDENCE_PAYLOAD_FILE = "runtime-evidence.json";
-var RUNTIME_EVIDENCE_COMPLETE_FILE = ".complete";
-var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
-var sha256 = (value) => (0, import_node_crypto.createHash)("sha256").update(value).digest("hex");
-var assertFiniteTimestamp = (value, label) => {
-  if (typeof value !== "number" || !Number.isFinite(value)) {
-    throw new Error(`Invalid runtime evidence ${label}`);
-  }
-  return value;
-};
-var parseManifest = (value) => {
-  const manifest = asRecord(value);
-  const window = asRecord(manifest?.window);
-  const payload = asRecord(manifest?.payload);
-  const counts = asRecord(manifest?.counts);
-  if (manifest?.schemaVersion !== 1 || manifest.reportType !== "runtime-evidence" || typeof manifest.artifactId !== "string" || typeof manifest.deploymentId !== "string" || typeof manifest.userName !== "string" || typeof manifest.createdAt !== "number" || payload?.file !== RUNTIME_EVIDENCE_PAYLOAD_FILE || typeof payload.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(payload.sha256) || typeof payload.bytes !== "number" || !Array.isArray(manifest.lineageKeys)) {
-    throw new Error("Invalid runtime evidence manifest");
-  }
-  return {
-    schemaVersion: 1,
-    artifactId: manifest.artifactId,
-    reportType: "runtime-evidence",
-    deploymentId: manifest.deploymentId,
-    userName: manifest.userName,
-    createdAt: manifest.createdAt,
-    window: {
-      startTime: assertFiniteTimestamp(window?.startTime, "window.startTime"),
-      endTime: assertFiniteTimestamp(window?.endTime, "window.endTime")
-    },
-    payload: {
-      file: RUNTIME_EVIDENCE_PAYLOAD_FILE,
-      sha256: payload.sha256,
-      bytes: payload.bytes
-    },
-    counts: Object.fromEntries(
-      Object.entries(counts ?? {}).filter(
-        (entry) => typeof entry[1] === "number" && Number.isFinite(entry[1])
-      )
-    ),
-    lineageKeys: manifest.lineageKeys.filter(
-      (value2) => typeof value2 === "string" && value2.length > 0
-    )
-  };
-};
-var verifyRuntimeEvidenceBundle = async (bundleDir) => {
-  const manifestPath = import_node_path.default.join(bundleDir, RUNTIME_EVIDENCE_MANIFEST_FILE);
-  const payloadPath = import_node_path.default.join(bundleDir, RUNTIME_EVIDENCE_PAYLOAD_FILE);
-  const completePath = import_node_path.default.join(bundleDir, RUNTIME_EVIDENCE_COMPLETE_FILE);
-  const [manifestText, payload, completeText] = await Promise.all([
-    import_promises.default.readFile(manifestPath, "utf8"),
-    import_promises.default.readFile(payloadPath),
-    import_promises.default.readFile(completePath, "utf8")
-  ]);
-  const manifest = parseManifest(JSON.parse(manifestText));
-  if (completeText.trim() !== manifest.artifactId) {
-    throw new Error(`Invalid completion marker in ${bundleDir}`);
-  }
-  if (payload.byteLength !== manifest.payload.bytes) {
-    throw new Error(`Runtime evidence size mismatch in ${bundleDir}`);
-  }
-  if (sha256(payload) !== manifest.payload.sha256) {
-    throw new Error(`Runtime evidence checksum mismatch in ${bundleDir}`);
-  }
-  const artifact = asRecord(JSON.parse(payload.toString("utf8")));
-  const artifactWindow = asRecord(artifact?.window);
-  if (artifact?.reportType !== "runtime-evidence" || artifactWindow?.startTime !== manifest.window.startTime || artifactWindow.endTime !== manifest.window.endTime) {
-    throw new Error(`Runtime evidence payload mismatch in ${bundleDir}`);
-  }
-  const deployment = assertCurrentRuntimeEvidenceArtifact(artifact);
-  if (deployment.id !== manifest.deploymentId) {
-    throw new Error(`Runtime evidence deployment mismatch in ${bundleDir}`);
-  }
-  return {
-    bundleDir,
-    manifestPath,
-    payloadPath,
-    manifest,
-    artifact
-  };
-};
-var discoverRuntimeEvidenceBundles = async (rootDir) => {
-  const bundles = [];
-  const visit = async (directory, depth) => {
-    if (depth > 8) return;
-    let entries;
-    try {
-      entries = await import_promises.default.readdir(directory, { withFileTypes: true });
-    } catch (error) {
-      if (error.code === "ENOENT") return;
-      throw error;
-    }
-    const names = new Set(entries.map((entry) => entry.name));
-    if (names.has(RUNTIME_EVIDENCE_MANIFEST_FILE) && names.has(RUNTIME_EVIDENCE_PAYLOAD_FILE) && names.has(RUNTIME_EVIDENCE_COMPLETE_FILE)) {
-      bundles.push(directory);
-      return;
-    }
-    await Promise.all(
-      entries.filter(
-        (entry) => entry.isDirectory() && !entry.name.startsWith(".") && !entry.name.includes(".tmp-")
-      ).map((entry) => visit(import_node_path.default.join(directory, entry.name), depth + 1))
-    );
-  };
-  await visit(rootDir, 0);
-  return bundles.sort();
-};
+var runtimeEvidenceDeployment_exports = {};
+__reExport(runtimeEvidenceDeployment_exports, require("@tradejs/node/diagnostics"));
 
 // src/lib/runtimeEvidenceSync.ts
 var execFileAsync = (0, import_node_util.promisify)(import_node_child_process.execFile);
@@ -348,23 +81,23 @@ var buildRuntimeEvidenceRsyncArgs = ({
   withTrailingSlash(source),
   withTrailingSlash(destination)
 ];
-var receiptPath = (receiptsRoot, artifactId) => import_node_path2.default.join(receiptsRoot, `${safeSegment(artifactId, "artifact")}.json`);
+var receiptPath = (receiptsRoot, artifactId) => import_node_path.default.join(receiptsRoot, `${safeSegment(artifactId, "artifact")}.json`);
 var compareBundles = (left, right) => left.manifest.window.endTime - right.manifest.window.endTime || left.manifest.createdAt - right.manifest.createdAt;
 var listPendingRuntimeEvidenceBundles = async ({
   evidenceRoot,
   deploymentId
 }) => {
   const safeDeploymentId = safeSegment(deploymentId, "production");
-  const artifactsRoot = import_node_path2.default.join(evidenceRoot, "artifacts", safeDeploymentId);
-  const receiptsRoot = import_node_path2.default.join(evidenceRoot, "receipts", safeDeploymentId);
-  const bundles = await discoverRuntimeEvidenceBundles(artifactsRoot);
+  const artifactsRoot = import_node_path.default.join(evidenceRoot, "artifacts", safeDeploymentId);
+  const receiptsRoot = import_node_path.default.join(evidenceRoot, "receipts", safeDeploymentId);
+  const bundles = await (0, runtimeEvidenceArtifacts_exports.discoverRuntimeEvidenceBundles)(artifactsRoot);
   const pending = [];
   for (const bundleDir of bundles) {
-    const verified = await verifyRuntimeEvidenceBundle(bundleDir);
+    const verified = await (0, runtimeEvidenceArtifacts_exports.verifyRuntimeEvidenceBundle)(bundleDir);
     if (verified.manifest.deploymentId !== safeDeploymentId) continue;
-    assertCurrentRuntimeEvidenceArtifact(verified.artifact);
+    (0, runtimeEvidenceDeployment_exports.assertCurrentRuntimeEvidenceArtifact)(verified.artifact);
     try {
-      await import_promises2.default.access(receiptPath(receiptsRoot, verified.manifest.artifactId));
+      await import_promises.default.access(receiptPath(receiptsRoot, verified.manifest.artifactId));
       continue;
     } catch (error) {
       if (error.code !== "ENOENT") throw error;
@@ -381,13 +114,13 @@ var markRuntimeEvidenceBundleProcessed = async ({
   runtimeFeedback
 }) => {
   const safeDeploymentId = safeSegment(deploymentId, "production");
-  const verified = await verifyRuntimeEvidenceBundle(bundleDir);
+  const verified = await (0, runtimeEvidenceArtifacts_exports.verifyRuntimeEvidenceBundle)(bundleDir);
   if (verified.manifest.deploymentId !== safeDeploymentId) {
     throw new Error(
       `Artifact deployment mismatch: expected ${safeDeploymentId}, received ${verified.manifest.deploymentId}`
     );
   }
-  const receiptsRoot = import_node_path2.default.join(evidenceRoot, "receipts", safeDeploymentId);
+  const receiptsRoot = import_node_path.default.join(evidenceRoot, "receipts", safeDeploymentId);
   const finalPath = receiptPath(receiptsRoot, verified.manifest.artifactId);
   const temporaryPath = `${finalPath}.tmp-${process.pid}`;
   const receipt = {
@@ -401,14 +134,14 @@ var markRuntimeEvidenceBundleProcessed = async ({
       replayEvidenceSha256: runtimeFeedback.replayEvidenceSha256
     } : {}
   };
-  await import_promises2.default.mkdir(receiptsRoot, { recursive: true });
-  await import_promises2.default.writeFile(
+  await import_promises.default.mkdir(receiptsRoot, { recursive: true });
+  await import_promises.default.writeFile(
     temporaryPath,
     `${JSON.stringify(receipt, null, 2)}
 `,
     "utf8"
   );
-  await import_promises2.default.rename(temporaryPath, finalPath);
+  await import_promises.default.rename(temporaryPath, finalPath);
   return finalPath;
 };
 var syncRuntimeEvidenceBundles = async ({
@@ -423,46 +156,46 @@ var syncRuntimeEvidenceBundles = async ({
   }
 }) => {
   const safeDeploymentId = safeSegment(deploymentId, "production");
-  const inboxRoot = import_node_path2.default.join(evidenceRoot, "inbox", safeDeploymentId);
-  const artifactsRoot = import_node_path2.default.join(evidenceRoot, "artifacts", safeDeploymentId);
+  const inboxRoot = import_node_path.default.join(evidenceRoot, "inbox", safeDeploymentId);
+  const artifactsRoot = import_node_path.default.join(evidenceRoot, "artifacts", safeDeploymentId);
   await Promise.all([
-    import_promises2.default.mkdir(inboxRoot, { recursive: true }),
-    import_promises2.default.mkdir(artifactsRoot, { recursive: true })
+    import_promises.default.mkdir(inboxRoot, { recursive: true }),
+    import_promises.default.mkdir(artifactsRoot, { recursive: true })
   ]);
   const rsyncArgs = buildRuntimeEvidenceRsyncArgs({
     source,
     destination: inboxRoot
   });
   const transfer = await runRsync(rsyncArgs);
-  const discovered = await discoverRuntimeEvidenceBundles(inboxRoot);
+  const discovered = await (0, runtimeEvidenceArtifacts_exports.discoverRuntimeEvidenceBundles)(inboxRoot);
   const received = [];
   for (const bundleDir of discovered) {
-    const verified = await verifyRuntimeEvidenceBundle(bundleDir);
+    const verified = await (0, runtimeEvidenceArtifacts_exports.verifyRuntimeEvidenceBundle)(bundleDir);
     if (verified.manifest.deploymentId !== safeDeploymentId) {
       throw new Error(
         `Artifact deployment mismatch: expected ${safeDeploymentId}, received ${verified.manifest.deploymentId}`
       );
     }
-    assertCurrentRuntimeEvidenceArtifact(verified.artifact);
-    const destinationDir = import_node_path2.default.join(
+    (0, runtimeEvidenceDeployment_exports.assertCurrentRuntimeEvidenceArtifact)(verified.artifact);
+    const destinationDir = import_node_path.default.join(
       artifactsRoot,
       ...dateParts(verified.manifest.window.endTime),
       safeSegment(verified.manifest.artifactId, "artifact")
     );
-    await import_promises2.default.mkdir(import_node_path2.default.dirname(destinationDir), { recursive: true });
+    await import_promises.default.mkdir(import_node_path.default.dirname(destinationDir), { recursive: true });
     try {
-      await import_promises2.default.rename(bundleDir, destinationDir);
+      await import_promises.default.rename(bundleDir, destinationDir);
     } catch (error) {
       if (!isExistingDestinationError(error)) throw error;
-      const existing = await verifyRuntimeEvidenceBundle(destinationDir);
+      const existing = await (0, runtimeEvidenceArtifacts_exports.verifyRuntimeEvidenceBundle)(destinationDir);
       if (existing.manifest.payload.sha256 !== verified.manifest.payload.sha256) {
         throw new Error(
           `Conflicting runtime evidence artifact ${verified.manifest.artifactId}`
         );
       }
-      await import_promises2.default.rm(bundleDir, { recursive: true, force: true });
+      await import_promises.default.rm(bundleDir, { recursive: true, force: true });
     }
-    received.push(await verifyRuntimeEvidenceBundle(destinationDir));
+    received.push(await (0, runtimeEvidenceArtifacts_exports.verifyRuntimeEvidenceBundle)(destinationDir));
   }
   const pending = await listPendingRuntimeEvidenceBundles({
     evidenceRoot,