@tradejs/cli 3.1.29-beta.276 → 3.1.29-beta.277

package/dist/lib/mcpReplayProcess.js

@@ -0,0 +1,132 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/lib/mcpReplayProcess.ts
+var mcpReplayProcess_exports = {};
+__export(mcpReplayProcess_exports, {
+  buildMcpReplayProcess: () => buildMcpReplayProcess
+});
+module.exports = __toCommonJS(mcpReplayProcess_exports);
+var import_node_path = __toESM(require("path"));
+
+// src/lib/runtimeEvidenceProducer.ts
+var runtimeEvidenceProducer_exports = {};
+__reExport(runtimeEvidenceProducer_exports, require("@tradejs/node/diagnostics"));
+
+// src/lib/runtimeEvidenceArtifacts.ts
+var runtimeEvidenceArtifacts_exports = {};
+__reExport(runtimeEvidenceArtifacts_exports, require("@tradejs/node/diagnostics"));
+
+// src/lib/mcpReplayProcess.ts
+var buildMcpReplayProcess = async ({
+  evidencePath,
+  outDir,
+  runId,
+  projectRoot,
+  env
+}) => {
+  if (!/^[a-zA-Z0-9_-]{1,100}$/.test(runId))
+    throw new Error("Invalid replay container run id");
+  const bundle = await (0, runtimeEvidenceArtifacts_exports.verifyRuntimeEvidenceBundle)(import_node_path.default.dirname(evidencePath));
+  if (import_node_path.default.resolve(evidencePath) !== import_node_path.default.resolve(bundle.payloadPath))
+    throw new Error("Replay requires the verified bundle payload");
+  const producer = (0, runtimeEvidenceProducer_exports.parseRuntimeEvidenceProducer)(bundle.artifact.producer);
+  if (!env.MCP_REPLAY_HOST_PROJECT_ROOT || !env.MCP_REPLAY_NETWORK || !env.MCP_REPLAY_IMAGE_REPOSITORY)
+    throw new Error(
+      "Image-bound replay requires MCP_REPLAY_HOST_PROJECT_ROOT MCP_REPLAY_NETWORK and MCP_REPLAY_IMAGE_REPOSITORY"
+    );
+  const hostPath = (file) => {
+    const relative = import_node_path.default.relative(projectRoot, file);
+    if (relative.startsWith("..") || import_node_path.default.isAbsolute(relative))
+      throw new Error("Replay mounts must be inside the Project");
+    return import_node_path.default.join(env.MCP_REPLAY_HOST_PROJECT_ROOT, relative);
+  };
+  const args = [
+    "run",
+    "--rm",
+    "--name",
+    `tradejs-replay-${runId}`,
+    "--memory=1536m",
+    "--cpus=1",
+    "--pids-limit=512",
+    "--read-only",
+    "--cap-drop=ALL",
+    "--security-opt=no-new-privileges",
+    "--network",
+    env.MCP_REPLAY_NETWORK,
+    "--tmpfs",
+    "/tmp",
+    "--tmpfs",
+    "/app/data",
+    "--entrypoint",
+    "/app/node_modules/.bin/tradejs",
+    "--mount",
+    `type=bind,src=${hostPath(import_node_path.default.dirname(evidencePath))},dst=/evidence,readonly`,
+    "--mount",
+    `type=bind,src=${hostPath(outDir)},dst=/replay-output`
+  ];
+  const safeEnv = {
+    PROJECT_CWD: "/app",
+    DOTENV_CONFIG_PATH: "/dev/null",
+    TRADEJS_PROJECT_SHA: producer.projectSha,
+    TRADEJS_PROJECT_IMAGE_DIGEST: producer.imageDigest,
+    NODE_OPTIONS: "--max-old-space-size=1024",
+    MAKE_ORDERS: "false",
+    TRADEJS_EXTERNAL_ORDER_PLACEMENT: "false",
+    AI_ENABLED: "false",
+    ML_ENABLED: "false",
+    RUNTIME_FEEDBACK_ISOLATED_REDIS: "true",
+    REDIS_HOST: env.MCP_REPLAY_REDIS_HOST,
+    REDIS_PORT: "6379",
+    REDIS_DB: "0",
+    PGOPTIONS: "-c default_transaction_read_only=on",
+    TRADEJS_TIMESCALE_READ_ONLY: "true"
+  };
+  for (const name of ["PG_HOST", "PG_PORT", "PG_USER", "PG_DATABASE", "PG_DB"])
+    if (env[name]) safeEnv[name] = env[name];
+  for (const [name, value] of Object.entries(safeEnv))
+    if (value !== void 0) args.push("--env", `${name}=${value}`);
+  if (env.PG_PASSWORD) args.push("--env", "PG_PASSWORD");
+  args.push(
+    `${env.MCP_REPLAY_IMAGE_REPOSITORY}@${producer.imageDigest}`,
+    "runtime-feedback-replay",
+    "--runtimeEvidence",
+    `/evidence/${import_node_path.default.basename(evidencePath)}`,
+    "--outDir",
+    "/replay-output",
+    "--runId",
+    runId
+  );
+  return { executable: "docker", args };
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  buildMcpReplayProcess
+});

package/dist/lib/strategyRelease.js

@@ -249,21 +249,38 @@ var buildStrategyMonitoringProfile = ({
 
 // src/lib/strategyRelease/evidenceRetention.ts
 var DAY_MS2 = 864e5;
+var isResearchRetired = (research) => research?.status === "retired" && research.retirement?.policy === "discard-unrecoverable-without-rerun" && Boolean(research.retirement.reason.trim()) && Boolean(research.retirement.missingEvidence.length) && research.retirement.missingEvidence.every((item) => Boolean(item.trim()));
 var planStrategyEvidenceRetention = ({
   now,
   entries,
+  research,
   retentionDays = {
     operational_redis: 3,
     verbose_payload: 14,
+    research_payload: 0,
+    research_cache: 0,
     verified_runtime_bundle: 90,
     compact_ledger: null
   }
 }) => {
   const keep = [];
   const remove = [];
+  const retired = isResearchRetired(research);
+  const roles = new Set(
+    research?.permanentArtifacts.map((artifact) => artifact.role)
+  );
+  const terminalResearch = Boolean(
+    (research?.status === "completed" || retired) && Number.isFinite(research?.completedAt) && research.completedAt <= now && (retired ? ["note"] : ["note", "candidates", "metrics"]).every(
+      (role) => roles.has(role)
+    )
+  );
   for (const entry of entries) {
     const days = retentionDays[entry.kind];
-    if (days == null || !entry.verified || !entry.aggregated || now - entry.createdAt <= days * DAY_MS2) {
+    const isResearch = entry.kind === "research_payload" || entry.kind === "research_cache";
+    const completedResearch = Boolean(
+      terminalResearch && research?.researchId === entry.researchId && /^[a-f0-9]{64}$/.test(entry.sha256 ?? "")
+    );
+    if (isResearch && !completedResearch || days == null || !entry.verified || !entry.aggregated && !(isResearch && retired) || !isResearch && now - entry.createdAt <= days * DAY_MS2) {
       keep.push(entry);
     } else {
       remove.push(entry);

package/dist/scripts/mcpWorker.js

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,6 +17,15 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/scripts/mcpWorker.ts
@@ -28,6 +39,102 @@ var import_node_crypto = require("crypto");
 var import_promises = require("fs/promises");
 var import_redis = require("@tradejs/infra/redis");
 var import_mcp = require("@tradejs/node/mcp");
+
+// src/lib/mcpReplayProcess.ts
+var import_node_path = __toESM(require("path"));
+
+// src/lib/runtimeEvidenceProducer.ts
+var runtimeEvidenceProducer_exports = {};
+__reExport(runtimeEvidenceProducer_exports, require("@tradejs/node/diagnostics"));
+
+// src/lib/runtimeEvidenceArtifacts.ts
+var runtimeEvidenceArtifacts_exports = {};
+__reExport(runtimeEvidenceArtifacts_exports, require("@tradejs/node/diagnostics"));
+
+// src/lib/mcpReplayProcess.ts
+var buildMcpReplayProcess = async ({
+  evidencePath,
+  outDir,
+  runId,
+  projectRoot,
+  env
+}) => {
+  if (!/^[a-zA-Z0-9_-]{1,100}$/.test(runId))
+    throw new Error("Invalid replay container run id");
+  const bundle = await (0, runtimeEvidenceArtifacts_exports.verifyRuntimeEvidenceBundle)(import_node_path.default.dirname(evidencePath));
+  if (import_node_path.default.resolve(evidencePath) !== import_node_path.default.resolve(bundle.payloadPath))
+    throw new Error("Replay requires the verified bundle payload");
+  const producer = (0, runtimeEvidenceProducer_exports.parseRuntimeEvidenceProducer)(bundle.artifact.producer);
+  if (!env.MCP_REPLAY_HOST_PROJECT_ROOT || !env.MCP_REPLAY_NETWORK || !env.MCP_REPLAY_IMAGE_REPOSITORY)
+    throw new Error(
+      "Image-bound replay requires MCP_REPLAY_HOST_PROJECT_ROOT MCP_REPLAY_NETWORK and MCP_REPLAY_IMAGE_REPOSITORY"
+    );
+  const hostPath = (file) => {
+    const relative = import_node_path.default.relative(projectRoot, file);
+    if (relative.startsWith("..") || import_node_path.default.isAbsolute(relative))
+      throw new Error("Replay mounts must be inside the Project");
+    return import_node_path.default.join(env.MCP_REPLAY_HOST_PROJECT_ROOT, relative);
+  };
+  const args = [
+    "run",
+    "--rm",
+    "--name",
+    `tradejs-replay-${runId}`,
+    "--memory=1536m",
+    "--cpus=1",
+    "--pids-limit=512",
+    "--read-only",
+    "--cap-drop=ALL",
+    "--security-opt=no-new-privileges",
+    "--network",
+    env.MCP_REPLAY_NETWORK,
+    "--tmpfs",
+    "/tmp",
+    "--tmpfs",
+    "/app/data",
+    "--entrypoint",
+    "/app/node_modules/.bin/tradejs",
+    "--mount",
+    `type=bind,src=${hostPath(import_node_path.default.dirname(evidencePath))},dst=/evidence,readonly`,
+    "--mount",
+    `type=bind,src=${hostPath(outDir)},dst=/replay-output`
+  ];
+  const safeEnv = {
+    PROJECT_CWD: "/app",
+    DOTENV_CONFIG_PATH: "/dev/null",
+    TRADEJS_PROJECT_SHA: producer.projectSha,
+    TRADEJS_PROJECT_IMAGE_DIGEST: producer.imageDigest,
+    NODE_OPTIONS: "--max-old-space-size=1024",
+    MAKE_ORDERS: "false",
+    TRADEJS_EXTERNAL_ORDER_PLACEMENT: "false",
+    AI_ENABLED: "false",
+    ML_ENABLED: "false",
+    RUNTIME_FEEDBACK_ISOLATED_REDIS: "true",
+    REDIS_HOST: env.MCP_REPLAY_REDIS_HOST,
+    REDIS_PORT: "6379",
+    REDIS_DB: "0",
+    PGOPTIONS: "-c default_transaction_read_only=on",
+    TRADEJS_TIMESCALE_READ_ONLY: "true"
+  };
+  for (const name of ["PG_HOST", "PG_PORT", "PG_USER", "PG_DATABASE", "PG_DB"])
+    if (env[name]) safeEnv[name] = env[name];
+  for (const [name, value] of Object.entries(safeEnv))
+    if (value !== void 0) args.push("--env", `${name}=${value}`);
+  if (env.PG_PASSWORD) args.push("--env", "PG_PASSWORD");
+  args.push(
+    `${env.MCP_REPLAY_IMAGE_REPOSITORY}@${producer.imageDigest}`,
+    "runtime-feedback-replay",
+    "--runtimeEvidence",
+    `/evidence/${import_node_path.default.basename(evidencePath)}`,
+    "--outDir",
+    "/replay-output",
+    "--runId",
+    runId
+  );
+  return { executable: "docker", args };
+};
+
+// src/scripts/mcpWorker.ts
 var pause = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 var leaseKey = "worker:lease";
 var LEASE_SECONDS = 15;
@@ -54,7 +161,9 @@ var main = async (options = {}) => {
   const heartbeatValue = () => ({
     observedAt: Date.now(),
     packageManifestSha256: manifestHash,
-    replayAvailable: Boolean(process.env.MCP_REPLAY_REDIS_HOST)
+    replayAvailable: Boolean(
+      process.env.MCP_REPLAY_REDIS_HOST && process.env.MCP_REPLAY_HOST_PROJECT_ROOT && process.env.MCP_REPLAY_NETWORK && process.env.MCP_REPLAY_IMAGE_REPOSITORY
+    )
   });
   const stop = () => {
     stopping = true;
@@ -180,7 +289,37 @@ var main = async (options = {}) => {
           TRADEJS_TIMESCALE_READ_ONLY: "true"
         });
       }
-      child = (0, import_node_child_process.spawn)(process.execPath, [process.argv[1], ...started.args], {
+      let command = {
+        executable: process.execPath,
+        args: [process.argv[1], ...started.args]
+      };
+      try {
+        if (started.kind === "runtime-feedback-replay")
+          command = await buildMcpReplayProcess({
+            evidencePath: String(started.request.verifiedEvidencePath),
+            outDir: (0, import_mcp.mcpJobDirectory)(started),
+            runId: started.id,
+            projectRoot: process.env.PROJECT_CWD || process.cwd(),
+            env: process.env
+          });
+      } catch (error) {
+        await import_redis.mcpStorage.compare(
+          jobKey,
+          started,
+          {
+            ...started,
+            status: "failed",
+            finishedAt: Date.now(),
+            updatedAt: Date.now(),
+            error: error instanceof Error ? error.message : "Replay preparation failed"
+          },
+          import_mcp.MCP_JOB_TTL
+        );
+        continue;
+      }
+      if (started.kind === "runtime-feedback-replay" && process.env.PG_PASSWORD)
+        jobEnv.PG_PASSWORD = process.env.PG_PASSWORD;
+      child = (0, import_node_child_process.spawn)(command.executable, command.args, {
         cwd: process.env.PROJECT_CWD || process.cwd(),
         env: jobEnv,
         detached: process.platform !== "win32",
@@ -234,6 +373,20 @@ var main = async (options = {}) => {
         );
         currentChild.once("exit", (code) => resolve({ code }));
       });
+      if (started.kind === "runtime-feedback-replay") {
+        await new Promise((resolve) => {
+          const cleanup = (0, import_node_child_process.spawn)(
+            "docker",
+            ["rm", "--force", `tradejs-replay-${started.id}`],
+            {
+              stdio: "ignore",
+              timeout: 1e4
+            }
+          );
+          cleanup.once("error", () => resolve());
+          cleanup.once("close", () => resolve());
+        });
+      }
       clearTimeout(timeout);
       clearInterval(monitor);
       child = void 0;