@tradejs/cli 3.1.29-beta.278 → 3.1.29-beta.281

package/dist/cli.js

@@ -24591,8 +24591,11 @@ const path = require('node:path');
 const [root, id, request] = process.argv.slice(1);
 const file = path.join(root, id);
 fs.mkdirSync(root, {recursive:true});
-try { fs.writeFileSync(file + '.request', request, {flag:'wx'}); }
+const temporary = file + '.request.tmp-' + process.pid;
+fs.writeFileSync(temporary, request, {flag:'wx'});
+try { fs.linkSync(temporary, file + '.request'); }
 catch (error) { if (error.code !== 'EEXIST') throw error; if (fs.readFileSync(file + '.request', 'utf8') !== request) throw new Error('Replay request identity conflict'); }
+finally { fs.unlinkSync(temporary); }
 process.on('SIGTERM', () => { fs.writeFileSync(file + '.cancel', 'cancel'); process.exit(143); });
 const timer = setInterval(() => {
   try {
@@ -33075,12 +33078,26 @@ var init_runtimeEvidenceCompositions = __esm({
       const register = (snapshot) => {
         const compositionId = snapshot.deployment.deploymentCompositionId;
         const known = snapshots.get(compositionId);
-        if (known && (stableSnapshotIdentity(known.deployment) !== stableSnapshotIdentity(snapshot.deployment) || producerIdentity(known.producer) !== producerIdentity(snapshot.producer))) {
+        if (known && stableSnapshotIdentity(known.deployment) !== stableSnapshotIdentity(snapshot.deployment)) {
           throw new Error(
             `Conflicting runtime evidence snapshot for composition ${compositionId}`
           );
         }
-        snapshots.set(compositionId, snapshot);
+        const producers = /* @__PURE__ */ new Map();
+        for (const source of [
+          ...known?.producerVariants ?? [],
+          known?.producer,
+          snapshot.producer
+        ]) {
+          if (source) producers.set(producerIdentity(source), source);
+        }
+        const producerVariants = [...producers.values()];
+        snapshots.set(compositionId, {
+          ...known,
+          ...snapshot,
+          producer: producerVariants.length === 1 ? producerVariants[0] : null,
+          ...producerVariants.length > 1 ? { producerVariants } : {}
+        });
       };
       const compositionSnapshots = await discoverRuntimeEvidenceCompositionSnapshots(publishRoot);
       for (const snapshot of compositionSnapshots) {
@@ -33115,7 +33132,7 @@ var init_runtimeEvidenceCompositions = __esm({
           `Current runtime deployment conflicts with stored composition ${currentDeployment.deploymentCompositionId}`
         );
       }
-      snapshots.set(currentDeployment.deploymentCompositionId, {
+      register({
         deployment: { ...currentDeployment, tickers: void 0 },
         producer: currentProducer
       });
@@ -33173,6 +33190,14 @@ var init_runtimeEvidenceCompositions = __esm({
           `Runtime evidence has no verified deployment snapshot for composition(s): ${missing.sort().join(", ")}`
         );
       }
+      for (const compositionId of observed) {
+        const variants = snapshots.get(compositionId)?.producerVariants;
+        if (variants && variants.length > 1) {
+          throw new Error(
+            `Ambiguous runtime evidence producer for composition ${compositionId}: ${variants.map((source) => `${source.projectSha}@${source.imageDigest}`).sort().join(", ")}; runtime lineage has no producer image identity`
+          );
+        }
+      }
       return [...observed].filter((compositionId) => snapshots.has(compositionId)).map((compositionId) => snapshots.get(compositionId)).map(({ deployment, producer, fallbackTickers }) => {
         const trades = evidence.trades.filter(
           (row) => belongsToSnapshot(row, deployment)

package/dist/lib/mcpReplayProcess.js

@@ -49,8 +49,11 @@ const path = require('node:path');
 const [root, id, request] = process.argv.slice(1);
 const file = path.join(root, id);
 fs.mkdirSync(root, {recursive:true});
-try { fs.writeFileSync(file + '.request', request, {flag:'wx'}); }
+const temporary = file + '.request.tmp-' + process.pid;
+fs.writeFileSync(temporary, request, {flag:'wx'});
+try { fs.linkSync(temporary, file + '.request'); }
 catch (error) { if (error.code !== 'EEXIST') throw error; if (fs.readFileSync(file + '.request', 'utf8') !== request) throw new Error('Replay request identity conflict'); }
+finally { fs.unlinkSync(temporary); }
 process.on('SIGTERM', () => { fs.writeFileSync(file + '.cancel', 'cancel'); process.exit(143); });
 const timer = setInterval(() => {
   try {

package/dist/lib/runtimeEvidenceCompositions.js

@@ -143,12 +143,26 @@ var loadRuntimeEvidenceCompositionSnapshots = async ({
   const register = (snapshot) => {
     const compositionId = snapshot.deployment.deploymentCompositionId;
     const known = snapshots.get(compositionId);
-    if (known && (stableSnapshotIdentity(known.deployment) !== stableSnapshotIdentity(snapshot.deployment) || producerIdentity(known.producer) !== producerIdentity(snapshot.producer))) {
+    if (known && stableSnapshotIdentity(known.deployment) !== stableSnapshotIdentity(snapshot.deployment)) {
       throw new Error(
         `Conflicting runtime evidence snapshot for composition ${compositionId}`
       );
     }
-    snapshots.set(compositionId, snapshot);
+    const producers = /* @__PURE__ */ new Map();
+    for (const source of [
+      ...known?.producerVariants ?? [],
+      known?.producer,
+      snapshot.producer
+    ]) {
+      if (source) producers.set(producerIdentity(source), source);
+    }
+    const producerVariants = [...producers.values()];
+    snapshots.set(compositionId, {
+      ...known,
+      ...snapshot,
+      producer: producerVariants.length === 1 ? producerVariants[0] : null,
+      ...producerVariants.length > 1 ? { producerVariants } : {}
+    });
   };
   const compositionSnapshots = await discoverRuntimeEvidenceCompositionSnapshots(publishRoot);
   for (const snapshot of compositionSnapshots) {
@@ -183,7 +197,7 @@ var loadRuntimeEvidenceCompositionSnapshots = async ({
       `Current runtime deployment conflicts with stored composition ${currentDeployment.deploymentCompositionId}`
     );
   }
-  snapshots.set(currentDeployment.deploymentCompositionId, {
+  register({
     deployment: { ...currentDeployment, tickers: void 0 },
     producer: currentProducer
   });
@@ -241,6 +255,14 @@ var splitRuntimeEvidenceByComposition = ({
       `Runtime evidence has no verified deployment snapshot for composition(s): ${missing.sort().join(", ")}`
     );
   }
+  for (const compositionId of observed) {
+    const variants = snapshots.get(compositionId)?.producerVariants;
+    if (variants && variants.length > 1) {
+      throw new Error(
+        `Ambiguous runtime evidence producer for composition ${compositionId}: ${variants.map((source) => `${source.projectSha}@${source.imageDigest}`).sort().join(", ")}; runtime lineage has no producer image identity`
+      );
+    }
+  }
   return [...observed].filter((compositionId) => snapshots.has(compositionId)).map((compositionId) => snapshots.get(compositionId)).map(({ deployment, producer, fallbackTickers }) => {
     const trades = evidence.trades.filter(
       (row) => belongsToSnapshot(row, deployment)

package/dist/scripts/mcpWorker.js

@@ -56,8 +56,11 @@ const path = require('node:path');
 const [root, id, request] = process.argv.slice(1);
 const file = path.join(root, id);
 fs.mkdirSync(root, {recursive:true});
-try { fs.writeFileSync(file + '.request', request, {flag:'wx'}); }
+const temporary = file + '.request.tmp-' + process.pid;
+fs.writeFileSync(temporary, request, {flag:'wx'});
+try { fs.linkSync(temporary, file + '.request'); }
 catch (error) { if (error.code !== 'EEXIST') throw error; if (fs.readFileSync(file + '.request', 'utf8') !== request) throw new Error('Replay request identity conflict'); }
+finally { fs.unlinkSync(temporary); }
 process.on('SIGTERM', () => { fs.writeFileSync(file + '.cancel', 'cancel'); process.exit(143); });
 const timer = setInterval(() => {
   try {

package/dist/scripts/runtimeEvidence.js

@@ -491,12 +491,26 @@ var loadRuntimeEvidenceCompositionSnapshots = async ({
   const register = (snapshot) => {
     const compositionId = snapshot.deployment.deploymentCompositionId;
     const known = snapshots.get(compositionId);
-    if (known && (stableSnapshotIdentity(known.deployment) !== stableSnapshotIdentity(snapshot.deployment) || producerIdentity(known.producer) !== producerIdentity(snapshot.producer))) {
+    if (known && stableSnapshotIdentity(known.deployment) !== stableSnapshotIdentity(snapshot.deployment)) {
       throw new Error(
         `Conflicting runtime evidence snapshot for composition ${compositionId}`
       );
     }
-    snapshots.set(compositionId, snapshot);
+    const producers = /* @__PURE__ */ new Map();
+    for (const source of [
+      ...known?.producerVariants ?? [],
+      known?.producer,
+      snapshot.producer
+    ]) {
+      if (source) producers.set(producerIdentity(source), source);
+    }
+    const producerVariants = [...producers.values()];
+    snapshots.set(compositionId, {
+      ...known,
+      ...snapshot,
+      producer: producerVariants.length === 1 ? producerVariants[0] : null,
+      ...producerVariants.length > 1 ? { producerVariants } : {}
+    });
   };
   const compositionSnapshots = await discoverRuntimeEvidenceCompositionSnapshots(publishRoot);
   for (const snapshot of compositionSnapshots) {
@@ -531,7 +545,7 @@ var loadRuntimeEvidenceCompositionSnapshots = async ({
       `Current runtime deployment conflicts with stored composition ${currentDeployment.deploymentCompositionId}`
     );
   }
-  snapshots.set(currentDeployment.deploymentCompositionId, {
+  register({
     deployment: { ...currentDeployment, tickers: void 0 },
     producer: currentProducer
   });
@@ -589,6 +603,14 @@ var splitRuntimeEvidenceByComposition = ({
       `Runtime evidence has no verified deployment snapshot for composition(s): ${missing.sort().join(", ")}`
     );
   }
+  for (const compositionId of observed) {
+    const variants = snapshots.get(compositionId)?.producerVariants;
+    if (variants && variants.length > 1) {
+      throw new Error(
+        `Ambiguous runtime evidence producer for composition ${compositionId}: ${variants.map((source) => `${source.projectSha}@${source.imageDigest}`).sort().join(", ")}; runtime lineage has no producer image identity`
+      );
+    }
+  }
   return [...observed].filter((compositionId) => snapshots.has(compositionId)).map((compositionId) => snapshots.get(compositionId)).map(({ deployment, producer, fallbackTickers }) => {
     const trades = evidence.trades.filter(
       (row) => belongsToSnapshot(row, deployment)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tradejs/cli",
-  "version": "3.1.29-beta.278",
+  "version": "3.1.29-beta.281",
   "description": "Official CLI for the TradeJS TypeScript framework: infra setup, backtests, signals, bots, and ML workflows.",
   "keywords": [
     "tradejs",
@@ -37,13 +37,13 @@
     "tradejs": "dist/cli.js"
   },
   "dependencies": {
-    "@tradejs/connectors": "^3.1.29-beta.278",
-    "@tradejs/core": "^3.1.29-beta.278",
-    "@tradejs/indicators": "^3.1.29-beta.278",
-    "@tradejs/infra": "^3.1.29-beta.278",
-    "@tradejs/node": "^3.1.29-beta.278",
+    "@tradejs/connectors": "^3.1.29-beta.281",
+    "@tradejs/core": "^3.1.29-beta.281",
+    "@tradejs/indicators": "^3.1.29-beta.281",
+    "@tradejs/infra": "^3.1.29-beta.281",
+    "@tradejs/node": "^3.1.29-beta.281",
     "@tradejs/strategy-kit": "3.0.6",
-    "@tradejs/types": "^3.1.29-beta.278",
+    "@tradejs/types": "^3.1.29-beta.281",
     "args": "^5.0.3",
     "bcryptjs": "^2.4.3",
     "chalk": "4.1.2",