@tradejs/infra 2.0.19 → 2.0.21

package/dist/ai.js

@@ -134,21 +134,32 @@ var getRunIdFromAiChunkFileName = (strategyName, fileName) => {
 var appendAiDatasetRow = async (params) => {
   const { strategyName, chunkId, row, outDir = DEFAULT_DIR } = params;
   const filePath = getAiChunkFilePath(strategyName, chunkId, outDir);
-  let state = writerByPath.get(filePath);
-  if (!state) {
-    await import_promises2.default.mkdir(outDir, { recursive: true });
-    const stream = (0, import_fs2.createWriteStream)(filePath, {
-      encoding: "utf8",
-      flags: "a"
-    });
-    state = {
-      filePath,
-      stream,
-      buffer: [],
-      writeQueue: Promise.resolve(),
-      closed: false
-    };
-    writerByPath.set(filePath, state);
+  let statePromise = writerByPath.get(filePath);
+  if (!statePromise) {
+    statePromise = (async () => {
+      await import_promises2.default.mkdir(outDir, { recursive: true });
+      const stream = (0, import_fs2.createWriteStream)(filePath, {
+        encoding: "utf8",
+        flags: "a"
+      });
+      return {
+        filePath,
+        stream,
+        buffer: [],
+        writeQueue: Promise.resolve(),
+        closed: false
+      };
+    })();
+    writerByPath.set(filePath, statePromise);
+  }
+  let state;
+  try {
+    state = await statePromise;
+  } catch (error) {
+    if (writerByPath.get(filePath) === statePromise) {
+      writerByPath.delete(filePath);
+    }
+    throw error;
   }
   if (state.closed) {
     throw new Error(`AI dataset writer is closed: ${filePath}`);
@@ -171,10 +182,12 @@ var flushState = async (state) => {
   }
 };
 var flushAiDatasetWriter = async (filePath) => {
-  const state = writerByPath.get(filePath);
-  if (!state || state.closed) {
+  const statePromise = writerByPath.get(filePath);
+  if (!statePromise) {
     return;
   }
+  const state = await statePromise;
+  if (state.closed) return;
   state.writeQueue = state.writeQueue.then(() => flushState(state));
   await state.writeQueue;
 };
@@ -191,13 +204,16 @@ var closeState = async (state) => {
   ]);
 };
 var closeAiDatasetWriter = async (filePath) => {
-  const state = writerByPath.get(filePath);
-  if (!state) {
+  const statePromise = writerByPath.get(filePath);
+  if (!statePromise) {
     return;
   }
+  const state = await statePromise;
   state.writeQueue = state.writeQueue.then(() => closeState(state));
   await state.writeQueue;
-  writerByPath.delete(filePath);
+  if (writerByPath.get(filePath) === statePromise) {
+    writerByPath.delete(filePath);
+  }
 };
 var closeAllAiDatasetWriters = async () => {
   const filePaths = [...writerByPath.keys()];

package/dist/ai.mjs

@@ -35,21 +35,32 @@ var getRunIdFromAiChunkFileName = (strategyName, fileName) => {
 var appendAiDatasetRow = async (params) => {
   const { strategyName, chunkId, row, outDir = DEFAULT_DIR } = params;
   const filePath = getAiChunkFilePath(strategyName, chunkId, outDir);
-  let state = writerByPath.get(filePath);
-  if (!state) {
-    await fs.mkdir(outDir, { recursive: true });
-    const stream = createWriteStream(filePath, {
-      encoding: "utf8",
-      flags: "a"
-    });
-    state = {
-      filePath,
-      stream,
-      buffer: [],
-      writeQueue: Promise.resolve(),
-      closed: false
-    };
-    writerByPath.set(filePath, state);
+  let statePromise = writerByPath.get(filePath);
+  if (!statePromise) {
+    statePromise = (async () => {
+      await fs.mkdir(outDir, { recursive: true });
+      const stream = createWriteStream(filePath, {
+        encoding: "utf8",
+        flags: "a"
+      });
+      return {
+        filePath,
+        stream,
+        buffer: [],
+        writeQueue: Promise.resolve(),
+        closed: false
+      };
+    })();
+    writerByPath.set(filePath, statePromise);
+  }
+  let state;
+  try {
+    state = await statePromise;
+  } catch (error) {
+    if (writerByPath.get(filePath) === statePromise) {
+      writerByPath.delete(filePath);
+    }
+    throw error;
   }
   if (state.closed) {
     throw new Error(`AI dataset writer is closed: ${filePath}`);
@@ -72,10 +83,12 @@ var flushState = async (state) => {
   }
 };
 var flushAiDatasetWriter = async (filePath) => {
-  const state = writerByPath.get(filePath);
-  if (!state || state.closed) {
+  const statePromise = writerByPath.get(filePath);
+  if (!statePromise) {
     return;
   }
+  const state = await statePromise;
+  if (state.closed) return;
   state.writeQueue = state.writeQueue.then(() => flushState(state));
   await state.writeQueue;
 };
@@ -92,13 +105,16 @@ var closeState = async (state) => {
   ]);
 };
 var closeAiDatasetWriter = async (filePath) => {
-  const state = writerByPath.get(filePath);
-  if (!state) {
+  const statePromise = writerByPath.get(filePath);
+  if (!statePromise) {
     return;
   }
+  const state = await statePromise;
   state.writeQueue = state.writeQueue.then(() => closeState(state));
   await state.writeQueue;
-  writerByPath.delete(filePath);
+  if (writerByPath.get(filePath) === statePromise) {
+    writerByPath.delete(filePath);
+  }
 };
 var closeAllAiDatasetWriters = async () => {
   const filePaths = [...writerByPath.keys()];

package/dist/coreResearch.d.mts

@@ -0,0 +1,20 @@
+import { CoreResearchTraceEvent } from '@tradejs/types';
+
+declare const getCoreResearchTraceFilePath: (params: {
+    strategyName: string;
+    chunkId: string;
+    outDir?: string;
+}) => string;
+declare const listCoreResearchTraceFiles: (params: {
+    strategyName: string;
+    runId: string;
+    outDir?: string;
+}) => Promise<string[]>;
+declare const appendCoreResearchTraceEvent: (params: {
+    strategyName: string;
+    chunkId: string;
+    event: CoreResearchTraceEvent;
+    outDir?: string;
+}) => Promise<string>;
+
+export { appendCoreResearchTraceEvent, getCoreResearchTraceFilePath, listCoreResearchTraceFiles };

package/dist/coreResearch.d.ts

@@ -0,0 +1,20 @@
+import { CoreResearchTraceEvent } from '@tradejs/types';
+
+declare const getCoreResearchTraceFilePath: (params: {
+    strategyName: string;
+    chunkId: string;
+    outDir?: string;
+}) => string;
+declare const listCoreResearchTraceFiles: (params: {
+    strategyName: string;
+    runId: string;
+    outDir?: string;
+}) => Promise<string[]>;
+declare const appendCoreResearchTraceEvent: (params: {
+    strategyName: string;
+    chunkId: string;
+    event: CoreResearchTraceEvent;
+    outDir?: string;
+}) => Promise<string>;
+
+export { appendCoreResearchTraceEvent, getCoreResearchTraceFilePath, listCoreResearchTraceFiles };

package/dist/coreResearch.js

@@ -0,0 +1,89 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/coreResearch.ts
+var coreResearch_exports = {};
+__export(coreResearch_exports, {
+  appendCoreResearchTraceEvent: () => appendCoreResearchTraceEvent,
+  getCoreResearchTraceFilePath: () => getCoreResearchTraceFilePath,
+  listCoreResearchTraceFiles: () => listCoreResearchTraceFiles
+});
+module.exports = __toCommonJS(coreResearch_exports);
+
+// src/coreResearchTraceFile.ts
+var import_promises = __toESM(require("fs/promises"));
+var import_node_path = __toESM(require("path"));
+
+// src/mlDatasetFile.ts
+var import_node_readline = __toESM(require("readline"));
+var toFileToken = (value) => value.trim().toLowerCase().replace(/[^a-z0-9_-]+/g, "_").replace(/^_+|_+$/g, "") || "any";
+
+// src/coreResearchTraceFile.ts
+var DEFAULT_DIR = "data/research/core/trace";
+var queueByPath = /* @__PURE__ */ new Map();
+var getCoreResearchTraceFilePath = (params) => import_node_path.default.join(
+  params.outDir ?? DEFAULT_DIR,
+  `core-research-trace-${toFileToken(params.strategyName)}-chunk-${toFileToken(params.chunkId)}.jsonl`
+);
+var listCoreResearchTraceFiles = async (params) => {
+  const outDir = import_node_path.default.resolve(params.outDir ?? DEFAULT_DIR);
+  let names = [];
+  try {
+    names = await import_promises.default.readdir(outDir);
+  } catch (error) {
+    if (error.code === "ENOENT") return [];
+    throw error;
+  }
+  const prefix = `core-research-trace-${toFileToken(params.strategyName)}-chunk-`;
+  return names.filter(
+    (name) => name.startsWith(prefix) && name.includes(toFileToken(params.runId)) && name.endsWith(".jsonl")
+  ).sort((left, right) => left < right ? -1 : left > right ? 1 : 0).map((name) => import_node_path.default.join(outDir, name));
+};
+var appendCoreResearchTraceEvent = async (params) => {
+  const filePath = getCoreResearchTraceFilePath(params);
+  const previous = queueByPath.get(filePath) ?? Promise.resolve();
+  const next = previous.then(async () => {
+    await import_promises.default.mkdir(import_node_path.default.dirname(filePath), { recursive: true });
+    await import_promises.default.appendFile(filePath, `${JSON.stringify(params.event)}
+`, "utf8");
+  });
+  queueByPath.set(filePath, next);
+  try {
+    await next;
+  } finally {
+    if (queueByPath.get(filePath) === next) queueByPath.delete(filePath);
+  }
+  return filePath;
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  appendCoreResearchTraceEvent,
+  getCoreResearchTraceFilePath,
+  listCoreResearchTraceFiles
+});

package/dist/coreResearch.mjs

@@ -0,0 +1,48 @@
+import {
+  toFileToken
+} from "./chunk-RQP5VSTH.mjs";
+
+// src/coreResearchTraceFile.ts
+import fs from "fs/promises";
+import path from "path";
+var DEFAULT_DIR = "data/research/core/trace";
+var queueByPath = /* @__PURE__ */ new Map();
+var getCoreResearchTraceFilePath = (params) => path.join(
+  params.outDir ?? DEFAULT_DIR,
+  `core-research-trace-${toFileToken(params.strategyName)}-chunk-${toFileToken(params.chunkId)}.jsonl`
+);
+var listCoreResearchTraceFiles = async (params) => {
+  const outDir = path.resolve(params.outDir ?? DEFAULT_DIR);
+  let names = [];
+  try {
+    names = await fs.readdir(outDir);
+  } catch (error) {
+    if (error.code === "ENOENT") return [];
+    throw error;
+  }
+  const prefix = `core-research-trace-${toFileToken(params.strategyName)}-chunk-`;
+  return names.filter(
+    (name) => name.startsWith(prefix) && name.includes(toFileToken(params.runId)) && name.endsWith(".jsonl")
+  ).sort((left, right) => left < right ? -1 : left > right ? 1 : 0).map((name) => path.join(outDir, name));
+};
+var appendCoreResearchTraceEvent = async (params) => {
+  const filePath = getCoreResearchTraceFilePath(params);
+  const previous = queueByPath.get(filePath) ?? Promise.resolve();
+  const next = previous.then(async () => {
+    await fs.mkdir(path.dirname(filePath), { recursive: true });
+    await fs.appendFile(filePath, `${JSON.stringify(params.event)}
+`, "utf8");
+  });
+  queueByPath.set(filePath, next);
+  try {
+    await next;
+  } finally {
+    if (queueByPath.get(filePath) === next) queueByPath.delete(filePath);
+  }
+  return filePath;
+};
+export {
+  appendCoreResearchTraceEvent,
+  getCoreResearchTraceFilePath,
+  listCoreResearchTraceFiles
+};

package/dist/ml.mjs

@@ -1,3 +1,6 @@
+import {
+  logger
+} from "./chunk-LNFUOXDW.mjs";
 import {
   appendMlDatasetRow,
   closeAllMlDatasetWriters,
@@ -10,9 +13,6 @@ import {
   mergeJsonlFiles,
   toFileToken
 } from "./chunk-RQP5VSTH.mjs";
-import {
-  logger
-} from "./chunk-LNFUOXDW.mjs";
 
 // src/mlGrpc.ts
 import path from "path";

package/dist/strategyReleaseEvidence.d.mts

@@ -0,0 +1,17 @@
+import { StrategyEvidenceMarkerPayload, StrategyEvidenceMarkerEnvelope } from '@tradejs/types';
+
+declare const canonicalStrategyEvidenceJson: (value: unknown) => string;
+declare const strategyEvidenceSha256: (value: unknown) => string;
+declare const strategyEvidenceFingerprint: (value: unknown) => string;
+/**
+ * Fingerprints strategy decision semantics without local/runtime bindings,
+ * credentials, config identity, or position-risk scale.
+ */
+declare const strategyLogicConfigFingerprint: (value: unknown) => string;
+declare const strategyEvidenceFileSha256: (filePath: string) => Promise<string>;
+declare const safeStrategyEvidenceSegment: (value: string, fallback?: string) => string;
+declare const compactStrategyEvidenceTimestamp: (timestamp: number) => string;
+declare const createStrategyEvidenceMarkerEnvelope: (payload: StrategyEvidenceMarkerPayload) => StrategyEvidenceMarkerEnvelope;
+declare const verifyStrategyEvidenceMarkerEnvelope: (value: unknown) => StrategyEvidenceMarkerEnvelope;
+
+export { canonicalStrategyEvidenceJson, compactStrategyEvidenceTimestamp, createStrategyEvidenceMarkerEnvelope, safeStrategyEvidenceSegment, strategyEvidenceFileSha256, strategyEvidenceFingerprint, strategyEvidenceSha256, strategyLogicConfigFingerprint, verifyStrategyEvidenceMarkerEnvelope };

package/dist/strategyReleaseEvidence.d.ts

@@ -0,0 +1,17 @@
+import { StrategyEvidenceMarkerPayload, StrategyEvidenceMarkerEnvelope } from '@tradejs/types';
+
+declare const canonicalStrategyEvidenceJson: (value: unknown) => string;
+declare const strategyEvidenceSha256: (value: unknown) => string;
+declare const strategyEvidenceFingerprint: (value: unknown) => string;
+/**
+ * Fingerprints strategy decision semantics without local/runtime bindings,
+ * credentials, config identity, or position-risk scale.
+ */
+declare const strategyLogicConfigFingerprint: (value: unknown) => string;
+declare const strategyEvidenceFileSha256: (filePath: string) => Promise<string>;
+declare const safeStrategyEvidenceSegment: (value: string, fallback?: string) => string;
+declare const compactStrategyEvidenceTimestamp: (timestamp: number) => string;
+declare const createStrategyEvidenceMarkerEnvelope: (payload: StrategyEvidenceMarkerPayload) => StrategyEvidenceMarkerEnvelope;
+declare const verifyStrategyEvidenceMarkerEnvelope: (value: unknown) => StrategyEvidenceMarkerEnvelope;
+
+export { canonicalStrategyEvidenceJson, compactStrategyEvidenceTimestamp, createStrategyEvidenceMarkerEnvelope, safeStrategyEvidenceSegment, strategyEvidenceFileSha256, strategyEvidenceFingerprint, strategyEvidenceSha256, strategyLogicConfigFingerprint, verifyStrategyEvidenceMarkerEnvelope };

package/dist/strategyReleaseEvidence.js

@@ -0,0 +1,140 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/strategyReleaseEvidence.ts
+var strategyReleaseEvidence_exports = {};
+__export(strategyReleaseEvidence_exports, {
+  canonicalStrategyEvidenceJson: () => canonicalStrategyEvidenceJson,
+  compactStrategyEvidenceTimestamp: () => compactStrategyEvidenceTimestamp,
+  createStrategyEvidenceMarkerEnvelope: () => createStrategyEvidenceMarkerEnvelope,
+  safeStrategyEvidenceSegment: () => safeStrategyEvidenceSegment,
+  strategyEvidenceFileSha256: () => strategyEvidenceFileSha256,
+  strategyEvidenceFingerprint: () => strategyEvidenceFingerprint,
+  strategyEvidenceSha256: () => strategyEvidenceSha256,
+  strategyLogicConfigFingerprint: () => strategyLogicConfigFingerprint,
+  verifyStrategyEvidenceMarkerEnvelope: () => verifyStrategyEvidenceMarkerEnvelope
+});
+module.exports = __toCommonJS(strategyReleaseEvidence_exports);
+var import_node_crypto = require("crypto");
+var import_node_fs = require("fs");
+var import_types = require("@tradejs/types");
+var SHA256_RE = /^[a-f0-9]{64}$/;
+var LINEAGE_FINGERPRINT_RE = /^[a-f0-9]{16}$/;
+var MARKER_TYPES = /* @__PURE__ */ new Set([
+  "G",
+  "L",
+  "E",
+  "D",
+  "P",
+  "R"
+]);
+var STRATEGY_LOGIC_BINDING_KEYS = /* @__PURE__ */ new Set([
+  "ACCOUNT_ID",
+  "DEPLOYMENT_ID",
+  "MAX_LOSS_VALUE",
+  "configId"
+]);
+var SECRET_CONFIG_KEY_RE = /(?:^|_)(?:API_KEY|API_SECRET|TOKEN|PASSWORD|PRIVATE_KEY)$/i;
+var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+var isString = (value) => typeof value === "string" && value.trim().length > 0;
+var isNumber = (value) => typeof value === "number" && Number.isFinite(value);
+var canonicalStrategyEvidenceJson = (value) => {
+  const normalize = (current) => {
+    if (Array.isArray(current)) return current.map(normalize);
+    const record = asRecord(current);
+    if (!record) return current;
+    return Object.fromEntries(
+      Object.entries(record).filter(([, entry]) => entry !== void 0).sort(([left], [right]) => left.localeCompare(right)).map(([key, entry]) => [key, normalize(entry)])
+    );
+  };
+  return JSON.stringify(normalize(value));
+};
+var strategyEvidenceSha256 = (value) => (0, import_node_crypto.createHash)("sha256").update(canonicalStrategyEvidenceJson(value)).digest("hex");
+var strategyEvidenceFingerprint = (value) => strategyEvidenceSha256(value).slice(0, 16);
+var normalizeStrategyLogicConfig = (value) => {
+  if (Array.isArray(value)) return value.map(normalizeStrategyLogicConfig);
+  const record = asRecord(value);
+  if (!record) return value;
+  return Object.fromEntries(
+    Object.entries(record).filter(
+      ([key]) => !STRATEGY_LOGIC_BINDING_KEYS.has(key) && !SECRET_CONFIG_KEY_RE.test(key)
+    ).sort(([left], [right]) => left.localeCompare(right)).map(([key, entry]) => [key, normalizeStrategyLogicConfig(entry)])
+  );
+};
+var strategyLogicConfigFingerprint = (value) => strategyEvidenceFingerprint(normalizeStrategyLogicConfig(value));
+var strategyEvidenceFileSha256 = async (filePath) => {
+  const hash = (0, import_node_crypto.createHash)("sha256");
+  for await (const chunk of (0, import_node_fs.createReadStream)(filePath)) hash.update(chunk);
+  return hash.digest("hex");
+};
+var safeStrategyEvidenceSegment = (value, fallback = "strategy") => {
+  const safe = value.trim().replace(/[^a-zA-Z0-9._-]+/g, "-");
+  return safe && safe !== "." && safe !== ".." ? safe : fallback;
+};
+var compactStrategyEvidenceTimestamp = (timestamp) => new Date(timestamp).toISOString().replace(/[-:]/g, "").replace(/\.000Z$/, "Z");
+var createStrategyEvidenceMarkerEnvelope = (payload) => {
+  const payloadSha256 = strategyEvidenceSha256(payload);
+  return {
+    schema: import_types.STRATEGY_EVIDENCE_MARKERS_SCHEMA,
+    artifactId: `${safeStrategyEvidenceSegment(payload.strategy)}_${compactStrategyEvidenceTimestamp(payload.createdAt)}_${payloadSha256.slice(0, 16)}`,
+    payloadSha256,
+    payload
+  };
+};
+var verifyStrategyEvidenceMarkerEnvelope = (value) => {
+  const envelope = asRecord(value);
+  const payload = asRecord(envelope?.payload);
+  if (envelope?.schema !== import_types.STRATEGY_EVIDENCE_MARKERS_SCHEMA || !isString(envelope.artifactId) || !isString(envelope.payloadSha256) || !SHA256_RE.test(envelope.payloadSha256) || !payload || !isString(payload.strategy) || !isNumber(payload.createdAt) || !Array.isArray(payload.markers) || !Array.isArray(payload.sourceArtifacts)) {
+    throw new Error("Invalid strategy evidence marker envelope");
+  }
+  for (const value2 of payload.markers) {
+    const marker = asRecord(value2);
+    const coverage = asRecord(marker?.coverage);
+    if (!marker || !isString(marker.id) || !isString(marker.type) || !MARKER_TYPES.has(marker.type) || !isNumber(marker.timestamp) || !isString(marker.label) || !isString(marker.summary) || !isString(marker.artifactId) || !isString(marker.artifactSha256) || !SHA256_RE.test(marker.artifactSha256) || marker.gitSha !== void 0 && !isString(marker.gitSha) || marker.gateFingerprint !== void 0 && (!isString(marker.gateFingerprint) || !LINEAGE_FINGERPRINT_RE.test(marker.gateFingerprint)) || marker.configFingerprint !== void 0 && (!isString(marker.configFingerprint) || !LINEAGE_FINGERPRINT_RE.test(marker.configFingerprint)) || marker.contextFingerprint !== void 0 && (!isString(marker.contextFingerprint) || !LINEAGE_FINGERPRINT_RE.test(marker.contextFingerprint)) || marker.maxLossValue !== void 0 && !isNumber(marker.maxLossValue) || marker.coverage !== void 0 && (!coverage || !isNumber(coverage.startTime) || !isNumber(coverage.endTime) || coverage.startTime > coverage.endTime)) {
+      throw new Error("Invalid strategy evidence marker");
+    }
+  }
+  for (const value2 of payload.sourceArtifacts) {
+    const artifact = asRecord(value2);
+    if (!artifact || !isString(artifact.artifactId) || !isString(artifact.sha256) || !SHA256_RE.test(artifact.sha256) || artifact.path !== void 0 && typeof artifact.path !== "string") {
+      throw new Error("Invalid strategy evidence source artifact");
+    }
+  }
+  const payloadSha256 = strategyEvidenceSha256(payload);
+  if (payloadSha256 !== envelope.payloadSha256) {
+    throw new Error("Strategy evidence marker checksum mismatch");
+  }
+  const expectedId = `${safeStrategyEvidenceSegment(payload.strategy)}_${compactStrategyEvidenceTimestamp(payload.createdAt)}_${payloadSha256.slice(0, 16)}`;
+  if (expectedId !== envelope.artifactId) {
+    throw new Error("Strategy evidence marker artifact identity mismatch");
+  }
+  return value;
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  canonicalStrategyEvidenceJson,
+  compactStrategyEvidenceTimestamp,
+  createStrategyEvidenceMarkerEnvelope,
+  safeStrategyEvidenceSegment,
+  strategyEvidenceFileSha256,
+  strategyEvidenceFingerprint,
+  strategyEvidenceSha256,
+  strategyLogicConfigFingerprint,
+  verifyStrategyEvidenceMarkerEnvelope
+});

package/dist/strategyReleaseEvidence.mjs

@@ -0,0 +1,109 @@
+// src/strategyReleaseEvidence.ts
+import { createHash } from "crypto";
+import { createReadStream } from "fs";
+import {
+  STRATEGY_EVIDENCE_MARKERS_SCHEMA
+} from "@tradejs/types";
+var SHA256_RE = /^[a-f0-9]{64}$/;
+var LINEAGE_FINGERPRINT_RE = /^[a-f0-9]{16}$/;
+var MARKER_TYPES = /* @__PURE__ */ new Set([
+  "G",
+  "L",
+  "E",
+  "D",
+  "P",
+  "R"
+]);
+var STRATEGY_LOGIC_BINDING_KEYS = /* @__PURE__ */ new Set([
+  "ACCOUNT_ID",
+  "DEPLOYMENT_ID",
+  "MAX_LOSS_VALUE",
+  "configId"
+]);
+var SECRET_CONFIG_KEY_RE = /(?:^|_)(?:API_KEY|API_SECRET|TOKEN|PASSWORD|PRIVATE_KEY)$/i;
+var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+var isString = (value) => typeof value === "string" && value.trim().length > 0;
+var isNumber = (value) => typeof value === "number" && Number.isFinite(value);
+var canonicalStrategyEvidenceJson = (value) => {
+  const normalize = (current) => {
+    if (Array.isArray(current)) return current.map(normalize);
+    const record = asRecord(current);
+    if (!record) return current;
+    return Object.fromEntries(
+      Object.entries(record).filter(([, entry]) => entry !== void 0).sort(([left], [right]) => left.localeCompare(right)).map(([key, entry]) => [key, normalize(entry)])
+    );
+  };
+  return JSON.stringify(normalize(value));
+};
+var strategyEvidenceSha256 = (value) => createHash("sha256").update(canonicalStrategyEvidenceJson(value)).digest("hex");
+var strategyEvidenceFingerprint = (value) => strategyEvidenceSha256(value).slice(0, 16);
+var normalizeStrategyLogicConfig = (value) => {
+  if (Array.isArray(value)) return value.map(normalizeStrategyLogicConfig);
+  const record = asRecord(value);
+  if (!record) return value;
+  return Object.fromEntries(
+    Object.entries(record).filter(
+      ([key]) => !STRATEGY_LOGIC_BINDING_KEYS.has(key) && !SECRET_CONFIG_KEY_RE.test(key)
+    ).sort(([left], [right]) => left.localeCompare(right)).map(([key, entry]) => [key, normalizeStrategyLogicConfig(entry)])
+  );
+};
+var strategyLogicConfigFingerprint = (value) => strategyEvidenceFingerprint(normalizeStrategyLogicConfig(value));
+var strategyEvidenceFileSha256 = async (filePath) => {
+  const hash = createHash("sha256");
+  for await (const chunk of createReadStream(filePath)) hash.update(chunk);
+  return hash.digest("hex");
+};
+var safeStrategyEvidenceSegment = (value, fallback = "strategy") => {
+  const safe = value.trim().replace(/[^a-zA-Z0-9._-]+/g, "-");
+  return safe && safe !== "." && safe !== ".." ? safe : fallback;
+};
+var compactStrategyEvidenceTimestamp = (timestamp) => new Date(timestamp).toISOString().replace(/[-:]/g, "").replace(/\.000Z$/, "Z");
+var createStrategyEvidenceMarkerEnvelope = (payload) => {
+  const payloadSha256 = strategyEvidenceSha256(payload);
+  return {
+    schema: STRATEGY_EVIDENCE_MARKERS_SCHEMA,
+    artifactId: `${safeStrategyEvidenceSegment(payload.strategy)}_${compactStrategyEvidenceTimestamp(payload.createdAt)}_${payloadSha256.slice(0, 16)}`,
+    payloadSha256,
+    payload
+  };
+};
+var verifyStrategyEvidenceMarkerEnvelope = (value) => {
+  const envelope = asRecord(value);
+  const payload = asRecord(envelope?.payload);
+  if (envelope?.schema !== STRATEGY_EVIDENCE_MARKERS_SCHEMA || !isString(envelope.artifactId) || !isString(envelope.payloadSha256) || !SHA256_RE.test(envelope.payloadSha256) || !payload || !isString(payload.strategy) || !isNumber(payload.createdAt) || !Array.isArray(payload.markers) || !Array.isArray(payload.sourceArtifacts)) {
+    throw new Error("Invalid strategy evidence marker envelope");
+  }
+  for (const value2 of payload.markers) {
+    const marker = asRecord(value2);
+    const coverage = asRecord(marker?.coverage);
+    if (!marker || !isString(marker.id) || !isString(marker.type) || !MARKER_TYPES.has(marker.type) || !isNumber(marker.timestamp) || !isString(marker.label) || !isString(marker.summary) || !isString(marker.artifactId) || !isString(marker.artifactSha256) || !SHA256_RE.test(marker.artifactSha256) || marker.gitSha !== void 0 && !isString(marker.gitSha) || marker.gateFingerprint !== void 0 && (!isString(marker.gateFingerprint) || !LINEAGE_FINGERPRINT_RE.test(marker.gateFingerprint)) || marker.configFingerprint !== void 0 && (!isString(marker.configFingerprint) || !LINEAGE_FINGERPRINT_RE.test(marker.configFingerprint)) || marker.contextFingerprint !== void 0 && (!isString(marker.contextFingerprint) || !LINEAGE_FINGERPRINT_RE.test(marker.contextFingerprint)) || marker.maxLossValue !== void 0 && !isNumber(marker.maxLossValue) || marker.coverage !== void 0 && (!coverage || !isNumber(coverage.startTime) || !isNumber(coverage.endTime) || coverage.startTime > coverage.endTime)) {
+      throw new Error("Invalid strategy evidence marker");
+    }
+  }
+  for (const value2 of payload.sourceArtifacts) {
+    const artifact = asRecord(value2);
+    if (!artifact || !isString(artifact.artifactId) || !isString(artifact.sha256) || !SHA256_RE.test(artifact.sha256) || artifact.path !== void 0 && typeof artifact.path !== "string") {
+      throw new Error("Invalid strategy evidence source artifact");
+    }
+  }
+  const payloadSha256 = strategyEvidenceSha256(payload);
+  if (payloadSha256 !== envelope.payloadSha256) {
+    throw new Error("Strategy evidence marker checksum mismatch");
+  }
+  const expectedId = `${safeStrategyEvidenceSegment(payload.strategy)}_${compactStrategyEvidenceTimestamp(payload.createdAt)}_${payloadSha256.slice(0, 16)}`;
+  if (expectedId !== envelope.artifactId) {
+    throw new Error("Strategy evidence marker artifact identity mismatch");
+  }
+  return value;
+};
+export {
+  canonicalStrategyEvidenceJson,
+  compactStrategyEvidenceTimestamp,
+  createStrategyEvidenceMarkerEnvelope,
+  safeStrategyEvidenceSegment,
+  strategyEvidenceFileSha256,
+  strategyEvidenceFingerprint,
+  strategyEvidenceSha256,
+  strategyLogicConfigFingerprint,
+  verifyStrategyEvidenceMarkerEnvelope
+};

package/dist/timescale.mjs

@@ -1,3 +1,13 @@
+import {
+  deleteCandles,
+  findContinuityGap,
+  getCandlesRange,
+  getDataEdges,
+  getDataEdgesForSymbols,
+  toRows,
+  upsertCandles,
+  waitForDbReady
+} from "./chunk-YVIHTUV5.mjs";
 import {
   applyDerivativesMetricCoverage,
   getDerivativesBackfillCoverage,
@@ -53,16 +63,6 @@ import {
   getSpreadSummary,
   upsertSpreadRows
 } from "./chunk-2CZREG43.mjs";
-import {
-  deleteCandles,
-  findContinuityGap,
-  getCandlesRange,
-  getDataEdges,
-  getDataEdgesForSymbols,
-  toRows,
-  upsertCandles,
-  waitForDbReady
-} from "./chunk-YVIHTUV5.mjs";
 import {
   closeTimescalePool,
   configureTimescaleMarketContextSchemaMode,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tradejs/infra",
-  "version": "2.0.19",
+  "version": "2.0.21",
   "description": "MIT-licensed server infrastructure adapters for TradeJS: Redis, Timescale, ML, logging, and IO.",
   "keywords": [
     "tradejs",
@@ -49,6 +49,11 @@
       "import": "./dist/backtestArtifacts.mjs",
       "require": "./dist/backtestArtifacts.js"
     },
+    "./coreResearch": {
+      "types": "./dist/coreResearch.d.ts",
+      "import": "./dist/coreResearch.mjs",
+      "require": "./dist/coreResearch.js"
+    },
     "./files": {
       "types": "./dist/files.d.ts",
       "import": "./dist/files.mjs",
@@ -84,6 +89,11 @@
       "import": "./dist/runtimeDeployments.mjs",
       "require": "./dist/runtimeDeployments.js"
     },
+    "./strategyReleaseEvidence": {
+      "types": "./dist/strategyReleaseEvidence.d.ts",
+      "import": "./dist/strategyReleaseEvidence.mjs",
+      "require": "./dist/strategyReleaseEvidence.js"
+    },
     "./userSettings": {
       "types": "./dist/userSettings.d.ts",
       "import": "./dist/userSettings.mjs",
@@ -133,7 +143,7 @@
   "dependencies": {
     "@grpc/grpc-js": "^1.14.4",
     "@grpc/proto-loader": "^0.8.1",
-    "@tradejs/types": "^2.0.19",
+    "@tradejs/types": "^2.0.21",
     "chalk": "4.1.2",
     "date-fns": "^3.6.0",
     "ioredis": "5.11.1",