desic-okx-agent 0.2.1 → 0.3.0

package/dist/live/reconcile.js

@@ -0,0 +1,104 @@
+import { liveExecutionKey, liveClientOrderId } from "./execution-key.js";
+/**
+ * Checks every unresolved signal against the exchange.
+ *
+ * Called at startup, after the executions table has had its own chance to recover: the
+ * two live in separate tables and a signal's execution record may still be settling.
+ */
+export async function reconcileSignals(deps) {
+    const outcome = { resolved: 0, absent: 0, ambiguous: 0, details: [] };
+    const unresolved = deps.store.unresolvedSignals();
+    if (unresolved.length === 0)
+        return outcome;
+    // Profiles are read once each: a stalled worker usually leaves a run of consecutive
+    // minutes from the same profile.
+    const profiles = new Map();
+    for (const signal of unresolved) {
+        if (!profiles.has(signal.profileId))
+            profiles.set(signal.profileId, deps.store.profile(signal.profileId));
+        const profile = profiles.get(signal.profileId);
+        if (!profile) {
+            // The profile is gone, so there is nothing left to trade against and no account to
+            // ask. Recording it as ambiguous keeps the row honest rather than silently closing
+            // a question nobody can answer.
+            deps.store.settleAmbiguous(signal.id, "The profile no longer exists, so this signal cannot be reconciled");
+            outcome.ambiguous += 1;
+            outcome.details.push({ ...locator(signal), result: "profile_missing" });
+            continue;
+        }
+        const record = await lookup(deps, profile, signal);
+        if (record === "unavailable") {
+            deps.store.settleAmbiguous(signal.id, "The exchange could not be reached to determine this order's fate");
+            outcome.ambiguous += 1;
+            outcome.details.push({ ...locator(signal), result: "unreachable" });
+            continue;
+        }
+        if (record === undefined) {
+            // The exchange has no such order. For a `reserved` signal that is the expected
+            // answer: the worker died before sending anything.
+            deps.store.settleNoAction(signal.id, "No order reached the exchange before the runtime stopped");
+            outcome.absent += 1;
+            outcome.details.push({ ...locator(signal), result: "no_order" });
+            continue;
+        }
+        const state = String(record.state ?? "");
+        const orderId = record.ordId === undefined || record.ordId === null ? null : String(record.ordId);
+        if (TERMINAL_STATES.has(state)) {
+            deps.store.settleSubmitted(signal.id, {
+                action: signal.action === "reserved" ? "recovered" : signal.action,
+                reason: signal.reason === "reserved" ? "recovered at startup" : signal.reason,
+                quantity: Number(record.sz ?? signal.quantity ?? 0),
+                orderId,
+                executionKey: signal.executionKey ?? liveExecutionKey(profile.id, signal.cutoffAt),
+                details: { reconciled: true, state, filledSize: record.accFillSz ?? null, averagePrice: record.avgPx ?? null }
+            });
+            outcome.resolved += 1;
+            outcome.details.push({ ...locator(signal), result: state });
+            continue;
+        }
+        // A live or partially filled order is a real position the strategy does not know
+        // about. It is not resubmitted and not closed automatically — deciding for someone
+        // what to do with an open position they did not see is worse than telling them.
+        deps.store.settleAmbiguous(signal.id, `An order from before the restart is still ${state || "open"} at the exchange (${orderId ?? "unknown id"}); inspect it before enabling this profile again`);
+        outcome.ambiguous += 1;
+        outcome.details.push({ ...locator(signal), result: state || "open" });
+    }
+    return outcome;
+}
+/** Order states that need no further action. */
+const TERMINAL_STATES = new Set(["filled", "canceled", "cancelled"]);
+/**
+ * Asks the exchange about one signal's order.
+ *
+ * Returns the order, `undefined` when the exchange says there is none, or
+ * `"unavailable"` when the question could not be asked at all. The difference matters:
+ * "no order exists" is an answer, while "could not reach OKX" is not, and treating the
+ * second as the first would quietly discard a signal that may have filled.
+ */
+async function lookup(deps, profile, signal) {
+    const executionKey = signal.executionKey ?? liveExecutionKey(profile.id, signal.cutoffAt);
+    try {
+        const account = deps.accounts.account(profile.account);
+        const orders = await deps.client.privateGet("/api/v5/trade/order", account, {
+            instId: profile.instId,
+            clOrdId: liveClientOrderId(executionKey)
+        });
+        return orders[0];
+    }
+    catch (error) {
+        // OKX answers "order does not exist" as an error, which is a definitive answer
+        // rather than a failure to ask.
+        if (isOrderNotFound(error))
+            return undefined;
+        return "unavailable";
+    }
+}
+/** OKX reports an unknown `clOrdId` as error 51603. */
+function isOrderNotFound(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return message.includes("51603") || /order does not exist/i.test(message);
+}
+function locator(signal) {
+    return { signalId: signal.id, profileId: signal.profileId, cutoffAt: signal.cutoffAt };
+}
+//# sourceMappingURL=reconcile.js.map

package/dist/live/reconcile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile.js","sourceRoot":"","sources":["../../src/live/reconcile.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAqCzE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAgB;IACrD,MAAM,OAAO,GAAqB,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACxF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;IAClD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAE5C,oFAAoF;IACpF,iCAAiC;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC5D,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1G,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,mFAAmF;YACnF,mFAAmF;YACnF,gCAAgC;YAChC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,mEAAmE,CAAC,CAAC;YAC3G,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;YACvB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACxE,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,kEAAkE,CAAC,CAAC;YAC1G,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;YACvB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YACpE,SAAS;QACX,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,+EAA+E;YAC/E,mDAAmD;YACnD,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,0DAA0D,CAAC,CAAC;YACjG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;YACpB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YACjE,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClG,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE;gBACpC,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM;gBAClE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM;gBAC7E,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACnD,OAAO;gBACP,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC;gBAClF,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE;aAC/G,CAAC,CAAC;YACH,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;YACtB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,iFAAiF;QACjF,mFAAmF;QACnF,gFAAgF;QAChF,IAAI,CAAC,KAAK,CAAC,eAAe,CACxB,MAAM,CAAC,EAAE,EACT,6CAA6C,KAAK,IAAI,MAAM,qBAAqB,OAAO,IAAI,YAAY,kDAAkD,CAC3J,CAAC;QACF,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;QACvB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gDAAgD;AAChD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;AAErE;;;;;;;GAOG;AACH,KAAK,UAAU,MAAM,CACnB,IAAgB,EAChB,OAAoB,EACpB,MAAkB;IAElB,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1F,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAA0B,qBAAqB,EAAE,OAAO,EAAE;YACnG,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,iBAAiB,CAAC,YAAY,CAAC;SACzC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+EAA+E;QAC/E,gCAAgC;QAChC,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7C,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,OAAO,CAAC,MAAkB;IACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;AACzF,CAAC"}

package/dist/live/runner.d.ts

@@ -0,0 +1,57 @@
+import type { AccountService } from "../account/service.js";
+import type { BarService } from "../bars/service.js";
+import type { MarketService } from "../market/service.js";
+import type { TradeService } from "../trade/service.js";
+import type { Bar } from "../bars/types.js";
+import { type ContractSpec } from "../strategy/instrument.js";
+import type { PythonLiveSession } from "./session.js";
+import type { LiveStore } from "./store.js";
+import type { LiveProfile } from "./types.js";
+/** Bars of history fed to a session before its first evaluation. */
+export declare const WARMUP_BARS = 300;
+export interface RunnerDeps {
+    store: LiveStore;
+    bars: BarService;
+    market: MarketService;
+    accounts: AccountService;
+    trade: TradeService;
+}
+export type EvaluationResult = {
+    kind: "skipped";
+    reason: string;
+} | {
+    kind: "no_action";
+    reason: string;
+} | {
+    kind: "blocked";
+    gate: string;
+    reason: string;
+} | {
+    kind: "submitted";
+    orderId: string | null;
+    contracts: number;
+};
+/**
+ * Turns one closed minute into an order, or into a recorded reason there was none.
+ *
+ * The order of operations is the safety property, not an implementation detail:
+ *
+ * 1. Claim the minute first. The unique constraint can only prevent a duplicate order if
+ *    the row exists before the order is sent.
+ * 2. Verify the window is complete. A gap means deciding against price action that never
+ *    happened, so the minute is skipped rather than evaluated.
+ * 3. Read the account from the exchange, not from a local tally.
+ * 4. Ask the strategy for an intent, which carries no size.
+ * 5. Size it and run the gates.
+ * 6. Re-read the generation immediately before submitting, so a stop that landed during
+ *    the evaluation still blocks the order.
+ */
+export declare function evaluateCutoff(deps: RunnerDeps, profile: LiveProfile, session: PythonLiveSession, bar: Bar, generation: number): Promise<EvaluationResult>;
+/**
+ * Prepares a session for live evaluation.
+ *
+ * The warm-up is history only and produces no decisions: running the strategy over past
+ * minutes would emit orders for minutes that have already gone.
+ */
+export declare function warmSession(deps: RunnerDeps, profile: LiveProfile, session: PythonLiveSession, latestOpen: number): Promise<number>;
+export type { ContractSpec };

package/dist/live/runner.js

@@ -0,0 +1,160 @@
+import { RuntimeError } from "../core/errors.js";
+import { ONE_MINUTE_MS } from "../bars/types.js";
+import { loadContractSpec } from "../strategy/instrument.js";
+import { readAccountSnapshot } from "./account-snapshot.js";
+import { liveExecutionKey } from "./execution-key.js";
+import { evaluateGates, isClosing, sideOf } from "./gates.js";
+/** Bars of history fed to a session before its first evaluation. */
+export const WARMUP_BARS = 300;
+/**
+ * Turns one closed minute into an order, or into a recorded reason there was none.
+ *
+ * The order of operations is the safety property, not an implementation detail:
+ *
+ * 1. Claim the minute first. The unique constraint can only prevent a duplicate order if
+ *    the row exists before the order is sent.
+ * 2. Verify the window is complete. A gap means deciding against price action that never
+ *    happened, so the minute is skipped rather than evaluated.
+ * 3. Read the account from the exchange, not from a local tally.
+ * 4. Ask the strategy for an intent, which carries no size.
+ * 5. Size it and run the gates.
+ * 6. Re-read the generation immediately before submitting, so a stop that landed during
+ *    the evaluation still blocks the order.
+ */
+export async function evaluateCutoff(deps, profile, session, bar, generation) {
+    const cutoffAt = bar.closeTimeMs;
+    // 1. Claim before anything else can act.
+    const signalId = deps.store.reserveSignal(profile.id, cutoffAt);
+    if (!signalId) {
+        return { kind: "skipped", reason: `Minute ${cutoffAt} was already evaluated for this profile` };
+    }
+    try {
+        // 2. The window has to be intact up to and including this bar.
+        const window = deps.bars.store.loadWindow(profile.instId, bar.openTimeMs - ONE_MINUTE_MS, bar.openTimeMs);
+        const latest = window.at(-1);
+        if (!latest || latest.openTimeMs !== bar.openTimeMs) {
+            throw new RuntimeError("STALE_DATA", `Local history does not reach ${bar.openTimeMs}`, true);
+        }
+        const contract = await loadContractSpec(deps.market, profile.instId);
+        const markPrice = Number(bar.close);
+        // 3. Account state as the exchange reports it.
+        const snapshot = await readAccountSnapshot(deps.accounts, profile.account, profile.instId, contract, markPrice, cutoffAt);
+        // 4. The strategy's intent, with no size attached.
+        const decision = await session.evaluate(bar, snapshot.portfolio);
+        if (decision.action === "no_action") {
+            deps.store.settleNoAction(signalId, decision.reason);
+            return { kind: "no_action", reason: decision.reason };
+        }
+        // 5. Size and gate. Every refusal is recorded with the gate that produced it.
+        const outcome = evaluateGates({
+            profile,
+            generation,
+            currentGeneration: deps.store.requireProfile(profile.id).generation,
+            enabledNow: deps.store.requireProfile(profile.id).enabled,
+            action: decision.action,
+            contract,
+            price: markPrice,
+            positions: snapshot.positions,
+            availableMarginUsdt: snapshot.portfolio.availableMarginUsdt,
+            realizedLossUsdtToday: snapshot.realizedLossUsdtToday,
+            cutoffAt,
+            ...(deps.store.lastSubmittedAt(profile.id) === undefined
+                ? {}
+                : { lastSubmittedAt: deps.store.lastSubmittedAt(profile.id) })
+        });
+        if (!outcome.allowed) {
+            deps.store.settleBlocked(signalId, {
+                action: decision.action,
+                reason: decision.reason,
+                blockedBy: outcome.refusal.gate,
+                details: outcome.refusal.details
+            });
+            return { kind: "blocked", gate: outcome.refusal.gate, reason: outcome.refusal.message };
+        }
+        // 6. Last look at the generation. Between the gate check and here the strategy has not
+        //    run, but an operator may have pressed stop, and this is the final chance to honour
+        //    it before the order leaves.
+        const current = deps.store.requireProfile(profile.id);
+        if (!current.enabled || current.generation !== generation) {
+            deps.store.settleBlocked(signalId, {
+                action: decision.action,
+                reason: decision.reason,
+                blockedBy: "generation",
+                details: { decidedUnder: generation, currentGeneration: current.generation, enabled: current.enabled }
+            });
+            return { kind: "blocked", gate: "generation", reason: "The profile was stopped during this evaluation" };
+        }
+        const executionKey = liveExecutionKey(profile.id, cutoffAt);
+        const placed = await deps.trade.placeOrder({
+            account: profile.account,
+            executionKey,
+            instId: profile.instId,
+            tdMode: profile.marginMode,
+            side: orderSide(decision.action),
+            posSide: sideOf(decision.action),
+            ordType: "market",
+            size: String(outcome.contracts),
+            // The snapshot's eight components cannot agree within a second on a live feed —
+            // funding rate moves every eight hours — and that skew says nothing about whether this
+            // order can fill. Every executability check still applies, and the skew is recorded as
+            // a warning rather than silently dropped.
+            executabilityOnly: true,
+            // A closing order is reduce-only, so a late-arriving fill can never open the opposite
+            // side instead of flattening.
+            ...(isClosing(decision.action) ? { reduceOnly: true } : {})
+        });
+        const orderId = readOrderId(placed.data);
+        deps.store.settleSubmitted(signalId, {
+            action: decision.action,
+            reason: decision.reason,
+            quantity: outcome.contracts,
+            orderId,
+            executionKey,
+            details: {
+                notionalUsdt: outcome.notionalUsdt,
+                marginUsdt: outcome.marginUsdt,
+                markPrice,
+                ...(decision.protection ? { protection: decision.protection } : {})
+            }
+        });
+        return { kind: "submitted", orderId, contracts: outcome.contracts };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        // An ambiguous write is recorded as ambiguous rather than an error: the order may exist,
+        // and that distinction is what recovery reads.
+        if (error instanceof RuntimeError && error.code === "AMBIGUOUS_WRITE") {
+            deps.store.settleAmbiguous(signalId, message);
+        }
+        else {
+            deps.store.settleError(signalId, message);
+        }
+        throw error;
+    }
+}
+/**
+ * Prepares a session for live evaluation.
+ *
+ * The warm-up is history only and produces no decisions: running the strategy over past
+ * minutes would emit orders for minutes that have already gone.
+ */
+export async function warmSession(deps, profile, session, latestOpen) {
+    const from = latestOpen - WARMUP_BARS * ONE_MINUTE_MS;
+    const history = deps.bars.store.loadWindow(profile.instId, from, latestOpen);
+    return session.warm(history);
+}
+/** Which side of the book an action trades on. */
+function orderSide(action) {
+    // Opening long and closing short both buy; the other two sell.
+    return action === "open_long" || action === "close_short" ? "buy" : "sell";
+}
+/** The exchange's order id, when it reported one. */
+function readOrderId(response) {
+    const orders = response.orders;
+    if (!Array.isArray(orders) || orders.length === 0)
+        return null;
+    const first = orders[0];
+    const value = first.ordId;
+    return value === undefined || value === null || value === "" ? null : String(value);
+}
+//# sourceMappingURL=runner.js.map

package/dist/live/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/live/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAMjD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAqB,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAK9D,oEAAoE;AACpE,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAgB/B;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAgB,EAChB,OAAoB,EACpB,OAA0B,EAC1B,GAAQ,EACR,UAAkB;IAElB,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC;IAEjC,yCAAyC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAChE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,QAAQ,yCAAyC,EAAE,CAAC;IAClG,CAAC;IAED,IAAI,CAAC;QACH,+DAA+D;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,GAAG,aAAa,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1G,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU,EAAE,CAAC;YACpD,MAAM,IAAI,YAAY,CAAC,YAAY,EAAE,gCAAgC,GAAG,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEpC,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,IAAI,CAAC,QAAQ,EACb,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,MAAM,EACd,QAAQ,EACR,SAAS,EACT,QAAQ,CACT,CAAC;QAEF,mDAAmD;QACnD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxD,CAAC;QAED,8EAA8E;QAC9E,MAAM,OAAO,GAAG,aAAa,CAAC;YAC5B,OAAO;YACP,UAAU;YACV,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,UAAU;YACnE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO;YACzD,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ;YACR,KAAK,EAAE,SAAS;YAChB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,mBAAmB,EAAE,QAAQ,CAAC,SAAS,CAAC,mBAAmB;YAC3D,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;YACrD,QAAQ;YACR,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,SAAS;gBACtD,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;SACjE,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE;gBACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;gBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;aACjC,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1F,CAAC;QAED,uFAAuF;QACvF,wFAAwF;QACxF,iCAAiC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YAC1D,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE;gBACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,SAAS,EAAE,YAAY;gBACvB,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;aACvG,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;QAC3G,CAAC;QAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YACzC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,YAAY;YACZ,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,UAAU;YAC1B,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChC,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;YAC/B,gFAAgF;YAChF,uFAAuF;YACvF,uFAAuF;YACvF,0CAA0C;YAC1C,iBAAiB,EAAE,IAAI;YACvB,sFAAsF;YACtF,8BAA8B;YAC9B,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,EAAE;YACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ,EAAE,OAAO,CAAC,SAAS;YAC3B,OAAO;YACP,YAAY;YACZ,OAAO,EAAE;gBACP,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS;gBACT,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE;SACF,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,yFAAyF;QACzF,+CAA+C;QAC/C,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAgB,EAChB,OAAoB,EACpB,OAA0B,EAC1B,UAAkB;IAElB,MAAM,IAAI,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC7E,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED,kDAAkD;AAClD,SAAS,SAAS,CAAC,MAAc;IAC/B,+DAA+D;IAC/D,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7E,CAAC;AAED,qDAAqD;AACrD,SAAS,WAAW,CAAC,QAAiC;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAA4B,CAAC;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtF,CAAC"}

package/dist/live/schema.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Live execution storage.
+ *
+ * Two tables, and both carry a constraint that exists to make a specific failure
+ * impossible rather than merely unlikely.
+ *
+ * `live_profiles` stores the strategy *source*, not a path to it. Files get edited,
+ * and a profile has to keep trading the version that was reviewed and enabled —
+ * otherwise saving a file would silently change what a running profile does, with
+ * no record that anything happened.
+ *
+ * `live_signals` is unique on `(profile_id, cutoff_at)`. That is the root of
+ * idempotency: no matter how many times a bar is delivered, how many times the
+ * runtime restarts, or how a burst is coalesced, one closed minute can produce at
+ * most one signal. Every other guard in the live path can be re-run safely because
+ * this one cannot be.
+ */
+export declare const LIVE_SCHEMA_SQL = "\nCREATE TABLE IF NOT EXISTS live_profiles (\n  id TEXT PRIMARY KEY,\n  name TEXT NOT NULL,\n  -- A snapshot, taken when the profile was created. Never a file path.\n  strategy_source TEXT NOT NULL,\n  strategy_hash TEXT NOT NULL,\n  params_json TEXT NOT NULL DEFAULT '{}',\n  inst_id TEXT NOT NULL,\n  account TEXT NOT NULL,\n  environment TEXT NOT NULL,\n  enabled INTEGER NOT NULL DEFAULT 0,\n  status TEXT NOT NULL DEFAULT 'stopped',\n  -- Bumped on every enable and disable. An action decided before a stop carries an\n  -- older generation and is refused at submit time, which closes the window\n  -- between \"evaluation started\" and \"order sent\".\n  generation INTEGER NOT NULL DEFAULT 0,\n  leverage REAL NOT NULL,\n  margin_mode TEXT NOT NULL DEFAULT 'cross',\n  entry_budget_usdt REAL NOT NULL,\n  side_budget_usdt REAL NOT NULL,\n  daily_loss_limit_usdt REAL NOT NULL,\n  cooldown_seconds INTEGER NOT NULL DEFAULT 0,\n  allow_long INTEGER NOT NULL DEFAULT 1,\n  allow_short INTEGER NOT NULL DEFAULT 1,\n  error_streak INTEGER NOT NULL DEFAULT 0,\n  last_error TEXT,\n  -- Evidence the strategy was backtested on this instrument before being enabled.\n  backtest_run_id TEXT,\n  -- Who created this profile: operator or agent. Recorded because an automated decision\n  -- and a human one warrant different scrutiny when reading back why a strategy is trading.\n  origin TEXT NOT NULL DEFAULT 'operator',\n  -- Why these budgets and this instrument. Required of an agent: a profile nobody can explain\n  -- is one nobody can review.\n  rationale TEXT,\n  created_at INTEGER NOT NULL,\n  updated_at INTEGER NOT NULL,\n  -- One profile per account, environment, and instrument. Two profiles trading the\n  -- same contract on the same account would each size against a position the other\n  -- also opened.\n  UNIQUE(account, environment, inst_id)\n);\n\nCREATE INDEX IF NOT EXISTS idx_live_profiles_enabled\n  ON live_profiles(enabled, inst_id);\n\nCREATE TABLE IF NOT EXISTS live_signals (\n  id TEXT PRIMARY KEY,\n  profile_id TEXT NOT NULL,\n  cutoff_at INTEGER NOT NULL,\n  action TEXT NOT NULL,\n  reason TEXT NOT NULL,\n  -- reserved | no_action | submitted | blocked | error | ambiguous\n  status TEXT NOT NULL,\n  -- Why a risk gate refused. Present on every blocked row: these are the evidence\n  -- that risk control ran, and without them a quiet day and a broken loop look\n  -- identical.\n  blocked_by TEXT,\n  quantity REAL,\n  order_id TEXT,\n  execution_key TEXT,\n  error TEXT,\n  details_json TEXT NOT NULL DEFAULT '{}',\n  created_at INTEGER NOT NULL,\n  updated_at INTEGER NOT NULL,\n  UNIQUE(profile_id, cutoff_at)\n);\n\nCREATE INDEX IF NOT EXISTS idx_live_signals_profile\n  ON live_signals(profile_id, cutoff_at DESC);\nCREATE INDEX IF NOT EXISTS idx_live_signals_status\n  ON live_signals(status, cutoff_at DESC);\n";

package/dist/live/schema.js

@@ -0,0 +1,91 @@
+/**
+ * Live execution storage.
+ *
+ * Two tables, and both carry a constraint that exists to make a specific failure
+ * impossible rather than merely unlikely.
+ *
+ * `live_profiles` stores the strategy *source*, not a path to it. Files get edited,
+ * and a profile has to keep trading the version that was reviewed and enabled —
+ * otherwise saving a file would silently change what a running profile does, with
+ * no record that anything happened.
+ *
+ * `live_signals` is unique on `(profile_id, cutoff_at)`. That is the root of
+ * idempotency: no matter how many times a bar is delivered, how many times the
+ * runtime restarts, or how a burst is coalesced, one closed minute can produce at
+ * most one signal. Every other guard in the live path can be re-run safely because
+ * this one cannot be.
+ */
+export const LIVE_SCHEMA_SQL = `
+CREATE TABLE IF NOT EXISTS live_profiles (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL,
+  -- A snapshot, taken when the profile was created. Never a file path.
+  strategy_source TEXT NOT NULL,
+  strategy_hash TEXT NOT NULL,
+  params_json TEXT NOT NULL DEFAULT '{}',
+  inst_id TEXT NOT NULL,
+  account TEXT NOT NULL,
+  environment TEXT NOT NULL,
+  enabled INTEGER NOT NULL DEFAULT 0,
+  status TEXT NOT NULL DEFAULT 'stopped',
+  -- Bumped on every enable and disable. An action decided before a stop carries an
+  -- older generation and is refused at submit time, which closes the window
+  -- between "evaluation started" and "order sent".
+  generation INTEGER NOT NULL DEFAULT 0,
+  leverage REAL NOT NULL,
+  margin_mode TEXT NOT NULL DEFAULT 'cross',
+  entry_budget_usdt REAL NOT NULL,
+  side_budget_usdt REAL NOT NULL,
+  daily_loss_limit_usdt REAL NOT NULL,
+  cooldown_seconds INTEGER NOT NULL DEFAULT 0,
+  allow_long INTEGER NOT NULL DEFAULT 1,
+  allow_short INTEGER NOT NULL DEFAULT 1,
+  error_streak INTEGER NOT NULL DEFAULT 0,
+  last_error TEXT,
+  -- Evidence the strategy was backtested on this instrument before being enabled.
+  backtest_run_id TEXT,
+  -- Who created this profile: operator or agent. Recorded because an automated decision
+  -- and a human one warrant different scrutiny when reading back why a strategy is trading.
+  origin TEXT NOT NULL DEFAULT 'operator',
+  -- Why these budgets and this instrument. Required of an agent: a profile nobody can explain
+  -- is one nobody can review.
+  rationale TEXT,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  -- One profile per account, environment, and instrument. Two profiles trading the
+  -- same contract on the same account would each size against a position the other
+  -- also opened.
+  UNIQUE(account, environment, inst_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_live_profiles_enabled
+  ON live_profiles(enabled, inst_id);
+
+CREATE TABLE IF NOT EXISTS live_signals (
+  id TEXT PRIMARY KEY,
+  profile_id TEXT NOT NULL,
+  cutoff_at INTEGER NOT NULL,
+  action TEXT NOT NULL,
+  reason TEXT NOT NULL,
+  -- reserved | no_action | submitted | blocked | error | ambiguous
+  status TEXT NOT NULL,
+  -- Why a risk gate refused. Present on every blocked row: these are the evidence
+  -- that risk control ran, and without them a quiet day and a broken loop look
+  -- identical.
+  blocked_by TEXT,
+  quantity REAL,
+  order_id TEXT,
+  execution_key TEXT,
+  error TEXT,
+  details_json TEXT NOT NULL DEFAULT '{}',
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  UNIQUE(profile_id, cutoff_at)
+);
+
+CREATE INDEX IF NOT EXISTS idx_live_signals_profile
+  ON live_signals(profile_id, cutoff_at DESC);
+CREATE INDEX IF NOT EXISTS idx_live_signals_status
+  ON live_signals(status, cutoff_at DESC);
+`;
+//# sourceMappingURL=schema.js.map

package/dist/live/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/live/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwE9B,CAAC"}

package/dist/live/service.d.ts

@@ -0,0 +1,144 @@
+import { type ToolResult } from "../core/types.js";
+import type { AccountService } from "../account/service.js";
+import type { OkxClient } from "../core/okx-client.js";
+import type { BarService } from "../bars/service.js";
+import type { MarketService } from "../market/service.js";
+import type { StrategyStore } from "../strategy/store.js";
+import type { TradeService } from "../trade/service.js";
+import { type PreconditionFailure } from "./preconditions.js";
+import { type ReconcileOutcome } from "./reconcile.js";
+import { type FailureKind } from "./failures.js";
+import { LiveStore } from "./store.js";
+import type { CreateProfileInput, LiveProfile, LiveSignal } from "./types.js";
+/** Consecutive failures after which a profile stops itself. */
+export declare const ERROR_STREAK_LIMIT = 3;
+/** What enabling did to the instrument's leverage on the exchange. */
+export interface LeverageApplication {
+    requested: number;
+    applied: boolean;
+}
+export interface EnableResult {
+    profile: LiveProfile;
+    /** The backtest that justified enabling. */
+    backtestRunId: string | null;
+    /** The leverage written to the exchange before the profile was enabled. */
+    leverage: LeverageApplication;
+}
+export interface ReadinessReport {
+    profile: LiveProfile;
+    ready: boolean;
+    failures: PreconditionFailure[];
+    /** The backtest found for this exact source and instrument, if any. */
+    backtestRunId: string | null;
+}
+/**
+ * Owns live profiles: their lifecycle, and what has to be true before one trades.
+ *
+ * Creating a profile never starts it. Enabling is the only step that can lead to an
+ * order, and it is the step that checks preconditions — so a profile can be written,
+ * inspected, and left alone safely.
+ */
+export declare class LiveService {
+    private readonly store;
+    private readonly strategyStore;
+    private readonly bars;
+    private readonly market;
+    private readonly accounts;
+    private readonly client;
+    /** Used to apply the profile's leverage at enable time. See `applyLeverage`. */
+    private readonly trade;
+    /** Consecutive systemic failures after which a profile stops itself. */
+    private readonly errorStreakLimit;
+    constructor(store: LiveStore, strategyStore: StrategyStore, bars: BarService, market: MarketService, accounts: AccountService, client: Pick<OkxClient, "privateGet">, 
+    /** Used to apply the profile's leverage at enable time. See `applyLeverage`. */
+    trade: Pick<TradeService, "setLeverage">, 
+    /** Consecutive systemic failures after which a profile stops itself. */
+    errorStreakLimit?: number);
+    private onDisabled?;
+    /**
+     * Marks profiles a dead worker left running.
+     *
+     * Called at startup. Their generation advances, so an order decided by the previous
+     * process cannot be submitted if it somehow still arrives.
+     */
+    recoverInterrupted(): number;
+    /**
+     * Resolves signals left unresolved by a previous process.
+     *
+     * Every one is checked against the exchange rather than assumed. Nothing is resubmitted:
+     * re-sending an order that may already exist is the one mistake worse than missing one,
+     * so anything that cannot be resolved is marked ambiguous and waits for a person.
+     */
+    reconcile(): Promise<ToolResult<ReconcileOutcome>>;
+    createProfile(input: CreateProfileInput): ToolResult<LiveProfile>;
+    listProfiles(): ToolResult<LiveProfile[]>;
+    getProfile(id: string): ToolResult<LiveProfile>;
+    signals(profileId: string, limit?: number): ToolResult<LiveSignal[]>;
+    /**
+     * Reports whether a profile could be enabled, without enabling it.
+     *
+     * Separate from `enable` so the list of blockers can be read before committing to
+     * anything — and so a caller that wants to show them does not have to trigger a
+     * failure to find out.
+     */
+    readiness(id: string): Promise<ToolResult<ReadinessReport>>;
+    /**
+     * Enables a profile, refusing unless every precondition holds.
+     *
+     * The backtest that justified it is recorded on the profile, so a later reader can
+     * see which run was the evidence rather than having to trust that one existed.
+     */
+    enable(id: string): Promise<ToolResult<EnableResult>>;
+    /**
+     * Writes the profile's leverage to the exchange, and refuses to enable if it cannot.
+     *
+     * This changes a setting the account shares across everything trading that instrument
+     * and margin mode, including positions opened by hand. That is the cost of the budgets
+     * meaning what they say, and it is why it happens at enable rather than silently on
+     * every bar.
+     *
+     * A failure here stops the enable. Continuing would leave the profile trading at a
+     * leverage nobody chose, which is the exact condition this call exists to remove.
+     */
+    private applyLeverage;
+    /**
+     * Stops a profile.
+     *
+     * Always allowed and never precondition-checked: whatever is wrong, stopping is the
+     * safe direction, and a stop that could fail would be worse than useless.
+     */
+    disable(id: string, reason?: string): ToolResult<LiveProfile>;
+    /** Registers the loop's session release, called after a profile is disabled. */
+    onProfileDisabled(release: (profileId: string) => Promise<void>): void;
+    /**
+     * Records a failed evaluation and stops the profile if they keep coming.
+     *
+     * One failure never stops anything: the risk gates still refuse whatever is unsafe, and
+     * halting on a single dropped connection would make the whole thing unusable. A run of
+     * failures is different — it means something systemic, and continuing only accumulates
+     * errors against an exchange nobody is watching.
+     *
+     * Only failures that will not fix themselves count. A profile that could not reach OKX
+     * for one minute is in a different position from one whose strategy throws on every bar.
+     * Transient failures are still recorded, so the minute is never silently dropped; they
+     * just do not push toward a shutdown.
+     */
+    recordFailure(id: string, error: unknown): ToolResult<{
+        kind: FailureKind;
+        streak: number;
+        disabled: boolean;
+    }>;
+    /** Clears the streak after an evaluation that worked. */
+    recordSuccess(id: string): void;
+    deleteProfile(id: string): ToolResult<{
+        deleted: boolean;
+    }>;
+    /**
+     * Collects everything the preconditions need.
+     *
+     * Each lookup is guarded on its own: a profile blocked by a missing backtest should
+     * still learn that its account is also unverified, and one failing probe must not
+     * hide the rest of the list.
+     */
+    private gatherFacts;
+}