dexbot 1.1.10

package/dist/analysis/trend_detection/volatility_chart_generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"volatility_chart_generator.js","sourceRoot":"","sources":["../../../analysis/trend_detection/volatility_chart_generator.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;AAC9D,MAAM,EAAE,UAAU,EAAE,sBAAsB,EAAE,cAAc,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAC9G,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAAC;AAE9D,SAAS,YAAY,CAAC,IAAI,EAAE,KAAK,GAAG,yBAAyB;IACzD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAE1E,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAClD,MAAM,gBAAgB,GAAG,IAAI,CAAC,mBAAmB,IAAI,aAAa,CAAC,mBAAmB;WAC/E,cAAc,CAAC,wCAAwC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,SAAS,IAAI,cAAc,CAAC,iCAAiC,CAAC;IACvH,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,IAAI,aAAa,CAAC,kBAAkB,IAAI,cAAc,CAAC,kCAAkC,CAAC;IACzI,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,IAAI,aAAa,CAAC,gBAAgB,IAAI,cAAc,CAAC,yCAAyC,CAAC;IAC1I,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,IAAI,aAAa,CAAC,eAAe,IAAI,cAAc,CAAC,oCAAoC,CAAC;IAClI,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC,yBAAyB,CAAC;IACpF,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC,yBAAyB,CAAC;IACpF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC;QAC/B,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI;QAC9F,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IAC3D,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAEnE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAAG;QACZ,KAAK;QACL,MAAM;QACN,UAAU;QACV,OAAO,EAAE,UAAU;QACnB,SAAS,EAAE,gBAAgB;QAC3B,cAAc,EAAE,kBAAkB;QAClC,YAAY;QACZ,mBAAmB,EAAE,gBAAgB;QACrC,kBAAkB,EAAE,eAAe;QACnC,gBAAgB,EAAE,aAAa;QAC/B,eAAe,EAAE,YAAY;QAC7B,SAAS,EAAE,gBAAgB;QAC3B,SAAS,EAAE,gBAAgB;QAC3B,aAAa,EAAE,cAAc;KAChC,CAAC;IAEF,OAAO;;;;;;aAME,UAAU,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAsEE,UAAU,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;6JA0B4G,IAAI,CAAC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,4CAA4C,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;gJACvH,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,sCAAsC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;4JAClF,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,wCAAwC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;8JAC5F,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,2CAA2C,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;8JACvG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,wCAAwC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;;mDAkB1M,sBAAsB,CAAC,OAAO,CAAC;;;;;;;+CAOnC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;+CAChC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;;;;;;;;;;;;;uFAaQ,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;;;;mEAIpD,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;;;;;;;;;UASrF,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2GAmH8E,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;;;;;;;;;;;2GAW5B,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA2Y/H,CAAC;AACT,CAAC;AAED,iBAAS,EAAE,YAAY,EAAE,CAAC"}

package/dist/bot.d.ts

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+/**
+ * bot.ts - Single Bot Instance Launcher
+ *
+ * PM2-friendly entry point for single grid trading bot.
+ * Standalone launcher executed by PM2 for each configured bot.
+ * Handles bot initialization, authentication, and continuous trading loop.
+ *
+ * ===============================================================================
+ * STARTUP SEQUENCE
+ * ===============================================================================
+ *
+ * 1. BOT CONFIGURATION LOADING
+ *    - Reads bot settings from profiles/bots.json by bot name (from argv)
+ *    - Validates bot exists in configuration
+ *    - Reports market pair and account being used
+ *    - Loads trading parameters (grid size, spread, order count, etc.)
+ *
+ * 2. AUTHENTICATION
+ *    - First attempts credential daemon (Unix socket) for a session-only signing token
+ *    - Falls back to interactive master password prompt if daemon unavailable
+ *    - Master password never stored in environment variables
+ *    - Legacy path still loads a raw private key into bot memory
+ *
+ * 3. BOT INITIALIZATION
+ *    - Waits for BitShares blockchain connection (30 second timeout)
+ *    - Uses pre-decrypted private key for transaction signing
+ *    - Resolves account ID from BitShares
+ *    - Initializes OrderManager with bot configuration
+ *    - Sets up event handlers for fills and blockchain updates
+ *
+ * 4. GRID INITIALIZATION OR RESUME
+ *    - Loads persisted grid snapshot if it exists and matches on-chain orders
+ *    - Validates persisted grid against current blockchain state (reconciliation)
+ *    - Detects offline fills and updates fund accounting automatically
+ *    - Creates fresh grid if no valid persisted state found
+ *    - Synchronizes grid state with BitShares blockchain
+ *    - Places initial orders to reach target count
+ *    - Note: Grid uses Copy-on-Write pattern for safe rebalancing (isolated working copies)
+ *
+ * 5. TRADING LOOP
+ *    - Continuously monitors for fill events via blockchain subscriptions
+ *    - Updates order status from chain data
+ *    - Processes fills and updates fund accounting
+ *    - Regenerates/rebalances grid as needed
+ *    - Runs indefinitely (PM2 manages restart/stop/monitoring)
+ */
+export {};
+//# sourceMappingURL=bot.d.ts.map

package/dist/bot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot.d.ts","sourceRoot":"","sources":["../bot.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AA2LH,OAAO,EAAE,CAAC"}

package/dist/bot.js

@@ -0,0 +1,221 @@
+#!/usr/bin/env node
+"use strict";
+// node-only entry point — single bot instance launcher (process.argv, process.exit, stdin, child_process)
+/**
+ * bot.ts - Single Bot Instance Launcher
+ *
+ * PM2-friendly entry point for single grid trading bot.
+ * Standalone launcher executed by PM2 for each configured bot.
+ * Handles bot initialization, authentication, and continuous trading loop.
+ *
+ * ===============================================================================
+ * STARTUP SEQUENCE
+ * ===============================================================================
+ *
+ * 1. BOT CONFIGURATION LOADING
+ *    - Reads bot settings from profiles/bots.json by bot name (from argv)
+ *    - Validates bot exists in configuration
+ *    - Reports market pair and account being used
+ *    - Loads trading parameters (grid size, spread, order count, etc.)
+ *
+ * 2. AUTHENTICATION
+ *    - First attempts credential daemon (Unix socket) for a session-only signing token
+ *    - Falls back to interactive master password prompt if daemon unavailable
+ *    - Master password never stored in environment variables
+ *    - Legacy path still loads a raw private key into bot memory
+ *
+ * 3. BOT INITIALIZATION
+ *    - Waits for BitShares blockchain connection (30 second timeout)
+ *    - Uses pre-decrypted private key for transaction signing
+ *    - Resolves account ID from BitShares
+ *    - Initializes OrderManager with bot configuration
+ *    - Sets up event handlers for fills and blockchain updates
+ *
+ * 4. GRID INITIALIZATION OR RESUME
+ *    - Loads persisted grid snapshot if it exists and matches on-chain orders
+ *    - Validates persisted grid against current blockchain state (reconciliation)
+ *    - Detects offline fills and updates fund accounting automatically
+ *    - Creates fresh grid if no valid persisted state found
+ *    - Synchronizes grid state with BitShares blockchain
+ *    - Places initial orders to reach target count
+ *    - Note: Grid uses Copy-on-Write pattern for safe rebalancing (isolated working copies)
+ *
+ * 5. TRADING LOOP
+ *    - Continuously monitors for fill events via blockchain subscriptions
+ *    - Updates order status from chain data
+ *    - Processes fills and updates fund accounting
+ *    - Regenerates/rebalances grid as needed
+ *    - Runs indefinitely (PM2 manages restart/stop/monitoring)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+// Restrict default file permissions: files created by this process default to
+// 0o600 (owner-only) unless explicitly opened with a wider mode.  Protects
+// keys.json and daemon-policies.json from world-readable exposure.
+const { setUmask } = require('./modules/config');
+setUmask(0o077);
+const { getStorage } = require('./modules/storage');
+const storage = getStorage();
+const { runtime } = require('./modules/runtime');
+const { createPm2AwareLogger } = require('./modules/logger');
+const DEXBot = require('./modules/dexbot_class');
+const { normalizeBotEntry } = require('./modules/dexbot_class');
+const { loadSettingsFile, resolveRawBotEntries, selectBotEntry } = require('./modules/bot_settings');
+const { setupGracefulShutdown, registerCleanup, unregisterCleanup } = require('./modules/graceful_shutdown');
+const chainKeys = require('./modules/chain_keys');
+const { getKeyStore } = require('./modules/key_store');
+const credentialPolicy = require('./modules/credential_policy');
+const { PATHS } = require('./modules/paths');
+const { Config } = require('./modules/config');
+// Auto-migrate bot state files from old stable-ID key format to sanitized-name format
+try {
+    const { runMigration } = require('./scripts/migrate_bot_keys');
+    runMigration();
+}
+catch (err) {
+    console.error(`Migration error: ${err?.message || err}`);
+}
+// Setup graceful shutdown handlers
+setupGracefulShutdown();
+// Verify keys file permissions early — refuse to run if keys.json is
+// world-readable (would indicate a prior run with a permissive umask).
+if (typeof chainKeys.checkKeysFileSecurity === 'function')
+    chainKeys.checkKeysFileSecurity();
+// Same migration-aware check for daemon-policies.json.
+const ROOT = PATHS.PROJECT_ROOT;
+if (typeof credentialPolicy.checkPolicyFileSecurity === 'function')
+    credentialPolicy.checkPolicyFileSecurity(PATHS.PROFILES.DAEMON_POLICIES_JSON);
+const PROFILES_BOTS_FILE = PATHS.PROFILES.BOTS_JSON;
+const launcherLogger = createPm2AwareLogger('bot.js');
+// Get bot name from args or environment
+// Support both direct names (tsx bot.ts botname) and flag format (tsx bot.ts --botname)
+// Flag format is used by PM2 for consistency with other CLI tools
+let botNameArg = Config.ARGS[0];
+if (botNameArg && botNameArg.startsWith('--')) {
+    // Strip '--' prefix if present (e.g., --mybot becomes mybot)
+    botNameArg = botNameArg.substring(2);
+}
+const botNameEnv = Config.BOT_NAME || Config.PREFERRED_ACCOUNT;
+const botName = botNameArg || botNameEnv;
+if (!botName) {
+    launcherLogger.error('No bot name provided. Usage: tsx bot.ts <bot-name>');
+    launcherLogger.error('Or set BOT_NAME or PREFERRED_ACCOUNT environment variable');
+    runtime.exit(1);
+}
+/**
+ * Loads the configuration for a specific bot from profiles/bots.json.
+ * @param {string} name - The name of the bot to load.
+ * @returns {Object} The bot configuration entry. Exits process on failure.
+ */
+function loadBotConfig(name) {
+    if (!storage.exists(PROFILES_BOTS_FILE)) {
+        launcherLogger.error('profiles/bots.json not found. Run: dexbot bots');
+        runtime.exit(1);
+    }
+    try {
+        const { config } = loadSettingsFile(PROFILES_BOTS_FILE);
+        const botEntry = selectBotEntry(config, name);
+        // Validate all profile files at startup (skip for PM2 child processes and tests)
+        if (!Config.DEXBOT_SKIP_PROFILE_VALIDATION && !Config.PM2_HOME) {
+            const { validateAllProfiles, printValidationProblems } = require('./modules/validate_profiles');
+            const result = validateAllProfiles();
+            const ok = printValidationProblems(result);
+            if (!ok) {
+                launcherLogger.error('Fix the configuration errors above and restart.');
+                runtime.exit(1);
+            }
+        }
+        if (!botEntry) {
+            const bots = resolveRawBotEntries(config);
+            launcherLogger.error(`Bot '${name}' not found in profiles/bots.json`);
+            launcherLogger.error(`Available bots: ${bots.map((b) => b.name).join(', ') || 'none'}`);
+            runtime.exit(1);
+        }
+        return botEntry;
+    }
+    catch (err) {
+        launcherLogger.error(`Error loading bot config: ${err.message}`);
+        runtime.exit(1);
+    }
+}
+/**
+ * Get signing secret for account from daemon or interactive prompt.
+ * Tries daemon first (if running), then falls back to interactive master password prompt.
+ * @param {string} accountName - The account name to retrieve key for.
+ * @returns {Promise<string|Object>} A raw private key for legacy mode, or a daemon signing token.
+ * @throws {Error} If both daemon and interactive authentication fail.
+ */
+async function getSigningSecretForAccount(accountName) {
+    const keyStore = getKeyStore();
+    const origLog = console.log;
+    console.log = (...args) => {
+        const isNoisy = args.some((arg) => typeof arg === 'string' && (arg.includes('bitshares_client') || arg.includes('modules/')));
+        if (!isNoisy) {
+            origLog.apply(console, args);
+        }
+    };
+    try {
+        return await keyStore.resolveSigningKey(accountName);
+    }
+    finally {
+        console.log = origLog;
+    }
+}
+// Main entry point
+(async () => {
+    try {
+        // Load bot configuration
+        const botConfig = loadBotConfig(botName);
+        // Load all bots from configuration to prevent pruning other active bots
+        const { config: allBotsConfigData } = loadSettingsFile(PROFILES_BOTS_FILE);
+        const allBotsConfig = resolveRawBotEntries(allBotsConfigData);
+        // Normalize all active bots with their correct indices in the unfiltered array
+        // CRITICAL: Index must be based on position in allBotsConfig, not in filtered array.
+        // The index is embedded in botKey (e.g., "bot-0", "bot-1"), determining file names.
+        // If index changes, the bot loses access to persisted state files.
+        const allActiveBots = allBotsConfig
+            .map((b, idx) => b.active !== false ? normalizeBotEntry(b, idx) : null)
+            .filter((b) => b !== null);
+        // Find the current bot's index in the unfiltered bots.json array
+        const botIndex = allBotsConfig.findIndex((b) => b.name === botName);
+        if (botIndex === -1) {
+            throw new Error(`Bot "${botName}" not found in ${PROFILES_BOTS_FILE}`);
+        }
+        // Normalize config for current bot with correct index from unfiltered array
+        const normalizedConfig = normalizeBotEntry(botConfig, botIndex);
+        // Get signing secret from daemon or interactively
+        const preferredAccount = normalizedConfig.preferredAccount;
+        const signingSecret = await getSigningSecretForAccount(preferredAccount);
+        // Create and start bot with log prefix for [bot.js] context
+        const bot = new DEXBot(normalizedConfig, { logPrefix: '[bot.js]' });
+        const botCleanupName = `Bot: ${botName}`;
+        let botCleanupHandler = null;
+        try {
+            // Register bot cleanup on shutdown
+            botCleanupHandler = () => bot.shutdown();
+            registerCleanup(botCleanupName, botCleanupHandler);
+            await bot.startWithPrivateKey(signingSecret);
+        }
+        catch (err) {
+            // The bot's _runStartupSequence already invoked shutdown() once on
+            // the failure path. Remove the registered cleanup so the LIFO
+            // cleanup loop in graceful_shutdown.ts does not call shutdown() a
+            // second time, and avoid the "double graceful shutdown" log pattern.
+            if (botCleanupHandler) {
+                unregisterCleanup(botCleanupHandler);
+            }
+            // Attempt graceful cleanup before exiting
+            try {
+                await bot.shutdown();
+            }
+            catch (shutdownErr) {
+                launcherLogger.error(`Error during cleanup: ${shutdownErr.message}`);
+            }
+            throw err;
+        }
+    }
+    catch (err) {
+        launcherLogger.error(`Failed to start bot: ${err.message}`);
+        runtime.exit(1);
+    }
+})();
+//# sourceMappingURL=bot.js.map

package/dist/bot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot.js","sourceRoot":"","sources":["../bot.ts"],"names":[],"mappings":";;AACA,0GAA0G;AAC1G;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;;AAEH,8EAA8E;AAC9E,2EAA2E;AAC3E,mEAAmE;AACnE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;AACjD,QAAQ,CAAC,KAAK,CAAC,CAAC;AAEhB,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACpD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;AAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACjD,MAAM,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AACjD,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAChE,MAAM,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AACrG,MAAM,EAAE,qBAAqB,EAAE,eAAe,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;AAC7G,MAAM,SAAS,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAClD,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;AACvD,MAAM,gBAAgB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;AAChE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAE/C,sFAAsF;AACtF,IAAI,CAAC;IACD,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC/D,YAAY,EAAE,CAAC;AACnB,CAAC;AAAC,OAAO,GAAQ,EAAE,CAAC;IAChB,OAAO,CAAC,KAAK,CAAC,oBAAoB,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,mCAAmC;AACnC,qBAAqB,EAAE,CAAC;AAExB,qEAAqE;AACrE,uEAAuE;AACvE,IAAI,OAAO,SAAS,CAAC,qBAAqB,KAAK,UAAU;IAAE,SAAS,CAAC,qBAAqB,EAAE,CAAC;AAC7F,uDAAuD;AACvD,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC;AAChC,IAAI,OAAO,gBAAgB,CAAC,uBAAuB,KAAK,UAAU;IAAE,gBAAgB,CAAC,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;AAClJ,MAAM,kBAAkB,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;AACpD,MAAM,cAAc,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;AAEtD,wCAAwC;AACxC,wFAAwF;AACxF,kEAAkE;AAClE,IAAI,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAChC,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5C,6DAA6D;IAC7D,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AACD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,iBAAiB,CAAC;AAC/D,MAAM,OAAO,GAAG,UAAU,IAAI,UAAU,CAAC;AAEzC,IAAI,CAAC,OAAO,EAAE,CAAC;IACX,cAAc,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC3E,cAAc,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAY;IAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtC,cAAc,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,IAAI,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE9C,iFAAiF;QACjF,IAAI,CAAC,MAAM,CAAC,8BAA8B,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC7D,MAAM,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;YAChG,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;gBACN,cAAc,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC1C,cAAc,CAAC,KAAK,CAAC,QAAQ,IAAI,mCAAmC,CAAC,CAAC;YACtE,cAAc,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;YAC7F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QAED,OAAO,QAAQ,CAAC;IACpB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,cAAc,CAAC,KAAK,CAAC,6BAA6B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,0BAA0B,CAAC,WAAmB;IACzD,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAC5B,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,IAAW,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACrB,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CACrG,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;IACL,CAAC,CAAC;IACF,IAAI,CAAC;QACD,OAAO,MAAM,QAAQ,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACzD,CAAC;YAAS,CAAC;QACP,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC;IAC1B,CAAC;AACL,CAAC;AAED,mBAAmB;AACnB,CAAC,KAAK,IAAI,EAAE;IACR,IAAI,CAAC;QACD,yBAAyB;QACzB,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAExC,wEAAwE;QACvE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;QAE/D,+EAA+E;QAC/E,qFAAqF;QACrF,oFAAoF;QACpF,mEAAmE;QACnE,MAAM,aAAa,GAAG,aAAa;aAC9B,GAAG,CAAC,CAAC,CAAM,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;aACnF,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAEpC,iEAAiE;QACjE,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QACzE,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,QAAQ,OAAO,kBAAkB,kBAAkB,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,4EAA4E;QAC5E,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAEjE,kDAAkD;QAClD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,gBAAgB,CAAC;QAC3D,MAAM,aAAa,GAAG,MAAM,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;QAExE,4DAA4D;QAC3D,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QACpE,MAAM,cAAc,GAAG,QAAQ,OAAO,EAAE,CAAC;QACzC,IAAI,iBAAiB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC;YACD,mCAAmC;YACnC,iBAAiB,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACzC,eAAe,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;YAEnD,MAAM,GAAG,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,mEAAmE;YACnE,8DAA8D;YAC9D,kEAAkE;YAClE,qEAAqE;YACrE,IAAI,iBAAiB,EAAE,CAAC;gBACpB,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;YACzC,CAAC;YACD,0CAA0C;YAC1C,IAAI,CAAC;gBACD,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;YACzB,CAAC;YAAC,OAAO,WAAgB,EAAE,CAAC;gBACxB,cAAc,CAAC,KAAK,CAAC,yBAAyB,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,GAAG,CAAC;QACd,CAAC;IAEN,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,cAAc,CAAC,KAAK,CAAC,wBAAwB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACN,CAAC,CAAC,EAAE,CAAC"}

package/dist/credential-daemon.d.ts

@@ -0,0 +1,64 @@
+#!/usr/bin/env node
+/**
+ * credential-daemon.ts - Secure Private Key Server
+ *
+ * DEXBot credential daemon for multi-bot private key management.
+ * Enables bot processes to request pre-decrypted keys via Unix socket.
+ * Keeps the derived vault secret in RAM so key updates remain visible while the daemon runs.
+ *
+ * ===============================================================================
+ * DAEMON OPERATION
+ * ===============================================================================
+ *
+ * STARTUP:
+ * 1. Prompts for master password ONCE at startup
+ * 2. Authenticates with profiles/keys.json
+ * 3. Re-wraps the decrypted account cache with a random session secret
+ * 4. Keeps the derived vault secret and session cache in RAM during operation
+ * 5. Listens on Unix socket for credential requests
+ * 6. Services private key requests from bot processes
+ *
+ * COMMUNICATION:
+ * - Socket: profiles/run/dexbot-cred-daemon.sock (or $DEXBOT_CRED_RUNTIME_DIR, or $XDG_RUNTIME_DIR/dexbot2/)
+ * - Ready file: profiles/run/dexbot-cred-daemon.ready (or $DEXBOT_CRED_RUNTIME_DIR, or $XDG_RUNTIME_DIR/dexbot2/)
+ * - Startup timeout: 60 seconds (DAEMON_STARTUP_TIMEOUT_MS)
+ * - Linux only (Unix socket)
+ *
+ * REQUEST FORMAT:
+ *   {"type": "ping", "accountName": "account-name"}
+ *   {"type": "probe-account", "accountName": "account-name"}
+ *   {"type": "broadcast-operation", "sessionId": "...", "accountName": "account-name", "operation": {...}}
+ *   {"type": "execute-operations", "sessionId": "...", "accountName": "account-name", "operations": [...]}
+ *
+ * RESPONSE FORMAT:
+ *   Success:  {"success": true, ...}
+ *   Failure:  {"success": false, "error": "Error message"}
+ *
+ * ===============================================================================
+ * SECURITY BENEFITS
+ * ===============================================================================
+ *
+ * - Master password prompt only once (at daemon startup)
+ * - Individual bot processes have no access to the derived vault secret
+ * - No persisted raw password in environment variables or config files
+ * - Private keys never written to disk unencrypted
+ * - Centralized key management
+ * - Unix socket provides process-level isolation
+ *
+ * ===============================================================================
+ * USAGE
+ * ===============================================================================
+ *
+ * Direct:
+ *   tsx credential-daemon.ts
+ *
+ * Via PM2 (recommended):
+ *   npm run unlock
+ *   or: node unlock
+ *
+ * Bot processes then access keys automatically via socket connection.
+ *
+ * ===============================================================================
+ */
+export {};
+//# sourceMappingURL=credential-daemon.d.ts.map

package/dist/credential-daemon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-daemon.d.ts","sourceRoot":"","sources":["../credential-daemon.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AA4+BH,OAAO,EAAE,CAAC"}