pandora-cli-skills 1.1.49 → 1.1.51

package/README_FOR_SHARING.md

@@ -367,7 +367,7 @@ Mirror advanced flags (for operator tuning):
 
 ### Resolve command
 - Usage:
-  - `pandora [--output table|json] resolve --poll-address <address> --answer yes|no --reason <text> --dry-run|--execute [--chain-id <id>] [--rpc-url <url>] [--private-key <hex>]`
+  - `pandora [--output table|json] resolve [--dotenv-path <path>] [--skip-dotenv] --poll-address <address> --answer yes|no|invalid --reason <text> --dry-run|--execute [--chain-id <id>] [--rpc-url <url>] [--private-key <hex>]`
 - Behavior:
   - `--dry-run` returns a deterministic execution plan.
   - `--execute` submits the resolution transaction with decoded revert diagnostics on failure.

package/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pandora-cli-skills
 summary: Canonical skill and operator guide for Pandora CLI including mirror, polymarket, resolve, and LP flows.
-version: 1.1.49
+version: 1.1.51
 ---
 
 # Pandora CLI & Skills
@@ -145,7 +145,7 @@ pandora [--output table|json] webhook test [--webhook-url <url>] [--webhook-temp
 pandora [--output table|json] leaderboard [--metric profit|volume|win-rate] [--chain-id <id>] [--limit <n>] [--min-trades <n>]
 pandora [--output table|json] analyze --market-address <address> [--provider <name>] [--model <id>] [--max-cost-usd <n>] [--temperature <n>] [--timeout-ms <ms>]
 pandora [--output table|json] suggest --wallet <address> --risk low|medium|high --budget <amount> [--count <n>] [--include-venues pandora,polymarket]
-pandora [--output table|json] resolve --poll-address <address> --answer yes|no|invalid --reason <text> --dry-run|--execute [--fork] [--fork-rpc-url <url>] [--fork-chain-id <id>] [--chain-id <id>] [--rpc-url <url>] [--private-key <hex>]
+pandora [--output table|json] resolve [--dotenv-path <path>] [--skip-dotenv] --poll-address <address> --answer yes|no|invalid --reason <text> --dry-run|--execute [--fork] [--fork-rpc-url <url>] [--fork-chain-id <id>] [--chain-id <id>] [--rpc-url <url>] [--private-key <hex>]
 pandora [--output table|json] lp add|remove|positions [--market-address <address>] [--wallet <address>] [--amount-usdc <n>] [--lp-tokens <n>] [--dry-run|--execute] [--fork] [--fork-rpc-url <url>] [--fork-chain-id <id>] [--chain-id <id>] [--rpc-url <url>] [--private-key <hex>] [--usdc <address>] [--deadline-seconds <n>] [--indexer-url <url>] [--timeout-ms <ms>]
 pandora [--output table|json] risk show|panic [--risk-file <path>] [--clear] [--reason <text>] [--actor <id>]
 pandora stream prices|events [--indexer-url <url>] [--indexer-ws-url <url>] [--timeout-ms <ms>] [--interval-ms <ms>] [--market-address <address>] [--chain-id <id>] [--limit <n>]
@@ -418,7 +418,7 @@ pandora --output json schema
 
 ### Resolve command
 - Usage:
-  - `pandora [--output table|json] resolve --poll-address <address> --answer yes|no --reason <text> --dry-run|--execute [--chain-id <id>] [--rpc-url <url>] [--private-key <hex>]`
+  - `pandora [--output table|json] resolve [--dotenv-path <path>] [--skip-dotenv] --poll-address <address> --answer yes|no|invalid --reason <text> --dry-run|--execute [--chain-id <id>] [--rpc-url <url>] [--private-key <hex>]`
 - Behavior:
   - `--dry-run` returns the call plan and decode-ready payload.
   - `--execute` submits on-chain resolution through configured oracle/operator path.

package/cli/lib/contract_error_decoder.cjs

@@ -35,6 +35,11 @@ const CONTRACT_ERROR_ABI = [
   },
 ];
 
+const REVERT_SELECTOR_HINTS = {
+  // Market-specific minimum-notional guard seen on some Pandora AMM deployments.
+  '0x7e2d7787': 'Trade too small for this market. Increase --amount-usdc and retry.',
+};
+
 function isHexData(value) {
   return /^0x[0-9a-fA-F]*$/.test(String(value || ''));
 }
@@ -126,6 +131,10 @@ function formatDecodedContractError(decoded) {
     return decoded.errorName;
   }
   if (decoded.data) {
+    const selector = String(decoded.data).slice(0, 10).toLowerCase();
+    if (REVERT_SELECTOR_HINTS[selector]) {
+      return `${REVERT_SELECTOR_HINTS[selector]} (selector ${selector})`;
+    }
     return `Contract reverted (${decoded.data})`;
   }
   return null;

package/cli/lib/mirror_sync_service.cjs

@@ -102,82 +102,143 @@ async function runMirrorSync(options, deps = {}) {
         break;
       }
 
-      resetDailyCountersIfNeeded(state, tickAt);
-
-      const verifyPayload =
-        iteration === 1 && startupVerifyPayload
-          ? startupVerifyPayload
-          : await verifyFn(buildVerifyRequest(options));
-
-      const snapshotMetrics = evaluateSnapshot(verifyPayload, options);
-      const plan = buildTickPlan({
-        snapshotMetrics,
-        state,
-        options,
-      });
-      const depth = await fetchDepthSnapshot({
-        depthFn,
-        verifyPayload,
-        options,
-      });
-
-      const gate = applyGateBypassPolicy(
-        evaluateStrictGates(
-          buildTickGateContext({
-            verifyPayload,
+      try {
+        resetDailyCountersIfNeeded(state, tickAt);
+
+        const verifyPayload =
+          iteration === 1 && startupVerifyPayload
+            ? startupVerifyPayload
+            : await verifyFn(buildVerifyRequest(options));
+
+        const snapshotMetrics = evaluateSnapshot(verifyPayload, options);
+        const plan = buildTickPlan({
+          snapshotMetrics,
+          state,
+          options,
+        });
+        const depth = await fetchDepthSnapshot({
+          depthFn,
+          verifyPayload,
+          options,
+        });
+
+        const gate = applyGateBypassPolicy(
+          evaluateStrictGates(
+            buildTickGateContext({
+              verifyPayload,
+              options,
+              state,
+              plan,
+              snapshotMetrics,
+              depth,
+              minimumTimeToCloseSec,
+            }),
+          ),
+          options,
+        );
+
+        const snapshot = buildTickSnapshot({
+          iteration,
+          tickAt,
+          verifyPayload,
+          options,
+          snapshotMetrics,
+          plan,
+          depth,
+          gate,
+        });
+
+        if (snapshotMetrics.driftTriggered || plan.hedgeTriggered) {
+          await processTriggeredAction({
             options,
             state,
+            snapshot,
             plan,
+            gate,
+            tickAt,
+            loadedFilePath: loaded.filePath,
+            rebalanceFn,
+            hedgeFn,
+            sendWebhook,
+            strategyHash: hash,
+            iteration,
+            actions,
+            webhookReports,
             snapshotMetrics,
+            verifyPayload,
             depth,
-            minimumTimeToCloseSec,
-          }),
-        ),
-        options,
-      );
-
-      const snapshot = buildTickSnapshot({
-        iteration,
-        tickAt,
-        verifyPayload,
-        options,
-        snapshotMetrics,
-        plan,
-        depth,
-        gate,
-      });
-
-      if (snapshotMetrics.driftTriggered || plan.hedgeTriggered) {
-        await processTriggeredAction({
-          options,
+          });
+        }
+
+        await persistTickSnapshot({
+          loadedFilePath: loaded.filePath,
           state,
-          snapshot,
-          plan,
-          gate,
           tickAt,
+          snapshot,
+          snapshots,
+          onTick,
+          iteration,
+        });
+      } catch (err) {
+        const errorCode = err && err.code ? String(err.code) : 'MIRROR_SYNC_TICK_FAILED';
+        const errorMessage = err && err.message ? err.message : String(err);
+        const errorDetails = err && err.details !== undefined ? err.details : null;
+        const timestamp = tickAt.toISOString();
+
+        const diagnostic = {
+          level: 'error',
+          scope: 'tick',
+          iteration,
+          timestamp,
+          code: errorCode,
+          message: errorMessage,
+          retryable: options.mode !== 'once',
+        };
+        if (errorDetails !== null) diagnostic.details = errorDetails;
+        diagnostics.push(diagnostic);
+
+        const snapshot = {
+          schemaVersion: MIRROR_SYNC_SCHEMA_VERSION,
+          timestamp,
+          iteration,
+          metrics: {
+            driftBps: null,
+            plannedRebalanceUsdc: 0,
+            plannedHedgeUsdc: 0,
+          },
+          strictGate: {
+            ok: false,
+            failedChecks: [],
+            checks: [],
+          },
+          action: {
+            status: 'error',
+            failedChecks: [],
+            forcedGateBypass: false,
+            errorCode,
+            errorMessage,
+          },
+          error: {
+            code: errorCode,
+            message: errorMessage,
+            details: errorDetails,
+          },
+        };
+
+        await persistTickSnapshot({
           loadedFilePath: loaded.filePath,
-          rebalanceFn,
-          hedgeFn,
-          sendWebhook,
-          strategyHash: hash,
+          state,
+          tickAt,
+          snapshot,
+          snapshots,
+          onTick,
           iteration,
-          actions,
-          webhookReports,
-          snapshotMetrics,
-          verifyPayload,
-          depth,
         });
-      }
 
-      await persistTickSnapshot({
-        loadedFilePath: loaded.filePath,
-        state,
-        tickAt,
-        snapshot,
-        snapshots,
-        onTick,
-        iteration,
-      });
+        if (options.mode === 'once') {
+          throw err;
+        }
+      }
 
       if (shouldStop) break;
       if (iteration >= maxIterations) break;

package/cli/lib/parsers/mirror_deploy_flags.cjs

@@ -7,6 +7,18 @@ function requireDep(deps, name) {
   return deps[name];
 }
 
+function normalizeSources(entries) {
+  const values = [];
+  for (const entry of Array.isArray(entries) ? entries : []) {
+    const parts = String(entry || '').split(/[\n,]/g);
+    for (const part of parts) {
+      const normalized = String(part || '').trim();
+      if (normalized) values.push(normalized);
+    }
+  }
+  return values;
+}
+
 /**
  * Creates the mirror deploy flags parser.
  * @param {object} deps
@@ -250,6 +262,12 @@ function createParseMirrorDeployFlags(deps) {
     ) {
       throw new CliError('INVALID_ARGS', '--distribution-yes + --distribution-no must equal 1000000000.');
     }
+    if (options.sourcesProvided && normalizeSources(options.sources).length < 2) {
+      throw new CliError(
+        'INVALID_FLAG_VALUE',
+        '--sources requires at least two non-empty URLs when explicitly provided.',
+      );
+    }
 
     return options;
   };

package/cli/lib/parsers/mirror_go_flags.cjs

@@ -7,6 +7,18 @@ function requireDep(deps, name) {
   return deps[name];
 }
 
+function normalizeSources(entries) {
+  const values = [];
+  for (const entry of Array.isArray(entries) ? entries : []) {
+    const parts = String(entry || '').split(/[\n,]/g);
+    for (const part of parts) {
+      const normalized = String(part || '').trim();
+      if (normalized) values.push(normalized);
+    }
+  }
+  return values;
+}
+
 /**
  * Creates the mirror go flags parser.
  * @param {object} deps
@@ -354,6 +366,12 @@ function createParseMirrorGoFlags(deps) {
         );
       }
     }
+    if (options.sourcesProvided && normalizeSources(options.sources).length < 2) {
+      throw new CliError(
+        'INVALID_FLAG_VALUE',
+        '--sources requires at least two non-empty URLs when explicitly provided.',
+      );
+    }
 
     return options;
   };

package/cli/lib/resolve_command_service.cjs

@@ -14,6 +14,8 @@ function createRunResolveCommand(deps) {
   const includesHelpFlag = requireDep(deps, 'includesHelpFlag');
   const emitSuccess = requireDep(deps, 'emitSuccess');
   const commandHelpPayload = requireDep(deps, 'commandHelpPayload');
+  const parseIndexerSharedFlags = requireDep(deps, 'parseIndexerSharedFlags');
+  const maybeLoadTradeEnv = requireDep(deps, 'maybeLoadTradeEnv');
   const parseResolveFlags = requireDep(deps, 'parseResolveFlags');
   const runResolve = requireDep(deps, 'runResolve');
   const renderSingleEntityTable = requireDep(deps, 'renderSingleEntityTable');
@@ -21,24 +23,26 @@ function createRunResolveCommand(deps) {
   const assertLiveWriteAllowed = typeof deps.assertLiveWriteAllowed === 'function' ? deps.assertLiveWriteAllowed : null;
 
   return async function runResolveCommand(args, context) {
-    if (includesHelpFlag(args)) {
+    const shared = parseIndexerSharedFlags(args);
+    if (includesHelpFlag(shared.rest)) {
       if (context.outputMode === 'json') {
         emitSuccess(
           context.outputMode,
           'resolve.help',
           commandHelpPayload(
-            'pandora [--output table|json] resolve --poll-address <address> --answer yes|no|invalid --reason <text> --dry-run|--execute [--fork] [--fork-rpc-url <url>] [--fork-chain-id <id>] [--chain-id <id>] [--rpc-url <url>] [--private-key <hex>]',
+            'pandora [--output table|json] resolve [--dotenv-path <path>] [--skip-dotenv] --poll-address <address> --answer yes|no|invalid --reason <text> --dry-run|--execute [--fork] [--fork-rpc-url <url>] [--fork-chain-id <id>] [--chain-id <id>] [--rpc-url <url>] [--private-key <hex>]',
           ),
         );
       } else {
         // eslint-disable-next-line no-console
         console.log(
-          'Usage: pandora [--output table|json] resolve --poll-address <address> --answer yes|no|invalid --reason <text> --dry-run|--execute [--fork] [--fork-rpc-url <url>] [--fork-chain-id <id>] [--chain-id <id>] [--rpc-url <url>] [--private-key <hex>]',
+          'Usage: pandora [--output table|json] resolve [--dotenv-path <path>] [--skip-dotenv] --poll-address <address> --answer yes|no|invalid --reason <text> --dry-run|--execute [--fork] [--fork-rpc-url <url>] [--fork-chain-id <id>] [--chain-id <id>] [--rpc-url <url>] [--private-key <hex>]',
         );
       }
       return;
     }
-    const options = parseResolveFlags(args);
+    maybeLoadTradeEnv(shared);
+    const options = parseResolveFlags(shared.rest);
     if (options.execute && assertLiveWriteAllowed) {
       await assertLiveWriteAllowed('resolve.execute', {
         runtimeMode: options.fork || options.forkRpcUrl ? 'fork' : 'live',

package/cli/pandora.cjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 
 const fs = require('fs');
+const os = require('os');
 const path = require('path');
 const { spawnSync } = require('child_process');
 const { createCommandRouter } = require('./lib/command_router.cjs');
@@ -513,7 +514,13 @@ function getDoctorServiceInstance() {
 }
 
 const ROOT = path.resolve(__dirname, '..');
-const DEFAULT_ENV_FILE = path.join(ROOT, 'scripts', '.env');
+const DEFAULT_ENV_FILE_PRIMARY = path.join(ROOT, 'scripts', '.env');
+const DEFAULT_ENV_FILE_FALLBACK = path.join(os.homedir(), '.pandora-cli.env');
+const DEFAULT_ENV_FILE = fs.existsSync(DEFAULT_ENV_FILE_FALLBACK)
+  ? DEFAULT_ENV_FILE_FALLBACK
+  : fs.existsSync(DEFAULT_ENV_FILE_PRIMARY)
+    ? DEFAULT_ENV_FILE_PRIMARY
+    : DEFAULT_ENV_FILE_FALLBACK;
 const DEFAULT_ENV_EXAMPLE = path.join(ROOT, 'scripts', '.env.example');
 const DEFAULT_INDEXER_URL = SHARED_DEFAULT_INDEXER_URL;
 let PACKAGE_VERSION = '0.0.0';
@@ -793,7 +800,7 @@ Usage:
   pandora [--output table|json] leaderboard [--metric profit|volume|win-rate] [--chain-id <id>] [--limit <n>] [--min-trades <n>]
   pandora [--output table|json] analyze --market-address <address> [--provider <name>] [--model <id>] [--max-cost-usd <n>] [--temperature <n>] [--timeout-ms <ms>]
   pandora [--output table|json] suggest --wallet <address> --risk low|medium|high --budget <amount> [--count <n>] [--include-venues pandora,polymarket]
-  pandora [--output table|json] resolve --poll-address <address> --answer yes|no|invalid --reason <text> --dry-run|--execute [--fork] [--fork-rpc-url <url>] [--fork-chain-id <id>] [--chain-id <id>] [--rpc-url <url>] [--private-key <hex>]
+  pandora [--output table|json] resolve [--dotenv-path <path>] [--skip-dotenv] --poll-address <address> --answer yes|no|invalid --reason <text> --dry-run|--execute [--fork] [--fork-rpc-url <url>] [--fork-chain-id <id>] [--chain-id <id>] [--rpc-url <url>] [--private-key <hex>]
   pandora [--output table|json] lp add|remove|positions [--market-address <address>] [--wallet <address>] [--amount-usdc <n>] [--lp-tokens <n>|--all] [--dry-run|--execute] [--fork] [--fork-rpc-url <url>] [--fork-chain-id <id>] [--chain-id <id>] [--rpc-url <url>] [--private-key <hex>] [--usdc <address>] [--deadline-seconds <n>] [--indexer-url <url>] [--timeout-ms <ms>]
   pandora [--output table|json] risk show|panic [--risk-file <path>] [--clear] [--reason <text>] [--actor <id>]
   pandora stream prices|events [--indexer-url <url>] [--indexer-ws-url <url>] [--timeout-ms <ms>] [--interval-ms <ms>] [--market-address <address>] [--chain-id <id>] [--limit <n>]
@@ -852,7 +859,7 @@ Examples:
 
 Notes:
   - launch/clone-bet forward unknown flags directly to underlying scripts.
-  - scripts/.env is loaded automatically for launch/clone-bet unless --skip-dotenv is used.
+  - Env auto-load default: ~/.pandora-cli.env when present; otherwise scripts/.env. Use --skip-dotenv to disable.
   - --output json is supported for all commands except launch/clone-bet.
   - Indexer URL resolution order: --indexer-url, PANDORA_INDEXER_URL, INDEXER_URL, default public indexer.
   - mirror status --with-live can enrich output with Polymarket position data when POLYMARKET_* credentials are set; missing endpoints/creds return diagnostics instead of hard failures.
@@ -4746,6 +4753,8 @@ const runResolveCommandFromService = createRunResolveCommand({
   includesHelpFlag,
   emitSuccess,
   commandHelpPayload,
+  parseIndexerSharedFlags,
+  maybeLoadTradeEnv,
   parseResolveFlags: parseResolveFlagsFromModule,
   runResolve,
   renderSingleEntityTable,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pandora-cli-skills",
-  "version": "1.1.49",
+  "version": "1.1.51",
   "description": "Pandora CLI & Skills",
   "main": "cli/pandora.cjs",
   "bin": {
@@ -68,6 +68,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.27.1",
     "@polymarket/clob-client": "^5.2.4",
+    "playwright-core": "^1.58.2",
     "tsx": "^4.21.0",
     "viem": "^2.46.2",
     "ws": "^8.19.0"

package/tests/cli/cli.integration.test.cjs

@@ -1,6 +1,7 @@
 const test = require('node:test');
 const assert = require('node:assert/strict');
 const fs = require('fs');
+const os = require('os');
 const path = require('path');
 
 const {
@@ -5612,6 +5613,28 @@ test('resolve and lp commands are enabled', () => {
   assert.equal(lpPayload.data.wallet, ADDRESSES.wallet1.toLowerCase());
 });
 
+test('resolve accepts --dotenv-path and returns env-file errors instead of unknown-flag', () => {
+  const missingFile = path.join(os.tmpdir(), `pandora-missing-env-${Date.now()}.env`);
+  const result = runCli([
+    '--output',
+    'json',
+    'resolve',
+    '--dotenv-path',
+    missingFile,
+    '--poll-address',
+    '0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+    '--answer',
+    'yes',
+    '--reason',
+    'fixture',
+    '--dry-run',
+  ]);
+
+  assert.equal(result.status, 1);
+  const payload = parseJsonOutput(result);
+  assert.equal(payload.error.code, 'ENV_FILE_NOT_FOUND');
+});
+
 test('launch enforces mode flag and dry-run reaches deterministic preflight', () => {
   const args = buildLaunchArgs();
 

package/tests/unit/new-features.test.cjs

@@ -43,6 +43,7 @@ const {
   runPolymarketPreflight,
   POLYMARKET_OPS_SCHEMA_VERSION,
 } = require('../../cli/lib/polymarket_ops_service.cjs');
+const { formatDecodedContractError } = require('../../cli/lib/contract_error_decoder.cjs');
 const { runMirrorSync } = require('../../cli/lib/mirror_sync_service.cjs');
 const { createRunMirrorCommand } = require('../../cli/lib/mirror_command_service.cjs');
 const { resolveForkRuntime } = require('../../cli/lib/fork_runtime_service.cjs');
@@ -260,6 +261,12 @@ test('evaluateMarket throws deterministic error without provider', async () => {
   );
 });
 
+test('contract error formatter maps known minimum-trade selector to actionable hint', () => {
+  const message = formatDecodedContractError({ data: '0x7e2d7787' });
+  assert.match(message, /trade too small/i);
+  assert.match(message, /--amount-usdc/i);
+});
+
 test('autopilot state helpers are deterministic', () => {
   const hash1 = strategyHash({ a: 1, b: 'x' });
   const hash2 = strategyHash({ a: 1, b: 'x' });
@@ -1486,6 +1493,165 @@ test('runMirrorSync handles thrown hedgeFn errors without consuming idempotency'
   }
 });
 
+test('runMirrorSync run mode continues after transient tick verification failures', async () => {
+  const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'pandora-mirror-sync-tick-retry-'));
+  const stateFile = path.join(tempDir, 'mirror-state.json');
+  const killSwitchFile = path.join(tempDir, 'STOP');
+
+  const verifyPayload = {
+    matchConfidence: 0.99,
+    gateResult: {
+      ok: true,
+      failedChecks: [],
+      checks: [{ code: 'CLOSE_TIME_DELTA', ok: true, meta: { closeDeltaHours: 0 } }],
+    },
+    sourceMarket: {
+      source: 'polymarket',
+      marketId: 'poly-cond-1',
+      yesPct: 60,
+      yesTokenId: 'yes-token',
+      noTokenId: 'no-token',
+    },
+    pandora: {
+      yesPct: 55,
+      reserveYes: 5,
+      reserveNo: 5,
+    },
+    expiry: { minTimeToExpirySec: 7200 },
+  };
+
+  let verifyCallCount = 0;
+
+  try {
+    const payload = await runMirrorSync(
+      {
+        mode: 'run',
+        iterations: 3,
+        indexerUrl: 'https://example.invalid/graphql',
+        timeoutMs: 1000,
+        pandoraMarketAddress: '0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+        polymarketMarketId: 'poly-cond-1',
+        executeLive: false,
+        trustDeploy: false,
+        hedgeEnabled: false,
+        hedgeRatio: 1,
+        intervalMs: 1,
+        driftTriggerBps: 10000,
+        hedgeTriggerUsdc: 1000,
+        maxRebalanceUsdc: 25,
+        maxHedgeUsdc: 10,
+        maxOpenExposureUsdc: 100,
+        maxTradesPerDay: 10,
+        cooldownMs: 1000,
+        depthSlippageBps: 100,
+        stateFile,
+        killSwitchFile,
+        polymarketHost: 'https://clob.polymarket.com',
+      },
+      {
+        verifyFn: async () => {
+          verifyCallCount += 1;
+          if (verifyCallCount === 2) {
+            const error = new Error('temporary indexer timeout');
+            error.code = 'INDEXER_TIMEOUT';
+            throw error;
+          }
+          return verifyPayload;
+        },
+        depthFn: async () => ({
+          depthWithinSlippageUsd: 1000,
+          yesDepth: { depthUsd: 1000, midPrice: 0.4, worstPrice: 0.41 },
+          noDepth: { depthUsd: 1000, midPrice: 0.6, worstPrice: 0.61 },
+        }),
+        sleep: async () => {},
+      },
+    );
+
+    assert.equal(payload.iterationsCompleted, 3);
+    assert.equal(payload.snapshots.length, 3);
+    assert.equal(payload.diagnostics.length, 1);
+    assert.equal(payload.diagnostics[0].code, 'INDEXER_TIMEOUT');
+    assert.equal(payload.diagnostics[0].scope, 'tick');
+    assert.equal(payload.snapshots[1].action.status, 'error');
+    assert.equal(payload.snapshots[1].error.code, 'INDEXER_TIMEOUT');
+  } finally {
+    fs.rmSync(tempDir, { recursive: true, force: true });
+  }
+});
+
+test('runMirrorSync once mode still fails fast on tick errors', async () => {
+  const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'pandora-mirror-sync-once-fail-'));
+  const stateFile = path.join(tempDir, 'mirror-state.json');
+  const killSwitchFile = path.join(tempDir, 'STOP');
+
+  const verifyPayload = {
+    matchConfidence: 0.99,
+    gateResult: {
+      ok: true,
+      failedChecks: [],
+      checks: [{ code: 'CLOSE_TIME_DELTA', ok: true, meta: { closeDeltaHours: 0 } }],
+    },
+    sourceMarket: {
+      source: 'polymarket',
+      marketId: 'poly-cond-1',
+      yesPct: 60,
+      yesTokenId: 'yes-token',
+      noTokenId: 'no-token',
+    },
+    pandora: {
+      yesPct: 55,
+      reserveYes: 5,
+      reserveNo: 5,
+    },
+    expiry: { minTimeToExpirySec: 7200 },
+  };
+
+  try {
+    await assert.rejects(
+      runMirrorSync(
+        {
+          mode: 'once',
+          indexerUrl: 'https://example.invalid/graphql',
+          timeoutMs: 1000,
+          pandoraMarketAddress: '0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+          polymarketMarketId: 'poly-cond-1',
+          executeLive: false,
+          trustDeploy: false,
+          hedgeEnabled: false,
+          hedgeRatio: 1,
+          intervalMs: 1,
+          driftTriggerBps: 10000,
+          hedgeTriggerUsdc: 1000,
+          maxRebalanceUsdc: 25,
+          maxHedgeUsdc: 10,
+          maxOpenExposureUsdc: 100,
+          maxTradesPerDay: 10,
+          cooldownMs: 1000,
+          depthSlippageBps: 100,
+          stateFile,
+          killSwitchFile,
+          polymarketHost: 'https://clob.polymarket.com',
+        },
+        {
+          verifyFn: async () => verifyPayload,
+          depthFn: async () => {
+            const error = new Error('depth fetch unavailable');
+            error.code = 'DEPTH_FETCH_FAILED';
+            throw error;
+          },
+          sleep: async () => {},
+        },
+      ),
+      (error) => {
+        assert.equal(error.code, 'DEPTH_FETCH_FAILED');
+        return true;
+      },
+    );
+  } finally {
+    fs.rmSync(tempDir, { recursive: true, force: true });
+  }
+});
+
 test('runAutopilot does not consume budget/idempotency when executeFn throws', async () => {
   const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'pandora-autopilot-failure-'));
   const stateFile = path.join(tempDir, 'autopilot-state.json');
@@ -1732,6 +1898,41 @@ test('createParseMirrorDeployFlags enforces secure --rpc-url and drops dead allo
   );
 });
 
+test('createParseMirrorDeployFlags rejects explicit empty or underspecified --sources early', () => {
+  const parseMirrorDeployFlags = createParseMirrorDeployFlags(buildParserDeps());
+
+  assert.throws(
+    () =>
+      parseMirrorDeployFlags([
+        '--plan-file',
+        '/tmp/plan.json',
+        '--dry-run',
+        '--sources',
+        '',
+      ]),
+    (error) => {
+      assert.equal(error.code, 'INVALID_FLAG_VALUE');
+      assert.match(error.message, /at least two non-empty urls/i);
+      return true;
+    },
+  );
+
+  assert.throws(
+    () =>
+      parseMirrorDeployFlags([
+        '--plan-file',
+        '/tmp/plan.json',
+        '--dry-run',
+        '--sources',
+        'https://example.com/one',
+      ]),
+    (error) => {
+      assert.equal(error.code, 'INVALID_FLAG_VALUE');
+      return true;
+    },
+  );
+});
+
 test('mirror sync gates normalize and selectively bypass failed checks', () => {
   assert.deepEqual(
     normalizeSkipGateChecks([' depth_coverage ', 'unknown_check', 'MAX_TRADES_PER_DAY', 'DEPTH_COVERAGE']),
@@ -1884,6 +2085,39 @@ test('createParseMirrorGoFlags treats bare --skip-gate as force gate mode', () =
   assert.deepEqual(options.skipGateChecks, []);
 });
 
+test('createParseMirrorGoFlags rejects explicit empty or underspecified --sources early', () => {
+  const parseMirrorGoFlags = createParseMirrorGoFlags(buildParserDeps());
+
+  assert.throws(
+    () =>
+      parseMirrorGoFlags([
+        '--polymarket-market-id',
+        'poly-1',
+        '--sources',
+        '',
+      ]),
+    (error) => {
+      assert.equal(error.code, 'INVALID_FLAG_VALUE');
+      assert.match(error.message, /at least two non-empty urls/i);
+      return true;
+    },
+  );
+
+  assert.throws(
+    () =>
+      parseMirrorGoFlags([
+        '--polymarket-market-id',
+        'poly-1',
+        '--sources',
+        'https://example.com/one',
+      ]),
+    (error) => {
+      assert.equal(error.code, 'INVALID_FLAG_VALUE');
+      return true;
+    },
+  );
+});
+
 test('createParseLifecycleFlags validates start|status|resolve contracts', () => {
   const parseLifecycleFlags = createParseLifecycleFlags({
     CliError: ParserCliError,