chore: v1.0.8 — system invariants doc, shared runtime fix, pending-broadcast deadlock

## Fixes
- modules/launcher/market_adapter_runtime.ts: change stdio from 'inherit' to 'ignore'
  to stop market adapter logs from duplicating into dexbot.log (missed second spawn
  path — watchdog was fixed in v1.0.3).
- modules/dexbot_class.ts: secondary pending-broadcasts deadlock fix at
  _updateOrdersOnChainBatchCOW (missed call site from f5e4340).

## Docs
- docs/COW_INVARIANTS.md: comprehensive system invariants expansion with categorized
  prefixes across all subsystems (sync engine, maintenance, grid, reconcile, batch,
  fund registry, subscriptions).

## Chore
- Version bumped to 1.0.8 across all manifests.

## Testing
- npx tsc --noEmit: passes
- 1677 total commits

Author: froooze

CHANGELOG.md

@@ -2,6 +2,17 @@
 
 All notable changes to this project will be documented in this file.
 
+## [1.0.8] - 2026-07-05 - System Invariants Expansion & Shared Runtime Fix
+
+### 2026-07-05
+
+- **Fix**: prevent deadlock in secondary pending-broadcasts recovery path — second call site at `_updateOrdersOnChainBatchCOW` (line 3851) passed `fillLockAlreadyHeld: true` flag to `_reconcileAfterUncertainBroadcast`, fixing a missed deadlock path that fired when a CREATE batch was rejected due to prior pending broadcasts (`f5e4340e`).
+- **Fix**: market adapter log duplication in shared runtime — the in-process `market_adapter_runtime.ts` used `stdio: 'inherit'`, piping all child stdout into dexbot.log. Changed to `'ignore'` to match the watchdog fix from v1.0.3.
+- **Fix**: bot key resolution — extract shared bot key utils into `analysis/bot_key_utils.ts`, fix `roundTo` ReferenceError in browser-side chart JS, add `--use-cached` flag (later removed), add 20 tests (`e440cb3a`).
+- **Fix**: remove `--use-cached` flag — always resolve to candle cache from `--source market_adapter`; removed centers-file fallback with no useful history data (`7eee1ac9`).
+- **Docs**: comprehensive system invariants expansion — `docs/COW_INVARIANTS.md` rewritten with full coverage for COW pipeline, sync engine, maintenance runtime, grid structure, reconcile, batch/pipeline, fund registry, and subscriptions. All invariants now carry categorized prefixes (`INV-COW`, `INV-SYNC`, `INV-MAINT`, etc.).
+- **Chore**: version bumped to 1.0.8 across all manifests.
+
 ## [1.0.7] - 2026-07-03 - BROADCAST_DEADLINE Graceful Recovery
 
 ### 2026-07-03

analysis/ama_fitting/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ama_fitting",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "description": "Tools for fitting AMA parameters to market data",
   "main": "../../dist/analysis/ama_fitting/optimizer_high_resolution.js",
   "scripts": {

claw/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dexbot2-claw",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "private": true,
   "description": "Claw bridge and runtime integration layer for BitShares and DEXBot2.",
   "type": "commonjs",

claw/runtimes/openclaw-plugin/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "bitshares-claw",
   "name": "BitShares Claw",
   "description": "Native BitShares and DEXBot2 tools from the DEXBot2 claw integration",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "skills": [
     "skills"
   ],

claw/runtimes/openclaw-plugin/package.json

@@ -1,7 +1,7 @@
 {
   "name": "bitshares-claw-openclaw-plugin",
   "private": true,
-  "version": "1.0.7",
+  "version": "1.0.8",
   "type": "commonjs",
   "main": "index.js"
 }

claw/tests/test_claw_mcp_transport.ts

@@ -30,7 +30,7 @@ async function testParserAcceptsJsonlAcrossChunksAndSingleBuffer() {
       capabilities: {},
       clientInfo: {
         name: 'claw-mcp-transport-test',
-        version: '1.0.7'
+        version: '1.0.8'
       },
       protocolVersion: '2024-11-05'
     }
@@ -181,7 +181,7 @@ async function testMainEntrypointHandlesRealProcessInitialize() {
       capabilities: {},
       clientInfo: {
         name: 'claw-mcp-transport-test',
-        version: '1.0.7'
+        version: '1.0.8'
       },
       protocolVersion: '2024-11-05'
     }

docs/COW_INVARIANTS.md

@@ -17,22 +17,18 @@ This document defines the non-negotiable behavioral invariants for the DEXBot2 s
 | Prefix | Subsystem |
 |--------|-----------|
 | `INV-COW` | COW pipeline |
-| `INV-REC` | Reconcile |
 | `INV-PROJ` | Projection |
 | `INV-ID` | Order identity |
 | `INV-ACC` | Accounting / fund tracking |
 | `INV-DUST` | Dust health |
 | `INV-SYNC` | Sync engine |
 | `INV-MAINT` | Maintenance runtime |
 | `INV-GRID` | Grid structure |
-| `INV-RECON` | Reconcile layer |
+| `INV-RECON` | Reconcile |
 | `INV-BATCH` | Batch / pipeline |
-| `INV-PIPE` | Pipeline signals |
 | `INV-STATE` | State / lifecycle |
 | `INV-REG` | Fund registry |
 | `INV-SUB` | Subscriptions |
-| `INV-BOOT` | Bootstrap / resync |
-| `INV-UPDATE` | On-chain updates |
 
 ---
 
@@ -47,11 +43,6 @@ This document defines the non-negotiable behavioral invariants for the DEXBot2 s
   - Commit swaps working state to master atomically.
   - On failed/aborted execution, working state is discarded and master remains unchanged.
 
-- `INV-REC-001` Rotation-only size updates in reconcile
-  - `reconcileGrid` does not emit generic in-place size UPDATEs for active slot diffs.
-  - Size-changing UPDATE actions are rotation updates (`newGridId` path).
-  - Non-rotation size correction is handled by dedicated maintenance flows.
-
 - `INV-PROJ-001` New projected orders remain virtual
   - Orders projected into empty slots must be `VIRTUAL` with no `orderId` until chain confirmation.
 
@@ -81,9 +72,6 @@ This document defines the non-negotiable behavioral invariants for the DEXBot2 s
   - Checked with widened tolerance `max(PERCENT_TOLERANCE * 3, 0.15)`.
   - Registry failure logs a warning, not a silent skip.
 
-- `INV-DUST-001` Dust health gating parity
-  - Dust health thresholding applies consistently to both CREATE and rotation destination holes.
-
 ---
 
 ## Sync Engine
@@ -172,17 +160,25 @@ This document defines the non-negotiable behavioral invariants for the DEXBot2 s
 
 ## Reconcile
 
-- `INV-RECON-001` Reconcile cancels duplicate chain orders unconditionally
+- `INV-RECON-001` Rotation-only size updates in reconcile
+  - `reconcileGrid` does not emit generic in-place size UPDATEs for active slot diffs.
+  - Size-changing UPDATE actions are rotation updates (`newGridId` path).
+  - Non-rotation size correction is handled by dedicated maintenance flows.
+
+- `INV-RECON-002` Dust health gating parity
+  - Dust health thresholding applies consistently to both CREATE and rotation destination holes.
+
+- `INV-RECON-003` Reconcile cancels duplicate chain orders unconditionally
   - When an unmatched order is within `looseTolerance` of an active grid order, it must be cancelled on chain via `_cancelChainOrder` with `releaseUntrackedFunds: true`.
   - Cancelled IDs are filtered out of `unmatchedParsed` to prevent reprocessing.
   - No size guard — any duplicate at the same price is a violation.
   - `SUSPECTED_DUPLICATE_TOLERANCE_FLOOR` (absolute price floor) is removed — only `tolerance * SUSPECTED_DUPLICATE_TOLERANCE_MULTIPLIER` is used.
 
-- `INV-RECON-002` Rebalance must not convert on-chain slots to SPREAD via CREATE
+- `INV-RECON-004` Rebalance must not convert on-chain slots to SPREAD via CREATE
   - `performSafeRebalance` must not emit `CREATE` actions that convert existing on-chain slots into SPREAD orders.
   - On-chain mid-slot must keep its BUY/SELL type before commit.
 
-- `INV-RECON-003` Extreme placement ordering
+- `INV-RECON-005` Extreme placement ordering
   - BUY placements must use nearest available free slots first (ascending price).
   - SELL placements must use nearest available free slots first (descending price).
 
@@ -214,18 +210,6 @@ This document defines the non-negotiable behavioral invariants for the DEXBot2 s
 
 ---
 
-## Pipeline Signals
-
-- `INV-PIPE-001` Stale correction entry removal
-  - `correctOrderPriceOnChain` must remove the entry from `ordersNeedingPriceCorrection` in ALL exit paths: success, skip (updateOrder returns null), and error.
-  - Use `try`/`catch`/`finally` with `.filter()` removal only in `finally`.
-
-- `INV-PIPE-002` Throw-safe grid divergence corrections
-  - `updateGridFromBlockchainSnapshot` called from `applyGridDivergenceCorrections` must be wrapped in try/catch that clears `_gridSidesUpdated` on failure.
-  - A throw must not leave `_gridSidesUpdated` permanently set, which would block the next tick.
-
----
-
 ## State / Lifecycle
 
 - `INV-STATE-001` Bootstrap suppresses invariant checks
@@ -277,134 +261,9 @@ This document defines the non-negotiable behavioral invariants for the DEXBot2 s
   - `_reconcileAfterUncertainBroadcast` must pass `fillLockAlreadyHeld=true` because `_fillProcessingLock` is already held by the fill-processing call chain.
   - AsyncLock is not reentrant; a second `acquire()` would queue forever.
 
----
-
-## Constants & Precision
-
-- `INV-CONST-001` All magic numbers centralized in `constants.ts`
-  - Hardcoded fallbacks in runtime code are prohibited.
-  - Every timing value, limit, and threshold must have a named constant.
-
-- `INV-PREC-001` Precision helpers throw on invalid precision
-  - `formatAmountByPrecision` and `formatSizeByOrderType` must throw when precision is undefined.
-  - Silent fallback to `DEFAULT_ASSET_PRECISION (8)` is prohibited.
-  - `floatToBlockchainInt` throws on undefined precision — callers must guarantee precision is available before calling.
-
----
-
-## Test Mapping
-
-### COW Pipeline
-- `INV-COW-001`, `INV-COW-002`
-  - `tests/test_cow_master_plan.ts` (`COW-001`, `COW-002`)
-  - `tests/test_cow_commit_guards.ts`
-- `INV-REC-001`
-  - `tests/test_cow_master_plan.ts` (`COW-016`)
-- `INV-PROJ-001`
-  - `tests/test_cow_master_plan.ts` (`COW-012`, `COW-013`, `COW-014`)
-- `INV-PROJ-002`
-  - `tests/test_cow_master_plan.ts` (`COW-018`, `COW-018c`)
-- `INV-PROJ-003`
-  - `tests/test_cow_master_plan.ts` (`COW-018b`)
-- `INV-DUST-001`
-  - `tests/test_cow_master_plan.ts` (`COW-017`)
-
-### Accounting / Fund Tracking
-- `INV-ACC-001`, `INV-ACC-002`
-  - `tests/test_funds.ts`
-  - `modules/order/accounting.ts:472-594` (`_verifyFundInvariants`)
-- `INV-ACC-003`
-  - `modules/order/accounting.ts:534-583` (cross-bot INVARIANT 3)
-
-### Sync Engine
-- `INV-SYNC-001`, `INV-SYNC-002`, `INV-SYNC-003`
-  - `tests/test_sync_fill_drift_refetch.ts` (5 sub-cases)
-  - `tests/test_ghost_order_fix.ts`
-- `INV-SYNC-004`
-  - `tests/test_sync_logic.ts` (`testOrphanAtDuplicatePriceLevelIsNotAdopted`)
-- `INV-SYNC-005`
-  - `tests/test_patch17_invariants.ts` (`testFillCallbackAppliesQueueBackPressure`)
-- `INV-SYNC-006`
-  - `tests/test_sync_lock_routing.ts`
-- `INV-SYNC-007`
-  - `tests/test_resync_invariants.ts` (Case 5)
-
-### Maintenance Runtime
-- `INV-MAINT-001`
-  - `tests/test_patch17_invariants.ts` (`testPipelineInFlightDefersMaintenance`)
-- `INV-MAINT-002`, `INV-MAINT-003`
-  - `tests/test_patch17_invariants.ts` (`testIllegalStateAbortResyncAndCooldown`)
-- `INV-MAINT-004`, `INV-MAINT-005`
-  - `tests/test_dust_rebalance_logic.ts`
-
-### Grid Structure
-- `INV-GRID-001`
-  - `modules/order/sync_engine.ts` (one-to-one mapping via `matchedGridOrderIds`)
-  - `tests/test_sync_logic.ts` (surplus order cancellation)
-- `INV-GRID-002`
-  - `modules/order/sync_engine.ts:804` (duplicate price level rejection)
-  - `modules/order/grid_reconcile.ts` (duplicate chain order cancel)
-- `INV-GRID-003`
-  - `tests/test_dust_rebalance_logic.ts` (`testInteriorDustWithDuplicatePriceLevel`, `testInteriorDustAdjacentGridLevelNotEligible`)
-
-### Reconcile
-- `INV-RECON-001`
-  - `modules/order/grid_reconcile.ts` (unconditional duplicate cancel)
-- `INV-RECON-002`
-  - `tests/test_patch17_invariants.ts` (`testRoleAssignmentBlocksOnChainSpreadConversion`)
-- `INV-RECON-003`
-  - `tests/test_patch17_invariants.ts` (`testExtremePlacementOrdering`)
-
-### Batch / Pipeline
-- `INV-BATCH-001`
-  - `tests/test_patch17_invariants.ts` (`testIllegalBatchAbortArmsMaintenanceCooldown`)
-- `INV-BATCH-002`
-  - `tests/test_patch17_invariants.ts` (`testSingleStaleCancelBatchUsesStaleOnlyFastPath`)
-- `INV-BATCH-003`
-  - `tests/test_patch17_invariants.ts` (`testCannotDeductTriggersRecoverySyncInsteadOfVirtualizing`)
-
-### Pipeline Signals
-- `INV-PIPE-001`
-  - `modules/order/utils/order.ts` (correction entry removal via finally)
-- `INV-PIPE-002`
-  - `modules/order/utils/system.ts` (try/catch wrapping grid divergence)
-
-### State / Lifecycle
-- `INV-STATE-001`, `INV-STATE-002`
-  - `tests/test_resync_invariants.ts` (Cases 1-4)
-- `INV-STATE-003`
-  - `tests/test_patch17_invariants.ts` (`testGridResizeRespectsBudgetAfterCap`)
-
-### Fund Registry
-- `INV-REG-001`, `INV-REG-002`
-  - `modules/fund_registry.ts`
-  - `modules/order/accounting.ts:534-583`
-
-### Subscriptions
-- `INV-SUB-001`
-  - `modules/bitshares-native/subscriptions.ts` (health watchdog)
-  - `tests/test_native_subscriptions.ts`
-
-### Broadcast
-- `INV-BROADCAST-001`, `INV-BROADCAST-002`
-  - `modules/dexbot_class.ts` (`_executeWithRetryOnUncertain`, `_reconcileAfterUncertainBroadcast`)
-
----
-
-## Review Checklist (Quick Use)
-
-For any change touching these subsystems, reviewers should verify:
-
-- **COW/Accounting**: preserves `INV-PROJ-002` for on-chain PARTIAL orders; avoids non-rotation size UPDATE leakage (`INV-REC-001`); keeps virtual/on-chain separation (`INV-ACC-001`); preserves atomic commit (`INV-COW-001`, `INV-COW-002`).
-- **Sync Engine**: does not reintroduce `newSizeInt <= 0` fast-path (`INV-SYNC-001`); does not add TTL-based refetch (`INV-SYNC-002`); orphan adoption checks price-level uniqueness (`INV-SYNC-004`).
-- **Maintenance**: pipeline signals are passed to `isPipelineEmpty` (`INV-MAINT-001`); illegal-state abort arms cooldown (`INV-MAINT-002/003`).
-- **Reconcile**: duplicate chain orders at same price are cancelled unconditionally (`INV-RECON-001`); no CREATE-based spread conversion of on-chain slots (`INV-RECON-002`).
-- **Batch**: stale-only cancel uses fast path without recovery sync (`INV-BATCH-002`); "cannot deduct" triggers sync, not virtualization (`INV-BATCH-003`).
-- **Are corresponding regression tests added/updated?**
-
 ## Change Policy
 
 - Any intentional invariant change must:
   - Update this document in the same PR/commit.
   - Include explicit rationale and risk note.
-  - Add or update regression tests linked in Test Mapping.
+  - Add or update regression tests in the relevant test files.

docs/DEXBOT_COMPARISON.md

@@ -1,7 +1,7 @@
 # DEXBot vs DEXBot2 — Detailed Comparison Report
 
 > **Date:** 2026-06-16 *(metrics refreshed against local source trees)*
-> **Scope:** Full architectural, functional, and operational comparison between the original [DEXBot](https://github.com/Codaone/DEXBot) (Python, v1.0.0) and DEXBot2 (TypeScript, v1.0.7).
+> **Scope:** Full architectural, functional, and operational comparison between the original [DEXBot](https://github.com/Codaone/DEXBot) (Python, v1.0.0) and DEXBot2 (TypeScript, v1.0.8).
 > **Audience:** Developers, contributors, and operators evaluating or migrating between the two projects.
 
 ---
@@ -36,7 +36,7 @@
 
 | Attribute | DEXBot (original) | DEXBot2 |
 |---|---|---|
-| **Release Track** | 1.0.0 | v1.0.7 |
+| **Release Track** | 1.0.0 | v1.0.8 |
 | **Language** | Python 3.6+ | TypeScript 5.x |
 | **Status** | Released 1.0.0, unmaintained | Active development |
 | **Last Repo Activity** | May 23, 2020 | 2026-06-25 |
@@ -774,7 +774,7 @@ Where:
 
 | Metric | DEXBot | DEXBot2 |
 |---|---|---|
-| **Release Track** | 1.0.0 | v1.0.7 |
+| **Release Track** | 1.0.0 | v1.0.8 |
 | **Active Since** | ~2018 | December 2025 |
 | **Last Commit** | May 23, 2020 | 2026-06-25 |
 | **Total Commits** | 2281 | 1659 at current HEAD |

docs/EVOLUTION.md

@@ -2,14 +2,14 @@
 
 ## Executive Summary
 
-DEXBot2 is a sophisticated decentralized exchange trading bot for the BitShares blockchain. This report documents the complete evolution of the project from its inception in December 2025 through the current 1.0.7 stable release.
+DEXBot2 is a sophisticated decentralized exchange trading bot for the BitShares blockchain. This report documents the complete evolution of the project from its inception in December 2025 through the current 1.0.8 stable release.
 
 ### Key Milestones
 - **Project Inception**: December 2, 2025
 - **Growth Phase**: 1,670+ commits over ~7 active months
 - **Code Maturity**: Evolution from basic utilities to a ~58,000+ LoC intelligent TypeScript system
 - **Stability**: Progression from manual testing to a suite of 200+ automated test files
-- **Releases**: 42 release entries (v0.1.0 to v1.0.7)
+- **Releases**: 43 release entries (v0.1.0 to v1.0.8)
 
 ---
 
@@ -66,6 +66,10 @@ Consolidated the market adapter with split data sources (Kibana, native API), AM
 
 **Jun 25**: DAEMON_ERRORS retry-path fix — `DaemonKeyStore` session-expiry retry never fired due to locally-hardcoded mismatch with canonical constants. Canonical error-code hardening — `DAEMON_CODES` added to `constants.ts` for `BROADCAST_DEADLINE`/`CREDENTIAL_DAEMON_UNAVAILABLE`, `MasterPasswordError.code` static property, replacing 12+ literal sites with single-source-of-truth references.
 
+**Jul 1–3**: v1.0.7 (hotfix) — subscription health watchdog, BROADCAST_DEADLINE graceful recovery (deadlock fix, bot-level retry, configurable daemon attempts) — 2 commits from v1.0.6.
+
+**Jul 5**: v1.0.8 — secondary pending-broadcasts deadlock fix (missed call site), market adapter log dedup in shared runtime, bot key resolution utilities, candle cache always-resolve. Comprehensive system invariants doc expansion with categorized prefixes (`INV-COW`, `INV-SYNC`, `INV-MAINT`, `INV-GRID`, `INV-RECON`, `INV-BATCH`, `INV-REG`, `INV-SUB`). 5 commits from v1.0.7.
+
 ---
 
 ## Architecture Evolution
@@ -179,6 +183,9 @@ Version display in unlock status, partial-fill stale-cache fix, rerun-hint corre
 ### v1.0.6 → v1.0.7 (2 commits)
 Subscription health watchdog for silent subscription death detection. BROADCAST_DEADLINE graceful recovery: deadlock fix (`fillLockAlreadyHeld:true`), bot-level retry with pair-mode double-publish guard, and configurable daemon broadcast retries (`CREDENTIAL_DAEMON_BROADCAST_RETRIES`).
 
+### v1.0.7 → v1.0.8 (5 commits)
+Secondary pending-broadcasts deadlock fix (missed call site). Market adapter log duplication in shared runtime (`stdio: 'ignore'`). Bot key resolution utilities extraction, `roundTo` browser error fix, 20 tests. Remove `--use-cached` flag, always resolve to candle cache. Comprehensive system invariants doc expansion with categorized prefixes across all subsystems.
+
 ---
 
 
@@ -227,7 +234,7 @@ DEXBot2 has matured from a basic grid bot into a signal-intelligent, production-
 ---
 
 **Report Originally Generated**: February 19, 2026
-**Last Updated**: July 3, 2026 (v1.0.7)
-**Total Commits**: 1673
+**Last Updated**: July 5, 2026 (v1.0.8)
+**Total Commits**: 1677
 **Date Range**: December 2, 2025 - July 3, 2026 (ongoing)
 **Repository**: DEXBot2 (BitShares DEX Trading Bot)

docs/FUND_MOVEMENT_AND_ACCOUNTING.md

@@ -825,4 +825,4 @@ To prevent "Time-of-Check to Time-of-Use" errors:
 3.  **Bootstrapping:** Fills arriving during startup (`isBootstrapping=true`) are queued until the grid is fully reconciled.
 
 ---
-*Technical Reference for DEXBot2 v1.0.7 release*
+*Technical Reference for DEXBot2 v1.0.8 release*