@senpi/runtime 3.0.58 → 3.0.62

package/dist/deploy/deadlines.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The two wall-clock bounds a deploy runs under, and the job cap derived from them.
+ *
+ * DEFAULT_MAX_WAIT_SEC bounds the CREATE wait — how long the verb waits for a wallet to reach
+ * ACTIVE. Raising it makes a slow backend less likely to report `pending`, at the cost of a job
+ * holding its single-flight slot longer.
+ *
+ * DEFAULT_TICK_WAIT_SEC bounds the OBSERVE wait — how long it waits for one verified scanner
+ * tick. Raising it reduces `installed-unobserved` reports on slow-scheduling scanners; lowering
+ * it to 0 skips observation entirely.
+ *
+ * Both are overridable per call via DeployParams.maxWaitSec / tickWaitSec, and settable through
+ * the gateway and the CLI. Change them HERE only: register.ts previously repeated the values as
+ * literals inside the job-cap arithmetic, so a change here silently left the cap behind.
+ *
+ * Three surfaces still QUOTE these numbers in prose rather than deriving them, and a change here
+ * has to be carried to all three by hand or they start lying: the `DeployParams` field docs in
+ * `orchestrator.ts`, the `--tick-wait` / `--max-wait` option help in `cli/senpi-commands.ts`, and
+ * the deploy section of `senpi guide` in `cli/guide-commands.ts`.
+ */
+export declare const DEFAULT_MAX_WAIT_SEC = 150;
+export declare const DEFAULT_TICK_WAIT_SEC = 120;
+/**
+ * The accepted range for either wait, in seconds — enforced at the gateway, where a caller's number
+ * first enters the verb.
+ *
+ * `0` is in range and meaningful (`--tick-wait 0` skips observation). A NEGATIVE one is not: it
+ * yields a cap already in the past, so the watchdog fires before the first step while the journal
+ * narrates a deadline the run never had. The ceiling is an hour, twenty-four times the largest
+ * default and far past any real backend wait, and it exists because the product below feeds
+ * `setTimeout`: `--max-wait 999999999` overflows the 32-bit timer, which Node then clamps to 1ms —
+ * an instantly-dead verb from a typo, narrated as a 999999999s deadline. Nothing is money-unsafe
+ * either way; the refusal exists because the alternative is a flatly false narration.
+ */
+export declare const MIN_WAIT_SEC = 0;
+export declare const MAX_WAIT_SEC = 3600;
+/** Is a caller-supplied wait one this verb will run on? `undefined` = "use the default", so yes. */
+export declare function isWaitInRange(value: number | undefined): boolean;
+/**
+ * Wall-clock cap for the whole job: both waits, per instance, plus 5 minutes of slack.
+ *
+ * Clamped, and not because the gateway's range check is doubted: this number becomes a `setTimeout`
+ * delay AND the figure the watchdog narrates, so the two must agree for every caller. A cap the
+ * timer would silently rewrite to 1ms is a deadline the report would then lie about.
+ */
+export declare function jobCapMs(maxWaitSec: number | undefined, tickWaitSec: number | undefined, instanceCount: number): number;
+//# sourceMappingURL=deadlines.d.ts.map

package/dist/deploy/deadlines.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deadlines.d.ts","sourceRoot":"","sources":["../../src/deploy/deadlines.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,YAAY,OAAQ,CAAC;AAKlC,oGAAoG;AACpG,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEhE;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CACtB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,aAAa,EAAE,MAAM,GACpB,MAAM,CAKR"}

package/dist/deploy/deadlines.js

@@ -0,0 +1,56 @@
+/**
+ * The two wall-clock bounds a deploy runs under, and the job cap derived from them.
+ *
+ * DEFAULT_MAX_WAIT_SEC bounds the CREATE wait — how long the verb waits for a wallet to reach
+ * ACTIVE. Raising it makes a slow backend less likely to report `pending`, at the cost of a job
+ * holding its single-flight slot longer.
+ *
+ * DEFAULT_TICK_WAIT_SEC bounds the OBSERVE wait — how long it waits for one verified scanner
+ * tick. Raising it reduces `installed-unobserved` reports on slow-scheduling scanners; lowering
+ * it to 0 skips observation entirely.
+ *
+ * Both are overridable per call via DeployParams.maxWaitSec / tickWaitSec, and settable through
+ * the gateway and the CLI. Change them HERE only: register.ts previously repeated the values as
+ * literals inside the job-cap arithmetic, so a change here silently left the cap behind.
+ *
+ * Three surfaces still QUOTE these numbers in prose rather than deriving them, and a change here
+ * has to be carried to all three by hand or they start lying: the `DeployParams` field docs in
+ * `orchestrator.ts`, the `--tick-wait` / `--max-wait` option help in `cli/senpi-commands.ts`, and
+ * the deploy section of `senpi guide` in `cli/guide-commands.ts`.
+ */
+export const DEFAULT_MAX_WAIT_SEC = 150;
+export const DEFAULT_TICK_WAIT_SEC = 120;
+/**
+ * The accepted range for either wait, in seconds — enforced at the gateway, where a caller's number
+ * first enters the verb.
+ *
+ * `0` is in range and meaningful (`--tick-wait 0` skips observation). A NEGATIVE one is not: it
+ * yields a cap already in the past, so the watchdog fires before the first step while the journal
+ * narrates a deadline the run never had. The ceiling is an hour, twenty-four times the largest
+ * default and far past any real backend wait, and it exists because the product below feeds
+ * `setTimeout`: `--max-wait 999999999` overflows the 32-bit timer, which Node then clamps to 1ms —
+ * an instantly-dead verb from a typo, narrated as a 999999999s deadline. Nothing is money-unsafe
+ * either way; the refusal exists because the alternative is a flatly false narration.
+ */
+export const MIN_WAIT_SEC = 0;
+export const MAX_WAIT_SEC = 3_600;
+/** Node clamps a `setTimeout` delay past this to 1ms — the reason the ceiling above exists. */
+const MAX_TIMER_MS = 2_147_483_647;
+/** Is a caller-supplied wait one this verb will run on? `undefined` = "use the default", so yes. */
+export function isWaitInRange(value) {
+    return value === undefined || (Number.isFinite(value) && value >= MIN_WAIT_SEC && value <= MAX_WAIT_SEC);
+}
+/**
+ * Wall-clock cap for the whole job: both waits, per instance, plus 5 minutes of slack.
+ *
+ * Clamped, and not because the gateway's range check is doubted: this number becomes a `setTimeout`
+ * delay AND the figure the watchdog narrates, so the two must agree for every caller. A cap the
+ * timer would silently rewrite to 1ms is a deadline the report would then lie about.
+ */
+export function jobCapMs(maxWaitSec, tickWaitSec, instanceCount) {
+    const maxWait = maxWaitSec ?? DEFAULT_MAX_WAIT_SEC;
+    const tickWait = tickWaitSec ?? DEFAULT_TICK_WAIT_SEC;
+    const cap = (maxWait + tickWait) * instanceCount * 1000 + 300_000;
+    return Math.min(Math.max(cap, 1_000), MAX_TIMER_MS);
+}
+//# sourceMappingURL=deadlines.js.map

package/dist/deploy/deadlines.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deadlines.js","sourceRoot":"","sources":["../../src/deploy/deadlines.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC;AAElC,+FAA+F;AAC/F,MAAM,YAAY,GAAG,aAAa,CAAC;AAEnC,oGAAoG;AACpG,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,YAAY,IAAI,KAAK,IAAI,YAAY,CAAC,CAAC;AAC3G,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CACtB,UAA8B,EAC9B,WAA+B,EAC/B,aAAqB;IAErB,MAAM,OAAO,GAAG,UAAU,IAAI,oBAAoB,CAAC;IACnD,MAAM,QAAQ,GAAG,WAAW,IAAI,qBAAqB,CAAC;IACtD,MAAM,GAAG,GAAG,CAAC,OAAO,GAAG,QAAQ,CAAC,GAAG,aAAa,GAAG,IAAI,GAAG,OAAO,CAAC;IAClE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC;AACtD,CAAC"}

package/dist/deploy/error-text.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Reading the text off a thrown value, for the deploy path.
+ *
+ * Its own module because both consumers are on the money path and neither may import the other:
+ * `orchestrator.ts` already imports `../universe/package-universe.ts`, so putting it in either would
+ * make a cycle, and a second hand-rolled copy is how the two drifted in the first place.
+ */
+/** What a value with no readable text is called, so the report says so instead of inventing one. */
+export declare const UNREADABLE_ERROR = "an error whose message could not be read";
+/**
+ * The text of a thrown value — TOTAL, because every caller is a catch block whose job is to keep the
+ * deploy report alive.
+ *
+ * Reading a thrown value is itself an operation that can throw: a `message` getter that raises, a
+ * null-prototype object `String()` cannot convert to a primitive, a hostile `toString`. Those come
+ * off the wire like any other error, and a throw here happens INSIDE the catch — so it discards the
+ * original error, escapes `runDeploy` and costs the whole report the deploy just earned. An error
+ * we cannot name is still an error we must report, so it degrades rather than raising.
+ *
+ * The degraded form still says everything it can: the constructor name usually survives a hostile
+ * `message`, and on an error with nothing else readable it is the only diagnostic left — a
+ * `TimeoutError` and a `ZodError` send a reader to different places.
+ */
+export declare function errorText(err: unknown): string;
+//# sourceMappingURL=error-text.d.ts.map

package/dist/deploy/error-text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-text.d.ts","sourceRoot":"","sources":["../../src/deploy/error-text.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,oGAAoG;AACpG,eAAO,MAAM,gBAAgB,6CAA6C,CAAC;AAE3E;;;;;;;;;;;;;GAaG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAM9C"}

package/dist/deploy/error-text.js

@@ -0,0 +1,42 @@
+/**
+ * Reading the text off a thrown value, for the deploy path.
+ *
+ * Its own module because both consumers are on the money path and neither may import the other:
+ * `orchestrator.ts` already imports `../universe/package-universe.ts`, so putting it in either would
+ * make a cycle, and a second hand-rolled copy is how the two drifted in the first place.
+ */
+/** What a value with no readable text is called, so the report says so instead of inventing one. */
+export const UNREADABLE_ERROR = "an error whose message could not be read";
+/**
+ * The text of a thrown value — TOTAL, because every caller is a catch block whose job is to keep the
+ * deploy report alive.
+ *
+ * Reading a thrown value is itself an operation that can throw: a `message` getter that raises, a
+ * null-prototype object `String()` cannot convert to a primitive, a hostile `toString`. Those come
+ * off the wire like any other error, and a throw here happens INSIDE the catch — so it discards the
+ * original error, escapes `runDeploy` and costs the whole report the deploy just earned. An error
+ * we cannot name is still an error we must report, so it degrades rather than raising.
+ *
+ * The degraded form still says everything it can: the constructor name usually survives a hostile
+ * `message`, and on an error with nothing else readable it is the only diagnostic left — a
+ * `TimeoutError` and a `ZodError` send a reader to different places.
+ */
+export function errorText(err) {
+    try {
+        return err instanceof Error ? String(err.message) : String(err);
+    }
+    catch {
+        return `${UNREADABLE_ERROR}${errorTypeSuffix(err)}`;
+    }
+}
+/** ` (TimeoutError)` when the thrown value's constructor name is readable, else nothing. */
+function errorTypeSuffix(err) {
+    try {
+        const name = err?.constructor?.name;
+        return typeof name === "string" && name.length > 0 ? ` (${name})` : "";
+    }
+    catch {
+        return "";
+    }
+}
+//# sourceMappingURL=error-text.js.map

package/dist/deploy/error-text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-text.js","sourceRoot":"","sources":["../../src/deploy/error-text.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,oGAAoG;AACpG,MAAM,CAAC,MAAM,gBAAgB,GAAG,0CAA0C,CAAC;AAE3E;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,gBAAgB,GAAG,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;IACtD,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAI,GAA4C,EAAE,WAAW,EAAE,IAAI,CAAC;QAC9E,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/deploy/funding.d.ts

@@ -0,0 +1,87 @@
+/** The platform per-wallet floor, under this module's own long-standing name. */
+export { WALLET_FLOOR as MIN_WALLET, FEE_BUFFER } from "./min-budget.js";
+/** Lifecycle-relevant per-instance funding inputs — the only fields this module reads. */
+export interface FundingInstance {
+    name: string;
+    fundingShare: number | null;
+}
+export interface Shortfall {
+    requested: number;
+    available: number;
+    usable: number;
+    shortBy: number;
+    wallets: number;
+    shares: number[];
+}
+export interface FundingPlan {
+    /** instance name → initialBudget for the create call. */
+    amounts: Map<string, number>;
+    /** Non-null means HALT: the budget is a hard target, never silently scaled down. */
+    shortfall: Shortfall | null;
+}
+/**
+ * Total USDC `strategy_create_custom_strategy` can fund from — its whole
+ * waterfall, in order: HL perps → HL spot USDC → EVM USDC (auto-bridged).
+ *
+ * These are DISJOINT buckets, so reading one reads a FRACTION of the fundable
+ * balance. `total_withdrawable` is deliberately EXCLUDED: it is free margin
+ * sitting inside OTHER strategy wallets, not spendable here.
+ *
+ * Returns null when no bucket key is present at all — an unknown shape must
+ * never halt a deploy the backend would have funded.
+ */
+export declare function accessibleUsd(payload: Record<string, unknown> | null): number | null;
+/**
+ * Per-instance `initialBudget` for the instances still needing a wallet, split
+ * by `fundingShare` and floored at {@link MIN_WALLET}.
+ *
+ * The requested budget is a HARD TARGET: on shortfall the caller HALTS. Scaling
+ * every wallet down to fit turned a "$1,000 across 2 wallets" request into two
+ * floor wallets, silently — that is the bug this shape exists to prevent.
+ */
+export declare function planFunding(instances: FundingInstance[], budget: number, available: number | null): FundingPlan;
+/**
+ * The largest budget `b` whose funding plan still fits within `usable`:
+ * `b* = max { b : Σᵢ max(MIN_WALLET, round2(b·shareᵢ)) ≤ usable }`.
+ *
+ * Bisected in integer cents with the SAME per-wallet rounding `planFunding`
+ * uses, so re-running deploy at the hinted budget round-trips with no shortfall
+ * even for uneven shares — where the bare `usable` over-hints, because a floored
+ * small leg pushes the funded total above the budget.
+ */
+export declare function maxFeasibleBudget(instances: Array<{
+    fundingShare: number | null;
+}>, usable: number): number;
+/** Money in agent-facing prose: comma-grouped, two decimals, never scientific notation. */
+export declare function usd(value: number): string;
+/**
+ * A dollar amount as the `--budget` flag accepts it: bare digits, no `$`, no
+ * comma grouping. {@link usd}'s commas would not parse as a number, so a hinted
+ * command an agent copies verbatim must render the flag value with this.
+ */
+export declare function budgetArg(value: number): string;
+/**
+ * The re-run command every deploy surface emits — ONE producer, because the same report prints it
+ * more than once (a refusal's copy and the report's `next` line) and two copies drifting would hand
+ * the reader two different commands for one situation. `budget` undefined renders the placeholder
+ * the caller must fill in, never a fabricated number.
+ *
+ * The path is single-quoted for the same reason `pkg.id` is wherever it is emitted: these strings
+ * are copied into a shell verbatim, and a real workspace path with a space in it
+ * ("/data/My Strategies/spider") would otherwise render a command that cannot run. Quoting is
+ * unconditional — a conditional quote is a second rule to get wrong, and the quoted form is
+ * correct for every path.
+ */
+export declare function resumeCommand(packageDir: string, budget?: number): string;
+/**
+ * Agent-facing halt text for a funding shortfall.
+ *
+ * The lower-budget escape renders ONLY when the usable balance can still fund
+ * every wallet at the {@link MIN_WALLET} floor. Below that no budget is valid,
+ * and suggesting one produces nonsense the agent then follows ("--budget ≤ $0",
+ * the M381223 churn). Codes: senpi-skills `docs/error-code-taxonomy.md`.
+ */
+export declare function underfundedNote(shortfall: Shortfall, instances: Array<{
+    fundingShare: number | null;
+}>, packageDir: string): string;
+//# sourceMappingURL=funding.d.ts.map

package/dist/deploy/funding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"funding.d.ts","sourceRoot":"","sources":["../../src/deploy/funding.ts"],"names":[],"mappings":"AAqBA,iFAAiF;AACjF,OAAO,EAAE,YAAY,IAAI,UAAU,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAEzE,0FAA0F;AAC1F,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,yDAAyD;IACzD,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,oFAAoF;IACpF,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;CAC7B;AAqDD;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAapF;AAMD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CACzB,SAAS,EAAE,eAAe,EAAE,EAC5B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,WAAW,CAsBb;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,KAAK,CAAC;IAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,EACjD,MAAM,EAAE,MAAM,GACb,MAAM,CAoBR;AAED,2FAA2F;AAC3F,wBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAGzE;AAYD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,KAAK,CAAC;IAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,EACjD,UAAU,EAAE,MAAM,GACjB,MAAM,CA6BR"}

package/dist/deploy/funding.js

@@ -0,0 +1,229 @@
+/**
+ * Funding preflight for `senpi deploy` — a 1:1 TS port of deploy.py v2.11.0's
+ * `available_usd` / `plan_funding` / `max_feasible_budget` / `underfunded_note`.
+ *
+ * This layer is UX, not enforcement: the backend funds from its own waterfall
+ * during `strategy_create_custom_strategy` and remains the authority on
+ * sufficiency. So it refuses only on POSITIVE evidence of a shortfall — an
+ * unreadable or unrecognised portfolio shape yields `null` and the deploy
+ * proceeds (create fails loudly if the balance really is short). Under-counting
+ * is the dangerous direction: it produced the Starling false refusal, where
+ * ~$248 of idle Base USDC was invisible to a single-bucket read.
+ *
+ * The two platform constants it runs on live in `min-budget.ts`, which mirrors
+ * `senpi-strategy-ops/scripts/min_budget.py` in Senpi-ai/senpi-skills — ONE source of truth for the
+ * physics on each side: a **$10** per-wallet floor (`WALLET_FLOOR`, itself mirroring the backend's
+ * `MINIMUM_STRATEGY_BUDGET` default) and a **$1.50** per-wallet fee buffer. Change them there, never
+ * here, and never against a remembered number: the floor was $100 until the skills $10-minimum
+ * rollout (#519/#521), and every refusal below quotes whatever the constant says.
+ */
+import { FEE_BUFFER, WALLET_FLOOR as MIN_WALLET } from "./min-budget.js";
+/** The platform per-wallet floor, under this module's own long-standing name. */
+export { WALLET_FLOOR as MIN_WALLET, FEE_BUFFER } from "./min-budget.js";
+function round2(value) {
+    return Math.round(value * 100) / 100;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+ * First of `values` that parses as a finite number, else 0.
+ *
+ * The payload mixes numbers, numeric strings (`spot_balances` rows carry
+ * `"5.46"`) and nulls — a null must fall THROUGH to the next candidate rather
+ * than zero the row, because an under-count here is a false `underfunded` halt.
+ */
+function firstNumber(...values) {
+    for (const value of values) {
+        if (typeof value === "number" && Number.isFinite(value))
+            return value;
+        if (typeof value === "string" && value.trim() !== "") {
+            const parsed = Number(value);
+            if (Number.isFinite(parsed))
+                return parsed;
+        }
+    }
+    return 0;
+}
+/**
+ * USD held as USDC in a balance list (`spot_balances` / `token_balances`).
+ * Filtered by symbol because the funding waterfall pulls USDC, while the
+ * `total_*` scalars lump in every other token — a spot HYPE bag or EVM WETH is
+ * not fundable balance. Deliberately chain-agnostic: hardcoding the bridgeable
+ * chain list is how this gate would start refusing fundable deploys the day a
+ * chain is added.
+ */
+function usdcUsd(rows, ...keys) {
+    if (!Array.isArray(rows))
+        return 0;
+    return rows.reduce((sum, row) => {
+        if (!isRecord(row))
+            return sum;
+        if (String(row.tokenSymbol ?? "").trim().toUpperCase() !== "USDC")
+            return sum;
+        return sum + firstNumber(...keys.map((key) => row[key]));
+    }, 0);
+}
+/** The bucket keys whose presence proves the payload is a portfolio we understand. */
+const BUCKET_KEYS = [
+    "total_in_hyperliquid",
+    "total_spot_usd_in_hyperliquid",
+    "spot_balances",
+    "token_balances",
+];
+/**
+ * Total USDC `strategy_create_custom_strategy` can fund from — its whole
+ * waterfall, in order: HL perps → HL spot USDC → EVM USDC (auto-bridged).
+ *
+ * These are DISJOINT buckets, so reading one reads a FRACTION of the fundable
+ * balance. `total_withdrawable` is deliberately EXCLUDED: it is free margin
+ * sitting inside OTHER strategy wallets, not spendable here.
+ *
+ * Returns null when no bucket key is present at all — an unknown shape must
+ * never halt a deploy the backend would have funded.
+ */
+export function accessibleUsd(payload) {
+    const portfolio = isRecord(payload?.portfolio) ? payload.portfolio : null;
+    if (!portfolio)
+        return null;
+    if (!BUCKET_KEYS.some((key) => portfolio[key] !== undefined && portfolio[key] !== null))
+        return null;
+    const perps = firstNumber(portfolio.total_in_hyperliquid);
+    const spotRows = portfolio.spot_balances;
+    const spot = Array.isArray(spotRows) && spotRows.length > 0
+        ? usdcUsd(spotRows, "usdValue", "total")
+        : firstNumber(portfolio.total_spot_usd_in_hyperliquid);
+    const evm = usdcUsd(portfolio.token_balances, "balanceInUSD", "formattedBalance");
+    return round2(perps + spot + evm);
+}
+function sharesOf(instances) {
+    return instances.map((inst) => inst.fundingShare ?? 1 / instances.length);
+}
+/**
+ * Per-instance `initialBudget` for the instances still needing a wallet, split
+ * by `fundingShare` and floored at {@link MIN_WALLET}.
+ *
+ * The requested budget is a HARD TARGET: on shortfall the caller HALTS. Scaling
+ * every wallet down to fit turned a "$1,000 across 2 wallets" request into two
+ * floor wallets, silently — that is the bug this shape exists to prevent.
+ */
+export function planFunding(instances, budget, available) {
+    const shares = sharesOf(instances);
+    const amounts = new Map(instances.map((inst, i) => [inst.name, Math.max(MIN_WALLET, round2((budget || 0) * shares[i]))]));
+    const requested = round2([...amounts.values()].reduce((sum, amount) => sum + amount, 0));
+    let shortfall = null;
+    if (available !== null) {
+        const usable = Math.max(0, round2(available - FEE_BUFFER * instances.length));
+        if (requested > usable) {
+            shortfall = {
+                requested,
+                available: round2(available),
+                usable,
+                shortBy: round2(requested - usable),
+                wallets: instances.length,
+                shares,
+            };
+        }
+    }
+    return { amounts, shortfall };
+}
+/**
+ * The largest budget `b` whose funding plan still fits within `usable`:
+ * `b* = max { b : Σᵢ max(MIN_WALLET, round2(b·shareᵢ)) ≤ usable }`.
+ *
+ * Bisected in integer cents with the SAME per-wallet rounding `planFunding`
+ * uses, so re-running deploy at the hinted budget round-trips with no shortfall
+ * even for uneven shares — where the bare `usable` over-hints, because a floored
+ * small leg pushes the funded total above the budget.
+ */
+export function maxFeasibleBudget(instances, usable) {
+    const shares = sharesOf(instances);
+    const totalCents = (cents) => {
+        const budget = cents / 100;
+        const total = shares.reduce((sum, share) => sum + Math.max(MIN_WALLET, round2(budget * share)), 0);
+        return Math.round(total * 100);
+    };
+    const usableCents = Math.round(usable * 100);
+    if (totalCents(0) > usableCents)
+        return 0; // even the all-floor minimum cannot fit
+    let lo = 0;
+    let hi = usableCents + shares.length * Math.round(MIN_WALLET * 100) + 100;
+    while (totalCents(hi) <= usableCents)
+        hi *= 2; // keep hi a true upper bound (defensive vs Σshare < 1)
+    while (lo < hi) {
+        const mid = Math.floor((lo + hi + 1) / 2);
+        if (totalCents(mid) <= usableCents)
+            lo = mid;
+        else
+            hi = mid - 1;
+    }
+    return lo / 100;
+}
+/** Money in agent-facing prose: comma-grouped, two decimals, never scientific notation. */
+export function usd(value) {
+    return `$${value.toLocaleString("en-US", { minimumFractionDigits: 2, maximumFractionDigits: 2 })}`;
+}
+/**
+ * A dollar amount as the `--budget` flag accepts it: bare digits, no `$`, no
+ * comma grouping. {@link usd}'s commas would not parse as a number, so a hinted
+ * command an agent copies verbatim must render the flag value with this.
+ */
+export function budgetArg(value) {
+    return String(Number(value.toFixed(2)));
+}
+/**
+ * The re-run command every deploy surface emits — ONE producer, because the same report prints it
+ * more than once (a refusal's copy and the report's `next` line) and two copies drifting would hand
+ * the reader two different commands for one situation. `budget` undefined renders the placeholder
+ * the caller must fill in, never a fabricated number.
+ *
+ * The path is single-quoted for the same reason `pkg.id` is wherever it is emitted: these strings
+ * are copied into a shell verbatim, and a real workspace path with a space in it
+ * ("/data/My Strategies/spider") would otherwise render a command that cannot run. Quoting is
+ * unconditional — a conditional quote is a second rule to get wrong, and the quoted form is
+ * correct for every path.
+ */
+export function resumeCommand(packageDir, budget) {
+    const budgetFlag = budget === undefined ? "--budget <usd>" : `--budget ${budgetArg(budget)}`;
+    return `openclaw senpi deploy -p '${packageDir}' ${budgetFlag}`;
+}
+/** The requested/available/usable/short-by facts both refusal branches lead with. */
+function shortfallFacts(shortfall) {
+    return (`Requested ${usd(shortfall.requested)} across ${shortfall.wallets} wallet(s) ` +
+        `(min ${usd(MIN_WALLET)}/wallet), but only ${usd(shortfall.available)} is accessible ` +
+        `(${usd(shortfall.usable)} after fees) — short by ${usd(shortfall.shortBy)}. ` +
+        `NOT funding; no wallet was created. `);
+}
+/**
+ * Agent-facing halt text for a funding shortfall.
+ *
+ * The lower-budget escape renders ONLY when the usable balance can still fund
+ * every wallet at the {@link MIN_WALLET} floor. Below that no budget is valid,
+ * and suggesting one produces nonsense the agent then follows ("--budget ≤ $0",
+ * the M381223 churn). Codes: senpi-skills `docs/error-code-taxonomy.md`.
+ */
+export function underfundedNote(shortfall, instances, packageDir) {
+    const floorNeeded = shortfall.wallets * MIN_WALLET;
+    const facts = shortfallFacts(shortfall);
+    if (shortfall.usable < floorNeeded) {
+        // Computed from `available`, not `usable`: usable is clamped to 0 when the balance does not
+        // even cover the fee reserve, and `floor - usable` would then understate the deposit by up to
+        // FEE_BUFFER × wallets — depositing the hinted amount must always clear the floor check.
+        const missing = round2(floorNeeded + FEE_BUFFER * shortfall.wallets - shortfall.available);
+        return (`[E_FUNDS_BELOW_FLOOR] ${facts}` +
+            `No budget can fund ${shortfall.wallets} wallet(s) below the ${usd(MIN_WALLET)}/wallet floor — ` +
+            `at least ${usd(missing)} more USDC is needed. Deposit USDC first (the ` +
+            `\`senpi-deposit-withdraw-transfer\` skill has the flow), then re-run: ` +
+            `\`${resumeCommand(packageDir)}\`. ` +
+            `Do NOT retry with a lower --budget: no lower budget is valid.`);
+    }
+    const best = maxFeasibleBudget(instances, shortfall.usable);
+    return (`[E_FUNDS_SHORT] ${facts}` +
+        `Two ways forward: deposit at least ${usd(shortfall.shortBy)} more USDC (the ` +
+        `\`senpi-deposit-withdraw-transfer\` skill has the flow) and re-run the same command, or ` +
+        `confirm a lower amount with the user and re-run: ` +
+        `\`${resumeCommand(packageDir, best)}\` — ${usd(best)} is the largest ` +
+        `budget your accessible balance can fully fund across these ${shortfall.wallets} wallet(s) at ` +
+        `the ${usd(MIN_WALLET)}/wallet floor.`);
+}
+//# sourceMappingURL=funding.js.map

package/dist/deploy/funding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"funding.js","sourceRoot":"","sources":["../../src/deploy/funding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,IAAI,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAEzE,iFAAiF;AACjF,OAAO,EAAE,YAAY,IAAI,UAAU,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAwBzE,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,GAAG,MAAiB;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,OAAO,CAAC,IAAa,EAAE,GAAG,IAAc;IAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,MAAM,CAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QAC/B,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM;YAAE,OAAO,GAAG,CAAC;QAC9E,OAAO,GAAG,GAAG,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC,EAAE,CAAC,CAAC,CAAC;AACR,CAAC;AAED,sFAAsF;AACtF,MAAM,WAAW,GAAG;IAClB,sBAAsB;IACtB,+BAA+B;IAC/B,eAAe;IACf,gBAAgB;CACR,CAAC;AAEX;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,OAAuC;IACnE,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAErG,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,SAAS,CAAC,aAAa,CAAC;IACzC,MAAM,IAAI,GACR,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC;QACxC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,cAAc,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClF,OAAO,MAAM,CAAC,KAAK,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CAAC,SAAiD;IACjE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CACzB,SAA4B,EAC5B,MAAc,EACd,SAAwB;IAExB,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACjG,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAEzF,IAAI,SAAS,GAAqB,IAAI,CAAC;IACvC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,IAAI,SAAS,GAAG,MAAM,EAAE,CAAC;YACvB,SAAS,GAAG;gBACV,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;gBAC5B,MAAM;gBACN,OAAO,EAAE,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC;gBACnC,OAAO,EAAE,SAAS,CAAC,MAAM;gBACzB,MAAM;aACP,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiD,EACjD,MAAc;IAEd,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE;QAC3C,MAAM,MAAM,GAAG,KAAK,GAAG,GAAG,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnG,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;IACjC,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,WAAW;QAAE,OAAO,CAAC,CAAC,CAAC,wCAAwC;IAEnF,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,EAAE,GAAG,WAAW,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;IAC1E,OAAO,UAAU,CAAC,EAAE,CAAC,IAAI,WAAW;QAAE,EAAE,IAAI,CAAC,CAAC,CAAC,uDAAuD;IACtG,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW;YAAE,EAAE,GAAG,GAAG,CAAC;;YACxC,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,GAAG,GAAG,CAAC;AAClB,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,GAAG,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE,qBAAqB,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;AACrG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,MAAe;IAC/D,MAAM,UAAU,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7F,OAAO,6BAA6B,UAAU,KAAK,UAAU,EAAE,CAAC;AAClE,CAAC;AAED,qFAAqF;AACrF,SAAS,cAAc,CAAC,SAAoB;IAC1C,OAAO,CACL,aAAa,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,SAAS,CAAC,OAAO,aAAa;QAC9E,QAAQ,GAAG,CAAC,UAAU,CAAC,sBAAsB,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,iBAAiB;QACtF,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,2BAA2B,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI;QAC9E,sCAAsC,CACvC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAoB,EACpB,SAAiD,EACjD,UAAkB;IAElB,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,GAAG,UAAU,CAAC;IACnD,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAExC,IAAI,SAAS,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QACnC,4FAA4F;QAC5F,8FAA8F;QAC9F,yFAAyF;QACzF,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAC3F,OAAO,CACL,yBAAyB,KAAK,EAAE;YAChC,sBAAsB,SAAS,CAAC,OAAO,wBAAwB,GAAG,CAAC,UAAU,CAAC,kBAAkB;YAChG,YAAY,GAAG,CAAC,OAAO,CAAC,gDAAgD;YACxE,wEAAwE;YACxE,KAAK,aAAa,CAAC,UAAU,CAAC,MAAM;YACpC,+DAA+D,CAChE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,CACL,mBAAmB,KAAK,EAAE;QAC1B,sCAAsC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,kBAAkB;QAC9E,0FAA0F;QAC1F,mDAAmD;QACnD,KAAK,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,kBAAkB;QACvE,8DAA8D,SAAS,CAAC,OAAO,gBAAgB;QAC/F,OAAO,GAAG,CAAC,UAAU,CAAC,gBAAgB,CACvC,CAAC;AACJ,CAAC"}

package/dist/deploy/install-gate-runner.d.ts

@@ -0,0 +1,12 @@
+/**
+ * One instance → one install-gate verdict.
+ *
+ * The gate predicate lives in `validate/install-gate.ts` and is not duplicated here; this module
+ * only supplies the findings it decides over, from the instance's own recipe. Deploy calls it
+ * BEFORE money so a refusal costs nothing; `installRuntimeCore` calls the same predicate at the
+ * gateway boundary for installs that never went through deploy.
+ */
+import { type InstallGateResult } from "../validate/index.js";
+import type { DeployInstance } from "./package.js";
+export declare function gateInstance(inst: DeployInstance): Promise<InstallGateResult>;
+//# sourceMappingURL=install-gate-runner.d.ts.map

package/dist/deploy/install-gate-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-gate-runner.d.ts","sourceRoot":"","sources":["../../src/deploy/install-gate-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAA2C,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACvG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,wBAAsB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAMnF"}

package/dist/deploy/install-gate-runner.js

@@ -0,0 +1,17 @@
+/**
+ * One instance → one install-gate verdict.
+ *
+ * The gate predicate lives in `validate/install-gate.ts` and is not duplicated here; this module
+ * only supplies the findings it decides over, from the instance's own recipe. Deploy calls it
+ * BEFORE money so a refusal costs nothing; `installRuntimeCore` calls the same predicate at the
+ * gateway boundary for installs that never went through deploy.
+ */
+import { checkInstallGate, collectRecipeFindings } from "../validate/index.js";
+export async function gateInstance(inst) {
+    const validation = await collectRecipeFindings({
+        path: inst.runtimeYamlPath,
+        baseDir: inst.runtimeYamlDir,
+    });
+    return checkInstallGate(validation.findings);
+}
+//# sourceMappingURL=install-gate-runner.js.map

package/dist/deploy/install-gate-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-gate-runner.js","sourceRoot":"","sources":["../../src/deploy/install-gate-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAA0B,MAAM,sBAAsB,CAAC;AAGvG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAoB;IACrD,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC;QAC7C,IAAI,EAAE,IAAI,CAAC,eAAe;QAC1B,OAAO,EAAE,IAAI,CAAC,cAAc;KAC7B,CAAC,CAAC;IACH,OAAO,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC"}