@senpi/runtime 3.0.59 → 3.0.63

package/dist/deploy/job.js

@@ -0,0 +1,463 @@
+/**
+ * Everything async about a deploy: the single-flight job slot, the append-only
+ * JSONL journal, the wall-clock deadline watchdog, the boot-time interrupted
+ * scan, and status snapshots. It runs whatever `run` closure the gateway hands
+ * it and knows nothing about MCP or orchestration.
+ *
+ * **There is no cancel** (D-4): undeploying a strategy is closing it, not
+ * stopping the job. The only thing that stops a running deploy early is the
+ * deadline watchdog armed in {@link DeployJobController.start} — a soft stop the
+ * orchestrator honours at its next step boundary, followed by a force-terminate
+ * that frees the slot even when the run is wedged inside an await.
+ *
+ * **The journal is narration-only.** No code path may read `deploys/*.jsonl` to
+ * decide an action. Journals are read for exactly three purposes: rendering
+ * `status` history, the boot scan that stamps unterminated journals
+ * `interrupted`, and the one sanctioned carve-out — {@link
+ * DeployJobController.priorCreatedStrategyIds}, which yields a LOOKUP KEY (a
+ * strategyId this box journaled at create time) that reconcile must verify
+ * against the live backend before acting on it. Every orchestrator decision
+ * still reads the live surfaces (backend strategies + runtime registry) — that
+ * is what keeps the E_STATE drift class dead.
+ *
+ * **No auto-resume.** `scanOnBoot` is a janitor: it stamps and prunes, and never
+ * re-enters a state machine. Only a fresh agent-initiated `senpi deploy`
+ * resumes, via reconciliation.
+ */
+import { randomBytes } from "node:crypto";
+import { appendFileSync, existsSync, mkdirSync, readFileSync, readdirSync, rmSync } from "node:fs";
+import { join } from "node:path";
+import { recordDeploy } from "../telemetry/metrics.js";
+import { extractTaxonomyCode } from "./taxonomy.js";
+/**
+ * The taxonomy code of the FIRST refused step in the report, for the deploy metric's dimension.
+ *
+ * Reads the shared extractor, not a private pattern: this was the third reader, and its narrower
+ * one silently dropped any code carrying a digit — so `[E_MIN_10]` would exit 2 at the CLI and
+ * carry a `senpi.deploy.refusal.code` span attribute while producing no metric dimension at all.
+ */
+function firstRefusalCode(report) {
+    for (const instance of report.instances) {
+        for (const outcome of Object.values(instance.steps)) {
+            if (outcome.status !== "refused")
+                continue;
+            const code = extractTaxonomyCode(outcome.detail);
+            if (code)
+                return code;
+        }
+    }
+    return undefined;
+}
+const EVENT_TAIL_MAX = 50;
+const DEFAULT_KEEP = 20;
+const DEPLOY_ID_RE = /^dpl-[0-9a-f]{8}$/;
+function errorText(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+/**
+ * H6: every MCP call a deploy makes is separately deadline-bounded. Owned here, beside the grace it
+ * determines, so the two can never be hand-synced apart; `register.ts` imports it for its own
+ * per-call signals.
+ */
+export const MCP_CALL_TIMEOUT_MS = 90_000;
+/**
+ * How long the soft stop gets to land at a step boundary before the slot is taken back by force.
+ *
+ * DERIVED, never a bare number: force-terminate releases the single-flight slot while the abandoned
+ * run may still be waiting on a call. Sized past the per-call deadline so that by the time the slot
+ * frees, every call the abandoned run could still be awaiting has already been abandoned by its own
+ * deadline — a NEW deploy never starts its preflight/create while the old job is still parked on a
+ * money-moving call against the same funding waterfall. The headroom covers the abort landing and
+ * the step-boundary check that follows it.
+ *
+ * What this does NOT buy: a deadline bounds the WAIT, not the backend's work (`boundAwait` in
+ * `senpi/client.ts` — the gateway-injected MCP transport accepts no abort option). A create or fund
+ * this job stopped waiting on may still complete server-side after the slot has been handed on.
+ * What the grace guarantees is that the job is no longer *waiting* on a money-moving call when the
+ * slot comes back; the residue is reconciled by the next deploy, not prevented here.
+ *
+ * (This supersedes the plan's locked 60s: 60 < the locked 90s call timeout, so the two locked
+ * defaults were mutually inconsistent.)
+ */
+export const GRACE_MS = MCP_CALL_TIMEOUT_MS + 30_000;
+/**
+ * The single-flight slot is IN-MEMORY ONLY (`this.live`). It must never be persisted: an
+ * interrupted job belongs to a dead process and leaves the slot free by construction — persisting
+ * it would wedge every deploy on the box after one crash.
+ */
+export class DeployJobController {
+    deploysDir;
+    now;
+    log;
+    keep;
+    live = null;
+    constructor(opts) {
+        this.deploysDir = opts.deploysDir;
+        this.now = opts.now;
+        this.log = opts.log;
+        this.keep = opts.keep ?? DEFAULT_KEEP;
+    }
+    /** The running job's identity and progress, or null. The single-flight gate reads this. */
+    running() {
+        if (!this.live)
+            return null;
+        return { ...this.live.meta, phase: this.live.phase, stopRequested: this.live.stopRequested };
+    }
+    /**
+     * Claim the single job slot and fire `run` un-awaited.
+     *
+     * Single-flight is a money invariant, not a convenience: concurrent deploys
+     * share one funding waterfall, so two preflights can both pass while jointly
+     * overdrawing. Throws when a job is already running. The ordinary
+     * `E_DEPLOY_IN_PROGRESS` refusal comes from the gateway's own `running()`
+     * check BEFORE it gets here; this throw is the lost race between that check
+     * and this call, and the gateway catches it and renders the same refusal.
+     *
+     * `capMs` is the job's wall-clock cap (H6). Every MCP call the run makes is separately
+     * timeout-bounded, but a cap is what guarantees the slot comes back: one hung await used to hold
+     * it until the gateway restarted, and a boundary-honored stop flag never protected that case.
+     */
+    start(meta, capMs, run) {
+        if (this.live) {
+            throw new Error(`deploy ${this.live.meta.deployId} is already running (${this.live.phase})`);
+        }
+        const full = {
+            ...meta,
+            deployId: `dpl-${randomBytes(4).toString("hex")}`,
+            startedAt: new Date(this.now()).toISOString(),
+        };
+        const job = { meta: full, phase: "reconcile", stopRequested: false, terminated: false, events: [], seq: 0 };
+        // Header first, slot second: the journal is narration, so a write failure must not be able to
+        // claim (and then never release) the single-flight slot. `append` never throws — see its JSDoc.
+        try {
+            mkdirSync(this.deploysDir, { recursive: true });
+        }
+        catch (err) {
+            this.log(`deploy ${full.deployId}: could not create ${this.deploysDir} — journaling disabled (${errorText(err)})`);
+        }
+        this.append(full.deployId, { kind: "header", ...full });
+        this.live = job;
+        const handle = {
+            deployId: full.deployId,
+            emit: (event) => this.recordEvent(job, event),
+            shouldAbandon: () => job.stopRequested,
+        };
+        // Soft stop at the cap, hard stop `GRACE_MS` later. Both timers are unref'd so a deploy never
+        // keeps the gateway process alive, and both are cleared in `terminate`.
+        job.watchdog = setTimeout(() => {
+            job.stopRequested = true;
+            this.recordEvent(job, {
+                type: "job",
+                detail: `deploy deadline (${Math.round(capMs / 1000)}s) exceeded — abandoning at the next step boundary`,
+            });
+            job.grace = setTimeout(() => {
+                if (this.live === job) {
+                    this.terminate(job, { status: "done", overall: "failed" }, {
+                        packageId: full.packageId,
+                        version: full.version,
+                        overall: "failed",
+                        instances: [],
+                        next: `The deploy exceeded its deadline and was abandoned; a step may still have been in ` +
+                            `flight. Nothing was rolled back. Re-run \`openclaw senpi deploy -p '${full.packageDir}'\` — ` +
+                            `reconciliation adopts what exists.`,
+                    });
+                }
+            }, GRACE_MS);
+            job.grace.unref?.();
+        }, capMs);
+        job.watchdog.unref?.();
+        // Deferred a microtask so `start` stays pure bookkeeping: a synchronously throwing `run`
+        // becomes a journaled terminal state like any other failure, never an exception at the caller.
+        void Promise.resolve()
+            .then(() => run(handle))
+            .then((report) => this.terminate(job, { status: "done", overall: report.overall }, report), (err) => {
+            if (job.terminated)
+                return; // already force-terminated; do not narrate past the terminal line
+            const message = err instanceof Error ? err.message : String(err);
+            this.recordEvent(job, { type: "job", detail: `deploy failed: ${message}` });
+            this.terminate(job, { status: "done", overall: "failed" }, {
+                packageId: full.packageId,
+                version: full.version,
+                overall: "failed",
+                instances: [],
+                next: `The deploy died mid-flight: ${message}. Nothing was rolled back. ` +
+                    `Re-run \`openclaw senpi deploy -p '${full.packageDir}'\` — reconciliation adopts what exists.`,
+            });
+        });
+        return full;
+    }
+    /**
+     * The running job (from memory) when it is the one being asked about — by id or by omission —
+     * else the newest journal, or the named one. Unknown id → null.
+     *
+     * The live check MUST come first even for an explicit id: a
+     * running job's journal has no terminal line yet, so falling through to {@link readJournal}
+     * would render it `interrupted` — a state only the boot scan may ever assign, and a flat lie
+     * about a job that is actively moving money.
+     */
+    async status(deployId) {
+        // A caller's id is joined into a path by `journalPath`, so it is shape-checked against the same
+        // pattern `journalIds` applies to what it reads back. An unknown id already answers "no such
+        // deploy"; this is what keeps `../…` from being READ before answering it.
+        if (deployId !== undefined && !DEPLOY_ID_RE.test(deployId))
+            return null;
+        if (this.live && (!deployId || deployId === this.live.meta.deployId)) {
+            return {
+                meta: this.live.meta,
+                state: { status: "running", phase: this.live.phase, stopRequested: this.live.stopRequested },
+                events: [...this.live.events],
+            };
+        }
+        const id = deployId ?? this.newestJournalId();
+        if (!id)
+            return null;
+        return this.readJournal(id);
+    }
+    /**
+     * C2 carve-out: the ONE sanctioned journal read that feeds the orchestrator — and only as a
+     * LOOKUP KEY. Every id returned here is verified against the live backend (strategy_list
+     * strategyIds:[…]) before reconcile acts on it; the journal never decides anything.
+     *
+     * It exists because a create whose custom name the backend rejected lands under a
+     * backend-assigned name, which the reconcile name match can never find again: without the key,
+     * a re-run creates and funds a second wallet beside the first.
+     *
+     * Returns instance name → journaled created-strategy ids, newest journals first.
+     *
+     * `deployId` scopes the answer to ONE journal. Reconcile deliberately passes nothing: every
+     * journal of the package is a legitimate key source there, because any of them may hold the id
+     * of the wallet a re-run must adopt instead of funding a second one (D-9). The interrupted RENDER
+     * passes its own id, because it answers a narrower question — what did THIS job leave behind —
+     * and a still-live wallet from an earlier completed deploy is not that. Rendering it there would
+     * offer to close a strategy that is running exactly as intended.
+     */
+    priorCreatedStrategyIds(packageId, deployId) {
+        const byInstance = new Map();
+        for (const id of this.journalIdsNewestFirst()) {
+            if (deployId !== undefined && id !== deployId)
+                continue;
+            const lines = this.readLines(id);
+            const header = lines.find((line) => line.kind === "header");
+            if (!header || header.kind !== "header" || header.packageId !== packageId)
+                continue;
+            for (const line of lines) {
+                // ONLY the create-key event. Narrowing the shape keeps the carve-out explicit: any future
+                // job event that happens to carry an instance + strategyId must not silently become a
+                // reconcile input.
+                if (line.kind !== "event" || line.type !== "job" || line.phase !== "create")
+                    continue;
+                const instance = line.evidence?.instance;
+                const strategyId = line.evidence?.strategyId;
+                if (typeof instance !== "string" || typeof strategyId !== "string")
+                    continue;
+                const list = byInstance.get(instance) ?? [];
+                if (!list.includes(strategyId))
+                    list.push(strategyId);
+                byInstance.set(instance, list);
+            }
+        }
+        return byInstance;
+    }
+    /**
+     * The second D-9 lookup input off the SAME create-key event: strategyId → the amount that create
+     * call asked the backend to fund.
+     *
+     * Narrower than {@link priorCreatedStrategyIds} in what it may do, and deliberately so. It feeds
+     * exactly one thing — the report's funded-vs-requested comparison — and only the REQUESTED half
+     * of it; the funded half is always re-read live from `strategy_list` on the current run. No
+     * orchestration branch reads it, so a stale, missing or wrong entry costs a warn, never an action.
+     *
+     * It exists because the ask lives only in the memory of the run that funded. A deploy that funds
+     * $60 of a $500 ask and dies before assembling its report resumes as an adoption, and without
+     * this the shortfall is simply never mentioned again.
+     *
+     * Newest journal wins on a repeated strategyId — the ask that most recently produced that wallet.
+     */
+    priorRequestedFunding(packageId) {
+        const byStrategy = new Map();
+        for (const id of this.journalIdsNewestFirst()) {
+            const lines = this.readLines(id);
+            const header = lines.find((line) => line.kind === "header");
+            if (!header || header.kind !== "header" || header.packageId !== packageId)
+                continue;
+            for (const line of lines) {
+                if (line.kind !== "event" || line.type !== "job" || line.phase !== "create")
+                    continue;
+                const strategyId = line.evidence?.strategyId;
+                const requested = line.evidence?.requested;
+                if (typeof strategyId !== "string" || typeof requested !== "number")
+                    continue;
+                if (!(requested > 0) || byStrategy.has(strategyId))
+                    continue;
+                byStrategy.set(strategyId, requested);
+            }
+        }
+        return byStrategy;
+    }
+    /**
+     * Boot janitor: stamp every unterminated journal `interrupted`, then prune to
+     * the newest `keep`. Discovery is pull-based — the next `openclaw senpi deploy status`
+     * renders the interruption; nothing is resumed or notified here.
+     */
+    async scanOnBoot() {
+        if (!existsSync(this.deploysDir))
+            return;
+        for (const id of this.journalIds()) {
+            const lines = this.readLines(id);
+            if (lines.length === 0 || lines.some((line) => line.kind === "terminal"))
+                continue;
+            this.append(id, {
+                kind: "terminal",
+                state: { status: "interrupted" },
+                endedAt: new Date(this.now()).toISOString(),
+            });
+            this.log(`deploy ${id} interrupted by restart — surfaced on next openclaw senpi deploy status`);
+        }
+        this.prune();
+    }
+    // ── internals ───────────────────────────────────────────────────────────────
+    recordEvent(job, body) {
+        job.seq += 1;
+        const event = { ...body, seq: job.seq, ts: new Date(this.now()).toISOString() };
+        if (body.type === "job" && body.phase)
+            job.phase = body.phase;
+        job.events.push(event);
+        if (job.events.length > EVENT_TAIL_MAX)
+            job.events.splice(0, job.events.length - EVENT_TAIL_MAX);
+        this.append(job.meta.deployId, { kind: "event", ...event });
+    }
+    /**
+     * Close a job out. The slot is released in `finally`: a journal-write failure is narration lost,
+     * never a wedged single-flight slot that would refuse every future deploy with a stale
+     * `E_DEPLOY_IN_PROGRESS`.
+     */
+    terminate(job, state, report) {
+        // Idempotent: after a force-terminate the abandoned `run` promise settles later and calls in
+        // again. `readJournal` already tolerates the second terminal line (first wins), but the deploy
+        // METRIC does not — without this guard one wedged deploy counts twice, under two different
+        // outcomes, on precisely the path where the count matters most.
+        if (job.terminated)
+            return;
+        job.terminated = true;
+        try {
+            if (job.watchdog)
+                clearTimeout(job.watchdog);
+            if (job.grace)
+                clearTimeout(job.grace);
+            // M6: `refused` is recorded as an outcome like any other, with its taxonomy code — a refusal
+            // is a correct answer, never an error.
+            const refusalCode = firstRefusalCode(report);
+            recordDeploy({
+                outcome: state.status === "done" ? state.overall : state.status,
+                ...(refusalCode ? { refusalCode } : {}),
+                durationSec: Math.max(0, (this.now() - Date.parse(job.meta.startedAt)) / 1000),
+            });
+            this.append(job.meta.deployId, {
+                kind: "terminal",
+                state,
+                endedAt: new Date(this.now()).toISOString(),
+                report,
+            });
+            this.prune();
+        }
+        finally {
+            if (this.live === job)
+                this.live = null;
+        }
+    }
+    journalPath(deployId) {
+        return join(this.deploysDir, `${deployId}.jsonl`);
+    }
+    /**
+     * Append one journal line. **Never throws**: the journal is narration, and the narration-only
+     * rule cuts both ways — a full or read-only state volume must not be able to change what a
+     * deploy does (or wedge its slot). A failed write is logged and the line is lost.
+     */
+    append(deployId, line) {
+        try {
+            appendFileSync(this.journalPath(deployId), `${JSON.stringify(line)}\n`);
+        }
+        catch (err) {
+            this.log(`deploy ${deployId}: journal write failed (${errorText(err)}) — narration lost, deploy unaffected`);
+        }
+    }
+    journalIds() {
+        if (!existsSync(this.deploysDir))
+            return [];
+        return readdirSync(this.deploysDir)
+            .filter((name) => name.endsWith(".jsonl"))
+            .map((name) => name.slice(0, -".jsonl".length))
+            .filter((id) => DEPLOY_ID_RE.test(id));
+    }
+    readLines(deployId) {
+        const path = this.journalPath(deployId);
+        if (!existsSync(path))
+            return [];
+        const lines = [];
+        for (const raw of readFileSync(path, "utf8").split("\n")) {
+            if (raw.trim() === "")
+                continue;
+            try {
+                lines.push(JSON.parse(raw));
+            }
+            catch {
+                // A torn last line (killed mid-append) is narration lost, not state lost.
+            }
+        }
+        return lines;
+    }
+    /** Journals newest-first by header `startedAt` — the only ordering the controller trusts. */
+    journalIdsNewestFirst() {
+        return this.journalIds()
+            .map((id) => {
+            const header = this.readLines(id).find((line) => line.kind === "header");
+            return { id, startedAt: header?.startedAt ?? "" };
+        })
+            .sort((a, b) => (a.startedAt < b.startedAt ? 1 : a.startedAt > b.startedAt ? -1 : 0))
+            .map((entry) => entry.id);
+    }
+    newestJournalId() {
+        return this.journalIdsNewestFirst()[0] ?? null;
+    }
+    /**
+     * Journal → snapshot. A journal with no terminal line IS an interrupted job.
+     *
+     * The FIRST terminal line wins. That ordering is load-bearing: when the deadline watchdog
+     * force-terminates a wedged job, the zombie `run` promise may settle later and append a second
+     * terminal line — the watchdog's verdict is the true one, and reading the first keeps it.
+     */
+    readJournal(deployId) {
+        const lines = this.readLines(deployId);
+        const header = lines.find((line) => line.kind === "header");
+        if (!header)
+            return null;
+        const { kind: _kind, ...meta } = header;
+        const events = lines
+            .filter((line) => line.kind === "event")
+            .map(({ kind: _eventKind, ...event }) => event);
+        const terminal = lines.find((line) => line.kind === "terminal");
+        return {
+            meta,
+            state: terminal?.state ?? { status: "interrupted" },
+            events: events.slice(-EVENT_TAIL_MAX),
+            ...(terminal?.report ? { report: terminal.report } : {}),
+        };
+    }
+    /** Retain the newest `keep` journals. Runs on every terminate and on boot, so a long-lived
+     * gateway does not grow `deploys/` without bound between restarts. Never throws.
+     *
+     * Unlocked by design: prune and every journal read are fully synchronous on one thread, so they
+     * cannot interleave in-process; a torn last line is already tolerated by `readLines`. Do not add
+     * locking without a cross-process caller. */
+    prune() {
+        try {
+            const stale = this.journalIdsNewestFirst().slice(this.keep);
+            for (const id of stale)
+                rmSync(this.journalPath(id), { force: true });
+        }
+        catch (err) {
+            this.log(`deploy journal prune failed (${errorText(err)}) — harmless, retried on the next terminate`);
+        }
+    }
+}
+//# sourceMappingURL=job.js.map

package/dist/deploy/job.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job.js","sourceRoot":"","sources":["../../src/deploy/job.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACnG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,MAAoB;IAC5C,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YAC3C,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAyDD,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAEzC,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAgBD;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAE1C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,mBAAmB,GAAG,MAAM,CAAC;AAErD;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IACb,UAAU,CAAS;IACnB,GAAG,CAAe;IAClB,GAAG,CAAyB;IAC5B,IAAI,CAAS;IACtB,IAAI,GAAmB,IAAI,CAAC;IAEpC,YAAY,IAAgC;QAC1C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,YAAY,CAAC;IACxC,CAAC;IAED,2FAA2F;IAC3F,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAC5B,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;IAC/F,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CACH,IAAmD,EACnD,KAAa,EACb,GAA8C;QAE9C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,wBAAwB,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,IAAI,GAAkB;YAC1B,GAAG,IAAI;YACP,QAAQ,EAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YACjD,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;SAC9C,CAAC;QACF,MAAM,GAAG,GAAY,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAErH,8FAA8F;QAC9F,gGAAgG;QAChG,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,QAAQ,sBAAsB,IAAI,CAAC,UAAU,2BAA2B,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAEhB,MAAM,MAAM,GAAc;YACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC;YAC7C,aAAa,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,aAAa;SACvC,CAAC;QAEF,8FAA8F;QAC9F,wEAAwE;QACxE,GAAG,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;gBACpB,IAAI,EAAE,KAAK;gBACX,MAAM,EACJ,oBAAoB,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,oDAAoD;aACnG,CAAC,CAAC;YACH,GAAG,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;oBACtB,IAAI,CAAC,SAAS,CACZ,GAAG,EACH,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EACrC;wBACE,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,OAAO,EAAE,QAAQ;wBACjB,SAAS,EAAE,EAAE;wBACb,IAAI,EACF,oFAAoF;4BACpF,uEAAuE,IAAI,CAAC,UAAU,QAAQ;4BAC9F,oCAAoC;qBACvC,CACF,CAAC;gBACJ,CAAC;YACH,CAAC,EAAE,QAAQ,CAAC,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACtB,CAAC,EAAE,KAAK,CAAC,CAAC;QACV,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QAEvB,yFAAyF;QACzF,+FAA+F;QAC/F,KAAK,OAAO,CAAC,OAAO,EAAE;aACnB,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;aACvB,IAAI,CACH,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,EACpF,CAAC,GAAY,EAAE,EAAE;YACf,IAAI,GAAG,CAAC,UAAU;gBAAE,OAAO,CAAC,kEAAkE;YAC9F,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,OAAO,EAAE,EAAE,CAAC,CAAC;YAC5E,IAAI,CAAC,SAAS,CACZ,GAAG,EACH,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EACrC;gBACE,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,QAAQ;gBACjB,SAAS,EAAE,EAAE;gBACb,IAAI,EACF,+BAA+B,OAAO,6BAA6B;oBACnE,sCAAsC,IAAI,CAAC,UAAU,0CAA0C;aAClG,CACF,CAAC;QACJ,CAAC,CACF,CAAC;QAEJ,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,QAAiB;QAC5B,gGAAgG;QAChG,6FAA6F;QAC7F,0EAA0E;QAC1E,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACxE,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrE,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;gBACpB,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;gBAC5F,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;aAC9B,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9C,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACrB,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,uBAAuB,CAAC,SAAiB,EAAE,QAAiB;QAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC/C,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;YAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,EAAE,KAAK,QAAQ;gBAAE,SAAS;YACxD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;YAC5D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;gBAAE,SAAS;YACpF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,0FAA0F;gBAC1F,sFAAsF;gBACtF,mBAAmB;gBACnB,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;oBAAE,SAAS;gBACtF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;gBACzC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC;gBAC7C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ;oBAAE,SAAS;gBAC7E,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACtD,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,qBAAqB,CAAC,SAAiB;QACrC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC7C,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;YAC5D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;gBAAE,SAAS;YACpF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;oBAAE,SAAS;gBACtF,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC;gBAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;gBAC3C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ;oBAAE,SAAS;gBAC9E,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;oBAAE,SAAS;gBAC7D,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO;QACzC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC;gBAAE,SAAS;YACnF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;gBACd,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;gBAChC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;aAC5C,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,yEAAyE,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED,+EAA+E;IAEvE,WAAW,CAAC,GAAY,EAAE,IAAqB;QACrD,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QACb,MAAM,KAAK,GAAgB,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7F,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK;YAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,cAAc;YAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC;QACjG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;;;OAIG;IACK,SAAS,CAAC,GAAY,EAAE,KAAe,EAAE,MAAoB;QACnE,6FAA6F;QAC7F,+FAA+F;QAC/F,2FAA2F;QAC3F,gEAAgE;QAChE,IAAI,GAAG,CAAC,UAAU;YAAE,OAAO;QAC3B,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,QAAQ;gBAAE,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,GAAG,CAAC,KAAK;gBAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACvC,6FAA6F;YAC7F,uCAAuC;YACvC,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC7C,YAAY,CAAC;gBACX,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;gBAC/D,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC;aAC/E,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE;gBAC7B,IAAI,EAAE,UAAU;gBAChB,KAAK;gBACL,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;gBAC3C,MAAM;aACP,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAC1C,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,QAAQ,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,QAAgB,EAAE,IAAiB;QAChD,IAAI,CAAC;YACH,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,UAAU,QAAQ,2BAA2B,SAAS,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5C,OAAO,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;aAChC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;aACzC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aAC9C,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAEO,SAAS,CAAC,QAAgB;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,SAAS;YAChC,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,0EAA0E;YAC5E,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6FAA6F;IACrF,qBAAqB;QAC3B,OAAO,IAAI,CAAC,UAAU,EAAE;aACrB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACV,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAE1D,CAAC;YACd,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;QACpD,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACpF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAEO,eAAe;QACrB,OAAO,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACjD,CAAC;IAED;;;;;;OAMG;IACK,WAAW,CAAC,QAAgB;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAE7C,CAAC;QACd,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QACxC,MAAM,MAAM,GAAG,KAAK;aACjB,MAAM,CAAC,CAAC,IAAI,EAA2C,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;aAChF,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CACzB,CAAC,IAAI,EAAyF,EAAE,CAC9F,IAAI,CAAC,IAAI,KAAK,UAAU,CAC3B,CAAC;QACF,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE;YACnD,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC;YACrC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED;;;;;iDAK6C;IACrC,KAAK;QACX,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5D,KAAK,MAAM,EAAE,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,gCAAgC,SAAS,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;CACF"}

package/dist/deploy/min-budget.d.ts

@@ -0,0 +1,68 @@
+import { type DeployPackage } from "./package.js";
+/**
+ * The platform per-wallet floor — mirrors the backend's `MINIMUM_STRATEGY_BUDGET` default
+ * (`getMinimumStrategyBudget` in senpi-hyperliquid-mcp). `funding.ts` re-exports it as `MIN_WALLET`
+ * so the runtime, like the skills side, has ONE copy of the physics.
+ */
+export declare const WALLET_FLOOR = 10;
+/** The notional the engine bumps a small order up to. */
+export declare const BUMPED_NOTIONAL = 12;
+/** USDC reserved per wallet for the creation fee (observed ~$1). */
+export declare const FEE_BUFFER = 1.5;
+/** One instance's contribution, in the Python's `breakdown` shape (camelCased). */
+export interface MinBudgetRow {
+    wallet: string;
+    /** null = nothing in this sleeve resolved to a slot size. */
+    marginPct: number | null;
+    minLeverage: number;
+    fundingShare: number;
+    perWalletMin: number;
+}
+export interface MinBudgetResult {
+    /** The number to warn against. Never rounded down; a `catalog.min_budget_floor` may raise it. */
+    minBudget: number;
+    walletCount: number;
+    /** The sleeve whose per-wallet minimum over its share drives the total. null for an empty package. */
+    bindingWallet: string | null;
+    /**
+     * Sleeves whose marginPct could NOT be resolved — their per-wallet minimum fell back to the bare
+     * floor, so `minBudget` may be UNDERSTATED. Never silently swallowed: deploy warns rather than
+     * assert a number it never computed.
+     */
+    unresolvedWallets: string[];
+    /** The pre-rounding total, for the report's arithmetic to be checkable. */
+    raw: number;
+    breakdown: MinBudgetRow[];
+}
+/** The `strategy.yaml` subset this reads: instances with their shares, plus the catalog block. */
+export interface MinBudgetManifest {
+    instances?: Array<{
+        name?: unknown;
+        funding_share?: unknown;
+    }> | null;
+    catalog?: Record<string, unknown> | null;
+}
+/** instance name → its parsed `runtime.yaml` document. */
+export type MinBudgetRuntimes = Record<string, Record<string, unknown> | null | undefined>;
+/**
+ * PURE. `manifest` is the parsed `strategy.yaml`; `runtimes` maps instance name → parsed
+ * `runtime.yaml`. Mirrors the Python's full return shape (camelCased).
+ */
+export declare function strategyMinBudget(manifest: MinBudgetManifest, runtimes: MinBudgetRuntimes): MinBudgetResult;
+/**
+ * The same calculation over a loaded package — the port of `deploy.py`'s `strategy_min(pkg)`. The
+ * package's own YAML is the only input, because a custom-authored package never passes through
+ * catalog generation: "what the card promised" and "what deploy warns about" are one function.
+ *
+ * A runtime.yaml that cannot be parsed contributes an EMPTY document rather than throwing: this is
+ * an advisory warning computed after the money gates have already passed, and it must never be the
+ * thing that fails a deploy. Such a sleeve lands in `unresolvedWallets`, which is exactly the
+ * "may be understated" warning.
+ *
+ * **An absent `funding_share` resolves to `1/n`, not to the Python's `1.0`** — see the header's
+ * documented-deviation list. The adapter is the right place for it: `strategyMinBudget` keeps
+ * byte-parity with the reference, and this layer is where the manifest meets the verb that will
+ * actually spend the money.
+ */
+export declare function packageMinBudget(pkg: DeployPackage): MinBudgetResult;
+//# sourceMappingURL=min-budget.d.ts.map

package/dist/deploy/min-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"min-budget.d.ts","sourceRoot":"","sources":["../../src/deploy/min-budget.ts"],"names":[],"mappings":"AA6DA,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAGnE;;;;GAIG;AACH,eAAO,MAAM,YAAY,KAAO,CAAC;AAEjC,yDAAyD;AACzD,eAAO,MAAM,eAAe,KAAO,CAAC;AAEpC,oEAAoE;AACpE,eAAO,MAAM,UAAU,MAAM,CAAC;AAe9B,mFAAmF;AACnF,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,iGAAiG;IACjG,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,sGAAsG;IACtG,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,YAAY,EAAE,CAAC;CAC3B;AAED,kGAAkG;AAClG,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1C;AAED,0DAA0D;AAC1D,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAqH3F;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,iBAAiB,EAC3B,QAAQ,EAAE,iBAAiB,GAC1B,eAAe,CA4DjB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,aAAa,GAAG,eAAe,CA2BpE"}