@senpi/runtime 3.0.59 → 3.0.63

package/dist/deploy/package.js

@@ -0,0 +1,351 @@
+/**
+ * Strategy-package model for `senpi deploy` — the TS subset of the
+ * `strategy.yaml` + per-instance `runtime.yaml` layout that `deploy.py`'s
+ * `_pkg.py` owns on the skills side. Field names deliberately mirror the YAML
+ * so a reader can diff the two without a translation table.
+ *
+ * This module is pure: it reads files and throws teaching errors. It never
+ * touches the network, the registry, or money.
+ */
+import { readFileSync, existsSync } from "node:fs";
+import { basename, join, dirname, resolve } from "node:path";
+import { parse as parseYaml } from "yaml";
+import { pythonFloat } from "./python-float.js";
+/** Platform cap on a strategy name; also the cap on a derived wallet/runtime id. */
+const WALLET_NAME_MAX = 40;
+/** Matches a whole-value `${TOKEN}` wallet binding in a flat package's runtime.yaml. */
+const WALLET_TOKEN_RE = /^\$\{([A-Z0-9_]+)\}$/;
+/** Any surviving `${TOKEN}` after render — an unresolved placeholder must never reach the runtime. */
+const LEFTOVER_TOKEN_RE = /\$\{[A-Z0-9_]+\}/;
+/** Port of deploy.py `_sanitize_strategy_name`: whitespace→'-', keep [A-Za-z0-9_-], trim '-', cap 40. */
+export function sanitizeStrategyName(name) {
+    const collapsed = name
+        .trim()
+        .replace(/\s+/g, "-")
+        .replace(/[^A-Za-z0-9_-]/g, "")
+        .replace(/^-+|-+$/g, "");
+    return collapsed.slice(0, WALLET_NAME_MAX);
+}
+/**
+ * The identity that has to ROUND-TRIP is the COMBINED `<id>-<instance>`: the runtime registers
+ * `sanitizeStrategyName("<id>-<instance>")` (the orchestrator's install id and register.ts's live
+ * read both derive it, for flat packages too) while `close.py --instance` looks up the raw
+ * `<id>-<instance>` by exact string match. Checking the instance name alone left two ways through:
+ * a package id sanitization would change, and a combined identity past the 40-char cap — which the
+ * sanitizer TRUNCATES rather than rejects, so the sleeve installs fine and can never be closed by
+ * instance. Load time is the one seam where both consumers' assumption is made true by
+ * construction; both refusals teach the edit, like the instance-name one does.
+ */
+function assertIdentityRoundTrips(id, name, manifestPath) {
+    if (sanitizeStrategyName(id) !== id) {
+        throw new Error(`strategy.yaml id "${id}" is not usable as a strategy/runtime id — use ` +
+            `"${sanitizeStrategyName(id)}" instead (letters, digits, "_" and "-" only, no spaces, no ` +
+            `leading/trailing "-") (${manifestPath}). The runtime registers the sanitized ` +
+            `"<id>-<instance>" while teardown looks up the raw one, so an id that changes here cannot ` +
+            `be closed by instance later — and the id is shell input in every emitted command.`);
+    }
+    const combined = `${id}-${name}`;
+    if (sanitizeStrategyName(combined) !== combined) {
+        throw new Error(`strategy.yaml id "${id}" + instance "${name}" combine to "${combined}" ` +
+            `(${combined.length} chars), over the ${WALLET_NAME_MAX}-char strategy/runtime id cap — ` +
+            `shorten the package id or the instance name so "<id>-<instance>" fits in ` +
+            `${WALLET_NAME_MAX} (${manifestPath}). The runtime would register a TRUNCATED id while ` +
+            `teardown looks up the full one, so this sleeve could never be closed by instance later.`);
+    }
+}
+/**
+ * The package id when it is NOT already lowercase — the offending spelling, or null.
+ *
+ * `createWallet` stamps `skillName: pkg.id` VERBATIM at create while the backend stores what it is
+ * given case-normalized ("WARPATH" in, "warpath" back), so a mixed-case id is written under one
+ * spelling and read back under another. That is how `close.py '<id>'` came to report "no OPEN
+ * strategies to close." over a live, funded, trading wallet. Both sides now case-FOLD every stamp
+ * compare, which is the half that finds wallets already stamped in any case; requiring one
+ * canonical spelling is the half that keeps the next reader from having to remember to.
+ *
+ * Deliberately NOT a load refusal, and deliberately not part of {@link assertIdentityRoundTrips}:
+ * a mixed-case id round-trips through `sanitizeStrategyName` perfectly — capitals are legal there.
+ * What it breaks is the STAMP, which is minted on the deploy path, so that is where the gate goes
+ * (`register.ts`'s `localStartRefusal` and the orchestrator's own copy, both pre-money).
+ * `loadDeployPackage` is shared with two reads that are not creates: `senpi deploy status`'s
+ * interrupted render — the one surface that tells an operator which wallets a crashed deploy left
+ * FUNDED — and `senpi validate`'s target resolution. Refusing at load would blank that render for
+ * a package that already has money in the ground. Same call the skills side made for the same
+ * reason: the rule lives in `_pkg.validate`, which `deploy.py` runs before every money verb, and
+ * never in `_pkg.load`, which `close.py` needs in order to tear a package down.
+ */
+export function nonLowercasePackageId(pkg) {
+    return pkg.id !== pkg.id.toLowerCase() ? pkg.id : null;
+}
+/**
+ * The fix for a mixed-case id: the edit(s) to make, and the directory the package lives in once
+ * they are made. ONE producer of both, so a refusal's re-run command can never name a path that
+ * the same refusal's instruction just moved.
+ *
+ * The rename is emitted only when the directory IS this id in another case. The skills validator
+ * requires `id == package dir`, so lowercasing the id alone would trade this refusal for an
+ * `id != package dir` one over there, and an author must not have to guess which of the two to
+ * change. A directory that already differs from the id is a separate, pre-existing mismatch that
+ * this fix neither causes nor may claim to fix.
+ */
+export function lowercasePackageIdFix(id, packageDir) {
+    const lower = id.toLowerCase();
+    const dirName = basename(packageDir);
+    const renames = dirName !== lower && dirName.toLowerCase() === lower;
+    return {
+        instruction: `set \`id: ${lower}\` in ${join(packageDir, "strategy.yaml")}` +
+            (renames
+                ? ` and rename the package directory "${dirName}" to "${lower}" — the id and the ` +
+                    `directory name have to match`
+                : ""),
+        dirAfterFix: renames ? join(dirname(packageDir), lower) : packageDir,
+    };
+}
+function readYamlMapping(path) {
+    const parsed = parseYaml(readFileSync(path, "utf8"));
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new Error(`${path} did not parse to a YAML mapping`);
+    }
+    return parsed;
+}
+/**
+ * `funding_share` as a number, or null when it is absent or unreadable.
+ *
+ * A QUOTED share (`funding_share: "0.4"`) parses, because the number this field feeds is computed
+ * with Python's `float()` on the skills side: `gen_catalog.py` bakes the package's `min_budget`
+ * into the discovery card via `min_budget._f`. Reading a quoted share as undeclared here would put
+ * the card and the verb out of step on that figure, and would additionally make `planFunding` split
+ * the budget evenly when the author asked for 60/40 — a real money decision, not just a display.
+ *
+ * What the skills side does NOT do is accept it everywhere. `_pkg.py:62` reads this field RAW, so a
+ * quoted share reaches `_pkg.validate`'s `sum(shares)` as a `str` and raises `TypeError`; and
+ * `gen_catalog.derive_funding_split` filters `isinstance(x, (int, float))` and DROPS it, so the
+ * card's `funding_split` still falls back while its `min_budget` uses the value. Parsing it here is
+ * therefore the closest single behaviour to a divided reference, not agreement with all of it — a
+ * quoted share is a packaging bug that `deploy.py validate` catches loudly, and the verb's job is
+ * to not silently mis-split money in the meantime.
+ *
+ * Shared with the min-budget port so the two readers cannot drift ({@link pythonFloat}, whose two
+ * documented gaps from `float()` apply here and are pinned in `package.test.ts`). Anything that
+ * does not parse stays null — the honest "not declared", which callers treat as an even split.
+ * Never NaN: that would poison every downstream sum and max silently.
+ */
+const readFundingShare = pythonFloat;
+function readDeclaredInstances(rawInstances, dir, manifestPath) {
+    return rawInstances.map((entry) => {
+        const name = String(entry.name ?? "");
+        const rel = String(entry.runtime ?? "");
+        const walletEnv = String(entry.wallet_env ?? "");
+        if (!name || !rel || !walletEnv) {
+            throw new Error(`strategy.yaml instance entries need name, runtime, wallet_env (${manifestPath})`);
+        }
+        // An instance name has to survive `sanitizeStrategyName` UNCHANGED, because two different
+        // consumers disagree about it otherwise: the runtime registers the sanitized
+        // `<id>-<instance>`, while `close.py --instance <name>` looks the sleeve up under the RAW one.
+        // A name that changes under sanitization therefore installs fine and can never be torn down by
+        // instance — and, since deploy's own refusals emit that command, it would hand the reader
+        // something that cannot work. It is shell input there too, so spaces are doubly unwelcome.
+        if (sanitizeStrategyName(name) !== name) {
+            throw new Error(`strategy.yaml instance name "${name}" is not usable as a strategy/runtime id — use ` +
+                `"${sanitizeStrategyName(name)}" instead (letters, digits, "_" and "-" only, no spaces, ` +
+                `max ${WALLET_NAME_MAX} chars). The runtime registers the sanitized form while teardown ` +
+                `looks up the raw one, so a name that changes here cannot be closed by instance later.`);
+        }
+        const runtimeYamlPath = resolve(dir, rel);
+        if (!existsSync(runtimeYamlPath)) {
+            throw new Error(`Instance "${name}" runtime file not found: ${runtimeYamlPath}`);
+        }
+        return {
+            name,
+            runtimeYamlPath,
+            runtimeYamlDir: dirname(runtimeYamlPath),
+            walletEnv,
+            fundingShare: readFundingShare(entry.funding_share),
+        };
+    });
+}
+/**
+ * Flat package: one `runtime.yaml` at the package root and no `instances[]` —
+ * the layout agents naturally scaffold. The wallet env is read back out of the
+ * `${...}` the runtime already binds (mirror of `_pkg._flat_instance`), so
+ * render substitutes the token the package actually uses.
+ */
+function synthesizeFlatInstance(dir) {
+    const flatPath = join(dir, "runtime.yaml");
+    if (!existsSync(flatPath)) {
+        throw new Error(`No instances[] in strategy.yaml and no root runtime.yaml (${dir})`);
+    }
+    const flat = readYamlMapping(flatPath);
+    const strategy = (flat.strategy ?? {});
+    const wallet = String(strategy.wallet ?? "");
+    const token = WALLET_TOKEN_RE.exec(wallet.trim());
+    if (!token) {
+        throw new Error(`Flat package runtime.yaml strategy.wallet must be a \${WALLET_ENV} placeholder, got "${wallet}"`);
+    }
+    return { name: "main", runtimeYamlPath: flatPath, runtimeYamlDir: dir, walletEnv: token[1], fundingShare: null };
+}
+export function loadDeployPackage(packageDir) {
+    const dir = resolve(packageDir);
+    const manifestPath = join(dir, "strategy.yaml");
+    if (!existsSync(manifestPath)) {
+        throw new Error(`No strategy.yaml in ${dir}. senpi deploy takes a strategy PACKAGE directory ` +
+            `(strategy.yaml + per-instance runtime.yaml). For a bare runtime.yaml, use the internal ` +
+            `runtime create only if you know what you are doing — packages are the supported path.`);
+    }
+    const manifest = readYamlMapping(manifestPath);
+    const id = String(manifest.id ?? "");
+    const version = String(manifest.version ?? "");
+    if (!id || !version)
+        throw new Error(`strategy.yaml must declare id and version (${manifestPath})`);
+    const defaults = (manifest.defaults ?? {});
+    const decisionModelEnv = typeof defaults.decision_model_env === "string" ? defaults.decision_model_env : null;
+    // A non-mapping `catalog:` is a packaging mistake, not a reason to fail the load — it reads as an
+    // absent block, which only costs the advisory `min_budget_floor` override.
+    const rawCatalog = manifest.catalog;
+    const catalog = typeof rawCatalog === "object" && rawCatalog !== null && !Array.isArray(rawCatalog)
+        ? rawCatalog
+        : {};
+    const rawInstances = Array.isArray(manifest.instances)
+        ? manifest.instances
+        : [];
+    const instances = rawInstances.length > 0
+        ? readDeclaredInstances(rawInstances, dir, manifestPath)
+        : [synthesizeFlatInstance(dir)];
+    // After the per-instance name check: the combined identity covers the id and the length, for
+    // declared and flat (synthesized "main") instances alike.
+    for (const inst of instances)
+        assertIdentityRoundTrips(id, inst.name, manifestPath);
+    return { id, version, dir, decisionModelEnv, catalog, instances };
+}
+/** The backend strategy name for an instance — also the reconcile key. */
+export function walletName(pkg, inst) {
+    const base = pkg.instances.length > 1 ? `${pkg.id}-${inst.name}` : pkg.id;
+    return sanitizeStrategyName(base);
+}
+/** The instance's runtime.yaml exactly as authored — pre-substitution, for pre-render inspection. */
+export function readRuntimeYaml(inst) {
+    return readFileSync(inst.runtimeYamlPath, "utf8");
+}
+/**
+ * Render an instance's runtime.yaml for install. Only the wallet token and (when
+ * supplied) the decision-model token are substituted; anything else left as
+ * `${...}` is a packaging bug and throws rather than reaching the runtime, where
+ * it would install as a literal.
+ */
+export function renderRuntimeYaml(inst, wallet, decisionModel) {
+    let text = readFileSync(inst.runtimeYamlPath, "utf8");
+    text = text.split(`\${${inst.walletEnv}}`).join(wallet);
+    if (decisionModel)
+        text = text.split(`\${${decisionModel.env}}`).join(decisionModel.model);
+    const leftover = LEFTOVER_TOKEN_RE.exec(text);
+    if (leftover) {
+        throw new Error(`Unresolved placeholder ${leftover[0]} in ${inst.runtimeYamlPath}. ` +
+            `Only \${${inst.walletEnv}}${decisionModel ? ` and \${${decisionModel.env}}` : ""} are substituted by deploy.`);
+    }
+    return text;
+}
+/**
+ * True iff the instance ships a DSL exit block — `exit.dsl_preset`, or `exit.engine: dsl`.
+ *
+ * A deployed strategy without one runs every position naked: no hard stop, no trailing floor. The
+ * skills-side `_pkg.validate` has always refused to fund such a package, and `senpi deploy` is now
+ * the taught path, so the same gate has to live here or the hole reopens on the direct-verb route.
+ */
+export function instanceHasDslExit(inst) {
+    const parsed = parseYaml(readRuntimeYaml(inst));
+    const exit = parsed?.exit;
+    if (exit === null || typeof exit !== "object" || Array.isArray(exit))
+        return false;
+    const block = exit;
+    const engine = typeof block.engine === "string" ? block.engine.toLowerCase() : "";
+    // Mirror of `_pkg.Instance.has_dsl`: a truthy `dsl_preset` (real packages use a map, not a
+    // string) OR `engine: dsl`. Keeping the two predicates identical is why author-green stays
+    // deploy-green.
+    return isTruthyPreset(block.dsl_preset) || engine === "dsl";
+}
+/**
+ * Python-`bool()` semantics for a YAML value: a non-empty string, map or list — and `true`, which
+ * `bool()` also accepts. Without the boolean arm a package written `dsl_preset: true` would validate
+ * green on the skills side and be refused here, and the two predicates must not disagree.
+ */
+function isTruthyPreset(value) {
+    if (typeof value === "boolean")
+        return value;
+    if (typeof value === "number")
+        return value !== 0;
+    if (typeof value === "string")
+        return value.trim().length > 0;
+    if (Array.isArray(value))
+        return value.length > 0;
+    if (value !== null && typeof value === "object")
+        return Object.keys(value).length > 0;
+    return false;
+}
+/**
+ * Instances in `pkg` that ship no DSL exit block. Empty = every instance is protected.
+ *
+ * The instances themselves, not their names: both refusals built from this name the re-check
+ * command for each offender, and that command takes a directory the instance carries. A name is not
+ * a path, and re-deriving the instance from its name at the refusal site is a lookup that can fail.
+ */
+export function instancesWithoutDslExit(pkg) {
+    return pkg.instances.filter((inst) => !instanceHasDslExit(inst));
+}
+/**
+ * Scanner entries in `pkg` that declare an `enabled` key at all.
+ *
+ * Scanner-level `enabled` is NOT a supported key: `scannerEntrySchema` is `.passthrough()` and does
+ * not declare it, `buildScannerOverrides` (map-strategies-registration.ts) forwards only
+ * `interval_seconds`/`config`, and `StrategyScannerRegistry.register` derives `enabled` from
+ * `strategy.defaultEnabledScanners` — which nothing writes from a recipe. So the engine never reads
+ * it: a scanner written `enabled: false` registers ENABLED and ticks. Silently accepting the key
+ * means shipping a strategy that trades while its author believes it is switched off, which is why
+ * every value refuses (a `true` is just as unread as a `false`, and tomorrow's reader would take
+ * the accepted `true` as proof the key works).
+ *
+ * The live-state twin of this is the observe step's all-disabled branch, which reads engine rows
+ * rather than YAML — the runtime API can genuinely disable a scanner after install.
+ */
+export function scannersDeclaringEnabled(pkg) {
+    const found = [];
+    for (const inst of pkg.instances) {
+        readScannerEntries(inst).forEach((scanner, index) => {
+            // Key presence, not truthiness: a bare `enabled:` (null) is the same unsupported key.
+            if (scanner === null || typeof scanner !== "object" || !("enabled" in scanner))
+                return;
+            const name = typeof scanner.name === "string" ? scanner.name : scanner.id;
+            found.push({
+                instance: inst.name,
+                scanner: typeof name === "string" && name.length > 0 ? name : `scanners[${index}]`,
+                value: scanner.enabled,
+                runtimeYamlPath: inst.runtimeYamlPath,
+            });
+        });
+    }
+    return found;
+}
+/**
+ * One offense as an instruction: the key, the scanner, the instance, the file and the exact line to
+ * delete. Shared by both gate copies so the mechanical fix an agent reads is word-for-word the same
+ * wherever the refusal is raised.
+ */
+export function describeScannerEnabledOffense(entry) {
+    return (`instance "${entry.instance}", scanner "${entry.scanner}": delete the line ` +
+        `\`${renderEnabledLine(entry.value)}\` from ${entry.runtimeYamlPath}`);
+}
+/** The offending line as it appears in the YAML — a bare `enabled:` has no value to echo. */
+function renderEnabledLine(value) {
+    return value === null || value === undefined ? "enabled:" : `enabled: ${JSON.stringify(value)}`;
+}
+/** The instance's `scanners:` list, or []. */
+function readScannerEntries(inst) {
+    const parsed = parseYaml(readRuntimeYaml(inst));
+    return Array.isArray(parsed?.scanners) ? parsed.scanners : [];
+}
+/** True iff any action runs `decision_mode: llm` — those installs need a decision model. */
+export function runtimeUsesLlmDecisions(runtimeYamlText) {
+    const parsed = parseYaml(runtimeYamlText);
+    const actions = Array.isArray(parsed?.actions) ? parsed.actions : [];
+    return actions.some((action) => action?.decision_mode === "llm");
+}
+//# sourceMappingURL=package.js.map

package/dist/deploy/package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package.js","sourceRoot":"","sources":["../../src/deploy/package.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,oFAAoF;AACpF,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,wFAAwF;AACxF,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAE/C,sGAAsG;AACtG,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AA6B7C,yGAAyG;AACzG,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,SAAS,GAAG,IAAI;SACnB,IAAI,EAAE;SACN,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;SAC9B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAAC,EAAU,EAAE,IAAY,EAAE,YAAoB;IAC9E,IAAI,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,iDAAiD;YACtE,IAAI,oBAAoB,CAAC,EAAE,CAAC,8DAA8D;YAC1F,0BAA0B,YAAY,yCAAyC;YAC/E,2FAA2F;YAC3F,mFAAmF,CACtF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;IACjC,IAAI,oBAAoB,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,iBAAiB,IAAI,iBAAiB,QAAQ,IAAI;YACvE,IAAI,QAAQ,CAAC,MAAM,qBAAqB,eAAe,kCAAkC;YACzF,2EAA2E;YAC3E,GAAG,eAAe,KAAK,YAAY,qDAAqD;YACxF,yFAAyF,CAC5F,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAkB;IACtD,OAAO,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,EAAU,EACV,UAAkB;IAElB,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;IACrE,OAAO;QACL,WAAW,EACT,aAAa,KAAK,SAAS,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE;YAC9D,CAAC,OAAO;gBACN,CAAC,CAAC,sCAAsC,OAAO,SAAS,KAAK,qBAAqB;oBAChF,8BAA8B;gBAChC,CAAC,CAAC,EAAE,CAAC;QACT,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU;KACrE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;IAChE,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAErC,SAAS,qBAAqB,CAC5B,YAA4C,EAC5C,GAAW,EACX,YAAoB;IAEpB,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,kEAAkE,YAAY,GAAG,CAAC,CAAC;QACrG,CAAC;QACD,0FAA0F;QAC1F,6EAA6E;QAC7E,+FAA+F;QAC/F,+FAA+F;QAC/F,0FAA0F;QAC1F,2FAA2F;QAC3F,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,iDAAiD;gBACnF,IAAI,oBAAoB,CAAC,IAAI,CAAC,2DAA2D;gBACzF,OAAO,eAAe,mEAAmE;gBACzF,uFAAuF,CAC1F,CAAC;QACJ,CAAC;QACD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,6BAA6B,eAAe,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO;YACL,IAAI;YACJ,eAAe;YACf,cAAc,EAAE,OAAO,CAAC,eAAe,CAAC;YACxC,SAAS;YACT,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC;SACpD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,GAAW;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,6DAA6D,GAAG,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,wFAAwF,MAAM,GAAG,CAClG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,uBAAuB,GAAG,oDAAoD;YAC5E,yFAAyF;YACzF,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,YAAY,GAAG,CAAC,CAAC;IAEpG,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACtE,MAAM,gBAAgB,GACpB,OAAO,QAAQ,CAAC,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC;IAEvF,kGAAkG;IAClG,2EAA2E;IAC3E,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC;IACpC,MAAM,OAAO,GACX,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QACjF,CAAC,CAAE,UAAsC;QACzC,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QACpD,CAAC,CAAE,QAAQ,CAAC,SAA4C;QACxD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GACb,YAAY,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,CAAC,qBAAqB,CAAC,YAAY,EAAE,GAAG,EAAE,YAAY,CAAC;QACxD,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,6FAA6F;IAC7F,0DAA0D;IAC1D,KAAK,MAAM,IAAI,IAAI,SAAS;QAAE,wBAAwB,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAEpF,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACpE,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CAAC,GAAkB,EAAE,IAAoB;IACjE,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1E,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAAC,IAAoB;IAClD,OAAO,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAoB,EACpB,MAAc,EACd,aAA8C;IAE9C,IAAI,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,aAAa;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,eAAe,IAAI;YAClE,WAAW,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,CAAC,CAAC,WAAW,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,6BAA6B,CACjH,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAmC,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,CAAC;IAC1B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,MAAM,KAAK,GAAG,IAA+B,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,2FAA2F;IAC3F,2FAA2F;IAC3F,gBAAgB;IAChB,OAAO,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,MAAM,KAAK,KAAK,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,KAAK,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAkB;IACxD,OAAO,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC;AAaD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAkB;IACzD,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QACjC,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;YAClD,sFAAsF;YACtF,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC;gBAAE,OAAO;YACvF,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,OAAO,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,KAAK,GAAG;gBAClF,KAAK,EAAE,OAAO,CAAC,OAAO;gBACtB,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAAwB;IACpE,OAAO,CACL,aAAa,KAAK,CAAC,QAAQ,eAAe,KAAK,CAAC,OAAO,qBAAqB;QAC5E,KAAK,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,CAAC,eAAe,EAAE,CACtE,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,8CAA8C;AAC9C,SAAS,kBAAkB,CAAC,IAAoB;IAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAmC,CAAC;IAClF,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,QAA2C,CAAC,CAAC,CAAC,EAAE,CAAC;AACpG,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,uBAAuB,CAAC,eAAuB;IAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAmC,CAAC;IAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,OAA0C,CAAC,CAAC,CAAC,EAAE,CAAC;IACzG,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,KAAK,CAAC,CAAC;AACnE,CAAC"}

package/dist/deploy/proof-gate.d.ts

@@ -0,0 +1,82 @@
+import { type ValidateCode, type VerifyResult } from "../validate/index.js";
+import { type DeployInstance, type DeployPackage } from "./package.js";
+export declare function checkPackageProof(pkg: DeployPackage): VerifyResult;
+/** Instances that resolve to one directory — see {@link collidingInstanceDirs}. */
+export interface InstanceDirCollision {
+    dir: string;
+    instances: DeployInstance[];
+}
+/**
+ * The one package shape a proof cannot answer for, which therefore has to be refused rather than
+ * verified.
+ *
+ * A proof is one file per DIRECTORY — `writeProof` writes `dirname(recipePath)/.senpi-proof.json` —
+ * and it records the recipe it was made for, which `verifyProofInner` re-fingerprints. Nothing in
+ * `loadDeployPackage` requires instances to live in different directories: a manifest naming
+ * `aggressive.yaml` and `calm.yaml` at the package root is legal and gives both instances the same
+ * `runtimeYamlDir`. Verifying that package asks the same directory twice and gets the same answer
+ * twice, so a proof recorded for ONE recipe passes the other — a recipe nobody watched run reaches
+ * funding, which is the precise harm this gate exists to prevent.
+ *
+ * Fixing it inside `verifyProof` would mean teaching the proof format about instances; the deploy
+ * layer is the one that HAS the manifest and can see the collision, so it refuses here. Fail-closed
+ * on principle and free in practice: of the 103 packages in the shipped catalog, 21 are
+ * multi-instance and none shares a runtime directory.
+ */
+export declare function collidingInstanceDirs(pkg: DeployPackage): InstanceDirCollision[];
+/**
+ * The collision as an instruction — deliberately an END STATE, not a command.
+ *
+ * The obvious rendering ("mv the recipe into its own directory") produces a package that does not
+ * validate: a relative `path:` resolves against the recipe's own directory, so moving the recipe
+ * alone re-points `./scanners` at a directory that does not exist and the very next validation
+ * fails on an unresolvable scanner path. Nor can the right move be computed here — two recipes that
+ * share a directory may well be sharing what is in it, and whether the tree moves, is copied, or is
+ * referenced from both is a decision about this package that this gate does not have the standing
+ * to make. So it names what will break (computed from each recipe, not templated), describes the
+ * state to reach, and emits no command whose preconditions it cannot check — the same rule
+ * `buildBudgetEscape` follows when a report cannot support a teardown.
+ *
+ * It also emits no post-move `senpi validate` path. Those directories do not exist yet, and a
+ * non-colliding sleeve's directory is not its manifest name — the exact trap this module exists to
+ * prevent, which is easy to walk back into while writing helpful-looking text. Re-running the
+ * deploy is the loop: it names any instance still unproven and carries the exact command for it.
+ */
+export declare function buildInstanceDirCollisionRefusal(collisions: InstanceDirCollision[], pkg: DeployPackage): string;
+/**
+ * The refusal's four parts, before rendering.
+ *
+ * Split from the renderer so the step row can take the `code` from the same producer that renders
+ * the `detail` — the two cannot disagree about which refusal this is. Only the code rides
+ * `evidence`: every sibling gate keeps `evidence` a small machine-readable bag and leaves the prose
+ * in `detail`, and duplicating multi-line teaching text into every journal event and instance row
+ * is weight without a reader.
+ */
+export interface ProofRefusalParts {
+    code: ValidateCode;
+    what: string;
+    why: string;
+    fix: string;
+}
+/**
+ * The three reasons, each with its own fix.
+ *
+ * A single generic "run senpi validate" would be a template hint rather than a computed one: the
+ * three states call for different reading. `no_proof` says nothing has ever been observed to run
+ * here; `content_changed` says the bytes moved and names which; `runtime_version_changed` says the
+ * package is unchanged and only the engine under it moved — the one case where editing the package
+ * would be exactly the wrong response.
+ */
+export declare function proofRefusalParts(result: VerifyResult, pkg: DeployPackage): ProofRefusalParts;
+/**
+ * The refusal as the step row's `detail`.
+ *
+ * The bracketed code leads, and is not decoration: `taxonomy.ts` extracts it and the CLI uses it to
+ * exit 2 (obey this) rather than 1 (state unknown).
+ *
+ * It emits NO re-run command of its own. The report's `next` already ends a refused report with
+ * `openclaw senpi deploy -p '<dir>' --budget <the real figure>`; a copy here would carry a `<usd>` placeholder
+ * instead, which is a second, worse command competing with the authoritative one.
+ */
+export declare function buildProofRefusal(result: VerifyResult, pkg: DeployPackage): string;
+//# sourceMappingURL=proof-gate.d.ts.map

package/dist/deploy/proof-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-gate.d.ts","sourceRoot":"","sources":["../../src/deploy/proof-gate.ts"],"names":[],"mappings":"AA6BA,OAAO,EAA8B,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAExG,OAAO,EAAmB,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAGxF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,CAGlE;AAED,mFAAmF;AACnF,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,aAAa,GAAG,oBAAoB,EAAE,CAQhF;AA6BD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,oBAAoB,EAAE,EAClC,GAAG,EAAE,aAAa,GACjB,MAAM,CAqCR;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAgED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,GAAG,iBAAiB,CAmD7F;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,GAAG,MAAM,CAalF"}