@senpi/runtime 3.0.72 → 3.0.74

package/dist/deploy/package.js

@@ -8,15 +8,25 @@
  * touches the network, the registry, or money.
  */
 import { readFileSync, existsSync } from "node:fs";
-import { basename, join, dirname, resolve } from "node:path";
+import { basename, join, dirname, resolve, relative, isAbsolute } from "node:path";
 import { parse as parseYaml } from "yaml";
+import { ENV_VAR_PATTERN_SOURCE } from "../runtime/env-resolve.js";
 import { pythonFloat } from "./python-float.js";
 /** Platform cap on a strategy name; also the cap on a derived wallet/runtime id. */
 const WALLET_NAME_MAX = 40;
 /** Matches a whole-value `${TOKEN}` wallet binding in a flat package's runtime.yaml. */
 const WALLET_TOKEN_RE = /^\$\{([A-Z0-9_]+)\}$/;
-/** Any surviving `${TOKEN}` after render — an unresolved placeholder must never reach the runtime. */
-const LEFTOVER_TOKEN_RE = /\$\{[A-Z0-9_]+\}/;
+/**
+ * Any surviving `${...}` after render — an unresolved placeholder must never reach the runtime.
+ *
+ * Built from the EXPANDER's own grammar ({@link ENV_VAR_PATTERN_SOURCE}) rather than a local
+ * approximation of it. This gate used to be `\$\{[A-Z0-9_]+\}`, which cannot match `:` or `-`, so
+ * `${SENPI_API_KEY:-x}` — a form `resolveEnvInString` expands — passed it silently and installed
+ * verbatim, handing the box's credentials to author-written scanner code as an ordinary input
+ * value. Sharing the grammar is what makes the gate's stated purpose true: anything left as
+ * `${...}` is a packaging bug and throws rather than reaching the runtime.
+ */
+const LEFTOVER_TOKEN_RE = new RegExp(ENV_VAR_PATTERN_SOURCE);
 /** Port of deploy.py `_sanitize_strategy_name`: whitespace→'-', keep [A-Za-z0-9_-], trim '-', cap 40. */
 export function sanitizeStrategyName(name) {
     const collapsed = name
@@ -73,6 +83,12 @@ function assertIdentityRoundTrips(id, name, manifestPath) {
  * a package that already has money in the ground. Same call the skills side made for the same
  * reason: the rule lives in `_pkg.validate`, which `deploy.py` runs before every money verb, and
  * never in `_pkg.load`, which `close.py` needs in order to tear a package down.
+ *
+ * `senpi validate` reports it too, at static depth (`E_VALIDATE_PACKAGE_ID_CASE`), rendering its
+ * fix from {@link lowercasePackageIdFix} so both surfaces name the identical edit. Note the ops
+ * ordering that creates: the redeploy loop is `validate → close → create`, so the finding fires
+ * before anything is closed and the id is lowercased on a package that may already own funded
+ * wallets. That is safe only because both stamp comparisons case-FOLD.
  */
 export function nonLowercasePackageId(pkg) {
     return pkg.id !== pkg.id.toLowerCase() ? pkg.id : null;
@@ -132,6 +148,7 @@ function readYamlMapping(path) {
  */
 const readFundingShare = pythonFloat;
 function readDeclaredInstances(rawInstances, dir, manifestPath) {
+    const seen = new Set();
     return rawInstances.map((entry) => {
         const name = String(entry.name ?? "");
         const rel = String(entry.runtime ?? "");
@@ -139,6 +156,22 @@ function readDeclaredInstances(rawInstances, dir, manifestPath) {
         if (!name || !rel || !walletEnv) {
             throw new Error(`strategy.yaml instance entries need name, runtime, wallet_env (${manifestPath})`);
         }
+        // A repeated name is not a cosmetic clash — it costs money twice over, and nothing downstream
+        // can recover from it. `planFunding` keys its amounts Map on this name, so two entries collapse
+        // into one and the preflight validates HALF the money that actually moves; both runs then read
+        // the same amount and issue two creates. At install both derive the same `<id>-<instance>`
+        // runtime id, so the second deletes the first's runtime and rebinds to its own wallet —
+        // leaving wallet #1 funded, live, and supervised by no runtime and no exit engine, with its
+        // install step reported `ok`. Refused in the loader, beside the sibling name rule above: unlike
+        // a mixed-case package id (which deploys coherently and only misstamps), there is no reading of
+        // a duplicated name any consumer can act on, so there is no recovery read to keep working.
+        if (seen.has(name)) {
+            throw new Error(`strategy.yaml declares instance "${name}" more than once (${manifestPath}). Instance ` +
+                `names must be unique within a package: the funding plan and the runtime id are both ` +
+                `keyed on this name, so a repeated one funds two wallets and then leaves one of them ` +
+                `with no runtime watching it. Give each instance its own name.`);
+        }
+        seen.add(name);
         // An instance name has to survive `sanitizeStrategyName` UNCHANGED, because two different
         // consumers disagree about it otherwise: the runtime registers the sanitized
         // `<id>-<instance>`, while `close.py --instance <name>` looks the sleeve up under the RAW one.
@@ -152,6 +185,21 @@ function readDeclaredInstances(rawInstances, dir, manifestPath) {
                 `looks up the raw one, so a name that changes here cannot be closed by instance later.`);
         }
         const runtimeYamlPath = resolve(dir, rel);
+        // The user names ONE directory, and everything this deploy reads, funds and runs has to come
+        // from inside it. `resolve` + `existsSync` alone let `../../other/runtime.yaml` — or a bare
+        // absolute path, which has no `../` to notice — relocate every consumer at once: the pre-money
+        // gates would validate a foreign recipe, `checkPackageProof` would read a `.senpi-proof.json`
+        // recorded for a package nobody inspected (satisfying the funding gate), relative
+        // `scanners[].path` entrypoints would resolve and therefore EXECUTE from outside the package,
+        // and the refusals would print `openclaw senpi validate '<that outside dir>'` for the reader to
+        // run. One containment check upstream of all of them is the whole fix.
+        const inside = relative(dir, runtimeYamlPath);
+        if (inside.startsWith("..") || isAbsolute(inside)) {
+            throw new Error(`strategy.yaml instance "${name}" points at a runtime file outside the package: ` +
+                `"${rel}" resolves to ${runtimeYamlPath}, which is not under ${dir}. An instance's ` +
+                `runtime.yaml must live inside the package directory being deployed — move the file in, ` +
+                `or deploy the package that already contains it.`);
+        }
         if (!existsSync(runtimeYamlPath)) {
             throw new Error(`Instance "${name}" runtime file not found: ${runtimeYamlPath}`);
         }
@@ -226,6 +274,59 @@ export function walletName(pkg, inst) {
 export function readRuntimeYaml(inst) {
     return readFileSync(inst.runtimeYamlPath, "utf8");
 }
+/** The `${TOKEN}` an instance's recipe must bind its wallet to, from the manifest's `wallet_env`. */
+function expectedWalletBinding(inst) {
+    return `\${${inst.walletEnv}}`;
+}
+/**
+ * Instances whose recipe does not bind the wallet `strategy.yaml` says it binds.
+ *
+ * `wallet_env` is a promise the manifest makes on behalf of the recipe, and nothing used to check
+ * that the recipe keeps it. `renderRuntimeYaml` substitutes by string replacement, so a declared
+ * token that never appears substitutes NOTHING — silently, because the leftover-placeholder gate
+ * only looks for surviving `${...}` and a hardcoded address leaves none. A package declaring
+ * `wallet_env: UNUSED` beside a recipe pinning an address it chose therefore had `senpi deploy`
+ * create and fund a fresh wallet from the user's budget and then install the runtime — actions,
+ * DSL exit engine and all — against the OTHER address. The install step named the recipe's wallet,
+ * so the report read clean while the funded wallet sat with nothing watching it.
+ *
+ * Read from the PARSED recipe, not by searching its text: a token that appears anywhere at all
+ * satisfies a text search, substitutes harmlessly into some field nobody reads, and leaves the
+ * leftover gate with nothing to catch. Only `strategy.wallet` decides what the runtime binds.
+ *
+ * Flat packages cannot fault here and are not special-cased: `synthesizeFlatInstance` derives
+ * `walletEnv` from this very field, so the invariant holds by construction.
+ *
+ * Never throws. A recipe that will not parse is a fault the YAML-syntax gate already owns and
+ * words properly — restating it here in worse words helps nobody — and this check is called from
+ * places (validate's static depth, deploy's preflight) where taking the whole run down over one
+ * unreadable file would be the wrong answer.
+ */
+export function unboundWalletInstances(pkg) {
+    const faults = [];
+    for (const inst of pkg.instances) {
+        let declared;
+        try {
+            const parsed = parseYaml(readRuntimeYaml(inst));
+            const strategy = parsed?.strategy;
+            // A missing or non-mapping `strategy:` block is NOT skipped: it parses, so it can reach
+            // install, and it binds no wallet — which is exactly the fault this asks about. Only a file
+            // that will not parse at all is passed over, and that one cannot reach install because
+            // `renderRuntimeYaml` re-parses before it returns.
+            const wallet = strategy !== null && typeof strategy === "object" && !Array.isArray(strategy)
+                ? strategy.wallet
+                : undefined;
+            declared = typeof wallet === "string" ? wallet.trim() : undefined;
+        }
+        catch {
+            continue;
+        }
+        const expected = expectedWalletBinding(inst);
+        if (declared !== expected)
+            faults.push({ instance: inst, declared, expected });
+    }
+    return faults;
+}
 /**
  * Render an instance's runtime.yaml for install. Only the wallet token and (when
  * supplied) the decision-model token are substituted; anything else left as
@@ -242,8 +343,52 @@ export function renderRuntimeYaml(inst, wallet, decisionModel) {
         throw new Error(`Unresolved placeholder ${leftover[0]} in ${inst.runtimeYamlPath}. ` +
             `Only \${${inst.walletEnv}}${decisionModel ? ` and \${${decisionModel.env}}` : ""} are substituted by deploy.`);
     }
+    assertBindsFundedWallet(inst, text, wallet);
     return text;
 }
+/**
+ * The last gate before install: does the recipe about to be installed bind the wallet this run
+ * actually funded?
+ *
+ * Not redundant with the pre-money check in the preflight, for a reason that is a property of this
+ * function: it RE-READS the file. Whatever any earlier gate inspected is not provably these bytes
+ * (`runtime.yaml` is read several times across one deploy, and nothing pins the file between
+ * them). This is the one point where the funded wallet and the exact text that will be installed
+ * are both in hand, so it is the only place the invariant can actually be asserted rather than
+ * approximated.
+ *
+ * Compares the PARSED value — the runtime binds what the YAML parses to, not what the text looks
+ * like — and folds case, because a wallet address is one margin account however it is spelled
+ * (`findByWallet` folds for the same reason). An exact compare here would refuse correct deploys
+ * and, since this throw lands on the money path, roll their funded wallets back.
+ *
+ * Fails CLOSED on a rendered recipe that will not parse. The runtime would reject it anyway; the
+ * difference is that refusing here happens before the wallet is handed to an install.
+ */
+function assertBindsFundedWallet(inst, rendered, wallet) {
+    let bound;
+    try {
+        const parsed = parseYaml(rendered);
+        const strategy = parsed?.strategy;
+        bound =
+            strategy !== null && typeof strategy === "object" && !Array.isArray(strategy)
+                ? strategy.wallet
+                : undefined;
+    }
+    catch (err) {
+        throw new Error(`Rendered recipe for instance "${inst.name}" (${inst.runtimeYamlPath}) is not parseable as ` +
+            `YAML: ${err instanceof Error ? err.message : String(err)}. Nothing was installed on the ` +
+            `wallet this run funded — a recipe that cannot be read cannot be confirmed to bind it.`);
+    }
+    const boundText = typeof bound === "string" ? bound.trim() : "";
+    if (boundText.toLowerCase() === wallet.trim().toLowerCase())
+        return;
+    throw new Error(`Instance "${inst.name}" would install against ${boundText === "" ? "no wallet" : `wallet ${boundText}`}, ` +
+        `but this deploy funded ${wallet}. Its recipe (${inst.runtimeYamlPath}) must bind ` +
+        `strategy.wallet to \${${inst.walletEnv}} — the token strategy.yaml declares for it — so ` +
+        `deploy can substitute the wallet it created. As written, the money this run moved and the ` +
+        `account the strategy would trade are two different wallets.`);
+}
 /**
  * True iff the instance ships a DSL exit block — `exit.dsl_preset`, or `exit.engine: dsl`.
  *
@@ -252,7 +397,25 @@ export function renderRuntimeYaml(inst, wallet, decisionModel) {
  * the taught path, so the same gate has to live here or the hole reopens on the direct-verb route.
  */
 export function instanceHasDslExit(inst) {
-    const parsed = parseYaml(readRuntimeYaml(inst));
+    return hasDslExitBlock(parseYaml(readRuntimeYaml(inst)));
+}
+/**
+ * True iff a PARSED recipe ships a DSL exit block — `exit.dsl_preset`, or `exit.engine: dsl`.
+ *
+ * Split from {@link instanceHasDslExit} so `senpi validate` can ask the same question of the config
+ * it has already parsed, rather than re-reading and re-parsing the file — and rather than growing a
+ * second predicate that could quietly disagree with this one about, say, `dsl_preset: true`. Same
+ * reason {@link isTruthyPreset} is exported for `runtime-descriptor.ts`.
+ *
+ * Takes `unknown` because its two callers hold different things: a `parseYaml` result here, and a
+ * schema-parsed `RuntimeConfig` in validate. Both are read the same way, and neither is trusted to
+ * have the shape — but note their INPUTS are not identical: validate resolves `${ENV}` before
+ * parsing (`recipe.ts`), deploy does not, so `exit: { engine: "${EXIT_ENGINE}" }` reads as `dsl`
+ * here only after substitution and as the literal token on the deploy path. Validate's reading is
+ * the more accurate one (that is what would install); the divergence is narrow and pre-existing,
+ * and this is the note that stops the next reader concluding the two can never disagree.
+ */
+export function hasDslExitBlock(parsed) {
     const exit = parsed?.exit;
     if (exit === null || typeof exit !== "object" || Array.isArray(exit))
         return false;
@@ -290,6 +453,10 @@ export function isTruthyPreset(value) {
  * The instances themselves, not their names: both refusals built from this name the re-check
  * command for each offender, and that command takes a directory the instance carries. A name is not
  * a path, and re-deriving the instance from its name at the refusal site is a lookup that can fail.
+ *
+ * `senpi validate` reports the same fault at static depth (`E_VALIDATE_NO_DSL_EXIT`, via
+ * {@link hasDslExitBlock} in `validate/package-gates-stage.ts`), so the re-check command these
+ * refusals emit agrees with them. Do not add a third reading of this fact.
  */
 export function instancesWithoutDslExit(pkg) {
     return pkg.instances.filter((inst) => !instanceHasDslExit(inst));
@@ -308,23 +475,43 @@ export function instancesWithoutDslExit(pkg) {
  *
  * The live-state twin of this is the observe step's all-disabled branch, which reads engine rows
  * rather than YAML — the runtime API can genuinely disable a scanner after install.
+ *
+ * `senpi validate` reports the same key at static depth (`E_VALIDATE_SCANNER_ENABLED`, via
+ * {@link scannerEnabledEntries}), one finding per offending entry, so an author never first learns
+ * about it from the money path.
  */
 export function scannersDeclaringEnabled(pkg) {
+    return pkg.instances.flatMap((inst) => scannerEnabledEntries(parseYaml(readRuntimeYaml(inst))).map((entry) => ({
+        instance: inst.name,
+        scanner: entry.scanner,
+        value: entry.value,
+        runtimeYamlPath: inst.runtimeYamlPath,
+    })));
+}
+/**
+ * Scanner entries in a PARSED recipe that declare an `enabled` key at all.
+ *
+ * The instance-free core of {@link scannersDeclaringEnabled}, so validate can ask it of a recipe
+ * that has no package around it yet — the mid-authoring case, where the fault is just as real and
+ * the author is exactly the person who should hear about it.
+ */
+export function scannerEnabledEntries(parsed) {
+    const scanners = parsed?.scanners;
+    if (!Array.isArray(scanners))
+        return [];
     const found = [];
-    for (const inst of pkg.instances) {
-        readScannerEntries(inst).forEach((scanner, index) => {
-            // Key presence, not truthiness: a bare `enabled:` (null) is the same unsupported key.
-            if (scanner === null || typeof scanner !== "object" || !("enabled" in scanner))
-                return;
-            const name = typeof scanner.name === "string" ? scanner.name : scanner.id;
-            found.push({
-                instance: inst.name,
-                scanner: typeof name === "string" && name.length > 0 ? name : `scanners[${index}]`,
-                value: scanner.enabled,
-                runtimeYamlPath: inst.runtimeYamlPath,
-            });
+    scanners.forEach((scanner, index) => {
+        // Key presence, not truthiness: a bare `enabled:` (null) is the same unsupported key.
+        if (scanner === null || typeof scanner !== "object" || !("enabled" in scanner))
+            return;
+        const entry = scanner;
+        const name = typeof entry.name === "string" ? entry.name : entry.id;
+        found.push({
+            scanner: typeof name === "string" && name.length > 0 ? name : `scanners[${index}]`,
+            index,
+            value: entry.enabled,
         });
-    }
+    });
     return found;
 }
 /**
@@ -334,17 +521,18 @@ export function scannersDeclaringEnabled(pkg) {
  */
 export function describeScannerEnabledOffense(entry) {
     return (`instance "${entry.instance}", scanner "${entry.scanner}": delete the line ` +
-        `\`${renderEnabledLine(entry.value)}\` from ${entry.runtimeYamlPath}`);
+        `\`${renderScannerEnabledLine(entry.value)}\` from ${entry.runtimeYamlPath}`);
 }
-/** The offending line as it appears in the YAML — a bare `enabled:` has no value to echo. */
-function renderEnabledLine(value) {
+/**
+ * The offending line as it appears in the YAML — a bare `enabled:` has no value to echo.
+ *
+ * Exported so validate's finding quotes the author's own line with the same rendering deploy's
+ * refusal uses. Two surfaces telling someone to delete "the line `enabled: false`" must agree on
+ * what that line says, or one of them is describing a line that is not in the file.
+ */
+export function renderScannerEnabledLine(value) {
     return value === null || value === undefined ? "enabled:" : `enabled: ${JSON.stringify(value)}`;
 }
-/** The instance's `scanners:` list, or []. */
-function readScannerEntries(inst) {
-    const parsed = parseYaml(readRuntimeYaml(inst));
-    return Array.isArray(parsed?.scanners) ? parsed.scanners : [];
-}
 /** True iff any action runs `decision_mode: llm` — those installs need a decision model. */
 export function runtimeUsesLlmDecisions(runtimeYamlText) {
     const parsed = parseYaml(runtimeYamlText);

package/dist/deploy/package.js.map

@@ -1 +1 @@
-{"version":3,"file":"package.js","sourceRoot":"","sources":["../../src/deploy/package.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,oFAAoF;AACpF,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,wFAAwF;AACxF,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAE/C,sGAAsG;AACtG,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AA6B7C,yGAAyG;AACzG,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,SAAS,GAAG,IAAI;SACnB,IAAI,EAAE;SACN,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;SAC9B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAAC,EAAU,EAAE,IAAY,EAAE,YAAoB;IAC9E,IAAI,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,iDAAiD;YACtE,IAAI,oBAAoB,CAAC,EAAE,CAAC,8DAA8D;YAC1F,0BAA0B,YAAY,yCAAyC;YAC/E,2FAA2F;YAC3F,mFAAmF,CACtF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;IACjC,IAAI,oBAAoB,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,iBAAiB,IAAI,iBAAiB,QAAQ,IAAI;YACvE,IAAI,QAAQ,CAAC,MAAM,qBAAqB,eAAe,kCAAkC;YACzF,2EAA2E;YAC3E,GAAG,eAAe,KAAK,YAAY,qDAAqD;YACxF,yFAAyF,CAC5F,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAkB;IACtD,OAAO,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,EAAU,EACV,UAAkB;IAElB,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;IACrE,OAAO;QACL,WAAW,EACT,aAAa,KAAK,SAAS,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE;YAC9D,CAAC,OAAO;gBACN,CAAC,CAAC,sCAAsC,OAAO,SAAS,KAAK,qBAAqB;oBAChF,8BAA8B;gBAChC,CAAC,CAAC,EAAE,CAAC;QACT,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU;KACrE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;IAChE,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAErC,SAAS,qBAAqB,CAC5B,YAA4C,EAC5C,GAAW,EACX,YAAoB;IAEpB,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,kEAAkE,YAAY,GAAG,CAAC,CAAC;QACrG,CAAC;QACD,0FAA0F;QAC1F,6EAA6E;QAC7E,+FAA+F;QAC/F,+FAA+F;QAC/F,0FAA0F;QAC1F,2FAA2F;QAC3F,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,iDAAiD;gBACnF,IAAI,oBAAoB,CAAC,IAAI,CAAC,2DAA2D;gBACzF,OAAO,eAAe,mEAAmE;gBACzF,uFAAuF,CAC1F,CAAC;QACJ,CAAC;QACD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,6BAA6B,eAAe,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO;YACL,IAAI;YACJ,eAAe;YACf,cAAc,EAAE,OAAO,CAAC,eAAe,CAAC;YACxC,SAAS;YACT,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC;SACpD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,GAAW;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,6DAA6D,GAAG,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,wFAAwF,MAAM,GAAG,CAClG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,uBAAuB,GAAG,oDAAoD;YAC5E,yFAAyF;YACzF,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,YAAY,GAAG,CAAC,CAAC;IAEpG,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACtE,MAAM,gBAAgB,GACpB,OAAO,QAAQ,CAAC,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC;IAEvF,kGAAkG;IAClG,2EAA2E;IAC3E,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC;IACpC,MAAM,OAAO,GACX,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QACjF,CAAC,CAAE,UAAsC;QACzC,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QACpD,CAAC,CAAE,QAAQ,CAAC,SAA4C;QACxD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GACb,YAAY,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,CAAC,qBAAqB,CAAC,YAAY,EAAE,GAAG,EAAE,YAAY,CAAC;QACxD,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,6FAA6F;IAC7F,0DAA0D;IAC1D,KAAK,MAAM,IAAI,IAAI,SAAS;QAAE,wBAAwB,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAEpF,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACpE,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CAAC,GAAkB,EAAE,IAAoB;IACjE,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1E,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAAC,IAAoB;IAClD,OAAO,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAoB,EACpB,MAAc,EACd,aAA8C;IAE9C,IAAI,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,aAAa;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,eAAe,IAAI;YAClE,WAAW,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,CAAC,CAAC,WAAW,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,6BAA6B,CACjH,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAmC,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,CAAC;IAC1B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,MAAM,KAAK,GAAG,IAA+B,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,2FAA2F;IAC3F,2FAA2F;IAC3F,gBAAgB;IAChB,OAAO,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,MAAM,KAAK,KAAK,CAAC;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,KAAK,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAkB;IACxD,OAAO,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC;AAaD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAkB;IACzD,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QACjC,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;YAClD,sFAAsF;YACtF,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC;gBAAE,OAAO;YACvF,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,OAAO,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,KAAK,GAAG;gBAClF,KAAK,EAAE,OAAO,CAAC,OAAO;gBACtB,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAAwB;IACpE,OAAO,CACL,aAAa,KAAK,CAAC,QAAQ,eAAe,KAAK,CAAC,OAAO,qBAAqB;QAC5E,KAAK,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,CAAC,eAAe,EAAE,CACtE,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,8CAA8C;AAC9C,SAAS,kBAAkB,CAAC,IAAoB;IAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAmC,CAAC;IAClF,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,QAA2C,CAAC,CAAC,CAAC,EAAE,CAAC;AACpG,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,uBAAuB,CAAC,eAAuB;IAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAmC,CAAC;IAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,OAA0C,CAAC,CAAC,CAAC,EAAE,CAAC;IACzG,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,KAAK,CAAC,CAAC;AACnE,CAAC"}
+{"version":3,"file":"package.js","sourceRoot":"","sources":["../../src/deploy/package.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,oFAAoF;AACpF,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,wFAAwF;AACxF,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAE/C;;;;;;;;;GASG;AACH,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,sBAAsB,CAAC,CAAC;AA6B7D,yGAAyG;AACzG,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,SAAS,GAAG,IAAI;SACnB,IAAI,EAAE;SACN,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;SAC9B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAAC,EAAU,EAAE,IAAY,EAAE,YAAoB;IAC9E,IAAI,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,iDAAiD;YACtE,IAAI,oBAAoB,CAAC,EAAE,CAAC,8DAA8D;YAC1F,0BAA0B,YAAY,yCAAyC;YAC/E,2FAA2F;YAC3F,mFAAmF,CACtF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;IACjC,IAAI,oBAAoB,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,iBAAiB,IAAI,iBAAiB,QAAQ,IAAI;YACvE,IAAI,QAAQ,CAAC,MAAM,qBAAqB,eAAe,kCAAkC;YACzF,2EAA2E;YAC3E,GAAG,eAAe,KAAK,YAAY,qDAAqD;YACxF,yFAAyF,CAC5F,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAkB;IACtD,OAAO,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,EAAU,EACV,UAAkB;IAElB,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;IACrE,OAAO;QACL,WAAW,EACT,aAAa,KAAK,SAAS,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE;YAC9D,CAAC,OAAO;gBACN,CAAC,CAAC,sCAAsC,OAAO,SAAS,KAAK,qBAAqB;oBAChF,8BAA8B;gBAChC,CAAC,CAAC,EAAE,CAAC;QACT,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU;KACrE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;IAChE,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAErC,SAAS,qBAAqB,CAC5B,YAA4C,EAC5C,GAAW,EACX,YAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,kEAAkE,YAAY,GAAG,CAAC,CAAC;QACrG,CAAC;QACD,8FAA8F;QAC9F,gGAAgG;QAChG,+FAA+F;QAC/F,2FAA2F;QAC3F,wFAAwF;QACxF,4FAA4F;QAC5F,gGAAgG;QAChG,gGAAgG;QAChG,2FAA2F;QAC3F,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,oCAAoC,IAAI,qBAAqB,YAAY,cAAc;gBACrF,sFAAsF;gBACtF,sFAAsF;gBACtF,+DAA+D,CAClE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,0FAA0F;QAC1F,6EAA6E;QAC7E,+FAA+F;QAC/F,+FAA+F;QAC/F,0FAA0F;QAC1F,2FAA2F;QAC3F,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,iDAAiD;gBACnF,IAAI,oBAAoB,CAAC,IAAI,CAAC,2DAA2D;gBACzF,OAAO,eAAe,mEAAmE;gBACzF,uFAAuF,CAC1F,CAAC;QACJ,CAAC;QACD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,6FAA6F;QAC7F,4FAA4F;QAC5F,+FAA+F;QAC/F,8FAA8F;QAC9F,kFAAkF;QAClF,8FAA8F;QAC9F,gGAAgG;QAChG,uEAAuE;QACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,kDAAkD;gBAC/E,IAAI,GAAG,iBAAiB,eAAe,wBAAwB,GAAG,kBAAkB;gBACpF,yFAAyF;gBACzF,iDAAiD,CACpD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,6BAA6B,eAAe,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO;YACL,IAAI;YACJ,eAAe;YACf,cAAc,EAAE,OAAO,CAAC,eAAe,CAAC;YACxC,SAAS;YACT,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC;SACpD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,GAAW;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,6DAA6D,GAAG,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,wFAAwF,MAAM,GAAG,CAClG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,uBAAuB,GAAG,oDAAoD;YAC5E,yFAAyF;YACzF,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,YAAY,GAAG,CAAC,CAAC;IAEpG,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACtE,MAAM,gBAAgB,GACpB,OAAO,QAAQ,CAAC,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC;IAEvF,kGAAkG;IAClG,2EAA2E;IAC3E,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC;IACpC,MAAM,OAAO,GACX,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QACjF,CAAC,CAAE,UAAsC;QACzC,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QACpD,CAAC,CAAE,QAAQ,CAAC,SAA4C;QACxD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GACb,YAAY,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,CAAC,qBAAqB,CAAC,YAAY,EAAE,GAAG,EAAE,YAAY,CAAC;QACxD,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,6FAA6F;IAC7F,0DAA0D;IAC1D,KAAK,MAAM,IAAI,IAAI,SAAS;QAAE,wBAAwB,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAEpF,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACpE,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CAAC,GAAkB,EAAE,IAAoB;IACjE,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1E,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAAC,IAAoB;IAClD,OAAO,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,qGAAqG;AACrG,SAAS,qBAAqB,CAAC,IAAoB;IACjD,OAAO,MAAM,IAAI,CAAC,SAAS,GAAG,CAAC;AACjC,CAAC;AAWD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAkB;IACvD,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QACjC,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAmC,CAAC;YAClF,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,CAAC;YAClC,wFAAwF;YACxF,4FAA4F;YAC5F,uFAAuF;YACvF,mDAAmD;YACnD,MAAM,MAAM,GACV,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC3E,CAAC,CAAE,QAAiC,CAAC,MAAM;gBAC3C,CAAC,CAAC,SAAS,CAAC;YAChB,QAAQ,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,QAAQ,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAoB,EACpB,MAAc,EACd,aAA8C;IAE9C,IAAI,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,aAAa;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,eAAe,IAAI;YAClE,WAAW,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,CAAC,CAAC,WAAW,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,6BAA6B,CACjH,CAAC;IACJ,CAAC;IACD,uBAAuB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,uBAAuB,CAAC,IAAoB,EAAE,QAAgB,EAAE,MAAc;IACrF,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAmC,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,CAAC;QAClC,KAAK;YACH,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC3E,CAAC,CAAE,QAAiC,CAAC,MAAM;gBAC3C,CAAC,CAAC,SAAS,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,eAAe,wBAAwB;YAC1F,SAAS,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,iCAAiC;YAC1F,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QAAE,OAAO;IACpE,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,CAAC,IAAI,2BAA2B,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,SAAS,EAAE,IAAI;QACzG,0BAA0B,MAAM,iBAAiB,IAAI,CAAC,eAAe,cAAc;QACnF,yBAAyB,IAAI,CAAC,SAAS,mDAAmD;QAC1F,4FAA4F;QAC5F,6DAA6D,CAChE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,OAAO,eAAe,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,MAAM,IAAI,GAAI,MAAqD,EAAE,IAAI,CAAC;IAC1E,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,MAAM,KAAK,GAAG,IAA+B,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,2FAA2F;IAC3F,2FAA2F;IAC3F,gBAAgB;IAChB,OAAO,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,MAAM,KAAK,KAAK,CAAC;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,KAAK,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAkB;IACxD,OAAO,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC;AAaD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAkB;IACzD,OAAO,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACpC,qBAAqB,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtE,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAe;IACnD,MAAM,QAAQ,GAAI,MAAqD,EAAE,QAAQ,CAAC;IAClF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAClC,sFAAsF;QACtF,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC;YAAE,OAAO;QACvF,MAAM,KAAK,GAAG,OAAkC,CAAC;QACjD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC;YACT,OAAO,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,KAAK,GAAG;YAClF,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,OAAO;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAAwB;IACpE,OAAO,CACL,aAAa,KAAK,CAAC,QAAQ,eAAe,KAAK,CAAC,OAAO,qBAAqB;QAC5E,KAAK,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,CAAC,eAAe,EAAE,CAC7E,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,uBAAuB,CAAC,eAAuB;IAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAmC,CAAC;IAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,OAA0C,CAAC,CAAC,CAAC,EAAE,CAAC;IACzG,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,KAAK,CAAC,CAAC;AACnE,CAAC"}

package/dist/deploy/proof-gate.d.ts

@@ -22,6 +22,10 @@ export interface InstanceDirCollision {
  * layer is the one that HAS the manifest and can see the collision, so it refuses here. Fail-closed
  * on principle and free in practice: of the 103 packages in the shipped catalog, 21 are
  * multi-instance and none shares a runtime directory.
+ *
+ * `senpi validate` calls this too, at static depth (`E_VALIDATE_INSTANCE_DIR_COLLISION`), scoped to
+ * the collision the validated recipe is IN — reporting a sibling pair the run never looked at would
+ * send an author to edit files outside the target.
  */
 export declare function collidingInstanceDirs(pkg: DeployPackage): InstanceDirCollision[];
 /**

package/dist/deploy/proof-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proof-gate.d.ts","sourceRoot":"","sources":["../../src/deploy/proof-gate.ts"],"names":[],"mappings":"AA6BA,OAAO,EAA8B,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAExG,OAAO,EAAmB,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAGxF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,CAGlE;AAED,mFAAmF;AACnF,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,aAAa,GAAG,oBAAoB,EAAE,CAQhF;AA6BD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,oBAAoB,EAAE,EAClC,GAAG,EAAE,aAAa,GACjB,MAAM,CAqCR;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAgED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,GAAG,iBAAiB,CAwD7F;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,GAAG,MAAM,CAalF"}
+{"version":3,"file":"proof-gate.d.ts","sourceRoot":"","sources":["../../src/deploy/proof-gate.ts"],"names":[],"mappings":"AA6BA,OAAO,EAA8B,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAExG,OAAO,EAAmB,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAGxF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,CAGlE;AAED,mFAAmF;AACnF,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,aAAa,GAAG,oBAAoB,EAAE,CAQhF;AA6BD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,oBAAoB,EAAE,EAClC,GAAG,EAAE,aAAa,GACjB,MAAM,CAqCR;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAgED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,GAAG,iBAAiB,CAwD7F;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,GAAG,MAAM,CAalF"}

package/dist/deploy/proof-gate.js

@@ -51,6 +51,10 @@ export function checkPackageProof(pkg) {
  * layer is the one that HAS the manifest and can see the collision, so it refuses here. Fail-closed
  * on principle and free in practice: of the 103 packages in the shipped catalog, 21 are
  * multi-instance and none shares a runtime directory.
+ *
+ * `senpi validate` calls this too, at static depth (`E_VALIDATE_INSTANCE_DIR_COLLISION`), scoped to
+ * the collision the validated recipe is IN — reporting a sibling pair the run never looked at would
+ * send an author to edit files outside the target.
  */
 export function collidingInstanceDirs(pkg) {
     const byDir = new Map();

package/dist/deploy/proof-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"proof-gate.js","sourceRoot":"","sources":["../../src/deploy/proof-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAwC,MAAM,sBAAsB,CAAC;AACxG,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,eAAe,EAA2C,MAAM,cAAc,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,UAAU,iBAAiB,CAAC,GAAkB;IAClD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACtF,OAAO,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;AAC7C,CAAC;AAQD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAkB;IACtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;SAC/C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAAC,IAAoB;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAmC,CAAC;QAClF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,QAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,KAAK,GAAG,QAAQ;aACnB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACf,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAC7C,CAAC,CAAE,OAA8B,CAAC,IAAI;YACtC,CAAC,CAAC,SAAS,CACd;aACA,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACtG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gCAAgC,CAC9C,UAAkC,EAClC,GAAkB;IAElB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC5C,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACzC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gCAAgC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,OAAO,UAAU,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,eAAe,GAAG,OAAO,EAAE,CAAC;QACpE,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,SAAS,CAAC,GAAG,mBAAmB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,MAAM,YAAY,GAChB,SAAS,CAAC,IAAI,GAAG,CAAC;QAChB,CAAC,CAAC,oEAAoE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAChG,8FAA8F;YAC9F,4FAA4F;YAC5F,+FAA+F;YAC/F,0FAA0F;YAC1F,+CAA+C;QACjD,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,CACL,qBAAqB,UAAU,CAAC,MAAM,qDAAqD;QAC3F,kEAAkE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;QACzF,2FAA2F;QAC3F,+FAA+F;QAC/F,6FAA6F;QAC7F,gGAAgG;QAChG,2EAA2E;QAC3E,iGAAiG;QACjG,iGAAiG;QACjG,oBAAoB;QACpB,kGAAkG;QAClG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,4BAA4B,YAAY,EAAE;QAC3E,gGAAgG;QAChG,+FAA+F;QAC/F,6CAA6C,CAC9C,CAAC;AACJ,CAAC;AAkBD,wFAAwF;AACxF,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,IAAc;IACtC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CACpB,MAAoB,EACpB,GAAkB;IAElB,MAAM,MAAM,GACV,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE;QACrD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/F,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,6FAA6F;QAC7F,iFAAiF;QACjF,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAkB;IAC3C,yFAAyF;IACzF,uCAAuC;IACvC,OAAO,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAC7B,CAAC,CAAC,8FAA8F;YAC5F,8DAA8D;QAClE,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,+FAA+F;AAC/F,SAAS,gBAAgB,CAAC,OAAiB;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,OAAO,CAAC,MAAM,GAAG,eAAe,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5G,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,GAAkB;IACxE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAExF,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;QAC1C,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,cAAc;YAClC,IAAI,EACF,OAAO,CAAC,MAAM,GAAG,CAAC;gBAChB,CAAC,CAAC,sDAAsD,gBAAgB,CAAC,OAAO,CAAC,EAAE;gBACnF,CAAC,CAAC,mDAAmD;YACzD,GAAG,EACD,6FAA6F;gBAC7F,iGAAiG;YACnG,GAAG,EACD,4FAA4F;gBAC5F,yCAAyC,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE;SAC/E,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;QAC9C,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,qBAAqB;YACzC,IAAI,EAAE,MAAM;gBACV,CAAC,CAAC,wCAAwC,MAAM,mBAAmB,OAAO,EAAE;gBAC5E,CAAC,CAAC,yDAAyD,OAAO,eAAe;YACnF,GAAG,EACD,yFAAyF;gBACzF,2FAA2F;gBAC3F,2FAA2F;gBAC3F,wEAAwE;YAC1E,GAAG,EACD,+FAA+F;gBAC/F,iFAAiF;gBACjF,KAAK,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE;SAC3C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,aAAa,CAAC,OAAO;QAC3B,IAAI,EAAE,+CAA+C,KAAK,EAAE;QAC5D,6FAA6F;QAC7F,6FAA6F;QAC7F,6FAA6F;QAC7F,4EAA4E;QAC5E,GAAG,EACD,yFAAyF;YACzF,0FAA0F;YAC1F,wFAAwF;YACxF,6FAA6F;YAC7F,uDAAuD;QACzD,GAAG,EAAE,yDAAyD,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE;KAClG,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,GAAkB;IACxE,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7C,OAAO,CACL,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,OAAO;QACpC,QAAQ,KAAK,CAAC,GAAG,MAAM;QACvB,+FAA+F;QAC/F,+FAA+F;QAC/F,2FAA2F;QAC3F,iGAAiG;QACjG,iGAAiG;QACjG,oBAAoB;QACpB,SAAS,KAAK,CAAC,GAAG,EAAE,CACrB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"proof-gate.js","sourceRoot":"","sources":["../../src/deploy/proof-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAwC,MAAM,sBAAsB,CAAC;AACxG,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,eAAe,EAA2C,MAAM,cAAc,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,UAAU,iBAAiB,CAAC,GAAkB;IAClD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACtF,OAAO,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;AAC7C,CAAC;AAQD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAkB;IACtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;SAC/C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAAC,IAAoB;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAmC,CAAC;QAClF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,QAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,KAAK,GAAG,QAAQ;aACnB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACf,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAC7C,CAAC,CAAE,OAA8B,CAAC,IAAI;YACtC,CAAC,CAAC,SAAS,CACd;aACA,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACtG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gCAAgC,CAC9C,UAAkC,EAClC,GAAkB;IAElB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC5C,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACzC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gCAAgC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,OAAO,UAAU,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,eAAe,GAAG,OAAO,EAAE,CAAC;QACpE,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,SAAS,CAAC,GAAG,mBAAmB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,MAAM,YAAY,GAChB,SAAS,CAAC,IAAI,GAAG,CAAC;QAChB,CAAC,CAAC,oEAAoE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAChG,8FAA8F;YAC9F,4FAA4F;YAC5F,+FAA+F;YAC/F,0FAA0F;YAC1F,+CAA+C;QACjD,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,CACL,qBAAqB,UAAU,CAAC,MAAM,qDAAqD;QAC3F,kEAAkE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;QACzF,2FAA2F;QAC3F,+FAA+F;QAC/F,6FAA6F;QAC7F,gGAAgG;QAChG,2EAA2E;QAC3E,iGAAiG;QACjG,iGAAiG;QACjG,oBAAoB;QACpB,kGAAkG;QAClG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,4BAA4B,YAAY,EAAE;QAC3E,gGAAgG;QAChG,+FAA+F;QAC/F,6CAA6C,CAC9C,CAAC;AACJ,CAAC;AAkBD,wFAAwF;AACxF,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,IAAc;IACtC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CACpB,MAAoB,EACpB,GAAkB;IAElB,MAAM,MAAM,GACV,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE;QACrD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/F,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,6FAA6F;QAC7F,iFAAiF;QACjF,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAkB;IAC3C,yFAAyF;IACzF,uCAAuC;IACvC,OAAO,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAC7B,CAAC,CAAC,8FAA8F;YAC5F,8DAA8D;QAClE,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,+FAA+F;AAC/F,SAAS,gBAAgB,CAAC,OAAiB;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,OAAO,CAAC,MAAM,GAAG,eAAe,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5G,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,GAAkB;IACxE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAExF,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;QAC1C,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,cAAc;YAClC,IAAI,EACF,OAAO,CAAC,MAAM,GAAG,CAAC;gBAChB,CAAC,CAAC,sDAAsD,gBAAgB,CAAC,OAAO,CAAC,EAAE;gBACnF,CAAC,CAAC,mDAAmD;YACzD,GAAG,EACD,6FAA6F;gBAC7F,iGAAiG;YACnG,GAAG,EACD,4FAA4F;gBAC5F,yCAAyC,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE;SAC/E,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;QAC9C,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,qBAAqB;YACzC,IAAI,EAAE,MAAM;gBACV,CAAC,CAAC,wCAAwC,MAAM,mBAAmB,OAAO,EAAE;gBAC5E,CAAC,CAAC,yDAAyD,OAAO,eAAe;YACnF,GAAG,EACD,yFAAyF;gBACzF,2FAA2F;gBAC3F,2FAA2F;gBAC3F,wEAAwE;YAC1E,GAAG,EACD,+FAA+F;gBAC/F,iFAAiF;gBACjF,KAAK,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE;SAC3C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,aAAa,CAAC,OAAO;QAC3B,IAAI,EAAE,+CAA+C,KAAK,EAAE;QAC5D,6FAA6F;QAC7F,6FAA6F;QAC7F,6FAA6F;QAC7F,4EAA4E;QAC5E,GAAG,EACD,yFAAyF;YACzF,0FAA0F;YAC1F,wFAAwF;YACxF,6FAA6F;YAC7F,uDAAuD;QACzD,GAAG,EAAE,yDAAyD,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE;KAClG,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,GAAkB;IACxE,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7C,OAAO,CACL,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,OAAO;QACpC,QAAQ,KAAK,CAAC,GAAG,MAAM;QACvB,+FAA+F;QAC/F,+FAA+F;QAC/F,2FAA2F;QAC3F,iGAAiG;QACjG,iGAAiG;QACjG,oBAAoB;QACpB,SAAS,KAAK,CAAC,GAAG,EAAE,CACrB,CAAC;AACJ,CAAC"}

package/dist/deploy/recheck-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recheck-commands.d.ts","sourceRoot":"","sources":["../../src/deploy/recheck-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,yFAAyF;AACzF,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,2FAA2F;AAC3F,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAG3F;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,yGAC2E,CAAC"}
+{"version":3,"file":"recheck-commands.d.ts","sourceRoot":"","sources":["../../src/deploy/recheck-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAqBH;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,yFAAyF;AACzF,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,2FAA2F;AAC3F,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAG3F;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,yGAC2E,CAAC"}

package/dist/deploy/recheck-commands.js

@@ -15,6 +15,24 @@
  * would be imported back by the other — the same cycle constraint that gave `error-text.ts` a
  * module of its own.
  */
+/**
+ * A path as a single POSIX shell word.
+ *
+ * Wrapping in quotes is not the same as quoting. A directory is package-controlled input — the
+ * manifest chooses it, an instance's `runtime:` can point anywhere, and a directory name may
+ * legally contain `'` — so a bare `'${dir}'` lets the path CLOSE the quote and everything after it
+ * parses as further commands. These strings are printed under "fix" as something the reader pastes,
+ * which makes the refusal itself the delivery vehicle: the operator runs the line we told them to
+ * run, on the box holding the trading funds.
+ *
+ * The rule is the standard one — end the quote, emit an escaped `'`, reopen — so `a'b` becomes
+ * `'a'\''b'`. Nothing inside single quotes is special to the shell, so no other character needs a
+ * case. Every path this module emits goes through it; the wrapping quotes stay because a real
+ * workspace path has spaces in it, which is what they were always for.
+ */
+function shellQuote(value) {
+    return `'${value.split("'").join(`'\\''`)}'`;
+}
 /**
  * `openclaw senpi validate '<dir>'` — the route that records a proof.
  *
@@ -25,15 +43,15 @@
  * gate exists to survive), and never a `<placeholder>`, which an agent pastes literally.
  */
 export function validateCommand(dir) {
-    return `openclaw senpi validate '${dir}'`;
+    return `openclaw senpi validate ${shellQuote(dir)}`;
 }
 /** The skills package validator: the author-side checks over a package, and no proof. */
 export function deployPyValidateCommand(packageDir) {
-    return `python3 senpi-strategy-ops/scripts/deploy.py validate '${packageDir}'`;
+    return `python3 senpi-strategy-ops/scripts/deploy.py validate ${shellQuote(packageDir)}`;
 }
 /** The skills universe validator: the live-instrument half of the checks, and no proof. */
 export function validateUniversePyCommand(packageDir) {
-    return `python3 senpi-strategy-ops/scripts/validate_universe.py '${packageDir}'`;
+    return `python3 senpi-strategy-ops/scripts/validate_universe.py ${shellQuote(packageDir)}`;
 }
 /**
  * Both routes as an indented block, one command per line — the form every refusal below the "fix"

package/dist/deploy/recheck-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"recheck-commands.js","sourceRoot":"","sources":["../../src/deploy/recheck-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,4BAA4B,GAAG,GAAG,CAAC;AAC5C,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,OAAO,0DAA0D,UAAU,GAAG,CAAC;AACjF,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,yBAAyB,CAAC,UAAkB;IAC1D,OAAO,4DAA4D,UAAU,GAAG,CAAC;AACnF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,YAA+B,EAAE,aAAqB;IACjF,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAC3B,sGAAsG,CAAC"}
+{"version":3,"file":"recheck-commands.js","sourceRoot":"","sources":["../../src/deploy/recheck-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;;;;;;;;GAcG;AACH,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;AAC/C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,2BAA2B,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,OAAO,yDAAyD,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,yBAAyB,CAAC,UAAkB;IAC1D,OAAO,2DAA2D,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,YAA+B,EAAE,aAAqB;IACjF,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAC3B,sGAAsG,CAAC"}

package/dist/deploy/register.d.ts

@@ -70,6 +70,8 @@ export interface DeployGatewayContext {
     getScannerRows(runtimeId: string): Promise<ScannerRowLite[] | null>;
     /** H4: does this runtime id have a LIVE handle (not merely a registry row)? */
     runtimeIsLive(id: string): Promise<boolean>;
+    /** = the gateway's in-process install fence; see `installsInFlight` in index.ts. */
+    installPendingOnWallet(wallet: string): Promise<boolean>;
     logger: {
         info(line: string): void;
     };

package/dist/deploy/register.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../src/deploy/register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAmCtD,OAAO,EAA8B,KAAK,iBAAiB,EAAE,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC5G,OAAO,EAAuB,KAAK,mBAAmB,EAAwC,MAAM,UAAU,CAAC;AAE/G;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACrF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAE5D,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,qBAAqB,CACnB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,CAAC,GAAG,EAAE;QACb,OAAO,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;QAC/C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAC1B,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,gBAAgB,GAAG,eAAe,CAAA;KAAE,GACpD,IAAI,CAAC;CACT;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,mBAAmB,CAAC;IAChC;;;;;;;;OAQG;IACH,eAAe,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxE,2BAA2B;IAC3B,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC/E,kFAAkF;IAClF,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IAC7E,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IACrE,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,CAAC;IACpE,+EAA+E;IAC/E,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,EAAE;QAAE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACtC;AAibD,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjH,QAAQ,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAoWD,mDAAmD;AACnD,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,oBAAoB,GAAG,IAAI,CAWlG"}
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../src/deploy/register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAoCtD,OAAO,EAA8B,KAAK,iBAAiB,EAAE,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC5G,OAAO,EAAuB,KAAK,mBAAmB,EAAwC,MAAM,UAAU,CAAC;AAE/G;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACrF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAE5D,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,qBAAqB,CACnB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,CAAC,GAAG,EAAE;QACb,OAAO,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;QAC/C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAC1B,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,gBAAgB,GAAG,eAAe,CAAA;KAAE,GACpD,IAAI,CAAC;CACT;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,mBAAmB,CAAC;IAChC;;;;;;;;OAQG;IACH,eAAe,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxE,2BAA2B;IAC3B,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC/E,kFAAkF;IAClF,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IAC7E,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IACrE,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,CAAC;IACpE,+EAA+E;IAC/E,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,oFAAoF;IACpF,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,EAAE;QAAE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACtC;AA2bD,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjH,QAAQ,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA4WD,mDAAmD;AACnD,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,oBAAoB,GAAG,IAAI,CAWlG"}

package/dist/deploy/register.js

@@ -5,8 +5,8 @@ import path from "node:path";
 import { withSpan } from "../telemetry/tracing.js";
 import { recordDeployRollback, recordDeployStep } from "../telemetry/metrics.js";
 import { isClosing, isDead } from "../senpi/strategy-status.js";
-import { DEFAULT_MAX_WAIT_SEC, DEFAULT_TICK_WAIT_SEC, isWaitInRange, jobCapMs, MAX_WAIT_SEC, MIN_WAIT_SEC, } from "./deadlines.js";
-import { extractTaxonomyCode } from "./taxonomy.js";
+import { DEFAULT_MAX_WAIT_SEC, DEFAULT_TICK_WAIT_SEC, isWaitInRange, jobCapMs, MAX_WAIT_SEC, MIN_WAIT_SEC, withInstallDeadline, } from "./deadlines.js";
+import { extractTaxonomyCode, firstIndeterminateCode } from "./taxonomy.js";
 import { runDeploy } from "./orchestrator.js";
 import { MCP_CALL_TIMEOUT_MS } from "./job.js";
 /** The real clock for every orchestrator poll loop (create-ACTIVE and observe-tick alike). */
@@ -335,16 +335,24 @@ function buildDeployDeps(ctx, client, job) {
         createCustomStrategy: (params) => client.createCustomStrategy(params, callDeadline()),
         getPortfolio: () => client.getPortfolio({ forceFetch: true, ...callDeadline() }),
         listLiveInstruments: () => client.listInstrumentNames(callDeadline()),
-        installRuntime: (params) => ctx.installRuntime({
+        // The one dep that is NOT an MCP call: `installRuntimeCore` is in-process work (state hydrate,
+        // runtime construction, scanner children) and takes no signal, so there is nothing to abort.
+        // What is bounded is the WAIT — without it a wedged install outlived the job's own accounting:
+        // the watchdog force-terminated, the single-flight slot came back, and a re-run reinstalled on
+        // the same wallet while the first install was still in flight. The wait ends here; the wallet
+        // stays fenced for as long as the install actually runs (`index.ts` installsInFlight), and the
+        // unknown outcome is reported rather than unwound (`E_INSTALL_INDETERMINATE`).
+        installRuntime: (params) => withInstallDeadline(ctx.installRuntime({
             runtimeYamlContent: params.runtimeYamlContent,
             runtimeYamlDir: params.runtimeYamlDir,
             id: params.id,
-        }),
+        })),
         deleteRuntime: (id) => ctx.deleteRuntime(id),
         registryFindByWallet: (wallet) => ctx.registryFindByWallet(wallet),
         registryFindById: (id) => ctx.registryFindById(id),
         getScannerRows: (runtimeId) => ctx.getScannerRows(runtimeId),
         runtimeIsLive: (id) => ctx.runtimeIsLive(id),
+        installPendingOnWallet: (wallet) => ctx.installPendingOnWallet(wallet),
         // D-6 rollback surfaces, both deadline-bounded. The flat check especially: it runs INSIDE the
         // rollback, so a hung one costs the `[E_ROLLBACK_INCOMPLETE]` report itself — the job cap would
         // force-terminate with a generic `instances: []` terminal and the stranded funded wallet would
@@ -580,8 +588,8 @@ async function startBody(ctx, params, respond, refuse, span) {
     // not resume as a silent adoption. `funded` is still re-read live on this run.
     const priorRequested = ctx.controller.priorRequestedFunding(pkg.id);
     // D-5: the job's wall-clock cap. Sized to what the run can legitimately spend — every instance
-    // may burn a full ACTIVE poll plus a full tick-wait — plus 300s of headroom for the install and
-    // the un-timed steps. Past it the watchdog stops the run and takes the slot back.
+    // may burn a full ACTIVE poll, a full tick-wait, and one bounded install — plus 300s of headroom
+    // for the un-timed steps. Past it the watchdog stops the run and takes the slot back.
     const capMs = jobCapMs(maxWaitSec, tickWaitSec, pkg.instances.length);
     // L5: the package attribute is the BASENAME, never the absolute path — a user's home directory
     // is not a span dimension, and the basename is what identifies the package anyway.
@@ -617,6 +625,15 @@ async function startBody(ctx, params, respond, refuse, span) {
             const code = extractTaxonomyCode(firstRefusal?.detail);
             if (code)
                 span.setAttribute("senpi.deploy.refusal.code", code);
+            // Its OWN attribute, never `refusal.code`: this outcome rides a `failed` step, not a
+            // refusal, and folding it into the refusal dimension would corrupt the one signal the
+            // CLI's exit-code contract is read from. It needs a signal of its own because the deploy
+            // deliberately does NOT roll back here — so `senpi.deploy.rollback.count`, until now the
+            // only fleet-level tell that a deploy left a funded wallet behind, stays silent — and
+            // `outcome: failed` alone cannot tell a stranded wallet from an ENOSPC.
+            const indeterminate = firstIndeterminateCode(report);
+            if (indeterminate)
+                span.setAttribute("senpi.deploy.indeterminate.code", indeterminate);
             // The SOFT calculated-minimum tier rides ATTRIBUTES, deliberately never
             // `senpi.deploy.refusal.code` and never a span error: it warned, the deploy proceeded, and
             // a dashboard that counted it as a refusal would report healthy deploys as failures. What