first attempt at fixing over-allocation bug; fix npm audit block for deploy

api/tests/allocator.test.ts

@@ -3,6 +3,8 @@ import { describe, it, expect, beforeEach, afterAll } from "vitest";
 import { prisma, resetUser, ensureUser, U, cid, pid, closePrisma } from "./helpers";
 import { allocateIncome, buildPlanStates } from "../src/allocator";
 
+const DAY_MS = 86_400_000;
+
 describe("allocator — new funding system", () => {
   beforeEach(async () => {
     await resetUser(U);
@@ -228,5 +230,58 @@ describe("allocator — new funding system", () => {
       const sum = variable.reduce((s, a: any) => s + (a.amountCents ?? 0), 0);
       expect(sum).toBe(0);
     });
+
+    it("does not over-attribute crisis available-budget pulls to the triggering income event", async () => {
+      const c1 = cid("bucket");
+      await prisma.variableCategory.create({
+        data: { id: c1, userId: U, name: "Bucket", percent: 100, priority: 1, isSavings: false, balanceCents: 0n },
+      });
+
+      const planId = pid("crisis");
+      await prisma.fixedPlan.create({
+        data: {
+          id: planId,
+          userId: U,
+          name: "Urgent Rent",
+          cycleStart: new Date(Date.now() - DAY_MS).toISOString(),
+          dueOn: new Date(Date.now() + 3 * DAY_MS).toISOString(),
+          totalCents: 40000n,
+          fundedCents: 0n,
+          currentFundedCents: 0n,
+          lastFundingDate: null,
+          priority: 1,
+          fundingMode: "auto-on-deposit",
+        },
+      });
+
+      // Seed existing available budget from prior income that was not fully allocated.
+      await prisma.incomeEvent.create({
+        data: {
+          id: `seed-${Date.now()}`,
+          userId: U,
+          postedAt: new Date(Date.now() - 10 * DAY_MS),
+          amountCents: 50000n,
+          isScheduledIncome: false,
+        },
+      });
+
+      const incomeId = `inc-${Date.now()}`;
+      const result = await allocateIncome(prisma as any, U, 1000, new Date().toISOString(), incomeId);
+      expect(result.crisis.pulledFromAvailableCents).toBeGreaterThan(0);
+
+      const linkedToIncome = await prisma.allocation.findMany({
+        where: { userId: U, incomeId },
+        select: { amountCents: true, kind: true },
+      });
+      const linkedSum = linkedToIncome.reduce((sum, row) => sum + Number(row.amountCents ?? 0n), 0);
+      expect(linkedSum).toBeLessThanOrEqual(1000);
+
+      const unlinkedFixed = await prisma.allocation.findMany({
+        where: { userId: U, incomeId: null, kind: "fixed" },
+        select: { amountCents: true },
+      });
+      const unlinkedFixedSum = unlinkedFixed.reduce((sum, row) => sum + Number(row.amountCents ?? 0n), 0);
+      expect(unlinkedFixedSum).toBeGreaterThan(0);
+    });
   });
 });