Split predict redeem by authority (owner vs permissionless)

[emmazzz]

Summary

• expiry_market::redeem carried three different authority models selected by control flow — the liquidated and settled branches were permissionless, the live branch was owner-only — with the owner check buried inside redeem_live_internal. The public signature gave no hint that the function was sometimes keeper-callable.
• Make redeem owner-gated at the entry (hoist manager.assert_owner); it handles the owner's own live / settled / liquidated closes.
• Add redeem_permissionless for keeper-driven finalization of any manager's settled or liquidated order. It pays the manager (never the caller) and aborts on a live order.
• Extract lifecycle dispatch into a private redeem_internal; drop the now-redundant owner check in redeem_live_internal.
• Add the ENotPermissionlesslyRedeemable abort code.

Key decisions

• 2-way split (redeem owner / redeem_permissionless keeper) rather than three lifecycle entrypoints: authority now maps to the function name, and no single function contains branches with differing authority. The owner path still handles the owner's own settled/liquidated orders for convenience.
• redeem_permissionless drops close_quantity / pyth / clock — it is always a full close and runs no liquidation pass, finalizing only already-terminal (settled or tombstoned) orders. The keeper flow is liquidate (to tombstone underwater orders) then redeem_permissionless (to clear them).
• Based off main independent of the live-pricing-context PR (per request). The two edit expiry_market.move and will need a rebase when the first merges.

Test plan

• sui move test --path packages/predict --gas-limit 100000000000 — 449 passed, 0 failed
• redeem_permissionless_settles_for_non_owner — non-owner finalizes a settled order; position cleared, returned id matches
• redeem_permissionless_live_order_aborts — ENotPermissionlesslyRedeemable on a live order
• redeem_by_non_owner_aborts — predict_manager::ENotOwner on the owner-gated redeem
• Follow-up: extract a shared expiry-market flow fixture so redeem tests don't live in plp_rebate_flow_tests.move

🤖 Generated with Claude Code