@wowok/agent-mcp 2.7.0 → 2.7.2

package/dist/knowledge/resource-risk.js

@@ -1,157 +1 @@
-import { MAX_TAGS_COUNT } from "@wowok/wowok";
-const R_R_01 = {
-    rule: {
-        id: "R-RESOURCE-01",
-        level: "LOW",
-        category: "permission",
-        title: "Resource has no Permission — relies entirely on caller-side gating",
-        description: "Resource does not associate with a Permission object. All functions are " +
-            "public(package) (new/destroy/transfer/tag_set/tag_unset) or public " +
-            "(add_object_tags/remove_object_tags/remove_object) — there is no on-chain permission " +
-            "check. Access control is delegated to the calling module (Personal, Entity). A " +
-            "caller that forgets to enforce its own permission check would let any address mutate " +
-            "tags.",
-        affected_stakeholders: ["owner", "caller"],
-        scenario: "Personal/Entity forgets to gate add_object_tags behind its own permission check",
-        mitigation: "Callers (Personal, Entity) MUST enforce their own permission checks before invoking " +
-            "Resource functions. Audit the call sites in Personal/Entity to confirm gating.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.expects_resource_permission)
-            return null;
-        return { ...R_R_01.rule, evidence: "expects_resource_permission=true (Resource has none)" };
-    },
-};
-const R_R_02 = {
-    rule: {
-        id: "R-RESOURCE-02",
-        level: "MEDIUM",
-        category: "semantic",
-        title: "Tag mutations emit no events — external indexers must poll",
-        description: "add_object_tags / remove_object_tags / remove_object do not emit events " +
-            "(resource.move:89-145). External indexers cannot rely on an event stream to track " +
-            "tag changes; they must poll the ParentTable field. This complicates real-time " +
-            "notification and consistency.",
-        affected_stakeholders: ["owner", "caller"],
-        scenario: "Indexer expects a TagAddedEvent but none is emitted; UI fails to refresh",
-        mitigation: "External indexers should poll Resource.table on a cadence. Do not build critical UX " +
-            "on tag event streams until events are added in a future version.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.expects_tag_events)
-            return null;
-        return { ...R_R_02.rule, evidence: "expects_tag_events=true (no events emitted)" };
-    },
-};
-const R_R_03 = {
-    rule: {
-        id: "R-RESOURCE-03",
-        level: "LOW",
-        category: "structural",
-        title: `MAX_TAGS_COUNT=${MAX_TAGS_COUNT} permissive — storage cost`,
-        description: `A single object's AddressTag.tags vector may hold up to MAX_TAGS_COUNT=${MAX_TAGS_COUNT} ` +
-            `entries (resource.move:9). The limit aborts with E_TAGS_COUNT_EXCEEDED (1) only at the ` +
-            `boundary. 100 tags per object is generous; loading all tags on every read increases ` +
-            `gas and storage cost.`,
-        affected_stakeholders: ["owner"],
-        scenario: "Caller adds 100 tags to a single object",
-        mitigation: "Business layer should self-limit tag count well below 100. For heavy tagging, " +
-            "shard across multiple Resource objects or store bulk tags off-chain.",
-        related_move_error: "E_TAGS_COUNT_EXCEEDED (1)",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (ctx.tags_count === undefined)
-            return null;
-        if (ctx.tags_count < MAX_TAGS_COUNT)
-            return null;
-        return { ...R_R_03.rule, evidence: `tags_count=${ctx.tags_count}, limit=${MAX_TAGS_COUNT}` };
-    },
-};
-const R_R_04 = {
-    rule: {
-        id: "R-RESOURCE-04",
-        level: "LOW",
-        category: "lifecycle",
-        title: "destroy is irreversible — no recovery mechanism",
-        description: "Resource.destroy(resource) (resource.move:38) deletes the object and its ParentTable " +
-            "in place. There is no archive, no event, and no rollback. Once destroyed, the object " +
-            "ID is permanently invalid and all tags are lost.",
-        affected_stakeholders: ["owner"],
-        scenario: "Caller destroys a Resource that is still referenced by Personal/Entity",
-        mitigation: "Confirm no live references exist before calling destroy. SDK should refuse to destroy " +
-            "a Resource whose owner address is still referenced by Personal.mark or Entity.resource.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.is_destroy)
-            return null;
-        return { ...R_R_04.rule, evidence: "is_destroy=true (irreversible)" };
-    },
-};
-const R_R_05 = {
-    rule: {
-        id: "R-RESOURCE-05",
-        level: "MEDIUM",
-        category: "semantic",
-        title: "tag_set returns bool — SDK may ignore the 'already exists' signal",
-        description: "tag_set(resource, object, name) returns bool: true if a new tag was added, false if " +
-            "the tag already existed (resource.move:47-58). If the SDK ignores the return value, " +
-            "callers cannot distinguish 'newly added' from 'duplicate silently skipped'. This " +
-            "masks intent and complicates idempotency reasoning.",
-        affected_stakeholders: ["caller"],
-        scenario: "SDK treats tag_set as void; caller assumes tag was added when it was a duplicate",
-        mitigation: "SDK should expose tag_set's bool return value to the caller. UI should show 'tag " +
-            "already existed' when false is returned.",
-        auto_fixable: true,
-    },
-    check: (ctx) => {
-        if (!ctx.tag_set_return_ignored)
-            return null;
-        return { ...R_R_05.rule, evidence: "tag_set_return_ignored=true (duplicate not surfaced)" };
-    },
-};
-const R_R_06 = {
-    rule: {
-        id: "R-RESOURCE-06",
-        level: "LOW",
-        category: "semantic",
-        title: "Commented-out switch function (resource.move:71-86) — feature may be intended",
-        description: "resource.move:71-86 contains a switch function that is fully commented out. The " +
-            "intended behavior is unclear — it may be a planned feature (e.g. bulk tag operations) " +
-            "that was disabled. Referencing it as if it were live would silently fail.",
-        affected_stakeholders: ["system"],
-        scenario: "Developer reads the commented switch and assumes it is callable",
-        mitigation: "Confirm with the package maintainers whether the switch should be enabled or removed. " +
-            "Do not reference it in SDK or MCP code.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.references_dead_switch)
-            return null;
-        return { ...R_R_06.rule, evidence: "references_dead_switch=true (commented out in Move)" };
-    },
-};
-export const RESOURCE_RISK_RULES = [
-    R_R_01,
-    R_R_02,
-    R_R_03,
-    R_R_04,
-    R_R_05,
-    R_R_06,
-];
-export const RESOURCE_RISK_VERSION = "1.0.0";
-export function checkResourceRisks(ctx) {
-    const risks = [];
-    for (const rule of RESOURCE_RISK_RULES) {
-        const r = rule.check(ctx);
-        if (r)
-            risks.push(r);
-    }
-    return risks;
-}
-export function getResourceRiskById(id) {
-    return RESOURCE_RISK_RULES.find(r => r.rule.id === id)?.rule;
-}
+import{MAX_TAGS_COUNT}from'@wowok/wowok';const R_R_01={'rule':{'id':'R-RESOURCE-01','level':'LOW','category':'permission','title':'Resource\x20has\x20no\x20Permission\x20—\x20relies\x20entirely\x20on\x20caller-side\x20gating','description':'Resource\x20does\x20not\x20associate\x20with\x20a\x20Permission\x20object.\x20All\x20functions\x20are\x20'+'public(package)\x20(new/destroy/transfer/tag_set/tag_unset)\x20or\x20public\x20'+'(add_object_tags/remove_object_tags/remove_object)\x20—\x20there\x20is\x20no\x20on-chain\x20permission\x20'+'check.\x20Access\x20control\x20is\x20delegated\x20to\x20the\x20calling\x20module\x20(Personal,\x20Entity).\x20A\x20'+'caller\x20that\x20forgets\x20to\x20enforce\x20its\x20own\x20permission\x20check\x20would\x20let\x20any\x20address\x20mutate\x20'+'tags.','affected_stakeholders':['owner','caller'],'scenario':'Personal/Entity\x20forgets\x20to\x20gate\x20add_object_tags\x20behind\x20its\x20own\x20permission\x20check','mitigation':'Callers\x20(Personal,\x20Entity)\x20MUST\x20enforce\x20their\x20own\x20permission\x20checks\x20before\x20invoking\x20'+'Resource\x20functions.\x20Audit\x20the\x20call\x20sites\x20in\x20Personal/Entity\x20to\x20confirm\x20gating.','auto_fixable':![]},'check':a=>{if(!a['expects_resource_permission'])return null;return{...R_R_01['rule'],'evidence':'expects_resource_permission=true\x20(Resource\x20has\x20none)'};}},R_R_02={'rule':{'id':'R-RESOURCE-02','level':'MEDIUM','category':'semantic','title':'Tag\x20mutations\x20emit\x20no\x20events\x20—\x20external\x20indexers\x20must\x20poll','description':'add_object_tags\x20/\x20remove_object_tags\x20/\x20remove_object\x20do\x20not\x20emit\x20events\x20'+'(resource.move:89-145).\x20External\x20indexers\x20cannot\x20rely\x20on\x20an\x20event\x20stream\x20to\x20track\x20'+'tag\x20changes;\x20they\x20must\x20poll\x20the\x20ParentTable\x20field.\x20This\x20complicates\x20real-time\x20'+'notification\x20and\x20consistency.','affected_stakeholders':['owner','caller'],'scenario':'Indexer\x20expects\x20a\x20TagAddedEvent\x20but\x20none\x20is\x20emitted;\x20UI\x20fails\x20to\x20refresh','mitigation':'External\x20indexers\x20should\x20poll\x20Resource.table\x20on\x20a\x20cadence.\x20Do\x20not\x20build\x20critical\x20UX\x20'+'on\x20tag\x20event\x20streams\x20until\x20events\x20are\x20added\x20in\x20a\x20future\x20version.','auto_fixable':![]},'check':a=>{if(!a['expects_tag_events'])return null;return{...R_R_02['rule'],'evidence':'expects_tag_events=true\x20(no\x20events\x20emitted)'};}},R_R_03={'rule':{'id':'R-RESOURCE-03','level':'LOW','category':'structural','title':'MAX_TAGS_COUNT='+MAX_TAGS_COUNT+'\x20permissive\x20—\x20storage\x20cost','description':'A\x20single\x20object\x27s\x20AddressTag.tags\x20vector\x20may\x20hold\x20up\x20to\x20MAX_TAGS_COUNT='+MAX_TAGS_COUNT+'\x20'+'entries\x20(resource.move:9).\x20The\x20limit\x20aborts\x20with\x20E_TAGS_COUNT_EXCEEDED\x20(1)\x20only\x20at\x20the\x20'+'boundary.\x20100\x20tags\x20per\x20object\x20is\x20generous;\x20loading\x20all\x20tags\x20on\x20every\x20read\x20increases\x20'+'gas\x20and\x20storage\x20cost.','affected_stakeholders':['owner'],'scenario':'Caller\x20adds\x20100\x20tags\x20to\x20a\x20single\x20object','mitigation':'Business\x20layer\x20should\x20self-limit\x20tag\x20count\x20well\x20below\x20100.\x20For\x20heavy\x20tagging,\x20'+'shard\x20across\x20multiple\x20Resource\x20objects\x20or\x20store\x20bulk\x20tags\x20off-chain.','related_move_error':'E_TAGS_COUNT_EXCEEDED\x20(1)','auto_fixable':![]},'check':a=>{if(a['tags_count']===undefined)return null;if(a['tags_count']<MAX_TAGS_COUNT)return null;return{...R_R_03['rule'],'evidence':'tags_count='+a['tags_count']+',\x20limit='+MAX_TAGS_COUNT};}},R_R_04={'rule':{'id':'R-RESOURCE-04','level':'LOW','category':'lifecycle','title':'destroy\x20is\x20irreversible\x20—\x20no\x20recovery\x20mechanism','description':'Resource.destroy(resource)\x20(resource.move:38)\x20deletes\x20the\x20object\x20and\x20its\x20ParentTable\x20'+'in\x20place.\x20There\x20is\x20no\x20archive,\x20no\x20event,\x20and\x20no\x20rollback.\x20Once\x20destroyed,\x20the\x20object\x20'+'ID\x20is\x20permanently\x20invalid\x20and\x20all\x20tags\x20are\x20lost.','affected_stakeholders':['owner'],'scenario':'Caller\x20destroys\x20a\x20Resource\x20that\x20is\x20still\x20referenced\x20by\x20Personal/Entity','mitigation':'Confirm\x20no\x20live\x20references\x20exist\x20before\x20calling\x20destroy.\x20SDK\x20should\x20refuse\x20to\x20destroy\x20'+'a\x20Resource\x20whose\x20owner\x20address\x20is\x20still\x20referenced\x20by\x20Personal.mark\x20or\x20Entity.resource.','auto_fixable':![]},'check':a=>{if(!a['is_destroy'])return null;return{...R_R_04['rule'],'evidence':'is_destroy=true\x20(irreversible)'};}},R_R_05={'rule':{'id':'R-RESOURCE-05','level':'MEDIUM','category':'semantic','title':'tag_set\x20returns\x20bool\x20—\x20SDK\x20may\x20ignore\x20the\x20\x27already\x20exists\x27\x20signal','description':'tag_set(resource,\x20object,\x20name)\x20returns\x20bool:\x20true\x20if\x20a\x20new\x20tag\x20was\x20added,\x20false\x20if\x20'+'the\x20tag\x20already\x20existed\x20(resource.move:47-58).\x20If\x20the\x20SDK\x20ignores\x20the\x20return\x20value,\x20'+'callers\x20cannot\x20distinguish\x20\x27newly\x20added\x27\x20from\x20\x27duplicate\x20silently\x20skipped\x27.\x20This\x20'+'masks\x20intent\x20and\x20complicates\x20idempotency\x20reasoning.','affected_stakeholders':['caller'],'scenario':'SDK\x20treats\x20tag_set\x20as\x20void;\x20caller\x20assumes\x20tag\x20was\x20added\x20when\x20it\x20was\x20a\x20duplicate','mitigation':'SDK\x20should\x20expose\x20tag_set\x27s\x20bool\x20return\x20value\x20to\x20the\x20caller.\x20UI\x20should\x20show\x20\x27tag\x20'+'already\x20existed\x27\x20when\x20false\x20is\x20returned.','auto_fixable':!![]},'check':a=>{if(!a['tag_set_return_ignored'])return null;return{...R_R_05['rule'],'evidence':'tag_set_return_ignored=true\x20(duplicate\x20not\x20surfaced)'};}},R_R_06={'rule':{'id':'R-RESOURCE-06','level':'LOW','category':'semantic','title':'Commented-out\x20switch\x20function\x20(resource.move:71-86)\x20—\x20feature\x20may\x20be\x20intended','description':'resource.move:71-86\x20contains\x20a\x20switch\x20function\x20that\x20is\x20fully\x20commented\x20out.\x20The\x20'+'intended\x20behavior\x20is\x20unclear\x20—\x20it\x20may\x20be\x20a\x20planned\x20feature\x20(e.g.\x20bulk\x20tag\x20operations)\x20'+'that\x20was\x20disabled.\x20Referencing\x20it\x20as\x20if\x20it\x20were\x20live\x20would\x20silently\x20fail.','affected_stakeholders':['system'],'scenario':'Developer\x20reads\x20the\x20commented\x20switch\x20and\x20assumes\x20it\x20is\x20callable','mitigation':'Confirm\x20with\x20the\x20package\x20maintainers\x20whether\x20the\x20switch\x20should\x20be\x20enabled\x20or\x20removed.\x20'+'Do\x20not\x20reference\x20it\x20in\x20SDK\x20or\x20MCP\x20code.','auto_fixable':![]},'check':a=>{if(!a['references_dead_switch'])return null;return{...R_R_06['rule'],'evidence':'references_dead_switch=true\x20(commented\x20out\x20in\x20Move)'};}};export const RESOURCE_RISK_RULES=[R_R_01,R_R_02,R_R_03,R_R_04,R_R_05,R_R_06];export const RESOURCE_RISK_VERSION='1.0.0';export function checkResourceRisks(a){const b=[];for(const c of RESOURCE_RISK_RULES){const d=c['check'](a);if(d)b['push'](d);}return b;}export function getResourceRiskById(a){return RESOURCE_RISK_RULES['find'](b=>b['rule']['id']===a)?.['rule'];}