@wowok/agent-mcp 2.7.0 → 2.7.2

package/dist/knowledge/trust-metrics.js

@@ -1,198 +1 @@
-export const TRUST_METRICS_VERSION = 1;
-const TRUST_LEVELS = [
-    { min: 75, level: "trusted", label: "High trust" },
-    { min: 50, level: "moderate", label: "Moderate trust" },
-    { min: 25, level: "caution", label: "Needs attention" },
-    { min: 0, level: "high_risk", label: "High risk" },
-];
-export function computeServiceTrustScore(metrics) {
-    const breakdown = [];
-    const warnings = [];
-    const arbScore = computeArbitrationDimension(metrics);
-    breakdown.push(arbScore);
-    if (arbScore.score < arbScore.maxScore * 0.3) {
-        warnings.push("Arbitration trust score is low; recommend checking arbitration records");
-    }
-    const reviewScore = computeReviewDimension(metrics);
-    breakdown.push(reviewScore);
-    if (reviewScore.score < reviewScore.maxScore * 0.3 && metrics.reviewStats) {
-        warnings.push(`Low like rate (${metrics.reviewStats.likes}/${metrics.reviewStats.totalReviews})`);
-    }
-    const fulfillmentScore = computeFulfillmentDimension(metrics);
-    breakdown.push(fulfillmentScore);
-    if (metrics.completedRate !== undefined && metrics.completedRate < 0.7) {
-        warnings.push(`Completion rate only ${Math.round(metrics.completedRate * 100)}%`);
-    }
-    const fundScore = computeFundDimension(metrics);
-    breakdown.push(fundScore);
-    if (metrics.compensationFundBalance === undefined || metrics.compensationFundBalance === 0n) {
-        warnings.push("No compensation fund; insufficient protection of customer rights");
-    }
-    const transparencyScore = computeTransparencyDimension(metrics);
-    breakdown.push(transparencyScore);
-    const totalScore = breakdown.reduce((sum, d) => sum + d.score, 0);
-    const level = TRUST_LEVELS.find((l) => totalScore >= l.min)?.level ?? "high_risk";
-    const label = TRUST_LEVELS.find((l) => totalScore >= l.min)?.label ?? "High risk";
-    const summary = buildSummary(totalScore, label, metrics, breakdown);
-    return { score: totalScore, level, breakdown, summary, warnings };
-}
-function computeArbitrationDimension(metrics) {
-    const maxScore = 30;
-    if (metrics.arbitrationScore === undefined && metrics.arbitrationVotingGuardCount === undefined) {
-        return {
-            name: "arbitration",
-            score: maxScore * 0.25,
-            maxScore,
-            description: "Arbitration trust score (no data; default low because arbitration is critical)",
-            humanReadable: "Arbitration: no data (default low — critical missing)",
-        };
-    }
-    let score = 0;
-    const parts = [];
-    if (metrics.arbitrationScore !== undefined) {
-        const baseScore = Math.round((metrics.arbitrationScore / 100) * 10);
-        score += baseScore;
-        parts.push(`score ${metrics.arbitrationScore}/100`);
-    }
-    else {
-        score += 3;
-    }
-    if (metrics.arbitrationVotingGuardCount !== undefined && metrics.arbitrationVotingGuardCount > 0) {
-        score += 5;
-        parts.push(`${metrics.arbitrationVotingGuardCount} voting_guard(s)`);
-    }
-    if (metrics.arbitrationFeeBalance !== undefined && metrics.arbitrationFeeBalance > 0n) {
-        score += 5;
-        parts.push("fee funded");
-    }
-    if (metrics.arbitrationPaused === false) {
-        score += 5;
-        parts.push("active");
-    }
-    else if (metrics.arbitrationPaused === true) {
-        parts.push("paused");
-    }
-    if (metrics.arbitrationCases !== undefined && metrics.arbitrationCases > 0) {
-        score += 5;
-        parts.push(`${metrics.arbitrationCases} case(s)`);
-    }
-    score = Math.min(maxScore, score);
-    return {
-        name: "arbitration",
-        score,
-        maxScore,
-        description: `Arbitration config: ${parts.join(", ")}`,
-        humanReadable: `Arbitration: ${parts.join(", ")}`,
-    };
-}
-function computeReviewDimension(metrics) {
-    const maxScore = 25;
-    if (!metrics.reviewStats || metrics.reviewStats.totalReviews === 0) {
-        return { name: "reviews", score: maxScore * 0.5, maxScore, description: "Review reputation (no review data)", humanReadable: "Reviews: no data" };
-    }
-    const { likes, dislikes, verifiedReviews, totalReviews } = metrics.reviewStats;
-    const likeRate = likes / Math.max(1, totalReviews);
-    const verifiedBoost = Math.min(5, verifiedReviews);
-    const score = Math.round(likeRate * (maxScore - 5) + verifiedBoost);
-    return {
-        name: "reviews",
-        score: Math.min(maxScore, score),
-        maxScore,
-        description: `Like rate ${Math.round(likeRate * 100)}% (${totalReviews} reviews, ${verifiedReviews} verified)`,
-        humanReadable: `Like rate ${Math.round(likeRate * 100)}% (${totalReviews} reviews)`,
-    };
-}
-function computeFulfillmentDimension(metrics) {
-    const maxScore = 20;
-    if (metrics.orderCount === undefined) {
-        return { name: "fulfillment", score: maxScore * 0.5, maxScore, description: "Fulfillment record (no order data)", humanReadable: "Fulfillment: no data" };
-    }
-    let score = 0;
-    const orderScore = Math.min(10, Math.floor(metrics.orderCount / 5));
-    score += orderScore;
-    if (metrics.completedRate !== undefined) {
-        score += Math.round(metrics.completedRate * 10);
-    }
-    else {
-        score += 5;
-    }
-    return {
-        name: "fulfillment",
-        score: Math.min(maxScore, score),
-        maxScore,
-        description: `Completed ${metrics.orderCount} orders, completion rate ${metrics.completedRate !== undefined ? Math.round(metrics.completedRate * 100) + "%" : "unknown"}`,
-        humanReadable: `Fulfillment: ${metrics.orderCount} orders${metrics.avgCompletionTime !== undefined ? `, avg ${metrics.avgCompletionTime}h` : ""}`,
-    };
-}
-function computeFundDimension(metrics) {
-    const maxScore = 15;
-    if (metrics.compensationFundBalance === undefined || metrics.compensationFundBalance === 0n) {
-        return { name: "fund_safety", score: 0, maxScore, description: "No compensation fund", humanReadable: "Compensation fund: none" };
-    }
-    const fund = metrics.compensationFundBalance;
-    if (metrics.typicalOrderAmount !== undefined && metrics.typicalOrderAmount > 0n) {
-        const ratio = Number((fund * 100n) / metrics.typicalOrderAmount) / 100;
-        let score;
-        let humanReadable;
-        if (ratio >= 10) {
-            score = maxScore;
-            humanReadable = `Compensation fund: ${ratio.toFixed(1)}x order amount (excellent)`;
-        }
-        else if (ratio >= 1) {
-            score = 10 + Math.round((ratio - 1) / 9 * 5);
-            humanReadable = `Compensation fund: ${ratio.toFixed(1)}x order amount (covers ≥1 payout)`;
-        }
-        else {
-            score = Math.round(ratio * 10);
-            humanReadable = `Compensation fund: ${ratio.toFixed(1)}x order amount (insufficient)`;
-        }
-        return {
-            name: "fund_safety",
-            score: Math.min(maxScore, score),
-            maxScore,
-            description: `Fund ${fund.toString()} / typical order ${metrics.typicalOrderAmount.toString()} = ${ratio.toFixed(2)}x`,
-            humanReadable,
-        };
-    }
-    const threshold = 1000000000000n;
-    const ratio = Number(metrics.compensationFundBalance * 100n / threshold) / 100;
-    const score = Math.min(maxScore, Math.round(ratio * maxScore));
-    return {
-        name: "fund_safety",
-        score,
-        maxScore,
-        description: `Compensation fund ${metrics.compensationFundBalance} smallest unit (absolute threshold fallback)`,
-        humanReadable: `Compensation fund: ${ratio.toFixed(2)}x absolute threshold`,
-    };
-}
-function computeTransparencyDimension(metrics) {
-    const maxScore = 10;
-    let score = 0;
-    if (metrics.hasPublishedEvents)
-        score += 4;
-    if (metrics.hasMachineBound)
-        score += 3;
-    if (metrics.hasBuyGuard)
-        score += 3;
-    return {
-        name: "transparency",
-        score: Math.min(maxScore, score),
-        maxScore,
-        description: `On-chain events ${metrics.hasPublishedEvents ? "✓" : "✗"}, Machine ${metrics.hasMachineBound ? "✓" : "✗"}, Guard ${metrics.hasBuyGuard ? "✓" : "✗"}`,
-        humanReadable: `Transparency: ${["Events", "Machine", "Guard"].filter((_, i) => [metrics.hasPublishedEvents, metrics.hasMachineBound, metrics.hasBuyGuard][i]).join("+") || "none"}`,
-    };
-}
-function buildSummary(score, label, metrics, breakdown) {
-    const parts = [`Trust score ${score}/100 (${label})`];
-    for (const d of breakdown) {
-        parts.push(`${d.humanReadable}`);
-    }
-    return parts.join("; ");
-}
-export function quickTrustCheck(metrics) {
-    const result = computeServiceTrustScore(metrics);
-    if (result.score < 25) {
-        return { pass: false, reason: `Trust score ${result.score}/100, high risk: ${result.warnings.join("; ")}` };
-    }
-    return { pass: true, reason: `Trust score ${result.score}/100 (${result.level})` };
-}
+export const TRUST_METRICS_VERSION=0x1;const TRUST_LEVELS=[{'min':0x4b,'level':'trusted','label':'High\x20trust'},{'min':0x32,'level':'moderate','label':'Moderate\x20trust'},{'min':0x19,'level':'caution','label':'Needs\x20attention'},{'min':0x0,'level':'high_risk','label':'High\x20risk'}];export function computeServiceTrustScore(a){const b=[],c=[],d=computeArbitrationDimension(a);b['push'](d);d['score']<d['maxScore']*0.3&&c['push']('Arbitration\x20trust\x20score\x20is\x20low;\x20recommend\x20checking\x20arbitration\x20records');const e=computeReviewDimension(a);b['push'](e);e['score']<e['maxScore']*0.3&&a['reviewStats']&&c['push']('Low\x20like\x20rate\x20('+a['reviewStats']['likes']+'/'+a['reviewStats']['totalReviews']+')');const f=computeFulfillmentDimension(a);b['push'](f);a['completedRate']!==undefined&&a['completedRate']<0.7&&c['push']('Completion\x20rate\x20only\x20'+Math['round'](a['completedRate']*0x64)+'%');const g=computeFundDimension(a);b['push'](g);(a['compensationFundBalance']===undefined||a['compensationFundBalance']===0x0n)&&c['push']('No\x20compensation\x20fund;\x20insufficient\x20protection\x20of\x20customer\x20rights');const h=computeTransparencyDimension(a);b['push'](h);const i=b['reduce']((m,n)=>m+n['score'],0x0),j=TRUST_LEVELS['find'](m=>i>=m['min'])?.['level']??'high_risk',k=TRUST_LEVELS['find'](m=>i>=m['min'])?.['label']??'High\x20risk',l=buildSummary(i,k,a,b);return{'score':i,'level':j,'breakdown':b,'summary':l,'warnings':c};}function computeArbitrationDimension(a){const b=0x1e;if(a['arbitrationScore']===undefined&&a['arbitrationVotingGuardCount']===undefined)return{'name':'arbitration','score':b*0.25,'maxScore':b,'description':'Arbitration\x20trust\x20score\x20(no\x20data;\x20default\x20low\x20because\x20arbitration\x20is\x20critical)','humanReadable':'Arbitration:\x20no\x20data\x20(default\x20low\x20—\x20critical\x20missing)'};let c=0x0;const d=[];if(a['arbitrationScore']!==undefined){const e=Math['round'](a['arbitrationScore']/0x64*0xa);c+=e,d['push']('score\x20'+a['arbitrationScore']+'/100');}else c+=0x3;a['arbitrationVotingGuardCount']!==undefined&&a['arbitrationVotingGuardCount']>0x0&&(c+=0x5,d['push'](a['arbitrationVotingGuardCount']+'\x20voting_guard(s)'));a['arbitrationFeeBalance']!==undefined&&a['arbitrationFeeBalance']>0x0n&&(c+=0x5,d['push']('fee\x20funded'));if(a['arbitrationPaused']===![])c+=0x5,d['push']('active');else a['arbitrationPaused']===!![]&&d['push']('paused');return a['arbitrationCases']!==undefined&&a['arbitrationCases']>0x0&&(c+=0x5,d['push'](a['arbitrationCases']+'\x20case(s)')),c=Math['min'](b,c),{'name':'arbitration','score':c,'maxScore':b,'description':'Arbitration\x20config:\x20'+d['join'](',\x20'),'humanReadable':'Arbitration:\x20'+d['join'](',\x20')};}function computeReviewDimension(a){const b=0x19;if(!a['reviewStats']||a['reviewStats']['totalReviews']===0x0)return{'name':'reviews','score':b*0.5,'maxScore':b,'description':'Review\x20reputation\x20(no\x20review\x20data)','humanReadable':'Reviews:\x20no\x20data'};const {likes:c,dislikes:d,verifiedReviews:e,totalReviews:f}=a['reviewStats'],g=c/Math['max'](0x1,f),h=Math['min'](0x5,e),i=Math['round'](g*(b-0x5)+h);return{'name':'reviews','score':Math['min'](b,i),'maxScore':b,'description':'Like\x20rate\x20'+Math['round'](g*0x64)+'%\x20('+f+'\x20reviews,\x20'+e+'\x20verified)','humanReadable':'Like\x20rate\x20'+Math['round'](g*0x64)+'%\x20('+f+'\x20reviews)'};}function computeFulfillmentDimension(a){const b=0x14;if(a['orderCount']===undefined)return{'name':'fulfillment','score':b*0.5,'maxScore':b,'description':'Fulfillment\x20record\x20(no\x20order\x20data)','humanReadable':'Fulfillment:\x20no\x20data'};let c=0x0;const d=Math['min'](0xa,Math['floor'](a['orderCount']/0x5));return c+=d,a['completedRate']!==undefined?c+=Math['round'](a['completedRate']*0xa):c+=0x5,{'name':'fulfillment','score':Math['min'](b,c),'maxScore':b,'description':'Completed\x20'+a['orderCount']+'\x20orders,\x20completion\x20rate\x20'+(a['completedRate']!==undefined?Math['round'](a['completedRate']*0x64)+'%':'unknown'),'humanReadable':'Fulfillment:\x20'+a['orderCount']+'\x20orders'+(a['avgCompletionTime']!==undefined?',\x20avg\x20'+a['avgCompletionTime']+'h':'')};}function computeFundDimension(a){const b=0xf;if(a['compensationFundBalance']===undefined||a['compensationFundBalance']===0x0n)return{'name':'fund_safety','score':0x0,'maxScore':b,'description':'No\x20compensation\x20fund','humanReadable':'Compensation\x20fund:\x20none'};const c=a['compensationFundBalance'];if(a['typicalOrderAmount']!==undefined&&a['typicalOrderAmount']>0x0n){const g=Number(c*0x64n/a['typicalOrderAmount'])/0x64;let h,i;if(g>=0xa)h=b,i='Compensation\x20fund:\x20'+g['toFixed'](0x1)+'x\x20order\x20amount\x20(excellent)';else g>=0x1?(h=0xa+Math['round']((g-0x1)/0x9*0x5),i='Compensation\x20fund:\x20'+g['toFixed'](0x1)+'x\x20order\x20amount\x20(covers\x20≥1\x20payout)'):(h=Math['round'](g*0xa),i='Compensation\x20fund:\x20'+g['toFixed'](0x1)+'x\x20order\x20amount\x20(insufficient)');return{'name':'fund_safety','score':Math['min'](b,h),'maxScore':b,'description':'Fund\x20'+c['toString']()+'\x20/\x20typical\x20order\x20'+a['typicalOrderAmount']['toString']()+'\x20=\x20'+g['toFixed'](0x2)+'x','humanReadable':i};}const d=0xe8d4a51000n,e=Number(a['compensationFundBalance']*0x64n/d)/0x64,f=Math['min'](b,Math['round'](e*b));return{'name':'fund_safety','score':f,'maxScore':b,'description':'Compensation\x20fund\x20'+a['compensationFundBalance']+'\x20smallest\x20unit\x20(absolute\x20threshold\x20fallback)','humanReadable':'Compensation\x20fund:\x20'+e['toFixed'](0x2)+'x\x20absolute\x20threshold'};}function computeTransparencyDimension(a){const b=0xa;let c=0x0;if(a['hasPublishedEvents'])c+=0x4;if(a['hasMachineBound'])c+=0x3;if(a['hasBuyGuard'])c+=0x3;return{'name':'transparency','score':Math['min'](b,c),'maxScore':b,'description':'On-chain\x20events\x20'+(a['hasPublishedEvents']?'✓':'✗')+',\x20Machine\x20'+(a['hasMachineBound']?'✓':'✗')+',\x20Guard\x20'+(a['hasBuyGuard']?'✓':'✗'),'humanReadable':'Transparency:\x20'+(['Events','Machine','Guard']['filter']((d,e)=>[a['hasPublishedEvents'],a['hasMachineBound'],a['hasBuyGuard']][e])['join']('+')||'none')};}function buildSummary(a,b,c,e){const f=['Trust\x20score\x20'+a+'/100\x20('+b+')'];for(const g of e){f['push'](''+g['humanReadable']);}return f['join'](';\x20');}export function quickTrustCheck(a){const b=computeServiceTrustScore(a);if(b['score']<0x19)return{'pass':![],'reason':'Trust\x20score\x20'+b['score']+'/100,\x20high\x20risk:\x20'+b['warnings']['join'](';\x20')};return{'pass':!![],'reason':'Trust\x20score\x20'+b['score']+'/100\x20('+b['level']+')'};}

package/dist/knowledge/util-risk.js

@@ -1,135 +1 @@
-const USER_ADDRESS_BYTE_MAX = 0x06;
-const OBJECT_ADDRESS_BYTE = 0xf1;
-const CHILD_OBJECT_ADDRESS_BYTE = 0xf0;
-const R_U_01 = {
-    rule: {
-        id: "R-UTIL-01",
-        level: "LOW",
-        category: "semantic",
-        title: "is_chiild_object_address_byte has a typo ('chiild') — cannot be renamed post-publish",
-        description: "util.move:30 defines is_chiild_object_address_byte (note the 'chiild' typo). The " +
-            "function is already published on mainnet, so the name cannot be fixed without a " +
-            "breaking package upgrade. Callers must use the misspelled name exactly; SDK wrappers " +
-            "should expose a correctly-spelled alias and route to the typo function.",
-        affected_stakeholders: ["caller"],
-        scenario: "Caller writes is_child_object_address_byte; Move linker cannot resolve the symbol",
-        mitigation: "SDK should expose isChildObjectAddressByte as the public API and internally call the " +
-            "typo'd Move function. Document the typo so future maintainers don't 'fix' it.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.uses_typo_function_name)
-            return null;
-        return { ...R_U_01.rule, evidence: "uses_typo_function_name=true (must use 'chiild')" };
-    },
-};
-const R_U_02 = {
-    rule: {
-        id: "R-UTIL-02",
-        level: "MEDIUM",
-        category: "semantic",
-        title: "Address-byte thresholds are hardcoded — Wow protocol upgrades could invalidate them",
-        description: `util.move classifies addresses by first byte: user (≤ ${USER_ADDRESS_BYTE_MAX}), ` +
-            `object (${OBJECT_ADDRESS_BYTE}), child_object (${CHILD_OBJECT_ADDRESS_BYTE}). ` +
-            `These thresholds are hardcoded as Move constants, not configurable. If a future Wow ` +
-            `protocol upgrade changes the address byte layout (e.g. reserves a new prefix), Util ` +
-            `would silently misclassify addresses until the Move code is upgraded.`,
-        affected_stakeholders: ["caller", "system"],
-        scenario: "Wow protocol upgrade introduces a new address prefix; Util misclassifies it as user",
-        mitigation: "Track Wow protocol upgrades that touch address layout. When a change ships, upgrade " +
-            "util.move and the SDK in lockstep. Add a sync test that asserts the byte values.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.assumes_stable_address_bytes)
-            return null;
-        return { ...R_U_02.rule, evidence: `assumes_stable_address_bytes=true (hardcoded ${USER_ADDRESS_BYTE_MAX}/${OBJECT_ADDRESS_BYTE}/${CHILD_OBJECT_ADDRESS_BYTE})` };
-    },
-};
-const R_U_03 = {
-    rule: {
-        id: "R-UTIL-03",
-        level: "LOW",
-        category: "structural",
-        title: "util.ts is ~50KB — over-concentrated, hard to navigate",
-        description: "The SDK util.ts is ~50428 bytes, mixing BCS structure definitions, query condition " +
-            "builders, Guard query helpers, and address utilities. The size makes it hard to " +
-            "navigate and increases the risk of accidental circular imports. New contributors " +
-            "often import the wrong symbol because so many are exported from one file.",
-        affected_stakeholders: ["caller", "system"],
-        scenario: "Developer imports ProgressHistoryFindConditionsBCS and accidentally pulls in unrelated code",
-        mitigation: "Consider splitting util.ts into focused sub-modules (bcs.ts, query.ts, address.ts). " +
-            "Until then, prefer named imports over namespace imports to keep bundles lean.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.large_util_import)
-            return null;
-        return { ...R_U_03.rule, evidence: "large_util_import=true (consider sub-modules)" };
-    },
-};
-const R_U_04 = {
-    rule: {
-        id: "R-UTIL-04",
-        level: "LOW",
-        category: "lifecycle",
-        title: "Util emits no events — tool-call observability is caller's responsibility",
-        description: "Util functions are pure: they neither emit nor consume events. Callers cannot rely on " +
-            "an event stream to trace Util invocations. For audit and debugging, the calling " +
-            "module must record its own log entries around Util calls.",
-        affected_stakeholders: ["caller"],
-        scenario: "Auditor expects Util-call events; none exist, the call chain is invisible",
-        mitigation: "Callers should emit their own events or write logs around Util calls when auditability " +
-            "is required. Treat Util as an opaque library function.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.expects_util_events)
-            return null;
-        return { ...R_U_04.rule, evidence: "expects_util_events=true (none emitted)" };
-    },
-};
-const R_U_05 = {
-    rule: {
-        id: "R-UTIL-05",
-        level: "MEDIUM",
-        category: "cross_object",
-        title: "SDK BCS structures must stay in sync with Move structs — drift breaks queries",
-        description: "util.ts defines BCS structures for Progress History / Session / Forward / Record " +
-            "query conditions. These must match the Move struct layouts byte-for-byte. If a Move " +
-            "struct adds a field and the SDK BCS is not regenerated, query submissions will " +
-            "deserialize incorrectly on-chain, producing silent failures or aborts.",
-        affected_stakeholders: ["caller", "system"],
-        scenario: "Progress struct adds a field; SDK BCS is stale; queries return wrong results",
-        mitigation: "Generate BCS structures from Move source via codegen, or run a sync test that " +
-            "compares SDK BCS layouts against Move structs on every release.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (ctx.bcs_manually_synced === undefined)
-            return null;
-        if (!ctx.bcs_manually_synced)
-            return null;
-        return { ...R_U_05.rule, evidence: "bcs_manually_synced=true (drift risk)" };
-    },
-};
-export const UTIL_RISK_RULES = [
-    R_U_01,
-    R_U_02,
-    R_U_03,
-    R_U_04,
-    R_U_05,
-];
-export const UTIL_RISK_VERSION = "1.0.0";
-export function checkUtilRisks(ctx) {
-    const risks = [];
-    for (const rule of UTIL_RISK_RULES) {
-        const r = rule.check(ctx);
-        if (r)
-            risks.push(r);
-    }
-    return risks;
-}
-export function getUtilRiskById(id) {
-    return UTIL_RISK_RULES.find(r => r.rule.id === id)?.rule;
-}
+const USER_ADDRESS_BYTE_MAX=0x6,OBJECT_ADDRESS_BYTE=0xf1,CHILD_OBJECT_ADDRESS_BYTE=0xf0,R_U_01={'rule':{'id':'R-UTIL-01','level':'LOW','category':'semantic','title':'is_chiild_object_address_byte\x20has\x20a\x20typo\x20(\x27chiild\x27)\x20—\x20cannot\x20be\x20renamed\x20post-publish','description':'util.move:30\x20defines\x20is_chiild_object_address_byte\x20(note\x20the\x20\x27chiild\x27\x20typo).\x20The\x20'+'function\x20is\x20already\x20published\x20on\x20mainnet,\x20so\x20the\x20name\x20cannot\x20be\x20fixed\x20without\x20a\x20'+'breaking\x20package\x20upgrade.\x20Callers\x20must\x20use\x20the\x20misspelled\x20name\x20exactly;\x20SDK\x20wrappers\x20'+'should\x20expose\x20a\x20correctly-spelled\x20alias\x20and\x20route\x20to\x20the\x20typo\x20function.','affected_stakeholders':['caller'],'scenario':'Caller\x20writes\x20is_child_object_address_byte;\x20Move\x20linker\x20cannot\x20resolve\x20the\x20symbol','mitigation':'SDK\x20should\x20expose\x20isChildObjectAddressByte\x20as\x20the\x20public\x20API\x20and\x20internally\x20call\x20the\x20'+'typo\x27d\x20Move\x20function.\x20Document\x20the\x20typo\x20so\x20future\x20maintainers\x20don\x27t\x20\x27fix\x27\x20it.','auto_fixable':![]},'check':a=>{if(!a['uses_typo_function_name'])return null;return{...R_U_01['rule'],'evidence':'uses_typo_function_name=true\x20(must\x20use\x20\x27chiild\x27)'};}},R_U_02={'rule':{'id':'R-UTIL-02','level':'MEDIUM','category':'semantic','title':'Address-byte\x20thresholds\x20are\x20hardcoded\x20—\x20Wow\x20protocol\x20upgrades\x20could\x20invalidate\x20them','description':'util.move\x20classifies\x20addresses\x20by\x20first\x20byte:\x20user\x20(≤\x20'+USER_ADDRESS_BYTE_MAX+'),\x20'+('object\x20('+OBJECT_ADDRESS_BYTE+'),\x20child_object\x20('+CHILD_OBJECT_ADDRESS_BYTE+').\x20')+'These\x20thresholds\x20are\x20hardcoded\x20as\x20Move\x20constants,\x20not\x20configurable.\x20If\x20a\x20future\x20Wow\x20'+'protocol\x20upgrade\x20changes\x20the\x20address\x20byte\x20layout\x20(e.g.\x20reserves\x20a\x20new\x20prefix),\x20Util\x20'+'would\x20silently\x20misclassify\x20addresses\x20until\x20the\x20Move\x20code\x20is\x20upgraded.','affected_stakeholders':['caller','system'],'scenario':'Wow\x20protocol\x20upgrade\x20introduces\x20a\x20new\x20address\x20prefix;\x20Util\x20misclassifies\x20it\x20as\x20user','mitigation':'Track\x20Wow\x20protocol\x20upgrades\x20that\x20touch\x20address\x20layout.\x20When\x20a\x20change\x20ships,\x20upgrade\x20'+'util.move\x20and\x20the\x20SDK\x20in\x20lockstep.\x20Add\x20a\x20sync\x20test\x20that\x20asserts\x20the\x20byte\x20values.','auto_fixable':![]},'check':a=>{if(!a['assumes_stable_address_bytes'])return null;return{...R_U_02['rule'],'evidence':'assumes_stable_address_bytes=true\x20(hardcoded\x20'+USER_ADDRESS_BYTE_MAX+'/'+OBJECT_ADDRESS_BYTE+'/'+CHILD_OBJECT_ADDRESS_BYTE+')'};}},R_U_03={'rule':{'id':'R-UTIL-03','level':'LOW','category':'structural','title':'util.ts\x20is\x20~50KB\x20—\x20over-concentrated,\x20hard\x20to\x20navigate','description':'The\x20SDK\x20util.ts\x20is\x20~50428\x20bytes,\x20mixing\x20BCS\x20structure\x20definitions,\x20query\x20condition\x20'+'builders,\x20Guard\x20query\x20helpers,\x20and\x20address\x20utilities.\x20The\x20size\x20makes\x20it\x20hard\x20to\x20'+'navigate\x20and\x20increases\x20the\x20risk\x20of\x20accidental\x20circular\x20imports.\x20New\x20contributors\x20'+'often\x20import\x20the\x20wrong\x20symbol\x20because\x20so\x20many\x20are\x20exported\x20from\x20one\x20file.','affected_stakeholders':['caller','system'],'scenario':'Developer\x20imports\x20ProgressHistoryFindConditionsBCS\x20and\x20accidentally\x20pulls\x20in\x20unrelated\x20code','mitigation':'Consider\x20splitting\x20util.ts\x20into\x20focused\x20sub-modules\x20(bcs.ts,\x20query.ts,\x20address.ts).\x20'+'Until\x20then,\x20prefer\x20named\x20imports\x20over\x20namespace\x20imports\x20to\x20keep\x20bundles\x20lean.','auto_fixable':![]},'check':a=>{if(!a['large_util_import'])return null;return{...R_U_03['rule'],'evidence':'large_util_import=true\x20(consider\x20sub-modules)'};}},R_U_04={'rule':{'id':'R-UTIL-04','level':'LOW','category':'lifecycle','title':'Util\x20emits\x20no\x20events\x20—\x20tool-call\x20observability\x20is\x20caller\x27s\x20responsibility','description':'Util\x20functions\x20are\x20pure:\x20they\x20neither\x20emit\x20nor\x20consume\x20events.\x20Callers\x20cannot\x20rely\x20on\x20'+'an\x20event\x20stream\x20to\x20trace\x20Util\x20invocations.\x20For\x20audit\x20and\x20debugging,\x20the\x20calling\x20'+'module\x20must\x20record\x20its\x20own\x20log\x20entries\x20around\x20Util\x20calls.','affected_stakeholders':['caller'],'scenario':'Auditor\x20expects\x20Util-call\x20events;\x20none\x20exist,\x20the\x20call\x20chain\x20is\x20invisible','mitigation':'Callers\x20should\x20emit\x20their\x20own\x20events\x20or\x20write\x20logs\x20around\x20Util\x20calls\x20when\x20auditability\x20'+'is\x20required.\x20Treat\x20Util\x20as\x20an\x20opaque\x20library\x20function.','auto_fixable':![]},'check':a=>{if(!a['expects_util_events'])return null;return{...R_U_04['rule'],'evidence':'expects_util_events=true\x20(none\x20emitted)'};}},R_U_05={'rule':{'id':'R-UTIL-05','level':'MEDIUM','category':'cross_object','title':'SDK\x20BCS\x20structures\x20must\x20stay\x20in\x20sync\x20with\x20Move\x20structs\x20—\x20drift\x20breaks\x20queries','description':'util.ts\x20defines\x20BCS\x20structures\x20for\x20Progress\x20History\x20/\x20Session\x20/\x20Forward\x20/\x20Record\x20'+'query\x20conditions.\x20These\x20must\x20match\x20the\x20Move\x20struct\x20layouts\x20byte-for-byte.\x20If\x20a\x20Move\x20'+'struct\x20adds\x20a\x20field\x20and\x20the\x20SDK\x20BCS\x20is\x20not\x20regenerated,\x20query\x20submissions\x20will\x20'+'deserialize\x20incorrectly\x20on-chain,\x20producing\x20silent\x20failures\x20or\x20aborts.','affected_stakeholders':['caller','system'],'scenario':'Progress\x20struct\x20adds\x20a\x20field;\x20SDK\x20BCS\x20is\x20stale;\x20queries\x20return\x20wrong\x20results','mitigation':'Generate\x20BCS\x20structures\x20from\x20Move\x20source\x20via\x20codegen,\x20or\x20run\x20a\x20sync\x20test\x20that\x20'+'compares\x20SDK\x20BCS\x20layouts\x20against\x20Move\x20structs\x20on\x20every\x20release.','auto_fixable':![]},'check':a=>{if(a['bcs_manually_synced']===undefined)return null;if(!a['bcs_manually_synced'])return null;return{...R_U_05['rule'],'evidence':'bcs_manually_synced=true\x20(drift\x20risk)'};}};export const UTIL_RISK_RULES=[R_U_01,R_U_02,R_U_03,R_U_04,R_U_05];export const UTIL_RISK_VERSION='1.0.0';export function checkUtilRisks(a){const b=[];for(const c of UTIL_RISK_RULES){const d=c['check'](a);if(d)b['push'](d);}return b;}export function getUtilRiskById(a){return UTIL_RISK_RULES['find'](b=>b['rule']['id']===a)?.['rule'];}

package/dist/loop-engineering/aggregate.js

@@ -1,132 +1 @@
-function percentile(sortedValues, p) {
-    if (sortedValues.length === 0)
-        return 0;
-    const idx = Math.ceil((p / 100) * sortedValues.length) - 1;
-    return sortedValues[Math.max(0, idx)];
-}
-function topMessages(messages, limit = 5) {
-    const counts = new Map();
-    for (const msg of messages) {
-        if (!msg)
-            continue;
-        counts.set(msg, (counts.get(msg) || 0) + 1);
-    }
-    return Array.from(counts.entries())
-        .map(([message, count]) => ({ message, count }))
-        .sort((a, b) => b.count - a.count)
-        .slice(0, limit);
-}
-export function aggregateByTool(events) {
-    const groups = new Map();
-    for (const e of events) {
-        const key = e.tool_name || "unknown";
-        if (!groups.has(key))
-            groups.set(key, []);
-        groups.get(key).push(e);
-    }
-    const results = [];
-    for (const [tool_name, group] of groups) {
-        const total = group.length;
-        const success = group.filter((e) => e.status === "success").length;
-        const failed = group.filter((e) => e.status === "failed").length;
-        const pending = group.filter((e) => e.status === "pending_input").length;
-        const semanticHits = group.filter((e) => e.semantic_hit).length;
-        const durations = group.map((e) => e.duration_ms).sort((a, b) => a - b);
-        const errorDist = {};
-        const errorMsgs = [];
-        for (const e of group) {
-            if (e.error_code) {
-                errorDist[e.error_code] = (errorDist[e.error_code] || 0) + 1;
-            }
-            if (e.error_message)
-                errorMsgs.push(e.error_message);
-        }
-        results.push({
-            tool_name,
-            total_calls: total,
-            success_count: success,
-            failed_count: failed,
-            pending_input_count: pending,
-            success_rate: total > 0 ? success / total : 0,
-            avg_duration_ms: durations.length > 0 ? durations.reduce((a, b) => a + b, 0) / durations.length : 0,
-            p50_duration_ms: percentile(durations, 50),
-            p95_duration_ms: percentile(durations, 95),
-            semantic_hit_rate: total > 0 ? semanticHits / total : 0,
-            error_distribution: errorDist,
-            top_error_messages: topMessages(errorMsgs),
-        });
-    }
-    return results.sort((a, b) => b.total_calls - a.total_calls);
-}
-export function aggregateByOperation(events) {
-    const groups = new Map();
-    for (const e of events) {
-        const key = e.operation_type || "unknown";
-        if (!groups.has(key))
-            groups.set(key, []);
-        groups.get(key).push(e);
-    }
-    const results = [];
-    for (const [operation_type, group] of groups) {
-        const total = group.length;
-        const success = group.filter((e) => e.status === "success").length;
-        const semanticHits = group.filter((e) => e.semantic_hit).length;
-        const errorDist = {};
-        for (const e of group) {
-            if (e.error_code) {
-                errorDist[e.error_code] = (errorDist[e.error_code] || 0) + 1;
-            }
-        }
-        results.push({
-            operation_type,
-            total_calls: total,
-            success_rate: total > 0 ? success / total : 0,
-            semantic_hit_rate: total > 0 ? semanticHits / total : 0,
-            error_distribution: errorDist,
-        });
-    }
-    return results.sort((a, b) => b.total_calls - a.total_calls);
-}
-export function aggregate(events) {
-    const total = events.length;
-    const success = events.filter((e) => e.status === "success").length;
-    const semanticHits = events.filter((e) => e.semantic_hit).length;
-    const unknownErrors = events.filter((e) => e.error_code === "unknown").length;
-    const durations = events.map((e) => e.duration_ms);
-    const errorDist = {};
-    const intentDist = {};
-    for (const e of events) {
-        if (e.error_code) {
-            errorDist[e.error_code] = (errorDist[e.error_code] || 0) + 1;
-        }
-        if (e.intent) {
-            intentDist[e.intent] = (intentDist[e.intent] || 0) + 1;
-        }
-    }
-    const timestamps = events
-        .map((e) => e.timestamp)
-        .filter(Boolean)
-        .sort();
-    return {
-        aggregation_date: new Date().toISOString(),
-        total_events: total,
-        date_range: {
-            earliest: timestamps[0] || "",
-            latest: timestamps[timestamps.length - 1] || "",
-        },
-        per_tool: aggregateByTool(events),
-        per_operation: aggregateByOperation(events),
-        overall: {
-            total_calls: total,
-            success_count: success,
-            failed_count: events.filter((e) => e.status === "failed").length,
-            success_rate: total > 0 ? success / total : 0,
-            semantic_hit_rate: total > 0 ? semanticHits / total : 0,
-            unknown_error_count: unknownErrors,
-            unknown_error_rate: total > 0 ? unknownErrors / total : 0,
-            avg_duration_ms: durations.length > 0 ? durations.reduce((a, b) => a + b, 0) / durations.length : 0,
-        },
-        error_code_distribution: errorDist,
-        intent_distribution: intentDist,
-    };
-}
+function percentile(a,b){if(a['length']===0x0)return 0x0;const c=Math['ceil'](b/0x64*a['length'])-0x1;return a[Math['max'](0x0,c)];}function topMessages(a,b=0x5){const c=new Map();for(const d of a){if(!d)continue;c['set'](d,(c['get'](d)||0x0)+0x1);}return Array['from'](c['entries']())['map'](([e,f])=>({'message':e,'count':f}))['sort']((e,f)=>f['count']-e['count'])['slice'](0x0,b);}export function aggregateByTool(a){const b=new Map();for(const d of a){const f=d['tool_name']||'unknown';if(!b['has'](f))b['set'](f,[]);b['get'](f)['push'](d);}const c=[];for(const [g,h]of b){const i=h['length'],j=h['filter'](q=>q['status']==='success')['length'],k=h['filter'](q=>q['status']==='failed')['length'],l=h['filter'](q=>q['status']==='pending_input')['length'],m=h['filter'](q=>q['semantic_hit'])['length'],n=h['map'](q=>q['duration_ms'])['sort']((q,r)=>q-r),o={},p=[];for(const q of h){q['error_code']&&(o[q['error_code']]=(o[q['error_code']]||0x0)+0x1);if(q['error_message'])p['push'](q['error_message']);}c['push']({'tool_name':g,'total_calls':i,'success_count':j,'failed_count':k,'pending_input_count':l,'success_rate':i>0x0?j/ i:0x0,'avg_duration_ms':n['length']>0x0?n['reduce']((r,s)=>r+s,0x0)/n['length']:0x0,'p50_duration_ms':percentile(n,0x32),'p95_duration_ms':percentile(n,0x5f),'semantic_hit_rate':i>0x0?m/ i:0x0,'error_distribution':o,'top_error_messages':topMessages(p)});}return c['sort']((r,s)=>s['total_calls']-r['total_calls']);}export function aggregateByOperation(a){const b=new Map();for(const d of a){const f=d['operation_type']||'unknown';if(!b['has'](f))b['set'](f,[]);b['get'](f)['push'](d);}const c=[];for(const [g,h]of b){const i=h['length'],j=h['filter'](m=>m['status']==='success')['length'],k=h['filter'](m=>m['semantic_hit'])['length'],l={};for(const m of h){m['error_code']&&(l[m['error_code']]=(l[m['error_code']]||0x0)+0x1);}c['push']({'operation_type':g,'total_calls':i,'success_rate':i>0x0?j/ i:0x0,'semantic_hit_rate':i>0x0?k/ i:0x0,'error_distribution':l});}return c['sort']((n,o)=>o['total_calls']-n['total_calls']);}export function aggregate(a){const b=a['length'],c=a['filter'](k=>k['status']==='success')['length'],d=a['filter'](k=>k['semantic_hit'])['length'],f=a['filter'](k=>k['error_code']==='unknown')['length'],g=a['map'](k=>k['duration_ms']),h={},i={};for(const k of a){k['error_code']&&(h[k['error_code']]=(h[k['error_code']]||0x0)+0x1),k['intent']&&(i[k['intent']]=(i[k['intent']]||0x0)+0x1);}const j=a['map'](l=>l['timestamp'])['filter'](Boolean)['sort']();return{'aggregation_date':new Date()['toISOString'](),'total_events':b,'date_range':{'earliest':j[0x0]||'','latest':j[j['length']-0x1]||''},'per_tool':aggregateByTool(a),'per_operation':aggregateByOperation(a),'overall':{'total_calls':b,'success_count':c,'failed_count':a['filter'](l=>l['status']==='failed')['length'],'success_rate':b>0x0?c/b:0x0,'semantic_hit_rate':b>0x0?d/b:0x0,'unknown_error_count':f,'unknown_error_rate':b>0x0?f/b:0x0,'avg_duration_ms':g['length']>0x0?g['reduce']((l,m)=>l+m,0x0)/g['length']:0x0},'error_code_distribution':h,'intent_distribution':i};}

package/dist/loop-engineering/context-collect.js

@@ -1,83 +1 @@
-import { recordSignature } from "../experience/index.js";
-import { persistImprovementQueue } from "./improve.js";
-export function collectContextExperience(result, network) {
-    const objectTypes = extractObjectTypes(result.objects);
-    const hasEmbeddedHistory = !!result.embedded_history;
-    const hasEvents = !!result.events && result.events.length > 0;
-    const signature = {
-        intent: "assemble_context",
-        signals: {
-            object_types: objectTypes,
-            object_count: result.objects.length,
-            has_embedded_history: hasEmbeddedHistory,
-            has_events: hasEvents,
-            context_digest: result.context_digest,
-            network,
-        },
-        timestamp: Date.now(),
-        outcome: "success",
-    };
-    let signatureRecorded = false;
-    try {
-        recordSignature(signature);
-        signatureRecorded = true;
-    }
-    catch {
-    }
-    let proposal;
-    if (objectTypes.length >= 3) {
-        proposal = {
-            proposal_id: `PROP-CTX-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`,
-            source_diagnosis_id: `CTX-${result.context_digest}`,
-            type: "description_rewrite",
-            priority: "P3",
-            automation: "semi",
-            apply_mode: "config_override",
-            override_category: "descriptions",
-            title: `Enrich assemble_context for ${objectTypes.join("+")} patterns`,
-            description: `Assembled context with ${objectTypes.length} object types (${objectTypes.join(", ")}). ` +
-                `Consider enriching the assemble_context action description to guide AI toward ` +
-                `common ${objectTypes.join("+")} business patterns.`,
-            target: "assemble_context",
-            proposed_change: {
-                action: "enrich_description",
-                object_types: objectTypes,
-                has_embedded_history: hasEmbeddedHistory,
-                has_events: hasEvents,
-                context_digest: result.context_digest,
-            },
-            evidence: {
-                context_digest: result.context_digest,
-                object_count: result.objects.length,
-                object_types: objectTypes,
-                network,
-            },
-            review_status: "pending",
-            ab_test_recommended: false,
-        };
-        try {
-            persistImprovementQueue([proposal]);
-        }
-        catch {
-        }
-    }
-    return {
-        signature_recorded: signatureRecorded,
-        proposal_created: !!proposal,
-        proposal_id: proposal?.proposal_id,
-    };
-}
-function extractObjectTypes(objects) {
-    const types = new Set();
-    for (const obj of objects) {
-        const data = obj?.data ?? obj;
-        const type = data?.type;
-        if (typeof type === "string") {
-            const match = type.match(/::(\w+)$/);
-            if (match) {
-                types.add(match[1]);
-            }
-        }
-    }
-    return Array.from(types);
-}
+import{recordSignature}from'../experience/index.js';import{persistImprovementQueue}from'./improve.js';export function collectContextExperience(a,b){const c=extractObjectTypes(a['objects']),d=!!a['embedded_history'],e=!!a['events']&&a['events']['length']>0x0,f={'intent':'assemble_context','signals':{'object_types':c,'object_count':a['objects']['length'],'has_embedded_history':d,'has_events':e,'context_digest':a['context_digest'],'network':b},'timestamp':Date['now'](),'outcome':'success'};let g=![];try{recordSignature(f),g=!![];}catch{}let h;if(c['length']>=0x3){h={'proposal_id':'PROP-CTX-'+Date['now']()+'-'+Math['random']()['toString'](0x24)['slice'](0x2,0x6),'source_diagnosis_id':'CTX-'+a['context_digest'],'type':'description_rewrite','priority':'P3','automation':'semi','apply_mode':'config_override','override_category':'descriptions','title':'Enrich\x20assemble_context\x20for\x20'+c['join']('+')+'\x20patterns','description':'Assembled\x20context\x20with\x20'+c['length']+'\x20object\x20types\x20('+c['join'](',\x20')+').\x20'+'Consider\x20enriching\x20the\x20assemble_context\x20action\x20description\x20to\x20guide\x20AI\x20toward\x20'+('common\x20'+c['join']('+')+'\x20business\x20patterns.'),'target':'assemble_context','proposed_change':{'action':'enrich_description','object_types':c,'has_embedded_history':d,'has_events':e,'context_digest':a['context_digest']},'evidence':{'context_digest':a['context_digest'],'object_count':a['objects']['length'],'object_types':c,'network':b},'review_status':'pending','ab_test_recommended':![]};try{persistImprovementQueue([h]);}catch{}}return{'signature_recorded':g,'proposal_created':!!h,'proposal_id':h?.['proposal_id']};}function extractObjectTypes(a){const b=new Set();for(const c of a){const d=c?.['data']??c,e=d?.['type'];if(typeof e==='string'){const f=e['match'](/::(\w+)$/);f&&b['add'](f[0x1]);}}return Array['from'](b);}