@wowok/agent-mcp 2.7.0 → 2.7.2

package/dist/knowledge/demand-risk.js

@@ -1,240 +1 @@
-import { MAX_REWARD_COUNT, MAX_GUARD_COUNT_DEMAND, } from "@wowok/wowok";
-const MAX_FEEDBACK_COUNT = 20;
-const R_DEM_1_01 = {
-    rule: {
-        id: "R-DEM-01",
-        level: "HIGH",
-        category: "structural",
-        title: `rewards count exceeds MAX_REWARD_COUNT (${MAX_REWARD_COUNT})`,
-        description: `The 'rewards' vector is bounded by MAX_REWARD_COUNT=${MAX_REWARD_COUNT} (Move source: demand.move:21). ` +
-            `Exceeding this limit aborts with E_MAX_REWARD_COUNT_EXCEEDED (1). Each reward is affiliated via the Registrar, ` +
-            `so adding a reward also triggers registrar::affiliation. Use reward_remove/reward_clear to free slots before ` +
-            `adding new ones if the limit is reached.`,
-        affected_stakeholders: ["creator"],
-        scenario: "Caller calls reward_add when 20 rewards are already affiliated",
-        mitigation: "Track the current reward count. Before adding a new reward, call reward_remove or reward_clear to " +
-            "free a slot. Consider consolidating rewards into a single Reward object with multiple tiers if the " +
-            " Demand needs to offer more than 20 distinct reward paths.",
-        related_move_error: "E_MAX_REWARD_COUNT_EXCEEDED (1)",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (ctx.reward_count === undefined)
-            return null;
-        if (ctx.reward_count <= MAX_REWARD_COUNT)
-            return null;
-        return { ...R_DEM_1_01.rule, evidence: `reward_count=${ctx.reward_count}, limit=${MAX_REWARD_COUNT}` };
-    },
-};
-const R_DEM_1_02 = {
-    rule: {
-        id: "R-DEM-02",
-        level: "HIGH",
-        category: "structural",
-        title: `guards count exceeds MAX_GUARD_COUNT_DEMAND (${MAX_GUARD_COUNT_DEMAND})`,
-        description: `The 'guards' vector is bounded by MAX_GUARD_COUNT_DEMAND=${MAX_GUARD_COUNT_DEMAND} (Move source: demand.move:22). ` +
-            `Exceeding this limit aborts with E_MAX_GUARD_COUNT_EXCEEDED (2). Each guard carries an optional ` +
-            `service_identifier (u8) that routes present_with_passport submissions to a specific Service submission ` +
-            `extracted from the Passport. Adding a duplicate guard updates the service_identifier instead of pushing.`,
-        affected_stakeholders: ["creator", "presenter"],
-        scenario: "Caller calls guard_add when 20 guards are already affiliated and the address is new",
-        mitigation: "Track the current guard count. Before adding a new guard, call guard_remove or guard_clear. " +
-            "If updating an existing guard's service_identifier, call guard_add with the same address (it updates " +
-            "in place rather than pushing).",
-        related_move_error: "E_MAX_GUARD_COUNT_EXCEEDED (2)",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (ctx.guard_count === undefined)
-            return null;
-        if (ctx.guard_count <= MAX_GUARD_COUNT_DEMAND)
-            return null;
-        return { ...R_DEM_1_02.rule, evidence: `guard_count=${ctx.guard_count}, limit=${MAX_GUARD_COUNT_DEMAND}` };
-    },
-};
-const R_DEM_1_03 = {
-    rule: {
-        id: "R-DEM-03",
-        level: "MEDIUM",
-        category: "structural",
-        title: `feedback batch exceeds MAX_FEEDBACK_COUNT (${MAX_FEEDBACK_COUNT})`,
-        description: `The 'feedback' Move function (demand.move:352) updates ONE presenter per call (feedback_imp iterates ` +
-            `no vector). The SDK batches multiple feedback calls and caps the batch at MAX_FEEDBACK_COUNT=${MAX_FEEDBACK_COUNT} ` +
-            `(SDK-only limit, NOT in onchain-constants.ts — Move has no aggregate feedback-count check). Exceeding the ` +
-            `SDK batch limit causes the SDK to refuse the call before transaction building. Each feedback entry writes ` +
-            `a String (bounded by common::DESCRIPTION, 4000 chars) and an optional u8 acceptance_score to a presenter's ` +
-            `ServiceInfo record.`,
-        affected_stakeholders: ["creator"],
-        scenario: "Caller attempts to submit 21 feedback entries in a single SDK call",
-        mitigation: "Split the feedback batch into chunks of ≤ 20 entries. If the Demand has more than 20 presenters to " +
-            "give feedback on, submit multiple transactions. Consider whether bulk feedback is appropriate — " +
-            "individualized feedback per presenter is often more meaningful.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (ctx.feedback_count === undefined)
-            return null;
-        if (ctx.feedback_count <= MAX_FEEDBACK_COUNT)
-            return null;
-        return { ...R_DEM_1_03.rule, evidence: `feedback_count=${ctx.feedback_count}, limit=${MAX_FEEDBACK_COUNT}` };
-    },
-};
-const R_DEM_2_01 = {
-    rule: {
-        id: "R-DEM-04",
-        level: "HIGH",
-        category: "semantic",
-        title: "present called without passport when guards vector is non-empty",
-        description: "The Move present function (demand.move:100) asserts `vector::is_empty(&self.guards)` and aborts with " +
-            "E_NEED_PASSPORT (3) if the guards vector is non-empty. When guards exist, every presenter MUST go through " +
-            "present_with_passport (or present_service_with_passport), which routes through present_with_passport_imp. " +
-            "That function looks up the specified Guard in the guards vector, calls passport::result_for_guard to " +
-            "verify the Passport, and (if service_identifier is set) extracts the submission address from the Passport. " +
-            "Calling plain `present` on a guarded Demand always aborts — there is no fallback path.",
-        affected_stakeholders: ["presenter", "creator"],
-        scenario: "Demand has 2 guards; a presenter calls present() instead of present_with_passport()",
-        mitigation: "Before presenting, query the Demand's guards vector. If non-empty, use present_with_passport and " +
-            "supply a Guard + Passport. The Guard address must already be in the guards vector (otherwise " +
-            "E_GUARD_NOT_FOUND (4) aborts). If service_identifier is set on the matching guard, the submission " +
-            "address is extracted from the Passport — do not pass a separate service parameter.",
-        related_move_error: "E_NEED_PASSPORT (3)",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.using_present_without_passport)
-            return null;
-        if (!ctx.guards_non_empty)
-            return null;
-        return { ...R_DEM_2_01.rule, evidence: `guards_non_empty=true, using present (no passport)` };
-    },
-};
-const R_DEM_3_01 = {
-    rule: {
-        id: "R-DEM-05",
-        level: "INFO",
-        category: "lifecycle",
-        title: "um_set_imp Registrar dependency leak — RESOLVED (P-DEM-P1-1)",
-        description: "PREVIOUS RISK: um_set_imp (demand.move:139-147) previously set self.um to the new Contact address " +
-            "BEFORE disaffiliating the old um, causing the old Contact to retain a stale affiliation record in the " +
-            "Registrar. Affiliation_change was not called for the old um, leading to a Registrar dependency leak.\n\n" +
-            "FIX (P-DEM-P1-1): um_set_imp now disaffiliates the old um via registrar::disaffiliation BEFORE setting " +
-            "the new one. The new um is then affiliated via registrar::affiliation. This matches the pattern used " +
-            "by permission_set (which uses affiliation_change). um_none_imp also disaffiliates before clearing.\n\n" +
-            "This rule is retained for historical audit and to detect regressions.",
-        affected_stakeholders: ["creator", "system"],
-        scenario: "Future regression: someone reorders um_set_imp to set new before disaffiliating old",
-        mitigation: "Keep the disaffiliate-then-set ordering. The Move invariant: any path that mutates self.um MUST call " +
-            "registrar::disaffiliation on the old value before assigning a new one.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (ctx.constants_synced)
-            return null;
-        return { ...R_DEM_3_01.rule, evidence: "constants_synced=false (regression check)" };
-    },
-};
-const R_DEM_2_02 = {
-    rule: {
-        id: "R-DEM-06",
-        level: "INFO",
-        category: "semantic",
-        title: "guard_add_imp service_identifier type check skipped on early return — RESOLVED (P-DEM-P1-2)",
-        description: "PREVIOUS RISK: guard_add_imp (demand.move:213-242) previously had the service_identifier type check " +
-            "AFTER the early-return path that updates an existing guard's service_identifier. When a guard with " +
-            "the same address already existed, the function returned before validating the new service_identifier " +
-            "against guard::get_submission_object_type. This allowed setting an invalid service_identifier that " +
-            "would later fail at present_with_passport time with E_INVALID_SERVICE_OBJECT_TYPE (common.move:13).\n\n" +
-            "FIX (P-DEM-P1-2): The service_identifier type check now runs FIRST (demand.move:218-222), BEFORE the " +
-            "duplicate-detection loop. common::assert_service_object_type is called for any non-None service_identifier, " +
-            "ensuring both the insert and update paths validate the type.\n\n" +
-            "This rule is retained for historical audit and to detect regressions.",
-        affected_stakeholders: ["creator", "presenter"],
-        scenario: "Future regression: someone moves the type check back to after the duplicate-detection loop",
-        mitigation: "Keep the type check at the top of guard_add_imp. The Move invariant: any service_identifier provided " +
-            "to guard_add MUST be validated via guard::get_submission_object_type + common::assert_service_object_type " +
-            "BEFORE any mutation of the guards vector.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (ctx.constants_synced)
-            return null;
-        return { ...R_DEM_2_02.rule, evidence: "constants_synced=false (regression check)" };
-    },
-};
-const R_DEM_4_01 = {
-    rule: {
-        id: "R-DEM-07",
-        level: "INFO",
-        category: "knowledge",
-        title: "extractDemandInfo expects non-existent Move fields — RESOLVED (P-DEM-P1-3)",
-        description: "PREVIOUS RISK: extractDemandInfo in demand-matching.ts previously read fields (tags, maxPrice, " +
-            "scenario, minTrustScore, keywords) that do NOT exist on the Move Demand struct. The Move struct only " +
-            "has: description, location, rewards, guards, presenters, um, permission. This caused the matching " +
-            "engine to silently produce undefined values when fed raw on-chain query results.\n\n" +
-            "FIX (P-DEM-P1-3): extractDemandInfo now documents the caller-enrichment contract. Only `location` maps " +
-            "directly to the Move Demand struct; all other fields (tags, maxPrice, scenario, minTrustScore, keywords) " +
-            "MUST be injected by the caller before calling matchDemand. The caller is responsible for sourcing " +
-            "this data from Service tags, Reward objects, user input, or NLP on the description.\n\n" +
-            "This rule is retained for historical audit and to detect regressions.",
-        affected_stakeholders: ["system"],
-        scenario: "Future regression: someone removes the caller-enrichment contract docs from extractDemandInfo",
-        mitigation: "Keep the [caller-enriched] / [on-chain] annotations on DemandInfo fields. The matching engine must " +
-            "never query on-chain data directly — it is a pure scoring function over caller-injected data.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (ctx.constants_synced)
-            return null;
-        return { ...R_DEM_4_01.rule, evidence: "constants_synced=false (regression check)" };
-    },
-};
-const R_DEM_4_02 = {
-    rule: {
-        id: "R-DEM-08",
-        level: "INFO",
-        category: "knowledge",
-        title: "permission_set not exposed in SDK — RESOLVED (DE-D-2=A)",
-        description: "PREVIOUS GAP: The Move permission_set function (demand.move:286) was not exposed as a standalone " +
-            "function in the SDK's call/demand.ts. Callers could not change the Permission object bound to a Demand " +
-            "after creation.\n\n" +
-            "RESOLUTION (DE-D-2=A): permission_set is now exposed via the CallPermission.apply mechanism. The SDK " +
-            "wraps permission_set by routing it through CallPermission, which performs the assert_owner check on the " +
-            "old Permission and updates the Demand's bound permission. The Registrar's affiliation_change is called " +
-            "to migrate the affiliation from the old Permission to the new one.\n\n" +
-            "Permission indices for Demand (demand.move:20): 400=DEMAND_NEW, 401=DEMAND_DESCRIPTION, 402=DEMAND_LOCATION, " +
-            "404=DEMAND_GUARD, 405=DEMAND_REWARD, 406=DEMAND_FEEDBACK, 407=DEMAND_OWNER_RECEIVE, 408=DEMAND_UM.\n\n" +
-            "This rule is retained for historical audit and to detect regressions.",
-        affected_stakeholders: ["creator", "system"],
-        scenario: "Future regression: someone removes the CallPermission.apply path for permission_set",
-        mitigation: "Keep permission_set exposed via CallPermission.apply. The Move invariant: permission_set requires " +
-            "permission::assert_owner(old) and MUST call registrar::affiliation_change to migrate the affiliation.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (ctx.constants_synced)
-            return null;
-        return { ...R_DEM_4_02.rule, evidence: "constants_synced=false (regression check)" };
-    },
-};
-export const DEMAND_RISK_RULES = [
-    R_DEM_1_01,
-    R_DEM_1_02,
-    R_DEM_1_03,
-    R_DEM_2_01,
-    R_DEM_3_01,
-    R_DEM_2_02,
-    R_DEM_4_01,
-    R_DEM_4_02,
-];
-export function checkDemandRisks(ctx) {
-    const risks = [];
-    for (const rule of DEMAND_RISK_RULES) {
-        const r = rule.check(ctx);
-        if (r)
-            risks.push(r);
-    }
-    return risks;
-}
-export function getDemandRiskById(id) {
-    return DEMAND_RISK_RULES.find(r => r.rule.id === id)?.rule;
-}
+import{MAX_REWARD_COUNT,MAX_GUARD_COUNT_DEMAND}from'@wowok/wowok';const MAX_FEEDBACK_COUNT=0x14,R_DEM_1_01={'rule':{'id':'R-DEM-01','level':'HIGH','category':'structural','title':'rewards\x20count\x20exceeds\x20MAX_REWARD_COUNT\x20('+MAX_REWARD_COUNT+')','description':'The\x20\x27rewards\x27\x20vector\x20is\x20bounded\x20by\x20MAX_REWARD_COUNT='+MAX_REWARD_COUNT+'\x20(Move\x20source:\x20demand.move:21).\x20'+'Exceeding\x20this\x20limit\x20aborts\x20with\x20E_MAX_REWARD_COUNT_EXCEEDED\x20(1).\x20Each\x20reward\x20is\x20affiliated\x20via\x20the\x20Registrar,\x20'+'so\x20adding\x20a\x20reward\x20also\x20triggers\x20registrar::affiliation.\x20Use\x20reward_remove/reward_clear\x20to\x20free\x20slots\x20before\x20'+'adding\x20new\x20ones\x20if\x20the\x20limit\x20is\x20reached.','affected_stakeholders':['creator'],'scenario':'Caller\x20calls\x20reward_add\x20when\x2020\x20rewards\x20are\x20already\x20affiliated','mitigation':'Track\x20the\x20current\x20reward\x20count.\x20Before\x20adding\x20a\x20new\x20reward,\x20call\x20reward_remove\x20or\x20reward_clear\x20to\x20'+'free\x20a\x20slot.\x20Consider\x20consolidating\x20rewards\x20into\x20a\x20single\x20Reward\x20object\x20with\x20multiple\x20tiers\x20if\x20the\x20'+'\x20Demand\x20needs\x20to\x20offer\x20more\x20than\x2020\x20distinct\x20reward\x20paths.','related_move_error':'E_MAX_REWARD_COUNT_EXCEEDED\x20(1)','auto_fixable':![]},'check':a=>{if(a['reward_count']===undefined)return null;if(a['reward_count']<=MAX_REWARD_COUNT)return null;return{...R_DEM_1_01['rule'],'evidence':'reward_count='+a['reward_count']+',\x20limit='+MAX_REWARD_COUNT};}},R_DEM_1_02={'rule':{'id':'R-DEM-02','level':'HIGH','category':'structural','title':'guards\x20count\x20exceeds\x20MAX_GUARD_COUNT_DEMAND\x20('+MAX_GUARD_COUNT_DEMAND+')','description':'The\x20\x27guards\x27\x20vector\x20is\x20bounded\x20by\x20MAX_GUARD_COUNT_DEMAND='+MAX_GUARD_COUNT_DEMAND+'\x20(Move\x20source:\x20demand.move:22).\x20'+'Exceeding\x20this\x20limit\x20aborts\x20with\x20E_MAX_GUARD_COUNT_EXCEEDED\x20(2).\x20Each\x20guard\x20carries\x20an\x20optional\x20'+'service_identifier\x20(u8)\x20that\x20routes\x20present_with_passport\x20submissions\x20to\x20a\x20specific\x20Service\x20submission\x20'+'extracted\x20from\x20the\x20Passport.\x20Adding\x20a\x20duplicate\x20guard\x20updates\x20the\x20service_identifier\x20instead\x20of\x20pushing.','affected_stakeholders':['creator','presenter'],'scenario':'Caller\x20calls\x20guard_add\x20when\x2020\x20guards\x20are\x20already\x20affiliated\x20and\x20the\x20address\x20is\x20new','mitigation':'Track\x20the\x20current\x20guard\x20count.\x20Before\x20adding\x20a\x20new\x20guard,\x20call\x20guard_remove\x20or\x20guard_clear.\x20'+'If\x20updating\x20an\x20existing\x20guard\x27s\x20service_identifier,\x20call\x20guard_add\x20with\x20the\x20same\x20address\x20(it\x20updates\x20'+'in\x20place\x20rather\x20than\x20pushing).','related_move_error':'E_MAX_GUARD_COUNT_EXCEEDED\x20(2)','auto_fixable':![]},'check':a=>{if(a['guard_count']===undefined)return null;if(a['guard_count']<=MAX_GUARD_COUNT_DEMAND)return null;return{...R_DEM_1_02['rule'],'evidence':'guard_count='+a['guard_count']+',\x20limit='+MAX_GUARD_COUNT_DEMAND};}},R_DEM_1_03={'rule':{'id':'R-DEM-03','level':'MEDIUM','category':'structural','title':'feedback\x20batch\x20exceeds\x20MAX_FEEDBACK_COUNT\x20('+MAX_FEEDBACK_COUNT+')','description':'The\x20\x27feedback\x27\x20Move\x20function\x20(demand.move:352)\x20updates\x20ONE\x20presenter\x20per\x20call\x20(feedback_imp\x20iterates\x20'+('no\x20vector).\x20The\x20SDK\x20batches\x20multiple\x20feedback\x20calls\x20and\x20caps\x20the\x20batch\x20at\x20MAX_FEEDBACK_COUNT='+MAX_FEEDBACK_COUNT+'\x20')+'(SDK-only\x20limit,\x20NOT\x20in\x20onchain-constants.ts\x20—\x20Move\x20has\x20no\x20aggregate\x20feedback-count\x20check).\x20Exceeding\x20the\x20'+'SDK\x20batch\x20limit\x20causes\x20the\x20SDK\x20to\x20refuse\x20the\x20call\x20before\x20transaction\x20building.\x20Each\x20feedback\x20entry\x20writes\x20'+'a\x20String\x20(bounded\x20by\x20common::DESCRIPTION,\x204000\x20chars)\x20and\x20an\x20optional\x20u8\x20acceptance_score\x20to\x20a\x20presenter\x27s\x20'+'ServiceInfo\x20record.','affected_stakeholders':['creator'],'scenario':'Caller\x20attempts\x20to\x20submit\x2021\x20feedback\x20entries\x20in\x20a\x20single\x20SDK\x20call','mitigation':'Split\x20the\x20feedback\x20batch\x20into\x20chunks\x20of\x20≤\x2020\x20entries.\x20If\x20the\x20Demand\x20has\x20more\x20than\x2020\x20presenters\x20to\x20'+'give\x20feedback\x20on,\x20submit\x20multiple\x20transactions.\x20Consider\x20whether\x20bulk\x20feedback\x20is\x20appropriate\x20—\x20'+'individualized\x20feedback\x20per\x20presenter\x20is\x20often\x20more\x20meaningful.','auto_fixable':![]},'check':a=>{if(a['feedback_count']===undefined)return null;if(a['feedback_count']<=MAX_FEEDBACK_COUNT)return null;return{...R_DEM_1_03['rule'],'evidence':'feedback_count='+a['feedback_count']+',\x20limit='+MAX_FEEDBACK_COUNT};}},R_DEM_2_01={'rule':{'id':'R-DEM-04','level':'HIGH','category':'semantic','title':'present\x20called\x20without\x20passport\x20when\x20guards\x20vector\x20is\x20non-empty','description':'The\x20Move\x20present\x20function\x20(demand.move:100)\x20asserts\x20`vector::is_empty(&self.guards)`\x20and\x20aborts\x20with\x20'+'E_NEED_PASSPORT\x20(3)\x20if\x20the\x20guards\x20vector\x20is\x20non-empty.\x20When\x20guards\x20exist,\x20every\x20presenter\x20MUST\x20go\x20through\x20'+'present_with_passport\x20(or\x20present_service_with_passport),\x20which\x20routes\x20through\x20present_with_passport_imp.\x20'+'That\x20function\x20looks\x20up\x20the\x20specified\x20Guard\x20in\x20the\x20guards\x20vector,\x20calls\x20passport::result_for_guard\x20to\x20'+'verify\x20the\x20Passport,\x20and\x20(if\x20service_identifier\x20is\x20set)\x20extracts\x20the\x20submission\x20address\x20from\x20the\x20Passport.\x20'+'Calling\x20plain\x20`present`\x20on\x20a\x20guarded\x20Demand\x20always\x20aborts\x20—\x20there\x20is\x20no\x20fallback\x20path.','affected_stakeholders':['presenter','creator'],'scenario':'Demand\x20has\x202\x20guards;\x20a\x20presenter\x20calls\x20present()\x20instead\x20of\x20present_with_passport()','mitigation':'Before\x20presenting,\x20query\x20the\x20Demand\x27s\x20guards\x20vector.\x20If\x20non-empty,\x20use\x20present_with_passport\x20and\x20'+'supply\x20a\x20Guard\x20+\x20Passport.\x20The\x20Guard\x20address\x20must\x20already\x20be\x20in\x20the\x20guards\x20vector\x20(otherwise\x20'+'E_GUARD_NOT_FOUND\x20(4)\x20aborts).\x20If\x20service_identifier\x20is\x20set\x20on\x20the\x20matching\x20guard,\x20the\x20submission\x20'+'address\x20is\x20extracted\x20from\x20the\x20Passport\x20—\x20do\x20not\x20pass\x20a\x20separate\x20service\x20parameter.','related_move_error':'E_NEED_PASSPORT\x20(3)','auto_fixable':![]},'check':a=>{if(!a['using_present_without_passport'])return null;if(!a['guards_non_empty'])return null;return{...R_DEM_2_01['rule'],'evidence':'guards_non_empty=true,\x20using\x20present\x20(no\x20passport)'};}},R_DEM_3_01={'rule':{'id':'R-DEM-05','level':'INFO','category':'lifecycle','title':'um_set_imp\x20Registrar\x20dependency\x20leak\x20—\x20RESOLVED\x20(P-DEM-P1-1)','description':'PREVIOUS\x20RISK:\x20um_set_imp\x20(demand.move:139-147)\x20previously\x20set\x20self.um\x20to\x20the\x20new\x20Contact\x20address\x20'+'BEFORE\x20disaffiliating\x20the\x20old\x20um,\x20causing\x20the\x20old\x20Contact\x20to\x20retain\x20a\x20stale\x20affiliation\x20record\x20in\x20the\x20'+'Registrar.\x20Affiliation_change\x20was\x20not\x20called\x20for\x20the\x20old\x20um,\x20leading\x20to\x20a\x20Registrar\x20dependency\x20leak.\x0a\x0a'+'FIX\x20(P-DEM-P1-1):\x20um_set_imp\x20now\x20disaffiliates\x20the\x20old\x20um\x20via\x20registrar::disaffiliation\x20BEFORE\x20setting\x20'+'the\x20new\x20one.\x20The\x20new\x20um\x20is\x20then\x20affiliated\x20via\x20registrar::affiliation.\x20This\x20matches\x20the\x20pattern\x20used\x20'+'by\x20permission_set\x20(which\x20uses\x20affiliation_change).\x20um_none_imp\x20also\x20disaffiliates\x20before\x20clearing.\x0a\x0a'+'This\x20rule\x20is\x20retained\x20for\x20historical\x20audit\x20and\x20to\x20detect\x20regressions.','affected_stakeholders':['creator','system'],'scenario':'Future\x20regression:\x20someone\x20reorders\x20um_set_imp\x20to\x20set\x20new\x20before\x20disaffiliating\x20old','mitigation':'Keep\x20the\x20disaffiliate-then-set\x20ordering.\x20The\x20Move\x20invariant:\x20any\x20path\x20that\x20mutates\x20self.um\x20MUST\x20call\x20'+'registrar::disaffiliation\x20on\x20the\x20old\x20value\x20before\x20assigning\x20a\x20new\x20one.','auto_fixable':![]},'check':a=>{if(a['constants_synced'])return null;return{...R_DEM_3_01['rule'],'evidence':'constants_synced=false\x20(regression\x20check)'};}},R_DEM_2_02={'rule':{'id':'R-DEM-06','level':'INFO','category':'semantic','title':'guard_add_imp\x20service_identifier\x20type\x20check\x20skipped\x20on\x20early\x20return\x20—\x20RESOLVED\x20(P-DEM-P1-2)','description':'PREVIOUS\x20RISK:\x20guard_add_imp\x20(demand.move:213-242)\x20previously\x20had\x20the\x20service_identifier\x20type\x20check\x20'+'AFTER\x20the\x20early-return\x20path\x20that\x20updates\x20an\x20existing\x20guard\x27s\x20service_identifier.\x20When\x20a\x20guard\x20with\x20'+'the\x20same\x20address\x20already\x20existed,\x20the\x20function\x20returned\x20before\x20validating\x20the\x20new\x20service_identifier\x20'+'against\x20guard::get_submission_object_type.\x20This\x20allowed\x20setting\x20an\x20invalid\x20service_identifier\x20that\x20'+'would\x20later\x20fail\x20at\x20present_with_passport\x20time\x20with\x20E_INVALID_SERVICE_OBJECT_TYPE\x20(common.move:13).\x0a\x0a'+'FIX\x20(P-DEM-P1-2):\x20The\x20service_identifier\x20type\x20check\x20now\x20runs\x20FIRST\x20(demand.move:218-222),\x20BEFORE\x20the\x20'+'duplicate-detection\x20loop.\x20common::assert_service_object_type\x20is\x20called\x20for\x20any\x20non-None\x20service_identifier,\x20'+'ensuring\x20both\x20the\x20insert\x20and\x20update\x20paths\x20validate\x20the\x20type.\x0a\x0a'+'This\x20rule\x20is\x20retained\x20for\x20historical\x20audit\x20and\x20to\x20detect\x20regressions.','affected_stakeholders':['creator','presenter'],'scenario':'Future\x20regression:\x20someone\x20moves\x20the\x20type\x20check\x20back\x20to\x20after\x20the\x20duplicate-detection\x20loop','mitigation':'Keep\x20the\x20type\x20check\x20at\x20the\x20top\x20of\x20guard_add_imp.\x20The\x20Move\x20invariant:\x20any\x20service_identifier\x20provided\x20'+'to\x20guard_add\x20MUST\x20be\x20validated\x20via\x20guard::get_submission_object_type\x20+\x20common::assert_service_object_type\x20'+'BEFORE\x20any\x20mutation\x20of\x20the\x20guards\x20vector.','auto_fixable':![]},'check':a=>{if(a['constants_synced'])return null;return{...R_DEM_2_02['rule'],'evidence':'constants_synced=false\x20(regression\x20check)'};}},R_DEM_4_01={'rule':{'id':'R-DEM-07','level':'INFO','category':'knowledge','title':'extractDemandInfo\x20expects\x20non-existent\x20Move\x20fields\x20—\x20RESOLVED\x20(P-DEM-P1-3)','description':'PREVIOUS\x20RISK:\x20extractDemandInfo\x20in\x20demand-matching.ts\x20previously\x20read\x20fields\x20(tags,\x20maxPrice,\x20'+'scenario,\x20minTrustScore,\x20keywords)\x20that\x20do\x20NOT\x20exist\x20on\x20the\x20Move\x20Demand\x20struct.\x20The\x20Move\x20struct\x20only\x20'+'has:\x20description,\x20location,\x20rewards,\x20guards,\x20presenters,\x20um,\x20permission.\x20This\x20caused\x20the\x20matching\x20'+'engine\x20to\x20silently\x20produce\x20undefined\x20values\x20when\x20fed\x20raw\x20on-chain\x20query\x20results.\x0a\x0a'+'FIX\x20(P-DEM-P1-3):\x20extractDemandInfo\x20now\x20documents\x20the\x20caller-enrichment\x20contract.\x20Only\x20`location`\x20maps\x20'+'directly\x20to\x20the\x20Move\x20Demand\x20struct;\x20all\x20other\x20fields\x20(tags,\x20maxPrice,\x20scenario,\x20minTrustScore,\x20keywords)\x20'+'MUST\x20be\x20injected\x20by\x20the\x20caller\x20before\x20calling\x20matchDemand.\x20The\x20caller\x20is\x20responsible\x20for\x20sourcing\x20'+'this\x20data\x20from\x20Service\x20tags,\x20Reward\x20objects,\x20user\x20input,\x20or\x20NLP\x20on\x20the\x20description.\x0a\x0a'+'This\x20rule\x20is\x20retained\x20for\x20historical\x20audit\x20and\x20to\x20detect\x20regressions.','affected_stakeholders':['system'],'scenario':'Future\x20regression:\x20someone\x20removes\x20the\x20caller-enrichment\x20contract\x20docs\x20from\x20extractDemandInfo','mitigation':'Keep\x20the\x20[caller-enriched]\x20/\x20[on-chain]\x20annotations\x20on\x20DemandInfo\x20fields.\x20The\x20matching\x20engine\x20must\x20'+'never\x20query\x20on-chain\x20data\x20directly\x20—\x20it\x20is\x20a\x20pure\x20scoring\x20function\x20over\x20caller-injected\x20data.','auto_fixable':![]},'check':a=>{if(a['constants_synced'])return null;return{...R_DEM_4_01['rule'],'evidence':'constants_synced=false\x20(regression\x20check)'};}},R_DEM_4_02={'rule':{'id':'R-DEM-08','level':'INFO','category':'knowledge','title':'permission_set\x20not\x20exposed\x20in\x20SDK\x20—\x20RESOLVED\x20(DE-D-2=A)','description':'PREVIOUS\x20GAP:\x20The\x20Move\x20permission_set\x20function\x20(demand.move:286)\x20was\x20not\x20exposed\x20as\x20a\x20standalone\x20'+'function\x20in\x20the\x20SDK\x27s\x20call/demand.ts.\x20Callers\x20could\x20not\x20change\x20the\x20Permission\x20object\x20bound\x20to\x20a\x20Demand\x20'+'after\x20creation.\x0a\x0a'+'RESOLUTION\x20(DE-D-2=A):\x20permission_set\x20is\x20now\x20exposed\x20via\x20the\x20CallPermission.apply\x20mechanism.\x20The\x20SDK\x20'+'wraps\x20permission_set\x20by\x20routing\x20it\x20through\x20CallPermission,\x20which\x20performs\x20the\x20assert_owner\x20check\x20on\x20the\x20'+'old\x20Permission\x20and\x20updates\x20the\x20Demand\x27s\x20bound\x20permission.\x20The\x20Registrar\x27s\x20affiliation_change\x20is\x20called\x20'+'to\x20migrate\x20the\x20affiliation\x20from\x20the\x20old\x20Permission\x20to\x20the\x20new\x20one.\x0a\x0a'+'Permission\x20indices\x20for\x20Demand\x20(demand.move:20):\x20400=DEMAND_NEW,\x20401=DEMAND_DESCRIPTION,\x20402=DEMAND_LOCATION,\x20'+'404=DEMAND_GUARD,\x20405=DEMAND_REWARD,\x20406=DEMAND_FEEDBACK,\x20407=DEMAND_OWNER_RECEIVE,\x20408=DEMAND_UM.\x0a\x0a'+'This\x20rule\x20is\x20retained\x20for\x20historical\x20audit\x20and\x20to\x20detect\x20regressions.','affected_stakeholders':['creator','system'],'scenario':'Future\x20regression:\x20someone\x20removes\x20the\x20CallPermission.apply\x20path\x20for\x20permission_set','mitigation':'Keep\x20permission_set\x20exposed\x20via\x20CallPermission.apply.\x20The\x20Move\x20invariant:\x20permission_set\x20requires\x20'+'permission::assert_owner(old)\x20and\x20MUST\x20call\x20registrar::affiliation_change\x20to\x20migrate\x20the\x20affiliation.','auto_fixable':![]},'check':a=>{if(a['constants_synced'])return null;return{...R_DEM_4_02['rule'],'evidence':'constants_synced=false\x20(regression\x20check)'};}};export const DEMAND_RISK_RULES=[R_DEM_1_01,R_DEM_1_02,R_DEM_1_03,R_DEM_2_01,R_DEM_3_01,R_DEM_2_02,R_DEM_4_01,R_DEM_4_02];export function checkDemandRisks(a){const b=[];for(const c of DEMAND_RISK_RULES){const d=c['check'](a);if(d)b['push'](d);}return b;}export function getDemandRiskById(a){return DEMAND_RISK_RULES['find'](b=>b['rule']['id']===a)?.['rule'];}