@wowok/agent-mcp 2.7.0 → 2.7.2

package/dist/knowledge/machine-risk.js

@@ -1,670 +1 @@
-import { USER_DEFINED_PERM_INDEX_START, MAX_NODE_COUNT } from "./onchain-constants.js";
-export const MACHINE_RISK_RULES = [
-    {
-        id: "R-M1-01",
-        name: "No entry point",
-        category: "structural",
-        severity: "critical",
-        description: "Machine has no Pair with prev_node='' (no entry point). Workflow cannot start.",
-        detection: "Check if any pair has prev_node === ''",
-        recommendation: "Add at least one Pair with prev_node='' to serve as entry point.",
-        auto_fixable: false,
-        related_constraint: "MC-S-01",
-    },
-    {
-        id: "R-M1-02",
-        name: "No terminal node",
-        category: "structural",
-        severity: "critical",
-        description: "Machine has no terminal node (all nodes have outgoing Pairs). Workflow never completes.",
-        detection: "Check if any node has no outgoing Pair",
-        recommendation: "Designate at least one node as terminal (no outgoing Pair) and bind Allocator to it.",
-        auto_fixable: false,
-        related_constraint: "MC-S-02",
-    },
-    {
-        id: "R-M1-03",
-        name: "Dead-end node (non-terminal)",
-        category: "structural",
-        severity: "medium",
-        description: "Non-terminal node has no outgoing Pair. Workflow stalls at this node.",
-        detection: "Find nodes with no outgoing Pair that are not intended terminals",
-        recommendation: "Add outgoing Pair or designate as terminal with Allocator.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M1-04",
-        name: "Orphaned node",
-        category: "structural",
-        severity: "high",
-        description: "Node has no incoming Pair (except entry). Unreachable.",
-        detection: "Find non-entry nodes with no incoming Pair",
-        recommendation: "Add Pair from existing node to this orphaned node, or remove it.",
-        auto_fixable: false,
-        related_constraint: "MC-S-03",
-    },
-    {
-        id: "R-M1-05",
-        name: "Dead branch (competing Pair always loses)",
-        category: "structural",
-        severity: "high",
-        description: "A competing Pair's threshold can never be met because users always prefer another path.",
-        detection: "Analyze threshold achievability across competing Pairs",
-        recommendation: "Make thresholds balanced, or remove the dead branch.",
-        auto_fixable: false,
-        related_constraint: "MC-S-04",
-    },
-    {
-        id: "R-M1-06",
-        name: "Cycle in DAG",
-        category: "structural",
-        severity: "critical",
-        description: "Workflow has a cycle. Nodes reference each other circularly.",
-        detection: "DFS cycle detection",
-        recommendation: "Break the cycle by removing one Pair.",
-        auto_fixable: false,
-        related_constraint: "MC-S-05",
-    },
-    {
-        id: "R-M1-07",
-        name: "Exceeds MAX_NODE_COUNT (100)",
-        category: "structural",
-        severity: "critical",
-        description: "Node count exceeds on-chain limit. Publish will fail.",
-        detection: `nodes.length > ${MAX_NODE_COUNT}`,
-        recommendation: "Reduce node count or split into multiple Machines.",
-        auto_fixable: false,
-        related_constraint: "MC-C-01",
-    },
-    {
-        id: "R-M1-08",
-        name: "Exceeds MAX_NODE_PAIR_COUNT (40)",
-        category: "structural",
-        severity: "high",
-        description: "A single node's Pairs exceed on-chain limit. Publish will fail.",
-        detection: "Find node where pairs.length > 40",
-        recommendation: "Split node or simplify branches to reduce Pair count per node.",
-        auto_fixable: false,
-        related_constraint: "MC-C-02",
-    },
-    {
-        id: "R-M1-09",
-        name: "Exceeds MAX_FORWARD_COUNT (20)",
-        category: "structural",
-        severity: "high",
-        description: "A single Pair's Forwards exceed on-chain limit. Publish will fail.",
-        detection: "Find Pair where forwards.length > 20",
-        recommendation: "Split Pair or merge Forwards to reduce Forward count per Pair.",
-        auto_fixable: false,
-        related_constraint: "MC-C-03",
-    },
-    {
-        id: "R-M1-10",
-        name: "Duplicate node name",
-        category: "structural",
-        severity: "critical",
-        description: "Two nodes have the same name. On-chain will reject.",
-        detection: "Find duplicate names in nodes array",
-        recommendation: "Rename one of the duplicates.",
-        auto_fixable: false,
-        related_constraint: "MC-C-04",
-    },
-    {
-        id: "R-M1-11",
-        name: "Dispute anti-pattern — machine illegally models dispute flow",
-        category: "structural",
-        severity: "critical",
-        description: "Machine contains nodes named 'disputed', 'refunded', 'arb', 'arbitration', " +
-            "'dispute', or 'refund'. This is a CRITICAL design anti-pattern because " +
-            "dispute is INDEPENDENT of the machine workflow. Dispute flows through: " +
-            "Order → Arbitration.dispute() → Arb object → arbitration() ruling → " +
-            "arb_withdraw by order holder. Arbitrators are configured in " +
-            "Arbitration.voting_guard, NOT in Permission. Merchants who model " +
-            "dispute in the machine (e.g., 'disputed → refunded' forward guarded " +
-            "by Permission index 1500) create dead-end paths because no one has " +
-            "Permission 1500 — arbitrators are NOT Permission holders.",
-        detection: "Match node names against regex /(^|_)(disputed?|refund(?:ed)?|arbitration|arb)(_|$)/i " +
-            "(catches both exact names like 'refunded' and compound fund-flow terminals like " +
-            "'deposit_refunded'/'deposit_deducted'; business states like 'return_approved'/" +
-            "'damage_confirmed'/'cancelled'/'returned' do NOT match)",
-        recommendation: "Remove all dispute/refund nodes from the machine. Instead: (1) bind an " +
-            "Arbitration object to the Service via Service.arbitrations, (2) configure " +
-            "arbitrators via Arbitration.voting_guard_add, (3) deposit compensation_fund " +
-            "to the Service. Disputes are then filed via arbitration::dispute(order, " +
-            "arbitration) — completely independent of the machine workflow.",
-        auto_fixable: false,
-        related_constraint: "dispute_independence_principle",
-    },
-    {
-        id: "R-M2-01",
-        name: "Guard not created",
-        category: "guard_integration",
-        severity: "critical",
-        description: "Forward references a Guard that is not yet created on-chain. Forward execution will fail Guard verification.",
-        detection: "Check forward.guard against published_guards set",
-        recommendation: "Create the Guard object before publishing this Machine.",
-        auto_fixable: false,
-        related_constraint: "MC-C-09",
-    },
-    {
-        id: "R-M2-02",
-        name: "Guard not tested via gen_passport",
-        category: "guard_integration",
-        severity: "high",
-        description: "Guard has not been tested via gen_passport. Guard may have bugs, cannot be fixed after publish.",
-        detection: "Check testnet test records for this Guard",
-        recommendation: "Run gen_passport on testnet before binding to Machine.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M2-03",
-        name: "Guard + Machine immutability deadlock",
-        category: "guard_integration",
-        severity: "critical",
-        description: "After Machine publish, a Guard bug is discovered. Guard is immutable (cannot be fixed), Machine is immutable (cannot be rebound).",
-        detection: "Verify all Guards tested before Machine publish",
-        recommendation: "Keep Machine unpublished until all Guards are verified.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M2-04",
-        name: "retained_submission index mismatch",
-        category: "guard_integration",
-        severity: "high",
-        description: "Forward's retained_submission key does not correspond to Guard table b_submission=true entry. Retained data fails or is incorrect.",
-        detection: "Cross-check forward.retained_submission against Guard table entries",
-        recommendation: "Align retained_submission key with Guard table b_submission=true identifier.",
-        auto_fixable: true,
-        related_constraint: "MC-C-11",
-    },
-    {
-        id: "R-M2-05",
-        name: "Guard reentry risk",
-        category: "guard_integration",
-        severity: "high",
-        description: "Guard lacks anti-reentry mechanism (see Guard R-X1-14). Risk of duplicate execution or vote manipulation.",
-        detection: "For each Guard scene, verify anti-reentry Guard is configured (see Guard semantic layer R-X1-14)",
-        recommendation: "Add anti-reentry Guard for each scenario (see Guard semantic layer R-X1-14).",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M2-06",
-        name: "Guard scene mismatch",
-        category: "guard_integration",
-        severity: "medium",
-        description: "Forward's bound Guard scene does not match Forward's business (e.g., Forward uses reward_guard instead of machine_forward_guard).",
-        detection: "Cross-check Guard scene against Forward business purpose",
-        recommendation: "Use the correct Guard scene (machine_forward_guard).",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M2-07",
-        name: "Cross-Machine Guard dependency cycle",
-        category: "guard_integration",
-        severity: "critical",
-        description: "Machine A depends on Machine B (via Guard), B depends on A. Circular dependency.",
-        detection: "Identify cross-Machine Guard references and detect cycles",
-        recommendation: "Ensure cross-Machine dependencies are unidirectional.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M2-08",
-        name: "Guard references unpublished object",
-        category: "guard_integration",
-        severity: "high",
-        description: "Guard table references an object (e.g., Service) that is not yet published.",
-        detection: "Cross-check Guard table object references against published objects set",
-        recommendation: "Use P16 circular reference pattern (name instead of address), or publish referenced objects first.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M3-01",
-        name: "Forward without permission",
-        category: "permission",
-        severity: "critical",
-        description: "Forward has neither namedOperator nor permissionIndex. Cannot be executed.",
-        detection: "Check each forward has at least one of namedOperator or permissionIndex",
-        recommendation: "Set namedOperator='' for OrderHolder, or set permissionIndex.",
-        auto_fixable: false,
-        related_constraint: "MC-C-07",
-    },
-    {
-        id: "R-M3-02",
-        name: "permissionIndex out of bounds",
-        category: "permission",
-        severity: "critical",
-        description: "Forward's permissionIndex >= Permission.indices.length. Execution will fail.",
-        detection: "Check permission_index < Permission.indices.length",
-        recommendation: "Use a valid permission index or extend Permission.indices.",
-        auto_fixable: false,
-        related_constraint: "MC-C-08",
-    },
-    {
-        id: "R-M3-03",
-        name: "Permission rotation failure",
-        category: "permission",
-        severity: "high",
-        description: "Permission object updated, indices order changed. Original permissionIndex now points to wrong permission.",
-        detection: "Detect Permission object update that reorders indices",
-        recommendation: "Use custom Permission; document index meanings; avoid frequent Permission updates.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M3-04",
-        name: "OrderHolder misuse",
-        category: "permission",
-        severity: "medium",
-        description: "namedOperator='' used in non-customer-operation scenarios. Non-intended personnel gain operation permission.",
-        detection: "Find Forwards with namedOperator='' on non-customer-operation nodes",
-        recommendation: "Clarify ''=OrderHolder (customer), not 'anyone'. Use namedOperator for specific roles.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M3-05",
-        name: "NamedOperator not assigned at Progress creation",
-        category: "permission",
-        severity: "high",
-        description: "Forward expects namedOperator role but Progress doesn't have it assigned. " +
-            "Note: MCP API layer supports progress_new.progress_namedOperator (SDK translates to namedOperator_add), " +
-            "but Move layer progress::new does NOT accept it (see 06 §14.5).",
-        detection: "Verify progress_namedOperator is provided in Progress creation",
-        recommendation: "Pass progress_namedOperator in progress_new, or call namedOperator_add separately.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M3-06",
-        name: "Permission game imbalance",
-        category: "permission",
-        severity: "medium",
-        description: "One party has excessive permission, can unilaterally advance workflow. Game theory imbalance.",
-        detection: "Analyze permission distribution across parties",
-        recommendation: "Use dual-signature (threshold=2) or multi-signature mechanism to balance power.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M3-07",
-        name: "Permission combination OR semantic misuse",
-        category: "permission",
-        severity: "medium",
-        description: "Both namedOperator and permissionIndex set, but OR semantic not understood. More people than expected can execute Forward.",
-        detection: "Find Forwards with both namedOperator and permissionIndex set",
-        recommendation: "Clarify that when both permissions are non-null, it is OR relation (either can execute).",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M3-08",
-        name: "permissionIndex below USER_DEFINED_PERM_INDEX_START (1000)",
-        category: "permission",
-        severity: "critical",
-        description: "Forward's permissionIndex < 1000. On-chain constant USER_DEFINED_PERM_INDEX_START = 1000 " +
-            "in permission.move reserves indexes 0-999 for built-in permissions. Using index < 1000 " +
-            "causes confusion with built-in permissions and is a hard on-chain constraint (see doc 06 §4.4).",
-        detection: "Check each forward with permission_index < 1000",
-        recommendation: "Use permission_index >= 1000 (e.g., 1000, 1001, 1002, ...). Reserve 0-999 for built-in permissions.",
-        auto_fixable: false,
-        related_constraint: "MC-C-08",
-    },
-    {
-        id: "R-M4-01",
-        name: "No backup before publish",
-        category: "immutability",
-        severity: "high",
-        description: "machineNode2file export not created before publish. Cannot restore if publish fails.",
-        detection: "Check backup_created flag",
-        recommendation: "Run machineNode2file before publish to create backup.",
-        auto_fixable: true,
-        related_constraint: "MC-P-02",
-    },
-    {
-        id: "R-M4-02",
-        name: "No testnet verification before mainnet",
-        category: "immutability",
-        severity: "medium",
-        description: "Directly publishing to mainnet without testnet verification. Potential bugs may cause fund loss.",
-        detection: "Check network === 'mainnet' && !testnet_test_passed",
-        recommendation: "Test on testnet first. Verify Progress runs end-to-end.",
-        auto_fixable: false,
-        related_constraint: "MC-P-03",
-    },
-    {
-        id: "R-M4-03",
-        name: "Guards not all created before publish",
-        category: "immutability",
-        severity: "critical",
-        description: "Some Forward.guard is still null, but design requires Guard. Cannot add Guard after publish (immutability deadlock).",
-        detection: "Check if all required Guards are created and bound",
-        recommendation: "Create and bind all Guards before publishing Machine.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M4-04",
-        name: "Publish order incorrect",
-        category: "immutability",
-        severity: "critical",
-        description: "Attempting to publish Machine before creating Guards. Guards cannot bind to already-published Machine.",
-        detection: "Verify dependency order: Permission → Machine(unpublished) → Guard → bind → publish",
-        recommendation: "Follow dependency order: Permission → Machine(unpublished) → Guard → bind → publish.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M4-05",
-        name: "Allocation not configured",
-        category: "immutability",
-        severity: "medium",
-        description: "Terminal node not mapped to Allocator. Funds cannot be distributed after workflow completes.",
-        detection: "Check if terminal nodes have Allocator mapping",
-        recommendation: "Configure Allocator for each terminal node.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M4-06",
-        name: "clear operation without backup",
-        category: "immutability",
-        severity: "high",
-        description: "Executing node clear before exporting backup. All node data lost, cannot recover.",
-        detection: "Check if machineNode2file backup created before clear operation",
-        recommendation: "Run machineNode2file backup before any clear operation.",
-        auto_fixable: true,
-    },
-    {
-        id: "R-M5-01",
-        name: "Service not created",
-        category: "environment",
-        severity: "high",
-        description: "Machine design complete but Service not created. Machine cannot bind to Service.",
-        detection: "Check if Service object is in published_services set",
-        recommendation: "Create Service first, then design/publish Machine.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M5-02",
-        name: "Permission object mismatch",
-        category: "environment",
-        severity: "high",
-        description: "Machine's Permission differs from Service's Permission. Permission organization inconsistent, may cause operation failure.",
-        detection: "Cross-check Machine's Permission against Service's Permission",
-        recommendation: "Use the same Permission for Machine and Service (or explicitly document different organizations).",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M5-03",
-        name: "Allocation configuration incomplete",
-        category: "environment",
-        severity: "high",
-        description: "Service's order_allocators not configured or misconfigured. Terminal node funds cannot be distributed.",
-        detection: "Check if Service.order_allocators is configured for each terminal node",
-        recommendation: "Configure Service.order_allocators, one Allocator per terminal node.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M5-04",
-        name: "Reward object not created",
-        category: "environment",
-        severity: "medium",
-        description: "Reward incentive scenario referenced but Reward object not created.",
-        detection: "Check if Reward object is in published_rewards set",
-        recommendation: "Create Reward object first, then design Guard.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M5-05",
-        name: "Arbitration object not created",
-        category: "environment",
-        severity: "medium",
-        description: "Arbitration scenario referenced but Arbitration object not created.",
-        detection: "Check if Arbitration object is in published_arbitrations set",
-        recommendation: "Create Arbitration object first.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M5-06",
-        name: "Cross-Machine dependency not published",
-        category: "environment",
-        severity: "critical",
-        description: "Machine A depends on Machine B, but B is not published. Guard query for Machine B's Progress will fail. " +
-            "Dependency verification: indirect via progress::new -> assert_published (see 06 §14.6).",
-        detection: "Check machine_ref against published_machines set",
-        recommendation: "Ensure upstream Machine is published first.",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M5-07",
-        name: "Repository not created",
-        category: "environment",
-        severity: "medium",
-        description: "Guard references Repository but not created. Guard query will fail.",
-        detection: "Check repository_ref against published repositories set",
-        recommendation: "Create and publish Repository first. Note: consensus_repositories is declarative-only (see 06 §14.4).",
-        auto_fixable: false,
-    },
-    {
-        id: "R-M5-08",
-        name: "Object dependency table incomplete",
-        category: "environment",
-        severity: "low",
-        description: "Project object dependency table missing some objects. Design decisions based on incomplete information.",
-        detection: "Scan project environment for missing object references",
-        recommendation: "Use machine-context.ts to scan complete project environment.",
-        auto_fixable: false,
-    },
-];
-export function assessMachineRisks(machine, context) {
-    const detected = [];
-    detected.push(...checkStructuralRisks(machine));
-    detected.push(...checkGuardIntegrationRisks(machine, context));
-    detected.push(...checkPermissionRisks(machine));
-    detected.push(...checkImmutabilityRisks(machine, context));
-    detected.push(...checkEnvironmentRisks(machine, context));
-    const summary = {
-        critical: detected.filter((r) => r.severity === "critical").length,
-        high: detected.filter((r) => r.severity === "high").length,
-        medium: detected.filter((r) => r.severity === "medium").length,
-        low: detected.filter((r) => r.severity === "low").length,
-    };
-    let overall_level = "low";
-    if (summary.critical > 0)
-        overall_level = "critical";
-    else if (summary.high > 0)
-        overall_level = "high";
-    else if (summary.medium > 0)
-        overall_level = "medium";
-    else if (summary.low > 0)
-        overall_level = "low";
-    let recommendation;
-    if (summary.critical > 0) {
-        recommendation = "do_not_publish";
-    }
-    else if (summary.high > 2) {
-        recommendation = "fix_first";
-    }
-    else {
-        recommendation = "publish";
-    }
-    return {
-        overall_level,
-        detected_risks: detected,
-        summary,
-        recommendation,
-    };
-}
-function checkStructuralRisks(machine) {
-    const risks = [];
-    const hasEntry = machine.pairs.some((p) => p.prev_node === "");
-    if (!hasEntry) {
-        risks.push(makeRisk("R-M1-01", "No Pair with prev_node='' found. Workflow cannot start."));
-    }
-    const allPrevNodesForTerminal = new Set(machine.pairs.map((p) => p.prev_node).filter((n) => n !== ""));
-    const allNodes = new Set(machine.nodes.map((n) => n.name));
-    const terminals = [...allNodes].filter((n) => !allPrevNodesForTerminal.has(n));
-    if (terminals.length === 0) {
-        risks.push(makeRisk("R-M1-02", "No terminal node found. Workflow never completes."));
-    }
-    const entryNodes = new Set(machine.pairs.filter((p) => p.prev_node === "").map((p) => p.next_node));
-    const allPrevNodes = new Set(machine.pairs.map((p) => p.prev_node).filter((n) => n !== ""));
-    for (const node of machine.nodes) {
-        if (!entryNodes.has(node.name) && !allPrevNodes.has(node.name)) {
-            const hasIncoming = machine.pairs.some((p) => p.next_node === node.name);
-            if (!hasIncoming) {
-                risks.push(makeRisk("R-M1-04", `Node "${node.name}" is orphaned (no incoming Pair).`));
-            }
-        }
-    }
-    if (machine.nodes.length > MAX_NODE_COUNT) {
-        risks.push(makeRisk("R-M1-07", `Node count ${machine.nodes.length} exceeds MAX_NODE_COUNT (${MAX_NODE_COUNT}).`));
-    }
-    const pairsPerNode = new Map();
-    for (const p of machine.pairs) {
-        pairsPerNode.set(p.next_node, (pairsPerNode.get(p.next_node) ?? 0) + 1);
-    }
-    for (const [nodeName, pairCount] of pairsPerNode) {
-        if (pairCount > 40) {
-            risks.push(makeRisk("R-M1-08", `Node "${nodeName}" has ${pairCount} Pairs, exceeds MAX_NODE_PAIR_COUNT (40).`));
-        }
-    }
-    for (const pair of machine.pairs) {
-        if (pair.forwards.length > 20) {
-            risks.push(makeRisk("R-M1-09", `Pair (${pair.prev_node} -> ${pair.next_node}) has ${pair.forwards.length} Forwards, exceeds MAX_FORWARD_COUNT (20).`));
-        }
-    }
-    const nodeNames = machine.nodes.map((n) => n.name);
-    const duplicates = nodeNames.filter((name, idx) => nodeNames.indexOf(name) !== idx);
-    if (duplicates.length > 0) {
-        risks.push(makeRisk("R-M1-10", `Duplicate node names: ${[...new Set(duplicates)].join(", ")}`));
-    }
-    return risks;
-}
-function checkGuardIntegrationRisks(machine, context) {
-    const risks = [];
-    for (const pair of machine.pairs) {
-        for (const fwd of pair.forwards) {
-            if (fwd.guard && !context.published_guards.has(fwd.guard)) {
-                risks.push(makeRisk("R-M2-01", `Forward "${fwd.name}" references Guard "${fwd.guard}" not in published_guards.`));
-            }
-            if (fwd.retained_submission && !fwd.guard) {
-                risks.push(makeRisk("R-M2-04", `Forward "${fwd.name}" has retained_submission but no Guard. retained_submission requires a Guard.`));
-            }
-        }
-    }
-    return risks;
-}
-function checkPermissionRisks(machine) {
-    const risks = [];
-    for (const pair of machine.pairs) {
-        for (const fwd of pair.forwards) {
-            const hasNamed = fwd.named_operator !== undefined && fwd.named_operator !== null;
-            const hasPerm = fwd.permission_index !== undefined && fwd.permission_index !== null;
-            if (!hasNamed && !hasPerm) {
-                risks.push(makeRisk("R-M3-01", `Forward "${fwd.name}" in Pair (${pair.prev_node} -> ${pair.next_node}) has no permission.`));
-            }
-        }
-    }
-    for (const pair of machine.pairs) {
-        for (const fwd of pair.forwards) {
-            const hasNamed = fwd.named_operator !== undefined && fwd.named_operator !== null;
-            const hasPerm = fwd.permission_index !== undefined && fwd.permission_index !== null;
-            if (hasNamed && hasPerm) {
-                risks.push(makeRisk("R-M3-07", `Forward "${fwd.name}" in Pair (${pair.prev_node} -> ${pair.next_node}) has both namedOperator and permissionIndex (OR semantic).`));
-            }
-        }
-    }
-    for (const pair of machine.pairs) {
-        for (const fwd of pair.forwards) {
-            if (fwd.permission_index !== undefined &&
-                fwd.permission_index !== null &&
-                fwd.permission_index < USER_DEFINED_PERM_INDEX_START) {
-                risks.push(makeRisk("R-M3-08", `Forward "${fwd.name}" in Pair (${pair.prev_node} -> ${pair.next_node}) ` +
-                    `has permission_index=${fwd.permission_index} < ${USER_DEFINED_PERM_INDEX_START}. ` +
-                    `Indexes 0-999 are reserved for built-in permissions.`));
-            }
-        }
-    }
-    return risks;
-}
-function checkImmutabilityRisks(machine, context) {
-    const risks = [];
-    if (context.network === "mainnet" && !context.testnet_test_passed) {
-        risks.push(makeRisk("R-M4-02", "Mainnet publish attempted without testnet test passing."));
-    }
-    const referencedGuards = new Set();
-    for (const pair of machine.pairs) {
-        for (const fwd of pair.forwards) {
-            if (fwd.guard)
-                referencedGuards.add(fwd.guard);
-        }
-    }
-    const missingGuards = [...referencedGuards].filter((g) => !context.published_guards.has(g));
-    if (missingGuards.length > 0) {
-        risks.push(makeRisk("R-M4-03", `Guards not all created before publish. Missing: ${missingGuards.join(", ")}`));
-    }
-    return risks;
-}
-function checkEnvironmentRisks(machine, context) {
-    const risks = [];
-    const referencedGuards = new Set();
-    for (const pair of machine.pairs) {
-        for (const fwd of pair.forwards) {
-            if (fwd.guard)
-                referencedGuards.add(fwd.guard);
-        }
-    }
-    const missingGuards = [...referencedGuards].filter((g) => !context.published_guards.has(g));
-    if (missingGuards.length > 0) {
-        risks.push(makeRisk("R-M5-08", `Object dependency table incomplete. Missing Guards: ${missingGuards.join(", ")}`));
-    }
-    return risks;
-}
-function makeRisk(ruleId, detail) {
-    const rule = MACHINE_RISK_RULES.find((r) => r.id === ruleId);
-    if (!rule) {
-        return {
-            rule_id: ruleId,
-            name: "Unknown",
-            severity: "low",
-            detail,
-            recommendation: "Investigate manually.",
-            auto_fixable: false,
-        };
-    }
-    return {
-        rule_id: rule.id,
-        name: rule.name,
-        severity: rule.severity,
-        detail,
-        recommendation: rule.recommendation,
-        auto_fixable: rule.auto_fixable,
-    };
-}
-export function getRiskRulesByCategory(category) {
-    return MACHINE_RISK_RULES.filter((r) => r.category === category);
-}
-export function getRiskRuleById(id) {
-    return MACHINE_RISK_RULES.find((r) => r.id === id);
-}
-export function getRiskRulesBySeverity(severity) {
-    return MACHINE_RISK_RULES.filter((r) => r.severity === severity);
-}
-export function getAutoFixableRules() {
-    return MACHINE_RISK_RULES.filter((r) => r.auto_fixable);
-}
-export function getRiskSummary(assessment) {
-    const lines = [
-        `Overall Risk Level: ${assessment.overall_level.toUpperCase()}`,
-        `Recommendation: ${assessment.recommendation}`,
-        "",
-        "Summary:",
-        `  Critical: ${assessment.summary.critical}`,
-        `  High:     ${assessment.summary.high}`,
-        `  Medium:   ${assessment.summary.medium}`,
-        `  Low:      ${assessment.summary.low}`,
-        "",
-        "Detected Risks:",
-    ];
-    for (const risk of assessment.detected_risks) {
-        lines.push(`  [${risk.severity.toUpperCase()}] ${risk.rule_id}: ${risk.name}`);
-        lines.push(`    Detail: ${risk.detail}`);
-        lines.push(`    Fix: ${risk.recommendation}`);
-    }
-    return lines.join("\n");
-}
-export const MACHINE_RISK_VERSION = "1.0.0";
-export const MACHINE_RISK_RULES_COUNT = MACHINE_RISK_RULES.length;
+import{USER_DEFINED_PERM_INDEX_START,MAX_NODE_COUNT}from'./onchain-constants.js';export const MACHINE_RISK_RULES=[{'id':'R-M1-01','name':'No\x20entry\x20point','category':'structural','severity':'critical','description':'Machine\x20has\x20no\x20Pair\x20with\x20prev_node=\x27\x27\x20(no\x20entry\x20point).\x20Workflow\x20cannot\x20start.','detection':'Check\x20if\x20any\x20pair\x20has\x20prev_node\x20===\x20\x27\x27','recommendation':'Add\x20at\x20least\x20one\x20Pair\x20with\x20prev_node=\x27\x27\x20to\x20serve\x20as\x20entry\x20point.','auto_fixable':![],'related_constraint':'MC-S-01'},{'id':'R-M1-02','name':'No\x20terminal\x20node','category':'structural','severity':'critical','description':'Machine\x20has\x20no\x20terminal\x20node\x20(all\x20nodes\x20have\x20outgoing\x20Pairs).\x20Workflow\x20never\x20completes.','detection':'Check\x20if\x20any\x20node\x20has\x20no\x20outgoing\x20Pair','recommendation':'Designate\x20at\x20least\x20one\x20node\x20as\x20terminal\x20(no\x20outgoing\x20Pair)\x20and\x20bind\x20Allocator\x20to\x20it.','auto_fixable':![],'related_constraint':'MC-S-02'},{'id':'R-M1-03','name':'Dead-end\x20node\x20(non-terminal)','category':'structural','severity':'medium','description':'Non-terminal\x20node\x20has\x20no\x20outgoing\x20Pair.\x20Workflow\x20stalls\x20at\x20this\x20node.','detection':'Find\x20nodes\x20with\x20no\x20outgoing\x20Pair\x20that\x20are\x20not\x20intended\x20terminals','recommendation':'Add\x20outgoing\x20Pair\x20or\x20designate\x20as\x20terminal\x20with\x20Allocator.','auto_fixable':![]},{'id':'R-M1-04','name':'Orphaned\x20node','category':'structural','severity':'high','description':'Node\x20has\x20no\x20incoming\x20Pair\x20(except\x20entry).\x20Unreachable.','detection':'Find\x20non-entry\x20nodes\x20with\x20no\x20incoming\x20Pair','recommendation':'Add\x20Pair\x20from\x20existing\x20node\x20to\x20this\x20orphaned\x20node,\x20or\x20remove\x20it.','auto_fixable':![],'related_constraint':'MC-S-03'},{'id':'R-M1-05','name':'Dead\x20branch\x20(competing\x20Pair\x20always\x20loses)','category':'structural','severity':'high','description':'A\x20competing\x20Pair\x27s\x20threshold\x20can\x20never\x20be\x20met\x20because\x20users\x20always\x20prefer\x20another\x20path.','detection':'Analyze\x20threshold\x20achievability\x20across\x20competing\x20Pairs','recommendation':'Make\x20thresholds\x20balanced,\x20or\x20remove\x20the\x20dead\x20branch.','auto_fixable':![],'related_constraint':'MC-S-04'},{'id':'R-M1-06','name':'Cycle\x20in\x20DAG','category':'structural','severity':'critical','description':'Workflow\x20has\x20a\x20cycle.\x20Nodes\x20reference\x20each\x20other\x20circularly.','detection':'DFS\x20cycle\x20detection','recommendation':'Break\x20the\x20cycle\x20by\x20removing\x20one\x20Pair.','auto_fixable':![],'related_constraint':'MC-S-05'},{'id':'R-M1-07','name':'Exceeds\x20MAX_NODE_COUNT\x20(100)','category':'structural','severity':'critical','description':'Node\x20count\x20exceeds\x20on-chain\x20limit.\x20Publish\x20will\x20fail.','detection':'nodes.length\x20>\x20'+MAX_NODE_COUNT,'recommendation':'Reduce\x20node\x20count\x20or\x20split\x20into\x20multiple\x20Machines.','auto_fixable':![],'related_constraint':'MC-C-01'},{'id':'R-M1-08','name':'Exceeds\x20MAX_NODE_PAIR_COUNT\x20(40)','category':'structural','severity':'high','description':'A\x20single\x20node\x27s\x20Pairs\x20exceed\x20on-chain\x20limit.\x20Publish\x20will\x20fail.','detection':'Find\x20node\x20where\x20pairs.length\x20>\x2040','recommendation':'Split\x20node\x20or\x20simplify\x20branches\x20to\x20reduce\x20Pair\x20count\x20per\x20node.','auto_fixable':![],'related_constraint':'MC-C-02'},{'id':'R-M1-09','name':'Exceeds\x20MAX_FORWARD_COUNT\x20(20)','category':'structural','severity':'high','description':'A\x20single\x20Pair\x27s\x20Forwards\x20exceed\x20on-chain\x20limit.\x20Publish\x20will\x20fail.','detection':'Find\x20Pair\x20where\x20forwards.length\x20>\x2020','recommendation':'Split\x20Pair\x20or\x20merge\x20Forwards\x20to\x20reduce\x20Forward\x20count\x20per\x20Pair.','auto_fixable':![],'related_constraint':'MC-C-03'},{'id':'R-M1-10','name':'Duplicate\x20node\x20name','category':'structural','severity':'critical','description':'Two\x20nodes\x20have\x20the\x20same\x20name.\x20On-chain\x20will\x20reject.','detection':'Find\x20duplicate\x20names\x20in\x20nodes\x20array','recommendation':'Rename\x20one\x20of\x20the\x20duplicates.','auto_fixable':![],'related_constraint':'MC-C-04'},{'id':'R-M1-11','name':'Dispute\x20anti-pattern\x20—\x20machine\x20illegally\x20models\x20dispute\x20flow','category':'structural','severity':'critical','description':'Machine\x20contains\x20nodes\x20named\x20\x27disputed\x27,\x20\x27refunded\x27,\x20\x27arb\x27,\x20\x27arbitration\x27,\x20'+'\x27dispute\x27,\x20or\x20\x27refund\x27.\x20This\x20is\x20a\x20CRITICAL\x20design\x20anti-pattern\x20because\x20'+'dispute\x20is\x20INDEPENDENT\x20of\x20the\x20machine\x20workflow.\x20Dispute\x20flows\x20through:\x20'+'Order\x20→\x20Arbitration.dispute()\x20→\x20Arb\x20object\x20→\x20arbitration()\x20ruling\x20→\x20'+'arb_withdraw\x20by\x20order\x20holder.\x20Arbitrators\x20are\x20configured\x20in\x20'+'Arbitration.voting_guard,\x20NOT\x20in\x20Permission.\x20Merchants\x20who\x20model\x20'+'dispute\x20in\x20the\x20machine\x20(e.g.,\x20\x27disputed\x20→\x20refunded\x27\x20forward\x20guarded\x20'+'by\x20Permission\x20index\x201500)\x20create\x20dead-end\x20paths\x20because\x20no\x20one\x20has\x20'+'Permission\x201500\x20—\x20arbitrators\x20are\x20NOT\x20Permission\x20holders.','detection':'Match\x20node\x20names\x20against\x20regex\x20/(^|_)(disputed?|refund(?:ed)?|arbitration|arb)(_|$)/i\x20'+'(catches\x20both\x20exact\x20names\x20like\x20\x27refunded\x27\x20and\x20compound\x20fund-flow\x20terminals\x20like\x20'+'\x27deposit_refunded\x27/\x27deposit_deducted\x27;\x20business\x20states\x20like\x20\x27return_approved\x27/'+'\x27damage_confirmed\x27/\x27cancelled\x27/\x27returned\x27\x20do\x20NOT\x20match)','recommendation':'Remove\x20all\x20dispute/refund\x20nodes\x20from\x20the\x20machine.\x20Instead:\x20(1)\x20bind\x20an\x20'+'Arbitration\x20object\x20to\x20the\x20Service\x20via\x20Service.arbitrations,\x20(2)\x20configure\x20'+'arbitrators\x20via\x20Arbitration.voting_guard_add,\x20(3)\x20deposit\x20compensation_fund\x20'+'to\x20the\x20Service.\x20Disputes\x20are\x20then\x20filed\x20via\x20arbitration::dispute(order,\x20'+'arbitration)\x20—\x20completely\x20independent\x20of\x20the\x20machine\x20workflow.','auto_fixable':![]},{'id':'R-M2-01','name':'Guard\x20not\x20created','category':'guard_integration','severity':'critical','description':'Forward\x20references\x20a\x20Guard\x20that\x20is\x20not\x20yet\x20created\x20on-chain.\x20Forward\x20execution\x20will\x20fail\x20Guard\x20verification.','detection':'Check\x20forward.guard\x20against\x20published_guards\x20set','recommendation':'Create\x20the\x20Guard\x20object\x20before\x20publishing\x20this\x20Machine.','auto_fixable':![],'related_constraint':'MC-C-09'},{'id':'R-M2-02','name':'Guard\x20not\x20tested\x20via\x20gen_passport','category':'guard_integration','severity':'high','description':'Guard\x20has\x20not\x20been\x20tested\x20via\x20gen_passport.\x20Guard\x20may\x20have\x20bugs,\x20cannot\x20be\x20fixed\x20after\x20publish.','detection':'Check\x20testnet\x20test\x20records\x20for\x20this\x20Guard','recommendation':'Run\x20gen_passport\x20on\x20testnet\x20before\x20binding\x20to\x20Machine.','auto_fixable':![]},{'id':'R-M2-03','name':'Guard\x20+\x20Machine\x20immutability\x20deadlock','category':'guard_integration','severity':'critical','description':'After\x20Machine\x20publish,\x20a\x20Guard\x20bug\x20is\x20discovered.\x20Guard\x20is\x20immutable\x20(cannot\x20be\x20fixed),\x20Machine\x20is\x20immutable\x20(cannot\x20be\x20rebound).','detection':'Verify\x20all\x20Guards\x20tested\x20before\x20Machine\x20publish','recommendation':'Keep\x20Machine\x20unpublished\x20until\x20all\x20Guards\x20are\x20verified.','auto_fixable':![]},{'id':'R-M2-04','name':'retained_submission\x20index\x20mismatch','category':'guard_integration','severity':'high','description':'Forward\x27s\x20retained_submission\x20key\x20does\x20not\x20correspond\x20to\x20Guard\x20table\x20b_submission=true\x20entry.\x20Retained\x20data\x20fails\x20or\x20is\x20incorrect.','detection':'Cross-check\x20forward.retained_submission\x20against\x20Guard\x20table\x20entries','recommendation':'Align\x20retained_submission\x20key\x20with\x20Guard\x20table\x20b_submission=true\x20identifier.','auto_fixable':!![],'related_constraint':'MC-C-11'},{'id':'R-M2-05','name':'Guard\x20reentry\x20risk','category':'guard_integration','severity':'high','description':'Guard\x20lacks\x20anti-reentry\x20mechanism\x20(see\x20Guard\x20R-X1-14).\x20Risk\x20of\x20duplicate\x20execution\x20or\x20vote\x20manipulation.','detection':'For\x20each\x20Guard\x20scene,\x20verify\x20anti-reentry\x20Guard\x20is\x20configured\x20(see\x20Guard\x20semantic\x20layer\x20R-X1-14)','recommendation':'Add\x20anti-reentry\x20Guard\x20for\x20each\x20scenario\x20(see\x20Guard\x20semantic\x20layer\x20R-X1-14).','auto_fixable':![]},{'id':'R-M2-06','name':'Guard\x20scene\x20mismatch','category':'guard_integration','severity':'medium','description':'Forward\x27s\x20bound\x20Guard\x20scene\x20does\x20not\x20match\x20Forward\x27s\x20business\x20(e.g.,\x20Forward\x20uses\x20reward_guard\x20instead\x20of\x20machine_forward_guard).','detection':'Cross-check\x20Guard\x20scene\x20against\x20Forward\x20business\x20purpose','recommendation':'Use\x20the\x20correct\x20Guard\x20scene\x20(machine_forward_guard).','auto_fixable':![]},{'id':'R-M2-07','name':'Cross-Machine\x20Guard\x20dependency\x20cycle','category':'guard_integration','severity':'critical','description':'Machine\x20A\x20depends\x20on\x20Machine\x20B\x20(via\x20Guard),\x20B\x20depends\x20on\x20A.\x20Circular\x20dependency.','detection':'Identify\x20cross-Machine\x20Guard\x20references\x20and\x20detect\x20cycles','recommendation':'Ensure\x20cross-Machine\x20dependencies\x20are\x20unidirectional.','auto_fixable':![]},{'id':'R-M2-08','name':'Guard\x20references\x20unpublished\x20object','category':'guard_integration','severity':'high','description':'Guard\x20table\x20references\x20an\x20object\x20(e.g.,\x20Service)\x20that\x20is\x20not\x20yet\x20published.','detection':'Cross-check\x20Guard\x20table\x20object\x20references\x20against\x20published\x20objects\x20set','recommendation':'Use\x20P16\x20circular\x20reference\x20pattern\x20(name\x20instead\x20of\x20address),\x20or\x20publish\x20referenced\x20objects\x20first.','auto_fixable':![]},{'id':'R-M3-01','name':'Forward\x20without\x20permission','category':'permission','severity':'critical','description':'Forward\x20has\x20neither\x20namedOperator\x20nor\x20permissionIndex.\x20Cannot\x20be\x20executed.','detection':'Check\x20each\x20forward\x20has\x20at\x20least\x20one\x20of\x20namedOperator\x20or\x20permissionIndex','recommendation':'Set\x20namedOperator=\x27\x27\x20for\x20OrderHolder,\x20or\x20set\x20permissionIndex.','auto_fixable':![],'related_constraint':'MC-C-07'},{'id':'R-M3-02','name':'permissionIndex\x20out\x20of\x20bounds','category':'permission','severity':'critical','description':'Forward\x27s\x20permissionIndex\x20>=\x20Permission.indices.length.\x20Execution\x20will\x20fail.','detection':'Check\x20permission_index\x20<\x20Permission.indices.length','recommendation':'Use\x20a\x20valid\x20permission\x20index\x20or\x20extend\x20Permission.indices.','auto_fixable':![],'related_constraint':'MC-C-08'},{'id':'R-M3-03','name':'Permission\x20rotation\x20failure','category':'permission','severity':'high','description':'Permission\x20object\x20updated,\x20indices\x20order\x20changed.\x20Original\x20permissionIndex\x20now\x20points\x20to\x20wrong\x20permission.','detection':'Detect\x20Permission\x20object\x20update\x20that\x20reorders\x20indices','recommendation':'Use\x20custom\x20Permission;\x20document\x20index\x20meanings;\x20avoid\x20frequent\x20Permission\x20updates.','auto_fixable':![]},{'id':'R-M3-04','name':'OrderHolder\x20misuse','category':'permission','severity':'medium','description':'namedOperator=\x27\x27\x20used\x20in\x20non-customer-operation\x20scenarios.\x20Non-intended\x20personnel\x20gain\x20operation\x20permission.','detection':'Find\x20Forwards\x20with\x20namedOperator=\x27\x27\x20on\x20non-customer-operation\x20nodes','recommendation':'Clarify\x20\x27\x27=OrderHolder\x20(customer),\x20not\x20\x27anyone\x27.\x20Use\x20namedOperator\x20for\x20specific\x20roles.','auto_fixable':![]},{'id':'R-M3-05','name':'NamedOperator\x20not\x20assigned\x20at\x20Progress\x20creation','category':'permission','severity':'high','description':'Forward\x20expects\x20namedOperator\x20role\x20but\x20Progress\x20doesn\x27t\x20have\x20it\x20assigned.\x20'+'Note:\x20MCP\x20API\x20layer\x20supports\x20progress_new.progress_namedOperator\x20(SDK\x20translates\x20to\x20namedOperator_add),\x20'+'but\x20Move\x20layer\x20progress::new\x20does\x20NOT\x20accept\x20it\x20(see\x2006\x20§14.5).','detection':'Verify\x20progress_namedOperator\x20is\x20provided\x20in\x20Progress\x20creation','recommendation':'Pass\x20progress_namedOperator\x20in\x20progress_new,\x20or\x20call\x20namedOperator_add\x20separately.','auto_fixable':![]},{'id':'R-M3-06','name':'Permission\x20game\x20imbalance','category':'permission','severity':'medium','description':'One\x20party\x20has\x20excessive\x20permission,\x20can\x20unilaterally\x20advance\x20workflow.\x20Game\x20theory\x20imbalance.','detection':'Analyze\x20permission\x20distribution\x20across\x20parties','recommendation':'Use\x20dual-signature\x20(threshold=2)\x20or\x20multi-signature\x20mechanism\x20to\x20balance\x20power.','auto_fixable':![]},{'id':'R-M3-07','name':'Permission\x20combination\x20OR\x20semantic\x20misuse','category':'permission','severity':'medium','description':'Both\x20namedOperator\x20and\x20permissionIndex\x20set,\x20but\x20OR\x20semantic\x20not\x20understood.\x20More\x20people\x20than\x20expected\x20can\x20execute\x20Forward.','detection':'Find\x20Forwards\x20with\x20both\x20namedOperator\x20and\x20permissionIndex\x20set','recommendation':'Clarify\x20that\x20when\x20both\x20permissions\x20are\x20non-null,\x20it\x20is\x20OR\x20relation\x20(either\x20can\x20execute).','auto_fixable':![]},{'id':'R-M3-08','name':'permissionIndex\x20below\x20USER_DEFINED_PERM_INDEX_START\x20(1000)','category':'permission','severity':'critical','description':'Forward\x27s\x20permissionIndex\x20<\x201000.\x20On-chain\x20constant\x20USER_DEFINED_PERM_INDEX_START\x20=\x201000\x20'+'in\x20permission.move\x20reserves\x20indexes\x200-999\x20for\x20built-in\x20permissions.\x20Using\x20index\x20<\x201000\x20'+'causes\x20confusion\x20with\x20built-in\x20permissions\x20and\x20is\x20a\x20hard\x20on-chain\x20constraint\x20(see\x20doc\x2006\x20§4.4).','detection':'Check\x20each\x20forward\x20with\x20permission_index\x20<\x201000','recommendation':'Use\x20permission_index\x20>=\x201000\x20(e.g.,\x201000,\x201001,\x201002,\x20...).\x20Reserve\x200-999\x20for\x20built-in\x20permissions.','auto_fixable':![],'related_constraint':'MC-C-08'},{'id':'R-M4-01','name':'No\x20backup\x20before\x20publish','category':'immutability','severity':'high','description':'machineNode2file\x20export\x20not\x20created\x20before\x20publish.\x20Cannot\x20restore\x20if\x20publish\x20fails.','detection':'Check\x20backup_created\x20flag','recommendation':'Run\x20machineNode2file\x20before\x20publish\x20to\x20create\x20backup.','auto_fixable':!![],'related_constraint':'MC-P-02'},{'id':'R-M4-02','name':'No\x20testnet\x20verification\x20before\x20mainnet','category':'immutability','severity':'medium','description':'Directly\x20publishing\x20to\x20mainnet\x20without\x20testnet\x20verification.\x20Potential\x20bugs\x20may\x20cause\x20fund\x20loss.','detection':'Check\x20network\x20===\x20\x27mainnet\x27\x20&&\x20!testnet_test_passed','recommendation':'Test\x20on\x20testnet\x20first.\x20Verify\x20Progress\x20runs\x20end-to-end.','auto_fixable':![],'related_constraint':'MC-P-03'},{'id':'R-M4-03','name':'Guards\x20not\x20all\x20created\x20before\x20publish','category':'immutability','severity':'critical','description':'Some\x20Forward.guard\x20is\x20still\x20null,\x20but\x20design\x20requires\x20Guard.\x20Cannot\x20add\x20Guard\x20after\x20publish\x20(immutability\x20deadlock).','detection':'Check\x20if\x20all\x20required\x20Guards\x20are\x20created\x20and\x20bound','recommendation':'Create\x20and\x20bind\x20all\x20Guards\x20before\x20publishing\x20Machine.','auto_fixable':![]},{'id':'R-M4-04','name':'Publish\x20order\x20incorrect','category':'immutability','severity':'critical','description':'Attempting\x20to\x20publish\x20Machine\x20before\x20creating\x20Guards.\x20Guards\x20cannot\x20bind\x20to\x20already-published\x20Machine.','detection':'Verify\x20dependency\x20order:\x20Permission\x20→\x20Machine(unpublished)\x20→\x20Guard\x20→\x20bind\x20→\x20publish','recommendation':'Follow\x20dependency\x20order:\x20Permission\x20→\x20Machine(unpublished)\x20→\x20Guard\x20→\x20bind\x20→\x20publish.','auto_fixable':![]},{'id':'R-M4-05','name':'Allocation\x20not\x20configured','category':'immutability','severity':'medium','description':'Terminal\x20node\x20not\x20mapped\x20to\x20Allocator.\x20Funds\x20cannot\x20be\x20distributed\x20after\x20workflow\x20completes.','detection':'Check\x20if\x20terminal\x20nodes\x20have\x20Allocator\x20mapping','recommendation':'Configure\x20Allocator\x20for\x20each\x20terminal\x20node.','auto_fixable':![]},{'id':'R-M4-06','name':'clear\x20operation\x20without\x20backup','category':'immutability','severity':'high','description':'Executing\x20node\x20clear\x20before\x20exporting\x20backup.\x20All\x20node\x20data\x20lost,\x20cannot\x20recover.','detection':'Check\x20if\x20machineNode2file\x20backup\x20created\x20before\x20clear\x20operation','recommendation':'Run\x20machineNode2file\x20backup\x20before\x20any\x20clear\x20operation.','auto_fixable':!![]},{'id':'R-M5-01','name':'Service\x20not\x20created','category':'environment','severity':'high','description':'Machine\x20design\x20complete\x20but\x20Service\x20not\x20created.\x20Machine\x20cannot\x20bind\x20to\x20Service.','detection':'Check\x20if\x20Service\x20object\x20is\x20in\x20published_services\x20set','recommendation':'Create\x20Service\x20first,\x20then\x20design/publish\x20Machine.','auto_fixable':![]},{'id':'R-M5-02','name':'Permission\x20object\x20mismatch','category':'environment','severity':'high','description':'Machine\x27s\x20Permission\x20differs\x20from\x20Service\x27s\x20Permission.\x20Permission\x20organization\x20inconsistent,\x20may\x20cause\x20operation\x20failure.','detection':'Cross-check\x20Machine\x27s\x20Permission\x20against\x20Service\x27s\x20Permission','recommendation':'Use\x20the\x20same\x20Permission\x20for\x20Machine\x20and\x20Service\x20(or\x20explicitly\x20document\x20different\x20organizations).','auto_fixable':![]},{'id':'R-M5-03','name':'Allocation\x20configuration\x20incomplete','category':'environment','severity':'high','description':'Service\x27s\x20order_allocators\x20not\x20configured\x20or\x20misconfigured.\x20Terminal\x20node\x20funds\x20cannot\x20be\x20distributed.','detection':'Check\x20if\x20Service.order_allocators\x20is\x20configured\x20for\x20each\x20terminal\x20node','recommendation':'Configure\x20Service.order_allocators,\x20one\x20Allocator\x20per\x20terminal\x20node.','auto_fixable':![]},{'id':'R-M5-04','name':'Reward\x20object\x20not\x20created','category':'environment','severity':'medium','description':'Reward\x20incentive\x20scenario\x20referenced\x20but\x20Reward\x20object\x20not\x20created.','detection':'Check\x20if\x20Reward\x20object\x20is\x20in\x20published_rewards\x20set','recommendation':'Create\x20Reward\x20object\x20first,\x20then\x20design\x20Guard.','auto_fixable':![]},{'id':'R-M5-05','name':'Arbitration\x20object\x20not\x20created','category':'environment','severity':'medium','description':'Arbitration\x20scenario\x20referenced\x20but\x20Arbitration\x20object\x20not\x20created.','detection':'Check\x20if\x20Arbitration\x20object\x20is\x20in\x20published_arbitrations\x20set','recommendation':'Create\x20Arbitration\x20object\x20first.','auto_fixable':![]},{'id':'R-M5-06','name':'Cross-Machine\x20dependency\x20not\x20published','category':'environment','severity':'critical','description':'Machine\x20A\x20depends\x20on\x20Machine\x20B,\x20but\x20B\x20is\x20not\x20published.\x20Guard\x20query\x20for\x20Machine\x20B\x27s\x20Progress\x20will\x20fail.\x20'+'Dependency\x20verification:\x20indirect\x20via\x20progress::new\x20->\x20assert_published\x20(see\x2006\x20§14.6).','detection':'Check\x20machine_ref\x20against\x20published_machines\x20set','recommendation':'Ensure\x20upstream\x20Machine\x20is\x20published\x20first.','auto_fixable':![]},{'id':'R-M5-07','name':'Repository\x20not\x20created','category':'environment','severity':'medium','description':'Guard\x20references\x20Repository\x20but\x20not\x20created.\x20Guard\x20query\x20will\x20fail.','detection':'Check\x20repository_ref\x20against\x20published\x20repositories\x20set','recommendation':'Create\x20and\x20publish\x20Repository\x20first.\x20Note:\x20consensus_repositories\x20is\x20declarative-only\x20(see\x2006\x20§14.4).','auto_fixable':![]},{'id':'R-M5-08','name':'Object\x20dependency\x20table\x20incomplete','category':'environment','severity':'low','description':'Project\x20object\x20dependency\x20table\x20missing\x20some\x20objects.\x20Design\x20decisions\x20based\x20on\x20incomplete\x20information.','detection':'Scan\x20project\x20environment\x20for\x20missing\x20object\x20references','recommendation':'Use\x20machine-context.ts\x20to\x20scan\x20complete\x20project\x20environment.','auto_fixable':![]}];export function assessMachineRisks(a,b){const c=[];c['push'](...checkStructuralRisks(a)),c['push'](...checkGuardIntegrationRisks(a,b)),c['push'](...checkPermissionRisks(a)),c['push'](...checkImmutabilityRisks(a,b)),c['push'](...checkEnvironmentRisks(a,b));const d={'critical':c['filter'](g=>g['severity']==='critical')['length'],'high':c['filter'](g=>g['severity']==='high')['length'],'medium':c['filter'](g=>g['severity']==='medium')['length'],'low':c['filter'](g=>g['severity']==='low')['length']};let e='low';if(d['critical']>0x0)e='critical';else{if(d['high']>0x0)e='high';else{if(d['medium']>0x0)e='medium';else{if(d['low']>0x0)e='low';}}}let f;if(d['critical']>0x0)f='do_not_publish';else d['high']>0x2?f='fix_first':f='publish';return{'overall_level':e,'detected_risks':c,'summary':d,'recommendation':f};}function checkStructuralRisks(a){const b=[],c=a['pairs']['some'](l=>l['prev_node']==='');!c&&b['push'](makeRisk('R-M1-01','No\x20Pair\x20with\x20prev_node=\x27\x27\x20found.\x20Workflow\x20cannot\x20start.'));const d=new Set(a['pairs']['map'](l=>l['prev_node'])['filter'](l=>l!=='')),e=new Set(a['nodes']['map'](l=>l['name'])),f=[...e]['filter'](l=>!d['has'](l));f['length']===0x0&&b['push'](makeRisk('R-M1-02','No\x20terminal\x20node\x20found.\x20Workflow\x20never\x20completes.'));const g=new Set(a['pairs']['filter'](l=>l['prev_node']==='')['map'](l=>l['next_node'])),h=new Set(a['pairs']['map'](l=>l['prev_node'])['filter'](l=>l!==''));for(const l of a['nodes']){if(!g['has'](l['name'])&&!h['has'](l['name'])){const m=a['pairs']['some'](n=>n['next_node']===l['name']);!m&&b['push'](makeRisk('R-M1-04','Node\x20\x22'+l['name']+'\x22\x20is\x20orphaned\x20(no\x20incoming\x20Pair).'));}}a['nodes']['length']>MAX_NODE_COUNT&&b['push'](makeRisk('R-M1-07','Node\x20count\x20'+a['nodes']['length']+'\x20exceeds\x20MAX_NODE_COUNT\x20('+MAX_NODE_COUNT+').'));const i=new Map();for(const n of a['pairs']){i['set'](n['next_node'],(i['get'](n['next_node'])??0x0)+0x1);}for(const [o,q]of i){q>0x28&&b['push'](makeRisk('R-M1-08','Node\x20\x22'+o+'\x22\x20has\x20'+q+'\x20Pairs,\x20exceeds\x20MAX_NODE_PAIR_COUNT\x20(40).'));}for(const r of a['pairs']){r['forwards']['length']>0x14&&b['push'](makeRisk('R-M1-09','Pair\x20('+r['prev_node']+'\x20->\x20'+r['next_node']+')\x20has\x20'+r['forwards']['length']+'\x20Forwards,\x20exceeds\x20MAX_FORWARD_COUNT\x20(20).'));}const j=a['nodes']['map'](s=>s['name']),k=j['filter']((s,t)=>j['indexOf'](s)!==t);return k['length']>0x0&&b['push'](makeRisk('R-M1-10','Duplicate\x20node\x20names:\x20'+[...new Set(k)]['join'](',\x20'))),b;}function checkGuardIntegrationRisks(a,b){const c=[];for(const d of a['pairs']){for(const e of d['forwards']){e['guard']&&!b['published_guards']['has'](e['guard'])&&c['push'](makeRisk('R-M2-01','Forward\x20\x22'+e['name']+'\x22\x20references\x20Guard\x20\x22'+e['guard']+'\x22\x20not\x20in\x20published_guards.')),e['retained_submission']&&!e['guard']&&c['push'](makeRisk('R-M2-04','Forward\x20\x22'+e['name']+'\x22\x20has\x20retained_submission\x20but\x20no\x20Guard.\x20retained_submission\x20requires\x20a\x20Guard.'));}}return c;}function checkPermissionRisks(a){const b=[];for(const c of a['pairs']){for(const d of c['forwards']){const e=d['named_operator']!==undefined&&d['named_operator']!==null,f=d['permission_index']!==undefined&&d['permission_index']!==null;!e&&!f&&b['push'](makeRisk('R-M3-01','Forward\x20\x22'+d['name']+'\x22\x20in\x20Pair\x20('+c['prev_node']+'\x20->\x20'+c['next_node']+')\x20has\x20no\x20permission.'));}}for(const g of a['pairs']){for(const h of g['forwards']){const i=h['named_operator']!==undefined&&h['named_operator']!==null,j=h['permission_index']!==undefined&&h['permission_index']!==null;i&&j&&b['push'](makeRisk('R-M3-07','Forward\x20\x22'+h['name']+'\x22\x20in\x20Pair\x20('+g['prev_node']+'\x20->\x20'+g['next_node']+')\x20has\x20both\x20namedOperator\x20and\x20permissionIndex\x20(OR\x20semantic).'));}}for(const k of a['pairs']){for(const l of k['forwards']){l['permission_index']!==undefined&&l['permission_index']!==null&&l['permission_index']<USER_DEFINED_PERM_INDEX_START&&b['push'](makeRisk('R-M3-08','Forward\x20\x22'+l['name']+'\x22\x20in\x20Pair\x20('+k['prev_node']+'\x20->\x20'+k['next_node']+')\x20'+('has\x20permission_index='+l['permission_index']+'\x20<\x20'+USER_DEFINED_PERM_INDEX_START+'.\x20')+'Indexes\x200-999\x20are\x20reserved\x20for\x20built-in\x20permissions.'));}}return b;}function checkImmutabilityRisks(a,b){const c=[];b['network']==='mainnet'&&!b['testnet_test_passed']&&c['push'](makeRisk('R-M4-02','Mainnet\x20publish\x20attempted\x20without\x20testnet\x20test\x20passing.'));const d=new Set();for(const f of a['pairs']){for(const g of f['forwards']){if(g['guard'])d['add'](g['guard']);}}const e=[...d]['filter'](h=>!b['published_guards']['has'](h));return e['length']>0x0&&c['push'](makeRisk('R-M4-03','Guards\x20not\x20all\x20created\x20before\x20publish.\x20Missing:\x20'+e['join'](',\x20'))),c;}function checkEnvironmentRisks(a,b){const c=[],d=new Set();for(const f of a['pairs']){for(const g of f['forwards']){if(g['guard'])d['add'](g['guard']);}}const e=[...d]['filter'](h=>!b['published_guards']['has'](h));return e['length']>0x0&&c['push'](makeRisk('R-M5-08','Object\x20dependency\x20table\x20incomplete.\x20Missing\x20Guards:\x20'+e['join'](',\x20'))),c;}function makeRisk(a,b){const c=MACHINE_RISK_RULES['find'](d=>d['id']===a);if(!c)return{'rule_id':a,'name':'Unknown','severity':'low','detail':b,'recommendation':'Investigate\x20manually.','auto_fixable':![]};return{'rule_id':c['id'],'name':c['name'],'severity':c['severity'],'detail':b,'recommendation':c['recommendation'],'auto_fixable':c['auto_fixable']};}export function getRiskRulesByCategory(a){return MACHINE_RISK_RULES['filter'](b=>b['category']===a);}export function getRiskRuleById(a){return MACHINE_RISK_RULES['find'](b=>b['id']===a);}export function getRiskRulesBySeverity(a){return MACHINE_RISK_RULES['filter'](b=>b['severity']===a);}export function getAutoFixableRules(){return MACHINE_RISK_RULES['filter'](a=>a['auto_fixable']);}export function getRiskSummary(a){const b=['Overall\x20Risk\x20Level:\x20'+a['overall_level']['toUpperCase'](),'Recommendation:\x20'+a['recommendation'],'','Summary:','\x20\x20Critical:\x20'+a['summary']['critical'],'\x20\x20High:\x20\x20\x20\x20\x20'+a['summary']['high'],'\x20\x20Medium:\x20\x20\x20'+a['summary']['medium'],'\x20\x20Low:\x20\x20\x20\x20\x20\x20'+a['summary']['low'],'','Detected\x20Risks:'];for(const c of a['detected_risks']){b['push']('\x20\x20['+c['severity']['toUpperCase']()+']\x20'+c['rule_id']+':\x20'+c['name']),b['push']('\x20\x20\x20\x20Detail:\x20'+c['detail']),b['push']('\x20\x20\x20\x20Fix:\x20'+c['recommendation']);}return b['join']('\x0a');}export const MACHINE_RISK_VERSION='1.0.0';export const MACHINE_RISK_RULES_COUNT=MACHINE_RISK_RULES['length'];