@wowok/agent-mcp 2.7.0 → 2.7.2

package/dist/knowledge/permission-puzzle.js

@@ -1,173 +1 @@
-import { USER_DEFINED_PERM_INDEX_START, MAX_ENTITY_COUNT, MAX_PERM_FOR_ENTITY, MAX_ADMIN_COUNT, } from "@wowok/wowok";
-import { isBuiltinPermission, } from "./permission-ledger.js";
-export function initPuzzleFromIntent(intent) {
-    const puzzle = {};
-    if (intent.action || intent.rule_sentence) {
-        puzzle.intent = {
-            action: intent.action ?? "create",
-            target_object: intent.target_object,
-            rule_sentence: intent.rule_sentence ?? "",
-            failure_conditions: intent.failure_conditions ?? [],
-        };
-    }
-    puzzle.constraints = {
-        F_P_01_custom_index_ge_1000: true,
-        F_P_02_entity_count_le_1000: true,
-        F_P_03_perm_count_per_entity_le_1000: true,
-        F_P_04_admin_count_le_500: true,
-        F_P_05_owner_address_valid: true,
-        F_P_06_owner_only_for_assert_owner: true,
-        F_P_07_admin_only_for_assert_admin: true,
-    };
-    return puzzle;
-}
-export function checkPuzzleCompleteness(puzzle) {
-    const missing = [];
-    const missing_details = [];
-    if (!puzzle.intent) {
-        missing.push("A");
-        missing_details.push({ dimension: "A", reason: "Intent not specified (action + rule_sentence)" });
-    }
-    else if (!puzzle.intent.rule_sentence) {
-        missing.push("A");
-        missing_details.push({ dimension: "A", reason: "rule_sentence is empty" });
-    }
-    if (!puzzle.binding) {
-        missing.push("B");
-        missing_details.push({ dimension: "B", reason: "Binding not specified (owner + admins)" });
-    }
-    else if (!puzzle.binding.owner) {
-        missing.push("B");
-        missing_details.push({ dimension: "B", reason: "owner address missing" });
-    }
-    if (!puzzle.data_source && puzzle.intent?.action === "create") {
-        missing.push("C");
-        missing_details.push({ dimension: "C", reason: "Data source not specified (entities + permissions)" });
-    }
-    if (!puzzle.operations) {
-        missing.push("D");
-        missing_details.push({ dimension: "D", reason: "Operations not enumerated" });
-    }
-    if (!puzzle.logic) {
-        missing.push("E");
-        missing_details.push({ dimension: "E", reason: "Logic flow not defined" });
-    }
-    if (!puzzle.constraints) {
-        missing.push("F");
-        missing_details.push({ dimension: "F", reason: "Constraints not checked" });
-    }
-    return {
-        dimensions: ["A", "B", "C", "D", "E", "F"],
-        missing,
-        missing_details,
-        complete: missing.length === 0,
-        next_step: missing.length === 0
-            ? "Puzzle complete — ready for confirmation text generation"
-            : `Next: complete dimension ${missing[0]} — ${missing_details[0].reason}`,
-    };
-}
-export function validateConstraints(puzzle) {
-    const violations = [];
-    if (!puzzle.data_source)
-        return violations;
-    for (const entity of puzzle.data_source.entities) {
-        for (const idx of entity.permission_indexes) {
-            if (idx < USER_DEFINED_PERM_INDEX_START && !isBuiltinPermission(idx)) {
-                violations.push({
-                    constraint_id: "F-P-01",
-                    severity: "CRITICAL",
-                    message: `Permission index ${idx} for entity ${entity.address} is < ${USER_DEFINED_PERM_INDEX_START} and not a builtin permission`,
-                    current_value: idx,
-                    limit: USER_DEFINED_PERM_INDEX_START,
-                });
-            }
-        }
-    }
-    if (puzzle.data_source.entities.length > MAX_ENTITY_COUNT) {
-        violations.push({
-            constraint_id: "F-P-02",
-            severity: "HIGH",
-            message: `Entity count ${puzzle.data_source.entities.length} exceeds MAX_ENTITY_COUNT ${MAX_ENTITY_COUNT}`,
-            current_value: puzzle.data_source.entities.length,
-            limit: MAX_ENTITY_COUNT,
-        });
-    }
-    for (const entity of puzzle.data_source.entities) {
-        if (entity.permission_indexes.length > MAX_PERM_FOR_ENTITY) {
-            violations.push({
-                constraint_id: "F-P-03",
-                severity: "HIGH",
-                message: `Entity ${entity.address} has ${entity.permission_indexes.length} permissions, exceeds MAX_PERM_FOR_ENTITY ${MAX_PERM_FOR_ENTITY}`,
-                current_value: entity.permission_indexes.length,
-                limit: MAX_PERM_FOR_ENTITY,
-            });
-        }
-    }
-    if (puzzle.binding && puzzle.binding.admins.length > MAX_ADMIN_COUNT) {
-        violations.push({
-            constraint_id: "F-P-04",
-            severity: "HIGH",
-            message: `Admin count ${puzzle.binding.admins.length} exceeds MAX_ADMIN_COUNT ${MAX_ADMIN_COUNT}`,
-            current_value: puzzle.binding.admins.length,
-            limit: MAX_ADMIN_COUNT,
-        });
-    }
-    return violations;
-}
-export function generateConfirmationText(puzzle) {
-    const lines = [];
-    lines.push("═══ Permission Confirmation ═══");
-    lines.push("");
-    if (puzzle.intent) {
-        lines.push(`Action: ${puzzle.intent.action}`);
-        if (puzzle.intent.target_object)
-            lines.push(`Target: ${puzzle.intent.target_object}`);
-        lines.push(`Rule: ${puzzle.intent.rule_sentence}`);
-        if (puzzle.intent.failure_conditions.length > 0) {
-            lines.push("Failure conditions:");
-            for (const fc of puzzle.intent.failure_conditions)
-                lines.push(`  - ${fc}`);
-        }
-        lines.push("");
-    }
-    if (puzzle.binding) {
-        lines.push("─ Binding ──────────────");
-        lines.push(`Owner: ${puzzle.binding.owner}`);
-        lines.push(`Admins (${puzzle.binding.admins.length}): ${puzzle.binding.admins.join(", ")}`);
-        if (puzzle.binding.um !== undefined) {
-            lines.push(`UM: ${puzzle.binding.um ?? "(none)"}`);
-        }
-        if (puzzle.binding.applied_to && puzzle.binding.applied_to.length > 0) {
-            lines.push(`Applied to: ${puzzle.binding.applied_to.join(", ")}`);
-        }
-        lines.push("");
-    }
-    if (puzzle.data_source) {
-        lines.push("─ Data Source ──────────────");
-        lines.push(`Entities: ${puzzle.data_source.entities.length}`);
-        for (const e of puzzle.data_source.entities) {
-            lines.push(`  ${e.address} (${e.type}): indexes [${e.permission_indexes.join(", ")}]`);
-        }
-        if (puzzle.data_source.custom_permissions_defined.length > 0) {
-            lines.push("Custom permissions:");
-            for (const cp of puzzle.data_source.custom_permissions_defined) {
-                lines.push(`  [${cp.index}] ${cp.name}: ${cp.description}`);
-            }
-        }
-        lines.push("");
-    }
-    if (puzzle.operations && puzzle.operations.operations.length > 0) {
-        lines.push("─ Operations ──────────────");
-        for (const op of puzzle.operations.operations)
-            lines.push(`  - ${JSON.stringify(op)}`);
-        lines.push("");
-    }
-    const violations = validateConstraints(puzzle);
-    if (violations.length > 0) {
-        lines.push("─ Constraint Violations ──────────────");
-        for (const v of violations)
-            lines.push(`  [${v.severity}] ${v.constraint_id}: ${v.message}`);
-        lines.push("");
-    }
-    return lines.join("\n");
-}
+import{USER_DEFINED_PERM_INDEX_START,MAX_ENTITY_COUNT,MAX_PERM_FOR_ENTITY,MAX_ADMIN_COUNT}from'@wowok/wowok';import{isBuiltinPermission}from'./permission-ledger.js';export function initPuzzleFromIntent(a){const b={};return(a['action']||a['rule_sentence'])&&(b['intent']={'action':a['action']??'create','target_object':a['target_object'],'rule_sentence':a['rule_sentence']??'','failure_conditions':a['failure_conditions']??[]}),b['constraints']={'F_P_01_custom_index_ge_1000':!![],'F_P_02_entity_count_le_1000':!![],'F_P_03_perm_count_per_entity_le_1000':!![],'F_P_04_admin_count_le_500':!![],'F_P_05_owner_address_valid':!![],'F_P_06_owner_only_for_assert_owner':!![],'F_P_07_admin_only_for_assert_admin':!![]},b;}export function checkPuzzleCompleteness(a){const b=[],c=[];if(!a['intent'])b['push']('A'),c['push']({'dimension':'A','reason':'Intent\x20not\x20specified\x20(action\x20+\x20rule_sentence)'});else!a['intent']['rule_sentence']&&(b['push']('A'),c['push']({'dimension':'A','reason':'rule_sentence\x20is\x20empty'}));if(!a['binding'])b['push']('B'),c['push']({'dimension':'B','reason':'Binding\x20not\x20specified\x20(owner\x20+\x20admins)'});else!a['binding']['owner']&&(b['push']('B'),c['push']({'dimension':'B','reason':'owner\x20address\x20missing'}));return!a['data_source']&&a['intent']?.['action']==='create'&&(b['push']('C'),c['push']({'dimension':'C','reason':'Data\x20source\x20not\x20specified\x20(entities\x20+\x20permissions)'})),!a['operations']&&(b['push']('D'),c['push']({'dimension':'D','reason':'Operations\x20not\x20enumerated'})),!a['logic']&&(b['push']('E'),c['push']({'dimension':'E','reason':'Logic\x20flow\x20not\x20defined'})),!a['constraints']&&(b['push']('F'),c['push']({'dimension':'F','reason':'Constraints\x20not\x20checked'})),{'dimensions':['A','B','C','D','E','F'],'missing':b,'missing_details':c,'complete':b['length']===0x0,'next_step':b['length']===0x0?'Puzzle\x20complete\x20—\x20ready\x20for\x20confirmation\x20text\x20generation':'Next:\x20complete\x20dimension\x20'+b[0x0]+'\x20—\x20'+c[0x0]['reason']};}export function validateConstraints(a){const b=[];if(!a['data_source'])return b;for(const c of a['data_source']['entities']){for(const d of c['permission_indexes']){d<USER_DEFINED_PERM_INDEX_START&&!isBuiltinPermission(d)&&b['push']({'constraint_id':'F-P-01','severity':'CRITICAL','message':'Permission\x20index\x20'+d+'\x20for\x20entity\x20'+c['address']+'\x20is\x20<\x20'+USER_DEFINED_PERM_INDEX_START+'\x20and\x20not\x20a\x20builtin\x20permission','current_value':d,'limit':USER_DEFINED_PERM_INDEX_START});}}a['data_source']['entities']['length']>MAX_ENTITY_COUNT&&b['push']({'constraint_id':'F-P-02','severity':'HIGH','message':'Entity\x20count\x20'+a['data_source']['entities']['length']+'\x20exceeds\x20MAX_ENTITY_COUNT\x20'+MAX_ENTITY_COUNT,'current_value':a['data_source']['entities']['length'],'limit':MAX_ENTITY_COUNT});for(const e of a['data_source']['entities']){e['permission_indexes']['length']>MAX_PERM_FOR_ENTITY&&b['push']({'constraint_id':'F-P-03','severity':'HIGH','message':'Entity\x20'+e['address']+'\x20has\x20'+e['permission_indexes']['length']+'\x20permissions,\x20exceeds\x20MAX_PERM_FOR_ENTITY\x20'+MAX_PERM_FOR_ENTITY,'current_value':e['permission_indexes']['length'],'limit':MAX_PERM_FOR_ENTITY});}return a['binding']&&a['binding']['admins']['length']>MAX_ADMIN_COUNT&&b['push']({'constraint_id':'F-P-04','severity':'HIGH','message':'Admin\x20count\x20'+a['binding']['admins']['length']+'\x20exceeds\x20MAX_ADMIN_COUNT\x20'+MAX_ADMIN_COUNT,'current_value':a['binding']['admins']['length'],'limit':MAX_ADMIN_COUNT}),b;}export function generateConfirmationText(a){const b=[];b['push']('═══\x20Permission\x20Confirmation\x20═══'),b['push']('');if(a['intent']){b['push']('Action:\x20'+a['intent']['action']);if(a['intent']['target_object'])b['push']('Target:\x20'+a['intent']['target_object']);b['push']('Rule:\x20'+a['intent']['rule_sentence']);if(a['intent']['failure_conditions']['length']>0x0){b['push']('Failure\x20conditions:');for(const d of a['intent']['failure_conditions'])b['push']('\x20\x20-\x20'+d);}b['push']('');}a['binding']&&(b['push']('─\x20Binding\x20──────────────'),b['push']('Owner:\x20'+a['binding']['owner']),b['push']('Admins\x20('+a['binding']['admins']['length']+'):\x20'+a['binding']['admins']['join'](',\x20')),a['binding']['um']!==undefined&&b['push']('UM:\x20'+(a['binding']['um']??'(none)')),a['binding']['applied_to']&&a['binding']['applied_to']['length']>0x0&&b['push']('Applied\x20to:\x20'+a['binding']['applied_to']['join'](',\x20')),b['push'](''));if(a['data_source']){b['push']('─\x20Data\x20Source\x20──────────────'),b['push']('Entities:\x20'+a['data_source']['entities']['length']);for(const f of a['data_source']['entities']){b['push']('\x20\x20'+f['address']+'\x20('+f['type']+'):\x20indexes\x20['+f['permission_indexes']['join'](',\x20')+']');}if(a['data_source']['custom_permissions_defined']['length']>0x0){b['push']('Custom\x20permissions:');for(const g of a['data_source']['custom_permissions_defined']){b['push']('\x20\x20['+g['index']+']\x20'+g['name']+':\x20'+g['description']);}}b['push']('');}if(a['operations']&&a['operations']['operations']['length']>0x0){b['push']('─\x20Operations\x20──────────────');for(const h of a['operations']['operations'])b['push']('\x20\x20-\x20'+JSON['stringify'](h));b['push']('');}const c=validateConstraints(a);if(c['length']>0x0){b['push']('─\x20Constraint\x20Violations\x20──────────────');for(const i of c)b['push']('\x20\x20['+i['severity']+']\x20'+i['constraint_id']+':\x20'+i['message']);b['push']('');}return b['join']('\x0a');}

package/dist/knowledge/permission-risk.js

@@ -1,411 +1 @@
-import { USER_DEFINED_PERM_INDEX_START, MAX_ENTITY_COUNT, MAX_PERM_FOR_ENTITY, MAX_ADMIN_COUNT, } from "@wowok/wowok";
-import { isBuiltinPermission, findSceneByPermissionIndex, } from "./permission-ledger.js";
-const R_P_01 = {
-    id: "R-P-1-01",
-    category: "structural",
-    trigger: "Custom permission index < USER_DEFINED_PERM_INDEX_START (1000) and not builtin",
-    check: (ctx) => {
-        if (!ctx.table)
-            return null;
-        if ("index" in ctx.table && typeof ctx.table.index === "number") {
-            const idx = ctx.table.index;
-            if (idx < USER_DEFINED_PERM_INDEX_START && !isBuiltinPermission(idx)) {
-                return {
-                    id: "R-P-1-01",
-                    level: "CRITICAL",
-                    category: "structural",
-                    title: "Invalid permission index (< 1000 and not builtin)",
-                    description: `Permission index ${idx} is below USER_DEFINED_PERM_INDEX_START (${USER_DEFINED_PERM_INDEX_START}) and not a builtin permission. Custom indexes must be >= 1000.`,
-                    affected_stakeholders: ["owner", "admin", "system"],
-                    scenario: "User defines a custom permission with index < 1000",
-                    mitigation: `Use index >= ${USER_DEFINED_PERM_INDEX_START} for custom permissions, or use a builtin index if applicable`,
-                    evidence: `index=${idx}`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_P_02 = {
-    id: "R-P-1-02",
-    category: "structural",
-    trigger: "Entity count exceeds MAX_ENTITY_COUNT (1000)",
-    check: (ctx) => {
-        const count = ctx.current_entity_count ?? 0;
-        if (count > MAX_ENTITY_COUNT) {
-            return {
-                id: "R-P-1-02",
-                level: "HIGH",
-                category: "structural",
-                title: "Entity count exceeds limit",
-                description: `Permission has ${count} entities, exceeds MAX_ENTITY_COUNT ${MAX_ENTITY_COUNT}`,
-                affected_stakeholders: ["owner", "admin"],
-                scenario: "Adding entities beyond the protocol limit",
-                mitigation: "Split into multiple Permission objects or remove inactive entities",
-                evidence: `entity_count=${count}`,
-            };
-        }
-        return null;
-    },
-};
-const R_P_03 = {
-    id: "R-P-1-03",
-    category: "structural",
-    trigger: "Per-entity permission count exceeds MAX_PERM_FOR_ENTITY (1000)",
-    check: (ctx) => {
-        if (ctx.table && "index" in ctx.table && Array.isArray(ctx.table.index)) {
-            if (ctx.table.index.length > MAX_PERM_FOR_ENTITY) {
-                return {
-                    id: "R-P-1-03",
-                    level: "HIGH",
-                    category: "structural",
-                    title: "Per-entity permission count exceeds limit",
-                    description: `Entity ${ctx.table.entity} has ${ctx.table.index.length} permissions, exceeds MAX_PERM_FOR_ENTITY ${MAX_PERM_FOR_ENTITY}`,
-                    affected_stakeholders: ["entity", "admin"],
-                    scenario: "Granting too many permissions to one entity",
-                    mitigation: "Consolidate similar permissions or split entity into multiple roles",
-                    evidence: `perm_count=${ctx.table.index.length}`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_P_04 = {
-    id: "R-P-1-04",
-    category: "structural",
-    trigger: "Admin count exceeds MAX_ADMIN_COUNT (500)",
-    check: (ctx) => {
-        if (ctx.admin) {
-            const newCount = ctx.admin.op === "add"
-                ? (ctx.current_admin_count ?? 0) + ctx.admin.addresses.length
-                : ctx.admin.addresses.length;
-            if (newCount > MAX_ADMIN_COUNT) {
-                return {
-                    id: "R-P-1-04",
-                    level: "HIGH",
-                    category: "structural",
-                    title: "Admin count exceeds limit",
-                    description: `Admin count would be ${newCount}, exceeds MAX_ADMIN_COUNT ${MAX_ADMIN_COUNT}`,
-                    affected_stakeholders: ["owner", "admin"],
-                    scenario: "Adding too many admins",
-                    mitigation: "Remove inactive admins before adding new ones",
-                    evidence: `admin_count=${newCount}`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_P_2_01 = {
-    id: "R-P-2-01",
-    category: "semantic",
-    trigger: "Builtin permission index used outside its host object scene",
-    check: (ctx) => {
-        if (!ctx.table || !("index" in ctx.table) || typeof ctx.table.index !== "number")
-            return null;
-        const idx = ctx.table.index;
-        if (!isBuiltinPermission(idx))
-            return null;
-        const scene = findSceneByPermissionIndex(idx);
-        if (!scene)
-            return null;
-        if (ctx.target_objects_types && ctx.target_objects_types.length > 0) {
-            const mismatched = ctx.target_objects_types.filter(t => t !== scene.host_object);
-            if (mismatched.length > 0) {
-                return {
-                    id: "R-P-2-01",
-                    level: "HIGH",
-                    category: "semantic",
-                    title: "Permission index host object mismatch",
-                    description: `Permission ${idx} (${scene.builtin_indexes.find(p => p.index === idx)?.name}) is for ${scene.host_object}, but apply targets: ${mismatched.join(", ")}`,
-                    affected_stakeholders: ["owner", "admin"],
-                    scenario: "Using SERVICE_* index on Machine object",
-                    mitigation: `Use ${scene.host_object}-specific permission indexes for ${mismatched.join(", ")}`,
-                    evidence: `index=${idx}, targets=${mismatched.join(",")}`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_P_2_02 = {
-    id: "R-P-2-02",
-    category: "semantic",
-    trigger: "Custom permission (>= 1000) without remark",
-    check: (ctx) => {
-        if (!ctx.table || !("index" in ctx.table) || typeof ctx.table.index !== "number")
-            return null;
-        const idx = ctx.table.index;
-        if (idx < USER_DEFINED_PERM_INDEX_START)
-            return null;
-        if (ctx.remark && ctx.remark.op === "set" && ctx.remark.index === idx)
-            return null;
-        return {
-            id: "R-P-2-02",
-            level: "LOW",
-            category: "semantic",
-            title: "Custom permission without remark",
-            description: `Custom permission ${idx} has no remark; future maintainers won't know its purpose`,
-            affected_stakeholders: ["admin"],
-            scenario: "Adding custom permission without documentation",
-            mitigation: `Add remark: { op: "set", index: ${idx}, remark: "<purpose>" }`,
-            evidence: `index=${idx}`,
-        };
-    },
-};
-const R_P_3_01 = {
-    id: "R-P-3-01",
-    category: "authority",
-    trigger: "Permission over-concentration: owner is the only admin",
-    check: (ctx) => {
-        if (!ctx.admin || ctx.admin.op !== "set")
-            return null;
-        if (ctx.admin.addresses.length === 1) {
-            return {
-                id: "R-P-3-01",
-                level: "MEDIUM",
-                category: "authority",
-                title: "Permission over-concentration",
-                description: "Only one admin (likely owner); loss of owner key means permanent lockout",
-                affected_stakeholders: ["owner"],
-                scenario: "Single-admin Permission",
-                mitigation: "Add 1-2 backup admins with limited permission indexes",
-                evidence: `admin_count=1`,
-            };
-        }
-        return null;
-    },
-};
-const R_P_3_02 = {
-    id: "R-P-3-02",
-    category: "authority",
-    trigger: "Permission over-dispersion: admin count > 50",
-    check: (ctx) => {
-        if (!ctx.admin)
-            return null;
-        const count = ctx.admin.op === "set" ? ctx.admin.addresses.length : (ctx.current_admin_count ?? 0);
-        if (count > 50) {
-            return {
-                id: "R-P-3-02",
-                level: "MEDIUM",
-                category: "authority",
-                title: "Permission over-dispersion",
-                description: `${count} admins increases coordination cost and key-management risk`,
-                affected_stakeholders: ["owner", "admin"],
-                scenario: "Large admin committee",
-                mitigation: "Use multi-sig or hierarchical admin structure",
-                evidence: `admin_count=${count}`,
-            };
-        }
-        return null;
-    },
-};
-const R_P_3_03 = {
-    id: "R-P-3-03",
-    category: "authority",
-    trigger: "UM is owner self-reference",
-    check: (ctx) => {
-        if (ctx.um === undefined || ctx.um === null)
-            return null;
-        if (ctx.builder && ctx.um === ctx.builder) {
-            return {
-                id: "R-P-3-03",
-                level: "MEDIUM",
-                category: "authority",
-                title: "UM is owner self-reference",
-                description: "Setting UM to owner address defeats separation of concerns",
-                affected_stakeholders: ["owner"],
-                scenario: "Owner delegates UM to self",
-                mitigation: "Use a separate Contact object address for UM",
-                evidence: `um=${ctx.um}`,
-            };
-        }
-        return null;
-    },
-};
-const R_P_4_01 = {
-    id: "R-P-4-01",
-    category: "lifecycle",
-    trigger: "Ownership transfer operation (builder field set)",
-    check: (ctx) => {
-        if (!ctx.builder)
-            return null;
-        return {
-            id: "R-P-4-01",
-            level: "HIGH",
-            category: "lifecycle",
-            title: "Ownership transfer — irreversible",
-            description: `Transferring Permission to ${ctx.builder}. Once executed, original owner loses ALL control permanently.`,
-            affected_stakeholders: ["owner"],
-            scenario: "Owner transfers Permission to new address",
-            mitigation: "1) Verify new owner address twice. 2) Export Permission JSON before transfer. 3) Coordinate with new owner to confirm receipt.",
-            evidence: `new_owner=${ctx.builder}`,
-        };
-    },
-};
-const R_P_4_02 = {
-    id: "R-P-4-02",
-    category: "lifecycle",
-    trigger: "Apply to multiple objects at once",
-    check: (ctx) => {
-        if (!ctx.apply || ctx.apply.length === 0)
-            return null;
-        if (ctx.apply.length > 3) {
-            return {
-                id: "R-P-4-02",
-                level: "MEDIUM",
-                category: "lifecycle",
-                title: "Batch apply to multiple objects",
-                description: `Applying Permission to ${ctx.apply.length} objects at once; if any object type mismatches, transaction may fail or silently misalign`,
-                affected_stakeholders: ["owner"],
-                scenario: "Batch apply across heterogeneous objects",
-                mitigation: "Apply to 1-3 objects at a time; verify each object type matches permission indexes",
-                evidence: `apply_count=${ctx.apply.length}`,
-            };
-        }
-        return null;
-    },
-};
-const R_P_4_03 = {
-    id: "R-P-4-03",
-    category: "lifecycle",
-    trigger: "Entity replace operation (destructive)",
-    check: (ctx) => {
-        if (!ctx.entity || ctx.entity.op !== "replace")
-            return null;
-        return {
-            id: "R-P-4-03",
-            level: "MEDIUM",
-            category: "lifecycle",
-            title: "Entity replace — destructive",
-            description: `Replacing ${ctx.entity.entity1} with ${ctx.entity.entity2}; entity1 loses ALL permissions permanently`,
-            affected_stakeholders: ["entity"],
-            scenario: "Replacing a user who left the organization",
-            mitigation: "Prefer 'copy' over 'replace' if entity1 should retain permissions",
-            evidence: `entity1=${ctx.entity.entity1}, entity2=${ctx.entity.entity2}`,
-        };
-    },
-};
-const R_P_5_01 = {
-    id: "R-P-5-01",
-    category: "cross_object",
-    trigger: "Apply to Progress object (Permission becomes immutable on bind)",
-    check: (ctx) => {
-        if (!ctx.apply)
-            return null;
-        if (ctx.target_objects_types?.includes("Progress")) {
-            return {
-                id: "R-P-5-01",
-                level: "MEDIUM",
-                category: "cross_object",
-                title: "Apply to Progress — post-bind mutability limited",
-                description: "Once Permission is bound to Progress (which binds Machine), permission table changes may not affect already-published Machine workflow",
-                affected_stakeholders: ["owner"],
-                scenario: "Permission shared across Machine/Progress",
-                mitigation: "Configure all permission indexes before Machine publish",
-                evidence: `target=Progress`,
-            };
-        }
-        return null;
-    },
-};
-const R_P_5_02 = {
-    id: "R-P-5-02",
-    category: "cross_object",
-    trigger: "Permission reused across multiple host object types",
-    check: (ctx) => {
-        if (!ctx.target_objects_types || ctx.target_objects_types.length < 2)
-            return null;
-        const uniqueTypes = new Set(ctx.target_objects_types);
-        if (uniqueTypes.size > 1) {
-            return {
-                id: "R-P-5-02",
-                level: "MEDIUM",
-                category: "cross_object",
-                title: "Permission shared across heterogeneous objects",
-                description: `Single Permission applied to ${[...uniqueTypes].join(", ")}; permission indexes may have different semantics per object`,
-                affected_stakeholders: ["owner", "admin"],
-                scenario: "One Permission for both Service and Treasury",
-                mitigation: "Use separate Permission objects per host object type for clarity",
-                evidence: `types=${[...uniqueTypes].join(",")}`,
-            };
-        }
-        return null;
-    },
-};
-const R_P_5_03 = {
-    id: "R-P-5-03",
-    category: "cross_object",
-    trigger: "Treasury external_*_guard management (255/256) granted — verify guard lists are populated",
-    check: (ctx) => {
-        if (!ctx.table || !("index" in ctx.table) || typeof ctx.table.index !== "number")
-            return null;
-        const idx = ctx.table.index;
-        if (idx === 255 || idx === 256) {
-            return {
-                id: "R-P-5-03",
-                level: "HIGH",
-                category: "cross_object",
-                title: "Treasury external guard management granted — populate guard lists",
-                description: `Permission ${idx} (${idx === 255 ? "TREASURY_EXTERNAL_DEPOSIT_GUARD" : "TREASURY_EXTERNAL_WITHDRAW_GUARD"}) granted; ensure external_${idx === 255 ? "deposit" : "withdraw"}_guard list is populated via external_*_guard_add so external operations are authorized`,
-                affected_stakeholders: ["owner", "admin"],
-                scenario: "External treasury guard management without populated guard lists",
-                mitigation: `Call treasury.external_${idx === 255 ? "deposit" : "withdraw"}_guard_add to register Guard objects; external_deposit/external_withdraw require Guard + Passport (no Permission index)`,
-                evidence: `index=${idx}`,
-            };
-        }
-        return null;
-    },
-};
-const ALL_RULES = [
-    R_P_01, R_P_02, R_P_03, R_P_04,
-    R_P_2_01, R_P_2_02,
-    R_P_3_01, R_P_3_02, R_P_3_03,
-    R_P_4_01, R_P_4_02, R_P_4_03,
-    R_P_5_01, R_P_5_02, R_P_5_03,
-];
-export const PERMISSION_RISK_VERSION = "1.0.0";
-export function getAllRiskRules() {
-    return [...ALL_RULES];
-}
-export function getRiskRulesCount() {
-    return ALL_RULES.length;
-}
-export function getRiskRulesByCategory(category) {
-    return ALL_RULES.filter(r => r.category === category);
-}
-export function assessPermissionRisks(ctx) {
-    const risks = [];
-    for (const rule of ALL_RULES) {
-        const r = rule.check(ctx);
-        if (r)
-            risks.push(r);
-    }
-    const overall = risks.length === 0
-        ? "LOW"
-        : risks.some(r => r.level === "CRITICAL") ? "CRITICAL"
-            : risks.some(r => r.level === "HIGH") ? "HIGH"
-                : risks.some(r => r.level === "MEDIUM") ? "MEDIUM"
-                    : "LOW";
-    const byCategory = {};
-    for (const r of risks) {
-        byCategory[r.category] = (byCategory[r.category] ?? 0) + 1;
-    }
-    const advice = {};
-    for (const r of risks) {
-        for (const s of r.affected_stakeholders) {
-            if (!advice[s])
-                advice[s] = [];
-            advice[s].push(`${r.id}: ${r.mitigation}`);
-        }
-    }
-    return {
-        summary: `Assessed ${risks.length} risk(s) across ${Object.keys(byCategory).length} categories`,
-        risks,
-        overall_risk: overall,
-        risks_by_category: byCategory,
-        stakeholder_advice: advice,
-        needs_human_review: risks.some(r => r.level === "CRITICAL" || r.level === "HIGH"),
-    };
-}
+import{USER_DEFINED_PERM_INDEX_START,MAX_ENTITY_COUNT,MAX_PERM_FOR_ENTITY,MAX_ADMIN_COUNT}from'@wowok/wowok';import{isBuiltinPermission,findSceneByPermissionIndex}from'./permission-ledger.js';const R_P_01={'id':'R-P-1-01','category':'structural','trigger':'Custom\x20permission\x20index\x20<\x20USER_DEFINED_PERM_INDEX_START\x20(1000)\x20and\x20not\x20builtin','check':a=>{if(!a['table'])return null;if('index'in a['table']&&typeof a['table']['index']==='number'){const b=a['table']['index'];if(b<USER_DEFINED_PERM_INDEX_START&&!isBuiltinPermission(b))return{'id':'R-P-1-01','level':'CRITICAL','category':'structural','title':'Invalid\x20permission\x20index\x20(<\x201000\x20and\x20not\x20builtin)','description':'Permission\x20index\x20'+b+'\x20is\x20below\x20USER_DEFINED_PERM_INDEX_START\x20('+USER_DEFINED_PERM_INDEX_START+')\x20and\x20not\x20a\x20builtin\x20permission.\x20Custom\x20indexes\x20must\x20be\x20>=\x201000.','affected_stakeholders':['owner','admin','system'],'scenario':'User\x20defines\x20a\x20custom\x20permission\x20with\x20index\x20<\x201000','mitigation':'Use\x20index\x20>=\x20'+USER_DEFINED_PERM_INDEX_START+'\x20for\x20custom\x20permissions,\x20or\x20use\x20a\x20builtin\x20index\x20if\x20applicable','evidence':'index='+b};}return null;}},R_P_02={'id':'R-P-1-02','category':'structural','trigger':'Entity\x20count\x20exceeds\x20MAX_ENTITY_COUNT\x20(1000)','check':a=>{const b=a['current_entity_count']??0x0;if(b>MAX_ENTITY_COUNT)return{'id':'R-P-1-02','level':'HIGH','category':'structural','title':'Entity\x20count\x20exceeds\x20limit','description':'Permission\x20has\x20'+b+'\x20entities,\x20exceeds\x20MAX_ENTITY_COUNT\x20'+MAX_ENTITY_COUNT,'affected_stakeholders':['owner','admin'],'scenario':'Adding\x20entities\x20beyond\x20the\x20protocol\x20limit','mitigation':'Split\x20into\x20multiple\x20Permission\x20objects\x20or\x20remove\x20inactive\x20entities','evidence':'entity_count='+b};return null;}},R_P_03={'id':'R-P-1-03','category':'structural','trigger':'Per-entity\x20permission\x20count\x20exceeds\x20MAX_PERM_FOR_ENTITY\x20(1000)','check':a=>{if(a['table']&&'index'in a['table']&&Array['isArray'](a['table']['index'])){if(a['table']['index']['length']>MAX_PERM_FOR_ENTITY)return{'id':'R-P-1-03','level':'HIGH','category':'structural','title':'Per-entity\x20permission\x20count\x20exceeds\x20limit','description':'Entity\x20'+a['table']['entity']+'\x20has\x20'+a['table']['index']['length']+'\x20permissions,\x20exceeds\x20MAX_PERM_FOR_ENTITY\x20'+MAX_PERM_FOR_ENTITY,'affected_stakeholders':['entity','admin'],'scenario':'Granting\x20too\x20many\x20permissions\x20to\x20one\x20entity','mitigation':'Consolidate\x20similar\x20permissions\x20or\x20split\x20entity\x20into\x20multiple\x20roles','evidence':'perm_count='+a['table']['index']['length']};}return null;}},R_P_04={'id':'R-P-1-04','category':'structural','trigger':'Admin\x20count\x20exceeds\x20MAX_ADMIN_COUNT\x20(500)','check':a=>{if(a['admin']){const b=a['admin']['op']==='add'?(a['current_admin_count']??0x0)+a['admin']['addresses']['length']:a['admin']['addresses']['length'];if(b>MAX_ADMIN_COUNT)return{'id':'R-P-1-04','level':'HIGH','category':'structural','title':'Admin\x20count\x20exceeds\x20limit','description':'Admin\x20count\x20would\x20be\x20'+b+',\x20exceeds\x20MAX_ADMIN_COUNT\x20'+MAX_ADMIN_COUNT,'affected_stakeholders':['owner','admin'],'scenario':'Adding\x20too\x20many\x20admins','mitigation':'Remove\x20inactive\x20admins\x20before\x20adding\x20new\x20ones','evidence':'admin_count='+b};}return null;}},R_P_2_01={'id':'R-P-2-01','category':'semantic','trigger':'Builtin\x20permission\x20index\x20used\x20outside\x20its\x20host\x20object\x20scene','check':a=>{if(!a['table']||!('index'in a['table'])||typeof a['table']['index']!=='number')return null;const b=a['table']['index'];if(!isBuiltinPermission(b))return null;const c=findSceneByPermissionIndex(b);if(!c)return null;if(a['target_objects_types']&&a['target_objects_types']['length']>0x0){const d=a['target_objects_types']['filter'](e=>e!==c['host_object']);if(d['length']>0x0)return{'id':'R-P-2-01','level':'HIGH','category':'semantic','title':'Permission\x20index\x20host\x20object\x20mismatch','description':'Permission\x20'+b+'\x20('+c['builtin_indexes']['find'](e=>e['index']===b)?.['name']+')\x20is\x20for\x20'+c['host_object']+',\x20but\x20apply\x20targets:\x20'+d['join'](',\x20'),'affected_stakeholders':['owner','admin'],'scenario':'Using\x20SERVICE_*\x20index\x20on\x20Machine\x20object','mitigation':'Use\x20'+c['host_object']+'-specific\x20permission\x20indexes\x20for\x20'+d['join'](',\x20'),'evidence':'index='+b+',\x20targets='+d['join'](',')};}return null;}},R_P_2_02={'id':'R-P-2-02','category':'semantic','trigger':'Custom\x20permission\x20(>=\x201000)\x20without\x20remark','check':a=>{if(!a['table']||!('index'in a['table'])||typeof a['table']['index']!=='number')return null;const b=a['table']['index'];if(b<USER_DEFINED_PERM_INDEX_START)return null;if(a['remark']&&a['remark']['op']==='set'&&a['remark']['index']===b)return null;return{'id':'R-P-2-02','level':'LOW','category':'semantic','title':'Custom\x20permission\x20without\x20remark','description':'Custom\x20permission\x20'+b+'\x20has\x20no\x20remark;\x20future\x20maintainers\x20won\x27t\x20know\x20its\x20purpose','affected_stakeholders':['admin'],'scenario':'Adding\x20custom\x20permission\x20without\x20documentation','mitigation':'Add\x20remark:\x20{\x20op:\x20\x22set\x22,\x20index:\x20'+b+',\x20remark:\x20\x22<purpose>\x22\x20}','evidence':'index='+b};}},R_P_3_01={'id':'R-P-3-01','category':'authority','trigger':'Permission\x20over-concentration:\x20owner\x20is\x20the\x20only\x20admin','check':a=>{if(!a['admin']||a['admin']['op']!=='set')return null;if(a['admin']['addresses']['length']===0x1)return{'id':'R-P-3-01','level':'MEDIUM','category':'authority','title':'Permission\x20over-concentration','description':'Only\x20one\x20admin\x20(likely\x20owner);\x20loss\x20of\x20owner\x20key\x20means\x20permanent\x20lockout','affected_stakeholders':['owner'],'scenario':'Single-admin\x20Permission','mitigation':'Add\x201-2\x20backup\x20admins\x20with\x20limited\x20permission\x20indexes','evidence':'admin_count=1'};return null;}},R_P_3_02={'id':'R-P-3-02','category':'authority','trigger':'Permission\x20over-dispersion:\x20admin\x20count\x20>\x2050','check':a=>{if(!a['admin'])return null;const b=a['admin']['op']==='set'?a['admin']['addresses']['length']:a['current_admin_count']??0x0;if(b>0x32)return{'id':'R-P-3-02','level':'MEDIUM','category':'authority','title':'Permission\x20over-dispersion','description':b+'\x20admins\x20increases\x20coordination\x20cost\x20and\x20key-management\x20risk','affected_stakeholders':['owner','admin'],'scenario':'Large\x20admin\x20committee','mitigation':'Use\x20multi-sig\x20or\x20hierarchical\x20admin\x20structure','evidence':'admin_count='+b};return null;}},R_P_3_03={'id':'R-P-3-03','category':'authority','trigger':'UM\x20is\x20owner\x20self-reference','check':a=>{if(a['um']===undefined||a['um']===null)return null;if(a['builder']&&a['um']===a['builder'])return{'id':'R-P-3-03','level':'MEDIUM','category':'authority','title':'UM\x20is\x20owner\x20self-reference','description':'Setting\x20UM\x20to\x20owner\x20address\x20defeats\x20separation\x20of\x20concerns','affected_stakeholders':['owner'],'scenario':'Owner\x20delegates\x20UM\x20to\x20self','mitigation':'Use\x20a\x20separate\x20Contact\x20object\x20address\x20for\x20UM','evidence':'um='+a['um']};return null;}},R_P_4_01={'id':'R-P-4-01','category':'lifecycle','trigger':'Ownership\x20transfer\x20operation\x20(builder\x20field\x20set)','check':a=>{if(!a['builder'])return null;return{'id':'R-P-4-01','level':'HIGH','category':'lifecycle','title':'Ownership\x20transfer\x20—\x20irreversible','description':'Transferring\x20Permission\x20to\x20'+a['builder']+'.\x20Once\x20executed,\x20original\x20owner\x20loses\x20ALL\x20control\x20permanently.','affected_stakeholders':['owner'],'scenario':'Owner\x20transfers\x20Permission\x20to\x20new\x20address','mitigation':'1)\x20Verify\x20new\x20owner\x20address\x20twice.\x202)\x20Export\x20Permission\x20JSON\x20before\x20transfer.\x203)\x20Coordinate\x20with\x20new\x20owner\x20to\x20confirm\x20receipt.','evidence':'new_owner='+a['builder']};}},R_P_4_02={'id':'R-P-4-02','category':'lifecycle','trigger':'Apply\x20to\x20multiple\x20objects\x20at\x20once','check':a=>{if(!a['apply']||a['apply']['length']===0x0)return null;if(a['apply']['length']>0x3)return{'id':'R-P-4-02','level':'MEDIUM','category':'lifecycle','title':'Batch\x20apply\x20to\x20multiple\x20objects','description':'Applying\x20Permission\x20to\x20'+a['apply']['length']+'\x20objects\x20at\x20once;\x20if\x20any\x20object\x20type\x20mismatches,\x20transaction\x20may\x20fail\x20or\x20silently\x20misalign','affected_stakeholders':['owner'],'scenario':'Batch\x20apply\x20across\x20heterogeneous\x20objects','mitigation':'Apply\x20to\x201-3\x20objects\x20at\x20a\x20time;\x20verify\x20each\x20object\x20type\x20matches\x20permission\x20indexes','evidence':'apply_count='+a['apply']['length']};return null;}},R_P_4_03={'id':'R-P-4-03','category':'lifecycle','trigger':'Entity\x20replace\x20operation\x20(destructive)','check':a=>{if(!a['entity']||a['entity']['op']!=='replace')return null;return{'id':'R-P-4-03','level':'MEDIUM','category':'lifecycle','title':'Entity\x20replace\x20—\x20destructive','description':'Replacing\x20'+a['entity']['entity1']+'\x20with\x20'+a['entity']['entity2']+';\x20entity1\x20loses\x20ALL\x20permissions\x20permanently','affected_stakeholders':['entity'],'scenario':'Replacing\x20a\x20user\x20who\x20left\x20the\x20organization','mitigation':'Prefer\x20\x27copy\x27\x20over\x20\x27replace\x27\x20if\x20entity1\x20should\x20retain\x20permissions','evidence':'entity1='+a['entity']['entity1']+',\x20entity2='+a['entity']['entity2']};}},R_P_5_01={'id':'R-P-5-01','category':'cross_object','trigger':'Apply\x20to\x20Progress\x20object\x20(Permission\x20becomes\x20immutable\x20on\x20bind)','check':a=>{if(!a['apply'])return null;if(a['target_objects_types']?.['includes']('Progress'))return{'id':'R-P-5-01','level':'MEDIUM','category':'cross_object','title':'Apply\x20to\x20Progress\x20—\x20post-bind\x20mutability\x20limited','description':'Once\x20Permission\x20is\x20bound\x20to\x20Progress\x20(which\x20binds\x20Machine),\x20permission\x20table\x20changes\x20may\x20not\x20affect\x20already-published\x20Machine\x20workflow','affected_stakeholders':['owner'],'scenario':'Permission\x20shared\x20across\x20Machine/Progress','mitigation':'Configure\x20all\x20permission\x20indexes\x20before\x20Machine\x20publish','evidence':'target=Progress'};return null;}},R_P_5_02={'id':'R-P-5-02','category':'cross_object','trigger':'Permission\x20reused\x20across\x20multiple\x20host\x20object\x20types','check':a=>{if(!a['target_objects_types']||a['target_objects_types']['length']<0x2)return null;const b=new Set(a['target_objects_types']);if(b['size']>0x1)return{'id':'R-P-5-02','level':'MEDIUM','category':'cross_object','title':'Permission\x20shared\x20across\x20heterogeneous\x20objects','description':'Single\x20Permission\x20applied\x20to\x20'+[...b]['join'](',\x20')+';\x20permission\x20indexes\x20may\x20have\x20different\x20semantics\x20per\x20object','affected_stakeholders':['owner','admin'],'scenario':'One\x20Permission\x20for\x20both\x20Service\x20and\x20Treasury','mitigation':'Use\x20separate\x20Permission\x20objects\x20per\x20host\x20object\x20type\x20for\x20clarity','evidence':'types='+[...b]['join'](',')};return null;}},R_P_5_03={'id':'R-P-5-03','category':'cross_object','trigger':'Treasury\x20external_*_guard\x20management\x20(255/256)\x20granted\x20—\x20verify\x20guard\x20lists\x20are\x20populated','check':a=>{if(!a['table']||!('index'in a['table'])||typeof a['table']['index']!=='number')return null;const b=a['table']['index'];if(b===0xff||b===0x100)return{'id':'R-P-5-03','level':'HIGH','category':'cross_object','title':'Treasury\x20external\x20guard\x20management\x20granted\x20—\x20populate\x20guard\x20lists','description':'Permission\x20'+b+'\x20('+(b===0xff?'TREASURY_EXTERNAL_DEPOSIT_GUARD':'TREASURY_EXTERNAL_WITHDRAW_GUARD')+')\x20granted;\x20ensure\x20external_'+(b===0xff?'deposit':'withdraw')+'_guard\x20list\x20is\x20populated\x20via\x20external_*_guard_add\x20so\x20external\x20operations\x20are\x20authorized','affected_stakeholders':['owner','admin'],'scenario':'External\x20treasury\x20guard\x20management\x20without\x20populated\x20guard\x20lists','mitigation':'Call\x20treasury.external_'+(b===0xff?'deposit':'withdraw')+'_guard_add\x20to\x20register\x20Guard\x20objects;\x20external_deposit/external_withdraw\x20require\x20Guard\x20+\x20Passport\x20(no\x20Permission\x20index)','evidence':'index='+b};return null;}},ALL_RULES=[R_P_01,R_P_02,R_P_03,R_P_04,R_P_2_01,R_P_2_02,R_P_3_01,R_P_3_02,R_P_3_03,R_P_4_01,R_P_4_02,R_P_4_03,R_P_5_01,R_P_5_02,R_P_5_03];export const PERMISSION_RISK_VERSION='1.0.0';export function getAllRiskRules(){return[...ALL_RULES];}export function getRiskRulesCount(){return ALL_RULES['length'];}export function getRiskRulesByCategory(a){return ALL_RULES['filter'](b=>b['category']===a);}export function assessPermissionRisks(a){const b=[];for(const f of ALL_RULES){const g=f['check'](a);if(g)b['push'](g);}const c=b['length']===0x0?'LOW':b['some'](h=>h['level']==='CRITICAL')?'CRITICAL':b['some'](h=>h['level']==='HIGH')?'HIGH':b['some'](h=>h['level']==='MEDIUM')?'MEDIUM':'LOW',d={};for(const h of b){d[h['category']]=(d[h['category']]??0x0)+0x1;}const e={};for(const i of b){for(const j of i['affected_stakeholders']){if(!e[j])e[j]=[];e[j]['push'](i['id']+':\x20'+i['mitigation']);}}return{'summary':'Assessed\x20'+b['length']+'\x20risk(s)\x20across\x20'+Object['keys'](d)['length']+'\x20categories','risks':b,'overall_risk':c,'risks_by_category':d,'stakeholder_advice':e,'needs_human_review':b['some'](k=>k['level']==='CRITICAL'||k['level']==='HIGH')};}