@wowok/agent-mcp 2.7.1 → 2.7.2

package/dist/knowledge/treasury-risk.js

@@ -1,440 +1 @@
-import { MAX_EXTERNAL_DEPOSIT_GUARD_COUNT, MAX_EXTERNAL_WITHDRAW_GUARD_COUNT, MAX_DESCRIPTION_LENGTH, } from "./treasury-puzzle.js";
-const R_T_1_01 = {
-    id: "R-T-1-01",
-    category: "structural",
-    trigger: "Description length exceeds MAX_DESCRIPTION_LENGTH (4000)",
-    check: (ctx) => {
-        if (!ctx.description)
-            return null;
-        if (ctx.description.length > MAX_DESCRIPTION_LENGTH) {
-            return {
-                id: "R-T-1-01",
-                level: "HIGH",
-                category: "structural",
-                title: "Description length exceeds limit",
-                description: `Description length ${ctx.description.length} exceeds MAX_DESCRIPTION_LENGTH ${MAX_DESCRIPTION_LENGTH}`,
-                affected_stakeholders: ["owner", "admin"],
-                scenario: "Setting a description longer than 4000 characters",
-                mitigation: "Truncate description to fit within 4000 characters",
-                evidence: `length=${ctx.description.length}`,
-            };
-        }
-        return null;
-    },
-};
-const R_T_1_02 = {
-    id: "R-T-1-02",
-    category: "structural",
-    trigger: "external_deposit_guard count exceeds MAX_EXTERNAL_DEPOSIT_GUARD_COUNT (100)",
-    check: (ctx) => {
-        if (!ctx.external_deposit_guard || ctx.external_deposit_guard.op !== "add")
-            return null;
-        const current = ctx.current_external_deposit_guard_count ?? 0;
-        const adding = ctx.external_deposit_guard.guards.length;
-        if (current + adding > MAX_EXTERNAL_DEPOSIT_GUARD_COUNT) {
-            return {
-                id: "R-T-1-02",
-                level: "HIGH",
-                category: "structural",
-                title: "external_deposit_guard count exceeds limit",
-                description: `Adding ${adding} guards to existing ${current} would exceed MAX_EXTERNAL_DEPOSIT_GUARD_COUNT ${MAX_EXTERNAL_DEPOSIT_GUARD_COUNT}`,
-                affected_stakeholders: ["owner"],
-                scenario: "Adding too many external deposit guards",
-                mitigation: "Remove unused guards before adding new ones, or use 'set' to replace the list",
-                evidence: `current=${current}, adding=${adding}, limit=${MAX_EXTERNAL_DEPOSIT_GUARD_COUNT}`,
-            };
-        }
-        return null;
-    },
-};
-const R_T_1_03 = {
-    id: "R-T-1-03",
-    category: "structural",
-    trigger: "external_withdraw_guard count exceeds MAX_EXTERNAL_WITHDRAW_GUARD_COUNT (200)",
-    check: (ctx) => {
-        if (!ctx.external_withdraw_guard || ctx.external_withdraw_guard.op !== "add")
-            return null;
-        const current = ctx.current_external_withdraw_guard_count ?? 0;
-        const adding = ctx.external_withdraw_guard.guards.length;
-        if (current + adding > MAX_EXTERNAL_WITHDRAW_GUARD_COUNT) {
-            return {
-                id: "R-T-1-03",
-                level: "HIGH",
-                category: "structural",
-                title: "external_withdraw_guard count exceeds limit",
-                description: `Adding ${adding} guards to existing ${current} would exceed MAX_EXTERNAL_WITHDRAW_GUARD_COUNT ${MAX_EXTERNAL_WITHDRAW_GUARD_COUNT}`,
-                affected_stakeholders: ["owner"],
-                scenario: "Adding too many external withdraw guards",
-                mitigation: "Remove unused guards before adding new ones, or use 'set' to replace the list",
-                evidence: `current=${current}, adding=${adding}, limit=${MAX_EXTERNAL_WITHDRAW_GUARD_COUNT}`,
-            };
-        }
-        return null;
-    },
-};
-const R_T_1_04 = {
-    id: "R-T-1-04",
-    category: "structural",
-    trigger: "external_withdraw_guard.identifier is missing (required u8, not Option)",
-    check: (ctx) => {
-        if (!ctx.external_withdraw_guard)
-            return null;
-        if (ctx.external_withdraw_guard.op !== "add" && ctx.external_withdraw_guard.op !== "set")
-            return null;
-        for (const g of ctx.external_withdraw_guard.guards) {
-            if (g.identifier === undefined || g.identifier === null) {
-                return {
-                    id: "R-T-1-04",
-                    level: "HIGH",
-                    category: "structural",
-                    title: "external_withdraw_guard.identifier missing",
-                    description: `Guard ${g.guard} missing required identifier. AmountFromWithdrawGuard.identifier is u8 (not Option<u8>); withdraw amount must come from Guard table.`,
-                    affected_stakeholders: ["owner", "external_operator"],
-                    scenario: "Configuring external withdraw guard without amount source",
-                    mitigation: `Set identifier to the Guard table index that provides the withdraw amount (must be a number-type field)`,
-                    evidence: `guard=${g.guard}, identifier=undefined`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_T_2_01 = {
-    id: "R-T-2-01",
-    category: "semantic",
-    trigger: "External operation (deposit/withdraw) requested without corresponding guard configured",
-    check: (ctx) => {
-        if (ctx.deposit?.by_external_deposit_guard) {
-            const guardName = ctx.deposit.by_external_deposit_guard;
-            if ((ctx.current_external_deposit_guard_count ?? 0) === 0) {
-                return {
-                    id: "R-T-2-01",
-                    level: "MEDIUM",
-                    category: "semantic",
-                    title: "External deposit guard list is empty",
-                    description: `Requesting external_deposit via guard ${guardName}, but Treasury has no external_deposit_guard configured. Operation will abort with E_EXTERNAL_DEPOSIT_GUARD_NOT_FOUND.`,
-                    affected_stakeholders: ["external_operator", "owner"],
-                    scenario: "External deposit attempted before guard_add",
-                    mitigation: `Call external_deposit_guard_add (Permission index 255) first to register guard ${guardName}`,
-                    evidence: `guard=${guardName}, current_count=0`,
-                };
-            }
-        }
-        if (ctx.withdraw?.amount_by_external_withdraw_guard) {
-            const guardName = ctx.withdraw.amount_by_external_withdraw_guard;
-            if ((ctx.current_external_withdraw_guard_count ?? 0) === 0) {
-                return {
-                    id: "R-T-2-01",
-                    level: "MEDIUM",
-                    category: "semantic",
-                    title: "External withdraw guard list is empty",
-                    description: `Requesting external_withdraw via guard ${guardName}, but Treasury has no external_withdraw_guard configured. Operation will abort with E_EXTERNAL_WITHDRAW_GUARD_NOT_FOUND.`,
-                    affected_stakeholders: ["external_operator", "owner"],
-                    scenario: "External withdraw attempted before guard_add",
-                    mitigation: `Call external_withdraw_guard_add (Permission index 256) first to register guard ${guardName}`,
-                    evidence: `guard=${guardName}, current_count=0`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_T_2_02 = {
-    id: "R-T-2-02",
-    category: "semantic",
-    trigger: "External operation paired with Permission path (confused access control)",
-    check: (ctx) => {
-        if (ctx.deposit?.by_external_deposit_guard && ctx.current_permission_indexes_granted?.includes(252)) {
-            return {
-                id: "R-T-2-02",
-                level: "LOW",
-                category: "semantic",
-                title: "Both Permission deposit and external deposit guard configured",
-                description: "Treasury has both TREASURY_DEPOSIT (252) granted and external_deposit_guard configured. While not an error, mixing access paths complicates audit.",
-                affected_stakeholders: ["owner", "admin"],
-                scenario: "Hybrid internal+external deposit setup",
-                mitigation: "Document which path each depositor should use; consider splitting into separate Treasury objects for clarity",
-                evidence: `has_perm_252=true, has_external_deposit_guard=true`,
-            };
-        }
-        return null;
-    },
-};
-const R_T_2_03 = {
-    id: "R-T-2-03",
-    category: "semantic",
-    trigger: "external_deposit amount exceeds guard-specified value (split-and-refund path)",
-    check: (ctx) => {
-        if (!ctx.deposit?.by_external_deposit_guard || !ctx.deposit?.coin_balance)
-            return null;
-        return {
-            id: "R-T-2-03",
-            level: "LOW",
-            category: "semantic",
-            title: "External deposit may trigger split-and-refund",
-            description: `If coin value (${ctx.deposit.coin_balance}) exceeds guard-specified amount, the excess will be split and refunded to sender. Verify intent.`,
-            affected_stakeholders: ["external_operator"],
-            scenario: "External deposit with coin value > guard limit",
-            mitigation: "Pre-split the coin to exact guard-specified amount, or accept the refund behavior",
-            evidence: `coin_balance=${ctx.deposit.coin_balance}`,
-        };
-    },
-};
-const R_T_3_01 = {
-    id: "R-T-3-01",
-    category: "authority",
-    trigger: "Same address holds both TREASURY_DEPOSIT (252) and TREASURY_WITHDRAW (254)",
-    check: (ctx) => {
-        if (!ctx.current_permission_indexes_granted)
-            return null;
-        const has252 = ctx.current_permission_indexes_granted.includes(252);
-        const has254 = ctx.current_permission_indexes_granted.includes(254);
-        if (has252 && has254) {
-            return {
-                id: "R-T-3-01",
-                level: "MEDIUM",
-                category: "authority",
-                title: "Deposit and withdraw permissions both present (review separation)",
-                description: "Both TREASURY_DEPOSIT (252) and TREASURY_WITHDRAW (254) are granted. Verify they are assigned to different entities to enforce separation of duties.",
-                affected_stakeholders: ["owner", "depositor", "withdrawer"],
-                scenario: "Single role can both add and remove funds",
-                mitigation: "Assign 252 to depositor role, 254 to withdrawer role; use separate Permission objects if needed",
-                evidence: `has_252=true, has_254=true`,
-            };
-        }
-        return null;
-    },
-};
-const R_T_3_02 = {
-    id: "R-T-3-02",
-    category: "authority",
-    trigger: "TREASURY_EXTERNAL_DEPOSIT_GUARD (255) granted to non-owner (admin-level risk)",
-    check: (ctx) => {
-        if (!ctx.current_permission_indexes_granted?.includes(255))
-            return null;
-        return {
-            id: "R-T-3-02",
-            level: "MEDIUM",
-            category: "authority",
-            title: "External deposit guard management permission granted",
-            description: "TREASURY_EXTERNAL_DEPOSIT_GUARD (255) is granted. Managing external_deposit_guard list controls who can externally deposit. Verify assignment scope.",
-            affected_stakeholders: ["owner", "admin"],
-            scenario: "Guard management delegated to operator",
-            mitigation: "Restrict 255 to owner/admin only; guard list changes affect external access policy",
-            evidence: `has_perm_255=true`,
-        };
-    },
-};
-const R_T_3_03 = {
-    id: "R-T-3-03",
-    category: "authority",
-    trigger: "TREASURY_EXTERNAL_WITHDRAW_GUARD (256) granted — high-impact permission",
-    check: (ctx) => {
-        if (!ctx.current_permission_indexes_granted?.includes(256))
-            return null;
-        return {
-            id: "R-T-3-03",
-            level: "HIGH",
-            category: "authority",
-            title: "External withdraw guard management permission granted",
-            description: "TREASURY_EXTERNAL_WITHDRAW_GUARD (256) is granted. Managing external_withdraw_guard list controls who can externally withdraw (irreversible). Tightly restrict.",
-            affected_stakeholders: ["owner", "withdrawer"],
-            scenario: "External withdraw guard management delegated",
-            mitigation: "Restrict 256 to owner only; consider multi-sig for production Treasury",
-            evidence: `has_perm_256=true`,
-        };
-    },
-};
-const R_T_4_01 = {
-    id: "R-T-4-01",
-    category: "lifecycle",
-    trigger: "Internal withdraw (fixed amount) — irreversible fund operation",
-    check: (ctx) => {
-        if (!ctx.withdraw?.amount_fixed)
-            return null;
-        return {
-            id: "R-T-4-01",
-            level: "CRITICAL",
-            category: "lifecycle",
-            title: "Internal withdraw is irreversible",
-            description: `Fixed withdraw of ${ctx.withdraw.amount_fixed} to ${ctx.withdraw.recipient ?? "recipient"}. Once executed, funds cannot be recovered without recipient cooperation.`,
-            affected_stakeholders: ["owner", "withdrawer"],
-            scenario: "Permission-authorized withdraw (254)",
-            mitigation: "1) Verify recipient address twice. 2) Confirm amount. 3) Check balance sufficiency. 4) Record Payment object for audit.",
-            evidence: `amount=${ctx.withdraw.amount_fixed}, recipient=${ctx.withdraw.recipient ?? "?"}`,
-        };
-    },
-};
-const R_T_4_02 = {
-    id: "R-T-4-02",
-    category: "lifecycle",
-    trigger: "External withdraw (via guard) — irreversible fund operation",
-    check: (ctx) => {
-        if (!ctx.withdraw?.amount_by_external_withdraw_guard)
-            return null;
-        return {
-            id: "R-T-4-02",
-            level: "CRITICAL",
-            category: "lifecycle",
-            title: "External withdraw is irreversible",
-            description: `External withdraw via guard ${ctx.withdraw.amount_by_external_withdraw_guard} to ${ctx.withdraw.recipient ?? "recipient"}. Amount determined by Guard table identifier; verify Guard rules before execution.`,
-            affected_stakeholders: ["owner", "external_operator", "withdrawer"],
-            scenario: "Guard-authorized external withdraw",
-            mitigation: "1) Verify Guard rules match business intent. 2) Verify recipient. 3) Ensure Guard identifier points to correct amount field. 4) Test on testnet first.",
-            evidence: `guard=${ctx.withdraw.amount_by_external_withdraw_guard}, recipient=${ctx.withdraw.recipient ?? "?"}`,
-        };
-    },
-};
-const R_T_4_03 = {
-    id: "R-T-4-03",
-    category: "lifecycle",
-    trigger: "UM set or revoked — affiliation change",
-    check: (ctx) => {
-        if (ctx.um === undefined)
-            return null;
-        if (ctx.um === null) {
-            return {
-                id: "R-T-4-03",
-                level: "LOW",
-                category: "lifecycle",
-                title: "UM revocation",
-                description: "Revoking UM disaffiliates Contact from Treasury via Registrar. Existing contact bindings become orphaned.",
-                affected_stakeholders: ["owner"],
-                scenario: "Owner revokes UM (um_none)",
-                mitigation: "Verify no active business process depends on UM before revoking",
-                evidence: `um=null`,
-            };
-        }
-        return {
-            id: "R-T-4-03",
-            level: "LOW",
-            category: "lifecycle",
-            title: "UM delegation",
-            description: `Setting UM to ${ctx.um}. UM (Contact object) gains affiliation with Treasury via Registrar.`,
-            affected_stakeholders: ["owner"],
-            scenario: "Owner delegates UM (um_set)",
-            mitigation: "Verify UM address is a valid Contact object (not a user wallet)",
-            evidence: `um=${ctx.um}`,
-        };
-    },
-};
-const R_T_5_01 = {
-    id: "R-T-5-01",
-    category: "cross_object",
-    trigger: "Treasury shared with Service via common Permission — verify alignment",
-    check: (ctx) => {
-        if (!ctx.shared_with_service)
-            return null;
-        return {
-            id: "R-T-5-01",
-            level: "MEDIUM",
-            category: "cross_object",
-            title: "Treasury-Service Permission sharing — verify index alignment",
-            description: "Treasury and Service share a Permission object. Ensure Treasury indexes (250-258) and Service indexes (300-320) are assigned to intended entities; cross-object admin changes affect both.",
-            affected_stakeholders: ["owner", "admin"],
-            scenario: "Single Permission for both Treasury and Service",
-            mitigation: "Document which entities hold which indexes across both objects; review admin list changes for cross-impact",
-            evidence: `shared_with_service=true`,
-        };
-    },
-};
-const R_T_5_02 = {
-    id: "R-T-5-02",
-    category: "cross_object",
-    trigger: "Treasury referenced by Allocator/Arbitration — receive (253) must be granted",
-    check: (ctx) => {
-        if (!ctx.shared_with_allocator && !ctx.shared_with_arbitration)
-            return null;
-        const has253 = ctx.current_permission_indexes_granted?.includes(253);
-        if (!has253) {
-            return {
-                id: "R-T-5-02",
-                level: "HIGH",
-                category: "cross_object",
-                title: "Treasury referenced by Allocator/Arbitration but TREASURY_RECEIVE (253) not granted",
-                description: "Allocator/Arbitration will send CoinWrapper/Payment to Treasury, but no entity has TREASURY_RECEIVE (253) to call treasury::receive and convert to balance. Funds will accumulate as received objects without entering balance.",
-                affected_stakeholders: ["owner", "system"],
-                scenario: "Revenue collection setup without receive permission",
-                mitigation: "Grant TREASURY_RECEIVE (253) to a trusted operator (or owner) who will regularly call receive to convert CoinWrapper to balance",
-                evidence: `shared_allocator=${ctx.shared_with_allocator}, shared_arbitration=${ctx.shared_with_arbitration}, has_253=false`,
-            };
-        }
-        return null;
-    },
-};
-const R_T_0_01 = {
-    id: "R-T-0-01",
-    category: "structural",
-    trigger: "Permission index in 259-260 range detected (regression check for R-T-01)",
-    check: (ctx) => {
-        if (!ctx.current_permission_indexes_granted)
-            return null;
-        const stale = ctx.current_permission_indexes_granted.filter(i => i === 259 || i === 260);
-        if (stale.length > 0) {
-            return {
-                id: "R-T-0-01",
-                level: "CRITICAL",
-                category: "structural",
-                title: "Stale Treasury permission index 259/260 detected (R-T-01 regression)",
-                description: `Permission indexes 259/260 are no longer valid Treasury indexes (SDK fixed to use 255-258 matching Move). Found: ${stale.join(", ")}`,
-                affected_stakeholders: ["owner", "admin", "system"],
-                scenario: "SDK regression reintroducing off-by-2 divergence",
-                mitigation: "Use canonical indexes: 255=EXTERNAL_DEPOSIT_GUARD, 256=EXTERNAL_WITHDRAW_GUARD, 257=OWNER_RECEIVE, 258=UM",
-                evidence: `stale_indexes=${stale.join(",")}`,
-            };
-        }
-        return null;
-    },
-};
-const ALL_RULES = [
-    R_T_1_01, R_T_1_02, R_T_1_03, R_T_1_04,
-    R_T_2_01, R_T_2_02, R_T_2_03,
-    R_T_3_01, R_T_3_02, R_T_3_03,
-    R_T_4_01, R_T_4_02, R_T_4_03,
-    R_T_5_01, R_T_5_02,
-    R_T_0_01,
-];
-export const TREASURY_RISK_VERSION = "1.0.0";
-export function getAllTreasuryRiskRules() {
-    return [...ALL_RULES];
-}
-export function getTreasuryRiskRulesCount() {
-    return ALL_RULES.length;
-}
-export function getTreasuryRiskRulesByCategory(category) {
-    return ALL_RULES.filter(r => r.category === category);
-}
-export function assessTreasuryRisks(ctx) {
-    const risks = [];
-    for (const rule of ALL_RULES) {
-        const r = rule.check(ctx);
-        if (r)
-            risks.push(r);
-    }
-    const overall = risks.length === 0
-        ? "LOW"
-        : risks.some(r => r.level === "CRITICAL") ? "CRITICAL"
-            : risks.some(r => r.level === "HIGH") ? "HIGH"
-                : risks.some(r => r.level === "MEDIUM") ? "MEDIUM"
-                    : "LOW";
-    const byCategory = {};
-    for (const r of risks) {
-        byCategory[r.category] = (byCategory[r.category] ?? 0) + 1;
-    }
-    const advice = {};
-    for (const r of risks) {
-        for (const s of r.affected_stakeholders) {
-            if (!advice[s])
-                advice[s] = [];
-            advice[s].push(`${r.id}: ${r.mitigation}`);
-        }
-    }
-    return {
-        summary: `Assessed ${risks.length} risk(s) across ${Object.keys(byCategory).length} categories`,
-        risks,
-        overall_risk: overall,
-        risks_by_category: byCategory,
-        stakeholder_advice: advice,
-        needs_human_review: risks.some(r => r.level === "CRITICAL" || r.level === "HIGH"),
-    };
-}
+import{MAX_EXTERNAL_DEPOSIT_GUARD_COUNT,MAX_EXTERNAL_WITHDRAW_GUARD_COUNT,MAX_DESCRIPTION_LENGTH}from'./treasury-puzzle.js';const R_T_1_01={'id':'R-T-1-01','category':'structural','trigger':'Description\x20length\x20exceeds\x20MAX_DESCRIPTION_LENGTH\x20(4000)','check':a=>{if(!a['description'])return null;if(a['description']['length']>MAX_DESCRIPTION_LENGTH)return{'id':'R-T-1-01','level':'HIGH','category':'structural','title':'Description\x20length\x20exceeds\x20limit','description':'Description\x20length\x20'+a['description']['length']+'\x20exceeds\x20MAX_DESCRIPTION_LENGTH\x20'+MAX_DESCRIPTION_LENGTH,'affected_stakeholders':['owner','admin'],'scenario':'Setting\x20a\x20description\x20longer\x20than\x204000\x20characters','mitigation':'Truncate\x20description\x20to\x20fit\x20within\x204000\x20characters','evidence':'length='+a['description']['length']};return null;}},R_T_1_02={'id':'R-T-1-02','category':'structural','trigger':'external_deposit_guard\x20count\x20exceeds\x20MAX_EXTERNAL_DEPOSIT_GUARD_COUNT\x20(100)','check':a=>{if(!a['external_deposit_guard']||a['external_deposit_guard']['op']!=='add')return null;const b=a['current_external_deposit_guard_count']??0x0,c=a['external_deposit_guard']['guards']['length'];if(b+c>MAX_EXTERNAL_DEPOSIT_GUARD_COUNT)return{'id':'R-T-1-02','level':'HIGH','category':'structural','title':'external_deposit_guard\x20count\x20exceeds\x20limit','description':'Adding\x20'+c+'\x20guards\x20to\x20existing\x20'+b+'\x20would\x20exceed\x20MAX_EXTERNAL_DEPOSIT_GUARD_COUNT\x20'+MAX_EXTERNAL_DEPOSIT_GUARD_COUNT,'affected_stakeholders':['owner'],'scenario':'Adding\x20too\x20many\x20external\x20deposit\x20guards','mitigation':'Remove\x20unused\x20guards\x20before\x20adding\x20new\x20ones,\x20or\x20use\x20\x27set\x27\x20to\x20replace\x20the\x20list','evidence':'current='+b+',\x20adding='+c+',\x20limit='+MAX_EXTERNAL_DEPOSIT_GUARD_COUNT};return null;}},R_T_1_03={'id':'R-T-1-03','category':'structural','trigger':'external_withdraw_guard\x20count\x20exceeds\x20MAX_EXTERNAL_WITHDRAW_GUARD_COUNT\x20(200)','check':a=>{if(!a['external_withdraw_guard']||a['external_withdraw_guard']['op']!=='add')return null;const b=a['current_external_withdraw_guard_count']??0x0,c=a['external_withdraw_guard']['guards']['length'];if(b+c>MAX_EXTERNAL_WITHDRAW_GUARD_COUNT)return{'id':'R-T-1-03','level':'HIGH','category':'structural','title':'external_withdraw_guard\x20count\x20exceeds\x20limit','description':'Adding\x20'+c+'\x20guards\x20to\x20existing\x20'+b+'\x20would\x20exceed\x20MAX_EXTERNAL_WITHDRAW_GUARD_COUNT\x20'+MAX_EXTERNAL_WITHDRAW_GUARD_COUNT,'affected_stakeholders':['owner'],'scenario':'Adding\x20too\x20many\x20external\x20withdraw\x20guards','mitigation':'Remove\x20unused\x20guards\x20before\x20adding\x20new\x20ones,\x20or\x20use\x20\x27set\x27\x20to\x20replace\x20the\x20list','evidence':'current='+b+',\x20adding='+c+',\x20limit='+MAX_EXTERNAL_WITHDRAW_GUARD_COUNT};return null;}},R_T_1_04={'id':'R-T-1-04','category':'structural','trigger':'external_withdraw_guard.identifier\x20is\x20missing\x20(required\x20u8,\x20not\x20Option)','check':a=>{if(!a['external_withdraw_guard'])return null;if(a['external_withdraw_guard']['op']!=='add'&&a['external_withdraw_guard']['op']!=='set')return null;for(const b of a['external_withdraw_guard']['guards']){if(b['identifier']===undefined||b['identifier']===null)return{'id':'R-T-1-04','level':'HIGH','category':'structural','title':'external_withdraw_guard.identifier\x20missing','description':'Guard\x20'+b['guard']+'\x20missing\x20required\x20identifier.\x20AmountFromWithdrawGuard.identifier\x20is\x20u8\x20(not\x20Option<u8>);\x20withdraw\x20amount\x20must\x20come\x20from\x20Guard\x20table.','affected_stakeholders':['owner','external_operator'],'scenario':'Configuring\x20external\x20withdraw\x20guard\x20without\x20amount\x20source','mitigation':'Set\x20identifier\x20to\x20the\x20Guard\x20table\x20index\x20that\x20provides\x20the\x20withdraw\x20amount\x20(must\x20be\x20a\x20number-type\x20field)','evidence':'guard='+b['guard']+',\x20identifier=undefined'};}return null;}},R_T_2_01={'id':'R-T-2-01','category':'semantic','trigger':'External\x20operation\x20(deposit/withdraw)\x20requested\x20without\x20corresponding\x20guard\x20configured','check':a=>{if(a['deposit']?.['by_external_deposit_guard']){const b=a['deposit']['by_external_deposit_guard'];if((a['current_external_deposit_guard_count']??0x0)===0x0)return{'id':'R-T-2-01','level':'MEDIUM','category':'semantic','title':'External\x20deposit\x20guard\x20list\x20is\x20empty','description':'Requesting\x20external_deposit\x20via\x20guard\x20'+b+',\x20but\x20Treasury\x20has\x20no\x20external_deposit_guard\x20configured.\x20Operation\x20will\x20abort\x20with\x20E_EXTERNAL_DEPOSIT_GUARD_NOT_FOUND.','affected_stakeholders':['external_operator','owner'],'scenario':'External\x20deposit\x20attempted\x20before\x20guard_add','mitigation':'Call\x20external_deposit_guard_add\x20(Permission\x20index\x20255)\x20first\x20to\x20register\x20guard\x20'+b,'evidence':'guard='+b+',\x20current_count=0'};}if(a['withdraw']?.['amount_by_external_withdraw_guard']){const c=a['withdraw']['amount_by_external_withdraw_guard'];if((a['current_external_withdraw_guard_count']??0x0)===0x0)return{'id':'R-T-2-01','level':'MEDIUM','category':'semantic','title':'External\x20withdraw\x20guard\x20list\x20is\x20empty','description':'Requesting\x20external_withdraw\x20via\x20guard\x20'+c+',\x20but\x20Treasury\x20has\x20no\x20external_withdraw_guard\x20configured.\x20Operation\x20will\x20abort\x20with\x20E_EXTERNAL_WITHDRAW_GUARD_NOT_FOUND.','affected_stakeholders':['external_operator','owner'],'scenario':'External\x20withdraw\x20attempted\x20before\x20guard_add','mitigation':'Call\x20external_withdraw_guard_add\x20(Permission\x20index\x20256)\x20first\x20to\x20register\x20guard\x20'+c,'evidence':'guard='+c+',\x20current_count=0'};}return null;}},R_T_2_02={'id':'R-T-2-02','category':'semantic','trigger':'External\x20operation\x20paired\x20with\x20Permission\x20path\x20(confused\x20access\x20control)','check':a=>{if(a['deposit']?.['by_external_deposit_guard']&&a['current_permission_indexes_granted']?.['includes'](0xfc))return{'id':'R-T-2-02','level':'LOW','category':'semantic','title':'Both\x20Permission\x20deposit\x20and\x20external\x20deposit\x20guard\x20configured','description':'Treasury\x20has\x20both\x20TREASURY_DEPOSIT\x20(252)\x20granted\x20and\x20external_deposit_guard\x20configured.\x20While\x20not\x20an\x20error,\x20mixing\x20access\x20paths\x20complicates\x20audit.','affected_stakeholders':['owner','admin'],'scenario':'Hybrid\x20internal+external\x20deposit\x20setup','mitigation':'Document\x20which\x20path\x20each\x20depositor\x20should\x20use;\x20consider\x20splitting\x20into\x20separate\x20Treasury\x20objects\x20for\x20clarity','evidence':'has_perm_252=true,\x20has_external_deposit_guard=true'};return null;}},R_T_2_03={'id':'R-T-2-03','category':'semantic','trigger':'external_deposit\x20amount\x20exceeds\x20guard-specified\x20value\x20(split-and-refund\x20path)','check':a=>{if(!a['deposit']?.['by_external_deposit_guard']||!a['deposit']?.['coin_balance'])return null;return{'id':'R-T-2-03','level':'LOW','category':'semantic','title':'External\x20deposit\x20may\x20trigger\x20split-and-refund','description':'If\x20coin\x20value\x20('+a['deposit']['coin_balance']+')\x20exceeds\x20guard-specified\x20amount,\x20the\x20excess\x20will\x20be\x20split\x20and\x20refunded\x20to\x20sender.\x20Verify\x20intent.','affected_stakeholders':['external_operator'],'scenario':'External\x20deposit\x20with\x20coin\x20value\x20>\x20guard\x20limit','mitigation':'Pre-split\x20the\x20coin\x20to\x20exact\x20guard-specified\x20amount,\x20or\x20accept\x20the\x20refund\x20behavior','evidence':'coin_balance='+a['deposit']['coin_balance']};}},R_T_3_01={'id':'R-T-3-01','category':'authority','trigger':'Same\x20address\x20holds\x20both\x20TREASURY_DEPOSIT\x20(252)\x20and\x20TREASURY_WITHDRAW\x20(254)','check':a=>{if(!a['current_permission_indexes_granted'])return null;const b=a['current_permission_indexes_granted']['includes'](0xfc),c=a['current_permission_indexes_granted']['includes'](0xfe);if(b&&c)return{'id':'R-T-3-01','level':'MEDIUM','category':'authority','title':'Deposit\x20and\x20withdraw\x20permissions\x20both\x20present\x20(review\x20separation)','description':'Both\x20TREASURY_DEPOSIT\x20(252)\x20and\x20TREASURY_WITHDRAW\x20(254)\x20are\x20granted.\x20Verify\x20they\x20are\x20assigned\x20to\x20different\x20entities\x20to\x20enforce\x20separation\x20of\x20duties.','affected_stakeholders':['owner','depositor','withdrawer'],'scenario':'Single\x20role\x20can\x20both\x20add\x20and\x20remove\x20funds','mitigation':'Assign\x20252\x20to\x20depositor\x20role,\x20254\x20to\x20withdrawer\x20role;\x20use\x20separate\x20Permission\x20objects\x20if\x20needed','evidence':'has_252=true,\x20has_254=true'};return null;}},R_T_3_02={'id':'R-T-3-02','category':'authority','trigger':'TREASURY_EXTERNAL_DEPOSIT_GUARD\x20(255)\x20granted\x20to\x20non-owner\x20(admin-level\x20risk)','check':a=>{if(!a['current_permission_indexes_granted']?.['includes'](0xff))return null;return{'id':'R-T-3-02','level':'MEDIUM','category':'authority','title':'External\x20deposit\x20guard\x20management\x20permission\x20granted','description':'TREASURY_EXTERNAL_DEPOSIT_GUARD\x20(255)\x20is\x20granted.\x20Managing\x20external_deposit_guard\x20list\x20controls\x20who\x20can\x20externally\x20deposit.\x20Verify\x20assignment\x20scope.','affected_stakeholders':['owner','admin'],'scenario':'Guard\x20management\x20delegated\x20to\x20operator','mitigation':'Restrict\x20255\x20to\x20owner/admin\x20only;\x20guard\x20list\x20changes\x20affect\x20external\x20access\x20policy','evidence':'has_perm_255=true'};}},R_T_3_03={'id':'R-T-3-03','category':'authority','trigger':'TREASURY_EXTERNAL_WITHDRAW_GUARD\x20(256)\x20granted\x20—\x20high-impact\x20permission','check':a=>{if(!a['current_permission_indexes_granted']?.['includes'](0x100))return null;return{'id':'R-T-3-03','level':'HIGH','category':'authority','title':'External\x20withdraw\x20guard\x20management\x20permission\x20granted','description':'TREASURY_EXTERNAL_WITHDRAW_GUARD\x20(256)\x20is\x20granted.\x20Managing\x20external_withdraw_guard\x20list\x20controls\x20who\x20can\x20externally\x20withdraw\x20(irreversible).\x20Tightly\x20restrict.','affected_stakeholders':['owner','withdrawer'],'scenario':'External\x20withdraw\x20guard\x20management\x20delegated','mitigation':'Restrict\x20256\x20to\x20owner\x20only;\x20consider\x20multi-sig\x20for\x20production\x20Treasury','evidence':'has_perm_256=true'};}},R_T_4_01={'id':'R-T-4-01','category':'lifecycle','trigger':'Internal\x20withdraw\x20(fixed\x20amount)\x20—\x20irreversible\x20fund\x20operation','check':a=>{if(!a['withdraw']?.['amount_fixed'])return null;return{'id':'R-T-4-01','level':'CRITICAL','category':'lifecycle','title':'Internal\x20withdraw\x20is\x20irreversible','description':'Fixed\x20withdraw\x20of\x20'+a['withdraw']['amount_fixed']+'\x20to\x20'+(a['withdraw']['recipient']??'recipient')+'.\x20Once\x20executed,\x20funds\x20cannot\x20be\x20recovered\x20without\x20recipient\x20cooperation.','affected_stakeholders':['owner','withdrawer'],'scenario':'Permission-authorized\x20withdraw\x20(254)','mitigation':'1)\x20Verify\x20recipient\x20address\x20twice.\x202)\x20Confirm\x20amount.\x203)\x20Check\x20balance\x20sufficiency.\x204)\x20Record\x20Payment\x20object\x20for\x20audit.','evidence':'amount='+a['withdraw']['amount_fixed']+',\x20recipient='+(a['withdraw']['recipient']??'?')};}},R_T_4_02={'id':'R-T-4-02','category':'lifecycle','trigger':'External\x20withdraw\x20(via\x20guard)\x20—\x20irreversible\x20fund\x20operation','check':a=>{if(!a['withdraw']?.['amount_by_external_withdraw_guard'])return null;return{'id':'R-T-4-02','level':'CRITICAL','category':'lifecycle','title':'External\x20withdraw\x20is\x20irreversible','description':'External\x20withdraw\x20via\x20guard\x20'+a['withdraw']['amount_by_external_withdraw_guard']+'\x20to\x20'+(a['withdraw']['recipient']??'recipient')+'.\x20Amount\x20determined\x20by\x20Guard\x20table\x20identifier;\x20verify\x20Guard\x20rules\x20before\x20execution.','affected_stakeholders':['owner','external_operator','withdrawer'],'scenario':'Guard-authorized\x20external\x20withdraw','mitigation':'1)\x20Verify\x20Guard\x20rules\x20match\x20business\x20intent.\x202)\x20Verify\x20recipient.\x203)\x20Ensure\x20Guard\x20identifier\x20points\x20to\x20correct\x20amount\x20field.\x204)\x20Test\x20on\x20testnet\x20first.','evidence':'guard='+a['withdraw']['amount_by_external_withdraw_guard']+',\x20recipient='+(a['withdraw']['recipient']??'?')};}},R_T_4_03={'id':'R-T-4-03','category':'lifecycle','trigger':'UM\x20set\x20or\x20revoked\x20—\x20affiliation\x20change','check':a=>{if(a['um']===undefined)return null;if(a['um']===null)return{'id':'R-T-4-03','level':'LOW','category':'lifecycle','title':'UM\x20revocation','description':'Revoking\x20UM\x20disaffiliates\x20Contact\x20from\x20Treasury\x20via\x20Registrar.\x20Existing\x20contact\x20bindings\x20become\x20orphaned.','affected_stakeholders':['owner'],'scenario':'Owner\x20revokes\x20UM\x20(um_none)','mitigation':'Verify\x20no\x20active\x20business\x20process\x20depends\x20on\x20UM\x20before\x20revoking','evidence':'um=null'};return{'id':'R-T-4-03','level':'LOW','category':'lifecycle','title':'UM\x20delegation','description':'Setting\x20UM\x20to\x20'+a['um']+'.\x20UM\x20(Contact\x20object)\x20gains\x20affiliation\x20with\x20Treasury\x20via\x20Registrar.','affected_stakeholders':['owner'],'scenario':'Owner\x20delegates\x20UM\x20(um_set)','mitigation':'Verify\x20UM\x20address\x20is\x20a\x20valid\x20Contact\x20object\x20(not\x20a\x20user\x20wallet)','evidence':'um='+a['um']};}},R_T_5_01={'id':'R-T-5-01','category':'cross_object','trigger':'Treasury\x20shared\x20with\x20Service\x20via\x20common\x20Permission\x20—\x20verify\x20alignment','check':a=>{if(!a['shared_with_service'])return null;return{'id':'R-T-5-01','level':'MEDIUM','category':'cross_object','title':'Treasury-Service\x20Permission\x20sharing\x20—\x20verify\x20index\x20alignment','description':'Treasury\x20and\x20Service\x20share\x20a\x20Permission\x20object.\x20Ensure\x20Treasury\x20indexes\x20(250-258)\x20and\x20Service\x20indexes\x20(300-320)\x20are\x20assigned\x20to\x20intended\x20entities;\x20cross-object\x20admin\x20changes\x20affect\x20both.','affected_stakeholders':['owner','admin'],'scenario':'Single\x20Permission\x20for\x20both\x20Treasury\x20and\x20Service','mitigation':'Document\x20which\x20entities\x20hold\x20which\x20indexes\x20across\x20both\x20objects;\x20review\x20admin\x20list\x20changes\x20for\x20cross-impact','evidence':'shared_with_service=true'};}},R_T_5_02={'id':'R-T-5-02','category':'cross_object','trigger':'Treasury\x20referenced\x20by\x20Allocator/Arbitration\x20—\x20receive\x20(253)\x20must\x20be\x20granted','check':a=>{if(!a['shared_with_allocator']&&!a['shared_with_arbitration'])return null;const b=a['current_permission_indexes_granted']?.['includes'](0xfd);if(!b)return{'id':'R-T-5-02','level':'HIGH','category':'cross_object','title':'Treasury\x20referenced\x20by\x20Allocator/Arbitration\x20but\x20TREASURY_RECEIVE\x20(253)\x20not\x20granted','description':'Allocator/Arbitration\x20will\x20send\x20CoinWrapper/Payment\x20to\x20Treasury,\x20but\x20no\x20entity\x20has\x20TREASURY_RECEIVE\x20(253)\x20to\x20call\x20treasury::receive\x20and\x20convert\x20to\x20balance.\x20Funds\x20will\x20accumulate\x20as\x20received\x20objects\x20without\x20entering\x20balance.','affected_stakeholders':['owner','system'],'scenario':'Revenue\x20collection\x20setup\x20without\x20receive\x20permission','mitigation':'Grant\x20TREASURY_RECEIVE\x20(253)\x20to\x20a\x20trusted\x20operator\x20(or\x20owner)\x20who\x20will\x20regularly\x20call\x20receive\x20to\x20convert\x20CoinWrapper\x20to\x20balance','evidence':'shared_allocator='+a['shared_with_allocator']+',\x20shared_arbitration='+a['shared_with_arbitration']+',\x20has_253=false'};return null;}},R_T_0_01={'id':'R-T-0-01','category':'structural','trigger':'Permission\x20index\x20in\x20259-260\x20range\x20detected\x20(regression\x20check\x20for\x20R-T-01)','check':a=>{if(!a['current_permission_indexes_granted'])return null;const b=a['current_permission_indexes_granted']['filter'](c=>c===0x103||c===0x104);if(b['length']>0x0)return{'id':'R-T-0-01','level':'CRITICAL','category':'structural','title':'Stale\x20Treasury\x20permission\x20index\x20259/260\x20detected\x20(R-T-01\x20regression)','description':'Permission\x20indexes\x20259/260\x20are\x20no\x20longer\x20valid\x20Treasury\x20indexes\x20(SDK\x20fixed\x20to\x20use\x20255-258\x20matching\x20Move).\x20Found:\x20'+b['join'](',\x20'),'affected_stakeholders':['owner','admin','system'],'scenario':'SDK\x20regression\x20reintroducing\x20off-by-2\x20divergence','mitigation':'Use\x20canonical\x20indexes:\x20255=EXTERNAL_DEPOSIT_GUARD,\x20256=EXTERNAL_WITHDRAW_GUARD,\x20257=OWNER_RECEIVE,\x20258=UM','evidence':'stale_indexes='+b['join'](',')};return null;}},ALL_RULES=[R_T_1_01,R_T_1_02,R_T_1_03,R_T_1_04,R_T_2_01,R_T_2_02,R_T_2_03,R_T_3_01,R_T_3_02,R_T_3_03,R_T_4_01,R_T_4_02,R_T_4_03,R_T_5_01,R_T_5_02,R_T_0_01];export const TREASURY_RISK_VERSION='1.0.0';export function getAllTreasuryRiskRules(){return[...ALL_RULES];}export function getTreasuryRiskRulesCount(){return ALL_RULES['length'];}export function getTreasuryRiskRulesByCategory(a){return ALL_RULES['filter'](b=>b['category']===a);}export function assessTreasuryRisks(a){const b=[];for(const f of ALL_RULES){const g=f['check'](a);if(g)b['push'](g);}const c=b['length']===0x0?'LOW':b['some'](h=>h['level']==='CRITICAL')?'CRITICAL':b['some'](h=>h['level']==='HIGH')?'HIGH':b['some'](h=>h['level']==='MEDIUM')?'MEDIUM':'LOW',d={};for(const h of b){d[h['category']]=(d[h['category']]??0x0)+0x1;}const e={};for(const i of b){for(const j of i['affected_stakeholders']){if(!e[j])e[j]=[];e[j]['push'](i['id']+':\x20'+i['mitigation']);}}return{'summary':'Assessed\x20'+b['length']+'\x20risk(s)\x20across\x20'+Object['keys'](d)['length']+'\x20categories','risks':b,'overall_risk':c,'risks_by_category':d,'stakeholder_advice':e,'needs_human_review':b['some'](k=>k['level']==='CRITICAL'||k['level']==='HIGH')};}