@wowok/agent-mcp 2.7.1 → 2.7.2

package/dist/knowledge/examples-scanner.js

@@ -1,843 +1 @@
-import * as fs from 'fs';
-import * as path from 'path';
-import { analyzeTopology, } from "./machine-topology.js";
-import { assessMachineRisks, } from "./machine-risk.js";
-import { runStaticChecklist, } from "./machine-confirm.js";
-import { explainNode, } from "./machine-translation.js";
-import { identifyCrossMachineDependency, detectCrossMachineCycle, } from "./machine-context.js";
-export function getMachineName(op) {
-    if (typeof op.data.object === 'string')
-        return op.data.object;
-    return op.data.object.name;
-}
-const EXAMPLES_DIR = path.resolve('d:/wowok/docs/examples');
-export function nodeDefsToMachine(nodeDefs) {
-    const nodes = [];
-    const pairs = [];
-    const seenNodeNames = new Set();
-    for (const nodeDef of nodeDefs) {
-        if (!seenNodeNames.has(nodeDef.name)) {
-            nodes.push({ name: nodeDef.name });
-            seenNodeNames.add(nodeDef.name);
-        }
-        for (const p of nodeDef.pairs) {
-            pairs.push({
-                prev_node: p.prev_node,
-                next_node: nodeDef.name,
-                threshold: p.threshold,
-                forwards: p.forwards.map((f) => normalizeForward(f)),
-            });
-        }
-    }
-    return { nodes, pairs };
-}
-function normalizeForward(f) {
-    const namedOp = f.named_operator ?? f.namedOperator;
-    const permIdx = f.permission_index ?? f.permissionIndex;
-    let guard;
-    if (typeof f.guard === 'string') {
-        guard = f.guard;
-    }
-    else if (f.guard && typeof f.guard === 'object') {
-        const g = f.guard;
-        if (typeof g.guard === 'string')
-            guard = g.guard;
-    }
-    let retained;
-    if (f.retained_submission !== undefined && f.retained_submission !== null) {
-        if (typeof f.retained_submission === 'string') {
-            retained = f.retained_submission;
-        }
-        else if (Array.isArray(f.retained_submission)) {
-            retained = f.retained_submission;
-        }
-        else if (typeof f.retained_submission === 'object') {
-            const r = f.retained_submission;
-            if (r.retained_submission !== undefined) {
-                retained = r.retained_submission;
-            }
-        }
-    }
-    else if (f.guard && typeof f.guard === 'object') {
-        const g = f.guard;
-        if (g.retained_submission !== undefined && g.retained_submission !== null) {
-            if (Array.isArray(g.retained_submission)) {
-                retained = g.retained_submission;
-            }
-            else if (typeof g.retained_submission === 'string') {
-                retained = g.retained_submission;
-            }
-        }
-    }
-    return {
-        name: f.name,
-        weight: f.weight,
-        named_operator: namedOp,
-        permission_index: permIdx,
-        guard,
-        retained_submission: retained,
-    };
-}
-function extractJsonBlocks(mdPath) {
-    const content = fs.readFileSync(mdPath, 'utf-8');
-    const lines = content.split('\n');
-    const blocks = [];
-    let i = 0;
-    while (i < lines.length) {
-        const line = lines[i];
-        if (line.trim().startsWith('```json')) {
-            const blockLines = [];
-            let j = i + 1;
-            while (j < lines.length && !lines[j].trim().startsWith('```')) {
-                blockLines.push(lines[j]);
-                j++;
-            }
-            const raw = blockLines.join('\n');
-            try {
-                const parsed = JSON.parse(raw);
-                let json = null;
-                if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
-                    const p = parsed;
-                    if (p.tool === 'onchain_operations' && p.data && typeof p.data === 'object'
-                        && !Array.isArray(p.data)) {
-                        const inner = p.data;
-                        if (typeof inner.operation_type === 'string') {
-                            json = {
-                                operation_type: inner.operation_type,
-                                data: inner.data,
-                                ...(inner.env !== undefined ? { env: inner.env } : {}),
-                            };
-                        }
-                    }
-                    else if (typeof p.operation_type === 'string') {
-                        json = p;
-                    }
-                }
-                if (json && typeof json.operation_type === 'string') {
-                    blocks.push({ lineStart: i + 1, raw, json });
-                }
-            }
-            catch {
-            }
-            i = j + 1;
-        }
-        else {
-            i++;
-        }
-    }
-    return blocks;
-}
-function extractDefinedGuardNames(mdPath) {
-    const blocks = extractJsonBlocks(mdPath);
-    const names = new Set();
-    for (const b of blocks) {
-        if (b.json.operation_type !== 'guard')
-            continue;
-        const data = b.json.data;
-        if (!data)
-            continue;
-        const namedNew = data.namedNew;
-        const name = namedNew?.name;
-        if (name)
-            names.add(name);
-    }
-    return names;
-}
-export function loadAllExamples(examplesDir = EXAMPLES_DIR) {
-    const result = [];
-    if (!fs.existsSync(examplesDir))
-        return result;
-    const entries = fs.readdirSync(examplesDir, { withFileTypes: true });
-    for (const entry of entries) {
-        if (!entry.isDirectory())
-            continue;
-        const subdir = path.join(examplesDir, entry.name);
-        const subEntries = fs.readdirSync(subdir, { withFileTypes: true });
-        for (const sub of subEntries) {
-            if (!sub.isFile())
-                continue;
-            const fullPath = path.join(subdir, sub.name);
-            const relativePath = `${entry.name}/${sub.name}`;
-            if (sub.name.endsWith('.md')) {
-                const machineOps = extractMachineOpsFromMarkdown(fullPath);
-                const progressOps = extractProgressOpsFromMarkdown(fullPath);
-                const definedGuards = extractDefinedGuardNames(fullPath);
-                if (machineOps.length === 0 && progressOps.length === 0 && definedGuards.size === 0)
-                    continue;
-                const businessDescription = machineOps[0]?.op.data.description;
-                result.push({
-                    example_name: entry.name,
-                    relative_path: relativePath,
-                    absolute_path: fullPath,
-                    machine_ops: machineOps,
-                    progress_ops: progressOps,
-                    defined_guard_names: definedGuards,
-                    business_description: businessDescription,
-                });
-            }
-            else if (sub.name.endsWith('.json') && sub.name.includes('machine')) {
-                const raw = fs.readFileSync(fullPath, 'utf-8');
-                try {
-                    const arr = JSON.parse(raw);
-                    if (!Array.isArray(arr) || arr.length === 0)
-                        continue;
-                    const machineName = path.basename(sub.name, '.json');
-                    result.push({
-                        example_name: entry.name,
-                        relative_path: relativePath,
-                        absolute_path: fullPath,
-                        machine_ops: [{
-                                op: {
-                                    operation_type: "machine",
-                                    data: {
-                                        object: { name: machineName, replaceExistName: false },
-                                        node: { op: "add", nodes: arr },
-                                        publish: false,
-                                    },
-                                    env: { network: "testnet" },
-                                },
-                                line_start: 0,
-                            }],
-                        progress_ops: [],
-                        defined_guard_names: new Set(),
-                        business_description: `(standalone JSON: ${machineName})`,
-                    });
-                }
-                catch {
-                }
-            }
-        }
-    }
-    return result;
-}
-function extractMachineOpsFromMarkdown(mdPath) {
-    const blocks = extractJsonBlocks(mdPath);
-    const result = [];
-    for (const b of blocks) {
-        if (b.json.operation_type !== 'machine')
-            continue;
-        try {
-            const op = b.json;
-            if (!op.data)
-                continue;
-            const hasNodes = op.data.node?.nodes && Array.isArray(op.data.node.nodes);
-            const hasPublish = op.data.publish === true;
-            if (!hasNodes && !hasPublish)
-                continue;
-            result.push({ op, line_start: b.lineStart });
-        }
-        catch {
-        }
-    }
-    return result;
-}
-function extractProgressOpsFromMarkdown(mdPath) {
-    const blocks = extractJsonBlocks(mdPath);
-    const result = [];
-    for (const b of blocks) {
-        const json = b.json;
-        const data = json.data;
-        if (!data)
-            continue;
-        const progress = data.progress;
-        if (!progress)
-            continue;
-        const operation = progress.operation;
-        if (!operation || !operation.next_node_name || !operation.forward)
-            continue;
-        try {
-            result.push({
-                operation_type: json.operation_type,
-                data: {
-                    object: data.object,
-                    progress: { operation: { next_node_name: operation.next_node_name, forward: operation.forward } },
-                    submission: data.submission,
-                },
-                env: { account: json.env?.account, network: json.env?.network },
-                _source_line: b.lineStart,
-            });
-        }
-        catch {
-        }
-    }
-    return result;
-}
-export function analyzeSchemaConsistency(_example) {
-    return [];
-}
-export function analyzeThresholdIssues(example) {
-    const findings = [];
-    for (const { op, line_start } of example.machine_ops) {
-        if (!op.data.node?.nodes)
-            continue;
-        const { nodes, pairs } = nodeDefsToMachine(op.data.node.nodes);
-        const machineName = getMachineName(op);
-        const entryPairs = pairs.filter((p) => p.prev_node === "");
-        const hasCompetingEntries = entryPairs.length > 1;
-        for (const pair of pairs) {
-            if (pair.prev_node === "" && pair.threshold === 0) {
-                const forwardCount = pair.forwards.length;
-                const isLegitimate = forwardCount === 1 ||
-                    hasCompetingEntries;
-                if (isLegitimate)
-                    continue;
-                findings.push({
-                    example: example.example_name,
-                    source_file: example.relative_path,
-                    line: line_start,
-                    machine_name: machineName,
-                    category: "design",
-                    severity: "medium",
-                    title: "Entry pair with threshold=0 and multiple Forwards (potential permission bypass)",
-                    detail: `Pair (prev="", next="${pair.next_node}") has threshold=0 with ${forwardCount} Forwards. ` +
-                        `With threshold=0, ANY single Forward fires → migration, potentially bypassing other Forwards' ` +
-                        `permission checks. Set threshold ≥ 1 so ALL intended Forwards must agree. ` +
-                        `(Note: single-Forward Pairs and competing-OR Pairs with threshold=0 are NOT flagged — they are legitimate.)`,
-                    rule_id: "R-M3-09",
-                    fix: `Set threshold=1 (or higher) on entry pair targeting "${pair.next_node}" if Forwards represent AND semantics; keep threshold=0 if OR semantics is intended (then consider splitting into competing Pairs).`,
-                });
-            }
-        }
-        for (const pair of pairs) {
-            const totalWeight = pair.forwards.reduce((sum, f) => sum + f.weight, 0);
-            if (pair.threshold > totalWeight) {
-                findings.push({
-                    example: example.example_name,
-                    source_file: example.relative_path,
-                    line: line_start,
-                    machine_name: machineName,
-                    category: "design",
-                    severity: "critical",
-                    title: "Threshold exceeds total forward weight (unreachable)",
-                    detail: `Pair (prev="${pair.prev_node}", next="${pair.next_node}") has threshold=${pair.threshold} but total forward weight=${totalWeight}. This pair can NEVER be satisfied — workflow dead-ends here.`,
-                    rule_id: "R-M2-06",
-                    fix: `Reduce threshold to ≤ ${totalWeight} or add more forwards with weight.`,
-                });
-            }
-        }
-    }
-    return findings;
-}
-export function analyzeNetworkSafety(example) {
-    const findings = [];
-    for (const { op, line_start } of example.machine_ops) {
-        const machineName = getMachineName(op);
-        const isPublish = op.data.publish === true;
-        const network = op.env.network;
-        if (isPublish && network === "mainnet") {
-            findings.push({
-                example: example.example_name,
-                source_file: example.relative_path,
-                line: line_start,
-                machine_name: machineName,
-                category: "runtime",
-                severity: "critical",
-                title: "Direct mainnet publish without testnet test",
-                detail: `Machine "${machineName}" is published directly to mainnet. Per R-M4-02, must test on testnet first.`,
-                rule_id: "R-M4-02",
-                fix: `Set env.network to "testnet" for first publish, run end-to-end test, then re-publish on mainnet.`,
-            });
-        }
-    }
-    return findings;
-}
-export function analyzeConfirmationBypass(example) {
-    const findings = [];
-    for (const { op, line_start } of example.machine_ops) {
-        const machineName = getMachineName(op);
-        const isPublish = op.data.publish === true;
-        const confirmed = op.env.confirmed === true;
-        if (isPublish && confirmed) {
-            findings.push({
-                example: example.example_name,
-                source_file: example.relative_path,
-                line: line_start,
-                machine_name: machineName,
-                category: "runtime",
-                severity: "medium",
-                title: "confirmed=true bypasses user confirmation prompt",
-                detail: `Machine "${machineName}" is published with env.confirmed=true. This bypasses the ConfirmGate user-confirmation step. Examples should demonstrate the two-step confirmation flow (Phase 1 prompt → Phase 2 confirmed=true).`,
-                rule_id: "R-M4-04",
-                fix: `Show Phase 1 (without confirmed=true) and Phase 2 (with confirmed=true) as separate steps in the example.`,
-            });
-        }
-    }
-    return findings;
-}
-export function analyzeGuardReferences(example) {
-    const findings = [];
-    const defined = example.defined_guard_names;
-    for (const { op, line_start } of example.machine_ops) {
-        if (!op.data.node?.nodes)
-            continue;
-        const machineName = getMachineName(op);
-        const isPublish = op.data.publish === true;
-        for (const nodeDef of op.data.node.nodes) {
-            for (const pair of nodeDef.pairs) {
-                for (const fwd of pair.forwards) {
-                    let guardName;
-                    if (typeof fwd.guard === 'string') {
-                        guardName = fwd.guard;
-                    }
-                    else if (fwd.guard && typeof fwd.guard === 'object') {
-                        const g = fwd.guard;
-                        if (typeof g.guard === 'string')
-                            guardName = g.guard;
-                    }
-                    if (!guardName)
-                        continue;
-                    if (!defined.has(guardName)) {
-                        findings.push({
-                            example: example.example_name,
-                            source_file: example.relative_path,
-                            line: line_start,
-                            machine_name: machineName,
-                            category: "runtime",
-                            severity: isPublish ? "critical" : "high",
-                            title: `Guard "${guardName}" referenced but not defined in example`,
-                            detail: `Forward "${fwd.name}" references Guard "${guardName}" but no operation_type="guard" with name="${guardName}" appears earlier in ${example.relative_path}. ${isPublish ? "Publishing will fail at runtime." : "Will fail at machine creation."}`,
-                            rule_id: isPublish ? "R-M4-03" : "R-M2-01",
-                            fix: `Add a guard creation step (operation_type="guard") with name="${guardName}" BEFORE the machine creation step.`,
-                        });
-                    }
-                }
-            }
-        }
-    }
-    return findings;
-}
-export function analyzeCrossMachineDeps(example, guardResolutions = new Map()) {
-    const findings = [];
-    const allDeps = [];
-    for (const { op, line_start } of example.machine_ops) {
-        if (!op.data.node?.nodes)
-            continue;
-        const { nodes, pairs } = nodeDefsToMachine(op.data.node.nodes);
-        const machineId = getMachineName(op);
-        const deps = identifyCrossMachineDependency(machineId, { nodes, pairs }, guardResolutions);
-        allDeps.push(...deps);
-        if (deps.length > 0) {
-            findings.push({
-                example: example.example_name,
-                source_file: example.relative_path,
-                line: line_start,
-                machine_name: machineId,
-                category: "cross_machine",
-                severity: "info",
-                title: `Machine declares ${deps.length} cross-Machine dependencies`,
-                detail: deps.map((d) => `Forward "${d.dependency.machine_a_forward}" depends on Machine "${d.machine_b_id}" reaching node "${d.dependency.machine_b_node}"`).join('; '),
-                rule_id: "P-M3",
-            });
-        }
-    }
-    const cycles = detectCrossMachineCycle(allDeps);
-    for (const cycle of cycles) {
-        findings.push({
-            example: example.example_name,
-            source_file: example.relative_path,
-            line: 0,
-            machine_name: "(project-level)",
-            category: "cross_machine",
-            severity: "critical",
-            title: "Cross-Machine dependency cycle detected",
-            detail: `Cycle: ${cycle.join(' → ')}`,
-            rule_id: "R-M2-07",
-            fix: `Break the cycle by removing one of the dependencies in the cycle.`,
-        });
-    }
-    return { deps: allDeps, cycles, findings };
-}
-export function analyzeRoundTrip(example) {
-    const findings = [];
-    for (const { op, line_start } of example.machine_ops) {
-        if (!op.data.node?.nodes)
-            continue;
-        const { nodes, pairs } = nodeDefsToMachine(op.data.node.nodes);
-        const machineName = getMachineName(op);
-        const topo = analyzeTopology(nodes, pairs);
-        if (topo.has_cycles) {
-            findings.push({
-                example: example.example_name,
-                source_file: example.relative_path,
-                line: line_start,
-                machine_name: machineName,
-                category: "round_trip",
-                severity: "critical",
-                title: "Topology analysis: cycle detected (DAG violation)",
-                detail: `Machine "${machineName}" has cycles: ${JSON.stringify(topo.cycle_nodes)}`,
-                rule_id: "R-M1-03",
-                fix: `Remove cycles — Machine must be a DAG.`,
-            });
-        }
-        const ctx = {
-            network: op.env.network === "mainnet" ? "mainnet" : "testnet",
-            testnet_test_passed: op.env.network !== "mainnet",
-            published_services: new Set(),
-            published_guards: new Set(),
-            published_permissions: new Set(),
-            published_machines: new Set(),
-            published_arbitrations: new Set(),
-            published_rewards: new Set(),
-            published_allocators: new Set(),
-            published_repositories: new Set(),
-        };
-        for (const pair of pairs) {
-            for (const fwd of pair.forwards) {
-                if (fwd.guard)
-                    ctx.published_guards.add(fwd.guard);
-            }
-        }
-        const machineJson = {
-            nodes,
-            pairs,
-            b_published: op.data.publish === true,
-        };
-        const assessment = assessMachineRisks(machineJson, ctx);
-        const criticalRisks = assessment.detected_risks.filter((r) => r.severity === "critical");
-        if (criticalRisks.length > 0) {
-            for (const r of criticalRisks) {
-                findings.push({
-                    example: example.example_name,
-                    source_file: example.relative_path,
-                    line: line_start,
-                    machine_name: machineName,
-                    category: "round_trip",
-                    severity: "critical",
-                    title: `Risk assessment: ${r.rule_id} (${r.severity})`,
-                    detail: r.detail,
-                    rule_id: r.rule_id,
-                });
-            }
-        }
-        const checklist = { nodes, pairs, name: machineName };
-        const checklistResult = runStaticChecklist(checklist);
-        const failedItems = checklistResult.failed_items.filter((i) => ["C-01", "C-03", "C-06", "C-10"].includes(i.id));
-        for (const item of failedItems) {
-            findings.push({
-                example: example.example_name,
-                source_file: example.relative_path,
-                line: line_start,
-                machine_name: machineName,
-                category: "round_trip",
-                severity: "high",
-                title: `Checklist ${item.id} failed: ${item.description}`,
-                detail: item.detail ?? `(no detail)`,
-                rule_id: item.id,
-            });
-        }
-        for (const node of nodes) {
-            const outgoing = pairs.filter((p) => p.prev_node === node.name);
-            const nodeForExpl = {
-                name: node.name,
-                pairs: outgoing,
-                all_pairs: pairs,
-            };
-            const explained = explainNode(nodeForExpl);
-            if (!explained.name || explained.pairs.length !== outgoing.length) {
-                findings.push({
-                    example: example.example_name,
-                    source_file: example.relative_path,
-                    line: line_start,
-                    machine_name: machineName,
-                    category: "round_trip",
-                    severity: "medium",
-                    title: `Round-trip mismatch for node "${node.name}"`,
-                    detail: `explainNode produced inconsistent output: name="${explained.name}", pairs_count=${explained.pairs.length} (expected ${outgoing.length})`,
-                    rule_id: "RT-001",
-                });
-            }
-        }
-    }
-    return findings;
-}
-export function analyzeProgressOps(example) {
-    const findings = [];
-    const validForwardPairs = new Set();
-    let machineName = "(none)";
-    for (const { op } of example.machine_ops) {
-        if (!op.data.node?.nodes)
-            continue;
-        machineName = getMachineName(op);
-        const { pairs } = nodeDefsToMachine(op.data.node.nodes);
-        for (const pair of pairs) {
-            validForwardPairs.add(`${pair.next_node}::${pair.forwards.map((f) => f.name).join("|")}`);
-            for (const fwd of pair.forwards) {
-                validForwardPairs.add(`${pair.next_node}::${fwd.name}`);
-            }
-        }
-    }
-    for (const progressOp of example.progress_ops) {
-        const op = progressOp.data.progress?.operation;
-        if (!op)
-            continue;
-        const key = `${op.next_node_name}::${op.forward}`;
-        const valid = validForwardPairs.has(key);
-        if (!valid) {
-            const forwardExists = [...validForwardPairs].some((k) => k.endsWith(`::${op.forward}`));
-            if (!forwardExists) {
-                findings.push({
-                    example: example.example_name,
-                    source_file: example.relative_path,
-                    line: progressOp._source_line ?? 0,
-                    machine_name: machineName,
-                    category: "progress",
-                    severity: "high",
-                    title: `Progress references unknown forward "${op.forward}"`,
-                    detail: `Progress op references forward "${op.forward}" but no such forward exists in machine "${machineName}".`,
-                    rule_id: "R-M3-04",
-                    fix: `Verify forward name matches one defined in the Machine.`,
-                });
-            }
-            else {
-                findings.push({
-                    example: example.example_name,
-                    source_file: example.relative_path,
-                    line: progressOp._source_line ?? 0,
-                    machine_name: machineName,
-                    category: "progress",
-                    severity: "medium",
-                    title: `Progress forward "${op.forward}" doesn't lead to "${op.next_node_name}"`,
-                    detail: `Forward "${op.forward}" exists but doesn't target node "${op.next_node_name}".`,
-                    rule_id: "R-M3-05",
-                    fix: `Correct next_node_name to match the forward's target.`,
-                });
-            }
-        }
-    }
-    return findings;
-}
-export function analyzePublishStep(example) {
-    const findings = [];
-    const hasPublish = example.machine_ops.some(({ op }) => op.data.publish === true);
-    const hasProgress = example.progress_ops.length > 0;
-    if (hasProgress && !hasPublish) {
-        findings.push({
-            example: example.example_name,
-            source_file: example.relative_path,
-            line: 0,
-            machine_name: "(file-level)",
-            category: "runtime",
-            severity: "high",
-            title: "Progress operations present but no `publish: true` step",
-            detail: `Example has ${example.progress_ops.length} progress operations but no machine operation with publish=true. Progress::new will fail at runtime (machine not published).`,
-            rule_id: "R-M4-01",
-            fix: `Add a publish step (or set data.publish=true on the machine creation operation).`,
-        });
-    }
-    return findings;
-}
-export function analyzeRiskRuleCoverage(example) {
-    const ruleCounts = new Map();
-    let totalFindings = 0;
-    const allFindings = [
-        ...analyzeSchemaConsistency(example),
-        ...analyzeThresholdIssues(example),
-        ...analyzeNetworkSafety(example),
-        ...analyzeConfirmationBypass(example),
-        ...analyzeGuardReferences(example),
-        ...analyzeRoundTrip(example),
-        ...analyzeProgressOps(example),
-        ...analyzePublishStep(example),
-    ];
-    for (const f of allFindings) {
-        if (f.rule_id) {
-            ruleCounts.set(f.rule_id, (ruleCounts.get(f.rule_id) ?? 0) + 1);
-            totalFindings++;
-        }
-    }
-    return { ruleCounts, totalFindings };
-}
-export function scanAllExamples(examplesDir = EXAMPLES_DIR) {
-    const examples = loadAllExamples(examplesDir);
-    const findingsByExample = new Map();
-    const findingsByCategory = new Map();
-    const findingsBySeverity = new Map();
-    const riskRuleCoverage = new Map();
-    let totalFindings = 0;
-    for (const example of examples) {
-        const exampleFindings = [];
-        exampleFindings.push(...analyzeSchemaConsistency(example));
-        exampleFindings.push(...analyzeThresholdIssues(example));
-        exampleFindings.push(...analyzeNetworkSafety(example));
-        exampleFindings.push(...analyzeConfirmationBypass(example));
-        exampleFindings.push(...analyzeGuardReferences(example));
-        const crossMachine = analyzeCrossMachineDeps(example);
-        exampleFindings.push(...crossMachine.findings);
-        exampleFindings.push(...analyzeRoundTrip(example));
-        exampleFindings.push(...analyzeProgressOps(example));
-        exampleFindings.push(...analyzePublishStep(example));
-        findingsByExample.set(example.relative_path, exampleFindings);
-        for (const f of exampleFindings) {
-            const catList = findingsByCategory.get(f.category) ?? [];
-            catList.push(f);
-            findingsByCategory.set(f.category, catList);
-            const sevList = findingsBySeverity.get(f.severity) ?? [];
-            sevList.push(f);
-            findingsBySeverity.set(f.severity, sevList);
-            if (f.rule_id) {
-                riskRuleCoverage.set(f.rule_id, (riskRuleCoverage.get(f.rule_id) ?? 0) + 1);
-            }
-            totalFindings++;
-        }
-    }
-    return {
-        examples,
-        findings_by_example: findingsByExample,
-        findings_by_category: findingsByCategory,
-        findings_by_severity: findingsBySeverity,
-        total_findings: totalFindings,
-        risk_rule_coverage: riskRuleCoverage,
-    };
-}
-export function formatScanReport(result) {
-    const lines = [];
-    lines.push('# Examples Scan Report — d:\\wowok\\docs\\examples');
-    lines.push('');
-    lines.push('> Auto-generated by `examples-scanner.ts` — comprehensive scan of all');
-    lines.push('> machine/progress JSON in 5 example directories for design and runtime problems.');
-    lines.push('');
-    lines.push('## Summary');
-    lines.push('');
-    lines.push(`- **Examples scanned**: ${result.examples.length}`);
-    lines.push(`- **Total findings**: ${result.total_findings}`);
-    lines.push('');
-    lines.push('### Findings by Severity');
-    lines.push('');
-    lines.push('| Severity | Count |');
-    lines.push('|----------|-------|');
-    const sevOrder = ["critical", "high", "medium", "low", "info"];
-    for (const sev of sevOrder) {
-        const count = result.findings_by_severity.get(sev)?.length ?? 0;
-        lines.push(`| ${sev} | ${count} |`);
-    }
-    lines.push('');
-    lines.push('### Findings by Category');
-    lines.push('');
-    lines.push('| Category | Count |');
-    lines.push('|----------|-------|');
-    const catOrder = [
-        "schema_consistency", "design", "runtime",
-        "cross_machine", "round_trip", "progress", "risk_rule",
-    ];
-    for (const cat of catOrder) {
-        const count = result.findings_by_category.get(cat)?.length ?? 0;
-        lines.push(`| ${cat} | ${count} |`);
-    }
-    lines.push('');
-    lines.push('### Risk Rule Coverage (which rules fired across examples)');
-    lines.push('');
-    lines.push('| Rule ID | Total Hits |');
-    lines.push('|---------|-----------|');
-    const sortedRules = [...result.risk_rule_coverage.entries()].sort((a, b) => a[0].localeCompare(b[0]));
-    for (const [ruleId, count] of sortedRules) {
-        lines.push(`| ${ruleId} | ${count} |`);
-    }
-    lines.push('');
-    lines.push('## Per-Example Findings');
-    lines.push('');
-    for (const example of result.examples) {
-        const findings = result.findings_by_example.get(example.relative_path) ?? [];
-        lines.push(`### ${example.example_name} — \`${example.relative_path}\``);
-        lines.push('');
-        lines.push(`- **Source**: \`${example.relative_path}\``);
-        lines.push(`- **Machine operations**: ${example.machine_ops.length}`);
-        lines.push(`- **Progress operations**: ${example.progress_ops.length}`);
-        lines.push(`- **Defined guards**: ${example.defined_guard_names.size}`);
-        if (example.business_description) {
-            lines.push(`- **Business description**: ${example.business_description}`);
-        }
-        lines.push(`- **Findings**: ${findings.length}`);
-        lines.push('');
-        if (findings.length === 0) {
-            lines.push('✅ No issues detected.');
-            lines.push('');
-            continue;
-        }
-        const bySev = new Map();
-        for (const f of findings) {
-            const list = bySev.get(f.severity) ?? [];
-            list.push(f);
-            bySev.set(f.severity, list);
-        }
-        for (const sev of sevOrder) {
-            const sevFindings = bySev.get(sev) ?? [];
-            if (sevFindings.length === 0)
-                continue;
-            lines.push(`#### ${sev.toUpperCase()} (${sevFindings.length})`);
-            lines.push('');
-            for (const f of sevFindings) {
-                lines.push(`- **[${f.rule_id ?? "—"}] ${f.title}** (line ${f.line})`);
-                lines.push(`  - ${f.detail}`);
-                if (f.fix) {
-                    lines.push(`  - **Fix**: ${f.fix}`);
-                }
-                lines.push('');
-            }
-        }
-    }
-    lines.push('## Cross-Cutting Patterns');
-    lines.push('');
-    const schemaFindings = result.findings_by_category.get("schema_consistency") ?? [];
-    if (schemaFindings.length === 0) {
-        lines.push('### Schema Consistency — No Issues (camelCase is canonical)');
-        lines.push('');
-        lines.push('The previous SCHEMA-001/002/003/004 rules have been REMOVED (2026-07-19).');
-        lines.push('');
-        lines.push('**Reason**: Verification against MCP schema (`d:\\wowok\\agent\\mcp\\src`) confirmed that:');
-        lines.push('- `MachineForwardSchema` accepts `namedOperator`, `permissionIndex` (camelCase)');
-        lines.push('- `MachineForwardGuardSchema` is an OBJECT `{ guard: string, retained_submission?: number[] }` (NOT a flat string)');
-        lines.push('- `NamedObjectSchema` accepts `replaceExistName`, `onChain` (camelCase)');
-        lines.push('');
-        lines.push('Source examples using camelCase are therefore CORRECT per MCP schema — the previous rules were false positives.');
-        lines.push('');
-    }
-    const thresholdFindings = (result.findings_by_category.get("design") ?? []).filter((f) => f.rule_id === "R-M3-09");
-    if (thresholdFindings.length > 0) {
-        lines.push('### Threshold=0 on Multi-Forward Entry Pairs (R-M3-09)');
-        lines.push('');
-        lines.push(`Found ${thresholdFindings.length} multi-Forward entry pairs with threshold=0 across examples.`);
-        lines.push('');
-        lines.push('**Detection logic** (refined 2026-07-19):');
-        lines.push('- Single-Forward Pair with threshold=0 → **NOT flagged** (legitimate: single execution triggers migration regardless of threshold)');
-        lines.push('- Competing-OR Pairs (multiple Pairs share prev_node="") with threshold=0 → **NOT flagged** (legitimate OR semantics)');
-        lines.push('- Multi-Forward Pair with threshold=0 AND no competing siblings → **FLAGGED** (potential permission bypass: any single Forward fires → migration)');
-        lines.push('');
-        const affectedFiles = [...new Set(thresholdFindings.map((f) => f.source_file))];
-        lines.push(`**Affected source files**: ${affectedFiles.map((p) => `\`${p}\``).join(', ')}.`);
-        lines.push('');
-        lines.push('**Fix**: Set threshold=1 (or higher) if Forwards represent AND semantics; keep threshold=0 only if OR semantics is intended (then consider splitting into competing Pairs).');
-        lines.push('');
-    }
-    else {
-        lines.push('### Threshold=0 on Entry Pairs — No Issues');
-        lines.push('');
-        lines.push('All entry pairs with threshold=0 fall into legitimate categories (single-Forward or competing-OR).');
-        lines.push('');
-    }
-    const mainnetFindings = (result.findings_by_category.get("runtime") ?? []).filter((f) => f.rule_id === "R-M4-02");
-    if (mainnetFindings.length > 0) {
-        lines.push('### Direct Mainnet Publish (R-M4-02)');
-        lines.push('');
-        lines.push(`Found ${mainnetFindings.length} examples publishing directly to mainnet without testnet test.`);
-        lines.push('');
-        lines.push('**Affected examples**: MyShop, MyShop_Advanced.');
-        lines.push('');
-        lines.push('**Fix**: Add a testnet publish step before mainnet, or change the network to testnet for examples.');
-        lines.push('');
-    }
-    lines.push('## Recommendations for Linter & Cognition Closure');
-    lines.push('');
-    lines.push('Based on the findings, the following linter rules and cognition improvements are recommended:');
-    lines.push('');
-    lines.push('1. **REMOVED SCHEMA-001/002/003/004** (2026-07-19): These rules incorrectly assumed SDK snake_case as the standard. MCP schema actually accepts camelCase (`namedOperator`, `permissionIndex`, `replaceExistName`) and nested Guard object form. Examples are correct as-is.');
-    lines.push('2. **REFACTORED R-M3-02 → R-M3-09** (2026-07-19, then 2026-07-20): Original R-M3-02 (threshold=0) conflicted with machine-risk.ts\'s R-M3-02 (permissionIndex out of bounds). Initially renamed to R-M3-06, but that also collided with machine-risk.ts\'s R-M3-06 (Permission game imbalance). Final rename: R-M3-09. Logic also refined: single-Forward and competing-OR threshold=0 cases are now exempt.');
-    lines.push('3. **Reinforce R-M4-03**: Guard must be created before Machine publish. Examples should include guard creation step (operation_type="guard") with matching name before machine creation.');
-    lines.push('4. **Add lint rule** for `confirmed: true` + `publish: true` combination without showing the Phase 1 confirmation prompt first.');
-    lines.push('5. **IMPLEMENTED**: R-M3-08 (permissionIndex < 1000) rule added to machine-risk.ts, and C-11 checklist item added to machine-confirm.ts (2026-07-20). Both enforce the on-chain USER_DEFINED_PERM_INDEX_START = 1000 hard constraint (see doc 06 §4.4).');
-    lines.push('');
-    lines.push('---');
-    lines.push('');
-    lines.push('*End of report.*');
-    return lines.join('\n');
-}
-export const EXAMPLES_SCANNER_VERSION = "1.0.0";
+import*as a85a from'fs';import*as a85b from'path';import{analyzeTopology}from'./machine-topology.js';import{assessMachineRisks}from'./machine-risk.js';import{runStaticChecklist}from'./machine-confirm.js';import{explainNode}from'./machine-translation.js';import{identifyCrossMachineDependency,detectCrossMachineCycle}from'./machine-context.js';export function getMachineName(a){if(typeof a['data']['object']==='string')return a['data']['object'];return a['data']['object']['name'];}const EXAMPLES_DIR=a85b['resolve']('d:/wowok/docs/examples');export function nodeDefsToMachine(a){const b=[],c=[],d=new Set();for(const e of a){!d['has'](e['name'])&&(b['push']({'name':e['name']}),d['add'](e['name']));for(const f of e['pairs']){c['push']({'prev_node':f['prev_node'],'next_node':e['name'],'threshold':f['threshold'],'forwards':f['forwards']['map'](g=>normalizeForward(g))});}}return{'nodes':b,'pairs':c};}function normalizeForward(a){const b=a['named_operator']??a['namedOperator'],c=a['permission_index']??a['permissionIndex'];let d;if(typeof a['guard']==='string')d=a['guard'];else{if(a['guard']&&typeof a['guard']==='object'){const h=a['guard'];if(typeof h['guard']==='string')d=h['guard'];}}let e;if(a['retained_submission']!==undefined&&a['retained_submission']!==null){if(typeof a['retained_submission']==='string')e=a['retained_submission'];else{if(Array['isArray'](a['retained_submission']))e=a['retained_submission'];else{if(typeof a['retained_submission']==='object'){const i=a['retained_submission'];i['retained_submission']!==undefined&&(e=i['retained_submission']);}}}}else{if(a['guard']&&typeof a['guard']==='object'){const j=a['guard'];if(j['retained_submission']!==undefined&&j['retained_submission']!==null){if(Array['isArray'](j['retained_submission']))e=j['retained_submission'];else typeof j['retained_submission']==='string'&&(e=j['retained_submission']);}}}return{'name':a['name'],'weight':a['weight'],'named_operator':b,'permission_index':c,'guard':d,'retained_submission':e};}function extractJsonBlocks(a){const b=a85a['readFileSync'](a,'utf-8'),c=b['split']('\x0a'),d=[];let e=0x0;while(e<c['length']){const f=c[e];if(f['trim']()['startsWith']('```json')){const g=[];let h=e+0x1;while(h<c['length']&&!c[h]['trim']()['startsWith']('```')){g['push'](c[h]),h++;}const k=g['join']('\x0a');try{const l=JSON['parse'](k);let m=null;if(l&&typeof l==='object'&&!Array['isArray'](l)){const n=l;if(n['tool']==='onchain_operations'&&n['data']&&typeof n['data']==='object'&&!Array['isArray'](n['data'])){const o=n['data'];typeof o['operation_type']==='string'&&(m={'operation_type':o['operation_type'],'data':o['data'],...o['env']!==undefined?{'env':o['env']}:{}});}else typeof n['operation_type']==='string'&&(m=n);}m&&typeof m['operation_type']==='string'&&d['push']({'lineStart':e+0x1,'raw':k,'json':m});}catch{}e=h+0x1;}else e++;}return d;}function extractDefinedGuardNames(a){const c=extractJsonBlocks(a),d=new Set();for(const e of c){if(e['json']['operation_type']!=='guard')continue;const f=e['json']['data'];if(!f)continue;const g=f['namedNew'],h=g?.['name'];if(h)d['add'](h);}return d;}export function loadAllExamples(a=EXAMPLES_DIR){const b=[];if(!a85a['existsSync'](a))return b;const c=a85a['readdirSync'](a,{'withFileTypes':!![]});for(const d of c){if(!d['isDirectory']())continue;const e=a85b['join'](a,d['name']),f=a85a['readdirSync'](e,{'withFileTypes':!![]});for(const g of f){if(!g['isFile']())continue;const h=a85b['join'](e,g['name']),i=d['name']+'/'+g['name'];if(g['name']['endsWith']('.md')){const j=extractMachineOpsFromMarkdown(h),k=extractProgressOpsFromMarkdown(h),l=extractDefinedGuardNames(h);if(j['length']===0x0&&k['length']===0x0&&l['size']===0x0)continue;const m=j[0x0]?.['op']['data']['description'];b['push']({'example_name':d['name'],'relative_path':i,'absolute_path':h,'machine_ops':j,'progress_ops':k,'defined_guard_names':l,'business_description':m});}else{if(g['name']['endsWith']('.json')&&g['name']['includes']('machine')){const n=a85a['readFileSync'](h,'utf-8');try{const o=JSON['parse'](n);if(!Array['isArray'](o)||o['length']===0x0)continue;const p=a85b['basename'](g['name'],'.json');b['push']({'example_name':d['name'],'relative_path':i,'absolute_path':h,'machine_ops':[{'op':{'operation_type':'machine','data':{'object':{'name':p,'replaceExistName':![]},'node':{'op':'add','nodes':o},'publish':![]},'env':{'network':'testnet'}},'line_start':0x0}],'progress_ops':[],'defined_guard_names':new Set(),'business_description':'(standalone\x20JSON:\x20'+p+')'});}catch{}}}}}return b;}function extractMachineOpsFromMarkdown(a){const c=extractJsonBlocks(a),d=[];for(const e of c){if(e['json']['operation_type']!=='machine')continue;try{const f=e['json'];if(!f['data'])continue;const g=f['data']['node']?.['nodes']&&Array['isArray'](f['data']['node']['nodes']),h=f['data']['publish']===!![];if(!g&&!h)continue;d['push']({'op':f,'line_start':e['lineStart']});}catch{}}return d;}function extractProgressOpsFromMarkdown(a){const c=extractJsonBlocks(a),d=[];for(const e of c){const f=e['json'],g=f['data'];if(!g)continue;const h=g['progress'];if(!h)continue;const i=h['operation'];if(!i||!i['next_node_name']||!i['forward'])continue;try{d['push']({'operation_type':f['operation_type'],'data':{'object':g['object'],'progress':{'operation':{'next_node_name':i['next_node_name'],'forward':i['forward']}},'submission':g['submission']},'env':{'account':f['env']?.['account'],'network':f['env']?.['network']},'_source_line':e['lineStart']});}catch{}}return d;}export function analyzeSchemaConsistency(a){return[];}export function analyzeThresholdIssues(a){const b=[];for(const {op:c,line_start:d}of a['machine_ops']){if(!c['data']['node']?.['nodes'])continue;const {nodes:e,pairs:f}=nodeDefsToMachine(c['data']['node']['nodes']),g=getMachineName(c),h=f['filter'](j=>j['prev_node']===''),i=h['length']>0x1;for(const j of f){if(j['prev_node']===''&&j['threshold']===0x0){const k=j['forwards']['length'],l=k===0x1||i;if(l)continue;b['push']({'example':a['example_name'],'source_file':a['relative_path'],'line':d,'machine_name':g,'category':'design','severity':'medium','title':'Entry\x20pair\x20with\x20threshold=0\x20and\x20multiple\x20Forwards\x20(potential\x20permission\x20bypass)','detail':'Pair\x20(prev=\x22\x22,\x20next=\x22'+j['next_node']+'\x22)\x20has\x20threshold=0\x20with\x20'+k+'\x20Forwards.\x20'+'With\x20threshold=0,\x20ANY\x20single\x20Forward\x20fires\x20→\x20migration,\x20potentially\x20bypassing\x20other\x20Forwards\x27\x20'+'permission\x20checks.\x20Set\x20threshold\x20≥\x201\x20so\x20ALL\x20intended\x20Forwards\x20must\x20agree.\x20'+'(Note:\x20single-Forward\x20Pairs\x20and\x20competing-OR\x20Pairs\x20with\x20threshold=0\x20are\x20NOT\x20flagged\x20—\x20they\x20are\x20legitimate.)','rule_id':'R-M3-09','fix':'Set\x20threshold=1\x20(or\x20higher)\x20on\x20entry\x20pair\x20targeting\x20\x22'+j['next_node']+'\x22\x20if\x20Forwards\x20represent\x20AND\x20semantics;\x20keep\x20threshold=0\x20if\x20OR\x20semantics\x20is\x20intended\x20(then\x20consider\x20splitting\x20into\x20competing\x20Pairs).'});}}for(const m of f){const n=m['forwards']['reduce']((o,p)=>o+p['weight'],0x0);m['threshold']>n&&b['push']({'example':a['example_name'],'source_file':a['relative_path'],'line':d,'machine_name':g,'category':'design','severity':'critical','title':'Threshold\x20exceeds\x20total\x20forward\x20weight\x20(unreachable)','detail':'Pair\x20(prev=\x22'+m['prev_node']+'\x22,\x20next=\x22'+m['next_node']+'\x22)\x20has\x20threshold='+m['threshold']+'\x20but\x20total\x20forward\x20weight='+n+'.\x20This\x20pair\x20can\x20NEVER\x20be\x20satisfied\x20—\x20workflow\x20dead-ends\x20here.','rule_id':'R-M2-06','fix':'Reduce\x20threshold\x20to\x20≤\x20'+n+'\x20or\x20add\x20more\x20forwards\x20with\x20weight.'});}}return b;}export function analyzeNetworkSafety(a){const b=[];for(const {op:c,line_start:d}of a['machine_ops']){const e=getMachineName(c),f=c['data']['publish']===!![],g=c['env']['network'];f&&g==='mainnet'&&b['push']({'example':a['example_name'],'source_file':a['relative_path'],'line':d,'machine_name':e,'category':'runtime','severity':'critical','title':'Direct\x20mainnet\x20publish\x20without\x20testnet\x20test','detail':'Machine\x20\x22'+e+'\x22\x20is\x20published\x20directly\x20to\x20mainnet.\x20Per\x20R-M4-02,\x20must\x20test\x20on\x20testnet\x20first.','rule_id':'R-M4-02','fix':'Set\x20env.network\x20to\x20\x22testnet\x22\x20for\x20first\x20publish,\x20run\x20end-to-end\x20test,\x20then\x20re-publish\x20on\x20mainnet.'});}return b;}export function analyzeConfirmationBypass(a){const b=[];for(const {op:c,line_start:d}of a['machine_ops']){const e=getMachineName(c),f=c['data']['publish']===!![],g=c['env']['confirmed']===!![];f&&g&&b['push']({'example':a['example_name'],'source_file':a['relative_path'],'line':d,'machine_name':e,'category':'runtime','severity':'medium','title':'confirmed=true\x20bypasses\x20user\x20confirmation\x20prompt','detail':'Machine\x20\x22'+e+'\x22\x20is\x20published\x20with\x20env.confirmed=true.\x20This\x20bypasses\x20the\x20ConfirmGate\x20user-confirmation\x20step.\x20Examples\x20should\x20demonstrate\x20the\x20two-step\x20confirmation\x20flow\x20(Phase\x201\x20prompt\x20→\x20Phase\x202\x20confirmed=true).','rule_id':'R-M4-04','fix':'Show\x20Phase\x201\x20(without\x20confirmed=true)\x20and\x20Phase\x202\x20(with\x20confirmed=true)\x20as\x20separate\x20steps\x20in\x20the\x20example.'});}return b;}export function analyzeGuardReferences(a){const b=[],c=a['defined_guard_names'];for(const {op:d,line_start:e}of a['machine_ops']){if(!d['data']['node']?.['nodes'])continue;const f=getMachineName(d),h=d['data']['publish']===!![];for(const i of d['data']['node']['nodes']){for(const j of i['pairs']){for(const k of j['forwards']){let l;if(typeof k['guard']==='string')l=k['guard'];else{if(k['guard']&&typeof k['guard']==='object'){const m=k['guard'];if(typeof m['guard']==='string')l=m['guard'];}}if(!l)continue;!c['has'](l)&&b['push']({'example':a['example_name'],'source_file':a['relative_path'],'line':e,'machine_name':f,'category':'runtime','severity':h?'critical':'high','title':'Guard\x20\x22'+l+'\x22\x20referenced\x20but\x20not\x20defined\x20in\x20example','detail':'Forward\x20\x22'+k['name']+'\x22\x20references\x20Guard\x20\x22'+l+'\x22\x20but\x20no\x20operation_type=\x22guard\x22\x20with\x20name=\x22'+l+'\x22\x20appears\x20earlier\x20in\x20'+a['relative_path']+'.\x20'+(h?'Publishing\x20will\x20fail\x20at\x20runtime.':'Will\x20fail\x20at\x20machine\x20creation.'),'rule_id':h?'R-M4-03':'R-M2-01','fix':'Add\x20a\x20guard\x20creation\x20step\x20(operation_type=\x22guard\x22)\x20with\x20name=\x22'+l+'\x22\x20BEFORE\x20the\x20machine\x20creation\x20step.'});}}}}return b;}export function analyzeCrossMachineDeps(a,b=new Map()){const c=[],d=[];for(const {op:f,line_start:g}of a['machine_ops']){if(!f['data']['node']?.['nodes'])continue;const {nodes:h,pairs:i}=nodeDefsToMachine(f['data']['node']['nodes']),j=getMachineName(f),k=identifyCrossMachineDependency(j,{'nodes':h,'pairs':i},b);d['push'](...k),k['length']>0x0&&c['push']({'example':a['example_name'],'source_file':a['relative_path'],'line':g,'machine_name':j,'category':'cross_machine','severity':'info','title':'Machine\x20declares\x20'+k['length']+'\x20cross-Machine\x20dependencies','detail':k['map'](l=>'Forward\x20\x22'+l['dependency']['machine_a_forward']+'\x22\x20depends\x20on\x20Machine\x20\x22'+l['machine_b_id']+'\x22\x20reaching\x20node\x20\x22'+l['dependency']['machine_b_node']+'\x22')['join'](';\x20'),'rule_id':'P-M3'});}const e=detectCrossMachineCycle(d);for(const l of e){c['push']({'example':a['example_name'],'source_file':a['relative_path'],'line':0x0,'machine_name':'(project-level)','category':'cross_machine','severity':'critical','title':'Cross-Machine\x20dependency\x20cycle\x20detected','detail':'Cycle:\x20'+l['join']('\x20→\x20'),'rule_id':'R-M2-07','fix':'Break\x20the\x20cycle\x20by\x20removing\x20one\x20of\x20the\x20dependencies\x20in\x20the\x20cycle.'});}return{'deps':d,'cycles':e,'findings':c};}export function analyzeRoundTrip(a){const b=[];for(const {op:c,line_start:d}of a['machine_ops']){if(!c['data']['node']?.['nodes'])continue;const {nodes:e,pairs:f}=nodeDefsToMachine(c['data']['node']['nodes']),g=getMachineName(c),h=analyzeTopology(e,f);h['has_cycles']&&b['push']({'example':a['example_name'],'source_file':a['relative_path'],'line':d,'machine_name':g,'category':'round_trip','severity':'critical','title':'Topology\x20analysis:\x20cycle\x20detected\x20(DAG\x20violation)','detail':'Machine\x20\x22'+g+'\x22\x20has\x20cycles:\x20'+JSON['stringify'](h['cycle_nodes']),'rule_id':'R-M1-03','fix':'Remove\x20cycles\x20—\x20Machine\x20must\x20be\x20a\x20DAG.'});const i={'network':c['env']['network']==='mainnet'?'mainnet':'testnet','testnet_test_passed':c['env']['network']!=='mainnet','published_services':new Set(),'published_guards':new Set(),'published_permissions':new Set(),'published_machines':new Set(),'published_arbitrations':new Set(),'published_rewards':new Set(),'published_allocators':new Set(),'published_repositories':new Set()};for(const p of f){for(const q of p['forwards']){if(q['guard'])i['published_guards']['add'](q['guard']);}}const j={'nodes':e,'pairs':f,'b_published':c['data']['publish']===!![]},k=assessMachineRisks(j,i),l=k['detected_risks']['filter'](s=>s['severity']==='critical');if(l['length']>0x0)for(const s of l){b['push']({'example':a['example_name'],'source_file':a['relative_path'],'line':d,'machine_name':g,'category':'round_trip','severity':'critical','title':'Risk\x20assessment:\x20'+s['rule_id']+'\x20('+s['severity']+')','detail':s['detail'],'rule_id':s['rule_id']});}const m={'nodes':e,'pairs':f,'name':g},n=runStaticChecklist(m),o=n['failed_items']['filter'](t=>['C-01','C-03','C-06','C-10']['includes'](t['id']));for(const t of o){b['push']({'example':a['example_name'],'source_file':a['relative_path'],'line':d,'machine_name':g,'category':'round_trip','severity':'high','title':'Checklist\x20'+t['id']+'\x20failed:\x20'+t['description'],'detail':t['detail']??'(no\x20detail)','rule_id':t['id']});}for(const u of e){const v=f['filter'](y=>y['prev_node']===u['name']),w={'name':u['name'],'pairs':v,'all_pairs':f},x=explainNode(w);(!x['name']||x['pairs']['length']!==v['length'])&&b['push']({'example':a['example_name'],'source_file':a['relative_path'],'line':d,'machine_name':g,'category':'round_trip','severity':'medium','title':'Round-trip\x20mismatch\x20for\x20node\x20\x22'+u['name']+'\x22','detail':'explainNode\x20produced\x20inconsistent\x20output:\x20name=\x22'+x['name']+'\x22,\x20pairs_count='+x['pairs']['length']+'\x20(expected\x20'+v['length']+')','rule_id':'RT-001'});}}return b;}export function analyzeProgressOps(a){const b=[],c=new Set();let d='(none)';for(const {op:e}of a['machine_ops']){if(!e['data']['node']?.['nodes'])continue;d=getMachineName(e);const {pairs:f}=nodeDefsToMachine(e['data']['node']['nodes']);for(const g of f){c['add'](g['next_node']+'::'+g['forwards']['map'](h=>h['name'])['join']('|'));for(const h of g['forwards']){c['add'](g['next_node']+'::'+h['name']);}}}for(const i of a['progress_ops']){const j=i['data']['progress']?.['operation'];if(!j)continue;const k=j['next_node_name']+'::'+j['forward'],l=c['has'](k);if(!l){const m=[...c]['some'](n=>n['endsWith']('::'+j['forward']));!m?b['push']({'example':a['example_name'],'source_file':a['relative_path'],'line':i['_source_line']??0x0,'machine_name':d,'category':'progress','severity':'high','title':'Progress\x20references\x20unknown\x20forward\x20\x22'+j['forward']+'\x22','detail':'Progress\x20op\x20references\x20forward\x20\x22'+j['forward']+'\x22\x20but\x20no\x20such\x20forward\x20exists\x20in\x20machine\x20\x22'+d+'\x22.','rule_id':'R-M3-04','fix':'Verify\x20forward\x20name\x20matches\x20one\x20defined\x20in\x20the\x20Machine.'}):b['push']({'example':a['example_name'],'source_file':a['relative_path'],'line':i['_source_line']??0x0,'machine_name':d,'category':'progress','severity':'medium','title':'Progress\x20forward\x20\x22'+j['forward']+'\x22\x20doesn\x27t\x20lead\x20to\x20\x22'+j['next_node_name']+'\x22','detail':'Forward\x20\x22'+j['forward']+'\x22\x20exists\x20but\x20doesn\x27t\x20target\x20node\x20\x22'+j['next_node_name']+'\x22.','rule_id':'R-M3-05','fix':'Correct\x20next_node_name\x20to\x20match\x20the\x20forward\x27s\x20target.'});}}return b;}export function analyzePublishStep(a){const b=[],c=a['machine_ops']['some'](({op:e})=>e['data']['publish']===!![]),d=a['progress_ops']['length']>0x0;return d&&!c&&b['push']({'example':a['example_name'],'source_file':a['relative_path'],'line':0x0,'machine_name':'(file-level)','category':'runtime','severity':'high','title':'Progress\x20operations\x20present\x20but\x20no\x20`publish:\x20true`\x20step','detail':'Example\x20has\x20'+a['progress_ops']['length']+'\x20progress\x20operations\x20but\x20no\x20machine\x20operation\x20with\x20publish=true.\x20Progress::new\x20will\x20fail\x20at\x20runtime\x20(machine\x20not\x20published).','rule_id':'R-M4-01','fix':'Add\x20a\x20publish\x20step\x20(or\x20set\x20data.publish=true\x20on\x20the\x20machine\x20creation\x20operation).'}),b;}export function analyzeRiskRuleCoverage(a){const b=new Map();let c=0x0;const d=[...analyzeSchemaConsistency(a),...analyzeThresholdIssues(a),...analyzeNetworkSafety(a),...analyzeConfirmationBypass(a),...analyzeGuardReferences(a),...analyzeRoundTrip(a),...analyzeProgressOps(a),...analyzePublishStep(a)];for(const e of d){e['rule_id']&&(b['set'](e['rule_id'],(b['get'](e['rule_id'])??0x0)+0x1),c++);}return{'ruleCounts':b,'totalFindings':c};}export function scanAllExamples(a=EXAMPLES_DIR){const b=loadAllExamples(a),c=new Map(),d=new Map(),e=new Map(),g=new Map();let h=0x0;for(const i of b){const j=[];j['push'](...analyzeSchemaConsistency(i)),j['push'](...analyzeThresholdIssues(i)),j['push'](...analyzeNetworkSafety(i)),j['push'](...analyzeConfirmationBypass(i)),j['push'](...analyzeGuardReferences(i));const k=analyzeCrossMachineDeps(i);j['push'](...k['findings']),j['push'](...analyzeRoundTrip(i)),j['push'](...analyzeProgressOps(i)),j['push'](...analyzePublishStep(i)),c['set'](i['relative_path'],j);for(const l of j){const m=d['get'](l['category'])??[];m['push'](l),d['set'](l['category'],m);const n=e['get'](l['severity'])??[];n['push'](l),e['set'](l['severity'],n),l['rule_id']&&g['set'](l['rule_id'],(g['get'](l['rule_id'])??0x0)+0x1),h++;}}return{'examples':b,'findings_by_example':c,'findings_by_category':d,'findings_by_severity':e,'total_findings':h,'risk_rule_coverage':g};}export function formatScanReport(a){const b=[];b['push']('#\x20Examples\x20Scan\x20Report\x20—\x20d:\x5cwowok\x5cdocs\x5cexamples'),b['push'](''),b['push']('>\x20Auto-generated\x20by\x20`examples-scanner.ts`\x20—\x20comprehensive\x20scan\x20of\x20all'),b['push']('>\x20machine/progress\x20JSON\x20in\x205\x20example\x20directories\x20for\x20design\x20and\x20runtime\x20problems.'),b['push'](''),b['push']('##\x20Summary'),b['push'](''),b['push']('-\x20**Examples\x20scanned**:\x20'+a['examples']['length']),b['push']('-\x20**Total\x20findings**:\x20'+a['total_findings']),b['push'](''),b['push']('###\x20Findings\x20by\x20Severity'),b['push'](''),b['push']('|\x20Severity\x20|\x20Count\x20|'),b['push']('|----------|-------|');const c=['critical','high','medium','low','info'];for(const j of c){const k=a['findings_by_severity']['get'](j)?.['length']??0x0;b['push']('|\x20'+j+'\x20|\x20'+k+'\x20|');}b['push'](''),b['push']('###\x20Findings\x20by\x20Category'),b['push'](''),b['push']('|\x20Category\x20|\x20Count\x20|'),b['push']('|----------|-------|');const d=['schema_consistency','design','runtime','cross_machine','round_trip','progress','risk_rule'];for(const l of d){const m=a['findings_by_category']['get'](l)?.['length']??0x0;b['push']('|\x20'+l+'\x20|\x20'+m+'\x20|');}b['push'](''),b['push']('###\x20Risk\x20Rule\x20Coverage\x20(which\x20rules\x20fired\x20across\x20examples)'),b['push'](''),b['push']('|\x20Rule\x20ID\x20|\x20Total\x20Hits\x20|'),b['push']('|---------|-----------|');const e=[...a['risk_rule_coverage']['entries']()]['sort']((n,o)=>n[0x0]['localeCompare'](o[0x0]));for(const [n,o]of e){b['push']('|\x20'+n+'\x20|\x20'+o+'\x20|');}b['push'](''),b['push']('##\x20Per-Example\x20Findings'),b['push']('');for(const p of a['examples']){const q=a['findings_by_example']['get'](p['relative_path'])??[];b['push']('###\x20'+p['example_name']+'\x20—\x20`'+p['relative_path']+'`'),b['push'](''),b['push']('-\x20**Source**:\x20`'+p['relative_path']+'`'),b['push']('-\x20**Machine\x20operations**:\x20'+p['machine_ops']['length']),b['push']('-\x20**Progress\x20operations**:\x20'+p['progress_ops']['length']),b['push']('-\x20**Defined\x20guards**:\x20'+p['defined_guard_names']['size']);p['business_description']&&b['push']('-\x20**Business\x20description**:\x20'+p['business_description']);b['push']('-\x20**Findings**:\x20'+q['length']),b['push']('');if(q['length']===0x0){b['push']('✅\x20No\x20issues\x20detected.'),b['push']('');continue;}const r=new Map();for(const s of q){const t=r['get'](s['severity'])??[];t['push'](s),r['set'](s['severity'],t);}for(const u of c){const v=r['get'](u)??[];if(v['length']===0x0)continue;b['push']('####\x20'+u['toUpperCase']()+'\x20('+v['length']+')'),b['push']('');for(const w of v){b['push']('-\x20**['+(w['rule_id']??'—')+']\x20'+w['title']+'**\x20(line\x20'+w['line']+')'),b['push']('\x20\x20-\x20'+w['detail']),w['fix']&&b['push']('\x20\x20-\x20**Fix**:\x20'+w['fix']),b['push']('');}}}b['push']('##\x20Cross-Cutting\x20Patterns'),b['push']('');const g=a['findings_by_category']['get']('schema_consistency')??[];g['length']===0x0&&(b['push']('###\x20Schema\x20Consistency\x20—\x20No\x20Issues\x20(camelCase\x20is\x20canonical)'),b['push'](''),b['push']('The\x20previous\x20SCHEMA-001/002/003/004\x20rules\x20have\x20been\x20REMOVED\x20(2026-07-19).'),b['push'](''),b['push']('**Reason**:\x20Verification\x20against\x20MCP\x20schema\x20(`d:\x5cwowok\x5cagent\x5cmcp\x5csrc`)\x20confirmed\x20that:'),b['push']('-\x20`MachineForwardSchema`\x20accepts\x20`namedOperator`,\x20`permissionIndex`\x20(camelCase)'),b['push']('-\x20`MachineForwardGuardSchema`\x20is\x20an\x20OBJECT\x20`{\x20guard:\x20string,\x20retained_submission?:\x20number[]\x20}`\x20(NOT\x20a\x20flat\x20string)'),b['push']('-\x20`NamedObjectSchema`\x20accepts\x20`replaceExistName`,\x20`onChain`\x20(camelCase)'),b['push'](''),b['push']('Source\x20examples\x20using\x20camelCase\x20are\x20therefore\x20CORRECT\x20per\x20MCP\x20schema\x20—\x20the\x20previous\x20rules\x20were\x20false\x20positives.'),b['push'](''));const h=(a['findings_by_category']['get']('design')??[])['filter'](x=>x['rule_id']==='R-M3-09');if(h['length']>0x0){b['push']('###\x20Threshold=0\x20on\x20Multi-Forward\x20Entry\x20Pairs\x20(R-M3-09)'),b['push'](''),b['push']('Found\x20'+h['length']+'\x20multi-Forward\x20entry\x20pairs\x20with\x20threshold=0\x20across\x20examples.'),b['push'](''),b['push']('**Detection\x20logic**\x20(refined\x202026-07-19):'),b['push']('-\x20Single-Forward\x20Pair\x20with\x20threshold=0\x20→\x20**NOT\x20flagged**\x20(legitimate:\x20single\x20execution\x20triggers\x20migration\x20regardless\x20of\x20threshold)'),b['push']('-\x20Competing-OR\x20Pairs\x20(multiple\x20Pairs\x20share\x20prev_node=\x22\x22)\x20with\x20threshold=0\x20→\x20**NOT\x20flagged**\x20(legitimate\x20OR\x20semantics)'),b['push']('-\x20Multi-Forward\x20Pair\x20with\x20threshold=0\x20AND\x20no\x20competing\x20siblings\x20→\x20**FLAGGED**\x20(potential\x20permission\x20bypass:\x20any\x20single\x20Forward\x20fires\x20→\x20migration)'),b['push']('');const x=[...new Set(h['map'](y=>y['source_file']))];b['push']('**Affected\x20source\x20files**:\x20'+x['map'](y=>'`'+y+'`')['join'](',\x20')+'.'),b['push'](''),b['push']('**Fix**:\x20Set\x20threshold=1\x20(or\x20higher)\x20if\x20Forwards\x20represent\x20AND\x20semantics;\x20keep\x20threshold=0\x20only\x20if\x20OR\x20semantics\x20is\x20intended\x20(then\x20consider\x20splitting\x20into\x20competing\x20Pairs).'),b['push']('');}else b['push']('###\x20Threshold=0\x20on\x20Entry\x20Pairs\x20—\x20No\x20Issues'),b['push'](''),b['push']('All\x20entry\x20pairs\x20with\x20threshold=0\x20fall\x20into\x20legitimate\x20categories\x20(single-Forward\x20or\x20competing-OR).'),b['push']('');const i=(a['findings_by_category']['get']('runtime')??[])['filter'](y=>y['rule_id']==='R-M4-02');return i['length']>0x0&&(b['push']('###\x20Direct\x20Mainnet\x20Publish\x20(R-M4-02)'),b['push'](''),b['push']('Found\x20'+i['length']+'\x20examples\x20publishing\x20directly\x20to\x20mainnet\x20without\x20testnet\x20test.'),b['push'](''),b['push']('**Affected\x20examples**:\x20MyShop,\x20MyShop_Advanced.'),b['push'](''),b['push']('**Fix**:\x20Add\x20a\x20testnet\x20publish\x20step\x20before\x20mainnet,\x20or\x20change\x20the\x20network\x20to\x20testnet\x20for\x20examples.'),b['push']('')),b['push']('##\x20Recommendations\x20for\x20Linter\x20&\x20Cognition\x20Closure'),b['push'](''),b['push']('Based\x20on\x20the\x20findings,\x20the\x20following\x20linter\x20rules\x20and\x20cognition\x20improvements\x20are\x20recommended:'),b['push'](''),b['push']('1.\x20**REMOVED\x20SCHEMA-001/002/003/004**\x20(2026-07-19):\x20These\x20rules\x20incorrectly\x20assumed\x20SDK\x20snake_case\x20as\x20the\x20standard.\x20MCP\x20schema\x20actually\x20accepts\x20camelCase\x20(`namedOperator`,\x20`permissionIndex`,\x20`replaceExistName`)\x20and\x20nested\x20Guard\x20object\x20form.\x20Examples\x20are\x20correct\x20as-is.'),b['push']('2.\x20**REFACTORED\x20R-M3-02\x20→\x20R-M3-09**\x20(2026-07-19,\x20then\x202026-07-20):\x20Original\x20R-M3-02\x20(threshold=0)\x20conflicted\x20with\x20machine-risk.ts\x27s\x20R-M3-02\x20(permissionIndex\x20out\x20of\x20bounds).\x20Initially\x20renamed\x20to\x20R-M3-06,\x20but\x20that\x20also\x20collided\x20with\x20machine-risk.ts\x27s\x20R-M3-06\x20(Permission\x20game\x20imbalance).\x20Final\x20rename:\x20R-M3-09.\x20Logic\x20also\x20refined:\x20single-Forward\x20and\x20competing-OR\x20threshold=0\x20cases\x20are\x20now\x20exempt.'),b['push']('3.\x20**Reinforce\x20R-M4-03**:\x20Guard\x20must\x20be\x20created\x20before\x20Machine\x20publish.\x20Examples\x20should\x20include\x20guard\x20creation\x20step\x20(operation_type=\x22guard\x22)\x20with\x20matching\x20name\x20before\x20machine\x20creation.'),b['push']('4.\x20**Add\x20lint\x20rule**\x20for\x20`confirmed:\x20true`\x20+\x20`publish:\x20true`\x20combination\x20without\x20showing\x20the\x20Phase\x201\x20confirmation\x20prompt\x20first.'),b['push']('5.\x20**IMPLEMENTED**:\x20R-M3-08\x20(permissionIndex\x20<\x201000)\x20rule\x20added\x20to\x20machine-risk.ts,\x20and\x20C-11\x20checklist\x20item\x20added\x20to\x20machine-confirm.ts\x20(2026-07-20).\x20Both\x20enforce\x20the\x20on-chain\x20USER_DEFINED_PERM_INDEX_START\x20=\x201000\x20hard\x20constraint\x20(see\x20doc\x2006\x20§4.4).'),b['push'](''),b['push']('---'),b['push'](''),b['push']('*End\x20of\x20report.*'),b['join']('\x0a');}export const EXAMPLES_SCANNER_VERSION='1.0.0';