@wowok/agent-mcp 2.7.1 → 2.7.3

package/dist/knowledge/reward-risk.js

@@ -1,627 +1 @@
-import { MAX_GUARD_COUNT_REWARD, MAX_RECORD_COUNT_REWARD, } from "./onchain-constants.js";
-import { resolveGuardConstructor, } from "./reward-ledger.js";
-const R_R_1_01 = {
-    id: "R-R-1-01",
-    category: "structural",
-    trigger: "guard_add would exceed MAX_GUARD_COUNT_REWARD (200)",
-    check: (ctx) => {
-        if (!ctx.guard_add || ctx.guard_add.length === 0)
-            return null;
-        const current = ctx.current_guard_count ?? 0;
-        const wouldAdd = ctx.guard_add.length;
-        if (current + wouldAdd > MAX_GUARD_COUNT_REWARD) {
-            return {
-                id: "R-R-1-01",
-                level: "HIGH",
-                category: "structural",
-                title: "guard_add would exceed MAX_GUARD_COUNT_REWARD",
-                description: `Reward has ${current} guards, adding ${wouldAdd} would total ${current + wouldAdd}, ` +
-                    `exceeds MAX_GUARD_COUNT_REWARD ${MAX_GUARD_COUNT_REWARD}. Move aborts with E_GUARD_COUNT_EXCEEDED (3).`,
-                affected_stakeholders: ["owner", "service_provider"],
-                scenario: "Adding too many guards to a single Reward (e.g. milestone reward with > 200 recipients)",
-                mitigation: "Split into multiple Reward objects, or use GuardIdentifier recipient to handle multiple recipients with a single guard.",
-                evidence: `current=${current}, add=${wouldAdd}`,
-                related_move_error: "E_GUARD_COUNT_EXCEEDED (3)",
-                auto_fixable: false,
-            };
-        }
-        return null;
-    },
-};
-const R_R_1_02 = {
-    id: "R-R-1-02",
-    category: "structural",
-    trigger: "claim would push recipient record count to MAX_RECORD_COUNT_REWARD (5200)",
-    check: (ctx) => {
-        if (!ctx.claim)
-            return null;
-        const current = ctx.current_record_count_for_recipient ?? 0;
-        if (current >= MAX_RECORD_COUNT_REWARD) {
-            return {
-                id: "R-R-1-02",
-                level: "HIGH",
-                category: "structural",
-                title: "claim blocked — recipient record count at limit",
-                description: `Recipient already has ${current} records, at MAX_RECORD_COUNT_REWARD ${MAX_RECORD_COUNT_REWARD}. ` +
-                    `Next claim will abort with E_RECORD_COUNT_EXCEEDED (8). The recipient can no longer claim from this Reward.`,
-                affected_stakeholders: ["claimer"],
-                scenario: "High-frequency claimer hits the 5200-record ceiling (e.g. cashback on every micro-order)",
-                mitigation: "Owner can create a new Reward for the same recipient, OR redesign the Guard to batch claims (larger amount per claim).",
-                evidence: `recipient_records=${current}`,
-                related_move_error: "E_RECORD_COUNT_EXCEEDED (8)",
-                auto_fixable: false,
-            };
-        }
-        return null;
-    },
-};
-const R_R_1_03 = {
-    id: "R-R-1-03",
-    category: "structural",
-    trigger: "guard_add batch size > MAX_GUARD_COUNT_REWARD (200) — schema-level overflow",
-    check: (ctx) => {
-        if (!ctx.guard_add)
-            return null;
-        if (ctx.guard_add.length > MAX_GUARD_COUNT_REWARD) {
-            return {
-                id: "R-R-1-03",
-                level: "CRITICAL",
-                category: "structural",
-                title: "guard_add batch exceeds absolute limit",
-                description: `Single guard_add call tries to add ${ctx.guard_add.length} guards in one transaction, ` +
-                    `exceeds MAX_GUARD_COUNT_REWARD ${MAX_GUARD_COUNT_REWARD}. SDK rejects this in operate().`,
-                affected_stakeholders: ["owner"],
-                scenario: "Bulk guard addition without splitting transactions",
-                mitigation: `Split into multiple transactions, each ≤ ${MAX_GUARD_COUNT_REWARD} new guards.`,
-                evidence: `batch_size=${ctx.guard_add.length}`,
-                auto_fixable: true,
-            };
-        }
-        return null;
-    },
-};
-const R_R_2_01 = {
-    id: "R-R-2-01",
-    category: "semantic",
-    trigger: "guard_add with GuardIdentifier recipient where identifier type is not address",
-    check: (ctx) => {
-        if (!ctx.guard_add)
-            return null;
-        for (let i = 0; i < ctx.guard_add.length; i++) {
-            const g = ctx.guard_add[i];
-            if ("GuardIdentifier" in g.recipient) {
-                const id = g.recipient.GuardIdentifier;
-                if (ctx.passport_identifier_is_address && ctx.passport_identifier_is_address[id] === false) {
-                    return {
-                        id: "R-R-2-01",
-                        level: "HIGH",
-                        category: "semantic",
-                        title: `guard_add[${i}]: recipient GuardIdentifier ${id} is not address-typed`,
-                        description: `RewardGuard constructor calls is_identifier_address(guard, ${id}). If the identifier type is not address, ` +
-                            `Move aborts with E_RECIPIENT_IDENTIFIER_NOT_ADDRESS (4).`,
-                        affected_stakeholders: ["owner"],
-                        scenario: "Misconfigured Guard — recipient identifier is u64/bool instead of address",
-                        mitigation: "Use a Guard with an address-typed identifier for recipient, OR switch to Entity/Signer recipient.",
-                        evidence: `guard_add[${i}].recipient.GuardIdentifier=${id}, is_address=false`,
-                        related_move_error: "E_RECIPIENT_IDENTIFIER_NOT_ADDRESS (4)",
-                        auto_fixable: false,
-                    };
-                }
-            }
-        }
-        return null;
-    },
-};
-const R_R_2_02 = {
-    id: "R-R-2-02",
-    category: "semantic",
-    trigger: "guard_add with GuardU64Identifier amount where identifier type is not u64",
-    check: (ctx) => {
-        if (!ctx.guard_add)
-            return null;
-        for (let i = 0; i < ctx.guard_add.length; i++) {
-            const g = ctx.guard_add[i];
-            const amountTypeStr = String(g.amount.type).toUpperCase();
-            if (amountTypeStr === "GUARDU64IDENTIFIER" || amountTypeStr === "GUARD_U64_IDENTIFIER") {
-                if (typeof g.amount.value !== "number")
-                    continue;
-                const id = g.amount.value;
-                if (ctx.passport_submission_value_types && ctx.passport_submission_value_types[id] !== "u64") {
-                    return {
-                        id: "R-R-2-02",
-                        level: "HIGH",
-                        category: "semantic",
-                        title: `guard_add[${i}]: amount GuardU64Identifier ${id} is not u64-typed`,
-                        description: `RewardGuard constructor calls get_submission_value_type(guard, ${id}); if None or ≠ TYPE_U64, ` +
-                            `Move aborts with E_AMOUNT_NOT_U64 (5).`,
-                        affected_stakeholders: ["owner"],
-                        scenario: "Misconfigured Guard — amount identifier is not u64-typed",
-                        mitigation: "Use a Guard with a u64-typed identifier for amount, OR switch to Fixed amount.",
-                        evidence: `guard_add[${i}].amount.value=${id}, value_type=${ctx.passport_submission_value_types[id] ?? "unknown"}`,
-                        related_move_error: "E_AMOUNT_NOT_U64 (5)",
-                        auto_fixable: false,
-                    };
-                }
-            }
-        }
-        return null;
-    },
-};
-const R_R_2_03 = {
-    id: "R-R-2-03",
-    category: "semantic",
-    trigger: "guard_add with store_from_id set but identifier is not number/address compatible",
-    check: (ctx) => {
-        if (!ctx.guard_add)
-            return null;
-        for (let i = 0; i < ctx.guard_add.length; i++) {
-            const g = ctx.guard_add[i];
-            if (g.store_from_id == null)
-                continue;
-            if (ctx.guard_store_from_id_compatible && ctx.guard_store_from_id_compatible[g.guard] === false) {
-                return {
-                    id: "R-R-2-03",
-                    level: "MEDIUM",
-                    category: "semantic",
-                    title: `guard_add[${i}]: store_from_id incompatible with guard`,
-                    description: `RewardGuard constructor with store_from_id=Some calls is_identifier_address_compatible(guard, store_from_id). ` +
-                        `If the identifier type is not number or address, Move aborts with E_STORE_FROM_ID_NOT_COMPATIBLE (12).`,
-                    affected_stakeholders: ["owner"],
-                    scenario: "Misconfigured Guard — store_from_id points to a non-address/non-number identifier",
-                    mitigation: "Use a compatible identifier, OR drop store_from_id (set to null) if cross-reference is not needed.",
-                    evidence: `guard=${g.guard}, store_from_id=${g.store_from_id}`,
-                    related_move_error: "E_STORE_FROM_ID_NOT_COMPATIBLE (12)",
-                    auto_fixable: true,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_R_2_04 = {
-    id: "R-R-2-04",
-    category: "semantic",
-    trigger: "guard_add with invalid Recipient × Amount pairing (no matching constructor)",
-    check: (ctx) => {
-        if (!ctx.guard_add)
-            return null;
-        const recipientTypeMap = {
-            GuardIdentifier: "GuardIdentifier",
-            Entity: "Entity",
-            Signer: "Signer",
-        };
-        for (let i = 0; i < ctx.guard_add.length; i++) {
-            const g = ctx.guard_add[i];
-            const recipientKey = Object.keys(g.recipient)[0];
-            const recipientType = recipientTypeMap[recipientKey];
-            const amountTypeStr = String(g.amount.type).toUpperCase();
-            const amountType = amountTypeStr === "FIXED" ? "Fixed" : "GuardU64Identifier";
-            const constructor = resolveGuardConstructor(recipientType, amountType);
-            if (!constructor) {
-                return {
-                    id: "R-R-2-04",
-                    level: "HIGH",
-                    category: "semantic",
-                    title: `guard_add[${i}]: invalid Recipient × Amount pairing`,
-                    description: `recipient=${recipientType}, amount=${amountType} — no matching Move constructor. ` +
-                        `SDK reward_guard() will W_ERROR with "Invalid recipient or amount type combination".`,
-                    affected_stakeholders: ["owner"],
-                    scenario: "Schema validation bypassed or stale client",
-                    mitigation: "Use one of the 6 valid pairings: guard_u8_u8, guard_u8_u64, guard_entity_u8, guard_entity_u64, guard_signer_u8, guard_signer_u64.",
-                    evidence: `recipient=${recipientType}, amount=${amountType}`,
-                    auto_fixable: false,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_R_3_01 = {
-    id: "R-R-3-01",
-    category: "permission",
-    trigger: "claim attempted without permission context — claim is passport-driven",
-    check: (ctx) => {
-        if (!ctx.claim)
-            return null;
-        return {
-            id: "R-R-3-01",
-            level: "MEDIUM",
-            category: "permission",
-            title: "claim is permission-free — anyone with a valid Passport can claim",
-            description: `reward::claim() does NOT assert any permission index. Eligibility is determined entirely by the ` +
-                `Guard verification (passport::result_for_guard). If the Guard is too permissive, funds can be drained by anyone.`,
-            affected_stakeholders: ["owner", "service_provider"],
-            scenario: "Loose Guard allows unauthorized claims (e.g. time-only Guard without service binding)",
-            mitigation: "1) Use Guards that bind to specific Service/Order context. 2) Set expiration_time. 3) Monitor balance and refill only what's needed.",
-            evidence: `claim=${ctx.claim}`,
-            auto_fixable: false,
-        };
-    },
-};
-const R_R_3_02 = {
-    id: "R-R-3-02",
-    category: "permission",
-    trigger: "owner_receive (156) — broad blast radius, owner can drain balance",
-    check: (ctx) => {
-        if (ctx.owner_receive == null)
-            return null;
-        return {
-            id: "R-R-3-02",
-            level: "HIGH",
-            category: "permission",
-            title: "owner_receive drains balance to Permission owner",
-            description: `reward::owner_receive (156 permission) unwraps Receiving<K> / CoinWrapper<K> and forwards to Permission owner. ` +
-                `If 156 is granted too broadly, any 156-holder can sweep receivables. (Note: owner_receive does NOT directly drain balance — ` +
-                `only Receiving<K> envelopes sent to the Reward's id.)`,
-            affected_stakeholders: ["owner", "service_provider"],
-            scenario: "Compromised 156-holder sweeps receivables before owner",
-            mitigation: "1) Grant 156 only to the Permission owner address. 2) Reconcile Receiving<K> inflows vs owner_receive events.",
-            evidence: `owner_receive set`,
-            auto_fixable: false,
-        };
-    },
-};
-const R_R_3_03 = {
-    id: "R-R-3-03",
-    category: "permission",
-    trigger: "guard_expiration_time_add (155) — can permanently lock guard additions",
-    check: (ctx) => {
-        if (ctx.guard_expiration_time === undefined)
-            return null;
-        if (ctx.guard_expiration_time !== null && ctx.current_clock_ms !== undefined) {
-            const lockDurationMs = ctx.guard_expiration_time - ctx.current_clock_ms;
-            const oneYearMs = 365 * 24 * 60 * 60 * 1000;
-            if (lockDurationMs > oneYearMs) {
-                return {
-                    id: "R-R-3-03",
-                    level: "MEDIUM",
-                    category: "permission",
-                    title: "guard_expiration_time_add locks guard additions for > 1 year",
-                    description: `Setting guard_not_added_expiration_time to ${ctx.guard_expiration_time} ` +
-                        `(> 1 year from now) effectively freezes the guard list. While this is sometimes intentional ` +
-                        `(milestone rewards), it cannot be undone without setting a new time (which itself requires 155 permission).`,
-                    affected_stakeholders: ["owner"],
-                    scenario: "Operator sets excessively long lock period by mistake",
-                    mitigation: "Confirm intent. If wrong, call guard_expiration_time_add again with a shorter time (must be ≥ current clock per E_GUARD_LOCKED_TIME_NOT_INCREASING).",
-                    evidence: `lock_until=${ctx.guard_expiration_time}, clock=${ctx.current_clock_ms}`,
-                    auto_fixable: false,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_R_4_01 = {
-    id: "R-R-4-01",
-    category: "lifecycle",
-    trigger: "claim on guard with expiration_time < now (E_GUARD_EXPIRED)",
-    check: (ctx) => {
-        if (!ctx.claim)
-            return null;
-        return null;
-    },
-};
-const R_R_4_02 = {
-    id: "R-R-4-02",
-    category: "lifecycle",
-    trigger: "claim: balance < amount (E_INSUFFICIENT_BALANCE)",
-    check: (ctx) => {
-        if (!ctx.claim)
-            return null;
-        if (ctx.current_balance !== undefined && ctx.current_guard_count !== undefined) {
-            const balance = BigInt(ctx.current_balance);
-            if (balance === 0n) {
-                return {
-                    id: "R-R-4-02",
-                    level: "HIGH",
-                    category: "lifecycle",
-                    title: "claim on Reward with zero balance",
-                    description: `Reward balance is 0. Any claim will abort with E_INSUFFICIENT_BALANCE (6). ` +
-                        `Owner must coin_add (153) or receive (154) to replenish.`,
-                    affected_stakeholders: ["claimer", "owner"],
-                    scenario: "Marketing campaign budget exhausted but guards remain active",
-                    mitigation: "1) Owner: coin_add to replenish. 2) Owner: guard_remove_expired + guard_expiration_time_add to deactivate. 3) Claimer: wait for replenishment.",
-                    evidence: `balance=0`,
-                    related_move_error: "E_INSUFFICIENT_BALANCE (6)",
-                    auto_fixable: false,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_R_4_03 = {
-    id: "R-R-4-03",
-    category: "lifecycle",
-    trigger: "guard_add while guard_not_added_expiration_time is Some and clock ≤ expiration (E_GUARD_LOCKED_TIME)",
-    check: (ctx) => {
-        if (!ctx.guard_add || ctx.guard_add.length === 0)
-            return null;
-        if (ctx.current_guard_not_added_expiration_time == null)
-            return null;
-        if (ctx.current_clock_ms === undefined)
-            return null;
-        if (ctx.current_clock_ms <= ctx.current_guard_not_added_expiration_time) {
-            return {
-                id: "R-R-4-03",
-                level: "HIGH",
-                category: "lifecycle",
-                title: "guard_add blocked by time-lock (guard_not_added_expiration_time)",
-                description: `guard_not_added_expiration_time is Some(${ctx.current_guard_not_added_expiration_time}); ` +
-                    `clock is ${ctx.current_clock_ms}. Move asserts clock > expiration_time ` +
-                    `(E_GUARD_LOCKED_TIME = 10).`,
-                affected_stakeholders: ["owner"],
-                scenario: "Trying to add guards during a flash sale lock period",
-                mitigation: "1) Wait until clock > expiration_time. 2) Call guard_expiration_time_add (155) to extend the lock (cannot shorten below current clock).",
-                evidence: `lock_until=${ctx.current_guard_not_added_expiration_time}, clock=${ctx.current_clock_ms}`,
-                related_move_error: "E_GUARD_LOCKED_TIME (10)",
-                auto_fixable: false,
-            };
-        }
-        return null;
-    },
-};
-const R_R_4_04 = {
-    id: "R-R-4-04",
-    category: "lifecycle",
-    trigger: "guard_expiration_time_add regression (new time < current clock)",
-    check: (ctx) => {
-        if (ctx.guard_expiration_time === undefined)
-            return null;
-        if (ctx.guard_expiration_time === null)
-            return null;
-        if (ctx.current_clock_ms === undefined)
-            return null;
-        if (ctx.guard_expiration_time <= ctx.current_clock_ms) {
-            return {
-                id: "R-R-4-04",
-                level: "HIGH",
-                category: "lifecycle",
-                title: "guard_expiration_time_add: new time must be in the future",
-                description: `New guard_not_added_expiration_time = ${ctx.guard_expiration_time} ≤ clock ${ctx.current_clock_ms}. ` +
-                    `Move aborts with E_GUARD_LOCKED_TIME_INVALID (11).`,
-                affected_stakeholders: ["owner"],
-                scenario: "Operator sets lock time in the past by mistake",
-                mitigation: `Set guard_expiration_time to a value > ${ctx.current_clock_ms} (current clock).`,
-                evidence: `new_time=${ctx.guard_expiration_time}, clock=${ctx.current_clock_ms}`,
-                related_move_error: "E_GUARD_LOCKED_TIME_INVALID (11)",
-                auto_fixable: true,
-            };
-        }
-        return null;
-    },
-};
-const R_R_5_01 = {
-    id: "R-R-5-01",
-    category: "cross_object",
-    trigger: "claim: guard not found in self.guards (E_GUARD_NOT_FOUND)",
-    check: (ctx) => {
-        if (!ctx.claim)
-            return null;
-        if (!ctx.target_guard_addresses)
-            return null;
-        if (!ctx.target_guard_addresses.includes(ctx.claim)) {
-            return {
-                id: "R-R-5-01",
-                level: "HIGH",
-                category: "cross_object",
-                title: "claim: supplied guard not in Reward.guards",
-                description: `Guard ${ctx.claim} is not in the Reward's guard list. Move iterates self.guards and ` +
-                    `aborts with E_GUARD_NOT_FOUND (7) if no match.`,
-                affected_stakeholders: ["claimer"],
-                scenario: "Claimer uses the wrong Guard object (typo or wrong Service)",
-                mitigation: "1) Verify the Guard address via query ObjectReward. 2) Ensure the Guard was added via guard_add (152).",
-                evidence: `claim_guard=${ctx.claim}, known_guards=${ctx.target_guard_addresses.join(",")}`,
-                related_move_error: "E_GUARD_NOT_FOUND (7)",
-                auto_fixable: false,
-            };
-        }
-        return null;
-    },
-};
-const R_R_5_02 = {
-    id: "R-R-5-02",
-    category: "cross_object",
-    trigger: "coin_add: coin type T mismatch with Reward<T>",
-    check: (ctx) => {
-        if (!ctx.coin_add || !ctx.reward_type)
-            return null;
-        if (ctx.coin_add.coin_type !== ctx.reward_type) {
-            return {
-                id: "R-R-5-02",
-                level: "CRITICAL",
-                category: "cross_object",
-                title: "coin_add: coin type T mismatch",
-                description: `Reward is Reward<${ctx.reward_type}> but coin_add passes Coin<${ctx.coin_add.coin_type}>. ` +
-                    `Move type-system mismatch; SDK W_ERROR in operate().`,
-                affected_stakeholders: ["owner"],
-                scenario: "Operator tries to deposit wrong coin type (e.g. USDC into a WOW Reward)",
-                mitigation: `Use Coin<${ctx.reward_type}> for coin_add.`,
-                evidence: `reward_type=${ctx.reward_type}, coin_type=${ctx.coin_add.coin_type}`,
-                auto_fixable: false,
-            };
-        }
-        return null;
-    },
-};
-const R_R_5_03 = {
-    id: "R-R-5-03",
-    category: "cross_object",
-    trigger: "receive: Payment<T> type mismatch with Reward<T>",
-    check: (ctx) => {
-        if (!ctx.receive || !ctx.reward_type)
-            return null;
-        if (ctx.receive.token_type !== ctx.reward_type) {
-            return {
-                id: "R-R-5-03",
-                level: "CRITICAL",
-                category: "cross_object",
-                title: "receive: Payment token_type mismatch",
-                description: `Reward is Reward<${ctx.reward_type}> but receive's Payment<CoinWrapper<${ctx.receive.token_type}>>. ` +
-                    `SDK W_ERROR in operate().`,
-                affected_stakeholders: ["owner"],
-                scenario: "Operator tries to receive wrong-token Payment",
-                mitigation: `Use Payment<${ctx.reward_type}> for receive.`,
-                evidence: `reward_type=${ctx.reward_type}, payment_token=${ctx.receive.token_type}`,
-                auto_fixable: false,
-            };
-        }
-        return null;
-    },
-};
-const R_R_6_01 = {
-    id: "R-R-6-01",
-    category: "business_semantic",
-    trigger: "intent mentions praise/positive-review but Guard checks non-wonder progress node",
-    check: (ctx) => {
-        if (!ctx.user_intent_phrases || ctx.user_intent_phrases.length === 0)
-            return null;
-        if (!ctx.guard_expected_progress_state)
-            return null;
-        const intentLower = ctx.user_intent_phrases.join(" ").toLowerCase();
-        const praiseKeywords = [
-            "praise", "wonder", "thumbs_up",
-            "positive review", "satisfaction reward", "praise reward",
-        ];
-        const isPraiseIntent = praiseKeywords.some(kw => intentLower.includes(kw.toLowerCase()));
-        if (!isPraiseIntent)
-            return null;
-        if (ctx.machine_has_wonder_node === false)
-            return null;
-        const expected = ctx.guard_expected_progress_state;
-        if (expected !== "wonder") {
-            return {
-                id: "R-R-6-01",
-                level: "HIGH",
-                category: "business_semantic",
-                title: `Guard checks progress=="${expected}" but intent indicates praise reward (wonder node)`,
-                description: `User intent mentions praise/positive-review/wonder, which maps to the 'wonder' progress node ` +
-                    `(customer gives positive review AFTER service completion). But the Guard's table bakes ` +
-                    `expected state="${expected}", allowing reward claim at the wrong lifecycle stage. ` +
-                    `This violates the business semantics: "praise reward" should only be claimable AFTER the ` +
-                    `customer advances to the 'wonder' node, not before. ` +
-                    `Guard is immutable — fixing this requires creating a new Guard + Reward pair.`,
-                affected_stakeholders: ["owner", "service_provider", "claimer"],
-                scenario: "Designer builds Guard checking 'completed' instead of 'wonder' for a praise reward",
-                mitigation: "Set the Guard table's expected progress state to 'wonder' (the positive-review node). " +
-                    "The correct pattern: ordered → in_service → completed → wonder (praise) triggers reward claim. " +
-                    "Reference: reward-templates.ts wonder_praise template.",
-                evidence: `intent="${intentLower}", expected_state="${expected}", expected_wonder=true`,
-                auto_fixable: false,
-            };
-        }
-        return null;
-    },
-};
-const R_R_6_02 = {
-    id: "R-R-6-02",
-    category: "business_semantic",
-    trigger: "Guard checks wonder node but intent does not mention praise",
-    check: (ctx) => {
-        if (!ctx.user_intent_phrases || ctx.user_intent_phrases.length === 0)
-            return null;
-        if (!ctx.guard_expected_progress_state)
-            return null;
-        if (ctx.guard_expected_progress_state !== "wonder")
-            return null;
-        const intentLower = ctx.user_intent_phrases.join(" ").toLowerCase();
-        const praiseKeywords = [
-            "praise", "wonder", "thumbs_up",
-            "positive review", "satisfaction reward", "praise reward",
-        ];
-        const isPraiseIntent = praiseKeywords.some(kw => intentLower.includes(kw.toLowerCase()));
-        if (isPraiseIntent)
-            return null;
-        return {
-            id: "R-R-6-02",
-            level: "MEDIUM",
-            category: "business_semantic",
-            title: "Guard checks wonder node but intent does not mention praise",
-            description: `Guard's expected progress state is "wonder" (positive-review node), but the user intent ` +
-                `does not mention any praise/positive-review keyword. This may be a copy-paste from a wonder_praise ` +
-                `template without adjusting the Guard for the actual business semantics. If this is a ` +
-                `general feedback reward (wonder_feedback), this is fine. Otherwise, verify the node choice.`,
-            affected_stakeholders: ["owner"],
-            scenario: "Designer copies wonder_praise template but actually wants a completion-based reward",
-            mitigation: "Verify: if intent is praise reward, add 'praise/positive review' to description. " +
-                "If intent is completion-based reward, change Guard to check 'completed' node.",
-            evidence: `expected_state="wonder", intent="${intentLower}" (no praise keyword)`,
-            auto_fixable: false,
-        };
-    },
-};
-const ALL_RULES = [
-    R_R_1_01, R_R_1_02, R_R_1_03,
-    R_R_2_01, R_R_2_02, R_R_2_03, R_R_2_04,
-    R_R_3_01, R_R_3_02, R_R_3_03,
-    R_R_4_01, R_R_4_02, R_R_4_03, R_R_4_04,
-    R_R_5_01, R_R_5_02, R_R_5_03,
-    R_R_6_01, R_R_6_02,
-];
-export const REWARD_RISK_VERSION = "1.0.0";
-export function getAllRewardRiskRules() {
-    return [...ALL_RULES];
-}
-export function getRewardRiskRulesCount() {
-    return ALL_RULES.length;
-}
-export function getRewardRiskRulesByCategory(category) {
-    return ALL_RULES.filter(r => r.category === category);
-}
-export function assessRewardRisks(ctx) {
-    const risks = [];
-    for (const rule of ALL_RULES) {
-        const r = rule.check(ctx);
-        if (r)
-            risks.push(r);
-    }
-    const overall = risks.length === 0
-        ? "LOW"
-        : risks.some(r => r.level === "CRITICAL") ? "CRITICAL"
-            : risks.some(r => r.level === "HIGH") ? "HIGH"
-                : risks.some(r => r.level === "MEDIUM") ? "MEDIUM"
-                    : "LOW";
-    const byCategory = {};
-    for (const r of risks) {
-        byCategory[r.category] = (byCategory[r.category] ?? 0) + 1;
-    }
-    const advice = {};
-    for (const r of risks) {
-        for (const s of r.affected_stakeholders) {
-            if (!advice[s])
-                advice[s] = [];
-            advice[s].push(`${r.id}: ${r.mitigation}`);
-        }
-    }
-    return {
-        summary: `Assessed ${risks.length} risk(s) across ${Object.keys(byCategory).length} categories`,
-        risks,
-        overall_risk: overall,
-        risks_by_category: byCategory,
-        stakeholder_advice: advice,
-        needs_human_review: risks.some(r => r.level === "CRITICAL" || r.level === "HIGH"),
-    };
-}
-export const REWARD_STAKEHOLDERS = [
-    "owner",
-    "claimer",
-    "service_provider",
-    "system",
-];
-export function getRewardRiskRulesByStakeholder(stakeholder) {
-    return ALL_RULES.filter(rule => {
-        if (stakeholder === "owner") {
-            return ["structural", "permission", "lifecycle", "business_semantic"].includes(rule.category);
-        }
-        if (stakeholder === "claimer") {
-            return rule.id.startsWith("R-R-4-0") || rule.id === "R-R-5-01" || rule.id === "R-R-1-02" || rule.id === "R-R-6-01";
-        }
-        if (stakeholder === "service_provider") {
-            return rule.id === "R-R-4-02" || rule.id === "R-R-3-01" || rule.id === "R-R-3-02" || rule.id === "R-R-6-01";
-        }
-        if (stakeholder === "system") {
-            return rule.category === "cross_object";
-        }
-        return false;
-    });
-}
+import{MAX_GUARD_COUNT_REWARD,MAX_RECORD_COUNT_REWARD}from'./onchain-constants.js';import{resolveGuardConstructor}from'./reward-ledger.js';const R_R_1_01={'id':'R-R-1-01','category':'structural','trigger':'guard_add\x20would\x20exceed\x20MAX_GUARD_COUNT_REWARD\x20(200)','check':a=>{if(!a['guard_add']||a['guard_add']['length']===0x0)return null;const b=a['current_guard_count']??0x0,c=a['guard_add']['length'];if(b+c>MAX_GUARD_COUNT_REWARD)return{'id':'R-R-1-01','level':'HIGH','category':'structural','title':'guard_add\x20would\x20exceed\x20MAX_GUARD_COUNT_REWARD','description':'Reward\x20has\x20'+b+'\x20guards,\x20adding\x20'+c+'\x20would\x20total\x20'+(b+c)+',\x20'+('exceeds\x20MAX_GUARD_COUNT_REWARD\x20'+MAX_GUARD_COUNT_REWARD+'.\x20Move\x20aborts\x20with\x20E_GUARD_COUNT_EXCEEDED\x20(3).'),'affected_stakeholders':['owner','service_provider'],'scenario':'Adding\x20too\x20many\x20guards\x20to\x20a\x20single\x20Reward\x20(e.g.\x20milestone\x20reward\x20with\x20>\x20200\x20recipients)','mitigation':'Split\x20into\x20multiple\x20Reward\x20objects,\x20or\x20use\x20GuardIdentifier\x20recipient\x20to\x20handle\x20multiple\x20recipients\x20with\x20a\x20single\x20guard.','evidence':'current='+b+',\x20add='+c,'related_move_error':'E_GUARD_COUNT_EXCEEDED\x20(3)','auto_fixable':![]};return null;}},R_R_1_02={'id':'R-R-1-02','category':'structural','trigger':'claim\x20would\x20push\x20recipient\x20record\x20count\x20to\x20MAX_RECORD_COUNT_REWARD\x20(5200)','check':a=>{if(!a['claim'])return null;const b=a['current_record_count_for_recipient']??0x0;if(b>=MAX_RECORD_COUNT_REWARD)return{'id':'R-R-1-02','level':'HIGH','category':'structural','title':'claim\x20blocked\x20—\x20recipient\x20record\x20count\x20at\x20limit','description':'Recipient\x20already\x20has\x20'+b+'\x20records,\x20at\x20MAX_RECORD_COUNT_REWARD\x20'+MAX_RECORD_COUNT_REWARD+'.\x20'+'Next\x20claim\x20will\x20abort\x20with\x20E_RECORD_COUNT_EXCEEDED\x20(8).\x20The\x20recipient\x20can\x20no\x20longer\x20claim\x20from\x20this\x20Reward.','affected_stakeholders':['claimer'],'scenario':'High-frequency\x20claimer\x20hits\x20the\x205200-record\x20ceiling\x20(e.g.\x20cashback\x20on\x20every\x20micro-order)','mitigation':'Owner\x20can\x20create\x20a\x20new\x20Reward\x20for\x20the\x20same\x20recipient,\x20OR\x20redesign\x20the\x20Guard\x20to\x20batch\x20claims\x20(larger\x20amount\x20per\x20claim).','evidence':'recipient_records='+b,'related_move_error':'E_RECORD_COUNT_EXCEEDED\x20(8)','auto_fixable':![]};return null;}},R_R_1_03={'id':'R-R-1-03','category':'structural','trigger':'guard_add\x20batch\x20size\x20>\x20MAX_GUARD_COUNT_REWARD\x20(200)\x20—\x20schema-level\x20overflow','check':a=>{if(!a['guard_add'])return null;if(a['guard_add']['length']>MAX_GUARD_COUNT_REWARD)return{'id':'R-R-1-03','level':'CRITICAL','category':'structural','title':'guard_add\x20batch\x20exceeds\x20absolute\x20limit','description':'Single\x20guard_add\x20call\x20tries\x20to\x20add\x20'+a['guard_add']['length']+'\x20guards\x20in\x20one\x20transaction,\x20'+('exceeds\x20MAX_GUARD_COUNT_REWARD\x20'+MAX_GUARD_COUNT_REWARD+'.\x20SDK\x20rejects\x20this\x20in\x20operate().'),'affected_stakeholders':['owner'],'scenario':'Bulk\x20guard\x20addition\x20without\x20splitting\x20transactions','mitigation':'Split\x20into\x20multiple\x20transactions,\x20each\x20≤\x20'+MAX_GUARD_COUNT_REWARD+'\x20new\x20guards.','evidence':'batch_size='+a['guard_add']['length'],'auto_fixable':!![]};return null;}},R_R_2_01={'id':'R-R-2-01','category':'semantic','trigger':'guard_add\x20with\x20GuardIdentifier\x20recipient\x20where\x20identifier\x20type\x20is\x20not\x20address','check':a=>{if(!a['guard_add'])return null;for(let b=0x0;b<a['guard_add']['length'];b++){const c=a['guard_add'][b];if('GuardIdentifier'in c['recipient']){const d=c['recipient']['GuardIdentifier'];if(a['passport_identifier_is_address']&&a['passport_identifier_is_address'][d]===![])return{'id':'R-R-2-01','level':'HIGH','category':'semantic','title':'guard_add['+b+']:\x20recipient\x20GuardIdentifier\x20'+d+'\x20is\x20not\x20address-typed','description':'RewardGuard\x20constructor\x20calls\x20is_identifier_address(guard,\x20'+d+').\x20If\x20the\x20identifier\x20type\x20is\x20not\x20address,\x20'+'Move\x20aborts\x20with\x20E_RECIPIENT_IDENTIFIER_NOT_ADDRESS\x20(4).','affected_stakeholders':['owner'],'scenario':'Misconfigured\x20Guard\x20—\x20recipient\x20identifier\x20is\x20u64/bool\x20instead\x20of\x20address','mitigation':'Use\x20a\x20Guard\x20with\x20an\x20address-typed\x20identifier\x20for\x20recipient,\x20OR\x20switch\x20to\x20Entity/Signer\x20recipient.','evidence':'guard_add['+b+'].recipient.GuardIdentifier='+d+',\x20is_address=false','related_move_error':'E_RECIPIENT_IDENTIFIER_NOT_ADDRESS\x20(4)','auto_fixable':![]};}}return null;}},R_R_2_02={'id':'R-R-2-02','category':'semantic','trigger':'guard_add\x20with\x20GuardU64Identifier\x20amount\x20where\x20identifier\x20type\x20is\x20not\x20u64','check':a=>{if(!a['guard_add'])return null;for(let b=0x0;b<a['guard_add']['length'];b++){const c=a['guard_add'][b],d=String(c['amount']['type'])['toUpperCase']();if(d==='GUARDU64IDENTIFIER'||d==='GUARD_U64_IDENTIFIER'){if(typeof c['amount']['value']!=='number')continue;const e=c['amount']['value'];if(a['passport_submission_value_types']&&a['passport_submission_value_types'][e]!=='u64')return{'id':'R-R-2-02','level':'HIGH','category':'semantic','title':'guard_add['+b+']:\x20amount\x20GuardU64Identifier\x20'+e+'\x20is\x20not\x20u64-typed','description':'RewardGuard\x20constructor\x20calls\x20get_submission_value_type(guard,\x20'+e+');\x20if\x20None\x20or\x20≠\x20TYPE_U64,\x20'+'Move\x20aborts\x20with\x20E_AMOUNT_NOT_U64\x20(5).','affected_stakeholders':['owner'],'scenario':'Misconfigured\x20Guard\x20—\x20amount\x20identifier\x20is\x20not\x20u64-typed','mitigation':'Use\x20a\x20Guard\x20with\x20a\x20u64-typed\x20identifier\x20for\x20amount,\x20OR\x20switch\x20to\x20Fixed\x20amount.','evidence':'guard_add['+b+'].amount.value='+e+',\x20value_type='+(a['passport_submission_value_types'][e]??'unknown'),'related_move_error':'E_AMOUNT_NOT_U64\x20(5)','auto_fixable':![]};}}return null;}},R_R_2_03={'id':'R-R-2-03','category':'semantic','trigger':'guard_add\x20with\x20store_from_id\x20set\x20but\x20identifier\x20is\x20not\x20number/address\x20compatible','check':a=>{if(!a['guard_add'])return null;for(let b=0x0;b<a['guard_add']['length'];b++){const c=a['guard_add'][b];if(c['store_from_id']==null)continue;if(a['guard_store_from_id_compatible']&&a['guard_store_from_id_compatible'][c['guard']]===![])return{'id':'R-R-2-03','level':'MEDIUM','category':'semantic','title':'guard_add['+b+']:\x20store_from_id\x20incompatible\x20with\x20guard','description':'RewardGuard\x20constructor\x20with\x20store_from_id=Some\x20calls\x20is_identifier_address_compatible(guard,\x20store_from_id).\x20'+'If\x20the\x20identifier\x20type\x20is\x20not\x20number\x20or\x20address,\x20Move\x20aborts\x20with\x20E_STORE_FROM_ID_NOT_COMPATIBLE\x20(12).','affected_stakeholders':['owner'],'scenario':'Misconfigured\x20Guard\x20—\x20store_from_id\x20points\x20to\x20a\x20non-address/non-number\x20identifier','mitigation':'Use\x20a\x20compatible\x20identifier,\x20OR\x20drop\x20store_from_id\x20(set\x20to\x20null)\x20if\x20cross-reference\x20is\x20not\x20needed.','evidence':'guard='+c['guard']+',\x20store_from_id='+c['store_from_id'],'related_move_error':'E_STORE_FROM_ID_NOT_COMPATIBLE\x20(12)','auto_fixable':!![]};}return null;}},R_R_2_04={'id':'R-R-2-04','category':'semantic','trigger':'guard_add\x20with\x20invalid\x20Recipient\x20×\x20Amount\x20pairing\x20(no\x20matching\x20constructor)','check':a=>{if(!a['guard_add'])return null;const b={'GuardIdentifier':'GuardIdentifier','Entity':'Entity','Signer':'Signer'};for(let c=0x0;c<a['guard_add']['length'];c++){const d=a['guard_add'][c],e=Object['keys'](d['recipient'])[0x0],f=b[e],h=String(d['amount']['type'])['toUpperCase'](),j=h==='FIXED'?'Fixed':'GuardU64Identifier',k=resolveGuardConstructor(f,j);if(!k)return{'id':'R-R-2-04','level':'HIGH','category':'semantic','title':'guard_add['+c+']:\x20invalid\x20Recipient\x20×\x20Amount\x20pairing','description':'recipient='+f+',\x20amount='+j+'\x20—\x20no\x20matching\x20Move\x20constructor.\x20'+'SDK\x20reward_guard()\x20will\x20W_ERROR\x20with\x20\x22Invalid\x20recipient\x20or\x20amount\x20type\x20combination\x22.','affected_stakeholders':['owner'],'scenario':'Schema\x20validation\x20bypassed\x20or\x20stale\x20client','mitigation':'Use\x20one\x20of\x20the\x206\x20valid\x20pairings:\x20guard_u8_u8,\x20guard_u8_u64,\x20guard_entity_u8,\x20guard_entity_u64,\x20guard_signer_u8,\x20guard_signer_u64.','evidence':'recipient='+f+',\x20amount='+j,'auto_fixable':![]};}return null;}},R_R_3_01={'id':'R-R-3-01','category':'permission','trigger':'claim\x20attempted\x20without\x20permission\x20context\x20—\x20claim\x20is\x20passport-driven','check':a=>{if(!a['claim'])return null;return{'id':'R-R-3-01','level':'MEDIUM','category':'permission','title':'claim\x20is\x20permission-free\x20—\x20anyone\x20with\x20a\x20valid\x20Passport\x20can\x20claim','description':'reward::claim()\x20does\x20NOT\x20assert\x20any\x20permission\x20index.\x20Eligibility\x20is\x20determined\x20entirely\x20by\x20the\x20'+'Guard\x20verification\x20(passport::result_for_guard).\x20If\x20the\x20Guard\x20is\x20too\x20permissive,\x20funds\x20can\x20be\x20drained\x20by\x20anyone.','affected_stakeholders':['owner','service_provider'],'scenario':'Loose\x20Guard\x20allows\x20unauthorized\x20claims\x20(e.g.\x20time-only\x20Guard\x20without\x20service\x20binding)','mitigation':'1)\x20Use\x20Guards\x20that\x20bind\x20to\x20specific\x20Service/Order\x20context.\x202)\x20Set\x20expiration_time.\x203)\x20Monitor\x20balance\x20and\x20refill\x20only\x20what\x27s\x20needed.','evidence':'claim='+a['claim'],'auto_fixable':![]};}},R_R_3_02={'id':'R-R-3-02','category':'permission','trigger':'owner_receive\x20(156)\x20—\x20broad\x20blast\x20radius,\x20owner\x20can\x20drain\x20balance','check':a=>{if(a['owner_receive']==null)return null;return{'id':'R-R-3-02','level':'HIGH','category':'permission','title':'owner_receive\x20drains\x20balance\x20to\x20Permission\x20owner','description':'reward::owner_receive\x20(156\x20permission)\x20unwraps\x20Receiving<K>\x20/\x20CoinWrapper<K>\x20and\x20forwards\x20to\x20Permission\x20owner.\x20'+'If\x20156\x20is\x20granted\x20too\x20broadly,\x20any\x20156-holder\x20can\x20sweep\x20receivables.\x20(Note:\x20owner_receive\x20does\x20NOT\x20directly\x20drain\x20balance\x20—\x20'+'only\x20Receiving<K>\x20envelopes\x20sent\x20to\x20the\x20Reward\x27s\x20id.)','affected_stakeholders':['owner','service_provider'],'scenario':'Compromised\x20156-holder\x20sweeps\x20receivables\x20before\x20owner','mitigation':'1)\x20Grant\x20156\x20only\x20to\x20the\x20Permission\x20owner\x20address.\x202)\x20Reconcile\x20Receiving<K>\x20inflows\x20vs\x20owner_receive\x20events.','evidence':'owner_receive\x20set','auto_fixable':![]};}},R_R_3_03={'id':'R-R-3-03','category':'permission','trigger':'guard_expiration_time_add\x20(155)\x20—\x20can\x20permanently\x20lock\x20guard\x20additions','check':a=>{if(a['guard_expiration_time']===undefined)return null;if(a['guard_expiration_time']!==null&&a['current_clock_ms']!==undefined){const b=a['guard_expiration_time']-a['current_clock_ms'],c=0x16d*0x18*0x3c*0x3c*0x3e8;if(b>c)return{'id':'R-R-3-03','level':'MEDIUM','category':'permission','title':'guard_expiration_time_add\x20locks\x20guard\x20additions\x20for\x20>\x201\x20year','description':'Setting\x20guard_not_added_expiration_time\x20to\x20'+a['guard_expiration_time']+'\x20'+'(>\x201\x20year\x20from\x20now)\x20effectively\x20freezes\x20the\x20guard\x20list.\x20While\x20this\x20is\x20sometimes\x20intentional\x20'+'(milestone\x20rewards),\x20it\x20cannot\x20be\x20undone\x20without\x20setting\x20a\x20new\x20time\x20(which\x20itself\x20requires\x20155\x20permission).','affected_stakeholders':['owner'],'scenario':'Operator\x20sets\x20excessively\x20long\x20lock\x20period\x20by\x20mistake','mitigation':'Confirm\x20intent.\x20If\x20wrong,\x20call\x20guard_expiration_time_add\x20again\x20with\x20a\x20shorter\x20time\x20(must\x20be\x20≥\x20current\x20clock\x20per\x20E_GUARD_LOCKED_TIME_NOT_INCREASING).','evidence':'lock_until='+a['guard_expiration_time']+',\x20clock='+a['current_clock_ms'],'auto_fixable':![]};}return null;}},R_R_4_01={'id':'R-R-4-01','category':'lifecycle','trigger':'claim\x20on\x20guard\x20with\x20expiration_time\x20<\x20now\x20(E_GUARD_EXPIRED)','check':a=>{if(!a['claim'])return null;return null;}},R_R_4_02={'id':'R-R-4-02','category':'lifecycle','trigger':'claim:\x20balance\x20<\x20amount\x20(E_INSUFFICIENT_BALANCE)','check':a=>{if(!a['claim'])return null;if(a['current_balance']!==undefined&&a['current_guard_count']!==undefined){const b=BigInt(a['current_balance']);if(b===0x0n)return{'id':'R-R-4-02','level':'HIGH','category':'lifecycle','title':'claim\x20on\x20Reward\x20with\x20zero\x20balance','description':'Reward\x20balance\x20is\x200.\x20Any\x20claim\x20will\x20abort\x20with\x20E_INSUFFICIENT_BALANCE\x20(6).\x20'+'Owner\x20must\x20coin_add\x20(153)\x20or\x20receive\x20(154)\x20to\x20replenish.','affected_stakeholders':['claimer','owner'],'scenario':'Marketing\x20campaign\x20budget\x20exhausted\x20but\x20guards\x20remain\x20active','mitigation':'1)\x20Owner:\x20coin_add\x20to\x20replenish.\x202)\x20Owner:\x20guard_remove_expired\x20+\x20guard_expiration_time_add\x20to\x20deactivate.\x203)\x20Claimer:\x20wait\x20for\x20replenishment.','evidence':'balance=0','related_move_error':'E_INSUFFICIENT_BALANCE\x20(6)','auto_fixable':![]};}return null;}},R_R_4_03={'id':'R-R-4-03','category':'lifecycle','trigger':'guard_add\x20while\x20guard_not_added_expiration_time\x20is\x20Some\x20and\x20clock\x20≤\x20expiration\x20(E_GUARD_LOCKED_TIME)','check':a=>{if(!a['guard_add']||a['guard_add']['length']===0x0)return null;if(a['current_guard_not_added_expiration_time']==null)return null;if(a['current_clock_ms']===undefined)return null;if(a['current_clock_ms']<=a['current_guard_not_added_expiration_time'])return{'id':'R-R-4-03','level':'HIGH','category':'lifecycle','title':'guard_add\x20blocked\x20by\x20time-lock\x20(guard_not_added_expiration_time)','description':'guard_not_added_expiration_time\x20is\x20Some('+a['current_guard_not_added_expiration_time']+');\x20'+('clock\x20is\x20'+a['current_clock_ms']+'.\x20Move\x20asserts\x20clock\x20>\x20expiration_time\x20')+'(E_GUARD_LOCKED_TIME\x20=\x2010).','affected_stakeholders':['owner'],'scenario':'Trying\x20to\x20add\x20guards\x20during\x20a\x20flash\x20sale\x20lock\x20period','mitigation':'1)\x20Wait\x20until\x20clock\x20>\x20expiration_time.\x202)\x20Call\x20guard_expiration_time_add\x20(155)\x20to\x20extend\x20the\x20lock\x20(cannot\x20shorten\x20below\x20current\x20clock).','evidence':'lock_until='+a['current_guard_not_added_expiration_time']+',\x20clock='+a['current_clock_ms'],'related_move_error':'E_GUARD_LOCKED_TIME\x20(10)','auto_fixable':![]};return null;}},R_R_4_04={'id':'R-R-4-04','category':'lifecycle','trigger':'guard_expiration_time_add\x20regression\x20(new\x20time\x20<\x20current\x20clock)','check':a=>{if(a['guard_expiration_time']===undefined)return null;if(a['guard_expiration_time']===null)return null;if(a['current_clock_ms']===undefined)return null;if(a['guard_expiration_time']<=a['current_clock_ms'])return{'id':'R-R-4-04','level':'HIGH','category':'lifecycle','title':'guard_expiration_time_add:\x20new\x20time\x20must\x20be\x20in\x20the\x20future','description':'New\x20guard_not_added_expiration_time\x20=\x20'+a['guard_expiration_time']+'\x20≤\x20clock\x20'+a['current_clock_ms']+'.\x20'+'Move\x20aborts\x20with\x20E_GUARD_LOCKED_TIME_INVALID\x20(11).','affected_stakeholders':['owner'],'scenario':'Operator\x20sets\x20lock\x20time\x20in\x20the\x20past\x20by\x20mistake','mitigation':'Set\x20guard_expiration_time\x20to\x20a\x20value\x20>\x20'+a['current_clock_ms']+'\x20(current\x20clock).','evidence':'new_time='+a['guard_expiration_time']+',\x20clock='+a['current_clock_ms'],'related_move_error':'E_GUARD_LOCKED_TIME_INVALID\x20(11)','auto_fixable':!![]};return null;}},R_R_5_01={'id':'R-R-5-01','category':'cross_object','trigger':'claim:\x20guard\x20not\x20found\x20in\x20self.guards\x20(E_GUARD_NOT_FOUND)','check':a=>{if(!a['claim'])return null;if(!a['target_guard_addresses'])return null;if(!a['target_guard_addresses']['includes'](a['claim']))return{'id':'R-R-5-01','level':'HIGH','category':'cross_object','title':'claim:\x20supplied\x20guard\x20not\x20in\x20Reward.guards','description':'Guard\x20'+a['claim']+'\x20is\x20not\x20in\x20the\x20Reward\x27s\x20guard\x20list.\x20Move\x20iterates\x20self.guards\x20and\x20'+'aborts\x20with\x20E_GUARD_NOT_FOUND\x20(7)\x20if\x20no\x20match.','affected_stakeholders':['claimer'],'scenario':'Claimer\x20uses\x20the\x20wrong\x20Guard\x20object\x20(typo\x20or\x20wrong\x20Service)','mitigation':'1)\x20Verify\x20the\x20Guard\x20address\x20via\x20query\x20ObjectReward.\x202)\x20Ensure\x20the\x20Guard\x20was\x20added\x20via\x20guard_add\x20(152).','evidence':'claim_guard='+a['claim']+',\x20known_guards='+a['target_guard_addresses']['join'](','),'related_move_error':'E_GUARD_NOT_FOUND\x20(7)','auto_fixable':![]};return null;}},R_R_5_02={'id':'R-R-5-02','category':'cross_object','trigger':'coin_add:\x20coin\x20type\x20T\x20mismatch\x20with\x20Reward<T>','check':a=>{if(!a['coin_add']||!a['reward_type'])return null;if(a['coin_add']['coin_type']!==a['reward_type'])return{'id':'R-R-5-02','level':'CRITICAL','category':'cross_object','title':'coin_add:\x20coin\x20type\x20T\x20mismatch','description':'Reward\x20is\x20Reward<'+a['reward_type']+'>\x20but\x20coin_add\x20passes\x20Coin<'+a['coin_add']['coin_type']+'>.\x20'+'Move\x20type-system\x20mismatch;\x20SDK\x20W_ERROR\x20in\x20operate().','affected_stakeholders':['owner'],'scenario':'Operator\x20tries\x20to\x20deposit\x20wrong\x20coin\x20type\x20(e.g.\x20USDC\x20into\x20a\x20WOW\x20Reward)','mitigation':'Use\x20Coin<'+a['reward_type']+'>\x20for\x20coin_add.','evidence':'reward_type='+a['reward_type']+',\x20coin_type='+a['coin_add']['coin_type'],'auto_fixable':![]};return null;}},R_R_5_03={'id':'R-R-5-03','category':'cross_object','trigger':'receive:\x20Payment<T>\x20type\x20mismatch\x20with\x20Reward<T>','check':a=>{if(!a['receive']||!a['reward_type'])return null;if(a['receive']['token_type']!==a['reward_type'])return{'id':'R-R-5-03','level':'CRITICAL','category':'cross_object','title':'receive:\x20Payment\x20token_type\x20mismatch','description':'Reward\x20is\x20Reward<'+a['reward_type']+'>\x20but\x20receive\x27s\x20Payment<CoinWrapper<'+a['receive']['token_type']+'>>.\x20'+'SDK\x20W_ERROR\x20in\x20operate().','affected_stakeholders':['owner'],'scenario':'Operator\x20tries\x20to\x20receive\x20wrong-token\x20Payment','mitigation':'Use\x20Payment<'+a['reward_type']+'>\x20for\x20receive.','evidence':'reward_type='+a['reward_type']+',\x20payment_token='+a['receive']['token_type'],'auto_fixable':![]};return null;}},R_R_6_01={'id':'R-R-6-01','category':'business_semantic','trigger':'intent\x20mentions\x20praise/positive-review\x20but\x20Guard\x20checks\x20non-wonder\x20progress\x20node','check':a=>{if(!a['user_intent_phrases']||a['user_intent_phrases']['length']===0x0)return null;if(!a['guard_expected_progress_state'])return null;const b=a['user_intent_phrases']['join']('\x20')['toLowerCase'](),c=['praise','wonder','thumbs_up','positive\x20review','satisfaction\x20reward','praise\x20reward'],d=c['some'](f=>b['includes'](f['toLowerCase']()));if(!d)return null;if(a['machine_has_wonder_node']===![])return null;const e=a['guard_expected_progress_state'];if(e!=='wonder')return{'id':'R-R-6-01','level':'HIGH','category':'business_semantic','title':'Guard\x20checks\x20progress==\x22'+e+'\x22\x20but\x20intent\x20indicates\x20praise\x20reward\x20(wonder\x20node)','description':'User\x20intent\x20mentions\x20praise/positive-review/wonder,\x20which\x20maps\x20to\x20the\x20\x27wonder\x27\x20progress\x20node\x20'+'(customer\x20gives\x20positive\x20review\x20AFTER\x20service\x20completion).\x20But\x20the\x20Guard\x27s\x20table\x20bakes\x20'+('expected\x20state=\x22'+e+'\x22,\x20allowing\x20reward\x20claim\x20at\x20the\x20wrong\x20lifecycle\x20stage.\x20')+'This\x20violates\x20the\x20business\x20semantics:\x20\x22praise\x20reward\x22\x20should\x20only\x20be\x20claimable\x20AFTER\x20the\x20'+'customer\x20advances\x20to\x20the\x20\x27wonder\x27\x20node,\x20not\x20before.\x20'+'Guard\x20is\x20immutable\x20—\x20fixing\x20this\x20requires\x20creating\x20a\x20new\x20Guard\x20+\x20Reward\x20pair.','affected_stakeholders':['owner','service_provider','claimer'],'scenario':'Designer\x20builds\x20Guard\x20checking\x20\x27completed\x27\x20instead\x20of\x20\x27wonder\x27\x20for\x20a\x20praise\x20reward','mitigation':'Set\x20the\x20Guard\x20table\x27s\x20expected\x20progress\x20state\x20to\x20\x27wonder\x27\x20(the\x20positive-review\x20node).\x20'+'The\x20correct\x20pattern:\x20ordered\x20→\x20in_service\x20→\x20completed\x20→\x20wonder\x20(praise)\x20triggers\x20reward\x20claim.\x20'+'Reference:\x20reward-templates.ts\x20wonder_praise\x20template.','evidence':'intent=\x22'+b+'\x22,\x20expected_state=\x22'+e+'\x22,\x20expected_wonder=true','auto_fixable':![]};return null;}},R_R_6_02={'id':'R-R-6-02','category':'business_semantic','trigger':'Guard\x20checks\x20wonder\x20node\x20but\x20intent\x20does\x20not\x20mention\x20praise','check':a=>{if(!a['user_intent_phrases']||a['user_intent_phrases']['length']===0x0)return null;if(!a['guard_expected_progress_state'])return null;if(a['guard_expected_progress_state']!=='wonder')return null;const b=a['user_intent_phrases']['join']('\x20')['toLowerCase'](),c=['praise','wonder','thumbs_up','positive\x20review','satisfaction\x20reward','praise\x20reward'],d=c['some'](e=>b['includes'](e['toLowerCase']()));if(d)return null;return{'id':'R-R-6-02','level':'MEDIUM','category':'business_semantic','title':'Guard\x20checks\x20wonder\x20node\x20but\x20intent\x20does\x20not\x20mention\x20praise','description':'Guard\x27s\x20expected\x20progress\x20state\x20is\x20\x22wonder\x22\x20(positive-review\x20node),\x20but\x20the\x20user\x20intent\x20'+'does\x20not\x20mention\x20any\x20praise/positive-review\x20keyword.\x20This\x20may\x20be\x20a\x20copy-paste\x20from\x20a\x20wonder_praise\x20'+'template\x20without\x20adjusting\x20the\x20Guard\x20for\x20the\x20actual\x20business\x20semantics.\x20If\x20this\x20is\x20a\x20'+'general\x20feedback\x20reward\x20(wonder_feedback),\x20this\x20is\x20fine.\x20Otherwise,\x20verify\x20the\x20node\x20choice.','affected_stakeholders':['owner'],'scenario':'Designer\x20copies\x20wonder_praise\x20template\x20but\x20actually\x20wants\x20a\x20completion-based\x20reward','mitigation':'Verify:\x20if\x20intent\x20is\x20praise\x20reward,\x20add\x20\x27praise/positive\x20review\x27\x20to\x20description.\x20'+'If\x20intent\x20is\x20completion-based\x20reward,\x20change\x20Guard\x20to\x20check\x20\x27completed\x27\x20node.','evidence':'expected_state=\x22wonder\x22,\x20intent=\x22'+b+'\x22\x20(no\x20praise\x20keyword)','auto_fixable':![]};}},ALL_RULES=[R_R_1_01,R_R_1_02,R_R_1_03,R_R_2_01,R_R_2_02,R_R_2_03,R_R_2_04,R_R_3_01,R_R_3_02,R_R_3_03,R_R_4_01,R_R_4_02,R_R_4_03,R_R_4_04,R_R_5_01,R_R_5_02,R_R_5_03,R_R_6_01,R_R_6_02];export const REWARD_RISK_VERSION='1.0.0';export function getAllRewardRiskRules(){return[...ALL_RULES];}export function getRewardRiskRulesCount(){return ALL_RULES['length'];}export function getRewardRiskRulesByCategory(a){return ALL_RULES['filter'](b=>b['category']===a);}export function assessRewardRisks(a){const b=[];for(const f of ALL_RULES){const g=f['check'](a);if(g)b['push'](g);}const c=b['length']===0x0?'LOW':b['some'](h=>h['level']==='CRITICAL')?'CRITICAL':b['some'](h=>h['level']==='HIGH')?'HIGH':b['some'](h=>h['level']==='MEDIUM')?'MEDIUM':'LOW',d={};for(const h of b){d[h['category']]=(d[h['category']]??0x0)+0x1;}const e={};for(const i of b){for(const j of i['affected_stakeholders']){if(!e[j])e[j]=[];e[j]['push'](i['id']+':\x20'+i['mitigation']);}}return{'summary':'Assessed\x20'+b['length']+'\x20risk(s)\x20across\x20'+Object['keys'](d)['length']+'\x20categories','risks':b,'overall_risk':c,'risks_by_category':d,'stakeholder_advice':e,'needs_human_review':b['some'](k=>k['level']==='CRITICAL'||k['level']==='HIGH')};}export const REWARD_STAKEHOLDERS=['owner','claimer','service_provider','system'];export function getRewardRiskRulesByStakeholder(a){return ALL_RULES['filter'](b=>{if(a==='owner')return['structural','permission','lifecycle','business_semantic']['includes'](b['category']);if(a==='claimer')return b['id']['startsWith']('R-R-4-0')||b['id']==='R-R-5-01'||b['id']==='R-R-1-02'||b['id']==='R-R-6-01';if(a==='service_provider')return b['id']==='R-R-4-02'||b['id']==='R-R-3-01'||b['id']==='R-R-3-02'||b['id']==='R-R-6-01';if(a==='system')return b['category']==='cross_object';return![];});}