@wowok/agent-mcp 2.7.1 → 2.7.3

package/dist/knowledge/service-risk.js

@@ -1,651 +1 @@
-import { MAX_SALE_COUNT, MAX_REPOSITORY_COUNT, MAX_ARBITRATION_COUNT, MAX_DISCOUNT_TOTAL_COUNT, MAX_WIP_LENGTH, MAX_WIP_HASH_LENGTH, } from "@wowok/wowok";
-const R_S_1_01 = {
-    id: "R-S-1-01",
-    category: "structural",
-    trigger: "sales count exceeds MAX_SALE_COUNT (50)",
-    check: (ctx) => {
-        const count = ctx.current_sales_count ?? 0;
-        if (ctx.sales && (ctx.sales.op === "add" || ctx.sales.op === "set")) {
-            const newCount = ctx.sales.op === "set" ? ctx.sales.sales.length : count + ctx.sales.sales.length;
-            if (newCount > MAX_SALE_COUNT) {
-                return {
-                    id: "R-S-1-01",
-                    level: "HIGH",
-                    category: "structural",
-                    title: "Sales count exceeds limit",
-                    description: `Service would have ${newCount} sales items, exceeds MAX_SALE_COUNT ${MAX_SALE_COUNT}`,
-                    affected_stakeholders: ["owner", "system"],
-                    scenario: "Adding too many product SKUs",
-                    mitigation: "Split into multiple Service objects or remove discontinued items",
-                    evidence: `sales_count=${newCount}`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_S_1_02 = {
-    id: "R-S-1-02",
-    category: "structural",
-    trigger: "repositories count exceeds MAX_REPOSITORY_COUNT (100)",
-    check: (ctx) => {
-        const count = ctx.current_repositories_count ?? 0;
-        if (ctx.repositories && (ctx.repositories.op === "add" || ctx.repositories.op === "set")) {
-            const newCount = ctx.repositories.op === "set" ? ctx.repositories.objects.length : count + ctx.repositories.objects.length;
-            if (newCount > MAX_REPOSITORY_COUNT) {
-                return {
-                    id: "R-S-1-02",
-                    level: "MEDIUM",
-                    category: "structural",
-                    title: "Repositories count exceeds limit",
-                    description: `Service would have ${newCount} repositories, exceeds MAX_REPOSITORY_COUNT ${MAX_REPOSITORY_COUNT}`,
-                    affected_stakeholders: ["owner"],
-                    scenario: "Binding too many data repositories",
-                    mitigation: "Consolidate repositories or remove inactive ones",
-                    evidence: `repositories_count=${newCount}`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_S_1_03 = {
-    id: "R-S-1-03",
-    category: "structural",
-    trigger: "arbitrations count exceeds MAX_ARBITRATION_COUNT (20)",
-    check: (ctx) => {
-        const count = ctx.current_arbitrations_count ?? 0;
-        if (ctx.arbitrations && (ctx.arbitrations.op === "add" || ctx.arbitrations.op === "set")) {
-            const newCount = ctx.arbitrations.op === "set" ? ctx.arbitrations.objects.length : count + ctx.arbitrations.objects.length;
-            if (newCount > MAX_ARBITRATION_COUNT) {
-                return {
-                    id: "R-S-1-03",
-                    level: "HIGH",
-                    category: "structural",
-                    title: "Arbitrations count exceeds limit",
-                    description: `Service would have ${newCount} arbitrations, exceeds MAX_ARBITRATION_COUNT ${MAX_ARBITRATION_COUNT}`,
-                    affected_stakeholders: ["owner", "arbitrator"],
-                    scenario: "Binding too many Arbitration objects",
-                    mitigation: "Use 1-3 Arbitration objects covering different dispute scopes",
-                    evidence: `arbitrations_count=${newCount}`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_S_1_04 = {
-    id: "R-S-1-04",
-    category: "structural",
-    trigger: "WIP hash length exceeds MAX_WIP_HASH_LENGTH (64) or URL exceeds MAX_WIP_LENGTH (1024)",
-    check: (ctx) => {
-        if (ctx.sales && (ctx.sales.op === "add" || ctx.sales.op === "set")) {
-            for (const s of ctx.sales.sales) {
-                if (s.wip_hash && s.wip_hash.length > MAX_WIP_HASH_LENGTH) {
-                    return {
-                        id: "R-S-1-04",
-                        level: "HIGH",
-                        category: "structural",
-                        title: "WIP hash length exceeds limit",
-                        description: `Sale "${s.name}" wip_hash length ${s.wip_hash.length} > MAX_WIP_HASH_LENGTH ${MAX_WIP_HASH_LENGTH}`,
-                        affected_stakeholders: ["owner", "customer"],
-                        scenario: "Malformed WIP hash (should be sha256 hex, 64 chars)",
-                        mitigation: "Use sha256 hex hash (64 characters, no prefix)",
-                        evidence: `wip_hash_length=${s.wip_hash.length}`,
-                    };
-                }
-                if (s.wip && s.wip.length > MAX_WIP_LENGTH) {
-                    return {
-                        id: "R-S-1-04",
-                        level: "HIGH",
-                        category: "structural",
-                        title: "WIP URL length exceeds limit",
-                        description: `Sale "${s.name}" wip URL length ${s.wip.length} > MAX_WIP_LENGTH ${MAX_WIP_LENGTH}`,
-                        affected_stakeholders: ["owner"],
-                        scenario: "WIP URL too long (use IPFS or short HTTPS URL)",
-                        mitigation: "Use IPFS CID or shorter URL",
-                        evidence: `wip_url_length=${s.wip.length}`,
-                    };
-                }
-            }
-        }
-        return null;
-    },
-};
-const R_S_1_05 = {
-    id: "R-S-1-05",
-    category: "structural",
-    trigger: "sale.wip is a local path / localhost / LAN URL (not network-deployable) — every customer order fails",
-    check: (ctx) => {
-        if (ctx.sales && (ctx.sales.op === "add" || ctx.sales.op === "set")) {
-            for (const s of ctx.sales.sales) {
-                if (s.wip && s.wip !== "") {
-                    let localType = null;
-                    const w = s.wip;
-                    if (/^[A-Za-z]:[\\/]/.test(w) || w.startsWith("/") || w.startsWith("./") || w.startsWith("../")) {
-                        localType = "local filesystem path";
-                    }
-                    else if (/^https?:\/\/(localhost|127\.0\.0\.1|\[::1\]|0\.0\.0\.0)([:/]|$)/i.test(w)) {
-                        localType = "localhost/loopback URL";
-                    }
-                    else if (/^https?:\/\/(10\.\d{1,3}\.\d{1,3}\.\d{1,3}|172\.(1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3}|192\.168\.\d{1,3}\.\d{1,3})([:/]|$)/i.test(w)) {
-                        localType = "LAN (private IP) URL";
-                    }
-                    else if (!/^https?:\/\//i.test(w) && !w.startsWith("ipfs://") && !w.startsWith("data:")) {
-                        localType = "unrecognized format (not a network URL)";
-                    }
-                    if (localType) {
-                        return {
-                            id: "R-S-1-05",
-                            level: "CRITICAL",
-                            category: "structural",
-                            title: "WIP is not network-deployed — every customer order will fail",
-                            description: `Sale "${s.name}" wip "${s.wip}" is a ${localType}. It passes set-time verification ` +
-                                `on the merchant's own machine but is unreachable by customers on other machines — ` +
-                                `order_new aborts 100% when a customer tries to buy.`,
-                            affected_stakeholders: ["owner", "customer"],
-                            scenario: "Merchant sets wip to a local file path / localhost / LAN URL and publishes the Service; " +
-                                "the on-chain wip points at the merchant's machine; customers cannot fetch it.",
-                            mitigation: "Deploy the .wip file to a public host (GitHub Pages, IPFS, or your own website) and set " +
-                                "sale.wip to the public URL. Or leave sale.wip empty (\"\") to skip WIP verification " +
-                                "(TESTING ONLY — not recommended for production).",
-                            evidence: `sale=${s.name}, wip=${s.wip}`,
-                        };
-                    }
-                }
-            }
-        }
-        return null;
-    },
-};
-const R_S_2_01 = {
-    id: "R-S-2-01",
-    category: "semantic",
-    trigger: "WIP hash tampering risk — owner updates WIP file without updating wip_hash",
-    check: (ctx) => {
-        if (ctx.sales && (ctx.sales.op === "add" || ctx.sales.op === "set")) {
-            for (const s of ctx.sales.sales) {
-                if (s.wip && !s.wip_hash) {
-                    return {
-                        id: "R-S-2-01",
-                        level: "CRITICAL",
-                        category: "semantic",
-                        title: "WIP hash missing — tampering risk",
-                        description: `Sale "${s.name}" has wip URL but no wip_hash. Owner could replace the WIP file without customers noticing.`,
-                        affected_stakeholders: ["customer", "owner"],
-                        scenario: "Owner sets wip without hash, then changes file content later",
-                        mitigation: "Always compute sha256(wip_file_content) and set as wip_hash. SDK auto-derives if omitted, but explicit hash is safer.",
-                        evidence: `sale=${s.name}`,
-                    };
-                }
-            }
-        }
-        return null;
-    },
-};
-const R_S_2_02 = {
-    id: "R-S-2-02",
-    category: "semantic",
-    trigger: "compensation_fund confused with Service balance (internal Balance<T>)",
-    check: (ctx) => {
-        if (ctx.compensation_fund_add) {
-            return {
-                id: "R-S-2-02",
-                level: "HIGH",
-                category: "semantic",
-                title: "compensation_fund is internal Balance<T>, NOT Service-owned Treasury",
-                description: `Depositing ${ctx.compensation_fund_add.balance} to compensation_fund. This balance is internal to Service<T> and is consumed by arbitration::compensation_claim, not by owner withdrawals. Owner can only withdraw via compensation_fund_withdraw (requires bPaused=true + lock_duration expired).`,
-                affected_stakeholders: ["owner", "arbitrator", "customer"],
-                scenario: "Owner confuses compensation_fund with general Treasury",
-                mitigation: "Use external Treasury (referenced via order_allocators.sharing.who=Entity) for general funds. Use compensation_fund only for arbitration payouts.",
-                evidence: `deposit=${ctx.compensation_fund_add.balance}`,
-            };
-        }
-        return null;
-    },
-};
-const R_S_2_03 = {
-    id: "R-S-2-03",
-    category: "semantic",
-    trigger: "quote side effect — stock deduction not rolled back on later failure",
-    check: (ctx) => {
-        if (ctx.order_new && ctx.order_new.buy.items.length > 0) {
-            return {
-                id: "R-S-2-03",
-                level: "HIGH",
-                category: "semantic",
-                title: "Order flow: stock deducted at quote stage — NOT rolled back on failure",
-                description: `Order will deduct stock at Stage 3 (quote). If Stages 4-7 fail, stock remains deducted. Customer must manually re-add stock or accept the loss.`,
-                affected_stakeholders: ["owner", "customer"],
-                scenario: "Customer's transaction fails after quote but stock is gone",
-                mitigation: "1) Monitor failed transactions and re-add stock via stock_add. 2) Set sales suspension during high-failure periods. 3) Use small batch orders to limit blast radius.",
-                evidence: `items=${ctx.order_new.buy.items.length}`,
-            };
-        }
-        return null;
-    },
-};
-const R_S_2_04 = {
-    id: "R-S-2-04",
-    category: "semantic",
-    trigger: "Discount issuance — verify type and total count semantics",
-    check: (ctx) => {
-        if (ctx.discount) {
-            const count = ctx.discount.count;
-            if (count > MAX_DISCOUNT_TOTAL_COUNT) {
-                return {
-                    id: "R-S-2-04",
-                    level: "MEDIUM",
-                    category: "semantic",
-                    title: "Discount count exceeds total cap",
-                    description: `Issuing ${count} discounts exceeds MAX_DISCOUNT_TOTAL_COUNT ${MAX_DISCOUNT_TOTAL_COUNT}`,
-                    affected_stakeholders: ["owner"],
-                    scenario: "Bulk discount issuance",
-                    mitigation: `Issue in batches of <= 1000 (MAX_DISCOUNT_COUNT_ONCE) and keep total <= ${MAX_DISCOUNT_TOTAL_COUNT}`,
-                    evidence: `count=${count}`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_S_2_05 = {
-    id: "R-S-2-05",
-    category: "semantic",
-    trigger: "Order placed without verifying WIP hash — buyer passes empty wip_hash",
-    check: (ctx) => {
-        if (ctx.order_new) {
-            const emptyHashItems = ctx.order_new.buy.items.filter(i => i.wip_hash === "");
-            if (emptyHashItems.length > 0) {
-                return {
-                    id: "R-S-2-05",
-                    level: "MEDIUM",
-                    category: "semantic",
-                    title: "Order with empty wip_hash — SDK auto-fills from sale",
-                    description: `${emptyHashItems.length} item(s) have empty wip_hash. SDK will auto-fill from sale.wip_hash at order time. If owner updates the WIP file between viewing and ordering, buyer receives the new (potentially different) content.`,
-                    affected_stakeholders: ["customer"],
-                    scenario: "Time-of-check to time-of-use WIP mismatch",
-                    mitigation: "Buyer should explicitly pass the wip_hash they saw when viewing the product. Empty string is convenience but riskier.",
-                    evidence: `empty_hash_items=${emptyHashItems.length}`,
-                };
-            }
-        }
-        return null;
-    },
-};
-const R_S_3_01 = {
-    id: "R-S-3-01",
-    category: "authority",
-    trigger: "publish operation — requires SERVICE_PUBLISH (311) + prerequisites",
-    check: (ctx) => {
-        if (!ctx.publish)
-            return null;
-        const blockers = [];
-        if (!ctx.current_order_allocators_set)
-            blockers.push("order_allocators not set (F-S-18, E_NO_ALLOCATOR)");
-        const compBalance = ctx.current_compensation_fund_balance ?? "0";
-        if (BigInt(compBalance) > 0n && (ctx.current_arbitrations_count ?? 0) === 0) {
-            blockers.push("compensation_fund > 0 but no arbitrations (F-S-19, E_ARBITRATION_NOT_SET_WITH_COMPENSATION_FUND)");
-        }
-        if (blockers.length > 0) {
-            return {
-                id: "R-S-3-01",
-                level: "CRITICAL",
-                category: "authority",
-                title: "Publish blocked — prerequisites not met",
-                description: `Cannot publish: ${blockers.join("; ")}`,
-                affected_stakeholders: ["owner"],
-                scenario: "Owner attempts publish without configuring prerequisites",
-                mitigation: "Configure order_allocators (and arbitrations if compensation_fund > 0) before publish",
-                evidence: `blockers=${blockers.length}`,
-            };
-        }
-        return null;
-    },
-};
-const R_S_3_02 = {
-    id: "R-S-3-02",
-    category: "authority",
-    trigger: "pause operation — affects new orders but not existing Progress",
-    check: (ctx) => {
-        if (ctx.pause === undefined)
-            return null;
-        return {
-            id: "R-S-3-02",
-            level: "MEDIUM",
-            category: "authority",
-            title: ctx.pause ? "Pausing Service — new orders blocked, existing Progress continues" : "Resuming Service — new orders accepted",
-            description: ctx.pause
-                ? "Service.bPaused = true will reject new orders (E_SERVICE_PAUSED). Existing orders' Progress continues normally."
-                : "Service.bPaused = false will allow new orders again.",
-            affected_stakeholders: ["owner", "customer"],
-            scenario: ctx.pause ? "Owner pauses for maintenance/stockout" : "Owner resumes after maintenance",
-            mitigation: ctx.pause ? "Communicate pause to customers. Use compensation_fund_withdraw only when paused." : "Verify stock levels before resuming.",
-            evidence: `pause=${ctx.pause}`,
-        };
-    },
-};
-const R_S_3_03 = {
-    id: "R-S-3-03",
-    category: "authority",
-    trigger: "buy_guard change — post-publish mutable (unusual exception)",
-    check: (ctx) => {
-        if (ctx.buy_guard === undefined)
-            return null;
-        if (ctx.current_bPublished) {
-            return {
-                id: "R-S-3-03",
-                level: "MEDIUM",
-                category: "authority",
-                title: "buy_guard change post-publish — unusual mutability",
-                description: `buy_guard is the ONLY publish-locked-field exception: it remains mutable post-publish. Other fields (machine/arbitrations/order_allocators) are immutable.`,
-                affected_stakeholders: ["owner", "customer"],
-                scenario: "Owner changes buy_guard strategy after publish (e.g. whitelist → public)",
-                mitigation: "Document buy_guard changes for transparency. Customers should re-verify buy_guard before ordering.",
-                evidence: `buy_guard=${ctx.buy_guard ?? "(cleared)"}`,
-            };
-        }
-        return null;
-    },
-};
-const R_S_3_04 = {
-    id: "R-S-3-04",
-    category: "authority",
-    trigger: "Ownership transfer (builder field) — irreversible",
-    check: (ctx) => {
-        if (!ctx.builder)
-            return null;
-        return {
-            id: "R-S-3-04",
-            level: "HIGH",
-            category: "authority",
-            title: "Service ownership transfer — IRREVERSIBLE",
-            description: `Transferring Service to ${ctx.builder}. Original owner loses ALL control. New owner inherits permission + compensation_fund + all bindings.`,
-            affected_stakeholders: ["owner"],
-            scenario: "Owner transfers Service to new address",
-            mitigation: "1) Verify new owner address twice. 2) Withdraw compensation_fund first (if applicable). 3) Export Service JSON before transfer.",
-            evidence: `new_owner=${ctx.builder}`,
-        };
-    },
-};
-const R_S_4_01 = {
-    id: "R-S-4-01",
-    category: "lifecycle",
-    trigger: "publish is irreversible — bPublished cannot be reset to false",
-    check: (ctx) => {
-        if (!ctx.publish)
-            return null;
-        if (ctx.current_bPublished) {
-            return {
-                id: "R-S-4-01",
-                level: "HIGH",
-                category: "lifecycle",
-                title: "Service already published — publish is no-op",
-                description: "Service.bPublished is already true. Subsequent publish calls have no effect (bPublished is one-shot, cannot revert).",
-                affected_stakeholders: ["owner"],
-                scenario: "Owner calls publish again on already-published Service",
-                mitigation: "Skip publish if already published. To 'reset' a Service, create a new one.",
-                evidence: `bPublished=true`,
-            };
-        }
-        return {
-            id: "R-S-4-01",
-            level: "HIGH",
-            category: "lifecycle",
-            title: "Publish is IRREVERSIBLE — 3 fields will be locked forever",
-            description: "Once published: machine (306), arbitrations (308), order_allocators (313) become permanently immutable. bPublished cannot be reset to false. Clone Service to make changes.",
-            affected_stakeholders: ["owner", "customer"],
-            scenario: "Owner publishes Service for the first time",
-            mitigation: "Verify all configurations before publish. Run pre-publish checklist (service-confirm.ts).",
-            evidence: `bPublished=false→true`,
-        };
-    },
-};
-const R_S_4_02 = {
-    id: "R-S-4-02",
-    category: "lifecycle",
-    trigger: "setting_lock_duration add — only-increase mechanism",
-    check: (ctx) => {
-        if (ctx.setting_lock_duration_add === undefined)
-            return null;
-        return {
-            id: "R-S-4-02",
-            level: "MEDIUM",
-            category: "lifecycle",
-            title: "setting_lock_duration can only INCREASE",
-            description: `Adding ${ctx.setting_lock_duration_add} ms to setting_lock_duration. New value = old + input (safe_add). Cannot be decreased — protects customers from owner reducing lock to withdraw compensation_fund faster.`,
-            affected_stakeholders: ["owner", "customer"],
-            scenario: "Owner extends lock period to build trust",
-            mitigation: "Ensure extension is intentional. Lock affects rewards/compensation_fund_withdraw/compensation_fund_receive.",
-            evidence: `add_ms=${ctx.setting_lock_duration_add}`,
-        };
-    },
-};
-const R_S_4_03 = {
-    id: "R-S-4-03",
-    category: "lifecycle",
-    trigger: "machine/arbitrations/order_allocators modification after publish — SDK blocks",
-    check: (ctx) => {
-        if (!ctx.current_bPublished)
-            return null;
-        const blockedFields = [];
-        if (ctx.machine !== undefined)
-            blockedFields.push("machine (306)");
-        if (ctx.arbitrations !== undefined)
-            blockedFields.push("arbitrations (308)");
-        if (ctx.order_allocators !== undefined)
-            blockedFields.push("order_allocators (313)");
-        if (blockedFields.length > 0) {
-            return {
-                id: "R-S-4-03",
-                level: "HIGH",
-                category: "lifecycle",
-                title: "Post-publish modification blocked by SDK",
-                description: `Service is published. Cannot modify: ${blockedFields.join(", ")}. SDK checkNotPublished() will abort. To change these fields, clone the Service.`,
-                affected_stakeholders: ["owner"],
-                scenario: "Owner attempts to change locked field post-publish",
-                mitigation: "Create a new Service with the desired configuration. Migrate active orders if needed.",
-                evidence: `blocked=${blockedFields.join(",")}`,
-            };
-        }
-        return null;
-    },
-};
-const R_S_4_04 = {
-    id: "R-S-4-04",
-    category: "lifecycle",
-    trigger: "sales modification — stock/price changes affect future orders only",
-    check: (ctx) => {
-        if (!ctx.sales)
-            return null;
-        return {
-            id: "R-S-4-04",
-            level: "LOW",
-            category: "lifecycle",
-            title: "Sales modification affects future orders only",
-            description: "Sales add/set/remove/clear changes do NOT affect already-created Orders. Existing Orders' Progress continues with the original sale parameters.",
-            affected_stakeholders: ["owner", "customer"],
-            scenario: "Owner updates prices mid-campaign",
-            mitigation: "Communicate price/stock changes to customers. Existing orders are unaffected.",
-            evidence: `sales_op=${ctx.sales.op}`,
-        };
-    },
-};
-const R_S_5_01 = {
-    id: "R-S-5-01",
-    category: "cross_object",
-    trigger: "Machine binding — post-publish immutable, Progress inherits",
-    check: (ctx) => {
-        if (ctx.machine === undefined)
-            return null;
-        if (ctx.current_bPublished) {
-            return {
-                id: "R-S-5-01",
-                level: "HIGH",
-                category: "cross_object",
-                title: "Machine binding immutable post-publish",
-                description: `Service is published; machine cannot be changed. All future Progress objects will use the bound Machine.`,
-                affected_stakeholders: ["owner"],
-                scenario: "Owner wants to upgrade workflow post-publish",
-                mitigation: "Create new Service with new Machine. Migrate customers via discounts.",
-                evidence: `machine=${ctx.machine ?? "(cleared)"}`,
-            };
-        }
-        return {
-            id: "R-S-5-01",
-            level: "MEDIUM",
-            category: "cross_object",
-            title: "Machine binding — verify Machine is published",
-            description: `Binding Machine ${ctx.machine}. Ensure Machine is published (machine::publish) — Service cannot bind unpublished Machine.`,
-            affected_stakeholders: ["owner"],
-            scenario: "Owner binds Machine before publishing Service",
-            mitigation: "Verify Machine.bPublished = true before binding.",
-            evidence: `machine=${ctx.machine}`,
-        };
-    },
-};
-const R_S_5_02 = {
-    id: "R-S-5-02",
-    category: "cross_object",
-    trigger: "Arbitration binding — required when compensation_fund > 0",
-    check: (ctx) => {
-        if (!ctx.arbitrations)
-            return null;
-        const compBalance = ctx.current_compensation_fund_balance ?? "0";
-        if (BigInt(compBalance) > 0n && (ctx.current_arbitrations_count ?? 0) === 0) {
-            return {
-                id: "R-S-5-02",
-                level: "HIGH",
-                category: "cross_object",
-                title: "Arbitration required — compensation_fund has balance",
-                description: `compensation_fund balance is ${compBalance}. Publish will fail (E_ARBITRATION_NOT_SET_WITH_COMPENSATION_FUND) until arbitrations is non-empty.`,
-                affected_stakeholders: ["owner"],
-                scenario: "Owner deposits compensation_fund without configuring arbitrations",
-                mitigation: "Add at least 1 Arbitration object before publish.",
-                evidence: `compensation_fund=${compBalance}`,
-            };
-        }
-        return null;
-    },
-};
-const R_S_5_03 = {
-    id: "R-S-5-03",
-    category: "cross_object",
-    trigger: "order_allocators binding — publish prerequisite, post-publish immutable",
-    check: (ctx) => {
-        if (ctx.order_allocators === undefined)
-            return null;
-        if (ctx.current_bPublished) {
-            return {
-                id: "R-S-5-03",
-                level: "HIGH",
-                category: "cross_object",
-                title: "order_allocators immutable post-publish",
-                description: "Service is published; order_allocators cannot be changed. Fund distribution strategy is permanently locked.",
-                affected_stakeholders: ["owner"],
-                scenario: "Owner wants to adjust fee split post-publish",
-                mitigation: "Create new Service with new allocators. Cannot migrate existing Orders.",
-                evidence: `order_allocators=${ctx.order_allocators ? "(set)" : "(cleared)"}`,
-            };
-        }
-        if (ctx.publish && !ctx.order_allocators) {
-            return {
-                id: "R-S-5-03",
-                level: "CRITICAL",
-                category: "cross_object",
-                title: "Publish without order_allocators — will fail",
-                description: "Publish will abort with E_NO_ALLOCATOR. order_allocators is a mandatory publish prerequisite.",
-                affected_stakeholders: ["owner"],
-                scenario: "Owner attempts publish without configuring allocators",
-                mitigation: "Set order_allocators before publish.",
-                evidence: `order_allocators=null`,
-            };
-        }
-        return null;
-    },
-};
-const R_S_5_04 = {
-    id: "R-S-5-04",
-    category: "cross_object",
-    trigger: "Repository/Reward binding — verify object types before adding",
-    check: (ctx) => {
-        if (ctx.repositories && (ctx.repositories.op === "add" || ctx.repositories.op === "set")) {
-            return {
-                id: "R-S-5-04",
-                level: "LOW",
-                category: "cross_object",
-                title: "Repository binding — verify object types",
-                description: `Adding ${ctx.repositories.objects.length} repositories. SDK uses queryObjectsWithType to validate each is ObjectType.Repository before binding.`,
-                affected_stakeholders: ["owner"],
-                scenario: "Owner adds non-Repository object by mistake",
-                mitigation: "Use LocalMark names or addresses that are confirmed Repository objects.",
-                evidence: `objects=${ctx.repositories.objects.length}`,
-            };
-        }
-        if (ctx.rewards && (ctx.rewards.op === "add" || ctx.rewards.op === "set")) {
-            return {
-                id: "R-S-5-04",
-                level: "LOW",
-                category: "cross_object",
-                title: "Reward binding — verify object types + lock_duration",
-                description: `Adding ${ctx.rewards.objects.length} rewards. SDK validates ObjectType.Reward. Note: rewards modification is locked by setting_lock_duration.`,
-                affected_stakeholders: ["owner"],
-                scenario: "Owner adds Reward objects",
-                mitigation: "Verify Reward objects exist and are active. Be aware of lock_duration implications.",
-                evidence: `objects=${ctx.rewards.objects.length}`,
-            };
-        }
-        return null;
-    },
-};
-const ALL_RULES = [
-    R_S_1_01, R_S_1_02, R_S_1_03, R_S_1_04, R_S_1_05,
-    R_S_2_01, R_S_2_02, R_S_2_03, R_S_2_04, R_S_2_05,
-    R_S_3_01, R_S_3_02, R_S_3_03, R_S_3_04,
-    R_S_4_01, R_S_4_02, R_S_4_03, R_S_4_04,
-    R_S_5_01, R_S_5_02, R_S_5_03, R_S_5_04,
-];
-export const SERVICE_RISK_VERSION = "1.0.0";
-export function getAllServiceRiskRules() {
-    return [...ALL_RULES];
-}
-export function getServiceRiskRulesCount() {
-    return ALL_RULES.length;
-}
-export function getServiceRiskRulesByCategory(category) {
-    return ALL_RULES.filter(r => r.category === category);
-}
-export function assessServiceRisks(ctx) {
-    const risks = [];
-    for (const rule of ALL_RULES) {
-        const r = rule.check(ctx);
-        if (r)
-            risks.push(r);
-    }
-    const overall = risks.length === 0
-        ? "LOW"
-        : risks.some(r => r.level === "CRITICAL") ? "CRITICAL"
-            : risks.some(r => r.level === "HIGH") ? "HIGH"
-                : risks.some(r => r.level === "MEDIUM") ? "MEDIUM"
-                    : "LOW";
-    const byCategory = {};
-    for (const r of risks) {
-        byCategory[r.category] = (byCategory[r.category] ?? 0) + 1;
-    }
-    const advice = {};
-    for (const r of risks) {
-        for (const s of r.affected_stakeholders) {
-            if (!advice[s])
-                advice[s] = [];
-            advice[s].push(`${r.id}: ${r.mitigation}`);
-        }
-    }
-    return {
-        summary: `Assessed ${risks.length} risk(s) across ${Object.keys(byCategory).length} categories`,
-        risks,
-        overall_risk: overall,
-        risks_by_category: byCategory,
-        stakeholder_advice: advice,
-        needs_human_review: risks.some(r => r.level === "CRITICAL" || r.level === "HIGH"),
-    };
-}
+import{MAX_SALE_COUNT,MAX_REPOSITORY_COUNT,MAX_ARBITRATION_COUNT,MAX_DISCOUNT_TOTAL_COUNT,MAX_WIP_LENGTH,MAX_WIP_HASH_LENGTH}from'@wowok/wowok';const R_S_1_01={'id':'R-S-1-01','category':'structural','trigger':'sales\x20count\x20exceeds\x20MAX_SALE_COUNT\x20(50)','check':a=>{const b=a['current_sales_count']??0x0;if(a['sales']&&(a['sales']['op']==='add'||a['sales']['op']==='set')){const c=a['sales']['op']==='set'?a['sales']['sales']['length']:b+a['sales']['sales']['length'];if(c>MAX_SALE_COUNT)return{'id':'R-S-1-01','level':'HIGH','category':'structural','title':'Sales\x20count\x20exceeds\x20limit','description':'Service\x20would\x20have\x20'+c+'\x20sales\x20items,\x20exceeds\x20MAX_SALE_COUNT\x20'+MAX_SALE_COUNT,'affected_stakeholders':['owner','system'],'scenario':'Adding\x20too\x20many\x20product\x20SKUs','mitigation':'Split\x20into\x20multiple\x20Service\x20objects\x20or\x20remove\x20discontinued\x20items','evidence':'sales_count='+c};}return null;}},R_S_1_02={'id':'R-S-1-02','category':'structural','trigger':'repositories\x20count\x20exceeds\x20MAX_REPOSITORY_COUNT\x20(100)','check':a=>{const b=a['current_repositories_count']??0x0;if(a['repositories']&&(a['repositories']['op']==='add'||a['repositories']['op']==='set')){const c=a['repositories']['op']==='set'?a['repositories']['objects']['length']:b+a['repositories']['objects']['length'];if(c>MAX_REPOSITORY_COUNT)return{'id':'R-S-1-02','level':'MEDIUM','category':'structural','title':'Repositories\x20count\x20exceeds\x20limit','description':'Service\x20would\x20have\x20'+c+'\x20repositories,\x20exceeds\x20MAX_REPOSITORY_COUNT\x20'+MAX_REPOSITORY_COUNT,'affected_stakeholders':['owner'],'scenario':'Binding\x20too\x20many\x20data\x20repositories','mitigation':'Consolidate\x20repositories\x20or\x20remove\x20inactive\x20ones','evidence':'repositories_count='+c};}return null;}},R_S_1_03={'id':'R-S-1-03','category':'structural','trigger':'arbitrations\x20count\x20exceeds\x20MAX_ARBITRATION_COUNT\x20(20)','check':a=>{const b=a['current_arbitrations_count']??0x0;if(a['arbitrations']&&(a['arbitrations']['op']==='add'||a['arbitrations']['op']==='set')){const c=a['arbitrations']['op']==='set'?a['arbitrations']['objects']['length']:b+a['arbitrations']['objects']['length'];if(c>MAX_ARBITRATION_COUNT)return{'id':'R-S-1-03','level':'HIGH','category':'structural','title':'Arbitrations\x20count\x20exceeds\x20limit','description':'Service\x20would\x20have\x20'+c+'\x20arbitrations,\x20exceeds\x20MAX_ARBITRATION_COUNT\x20'+MAX_ARBITRATION_COUNT,'affected_stakeholders':['owner','arbitrator'],'scenario':'Binding\x20too\x20many\x20Arbitration\x20objects','mitigation':'Use\x201-3\x20Arbitration\x20objects\x20covering\x20different\x20dispute\x20scopes','evidence':'arbitrations_count='+c};}return null;}},R_S_1_04={'id':'R-S-1-04','category':'structural','trigger':'WIP\x20hash\x20length\x20exceeds\x20MAX_WIP_HASH_LENGTH\x20(64)\x20or\x20URL\x20exceeds\x20MAX_WIP_LENGTH\x20(1024)','check':a=>{if(a['sales']&&(a['sales']['op']==='add'||a['sales']['op']==='set'))for(const b of a['sales']['sales']){if(b['wip_hash']&&b['wip_hash']['length']>MAX_WIP_HASH_LENGTH)return{'id':'R-S-1-04','level':'HIGH','category':'structural','title':'WIP\x20hash\x20length\x20exceeds\x20limit','description':'Sale\x20\x22'+b['name']+'\x22\x20wip_hash\x20length\x20'+b['wip_hash']['length']+'\x20>\x20MAX_WIP_HASH_LENGTH\x20'+MAX_WIP_HASH_LENGTH,'affected_stakeholders':['owner','customer'],'scenario':'Malformed\x20WIP\x20hash\x20(should\x20be\x20sha256\x20hex,\x2064\x20chars)','mitigation':'Use\x20sha256\x20hex\x20hash\x20(64\x20characters,\x20no\x20prefix)','evidence':'wip_hash_length='+b['wip_hash']['length']};if(b['wip']&&b['wip']['length']>MAX_WIP_LENGTH)return{'id':'R-S-1-04','level':'HIGH','category':'structural','title':'WIP\x20URL\x20length\x20exceeds\x20limit','description':'Sale\x20\x22'+b['name']+'\x22\x20wip\x20URL\x20length\x20'+b['wip']['length']+'\x20>\x20MAX_WIP_LENGTH\x20'+MAX_WIP_LENGTH,'affected_stakeholders':['owner'],'scenario':'WIP\x20URL\x20too\x20long\x20(use\x20IPFS\x20or\x20short\x20HTTPS\x20URL)','mitigation':'Use\x20IPFS\x20CID\x20or\x20shorter\x20URL','evidence':'wip_url_length='+b['wip']['length']};}return null;}},R_S_1_05={'id':'R-S-1-05','category':'structural','trigger':'sale.wip\x20is\x20a\x20local\x20path\x20/\x20localhost\x20/\x20LAN\x20URL\x20(not\x20network-deployable)\x20—\x20every\x20customer\x20order\x20fails','check':a=>{if(a['sales']&&(a['sales']['op']==='add'||a['sales']['op']==='set'))for(const b of a['sales']['sales']){if(b['wip']&&b['wip']!==''){let c=null;const d=b['wip'];if(/^[A-Za-z]:[\\/]/['test'](d)||d['startsWith']('/')||d['startsWith']('./')||d['startsWith']('../'))c='local\x20filesystem\x20path';else{if(/^https?:\/\/(localhost|127\.0\.0\.1|\[::1\]|0\.0\.0\.0)([:/]|$)/i['test'](d))c='localhost/loopback\x20URL';else{if(/^https?:\/\/(10\.\d{1,3}\.\d{1,3}\.\d{1,3}|172\.(1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3}|192\.168\.\d{1,3}\.\d{1,3})([:/]|$)/i['test'](d))c='LAN\x20(private\x20IP)\x20URL';else!/^https?:\/\//i['test'](d)&&!d['startsWith']('ipfs://')&&!d['startsWith']('data:')&&(c='unrecognized\x20format\x20(not\x20a\x20network\x20URL)');}}if(c)return{'id':'R-S-1-05','level':'CRITICAL','category':'structural','title':'WIP\x20is\x20not\x20network-deployed\x20—\x20every\x20customer\x20order\x20will\x20fail','description':'Sale\x20\x22'+b['name']+'\x22\x20wip\x20\x22'+b['wip']+'\x22\x20is\x20a\x20'+c+'.\x20It\x20passes\x20set-time\x20verification\x20'+'on\x20the\x20merchant\x27s\x20own\x20machine\x20but\x20is\x20unreachable\x20by\x20customers\x20on\x20other\x20machines\x20—\x20'+'order_new\x20aborts\x20100%\x20when\x20a\x20customer\x20tries\x20to\x20buy.','affected_stakeholders':['owner','customer'],'scenario':'Merchant\x20sets\x20wip\x20to\x20a\x20local\x20file\x20path\x20/\x20localhost\x20/\x20LAN\x20URL\x20and\x20publishes\x20the\x20Service;\x20'+'the\x20on-chain\x20wip\x20points\x20at\x20the\x20merchant\x27s\x20machine;\x20customers\x20cannot\x20fetch\x20it.','mitigation':'Deploy\x20the\x20.wip\x20file\x20to\x20a\x20public\x20host\x20(GitHub\x20Pages,\x20IPFS,\x20or\x20your\x20own\x20website)\x20and\x20set\x20'+'sale.wip\x20to\x20the\x20public\x20URL.\x20Or\x20leave\x20sale.wip\x20empty\x20(\x22\x22)\x20to\x20skip\x20WIP\x20verification\x20'+'(TESTING\x20ONLY\x20—\x20not\x20recommended\x20for\x20production).','evidence':'sale='+b['name']+',\x20wip='+b['wip']};}}return null;}},R_S_2_01={'id':'R-S-2-01','category':'semantic','trigger':'WIP\x20hash\x20tampering\x20risk\x20—\x20owner\x20updates\x20WIP\x20file\x20without\x20updating\x20wip_hash','check':a=>{if(a['sales']&&(a['sales']['op']==='add'||a['sales']['op']==='set'))for(const b of a['sales']['sales']){if(b['wip']&&!b['wip_hash'])return{'id':'R-S-2-01','level':'CRITICAL','category':'semantic','title':'WIP\x20hash\x20missing\x20—\x20tampering\x20risk','description':'Sale\x20\x22'+b['name']+'\x22\x20has\x20wip\x20URL\x20but\x20no\x20wip_hash.\x20Owner\x20could\x20replace\x20the\x20WIP\x20file\x20without\x20customers\x20noticing.','affected_stakeholders':['customer','owner'],'scenario':'Owner\x20sets\x20wip\x20without\x20hash,\x20then\x20changes\x20file\x20content\x20later','mitigation':'Always\x20compute\x20sha256(wip_file_content)\x20and\x20set\x20as\x20wip_hash.\x20SDK\x20auto-derives\x20if\x20omitted,\x20but\x20explicit\x20hash\x20is\x20safer.','evidence':'sale='+b['name']};}return null;}},R_S_2_02={'id':'R-S-2-02','category':'semantic','trigger':'compensation_fund\x20confused\x20with\x20Service\x20balance\x20(internal\x20Balance<T>)','check':a=>{if(a['compensation_fund_add'])return{'id':'R-S-2-02','level':'HIGH','category':'semantic','title':'compensation_fund\x20is\x20internal\x20Balance<T>,\x20NOT\x20Service-owned\x20Treasury','description':'Depositing\x20'+a['compensation_fund_add']['balance']+'\x20to\x20compensation_fund.\x20This\x20balance\x20is\x20internal\x20to\x20Service<T>\x20and\x20is\x20consumed\x20by\x20arbitration::compensation_claim,\x20not\x20by\x20owner\x20withdrawals.\x20Owner\x20can\x20only\x20withdraw\x20via\x20compensation_fund_withdraw\x20(requires\x20bPaused=true\x20+\x20lock_duration\x20expired).','affected_stakeholders':['owner','arbitrator','customer'],'scenario':'Owner\x20confuses\x20compensation_fund\x20with\x20general\x20Treasury','mitigation':'Use\x20external\x20Treasury\x20(referenced\x20via\x20order_allocators.sharing.who=Entity)\x20for\x20general\x20funds.\x20Use\x20compensation_fund\x20only\x20for\x20arbitration\x20payouts.','evidence':'deposit='+a['compensation_fund_add']['balance']};return null;}},R_S_2_03={'id':'R-S-2-03','category':'semantic','trigger':'quote\x20side\x20effect\x20—\x20stock\x20deduction\x20not\x20rolled\x20back\x20on\x20later\x20failure','check':a=>{if(a['order_new']&&a['order_new']['buy']['items']['length']>0x0)return{'id':'R-S-2-03','level':'HIGH','category':'semantic','title':'Order\x20flow:\x20stock\x20deducted\x20at\x20quote\x20stage\x20—\x20NOT\x20rolled\x20back\x20on\x20failure','description':'Order\x20will\x20deduct\x20stock\x20at\x20Stage\x203\x20(quote).\x20If\x20Stages\x204-7\x20fail,\x20stock\x20remains\x20deducted.\x20Customer\x20must\x20manually\x20re-add\x20stock\x20or\x20accept\x20the\x20loss.','affected_stakeholders':['owner','customer'],'scenario':'Customer\x27s\x20transaction\x20fails\x20after\x20quote\x20but\x20stock\x20is\x20gone','mitigation':'1)\x20Monitor\x20failed\x20transactions\x20and\x20re-add\x20stock\x20via\x20stock_add.\x202)\x20Set\x20sales\x20suspension\x20during\x20high-failure\x20periods.\x203)\x20Use\x20small\x20batch\x20orders\x20to\x20limit\x20blast\x20radius.','evidence':'items='+a['order_new']['buy']['items']['length']};return null;}},R_S_2_04={'id':'R-S-2-04','category':'semantic','trigger':'Discount\x20issuance\x20—\x20verify\x20type\x20and\x20total\x20count\x20semantics','check':a=>{if(a['discount']){const b=a['discount']['count'];if(b>MAX_DISCOUNT_TOTAL_COUNT)return{'id':'R-S-2-04','level':'MEDIUM','category':'semantic','title':'Discount\x20count\x20exceeds\x20total\x20cap','description':'Issuing\x20'+b+'\x20discounts\x20exceeds\x20MAX_DISCOUNT_TOTAL_COUNT\x20'+MAX_DISCOUNT_TOTAL_COUNT,'affected_stakeholders':['owner'],'scenario':'Bulk\x20discount\x20issuance','mitigation':'Issue\x20in\x20batches\x20of\x20<=\x201000\x20(MAX_DISCOUNT_COUNT_ONCE)\x20and\x20keep\x20total\x20<=\x20'+MAX_DISCOUNT_TOTAL_COUNT,'evidence':'count='+b};}return null;}},R_S_2_05={'id':'R-S-2-05','category':'semantic','trigger':'Order\x20placed\x20without\x20verifying\x20WIP\x20hash\x20—\x20buyer\x20passes\x20empty\x20wip_hash','check':a=>{if(a['order_new']){const b=a['order_new']['buy']['items']['filter'](c=>c['wip_hash']==='');if(b['length']>0x0)return{'id':'R-S-2-05','level':'MEDIUM','category':'semantic','title':'Order\x20with\x20empty\x20wip_hash\x20—\x20SDK\x20auto-fills\x20from\x20sale','description':b['length']+'\x20item(s)\x20have\x20empty\x20wip_hash.\x20SDK\x20will\x20auto-fill\x20from\x20sale.wip_hash\x20at\x20order\x20time.\x20If\x20owner\x20updates\x20the\x20WIP\x20file\x20between\x20viewing\x20and\x20ordering,\x20buyer\x20receives\x20the\x20new\x20(potentially\x20different)\x20content.','affected_stakeholders':['customer'],'scenario':'Time-of-check\x20to\x20time-of-use\x20WIP\x20mismatch','mitigation':'Buyer\x20should\x20explicitly\x20pass\x20the\x20wip_hash\x20they\x20saw\x20when\x20viewing\x20the\x20product.\x20Empty\x20string\x20is\x20convenience\x20but\x20riskier.','evidence':'empty_hash_items='+b['length']};}return null;}},R_S_3_01={'id':'R-S-3-01','category':'authority','trigger':'publish\x20operation\x20—\x20requires\x20SERVICE_PUBLISH\x20(311)\x20+\x20prerequisites','check':a=>{if(!a['publish'])return null;const b=[];if(!a['current_order_allocators_set'])b['push']('order_allocators\x20not\x20set\x20(F-S-18,\x20E_NO_ALLOCATOR)');const c=a['current_compensation_fund_balance']??'0';BigInt(c)>0x0n&&(a['current_arbitrations_count']??0x0)===0x0&&b['push']('compensation_fund\x20>\x200\x20but\x20no\x20arbitrations\x20(F-S-19,\x20E_ARBITRATION_NOT_SET_WITH_COMPENSATION_FUND)');if(b['length']>0x0)return{'id':'R-S-3-01','level':'CRITICAL','category':'authority','title':'Publish\x20blocked\x20—\x20prerequisites\x20not\x20met','description':'Cannot\x20publish:\x20'+b['join'](';\x20'),'affected_stakeholders':['owner'],'scenario':'Owner\x20attempts\x20publish\x20without\x20configuring\x20prerequisites','mitigation':'Configure\x20order_allocators\x20(and\x20arbitrations\x20if\x20compensation_fund\x20>\x200)\x20before\x20publish','evidence':'blockers='+b['length']};return null;}},R_S_3_02={'id':'R-S-3-02','category':'authority','trigger':'pause\x20operation\x20—\x20affects\x20new\x20orders\x20but\x20not\x20existing\x20Progress','check':a=>{if(a['pause']===undefined)return null;return{'id':'R-S-3-02','level':'MEDIUM','category':'authority','title':a['pause']?'Pausing\x20Service\x20—\x20new\x20orders\x20blocked,\x20existing\x20Progress\x20continues':'Resuming\x20Service\x20—\x20new\x20orders\x20accepted','description':a['pause']?'Service.bPaused\x20=\x20true\x20will\x20reject\x20new\x20orders\x20(E_SERVICE_PAUSED).\x20Existing\x20orders\x27\x20Progress\x20continues\x20normally.':'Service.bPaused\x20=\x20false\x20will\x20allow\x20new\x20orders\x20again.','affected_stakeholders':['owner','customer'],'scenario':a['pause']?'Owner\x20pauses\x20for\x20maintenance/stockout':'Owner\x20resumes\x20after\x20maintenance','mitigation':a['pause']?'Communicate\x20pause\x20to\x20customers.\x20Use\x20compensation_fund_withdraw\x20only\x20when\x20paused.':'Verify\x20stock\x20levels\x20before\x20resuming.','evidence':'pause='+a['pause']};}},R_S_3_03={'id':'R-S-3-03','category':'authority','trigger':'buy_guard\x20change\x20—\x20post-publish\x20mutable\x20(unusual\x20exception)','check':a=>{if(a['buy_guard']===undefined)return null;if(a['current_bPublished'])return{'id':'R-S-3-03','level':'MEDIUM','category':'authority','title':'buy_guard\x20change\x20post-publish\x20—\x20unusual\x20mutability','description':'buy_guard\x20is\x20the\x20ONLY\x20publish-locked-field\x20exception:\x20it\x20remains\x20mutable\x20post-publish.\x20Other\x20fields\x20(machine/arbitrations/order_allocators)\x20are\x20immutable.','affected_stakeholders':['owner','customer'],'scenario':'Owner\x20changes\x20buy_guard\x20strategy\x20after\x20publish\x20(e.g.\x20whitelist\x20→\x20public)','mitigation':'Document\x20buy_guard\x20changes\x20for\x20transparency.\x20Customers\x20should\x20re-verify\x20buy_guard\x20before\x20ordering.','evidence':'buy_guard='+(a['buy_guard']??'(cleared)')};return null;}},R_S_3_04={'id':'R-S-3-04','category':'authority','trigger':'Ownership\x20transfer\x20(builder\x20field)\x20—\x20irreversible','check':a=>{if(!a['builder'])return null;return{'id':'R-S-3-04','level':'HIGH','category':'authority','title':'Service\x20ownership\x20transfer\x20—\x20IRREVERSIBLE','description':'Transferring\x20Service\x20to\x20'+a['builder']+'.\x20Original\x20owner\x20loses\x20ALL\x20control.\x20New\x20owner\x20inherits\x20permission\x20+\x20compensation_fund\x20+\x20all\x20bindings.','affected_stakeholders':['owner'],'scenario':'Owner\x20transfers\x20Service\x20to\x20new\x20address','mitigation':'1)\x20Verify\x20new\x20owner\x20address\x20twice.\x202)\x20Withdraw\x20compensation_fund\x20first\x20(if\x20applicable).\x203)\x20Export\x20Service\x20JSON\x20before\x20transfer.','evidence':'new_owner='+a['builder']};}},R_S_4_01={'id':'R-S-4-01','category':'lifecycle','trigger':'publish\x20is\x20irreversible\x20—\x20bPublished\x20cannot\x20be\x20reset\x20to\x20false','check':a=>{if(!a['publish'])return null;if(a['current_bPublished'])return{'id':'R-S-4-01','level':'HIGH','category':'lifecycle','title':'Service\x20already\x20published\x20—\x20publish\x20is\x20no-op','description':'Service.bPublished\x20is\x20already\x20true.\x20Subsequent\x20publish\x20calls\x20have\x20no\x20effect\x20(bPublished\x20is\x20one-shot,\x20cannot\x20revert).','affected_stakeholders':['owner'],'scenario':'Owner\x20calls\x20publish\x20again\x20on\x20already-published\x20Service','mitigation':'Skip\x20publish\x20if\x20already\x20published.\x20To\x20\x27reset\x27\x20a\x20Service,\x20create\x20a\x20new\x20one.','evidence':'bPublished=true'};return{'id':'R-S-4-01','level':'HIGH','category':'lifecycle','title':'Publish\x20is\x20IRREVERSIBLE\x20—\x203\x20fields\x20will\x20be\x20locked\x20forever','description':'Once\x20published:\x20machine\x20(306),\x20arbitrations\x20(308),\x20order_allocators\x20(313)\x20become\x20permanently\x20immutable.\x20bPublished\x20cannot\x20be\x20reset\x20to\x20false.\x20Clone\x20Service\x20to\x20make\x20changes.','affected_stakeholders':['owner','customer'],'scenario':'Owner\x20publishes\x20Service\x20for\x20the\x20first\x20time','mitigation':'Verify\x20all\x20configurations\x20before\x20publish.\x20Run\x20pre-publish\x20checklist\x20(service-confirm.ts).','evidence':'bPublished=false→true'};}},R_S_4_02={'id':'R-S-4-02','category':'lifecycle','trigger':'setting_lock_duration\x20add\x20—\x20only-increase\x20mechanism','check':a=>{if(a['setting_lock_duration_add']===undefined)return null;return{'id':'R-S-4-02','level':'MEDIUM','category':'lifecycle','title':'setting_lock_duration\x20can\x20only\x20INCREASE','description':'Adding\x20'+a['setting_lock_duration_add']+'\x20ms\x20to\x20setting_lock_duration.\x20New\x20value\x20=\x20old\x20+\x20input\x20(safe_add).\x20Cannot\x20be\x20decreased\x20—\x20protects\x20customers\x20from\x20owner\x20reducing\x20lock\x20to\x20withdraw\x20compensation_fund\x20faster.','affected_stakeholders':['owner','customer'],'scenario':'Owner\x20extends\x20lock\x20period\x20to\x20build\x20trust','mitigation':'Ensure\x20extension\x20is\x20intentional.\x20Lock\x20affects\x20rewards/compensation_fund_withdraw/compensation_fund_receive.','evidence':'add_ms='+a['setting_lock_duration_add']};}},R_S_4_03={'id':'R-S-4-03','category':'lifecycle','trigger':'machine/arbitrations/order_allocators\x20modification\x20after\x20publish\x20—\x20SDK\x20blocks','check':a=>{if(!a['current_bPublished'])return null;const b=[];if(a['machine']!==undefined)b['push']('machine\x20(306)');if(a['arbitrations']!==undefined)b['push']('arbitrations\x20(308)');if(a['order_allocators']!==undefined)b['push']('order_allocators\x20(313)');if(b['length']>0x0)return{'id':'R-S-4-03','level':'HIGH','category':'lifecycle','title':'Post-publish\x20modification\x20blocked\x20by\x20SDK','description':'Service\x20is\x20published.\x20Cannot\x20modify:\x20'+b['join'](',\x20')+'.\x20SDK\x20checkNotPublished()\x20will\x20abort.\x20To\x20change\x20these\x20fields,\x20clone\x20the\x20Service.','affected_stakeholders':['owner'],'scenario':'Owner\x20attempts\x20to\x20change\x20locked\x20field\x20post-publish','mitigation':'Create\x20a\x20new\x20Service\x20with\x20the\x20desired\x20configuration.\x20Migrate\x20active\x20orders\x20if\x20needed.','evidence':'blocked='+b['join'](',')};return null;}},R_S_4_04={'id':'R-S-4-04','category':'lifecycle','trigger':'sales\x20modification\x20—\x20stock/price\x20changes\x20affect\x20future\x20orders\x20only','check':a=>{if(!a['sales'])return null;return{'id':'R-S-4-04','level':'LOW','category':'lifecycle','title':'Sales\x20modification\x20affects\x20future\x20orders\x20only','description':'Sales\x20add/set/remove/clear\x20changes\x20do\x20NOT\x20affect\x20already-created\x20Orders.\x20Existing\x20Orders\x27\x20Progress\x20continues\x20with\x20the\x20original\x20sale\x20parameters.','affected_stakeholders':['owner','customer'],'scenario':'Owner\x20updates\x20prices\x20mid-campaign','mitigation':'Communicate\x20price/stock\x20changes\x20to\x20customers.\x20Existing\x20orders\x20are\x20unaffected.','evidence':'sales_op='+a['sales']['op']};}},R_S_4_05={'id':'R-S-4-05','category':'lifecycle','trigger':'Service\x20paused\x20(state-only\x20buyer\x20rule)\x20—\x20new\x20orders\x20are\x20suspended','check':a=>{if(!a['current_bPaused'])return null;return{'id':'R-S-4-05','level':'HIGH','category':'lifecycle','title':'Service\x20is\x20paused\x20—\x20ordering\x20suspended','description':'Service.bPaused\x20is\x20true.\x20The\x20merchant\x20has\x20actively\x20paused\x20the\x20Service;\x20new\x20orders\x20cannot\x20be\x20placed\x20until\x20it\x20resumes.','affected_stakeholders':['customer'],'scenario':'Buyer\x20performs\x20due\x20diligence\x20on\x20a\x20paused\x20Service','mitigation':'Confirm\x20with\x20the\x20merchant\x20(via\x20Messenger)\x20when\x20the\x20Service\x20will\x20resume\x20before\x20ordering.','evidence':'bPaused=true'};}},R_S_4_06={'id':'R-S-4-06','category':'lifecycle','trigger':'Service\x20not\x20published\x20(state-only\x20buyer\x20rule)\x20—\x20cannot\x20be\x20ordered','check':a=>{if(a['current_bPublished']!==![])return null;return{'id':'R-S-4-06','level':'HIGH','category':'lifecycle','title':'Service\x20is\x20not\x20published\x20—\x20cannot\x20be\x20ordered','description':'Service.bPublished\x20is\x20false.\x20The\x20Service\x20is\x20still\x20a\x20draft:\x20it\x20is\x20not\x20visible\x20on\x20the\x20market\x20and\x20order_new\x20will\x20fail.','affected_stakeholders':['customer'],'scenario':'Buyer\x20evaluates\x20a\x20draft\x20Service\x20shared\x20out-of-band','mitigation':'Wait\x20until\x20the\x20merchant\x20publishes\x20the\x20Service\x20(publish\x20is\x20irreversible\x20—\x20configuration\x20is\x20locked\x20at\x20that\x20point).','evidence':'bPublished=false'};}},R_S_5_01={'id':'R-S-5-01','category':'cross_object','trigger':'Machine\x20binding\x20—\x20post-publish\x20immutable,\x20Progress\x20inherits','check':a=>{if(a['machine']===undefined)return null;if(a['current_bPublished'])return{'id':'R-S-5-01','level':'HIGH','category':'cross_object','title':'Machine\x20binding\x20immutable\x20post-publish','description':'Service\x20is\x20published;\x20machine\x20cannot\x20be\x20changed.\x20All\x20future\x20Progress\x20objects\x20will\x20use\x20the\x20bound\x20Machine.','affected_stakeholders':['owner'],'scenario':'Owner\x20wants\x20to\x20upgrade\x20workflow\x20post-publish','mitigation':'Create\x20new\x20Service\x20with\x20new\x20Machine.\x20Migrate\x20customers\x20via\x20discounts.','evidence':'machine='+(a['machine']??'(cleared)')};return{'id':'R-S-5-01','level':'MEDIUM','category':'cross_object','title':'Machine\x20binding\x20—\x20verify\x20Machine\x20is\x20published','description':'Binding\x20Machine\x20'+a['machine']+'.\x20Ensure\x20Machine\x20is\x20published\x20(machine::publish)\x20—\x20Service\x20cannot\x20bind\x20unpublished\x20Machine.','affected_stakeholders':['owner'],'scenario':'Owner\x20binds\x20Machine\x20before\x20publishing\x20Service','mitigation':'Verify\x20Machine.bPublished\x20=\x20true\x20before\x20binding.','evidence':'machine='+a['machine']};}},R_S_5_02={'id':'R-S-5-02','category':'cross_object','trigger':'Arbitration\x20binding\x20—\x20required\x20when\x20compensation_fund\x20>\x200','check':a=>{if(!a['arbitrations'])return null;const b=a['current_compensation_fund_balance']??'0';if(BigInt(b)>0x0n&&(a['current_arbitrations_count']??0x0)===0x0)return{'id':'R-S-5-02','level':'HIGH','category':'cross_object','title':'Arbitration\x20required\x20—\x20compensation_fund\x20has\x20balance','description':'compensation_fund\x20balance\x20is\x20'+b+'.\x20Publish\x20will\x20fail\x20(E_ARBITRATION_NOT_SET_WITH_COMPENSATION_FUND)\x20until\x20arbitrations\x20is\x20non-empty.','affected_stakeholders':['owner'],'scenario':'Owner\x20deposits\x20compensation_fund\x20without\x20configuring\x20arbitrations','mitigation':'Add\x20at\x20least\x201\x20Arbitration\x20object\x20before\x20publish.','evidence':'compensation_fund='+b};return null;}},R_S_5_03={'id':'R-S-5-03','category':'cross_object','trigger':'order_allocators\x20binding\x20—\x20publish\x20prerequisite,\x20post-publish\x20immutable','check':a=>{if(a['order_allocators']===undefined)return null;if(a['current_bPublished'])return{'id':'R-S-5-03','level':'HIGH','category':'cross_object','title':'order_allocators\x20immutable\x20post-publish','description':'Service\x20is\x20published;\x20order_allocators\x20cannot\x20be\x20changed.\x20Fund\x20distribution\x20strategy\x20is\x20permanently\x20locked.','affected_stakeholders':['owner'],'scenario':'Owner\x20wants\x20to\x20adjust\x20fee\x20split\x20post-publish','mitigation':'Create\x20new\x20Service\x20with\x20new\x20allocators.\x20Cannot\x20migrate\x20existing\x20Orders.','evidence':'order_allocators='+(a['order_allocators']?'(set)':'(cleared)')};if(a['publish']&&!a['order_allocators'])return{'id':'R-S-5-03','level':'CRITICAL','category':'cross_object','title':'Publish\x20without\x20order_allocators\x20—\x20will\x20fail','description':'Publish\x20will\x20abort\x20with\x20E_NO_ALLOCATOR.\x20order_allocators\x20is\x20a\x20mandatory\x20publish\x20prerequisite.','affected_stakeholders':['owner'],'scenario':'Owner\x20attempts\x20publish\x20without\x20configuring\x20allocators','mitigation':'Set\x20order_allocators\x20before\x20publish.','evidence':'order_allocators=null'};return null;}},R_S_5_04={'id':'R-S-5-04','category':'cross_object','trigger':'Repository/Reward\x20binding\x20—\x20verify\x20object\x20types\x20before\x20adding','check':a=>{if(a['repositories']&&(a['repositories']['op']==='add'||a['repositories']['op']==='set'))return{'id':'R-S-5-04','level':'LOW','category':'cross_object','title':'Repository\x20binding\x20—\x20verify\x20object\x20types','description':'Adding\x20'+a['repositories']['objects']['length']+'\x20repositories.\x20SDK\x20uses\x20queryObjectsWithType\x20to\x20validate\x20each\x20is\x20ObjectType.Repository\x20before\x20binding.','affected_stakeholders':['owner'],'scenario':'Owner\x20adds\x20non-Repository\x20object\x20by\x20mistake','mitigation':'Use\x20LocalMark\x20names\x20or\x20addresses\x20that\x20are\x20confirmed\x20Repository\x20objects.','evidence':'objects='+a['repositories']['objects']['length']};if(a['rewards']&&(a['rewards']['op']==='add'||a['rewards']['op']==='set'))return{'id':'R-S-5-04','level':'LOW','category':'cross_object','title':'Reward\x20binding\x20—\x20verify\x20object\x20types\x20+\x20lock_duration','description':'Adding\x20'+a['rewards']['objects']['length']+'\x20rewards.\x20SDK\x20validates\x20ObjectType.Reward.\x20Note:\x20rewards\x20modification\x20is\x20locked\x20by\x20setting_lock_duration.','affected_stakeholders':['owner'],'scenario':'Owner\x20adds\x20Reward\x20objects','mitigation':'Verify\x20Reward\x20objects\x20exist\x20and\x20are\x20active.\x20Be\x20aware\x20of\x20lock_duration\x20implications.','evidence':'objects='+a['rewards']['objects']['length']};return null;}},R_S_5_05={'id':'R-S-5-05','category':'cross_object','trigger':'compensation_fund\x20has\x20balance\x20but\x20no\x20Arbitration\x20bound\x20(state-only\x20buyer\x20rule)','check':a=>{const b=a['current_compensation_fund_balance'];if(b===undefined)return null;let c;try{c=BigInt(b);}catch{return null;}if(c>0x0n&&(a['current_arbitrations_count']??0x0)===0x0)return{'id':'R-S-5-05','level':'HIGH','category':'cross_object','title':'Compensation\x20fund\x20without\x20Arbitration\x20—\x20fund\x20is\x20unclaimable','description':'compensation_fund\x20balance\x20is\x20'+b+'\x20but\x20no\x20Arbitration\x20object\x20is\x20bound.\x20Compensation\x20is\x20claimed\x20via\x20dispute\x20→\x20arbitration()\x20ruling\x20with\x20indemnity\x20→\x20arb_withdraw;\x20without\x20an\x20Arbitration\x20binding\x20there\x20is\x20no\x20dispute\x20path\x20to\x20trigger\x20a\x20payout.','affected_stakeholders':['customer','owner'],'scenario':'Buyer\x20sees\x20a\x20compensation\x20fund\x20but\x20no\x20dispute\x20path\x20to\x20claim\x20it','mitigation':'Require\x20the\x20merchant\x20to\x20bind\x20at\x20least\x20one\x20Arbitration\x20object\x20before\x20ordering.','evidence':'compensation_fund='+b+',\x20arbitrations=0'};return null;}},ALL_RULES=[R_S_1_01,R_S_1_02,R_S_1_03,R_S_1_04,R_S_1_05,R_S_2_01,R_S_2_02,R_S_2_03,R_S_2_04,R_S_2_05,R_S_3_01,R_S_3_02,R_S_3_03,R_S_3_04,R_S_4_01,R_S_4_02,R_S_4_03,R_S_4_04,R_S_4_05,R_S_4_06,R_S_5_01,R_S_5_02,R_S_5_03,R_S_5_04,R_S_5_05];export const SERVICE_RISK_VERSION='1.1.0';export function getAllServiceRiskRules(){return[...ALL_RULES];}export function getServiceRiskRulesCount(){return ALL_RULES['length'];}export function getServiceRiskRulesByCategory(a){return ALL_RULES['filter'](b=>b['category']===a);}export function assessServiceRisks(a){const b=[];for(const f of ALL_RULES){const g=f['check'](a);if(g)b['push'](g);}const c=b['length']===0x0?'LOW':b['some'](h=>h['level']==='CRITICAL')?'CRITICAL':b['some'](h=>h['level']==='HIGH')?'HIGH':b['some'](h=>h['level']==='MEDIUM')?'MEDIUM':'LOW',d={};for(const h of b){d[h['category']]=(d[h['category']]??0x0)+0x1;}const e={};for(const i of b){for(const j of i['affected_stakeholders']){if(!e[j])e[j]=[];e[j]['push'](i['id']+':\x20'+i['mitigation']);}}return{'summary':'Assessed\x20'+b['length']+'\x20risk(s)\x20across\x20'+Object['keys'](d)['length']+'\x20categories','risks':b,'overall_risk':c,'risks_by_category':d,'stakeholder_advice':e,'needs_human_review':b['some'](k=>k['level']==='CRITICAL'||k['level']==='HIGH')};}