@wowok/agent-mcp 2.7.1 → 2.7.3

package/dist/knowledge/treasury-confirm.js

@@ -1,512 +1 @@
-import { assessTreasuryRisks, } from "./treasury-risk.js";
-import { MAX_EXTERNAL_DEPOSIT_GUARD_COUNT, MAX_EXTERNAL_WITHDRAW_GUARD_COUNT, MAX_DESCRIPTION_LENGTH, } from "./treasury-puzzle.js";
-export const TREASURY_PUBLISH_CHECKLIST = [
-    { id: "C-T-01", description: "type_parameter (Coin type T) specified and valid", passed: false, message: "" },
-    { id: "C-T-02", description: "Permission object configured (new or existing)", passed: false, message: "" },
-    { id: "C-T-03", description: "description length <= MAX_DESCRIPTION_LENGTH (4000)", passed: false, message: "" },
-    { id: "C-T-04", description: "external_withdraw_guard.identifier provided (u8, required)", passed: false, message: "" },
-    { id: "C-T-05", description: "external_deposit_guard count <= MAX_EXTERNAL_DEPOSIT_GUARD_COUNT (100)", passed: false, message: "" },
-    { id: "C-T-06", description: "external_withdraw_guard count <= MAX_EXTERNAL_WITHDRAW_GUARD_COUNT (200)", passed: false, message: "" },
-    { id: "C-T-07", description: "withdraw recipient address valid", passed: false, message: "" },
-    { id: "C-T-08", description: "UM address is valid Contact object reference (or null for revoke)", passed: false, message: "" },
-    { id: "C-T-09", description: "withdraw (fixed) / external_withdraw double-confirmed by user", passed: false, message: "" },
-    { id: "C-T-10", description: "Permission indexes align with Move on-chain (no stale 259/260)", passed: false, message: "" },
-];
-function runStaticChecklist(input) {
-    const items = TREASURY_PUBLISH_CHECKLIST.map(c => ({ ...c }));
-    const data = input.treasury_json;
-    const ct01 = items.find(i => i.id === "C-T-01");
-    if (typeof data.object === "object" && data.object !== null) {
-        const obj = data.object;
-        const valid = !!obj.type_parameter && obj.type_parameter.length > 0;
-        ct01.passed = valid;
-        ct01.message = valid ? "" : "type_parameter missing in object (required for creation)";
-    }
-    else if (input.type_parameter) {
-        ct01.passed = true;
-    }
-    else if (typeof data.object === "string") {
-        ct01.passed = true;
-    }
-    else {
-        ct01.passed = false;
-        ct01.message = "Cannot determine type_parameter";
-    }
-    const ct02 = items.find(i => i.id === "C-T-02");
-    if (typeof data.object === "object" && data.object !== null) {
-        const obj = data.object;
-        const valid = !!obj.permission;
-        ct02.passed = valid;
-        ct02.message = valid ? "" : "permission missing in object (required for creation)";
-    }
-    else if (input.permission_address) {
-        ct02.passed = true;
-    }
-    else {
-        ct02.passed = true;
-    }
-    const ct03 = items.find(i => i.id === "C-T-03");
-    if (data.description !== undefined) {
-        const valid = data.description.length <= MAX_DESCRIPTION_LENGTH;
-        ct03.passed = valid;
-        ct03.message = valid ? "" : `Description length ${data.description.length} > ${MAX_DESCRIPTION_LENGTH}`;
-    }
-    else {
-        ct03.passed = true;
-    }
-    const ct04 = items.find(i => i.id === "C-T-04");
-    if (data.external_withdraw_guard && (data.external_withdraw_guard.op === "add" || data.external_withdraw_guard.op === "set")) {
-        const missing = data.external_withdraw_guard.guards.filter(g => g.identifier === undefined || g.identifier === null);
-        const valid = missing.length === 0;
-        ct04.passed = valid;
-        ct04.message = valid ? "" : `${missing.length} withdraw guard(s) missing identifier (u8 required)`;
-    }
-    else {
-        ct04.passed = true;
-    }
-    const ct05 = items.find(i => i.id === "C-T-05");
-    if (data.external_deposit_guard && (data.external_deposit_guard.op === "add" || data.external_deposit_guard.op === "set")) {
-        const current = input.current_external_deposit_guard_count ?? 0;
-        const adding = data.external_deposit_guard.guards.length;
-        const valid = (data.external_deposit_guard.op === "set" ? adding : current + adding) <= MAX_EXTERNAL_DEPOSIT_GUARD_COUNT;
-        ct05.passed = valid;
-        ct05.message = valid ? "" : `deposit_guard count ${data.external_deposit_guard.op === "set" ? adding : current + adding} > ${MAX_EXTERNAL_DEPOSIT_GUARD_COUNT}`;
-    }
-    else {
-        ct05.passed = true;
-    }
-    const ct06 = items.find(i => i.id === "C-T-06");
-    if (data.external_withdraw_guard && (data.external_withdraw_guard.op === "add" || data.external_withdraw_guard.op === "set")) {
-        const current = input.current_external_withdraw_guard_count ?? 0;
-        const adding = data.external_withdraw_guard.guards.length;
-        const valid = (data.external_withdraw_guard.op === "set" ? adding : current + adding) <= MAX_EXTERNAL_WITHDRAW_GUARD_COUNT;
-        ct06.passed = valid;
-        ct06.message = valid ? "" : `withdraw_guard count ${data.external_withdraw_guard.op === "set" ? adding : current + adding} > ${MAX_EXTERNAL_WITHDRAW_GUARD_COUNT}`;
-    }
-    else {
-        ct06.passed = true;
-    }
-    const ct07 = items.find(i => i.id === "C-T-07");
-    if (data.withdraw?.recipient) {
-        const valid = data.withdraw.recipient.startsWith("0x") && data.withdraw.recipient.length >= 40;
-        ct07.passed = valid;
-        ct07.message = valid ? "" : `Recipient ${data.withdraw.recipient} invalid`;
-    }
-    else if (data.withdraw) {
-        ct07.passed = false;
-        ct07.message = "withdraw specified without recipient";
-    }
-    else {
-        ct07.passed = true;
-    }
-    const ct08 = items.find(i => i.id === "C-T-08");
-    if (data.um !== undefined) {
-        const valid = data.um === null || (typeof data.um === "string" && data.um.startsWith("0x") && data.um.length >= 40);
-        ct08.passed = valid;
-        ct08.message = valid ? "" : `UM ${data.um} invalid (must be Contact object address or null)`;
-    }
-    else {
-        ct08.passed = true;
-    }
-    const ct09 = items.find(i => i.id === "C-T-09");
-    if (data.withdraw) {
-        ct09.passed = false;
-        ct09.message = "Pending user confirmation in Layer 3 (QT3/QT4)";
-    }
-    else {
-        ct09.passed = true;
-    }
-    const ct10 = items.find(i => i.id === "C-T-10");
-    const staleIndexes = (input.current_permission_indexes_granted ?? []).filter(i => i === 259 || i === 260);
-    const valid = staleIndexes.length === 0;
-    ct10.passed = valid;
-    ct10.message = valid ? "" : `Stale indexes 259/260 detected: ${staleIndexes.join(",")} (R-T-01 regression)`;
-    return {
-        all_passed: items.filter(i => i.id !== "C-T-09").every(i => i.passed),
-        items,
-    };
-}
-function adaptRiskAssessment(input) {
-    const ctx = {
-        object: typeof input.treasury_json.object === "string" ? input.treasury_json.object : null,
-        description: input.treasury_json.description,
-        deposit: input.treasury_json.deposit ? {
-            coin_balance: input.treasury_json.deposit.coin?.balance,
-            coin_object: input.treasury_json.deposit.coin?.coin_object,
-            by_external_deposit_guard: input.treasury_json.deposit.by_external_deposit_guard,
-        } : undefined,
-        withdraw: input.treasury_json.withdraw ? {
-            amount_fixed: input.treasury_json.withdraw.amount?.fixed,
-            amount_by_external_withdraw_guard: input.treasury_json.withdraw.amount?.by_external_withdraw_guard,
-            recipient: input.treasury_json.withdraw.recipient,
-        } : undefined,
-        external_deposit_guard: input.treasury_json.external_deposit_guard,
-        external_withdraw_guard: input.treasury_json.external_withdraw_guard,
-        owner_receive: input.treasury_json.owner_receive,
-        um: input.treasury_json.um,
-        permission_address: input.permission_address,
-        type_parameter: input.type_parameter,
-        current_balance: input.current_balance,
-        current_external_deposit_guard_count: input.current_external_deposit_guard_count,
-        current_external_withdraw_guard_count: input.current_external_withdraw_guard_count,
-        shared_with_service: input.shared_with_service,
-        shared_with_allocator: input.shared_with_allocator,
-        shared_with_arbitration: input.shared_with_arbitration,
-        current_permission_indexes_granted: input.current_permission_indexes_granted,
-    };
-    return assessTreasuryRisks(ctx);
-}
-export const TREASURY_CONFIRMATION_QUESTIONS = [
-    {
-        id: "QT1",
-        question: "Is the Coin type T (type_parameter) correct and matching all expected deposit/withdraw operations?",
-        requires_explicit_yes: true,
-    },
-    {
-        id: "QT2",
-        question: "Is the associated Permission object correctly configured with intended admin/entity/index assignments?",
-        requires_explicit_yes: true,
-    },
-    {
-        id: "QT3",
-        question: "⚠️ If withdrawing (fixed amount): do you confirm the recipient address and amount are correct? This operation is IRREVERSIBLE.",
-        requires_explicit_yes: true,
-        related_risk_ids: ["R-T-4-01"],
-    },
-    {
-        id: "QT4",
-        question: "⚠️ If external_withdraw via Guard: do you confirm the Guard rules match business intent and the identifier points to the correct amount field? IRREVERSIBLE.",
-        requires_explicit_yes: true,
-        related_risk_ids: ["R-T-4-02"],
-    },
-    {
-        id: "QT5",
-        question: "If configuring external_deposit/withdraw_guard: are the Guard table fields correctly typed (number for identifier, address-compatible for store_from_id)?",
-        requires_explicit_yes: true,
-        related_risk_ids: ["R-T-1-04"],
-    },
-    {
-        id: "QT6",
-        question: "If sharing Permission with a Service or referenced by Allocator/Arbitration: have you verified the cross-object consistency (R-T-5-01 / R-T-5-02)?",
-        requires_explicit_yes: false,
-    },
-];
-function processUserConfirmation(input, assessment) {
-    const questions = [...TREASURY_CONFIRMATION_QUESTIONS];
-    if (!input.treasury_json.withdraw?.amount?.fixed) {
-        const idx = questions.findIndex(q => q.id === "QT3");
-        if (idx >= 0)
-            questions.splice(idx, 1);
-    }
-    if (!input.treasury_json.withdraw?.amount?.by_external_withdraw_guard) {
-        const idx = questions.findIndex(q => q.id === "QT4");
-        if (idx >= 0)
-            questions.splice(idx, 1);
-    }
-    if (!input.treasury_json.external_deposit_guard && !input.treasury_json.external_withdraw_guard) {
-        const idx = questions.findIndex(q => q.id === "QT5");
-        if (idx >= 0)
-            questions.splice(idx, 1);
-    }
-    if (!input.shared_with_service && !input.shared_with_allocator && !input.shared_with_arbitration) {
-        const idx = questions.findIndex(q => q.id === "QT6");
-        if (idx >= 0)
-            questions.splice(idx, 1);
-    }
-    if (input.skip_user_confirmation) {
-        return {
-            questions_asked: questions,
-            responses: questions.map(q => ({ question_id: q.id, response: "yes" })),
-            all_confirmed: true,
-        };
-    }
-    return {
-        questions_asked: questions,
-        responses: [],
-        all_confirmed: false,
-    };
-}
-function verifyEnvironment(input) {
-    const checks = [];
-    if (typeof input.treasury_json.object === "string") {
-        checks.push({
-            name: "treasury_object_exists",
-            passed: true,
-            message: `Treasury object ${input.treasury_json.object} assumed to exist`,
-        });
-    }
-    if (input.permission_address || typeof input.treasury_json.object === "object") {
-        checks.push({
-            name: "permission_object_exists",
-            passed: true,
-            message: "Permission object exists and is bound to Treasury",
-        });
-    }
-    const requiredPerms = [];
-    if (input.treasury_json.deposit && !input.treasury_json.deposit.by_external_deposit_guard) {
-        requiredPerms.push(252);
-    }
-    if (input.treasury_json.withdraw?.amount?.fixed)
-        requiredPerms.push(254);
-    if (input.treasury_json.external_deposit_guard)
-        requiredPerms.push(255);
-    if (input.treasury_json.external_withdraw_guard)
-        requiredPerms.push(256);
-    if (input.treasury_json.owner_receive)
-        requiredPerms.push(257);
-    if (input.treasury_json.um !== undefined)
-        requiredPerms.push(258);
-    if (input.treasury_json.receive)
-        requiredPerms.push(253);
-    if (requiredPerms.length > 0) {
-        const granted = input.current_permission_indexes_granted ?? [];
-        const missing = requiredPerms.filter(p => !granted.includes(p));
-        checks.push({
-            name: "signer_has_required_permissions",
-            passed: missing.length === 0,
-            message: missing.length === 0
-                ? `Signer has all required indexes: ${requiredPerms.join(",")}`
-                : `Signer missing required indexes: ${missing.join(",")} (granted: ${granted.join(",")})`,
-        });
-    }
-    if (input.treasury_json.deposit?.by_external_deposit_guard ||
-        input.treasury_json.withdraw?.amount?.by_external_withdraw_guard) {
-        checks.push({
-            name: "passport_provided_for_external_ops",
-            passed: true,
-            message: "External operations require Passport submission (verified at SDK call time)",
-        });
-    }
-    if (input.treasury_json.withdraw?.amount?.fixed && input.current_balance) {
-        const amount = BigInt(input.treasury_json.withdraw.amount.fixed);
-        const balance = BigInt(input.current_balance);
-        const sufficient = amount <= balance;
-        checks.push({
-            name: "balance_sufficient_for_withdraw",
-            passed: sufficient,
-            message: sufficient
-                ? `Balance ${input.current_balance} >= withdraw ${input.treasury_json.withdraw.amount.fixed}`
-                : `Balance ${input.current_balance} < withdraw ${input.treasury_json.withdraw.amount.fixed} (E_WITHDRAW_INSUFFICIENT_AMOUNT)`,
-        });
-    }
-    const allPassed = checks.every(c => c.passed);
-    return { passed: allPassed, checks };
-}
-export const TREASURY_CONFIRM_VERSION = "1.0.0";
-export function runTreasuryConfirmGate(input) {
-    const layersPassed = [];
-    const layersFailed = [];
-    const checklist = runStaticChecklist(input);
-    if (!checklist.all_passed) {
-        layersFailed.push("L1_checklist");
-        return {
-            status: "blocked_checklist",
-            checklist_result: checklist,
-            confirmation_text: generateConfirmationText(input, checklist),
-            block_reason: `Checklist failed: ${checklist.items.filter(i => !i.passed).map(i => i.id).join(", ")}`,
-            decision_record: {
-                timestamp: new Date().toISOString(),
-                gate_version: TREASURY_CONFIRM_VERSION,
-                final_status: "blocked_checklist",
-                layers_passed: layersPassed,
-                layers_failed: layersFailed,
-            },
-        };
-    }
-    layersPassed.push("L1_checklist");
-    const assessment = adaptRiskAssessment(input);
-    const hasCritical = assessment.risks.some(r => r.level === "CRITICAL");
-    if (hasCritical) {
-        layersFailed.push("L2_risk");
-        return {
-            status: "blocked_risk",
-            checklist_result: checklist,
-            risk_result: assessment,
-            confirmation_text: generateConfirmationText(input, checklist, assessment),
-            block_reason: `CRITICAL risks: ${assessment.risks.filter(r => r.level === "CRITICAL").map(r => r.id).join(", ")}`,
-            decision_record: {
-                timestamp: new Date().toISOString(),
-                gate_version: TREASURY_CONFIRM_VERSION,
-                final_status: "blocked_risk",
-                layers_passed: layersPassed,
-                layers_failed: layersFailed,
-            },
-        };
-    }
-    layersPassed.push("L2_risk");
-    const userConf = processUserConfirmation(input, assessment);
-    if (!userConf.all_confirmed) {
-        if (input.treasury_json.withdraw) {
-            const ct09 = checklist.items.find(i => i.id === "C-T-09");
-            if (ct09) {
-                const qt3 = userConf.responses.find(r => r.question_id === "QT3");
-                const qt4 = userConf.responses.find(r => r.question_id === "QT4");
-                const relevantResponses = [qt3, qt4].filter(r => r !== undefined);
-                if (relevantResponses.length > 0) {
-                    ct09.passed = relevantResponses.every(r => r?.response === "yes");
-                    ct09.message = ct09.passed ? "" : "Withdraw not confirmed by user";
-                }
-            }
-        }
-        if (input.treasury_json.withdraw) {
-            const ct09 = checklist.items.find(i => i.id === "C-T-09");
-            if (ct09 && !ct09.passed) {
-                layersFailed.push("L3_user");
-                return {
-                    status: "blocked_user",
-                    checklist_result: checklist,
-                    risk_result: assessment,
-                    user_confirmation: userConf,
-                    confirmation_text: generateConfirmationText(input, checklist, assessment),
-                    block_reason: "User did not confirm withdraw operation",
-                    decision_record: {
-                        timestamp: new Date().toISOString(),
-                        gate_version: TREASURY_CONFIRM_VERSION,
-                        final_status: "blocked_user",
-                        layers_passed: layersPassed,
-                        layers_failed: layersFailed,
-                    },
-                };
-            }
-        }
-    }
-    layersPassed.push("L3_user");
-    if (input.skip_environment_check) {
-        layersPassed.push("L4_environment");
-    }
-    else {
-        const env = verifyEnvironment(input);
-        if (!env.passed) {
-            layersFailed.push("L4_environment");
-            return {
-                status: "blocked_environment",
-                checklist_result: checklist,
-                risk_result: assessment,
-                user_confirmation: userConf,
-                environment_result: env,
-                confirmation_text: generateConfirmationText(input, checklist, assessment),
-                block_reason: `Environment check failed: ${env.checks.filter(c => !c.passed).map(c => c.name).join(", ")}`,
-                decision_record: {
-                    timestamp: new Date().toISOString(),
-                    gate_version: TREASURY_CONFIRM_VERSION,
-                    final_status: "blocked_environment",
-                    layers_passed: layersPassed,
-                    layers_failed: layersFailed,
-                },
-            };
-        }
-        layersPassed.push("L4_environment");
-    }
-    return {
-        status: "approved",
-        checklist_result: checklist,
-        risk_result: assessment,
-        user_confirmation: userConf,
-        confirmation_text: generateConfirmationText(input, checklist, assessment),
-        decision_record: {
-            timestamp: new Date().toISOString(),
-            gate_version: TREASURY_CONFIRM_VERSION,
-            final_status: "approved",
-            layers_passed: layersPassed,
-            layers_failed: layersFailed,
-        },
-    };
-}
-function generateConfirmationText(input, checklist, assessment) {
-    const lines = [];
-    const data = input.treasury_json;
-    lines.push("═══ Treasury Confirmation ═══");
-    lines.push("");
-    if (typeof data.object === "string") {
-        lines.push(`Treasury: ${data.object}`);
-    }
-    else if (typeof data.object === "object" && data.object !== null) {
-        const obj = data.object;
-        lines.push(`Treasury: NEW (name=${obj.name ?? "?"}, T=${obj.type_parameter ?? "?"})`);
-    }
-    else {
-        lines.push("Treasury: (invalid object field)");
-    }
-    if (data.description)
-        lines.push(`Description: ${data.description}`);
-    if (input.type_parameter)
-        lines.push(`Type parameter: ${input.type_parameter}`);
-    lines.push("");
-    lines.push("─ Checklist ──────────────────");
-    for (const item of checklist.items) {
-        const mark = item.passed ? "✓" : "✗";
-        lines.push(`  ${mark} ${item.id}: ${item.description}${item.message ? " — " + item.message : ""}`);
-    }
-    lines.push("");
-    if (assessment) {
-        lines.push("─ Risk Assessment ──────────────────");
-        lines.push(`Overall: ${assessment.overall_risk}`);
-        lines.push(`Detected: ${assessment.risks.length} risk(s)`);
-        for (const r of assessment.risks) {
-            lines.push(`  [${r.level}] ${r.id}: ${r.title}`);
-        }
-        lines.push("");
-    }
-    lines.push("─ Operations ──────────────────");
-    if (data.deposit) {
-        if (data.deposit.by_external_deposit_guard) {
-            lines.push(`- External deposit via guard: ${data.deposit.by_external_deposit_guard}`);
-        }
-        else {
-            lines.push(`- Internal deposit (Permission 252)`);
-        }
-    }
-    if (data.withdraw) {
-        if (data.withdraw.amount?.fixed) {
-            lines.push(`- ⚠️ Internal withdraw (Permission 254): ${data.withdraw.amount.fixed} to ${data.withdraw.recipient ?? "?"}`);
-        }
-        else if (data.withdraw.amount?.by_external_withdraw_guard) {
-            lines.push(`- ⚠️ External withdraw via guard: ${data.withdraw.amount.by_external_withdraw_guard} to ${data.withdraw.recipient ?? "?"}`);
-        }
-    }
-    if (data.receive)
-        lines.push(`- Receive CoinWrapper (Permission 253)`);
-    if (data.owner_receive)
-        lines.push(`- owner_receive forward (Permission 257)`);
-    if (data.external_deposit_guard)
-        lines.push(`- Manage external_deposit_guard (Permission 255): op=${data.external_deposit_guard.op}`);
-    if (data.external_withdraw_guard)
-        lines.push(`- Manage external_withdraw_guard (Permission 256): op=${data.external_withdraw_guard.op}`);
-    if (data.um !== undefined)
-        lines.push(`- UM: ${data.um ?? "(revoke)"}`);
-    lines.push("");
-    return lines.join("\n");
-}
-export function progressiveTreasuryCheck(input) {
-    const checklist = runStaticChecklist(input);
-    if (!checklist.all_passed) {
-        return {
-            stage: "checklist",
-            status: "fail",
-            message: `Checklist failed: ${checklist.items.filter(i => !i.passed).map(i => i.id).join(", ")}`,
-            next_action: "Fix failing checklist items",
-        };
-    }
-    const assessment = adaptRiskAssessment(input);
-    if (assessment.risks.some(r => r.level === "CRITICAL")) {
-        return {
-            stage: "risk",
-            status: "fail",
-            message: `CRITICAL risks: ${assessment.risks.filter(r => r.level === "CRITICAL").map(r => r.id).join(", ")}`,
-            next_action: "Resolve CRITICAL risks before proceeding (especially withdraw irreversibility)",
-        };
-    }
-    if (assessment.needs_human_review) {
-        return {
-            stage: "confirmation",
-            status: "pending",
-            message: "Human review required for HIGH risks (withdraw/external operations)",
-            next_action: "Confirm risk acceptance via QT1-QT6 questions",
-        };
-    }
-    return {
-        stage: "complete",
-        status: "pass",
-        message: "All checks passed",
-    };
-}
+import{assessTreasuryRisks}from'./treasury-risk.js';import{MAX_EXTERNAL_DEPOSIT_GUARD_COUNT,MAX_EXTERNAL_WITHDRAW_GUARD_COUNT,MAX_DESCRIPTION_LENGTH}from'./treasury-puzzle.js';export const TREASURY_PUBLISH_CHECKLIST=[{'id':'C-T-01','description':'type_parameter\x20(Coin\x20type\x20T)\x20specified\x20and\x20valid','passed':![],'message':''},{'id':'C-T-02','description':'Permission\x20object\x20configured\x20(new\x20or\x20existing)','passed':![],'message':''},{'id':'C-T-03','description':'description\x20length\x20<=\x20MAX_DESCRIPTION_LENGTH\x20(4000)','passed':![],'message':''},{'id':'C-T-04','description':'external_withdraw_guard.identifier\x20provided\x20(u8,\x20required)','passed':![],'message':''},{'id':'C-T-05','description':'external_deposit_guard\x20count\x20<=\x20MAX_EXTERNAL_DEPOSIT_GUARD_COUNT\x20(100)','passed':![],'message':''},{'id':'C-T-06','description':'external_withdraw_guard\x20count\x20<=\x20MAX_EXTERNAL_WITHDRAW_GUARD_COUNT\x20(200)','passed':![],'message':''},{'id':'C-T-07','description':'withdraw\x20recipient\x20address\x20valid','passed':![],'message':''},{'id':'C-T-08','description':'UM\x20address\x20is\x20valid\x20Contact\x20object\x20reference\x20(or\x20null\x20for\x20revoke)','passed':![],'message':''},{'id':'C-T-09','description':'withdraw\x20(fixed)\x20/\x20external_withdraw\x20double-confirmed\x20by\x20user','passed':![],'message':''},{'id':'C-T-10','description':'Permission\x20indexes\x20align\x20with\x20Move\x20on-chain\x20(no\x20stale\x20259/260)','passed':![],'message':''}];function runStaticChecklist(a){const b=TREASURY_PUBLISH_CHECKLIST['map'](p=>({...p})),c=a['treasury_json'],d=b['find'](p=>p['id']==='C-T-01');if(typeof c['object']==='object'&&c['object']!==null){const p=c['object'],q=!!p['type_parameter']&&p['type_parameter']['length']>0x0;d['passed']=q,d['message']=q?'':'type_parameter\x20missing\x20in\x20object\x20(required\x20for\x20creation)';}else{if(a['type_parameter'])d['passed']=!![];else typeof c['object']==='string'?d['passed']=!![]:(d['passed']=![],d['message']='Cannot\x20determine\x20type_parameter');}const e=b['find'](r=>r['id']==='C-T-02');if(typeof c['object']==='object'&&c['object']!==null){const r=c['object'],s=!!r['permission'];e['passed']=s,e['message']=s?'':'permission\x20missing\x20in\x20object\x20(required\x20for\x20creation)';}else a['permission_address']?e['passed']=!![]:e['passed']=!![];const f=b['find'](t=>t['id']==='C-T-03');if(c['description']!==undefined){const t=c['description']['length']<=MAX_DESCRIPTION_LENGTH;f['passed']=t,f['message']=t?'':'Description\x20length\x20'+c['description']['length']+'\x20>\x20'+MAX_DESCRIPTION_LENGTH;}else f['passed']=!![];const g=b['find'](u=>u['id']==='C-T-04');if(c['external_withdraw_guard']&&(c['external_withdraw_guard']['op']==='add'||c['external_withdraw_guard']['op']==='set')){const u=c['external_withdraw_guard']['guards']['filter'](w=>w['identifier']===undefined||w['identifier']===null),v=u['length']===0x0;g['passed']=v,g['message']=v?'':u['length']+'\x20withdraw\x20guard(s)\x20missing\x20identifier\x20(u8\x20required)';}else g['passed']=!![];const h=b['find'](w=>w['id']==='C-T-05');if(c['external_deposit_guard']&&(c['external_deposit_guard']['op']==='add'||c['external_deposit_guard']['op']==='set')){const w=a['current_external_deposit_guard_count']??0x0,x=c['external_deposit_guard']['guards']['length'],y=(c['external_deposit_guard']['op']==='set'?x:w+x)<=MAX_EXTERNAL_DEPOSIT_GUARD_COUNT;h['passed']=y,h['message']=y?'':'deposit_guard\x20count\x20'+(c['external_deposit_guard']['op']==='set'?x:w+x)+'\x20>\x20'+MAX_EXTERNAL_DEPOSIT_GUARD_COUNT;}else h['passed']=!![];const i=b['find'](z=>z['id']==='C-T-06');if(c['external_withdraw_guard']&&(c['external_withdraw_guard']['op']==='add'||c['external_withdraw_guard']['op']==='set')){const z=a['current_external_withdraw_guard_count']??0x0,A=c['external_withdraw_guard']['guards']['length'],B=(c['external_withdraw_guard']['op']==='set'?A:z+A)<=MAX_EXTERNAL_WITHDRAW_GUARD_COUNT;i['passed']=B,i['message']=B?'':'withdraw_guard\x20count\x20'+(c['external_withdraw_guard']['op']==='set'?A:z+A)+'\x20>\x20'+MAX_EXTERNAL_WITHDRAW_GUARD_COUNT;}else i['passed']=!![];const j=b['find'](C=>C['id']==='C-T-07');if(c['withdraw']?.['recipient']){const C=c['withdraw']['recipient']['startsWith']('0x')&&c['withdraw']['recipient']['length']>=0x28;j['passed']=C,j['message']=C?'':'Recipient\x20'+c['withdraw']['recipient']+'\x20invalid';}else c['withdraw']?(j['passed']=![],j['message']='withdraw\x20specified\x20without\x20recipient'):j['passed']=!![];const k=b['find'](D=>D['id']==='C-T-08');if(c['um']!==undefined){const D=c['um']===null||typeof c['um']==='string'&&c['um']['startsWith']('0x')&&c['um']['length']>=0x28;k['passed']=D,k['message']=D?'':'UM\x20'+c['um']+'\x20invalid\x20(must\x20be\x20Contact\x20object\x20address\x20or\x20null)';}else k['passed']=!![];const l=b['find'](E=>E['id']==='C-T-09');c['withdraw']?(l['passed']=![],l['message']='Pending\x20user\x20confirmation\x20in\x20Layer\x203\x20(QT3/QT4)'):l['passed']=!![];const m=b['find'](E=>E['id']==='C-T-10'),n=(a['current_permission_indexes_granted']??[])['filter'](E=>E===0x103||E===0x104),o=n['length']===0x0;return m['passed']=o,m['message']=o?'':'Stale\x20indexes\x20259/260\x20detected:\x20'+n['join'](',')+'\x20(R-T-01\x20regression)',{'all_passed':b['filter'](E=>E['id']!=='C-T-09')['every'](E=>E['passed']),'items':b};}function adaptRiskAssessment(a){const b={'object':typeof a['treasury_json']['object']==='string'?a['treasury_json']['object']:null,'description':a['treasury_json']['description'],'deposit':a['treasury_json']['deposit']?{'coin_balance':a['treasury_json']['deposit']['coin']?.['balance'],'coin_object':a['treasury_json']['deposit']['coin']?.['coin_object'],'by_external_deposit_guard':a['treasury_json']['deposit']['by_external_deposit_guard']}:undefined,'withdraw':a['treasury_json']['withdraw']?{'amount_fixed':a['treasury_json']['withdraw']['amount']?.['fixed'],'amount_by_external_withdraw_guard':a['treasury_json']['withdraw']['amount']?.['by_external_withdraw_guard'],'recipient':a['treasury_json']['withdraw']['recipient']}:undefined,'external_deposit_guard':a['treasury_json']['external_deposit_guard'],'external_withdraw_guard':a['treasury_json']['external_withdraw_guard'],'owner_receive':a['treasury_json']['owner_receive'],'um':a['treasury_json']['um'],'permission_address':a['permission_address'],'type_parameter':a['type_parameter'],'current_balance':a['current_balance'],'current_external_deposit_guard_count':a['current_external_deposit_guard_count'],'current_external_withdraw_guard_count':a['current_external_withdraw_guard_count'],'shared_with_service':a['shared_with_service'],'shared_with_allocator':a['shared_with_allocator'],'shared_with_arbitration':a['shared_with_arbitration'],'current_permission_indexes_granted':a['current_permission_indexes_granted']};return assessTreasuryRisks(b);}export const TREASURY_CONFIRMATION_QUESTIONS=[{'id':'QT1','question':'Is\x20the\x20Coin\x20type\x20T\x20(type_parameter)\x20correct\x20and\x20matching\x20all\x20expected\x20deposit/withdraw\x20operations?','requires_explicit_yes':!![]},{'id':'QT2','question':'Is\x20the\x20associated\x20Permission\x20object\x20correctly\x20configured\x20with\x20intended\x20admin/entity/index\x20assignments?','requires_explicit_yes':!![]},{'id':'QT3','question':'⚠️\x20If\x20withdrawing\x20(fixed\x20amount):\x20do\x20you\x20confirm\x20the\x20recipient\x20address\x20and\x20amount\x20are\x20correct?\x20This\x20operation\x20is\x20IRREVERSIBLE.','requires_explicit_yes':!![],'related_risk_ids':['R-T-4-01']},{'id':'QT4','question':'⚠️\x20If\x20external_withdraw\x20via\x20Guard:\x20do\x20you\x20confirm\x20the\x20Guard\x20rules\x20match\x20business\x20intent\x20and\x20the\x20identifier\x20points\x20to\x20the\x20correct\x20amount\x20field?\x20IRREVERSIBLE.','requires_explicit_yes':!![],'related_risk_ids':['R-T-4-02']},{'id':'QT5','question':'If\x20configuring\x20external_deposit/withdraw_guard:\x20are\x20the\x20Guard\x20table\x20fields\x20correctly\x20typed\x20(number\x20for\x20identifier,\x20address-compatible\x20for\x20store_from_id)?','requires_explicit_yes':!![],'related_risk_ids':['R-T-1-04']},{'id':'QT6','question':'If\x20sharing\x20Permission\x20with\x20a\x20Service\x20or\x20referenced\x20by\x20Allocator/Arbitration:\x20have\x20you\x20verified\x20the\x20cross-object\x20consistency\x20(R-T-5-01\x20/\x20R-T-5-02)?','requires_explicit_yes':![]}];function processUserConfirmation(a,b){const c=[...TREASURY_CONFIRMATION_QUESTIONS];if(!a['treasury_json']['withdraw']?.['amount']?.['fixed']){const d=c['findIndex'](e=>e['id']==='QT3');if(d>=0x0)c['splice'](d,0x1);}if(!a['treasury_json']['withdraw']?.['amount']?.['by_external_withdraw_guard']){const e=c['findIndex'](f=>f['id']==='QT4');if(e>=0x0)c['splice'](e,0x1);}if(!a['treasury_json']['external_deposit_guard']&&!a['treasury_json']['external_withdraw_guard']){const f=c['findIndex'](g=>g['id']==='QT5');if(f>=0x0)c['splice'](f,0x1);}if(!a['shared_with_service']&&!a['shared_with_allocator']&&!a['shared_with_arbitration']){const g=c['findIndex'](h=>h['id']==='QT6');if(g>=0x0)c['splice'](g,0x1);}if(a['skip_user_confirmation'])return{'questions_asked':c,'responses':c['map'](h=>({'question_id':h['id'],'response':'yes'})),'all_confirmed':!![]};return{'questions_asked':c,'responses':[],'all_confirmed':![]};}function verifyEnvironment(a){const b=[];typeof a['treasury_json']['object']==='string'&&b['push']({'name':'treasury_object_exists','passed':!![],'message':'Treasury\x20object\x20'+a['treasury_json']['object']+'\x20assumed\x20to\x20exist'});(a['permission_address']||typeof a['treasury_json']['object']==='object')&&b['push']({'name':'permission_object_exists','passed':!![],'message':'Permission\x20object\x20exists\x20and\x20is\x20bound\x20to\x20Treasury'});const c=[];a['treasury_json']['deposit']&&!a['treasury_json']['deposit']['by_external_deposit_guard']&&c['push'](0xfc);if(a['treasury_json']['withdraw']?.['amount']?.['fixed'])c['push'](0xfe);if(a['treasury_json']['external_deposit_guard'])c['push'](0xff);if(a['treasury_json']['external_withdraw_guard'])c['push'](0x100);if(a['treasury_json']['owner_receive'])c['push'](0x101);if(a['treasury_json']['um']!==undefined)c['push'](0x102);if(a['treasury_json']['receive'])c['push'](0xfd);if(c['length']>0x0){const e=a['current_permission_indexes_granted']??[],f=c['filter'](g=>!e['includes'](g));b['push']({'name':'signer_has_required_permissions','passed':f['length']===0x0,'message':f['length']===0x0?'Signer\x20has\x20all\x20required\x20indexes:\x20'+c['join'](','):'Signer\x20missing\x20required\x20indexes:\x20'+f['join'](',')+'\x20(granted:\x20'+e['join'](',')+')'});}(a['treasury_json']['deposit']?.['by_external_deposit_guard']||a['treasury_json']['withdraw']?.['amount']?.['by_external_withdraw_guard'])&&b['push']({'name':'passport_provided_for_external_ops','passed':!![],'message':'External\x20operations\x20require\x20Passport\x20submission\x20(verified\x20at\x20SDK\x20call\x20time)'});if(a['treasury_json']['withdraw']?.['amount']?.['fixed']&&a['current_balance']){const g=BigInt(a['treasury_json']['withdraw']['amount']['fixed']),h=BigInt(a['current_balance']),i=g<=h;b['push']({'name':'balance_sufficient_for_withdraw','passed':i,'message':i?'Balance\x20'+a['current_balance']+'\x20>=\x20withdraw\x20'+a['treasury_json']['withdraw']['amount']['fixed']:'Balance\x20'+a['current_balance']+'\x20<\x20withdraw\x20'+a['treasury_json']['withdraw']['amount']['fixed']+'\x20(E_WITHDRAW_INSUFFICIENT_AMOUNT)'});}const d=b['every'](j=>j['passed']);return{'passed':d,'checks':b};}export const TREASURY_CONFIRM_VERSION='1.0.0';export function runTreasuryConfirmGate(a){const b=[],c=[],d=runStaticChecklist(a);if(!d['all_passed'])return c['push']('L1_checklist'),{'status':'blocked_checklist','checklist_result':d,'confirmation_text':generateConfirmationText(a,d),'block_reason':'Checklist\x20failed:\x20'+d['items']['filter'](h=>!h['passed'])['map'](h=>h['id'])['join'](',\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':TREASURY_CONFIRM_VERSION,'final_status':'blocked_checklist','layers_passed':b,'layers_failed':c}};b['push']('L1_checklist');const e=adaptRiskAssessment(a),f=e['risks']['some'](h=>h['level']==='CRITICAL');if(f)return c['push']('L2_risk'),{'status':'blocked_risk','checklist_result':d,'risk_result':e,'confirmation_text':generateConfirmationText(a,d,e),'block_reason':'CRITICAL\x20risks:\x20'+e['risks']['filter'](h=>h['level']==='CRITICAL')['map'](h=>h['id'])['join'](',\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':TREASURY_CONFIRM_VERSION,'final_status':'blocked_risk','layers_passed':b,'layers_failed':c}};b['push']('L2_risk');const g=processUserConfirmation(a,e);if(!g['all_confirmed']){if(a['treasury_json']['withdraw']){const h=d['items']['find'](j=>j['id']==='C-T-09');if(h){const i=g['responses']['find'](l=>l['question_id']==='QT3'),j=g['responses']['find'](l=>l['question_id']==='QT4'),k=[i,j]['filter'](l=>l!==undefined);k['length']>0x0&&(h['passed']=k['every'](l=>l?.['response']==='yes'),h['message']=h['passed']?'':'Withdraw\x20not\x20confirmed\x20by\x20user');}}if(a['treasury_json']['withdraw']){const l=d['items']['find'](m=>m['id']==='C-T-09');if(l&&!l['passed'])return c['push']('L3_user'),{'status':'blocked_user','checklist_result':d,'risk_result':e,'user_confirmation':g,'confirmation_text':generateConfirmationText(a,d,e),'block_reason':'User\x20did\x20not\x20confirm\x20withdraw\x20operation','decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':TREASURY_CONFIRM_VERSION,'final_status':'blocked_user','layers_passed':b,'layers_failed':c}};}}b['push']('L3_user');if(a['skip_environment_check'])b['push']('L4_environment');else{const m=verifyEnvironment(a);if(!m['passed'])return c['push']('L4_environment'),{'status':'blocked_environment','checklist_result':d,'risk_result':e,'user_confirmation':g,'environment_result':m,'confirmation_text':generateConfirmationText(a,d,e),'block_reason':'Environment\x20check\x20failed:\x20'+m['checks']['filter'](n=>!n['passed'])['map'](n=>n['name'])['join'](',\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':TREASURY_CONFIRM_VERSION,'final_status':'blocked_environment','layers_passed':b,'layers_failed':c}};b['push']('L4_environment');}return{'status':'approved','checklist_result':d,'risk_result':e,'user_confirmation':g,'confirmation_text':generateConfirmationText(a,d,e),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':TREASURY_CONFIRM_VERSION,'final_status':'approved','layers_passed':b,'layers_failed':c}};}function generateConfirmationText(a,b,c){const d=[],e=a['treasury_json'];d['push']('═══\x20Treasury\x20Confirmation\x20═══'),d['push']('');if(typeof e['object']==='string')d['push']('Treasury:\x20'+e['object']);else{if(typeof e['object']==='object'&&e['object']!==null){const f=e['object'];d['push']('Treasury:\x20NEW\x20(name='+(f['name']??'?')+',\x20T='+(f['type_parameter']??'?')+')');}else d['push']('Treasury:\x20(invalid\x20object\x20field)');}if(e['description'])d['push']('Description:\x20'+e['description']);if(a['type_parameter'])d['push']('Type\x20parameter:\x20'+a['type_parameter']);d['push'](''),d['push']('─\x20Checklist\x20──────────────────');for(const g of b['items']){const h=g['passed']?'✓':'✗';d['push']('\x20\x20'+h+'\x20'+g['id']+':\x20'+g['description']+(g['message']?'\x20—\x20'+g['message']:''));}d['push']('');if(c){d['push']('─\x20Risk\x20Assessment\x20──────────────────'),d['push']('Overall:\x20'+c['overall_risk']),d['push']('Detected:\x20'+c['risks']['length']+'\x20risk(s)');for(const i of c['risks']){d['push']('\x20\x20['+i['level']+']\x20'+i['id']+':\x20'+i['title']);}d['push']('');}d['push']('─\x20Operations\x20──────────────────');e['deposit']&&(e['deposit']['by_external_deposit_guard']?d['push']('-\x20External\x20deposit\x20via\x20guard:\x20'+e['deposit']['by_external_deposit_guard']):d['push']('-\x20Internal\x20deposit\x20(Permission\x20252)'));if(e['withdraw']){if(e['withdraw']['amount']?.['fixed'])d['push']('-\x20⚠️\x20Internal\x20withdraw\x20(Permission\x20254):\x20'+e['withdraw']['amount']['fixed']+'\x20to\x20'+(e['withdraw']['recipient']??'?'));else e['withdraw']['amount']?.['by_external_withdraw_guard']&&d['push']('-\x20⚠️\x20External\x20withdraw\x20via\x20guard:\x20'+e['withdraw']['amount']['by_external_withdraw_guard']+'\x20to\x20'+(e['withdraw']['recipient']??'?'));}if(e['receive'])d['push']('-\x20Receive\x20CoinWrapper\x20(Permission\x20253)');if(e['owner_receive'])d['push']('-\x20owner_receive\x20forward\x20(Permission\x20257)');if(e['external_deposit_guard'])d['push']('-\x20Manage\x20external_deposit_guard\x20(Permission\x20255):\x20op='+e['external_deposit_guard']['op']);if(e['external_withdraw_guard'])d['push']('-\x20Manage\x20external_withdraw_guard\x20(Permission\x20256):\x20op='+e['external_withdraw_guard']['op']);if(e['um']!==undefined)d['push']('-\x20UM:\x20'+(e['um']??'(revoke)'));return d['push'](''),d['join']('\x0a');}export function progressiveTreasuryCheck(a){const b=runStaticChecklist(a);if(!b['all_passed'])return{'stage':'checklist','status':'fail','message':'Checklist\x20failed:\x20'+b['items']['filter'](d=>!d['passed'])['map'](d=>d['id'])['join'](',\x20'),'next_action':'Fix\x20failing\x20checklist\x20items'};const c=adaptRiskAssessment(a);if(c['risks']['some'](d=>d['level']==='CRITICAL'))return{'stage':'risk','status':'fail','message':'CRITICAL\x20risks:\x20'+c['risks']['filter'](d=>d['level']==='CRITICAL')['map'](d=>d['id'])['join'](',\x20'),'next_action':'Resolve\x20CRITICAL\x20risks\x20before\x20proceeding\x20(especially\x20withdraw\x20irreversibility)'};if(c['needs_human_review'])return{'stage':'confirmation','status':'pending','message':'Human\x20review\x20required\x20for\x20HIGH\x20risks\x20(withdraw/external\x20operations)','next_action':'Confirm\x20risk\x20acceptance\x20via\x20QT1-QT6\x20questions'};return{'stage':'complete','status':'pass','message':'All\x20checks\x20passed'};}