@wowok/agent-mcp 2.7.1 → 2.7.3

package/dist/knowledge/allocation-confirm.js

@@ -1,534 +1 @@
-import { MAX_ALLOCATOR_COUNT, ALLOCATION_MAX_SHARING_COUNT, RATE_TOTAL_FULL, ALLOCATION_ERROR_CODES, isSignerRecipient, isEntityRecipient, } from "./allocation-ledger.js";
-import { assessAllocationRisks, } from "./allocation-risk.js";
-export const ALLOCATION_PUBLISH_CHECKLIST = [
-    { id: "C-A-01", description: "Allocator count <= MAX_ALLOCATOR_COUNT (100)", passed: false, message: "" },
-    { id: "C-A-02", description: "Sharing count per Allocator <= MAX_SHARING_COUNT (100)", passed: false, message: "" },
-    { id: "C-A-03", description: "At most 1 Surplus sharing per Allocator (EMULTIPLE_SURPLUS)", passed: false, message: "" },
-    { id: "C-A-04", description: "Pure Rate mode sum(rates) == 10000 (ERATE_NOT_10000) OR Rate+Surplus sum <= 10000 (ERATE_EXCEEDS_10000)", passed: false, message: "" },
-    { id: "C-A-05", description: "Pure Amount mode sum(fix) >= threshold (EAMOUNT_BELOW_THRESHOLD)", passed: false, message: "" },
-    { id: "C-A-06", description: "Amount sum(fix) <= max when max is set (EAMOUNT_EXCEEDS_MAX)", passed: false, message: "" },
-    { id: "C-A-07", description: "allocators[].guard unique within the same Allocators (F-A-14)", passed: false, message: "" },
-    { id: "C-A-08", description: "Guard addresses valid (0x prefix, length >= 40)", passed: false, message: "" },
-    { id: "C-A-09", description: "Entity addresses valid (0x prefix, length >= 40)", passed: false, message: "" },
-    { id: "C-A-10", description: "Signer recipients have Guard Signer binding (R-A-2-01 CRITICAL theft risk)", passed: false, message: "" },
-    { id: "C-A-11", description: "payment_info present (required at alloc() time — ENO_PAYMENT_INFO)", passed: false, message: "" },
-    { id: "C-A-12", description: "coin type matches type_parameter (EINSUFFICIENT_BALANCE if mismatch)", passed: false, message: "" },
-];
-function isValidAddress(s) {
-    return typeof s === "string" && s.startsWith("0x") && s.length >= 40;
-}
-function runStaticChecklist(input) {
-    const items = ALLOCATION_PUBLISH_CHECKLIST.map(c => ({ ...c }));
-    const data = input.allocation_json;
-    const isCreate = data.object !== null &&
-        data.object !== undefined &&
-        typeof data.object === "object" &&
-        !Array.isArray(data.object);
-    if (!isCreate) {
-        for (const item of items)
-            item.passed = true;
-        if (typeof data.object === "string") {
-            const objValid = isValidAddress(data.object);
-            items.find(i => i.id === "C-A-08").passed = objValid;
-            items.find(i => i.id === "C-A-08").message = objValid ? "" : `Allocation object address ${data.object} invalid`;
-        }
-        if (data.alloc_by_guard !== undefined) {
-            const guardValid = isValidAddress(data.alloc_by_guard);
-            items.find(i => i.id === "C-A-09").passed = guardValid;
-            items.find(i => i.id === "C-A-09").message = guardValid ? "" : `alloc_by_guard address ${data.alloc_by_guard} invalid`;
-        }
-        return { all_passed: items.every(i => i.passed), items };
-    }
-    const allocatorsData = data.allocators;
-    if (!allocatorsData) {
-        for (const item of items) {
-            if (item.id.startsWith("C-A-0")) {
-                item.passed = false;
-                item.message = "Missing required field: allocators";
-            }
-            else {
-                item.passed = true;
-            }
-        }
-        return { all_passed: false, items };
-    }
-    const allocators = allocatorsData.allocators;
-    const ca01 = items.find(i => i.id === "C-A-01");
-    ca01.passed = allocators.length <= MAX_ALLOCATOR_COUNT;
-    ca01.message = ca01.passed ? "" : `Allocator count ${allocators.length} > ${MAX_ALLOCATOR_COUNT}`;
-    let ca02Ok = true;
-    let ca02Msg = "";
-    for (let i = 0; i < allocators.length; i++) {
-        if (allocators[i].sharing.length > ALLOCATION_MAX_SHARING_COUNT) {
-            ca02Ok = false;
-            ca02Msg = `Allocator ${i} sharing count ${allocators[i].sharing.length} > ${ALLOCATION_MAX_SHARING_COUNT}`;
-            break;
-        }
-    }
-    const ca02 = items.find(i => i.id === "C-A-02");
-    ca02.passed = ca02Ok;
-    ca02.message = ca02Msg;
-    let ca03Ok = true;
-    let ca03Msg = "";
-    for (let i = 0; i < allocators.length; i++) {
-        const surplusCount = allocators[i].sharing.filter(s => s.mode === "Surplus").length;
-        if (surplusCount > 1) {
-            ca03Ok = false;
-            ca03Msg = `Allocator ${i} has ${surplusCount} Surplus (max 1 allowed)`;
-            break;
-        }
-    }
-    const ca03 = items.find(i => i.id === "C-A-03");
-    ca03.passed = ca03Ok;
-    ca03.message = ca03Msg;
-    let ca04Ok = true;
-    let ca04Msg = "";
-    for (let i = 0; i < allocators.length; i++) {
-        const a = allocators[i];
-        const rateSum = a.sharing
-            .filter(s => s.mode === "Rate")
-            .reduce((sum, s) => sum + Number(s.sharing), 0);
-        const hasSurplus = a.sharing.some(s => s.mode === "Surplus");
-        const hasRate = a.sharing.some(s => s.mode === "Rate");
-        if (hasRate && !hasSurplus && rateSum !== RATE_TOTAL_FULL) {
-            ca04Ok = false;
-            ca04Msg = `Allocator ${i} pure Rate sum ${rateSum} != ${RATE_TOTAL_FULL}`;
-            break;
-        }
-        if (hasRate && hasSurplus && rateSum > RATE_TOTAL_FULL) {
-            ca04Ok = false;
-            ca04Msg = `Allocator ${i} Rate+Surplus sum ${rateSum} > ${RATE_TOTAL_FULL}`;
-            break;
-        }
-    }
-    const ca04 = items.find(i => i.id === "C-A-04");
-    ca04.passed = ca04Ok;
-    ca04.message = ca04Msg;
-    let ca05Ok = true;
-    let ca05Msg = "";
-    const threshold = Number(allocatorsData.threshold);
-    for (let i = 0; i < allocators.length; i++) {
-        const a = allocators[i];
-        const hasRate = a.sharing.some(s => s.mode === "Rate");
-        const hasSurplus = a.sharing.some(s => s.mode === "Surplus");
-        const amountSum = a.sharing
-            .filter(s => s.mode === "Amount")
-            .reduce((sum, s) => sum + Number(s.sharing), 0);
-        if (!hasRate && !hasSurplus && amountSum > 0 && amountSum < threshold) {
-            ca05Ok = false;
-            ca05Msg = `Allocator ${i} pure Amount sum ${amountSum} < threshold ${threshold}`;
-            break;
-        }
-    }
-    const ca05 = items.find(i => i.id === "C-A-05");
-    ca05.passed = ca05Ok;
-    ca05.message = ca05Msg;
-    let ca06Ok = true;
-    let ca06Msg = "";
-    for (let i = 0; i < allocators.length; i++) {
-        const a = allocators[i];
-        if (a.max == null)
-            continue;
-        const amountSum = a.sharing
-            .filter(s => s.mode === "Amount")
-            .reduce((sum, s) => sum + Number(s.sharing), 0);
-        if (amountSum > Number(a.max)) {
-            ca06Ok = false;
-            ca06Msg = `Allocator ${i} Amount sum ${amountSum} > max ${Number(a.max)}`;
-            break;
-        }
-    }
-    const ca06 = items.find(i => i.id === "C-A-06");
-    ca06.passed = ca06Ok;
-    ca06.message = ca06Msg;
-    const guardSet = new Set();
-    let ca07Ok = true;
-    let ca07Msg = "";
-    for (let i = 0; i < allocators.length; i++) {
-        if (guardSet.has(allocators[i].guard)) {
-            ca07Ok = false;
-            ca07Msg = `Allocator ${i} guard ${allocators[i].guard} duplicates an earlier Allocator (F-A-14)`;
-            break;
-        }
-        guardSet.add(allocators[i].guard);
-    }
-    const ca07 = items.find(i => i.id === "C-A-07");
-    ca07.passed = ca07Ok;
-    ca07.message = ca07Msg;
-    let ca08Ok = true;
-    let ca08Msg = "";
-    for (let i = 0; i < allocators.length; i++) {
-        if (!isValidAddress(allocators[i].guard)) {
-            ca08Ok = false;
-            ca08Msg = `Allocator ${i} guard address ${allocators[i].guard} invalid`;
-            break;
-        }
-    }
-    const ca08 = items.find(i => i.id === "C-A-08");
-    ca08.passed = ca08Ok;
-    ca08.message = ca08Msg;
-    let ca09Ok = true;
-    let ca09Msg = "";
-    outer: for (let i = 0; i < allocators.length; i++) {
-        for (let j = 0; j < allocators[i].sharing.length; j++) {
-            const s = allocators[i].sharing[j];
-            if (isEntityRecipient(s.who)) {
-                const addr = s.who.Entity;
-                if (!isValidAddress(addr)) {
-                    ca09Ok = false;
-                    ca09Msg = `Allocator ${i} sharing ${j} Entity address ${addr} invalid`;
-                    break outer;
-                }
-            }
-        }
-    }
-    const ca09 = items.find(i => i.id === "C-A-09");
-    ca09.passed = ca09Ok;
-    ca09.message = ca09Msg;
-    let ca10Ok = true;
-    let ca10Msg = "";
-    for (let i = 0; i < allocators.length; i++) {
-        const a = allocators[i];
-        const hasSigner = a.sharing.some(s => isSignerRecipient(s.who));
-        if (!hasSigner)
-            continue;
-        const bound = input.guard_signer_bindings?.[a.guard] === true;
-        if (!bound) {
-            ca10Ok = false;
-            ca10Msg = `Allocator ${i} (guard=${a.guard}) has Signer recipient but no Guard Signer binding — R-A-2-01 CRITICAL theft risk`;
-            break;
-        }
-    }
-    const ca10 = items.find(i => i.id === "C-A-10");
-    ca10.passed = ca10Ok;
-    ca10.message = ca10Msg;
-    const ca11 = items.find(i => i.id === "C-A-11");
-    ca11.passed = data.payment_info !== undefined && data.payment_info !== null;
-    ca11.message = ca11.passed ? "" : "payment_info missing — required at alloc() time (ENO_PAYMENT_INFO=9)";
-    const ca12 = items.find(i => i.id === "C-A-12");
-    const obj = data.object;
-    if (obj.type_parameter && data.coin) {
-        ca12.passed = true;
-        ca12.message = "";
-    }
-    else if (!obj.type_parameter) {
-        ca12.passed = false;
-        ca12.message = "type_parameter missing on object";
-    }
-    else {
-        ca12.passed = false;
-        ca12.message = "coin missing — required for create";
-    }
-    return {
-        all_passed: items.every(i => i.passed),
-        items,
-    };
-}
-function adaptRiskAssessment(input, _checklist) {
-    const ctx = {
-        object: typeof input.allocation_json.object === "string" ? input.allocation_json.object : null,
-        allocators_config: input.allocation_json.allocators,
-        operation_type: input.operation_type ?? "create",
-        has_payment_info: input.allocation_json.payment_info !== undefined,
-        host_service_published: true,
-        referenced_treasuries_permissions: input.referenced_treasuries_permissions,
-        guard_signer_bindings: input.guard_signer_bindings,
-        passport_identifier_types: input.passport_identifier_types,
-        guard_conditions_mutually_exclusive: input.guard_conditions_mutually_exclusive,
-        bound_order: input.bound_order,
-        order_already_has_allocation: input.order_already_has_allocation,
-    };
-    return assessAllocationRisks(ctx);
-}
-export const ALLOCATION_CONFIRMATION_QUESTIONS = [
-    {
-        id: "QA1",
-        question: "Are all Treasury / Entity recipient addresses correctly verified as trusted parties?",
-        requires_explicit_yes: true,
-    },
-    {
-        id: "QA2",
-        question: "If using multiple Allocators (caller-specified guard), are Guard conditions mutually exclusive to prevent caller confusion or silent lockup (alloc_by_guard silently returns on no match)?",
-        requires_explicit_yes: true,
-        related_risk_ids: ["R-A-4-02"],
-    },
-    {
-        id: "QA3",
-        question: "⚠️ If using sharing.who=Signer: is the Guard Signer binding verified (context(Signer)==authorized)? Signer without Guard binding = CRITICAL theft risk.",
-        requires_explicit_yes: true,
-        related_risk_ids: ["R-A-2-01"],
-    },
-    {
-        id: "QA4",
-        question: "If using Amount+Surplus hybrid (refund-first): is threshold set to refund amount (fix) to ensure balance covers the Amount distribution?",
-        requires_explicit_yes: true,
-        related_risk_ids: ["R-A-1-03"],
-    },
-    {
-        id: "QA5",
-        question: "Is payment_info correctly configured? alloc() will abort with ENO_PAYMENT_INFO (9) if missing.",
-        requires_explicit_yes: true,
-        related_risk_ids: ["R-A-5-02"],
-    },
-    {
-        id: "QA6",
-        question: "Has the Allocation been tested on testnet? Allocation is a 'passive object' — once created, allocators cannot be reconfigured.",
-        requires_explicit_yes: false,
-    },
-];
-function processUserConfirmation(input, assessment) {
-    const questions = [...ALLOCATION_CONFIRMATION_QUESTIONS];
-    const hasSignerRecipient = input.allocation_json.allocators?.allocators.some(a => a.sharing.some(s => isSignerRecipient(s.who))) ?? false;
-    if (!hasSignerRecipient) {
-        const idx = questions.findIndex(q => q.id === "QA3");
-        if (idx >= 0)
-            questions.splice(idx, 1);
-    }
-    const allocatorCount = input.allocation_json.allocators?.allocators.length ?? 0;
-    if (allocatorCount <= 1) {
-        const idx = questions.findIndex(q => q.id === "QA2");
-        if (idx >= 0)
-            questions.splice(idx, 1);
-    }
-    const hasAmountSurplusHybrid = input.allocation_json.allocators?.allocators.some(a => a.sharing.some(s => s.mode === "Amount") && a.sharing.some(s => s.mode === "Surplus")) ?? false;
-    if (!hasAmountSurplusHybrid) {
-        const idx = questions.findIndex(q => q.id === "QA4");
-        if (idx >= 0)
-            questions.splice(idx, 1);
-    }
-    if (input.skip_user_confirmation) {
-        return {
-            questions_asked: questions,
-            responses: questions.map(q => ({ question_id: q.id, response: "yes" })),
-            all_confirmed: true,
-        };
-    }
-    return {
-        questions_asked: questions,
-        responses: [],
-        all_confirmed: false,
-    };
-}
-function verifyEnvironment(input) {
-    const checks = [];
-    if (typeof input.allocation_json.object === "string") {
-        checks.push({
-            name: "object_exists",
-            passed: true,
-            message: `Allocation object ${input.allocation_json.object} assumed to exist`,
-        });
-    }
-    if (input.allocation_json.alloc_by_guard) {
-        const guard = input.allocation_json.alloc_by_guard;
-        const allocators = input.allocation_json.allocators?.allocators ?? [];
-        const valid = isValidAddress(guard);
-        checks.push({
-            name: "alloc_by_guard_valid",
-            passed: valid,
-            message: valid
-                ? `Guard ${guard} address valid (SDK will verify it exists in allocators[].guard)`
-                : `Guard ${guard} address invalid`,
-        });
-    }
-    if (input.operation_type === "create") {
-        checks.push({
-            name: "signer_authorized",
-            passed: true,
-            message: "Signer must hold SERVICE_ORDER_ALLOCATOR=313 permission (or ARBITRATION_FEES_ALLOC=365 for arbitration fees)",
-        });
-    }
-    if (input.bound_order) {
-        const alreadyHas = input.order_already_has_allocation === true;
-        checks.push({
-            name: "order_allocation_1to1",
-            passed: !alreadyHas,
-            message: alreadyHas
-                ? `Order ${input.bound_order} already has an Allocation — E_ALLOCATION_ALREADY_SPECIFIED will abort`
-                : `Order ${input.bound_order} has no Allocation — 1:1 constraint satisfied`,
-        });
-    }
-    checks.push({
-        name: "testnet_test_recommended",
-        passed: true,
-        message: "Allocation is a 'passive object' — strongly recommend testnet test before mainnet deployment",
-    });
-    const allPassed = checks.every(c => c.passed);
-    return { passed: allPassed, checks };
-}
-export const ALLOCATION_CONFIRM_VERSION = "1.0.0";
-export function runAllocationConfirmGate(input) {
-    const layersPassed = [];
-    const layersFailed = [];
-    const checklist = runStaticChecklist(input);
-    if (!checklist.all_passed) {
-        layersFailed.push("L1_checklist");
-        return {
-            status: "blocked_checklist",
-            checklist_result: checklist,
-            confirmation_text: generateConfirmationText(input, checklist),
-            block_reason: `Checklist failed: ${checklist.items.filter(i => !i.passed).map(i => i.id).join(", ")}`,
-            decision_record: {
-                timestamp: new Date().toISOString(),
-                gate_version: ALLOCATION_CONFIRM_VERSION,
-                final_status: "blocked_checklist",
-                layers_passed: layersPassed,
-                layers_failed: layersFailed,
-            },
-        };
-    }
-    layersPassed.push("L1_checklist");
-    const assessment = adaptRiskAssessment(input, checklist);
-    if (assessment.blocks_publish) {
-        layersFailed.push("L2_risk");
-        return {
-            status: "blocked_risk",
-            checklist_result: checklist,
-            risk_result: assessment,
-            confirmation_text: generateConfirmationText(input, checklist, assessment),
-            block_reason: `CRITICAL risks: ${assessment.risks.filter(r => r.level === "CRITICAL").map(r => r.id).join(", ")}`,
-            decision_record: {
-                timestamp: new Date().toISOString(),
-                gate_version: ALLOCATION_CONFIRM_VERSION,
-                final_status: "blocked_risk",
-                layers_passed: layersPassed,
-                layers_failed: layersFailed,
-            },
-        };
-    }
-    layersPassed.push("L2_risk");
-    const userConf = processUserConfirmation(input, assessment);
-    if (!userConf.all_confirmed) {
-    }
-    layersPassed.push("L3_user");
-    if (input.skip_environment_check) {
-        layersPassed.push("L4_environment");
-    }
-    else {
-        const env = verifyEnvironment(input);
-        if (!env.passed) {
-            layersFailed.push("L4_environment");
-            return {
-                status: "blocked_environment",
-                checklist_result: checklist,
-                risk_result: assessment,
-                user_confirmation: userConf,
-                environment_result: env,
-                confirmation_text: generateConfirmationText(input, checklist, assessment),
-                block_reason: `Environment check failed: ${env.checks.filter(c => !c.passed).map(c => c.name).join(", ")}`,
-                decision_record: {
-                    timestamp: new Date().toISOString(),
-                    gate_version: ALLOCATION_CONFIRM_VERSION,
-                    final_status: "blocked_environment",
-                    layers_passed: layersPassed,
-                    layers_failed: layersFailed,
-                },
-            };
-        }
-        layersPassed.push("L4_environment");
-    }
-    return {
-        status: "approved",
-        checklist_result: checklist,
-        risk_result: assessment,
-        user_confirmation: userConf,
-        confirmation_text: generateConfirmationText(input, checklist, assessment),
-        decision_record: {
-            timestamp: new Date().toISOString(),
-            gate_version: ALLOCATION_CONFIRM_VERSION,
-            final_status: "approved",
-            layers_passed: layersPassed,
-            layers_failed: layersFailed,
-        },
-    };
-}
-function generateConfirmationText(input, checklist, assessment) {
-    const lines = [];
-    const data = input.allocation_json;
-    lines.push("═══ Allocation Confirmation ═══");
-    lines.push("");
-    const isCreate = data.object !== null &&
-        data.object !== undefined &&
-        typeof data.object === "object";
-    if (isCreate) {
-        const obj = data.object;
-        lines.push(`Allocation: NEW '${obj.name}' (${obj.type_parameter ?? "<missing>"})`);
-    }
-    else if (typeof data.object === "string") {
-        lines.push(`Allocation: OPERATE ${data.object}`);
-    }
-    lines.push("");
-    lines.push("─ Checklist ──────────────────");
-    for (const item of checklist.items) {
-        const mark = item.passed ? "✓" : "✗";
-        lines.push(`  ${mark} ${item.id}: ${item.description}${item.message ? " — " + item.message : ""}`);
-    }
-    lines.push("");
-    if (assessment) {
-        lines.push("─ Risk Assessment ──────────────────");
-        lines.push(`Overall: ${assessment.overall_risk}`);
-        lines.push(`Detected: ${assessment.risks.length} risk(s)`);
-        for (const r of assessment.risks) {
-            lines.push(`  [${r.level}] ${r.id}: ${r.title}`);
-        }
-        lines.push("");
-    }
-    lines.push("─ Operations ──────────────────");
-    if (isCreate && data.allocators) {
-        lines.push(`- Description: ${data.allocators.description}`);
-        lines.push(`- Threshold: ${data.allocators.threshold}`);
-        lines.push(`- Allocators: ${data.allocators.allocators.length}`);
-        data.allocators.allocators.forEach((a, i) => {
-            const surplusCount = a.sharing.filter(s => s.mode === "Surplus").length;
-            const rateSum = a.sharing.filter(s => s.mode === "Rate").reduce((sum, s) => sum + Number(s.sharing), 0);
-            const amountSum = a.sharing.filter(s => s.mode === "Amount").reduce((sum, s) => sum + Number(s.sharing), 0);
-            lines.push(`  [${i}] guard=${a.guard}, sharing=${a.sharing.length} (Rate sum=${rateSum}, Amount sum=${amountSum}, Surplus=${surplusCount}), max=${a.max ?? "null"}`);
-        });
-    }
-    if (data.received_coins) {
-        lines.push(`- Receive: ${data.received_coins.received.length} CoinWrapper deposit(s)`);
-    }
-    if (data.alloc_by_guard) {
-        lines.push(`- Alloc by Guard: ${data.alloc_by_guard}`);
-    }
-    lines.push("");
-    lines.push("─ Error Code Reference ──────────────────");
-    lines.push(`  EALLOCATORS_EMPTY=${ALLOCATION_ERROR_CODES.EALLOCATORS_EMPTY}, ENO_ALLOCATOR=${ALLOCATION_ERROR_CODES.ENO_ALLOCATOR}, ERATE_NOT_10000=${ALLOCATION_ERROR_CODES.ERATE_NOT_10000}`);
-    lines.push(`  EMULTIPLE_SURPLUS=${ALLOCATION_ERROR_CODES.EMULTIPLE_SURPLUS}, ERATE_EXCEEDS_10000=${ALLOCATION_ERROR_CODES.ERATE_EXCEEDS_10000}, EINSUFFICIENT_BALANCE=${ALLOCATION_ERROR_CODES.EINSUFFICIENT_BALANCE}`);
-    lines.push(`  ENO_PAYMENT_INFO=${ALLOCATION_ERROR_CODES.ENO_PAYMENT_INFO}, ESHARING_COUNT_EXCEEDED=${ALLOCATION_ERROR_CODES.ESHARING_COUNT_EXCEEDED}, EAMOUNT_BELOW_THRESHOLD=${ALLOCATION_ERROR_CODES.EAMOUNT_BELOW_THRESHOLD}`);
-    lines.push(`  EAMOUNT_EXCEEDS_MAX=${ALLOCATION_ERROR_CODES.EAMOUNT_EXCEEDS_MAX}, EALLOCATOR_COUNT_EXCEEDED=${ALLOCATION_ERROR_CODES.EALLOCATOR_COUNT_EXCEEDED}`);
-    lines.push("");
-    return lines.join("\n");
-}
-export function progressiveAllocationCheck(input) {
-    const checklist = runStaticChecklist(input);
-    if (!checklist.all_passed) {
-        return {
-            stage: "checklist",
-            status: "fail",
-            message: `Checklist failed: ${checklist.items.filter(i => !i.passed).map(i => i.id).join(", ")}`,
-            next_action: "Fix failing checklist items (C-A-XX)",
-        };
-    }
-    const assessment = adaptRiskAssessment(input, checklist);
-    if (assessment.blocks_publish) {
-        return {
-            stage: "risk",
-            status: "fail",
-            message: `CRITICAL risks: ${assessment.risks.filter(r => r.level === "CRITICAL").map(r => r.id).join(", ")}`,
-            next_action: "Resolve CRITICAL risks (R-A-1-01 empty allocators, R-A-2-01 Signer theft) before proceeding",
-        };
-    }
-    if (assessment.needs_human_review) {
-        return {
-            stage: "confirmation",
-            status: "pending",
-            message: "Human review required for HIGH risks",
-            next_action: "Confirm risk acceptance (QA1 ~ QA6)",
-        };
-    }
-    return {
-        stage: "complete",
-        status: "pass",
-        message: "All checks passed",
-    };
-}
+import{MAX_ALLOCATOR_COUNT,ALLOCATION_MAX_SHARING_COUNT,RATE_TOTAL_FULL,ALLOCATION_ERROR_CODES,isSignerRecipient,isEntityRecipient}from'./allocation-ledger.js';import{assessAllocationRisks}from'./allocation-risk.js';export const ALLOCATION_PUBLISH_CHECKLIST=[{'id':'C-A-01','description':'Allocator\x20count\x20<=\x20MAX_ALLOCATOR_COUNT\x20(100)','passed':![],'message':''},{'id':'C-A-02','description':'Sharing\x20count\x20per\x20Allocator\x20<=\x20MAX_SHARING_COUNT\x20(100)','passed':![],'message':''},{'id':'C-A-03','description':'At\x20most\x201\x20Surplus\x20sharing\x20per\x20Allocator\x20(EMULTIPLE_SURPLUS)','passed':![],'message':''},{'id':'C-A-04','description':'Pure\x20Rate\x20mode\x20sum(rates)\x20==\x2010000\x20(ERATE_NOT_10000)\x20OR\x20Rate+Surplus\x20sum\x20<=\x2010000\x20(ERATE_EXCEEDS_10000)','passed':![],'message':''},{'id':'C-A-05','description':'Pure\x20Amount\x20mode\x20sum(fix)\x20>=\x20threshold\x20(EAMOUNT_BELOW_THRESHOLD)','passed':![],'message':''},{'id':'C-A-06','description':'Amount\x20sum(fix)\x20<=\x20max\x20when\x20max\x20is\x20set\x20(EAMOUNT_EXCEEDS_MAX)','passed':![],'message':''},{'id':'C-A-07','description':'allocators[].guard\x20unique\x20within\x20the\x20same\x20Allocators\x20(F-A-14)','passed':![],'message':''},{'id':'C-A-08','description':'Guard\x20addresses\x20valid\x20(0x\x20prefix,\x20length\x20>=\x2040)','passed':![],'message':''},{'id':'C-A-09','description':'Entity\x20addresses\x20valid\x20(0x\x20prefix,\x20length\x20>=\x2040)','passed':![],'message':''},{'id':'C-A-10','description':'Signer\x20recipients\x20have\x20Guard\x20Signer\x20binding\x20(R-A-2-01\x20CRITICAL\x20theft\x20risk)','passed':![],'message':''},{'id':'C-A-11','description':'payment_info\x20present\x20(required\x20at\x20alloc()\x20time\x20—\x20ENO_PAYMENT_INFO)','passed':![],'message':''},{'id':'C-A-12','description':'coin\x20type\x20matches\x20type_parameter\x20(EINSUFFICIENT_BALANCE\x20if\x20mismatch)','passed':![],'message':''}];function isValidAddress(a){return typeof a==='string'&&a['startsWith']('0x')&&a['length']>=0x28;}function runStaticChecklist(b){const c=ALLOCATION_PUBLISH_CHECKLIST['map'](R=>({...R})),d=b['allocation_json'],e=d['object']!==null&&d['object']!==undefined&&typeof d['object']==='object'&&!Array['isArray'](d['object']);if(!e){for(const R of c)R['passed']=!![];if(typeof d['object']==='string'){const S=isValidAddress(d['object']);c['find'](T=>T['id']==='C-A-08')['passed']=S,c['find'](T=>T['id']==='C-A-08')['message']=S?'':'Allocation\x20object\x20address\x20'+d['object']+'\x20invalid';}if(d['alloc_by_guard']!==undefined){const T=isValidAddress(d['alloc_by_guard']);c['find'](U=>U['id']==='C-A-09')['passed']=T,c['find'](U=>U['id']==='C-A-09')['message']=T?'':'alloc_by_guard\x20address\x20'+d['alloc_by_guard']+'\x20invalid';}return{'all_passed':c['every'](U=>U['passed']),'items':c};}const f=d['allocators'];if(!f){for(const U of c){U['id']['startsWith']('C-A-0')?(U['passed']=![],U['message']='Missing\x20required\x20field:\x20allocators'):U['passed']=!![];}return{'all_passed':![],'items':c};}const g=f['allocators'],h=c['find'](V=>V['id']==='C-A-01');h['passed']=g['length']<=MAX_ALLOCATOR_COUNT,h['message']=h['passed']?'':'Allocator\x20count\x20'+g['length']+'\x20>\x20'+MAX_ALLOCATOR_COUNT;let k=!![],l='';for(let V=0x0;V<g['length'];V++){if(g[V]['sharing']['length']>ALLOCATION_MAX_SHARING_COUNT){k=![],l='Allocator\x20'+V+'\x20sharing\x20count\x20'+g[V]['sharing']['length']+'\x20>\x20'+ALLOCATION_MAX_SHARING_COUNT;break;}}const m=c['find'](W=>W['id']==='C-A-02');m['passed']=k,m['message']=l;let n=!![],o='';for(let W=0x0;W<g['length'];W++){const X=g[W]['sharing']['filter'](Y=>Y['mode']==='Surplus')['length'];if(X>0x1){n=![],o='Allocator\x20'+W+'\x20has\x20'+X+'\x20Surplus\x20(max\x201\x20allowed)';break;}}const p=c['find'](Y=>Y['id']==='C-A-03');p['passed']=n,p['message']=o;let q=!![],r='';for(let Y=0x0;Y<g['length'];Y++){const Z=g[Y],a0=Z['sharing']['filter'](a3=>a3['mode']==='Rate')['reduce']((a3,a4)=>a3+Number(a4['sharing']),0x0),a1=Z['sharing']['some'](a3=>a3['mode']==='Surplus'),a2=Z['sharing']['some'](a3=>a3['mode']==='Rate');if(a2&&!a1&&a0!==RATE_TOTAL_FULL){q=![],r='Allocator\x20'+Y+'\x20pure\x20Rate\x20sum\x20'+a0+'\x20!=\x20'+RATE_TOTAL_FULL;break;}if(a2&&a1&&a0>RATE_TOTAL_FULL){q=![],r='Allocator\x20'+Y+'\x20Rate+Surplus\x20sum\x20'+a0+'\x20>\x20'+RATE_TOTAL_FULL;break;}}const t=c['find'](a3=>a3['id']==='C-A-04');t['passed']=q,t['message']=r;let u=!![],v='';const w=Number(f['threshold']);for(let a3=0x0;a3<g['length'];a3++){const a4=g[a3],a5=a4['sharing']['some'](a8=>a8['mode']==='Rate'),a6=a4['sharing']['some'](a8=>a8['mode']==='Surplus'),a7=a4['sharing']['filter'](a8=>a8['mode']==='Amount')['reduce']((a8,a9)=>a8+Number(a9['sharing']),0x0);if(!a5&&!a6&&a7>0x0&&a7<w){u=![],v='Allocator\x20'+a3+'\x20pure\x20Amount\x20sum\x20'+a7+'\x20<\x20threshold\x20'+w;break;}}const x=c['find'](a8=>a8['id']==='C-A-05');x['passed']=u,x['message']=v;let y=!![],z='';for(let a8=0x0;a8<g['length'];a8++){const a9=g[a8];if(a9['max']==null)continue;const aa=a9['sharing']['filter'](ab=>ab['mode']==='Amount')['reduce']((ab,ac)=>ab+Number(ac['sharing']),0x0);if(aa>Number(a9['max'])){y=![],z='Allocator\x20'+a8+'\x20Amount\x20sum\x20'+aa+'\x20>\x20max\x20'+Number(a9['max']);break;}}const A=c['find'](ab=>ab['id']==='C-A-06');A['passed']=y,A['message']=z;const B=new Set();let C=!![],D='';for(let ab=0x0;ab<g['length'];ab++){if(B['has'](g[ab]['guard'])){C=![],D='Allocator\x20'+ab+'\x20guard\x20'+g[ab]['guard']+'\x20duplicates\x20an\x20earlier\x20Allocator\x20(F-A-14)';break;}B['add'](g[ab]['guard']);}const E=c['find'](ac=>ac['id']==='C-A-07');E['passed']=C,E['message']=D;let F=!![],G='';for(let ac=0x0;ac<g['length'];ac++){if(!isValidAddress(g[ac]['guard'])){F=![],G='Allocator\x20'+ac+'\x20guard\x20address\x20'+g[ac]['guard']+'\x20invalid';break;}}const H=c['find'](ad=>ad['id']==='C-A-08');H['passed']=F,H['message']=G;let I=!![],J='';al:for(let ad=0x0;ad<g['length'];ad++){for(let ae=0x0;ae<g[ad]['sharing']['length'];ae++){const af=g[ad]['sharing'][ae];if(isEntityRecipient(af['who'])){const ag=af['who']['Entity'];if(!isValidAddress(ag)){I=![],J='Allocator\x20'+ad+'\x20sharing\x20'+ae+'\x20Entity\x20address\x20'+ag+'\x20invalid';break al;}}}}const K=c['find'](ah=>ah['id']==='C-A-09');K['passed']=I,K['message']=J;let L=!![],M='';for(let ah=0x0;ah<g['length'];ah++){const ai=g[ah],aj=ai['sharing']['some'](al=>isSignerRecipient(al['who']));if(!aj)continue;const ak=b['guard_signer_bindings']?.[ai['guard']]===!![];if(!ak){L=![],M='Allocator\x20'+ah+'\x20(guard='+ai['guard']+')\x20has\x20Signer\x20recipient\x20but\x20no\x20Guard\x20Signer\x20binding\x20—\x20R-A-2-01\x20CRITICAL\x20theft\x20risk';break;}}const N=c['find'](al=>al['id']==='C-A-10');N['passed']=L,N['message']=M;const O=c['find'](al=>al['id']==='C-A-11');O['passed']=d['payment_info']!==undefined&&d['payment_info']!==null,O['message']=O['passed']?'':'payment_info\x20missing\x20—\x20required\x20at\x20alloc()\x20time\x20(ENO_PAYMENT_INFO=9)';const P=c['find'](al=>al['id']==='C-A-12'),Q=d['object'];if(Q['type_parameter']&&d['coin'])P['passed']=!![],P['message']='';else!Q['type_parameter']?(P['passed']=![],P['message']='type_parameter\x20missing\x20on\x20object'):(P['passed']=![],P['message']='coin\x20missing\x20—\x20required\x20for\x20create');return{'all_passed':c['every'](al=>al['passed']),'items':c};}function adaptRiskAssessment(a,b){const c={'object':typeof a['allocation_json']['object']==='string'?a['allocation_json']['object']:null,'allocators_config':a['allocation_json']['allocators'],'operation_type':a['operation_type']??'create','has_payment_info':a['allocation_json']['payment_info']!==undefined,'host_service_published':!![],'referenced_treasuries_permissions':a['referenced_treasuries_permissions'],'guard_signer_bindings':a['guard_signer_bindings'],'passport_identifier_types':a['passport_identifier_types'],'guard_conditions_mutually_exclusive':a['guard_conditions_mutually_exclusive'],'bound_order':a['bound_order'],'order_already_has_allocation':a['order_already_has_allocation']};return assessAllocationRisks(c);}export const ALLOCATION_CONFIRMATION_QUESTIONS=[{'id':'QA1','question':'Are\x20all\x20Treasury\x20/\x20Entity\x20recipient\x20addresses\x20correctly\x20verified\x20as\x20trusted\x20parties?','requires_explicit_yes':!![]},{'id':'QA2','question':'If\x20using\x20multiple\x20Allocators\x20(caller-specified\x20guard),\x20are\x20Guard\x20conditions\x20mutually\x20exclusive\x20to\x20prevent\x20caller\x20confusion\x20or\x20silent\x20lockup\x20(alloc_by_guard\x20silently\x20returns\x20on\x20no\x20match)?','requires_explicit_yes':!![],'related_risk_ids':['R-A-4-02']},{'id':'QA3','question':'⚠️\x20If\x20using\x20sharing.who=Signer:\x20is\x20the\x20Guard\x20Signer\x20binding\x20verified\x20(context(Signer)==authorized)?\x20Signer\x20without\x20Guard\x20binding\x20=\x20CRITICAL\x20theft\x20risk.','requires_explicit_yes':!![],'related_risk_ids':['R-A-2-01']},{'id':'QA4','question':'If\x20using\x20Amount+Surplus\x20hybrid\x20(refund-first):\x20is\x20threshold\x20set\x20to\x20refund\x20amount\x20(fix)\x20to\x20ensure\x20balance\x20covers\x20the\x20Amount\x20distribution?','requires_explicit_yes':!![],'related_risk_ids':['R-A-1-03']},{'id':'QA5','question':'Is\x20payment_info\x20correctly\x20configured?\x20alloc()\x20will\x20abort\x20with\x20ENO_PAYMENT_INFO\x20(9)\x20if\x20missing.','requires_explicit_yes':!![],'related_risk_ids':['R-A-5-02']},{'id':'QA6','question':'Has\x20the\x20Allocation\x20been\x20tested\x20on\x20testnet?\x20Allocation\x20is\x20a\x20\x27passive\x20object\x27\x20—\x20once\x20created,\x20allocators\x20cannot\x20be\x20reconfigured.','requires_explicit_yes':![]}];function processUserConfirmation(a,b){const c=[...ALLOCATION_CONFIRMATION_QUESTIONS],d=a['allocation_json']['allocators']?.['allocators']['some'](g=>g['sharing']['some'](h=>isSignerRecipient(h['who'])))??![];if(!d){const g=c['findIndex'](h=>h['id']==='QA3');if(g>=0x0)c['splice'](g,0x1);}const e=a['allocation_json']['allocators']?.['allocators']['length']??0x0;if(e<=0x1){const h=c['findIndex'](i=>i['id']==='QA2');if(h>=0x0)c['splice'](h,0x1);}const f=a['allocation_json']['allocators']?.['allocators']['some'](i=>i['sharing']['some'](j=>j['mode']==='Amount')&&i['sharing']['some'](j=>j['mode']==='Surplus'))??![];if(!f){const i=c['findIndex'](j=>j['id']==='QA4');if(i>=0x0)c['splice'](i,0x1);}if(a['skip_user_confirmation'])return{'questions_asked':c,'responses':c['map'](j=>({'question_id':j['id'],'response':'yes'})),'all_confirmed':!![]};return{'questions_asked':c,'responses':[],'all_confirmed':![]};}function verifyEnvironment(a){const b=[];typeof a['allocation_json']['object']==='string'&&b['push']({'name':'object_exists','passed':!![],'message':'Allocation\x20object\x20'+a['allocation_json']['object']+'\x20assumed\x20to\x20exist'});if(a['allocation_json']['alloc_by_guard']){const d=a['allocation_json']['alloc_by_guard'],e=isValidAddress(d);b['push']({'name':'alloc_by_guard_valid','passed':e,'message':e?'Guard\x20'+d+'\x20address\x20valid\x20(SDK\x20will\x20verify\x20it\x20exists\x20in\x20allocators[].guard)':'Guard\x20'+d+'\x20address\x20invalid'});}a['operation_type']==='create'&&b['push']({'name':'signer_authorized','passed':!![],'message':'Signer\x20must\x20hold\x20SERVICE_ORDER_ALLOCATOR=313\x20permission\x20(or\x20ARBITRATION_FEES_ALLOC=365\x20for\x20arbitration\x20fees)'});if(a['bound_order']){const f=a['order_already_has_allocation']===!![];b['push']({'name':'order_allocation_1to1','passed':!f,'message':f?'Order\x20'+a['bound_order']+'\x20already\x20has\x20an\x20Allocation\x20—\x20E_ALLOCATION_ALREADY_SPECIFIED\x20will\x20abort':'Order\x20'+a['bound_order']+'\x20has\x20no\x20Allocation\x20—\x201:1\x20constraint\x20satisfied'});}b['push']({'name':'testnet_test_recommended','passed':!![],'message':'Allocation\x20is\x20a\x20\x27passive\x20object\x27\x20—\x20strongly\x20recommend\x20testnet\x20test\x20before\x20mainnet\x20deployment'});const c=b['every'](g=>g['passed']);return{'passed':c,'checks':b};}export const ALLOCATION_CONFIRM_VERSION='1.0.0';export function runAllocationConfirmGate(a){const b=[],c=[],d=runStaticChecklist(a);if(!d['all_passed'])return c['push']('L1_checklist'),{'status':'blocked_checklist','checklist_result':d,'confirmation_text':generateConfirmationText(a,d),'block_reason':'Checklist\x20failed:\x20'+d['items']['filter'](g=>!g['passed'])['map'](g=>g['id'])['join'](',\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':ALLOCATION_CONFIRM_VERSION,'final_status':'blocked_checklist','layers_passed':b,'layers_failed':c}};b['push']('L1_checklist');const e=adaptRiskAssessment(a,d);if(e['blocks_publish'])return c['push']('L2_risk'),{'status':'blocked_risk','checklist_result':d,'risk_result':e,'confirmation_text':generateConfirmationText(a,d,e),'block_reason':'CRITICAL\x20risks:\x20'+e['risks']['filter'](g=>g['level']==='CRITICAL')['map'](g=>g['id'])['join'](',\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':ALLOCATION_CONFIRM_VERSION,'final_status':'blocked_risk','layers_passed':b,'layers_failed':c}};b['push']('L2_risk');const f=processUserConfirmation(a,e);if(!f['all_confirmed']){}b['push']('L3_user');if(a['skip_environment_check'])b['push']('L4_environment');else{const g=verifyEnvironment(a);if(!g['passed'])return c['push']('L4_environment'),{'status':'blocked_environment','checklist_result':d,'risk_result':e,'user_confirmation':f,'environment_result':g,'confirmation_text':generateConfirmationText(a,d,e),'block_reason':'Environment\x20check\x20failed:\x20'+g['checks']['filter'](h=>!h['passed'])['map'](h=>h['name'])['join'](',\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':ALLOCATION_CONFIRM_VERSION,'final_status':'blocked_environment','layers_passed':b,'layers_failed':c}};b['push']('L4_environment');}return{'status':'approved','checklist_result':d,'risk_result':e,'user_confirmation':f,'confirmation_text':generateConfirmationText(a,d,e),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':ALLOCATION_CONFIRM_VERSION,'final_status':'approved','layers_passed':b,'layers_failed':c}};}function generateConfirmationText(a,b,c){const d=[],e=a['allocation_json'];d['push']('═══\x20Allocation\x20Confirmation\x20═══'),d['push']('');const f=e['object']!==null&&e['object']!==undefined&&typeof e['object']==='object';if(f){const g=e['object'];d['push']('Allocation:\x20NEW\x20\x27'+g['name']+'\x27\x20('+(g['type_parameter']??'<missing>')+')');}else typeof e['object']==='string'&&d['push']('Allocation:\x20OPERATE\x20'+e['object']);d['push'](''),d['push']('─\x20Checklist\x20──────────────────');for(const h of b['items']){const i=h['passed']?'✓':'✗';d['push']('\x20\x20'+i+'\x20'+h['id']+':\x20'+h['description']+(h['message']?'\x20—\x20'+h['message']:''));}d['push']('');if(c){d['push']('─\x20Risk\x20Assessment\x20──────────────────'),d['push']('Overall:\x20'+c['overall_risk']),d['push']('Detected:\x20'+c['risks']['length']+'\x20risk(s)');for(const j of c['risks']){d['push']('\x20\x20['+j['level']+']\x20'+j['id']+':\x20'+j['title']);}d['push']('');}return d['push']('─\x20Operations\x20──────────────────'),f&&e['allocators']&&(d['push']('-\x20Description:\x20'+e['allocators']['description']),d['push']('-\x20Threshold:\x20'+e['allocators']['threshold']),d['push']('-\x20Allocators:\x20'+e['allocators']['allocators']['length']),e['allocators']['allocators']['forEach']((k,l)=>{const m=k['sharing']['filter'](p=>p['mode']==='Surplus')['length'],n=k['sharing']['filter'](p=>p['mode']==='Rate')['reduce']((p,q)=>p+Number(q['sharing']),0x0),o=k['sharing']['filter'](p=>p['mode']==='Amount')['reduce']((p,q)=>p+Number(q['sharing']),0x0);d['push']('\x20\x20['+l+']\x20guard='+k['guard']+',\x20sharing='+k['sharing']['length']+'\x20(Rate\x20sum='+n+',\x20Amount\x20sum='+o+',\x20Surplus='+m+'),\x20max='+(k['max']??'null'));})),e['received_coins']&&d['push']('-\x20Receive:\x20'+e['received_coins']['received']['length']+'\x20CoinWrapper\x20deposit(s)'),e['alloc_by_guard']&&d['push']('-\x20Alloc\x20by\x20Guard:\x20'+e['alloc_by_guard']),d['push'](''),d['push']('─\x20Error\x20Code\x20Reference\x20──────────────────'),d['push']('\x20\x20EALLOCATORS_EMPTY='+ALLOCATION_ERROR_CODES['EALLOCATORS_EMPTY']+',\x20ENO_ALLOCATOR='+ALLOCATION_ERROR_CODES['ENO_ALLOCATOR']+',\x20ERATE_NOT_10000='+ALLOCATION_ERROR_CODES['ERATE_NOT_10000']),d['push']('\x20\x20EMULTIPLE_SURPLUS='+ALLOCATION_ERROR_CODES['EMULTIPLE_SURPLUS']+',\x20ERATE_EXCEEDS_10000='+ALLOCATION_ERROR_CODES['ERATE_EXCEEDS_10000']+',\x20EINSUFFICIENT_BALANCE='+ALLOCATION_ERROR_CODES['EINSUFFICIENT_BALANCE']),d['push']('\x20\x20ENO_PAYMENT_INFO='+ALLOCATION_ERROR_CODES['ENO_PAYMENT_INFO']+',\x20ESHARING_COUNT_EXCEEDED='+ALLOCATION_ERROR_CODES['ESHARING_COUNT_EXCEEDED']+',\x20EAMOUNT_BELOW_THRESHOLD='+ALLOCATION_ERROR_CODES['EAMOUNT_BELOW_THRESHOLD']),d['push']('\x20\x20EAMOUNT_EXCEEDS_MAX='+ALLOCATION_ERROR_CODES['EAMOUNT_EXCEEDS_MAX']+',\x20EALLOCATOR_COUNT_EXCEEDED='+ALLOCATION_ERROR_CODES['EALLOCATOR_COUNT_EXCEEDED']),d['push'](''),d['join']('\x0a');}export function progressiveAllocationCheck(a){const b=runStaticChecklist(a);if(!b['all_passed'])return{'stage':'checklist','status':'fail','message':'Checklist\x20failed:\x20'+b['items']['filter'](d=>!d['passed'])['map'](d=>d['id'])['join'](',\x20'),'next_action':'Fix\x20failing\x20checklist\x20items\x20(C-A-XX)'};const c=adaptRiskAssessment(a,b);if(c['blocks_publish'])return{'stage':'risk','status':'fail','message':'CRITICAL\x20risks:\x20'+c['risks']['filter'](d=>d['level']==='CRITICAL')['map'](d=>d['id'])['join'](',\x20'),'next_action':'Resolve\x20CRITICAL\x20risks\x20(R-A-1-01\x20empty\x20allocators,\x20R-A-2-01\x20Signer\x20theft)\x20before\x20proceeding'};if(c['needs_human_review'])return{'stage':'confirmation','status':'pending','message':'Human\x20review\x20required\x20for\x20HIGH\x20risks','next_action':'Confirm\x20risk\x20acceptance\x20(QA1\x20~\x20QA6)'};return{'stage':'complete','status':'pass','message':'All\x20checks\x20passed'};}