@wowok/agent-mcp 2.7.1 → 2.7.3

package/dist/knowledge/permission-confirm.js

@@ -1,426 +1 @@
-import { USER_DEFINED_PERM_INDEX_START, MAX_ENTITY_COUNT, MAX_PERM_FOR_ENTITY, MAX_ADMIN_COUNT, } from "@wowok/wowok";
-import { isBuiltinPermission, findSceneByPermissionIndex, } from "./permission-ledger.js";
-import { assessPermissionRisks, } from "./permission-risk.js";
-export const PERMISSION_PUBLISH_CHECKLIST = [
-    { id: "C-P-01", description: "Custom permissionIndex >= 1000 (USER_DEFINED_PERM_INDEX_START)", passed: false, message: "" },
-    { id: "C-P-02", description: "Entity count <= MAX_ENTITY_COUNT (1000)", passed: false, message: "" },
-    { id: "C-P-03", description: "Per-entity permission count <= MAX_PERM_FOR_ENTITY (1000)", passed: false, message: "" },
-    { id: "C-P-04", description: "Admin count <= MAX_ADMIN_COUNT (500)", passed: false, message: "" },
-    { id: "C-P-05", description: "Owner address valid (if transfer)", passed: false, message: "" },
-    { id: "C-P-06", description: "Admin addresses valid", passed: false, message: "" },
-    { id: "C-P-07", description: "Entity addresses valid", passed: false, message: "" },
-    { id: "C-P-08", description: "UM address valid (Contact object) or null", passed: false, message: "" },
-    { id: "C-P-09", description: "apply object types match permission indexes", passed: false, message: "" },
-    { id: "C-P-10", description: "All custom permissions (>= 1000) have remark", passed: false, message: "" },
-    { id: "C-P-11", description: "Ownership transfer double-confirmed", passed: false, message: "" },
-];
-function runStaticChecklist(input) {
-    const items = PERMISSION_PUBLISH_CHECKLIST.map(c => ({ ...c }));
-    const data = input.permission_json;
-    if (data.table && "index" in data.table && typeof data.table.index === "number") {
-        const idx = data.table.index;
-        const valid = idx < USER_DEFINED_PERM_INDEX_START ? isBuiltinPermission(idx) : true;
-        const item = items.find(i => i.id === "C-P-01");
-        item.passed = valid;
-        item.message = valid ? "" : `Permission index ${idx} is < ${USER_DEFINED_PERM_INDEX_START} and not builtin`;
-    }
-    else {
-        items.find(i => i.id === "C-P-01").passed = true;
-    }
-    const entityCount = input.current_entity_count ?? 0;
-    const cp02 = items.find(i => i.id === "C-P-02");
-    cp02.passed = entityCount <= MAX_ENTITY_COUNT;
-    cp02.message = cp02.passed ? "" : `Entity count ${entityCount} > ${MAX_ENTITY_COUNT}`;
-    if (data.table && "index" in data.table && Array.isArray(data.table.index)) {
-        const valid = data.table.index.length <= MAX_PERM_FOR_ENTITY;
-        const cp03 = items.find(i => i.id === "C-P-03");
-        cp03.passed = valid;
-        cp03.message = valid ? "" : `Per-entity perm count ${data.table.index.length} > ${MAX_PERM_FOR_ENTITY}`;
-    }
-    else {
-        items.find(i => i.id === "C-P-03").passed = true;
-    }
-    if (data.admin) {
-        const count = data.admin.op === "set" ? data.admin.addresses.length : (input.current_admin_count ?? 0);
-        const valid = count <= MAX_ADMIN_COUNT;
-        const cp04 = items.find(i => i.id === "C-P-04");
-        cp04.passed = valid;
-        cp04.message = valid ? "" : `Admin count ${count} > ${MAX_ADMIN_COUNT}`;
-    }
-    else {
-        items.find(i => i.id === "C-P-04").passed = true;
-    }
-    if (data.builder) {
-        const valid = data.builder.startsWith("0x") && data.builder.length >= 40;
-        const cp05 = items.find(i => i.id === "C-P-05");
-        cp05.passed = valid;
-        cp05.message = valid ? "" : `New owner address ${data.builder} invalid`;
-    }
-    else {
-        items.find(i => i.id === "C-P-05").passed = true;
-    }
-    if (data.admin) {
-        const valid = data.admin.addresses.every(a => a.startsWith("0x") && a.length >= 40);
-        const cp06 = items.find(i => i.id === "C-P-06");
-        cp06.passed = valid;
-        cp06.message = valid ? "" : `Some admin address invalid`;
-    }
-    else {
-        items.find(i => i.id === "C-P-06").passed = true;
-    }
-    if (data.table) {
-        const entities = "entity" in data.table
-            ? (Array.isArray(data.table.entity) ? data.table.entity : [data.table.entity])
-            : [];
-        const valid = entities.every(a => a.startsWith("0x") && a.length >= 40);
-        const cp07 = items.find(i => i.id === "C-P-07");
-        cp07.passed = valid;
-        cp07.message = valid ? "" : `Some entity address invalid`;
-    }
-    else {
-        items.find(i => i.id === "C-P-07").passed = true;
-    }
-    if (data.um !== undefined) {
-        const valid = data.um === null || (data.um.startsWith("0x") && data.um.length >= 40);
-        const cp08 = items.find(i => i.id === "C-P-08");
-        cp08.passed = valid;
-        cp08.message = valid ? "" : `UM address ${data.um} invalid`;
-    }
-    else {
-        items.find(i => i.id === "C-P-08").passed = true;
-    }
-    if (data.apply && data.apply.length > 0 && data.table && "index" in data.table && typeof data.table.index === "number") {
-        const scene = findSceneByPermissionIndex(data.table.index);
-        if (scene && input.target_objects_types) {
-            const mismatched = input.target_objects_types.filter(t => t !== scene.host_object);
-            const cp09 = items.find(i => i.id === "C-P-09");
-            cp09.passed = mismatched.length === 0;
-            cp09.message = mismatched.length === 0 ? "" : `Index ${data.table.index} expects ${scene.host_object}, got ${mismatched.join(",")}`;
-        }
-        else {
-            items.find(i => i.id === "C-P-09").passed = true;
-        }
-    }
-    else {
-        items.find(i => i.id === "C-P-09").passed = true;
-    }
-    if (data.table && "index" in data.table && typeof data.table.index === "number" && data.table.index >= USER_DEFINED_PERM_INDEX_START) {
-        const hasRemark = data.remark && "remark" in data.remark && data.remark.index === data.table.index;
-        const cp10 = items.find(i => i.id === "C-P-10");
-        cp10.passed = !!hasRemark;
-        cp10.message = hasRemark ? "" : `Custom permission ${data.table.index} has no remark`;
-    }
-    else {
-        items.find(i => i.id === "C-P-10").passed = true;
-    }
-    if (data.builder) {
-        items.find(i => i.id === "C-P-11").passed = false;
-        items.find(i => i.id === "C-P-11").message = "Pending user confirmation in Layer 3";
-    }
-    else {
-        items.find(i => i.id === "C-P-11").passed = true;
-    }
-    return {
-        all_passed: items.filter(i => i.id !== "C-P-11").every(i => i.passed),
-        items,
-    };
-}
-function adaptRiskAssessment(input, checklist) {
-    const ctx = {
-        object: input.permission_json.object,
-        description: input.permission_json.description,
-        admin: input.permission_json.admin,
-        table: input.permission_json.table,
-        entity: input.permission_json.entity,
-        remark: input.permission_json.remark,
-        apply: input.permission_json.apply,
-        builder: input.permission_json.builder,
-        um: input.permission_json.um,
-        current_admin_count: input.current_admin_count,
-        current_entity_count: input.current_entity_count,
-        target_objects_types: input.target_objects_types,
-    };
-    return assessPermissionRisks(ctx);
-}
-export const PERMISSION_CONFIRMATION_QUESTIONS = [
-    {
-        id: "QP1",
-        question: "Are all admin addresses correctly verified as trusted parties?",
-        requires_explicit_yes: true,
-    },
-    {
-        id: "QP2",
-        question: "Are all entity addresses (users/Guards) correctly assigned to their intended permission indexes?",
-        requires_explicit_yes: true,
-    },
-    {
-        id: "QP3",
-        question: "If using custom permission indexes (>= 1000), are all remarks documented?",
-        requires_explicit_yes: true,
-    },
-    {
-        id: "QP4",
-        question: "If applying to target objects, have you verified the target object types match the permission indexes used?",
-        requires_explicit_yes: true,
-    },
-    {
-        id: "QP5",
-        question: "⚠️ If transferring ownership: do you confirm the new owner address is correct? This operation is IRREVERSIBLE.",
-        requires_explicit_yes: true,
-        related_risk_ids: ["R-P-4-01"],
-    },
-    {
-        id: "QP6",
-        question: "Have you exported the current Permission JSON as a backup before this operation?",
-        requires_explicit_yes: false,
-    },
-];
-function processUserConfirmation(input, assessment) {
-    const questions = [...PERMISSION_CONFIRMATION_QUESTIONS];
-    if (!input.permission_json.builder) {
-        const idx = questions.findIndex(q => q.id === "QP5");
-        if (idx >= 0)
-            questions.splice(idx, 1);
-    }
-    if (input.skip_user_confirmation) {
-        return {
-            questions_asked: questions,
-            responses: questions.map(q => ({ question_id: q.id, response: "yes" })),
-            all_confirmed: true,
-        };
-    }
-    return {
-        questions_asked: questions,
-        responses: [],
-        all_confirmed: false,
-    };
-}
-function verifyEnvironment(input) {
-    const checks = [];
-    if (input.permission_json.object) {
-        checks.push({
-            name: "object_exists",
-            passed: true,
-            message: `Permission object ${input.permission_json.object} assumed to exist`,
-        });
-    }
-    if (input.permission_json.builder || input.permission_json.um !== undefined) {
-        checks.push({
-            name: "signer_is_owner",
-            passed: true,
-            message: "Signer must be owner for transfer/um_set operations",
-        });
-    }
-    else if (input.permission_json.admin || input.permission_json.table || input.permission_json.remark) {
-        checks.push({
-            name: "signer_is_admin",
-            passed: true,
-            message: "Signer must be admin for table/remark/admin operations",
-        });
-    }
-    if (input.permission_json.apply && input.permission_json.apply.length > 0) {
-        checks.push({
-            name: "apply_targets_exist_and_owned",
-            passed: true,
-            message: `Signer must be owner of ${input.permission_json.apply.length} target object(s)`,
-        });
-    }
-    const allPassed = checks.every(c => c.passed);
-    return { passed: allPassed, checks };
-}
-export const PERMISSION_CONFIRM_VERSION = "1.0.0";
-export function runPermissionConfirmGate(input) {
-    const layersPassed = [];
-    const layersFailed = [];
-    const checklist = runStaticChecklist(input);
-    if (!checklist.all_passed) {
-        layersFailed.push("L1_checklist");
-        return {
-            status: "blocked_checklist",
-            checklist_result: checklist,
-            confirmation_text: generateConfirmationText(input, checklist),
-            block_reason: `Checklist failed: ${checklist.items.filter(i => !i.passed).map(i => i.id).join(", ")}`,
-            decision_record: {
-                timestamp: new Date().toISOString(),
-                gate_version: PERMISSION_CONFIRM_VERSION,
-                final_status: "blocked_checklist",
-                layers_passed: layersPassed,
-                layers_failed: layersFailed,
-            },
-        };
-    }
-    layersPassed.push("L1_checklist");
-    const assessment = adaptRiskAssessment(input, checklist);
-    const hasCritical = assessment.risks.some(r => r.level === "CRITICAL");
-    if (hasCritical) {
-        layersFailed.push("L2_risk");
-        return {
-            status: "blocked_risk",
-            checklist_result: checklist,
-            risk_result: assessment,
-            confirmation_text: generateConfirmationText(input, checklist, assessment),
-            block_reason: `CRITICAL risks: ${assessment.risks.filter(r => r.level === "CRITICAL").map(r => r.id).join(", ")}`,
-            decision_record: {
-                timestamp: new Date().toISOString(),
-                gate_version: PERMISSION_CONFIRM_VERSION,
-                final_status: "blocked_risk",
-                layers_passed: layersPassed,
-                layers_failed: layersFailed,
-            },
-        };
-    }
-    layersPassed.push("L2_risk");
-    const userConf = processUserConfirmation(input, assessment);
-    if (!userConf.all_confirmed) {
-        if (input.permission_json.builder) {
-            const cp11 = checklist.items.find(i => i.id === "C-P-11");
-            if (cp11) {
-                const qp5 = userConf.responses.find(r => r.question_id === "QP5");
-                cp11.passed = qp5?.response === "yes";
-                cp11.message = cp11.passed ? "" : "Transfer not confirmed by user";
-            }
-        }
-        if (!checklist.all_passed && input.permission_json.builder) {
-            const cp11 = checklist.items.find(i => i.id === "C-P-11");
-            if (cp11 && !cp11.passed) {
-                layersFailed.push("L3_user");
-                return {
-                    status: "blocked_user",
-                    checklist_result: checklist,
-                    risk_result: assessment,
-                    user_confirmation: userConf,
-                    confirmation_text: generateConfirmationText(input, checklist, assessment),
-                    block_reason: "User did not confirm ownership transfer",
-                    decision_record: {
-                        timestamp: new Date().toISOString(),
-                        gate_version: PERMISSION_CONFIRM_VERSION,
-                        final_status: "blocked_user",
-                        layers_passed: layersPassed,
-                        layers_failed: layersFailed,
-                    },
-                };
-            }
-        }
-    }
-    layersPassed.push("L3_user");
-    if (input.skip_environment_check) {
-        layersPassed.push("L4_environment");
-    }
-    else {
-        const env = verifyEnvironment(input);
-        if (!env.passed) {
-            layersFailed.push("L4_environment");
-            return {
-                status: "blocked_environment",
-                checklist_result: checklist,
-                risk_result: assessment,
-                user_confirmation: userConf,
-                environment_result: env,
-                confirmation_text: generateConfirmationText(input, checklist, assessment),
-                block_reason: `Environment check failed: ${env.checks.filter(c => !c.passed).map(c => c.name).join(", ")}`,
-                decision_record: {
-                    timestamp: new Date().toISOString(),
-                    gate_version: PERMISSION_CONFIRM_VERSION,
-                    final_status: "blocked_environment",
-                    layers_passed: layersPassed,
-                    layers_failed: layersFailed,
-                },
-            };
-        }
-        layersPassed.push("L4_environment");
-    }
-    return {
-        status: "approved",
-        checklist_result: checklist,
-        risk_result: assessment,
-        user_confirmation: userConf,
-        confirmation_text: generateConfirmationText(input, checklist, assessment),
-        decision_record: {
-            timestamp: new Date().toISOString(),
-            gate_version: PERMISSION_CONFIRM_VERSION,
-            final_status: "approved",
-            layers_passed: layersPassed,
-            layers_failed: layersFailed,
-        },
-    };
-}
-function generateConfirmationText(input, checklist, assessment) {
-    const lines = [];
-    const data = input.permission_json;
-    lines.push("═══ Permission Confirmation ═══");
-    lines.push("");
-    if (data.object) {
-        lines.push(`Permission: ${data.object}`);
-    }
-    else {
-        lines.push("Permission: NEW (to be created)");
-    }
-    if (data.description)
-        lines.push(`Description: ${data.description}`);
-    lines.push("");
-    lines.push("─ Checklist ──────────────────");
-    for (const item of checklist.items) {
-        const mark = item.passed ? "✓" : "✗";
-        lines.push(`  ${mark} ${item.id}: ${item.description}${item.message ? " — " + item.message : ""}`);
-    }
-    lines.push("");
-    if (assessment) {
-        lines.push("─ Risk Assessment ──────────────────");
-        lines.push(`Overall: ${assessment.overall_risk}`);
-        lines.push(`Detected: ${assessment.risks.length} risk(s)`);
-        for (const r of assessment.risks) {
-            lines.push(`  [${r.level}] ${r.id}: ${r.title}`);
-        }
-        lines.push("");
-    }
-    lines.push("─ Operations ──────────────────");
-    if (data.admin)
-        lines.push(`- Admin ${data.admin.op}: ${data.admin.addresses.length} address(es)`);
-    if (data.table)
-        lines.push(`- Table op: ${data.table.op}`);
-    if (data.entity)
-        lines.push(`- Entity op: ${data.entity.op}`);
-    if (data.remark)
-        lines.push(`- Remark op: ${data.remark.op}`);
-    if (data.apply)
-        lines.push(`- Apply to: ${data.apply.length} object(s)`);
-    if (data.builder)
-        lines.push(`- ⚠️ TRANSFER to: ${data.builder}`);
-    if (data.um !== undefined)
-        lines.push(`- UM: ${data.um ?? "(revoke)"}`);
-    lines.push("");
-    return lines.join("\n");
-}
-export function progressivePermissionCheck(input) {
-    const checklist = runStaticChecklist(input);
-    if (!checklist.all_passed) {
-        return {
-            stage: "checklist",
-            status: "fail",
-            message: `Checklist failed: ${checklist.items.filter(i => !i.passed).map(i => i.id).join(", ")}`,
-            next_action: "Fix failing checklist items",
-        };
-    }
-    const assessment = adaptRiskAssessment(input, checklist);
-    if (assessment.risks.some(r => r.level === "CRITICAL")) {
-        return {
-            stage: "risk",
-            status: "fail",
-            message: `CRITICAL risks: ${assessment.risks.filter(r => r.level === "CRITICAL").map(r => r.id).join(", ")}`,
-            next_action: "Resolve CRITICAL risks before proceeding",
-        };
-    }
-    if (assessment.needs_human_review) {
-        return {
-            stage: "confirmation",
-            status: "pending",
-            message: "Human review required for HIGH risks",
-            next_action: "Confirm risk acceptance",
-        };
-    }
-    return {
-        stage: "complete",
-        status: "pass",
-        message: "All checks passed",
-    };
-}
+import{USER_DEFINED_PERM_INDEX_START,MAX_ENTITY_COUNT,MAX_PERM_FOR_ENTITY,MAX_ADMIN_COUNT}from'@wowok/wowok';import{isBuiltinPermission,findSceneByPermissionIndex}from'./permission-ledger.js';import{assessPermissionRisks}from'./permission-risk.js';export const PERMISSION_PUBLISH_CHECKLIST=[{'id':'C-P-01','description':'Custom\x20permissionIndex\x20>=\x201000\x20(USER_DEFINED_PERM_INDEX_START)','passed':![],'message':''},{'id':'C-P-02','description':'Entity\x20count\x20<=\x20MAX_ENTITY_COUNT\x20(1000)','passed':![],'message':''},{'id':'C-P-03','description':'Per-entity\x20permission\x20count\x20<=\x20MAX_PERM_FOR_ENTITY\x20(1000)','passed':![],'message':''},{'id':'C-P-04','description':'Admin\x20count\x20<=\x20MAX_ADMIN_COUNT\x20(500)','passed':![],'message':''},{'id':'C-P-05','description':'Owner\x20address\x20valid\x20(if\x20transfer)','passed':![],'message':''},{'id':'C-P-06','description':'Admin\x20addresses\x20valid','passed':![],'message':''},{'id':'C-P-07','description':'Entity\x20addresses\x20valid','passed':![],'message':''},{'id':'C-P-08','description':'UM\x20address\x20valid\x20(Contact\x20object)\x20or\x20null','passed':![],'message':''},{'id':'C-P-09','description':'apply\x20object\x20types\x20match\x20permission\x20indexes','passed':![],'message':''},{'id':'C-P-10','description':'All\x20custom\x20permissions\x20(>=\x201000)\x20have\x20remark','passed':![],'message':''},{'id':'C-P-11','description':'Ownership\x20transfer\x20double-confirmed','passed':![],'message':''}];function runStaticChecklist(a){const b=PERMISSION_PUBLISH_CHECKLIST['map'](f=>({...f})),c=a['permission_json'];if(c['table']&&'index'in c['table']&&typeof c['table']['index']==='number'){const f=c['table']['index'],g=f<USER_DEFINED_PERM_INDEX_START?isBuiltinPermission(f):!![],h=b['find'](j=>j['id']==='C-P-01');h['passed']=g,h['message']=g?'':'Permission\x20index\x20'+f+'\x20is\x20<\x20'+USER_DEFINED_PERM_INDEX_START+'\x20and\x20not\x20builtin';}else b['find'](j=>j['id']==='C-P-01')['passed']=!![];const d=a['current_entity_count']??0x0,e=b['find'](j=>j['id']==='C-P-02');e['passed']=d<=MAX_ENTITY_COUNT,e['message']=e['passed']?'':'Entity\x20count\x20'+d+'\x20>\x20'+MAX_ENTITY_COUNT;if(c['table']&&'index'in c['table']&&Array['isArray'](c['table']['index'])){const i=c['table']['index']['length']<=MAX_PERM_FOR_ENTITY,j=b['find'](k=>k['id']==='C-P-03');j['passed']=i,j['message']=i?'':'Per-entity\x20perm\x20count\x20'+c['table']['index']['length']+'\x20>\x20'+MAX_PERM_FOR_ENTITY;}else b['find'](k=>k['id']==='C-P-03')['passed']=!![];if(c['admin']){const k=c['admin']['op']==='set'?c['admin']['addresses']['length']:a['current_admin_count']??0x0,l=k<=MAX_ADMIN_COUNT,m=b['find'](n=>n['id']==='C-P-04');m['passed']=l,m['message']=l?'':'Admin\x20count\x20'+k+'\x20>\x20'+MAX_ADMIN_COUNT;}else b['find'](n=>n['id']==='C-P-04')['passed']=!![];if(c['builder']){const n=c['builder']['startsWith']('0x')&&c['builder']['length']>=0x28,o=b['find'](p=>p['id']==='C-P-05');o['passed']=n,o['message']=n?'':'New\x20owner\x20address\x20'+c['builder']+'\x20invalid';}else b['find'](p=>p['id']==='C-P-05')['passed']=!![];if(c['admin']){const p=c['admin']['addresses']['every'](r=>r['startsWith']('0x')&&r['length']>=0x28),q=b['find'](r=>r['id']==='C-P-06');q['passed']=p,q['message']=p?'':'Some\x20admin\x20address\x20invalid';}else b['find'](r=>r['id']==='C-P-06')['passed']=!![];if(c['table']){const r='entity'in c['table']?Array['isArray'](c['table']['entity'])?c['table']['entity']:[c['table']['entity']]:[],s=r['every'](u=>u['startsWith']('0x')&&u['length']>=0x28),t=b['find'](u=>u['id']==='C-P-07');t['passed']=s,t['message']=s?'':'Some\x20entity\x20address\x20invalid';}else b['find'](u=>u['id']==='C-P-07')['passed']=!![];if(c['um']!==undefined){const u=c['um']===null||c['um']['startsWith']('0x')&&c['um']['length']>=0x28,v=b['find'](w=>w['id']==='C-P-08');v['passed']=u,v['message']=u?'':'UM\x20address\x20'+c['um']+'\x20invalid';}else b['find'](w=>w['id']==='C-P-08')['passed']=!![];if(c['apply']&&c['apply']['length']>0x0&&c['table']&&'index'in c['table']&&typeof c['table']['index']==='number'){const w=findSceneByPermissionIndex(c['table']['index']);if(w&&a['target_objects_types']){const x=a['target_objects_types']['filter'](z=>z!==w['host_object']),y=b['find'](z=>z['id']==='C-P-09');y['passed']=x['length']===0x0,y['message']=x['length']===0x0?'':'Index\x20'+c['table']['index']+'\x20expects\x20'+w['host_object']+',\x20got\x20'+x['join'](',');}else b['find'](z=>z['id']==='C-P-09')['passed']=!![];}else b['find'](z=>z['id']==='C-P-09')['passed']=!![];if(c['table']&&'index'in c['table']&&typeof c['table']['index']==='number'&&c['table']['index']>=USER_DEFINED_PERM_INDEX_START){const z=c['remark']&&'remark'in c['remark']&&c['remark']['index']===c['table']['index'],A=b['find'](B=>B['id']==='C-P-10');A['passed']=!!z,A['message']=z?'':'Custom\x20permission\x20'+c['table']['index']+'\x20has\x20no\x20remark';}else b['find'](B=>B['id']==='C-P-10')['passed']=!![];return c['builder']?(b['find'](B=>B['id']==='C-P-11')['passed']=![],b['find'](B=>B['id']==='C-P-11')['message']='Pending\x20user\x20confirmation\x20in\x20Layer\x203'):b['find'](B=>B['id']==='C-P-11')['passed']=!![],{'all_passed':b['filter'](B=>B['id']!=='C-P-11')['every'](B=>B['passed']),'items':b};}function adaptRiskAssessment(a,b){const c={'object':a['permission_json']['object'],'description':a['permission_json']['description'],'admin':a['permission_json']['admin'],'table':a['permission_json']['table'],'entity':a['permission_json']['entity'],'remark':a['permission_json']['remark'],'apply':a['permission_json']['apply'],'builder':a['permission_json']['builder'],'um':a['permission_json']['um'],'current_admin_count':a['current_admin_count'],'current_entity_count':a['current_entity_count'],'target_objects_types':a['target_objects_types']};return assessPermissionRisks(c);}export const PERMISSION_CONFIRMATION_QUESTIONS=[{'id':'QP1','question':'Are\x20all\x20admin\x20addresses\x20correctly\x20verified\x20as\x20trusted\x20parties?','requires_explicit_yes':!![]},{'id':'QP2','question':'Are\x20all\x20entity\x20addresses\x20(users/Guards)\x20correctly\x20assigned\x20to\x20their\x20intended\x20permission\x20indexes?','requires_explicit_yes':!![]},{'id':'QP3','question':'If\x20using\x20custom\x20permission\x20indexes\x20(>=\x201000),\x20are\x20all\x20remarks\x20documented?','requires_explicit_yes':!![]},{'id':'QP4','question':'If\x20applying\x20to\x20target\x20objects,\x20have\x20you\x20verified\x20the\x20target\x20object\x20types\x20match\x20the\x20permission\x20indexes\x20used?','requires_explicit_yes':!![]},{'id':'QP5','question':'⚠️\x20If\x20transferring\x20ownership:\x20do\x20you\x20confirm\x20the\x20new\x20owner\x20address\x20is\x20correct?\x20This\x20operation\x20is\x20IRREVERSIBLE.','requires_explicit_yes':!![],'related_risk_ids':['R-P-4-01']},{'id':'QP6','question':'Have\x20you\x20exported\x20the\x20current\x20Permission\x20JSON\x20as\x20a\x20backup\x20before\x20this\x20operation?','requires_explicit_yes':![]}];function processUserConfirmation(a,b){const c=[...PERMISSION_CONFIRMATION_QUESTIONS];if(!a['permission_json']['builder']){const d=c['findIndex'](e=>e['id']==='QP5');if(d>=0x0)c['splice'](d,0x1);}if(a['skip_user_confirmation'])return{'questions_asked':c,'responses':c['map'](e=>({'question_id':e['id'],'response':'yes'})),'all_confirmed':!![]};return{'questions_asked':c,'responses':[],'all_confirmed':![]};}function verifyEnvironment(a){const b=[];a['permission_json']['object']&&b['push']({'name':'object_exists','passed':!![],'message':'Permission\x20object\x20'+a['permission_json']['object']+'\x20assumed\x20to\x20exist'});if(a['permission_json']['builder']||a['permission_json']['um']!==undefined)b['push']({'name':'signer_is_owner','passed':!![],'message':'Signer\x20must\x20be\x20owner\x20for\x20transfer/um_set\x20operations'});else(a['permission_json']['admin']||a['permission_json']['table']||a['permission_json']['remark'])&&b['push']({'name':'signer_is_admin','passed':!![],'message':'Signer\x20must\x20be\x20admin\x20for\x20table/remark/admin\x20operations'});a['permission_json']['apply']&&a['permission_json']['apply']['length']>0x0&&b['push']({'name':'apply_targets_exist_and_owned','passed':!![],'message':'Signer\x20must\x20be\x20owner\x20of\x20'+a['permission_json']['apply']['length']+'\x20target\x20object(s)'});const c=b['every'](d=>d['passed']);return{'passed':c,'checks':b};}export const PERMISSION_CONFIRM_VERSION='1.0.0';export function runPermissionConfirmGate(a){const b=[],c=[],d=runStaticChecklist(a);if(!d['all_passed'])return c['push']('L1_checklist'),{'status':'blocked_checklist','checklist_result':d,'confirmation_text':generateConfirmationText(a,d),'block_reason':'Checklist\x20failed:\x20'+d['items']['filter'](h=>!h['passed'])['map'](h=>h['id'])['join'](',\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PERMISSION_CONFIRM_VERSION,'final_status':'blocked_checklist','layers_passed':b,'layers_failed':c}};b['push']('L1_checklist');const e=adaptRiskAssessment(a,d),f=e['risks']['some'](h=>h['level']==='CRITICAL');if(f)return c['push']('L2_risk'),{'status':'blocked_risk','checklist_result':d,'risk_result':e,'confirmation_text':generateConfirmationText(a,d,e),'block_reason':'CRITICAL\x20risks:\x20'+e['risks']['filter'](h=>h['level']==='CRITICAL')['map'](h=>h['id'])['join'](',\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PERMISSION_CONFIRM_VERSION,'final_status':'blocked_risk','layers_passed':b,'layers_failed':c}};b['push']('L2_risk');const g=processUserConfirmation(a,e);if(!g['all_confirmed']){if(a['permission_json']['builder']){const h=d['items']['find'](j=>j['id']==='C-P-11');if(h){const i=g['responses']['find'](j=>j['question_id']==='QP5');h['passed']=i?.['response']==='yes',h['message']=h['passed']?'':'Transfer\x20not\x20confirmed\x20by\x20user';}}if(!d['all_passed']&&a['permission_json']['builder']){const j=d['items']['find'](k=>k['id']==='C-P-11');if(j&&!j['passed'])return c['push']('L3_user'),{'status':'blocked_user','checklist_result':d,'risk_result':e,'user_confirmation':g,'confirmation_text':generateConfirmationText(a,d,e),'block_reason':'User\x20did\x20not\x20confirm\x20ownership\x20transfer','decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PERMISSION_CONFIRM_VERSION,'final_status':'blocked_user','layers_passed':b,'layers_failed':c}};}}b['push']('L3_user');if(a['skip_environment_check'])b['push']('L4_environment');else{const k=verifyEnvironment(a);if(!k['passed'])return c['push']('L4_environment'),{'status':'blocked_environment','checklist_result':d,'risk_result':e,'user_confirmation':g,'environment_result':k,'confirmation_text':generateConfirmationText(a,d,e),'block_reason':'Environment\x20check\x20failed:\x20'+k['checks']['filter'](l=>!l['passed'])['map'](l=>l['name'])['join'](',\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PERMISSION_CONFIRM_VERSION,'final_status':'blocked_environment','layers_passed':b,'layers_failed':c}};b['push']('L4_environment');}return{'status':'approved','checklist_result':d,'risk_result':e,'user_confirmation':g,'confirmation_text':generateConfirmationText(a,d,e),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PERMISSION_CONFIRM_VERSION,'final_status':'approved','layers_passed':b,'layers_failed':c}};}function generateConfirmationText(a,b,c){const d=[],e=a['permission_json'];d['push']('═══\x20Permission\x20Confirmation\x20═══'),d['push']('');e['object']?d['push']('Permission:\x20'+e['object']):d['push']('Permission:\x20NEW\x20(to\x20be\x20created)');if(e['description'])d['push']('Description:\x20'+e['description']);d['push'](''),d['push']('─\x20Checklist\x20──────────────────');for(const f of b['items']){const g=f['passed']?'✓':'✗';d['push']('\x20\x20'+g+'\x20'+f['id']+':\x20'+f['description']+(f['message']?'\x20—\x20'+f['message']:''));}d['push']('');if(c){d['push']('─\x20Risk\x20Assessment\x20──────────────────'),d['push']('Overall:\x20'+c['overall_risk']),d['push']('Detected:\x20'+c['risks']['length']+'\x20risk(s)');for(const h of c['risks']){d['push']('\x20\x20['+h['level']+']\x20'+h['id']+':\x20'+h['title']);}d['push']('');}d['push']('─\x20Operations\x20──────────────────');if(e['admin'])d['push']('-\x20Admin\x20'+e['admin']['op']+':\x20'+e['admin']['addresses']['length']+'\x20address(es)');if(e['table'])d['push']('-\x20Table\x20op:\x20'+e['table']['op']);if(e['entity'])d['push']('-\x20Entity\x20op:\x20'+e['entity']['op']);if(e['remark'])d['push']('-\x20Remark\x20op:\x20'+e['remark']['op']);if(e['apply'])d['push']('-\x20Apply\x20to:\x20'+e['apply']['length']+'\x20object(s)');if(e['builder'])d['push']('-\x20⚠️\x20TRANSFER\x20to:\x20'+e['builder']);if(e['um']!==undefined)d['push']('-\x20UM:\x20'+(e['um']??'(revoke)'));return d['push'](''),d['join']('\x0a');}export function progressivePermissionCheck(a){const b=runStaticChecklist(a);if(!b['all_passed'])return{'stage':'checklist','status':'fail','message':'Checklist\x20failed:\x20'+b['items']['filter'](d=>!d['passed'])['map'](d=>d['id'])['join'](',\x20'),'next_action':'Fix\x20failing\x20checklist\x20items'};const c=adaptRiskAssessment(a,b);if(c['risks']['some'](d=>d['level']==='CRITICAL'))return{'stage':'risk','status':'fail','message':'CRITICAL\x20risks:\x20'+c['risks']['filter'](d=>d['level']==='CRITICAL')['map'](d=>d['id'])['join'](',\x20'),'next_action':'Resolve\x20CRITICAL\x20risks\x20before\x20proceeding'};if(c['needs_human_review'])return{'stage':'confirmation','status':'pending','message':'Human\x20review\x20required\x20for\x20HIGH\x20risks','next_action':'Confirm\x20risk\x20acceptance'};return{'stage':'complete','status':'pass','message':'All\x20checks\x20passed'};}