@wowok/agent-mcp 2.7.1 → 2.7.3

package/dist/knowledge/progress-confirm.js

@@ -1,456 +1 @@
-import { MAX_NAMED_OPERATOR_COUNT, MAX_NAMED_OPERATOR_ADDRESS_COUNT, MAX_CONTEXT_REPOSITORY_COUNT, } from "@wowok/wowok";
-import { assessProgressRisks, } from "./progress-risk.js";
-export const PROGRESS_OPERATION_CHECKLIST = [
-    { id: "C-PR-01", description: "Machine is published (machine::on_progress_new asserts published)", passed: false, message: "" },
-    { id: "C-PR-02", description: "progress.machine matches the bound Machine (E_MACHINE_NOT_MATCH)", passed: false, message: "" },
-    { id: "C-PR-03", description: "named_operator count < MAX_NAMED_OPERATOR_COUNT (60)", passed: false, message: "" },
-    { id: "C-PR-04", description: "named_operator addresses ≤ MAX_NAMED_OPERATOR_ADDRESS_COUNT (80)", passed: false, message: "" },
-    { id: "C-PR-05", description: "context_repository count ≤ MAX_CONTEXT_REPOSITORY_COUNT (30)", passed: false, message: "" },
-    { id: "C-PR-06", description: "task_set is one-time (E_TASK_ALREADY_SET if already bound)", passed: false, message: "" },
-    { id: "C-PR-07", description: "operate.op is one of: next | hold | unhold | adminUnhold", passed: false, message: "" },
-    { id: "C-PR-08", description: "operate.message ≤ MAX_LONG_NAME_LENGTH (1024 chars)", passed: false, message: "" },
-    { id: "C-PR-09", description: "Forward exists in Machine (current → next_node_name, forward)", passed: false, message: "" },
-    { id: "C-PR-10", description: "adminUnhold (224 permission) double-confirmed by user", passed: false, message: "" },
-];
-function runStaticChecklist(input) {
-    const items = PROGRESS_OPERATION_CHECKLIST.map(c => ({ ...c }));
-    const data = input.progress_json;
-    const cp01 = items.find(i => i.id === "C-PR-01");
-    if (input.machine_published === false) {
-        cp01.passed = false;
-        cp01.message = `Machine ${input.current_machine ?? "(unknown)"} not published`;
-    }
-    else {
-        cp01.passed = true;
-    }
-    const cp02 = items.find(i => i.id === "C-PR-02");
-    cp02.passed = !!input.current_machine || !!data.object;
-    cp02.message = cp02.passed ? "" : "No machine bound";
-    const cp03 = items.find(i => i.id === "C-PR-03");
-    const currentOps = input.current_named_operator_count ?? 0;
-    const isAddingNewName = data.progress_namedOperator?.op === "add" || data.progress_namedOperator?.op === "set";
-    if (isAddingNewName && currentOps >= MAX_NAMED_OPERATOR_COUNT) {
-        cp03.passed = false;
-        cp03.message = `named_operator count ${currentOps} ≥ MAX_NAMED_OPERATOR_COUNT ${MAX_NAMED_OPERATOR_COUNT}`;
-    }
-    else {
-        cp03.passed = true;
-    }
-    const cp04 = items.find(i => i.id === "C-PR-04");
-    if (data.progress_namedOperator) {
-        const count = data.progress_namedOperator.operators.length;
-        cp04.passed = count <= MAX_NAMED_OPERATOR_ADDRESS_COUNT;
-        cp04.message = cp04.passed ? "" : `${count} > ${MAX_NAMED_OPERATOR_ADDRESS_COUNT}`;
-    }
-    else {
-        cp04.passed = true;
-    }
-    const cp05 = items.find(i => i.id === "C-PR-05");
-    if (data.repository && (data.repository.op === "add" || data.repository.op === "set")) {
-        const current = input.current_context_repository_count ?? 0;
-        const addCount = data.repository.op === "set" ? data.repository.objects.length : data.repository.objects.length;
-        const newCount = data.repository.op === "set" ? addCount : current + addCount;
-        cp05.passed = newCount <= MAX_CONTEXT_REPOSITORY_COUNT;
-        cp05.message = cp05.passed ? "" : `${newCount} > ${MAX_CONTEXT_REPOSITORY_COUNT}`;
-    }
-    else {
-        cp05.passed = true;
-    }
-    const cp06 = items.find(i => i.id === "C-PR-06");
-    if (data.task && input.current_task) {
-        cp06.passed = false;
-        cp06.message = `task already set to ${input.current_task} — E_TASK_ALREADY_SET will abort`;
-    }
-    else {
-        cp06.passed = true;
-    }
-    const cp07 = items.find(i => i.id === "C-PR-07");
-    const validOps = ["next", "hold", "unhold", "adminUnhold"];
-    if (data.operate && data.operate.op && !validOps.includes(data.operate.op)) {
-        cp07.passed = false;
-        cp07.message = `operate.op must be one of: ${validOps.join(", ")}`;
-    }
-    else {
-        cp07.passed = true;
-    }
-    const cp08 = items.find(i => i.id === "C-PR-08");
-    if (data.operate?.message) {
-        const len = data.operate.message.length;
-        cp08.passed = len <= 1024;
-        cp08.message = cp08.passed ? "" : `message length ${len} > 1024`;
-    }
-    else {
-        cp08.passed = true;
-    }
-    const cp09 = items.find(i => i.id === "C-PR-09");
-    if (data.operate) {
-        cp09.passed = true;
-        cp09.message = "Forward existence verified in L4 (queryTableItem_MachineNode)";
-    }
-    else {
-        cp09.passed = true;
-    }
-    const cp10 = items.find(i => i.id === "C-PR-10");
-    if (data.operate?.op === "adminUnhold") {
-        cp10.passed = false;
-        cp10.message = "Pending user confirmation in L3 (QPR3)";
-    }
-    else {
-        cp10.passed = true;
-    }
-    return {
-        all_passed: items.filter(i => i.id !== "C-PR-10").every(i => i.passed),
-        items,
-    };
-}
-function adaptRiskAssessment(input) {
-    const ctx = {
-        object: input.progress_json.object,
-        task: input.progress_json.task,
-        repository: input.progress_json.repository,
-        progress_namedOperator: input.progress_json.progress_namedOperator,
-        operate: input.progress_json.operate,
-        current_machine: input.current_machine,
-        machine_published: input.machine_published,
-        current_task: input.current_task,
-        current_named_operator_count: input.current_named_operator_count,
-        current_context_repository_count: input.current_context_repository_count,
-        current_node: input.current_node,
-        forward_already_accomplished: input.forward_already_accomplished,
-        holder_address: input.holder_address,
-        signer: input.signer,
-        forward_named_operator: input.forward_named_operator,
-        forward_permission_index: input.forward_permission_index,
-        forward_has_guard: input.forward_has_guard,
-        target_objects_types: input.target_objects_types,
-    };
-    return assessProgressRisks(ctx);
-}
-export const PROGRESS_CONFIRMATION_QUESTIONS = [
-    {
-        id: "QPR1",
-        question: "Is the target Progress object address correct, and is it bound to the intended Machine?",
-        requires_explicit_yes: true,
-    },
-    {
-        id: "QPR2",
-        question: "For task_set: do you acknowledge that task is ONE-TIME and immutable (E_TASK_ALREADY_SET blocks any re-assignment)?",
-        requires_explicit_yes: true,
-        related_risk_ids: ["R-PR-2-01"],
-    },
-    {
-        id: "QPR3",
-        question: "⚠️ For adminUnhold: do you confirm force-releasing the held forward via 224 permission? This bypasses the holder check.",
-        requires_explicit_yes: true,
-        related_risk_ids: ["R-PR-3-01"],
-    },
-    {
-        id: "QPR4",
-        question: "For named_operator changes: are all addresses verified as the intended role holders (not expired/compromised)?",
-        requires_explicit_yes: true,
-        related_risk_ids: ["R-PR-3-02"],
-    },
-    {
-        id: "QPR5",
-        question: "For Forward advance (next/hold): does the Forward exist in the Machine, and is the caller authorized (named_operator match OR order.has_op_permission)?",
-        requires_explicit_yes: true,
-        related_risk_ids: ["R-PR-3-03", "R-PR-4-03"],
-    },
-    {
-        id: "QPR6",
-        question: "For context_repository binding: have you verified the Repository addresses still exist and are owned by trusted parties?",
-        requires_explicit_yes: false,
-        related_risk_ids: ["R-PR-5-02"],
-    },
-];
-function processUserConfirmation(input, assessment) {
-    const questions = [...PROGRESS_CONFIRMATION_QUESTIONS];
-    const data = input.progress_json;
-    const filtered = [];
-    for (const q of questions) {
-        if (q.id === "QPR2" && !data.task)
-            continue;
-        if (q.id === "QPR3" && data.operate?.op !== "adminUnhold")
-            continue;
-        if (q.id === "QPR4" && !data.progress_namedOperator)
-            continue;
-        if (q.id === "QPR5" && !data.operate)
-            continue;
-        if (q.id === "QPR6" && !data.repository)
-            continue;
-        filtered.push(q);
-    }
-    if (input.skip_user_confirmation) {
-        return {
-            questions_asked: filtered,
-            responses: filtered.map(q => ({ question_id: q.id, response: "yes" })),
-            all_confirmed: true,
-        };
-    }
-    return {
-        questions_asked: filtered,
-        responses: [],
-        all_confirmed: false,
-    };
-}
-function verifyEnvironment(input) {
-    const checks = [];
-    if (input.progress_json.object) {
-        checks.push({
-            name: "progress_exists",
-            passed: true,
-            message: `Progress ${input.progress_json.object} assumed to exist`,
-        });
-    }
-    if (input.current_machine) {
-        checks.push({
-            name: "machine_published_and_bound",
-            passed: input.machine_published !== false,
-            message: input.machine_published === false
-                ? `Machine ${input.current_machine} NOT published`
-                : `Machine ${input.current_machine} published and bound`,
-        });
-    }
-    if (input.progress_json.operate) {
-        checks.push({
-            name: "forward_exists_in_machine",
-            passed: true,
-            message: `Forward "${input.progress_json.operate.operation.forward}" from "${input.current_node ?? "(unknown)"}" → "${input.progress_json.operate.operation.next_node_name}" — verify via queryTableItem_MachineNode`,
-        });
-    }
-    if (input.progress_json.operate && input.signer) {
-        const isOrderHolder = input.forward_named_operator === "";
-        const isNamedOperatorMatch = !!input.forward_named_operator && input.forward_named_operator !== "";
-        checks.push({
-            name: "signer_authorized_for_forward",
-            passed: true,
-            message: isOrderHolder
-                ? `OrderHolder namespace — signer must be order.owner/agent (use order_next/order_hold)`
-                : isNamedOperatorMatch
-                    ? `namedOperator="${input.forward_named_operator}" — signer must be in operator list`
-                    : `Forward.permissionIndex=${input.forward_permission_index ?? "None"} — signer must have this index`,
-        });
-    }
-    if (input.progress_json.operate &&
-        input.progress_json.operate.op === "unhold" &&
-        input.holder_address) {
-        const isHolder = input.signer === input.holder_address;
-        checks.push({
-            name: "unhold_by_holder",
-            passed: isHolder,
-            message: isHolder
-                ? "Signer is the holder — unhold allowed"
-                : `Signer ${input.signer} ≠ holder ${input.holder_address} — E_NOT_THE_HOLDER will abort (use adminUnhold for force release)`,
-        });
-    }
-    const allPassed = checks.every(c => c.passed);
-    return { passed: allPassed, checks };
-}
-export const PROGRESS_CONFIRM_VERSION = "1.0.0";
-export function runProgressConfirmGate(input) {
-    const layersPassed = [];
-    const layersFailed = [];
-    const checklist = runStaticChecklist(input);
-    if (!checklist.all_passed) {
-        layersFailed.push("L1_checklist");
-        return {
-            status: "blocked_checklist",
-            checklist_result: checklist,
-            confirmation_text: generateConfirmationText(input, checklist),
-            block_reason: `Checklist failed: ${checklist.items.filter(i => !i.passed).map(i => i.id).join(", ")}`,
-            decision_record: {
-                timestamp: new Date().toISOString(),
-                gate_version: PROGRESS_CONFIRM_VERSION,
-                final_status: "blocked_checklist",
-                layers_passed: layersPassed,
-                layers_failed: layersFailed,
-            },
-        };
-    }
-    layersPassed.push("L1_checklist");
-    const assessment = adaptRiskAssessment(input);
-    const hasCritical = assessment.risks.some(r => r.level === "CRITICAL");
-    if (hasCritical) {
-        layersFailed.push("L2_risk");
-        return {
-            status: "blocked_risk",
-            checklist_result: checklist,
-            risk_result: assessment,
-            confirmation_text: generateConfirmationText(input, checklist, assessment),
-            block_reason: `CRITICAL risks: ${assessment.risks.filter(r => r.level === "CRITICAL").map(r => r.id).join(", ")}`,
-            decision_record: {
-                timestamp: new Date().toISOString(),
-                gate_version: PROGRESS_CONFIRM_VERSION,
-                final_status: "blocked_risk",
-                layers_passed: layersPassed,
-                layers_failed: layersFailed,
-            },
-        };
-    }
-    layersPassed.push("L2_risk");
-    const userConf = processUserConfirmation(input, assessment);
-    if (!userConf.all_confirmed) {
-        if (input.progress_json.operate?.op === "adminUnhold") {
-            const cp10 = checklist.items.find(i => i.id === "C-PR-10");
-            if (cp10) {
-                const qpr3 = userConf.responses.find(r => r.question_id === "QPR3");
-                cp10.passed = qpr3?.response === "yes";
-                cp10.message = cp10.passed ? "" : "adminUnhold not confirmed by user (QPR3)";
-            }
-        }
-        if (input.progress_json.operate?.op === "adminUnhold") {
-            const cp10 = checklist.items.find(i => i.id === "C-PR-10");
-            if (cp10 && !cp10.passed) {
-                layersFailed.push("L3_user");
-                return {
-                    status: "blocked_user",
-                    checklist_result: checklist,
-                    risk_result: assessment,
-                    user_confirmation: userConf,
-                    confirmation_text: generateConfirmationText(input, checklist, assessment),
-                    block_reason: "User did not confirm adminUnhold (QPR3)",
-                    decision_record: {
-                        timestamp: new Date().toISOString(),
-                        gate_version: PROGRESS_CONFIRM_VERSION,
-                        final_status: "blocked_user",
-                        layers_passed: layersPassed,
-                        layers_failed: layersFailed,
-                    },
-                };
-            }
-        }
-    }
-    layersPassed.push("L3_user");
-    if (input.skip_environment_check) {
-        layersPassed.push("L4_environment");
-    }
-    else {
-        const env = verifyEnvironment(input);
-        if (!env.passed) {
-            layersFailed.push("L4_environment");
-            return {
-                status: "blocked_environment",
-                checklist_result: checklist,
-                risk_result: assessment,
-                user_confirmation: userConf,
-                environment_result: env,
-                confirmation_text: generateConfirmationText(input, checklist, assessment),
-                block_reason: `Environment check failed: ${env.checks.filter(c => !c.passed).map(c => c.name).join(", ")}`,
-                decision_record: {
-                    timestamp: new Date().toISOString(),
-                    gate_version: PROGRESS_CONFIRM_VERSION,
-                    final_status: "blocked_environment",
-                    layers_passed: layersPassed,
-                    layers_failed: layersFailed,
-                },
-            };
-        }
-        layersPassed.push("L4_environment");
-    }
-    return {
-        status: "approved",
-        checklist_result: checklist,
-        risk_result: assessment,
-        user_confirmation: userConf,
-        confirmation_text: generateConfirmationText(input, checklist, assessment),
-        decision_record: {
-            timestamp: new Date().toISOString(),
-            gate_version: PROGRESS_CONFIRM_VERSION,
-            final_status: "approved",
-            layers_passed: layersPassed,
-            layers_failed: layersFailed,
-        },
-    };
-}
-function generateConfirmationText(input, checklist, assessment) {
-    const lines = [];
-    const data = input.progress_json;
-    lines.push("═══ Progress Operation Confirmation ═══");
-    lines.push("");
-    if (data.object) {
-        lines.push(`Progress: ${data.object}`);
-    }
-    else {
-        lines.push("Progress: NEW (indirect via service::buy)");
-    }
-    if (input.current_machine) {
-        lines.push(`Bound Machine: ${input.current_machine} (published: ${input.machine_published !== false ? "YES" : "NO"})`);
-    }
-    if (input.current_node) {
-        lines.push(`Current node: ${input.current_node}`);
-    }
-    lines.push("");
-    lines.push("─ Checklist ──────────────────");
-    for (const item of checklist.items) {
-        const mark = item.passed ? "✓" : "✗";
-        lines.push(`  ${mark} ${item.id}: ${item.description}${item.message ? " — " + item.message : ""}`);
-    }
-    lines.push("");
-    if (assessment) {
-        lines.push("─ Risk Assessment ──────────────────");
-        lines.push(`Overall: ${assessment.overall_risk}`);
-        lines.push(`Detected: ${assessment.risks.length} risk(s)`);
-        for (const r of assessment.risks) {
-            lines.push(`  [${r.level}] ${r.id}: ${r.title}`);
-        }
-        lines.push("");
-    }
-    lines.push("─ Operations ──────────────────");
-    if (data.task)
-        lines.push(`- ⚠️ task_set: ${data.task} (one-time, immutable)`);
-    if (data.repository)
-        lines.push(`- Repository ${data.repository.op}: ${data.repository.objects?.length ?? 0} object(s)`);
-    if (data.progress_namedOperator) {
-        const n = data.progress_namedOperator;
-        lines.push(`- namedOperator ${n.op} "${n.name}": ${n.operators.length} address(es)`);
-    }
-    if (data.operate) {
-        const o = data.operate;
-        lines.push(`- Operation: ${o.operation.forward} → ${o.operation.next_node_name}`);
-        if (o.op)
-            lines.push(`  op=${o.op}`);
-        if (o.op === "hold")
-            lines.push(`  ⚠️ hold (lock forward)`);
-        if (o.op === "adminUnhold")
-            lines.push(`  ⚠️ adminUnhold (force release via 224)`);
-        if (o.op === "unhold")
-            lines.push(`  ℹ️ unhold (self-release)`);
-        if (o.message)
-            lines.push(`  Message: "${o.message}"`);
-    }
-    lines.push("");
-    return lines.join("\n");
-}
-export function progressiveProgressCheck(input) {
-    const checklist = runStaticChecklist(input);
-    if (!checklist.all_passed) {
-        return {
-            stage: "checklist",
-            status: "fail",
-            message: `Checklist failed: ${checklist.items.filter(i => !i.passed).map(i => i.id).join(", ")}`,
-            next_action: "Fix failing checklist items",
-        };
-    }
-    const assessment = adaptRiskAssessment(input);
-    if (assessment.risks.some(r => r.level === "CRITICAL")) {
-        return {
-            stage: "risk",
-            status: "fail",
-            message: `CRITICAL risks: ${assessment.risks.filter(r => r.level === "CRITICAL").map(r => r.id).join(", ")}`,
-            next_action: "Resolve CRITICAL risks before proceeding",
-        };
-    }
-    if (assessment.needs_human_review) {
-        return {
-            stage: "confirmation",
-            status: "pending",
-            message: "Human review required for HIGH risks",
-            next_action: "Confirm risk acceptance",
-        };
-    }
-    return {
-        stage: "complete",
-        status: "pass",
-        message: "All checks passed",
-    };
-}
+import{MAX_NAMED_OPERATOR_COUNT,MAX_NAMED_OPERATOR_ADDRESS_COUNT,MAX_CONTEXT_REPOSITORY_COUNT}from'@wowok/wowok';import{assessProgressRisks}from'./progress-risk.js';export const PROGRESS_OPERATION_CHECKLIST=[{'id':'C-PR-01','description':'Machine\x20is\x20published\x20(machine::on_progress_new\x20asserts\x20published)','passed':![],'message':''},{'id':'C-PR-02','description':'progress.machine\x20matches\x20the\x20bound\x20Machine\x20(E_MACHINE_NOT_MATCH)','passed':![],'message':''},{'id':'C-PR-03','description':'named_operator\x20count\x20<\x20MAX_NAMED_OPERATOR_COUNT\x20(60)','passed':![],'message':''},{'id':'C-PR-04','description':'named_operator\x20addresses\x20≤\x20MAX_NAMED_OPERATOR_ADDRESS_COUNT\x20(80)','passed':![],'message':''},{'id':'C-PR-05','description':'context_repository\x20count\x20≤\x20MAX_CONTEXT_REPOSITORY_COUNT\x20(30)','passed':![],'message':''},{'id':'C-PR-06','description':'task_set\x20is\x20one-time\x20(E_TASK_ALREADY_SET\x20if\x20already\x20bound)','passed':![],'message':''},{'id':'C-PR-07','description':'operate.op\x20is\x20one\x20of:\x20next\x20|\x20hold\x20|\x20unhold\x20|\x20adminUnhold','passed':![],'message':''},{'id':'C-PR-08','description':'operate.message\x20≤\x20MAX_LONG_NAME_LENGTH\x20(1024\x20chars)','passed':![],'message':''},{'id':'C-PR-09','description':'Forward\x20exists\x20in\x20Machine\x20(current\x20→\x20next_node_name,\x20forward)','passed':![],'message':''},{'id':'C-PR-10','description':'adminUnhold\x20(224\x20permission)\x20double-confirmed\x20by\x20user','passed':![],'message':''}];function runStaticChecklist(a){const b=PROGRESS_OPERATION_CHECKLIST['map'](q=>({...q})),c=a['progress_json'],d=b['find'](q=>q['id']==='C-PR-01');a['machine_published']===![]?(d['passed']=![],d['message']='Machine\x20'+(a['current_machine']??'(unknown)')+'\x20not\x20published'):d['passed']=!![];const e=b['find'](q=>q['id']==='C-PR-02');e['passed']=!!a['current_machine']||!!c['object'],e['message']=e['passed']?'':'No\x20machine\x20bound';const f=b['find'](q=>q['id']==='C-PR-03'),g=a['current_named_operator_count']??0x0,h=c['progress_namedOperator']?.['op']==='add'||c['progress_namedOperator']?.['op']==='set';h&&g>=MAX_NAMED_OPERATOR_COUNT?(f['passed']=![],f['message']='named_operator\x20count\x20'+g+'\x20≥\x20MAX_NAMED_OPERATOR_COUNT\x20'+MAX_NAMED_OPERATOR_COUNT):f['passed']=!![];const i=b['find'](q=>q['id']==='C-PR-04');if(c['progress_namedOperator']){const q=c['progress_namedOperator']['operators']['length'];i['passed']=q<=MAX_NAMED_OPERATOR_ADDRESS_COUNT,i['message']=i['passed']?'':q+'\x20>\x20'+MAX_NAMED_OPERATOR_ADDRESS_COUNT;}else i['passed']=!![];const j=b['find'](r=>r['id']==='C-PR-05');if(c['repository']&&(c['repository']['op']==='add'||c['repository']['op']==='set')){const r=a['current_context_repository_count']??0x0,s=c['repository']['op']==='set'?c['repository']['objects']['length']:c['repository']['objects']['length'],t=c['repository']['op']==='set'?s:r+s;j['passed']=t<=MAX_CONTEXT_REPOSITORY_COUNT,j['message']=j['passed']?'':t+'\x20>\x20'+MAX_CONTEXT_REPOSITORY_COUNT;}else j['passed']=!![];const k=b['find'](u=>u['id']==='C-PR-06');c['task']&&a['current_task']?(k['passed']=![],k['message']='task\x20already\x20set\x20to\x20'+a['current_task']+'\x20—\x20E_TASK_ALREADY_SET\x20will\x20abort'):k['passed']=!![];const l=b['find'](u=>u['id']==='C-PR-07'),m=['next','hold','unhold','adminUnhold'];c['operate']&&c['operate']['op']&&!m['includes'](c['operate']['op'])?(l['passed']=![],l['message']='operate.op\x20must\x20be\x20one\x20of:\x20'+m['join'](',\x20')):l['passed']=!![];const n=b['find'](u=>u['id']==='C-PR-08');if(c['operate']?.['message']){const u=c['operate']['message']['length'];n['passed']=u<=0x400,n['message']=n['passed']?'':'message\x20length\x20'+u+'\x20>\x201024';}else n['passed']=!![];const o=b['find'](v=>v['id']==='C-PR-09');c['operate']?(o['passed']=!![],o['message']='Forward\x20existence\x20verified\x20in\x20L4\x20(queryTableItem_MachineNode)'):o['passed']=!![];const p=b['find'](v=>v['id']==='C-PR-10');return c['operate']?.['op']==='adminUnhold'?(p['passed']=![],p['message']='Pending\x20user\x20confirmation\x20in\x20L3\x20(QPR3)'):p['passed']=!![],{'all_passed':b['filter'](v=>v['id']!=='C-PR-10')['every'](v=>v['passed']),'items':b};}function adaptRiskAssessment(a){const b={'object':a['progress_json']['object'],'task':a['progress_json']['task'],'repository':a['progress_json']['repository'],'progress_namedOperator':a['progress_json']['progress_namedOperator'],'operate':a['progress_json']['operate'],'current_machine':a['current_machine'],'machine_published':a['machine_published'],'current_task':a['current_task'],'current_named_operator_count':a['current_named_operator_count'],'current_context_repository_count':a['current_context_repository_count'],'current_node':a['current_node'],'forward_already_accomplished':a['forward_already_accomplished'],'holder_address':a['holder_address'],'signer':a['signer'],'forward_named_operator':a['forward_named_operator'],'forward_permission_index':a['forward_permission_index'],'forward_has_guard':a['forward_has_guard'],'target_objects_types':a['target_objects_types']};return assessProgressRisks(b);}export const PROGRESS_CONFIRMATION_QUESTIONS=[{'id':'QPR1','question':'Is\x20the\x20target\x20Progress\x20object\x20address\x20correct,\x20and\x20is\x20it\x20bound\x20to\x20the\x20intended\x20Machine?','requires_explicit_yes':!![]},{'id':'QPR2','question':'For\x20task_set:\x20do\x20you\x20acknowledge\x20that\x20task\x20is\x20ONE-TIME\x20and\x20immutable\x20(E_TASK_ALREADY_SET\x20blocks\x20any\x20re-assignment)?','requires_explicit_yes':!![],'related_risk_ids':['R-PR-2-01']},{'id':'QPR3','question':'⚠️\x20For\x20adminUnhold:\x20do\x20you\x20confirm\x20force-releasing\x20the\x20held\x20forward\x20via\x20224\x20permission?\x20This\x20bypasses\x20the\x20holder\x20check.','requires_explicit_yes':!![],'related_risk_ids':['R-PR-3-01']},{'id':'QPR4','question':'For\x20named_operator\x20changes:\x20are\x20all\x20addresses\x20verified\x20as\x20the\x20intended\x20role\x20holders\x20(not\x20expired/compromised)?','requires_explicit_yes':!![],'related_risk_ids':['R-PR-3-02']},{'id':'QPR5','question':'For\x20Forward\x20advance\x20(next/hold):\x20does\x20the\x20Forward\x20exist\x20in\x20the\x20Machine,\x20and\x20is\x20the\x20caller\x20authorized\x20(named_operator\x20match\x20OR\x20order.has_op_permission)?','requires_explicit_yes':!![],'related_risk_ids':['R-PR-3-03','R-PR-4-03']},{'id':'QPR6','question':'For\x20context_repository\x20binding:\x20have\x20you\x20verified\x20the\x20Repository\x20addresses\x20still\x20exist\x20and\x20are\x20owned\x20by\x20trusted\x20parties?','requires_explicit_yes':![],'related_risk_ids':['R-PR-5-02']}];function processUserConfirmation(a,b){const c=[...PROGRESS_CONFIRMATION_QUESTIONS],d=a['progress_json'],e=[];for(const f of c){if(f['id']==='QPR2'&&!d['task'])continue;if(f['id']==='QPR3'&&d['operate']?.['op']!=='adminUnhold')continue;if(f['id']==='QPR4'&&!d['progress_namedOperator'])continue;if(f['id']==='QPR5'&&!d['operate'])continue;if(f['id']==='QPR6'&&!d['repository'])continue;e['push'](f);}if(a['skip_user_confirmation'])return{'questions_asked':e,'responses':e['map'](g=>({'question_id':g['id'],'response':'yes'})),'all_confirmed':!![]};return{'questions_asked':e,'responses':[],'all_confirmed':![]};}function verifyEnvironment(a){const b=[];a['progress_json']['object']&&b['push']({'name':'progress_exists','passed':!![],'message':'Progress\x20'+a['progress_json']['object']+'\x20assumed\x20to\x20exist'});a['current_machine']&&b['push']({'name':'machine_published_and_bound','passed':a['machine_published']!==![],'message':a['machine_published']===![]?'Machine\x20'+a['current_machine']+'\x20NOT\x20published':'Machine\x20'+a['current_machine']+'\x20published\x20and\x20bound'});a['progress_json']['operate']&&b['push']({'name':'forward_exists_in_machine','passed':!![],'message':'Forward\x20\x22'+a['progress_json']['operate']['operation']['forward']+'\x22\x20from\x20\x22'+(a['current_node']??'(unknown)')+'\x22\x20→\x20\x22'+a['progress_json']['operate']['operation']['next_node_name']+'\x22\x20—\x20verify\x20via\x20queryTableItem_MachineNode'});if(a['progress_json']['operate']&&a['signer']){const d=a['forward_named_operator']==='',e=!!a['forward_named_operator']&&a['forward_named_operator']!=='';b['push']({'name':'signer_authorized_for_forward','passed':!![],'message':d?'OrderHolder\x20namespace\x20—\x20signer\x20must\x20be\x20order.owner/agent\x20(use\x20order_next/order_hold)':e?'namedOperator=\x22'+a['forward_named_operator']+'\x22\x20—\x20signer\x20must\x20be\x20in\x20operator\x20list':'Forward.permissionIndex='+(a['forward_permission_index']??'None')+'\x20—\x20signer\x20must\x20have\x20this\x20index'});}if(a['progress_json']['operate']&&a['progress_json']['operate']['op']==='unhold'&&a['holder_address']){const f=a['signer']===a['holder_address'];b['push']({'name':'unhold_by_holder','passed':f,'message':f?'Signer\x20is\x20the\x20holder\x20—\x20unhold\x20allowed':'Signer\x20'+a['signer']+'\x20≠\x20holder\x20'+a['holder_address']+'\x20—\x20E_NOT_THE_HOLDER\x20will\x20abort\x20(use\x20adminUnhold\x20for\x20force\x20release)'});}const c=b['every'](g=>g['passed']);return{'passed':c,'checks':b};}export const PROGRESS_CONFIRM_VERSION='1.0.0';export function runProgressConfirmGate(a){const b=[],c=[],d=runStaticChecklist(a);if(!d['all_passed'])return c['push']('L1_checklist'),{'status':'blocked_checklist','checklist_result':d,'confirmation_text':generateConfirmationText(a,d),'block_reason':'Checklist\x20failed:\x20'+d['items']['filter'](h=>!h['passed'])['map'](h=>h['id'])['join'](',\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PROGRESS_CONFIRM_VERSION,'final_status':'blocked_checklist','layers_passed':b,'layers_failed':c}};b['push']('L1_checklist');const e=adaptRiskAssessment(a),f=e['risks']['some'](h=>h['level']==='CRITICAL');if(f)return c['push']('L2_risk'),{'status':'blocked_risk','checklist_result':d,'risk_result':e,'confirmation_text':generateConfirmationText(a,d,e),'block_reason':'CRITICAL\x20risks:\x20'+e['risks']['filter'](h=>h['level']==='CRITICAL')['map'](h=>h['id'])['join'](',\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PROGRESS_CONFIRM_VERSION,'final_status':'blocked_risk','layers_passed':b,'layers_failed':c}};b['push']('L2_risk');const g=processUserConfirmation(a,e);if(!g['all_confirmed']){if(a['progress_json']['operate']?.['op']==='adminUnhold'){const h=d['items']['find'](j=>j['id']==='C-PR-10');if(h){const i=g['responses']['find'](j=>j['question_id']==='QPR3');h['passed']=i?.['response']==='yes',h['message']=h['passed']?'':'adminUnhold\x20not\x20confirmed\x20by\x20user\x20(QPR3)';}}if(a['progress_json']['operate']?.['op']==='adminUnhold'){const j=d['items']['find'](k=>k['id']==='C-PR-10');if(j&&!j['passed'])return c['push']('L3_user'),{'status':'blocked_user','checklist_result':d,'risk_result':e,'user_confirmation':g,'confirmation_text':generateConfirmationText(a,d,e),'block_reason':'User\x20did\x20not\x20confirm\x20adminUnhold\x20(QPR3)','decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PROGRESS_CONFIRM_VERSION,'final_status':'blocked_user','layers_passed':b,'layers_failed':c}};}}b['push']('L3_user');if(a['skip_environment_check'])b['push']('L4_environment');else{const k=verifyEnvironment(a);if(!k['passed'])return c['push']('L4_environment'),{'status':'blocked_environment','checklist_result':d,'risk_result':e,'user_confirmation':g,'environment_result':k,'confirmation_text':generateConfirmationText(a,d,e),'block_reason':'Environment\x20check\x20failed:\x20'+k['checks']['filter'](l=>!l['passed'])['map'](l=>l['name'])['join'](',\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PROGRESS_CONFIRM_VERSION,'final_status':'blocked_environment','layers_passed':b,'layers_failed':c}};b['push']('L4_environment');}return{'status':'approved','checklist_result':d,'risk_result':e,'user_confirmation':g,'confirmation_text':generateConfirmationText(a,d,e),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PROGRESS_CONFIRM_VERSION,'final_status':'approved','layers_passed':b,'layers_failed':c}};}function generateConfirmationText(a,b,c){const d=[],e=a['progress_json'];d['push']('═══\x20Progress\x20Operation\x20Confirmation\x20═══'),d['push']('');e['object']?d['push']('Progress:\x20'+e['object']):d['push']('Progress:\x20NEW\x20(indirect\x20via\x20service::buy)');a['current_machine']&&d['push']('Bound\x20Machine:\x20'+a['current_machine']+'\x20(published:\x20'+(a['machine_published']!==![]?'YES':'NO')+')');a['current_node']&&d['push']('Current\x20node:\x20'+a['current_node']);d['push'](''),d['push']('─\x20Checklist\x20──────────────────');for(const f of b['items']){const g=f['passed']?'✓':'✗';d['push']('\x20\x20'+g+'\x20'+f['id']+':\x20'+f['description']+(f['message']?'\x20—\x20'+f['message']:''));}d['push']('');if(c){d['push']('─\x20Risk\x20Assessment\x20──────────────────'),d['push']('Overall:\x20'+c['overall_risk']),d['push']('Detected:\x20'+c['risks']['length']+'\x20risk(s)');for(const h of c['risks']){d['push']('\x20\x20['+h['level']+']\x20'+h['id']+':\x20'+h['title']);}d['push']('');}d['push']('─\x20Operations\x20──────────────────');if(e['task'])d['push']('-\x20⚠️\x20task_set:\x20'+e['task']+'\x20(one-time,\x20immutable)');if(e['repository'])d['push']('-\x20Repository\x20'+e['repository']['op']+':\x20'+(e['repository']['objects']?.['length']??0x0)+'\x20object(s)');if(e['progress_namedOperator']){const i=e['progress_namedOperator'];d['push']('-\x20namedOperator\x20'+i['op']+'\x20\x22'+i['name']+'\x22:\x20'+i['operators']['length']+'\x20address(es)');}if(e['operate']){const j=e['operate'];d['push']('-\x20Operation:\x20'+j['operation']['forward']+'\x20→\x20'+j['operation']['next_node_name']);if(j['op'])d['push']('\x20\x20op='+j['op']);if(j['op']==='hold')d['push']('\x20\x20⚠️\x20hold\x20(lock\x20forward)');if(j['op']==='adminUnhold')d['push']('\x20\x20⚠️\x20adminUnhold\x20(force\x20release\x20via\x20224)');if(j['op']==='unhold')d['push']('\x20\x20ℹ️\x20unhold\x20(self-release)');if(j['message'])d['push']('\x20\x20Message:\x20\x22'+j['message']+'\x22');}return d['push'](''),d['join']('\x0a');}export function progressiveProgressCheck(a){const b=runStaticChecklist(a);if(!b['all_passed'])return{'stage':'checklist','status':'fail','message':'Checklist\x20failed:\x20'+b['items']['filter'](d=>!d['passed'])['map'](d=>d['id'])['join'](',\x20'),'next_action':'Fix\x20failing\x20checklist\x20items'};const c=adaptRiskAssessment(a);if(c['risks']['some'](d=>d['level']==='CRITICAL'))return{'stage':'risk','status':'fail','message':'CRITICAL\x20risks:\x20'+c['risks']['filter'](d=>d['level']==='CRITICAL')['map'](d=>d['id'])['join'](',\x20'),'next_action':'Resolve\x20CRITICAL\x20risks\x20before\x20proceeding'};if(c['needs_human_review'])return{'stage':'confirmation','status':'pending','message':'Human\x20review\x20required\x20for\x20HIGH\x20risks','next_action':'Confirm\x20risk\x20acceptance'};return{'stage':'complete','status':'pass','message':'All\x20checks\x20passed'};}