@wowok/agent-mcp 3.1.2 → 3.1.4

package/dist/knowledge/proof-risk.d.ts

@@ -1,4 +1,5 @@
-export type ProofRiskLevel = "CRITICAL" | "HIGH" | "MEDIUM" | "LOW" | "INFO";
+import { type Facts } from "../config/rule-engine.js";
+export type ProofRiskLevel = "critical" | "high" | "medium" | "low" | "info";
 export type ProofRiskCategory = "structural" | "semantic" | "lifecycle" | "knowledge";
 export type ProofStakeholder = "creator" | "consumer" | "verifier" | "system";
 export interface ProofRisk {
@@ -25,9 +26,8 @@ export interface ProofRiskCheckContext {
     has_named_new?: boolean;
     constants_synced?: boolean;
 }
-export declare const PROOF_RISK_RULES: {
-    rule: ProofRisk;
-    check: (ctx: ProofRiskCheckContext) => ProofRisk | null;
-}[];
+export declare function proofRiskFacts(ctx: ProofRiskCheckContext): Facts;
+export declare const PROOF_RISK_RULES: Array<ProofRisk & {
+    trigger?: string;
+}>;
 export declare function checkProofRisks(ctx: ProofRiskCheckContext): ProofRisk[];
-export declare function getProofRiskById(id: string): ProofRisk | undefined;

package/dist/knowledge/proof-risk.js

@@ -1 +1 @@
-import{MAX_PROOF_SIZE,MAX_SERVER_PUBKEY_SIZE,MAX_SERVER_SIGNATURE_SIZE,WOWOK_WTS_PROOF_TYPE}from'@wowok/wowok';const R_PR_1_01={'rule':{'id':'R-PROOF-01','level':'HIGH','category':'structural','title':'proof\x20content\x20exceeds\x20MAX_PROOF_SIZE\x20('+MAX_PROOF_SIZE+'\x20bytes)','description':'The\x20\x27proof\x27\x20string\x20field\x20is\x20bounded\x20by\x20MAX_PROOF_SIZE='+MAX_PROOF_SIZE+'\x20bytes\x20(Move\x20source:\x20proof.move:27).\x20'+'Exceeding\x20this\x20limit\x20aborts\x20with\x20E_MAX_PROOF_SIZE\x20(1).\x20The\x20proof\x20content\x20typically\x20holds\x20a\x20merkle\x20tree\x20root\x20'+'or\x20similar\x20compact\x20cryptographic\x20digest\x20—\x20large\x20data\x20should\x20be\x20stored\x20in\x20a\x20Repository\x20and\x20referenced\x20by\x20address,\x20'+'not\x20inlined\x20into\x20the\x20Proof\x20object.','affected_stakeholders':['creator'],'scenario':'Caller\x20submits\x20a\x20proof\x20string\x20longer\x20than\x2010240\x20bytes','mitigation':'Keep\x20proof\x20content\x20compact\x20(merkle\x20root,\x20hash\x20digest).\x20For\x20larger\x20payloads,\x20store\x20data\x20in\x20a\x20Repository\x20'+'object\x20and\x20set\x20about_address\x20to\x20the\x20Repository\x20address,\x20or\x20use\x20item_count\x20to\x20indicate\x20the\x20off-chain\x20data\x20size.','related_move_error':'E_MAX_PROOF_SIZE\x20(1)','auto_fixable':![]},'check':a=>{if(!a['proof'])return null;if(a['proof']['length']<=MAX_PROOF_SIZE)return null;return{...R_PR_1_01['rule'],'evidence':'proof.length='+a['proof']['length']+',\x20limit='+MAX_PROOF_SIZE};}},R_PR_1_02={'rule':{'id':'R-PROOF-02','level':'MEDIUM','category':'structural','title':'server_pubkey\x20exceeds\x20MAX_SERVER_PUBKEY_SIZE\x20('+MAX_SERVER_PUBKEY_SIZE+'\x20bytes)','description':'The\x20\x27server_pubkey\x27\x20field\x20is\x20bounded\x20by\x20MAX_SERVER_PUBKEY_SIZE='+MAX_SERVER_PUBKEY_SIZE+'\x20bytes\x20(Move\x20source:\x20proof.move:28).\x20'+'Exceeding\x20this\x20limit\x20aborts\x20with\x20E_MAX_SERVER_PUBKEY_SIZE\x20(2).\x20Typical\x20public\x20keys\x20(Ed25519=32\x20bytes,\x20RSA-2048=256\x20bytes,\x20'+'BLS12-381\x20G1=48\x20bytes,\x20G2=96\x20bytes)\x20fit\x20comfortably\x20within\x20this\x20limit.','affected_stakeholders':['creator'],'scenario':'Caller\x20submits\x20an\x20oversized\x20server\x20public\x20key\x20(e.g.\x20certificate\x20chain\x20instead\x20of\x20raw\x20key)','mitigation':'Submit\x20only\x20the\x20raw\x20public\x20key\x20bytes\x20(hex-encoded),\x20not\x20a\x20full\x20certificate\x20or\x20JWK\x20structure.','related_move_error':'E_MAX_SERVER_PUBKEY_SIZE\x20(2)','auto_fixable':![]},'check':a=>{if(!a['server_pubkey'])return null;if(a['server_pubkey']['length']<=MAX_SERVER_PUBKEY_SIZE)return null;return{...R_PR_1_02['rule'],'evidence':'server_pubkey.length='+a['server_pubkey']['length']+',\x20limit='+MAX_SERVER_PUBKEY_SIZE};}},R_PR_1_03={'rule':{'id':'R-PROOF-03','level':'MEDIUM','category':'structural','title':'server_signature\x20exceeds\x20MAX_SERVER_SIGNATURE_SIZE\x20('+MAX_SERVER_SIGNATURE_SIZE+'\x20bytes)','description':'The\x20\x27server_signature\x27\x20field\x20is\x20bounded\x20by\x20MAX_SERVER_SIGNATURE_SIZE='+MAX_SERVER_SIGNATURE_SIZE+'\x20bytes\x20'+'(Move\x20source:\x20proof.move:29).\x20Exceeding\x20this\x20limit\x20aborts\x20with\x20E_MAX_SERVER_SIGNATURE_SIZE\x20(3).\x20'+'Most\x20signature\x20schemes\x20produce\x20signatures\x20well\x20under\x20this\x20limit\x20(Ed25519=64\x20bytes,\x20ECDSA=64-72\x20bytes,\x20'+'BLS12-381=96\x20bytes,\x20RSA-2048=256\x20bytes).','affected_stakeholders':['creator'],'scenario':'Caller\x20submits\x20an\x20oversized\x20signature\x20(e.g.\x20bundled\x20with\x20metadata)','mitigation':'Submit\x20only\x20the\x20raw\x20signature\x20bytes\x20(hex-encoded),\x20not\x20bundled\x20metadata\x20or\x20certificate\x20chains.','related_move_error':'E_MAX_SERVER_SIGNATURE_SIZE\x20(3)','auto_fixable':![]},'check':a=>{if(!a['server_signature'])return null;if(a['server_signature']['length']<=MAX_SERVER_SIGNATURE_SIZE)return null;return{...R_PR_1_03['rule'],'evidence':'server_signature.length='+a['server_signature']['length']+',\x20limit='+MAX_SERVER_SIGNATURE_SIZE};}},R_PR_2_01={'rule':{'id':'R-PROOF-04','level':'MEDIUM','category':'semantic','title':'proof_type\x20in\x20reserved\x20range\x20without\x20authority\x20(1-100\x20reserved\x20for\x20Wowok)','description':'proof_type='+WOWOK_WTS_PROOF_TYPE+'\x20is\x20WOWOK_WTS_PROOF_TYPE\x20(Will-To-Sign).\x20Values\x202-100\x20are\x20reserved\x20for\x20'+'future\x20Wowok-defined\x20proof\x20types.\x20User-defined\x20proof\x20types\x20must\x20use\x20values\x20>\x20100.\x20While\x20the\x20Move\x20contract\x20'+'does\x20not\x20currently\x20enforce\x20this\x20range\x20at\x20the\x20type\x20level\x20(it\x20accepts\x20any\x20u64),\x20using\x20a\x20reserved\x20value\x20without\x20'+'authority\x20creates\x20semantic\x20confusion:\x20consumers\x20may\x20misinterpret\x20the\x20proof\x27s\x20verification\x20rules.','affected_stakeholders':['creator','consumer','verifier'],'scenario':'User\x20creates\x20a\x20custom\x20proof\x20with\x20proof_type=5\x20(a\x20reserved\x20value)','mitigation':'Use\x20proof_type\x20>\x20100\x20for\x20user-defined\x20proof\x20types.\x20Use\x20proof_type=1\x20only\x20for\x20WTS\x20proofs\x20signed\x20by\x20an\x20'+'off-chain\x20server\x20(with\x20server_pubkey\x20+\x20server_signature).\x20Document\x20the\x20verification\x20rule\x20for\x20custom\x20types.','auto_fixable':![]},'check':a=>{if(a['proof_type']===undefined||a['proof_type']===null)return null;const b=typeof a['proof_type']==='string'?BigInt(a['proof_type']):BigInt(a['proof_type']);if(b===BigInt(WOWOK_WTS_PROOF_TYPE)||b>0x64n)return null;return{...R_PR_2_01['rule'],'evidence':'proof_type='+a['proof_type']+'\x20(reserved\x20range\x202-100)'};}},R_PR_2_02={'rule':{'id':'R-PROOF-05','level':'LOW','category':'semantic','title':'about_address\x20not\x20provided\x20—\x20consumers\x20cannot\x20locate\x20the\x20referenced\x20entity','description':'about_address\x20is\x20the\x20on-chain\x20address\x20of\x20the\x20entity\x20being\x20proved\x20(e.g.\x20a\x20user,\x20an\x20order,\x20a\x20Repository).\x20'+'When\x20null/undefined,\x20the\x20Proof\x20has\x20no\x20on-chain\x20binding\x20—\x20it\x20is\x20a\x20free-standing\x20cryptographic\x20statement.\x20'+'Consumers\x20(Repository,\x20Service,\x20etc.)\x20that\x20reference\x20this\x20Proof\x20cannot\x20automatically\x20resolve\x20which\x20entity\x20'+'it\x20applies\x20to.\x20This\x20is\x20acceptable\x20for\x20generic\x20proofs\x20but\x20problematic\x20for\x20entity-bound\x20attestations.','affected_stakeholders':['creator','consumer'],'scenario':'Caller\x20creates\x20a\x20Proof\x20without\x20about_address,\x20then\x20a\x20Repository\x20tries\x20to\x20bind\x20it\x20to\x20a\x20data\x20entry','mitigation':'Set\x20about_address\x20when\x20the\x20Proof\x20attests\x20to\x20a\x20specific\x20on-chain\x20entity.\x20Leave\x20it\x20null\x20only\x20for\x20'+'free-standing\x20cryptographic\x20statements\x20(e.g.\x20a\x20server\x27s\x20timestamp\x20attestation).','auto_fixable':!![]},'check':a=>{if(a['about_address'])return null;return{...R_PR_2_02['rule'],'evidence':'about_address=null/undefined'};}},R_PR_3_01={'rule':{'id':'R-PROOF-06','level':'LOW','category':'lifecycle','title':'description\x20missing\x20—\x20Proof\x20hard\x20to\x20identify\x20in\x20queries\x20and\x20audit\x20logs','description':'description\x20is\x20a\x20REQUIRED\x20field\x20(PF-D-2=A).\x20The\x20Move\x20contract\x20stores\x20it\x20as\x20a\x20String\x20field\x20and\x20SDK\x20'+'passes\x20it\x20to\x20create_wowok_proof_v2.\x20An\x20empty\x20description\x20(\x22\x22)\x20is\x20technically\x20valid\x20but\x20makes\x20the\x20Proof\x20'+'hard\x20to\x20identify\x20in\x20query\x20results\x20and\x20audit\x20logs.\x20Non-empty\x20descriptions\x20are\x20strongly\x20recommended.','affected_stakeholders':['creator','verifier'],'scenario':'Caller\x20passes\x20description=\x22\x22\x20to\x20save\x20typing','mitigation':'Provide\x20a\x20one-line\x20description\x20like\x20\x22KYC\x20attestation\x20for\x20user\x200xabc\x22\x20or\x20\x22merkle\x20root\x20for\x20batch\x20#42\x22.','auto_fixable':![]},'check':a=>{if(a['description']===undefined)return null;if(a['description']['length']>0x0)return null;return{...R_PR_3_01['rule'],'evidence':'description=\x22\x22\x20(empty)'};}},R_PR_3_02={'rule':{'id':'R-PROOF-07','level':'HIGH','category':'lifecycle','title':'Proof\x20is\x20immutable\x20—\x20cannot\x20modify\x20after\x20creation\x20(freeze_object)','description':'Proof\x20is\x20created\x20via\x20transfer::freeze_object(obj)\x20in\x20Move\x20(proof.move:65).\x20Once\x20frozen,\x20the\x20object\x20'+'cannot\x20be\x20modified,\x20transferred,\x20or\x20deleted.\x20All\x20fields\x20(proof,\x20server_pubkey,\x20server_signature,\x20'+'about,\x20proof_type,\x20signer,\x20time,\x20description,\x20item_count)\x20are\x20permanently\x20fixed\x20at\x20the\x20value\x20set\x20'+'during\x20create_wowok_proof_v2().\x20To\x20\x27update\x27\x20a\x20Proof,\x20create\x20a\x20new\x20one\x20and\x20update\x20references.','affected_stakeholders':['creator','consumer'],'scenario':'Caller\x20wants\x20to\x20update\x20server_signature\x20after\x20key\x20rotation\x20—\x20cannot,\x20must\x20create\x20new\x20Proof','mitigation':'Verify\x20all\x20fields\x20before\x20calling\x20create_wowok_proof_v2.\x20For\x20scenarios\x20requiring\x20key\x20rotation,\x20'+'create\x20a\x20new\x20Proof\x20and\x20update\x20the\x20referencing\x20object\x20(Repository\x20data,\x20Service\x20config,\x20etc.)\x20to\x20'+'point\x20to\x20the\x20new\x20Proof\x20address.','auto_fixable':![]},'check':a=>null},R_PR_4_01={'rule':{'id':'R-PROOF-08','level':'INFO','category':'knowledge','title':'Knowledge\x20layer\x20&\x20constant\x20sync\x20—\x20RESOLVED','description':'All\x204\x20Proof\x20constants\x20(WOWOK_WTS_PROOF_TYPE,\x20MAX_PROOF_SIZE,\x20MAX_SERVER_PUBKEY_SIZE,\x20'+'MAX_SERVER_SIGNATURE_SIZE)\x20are\x20now\x20synced\x20to\x20onchain-constants.ts\x20(P-PROOF-P2-5).\x20The\x20MCP\x20Knowledge\x20'+'layer\x20now\x20includes\x20proof-risk.ts,\x20proof-confirm.ts,\x20proof-translation.ts\x20(P-PROOF-P2-6).\x20'+'This\x20risk\x20rule\x20is\x20retained\x20for\x20historical\x20audit\x20and\x20to\x20detect\x20future\x20regressions.','affected_stakeholders':['system'],'scenario':'Future\x20regression:\x20someone\x20removes\x20a\x20Proof\x20constant\x20from\x20onchain-constants.ts','mitigation':'Run\x20the\x20onchain-constants\x20sync\x20test\x20to\x20detect\x20drift.','auto_fixable':![]},'check':a=>{if(a['constants_synced'])return null;return{...R_PR_4_01['rule'],'evidence':'constants_synced=false'};}};export const PROOF_RISK_RULES=[R_PR_1_01,R_PR_1_02,R_PR_1_03,R_PR_2_01,R_PR_2_02,R_PR_3_01,R_PR_3_02,R_PR_4_01];export function checkProofRisks(a){const b=[];for(const c of PROOF_RISK_RULES){const d=c['check'](a);if(d)b['push'](d);}return!b['find'](e=>e['id']==='R-PROOF-07')&&b['push'](R_PR_3_02['rule']),b;}export function getProofRiskById(a){return PROOF_RISK_RULES['find'](b=>b['rule']['id']===a)?.['rule'];}
+import{MAX_PROOF_SIZE,MAX_SERVER_PUBKEY_SIZE,MAX_SERVER_SIGNATURE_SIZE,WOWOK_WTS_PROOF_TYPE}from'@wowok/wowok';import{getJudgmentDoc,factoryRulePack}from'../config/judgment.js';import{evaluateRuleBook,interpolate}from'../config/rule-engine.js';export function proofRiskFacts(a){let b=![];if(a['proof_type']!==undefined&&a['proof_type']!==null){const c=BigInt(a['proof_type']);b=c!==BigInt(WOWOK_WTS_PROOF_TYPE)&&c<=0x64n;}return{'proof_length':a['proof']?.['length'],'proof_size_exceeded':!!a['proof']&&a['proof']['length']>MAX_PROOF_SIZE,'server_pubkey_length':a['server_pubkey']?.['length'],'server_pubkey_size_exceeded':!!a['server_pubkey']&&a['server_pubkey']['length']>MAX_SERVER_PUBKEY_SIZE,'server_signature_length':a['server_signature']?.['length'],'server_signature_size_exceeded':!!a['server_signature']&&a['server_signature']['length']>MAX_SERVER_SIGNATURE_SIZE,'proof_type':a['proof_type'],'proof_type_reserved':b,'about_address':a['about_address'],'description_empty':a['description']!==undefined&&a['description']['length']===0x0,'constants_synced':a['constants_synced'],'always_true':!![],'max_proof_size':MAX_PROOF_SIZE,'max_server_pubkey_size':MAX_SERVER_PUBKEY_SIZE,'max_server_signature_size':MAX_SERVER_SIGNATURE_SIZE,'wowok_wts_proof_type':WOWOK_WTS_PROOF_TYPE};}const RELATED_MOVE_ERRORS={'R-PROOF-01':'E_MAX_PROOF_SIZE\x20(1)','R-PROOF-02':'E_MAX_SERVER_PUBKEY_SIZE\x20(2)','R-PROOF-03':'E_MAX_SERVER_SIGNATURE_SIZE\x20(3)'},AUTO_FIXABLE=new Set(['R-PROOF-05']);function proofRuleBook(){const a=getJudgmentDoc()['rules']['domains']['proof'];if(!a)throw new Error('factory\x20rule\x20pack\x20\x27proof\x27\x20missing\x20—\x20broken\x20installation');return a['rules'];}function findingToProofRisk(a){const b=RELATED_MOVE_ERRORS[a['rule_id']];return{'id':a['rule_id'],'level':a['level'],'category':a['dimension']??'semantic','title':a['title'],'description':a['description'],'affected_stakeholders':a['stakeholders']??[],'scenario':a['scenario']??'','mitigation':a['mitigation']??'',...b===undefined?{}:{'related_move_error':b},'auto_fixable':AUTO_FIXABLE['has'](a['rule_id']),...a['evidence']===undefined?{}:{'evidence':a['evidence']}};}export const PROOF_RISK_RULES=((()=>{const a=factoryRulePack('proof');if(!a)return[];const b=proofRiskFacts({});return a['rules']['map'](d=>{const e=d['cases'][0x0],f=RELATED_MOVE_ERRORS[d['rule_id']];return{'id':d['rule_id'],'level':e['level'],'category':d['dimension']??'semantic','title':interpolate(e['title'],b),'description':interpolate(e['description'],b),'affected_stakeholders':e['stakeholders']??[],'scenario':e['scenario']===undefined?'':interpolate(e['scenario'],b),'mitigation':e['mitigation']===undefined?'':interpolate(e['mitigation'],b),...f===undefined?{}:{'related_move_error':f},'auto_fixable':AUTO_FIXABLE['has'](d['rule_id']),...d['trigger']===undefined?{}:{'trigger':d['trigger']}};});})());export function checkProofRisks(a){const {findings:b}=evaluateRuleBook(proofRuleBook(),proofRiskFacts(a));return b['map'](findingToProofRisk);}

package/dist/knowledge/puzzle-projections.d.ts

@@ -0,0 +1,11 @@
+export declare function projectGuardPuzzle(puzzle: unknown): unknown;
+export declare function projectMachinePuzzle(puzzle: unknown): unknown;
+export declare function projectAllocationPuzzle(puzzle: unknown): unknown;
+export declare function projectTreasuryPuzzle(puzzle: unknown): unknown;
+export declare function projectServicePuzzle(puzzle: unknown): unknown;
+export declare function projectPermissionPuzzle(puzzle: unknown): unknown;
+export declare function projectRewardPuzzle(puzzle: unknown): unknown;
+export declare function projectOrderPuzzle(puzzle: unknown): unknown;
+export declare function projectProgressPuzzle(puzzle: unknown): unknown;
+export declare function projectArbitrationPuzzle(puzzle: unknown): unknown;
+export declare const PUZZLE_PROJECTIONS: Record<string, (puzzle: unknown) => unknown>;

package/dist/knowledge/puzzle-projections.js

@@ -0,0 +1 @@
+import{findScene}from'./guard-ledger.js';function rec(a){return a!=null&&typeof a==='object'&&!Array['isArray'](a)?a:undefined;}function arr(a){return Array['isArray'](a)?a:undefined;}function str(a){return typeof a==='string'&&a['length']>0x0?a:undefined;}function num(a){return typeof a==='number'&&Number['isFinite'](a)?a:undefined;}function pairKey(a){const b=rec(a),c=rec(b?.['pair_id'])??b;return(str(c?.['prev_node'])??'')+'|'+(str(c?.['next_node'])??'');}const DIMENSION_KEYS=['intent','binding','data_source','data_sources','operations','logic','constraints','queries','current_round','node_design','business_flow','guard_acceptance','threshold_weight','branch_topology','permission_model','overall_objective','risk_assessment','config','funds','guard','workflow','named_operator','arbitration_config','arbiter_config','permission_allocator','guard_protection','dispute_handling'];function isDimensionPuzzle(a){return DIMENSION_KEYS['some'](b=>b in a);}function logicToSnapshot(a){const b=rec(a);if(!b)return undefined;const c={'type':b['node_type']};if(typeof b['references_identifier']==='number')c['identifier']=b['references_identifier'];const d=rec(b['query']);if(d){c['query']=d['query_id']??d['query_name']??'';const f=rec(d['witness']);if(f)c['convert_witness']=f['witness_type'];}if(b['context'])c['context']=b['context'];const e=arr(b['children']);return e&&e['length']>0x0&&(c['nodes']=e['map'](logicToSnapshot)),c;}export function projectGuardPuzzle(a){const b=rec(a)??{};if(!isDimensionPuzzle(b))return b;const d=rec(b['data_sources']),f=rec(b['logic']),g=rec(b['binding']);if(!d&&!f&&!g)return{};const h=[];for(const m of arr(d?.['on_chain_constants'])??[]){const n=rec(m);if(!n)continue;h['push']({'identifier':n['identifier'],'b_submission':![],'value_type':'Address','value':n['object_address'],'name':n['name'],'object_type':n['object_type']});}for(const o of arr(d?.['witness_derived'])??[]){const q=rec(o);if(!q)continue;h['push']({'identifier':q['identifier'],'b_submission':q['source_b_submission']===!![],'value_type':'Address','name':q['name']});}for(const r of arr(d?.['submitted_objects'])??[]){const t=rec(r);if(!t)continue;h['push']({'identifier':t['identifier'],'b_submission':!![],'value_type':t['value_type']??'Address','name':t['name'],'object_type':t['expected_object_type']});}for(const u of arr(d?.['submitted_values'])??[]){const v=rec(u);if(!v)continue;h['push']({'identifier':v['identifier'],'b_submission':!![],'value_type':v['value_type'],'name':v['name']});}const i={};if(h['length']>0x0)i['table']=h;const j=logicToSnapshot(f?.['root']);if(j){const x=(arr(d?.['system_contexts'])??[])['map'](y=>rec(y)?.['context_type'])['filter'](y=>typeof y==='string')['map'](y=>({'type':'context','context':y}));if(x['length']>0x0){if(Array['isArray'](j['nodes']))j['nodes']=[...j['nodes'],...x];else i['root']={'type':'logic_and','nodes':[j,...x]};}if(!i['root'])i['root']=j;}const k=rec(f?.['rely']);k&&Array['isArray'](k['guards'])&&(i['rely']={'guards':k['guards'],'logic_or':k['logic_or']===!![]});g&&str(g['host_object'])&&str(g['binding_field'])&&(i['scene']=findScene(String(g['host_object']),String(g['binding_field'])));const l=rec(b['intent']);if(l&&str(l['action']))i['operation_type']=l['action'];return i;}export function projectMachinePuzzle(a){const b=rec(a)??{};if(!isDimensionPuzzle(b))return b;const c=rec(b['node_design']),d=rec(b['threshold_weight']),e=rec(b['guard_acceptance']),f=rec(b['permission_model']),g=arr(c?.['nodes'])??[],h=arr(d?.['pair_thresholds'])??[];if(g['length']===0x0&&h['length']===0x0)return{};const i=g['map'](q=>{const r=rec(q)??{};return{'name':r['name'],'description':r['description']};}),j=arr(d?.['forward_weights'])??[],k=arr(e?.['guard_bindings'])??[],l=arr(f?.['forward_permissions'])??[],m=q=>j['map'](r=>rec(r))['filter'](r=>!!r&&pairKey(r['forward_id'])===q)['map'](r=>{const s=rec(r['forward_id']),u=pairKey(s),v=k['map'](A=>rec(A))['find'](A=>!!A&&pairKey(A['forward_id'])===u),w=l['map'](A=>rec(A))['find'](A=>!!A&&pairKey(A['forward'])===u),x=rec(w?.['namedOperator']),y={'name':rec(s)?.['forward_name'],'weight':r['weight']};if(x){if(x['type']==='role'&&str(x['role']))y['named_operator']=x['role'];else{if(x['type']==='order_holder')y['named_operator']='order_holder';}}const z=rec(w?.['permissionIndex']);if(z&&z['type']!=='none'&&num(z['index'])!==undefined)y['permission_index']=z['index'];if(v)y['guard']=v['guard_address']??v['guard_template_id'];return y;}),o=[];for(const q of g){const r=rec(q);r?.['is_entry']===!![]&&str(r['name'])&&o['push']({'prev_node':'','next_node':r['name'],'threshold':0x0,'forwards':[]});}for(const s of h){const u=rec(s);if(!u)continue;const v=pairKey(u['pair_id']),w=rec(u['pair_id'])??{};o['push']({'prev_node':w['prev_node'],'next_node':w['next_node'],'threshold':u['threshold'],'forwards':m(v)});}return{'nodes':i,'pairs':o};}export function projectAllocationPuzzle(a){const b=rec(a)??{};if(!isDimensionPuzzle(b))return b;const c=rec(b['data_source']),d=rec(b['intent']),e=rec(b['binding']);if(!c&&!d&&!e)return{};const f={};if(c?.['allocators_config']!=null)f['allocators_config']=c['allocators_config'];if(d&&str(d['host_context']))f['trigger_source']=d['host_context'];if(d&&str(d['action']))f['operation_type']=d['action'];if(e&&str(e['coin_type']))f['coin_type']=e['coin_type'];e&&str(e['host_service'])&&(f['host_service']=e['host_service'],f['host_service_published']=!![]);const g=rec(c?.['payment_info']);if(g){f['has_payment_info']=!![];if('for_object'in g)f['payment_info_for_object']=g['for_object']??null;}return f;}export function projectTreasuryPuzzle(a){const b=rec(a)??{};if(!isDimensionPuzzle(b))return b;const c=rec(b['data_source']),d=rec(b['binding']),e=arr(rec(b['operations'])?.['operations'])??[];if(!c&&!d&&e['length']===0x0)return{};const f={},g=str(d?.['associated_permission'])??str(c?.['permission_object']);if(g)f['permission_address']=g;if(d&&str(d['type_parameter']))f['type_parameter']=d['type_parameter'];if(d&&'associated_um'in d)f['um']=d['associated_um']??null;const h=arr(c?.['external_deposit_guards'])??[];if(h['length']>0x0)f['external_deposit_guard']={'op':'add','guards':h};const i=arr(c?.['external_withdraw_guards'])??[];if(i['length']>0x0)f['external_withdraw_guard']={'op':'add','guards':i};for(const j of e){const k=rec(j);if(!k)continue;switch(k['type']){case'deposit':{const l=rec(k['coin'])??{};f['deposit']={...l['balance']!=null?{'coin_balance':String(l['balance'])}:{},...l['coin_object']!=null?{'coin_object':l['coin_object']}:{},...k['via']==='external_guard'&&str(k['guard'])?{'by_external_deposit_guard':k['guard']}:{}};break;}case'withdraw':{const m=rec(k['amount'])??{};f['withdraw']={...m['fixed']!=null?{'amount_fixed':String(m['fixed'])}:{},...m['by_external_withdraw_guard']!=null?{'amount_by_external_withdraw_guard':String(m['by_external_withdraw_guard'])}:{},'recipient':k['recipient']};break;}case'receive':case'owner_receive':f['owner_receive']=k['received'];break;case'external_deposit_guard_op':f['external_deposit_guard']=guardOpCtx(k);break;case'external_withdraw_guard_op':f['external_withdraw_guard']=guardOpCtx(k);break;case'set\x20description':f['description']=k['description'];break;case'set\x20um':f['um']=k['um']??null;break;default:break;}}return f;}function guardOpCtx(a){if(a['op']==='clear')return{'op':'clear'};if(a['op']==='remove')return{'op':'remove','guards':(arr(a['guards'])??[])['map'](String)};return{'op':a['op']==='set'?'set':'add','guards':arr(a['guards'])??[]};}export function projectServicePuzzle(a){const b=rec(a)??{};if(!isDimensionPuzzle(b))return b;const c=rec(b['binding']),e=rec(b['intent']);if(!c&&!e)return{};const f={};if(c&&'machine'in c)f['machine']=c['machine']??null;if(c&&'buy_guard'in c)f['buy_guard']=c['buy_guard']??null;if(c&&'order_allocators'in c)f['order_allocators']=c['order_allocators']??null;if(c&&'um'in c)f['um']=c['um']??null;Array['isArray'](c?.['arbitrations'])&&c['arbitrations']['length']>0x0&&(f['arbitrations']={'op':'set','objects':c['arbitrations']});Array['isArray'](c?.['rewards'])&&c['rewards']['length']>0x0&&(f['rewards']={'op':'set','objects':c['rewards']});Array['isArray'](c?.['repositories'])&&c['repositories']['length']>0x0&&(f['repositories']={'op':'set','objects':c['repositories']});c?.['compensation_fund_balance']!=null&&(f['compensation_fund_add']={'balance':String(c['compensation_fund_balance'])});if(c?.['setting_lock_duration']!=null){const g=Number(c['setting_lock_duration']);if(Number['isFinite'](g))f['setting_lock_duration_add']=g;}if(e?.['action']==='publish')f['publish']=!![];if(e?.['action']==='pause')f['pause']=!![];return f;}export function projectPermissionPuzzle(a){const b=rec(a)??{};if(!isDimensionPuzzle(b))return b;const c=rec(b['binding']),d=rec(b['data_source']),e=arr(rec(b['operations'])?.['operations'])??[];if(!c&&!d&&e['length']===0x0)return{};const f={};Array['isArray'](c?.['admins'])&&c['admins']['length']>0x0&&(f['admin']={'op':'set','addresses':c['admins']});if(c&&'um'in c)f['um']=c['um']??null;for(const g of e){const h=rec(g);if(!h)continue;switch(h['type']){case'add\x20perm\x20by\x20index':case'set\x20perm\x20by\x20index':case'remove\x20perm\x20by\x20index':f['table']={'op':h['type'],'index':h['index'],'entity':arr(h['entities'])??[]};break;case'add\x20perm\x20by\x20entity':case'set\x20perm\x20by\x20entity':case'remove\x20perm\x20by\x20entity':f['table']={'op':h['type'],'entity':h['entity'],'index':arr(h['indexes'])??[]};break;case'swap':case'replace':case'copy':f['entity']={'op':h['type'],'entity1':h['entity1'],'entity2':h['entity2']};break;case'del':f['entity']={'op':'del','entity':h['entity']};break;case'add':case'set':case'remove':f['admin']={'op':h['type'],'addresses':arr(h['addresses'])??[]};break;case'set\x20remark':f['remark']={'op':'set','index':h['index'],'remark':h['remark']};break;case'remove\x20remark':f['remark']={'op':'remove','index':h['index']};break;case'clear\x20remark':f['remark']={'op':'clear'};break;case'set\x20description':f['description']=h['description'];break;case'transfer':f['builder']=h['new_owner'];break;case'set\x20um':f['um']=h['um']??null;break;case'apply':f['apply']=arr(h['objects'])??[];break;default:break;}}return f;}export function projectRewardPuzzle(a){const b=rec(a)??{};if(!isDimensionPuzzle(b))return b;const c=rec(b['intent']),d=rec(b['config']),e=rec(b['guard']),f=rec(b['funds']);if(!c&&!d&&!e&&!f)return{};const g={};if(c?.['action']==='claim'&&str(c['target_reward']))g['claim']=c['target_reward'];if(e&&str(e['guard'])){const i=e['recipient_param'],j=e['recipient_type']==='GuardIdentifier'?{'GuardIdentifier':Number(i??0x0)}:e['recipient_type']==='Entity'?{'Entity':String(i??'')}:{'Signer':'signer'},k={'type':e['amount_type'],'value':e['amount_param']};g['guard_add']=[{'guard':e['guard'],'recipient':j,'amount':k,...e['expiration_time']!=null?{'expiration_time':e['expiration_time']}:{},...e['store_from_id']!=null?{'store_from_id':e['store_from_id']}:{}}];}f?.['coin_add_amount']!=null&&(g['coin_add']={'amount':String(f['coin_add_amount']),'coin_type':str(d?.['coin_type'])??''});const h=rec(f?.['receive_payment']);if(h&&str(h['token_type']))g['receive']={'token_type':h['token_type']};if(f?.['current_balance']!=null)g['current_balance']=String(f['current_balance']);if(d&&str(d['permission']))g['permission_address']=d['permission'];return(str(f?.['signer'])??str(rec(b['permission'])?.['signer']))&&(g['signer']=f?.['signer']??rec(b['permission'])?.['signer']),g;}export function projectOrderPuzzle(a){const b=rec(a)??{};if(!isDimensionPuzzle(b))return b;const c=rec(b['intent']),d=rec(b['binding']);if(!c&&!d)return{};const e={};if(c?.['action']==='buy')e['is_buy_operation']=!![];if(c?.['action']==='advance')e['operation']='progress_advance';if(Array['isArray'](d?.['items'])&&d['items']['length']>0x0)e['items']=d['items'];if(d&&str(d['machine_snapshot']))e['order_machine_snapshot']=d['machine_snapshot'];return Array['isArray'](d?.['agents'])&&d['agents']['length']>0x0&&(e['agent_list']={'agents':d['agents']}),e;}export function projectProgressPuzzle(a){const b=rec(a)??{};if(!isDimensionPuzzle(b))return b;const c=rec(b['intent']),d=rec(b['workflow']),e=rec(b['named_operator']),f=rec(b['task']);if(!c&&!d&&!e&&!f)return{};const g={};if(c&&str(c['target_progress']))g['object']=c['target_progress'];if(d&&str(d['machine']))g['current_machine']=d['machine'];d&&typeof d['machine_published']==='boolean'&&(g['machine_published']=d['machine_published']);if(d&&str(d['current_node']))g['current_node']=d['current_node'];e&&str(e['name'])&&(g['progress_namedOperator']={'op':e['op']??'add','name':e['name'],'operators':arr(e['addresses'])??[]});if(f&&str(f['task_address']))g['task']=f['task_address'];return g;}export function projectArbitrationPuzzle(a){const b=rec(a)??{};if(!isDimensionPuzzle(b))return b;const c=rec(b['arbitration_config']),d=rec(b['voting_guard']),e=rec(b['usage_guard']);if(!c&&!d&&!e)return{};const f={};if(c?.['description']!=null)f['description']=c['description'];if(c?.['location']!=null)f['location']=c['location'];if(c?.['fee']!=null)f['fee']=c['fee'];if(e&&'guard'in e)f['usage_guard']=e['guard']??null;const g=arr(d?.['guards'])??[];if(g['length']>0x0)f['voting_guard']={'op':'set','guards':g};return f;}export const PUZZLE_PROJECTIONS={'guard':projectGuardPuzzle,'machine':projectMachinePuzzle,'allocation':projectAllocationPuzzle,'treasury':projectTreasuryPuzzle,'service':projectServicePuzzle,'permission':projectPermissionPuzzle,'reward':projectRewardPuzzle,'order':projectOrderPuzzle,'progress':projectProgressPuzzle,'arbitration':projectArbitrationPuzzle};

package/dist/knowledge/recipient-constraint.d.ts

@@ -24,7 +24,7 @@ export interface ObjectReceiptRight {
     receive_entry: string;
     guarantee: string;
 }
-export type FindingSeverity = "CRITICAL" | "HIGH" | "MEDIUM" | "LOW";
+export type FindingSeverity = "critical" | "high" | "medium" | "low";
 export interface RecipientFinding {
     code: string;
     severity: FindingSeverity;
@@ -162,4 +162,23 @@ export interface ObjectDriveability {
 }
 export declare const OBJECT_DRIVEABILITY: readonly ObjectDriveability[];
 export declare function driveabilityOf(object_type: DrivableObjectType): ObjectDriveability | undefined;
+export type RewardClaimViability = "viable" | "conditional" | "blocked" | "unverifiable";
+export interface RewardClaimEntryAudit {
+    entry_index: number;
+    guard: string;
+    recipient_kind: "entity" | "signer" | "submission";
+    recipient_slot?: number;
+    guard_resolved: boolean;
+    constraint_codes: ConstraintCode[];
+    recipient_slot_usages: number;
+    caller_identity_constrained: boolean;
+    viability: RewardClaimViability;
+    reason: string;
+}
+export declare function analyzeRewardClaimGuard(args: {
+    entry_index: number;
+    guard: string;
+    recipient: unknown;
+    guard_def?: GuardDef;
+}): RewardClaimEntryAudit;
 export {};

package/dist/knowledge/recipient-constraint.js

@@ -1 +1 @@
-import{ValueType}from'@wowok/wowok';import{getGuardQueryByIdOrName}from'../schema/utils/guard-query-utils.js';function asNode(a){if(typeof a!=='object'||a===null)return null;const b=a['type'];return typeof b==='string'?a:null;}function queryMeta(a){if(typeof a!=='number'&&typeof a!=='string')return null;const b=getGuardQueryByIdOrName(a);return b?{'id':b['id'],'name':b['name']}:null;}function childNodes(a){const b=[];if(Array['isArray'](a['nodes']))a['nodes']['forEach'](d=>{const e=asNode(d);if(e)b['push'](e);});if(asNode(a['node']))b['push'](asNode(a['node']));return[a['nodeLeft'],a['nodeRight']]['forEach'](d=>{const e=asNode(d);if(e)b['push'](e);}),b;}export function classifyRecipient(a){if(typeof a!=='object'||a===null)return null;const b=a;if(typeof b['Entity']==='string')return{'kind':'entity','address':b['Entity']};const c=b['Entity'];if(c&&typeof c==='object'&&typeof c['name_or_address']==='string')return{'kind':'entity','address':c['name_or_address']};if(b['Signer']==='signer'||b['Signer']===!![])return{'kind':'signer'};if(typeof b['GuardIdentifier']==='number')return{'kind':'submission','identifier':b['GuardIdentifier']};return null;}function leafInfo(a,b){if(a['type']==='context'&&typeof a['context']==='string'){if(a['context']==='Signer')return{'kind':'signer'};if(a['context']==='Clock')return{'kind':'clock'};}if(a['type']==='query'){const c=queryMeta(a['query']),d=a['object'];if(c&&d&&typeof d['identifier']==='number')return{'kind':'query','query_name':c['name'],'query_id':c['id'],'object_identifier':d['identifier'],'convert_witness':d['convert_witness']};}if(a['type']==='identifier'){const e=typeof a['identifier']==='number'?a['identifier']:-0x1,f=b['find'](g=>g['identifier']===e);if(f){const g=typeof f['value']==='string'?f['value']:undefined;if(f['value_type']===ValueType['Address'])return{'kind':'static_address','value':g};if(f['value_type']===ValueType['String'])return{'kind':'static_string','value':g};}}return{'kind':'other'};}function comparisonLeaves(a,b){if(a['type']==='logic_equal'){const c=childNodes(a)['map'](d=>flattenLeaf(d,b));return c;}return[];}function flattenLeaf(a,b){if(a['type']==='logic_not'){const d=childNodes(a)[0x0];return d?flattenLeaf(d,b):{'kind':'other'};}return leafInfo(a,b);}function isOrderProgressWitness(a){if(a===0x64)return!![];return typeof a==='string'&&a['toLowerCase']()['includes']('orderprogress');}function describe(a){switch(a){case'service_binding':return'Submitted\x20object\x20must\x20belong\x20to\x20the\x20expected\x20service';case'progress_node_state':return'Submitted\x20order\x20must\x20be\x20at\x20a\x20qualifying\x20workflow\x20node';case'signer_is_submitted_object_owner':return'Caller\x20must\x20be\x20the\x20owner\x20of\x20the\x20submitted\x20object';case'signer_authorized_entity':return'Caller\x20must\x20equal\x20a\x20fixed\x20authorized\x20address';case'signer_permission_member':return'Caller\x20must\x20satisfy\x20a\x20Permission\x20membership\x20rule';case'time_lock':return'Current\x20time\x20must\x20satisfy\x20the\x20time-lock';case'repository_crosscheck':return'Repository\x20data\x20must\x20satisfy\x20the\x20cross-check';default:return'Other\x20guard\x20constraint';}}function extractConstraints(a,b){const c=[],d=new Set(),e=h=>{const i=h['code']+':'+(h['slot']??'-');!d['has'](i)&&(d['add'](i),c['push'](h));},f=(h,i)=>({'path':h,'queries':i}),g=(h,i)=>{const j=comparisonLeaves(h,b);if(j['length']>=0x2){const k=j['find'](r=>r['kind']==='signer'),l=j['find'](r=>r['kind']==='query'&&r['query_name']==='order.owner'),m=j['find'](r=>r['kind']==='query'&&r['query_name']==='order.service'),n=j['find'](r=>r['kind']==='query'&&r['query_name']==='progress.current'),o=j['find'](r=>r['kind']==='static_address'),p=j['find'](r=>r['kind']==='static_string');k&&l&&e({'code':'signer_is_submitted_object_owner','slot':l['object_identifier'],'description':describe('signer_is_submitted_object_owner'),'caller_constraint':!![],'evidence':f(i,['Signer','order.owner'])});k&&o&&e({'code':'signer_authorized_entity','description':describe('signer_authorized_entity'),'caller_constraint':!![],'evidence':f(i,['Signer'])});m&&o&&e({'code':'service_binding','slot':m['object_identifier'],'description':describe('service_binding'),'caller_constraint':![],'evidence':f(i,['order.service'])});if(n&&p){const r=n['object_identifier'];isOrderProgressWitness(n['convert_witness'])&&e({'code':'progress_node_state','slot':r,'description':describe('progress_node_state'),'caller_constraint':![],'evidence':f(i,['progress.current'])});}}if(h['type']['startsWith']('logic_as_u256')||h['type']==='calc_number_add'){const s=[h,...childNodes(h)]['map'](t=>flattenLeaf(t,b));if(s['some'](t=>t['kind']==='clock')&&s['some'](t=>t['kind']==='query'&&(t['query_name']==='progress.current_time'||t['query_name']==='progress.session.forward.time'))){const t=s['find'](u=>u['kind']==='query');e({'code':'time_lock','slot':t['object_identifier'],'description':describe('time_lock'),'caller_constraint':![],'evidence':f(i,['Clock',t['query_name']])});}}if(h['type']==='query'){const u=queryMeta(h['query']);if(u&&u['name']['startsWith']('repository.')){const v=h['object'];e({'code':'repository_crosscheck','slot':v?.['identifier'],'description':describe('repository_crosscheck'),'caller_constraint':![],'evidence':f(i,[u['name']])});}}childNodes(h)['forEach']((w,x)=>g(w,i+'/'+x));};return g(a,'/root'),c;}function findSessionQueries(a){const b=[],c=(d,e)=>{if(d['type']==='query'){const f=queryMeta(d['query']);if(f&&(f['id']===0x4f6||f['id']===0x4f7))b['push'](e);}childNodes(d)['forEach']((g,h)=>c(g,e+'/'+h));};return c(a,'/root'),b;}function collectSlotUsages(a){const b=[],c=(d,e)=>{if(d['type']==='query'){const f=queryMeta(d['query']),g=d['object'];f&&g&&typeof g['identifier']==='number'&&b['push']({'slot':g['identifier'],'path':e,'query_id':f['id'],'query_name':f['name'],...g['convert_witness']!==undefined?{'convert_witness':g['convert_witness']}:{}});}childNodes(d)['forEach']((h,j)=>c(h,e+'/'+j));};return c(a,'/root'),b;}function deriveReceiptRight(a,b){const c=b['find'](e=>e['code']==='progress_node_state'&&e['slot']===a),d=b['find'](e=>e['code']==='signer_is_submitted_object_owner'&&e['slot']===a);if(c||d)return{'object_type':'order','receive_entry':'order::owner_receive','guarantee':'Delivered\x20funds\x20are\x20owned\x20by\x20the\x20submitted\x20Order;\x20only\x20its\x20current\x20owner\x20can\x20'+'extract\x20them\x20(&mut\x20Order\x20input),\x20and\x20coins\x20transfer\x20to\x20that\x20owner.'};return undefined;}function deriveBeneficialOwner(a,b){switch(a['kind']){case'entity':return'Fixed\x20entity\x20'+a['address'];case'signer':return'Transaction\x20caller\x20(Signer)\x20—\x20direct\x20wallet';case'submission':return b?'Owner\x20of\x20the\x20submitted\x20object\x20at\x20table['+a['identifier']+']\x20(object\x20receipt\x20=\x20owner\x20receipt)':'Address\x20submitted\x20at\x20table['+a['identifier']+']\x20(caller-provided)';}}function buildSlotModels(a,b,c,d){const e=[...new Set(c['map'](f=>f['spec'])['filter'](f=>f['kind']==='submission')['map'](f=>f['identifier']))];return e['map'](f=>{const g=a['find'](p=>p['identifier']===f),h=g?normalizeValueType(g['value_type']):undefined,i=h===ValueType['Address'],j=b['filter'](p=>p['slot']===f),k=c['filter'](p=>p['spec']['kind']==='submission'&&p['spec']['identifier']===f)['map'](p=>p['mode']??'Unknown'),l=d['filter'](p=>p['slot']===undefined||p['slot']===f),m=deriveReceiptRight(f,d),n=l['some'](p=>p['code']==='service_binding'||p['code']==='repository_crosscheck'||p['code']==='signer_permission_member'),o=[];if(h!==undefined&&!i)o['push']('RC-FIND-07');if(!n)o['push']('RC-FIND-02');if(m?.['object_type']==='order')o['push']('RC-FIND-03');return{'identifier':f,'externally_submitted':g?.['b_submission']??!![],...h!==undefined?{'declared_value_type':h}:{},'is_address':i,'usages':j,'recipient_modes':k,'constraints':l,...m?{'receipt':m}:{},'beneficial_owner':deriveBeneficialOwner({'kind':'submission','identifier':f},m),'assessment':{'address_typed':i,'scope_bound':n,'object_receipt':m?.['object_type']==='order'},'findings':o};});}function buildSlotFinding(a,b,c){const d=a['identifier'];switch(b){case'RC-FIND-07':return{'code':b,'severity':'MEDIUM','title':'Submission\x20slot\x20'+d+'\x20is\x20not\x20address-typed','explanation':'GuardIdentifier\x20recipients\x20require\x20an\x20address-typed\x20table\x20entry\x20'+'(enforced\x20by\x20allocator_add\x20/\x20ERECIPIENT_IDENTIFIER_NOT_ADDRESS).','evidence_paths':c,'mitigation':'Set\x20the\x20slot\x20value_type\x20to\x20Address,\x20or\x20use\x20an\x20Entity\x20recipient.','unavoidable':![]};case'RC-FIND-02':return{'code':b,'severity':'HIGH','title':'Submission\x20slot\x20'+d+'\x20has\x20no\x20scope\x20binding','explanation':'Nothing\x20constrains\x20which\x20submitted\x20objects/addresses\x20qualify:\x20no\x20'+'service\x20binding,\x20repository\x20cross-check\x20or\x20permission\x20membership.\x20A\x20caller\x20'+'can\x20submit\x20arbitrary\x20qualifying-by-other-conditions\x20inputs.','evidence_paths':c,'mitigation':'Add\x20a\x20constraint\x20binding\x20the\x20slot\x20(e.g.\x20order.service\x20==\x20host\x20service).','unavoidable':![]};case'RC-FIND-03':return{'code':b,'severity':'MEDIUM','title':'Cross-allocation\x20settlement\x20residual','explanation':'The\x20submitted\x20order\x20is\x20not\x20bound\x20to\x20the\x20Allocation\x20being\x20settled\x20'+'(alloc\x20is\x20permissionless\x20and\x20allocation\x20context\x20is\x20not\x20a\x20Guard\x20input).\x20A\x20'+'caller\x20owning\x20ANY\x20qualifying\x20order\x20can\x20settle\x20OTHER\x20allocations;\x20funds\x20land\x20'+'at\x20the\x20submitted\x20order\x20and\x20are\x20receivable\x20by\x20its\x20owner.\x20Destination\x20is\x20safe\x20'+'(an\x20order\x20owner),\x20allocation\x20choice\x20is\x20the\x20residual.','evidence_paths':c,'mitigation':'Pick\x20ONE\x20resolution\x20and\x20record\x20it\x20in\x20the\x20service\x20description:\x20'+'(1)\x20competition\x20semantics\x20—\x20declare\x20that\x20any\x20qualifying\x20order\x20may\x20settle\x20'+'this\x20allocation\x20and\x20cap\x20the\x20exposure\x20(sharing\x20threshold\x20/\x20max\x20amount);\x20'+'(2)\x20Entity\x20routing\x20—\x20use\x20a\x20fixed\x20Entity\x20(treasury)\x20recipient,\x20the\x20only\x20'+'exclusive\x20choice\x20on\x20the\x20automatic\x20order_allocators\x20route\x20(trust\x20shifts\x20to\x20'+'the\x20entity\x20operator);\x20'+'(3)\x20per-order\x20pinned\x20Guards\x20—\x20abandon\x20automatic\x20order_allocators\x20and\x20attach\x20'+'a\x20per-order\x20Guard\x20pinning\x20the\x20order\x20id\x20(order.owner\x20==\x20constant),\x20the\x20'+'trustless\x20exclusive\x20route.','unavoidable':!![],'resolution_required':!![]};default:return{'code':b,'severity':'LOW','title':'Slot\x20'+d+'\x20finding\x20'+b,'explanation':'','evidence_paths':c,'mitigation':'','unavoidable':![]};}}function buildFindings(a,b){const c=[];let d=![],e=![];for(const f of b){const g=f['recipients']['flatMap'](h=>h['constraints'])['filter'](h=>h['caller_constraint']);if(g['length']>0x0)d=!![];if(f['slots']['some'](h=>h['assessment']['scope_bound']))e=!![];for(const h of f['recipients']){const i=h['constraints']['map'](j=>j['evidence']['path']);h['spec']['kind']==='signer'&&g['length']===0x0&&c['push']({'code':'RC-FIND-01','severity':'CRITICAL','title':'Signer\x20recipient\x20without\x20caller\x20constraint\x20—\x20fund\x20theft','explanation':'Funds\x20are\x20delivered\x20directly\x20to\x20the\x20transaction\x20caller,\x20but\x20the\x20Guard\x20'+'does\x20not\x20bind\x20the\x20Signer\x20to\x20an\x20authorized\x20identity.\x20Anyone\x20who\x20satisfies\x20the\x20'+'other\x20conditions\x20steals\x20the\x20funds.','evidence_paths':i,'mitigation':'Bind\x20the\x20Signer\x20(signer==order.owner\x20or\x20signer==fixed\x20address),\x20or\x20change\x20'+'the\x20recipient\x20to\x20an\x20Entity\x20/\x20submitted\x20object\x20slot.','unavoidable':![]});}for(const j of f['slots']){const k=j['constraints']['map'](l=>l['evidence']['path']);for(const l of j['findings']){c['push'](buildSlotFinding(j,l,k));}}}a['trigger_source']==='standalone'&&!d&&c['push']({'code':'RC-FIND-04','severity':'HIGH','title':'Standalone\x20allocation\x20without\x20issuer\x20identity\x20constraint','explanation':'Standalone\x20allocations\x20have\x20no\x20Service/Arbitration\x20access-control\x20layer.\x20'+'Without\x20a\x20Signer/permission\x20binding\x20in\x20the\x20Guard,\x20anyone\x20can\x20trigger\x20distribution.','evidence_paths':[],'mitigation':'Bind\x20the\x20issuer\x20(Signer==owner/admin)\x20or\x20move\x20the\x20allocation\x20into\x20a\x20Service.','unavoidable':![]});c['push']({'code':'RC-FIND-06','severity':'LOW','title':'Permissionless\x20alloc\x20—\x20forced\x20settlement\x20timing','explanation':'Once\x20the\x20Guard\x27s\x20conditions\x20are\x20satisfiable,\x20anyone\x20can\x20trigger\x20settlement\x20of\x20an\x20'+'order\x27s\x20allocation.\x20With\x20Entity/object\x20recipients\x20this\x20affects\x20timing\x20only,\x20not\x20destination.','evidence_paths':[],'mitigation':'Monitor\x20settlements;\x20constrain\x20time-sensitivity\x20via\x20Guard\x20conditions.','unavoidable':!![]});for(const [m,n]of Object['entries'](a['guards']??{})){const o=asNode(n['root']);if(!o)continue;for(const q of findSessionQueries(o)){c['push']({'code':'RC-FIND-05','severity':'MEDIUM','title':'Guard\x20'+m+'\x20uses\x20session-only\x20query\x20at\x20'+q,'explanation':'Queries\x201270/1271\x20read\x20the\x20active\x20session;\x20after\x20the\x20session\x20migrates\x20to\x20'+'history\x20the\x20query\x20aborts\x20(W_FIELD_NOT_FOUND)\x20and\x20the\x20Guard\x20permanently\x20fails.','evidence_paths':[q],'mitigation':'Use\x20progress.current_time\x20(1272)\x20or\x20history\x20queries\x20(1274-1279).','unavoidable':![]});}}for(const [s,t]of Object['entries'](a['guards']??{})){const u=(t['relies']??[])['filter'](v=>typeof v==='string'&&v);if(u['length']===0x0)continue;c['push']({'code':'RC-FIND-08','severity':'LOW','title':'Guard\x20'+s+'\x20relies\x20on\x20'+u['length']+'\x20sub-guard(s)\x20—\x20not\x20credited\x20by\x20this\x20audit','explanation':'Guard\x20composition\x20(relies,\x20one\x20level,\x20≤4,\x20'+((t['relies_logic_and']===![]?'OR':'AND')+'-logic)\x20may\x20carry\x20the\x20scope/signer\x20')+'constraints\x20in\x20the\x20relied\x20sub-guards.\x20This\x20audit\x20evaluates\x20only\x20the\x20guard\x27s\x20own\x20root:\x20'+'sub-guard\x20constraints\x20are\x20NOT\x20credited,\x20so\x20scope-binding\x20gaps\x20(RC-FIND-02)\x20may\x20be\x20'+'over-reported\x20and\x20sub-guard-only\x20conditions\x20stay\x20unverified.','evidence_paths':u,'mitigation':'Resolve\x20the\x20relied\x20sub-guards\x20and\x20verify\x20their\x20constraints\x20manually,\x20or\x20re-run\x20'+'with\x20the\x20sub-guard\x20defs\x20included\x20(read-side\x20resolvers\x20attach\x20them\x20automatically).','unavoidable':![]});}if(!e&&a['trigger_source']==='service_order_allocators'){}return c;}function buildPayoff(a,b){const c=a['recipients']['some'](h=>h['constraints']['some'](i=>i['caller_constraint'])),d=c?'Caller\x20must\x20satisfy\x20the\x20Guard\x27s\x20Signer/identity\x20binding':b==='standalone'?'Any\x20caller\x20(no\x20identity\x20binding)':'Any\x20caller\x20who\x20satisfies\x20the\x20Guard\x27s\x20object/state\x20conditions',e=a['recipients']['map'](h=>h['beneficial_owner'])['join'](';\x20')||'(none)',f={},g=a['recipients']['some'](h=>h['spec']['kind']==='signer'&&!c);return f['caller']=g?'gains':c?'conditional':'neutral',f['provider']=a['recipients']['some'](h=>h['spec']['kind']==='entity')?'gains':'conditional',f['customer']=a['recipients']['some'](h=>h['receipt']?.['object_type']==='order')?'conditional':'neutral',f['system']='neutral',{'caller_eligibility':d,'beneficial_recipient':e,'positions':f};}export const RECIPIENT_CONSTRAINT_VERSION='1.2.0';export function analyzeRecipientConstraints(a){const b=a['allocators']['map'](h=>{const i=a['guards']?.[h['guard']],j=asNode(i?.['root']),k=i?.['table']??[],l=j?extractConstraints(j,k):[],m=j?collectSlotUsages(j):[],n=h['sharing']['map'](q=>{const r=classifyRecipient(q['who']);if(!r)return{'spec':{'kind':'entity','address':'(unclassifiable)'},'constraints':l,'beneficial_owner':'Unclassifiable\x20recipient\x20—\x20check\x20allocator\x20config'};const t=r['kind']==='submission'?r['identifier']:undefined,u=t!==undefined?k['find'](w=>w['identifier']===t):undefined,v=t!==undefined?deriveReceiptRight(t,l):undefined;return{'spec':r,'slot_value_type':u?normalizeValueType(u['value_type']):undefined,'constraints':t!==undefined?l['filter'](w=>w['slot']===undefined||w['slot']===t):l,'receipt':v,'beneficial_owner':deriveBeneficialOwner(r,v)};}),o=buildSlotModels(k,m,h['sharing']['map'](q=>({'spec':classifyRecipient(q['who'])??{'kind':'entity','address':'(unclassifiable)'},'mode':q['mode']})),l),p={'guard':h['guard'],'recipients':n,'slots':o,'payoff':{'caller_eligibility':'','beneficial_recipient':'','positions':{}}};return p['payoff']=buildPayoff(p,a['trigger_source']),p;}),c=buildFindings(a,b),d=c['some'](h=>h['severity']==='CRITICAL')?'CRITICAL':c['some'](h=>h['severity']==='HIGH')?'HIGH':c['some'](h=>h['severity']==='MEDIUM')?'MEDIUM':'LOW',e=!c['some'](h=>h['code']==='RC-FIND-01'),f=c['some'](h=>h['resolution_required']),g=[{'code':'RC-FIND-03','title':'Cross-allocation\x20settlement','detail':'Submitted\x20order\x20is\x20not\x20bound\x20to\x20the\x20settled\x20allocation;\x20destination\x20stays\x20at\x20an\x20order\x20owner.'},{'code':'RC-FIND-06','title':'Forced\x20settlement\x20timing','detail':'alloc\x20is\x20permissionless;\x20settlement\x20can\x20be\x20triggered\x20by\x20anyone\x20once\x20conditions\x20hold.'},{'code':'RC-RES-01','title':'Published\x20immutability','detail':'order_allocators,\x20Machine\x20and\x20Guards\x20are\x20immutable\x20after\x20publish.'},{'code':'RC-RES-03','title':'Off-chain\x20arbitration\x20backstop','detail':'No\x20on-chain\x20clawback;\x20post-incident\x20recovery\x20relies\x20on\x20arbitration.'}];return{'version':RECIPIENT_CONSTRAINT_VERSION,'scope':{'trigger_source':a['trigger_source'],'host_service':a['host_service'],'allocation':a['allocation']},'allocators':b,'findings':c,'unavoidable':g,'safe_destination':e,'resolution_required':f,'overall':d,'summary':'Analyzed\x20'+b['length']+'\x20allocator(s):\x20'+c['filter'](h=>!h['unavoidable'])['length']+'\x20actionable,\x20'+(c['filter'](h=>h['unavoidable'])['length']+'\x20structural\x20finding(s).\x20Safe\x20destination:\x20'+e+'.')+(''+(f?'\x20Resolution\x20REQUIRED:\x20at\x20least\x20one\x20residual\x20demands\x20an\x20explicit\x20design\x20decision\x20before\x20publish.':''))};}export function derivePayoffFromSharing(a,b,c){const d=asNode(c?.['root']),e=c?.['table']??[],f=d?extractConstraints(d,e):[],g=a['map'](i=>{const j=classifyRecipient(i['who'])??{'kind':'entity','address':'(unclassifiable)'},k=j['kind']==='submission'?j['identifier']:undefined,l=k!==undefined?e['find'](n=>n['identifier']===k):undefined,m=k!==undefined?deriveReceiptRight(k,f):undefined;return{'spec':j,'slot_value_type':l?normalizeValueType(l['value_type']):undefined,'constraints':k!==undefined?f['filter'](n=>n['slot']===undefined||n['slot']===k):f,'receipt':m,'beneficial_owner':deriveBeneficialOwner(j,m)};}),h={'guard':'','recipients':g,'slots':[],'payoff':{'caller_eligibility':'','beneficial_recipient':'','positions':{}}};return buildPayoff(h,b);}function normalizeValueType(a){if(typeof a==='number')return a;const b={'bool':ValueType['Bool'],'address':ValueType['Address'],'string':ValueType['String'],'u64':ValueType['U64'],'u256':ValueType['U256']};return b[a['toLowerCase']()];}export function isUnboundSignerTheft(a){return a['recipient_is_signer']&&!a['caller_identity_constrained'];}export function canonicalDoctrine(a){switch(a){case'RC-FIND-01':return{'severity':'CRITICAL','title':'Signer\x20recipient\x20without\x20caller\x20constraint\x20—\x20fund\x20theft','mitigation':'Bind\x20the\x20Signer\x20(signer==order.owner\x20or\x20signer==fixed\x20address),\x20or\x20change\x20'+'the\x20recipient\x20to\x20an\x20Entity\x20/\x20submitted\x20object\x20slot.'};case'RC-FIND-03':return{'severity':'MEDIUM','title':'Cross-allocation\x20settlement\x20residual','mitigation':'Pick\x20ONE\x20resolution\x20and\x20record\x20it\x20in\x20the\x20service\x20description:\x20'+'(1)\x20competition\x20semantics\x20with\x20capped\x20exposure\x20(threshold\x20/\x20max\x20amount);\x20'+'(2)\x20Entity\x20routing\x20(treasury)\x20—\x20the\x20only\x20exclusive\x20choice\x20on\x20the\x20automatic\x20'+'order_allocators\x20route;\x20'+'(3)\x20per-order\x20pinned\x20Guards\x20(order.owner\x20==\x20constant)\x20—\x20the\x20trustless\x20'+'exclusive\x20route.','resolution_required':!![]};case'RC-FIND-06':return{'severity':'LOW','title':'Permissionless\x20alloc\x20—\x20forced\x20settlement\x20timing','mitigation':'Monitor\x20settlements;\x20constrain\x20time-sensitivity\x20via\x20Guard\x20conditions.'};}}export const RECIPIENT_DESIGN_OPTIONS=[{'id':'entity','move_recipient':'Recipient::Entity(address)','semantics':'Funds\x20flow\x20to\x20a\x20fixed\x20address\x20(a\x20constrained\x20user\x20account\x20/\x20treasury).\x20'+'Destination\x20never\x20depends\x20on\x20the\x20caller.','required_constraints':['The\x20address\x20is\x20chosen\x20at\x20design\x20time\x20and\x20recorded\x20in\x20the\x20allocator\x20table.']},{'id':'submitted_object','move_recipient':'Recipient::GuardIdentifier(u8)','semantics':'Funds\x20flow\x20to\x20the\x20object\x20submitted\x20under\x20protocol\x20context\x20(e.g.\x20the\x20order\x20being\x20settled).\x20'+'Receivable\x20only\x20by\x20that\x20object\x27s\x20owner\x20—\x20object\x20receipt\x20=\x20owner\x20receipt.','required_constraints':['The\x20Guard\x20binds\x20the\x20submission\x27s\x20scope\x20(which\x20query/object\x20type\x20the\x20slot\x20carries).','The\x20slot\x27s\x20table\x20value\x20type\x20is\x20address\x20(enforced\x20by\x20allocator_add).'],'finding_if_unmet':'RC-FIND-02\x20/\x20RC-FIND-07'},{'id':'signer','move_recipient':'Recipient::Signer','semantics':'Funds\x20flow\x20to\x20the\x20caller\x20who\x20executes\x20the\x20permissionless\x20alloc.\x20'+'Safe\x20only\x20when\x20the\x20Guard\x20proves\x20exactly\x20who\x20the\x20caller\x20may\x20be.','required_constraints':['The\x20Guard\x20constrains\x20the\x20Signer\x20identity\x20(signer\x20==\x20a\x20fixed\x20address\x20or\x20a\x20derived\x20legitimate\x20owner).'],'finding_if_unmet':'RC-FIND-01'},{'id':'constrained_submission','move_recipient':'Recipient::GuardIdentifier(u8)','semantics':'Funds\x20flow\x20to\x20an\x20object\x20address\x20supplied\x20by\x20the\x20signer,\x20but\x20the\x20Guard\x20constrains\x20'+'both\x20the\x20submission\x20scope\x20and\x20the\x20signer\x27s\x20relation\x20to\x20it\x20(e.g.\x20the\x20signer\x20owns\x20the\x20submitted\x20order).','required_constraints':['The\x20Guard\x20binds\x20the\x20submission\x27s\x20scope\x20(object/query\x20type).','The\x20Guard\x20binds\x20the\x20signer\x20to\x20the\x20submitted\x20object.','The\x20slot\x27s\x20table\x20value\x20type\x20is\x20address\x20(enforced\x20by\x20allocator_add).'],'finding_if_unmet':'RC-FIND-01\x20/\x20RC-FIND-02\x20/\x20RC-FIND-07'}];export function recipientDesignGuidance(){return RECIPIENT_DESIGN_OPTIONS;}export const OBJECT_DRIVEABILITY=[{'object_type':'order','receive_entries':['order::owner_receive','order::owner_receive_object'],'anyone_drivable':!![],'funds_settle_to':'order.owner','rationale':'Order\x20is\x20a\x20shared\x20object\x20and\x20extraction\x20has\x20no\x20signer\x20gate;\x20'+'Receiving\x20is\x20restricted\x20to\x20objects\x20actually\x20delivered\x20to\x20that\x20order,\x20and\x20coins\x20settle\x20to\x20its\x20owner.'},{'object_type':'permission','receive_entries':['permission::owner_receive','permission::owner_receive_object'],'anyone_drivable':!![],'funds_settle_to':'permission.owner','rationale':'Permission\x20is\x20the\x20final\x20authority;\x20anyone\x20can\x20drive\x20extraction\x20of\x20funds\x20sent\x20to\x20its\x20address,\x20but\x20the\x20destination\x20is\x20its\x20owner.'},{'object_type':'service','receive_entries':['service::owner_receive','service::owner_receive_object'],'anyone_drivable':![],'permission_index':0x13f,'funds_settle_to':'permission.owner','rationale':'Business\x20permission\x20gate\x20(index\x20319);\x20members\x20drive,\x20value\x20settles\x20to\x20the\x20organization\x20owner.'},{'object_type':'treasury','receive_entries':['treasury::owner_receive','treasury::owner_receive_object'],'anyone_drivable':![],'permission_index':0x101,'funds_settle_to':'permission.owner','rationale':'Business\x20permission\x20gate\x20(index\x20257).'},{'object_type':'arbitration','receive_entries':['arbitration::owner_receive','arbitration::owner_receive_object'],'anyone_drivable':![],'permission_index':0x16f,'funds_settle_to':'permission.owner','rationale':'Business\x20permission\x20gate\x20(index\x20367).'},{'object_type':'machine','receive_entries':['machine::owner_receive','machine::owner_receive_object'],'anyone_drivable':![],'permission_index':0xcf,'funds_settle_to':'permission.owner','rationale':'Business\x20permission\x20gate\x20(index\x20207).'},{'object_type':'progress','receive_entries':['progress::owner_receive','progress::owner_receive_object'],'anyone_drivable':![],'permission_index':0xe1,'funds_settle_to':'machine\x27s\x20permission.owner','rationale':'Business\x20permission\x20gate\x20(index\x20225),\x20scoped\x20to\x20the\x20Machine\x20permission.'},{'object_type':'demand','receive_entries':['demand::owner_receive','demand::owner_receive_object'],'anyone_drivable':![],'permission_index':0x197,'funds_settle_to':'permission.owner','rationale':'Business\x20permission\x20gate\x20(index\x20407).'},{'object_type':'contact','receive_entries':['contact::owner_receive','contact::owner_receive_object'],'anyone_drivable':![],'permission_index':0x1c6,'funds_settle_to':'permission.owner','rationale':'Business\x20permission\x20gate\x20(index\x20454).'}];export function driveabilityOf(a){return OBJECT_DRIVEABILITY['find'](b=>b['object_type']===a);}
+import{ValueType}from'@wowok/wowok';import{getGuardQueryByIdOrName}from'../schema/utils/guard-query-utils.js';function asNode(a){if(typeof a!=='object'||a===null)return null;const b=a['type'];return typeof b==='string'?a:null;}function queryMeta(a){if(typeof a!=='number'&&typeof a!=='string')return null;const b=getGuardQueryByIdOrName(a);return b?{'id':b['id'],'name':b['name']}:null;}function childNodes(a){const b=[];if(Array['isArray'](a['nodes']))a['nodes']['forEach'](d=>{const e=asNode(d);if(e)b['push'](e);});if(asNode(a['node']))b['push'](asNode(a['node']));return[a['nodeLeft'],a['nodeRight']]['forEach'](d=>{const e=asNode(d);if(e)b['push'](e);}),b;}export function classifyRecipient(a){if(typeof a!=='object'||a===null)return null;const b=a;if(typeof b['Entity']==='string')return{'kind':'entity','address':b['Entity']};const c=b['Entity'];if(c&&typeof c==='object'&&typeof c['name_or_address']==='string')return{'kind':'entity','address':c['name_or_address']};if(b['Signer']==='signer'||b['Signer']===!![])return{'kind':'signer'};if(typeof b['GuardIdentifier']==='number')return{'kind':'submission','identifier':b['GuardIdentifier']};return null;}function leafInfo(a,b){if(a['type']==='context'&&typeof a['context']==='string'){if(a['context']==='Signer')return{'kind':'signer'};if(a['context']==='Clock')return{'kind':'clock'};}if(a['type']==='query'){const c=queryMeta(a['query']),d=a['object'];if(c&&d&&typeof d['identifier']==='number')return{'kind':'query','query_name':c['name'],'query_id':c['id'],'object_identifier':d['identifier'],'convert_witness':d['convert_witness']};}if(a['type']==='identifier'){const e=typeof a['identifier']==='number'?a['identifier']:-0x1,f=b['find'](g=>g['identifier']===e);if(f){const g=typeof f['value']==='string'?f['value']:undefined;if(f['value_type']===ValueType['Address'])return{'kind':'static_address','value':g};if(f['value_type']===ValueType['String'])return{'kind':'static_string','value':g};}}return{'kind':'other'};}function comparisonLeaves(a,b){if(a['type']==='logic_equal'){const c=childNodes(a)['map'](d=>flattenLeaf(d,b));return c;}return[];}function flattenLeaf(a,b){if(a['type']==='logic_not'){const d=childNodes(a)[0x0];return d?flattenLeaf(d,b):{'kind':'other'};}return leafInfo(a,b);}function isOrderProgressWitness(a){if(a===0x64)return!![];return typeof a==='string'&&a['toLowerCase']()['includes']('orderprogress');}function describe(a){switch(a){case'service_binding':return'Submitted\x20object\x20must\x20belong\x20to\x20the\x20expected\x20service';case'progress_node_state':return'Submitted\x20order\x20must\x20be\x20at\x20a\x20qualifying\x20workflow\x20node';case'signer_is_submitted_object_owner':return'Caller\x20must\x20be\x20the\x20owner\x20of\x20the\x20submitted\x20object';case'signer_authorized_entity':return'Caller\x20must\x20equal\x20a\x20fixed\x20authorized\x20address';case'signer_permission_member':return'Caller\x20must\x20satisfy\x20a\x20Permission\x20membership\x20rule';case'time_lock':return'Current\x20time\x20must\x20satisfy\x20the\x20time-lock';case'repository_crosscheck':return'Repository\x20data\x20must\x20satisfy\x20the\x20cross-check';default:return'Other\x20guard\x20constraint';}}function extractConstraints(a,b){const c=[],d=new Set(),e=h=>{const i=h['code']+':'+(h['slot']??'-');!d['has'](i)&&(d['add'](i),c['push'](h));},f=(h,i)=>({'path':h,'queries':i}),g=(h,i)=>{const j=comparisonLeaves(h,b);if(j['length']>=0x2){const k=j['find'](r=>r['kind']==='signer'),l=j['find'](r=>r['kind']==='query'&&r['query_name']==='order.owner'),m=j['find'](r=>r['kind']==='query'&&r['query_name']==='order.service'),n=j['find'](r=>r['kind']==='query'&&r['query_name']==='progress.current'),o=j['find'](r=>r['kind']==='static_address'),p=j['find'](r=>r['kind']==='static_string');k&&l&&e({'code':'signer_is_submitted_object_owner','slot':l['object_identifier'],'description':describe('signer_is_submitted_object_owner'),'caller_constraint':!![],'evidence':f(i,['Signer','order.owner'])});k&&o&&e({'code':'signer_authorized_entity','description':describe('signer_authorized_entity'),'caller_constraint':!![],'evidence':f(i,['Signer'])});m&&o&&e({'code':'service_binding','slot':m['object_identifier'],'description':describe('service_binding'),'caller_constraint':![],'evidence':f(i,['order.service'])});if(n&&p){const r=n['object_identifier'];isOrderProgressWitness(n['convert_witness'])&&e({'code':'progress_node_state','slot':r,'description':describe('progress_node_state'),'caller_constraint':![],'evidence':f(i,['progress.current'])});}}if(h['type']['startsWith']('logic_as_u256')||h['type']==='calc_number_add'){const s=[h,...childNodes(h)]['map'](t=>flattenLeaf(t,b));if(s['some'](t=>t['kind']==='clock')&&s['some'](t=>t['kind']==='query'&&(t['query_name']==='progress.current_time'||t['query_name']==='progress.session.forward.time'))){const t=s['find'](u=>u['kind']==='query');e({'code':'time_lock','slot':t['object_identifier'],'description':describe('time_lock'),'caller_constraint':![],'evidence':f(i,['Clock',t['query_name']])});}}if(h['type']==='query'){const u=queryMeta(h['query']);if(u&&u['name']['startsWith']('repository.')){const v=h['object'];e({'code':'repository_crosscheck','slot':v?.['identifier'],'description':describe('repository_crosscheck'),'caller_constraint':![],'evidence':f(i,[u['name']])});}}childNodes(h)['forEach']((w,x)=>g(w,i+'/'+x));};return g(a,'/root'),c;}function findSessionQueries(a){const b=[],c=(d,e)=>{if(d['type']==='query'){const f=queryMeta(d['query']);if(f&&(f['id']===0x4f6||f['id']===0x4f7))b['push'](e);}childNodes(d)['forEach']((g,h)=>c(g,e+'/'+h));};return c(a,'/root'),b;}function collectSlotUsages(a){const b=[],c=(d,e)=>{if(d['type']==='query'){const f=queryMeta(d['query']),g=d['object'];f&&g&&typeof g['identifier']==='number'&&b['push']({'slot':g['identifier'],'path':e,'query_id':f['id'],'query_name':f['name'],...g['convert_witness']!==undefined?{'convert_witness':g['convert_witness']}:{}});}childNodes(d)['forEach']((h,j)=>c(h,e+'/'+j));};return c(a,'/root'),b;}function deriveReceiptRight(a,b){const c=b['find'](e=>e['code']==='progress_node_state'&&e['slot']===a),d=b['find'](e=>e['code']==='signer_is_submitted_object_owner'&&e['slot']===a);if(c||d)return{'object_type':'order','receive_entry':'owner-side\x20extraction\x20on\x20the\x20order','guarantee':'Delivered\x20funds\x20are\x20owned\x20by\x20the\x20submitted\x20Order;\x20only\x20its\x20current\x20owner\x20can\x20'+'extract\x20them\x20(&mut\x20Order\x20input),\x20and\x20coins\x20transfer\x20to\x20that\x20owner.'};return undefined;}function deriveBeneficialOwner(a,b){switch(a['kind']){case'entity':return'Fixed\x20entity\x20'+a['address'];case'signer':return'Transaction\x20caller\x20(Signer)\x20—\x20direct\x20wallet';case'submission':return b?'Owner\x20of\x20the\x20submitted\x20object\x20at\x20table['+a['identifier']+']\x20(object\x20receipt\x20=\x20owner\x20receipt)':'Address\x20submitted\x20at\x20table['+a['identifier']+']\x20(caller-provided)';}}function buildSlotModels(a,b,c,d){const e=[...new Set(c['map'](f=>f['spec'])['filter'](f=>f['kind']==='submission')['map'](f=>f['identifier']))];return e['map'](f=>{const g=a['find'](p=>p['identifier']===f),h=g?normalizeValueType(g['value_type']):undefined,i=h===ValueType['Address'],j=b['filter'](p=>p['slot']===f),k=c['filter'](p=>p['spec']['kind']==='submission'&&p['spec']['identifier']===f)['map'](p=>p['mode']??'Unknown'),l=d['filter'](p=>p['slot']===undefined||p['slot']===f),m=deriveReceiptRight(f,d),n=l['some'](p=>p['code']==='service_binding'||p['code']==='repository_crosscheck'||p['code']==='signer_permission_member'),o=[];if(h!==undefined&&!i)o['push']('RC-FIND-07');if(!n)o['push']('RC-FIND-02');if(m?.['object_type']==='order')o['push']('RC-FIND-03');return{'identifier':f,'externally_submitted':g?.['b_submission']??!![],...h!==undefined?{'declared_value_type':h}:{},'is_address':i,'usages':j,'recipient_modes':k,'constraints':l,...m?{'receipt':m}:{},'beneficial_owner':deriveBeneficialOwner({'kind':'submission','identifier':f},m),'assessment':{'address_typed':i,'scope_bound':n,'object_receipt':m?.['object_type']==='order'},'findings':o};});}function buildSlotFinding(a,b,c){const d=a['identifier'];switch(b){case'RC-FIND-07':return{'code':b,'severity':'medium','title':'Submission\x20slot\x20'+d+'\x20is\x20not\x20address-typed','explanation':'GuardIdentifier\x20recipients\x20require\x20an\x20address-typed\x20table\x20entry\x20'+'(enforced\x20at\x20allocator\x20registration\x20/\x20ERECIPIENT_IDENTIFIER_NOT_ADDRESS).','evidence_paths':c,'mitigation':'Set\x20the\x20slot\x20value_type\x20to\x20Address,\x20or\x20use\x20an\x20Entity\x20recipient.','unavoidable':![]};case'RC-FIND-02':return{'code':b,'severity':'high','title':'Submission\x20slot\x20'+d+'\x20has\x20no\x20scope\x20binding','explanation':'Nothing\x20constrains\x20which\x20submitted\x20objects/addresses\x20qualify:\x20no\x20'+'service\x20binding,\x20repository\x20cross-check\x20or\x20permission\x20membership.\x20A\x20caller\x20'+'can\x20submit\x20arbitrary\x20qualifying-by-other-conditions\x20inputs.','evidence_paths':c,'mitigation':'Add\x20a\x20constraint\x20binding\x20the\x20slot\x20(e.g.\x20order.service\x20==\x20host\x20service).','unavoidable':![]};case'RC-FIND-03':return{'code':b,'severity':'medium','title':'Cross-allocation\x20settlement\x20residual','explanation':'The\x20submitted\x20order\x20is\x20not\x20bound\x20to\x20the\x20Allocation\x20being\x20settled\x20'+'(alloc\x20is\x20permissionless\x20and\x20allocation\x20context\x20is\x20not\x20a\x20Guard\x20input).\x20A\x20'+'caller\x20owning\x20ANY\x20qualifying\x20order\x20can\x20settle\x20OTHER\x20allocations;\x20funds\x20land\x20'+'at\x20the\x20submitted\x20order\x20and\x20are\x20receivable\x20by\x20its\x20owner.\x20Destination\x20is\x20safe\x20'+'(an\x20order\x20owner),\x20allocation\x20choice\x20is\x20the\x20residual.','evidence_paths':c,'mitigation':'Pick\x20ONE\x20resolution\x20and\x20record\x20it\x20in\x20the\x20service\x20description:\x20'+'(1)\x20competition\x20semantics\x20—\x20declare\x20that\x20any\x20qualifying\x20order\x20may\x20settle\x20'+'this\x20allocation\x20and\x20cap\x20the\x20exposure\x20(sharing\x20threshold\x20/\x20max\x20amount);\x20'+'(2)\x20Entity\x20routing\x20—\x20use\x20a\x20fixed\x20Entity\x20(treasury)\x20recipient,\x20the\x20only\x20'+'exclusive\x20choice\x20on\x20the\x20automatic\x20order_allocators\x20route\x20(trust\x20shifts\x20to\x20'+'the\x20entity\x20operator);\x20'+'(3)\x20per-order\x20pinned\x20Guards\x20—\x20abandon\x20automatic\x20order_allocators\x20and\x20attach\x20'+'a\x20per-order\x20Guard\x20pinning\x20the\x20order\x20id\x20(order.owner\x20==\x20constant),\x20the\x20'+'trustless\x20exclusive\x20route.','unavoidable':!![],'resolution_required':!![]};default:return{'code':b,'severity':'low','title':'Slot\x20'+d+'\x20finding\x20'+b,'explanation':'','evidence_paths':c,'mitigation':'','unavoidable':![]};}}function buildFindings(a,b){const c=[];let d=![],e=![];for(const f of b){const g=f['recipients']['flatMap'](h=>h['constraints'])['filter'](h=>h['caller_constraint']);if(g['length']>0x0)d=!![];if(f['slots']['some'](h=>h['assessment']['scope_bound']))e=!![];for(const h of f['recipients']){const i=h['constraints']['map'](j=>j['evidence']['path']);h['spec']['kind']==='signer'&&g['length']===0x0&&c['push']({'code':'RC-FIND-01','severity':'critical','title':'Signer\x20recipient\x20without\x20caller\x20constraint\x20—\x20fund\x20theft','explanation':'Funds\x20are\x20delivered\x20directly\x20to\x20the\x20transaction\x20caller,\x20but\x20the\x20Guard\x20'+'does\x20not\x20bind\x20the\x20Signer\x20to\x20an\x20authorized\x20identity.\x20Anyone\x20who\x20satisfies\x20the\x20'+'other\x20conditions\x20steals\x20the\x20funds.','evidence_paths':i,'mitigation':'Bind\x20the\x20Signer\x20(signer==order.owner\x20or\x20signer==fixed\x20address),\x20or\x20change\x20'+'the\x20recipient\x20to\x20an\x20Entity\x20/\x20submitted\x20object\x20slot.','unavoidable':![]});}for(const j of f['slots']){const k=j['constraints']['map'](l=>l['evidence']['path']);for(const l of j['findings']){c['push'](buildSlotFinding(j,l,k));}}}a['trigger_source']==='standalone'&&!d&&c['push']({'code':'RC-FIND-04','severity':'high','title':'Standalone\x20allocation\x20without\x20issuer\x20identity\x20constraint','explanation':'Standalone\x20allocations\x20have\x20no\x20Service/Arbitration\x20access-control\x20layer.\x20'+'Without\x20a\x20Signer/permission\x20binding\x20in\x20the\x20Guard,\x20anyone\x20can\x20trigger\x20distribution.','evidence_paths':[],'mitigation':'Bind\x20the\x20issuer\x20(Signer==owner/admin)\x20or\x20move\x20the\x20allocation\x20into\x20a\x20Service.','unavoidable':![]});c['push']({'code':'RC-FIND-06','severity':'low','title':'Permissionless\x20alloc\x20—\x20forced\x20settlement\x20timing','explanation':'Once\x20the\x20Guard\x27s\x20conditions\x20are\x20satisfiable,\x20anyone\x20can\x20trigger\x20settlement\x20of\x20an\x20'+'order\x27s\x20allocation.\x20With\x20Entity/object\x20recipients\x20this\x20affects\x20timing\x20only,\x20not\x20destination.','evidence_paths':[],'mitigation':'Monitor\x20settlements;\x20constrain\x20time-sensitivity\x20via\x20Guard\x20conditions.','unavoidable':!![]});for(const [m,n]of Object['entries'](a['guards']??{})){const o=asNode(n['root']);if(!o)continue;for(const q of findSessionQueries(o)){c['push']({'code':'RC-FIND-05','severity':'medium','title':'Guard\x20'+m+'\x20uses\x20session-only\x20query\x20at\x20'+q,'explanation':'Queries\x201270/1271\x20read\x20the\x20active\x20session;\x20after\x20the\x20session\x20migrates\x20to\x20'+'history\x20the\x20query\x20aborts\x20(W_FIELD_NOT_FOUND)\x20and\x20the\x20Guard\x20permanently\x20fails.','evidence_paths':[q],'mitigation':'Use\x20progress.current_time\x20(1272)\x20or\x20history\x20queries\x20(1274-1279).','unavoidable':![]});}}for(const [s,t]of Object['entries'](a['guards']??{})){const u=(t['relies']??[])['filter'](v=>typeof v==='string'&&v);if(u['length']===0x0)continue;c['push']({'code':'RC-FIND-08','severity':'low','title':'Guard\x20'+s+'\x20relies\x20on\x20'+u['length']+'\x20sub-guard(s)\x20—\x20not\x20credited\x20by\x20this\x20audit','explanation':'Guard\x20composition\x20(relies,\x20one\x20level,\x20≤4,\x20'+((t['relies_logic_and']===![]?'OR':'AND')+'-logic)\x20may\x20carry\x20the\x20scope/signer\x20')+'constraints\x20in\x20the\x20relied\x20sub-guards.\x20This\x20audit\x20evaluates\x20only\x20the\x20guard\x27s\x20own\x20root:\x20'+'sub-guard\x20constraints\x20are\x20NOT\x20credited,\x20so\x20scope-binding\x20gaps\x20(RC-FIND-02)\x20may\x20be\x20'+'over-reported\x20and\x20sub-guard-only\x20conditions\x20stay\x20unverified.','evidence_paths':u,'mitigation':'Resolve\x20the\x20relied\x20sub-guards\x20and\x20verify\x20their\x20constraints\x20manually,\x20or\x20re-run\x20'+'with\x20the\x20sub-guard\x20defs\x20included\x20(read-side\x20resolvers\x20attach\x20them\x20automatically).','unavoidable':![]});}if(!e&&a['trigger_source']==='service_order_allocators'){}return c;}function buildPayoff(a,b){const c=a['recipients']['some'](h=>h['constraints']['some'](i=>i['caller_constraint'])),d=c?'Caller\x20must\x20satisfy\x20the\x20Guard\x27s\x20Signer/identity\x20binding':b==='standalone'?'Any\x20caller\x20(no\x20identity\x20binding)':'Any\x20caller\x20who\x20satisfies\x20the\x20Guard\x27s\x20object/state\x20conditions',e=a['recipients']['map'](h=>h['beneficial_owner'])['join'](';\x20')||'(none)',f={},g=a['recipients']['some'](h=>h['spec']['kind']==='signer'&&!c);return f['caller']=g?'gains':c?'conditional':'neutral',f['provider']=a['recipients']['some'](h=>h['spec']['kind']==='entity')?'gains':'conditional',f['customer']=a['recipients']['some'](h=>h['receipt']?.['object_type']==='order')?'conditional':'neutral',f['system']='neutral',{'caller_eligibility':d,'beneficial_recipient':e,'positions':f};}export const RECIPIENT_CONSTRAINT_VERSION='1.2.0';export function analyzeRecipientConstraints(a){const b=a['allocators']['map'](h=>{const i=a['guards']?.[h['guard']],j=asNode(i?.['root']),k=i?.['table']??[],l=j?extractConstraints(j,k):[],m=j?collectSlotUsages(j):[],n=h['sharing']['map'](q=>{const r=classifyRecipient(q['who']);if(!r)return{'spec':{'kind':'entity','address':'(unclassifiable)'},'constraints':l,'beneficial_owner':'Unclassifiable\x20recipient\x20—\x20check\x20allocator\x20config'};const t=r['kind']==='submission'?r['identifier']:undefined,u=t!==undefined?k['find'](w=>w['identifier']===t):undefined,v=t!==undefined?deriveReceiptRight(t,l):undefined;return{'spec':r,'slot_value_type':u?normalizeValueType(u['value_type']):undefined,'constraints':t!==undefined?l['filter'](w=>w['slot']===undefined||w['slot']===t):l,'receipt':v,'beneficial_owner':deriveBeneficialOwner(r,v)};}),o=buildSlotModels(k,m,h['sharing']['map'](q=>({'spec':classifyRecipient(q['who'])??{'kind':'entity','address':'(unclassifiable)'},'mode':q['mode']})),l),p={'guard':h['guard'],'recipients':n,'slots':o,'payoff':{'caller_eligibility':'','beneficial_recipient':'','positions':{}}};return p['payoff']=buildPayoff(p,a['trigger_source']),p;}),c=buildFindings(a,b),d=c['some'](h=>h['severity']==='critical')?'critical':c['some'](h=>h['severity']==='high')?'high':c['some'](h=>h['severity']==='medium')?'medium':'low',e=!c['some'](h=>h['code']==='RC-FIND-01'),f=c['some'](h=>h['resolution_required']),g=[{'code':'RC-FIND-03','title':'Cross-allocation\x20settlement','detail':'Submitted\x20order\x20is\x20not\x20bound\x20to\x20the\x20settled\x20allocation;\x20destination\x20stays\x20at\x20an\x20order\x20owner.'},{'code':'RC-FIND-06','title':'Forced\x20settlement\x20timing','detail':'alloc\x20is\x20permissionless;\x20settlement\x20can\x20be\x20triggered\x20by\x20anyone\x20once\x20conditions\x20hold.'},{'code':'RC-RES-01','title':'Published\x20immutability','detail':'order_allocators,\x20Machine\x20and\x20Guards\x20are\x20immutable\x20after\x20publish.'},{'code':'RC-RES-03','title':'Off-chain\x20arbitration\x20backstop','detail':'No\x20on-chain\x20clawback;\x20post-incident\x20recovery\x20relies\x20on\x20arbitration.'}];return{'version':RECIPIENT_CONSTRAINT_VERSION,'scope':{'trigger_source':a['trigger_source'],'host_service':a['host_service'],'allocation':a['allocation']},'allocators':b,'findings':c,'unavoidable':g,'safe_destination':e,'resolution_required':f,'overall':d,'summary':'Analyzed\x20'+b['length']+'\x20allocator(s):\x20'+c['filter'](h=>!h['unavoidable'])['length']+'\x20actionable,\x20'+(c['filter'](h=>h['unavoidable'])['length']+'\x20structural\x20finding(s).\x20Safe\x20destination:\x20'+e+'.')+(''+(f?'\x20Resolution\x20REQUIRED:\x20at\x20least\x20one\x20residual\x20demands\x20an\x20explicit\x20design\x20decision\x20before\x20publish.':''))};}export function derivePayoffFromSharing(a,b,c){const d=asNode(c?.['root']),e=c?.['table']??[],f=d?extractConstraints(d,e):[],g=a['map'](i=>{const j=classifyRecipient(i['who'])??{'kind':'entity','address':'(unclassifiable)'},k=j['kind']==='submission'?j['identifier']:undefined,l=k!==undefined?e['find'](n=>n['identifier']===k):undefined,m=k!==undefined?deriveReceiptRight(k,f):undefined;return{'spec':j,'slot_value_type':l?normalizeValueType(l['value_type']):undefined,'constraints':k!==undefined?f['filter'](n=>n['slot']===undefined||n['slot']===k):f,'receipt':m,'beneficial_owner':deriveBeneficialOwner(j,m)};}),h={'guard':'','recipients':g,'slots':[],'payoff':{'caller_eligibility':'','beneficial_recipient':'','positions':{}}};return buildPayoff(h,b);}function normalizeValueType(a){if(typeof a==='number')return a;const b={'bool':ValueType['Bool'],'address':ValueType['Address'],'string':ValueType['String'],'u64':ValueType['U64'],'u256':ValueType['U256']};return b[a['toLowerCase']()];}export function isUnboundSignerTheft(a){return a['recipient_is_signer']&&!a['caller_identity_constrained'];}export function canonicalDoctrine(a){switch(a){case'RC-FIND-01':return{'severity':'critical','title':'Signer\x20recipient\x20without\x20caller\x20constraint\x20—\x20fund\x20theft','mitigation':'Bind\x20the\x20Signer\x20(signer==order.owner\x20or\x20signer==fixed\x20address),\x20or\x20change\x20'+'the\x20recipient\x20to\x20an\x20Entity\x20/\x20submitted\x20object\x20slot.'};case'RC-FIND-03':return{'severity':'medium','title':'Cross-allocation\x20settlement\x20residual','mitigation':'Pick\x20ONE\x20resolution\x20and\x20record\x20it\x20in\x20the\x20service\x20description:\x20'+'(1)\x20competition\x20semantics\x20with\x20capped\x20exposure\x20(threshold\x20/\x20max\x20amount);\x20'+'(2)\x20Entity\x20routing\x20(treasury)\x20—\x20the\x20only\x20exclusive\x20choice\x20on\x20the\x20automatic\x20'+'order_allocators\x20route;\x20'+'(3)\x20per-order\x20pinned\x20Guards\x20(order.owner\x20==\x20constant)\x20—\x20the\x20trustless\x20'+'exclusive\x20route.','resolution_required':!![]};case'RC-FIND-06':return{'severity':'low','title':'Permissionless\x20alloc\x20—\x20forced\x20settlement\x20timing','mitigation':'Monitor\x20settlements;\x20constrain\x20time-sensitivity\x20via\x20Guard\x20conditions.'};}}export const RECIPIENT_DESIGN_OPTIONS=[{'id':'entity','move_recipient':'Recipient::Entity(address)','semantics':'Funds\x20flow\x20to\x20a\x20fixed\x20address\x20(a\x20constrained\x20user\x20account\x20/\x20treasury).\x20'+'Destination\x20never\x20depends\x20on\x20the\x20caller.','required_constraints':['The\x20address\x20is\x20chosen\x20at\x20design\x20time\x20and\x20recorded\x20in\x20the\x20allocator\x20table.']},{'id':'submitted_object','move_recipient':'Recipient::GuardIdentifier(u8)','semantics':'Funds\x20flow\x20to\x20the\x20object\x20submitted\x20under\x20protocol\x20context\x20(e.g.\x20the\x20order\x20being\x20settled).\x20'+'Receivable\x20only\x20by\x20that\x20object\x27s\x20owner\x20—\x20object\x20receipt\x20=\x20owner\x20receipt.','required_constraints':['The\x20Guard\x20binds\x20the\x20submission\x27s\x20scope\x20(which\x20query/object\x20type\x20the\x20slot\x20carries).','The\x20slot\x27s\x20table\x20value\x20type\x20is\x20address\x20(enforced\x20at\x20allocator\x20registration).'],'finding_if_unmet':'RC-FIND-02\x20/\x20RC-FIND-07'},{'id':'signer','move_recipient':'Recipient::Signer','semantics':'Funds\x20flow\x20to\x20the\x20caller\x20who\x20executes\x20the\x20permissionless\x20alloc.\x20'+'Safe\x20only\x20when\x20the\x20Guard\x20proves\x20exactly\x20who\x20the\x20caller\x20may\x20be.','required_constraints':['The\x20Guard\x20constrains\x20the\x20Signer\x20identity\x20(signer\x20==\x20a\x20fixed\x20address\x20or\x20a\x20derived\x20legitimate\x20owner).'],'finding_if_unmet':'RC-FIND-01'},{'id':'constrained_submission','move_recipient':'Recipient::GuardIdentifier(u8)','semantics':'Funds\x20flow\x20to\x20an\x20object\x20address\x20supplied\x20by\x20the\x20signer,\x20but\x20the\x20Guard\x20constrains\x20'+'both\x20the\x20submission\x20scope\x20and\x20the\x20signer\x27s\x20relation\x20to\x20it\x20(e.g.\x20the\x20signer\x20owns\x20the\x20submitted\x20order).','required_constraints':['The\x20Guard\x20binds\x20the\x20submission\x27s\x20scope\x20(object/query\x20type).','The\x20Guard\x20binds\x20the\x20signer\x20to\x20the\x20submitted\x20object.','The\x20slot\x27s\x20table\x20value\x20type\x20is\x20address\x20(enforced\x20at\x20allocator\x20registration).'],'finding_if_unmet':'RC-FIND-01\x20/\x20RC-FIND-02\x20/\x20RC-FIND-07'}];export function recipientDesignGuidance(){return RECIPIENT_DESIGN_OPTIONS;}export const OBJECT_DRIVEABILITY=[{'object_type':'order','receive_entries':['owner-side\x20coin\x20extraction\x20from\x20the\x20order','owner-side\x20object\x20extraction\x20from\x20the\x20order'],'anyone_drivable':!![],'funds_settle_to':'order.owner','rationale':'Order\x20is\x20a\x20shared\x20object\x20and\x20extraction\x20has\x20no\x20signer\x20gate;\x20'+'Receiving\x20is\x20restricted\x20to\x20objects\x20actually\x20delivered\x20to\x20that\x20order,\x20and\x20coins\x20settle\x20to\x20its\x20owner.'},{'object_type':'permission','receive_entries':['owner-side\x20coin\x20extraction\x20via\x20the\x20permission\x20object','owner-side\x20object\x20extraction\x20via\x20the\x20permission\x20object'],'anyone_drivable':!![],'funds_settle_to':'permission.owner','rationale':'Permission\x20is\x20the\x20final\x20authority;\x20anyone\x20can\x20drive\x20extraction\x20of\x20funds\x20sent\x20to\x20its\x20address,\x20but\x20the\x20destination\x20is\x20its\x20owner.'},{'object_type':'service','receive_entries':['owner-side\x20coin\x20extraction\x20from\x20the\x20service','owner-side\x20object\x20extraction\x20from\x20the\x20service'],'anyone_drivable':![],'permission_index':0x13f,'funds_settle_to':'permission.owner','rationale':'Business\x20permission\x20gate\x20(index\x20319);\x20members\x20drive,\x20value\x20settles\x20to\x20the\x20organization\x20owner.'},{'object_type':'treasury','receive_entries':['owner-side\x20coin\x20extraction\x20from\x20the\x20treasury','owner-side\x20object\x20extraction\x20from\x20the\x20treasury'],'anyone_drivable':![],'permission_index':0x101,'funds_settle_to':'permission.owner','rationale':'Business\x20permission\x20gate\x20(index\x20257).'},{'object_type':'arbitration','receive_entries':['owner-side\x20coin\x20extraction\x20from\x20the\x20arbitration','owner-side\x20object\x20extraction\x20from\x20the\x20arbitration'],'anyone_drivable':![],'permission_index':0x16f,'funds_settle_to':'permission.owner','rationale':'Business\x20permission\x20gate\x20(index\x20367).'},{'object_type':'machine','receive_entries':['owner-side\x20coin\x20extraction\x20from\x20the\x20machine','owner-side\x20object\x20extraction\x20from\x20the\x20machine'],'anyone_drivable':![],'permission_index':0xcf,'funds_settle_to':'permission.owner','rationale':'Business\x20permission\x20gate\x20(index\x20207).'},{'object_type':'progress','receive_entries':['owner-side\x20coin\x20extraction\x20from\x20the\x20progress','owner-side\x20object\x20extraction\x20from\x20the\x20progress'],'anyone_drivable':![],'permission_index':0xe1,'funds_settle_to':'machine\x27s\x20permission.owner','rationale':'Business\x20permission\x20gate\x20(index\x20225),\x20scoped\x20to\x20the\x20Machine\x20permission.'},{'object_type':'demand','receive_entries':['owner-side\x20coin\x20extraction\x20from\x20the\x20demand','owner-side\x20object\x20extraction\x20from\x20the\x20demand'],'anyone_drivable':![],'permission_index':0x197,'funds_settle_to':'permission.owner','rationale':'Business\x20permission\x20gate\x20(index\x20407).'},{'object_type':'contact','receive_entries':['owner-side\x20coin\x20extraction\x20from\x20the\x20contact','owner-side\x20object\x20extraction\x20from\x20the\x20contact'],'anyone_drivable':![],'permission_index':0x1c6,'funds_settle_to':'permission.owner','rationale':'Business\x20permission\x20gate\x20(index\x20454).'}];export function driveabilityOf(a){return OBJECT_DRIVEABILITY['find'](b=>b['object_type']===a);}function rewardRecipientKind(a){if(typeof a==='string'){const e=a['toLowerCase']();if(e==='signer')return{'kind':'signer'};return{'kind':'entity'};}if(typeof a!=='object'||a===null)return{'kind':'entity'};const b=a,c=f=>typeof b[f]==='number'?b[f]:undefined,d=c('GuardIdentifier')??c('guard_identifier')??c('identifier');if(d!==undefined)return{'kind':'submission','slot':d};if(b['Signer']!==undefined||b['signer']!==undefined)return{'kind':'signer'};return{'kind':'entity'};}const SLOT_BINDING_CODES=new Set(['service_binding','progress_node_state','signer_is_submitted_object_owner','repository_crosscheck','signer_permission_member']);export function analyzeRewardClaimGuard(a){const {kind:b,slot:c}=rewardRecipientKind(a['recipient']),d={'entry_index':a['entry_index'],'guard':a['guard'],'recipient_kind':b,...c!==undefined?{'recipient_slot':c}:{},'guard_resolved':![],'constraint_codes':[],'recipient_slot_usages':0x0,'caller_identity_constrained':![],'viability':'unverifiable','reason':'Guard\x20table/root\x20not\x20fetched\x20with\x20the\x20topology\x20—\x20the\x20deciding\x20predicate\x20is\x20outside\x20the\x20evidence;\x20the\x20owner\x20must\x20disclose\x20the\x20full\x20guard\x20definitions.'},e=asNode(a['guard_def']?.['root']);if(!e)return d;const f=a['guard_def']?.['table']??[],g=extractConstraints(e,f);d['guard_resolved']=!![],d['constraint_codes']=g['map'](k=>k['code']),d['caller_identity_constrained']=g['some'](k=>k['caller_constraint']);if(b==='entity')return d['viability']='blocked',d['reason']='Payout\x20address\x20is\x20fixed\x20at\x20guard\x20registration\x20(Entity\x20recipient);\x20the\x20claim\x20path\x20cannot\x20redirect\x20it.',d;if(b==='signer')return d['caller_identity_constrained']?(d['viability']='blocked',d['reason']='Recipient\x20is\x20the\x20caller\x20(Signer)\x20but\x20the\x20guard\x20binds\x20the\x20caller\x20identity\x20—\x20only\x20the\x20authorized\x20party\x20can\x20claim.'):(d['viability']='viable',d['reason']='Recipient\x20is\x20the\x20caller\x20(Signer)\x20with\x20no\x20identity\x20binding\x20—\x20anyone\x20satisfying\x20the\x20remaining\x20conditions\x20claims\x20to\x20their\x20own\x20address.'),d;const h=c??-0x1,i=collectSlotUsages(e)['filter'](k=>k['slot']===h);d['recipient_slot_usages']=i['length'];const j=g['filter'](k=>k['slot']===h&&SLOT_BINDING_CODES['has'](k['code']));if(j['length']>0x0)d['viability']='blocked',d['reason']='Submitted\x20address\x20is\x20constrained\x20inside\x20the\x20guard\x20('+j['map'](k=>k['code'])['join'](',\x20')+')\x20—\x20a\x20passerby\x20cannot\x20fill\x20the\x20slot\x20with\x20an\x20arbitrary\x20address.';else i['length']>0x0?(d['viability']='conditional',d['reason']='The\x20guard\x20reads\x20the\x20submitted\x20slot\x20('+i['length']+'\x20query\x20usage(s))\x20but\x20no\x20recognized\x20scope/equality\x20constraint\x20was\x20matched\x20—\x20manual\x20predicate\x20review\x20required.'):(d['viability']='viable',d['reason']='No\x20guard\x20query\x20consumes\x20the\x20submitted\x20slot\x20—\x20the\x20predicate\x20cannot\x20constrain\x20the\x20payout\x20address;\x20any\x20passing\x20party\x20claims\x20to\x20their\x20own\x20address.');return d;}

package/dist/knowledge/registrar-risk.d.ts

@@ -1,4 +1,5 @@
-export type RegistrarRiskLevel = "CRITICAL" | "HIGH" | "MEDIUM" | "LOW" | "INFO";
+import { type Facts } from "../config/rule-engine.js";
+export type RegistrarRiskLevel = "critical" | "high" | "medium" | "low" | "info";
 export type RegistrarRiskCategory = "structural" | "semantic" | "lifecycle" | "cross_object" | "knowledge";
 export type RegistrarStakeholder = "user" | "referrer" | "voter" | "system";
 export interface RegistrarRisk {
@@ -25,10 +26,9 @@ export interface RegistrarRiskCheckContext {
     expects_vote_time_only_on_like?: boolean;
     constants_synced?: boolean;
 }
-export declare const REGISTRAR_RISK_RULES: {
-    rule: RegistrarRisk;
-    check: (ctx: RegistrarRiskCheckContext) => RegistrarRisk | null;
-}[];
+export declare function registrarRiskFacts(ctx: RegistrarRiskCheckContext): Facts;
 export declare const REGISTRAR_RISK_VERSION = "1.0.0";
+export declare const REGISTRAR_RISK_RULES: Array<RegistrarRisk & {
+    trigger?: string;
+}>;
 export declare function checkRegistrarRisks(ctx: RegistrarRiskCheckContext): RegistrarRisk[];
-export declare function getRegistrarRiskById(id: string): RegistrarRisk | undefined;

package/dist/knowledge/registrar-risk.js

@@ -1 +1 @@
-import{MAX_ADDRESS_COUNT,MAX_RECORD_COUNT_REGISTRAR,MAX_RECORD_LENGTH}from'@wowok/wowok';const BIT_NO_INFO=0x0,BIT_LIKE=0x2,BIT_DISLIKE=0x4,BIT_AFFILIATION=0x8,R_REG_01={'rule':{'id':'R-REG-01','level':'HIGH','category':'lifecycle','title':'Entity\x20and\x20Registrar\x20are\x20system\x20singletons\x20—\x20cannot\x20be\x20migrated\x20post-deploy','description':'Entity\x20and\x20Registrar\x20are\x20created\x20once\x20at\x20package\x20init\x20by\x20@0x0\x20(registrar.move:152-166)\x20'+'and\x20are\x20globally\x20unique.\x20They\x20cannot\x20be\x20re-created,\x20migrated,\x20or\x20re-initialized.\x20If\x20'+'the\x20singleton\x27s\x20storage\x20layout\x20needs\x20to\x20change\x20(e.g.\x20ParentTable\x20schema),\x20the\x20only\x20'+'option\x20is\x20a\x20new\x20package\x20version\x20with\x20a\x20migration\x20path.\x20There\x20is\x20no\x20in-place\x20migration\x20'+'API.\x20All\x2022\x20objects\x20depend\x20on\x20these\x20singletons\x20via\x20object-linker\x20bindings,\x20so\x20a\x20migration\x20would\x20'+'cascade\x20to\x20every\x20object.','affected_stakeholders':['system','user'],'scenario':'Operator\x20wants\x20to\x20migrate\x20Entity\x20to\x20a\x20new\x20schema;\x20no\x20migration\x20API\x20exists','mitigation':'Confirm\x20the\x20schema\x20before\x20deployment.\x20For\x20schema\x20evolution,\x20plan\x20a\x20new\x20package\x20'+'version\x20with\x20an\x20explicit\x20migration\x20script.\x20Never\x20assume\x20the\x20singleton\x20can\x20be\x20\x27reset\x27.','auto_fixable':![]},'check':a=>{if(!a['expects_singleton_migration'])return null;return{...R_REG_01['rule'],'evidence':'expects_singleton_migration=true\x20(no\x20migration\x20API)'};}},R_REG_02={'rule':{'id':'R-REG-02','level':'MEDIUM','category':'structural','title':'MAX_ADDRESS_COUNT='+MAX_ADDRESS_COUNT+'\x20may\x20be\x20insufficient\x20for\x20large\x20deployments','description':'The\x20Entity\x20and\x20Registrar\x20ParentTables\x20are\x20bounded\x20by\x20MAX_ADDRESS_COUNT='+MAX_ADDRESS_COUNT+'\x20'+'(registrar.move).\x20Exceeding\x20the\x20cap\x20aborts\x20address\x20registration.\x20For\x20mass-market\x20'+('applications,\x20'+MAX_ADDRESS_COUNT+'\x20entries\x20may\x20be\x20too\x20few;\x20the\x20limit\x20is\x20a\x20single\x20')+'Move\x20constant\x20that\x20requires\x20a\x20package\x20upgrade\x20to\x20change.','affected_stakeholders':['system','user'],'scenario':'Popular\x20service\x20reaches\x205200\x20registered\x20users;\x20new\x20registrations\x20abort','mitigation':'Monitor\x20address_count.\x20Plan\x20a\x20package\x20upgrade\x20that\x20raises\x20MAX_ADDRESS_COUNT\x20before\x20'+'hitting\x20the\x20cap.\x20For\x20shardable\x20workloads,\x20consider\x20multiple\x20Entity\x20tables\x20in\x20a\x20future\x20'+'package\x20version.','auto_fixable':![]},'check':a=>{if(a['address_count']===undefined)return null;if(a['address_count']<MAX_ADDRESS_COUNT)return null;return{...R_REG_02['rule'],'evidence':'address_count='+a['address_count']+',\x20limit='+MAX_ADDRESS_COUNT};}},R_REG_03={'rule':{'id':'R-REG-03','level':'MEDIUM','category':'semantic','title':'Vote.info\x20uses\x20u8\x20bitmask\x20—\x20bits\x204-7\x20reserved,\x20future\x20expansion\x20must\x20stay\x20compatible','description':'Vote.info\x20is\x20a\x20u8\x20bitmask:\x20BIT_NO_INFO='+BIT_NO_INFO+',\x20BIT_LIKE='+BIT_LIKE+',\x20'+('BIT_DISLIKE='+BIT_DISLIKE+',\x20BIT_AFFILIATION='+BIT_AFFILIATION+'.\x20Bits\x204-7\x20are\x20reserved.\x20')+'A\x20future\x20version\x20that\x20repurposes\x20bits\x204-7\x20would\x20conflict\x20with\x20any\x20off-chain\x20code\x20that\x20'+'reads\x20the\x20raw\x20byte.\x20The\x20reserved\x20bits\x20MUST\x20be\x20treated\x20as\x20zero\x20today;\x20non-zero\x20values\x20'+'in\x20bits\x204-7\x20indicate\x20a\x20forward-incompatible\x20voter.','affected_stakeholders':['voter','system'],'scenario':'Future\x20version\x20assigns\x20bit\x204\x20to\x20a\x20new\x20flag;\x20old\x20indexers\x20misread\x20the\x20byte','mitigation':'Off-chain\x20code\x20must\x20mask\x20to\x20bits\x200-3\x20today\x20and\x20ignore\x20bits\x204-7.\x20When\x20a\x20new\x20flag\x20is\x20'+'assigned,\x20ship\x20a\x20coordinated\x20Move\x20+\x20SDK\x20+\x20indexer\x20update.','auto_fixable':![]},'check':a=>{if(!a['uses_reserved_vote_bits'])return null;return{...R_REG_03['rule'],'evidence':'uses_reserved_vote_bits=true\x20(bits\x204-7\x20are\x20reserved)'};}},R_REG_05={'rule':{'id':'R-REG-05','level':'MEDIUM','category':'cross_object','title':'object-linker\x20affiliation\x20/\x20disaffiliation\x20emit\x20no\x20events\x20—\x20indexers\x20must\x20poll\x20object_linker\x20tables','description':'object_linker::affiliation_core/tx,\x20disaffiliation,\x20and\x20affiliation_change\x20(object_linker.move)\x20mutate\x20the\x20'+'binding\x20graph\x20but\x20emit\x20no\x20events.\x20External\x20indexers\x20that\x20track\x20the\x20'+'object-dependency\x20graph\x20cannot\x20rely\x20on\x20an\x20event\x20stream;\x20they\x20must\x20poll\x20the\x20'+'ParentTable,\x20which\x20is\x20expensive\x20as\x20the\x20graph\x20grows.','affected_stakeholders':['system'],'scenario':'Indexer\x20expects\x20an\x20AffiliationEvent;\x20none\x20is\x20emitted,\x20dependency\x20graph\x20is\x20stale','mitigation':'Indexers\x20should\x20poll\x20object_linker\x20tables\x20on\x20a\x20cadence\x20and\x20diff.\x20Future\x20versions\x20may\x20add\x20'+'AffiliationEvent;\x20until\x20then,\x20do\x20not\x20build\x20critical\x20UX\x20on\x20affiliation\x20event\x20streams.','auto_fixable':![]},'check':a=>{if(!a['expects_affiliation_event'])return null;return{...R_REG_05['rule'],'evidence':'expects_affiliation_event=true\x20(no\x20events)'};}},R_REG_04={'rule':{'id':'R-REG-04','level':'LOW','category':'lifecycle','title':'entity_register\x20is\x20idempotent\x20—\x20returns\x20existing\x20Resource,\x20not\x20a\x20fresh\x20one','description':'entity_register\x20(registrar.move:177-187)\x20checks\x20whether\x20the\x20sender\x20already\x20has\x20an\x20'+'Entity\x20record.\x20If\x20so,\x20it\x20returns\x20the\x20existing\x20Resource\x20address\x20without\x20creating\x20a\x20new\x20'+'one.\x20Callers\x20who\x20expect\x20a\x20fresh\x20Resource\x20on\x20each\x20call\x20(e.g.\x20after\x20a\x20forced\x20destroy)\x20'+'will\x20silently\x20receive\x20the\x20old\x20one.\x20Use\x20entity_register_with_resource_forced\x20to\x20'+'force-reallocate,\x20and\x20only\x20when\x20the\x20old\x20Resource\x20is\x20truly\x20gone.','affected_stakeholders':['user'],'scenario':'User\x20destroys\x20their\x20Resource\x20then\x20calls\x20entity_register;\x20gets\x20the\x20old\x20(now-invalid)\x20address','mitigation':'Document\x20the\x20idempotent\x20behavior.\x20After\x20a\x20forced\x20destroy,\x20callers\x20MUST\x20use\x20'+'entity_register_with_resource_forced.\x20SDK\x20should\x20detect\x20destroyed\x20Resource\x20and\x20route\x20'+'accordingly.','auto_fixable':![]},'check':a=>{if(!a['expects_fresh_resource_on_register'])return null;return{...R_REG_04['rule'],'evidence':'expects_fresh_resource_on_register=true\x20(idempotent)'};}},R_REG_06={'rule':{'id':'R-REG-06','level':'LOW','category':'semantic','title':'Record.typed_value\x20first\x20byte\x20is\x20a\x20ValueType\x20—\x20convention\x20enforced\x20only\x20by\x20docs','description':'Record.typed_value\x20is\x20a\x20vector<u8>\x20whose\x20first\x20byte\x20encodes\x20the\x20ValueType\x20(registrar.move:111).\x20'+'The\x20Move\x20layer\x20validates\x20that\x20the\x20vector\x20is\x20non-empty\x20and\x20within\x20MAX_RECORD_LENGTH='+(MAX_RECORD_LENGTH+',\x20but\x20it\x20does\x20not\x20validate\x20that\x20the\x20first\x20byte\x20is\x20a\x20known\x20ValueType.\x20')+'Off-chain\x20consumers\x20must\x20agree\x20on\x20the\x20ValueType\x20byte\x20layout;\x20a\x20misencoded\x20record\x20will\x20'+'deserialize\x20to\x20garbage\x20without\x20an\x20on-chain\x20abort.\x20Record\x20count\x20is\x20bounded\x20by\x20'+('MAX_RECORD_COUNT_REGISTRAR='+MAX_RECORD_COUNT_REGISTRAR+'.'),'affected_stakeholders':['user','system'],'scenario':'Caller\x20writes\x20a\x20record\x20with\x20first\x20byte\x200xFF;\x20no\x20on-chain\x20error,\x20but\x20consumers\x20cannot\x20decode','mitigation':'SDK\x20must\x20validate\x20the\x20first\x20byte\x20against\x20the\x20ValueType\x20enum\x20before\x20submitting.\x20'+'Document\x20the\x20ValueType\x20byte\x20layout\x20in\x20both\x20Move\x20and\x20SDK.\x20Add\x20a\x20sync\x20test\x20that\x20'+'asserts\x20the\x20ValueType\x20enum\x20matches\x20across\x20layers.','related_move_error':'ERecordTypeEmpty\x20(3)\x20—\x20only\x20catches\x20empty\x20typed_value','auto_fixable':![]},'check':a=>{if(!a['relies_on_typed_value_convention'])return null;return{...R_REG_06['rule'],'evidence':'relies_on_typed_value_convention=true\x20(docs-only\x20enforcement)'};}},R_REG_07={'rule':{'id':'R-REG-07','level':'MEDIUM','category':'cross_object','title':'entity_resource_transfer\x20detaches\x20Resource\x20from\x20the\x20source\x20address','description':'entity_resource_transfer(resource,\x20new_address,\x20ctx)\x20moves\x20the\x20Resource\x20backing\x20a\x20'+'user\x27s\x20identity\x20mark\x20to\x20a\x20new\x20address.\x20After\x20transfer,\x20the\x20source\x20address\x20has\x20no\x20'+'Resource\x20—\x20any\x20downstream\x20service\x20that\x20keyed\x20identity\x20on\x20the\x20source\x20address\x20loses\x20'+'the\x20binding.\x20There\x20is\x20no\x20automatic\x20forwarding\x20stub\x20left\x20behind.','affected_stakeholders':['user','system'],'scenario':'User\x20transfers\x20Resource\x20to\x20a\x20new\x20wallet;\x20old-wallet-based\x20services\x20break','mitigation':'Surface\x20a\x20\x27transfer\x20will\x20detach\x20the\x20Resource\x20from\x20this\x20address\x27\x20warning.\x20Consumers\x20'+'should\x20track\x20users\x20by\x20Resource\x20address,\x20not\x20by\x20user\x20address.\x20Provide\x20a\x20migration\x20'+'window\x20where\x20both\x20addresses\x20are\x20valid.','auto_fixable':![]},'check':a=>{if(!a['is_resource_transfer'])return null;return{...R_REG_07['rule'],'evidence':'is_resource_transfer=true\x20(source\x20loses\x20Resource)'};}},R_REG_08={'rule':{'id':'R-REG-08','level':'LOW','category':'semantic','title':'Vote.time\x20updates\x20on\x20every\x20toggle\x20—\x20including\x20like→no-like','description':'Vote.time\x20(registrar.move)\x20is\x20set\x20to\x20clock.timestamp_ms()\x20on\x20every\x20like/dislike\x20'+'operation,\x20including\x20toggles\x20that\x20remove\x20a\x20like\x20(like→no-like).\x20Consumers\x20who\x20'+'interpret\x20Vote.time\x20as\x20\x27last\x20liked\x20at\x27\x20will\x20be\x20confused\x20when\x20it\x20advances\x20on\x20an\x20'+'un-like.\x20The\x20field\x20semantically\x20means\x20\x27last\x20vote\x20op\x20time\x27,\x20not\x20\x27last\x20positive\x20vote\x27.','affected_stakeholders':['voter','system'],'scenario':'User\x20un-likes;\x20Vote.time\x20advances;\x20indexer\x20reads\x20it\x20as\x20\x27recently\x20liked\x27','mitigation':'Document\x20Vote.time\x20as\x20\x27last\x20vote\x20operation\x20time\x27.\x20For\x20\x27last\x20liked\x20at\x27\x20semantics,\x20'+'track\x20the\x20previous\x20Vote.info\x20state\x20and\x20only\x20record\x20time\x20when\x20BIT_LIKE\x20transitions\x20to\x20set.','auto_fixable':![]},'check':a=>{if(!a['expects_vote_time_only_on_like'])return null;return{...R_REG_08['rule'],'evidence':'expects_vote_time_only_on_like=true\x20(updates\x20on\x20toggle)'};}};export const REGISTRAR_RISK_RULES=[R_REG_01,R_REG_02,R_REG_03,R_REG_04,R_REG_05,R_REG_06,R_REG_07,R_REG_08];export const REGISTRAR_RISK_VERSION='1.0.0';export function checkRegistrarRisks(a){const b=[];for(const c of REGISTRAR_RISK_RULES){const d=c['check'](a);if(d)b['push'](d);}return b;}export function getRegistrarRiskById(a){return REGISTRAR_RISK_RULES['find'](b=>b['rule']['id']===a)?.['rule'];}
+import{getJudgmentDoc,factoryRulePack}from'../config/judgment.js';import{evaluateRuleBook,interpolate}from'../config/rule-engine.js';import{MAX_ADDRESS_COUNT,MAX_RECORD_COUNT_REGISTRAR,MAX_RECORD_LENGTH}from'@wowok/wowok';const BIT_NO_INFO=0x0,BIT_LIKE=0x2,BIT_DISLIKE=0x4,BIT_AFFILIATION=0x8;export function registrarRiskFacts(a){return{'expects_singleton_migration':a['expects_singleton_migration'],'address_count':a['address_count'],'address_count_at_limit':a['address_count']!==undefined&&a['address_count']>=MAX_ADDRESS_COUNT,'uses_reserved_vote_bits':a['uses_reserved_vote_bits'],'expects_fresh_resource_on_register':a['expects_fresh_resource_on_register'],'expects_affiliation_event':a['expects_affiliation_event'],'relies_on_typed_value_convention':a['relies_on_typed_value_convention'],'is_resource_transfer':a['is_resource_transfer'],'expects_vote_time_only_on_like':a['expects_vote_time_only_on_like'],'bit_no_info':BIT_NO_INFO,'bit_like':BIT_LIKE,'bit_dislike':BIT_DISLIKE,'bit_affiliation':BIT_AFFILIATION,'max_address_count':MAX_ADDRESS_COUNT,'max_record_length':MAX_RECORD_LENGTH,'max_record_count_registrar':MAX_RECORD_COUNT_REGISTRAR};}function registrarRuleBook(){const a=getJudgmentDoc()['rules']['domains']['registrar'];if(!a)throw new Error('factory\x20rule\x20pack\x20\x27registrar\x27\x20missing\x20—\x20broken\x20installation');return a['rules'];}function findingToRegistrarRisk(a){return{'id':a['rule_id'],'level':a['level'],'category':a['dimension']??'semantic','title':a['title'],'description':a['description'],'affected_stakeholders':a['stakeholders']??[],'scenario':a['scenario']??'','mitigation':a['mitigation']??'','evidence':a['evidence'],'auto_fixable':![]};}export const REGISTRAR_RISK_VERSION='1.0.0';export const REGISTRAR_RISK_RULES=((()=>{const a=factoryRulePack('registrar');if(!a)return[];const b=registrarRiskFacts({});return a['rules']['map'](d=>{const e=d['cases'][0x0];return{'id':d['rule_id'],'level':e['level'],'category':d['dimension']??'semantic','title':interpolate(e['title'],b),'description':interpolate(e['description'],b),'affected_stakeholders':e['stakeholders']??[],'scenario':e['scenario']===undefined?'':interpolate(e['scenario'],b),'mitigation':e['mitigation']===undefined?'':interpolate(e['mitigation'],b),'auto_fixable':![],...d['trigger']===undefined?{}:{'trigger':d['trigger']}};});})());export function checkRegistrarRisks(a){const {findings:b}=evaluateRuleBook(registrarRuleBook(),registrarRiskFacts(a));return b['map'](findingToRegistrarRisk);}

package/dist/knowledge/repository-risk.d.ts

@@ -1,4 +1,5 @@
-export type RepositoryRiskLevel = "CRITICAL" | "HIGH" | "MEDIUM" | "LOW" | "INFO";
+import { type Facts } from "../config/rule-engine.js";
+export type RepositoryRiskLevel = "critical" | "high" | "medium" | "low" | "info";
 export type RepositoryRiskCategory = "structural" | "policy" | "routing" | "submission" | "knowledge";
 export type RepositoryStakeholder = "creator" | "writer" | "reader" | "verifier" | "system";
 export interface RepositoryRisk {
@@ -30,17 +31,16 @@ export interface RepositoryRiskCheckContext {
     is_data_remove_with_passport?: boolean;
     constants_synced?: boolean;
 }
-declare function normalizeIdFrom(v: number | string): number;
 export interface RepositoryQuoteGuardContext {
     has_quote_guard?: boolean;
     quote_guard_is_depended?: boolean;
     quote_guard_verifies_payment?: boolean;
     has_owner_receive?: boolean;
 }
-export declare const REPOSITORY_RISK_RULES: {
-    rule: RepositoryRisk;
-    check: (ctx: RepositoryRiskCheckContext & RepositoryQuoteGuardContext) => RepositoryRisk | null;
-}[];
+declare function normalizeIdFrom(v: number | string): number;
+export declare function repositoryRiskFacts(ctx: RepositoryRiskCheckContext & RepositoryQuoteGuardContext): Facts;
+export declare const REPOSITORY_RISK_RULES: Array<RepositoryRisk & {
+    trigger?: string;
+}>;
 export declare function checkRepositoryRisks(ctx: RepositoryRiskCheckContext & RepositoryQuoteGuardContext): RepositoryRisk[];
-export declare function getRepositoryRiskById(id: string): RepositoryRisk | undefined;
 export { normalizeIdFrom as parseIdFromForRiskCheck };

package/dist/knowledge/repository-risk.js

@@ -1 +1 @@
-import{MAX_POLICY_COUNT,MAX_POLICY_GUARD_COUNT,MAX_DATA_SIZE,MAX_ID_COUNT_ONCE,MAX_REWARD_COUNT}from'@wowok/wowok';function normalizeIdFrom(a){if(typeof a==='number')return a;const b=String(a)['toLowerCase']();if(b==='none')return 0x0;if(b==='clock')return 0x1;if(b==='signer')return 0x2;const c=Number(a);return Number['isNaN'](c)?-0x1:c;}const R_REP_1_01={'rule':{'id':'R-REP-01','level':'MEDIUM','category':'structural','title':'Policy\x20count\x20exceeds\x20MAX_POLICY_COUNT\x20('+MAX_POLICY_COUNT+')','description':'A\x20single\x20Repository\x20may\x20hold\x20up\x20to\x20MAX_POLICY_COUNT='+MAX_POLICY_COUNT+'\x20policies\x20(Move\x20source:\x20repository.move:22).\x20'+'Exceeding\x20this\x20limit\x20aborts\x20with\x20E_POLICY_COUNT_EXCEEDED\x20(3)\x20in\x20policy_add_imp().\x20Each\x20policy\x20defines\x20a\x20named\x20'+'data\x20slot\x20with\x20its\x20own\x20write_guard\x20list\x20and\x20id_from\x20routing\x20—\x20having\x20too\x20many\x20policies\x20makes\x20the\x20Repository\x20'+'hard\x20to\x20audit\x20and\x20increases\x20gas\x20cost\x20for\x20policy\x20lookups\x20(O(n)\x20scan\x20in\x20policy_by_name).','affected_stakeholders':['creator'],'scenario':'Caller\x20adds\x2051\x20policies\x20to\x20a\x20single\x20Repository','mitigation':'Consolidate\x20related\x20data\x20under\x20fewer\x20policies.\x20If\x20truly\x20needed,\x20split\x20data\x20across\x20multiple\x20Repository\x20'+'objects\x20and\x20reference\x20them\x20via\x20Service.repository\x20or\x20Progress.context_repositories.','related_move_error':'E_POLICY_COUNT_EXCEEDED\x20(3)','auto_fixable':![]},'check':a=>{if(!a['policies']||a['existing_policy_count']===undefined)return null;const b=a['existing_policy_count']+a['policies']['length'];if(b<=MAX_POLICY_COUNT)return null;return{...R_REP_1_01['rule'],'evidence':'existing='+a['existing_policy_count']+',\x20adding='+a['policies']['length']+',\x20total='+b+',\x20limit='+MAX_POLICY_COUNT};}},R_REP_2_01={'rule':{'id':'R-REP-02','level':'HIGH','category':'policy','title':'write_guard\x20empty\x20when\x20id_from=None\x20—\x20unauthorized\x20writes\x20(R-D-1\x20Move\x20assert)','description':'When\x20id_from\x20is\x20None,\x20the\x20data\x20ID\x20must\x20be\x20provided\x20by\x20the\x20caller\x20(via\x20id_data_with_passport\x20or\x20'+'id_data_mixed_with_passport).\x20Without\x20a\x20write_guard,\x20ANY\x20address\x20can\x20write\x20data\x20with\x20any\x20ID\x20—\x20this\x20'+'is\x20almost\x20certainly\x20a\x20misconfiguration.\x20The\x20Move\x20contract\x20now\x20enforces\x20this\x20via\x20'+'E_POLICY_WRITE_GUARD_REQUIRED\x20(22)\x20in\x20policy_add_imp()\x20[R-D-1=A].','affected_stakeholders':['creator','writer'],'scenario':'Caller\x20creates\x20a\x20policy\x20with\x20id_from=None\x20and\x20empty\x20write_guard\x20list','mitigation':'When\x20id_from=None,\x20provide\x20at\x20least\x20one\x20PolicyGuard\x20entry\x20in\x20write_guard.\x20If\x20you\x20want\x20unrestricted\x20'+'writes,\x20use\x20id_from=Clock\x20or\x20id_from=Signer\x20instead\x20(which\x20auto-generates\x20the\x20ID\x20and\x20requires\x20empty\x20write_guard).','related_move_error':'E_POLICY_WRITE_GUARD_REQUIRED\x20(22)','auto_fixable':![]},'check':a=>{if(!a['policies'])return null;const b=a['policies']['filter'](c=>normalizeIdFrom(c['id_from'])===0x0&&c['write_guard_count']===0x0);if(b['length']===0x0)return null;return{...R_REP_2_01['rule'],'evidence':'policies\x20with\x20id_from=None\x20+\x20empty\x20write_guard:\x20'+b['map'](c=>c['name'])['join'](',\x20')};}},R_REP_2_02={'rule':{'id':'R-REP-03','level':'HIGH','category':'policy','title':'id_from_submission\x20set\x20when\x20id_from=Clock/Signer\x20—\x20id\x20routing\x20conflict\x20(R-D-1\x20Move\x20assert)','description':'When\x20id_from\x20is\x20Clock\x20or\x20Signer,\x20the\x20data\x20ID\x20is\x20auto-generated\x20(timestamp\x20or\x20signer\x20address).\x20'+'A\x20PolicyGuard\x20with\x20id_from_submission\x20set\x20would\x20try\x20to\x20route\x20the\x20id\x20from\x20a\x20Passport\x20submission,\x20'+'conflicting\x20with\x20the\x20auto-generated\x20id_from\x20path.\x20The\x20Move\x20contract\x20enforces\x20that\x20id_from_submission\x20'+'MUST\x20be\x20None\x20for\x20every\x20PolicyGuard\x20when\x20id_from\x20is\x20Clock/Signer\x20(data_from_submission\x20is\x20still\x20'+'allowed\x20—\x20it\x20is\x20used\x20by\x20data_when_id_from_set_with_passport\x20to\x20extract\x20data\x20from\x20the\x20submission).\x20'+'Violations\x20abort\x20with\x20E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN\x20(23)\x20in\x20policy_add_imp()\x20[R-D-1=A,\x20refined].','affected_stakeholders':['creator','writer'],'scenario':'Caller\x20creates\x20a\x20policy\x20with\x20id_from=Clock\x20and\x20a\x20write_guard\x20entry\x20whose\x20id_from_submission\x20is\x20set','mitigation':'When\x20id_from=Clock\x20or\x20Signer,\x20ensure\x20every\x20PolicyGuard\x20has\x20id_from_submission=null.\x20'+'data_from_submission\x20may\x20still\x20be\x20set\x20if\x20you\x20want\x20the\x20guard\x20to\x20supply\x20the\x20data\x20payload\x20'+'(routed\x20via\x20data_when_id_from_set_with_passport).\x20If\x20you\x20need\x20submission-derived\x20ids,\x20'+'switch\x20to\x20id_from=None\x20and\x20set\x20id_from_submission\x20on\x20the\x20guard.','related_move_error':'E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN\x20(23)','auto_fixable':![]},'check':a=>{if(!a['policies'])return null;const b=a['policies']['filter'](c=>{const d=normalizeIdFrom(c['id_from']);return(d===0x1||d===0x2)&&c['has_id_from_submission'];});if(b['length']===0x0)return null;return{...R_REP_2_02['rule'],'evidence':'policies\x20with\x20id_from=Clock/Signer\x20+\x20id_from_submission\x20set:\x20'+b['map'](c=>c['name']+'(id_from='+c['id_from']+')')['join'](',\x20')};}},R_REP_1_02={'rule':{'id':'R-REP-04','level':'MEDIUM','category':'structural','title':'Policy\x20write_guard\x20count\x20exceeds\x20MAX_POLICY_GUARD_COUNT\x20('+MAX_POLICY_GUARD_COUNT+')','description':'Each\x20policy\x20may\x20define\x20up\x20to\x20MAX_POLICY_GUARD_COUNT='+MAX_POLICY_GUARD_COUNT+'\x20guard\x20entries\x20in\x20its\x20write_guard\x20list\x20'+'(Move\x20source:\x20repository.move:23).\x20Exceeding\x20this\x20limit\x20aborts\x20with\x20E_POLICY_GUARD_COUNT_EXCEEDED\x20(2).\x20'+'Each\x20entry\x20maps\x20to\x20a\x20Guard\x20object\x20that\x20must\x20be\x20verified\x20via\x20Passport\x20submission,\x20so\x20more\x20guards\x20=\x20'+'more\x20complex\x20write\x20authorization\x20semantics.','affected_stakeholders':['creator'],'scenario':'Caller\x20creates\x20a\x20policy\x20with\x2011\x20guard\x20entries\x20in\x20write_guard','mitigation':'Consolidate\x20guard\x20logic.\x20If\x20multiple\x20guards\x20must\x20verify\x20the\x20same\x20data,\x20consider\x20composing\x20them\x20into\x20a\x20'+'single\x20Guard\x20with\x20relies/rep\x20fields,\x20or\x20split\x20the\x20data\x20across\x20multiple\x20policies\x20with\x20fewer\x20guards\x20each.','related_move_error':'E_POLICY_GUARD_COUNT_EXCEEDED\x20(2)','auto_fixable':![]},'check':a=>{if(!a['policies'])return null;const b=a['policies']['filter'](c=>c['write_guard_count']>MAX_POLICY_GUARD_COUNT);if(b['length']===0x0)return null;return{...R_REP_1_02['rule'],'evidence':'policies\x20exceeding\x20guard\x20count:\x20'+b['map'](c=>c['name']+'('+c['write_guard_count']+')')['join'](',\x20')};}},R_REP_1_03={'rule':{'id':'R-REP-05','level':'MEDIUM','category':'structural','title':'Data\x20value\x20exceeds\x20MAX_DATA_SIZE\x20('+MAX_DATA_SIZE+'\x20bytes)','description':'A\x20single\x20Repository\x20data\x20value\x20must\x20be\x20≤\x20MAX_DATA_SIZE='+MAX_DATA_SIZE+'\x20bytes\x20(Move\x20source:\x20repository.move:24).\x20'+'Exceeding\x20this\x20limit\x20aborts\x20with\x20E_DATA_EXCEEDED\x20(4).\x20The\x20value\x20is\x20stored\x20as\x20a\x20BCS-serialized\x20vector<u8>\x20'+'with\x20a\x20type-tag\x20prefix\x20byte.\x20Large\x20data\x20should\x20be\x20stored\x20off-chain\x20(e.g.\x20IPFS,\x20Walrus)\x20and\x20referenced\x20'+'by\x20hash/address,\x20NOT\x20inlined\x20into\x20the\x20Repository\x20data\x20value.','affected_stakeholders':['writer'],'scenario':'Caller\x20writes\x20a\x2050KB\x20JSON\x20blob\x20as\x20a\x20Repository\x20data\x20value','mitigation':'Store\x20large\x20payloads\x20off-chain\x20and\x20write\x20only\x20the\x20content\x20hash\x20(32-64\x20bytes)\x20to\x20the\x20Repository.\x20'+'Use\x20about_address\x20on\x20a\x20Proof\x20object\x20to\x20bind\x20the\x20off-chain\x20data\x20to\x20an\x20on-chain\x20attestation.','related_move_error':'E_DATA_EXCEEDED\x20(4)','auto_fixable':![]},'check':a=>{if(a['data_size']===undefined)return null;if(a['data_size']<=MAX_DATA_SIZE)return null;return{...R_REP_1_03['rule'],'evidence':'data_size='+a['data_size']+',\x20limit='+MAX_DATA_SIZE};}},R_REP_3_01={'rule':{'id':'R-REP-06','level':'LOW','category':'routing','title':'Policy\x20has\x20data_from_submission\x20but\x20no\x20id_from_submission\x20—\x20verify\x20Mode\x205\x20routing\x20intent','description':'When\x20a\x20PolicyGuard\x20has\x20data_from_submission\x20set\x20(data\x20comes\x20from\x20Passport\x20submission)\x20but\x20no\x20'+'id_from_submission\x20(id\x20comes\x20from\x20caller),\x20the\x20SDK\x20routes\x20to\x20id_data_mixed_with_passport\x20(Mode\x205).\x20'+'This\x20is\x20a\x20valid\x20but\x20advanced\x20pattern\x20—\x20ensure\x20the\x20caller\x20provides\x20matching\x20id\x20vectors.\x20The\x20SDK\x20'+'hasSubmissionSettings\x20helper\x20now\x20correctly\x20detects\x20this\x20case\x20[P1-1\x20fix,\x20R-D-3=A].','affected_stakeholders':['creator','writer'],'scenario':'Policy\x20has\x20a\x20guard\x20with\x20data_from_submission=2,\x20id_from_submission=undefined','mitigation':'Document\x20the\x20expected\x20caller\x20input\x20shape.\x20Ensure\x20the\x20caller\x20provides\x20both\x20the\x20id\x20vector\x20(positional)\x20'+'and\x20the\x20Passport\x20submission\x20(for\x20data).\x20Verify\x20routing\x20via\x20the\x20SDK\x20hasSubmissionSettings\x20helper.','auto_fixable':![]},'check':a=>{if(!a['policies'])return null;const b=a['policies']['filter'](c=>c['has_data_from_submission']&&!c['has_id_from_submission']);if(b['length']===0x0)return null;return{...R_REP_3_01['rule'],'evidence':'policies\x20with\x20data_from_submission\x20but\x20no\x20id_from_submission:\x20'+b['map'](c=>c['name'])['join'](',\x20')};}},R_REP_4_01={'rule':{'id':'R-REP-07','level':'HIGH','category':'submission','title':'data_from_submission\x20set\x20on\x20a\x20policy\x20used\x20in\x20id_data_remove_with_passport\x20—\x20Move\x20will\x20abort\x20(R-D-2)','description':'id_data_remove_with_passport\x20only\x20removes\x20data\x20identified\x20by\x20the\x20caller-provided\x20id\x20vector;\x20it\x20'+'cannot\x20consume\x20Passport\x20submissions\x20for\x20either\x20id\x20or\x20data.\x20The\x20Move\x20contract\x20now\x20enforces\x20that\x20BOTH\x20'+'id_from_submission\x20AND\x20data_from_submission\x20MUST\x20be\x20None\x20for\x20this\x20entry\x20point\x20[R-D-2=A],\x20aborting\x20'+'with\x20E_GUARD_SPECIFIED_ID_FROM_SUBMISSION\x20(11).\x20Previously,\x20only\x20id_from_submission\x20was\x20checked,\x20'+'allowing\x20data_from_submission\x20to\x20be\x20silently\x20ignored\x20—\x20masking\x20a\x20routing\x20bug.','affected_stakeholders':['writer','verifier'],'scenario':'Caller\x20uses\x20id_data_remove_with_passport\x20on\x20a\x20policy\x20whose\x20guard\x20has\x20data_from_submission=2','mitigation':'For\x20data\x20removal\x20via\x20Passport,\x20use\x20id_data_mixed_remove_with_passport\x20instead\x20(which\x20requires\x20'+'id_from_submission\x20and\x20derives\x20the\x20id\x20from\x20the\x20submission).\x20Do\x20not\x20set\x20data_from_submission\x20on\x20'+'policies\x20intended\x20for\x20id_data_remove_with_passport.','related_move_error':'E_GUARD_SPECIFIED_ID_FROM_SUBMISSION\x20(11)','auto_fixable':![]},'check':a=>{if(!a['is_data_remove_with_passport']||!a['policies'])return null;const b=a['policies']['filter'](c=>c['has_data_from_submission']);if(b['length']===0x0)return null;return{...R_REP_4_01['rule'],'evidence':'policies\x20with\x20data_from_submission\x20used\x20in\x20id_data_remove_with_passport:\x20'+b['map'](c=>c['name'])['join'](',\x20')};}},R_REP_1_04={'rule':{'id':'R-REP-08','level':'LOW','category':'structural','title':'ID\x20count\x20per\x20single\x20op\x20exceeds\x20MAX_ID_COUNT_ONCE\x20('+MAX_ID_COUNT_ONCE+')','description':'A\x20single\x20Repository\x20call\x20(data_add,\x20data_remove,\x20id_data_*)\x20may\x20operate\x20on\x20at\x20most\x20'+('MAX_ID_COUNT_ONCE='+MAX_ID_COUNT_ONCE+'\x20IDs\x20(Move\x20source:\x20repository.move:25).\x20Exceeding\x20this\x20limit\x20')+'aborts\x20with\x20E_ID_COUNT_EXCEEDED\x20(5).\x20Batch\x20large\x20operations\x20across\x20multiple\x20transactions.','affected_stakeholders':['writer'],'scenario':'Caller\x20passes\x20150\x20IDs\x20in\x20a\x20single\x20data_remove\x20call','mitigation':'Split\x20into\x20batches\x20of\x20≤\x20'+MAX_ID_COUNT_ONCE+'\x20IDs\x20per\x20transaction.','related_move_error':'E_ID_COUNT_EXCEEDED\x20(5)','auto_fixable':![]},'check':a=>{if(a['id_count_once']===undefined)return null;if(a['id_count_once']<=MAX_ID_COUNT_ONCE)return null;return{...R_REP_1_04['rule'],'evidence':'id_count='+a['id_count_once']+',\x20limit='+MAX_ID_COUNT_ONCE};}},R_REP_1_05={'rule':{'id':'R-REP-09','level':'INFO','category':'structural','title':'Reward\x20count\x20approaches\x20MAX_REWARD_COUNT\x20('+MAX_REWARD_COUNT+')','description':'A\x20Repository\x20may\x20reference\x20up\x20to\x20MAX_REWARD_COUNT='+MAX_REWARD_COUNT+'\x20Reward\x20objects\x20(Move\x20source:\x20repository.move:26).\x20'+'Exceeding\x20this\x20limit\x20aborts\x20with\x20E_MAX_REWARD_COUNT_EXCEEDED\x20(19).\x20Rewards\x20incentivize\x20data\x20contribution;\x20'+'having\x20many\x20rewards\x20is\x20fine\x20but\x20increases\x20accounting\x20complexity.','affected_stakeholders':['creator'],'scenario':'Caller\x20adds\x2020\x20rewards\x20to\x20a\x20Repository\x20(at\x20the\x20limit)','mitigation':'Monitor\x20reward\x20count.\x20If\x20more\x20incentives\x20are\x20needed,\x20consolidate\x20rewards\x20or\x20use\x20a\x20separate\x20Repository.','related_move_error':'E_MAX_REWARD_COUNT_EXCEEDED\x20(19)','auto_fixable':![]},'check':a=>{if(a['reward_count']===undefined)return null;if(a['reward_count']<MAX_REWARD_COUNT)return null;return{...R_REP_1_05['rule'],'evidence':'reward_count='+a['reward_count']+',\x20limit='+MAX_REWARD_COUNT};}},R_REP_5_01={'rule':{'id':'R-REP-10','level':'INFO','category':'knowledge','title':'Knowledge\x20layer\x20&\x20constant\x20sync\x20—\x20RESOLVED','description':'All\x206\x20Repository\x20constants\x20(MAX_POLICY_COUNT,\x20MAX_POLICY_DESCRIPTION_LEN,\x20MAX_POLICY_GUARD_COUNT,\x20'+'MAX_DATA_SIZE,\x20MAX_ID_COUNT_ONCE,\x20MAX_REWARD_COUNT)\x20are\x20now\x20synced\x20to\x20onchain-constants.ts.\x20'+'The\x20MCP\x20Knowledge\x20layer\x20now\x20includes\x20repository-risk.ts,\x20repository-confirm.ts,\x20'+'repository-translation.ts\x20(R-D-4=A).\x20The\x20SDK\x20hasSubmissionSettings\x20helper\x20now\x20correctly\x20checks\x20both\x20'+'id_from_submission\x20AND\x20data_from_submission\x20(P1-1).\x20parseIdFrom\x20is\x20used\x20in\x20data/data_remove\x20(P1-2).\x20'+'This\x20risk\x20rule\x20is\x20retained\x20for\x20historical\x20audit\x20and\x20to\x20detect\x20future\x20regressions.','affected_stakeholders':['system'],'scenario':'Future\x20regression:\x20someone\x20removes\x20a\x20Repository\x20constant\x20from\x20onchain-constants.ts','mitigation':'Run\x20the\x20onchain-constants\x20sync\x20test\x20to\x20detect\x20drift.','auto_fixable':![]},'check':a=>{if(a['constants_synced'])return null;return{...R_REP_5_01['rule'],'evidence':'constants_synced=false'};}},R_REP_6_01={'rule':{'id':'R-REP-11','level':'HIGH','category':'policy','title':'quote_guard\x20must\x20be\x20is_depended\x20(immutable\x20+\x20rep=true\x20+\x20no\x20relies)\x20—\x20Move\x20assert','description':'Repository\x20policy\x27s\x20quote_guard\x20must\x20satisfy\x20guard::is_depended\x20(guard.move#L133-135):\x20'+'immutable=true,\x20relies\x20empty,\x20rep=true.\x20This\x20ensures\x20the\x20quote_guard\x20is\x20a\x20stable,\x20'+'repository-querying\x20guard\x20that\x20can\x20be\x20depended\x20upon.\x20Move\x20aborts\x20with\x20'+'E_NEED_DEPENDENT_GUARD\x20(repository.move#L422)\x20if\x20the\x20guard\x20is\x20not\x20is_depended.\x20'+'VERIFIED:\x20passport.rs#L545-612\x20(check_repository_quote_guard\x20enforces\x20this\x20at\x20query\x20time).','affected_stakeholders':['creator','reader'],'scenario':'Creator\x20sets\x20quote_guard\x20to\x20a\x20Guard\x20that\x20is\x20not\x20is_depended\x20(e.g.,\x20has\x20relies\x20or\x20is\x20mutable)','mitigation':'Ensure\x20the\x20quote_guard\x20Guard\x20object\x20has:\x20immutable=true,\x20relies=empty,\x20rep=true.\x20'+'Use\x20pattern.repository_quote_guard_subscription\x20as\x20the\x20design\x20template.','related_move_error':'E_NEED_DEPENDENT_GUARD','auto_fixable':![]},'check':a=>{if(!a['has_quote_guard'])return null;if(a['quote_guard_is_depended'])return null;return{...R_REP_6_01['rule'],'evidence':'quote_guard\x20set\x20but\x20not\x20is_depended\x20(immutable\x20+\x20rep=true\x20+\x20no\x20relies)'};}},R_REP_6_02={'rule':{'id':'R-REP-12','level':'MEDIUM','category':'knowledge','title':'quote_guard\x20data\x20subscription\x20design\x20—\x20verify\x20Payment\x20verification\x20+\x20owner_receive\x20revenue','description':'When\x20using\x20quote_guard\x20for\x20data\x20subscription\x20(Repository+quote_guard+Payment\x20pattern),\x20'+'ensure:\x20(1)\x20quote_guard\x20verifies\x20Payment\x20fields\x20(for_object\x20matches\x20Repository,\x20amount\x20meets\x20price),\x20'+'(2)\x20Repository\x20has\x20owner_receive<T>\x20configured\x20to\x20accept\x20Payment\x20as\x20subscription\x20revenue\x20'+'(repository.move#L714-717).\x20VERIFIED:\x20passport.rs#L545-612,\x20repository.move#L714-717.\x20'+'DESIGN:\x20quote_guard\x20is\x20a\x20RIGID\x20verification\x20requirement\x20—\x20any\x20guard\x20querying\x20this\x20Repository\x27s\x20'+'data\x20MUST\x20satisfy\x20the\x20quote_guard\x20(see\x20R-X1-10\x20in\x20guard-risk.ts).','affected_stakeholders':['creator','reader','verifier'],'scenario':'Creator\x20sets\x20quote_guard\x20but\x20does\x20not\x20configure\x20Payment\x20verification\x20or\x20owner_receive','mitigation':'1)\x20Ensure\x20quote_guard\x20verifies\x20Payment\x20(for_object,\x20amount);\x20'+'2)\x20Configure\x20Repository\x20owner_receive<T>\x20to\x20accept\x20subscription\x20Payment\x20revenue;\x20'+'3)\x20Use\x20pattern.repository_quote_guard_subscription\x20(guard-design-patterns.ts)\x20and\x20'+'tpl_repository_quote_guard_subscription\x20(guard-templates.ts)\x20as\x20design\x20templates.','auto_fixable':![]},'check':a=>{if(!a['has_quote_guard'])return null;if(a['quote_guard_verifies_payment']&&a['has_owner_receive'])return null;const b=[];if(!a['quote_guard_verifies_payment'])b['push']('quote_guard\x20does\x20not\x20verify\x20Payment');if(!a['has_owner_receive'])b['push']('Repository\x20missing\x20owner_receive\x20for\x20revenue');return{...R_REP_6_02['rule'],'evidence':b['join'](';\x20')};}};export const REPOSITORY_RISK_RULES=[R_REP_1_01,R_REP_2_01,R_REP_2_02,R_REP_1_02,R_REP_1_03,R_REP_3_01,R_REP_4_01,R_REP_1_04,R_REP_1_05,R_REP_5_01,R_REP_6_01,R_REP_6_02];export function checkRepositoryRisks(a){const b=[];for(const c of REPOSITORY_RISK_RULES){const d=c['check'](a);if(d)b['push'](d);}return b;}export function getRepositoryRiskById(a){return REPOSITORY_RISK_RULES['find'](b=>b['rule']['id']===a)?.['rule'];}export{normalizeIdFrom as parseIdFromForRiskCheck};
+import{getJudgmentDoc,factoryRulePack}from'../config/judgment.js';import{evaluateRuleBook,interpolate}from'../config/rule-engine.js';import{MAX_POLICY_COUNT,MAX_POLICY_GUARD_COUNT,MAX_DATA_SIZE,MAX_ID_COUNT_ONCE,MAX_REWARD_COUNT}from'@wowok/wowok';function normalizeIdFrom(a){if(typeof a==='number')return a;const b=String(a)['toLowerCase']();if(b==='none')return 0x0;if(b==='clock')return 0x1;if(b==='signer')return 0x2;const c=Number(a);return Number['isNaN'](c)?-0x1:c;}export function repositoryRiskFacts(a){const b=a['policies'],c=b&&a['existing_policy_count']!==undefined?a['existing_policy_count']+b['length']:undefined,d=(b??[])['filter'](j=>normalizeIdFrom(j['id_from'])===0x0&&j['write_guard_count']===0x0),e=(b??[])['filter'](j=>{const k=normalizeIdFrom(j['id_from']);return(k===0x1||k===0x2)&&j['has_id_from_submission'];}),f=(b??[])['filter'](j=>j['write_guard_count']>MAX_POLICY_GUARD_COUNT),g=(b??[])['filter'](j=>j['has_data_from_submission']&&!j['has_id_from_submission']),h=a['is_data_remove_with_passport']&&b?b['filter'](j=>j['has_data_from_submission']):[],i=[];if(a['has_quote_guard']){if(!a['quote_guard_verifies_payment'])i['push']('quote_guard\x20does\x20not\x20verify\x20Payment');if(!a['has_owner_receive'])i['push']('Repository\x20missing\x20owner_receive\x20for\x20revenue');}return{'policies':a['policies'],'existing_policy_count':a['existing_policy_count'],'data_size':a['data_size'],'id_count_once':a['id_count_once'],'reward_count':a['reward_count'],'is_data_remove_with_passport':a['is_data_remove_with_passport'],'constants_synced':a['constants_synced'],'has_quote_guard':a['has_quote_guard'],'quote_guard_is_depended':a['quote_guard_is_depended'],'quote_guard_verifies_payment':a['quote_guard_verifies_payment'],'has_owner_receive':a['has_owner_receive'],'max_policy_count':MAX_POLICY_COUNT,'max_policy_guard_count':MAX_POLICY_GUARD_COUNT,'max_data_size':MAX_DATA_SIZE,'max_id_count_once':MAX_ID_COUNT_ONCE,'max_reward_count':MAX_REWARD_COUNT,'policies_count':b?.['length'],'total_policy_count':c,'policy_count_over_limit':c!==undefined&&c>MAX_POLICY_COUNT,'policy_none_guard_no_id_count':d['length'],'policy_none_guard_no_id_list':d['map'](j=>j['name'])['join'](',\x20'),'policy_auto_id_submission_count':e['length'],'policy_auto_id_submission_list':e['map'](j=>j['name']+'(id_from='+j['id_from']+')')['join'](',\x20'),'policy_guard_over_limit_count':f['length'],'policy_guard_over_limit_list':f['map'](j=>j['name']+'('+j['write_guard_count']+')')['join'](',\x20'),'data_size_over_limit':a['data_size']!==undefined&&a['data_size']>MAX_DATA_SIZE,'id_count_over_limit':a['id_count_once']!==undefined&&a['id_count_once']>MAX_ID_COUNT_ONCE,'reward_count_at_limit':a['reward_count']!==undefined&&a['reward_count']>=MAX_REWARD_COUNT,'policy_data_sub_no_id_sub_count':g['length'],'policy_data_sub_no_id_sub_list':g['map'](j=>j['name'])['join'](',\x20'),'policy_data_sub_removal_count':h['length'],'policy_data_sub_removal_list':h['map'](j=>j['name'])['join'](',\x20'),'quote_guard_gap':a['has_quote_guard']?i['join'](';\x20'):undefined};}function repositoryRuleBook(){const a=getJudgmentDoc()['rules']['domains']['repository'];if(!a)throw new Error('factory\x20rule\x20pack\x20\x27repository\x27\x20missing\x20—\x20broken\x20installation');return a['rules'];}function findingToRepositoryRisk(a){return{'id':a['rule_id'],'level':a['level'],'category':a['dimension']??'structural','title':a['title'],'description':a['description'],'affected_stakeholders':a['stakeholders']??[],'scenario':a['scenario']??'','mitigation':a['mitigation']??'','evidence':a['evidence'],'auto_fixable':![]};}export const REPOSITORY_RISK_RULES=((()=>{const a=factoryRulePack('repository');if(!a)return[];const b=repositoryRiskFacts({});return a['rules']['map'](d=>{const e=d['cases'][0x0];return{'id':d['rule_id'],'level':e['level'],'category':d['dimension']??'structural','title':interpolate(e['title'],b),'description':interpolate(e['description'],b),'affected_stakeholders':e['stakeholders']??[],'scenario':e['scenario']===undefined?'':interpolate(e['scenario'],b),'mitigation':e['mitigation']===undefined?'':interpolate(e['mitigation'],b),'auto_fixable':![],...d['trigger']===undefined?{}:{'trigger':d['trigger']}};});})());export function checkRepositoryRisks(a){const {findings:b}=evaluateRuleBook(repositoryRuleBook(),repositoryRiskFacts(a));return b['map'](findingToRepositoryRisk);}export{normalizeIdFrom as parseIdFromForRiskCheck};

package/dist/knowledge/resource-risk.d.ts

@@ -1,4 +1,5 @@
-export type ResourceRiskLevel = "CRITICAL" | "HIGH" | "MEDIUM" | "LOW" | "INFO";
+import { type Facts } from "../config/rule-engine.js";
+export type ResourceRiskLevel = "critical" | "high" | "medium" | "low" | "info";
 export type ResourceRiskCategory = "structural" | "semantic" | "lifecycle" | "permission" | "knowledge";
 export type ResourceStakeholder = "owner" | "caller" | "system";
 export interface ResourceRisk {
@@ -23,10 +24,9 @@ export interface ResourceRiskCheckContext {
     references_dead_switch?: boolean;
     constants_synced?: boolean;
 }
-export declare const RESOURCE_RISK_RULES: {
-    rule: ResourceRisk;
-    check: (ctx: ResourceRiskCheckContext) => ResourceRisk | null;
-}[];
+export declare function resourceRiskFacts(ctx: ResourceRiskCheckContext): Facts;
 export declare const RESOURCE_RISK_VERSION = "1.0.0";
+export declare const RESOURCE_RISK_RULES: Array<ResourceRisk & {
+    trigger?: string;
+}>;
 export declare function checkResourceRisks(ctx: ResourceRiskCheckContext): ResourceRisk[];
-export declare function getResourceRiskById(id: string): ResourceRisk | undefined;

package/dist/knowledge/resource-risk.js

@@ -1 +1 @@
-import{MAX_TAGS_COUNT}from'@wowok/wowok';const R_R_01={'rule':{'id':'R-RESOURCE-01','level':'LOW','category':'permission','title':'Resource\x20has\x20no\x20Permission\x20—\x20relies\x20entirely\x20on\x20caller-side\x20gating','description':'Resource\x20does\x20not\x20associate\x20with\x20a\x20Permission\x20object.\x20All\x20functions\x20are\x20'+'public(package)\x20(new/destroy/transfer/tag_set/tag_unset)\x20or\x20public\x20'+'(add_object_tags/remove_object_tags/remove_object)\x20—\x20there\x20is\x20no\x20on-chain\x20permission\x20'+'check.\x20Access\x20control\x20is\x20delegated\x20to\x20the\x20calling\x20module\x20(Personal,\x20Entity).\x20A\x20'+'caller\x20that\x20forgets\x20to\x20enforce\x20its\x20own\x20permission\x20check\x20would\x20let\x20any\x20address\x20mutate\x20'+'tags.','affected_stakeholders':['owner','caller'],'scenario':'Personal/Entity\x20forgets\x20to\x20gate\x20add_object_tags\x20behind\x20its\x20own\x20permission\x20check','mitigation':'Callers\x20(Personal,\x20Entity)\x20MUST\x20enforce\x20their\x20own\x20permission\x20checks\x20before\x20invoking\x20'+'Resource\x20functions.\x20Audit\x20the\x20call\x20sites\x20in\x20Personal/Entity\x20to\x20confirm\x20gating.','auto_fixable':![]},'check':a=>{if(!a['expects_resource_permission'])return null;return{...R_R_01['rule'],'evidence':'expects_resource_permission=true\x20(Resource\x20has\x20none)'};}},R_R_02={'rule':{'id':'R-RESOURCE-02','level':'MEDIUM','category':'semantic','title':'Tag\x20mutations\x20emit\x20no\x20events\x20—\x20external\x20indexers\x20must\x20poll','description':'add_object_tags\x20/\x20remove_object_tags\x20/\x20remove_object\x20do\x20not\x20emit\x20events\x20'+'(resource.move:89-145).\x20External\x20indexers\x20cannot\x20rely\x20on\x20an\x20event\x20stream\x20to\x20track\x20'+'tag\x20changes;\x20they\x20must\x20poll\x20the\x20ParentTable\x20field.\x20This\x20complicates\x20real-time\x20'+'notification\x20and\x20consistency.','affected_stakeholders':['owner','caller'],'scenario':'Indexer\x20expects\x20a\x20TagAddedEvent\x20but\x20none\x20is\x20emitted;\x20UI\x20fails\x20to\x20refresh','mitigation':'External\x20indexers\x20should\x20poll\x20Resource.table\x20on\x20a\x20cadence.\x20Do\x20not\x20build\x20critical\x20UX\x20'+'on\x20tag\x20event\x20streams\x20until\x20events\x20are\x20added\x20in\x20a\x20future\x20version.','auto_fixable':![]},'check':a=>{if(!a['expects_tag_events'])return null;return{...R_R_02['rule'],'evidence':'expects_tag_events=true\x20(no\x20events\x20emitted)'};}},R_R_03={'rule':{'id':'R-RESOURCE-03','level':'LOW','category':'structural','title':'MAX_TAGS_COUNT='+MAX_TAGS_COUNT+'\x20permissive\x20—\x20storage\x20cost','description':'A\x20single\x20object\x27s\x20AddressTag.tags\x20vector\x20may\x20hold\x20up\x20to\x20MAX_TAGS_COUNT='+MAX_TAGS_COUNT+'\x20'+'entries\x20(resource.move:9).\x20The\x20limit\x20aborts\x20with\x20E_TAGS_COUNT_EXCEEDED\x20(1)\x20only\x20at\x20the\x20'+'boundary.\x20100\x20tags\x20per\x20object\x20is\x20generous;\x20loading\x20all\x20tags\x20on\x20every\x20read\x20increases\x20'+'gas\x20and\x20storage\x20cost.','affected_stakeholders':['owner'],'scenario':'Caller\x20adds\x20100\x20tags\x20to\x20a\x20single\x20object','mitigation':'Business\x20layer\x20should\x20self-limit\x20tag\x20count\x20well\x20below\x20100.\x20For\x20heavy\x20tagging,\x20'+'shard\x20across\x20multiple\x20Resource\x20objects\x20or\x20store\x20bulk\x20tags\x20off-chain.','related_move_error':'E_TAGS_COUNT_EXCEEDED\x20(1)','auto_fixable':![]},'check':a=>{if(a['tags_count']===undefined)return null;if(a['tags_count']<MAX_TAGS_COUNT)return null;return{...R_R_03['rule'],'evidence':'tags_count='+a['tags_count']+',\x20limit='+MAX_TAGS_COUNT};}},R_R_04={'rule':{'id':'R-RESOURCE-04','level':'LOW','category':'lifecycle','title':'destroy\x20is\x20irreversible\x20—\x20no\x20recovery\x20mechanism','description':'Resource.destroy(resource)\x20(resource.move:38)\x20deletes\x20the\x20object\x20and\x20its\x20ParentTable\x20'+'in\x20place.\x20There\x20is\x20no\x20archive,\x20no\x20event,\x20and\x20no\x20rollback.\x20Once\x20destroyed,\x20the\x20object\x20'+'ID\x20is\x20permanently\x20invalid\x20and\x20all\x20tags\x20are\x20lost.','affected_stakeholders':['owner'],'scenario':'Caller\x20destroys\x20a\x20Resource\x20that\x20is\x20still\x20referenced\x20by\x20Personal/Entity','mitigation':'Confirm\x20no\x20live\x20references\x20exist\x20before\x20calling\x20destroy.\x20SDK\x20should\x20refuse\x20to\x20destroy\x20'+'a\x20Resource\x20whose\x20owner\x20address\x20is\x20still\x20referenced\x20by\x20Personal.mark\x20or\x20Entity.resource.','auto_fixable':![]},'check':a=>{if(!a['is_destroy'])return null;return{...R_R_04['rule'],'evidence':'is_destroy=true\x20(irreversible)'};}},R_R_05={'rule':{'id':'R-RESOURCE-05','level':'MEDIUM','category':'semantic','title':'tag_set\x20returns\x20bool\x20—\x20SDK\x20may\x20ignore\x20the\x20\x27already\x20exists\x27\x20signal','description':'tag_set(resource,\x20object,\x20name)\x20returns\x20bool:\x20true\x20if\x20a\x20new\x20tag\x20was\x20added,\x20false\x20if\x20'+'the\x20tag\x20already\x20existed\x20(resource.move:47-58).\x20If\x20the\x20SDK\x20ignores\x20the\x20return\x20value,\x20'+'callers\x20cannot\x20distinguish\x20\x27newly\x20added\x27\x20from\x20\x27duplicate\x20silently\x20skipped\x27.\x20This\x20'+'masks\x20intent\x20and\x20complicates\x20idempotency\x20reasoning.','affected_stakeholders':['caller'],'scenario':'SDK\x20treats\x20tag_set\x20as\x20void;\x20caller\x20assumes\x20tag\x20was\x20added\x20when\x20it\x20was\x20a\x20duplicate','mitigation':'SDK\x20should\x20expose\x20tag_set\x27s\x20bool\x20return\x20value\x20to\x20the\x20caller.\x20UI\x20should\x20show\x20\x27tag\x20'+'already\x20existed\x27\x20when\x20false\x20is\x20returned.','auto_fixable':!![]},'check':a=>{if(!a['tag_set_return_ignored'])return null;return{...R_R_05['rule'],'evidence':'tag_set_return_ignored=true\x20(duplicate\x20not\x20surfaced)'};}},R_R_06={'rule':{'id':'R-RESOURCE-06','level':'LOW','category':'semantic','title':'Commented-out\x20switch\x20function\x20(resource.move:71-86)\x20—\x20feature\x20may\x20be\x20intended','description':'resource.move:71-86\x20contains\x20a\x20switch\x20function\x20that\x20is\x20fully\x20commented\x20out.\x20The\x20'+'intended\x20behavior\x20is\x20unclear\x20—\x20it\x20may\x20be\x20a\x20planned\x20feature\x20(e.g.\x20bulk\x20tag\x20operations)\x20'+'that\x20was\x20disabled.\x20Referencing\x20it\x20as\x20if\x20it\x20were\x20live\x20would\x20silently\x20fail.','affected_stakeholders':['system'],'scenario':'Developer\x20reads\x20the\x20commented\x20switch\x20and\x20assumes\x20it\x20is\x20callable','mitigation':'Confirm\x20with\x20the\x20package\x20maintainers\x20whether\x20the\x20switch\x20should\x20be\x20enabled\x20or\x20removed.\x20'+'Do\x20not\x20reference\x20it\x20in\x20SDK\x20or\x20MCP\x20code.','auto_fixable':![]},'check':a=>{if(!a['references_dead_switch'])return null;return{...R_R_06['rule'],'evidence':'references_dead_switch=true\x20(commented\x20out\x20in\x20Move)'};}};export const RESOURCE_RISK_RULES=[R_R_01,R_R_02,R_R_03,R_R_04,R_R_05,R_R_06];export const RESOURCE_RISK_VERSION='1.0.0';export function checkResourceRisks(a){const b=[];for(const c of RESOURCE_RISK_RULES){const d=c['check'](a);if(d)b['push'](d);}return b;}export function getResourceRiskById(a){return RESOURCE_RISK_RULES['find'](b=>b['rule']['id']===a)?.['rule'];}
+import{MAX_TAGS_COUNT}from'@wowok/wowok';import{getJudgmentDoc,factoryRulePack}from'../config/judgment.js';import{evaluateRuleBook,interpolate}from'../config/rule-engine.js';export function resourceRiskFacts(a){return{'expects_resource_permission':a['expects_resource_permission'],'expects_tag_events':a['expects_tag_events'],'tags_count':a['tags_count'],'tags_count_over_limit':a['tags_count']!==undefined&&a['tags_count']>=MAX_TAGS_COUNT,'is_destroy':a['is_destroy'],'tag_set_return_ignored':a['tag_set_return_ignored'],'references_dead_switch':a['references_dead_switch'],'max_tags_count':MAX_TAGS_COUNT};}const RELATED_MOVE_ERRORS={'R-RESOURCE-03':'E_TAGS_COUNT_EXCEEDED\x20(1)'},AUTO_FIXABLE=new Set(['R-RESOURCE-05']);function resourceRuleBook(){const a=getJudgmentDoc()['rules']['domains']['resource'];if(!a)throw new Error('factory\x20rule\x20pack\x20\x27resource\x27\x20missing\x20—\x20broken\x20installation');return a['rules'];}function findingToResourceRisk(a){const b=RELATED_MOVE_ERRORS[a['rule_id']];return{'id':a['rule_id'],'level':a['level'],'category':a['dimension']??'semantic','title':a['title'],'description':a['description'],'affected_stakeholders':a['stakeholders']??[],'scenario':a['scenario']??'','mitigation':a['mitigation']??'',...b===undefined?{}:{'related_move_error':b},'auto_fixable':AUTO_FIXABLE['has'](a['rule_id']),...a['evidence']===undefined?{}:{'evidence':a['evidence']}};}export const RESOURCE_RISK_VERSION='1.0.0';export const RESOURCE_RISK_RULES=((()=>{const a=factoryRulePack('resource');if(!a)return[];const b=resourceRiskFacts({});return a['rules']['map'](d=>{const e=d['cases'][0x0],f=RELATED_MOVE_ERRORS[d['rule_id']];return{'id':d['rule_id'],'level':e['level'],'category':d['dimension']??'semantic','title':interpolate(e['title'],b),'description':interpolate(e['description'],b),'affected_stakeholders':e['stakeholders']??[],'scenario':e['scenario']===undefined?'':interpolate(e['scenario'],b),'mitigation':e['mitigation']===undefined?'':interpolate(e['mitigation'],b),...f===undefined?{}:{'related_move_error':f},'auto_fixable':AUTO_FIXABLE['has'](d['rule_id']),...d['trigger']===undefined?{}:{'trigger':d['trigger']}};});})());export function checkResourceRisks(a){const {findings:b}=evaluateRuleBook(resourceRuleBook(),resourceRiskFacts(a));return b['map'](findingToResourceRisk);}

package/dist/knowledge/reward-ledger.d.ts

@@ -10,7 +10,7 @@ export interface RewardBuiltinPermissionEntry {
 }
 export type RewardRecipientType = "GuardIdentifier" | "Entity" | "Signer";
 export type RewardAmountType = "GuardU64Identifier" | "Fixed";
-export type RewardGuardConstructor = "guard_u8_u8" | "guard_u8_u64" | "guard_entity_u8" | "guard_entity_u64" | "guard_signer_u8" | "guard_signer_u64";
+export type RewardGuardConstructor = "dynamic_recipient_dynamic_amount" | "dynamic_recipient_fixed_amount" | "entity_recipient_dynamic_amount" | "entity_recipient_fixed_amount" | "caller_recipient_dynamic_amount" | "caller_recipient_fixed_amount";
 export interface RewardGuardConstructorSpec {
     constructor: RewardGuardConstructor;
     recipient_type: RewardRecipientType;