@wowok/agent-mcp 3.4.2 → 3.4.3

package/dist/knowledge/guard-binding-verifier.js

@@ -1 +1 @@
-import{getGuardHostContext}from'./guard-host-context.js';function isIdentityQuery(a){const b=a['toLowerCase']();if(b['startsWith']('context')||b['includes']('signer'))return!![];return/order\.agent|permission\.(owner|admin)|named.?operator/['test'](b);}function children(a){if(Array['isArray'](a['nodes']))return a['nodes'];if(a['node'])return[a['node']];return[];}function walk(a,b){if(!a||typeof a!=='object')return;const d=a;b(d);for(const e of children(d))walk(e,b);}function deadNamespaces(a){switch(a){case'reward_claim':case'service_buy_guard':case'gen_passport':case'demand_present':case'treasury_external_deposit':case'treasury_external_withdraw':return['order.','progress.'];case'arbitration_usage':return['order.','arb.'];default:return[];}}function deadLegCode(a){switch(a){case'reward_claim':return'RC_NO_ORDER_ANCHOR';case'service_buy_guard':return'SB_NO_ORDER_STATE';case'gen_passport':return'GP_NO_ORDER_AT_ISSUANCE';case'arbitration_usage':return'AU_DEAD_CASE_SCOPES';default:return'BV_DEAD_NAMESPACE_LEG';}}function slotInComparison(a,b){let c=![];return walk(a,d=>{if(c)return;if(!Array['isArray'](d['nodes'])||d['nodes']['length']<0x2)return;if(!/logic_/['test'](d['type']??''))return;for(const e of d['nodes']){if(e?.['type']==='identifier'&&e['identifier']===b){c=!![];return;}}}),c;}export function verifyGuardBinding(a){const b=[],{host:c,root:d,facts:e}=a;if(!d)return b;if(c==='reward_claim'&&e?.['order_submission_declared']){}else{const f=deadNamespaces(c);if(f['length']>0x0){const g=[];walk(d,h=>{if(typeof h['query']==='string')for(const i of f){if(h['query']['startsWith'](i)&&!g['includes'](i))g['push'](i);}});if(g['length']>0x0){const h=getGuardHostContext(c);b['push']({'code':deadLegCode(c),'host':c,'level':'warning','detail':'Query\x20namespace(s)\x20'+g['map'](i=>'\x22'+i+'*\x22')['join'](',\x20')+'\x20cannot\x20resolve\x20in\x20the\x20'+(c+'\x20evaluation\x20context\x20('+(h?.['order_anchor']??'no\x20anchor')+')\x20—\x20these\x20legs\x20are\x20')+'structurally\x20dead\x20here;\x20under\x20an\x20AND\x20scope\x20they\x20brick\x20the\x20branch,\x20negated\x20they\x20'+'short-circuit\x20it.\x20See\x20guard-host-context.ts.'});}}}(c==='treasury_external_withdraw'||c==='treasury_external_deposit')&&e?.['amount_slot']!==undefined&&(!slotInComparison(d,e['amount_slot'])&&(c==='treasury_external_withdraw'?b['push']({'code':'TW_AMOUNT_UNBOUNDED','host':c,'level':'warning','detail':'Amount\x20slot\x20'+e['amount_slot']+'\x20appears\x20only\x20as\x20a\x20submission\x20source,\x20never\x20inside\x20a\x20'+'comparison\x20leg\x20—\x20the\x20withdrawal\x20size\x20is\x20caller-chosen\x20up\x20to\x20the\x20full\x20balance\x20(the\x20'+'chain\x20debits\x20the\x20declared\x20number).\x20Non-open\x20venues\x20must\x20bound\x20the\x20slot.'}):b['push']({'code':'TD_AMOUNT_SLOT_SEMANTICS','host':c,'level':'info','detail':'Amount\x20slot\x20'+e['amount_slot']+'\x20is\x20unconstrained\x20—\x20the\x20depositor\x20sizes\x20the\x20credit\x20'+'(partial\x20deposit,\x20remainder\x20refunded;\x20whole\x20coin\x20when\x20the\x20identifier\x20is\x20omitted).\x20'+'Lower\x20stakes\x20than\x20the\x20withdraw\x20channel;\x20disclosure\x20only.'})));if(c==='machine_forward'&&e?.['declared_slots']){const i=e['declared_slots'],j=[];walk(d,k=>{if(!Array['isArray'](k['nodes'])||k['nodes']['length']<0x2)return;if(!/logic_/['test'](k['type']??''))return;for(const [l,m]of[[k['nodes'][0x0],k['nodes'][0x1]],[k['nodes'][0x1],k['nodes'][0x0]]]){if(typeof l?.['query']==='string'&&isIdentityQuery(l['query'])&&m?.['type']==='identifier'&&m['identifier']!==undefined){if(!i['includes'](m['identifier'])&&!j['includes'](m['identifier']))j['push'](m['identifier']);}}}),j['length']>0x0&&b['push']({'code':'MF_SLOT_IDENTITY_ANCHOR','host':c,'level':'critical','detail':'Identity\x20leg(s)\x20anchored\x20to\x20submission\x20slot(s)\x20'+j['join'](',\x20')+'\x20that\x20the\x20edge\x20does\x20not\x20'+('declare\x20(declared:\x20'+(i['join'](',\x20')||'none')+')\x20—\x20the\x20caller\x20controls\x20those\x20slots,\x20')+'so\x20the\x20identity\x20check\x20reads\x20attacker-chosen\x20data\x20(T10\x20hijack).\x20Anchor\x20to\x20the\x20edge\x27s\x20'+'task-binding\x20slot\x20instead.'});}if(c==='progress_submission'){let k=![];walk(d,l=>{if(typeof l['query']==='string'&&isIdentityQuery(l['query']))k=!![];}),!k&&b['push']({'code':'PS_IDENTITY_REQUIRED','host':c,'level':'info','detail':'No\x20identity\x20leg\x20on\x20this\x20attestation\x20guard\x20—\x20attestations\x20are\x20replayable\x20without\x20one.\x20'+'Acceptable\x20only\x20when\x20the\x20riding\x20edge\x20verifies\x20the\x20submitter\x20upstream.'});}{let l=![];walk(d,m=>{if(typeof m['query']==='string'&&m['query']['startsWith']('repository'))l=!![];}),l&&b['push']({'code':c==='repository_write'?'RW_QUOTE_GUARD_CARRY':'RQ_CARRY_OBLIGATION','host':c,'level':'info','detail':'This\x20tree\x20reads\x20repository\x20data\x20—\x20the\x20consuming\x20passport\x20must\x20declare\x20the\x20governing\x20'+'policy\x27s\x20quote_guard\x20in\x20its\x20impack\x20(QUOTE-GUARD\x20CARRY),\x20or\x20the\x20query\x20fails\x20closed\x20at\x20'+'evaluation\x20time.'});}if(c==='repository_write'){let m=![];walk(d,o=>{typeof o['query']==='string'&&/(sum_where|count_where|find_where)/['test'](o['query'])&&(m=!![]);}),m&&b['push']({'code':'RW_OPEN_WRITE_FEEDS_AGGREGATE','host':c,'level':e?.['open_write_aggregate_rows']===!![]?'critical':'warning','detail':'This\x20write\x20channel\x27s\x20guard\x20reads\x20repository\x20AGGREGATES\x20(row-set\x20sum\x20/\x20count\x20/\x20find)\x20—\x20'+'the\x20aggregate\x20is\x20forgeable\x20by\x20write\x20whenever\x20the\x20rows\x20feeding\x20it\x20can\x20be\x20written\x20through\x20'+'an\x20open\x20(unguarded)\x20channel,\x20and\x20every\x20decision\x20this\x20guard\x20derives\x20from\x20the\x20aggregate\x20is\x20'+'forged\x20with\x20it.\x20Verify\x20every\x20feeding\x20row\x20policy\x20carries\x20a\x20write_guard\x20binding\x20a\x20trusted\x20'+'writer\x20role\x20BEFORE\x20this\x20binding\x20goes\x20live'+(e?.['open_write_aggregate_rows']===!![]?';\x20host\x20facts\x20PROVE\x20at\x20least\x20one\x20feeding\x20row\x20is\x20openly\x20writable\x20—\x20treat\x20as\x20a\x20hard\x20block.':';\x20the\x20feeding\x20policies\x20could\x20not\x20be\x20proven\x20either\x20way\x20at\x20binding\x20time\x20—\x20disclosure.')});}return c==='demand_present'&&(e?.['demand_guard_count']??0x0)>0x1&&b['push']({'code':'DP_MULTI_GUARD_IS_OR','host':c,'level':'info','detail':e['demand_guard_count']+'\x20guards\x20registered\x20on\x20the\x20demand\x20—\x20the\x20presenter\x20passes\x20ANY\x20ONE\x20'+'of\x20them\x20(presenter-chosen\x20OR).\x20A\x20strict\x20gate\x20belongs\x20inside\x20EVERY\x20'+'guard\x20(or\x20one\x20guard),\x20not\x20across\x20the\x20list.'}),b;}export function auditGuardRelies(a){const b=[];if(a['child_count']<=0x0)return b;const c=a['from_host']!==a['to_host'];return b['push']({'code':'GR_CHILD_HOST_REAUDIT','host':'guard_relied','level':c?'warning':'info','detail':a['child_count']+'\x20relied\x20child\x20guard(s)\x20INHERIT\x20the\x20parent\x27s\x20host\x20context.\x20'+(c?'Host\x20change\x20'+(a['from_host']||'(unbound)')+'\x20→\x20'+a['to_host']+':\x20re-audit\x20EVERY\x20child\x20against\x20'+'the\x20new\x20host\x27s\x20signer\x20/\x20order\x20anchor\x20/\x20submission\x20channel\x20(guard-host-context.ts,\x20'+('host\x20\x22'+a['to_host']+'\x22)\x20before\x20binding.'):'Binding\x20host\x20\x22'+a['to_host']+'\x22\x20unchanged\x20—\x20children\x20already\x20audited\x20for\x20this\x20context.')}),b['push']({'code':'GR_CLOSURE_CARRY','host':'guard_relied','level':'info','detail':'Every\x20passport\x20carrying\x20the\x20parent\x20must\x20carry\x20ALL\x20relied\x20children\x20first\x20(E_RELIES_GUARD_NOT_ADDED).\x20'+'Communicate\x20the\x20full\x20carry\x20closure\x20in\x20the\x20passport\x20build\x20steps.'+(a['logic_and']===![]?'\x20relies_logic_and\x20is\x20OR:\x20any\x20passing\x20child\x20satisfies\x20—\x20the\x20acceptance\x20surface\x20is\x20the\x20UNION\x20of\x20the\x20children.':'')}),b;}export function auditQuoteGuardCandidate(a){const b=[];if(a['immutable']===![])b['push']('mutable\x20(immutable\x20flag\x20false)');if(a['rep']===![])b['push']('rep\x20flag\x20false');if((a['relies_count']??0x0)>0x0)b['push']('carries\x20relies\x20(depth\x20must\x20be\x200)');if(b['length']===0x0)return[];return[{'code':'RQ_DEPENDED_ONLY','host':'repository_quote','level':'warning','detail':'Quote-guard\x20candidate\x20is\x20NOT\x20depended:\x20'+b['join'](';\x20')+'\x20—\x20quote-guard\x20binding\x20aborts\x20'+'(E_NEED_DEPENDENT_GUARD;\x20the\x20depended\x20shape\x20=\x20relies\x20empty\x20+\x20immutable\x20+\x20rep).\x20Rebuild\x20the\x20'+'guard\x20as\x20a\x20frozen\x20leaf\x20before\x20binding.'}];}
+import{getGuardHostContext}from'./guard-host-context.js';import{findRegistryDeadLegs}from'./publish-gate.js';function isIdentityQuery(a){const b=a['toLowerCase']();if(b['startsWith']('context')||b['includes']('signer'))return!![];return/order\.agent|permission\.(owner|admin)|named.?operator/['test'](b);}function children(a){if(Array['isArray'](a['nodes']))return a['nodes'];if(a['node'])return[a['node']];return[];}function walk(a,b){if(!a||typeof a!=='object')return;const d=a;b(d);for(const e of children(d))walk(e,b);}function deadNamespaces(a){switch(a){case'reward_claim':case'service_buy_guard':case'gen_passport':case'demand_present':case'treasury_external_deposit':case'treasury_external_withdraw':return['order.','progress.'];case'arbitration_usage':return['order.','arb.'];default:return[];}}function deadLegCode(a){switch(a){case'reward_claim':return'RC_NO_ORDER_ANCHOR';case'service_buy_guard':return'SB_NO_ORDER_STATE';case'gen_passport':return'GP_NO_ORDER_AT_ISSUANCE';case'arbitration_usage':return'AU_DEAD_CASE_SCOPES';default:return'BV_DEAD_NAMESPACE_LEG';}}function slotInComparison(a,b){let c=![];return walk(a,d=>{if(c)return;if(!Array['isArray'](d['nodes'])||d['nodes']['length']<0x2)return;if(!/logic_/['test'](d['type']??''))return;for(const e of d['nodes']){if(e?.['type']==='identifier'&&e['identifier']===b){c=!![];return;}}}),c;}export function verifyGuardBinding(a){const b=[],{host:c,root:d,facts:e}=a;if((e?.['declared_permission_indexes']?.['length']??0x0)>0x0){const h=e['declared_permission_indexes']['filter'](j=>j>=0x3e8)['filter']((j,k,l)=>l['indexOf'](j)===k)['sort']((i,j)=>i-j);if(h['length']>0x0){const i=e?.['host_permission_indexes']!==undefined||e?.['host_permission_entity_count']!==undefined,j=e?.['host_permission_entity_count']===0x0,k=new Set(e?.['host_permission_indexes']??[]),l=i?h['filter'](m=>j||!k['has'](m)):[];if(i&&l['length']>0x0)b['push']({'code':'PERM_INDEX_UNRESOLVED','host':c,'level':'critical','detail':'Edge\x20declares\x20permission\x20index(es)\x20['+l['join'](',\x20')+']\x20with\x20NO\x20entity\x20grant\x20on\x20the\x20'+'host\x20Permission\x20face'+(j?'\x20(entity_count\x20=\x200\x20—\x20the\x20face\x20is\x20EMPTY)':'')+'\x20—\x20no\x20one\x20can\x20execute\x20this\x20edge,\x20so\x20the\x20state\x20track\x20it\x20carries\x20is\x20structurally\x20'+'unreachable.\x20The\x20rex7\x20mainnet\x20o9\x20case\x20awarded\x200.10\x20and\x20the\x20buyer\x20could\x20never\x20push\x20the\x20'+'ArbRefund\x20relief\x20edge\x20(permission_index\x201002,\x20store\x20entity_count\x200):\x20the\x20winning\x20party\x20'+'was\x20locked\x20out\x20of\x20the\x20ruling\x27s\x20remedy.\x20Grant\x20at\x20least\x20one\x20entity\x20per\x20index\x20'+'(permission\x20op\x20\x22add\x20perm\x20by\x20index\x22)\x20BEFORE\x20this\x20binding\x20goes\x20live.'});else!i&&b['push']({'code':'PERM_INDEX_UNRESOLVED','host':c,'level':'warning','detail':'Edge\x20declares\x20permission\x20index(es)\x20['+h['join'](',\x20')+']\x20—\x20the\x20host\x27s\x20Permission\x20face\x20'+'could\x20NOT\x20be\x20read\x20at\x20binding\x20time\x20(host\x20unknown\x20or\x20entity\x20table\x20unreadable),\x20so\x20index\x20'+'reachability\x20is\x20UNVERIFIED.\x20If\x20the\x20host\x20store\x20has\x20no\x20Entity\x20granted\x20these\x20indexes,\x20the\x20'+'edge\x20is\x20un\x20drivable\x20and\x20the\x20track\x20it\x20carries\x20(e.g.\x20the\x20arbitration\x20relief\x20rail)\x20is\x20dead\x20'+'—\x20rex7\x20mainnet\x20o9\x20precedent:\x20ArbRefund\x20declared\x201002,\x20store\x20entity_count\x200,\x20the\x20buyer\x20could\x20'+'never\x20fire\x20the\x20won\x20ruling\x27s\x20refund\x20edge.\x20Verify\x20with\x20onchain_table\x20on\x20the\x20host\x20'+'Permission\x27s\x20perm\x20entries\x20before\x20the\x20binding\x20goes\x20live.'});}}if(!d)return b;{const m=findRegistryDeadLegs(d);m['length']>0x0&&b['push']({'code':'PG-GUARD-INTENT-01','host':c,'level':'critical','detail':'Guard\x20leg\x20query(es)\x20'+m['map'](n=>'\x22'+n+'\x22')['join'](',\x20')+'\x20are\x20NOT\x20in\x20the\x20chain\x20query\x20'+'registry\x20(their\x20namespace\x20is\x20known;\x20the\x20full\x20query\x20is\x20not)\x20—\x20these\x20legs\x20can\x20never\x20evaluate,\x20so\x20the\x20'+'branch\x20they\x20sit\x20in\x20is\x20structurally\x20dead:\x20under\x20AND\x20the\x20guard\x20rejects\x20forever,\x20negated\x20it\x20always\x20'+'passes.\x20Rebuild\x20the\x20guard\x20with\x20registered\x20queries\x20(see\x20chain-query-registry)\x20BEFORE\x20binding\x20—\x20'+'guards\x20are\x20immutable,\x20so\x20the\x20defect\x20goes\x20live\x20the\x20moment\x20this\x20bind\x20lands\x20(gf32\x20F-30\x20class)'});}const g=typeof a['guard_ref']==='string'&&a['guard_ref']['trim']()!==''?a['guard_ref']['trim']():undefined;if(c==='reward_claim'&&e?.['order_submission_declared']){}else{const n=deadNamespaces(c);if(n['length']>0x0){const o=[];walk(d,q=>{if(typeof q['query']==='string')for(const r of n){if(q['query']['startsWith'](r)&&!o['includes'](r))o['push'](r);}});if(o['length']>0x0){const p=getGuardHostContext(c);b['push']({'code':deadLegCode(c),'host':c,'level':'warning','detail':'Query\x20namespace(s)\x20'+o['map'](q=>'\x22'+q+'*\x22')['join'](',\x20')+'\x20cannot\x20resolve\x20in\x20the\x20'+(c+'\x20evaluation\x20context\x20('+(p?.['order_anchor']??'no\x20anchor')+')\x20—\x20these\x20legs\x20are\x20')+'structurally\x20dead\x20here;\x20under\x20an\x20AND\x20scope\x20they\x20brick\x20the\x20branch,\x20negated\x20they\x20'+'short-circuit\x20it.\x20See\x20guard-host-context.ts.'});}}}(c==='treasury_external_withdraw'||c==='treasury_external_deposit')&&e?.['amount_slot']!==undefined&&(!slotInComparison(d,e['amount_slot'])&&(c==='treasury_external_withdraw'?b['push']({'code':'TW_AMOUNT_UNBOUNDED','host':c,'level':'warning','detail':'Amount\x20slot\x20'+e['amount_slot']+'\x20appears\x20only\x20as\x20a\x20submission\x20source,\x20never\x20inside\x20a\x20'+'comparison\x20leg\x20—\x20the\x20withdrawal\x20size\x20is\x20caller-chosen\x20up\x20to\x20the\x20full\x20balance\x20(the\x20'+'chain\x20debits\x20the\x20declared\x20number).\x20Non-open\x20venues\x20must\x20bound\x20the\x20slot.'}):b['push']({'code':'TD_AMOUNT_SLOT_SEMANTICS','host':c,'level':'info','detail':'Amount\x20slot\x20'+e['amount_slot']+'\x20is\x20unconstrained\x20—\x20the\x20depositor\x20sizes\x20the\x20credit\x20'+'(partial\x20deposit,\x20remainder\x20refunded;\x20whole\x20coin\x20when\x20the\x20identifier\x20is\x20omitted).\x20'+'Lower\x20stakes\x20than\x20the\x20withdraw\x20channel;\x20disclosure\x20only.'})));if(c==='machine_forward'&&e?.['declared_slots']){const q=e['declared_slots'],r=[];walk(d,s=>{if(!Array['isArray'](s['nodes'])||s['nodes']['length']<0x2)return;if(!/logic_/['test'](s['type']??''))return;for(const [t,u]of[[s['nodes'][0x0],s['nodes'][0x1]],[s['nodes'][0x1],s['nodes'][0x0]]]){if(typeof t?.['query']==='string'&&isIdentityQuery(t['query'])&&u?.['type']==='identifier'&&u['identifier']!==undefined){if(!q['includes'](u['identifier'])&&!r['includes'](u['identifier']))r['push'](u['identifier']);}}}),r['length']>0x0&&b['push']({'code':'MF_SLOT_IDENTITY_ANCHOR','host':c,'level':'critical','detail':'Identity\x20leg(s)\x20anchored\x20to\x20submission\x20slot(s)\x20'+r['join'](',\x20')+'\x20that\x20the\x20edge\x20does\x20not\x20'+('declare\x20(declared:\x20'+(q['join'](',\x20')||'none')+')\x20—\x20the\x20caller\x20controls\x20those\x20slots,\x20')+'so\x20the\x20identity\x20check\x20reads\x20attacker-chosen\x20data\x20(T10\x20hijack).\x20Anchor\x20to\x20the\x20edge\x27s\x20'+'task-binding\x20slot\x20instead.'});}if(c==='progress_submission'){let s=![];walk(d,t=>{if(typeof t['query']==='string'&&isIdentityQuery(t['query']))s=!![];}),!s&&b['push']({'code':'PS_IDENTITY_REQUIRED','host':c,'level':'info','detail':'No\x20identity\x20leg\x20on\x20this\x20attestation\x20guard\x20—\x20attestations\x20are\x20replayable\x20without\x20one.\x20'+'Acceptable\x20only\x20when\x20the\x20riding\x20edge\x20verifies\x20the\x20submitter\x20upstream.'});}{let t=![];walk(d,u=>{if(typeof u['query']==='string'&&u['query']['startsWith']('repository'))t=!![];}),t&&b['push']({'code':c==='repository_write'?'RW_QUOTE_GUARD_CARRY':'RQ_CARRY_OBLIGATION','host':c,'level':'info','detail':'This\x20tree\x20reads\x20repository\x20data\x20—\x20the\x20consuming\x20passport\x20must\x20declare\x20the\x20governing\x20'+'policy\x27s\x20quote_guard\x20in\x20its\x20impack\x20(QUOTE-GUARD\x20CARRY),\x20or\x20the\x20query\x20fails\x20closed\x20at\x20'+'evaluation\x20time.'});}if(c==='repository_write'){let u=![];walk(d,v=>{typeof v['query']==='string'&&/(sum_where|count_where|find_where)/['test'](v['query'])&&(u=!![]);}),u&&b['push']({'code':'RW_OPEN_WRITE_FEEDS_AGGREGATE','host':c,'level':e?.['open_write_aggregate_rows']===!![]?'critical':'warning','detail':'This\x20write\x20channel\x27s\x20guard\x20reads\x20repository\x20AGGREGATES\x20(row-set\x20sum\x20/\x20count\x20/\x20find)\x20—\x20'+'the\x20aggregate\x20is\x20forgeable\x20by\x20write\x20whenever\x20the\x20rows\x20feeding\x20it\x20can\x20be\x20written\x20through\x20'+'an\x20open\x20(unguarded)\x20channel,\x20and\x20every\x20decision\x20this\x20guard\x20derives\x20from\x20the\x20aggregate\x20is\x20'+'forged\x20with\x20it.\x20Verify\x20every\x20feeding\x20row\x20policy\x20carries\x20a\x20write_guard\x20binding\x20a\x20trusted\x20'+'writer\x20role\x20BEFORE\x20this\x20binding\x20goes\x20live'+(e?.['open_write_aggregate_rows']===!![]?';\x20host\x20facts\x20PROVE\x20at\x20least\x20one\x20feeding\x20row\x20is\x20openly\x20writable\x20—\x20treat\x20as\x20a\x20hard\x20block.':';\x20the\x20feeding\x20policies\x20could\x20not\x20be\x20proven\x20either\x20way\x20at\x20binding\x20time\x20—\x20disclosure.')});}c==='demand_present'&&(e?.['demand_guard_count']??0x0)>0x1&&b['push']({'code':'DP_MULTI_GUARD_IS_OR','host':c,'level':'info','detail':e['demand_guard_count']+'\x20guards\x20registered\x20on\x20the\x20demand\x20—\x20the\x20presenter\x20passes\x20ANY\x20ONE\x20'+'of\x20them\x20(presenter-chosen\x20OR).\x20A\x20strict\x20gate\x20belongs\x20inside\x20EVERY\x20'+'guard\x20(or\x20one\x20guard),\x20not\x20across\x20the\x20list.'});if(c==='machine_forward'&&e?.['source_node']===''&&(e?.['pinned_node_names']?.['length']??0x0)>0x0){const v=e['pinned_node_names']['filter'](w=>w!=='');v['length']>0x0&&b['push']({'code':'MF_INIT_NODE_LITERAL_GATE','host':c,'level':'critical','detail':'This\x20forward\x20leaves\x20the\x20INIT\x20node\x20(source\x20\x22\x22\x20on\x20chain),\x20where\x20progress.current\x20is\x20the\x20'+('EMPTY\x20string\x20—\x20its\x20equality\x20leg(s)\x20pinning\x20['+v['map'](w=>'\x22'+w+'\x22')['join'](',\x20')+']\x20')+'are\x20ALWAYS\x20FALSE,\x20so\x20the\x20forward\x20can\x20never\x20fire:\x20the\x20first\x20order\x20strands\x20forever\x20'+'(nnd3-mn-261103\x20F-NND-02).\x20Delete\x20the\x20leg,\x20pin\x20\x22\x22\x20(the\x20init\x20node\x27s\x20actual\x20name),\x20or\x20'+'rebind\x20the\x20guard\x20to\x20a\x20non-init\x20source\x20forward.'});}if(g!==undefined)for(const w of b){if(w['guard']===undefined)w['guard']=g;}return b;}export function auditGuardRelies(a){const b=[];if(a['child_count']<=0x0)return b;const c=a['from_host']!==a['to_host'];return b['push']({'code':'GR_CHILD_HOST_REAUDIT','host':'guard_relied','level':c?'warning':'info','detail':a['child_count']+'\x20relied\x20child\x20guard(s)\x20INHERIT\x20the\x20parent\x27s\x20host\x20context.\x20'+(c?'Host\x20change\x20'+(a['from_host']||'(unbound)')+'\x20→\x20'+a['to_host']+':\x20re-audit\x20EVERY\x20child\x20against\x20'+'the\x20new\x20host\x27s\x20signer\x20/\x20order\x20anchor\x20/\x20submission\x20channel\x20(guard-host-context.ts,\x20'+('host\x20\x22'+a['to_host']+'\x22)\x20before\x20binding.'):'Binding\x20host\x20\x22'+a['to_host']+'\x22\x20unchanged\x20—\x20children\x20already\x20audited\x20for\x20this\x20context.')}),b['push']({'code':'GR_CLOSURE_CARRY','host':'guard_relied','level':'info','detail':'Every\x20passport\x20carrying\x20the\x20parent\x20must\x20carry\x20ALL\x20relied\x20children\x20first\x20(E_RELIES_GUARD_NOT_ADDED).\x20'+'Communicate\x20the\x20full\x20carry\x20closure\x20in\x20the\x20passport\x20build\x20steps.'+(a['logic_and']===![]?'\x20relies_logic_and\x20is\x20OR:\x20any\x20passing\x20child\x20satisfies\x20—\x20the\x20acceptance\x20surface\x20is\x20the\x20UNION\x20of\x20the\x20children.':'')}),b;}export function auditQuoteGuardCandidate(a){const b=[];if(a['immutable']===![])b['push']('mutable\x20(immutable\x20flag\x20false)');if(a['rep']===![])b['push']('rep\x20flag\x20false');if((a['relies_count']??0x0)>0x0)b['push']('carries\x20relies\x20(depth\x20must\x20be\x200)');if(b['length']===0x0)return[];return[{'code':'RQ_DEPENDED_ONLY','host':'repository_quote','level':'warning','detail':'Quote-guard\x20candidate\x20is\x20NOT\x20depended:\x20'+b['join'](';\x20')+'\x20—\x20quote-guard\x20binding\x20aborts\x20'+'(E_NEED_DEPENDENT_GUARD;\x20the\x20depended\x20shape\x20=\x20relies\x20empty\x20+\x20immutable\x20+\x20rep).\x20Rebuild\x20the\x20'+'guard\x20as\x20a\x20frozen\x20leaf\x20before\x20binding.'}];}

package/dist/knowledge/guard-design-patterns.d.ts

@@ -35,4 +35,4 @@ export declare function suggestPatternForRequirement(requirement: string): {
     best: GuardDesignPattern;
     alternatives: GuardDesignPattern[];
 };
-export declare const GUARD_DESIGN_PATTERNS_VERSION = 19;
+export declare const GUARD_DESIGN_PATTERNS_VERSION = 21;