dexe-mcp 0.9.0 → 0.11.1

package/dist/lib/controllingVoters.js

@@ -0,0 +1,152 @@
+/**
+ * Controlling-holder participation signal for the treasury-safety advisory.
+ *
+ * Resolves whether at least one member of a DAO's "controlling set" voted For a
+ * given proposal. The controlling set (a product decision) is:
+ *   validators ∪ top-N token holders by voting weight.
+ * "Voted For" is lenient: ≥1 member among the For-voters ⇒ `true`.
+ *
+ * Posture: **fail-soft, never throws.** Any missing subgraph, non-mainnet chain,
+ * empty set, or subgraph/RPC error ⇒ `null` (unknown). Informational only — a
+ * `false` (set non-empty, nobody voted For) adds an advisory note; it never
+ * blocks. We only return `false` when we positively enumerated the set AND
+ * confirmed no member voted For on-chain.
+ *
+ * The set is enumerated via subgraph (cheap, but untrusted for vote direction);
+ * each member's vote direction is then confirmed ON-CHAIN via
+ * `GovPool.getTotalVotes` (authoritative). We OR across PersonalVote /
+ * MicropoolVote / DelegatedVote so a member who voted via delegation or a
+ * micropool is not mistaken for a non-voter.
+ */
+import { Interface } from "ethers";
+import { multicall } from "./multicall.js";
+import { gqlRequest } from "./subgraph.js";
+/**
+ * Identical to the fragment in src/tools/vote.ts / src/tools/inbox.ts. Kept
+ * local + exported so the unit test can assert ethers parses it (ethers
+ * silently drops malformed fragments — see govProposalView Phase-A gotcha).
+ */
+export const GET_TOTAL_VOTES_FRAGMENT = "function getTotalVotes(uint256 proposalId, address voter, uint8 voteType) view returns (uint256 totalVoted, uint256 totalRawVoted, uint256 votesForNow, bool isVoteFor)";
+/** PersonalVote=0, MicropoolVote=1, DelegatedVote=2 (TreasuryVote=3 omitted). */
+const VOTE_TYPES = [0, 1, 2];
+/** Default top-N token holders when neither arg nor config overrides it. */
+const DEFAULT_TOP_N = 5;
+/** Trimmed from src/tools/subgraph.ts VALIDATORS_QUERY (fields we need only). */
+const VALIDATORS_QUERY = /* GraphQL */ `
+  query getDaoPoolValidators($offset: Int!, $limit: Int!, $address: String!) {
+    validatorInPools(
+      skip: $offset
+      first: $limit
+      orderBy: balance
+      orderDirection: desc
+      where: { pool: $address }
+    ) {
+      validatorAddress
+    }
+  }
+`;
+/** Trimmed from src/tools/subgraph.ts DAO_MEMBERS_QUERY (fields we need only). */
+const DAO_MEMBERS_QUERY = /* GraphQL */ `
+  query getVotersInPool($poolId: String!, $offset: Int!, $limit: Int!) {
+    voterInPools(skip: $offset, first: $limit, where: { pool: $poolId }) {
+      receivedDelegation
+      voter {
+        id
+        totalVotes
+      }
+    }
+  }
+`;
+function toBig(s) {
+    try {
+        return s ? BigInt(s) : 0n;
+    }
+    catch {
+        return 0n;
+    }
+}
+/** Validator addresses for `pool` (lowercased). Fail-soft → []. */
+async function fetchValidators(cfg, pool) {
+    try {
+        const data = await gqlRequest(cfg.subgraphValidatorsUrl, VALIDATORS_QUERY, { offset: 0, limit: 100, address: pool });
+        return (data.validatorInPools ?? [])
+            .map((v) => v.validatorAddress?.toLowerCase())
+            .filter((a) => !!a);
+    }
+    catch {
+        return [];
+    }
+}
+/** Top-N holders by (totalVotes + receivedDelegation), lowercased. Fail-soft → []. */
+async function fetchTopHolders(cfg, pool, topN) {
+    try {
+        const data = await gqlRequest(cfg.subgraphPoolsUrl, DAO_MEMBERS_QUERY, { poolId: pool, offset: 0, limit: 50 });
+        const weighted = (data.voterInPools ?? [])
+            .map((r) => ({
+            addr: r.voter?.id?.toLowerCase(),
+            weight: toBig(r.voter?.totalVotes) + toBig(r.receivedDelegation),
+        }))
+            .filter((x) => !!x.addr);
+        weighted.sort((a, b) => (a.weight < b.weight ? 1 : a.weight > b.weight ? -1 : 0));
+        return weighted.slice(0, Math.max(0, topN)).map((x) => x.addr);
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Did ≥1 controlling-set member vote For proposal `proposalId`?
+ *   - `true`  — at least one member voted For (any vote type).
+ *   - `false` — set was enumerated, non-empty, and NONE voted For.
+ *   - `null`  — cannot determine (no subgraph / non-mainnet / empty set / error).
+ * Never throws.
+ */
+export async function resolveControllingHoldersVotedFor(args) {
+    const { provider, govPool, proposalId, cfg, chainId } = args;
+    const topN = args.topN ?? cfg.controllingTopN ?? DEFAULT_TOP_N;
+    // Gate: subgraph exists only on mainnet (56). Testnet (97) ⇒ unknown.
+    if (chainId !== 56)
+        return null;
+    if (!cfg.subgraphValidatorsUrl || !cfg.subgraphPoolsUrl)
+        return null;
+    const pool = govPool.toLowerCase();
+    // Enumerate each source independently — a transient failure of one source
+    // only shrinks the set, which can only make `false` LESS likely (the safe
+    // direction: fewer wrongful refuses).
+    const [validators, holders] = await Promise.all([
+        fetchValidators(cfg, pool),
+        fetchTopHolders(cfg, pool, topN),
+    ]);
+    const members = [...new Set([...validators, ...holders])];
+    if (members.length === 0)
+        return null;
+    try {
+        const iface = new Interface([GET_TOTAL_VOTES_FRAGMENT]);
+        const calls = [];
+        for (const member of members) {
+            for (const vt of VOTE_TYPES) {
+                calls.push({
+                    target: govPool,
+                    iface,
+                    method: "getTotalVotes",
+                    args: [proposalId, member, vt],
+                    allowFailure: true,
+                });
+            }
+        }
+        const results = await multicall(provider, calls);
+        for (const r of results) {
+            if (!r.success || r.value == null)
+                continue;
+            // getTotalVotes returns a 4-tuple: [totalVoted, totalRawVoted, votesForNow, isVoteFor]
+            const v = r.value;
+            if (v[2] > 0n && v[3] === true)
+                return true;
+        }
+        return false; // set non-empty, confirmed nobody voted For
+    }
+    catch {
+        return null; // RPC/decoding failure ⇒ unknown, never a refuse
+    }
+}
+//# sourceMappingURL=controllingVoters.js.map

package/dist/lib/controllingVoters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controllingVoters.js","sourceRoot":"","sources":["../../src/lib/controllingVoters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,SAAS,EAAwB,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,SAAS,EAAa,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GACnC,yKAAyK,CAAC;AAE5K,iFAAiF;AACjF,MAAM,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAU,CAAC;AAEtC,4EAA4E;AAC5E,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,aAAa,CAAC;;;;;;;;;;;;CAYtC,CAAC;AAEF,kFAAkF;AAClF,MAAM,iBAAiB,GAAG,aAAa,CAAC;;;;;;;;;;CAUvC,CAAC;AAEF,SAAS,KAAK,CAAC,CAA4B;IACzC,IAAI,CAAC;QACH,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,KAAK,UAAU,eAAe,CAAC,GAAe,EAAE,IAAY;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAC3B,GAAG,CAAC,qBAAsB,EAC1B,gBAAgB,EAChB,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CACzC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,WAAW,EAAE,CAAC;aAC7C,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,KAAK,UAAU,eAAe,CAAC,GAAe,EAAE,IAAY,EAAE,IAAY;IACxE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAE1B,GAAG,CAAC,gBAAiB,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;aACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE;YAChC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC;SACjE,CAAC,CAAC;aACF,MAAM,CAAC,CAAC,CAAC,EAAyC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,IAOvD;IACC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,eAAe,IAAI,aAAa,CAAC;IAE/D,sEAAsE;IACtE,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,GAAG,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAErE,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEnC,0EAA0E;IAC1E,0EAA0E;IAC1E,sCAAsC;IACtC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC;QAC1B,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;KACjC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACxD,MAAM,KAAK,GAAW,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC;oBACT,MAAM,EAAE,OAAO;oBACf,KAAK;oBACL,MAAM,EAAE,eAAe;oBACvB,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC;oBAC9B,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI;gBAAE,SAAS;YAC5C,uFAAuF;YACvF,MAAM,CAAC,GAAG,CAAC,CAAC,KAAqD,CAAC;YAClE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;QAC9C,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,4CAA4C;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,iDAAiD;IAChE,CAAC;AACH,CAAC"}

package/dist/lib/dangerousSelectors.d.ts

@@ -11,7 +11,7 @@ export declare function selectorOf(data: string): string | null;
  * denylisted, else null. `data` is raw calldata (0x-hex).
  */
 export declare function findForbiddenSelector(data: string): ForbiddenSelector | null;
-/** Human-readable hard-refusal explaining why the selector is blocked (C-2). */
+/** Human-readable hard-refusal explaining why the selector is blocked. */
 export declare function dangerousSelectorError(match: ForbiddenSelector, target?: string): string;
 /** The full denylist — for docs, tests, and introspection. */
 export declare function forbiddenSelectors(): ForbiddenSelector[];

package/dist/lib/dangerousSelectors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dangerousSelectors.d.ts","sourceRoot":"","sources":["../../src/lib/dangerousSelectors.ts"],"names":[],"mappings":"AAyCA,MAAM,WAAW,iBAAiB;IAChC,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;CACnB;AAaD,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGtD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAI5E;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAYxF;AAED,8DAA8D;AAC9D,wBAAgB,kBAAkB,IAAI,iBAAiB,EAAE,CAExD"}
+{"version":3,"file":"dangerousSelectors.d.ts","sourceRoot":"","sources":["../../src/lib/dangerousSelectors.ts"],"names":[],"mappings":"AAiCA,MAAM,WAAW,iBAAiB;IAChC,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;CACnB;AAaD,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGtD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAI5E;AAED,0EAA0E;AAC1E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAUxF;AAED,8DAA8D;AAC9D,wBAAgB,kBAAkB,IAAI,iBAAiB,EAAE,CAExD"}

package/dist/lib/dangerousSelectors.js

@@ -1,27 +1,19 @@
 import { id } from "ethers";
 /**
- * C-2 guardrail — forbidden proposal-action selectors.
+ * Forbidden proposal-action selectors — hard guard.
  *
  * Every function below lives on `GovUserKeeper` and is `onlyOwner` (the owner is
  * the GovPool). GovPool invokes them internally on behalf of users through its
  * own deposit/withdraw/delegate entrypoints — they are NOT meant to be the
  * `executor` + `data` of a raw governance proposal action.
  *
- * They are dangerous as proposal targets because the `payer` / `delegator`
- * argument is decoupled from the funds' owner: e.g.
- * `withdrawTokens(payer, receiver, amount)` debits `_usersInfo[payer]` and pays
- * `receiver`. A proposal can therefore name an arbitrary victim as `payer` and
- * the attacker as `receiver`.
- *
- * The DeXe protocol's INTERNAL allowlist
- * (`GovPoolCreate._handleDataForInternalProposal`) is supposed to make these
- * unreachable-by-proposal, but it only runs when the *last* action's executor is
- * a registered INTERNAL executor. A proposal whose trailing action routes to
- * DEFAULT skips the allowlist entirely, so these selectors slip through —
- * finding C-2. This guard refuses to build any proposal action carrying one of
- * them, regardless of routing. It is harm-reduction at the MCP layer ONLY: the
- * root cause is in the protocol contracts, and an attacker can still hand-craft
- * the calldata. See docs/security/C2-default-routing-bypass.md.
+ * They are unsafe as proposal targets because the `payer` / `delegator`
+ * argument is decoupled from the funds' owner (e.g. `withdrawTokens(payer,
+ * receiver, amount)` debits `payer` and pays `receiver`), so a proposal could
+ * name an account other than the proposer. This guard refuses to build any
+ * proposal action carrying one of these selectors. Defense-in-depth at the MCP
+ * layer; users deposit/withdraw/delegate their OWN funds through the GovPool
+ * entrypoints, never via a proposal.
  */
 const FORBIDDEN_SIGNATURES = [
     "withdrawTokens(address,address,uint256)",
@@ -61,17 +53,15 @@ export function findForbiddenSelector(data) {
         return null;
     return FORBIDDEN_BY_SELECTOR.get(sel) ?? null;
 }
-/** Human-readable hard-refusal explaining why the selector is blocked (C-2). */
+/** Human-readable hard-refusal explaining why the selector is blocked. */
 export function dangerousSelectorError(match, target) {
     return (`Refusing to build: calldata selector ${match.selector} is ` +
         `GovUserKeeper.${match.signature}, a privileged onlyOwner accounting function ` +
         `that must never be a governance proposal action` +
         (target ? ` (target ${target})` : "") +
-        `. Encoding it enables finding C-2: a DEFAULT-routed proposal bypasses the ` +
-        `GovPoolCreate INTERNAL allowlist and can drain an arbitrary depositor's ` +
-        `unlocked balance — the function takes a free 'payer'/'delegator' decoupled ` +
-        `from the caller. Users deposit/withdraw/delegate their OWN funds through the ` +
-        `GovPool entrypoints, never via a proposal. Hard block, no override.`);
+        `. These functions take a 'payer'/'delegator' argument decoupled from the ` +
+        `caller; users deposit/withdraw/delegate their OWN funds through the GovPool ` +
+        `entrypoints, never via a proposal. Hard block, no override.`);
 }
 /** The full denylist — for docs, tests, and introspection. */
 export function forbiddenSelectors() {

package/dist/lib/dangerousSelectors.js.map

@@ -1 +1 @@
-{"version":3,"file":"dangerousSelectors.js","sourceRoot":"","sources":["../../src/lib/dangerousSelectors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,oBAAoB,GAAG;IAC3B,yCAAyC;IACzC,wCAAwC;IACxC,yCAAyC;IACzC,2CAA2C;IAC3C,yCAAyC;IACzC,2CAA2C;IAC3C,yCAAyC;IACzC,wCAAwC;IACxC,yCAAyC;IACzC,2CAA2C;IAC3C,yCAAyC;IACzC,2CAA2C;CACnC,CAAC;AASX;;;GAGG;AACH,MAAM,qBAAqB,GAA2C,IAAI,GAAG,CAC3E,oBAAoB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;IACrC,MAAM,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,OAAO,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAU,CAAC;AACtD,CAAC,CAAC,CACH,CAAC;AAEF,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AAChD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CAAC,KAAwB,EAAE,MAAe;IAC9E,OAAO,CACL,wCAAwC,KAAK,CAAC,QAAQ,MAAM;QAC5D,iBAAiB,KAAK,CAAC,SAAS,+CAA+C;QAC/E,iDAAiD;QACjD,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,4EAA4E;QAC5E,0EAA0E;QAC1E,6EAA6E;QAC7E,+EAA+E;QAC/E,qEAAqE,CACtE,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB;IAChC,OAAO,CAAC,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"dangerousSelectors.js","sourceRoot":"","sources":["../../src/lib/dangerousSelectors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE5B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,oBAAoB,GAAG;IAC3B,yCAAyC;IACzC,wCAAwC;IACxC,yCAAyC;IACzC,2CAA2C;IAC3C,yCAAyC;IACzC,2CAA2C;IAC3C,yCAAyC;IACzC,wCAAwC;IACxC,yCAAyC;IACzC,2CAA2C;IAC3C,yCAAyC;IACzC,2CAA2C;CACnC,CAAC;AASX;;;GAGG;AACH,MAAM,qBAAqB,GAA2C,IAAI,GAAG,CAC3E,oBAAoB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;IACrC,MAAM,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,OAAO,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAU,CAAC;AACtD,CAAC,CAAC,CACH,CAAC;AAEF,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AAChD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,sBAAsB,CAAC,KAAwB,EAAE,MAAe;IAC9E,OAAO,CACL,wCAAwC,KAAK,CAAC,QAAQ,MAAM;QAC5D,iBAAiB,KAAK,CAAC,SAAS,+CAA+C;QAC/E,iDAAiD;QACjD,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,2EAA2E;QAC3E,8EAA8E;QAC9E,6DAA6D,CAC9D,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB;IAChC,OAAO,CAAC,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7C,CAAC"}

package/dist/lib/decoders.d.ts

@@ -10,12 +10,12 @@ export interface DecodedCall {
     args: Record<string, unknown>;
     /** Raw positional args — useful for agents that want the tuple directly. */
     argsArray: unknown[];
-    /** True if this selector is a C-2-class privileged accounting function. */
+    /** True if this selector is a privileged accounting function (unsafe as a proposal action). */
     privileged?: boolean;
     /**
      * Calls discovered inside this call's calldata args — e.g. the inner calls of
      * a `multicall(bytes[])`, or the actions of a nested `createProposal`. Lets a
-     * reviewer see hidden privileged calls instead of just the wrapper (C-1).
+     * reviewer see hidden privileged calls instead of just the wrapper.
      */
     nested?: DecodedCall[];
 }
@@ -41,8 +41,8 @@ export declare class CalldataDecoder {
      * Decode calldata and recursively unwrap any well-formed nested calldata
      * found in its arguments — `multicall(bytes[])`, a nested `createProposal`'s
      * `ProposalAction[]`, `tryExecute`, etc. The decoded `primary` carries a
-     * `privileged` flag for C-2-class selectors and a `nested` tree so a reviewer
-     * reading the text sees hidden inner calls, not just the wrapper (C-1).
+     * `privileged` flag for privileged-class selectors and a `nested` tree so a
+     * reviewer reading the text sees hidden inner calls, not just the wrapper.
      */
     decodeCalldata(data: string, contractName?: string): {
         primary: DecodedCall | null;

package/dist/lib/decoders.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decoders.d.ts","sourceRoot":"","sources":["../../src/lib/decoders.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGpD,MAAM,WAAW,WAAW;IAC1B,iGAAiG;IACjG,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,mGAAmG;IACnG,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,4EAA4E;IAC5E,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,KAAK,GAAG,SAAS,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;CAC7B;AAED,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,aAAa;IAG3C;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CAAC,cAAc,KAAK;IAEnC;;;;;;OAMG;IACH,cAAc,CACZ,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB;QAAE,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;QAAC,YAAY,EAAE,WAAW,EAAE,CAAA;KAAE;IAI/D,OAAO,CAAC,cAAc;IAiBtB,qFAAqF;IACrF,OAAO,CAAC,aAAa;IAarB,OAAO,CAAC,UAAU;IA+ClB;;;;;;;;OAQG;IACH,oBAAoB,CAAC,MAAM,EAAE;QAC3B,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,KAAK,GAAG,SAAS,CAAC;KACzB,GAAG,qBAAqB;CAU1B"}
+{"version":3,"file":"decoders.d.ts","sourceRoot":"","sources":["../../src/lib/decoders.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGpD,MAAM,WAAW,WAAW;IAC1B,iGAAiG;IACjG,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,mGAAmG;IACnG,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,4EAA4E;IAC5E,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,+FAA+F;IAC/F,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,KAAK,GAAG,SAAS,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;CAC7B;AAED,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,aAAa;IAG3C;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CAAC,cAAc,KAAK;IAEnC;;;;;;OAMG;IACH,cAAc,CACZ,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB;QAAE,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;QAAC,YAAY,EAAE,WAAW,EAAE,CAAA;KAAE;IAI/D,OAAO,CAAC,cAAc;IAiBtB,qFAAqF;IACrF,OAAO,CAAC,aAAa;IAarB,OAAO,CAAC,UAAU;IA+ClB;;;;;;;;OAQG;IACH,oBAAoB,CAAC,MAAM,EAAE;QAC3B,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,KAAK,GAAG,SAAS,CAAC;KACzB,GAAG,qBAAqB;CAU1B"}

package/dist/lib/decoders.js

@@ -17,8 +17,8 @@ export class CalldataDecoder {
      * Decode calldata and recursively unwrap any well-formed nested calldata
      * found in its arguments — `multicall(bytes[])`, a nested `createProposal`'s
      * `ProposalAction[]`, `tryExecute`, etc. The decoded `primary` carries a
-     * `privileged` flag for C-2-class selectors and a `nested` tree so a reviewer
-     * reading the text sees hidden inner calls, not just the wrapper (C-1).
+     * `privileged` flag for privileged-class selectors and a `nested` tree so a
+     * reviewer reading the text sees hidden inner calls, not just the wrapper.
      */
     decodeCalldata(data, contractName) {
         return this.decodeEnriched(data, contractName, 0);

package/dist/lib/govProposalView.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Canonical IGovPool.getProposals fragment + a fail-soft ProposalView decoder.
+ *
+ * Shared by the flow execute-gate (src/tools/flow.ts) and the risk-assess tool
+ * (src/tools/risk.ts) so the deeply-nested struct is declared and decoded in
+ * exactly one place. The nested `validatorProposal`
+ * (IGovValidators.ExternalProposal) MUST stay byte-exact with the deployed
+ * contract or ethers decoding throws — verified against DeXe-Protocol
+ * interfaces/gov/IGovPool.sol + interfaces/gov/validators/IGovValidators.sol.
+ */
+export declare const GET_PROPOSALS_FRAGMENT = "function getProposals(uint256 offset, uint256 limit) view returns (tuple(tuple(tuple(tuple(bool earlyCompletion, bool delegatedVotingAllowed, bool validatorsVote, uint64 duration, uint64 durationValidators, uint64 executionDelay, uint128 quorum, uint128 quorumValidators, uint256 minVotesForVoting, uint256 minVotesForCreating, tuple(address rewardToken, uint256 creationReward, uint256 executionReward, uint256 voteRewardsCoefficient) rewardsInfo, string executorDescription) settings, uint64 voteEnd, uint64 executeAfter, bool executed, uint256 votesFor, uint256 votesAgainst, uint256 rawVotesFor, uint256 rawVotesAgainst, uint256 givenRewards) core, string descriptionURL, tuple(address executor, uint256 value, bytes data)[] actionsOnFor, tuple(address executor, uint256 value, bytes data)[] actionsOnAgainst) proposal, tuple(tuple(bool executed, uint56 snapshotId, uint64 voteEnd, uint64 executeAfter, uint128 quorum, uint256 votesFor, uint256 votesAgainst) core) validatorProposal, uint8 proposalState, uint256 requiredQuorum, uint256 requiredValidatorsQuorum)[])";
+export interface DecodedProposalView {
+    actionsOnFor: {
+        executor: string;
+        value: string;
+        data: string;
+    }[];
+    actionsOnAgainst: {
+        executor: string;
+        value: string;
+        data: string;
+    }[];
+    /** settings.quorum — a fraction of 1e27 (pct × 1e25). */
+    quorumRaw: bigint;
+    votesFor: bigint;
+    votesAgainst: bigint;
+    /** getProposals' requiredQuorum view field — absolute token-weight. */
+    requiredQuorum: bigint;
+    proposalState: number;
+    descriptionURL: string;
+}
+/**
+ * Decode one element of the getProposals return (a ProposalView tuple). Returns
+ * null on any structural surprise — callers fail soft rather than throw.
+ */
+export declare function decodeProposalView(view: unknown): DecodedProposalView | null;
+//# sourceMappingURL=govProposalView.d.ts.map

package/dist/lib/govProposalView.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"govProposalView.d.ts","sourceRoot":"","sources":["../../src/lib/govProposalView.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,eAAO,MAAM,sBAAsB,kjCAC8gC,CAAC;AAEljC,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAClE,gBAAgB,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACtE,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,mBAAmB,GAAG,IAAI,CAyB5E"}

package/dist/lib/govProposalView.js

@@ -0,0 +1,42 @@
+/**
+ * Canonical IGovPool.getProposals fragment + a fail-soft ProposalView decoder.
+ *
+ * Shared by the flow execute-gate (src/tools/flow.ts) and the risk-assess tool
+ * (src/tools/risk.ts) so the deeply-nested struct is declared and decoded in
+ * exactly one place. The nested `validatorProposal`
+ * (IGovValidators.ExternalProposal) MUST stay byte-exact with the deployed
+ * contract or ethers decoding throws — verified against DeXe-Protocol
+ * interfaces/gov/IGovPool.sol + interfaces/gov/validators/IGovValidators.sol.
+ */
+export const GET_PROPOSALS_FRAGMENT = "function getProposals(uint256 offset, uint256 limit) view returns (tuple(tuple(tuple(tuple(bool earlyCompletion, bool delegatedVotingAllowed, bool validatorsVote, uint64 duration, uint64 durationValidators, uint64 executionDelay, uint128 quorum, uint128 quorumValidators, uint256 minVotesForVoting, uint256 minVotesForCreating, tuple(address rewardToken, uint256 creationReward, uint256 executionReward, uint256 voteRewardsCoefficient) rewardsInfo, string executorDescription) settings, uint64 voteEnd, uint64 executeAfter, bool executed, uint256 votesFor, uint256 votesAgainst, uint256 rawVotesFor, uint256 rawVotesAgainst, uint256 givenRewards) core, string descriptionURL, tuple(address executor, uint256 value, bytes data)[] actionsOnFor, tuple(address executor, uint256 value, bytes data)[] actionsOnAgainst) proposal, tuple(tuple(bool executed, uint56 snapshotId, uint64 voteEnd, uint64 executeAfter, uint128 quorum, uint256 votesFor, uint256 votesAgainst) core) validatorProposal, uint8 proposalState, uint256 requiredQuorum, uint256 requiredValidatorsQuorum)[])";
+/**
+ * Decode one element of the getProposals return (a ProposalView tuple). Returns
+ * null on any structural surprise — callers fail soft rather than throw.
+ */
+export function decodeProposalView(view) {
+    try {
+        const v = view;
+        const proposal = v[0];
+        const core = proposal[0];
+        const settings = core[0];
+        const mapActions = (raw) => raw.map((a) => ({
+            executor: a[0],
+            value: a[1].toString(),
+            data: a[2],
+        }));
+        return {
+            actionsOnFor: mapActions(proposal[2]),
+            actionsOnAgainst: mapActions(proposal[3]),
+            quorumRaw: settings[6],
+            votesFor: core[4],
+            votesAgainst: core[5],
+            requiredQuorum: v[3],
+            proposalState: Number(v[2]),
+            descriptionURL: proposal[1],
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=govProposalView.js.map

package/dist/lib/govProposalView.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"govProposalView.js","sourceRoot":"","sources":["../../src/lib/govProposalView.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,sBAAsB,GACjC,+iCAA+iC,CAAC;AAeljC;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAiB,CAAC;QAC5B,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAc,CAAC;QACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAc,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAc,CAAC;QACtC,MAAM,UAAU,GAAG,CAAC,GAAY,EAAE,EAAE,CACjC,GAAuC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnD,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;YACd,KAAK,EAAG,CAAC,CAAC,CAAC,CAAY,CAAC,QAAQ,EAAE;YAClC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;SACX,CAAC,CAAC,CAAC;QACN,OAAO;YACL,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACrC,gBAAgB,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACzC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAW;YAChC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAW;YAC3B,YAAY,EAAE,IAAI,CAAC,CAAC,CAAW;YAC/B,cAAc,EAAE,CAAC,CAAC,CAAC,CAAW;YAC9B,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3B,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAW;SACtC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/protocolAdvisories.d.ts

@@ -1,26 +1,25 @@
 /**
- * Advisory warnings for proposal configurations whose root cause is a DeXe
- * *contract* property the MCP cannot fix — it can only flag them (the full
- * write-up for the protocol team is docs/ESCALATION-DEXE.md). These surface in
- * the relevant builder's human-readable output so a reviewer/agent doesn't
- * unknowingly ship a degraded-governance configuration.
+ * Advisory warnings for proposal/DAO configurations that are governance-safety
+ * risks. These surface in the relevant builder's human-readable output so a
+ * reviewer/agent doesn't unknowingly ship a degraded-governance configuration.
+ * Advisory only — verify settings against your DAO's policy.
  */
-/** Seconds. A validator phase beyond this is almost certainly a mistake — and freezes deposits (H-11). */
+/** Seconds. A validator phase beyond this is almost certainly a mistake — and keeps deposits locked. */
 export declare const DURATION_VALIDATORS_SANITY_CAP = 2592000n;
 /**
  * Flag degraded-governance GovSettings: zero-delay execution (no timelock),
- * auto-defeating validator quorum, and an unbounded validator phase that
- * freezes every voter's deposit. All three are unfixable in the MCP — the
- * deployed contracts enforce no such bounds (H-11, executionDelay=0).
+ * auto-defeating validator quorum, and an unbounded validator phase that can
+ * keep deposits locked for its duration. Configure these against your DAO's policy.
  */
 export declare function settingsAdvisories(s: {
     validatorsVote: boolean;
     durationValidators: string;
     executionDelay: string;
     quorumValidators: string;
-}): string[];
+    quorum?: string;
+}, floorPct?: number): string[];
 /** changeVotePower swaps the DAO's vote-power math contract — a privileged, governance-wide change. */
-export declare const CHANGE_VOTE_POWER_ADVISORY = "\u26A0 changeVotePower swaps the DAO's entire vote-power math contract \u2014 a privileged, governance-wide change (reversible only by another passed proposal). Verify the new VotePower address before proposing. [protocol-property \u2014 see docs/ESCALATION-DEXE.md]";
-/** custom_abi can encode ANY call; the C-2 surface is privileged selectors routed via DEFAULT. */
-export declare const CUSTOM_ABI_DEFAULT_ROUTING_ADVISORY = "\u26A0 custom_abi encodes an arbitrary call with no semantic validation. If the LAST proposal action routes to an unregistered executor (settingsId=DEFAULT), the INTERNAL allowlist is skipped for ALL earlier actions \u2014 the C-2 amplifier. (Privileged GovUserKeeper selectors are hard-refused by the C-2 guard.) Keep the last action's executor a registered one. [protocol-property \u2014 see docs/ESCALATION-DEXE.md]";
+export declare const CHANGE_VOTE_POWER_ADVISORY = "\u26A0 changeVotePower swaps the DAO's entire vote-power math contract \u2014 a privileged, governance-wide change (reversible only by another passed proposal). Verify the new VotePower address before proposing. [governance-safety advisory]";
+/** custom_abi can encode ANY call; ensure actions route to registered executors. */
+export declare const CUSTOM_ABI_DEFAULT_ROUTING_ADVISORY = "\u26A0 custom_abi encodes an arbitrary call with no semantic validation. Ensure every proposal action routes to a properly registered executor so the DAO's internal access controls apply, and keep the final action's executor a registered one. Privileged accounting selectors are refused by the MCP's selector guard. [governance-safety advisory]";
 //# sourceMappingURL=protocolAdvisories.d.ts.map

package/dist/lib/protocolAdvisories.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocolAdvisories.d.ts","sourceRoot":"","sources":["../../src/lib/protocolAdvisories.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,0GAA0G;AAC1G,eAAO,MAAM,8BAA8B,WAAa,CAAC;AAEzD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE;IACpC,cAAc,EAAE,OAAO,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,GAAG,MAAM,EAAE,CAqBX;AAED,uGAAuG;AACvG,eAAO,MAAM,0BAA0B,+QACwN,CAAC;AAEhQ,kGAAkG;AAClG,eAAO,MAAM,mCAAmC,uaACuW,CAAC"}
+{"version":3,"file":"protocolAdvisories.d.ts","sourceRoot":"","sources":["../../src/lib/protocolAdvisories.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,wGAAwG;AACxG,eAAO,MAAM,8BAA8B,WAAa,CAAC;AAEzD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,CAAC,EAAE;IACD,cAAc,EAAE,OAAO,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,EACD,QAAQ,SAAK,GACZ,MAAM,EAAE,CA6BV;AAED,uGAAuG;AACvG,eAAO,MAAM,0BAA0B,qPACmM,CAAC;AAE3O,oFAAoF;AACpF,eAAO,MAAM,mCAAmC,6VACuS,CAAC"}

package/dist/lib/protocolAdvisories.js

@@ -1,39 +1,46 @@
 /**
- * Advisory warnings for proposal configurations whose root cause is a DeXe
- * *contract* property the MCP cannot fix — it can only flag them (the full
- * write-up for the protocol team is docs/ESCALATION-DEXE.md). These surface in
- * the relevant builder's human-readable output so a reviewer/agent doesn't
- * unknowingly ship a degraded-governance configuration.
+ * Advisory warnings for proposal/DAO configurations that are governance-safety
+ * risks. These surface in the relevant builder's human-readable output so a
+ * reviewer/agent doesn't unknowingly ship a degraded-governance configuration.
+ * Advisory only — verify settings against your DAO's policy.
  */
+import { quorumPctFromRaw, judgeQuorum, lowQuorumAdvisory } from "./quorumRisk.js";
 function toBig(s) {
     return /^[0-9]+$/.test(s) ? BigInt(s) : null;
 }
-/** Seconds. A validator phase beyond this is almost certainly a mistake — and freezes deposits (H-11). */
+/** Seconds. A validator phase beyond this is almost certainly a mistake — and keeps deposits locked. */
 export const DURATION_VALIDATORS_SANITY_CAP = 2592000n; // 30 days
 /**
  * Flag degraded-governance GovSettings: zero-delay execution (no timelock),
- * auto-defeating validator quorum, and an unbounded validator phase that
- * freezes every voter's deposit. All three are unfixable in the MCP — the
- * deployed contracts enforce no such bounds (H-11, executionDelay=0).
+ * auto-defeating validator quorum, and an unbounded validator phase that can
+ * keep deposits locked for its duration. Configure these against your DAO's policy.
  */
-export function settingsAdvisories(s) {
+export function settingsAdvisories(s, floorPct = 50) {
     const out = [];
+    // Low quorum reduces the participation required to pass a proposal — a
+    // governance-safety risk for treasury-moving proposals.
+    if (s.quorum !== undefined) {
+        const pct = quorumPctFromRaw(s.quorum);
+        if (judgeQuorum(pct, floorPct) !== "SAFE") {
+            out.push(lowQuorumAdvisory(pct, floorPct));
+        }
+    }
     if (toBig(s.executionDelay) === 0n) {
-        out.push("executionDelay=0 → no timelock: a passed proposal executes immediately, leaving no window to react to a malicious-but-passed action (amplifies C-2). DeXe contracts enforce no minimum — set a non-zero delay.");
+        out.push("executionDelay=0 → no timelock: a passed proposal executes immediately, leaving no window to review it before it takes effect. Set a non-zero execution delay (a 1-day minimum is recommended for standard governance).");
     }
     if (s.validatorsVote) {
         if (toBig(s.quorumValidators) === 0n) {
-            out.push("quorumValidators=0 with validatorsVote=true → every validator proposal auto-defeats (governance DoS). DeXe contracts enforce no lower bound.");
+            out.push("quorumValidators=0 with validatorsVote=true → every validator proposal auto-defeats (governance stalls). Set a non-zero validator quorum.");
         }
         const dv = toBig(s.durationValidators);
         if (dv !== null && dv > DURATION_VALIDATORS_SANITY_CAP) {
-            out.push(`durationValidators=${s.durationValidators}s (> 30 days) → GovSettings has NO upper bound and deposits stay LOCKED for the whole validator phase (GovPoolUnlock excludes ValidatorVoting), so a huge value freezes every voter's funds (H-11).`);
+            out.push(`durationValidators=${s.durationValidators}s (> 30 days) → deposits stay locked for the whole validator phase, so a very large value can lock voters' funds for an extended period. Use a sane validator duration.`);
         }
     }
     return out;
 }
 /** changeVotePower swaps the DAO's vote-power math contract — a privileged, governance-wide change. */
-export const CHANGE_VOTE_POWER_ADVISORY = "⚠ changeVotePower swaps the DAO's entire vote-power math contract — a privileged, governance-wide change (reversible only by another passed proposal). Verify the new VotePower address before proposing. [protocol-property — see docs/ESCALATION-DEXE.md]";
-/** custom_abi can encode ANY call; the C-2 surface is privileged selectors routed via DEFAULT. */
-export const CUSTOM_ABI_DEFAULT_ROUTING_ADVISORY = "⚠ custom_abi encodes an arbitrary call with no semantic validation. If the LAST proposal action routes to an unregistered executor (settingsId=DEFAULT), the INTERNAL allowlist is skipped for ALL earlier actions — the C-2 amplifier. (Privileged GovUserKeeper selectors are hard-refused by the C-2 guard.) Keep the last action's executor a registered one. [protocol-property — see docs/ESCALATION-DEXE.md]";
+export const CHANGE_VOTE_POWER_ADVISORY = "⚠ changeVotePower swaps the DAO's entire vote-power math contract — a privileged, governance-wide change (reversible only by another passed proposal). Verify the new VotePower address before proposing. [governance-safety advisory]";
+/** custom_abi can encode ANY call; ensure actions route to registered executors. */
+export const CUSTOM_ABI_DEFAULT_ROUTING_ADVISORY = "⚠ custom_abi encodes an arbitrary call with no semantic validation. Ensure every proposal action routes to a properly registered executor so the DAO's internal access controls apply, and keep the final action's executor a registered one. Privileged accounting selectors are refused by the MCP's selector guard. [governance-safety advisory]";
 //# sourceMappingURL=protocolAdvisories.js.map

package/dist/lib/protocolAdvisories.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocolAdvisories.js","sourceRoot":"","sources":["../../src/lib/protocolAdvisories.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,SAAS,KAAK,CAAC,CAAS;IACtB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,MAAM,8BAA8B,GAAG,QAAU,CAAC,CAAC,UAAU;AAEpE;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAKlC;IACC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CACN,gNAAgN,CACjN,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,CACN,8IAA8I,CAC/I,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACvC,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,GAAG,8BAA8B,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CACN,sBAAsB,CAAC,CAAC,kBAAkB,qMAAqM,CAChP,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,MAAM,0BAA0B,GACrC,6PAA6P,CAAC;AAEhQ,kGAAkG;AAClG,MAAM,CAAC,MAAM,mCAAmC,GAC9C,qZAAqZ,CAAC"}
+{"version":3,"file":"protocolAdvisories.js","sourceRoot":"","sources":["../../src/lib/protocolAdvisories.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEnF,SAAS,KAAK,CAAC,CAAS;IACtB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,MAAM,8BAA8B,GAAG,QAAU,CAAC,CAAC,UAAU;AAEpE;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,CAMC,EACD,QAAQ,GAAG,EAAE;IAEb,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,uEAAuE;IACvE,wDAAwD;IACxD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,MAAM,EAAE,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CACN,yNAAyN,CAC1N,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,CACN,2IAA2I,CAC5I,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACvC,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,GAAG,8BAA8B,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CACN,sBAAsB,CAAC,CAAC,kBAAkB,yKAAyK,CACpN,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,MAAM,0BAA0B,GACrC,wOAAwO,CAAC;AAE3O,oFAAoF;AACpF,MAAM,CAAC,MAAM,mCAAmC,GAC9C,qVAAqV,CAAC"}

package/dist/lib/quorumRisk.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Low-quorum governance-safety advisories — pure logic, no RPC.
+ *
+ * Treasury-moving proposals (ERC20 approve/transfer or native value) should pass
+ * under an adequate quorum so a true majority is required. This module flags when
+ * a DAO's quorum setting is low for such proposals, so an operator/agent verifies
+ * the quorum and stakeholder participation before executing. Advisory only — the
+ * durable control is an adequate on-chain quorum threshold configured per DAO.
+ */
+export type RiskLevel = "SAFE" | "CAUTION" | "DANGER";
+/** Worst (most dangerous) of a set of risk levels. Empty → SAFE. */
+export declare function worstRisk(...levels: RiskLevel[]): RiskLevel;
+/** Convert a raw quorum setting (pct × 1e25) to a human percentage. 5e26 → 50. */
+export declare function quorumPctFromRaw(raw: bigint | string): number;
+/** SAFE ≥ floor; CAUTION ≥ 0.8×floor; DANGER below. NaN → DANGER (unparseable). */
+export declare function judgeQuorum(pct: number, floorPct: number): RiskLevel;
+export type TreasuryHitKind = "approve" | "transfer" | "transferFrom" | "increaseAllowance" | "nftTransfer" | "nativeValue";
+export interface TreasuryHit {
+    /** Index of the action in the proposal's action array. */
+    index: number;
+    /** Target contract of the action. */
+    executor: string;
+    /** 0x 4-byte selector, or null for a pure native-value transfer. */
+    selector: string | null;
+    kind: TreasuryHitKind;
+    /** Best-effort decoded recipient (spender / `to`), or null when undecodable. */
+    recipient: string | null;
+    /** Best-effort decoded amount / tokenId as a decimal string, or null. */
+    amount: string | null;
+}
+/** Decimal selectors of every treasury-touching function (for docs/tests). */
+export declare function treasurySelectors(): string[];
+/**
+ * Scan a proposal's actions and report every one that moves treasury value or
+ * grants an allowance. Best-effort recipient/amount decode — NEVER throws.
+ * A single action can yield two hits (native value + an ERC20 call).
+ */
+export declare function classifyTreasuryActions(actions: {
+    executor: string;
+    value: string;
+    data: string;
+}[]): TreasuryHit[];
+export interface QuorumConcentration {
+    /** Absolute voting weight needed to clear quorum, or null when unknown. */
+    requiredWeight: bigint | null;
+    /** Token total supply used as the denominator, or null when unknown. */
+    totalSupply: bigint | null;
+    /**
+     * Share of total supply required to meet quorum. INDICATIVE: ignores VotePower
+     * math, NFT multipliers, and delegation, and uses minted supply as the
+     * denominator. Null when supply/weight unknown. A low value indicates a DAO
+     * whose decisions need only a small share of supply — a governance-safety flag.
+     */
+    pctOfSupplyForQuorum: number | null;
+    verdict: RiskLevel;
+}
+/**
+ * Estimate the share of token supply required to meet a proposal's quorum.
+ * Prefers the on-chain `requiredWeight` (getProposalRequiredQuorum); otherwise
+ * derives it from `quorumPct × totalVoteWeight`. When the percentage cannot be
+ * computed the verdict is CAUTION (unknown is never SAFE).
+ */
+export declare function quorumConcentration(args: {
+    quorumPct: number;
+    floorPct?: number;
+    totalSupply?: bigint;
+    requiredWeight?: bigint;
+    totalVoteWeight?: bigint;
+}): QuorumConcentration;
+/** Flag a below-floor quorum SETTING (deploy / change-voting-settings). */
+export declare function lowQuorumAdvisory(pct: number, floorPct: number): string;
+/** Flag a treasury-touching proposal at build time (static, no RPC needed). */
+export declare const TREASURY_RISK_ADVISORY: string;
+/**
+ * Build-time advisory for any builder whose actions move treasury value.
+ * Returns the static advisory string when there is at least one treasury hit
+ * and the guard is enabled, else null. Build-time is WARN-only — it never
+ * blocks (refusing would just route users to hand-crafted custom_abi).
+ */
+export declare function buildTimeTreasuryAdvisory(actions: {
+    executor: string;
+    value: string;
+    data: string;
+}[], guard: "off" | "warn"): string | null;
+/**
+ * Advisory message for the vote_and_execute treasury alert. `reasons` are the
+ * failing checks (below-floor quorum, no controlling-member participation).
+ * Advisory ONLY — the guard never blocks; it surfaces this and proceeds. The
+ * durable control is an adequate on-chain quorum threshold configured per DAO.
+ */
+export declare function treasuryExecuteAdvisory(reasons: string[]): string;
+//# sourceMappingURL=quorumRisk.d.ts.map

package/dist/lib/quorumRisk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quorumRisk.d.ts","sourceRoot":"","sources":["../../src/lib/quorumRisk.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AAEH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEtD,oEAAoE;AACpE,wBAAgB,SAAS,CAAC,GAAG,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAI3D;AAQD,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAS7D;AAED,mFAAmF;AACnF,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAKpE;AAID,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,UAAU,GACV,cAAc,GACd,mBAAmB,GACnB,aAAa,GACb,aAAa,CAAC;AAElB,MAAM,WAAW,WAAW;IAC1B,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,eAAe,CAAC;IACtB,gFAAgF;IAChF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,yEAAyE;IACzE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AA6BD,8EAA8E;AAC9E,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAE5C;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,GAC3D,WAAW,EAAE,CAsCf;AAID,MAAM,WAAW,mBAAmB;IAClC,2EAA2E;IAC3E,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,wEAAwE;IACxE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;OAKG;IACH,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,EAAE,SAAS,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,mBAAmB,CAoBtB;AAMD,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQvE;AAED,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,QAG6C,CAAC;AAEjF;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,EAC5D,KAAK,EAAE,KAAK,GAAG,MAAM,GACpB,MAAM,GAAG,IAAI,CAGf;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAOjE"}