@wowok/agent-mcp 2.7.1 → 2.7.2

package/dist/knowledge/guard-lint.js

@@ -1,670 +1 @@
-import { validateGuardData, MAX_DESCRIPTION_LENGTH, MAX_TABLE_SIZE, } from "@wowok/wowok";
-import { assessGuardRisks } from "./guard-risk.js";
-import { findScene, inferSceneFromAction } from "./guard-ledger.js";
-import { suggestTemplateForScene } from "./guard-templates.js";
-function deepClone(obj) {
-    return JSON.parse(JSON.stringify(obj));
-}
-function rootToString(root) {
-    return JSON.stringify(root);
-}
-function hasSignerContext(root) {
-    const str = rootToString(root);
-    return str.includes('"Signer"') || str.includes('"context":"Signer"') || str.includes('"context": "Signer"');
-}
-function getSubmissionEntries(table) {
-    return table.filter((e) => e.b_submission === true);
-}
-function inferValueType(value) {
-    if (typeof value === "string") {
-        if (value.startsWith("0x") && value.length >= 3)
-            return "Address";
-        return "String";
-    }
-    if (typeof value === "number") {
-        if (Number.isInteger(value)) {
-            if (value >= 0 && value <= 255)
-                return "U8";
-            if (value >= 0 && value <= 65535)
-                return "U16";
-            return "U64";
-        }
-        return "U256";
-    }
-    if (typeof value === "boolean")
-        return "Bool";
-    if (Array.isArray(value)) {
-        if (value.length > 0) {
-            const elemType = inferValueType(value[0]);
-            if (elemType === "Address")
-                return "Vec<Address>";
-            if (elemType === "String")
-                return "Vec<String>";
-            if (elemType === "Bool")
-                return "Vec<Bool>";
-        }
-        return "Vec<Address>";
-    }
-    return undefined;
-}
-function sdkIssueToDiagnostic(issue) {
-    return {
-        code: issue.code,
-        message: issue.message,
-        severity: issue.severity,
-        source: "sdk",
-        location: {
-            path: issue.path,
-        },
-        fix: {
-            description: `SDK validation failed (${issue.sdk_error ?? "InvalidParam"}); manual fix required`,
-            auto_fixable: false,
-        },
-    };
-}
-async function checkSdkSyntax(json) {
-    const tableForSdk = json.table.map((e) => ({
-        identifier: e.identifier,
-        b_submission: e.b_submission ?? false,
-        value_type: (e.value_type ?? "Address"),
-        value: e.value,
-        name: e.name ?? "",
-    }));
-    const issues = await validateGuardData({
-        description: json.description,
-        table: tableForSdk,
-        root: json.root,
-        rely: json.rely,
-    });
-    return issues.map(sdkIssueToDiagnostic);
-}
-function checkSemanticErrors(json) {
-    const diagnostics = [];
-    const { table, root, binding_hint } = json;
-    const scene = binding_hint ? findScene(binding_hint.host_object ?? "", binding_hint.binding_field ?? "") : undefined;
-    const submissionEntries = getSubmissionEntries(table);
-    if (submissionEntries.length > 0 && root && !hasSignerContext(root)) {
-        const hasAddressSubmission = submissionEntries.some((e) => e.value_type === "Address");
-        const isAllocatorsEntitySharing = scene?.id === "service_order_allocators_guard" &&
-            binding_hint?.sharing_recipients !== undefined &&
-            binding_hint.sharing_recipients.length > 0 &&
-            !binding_hint.sharing_recipients.includes("Signer");
-        if (hasAddressSubmission && !isAllocatorsEntitySharing) {
-            const indices = submissionEntries
-                .filter((e) => e.value_type === "Address")
-                .map((e) => table.indexOf(e));
-            diagnostics.push({
-                code: "LE-04",
-                message: "Submitted data has no Signer binding (submission forgery risk)",
-                severity: "error",
-                source: "lint",
-                location: { path: indices.map((i) => `/table/${i}`).join(" → ") },
-                fix: {
-                    description: "Add logic_equal(context(Signer), identifier[N]) in root to bind the submitter identity",
-                    auto_fixable: false,
-                },
-            });
-        }
-    }
-    if (scene?.id === "arbitration_voting_guard") {
-        const hasWeightSubmission = submissionEntries.some((e) => ["U8", "U16", "U32", "U64", "U128", "U256"].includes(e.value_type ?? ""));
-        if (hasWeightSubmission) {
-            const indices = submissionEntries
-                .filter((e) => ["U8", "U16", "U32", "U64", "U128", "U256"].includes(e.value_type ?? ""))
-                .map((e) => table.indexOf(e));
-            diagnostics.push({
-                code: "LE-05",
-                message: "voting_guard voting weight comes from submitted data (weight forgery risk)",
-                severity: "error",
-                source: "lint",
-                location: { path: indices.map((i) => `/table/${i}`).join(" → ") },
-                fix: {
-                    description: "Derive arbitrator weights from the Arb object via witness (e.g. 105 TypeArbArbitration) rather than submitting them directly",
-                    auto_fixable: false,
-                },
-            });
-        }
-    }
-    if (scene?.id === "gen_passport_guard" || binding_hint?.action === "gen_passport") {
-        const rootStr = rootToString(root);
-        if (rootStr.includes("1167") || rootStr.includes("repository.data")) {
-            const hasQuoteGuard = rootStr.includes("quote_guard");
-            if (hasQuoteGuard) {
-                diagnostics.push({
-                    code: "LE-06",
-                    message: "repository.data query with quote_guard: rigid verification requirement — ensure Passport includes quote_guard verification with necessary submissions (e.g., Payment proof)",
-                    severity: "info",
-                    source: "lint",
-                    location: { path: "/root" },
-                    fix: {
-                        description: "Ensure the quote_guard is verified: user submits Payment via Passport, quote_guard verifies Payment fields, repository data query passes",
-                        auto_fixable: false,
-                    },
-                });
-            }
-        }
-    }
-    if (binding_hint?.host_object && scene) {
-        const hostType = binding_hint.host_object;
-        const circularEntries = table.filter((e) => !e.b_submission && e.value_type === "Address" &&
-            typeof e.value === "string" && e.value.startsWith("0x") &&
-            e.object_type === hostType);
-        if (circularEntries.length > 0) {
-            const indices = circularEntries.map((e) => table.indexOf(e));
-            diagnostics.push({
-                code: "LE-07",
-                message: `Circular reference uses an address rather than a name (Host Object may not be published yet when the Guard is created)`,
-                severity: "error",
-                source: "lint",
-                location: { path: indices.map((i) => `/table/${i}/value`).join(" → ") },
-                fix: {
-                    description: `Change value from an address to an object name (e.g. "service1"); the SDK will resolve it to an address after the Host Object is published`,
-                    auto_fixable: false,
-                },
-            });
-        }
-    }
-    return diagnostics;
-}
-function checkSyntaxHints(json) {
-    const diagnostics = [];
-    const { table } = json;
-    if (!json.description || json.description.trim() === "") {
-        diagnostics.push({
-            code: "SH-01",
-            message: "description is missing or empty",
-            severity: "info",
-            source: "lint",
-            location: { path: "/description" },
-            fix: {
-                description: "Add a description, e.g. 'Service buy_guard: whitelist validation'",
-                auto_fixable: true,
-            },
-        });
-    }
-    for (let i = 0; i < table.length; i++) {
-        const entry = table[i];
-        if (!entry.name || entry.name.trim() === "") {
-            diagnostics.push({
-                code: "SH-03",
-                message: `table[${i}] is missing name`,
-                severity: "warning",
-                source: "lint",
-                location: { path: `/table/${i}/name` },
-                fix: {
-                    description: `Add a name, e.g. "data entry ${entry.identifier}"`,
-                    auto_fixable: true,
-                },
-            });
-        }
-    }
-    for (let i = 0; i < table.length; i++) {
-        const entry = table[i];
-        if (!entry.value_type) {
-            diagnostics.push({
-                code: "SH-05",
-                message: `table[${i}] is missing value_type`,
-                severity: "warning",
-                source: "lint",
-                location: { path: `/table/${i}/value_type` },
-                fix: {
-                    description: "Infer value_type from value (e.g. Address/String/U64, etc.)",
-                    auto_fixable: true,
-                },
-            });
-        }
-    }
-    if (table.length > MAX_TABLE_SIZE) {
-        diagnostics.push({
-            code: "SH-07",
-            message: `table entry count ${table.length} exceeds the maximum limit ${MAX_TABLE_SIZE}`,
-            severity: "error",
-            source: "lint",
-            location: { path: "/table" },
-            fix: {
-                description: "Slim down the table by merging similar entries, or split into multiple Guards + rely",
-                auto_fixable: false,
-            },
-        });
-    }
-    for (let i = 0; i < table.length; i++) {
-        if (table[i].b_submission === undefined) {
-            diagnostics.push({
-                code: "SH-10",
-                message: `table[${i}] b_submission is missing`,
-                severity: "info",
-                source: "lint",
-                location: { path: `/table/${i}/b_submission` },
-                fix: {
-                    description: "Set to false (constant) or true (submitted data)",
-                    auto_fixable: true,
-                },
-            });
-        }
-    }
-    for (let i = 0; i < table.length; i++) {
-        const entry = table[i];
-        if (entry.b_submission === true && entry.value !== undefined && entry.value !== null) {
-            diagnostics.push({
-                code: "SH-11",
-                message: `table[${i}] has a redundant value field on b_submission=true entry (the verifier supplies the value at runtime; this value is ignored by BCS encoding and wastes gas)`,
-                severity: "warning",
-                source: "lint",
-                location: { path: `/table/${i}/value` },
-                fix: {
-                    description: "Remove the value field — it is ignored for b_submission=true entries",
-                    auto_fixable: true,
-                },
-            });
-        }
-    }
-    return diagnostics;
-}
-function checkSuggestions(json) {
-    const diagnostics = [];
-    const { root, binding_hint, table } = json;
-    if (root) {
-        const rootStr = rootToString(root);
-        if (rootStr.includes("vec_contains_address") && rootStr.includes("Signer")) {
-            diagnostics.push({
-                code: "SG-01",
-                message: "Matches Pattern P04 (whitelist validation)",
-                severity: "hint",
-                source: "lint",
-                location: { path: "/root" },
-                fix: { description: "Refer to the P04 Pattern to ensure best practices", auto_fixable: false },
-            });
-        }
-        else if (rootStr.includes("logic_equal") && rootStr.includes("Signer")) {
-            const hasAddressConst = table.some((e) => !e.b_submission && e.value_type === "Address" && typeof e.value === "string" && e.value.length > 0);
-            if (hasAddressConst) {
-                diagnostics.push({
-                    code: "SG-01",
-                    message: "Matches Pattern P04 (whitelist validation — single-address variant)",
-                    severity: "hint",
-                    source: "lint",
-                    location: { path: "/root" },
-                    fix: { description: "P04 single-address form; for multi-address scenarios, consider vec_contains_address", auto_fixable: false },
-                });
-            }
-        }
-        if (rootStr.includes("logic_as_u256_greater") ||
-            rootStr.includes("logic_as_u256_lesser")) {
-            diagnostics.push({
-                code: "SG-01",
-                message: "Matches Pattern P02 (numeric threshold validation)",
-                severity: "hint",
-                source: "lint",
-                location: { path: "/root" },
-                fix: { description: "Suitable for amount/quantity threshold validation scenarios", auto_fixable: false },
-            });
-        }
-        if (rootStr.includes("convert_witness")) {
-            diagnostics.push({
-                code: "SG-01",
-                message: "Matches Pattern P09 (witness-derived validation)",
-                severity: "hint",
-                source: "lint",
-                location: { path: "/root" },
-                fix: { description: "Suitable for cross-object relationship validation (e.g. Order→Progress)", auto_fixable: false },
-            });
-        }
-    }
-    if (binding_hint?.action) {
-        const validActions = ["buy", "forward", "allocate", "claim_reward", "vote", "dispute", "write_repository", "submit_progress", "gen_passport"];
-        if (validActions.includes(binding_hint.action)) {
-            const scene = inferSceneFromAction(binding_hint.action);
-            if (scene) {
-                const template = suggestTemplateForScene(scene.id);
-                if (template) {
-                    diagnostics.push({
-                        code: "SG-02",
-                        message: `Recommended scene template: ${template.name}`,
-                        severity: "hint",
-                        source: "lint",
-                        location: { path: "/" },
-                        fix: { description: `Refer to template ${template.id} (${template.example_use_case})`, auto_fixable: false },
-                    });
-                }
-            }
-        }
-    }
-    const submissionEntries = getSubmissionEntries(table);
-    for (const entry of submissionEntries) {
-        const name = entry.name ?? "";
-        if (name.length < 10 || /^[a-z_]+$/i.test(name)) {
-            const idx = table.indexOf(entry);
-            diagnostics.push({
-                code: "SG-03",
-                message: `table[${idx}] submitted data has a vague name description`,
-                severity: "info",
-                source: "lint",
-                location: { path: `/table/${idx}/name` },
-                fix: { description: "Use a full natural-language description (≥10 characters), e.g. 'user-submitted operation type (return/damage)'", auto_fixable: false },
-            });
-        }
-    }
-    if (root) {
-        const rootStr = rootToString(root);
-        const hasProofSigner = rootStr.includes("proof.signer");
-        const hasProofTime = rootStr.includes("proof.time");
-        const hasStringLength = rootStr.includes("calc_string_length");
-        const hasStringSubmission = submissionEntries.some((e) => e.value_type === "String");
-        if (hasProofSigner && hasProofTime) {
-            diagnostics.push({
-                code: "SG-04",
-                message: "Strict-mode privacy-delivery guard detected (proof.signer + proof.time). " +
-                    "Recommended three conditions: Signer==proof.signer (submitter accountability), " +
-                    "proof.time>order.time (freshness), order.service==service (project binding). " +
-                    "No content verification — only submission responsibility ('whoever benefits bears the burden of proof').",
-                severity: "info",
-                source: "lint",
-                location: { path: "/root" },
-                fix: {
-                    description: "Ensure all three conditions are present (logic_and). Refer to template tpl_forward_privacy_delivery_proof. " +
-                        "Query IDs: proof.signer=1958, proof.time=1960, order.time=1574, order.service=1563.",
-                    auto_fixable: false,
-                },
-            });
-        }
-        else if (hasStringLength && hasStringSubmission) {
-            diagnostics.push({
-                code: "SG-04",
-                message: "Broad-mode privacy-delivery guard detected (String submission + length check, e.g. Merkle Root length == 66). " +
-                    "This trusts the submitter's honesty; the counterparty can dispute by checking their own Messenger conversation. " +
-                    "Suitable as an arbitration basis, not a fund-flow gate.",
-                severity: "info",
-                source: "lint",
-                location: { path: "/root" },
-                fix: {
-                    description: "For stronger assurance, consider strict mode: submit a Proof object address (from messenger.submitChainProof) + " +
-                        "Order address, then verify proof.signer/proof.time/order.service. See template tpl_forward_privacy_delivery_proof.",
-                    auto_fixable: false,
-                },
-            });
-        }
-    }
-    return diagnostics;
-}
-export function autoFixGuard(json) {
-    const fixed = deepClone(json);
-    const actions = [];
-    if (!fixed.description || fixed.description.trim() === "") {
-        fixed.description = `Guard (table: ${fixed.table.length} items, root: ${fixed.root?.type ?? "unknown"})`;
-        actions.push({
-            diagnostic_code: "SH-01",
-            description: "Fill in default description",
-            after: fixed.description,
-            path: "/description",
-        });
-    }
-    if (fixed.description && fixed.description.length > MAX_DESCRIPTION_LENGTH) {
-        const before = fixed.description;
-        fixed.description = fixed.description.substring(0, MAX_DESCRIPTION_LENGTH);
-        actions.push({
-            diagnostic_code: "G-001",
-            description: `Truncate description to ${MAX_DESCRIPTION_LENGTH} characters`,
-            before: `${before.length} characters`,
-            after: `${fixed.description.length} characters`,
-            path: "/description",
-        });
-    }
-    for (let i = 0; i < fixed.table.length; i++) {
-        const entry = fixed.table[i];
-        if (!entry.name || entry.name.trim() === "") {
-            entry.name = `data entry ${entry.identifier}`;
-            actions.push({
-                diagnostic_code: "SH-03",
-                description: `table[${i}] fill in name`,
-                after: entry.name,
-                path: `/table/${i}/name`,
-            });
-        }
-    }
-    for (let i = 0; i < fixed.table.length; i++) {
-        const entry = fixed.table[i];
-        if (!entry.value_type && entry.value !== undefined && entry.value !== null) {
-            const inferred = inferValueType(entry.value);
-            if (inferred) {
-                entry.value_type = inferred;
-                actions.push({
-                    diagnostic_code: "SH-05",
-                    description: `table[${i}] infer value_type`,
-                    after: inferred,
-                    path: `/table/${i}/value_type`,
-                });
-            }
-        }
-    }
-    const idMap = new Map();
-    let nextId = 0;
-    for (let i = 0; i < fixed.table.length; i++) {
-        const entry = fixed.table[i];
-        if (!idMap.has(entry.identifier)) {
-            idMap.set(entry.identifier, nextId);
-            if (entry.identifier !== nextId) {
-                actions.push({
-                    diagnostic_code: "G-007",
-                    description: `table[${i}] identifier ${entry.identifier} → ${nextId}`,
-                    before: String(entry.identifier),
-                    after: String(nextId),
-                    path: `/table/${i}/identifier`,
-                });
-            }
-            entry.identifier = nextId;
-            nextId++;
-        }
-        else {
-            const oldId = entry.identifier;
-            entry.identifier = nextId;
-            idMap.set(oldId, nextId);
-            actions.push({
-                diagnostic_code: "G-007",
-                description: `table[${i}] identifier ${oldId} duplicate → reallocated to ${nextId}`,
-                before: String(oldId),
-                after: String(nextId),
-                path: `/table/${i}/identifier`,
-            });
-            nextId++;
-        }
-    }
-    for (let i = 0; i < fixed.table.length; i++) {
-        const entry = fixed.table[i];
-        if (entry.b_submission === undefined) {
-            entry.b_submission = false;
-            actions.push({
-                diagnostic_code: "SH-10",
-                description: `table[${i}] b_submission default set to false`,
-                after: "false",
-                path: `/table/${i}/b_submission`,
-            });
-        }
-    }
-    if (fixed.rely?.guards && fixed.rely.guards.length > 0) {
-        const unique = [...new Set(fixed.rely.guards)];
-        if (unique.length !== fixed.rely.guards.length) {
-            actions.push({
-                diagnostic_code: "G-009",
-                description: `rely deduplicate: ${fixed.rely.guards.length} → ${unique.length}`,
-                before: JSON.stringify(fixed.rely.guards),
-                after: JSON.stringify(unique),
-                path: "/rely/guards",
-            });
-            fixed.rely.guards = unique;
-        }
-    }
-    for (let i = 0; i < fixed.table.length; i++) {
-        const entry = fixed.table[i];
-        if (entry.b_submission === true && entry.value !== undefined && entry.value !== null) {
-            const before = JSON.stringify(entry.value);
-            delete entry.value;
-            actions.push({
-                diagnostic_code: "SH-11",
-                description: `table[${i}] remove redundant value on b_submission=true entry`,
-                before,
-                after: "(removed)",
-                path: `/table/${i}/value`,
-            });
-        }
-    }
-    return { fixed, actions };
-}
-export async function lintGuard(json, options) {
-    const doAutoFix = options?.auto_fix ?? true;
-    const { table, root, rely, binding_hint } = json;
-    const diagnostics = [];
-    let risk_assessment;
-    const sdkDiagnostics = await checkSdkSyntax(json);
-    diagnostics.push(...sdkDiagnostics);
-    const semanticDiagnostics = checkSemanticErrors(json);
-    diagnostics.push(...semanticDiagnostics);
-    const hintDiagnostics = checkSyntaxHints(json);
-    diagnostics.push(...hintDiagnostics);
-    let fixed_json;
-    let fix_actions = [];
-    if (doAutoFix) {
-        const { fixed, actions } = autoFixGuard(json);
-        if (actions.length > 0) {
-            fixed_json = fixed;
-            fix_actions = actions;
-        }
-    }
-    if (table.length > 0 && root) {
-        const scene = binding_hint
-            ? findScene(binding_hint.host_object ?? "", binding_hint.binding_field ?? "")
-            : undefined;
-        const mappedTable = table.map((e) => ({
-            identifier: e.identifier,
-            b_submission: e.b_submission ?? false,
-            value_type: e.value_type ?? "Address",
-            value: e.value,
-            name: e.name,
-            object_type: e.object_type,
-        }));
-        risk_assessment = assessGuardRisks({
-            table: mappedTable,
-            root,
-            rely,
-            scene,
-            sharing_recipients: binding_hint?.sharing_recipients,
-        });
-        for (const r of risk_assessment.risks) {
-            const severity = r.level === "critical" || r.level === "high" ? "error" :
-                r.level === "medium" ? "warning" :
-                    r.level === "low" ? "info" : "hint";
-            const rawEvidence = r.evidence ?? "";
-            const path = rawEvidence.startsWith("/") ? rawEvidence : "/";
-            diagnostics.push({
-                code: r.id,
-                message: `[${r.level}] ${r.title}`,
-                severity,
-                source: "risk",
-                location: { path },
-                fix: {
-                    description: r.mitigation,
-                    auto_fixable: false,
-                },
-            });
-        }
-    }
-    const suggestionDiagnostics = checkSuggestions(json);
-    diagnostics.push(...suggestionDiagnostics);
-    const errors = diagnostics.filter((d) => d.severity === "error").length;
-    const warnings = diagnostics.filter((d) => d.severity === "warning").length;
-    const infos = diagnostics.filter((d) => d.severity === "info" || d.severity === "hint").length;
-    const ready = errors === 0;
-    let next_step;
-    if (errors > 0) {
-        next_step = `Fix ${errors} error(s) and re-run lint`;
-    }
-    else if (warnings > 0) {
-        next_step = `Consider addressing ${warnings} warning(s), then submit to SDK newGuard() for final syntax validation`;
-    }
-    else {
-        next_step = "lint passed (no errors); submit to SDK newGuard() for final syntax validation before going on-chain";
-    }
-    return {
-        json_summary: {
-            table_count: table.length,
-            root_type: root?.type ?? "unknown",
-            has_rely: !!rely?.guards?.length,
-            rely_count: rely?.guards?.length ?? 0,
-            has_description: !!json.description,
-        },
-        diagnostics,
-        fixed_json,
-        fix_actions,
-        risk_assessment,
-        summary: {
-            errors,
-            warnings,
-            infos,
-            auto_fixes_applied: fix_actions.length,
-            ready,
-            next_step,
-        },
-    };
-}
-export async function isGuardReady(json) {
-    const result = await lintGuard(json, { auto_fix: false });
-    return result.summary.ready;
-}
-export async function getGuardErrors(json) {
-    const result = await lintGuard(json, { auto_fix: false });
-    return result.diagnostics.filter((d) => d.severity === "error");
-}
-export function formatLintResult(result) {
-    const lines = [];
-    lines.push("=== Guard JSON Lint Report ===");
-    lines.push("");
-    lines.push("Summary:");
-    lines.push(`  Errors:     ${result.summary.errors}`);
-    lines.push(`  Warnings:   ${result.summary.warnings}`);
-    lines.push(`  Infos:      ${result.summary.infos}`);
-    lines.push(`  Auto-fixes: ${result.summary.auto_fixes_applied}`);
-    lines.push(`  Ready:      ${result.summary.ready ? "YES" : "NO"}`);
-    lines.push(`  Next step:  ${result.summary.next_step}`);
-    lines.push("");
-    if (result.fix_actions.length > 0) {
-        lines.push("--- Auto-fix Actions ---");
-        for (const action of result.fix_actions) {
-            lines.push(`  [${action.diagnostic_code}] ${action.description}`);
-            lines.push(`    Path: ${action.path}`);
-            if (action.before && action.after) {
-                lines.push(`    ${action.before} -> ${action.after}`);
-            }
-        }
-        lines.push("");
-    }
-    const errors = result.diagnostics.filter((d) => d.severity === "error");
-    const warnings = result.diagnostics.filter((d) => d.severity === "warning");
-    const infos = result.diagnostics.filter((d) => d.severity === "info" || d.severity === "hint");
-    if (errors.length > 0) {
-        lines.push("--- Errors (must fix) ---");
-        for (const d of errors) {
-            lines.push(`  [${d.code}] (${d.source}) ${d.message}`);
-            lines.push(`    Path: ${d.location.path}`);
-            if (d.fix)
-                lines.push(`    Fix:  ${d.fix.description}`);
-        }
-        lines.push("");
-    }
-    if (warnings.length > 0) {
-        lines.push("--- Warnings (consider fixing) ---");
-        for (const d of warnings) {
-            lines.push(`  [${d.code}] (${d.source}) ${d.message}`);
-            lines.push(`    Path: ${d.location.path}`);
-            if (d.fix)
-                lines.push(`    Fix:  ${d.fix.description}`);
-        }
-        lines.push("");
-    }
-    if (infos.length > 0) {
-        lines.push("--- Info & Hints ---");
-        for (const d of infos) {
-            lines.push(`  [${d.code}] (${d.source}) ${d.message}`);
-            lines.push(`    Path: ${d.location.path}`);
-        }
-    }
-    return lines.join("\n");
-}
+import{validateGuardData,MAX_DESCRIPTION_LENGTH,MAX_TABLE_SIZE}from'@wowok/wowok';import{assessGuardRisks}from'./guard-risk.js';import{findScene,inferSceneFromAction}from'./guard-ledger.js';import{suggestTemplateForScene}from'./guard-templates.js';function deepClone(a){return JSON['parse'](JSON['stringify'](a));}function rootToString(a){return JSON['stringify'](a);}function hasSignerContext(a){const b=rootToString(a);return b['includes']('\x22Signer\x22')||b['includes']('\x22context\x22:\x22Signer\x22')||b['includes']('\x22context\x22:\x20\x22Signer\x22');}function getSubmissionEntries(a){return a['filter'](b=>b['b_submission']===!![]);}function inferValueType(a){if(typeof a==='string'){if(a['startsWith']('0x')&&a['length']>=0x3)return'Address';return'String';}if(typeof a==='number'){if(Number['isInteger'](a)){if(a>=0x0&&a<=0xff)return'U8';if(a>=0x0&&a<=0xffff)return'U16';return'U64';}return'U256';}if(typeof a==='boolean')return'Bool';if(Array['isArray'](a)){if(a['length']>0x0){const b=inferValueType(a[0x0]);if(b==='Address')return'Vec<Address>';if(b==='String')return'Vec<String>';if(b==='Bool')return'Vec<Bool>';}return'Vec<Address>';}return undefined;}function sdkIssueToDiagnostic(a){return{'code':a['code'],'message':a['message'],'severity':a['severity'],'source':'sdk','location':{'path':a['path']},'fix':{'description':'SDK\x20validation\x20failed\x20('+(a['sdk_error']??'InvalidParam')+');\x20manual\x20fix\x20required','auto_fixable':![]}};}async function checkSdkSyntax(a){const b=a['table']['map'](d=>({'identifier':d['identifier'],'b_submission':d['b_submission']??![],'value_type':d['value_type']??'Address','value':d['value'],'name':d['name']??''})),c=await validateGuardData({'description':a['description'],'table':b,'root':a['root'],'rely':a['rely']});return c['map'](sdkIssueToDiagnostic);}function checkSemanticErrors(a){const b=[],{table:c,root:d,binding_hint:e}=a,f=e?findScene(e['host_object']??'',e['binding_field']??''):undefined,g=getSubmissionEntries(c);if(g['length']>0x0&&d&&!hasSignerContext(d)){const h=g['some'](j=>j['value_type']==='Address'),i=f?.['id']==='service_order_allocators_guard'&&e?.['sharing_recipients']!==undefined&&e['sharing_recipients']['length']>0x0&&!e['sharing_recipients']['includes']('Signer');if(h&&!i){const j=g['filter'](k=>k['value_type']==='Address')['map'](k=>c['indexOf'](k));b['push']({'code':'LE-04','message':'Submitted\x20data\x20has\x20no\x20Signer\x20binding\x20(submission\x20forgery\x20risk)','severity':'error','source':'lint','location':{'path':j['map'](k=>'/table/'+k)['join']('\x20→\x20')},'fix':{'description':'Add\x20logic_equal(context(Signer),\x20identifier[N])\x20in\x20root\x20to\x20bind\x20the\x20submitter\x20identity','auto_fixable':![]}});}}if(f?.['id']==='arbitration_voting_guard'){const k=g['some'](l=>['U8','U16','U32','U64','U128','U256']['includes'](l['value_type']??''));if(k){const l=g['filter'](m=>['U8','U16','U32','U64','U128','U256']['includes'](m['value_type']??''))['map'](m=>c['indexOf'](m));b['push']({'code':'LE-05','message':'voting_guard\x20voting\x20weight\x20comes\x20from\x20submitted\x20data\x20(weight\x20forgery\x20risk)','severity':'error','source':'lint','location':{'path':l['map'](m=>'/table/'+m)['join']('\x20→\x20')},'fix':{'description':'Derive\x20arbitrator\x20weights\x20from\x20the\x20Arb\x20object\x20via\x20witness\x20(e.g.\x20105\x20TypeArbArbitration)\x20rather\x20than\x20submitting\x20them\x20directly','auto_fixable':![]}});}}if(f?.['id']==='gen_passport_guard'||e?.['action']==='gen_passport'){const m=rootToString(d);if(m['includes']('1167')||m['includes']('repository.data')){const n=m['includes']('quote_guard');n&&b['push']({'code':'LE-06','message':'repository.data\x20query\x20with\x20quote_guard:\x20rigid\x20verification\x20requirement\x20—\x20ensure\x20Passport\x20includes\x20quote_guard\x20verification\x20with\x20necessary\x20submissions\x20(e.g.,\x20Payment\x20proof)','severity':'info','source':'lint','location':{'path':'/root'},'fix':{'description':'Ensure\x20the\x20quote_guard\x20is\x20verified:\x20user\x20submits\x20Payment\x20via\x20Passport,\x20quote_guard\x20verifies\x20Payment\x20fields,\x20repository\x20data\x20query\x20passes','auto_fixable':![]}});}}if(e?.['host_object']&&f){const o=e['host_object'],p=c['filter'](q=>!q['b_submission']&&q['value_type']==='Address'&&typeof q['value']==='string'&&q['value']['startsWith']('0x')&&q['object_type']===o);if(p['length']>0x0){const q=p['map'](r=>c['indexOf'](r));b['push']({'code':'LE-07','message':'Circular\x20reference\x20uses\x20an\x20address\x20rather\x20than\x20a\x20name\x20(Host\x20Object\x20may\x20not\x20be\x20published\x20yet\x20when\x20the\x20Guard\x20is\x20created)','severity':'error','source':'lint','location':{'path':q['map'](r=>'/table/'+r+'/value')['join']('\x20→\x20')},'fix':{'description':'Change\x20value\x20from\x20an\x20address\x20to\x20an\x20object\x20name\x20(e.g.\x20\x22service1\x22);\x20the\x20SDK\x20will\x20resolve\x20it\x20to\x20an\x20address\x20after\x20the\x20Host\x20Object\x20is\x20published','auto_fixable':![]}});}}return b;}function checkSyntaxHints(a){const b=[],{table:c}=a;(!a['description']||a['description']['trim']()==='')&&b['push']({'code':'SH-01','message':'description\x20is\x20missing\x20or\x20empty','severity':'info','source':'lint','location':{'path':'/description'},'fix':{'description':'Add\x20a\x20description,\x20e.g.\x20\x27Service\x20buy_guard:\x20whitelist\x20validation\x27','auto_fixable':!![]}});for(let d=0x0;d<c['length'];d++){const e=c[d];(!e['name']||e['name']['trim']()==='')&&b['push']({'code':'SH-03','message':'table['+d+']\x20is\x20missing\x20name','severity':'warning','source':'lint','location':{'path':'/table/'+d+'/name'},'fix':{'description':'Add\x20a\x20name,\x20e.g.\x20\x22data\x20entry\x20'+e['identifier']+'\x22','auto_fixable':!![]}});}for(let f=0x0;f<c['length'];f++){const g=c[f];!g['value_type']&&b['push']({'code':'SH-05','message':'table['+f+']\x20is\x20missing\x20value_type','severity':'warning','source':'lint','location':{'path':'/table/'+f+'/value_type'},'fix':{'description':'Infer\x20value_type\x20from\x20value\x20(e.g.\x20Address/String/U64,\x20etc.)','auto_fixable':!![]}});}c['length']>MAX_TABLE_SIZE&&b['push']({'code':'SH-07','message':'table\x20entry\x20count\x20'+c['length']+'\x20exceeds\x20the\x20maximum\x20limit\x20'+MAX_TABLE_SIZE,'severity':'error','source':'lint','location':{'path':'/table'},'fix':{'description':'Slim\x20down\x20the\x20table\x20by\x20merging\x20similar\x20entries,\x20or\x20split\x20into\x20multiple\x20Guards\x20+\x20rely','auto_fixable':![]}});for(let h=0x0;h<c['length'];h++){c[h]['b_submission']===undefined&&b['push']({'code':'SH-10','message':'table['+h+']\x20b_submission\x20is\x20missing','severity':'info','source':'lint','location':{'path':'/table/'+h+'/b_submission'},'fix':{'description':'Set\x20to\x20false\x20(constant)\x20or\x20true\x20(submitted\x20data)','auto_fixable':!![]}});}for(let j=0x0;j<c['length'];j++){const k=c[j];k['b_submission']===!![]&&k['value']!==undefined&&k['value']!==null&&b['push']({'code':'SH-11','message':'table['+j+']\x20has\x20a\x20redundant\x20value\x20field\x20on\x20b_submission=true\x20entry\x20(the\x20verifier\x20supplies\x20the\x20value\x20at\x20runtime;\x20this\x20value\x20is\x20ignored\x20by\x20BCS\x20encoding\x20and\x20wastes\x20gas)','severity':'warning','source':'lint','location':{'path':'/table/'+j+'/value'},'fix':{'description':'Remove\x20the\x20value\x20field\x20—\x20it\x20is\x20ignored\x20for\x20b_submission=true\x20entries','auto_fixable':!![]}});}return b;}function checkSuggestions(a){const b=[],{root:c,binding_hint:d,table:e}=a;if(c){const g=rootToString(c);if(g['includes']('vec_contains_address')&&g['includes']('Signer'))b['push']({'code':'SG-01','message':'Matches\x20Pattern\x20P04\x20(whitelist\x20validation)','severity':'hint','source':'lint','location':{'path':'/root'},'fix':{'description':'Refer\x20to\x20the\x20P04\x20Pattern\x20to\x20ensure\x20best\x20practices','auto_fixable':![]}});else{if(g['includes']('logic_equal')&&g['includes']('Signer')){const h=e['some'](i=>!i['b_submission']&&i['value_type']==='Address'&&typeof i['value']==='string'&&i['value']['length']>0x0);h&&b['push']({'code':'SG-01','message':'Matches\x20Pattern\x20P04\x20(whitelist\x20validation\x20—\x20single-address\x20variant)','severity':'hint','source':'lint','location':{'path':'/root'},'fix':{'description':'P04\x20single-address\x20form;\x20for\x20multi-address\x20scenarios,\x20consider\x20vec_contains_address','auto_fixable':![]}});}}(g['includes']('logic_as_u256_greater')||g['includes']('logic_as_u256_lesser'))&&b['push']({'code':'SG-01','message':'Matches\x20Pattern\x20P02\x20(numeric\x20threshold\x20validation)','severity':'hint','source':'lint','location':{'path':'/root'},'fix':{'description':'Suitable\x20for\x20amount/quantity\x20threshold\x20validation\x20scenarios','auto_fixable':![]}}),g['includes']('convert_witness')&&b['push']({'code':'SG-01','message':'Matches\x20Pattern\x20P09\x20(witness-derived\x20validation)','severity':'hint','source':'lint','location':{'path':'/root'},'fix':{'description':'Suitable\x20for\x20cross-object\x20relationship\x20validation\x20(e.g.\x20Order→Progress)','auto_fixable':![]}});}if(d?.['action']){const i=['buy','forward','allocate','claim_reward','vote','dispute','write_repository','submit_progress','gen_passport'];if(i['includes'](d['action'])){const j=inferSceneFromAction(d['action']);if(j){const k=suggestTemplateForScene(j['id']);k&&b['push']({'code':'SG-02','message':'Recommended\x20scene\x20template:\x20'+k['name'],'severity':'hint','source':'lint','location':{'path':'/'},'fix':{'description':'Refer\x20to\x20template\x20'+k['id']+'\x20('+k['example_use_case']+')','auto_fixable':![]}});}}}const f=getSubmissionEntries(e);for(const l of f){const m=l['name']??'';if(m['length']<0xa||/^[a-z_]+$/i['test'](m)){const n=e['indexOf'](l);b['push']({'code':'SG-03','message':'table['+n+']\x20submitted\x20data\x20has\x20a\x20vague\x20name\x20description','severity':'info','source':'lint','location':{'path':'/table/'+n+'/name'},'fix':{'description':'Use\x20a\x20full\x20natural-language\x20description\x20(≥10\x20characters),\x20e.g.\x20\x27user-submitted\x20operation\x20type\x20(return/damage)\x27','auto_fixable':![]}});}}if(c){const o=rootToString(c),p=o['includes']('proof.signer'),q=o['includes']('proof.time'),r=o['includes']('calc_string_length'),s=f['some'](t=>t['value_type']==='String');if(p&&q)b['push']({'code':'SG-04','message':'Strict-mode\x20privacy-delivery\x20guard\x20detected\x20(proof.signer\x20+\x20proof.time).\x20'+'Recommended\x20three\x20conditions:\x20Signer==proof.signer\x20(submitter\x20accountability),\x20'+'proof.time>order.time\x20(freshness),\x20order.service==service\x20(project\x20binding).\x20'+'No\x20content\x20verification\x20—\x20only\x20submission\x20responsibility\x20(\x27whoever\x20benefits\x20bears\x20the\x20burden\x20of\x20proof\x27).','severity':'info','source':'lint','location':{'path':'/root'},'fix':{'description':'Ensure\x20all\x20three\x20conditions\x20are\x20present\x20(logic_and).\x20Refer\x20to\x20template\x20tpl_forward_privacy_delivery_proof.\x20'+'Query\x20IDs:\x20proof.signer=1958,\x20proof.time=1960,\x20order.time=1574,\x20order.service=1563.','auto_fixable':![]}});else r&&s&&b['push']({'code':'SG-04','message':'Broad-mode\x20privacy-delivery\x20guard\x20detected\x20(String\x20submission\x20+\x20length\x20check,\x20e.g.\x20Merkle\x20Root\x20length\x20==\x2066).\x20'+'This\x20trusts\x20the\x20submitter\x27s\x20honesty;\x20the\x20counterparty\x20can\x20dispute\x20by\x20checking\x20their\x20own\x20Messenger\x20conversation.\x20'+'Suitable\x20as\x20an\x20arbitration\x20basis,\x20not\x20a\x20fund-flow\x20gate.','severity':'info','source':'lint','location':{'path':'/root'},'fix':{'description':'For\x20stronger\x20assurance,\x20consider\x20strict\x20mode:\x20submit\x20a\x20Proof\x20object\x20address\x20(from\x20messenger.submitChainProof)\x20+\x20'+'Order\x20address,\x20then\x20verify\x20proof.signer/proof.time/order.service.\x20See\x20template\x20tpl_forward_privacy_delivery_proof.','auto_fixable':![]}});}return b;}export function autoFixGuard(a){const b=deepClone(a),c=[];(!b['description']||b['description']['trim']()==='')&&(b['description']='Guard\x20(table:\x20'+b['table']['length']+'\x20items,\x20root:\x20'+(b['root']?.['type']??'unknown')+')',c['push']({'diagnostic_code':'SH-01','description':'Fill\x20in\x20default\x20description','after':b['description'],'path':'/description'}));if(b['description']&&b['description']['length']>MAX_DESCRIPTION_LENGTH){const f=b['description'];b['description']=b['description']['substring'](0x0,MAX_DESCRIPTION_LENGTH),c['push']({'diagnostic_code':'G-001','description':'Truncate\x20description\x20to\x20'+MAX_DESCRIPTION_LENGTH+'\x20characters','before':f['length']+'\x20characters','after':b['description']['length']+'\x20characters','path':'/description'});}for(let g=0x0;g<b['table']['length'];g++){const h=b['table'][g];(!h['name']||h['name']['trim']()==='')&&(h['name']='data\x20entry\x20'+h['identifier'],c['push']({'diagnostic_code':'SH-03','description':'table['+g+']\x20fill\x20in\x20name','after':h['name'],'path':'/table/'+g+'/name'}));}for(let j=0x0;j<b['table']['length'];j++){const k=b['table'][j];if(!k['value_type']&&k['value']!==undefined&&k['value']!==null){const l=inferValueType(k['value']);l&&(k['value_type']=l,c['push']({'diagnostic_code':'SH-05','description':'table['+j+']\x20infer\x20value_type','after':l,'path':'/table/'+j+'/value_type'}));}}const d=new Map();let e=0x0;for(let m=0x0;m<b['table']['length'];m++){const n=b['table'][m];if(!d['has'](n['identifier']))d['set'](n['identifier'],e),n['identifier']!==e&&c['push']({'diagnostic_code':'G-007','description':'table['+m+']\x20identifier\x20'+n['identifier']+'\x20→\x20'+e,'before':String(n['identifier']),'after':String(e),'path':'/table/'+m+'/identifier'}),n['identifier']=e,e++;else{const o=n['identifier'];n['identifier']=e,d['set'](o,e),c['push']({'diagnostic_code':'G-007','description':'table['+m+']\x20identifier\x20'+o+'\x20duplicate\x20→\x20reallocated\x20to\x20'+e,'before':String(o),'after':String(e),'path':'/table/'+m+'/identifier'}),e++;}}for(let p=0x0;p<b['table']['length'];p++){const q=b['table'][p];q['b_submission']===undefined&&(q['b_submission']=![],c['push']({'diagnostic_code':'SH-10','description':'table['+p+']\x20b_submission\x20default\x20set\x20to\x20false','after':'false','path':'/table/'+p+'/b_submission'}));}if(b['rely']?.['guards']&&b['rely']['guards']['length']>0x0){const r=[...new Set(b['rely']['guards'])];r['length']!==b['rely']['guards']['length']&&(c['push']({'diagnostic_code':'G-009','description':'rely\x20deduplicate:\x20'+b['rely']['guards']['length']+'\x20→\x20'+r['length'],'before':JSON['stringify'](b['rely']['guards']),'after':JSON['stringify'](r),'path':'/rely/guards'}),b['rely']['guards']=r);}for(let s=0x0;s<b['table']['length'];s++){const t=b['table'][s];if(t['b_submission']===!![]&&t['value']!==undefined&&t['value']!==null){const u=JSON['stringify'](t['value']);delete t['value'],c['push']({'diagnostic_code':'SH-11','description':'table['+s+']\x20remove\x20redundant\x20value\x20on\x20b_submission=true\x20entry','before':u,'after':'(removed)','path':'/table/'+s+'/value'});}}return{'fixed':b,'actions':c};}export async function lintGuard(a,b){const c=b?.['auto_fix']??!![],{table:d,root:e,rely:f,binding_hint:g}=a,h=[];let i;const j=await checkSdkSyntax(a);h['push'](...j);const k=checkSemanticErrors(a);h['push'](...k);const l=checkSyntaxHints(a);h['push'](...l);let m,n=[];if(c){const {fixed:v,actions:w}=autoFixGuard(a);w['length']>0x0&&(m=v,n=w);}if(d['length']>0x0&&e){const x=g?findScene(g['host_object']??'',g['binding_field']??''):undefined,y=d['map'](z=>({'identifier':z['identifier'],'b_submission':z['b_submission']??![],'value_type':z['value_type']??'Address','value':z['value'],'name':z['name'],'object_type':z['object_type']}));i=assessGuardRisks({'table':y,'root':e,'rely':f,'scene':x,'sharing_recipients':g?.['sharing_recipients']});for(const z of i['risks']){const A=z['level']==='critical'||z['level']==='high'?'error':z['level']==='medium'?'warning':z['level']==='low'?'info':'hint',B=z['evidence']??'',C=B['startsWith']('/')?B:'/';h['push']({'code':z['id'],'message':'['+z['level']+']\x20'+z['title'],'severity':A,'source':'risk','location':{'path':C},'fix':{'description':z['mitigation'],'auto_fixable':![]}});}}const o=checkSuggestions(a);h['push'](...o);const p=h['filter'](D=>D['severity']==='error')['length'],q=h['filter'](D=>D['severity']==='warning')['length'],s=h['filter'](D=>D['severity']==='info'||D['severity']==='hint')['length'],t=p===0x0;let u;if(p>0x0)u='Fix\x20'+p+'\x20error(s)\x20and\x20re-run\x20lint';else q>0x0?u='Consider\x20addressing\x20'+q+'\x20warning(s),\x20then\x20submit\x20to\x20SDK\x20newGuard()\x20for\x20final\x20syntax\x20validation':u='lint\x20passed\x20(no\x20errors);\x20submit\x20to\x20SDK\x20newGuard()\x20for\x20final\x20syntax\x20validation\x20before\x20going\x20on-chain';return{'json_summary':{'table_count':d['length'],'root_type':e?.['type']??'unknown','has_rely':!!f?.['guards']?.['length'],'rely_count':f?.['guards']?.['length']??0x0,'has_description':!!a['description']},'diagnostics':h,'fixed_json':m,'fix_actions':n,'risk_assessment':i,'summary':{'errors':p,'warnings':q,'infos':s,'auto_fixes_applied':n['length'],'ready':t,'next_step':u}};}export async function isGuardReady(a){const b=await lintGuard(a,{'auto_fix':![]});return b['summary']['ready'];}export async function getGuardErrors(a){const b=await lintGuard(a,{'auto_fix':![]});return b['diagnostics']['filter'](c=>c['severity']==='error');}export function formatLintResult(a){const b=[];b['push']('===\x20Guard\x20JSON\x20Lint\x20Report\x20==='),b['push'](''),b['push']('Summary:'),b['push']('\x20\x20Errors:\x20\x20\x20\x20\x20'+a['summary']['errors']),b['push']('\x20\x20Warnings:\x20\x20\x20'+a['summary']['warnings']),b['push']('\x20\x20Infos:\x20\x20\x20\x20\x20\x20'+a['summary']['infos']),b['push']('\x20\x20Auto-fixes:\x20'+a['summary']['auto_fixes_applied']),b['push']('\x20\x20Ready:\x20\x20\x20\x20\x20\x20'+(a['summary']['ready']?'YES':'NO')),b['push']('\x20\x20Next\x20step:\x20\x20'+a['summary']['next_step']),b['push']('');if(a['fix_actions']['length']>0x0){b['push']('---\x20Auto-fix\x20Actions\x20---');for(const g of a['fix_actions']){b['push']('\x20\x20['+g['diagnostic_code']+']\x20'+g['description']),b['push']('\x20\x20\x20\x20Path:\x20'+g['path']),g['before']&&g['after']&&b['push']('\x20\x20\x20\x20'+g['before']+'\x20->\x20'+g['after']);}b['push']('');}const c=a['diagnostics']['filter'](h=>h['severity']==='error'),e=a['diagnostics']['filter'](h=>h['severity']==='warning'),f=a['diagnostics']['filter'](h=>h['severity']==='info'||h['severity']==='hint');if(c['length']>0x0){b['push']('---\x20Errors\x20(must\x20fix)\x20---');for(const h of c){b['push']('\x20\x20['+h['code']+']\x20('+h['source']+')\x20'+h['message']),b['push']('\x20\x20\x20\x20Path:\x20'+h['location']['path']);if(h['fix'])b['push']('\x20\x20\x20\x20Fix:\x20\x20'+h['fix']['description']);}b['push']('');}if(e['length']>0x0){b['push']('---\x20Warnings\x20(consider\x20fixing)\x20---');for(const i of e){b['push']('\x20\x20['+i['code']+']\x20('+i['source']+')\x20'+i['message']),b['push']('\x20\x20\x20\x20Path:\x20'+i['location']['path']);if(i['fix'])b['push']('\x20\x20\x20\x20Fix:\x20\x20'+i['fix']['description']);}b['push']('');}if(f['length']>0x0){b['push']('---\x20Info\x20&\x20Hints\x20---');for(const j of f){b['push']('\x20\x20['+j['code']+']\x20('+j['source']+')\x20'+j['message']),b['push']('\x20\x20\x20\x20Path:\x20'+j['location']['path']);}}return b['join']('\x0a');}