@wowok/agent-mcp 2.7.1 → 2.7.2

package/dist/knowledge/overrides-loader.js

@@ -1,65 +1 @@
-import { readFileSync, existsSync, readdirSync } from "fs";
-import { join } from "path";
-import { getWowMcpDir } from "@wowok/wowok";
-function wowokRootDir() {
-    return getWowMcpDir();
-}
-function overridesDir() {
-    return join(wowokRootDir(), "overrides");
-}
-let overrideCache;
-export function loadOverrides(forceReload = false) {
-    if (overrideCache && !forceReload)
-        return overrideCache;
-    const config = {};
-    const dir = overridesDir();
-    if (!existsSync(dir)) {
-        overrideCache = config;
-        return config;
-    }
-    const categories = [
-        "risk-thresholds",
-        "descriptions",
-        "industry-profiles",
-        "scenario-defaults",
-        "recovery-priorities",
-    ];
-    for (const cat of categories) {
-        const filePath = join(dir, `${cat}.json`);
-        if (!existsSync(filePath))
-            continue;
-        try {
-            const raw = readFileSync(filePath, "utf-8");
-            const parsed = JSON.parse(raw);
-            const { _last_applied_proposal, _last_applied_at, ...userFields } = parsed;
-            void _last_applied_proposal;
-            void _last_applied_at;
-            config[cat] = userFields;
-        }
-        catch {
-        }
-    }
-    overrideCache = config;
-    return config;
-}
-export function getOverride(category) {
-    const config = loadOverrides();
-    return config[category];
-}
-export function clearOverrideCache() {
-    overrideCache = undefined;
-}
-export function listOverrideFiles() {
-    const dir = overridesDir();
-    if (!existsSync(dir))
-        return [];
-    try {
-        return readdirSync(dir).filter((f) => f.endsWith(".json"));
-    }
-    catch {
-        return [];
-    }
-}
-export function getOverridesDirPath() {
-    return overridesDir();
-}
+import{readFileSync,existsSync,readdirSync}from'fs';import{join}from'path';import{getWowMcpDir}from'@wowok/wowok';function wowokRootDir(){return getWowMcpDir();}function overridesDir(){return join(wowokRootDir(),'overrides');}let overrideCache;export function loadOverrides(a=![]){if(overrideCache&&!a)return overrideCache;const b={},c=overridesDir();if(!existsSync(c))return overrideCache=b,b;const d=['risk-thresholds','descriptions','industry-profiles','scenario-defaults','recovery-priorities'];for(const e of d){const f=join(c,e+'.json');if(!existsSync(f))continue;try{const g=readFileSync(f,'utf-8'),h=JSON['parse'](g),{_last_applied_proposal:i,_last_applied_at:j,...k}=h;void i,void j,b[e]=k;}catch{}}return overrideCache=b,b;}export function getOverride(a){const b=loadOverrides();return b[a];}export function clearOverrideCache(){overrideCache=undefined;}export function listOverrideFiles(){const a=overridesDir();if(!existsSync(a))return[];try{return readdirSync(a)['filter'](b=>b['endsWith']('.json'));}catch{return[];}}export function getOverridesDirPath(){return overridesDir();}

package/dist/knowledge/passport-confirm.js

@@ -1,531 +1 @@
-import { MAX_GUARD_COUNT_PASSPORT, MAX_SUBMISSION_SIZE_PASSPORT, PASSPORT_ERROR_CODES, } from "./passport-ledger.js";
-import { assessPassportRisks, } from "./passport-risk.js";
-export const PASSPORT_CONFIRMATION_RULES = {
-    creation: [
-        {
-            id: "C-PASS-01",
-            check: "Confirm Clock object is accessible (new requires Clock argument)",
-            severity: "HIGH",
-            action: "block",
-            layer: "creation",
-        },
-        {
-            id: "C-PASS-02",
-            check: "Confirm current transaction context is valid (tx_hash will bind to this transaction)",
-            severity: "CRITICAL",
-            action: "block",
-            layer: "creation",
-        },
-    ],
-    operation: [
-        {
-            id: "C-PASS-03",
-            check: "guard_add: confirm has_verified=false (E_HAS_VERIFIED)",
-            severity: "CRITICAL",
-            action: "block",
-            related_error: "E_HAS_VERIFIED (4)",
-            layer: "operation",
-        },
-        {
-            id: "C-PASS-04",
-            check: "guard_add: confirm tx_hash matches current transaction (E_DIGEST_NOT_MATCH)",
-            severity: "CRITICAL",
-            action: "block",
-            related_error: "E_DIGEST_NOT_MATCH (11)",
-            layer: "operation",
-        },
-        {
-            id: "C-PASS-05",
-            check: "guard_add: confirm depended-on Guards already added (E_RELIES_GUARD_NOT_ADDED)",
-            severity: "HIGH",
-            action: "block",
-            related_error: "E_RELIES_GUARD_NOT_ADDED (2)",
-            layer: "operation",
-        },
-        {
-            id: "C-PASS-06",
-            check: "guard_add: warn Guard count approaching MAX_GUARD_COUNT=20 limit",
-            severity: "MEDIUM",
-            action: "warn",
-            related_error: "E_GUARD_COUNT_EXCEEDED (1)",
-            layer: "operation",
-        },
-        {
-            id: "C-PASS-07",
-            check: "guard_add: warn impack Guard failure will cause overall result=false",
-            severity: "HIGH",
-            action: "warn",
-            layer: "operation",
-        },
-        {
-            id: "C-PASS-08",
-            check: "guard_add: warn submission serialized size must be ≤ 256 bytes",
-            severity: "MEDIUM",
-            action: "warn",
-            related_error: "E_SUBMISSION_SIZE_EXCEEDED (3)",
-            layer: "operation",
-        },
-        {
-            id: "C-PASS-09",
-            check: "verify: warn this is a one-time operation; after verify, configuration cannot be modified",
-            severity: "HIGH",
-            action: "confirm_twice",
-            related_error: "E_HAS_VERIFIED (4)",
-            layer: "operation",
-        },
-        {
-            id: "C-PASS-10",
-            check: "verify: confirm at least 1 impack Guard exists (E_IMPACK_GUARD_NOT_FOUND)",
-            severity: "CRITICAL",
-            action: "block",
-            related_error: "E_IMPACK_GUARD_NOT_FOUND (9)",
-            layer: "operation",
-        },
-        {
-            id: "C-PASS-11",
-            check: "guard_clear: warn this will clear all Guards (allowed before verify)",
-            severity: "MEDIUM",
-            action: "confirm_twice",
-            layer: "operation",
-        },
-        {
-            id: "C-PASS-12",
-            check: "freezen: warn after freezing, Passport is permanently retained and cannot be destroyed",
-            severity: "MEDIUM",
-            action: "confirm_twice",
-            layer: "operation",
-        },
-        {
-            id: "C-PASS-13",
-            check: "destroy: warn Passport cannot be recovered after destruction (must be before freeze)",
-            severity: "HIGH",
-            action: "confirm_twice",
-            layer: "operation",
-        },
-    ],
-    consistency: [
-        {
-            id: "C-PASS-14",
-            check: "Confirm Passport object is not frozen (no operations allowed after freeze)",
-            severity: "HIGH",
-            action: "block",
-            layer: "consistency",
-        },
-        {
-            id: "C-PASS-15",
-            check: "Confirm referenced Guard objects have not been deleted",
-            severity: "HIGH",
-            action: "block",
-            layer: "consistency",
-        },
-        {
-            id: "C-PASS-16",
-            check: "Confirm has_verified=true when querying result (E_NOT_VERIFIED)",
-            severity: "HIGH",
-            action: "block",
-            related_error: "E_NOT_VERIFIED (5)",
-            layer: "consistency",
-        },
-        {
-            id: "C-PASS-17",
-            check: "Confirm tx_hash matches current transaction when querying result (E_TX_NOT_MATCH)",
-            severity: "CRITICAL",
-            action: "block",
-            related_error: "E_TX_NOT_MATCH (8)",
-            layer: "consistency",
-        },
-        {
-            id: "C-PASS-18",
-            check: "Info: relies dependencies (avoid circular dependencies)",
-            severity: "INFO",
-            action: "info",
-            layer: "consistency",
-        },
-        {
-            id: "C-PASS-19",
-            check: "Warn: non-impack Guard result does not affect final result",
-            severity: "INFO",
-            action: "info",
-            layer: "consistency",
-        },
-        {
-            id: "C-PASS-20",
-            check: "Info: Passport emits no events; status must be queried actively",
-            severity: "INFO",
-            action: "info",
-            layer: "consistency",
-        },
-    ],
-};
-export function preCheckPassportCreation(input) {
-    const errors = [];
-    const warnings = [];
-    const requiresConfirmation = [];
-    if (!input.clock) {
-        errors.push("Clock object is required for Passport creation (C-PASS-01, passport::new requires Clock argument)");
-    }
-    if (!input.txDigest) {
-        errors.push("Valid transaction context required — tx_hash will bind to this transaction (C-PASS-02)");
-    }
-    return {
-        errors,
-        warnings,
-        requiresConfirmation,
-        canProceed: errors.length === 0,
-    };
-}
-export function preCheckPassportOperation(input) {
-    const errors = [];
-    const warnings = [];
-    const requiresConfirmation = [];
-    const { passport, operation, guardObjects } = input;
-    switch (operation.type) {
-        case "guard_add": {
-            if (passport.has_verified) {
-                errors.push(`Passport already verified, cannot add guard (C-PASS-03, E_HAS_VERIFIED=${PASSPORT_ERROR_CODES.E_HAS_VERIFIED})`);
-                break;
-            }
-            warnings.push(`tx_hash must match current transaction (C-PASS-04, E_DIGEST_NOT_MATCH=${PASSPORT_ERROR_CODES.E_DIGEST_NOT_MATCH})`);
-            const guardObj = guardObjects.get(operation.guard);
-            if (guardObj?.relies && guardObj.relies.length > 0) {
-                for (const relyAddr of guardObj.relies) {
-                    const relyAdded = passport.info.some(g => g.guard === relyAddr);
-                    if (!relyAdded) {
-                        errors.push(`Dependency Guard ${relyAddr} not added yet (C-PASS-05, E_RELIES_GUARD_NOT_ADDED=${PASSPORT_ERROR_CODES.E_RELIES_GUARD_NOT_ADDED})`);
-                    }
-                }
-            }
-            if (passport.info.length >= MAX_GUARD_COUNT_PASSPORT) {
-                errors.push(`Guard count ${passport.info.length} >= MAX_GUARD_COUNT_PASSPORT=${MAX_GUARD_COUNT_PASSPORT} (C-PASS-06, E_GUARD_COUNT_EXCEEDED=${PASSPORT_ERROR_CODES.E_GUARD_COUNT_EXCEEDED})`);
-            }
-            else if (passport.info.length >= MAX_GUARD_COUNT_PASSPORT - 5) {
-                warnings.push(`Guard count ${passport.info.length} approaching limit ${MAX_GUARD_COUNT_PASSPORT} (C-PASS-06)`);
-            }
-            if (operation.impack) {
-                warnings.push("impack=true Guard failure will cause overall result=false (C-PASS-07)");
-            }
-            if (operation.submission) {
-                const estimatedSize = estimateSubmissionSize(operation.submission);
-                if (estimatedSize > MAX_SUBMISSION_SIZE_PASSPORT) {
-                    errors.push(`Submission size ${estimatedSize} > MAX_SUBMISSION_SIZE_PASSPORT=${MAX_SUBMISSION_SIZE_PASSPORT} (C-PASS-08, E_SUBMISSION_SIZE_EXCEEDED=${PASSPORT_ERROR_CODES.E_SUBMISSION_SIZE_EXCEEDED})`);
-                }
-                else if (estimatedSize > MAX_SUBMISSION_SIZE_PASSPORT * 0.8) {
-                    warnings.push(`Submission size ${estimatedSize} approaching limit ${MAX_SUBMISSION_SIZE_PASSPORT} (C-PASS-08)`);
-                }
-            }
-            break;
-        }
-        case "verify": {
-            requiresConfirmation.push("WARNING: verify is ONE-TIME operation. After verify, guard configuration cannot be modified. Type 'CONFIRM' to proceed. (C-PASS-09)");
-            const hasImpack = passport.info.some(g => g.impack);
-            if (!hasImpack) {
-                errors.push(`No impack Guard found, verify will fail (C-PASS-10, E_IMPACK_GUARD_NOT_FOUND=${PASSPORT_ERROR_CODES.E_IMPACK_GUARD_NOT_FOUND})`);
-            }
-            break;
-        }
-        case "guard_clear": {
-            requiresConfirmation.push(`WARNING: guard_clear will remove all ${passport.info.length} guards. Type 'CONFIRM' to proceed. (C-PASS-11)`);
-            if (passport.has_verified) {
-                errors.push(`Passport already verified, cannot clear guards (C-PASS-11, E_HAS_VERIFIED=${PASSPORT_ERROR_CODES.E_HAS_VERIFIED})`);
-            }
-            break;
-        }
-        case "freezen": {
-            requiresConfirmation.push("WARNING: freezen will PERMANENTLY freeze the Passport. It cannot be destroyed after freezing. Type 'CONFIRM' to proceed. (C-PASS-12)");
-            break;
-        }
-        case "destroy": {
-            requiresConfirmation.push("WARNING: destroy will delete the Passport permanently. This must be done BEFORE freezing. Type 'CONFIRM' to proceed. (C-PASS-13)");
-            break;
-        }
-        case "result_query":
-        case "result_for_guard":
-        case "result_for_permission": {
-            if (!passport.has_verified) {
-                errors.push(`result query requires has_verified=true (C-PASS-16, E_NOT_VERIFIED=${PASSPORT_ERROR_CODES.E_NOT_VERIFIED})`);
-            }
-            warnings.push(`result query requires tx_hash match current transaction (C-PASS-17, E_TX_NOT_MATCH=${PASSPORT_ERROR_CODES.E_TX_NOT_MATCH})`);
-            if (operation.type === "result_for_guard") {
-                const guardInfo = passport.info.find(g => g.guard === operation.guard);
-                if (!guardInfo) {
-                    errors.push(`Guard ${operation.guard} not found in Passport (C-PASS-15)`);
-                }
-                else if (!guardInfo.impack) {
-                    errors.push(`Guard ${operation.guard} is not impack, result_for_guard will abort (C-PASS-10, E_NOT_IMPACK_GUARD=${PASSPORT_ERROR_CODES.E_NOT_IMPACK_GUARD})`);
-                }
-            }
-            break;
-        }
-        case "submission_get": {
-            break;
-        }
-    }
-    return {
-        errors,
-        warnings,
-        requiresConfirmation,
-        canProceed: errors.length === 0,
-    };
-}
-export function checkPassportStateConsistency(input) {
-    const errors = [];
-    const warnings = [];
-    const { passport, guardObjects, isFrozen } = input;
-    if (isFrozen) {
-        errors.push("Passport is frozen (immutable), no write operations permitted (C-PASS-14)");
-    }
-    for (const g of passport.info) {
-        if (!guardObjects.has(g.guard)) {
-            warnings.push(`Guard ${g.guard} not found, verification may fail (C-PASS-15)`);
-        }
-    }
-    if (!passport.has_verified) {
-        warnings.push("Passport not yet verified — result queries will fail (C-PASS-16, E_NOT_VERIFIED)");
-    }
-    for (const g of passport.info) {
-        const guardObj = guardObjects.get(g.guard);
-        if (guardObj?.relies && guardObj.relies.length > 0) {
-            const logic = guardObj.relies_logic_and === false ? "OR" : "AND";
-            warnings.push(`Guard ${g.guard} relies on ${guardObj.relies.length} guards (${logic} logic) (C-PASS-18)`);
-        }
-    }
-    const nonImpack = passport.info.filter(g => !g.impack);
-    if (nonImpack.length > 0) {
-        warnings.push(`${nonImpack.length} non-impack guards will not affect final result (C-PASS-19)`);
-    }
-    warnings.push("Passport does not emit events, must query object state directly (C-PASS-20)");
-    return {
-        errors,
-        warnings,
-        requiresConfirmation: [],
-        canProceed: errors.length === 0,
-    };
-}
-export const PASSPORT_CONFIRM_VERSION = "1.0.0";
-export function runPassportConfirmGate(input) {
-    const layersPassed = [];
-    const layersFailed = [];
-    let riskAssessment;
-    if (input.creation_input) {
-        const creationResult = preCheckPassportCreation(input.creation_input);
-        if (!creationResult.canProceed) {
-            layersFailed.push("L1_creation");
-            return {
-                status: "blocked_creation",
-                creation_result: creationResult,
-                risk_assessment: riskAssessment,
-                confirmation_text: generateConfirmationText(input, creationResult),
-                block_reason: `Creation blocked: ${creationResult.errors.join("; ")}`,
-                decision_record: {
-                    timestamp: new Date().toISOString(),
-                    gate_version: PASSPORT_CONFIRM_VERSION,
-                    final_status: "blocked_creation",
-                    layers_passed: layersPassed,
-                    layers_failed: layersFailed,
-                },
-            };
-        }
-        layersPassed.push("L1_creation");
-    }
-    if (input.operation_input) {
-        const opResult = preCheckPassportOperation(input.operation_input);
-        if (!opResult.canProceed) {
-            layersFailed.push("L2_operation");
-            return {
-                status: "blocked_operation",
-                operation_result: opResult,
-                risk_assessment: riskAssessment,
-                confirmation_text: generateConfirmationText(input, undefined, opResult),
-                block_reason: `Operation blocked: ${opResult.errors.join("; ")}`,
-                decision_record: {
-                    timestamp: new Date().toISOString(),
-                    gate_version: PASSPORT_CONFIRM_VERSION,
-                    final_status: "blocked_operation",
-                    layers_passed: layersPassed,
-                    layers_failed: layersFailed,
-                },
-            };
-        }
-        if (!input.skip_user_confirmation && opResult.requiresConfirmation.length > 0) {
-            layersFailed.push("L2_operation_pending_confirmation");
-            return {
-                status: "pending_confirmation",
-                operation_result: opResult,
-                risk_assessment: riskAssessment,
-                confirmation_text: generateConfirmationText(input, undefined, opResult),
-                block_reason: `User confirmation required: ${opResult.requiresConfirmation.length} item(s)`,
-                decision_record: {
-                    timestamp: new Date().toISOString(),
-                    gate_version: PASSPORT_CONFIRM_VERSION,
-                    final_status: "pending_confirmation",
-                    layers_passed: layersPassed,
-                    layers_failed: layersFailed,
-                },
-            };
-        }
-        layersPassed.push("L2_operation");
-    }
-    if (input.consistency_input) {
-        const consResult = checkPassportStateConsistency(input.consistency_input);
-        if (!consResult.canProceed) {
-            layersFailed.push("L3_consistency");
-            return {
-                status: "blocked_consistency",
-                consistency_result: consResult,
-                risk_assessment: riskAssessment,
-                confirmation_text: generateConfirmationText(input, undefined, undefined, consResult),
-                block_reason: `Consistency blocked: ${consResult.errors.join("; ")}`,
-                decision_record: {
-                    timestamp: new Date().toISOString(),
-                    gate_version: PASSPORT_CONFIRM_VERSION,
-                    final_status: "blocked_consistency",
-                    layers_passed: layersPassed,
-                    layers_failed: layersFailed,
-                },
-            };
-        }
-        layersPassed.push("L3_consistency");
-    }
-    if (!input.skip_risk_assessment && input.operation_input) {
-        const riskCtx = {
-            object: input.operation_input.passport.object,
-            has_verified: input.operation_input.passport.has_verified,
-            guard_count: input.operation_input.passport.info.length,
-            has_impack_guard: input.operation_input.passport.info.some(g => g.impack),
-            operation_type: input.operation_input.operation.type === "guard_add" ? "guard_add"
-                : input.operation_input.operation.type === "verify" ? "verify"
-                    : input.operation_input.operation.type === "freezen" ? "freezen"
-                        : input.operation_input.operation.type === "destroy" ? "destroy"
-                            : "use",
-            is_frozen: input.consistency_input?.isFrozen ?? false,
-            matched_scenario: input.scenario,
-            constants_synced: true,
-            knowledge_files_present: true,
-        };
-        riskAssessment = assessPassportRisks(riskCtx);
-    }
-    return {
-        status: "approved",
-        creation_result: input.creation_input ? preCheckPassportCreation(input.creation_input) : undefined,
-        operation_result: input.operation_input ? preCheckPassportOperation(input.operation_input) : undefined,
-        consistency_result: input.consistency_input ? checkPassportStateConsistency(input.consistency_input) : undefined,
-        risk_assessment: riskAssessment,
-        confirmation_text: generateConfirmationText(input),
-        decision_record: {
-            timestamp: new Date().toISOString(),
-            gate_version: PASSPORT_CONFIRM_VERSION,
-            final_status: "approved",
-            layers_passed: layersPassed,
-            layers_failed: layersFailed,
-        },
-    };
-}
-function generateConfirmationText(input, creation, operation, consistency) {
-    const lines = [];
-    lines.push("═══ Passport Confirmation ═══");
-    lines.push("");
-    if (input.scenario) {
-        lines.push(`Scenario: ${input.scenario.name}`);
-        lines.push(`Consumer: ${input.scenario.consumer_object} (${input.scenario.sdk_entry})`);
-        lines.push(`Purpose: ${input.scenario.passport_purpose}`);
-        lines.push("");
-    }
-    if (creation) {
-        lines.push("─ Layer 1: Creation ──────────────");
-        if (creation.errors.length > 0) {
-            for (const e of creation.errors)
-                lines.push(`  ✗ ${e}`);
-        }
-        else {
-            lines.push("  ✓ All creation checks passed");
-        }
-        lines.push("");
-    }
-    if (operation) {
-        lines.push("─ Layer 2: Operation ──────────────");
-        if (operation.errors.length > 0) {
-            for (const e of operation.errors)
-                lines.push(`  ✗ ${e}`);
-        }
-        if (operation.warnings.length > 0) {
-            for (const w of operation.warnings)
-                lines.push(`  ⚠ ${w}`);
-        }
-        if (operation.requiresConfirmation.length > 0) {
-            for (const c of operation.requiresConfirmation)
-                lines.push(`  ? ${c}`);
-        }
-        if (operation.errors.length === 0 && operation.warnings.length === 0 && operation.requiresConfirmation.length === 0) {
-            lines.push("  ✓ All operation checks passed");
-        }
-        lines.push("");
-    }
-    if (consistency) {
-        lines.push("─ Layer 3: Consistency ──────────────");
-        if (consistency.errors.length > 0) {
-            for (const e of consistency.errors)
-                lines.push(`  ✗ ${e}`);
-        }
-        if (consistency.warnings.length > 0) {
-            for (const w of consistency.warnings)
-                lines.push(`  ⚠ ${w}`);
-        }
-        if (consistency.errors.length === 0 && consistency.warnings.length === 0) {
-            lines.push("  ✓ All consistency checks passed");
-        }
-        lines.push("");
-    }
-    lines.push("─ Error Code Reference ──────────────");
-    lines.push(`  E_GUARD_COUNT_EXCEEDED=${PASSPORT_ERROR_CODES.E_GUARD_COUNT_EXCEEDED}, E_RELIES_GUARD_NOT_ADDED=${PASSPORT_ERROR_CODES.E_RELIES_GUARD_NOT_ADDED}, E_SUBMISSION_SIZE_EXCEEDED=${PASSPORT_ERROR_CODES.E_SUBMISSION_SIZE_EXCEEDED}`);
-    lines.push(`  E_HAS_VERIFIED=${PASSPORT_ERROR_CODES.E_HAS_VERIFIED}, E_NOT_VERIFIED=${PASSPORT_ERROR_CODES.E_NOT_VERIFIED}, E_NOT_IMPACK_GUARD=${PASSPORT_ERROR_CODES.E_NOT_IMPACK_GUARD}`);
-    lines.push(`  E_VERIFY_FAILED=${PASSPORT_ERROR_CODES.E_VERIFY_FAILED}, E_TX_NOT_MATCH=${PASSPORT_ERROR_CODES.E_TX_NOT_MATCH}, E_IMPACK_GUARD_NOT_FOUND=${PASSPORT_ERROR_CODES.E_IMPACK_GUARD_NOT_FOUND}`);
-    lines.push(`  E_SUBMISSION_NOT_FOUND=${PASSPORT_ERROR_CODES.E_SUBMISSION_NOT_FOUND}, E_DIGEST_NOT_MATCH=${PASSPORT_ERROR_CODES.E_DIGEST_NOT_MATCH}`);
-    lines.push("");
-    return lines.join("\n");
-}
-export function estimateSubmissionSize(submission) {
-    let total = 0;
-    for (const item of submission) {
-        total += 1;
-        switch (item.value_type) {
-            case "bool":
-                total += 1;
-                break;
-            case "u8":
-                total += 1;
-                break;
-            case "u64":
-                total += 8;
-                break;
-            case "address":
-                total += 32;
-                break;
-            case "string": {
-                const len = typeof item.value === "string" ? item.value.length : 0;
-                total += 1 + len;
-                break;
-            }
-            case "vector<u8>": {
-                const len = Array.isArray(item.value) ? item.value.length : 0;
-                total += 1 + len;
-                break;
-            }
-            default:
-                total += 64;
-        }
-    }
-    return total;
-}
-export function getAllConfirmationRules() {
-    return [
-        ...PASSPORT_CONFIRMATION_RULES.creation,
-        ...PASSPORT_CONFIRMATION_RULES.operation,
-        ...PASSPORT_CONFIRMATION_RULES.consistency,
-    ];
-}
-export function getConfirmationRulesByLayer(layer) {
-    return PASSPORT_CONFIRMATION_RULES[layer];
-}
-export function getConfirmationRuleById(id) {
-    return getAllConfirmationRules().find(r => r.id === id);
-}
+import{MAX_GUARD_COUNT_PASSPORT,MAX_SUBMISSION_SIZE_PASSPORT,PASSPORT_ERROR_CODES}from'./passport-ledger.js';import{assessPassportRisks}from'./passport-risk.js';export const PASSPORT_CONFIRMATION_RULES={'creation':[{'id':'C-PASS-01','check':'Confirm\x20Clock\x20object\x20is\x20accessible\x20(new\x20requires\x20Clock\x20argument)','severity':'HIGH','action':'block','layer':'creation'},{'id':'C-PASS-02','check':'Confirm\x20current\x20transaction\x20context\x20is\x20valid\x20(tx_hash\x20will\x20bind\x20to\x20this\x20transaction)','severity':'CRITICAL','action':'block','layer':'creation'}],'operation':[{'id':'C-PASS-03','check':'guard_add:\x20confirm\x20has_verified=false\x20(E_HAS_VERIFIED)','severity':'CRITICAL','action':'block','related_error':'E_HAS_VERIFIED\x20(4)','layer':'operation'},{'id':'C-PASS-04','check':'guard_add:\x20confirm\x20tx_hash\x20matches\x20current\x20transaction\x20(E_DIGEST_NOT_MATCH)','severity':'CRITICAL','action':'block','related_error':'E_DIGEST_NOT_MATCH\x20(11)','layer':'operation'},{'id':'C-PASS-05','check':'guard_add:\x20confirm\x20depended-on\x20Guards\x20already\x20added\x20(E_RELIES_GUARD_NOT_ADDED)','severity':'HIGH','action':'block','related_error':'E_RELIES_GUARD_NOT_ADDED\x20(2)','layer':'operation'},{'id':'C-PASS-06','check':'guard_add:\x20warn\x20Guard\x20count\x20approaching\x20MAX_GUARD_COUNT=20\x20limit','severity':'MEDIUM','action':'warn','related_error':'E_GUARD_COUNT_EXCEEDED\x20(1)','layer':'operation'},{'id':'C-PASS-07','check':'guard_add:\x20warn\x20impack\x20Guard\x20failure\x20will\x20cause\x20overall\x20result=false','severity':'HIGH','action':'warn','layer':'operation'},{'id':'C-PASS-08','check':'guard_add:\x20warn\x20submission\x20serialized\x20size\x20must\x20be\x20≤\x20256\x20bytes','severity':'MEDIUM','action':'warn','related_error':'E_SUBMISSION_SIZE_EXCEEDED\x20(3)','layer':'operation'},{'id':'C-PASS-09','check':'verify:\x20warn\x20this\x20is\x20a\x20one-time\x20operation;\x20after\x20verify,\x20configuration\x20cannot\x20be\x20modified','severity':'HIGH','action':'confirm_twice','related_error':'E_HAS_VERIFIED\x20(4)','layer':'operation'},{'id':'C-PASS-10','check':'verify:\x20confirm\x20at\x20least\x201\x20impack\x20Guard\x20exists\x20(E_IMPACK_GUARD_NOT_FOUND)','severity':'CRITICAL','action':'block','related_error':'E_IMPACK_GUARD_NOT_FOUND\x20(9)','layer':'operation'},{'id':'C-PASS-11','check':'guard_clear:\x20warn\x20this\x20will\x20clear\x20all\x20Guards\x20(allowed\x20before\x20verify)','severity':'MEDIUM','action':'confirm_twice','layer':'operation'},{'id':'C-PASS-12','check':'freezen:\x20warn\x20after\x20freezing,\x20Passport\x20is\x20permanently\x20retained\x20and\x20cannot\x20be\x20destroyed','severity':'MEDIUM','action':'confirm_twice','layer':'operation'},{'id':'C-PASS-13','check':'destroy:\x20warn\x20Passport\x20cannot\x20be\x20recovered\x20after\x20destruction\x20(must\x20be\x20before\x20freeze)','severity':'HIGH','action':'confirm_twice','layer':'operation'}],'consistency':[{'id':'C-PASS-14','check':'Confirm\x20Passport\x20object\x20is\x20not\x20frozen\x20(no\x20operations\x20allowed\x20after\x20freeze)','severity':'HIGH','action':'block','layer':'consistency'},{'id':'C-PASS-15','check':'Confirm\x20referenced\x20Guard\x20objects\x20have\x20not\x20been\x20deleted','severity':'HIGH','action':'block','layer':'consistency'},{'id':'C-PASS-16','check':'Confirm\x20has_verified=true\x20when\x20querying\x20result\x20(E_NOT_VERIFIED)','severity':'HIGH','action':'block','related_error':'E_NOT_VERIFIED\x20(5)','layer':'consistency'},{'id':'C-PASS-17','check':'Confirm\x20tx_hash\x20matches\x20current\x20transaction\x20when\x20querying\x20result\x20(E_TX_NOT_MATCH)','severity':'CRITICAL','action':'block','related_error':'E_TX_NOT_MATCH\x20(8)','layer':'consistency'},{'id':'C-PASS-18','check':'Info:\x20relies\x20dependencies\x20(avoid\x20circular\x20dependencies)','severity':'INFO','action':'info','layer':'consistency'},{'id':'C-PASS-19','check':'Warn:\x20non-impack\x20Guard\x20result\x20does\x20not\x20affect\x20final\x20result','severity':'INFO','action':'info','layer':'consistency'},{'id':'C-PASS-20','check':'Info:\x20Passport\x20emits\x20no\x20events;\x20status\x20must\x20be\x20queried\x20actively','severity':'INFO','action':'info','layer':'consistency'}]};export function preCheckPassportCreation(a){const b=[],c=[],d=[];return!a['clock']&&b['push']('Clock\x20object\x20is\x20required\x20for\x20Passport\x20creation\x20(C-PASS-01,\x20passport::new\x20requires\x20Clock\x20argument)'),!a['txDigest']&&b['push']('Valid\x20transaction\x20context\x20required\x20—\x20tx_hash\x20will\x20bind\x20to\x20this\x20transaction\x20(C-PASS-02)'),{'errors':b,'warnings':c,'requiresConfirmation':d,'canProceed':b['length']===0x0};}export function preCheckPassportOperation(a){const b=[],c=[],d=[],{passport:e,operation:f,guardObjects:g}=a;switch(f['type']){case'guard_add':{if(e['has_verified']){b['push']('Passport\x20already\x20verified,\x20cannot\x20add\x20guard\x20(C-PASS-03,\x20E_HAS_VERIFIED='+PASSPORT_ERROR_CODES['E_HAS_VERIFIED']+')');break;}c['push']('tx_hash\x20must\x20match\x20current\x20transaction\x20(C-PASS-04,\x20E_DIGEST_NOT_MATCH='+PASSPORT_ERROR_CODES['E_DIGEST_NOT_MATCH']+')');const h=g['get'](f['guard']);if(h?.['relies']&&h['relies']['length']>0x0)for(const i of h['relies']){const j=e['info']['some'](k=>k['guard']===i);!j&&b['push']('Dependency\x20Guard\x20'+i+'\x20not\x20added\x20yet\x20(C-PASS-05,\x20E_RELIES_GUARD_NOT_ADDED='+PASSPORT_ERROR_CODES['E_RELIES_GUARD_NOT_ADDED']+')');}if(e['info']['length']>=MAX_GUARD_COUNT_PASSPORT)b['push']('Guard\x20count\x20'+e['info']['length']+'\x20>=\x20MAX_GUARD_COUNT_PASSPORT='+MAX_GUARD_COUNT_PASSPORT+'\x20(C-PASS-06,\x20E_GUARD_COUNT_EXCEEDED='+PASSPORT_ERROR_CODES['E_GUARD_COUNT_EXCEEDED']+')');else e['info']['length']>=MAX_GUARD_COUNT_PASSPORT-0x5&&c['push']('Guard\x20count\x20'+e['info']['length']+'\x20approaching\x20limit\x20'+MAX_GUARD_COUNT_PASSPORT+'\x20(C-PASS-06)');f['impack']&&c['push']('impack=true\x20Guard\x20failure\x20will\x20cause\x20overall\x20result=false\x20(C-PASS-07)');if(f['submission']){const k=estimateSubmissionSize(f['submission']);if(k>MAX_SUBMISSION_SIZE_PASSPORT)b['push']('Submission\x20size\x20'+k+'\x20>\x20MAX_SUBMISSION_SIZE_PASSPORT='+MAX_SUBMISSION_SIZE_PASSPORT+'\x20(C-PASS-08,\x20E_SUBMISSION_SIZE_EXCEEDED='+PASSPORT_ERROR_CODES['E_SUBMISSION_SIZE_EXCEEDED']+')');else k>MAX_SUBMISSION_SIZE_PASSPORT*0.8&&c['push']('Submission\x20size\x20'+k+'\x20approaching\x20limit\x20'+MAX_SUBMISSION_SIZE_PASSPORT+'\x20(C-PASS-08)');}break;}case'verify':{d['push']('WARNING:\x20verify\x20is\x20ONE-TIME\x20operation.\x20After\x20verify,\x20guard\x20configuration\x20cannot\x20be\x20modified.\x20Type\x20\x27CONFIRM\x27\x20to\x20proceed.\x20(C-PASS-09)');const l=e['info']['some'](m=>m['impack']);!l&&b['push']('No\x20impack\x20Guard\x20found,\x20verify\x20will\x20fail\x20(C-PASS-10,\x20E_IMPACK_GUARD_NOT_FOUND='+PASSPORT_ERROR_CODES['E_IMPACK_GUARD_NOT_FOUND']+')');break;}case'guard_clear':{d['push']('WARNING:\x20guard_clear\x20will\x20remove\x20all\x20'+e['info']['length']+'\x20guards.\x20Type\x20\x27CONFIRM\x27\x20to\x20proceed.\x20(C-PASS-11)');e['has_verified']&&b['push']('Passport\x20already\x20verified,\x20cannot\x20clear\x20guards\x20(C-PASS-11,\x20E_HAS_VERIFIED='+PASSPORT_ERROR_CODES['E_HAS_VERIFIED']+')');break;}case'freezen':{d['push']('WARNING:\x20freezen\x20will\x20PERMANENTLY\x20freeze\x20the\x20Passport.\x20It\x20cannot\x20be\x20destroyed\x20after\x20freezing.\x20Type\x20\x27CONFIRM\x27\x20to\x20proceed.\x20(C-PASS-12)');break;}case'destroy':{d['push']('WARNING:\x20destroy\x20will\x20delete\x20the\x20Passport\x20permanently.\x20This\x20must\x20be\x20done\x20BEFORE\x20freezing.\x20Type\x20\x27CONFIRM\x27\x20to\x20proceed.\x20(C-PASS-13)');break;}case'result_query':case'result_for_guard':case'result_for_permission':{!e['has_verified']&&b['push']('result\x20query\x20requires\x20has_verified=true\x20(C-PASS-16,\x20E_NOT_VERIFIED='+PASSPORT_ERROR_CODES['E_NOT_VERIFIED']+')');c['push']('result\x20query\x20requires\x20tx_hash\x20match\x20current\x20transaction\x20(C-PASS-17,\x20E_TX_NOT_MATCH='+PASSPORT_ERROR_CODES['E_TX_NOT_MATCH']+')');if(f['type']==='result_for_guard'){const m=e['info']['find'](n=>n['guard']===f['guard']);if(!m)b['push']('Guard\x20'+f['guard']+'\x20not\x20found\x20in\x20Passport\x20(C-PASS-15)');else!m['impack']&&b['push']('Guard\x20'+f['guard']+'\x20is\x20not\x20impack,\x20result_for_guard\x20will\x20abort\x20(C-PASS-10,\x20E_NOT_IMPACK_GUARD='+PASSPORT_ERROR_CODES['E_NOT_IMPACK_GUARD']+')');}break;}case'submission_get':{break;}}return{'errors':b,'warnings':c,'requiresConfirmation':d,'canProceed':b['length']===0x0};}export function checkPassportStateConsistency(a){const b=[],c=[],{passport:d,guardObjects:e,isFrozen:f}=a;f&&b['push']('Passport\x20is\x20frozen\x20(immutable),\x20no\x20write\x20operations\x20permitted\x20(C-PASS-14)');for(const i of d['info']){!e['has'](i['guard'])&&c['push']('Guard\x20'+i['guard']+'\x20not\x20found,\x20verification\x20may\x20fail\x20(C-PASS-15)');}!d['has_verified']&&c['push']('Passport\x20not\x20yet\x20verified\x20—\x20result\x20queries\x20will\x20fail\x20(C-PASS-16,\x20E_NOT_VERIFIED)');for(const j of d['info']){const k=e['get'](j['guard']);if(k?.['relies']&&k['relies']['length']>0x0){const l=k['relies_logic_and']===![]?'OR':'AND';c['push']('Guard\x20'+j['guard']+'\x20relies\x20on\x20'+k['relies']['length']+'\x20guards\x20('+l+'\x20logic)\x20(C-PASS-18)');}}const h=d['info']['filter'](m=>!m['impack']);return h['length']>0x0&&c['push'](h['length']+'\x20non-impack\x20guards\x20will\x20not\x20affect\x20final\x20result\x20(C-PASS-19)'),c['push']('Passport\x20does\x20not\x20emit\x20events,\x20must\x20query\x20object\x20state\x20directly\x20(C-PASS-20)'),{'errors':b,'warnings':c,'requiresConfirmation':[],'canProceed':b['length']===0x0};}export const PASSPORT_CONFIRM_VERSION='1.0.0';export function runPassportConfirmGate(a){const b=[],c=[];let d;if(a['creation_input']){const e=preCheckPassportCreation(a['creation_input']);if(!e['canProceed'])return c['push']('L1_creation'),{'status':'blocked_creation','creation_result':e,'risk_assessment':d,'confirmation_text':generateConfirmationText(a,e),'block_reason':'Creation\x20blocked:\x20'+e['errors']['join'](';\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PASSPORT_CONFIRM_VERSION,'final_status':'blocked_creation','layers_passed':b,'layers_failed':c}};b['push']('L1_creation');}if(a['operation_input']){const f=preCheckPassportOperation(a['operation_input']);if(!f['canProceed'])return c['push']('L2_operation'),{'status':'blocked_operation','operation_result':f,'risk_assessment':d,'confirmation_text':generateConfirmationText(a,undefined,f),'block_reason':'Operation\x20blocked:\x20'+f['errors']['join'](';\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PASSPORT_CONFIRM_VERSION,'final_status':'blocked_operation','layers_passed':b,'layers_failed':c}};if(!a['skip_user_confirmation']&&f['requiresConfirmation']['length']>0x0)return c['push']('L2_operation_pending_confirmation'),{'status':'pending_confirmation','operation_result':f,'risk_assessment':d,'confirmation_text':generateConfirmationText(a,undefined,f),'block_reason':'User\x20confirmation\x20required:\x20'+f['requiresConfirmation']['length']+'\x20item(s)','decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PASSPORT_CONFIRM_VERSION,'final_status':'pending_confirmation','layers_passed':b,'layers_failed':c}};b['push']('L2_operation');}if(a['consistency_input']){const g=checkPassportStateConsistency(a['consistency_input']);if(!g['canProceed'])return c['push']('L3_consistency'),{'status':'blocked_consistency','consistency_result':g,'risk_assessment':d,'confirmation_text':generateConfirmationText(a,undefined,undefined,g),'block_reason':'Consistency\x20blocked:\x20'+g['errors']['join'](';\x20'),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PASSPORT_CONFIRM_VERSION,'final_status':'blocked_consistency','layers_passed':b,'layers_failed':c}};b['push']('L3_consistency');}if(!a['skip_risk_assessment']&&a['operation_input']){const h={'object':a['operation_input']['passport']['object'],'has_verified':a['operation_input']['passport']['has_verified'],'guard_count':a['operation_input']['passport']['info']['length'],'has_impack_guard':a['operation_input']['passport']['info']['some'](i=>i['impack']),'operation_type':a['operation_input']['operation']['type']==='guard_add'?'guard_add':a['operation_input']['operation']['type']==='verify'?'verify':a['operation_input']['operation']['type']==='freezen'?'freezen':a['operation_input']['operation']['type']==='destroy'?'destroy':'use','is_frozen':a['consistency_input']?.['isFrozen']??![],'matched_scenario':a['scenario'],'constants_synced':!![],'knowledge_files_present':!![]};d=assessPassportRisks(h);}return{'status':'approved','creation_result':a['creation_input']?preCheckPassportCreation(a['creation_input']):undefined,'operation_result':a['operation_input']?preCheckPassportOperation(a['operation_input']):undefined,'consistency_result':a['consistency_input']?checkPassportStateConsistency(a['consistency_input']):undefined,'risk_assessment':d,'confirmation_text':generateConfirmationText(a),'decision_record':{'timestamp':new Date()['toISOString'](),'gate_version':PASSPORT_CONFIRM_VERSION,'final_status':'approved','layers_passed':b,'layers_failed':c}};}function generateConfirmationText(a,b,d,f){const g=[];g['push']('═══\x20Passport\x20Confirmation\x20═══'),g['push']('');a['scenario']&&(g['push']('Scenario:\x20'+a['scenario']['name']),g['push']('Consumer:\x20'+a['scenario']['consumer_object']+'\x20('+a['scenario']['sdk_entry']+')'),g['push']('Purpose:\x20'+a['scenario']['passport_purpose']),g['push'](''));if(b){g['push']('─\x20Layer\x201:\x20Creation\x20──────────────');if(b['errors']['length']>0x0){for(const h of b['errors'])g['push']('\x20\x20✗\x20'+h);}else g['push']('\x20\x20✓\x20All\x20creation\x20checks\x20passed');g['push']('');}if(d){g['push']('─\x20Layer\x202:\x20Operation\x20──────────────');if(d['errors']['length']>0x0){for(const i of d['errors'])g['push']('\x20\x20✗\x20'+i);}if(d['warnings']['length']>0x0){for(const j of d['warnings'])g['push']('\x20\x20⚠\x20'+j);}if(d['requiresConfirmation']['length']>0x0){for(const k of d['requiresConfirmation'])g['push']('\x20\x20?\x20'+k);}d['errors']['length']===0x0&&d['warnings']['length']===0x0&&d['requiresConfirmation']['length']===0x0&&g['push']('\x20\x20✓\x20All\x20operation\x20checks\x20passed'),g['push']('');}if(f){g['push']('─\x20Layer\x203:\x20Consistency\x20──────────────');if(f['errors']['length']>0x0){for(const l of f['errors'])g['push']('\x20\x20✗\x20'+l);}if(f['warnings']['length']>0x0){for(const m of f['warnings'])g['push']('\x20\x20⚠\x20'+m);}f['errors']['length']===0x0&&f['warnings']['length']===0x0&&g['push']('\x20\x20✓\x20All\x20consistency\x20checks\x20passed'),g['push']('');}return g['push']('─\x20Error\x20Code\x20Reference\x20──────────────'),g['push']('\x20\x20E_GUARD_COUNT_EXCEEDED='+PASSPORT_ERROR_CODES['E_GUARD_COUNT_EXCEEDED']+',\x20E_RELIES_GUARD_NOT_ADDED='+PASSPORT_ERROR_CODES['E_RELIES_GUARD_NOT_ADDED']+',\x20E_SUBMISSION_SIZE_EXCEEDED='+PASSPORT_ERROR_CODES['E_SUBMISSION_SIZE_EXCEEDED']),g['push']('\x20\x20E_HAS_VERIFIED='+PASSPORT_ERROR_CODES['E_HAS_VERIFIED']+',\x20E_NOT_VERIFIED='+PASSPORT_ERROR_CODES['E_NOT_VERIFIED']+',\x20E_NOT_IMPACK_GUARD='+PASSPORT_ERROR_CODES['E_NOT_IMPACK_GUARD']),g['push']('\x20\x20E_VERIFY_FAILED='+PASSPORT_ERROR_CODES['E_VERIFY_FAILED']+',\x20E_TX_NOT_MATCH='+PASSPORT_ERROR_CODES['E_TX_NOT_MATCH']+',\x20E_IMPACK_GUARD_NOT_FOUND='+PASSPORT_ERROR_CODES['E_IMPACK_GUARD_NOT_FOUND']),g['push']('\x20\x20E_SUBMISSION_NOT_FOUND='+PASSPORT_ERROR_CODES['E_SUBMISSION_NOT_FOUND']+',\x20E_DIGEST_NOT_MATCH='+PASSPORT_ERROR_CODES['E_DIGEST_NOT_MATCH']),g['push'](''),g['join']('\x0a');}export function estimateSubmissionSize(a){let b=0x0;for(const c of a){b+=0x1;switch(c['value_type']){case'bool':b+=0x1;break;case'u8':b+=0x1;break;case'u64':b+=0x8;break;case'address':b+=0x20;break;case'string':{const d=typeof c['value']==='string'?c['value']['length']:0x0;b+=0x1+d;break;}case'vector<u8>':{const e=Array['isArray'](c['value'])?c['value']['length']:0x0;b+=0x1+e;break;}default:b+=0x40;}}return b;}export function getAllConfirmationRules(){return[...PASSPORT_CONFIRMATION_RULES['creation'],...PASSPORT_CONFIRMATION_RULES['operation'],...PASSPORT_CONFIRMATION_RULES['consistency']];}export function getConfirmationRulesByLayer(a){return PASSPORT_CONFIRMATION_RULES[a];}export function getConfirmationRuleById(a){return getAllConfirmationRules()['find'](b=>b['id']===a);}