@wowok/agent-mcp 2.7.1 → 2.7.2

package/dist/knowledge/personal-risk.js

@@ -1,212 +1 @@
-import { MAX_ADDRESS_COUNT, MAX_RECORD_COUNT_REGISTRAR, MAX_RECORD_LENGTH, MAX_TAGS_COUNT, } from "@wowok/wowok";
-function detectSensitiveInformation(entries) {
-    const hits = [];
-    for (const e of entries) {
-        const v = typeof e.value === "string" ? e.value : String(e.value ?? "");
-        const lower = v.toLowerCase();
-        if (/^\+?\d{10,15}$/.test(v))
-            hits.push(`${e.name}=phone-like`);
-        if (/[^\s@]+@[^\s@]+\.[^\s@]+/.test(v))
-            hits.push(`${e.name}=email-like`);
-        if (/^(0x)?[0-9a-fA-F]{64}$/.test(v))
-            hits.push(`${e.name}=private-key-like`);
-        if (/^([a-z]{3,8}\s){11,23}[a-z]{3,8}$/.test(v.trim()))
-            hits.push(`${e.name}=mnemonic-like`);
-        if (/private[_-]?key|secret|mnemonic|seed/i.test(e.name))
-            hits.push(`${e.name}=secret-named`);
-        void lower;
-    }
-    return hits;
-}
-const R_PE_01 = {
-    rule: {
-        id: "R-PERSONAL-01",
-        level: "HIGH",
-        category: "semantic",
-        title: "Sensitive information leakage — on-chain data is permanent",
-        description: "information is stored via Entity.info_add as on-chain Records. The schema description " +
-            "warns 'NEVER: phone, address, private keys' but the Move layer does not validate " +
-            "content. Once a phone number, physical address, email, or private key is written " +
-            "on-chain, it is permanent and publicly readable — there is no delete (info_remove " +
-            "only removes the named entry from the user's record; the data remains in the " +
-            "transaction history).",
-        affected_stakeholders: ["user"],
-        scenario: "User adds information {name: 'phone', value: '+8613800000000'}; number is public forever",
-        mitigation: "MCP schema description MUST warn. AI agents MUST re-confirm before adding any " +
-            "information entry. Business layer should run a sensitive-data regex (phone/email/" +
-            "private-key/mnemonic) and reject matches. Use the 'local' tool for private data.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.information_entries || ctx.information_entries.length === 0)
-            return null;
-        const hits = detectSensitiveInformation(ctx.information_entries);
-        if (hits.length === 0)
-            return null;
-        return { ...R_PE_01.rule, evidence: `sensitive patterns: ${hits.join("; ")}` };
-    },
-};
-const R_PE_02 = {
-    rule: {
-        id: "R-PERSONAL-02",
-        level: "MEDIUM",
-        category: "lifecycle",
-        title: "mark destroy is irreversible — identity mark permanently lost",
-        description: "The 'destroy' mark op permanently deletes the Resource object backing the user's " +
-            "identity mark. There is no archive, no event, and no rollback. After destroy, the " +
-            "user has no on-chain identity mark until they create a new one, and any external " +
-            "system keyed on the old Resource address breaks.",
-        affected_stakeholders: ["user", "consumer"],
-        scenario: "User destroys their mark; downstream services keyed on the old Resource address fail",
-        mitigation: "Require explicit confirmation before destroy. SDK should refuse destroy if any " +
-            "live consumer still references the mark. Provide a 'replace' alternative that " +
-            "swaps the underlying Resource without losing continuity.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.is_mark_destroy)
-            return null;
-        return { ...R_PE_02.rule, evidence: "is_mark_destroy=true (irreversible)" };
-    },
-};
-const R_PE_03 = {
-    rule: {
-        id: "R-PERSONAL-03",
-        level: "MEDIUM",
-        category: "semantic",
-        title: "referrer chain can be abused to fabricate trust signals",
-        description: "When registering, a user may specify any referrer address. There is no on-chain " +
-            "verification that the referrer actually invited the user. A sybil attacker can " +
-            "register many accounts chained to a reputable address, fabricating an affiliation " +
-            "to borrow trust. The Registrar records referrer but does not validate consent.",
-        affected_stakeholders: ["user", "consumer"],
-        scenario: "Attacker registers 100 accounts all citing a reputable merchant as referrer",
-        mitigation: "Business layer should treat referrer as a self-attested hint, not a verified trust " +
-            "signal. Audit referrer chains off-chain; require the referrer to co-sign if used for " +
-            "trust scoring.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.has_referrer)
-            return null;
-        return { ...R_PE_03.rule, evidence: "has_referrer=true (self-attested, unverified)" };
-    },
-};
-const R_PE_04 = {
-    rule: {
-        id: "R-PERSONAL-04",
-        level: "LOW",
-        category: "structural",
-        title: `information inherits MAX_RECORD_COUNT_REGISTRAR=${MAX_RECORD_COUNT_REGISTRAR} — permissive`,
-        description: `Personal does not define its own record cap; it inherits Entity's ` +
-            `MAX_RECORD_COUNT_REGISTRAR=${MAX_RECORD_COUNT_REGISTRAR} (registrar.move) and ` +
-            `MAX_RECORD_LENGTH=${MAX_RECORD_LENGTH} per record. ${MAX_RECORD_COUNT_REGISTRAR} records ` +
-            `per user is generous and can bloat on-chain storage if users add many entries. ` +
-            `MAX_ADDRESS_COUNT=${MAX_ADDRESS_COUNT} and MAX_TAGS_COUNT=${MAX_TAGS_COUNT} also apply via Entity/Resource.`,
-        affected_stakeholders: ["user", "system"],
-        scenario: "User adds 1000 information entries; Entity record storage is heavy and slow to read",
-        mitigation: "Business layer should self-limit information count (e.g. ≤50). For bulk profile data, " +
-            "store off-chain and reference via a Repository or Proof.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (ctx.information_count === undefined)
-            return null;
-        if (ctx.information_count < MAX_RECORD_COUNT_REGISTRAR)
-            return null;
-        return {
-            ...R_PE_04.rule,
-            evidence: `information_count=${ctx.information_count}, limit=${MAX_RECORD_COUNT_REGISTRAR}`,
-        };
-    },
-};
-const R_PE_05 = {
-    rule: {
-        id: "R-PERSONAL-05",
-        level: "MEDIUM",
-        category: "lifecycle",
-        title: "mark transfer loses identity mark at the source address",
-        description: "The 'transfer' mark op moves the Resource backing the identity mark to a new address. " +
-            "After transfer, the source address has no mark — any service that keyed identity on " +
-            "the source address loses the binding. There is no automatic forwarding stub left behind.",
-        affected_stakeholders: ["user", "consumer"],
-        scenario: "User transfers mark to a new wallet; old-wallet-based logins all break",
-        mitigation: "Surface a 'transfer will detach the mark from this address' warning. Consumers should " +
-            "track marks by Resource address, not by user address. Provide a migration window " +
-            "where both addresses are valid.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.is_mark_transfer)
-            return null;
-        return { ...R_PE_05.rule, evidence: "is_mark_transfer=true (source loses mark)" };
-    },
-};
-const R_PE_06 = {
-    rule: {
-        id: "R-PERSONAL-06",
-        level: "LOW",
-        category: "cross_object",
-        title: "Personal has no dedicated Move struct — depends entirely on Entity + Resource",
-        description: "Personal is an SDK-layer construct: there is no personal.move. The SDK composes " +
-            "Entity (information/description) and Resource (mark) on behalf of the user. Any " +
-            "breaking change in Entity or Resource directly affects Personal. The MCP layer " +
-            "cannot fix Personal bugs without touching Entity/Resource.",
-        affected_stakeholders: ["system"],
-        scenario: "Entity schema changes; Personal.information silently breaks",
-        mitigation: "Track Entity and Resource changelogs as first-order dependencies of Personal. Add " +
-            "integration tests that exercise Personal flows whenever Entity/Resource change.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.expects_dedicated_move_struct)
-            return null;
-        return { ...R_PE_06.rule, evidence: "expects_dedicated_move_struct=true (none exists)" };
-    },
-};
-const R_PE_07 = {
-    rule: {
-        id: "R-PERSONAL-07",
-        level: "MEDIUM",
-        category: "lifecycle",
-        title: "Singleton assumption — if violated, multiple Personal instances conflict",
-        description: "Personal assumes each account has exactly one Entity record (and one Resource mark). " +
-            "The Move layer enforces this via entity_register's idempotency (returns the existing " +
-            "Resource for already-registered users). But if the SDK ever bypasses entity_register " +
-            "and creates duplicates (e.g. via entity_register_with_resource_forced), downstream " +
-            "code that assumes a singleton would see inconsistent state.",
-        affected_stakeholders: ["user", "consumer"],
-        scenario: "SDK calls entity_register_with_resource_forced; user now has two Resource marks",
-        mitigation: "SDK MUST enforce the singleton invariant: refuse to call entity_register_with_resource_forced " +
-            "unless the user explicitly opts in. Document that forced re-registration invalidates " +
-            "the old Resource address.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (ctx.singleton_enforced)
-            return null;
-        return { ...R_PE_07.rule, evidence: "singleton_enforced=false (needs SDK guard)" };
-    },
-};
-export const PERSONAL_RISK_RULES = [
-    R_PE_01,
-    R_PE_02,
-    R_PE_03,
-    R_PE_04,
-    R_PE_05,
-    R_PE_06,
-    R_PE_07,
-];
-export const PERSONAL_RISK_VERSION = "1.0.0";
-export function checkPersonalRisks(ctx) {
-    const risks = [];
-    for (const rule of PERSONAL_RISK_RULES) {
-        const r = rule.check(ctx);
-        if (r)
-            risks.push(r);
-    }
-    return risks;
-}
-export function getPersonalRiskById(id) {
-    return PERSONAL_RISK_RULES.find(r => r.rule.id === id)?.rule;
-}
+import{MAX_ADDRESS_COUNT,MAX_RECORD_COUNT_REGISTRAR,MAX_RECORD_LENGTH,MAX_TAGS_COUNT}from'@wowok/wowok';function detectSensitiveInformation(a){const b=[];for(const c of a){const d=typeof c['value']==='string'?c['value']:String(c['value']??''),f=d['toLowerCase']();if(/^\+?\d{10,15}$/['test'](d))b['push'](c['name']+'=phone-like');if(/[^\s@]+@[^\s@]+\.[^\s@]+/['test'](d))b['push'](c['name']+'=email-like');if(/^(0x)?[0-9a-fA-F]{64}$/['test'](d))b['push'](c['name']+'=private-key-like');if(/^([a-z]{3,8}\s){11,23}[a-z]{3,8}$/['test'](d['trim']()))b['push'](c['name']+'=mnemonic-like');if(/private[_-]?key|secret|mnemonic|seed/i['test'](c['name']))b['push'](c['name']+'=secret-named');void f;}return b;}const R_PE_01={'rule':{'id':'R-PERSONAL-01','level':'HIGH','category':'semantic','title':'Sensitive\x20information\x20leakage\x20—\x20on-chain\x20data\x20is\x20permanent','description':'information\x20is\x20stored\x20via\x20Entity.info_add\x20as\x20on-chain\x20Records.\x20The\x20schema\x20description\x20'+'warns\x20\x27NEVER:\x20phone,\x20address,\x20private\x20keys\x27\x20but\x20the\x20Move\x20layer\x20does\x20not\x20validate\x20'+'content.\x20Once\x20a\x20phone\x20number,\x20physical\x20address,\x20email,\x20or\x20private\x20key\x20is\x20written\x20'+'on-chain,\x20it\x20is\x20permanent\x20and\x20publicly\x20readable\x20—\x20there\x20is\x20no\x20delete\x20(info_remove\x20'+'only\x20removes\x20the\x20named\x20entry\x20from\x20the\x20user\x27s\x20record;\x20the\x20data\x20remains\x20in\x20the\x20'+'transaction\x20history).','affected_stakeholders':['user'],'scenario':'User\x20adds\x20information\x20{name:\x20\x27phone\x27,\x20value:\x20\x27+8613800000000\x27};\x20number\x20is\x20public\x20forever','mitigation':'MCP\x20schema\x20description\x20MUST\x20warn.\x20AI\x20agents\x20MUST\x20re-confirm\x20before\x20adding\x20any\x20'+'information\x20entry.\x20Business\x20layer\x20should\x20run\x20a\x20sensitive-data\x20regex\x20(phone/email/'+'private-key/mnemonic)\x20and\x20reject\x20matches.\x20Use\x20the\x20\x27local\x27\x20tool\x20for\x20private\x20data.','auto_fixable':![]},'check':a=>{if(!a['information_entries']||a['information_entries']['length']===0x0)return null;const b=detectSensitiveInformation(a['information_entries']);if(b['length']===0x0)return null;return{...R_PE_01['rule'],'evidence':'sensitive\x20patterns:\x20'+b['join'](';\x20')};}},R_PE_02={'rule':{'id':'R-PERSONAL-02','level':'MEDIUM','category':'lifecycle','title':'mark\x20destroy\x20is\x20irreversible\x20—\x20identity\x20mark\x20permanently\x20lost','description':'The\x20\x27destroy\x27\x20mark\x20op\x20permanently\x20deletes\x20the\x20Resource\x20object\x20backing\x20the\x20user\x27s\x20'+'identity\x20mark.\x20There\x20is\x20no\x20archive,\x20no\x20event,\x20and\x20no\x20rollback.\x20After\x20destroy,\x20the\x20'+'user\x20has\x20no\x20on-chain\x20identity\x20mark\x20until\x20they\x20create\x20a\x20new\x20one,\x20and\x20any\x20external\x20'+'system\x20keyed\x20on\x20the\x20old\x20Resource\x20address\x20breaks.','affected_stakeholders':['user','consumer'],'scenario':'User\x20destroys\x20their\x20mark;\x20downstream\x20services\x20keyed\x20on\x20the\x20old\x20Resource\x20address\x20fail','mitigation':'Require\x20explicit\x20confirmation\x20before\x20destroy.\x20SDK\x20should\x20refuse\x20destroy\x20if\x20any\x20'+'live\x20consumer\x20still\x20references\x20the\x20mark.\x20Provide\x20a\x20\x27replace\x27\x20alternative\x20that\x20'+'swaps\x20the\x20underlying\x20Resource\x20without\x20losing\x20continuity.','auto_fixable':![]},'check':a=>{if(!a['is_mark_destroy'])return null;return{...R_PE_02['rule'],'evidence':'is_mark_destroy=true\x20(irreversible)'};}},R_PE_03={'rule':{'id':'R-PERSONAL-03','level':'MEDIUM','category':'semantic','title':'referrer\x20chain\x20can\x20be\x20abused\x20to\x20fabricate\x20trust\x20signals','description':'When\x20registering,\x20a\x20user\x20may\x20specify\x20any\x20referrer\x20address.\x20There\x20is\x20no\x20on-chain\x20'+'verification\x20that\x20the\x20referrer\x20actually\x20invited\x20the\x20user.\x20A\x20sybil\x20attacker\x20can\x20'+'register\x20many\x20accounts\x20chained\x20to\x20a\x20reputable\x20address,\x20fabricating\x20an\x20affiliation\x20'+'to\x20borrow\x20trust.\x20The\x20Registrar\x20records\x20referrer\x20but\x20does\x20not\x20validate\x20consent.','affected_stakeholders':['user','consumer'],'scenario':'Attacker\x20registers\x20100\x20accounts\x20all\x20citing\x20a\x20reputable\x20merchant\x20as\x20referrer','mitigation':'Business\x20layer\x20should\x20treat\x20referrer\x20as\x20a\x20self-attested\x20hint,\x20not\x20a\x20verified\x20trust\x20'+'signal.\x20Audit\x20referrer\x20chains\x20off-chain;\x20require\x20the\x20referrer\x20to\x20co-sign\x20if\x20used\x20for\x20'+'trust\x20scoring.','auto_fixable':![]},'check':a=>{if(!a['has_referrer'])return null;return{...R_PE_03['rule'],'evidence':'has_referrer=true\x20(self-attested,\x20unverified)'};}},R_PE_04={'rule':{'id':'R-PERSONAL-04','level':'LOW','category':'structural','title':'information\x20inherits\x20MAX_RECORD_COUNT_REGISTRAR='+MAX_RECORD_COUNT_REGISTRAR+'\x20—\x20permissive','description':'Personal\x20does\x20not\x20define\x20its\x20own\x20record\x20cap;\x20it\x20inherits\x20Entity\x27s\x20'+('MAX_RECORD_COUNT_REGISTRAR='+MAX_RECORD_COUNT_REGISTRAR+'\x20(registrar.move)\x20and\x20')+('MAX_RECORD_LENGTH='+MAX_RECORD_LENGTH+'\x20per\x20record.\x20'+MAX_RECORD_COUNT_REGISTRAR+'\x20records\x20')+'per\x20user\x20is\x20generous\x20and\x20can\x20bloat\x20on-chain\x20storage\x20if\x20users\x20add\x20many\x20entries.\x20'+('MAX_ADDRESS_COUNT='+MAX_ADDRESS_COUNT+'\x20and\x20MAX_TAGS_COUNT='+MAX_TAGS_COUNT+'\x20also\x20apply\x20via\x20Entity/Resource.'),'affected_stakeholders':['user','system'],'scenario':'User\x20adds\x201000\x20information\x20entries;\x20Entity\x20record\x20storage\x20is\x20heavy\x20and\x20slow\x20to\x20read','mitigation':'Business\x20layer\x20should\x20self-limit\x20information\x20count\x20(e.g.\x20≤50).\x20For\x20bulk\x20profile\x20data,\x20'+'store\x20off-chain\x20and\x20reference\x20via\x20a\x20Repository\x20or\x20Proof.','auto_fixable':![]},'check':a=>{if(a['information_count']===undefined)return null;if(a['information_count']<MAX_RECORD_COUNT_REGISTRAR)return null;return{...R_PE_04['rule'],'evidence':'information_count='+a['information_count']+',\x20limit='+MAX_RECORD_COUNT_REGISTRAR};}},R_PE_05={'rule':{'id':'R-PERSONAL-05','level':'MEDIUM','category':'lifecycle','title':'mark\x20transfer\x20loses\x20identity\x20mark\x20at\x20the\x20source\x20address','description':'The\x20\x27transfer\x27\x20mark\x20op\x20moves\x20the\x20Resource\x20backing\x20the\x20identity\x20mark\x20to\x20a\x20new\x20address.\x20'+'After\x20transfer,\x20the\x20source\x20address\x20has\x20no\x20mark\x20—\x20any\x20service\x20that\x20keyed\x20identity\x20on\x20'+'the\x20source\x20address\x20loses\x20the\x20binding.\x20There\x20is\x20no\x20automatic\x20forwarding\x20stub\x20left\x20behind.','affected_stakeholders':['user','consumer'],'scenario':'User\x20transfers\x20mark\x20to\x20a\x20new\x20wallet;\x20old-wallet-based\x20logins\x20all\x20break','mitigation':'Surface\x20a\x20\x27transfer\x20will\x20detach\x20the\x20mark\x20from\x20this\x20address\x27\x20warning.\x20Consumers\x20should\x20'+'track\x20marks\x20by\x20Resource\x20address,\x20not\x20by\x20user\x20address.\x20Provide\x20a\x20migration\x20window\x20'+'where\x20both\x20addresses\x20are\x20valid.','auto_fixable':![]},'check':a=>{if(!a['is_mark_transfer'])return null;return{...R_PE_05['rule'],'evidence':'is_mark_transfer=true\x20(source\x20loses\x20mark)'};}},R_PE_06={'rule':{'id':'R-PERSONAL-06','level':'LOW','category':'cross_object','title':'Personal\x20has\x20no\x20dedicated\x20Move\x20struct\x20—\x20depends\x20entirely\x20on\x20Entity\x20+\x20Resource','description':'Personal\x20is\x20an\x20SDK-layer\x20construct:\x20there\x20is\x20no\x20personal.move.\x20The\x20SDK\x20composes\x20'+'Entity\x20(information/description)\x20and\x20Resource\x20(mark)\x20on\x20behalf\x20of\x20the\x20user.\x20Any\x20'+'breaking\x20change\x20in\x20Entity\x20or\x20Resource\x20directly\x20affects\x20Personal.\x20The\x20MCP\x20layer\x20'+'cannot\x20fix\x20Personal\x20bugs\x20without\x20touching\x20Entity/Resource.','affected_stakeholders':['system'],'scenario':'Entity\x20schema\x20changes;\x20Personal.information\x20silently\x20breaks','mitigation':'Track\x20Entity\x20and\x20Resource\x20changelogs\x20as\x20first-order\x20dependencies\x20of\x20Personal.\x20Add\x20'+'integration\x20tests\x20that\x20exercise\x20Personal\x20flows\x20whenever\x20Entity/Resource\x20change.','auto_fixable':![]},'check':a=>{if(!a['expects_dedicated_move_struct'])return null;return{...R_PE_06['rule'],'evidence':'expects_dedicated_move_struct=true\x20(none\x20exists)'};}},R_PE_07={'rule':{'id':'R-PERSONAL-07','level':'MEDIUM','category':'lifecycle','title':'Singleton\x20assumption\x20—\x20if\x20violated,\x20multiple\x20Personal\x20instances\x20conflict','description':'Personal\x20assumes\x20each\x20account\x20has\x20exactly\x20one\x20Entity\x20record\x20(and\x20one\x20Resource\x20mark).\x20'+'The\x20Move\x20layer\x20enforces\x20this\x20via\x20entity_register\x27s\x20idempotency\x20(returns\x20the\x20existing\x20'+'Resource\x20for\x20already-registered\x20users).\x20But\x20if\x20the\x20SDK\x20ever\x20bypasses\x20entity_register\x20'+'and\x20creates\x20duplicates\x20(e.g.\x20via\x20entity_register_with_resource_forced),\x20downstream\x20'+'code\x20that\x20assumes\x20a\x20singleton\x20would\x20see\x20inconsistent\x20state.','affected_stakeholders':['user','consumer'],'scenario':'SDK\x20calls\x20entity_register_with_resource_forced;\x20user\x20now\x20has\x20two\x20Resource\x20marks','mitigation':'SDK\x20MUST\x20enforce\x20the\x20singleton\x20invariant:\x20refuse\x20to\x20call\x20entity_register_with_resource_forced\x20'+'unless\x20the\x20user\x20explicitly\x20opts\x20in.\x20Document\x20that\x20forced\x20re-registration\x20invalidates\x20'+'the\x20old\x20Resource\x20address.','auto_fixable':![]},'check':a=>{if(a['singleton_enforced'])return null;return{...R_PE_07['rule'],'evidence':'singleton_enforced=false\x20(needs\x20SDK\x20guard)'};}};export const PERSONAL_RISK_RULES=[R_PE_01,R_PE_02,R_PE_03,R_PE_04,R_PE_05,R_PE_06,R_PE_07];export const PERSONAL_RISK_VERSION='1.0.0';export function checkPersonalRisks(a){const b=[];for(const c of PERSONAL_RISK_RULES){const d=c['check'](a);if(d)b['push'](d);}return b;}export function getPersonalRiskById(a){return PERSONAL_RISK_RULES['find'](b=>b['rule']['id']===a)?.['rule'];}

package/dist/knowledge/process-model.js

@@ -1,160 +1 @@
-export const PERMISSION_TYPES = [
-    {
-        name: "Permission",
-        scope: "organization",
-        definedOn: "Permission Object (standalone on-chain object, referenced by service/machine/etc.)",
-        controls: "Who can modify the bound object's settings, publish it, manage its funds, etc.",
-        grantedBy: "The object's creator (owner) or anyone the creator delegates to",
-        example: "A shop owner creates a Permission allowing only their staff to modify the Service's price.",
-    },
-    {
-        name: "NamedOperator",
-        scope: "order",
-        definedOn: "Per-order (specified in the order creation/modification by the service)",
-        controls: "Who can operate on a specific order: advance progress, settle, refund, etc.",
-        grantedBy: "The service (via its order_allocators or explicit named operators)",
-        example: "A delivery service assigns Alice as the NamedOperator for order #123 — only Alice can mark it delivered.",
-    },
-    {
-        name: "OrderHolder",
-        scope: "order_holder",
-        definedOn: "Per-order (the '' empty string address = the order's current holder)",
-        controls: "Who currently holds the order and can perform holder-specific actions (accept, reject, pay)",
-        grantedBy: "Implicitly assigned when an order is created or transferred",
-        example: "Bob places an order — he becomes the OrderHolder. He can accept delivery or request arbitration.",
-    },
-];
-export const GAME_ELEMENTS = [
-    {
-        id: 1, type: "player", name: "Merchant vs Customer",
-        description: "The basic participants of the game: the merchant providing the service and the customer purchasing the service.",
-        wowokApplication: "Service creator (merchant) and Order creator (customer).",
-        onChainMechanism: "Service + Order objects, each with an independent on-chain address.",
-    },
-    {
-        id: 2, type: "player", name: "Arbitrator",
-        description: "Third-party arbitrators participate in the dispute resolution game.",
-        wowokApplication: "NamedOperator of the Arb object, designated by the Service.",
-        onChainMechanism: "Arbitration object + NamedOperator permission.",
-    },
-    {
-        id: 3, type: "strategy", name: "Cooperation vs Deception",
-        description: "The merchant can choose honest fulfillment (cooperation) or fraud (deception). The customer can choose to trust or refuse.",
-        wowokApplication: "Merchant ships vs doesn't ship; customer pays vs refuses to pay.",
-        onChainMechanism: "Progress node advancement + immutable on-chain state.",
-    },
-    {
-        id: 4, type: "payoff", name: "Fulfillment payoff vs Fraud payoff",
-        description: "Honest fulfillment yields sustained income + reputation; fraud yields one-time income but loses reputation and compensation fund.",
-        wowokApplication: "compensation_fund as economic penalty for fraud; repeat business as long-term payoff for cooperation.",
-        onChainMechanism: "Service.compensation_fund + Treasury locked funds.",
-    },
-    {
-        id: 5, type: "utility", name: "Reputation utility",
-        description: "Merchant's total utility = immediate income + reputation-discounted future income - expected penalty.",
-        wowokApplication: "Merchants with high reputation scores get more orders (Demand matching priority).",
-        onChainMechanism: "ReviewRepository (on-chain public reviews) + Demand matching engine.",
-    },
-    {
-        id: 6, type: "equilibrium", name: "Nash equilibrium: mutual cooperation",
-        description: "When penalties are large enough and reputation is important enough, the strategy profile of mutual cooperation becomes a Nash equilibrium.",
-        wowokApplication: "compensation_fund large enough + immutable on-chain reputation -> cooperation becomes the optimal strategy.",
-        onChainMechanism: "Guard verifies compensation_fund amount + ReviewRepository public.",
-    },
-    {
-        id: 7, type: "information", name: "Incomplete information",
-        description: "Customers don't fully understand the merchant's service quality; merchants don't fully understand the customer's payment capacity.",
-        wowokApplication: "Service.description + Guard verification as signals; customer wallet balance is queryable on-chain.",
-        onChainMechanism: "Guard + Personal object + on-chain transaction history.",
-    },
-    {
-        id: 8, type: "sequence", name: "Sequential game",
-        description: "Customer places order and pays first, merchant fulfills later — this is a typical sequential game.",
-        wowokApplication: "Order creation -> Progress advancement -> Acceptance/Arbitration.",
-        onChainMechanism: "Machine node sequence + Progress state machine.",
-    },
-    {
-        id: 9, type: "repetition", name: "Repeated game",
-        description: "Merchants and customers may transact multiple times; repeated games make cooperation strategies superior.",
-        wowokApplication: "Customer repeat purchases + Demand matching prioritizes high-reputation merchants.",
-        onChainMechanism: "ReviewRepository accumulates reviews + Demand matching engine.",
-    },
-    {
-        id: 10, type: "commitment", name: "Compensation fund commitment",
-        description: "Merchants make a credible commitment by locking compensation_fund, reducing customers' risk perception.",
-        wowokApplication: "Service.compensation_fund locks funds; customers can claim compensation in case of fraud.",
-        onChainMechanism: "Treasury object + Guard verifies amount + withdrawal rules.",
-    },
-    {
-        id: 11, type: "punishment", name: "Compensation fund penalty",
-        description: "When a merchant commits fraud, the compensation fund is transferred to the customer, constituting economic punishment.",
-        wowokApplication: "Arbitration verdict -> compensation_fund withdrawal -> customer receives compensation.",
-        onChainMechanism: "Arbitration verdict + Treasury withdrawal rules.",
-    },
-    {
-        id: 12, type: "reward", name: "Reward marketing incentive",
-        description: "Merchants issue rewards via Reward objects, incentivizing customer behavior (first order, referral, loyalty).",
-        wowokApplication: "Reward object + Guard verifies claim conditions (e.g., completed first order).",
-        onChainMechanism: "Reward object + Guard claim conditions + Allocation distribution.",
-    },
-    {
-        id: 13, type: "reputation", name: "On-chain public reputation",
-        description: "All transactions and reviews are recorded on-chain, forming an immutable reputation system.",
-        wowokApplication: "ReviewRepository stores like/dislike/review tags, queryable on-chain.",
-        onChainMechanism: "Repository object + Guard anti-spam + address-keyed review records.",
-    },
-    {
-        id: 14, type: "signaling", name: "Quality signal",
-        description: "Merchants send quality signals via Guard verification, compensation_fund amount, and Machine transparency.",
-        wowokApplication: "buy_guard verification -> signal; compensation_fund amount -> signal; Machine public -> signal.",
-        onChainMechanism: "Guard + Treasury + Machine object's on-chain public data.",
-    },
-    {
-        id: 15, type: "screening", name: "Customer screening",
-        description: "Merchants screen customers via Guard (e.g., verify identity, credit score, wallet balance).",
-        wowokApplication: "Service.buy_guard verifies customer eligibility.",
-        onChainMechanism: "Guard object + gen_passport verifies credentials.",
-    },
-    {
-        id: 16, type: "bargaining", name: "Price bargaining",
-        description: "Customers and merchants can bargain via Messenger; the final price is submitted via Demand.",
-        wowokApplication: "Messenger encrypted communication -> Demand submits demand with reward.",
-        onChainMechanism: "Contact + Messenger + Demand objects.",
-    },
-    {
-        id: 17, type: "auction", name: "Demand bidding",
-        description: "Multiple service providers can compete for the same Demand, forming a bidding mechanism.",
-        wowokApplication: "Demand publishes demand -> multiple Services submit proposals -> customer chooses.",
-        onChainMechanism: "Demand object + order creation + Progress advancement.",
-    },
-    {
-        id: 18, type: "mechanism", name: "Mechanism design",
-        description: "WoWok's overall architecture is mechanism design: incentivizing cooperation and punishing fraud via on-chain rules.",
-        wowokApplication: "compensation_fund + Arbitration + ReviewRepository combine to form a trust mechanism.",
-        onChainMechanism: "Move contract-level object composition + Guard verification + immutability.",
-    },
-    {
-        id: 19, type: "constraint", name: "Fund constraint",
-        description: "compensation_fund and Reward fund locks constitute economic constraints, limiting the merchant's incentive to commit fraud.",
-        wowokApplication: "Fund lock > fraud payoff -> cooperation is the rational choice.",
-        onChainMechanism: "Treasury + Allocation fund lock.",
-    },
-    {
-        id: 20, type: "cooperation", name: "Supply chain collaboration",
-        description: "Multiple merchants combine via Machine to form a supply chain, cooperating to fulfill complex orders (sub-orders).",
-        wowokApplication: "Service's order_allocators supports multi-supplier allocation; Machine node forwards combine.",
-        onChainMechanism: "Allocation + Machine Forward + Progress cross-object composition.",
-    },
-];
-const PERMISSION_INDEX = new Map(PERMISSION_TYPES.map((p) => [p.name, p]));
-const GAME_ELEMENT_INDEX = new Map(GAME_ELEMENTS.map((g) => [g.id, g]));
-export function getPermissionType(name) {
-    return PERMISSION_INDEX.get(name);
-}
-export function getGameElement(id) {
-    return GAME_ELEMENT_INDEX.get(id);
-}
-export function getGameElementsByType(type) {
-    return GAME_ELEMENTS.filter((g) => g.type === type);
-}
-export const PROCESS_MODEL_VERSION = 1;
+export const PERMISSION_TYPES=[{'name':'Permission','scope':'organization','definedOn':'Permission\x20Object\x20(standalone\x20on-chain\x20object,\x20referenced\x20by\x20service/machine/etc.)','controls':'Who\x20can\x20modify\x20the\x20bound\x20object\x27s\x20settings,\x20publish\x20it,\x20manage\x20its\x20funds,\x20etc.','grantedBy':'The\x20object\x27s\x20creator\x20(owner)\x20or\x20anyone\x20the\x20creator\x20delegates\x20to','example':'A\x20shop\x20owner\x20creates\x20a\x20Permission\x20allowing\x20only\x20their\x20staff\x20to\x20modify\x20the\x20Service\x27s\x20price.'},{'name':'NamedOperator','scope':'order','definedOn':'Per-order\x20(specified\x20in\x20the\x20order\x20creation/modification\x20by\x20the\x20service)','controls':'Who\x20can\x20operate\x20on\x20a\x20specific\x20order:\x20advance\x20progress,\x20settle,\x20refund,\x20etc.','grantedBy':'The\x20service\x20(via\x20its\x20order_allocators\x20or\x20explicit\x20named\x20operators)','example':'A\x20delivery\x20service\x20assigns\x20Alice\x20as\x20the\x20NamedOperator\x20for\x20order\x20#123\x20—\x20only\x20Alice\x20can\x20mark\x20it\x20delivered.'},{'name':'OrderHolder','scope':'order_holder','definedOn':'Per-order\x20(the\x20\x27\x27\x20empty\x20string\x20address\x20=\x20the\x20order\x27s\x20current\x20holder)','controls':'Who\x20currently\x20holds\x20the\x20order\x20and\x20can\x20perform\x20holder-specific\x20actions\x20(accept,\x20reject,\x20pay)','grantedBy':'Implicitly\x20assigned\x20when\x20an\x20order\x20is\x20created\x20or\x20transferred','example':'Bob\x20places\x20an\x20order\x20—\x20he\x20becomes\x20the\x20OrderHolder.\x20He\x20can\x20accept\x20delivery\x20or\x20request\x20arbitration.'}];export const GAME_ELEMENTS=[{'id':0x1,'type':'player','name':'Merchant\x20vs\x20Customer','description':'The\x20basic\x20participants\x20of\x20the\x20game:\x20the\x20merchant\x20providing\x20the\x20service\x20and\x20the\x20customer\x20purchasing\x20the\x20service.','wowokApplication':'Service\x20creator\x20(merchant)\x20and\x20Order\x20creator\x20(customer).','onChainMechanism':'Service\x20+\x20Order\x20objects,\x20each\x20with\x20an\x20independent\x20on-chain\x20address.'},{'id':0x2,'type':'player','name':'Arbitrator','description':'Third-party\x20arbitrators\x20participate\x20in\x20the\x20dispute\x20resolution\x20game.','wowokApplication':'NamedOperator\x20of\x20the\x20Arb\x20object,\x20designated\x20by\x20the\x20Service.','onChainMechanism':'Arbitration\x20object\x20+\x20NamedOperator\x20permission.'},{'id':0x3,'type':'strategy','name':'Cooperation\x20vs\x20Deception','description':'The\x20merchant\x20can\x20choose\x20honest\x20fulfillment\x20(cooperation)\x20or\x20fraud\x20(deception).\x20The\x20customer\x20can\x20choose\x20to\x20trust\x20or\x20refuse.','wowokApplication':'Merchant\x20ships\x20vs\x20doesn\x27t\x20ship;\x20customer\x20pays\x20vs\x20refuses\x20to\x20pay.','onChainMechanism':'Progress\x20node\x20advancement\x20+\x20immutable\x20on-chain\x20state.'},{'id':0x4,'type':'payoff','name':'Fulfillment\x20payoff\x20vs\x20Fraud\x20payoff','description':'Honest\x20fulfillment\x20yields\x20sustained\x20income\x20+\x20reputation;\x20fraud\x20yields\x20one-time\x20income\x20but\x20loses\x20reputation\x20and\x20compensation\x20fund.','wowokApplication':'compensation_fund\x20as\x20economic\x20penalty\x20for\x20fraud;\x20repeat\x20business\x20as\x20long-term\x20payoff\x20for\x20cooperation.','onChainMechanism':'Service.compensation_fund\x20+\x20Treasury\x20locked\x20funds.'},{'id':0x5,'type':'utility','name':'Reputation\x20utility','description':'Merchant\x27s\x20total\x20utility\x20=\x20immediate\x20income\x20+\x20reputation-discounted\x20future\x20income\x20-\x20expected\x20penalty.','wowokApplication':'Merchants\x20with\x20high\x20reputation\x20scores\x20get\x20more\x20orders\x20(Demand\x20matching\x20priority).','onChainMechanism':'ReviewRepository\x20(on-chain\x20public\x20reviews)\x20+\x20Demand\x20matching\x20engine.'},{'id':0x6,'type':'equilibrium','name':'Nash\x20equilibrium:\x20mutual\x20cooperation','description':'When\x20penalties\x20are\x20large\x20enough\x20and\x20reputation\x20is\x20important\x20enough,\x20the\x20strategy\x20profile\x20of\x20mutual\x20cooperation\x20becomes\x20a\x20Nash\x20equilibrium.','wowokApplication':'compensation_fund\x20large\x20enough\x20+\x20immutable\x20on-chain\x20reputation\x20->\x20cooperation\x20becomes\x20the\x20optimal\x20strategy.','onChainMechanism':'Guard\x20verifies\x20compensation_fund\x20amount\x20+\x20ReviewRepository\x20public.'},{'id':0x7,'type':'information','name':'Incomplete\x20information','description':'Customers\x20don\x27t\x20fully\x20understand\x20the\x20merchant\x27s\x20service\x20quality;\x20merchants\x20don\x27t\x20fully\x20understand\x20the\x20customer\x27s\x20payment\x20capacity.','wowokApplication':'Service.description\x20+\x20Guard\x20verification\x20as\x20signals;\x20customer\x20wallet\x20balance\x20is\x20queryable\x20on-chain.','onChainMechanism':'Guard\x20+\x20Personal\x20object\x20+\x20on-chain\x20transaction\x20history.'},{'id':0x8,'type':'sequence','name':'Sequential\x20game','description':'Customer\x20places\x20order\x20and\x20pays\x20first,\x20merchant\x20fulfills\x20later\x20—\x20this\x20is\x20a\x20typical\x20sequential\x20game.','wowokApplication':'Order\x20creation\x20->\x20Progress\x20advancement\x20->\x20Acceptance/Arbitration.','onChainMechanism':'Machine\x20node\x20sequence\x20+\x20Progress\x20state\x20machine.'},{'id':0x9,'type':'repetition','name':'Repeated\x20game','description':'Merchants\x20and\x20customers\x20may\x20transact\x20multiple\x20times;\x20repeated\x20games\x20make\x20cooperation\x20strategies\x20superior.','wowokApplication':'Customer\x20repeat\x20purchases\x20+\x20Demand\x20matching\x20prioritizes\x20high-reputation\x20merchants.','onChainMechanism':'ReviewRepository\x20accumulates\x20reviews\x20+\x20Demand\x20matching\x20engine.'},{'id':0xa,'type':'commitment','name':'Compensation\x20fund\x20commitment','description':'Merchants\x20make\x20a\x20credible\x20commitment\x20by\x20locking\x20compensation_fund,\x20reducing\x20customers\x27\x20risk\x20perception.','wowokApplication':'Service.compensation_fund\x20locks\x20funds;\x20customers\x20can\x20claim\x20compensation\x20in\x20case\x20of\x20fraud.','onChainMechanism':'Treasury\x20object\x20+\x20Guard\x20verifies\x20amount\x20+\x20withdrawal\x20rules.'},{'id':0xb,'type':'punishment','name':'Compensation\x20fund\x20penalty','description':'When\x20a\x20merchant\x20commits\x20fraud,\x20the\x20compensation\x20fund\x20is\x20transferred\x20to\x20the\x20customer,\x20constituting\x20economic\x20punishment.','wowokApplication':'Arbitration\x20verdict\x20->\x20compensation_fund\x20withdrawal\x20->\x20customer\x20receives\x20compensation.','onChainMechanism':'Arbitration\x20verdict\x20+\x20Treasury\x20withdrawal\x20rules.'},{'id':0xc,'type':'reward','name':'Reward\x20marketing\x20incentive','description':'Merchants\x20issue\x20rewards\x20via\x20Reward\x20objects,\x20incentivizing\x20customer\x20behavior\x20(first\x20order,\x20referral,\x20loyalty).','wowokApplication':'Reward\x20object\x20+\x20Guard\x20verifies\x20claim\x20conditions\x20(e.g.,\x20completed\x20first\x20order).','onChainMechanism':'Reward\x20object\x20+\x20Guard\x20claim\x20conditions\x20+\x20Allocation\x20distribution.'},{'id':0xd,'type':'reputation','name':'On-chain\x20public\x20reputation','description':'All\x20transactions\x20and\x20reviews\x20are\x20recorded\x20on-chain,\x20forming\x20an\x20immutable\x20reputation\x20system.','wowokApplication':'ReviewRepository\x20stores\x20like/dislike/review\x20tags,\x20queryable\x20on-chain.','onChainMechanism':'Repository\x20object\x20+\x20Guard\x20anti-spam\x20+\x20address-keyed\x20review\x20records.'},{'id':0xe,'type':'signaling','name':'Quality\x20signal','description':'Merchants\x20send\x20quality\x20signals\x20via\x20Guard\x20verification,\x20compensation_fund\x20amount,\x20and\x20Machine\x20transparency.','wowokApplication':'buy_guard\x20verification\x20->\x20signal;\x20compensation_fund\x20amount\x20->\x20signal;\x20Machine\x20public\x20->\x20signal.','onChainMechanism':'Guard\x20+\x20Treasury\x20+\x20Machine\x20object\x27s\x20on-chain\x20public\x20data.'},{'id':0xf,'type':'screening','name':'Customer\x20screening','description':'Merchants\x20screen\x20customers\x20via\x20Guard\x20(e.g.,\x20verify\x20identity,\x20credit\x20score,\x20wallet\x20balance).','wowokApplication':'Service.buy_guard\x20verifies\x20customer\x20eligibility.','onChainMechanism':'Guard\x20object\x20+\x20gen_passport\x20verifies\x20credentials.'},{'id':0x10,'type':'bargaining','name':'Price\x20bargaining','description':'Customers\x20and\x20merchants\x20can\x20bargain\x20via\x20Messenger;\x20the\x20final\x20price\x20is\x20submitted\x20via\x20Demand.','wowokApplication':'Messenger\x20encrypted\x20communication\x20->\x20Demand\x20submits\x20demand\x20with\x20reward.','onChainMechanism':'Contact\x20+\x20Messenger\x20+\x20Demand\x20objects.'},{'id':0x11,'type':'auction','name':'Demand\x20bidding','description':'Multiple\x20service\x20providers\x20can\x20compete\x20for\x20the\x20same\x20Demand,\x20forming\x20a\x20bidding\x20mechanism.','wowokApplication':'Demand\x20publishes\x20demand\x20->\x20multiple\x20Services\x20submit\x20proposals\x20->\x20customer\x20chooses.','onChainMechanism':'Demand\x20object\x20+\x20order\x20creation\x20+\x20Progress\x20advancement.'},{'id':0x12,'type':'mechanism','name':'Mechanism\x20design','description':'WoWok\x27s\x20overall\x20architecture\x20is\x20mechanism\x20design:\x20incentivizing\x20cooperation\x20and\x20punishing\x20fraud\x20via\x20on-chain\x20rules.','wowokApplication':'compensation_fund\x20+\x20Arbitration\x20+\x20ReviewRepository\x20combine\x20to\x20form\x20a\x20trust\x20mechanism.','onChainMechanism':'Move\x20contract-level\x20object\x20composition\x20+\x20Guard\x20verification\x20+\x20immutability.'},{'id':0x13,'type':'constraint','name':'Fund\x20constraint','description':'compensation_fund\x20and\x20Reward\x20fund\x20locks\x20constitute\x20economic\x20constraints,\x20limiting\x20the\x20merchant\x27s\x20incentive\x20to\x20commit\x20fraud.','wowokApplication':'Fund\x20lock\x20>\x20fraud\x20payoff\x20->\x20cooperation\x20is\x20the\x20rational\x20choice.','onChainMechanism':'Treasury\x20+\x20Allocation\x20fund\x20lock.'},{'id':0x14,'type':'cooperation','name':'Supply\x20chain\x20collaboration','description':'Multiple\x20merchants\x20combine\x20via\x20Machine\x20to\x20form\x20a\x20supply\x20chain,\x20cooperating\x20to\x20fulfill\x20complex\x20orders\x20(sub-orders).','wowokApplication':'Service\x27s\x20order_allocators\x20supports\x20multi-supplier\x20allocation;\x20Machine\x20node\x20forwards\x20combine.','onChainMechanism':'Allocation\x20+\x20Machine\x20Forward\x20+\x20Progress\x20cross-object\x20composition.'}];const PERMISSION_INDEX=new Map(PERMISSION_TYPES['map'](a=>[a['name'],a])),GAME_ELEMENT_INDEX=new Map(GAME_ELEMENTS['map'](a=>[a['id'],a]));export function getPermissionType(a){return PERMISSION_INDEX['get'](a);}export function getGameElement(a){return GAME_ELEMENT_INDEX['get'](a);}export function getGameElementsByType(a){return GAME_ELEMENTS['filter'](b=>b['type']===a);}export const PROCESS_MODEL_VERSION=0x1;