@wowok/agent-mcp 2.7.1 → 2.7.3

package/dist/knowledge/proof-translation.js

@@ -1,283 +1 @@
-import { WOWOK_WTS_PROOF_TYPE } from "@wowok/wowok";
-export const SEMANTIC_TO_PROOF_SCHEMA_RULES = [
-    {
-        id: "P-PROOF-01",
-        pattern_name: "Wowok WTS (Will-To-Sign) proof",
-        proof_type_classification: "wts",
-        semantic_intent: "An off-chain server attests to a fact (identity, timestamp, merkle root) and signs it with server_pubkey. " +
-            "On-chain consumers verify the signature off-chain and trust the Proof record as evidence.",
-        match_keywords: ["wts", "server-signed", "attestation", "kyc", "merkle root", "timestamp"],
-        schema_elements: {
-            proof_type_value: WOWOK_WTS_PROOF_TYPE,
-            required_fields: ["proof", "server_pubkey", "server_signature", "description"],
-            optional_fields: ["item_count", "about_address", "namedNew"],
-            about_address_recommendation: "Set about_address when the WTS proof attests to a specific on-chain entity (user address, Repository, etc.). " +
-                "Leave null for free-standing attestations (e.g. server timestamp).",
-        },
-        constraints: [
-            `proof_type must equal ${WOWOK_WTS_PROOF_TYPE} (WOWOK_WTS_PROOF_TYPE)`,
-            "server_pubkey must be the raw public key (hex-encoded), not a certificate",
-            "server_signature must sign the exact bytes of the 'proof' field (or a documented pre-image)",
-            "Off-chain verification logic must be documented for consumers",
-        ],
-        example: {
-            proof_type: WOWOK_WTS_PROOF_TYPE,
-            proof: "0xabc123...merkle_root_hex...",
-            server_pubkey: "0x04a1b2c3...ed25519_or_ecdsa_pubkey_hex...",
-            server_signature: "0x9d8e7f6...signature_hex...",
-            description: "KYC attestation for user 0xabc (merkle root of 1024 leaves)",
-            item_count: 1024,
-            about_address: "0xabc...user_address...",
-            namedNew: { name: "kyc_user_abc" },
-        },
-    },
-    {
-        id: "P-PROOF-02",
-        pattern_name: "Custom proof in Wowok reserved range (NOT recommended)",
-        proof_type_classification: "custom_reserved",
-        semantic_intent: "A custom proof type using a value in the reserved range 2-100. This is NOT recommended because future " +
-            "Wowok protocol upgrades may claim these values, breaking semantic compatibility. Use only if you have " +
-            "explicit Wowok authority to claim a reserved value.",
-        match_keywords: ["reserved", "custom reserved", "wowok-defined"],
-        schema_elements: {
-            proof_type_value: "2-100 (specific value documented by creator)",
-            required_fields: ["proof", "server_pubkey", "server_signature", "description", "proof_type"],
-            optional_fields: ["item_count", "about_address", "namedNew"],
-            about_address_recommendation: "Same as P-PROOF-01: set about_address for entity-bound attestations.",
-        },
-        constraints: [
-            "Caller must have explicit Wowok authority to claim a reserved proof_type value",
-            "Verification logic must be documented and stable across protocol upgrades",
-            "Future Wowok upgrades may reassign this value — callers must handle migration",
-        ],
-        example: {
-            proof_type: 5,
-            proof: "0x...custom_proof_format...",
-            server_pubkey: "0x...pubkey...",
-            server_signature: "0x...sig...",
-            description: "Custom reserved proof type (documented by authority X)",
-        },
-    },
-    {
-        id: "P-PROOF-03",
-        pattern_name: "User-defined proof type (>100)",
-        proof_type_classification: "custom_user",
-        semantic_intent: "A fully custom proof type using a value > 100. The creator defines the verification logic (off-chain). " +
-            "This is the recommended range for application-specific proof semantics that Wowok protocol does not cover.",
-        match_keywords: ["custom", "user-defined", "application-specific", "custom proof type"],
-        schema_elements: {
-            proof_type_value: ">100 (user-chosen, must be unique within application scope)",
-            required_fields: ["proof", "server_pubkey", "server_signature", "description", "proof_type"],
-            optional_fields: ["item_count", "about_address", "namedNew"],
-            about_address_recommendation: "Set about_address when the proof is bound to a specific on-chain entity. Leave null for off-chain-only proofs.",
-        },
-        constraints: [
-            "proof_type must be > 100 (user-defined range)",
-            "Application must document the verification logic and proof format",
-            "Ensure proof_type does not collide with other user-defined types in the same consumer scope",
-        ],
-        example: {
-            proof_type: 200,
-            proof: "0x...application_specific_proof_format...",
-            server_pubkey: "0x...pubkey...",
-            server_signature: "0x...sig...",
-            description: "Application-specific attestation (format documented at https://...)",
-            about_address: null,
-            namedNew: { name: "custom_attestation_001" },
-        },
-    },
-];
-export const PROOF_FIELD_TRANSLATIONS = [
-    {
-        field_name: "proof",
-        value_type: "string (hex-encoded)",
-        semantic: "The cryptographic proof content. Typically a merkle tree root, a hash digest, or a compact serialized attestation. " +
-            "Off-chain verifiers use this together with server_pubkey and server_signature to verify the proof's authenticity.",
-        format_example: "0xabc123...merkle_root_64hex...",
-        validation_rules: [
-            "Non-empty string",
-            "Length ≤ MAX_PROOF_SIZE (10240 bytes)",
-            "Move aborts with E_MAX_PROOF_SIZE (1) on overflow",
-        ],
-    },
-    {
-        field_name: "server_pubkey",
-        value_type: "string (hex-encoded)",
-        semantic: "The public key of the off-chain server that signed this proof. Consumers use this to verify server_signature " +
-            "off-chain. Submit the raw public key bytes, not a certificate chain or JWK structure.",
-        format_example: "0x04a1b2c3...ed25519_pubkey_64hex...",
-        validation_rules: [
-            "Non-empty string",
-            "Length ≤ MAX_SERVER_PUBKEY_SIZE (2048 bytes)",
-            "Move aborts with E_MAX_SERVER_PUBKEY_SIZE (2) on overflow",
-            "Must be a valid public key for the signature scheme used",
-        ],
-    },
-    {
-        field_name: "server_signature",
-        value_type: "string (hex-encoded)",
-        semantic: "The signature produced by the off-chain server using its private key. Verifiers check this against " +
-            "server_pubkey and the proof content (or a documented pre-image).",
-        format_example: "0x9d8e7f6...signature_hex...",
-        validation_rules: [
-            "Non-empty string",
-            "Length ≤ MAX_SERVER_SIGNATURE_SIZE (40480 bytes)",
-            "Move aborts with E_MAX_SERVER_SIGNATURE_SIZE (3) on overflow",
-        ],
-    },
-    {
-        field_name: "proof_type",
-        value_type: "u64 (number | bigint | numeric string)",
-        semantic: `Classifies the proof's verification logic. ${WOWOK_WTS_PROOF_TYPE}=WOWOK_WTS_PROOF_TYPE (Wowok Will-To-Sign, ` +
-            `signed by off-chain server). Values 2-100 are reserved for future Wowok-defined types. Values >100 are user-defined.`,
-        format_example: `1 (WTS), 200 (custom)`,
-        validation_rules: [
-            "Required field",
-            "Must be ≥ 1 (P-PROOF-P2-2: schema rejects 0 and non-numeric strings)",
-            "Value 1 = WOWOK_WTS_PROOF_TYPE",
-            "Values 2-100 require explicit Wowok authority",
-            "Values >100 are user-defined",
-        ],
-    },
-    {
-        field_name: "about_address",
-        move_field: "about",
-        value_type: "Option<address> (string | null)",
-        semantic: "The on-chain address of the entity being proved (e.g. a user, order, Repository). When null, the Proof is a " +
-            "free-standing cryptographic statement with no on-chain binding. SDK sends Option::none to Move when null/undefined.",
-        format_example: "0xabc...64hex_address... or null",
-        validation_rules: [
-            "Optional (null/undefined → Option::none) [PF-D-1=A]",
-            "When provided, must be a raw 0x-prefixed 64-hex address (NOT a name)",
-            "SDK isValidAddress check enforces format",
-        ],
-    },
-    {
-        field_name: "description",
-        value_type: "string",
-        semantic: "Human-readable description of this Proof. Required field (PF-D-2=A). Helps identify the Proof in query results " +
-            "and audit logs. Should be a one-line summary (e.g. \"KYC attestation for user 0xabc\").",
-        format_example: "KYC attestation for user 0xabc (merkle root of 1024 leaves)",
-        validation_rules: [
-            "Required field [PF-D-2=A]",
-            "Length ≤ MAX_DESCRIPTION_LENGTH (defined in common.ts)",
-            "SDK isValidDescription check enforces max length",
-        ],
-    },
-    {
-        field_name: "item_count",
-        move_field: "item_count",
-        value_type: "Option<u64> (number | bigint | numeric string | null)",
-        semantic: "Optional count of items in the off-chain data structure (e.g. number of leaves in a merkle tree). " +
-            "Used by consumers to interpret the proof content. When null, SDK sends Option::none to Move.",
-        format_example: "1024 or null",
-        validation_rules: [
-            "Optional (null/undefined → Option::none)",
-            "When provided, must be ≥ 0",
-        ],
-    },
-];
-export const PROOF_CONSTRAINT_RULES = [
-    {
-        id: "PROOF_C_01",
-        name: "proof content non-empty",
-        description: "The 'proof' field must be a non-empty string.",
-        validation_logic: "proof.length > 0",
-        failure_message: "proof field is empty",
-        related_field: "proof",
-    },
-    {
-        id: "PROOF_C_02",
-        name: "proof content within size limit",
-        description: `The 'proof' field must be ≤ MAX_PROOF_SIZE (10240 bytes).`,
-        validation_logic: "proof.length <= MAX_PROOF_SIZE",
-        failure_message: "proof exceeds MAX_PROOF_SIZE (10240 bytes) — E_MAX_PROOF_SIZE (1)",
-        related_field: "proof",
-    },
-    {
-        id: "PROOF_C_03",
-        name: "server_pubkey within size limit",
-        description: "The 'server_pubkey' field must be ≤ MAX_SERVER_PUBKEY_SIZE (2048 bytes).",
-        validation_logic: "server_pubkey.length <= MAX_SERVER_PUBKEY_SIZE",
-        failure_message: "server_pubkey exceeds MAX_SERVER_PUBKEY_SIZE (2048 bytes) — E_MAX_SERVER_PUBKEY_SIZE (2)",
-        related_field: "server_pubkey",
-    },
-    {
-        id: "PROOF_C_04",
-        name: "server_signature within size limit",
-        description: "The 'server_signature' field must be ≤ MAX_SERVER_SIGNATURE_SIZE (40480 bytes).",
-        validation_logic: "server_signature.length <= MAX_SERVER_SIGNATURE_SIZE",
-        failure_message: "server_signature exceeds MAX_SERVER_SIGNATURE_SIZE (40480 bytes) — E_MAX_SERVER_SIGNATURE_SIZE (3)",
-        related_field: "server_signature",
-    },
-    {
-        id: "PROOF_C_05",
-        name: "proof_type valid range",
-        description: `proof_type must be ≥ 1 (WOWOK_WTS_PROOF_TYPE=${WOWOK_WTS_PROOF_TYPE} is the minimum).`,
-        validation_logic: "proof_type >= 1",
-        failure_message: "proof_type must be ≥ 1 — schema rejects 0 and non-numeric strings",
-        related_field: "proof_type",
-    },
-    {
-        id: "PROOF_C_06",
-        name: "about_address format (when provided)",
-        description: "When about_address is non-null, it must be a valid 0x-prefixed 64-hex address.",
-        validation_logic: "about_address == null || /^0x[0-9a-fA-F]{64}$/.test(about_address)",
-        failure_message: "about_address is not a valid 0x-prefixed 64-hex address",
-        related_field: "about_address",
-    },
-];
-export function explainProof(input) {
-    const warnings = [];
-    const recommendations = [];
-    let classification = "unknown";
-    if (input.proof_type !== undefined && input.proof_type !== null) {
-        const n = typeof input.proof_type === "string" ? BigInt(input.proof_type) : BigInt(input.proof_type);
-        if (n === BigInt(WOWOK_WTS_PROOF_TYPE)) {
-            classification = `WTS proof (proof_type=${WOWOK_WTS_PROOF_TYPE}) — signed by off-chain server`;
-        }
-        else if (n > 1n && n <= 100n) {
-            classification = `Custom proof in reserved range (proof_type=${input.proof_type}) — NOT recommended without Wowok authority`;
-            warnings.push(`proof_type=${input.proof_type} is in reserved range 2-100 — future Wowok upgrades may reassign this value`);
-        }
-        else if (n > 100n) {
-            classification = `User-defined proof (proof_type=${input.proof_type}) — application-specific verification logic`;
-        }
-        else {
-            classification = `INVALID proof_type=${input.proof_type} (must be ≥ 1)`;
-            warnings.push("proof_type is < 1 — schema validation will reject");
-        }
-    }
-    const binding = input.about_address
-        ? `Entity-bound: about_address=${input.about_address.substring(0, 10)}... (proof attests to this on-chain entity)`
-        : "Free-standing: no on-chain entity binding (about_address=null)";
-    const sizeStatus = [];
-    if (input.proof) {
-        sizeStatus.push(`proof=${input.proof.length} bytes (limit 10240)`);
-    }
-    if (input.server_pubkey) {
-        sizeStatus.push(`server_pubkey=${input.server_pubkey.length} bytes (limit 2048)`);
-    }
-    if (input.server_signature) {
-        sizeStatus.push(`server_signature=${input.server_signature.length} bytes (limit 40480)`);
-    }
-    if (!input.description || input.description.length === 0) {
-        recommendations.push("Provide a non-empty description for audit log discoverability");
-    }
-    if (!input.about_address) {
-        recommendations.push("Consider setting about_address if this Proof attests to a specific on-chain entity");
-    }
-    if (input.item_count === undefined || input.item_count === null) {
-        recommendations.push("Consider setting item_count if the proof references a multi-item data structure");
-    }
-    const summary = `Proof is a ${classification}. ${binding}. ` +
-        (sizeStatus.length > 0 ? `Sizes: ${sizeStatus.join(", ")}.` : "");
-    return {
-        summary,
-        proof_type_classification: classification,
-        binding,
-        size_status: sizeStatus.join(", "),
-        warnings,
-        recommendations,
-    };
-}
+import{WOWOK_WTS_PROOF_TYPE}from'@wowok/wowok';export const SEMANTIC_TO_PROOF_SCHEMA_RULES=[{'id':'P-PROOF-01','pattern_name':'Wowok\x20WTS\x20(Will-To-Sign)\x20proof','proof_type_classification':'wts','semantic_intent':'An\x20off-chain\x20server\x20attests\x20to\x20a\x20fact\x20(identity,\x20timestamp,\x20merkle\x20root)\x20and\x20signs\x20it\x20with\x20server_pubkey.\x20'+'On-chain\x20consumers\x20verify\x20the\x20signature\x20off-chain\x20and\x20trust\x20the\x20Proof\x20record\x20as\x20evidence.','match_keywords':['wts','server-signed','attestation','kyc','merkle\x20root','timestamp'],'schema_elements':{'proof_type_value':WOWOK_WTS_PROOF_TYPE,'required_fields':['proof','server_pubkey','server_signature','description'],'optional_fields':['item_count','about_address','namedNew'],'about_address_recommendation':'Set\x20about_address\x20when\x20the\x20WTS\x20proof\x20attests\x20to\x20a\x20specific\x20on-chain\x20entity\x20(user\x20address,\x20Repository,\x20etc.).\x20'+'Leave\x20null\x20for\x20free-standing\x20attestations\x20(e.g.\x20server\x20timestamp).'},'constraints':['proof_type\x20must\x20equal\x20'+WOWOK_WTS_PROOF_TYPE+'\x20(WOWOK_WTS_PROOF_TYPE)','server_pubkey\x20must\x20be\x20the\x20raw\x20public\x20key\x20(hex-encoded),\x20not\x20a\x20certificate','server_signature\x20must\x20sign\x20the\x20exact\x20bytes\x20of\x20the\x20\x27proof\x27\x20field\x20(or\x20a\x20documented\x20pre-image)','Off-chain\x20verification\x20logic\x20must\x20be\x20documented\x20for\x20consumers'],'example':{'proof_type':WOWOK_WTS_PROOF_TYPE,'proof':'0xabc123...merkle_root_hex...','server_pubkey':'0x04a1b2c3...ed25519_or_ecdsa_pubkey_hex...','server_signature':'0x9d8e7f6...signature_hex...','description':'KYC\x20attestation\x20for\x20user\x200xabc\x20(merkle\x20root\x20of\x201024\x20leaves)','item_count':0x400,'about_address':'0xabc...user_address...','namedNew':{'name':'kyc_user_abc'}}},{'id':'P-PROOF-02','pattern_name':'Custom\x20proof\x20in\x20Wowok\x20reserved\x20range\x20(NOT\x20recommended)','proof_type_classification':'custom_reserved','semantic_intent':'A\x20custom\x20proof\x20type\x20using\x20a\x20value\x20in\x20the\x20reserved\x20range\x202-100.\x20This\x20is\x20NOT\x20recommended\x20because\x20future\x20'+'Wowok\x20protocol\x20upgrades\x20may\x20claim\x20these\x20values,\x20breaking\x20semantic\x20compatibility.\x20Use\x20only\x20if\x20you\x20have\x20'+'explicit\x20Wowok\x20authority\x20to\x20claim\x20a\x20reserved\x20value.','match_keywords':['reserved','custom\x20reserved','wowok-defined'],'schema_elements':{'proof_type_value':'2-100\x20(specific\x20value\x20documented\x20by\x20creator)','required_fields':['proof','server_pubkey','server_signature','description','proof_type'],'optional_fields':['item_count','about_address','namedNew'],'about_address_recommendation':'Same\x20as\x20P-PROOF-01:\x20set\x20about_address\x20for\x20entity-bound\x20attestations.'},'constraints':['Caller\x20must\x20have\x20explicit\x20Wowok\x20authority\x20to\x20claim\x20a\x20reserved\x20proof_type\x20value','Verification\x20logic\x20must\x20be\x20documented\x20and\x20stable\x20across\x20protocol\x20upgrades','Future\x20Wowok\x20upgrades\x20may\x20reassign\x20this\x20value\x20—\x20callers\x20must\x20handle\x20migration'],'example':{'proof_type':0x5,'proof':'0x...custom_proof_format...','server_pubkey':'0x...pubkey...','server_signature':'0x...sig...','description':'Custom\x20reserved\x20proof\x20type\x20(documented\x20by\x20authority\x20X)'}},{'id':'P-PROOF-03','pattern_name':'User-defined\x20proof\x20type\x20(>100)','proof_type_classification':'custom_user','semantic_intent':'A\x20fully\x20custom\x20proof\x20type\x20using\x20a\x20value\x20>\x20100.\x20The\x20creator\x20defines\x20the\x20verification\x20logic\x20(off-chain).\x20'+'This\x20is\x20the\x20recommended\x20range\x20for\x20application-specific\x20proof\x20semantics\x20that\x20Wowok\x20protocol\x20does\x20not\x20cover.','match_keywords':['custom','user-defined','application-specific','custom\x20proof\x20type'],'schema_elements':{'proof_type_value':'>100\x20(user-chosen,\x20must\x20be\x20unique\x20within\x20application\x20scope)','required_fields':['proof','server_pubkey','server_signature','description','proof_type'],'optional_fields':['item_count','about_address','namedNew'],'about_address_recommendation':'Set\x20about_address\x20when\x20the\x20proof\x20is\x20bound\x20to\x20a\x20specific\x20on-chain\x20entity.\x20Leave\x20null\x20for\x20off-chain-only\x20proofs.'},'constraints':['proof_type\x20must\x20be\x20>\x20100\x20(user-defined\x20range)','Application\x20must\x20document\x20the\x20verification\x20logic\x20and\x20proof\x20format','Ensure\x20proof_type\x20does\x20not\x20collide\x20with\x20other\x20user-defined\x20types\x20in\x20the\x20same\x20consumer\x20scope'],'example':{'proof_type':0xc8,'proof':'0x...application_specific_proof_format...','server_pubkey':'0x...pubkey...','server_signature':'0x...sig...','description':'Application-specific\x20attestation\x20(format\x20documented\x20at\x20https://...)','about_address':null,'namedNew':{'name':'custom_attestation_001'}}}];export const PROOF_FIELD_TRANSLATIONS=[{'field_name':'proof','value_type':'string\x20(hex-encoded)','semantic':'The\x20cryptographic\x20proof\x20content.\x20Typically\x20a\x20merkle\x20tree\x20root,\x20a\x20hash\x20digest,\x20or\x20a\x20compact\x20serialized\x20attestation.\x20'+'Off-chain\x20verifiers\x20use\x20this\x20together\x20with\x20server_pubkey\x20and\x20server_signature\x20to\x20verify\x20the\x20proof\x27s\x20authenticity.','format_example':'0xabc123...merkle_root_64hex...','validation_rules':['Non-empty\x20string','Length\x20≤\x20MAX_PROOF_SIZE\x20(10240\x20bytes)','Move\x20aborts\x20with\x20E_MAX_PROOF_SIZE\x20(1)\x20on\x20overflow']},{'field_name':'server_pubkey','value_type':'string\x20(hex-encoded)','semantic':'The\x20public\x20key\x20of\x20the\x20off-chain\x20server\x20that\x20signed\x20this\x20proof.\x20Consumers\x20use\x20this\x20to\x20verify\x20server_signature\x20'+'off-chain.\x20Submit\x20the\x20raw\x20public\x20key\x20bytes,\x20not\x20a\x20certificate\x20chain\x20or\x20JWK\x20structure.','format_example':'0x04a1b2c3...ed25519_pubkey_64hex...','validation_rules':['Non-empty\x20string','Length\x20≤\x20MAX_SERVER_PUBKEY_SIZE\x20(2048\x20bytes)','Move\x20aborts\x20with\x20E_MAX_SERVER_PUBKEY_SIZE\x20(2)\x20on\x20overflow','Must\x20be\x20a\x20valid\x20public\x20key\x20for\x20the\x20signature\x20scheme\x20used']},{'field_name':'server_signature','value_type':'string\x20(hex-encoded)','semantic':'The\x20signature\x20produced\x20by\x20the\x20off-chain\x20server\x20using\x20its\x20private\x20key.\x20Verifiers\x20check\x20this\x20against\x20'+'server_pubkey\x20and\x20the\x20proof\x20content\x20(or\x20a\x20documented\x20pre-image).','format_example':'0x9d8e7f6...signature_hex...','validation_rules':['Non-empty\x20string','Length\x20≤\x20MAX_SERVER_SIGNATURE_SIZE\x20(40480\x20bytes)','Move\x20aborts\x20with\x20E_MAX_SERVER_SIGNATURE_SIZE\x20(3)\x20on\x20overflow']},{'field_name':'proof_type','value_type':'u64\x20(number\x20|\x20bigint\x20|\x20numeric\x20string)','semantic':'Classifies\x20the\x20proof\x27s\x20verification\x20logic.\x20'+WOWOK_WTS_PROOF_TYPE+'=WOWOK_WTS_PROOF_TYPE\x20(Wowok\x20Will-To-Sign,\x20'+'signed\x20by\x20off-chain\x20server).\x20Values\x202-100\x20are\x20reserved\x20for\x20future\x20Wowok-defined\x20types.\x20Values\x20>100\x20are\x20user-defined.','format_example':'1\x20(WTS),\x20200\x20(custom)','validation_rules':['Required\x20field','Must\x20be\x20≥\x201\x20(P-PROOF-P2-2:\x20schema\x20rejects\x200\x20and\x20non-numeric\x20strings)','Value\x201\x20=\x20WOWOK_WTS_PROOF_TYPE','Values\x202-100\x20require\x20explicit\x20Wowok\x20authority','Values\x20>100\x20are\x20user-defined']},{'field_name':'about_address','move_field':'about','value_type':'Option<address>\x20(string\x20|\x20null)','semantic':'The\x20on-chain\x20address\x20of\x20the\x20entity\x20being\x20proved\x20(e.g.\x20a\x20user,\x20order,\x20Repository).\x20When\x20null,\x20the\x20Proof\x20is\x20a\x20'+'free-standing\x20cryptographic\x20statement\x20with\x20no\x20on-chain\x20binding.\x20SDK\x20sends\x20Option::none\x20to\x20Move\x20when\x20null/undefined.','format_example':'0xabc...64hex_address...\x20or\x20null','validation_rules':['Optional\x20(null/undefined\x20→\x20Option::none)\x20[PF-D-1=A]','When\x20provided,\x20must\x20be\x20a\x20raw\x200x-prefixed\x2064-hex\x20address\x20(NOT\x20a\x20name)','SDK\x20isValidAddress\x20check\x20enforces\x20format']},{'field_name':'description','value_type':'string','semantic':'Human-readable\x20description\x20of\x20this\x20Proof.\x20Required\x20field\x20(PF-D-2=A).\x20Helps\x20identify\x20the\x20Proof\x20in\x20query\x20results\x20'+'and\x20audit\x20logs.\x20Should\x20be\x20a\x20one-line\x20summary\x20(e.g.\x20\x22KYC\x20attestation\x20for\x20user\x200xabc\x22).','format_example':'KYC\x20attestation\x20for\x20user\x200xabc\x20(merkle\x20root\x20of\x201024\x20leaves)','validation_rules':['Required\x20field\x20[PF-D-2=A]','Length\x20≤\x20MAX_DESCRIPTION_LENGTH\x20(defined\x20in\x20common.ts)','SDK\x20isValidDescription\x20check\x20enforces\x20max\x20length']},{'field_name':'item_count','move_field':'item_count','value_type':'Option<u64>\x20(number\x20|\x20bigint\x20|\x20numeric\x20string\x20|\x20null)','semantic':'Optional\x20count\x20of\x20items\x20in\x20the\x20off-chain\x20data\x20structure\x20(e.g.\x20number\x20of\x20leaves\x20in\x20a\x20merkle\x20tree).\x20'+'Used\x20by\x20consumers\x20to\x20interpret\x20the\x20proof\x20content.\x20When\x20null,\x20SDK\x20sends\x20Option::none\x20to\x20Move.','format_example':'1024\x20or\x20null','validation_rules':['Optional\x20(null/undefined\x20→\x20Option::none)','When\x20provided,\x20must\x20be\x20≥\x200']}];export const PROOF_CONSTRAINT_RULES=[{'id':'PROOF_C_01','name':'proof\x20content\x20non-empty','description':'The\x20\x27proof\x27\x20field\x20must\x20be\x20a\x20non-empty\x20string.','validation_logic':'proof.length\x20>\x200','failure_message':'proof\x20field\x20is\x20empty','related_field':'proof'},{'id':'PROOF_C_02','name':'proof\x20content\x20within\x20size\x20limit','description':'The\x20\x27proof\x27\x20field\x20must\x20be\x20≤\x20MAX_PROOF_SIZE\x20(10240\x20bytes).','validation_logic':'proof.length\x20<=\x20MAX_PROOF_SIZE','failure_message':'proof\x20exceeds\x20MAX_PROOF_SIZE\x20(10240\x20bytes)\x20—\x20E_MAX_PROOF_SIZE\x20(1)','related_field':'proof'},{'id':'PROOF_C_03','name':'server_pubkey\x20within\x20size\x20limit','description':'The\x20\x27server_pubkey\x27\x20field\x20must\x20be\x20≤\x20MAX_SERVER_PUBKEY_SIZE\x20(2048\x20bytes).','validation_logic':'server_pubkey.length\x20<=\x20MAX_SERVER_PUBKEY_SIZE','failure_message':'server_pubkey\x20exceeds\x20MAX_SERVER_PUBKEY_SIZE\x20(2048\x20bytes)\x20—\x20E_MAX_SERVER_PUBKEY_SIZE\x20(2)','related_field':'server_pubkey'},{'id':'PROOF_C_04','name':'server_signature\x20within\x20size\x20limit','description':'The\x20\x27server_signature\x27\x20field\x20must\x20be\x20≤\x20MAX_SERVER_SIGNATURE_SIZE\x20(40480\x20bytes).','validation_logic':'server_signature.length\x20<=\x20MAX_SERVER_SIGNATURE_SIZE','failure_message':'server_signature\x20exceeds\x20MAX_SERVER_SIGNATURE_SIZE\x20(40480\x20bytes)\x20—\x20E_MAX_SERVER_SIGNATURE_SIZE\x20(3)','related_field':'server_signature'},{'id':'PROOF_C_05','name':'proof_type\x20valid\x20range','description':'proof_type\x20must\x20be\x20≥\x201\x20(WOWOK_WTS_PROOF_TYPE='+WOWOK_WTS_PROOF_TYPE+'\x20is\x20the\x20minimum).','validation_logic':'proof_type\x20>=\x201','failure_message':'proof_type\x20must\x20be\x20≥\x201\x20—\x20schema\x20rejects\x200\x20and\x20non-numeric\x20strings','related_field':'proof_type'},{'id':'PROOF_C_06','name':'about_address\x20format\x20(when\x20provided)','description':'When\x20about_address\x20is\x20non-null,\x20it\x20must\x20be\x20a\x20valid\x200x-prefixed\x2064-hex\x20address.','validation_logic':'about_address\x20==\x20null\x20||\x20/^0x[0-9a-fA-F]{64}$/.test(about_address)','failure_message':'about_address\x20is\x20not\x20a\x20valid\x200x-prefixed\x2064-hex\x20address','related_field':'about_address'}];export function explainProof(a){const b=[],c=[];let d='unknown';if(a['proof_type']!==undefined&&a['proof_type']!==null){const h=typeof a['proof_type']==='string'?BigInt(a['proof_type']):BigInt(a['proof_type']);if(h===BigInt(WOWOK_WTS_PROOF_TYPE))d='WTS\x20proof\x20(proof_type='+WOWOK_WTS_PROOF_TYPE+')\x20—\x20signed\x20by\x20off-chain\x20server';else{if(h>0x1n&&h<=0x64n)d='Custom\x20proof\x20in\x20reserved\x20range\x20(proof_type='+a['proof_type']+')\x20—\x20NOT\x20recommended\x20without\x20Wowok\x20authority',b['push']('proof_type='+a['proof_type']+'\x20is\x20in\x20reserved\x20range\x202-100\x20—\x20future\x20Wowok\x20upgrades\x20may\x20reassign\x20this\x20value');else h>0x64n?d='User-defined\x20proof\x20(proof_type='+a['proof_type']+')\x20—\x20application-specific\x20verification\x20logic':(d='INVALID\x20proof_type='+a['proof_type']+'\x20(must\x20be\x20≥\x201)',b['push']('proof_type\x20is\x20<\x201\x20—\x20schema\x20validation\x20will\x20reject'));}}const e=a['about_address']?'Entity-bound:\x20about_address='+a['about_address']['substring'](0x0,0xa)+'...\x20(proof\x20attests\x20to\x20this\x20on-chain\x20entity)':'Free-standing:\x20no\x20on-chain\x20entity\x20binding\x20(about_address=null)',f=[];a['proof']&&f['push']('proof='+a['proof']['length']+'\x20bytes\x20(limit\x2010240)');a['server_pubkey']&&f['push']('server_pubkey='+a['server_pubkey']['length']+'\x20bytes\x20(limit\x202048)');a['server_signature']&&f['push']('server_signature='+a['server_signature']['length']+'\x20bytes\x20(limit\x2040480)');(!a['description']||a['description']['length']===0x0)&&c['push']('Provide\x20a\x20non-empty\x20description\x20for\x20audit\x20log\x20discoverability');!a['about_address']&&c['push']('Consider\x20setting\x20about_address\x20if\x20this\x20Proof\x20attests\x20to\x20a\x20specific\x20on-chain\x20entity');(a['item_count']===undefined||a['item_count']===null)&&c['push']('Consider\x20setting\x20item_count\x20if\x20the\x20proof\x20references\x20a\x20multi-item\x20data\x20structure');const g='Proof\x20is\x20a\x20'+d+'.\x20'+e+'.\x20'+(f['length']>0x0?'Sizes:\x20'+f['join'](',\x20')+'.':'');return{'summary':g,'proof_type_classification':d,'binding':e,'size_status':f['join'](',\x20'),'warnings':b,'recommendations':c};}

package/dist/knowledge/registrar-confirm.d.ts

@@ -0,0 +1,26 @@
+export declare const REGISTRAR_CONFIRM_VERSION = "1.0.0";
+export type ConfirmSeverity = "block" | "warn" | "info";
+export interface RegistrarConfirmItem {
+    id: string;
+    severity: ConfirmSeverity;
+    title: string;
+    description: string;
+    passed: boolean;
+    evidence?: string;
+    fix_hint?: string;
+}
+export interface RegistrarOpCheckInput {
+    typed_value_first_byte?: number;
+    typed_value_length?: number;
+    address_count?: number;
+    expects_fresh_resource_on_register?: boolean;
+    is_resource_transfer?: boolean;
+}
+export declare function preCheckRegistrarOp(input: RegistrarOpCheckInput): RegistrarConfirmItem[];
+export declare function canProceedRegistrarOp(input: RegistrarOpCheckInput): {
+    canProceed: boolean;
+    blockers: RegistrarConfirmItem[];
+    warnings: RegistrarConfirmItem[];
+    info: RegistrarConfirmItem[];
+};
+export declare function formatRegistrarOpSummary(input: RegistrarOpCheckInput): string;

package/dist/knowledge/registrar-confirm.js

@@ -0,0 +1 @@
+import{MAX_ADDRESS_COUNT,MAX_RECORD_LENGTH}from'@wowok/wowok';export const REGISTRAR_CONFIRM_VERSION='1.0.0';function checkTypedValue(a){if(a['typed_value_first_byte']===undefined)return{'id':'C-REGISTRAR-01','severity':'info','title':'Record.typed_value\x20first\x20byte\x20is\x20a\x20known\x20ValueType','description':'The\x20first\x20byte\x20encodes\x20ValueType;\x20the\x20Move\x20layer\x20only\x20checks\x20non-empty,\x20not\x20validity.','passed':!![],'evidence':'not\x20provided'};const b=a['typed_value_first_byte']!==0x0&&a['typed_value_first_byte']!==0xff;return{'id':'C-REGISTRAR-01','severity':b?'info':'warn','title':'Record.typed_value\x20first\x20byte\x20is\x20a\x20known\x20ValueType','description':'Move\x20validates\x20only\x20that\x20typed_value\x20is\x20non-empty;\x20a\x20misencoded\x20first\x20byte\x20deserializes\x20to\x20garbage\x20without\x20an\x20abort.','passed':b,'evidence':'first_byte=0x'+a['typed_value_first_byte']['toString'](0x10),'fix_hint':'Validate\x20the\x20first\x20byte\x20against\x20the\x20ValueType\x20enum\x20before\x20submitting.'};}function checkRecordLength(a){if(a['typed_value_length']===undefined)return{'id':'C-REGISTRAR-02','severity':'info','title':'typed_value\x20length\x20≤\x20MAX_RECORD_LENGTH\x20('+MAX_RECORD_LENGTH+')','description':'record()\x20aborts\x20with\x20ERecordLengthExceeded\x20(2)\x20above\x20the\x20cap.','passed':!![],'evidence':'not\x20provided'};const b=a['typed_value_length']>0x0&&a['typed_value_length']<=MAX_RECORD_LENGTH;return{'id':'C-REGISTRAR-02','severity':b?'info':'block','title':'typed_value\x20length\x20in\x20(0,\x20MAX_RECORD_LENGTH]\x20('+MAX_RECORD_LENGTH+')','description':'record()\x20requires\x20a\x20non-empty\x20typed_value\x20≤\x20MAX_RECORD_LENGTH='+MAX_RECORD_LENGTH+';\x20empty\x20aborts\x20with\x20ERecordTypeEmpty\x20(3).','passed':b,'evidence':'typed_value_length='+a['typed_value_length']+',\x20limit='+MAX_RECORD_LENGTH,'fix_hint':'Trim\x20the\x20record\x20payload\x20or\x20store\x20bulk\x20data\x20off-chain.'};}function checkAddressCount(a){if(a['address_count']===undefined)return{'id':'C-REGISTRAR-03','severity':'info','title':'address_count\x20below\x20MAX_ADDRESS_COUNT\x20('+MAX_ADDRESS_COUNT+')','description':'Entity/Registrar\x20ParentTables\x20are\x20bounded\x20by\x20MAX_ADDRESS_COUNT.','passed':!![],'evidence':'not\x20provided'};const b=a['address_count']<MAX_ADDRESS_COUNT;return{'id':'C-REGISTRAR-03','severity':b?'info':'warn','title':'address_count\x20below\x20MAX_ADDRESS_COUNT\x20('+MAX_ADDRESS_COUNT+')','description':'Registration\x20aborts\x20when\x20the\x20address\x20cap\x20MAX_ADDRESS_COUNT='+MAX_ADDRESS_COUNT+'\x20is\x20reached;\x20raising\x20it\x20needs\x20a\x20package\x20upgrade.','passed':b,'evidence':'address_count='+a['address_count']+',\x20limit='+MAX_ADDRESS_COUNT,'fix_hint':'Monitor\x20address_count\x20and\x20plan\x20a\x20package\x20upgrade\x20before\x20hitting\x20the\x20cap.'};}function checkIdempotency(a){if(!a['expects_fresh_resource_on_register'])return{'id':'C-REGISTRAR-04','severity':'info','title':'entity_register\x20is\x20idempotent','description':'entity_register\x20returns\x20the\x20existing\x20Resource\x20for\x20an\x20already-registered\x20user.','passed':!![],'evidence':'idempotency\x20understood'};return{'id':'C-REGISTRAR-04','severity':'warn','title':'entity_register\x20returns\x20the\x20existing\x20Resource\x20(not\x20a\x20fresh\x20one)','description':'After\x20a\x20forced\x20destroy,\x20use\x20entity_register_with_resource_forced\x20to\x20re-allocate;\x20entity_register\x20would\x20return\x20the\x20old\x20(now-invalid)\x20address.','passed':![],'evidence':'expects_fresh_resource_on_register=true','fix_hint':'Use\x20entity_register_with_resource_forced\x20only\x20when\x20the\x20old\x20Resource\x20is\x20truly\x20gone.'};}function checkTransfer(a){if(!a['is_resource_transfer'])return{'id':'C-REGISTRAR-05','severity':'info','title':'entity_resource_transfer\x20detaches\x20source\x20address','description':'Transferring\x20the\x20Resource\x20moves\x20it\x20to\x20a\x20new\x20address;\x20the\x20source\x20loses\x20the\x20binding.','passed':!![],'evidence':'not\x20transferring'};return{'id':'C-REGISTRAR-05','severity':'warn','title':'entity_resource_transfer\x20will\x20detach\x20Resource\x20from\x20source\x20address','description':'Downstream\x20services\x20keyed\x20on\x20the\x20source\x20address\x20lose\x20the\x20binding;\x20no\x20forwarding\x20stub\x20is\x20left\x20behind.','passed':![],'evidence':'is_resource_transfer=true','fix_hint':'Warn\x20that\x20old-address\x20bindings\x20break;\x20track\x20users\x20by\x20Resource\x20address.'};}export function preCheckRegistrarOp(a){return[checkTypedValue(a),checkRecordLength(a),checkAddressCount(a),checkIdempotency(a),checkTransfer(a)];}export function canProceedRegistrarOp(a){const b=preCheckRegistrarOp(a);return{'canProceed':b['every'](c=>c['severity']!=='block'||c['passed']),'blockers':b['filter'](c=>c['severity']==='block'&&!c['passed']),'warnings':b['filter'](c=>c['severity']==='warn'&&!c['passed']),'info':b['filter'](c=>c['severity']==='info')};}export function formatRegistrarOpSummary(a){const {canProceed:b,blockers:c,warnings:d}=canProceedRegistrarOp(a),e=[b?'✓\x20Registrar\x20operation\x20pre-check\x20PASSED':'✗\x20Registrar\x20operation\x20pre-check\x20FAILED',''];return c['length']>0x0&&(e['push']('BLOCKERS:'),c['forEach'](f=>e['push']('\x20\x20['+f['id']+']\x20'+f['title']+'\x20—\x20'+(f['evidence']??''))),e['push']('')),d['length']>0x0&&(e['push']('WARNINGS:'),d['forEach'](f=>e['push']('\x20\x20['+f['id']+']\x20'+f['title']+'\x20—\x20'+(f['evidence']??'')))),e['join']('\x0a');}

package/dist/knowledge/registrar-risk.js

@@ -1,217 +1 @@
-import { MAX_ADDRESS_COUNT, MAX_RECORD_COUNT_REGISTRAR, MAX_RECORD_LENGTH, } from "@wowok/wowok";
-const BIT_NO_INFO = 0x00;
-const BIT_LIKE = 0x02;
-const BIT_DISLIKE = 0x04;
-const BIT_AFFILIATION = 0x08;
-const R_REG_01 = {
-    rule: {
-        id: "R-REG-01",
-        level: "HIGH",
-        category: "lifecycle",
-        title: "Entity and Registrar are system singletons — cannot be migrated post-deploy",
-        description: "Entity and Registrar are created once at package init by @0x0 (registrar.move:152-166) " +
-            "and are globally unique. They cannot be re-created, migrated, or re-initialized. If " +
-            "the singleton's storage layout needs to change (e.g. ParentTable schema), the only " +
-            "option is a new package version with a migration path. There is no in-place migration " +
-            "API. All 22 objects depend on these singletons via affiliation, so a migration would " +
-            "cascade to every object.",
-        affected_stakeholders: ["system", "user"],
-        scenario: "Operator wants to migrate Entity to a new schema; no migration API exists",
-        mitigation: "Confirm the schema before deployment. For schema evolution, plan a new package " +
-            "version with an explicit migration script. Never assume the singleton can be 'reset'.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.expects_singleton_migration)
-            return null;
-        return { ...R_REG_01.rule, evidence: "expects_singleton_migration=true (no migration API)" };
-    },
-};
-const R_REG_02 = {
-    rule: {
-        id: "R-REG-02",
-        level: "MEDIUM",
-        category: "structural",
-        title: `MAX_ADDRESS_COUNT=${MAX_ADDRESS_COUNT} may be insufficient for large deployments`,
-        description: `The Entity and Registrar ParentTables are bounded by MAX_ADDRESS_COUNT=${MAX_ADDRESS_COUNT} ` +
-            `(registrar.move). Exceeding the cap aborts address registration. For mass-market ` +
-            `applications, ${MAX_ADDRESS_COUNT} entries may be too few; the limit is a single ` +
-            `Move constant that requires a package upgrade to change.`,
-        affected_stakeholders: ["system", "user"],
-        scenario: "Popular service reaches 5200 registered users; new registrations abort",
-        mitigation: "Monitor address_count. Plan a package upgrade that raises MAX_ADDRESS_COUNT before " +
-            "hitting the cap. For shardable workloads, consider multiple Entity tables in a future " +
-            "package version.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (ctx.address_count === undefined)
-            return null;
-        if (ctx.address_count < MAX_ADDRESS_COUNT)
-            return null;
-        return { ...R_REG_02.rule, evidence: `address_count=${ctx.address_count}, limit=${MAX_ADDRESS_COUNT}` };
-    },
-};
-const R_REG_03 = {
-    rule: {
-        id: "R-REG-03",
-        level: "MEDIUM",
-        category: "semantic",
-        title: `Vote.info uses u8 bitmask — bits 4-7 reserved, future expansion must stay compatible`,
-        description: `Vote.info is a u8 bitmask: BIT_NO_INFO=${BIT_NO_INFO}, BIT_LIKE=${BIT_LIKE}, ` +
-            `BIT_DISLIKE=${BIT_DISLIKE}, BIT_AFFILIATION=${BIT_AFFILIATION}. Bits 4-7 are reserved. ` +
-            `A future version that repurposes bits 4-7 would conflict with any off-chain code that ` +
-            `reads the raw byte. The reserved bits MUST be treated as zero today; non-zero values ` +
-            `in bits 4-7 indicate a forward-incompatible voter.`,
-        affected_stakeholders: ["voter", "system"],
-        scenario: "Future version assigns bit 4 to a new flag; old indexers misread the byte",
-        mitigation: "Off-chain code must mask to bits 0-3 today and ignore bits 4-7. When a new flag is " +
-            "assigned, ship a coordinated Move + SDK + indexer update.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.uses_reserved_vote_bits)
-            return null;
-        return { ...R_REG_03.rule, evidence: "uses_reserved_vote_bits=true (bits 4-7 are reserved)" };
-    },
-};
-const R_REG_05 = {
-    rule: {
-        id: "R-REG-05",
-        level: "MEDIUM",
-        category: "cross_object",
-        title: "affiliation / disaffiliation emit no events — indexers must poll Registrar.table",
-        description: "affiliation, disaffiliation, and affiliation_change (registrar.move) mutate the " +
-            "Registrar dependency graph but emit no events. External indexers that track the " +
-            "object-dependency graph cannot rely on an event stream; they must poll the " +
-            "ParentTable, which is expensive as the graph grows.",
-        affected_stakeholders: ["system"],
-        scenario: "Indexer expects an AffiliationEvent; none is emitted, dependency graph is stale",
-        mitigation: "Indexers should poll Registrar.table on a cadence and diff. Future versions may add " +
-            "AffiliationEvent; until then, do not build critical UX on affiliation event streams.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.expects_affiliation_event)
-            return null;
-        return { ...R_REG_05.rule, evidence: "expects_affiliation_event=true (no events)" };
-    },
-};
-const R_REG_04 = {
-    rule: {
-        id: "R-REG-04",
-        level: "LOW",
-        category: "lifecycle",
-        title: "entity_register is idempotent — returns existing Resource, not a fresh one",
-        description: "entity_register (registrar.move:177-187) checks whether the sender already has an " +
-            "Entity record. If so, it returns the existing Resource address without creating a new " +
-            "one. Callers who expect a fresh Resource on each call (e.g. after a forced destroy) " +
-            "will silently receive the old one. Use entity_register_with_resource_forced to " +
-            "force-reallocate, and only when the old Resource is truly gone.",
-        affected_stakeholders: ["user"],
-        scenario: "User destroys their Resource then calls entity_register; gets the old (now-invalid) address",
-        mitigation: "Document the idempotent behavior. After a forced destroy, callers MUST use " +
-            "entity_register_with_resource_forced. SDK should detect destroyed Resource and route " +
-            "accordingly.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.expects_fresh_resource_on_register)
-            return null;
-        return { ...R_REG_04.rule, evidence: "expects_fresh_resource_on_register=true (idempotent)" };
-    },
-};
-const R_REG_06 = {
-    rule: {
-        id: "R-REG-06",
-        level: "LOW",
-        category: "semantic",
-        title: "Record.typed_value first byte is a ValueType — convention enforced only by docs",
-        description: "Record.typed_value is a vector<u8> whose first byte encodes the ValueType (registrar.move:111). " +
-            "The Move layer validates that the vector is non-empty and within MAX_RECORD_LENGTH=" +
-            `${MAX_RECORD_LENGTH}, but it does not validate that the first byte is a known ValueType. ` +
-            `Off-chain consumers must agree on the ValueType byte layout; a misencoded record will ` +
-            `deserialize to garbage without an on-chain abort. Record count is bounded by ` +
-            `MAX_RECORD_COUNT_REGISTRAR=${MAX_RECORD_COUNT_REGISTRAR}.`,
-        affected_stakeholders: ["user", "system"],
-        scenario: "Caller writes a record with first byte 0xFF; no on-chain error, but consumers cannot decode",
-        mitigation: "SDK must validate the first byte against the ValueType enum before submitting. " +
-            "Document the ValueType byte layout in both Move and SDK. Add a sync test that " +
-            "asserts the ValueType enum matches across layers.",
-        related_move_error: "ERecordTypeEmpty (3) — only catches empty typed_value",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.relies_on_typed_value_convention)
-            return null;
-        return { ...R_REG_06.rule, evidence: "relies_on_typed_value_convention=true (docs-only enforcement)" };
-    },
-};
-const R_REG_07 = {
-    rule: {
-        id: "R-REG-07",
-        level: "MEDIUM",
-        category: "cross_object",
-        title: "entity_resource_transfer detaches Resource from the source address",
-        description: "entity_resource_transfer(resource, new_address, ctx) moves the Resource backing a " +
-            "user's identity mark to a new address. After transfer, the source address has no " +
-            "Resource — any downstream service that keyed identity on the source address loses " +
-            "the binding. There is no automatic forwarding stub left behind.",
-        affected_stakeholders: ["user", "system"],
-        scenario: "User transfers Resource to a new wallet; old-wallet-based services break",
-        mitigation: "Surface a 'transfer will detach the Resource from this address' warning. Consumers " +
-            "should track users by Resource address, not by user address. Provide a migration " +
-            "window where both addresses are valid.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.is_resource_transfer)
-            return null;
-        return { ...R_REG_07.rule, evidence: "is_resource_transfer=true (source loses Resource)" };
-    },
-};
-const R_REG_08 = {
-    rule: {
-        id: "R-REG-08",
-        level: "LOW",
-        category: "semantic",
-        title: "Vote.time updates on every toggle — including like→no-like",
-        description: "Vote.time (registrar.move) is set to clock.timestamp_ms() on every like/dislike " +
-            "operation, including toggles that remove a like (like→no-like). Consumers who " +
-            "interpret Vote.time as 'last liked at' will be confused when it advances on an " +
-            "un-like. The field semantically means 'last vote op time', not 'last positive vote'.",
-        affected_stakeholders: ["voter", "system"],
-        scenario: "User un-likes; Vote.time advances; indexer reads it as 'recently liked'",
-        mitigation: "Document Vote.time as 'last vote operation time'. For 'last liked at' semantics, " +
-            "track the previous Vote.info state and only record time when BIT_LIKE transitions to set.",
-        auto_fixable: false,
-    },
-    check: (ctx) => {
-        if (!ctx.expects_vote_time_only_on_like)
-            return null;
-        return { ...R_REG_08.rule, evidence: "expects_vote_time_only_on_like=true (updates on toggle)" };
-    },
-};
-export const REGISTRAR_RISK_RULES = [
-    R_REG_01,
-    R_REG_02,
-    R_REG_03,
-    R_REG_04,
-    R_REG_05,
-    R_REG_06,
-    R_REG_07,
-    R_REG_08,
-];
-export const REGISTRAR_RISK_VERSION = "1.0.0";
-export function checkRegistrarRisks(ctx) {
-    const risks = [];
-    for (const rule of REGISTRAR_RISK_RULES) {
-        const r = rule.check(ctx);
-        if (r)
-            risks.push(r);
-    }
-    return risks;
-}
-export function getRegistrarRiskById(id) {
-    return REGISTRAR_RISK_RULES.find(r => r.rule.id === id)?.rule;
-}
+import{MAX_ADDRESS_COUNT,MAX_RECORD_COUNT_REGISTRAR,MAX_RECORD_LENGTH}from'@wowok/wowok';const BIT_NO_INFO=0x0,BIT_LIKE=0x2,BIT_DISLIKE=0x4,BIT_AFFILIATION=0x8,R_REG_01={'rule':{'id':'R-REG-01','level':'HIGH','category':'lifecycle','title':'Entity\x20and\x20Registrar\x20are\x20system\x20singletons\x20—\x20cannot\x20be\x20migrated\x20post-deploy','description':'Entity\x20and\x20Registrar\x20are\x20created\x20once\x20at\x20package\x20init\x20by\x20@0x0\x20(registrar.move:152-166)\x20'+'and\x20are\x20globally\x20unique.\x20They\x20cannot\x20be\x20re-created,\x20migrated,\x20or\x20re-initialized.\x20If\x20'+'the\x20singleton\x27s\x20storage\x20layout\x20needs\x20to\x20change\x20(e.g.\x20ParentTable\x20schema),\x20the\x20only\x20'+'option\x20is\x20a\x20new\x20package\x20version\x20with\x20a\x20migration\x20path.\x20There\x20is\x20no\x20in-place\x20migration\x20'+'API.\x20All\x2022\x20objects\x20depend\x20on\x20these\x20singletons\x20via\x20affiliation,\x20so\x20a\x20migration\x20would\x20'+'cascade\x20to\x20every\x20object.','affected_stakeholders':['system','user'],'scenario':'Operator\x20wants\x20to\x20migrate\x20Entity\x20to\x20a\x20new\x20schema;\x20no\x20migration\x20API\x20exists','mitigation':'Confirm\x20the\x20schema\x20before\x20deployment.\x20For\x20schema\x20evolution,\x20plan\x20a\x20new\x20package\x20'+'version\x20with\x20an\x20explicit\x20migration\x20script.\x20Never\x20assume\x20the\x20singleton\x20can\x20be\x20\x27reset\x27.','auto_fixable':![]},'check':a=>{if(!a['expects_singleton_migration'])return null;return{...R_REG_01['rule'],'evidence':'expects_singleton_migration=true\x20(no\x20migration\x20API)'};}},R_REG_02={'rule':{'id':'R-REG-02','level':'MEDIUM','category':'structural','title':'MAX_ADDRESS_COUNT='+MAX_ADDRESS_COUNT+'\x20may\x20be\x20insufficient\x20for\x20large\x20deployments','description':'The\x20Entity\x20and\x20Registrar\x20ParentTables\x20are\x20bounded\x20by\x20MAX_ADDRESS_COUNT='+MAX_ADDRESS_COUNT+'\x20'+'(registrar.move).\x20Exceeding\x20the\x20cap\x20aborts\x20address\x20registration.\x20For\x20mass-market\x20'+('applications,\x20'+MAX_ADDRESS_COUNT+'\x20entries\x20may\x20be\x20too\x20few;\x20the\x20limit\x20is\x20a\x20single\x20')+'Move\x20constant\x20that\x20requires\x20a\x20package\x20upgrade\x20to\x20change.','affected_stakeholders':['system','user'],'scenario':'Popular\x20service\x20reaches\x205200\x20registered\x20users;\x20new\x20registrations\x20abort','mitigation':'Monitor\x20address_count.\x20Plan\x20a\x20package\x20upgrade\x20that\x20raises\x20MAX_ADDRESS_COUNT\x20before\x20'+'hitting\x20the\x20cap.\x20For\x20shardable\x20workloads,\x20consider\x20multiple\x20Entity\x20tables\x20in\x20a\x20future\x20'+'package\x20version.','auto_fixable':![]},'check':a=>{if(a['address_count']===undefined)return null;if(a['address_count']<MAX_ADDRESS_COUNT)return null;return{...R_REG_02['rule'],'evidence':'address_count='+a['address_count']+',\x20limit='+MAX_ADDRESS_COUNT};}},R_REG_03={'rule':{'id':'R-REG-03','level':'MEDIUM','category':'semantic','title':'Vote.info\x20uses\x20u8\x20bitmask\x20—\x20bits\x204-7\x20reserved,\x20future\x20expansion\x20must\x20stay\x20compatible','description':'Vote.info\x20is\x20a\x20u8\x20bitmask:\x20BIT_NO_INFO='+BIT_NO_INFO+',\x20BIT_LIKE='+BIT_LIKE+',\x20'+('BIT_DISLIKE='+BIT_DISLIKE+',\x20BIT_AFFILIATION='+BIT_AFFILIATION+'.\x20Bits\x204-7\x20are\x20reserved.\x20')+'A\x20future\x20version\x20that\x20repurposes\x20bits\x204-7\x20would\x20conflict\x20with\x20any\x20off-chain\x20code\x20that\x20'+'reads\x20the\x20raw\x20byte.\x20The\x20reserved\x20bits\x20MUST\x20be\x20treated\x20as\x20zero\x20today;\x20non-zero\x20values\x20'+'in\x20bits\x204-7\x20indicate\x20a\x20forward-incompatible\x20voter.','affected_stakeholders':['voter','system'],'scenario':'Future\x20version\x20assigns\x20bit\x204\x20to\x20a\x20new\x20flag;\x20old\x20indexers\x20misread\x20the\x20byte','mitigation':'Off-chain\x20code\x20must\x20mask\x20to\x20bits\x200-3\x20today\x20and\x20ignore\x20bits\x204-7.\x20When\x20a\x20new\x20flag\x20is\x20'+'assigned,\x20ship\x20a\x20coordinated\x20Move\x20+\x20SDK\x20+\x20indexer\x20update.','auto_fixable':![]},'check':a=>{if(!a['uses_reserved_vote_bits'])return null;return{...R_REG_03['rule'],'evidence':'uses_reserved_vote_bits=true\x20(bits\x204-7\x20are\x20reserved)'};}},R_REG_05={'rule':{'id':'R-REG-05','level':'MEDIUM','category':'cross_object','title':'affiliation\x20/\x20disaffiliation\x20emit\x20no\x20events\x20—\x20indexers\x20must\x20poll\x20Registrar.table','description':'affiliation,\x20disaffiliation,\x20and\x20affiliation_change\x20(registrar.move)\x20mutate\x20the\x20'+'Registrar\x20dependency\x20graph\x20but\x20emit\x20no\x20events.\x20External\x20indexers\x20that\x20track\x20the\x20'+'object-dependency\x20graph\x20cannot\x20rely\x20on\x20an\x20event\x20stream;\x20they\x20must\x20poll\x20the\x20'+'ParentTable,\x20which\x20is\x20expensive\x20as\x20the\x20graph\x20grows.','affected_stakeholders':['system'],'scenario':'Indexer\x20expects\x20an\x20AffiliationEvent;\x20none\x20is\x20emitted,\x20dependency\x20graph\x20is\x20stale','mitigation':'Indexers\x20should\x20poll\x20Registrar.table\x20on\x20a\x20cadence\x20and\x20diff.\x20Future\x20versions\x20may\x20add\x20'+'AffiliationEvent;\x20until\x20then,\x20do\x20not\x20build\x20critical\x20UX\x20on\x20affiliation\x20event\x20streams.','auto_fixable':![]},'check':a=>{if(!a['expects_affiliation_event'])return null;return{...R_REG_05['rule'],'evidence':'expects_affiliation_event=true\x20(no\x20events)'};}},R_REG_04={'rule':{'id':'R-REG-04','level':'LOW','category':'lifecycle','title':'entity_register\x20is\x20idempotent\x20—\x20returns\x20existing\x20Resource,\x20not\x20a\x20fresh\x20one','description':'entity_register\x20(registrar.move:177-187)\x20checks\x20whether\x20the\x20sender\x20already\x20has\x20an\x20'+'Entity\x20record.\x20If\x20so,\x20it\x20returns\x20the\x20existing\x20Resource\x20address\x20without\x20creating\x20a\x20new\x20'+'one.\x20Callers\x20who\x20expect\x20a\x20fresh\x20Resource\x20on\x20each\x20call\x20(e.g.\x20after\x20a\x20forced\x20destroy)\x20'+'will\x20silently\x20receive\x20the\x20old\x20one.\x20Use\x20entity_register_with_resource_forced\x20to\x20'+'force-reallocate,\x20and\x20only\x20when\x20the\x20old\x20Resource\x20is\x20truly\x20gone.','affected_stakeholders':['user'],'scenario':'User\x20destroys\x20their\x20Resource\x20then\x20calls\x20entity_register;\x20gets\x20the\x20old\x20(now-invalid)\x20address','mitigation':'Document\x20the\x20idempotent\x20behavior.\x20After\x20a\x20forced\x20destroy,\x20callers\x20MUST\x20use\x20'+'entity_register_with_resource_forced.\x20SDK\x20should\x20detect\x20destroyed\x20Resource\x20and\x20route\x20'+'accordingly.','auto_fixable':![]},'check':a=>{if(!a['expects_fresh_resource_on_register'])return null;return{...R_REG_04['rule'],'evidence':'expects_fresh_resource_on_register=true\x20(idempotent)'};}},R_REG_06={'rule':{'id':'R-REG-06','level':'LOW','category':'semantic','title':'Record.typed_value\x20first\x20byte\x20is\x20a\x20ValueType\x20—\x20convention\x20enforced\x20only\x20by\x20docs','description':'Record.typed_value\x20is\x20a\x20vector<u8>\x20whose\x20first\x20byte\x20encodes\x20the\x20ValueType\x20(registrar.move:111).\x20'+'The\x20Move\x20layer\x20validates\x20that\x20the\x20vector\x20is\x20non-empty\x20and\x20within\x20MAX_RECORD_LENGTH='+(MAX_RECORD_LENGTH+',\x20but\x20it\x20does\x20not\x20validate\x20that\x20the\x20first\x20byte\x20is\x20a\x20known\x20ValueType.\x20')+'Off-chain\x20consumers\x20must\x20agree\x20on\x20the\x20ValueType\x20byte\x20layout;\x20a\x20misencoded\x20record\x20will\x20'+'deserialize\x20to\x20garbage\x20without\x20an\x20on-chain\x20abort.\x20Record\x20count\x20is\x20bounded\x20by\x20'+('MAX_RECORD_COUNT_REGISTRAR='+MAX_RECORD_COUNT_REGISTRAR+'.'),'affected_stakeholders':['user','system'],'scenario':'Caller\x20writes\x20a\x20record\x20with\x20first\x20byte\x200xFF;\x20no\x20on-chain\x20error,\x20but\x20consumers\x20cannot\x20decode','mitigation':'SDK\x20must\x20validate\x20the\x20first\x20byte\x20against\x20the\x20ValueType\x20enum\x20before\x20submitting.\x20'+'Document\x20the\x20ValueType\x20byte\x20layout\x20in\x20both\x20Move\x20and\x20SDK.\x20Add\x20a\x20sync\x20test\x20that\x20'+'asserts\x20the\x20ValueType\x20enum\x20matches\x20across\x20layers.','related_move_error':'ERecordTypeEmpty\x20(3)\x20—\x20only\x20catches\x20empty\x20typed_value','auto_fixable':![]},'check':a=>{if(!a['relies_on_typed_value_convention'])return null;return{...R_REG_06['rule'],'evidence':'relies_on_typed_value_convention=true\x20(docs-only\x20enforcement)'};}},R_REG_07={'rule':{'id':'R-REG-07','level':'MEDIUM','category':'cross_object','title':'entity_resource_transfer\x20detaches\x20Resource\x20from\x20the\x20source\x20address','description':'entity_resource_transfer(resource,\x20new_address,\x20ctx)\x20moves\x20the\x20Resource\x20backing\x20a\x20'+'user\x27s\x20identity\x20mark\x20to\x20a\x20new\x20address.\x20After\x20transfer,\x20the\x20source\x20address\x20has\x20no\x20'+'Resource\x20—\x20any\x20downstream\x20service\x20that\x20keyed\x20identity\x20on\x20the\x20source\x20address\x20loses\x20'+'the\x20binding.\x20There\x20is\x20no\x20automatic\x20forwarding\x20stub\x20left\x20behind.','affected_stakeholders':['user','system'],'scenario':'User\x20transfers\x20Resource\x20to\x20a\x20new\x20wallet;\x20old-wallet-based\x20services\x20break','mitigation':'Surface\x20a\x20\x27transfer\x20will\x20detach\x20the\x20Resource\x20from\x20this\x20address\x27\x20warning.\x20Consumers\x20'+'should\x20track\x20users\x20by\x20Resource\x20address,\x20not\x20by\x20user\x20address.\x20Provide\x20a\x20migration\x20'+'window\x20where\x20both\x20addresses\x20are\x20valid.','auto_fixable':![]},'check':a=>{if(!a['is_resource_transfer'])return null;return{...R_REG_07['rule'],'evidence':'is_resource_transfer=true\x20(source\x20loses\x20Resource)'};}},R_REG_08={'rule':{'id':'R-REG-08','level':'LOW','category':'semantic','title':'Vote.time\x20updates\x20on\x20every\x20toggle\x20—\x20including\x20like→no-like','description':'Vote.time\x20(registrar.move)\x20is\x20set\x20to\x20clock.timestamp_ms()\x20on\x20every\x20like/dislike\x20'+'operation,\x20including\x20toggles\x20that\x20remove\x20a\x20like\x20(like→no-like).\x20Consumers\x20who\x20'+'interpret\x20Vote.time\x20as\x20\x27last\x20liked\x20at\x27\x20will\x20be\x20confused\x20when\x20it\x20advances\x20on\x20an\x20'+'un-like.\x20The\x20field\x20semantically\x20means\x20\x27last\x20vote\x20op\x20time\x27,\x20not\x20\x27last\x20positive\x20vote\x27.','affected_stakeholders':['voter','system'],'scenario':'User\x20un-likes;\x20Vote.time\x20advances;\x20indexer\x20reads\x20it\x20as\x20\x27recently\x20liked\x27','mitigation':'Document\x20Vote.time\x20as\x20\x27last\x20vote\x20operation\x20time\x27.\x20For\x20\x27last\x20liked\x20at\x27\x20semantics,\x20'+'track\x20the\x20previous\x20Vote.info\x20state\x20and\x20only\x20record\x20time\x20when\x20BIT_LIKE\x20transitions\x20to\x20set.','auto_fixable':![]},'check':a=>{if(!a['expects_vote_time_only_on_like'])return null;return{...R_REG_08['rule'],'evidence':'expects_vote_time_only_on_like=true\x20(updates\x20on\x20toggle)'};}};export const REGISTRAR_RISK_RULES=[R_REG_01,R_REG_02,R_REG_03,R_REG_04,R_REG_05,R_REG_06,R_REG_07,R_REG_08];export const REGISTRAR_RISK_VERSION='1.0.0';export function checkRegistrarRisks(a){const b=[];for(const c of REGISTRAR_RISK_RULES){const d=c['check'](a);if(d)b['push'](d);}return b;}export function getRegistrarRiskById(a){return REGISTRAR_RISK_RULES['find'](b=>b['rule']['id']===a)?.['rule'];}