@wowok/agent-mcp 2.7.1 → 2.7.3

package/dist/knowledge/repository-translation.js

@@ -1,445 +1 @@
-import { MAX_POLICY_COUNT, MAX_POLICY_DESCRIPTION_LEN, MAX_POLICY_GUARD_COUNT, MAX_DATA_SIZE, MAX_ID_COUNT_ONCE, MAX_REWARD_COUNT, } from "@wowok/wowok";
-export const SEMANTIC_TO_REPOSITORY_SCHEMA_RULES = [
-    {
-        id: "P-REP-01",
-        pattern_name: "Clock-routed data (id=timestamp)",
-        routing_mode: "clock",
-        semantic_intent: "Data is keyed by current timestamp (id_from=Clock). Each write produces a unique timestamp-keyed entry. " +
-            "Suitable for append-only logs, time-series records, and audit trails. write_guard may be empty (id is " +
-            "auto-generated and predictable) or non-empty with data_from_submission set (guard supplies the data " +
-            "payload while id comes from the clock — e.g. oracle-fed time-series).",
-        match_keywords: ["timestamp", "log", "audit trail", "time-series", "append-only", "clock"],
-        schema_elements: {
-            id_from_value: 1,
-            required_policy_fields: ["name", "description", "id_from", "value_type", "write_guard"],
-            write_guard_requirement: "either",
-            move_entry_point: "data_when_id_from_set",
-            caller_input_shape: "{ name, data } — no id, no write_guard, no Passport",
-        },
-        constraints: [
-            "id_from MUST be Clock (1)",
-            "write_guard MAY be empty OR non-empty (R-D-1 refined)",
-            "If write_guard is non-empty, every PolicyGuard.id_from_submission MUST be None (E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN=23)",
-            "data_from_submission MAY be set (used by data_when_id_from_set_with_passport)",
-            "Caller uses data_when_id_from_set (no guard) or data_when_id_from_set_with_passport (with guard)",
-            "ID is auto-generated from clock::timestamp_ms",
-        ],
-        example: {
-            name: "audit_log",
-            description: "Append-only audit log keyed by timestamp",
-            id_from: "Clock",
-            value_type: 0,
-            write_guard: [],
-        },
-    },
-    {
-        id: "P-REP-02",
-        pattern_name: "Signer-routed data (id=signer address)",
-        routing_mode: "signer",
-        semantic_intent: "Data is keyed by signer address (id_from=Signer). Each user has at most one data entry per policy. " +
-            "Suitable for user profiles, KYC attestations, per-user settings. write_guard may be empty (signer " +
-            "writes their own data) or non-empty with data_from_submission set (guard supplies the data payload " +
-            "while id comes from the signer — e.g. verified credential insertion).",
-        match_keywords: ["profile", "user data", "kyc", "per-user", "signer", "identity"],
-        schema_elements: {
-            id_from_value: 2,
-            required_policy_fields: ["name", "description", "id_from", "value_type", "write_guard"],
-            write_guard_requirement: "either",
-            move_entry_point: "data_when_id_from_set",
-            caller_input_shape: "{ name, data } — no id, no write_guard, no Passport",
-        },
-        constraints: [
-            "id_from MUST be Signer (2)",
-            "write_guard MAY be empty OR non-empty (R-D-1 refined)",
-            "If write_guard is non-empty, every PolicyGuard.id_from_submission MUST be None (E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN=23)",
-            "data_from_submission MAY be set (used by data_when_id_from_set_with_passport)",
-            "Caller uses data_when_id_from_set (no guard) or data_when_id_from_set_with_passport (with guard)",
-            "ID is auto-generated from ctx.sender()",
-        ],
-        example: {
-            name: "user_profile",
-            description: "Per-user profile data keyed by signer address",
-            id_from: "Signer",
-            value_type: 0,
-            write_guard: [],
-        },
-    },
-    {
-        id: "P-REP-03",
-        pattern_name: "Guard-protected with caller-provided id (Mode 4)",
-        routing_mode: "guard_caller",
-        semantic_intent: "Data is keyed by caller-provided id (id_from=None). Write authorization requires a Passport submission " +
-            "verifying the guard. Suitable for application-specific keys (order IDs, content hashes, custom identifiers). " +
-            "The guard enforces WHO can write; the caller decides WHAT id to use.",
-        match_keywords: ["custom id", "order id", "content hash", "application key", "guard protected", "passport"],
-        schema_elements: {
-            id_from_value: 0,
-            required_policy_fields: ["name", "description", "id_from", "value_type", "write_guard"],
-            write_guard_requirement: "non_empty",
-            move_entry_point: "id_data_with_passport",
-            caller_input_shape: "{ name, items: [{ id, data, write_guard }] } — id and data provided by caller, Passport verifies guard",
-        },
-        constraints: [
-            "id_from MUST be None (0)",
-            "write_guard MUST be non-empty (R-D-1: E_POLICY_WRITE_GUARD_REQUIRED=22)",
-            "Each PolicyGuard MUST have id_from_submission=None AND data_from_submission=None",
-            "Caller uses id_data_with_passport entry point",
-            "Passport must verify one of the policy's write_guards",
-        ],
-        example: {
-            name: "order_metadata",
-            description: "Order-specific metadata keyed by order id, guard-protected",
-            id_from: "None",
-            value_type: 0,
-            write_guard: [
-                { guard: "0xguard_addr...", id_from_submission: null, data_from_submission: null },
-            ],
-        },
-    },
-    {
-        id: "P-REP-04",
-        pattern_name: "Guard-protected with submission-derived id/data (Mode 5)",
-        routing_mode: "guard_submission",
-        semantic_intent: "Data id and/or data payload are derived from Guard submission values in the Passport. This is the most " +
-            "flexible mode: the guard can compute both the key and the value from its internal table. Suitable for " +
-            "bridges (where the guard verifies an external event and outputs the bridged amount), oracle-fed data, " +
-            "and complex authorization patterns.",
-        match_keywords: ["oracle", "bridge", "submission", "guard derived", "computed id", "computed data"],
-        schema_elements: {
-            id_from_value: 0,
-            required_policy_fields: ["name", "description", "id_from", "value_type", "write_guard"],
-            write_guard_requirement: "non_empty",
-            move_entry_point: "id_data_mixed_with_passport",
-            caller_input_shape: "{ name, items: [{ write_guard, id?, data? }] } — id/data omitted where submission provides them",
-        },
-        constraints: [
-            "id_from MUST be None (0)",
-            "write_guard MUST be non-empty (R-D-1: E_POLICY_WRITE_GUARD_REQUIRED=22)",
-            "Each PolicyGuard may have id_from_submission and/or data_from_submission set",
-            "Caller uses id_data_mixed_with_passport entry point",
-            "SDK hasSubmissionSettings must check BOTH id_from_submission AND data_from_submission (P1-1 fix)",
-            "Passport must verify the specified write_guards",
-        ],
-        example: {
-            name: "oracle_price",
-            description: "Oracle-fed price data, id and data both from guard submission",
-            id_from: "None",
-            value_type: 0,
-            write_guard: [
-                {
-                    guard: "0xoracle_guard_addr...",
-                    id_from_submission: 0,
-                    data_from_submission: 1,
-                },
-            ],
-        },
-    },
-];
-export const REPOSITORY_FIELD_TRANSLATIONS = [
-    {
-        field_name: "policies",
-        value_type: "PolicyRule[]",
-        semantic: "List of policy rules defining data write permissions and routing. Each policy is a named data slot " +
-            "with its own write_guard list and id_from routing mode. Operations (data_add/data_remove) reference " +
-            "policies by name.",
-        format_example: "[{ name: 'audit_log', id_from: 'Clock', ... }]",
-        validation_rules: [
-            `Array length ≤ MAX_POLICY_COUNT (${MAX_POLICY_COUNT})`,
-            "Each policy name must be unique within the Repository",
-            "Move aborts with E_POLICY_COUNT_EXCEEDED (3) on overflow",
-            "Move aborts with E_POLICY_NOT_FOUND (7) when name not found",
-        ],
-    },
-    {
-        field_name: "policies[].name",
-        move_field: "PolicyRule.name",
-        value_type: "string",
-        semantic: "Policy name. Acts as the key for data_add/data_remove operations. Must be unique within the Repository. " +
-            "Cannot be empty if NAME_ALLOW_EMPTY is not set.",
-        format_example: "audit_log",
-        validation_rules: [
-            "Non-empty string (unless NAME_ALLOW_EMPTY)",
-            "Must match an existing policy name in data_add/data_remove operations",
-        ],
-    },
-    {
-        field_name: "policies[].description",
-        move_field: "PolicyRule.description",
-        value_type: "string",
-        semantic: "Human-readable description of what the policy is for. Helps with auditing and tooling.",
-        format_example: "Append-only audit log keyed by timestamp",
-        validation_rules: [
-            `Length ≤ MAX_POLICY_DESCRIPTION_LEN (${MAX_POLICY_DESCRIPTION_LEN})`,
-            "Move aborts with E_POLICY_DESCRIPTION_EXCEEDED (1)",
-        ],
-    },
-    {
-        field_name: "policies[].id_from",
-        move_field: "PolicyRule.id_from",
-        value_type: "u8 (number | 'None' | 'Clock' | 'Signer')",
-        semantic: "Source of data ID when writing data. None (0): caller provides id; Clock (1): id=timestamp; " +
-            "Signer (2): id=signer address. Determines which entry point to use for data operations. " +
-            "SDK parseIdFrom normalizes string forms before comparison [P1-2 fix].",
-        format_example: "0, 1, 2, 'None', 'Clock', 'Signer'",
-        validation_rules: [
-            "Must be one of: 0, 1, 2, 'None', 'Clock', 'Signer' (case-insensitive)",
-            "Move aborts with E_INVALID_ID_FROM (18) for invalid u8 values",
-            "R-D-1 (refined): None requires non-empty write_guard; Clock/Signer allows non-empty write_guard but every PolicyGuard.id_from_submission MUST be None (data_from_submission still allowed)",
-        ],
-    },
-    {
-        field_name: "policies[].write_guard",
-        move_field: "PolicyRule.write_guard",
-        value_type: "PolicyGuard[]",
-        semantic: "List of Guard objects that must be verified (via Passport) to write data. Each PolicyGuard maps to a " +
-            "Guard object and optionally specifies id_from_submission / data_from_submission for Mode 4/5 routing. " +
-            "R-D-1 (refined): must be non-empty when id_from=None; when id_from=Clock/Signer, MAY be non-empty but " +
-            "every PolicyGuard.id_from_submission MUST be None (data_from_submission is still allowed, enabling Mode 2b " +
-            "where id is auto-generated from clock/signer while data comes from the guard submission).",
-        format_example: "[{ guard: '0xaddr...', id_from_submission: 0, data_from_submission: 1 }]",
-        validation_rules: [
-            `Array length ≤ MAX_POLICY_GUARD_COUNT (${MAX_POLICY_GUARD_COUNT}) per policy`,
-            "Move aborts with E_POLICY_GUARD_COUNT_EXCEEDED (2)",
-            "R-D-1: E_POLICY_WRITE_GUARD_REQUIRED (22) if empty when id_from=None",
-            "R-D-1: E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN (23) if any PolicyGuard.id_from_submission is non-null when id_from=Clock/Signer (data_from_submission still allowed)",
-        ],
-    },
-    {
-        field_name: "policies[].write_guard[].id_from_submission",
-        move_field: "PolicyGuard.id_from_submission",
-        value_type: "Option<u8> (number | null)",
-        semantic: "Guard table data index whose value is the ID of the data to be written. When set, the ID comes from " +
-            "the Passport submission (Mode 5). When null, the caller must provide the ID (Mode 4). " +
-            "R-D-1 (refined): MUST be null when policy id_from=Clock/Signer (id is auto-generated; setting this " +
-            "would conflict with id_from routing). data_from_submission is still allowed in that case (Mode 2b).",
-        format_example: "0, 1, 2, or null",
-        validation_rules: [
-            "Optional (null → caller provides id)",
-            "Guard must have is_identifier_address_compatible(identifier)",
-            "Move aborts with E_INVALID_ID_IN_GUARD_TABLE (16) if incompatible",
-            "R-D-1: MUST be null when policy id_from=Clock/Signer (E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN=23)",
-        ],
-    },
-    {
-        field_name: "policies[].write_guard[].data_from_submission",
-        move_field: "PolicyGuard.data_from_submission",
-        value_type: "Option<u8> (number | null)",
-        semantic: "Guard table data index whose value is the data to be written. When set, the data comes from the " +
-            "Passport submission (Mode 5). When null, the caller provides the data (Mode 4). " +
-            "R-D-2: must be null for id_data_remove_with_passport (removal cannot consume submission data).",
-        format_example: "0, 1, 2, or null",
-        validation_rules: [
-            "Optional (null → caller provides data)",
-            "Guard must have has_identifier(identifier)",
-            "Move aborts with E_INVALID_DATA_IN_GUARD_TABLE (17) if missing",
-            "R-D-2: E_GUARD_SPECIFIED_ID_FROM_SUBMISSION (11) if set in id_data_remove_with_passport",
-        ],
-    },
-    {
-        field_name: "data_add / data_remove",
-        value_type: "SignerOrClock | { name, items }",
-        semantic: "Data operations. For Clock/Signer policies, use SignerOrClock form ({name, data} or {name}). " +
-            "For None policies, use items form with id + write_guard per item. SDK hasSubmissionSettings helper " +
-            "routes to the correct Move entry point based on PolicyGuard settings [P1-1 fix].",
-        format_example: "{ name: 'audit_log', data: ... } or { name: 'order_meta', items: [{ id, data, write_guard }] }",
-        validation_rules: [
-            "Policy name must exist in Repository (E_POLICY_NOT_FOUND=7)",
-            "write_guard must be in policy (E_GUARD_SPECIFIED_NOT_IN_POLICY=13)",
-            "ID count ≤ MAX_ID_COUNT_ONCE per call",
-            "Data size ≤ MAX_DATA_SIZE per value",
-        ],
-    },
-    {
-        field_name: "rewards",
-        value_type: "{ op: 'add'|'set'|'remove'|'clear', objects: string[] }",
-        semantic: "Reward objects referenced by this Repository. Rewards incentivize data contribution. When a writer " +
-            "adds data, they may claim a reward (if the guard verifies eligibility).",
-        format_example: "{ op: 'add', objects: ['0xreward1...', '0xreward2...'] }",
-        validation_rules: [
-            `Total reward count ≤ MAX_REWARD_COUNT (${MAX_REWARD_COUNT})`,
-            "Move aborts with E_MAX_REWARD_COUNT_EXCEEDED (19)",
-            "Reward objects must be properly configured (guard, amounts, recipients)",
-        ],
-    },
-];
-export const REPOSITORY_CONSTRAINT_RULES = [
-    {
-        id: "REP_C_01",
-        name: "policy count within limit",
-        description: `Total policies in a Repository must be ≤ MAX_POLICY_COUNT (${MAX_POLICY_COUNT}).`,
-        validation_logic: "existing_policies + new_policies <= MAX_POLICY_COUNT",
-        failure_message: `Policy count exceeds MAX_POLICY_COUNT (${MAX_POLICY_COUNT}) — E_POLICY_COUNT_EXCEEDED (3)`,
-        related_field: "policies",
-    },
-    {
-        id: "REP_C_02",
-        name: "write_guard required when id_from=None (R-D-1)",
-        description: "When id_from is None, write_guard MUST be non-empty to prevent unauthorized writes.",
-        validation_logic: "id_from == None => write_guard.length > 0",
-        failure_message: "id_from=None requires non-empty write_guard — E_POLICY_WRITE_GUARD_REQUIRED (22)",
-        related_field: "policies[].write_guard",
-    },
-    {
-        id: "REP_C_03",
-        name: "id_from_submission forbidden when id_from=Clock/Signer (R-D-1 refined)",
-        description: "When id_from is Clock or Signer, every PolicyGuard.id_from_submission MUST be None (id is auto-generated; data_from_submission is still allowed).",
-        validation_logic: "(id_from == Clock || id_from == Signer) => all write_guard[].id_from_submission == null",
-        failure_message: "id_from=Clock/Signer requires id_from_submission=null on all guards — E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN (23)",
-        related_field: "policies[].write_guard[].id_from_submission",
-    },
-    {
-        id: "REP_C_04",
-        name: "policy guard count within limit",
-        description: `Each policy write_guard list must be ≤ MAX_POLICY_GUARD_COUNT (${MAX_POLICY_GUARD_COUNT}).`,
-        validation_logic: "policy.write_guard.length <= MAX_POLICY_GUARD_COUNT",
-        failure_message: `Policy guard count exceeds MAX_POLICY_GUARD_COUNT (${MAX_POLICY_GUARD_COUNT}) — E_POLICY_GUARD_COUNT_EXCEEDED (2)`,
-        related_field: "policies[].write_guard",
-    },
-    {
-        id: "REP_C_05",
-        name: "data size within limit",
-        description: `Each data value must be ≤ MAX_DATA_SIZE (${MAX_DATA_SIZE}) bytes.`,
-        validation_logic: "data.length <= MAX_DATA_SIZE",
-        failure_message: `Data value exceeds MAX_DATA_SIZE (${MAX_DATA_SIZE} bytes) — E_DATA_EXCEEDED (4)`,
-        related_field: "data_add.data",
-    },
-    {
-        id: "REP_C_06",
-        name: "id count per op within limit",
-        description: `A single Repository call may operate on at most MAX_ID_COUNT_ONCE (${MAX_ID_COUNT_ONCE}) IDs.`,
-        validation_logic: "id_count <= MAX_ID_COUNT_ONCE",
-        failure_message: `ID count exceeds MAX_ID_COUNT_ONCE (${MAX_ID_COUNT_ONCE}) — E_ID_COUNT_EXCEEDED (5)`,
-        related_field: "data_add.items[].id / data_remove.items[].id",
-    },
-    {
-        id: "REP_C_07",
-        name: "data_from_submission null in id_data_remove_with_passport (R-D-2)",
-        description: "id_data_remove_with_passport only removes data by caller id; it cannot consume Passport submissions. " +
-            "Both id_from_submission AND data_from_submission must be None.",
-        validation_logic: "is_data_remove_with_passport => !has_id_from_submission && !has_data_from_submission",
-        failure_message: "id_data_remove_with_passport cannot have id_from_submission or data_from_submission — E_GUARD_SPECIFIED_ID_FROM_SUBMISSION (11)",
-        related_field: "policies[].write_guard[].data_from_submission",
-    },
-    {
-        id: "REP_C_08",
-        name: "hasSubmissionSettings checks both submission fields (P1-1)",
-        description: "SDK hasSubmissionSettings helper must check BOTH id_from_submission AND data_from_submission to " +
-            "correctly route Mode 5 (id_data_mixed_with_passport).",
-        validation_logic: "hasSubmissionSettings = (id_from_submission != null) || (data_from_submission != null)",
-        failure_message: "Mode 5 routing missed if only id_from_submission is checked (P1-1 fix)",
-        related_field: "policies[].write_guard",
-    },
-    {
-        id: "REP_C_09",
-        name: "quote_guard must be is_depended (immutable + rep=true + no relies)",
-        description: "When quote_guard is set on a policy, it MUST satisfy guard::is_depended (guard.move#L133-135): " +
-            "immutable=true, relies empty, rep=true. Move aborts with E_NEED_DEPENDENT_GUARD (repository.move#L422). " +
-            "VERIFIED: passport.rs#L545-612 — check_repository_quote_guard enforces this when any guard queries " +
-            "this Repository's data (query 1167). quote_guard is a RIGID verification requirement.",
-        validation_logic: "quote_guard != null => guard.is_depended (immutable && relies.empty && rep)",
-        failure_message: "quote_guard must be is_depended — E_NEED_DEPENDENT_GUARD (repository.move#L422)",
-        related_field: "policies[].quote_guard",
-    },
-    {
-        id: "REP_C_10",
-        name: "quote_guard data subscription design (Payment verification + owner_receive)",
-        description: "For data subscription pattern: (1) quote_guard should verify Payment (for_object matches Repository, " +
-            "amount meets subscription price); (2) Repository should have owner_receive<T> configured to accept " +
-            "Payment as subscription revenue (repository.move#L714-717). " +
-            "DESIGN: user submits Payment via Passport → quote_guard verifies → impack_list updated → repository " +
-            "data query passes. 'On-chain data is consumed by guard verifiers.'",
-        validation_logic: "quote_guard != null => quote_guard_verifies_payment && repository_has_owner_receive",
-        failure_message: "quote_guard subscription incomplete: missing Payment verification or owner_receive revenue",
-        related_field: "policies[].quote_guard",
-    },
-];
-function normalizeIdFrom(v) {
-    if (typeof v === "number")
-        return v;
-    const lower = String(v).toLowerCase();
-    if (lower === "none")
-        return 0;
-    if (lower === "clock")
-        return 1;
-    if (lower === "signer")
-        return 2;
-    const parsed = Number(v);
-    return Number.isNaN(parsed) ? -1 : parsed;
-}
-export function explainRepository(input) {
-    const warnings = [];
-    const recommendations = [];
-    const routingModes = [];
-    let rD1Violations = 0;
-    let rD2Violations = 0;
-    let p11Correct = true;
-    let p12Recognized = true;
-    if (input.policies) {
-        for (const p of input.policies) {
-            const idFrom = normalizeIdFrom(p.id_from);
-            if (idFrom < 0 || idFrom > 2) {
-                p12Recognized = false;
-                warnings.push(`Policy "${p.name}": id_from="${p.id_from}" not recognized (P1-2 parseIdFrom)`);
-            }
-            if (idFrom === 0 && p.write_guard_count === 0) {
-                rD1Violations++;
-                warnings.push(`Policy "${p.name}": id_from=None + empty write_guard violates R-D-1 (E_POLICY_WRITE_GUARD_REQUIRED=22)`);
-            }
-            if ((idFrom === 1 || idFrom === 2) && p.has_id_from_submission) {
-                rD1Violations++;
-                warnings.push(`Policy "${p.name}": id_from=Clock/Signer + id_from_submission set violates R-D-1 (E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN=23)`);
-            }
-            if (input.is_data_remove_with_passport && p.has_data_from_submission) {
-                rD2Violations++;
-                warnings.push(`Policy "${p.name}": data_from_submission set but used in id_data_remove_with_passport violates R-D-2`);
-            }
-            if (idFrom === 0 && (p.has_id_from_submission || p.has_data_from_submission)) {
-                if (p.has_data_from_submission && !p.has_id_from_submission) {
-                    routingModes.push(`${p.name}: Mode 5 (data_from_submission only) — SDK hasSubmissionSettings correctly detects [P1-1]`);
-                }
-                else {
-                    routingModes.push(`${p.name}: Mode 5 (id_data_mixed_with_passport)`);
-                }
-            }
-            else if (idFrom === 0 && p.write_guard_count > 0) {
-                routingModes.push(`${p.name}: Mode 4 (Guard + caller id, id_data_with_passport)`);
-            }
-            else if ((idFrom === 1 || idFrom === 2) && p.write_guard_count > 0) {
-                routingModes.push(`${p.name}: Mode 2b (auto-id + guard, data_when_id_from_set_with_passport)`);
-            }
-            else if (idFrom === 1) {
-                routingModes.push(`${p.name}: Mode 1 (Clock-routed, data_when_id_from_set)`);
-            }
-            else if (idFrom === 2) {
-                routingModes.push(`${p.name}: Mode 2 (Signer-routed, data_when_id_from_set)`);
-            }
-            else {
-                routingModes.push(`${p.name}: unknown/invalid routing`);
-            }
-        }
-    }
-    if (rD1Violations > 0)
-        recommendations.push("Fix R-D-1 violations: align write_guard presence with id_from");
-    if (rD2Violations > 0)
-        recommendations.push("Fix R-D-2 violations: remove data_from_submission for id_data_remove_with_passport");
-    if (!p12Recognized)
-        recommendations.push("Use recognized id_from values: 0/1/2 or 'None'/'Clock'/'Signer'");
-    if (routingModes.length === 0)
-        recommendations.push("Define at least one policy to enable data operations");
-    const rD1Status = rD1Violations === 0 ? "PASS (all policies satisfy R-D-1)" : `FAIL (${rD1Violations} violation(s))`;
-    const rD2Status = rD2Violations === 0 ? "PASS (no R-D-2 violations)" : `FAIL (${rD2Violations} violation(s))`;
-    const p11Status = p11Correct ? "PASS (hasSubmissionSettings checks both fields)" : "FAIL";
-    const p12Status = p12Recognized ? "PASS (all id_from values recognized)" : "FAIL (unrecognized id_from values)";
-    const summary = `Repository has ${input.policies?.length ?? 0} policy(ies). ` +
-        `R-D-1: ${rD1Status}. R-D-2: ${rD2Status}. P1-1: ${p11Status}. P1-2: ${p12Status}.`;
-    return {
-        summary,
-        routing_modes: routingModes,
-        r_d_1_status: rD1Status,
-        r_d_2_status: rD2Status,
-        p1_1_status: p11Status,
-        p1_2_status: p12Status,
-        warnings,
-        recommendations,
-    };
-}
+import{MAX_POLICY_COUNT,MAX_POLICY_DESCRIPTION_LEN,MAX_POLICY_GUARD_COUNT,MAX_DATA_SIZE,MAX_ID_COUNT_ONCE,MAX_REWARD_COUNT}from'@wowok/wowok';export const SEMANTIC_TO_REPOSITORY_SCHEMA_RULES=[{'id':'P-REP-01','pattern_name':'Clock-routed\x20data\x20(id=timestamp)','routing_mode':'clock','semantic_intent':'Data\x20is\x20keyed\x20by\x20current\x20timestamp\x20(id_from=Clock).\x20Each\x20write\x20produces\x20a\x20unique\x20timestamp-keyed\x20entry.\x20'+'Suitable\x20for\x20append-only\x20logs,\x20time-series\x20records,\x20and\x20audit\x20trails.\x20write_guard\x20may\x20be\x20empty\x20(id\x20is\x20'+'auto-generated\x20and\x20predictable)\x20or\x20non-empty\x20with\x20data_from_submission\x20set\x20(guard\x20supplies\x20the\x20data\x20'+'payload\x20while\x20id\x20comes\x20from\x20the\x20clock\x20—\x20e.g.\x20oracle-fed\x20time-series).','match_keywords':['timestamp','log','audit\x20trail','time-series','append-only','clock'],'schema_elements':{'id_from_value':0x1,'required_policy_fields':['name','description','id_from','value_type','write_guard'],'write_guard_requirement':'either','move_entry_point':'data_when_id_from_set','caller_input_shape':'{\x20name,\x20data\x20}\x20—\x20no\x20id,\x20no\x20write_guard,\x20no\x20Passport'},'constraints':['id_from\x20MUST\x20be\x20Clock\x20(1)','write_guard\x20MAY\x20be\x20empty\x20OR\x20non-empty\x20(R-D-1\x20refined)','If\x20write_guard\x20is\x20non-empty,\x20every\x20PolicyGuard.id_from_submission\x20MUST\x20be\x20None\x20(E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN=23)','data_from_submission\x20MAY\x20be\x20set\x20(used\x20by\x20data_when_id_from_set_with_passport)','Caller\x20uses\x20data_when_id_from_set\x20(no\x20guard)\x20or\x20data_when_id_from_set_with_passport\x20(with\x20guard)','ID\x20is\x20auto-generated\x20from\x20clock::timestamp_ms'],'example':{'name':'audit_log','description':'Append-only\x20audit\x20log\x20keyed\x20by\x20timestamp','id_from':'Clock','value_type':0x0,'write_guard':[]}},{'id':'P-REP-02','pattern_name':'Signer-routed\x20data\x20(id=signer\x20address)','routing_mode':'signer','semantic_intent':'Data\x20is\x20keyed\x20by\x20signer\x20address\x20(id_from=Signer).\x20Each\x20user\x20has\x20at\x20most\x20one\x20data\x20entry\x20per\x20policy.\x20'+'Suitable\x20for\x20user\x20profiles,\x20KYC\x20attestations,\x20per-user\x20settings.\x20write_guard\x20may\x20be\x20empty\x20(signer\x20'+'writes\x20their\x20own\x20data)\x20or\x20non-empty\x20with\x20data_from_submission\x20set\x20(guard\x20supplies\x20the\x20data\x20payload\x20'+'while\x20id\x20comes\x20from\x20the\x20signer\x20—\x20e.g.\x20verified\x20credential\x20insertion).','match_keywords':['profile','user\x20data','kyc','per-user','signer','identity'],'schema_elements':{'id_from_value':0x2,'required_policy_fields':['name','description','id_from','value_type','write_guard'],'write_guard_requirement':'either','move_entry_point':'data_when_id_from_set','caller_input_shape':'{\x20name,\x20data\x20}\x20—\x20no\x20id,\x20no\x20write_guard,\x20no\x20Passport'},'constraints':['id_from\x20MUST\x20be\x20Signer\x20(2)','write_guard\x20MAY\x20be\x20empty\x20OR\x20non-empty\x20(R-D-1\x20refined)','If\x20write_guard\x20is\x20non-empty,\x20every\x20PolicyGuard.id_from_submission\x20MUST\x20be\x20None\x20(E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN=23)','data_from_submission\x20MAY\x20be\x20set\x20(used\x20by\x20data_when_id_from_set_with_passport)','Caller\x20uses\x20data_when_id_from_set\x20(no\x20guard)\x20or\x20data_when_id_from_set_with_passport\x20(with\x20guard)','ID\x20is\x20auto-generated\x20from\x20ctx.sender()'],'example':{'name':'user_profile','description':'Per-user\x20profile\x20data\x20keyed\x20by\x20signer\x20address','id_from':'Signer','value_type':0x0,'write_guard':[]}},{'id':'P-REP-03','pattern_name':'Guard-protected\x20with\x20caller-provided\x20id\x20(Mode\x204)','routing_mode':'guard_caller','semantic_intent':'Data\x20is\x20keyed\x20by\x20caller-provided\x20id\x20(id_from=None).\x20Write\x20authorization\x20requires\x20a\x20Passport\x20submission\x20'+'verifying\x20the\x20guard.\x20Suitable\x20for\x20application-specific\x20keys\x20(order\x20IDs,\x20content\x20hashes,\x20custom\x20identifiers).\x20'+'The\x20guard\x20enforces\x20WHO\x20can\x20write;\x20the\x20caller\x20decides\x20WHAT\x20id\x20to\x20use.','match_keywords':['custom\x20id','order\x20id','content\x20hash','application\x20key','guard\x20protected','passport'],'schema_elements':{'id_from_value':0x0,'required_policy_fields':['name','description','id_from','value_type','write_guard'],'write_guard_requirement':'non_empty','move_entry_point':'id_data_with_passport','caller_input_shape':'{\x20name,\x20items:\x20[{\x20id,\x20data,\x20write_guard\x20}]\x20}\x20—\x20id\x20and\x20data\x20provided\x20by\x20caller,\x20Passport\x20verifies\x20guard'},'constraints':['id_from\x20MUST\x20be\x20None\x20(0)','write_guard\x20MUST\x20be\x20non-empty\x20(R-D-1:\x20E_POLICY_WRITE_GUARD_REQUIRED=22)','Each\x20PolicyGuard\x20MUST\x20have\x20id_from_submission=None\x20AND\x20data_from_submission=None','Caller\x20uses\x20id_data_with_passport\x20entry\x20point','Passport\x20must\x20verify\x20one\x20of\x20the\x20policy\x27s\x20write_guards'],'example':{'name':'order_metadata','description':'Order-specific\x20metadata\x20keyed\x20by\x20order\x20id,\x20guard-protected','id_from':'None','value_type':0x0,'write_guard':[{'guard':'0xguard_addr...','id_from_submission':null,'data_from_submission':null}]}},{'id':'P-REP-04','pattern_name':'Guard-protected\x20with\x20submission-derived\x20id/data\x20(Mode\x205)','routing_mode':'guard_submission','semantic_intent':'Data\x20id\x20and/or\x20data\x20payload\x20are\x20derived\x20from\x20Guard\x20submission\x20values\x20in\x20the\x20Passport.\x20This\x20is\x20the\x20most\x20'+'flexible\x20mode:\x20the\x20guard\x20can\x20compute\x20both\x20the\x20key\x20and\x20the\x20value\x20from\x20its\x20internal\x20table.\x20Suitable\x20for\x20'+'bridges\x20(where\x20the\x20guard\x20verifies\x20an\x20external\x20event\x20and\x20outputs\x20the\x20bridged\x20amount),\x20oracle-fed\x20data,\x20'+'and\x20complex\x20authorization\x20patterns.','match_keywords':['oracle','bridge','submission','guard\x20derived','computed\x20id','computed\x20data'],'schema_elements':{'id_from_value':0x0,'required_policy_fields':['name','description','id_from','value_type','write_guard'],'write_guard_requirement':'non_empty','move_entry_point':'id_data_mixed_with_passport','caller_input_shape':'{\x20name,\x20items:\x20[{\x20write_guard,\x20id?,\x20data?\x20}]\x20}\x20—\x20id/data\x20omitted\x20where\x20submission\x20provides\x20them'},'constraints':['id_from\x20MUST\x20be\x20None\x20(0)','write_guard\x20MUST\x20be\x20non-empty\x20(R-D-1:\x20E_POLICY_WRITE_GUARD_REQUIRED=22)','Each\x20PolicyGuard\x20may\x20have\x20id_from_submission\x20and/or\x20data_from_submission\x20set','Caller\x20uses\x20id_data_mixed_with_passport\x20entry\x20point','SDK\x20hasSubmissionSettings\x20must\x20check\x20BOTH\x20id_from_submission\x20AND\x20data_from_submission\x20(P1-1\x20fix)','Passport\x20must\x20verify\x20the\x20specified\x20write_guards'],'example':{'name':'oracle_price','description':'Oracle-fed\x20price\x20data,\x20id\x20and\x20data\x20both\x20from\x20guard\x20submission','id_from':'None','value_type':0x0,'write_guard':[{'guard':'0xoracle_guard_addr...','id_from_submission':0x0,'data_from_submission':0x1}]}}];export const REPOSITORY_FIELD_TRANSLATIONS=[{'field_name':'policies','value_type':'PolicyRule[]','semantic':'List\x20of\x20policy\x20rules\x20defining\x20data\x20write\x20permissions\x20and\x20routing.\x20Each\x20policy\x20is\x20a\x20named\x20data\x20slot\x20'+'with\x20its\x20own\x20write_guard\x20list\x20and\x20id_from\x20routing\x20mode.\x20Operations\x20(data_add/data_remove)\x20reference\x20'+'policies\x20by\x20name.','format_example':'[{\x20name:\x20\x27audit_log\x27,\x20id_from:\x20\x27Clock\x27,\x20...\x20}]','validation_rules':['Array\x20length\x20≤\x20MAX_POLICY_COUNT\x20('+MAX_POLICY_COUNT+')','Each\x20policy\x20name\x20must\x20be\x20unique\x20within\x20the\x20Repository','Move\x20aborts\x20with\x20E_POLICY_COUNT_EXCEEDED\x20(3)\x20on\x20overflow','Move\x20aborts\x20with\x20E_POLICY_NOT_FOUND\x20(7)\x20when\x20name\x20not\x20found']},{'field_name':'policies[].name','move_field':'PolicyRule.name','value_type':'string','semantic':'Policy\x20name.\x20Acts\x20as\x20the\x20key\x20for\x20data_add/data_remove\x20operations.\x20Must\x20be\x20unique\x20within\x20the\x20Repository.\x20'+'Cannot\x20be\x20empty\x20if\x20NAME_ALLOW_EMPTY\x20is\x20not\x20set.','format_example':'audit_log','validation_rules':['Non-empty\x20string\x20(unless\x20NAME_ALLOW_EMPTY)','Must\x20match\x20an\x20existing\x20policy\x20name\x20in\x20data_add/data_remove\x20operations']},{'field_name':'policies[].description','move_field':'PolicyRule.description','value_type':'string','semantic':'Human-readable\x20description\x20of\x20what\x20the\x20policy\x20is\x20for.\x20Helps\x20with\x20auditing\x20and\x20tooling.','format_example':'Append-only\x20audit\x20log\x20keyed\x20by\x20timestamp','validation_rules':['Length\x20≤\x20MAX_POLICY_DESCRIPTION_LEN\x20('+MAX_POLICY_DESCRIPTION_LEN+')','Move\x20aborts\x20with\x20E_POLICY_DESCRIPTION_EXCEEDED\x20(1)']},{'field_name':'policies[].id_from','move_field':'PolicyRule.id_from','value_type':'u8\x20(number\x20|\x20\x27None\x27\x20|\x20\x27Clock\x27\x20|\x20\x27Signer\x27)','semantic':'Source\x20of\x20data\x20ID\x20when\x20writing\x20data.\x20None\x20(0):\x20caller\x20provides\x20id;\x20Clock\x20(1):\x20id=timestamp;\x20'+'Signer\x20(2):\x20id=signer\x20address.\x20Determines\x20which\x20entry\x20point\x20to\x20use\x20for\x20data\x20operations.\x20'+'SDK\x20parseIdFrom\x20normalizes\x20string\x20forms\x20before\x20comparison\x20[P1-2\x20fix].','format_example':'0,\x201,\x202,\x20\x27None\x27,\x20\x27Clock\x27,\x20\x27Signer\x27','validation_rules':['Must\x20be\x20one\x20of:\x200,\x201,\x202,\x20\x27None\x27,\x20\x27Clock\x27,\x20\x27Signer\x27\x20(case-insensitive)','Move\x20aborts\x20with\x20E_INVALID_ID_FROM\x20(18)\x20for\x20invalid\x20u8\x20values','R-D-1\x20(refined):\x20None\x20requires\x20non-empty\x20write_guard;\x20Clock/Signer\x20allows\x20non-empty\x20write_guard\x20but\x20every\x20PolicyGuard.id_from_submission\x20MUST\x20be\x20None\x20(data_from_submission\x20still\x20allowed)']},{'field_name':'policies[].write_guard','move_field':'PolicyRule.write_guard','value_type':'PolicyGuard[]','semantic':'List\x20of\x20Guard\x20objects\x20that\x20must\x20be\x20verified\x20(via\x20Passport)\x20to\x20write\x20data.\x20Each\x20PolicyGuard\x20maps\x20to\x20a\x20'+'Guard\x20object\x20and\x20optionally\x20specifies\x20id_from_submission\x20/\x20data_from_submission\x20for\x20Mode\x204/5\x20routing.\x20'+'R-D-1\x20(refined):\x20must\x20be\x20non-empty\x20when\x20id_from=None;\x20when\x20id_from=Clock/Signer,\x20MAY\x20be\x20non-empty\x20but\x20'+'every\x20PolicyGuard.id_from_submission\x20MUST\x20be\x20None\x20(data_from_submission\x20is\x20still\x20allowed,\x20enabling\x20Mode\x202b\x20'+'where\x20id\x20is\x20auto-generated\x20from\x20clock/signer\x20while\x20data\x20comes\x20from\x20the\x20guard\x20submission).','format_example':'[{\x20guard:\x20\x270xaddr...\x27,\x20id_from_submission:\x200,\x20data_from_submission:\x201\x20}]','validation_rules':['Array\x20length\x20≤\x20MAX_POLICY_GUARD_COUNT\x20('+MAX_POLICY_GUARD_COUNT+')\x20per\x20policy','Move\x20aborts\x20with\x20E_POLICY_GUARD_COUNT_EXCEEDED\x20(2)','R-D-1:\x20E_POLICY_WRITE_GUARD_REQUIRED\x20(22)\x20if\x20empty\x20when\x20id_from=None','R-D-1:\x20E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN\x20(23)\x20if\x20any\x20PolicyGuard.id_from_submission\x20is\x20non-null\x20when\x20id_from=Clock/Signer\x20(data_from_submission\x20still\x20allowed)']},{'field_name':'policies[].write_guard[].id_from_submission','move_field':'PolicyGuard.id_from_submission','value_type':'Option<u8>\x20(number\x20|\x20null)','semantic':'Guard\x20table\x20data\x20index\x20whose\x20value\x20is\x20the\x20ID\x20of\x20the\x20data\x20to\x20be\x20written.\x20When\x20set,\x20the\x20ID\x20comes\x20from\x20'+'the\x20Passport\x20submission\x20(Mode\x205).\x20When\x20null,\x20the\x20caller\x20must\x20provide\x20the\x20ID\x20(Mode\x204).\x20'+'R-D-1\x20(refined):\x20MUST\x20be\x20null\x20when\x20policy\x20id_from=Clock/Signer\x20(id\x20is\x20auto-generated;\x20setting\x20this\x20'+'would\x20conflict\x20with\x20id_from\x20routing).\x20data_from_submission\x20is\x20still\x20allowed\x20in\x20that\x20case\x20(Mode\x202b).','format_example':'0,\x201,\x202,\x20or\x20null','validation_rules':['Optional\x20(null\x20→\x20caller\x20provides\x20id)','Guard\x20must\x20have\x20is_identifier_address_compatible(identifier)','Move\x20aborts\x20with\x20E_INVALID_ID_IN_GUARD_TABLE\x20(16)\x20if\x20incompatible','R-D-1:\x20MUST\x20be\x20null\x20when\x20policy\x20id_from=Clock/Signer\x20(E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN=23)']},{'field_name':'policies[].write_guard[].data_from_submission','move_field':'PolicyGuard.data_from_submission','value_type':'Option<u8>\x20(number\x20|\x20null)','semantic':'Guard\x20table\x20data\x20index\x20whose\x20value\x20is\x20the\x20data\x20to\x20be\x20written.\x20When\x20set,\x20the\x20data\x20comes\x20from\x20the\x20'+'Passport\x20submission\x20(Mode\x205).\x20When\x20null,\x20the\x20caller\x20provides\x20the\x20data\x20(Mode\x204).\x20'+'R-D-2:\x20must\x20be\x20null\x20for\x20id_data_remove_with_passport\x20(removal\x20cannot\x20consume\x20submission\x20data).','format_example':'0,\x201,\x202,\x20or\x20null','validation_rules':['Optional\x20(null\x20→\x20caller\x20provides\x20data)','Guard\x20must\x20have\x20has_identifier(identifier)','Move\x20aborts\x20with\x20E_INVALID_DATA_IN_GUARD_TABLE\x20(17)\x20if\x20missing','R-D-2:\x20E_GUARD_SPECIFIED_ID_FROM_SUBMISSION\x20(11)\x20if\x20set\x20in\x20id_data_remove_with_passport']},{'field_name':'data_add\x20/\x20data_remove','value_type':'SignerOrClock\x20|\x20{\x20name,\x20items\x20}','semantic':'Data\x20operations.\x20For\x20Clock/Signer\x20policies,\x20use\x20SignerOrClock\x20form\x20({name,\x20data}\x20or\x20{name}).\x20'+'For\x20None\x20policies,\x20use\x20items\x20form\x20with\x20id\x20+\x20write_guard\x20per\x20item.\x20SDK\x20hasSubmissionSettings\x20helper\x20'+'routes\x20to\x20the\x20correct\x20Move\x20entry\x20point\x20based\x20on\x20PolicyGuard\x20settings\x20[P1-1\x20fix].','format_example':'{\x20name:\x20\x27audit_log\x27,\x20data:\x20...\x20}\x20or\x20{\x20name:\x20\x27order_meta\x27,\x20items:\x20[{\x20id,\x20data,\x20write_guard\x20}]\x20}','validation_rules':['Policy\x20name\x20must\x20exist\x20in\x20Repository\x20(E_POLICY_NOT_FOUND=7)','write_guard\x20must\x20be\x20in\x20policy\x20(E_GUARD_SPECIFIED_NOT_IN_POLICY=13)','ID\x20count\x20≤\x20MAX_ID_COUNT_ONCE\x20per\x20call','Data\x20size\x20≤\x20MAX_DATA_SIZE\x20per\x20value']},{'field_name':'rewards','value_type':'{\x20op:\x20\x27add\x27|\x27set\x27|\x27remove\x27|\x27clear\x27,\x20objects:\x20string[]\x20}','semantic':'Reward\x20objects\x20referenced\x20by\x20this\x20Repository.\x20Rewards\x20incentivize\x20data\x20contribution.\x20When\x20a\x20writer\x20'+'adds\x20data,\x20they\x20may\x20claim\x20a\x20reward\x20(if\x20the\x20guard\x20verifies\x20eligibility).','format_example':'{\x20op:\x20\x27add\x27,\x20objects:\x20[\x270xreward1...\x27,\x20\x270xreward2...\x27]\x20}','validation_rules':['Total\x20reward\x20count\x20≤\x20MAX_REWARD_COUNT\x20('+MAX_REWARD_COUNT+')','Move\x20aborts\x20with\x20E_MAX_REWARD_COUNT_EXCEEDED\x20(19)','Reward\x20objects\x20must\x20be\x20properly\x20configured\x20(guard,\x20amounts,\x20recipients)']}];export const REPOSITORY_CONSTRAINT_RULES=[{'id':'REP_C_01','name':'policy\x20count\x20within\x20limit','description':'Total\x20policies\x20in\x20a\x20Repository\x20must\x20be\x20≤\x20MAX_POLICY_COUNT\x20('+MAX_POLICY_COUNT+').','validation_logic':'existing_policies\x20+\x20new_policies\x20<=\x20MAX_POLICY_COUNT','failure_message':'Policy\x20count\x20exceeds\x20MAX_POLICY_COUNT\x20('+MAX_POLICY_COUNT+')\x20—\x20E_POLICY_COUNT_EXCEEDED\x20(3)','related_field':'policies'},{'id':'REP_C_02','name':'write_guard\x20required\x20when\x20id_from=None\x20(R-D-1)','description':'When\x20id_from\x20is\x20None,\x20write_guard\x20MUST\x20be\x20non-empty\x20to\x20prevent\x20unauthorized\x20writes.','validation_logic':'id_from\x20==\x20None\x20=>\x20write_guard.length\x20>\x200','failure_message':'id_from=None\x20requires\x20non-empty\x20write_guard\x20—\x20E_POLICY_WRITE_GUARD_REQUIRED\x20(22)','related_field':'policies[].write_guard'},{'id':'REP_C_03','name':'id_from_submission\x20forbidden\x20when\x20id_from=Clock/Signer\x20(R-D-1\x20refined)','description':'When\x20id_from\x20is\x20Clock\x20or\x20Signer,\x20every\x20PolicyGuard.id_from_submission\x20MUST\x20be\x20None\x20(id\x20is\x20auto-generated;\x20data_from_submission\x20is\x20still\x20allowed).','validation_logic':'(id_from\x20==\x20Clock\x20||\x20id_from\x20==\x20Signer)\x20=>\x20all\x20write_guard[].id_from_submission\x20==\x20null','failure_message':'id_from=Clock/Signer\x20requires\x20id_from_submission=null\x20on\x20all\x20guards\x20—\x20E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN\x20(23)','related_field':'policies[].write_guard[].id_from_submission'},{'id':'REP_C_04','name':'policy\x20guard\x20count\x20within\x20limit','description':'Each\x20policy\x20write_guard\x20list\x20must\x20be\x20≤\x20MAX_POLICY_GUARD_COUNT\x20('+MAX_POLICY_GUARD_COUNT+').','validation_logic':'policy.write_guard.length\x20<=\x20MAX_POLICY_GUARD_COUNT','failure_message':'Policy\x20guard\x20count\x20exceeds\x20MAX_POLICY_GUARD_COUNT\x20('+MAX_POLICY_GUARD_COUNT+')\x20—\x20E_POLICY_GUARD_COUNT_EXCEEDED\x20(2)','related_field':'policies[].write_guard'},{'id':'REP_C_05','name':'data\x20size\x20within\x20limit','description':'Each\x20data\x20value\x20must\x20be\x20≤\x20MAX_DATA_SIZE\x20('+MAX_DATA_SIZE+')\x20bytes.','validation_logic':'data.length\x20<=\x20MAX_DATA_SIZE','failure_message':'Data\x20value\x20exceeds\x20MAX_DATA_SIZE\x20('+MAX_DATA_SIZE+'\x20bytes)\x20—\x20E_DATA_EXCEEDED\x20(4)','related_field':'data_add.data'},{'id':'REP_C_06','name':'id\x20count\x20per\x20op\x20within\x20limit','description':'A\x20single\x20Repository\x20call\x20may\x20operate\x20on\x20at\x20most\x20MAX_ID_COUNT_ONCE\x20('+MAX_ID_COUNT_ONCE+')\x20IDs.','validation_logic':'id_count\x20<=\x20MAX_ID_COUNT_ONCE','failure_message':'ID\x20count\x20exceeds\x20MAX_ID_COUNT_ONCE\x20('+MAX_ID_COUNT_ONCE+')\x20—\x20E_ID_COUNT_EXCEEDED\x20(5)','related_field':'data_add.items[].id\x20/\x20data_remove.items[].id'},{'id':'REP_C_07','name':'data_from_submission\x20null\x20in\x20id_data_remove_with_passport\x20(R-D-2)','description':'id_data_remove_with_passport\x20only\x20removes\x20data\x20by\x20caller\x20id;\x20it\x20cannot\x20consume\x20Passport\x20submissions.\x20'+'Both\x20id_from_submission\x20AND\x20data_from_submission\x20must\x20be\x20None.','validation_logic':'is_data_remove_with_passport\x20=>\x20!has_id_from_submission\x20&&\x20!has_data_from_submission','failure_message':'id_data_remove_with_passport\x20cannot\x20have\x20id_from_submission\x20or\x20data_from_submission\x20—\x20E_GUARD_SPECIFIED_ID_FROM_SUBMISSION\x20(11)','related_field':'policies[].write_guard[].data_from_submission'},{'id':'REP_C_08','name':'hasSubmissionSettings\x20checks\x20both\x20submission\x20fields\x20(P1-1)','description':'SDK\x20hasSubmissionSettings\x20helper\x20must\x20check\x20BOTH\x20id_from_submission\x20AND\x20data_from_submission\x20to\x20'+'correctly\x20route\x20Mode\x205\x20(id_data_mixed_with_passport).','validation_logic':'hasSubmissionSettings\x20=\x20(id_from_submission\x20!=\x20null)\x20||\x20(data_from_submission\x20!=\x20null)','failure_message':'Mode\x205\x20routing\x20missed\x20if\x20only\x20id_from_submission\x20is\x20checked\x20(P1-1\x20fix)','related_field':'policies[].write_guard'},{'id':'REP_C_09','name':'quote_guard\x20must\x20be\x20is_depended\x20(immutable\x20+\x20rep=true\x20+\x20no\x20relies)','description':'When\x20quote_guard\x20is\x20set\x20on\x20a\x20policy,\x20it\x20MUST\x20satisfy\x20guard::is_depended\x20(guard.move#L133-135):\x20'+'immutable=true,\x20relies\x20empty,\x20rep=true.\x20Move\x20aborts\x20with\x20E_NEED_DEPENDENT_GUARD\x20(repository.move#L422).\x20'+'VERIFIED:\x20passport.rs#L545-612\x20—\x20check_repository_quote_guard\x20enforces\x20this\x20when\x20any\x20guard\x20queries\x20'+'this\x20Repository\x27s\x20data\x20(query\x201167).\x20quote_guard\x20is\x20a\x20RIGID\x20verification\x20requirement.','validation_logic':'quote_guard\x20!=\x20null\x20=>\x20guard.is_depended\x20(immutable\x20&&\x20relies.empty\x20&&\x20rep)','failure_message':'quote_guard\x20must\x20be\x20is_depended\x20—\x20E_NEED_DEPENDENT_GUARD\x20(repository.move#L422)','related_field':'policies[].quote_guard'},{'id':'REP_C_10','name':'quote_guard\x20data\x20subscription\x20design\x20(Payment\x20verification\x20+\x20owner_receive)','description':'For\x20data\x20subscription\x20pattern:\x20(1)\x20quote_guard\x20should\x20verify\x20Payment\x20(for_object\x20matches\x20Repository,\x20'+'amount\x20meets\x20subscription\x20price);\x20(2)\x20Repository\x20should\x20have\x20owner_receive<T>\x20configured\x20to\x20accept\x20'+'Payment\x20as\x20subscription\x20revenue\x20(repository.move#L714-717).\x20'+'DESIGN:\x20user\x20submits\x20Payment\x20via\x20Passport\x20→\x20quote_guard\x20verifies\x20→\x20impack_list\x20updated\x20→\x20repository\x20'+'data\x20query\x20passes.\x20\x27On-chain\x20data\x20is\x20consumed\x20by\x20guard\x20verifiers.\x27','validation_logic':'quote_guard\x20!=\x20null\x20=>\x20quote_guard_verifies_payment\x20&&\x20repository_has_owner_receive','failure_message':'quote_guard\x20subscription\x20incomplete:\x20missing\x20Payment\x20verification\x20or\x20owner_receive\x20revenue','related_field':'policies[].quote_guard'}];function normalizeIdFrom(a){if(typeof a==='number')return a;const b=String(a)['toLowerCase']();if(b==='none')return 0x0;if(b==='clock')return 0x1;if(b==='signer')return 0x2;const c=Number(a);return Number['isNaN'](c)?-0x1:c;}export function explainRepository(a){const b=[],c=[],d=[];let e=0x0,f=0x0,g=!![],h=!![];if(a['policies'])for(const n of a['policies']){const o=normalizeIdFrom(n['id_from']);(o<0x0||o>0x2)&&(h=![],b['push']('Policy\x20\x22'+n['name']+'\x22:\x20id_from=\x22'+n['id_from']+'\x22\x20not\x20recognized\x20(P1-2\x20parseIdFrom)'));o===0x0&&n['write_guard_count']===0x0&&(e++,b['push']('Policy\x20\x22'+n['name']+'\x22:\x20id_from=None\x20+\x20empty\x20write_guard\x20violates\x20R-D-1\x20(E_POLICY_WRITE_GUARD_REQUIRED=22)'));(o===0x1||o===0x2)&&n['has_id_from_submission']&&(e++,b['push']('Policy\x20\x22'+n['name']+'\x22:\x20id_from=Clock/Signer\x20+\x20id_from_submission\x20set\x20violates\x20R-D-1\x20(E_POLICY_ID_FROM_SUBMISSION_FORBIDDEN=23)'));a['is_data_remove_with_passport']&&n['has_data_from_submission']&&(f++,b['push']('Policy\x20\x22'+n['name']+'\x22:\x20data_from_submission\x20set\x20but\x20used\x20in\x20id_data_remove_with_passport\x20violates\x20R-D-2'));if(o===0x0&&(n['has_id_from_submission']||n['has_data_from_submission']))n['has_data_from_submission']&&!n['has_id_from_submission']?d['push'](n['name']+':\x20Mode\x205\x20(data_from_submission\x20only)\x20—\x20SDK\x20hasSubmissionSettings\x20correctly\x20detects\x20[P1-1]'):d['push'](n['name']+':\x20Mode\x205\x20(id_data_mixed_with_passport)');else{if(o===0x0&&n['write_guard_count']>0x0)d['push'](n['name']+':\x20Mode\x204\x20(Guard\x20+\x20caller\x20id,\x20id_data_with_passport)');else{if((o===0x1||o===0x2)&&n['write_guard_count']>0x0)d['push'](n['name']+':\x20Mode\x202b\x20(auto-id\x20+\x20guard,\x20data_when_id_from_set_with_passport)');else{if(o===0x1)d['push'](n['name']+':\x20Mode\x201\x20(Clock-routed,\x20data_when_id_from_set)');else o===0x2?d['push'](n['name']+':\x20Mode\x202\x20(Signer-routed,\x20data_when_id_from_set)'):d['push'](n['name']+':\x20unknown/invalid\x20routing');}}}}if(e>0x0)c['push']('Fix\x20R-D-1\x20violations:\x20align\x20write_guard\x20presence\x20with\x20id_from');if(f>0x0)c['push']('Fix\x20R-D-2\x20violations:\x20remove\x20data_from_submission\x20for\x20id_data_remove_with_passport');if(!h)c['push']('Use\x20recognized\x20id_from\x20values:\x200/1/2\x20or\x20\x27None\x27/\x27Clock\x27/\x27Signer\x27');if(d['length']===0x0)c['push']('Define\x20at\x20least\x20one\x20policy\x20to\x20enable\x20data\x20operations');const i=e===0x0?'PASS\x20(all\x20policies\x20satisfy\x20R-D-1)':'FAIL\x20('+e+'\x20violation(s))',j=f===0x0?'PASS\x20(no\x20R-D-2\x20violations)':'FAIL\x20('+f+'\x20violation(s))',k=g?'PASS\x20(hasSubmissionSettings\x20checks\x20both\x20fields)':'FAIL',l=h?'PASS\x20(all\x20id_from\x20values\x20recognized)':'FAIL\x20(unrecognized\x20id_from\x20values)',m='Repository\x20has\x20'+(a['policies']?.['length']??0x0)+'\x20policy(ies).\x20'+('R-D-1:\x20'+i+'.\x20R-D-2:\x20'+j+'.\x20P1-1:\x20'+k+'.\x20P1-2:\x20'+l+'.');return{'summary':m,'routing_modes':d,'r_d_1_status':i,'r_d_2_status':j,'p1_1_status':k,'p1_2_status':l,'warnings':b,'recommendations':c};}

package/dist/knowledge/reputation-rules.js

@@ -1,99 +1 @@
-export const REPUTATION_RULES_VERSION = 1;
-export function buildReviewRepositorySetup(serviceName) {
-    return {
-        repositoryName: `${serviceName}_reviews`,
-        guardName: `${serviceName}_review_guard`,
-        guardRules: "Verify that the submitter has a completed order for this Service (query order history == completed) — anti-review-spam",
-        setupSteps: [
-            `1. Create Guard: name='${serviceName}_review_guard', rule verifies buyer identity`,
-            `2. Create Repository: name='${serviceName}_reviews', attach Guard`,
-            `3. Associate Repository with Service: onchain_operations service modify`,
-            `4. When user submits a review: onchain_operations repository write (Guard auto-validates)`,
-            `5. Query reviews: onchain_table_data repository query`,
-        ],
-    };
-}
-export function computeReviewStats(reviews) {
-    if (reviews.length === 0) {
-        return {
-            total: 0,
-            likes: 0,
-            dislikes: 0,
-            likeRate: 0,
-            verifiedCount: 0,
-            topTags: [],
-            recentTrend: "stable",
-        };
-    }
-    const likes = reviews.filter((r) => r.rating === "like").length;
-    const dislikes = reviews.filter((r) => r.rating === "dislike").length;
-    const verifiedCount = reviews.filter((r) => r.verified).length;
-    const tagCounts = new Map();
-    for (const r of reviews) {
-        if (r.tags) {
-            for (const t of r.tags) {
-                tagCounts.set(t, (tagCounts.get(t) ?? 0) + 1);
-            }
-        }
-    }
-    const topTags = Array.from(tagCounts.entries())
-        .sort((a, b) => b[1] - a[1])
-        .slice(0, 5)
-        .map(([tag, count]) => ({ tag, count }));
-    const sorted = [...reviews].sort((a, b) => (a.timestamp ?? 0) - (b.timestamp ?? 0));
-    const midPoint = Math.floor(sorted.length / 2);
-    const firstHalf = sorted.slice(0, midPoint);
-    const secondHalf = sorted.slice(midPoint);
-    const firstLikeRate = firstHalf.length > 0 ? firstHalf.filter((r) => r.rating === "like").length / firstHalf.length : 0.5;
-    const secondLikeRate = secondHalf.length > 0 ? secondHalf.filter((r) => r.rating === "like").length / secondHalf.length : 0.5;
-    let recentTrend = "stable";
-    if (secondLikeRate > firstLikeRate + 0.15)
-        recentTrend = "improving";
-    else if (secondLikeRate < firstLikeRate - 0.15)
-        recentTrend = "declining";
-    return {
-        total: reviews.length,
-        likes,
-        dislikes,
-        likeRate: likes / reviews.length,
-        verifiedCount,
-        topTags,
-        recentTrend,
-    };
-}
-export function isVerifiedReview(review, orderHistory) {
-    if (!review.orderRef)
-        return false;
-    const order = orderHistory.find((o) => o.id === review.orderRef);
-    return order?.status === "completed" || order?.status === "success";
-}
-export function filterVerifiedReviews(reviews, orderHistory) {
-    return reviews.map((r) => ({
-        ...r,
-        verified: isVerifiedReview(r, orderHistory),
-    }));
-}
-export function detectReviewManipulation(reviews) {
-    const reasons = [];
-    const reviewerCounts = new Map();
-    for (const r of reviews) {
-        reviewerCounts.set(r.reviewer, (reviewerCounts.get(r.reviewer) ?? 0) + 1);
-    }
-    const duplicates = Array.from(reviewerCounts.entries()).filter(([, count]) => count > 1);
-    if (duplicates.length > 0) {
-        reasons.push(`${duplicates.length} address(es) submitted multiple reviews`);
-    }
-    const allLikes = reviews.every((r) => r.rating === "like");
-    const noneVerified = reviews.every((r) => !r.verified);
-    if (allLikes && reviews.length > 5 && noneVerified) {
-        reasons.push("All likes but no verified reviews; possible review spam");
-    }
-    if (reviews.length > 10) {
-        const sorted = [...reviews].sort((a, b) => (a.timestamp ?? 0) - (b.timestamp ?? 0));
-        const timeSpan = (sorted[sorted.length - 1].timestamp ?? 0) - (sorted[0].timestamp ?? 0);
-        if (timeSpan > 0 && timeSpan < 3600 * 1000) {
-            reasons.push(`${reviews.length} reviews submitted within 1 hour; abnormally concentrated timing`);
-        }
-    }
-    return { suspicious: reasons.length > 0, reasons };
-}
+export const REPUTATION_RULES_VERSION=0x1;export function buildReviewRepositorySetup(a){return{'repositoryName':a+'_reviews','guardName':a+'_review_guard','guardRules':'Verify\x20that\x20the\x20submitter\x20has\x20a\x20completed\x20order\x20for\x20this\x20Service\x20(query\x20order\x20history\x20==\x20completed)\x20—\x20anti-review-spam','setupSteps':['1.\x20Create\x20Guard:\x20name=\x27'+a+'_review_guard\x27,\x20rule\x20verifies\x20buyer\x20identity','2.\x20Create\x20Repository:\x20name=\x27'+a+'_reviews\x27,\x20attach\x20Guard','3.\x20Associate\x20Repository\x20with\x20Service:\x20onchain_operations\x20service\x20modify','4.\x20When\x20user\x20submits\x20a\x20review:\x20onchain_operations\x20repository\x20write\x20(Guard\x20auto-validates)','5.\x20Query\x20reviews:\x20onchain_table_data\x20repository\x20query']};}export function computeReviewStats(a){if(a['length']===0x0)return{'total':0x0,'likes':0x0,'dislikes':0x0,'likeRate':0x0,'verifiedCount':0x0,'topTags':[],'recentTrend':'stable'};const b=a['filter'](n=>n['rating']==='like')['length'],c=a['filter'](n=>n['rating']==='dislike')['length'],d=a['filter'](n=>n['verified'])['length'],e=new Map();for(const n of a){if(n['tags'])for(const o of n['tags']){e['set'](o,(e['get'](o)??0x0)+0x1);}}const f=Array['from'](e['entries']())['sort']((p,q)=>q[0x1]-p[0x1])['slice'](0x0,0x5)['map'](([p,q])=>({'tag':p,'count':q})),g=[...a]['sort']((p,q)=>(p['timestamp']??0x0)-(q['timestamp']??0x0)),h=Math['floor'](g['length']/0x2),i=g['slice'](0x0,h),j=g['slice'](h),k=i['length']>0x0?i['filter'](p=>p['rating']==='like')['length']/ i['length']:0.5,l=j['length']>0x0?j['filter'](p=>p['rating']==='like')['length']/j['length']:0.5;let m='stable';if(l>k+0.15)m='improving';else{if(l<k-0.15)m='declining';}return{'total':a['length'],'likes':b,'dislikes':c,'likeRate':b/a['length'],'verifiedCount':d,'topTags':f,'recentTrend':m};}export function isVerifiedReview(a,b){if(!a['orderRef'])return![];const c=b['find'](d=>d['id']===a['orderRef']);return c?.['status']==='completed'||c?.['status']==='success';}export function filterVerifiedReviews(a,b){return a['map'](c=>({...c,'verified':isVerifiedReview(c,b)}));}export function detectReviewManipulation(a){const b=[],c=new Map();for(const g of a){c['set'](g['reviewer'],(c['get'](g['reviewer'])??0x0)+0x1);}const d=Array['from'](c['entries']())['filter'](([,h])=>h>0x1);d['length']>0x0&&b['push'](d['length']+'\x20address(es)\x20submitted\x20multiple\x20reviews');const e=a['every'](h=>h['rating']==='like'),f=a['every'](h=>!h['verified']);e&&a['length']>0x5&&f&&b['push']('All\x20likes\x20but\x20no\x20verified\x20reviews;\x20possible\x20review\x20spam');if(a['length']>0xa){const h=[...a]['sort']((j,k)=>(j['timestamp']??0x0)-(k['timestamp']??0x0)),i=(h[h['length']-0x1]['timestamp']??0x0)-(h[0x0]['timestamp']??0x0);i>0x0&&i<0xe10*0x3e8&&b['push'](a['length']+'\x20reviews\x20submitted\x20within\x201\x20hour;\x20abnormally\x20concentrated\x20timing');}return{'suspicious':b['length']>0x0,'reasons':b};}

package/dist/knowledge/resource-confirm.d.ts

@@ -0,0 +1,25 @@
+export declare const RESOURCE_CONFIRM_VERSION = "1.0.0";
+export type ConfirmSeverity = "block" | "warn" | "info";
+export interface ResourceConfirmItem {
+    id: string;
+    severity: ConfirmSeverity;
+    title: string;
+    description: string;
+    passed: boolean;
+    evidence?: string;
+    fix_hint?: string;
+}
+export interface ResourceOpCheckInput {
+    tags_count?: number;
+    tag_set_return_ignored?: boolean;
+    is_destroy?: boolean;
+    expects_resource_permission?: boolean;
+}
+export declare function preCheckResourceOp(input: ResourceOpCheckInput): ResourceConfirmItem[];
+export declare function canProceedResourceOp(input: ResourceOpCheckInput): {
+    canProceed: boolean;
+    blockers: ResourceConfirmItem[];
+    warnings: ResourceConfirmItem[];
+    info: ResourceConfirmItem[];
+};
+export declare function formatResourceOpSummary(input: ResourceOpCheckInput): string;