@wowok/agent-mcp 2.7.1 → 2.7.3

package/dist/knowledge/passport-templates.js

@@ -1,568 +1 @@
-import { MAX_GUARD_COUNT_PASSPORT, MAX_SUBMISSION_SIZE_PASSPORT, } from "./passport-ledger.js";
-export const PASSPORT_TEMPLATES = [
-    {
-        id: "T-PASS-01",
-        name: "KYC verification (single impack Guard)",
-        description: "Simplest Passport — single impack Guard verifying KYC status. Customer submits KYC proof, Guard verifies, Passport result=true.",
-        applicable_scenarios: ["passport_service_buy", "passport_kyc"],
-        industry_tags: ["universal", "kyc", "compliance"],
-        params: [
-            {
-                name: "kyc_guard_address",
-                type: "address",
-                description: "KYC Guard object address (verifies customer's KYC certificate)",
-                required: true,
-            },
-            {
-                name: "kyc_certificate",
-                type: "string",
-                description: "KYC certificate hash or URL (submitted as identifier=0 value)",
-                required: true,
-            },
-        ],
-        body: (p) => {
-            const kycGuard = String(p.kyc_guard_address);
-            const cert = String(p.kyc_certificate);
-            if (cert.length > MAX_SUBMISSION_SIZE_PASSPORT - 10) {
-                throw new Error(`T-PASS-01: kyc_certificate too long (${cert.length} bytes); limit is ~${MAX_SUBMISSION_SIZE_PASSPORT - 10}`);
-            }
-            const json = {
-                type: "submission",
-                guard: [{ object: kycGuard, impack: true }],
-                submission: [{
-                        guard: kycGuard,
-                        submission: [{
-                                identifier: 0,
-                                value: cert,
-                                value_type: "string",
-                            }],
-                    }],
-            };
-            return json;
-        },
-        notes: [
-            "Single impack Guard — simplest configuration",
-            "Customer submits KYC certificate as string at identifier=0",
-            "If KYC Guard fails, overall result=false (impack mechanism)",
-            "Typical consumer: Service.buy_with_passport",
-        ],
-    },
-    {
-        id: "T-PASS-02",
-        name: "Multi-Guard combo (impack + non-impack audit)",
-        description: "Two Guards: impack=true for business verification + impack=false for audit logging. Audit Guard result does not affect final result.",
-        applicable_scenarios: ["passport_service_buy", "passport_audit"],
-        industry_tags: ["universal", "audit", "compliance"],
-        params: [
-            {
-                name: "kyc_guard_address",
-                type: "address",
-                description: "Primary KYC Guard (impack=true) — determines final result",
-                required: true,
-            },
-            {
-                name: "audit_guard_address",
-                type: "address",
-                description: "Audit logging Guard (impack=false) — records result only",
-                required: true,
-            },
-            {
-                name: "kyc_certificate",
-                type: "string",
-                description: "KYC certificate (identifier=0 for kyc_guard)",
-                required: true,
-            },
-            {
-                name: "audit_metadata",
-                type: "string",
-                description: "Audit metadata (identifier=0 for audit_guard, optional)",
-                required: false,
-                default: "",
-            },
-        ],
-        body: (p) => {
-            const kycGuard = String(p.kyc_guard_address);
-            const auditGuard = String(p.audit_guard_address);
-            if (kycGuard === auditGuard) {
-                throw new Error("T-PASS-02: kyc_guard_address and audit_guard_address must differ");
-            }
-            const json = {
-                type: "submission",
-                guard: [
-                    { object: kycGuard, impack: true },
-                    { object: auditGuard, impack: false },
-                ],
-                submission: [
-                    {
-                        guard: kycGuard,
-                        submission: [{
-                                identifier: 0,
-                                value: String(p.kyc_certificate),
-                                value_type: "string",
-                            }],
-                    },
-                ],
-            };
-            const auditMeta = p.audit_metadata ? String(p.audit_metadata) : "";
-            if (auditMeta.length > 0) {
-                json.submission.push({
-                    guard: auditGuard,
-                    submission: [{
-                            identifier: 0,
-                            value: auditMeta,
-                            value_type: "string",
-                        }],
-                });
-            }
-            return json;
-        },
-        notes: [
-            "impack=true Guard determines final result; impack=false Guard is audit-only",
-            "Audit Guard may pass even if KYC Guard fails — only impack matters for result",
-            "Useful for compliance logging without affecting business flow",
-        ],
-    },
-    {
-        id: "T-PASS-03",
-        name: "And-relies Guard (two-factor authentication)",
-        description: "Two impack Guards with AND relies logic: password Guard (primary) + OTP Guard (secondary). Both must pass for result=true.",
-        applicable_scenarios: ["passport_permission_assert", "passport_treasury_withdraw"],
-        industry_tags: ["security", "2fa", "high_value"],
-        params: [
-            {
-                name: "password_guard_address",
-                type: "address",
-                description: "Password Guard (added first, no relies)",
-                required: true,
-            },
-            {
-                name: "otp_guard_address",
-                type: "address",
-                description: "OTP Guard (added second, relies on password_guard with AND logic)",
-                required: true,
-            },
-            {
-                name: "password_hash",
-                type: "string",
-                description: "Password hash (identifier=0 for password_guard)",
-                required: true,
-            },
-            {
-                name: "otp_code",
-                type: "string",
-                description: "OTP code (identifier=0 for otp_guard)",
-                required: true,
-            },
-        ],
-        body: (p) => {
-            const pwdGuard = String(p.password_guard_address);
-            const otpGuard = String(p.otp_guard_address);
-            if (pwdGuard === otpGuard) {
-                throw new Error("T-PASS-03: password_guard and otp_guard must differ");
-            }
-            const json = {
-                type: "submission",
-                guard: [
-                    { object: pwdGuard, impack: true },
-                    { object: otpGuard, impack: true },
-                ],
-                submission: [
-                    {
-                        guard: pwdGuard,
-                        submission: [{
-                                identifier: 0,
-                                value: String(p.password_hash),
-                                value_type: "string",
-                            }],
-                    },
-                    {
-                        guard: otpGuard,
-                        submission: [{
-                                identifier: 0,
-                                value: String(p.otp_code),
-                                value_type: "string",
-                            }],
-                    },
-                ],
-            };
-            return json;
-        },
-        notes: [
-            "AND relies logic: both password AND OTP must pass (short-circuits on first false)",
-            "Order is critical: password_guard added first, otp_guard added second",
-            "otp_guard must be configured at Guard layer: guard::relies(otp_guard) returns ([password_guard], true)",
-            "If password fails, OTP is not verified (short-circuit) — saves gas",
-            "Typical consumer: Permission.assert_with_passport, Treasury.withdraw_with_passport",
-        ],
-    },
-    {
-        id: "T-PASS-04",
-        name: "Or-relies Guard (multi-path authorization)",
-        description: "Two impack Guards with OR relies logic: VIP Guard (primary) OR standard Guard (fallback). Any one passing yields result=true.",
-        applicable_scenarios: ["passport_reward_claim", "passport_multi_path"],
-        industry_tags: ["universal", "authorization", "multi_path"],
-        params: [
-            {
-                name: "vip_guard_address",
-                type: "address",
-                description: "VIP eligibility Guard (added first, no relies)",
-                required: true,
-            },
-            {
-                name: "standard_guard_address",
-                type: "address",
-                description: "Standard eligibility Guard (added second, relies on vip_guard with OR logic)",
-                required: true,
-            },
-            {
-                name: "vip_token",
-                type: "string",
-                description: "VIP token proof (identifier=0 for vip_guard)",
-                required: true,
-            },
-            {
-                name: "standard_proof",
-                type: "string",
-                description: "Standard eligibility proof (identifier=0 for standard_guard)",
-                required: true,
-            },
-        ],
-        body: (p) => {
-            const vipGuard = String(p.vip_guard_address);
-            const stdGuard = String(p.standard_guard_address);
-            if (vipGuard === stdGuard) {
-                throw new Error("T-PASS-04: vip_guard and standard_guard must differ");
-            }
-            const json = {
-                type: "submission",
-                guard: [
-                    { object: vipGuard, impack: true },
-                    { object: stdGuard, impack: true },
-                ],
-                submission: [
-                    {
-                        guard: vipGuard,
-                        submission: [{
-                                identifier: 0,
-                                value: String(p.vip_token),
-                                value_type: "string",
-                            }],
-                    },
-                    {
-                        guard: stdGuard,
-                        submission: [{
-                                identifier: 0,
-                                value: String(p.standard_proof),
-                                value_type: "string",
-                            }],
-                    },
-                ],
-            };
-            return json;
-        },
-        notes: [
-            "OR relies logic: VIP OR standard must pass (short-circuits on first true)",
-            "If VIP Guard passes, standard Guard is not verified (short-circuit)",
-            "Both Guards are impack=true — either one passing yields result=true",
-            "Useful for tiered authorization (VIP fast-path + standard fallback)",
-            "Typical consumer: Reward.claim_with_passport",
-        ],
-    },
-    {
-        id: "T-PASS-05",
-        name: "Service buy (buy_guard verification)",
-        description: "Single impack Guard verifying customer's eligibility to buy a Service. Customer submits buy proof, Guard verifies, Service.buy_with_passport proceeds.",
-        applicable_scenarios: ["passport_service_buy"],
-        industry_tags: ["retail", "ecommerce", "service"],
-        params: [
-            {
-                name: "buy_guard_address",
-                type: "address",
-                description: "Service.buy_guard address (verifies purchase eligibility)",
-                required: true,
-            },
-            {
-                name: "customer_address",
-                type: "string",
-                description: "Customer address (submitted at identifier=0, resolved via Guard table)",
-                required: true,
-            },
-            {
-                name: "service_address",
-                type: "address",
-                description: "Service object address (for context, not submitted)",
-                required: false,
-            },
-        ],
-        body: (p) => {
-            const buyGuard = String(p.buy_guard_address);
-            const customerAddr = String(p.customer_address);
-            const json = {
-                type: "submission",
-                guard: [{ object: buyGuard, impack: true }],
-                submission: [{
-                        guard: buyGuard,
-                        submission: [{
-                                identifier: 0,
-                                value: customerAddr,
-                                value_type: "address",
-                            }],
-                    }],
-            };
-            return json;
-        },
-        notes: [
-            "Service.buy_guard is configured by the merchant at Service publish time",
-            "Customer creates Passport in the same tx that calls Service.buy_with_passport",
-            "tx_hash binding prevents replay — Passport cannot be reused for another purchase",
-            "Service.buy_with_passport internally calls result_for_guard(buy_guard) — hard-verifies impack Guard",
-        ],
-    },
-    {
-        id: "T-PASS-06",
-        name: "Reward claim (claim + dynamic recipient via GuardIdentifier)",
-        description: "Single impack Guard verifying claim eligibility. Recipient address is dynamically resolved from Passport submission (GuardIdentifier pattern).",
-        applicable_scenarios: ["passport_reward_claim"],
-        industry_tags: ["reward", "marketing", "loyalty"],
-        params: [
-            {
-                name: "claim_guard_address",
-                type: "address",
-                description: "Reward claim Guard address (verifies claim eligibility + extracts recipient)",
-                required: true,
-            },
-            {
-                name: "recipient_address",
-                type: "string",
-                description: "Recipient address (submitted at identifier=0, resolved by Reward.claim)",
-                required: true,
-            },
-            {
-                name: "claim_amount_proof",
-                type: "string",
-                description: "Claim amount proof (submitted at identifier=1, optional)",
-                required: false,
-                default: "",
-            },
-        ],
-        body: (p) => {
-            const claimGuard = String(p.claim_guard_address);
-            const recipient = String(p.recipient_address);
-            const items = [{
-                    identifier: 0,
-                    value: recipient,
-                    value_type: "address",
-                }];
-            const amountProof = p.claim_amount_proof ? String(p.claim_amount_proof) : "";
-            if (amountProof.length > 0) {
-                items.push({
-                    identifier: 1,
-                    value: amountProof,
-                    value_type: "string",
-                });
-            }
-            const json = {
-                type: "submission",
-                guard: [{ object: claimGuard, impack: true }],
-                submission: [{ guard: claimGuard, submission: items }],
-            };
-            return json;
-        },
-        notes: [
-            "Reward.claim reads recipient from Passport submission_get(guard, identifier=0)",
-            "Guard table[0] must be address-typed (ERECIPIENT_IDENTIFIER_NOT_ADDRESS if not)",
-            "Claim is one-shot per Passport — tx_hash binding prevents replay",
-            "Dynamic recipient pattern enables referral rewards (referrer address submitted by customer)",
-        ],
-    },
-    {
-        id: "T-PASS-07",
-        name: "Arbitration vote (VoteValue::GuardIdentifier weight)",
-        description: "Arbitrator submits voting weight via Passport. Voting weight is read by Arbitration.vote_with_voting_guard via submission_get.",
-        applicable_scenarios: ["passport_arbitration_vote"],
-        industry_tags: ["arbitration", "governance", "voting"],
-        params: [
-            {
-                name: "voting_guard_address",
-                type: "address",
-                description: "Arbitration voting Guard address (verifies arbitrator's voting eligibility)",
-                required: true,
-            },
-            {
-                name: "voting_weight",
-                type: "number",
-                description: "Voting weight (u64, submitted at identifier=0)",
-                required: true,
-            },
-            {
-                name: "arbitrator_address",
-                type: "string",
-                description: "Arbitrator address (submitted at identifier=1 for identity verification)",
-                required: true,
-            },
-        ],
-        body: (p) => {
-            const votingGuard = String(p.voting_guard_address);
-            const weight = Number(p.voting_weight);
-            if (!Number.isInteger(weight) || weight < 0) {
-                throw new Error(`T-PASS-07: voting_weight must be a non-negative integer, got ${weight}`);
-            }
-            if (weight > 18446744073709551615) {
-                throw new Error(`T-PASS-07: voting_weight exceeds u64 max`);
-            }
-            const json = {
-                type: "submission",
-                guard: [{ object: votingGuard, impack: true }],
-                submission: [{
-                        guard: votingGuard,
-                        submission: [
-                            { identifier: 0, value: String(weight), value_type: "u64" },
-                            { identifier: 1, value: String(p.arbitrator_address), value_type: "address" },
-                        ],
-                    }],
-            };
-            return json;
-        },
-        notes: [
-            "Arbitration.vote_with_voting_guard reads weight via submission_get(guard, identifier=0)",
-            "Voting weight is u64 — must fit in 8 bytes BCS",
-            "Arbitrator address at identifier=1 enables identity verification by the voting_guard",
-            "Voting Guard must be configured in Arbitration.voting_guard field",
-            "Passport.tx_hash ensures vote cannot be replayed across disputes",
-        ],
-    },
-    {
-        id: "T-PASS-08",
-        name: "Treasury withdraw (high-value, multi-Guard AND)",
-        description: "Three impack Guards with AND relies for high-value Treasury withdrawal: (1) admin Guard, (2) threshold Guard, (3) time-lock Guard. All must pass.",
-        applicable_scenarios: ["passport_treasury_withdraw"],
-        industry_tags: ["treasury", "high_value", "multi_sig"],
-        params: [
-            {
-                name: "admin_guard_address",
-                type: "address",
-                description: "Admin Guard (added first, verifies admin role)",
-                required: true,
-            },
-            {
-                name: "threshold_guard_address",
-                type: "address",
-                description: "Threshold Guard (added second, relies on admin with AND; verifies withdrawal amount ≤ threshold)",
-                required: true,
-            },
-            {
-                name: "timelock_guard_address",
-                type: "address",
-                description: "Time-lock Guard (added third, relies on threshold with AND; verifies time-lock expired)",
-                required: true,
-            },
-            {
-                name: "admin_proof",
-                type: "string",
-                description: "Admin proof (identifier=0 for admin_guard)",
-                required: true,
-            },
-            {
-                name: "withdrawal_amount",
-                type: "number",
-                description: "Withdrawal amount in smallest unit (identifier=0 for threshold_guard)",
-                required: true,
-            },
-            {
-                name: "timelock_timestamp",
-                type: "number",
-                description: "Time-lock release timestamp (identifier=0 for timelock_guard)",
-                required: true,
-            },
-        ],
-        body: (p) => {
-            const adminGuard = String(p.admin_guard_address);
-            const thresholdGuard = String(p.threshold_guard_address);
-            const timelockGuard = String(p.timelock_guard_address);
-            if (adminGuard === thresholdGuard || adminGuard === timelockGuard || thresholdGuard === timelockGuard) {
-                throw new Error("T-PASS-08: all three Guard addresses must differ");
-            }
-            const amount = Number(p.withdrawal_amount);
-            if (!Number.isInteger(amount) || amount < 0) {
-                throw new Error(`T-PASS-08: withdrawal_amount must be a non-negative integer, got ${amount}`);
-            }
-            const ts = Number(p.timelock_timestamp);
-            if (!Number.isInteger(ts) || ts < 0) {
-                throw new Error(`T-PASS-08: timelock_timestamp must be a non-negative integer, got ${ts}`);
-            }
-            const json = {
-                type: "submission",
-                guard: [
-                    { object: adminGuard, impack: true },
-                    { object: thresholdGuard, impack: true },
-                    { object: timelockGuard, impack: true },
-                ],
-                submission: [
-                    {
-                        guard: adminGuard,
-                        submission: [{ identifier: 0, value: String(p.admin_proof), value_type: "string" }],
-                    },
-                    {
-                        guard: thresholdGuard,
-                        submission: [{ identifier: 0, value: String(amount), value_type: "u64" }],
-                    },
-                    {
-                        guard: timelockGuard,
-                        submission: [{ identifier: 0, value: String(ts), value_type: "u64" }],
-                    },
-                ],
-            };
-            return json;
-        },
-        notes: [
-            "Three impack Guards with chained AND relies: admin AND threshold AND timelock",
-            "Order is critical: admin (no relies) → threshold (relies admin) → timelock (relies threshold)",
-            "Threshold and timelock Guards must be configured at Guard layer with AND relies on the previous Guard",
-            "Short-circuit: if admin fails, threshold and timelock are not verified (saves gas)",
-            "Typical consumer: Treasury.withdraw_with_passport (high-value scenarios)",
-            "Guard count = 3, well below MAX_GUARD_COUNT_PASSPORT=20",
-        ],
-    },
-];
-export const PASSPORT_TEMPLATES_VERSION = "1.0.0";
-export function getAllTemplates() {
-    return [...PASSPORT_TEMPLATES];
-}
-export function getTemplateById(id) {
-    return PASSPORT_TEMPLATES.find(t => t.id === id);
-}
-export function getTemplatesByScenario(scenarioId) {
-    return PASSPORT_TEMPLATES.filter(t => t.applicable_scenarios.includes(scenarioId));
-}
-export function getTemplatesByIndustry(industry) {
-    return PASSPORT_TEMPLATES.filter(t => t.industry_tags.includes(industry) || t.industry_tags.includes("universal"));
-}
-export function suggestTemplateForScenario(scenarioId) {
-    const matches = getTemplatesByScenario(scenarioId);
-    return matches.length > 0 ? matches[0] : undefined;
-}
-export function listTemplates() {
-    return PASSPORT_TEMPLATES.map(t => ({
-        id: t.id,
-        name: t.name,
-        description: t.description,
-        scenarios: t.applicable_scenarios,
-    }));
-}
-export function fillTemplate(templateId, params) {
-    const tpl = getTemplateById(templateId);
-    if (!tpl)
-        return { ok: false, error: `Template ${templateId} not found` };
-    for (const p of tpl.params) {
-        if (p.required && !(p.name in params)) {
-            return { ok: false, error: `Missing required param: ${p.name}` };
-        }
-    }
-    try {
-        return { ok: true, body: tpl.body(params) };
-    }
-    catch (e) {
-        return { ok: false, error: e instanceof Error ? e.message : String(e) };
-    }
-}
-export { MAX_GUARD_COUNT_PASSPORT, MAX_SUBMISSION_SIZE_PASSPORT };
+import{MAX_GUARD_COUNT_PASSPORT,MAX_SUBMISSION_SIZE_PASSPORT}from'./passport-ledger.js';export const PASSPORT_TEMPLATES=[{'id':'T-PASS-01','name':'KYC\x20verification\x20(single\x20impack\x20Guard)','description':'Simplest\x20Passport\x20—\x20single\x20impack\x20Guard\x20verifying\x20KYC\x20status.\x20Customer\x20submits\x20KYC\x20proof,\x20Guard\x20verifies,\x20Passport\x20result=true.','applicable_scenarios':['passport_service_buy','passport_kyc'],'industry_tags':['universal','kyc','compliance'],'params':[{'name':'kyc_guard_address','type':'address','description':'KYC\x20Guard\x20object\x20address\x20(verifies\x20customer\x27s\x20KYC\x20certificate)','required':!![]},{'name':'kyc_certificate','type':'string','description':'KYC\x20certificate\x20hash\x20or\x20URL\x20(submitted\x20as\x20identifier=0\x20value)','required':!![]}],'body':a=>{const b=String(a['kyc_guard_address']),c=String(a['kyc_certificate']);if(c['length']>MAX_SUBMISSION_SIZE_PASSPORT-0xa)throw new Error('T-PASS-01:\x20kyc_certificate\x20too\x20long\x20('+c['length']+'\x20bytes);\x20limit\x20is\x20~'+(MAX_SUBMISSION_SIZE_PASSPORT-0xa));const d={'type':'submission','guard':[{'object':b,'impack':!![]}],'submission':[{'guard':b,'submission':[{'identifier':0x0,'value':c,'value_type':'string'}]}]};return d;},'notes':['Single\x20impack\x20Guard\x20—\x20simplest\x20configuration','Customer\x20submits\x20KYC\x20certificate\x20as\x20string\x20at\x20identifier=0','If\x20KYC\x20Guard\x20fails,\x20overall\x20result=false\x20(impack\x20mechanism)','Typical\x20consumer:\x20Service.buy_with_passport']},{'id':'T-PASS-02','name':'Multi-Guard\x20combo\x20(impack\x20+\x20non-impack\x20audit)','description':'Two\x20Guards:\x20impack=true\x20for\x20business\x20verification\x20+\x20impack=false\x20for\x20audit\x20logging.\x20Audit\x20Guard\x20result\x20does\x20not\x20affect\x20final\x20result.','applicable_scenarios':['passport_service_buy','passport_audit'],'industry_tags':['universal','audit','compliance'],'params':[{'name':'kyc_guard_address','type':'address','description':'Primary\x20KYC\x20Guard\x20(impack=true)\x20—\x20determines\x20final\x20result','required':!![]},{'name':'audit_guard_address','type':'address','description':'Audit\x20logging\x20Guard\x20(impack=false)\x20—\x20records\x20result\x20only','required':!![]},{'name':'kyc_certificate','type':'string','description':'KYC\x20certificate\x20(identifier=0\x20for\x20kyc_guard)','required':!![]},{'name':'audit_metadata','type':'string','description':'Audit\x20metadata\x20(identifier=0\x20for\x20audit_guard,\x20optional)','required':![],'default':''}],'body':a=>{const b=String(a['kyc_guard_address']),c=String(a['audit_guard_address']);if(b===c)throw new Error('T-PASS-02:\x20kyc_guard_address\x20and\x20audit_guard_address\x20must\x20differ');const d={'type':'submission','guard':[{'object':b,'impack':!![]},{'object':c,'impack':![]}],'submission':[{'guard':b,'submission':[{'identifier':0x0,'value':String(a['kyc_certificate']),'value_type':'string'}]}]},e=a['audit_metadata']?String(a['audit_metadata']):'';return e['length']>0x0&&d['submission']['push']({'guard':c,'submission':[{'identifier':0x0,'value':e,'value_type':'string'}]}),d;},'notes':['impack=true\x20Guard\x20determines\x20final\x20result;\x20impack=false\x20Guard\x20is\x20audit-only','Audit\x20Guard\x20may\x20pass\x20even\x20if\x20KYC\x20Guard\x20fails\x20—\x20only\x20impack\x20matters\x20for\x20result','Useful\x20for\x20compliance\x20logging\x20without\x20affecting\x20business\x20flow']},{'id':'T-PASS-03','name':'And-relies\x20Guard\x20(two-factor\x20authentication)','description':'Two\x20impack\x20Guards\x20with\x20AND\x20relies\x20logic:\x20password\x20Guard\x20(primary)\x20+\x20OTP\x20Guard\x20(secondary).\x20Both\x20must\x20pass\x20for\x20result=true.','applicable_scenarios':['passport_permission_assert','passport_treasury_withdraw'],'industry_tags':['security','2fa','high_value'],'params':[{'name':'password_guard_address','type':'address','description':'Password\x20Guard\x20(added\x20first,\x20no\x20relies)','required':!![]},{'name':'otp_guard_address','type':'address','description':'OTP\x20Guard\x20(added\x20second,\x20relies\x20on\x20password_guard\x20with\x20AND\x20logic)','required':!![]},{'name':'password_hash','type':'string','description':'Password\x20hash\x20(identifier=0\x20for\x20password_guard)','required':!![]},{'name':'otp_code','type':'string','description':'OTP\x20code\x20(identifier=0\x20for\x20otp_guard)','required':!![]}],'body':a=>{const b=String(a['password_guard_address']),c=String(a['otp_guard_address']);if(b===c)throw new Error('T-PASS-03:\x20password_guard\x20and\x20otp_guard\x20must\x20differ');const d={'type':'submission','guard':[{'object':b,'impack':!![]},{'object':c,'impack':!![]}],'submission':[{'guard':b,'submission':[{'identifier':0x0,'value':String(a['password_hash']),'value_type':'string'}]},{'guard':c,'submission':[{'identifier':0x0,'value':String(a['otp_code']),'value_type':'string'}]}]};return d;},'notes':['AND\x20relies\x20logic:\x20both\x20password\x20AND\x20OTP\x20must\x20pass\x20(short-circuits\x20on\x20first\x20false)','Order\x20is\x20critical:\x20password_guard\x20added\x20first,\x20otp_guard\x20added\x20second','otp_guard\x20must\x20be\x20configured\x20at\x20Guard\x20layer:\x20guard::relies(otp_guard)\x20returns\x20([password_guard],\x20true)','If\x20password\x20fails,\x20OTP\x20is\x20not\x20verified\x20(short-circuit)\x20—\x20saves\x20gas','Typical\x20consumer:\x20Permission.assert_with_passport,\x20Treasury.withdraw_with_passport']},{'id':'T-PASS-04','name':'Or-relies\x20Guard\x20(multi-path\x20authorization)','description':'Two\x20impack\x20Guards\x20with\x20OR\x20relies\x20logic:\x20VIP\x20Guard\x20(primary)\x20OR\x20standard\x20Guard\x20(fallback).\x20Any\x20one\x20passing\x20yields\x20result=true.','applicable_scenarios':['passport_reward_claim','passport_multi_path'],'industry_tags':['universal','authorization','multi_path'],'params':[{'name':'vip_guard_address','type':'address','description':'VIP\x20eligibility\x20Guard\x20(added\x20first,\x20no\x20relies)','required':!![]},{'name':'standard_guard_address','type':'address','description':'Standard\x20eligibility\x20Guard\x20(added\x20second,\x20relies\x20on\x20vip_guard\x20with\x20OR\x20logic)','required':!![]},{'name':'vip_token','type':'string','description':'VIP\x20token\x20proof\x20(identifier=0\x20for\x20vip_guard)','required':!![]},{'name':'standard_proof','type':'string','description':'Standard\x20eligibility\x20proof\x20(identifier=0\x20for\x20standard_guard)','required':!![]}],'body':a=>{const b=String(a['vip_guard_address']),c=String(a['standard_guard_address']);if(b===c)throw new Error('T-PASS-04:\x20vip_guard\x20and\x20standard_guard\x20must\x20differ');const d={'type':'submission','guard':[{'object':b,'impack':!![]},{'object':c,'impack':!![]}],'submission':[{'guard':b,'submission':[{'identifier':0x0,'value':String(a['vip_token']),'value_type':'string'}]},{'guard':c,'submission':[{'identifier':0x0,'value':String(a['standard_proof']),'value_type':'string'}]}]};return d;},'notes':['OR\x20relies\x20logic:\x20VIP\x20OR\x20standard\x20must\x20pass\x20(short-circuits\x20on\x20first\x20true)','If\x20VIP\x20Guard\x20passes,\x20standard\x20Guard\x20is\x20not\x20verified\x20(short-circuit)','Both\x20Guards\x20are\x20impack=true\x20—\x20either\x20one\x20passing\x20yields\x20result=true','Useful\x20for\x20tiered\x20authorization\x20(VIP\x20fast-path\x20+\x20standard\x20fallback)','Typical\x20consumer:\x20Reward.claim_with_passport']},{'id':'T-PASS-05','name':'Service\x20buy\x20(buy_guard\x20verification)','description':'Single\x20impack\x20Guard\x20verifying\x20customer\x27s\x20eligibility\x20to\x20buy\x20a\x20Service.\x20Customer\x20submits\x20buy\x20proof,\x20Guard\x20verifies,\x20Service.buy_with_passport\x20proceeds.','applicable_scenarios':['passport_service_buy'],'industry_tags':['retail','ecommerce','service'],'params':[{'name':'buy_guard_address','type':'address','description':'Service.buy_guard\x20address\x20(verifies\x20purchase\x20eligibility)','required':!![]},{'name':'customer_address','type':'string','description':'Customer\x20address\x20(submitted\x20at\x20identifier=0,\x20resolved\x20via\x20Guard\x20table)','required':!![]},{'name':'service_address','type':'address','description':'Service\x20object\x20address\x20(for\x20context,\x20not\x20submitted)','required':![]}],'body':a=>{const b=String(a['buy_guard_address']),c=String(a['customer_address']),d={'type':'submission','guard':[{'object':b,'impack':!![]}],'submission':[{'guard':b,'submission':[{'identifier':0x0,'value':c,'value_type':'address'}]}]};return d;},'notes':['Service.buy_guard\x20is\x20configured\x20by\x20the\x20merchant\x20at\x20Service\x20publish\x20time','Customer\x20creates\x20Passport\x20in\x20the\x20same\x20tx\x20that\x20calls\x20Service.buy_with_passport','tx_hash\x20binding\x20prevents\x20replay\x20—\x20Passport\x20cannot\x20be\x20reused\x20for\x20another\x20purchase','Service.buy_with_passport\x20internally\x20calls\x20result_for_guard(buy_guard)\x20—\x20hard-verifies\x20impack\x20Guard']},{'id':'T-PASS-06','name':'Reward\x20claim\x20(claim\x20+\x20dynamic\x20recipient\x20via\x20GuardIdentifier)','description':'Single\x20impack\x20Guard\x20verifying\x20claim\x20eligibility.\x20Recipient\x20address\x20is\x20dynamically\x20resolved\x20from\x20Passport\x20submission\x20(GuardIdentifier\x20pattern).','applicable_scenarios':['passport_reward_claim'],'industry_tags':['reward','marketing','loyalty'],'params':[{'name':'claim_guard_address','type':'address','description':'Reward\x20claim\x20Guard\x20address\x20(verifies\x20claim\x20eligibility\x20+\x20extracts\x20recipient)','required':!![]},{'name':'recipient_address','type':'string','description':'Recipient\x20address\x20(submitted\x20at\x20identifier=0,\x20resolved\x20by\x20Reward.claim)','required':!![]},{'name':'claim_amount_proof','type':'string','description':'Claim\x20amount\x20proof\x20(submitted\x20at\x20identifier=1,\x20optional)','required':![],'default':''}],'body':a=>{const b=String(a['claim_guard_address']),c=String(a['recipient_address']),d=[{'identifier':0x0,'value':c,'value_type':'address'}],e=a['claim_amount_proof']?String(a['claim_amount_proof']):'';e['length']>0x0&&d['push']({'identifier':0x1,'value':e,'value_type':'string'});const f={'type':'submission','guard':[{'object':b,'impack':!![]}],'submission':[{'guard':b,'submission':d}]};return f;},'notes':['Reward.claim\x20reads\x20recipient\x20from\x20Passport\x20submission_get(guard,\x20identifier=0)','Guard\x20table[0]\x20must\x20be\x20address-typed\x20(ERECIPIENT_IDENTIFIER_NOT_ADDRESS\x20if\x20not)','Claim\x20is\x20one-shot\x20per\x20Passport\x20—\x20tx_hash\x20binding\x20prevents\x20replay','Dynamic\x20recipient\x20pattern\x20enables\x20referral\x20rewards\x20(referrer\x20address\x20submitted\x20by\x20customer)']},{'id':'T-PASS-07','name':'Arbitration\x20vote\x20(VoteValue::GuardIdentifier\x20weight)','description':'Arbitrator\x20submits\x20voting\x20weight\x20via\x20Passport.\x20Voting\x20weight\x20is\x20read\x20by\x20Arbitration.vote_with_voting_guard\x20via\x20submission_get.','applicable_scenarios':['passport_arbitration_vote'],'industry_tags':['arbitration','governance','voting'],'params':[{'name':'voting_guard_address','type':'address','description':'Arbitration\x20voting\x20Guard\x20address\x20(verifies\x20arbitrator\x27s\x20voting\x20eligibility)','required':!![]},{'name':'voting_weight','type':'number','description':'Voting\x20weight\x20(u64,\x20submitted\x20at\x20identifier=0)','required':!![]},{'name':'arbitrator_address','type':'string','description':'Arbitrator\x20address\x20(submitted\x20at\x20identifier=1\x20for\x20identity\x20verification)','required':!![]}],'body':a=>{const b=String(a['voting_guard_address']),c=Number(a['voting_weight']);if(!Number['isInteger'](c)||c<0x0)throw new Error('T-PASS-07:\x20voting_weight\x20must\x20be\x20a\x20non-negative\x20integer,\x20got\x20'+c);if(c>0x10000000000000000)throw new Error('T-PASS-07:\x20voting_weight\x20exceeds\x20u64\x20max');const d={'type':'submission','guard':[{'object':b,'impack':!![]}],'submission':[{'guard':b,'submission':[{'identifier':0x0,'value':String(c),'value_type':'u64'},{'identifier':0x1,'value':String(a['arbitrator_address']),'value_type':'address'}]}]};return d;},'notes':['Arbitration.vote_with_voting_guard\x20reads\x20weight\x20via\x20submission_get(guard,\x20identifier=0)','Voting\x20weight\x20is\x20u64\x20—\x20must\x20fit\x20in\x208\x20bytes\x20BCS','Arbitrator\x20address\x20at\x20identifier=1\x20enables\x20identity\x20verification\x20by\x20the\x20voting_guard','Voting\x20Guard\x20must\x20be\x20configured\x20in\x20Arbitration.voting_guard\x20field','Passport.tx_hash\x20ensures\x20vote\x20cannot\x20be\x20replayed\x20across\x20disputes']},{'id':'T-PASS-08','name':'Treasury\x20withdraw\x20(high-value,\x20multi-Guard\x20AND)','description':'Three\x20impack\x20Guards\x20with\x20AND\x20relies\x20for\x20high-value\x20Treasury\x20withdrawal:\x20(1)\x20admin\x20Guard,\x20(2)\x20threshold\x20Guard,\x20(3)\x20time-lock\x20Guard.\x20All\x20must\x20pass.','applicable_scenarios':['passport_treasury_withdraw'],'industry_tags':['treasury','high_value','multi_sig'],'params':[{'name':'admin_guard_address','type':'address','description':'Admin\x20Guard\x20(added\x20first,\x20verifies\x20admin\x20role)','required':!![]},{'name':'threshold_guard_address','type':'address','description':'Threshold\x20Guard\x20(added\x20second,\x20relies\x20on\x20admin\x20with\x20AND;\x20verifies\x20withdrawal\x20amount\x20≤\x20threshold)','required':!![]},{'name':'timelock_guard_address','type':'address','description':'Time-lock\x20Guard\x20(added\x20third,\x20relies\x20on\x20threshold\x20with\x20AND;\x20verifies\x20time-lock\x20expired)','required':!![]},{'name':'admin_proof','type':'string','description':'Admin\x20proof\x20(identifier=0\x20for\x20admin_guard)','required':!![]},{'name':'withdrawal_amount','type':'number','description':'Withdrawal\x20amount\x20in\x20smallest\x20unit\x20(identifier=0\x20for\x20threshold_guard)','required':!![]},{'name':'timelock_timestamp','type':'number','description':'Time-lock\x20release\x20timestamp\x20(identifier=0\x20for\x20timelock_guard)','required':!![]}],'body':a=>{const b=String(a['admin_guard_address']),c=String(a['threshold_guard_address']),d=String(a['timelock_guard_address']);if(b===c||b===d||c===d)throw new Error('T-PASS-08:\x20all\x20three\x20Guard\x20addresses\x20must\x20differ');const e=Number(a['withdrawal_amount']);if(!Number['isInteger'](e)||e<0x0)throw new Error('T-PASS-08:\x20withdrawal_amount\x20must\x20be\x20a\x20non-negative\x20integer,\x20got\x20'+e);const f=Number(a['timelock_timestamp']);if(!Number['isInteger'](f)||f<0x0)throw new Error('T-PASS-08:\x20timelock_timestamp\x20must\x20be\x20a\x20non-negative\x20integer,\x20got\x20'+f);const g={'type':'submission','guard':[{'object':b,'impack':!![]},{'object':c,'impack':!![]},{'object':d,'impack':!![]}],'submission':[{'guard':b,'submission':[{'identifier':0x0,'value':String(a['admin_proof']),'value_type':'string'}]},{'guard':c,'submission':[{'identifier':0x0,'value':String(e),'value_type':'u64'}]},{'guard':d,'submission':[{'identifier':0x0,'value':String(f),'value_type':'u64'}]}]};return g;},'notes':['Three\x20impack\x20Guards\x20with\x20chained\x20AND\x20relies:\x20admin\x20AND\x20threshold\x20AND\x20timelock','Order\x20is\x20critical:\x20admin\x20(no\x20relies)\x20→\x20threshold\x20(relies\x20admin)\x20→\x20timelock\x20(relies\x20threshold)','Threshold\x20and\x20timelock\x20Guards\x20must\x20be\x20configured\x20at\x20Guard\x20layer\x20with\x20AND\x20relies\x20on\x20the\x20previous\x20Guard','Short-circuit:\x20if\x20admin\x20fails,\x20threshold\x20and\x20timelock\x20are\x20not\x20verified\x20(saves\x20gas)','Typical\x20consumer:\x20Treasury.withdraw_with_passport\x20(high-value\x20scenarios)','Guard\x20count\x20=\x203,\x20well\x20below\x20MAX_GUARD_COUNT_PASSPORT=20']}];export const PASSPORT_TEMPLATES_VERSION='1.0.0';export function getAllTemplates(){return[...PASSPORT_TEMPLATES];}export function getTemplateById(a){return PASSPORT_TEMPLATES['find'](b=>b['id']===a);}export function getTemplatesByScenario(a){return PASSPORT_TEMPLATES['filter'](b=>b['applicable_scenarios']['includes'](a));}export function getTemplatesByIndustry(a){return PASSPORT_TEMPLATES['filter'](b=>b['industry_tags']['includes'](a)||b['industry_tags']['includes']('universal'));}export function suggestTemplateForScenario(a){const b=getTemplatesByScenario(a);return b['length']>0x0?b[0x0]:undefined;}export function listTemplates(){return PASSPORT_TEMPLATES['map'](a=>({'id':a['id'],'name':a['name'],'description':a['description'],'scenarios':a['applicable_scenarios']}));}export function fillTemplate(a,b){const c=getTemplateById(a);if(!c)return{'ok':![],'error':'Template\x20'+a+'\x20not\x20found'};for(const d of c['params']){if(d['required']&&!(d['name']in b))return{'ok':![],'error':'Missing\x20required\x20param:\x20'+d['name']};}try{return{'ok':!![],'body':c['body'](b)};}catch(f){return{'ok':![],'error':f instanceof Error?f['message']:String(f)};}}export{MAX_GUARD_COUNT_PASSPORT,MAX_SUBMISSION_SIZE_PASSPORT};