Pick a role, let the little guide walk you through 选个角色，让卡通向导带你走一遍

🎒 Xiao J guides «Visitor»: Not signed up yet — look around, then step in. 带你看「访客」：还没注册，先逛逛能看到什么、怎么一步进来。

1

Browse the community plaza freely自由浏览社区广场

No account needed to browse the community plaza: every community's name, ENS, token and logo is aggregated for you to see.不用注册，就能浏览社区广场：所有社区的名称、ENS、token、logo 都聚合展示。

⚙️ How it works: ⚙️ 技术原理： A public read-only endpoint (community/list) aggregates on-chain communities; even search engines can index it.公开只读接口（community/list）聚合链上社区数据，搜索引擎也能索引。

💡 Why it matters: 💡 业务价值： See what's there before deciding to join.先看清楚有什么，再决定要不要进来。

COM-U-02

2

Want to act? Sign in first想动手？先登录

When a visitor taps an action that needs identity (transfer / manage / join), they're gently redirected to sign in — never a blank error.访客点到「转账 / 管理 / 加入」这类需要身份的操作时，会被引导去登录，不会白屏报错。

⚙️ How it works: ⚙️ 技术原理： Protected routes redirect to /auth/login (and the backend returns 401); public pages stay open.受保护路由前端跳 /auth/login、后端 401；公开页仍可看。

💡 Why it matters: 💡 业务价值： Clear boundary: read freely, but prove who you are before you act.边界清晰：能看的随便看，要动的先证明你是你。

AUTH-10AUTH-05

3

Become a user in one step一步成为用户

Ready to join? Enter your email and create a passkey — you go from visitor to Individual User (see the Individual tour).想参与？填邮箱、刷脸建 passkey，就从访客变成个人用户（见个人用户漫游）。

⚙️ How it works: ⚙️ 技术原理： Email OTP + a WebAuthn passkey — no password, no seed phrase, account created counterfactually.邮箱 OTP + WebAuthn passkey，无密码、无助记词，账户反事实创建。

💡 Why it matters: 💡 业务价值： From onlooker to member is just one Face-ID away.从「看客」到「成员」，只隔一次刷脸。

AUTH-01AUTH-02

🍄 Xiao M guides «Community Admin»: Open a community: register on-chain, issue your own points, set a gas strategy, run it. 带你看「社区管理员」：开一个社区：注册上链、发自己的积分、定 Gas 策略、日常运营。

1

Register your community (stake + on-chain)注册社区（质押 + 上链）

Buy GToken as a prerequisite, then stake + registerCommunity with your ENS / domain / description / logo (on IPFS). Your community is now on-chain and discoverable.先买 GToken 作前置，然后质押 + registerCommunity，附上 ENS / 域名 / 描述 / logo（存 IPFS），社区就上链可查。

⚙️ How it works: ⚙️ 技术原理： A registry contract records the community; addresses come from the @aastar/sdk canonical table, never hard-coded.registry 合约登记社区；地址以 @aastar/sdk canonical 表为准，不硬编码。

💡 Why it matters: 💡 业务价值： What used to cost a lot to build is now a stake + one registration.传统要花大钱搭框架，这里质押+一键注册就有了。

COM-A-01COM-A-02

2

Issue community points (xPNTs)发行社区积分 xPNTs

On creation you issue your own community points, xPNTs (deployxPNTs + bind to the community) — for rewards, redemption and governance.创建即发行你自己的社区积分 xPNTs（deployxPNTs + 绑定到社区），用于激励、兑换、治理。

⚙️ How it works: ⚙️ 技术原理： The xPNTs contract is deployed and bound to the community; it can price gas sponsorship via SuperPaymaster.xPNTs 合约部署并与社区绑定；可被 SuperPaymaster 用作代付 gas 的计价。

💡 Why it matters: 💡 业务价值： Each community gets its own 'currency' — the incentive loop is yours.每个社区有自己的「货币」，激励闭环在自己手里。

COM-A-03

3

Pick a gas strategy — sponsor members' gas选 Gas 策略，替成员付 gas

Two strategies: A) self-deploy PaymasterV4 (free, self-run); B) join SuperPaymaster (register your points and it sponsors). Members can now transact gasless.两种策略：A 自部署 PaymasterV4（免费、自维护）；B 接入 SuperPaymaster（把 points 注册即可代付）。成员从此可 gasless。

⚙️ How it works: ⚙️ 技术原理： Self-deploy PaymasterV4 + EntryPoint depositTo; or register xPNTs into the SuperPaymaster ecosystem.PaymasterV4 自部署 + EntryPoint depositTo；或把 xPNTs 注册到 SuperPaymaster 生态。

💡 Why it matters: 💡 业务价值： New members never need to learn about gas — a Web2-like experience.新成员不必先懂 gas，体验像 Web2。

COM-A-04COM-A-05

4

Daily ops: redeem · goods · reputation · members日常运营：兑换台 · 商品 · 声誉 · 成员

Set up a redeem counter, issue NFT goods, mint non-transferable reputation NFTs (SBTs), and view / approve / remove members.架兑换台（redeem counter）、发 NFT 商品、发不可转让的声誉 NFT（SBT），以及查看/批准/移除成员。

⚙️ How it works: ⚙️ 技术原理： ERC-1155/721 goods + reputation SBTs; member status is verifiable on-chain and in the console.ERC-1155/721 商品 + 声誉 SBT；成员状态在链上与后台可查。

💡 Why it matters: 💡 业务价值： One console to run the community's money, goods, people and reputation.一套面板把社区的钱、货、人、声誉都管起来。

COM-A-06COM-A-07COM-A-08COM-A-09

🍄 Xiao M guides «Operator (gas node)»: Run a gas-sponsoring node in the SuperPaymaster ecosystem — pay others' gas, earn reputation. 带你看「运营者（Gas 代付节点）」：在 SuperPaymaster 生态里当 Gas 代付节点，替别人付 gas、赚声誉。

1

Operator onboarding (AOA)运营者准入向导（AOA）

One wizard end-to-end: stake → register role → deploy xPNTs → deploy Paymaster → deposit. Every step goes on-chain.一个向导走完：质押 → 注册角色 → 部署 xPNTs → 部署 Paymaster → 充值。每一步都上链。

⚙️ How it works: ⚙️ 技术原理： Register an operator role (ROLE_ANODE / DVT / Paymaster…); after EntryPoint deposit you can sponsor gas.注册运营者角色（ROLE_ANODE / DVT / Paymaster 等），EntryPoint 充值后即可代付。

💡 Why it matters: 💡 业务价值： Turns 'pay gas for others' into a service you can operate.把「为他人代付 gas」变成一条可运营的服务。

OPR-01

2

Choice A: join SuperPaymaster (if no tech staff)选择 A：没有技术团队？接入 SuperPaymaster

The advanced path: lockForSuperPaymaster → registerOperator → depositAPNTs, becoming a sponsor in the SuperPaymaster ecosystem.进阶路径：lockForSuperPaymaster → registerOperator → depositAPNTs，成为 SuperPaymaster 生态的代付方。

⚙️ How it works: ⚙️ 技术原理： Lock + register operator + deposit aPNTs; unlike D6's community self-deploy, this is protocol-level admission.锁仓 + 注册运营者 + 充 aPNTs；与 D6「社区自部署 PaymasterV4」不同，这是协议级准入。

💡 Why it matters: 💡 业务价值： From serving just your community to serving the whole ecosystem.从「只服务自己社区」升级为「服务整个生态」。

OPR-02

3

Choice B: manage Paymaster & funding by yourself选择 B：自己管理 Paymaster 与充值

ManagePaymaster: read/write PaymasterV4 config and top up the EntryPoint; SuperPaymasterConfig: account status, aPNTs deposit, reputation.ManagePaymaster：读写 PaymasterV4 配置、给 EntryPoint 充值；SuperPaymasterConfig：看账户状态、充 aPNTs、查声誉。

⚙️ How it works: ⚙️ 技术原理： Config changes affect sponsorship limits/policy; a resource pre-check (checkResources) clearly blocks + guides when short.配置生效即影响代付额度与策略；资源前置检查（checkResources）不足会明确阻断 + 指引。

💡 Why it matters: 💡 业务价值： Sponsorship isn't a black box: limits, balance and reputation are visible and adjustable.代付不是黑箱：额度、余额、声誉都看得见、调得动。

OPR-03OPR-04OPR-06

🐱 Baobao guides «Guardian»: Be someone's guardian: help them recover when they lose a device. 带你看「Guardian 守护人」：做别人的守护人：在他丢设备时，帮他把账户找回来。

1

Become 1 of someone's 3 guardians成为某人 3 个守护人之一

A friend sets you as one of their 3 guardians (2-of-3) at account creation. You don't need special protection — a normal AirAccount can be a guardian.朋友创建账户时把你设为 3 个守护人之一（2-of-3）。你不需要被特别保护——一个普通 AirAccount 就能当守护人。

⚙️ How it works: ⚙️ 技术原理： A guardian is just 'a party who can sign', borrowing a signing identity; non-recursive, not tied to any single device.守护人只是「能签名的一方」，借用一个可签名身份；不递归、不绑定任何单一设备。

💡 Why it matters: 💡 业务价值： Guard each other — a social safety net, not yet another key to keep.互为守护人——一张人际安全网，而不是又一把要保管的钥匙。

REC-01

2

Co-sign through whatever channel suits you用你方便的渠道签名

Many channels: an existing AirAccount passkey, a new email+FaceID (KMS ECDSA), MetaMask (personal_sign), or a pure-client P-256 passkey (iCloud/Google).支持多种渠道：已有 AirAccount 的 passkey、新建 email+FaceID（KMS ECDSA）、MetaMask（personal_sign）、或纯客户端 P-256 passkey（iCloud/Google）。

⚙️ How it works: ⚙️ 技术原理： The backend encodes the assertion (encodeWebAuthnAssertion) and relays proposeRecoveryWithSig on-chain; EOA / passkey / hybrid all work.后端把断言编码（encodeWebAuthnAssertion）后 relay proposeRecoveryWithSig 上链；EOA/passkey/混合都行。

💡 Why it matters: 💡 业务价值： Guardians sign the way that's easiest for them — almost no barrier.守护人用自己最顺手的方式签，门槛极低。

REC-02REC-03REC-04REC-05

3

2-of-3 reached, account restored2-of-3 达成，账户找回

Recovery is initiated → you and one more guardian support → execute to swap the owner. Any 2 suffice; the account address stays the same and Guard config is untouched.发起恢复 → 你和另一个守护人支持 → 执行换 owner。任意 2 个就够；账户地址不变，Guard 配置不受影响。

⚙️ How it works: ⚙️ 技术原理： Below threshold it can't execute (contract reverts); the community multisig guardian is only 1 of 3 and can never reach the threshold alone.门限不足无法执行（合约 revert）；社区多签守护人只占 1/3，单独永远够不到门限。

💡 Why it matters: 💡 业务价值： Lose one guardian and recovery still works; no single point can steal the account.丢一个守护人也能恢复；任何单点都偷不走账户。

REC-06REC-07

🐱 Baobao guides «Protocol Admin»: Tend the protocol itself: status, config and permission boundaries — with the SDK as the single source of truth. 带你看「协议管理员」：看护协议本身：状态、配置、权限边界，全部以 SDK 为单一事实源。

1

Protocol dashboard协议总览面板

At /admin, view protocol status and config: the active chain (e.g. Sepolia 11155111), contract addresses, paymaster presets, and more.在 /admin 查看协议状态与配置：当前链（如 Sepolia 11155111）、各合约地址、paymaster presets 等。

⚙️ How it works: ⚙️ 技术原理： Addresses come from the @aastar/sdk canonical table, not .env, to avoid mis-pointing (cf. the historical 0x1f0D incident).地址优先取 @aastar/sdk canonical 表，而非 .env，避免指错（参考历史 0x1f0D 事故）。

💡 Why it matters: 💡 业务价值： One panel to see the protocol's real, current state.一个面板看清协议此刻的真实状态。

ADM-01

2

Writes are permission-gated写操作有权限闸门

Only admins can perform protocol writes; a non-admin hitting a write op is clearly rejected (403), never silently allowed.只有管理员能做协议写操作；非管理员访问写操作会被明确拒绝（403），不会静默放行。

⚙️ How it works: ⚙️ 技术原理： Backend auth guards + role checks (ROLE_* / SBT); the frontend also hides actions you can't use.后端鉴权守卫 + 角色校验（ROLE_* / SBT）；前端也按角色隐藏不可用入口。

💡 Why it matters: 💡 业务价值： Clear permission boundaries; governance actions are traceable and auditable.权限边界清晰，治理动作可追溯、可审计。

ADM-02ROLE-01

3

One chain-consistent source of truth全链一致，单一事实源

On network switch, chainId stays consistent across publicClient / SDK / explorer; addresses, community aggregation and permissions all defer to the SDK.网络切换时 chainId 贯穿 publicClient / SDK / 浏览器一致；地址、社区聚合、权限都以 SDK 为准。

⚙️ How it works: ⚙️ 技术原理： No hard-coded addresses; SDK canonical > .env, eliminating environment drift at the root.禁止硬编码地址；SDK canonical > .env，从根上避免环境漂移。

💡 Why it matters: 💡 业务价值： The protocol behaves consistently across chains and environments — no drift.协议在多链多环境下行为一致、不漂移。

X-06ADM-01