@wowok/agent-mcp 2.4.3 → 2.5.1

package/dist/knowledge/guard-risk.js

@@ -234,7 +234,7 @@ const REENTRANCY_SPECS = [
     },
     {
         sceneId: "service_order_allocators_guard",
-        level: "info",
+        level: "low",
         existsPrimitives: [1568],
         countPrimitives: [],
         addressPrimitives: [1569],
@@ -247,7 +247,7 @@ const REENTRANCY_SPECS = [
     },
     {
         sceneId: "service_buy_guard",
-        level: "info",
+        level: "low",
         existsPrimitives: [],
         countPrimitives: [],
         addressPrimitives: [],
@@ -259,7 +259,7 @@ const REENTRANCY_SPECS = [
     },
     {
         sceneId: "repository_write_guard",
-        level: "info",
+        level: "low",
         existsPrimitives: [1166],
         countPrimitives: [],
         addressPrimitives: [],
@@ -269,7 +269,7 @@ const REENTRANCY_SPECS = [
     },
     {
         sceneId: "gen_passport_guard",
-        level: "info",
+        level: "low",
         existsPrimitives: [],
         countPrimitives: [],
         addressPrimitives: [],
@@ -484,7 +484,7 @@ const RISK_RULES = [
             return {
                 id: "R-C1-02",
                 data_source_class: "type1_onchain_constant",
-                level: wrong ? "medium" : "info",
+                level: wrong ? "medium" : "low",
                 category: "data_source_trust",
                 title: wrong
                     ? "EntityRegistrar/EntityLinker system address name annotation suspected to be wrong"
@@ -762,7 +762,7 @@ const RISK_RULES = [
             return {
                 id: "R-C3-01",
                 data_source_class: "type3_submitted_object",
-                level: "info",
+                level: "low",
                 category: "submission_forgery",
                 title: "Submitted data is indirectly bound via context(Signer) (confirm the binding direction is correct)",
                 description: "Guard accepts runtime-submitted data, and the root subtree contains a context(Signer) check, " +
@@ -1110,7 +1110,7 @@ const RISK_RULES = [
             return {
                 id: "R-C4-03",
                 data_source_class: "type4_system_context",
-                level: "info",
+                level: "low",
                 category: "system_context_risk",
                 title: "Guard uses context(Guard) self-reference (rare scenario, needs special explanation)",
                 description: "Guard contains a context(Guard) node. Guard is a Type4 system context, " +
@@ -1146,7 +1146,7 @@ const RISK_RULES = [
             return {
                 id: "R-C4-04",
                 data_source_class: "type4_system_context",
-                level: "info",
+                level: "low",
                 category: "system_context_risk",
                 title: "Level 1 strict single-identity Signer binding — convenience trade-off (consider Level 2/3 alternatives)",
                 description: `Guard uses logic_equal[context(Signer), identifier[${entry.identifier}](fixed address)] — only the address "${entry.value}" can pass.\n` +
@@ -1415,7 +1415,7 @@ const RISK_RULES = [
             return {
                 id: "R-X1-08",
                 data_source_class: "cross_type",
-                level: "info",
+                level: "low",
                 category: "binding_risk",
                 title: `Guard is bound to immutable ${ctx.scene.host_object} (cannot be modified after publish)`,
                 description: `After ${ctx.scene.host_object} is published, ${ctx.scene.binding_field} cannot be modified.` +
@@ -1650,7 +1650,7 @@ const RISK_RULES = [
                 data_source_class: "cross_type",
                 level,
                 category: "logic_gap",
-                title: level === "info"
+                title: level === "low"
                     ? `Reentrancy reminder: ${spec.sceneId} has no anti-reentrancy primitive (LOW risk)`
                     : `Reentrancy risk: ${spec.sceneId} has NO anti-reentrancy protection (${level.toUpperCase()})`,
                 description: `Scene: ${spec.sceneId}\n` +
@@ -1665,7 +1665,7 @@ const RISK_RULES = [
                             ? "IMPACT: Without protection, the system can be abused (multiple dispute cases, arbitration harassment). Strongly recommended to add protection.\n\n"
                             : "IMPACT: Low by default; only relevant if business intent requires single-action enforcement. Review the rationale above.\n\n"),
                 affected_stakeholders: stakeholders,
-                scenario: level === "info"
+                scenario: level === "low"
                     ? `${spec.sceneId} lacks anti-reentrancy primitive; may or may not be needed depending on business intent`
                     : `${spec.sceneId} lacks anti-reentrancy primitive; same Signer can repeatedly trigger the side effect`,
                 mitigation: spec.mitigation,
@@ -1734,9 +1734,7 @@ function getOverallRiskLevel(risks) {
         return "high";
     if (risks.some((r) => r.level === "medium"))
         return "medium";
-    if (risks.some((r) => r.level === "low"))
-        return "low";
-    return "info";
+    return "low";
 }
 function generateStakeholderAdvice(risks, scene) {
     const advice = {};

package/dist/knowledge/guard-templates.js

@@ -346,7 +346,7 @@ export const GUARD_TEMPLATES = [
         applicable_industries: ["ecommerce", "logistics", "service", "privacy delivery"],
         relevant_risks: ["R-C3-01", "R-C3-05", "R-X1-12"],
         creation_notes: [
-            "STRICT MODE (this template): verifier submits Proof + Order addresses. Three conditions: Signer==proof.signer (submitter accountability), proof.time>order.time (freshness), order.service==service (project binding). No content verification — only submission responsibility ('谁得利谁举证' principle).",
+            "STRICT MODE (this template): verifier submits Proof + Order addresses. Three conditions: Signer==proof.signer (submitter accountability), proof.time>order.time (freshness), order.service==service (project binding). No content verification — only submission responsibility ('beneficiary bears burden of proof' principle).",
             "BROAD MODE ALTERNATIVE: use P15 retained_submission with a String submission (the Merkle Root) and verify calc_string_length == 66 (0x prefix + 64 hex chars). Broad mode trusts the submitter's honesty; the counterparty can dispute by checking their own Messenger conversation. Broad mode is suitable when the Guard is mainly an arbitration basis, not a fund-flow gate.",
             "Guard table supports MULTIPLE b_submission=true Address identifiers (no submission count limit) — this template uses two: Proof (identifier 0) and Order (identifier 1).",
             "submitChainProof(env, peerAddress, description?) sets Proof.about = peerAddress (the counterparty's address). Pass the order_id as a string in the description parameter to associate the Proof with an order (e.g. description: 'order:0x123...').",

package/dist/knowledge/guard-translation.js

@@ -1,3 +1,4 @@
+import { MAX_SUBMISSION_SIZE_PASSPORT } from "@wowok/wowok";
 export const SEMANTIC_TO_SCHEMA_RULES = [
     {
         id: "P02",
@@ -523,7 +524,7 @@ export const SEMANTIC_TO_SCHEMA_RULES = [
             "The submitted object address should be bound to Signer (query the signer/owner field of the submitted object to validate ownership)",
             "Submitted numeric values should have range checks (>= min, <= max)",
             "Total table size must not exceed 40000 bytes",
-            "Total submission bytes must not exceed 256",
+            `Total submission bytes must not exceed ${MAX_SUBMISSION_SIZE_PASSPORT}`,
         ],
         example: {
             root: {
@@ -1000,12 +1001,12 @@ export const GUARD_CONSTRAINT_RULES = [
     },
     {
         id: "RUN_SUB_03",
-        name: "submission total bytes ≤ MAX_SUBMISSION_SIZE (256)",
-        description: "The total bytes of all data submitted at runtime must not exceed 256",
+        name: `submission total bytes ≤ MAX_SUBMISSION_SIZE_PASSPORT (${MAX_SUBMISSION_SIZE_PASSPORT})`,
+        description: `The total bytes of all data submitted at runtime must not exceed ${MAX_SUBMISSION_SIZE_PASSPORT}`,
         category: "table",
         phase: "runtime",
-        validation_logic: "total_submission_bytes <= 256",
-        failure_message: "Submission exceeds MAX_SUBMISSION_SIZE (256 bytes)",
+        validation_logic: `total_submission_bytes <= ${MAX_SUBMISSION_SIZE_PASSPORT}`,
+        failure_message: `Submission exceeds MAX_SUBMISSION_SIZE_PASSPORT (${MAX_SUBMISSION_SIZE_PASSPORT} bytes)`,
         verification_location: "Move verify L252",
     },
     {