@wowok/agent-mcp 2.5.2 → 2.5.4

package/dist/knowledge/machine-templates.js

@@ -4,7 +4,8 @@ export const MACHINE_TEMPLATES = [
         id: "tpl_machine_ecommerce_standard",
         scene_id: "ecommerce_standard",
         name: "Standard E-commerce Flow",
-        description: "Linear e-commerce workflow: Order -> Pay -> Ship -> Receive -> Complete. " +
+        description: "Linear e-commerce workflow: Paid (entry) -> Ship -> Receive -> Complete. " +
+            "Payment is handled by Service.buy() atomically; Machine starts at post-payment state. " +
             "Funds auto-allocated to merchant at Complete node. Recommended baseline for new merchants.",
         recommended_patterns: ["P-M-SEQ"],
         recommended_topology: ["P-M-LINEAR"],
@@ -31,13 +32,6 @@ export const MACHINE_TEMPLATES = [
                 default: "Receive",
                 description: "Forward name for customer receipt confirmation",
             },
-            {
-                name: "pay_guard_name",
-                type: "guard_ref",
-                required: true,
-                description: "Guard name verifying payment completion on Ship forward",
-                constraint: "Must be CREATE-only Guard; use tpl_buy_guard_whitelist pattern",
-            },
             {
                 name: "complete_node_name",
                 type: "string",
@@ -47,8 +41,7 @@ export const MACHINE_TEMPLATES = [
             },
         ],
         example_nodes: [
-            { name: "OrderCreated", description: "Order placed, awaiting payment" },
-            { name: "Paid", description: "Payment confirmed, awaiting shipment" },
+            { name: "Paid", description: "Entry: order created and paid via Service.buy(); Machine starts here" },
             { name: "Shipped", description: "Goods dispatched" },
             { name: "Received", description: "Customer confirmed receipt" },
             { name: "${complete_node_name}", description: "Terminal: triggers allocation" },
@@ -56,24 +49,10 @@ export const MACHINE_TEMPLATES = [
         example_pairs: [
             {
                 prev_node: "",
-                next_node: "OrderCreated",
-                threshold: 1,
-                forwards: [
-                    { name: "Enter", weight: 1, named_operator: "", permission_index: 0 },
-                ],
-            },
-            {
-                prev_node: "OrderCreated",
                 next_node: "Paid",
                 threshold: 1,
                 forwards: [
-                    {
-                        name: "Pay",
-                        weight: 1,
-                        named_operator: "",
-                        permission_index: 0,
-                        guard: "${pay_guard_name}",
-                    },
+                    { name: "Enter", weight: 1, named_operator: "", permission_index: 0 },
                 ],
             },
             {
@@ -106,13 +85,7 @@ export const MACHINE_TEMPLATES = [
                 ],
             },
         ],
-        required_guards: [
-            {
-                guard_template_id: "tpl_buy_guard_whitelist",
-                bound_to_forward: "Pay",
-                purpose: "Verify payment completion",
-            },
-        ],
+        required_guards: [],
         required_permissions: [
             { index: 2, name: "merchant", description: "Merchant role for Ship + Finish" },
             { index: 3, name: "admin", description: "Admin override (optional)" },
@@ -129,16 +102,16 @@ export const MACHINE_TEMPLATES = [
         relevant_risks: ["R-M1-01", "R-M1-02", "R-M1-08", "R-M2-01", "R-M3-02", "R-M4-01"],
         creation_notes: [
             "Build order: Permission -> Machine (unpublished) -> Guards -> Bind guards -> Publish -> Bind to Service",
-            "Pay forward's Guard must verify order.amount is fully paid — use query 1563 (order.service) cross-check",
-            "Entry point: prev_node='' (empty string) — at least one Pair must exist with empty prev_node",
+            "First node 'Paid' represents post-payment state — Service.buy() completes payment atomically before Progress is created",
+            "No separate 'Order' or 'Pay' nodes needed — payment is handled by Service.buy(), not Machine",
+            "Entry point: prev_node='' (empty string) targets 'Paid' — at least one Pair must exist with empty prev_node",
             "If using P16 circular reference for Service, use name not address (Service not yet published)",
         ],
         example_use_case: "Small e-commerce shop selling camera accessories. Linear flow with no exceptions. " +
             "Funds allocated to merchant personal address on Complete.",
         publish_checklist: [
-            "All 5 nodes have at least one outgoing Forward (except terminal)",
-            "Entry Pair exists (prev_node='')",
-            "Pay forward Guard created and tested via gen_passport",
+            "All 4 nodes have at least one outgoing Forward (except terminal)",
+            "Entry Pair exists (prev_node='' targets 'Paid')",
             "permissionIndex values match Permission object indices",
             "Test Progress run on testnet",
             "machineNode2file export as backup",
@@ -148,7 +121,8 @@ export const MACHINE_TEMPLATES = [
         id: "tpl_machine_ecommerce_exceptions",
         scene_id: "ecommerce_with_exceptions",
         name: "E-commerce Flow with Exception Branches",
-        description: "Multi-path workflow: Pay -> Ship -> Receive/Lost/Return. Lost uses dual-sig (threshold=2). " +
+        description: "Multi-path workflow: Paid (entry) -> Ship -> Receive/Lost/Return. Lost uses dual-sig (threshold=2). " +
+            "Payment is handled by Service.buy() atomically; Machine starts at post-payment state. " +
             "Return path opens Refund -> Complete. Competing pairs first-wins.",
         recommended_patterns: ["P-M-SEQ", "P-M-COMPETING"],
         recommended_topology: ["P-M-LINEAR", "P-M-COMPETING"],
@@ -190,8 +164,7 @@ export const MACHINE_TEMPLATES = [
             },
         ],
         example_nodes: [
-            { name: "OrderCreated" },
-            { name: "Paid" },
+            { name: "Paid", description: "Entry: order created and paid via Service.buy(); Machine starts here" },
             { name: "Shipped" },
             { name: "Received" },
             { name: "Lost" },
@@ -202,15 +175,9 @@ export const MACHINE_TEMPLATES = [
         example_pairs: [
             {
                 prev_node: "",
-                next_node: "OrderCreated",
-                threshold: 1,
-                forwards: [{ name: "Enter", weight: 1, named_operator: "" }],
-            },
-            {
-                prev_node: "OrderCreated",
                 next_node: "Paid",
                 threshold: 1,
-                forwards: [{ name: "Pay", weight: 1, named_operator: "" }],
+                forwards: [{ name: "Enter", weight: 1, named_operator: "" }],
             },
             {
                 prev_node: "Paid",
@@ -267,11 +234,6 @@ export const MACHINE_TEMPLATES = [
             },
         ],
         required_guards: [
-            {
-                guard_template_id: "tpl_forward_node_check",
-                bound_to_forward: "Pay",
-                purpose: "Verify payment completion",
-            },
             {
                 guard_template_id: "tpl_forward_node_check",
                 bound_to_forward: "MerchantConfirm",
@@ -311,6 +273,8 @@ export const MACHINE_TEMPLATES = [
             "R-M3-02", "R-M3-04", "R-M3-05", "R-M4-01", "R-M5-03",
         ],
         creation_notes: [
+            "First node 'Paid' represents post-payment state — Service.buy() completes payment atomically before Progress is created",
+            "No separate 'Order' or 'Pay' nodes needed — payment is handled by Service.buy(), not Machine",
             "Competing Pairs (Shipped -> Received/Lost/Return) are mutually exclusive — first threshold met wins",
             "Lost node threshold=2 means BOTH customer and merchant Forwards must execute",
             "TimeGuard must use context(Clock) >= progress.entry_time + duration",
@@ -331,7 +295,8 @@ export const MACHINE_TEMPLATES = [
         id: "tpl_machine_rental",
         scene_id: "rental_standard",
         name: "Equipment Rental Flow",
-        description: "Rental flow: Reserve -> Pay Deposit -> Pickup -> In Use -> Return -> Refund Deposit. " +
+        description: "Rental flow: DepositPaid (entry) -> Pickup -> In Use -> Return -> Refund Deposit. " +
+            "Payment is handled by Service.buy() atomically; Machine starts at post-deposit state. " +
             "Separates deposit from rental fee (two Allocators). Damage report via retained_submission.",
         recommended_patterns: ["P-M-SEQ"],
         recommended_topology: ["P-M-LINEAR"],
@@ -360,8 +325,7 @@ export const MACHINE_TEMPLATES = [
             },
         ],
         example_nodes: [
-            { name: "Reserved" },
-            { name: "DepositPaid" },
+            { name: "DepositPaid", description: "Entry: deposit paid via Service.buy(); Machine starts here" },
             { name: "PickedUp" },
             { name: "InUse" },
             { name: "Return" },
@@ -372,17 +336,9 @@ export const MACHINE_TEMPLATES = [
         example_pairs: [
             {
                 prev_node: "",
-                next_node: "Reserved",
-                threshold: 1,
-                forwards: [{ name: "Reserve", weight: 1, named_operator: "" }],
-            },
-            {
-                prev_node: "Reserved",
                 next_node: "DepositPaid",
                 threshold: 1,
-                forwards: [
-                    { name: "PayDeposit", weight: 1, named_operator: "", guard: "deposit_guard" },
-                ],
+                forwards: [{ name: "Enter", weight: 1, named_operator: "" }],
             },
             {
                 prev_node: "DepositPaid",
@@ -435,11 +391,6 @@ export const MACHINE_TEMPLATES = [
             },
         ],
         required_guards: [
-            {
-                guard_template_id: "tpl_allocator_threshold",
-                bound_to_forward: "PayDeposit",
-                purpose: "Verify deposit amount >= required amount",
-            },
             {
                 guard_template_id: "tpl_forward_privacy_delivery_proof",
                 bound_to_forward: "Inspect",
@@ -473,9 +424,10 @@ export const MACHINE_TEMPLATES = [
             "R-M4-01", "R-M5-02",
         ],
         creation_notes: [
+            "First node 'DepositPaid' represents post-payment state — Service.buy() completes deposit payment atomically before Progress is created",
+            "No separate 'Reserve' or 'PayDeposit' nodes needed — reservation and payment are handled by Service.buy(), not Machine",
             "Damage report uses retained_submission — values stored uniquely by (current_node, next_node, forward_name)",
             "Two competing Pairs at Return node: DamageCheck vs Complete (clean return)",
-            "Deposit Guard must verify amount via order.amount query, not hardcoded value",
             "DamageDeduction Allocation uses sharing.who=Entity (merchant), not OrderHolder",
         ],
         example_use_case: "Camera equipment rental: customer pays 1000 WOW deposit, returns equipment, " +
@@ -860,7 +812,7 @@ export const MACHINE_TEMPLATES = [
             },
         ],
         example_nodes: [
-            { name: "OrderCreated" },
+            { name: "Paid", description: "Entry: order created and paid via Service.buy(); Machine starts here" },
             { name: "${proof_node_name}", description: "Customer submits Proof via Messenger" },
             { name: "${delivery_node_name}" },
             { name: "Complete" },
@@ -868,12 +820,12 @@ export const MACHINE_TEMPLATES = [
         example_pairs: [
             {
                 prev_node: "",
-                next_node: "OrderCreated",
+                next_node: "Paid",
                 threshold: 1,
                 forwards: [{ name: "Enter", weight: 1, named_operator: "" }],
             },
             {
-                prev_node: "OrderCreated",
+                prev_node: "Paid",
                 next_node: "${proof_node_name}",
                 threshold: 1,
                 forwards: [
@@ -1041,142 +993,174 @@ export const MACHINE_TEMPLATES = [
         ],
     },
     {
-        id: "tpl_machine_arbitration",
-        scene_id: "arbitration_flow",
-        name: "Arbitration Flow",
-        description: "Dispute -> Submit -> Vote -> Ruling -> Execute. Uses arbitration_usage_guard + arbitration_voting_guard. " +
-            "MAX_DISPUTE_COUNT=10 per order. Dual-vote prevention mandatory.",
-        recommended_patterns: ["P-M-VOTE", "P-M-SEQ"],
-        recommended_topology: ["P-M-LINEAR"],
+        id: "tpl_machine_wonder_feedback",
+        scene_id: "wonder_feedback",
+        name: "Wonder Feedback Flow (Post-Completion Rating)",
+        description: "Post-completion rating flow: Paid (entry) → Shipped → Received → Completed → {Wonder | NoWonder}. " +
+            "After the order reaches 'Completed' (terminal business state, funds already allocated to merchant), " +
+            "the OrderHolder (namedOperator='') can advance Progress to 'wonder' (positive review) or 'no_wonder' " +
+            "(negative review). A bound Reward object's claim_guard verifies Progress.current == 'wonder' before " +
+            "paying out — reward claim needs NO Permission. Dispute is NEVER modeled here: it flows through " +
+            "Order → Arbitration.dispute() → Arb → arbitration() ruling → arb_withdraw, fully off-Machine.",
+        recommended_patterns: ["P-M-SEQ", "P-M-COMPETING"],
+        recommended_topology: ["P-M-LINEAR", "P-M-COMPETING"],
         parameters: [
             {
-                name: "arbitration_ref",
-                type: "arbitration_ref",
+                name: "merchant_permission",
+                type: "permission_ref",
                 required: true,
-                description: "Arbitration object address",
+                description: "Merchant Permission object (index 2 = merchant, index 3 = admin)",
             },
             {
-                name: "max_disputes",
-                type: "number",
+                name: "wonder_node_name",
+                type: "string",
                 required: true,
-                default: "10",
-                description: "Hard limit: MAX_DISPUTE_COUNT=10 per order",
+                default: "wonder",
+                description: "Node name for positive feedback (好评) terminal",
+                constraint: "Must match /^(wonder|praise|thumbs_up)$/i OR be a custom name; must NOT match dispute anti-pattern regex",
             },
             {
-                name: "voting_threshold",
-                type: "number",
+                name: "no_wonder_node_name",
+                type: "string",
                 required: true,
-                default: "100",
-                description: "Weight threshold required for a voting decision to pass",
+                default: "no_wonder",
+                description: "Node name for negative feedback (差评) terminal",
+                constraint: "Must match /^(no_wonder|complain|thumbs_down)$/i OR be a custom name; must NOT match dispute anti-pattern regex",
+            },
+            {
+                name: "reward_ref",
+                type: "reward_ref",
+                required: false,
+                description: "Reward object address (optional). If bound, its claim_guard should verify Progress.current == wonder_node_name AND order.holder == signer. Use wonder_praise or wonder_feedback reward template.",
+            },
+            {
+                name: "rating_time_limit_days",
+                type: "number",
+                required: false,
+                default: "30",
+                description: "Days after completion during which the customer can rate (enforced by Guard on Praise/Complain forwards via context(Clock))",
+                constraint: "Must be > 0; reasonable range 7-90",
             },
         ],
         example_nodes: [
-            { name: "DisputeOpened" },
-            { name: "EvidenceSubmitted" },
-            { name: "Voting" },
-            { name: "Ruling" },
-            { name: "Executed" },
+            { name: "Paid", description: "Entry: order created and paid via Service.buy(); Machine starts here" },
+            { name: "Shipped", description: "Merchant dispatched goods/service" },
+            { name: "Received", description: "Customer confirmed receipt" },
+            { name: "Completed", description: "Terminal business state — triggers merchant Allocation. Funds settled." },
+            { name: "${wonder_node_name}", description: "Positive feedback terminal (好评). OrderHolder-only. Reward-eligible." },
+            { name: "${no_wonder_node_name}", description: "Negative feedback terminal (差评). OrderHolder-only. Optional Repository write for analytics." },
         ],
         example_pairs: [
             {
                 prev_node: "",
-                next_node: "DisputeOpened",
+                next_node: "Paid",
                 threshold: 1,
-                forwards: [
-                    {
-                        name: "OpenDispute",
-                        weight: 1,
-                        named_operator: "",
-                        guard: "arb_usage_guard",
-                        retained_submission: "dispute_record",
-                    },
-                ],
+                forwards: [{ name: "Enter", weight: 1, named_operator: "" }],
             },
             {
-                prev_node: "DisputeOpened",
-                next_node: "EvidenceSubmitted",
+                prev_node: "Paid",
+                next_node: "Shipped",
                 threshold: 1,
-                forwards: [{ name: "SubmitEvidence", weight: 1, named_operator: "" }],
+                forwards: [{ name: "Ship", weight: 1, permission_index: 2, named_operator: "" }],
             },
             {
-                prev_node: "EvidenceSubmitted",
-                next_node: "Voting",
+                prev_node: "Shipped",
+                next_node: "Received",
                 threshold: 1,
-                forwards: [{ name: "StartVote", weight: 1, permission_index: 3 }],
+                forwards: [{ name: "ConfirmReceive", weight: 1, named_operator: "" }],
             },
             {
-                prev_node: "Voting",
-                next_node: "Ruling",
-                threshold: "${voting_threshold}",
+                prev_node: "Received",
+                next_node: "Completed",
+                threshold: 1,
+                forwards: [{ name: "Finish", weight: 1, permission_index: 2, named_operator: "" }],
+            },
+            {
+                prev_node: "Completed",
+                next_node: "${wonder_node_name}",
+                threshold: 1,
                 forwards: [
                     {
-                        name: "ChiefVote",
-                        weight: 60,
-                        permission_index: 2,
-                        guard: "arb_voting_guard",
-                    },
-                    {
-                        name: "MemberVote",
-                        weight: 8,
-                        named_operator: "arbitrator",
-                        guard: "arb_voting_guard",
+                        name: "Praise",
+                        weight: 1,
+                        named_operator: "",
+                        guard: "rating_window_guard",
+                        retained_submission: "rating_record",
                     },
                 ],
             },
             {
-                prev_node: "Ruling",
-                next_node: "Executed",
+                prev_node: "Completed",
+                next_node: "${no_wonder_node_name}",
                 threshold: 1,
-                forwards: [{ name: "Execute", weight: 1, permission_index: 3 }],
+                forwards: [
+                    {
+                        name: "Complain",
+                        weight: 1,
+                        named_operator: "",
+                        guard: "rating_window_guard",
+                        retained_submission: "rating_record",
+                    },
+                ],
             },
         ],
         required_guards: [
             {
-                guard_template_id: "tpl_usage_guard_threshold",
-                bound_to_forward: "OpenDispute",
-                purpose: "Verify dispute count < MAX_DISPUTE_COUNT (10)",
-            },
-            {
-                guard_template_id: "tpl_voting_guard_numeric_weight",
-                bound_to_forward: "ChiefVote",
-                purpose: "Verify voting eligibility + weight extraction",
+                guard_template_id: "tpl_forward_node_check",
+                bound_to_forward: "Praise",
+                purpose: "Verify Progress.current == 'Completed' (rating only allowed after completion) AND context(Clock) <= progress.entry_time + rating_time_limit_days",
             },
             {
-                guard_template_id: "tpl_voting_guard_numeric_weight",
-                bound_to_forward: "MemberVote",
-                purpose: "Verify voting eligibility + prevent double-vote (R-X1-14 CRITICAL)",
+                guard_template_id: "tpl_forward_node_check",
+                bound_to_forward: "Complain",
+                purpose: "Verify Progress.current == 'Completed' (rating only allowed after completion) AND context(Clock) <= progress.entry_time + rating_time_limit_days",
             },
         ],
         required_permissions: [
-            { index: 2, name: "chief_arbitrator", description: "High-weight voter" },
-            { index: 3, name: "admin", description: "Vote starter / executor" },
+            { index: 2, name: "merchant", description: "Merchant role for Ship + Finish (NOT for rating — rating is OrderHolder-only via named_operator='')" },
+            { index: 3, name: "admin", description: "Admin override (optional)" },
         ],
         required_allocators: [
             {
-                name: "RulingAllocation",
-                trigger_node: "Executed",
-                description: "Allocation based on ruling outcome",
+                name: "MerchantAllocation",
+                trigger_node: "Completed",
+                description: "100% to merchant Treasury or personal address. Fires at Completion — NOT at Wonder/NoWonder (those are reputation-only terminals with no fund flow).",
             },
         ],
-        forkable_fields: ["voting_threshold", "voter_count", "evidence_steps"],
-        applicable_industries: ["arbitration", "ecommerce", "service", "rental"],
+        forkable_fields: ["wonder_node_name", "no_wonder_node_name", "rating_time_limit_days", "additional_rating_nodes"],
+        applicable_industries: ["ecommerce", "service", "rental", "subscription", "education"],
         relevant_risks: [
-            "R-M1-08", "R-M2-05", "R-M3-04", "R-M5-04",
-            "R-X1-14",
+            "R-M1-01", "R-M1-02", "R-M1-08", "R-M1-11",
+            "R-M2-01", "R-M2-05",
+            "R-M3-02", "R-M3-04",
+            "R-M4-01", "R-M5-03",
         ],
         creation_notes: [
-            "Arbitration object MUST be created before this Machine",
-            "Anti-double-dispute: query arb.dispute_count < 10 (R-X1-14 HIGH)",
-            "Anti-double-vote: query arb.voted has [Signer] (R-X1-14 CRITICAL)",
-            "MAX_DISPUTE_COUNT=10 hard limit per order (on-chain constant)",
-        ],
-        example_use_case: "E-commerce dispute: customer claims item not as described. Arbitration panel (1 chief + 3 members) " +
-            "votes to rule. Up to 10 disputes per order allowed.",
+            "DISPUTE INDEPENDENCE: This Machine MUST NOT contain 'disputed', 'refunded', 'arb', 'arbitration' nodes (R-M1-11 critical). Disputes are filed off-Machine via arbitration::dispute(order, arbitration).",
+            "Build order: Permission → Machine (unpublished) → Guards → Bind guards → Publish → Bind to Service → Bind Reward (optional)",
+            "First node 'Paid' represents post-payment state — Service.buy() completes payment atomically before Progress is created",
+            "No separate 'Order' or 'Pay' nodes needed — payment is handled by Service.buy(), not Machine",
+            "Wonder/NoWonder forwards have named_operator='' (empty) — this delegates to the OrderHolder (customer). No Permission index needed for rating.",
+            "Completed node triggers MerchantAllocation — funds are settled BEFORE the rating window opens. Rating does NOT affect fund flow.",
+            "Competing Pair: Praise vs Complain (first-wins) — one rating per order, enforced by Guard + retained_submission audit trail.",
+            "Reward object (if bound) is INDEPENDENT of Allocator: Reward.claim() requires Guard+passport, not Permission. Guard checks Progress.current == 'wonder' AND order.holder == signer.",
+            "rating_window_guard enforces time limit: context(Clock) <= progress.entry_time + rating_time_limit_days. After window closes, no rating possible (Completed becomes true terminal).",
+            "Optional: bind a Repository to record feedback node for analytics. Repository write happens via Guard's data extraction (NOT auto-passed — see 06 §14.4).",
+        ],
+        example_use_case: "Photography service: Paid → Shipped (booking confirmed) → Received (session delivered) → Completed " +
+            "(photos delivered, funds released to photographer) → customer advances to 'wonder' (loved the work) " +
+            "or 'no_wonder' (didn't love it). Bound Reward pays 1 WOW to customers who advance to 'wonder'. " +
+            "Merchant's wonder/no_wonder ratio becomes an on-chain reputation signal. Disputes (if any) are " +
+            "filed separately via Arbitration object — never enter this Machine.",
         publish_checklist: [
-            "Arbitration object created and tested",
-            "Both anti-double Guards tested (dispute + vote)",
-            "Voting threshold verified with different weight distributions",
-            "MAX_DISPUTE_COUNT boundary tested (10th dispute OK, 11th fails)",
+            "All 6 nodes verified: no 'disputed'/'refunded'/'arb'/'arbitration' names (R-M1-11 PASS)",
+            "Entry Pair exists (prev_node='' targets 'Paid')",
+            "Competing Pair tested: Praise vs Complain — first-wins semantics verified on testnet",
+            "rating_window_guard tested: rating blocked after time limit expires",
+            "MerchantAllocation fires ONLY at Completed (NOT at Wonder/NoWonder)",
+            "Reward object (if bound): claim_guard tested — Progress.current == 'wonder' required, claim fails at 'no_wonder' or 'Completed'",
+            "named_operator='' on Praise/Complain forwards verified (OrderHolder-only operation)",
+            "machineNode2file export as backup",
         ],
     },
     {
@@ -1204,7 +1188,7 @@ export const MACHINE_TEMPLATES = [
             },
         ],
         example_nodes: [
-            { name: "Subscribed" },
+            { name: "Paid", description: "Entry: subscription created and paid via Service.buy(); Machine starts here" },
             { name: "Active" },
             { name: "RenewEligible" },
             { name: "Renewed" },
@@ -1215,12 +1199,12 @@ export const MACHINE_TEMPLATES = [
         example_pairs: [
             {
                 prev_node: "",
-                next_node: "Subscribed",
+                next_node: "Paid",
                 threshold: 1,
-                forwards: [{ name: "Subscribe", weight: 1, named_operator: "" }],
+                forwards: [{ name: "Enter", weight: 1, named_operator: "" }],
             },
             {
-                prev_node: "Subscribed",
+                prev_node: "Paid",
                 next_node: "Active",
                 threshold: 1,
                 forwards: [
@@ -1324,6 +1308,8 @@ export const MACHINE_TEMPLATES = [
             "R-M3-02", "R-M3-04", "R-M4-01", "R-M5-04",
         ],
         creation_notes: [
+            "First node 'Paid' represents post-payment state — Service.buy() completes subscription payment atomically before Progress is created",
+            "No separate 'Subscribe' or 'Pay' nodes needed — subscription and payment are handled by Service.buy(), not Machine",
             "Time-lock uses context(Clock) — verify Clock address in Guard table",
             "Competing Pair: Renew vs Expire vs Cancel — first-wins",
             "Renewed node loops back to Active (recurring subscription)",
@@ -1337,7 +1323,7 @@ export const MACHINE_TEMPLATES = [
             "Time-lock Guards tested on testnet (both TimeUnlock + AutoExpire)",
             "Competing Pair semantics verified (Renew vs Expire vs Cancel)",
             "Repository write tested (subscription status queryable)",
-            "Renewal loop tested: Subscribed -> Active -> RenewEligible -> Renewed -> Active",
+            "Renewal loop tested: Paid -> Active -> RenewEligible -> Renewed -> Active",
         ],
     },
 ];

package/dist/knowledge/overrides-loader.d.ts

@@ -0,0 +1,13 @@
+import type { OverrideCategory } from "../loop-engineering/improve.js";
+export interface OverrideConfig {
+    "risk-thresholds"?: Record<string, unknown>;
+    "descriptions"?: Record<string, unknown>;
+    "industry-profiles"?: Record<string, unknown>;
+    "scenario-defaults"?: Record<string, unknown>;
+    "recovery-priorities"?: Record<string, unknown>;
+}
+export declare function loadOverrides(forceReload?: boolean): OverrideConfig;
+export declare function getOverride(category: OverrideCategory): Record<string, unknown> | undefined;
+export declare function clearOverrideCache(): void;
+export declare function listOverrideFiles(): string[];
+export declare function getOverridesDirPath(): string;

package/dist/knowledge/overrides-loader.js

@@ -0,0 +1,67 @@
+import { readFileSync, existsSync, readdirSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+function wowokRootDir() {
+    return process.env.WOWOK_CONFIG_DIR
+        ? process.env.WOWOK_CONFIG_DIR
+        : join(homedir(), ".wowok");
+}
+function overridesDir() {
+    return join(wowokRootDir(), "overrides");
+}
+let overrideCache;
+export function loadOverrides(forceReload = false) {
+    if (overrideCache && !forceReload)
+        return overrideCache;
+    const config = {};
+    const dir = overridesDir();
+    if (!existsSync(dir)) {
+        overrideCache = config;
+        return config;
+    }
+    const categories = [
+        "risk-thresholds",
+        "descriptions",
+        "industry-profiles",
+        "scenario-defaults",
+        "recovery-priorities",
+    ];
+    for (const cat of categories) {
+        const filePath = join(dir, `${cat}.json`);
+        if (!existsSync(filePath))
+            continue;
+        try {
+            const raw = readFileSync(filePath, "utf-8");
+            const parsed = JSON.parse(raw);
+            const { _last_applied_proposal, _last_applied_at, ...userFields } = parsed;
+            void _last_applied_proposal;
+            void _last_applied_at;
+            config[cat] = userFields;
+        }
+        catch {
+        }
+    }
+    overrideCache = config;
+    return config;
+}
+export function getOverride(category) {
+    const config = loadOverrides();
+    return config[category];
+}
+export function clearOverrideCache() {
+    overrideCache = undefined;
+}
+export function listOverrideFiles() {
+    const dir = overridesDir();
+    if (!existsSync(dir))
+        return [];
+    try {
+        return readdirSync(dir).filter((f) => f.endsWith(".json"));
+    }
+    catch {
+        return [];
+    }
+}
+export function getOverridesDirPath() {
+    return overridesDir();
+}

package/dist/knowledge/payment-risk.d.ts

@@ -23,6 +23,10 @@ export interface PaymentRiskCheckContext {
     uses_signer_for_provenance?: boolean;
     coin_field_lint_reviewed?: boolean;
     constants_synced?: boolean;
+    uses_scene_binding?: boolean;
+    has_for_object?: boolean;
+    has_for_guard?: boolean;
+    has_index?: boolean;
 }
 export declare const PAYMENT_RISK_RULES: {
     rule: PaymentRisk;