@wowok/agent-mcp 2.6.1 → 2.6.3

package/dist/customer/info-puzzle.d.ts

@@ -65,7 +65,7 @@ export declare function assembleFundSafety(raw: ServiceRawData, orderAmount: big
 export declare function assembleTrustSignals(service: ServiceRawData, reviews: ReviewRaw[], trustScore: {
     score: number;
     level: string;
-}, arbitrationOwner?: string, serviceOwner?: string): TrustSignals;
+}, arbitrationOwner?: string, serviceOwner?: string, permissionShared?: boolean, permissionOverlap?: boolean): TrustSignals;
 export declare function assembleMerchantBehavior(events: EventRaw[], orderHistory?: Array<{
     status: string;
     has_dispute: boolean;

package/dist/customer/info-puzzle.js

@@ -33,7 +33,7 @@ export function assembleWorkflowAnalysis(nodes, isPublished, isPaused, serviceRa
     let hasWonderNode = false;
     let hasDisputeAntiPattern = false;
     const antiPatternNodeRegex = /^(disputed|refunded|arb|arbitration|dispute|refund)$/i;
-    const wonderNodeRegex = /^(wonder|no_wonder|praise|complain|thumbs_up|thumbs_down|好评|差评)$/i;
+    const wonderNodeRegex = /^(wonder|no_wonder|praise|complain|thumbs_up|thumbs_down|positive_review|negative_review)$/i;
     const totalForwards = nodes.reduce((sum, n) => sum + (n.forwards?.length ?? 0), 0);
     for (const node of nodes) {
         if (antiPatternNodeRegex.test(node.name.trim())) {
@@ -146,7 +146,7 @@ export function assembleFundSafety(raw, orderAmount) {
         price_anomaly: priceAnomaly,
     };
 }
-export function assembleTrustSignals(service, reviews, trustScore, arbitrationOwner, serviceOwner) {
+export function assembleTrustSignals(service, reviews, trustScore, arbitrationOwner, serviceOwner, permissionShared, permissionOverlap) {
     const likes = reviews.filter((r) => r.rating === "like").length;
     const dislikes = reviews.filter((r) => r.rating === "dislike").length;
     const verified = reviews.filter((r) => r.verified || r.has_evidence).length;
@@ -168,6 +168,8 @@ export function assembleTrustSignals(service, reviews, trustScore, arbitrationOw
         trust_level: trustScore.level,
         has_contact: !!service.um,
         has_messenger: !!service.um,
+        arbitration_permission_shared: permissionShared,
+        arbitration_permission_overlap: permissionOverlap,
     };
 }
 export function assembleMerchantBehavior(events, orderHistory) {

package/dist/customer/risk-assessment.js

@@ -134,13 +134,35 @@ function assessTrustRisk(puzzle) {
     const trust = puzzle.trust_signals;
     const checks = [];
     const arbIndependent = trust?.arbitration_independent ?? true;
+    const permShared = trust?.arbitration_permission_shared === true;
+    const permOverlap = trust?.arbitration_permission_overlap === true;
+    let arbPassed = arbIndependent;
+    let arbAdvice;
+    let arbWeight = 6;
+    if (permShared) {
+        arbPassed = false;
+        arbAdvice = "🔴 CRITICAL: Arbitration and Service share the SAME Permission object. " +
+            "The merchant fully controls arbitration operations (vote, confirm, execute rulings). " +
+            "Dispute fairness cannot be guaranteed. Require the merchant to use a separate, " +
+            "independent Permission object for Arbitration before ordering.";
+    }
+    else if (permOverlap) {
+        arbPassed = false;
+        arbAdvice = "🔴 WARNING: Arbitration and Service have overlapping Permission control " +
+            "(shared owner or admin). Even with separate Permission objects, the merchant can " +
+            "influence dispute outcomes. For mainnet, require completely independent third-party " +
+            "Permission (different owner and admin list) for Arbitration.";
+    }
+    else if (!arbIndependent) {
+        arbAdvice = "🔴 Arbitrator and merchant are the same address: arbitration fairness cannot be guaranteed.";
+    }
     checks.push({
         id: "trust_arb_independent",
         dimension: "trust",
-        description: "Arbitrator has no conflict of interest with the merchant",
-        weight: 6,
-        passed: arbIndependent,
-        advice: arbIndependent ? undefined : "🔴 Arbitrator and merchant are the same address: arbitration fairness cannot be guaranteed.",
+        description: "Arbitrator has no conflict of interest with the merchant (Permission isolation)",
+        weight: arbWeight,
+        passed: arbPassed,
+        advice: arbAdvice,
     });
     let reviewPassed = false;
     let reviewAdvice;

package/dist/customer/types.d.ts

@@ -61,6 +61,8 @@ export interface TrustSignals {
     trust_level: "high_risk" | "caution" | "moderate" | "trusted";
     has_contact: boolean;
     has_messenger: boolean;
+    arbitration_permission_shared?: boolean;
+    arbitration_permission_overlap?: boolean;
 }
 export interface MerchantBehavior {
     total_orders: number;

package/dist/examples/guard-template-balance-check.json

@@ -0,0 +1,38 @@
+{
+  "title": "Guard Template: Balance Check Validation",
+  "description": "Guard that validates order balance >= threshold",
+  "tags": ["guard", "template", "balance", "validation"],
+  "industry": "general",
+  "operation_type": "guard",
+  "source": "template",
+  "verified": true,
+  "call": {
+    "tool": "onchain_operations",
+    "operation_type": "guard",
+    "data": {
+      "object": {
+        "name": "balance_check_guard"
+      },
+      "root": {
+        "type": "logic_greater_equal",
+        "left": {
+          "type": "query",
+          "name": "balance",
+          "parameters": [],
+          "objectType": "Order"
+        },
+        "right": {
+          "type": "identifier",
+          "value_type": "U64",
+          "index": 0
+        }
+      }
+    },
+    "env": {
+      "network": "testnet"
+    }
+  },
+  "notes": [
+    "Use for minimum payment validation, deposit threshold checks"
+  ]
+}

package/dist/examples/guard-template-time-lock.json

@@ -0,0 +1,39 @@
+{
+  "title": "Guard Template: Time-Lock Validation",
+  "description": "Guard that validates a time-based condition (e.g., rental period elapsed)",
+  "tags": ["guard", "template", "time-lock", "validation"],
+  "industry": "general",
+  "operation_type": "guard",
+  "source": "template",
+  "verified": true,
+  "call": {
+    "tool": "onchain_operations",
+    "operation_type": "guard",
+    "data": {
+      "object": {
+        "name": "time_lock_guard",
+        "tags": ["template", "time-lock"]
+      },
+      "root": {
+        "type": "logic_equal",
+        "left": {
+          "type": "query",
+          "name": "time_now",
+          "parameters": [],
+          "objectType": "Order"
+        },
+        "right": {
+          "type": "identifier",
+          "value_type": "U64",
+          "index": 0
+        }
+      }
+    },
+    "env": {
+      "network": "testnet"
+    }
+  },
+  "notes": [
+    "Use for rental period expiry, escrow release timing, etc."
+  ]
+}

package/dist/examples/machine-template-7node-rental.json

@@ -0,0 +1,114 @@
+{
+  "title": "Machine Template: 7-Node Rental Workflow (Simplified)",
+  "description": "Simplified rental workflow without damage/arbitration paths",
+  "tags": ["machine", "template", "rental", "simplified"],
+  "industry": "rental",
+  "operation_type": "machine",
+  "source": "template",
+  "verified": true,
+  "call": {
+    "tool": "onchain_operations",
+    "operation_type": "machine",
+    "data": {
+      "object": {
+        "name": "rental_machine_simple"
+      },
+      "nodes": [
+        {
+          "name": "reserved",
+          "pairs": [
+            {
+              "prev_node": "",
+              "threshold": 0,
+              "forwards": [
+                {
+                  "name": "Pay",
+                  "weight": 1,
+                  "namedOperator": "",
+                  "permissionIndex": null
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "name": "paid",
+          "pairs": [
+            {
+              "prev_node": "reserved",
+              "threshold": 1,
+              "forwards": [
+                {
+                  "name": "Deliver",
+                  "weight": 1,
+                  "namedOperator": null,
+                  "permissionIndex": 1000
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "name": "in_use",
+          "pairs": [
+            {
+              "prev_node": "paid",
+              "threshold": 1,
+              "forwards": [
+                {
+                  "name": "Return",
+                  "weight": 1,
+                  "namedOperator": "",
+                  "permissionIndex": null
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "name": "returned",
+          "pairs": [
+            {
+              "prev_node": "in_use",
+              "threshold": 1,
+              "forwards": [
+                {
+                  "name": "Inspect",
+                  "weight": 1,
+                  "namedOperator": null,
+                  "permissionIndex": 1001
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "name": "inspected",
+          "pairs": [
+            {
+              "prev_node": "returned",
+              "threshold": 1,
+              "forwards": [
+                {
+                  "name": "Refund",
+                  "weight": 1,
+                  "namedOperator": null,
+                  "permissionIndex": 1002
+                }
+              ]
+            }
+          ]
+        },
+        { "name": "refunded", "pairs": [] },
+        { "name": "completed", "pairs": [] }
+      ]
+    },
+    "env": {
+      "network": "testnet"
+    }
+  },
+  "notes": [
+    "Simplified version — no damage or arbitration paths",
+    "Use for short-term rentals without damage risk"
+  ]
+}

package/dist/examples/rental-ziroom-machine-create.json

@@ -0,0 +1,137 @@
+{
+  "title": "Create 10-node Machine for Rental Lifecycle (Ziroom)",
+  "description": "10-node workflow: reserved → paid_deposit → in_use → returned → inspected → deposit_refunded/damage_confirmed/arbiter_rule",
+  "tags": ["machine", "rental", "workflow", "nodes", "permission_index"],
+  "industry": "rental",
+  "operation_type": "machine",
+  "source": "ziroom testnet deployment 2026-07-29",
+  "verified": true,
+  "network": "testnet",
+  "call": {
+    "tool": "onchain_operations",
+    "operation_type": "machine",
+    "data": {
+      "object": {
+        "name": "ziroom_machine_v1",
+        "tags": ["rental", "machine"],
+        "replaceExistName": true
+      },
+      "permission": "ziroom_permission_v1",
+      "nodes": [
+        {
+          "name": "reserved",
+          "pairs": [
+            {
+              "prev_node": "",
+              "threshold": 0,
+              "forwards": [
+                {
+                  "name": "Pay Deposit",
+                  "weight": 1,
+                  "namedOperator": "",
+                  "permissionIndex": null
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "name": "paid_deposit",
+          "pairs": [
+            {
+              "prev_node": "reserved",
+              "threshold": 1,
+              "forwards": [
+                {
+                  "name": "Handover",
+                  "weight": 1,
+                  "namedOperator": null,
+                  "permissionIndex": 1000
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "name": "in_use",
+          "pairs": [
+            {
+              "prev_node": "paid_deposit",
+              "threshold": 1,
+              "forwards": [
+                {
+                  "name": "Return Keys",
+                  "weight": 1,
+                  "namedOperator": "",
+                  "permissionIndex": null
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "name": "returned",
+          "pairs": [
+            {
+              "prev_node": "in_use",
+              "threshold": 1,
+              "forwards": [
+                {
+                  "name": "Inspect",
+                  "weight": 1,
+                  "namedOperator": null,
+                  "permissionIndex": 1001
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "name": "inspected",
+          "pairs": [
+            {
+              "prev_node": "returned",
+              "threshold": 1,
+              "forwards": [
+                { "name": "Refund Deposit", "weight": 1, "namedOperator": null, "permissionIndex": 1002 },
+                { "name": "Confirm Damage", "weight": 1, "namedOperator": null, "permissionIndex": 1001 },
+                { "name": "Escalate Arbitration", "weight": 1, "namedOperator": null, "permissionIndex": 1500 }
+              ]
+            }
+          ]
+        },
+        { "name": "deposit_refunded", "pairs": [] },
+        { "name": "completed", "pairs": [] },
+        {
+          "name": "damage_confirmed",
+          "pairs": [
+            {
+              "prev_node": "inspected",
+              "threshold": 1,
+              "forwards": [
+                {
+                  "name": "Deduct Deposit",
+                  "weight": 1,
+                  "namedOperator": null,
+                  "permissionIndex": 1002
+                }
+              ]
+            }
+          ]
+        },
+        { "name": "deposit_deducted", "pairs": [] },
+        { "name": "arbiter_rule", "pairs": [] }
+      ]
+    },
+    "env": {
+      "network": "testnet",
+      "no_cache": true,
+      "project": "ziroom"
+    }
+  },
+  "notes": [
+    "namedOperator='' means OrderHolder (customer), NOT 'anyone'",
+    "permissionIndex maps to Permission table entries (1000=operator, 1001=inspector, 1002=finance, 1500=arbiter)",
+    "Machine nodes are immutable after publish — create new Machine to change workflow"
+  ]
+}

package/dist/examples/rental-ziroom-permission-create.json

@@ -0,0 +1,35 @@
+{
+  "title": "Create Permission with Role-Based Indexes (Ziroom Rental)",
+  "description": "Single Permission with indexes: 1000=operator, 1001=inspector, 1002=finance, 1500=arbiter",
+  "tags": ["permission", "rental", "role", "index"],
+  "industry": "rental",
+  "operation_type": "permission",
+  "source": "ziroom testnet deployment 2026-07-29",
+  "verified": true,
+  "call": {
+    "tool": "onchain_operations",
+    "operation_type": "permission",
+    "data": {
+      "object": {
+        "name": "ziroom_permission_v1",
+        "tags": ["project:ziroom", "type:permission"],
+        "replaceExistName": true
+      },
+      "table": {
+        "op": "add perm by index",
+        "index": 1000,
+        "entity": ["0x51bd..."]
+      }
+    },
+    "env": {
+      "network": "testnet",
+      "no_cache": true,
+      "project": "ziroom"
+    }
+  },
+  "notes": [
+    "Custom indexes range 1000-65535 (0-999 are protocol-reserved)",
+    "Single Permission recommended for centralized control across all objects",
+    "Use 'add perm by index' to grant one permission to many entities"
+  ]
+}

package/dist/examples/rental-ziroom-service-create.json

@@ -0,0 +1,80 @@
+{
+  "title": "Create Service with 3-path Allocation (Ziroom Rental)",
+  "description": "Create a Service with machine, buy_guard, contact, and 3-path order_allocators (rent/refund/damage)",
+  "tags": ["service", "allocation", "rental", "order_allocators", "guard"],
+  "industry": "rental",
+  "operation_type": "service",
+  "source": "ziroom testnet deployment 2026-07-29",
+  "verified": true,
+  "network": "testnet",
+  "call": {
+    "tool": "onchain_operations",
+    "operation_type": "service",
+    "data": {
+      "object": {
+        "name": "ziroom_service_v1",
+        "tags": ["project:ziroom", "type:service"],
+        "replaceExistName": true
+      },
+      "permission": "ziroom_permission_v1",
+      "machine": "ziroom_machine_v1",
+      "buy_guard": "ziroom_buy_guard_v1",
+      "um": "ziroom_contact_v1",
+      "sales": [
+        {
+          "name": "ziroom_apartment_v1",
+          "price": 2000000000,
+          "stock": 1,
+          "suspension": false,
+          "wip_hash": ""
+        }
+      ],
+      "order_allocators": {
+        "description": "3-path allocation: rent to operator, refund to customer, damage deductions",
+        "threshold": 1000000000,
+        "allocators": [
+          {
+            "guard": "ziroom_buy_guard_v1",
+            "sharing": [
+              {
+                "who": { "Entity": { "name_or_address": "0x36cd..." } },
+                "sharing": 1000000000,
+                "mode": "Amount"
+              }
+            ]
+          },
+          {
+            "guard": "ziroom_refund_guard_v1",
+            "sharing": [
+              {
+                "who": { "Signer": "signer" },
+                "sharing": 1000000000,
+                "mode": "Amount"
+              }
+            ]
+          },
+          {
+            "guard": "ziroom_damage_guard_v1",
+            "sharing": [
+              {
+                "who": { "Entity": { "name_or_address": "0x36cd..." } },
+                "sharing": 1000000000,
+                "mode": "Amount"
+              }
+            ]
+          }
+        ]
+      }
+    },
+    "env": {
+      "network": "testnet",
+      "no_cache": true,
+      "project": "ziroom"
+    }
+  },
+  "notes": [
+    "order_allocators is PERMANENTLY IMMUTABLE after publish (service.move:503)",
+    "Signer recipient means the tx sender at alloc() time — customer must call alloc_by_guard themselves for refunds",
+    "Amount mode: fixed amount, not percentage. Use Rate mode (10000=100%) for proportional splits"
+  ]
+}

package/dist/examples/retail-myshop-service-create.json

@@ -0,0 +1,88 @@
+{
+  "title": "Create Retail Service with 2-path Allocation (MyShop E-Commerce)",
+  "description": "Simple e-commerce Service with machine, withdraw/refund guards, contact, and toy products. 2-path order_allocators: merchant withdraw after completion, customer refund after cancellation.",
+  "tags": ["service", "allocation", "retail", "ecommerce", "guard", "order_allocators"],
+  "industry": "retail",
+  "operation_type": "service",
+  "source": "myshop mainnet deployment 2026-07-29",
+  "verified": true,
+  "network": "mainnet",
+  "call": {
+    "tool": "onchain_operations",
+    "operation_type": "service",
+    "data": {
+      "object": {
+        "name": "myshop_service_v2",
+        "type_parameter": "0x2::wow::WOW",
+        "permission": "myshop_permission_v2",
+        "tags": ["ecommerce", "toys", "store"],
+        "onChain": false,
+        "replaceExistName": true
+      },
+      "description": "MyShop - Top quality toys for children",
+      "location": "Online Store",
+      "machine": "myshop_machine_v2",
+      "order_allocators": {
+        "description": "Order revenue allocation - merchant withdraw after completion",
+        "threshold": 0,
+        "allocators": [
+          {
+            "guard": "myshop_withdraw_guard_v2",
+            "sharing": [
+              {
+                "who": { "Signer": "signer" },
+                "sharing": 10000,
+                "mode": "Rate"
+              }
+            ]
+          },
+          {
+            "guard": "myshop_refund_guard_v2",
+            "sharing": [
+              {
+                "who": { "GuardIdentifier": 0 },
+                "sharing": 10000,
+                "mode": "Rate"
+              }
+            ]
+          }
+        ]
+      },
+      "sales": {
+        "op": "add",
+        "sales": [
+          {
+            "name": "Play Purse Set 35PCS",
+            "price": 50000000,
+            "stock": 100,
+            "suspension": false,
+            "wip": "https://wowok.net/test/three_body.wip",
+            "wip_hash": ""
+          },
+          {
+            "name": "Tree House Building Set",
+            "price": 30000000,
+            "stock": 75,
+            "suspension": false,
+            "wip": "https://wowok.net/test/three_body.wip",
+            "wip_hash": ""
+          }
+        ]
+      },
+      "um": "myshop_aftersales_contact_v2",
+      "publish": true
+    },
+    "env": {
+      "account": "myshop_merchant",
+      "network": "mainnet",
+      "confirmed": true
+    }
+  },
+  "notes": [
+    "order_allocators is PERMANENTLY IMMUTABLE after publish (service.move:503)",
+    "Withdraw allocator uses Signer recipient — safe ONLY because withdraw_guard binds Signer to myshop_merchant",
+    "Refund allocator uses GuardIdentifier 0 (Order object address) as escrow — customer claims separately",
+    "Rate mode uses 0-10000 scale (10000 = 100%)",
+    "Machine, order_allocators, and arbitrations become immutable after publish"
+  ]
+}