@wowok/agent-mcp 2.6.3 → 2.6.6

package/dist/tools/handlers/schema-query.js

@@ -9,6 +9,8 @@ export async function handleSchemaQuery(args) {
         query: validated.query,
         field_path: validated.field_path,
         template: validated.template,
+        object_type: validated.object_type,
+        params: validated.params,
         output_file: validated.output_file,
     };
     const response = processSchemaQuery(request);
@@ -115,6 +117,45 @@ export async function handleSchemaQuery(args) {
                 }
                 break;
             }
+            case "get_tool_reference": {
+                textContent += "\n\n## MCP Tool Reference\n\n";
+                textContent += "```json\n";
+                textContent += JSON.stringify(data, null, 2);
+                textContent += "\n```\n";
+                break;
+            }
+            case "get_guard_design_patterns": {
+                textContent += "\n\n## Guard Design Patterns\n\n";
+                textContent += "```json\n";
+                textContent += JSON.stringify(data, null, 2);
+                textContent += "\n```\n";
+                break;
+            }
+            case "get_safety_rules": {
+                textContent += "\n\n## Safety Rules (sunk from wowok-safety skill)\n\n";
+                textContent += "```json\n";
+                textContent += JSON.stringify(data, null, 2);
+                textContent += "\n```\n";
+                break;
+            }
+            case "get_templates": {
+                textContent += "\n\n## Unified Template Registry (92-review D.2)\n\n";
+                const listData = data;
+                if (Array.isArray(listData.templates) && !request.template) {
+                    textContent += `\n${listData.total ?? listData.templates.length} template(s). `;
+                    textContent += "Call with 'template'=<id> for detail; add 'params' (JSON string) to instantiate.\n";
+                    for (const t of listData.templates) {
+                        textContent += `\n  • ${t.id} [${t.object_type}${t.instantiable ? "" : ", guidance-only"}] — ${t.name} (${t.parameters?.length ?? 0} params)`;
+                    }
+                    textContent += "\n";
+                }
+                else {
+                    textContent += "```json\n";
+                    textContent += JSON.stringify(data, null, 2);
+                    textContent += "\n```\n";
+                }
+                break;
+            }
             default:
                 throw new Error(`Unknown schema_query action: ${String(request.action)}`);
         }

package/dist/tools/handlers/trust.js

@@ -1,7 +1,8 @@
 import { strictParse, TrustScoreInputSchema, } from "../../schema/index.js";
-import { query_objects, } from "@wowok/wowok";
+import { query_objects, query_personal, } from "@wowok/wowok";
 import { computeServiceTrustScore, } from "../../knowledge/index.js";
-import { assembleInfoPuzzle, assessRisk, } from "../../customer/index.js";
+import { assembleInfoPuzzle, assemblePreorderAdvice, assessRisk, buildPreorderComparison, getDefaultPreferences, inferIndustry, mergePreferences, validatePreferences, } from "../../customer/index.js";
+import { getProfile } from "../../experience/user-profile.js";
 function extractTrustMetrics(serviceObj) {
     const data = serviceObj?.data ?? serviceObj ?? {};
     const sales = Array.isArray(data.sales) ? data.sales : [];
@@ -113,8 +114,75 @@ function extractBalance(b) {
     }
     return 0n;
 }
-export async function handleTrustScore(args) {
-    const validated = strictParse(TrustScoreInputSchema, args, "trust_score input");
+function toUserMetricsConfig(input) {
+    return {
+        version: 1,
+        metrics: input.metrics.map((m) => ({
+            name: m.name,
+            label: m.label,
+            evaluator: m.evaluator,
+            params: {
+                ...m.params,
+                threshold: m.params.threshold !== undefined ? String(m.params.threshold) : undefined,
+            },
+            weight: m.weight,
+            advice_on_fail: m.advice_on_fail,
+            advice_on_pass: m.advice_on_pass,
+        })),
+        adjustment_cap: input.adjustment_cap,
+    };
+}
+function derivePreferences(validated, industry) {
+    const profile = getProfile();
+    const withProfile = mergePreferences(getDefaultPreferences(industry), {
+        risk_appetite: profile.risk_appetite,
+        min_trust_score: profile.risk_appetite === "conservative" ? 70
+            : profile.risk_appetite === "aggressive" ? 30 : 50,
+    });
+    const manualInput = validated.preferences;
+    const manual = manualInput
+        ? {
+            ...manualInput,
+            budget_range: manualInput.budget_range
+                ? {
+                    min: BigInt(manualInput.budget_range.min),
+                    max: BigInt(manualInput.budget_range.max),
+                }
+                : undefined,
+        }
+        : undefined;
+    const prefs = manual ? mergePreferences(withProfile, manual) : withProfile;
+    return { prefs, issues: validatePreferences(prefs) };
+}
+async function fetchMerchantReputation(permissionAddr, network, noCache) {
+    try {
+        if (typeof permissionAddr !== "string" || !permissionAddr.startsWith("0x")) {
+            return undefined;
+        }
+        const permResult = await query_objects({
+            objects: [permissionAddr],
+            no_cache: noCache,
+            network,
+        });
+        const permObj = permResult?.objects?.[0];
+        const builder = (permObj?.data ?? permObj)?.builder;
+        if (typeof builder !== "string" || !builder.startsWith("0x")) {
+            return undefined;
+        }
+        const personal = await query_personal({
+            account: builder,
+            no_cache: noCache,
+            network,
+        });
+        if (!personal)
+            return undefined;
+        return { likes: personal.like ?? 0, dislikes: personal.dislike ?? 0 };
+    }
+    catch {
+        return undefined;
+    }
+}
+async function runTrustEvaluation(validated) {
     const depth = (validated.depth ?? "evaluate");
     const queryResult = await query_objects({
         objects: [validated.service],
@@ -142,11 +210,50 @@ export async function handleTrustScore(args) {
         : salePriceRaw;
     let riskScore;
     let infoPuzzle;
+    let preorderAdvice;
+    let preferenceIssues;
     if (depth === "evaluate" || depth === "preorder") {
         const puzzleRaw = buildPuzzleRawData(serviceObj, orderAmount, { score: trustScore.score, level: trustScore.level }, undefined);
+        if (validated.user_metrics) {
+            puzzleRaw.user_metrics_config = toUserMetricsConfig(validated.user_metrics);
+        }
+        if (depth === "preorder") {
+            const reputation = await fetchMerchantReputation((serviceObj?.data ?? serviceObj)?.permission, validated.network, validated.no_cache);
+            if (reputation)
+                puzzleRaw.merchant_reputation = reputation;
+        }
         infoPuzzle = assembleInfoPuzzle(validated.service, puzzleRaw, depth);
         riskScore = assessRisk(infoPuzzle);
+        if (depth === "preorder") {
+            const industry = validated.industry ?? inferIndustry(infoPuzzle);
+            const { prefs, issues } = derivePreferences(validated, industry);
+            preferenceIssues = issues.length > 0 ? issues : undefined;
+            preorderAdvice = assemblePreorderAdvice({
+                puzzle: infoPuzzle,
+                risk: riskScore,
+                preferences: prefs,
+                industry,
+            });
+        }
     }
+    return {
+        serviceId: validated.service,
+        serviceName: serviceObj?.data?.name ?? serviceObj?.name ?? validated.service,
+        serviceObj,
+        sales,
+        trustScore,
+        orderAmount,
+        infoPuzzle,
+        riskScore,
+        preorderAdvice,
+        preferenceIssues,
+    };
+}
+export async function handleTrustScore(args) {
+    const validated = strictParse(TrustScoreInputSchema, args, "trust_score input");
+    const depth = (validated.depth ?? "evaluate");
+    const core = await runTrustEvaluation(validated);
+    const { serviceObj, sales, trustScore, orderAmount, infoPuzzle, riskScore, preorderAdvice, preferenceIssues } = core;
     const result = {
         service_id: validated.service,
         service_name: serviceObj?.data?.name ?? serviceObj?.name ?? validated.service,
@@ -186,9 +293,88 @@ export async function handleTrustScore(args) {
                 assembled_at: infoPuzzle.assembled_at,
             },
         } : {}),
+        ...(preorderAdvice ? {
+            preorder_advice: {
+                confidence: preorderAdvice.confidence,
+                industry: preorderAdvice.industry,
+                strategies: preorderAdvice.strategies.map((s) => ({
+                    scenario: s.scenario,
+                    merchant_tactic: s.strategy.merchant_tactic,
+                    user_strategy: s.strategy.user_strategy,
+                    nash_equilibrium: s.strategy.nash_equilibrium,
+                    confidence: s.confidence,
+                    fallback: s.fallback,
+                    rationale: s.rationale,
+                })),
+                ...(preorderAdvice.preference_match
+                    ? { preference_match: preorderAdvice.preference_match }
+                    : {}),
+                ...(preferenceIssues ? { preference_issues: preferenceIssues } : {}),
+                ...(preorderAdvice.industry_risks
+                    ? {
+                        industry_risks: {
+                            score_adjustment: preorderAdvice.industry_risks.score_adjustment,
+                            summary: preorderAdvice.industry_risks.summary,
+                            checks: preorderAdvice.industry_risks.checks,
+                            unmet_needs: preorderAdvice.industry_risks.unmet_needs.map((n) => ({
+                                id: n.id,
+                                tier: n.tier,
+                                description: n.description,
+                                advice: n.advice,
+                            })),
+                        },
+                    }
+                    : {}),
+                reminders: preorderAdvice.reminders,
+                blocking_reminders: preorderAdvice.blocking_reminders,
+                summary: preorderAdvice.summary,
+            },
+        } : {}),
     };
+    let comparison;
+    if (depth === "preorder" && validated.compare_with && validated.compare_with.length > 0) {
+        const rows = [coreToCompareRow(core)];
+        for (const candidate of validated.compare_with) {
+            try {
+                const candidateCore = await runTrustEvaluation({
+                    ...validated,
+                    service: candidate,
+                    depth: "preorder",
+                });
+                rows.push(coreToCompareRow(candidateCore));
+            }
+            catch (e) {
+                rows.push({
+                    service_id: candidate,
+                    service_name: candidate,
+                    error: e.message,
+                });
+            }
+        }
+        comparison = buildPreorderComparison(rows);
+    }
+    const finalResult = comparison ? { ...result, comparison } : result;
+    return {
+        content: [{ type: "text", text: JSON.stringify({ result: finalResult }) }],
+        structuredContent: { result: finalResult },
+    };
+}
+function coreToCompareRow(core) {
+    const reputation = core.infoPuzzle?.merchant_behavior?.reputation;
     return {
-        content: [{ type: "text", text: JSON.stringify({ result }) }],
-        structuredContent: { result },
+        service_id: core.serviceId,
+        service_name: core.serviceName,
+        industry: core.preorderAdvice?.industry,
+        confidence: core.preorderAdvice?.confidence.score,
+        risk_total: core.riskScore?.total,
+        risk_level: core.riskScore?.level,
+        trust_score: core.trustScore.score,
+        trust_level: core.trustScore.level,
+        preference_match: core.preorderAdvice?.preference_match?.score,
+        reputation_like_ratio: reputation?.like_ratio,
+        reputation_votes: reputation ? reputation.likes + reputation.dislikes : undefined,
+        red_flags_count: core.riskScore?.red_flags.length,
+        blocking_reminders_count: core.preorderAdvice?.blocking_reminders.length,
+        info_gaps_count: core.infoPuzzle?.gaps.length,
     };
 }

package/dist/tools/index.js

@@ -33,7 +33,7 @@ export const TOOL_REGISTRY = [
         handler: handleOnchainOperations,
         config: {
             title: "⛓️ On-chain Operations",
-            description: "On-chain operations for WoWok object: service (marketplace listings), machine (workflow templates), progress (order tracking), repository (on-chain database), arbitration (dispute resolution), contact (IM management), treasury (team funds), reward (incentive pools), allocation (auto-distribution), permission (access control), guard (programmable trust rules), personal (public profile), payment (direct coin transfers), demand (service requests), order (order management), gen_passport (verified credentials), proof (on-chain proof objects), gen_proof (generate proof shortcut).\n\n📌 Project association: Pass env.project='<prefix>' to auto-tag the object on-chain AND auto-associate it to the SQLite project (created objects are automatically added). For complex builds, create a project first (project_operation action='create_project'). For single objects, just pass env.project. See PROJECT ASSOCIATION POLICY in system prompt.\n\n💡 Schema hint: Use schema_query with action='get' and name='onchain_operations' to retrieve the complete parameter schema. For individual operation schemas (e.g., 'onchain_operations_permission'), use schema_query with action='list_operations' to see all available operation schemas.",
+            description: "On-chain operations for WoWok object: service (marketplace listings), machine (workflow templates), progress (order tracking), repository (on-chain database), arbitration (dispute resolution), contact (IM management), treasury (team funds), reward (incentive pools), allocation (auto-distribution), permission (access control), guard (programmable trust rules), personal (public profile), payment (direct coin transfers), demand (service requests), order (order management), gen_passport (verified credentials), proof (on-chain proof objects), gen_proof (generate proof shortcut).\n\n💰 FUND SAFETY (service/arbitration/treasury/reward/allocation/payment): amounts are parsed against the target object's IMMUTABLE generic token type (e.g. Treasury<USDT> accepts ONLY USDT — mismatched coins/token_types are BLOCKED before execution). Monetary input with unresolvable token precision is BLOCKED (never guesses decimals) with known-token suggestions; retry once the token info resolves. Display-format amounts like \"2WOW\" are converted to raw u64 using the token's own decimals.\n\n📌 Project association: Pass env.project='<prefix>' to auto-tag the object on-chain AND auto-associate it to the SQLite project (created objects are automatically added). For complex builds, create a project first (project_operation action='create_project'). For single objects, just pass env.project. See PROJECT ASSOCIATION POLICY in system prompt.\n\n💡 Schema hint: Use schema_query with action='get' and name='onchain_operations' to retrieve the complete parameter schema. For individual operation schemas (e.g., 'onchain_operations_permission'), use schema_query with action='list_operations' to see all available operation schemas.",
             inputSchema: OnchainOperationsSchema,
             outputSchema: CallOutputSchema,
             annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true },
@@ -139,18 +139,22 @@ export const TOOL_REGISTRY = [
         handler: handleWatchQueryOperations,
         config: {
             title: "🔍 Data Query Toolkit",
-            description: "WOWOK data query toolkit — 9 query types covering local device data and on-chain blockchain data:\n\n"
+            description: "WOWOK data query toolkit — 13 query types covering local device data and on-chain blockchain data:\n\n"
                 + "LOCAL (device-only, never on-chain):\n"
                 + "1. local_mark_list — Query your LOCAL address book: maps human-readable names to blockchain addresses with optional tags. Use to resolve names→addresses or find addresses by tag.\n"
                 + "2. account_list — Query your LOCAL accounts (addresses, messenger status, suspension state). Use filter.includePubkey=true to also include public keys. Use to discover available accounts before operations.\n"
                 + "3. local_info_list — Query your LOCAL private info: sensitive data like delivery addresses, phone numbers, contacts stored ONLY on this device.\n"
                 + "4. token_list — Query cached token metadata: symbol, decimals, icon URL, description for tokens previously fetched from chain. Use to look up token precision/decimals before performing token operations. Returns: TokenTypeInfo[] (type, alias, name, symbol, decimals, iconUrl).\n"
-                + "5. account_balance — Query an account's coin balance OR Paginated coin objects. Use balance=true for total amount, or coin={cursor,limit} to list individual coin objects. Supports multi-token via token_type parameter.\n"
+                + "5. account_balance — Query an account's coin balance OR Paginated coin objects. Use balance=true for total amount, or coin={cursor,limit} to list individual coin objects. Supports multi-token via token_type parameter. Results include `_money_display` with unit-converted values + decimals reminder.\n"
                 + "6. local_names — Query local names by a list of addresses. For each address, returns the resolved account name (if exists) and local mark name (if exists). Returns: { account?, local_mark?, address }[].\n\n"
                 + "ONCHAIN (blockchain):\n"
                 + "7. onchain_personal_profile — Query any user's PUBLIC on-chain profile: social links, reputation (likes/dislikes), personal info records, voting history, referrer.\n"
-                + "8. onchain_objects — Batch query on-chain WOWOK objects by ID or name: supports Service, Machine, Order, Treasury, Reward, Arb, Personal, Contact, and more.\n"
-                + "9. onchain_received — Query objects (Payments, Tokens, NFTs) received by a specific object. Supports pagination and type filter.\n\n"
+                + "8. onchain_objects — Batch query on-chain WOWOK objects by ID or name: supports Service, Machine, Order, Treasury, Reward, Arb, Personal, Contact, and more. Monetary fields include `_money_display` annotations (token type from the object's immutable generic).\n"
+                + "9. onchain_received — Query objects (Payments, Tokens, NFTs) received by a specific object. Supports pagination and type filter. CoinWrapper mode returns token-aware `_money_display`.\n"
+                + "10. onchain_transaction — Verify what a specific transaction did on-chain (status, object changes, balance changes, gas, events). Balance changes include `_money_display` (unit-converted via each change's own coin_type; signed amounts supported).\n"
+                + "11. onchain_object_history — FORENSICS: all transactions that touched an object (auditing only — prefer assemble_context for AI context building).\n"
+                + "12. onchain_address_activity — FORENSICS: all transactions sent by an address (auditing only).\n"
+                + "13. token_value_convert — Convert between raw on-chain smallest units (u64) and human unit values in EITHER direction (e.g. \"2200000000\" ↔ \"2.2\" WOW). Unit→raw is REFUSED when token precision cannot be resolved (never guesses decimals).\n\n"
                 + "For dynamic table data queries (pagination, table items), use the 'onchain_table_data' tool.\n\n"
                 + "💡 Schema hint: Use schema_query with action='get' and name='query_toolkit' to retrieve the exact parameter schema with all query types and field definitions.",
             inputSchema: WatchQueryOperationsSchema,
@@ -189,7 +193,7 @@ export const TOOL_REGISTRY = [
         handler: handleOnchainEvents,
         config: {
             title: "📅 Watch WoWok On-chain Events",
-            description: "Watch on-chain WoWok events by type. Supports arbitration events, new order events, progress events, demand presentation events, demand feedback events, and new entity registration events. Use pagination cursor for fetching large result sets.\n\n💡 Schema hint: Use schema_query with action='get' and name='onchain_events' to retrieve the exact parameter schema with all event types and field definitions.",
+            description: "Watch on-chain WoWok events by type. Supports arbitration events, new order events, progress events, demand presentation events, demand feedback events, and new entity registration events. Use pagination cursor for fetching large result sets. NewOrderEvent.amount includes `_money_display` annotation (unit-converted via the order's Service generic token type; raw-only with retry hint when precision is unavailable).\n\n💡 Schema hint: Use schema_query with action='get' and name='onchain_events' to retrieve the exact parameter schema with all event types and field definitions.",
             inputSchema: OnchainEventsInputSchema,
             outputSchema: OnchainEventsResultSchema,
             annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
@@ -201,7 +205,7 @@ export const TOOL_REGISTRY = [
         handler: handleWowokInfo,
         config: {
             title: "ℹ️ WoWok Build-in Information",
-            description: "Query WoWok protocol information: 'constants', 'built-in permissions', 'guard instructions', 'current network', 'value types', or 'mainnet bridge tokens'. For 'mainnet bridge tokens': returns cross-chain bridge tokens (ETH, WETH, WBTC, USDC, USDT) with each token's symbol, WOW-side type tag (wowTypeTag), EVM address, decimals, and description. The wowTypeTag (format {address}::{module}::{struct}) can be used directly as the `type_parameter` of Service / Treasury / Reward / Allocation objects to set their payment token — e.g. use USDT's wowTypeTag to create a Service that accepts USDT payments.",
+            description: "Query WoWok protocol information: 'constants', 'built-in permissions', 'common mistakes', 'guard instructions', 'current network', 'value types', or 'mainnet bridge tokens'. Use 'common mistakes' to proactively learn known field-name/unit/workflow pitfalls before submitting an operation (e.g. filter operation:\"compensation_fund_add\"). For 'mainnet bridge tokens': returns cross-chain bridge tokens (ETH, WETH, WBTC, USDC, USDT) with each token's symbol, WOW-side type tag (wowTypeTag), EVM address, decimals, and description. The wowTypeTag (format {address}::{module}::{struct}) can be used directly as the `type_parameter` of Service / Treasury / Reward / Allocation objects to set their payment token — e.g. use USDT's wowTypeTag to create a Service that accepts USDT payments.",
             inputSchema: ProtocolInfoQuerySchema,
             outputSchema: ProtocolInfoResultSchema,
             annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
@@ -220,8 +224,14 @@ export const TOOL_REGISTRY = [
                 "  'list' - Show all available schemas (tools + on-chain operations). Start here to discover what exists.\n" +
                 "  'get' - Fetch the full input JSON Schema by name (e.g. 'onchain_operations'). Use with the 'name' param.\n" +
                 "  'get_output' - Fetch the output JSON Schema of a tool by name (e.g. 'onchain_operations'). Use with the 'name' param. Use this to understand a tool's return value structure.\n" +
+                "  'get_field' - Query a single field by dot-path (e.g. field_path='data.node.nodes.0.pairs'). Cheaper than 'get' when you only need one subtree.\n" +
                 "  'search' - Find schemas by keyword, matching name/title/description. Use with the 'query' param.\n" +
-                "  'list_operations' - Show only on-chain operation schemas (prefixed 'onchain_operations_'). Narrower than 'list'.",
+                "  'list_operations' - Show only on-chain operation schemas (prefixed 'onchain_operations_'). Narrower than 'list'.\n" +
+                "  'get_guard_templates' - Guard creation templates + best practices (e.g. signer_verification, progress_node_check). Omit 'template' to list all.\n" +
+                "  'search_examples' - Search verified example files by keyword (matches title/description/tags/operation_type/industry). Use with the 'query' param.\n" +
+                "  'get_tool_reference' - MCP tool usage reference (summaries, actions, prerequisites, notes). Pass name='<tool>' for one tool, query='<keyword>' to search, or omit for the full catalog.\n" +
+                "  'get_guard_design_patterns' - Curated Guard design patterns (business requirement → logic tree template). Pass name='<pattern_id>', query='<host>' (e.g. 'service_buy_guard', 'machine_forward'), or omit for the full catalog.\n" +
+                "  'get_safety_rules' - Safety rule tables sunk from the wowok-safety skill: object reuse, immutability-after-publish, LOCAL/ONCHAIN/QUERY classification, naming conventions.",
             inputSchema: SchemaQueryInputSchema,
             outputSchema: SchemaQueryOutputSchema,
             annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
@@ -286,6 +296,39 @@ export const TOOL_REGISTRY = [
                 "  • refresh_objects — Refresh object cache from chain (batch query, rate-limited).\n" +
                 "  • get_object_diff — Get field-level diff of an object between two timestamps.\n\n" +
                 "═══════════════════════════════════════════════════════════════\n" +
+                "  INDUSTRY MODE RECOMMENDATION + REGISTRY (9 actions, GLM6/92 §E)\n" +
+                "═══════════════════════════════════════════════════════════════\n" +
+                "  • recommend_industry — CALL THIS FIRST when the user describes a business without naming an industry. " +
+                "Returns top-3 similar industries + verified reference examples ('from scratch vs giants' shoulders').\n" +
+                "  • list_modes — List builtin industry modes + your custom modes.\n" +
+                "  • derive_user_mode — Derive a custom mode from a builtin (modify machine_shape/allocator/config). R-M1-11 enforced.\n" +
+                "  • evolve_user_mode — Iterate a custom mode (version bump + evolution history).\n" +
+                "  • register_user_mode — Register a fully custom mode (requires machine_shape + key_risk).\n" +
+                "  • unregister_user_mode — Delete a custom mode.\n" +
+                "  • register_custom_metric / register_custom_constraint — Extend the evaluation registries.\n" +
+                "  • list_metrics_constraints — List metrics + constraints (filterable by type/scope).\n\n" +
+                "═══════════════════════════════════════════════════════════════\n" +
+                "  INTENT → RISK → SUBSTEP PIPELINE (3 actions, GLM5-31 §V3/V4)\n" +
+                "═══════════════════════════════════════════════════════════════\n" +
+                "  • analyze_intent (C1) — Business intent text → parsed intent (primary/secondary objects, " +
+                "detected scenes, industry) + per-object puzzle snapshots + recommended creation order. " +
+                "Required: intent.\n" +
+                "  • aggregate_risks (C2) — Puzzle snapshots → calibrated risks (CRITICAL/HIGH/MEDIUM/LOW/INFO) " +
+                "with blocking status (RISK_BLOCKED / RISK_PENDING_CONFIRM / RISK_PASSED). Required: project + " +
+                "(puzzles OR intent — when intent is given, analyze_intent runs first automatically). " +
+                "Optional: planned_objects (OBJECT_REUSE check), planned_operations (IMMUTABILITY check).\n" +
+                "  • trace_substeps (C3) — Substep execution records → DAG coherence analysis (dangling inputs, " +
+                "circular refs, missing outputs, cross-step breaks, topological order, D-10 verdict). " +
+                "Required: project + substeps.\n\n" +
+                "═══════════════════════════════════════════════════════════════\n" +
+                "  MERCHANT ONBOARDING WIZARD (1 action, GLM6/93 §5)\n" +
+                "═══════════════════════════════════════════════════════════════\n" +
+                "  • merchant_guide — 10-step guided flow from 'I want to sell X' to a validated creation plan: " +
+                "intent analysis → industry matching → module adoption → semantic blueprint → evaluation preview → " +
+                "harness check → ordered creation plan. Stateless: pass guide_state UNCHANGED between calls, " +
+                "advance via guide_confirm. NEVER executes on-chain — materialize the plan via create_project + " +
+                "onchain_operations. Required: intent (first call) or guide_state.\n\n" +
+                "═══════════════════════════════════════════════════════════════\n" +
                 "  CONTEXT ASSEMBLY (1 action)\n" +
                 "═══════════════════════════════════════════════════════════════\n" +
                 "  • assemble_context — Query on-chain object states + extract embedded history + optional events, " +
@@ -1226,7 +1269,7 @@ export function listTools() {
             name: "wowok",
             title: "WoWok MCP",
             description: WOWOK_TOOL_DESCRIPTION,
-            inputSchema: zodToJsonSchemaSafe(WowokToolDisplaySchema, "wowok"),
+            inputSchema: resolveSchemaRefs(zodToJsonSchemaSafe(WowokToolDisplaySchema, "wowok")),
         }];
 }
 export function registerAllTools(server) {