@wowok/agent-mcp 2.6.3 → 2.6.6

package/dist/tools/wrap.js

@@ -1,10 +1,12 @@
 import { classifyError, buildDataSemantic, } from "../schema/call/semantic.js";
 import { buildClassifiedErrorResult } from "./shared.js";
-import { shouldRunLightHooks, shouldRunHeavyHooks, recordOperationFailure, } from "../harness/auto-escalation.js";
+import { shouldRunLightHooks, shouldRunHeavyHooks, recordOperationFailure, recordCriticalRisk, recordCriticalOperation, recordSubstepFailure, } from "../harness/auto-escalation.js";
+import { getHarnessTier, setHarnessTier } from "../config/runtime.js";
 import { getHarness } from "../harness/index.js";
 import { recordOperationOutcome } from "../experience/index.js";
 import { recordIndustrySignal } from "../knowledge/flywheel-loop.js";
 import { getStageCache } from "../project/index.js";
+import { extractAmount, getAmountThreshold, formatAmount } from "../knowledge/safety-rules.js";
 export function withTimeout(promise, timeoutMs = 30000, operationName = "operation") {
     let timer;
     return Promise.race([
@@ -59,13 +61,6 @@ export const strictStatusErrorShape = (error, _classified, _ctx) => ({
     result: { status: "error", error },
 });
 function checkProjectStage(action, project, version) {
-    const entry = getStageCache(project, version);
-    if (!entry) {
-        if (action === "analyze_intent" || action === "get_project_status") {
-            return null;
-        }
-        return `project_stage: calling '${action}' before 'analyze_intent' — recommend calling analyze_intent first for project '${project}:${version}'`;
-    }
     const stageOrder = {
         analyze_intent: 2,
         aggregate_risks: 3,
@@ -75,6 +70,13 @@ function checkProjectStage(action, project, version) {
     const requiredStage = stageOrder[action];
     if (!requiredStage)
         return null;
+    const entry = getStageCache(project, version);
+    if (!entry) {
+        if (action === "analyze_intent") {
+            return null;
+        }
+        return `project_stage: calling '${action}' before 'analyze_intent' — recommend calling analyze_intent first for project '${project}:${version}'`;
+    }
     if (entry.stage < requiredStage - 1) {
         return `project_stage: calling '${action}' (stage ${requiredStage}) but project is at stage ${entry.stage} — recommend completing prior stages first for '${project}:${version}'`;
     }
@@ -92,8 +94,9 @@ export function dispatchWithHarness(handler, toolName) {
         const harness = getHarness();
         const runLight = shouldRunLightHooks();
         const runHeavy = shouldRunHeavyHooks();
-        const isPublishOp = runHeavy && isPublishOperation(toolName, args);
-        const isSignOp = runHeavy && isSignOperation(toolName, args);
+        const publishIntent = isPublishOperation(toolName, args);
+        const signIntent = isSignOperation(toolName, args);
+        const tierNow = getHarnessTier();
         let expectedResult;
         if (runLight) {
             try {
@@ -123,17 +126,45 @@ export function dispatchWithHarness(handler, toolName) {
             catch {
             }
         }
-        if (isPublishOp) {
+        if (publishIntent && tierNow === "lightweight") {
+            setHarnessTier("full");
+            harnessWarnings.push("pre_publish: tier forced to full for publish-class operation (GLM5-21 §3.3)");
+        }
+        if (publishIntent && tierNow !== "off") {
             try {
-                harnessWarnings.push("pre_publish: full-tier check engaged");
+                const check = runPrePublishChecks(toolName, args);
+                harnessWarnings.push(...check.warnings);
+                if (check.critical.length > 0) {
+                    for (const c of check.critical) {
+                        const esc = recordCriticalRisk(c);
+                        if (esc)
+                            harnessWarnings.push(`Harness escalated to full tier: ${esc.reason}`);
+                    }
+                    return buildHarnessBlockResult("pre_publish", `Publish BLOCKED by Harness pre-publish gate (GLM5-21 V6): ` +
+                        `${check.critical.length} CRITICAL risk(s) must be resolved before publish.`, check.critical, check.warnings, "immutable_violation", "Fix the CRITICAL risks listed in the message (e.g. rename dispute/refund nodes per R-M1-11, add the entry pair prev_node=\"\"), then retry publish. Nodes/pairs/forwards are immutable after publish — verify via machineNode2file first.");
+                }
             }
             catch (e) {
                 harnessWarnings.push(`pre_publish hook failed: ${e instanceof Error ? e.message : String(e)}`);
             }
         }
-        if (isSignOp) {
+        if (signIntent && runHeavy) {
             try {
-                harnessWarnings.push("pre_sign: full-tier check engaged");
+                const data = extractData(args);
+                const amt = data ? extractAmount(data) : null;
+                if (amt !== null) {
+                    const threshold = getAmountThreshold();
+                    let value = null;
+                    try {
+                        value = BigInt(amt);
+                    }
+                    catch {
+                        value = null;
+                    }
+                    if (value !== null && value > threshold) {
+                        return buildHarnessBlockResult("pre_sign", `Sign BLOCKED by Harness pre-sign gate (GLM5-21 V7): amount ${formatAmount(value)} WOW exceeds the full-tier threshold ${formatAmount(threshold)} WOW.`, [`amount ${amt} (smallest unit) > threshold ${threshold.toString()} (smallest unit)`], [], "invalid_parameter", "Raise WOWOK_AMOUNT_THRESHOLD to match the intended amount, split the transaction, or reset the harness tier to lightweight (config_operation) after explicit user confirmation.");
+                    }
+                }
             }
             catch (e) {
                 harnessWarnings.push(`pre_sign hook failed: ${e instanceof Error ? e.message : String(e)}`);
@@ -149,6 +180,17 @@ export function dispatchWithHarness(handler, toolName) {
             if (escalation) {
                 harnessWarnings.push(`Harness escalated to full tier: ${escalation.reason}`);
             }
+            if (toolName === "onchain_operations") {
+                try {
+                    const classified = classifyError(errorCode, e);
+                    if (!classified.retryable && classified.error_code !== "unknown") {
+                        const esc2 = recordCriticalOperation(toolName, classified.error_code);
+                        if (esc2)
+                            harnessWarnings.push(`Harness escalated to full tier: ${esc2.reason}`);
+                    }
+                }
+                catch { }
+            }
             throw e;
         }
         if (runLight && expectedResult) {
@@ -168,6 +210,34 @@ export function dispatchWithHarness(handler, toolName) {
                 harnessWarnings.push(`post_call hook failed: ${e instanceof Error ? e.message : String(e)}`);
             }
         }
+        if (toolName === "onchain_operations") {
+            try {
+                if (classifyOutcome(result) === "failed") {
+                    const errText = extractErrorCode(result) ?? "";
+                    const classified = classifyError(errText);
+                    if (!classified.retryable && classified.error_code !== "unknown") {
+                        const esc = recordCriticalOperation(toolName, classified.error_code);
+                        if (esc)
+                            harnessWarnings.push(`Harness escalated to full tier: ${esc.reason}`);
+                    }
+                }
+            }
+            catch { }
+        }
+        if (toolName === "project_operation") {
+            try {
+                const action = args?.action;
+                if (action === "generate_deployment_doc" || action === "trace_substeps") {
+                    const crit = extractCriticalFindingCount(result);
+                    if (crit > 0) {
+                        const esc = recordSubstepFailure(`${String(action)}: ${crit} critical finding(s)`);
+                        if (esc)
+                            harnessWarnings.push(`Harness escalated to full tier: ${esc.reason}`);
+                    }
+                }
+            }
+            catch { }
+        }
         if (isWriteClassTool(toolName)) {
             try {
                 const operationType = extractOperationType(toolName, args) ?? toolName;
@@ -213,7 +283,10 @@ function isPublishOperation(toolName, args) {
     if (toolName !== "onchain_operations")
         return false;
     const opType = extractOperationType(toolName, args);
-    return opType === "service" || opType === "machine";
+    if (opType !== "service" && opType !== "machine")
+        return false;
+    const data = extractData(args);
+    return data?.publish === true || data?.bPublished === true;
 }
 function isSignOperation(toolName, args) {
     if (toolName === "wip_file") {
@@ -319,3 +392,109 @@ function extractIndustry(args) {
     }
     return undefined;
 }
+const ANTI_PATTERN_NODE_REGEX = /(^|_)(disputed?|refund(?:ed)?|arbitration|arb)(_|$)/i;
+function runPrePublishChecks(toolName, args) {
+    const critical = [];
+    const warnings = [];
+    const opType = extractOperationType(toolName, args);
+    const data = extractData(args) ?? {};
+    if (opType === "machine") {
+        const nodeOp = data.node;
+        const nodes = Array.isArray(nodeOp)
+            ? nodeOp
+            : Array.isArray(nodeOp?.nodes)
+                ? nodeOp.nodes
+                : [];
+        if (nodes.length > 0) {
+            for (const n of nodes) {
+                const name = typeof n?.name === "string" ? n.name : "";
+                if (name && ANTI_PATTERN_NODE_REGEX.test(name)) {
+                    critical.push(`R-M1-11: machine node "${name}" models dispute/refund flow — ` +
+                        `refunds must route via an Allocator triggered by business states, ` +
+                        `disputes via the separate Arbitration object (off-Machine)`);
+                }
+            }
+            const seen = new Set();
+            for (const n of nodes) {
+                const name = typeof n?.name === "string" ? n.name : "";
+                if (!name)
+                    continue;
+                if (seen.has(name)) {
+                    critical.push(`MC-C-04: duplicate machine node name "${name}" — on-chain will reject the publish transaction`);
+                }
+                seen.add(name);
+            }
+            const hasEntry = nodes.some((n) => Array.isArray(n?.pairs) && n.pairs.some((p) => p?.prev_node === ""));
+            if (!hasEntry) {
+                critical.push(`Machine has no entry pair (prev_node="") — Progress can never advance ` +
+                    `from the initial state; orders are permanently stuck`);
+            }
+            for (const n of nodes) {
+                const nodeName = typeof n?.name === "string" ? n.name : "?";
+                for (const p of n?.pairs ?? []) {
+                    for (const f of (p?.forwards ?? [])) {
+                        const hasOp = f?.namedOperator !== undefined && f?.namedOperator !== null;
+                        const hasIdx = f?.permissionIndex !== undefined && f?.permissionIndex !== null;
+                        if (!hasOp && !hasIdx) {
+                            warnings.push(`pre_publish: node "${nodeName}" forward "${String(f?.name ?? "?")}" has neither namedOperator nor permissionIndex — no one can advance it`);
+                        }
+                    }
+                }
+            }
+        }
+        else {
+            warnings.push("pre_publish: publishing machine without inline node data — topology not verifiable in this call; " +
+                "verify nodes/pairs/forwards via machineNode2file BEFORE publish (immutable after publish, IMMUT-001)");
+        }
+        warnings.push("pre_publish: machine nodes/pairs/forwards become immutable after publish (IMMUT-001)");
+    }
+    if (opType === "service") {
+        warnings.push("pre_publish: service machine/order_allocators/arbitrations become immutable after publish (IMMUT-002); sales remains modifiable");
+        if (data.machine === undefined) {
+            warnings.push("pre_publish: 'machine' not set in this call — if the service was never bound to a published machine, " +
+                "it cannot process orders and CANNOT be fixed after publish");
+        }
+        if (data.order_allocators === undefined) {
+            warnings.push("pre_publish: 'order_allocators' not set in this call — immutable after publish; " +
+                "orders will have no fund distribution if never configured");
+        }
+    }
+    return { critical, warnings };
+}
+function buildHarnessBlockResult(gate, reason, critical, warnings, errorCode, recoveryHint) {
+    const detail = [
+        ...critical.map((c) => `CRITICAL: ${c}`),
+        ...warnings.map((w) => `WARN: ${w}`),
+    ].join("\n");
+    const text = `Error: ${reason}${detail ? `\n${detail}` : ""}\nRecovery: ${recoveryHint}`;
+    return {
+        content: [{ type: "text", text }],
+        structuredContent: {
+            result: {
+                type: "error",
+                error: `${reason} [gate=${gate}]`,
+                error_code: errorCode,
+                retryable: false,
+                recovery_hint: recoveryHint,
+            },
+            message: text,
+        },
+    };
+}
+function extractCriticalFindingCount(result) {
+    const sc = result?.structuredContent;
+    if (!sc)
+        return 0;
+    const semantic = sc.semantic;
+    const summary = semantic?.summary;
+    if (typeof summary?.critical_count === "number" && summary.critical_count > 0) {
+        return summary.critical_count;
+    }
+    const findings = (sc.findings ?? semantic?.findings);
+    if (Array.isArray(findings)) {
+        return findings.filter((f) => f?.severity === "error").length;
+    }
+    const text = result?.content?.map((c) => ("text" in c ? c.text : "")).join("\n") ?? "";
+    const matches = text.match(/\[AUDIT ERROR\]/g);
+    return matches ? matches.length : 0;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wowok/agent-mcp",
-  "version": "2.6.3",
+  "version": "2.6.6",
   "description": "Making It Easy for AI Agents to Communicate, Collaborate, Trade, and Trust.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -50,7 +50,7 @@
   "license": "Apache-2.0",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@wowok/wowok": "2.6.3",
+    "@wowok/wowok": "2.6.6",
     "lodash": "^4.18.1",
     "zod": "^3.25.76",
     "zod-to-json-schema": "^3.25.2"