@wowok/agent-mcp 3.2.7 → 3.3.0

package/dist/schemas/goal_operation.schema.json

@@ -1123,6 +1123,19 @@
                 "type": "string"
               },
               "additionalProperties": {}
+            },
+            "review_mode": {
+              "description": "Per-build review-rail mode (v53). Absent = the template's declared review_mode applies.",
+              "type": "string",
+              "enum": [
+                "review",
+                "review_reward",
+                "none"
+              ]
+            },
+            "reward_funding": {
+              "description": "Review reward pool funding, smallest-unit string (required when the effective review mode is review_reward).",
+              "type": "string"
             }
           },
           "required": [
@@ -1171,7 +1184,7 @@
               }
             },
             "guard_resolutions": {
-              "description": "Judgment-layer resolutions for pending guard designs (keyed by pending_guard_designs[].key; C6-DEEP). A blocked audit lists every unresolved design — resolve each here (kind 'inline' with the resolved Guard table+root, or kind 'template' with a matching tpl_* id) and call merchant_guide again. Caller input wins over module-derived resolutions. The publish freeze gate still runs: a resolution only unblocks the plan when the closed audit is clean.",
+              "description": "Judgment-layer resolutions for pending guard designs (keyed by pending_guard_designs[].key; C6-DEEP). A blocked audit lists every unresolved design — resolve each here (kind 'inline' with the resolved Guard table+root, or kind 'template' with a matching tpl_* id) and call merchant_guide again. Advisory designs that do not apply to this shop may be resolved with {kind:'omit'} instead (honored only for designs with no inbound binding; an omit of a bound design is refused with GUARD_OMIT_UNSUPPORTED). Caller input wins over module-derived resolutions. The publish freeze gate still runs: a resolution only unblocks the plan when the closed audit is clean.",
               "type": "object",
               "propertyNames": {
                 "type": "string"
@@ -1216,6 +1229,7 @@
                         "type": "string"
                       },
                       "table": {
+                        "minItems": 1,
                         "type": "array",
                         "items": {
                           "type": "object",
@@ -1227,7 +1241,17 @@
                         "description": "Guard passport table rows (identifier/b_submission/value_type/...)."
                       },
                       "root": {
-                        "description": "Guard logic root node."
+                        "type": "object",
+                        "properties": {
+                          "type": {
+                            "type": "string"
+                          }
+                        },
+                        "required": [
+                          "type"
+                        ],
+                        "additionalProperties": {},
+                        "description": "Guard logic root node (a typed tree node)."
                       }
                     },
                     "required": [
@@ -1236,9 +1260,35 @@
                       "root"
                     ],
                     "additionalProperties": false
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "kind": {
+                        "type": "string",
+                        "const": "omit"
+                      }
+                    },
+                    "required": [
+                      "kind"
+                    ],
+                    "additionalProperties": false
                   }
                 ]
               }
+            },
+            "review_mode": {
+              "description": "Step 6 confirmation: per-build review-rail mode (v53). Absent = the template's declared review_mode applies.",
+              "type": "string",
+              "enum": [
+                "review",
+                "review_reward",
+                "none"
+              ]
+            },
+            "reward_funding": {
+              "description": "Step 6 confirmation: review reward pool funding, smallest-unit string (required when the effective review mode is review_reward).",
+              "type": "string"
             }
           },
           "additionalProperties": false

package/dist/schemas/index.json

@@ -2,7 +2,7 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "title": "WoWok MCP Schema Index",
   "description": "Index of all available JSON schemas for WoWok MCP tools",
-  "generatedAt": "2026-10-11T11:46:49.707Z",
+  "generatedAt": "2026-10-16T09:16:30.649Z",
   "tools": [
     {
       "name": "onchain_operations",

package/dist/schemas/industry_pack_operation.output.json

@@ -370,6 +370,14 @@
             "ok": {
               "type": "boolean",
               "description": "Whether the file was written."
+            },
+            "restamped": {
+              "description": "true when the content equaled a builtin template's canonical body and was written with a fresh release stamp (b9-2: keeps the sentinel hash bound so the seed-upgrade channel stays reachable).",
+              "type": "boolean"
+            },
+            "note": {
+              "description": "Human-readable note (set when restamped).",
+              "type": "string"
             }
           },
           "required": [

package/dist/schemas/industry_pack_operation.schema.json

@@ -82,6 +82,15 @@
       "description": "EXPLICIT USER AUTHORIZATION (C5) required before any action that MODIFIES a user-editable template file (any path under '<industry>/templates/') — write_file / delete_file / reset / move / rename on such a path, copy ONTO an existing such file, and every repair_builtin_templates execution. WITHOUT this flag the action refuses (or returns a plan-only preview for repair_builtin_templates). Set it ONLY after the user has explicitly confirmed the specific change in the conversation.",
       "type": "boolean"
     },
+    "include_user_edited": {
+      "description": "Builtin template ids ('<industry>/<variant>') whose USER-EDIT PROTECTION is explicitly lifted for repair_builtin_templates / template_drift (b9-2). A sentinel whose hash no longer binds its body normally locks the file out of the seed-upgrade channel (presumed user edit); pass the ids the user EXPLICITLY approved for reseed after reviewing the field-level diff — e.g. machine-proven provenance rot (stale deployment stamp or an authorized write that updated the body without re-stamping). The list IS the per-file consent: it must ride BOTH the plan-only preview and the authorize=true execute call. Never list an id the user has not personally confirmed.",
+      "maxItems": 50,
+      "type": "array",
+      "items": {
+        "type": "string",
+        "minLength": 1
+      }
+    },
     "intent": {
       "description": "Business intent text for recommend_industry (e.g. 'I rent cameras to photographers with deposit and damage inspection'). Falls back to project_description / project_name when omitted.",
       "type": "string",

package/dist/schemas/intent_radar.output.json

@@ -69,7 +69,10 @@
                   "TreasuryEvent",
                   "RewardClaimEvent",
                   "RewardFundEvent",
-                  "NewPaymentEvent"
+                  "RewardWithdrawEvent",
+                  "NewPaymentEvent",
+                  "PermissionChangedEvent",
+                  "RepositoryDataOverwriteEvent"
                 ]
               }
             },
@@ -165,7 +168,10 @@
                     "TreasuryEvent",
                     "RewardClaimEvent",
                     "RewardFundEvent",
-                    "NewPaymentEvent"
+                    "RewardWithdrawEvent",
+                    "NewPaymentEvent",
+                    "PermissionChangedEvent",
+                    "RepositoryDataOverwriteEvent"
                   ]
                 }
               },

package/dist/schemas/intent_radar.schema.json

@@ -52,7 +52,10 @@
               "TreasuryEvent",
               "RewardClaimEvent",
               "RewardFundEvent",
-              "NewPaymentEvent"
+              "RewardWithdrawEvent",
+              "NewPaymentEvent",
+              "PermissionChangedEvent",
+              "RepositoryDataOverwriteEvent"
             ]
           }
         }

package/dist/schemas/local_cache_operation.output.json

@@ -232,13 +232,16 @@
                 "network_error",
                 "rate_limit",
                 "gas_exceeded",
+                "insufficient_gas",
                 "bcs_error",
                 "signature_error",
                 "config_error",
                 "wip_verification_failed",
                 "wip_storage_unavailable",
+                "wip_storage_rejected",
                 "submission_unknown",
                 "move_abort_unmapped",
+                "missing_data",
                 "unknown"
               ]
             },

package/dist/schemas/local_history_operation.output.json

@@ -179,13 +179,16 @@
                 "network_error",
                 "rate_limit",
                 "gas_exceeded",
+                "insufficient_gas",
                 "bcs_error",
                 "signature_error",
                 "config_error",
                 "wip_verification_failed",
                 "wip_storage_unavailable",
+                "wip_storage_rejected",
                 "submission_unknown",
                 "move_abort_unmapped",
+                "missing_data",
                 "unknown"
               ]
             },

package/dist/schemas/local_info_operation.output.json

@@ -65,13 +65,16 @@
                 "network_error",
                 "rate_limit",
                 "gas_exceeded",
+                "insufficient_gas",
                 "bcs_error",
                 "signature_error",
                 "config_error",
                 "wip_verification_failed",
                 "wip_storage_unavailable",
+                "wip_storage_rejected",
                 "submission_unknown",
                 "move_abort_unmapped",
+                "missing_data",
                 "unknown"
               ]
             },

package/dist/schemas/local_mark_operation.output.json

@@ -157,13 +157,16 @@
                 "network_error",
                 "rate_limit",
                 "gas_exceeded",
+                "insufficient_gas",
                 "bcs_error",
                 "signature_error",
                 "config_error",
                 "wip_verification_failed",
                 "wip_storage_unavailable",
+                "wip_storage_rejected",
                 "submission_unknown",
                 "move_abort_unmapped",
+                "missing_data",
                 "unknown"
               ]
             },

package/dist/schemas/messenger_operation.schema.json

@@ -139,7 +139,7 @@
               "description": "Account or address lookup object. Use this to specify which account to use for an operation. EXAMPLE: { name_or_address: 'testor2' } - looks up account by name; EXAMPLE: { name_or_address: '0x1234...' } - uses address directly; If name_or_address is empty string '', uses the default local account."
             }
           ],
-          "description": "Recipient address or account name - can be a string (name/address) or full object"
+          "description": "Recipient ACCOUNT address or account/mark name - can be a string (name/address) or full object. Messenger registers ACCOUNTS. A Contact object id IS accepted and auto-resolved on-chain to the messenger address stored inside it; any OTHER on-chain object address is rejected locally with the object type named ⚠️ ANTI-SPAM (by design): your FIRST message to a stranger IS delivered, but follow-ups are rejected until the recipient replies once — a single reply re-opens the thread. Adding the recipient to Contact/friends does NOT exempt this (server-side permission, independent of contacts). Merchant-push SOP: have the buyer send the first message, then reply in that thread."
         },
         "content": {
           "type": "string",
@@ -259,7 +259,7 @@
               "description": "Account or address lookup object. Use this to specify which account to use for an operation. EXAMPLE: { name_or_address: 'testor2' } - looks up account by name; EXAMPLE: { name_or_address: '0x1234...' } - uses address directly; If name_or_address is empty string '', uses the default local account."
             }
           ],
-          "description": "Recipient address or account name - can be a string (name/address) or full object"
+          "description": "Recipient ACCOUNT address or account/mark name - can be a string (name/address) or full object. Messenger registers ACCOUNTS. A Contact object id IS accepted and auto-resolved on-chain to the messenger address stored inside it; any OTHER on-chain object address is rejected locally with the object type named ⚠️ ANTI-SPAM (by design): your FIRST message to a stranger IS delivered, but follow-ups are rejected until the recipient replies once — a single reply re-opens the thread. Adding the recipient to Contact/friends does NOT exempt this (server-side permission, independent of contacts). Merchant-push SOP: have the buyer send the first message, then reply in that thread."
         },
         "filePath": {
           "type": "string",
@@ -406,7 +406,7 @@
               "description": "Account or address lookup object. Use this to specify which account to use for an operation. EXAMPLE: { name_or_address: 'testor2' } - looks up account by name; EXAMPLE: { name_or_address: '0x1234...' } - uses address directly; If name_or_address is empty string '', uses the default local account."
             }
           ],
-          "description": "Recipient address (the merchant's Contact IM address). Can be a string or full object"
+          "description": "Recipient ACCOUNT address or account/mark name — the merchant account AS RECORDED IN the Contact (its stored address field). A Contact object id is ALSO accepted and auto-resolved on-chain to that stored address; any OTHER on-chain object address is rejected locally with the object type named. Can be a string (name/address) or full object ⚠️ ANTI-SPAM (by design): your FIRST message to a stranger IS delivered, but follow-ups are rejected until the recipient replies once — a single reply re-opens the thread. Adding the recipient to Contact/friends does NOT exempt this (server-side permission, independent of contacts). Merchant-push SOP: have the buyer send the first message, then reply in that thread."
         },
         "fields": {
           "description": "LocalInfo field names to send (e.g. ['phone','shipping_address']). If omitted, ALL LocalInfo fields are included",
@@ -1062,7 +1062,7 @@
           "const": "proof_message"
         },
         "account": {
-          "description": "Account - can be a string (name/address/mark name) or full object. If not specified, uses default account",
+          "description": "Account that PROOF reads from — must be the SENDER account that sent the message (the sent message lives only in the sender's local storage; querying from the recipient's or any other account returns 'Message not found'). Can be a string (name/address/mark name) or full object. If not specified, uses default account",
           "anyOf": [
             {
               "description": "Account name, address (0x...), or mark name. When using string format, local marks are searched first. EXAMPLE: 'alice' - searches local marks first, then global; EXAMPLE: '0x2...' (64 hex chars) - uses address directly; EXAMPLE: '' - uses the default local account"

package/dist/schemas/monitor_events.schema.json

@@ -26,7 +26,9 @@
         "reward",
         "service",
         "entity",
-        "payment"
+        "payment",
+        "permission",
+        "repository"
       ]
     },
     "limit": {