@wowok/agent-mcp 3.4.0 → 3.4.1

package/dist/schemas/query_toolkit.schema.json

@@ -133,6 +133,10 @@
             }
           },
           "additionalProperties": false
+        },
+        "no_cache": {
+          "description": "Accepted for call-shape uniformity and IGNORED — account_list is a device-local read with no cache to bypass",
+          "type": "boolean"
         }
       },
       "required": [
@@ -300,13 +304,17 @@
             "testnet",
             "mainnet"
           ]
+        },
+        "no_cache": {
+          "description": "Accepted for call-shape uniformity and IGNORED — this query is always a live read; freshness provenance rides `_balance_read_freshness`",
+          "type": "boolean"
         }
       },
       "required": [
         "query_type"
       ],
       "additionalProperties": false,
-      "description": "Query an account's coin balance OR paginated coin objects. LIVE QUERY: the balance is always fetched fresh from the fullnode — there is NO cache, so 'no_cache' is not needed and not accepted on this query type. PARAMETERS: Use 'name_or_address' to specify the account. Use balance=true for total amount, or coin={cursor,limit} to list individual coin objects. Use token_type to query non-default tokens (format: 0x<package>::<module>::<struct>). If the input resolves to an ON-CHAIN OBJECT (e.g. a Treasury name), the result auto-routes: it returns the object with its 'balance' field plus a routing hint. Returns: { address, balance? | coin? | object?, hint? }"
+      "description": "Query an account's coin balance OR paginated coin objects. LIVE QUERY: the balance is always fetched fresh from the fullnode — there is NO cache, so 'no_cache' is accepted but has no effect. The response carries `_balance_read_freshness` (fetched_at + note): figures CAN differ between reads taken moments apart (live F-RQ-12: the same wallet read 9.93 / 21.88 / 56.28 WOW on three consecutive calls) — reconcile via the coin page and prove arrival via the transaction digest, never off a single read. PARAMETERS: Use 'name_or_address' to specify the account. Use balance=true for total amount, or coin={cursor,limit} to list individual coin objects. Use token_type to query non-default tokens (format: 0x<package>::<module>::<struct>). If the input resolves to an ON-CHAIN OBJECT (e.g. a Treasury name), the result auto-routes: it returns the object with its 'balance' field plus a routing hint. Returns: { address, balance? | coin? | object?, hint? }"
     },
     {
       "type": "object",
@@ -376,6 +384,10 @@
           },
           "description": "List of object IDs (names or addresses) to query in batch"
         },
+        "winner_node": {
+          "description": "Optional adjudication node name for the winner derivation (MN5-6R ③A): when passed, every queried Progress object derives `winner_derivation` — the first account whose forward completed entry into THIS node, computed purely from the append-only Progress history (the chain stores no winner field). When omitted, the Progress's current node is used as the adjudication node. No match → `winner_derivation: null` with a note (the order has not advanced into that node).",
+          "type": "string"
+        },
         "no_cache": {
           "description": "Set to FALSE to allow the session cache; OMIT (or pass true) for a forced-fresh read. ⚠️ DEFAULT IS FRESH ON PURPOSE: a cached snapshot here reports a PRE-TRANSACTION value for exactly the fields an agent uses to decide whether money moved — on testnet this reported a stale `compensation_fund`, a stale `order.claimed_by`, and a stale `allocation.balance`. Only pass no_cache:false when you deliberately want a cheap repeat read of data you already know is current. The response carries `_read_freshness` (source live|session_cache, fetched_at) so a snapshot can never be mistaken for state.",
           "type": "boolean"
@@ -395,7 +407,7 @@
         "objects"
       ],
       "additionalProperties": false,
-      "description": "Batch query on-chain WOWOK objects by ID or name — supports Service, Machine, Order, Treasury, Reward, Arb, Personal, Contact, and more. Use to inspect one or more objects in a single call. FORCED-FRESH by default (see no_cache) and the response includes `_read_freshness` provenance. Returns: { objects: ObjectBase[], _read_freshness: { source, no_cache, fetched_at, note } }"
+      "description": "Batch query on-chain WOWOK objects by ID or name — supports Service, Machine, Order, Treasury, Reward, Arb, Personal, Contact, and more. Use to inspect one or more objects in a single call. FORCED-FRESH by default (see no_cache) and the response includes `_read_freshness` provenance. Every queried Progress object additionally carries `_winner_derivation` (MN5-6R ③A): the first account whose forward completed entry into the adjudication node (`winner_node`, default = the Progress's current node), derived purely from the Progress history — null + note when the order has not advanced there. Returns: { objects: ObjectBase[], _read_freshness: { source, no_cache, fetched_at, note } }"
     },
     {
       "type": "object",
@@ -951,6 +963,67 @@
       "additionalProperties": false,
       "description": "Resolve a Service's transparent sub-order purchasing graph (K3 23 §3.6): reads the bound Machine's frozen forwards, finds purchasing-commitment Guards, and returns each forward's purchased sub-services (fixed address fields) + required sub-order proof fields (b_submission fields). Standalone capability for buyer due-diligence / compose_service / anti_cheat / merchant self-check; reused by Watch. Returns: SupplyChainGraph"
     },
+    {
+      "type": "object",
+      "properties": {
+        "query_type": {
+          "type": "string",
+          "const": "recover_created_objects"
+        },
+        "label": {
+          "anyOf": [
+            {
+              "description": "Account name, address (0x...), or mark name. When using string format, local marks are searched first. EXAMPLE: 'alice' - searches local marks first, then global; EXAMPLE: '0x2...' (64 hex chars) - uses address directly; EXAMPLE: '' - uses the default local account"
+            },
+            {
+              "type": "object",
+              "properties": {
+                "name_or_address": {
+                  "type": "string",
+                  "description": "Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."
+                },
+                "local_mark_first": {
+                  "description": "Whether to prioritize local marks, if true, prioritize local marks, otherwise prioritize global marks",
+                  "type": "boolean"
+                }
+              },
+              "additionalProperties": false,
+              "description": "Account or address lookup object. Use this to specify which account to use for an operation. EXAMPLE: { name_or_address: 'testor2' } - looks up account by name; EXAMPLE: { name_or_address: '0x1234...' } - uses address directly; If name_or_address is empty string '', uses the default local account. name_or_address is REQUIRED — {} resolves to nothing useful and is rejected."
+            }
+          ],
+          "description": "Account name or address (0x...) whose recovery state to assemble — the SENDER of the timed-out call (a submission_unknown / timeout envelope names it in the verification header or submission_verification.sender). Supports string or object form; LocalMark names are resolved automatically."
+        },
+        "op": {
+          "description": "Filter the in-flight markers by operation name: 'order_new' (order creation), 'alloc_by_guard' (distribution), or an operation_type like 'payment', 'reward', 'guard'. Omit to list every open marker.",
+          "type": "string"
+        },
+        "limit": {
+          "description": "Max returned-digest and activity entries (default 20).",
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 50
+        },
+        "no_cache": {
+          "description": "Set to true to bypass the on-chain activity cache and fetch fresh data",
+          "type": "boolean"
+        },
+        "network": {
+          "description": "Network to query: 'localnet' | 'mainnet' | 'testnet'. If omitted, the SDK's current default network is used.",
+          "type": "string",
+          "enum": [
+            "localnet",
+            "testnet",
+            "mainnet"
+          ]
+        }
+      },
+      "required": [
+        "query_type",
+        "label"
+      ],
+      "additionalProperties": false,
+      "description": "RECOVERY TOOL — assemble in ONE call everything needed to recover objects after a TIMED-OUT or lost-response write (W5-09, the official form of the ad-hoc recovery script). Joins three sources: (1) in-flight markers this process still holds OPEN — operations whose commit state was never observed (each carries op, target service/allocation, buyer, item count, started_at, any transport-reported digests); (2) digests this process recently RETURNED as executed receipts; (3) the account's on-chain sent-activity in the failure window. Decision rule: a marker whose digest resolves to an executed transaction → ADOPT its created objects and stop; activity shows the operation landed → adopt; markers exist but nothing on-chain → the state stayed open, a corrected resubmit is allowed; nothing anywhere → nothing landed from THIS process (other sessions/devices may still hold state — the chain remains the only truth). Returns: { label, resolved_address?, inflight_markers[], returned_digests[], landed_tombstones[], onchain_activity?, recovery_guidance }"
+    },
     {
       "type": "object",
       "properties": {
@@ -958,8 +1031,12 @@
           "type": "string",
           "const": "service_panorama"
         },
+        "object_address": {
+          "description": "On-chain Service object address (or LocalMark name). Required when query_type='service_panorama'. PREFERRED field name — the panorama family (service/machine/object) is unified on `object_address` (a Service IS an on-chain object); `service_address` remains accepted as a deprecated alias.",
+          "type": "string"
+        },
         "service_address": {
-          "description": "On-chain Service object address (or LocalMark name). Required when query_type='service_panorama'.",
+          "description": "DEPRECATED alias of object_address (accepted for call compatibility). Prefer object_address. Example: {\"query_type\": \"service_panorama\", \"object_address\": \"0xabc...\"}.",
           "type": "string"
         },
         "context_network": {
@@ -985,9 +1062,13 @@
           "type": "string",
           "const": "service_quote"
         },
+        "object_address": {
+          "description": "On-chain Service object address (or LocalMark name). Required when query_type='service_quote'. PREFERRED field name — unified with the panorama family on `object_address`; `service_address` remains accepted as a deprecated alias.",
+          "type": "string"
+        },
         "service_address": {
-          "type": "string",
-          "description": "On-chain Service object address (or LocalMark name). Required when query_type='service_quote'."
+          "description": "DEPRECATED alias of object_address (accepted for call compatibility). Prefer object_address. Example: {\"query_type\": \"service_quote\", \"object_address\": \"0xabc...\"}.",
+          "type": "string"
         },
         "items": {
           "description": "Basket to quote. Omit to quote EVERY sale with quantity 1 (the floor basket — order quantity is chosen at buy time, so per-unit prices are the authoritative input).",
@@ -1036,8 +1117,7 @@
         }
       },
       "required": [
-        "query_type",
-        "service_address"
+        "query_type"
       ],
       "additionalProperties": false,
       "description": "READ-ONLY pre-purchase quote of a Service (finding 3.6 — order_new total_pay pre-check): per-item unit price × quantity, the basket total that order_new.buy.total_pay.balance must exactly equal (the on-chain buy aborts on any drift), and the order_allocators fee-split preview (sharing rows of the FIRST allocator — the normal payout path; guards select per-case allocators such as refund/damage, so the live split depends on which guard passes). Also previews the reward terms of every Reward hung on the Service (pool balance, per-claim amount, claim window) so a buyer never budgets on an expired or unfunded reward. Mirrors the on-chain price×quantity semantics WITHOUT calling quote on-chain and NEVER submits a transaction. Amounts are payment-token smallest units plus a human display when the token precision resolves."
@@ -1333,6 +1413,57 @@
       "additionalProperties": false,
       "description": "In-flight order participation analysis for ONE account (GLM6/94): customer / operator / observer perspective derived from on-chain permission matching (never caller-asserted) — per-order operable forwards (branch choices), waiting_on roles, pending claims (reward/discount/compensation/rating), perspective-specific interest hints, aggregated account dashboard. Read-only."
     },
+    {
+      "type": "object",
+      "properties": {
+        "query_type": {
+          "type": "string",
+          "const": "order_aggregate"
+        },
+        "group": {
+          "description": "Grouping dimension, read from each Order's own fields: 'service' (default — the crowd/group-buy pool per service), 'machine' (per workflow) or 'owner' (per ordering account).",
+          "type": "string",
+          "enum": [
+            "service",
+            "machine",
+            "owner"
+          ]
+        },
+        "group_id": {
+          "description": "Restrict the aggregation to ONE group value (exact address match — e.g. the Service address running a crowd-funding campaign). The funding-target verdict then reads a single row.",
+          "type": "string"
+        },
+        "metric": {
+          "description": "Numeric field to sum (default 'amount' — the Order's escrowed payment in smallest units).",
+          "type": "string",
+          "const": "amount"
+        },
+        "exclude_claimed": {
+          "description": "Exclude orders whose compensation has been claimed (claimed_by set). Default false — pass true so refund/compensation payouts are not double-counted toward a target.",
+          "type": "boolean"
+        },
+        "limit": {
+          "description": "Max group rows returned (default 50, max 1000). truncated flags rows beyond the limit; totals ALWAYS cover the full set regardless of the limit.",
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 1000
+        },
+        "context_network": {
+          "type": "string",
+          "enum": [
+            "testnet",
+            "mainnet",
+            "localnet"
+          ],
+          "description": "Network for the query — THIS field is `context_network` (the query tools accept no separate `network` key). Defaults to the user's CURRENT network (client UI selection / authority config) when omitted. 'localnet' is for internal test use against a local fullnode."
+        }
+      },
+      "required": [
+        "query_type"
+      ],
+      "additionalProperties": false,
+      "description": "CROSS-ORDER aggregate over Order objects from the MCP index projection (S17-C / F-RQD2-06): count + exact amount sums per group, with the projection's reconciliation coverage attached. Read-side stand-in for the missing on-chain cross-order primitive — crowd/group-buy targets like '3 x 6 WOW >= 18 WOW before funding' are checked HERE until the protocol grows a native aggregate. A STALE projection refuses to answer loudly (INDEX_STALE_PROJECTION — no legacy fallback can aggregate) instead of serving a funding verdict on old data. Read-only."
+    },
     {
       "type": "object",
       "properties": {

package/dist/schemas/schema_query.schema.json

@@ -37,7 +37,7 @@
       "type": "string"
     },
     "template": {
-      "description": "Guard template name for 'get_guard_templates' action. Omit to list all available templates. Available: signer_verification, progress_node_check, order_owner_verification, service_belonging_check, reward_not_claimed, combined_reward_guard. For 'get_templates': unified template id (e.g. 'tpl_buy_guard_whitelist', 'tpl_machine_ecommerce_standard', 'T-S-01', 'T-O-01', 'first_order').",
+      "description": "Guard template id for 'get_guard_templates' action. Omit to list every template id. Pass a listed id (e.g. 'tpl_buy_guard_whitelist', 'tpl_reward_not_claimed') for the full parameterized disclosure — each parameter with its meaning, default, constraint, and derived importance, identity-critical first. For 'get_templates': unified template id (e.g. 'tpl_buy_guard_whitelist', 'tpl_machine_ecommerce_standard', 'T-S-01', 'T-O-01', 'first_order').",
       "type": "string"
     },
     "object_type": {

package/dist/schemas/watch_operation.output.json

@@ -283,6 +283,89 @@
                     ],
                     "additionalProperties": false
                   }
+                },
+                "rails": {
+                  "description": "Settlement rails gated on a FOREIGN order (order_allocators binding) — the composition face, read from guard table slot names.",
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "guard": {
+                        "type": "string"
+                      },
+                      "purchased_services": {
+                        "type": "array",
+                        "items": {
+                          "type": "object",
+                          "properties": {
+                            "identifier": {
+                              "type": "number"
+                            },
+                            "name": {
+                              "type": "string"
+                            },
+                            "address": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "identifier",
+                            "name",
+                            "address"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required_submissions": {
+                        "type": "array",
+                        "items": {
+                          "type": "object",
+                          "properties": {
+                            "identifier": {
+                              "type": "number"
+                            },
+                            "name": {
+                              "type": "string"
+                            },
+                            "value_type": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "identifier",
+                            "name",
+                            "value_type"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "ledger": {
+                        "type": "string"
+                      },
+                      "once_slot": {
+                        "type": "boolean"
+                      },
+                      "axis": {
+                        "anyOf": [
+                          {
+                            "type": "string",
+                            "const": "merchant_procured"
+                          },
+                          {
+                            "type": "string",
+                            "const": "user_procured"
+                          }
+                        ]
+                      }
+                    },
+                    "required": [
+                      "guard",
+                      "purchased_services",
+                      "required_submissions",
+                      "once_slot"
+                    ],
+                    "additionalProperties": false
+                  }
                 }
               },
               "required": [

package/dist/schemas/wip_file.output.json

@@ -71,6 +71,14 @@
                 "additionalProperties": false,
                 "description": "Single signature verification result"
               }
+            },
+            "content_sha256": {
+              "description": "sha256 of the RAW .wip file bytes as fetched — distinct from the canonical commitment meta.hash (ddmc4 B-23 dual semantics)",
+              "type": "string"
+            },
+            "offline_verification": {
+              "description": "Offline three-step verification recipe",
+              "type": "string"
             }
           },
           "required": [

package/dist/schemas/workflow_operation.schema.json

@@ -82,7 +82,7 @@
               "description": "Forward operation: 'next' = accomplish the forward; 'hold' = block the forward; 'unhold' = release own hold; 'adminUnhold' = force-release via permission 224."
             },
             "message": {
-              "description": "Optional human-readable message recorded on-chain",
+              "description": "Optional human-readable message recorded on-chain (≤256 UTF-8 bytes — Move LONG_NAME cap, enforced here before the transaction is built)",
               "type": "string"
             }
           },
@@ -143,7 +143,7 @@
                           "type": "integer",
                           "minimum": 0,
                           "maximum": 255,
-                          "description": "Identifier (0-255) for data lookup in Guard table. Slot consensus (enforced on-chain at guard table construction): 0-220 = user slots (free for business guards); 221-253 = PROTOCOL-RESERVED (rejected on-chain — reserved so future protocol features get fixed slots without colliding with published guards); 255 = ONCE replay-protection slot on Allocation (byte-keyed, the submitted bytes are the once-key — use for per-period keys like period-<N>); 254 = ONCE-FOR-OBJECT slot on Allocation (chain-derived key = bcs(the Allocation's payment_info.for_object); the submitted bytes are ignored and the submission only arms the slot — use for one-shot per-order rails such as full refunds). SLOT 0 SEMANTICS: slot 0 carries the transacted Order address by convention. As a submission slot it is legal on order/allocation/machine rails (the order exists when those verify), but FORBIDDEN on a Service buy_guard — the order does not exist when the buy-time passport is verified, so the mount is refused (service abort 43)."
+                          "description": "Identifier (0-255) for data lookup in Guard table. Slot consensus (enforced on-chain at guard table construction): 0-220 = user slots (free for business guards); 221-253 = PROTOCOL-RESERVED (rejected on-chain — reserved so future protocol features get fixed slots without colliding with published guards); 255 = ONCE replay-protection slot on Allocation (byte-keyed, the submitted bytes are the once-key — use for per-period keys like period-<N>); 254 = ONCE-FOR-OBJECT slot on Allocation (chain-derived key = bcs(the Allocation's payment_info.for_object); the submitted bytes are ignored and the submission only arms the slot — use for one-shot per-order rails whose payee is NOT the order itself, such as settlement releases and incentive/bounty claims). NEVER arm 254 on a refund rail: a refund pays the submitted Order through user slot 0, and a refund leg re-entered in a later renewal period would abort E_ONCE_TRIGGERED (16) forever — refund once-ness comes from the terminal-node topology, never from a once slot. SLOT 0 SEMANTICS: slot 0 carries the transacted Order address by convention. As a submission slot it is legal on order/allocation/machine rails (the order exists when those verify), but FORBIDDEN on a Service buy_guard — the order does not exist when the buy-time passport is verified, so the mount is refused (service abort 43)."
                         },
                         "b_submission": {
                           "type": "boolean",

package/dist/tools/handlers/benchmark-migration.d.ts

@@ -7,10 +7,18 @@ export declare function platformMarkRefusal(addr: string, network: string): stri
 export interface StaleBuildDisclosure {
     stale: boolean;
     known: boolean;
+    actionable: boolean;
     lag_minutes: number | null;
     detail: string;
 }
 export declare function staleBuildFace(srcDir?: string, distDir?: string): StaleBuildDisclosure;
+export declare function wipAnchorFace(sales: unknown): {
+    status: string;
+    rule_id: string;
+    severity: string;
+    unpinned_skus: string[];
+    remediation: string;
+} | undefined;
 declare function driftFace(templateId: string): {
     template: string;
     state: "current";
@@ -64,15 +72,15 @@ declare function scanSummary(scan: TemplateScanResult, drift?: ReturnType<typeof
         detail: string;
     } | undefined;
 };
-export declare function buildVerdict(summary: ReturnType<typeof scanSummary>, plan: Record<string, unknown>, mirrorGenerateHighGate?: boolean): {
+export declare function buildVerdict(summary: ReturnType<typeof scanSummary>, plan: Record<string, unknown>, mirrorGenerateHighGate?: boolean, freshness?: StaleBuildDisclosure): {
     buildable: boolean;
     blockers: string[];
-    status: "READY" | "BLOCKED";
+    status: "READY" | "BLOCKED" | "UNVERIFIED";
 };
 export declare function planNextAction(plan: Record<string, unknown>, retryAction: string, verdict?: {
     buildable: boolean;
     blockers: string[];
-}): string;
+}, freshness?: StaleBuildDisclosure): string;
 export interface RewardPoolPrefill {
     fee_key: "review_reward_pool";
     value: number;