@wowok/agent-mcp 3.4.0 → 3.4.2

package/dist/schemas/account_operation.output.json

@@ -3302,6 +3302,92 @@
                 "top_risks"
               ],
               "additionalProperties": false
+            },
+            "blueprint_verdict": {
+              "description": "Creation-time blueprint verdict: business intent + host rich semantics + logic tree composed and run through the full per-host verification battery BEFORE the guard create tx. Present when binding_hint maps to a catalog host; absent when no host is known (add binding_hint to enable).",
+              "type": "object",
+              "properties": {
+                "host": {
+                  "type": "string",
+                  "description": "Catalog host id this guard was verified against (guard-host-context)."
+                },
+                "status": {
+                  "type": "string",
+                  "enum": [
+                    "blocked",
+                    "proceed_with_warnings",
+                    "proceed"
+                  ],
+                  "description": "Single authority over create readiness. blocked = structural defect, fix BEFORE create (guards are immutable after create)."
+                },
+                "statement": {
+                  "type": "string",
+                  "description": "One authoritative verdict statement naming the finding codes."
+                },
+                "findings": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "source": {
+                        "type": "string",
+                        "description": "Which verifier produced the finding (verifyGuardBinding / auditGuardRelies / auditQuoteGuardCandidate / blueprint)."
+                      },
+                      "code": {
+                        "type": "string",
+                        "description": "Stable finding id (e.g. MF_SLOT_IDENTITY_ANCHOR, RC_NO_ORDER_ANCHOR)."
+                      },
+                      "level": {
+                        "type": "string",
+                        "enum": [
+                          "critical",
+                          "warning",
+                          "info"
+                        ]
+                      },
+                      "detail": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "source",
+                      "code",
+                      "level",
+                      "detail"
+                    ],
+                    "additionalProperties": false
+                  },
+                  "description": "All findings from the composed verification battery."
+                },
+                "host_context": {
+                  "description": "The host rich semantics this guard inherits — inlined so the design dialogue argues from facts, not memory.",
+                  "type": "object",
+                  "properties": {
+                    "signer_subject": {
+                      "type": "string"
+                    },
+                    "order_anchor": {
+                      "type": "string"
+                    },
+                    "identity_obligation": {
+                      "type": "string"
+                    }
+                  },
+                  "required": [
+                    "signer_subject",
+                    "order_anchor",
+                    "identity_obligation"
+                  ],
+                  "additionalProperties": false
+                }
+              },
+              "required": [
+                "host",
+                "status",
+                "statement",
+                "findings"
+              ],
+              "additionalProperties": false
             }
           },
           "additionalProperties": false
@@ -3697,6 +3783,14 @@
             "note": {
               "description": "Additional note.",
               "type": "string"
+            },
+            "digest": {
+              "description": "REAL transaction digest of this operation (ddmc4 B-37) — paste into onchain_transaction or a block explorer to audit. Absent under dry-run/simulation.",
+              "type": "string"
+            },
+            "signer": {
+              "description": "Signing account's on-chain address — a SEPARATE field from digest ({signer, digest}), never occupying the digest slot.",
+              "type": "string"
             }
           },
           "required": [

package/dist/schemas/benchmark_migration_operation.output.json

@@ -287,6 +287,10 @@
                   "type": "boolean",
                   "description": "False when the detector could not resolve (installed dist-only package, build in progress, stat error). stale is then NOT evidence of freshness — treat verdicts as unconfirmed. Fail-open: never an error."
                 },
+                "actionable": {
+                  "type": "boolean",
+                  "description": "rq-tn-261030-8693be B11: the scan/plan verdicts under this face are fit to act on ONLY when true (fresh AND known). actionable=false VOIDS the conclusions in the same response — rebuild (pnpm build) and re-run before acting on any of them."
+                },
                 "lag_minutes": {
                   "anyOf": [
                     {
@@ -306,6 +310,7 @@
               "required": [
                 "stale",
                 "known",
+                "actionable",
                 "lag_minutes",
                 "detail"
               ],
@@ -323,18 +328,28 @@
                   "items": {
                     "type": "string"
                   }
+                },
+                "status": {
+                  "type": "string",
+                  "enum": [
+                    "READY",
+                    "BLOCKED",
+                    "UNVERIFIED"
+                  ],
+                  "description": "AZT-04 single release authority. UNVERIFIED (ks7 F-18 / h1w9 F-17, kp1 P1-5 residual): the stale_build face was not actionable, so the verdict is void AS A WHOLE — buildable is false because VERIFICATION failed, NOT because the plan is defective (read blockers[0] and stale_build, rebuild, re-run)."
                 }
               },
               "required": [
                 "buildable",
-                "blockers"
+                "blockers",
+                "status"
               ],
               "additionalProperties": false,
               "description": "Single aggregate ruling over the three signal faces (scan.passed / plan.graph_validation.valid / plan.audit.blocking) — the authoritative go/no-go (bkmn-261012 F-M62); the individual faces stay advisory."
             },
             "next_action": {
               "type": "string",
-              "description": "Top-level forwarding of the materialization contract (C6): the guide's 'Plan ready. Materialize: ...' text verbatim when the audit is clean; a BLOCKED reroute back to this action otherwise."
+              "description": "Top-level forwarding of the materialization contract (C6): the guide's 'Plan ready. Materialize: ...' text verbatim when the audit is clean and the build is fresh; a BLOCKED reroute, or a DO-NOT-EXECUTE rebuild-first reroute when stale_build.actionable is false, otherwise."
             }
           },
           "required": [
@@ -416,6 +431,46 @@
                   "items": {
                     "type": "string"
                   }
+                },
+                "drift": {
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string"
+                  },
+                  "additionalProperties": {},
+                  "description": "Disk-vs-catalog drift face for the scanned body (S14-E2)."
+                },
+                "compile_dry_run": {
+                  "type": "object",
+                  "properties": {
+                    "status": {
+                      "type": "string",
+                      "enum": [
+                        "ready",
+                        "blocked",
+                        "unavailable",
+                        "unverified"
+                      ]
+                    },
+                    "buildable": {
+                      "type": "boolean"
+                    },
+                    "blockers": {
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      }
+                    },
+                    "note": {
+                      "type": "string"
+                    }
+                  },
+                  "required": [
+                    "status",
+                    "note"
+                  ],
+                  "additionalProperties": false,
+                  "description": "Compile-kernel probe verdict — the same authority template_generate enforces (S14-E2/GF-29). 'unverified' (ks7 F-18 / h1w9 F-17): the stale_build face was not actionable, so the probe's verdict is void — rebuild and re-run."
                 }
               },
               "required": [
@@ -423,7 +478,9 @@
                 "risk_level",
                 "passed",
                 "findings",
-                "red_flags"
+                "red_flags",
+                "drift",
+                "compile_dry_run"
               ],
               "additionalProperties": false,
               "description": "Full pre-deploy scan result."
@@ -439,6 +496,10 @@
                   "type": "boolean",
                   "description": "False when the detector could not resolve (installed dist-only package, build in progress, stat error). stale is then NOT evidence of freshness — treat verdicts as unconfirmed. Fail-open: never an error."
                 },
+                "actionable": {
+                  "type": "boolean",
+                  "description": "rq-tn-261030-8693be B11: the scan/plan verdicts under this face are fit to act on ONLY when true (fresh AND known). actionable=false VOIDS the conclusions in the same response — rebuild (pnpm build) and re-run before acting on any of them."
+                },
                 "lag_minutes": {
                   "anyOf": [
                     {
@@ -458,17 +519,36 @@
               "required": [
                 "stale",
                 "known",
+                "actionable",
                 "lag_minutes",
                 "detail"
               ],
               "additionalProperties": false,
               "description": "Always-present stale-build disclosure on template_scan / template_generate (reuses computeSrcDistStaleness; no parallel detector)."
+            },
+            "buildable": {
+              "type": "boolean",
+              "description": "TOP-level build verdict (S14-E2): the ONE authority buildVerdict shares with template_generate — the static passed/risk_level stay advisory."
+            },
+            "build_blockers": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "description": "Why the compile kernel refuses (absent/empty when not definitively blocked)."
+            },
+            "next_action": {
+              "type": "string",
+              "description": "Verdict-obedient routing (ZR-41): BLOCKED refusal, proceed-to-generate, or the UNVERIFIED rebuild-first reroute when stale_build.actionable is false."
             }
           },
           "required": [
             "action",
             "scan",
-            "stale_build"
+            "stale_build",
+            "buildable",
+            "build_blockers",
+            "next_action"
           ],
           "additionalProperties": false
         },
@@ -693,6 +773,55 @@
                   "additionalProperties": false,
                   "description": "Dry-run risk check against the matched template."
                 },
+                "requirement_coverage": {
+                  "description": "W5-07 (ks7 F-04/F-02): explicit-promise coverage matrix. Every promise family the description hit lands in exactly ONE of mapped/unmapped/blocker — a stated promise can never silently disappear. status='blocker' = the matched template cannot carry the promise as-is; the note names the exact build decision (declare the mode / compose the registered fulfillment combination) required before migration_apply. Surface every blocker to the user at migration_review. Optional only so logs produced before W5-07 still parse — fresh migration_import logs ALWAYS carry it.",
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "family": {
+                        "type": "string",
+                        "enum": [
+                          "fulfillment",
+                          "after_sales",
+                          "review_incentive",
+                          "discount",
+                          "privacy_channel"
+                        ]
+                      },
+                      "label": {
+                        "type": "string"
+                      },
+                      "status": {
+                        "type": "string",
+                        "enum": [
+                          "mapped",
+                          "unmapped",
+                          "blocker"
+                        ]
+                      },
+                      "evidence": {
+                        "type": "string",
+                        "description": "The matched phrase from the description — every coverage verdict carries its evidence."
+                      },
+                      "target": {
+                        "description": "The WoWok carrier when status=mapped.",
+                        "type": "string"
+                      },
+                      "note": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "family",
+                      "label",
+                      "status",
+                      "evidence",
+                      "note"
+                    ],
+                    "additionalProperties": false
+                  }
+                },
                 "network": {
                   "type": "string",
                   "enum": [
@@ -718,6 +847,40 @@
               "additionalProperties": false,
               "description": "The structured migration log."
             },
+            "buildable": {
+              "description": "Compile-kernel build verdict on probe inputs (S14-E2; absent when the probe could not run) — the matched template's buildability, surfaced at the earliest migration face.",
+              "type": "boolean"
+            },
+            "build_blockers": {
+              "description": "Why the compile kernel refuses (present only when the probe ruled).",
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "compile_dry_run": {
+              "description": "Probe verdict face (S14-E2).",
+              "type": "object",
+              "properties": {
+                "status": {
+                  "type": "string",
+                  "enum": [
+                    "ready",
+                    "blocked",
+                    "unavailable",
+                    "unverified"
+                  ]
+                },
+                "note": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "status",
+                "note"
+              ],
+              "additionalProperties": false
+            },
             "inference_source": {
               "description": "Which layer resolved the industry: 'keywords' = English lexical match only; 'semantic_ir' = the caller's IR decided; 'semantic_ir+keywords' = both contributed. Present only when semantic_ir was supplied.",
               "type": "string",
@@ -740,7 +903,7 @@
             },
             "next_action": {
               "type": "string",
-              "description": "Next chain step: run migration_review with this log (C6 — the chain is self-describing, no agent re-exploration)."
+              "description": "Next chain step: run migration_review with this log (C6 — the chain is self-describing, no agent re-exploration); carries a BLOCKED warning tail when the probe refused (S14-E2)."
             }
           },
           "required": [
@@ -971,6 +1134,55 @@
                   "additionalProperties": false,
                   "description": "Dry-run risk check against the matched template."
                 },
+                "requirement_coverage": {
+                  "description": "W5-07 (ks7 F-04/F-02): explicit-promise coverage matrix. Every promise family the description hit lands in exactly ONE of mapped/unmapped/blocker — a stated promise can never silently disappear. status='blocker' = the matched template cannot carry the promise as-is; the note names the exact build decision (declare the mode / compose the registered fulfillment combination) required before migration_apply. Surface every blocker to the user at migration_review. Optional only so logs produced before W5-07 still parse — fresh migration_import logs ALWAYS carry it.",
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "family": {
+                        "type": "string",
+                        "enum": [
+                          "fulfillment",
+                          "after_sales",
+                          "review_incentive",
+                          "discount",
+                          "privacy_channel"
+                        ]
+                      },
+                      "label": {
+                        "type": "string"
+                      },
+                      "status": {
+                        "type": "string",
+                        "enum": [
+                          "mapped",
+                          "unmapped",
+                          "blocker"
+                        ]
+                      },
+                      "evidence": {
+                        "type": "string",
+                        "description": "The matched phrase from the description — every coverage verdict carries its evidence."
+                      },
+                      "target": {
+                        "description": "The WoWok carrier when status=mapped.",
+                        "type": "string"
+                      },
+                      "note": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "family",
+                      "label",
+                      "status",
+                      "evidence",
+                      "note"
+                    ],
+                    "additionalProperties": false
+                  }
+                },
                 "network": {
                   "type": "string",
                   "enum": [
@@ -1010,6 +1222,40 @@
                 },
                 "risk_passed": {
                   "type": "boolean"
+                },
+                "buildable": {
+                  "description": "Compile-kernel build verdict on probe inputs (S14-E2; absent when the probe could not run) — a DEFINITIVE false verdict un-cleans the route.",
+                  "type": "boolean"
+                },
+                "build_blockers": {
+                  "description": "Why the compile kernel refuses (present only when the probe ruled).",
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "compile_dry_run": {
+                  "description": "Probe verdict face (S14-E2).",
+                  "type": "object",
+                  "properties": {
+                    "status": {
+                      "type": "string",
+                      "enum": [
+                        "ready",
+                        "blocked",
+                        "unavailable",
+                        "unverified"
+                      ]
+                    },
+                    "note": {
+                      "type": "string"
+                    }
+                  },
+                  "required": [
+                    "status",
+                    "note"
+                  ],
+                  "additionalProperties": false
                 }
               },
               "required": [
@@ -1019,7 +1265,7 @@
                 "risk_passed"
               ],
               "additionalProperties": false,
-              "description": "Counts + risk status for the confirmation screen."
+              "description": "Counts + risk status + build verdict (S14-E2) for the confirmation screen."
             },
             "next_action": {
               "type": "string",
@@ -1167,18 +1413,28 @@
                   "items": {
                     "type": "string"
                   }
+                },
+                "status": {
+                  "type": "string",
+                  "enum": [
+                    "READY",
+                    "BLOCKED",
+                    "UNVERIFIED"
+                  ],
+                  "description": "AZT-04 single release authority. UNVERIFIED (ks7 F-18 / h1w9 F-17, kp1 P1-5 residual): the stale_build face was not actionable, so the verdict is void AS A WHOLE — buildable is false because VERIFICATION failed, NOT because the plan is defective (read blockers[0] and stale_build, rebuild, re-run)."
                 }
               },
               "required": [
                 "buildable",
-                "blockers"
+                "blockers",
+                "status"
               ],
               "additionalProperties": false,
               "description": "Single aggregate ruling over the three signal faces (scan.passed / plan.graph_validation.valid / plan.audit.blocking) — the authoritative go/no-go (bkmn-261012 F-M62); the individual faces stay advisory."
             },
             "next_action": {
               "type": "string",
-              "description": "Top-level forwarding of the materialization contract (C6): the guide's 'Plan ready. Materialize: ...' text verbatim when the audit is clean; a BLOCKED reroute back to this action otherwise."
+              "description": "Top-level forwarding of the materialization contract (C6): the guide's 'Plan ready. Materialize: ...' text verbatim when the audit is clean and the build is fresh; a BLOCKED reroute, or a DO-NOT-EXECUTE rebuild-first reroute when stale_build.actionable is false, otherwise."
             }
           },
           "required": [
@@ -1240,9 +1496,82 @@
               "additionalProperties": {},
               "description": "Post-execution conservation/readback checks."
             },
+            "resume": {
+              "description": "W5-08 ①: the READY-TO-PASS resume payload, present whenever the run did NOT complete. Pass both fields back verbatim on the next plan_execute call (or use resume_from_step + previous_outputs).",
+              "type": "object",
+              "properties": {
+                "completed_steps": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  },
+                  "description": "Every stepId whose status is 'executed' in this response (fresh OR adopted) — the completed_steps of the next round."
+                },
+                "previous_outputs": {
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string"
+                  },
+                  "additionalProperties": {
+                    "type": "string"
+                  },
+                  "description": "This response's outputs — the previous_outputs of the next round."
+                }
+              },
+              "required": [
+                "completed_steps",
+                "previous_outputs"
+              ],
+              "additionalProperties": false
+            },
+            "repeated_failures": {
+              "description": "W5-08 ③: steps that failed with the IDENTICAL error in 2+ consecutive rounds — the run withholds the generic RESUME recipe for these; fix the cause before resuming.",
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "step_id": {
+                    "type": "string"
+                  },
+                  "consecutive_rounds": {
+                    "type": "number"
+                  },
+                  "error": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "step_id",
+                  "consecutive_rounds",
+                  "error"
+                ],
+                "additionalProperties": false
+              }
+            },
+            "retry_prohibited": {
+              "description": "W5-08 ③: true alongside repeated_failures — a further unchanged re-run is REFUSED pre-execution (retry_override is the audited escape hatch).",
+              "type": "boolean"
+            },
+            "retry_override_applied": {
+              "description": "W5-08 ③ audit trail: the retry_override accepted this round (step cleared from the repeated-failure ledger).",
+              "type": "object",
+              "properties": {
+                "step_id": {
+                  "type": "string"
+                },
+                "note": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "step_id",
+                "note"
+              ],
+              "additionalProperties": false
+            },
             "next_action": {
               "type": "string",
-              "description": "One-click forwarding: deploy-complete guidance, or the resume recipe (completed_steps + previous_outputs) after a mid-run failure."
+              "description": "One-click forwarding: deploy-complete guidance, the resume recipe (completed_steps + previous_outputs) after a mid-run failure, or the STOP-retrying ruling when the same error recurred."
             }
           },
           "required": [

package/dist/schemas/benchmark_migration_operation.schema.json

@@ -515,7 +515,7 @@
       ]
     },
     "plan": {
-      "description": "The creation plan to execute (required for plan_execute): pass the object returned under 'plan' by template_generate VERBATIM — mutating steps by hand is what the 32-manual-write era did. Executing requires verdict.buildable=true; a blocked plan is refused at the freeze gate.",
+      "description": "The creation plan to execute (required for plan_execute): pass the object returned under 'plan' by template_generate VERBATIM — mutating steps by hand is what the 32-manual-write era did. Alternatively pass {root:'file', path:'<plan.json>'} to read the plan from disk (HAR-P1-14: avoids echoing a 38-40-step plan through the tool-call arguments; the file must contain the plan envelope or the bare plan as JSON). Executing requires verdict.buildable=true; a blocked plan is refused at the freeze gate.",
       "type": "object",
       "propertyNames": {
         "type": "string"
@@ -523,7 +523,7 @@
       "additionalProperties": {}
     },
     "completed_steps": {
-      "description": "plan_execute resume (AR-5): step ids already EXECUTED in a prior run (from the failed response's steps[].stepId where status='executed'). Those steps are adopted, not re-executed.",
+      "description": "plan_execute resume (AR-5): step ids already EXECUTED in a prior run. Those steps are adopted, not re-executed. A run that did not complete returns a ready-to-pass `resume` payload (completed_steps/previous_outputs) — pass it back verbatim instead of deriving the lists by hand.",
       "type": "array",
       "items": {
         "type": "string"
@@ -539,6 +539,31 @@
         "type": "string"
       }
     },
+    "resume_from_step": {
+      "description": "plan_execute resume (W5-08): the FIRST step to (re-)execute — every step BEFORE it in plan order is adopted from previous_outputs. Lighter than enumerating completed_steps: pass the first step whose status is NOT 'executed' in the failed response, plus previous_outputs. Unknown ids are refused — the resume channel binds to the COMPLETE plan, never to one slice's step list.",
+      "type": "string"
+    },
+    "retry_override": {
+      "description": "plan_execute (W5-08): authorizes ONE more round for a step that failed with the IDENTICAL error in 2+ consecutive rounds (a further unchanged re-run is refused pre-execution). The note is mandatory and audit-trailed.",
+      "type": "object",
+      "properties": {
+        "step_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The step named in the RETRY_LOCKED refusal (the repeated-failure guard's lock)."
+        },
+        "note": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Why one more round is justified — mandatory, echoed into the response as retry_override_applied for audit."
+        }
+      },
+      "required": [
+        "step_id",
+        "note"
+      ],
+      "additionalProperties": false
+    },
     "env": {
       "description": "Environment for on-chain execution (plan_execute): forwarded to the executor (e.g. { network: 'testnet' }).",
       "type": "object",