@wowok/skills 1.1.9 → 1.1.11

package/examples/MyShop_Advanced/MyShop_Advanced.md

@@ -1,4 +1,4 @@
-# MyShop Advanced E-Commerce Example
+# MyShop Advanced E-Commerce Example
 
 An advanced e-commerce example demonstrating escrow with multiple order fund allocation modes, multi-party allocation, arbitration with voting guards, and WIP-based product verification.
 
@@ -181,9 +181,15 @@ Understanding the correct order for creating WoWok objects is crucial for a succ
 │  │   _win_v2       │    │   _win_v2       │    │     _v2         │         │
 │  └─────────────────┘    └─────────────────┘    └─────────────────┘         │
 │                                                                             │
-│  Phase 2b: Reward Guards                                                    │
-│  ═══════════════════════                                                    │
+│  Phase 2b: Reward System (Empty Object First)                               │
+│  ════════════════════════════════════════════                               │
 │                                                                             │
+│  ┌─────────────────┐                                                       │
+│  │  Empty Reward   │◄─── Create empty reward object first                  │
+│  │myshop_reward_v2 │     Guards will reference this object                 │
+│  └────────┬────────┘                                                        │
+│           │                                                                 │
+│           ▼                                                                 │
 │  ┌─────────────────┐    ┌─────────────────┐    ┌─────────────────┐         │
 │  │ reward_wonderful│    │  reward_lost    │    │ reward_shipping │         │
 │  │     _v2         │    │     _v2         │    │ _timeout_v2     │         │
@@ -226,12 +232,13 @@ Understanding the correct order for creating WoWok objects is crucial for a succ
 │  │  and Publish    │     Requires: All Guards, Arbitration                 │
 │  └─────────────────┘                                                        │
 │                                                                             │
-│  Phase 7: Reward Pool                                                       │
-│  ═════════════════════                                                      │
+│  Phase 7: Reward Pool Configuration                                         │
+│  ══════════════════════════════════                                         │
 │                                                                             │
 │  ┌─────────────────┐                                                       │
-│  │     Reward      │◄─── Requires: Service (for guard verification)        │
-│  │myshop_reward_v2 │     Add: reward_guards for Wonderful/Lost/Timeout     │
+│  │  Add Guards to  │◄─── Add reward guards with store_from_id              │
+│  │     Reward      │     Enables double-claim protection                   │
+│  │myshop_reward_v2 │                                                        │
 │  └─────────────────┘                                                        │
 │                                                                             │
 └─────────────────────────────────────────────────────────────────────────────┘
@@ -249,7 +256,10 @@ Understanding the correct order for creating WoWok objects is crucial for a succ
 | 5     | **Machine Binding**  | Service, Machine     | Bind Machine to Service before publishing. Once published, Machine cannot be bound.                           |
 | 6     | **Arbitration**      | None                 | Arbitration is independent but needs to be bound to Service. Create before Service update.                    |
 | 7     | **Service (Update)** | Guards, Arb, Machine | Update Service with order\_allocators, sales, arbitrations, machine binding. Then publish.                     |
-| 8     | **Reward**           | Service, Guards      | Reward pool needs Service name in guards for claim verification. Create after Service is available.           |
+| 8     | **Empty Reward**     | None                 | Create empty reward object first. This object is referenced by reward guards for double-claim protection.     |
+| 9     | **Reward Guards**    | Reward (by name)     | Create reward guards that reference the reward object by name. Guards verify order node + no prior claim.     |
+| 10    | **Add Guards to Reward** | Reward, Guards   | Add reward guards to the reward object with store\_from\_id set. This enables order-based double-claim protection. |
+| 11    | **Deposit to Reward** | Reward              | Deposit WOW tokens to reward pool for claim distribution.                                                      |
 
 ### Key Design Decisions
 
@@ -259,14 +269,15 @@ Understanding the correct order for creating WoWok objects is crucial for a succ
 4. **Guards Before Machine**: Machine nodes reference guards for verification. Create all guards first, then create Machine with guard references.
 5. **Machine Binding Before Publish**: Bind Machine to Service before publishing. Once published, Machine cannot be bound.
 6. **Arbitration Before Service Update**: Arbitration must be created before Service update so it can be bound to Service.
-6. **Service Publishing Last**: Only publish Service after all guards, machine, and arbitration are ready.
-7. **Reward Last**: Reward references Service address in guards for claim verification. Create after Service is available.
+7. **Service Publishing Last**: Only publish Service after all guards, machine, and arbitration are ready.
+8. **Empty Reward Before Reward Guards**: Create an empty reward object first. Reward guards reference this object by name to verify no double-claiming.
+9. **Reward Guards Before Adding to Reward**: Create reward guards that check both order node and no prior claim, then add them to the reward object with store_from_id set.
 
 ### Simplified Build Sequence
 
 ```
 Phase 1: Foundation
-└── 1. Create Permission (myshop_permission_v2)
+└── 1. Create Permission (myshop_perm_v2)
     └── Add permission indexes (1000 for Order Confirmed/Cancel, 1001 for other operations)
 
 Phase 2: Service Creation
@@ -276,7 +287,7 @@ Phase 2: Service Creation
 
 Phase 3: Guard Creation (Machine Guards)
 └── 3. Create Machine Guards (4 guards)
-    ├── machine_merkle_root_v2 (verify string length = 64)
+    ├── machine_merkle_root_v2 (verify string length = 66)
     ├── machine_service_order_v2 (verify order service + node)
     ├── machine_time_10d_v2 (time >= 10 days)
     └── machine_time_2d_v2 (time >= 2 days)
@@ -307,11 +318,25 @@ Phase 7: Service Configuration
     ├── Add arbitrations binding
     └── Publish service
 
-Phase 8: Reward Pool
-└── 8. Create Reward (myshop_reward_v2)
-    ├── Deposit initial balance
-    ├── Create reward_guards (reward_wonderful_v2, reward_lost_v2, reward_shipping_timeout_v2)
-    └── Add reward_guards (Wonderful: 10000, Lost: 20000, Shipping Timeout: 30000)
+Phase 8: Reward Pool Setup
+└── 8. Create Empty Reward (myshop_reward_v2)
+    └── Create empty reward object first (guards will reference it)
+
+Phase 9: Reward Guards Creation
+└── 9. Create Reward Guards (3 guards)
+    ├── reward_wonderful_v2 (verify Wonderful node + no prior claim)
+    ├── reward_lost_v2 (verify Lost node + no prior claim)
+    └── reward_shipping_timeout_v2 (verify Shipping node + no prior claim)
+
+Phase 10: Reward Guards Configuration
+└── 10. Add Guards to Reward Object
+    ├── Add reward_wonderful_v2 (amount: 10000, store_from_id: 0)
+    ├── Add reward_lost_v2 (amount: 20000, store_from_id: 0)
+    └── Add reward_shipping_timeout_v2 (amount: 20000, store_from_id: 0)
+
+Phase 11: Deposit to Reward Pool
+└── 11. Deposit WOW tokens to reward pool
+    └── Add sufficient balance for all reward payments
 ```
 
 ***
@@ -333,21 +358,22 @@ Ensure both accounts have sufficient testnet WOW tokens.
 
 Create a new permission object for the advanced shop.
 
-**Prompt**: Create permission object "myshop\_permission\_v2".
+**Prompt**: Create permission object "myshop\_perm\_v2".
 
 ```json
 {
   "operation_type": "permission",
   "data": {
     "object": {
-      "name": "myshop_permission_v2",
+      "name": "myshop_perm_v2",
       "replaceExistName": true
     },
     "description": "Permission object for MyShop Advanced e-commerce system"
   },
   "env": {
     "account": "myshop_merchant",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
   }
 }
 ```
@@ -364,11 +390,11 @@ Add custom permission indexes for advanced operations.
 {
   "operation_type": "permission",
   "data": {
-    "object": "myshop_permission_v2",
+    "object": "myshop_perm_v2",
     "remark": {
       "op": "set",
       "index": 1000,
-      "remark": "Order Confirmed and Order Cancel - Merchant confirms or cancels order with Merkle Root"
+      "remark": "Order Confirmed and Order Cancel - Merchant confirms or cancels order"
     },
     "table": {
       "op": "add perm by index",
@@ -380,7 +406,8 @@ Add custom permission indexes for advanced operations.
   },
   "env": {
     "account": "myshop_merchant",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
   }
 }
 ```
@@ -391,11 +418,11 @@ Add custom permission indexes for advanced operations.
 {
   "operation_type": "permission",
   "data": {
-    "object": "myshop_permission_v2",
+    "object": "myshop_perm_v2",
     "remark": {
       "op": "set",
       "index": 1001,
-      "remark": "Shipping, Order Complete, Lost, Return operations - Merchant logistics operations with Merkle Root"
+      "remark": "Shipping, Order Complete, Lost, Return operations - Merchant logistics operations"
     },
     "table": {
       "op": "add perm by index",
@@ -407,7 +434,8 @@ Add custom permission indexes for advanced operations.
   },
   "env": {
     "account": "myshop_merchant",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
   }
 }
 ```
@@ -418,7 +446,7 @@ Add custom permission indexes for advanced operations.
 
 Create the Service without publishing to obtain its address for Guard creation.
 
-**Prompt**: Create Service "three\_body\_signature\_service\_v2" with permission "myshop\_permission\_v2", do not publish.
+**Prompt**: Create Service "three\_body\_signature\_service\_v2" with permission "myshop\_perm\_v2", do not publish.
 
 ```json
 {
@@ -426,14 +454,16 @@ Create the Service without publishing to obtain its address for Guard creation.
   "data": {
     "object": {
       "name": "three_body_signature_service_v2",
-      "permission": "myshop_permission_v2"
+      "replaceExistName": true,
+      "permission": "myshop_perm_v2"
     },
     "description": "Three-Body Problem Signature Edition - Limited collector's item with WIP verification",
-    "publish": false
+    "pause": false
   },
   "env": {
     "account": "myshop_merchant",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
   }
 }
 ```
@@ -446,40 +476,46 @@ Create the Service without publishing to obtain its address for Guard creation.
 
 Create Guards using the Service address. Guards verify order state and service ownership.
 
-**Guard 1: machine_merkle_root_v2** - Verify Merkle Root string length = 64
+> **Pre-Query Step**: Before designing Guards, query available Guard instructions via `wowok_buildin_info` to confirm correct query IDs, parameter types, and return types. This is mandatory per the skill framework.
+>
+> ```json
+> {
+>   "info": "guard instructions",
+>   "filter": { "scope": "all" }
+> }
+> ```
+>
+> Key instructions used in this example:
+> - Query ID 1563 (`order.service`): Returns the Service address of an Order — used to verify order belongs to this service
+> - Query ID for `progress.node_current`: Returns current node name — used to verify order at specific workflow node
+
+**Guard 1: machine_merkle_root_v2** - Verify Merkle Root string length = 66 (0x prefix + 64 hex chars)
 
 ```json
 {
   "operation_type": "guard",
   "data": {
-    "object": {
+    "namedNew": {
       "name": "machine_merkle_root_v2",
       "replaceExistName": true
     },
-    "description": "Verify Merkle Root string length is 64 characters",
+    "description": "Verify Merkle Root string length is 66 characters (0x prefix + 64 hex)",
+    "table": [
+      {"identifier": 0, "b_submission": true, "value_type": "String"},
+      {"identifier": 1, "b_submission": false, "value_type": "U64", "value": "66"}
+    ],
     "root": {
       "type": "logic_as_u256_equal",
       "nodes": [
-        {
-          "type": "string_length",
-          "nodes": [
-            {
-              "type": "identifier",
-              "identifier": 0
-            }
-          ]
-        },
-        {
-          "type": "constant",
-          "value": 64,
-          "value_type": "U256"
-        }
+        {"type": "calc_string_length", "node": {"type": "identifier", "identifier": 0}},
+        {"type": "identifier", "identifier": 1}
       ]
     }
   },
   "env": {
     "account": "myshop_merchant",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
   }
 }
 ```
@@ -490,92 +526,128 @@ Create Guards using the Service address. Guards verify order state and service o
 {
   "operation_type": "guard",
   "data": {
-    "object": {
+    "namedNew": {
       "name": "machine_time_10d_v2",
       "replaceExistName": true
     },
     "description": "Verify time elapsed >= 10 days (864000000 ms)",
+    "table": [
+      {"identifier": 0, "b_submission": true, "value_type": "U64"},
+      {"identifier": 1, "b_submission": false, "value_type": "U64", "value": "864000000"}
+    ],
     "root": {
       "type": "logic_as_u256_greater_or_equal",
       "nodes": [
         {
           "type": "calc_number_subtract",
           "nodes": [
-            {
-              "type": "context",
-              "context": "Clock"
-            },
-            {
-              "type": "identifier",
-              "identifier": 0
-            }
+            {"type": "context", "context": "Clock"},
+            {"type": "identifier", "identifier": 0}
           ]
         },
-        {
-          "type": "identifier",
-          "identifier": 1
-        }
+        {"type": "identifier", "identifier": 1}
       ]
     }
   },
   "env": {
     "account": "myshop_merchant",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
   }
 }
 ```
 
-**Guard 3: service_merchant_win_v2** - Verify node in [Order Complete, Wonderful, Return Fail]
+**Guard 3: machine_time_2d_v2** - Verify 2-day timeout (172800000 ms)
 
 ```json
 {
   "operation_type": "guard",
   "data": {
-    "object": {
-      "name": "service_merchant_win_v2",
+    "namedNew": {
+      "name": "machine_time_2d_v2",
       "replaceExistName": true
     },
-    "description": "Verify order at merchant win nodes: Order Complete, Wonderful, Return Fail",
+    "description": "Verify time elapsed >= 2 days (172800000 ms)",
+    "table": [
+      {"identifier": 0, "b_submission": true, "value_type": "U64"},
+      {"identifier": 1, "b_submission": false, "value_type": "U64", "value": "172800000"}
+    ],
     "root": {
-      "type": "logic_or",
+      "type": "logic_as_u256_greater_or_equal",
       "nodes": [
         {
-          "type": "logic_as_string_equal",
+          "type": "calc_number_subtract",
           "nodes": [
-            {
-              "type": "progress_current_node"
-            },
-            {
-              "type": "constant",
-              "value": "Order Complete",
-              "value_type": "String"
-            }
+            {"type": "context", "context": "Clock"},
+            {"type": "identifier", "identifier": 0}
           ]
         },
+        {"type": "identifier", "identifier": 1}
+      ]
+    }
+  },
+  "env": {
+    "account": "myshop_merchant",
+    "network": "testnet",
+    "no_cache": true
+  }
+}
+```
+
+***
+
+**Guard 4: service_merchant_win_v2** - Verify order at merchant win nodes AND order belongs to this service
+
+```json
+{
+  "operation_type": "guard",
+  "data": {
+    "namedNew": {
+      "name": "service_merchant_win_v2",
+      "replaceExistName": true
+    },
+    "description": "Verify order at merchant win nodes (Order Complete, Wonderful, Return Fail) AND order belongs to three_body_signature_service_v2",
+    "table": [
+      {"identifier": 0, "b_submission": true, "value_type": "Address", "name": "order_id"},
+      {"identifier": 1, "b_submission": false, "value_type": "String", "value": "Order Complete"},
+      {"identifier": 2, "b_submission": false, "value_type": "String", "value": "Wonderful"},
+      {"identifier": 3, "b_submission": false, "value_type": "String", "value": "Return Fail"},
+      {"identifier": 4, "b_submission": false, "value_type": "Address", "name": "service_address", "value": "three_body_signature_service_v2"}
+    ],
+    "root": {
+      "type": "logic_and",
+      "nodes": [
         {
-          "type": "logic_as_string_equal",
+          "type": "logic_or",
           "nodes": [
             {
-              "type": "progress_current_node"
+              "type": "logic_string_nocase_equal",
+              "nodes": [
+                {"type": "query", "query": 1253, "object": {"identifier": 0, "convert_witness": 100}, "parameters": []},
+                {"type": "identifier", "identifier": 1}
+              ]
+            },
+            {
+              "type": "logic_string_nocase_equal",
+              "nodes": [
+                {"type": "query", "query": 1253, "object": {"identifier": 0, "convert_witness": 100}, "parameters": []},
+                {"type": "identifier", "identifier": 2}
+              ]
             },
             {
-              "type": "constant",
-              "value": "Wonderful",
-              "value_type": "String"
+              "type": "logic_string_nocase_equal",
+              "nodes": [
+                {"type": "query", "query": 1253, "object": {"identifier": 0, "convert_witness": 100}, "parameters": []},
+                {"type": "identifier", "identifier": 3}
+              ]
             }
           ]
         },
         {
-          "type": "logic_as_string_equal",
+          "type": "logic_equal",
           "nodes": [
-            {
-              "type": "progress_current_node"
-            },
-            {
-              "type": "constant",
-              "value": "Return Fail",
-              "value_type": "String"
-            }
+            {"type": "query", "query": 1563, "object": {"identifier": 0}, "parameters": []},
+            {"type": "identifier", "identifier": 4}
           ]
         }
       ]
@@ -583,49 +655,102 @@ Create Guards using the Service address. Guards verify order state and service o
   },
   "env": {
     "account": "myshop_merchant",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
   }
 }
 ```
 
-**Guard 4: service_customer_win_v2** - Verify node in [Lost, Return Complete]
+**Guard Logic:**
+1. 验证订单当前节点是 Order Complete、Wonderful 或 Return Fail（商家胜利节点）
+2. 验证订单的 Service 地址等于当前 Guard 所属的 Service 地址（使用 `order.service` 查询指令 ID 1563）
+```
+
+**Guard 5: machine_service_order_v2** - Verify order belongs to this Service
 
 ```json
 {
   "operation_type": "guard",
   "data": {
-    "object": {
+    "namedNew": {
+      "name": "machine_service_order_v2",
+      "replaceExistName": true
+    },
+    "description": "Verify order belongs to three_body_signature_service_v2",
+    "table": [
+      {"identifier": 0, "b_submission": true, "value_type": "Address", "name": "order_id"},
+      {"identifier": 1, "b_submission": false, "value_type": "Address", "name": "service_address", "value": "three_body_signature_service_v2"}
+    ],
+    "root": {
+      "type": "logic_equal",
+      "nodes": [
+        {
+          "type": "query",
+          "query": 1563,
+          "object": {"identifier": 0},
+          "parameters": []
+        },
+        {
+          "type": "identifier",
+          "identifier": 1
+        }
+      ]
+    }
+  },
+  "env": {
+    "account": "myshop_merchant",
+    "network": "testnet",
+    "no_cache": true
+  }
+}
+```
+
+***
+
+**Guard 6: service_customer_win_v2** - Verify order at customer win nodes AND order belongs to this service
+
+```json
+{
+  "operation_type": "guard",
+  "data": {
+    "namedNew": {
       "name": "service_customer_win_v2",
       "replaceExistName": true
     },
-    "description": "Verify order at customer win nodes: Lost, Return Complete",
+    "description": "Verify order at customer win nodes (Lost, Return Complete) AND order belongs to three_body_signature_service_v2",
+    "table": [
+      {"identifier": 0, "b_submission": true, "value_type": "Address", "name": "order_id"},
+      {"identifier": 1, "b_submission": false, "value_type": "String", "value": "Lost"},
+      {"identifier": 2, "b_submission": false, "value_type": "String", "value": "Return Complete"},
+      {"identifier": 3, "b_submission": false, "value_type": "Address", "name": "service_address", "value": "three_body_signature_service_v2"}
+    ],
     "root": {
-      "type": "logic_or",
+      "type": "logic_and",
       "nodes": [
         {
-          "type": "logic_as_string_equal",
+          "type": "logic_or",
           "nodes": [
             {
-              "type": "progress_current_node"
+              "type": "logic_string_nocase_equal",
+              "nodes": [
+                {"type": "query", "query": 1253, "object": {"identifier": 0, "convert_witness": 100}, "parameters": []},
+                {"type": "identifier", "identifier": 1}
+              ]
             },
             {
-              "type": "constant",
-              "value": "Lost",
-              "value_type": "String"
+              "type": "logic_string_nocase_equal",
+              "nodes": [
+                {"type": "query", "query": 1253, "object": {"identifier": 0, "convert_witness": 100}, "parameters": []},
+                {"type": "identifier", "identifier": 2}
+              ]
             }
           ]
         },
         {
-          "type": "logic_as_string_equal",
+          "type": "logic_equal",
           "nodes": [
-            {
-              "type": "progress_current_node"
-            },
-            {
-              "type": "constant",
-              "value": "Return Complete",
-              "value_type": "String"
-            }
+            {"type": "query", "query": 1563, "object": {"identifier": 0}, "parameters": []},
+            {"type": "identifier", "identifier": 3}
           ]
         }
       ]
@@ -633,18 +758,32 @@ Create Guards using the Service address. Guards verify order state and service o
   },
   "env": {
     "account": "myshop_merchant",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
   }
 }
 ```
 
+**Guard Logic:**
+1. 验证订单当前节点是 Lost 或 Return Complete（客户胜利节点）
+2. 验证订单的 Service 地址等于当前 Guard 所属的 Service 地址（使用 `order.service` 查询指令 ID 1563）
+```
+
 ***
 
 ### Step 5: Create Machine (Multi-Path Workflow)
 
 Create Machine with all nodes and guards in a single operation.
 
-**Prompt**: Create Machine "myshop\_advanced\_machine\_v2" with permission "myshop\_permission\_v2" and all nodes.
+**Important Notes on Machine Design**:
+
+1. **Entry Node Constraint (Mandatory)**: At least one node MUST have a pair with `prev_node: ""` (empty string). This defines the entry point from the initial state. Without such a node, Progress cannot advance from its initial empty state. In this example, the "Order Confirmed" node has `prev_node: ""` serving as the entry point.
+
+2. **`namedOperator` for Customer Operations**: In Machine forwards, setting `namedOperator: ""` (empty string) allows the **customer** to operate the Progress through their Order. This is required for all forwards that should be triggered by the customer via the order system. Forwards without `namedOperator` or with a specific named operator require the merchant or designated operator to execute.
+
+3. **Permission Index vs namedOperator**: Each forward MUST specify either `permissionIndex` (shared internal role) OR `namedOperator` (per-Progress namespace). Order user operations MUST use `namedOperator("")`.
+
+**Prompt**: Create Machine "myshop\_advanced\_machine\_v2" with permission "myshop\_perm\_v2" and all nodes.
 
 ```json
 {
@@ -653,7 +792,7 @@ Create Machine with all nodes and guards in a single operation.
     "object": {
       "name": "myshop_advanced_machine_v2",
       "replaceExistName": true,
-      "permission": "myshop_permission_v2"
+      "permission": "myshop_perm_v2"
     },
     "description": "Multi-path order processing with delivery confirmation, wonderful rating, lost handling and return processing - Complete workflow with guards",
     "node": {
@@ -717,8 +856,8 @@ Create Machine with all nodes and guards in a single operation.
               "forwards": [
                 {
                   "name": "Confirm Receipt",
-                  "permissionIndex": 1001,
-                  "weight": 1
+                  "weight": 1,
+                  "namedOperator": ""
                 }
               ]
             }
@@ -733,8 +872,8 @@ Create Machine with all nodes and guards in a single operation.
               "forwards": [
                 {
                   "name": "Rate as Wonderful",
-                  "permissionIndex": 1001,
-                  "weight": 1
+                  "weight": 1,
+                  "namedOperator": ""
                 }
               ]
             }
@@ -777,8 +916,8 @@ Create Machine with all nodes and guards in a single operation.
               "forwards": [
                 {
                   "name": "Report Lost",
-                  "permissionIndex": 1001,
-                  "weight": 1
+                  "weight": 1,
+                  "namedOperator": ""
                 },
                 {
                   "name": "Confirm Lost with Merkle Root",
@@ -799,8 +938,8 @@ Create Machine with all nodes and guards in a single operation.
               "forwards": [
                 {
                   "name": "Request Return",
-                  "permissionIndex": 1001,
-                  "weight": 1
+                  "weight": 1,
+                  "namedOperator": ""
                 },
                 {
                   "name": "Confirm Return with Merkle Root",
@@ -821,8 +960,8 @@ Create Machine with all nodes and guards in a single operation.
               "forwards": [
                 {
                   "name": "Request Return with Receipt",
-                  "permissionIndex": 1001,
-                  "weight": 1
+                  "weight": 1,
+                  "namedOperator": ""
                 },
                 {
                   "name": "Confirm Return Address with Merkle Root",
@@ -860,14 +999,14 @@ Create Machine with all nodes and guards in a single operation.
               "forwards": [
                 {
                   "name": "Submit Return Merkle Root",
-                  "permissionIndex": 1001,
                   "weight": 1,
+                  "namedOperator": "",
                   "guard": { "guard": "machine_merkle_root_v2" }
                 },
                 {
                   "name": "Confirm Return Received",
-                  "permissionIndex": 1001,
-                  "weight": 1
+                  "weight": 1,
+                  "namedOperator": ""
                 }
               ]
             },
@@ -877,14 +1016,14 @@ Create Machine with all nodes and guards in a single operation.
               "forwards": [
                 {
                   "name": "Submit Return Merkle Root",
-                  "permissionIndex": 1001,
                   "weight": 1,
+                  "namedOperator": "",
                   "guard": { "guard": "machine_merkle_root_v2" }
                 },
                 {
                   "name": "Confirm Return Received",
-                  "permissionIndex": 1001,
-                  "weight": 1
+                  "weight": 1,
+                  "namedOperator": ""
                 }
               ]
             }
@@ -895,7 +1034,8 @@ Create Machine with all nodes and guards in a single operation.
   },
   "env": {
     "account": "myshop_merchant",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
   }
 }
 ```
@@ -904,6 +1044,17 @@ Create Machine with all nodes and guards in a single operation.
 
 ### Step 6: Publish Machine
 
+> **Pre-Publish Verification (Mandatory)**: Before publishing, export and review the Machine node structure using `machineNode2file`. Once published, node settings become immutable. Verify all nodes, forwards, guards, and permission indices are correct.
+>
+> ```json
+> {
+>   "object": "myshop_advanced_machine_v2",
+>   "format": "json"
+> }
+> ```
+>
+> Confirm with the user that the exported structure is correct before proceeding to publish.
+
 Machine must be published before binding to Service.
 
 ```json
@@ -915,7 +1066,8 @@ Machine must be published before binding to Service.
   },
   "env": {
     "account": "myshop_merchant",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
   }
 }
 ```
@@ -937,7 +1089,8 @@ Bind the Machine to the Service. **Important**: The Service must be unpublished
   },
   "env": {
     "account": "myshop_merchant",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
   }
 }
 ```
@@ -992,44 +1145,119 @@ Create an Arbitration object as the final on-chain mechanism for protecting user
   },
   "env": {
     "account": "myshop_merchant",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
   }
 }
 ```
 
+**Note**: Arbitration object is automatically published upon creation. No separate publish step is required.
+```
+
 ***
 
-### Step 10: Update Service with Arbitration and Publish
+### Step 10: Configure Order Allocators and Publish
+
+Configure order_allocators to define fund distribution rules, then publish the Service.
+
+> **Pre-Publish Verification (Mandatory)**: Before publishing the Service, verify all bindings are correct: Machine, Arbitration, Rewards, and order_allocators. Once published, all bindings become immutable. Use `query_toolkit` to confirm the Service state:
+>
+> ```json
+> {
+>   "query_type": "service",
+>   "object": "three_body_signature_service_v2",
+>   "network": "testnet",
+>   "no_cache": true
+> }
+> ```
+>
+> Confirm with the user that all bindings and configurations are correct before proceeding to publish.
 
-Update Service with arbitration binding, and publish.
+**IMPORTANT**: Service must have order_allocators configured before publishing. Once published, order_allocators becomes immutable.
 
-**Prompt**: Update service "three\_body\_signature\_service\_v2" with arbitration and publish.
+**Prompt**: Configure order_allocators and publish service "three\_body\_signature\_service\_v2".
 
 ```json
 {
   "operation_type": "service",
   "data": {
     "object": "three_body_signature_service_v2",
+    "sales": {
+      "op": "add",
+      "sales": [
+        {
+          "name": "The Three-Body Problem + Author Signature",
+          "price": 1000000000,
+          "stock": 100,
+          "suspension": false,
+          "wip": "https://wowok.net/test/three_body.wip",
+          "wip_hash": ""
+        }
+      ]
+    },
+    "order_allocators": {
+      "description": "Order fund allocation - 100% to Service when order complete/wonderful/return fail, 100% to Order when lost/return complete",
+      "threshold": 1,
+      "allocators": [
+        {
+          "guard": "service_merchant_win_v2",
+          "sharing": [
+            {
+              "who": {"Entity": {"name_or_address": "three_body_signature_service_v2"}},
+              "sharing": 10000,
+              "mode": "Rate"
+            }
+          ]
+        },
+        {
+          "guard": "service_customer_win_v2",
+          "sharing": [
+            {
+              "who": {"Signer": "signer"},
+              "sharing": 10000,
+              "mode": "Rate"
+            }
+          ]
+        }
+      ]
+    },
     "arbitrations": {
       "op": "add",
       "objects": ["myshop_arbitration_v2"]
     },
+    "rewards": {
+      "op": "add",
+      "objects": ["myshop_reward_v2"]
+    },
     "publish": true
   },
   "env": {
     "account": "myshop_merchant",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
   }
 }
 ```
 
+**Fund Allocation Rules:**
+
+| Guard | Condition | Recipient | Amount |
+|-------|-----------|-----------|--------|
+| service_merchant_win_v2 | Node is Order Complete / Wonderful / Return Fail | Service (merchant) | 100% |
+| service_customer_win_v2 | Node is Lost / Return Complete | Order (customer) | 100% |
+
+**Recipient Types:**
+- **Service**: 资金分配给 Service 对象（商家收款）
+- **Order**: 资金分配给 Order 对象（客户收款，订单所有者可以提取）
+```
+
 ***
 
-### Step 11: Create Reward Pool (Optional)
+### Step 11: Create Empty Reward Object (Optional)
 
-Create reward pool with initial balance for rewards and compensation.
+Create an empty reward object first. This object will be referenced by reward guards to prevent double-claiming.
 
-**Prompt**: Create reward object "myshop\_reward\_v2" with initial balance.
+**Prompt**: Create empty reward object.
 
 ```json
 {
@@ -1037,12 +1265,10 @@ Create reward pool with initial balance for rewards and compensation.
   "data": {
     "object": {
       "name": "myshop_reward_v2",
-      "replaceExistName": true
+      "replaceExistName": true,
+      "permission": "myshop_perm_v2"
     },
-    "description": "Reward pool for MyShop advanced - Wonderful rewards (10000), Lost compensation (20000), Shipping timeout compensation (30000)",
-    "coin_add": {
-      "balance": 150000000
-    }
+    "description": "MyShop reward pool for wonderful service and compensation"
   },
   "env": {
     "account": "myshop_merchant",
@@ -1056,21 +1282,203 @@ Create reward pool with initial balance for rewards and compensation.
 
 ### Step 12: Create Reward Guards (Optional)
 
-Create guards for reward verification:
+Create guards for reward verification with double-claim protection:
 
 | # | Guard Name | Purpose | Reward Amount |
 |---|------------|---------|---------------|
-| 7 | `reward_wonderful_v2` | Verify order at Wonderful node | 10000 |
-| 8 | `reward_lost_v2` | Verify order at Lost node | 20000 |
-| 9 | `reward_shipping_timeout_v2` | Verify order at Shipping node > 2 days | 30000 |
+**Guard 7: reward_wonderful_v2**
+
+```json
+{
+  "operation_type": "guard",
+  "data": {
+    "namedNew": {
+      "name": "reward_wonderful_v2",
+      "replaceExistName": true
+    },
+    "description": "Verify order at Wonderful node for reward, signer must be order owner, order belongs to this service, and not claimed before",
+    "table": [
+      {"identifier": 0, "b_submission": true, "value_type": "Address", "name": "order_id"},
+      {"identifier": 1, "b_submission": false, "value_type": "String", "value": "Wonderful"},
+      {"identifier": 2, "b_submission": false, "value_type": "Address", "value": "myshop_reward_v2", "name": "reward_object"},
+      {"identifier": 3, "b_submission": false, "value_type": "Address", "value": "three_body_signature_service_v2", "name": "service_address"}
+    ],
+    "root": {
+      "type": "logic_and",
+      "nodes": [
+        {
+          "type": "logic_string_nocase_equal",
+          "nodes": [
+            {"type": "query", "query": 1253, "object": {"identifier": 0, "convert_witness": 100}, "parameters": []},
+            {"type": "identifier", "identifier": 1}
+          ]
+        },
+        {
+          "type": "logic_equal",
+          "nodes": [
+            {"type": "query", "query": 1562, "object": {"identifier": 0}, "parameters": []},
+            {"type": "context", "context": "Signer"}
+          ]
+        },
+        {
+          "type": "logic_equal",
+          "nodes": [
+            {"type": "query", "query": 1563, "object": {"identifier": 0}, "parameters": []},
+            {"type": "identifier", "identifier": 3}
+          ]
+        },
+        {
+          "type": "logic_not",
+          "node": {
+            "type": "query_reward_record_exists",
+            "object": {"identifier": 2},
+            "where": {
+              "storeFromId": {"identifier": 0}
+            }
+          }
+        }
+      ]
+    }
+  },
+  "env": {
+    "account": "myshop_merchant",
+    "network": "testnet",
+    "no_cache": true
+  }
+}
+```
+
+**Guard 8: reward_lost_v2**
+
+```json
+{
+  "operation_type": "guard",
+  "data": {
+    "namedNew": {
+      "name": "reward_lost_v2",
+      "replaceExistName": true
+    },
+    "description": "Verify order at Lost node for compensation, signer must be order owner, order belongs to this service, and not claimed before",
+    "table": [
+      {"identifier": 0, "b_submission": true, "value_type": "Address", "name": "order_id"},
+      {"identifier": 1, "b_submission": false, "value_type": "String", "value": "Lost"},
+      {"identifier": 2, "b_submission": false, "value_type": "Address", "value": "myshop_reward_v2", "name": "reward_object"},
+      {"identifier": 3, "b_submission": false, "value_type": "Address", "value": "three_body_signature_service_v2", "name": "service_address"}
+    ],
+    "root": {
+      "type": "logic_and",
+      "nodes": [
+        {
+          "type": "logic_string_nocase_equal",
+          "nodes": [
+            {"type": "query", "query": 1253, "object": {"identifier": 0, "convert_witness": 100}, "parameters": []},
+            {"type": "identifier", "identifier": 1}
+          ]
+        },
+        {
+          "type": "logic_equal",
+          "nodes": [
+            {"type": "query", "query": 1562, "object": {"identifier": 0}, "parameters": []},
+            {"type": "context", "context": "Signer"}
+          ]
+        },
+        {
+          "type": "logic_equal",
+          "nodes": [
+            {"type": "query", "query": 1563, "object": {"identifier": 0}, "parameters": []},
+            {"type": "identifier", "identifier": 3}
+          ]
+        },
+        {
+          "type": "logic_not",
+          "node": {
+            "type": "query_reward_record_exists",
+            "object": {"identifier": 2},
+            "where": {
+              "storeFromId": {"identifier": 0}
+            }
+          }
+        }
+      ]
+    }
+  },
+  "env": {
+    "account": "myshop_merchant",
+    "network": "testnet",
+    "no_cache": true
+  }
+}
+```
+
+**Guard 9: reward_shipping_timeout_v2**
+
+```json
+{
+  "operation_type": "guard",
+  "data": {
+    "namedNew": {
+      "name": "reward_shipping_timeout_v2",
+      "replaceExistName": true
+    },
+    "description": "Verify order at Shipping node for timeout compensation, signer must be order owner, order belongs to this service, and not claimed before",
+    "table": [
+      {"identifier": 0, "b_submission": true, "value_type": "Address", "name": "order_id"},
+      {"identifier": 1, "b_submission": false, "value_type": "String", "value": "Shipping"},
+      {"identifier": 2, "b_submission": false, "value_type": "Address", "value": "myshop_reward_v2", "name": "reward_object"},
+      {"identifier": 3, "b_submission": false, "value_type": "Address", "value": "three_body_signature_service_v2", "name": "service_address"}
+    ],
+    "root": {
+      "type": "logic_and",
+      "nodes": [
+        {
+          "type": "logic_string_nocase_equal",
+          "nodes": [
+            {"type": "query", "query": 1253, "object": {"identifier": 0, "convert_witness": 100}, "parameters": []},
+            {"type": "identifier", "identifier": 1}
+          ]
+        },
+        {
+          "type": "logic_equal",
+          "nodes": [
+            {"type": "query", "query": 1562, "object": {"identifier": 0}, "parameters": []},
+            {"type": "context", "context": "Signer"}
+          ]
+        },
+        {
+          "type": "logic_equal",
+          "nodes": [
+            {"type": "query", "query": 1563, "object": {"identifier": 0}, "parameters": []},
+            {"type": "identifier", "identifier": 3}
+          ]
+        },
+        {
+          "type": "logic_not",
+          "node": {
+            "type": "query_reward_record_exists",
+            "object": {"identifier": 2},
+            "where": {
+              "storeFromId": {"identifier": 0}
+            }
+          }
+        }
+      ]
+    }
+  },
+  "env": {
+    "account": "myshop_merchant",
+    "network": "testnet",
+    "no_cache": true
+  }
+}
+```
 
 ***
 
-### Step 13: Add Reward Guards (Optional)
+### Step 13: Add Reward Guards to Reward Object (Optional)
 
-Add reward guards for Wonderful (10000), Lost (20000), and Shipping timeout (30000) compensation.
+Add reward guards to the reward object with `store_from_id` set to the order identifier. This enables double-claim protection by storing the order ID in reward records.
 
-**Prompt**: Add reward guards.
+**Prompt**: Add reward guards with store_from_id.
 
 ```json
 {
@@ -1081,25 +1489,54 @@ Add reward guards for Wonderful (10000), Lost (20000), and Shipping timeout (300
       {
         "guard": "reward_wonderful_v2",
         "recipient": {"Signer": "signer"},
-        "amount": {"type": "Fixed", "value": 10000}
+        "amount": {"type": "Fixed", "value": 10000},
+        "store_from_id": 0
       },
       {
         "guard": "reward_lost_v2",
         "recipient": {"Signer": "signer"},
-        "amount": {"type": "Fixed", "value": 20000}
+        "amount": {"type": "Fixed", "value": 20000},
+        "store_from_id": 0
       },
       {
         "guard": "reward_shipping_timeout_v2",
         "recipient": {"Signer": "signer"},
-        "amount": {"type": "Fixed", "value": 30000}
+        "amount": {"type": "Fixed", "value": 20000},
+        "store_from_id": 0
       }
     ]
   },
   "env": {
     "account": "myshop_merchant",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
+  }
+}
+
+***
+
+### Step 14: Deposit to Reward Pool (Optional)
+
+Deposit WOW tokens to the reward pool for rewards and compensation.
+
+**Prompt**: Deposit to reward object "myshop\_reward\_v2".
+
+```json
+{
+  "operation_type": "reward",
+  "data": {
+    "object": "myshop_reward_v2",
+    "coin_add": {
+      "balance": 150000000
+    }
+  },
+  "env": {
+    "account": "myshop_merchant",
+    "network": "testnet",
+    "no_cache": true
   }
 }
+```
 
 ***
 
@@ -1122,28 +1559,32 @@ Customer places an order for "The Three-Body Problem + Author Signature" with WI
           {
             "name": "The Three-Body Problem + Author Signature",
             "stock": 1,
-            "wip_hash": "sha256:1db6dc86d8be68bafb33418628a30e7bfcbce48de9c099d3d9cb21def3af8b43"
+            "wip_hash": "03c18561efa8faf4d75480eb1f732c4a46ffde95599e92eca06167785fc07a5b"
           }
         ],
         "total_pay": {
-          "balance": 5000000000
+          "balance": 1000000000
         },
-        "order_info": "To my dear friend - keep exploring the universe"
+        "payment_remark": "To my dear friend - keep exploring the universe"
       },
       "namedNewOrder": {
-        "name": "myshop_order_v2"
+        "name": "myshop_order_v2",
+        "replaceExistName": true
       },
       "namedNewAllocation": {
-        "name": "myshop_allocation_v2"
+        "name": "myshop_allocation_v2",
+        "replaceExistName": true
       },
       "namedNewProgress": {
-        "name": "myshop_progress_v2"
+        "name": "myshop_progress_v2",
+        "replaceExistName": true
       }
     }
   },
   "env": {
     "account": "myshop_customer",
-    "network": "testnet"
+    "network": "testnet",
+    "no_cache": true
   }
 }
 ```
@@ -1152,9 +1593,9 @@ Customer places an order for "The Three-Body Problem + Author Signature" with WI
 
 ### Step 2: Merchant Confirms Order
 
-Merchant confirms order by submitting Merkle Root.
+Merchant confirms the order. This step uses permission index 1000 (no Guard submission needed).
 
-**Prompt**: Merchant confirms order with Merkle Root.
+**Prompt**: Merchant confirms order.
 
 ```json
 {
@@ -1164,34 +1605,11 @@ Merchant confirms order by submitting Merkle Root.
     "operate": {
       "operation": {
         "next_node_name": "Order Confirmed",
-        "forward": "Submit Messenger Merkle Root"
+        "forward": "Confirm Order"
       },
-      "hold": false,
-      "message": "Order confirmed - Merkle Root submitted"
+      "message": "Order confirmed by merchant"
     }
   },
-  "submission": {
-    "type": "submission",
-    "guard": [
-      {
-        "object": "machine_merkle_root_v2",
-        "impack": true
-      }
-    ],
-    "submission": [
-      {
-        "guard": "machine_merkle_root_v2",
-        "submission": [
-          {
-            "identifier": 0,
-            "b_submission": true,
-            "value_type": "String",
-            "value": "0xabc123...def456"
-          }
-        ]
-      }
-    ]
-  },
   "env": {
     "account": "myshop_merchant",
     "network": "testnet",
@@ -1204,9 +1622,9 @@ Merchant confirms order by submitting Merkle Root.
 
 ### Step 3: Merchant Starts Shipping
 
-Merchant starts shipping after signature service is completed.
+Merchant starts shipping after signature service is completed. The merchant submits a Merkle Root (66-character hex string with 0x prefix) proving communication with the customer via Messenger.
 
-**Prompt**: Merchant starts shipping with signature verification and Merkle Root.
+**Prompt**: Merchant starts shipping with Merkle Root submission.
 
 ```json
 {
@@ -1218,7 +1636,6 @@ Merchant starts shipping after signature service is completed.
         "next_node_name": "Shipping",
         "forward": "Confirm Signature and Submit Merkle Root"
       },
-      "hold": false,
       "message": "Shipping started - signature completed and Merkle Root submitted"
     }
   },
@@ -1226,25 +1643,19 @@ Merchant starts shipping after signature service is completed.
     "type": "submission",
     "guard": [
       {
-        "object": "machine_service_order_v2",
+        "object": "machine_merkle_root_v2",
         "impack": true
       }
     ],
     "submission": [
       {
-        "guard": "machine_service_order_v2",
+        "guard": "machine_merkle_root_v2",
         "submission": [
           {
             "identifier": 0,
             "b_submission": true,
-            "value_type": "Address",
-            "value": "myshop_order_v2"
-          },
-          {
-            "identifier": 1,
-            "b_submission": true,
-            "value_type": "Address",
-            "value": "three_body_signature_service_v2"
+            "value_type": "String",
+            "value": "0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
           }
         ]
       }
@@ -1258,6 +1669,8 @@ Merchant starts shipping after signature service is completed.
 }
 ```
 
+**Note**: The `machine_merkle_root_v2` Guard expects a 66-character string (including "0x" prefix). The Guard validates that the string length equals 66 characters. The Merkle Root is computed from the Messenger conversation between merchant and customer, proving that tracking information was exchanged.
+
 ***
 
 ### Step 4: Customer Confirms Delivery
@@ -1268,15 +1681,14 @@ Customer confirms receipt of goods.
 
 ```json
 {
-  "operation_type": "progress",
+  "operation_type": "order",
   "data": {
-    "object": "myshop_progress_v2",
-    "operate": {
+    "object": "myshop_order_v2",
+    "progress": {
       "operation": {
         "next_node_name": "Delivery Complete",
         "forward": "Confirm Receipt"
       },
-      "hold": false,
       "message": "Delivery confirmed - goods received"
     }
   },
@@ -1298,15 +1710,14 @@ Alternatively, customer can rate as Wonderful (very satisfied).
 
 ```json
 {
-  "operation_type": "progress",
+  "operation_type": "order",
   "data": {
-    "object": "myshop_progress_v2",
-    "operate": {
+    "object": "myshop_order_v2",
+    "progress": {
       "operation": {
         "next_node_name": "Wonderful",
-        "forward": "Rate Wonderful"
+        "forward": "Rate as Wonderful"
       },
-      "hold": false,
       "message": "Rated as Wonderful - very satisfied with the service"
     }
   },
@@ -1331,22 +1742,19 @@ Customer claims Wonderful reward from reward pool.
   "operation_type": "reward",
   "data": {
     "object": "myshop_reward_v2",
-    "claim": {
-      "guard": "guard_wonderful_v2",
-      "reward_object": "myshop_order_v2"
-    }
+    "claim": "reward_wonderful_v2"
   },
   "submission": {
     "type": "submission",
     "guard": [
       {
-        "object": "guard_wonderful_v2",
+        "object": "reward_wonderful_v2",
         "impack": true
       }
     ],
     "submission": [
       {
-        "guard": "guard_wonderful_v2",
+        "guard": "reward_wonderful_v2",
         "submission": [
           {
             "identifier": 0,
@@ -1526,7 +1934,7 @@ If package is lost, customer reports and merchant confirms.
             "identifier": 0,
             "b_submission": true,
             "value_type": "String",
-            "value": "0xlost123...merkle456"
+            "value": "0xbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
           }
         ]
       }
@@ -1547,22 +1955,19 @@ If package is lost, customer reports and merchant confirms.
   "operation_type": "reward",
   "data": {
     "object": "myshop_reward_v2",
-    "claim": {
-      "guard": "guard_lost_v2",
-      "reward_object": "myshop_order_v2"
-    }
+    "claim": "reward_lost_v2"
   },
   "submission": {
     "type": "submission",
     "guard": [
       {
-        "object": "guard_lost_v2",
+        "object": "reward_lost_v2",
         "impack": true
       }
     ],
     "submission": [
       {
-        "guard": "guard_lost_v2",
+        "guard": "reward_lost_v2",
         "submission": [
           {
             "identifier": 0,
@@ -1644,7 +2049,7 @@ Customer requests return after delivery confirmation.
             "identifier": 0,
             "b_submission": true,
             "value_type": "String",
-            "value": "0xreturn789...addr012"
+            "value": "0xcccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
           }
         ]
       }
@@ -1690,7 +2095,7 @@ Customer requests return after delivery confirmation.
             "identifier": 0,
             "b_submission": true,
             "value_type": "String",
-            "value": "0xshipreturn...track345"
+            "value": "0xdddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
           }
         ]
       }
@@ -1813,7 +2218,7 @@ When order reaches Order Complete, Wonderful, or Return Fail, merchant can withd
             "identifier": 0,
             "b_submission": true,
             "value_type": "Address",
-            "value": "myshop_progress_v2"
+            "value": "myshop_order_v2"
           }
         ]
       }
@@ -1858,7 +2263,7 @@ When order reaches Lost or Return Complete, customer can withdraw funds.
             "identifier": 0,
             "b_submission": true,
             "value_type": "Address",
-            "value": "myshop_progress_v2"
+            "value": "myshop_order_v2"
           }
         ]
       }