cyberdyne-mcp 0.7.1 → 0.7.3

package/README.md

@@ -88,7 +88,7 @@ An agent already running inside an LLM with this MCP connected can **self-onboar
 with zero web interaction** by calling the `onboard` tool — it's the one tool that
 works without an existing key and bootstraps everything else. (The `onboard` tool
 generates/reuses a wallet; to **import** your own, use the `--import` CLI.) After
-that, fund the agent's OWN wallet with USDC (or BNKR/GITLAWB) plus a little ETH for
+that, fund the agent's OWN wallet with USDC (or BNKR, or any registered Bankr-launched token) plus a little ETH for
 gas on Base — the non-custodial pool freezes each budget directly from that wallet
 at deploy; there is no platform treasury to deposit into.
 
@@ -111,7 +111,7 @@ npx -y cyberdyne-mcp tasks                          # list your posted tasks + s
 
 | Command | Usage | What it does |
 |---|---|---|
-| `post` | `cyberdyne-mcp post --title <t> --reward <n> [--token USDC\|BNKR\|GITLAWB] [--quantity <n>] [--category <c>] [--action follow\|retweet\|reply\|quote\|original-post] [--url <x.com/…>] [--bankr-wallet]` | Like `bankr launch`. Opens a task. On the **pool** rail (default for BNKR/GITLAWB or `--quantity>1`) it autonomously signs the budget, pays the deploy fee, and authorizes — printing each stage and the final task id + `escrow_status`. Add `--bankr-wallet` to fund from your Bankr custodial wallet (no key export). |
+| `post` | `cyberdyne-mcp post --title <t> --reward <n> [--token USDC\|BNKR\|0x…] [--quantity <n>] [--category <c>] [--action follow\|retweet\|reply\|quote\|original-post] [--url <x.com/…>] [--bankr-wallet]` | Like `bankr launch`. Opens a task. On the **pool** rail (default for BNKR / ecosystem tokens or `--quantity>1`) it autonomously signs the budget, pays the deploy fee, and authorizes — printing each stage and the final task id + `escrow_status`. Add `--bankr-wallet` to fund from your Bankr custodial wallet (no key export). |
 | `launch-and-fund` | `cyberdyne-mcp launch-and-fund --token <0x…> --title <t> --reward <n> [--quantity <n>]` | Fund an engagement quest **in your own Bankr-launched token**, paid to verified humans (funds from your Bankr wallet by default). CYBERDYNE never launches a token — launch yours on Bankr first, then fund quests in it. |
 | `bankr-login` | `cyberdyne-mcp bankr-login [--private-key <0x…>] [--partner-key <k>]` | Headless SIWE → mint a Bankr `bk_` key with your wallet (zero-browser, no email OTP). Printed once; set it as `CYBERDYNE_BANKR_KEY`. Wallet API on by default; Agent API may need enabling at bankr.bot/api. |
 | `tasks` | `cyberdyne-mcp tasks` | Lists your own posted tasks: id, title, token, quantity, filled/remaining, status. |
@@ -143,7 +143,7 @@ via `CYBERDYNE_IDENTITY_TOKEN`, a saved `onboard`/`login`, or the `onboard` tool
 
 An agent cannot submit proof on a human's behalf — the **submit-proof step is
 human-only and happens in the app/UI**. Funding is **non-custodial**: hold the pay
-token (USDC/BNKR/GITLAWB) and a little ETH for gas in your own wallet on Base — the
+token (USDC, BNKR, or any registered Bankr-launched token) and a little ETH for gas in your own wallet on Base — the
 budget is frozen straight from it at `authorize_task`.
 
 There is **one** settlement model: the **non-custodial FCFS pool bounty**. You
@@ -298,8 +298,8 @@ CYBERDYNE is native to the Bankr ecosystem and consumes it where it helps — th
 | **Discoverable by Bankr agents** | an x402 "front door" published to Bankr's x402 Cloud discovery index | platform-side |
 | **LLM proof-grading on Bankr** | submission grading routes through the Bankr LLM gateway (Anthropic-compatible, Anthropic fallback) | platform-side |
 
-¹ USDC (EIP-3009) funds custodially with no allowance; ecosystem tokens (BNKR/GITLAWB/
-Permit2) also need a one-time ERC-20→Permit2 approval from the Bankr wallet first. BETA:
+¹ USDC (EIP-3009) funds custodially with no allowance; ecosystem tokens (BNKR / any
+Permit2 ecosystem token) also need a one-time ERC-20→Permit2 approval from the Bankr wallet first. BETA:
 the local-wallet path (`post` without `--bankr-wallet`) is the certified default.
 
 ### …or install the plugin (skill + MCP together)

package/dist/bankr-signer.js

@@ -10,11 +10,20 @@
  * whose signTypedData/signMessage forward to Bankr's custodial signer. So the payload shape
  * is identical to the certified local path; only the signature source differs.
  *
- * STATUS: this path requires a valid bk_ key with Bankr Agent API access and has NOT yet
- * been certified end-to-end on mainnet (the proven default remains the local-wallet path in
- * evm-signer.ts). It is opt-in only (`post --bankr-wallet` / CYBERDYNE_SIGNER=bankr).
+ * STATUS: BETA, opt-in only (`post --bankr-wallet` / CYBERDYNE_SIGNER=bankr); the proven
+ * default remains the local-wallet path in evm-signer.ts. Requires a read-WRITE bk_ key.
  *
- * Permit2-method tokens (BNKR/GITLAWB/non-EIP-3009) need a one-time ERC-20→Permit2 approval
+ * ⚠️ HARD REQUIREMENT — works ONLY with a FULLY BANKR-MANAGED wallet (one Bankr itself
+ * holds the key for). It does NOT work when the Bankr account's wallet is an EXTERNAL wallet
+ * you linked (e.g. a MetaMask address): in that case Bankr signs `/wallet/sign` with its own
+ * hidden managed key, NOT your linked address — so the EIP-3009/Permit2 `from` (your linked
+ * address, per /wallet/me) won't match the actual signer, and the on-chain `authorize`
+ * REVERTS ("authorize_reverted"). Verified on mainnet 2026-06-14: a linked-wallet account
+ * (/wallet/me = 0x32ac…) signed with a different key (recovered 0x6F3C…) → revert. For this
+ * path, the funded wallet, the signer, and the agent's platform wallet_address must all be
+ * the SAME Bankr-managed address.
+ *
+ * Permit2-method tokens (BNKR / any non-EIP-3009 ecosystem token) need a one-time ERC-20→Permit2 approval
  * sent from the wallet before the budget can freeze. Sending that approval from a custodial
  * Bankr wallet is not automated here, so we READ the allowance first and fail with a clear,
  * actionable error if it's missing — rather than producing a signature that would revert at

package/dist/bankr.js

@@ -81,7 +81,11 @@ async function call(method, path, opts = {}) {
             ...authHeaders(key),
             ...(opts.body !== undefined ? { "content-type": "application/json" } : {}),
         },
-        ...(opts.body !== undefined ? { body: JSON.stringify(opts.body) } : {}),
+        // BigInt-safe: EIP-712 typed data (from @x402/evm) carries uint values as BigInt,
+        // which plain JSON.stringify can't serialize — emit them as decimal strings.
+        ...(opts.body !== undefined
+            ? { body: JSON.stringify(opts.body, (_k, v) => (typeof v === "bigint" ? v.toString() : v)) }
+            : {}),
         signal: AbortSignal.timeout(20_000),
     });
     const json = (await res.json().catch(() => ({})));
@@ -98,7 +102,12 @@ export async function bankrWalletMe(key) {
 /** Resolve the canonical Bankr EVM wallet address (walletAddress | evmAddress | address). */
 export async function bankrWalletAddress(key) {
     const me = await bankrWalletMe(key);
-    const addr = me.walletAddress || me.evmAddress || me.address;
+    // Bankr's /wallet/me returns wallets:[{chain:"evm",address},{chain:"solana",…}] — read the
+    // EVM entry — with top-level walletAddress/evmAddress/address as fallbacks.
+    const fromArr = Array.isArray(me.wallets)
+        ? me.wallets.find((w) => String(w?.chain).toLowerCase() === "evm")?.address
+        : undefined;
+    const addr = me.walletAddress || me.evmAddress || me.address || fromArr;
     if (typeof addr !== "string" || !/^0x[0-9a-fA-F]{40}$/.test(addr)) {
         throw new BankrApiError(200, "/wallet/me", "no EVM wallet address in response");
     }

package/dist/cli.js

@@ -64,7 +64,7 @@ function describe(e) {
 }
 // ── post (bankr launch) ──────────────────────────────────────────────────────
 // Open a task. Per-unit `--reward` × `--quantity` = the budget. On the pool rail
-// (BNKR/GITLAWB/any dynamic token or quantity>1) the response carries authIntent +
+// (BNKR / any ecosystem or dynamic token or quantity>1) the response carries authIntent +
 // deployFee: sign the budget + pay the fee + authorize, all from the saved wallet.
 export async function runPost(argv) {
     if (!hasKey())
@@ -76,7 +76,7 @@ export async function runPost(argv) {
     const rewardPerUnit = Number(f.reward);
     if (!Number.isFinite(rewardPerUnit) || rewardPerUnit <= 0)
         fail("--reward <n> is required (per-unit, in the pay token)");
-    // Pay token: a curated symbol (USDC / BNKR / GITLAWB) OR a 0x… address for a
+    // Pay token: a curated symbol (USDC / BNKR) OR a 0x… address for a
     // DYNAMIC registry token — i.e. ANY Bankr-launched token that's been added to the
     // platform's token registry. The backend resolves + validates it (rejects unknown
     // symbols / unregistered or disabled addresses), so we pass it through verbatim.
@@ -89,7 +89,7 @@ export async function runPost(argv) {
     const category = (f.category ?? "social").trim();
     const action = f.action?.trim();
     const url = f.url?.trim();
-    // Rail: default pool when token is a real ecosystem token (BNKR/GITLAWB) or it's
+    // Rail: default pool when token is a real ecosystem token (BNKR / any Bankr-launched token) or it's
     // a multi-unit bounty; else custodial single-hold. `--rail` overrides.
     const railFlag = f.rail?.trim().toLowerCase();
     const rail = railFlag === "pool" || railFlag === "custodial"

package/dist/evm-signer.js

@@ -117,7 +117,7 @@ const ERC20_PERMIT2_ABI = [
     { name: "approve", type: "function", stateMutability: "nonpayable", inputs: [{ name: "spender", type: "address" }, { name: "amount", type: "uint256" }], outputs: [{ type: "bool" }] },
 ];
 /**
- * Permit2-method tokens (BNKR / GITLAWB / any non-EIP-3009 ERC-20) require a ONE-TIME
+ * Permit2-method tokens (BNKR / any non-EIP-3009 ERC-20) require a ONE-TIME
  * ERC-20 approval to the canonical Permit2 contract before the operator's on-chain
  * `authorize` can pull the frozen budget. The agent signs the Permit2 transfer
  * authorization, but the underlying ERC-20→Permit2 allowance is a SEPARATE on-chain tx

package/dist/onboard.js

@@ -180,8 +180,9 @@ export async function onboard(env = process.env, opts = {}) {
         }
     }
     const jar = new Map();
-    // 1. nonce
-    const nonceRes = await fetch(`${apiUrl}/api/auth/siwe/nonce`, { headers: { accept: "application/json" } });
+    // 1. nonce — the platform binds the nonce to the signer address (hardening), so the
+    //    nonce endpoint REQUIRES ?address=<wallet>; omitting it returns 400.
+    const nonceRes = await fetch(`${apiUrl}/api/auth/siwe/nonce?address=${address}`, { headers: { accept: "application/json" } });
     if (!nonceRes.ok)
         throw new Error(`GET /api/auth/siwe/nonce → ${nonceRes.status}`);
     collectCookies(nonceRes, jar); // carry siwe-nonce to verify

package/dist/server.js

@@ -246,9 +246,9 @@ server.tool("post_task", "Fund a quest on the engagement marketplace (an FCFS po
     quantity: z.number().int().positive().optional().describe("Number of identical units (default 1)."),
     duration_min: z.number().int().positive().describe("Estimated minutes to complete."),
     difficulty: z.enum(["easy", "medium", "hard"]),
-    // Free string, not an enum: the backend accepts USDC / BNKR / GITLAWB (the real pool
-    // tokens) OR a 0x… address for ANY registered Bankr-launched (dynamic) token. The old
-    // enum wrongly omitted GITLAWB (rejected client-side) and offered CYOS (always 422).
+    // Free string, not an enum: the backend accepts USDC / BNKR (the real pool tokens)
+    // OR a 0x… address for ANY registered Bankr-launched (dynamic) token. The old enum
+    // wrongly omitted registered ecosystem tokens (rejected client-side) and offered CYOS (always 422).
     pay_token: z.string().optional().describe("Settlement token: USDC, BNKR, GITLAWB, or a 0x… address for any registered Bankr-launched token (default USDC)."),
     deadline_hours: z.number().int().positive().optional(),
     social_action: z.enum(["follow", "retweet", "reply", "quote", "original-post"]).optional().describe("For category 'social': the X action a human must perform."),

package/examples/README.md

@@ -52,8 +52,8 @@ npx -y cyberdyne-mcp launch-and-fund \
 
 - Requires a **valid `bk_` key with Bankr Agent-API access** (Bankr Club). A key without it
   returns `401` on `/wallet/*`.
-- USDC (EIP-3009) funds custodially with no allowance. **Ecosystem tokens (BNKR/GITLAWB/
-  Permit2)** also need a one-time ERC-20→Permit2 approval sent from the Bankr wallet before
+- USDC (EIP-3009) funds custodially with no allowance. **Ecosystem tokens (BNKR / any
+  Permit2 ecosystem token)** also need a one-time ERC-20→Permit2 approval sent from the Bankr wallet before
   the budget can freeze — until then, fund those from a local wallet, or pre-approve Permit2.
 - BETA: not yet certified end-to-end on mainnet. The local-wallet path (`post` without
   `--bankr-wallet`) is the certified default.

package/examples/bankr-fund.mjs

@@ -15,8 +15,8 @@
  *
  * Run:  node examples/bankr-fund.mjs
  *
- * NOTE: this funds in USDC (EIP-3009 — no allowance needed). Ecosystem tokens (BNKR/
- * GITLAWB/Permit2) additionally need a one-time ERC-20→Permit2 approval sent from the
+ * NOTE: this funds in USDC (EIP-3009 — no allowance needed). Ecosystem tokens (BNKR /
+ * any Permit2 ecosystem token) additionally need a one-time ERC-20→Permit2 approval sent from the
  * Bankr wallet before the budget can freeze (see ../src/bankr-signer.ts). Uses cents.
  */
 import {

package/llms.txt

@@ -46,7 +46,7 @@ License: MIT
 ## Flow
 
 The human submit-proof step is human-only (in the app/UI). Funding is non-custodial:
-hold USDC (or BNKR/GITLAWB) + a little ETH for gas in your OWN wallet on Base — the
+hold USDC (or BNKR, or any registered Bankr-launched token) + a little ETH for gas in your OWN wallet on Base — the
 pool freezes the budget directly from your wallet at deploy; there is NO platform
 treasury to deposit into. There is ONE settlement model — the non-custodial FCFS
 pool bounty. There is NO direct hire:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cyberdyne-mcp",
-  "version": "0.7.1",
+  "version": "0.7.3",
   "mcpName": "io.github.Cyberdyne-OS/cyberdyne-mcp",
   "publishConfig": {
     "access": "public"

package/src/bankr-signer.ts

@@ -10,11 +10,20 @@
  * whose signTypedData/signMessage forward to Bankr's custodial signer. So the payload shape
  * is identical to the certified local path; only the signature source differs.
  *
- * STATUS: this path requires a valid bk_ key with Bankr Agent API access and has NOT yet
- * been certified end-to-end on mainnet (the proven default remains the local-wallet path in
- * evm-signer.ts). It is opt-in only (`post --bankr-wallet` / CYBERDYNE_SIGNER=bankr).
+ * STATUS: BETA, opt-in only (`post --bankr-wallet` / CYBERDYNE_SIGNER=bankr); the proven
+ * default remains the local-wallet path in evm-signer.ts. Requires a read-WRITE bk_ key.
  *
- * Permit2-method tokens (BNKR/GITLAWB/non-EIP-3009) need a one-time ERC-20→Permit2 approval
+ * ⚠️ HARD REQUIREMENT — works ONLY with a FULLY BANKR-MANAGED wallet (one Bankr itself
+ * holds the key for). It does NOT work when the Bankr account's wallet is an EXTERNAL wallet
+ * you linked (e.g. a MetaMask address): in that case Bankr signs `/wallet/sign` with its own
+ * hidden managed key, NOT your linked address — so the EIP-3009/Permit2 `from` (your linked
+ * address, per /wallet/me) won't match the actual signer, and the on-chain `authorize`
+ * REVERTS ("authorize_reverted"). Verified on mainnet 2026-06-14: a linked-wallet account
+ * (/wallet/me = 0x32ac…) signed with a different key (recovered 0x6F3C…) → revert. For this
+ * path, the funded wallet, the signer, and the agent's platform wallet_address must all be
+ * the SAME Bankr-managed address.
+ *
+ * Permit2-method tokens (BNKR / any non-EIP-3009 ecosystem token) need a one-time ERC-20→Permit2 approval
  * sent from the wallet before the budget can freeze. Sending that approval from a custodial
  * Bankr wallet is not automated here, so we READ the allowance first and fail with a clear,
  * actionable error if it's missing — rather than producing a signature that would revert at

package/src/bankr.ts

@@ -84,7 +84,11 @@ async function call<T>(
       ...authHeaders(key),
       ...(opts.body !== undefined ? { "content-type": "application/json" } : {}),
     },
-    ...(opts.body !== undefined ? { body: JSON.stringify(opts.body) } : {}),
+    // BigInt-safe: EIP-712 typed data (from @x402/evm) carries uint values as BigInt,
+    // which plain JSON.stringify can't serialize — emit them as decimal strings.
+    ...(opts.body !== undefined
+      ? { body: JSON.stringify(opts.body, (_k, v) => (typeof v === "bigint" ? v.toString() : v)) }
+      : {}),
     signal: AbortSignal.timeout(20_000),
   });
   const json = (await res.json().catch(() => ({}))) as Record<string, unknown>;
@@ -98,10 +102,12 @@ async function call<T>(
 // ── wallet ──────────────────────────────────────────────────────────────────
 
 export interface BankrWalletMe {
-  /** The agent's canonical Bankr-managed (Privy) wallet address on EVM chains. */
+  /** The agent's canonical Bankr wallet address on EVM chains. */
   walletAddress?: string;
   evmAddress?: string;
   address?: string;
+  /** Bankr's actual /wallet/me shape: per-chain wallets, e.g. [{chain:"evm",address}]. */
+  wallets?: Array<{ chain?: string; address?: string }>;
   [k: string]: unknown;
 }
 
@@ -113,7 +119,12 @@ export async function bankrWalletMe(key?: string): Promise<BankrWalletMe> {
 /** Resolve the canonical Bankr EVM wallet address (walletAddress | evmAddress | address). */
 export async function bankrWalletAddress(key?: string): Promise<string> {
   const me = await bankrWalletMe(key);
-  const addr = me.walletAddress || me.evmAddress || me.address;
+  // Bankr's /wallet/me returns wallets:[{chain:"evm",address},{chain:"solana",…}] — read the
+  // EVM entry — with top-level walletAddress/evmAddress/address as fallbacks.
+  const fromArr = Array.isArray(me.wallets)
+    ? me.wallets.find((w) => String(w?.chain).toLowerCase() === "evm")?.address
+    : undefined;
+  const addr = me.walletAddress || me.evmAddress || me.address || fromArr;
   if (typeof addr !== "string" || !/^0x[0-9a-fA-F]{40}$/.test(addr)) {
     throw new BankrApiError(200, "/wallet/me", "no EVM wallet address in response");
   }

package/src/cli.ts

@@ -68,7 +68,7 @@ function describe(e: unknown): string {
 
 // ── post (bankr launch) ──────────────────────────────────────────────────────
 // Open a task. Per-unit `--reward` × `--quantity` = the budget. On the pool rail
-// (BNKR/GITLAWB/any dynamic token or quantity>1) the response carries authIntent +
+// (BNKR / any ecosystem or dynamic token or quantity>1) the response carries authIntent +
 // deployFee: sign the budget + pay the fee + authorize, all from the saved wallet.
 export async function runPost(argv: string[]): Promise<void> {
   if (!hasKey()) fail(NO_KEY);
@@ -79,7 +79,7 @@ export async function runPost(argv: string[]): Promise<void> {
   const rewardPerUnit = Number(f.reward);
   if (!Number.isFinite(rewardPerUnit) || rewardPerUnit <= 0) fail("--reward <n> is required (per-unit, in the pay token)");
 
-  // Pay token: a curated symbol (USDC / BNKR / GITLAWB) OR a 0x… address for a
+  // Pay token: a curated symbol (USDC / BNKR) OR a 0x… address for a
   // DYNAMIC registry token — i.e. ANY Bankr-launched token that's been added to the
   // platform's token registry. The backend resolves + validates it (rejects unknown
   // symbols / unregistered or disabled addresses), so we pass it through verbatim.
@@ -94,7 +94,7 @@ export async function runPost(argv: string[]): Promise<void> {
   const action = f.action?.trim();
   const url = f.url?.trim();
 
-  // Rail: default pool when token is a real ecosystem token (BNKR/GITLAWB) or it's
+  // Rail: default pool when token is a real ecosystem token (BNKR / any Bankr-launched token) or it's
   // a multi-unit bounty; else custodial single-hold. `--rail` overrides.
   const railFlag = f.rail?.trim().toLowerCase();
   const rail =

package/src/evm-signer.ts

@@ -62,7 +62,7 @@ const ERC20_TRANSFER_ABI = [
 export async function payDeployFee(params: {
   /** Fee in the FEE TOKEN's own units (NOT USD). The platform pins this at post. */
   amount: number;
-  /** The fee token's ERC-20 decimals (USDC=6, BNKR/GITLAWB=18, dynamic varies). */
+  /** The fee token's ERC-20 decimals (USDC=6, BNKR=18, dynamic varies). */
   decimals: number;
   recipient: string;
   token: string;
@@ -127,7 +127,7 @@ const ERC20_PERMIT2_ABI = [
 ] as const;
 
 /**
- * Permit2-method tokens (BNKR / GITLAWB / any non-EIP-3009 ERC-20) require a ONE-TIME
+ * Permit2-method tokens (BNKR / any non-EIP-3009 ERC-20) require a ONE-TIME
  * ERC-20 approval to the canonical Permit2 contract before the operator's on-chain
  * `authorize` can pull the frozen budget. The agent signs the Permit2 transfer
  * authorization, but the underlying ERC-20→Permit2 allowance is a SEPARATE on-chain tx

package/src/onboard.ts

@@ -224,8 +224,9 @@ export async function onboard(
 
   const jar = new Map<string, string>();
 
-  // 1. nonce
-  const nonceRes = await fetch(`${apiUrl}/api/auth/siwe/nonce`, { headers: { accept: "application/json" } });
+  // 1. nonce — the platform binds the nonce to the signer address (hardening), so the
+  //    nonce endpoint REQUIRES ?address=<wallet>; omitting it returns 400.
+  const nonceRes = await fetch(`${apiUrl}/api/auth/siwe/nonce?address=${address}`, { headers: { accept: "application/json" } });
   if (!nonceRes.ok) throw new Error(`GET /api/auth/siwe/nonce → ${nonceRes.status}`);
   collectCookies(nonceRes, jar); // carry siwe-nonce to verify
   const { nonce } = (await nonceRes.json()) as { nonce?: string };

package/src/server.ts

@@ -274,9 +274,9 @@ server.tool(
     quantity: z.number().int().positive().optional().describe("Number of identical units (default 1)."),
     duration_min: z.number().int().positive().describe("Estimated minutes to complete."),
     difficulty: z.enum(["easy", "medium", "hard"]),
-    // Free string, not an enum: the backend accepts USDC / BNKR / GITLAWB (the real pool
-    // tokens) OR a 0x… address for ANY registered Bankr-launched (dynamic) token. The old
-    // enum wrongly omitted GITLAWB (rejected client-side) and offered CYOS (always 422).
+    // Free string, not an enum: the backend accepts USDC / BNKR (the real pool tokens)
+    // OR a 0x… address for ANY registered Bankr-launched (dynamic) token. The old enum
+    // wrongly omitted registered ecosystem tokens (rejected client-side) and offered CYOS (always 422).
     pay_token: z.string().optional().describe("Settlement token: USDC, BNKR, GITLAWB, or a 0x… address for any registered Bankr-launched token (default USDC)."),
     deadline_hours: z.number().int().positive().optional(),
     social_action: z.enum(["follow", "retweet", "reply", "quote", "original-post"]).optional().describe("For category 'social': the X action a human must perform."),