@wowok/agent-mcp 3.2.7 → 3.3.0

package/dist/schemas/query_toolkit.output.json

@@ -389,6 +389,10 @@
                         "hasNextPage"
                       ],
                       "additionalProperties": false
+                    },
+                    "_balance_scope_note": {
+                      "description": "Semantic scope note for the balance figure: the total is aggregation-only; independently owned Coin objects may exist outside it. Follow the note (transaction digest or coin-objects query) before concluding funds arrived.",
+                      "type": "string"
                     }
                   },
                   "additionalProperties": false,
@@ -942,7 +946,7 @@
                                             "description": "vecvecu8"
                                           }
                                         ],
-                                        "description": "User available value type (number or string, e.g., 6 or 'U64' or 'u64')"
+                                        "description": "User available value type (number, numeric string, or name — e.g., 6, '6', 'U64', 'u64')"
                                       },
                                       {
                                         "type": "number",
@@ -2542,7 +2546,7 @@
                                                           "GuardIdentifier"
                                                         ],
                                                         "additionalProperties": false,
-                                                        "description": "Guard verified recipient ID. Get recipient ID from specified data index in Guard table. The ID must be of address type."
+                                                        "description": "Guard verified recipient ID. Get recipient ID from specified data index in Guard table. The ID must be of address type. ALLOCATION rails only — the REWARD claim rail requires recipient == the transaction sender (abort 14), so a GuardIdentifier recipient on reward.guard_add resolves to the submitted Order and is structurally unpayable; the tool gate rejects it (crs-mn-261015 F-12)."
                                                       },
                                                       {
                                                         "type": "object",
@@ -2581,7 +2585,7 @@
                                                           "Signer"
                                                         ],
                                                         "additionalProperties": false,
-                                                        "description": "Current transaction signer (tx_context::sender) at the time of the alloc() call. For refunds, the Order owner must call alloc_by_guard themselves to receive the funds."
+                                                        "description": "Current transaction signer (tx_context::sender) at the time of the alloc() call. For refunds, the Order owner must call alloc_by_guard themselves to receive the funds. On the REWARD claim rail this is the CANONICAL recipient (the claim entry requires recipient == the tx sender)."
                                                       }
                                                     ],
                                                     "description": "Recipient of this allocation. Three forms — each resolves the address at a DIFFERENT time:\n• { GuardIdentifier: u8 } — DYNAMIC address resolved from Passport at alloc() time (from the passport's submission record). Use 0 for Order owner in Service-integrated mode (Customer who created the Order). The identifier must match a Guard table entry with b_submission=true. If Passport has no matching submission, contract aborts with E_VERIFY_FAILED. Use when the recipient address is not known at config time and must be supplied via Guard submission data.\n• { Entity: { name_or_address: '...' } } — FIXED address resolved via LocalMark at SDK build time (passed to contract as a literal address). Use for known recipients (e.g., 'turo_host', or a Treasury object address). Use when the recipient is a stable, known address (e.g., operator receives rent, platform fee to treasury).\n• 'Signer' — the transaction sender at the time of the alloc() call (tx_context::sender). RESOLVED AT EXECUTION TIME, not at config time. For refunds: the customer (Order owner) must call alloc_by_guard THEMSELVES so that tx_context::sender resolves to THEIR address — if the operator calls alloc_by_guard, the operator becomes the recipient (Signer = operator), NOT the customer. Use when the recipient is whoever submits the allocation transaction (e.g., customer receives refund)."
@@ -3078,7 +3082,7 @@
                                     "type": "null"
                                   }
                                 ],
-                                "description": "Buyer-recorded credential that the required information was delivered via Wowok Messenger: the merchant's IM user address (resolved from the Service's Contact) or a WTS Proof object id (on-chain delivery proof embedding that IM address and timestamp)."
+                                "description": "Buyer-recorded credential that the required information was delivered via Wowok Messenger: the merchant's IM user address (resolved from the Service's Contact) or a WTS Proof object id (on-chain delivery proof embedding that IM address and timestamp). ATTESTATION-ONLY: the value is self-attested by the buyer, has no on-chain readback, and MUST NOT be used as a gate condition."
                               },
                               "time": {
                                 "anyOf": [
@@ -3705,7 +3709,7 @@
                                                               "description": "vecvecu8"
                                                             }
                                                           ],
-                                                          "description": "User available value type (number or string, e.g., 6 or 'U64' or 'u64')"
+                                                          "description": "User available value type (number, numeric string, or name — e.g., 6, '6', 'U64', 'u64')"
                                                         },
                                                         {
                                                           "type": "number",
@@ -4817,7 +4821,7 @@
                                                   "GuardIdentifier"
                                                 ],
                                                 "additionalProperties": false,
-                                                "description": "Guard verified recipient ID. Get recipient ID from specified data index in Guard table. The ID must be of address type."
+                                                "description": "Guard verified recipient ID. Get recipient ID from specified data index in Guard table. The ID must be of address type. ALLOCATION rails only — the REWARD claim rail requires recipient == the transaction sender (abort 14), so a GuardIdentifier recipient on reward.guard_add resolves to the submitted Order and is structurally unpayable; the tool gate rejects it (crs-mn-261015 F-12)."
                                               },
                                               {
                                                 "type": "object",
@@ -4856,7 +4860,7 @@
                                                   "Signer"
                                                 ],
                                                 "additionalProperties": false,
-                                                "description": "Current transaction signer (tx_context::sender) at the time of the alloc() call. For refunds, the Order owner must call alloc_by_guard themselves to receive the funds."
+                                                "description": "Current transaction signer (tx_context::sender) at the time of the alloc() call. For refunds, the Order owner must call alloc_by_guard themselves to receive the funds. On the REWARD claim rail this is the CANONICAL recipient (the claim entry requires recipient == the tx sender)."
                                               }
                                             ],
                                             "description": "Recipient of this allocation. Three forms — each resolves the address at a DIFFERENT time:\n• { GuardIdentifier: u8 } — DYNAMIC address resolved from Passport at alloc() time (from the passport's submission record). Use 0 for Order owner in Service-integrated mode (Customer who created the Order). The identifier must match a Guard table entry with b_submission=true. If Passport has no matching submission, contract aborts with E_VERIFY_FAILED. Use when the recipient address is not known at config time and must be supplied via Guard submission data.\n• { Entity: { name_or_address: '...' } } — FIXED address resolved via LocalMark at SDK build time (passed to contract as a literal address). Use for known recipients (e.g., 'turo_host', or a Treasury object address). Use when the recipient is a stable, known address (e.g., operator receives rent, platform fee to treasury).\n• 'Signer' — the transaction sender at the time of the alloc() call (tx_context::sender). RESOLVED AT EXECUTION TIME, not at config time. For refunds: the customer (Order owner) must call alloc_by_guard THEMSELVES so that tx_context::sender resolves to THEIR address — if the operator calls alloc_by_guard, the operator becomes the recipient (Signer = operator), NOT the customer. Use when the recipient is whoever submits the allocation transaction (e.g., customer receives refund)."
@@ -5255,7 +5259,7 @@
                                             "GuardIdentifier"
                                           ],
                                           "additionalProperties": false,
-                                          "description": "Guard verified recipient ID. Get recipient ID from specified data index in Guard table. The ID must be of address type."
+                                          "description": "Guard verified recipient ID. Get recipient ID from specified data index in Guard table. The ID must be of address type. ALLOCATION rails only — the REWARD claim rail requires recipient == the transaction sender (abort 14), so a GuardIdentifier recipient on reward.guard_add resolves to the submitted Order and is structurally unpayable; the tool gate rejects it (crs-mn-261015 F-12)."
                                         },
                                         {
                                           "type": "object",
@@ -5294,10 +5298,10 @@
                                             "Signer"
                                           ],
                                           "additionalProperties": false,
-                                          "description": "Current transaction signer (tx_context::sender) at the time of the alloc() call. For refunds, the Order owner must call alloc_by_guard themselves to receive the funds."
+                                          "description": "Current transaction signer (tx_context::sender) at the time of the alloc() call. For refunds, the Order owner must call alloc_by_guard themselves to receive the funds. On the REWARD claim rail this is the CANONICAL recipient (the claim entry requires recipient == the tx sender)."
                                         }
                                       ],
-                                      "description": "Recipient ID. Three forms:\n  - {GuardIdentifier: u8}  — DYNAMIC address resolved from Passport at alloc() time\n  - {Entity: {name_or_address: 'mark_name'}}  — FIXED static address via LocalMark (recommended)\n  - {Signer: 'signer'}  — transaction sender at alloc() time (e.g. self-refund; customer must call alloc_by_guard themselves)"
+                                      "description": "Recipient ID. Three forms:\n  - {GuardIdentifier: u8}  — DYNAMIC address resolved from Passport at alloc() time (Allocation rails only; structurally unpayable on reward.guard_add — abort 14)\n  - {Entity: {name_or_address: 'mark_name'}}  — FIXED static address via LocalMark (recommended)\n  - {Signer: 'signer'}  — transaction sender at alloc() time (e.g. self-refund; customer must call alloc_by_guard themselves; canonical on reward claim rails)"
                                     },
                                     "amount": {
                                       "oneOf": [
@@ -5403,7 +5407,7 @@
                                     "type": "null"
                                   }
                                 ],
-                                "description": "Used to lock whether new Reward Guards can be added. If not specified, new Reward Guards can be added at any time; if expiration time is specified, new Reward Guards cannot be added before expiration."
+                                "description": "Used to lock whether new Reward Guards can be added AND whether the balance can be withdrawn. If not specified, new Reward Guards can be added at any time and the balance can be withdrawn; if expiration time is specified, neither new Reward Guards nor balance withdrawal is possible before expiration."
                               },
                               "record_count": {
                                 "type": "number",
@@ -5758,6 +5762,7 @@
                                       "description": "Source of data ID when writing data. If None, user must specify the ID separately; if Clock, data ID is current timestamp; if Signer, data ID is user ID."
                                     },
                                     "value_type": {
+                                      "description": "Type of data value when writing data. Note: 19 (Value) is an internal dynamic type for guard expressions and is NOT accepted here.",
                                       "anyOf": [
                                         {
                                           "type": "number",
@@ -6044,8 +6049,7 @@
                                           "const": "vecvecu8",
                                           "description": "vecvecu8"
                                         }
-                                      ],
-                                      "description": "Type of data value when writing data. Note: 19 (Value) is an internal dynamic type for guard expressions and is NOT accepted here."
+                                      ]
                                     }
                                   },
                                   "required": [
@@ -6329,6 +6333,7 @@
                                       "description": "Whether this table item's value is submitted dynamically at Guard trigger time (alloc_by_guard call). \n\ntrue = value is submitted by the caller when triggering the Guard. Use for runtime-context-dependent values like order address, user address. The 'value' field is ignored when b_submission=true; the caller must provide it via submissions[]. \n\nfalse = value is static, set at Guard creation time. Use for values known when the Guard is created: expected node names, expected merchant address, expected service address. The 'value' field must be populated and will be stored on-chain permanently. \n\nRule of thumb: if the value is the SAME for all future Guard triggers, use false. If the value DIFFERS per trigger (e.g., which order to release funds for), use true."
                                     },
                                     "value_type": {
+                                      "description": "Type of the value stored in `value`. One of: Bool(0), Address(1), String(2), U8(3), U16(4), U32(5), U64(6), U128(7), U256(8), VecBool(9), VecAddress(10), VecString(11), VecU8(12), VecU16(13), VecU32(14), VecU64(15), VecU128(16), VecU256(17), VecVecU8(18). When value_type=Address (1), the `value` field accepts a hex address string, a LocalMark name, or an AccountOrMark_Address object — see `value` field description for details.",
                                       "anyOf": [
                                         {
                                           "type": "number",
@@ -6615,11 +6620,10 @@
                                           "const": "vecvecu8",
                                           "description": "vecvecu8"
                                         }
-                                      ],
-                                      "description": "Type of the value stored in `value`. One of: Bool(0), Address(1), String(2), U8(3), U16(4), U32(5), U64(6), U128(7), U256(8), VecBool(9), VecAddress(10), VecString(11), VecU8(12), VecU16(13), VecU32(14), VecU64(15), VecU128(16), VecU256(17), VecVecU8(18). When value_type=Address (1), the `value` field accepts a hex address string, a LocalMark name, or an AccountOrMark_Address object — see `value` field description for details."
+                                      ]
                                     },
                                     "value": {
-                                      "description": "The actual value data. Format depends on `value_type`:\n• Bool: true/false (boolean)\n• Address (CRITICAL — string 'Address' is NOT a placeholder): a hex address (e.g. '0x1234...'), a LocalMark name (e.g. 'my-service' — resolved to address at evaluation time), an AccountOrMark_Address object (e.g. {name_or_address:'my-service'}), or system shorthand ('0xaaa' = EntityLinker, '0xaab' = EntityRegistrar). The literal string 'Address' itself is INVALID — it would be treated as a non-existent LocalMark name and fail. Example: value='0x2::wow::WOW<address>' or value='my-permission'.\n• String: any string\n• U8/U16/U32/U64/U128/U256: number or numeric string (e.g. 42 or '42')\n• Vec* types: arrays of the corresponding element type\nREQUIRED when b_submission=false. OPTIONAL when b_submission=true (value is supplied at evaluation time by user submission).",
+                                      "description": "The actual value data. Format depends on `value_type`:\nTYPE-CLASS SPLIT (F03): scalar value_types (Bool/Address/String/U8..U256) take ONE scalar value (boolean/address string/name/string/number); Vec* value_types (VecBool/VecAddress/VecString/VecU8..VecU256) take a REAL JSON ARRAY of elements — a string (even a Python-repr-looking \"[a, b]\") fails serialization with 'value_type=10 (array) requires a array value'. The historical 'static values must be strings' rule applied to SCALARS only.\n• Bool: true/false (boolean)\n• Address (CRITICAL — string 'Address' is NOT a placeholder): a hex address (e.g. '0x1234...'), a LocalMark name (e.g. 'my-service' — resolved to address at evaluation time), an AccountOrMark_Address object (e.g. {name_or_address:'my-service'}), or system shorthand ('0xaaa' = EntityLinker, '0xaab' = EntityRegistrar). The literal string 'Address' itself is INVALID — it would be treated as a non-existent LocalMark name and fail. Example: value='0x2::wow::WOW<address>' or value='my-permission'.\n• String: any string\n• U8/U16/U32/U64/U128/U256: number or numeric string (e.g. 42 or '42')\n• Vec* types: arrays of the corresponding element type\nPROTOCOL SLOT 254 (once, b_submission Address): the submitted value MUST be the ORDER address bound to the operation (payment_info.for_object) — NEVER the Progress/Machine/Arb object the call is advancing. The chain asserts submission(254) == the order address; a Progress address fails the task binding and the forward aborts.\nREQUIRED when b_submission=false. OPTIONAL when b_submission=true (value is supplied at evaluation time by user submission).",
                                       "anyOf": [
                                         {
                                           "type": "boolean"
@@ -7072,7 +7076,7 @@
                                             "GuardIdentifier"
                                           ],
                                           "additionalProperties": false,
-                                          "description": "Guard verified recipient ID. Get recipient ID from specified data index in Guard table. The ID must be of address type."
+                                          "description": "Guard verified recipient ID. Get recipient ID from specified data index in Guard table. The ID must be of address type. ALLOCATION rails only — the REWARD claim rail requires recipient == the transaction sender (abort 14), so a GuardIdentifier recipient on reward.guard_add resolves to the submitted Order and is structurally unpayable; the tool gate rejects it (crs-mn-261015 F-12)."
                                         },
                                         {
                                           "type": "object",
@@ -7111,10 +7115,10 @@
                                             "Signer"
                                           ],
                                           "additionalProperties": false,
-                                          "description": "Current transaction signer (tx_context::sender) at the time of the alloc() call. For refunds, the Order owner must call alloc_by_guard themselves to receive the funds."
+                                          "description": "Current transaction signer (tx_context::sender) at the time of the alloc() call. For refunds, the Order owner must call alloc_by_guard themselves to receive the funds. On the REWARD claim rail this is the CANONICAL recipient (the claim entry requires recipient == the tx sender)."
                                         }
                                       ],
-                                      "description": "Recipient ID. Three forms:\n  - {GuardIdentifier: u8}  — DYNAMIC address resolved from Passport at alloc() time\n  - {Entity: {name_or_address: 'mark_name'}}  — FIXED static address via LocalMark (recommended)\n  - {Signer: 'signer'}  — transaction sender at alloc() time (e.g. self-refund; customer must call alloc_by_guard themselves)"
+                                      "description": "Recipient ID. Three forms:\n  - {GuardIdentifier: u8}  — DYNAMIC address resolved from Passport at alloc() time (Allocation rails only; structurally unpayable on reward.guard_add — abort 14)\n  - {Entity: {name_or_address: 'mark_name'}}  — FIXED static address via LocalMark (recommended)\n  - {Signer: 'signer'}  — transaction sender at alloc() time (e.g. self-refund; customer must call alloc_by_guard themselves; canonical on reward claim rails)"
                                     },
                                     "amount": {
                                       "anyOf": [
@@ -7773,7 +7777,7 @@
                                                       "description": "vecvecu8"
                                                     }
                                                   ],
-                                                  "description": "User available value type (number or string, e.g., 6 or 'U64' or 'u64')"
+                                                  "description": "User available value type (number, numeric string, or name — e.g., 6, '6', 'U64', 'u64')"
                                                 },
                                                 {
                                                   "type": "number",
@@ -10128,7 +10132,7 @@
                                                   "description": "vecvecu8"
                                                 }
                                               ],
-                                              "description": "User available value type (number or string, e.g., 6 or 'U64' or 'u64')"
+                                              "description": "User available value type (number, numeric string, or name — e.g., 6, '6', 'U64', 'u64')"
                                             },
                                             {
                                               "type": "number",
@@ -10863,7 +10867,7 @@
                                     "type": "null"
                                   }
                                 ],
-                                "description": "About address. e.g., address of the entity being proved"
+                                "description": "About binding (K3 contract): the counterparty ACCOUNT address (address first byte = account type) or a Proof object address (first byte = Proof type) — a messenger contact record, NOT a business-object reference and never a guard decision condition"
                               },
                               "signer": {
                                 "type": "string",
@@ -11550,7 +11554,7 @@
                                           "description": "vecvecu8"
                                         }
                                       ],
-                                      "description": "User available value type (number or string, e.g., 6 or 'U64' or 'u64')"
+                                      "description": "User available value type (number, numeric string, or name — e.g., 6, '6', 'U64', 'u64')"
                                     },
                                     {
                                       "type": "number",
@@ -12539,7 +12543,7 @@
                                             "description": "vecvecu8"
                                           }
                                         ],
-                                        "description": "User available value type (number or string, e.g., 6 or 'U64' or 'u64')"
+                                        "description": "User available value type (number, numeric string, or name — e.g., 6, '6', 'U64', 'u64')"
                                       },
                                       {
                                         "type": "number",
@@ -14896,7 +14900,7 @@
                                                         "description": "vecvecu8"
                                                       }
                                                     ],
-                                                    "description": "User available value type (number or string, e.g., 6 or 'U64' or 'u64')"
+                                                    "description": "User available value type (number, numeric string, or name — e.g., 6, '6', 'U64', 'u64')"
                                                   },
                                                   {
                                                     "type": "number",
@@ -15566,7 +15570,7 @@
                           "type": "string"
                         },
                         "gas_used": {
-                          "description": "Total gas used (string, BigInt)",
+                          "description": "Total gas used (string, BigInt). F52: the node can report this NEGATIVE for some batch txs (e.g. batch-destroy) — a signed value is a direction marker, not a refund; take the absolute value when summing per-tx fees for reconciliation",
                           "type": "string"
                         },
                         "gas_budget": {
@@ -15811,7 +15815,7 @@
                                 "type": "string"
                               },
                               "gas_used": {
-                                "description": "Gas used (string)",
+                                "description": "Gas used (string). F52: may be reported NEGATIVE for some batch txs — take the absolute value when reconciling fees",
                                 "type": "string"
                               },
                               "objects_touched": {
@@ -15929,7 +15933,7 @@
                                 "type": "string"
                               },
                               "gas_used": {
-                                "description": "Gas used (string)",
+                                "description": "Gas used (string). F52: may be reported NEGATIVE for some batch txs — take the absolute value when reconciling fees",
                                 "type": "string"
                               },
                               "objects_touched": {
@@ -16467,6 +16471,63 @@
                   ],
                   "description": "FIRST allocator's sharing rows — the normal payout path. null when no allocators are configured."
                 },
+                "compensation_fund_coverage": {
+                  "anyOf": [
+                    {
+                      "type": "object",
+                      "properties": {
+                        "fund_balance": {
+                          "type": "string",
+                          "description": "Raw smallest units currently in the Service's compensation fund."
+                        },
+                        "fund_balance_display": {
+                          "anyOf": [
+                            {
+                              "type": "string"
+                            },
+                            {
+                              "type": "null"
+                            }
+                          ]
+                        },
+                        "required_for_this_basket": {
+                          "type": "string",
+                          "description": "Raw smallest units: 3 x total_pay — the per-order payout requirement this basket must meet at order creation."
+                        },
+                        "required_display": {
+                          "anyOf": [
+                            {
+                              "type": "string"
+                            },
+                            {
+                              "type": "null"
+                            }
+                          ]
+                        },
+                        "covered": {
+                          "type": "boolean",
+                          "description": "True when the fund covers the per-order requirement; false means no fund (a disclosed merchant choice) or an under-funded Service."
+                        },
+                        "note": {
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "fund_balance",
+                        "fund_balance_display",
+                        "required_for_this_basket",
+                        "required_display",
+                        "covered",
+                        "note"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "Per-order compensation-fund coverage for THIS basket (b6-11): the enforcement moved off the publish gate to the buy path — a fund-carrying Service below 3x the ORDER amount blocks order creation (compensation_fund_below_order_ceiling, no money moves), so the quote surfaces the same arithmetic BEFORE ordering. fund = 0 is a disclosed no-protection choice, never blocked. The chain-side claim-time abort (code 27, claim NOT consumed) remains the backstop."
+                },
                 "reward_terms": {
                   "anyOf": [
                     {
@@ -16638,10 +16699,11 @@
                 "total_pay",
                 "discount",
                 "allocation_preview",
+                "compensation_fund_coverage",
                 "reward_terms"
               ],
               "additionalProperties": false,
-              "description": "ServiceQuote (basket prices, total_pay, the allocator fee-split preview and reward terms)."
+              "description": "ServiceQuote (basket prices, total_pay, the allocator fee-split preview, per-order compensation-fund coverage and reward terms)."
             }
           },
           "required": [
@@ -17123,14 +17185,13 @@
                                   "description": "Input path inside the tool data payload."
                                 },
                                 "reason": {
-                                  "type": "string",
-                                  "description": "Chain-authoritative routing reason, including the Guard passport requirement when the forward binds one, and the standalone-Progress limitation for namedOperator='' forwards (abort 8 — no order payer)."
+                                  "description": "Chain-authoritative routing reason, including the Guard passport requirement when the forward binds one, and the standalone-Progress limitation for namedOperator='' forwards (abort 8 — no order payer). May be absent when the caller requested response_level 'compact', which trims templated routing prose from NON-recommended options (F44/docs#49).",
+                                  "type": "string"
                                 }
                               },
                               "required": [
                                 "tool",
-                                "path",
-                                "reason"
+                                "path"
                               ],
                               "additionalProperties": false
                             }
@@ -17570,14 +17631,13 @@
                                   "description": "Input path inside the tool data payload."
                                 },
                                 "reason": {
-                                  "type": "string",
-                                  "description": "Chain-authoritative routing reason, including the Guard passport requirement when the forward binds one, and the standalone-Progress limitation for namedOperator='' forwards (abort 8 — no order payer)."
+                                  "description": "Chain-authoritative routing reason, including the Guard passport requirement when the forward binds one, and the standalone-Progress limitation for namedOperator='' forwards (abort 8 — no order payer). May be absent when the caller requested response_level 'compact', which trims templated routing prose from NON-recommended options (F44/docs#49).",
+                                  "type": "string"
                                 }
                               },
                               "required": [
                                 "tool",
-                                "path",
-                                "reason"
+                                "path"
                               ],
                               "additionalProperties": false
                             }
@@ -19110,14 +19170,13 @@
                                       "description": "Input path inside the tool data payload."
                                     },
                                     "reason": {
-                                      "type": "string",
-                                      "description": "Chain-authoritative routing reason, including the Guard passport requirement when the forward binds one, and the standalone-Progress limitation for namedOperator='' forwards (abort 8 — no order payer)."
+                                      "description": "Chain-authoritative routing reason, including the Guard passport requirement when the forward binds one, and the standalone-Progress limitation for namedOperator='' forwards (abort 8 — no order payer). May be absent when the caller requested response_level 'compact', which trims templated routing prose from NON-recommended options (F44/docs#49).",
+                                      "type": "string"
                                     }
                                   },
                                   "required": [
                                     "tool",
-                                    "path",
-                                    "reason"
+                                    "path"
                                   ],
                                   "additionalProperties": false
                                 },
@@ -22895,7 +22954,7 @@
                       "description": "vecvecu8"
                     }
                   ],
-                  "description": "User available value type (number or string, e.g., 6 or 'U64' or 'u64')"
+                  "description": "User available value type (number, numeric string, or name — e.g., 6, '6', 'U64', 'u64')"
                 },
                 {
                   "type": "number",
@@ -23076,7 +23135,7 @@
                   "type": "string"
                 }
               ],
-              "description": "ID or name of the wowok object data query instruction. Can be a numeric ID (e.g., 1001) or a name string (e.g., 'permission.description'). Name matching is case-insensitive."
+              "description": "ID or name of the wowok object data query instruction. Can be a numeric ID (e.g., 1001) or a name string (e.g., 'permission.description'). Name matching is case-insensitive. STRONGLY PREFER the NAME form: a numeric ID is resolved VERBATIM at runtime, so a wrong-but-existing ID silently checks a DIFFERENT field and only fails at Guard trigger time (abort 7, no leg named) — a wrong name fails loudly at validation here instead (rndb58d8d 04-ROOTCAUSE-A A2). If you only know the field, list the catalog first via schema_query action='get_guard_queries'."
             },
             "object": {
               "type": "object",
@@ -24701,13 +24760,26 @@
                   "minimum": 0,
                   "maximum": 255,
                   "description": "Identifier (0-255) for data lookup in Guard table. Slot consensus (enforced on-chain at guard table construction): 0-220 = user slots (free for business guards); 221-253 = PROTOCOL-RESERVED (rejected on-chain — reserved so future protocol features get fixed slots without colliding with published guards); 255 = ONCE replay-protection slot on Allocation (byte-keyed, the submitted bytes are the once-key — use for per-period keys like period-<N>); 254 = ONCE-FOR-OBJECT slot on Allocation (chain-derived key = bcs(the Allocation's payment_info.for_object); the submitted bytes are ignored and the submission only arms the slot — use for one-shot per-order rails such as full refunds)."
+                },
+                "convert_witness": {
+                  "description": "Optional witness to derive the Progress object from the submitted Order (e.g. 'OrderProgress'): the table object is the ORDER address and the chain resolves its per-order Progress — one Guard serves every order. Omit when the table object is a concrete Progress address.",
+                  "anyOf": [
+                    {
+                      "type": "integer",
+                      "minimum": -9007199254740991,
+                      "maximum": 9007199254740991
+                    },
+                    {
+                      "type": "string"
+                    }
+                  ]
                 }
               },
               "required": [
                 "identifier"
               ],
               "additionalProperties": false,
-              "description": "Reference to the Progress object in the Guard table (must be Address type)."
+              "description": "Reference to the queried object in the Guard table: a Progress address, or an Order address when convert_witness is set."
             },
             "where": {
               "type": "object",
@@ -24758,6 +24830,91 @@
           "additionalProperties": false,
           "description": "Returns U64. Finds the index of the first or last history entry matching the filter conditions. Returns the history index (U64) if found. Throws error if no matching entry is found (Guard validation fails)."
         },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "type": "string",
+              "const": "query_progress_history_time"
+            },
+            "object": {
+              "type": "object",
+              "properties": {
+                "identifier": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "maximum": 255,
+                  "description": "Identifier (0-255) for data lookup in Guard table. Slot consensus (enforced on-chain at guard table construction): 0-220 = user slots (free for business guards); 221-253 = PROTOCOL-RESERVED (rejected on-chain — reserved so future protocol features get fixed slots without colliding with published guards); 255 = ONCE replay-protection slot on Allocation (byte-keyed, the submitted bytes are the once-key — use for per-period keys like period-<N>); 254 = ONCE-FOR-OBJECT slot on Allocation (chain-derived key = bcs(the Allocation's payment_info.for_object); the submitted bytes are ignored and the submission only arms the slot — use for one-shot per-order rails such as full refunds)."
+                },
+                "convert_witness": {
+                  "description": "Optional witness to derive the Progress object from the submitted Order (e.g. 'OrderProgress'): the table object is the ORDER address and the chain resolves its per-order Progress — one Guard serves every order. Omit when the table object is a concrete Progress address.",
+                  "anyOf": [
+                    {
+                      "type": "integer",
+                      "minimum": -9007199254740991,
+                      "maximum": 9007199254740991
+                    },
+                    {
+                      "type": "string"
+                    }
+                  ]
+                }
+              },
+              "required": [
+                "identifier"
+              ],
+              "additionalProperties": false,
+              "description": "Reference to the queried object in the Guard table: a Progress address, or an Order address when convert_witness is set."
+            },
+            "where": {
+              "type": "object",
+              "properties": {
+                "node": {
+                  "description": "Optional filter: node name string to match.",
+                  "type": "string"
+                },
+                "nextNode": {
+                  "description": "Optional filter: next node name string to match — the canonical time anchor is where:{nextNode:'<node>'}, find:'last', which returns the IMMUTABLE moment that node was entered (1280 history.time is written once on entry and never rewritten, unlike the 1272 current-time read which refreshes on re-entry). An empty where {} with find:'last' returns the entry time of the CURRENT node — safe for node-SET gates.",
+                  "type": "string"
+                },
+                "timeMin": {
+                  "description": "Optional filter: minimum timestamp (inclusive) for history entry time. Use string to represent U64 value.",
+                  "type": "string"
+                },
+                "timeMax": {
+                  "description": "Optional filter: maximum timestamp (inclusive) for history entry time. Use string to represent U64 value.",
+                  "type": "string"
+                },
+                "indexMin": {
+                  "description": "Optional filter: minimum history index (inclusive) to search within. Use string to represent U64 value.",
+                  "type": "string"
+                },
+                "indexMax": {
+                  "description": "Optional filter: maximum history index (inclusive) to search within. Use string to represent U64 value.",
+                  "type": "string"
+                }
+              },
+              "additionalProperties": false,
+              "description": "Filter conditions for the progress history time query."
+            },
+            "find": {
+              "type": "string",
+              "enum": [
+                "first",
+                "last"
+              ],
+              "description": "'first' finds the earliest matching history entry, 'last' finds the most recent matching history entry."
+            }
+          },
+          "required": [
+            "type",
+            "object",
+            "where",
+            "find"
+          ],
+          "additionalProperties": false,
+          "description": "Returns U64. Returns the TIMESTAMP (ms) of the first or last history entry matching the filter conditions — the immutable entry moment of a node (query 1280 progress.history.time). Preferred over query 1272 progress.current_time for time anchors: 1272 reads the node's CURRENT time and refreshes on re-entry (drift-prone), while 1280 is written once on entering next_node and never rewritten. Throws error if no matching entry is found (Guard validation fails)."
+        },
         {
           "type": "object",
           "properties": {
@@ -25052,6 +25209,73 @@
           "additionalProperties": false,
           "description": "Returns U64. Counts the number of retained submissions within the specified forward operation."
         },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "type": "string",
+              "const": "query_progress_history_session_forward_retained_submission_value"
+            },
+            "object": {
+              "type": "object",
+              "properties": {
+                "identifier": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "maximum": 255,
+                  "description": "Identifier (0-255) for data lookup in Guard table. Slot consensus (enforced on-chain at guard table construction): 0-220 = user slots (free for business guards); 221-253 = PROTOCOL-RESERVED (rejected on-chain — reserved so future protocol features get fixed slots without colliding with published guards); 255 = ONCE replay-protection slot on Allocation (byte-keyed, the submitted bytes are the once-key — use for per-period keys like period-<N>); 254 = ONCE-FOR-OBJECT slot on Allocation (chain-derived key = bcs(the Allocation's payment_info.for_object); the submitted bytes are ignored and the submission only arms the slot — use for one-shot per-order rails such as full refunds)."
+                }
+              },
+              "required": [
+                "identifier"
+              ],
+              "additionalProperties": false,
+              "description": "Reference to the Progress object in the Guard table (must be Address type)."
+            },
+            "historyIdx": {
+              "description": "GuardNode that returns the history index (U64 type). Typically an 'identifier' node referencing a U64 value from the Guard table.",
+              "allOf": [
+                {
+                  "$ref": "#/definitions/__schema1"
+                }
+              ]
+            },
+            "sessionIdx": {
+              "description": "GuardNode that returns the session index (U64 type) within the history entry. Typically an 'identifier' node referencing a U64 value from the Guard table.",
+              "allOf": [
+                {
+                  "$ref": "#/definitions/__schema1"
+                }
+              ]
+            },
+            "forwardIdx": {
+              "description": "GuardNode that returns the forward operation index (U64 type) within the session. Typically an 'identifier' node referencing a U64 value from the Guard table.",
+              "allOf": [
+                {
+                  "$ref": "#/definitions/__schema1"
+                }
+              ]
+            },
+            "identifier": {
+              "description": "GuardNode that returns the submission identifier (U8 type) — which retained submission of the forward to read. Typically an 'identifier' node referencing a U8 value from the Guard table.",
+              "allOf": [
+                {
+                  "$ref": "#/definitions/__schema1"
+                }
+              ]
+            }
+          },
+          "required": [
+            "type",
+            "object",
+            "historyIdx",
+            "sessionIdx",
+            "forwardIdx",
+            "identifier"
+          ],
+          "additionalProperties": false,
+          "description": "Returns VecU8 (the ONLY history query that does not return U64). Value of the specified retained submission of a HISTORY record (query 1281) — the history-side counterpart of the ACTIVE-SESSION-ONLY 1268 read, which goes blind once the session migrates into history. Use 1274/1275 to discover the history/session/forward indexes first. Throws error when the record carries no submission for the identifier (Guard validation fails)."
+        },
         {
           "type": "object",
           "properties": {

package/dist/schemas/query_toolkit.schema.json

@@ -1098,7 +1098,7 @@
         "query_type"
       ],
       "additionalProperties": false,
-      "description": "ONE-CALL detail-page panorama for Progress / Demand / Order / Arb / Repository / Proof objects (client panorama family): discriminated `object_type` + head (name/tags/description) + the object's own typed fields + type-specific extras (Demand presenters from the GLOBAL tx table, Progress session/forwards, Arb votes & propositions, Repository policies, Proof anchored root + WTS cross-check). Read-only."
+      "description": "ONE-CALL detail-page panorama for Progress / Demand / Order / Allocation / Arb / Repository / Proof objects (client panorama family): discriminated `object_type` + head (name/tags/description) + the object's own typed fields + type-specific extras (Demand presenters from the GLOBAL tx table, Progress session/forwards, Order fund state, Allocation pool balance + per-rail resolved recipients + Payment children, Arb votes & propositions, Repository policies, Proof anchored root + WTS cross-check). Read-only."
     },
     {
       "type": "object",