@wowok/agent-mcp 3.3.5 → 3.3.7

package/dist/schemas/onchain_operations.schema.json

@@ -672,7 +672,7 @@
               ]
             },
             "restock": {
-              "description": "Refund restocking (permission 305 SERVICE_SALES). op:'flag' opts ONE live product into restock-on-refund; op:'order' puts the units a REFUNDED order purchased back on shelf. The order path is all-or-nothing: every purchased line must be flagged and still live before any unit moves (otherwise the chain aborts 46/32), so half a restock is impossible. Do NOT fake a restock with stock_add when the order carries several lines — use op:'order' so quantities come from the order itself.",
+              "description": "Refund restocking (permission 305 SERVICE_SALES). op:'flag' opts ONE live product into restock-on-refund; op:'order' puts the units a REFUNDED order purchased back on shelf. The order path is all-or-nothing: every purchased line must be flagged and still live before any unit moves (otherwise the chain aborts 46/32), so half a restock is impossible. The order path is once-per-order (replay aborts 49) and bound to THIS service (foreign order aborts 26). Do NOT fake a restock with stock_add when the order carries several lines — use op:'order' so quantities come from the order itself. DISCLOSURE: restock reopens sales — if the machine (or its template) has no refund-terminal gate, orders inside their refund window may lose refund eligibility or create fund-accounting ambiguity once restocked units are resold; confirm the machine's refund rail remains reachable after restocking.",
               "oneOf": [
                 {
                   "type": "object",
@@ -696,7 +696,7 @@
                     "flagged"
                   ],
                   "additionalProperties": false,
-                  "description": "Opt ONE live product in/out of restock-on-refund. An unknown sale_name aborts on chain (code 32); delisting the product is the kill switch. Without the flag, the order-level restock op refuses that line (code 46)."
+                  "description": "Opt ONE live product in/out of restock-on-refund. An unknown sale_name aborts on chain (code 32); delisting the product is the kill switch. Without the flag, the order-level restock op refuses that line (code 46). Flagging a SKU does not itself touch stock — the order-level op below does the restoration, and it is once-per-order per order (code 49) and bound to orders of THIS service (foreign orders abort code 26)."
                 },
                 {
                   "type": "object",
@@ -708,7 +708,7 @@
                     "order": {
                       "type": "string",
                       "minLength": 1,
-                      "description": "Address or local name of the REFUNDED order whose purchased units go back on shelf."
+                      "description": "Address or local name of the REFUNDED order whose purchased units go back on shelf. Must be an order of THIS service (a foreign order aborts code 26), and each order can be restocked exactly once — a second call for the same order aborts code 49 (no retry succeeds; the restoration is already complete)."
                     }
                   },
                   "required": [
@@ -716,7 +716,7 @@
                     "order"
                   ],
                   "additionalProperties": false,
-                  "description": "Put back the units one refunded order purchased, read from the order's own purchase lines (the caller cannot add extra units). Two-pass all-or-nothing on chain: every line must be restock-flagged and still live before the first unit moves (unflagged → code 46, delisted → code 32), so a partial restock is impossible. Emits one stock-restocked event per line."
+                  "description": "Put back the units one refunded order purchased, read from the order's own purchase lines (the caller cannot add extra units). Two-pass all-or-nothing on chain: every line must be restock-flagged and still live before the first unit moves (unflagged → code 46, delisted → code 32), so a partial restock is impossible. Once-per-order (code 49 on replay) and ownership-bound (a foreign order aborts code 26); the applied state is queryable via the restock_applied read. Emits one stock-restocked event per line."
                 }
               ]
             },
@@ -7305,7 +7305,7 @@
               "additionalProperties": false
             },
             "fees_transfer": {
-              "description": "Distribute the withdrawn arbitration fees. Moves the Arbitration's ENTIRE balance in ONE call — there is NO amount parameter. The balance leaves as a CoinWrapper owned by the target (allocation or treasury); for a treasury target, intake it with treasury receive: \"recently\" (permission 253) — see the 'to' field description.",
+              "description": "Distribute the withdrawn arbitration fees. SHAPE (exact — a malformed shape aborts on-chain with CommandArgumentError TypeMismatch, observed on testnet): 'to' is a SINGLE-KEY object with EXACTLY ONE of {allocation: '<Allocation object ID or registered name>'} or {treasury: '<Treasury object ID or registered name>'}. The value must reference an actual Allocation / Treasury OBJECT (its on-chain address or LocalMark name) — a plain wallet address, the Arb case, or the Arbitration registration object is NOT a valid target. payment_index is REQUIRED and must name an existing fee payment record in the Arb case's fees table (list the fees and their indices via onchain_operations type 'q' / onchain_table_data on the Arb case). Moves the Arbitration's ENTIRE balance pool in ONE call — there is NO amount parameter; the pool must be funded first with arb_withdraw. The balance leaves as a CoinWrapper owned by the target; for a treasury target, intake it with treasury receive: \"recently\" (permission 253) — see the 'to' field description.",
               "type": "object",
               "properties": {
                 "to": {
@@ -10973,7 +10973,7 @@
               ]
             },
             "guard_add": {
-              "description": "Add Guard to Reward object. IDIOMS (F08 — these differ from Service allocation, follow THIS shape here): recipient is ONE OF {GuardIdentifier: <u8>} | {Entity: {name_or_address: 'mark'}} | {Signer: 'signer'} (string const INSIDE the key, NOT a bare string) — BUT on the REWARD claim rail the recipient MUST equal the transaction sender (chain assert, abort 14), so {Signer: 'signer'} is the canonical form and {Entity} also passes (SDK replaces it with the claimant's account at claim time); a {GuardIdentifier} recipient resolves to the submitted Order and is STRUCTURALLY UNPAYABLE (every claim aborts 14) — the tool gate rejects it (crs-mn-261015 F-12). amount is {type: 'Fixed', value: '0.1WOW'} — value accepts a display string with token symbol ('0.1WOW') or a smallest-unit integer ('100000000'), NOT the plain balance string used by allocation `sharing`. FULL EXAMPLE: [{guard: '0xabc...', recipient: {Signer: 'signer'}, amount: {type: 'Fixed', value: '0.1WOW'}}].",
+              "description": "Add Guard to Reward object. IDIOMS (F08 — these differ from Service allocation, follow THIS shape here): recipient is ONE OF {GuardIdentifier: <u8>} | {Entity: {name_or_address: 'mark'}} | {Signer: 'signer'} (string const INSIDE the key, NOT a bare string) — BUT on the REWARD claim rail the recipient MUST equal the transaction sender (chain assert, abort 14), so {Signer: 'signer'} is the canonical form and {Entity} also passes (SDK replaces it with the claimant's account at claim time); a {GuardIdentifier} recipient resolves to the submitted Order and is STRUCTURALLY UNPAYABLE (every claim aborts 14) — the tool gate rejects it (crs-mn-261015 F-12). amount is {type: 'Fixed', value: '0.1WOW'} — value accepts a display string with token symbol ('0.1WOW') or a smallest-unit integer ('100000000'), NOT the plain balance string used by allocation `sharing`. FULL EXAMPLE: [{guard: '0xabc...', recipient: {Signer: 'signer'}, amount: {type: 'Fixed', value: '0.1WOW'}}]. OPTIONAL EVIDENCE BINDING (ksk9d2-tn-261026 F-01): an entry may carry evidence {repo, key, predicate} — a claim-time attestation pin that counts ONLY repository rows tied to THIS claim's own store_from value (the submitted order), so borrowed/foreign rows never satisfy the bounty; it requires store_from_id on the same guard (a missing pin aborts 16 at build time) and a claim whose order has no matching attestation row aborts 15.",
               "type": "array",
               "items": {
                 "type": "object",
@@ -11111,6 +11111,40 @@
                         "type": "null"
                       }
                     ]
+                  },
+                  "evidence": {
+                    "description": "ksk9d2-tn-261026 F-01 claim-time attestation pin (reward::evidence_bind). REQUIRES store_from_id on the SAME guard — the binding reads THE pinned store_from row, so the chain aborts 16 (E_EVIDENCE_NEEDS_STORE_FROM) at build time without it. At claim the chain counts repository rows under (repo, key) matching the predicate for the claim's OWN store_from value (the submitted order) via the native evidence_count and aborts 15 (E_EVIDENCE_NOT_OWNED) when none — a borrowed foreign row can never pay.",
+                    "type": "object",
+                    "properties": {
+                      "repo": {
+                        "type": "string",
+                        "description": "Repository object ID or name holding the attestation rows."
+                      },
+                      "key": {
+                        "type": "array",
+                        "items": {
+                          "type": "integer",
+                          "minimum": 0,
+                          "maximum": 255
+                        },
+                        "description": "Repository data key bytes (the policy name the rows live under, e.g. UTF-8 bytes of 'rating')."
+                      },
+                      "predicate": {
+                        "type": "array",
+                        "items": {
+                          "type": "integer",
+                          "minimum": 0,
+                          "maximum": 255
+                        },
+                        "description": "BCS-encoded RepositoryDataPredicateWire bytes — the same predicate blob the repository read channel uses."
+                      }
+                    },
+                    "required": [
+                      "repo",
+                      "key",
+                      "predicate"
+                    ],
+                    "additionalProperties": false
                   }
                 },
                 "required": [
@@ -12402,7 +12436,7 @@
                   "type": "string"
                 },
                 "acknowledge_dual_payout": {
-                  "description": "A-1 (amz9-ln-261023) explicit opt-in for a KNOWN double payout: when a submitted order already received arbitration compensation (order.claimed_by set) and this call would ALSO release its escrow (refund track), the call is REFUSED unless this flag is true. The two payout tracks are independent by design — the chain will not stop the second payout, so the operator must state it deliberately. Buyer NET view: total received = compensation + escrow refund. Leave unset for normal refunds of un-awarded orders.",
+                  "description": "A-1 (amz9-ln-261023) explicit opt-in for a KNOWN double payout: when a submitted order already received arbitration compensation (order.claimed_by set) and this call would ALSO release its escrow (refund track), the call is REFUSED unless this flag is true. The two payout tracks are independent by design — the chain will not net or stop the second payout (the escrow receive path has no claimed_by gate), BUT a rail paired on order.claimed_by (refund none / recover some) may guard-reject the second payout on-chain; that rejection is the designed mutual exclusion, and the escrow exits via the paired rail. Buyer NET view: total received = compensation + escrow refund. Leave unset for normal refunds of un-awarded orders.",
                   "type": "boolean"
                 },
                 "formula_spec_set": {
@@ -17206,7 +17240,7 @@
                       "properties": {
                         "type": {
                           "type": "string",
-                          "const": "query_repository_data_find_where"
+                          "const": "query_repository_data_sum_where_bound"
                         },
                         "object": {
                           "type": "object",
@@ -17254,7 +17288,7 @@
                             "identifier"
                           ],
                           "additionalProperties": false,
-                          "description": "Reference to the candidate ID list (VecAddress type table entry). Duplicates are deduped; max 100 candidates."
+                          "description": "Reference to the candidate ID list (VecAddress type table entry). Each id should be an ORDER address (e.g. order-keyed contribution rows). Duplicates are deduped; max 100 candidates."
                         },
                         "where": {
                           "oneOf": [
@@ -17482,14 +17516,14 @@
                         "where"
                       ],
                       "additionalProperties": false,
-                      "description": "Returns VecAddress. Lists the IDs of ALL matching candidates in candidate order. Compose: vec_length + logic_as_u256_greater_than_or_equal (existence/threshold), vec_indexof_address (first/last position), vec_contains_address (membership)."
+                      "description": "Returns U256. ESCROW-BOUND sum (query 1179): per-row min(row_value, order.amount of the Order the row id names); a row keyed by anything that is not an Order contributes 0 (fail-closed). Unlike query_repository_data_sum_where (self-reported row values), a record cannot claim more than the Order actually escrowed — the forgery-proof aggregate for threshold gates and Formula pricing. Use logic_as_u256_* to compare the sum."
                     },
                     {
                       "type": "object",
                       "properties": {
                         "type": {
                           "type": "string",
-                          "const": "query_repository_data_keys_where"
+                          "const": "query_repository_data_find_where"
                         },
                         "object": {
                           "type": "object",
@@ -17507,7 +17541,7 @@
                           "additionalProperties": false,
                           "description": "Reference to the Repository object in the Guard table (must be Address type)."
                         },
-                        "id": {
+                        "key": {
                           "type": "object",
                           "properties": {
                             "identifier": {
@@ -17521,7 +17555,23 @@
                             "identifier"
                           ],
                           "additionalProperties": false,
-                          "description": "Reference to the single candidate ID (Address type table entry) to probe across policies."
+                          "description": "Reference to the policy key (String type table entry) whose data table is scanned."
+                        },
+                        "ids": {
+                          "type": "object",
+                          "properties": {
+                            "identifier": {
+                              "type": "integer",
+                              "minimum": 0,
+                              "maximum": 255,
+                              "description": "Identifier (0-255) for data lookup in Guard table. Slot consensus (enforced on-chain at guard table construction): 0-220 = user slots (free for business guards); 221-253 = PROTOCOL-RESERVED (rejected on-chain — reserved so future protocol features get fixed slots without colliding with published guards); 255 = ONCE replay-protection slot on Allocation (byte-keyed, the submitted bytes are the once-key — use for per-period keys like period-<N>); 254 = ONCE-FOR-OBJECT slot on Allocation (chain-derived key = bcs(the Allocation's payment_info.for_object); the submitted bytes are ignored and the submission only arms the slot — use for one-shot per-order rails such as full refunds). SLOT 0 SEMANTICS: slot 0 carries the transacted Order address by convention. As a submission slot it is legal on order/allocation/machine rails (the order exists when those verify), but FORBIDDEN on a Service buy_guard — the order does not exist when the buy-time passport is verified, so the mount is refused (service abort 43)."
+                            }
+                          },
+                          "required": [
+                            "identifier"
+                          ],
+                          "additionalProperties": false,
+                          "description": "Reference to the candidate ID list (VecAddress type table entry). Duplicates are deduped; max 100 candidates."
                         },
                         "where": {
                           "oneOf": [
@@ -17738,24 +17788,25 @@
                               "additionalProperties": false
                             }
                           ],
-                          "description": "Predicate filter applied to the value stored under each policy key for this ID."
+                          "description": "Predicate filter applied to each candidate's data value."
                         }
                       },
                       "required": [
                         "type",
                         "object",
-                        "id",
+                        "key",
+                        "ids",
                         "where"
                       ],
                       "additionalProperties": false,
-                      "description": "Returns VecString. Reverse lookup: all policy keys whose stored value for the given ID matches the predicate (scans the policy schema and probes each key). Compose: vec_length (how many keys match), vec_indexof_string + logic_as_u256_equal (does a specific key match), vec_contains_string (specific key membership)."
+                      "description": "Returns VecAddress. Lists the IDs of ALL matching candidates in candidate order. Compose: vec_length + logic_as_u256_greater_than_or_equal (existence/threshold), vec_indexof_address (first/last position), vec_contains_address (membership)."
                     },
                     {
                       "type": "object",
                       "properties": {
                         "type": {
                           "type": "string",
-                          "const": "query_repository_policies_keys"
+                          "const": "query_repository_data_keys_where"
                         },
                         "object": {
                           "type": "object",
@@ -17772,208 +17823,474 @@
                           ],
                           "additionalProperties": false,
                           "description": "Reference to the Repository object in the Guard table (must be Address type)."
-                        }
-                      },
-                      "required": [
-                        "type",
-                        "object"
-                      ],
-                      "additionalProperties": false,
-                      "description": "Returns VecString. Lists ALL policy key names of the Repository (max 50). Use vec_length to bound per-key composite queries or vec_contains_string to assert a key exists."
-                    }
-                  ],
-                  "$ref": "#/definitions/__schema2"
-                },
-                {
-                  "type": "object",
-                  "properties": {
-                    "type": {
-                      "type": "string",
-                      "const": "file"
-                    },
-                    "file_path": {
-                      "type": "string",
-                      "description": "ABSOLUTE path to JSON or Markdown file containing Guard definition. Field name is `file_path` (NOT `file`). File can define: namedNew, description, table, root, rely."
-                    },
-                    "format": {
-                      "default": "json",
-                      "description": "File format: 'json' or 'markdown'. Default is 'json'.",
-                      "type": "string",
-                      "enum": [
-                        "json",
-                        "markdown"
-                      ]
-                    }
-                  },
-                  "required": [
-                    "type",
-                    "file_path",
-                    "format"
-                  ],
-                  "additionalProperties": false
-                }
-              ],
-              "description": "Root definition: either a direct GuardNode (must be a logical operation returning Bool) or a file reference (type='file'). When type='file', the file can define all Guard fields (namedNew, description, table, root, rely), and schema fields override file content."
-            },
-            "rely": {
-              "description": "All Guard objects that the new Guard object depends on. If logic_or is true, the execution result of the new Guard object is the logical OR of the execution results of all dependent Guard objects; otherwise, it is logical AND. When using root.type='file', this field OVERRIDES rely in the file.",
-              "type": "object",
-              "properties": {
-                "guards": {
-                  "type": "array",
-                  "items": {
-                    "type": "string",
-                    "description": "Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."
-                  },
-                  "description": "List of dependent Guard object IDs or names."
-                },
-                "logic_or": {
-                  "description": "Whether to use logical OR operator.",
-                  "type": "boolean"
-                }
-              },
-              "required": [
-                "guards"
-              ],
-              "additionalProperties": false
-            },
-            "binding_hint": {
-              "description": "Phase 5 Guard capability hint. Provides semantic context (action + host_object + binding_field + optional rule/failure_conditions) for puzzle derivation. When provided, the response will include complete guard_advice (puzzle_status, matched_scene, suggested_patterns, confirmation_text, pending_questions). When absent, puzzle_status intent/binding dimensions are marked incomplete.",
-              "type": "object",
-              "properties": {
-                "action": {
-                  "type": "string",
-                  "enum": [
-                    "buy",
-                    "forward",
-                    "allocate",
-                    "claim_reward",
-                    "vote",
-                    "dispute",
-                    "write_repository",
-                    "submit_progress",
-                    "gen_passport",
-                    "custom"
-                  ],
-                  "description": "Protected action type. Example: 'buy' for Service buy_guard, 'forward' for Machine Forward.guard."
-                },
-                "host_object": {
-                  "type": "string",
-                  "enum": [
-                    "Service",
-                    "Machine",
-                    "Arbitration",
-                    "Reward",
-                    "Repository",
-                    "Progress",
-                    "Demand",
-                    "Standalone"
-                  ],
-                  "description": "Host object type. Example: 'Service', 'Machine'."
-                },
-                "binding_field": {
-                  "type": "string",
-                  "enum": [
-                    "buy_guard",
-                    "order_allocators",
-                    "Forward.guard",
-                    "submission",
-                    "guard",
-                    "write_guard",
-                    "usage_guard",
-                    "voting_guard",
-                    "ServiceGuard",
-                    "none"
-                  ],
-                  "description": "Binding field. Example: 'buy_guard', 'Forward.guard'."
-                },
-                "rule_sentence": {
-                  "description": "One-sentence description of the validation rule (human-readable). Example: 'Only the author can purchase this service'.",
-                  "type": "string"
-                },
-                "failure_conditions": {
-                  "description": "List of conditions under which the Guard should FAIL. Example: ['Signer is not in allowlist','Order is already completed'].",
-                  "type": "array",
-                  "items": {
-                    "type": "string"
-                  }
-                },
-                "circular_reference": {
-                  "description": "Whether the Guard references the Host Object itself (circular reference pattern). true=Guard queries the Host Object it binds to.",
-                  "type": "boolean"
-                }
-              },
-              "required": [
-                "action",
-                "host_object",
-                "binding_field"
-              ],
-              "additionalProperties": false
-            }
-          },
-          "required": [
-            "root"
-          ],
-          "additionalProperties": false,
-          "description": "On-chain Guard creation. IMPORTANT: All defined data (include all submitted data) must be defined in the 'table' field. USAGE: Set 'namedNew' field with {name, tags?, onChain?} to name the new Guard (you may also use 'object' as an alias for 'namedNew' — the MCP preprocess will convert it automatically). The Guard is immutable once created. Define the validation logic in 'root' field. When root.type='file', the file can contain all Guard fields, and any fields defined in the schema will OVERRIDE the file content."
-        },
-        "env": {
-          "type": "object",
-          "properties": {
-            "account": {
-              "default": "",
-              "type": "string",
-              "description": "Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."
-            },
-            "permission_guard": {
-              "description": "List of permission guard IDs. Used to extend additional operation permissions (requires verification and configuration in the Permission object).",
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "no_cache": {
-              "description": "Whether to disable caching.",
-              "type": "boolean"
-            },
-            "network": {
-              "description": "Omit in client/chat contexts — the runtime stamps the user's CURRENT network (the client's UI selection). Standalone MCP/CLI: omit to use the current network; set ONLY when the user explicitly names a different network (a mismatch pauses for user confirmation). Never guess or hardcode a network.",
-              "type": "string",
-              "enum": [
-                "localnet",
-                "testnet",
-                "mainnet"
-              ]
-            },
-            "referrer": {
-              "description": "Referrer ID. If the user is using the network for the first time, the referrer ID will be recorded (also applied when the SDK auto-registers the sender in the global Entity table).",
-              "type": "string"
-            },
-            "no_auto_register": {
-              "description": "Opt-out of SDK-level Entity auto-registration. By default, a business transaction whose sender has no entry in the global Entity table automatically appends an entity registration: the sender gets registered and receives an owned Resource object (their on-chain mark book) in the wallet. Set true ONLY when the user explicitly cancelled their entity registration or demands that the transaction not touch the Entity table.",
-              "type": "boolean"
-            },
-            "confirmed": {
-              "description": "Phase 2 ConfirmGate: set to true to proceed after a 'pending_confirmation' result. The operation is NOT executed until you re-call with confirmed=true after user consent.",
-              "type": "boolean"
-            },
-            "user_intent_phrases": {
-              "description": "Phase 2 ConfirmGate: explicit user intent phrases collected from conversation context (e.g. 'use default account', 'force publish'). Used to bypass confirmation rules whose bypass_on_explicit_intent matches.",
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "plan_approval": {
-              "description": "K3 24 PlanApproval: id of a goal whose plan was approved via goal_operation action='approve'. When set: 1) the ConfirmGate treats fail-open rules (standard/none levels) as pre-approved for operations under this goal's plan; 2) after successful CREATION operations, the created objects are auto-registered into the goal (GoalRecord.objects + its TaskProcess manifest — ACT station 'execution registers'). Fail-closed levels (irreversible/publish/amount) still require per-operation confirmation with env.confirmed=true.",
-              "type": "string"
-            },
-            "client_schema_version": {
-              "description": "Client-side schema version (semver, e.g. '1.0.0'). When provided, the server checks compatibility and attaches warnings if mismatched.",
-              "type": "string"
-            },
-            "schema_strict_mode": {
-              "default": false,
+                        },
+                        "id": {
+                          "type": "object",
+                          "properties": {
+                            "identifier": {
+                              "type": "integer",
+                              "minimum": 0,
+                              "maximum": 255,
+                              "description": "Identifier (0-255) for data lookup in Guard table. Slot consensus (enforced on-chain at guard table construction): 0-220 = user slots (free for business guards); 221-253 = PROTOCOL-RESERVED (rejected on-chain — reserved so future protocol features get fixed slots without colliding with published guards); 255 = ONCE replay-protection slot on Allocation (byte-keyed, the submitted bytes are the once-key — use for per-period keys like period-<N>); 254 = ONCE-FOR-OBJECT slot on Allocation (chain-derived key = bcs(the Allocation's payment_info.for_object); the submitted bytes are ignored and the submission only arms the slot — use for one-shot per-order rails such as full refunds). SLOT 0 SEMANTICS: slot 0 carries the transacted Order address by convention. As a submission slot it is legal on order/allocation/machine rails (the order exists when those verify), but FORBIDDEN on a Service buy_guard — the order does not exist when the buy-time passport is verified, so the mount is refused (service abort 43)."
+                            }
+                          },
+                          "required": [
+                            "identifier"
+                          ],
+                          "additionalProperties": false,
+                          "description": "Reference to the single candidate ID (Address type table entry) to probe across policies."
+                        },
+                        "where": {
+                          "oneOf": [
+                            {
+                              "type": "object",
+                              "properties": {
+                                "kind": {
+                                  "type": "string",
+                                  "const": "range"
+                                },
+                                "valueMin": {
+                                  "description": "Optional lower bound (inclusive unless minInclusive=false). Plain number string (U256 semantics).",
+                                  "type": "string"
+                                },
+                                "valueMax": {
+                                  "description": "Optional upper bound (inclusive unless maxInclusive=false). Plain number string (U256 semantics).",
+                                  "type": "string"
+                                },
+                                "minInclusive": {
+                                  "description": "Default true. false makes the lower bound exclusive.",
+                                  "type": "boolean"
+                                },
+                                "maxInclusive": {
+                                  "description": "Default true. false makes the upper bound exclusive.",
+                                  "type": "boolean"
+                                }
+                              },
+                              "required": [
+                                "kind"
+                              ],
+                              "additionalProperties": false,
+                              "description": "Numeric closed/open range. min=max inclusive is an equality match. At least one bound required."
+                            },
+                            {
+                              "type": "object",
+                              "properties": {
+                                "kind": {
+                                  "type": "string",
+                                  "const": "numEq"
+                                },
+                                "value": {
+                                  "type": "string",
+                                  "description": "Exact numeric match. Plain number string (U256 semantics)."
+                                }
+                              },
+                              "required": [
+                                "kind",
+                                "value"
+                              ],
+                              "additionalProperties": false
+                            },
+                            {
+                              "type": "object",
+                              "properties": {
+                                "kind": {
+                                  "type": "string",
+                                  "const": "gt"
+                                },
+                                "value": {
+                                  "type": "string",
+                                  "description": "Greater than. Plain number string (U256 semantics)."
+                                }
+                              },
+                              "required": [
+                                "kind",
+                                "value"
+                              ],
+                              "additionalProperties": false
+                            },
+                            {
+                              "type": "object",
+                              "properties": {
+                                "kind": {
+                                  "type": "string",
+                                  "const": "gte"
+                                },
+                                "value": {
+                                  "type": "string",
+                                  "description": "Greater than or equal. Plain number string (U256 semantics)."
+                                }
+                              },
+                              "required": [
+                                "kind",
+                                "value"
+                              ],
+                              "additionalProperties": false
+                            },
+                            {
+                              "type": "object",
+                              "properties": {
+                                "kind": {
+                                  "type": "string",
+                                  "const": "lt"
+                                },
+                                "value": {
+                                  "type": "string",
+                                  "description": "Less than. Plain number string (U256 semantics)."
+                                }
+                              },
+                              "required": [
+                                "kind",
+                                "value"
+                              ],
+                              "additionalProperties": false
+                            },
+                            {
+                              "type": "object",
+                              "properties": {
+                                "kind": {
+                                  "type": "string",
+                                  "const": "lte"
+                                },
+                                "value": {
+                                  "type": "string",
+                                  "description": "Less than or equal. Plain number string (U256 semantics)."
+                                }
+                              },
+                              "required": [
+                                "kind",
+                                "value"
+                              ],
+                              "additionalProperties": false
+                            },
+                            {
+                              "type": "object",
+                              "properties": {
+                                "kind": {
+                                  "type": "string",
+                                  "const": "addressEq"
+                                },
+                                "identifier": {
+                                  "type": "integer",
+                                  "minimum": 0,
+                                  "maximum": 255,
+                                  "description": "Identifier of the Address-type table entry to compare against."
+                                }
+                              },
+                              "required": [
+                                "kind",
+                                "identifier"
+                              ],
+                              "additionalProperties": false
+                            },
+                            {
+                              "type": "object",
+                              "properties": {
+                                "kind": {
+                                  "type": "string",
+                                  "const": "stringEq"
+                                },
+                                "value": {
+                                  "type": "string",
+                                  "description": "Exact string match (byte equality, UTF-8)."
+                                }
+                              },
+                              "required": [
+                                "kind",
+                                "value"
+                              ],
+                              "additionalProperties": false
+                            },
+                            {
+                              "type": "object",
+                              "properties": {
+                                "kind": {
+                                  "type": "string",
+                                  "const": "stringContains"
+                                },
+                                "value": {
+                                  "type": "string",
+                                  "description": "Substring match, case-sensitive."
+                                }
+                              },
+                              "required": [
+                                "kind",
+                                "value"
+                              ],
+                              "additionalProperties": false
+                            },
+                            {
+                              "type": "object",
+                              "properties": {
+                                "kind": {
+                                  "type": "string",
+                                  "const": "stringNoCaseContains"
+                                },
+                                "value": {
+                                  "type": "string",
+                                  "description": "Substring match, case-insensitive."
+                                }
+                              },
+                              "required": [
+                                "kind",
+                                "value"
+                              ],
+                              "additionalProperties": false
+                            },
+                            {
+                              "type": "object",
+                              "properties": {
+                                "kind": {
+                                  "type": "string",
+                                  "const": "boolEq"
+                                },
+                                "value": {
+                                  "type": "boolean",
+                                  "description": "Boolean equality."
+                                }
+                              },
+                              "required": [
+                                "kind",
+                                "value"
+                              ],
+                              "additionalProperties": false
+                            }
+                          ],
+                          "description": "Predicate filter applied to the value stored under each policy key for this ID."
+                        }
+                      },
+                      "required": [
+                        "type",
+                        "object",
+                        "id",
+                        "where"
+                      ],
+                      "additionalProperties": false,
+                      "description": "Returns VecString. Reverse lookup: all policy keys whose stored value for the given ID matches the predicate (scans the policy schema and probes each key). Compose: vec_length (how many keys match), vec_indexof_string + logic_as_u256_equal (does a specific key match), vec_contains_string (specific key membership)."
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "type": {
+                          "type": "string",
+                          "const": "query_repository_policies_keys"
+                        },
+                        "object": {
+                          "type": "object",
+                          "properties": {
+                            "identifier": {
+                              "type": "integer",
+                              "minimum": 0,
+                              "maximum": 255,
+                              "description": "Identifier (0-255) for data lookup in Guard table. Slot consensus (enforced on-chain at guard table construction): 0-220 = user slots (free for business guards); 221-253 = PROTOCOL-RESERVED (rejected on-chain — reserved so future protocol features get fixed slots without colliding with published guards); 255 = ONCE replay-protection slot on Allocation (byte-keyed, the submitted bytes are the once-key — use for per-period keys like period-<N>); 254 = ONCE-FOR-OBJECT slot on Allocation (chain-derived key = bcs(the Allocation's payment_info.for_object); the submitted bytes are ignored and the submission only arms the slot — use for one-shot per-order rails such as full refunds). SLOT 0 SEMANTICS: slot 0 carries the transacted Order address by convention. As a submission slot it is legal on order/allocation/machine rails (the order exists when those verify), but FORBIDDEN on a Service buy_guard — the order does not exist when the buy-time passport is verified, so the mount is refused (service abort 43)."
+                            }
+                          },
+                          "required": [
+                            "identifier"
+                          ],
+                          "additionalProperties": false,
+                          "description": "Reference to the Repository object in the Guard table (must be Address type)."
+                        }
+                      },
+                      "required": [
+                        "type",
+                        "object"
+                      ],
+                      "additionalProperties": false,
+                      "description": "Returns VecString. Lists ALL policy key names of the Repository (max 50). Use vec_length to bound per-key composite queries or vec_contains_string to assert a key exists."
+                    }
+                  ],
+                  "$ref": "#/definitions/__schema2"
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "type": {
+                      "type": "string",
+                      "const": "file"
+                    },
+                    "file_path": {
+                      "type": "string",
+                      "description": "ABSOLUTE path to JSON or Markdown file containing Guard definition. Field name is `file_path` (NOT `file`). File can define: namedNew, description, table, root, rely."
+                    },
+                    "format": {
+                      "default": "json",
+                      "description": "File format: 'json' or 'markdown'. Default is 'json'.",
+                      "type": "string",
+                      "enum": [
+                        "json",
+                        "markdown"
+                      ]
+                    }
+                  },
+                  "required": [
+                    "type",
+                    "file_path",
+                    "format"
+                  ],
+                  "additionalProperties": false
+                }
+              ],
+              "description": "Root definition: either a direct GuardNode (must be a logical operation returning Bool) or a file reference (type='file'). When type='file', the file can define all Guard fields (namedNew, description, table, root, rely), and schema fields override file content."
+            },
+            "rely": {
+              "description": "All Guard objects that the new Guard object depends on. If logic_or is true, the execution result of the new Guard object is the logical OR of the execution results of all dependent Guard objects; otherwise, it is logical AND. When using root.type='file', this field OVERRIDES rely in the file.",
+              "type": "object",
+              "properties": {
+                "guards": {
+                  "type": "array",
+                  "items": {
+                    "type": "string",
+                    "description": "Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."
+                  },
+                  "description": "List of dependent Guard object IDs or names."
+                },
+                "logic_or": {
+                  "description": "Whether to use logical OR operator.",
+                  "type": "boolean"
+                }
+              },
+              "required": [
+                "guards"
+              ],
+              "additionalProperties": false
+            },
+            "binding_hint": {
+              "description": "Phase 5 Guard capability hint. Provides semantic context (action + host_object + binding_field + optional rule/failure_conditions) for puzzle derivation. When provided, the response will include complete guard_advice (puzzle_status, matched_scene, suggested_patterns, confirmation_text, pending_questions). When absent, puzzle_status intent/binding dimensions are marked incomplete.",
+              "type": "object",
+              "properties": {
+                "action": {
+                  "type": "string",
+                  "enum": [
+                    "buy",
+                    "forward",
+                    "allocate",
+                    "claim_reward",
+                    "vote",
+                    "dispute",
+                    "write_repository",
+                    "submit_progress",
+                    "gen_passport",
+                    "custom"
+                  ],
+                  "description": "Protected action type. Example: 'buy' for Service buy_guard, 'forward' for Machine Forward.guard."
+                },
+                "host_object": {
+                  "type": "string",
+                  "enum": [
+                    "Service",
+                    "Machine",
+                    "Arbitration",
+                    "Reward",
+                    "Repository",
+                    "Progress",
+                    "Demand",
+                    "Standalone"
+                  ],
+                  "description": "Host object type. Example: 'Service', 'Machine'."
+                },
+                "binding_field": {
+                  "type": "string",
+                  "enum": [
+                    "buy_guard",
+                    "order_allocators",
+                    "Forward.guard",
+                    "submission",
+                    "guard",
+                    "write_guard",
+                    "usage_guard",
+                    "voting_guard",
+                    "ServiceGuard",
+                    "none"
+                  ],
+                  "description": "Binding field. Example: 'buy_guard', 'Forward.guard'."
+                },
+                "rule_sentence": {
+                  "description": "One-sentence description of the validation rule (human-readable). Example: 'Only the author can purchase this service'.",
+                  "type": "string"
+                },
+                "failure_conditions": {
+                  "description": "List of conditions under which the Guard should FAIL. Example: ['Signer is not in allowlist','Order is already completed'].",
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "circular_reference": {
+                  "description": "Whether the Guard references the Host Object itself (circular reference pattern). true=Guard queries the Host Object it binds to.",
+                  "type": "boolean"
+                }
+              },
+              "required": [
+                "action",
+                "host_object",
+                "binding_field"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "required": [
+            "root"
+          ],
+          "additionalProperties": false,
+          "description": "On-chain Guard creation. IMPORTANT: All defined data (include all submitted data) must be defined in the 'table' field. USAGE: Set 'namedNew' field with {name, tags?, onChain?} to name the new Guard (you may also use 'object' as an alias for 'namedNew' — the MCP preprocess will convert it automatically). The Guard is immutable once created. Define the validation logic in 'root' field. When root.type='file', the file can contain all Guard fields, and any fields defined in the schema will OVERRIDE the file content."
+        },
+        "env": {
+          "type": "object",
+          "properties": {
+            "account": {
+              "default": "",
+              "type": "string",
+              "description": "Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."
+            },
+            "permission_guard": {
+              "description": "List of permission guard IDs. Used to extend additional operation permissions (requires verification and configuration in the Permission object).",
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "no_cache": {
+              "description": "Whether to disable caching.",
+              "type": "boolean"
+            },
+            "network": {
+              "description": "Omit in client/chat contexts — the runtime stamps the user's CURRENT network (the client's UI selection). Standalone MCP/CLI: omit to use the current network; set ONLY when the user explicitly names a different network (a mismatch pauses for user confirmation). Never guess or hardcode a network.",
+              "type": "string",
+              "enum": [
+                "localnet",
+                "testnet",
+                "mainnet"
+              ]
+            },
+            "referrer": {
+              "description": "Referrer ID. If the user is using the network for the first time, the referrer ID will be recorded (also applied when the SDK auto-registers the sender in the global Entity table).",
+              "type": "string"
+            },
+            "no_auto_register": {
+              "description": "Opt-out of SDK-level Entity auto-registration. By default, a business transaction whose sender has no entry in the global Entity table automatically appends an entity registration: the sender gets registered and receives an owned Resource object (their on-chain mark book) in the wallet. Set true ONLY when the user explicitly cancelled their entity registration or demands that the transaction not touch the Entity table.",
+              "type": "boolean"
+            },
+            "confirmed": {
+              "description": "Phase 2 ConfirmGate: set to true to proceed after a 'pending_confirmation' result. The operation is NOT executed until you re-call with confirmed=true after user consent.",
+              "type": "boolean"
+            },
+            "user_intent_phrases": {
+              "description": "Phase 2 ConfirmGate: explicit user intent phrases collected from conversation context (e.g. 'use default account', 'force publish'). Used to bypass confirmation rules whose bypass_on_explicit_intent matches.",
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "plan_approval": {
+              "description": "K3 24 PlanApproval: id of a goal whose plan was approved via goal_operation action='approve'. When set: 1) the ConfirmGate treats fail-open rules (standard/none levels) as pre-approved for operations under this goal's plan; 2) after successful CREATION operations, the created objects are auto-registered into the goal (GoalRecord.objects + its TaskProcess manifest — ACT station 'execution registers'). Fail-closed levels (irreversible/publish/amount) still require per-operation confirmation with env.confirmed=true.",
+              "type": "string"
+            },
+            "client_schema_version": {
+              "description": "Client-side schema version (semver, e.g. '1.0.0'). When provided, the server checks compatibility and attaches warnings if mismatched.",
+              "type": "string"
+            },
+            "schema_strict_mode": {
+              "default": false,
               "description": "When true, schema incompatibility returns an error instead of a warning. Default: false (warn mode).",
               "type": "boolean"
             },
@@ -22839,7 +23156,7 @@
           ]
         },
         "about_address": {
-          "description": "About binding (K3 contract): ONLY the counterparty ACCOUNT address (address first byte = account type) or a Proof object address (first byte = Proof type) — a messenger contact record. NEVER a business object (Progress/Order/Arb) and never a guard decision condition. Accepts null/undefined (→ Move Option::none). When provided, must be a raw 0x-prefixed address (NOT a name).",
+          "description": "About binding (K3 contract): ONLY the counterparty ACCOUNT address (address first byte = account type) or a Proof object address (first byte = Proof type) — a messenger contact record. NEVER a business object (Progress/Order/Arb) and never a guard decision condition. ONE EXCEPTION (bstn-tn-261024 F-30, live-proven): a Proof intended for order.required_info_bind MUST carry about = the ORDER's own address, with the Proof creator = the order owner (the owner-signed contact/attn proof the bind entry demands; the messenger-contact restriction does not apply to that flow). Accepts null/undefined (→ Move Option::none). When provided, must be a raw 0x-prefixed address (NOT a name).",
           "anyOf": [
             {
               "type": "string",
@@ -25251,117 +25568,400 @@
               "description": "GuardNode that returns the history index (U64 type). Typically an 'identifier' node referencing a U64 value from the Guard table.",
               "allOf": [
                 {
-                  "$ref": "#/definitions/__schema3"
-                }
-              ],
-              "$ref": "#/definitions/__schema2"
-            },
-            "sessionIdx": {
-              "description": "GuardNode that returns the session index (U64 type) within the history entry. Typically an 'identifier' node referencing a U64 value from the Guard table.",
-              "allOf": [
+                  "$ref": "#/definitions/__schema3"
+                }
+              ],
+              "$ref": "#/definitions/__schema2"
+            },
+            "sessionIdx": {
+              "description": "GuardNode that returns the session index (U64 type) within the history entry. Typically an 'identifier' node referencing a U64 value from the Guard table.",
+              "allOf": [
+                {
+                  "$ref": "#/definitions/__schema3"
+                }
+              ],
+              "$ref": "#/definitions/__schema2"
+            },
+            "forwardIdx": {
+              "description": "GuardNode that returns the forward operation index (U64 type) within the session. Typically an 'identifier' node referencing a U64 value from the Guard table.",
+              "allOf": [
+                {
+                  "$ref": "#/definitions/__schema3"
+                }
+              ],
+              "$ref": "#/definitions/__schema2"
+            }
+          },
+          "required": [
+            "type",
+            "object",
+            "historyIdx",
+            "sessionIdx",
+            "forwardIdx"
+          ],
+          "additionalProperties": false,
+          "description": "Returns U64. Counts the number of retained submissions within the specified forward operation."
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "type": "string",
+              "const": "query_progress_history_session_forward_retained_submission_value"
+            },
+            "object": {
+              "type": "object",
+              "properties": {
+                "identifier": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "maximum": 255,
+                  "description": "Identifier (0-255) for data lookup in Guard table. Slot consensus (enforced on-chain at guard table construction): 0-220 = user slots (free for business guards); 221-253 = PROTOCOL-RESERVED (rejected on-chain — reserved so future protocol features get fixed slots without colliding with published guards); 255 = ONCE replay-protection slot on Allocation (byte-keyed, the submitted bytes are the once-key — use for per-period keys like period-<N>); 254 = ONCE-FOR-OBJECT slot on Allocation (chain-derived key = bcs(the Allocation's payment_info.for_object); the submitted bytes are ignored and the submission only arms the slot — use for one-shot per-order rails such as full refunds). SLOT 0 SEMANTICS: slot 0 carries the transacted Order address by convention. As a submission slot it is legal on order/allocation/machine rails (the order exists when those verify), but FORBIDDEN on a Service buy_guard — the order does not exist when the buy-time passport is verified, so the mount is refused (service abort 43)."
+                }
+              },
+              "required": [
+                "identifier"
+              ],
+              "additionalProperties": false,
+              "description": "Reference to the Progress object in the Guard table (must be Address type)."
+            },
+            "historyIdx": {
+              "description": "GuardNode that returns the history index (U64 type). Typically an 'identifier' node referencing a U64 value from the Guard table.",
+              "allOf": [
+                {
+                  "$ref": "#/definitions/__schema3"
+                }
+              ],
+              "$ref": "#/definitions/__schema2"
+            },
+            "sessionIdx": {
+              "description": "GuardNode that returns the session index (U64 type) within the history entry. Typically an 'identifier' node referencing a U64 value from the Guard table.",
+              "allOf": [
+                {
+                  "$ref": "#/definitions/__schema3"
+                }
+              ],
+              "$ref": "#/definitions/__schema2"
+            },
+            "forwardIdx": {
+              "description": "GuardNode that returns the forward operation index (U64 type) within the session. Typically an 'identifier' node referencing a U64 value from the Guard table.",
+              "allOf": [
+                {
+                  "$ref": "#/definitions/__schema3"
+                }
+              ],
+              "$ref": "#/definitions/__schema2"
+            },
+            "identifier": {
+              "description": "GuardNode that returns the submission identifier (U8 type) — which retained submission of the forward to read. Typically an 'identifier' node referencing a U8 value from the Guard table.",
+              "allOf": [
+                {
+                  "$ref": "#/definitions/__schema3"
+                }
+              ],
+              "$ref": "#/definitions/__schema2"
+            }
+          },
+          "required": [
+            "type",
+            "object",
+            "historyIdx",
+            "sessionIdx",
+            "forwardIdx",
+            "identifier"
+          ],
+          "additionalProperties": false,
+          "description": "Returns VecU8 (the ONLY history query that does not return U64). Value of the specified retained submission of a HISTORY record (query 1281) — the history-side counterpart of the ACTIVE-SESSION-ONLY 1268 read, which goes blind once the session migrates into history. Use 1274/1275 to discover the history/session/forward indexes first. Throws error when the record carries no submission for the identifier (Guard validation fails)."
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "type": "string",
+              "const": "query_repository_data_count_where"
+            },
+            "object": {
+              "type": "object",
+              "properties": {
+                "identifier": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "maximum": 255,
+                  "description": "Identifier (0-255) for data lookup in Guard table. Slot consensus (enforced on-chain at guard table construction): 0-220 = user slots (free for business guards); 221-253 = PROTOCOL-RESERVED (rejected on-chain — reserved so future protocol features get fixed slots without colliding with published guards); 255 = ONCE replay-protection slot on Allocation (byte-keyed, the submitted bytes are the once-key — use for per-period keys like period-<N>); 254 = ONCE-FOR-OBJECT slot on Allocation (chain-derived key = bcs(the Allocation's payment_info.for_object); the submitted bytes are ignored and the submission only arms the slot — use for one-shot per-order rails such as full refunds). SLOT 0 SEMANTICS: slot 0 carries the transacted Order address by convention. As a submission slot it is legal on order/allocation/machine rails (the order exists when those verify), but FORBIDDEN on a Service buy_guard — the order does not exist when the buy-time passport is verified, so the mount is refused (service abort 43)."
+                }
+              },
+              "required": [
+                "identifier"
+              ],
+              "additionalProperties": false,
+              "description": "Reference to the Repository object in the Guard table (must be Address type)."
+            },
+            "key": {
+              "type": "object",
+              "properties": {
+                "identifier": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "maximum": 255,
+                  "description": "Identifier (0-255) for data lookup in Guard table. Slot consensus (enforced on-chain at guard table construction): 0-220 = user slots (free for business guards); 221-253 = PROTOCOL-RESERVED (rejected on-chain — reserved so future protocol features get fixed slots without colliding with published guards); 255 = ONCE replay-protection slot on Allocation (byte-keyed, the submitted bytes are the once-key — use for per-period keys like period-<N>); 254 = ONCE-FOR-OBJECT slot on Allocation (chain-derived key = bcs(the Allocation's payment_info.for_object); the submitted bytes are ignored and the submission only arms the slot — use for one-shot per-order rails such as full refunds). SLOT 0 SEMANTICS: slot 0 carries the transacted Order address by convention. As a submission slot it is legal on order/allocation/machine rails (the order exists when those verify), but FORBIDDEN on a Service buy_guard — the order does not exist when the buy-time passport is verified, so the mount is refused (service abort 43)."
+                }
+              },
+              "required": [
+                "identifier"
+              ],
+              "additionalProperties": false,
+              "description": "Reference to the policy key (String type table entry) whose data table is scanned."
+            },
+            "ids": {
+              "type": "object",
+              "properties": {
+                "identifier": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "maximum": 255,
+                  "description": "Identifier (0-255) for data lookup in Guard table. Slot consensus (enforced on-chain at guard table construction): 0-220 = user slots (free for business guards); 221-253 = PROTOCOL-RESERVED (rejected on-chain — reserved so future protocol features get fixed slots without colliding with published guards); 255 = ONCE replay-protection slot on Allocation (byte-keyed, the submitted bytes are the once-key — use for per-period keys like period-<N>); 254 = ONCE-FOR-OBJECT slot on Allocation (chain-derived key = bcs(the Allocation's payment_info.for_object); the submitted bytes are ignored and the submission only arms the slot — use for one-shot per-order rails such as full refunds). SLOT 0 SEMANTICS: slot 0 carries the transacted Order address by convention. As a submission slot it is legal on order/allocation/machine rails (the order exists when those verify), but FORBIDDEN on a Service buy_guard — the order does not exist when the buy-time passport is verified, so the mount is refused (service abort 43)."
+                }
+              },
+              "required": [
+                "identifier"
+              ],
+              "additionalProperties": false,
+              "description": "Reference to the candidate ID list (VecAddress type table entry). Duplicates are deduped; max 100 candidates."
+            },
+            "where": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "range"
+                    },
+                    "valueMin": {
+                      "description": "Optional lower bound (inclusive unless minInclusive=false). Plain number string (U256 semantics).",
+                      "type": "string"
+                    },
+                    "valueMax": {
+                      "description": "Optional upper bound (inclusive unless maxInclusive=false). Plain number string (U256 semantics).",
+                      "type": "string"
+                    },
+                    "minInclusive": {
+                      "description": "Default true. false makes the lower bound exclusive.",
+                      "type": "boolean"
+                    },
+                    "maxInclusive": {
+                      "description": "Default true. false makes the upper bound exclusive.",
+                      "type": "boolean"
+                    }
+                  },
+                  "required": [
+                    "kind"
+                  ],
+                  "additionalProperties": false,
+                  "description": "Numeric closed/open range. min=max inclusive is an equality match. At least one bound required."
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "numEq"
+                    },
+                    "value": {
+                      "type": "string",
+                      "description": "Exact numeric match. Plain number string (U256 semantics)."
+                    }
+                  },
+                  "required": [
+                    "kind",
+                    "value"
+                  ],
+                  "additionalProperties": false
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "gt"
+                    },
+                    "value": {
+                      "type": "string",
+                      "description": "Greater than. Plain number string (U256 semantics)."
+                    }
+                  },
+                  "required": [
+                    "kind",
+                    "value"
+                  ],
+                  "additionalProperties": false
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "gte"
+                    },
+                    "value": {
+                      "type": "string",
+                      "description": "Greater than or equal. Plain number string (U256 semantics)."
+                    }
+                  },
+                  "required": [
+                    "kind",
+                    "value"
+                  ],
+                  "additionalProperties": false
+                },
                 {
-                  "$ref": "#/definitions/__schema3"
-                }
-              ],
-              "$ref": "#/definitions/__schema2"
-            },
-            "forwardIdx": {
-              "description": "GuardNode that returns the forward operation index (U64 type) within the session. Typically an 'identifier' node referencing a U64 value from the Guard table.",
-              "allOf": [
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "lt"
+                    },
+                    "value": {
+                      "type": "string",
+                      "description": "Less than. Plain number string (U256 semantics)."
+                    }
+                  },
+                  "required": [
+                    "kind",
+                    "value"
+                  ],
+                  "additionalProperties": false
+                },
                 {
-                  "$ref": "#/definitions/__schema3"
-                }
-              ],
-              "$ref": "#/definitions/__schema2"
-            }
-          },
-          "required": [
-            "type",
-            "object",
-            "historyIdx",
-            "sessionIdx",
-            "forwardIdx"
-          ],
-          "additionalProperties": false,
-          "description": "Returns U64. Counts the number of retained submissions within the specified forward operation."
-        },
-        {
-          "type": "object",
-          "properties": {
-            "type": {
-              "type": "string",
-              "const": "query_progress_history_session_forward_retained_submission_value"
-            },
-            "object": {
-              "type": "object",
-              "properties": {
-                "identifier": {
-                  "type": "integer",
-                  "minimum": 0,
-                  "maximum": 255,
-                  "description": "Identifier (0-255) for data lookup in Guard table. Slot consensus (enforced on-chain at guard table construction): 0-220 = user slots (free for business guards); 221-253 = PROTOCOL-RESERVED (rejected on-chain — reserved so future protocol features get fixed slots without colliding with published guards); 255 = ONCE replay-protection slot on Allocation (byte-keyed, the submitted bytes are the once-key — use for per-period keys like period-<N>); 254 = ONCE-FOR-OBJECT slot on Allocation (chain-derived key = bcs(the Allocation's payment_info.for_object); the submitted bytes are ignored and the submission only arms the slot — use for one-shot per-order rails such as full refunds). SLOT 0 SEMANTICS: slot 0 carries the transacted Order address by convention. As a submission slot it is legal on order/allocation/machine rails (the order exists when those verify), but FORBIDDEN on a Service buy_guard — the order does not exist when the buy-time passport is verified, so the mount is refused (service abort 43)."
-                }
-              },
-              "required": [
-                "identifier"
-              ],
-              "additionalProperties": false,
-              "description": "Reference to the Progress object in the Guard table (must be Address type)."
-            },
-            "historyIdx": {
-              "description": "GuardNode that returns the history index (U64 type). Typically an 'identifier' node referencing a U64 value from the Guard table.",
-              "allOf": [
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "lte"
+                    },
+                    "value": {
+                      "type": "string",
+                      "description": "Less than or equal. Plain number string (U256 semantics)."
+                    }
+                  },
+                  "required": [
+                    "kind",
+                    "value"
+                  ],
+                  "additionalProperties": false
+                },
                 {
-                  "$ref": "#/definitions/__schema3"
-                }
-              ],
-              "$ref": "#/definitions/__schema2"
-            },
-            "sessionIdx": {
-              "description": "GuardNode that returns the session index (U64 type) within the history entry. Typically an 'identifier' node referencing a U64 value from the Guard table.",
-              "allOf": [
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "addressEq"
+                    },
+                    "identifier": {
+                      "type": "integer",
+                      "minimum": 0,
+                      "maximum": 255,
+                      "description": "Identifier of the Address-type table entry to compare against."
+                    }
+                  },
+                  "required": [
+                    "kind",
+                    "identifier"
+                  ],
+                  "additionalProperties": false
+                },
                 {
-                  "$ref": "#/definitions/__schema3"
-                }
-              ],
-              "$ref": "#/definitions/__schema2"
-            },
-            "forwardIdx": {
-              "description": "GuardNode that returns the forward operation index (U64 type) within the session. Typically an 'identifier' node referencing a U64 value from the Guard table.",
-              "allOf": [
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "stringEq"
+                    },
+                    "value": {
+                      "type": "string",
+                      "description": "Exact string match (byte equality, UTF-8)."
+                    }
+                  },
+                  "required": [
+                    "kind",
+                    "value"
+                  ],
+                  "additionalProperties": false
+                },
                 {
-                  "$ref": "#/definitions/__schema3"
-                }
-              ],
-              "$ref": "#/definitions/__schema2"
-            },
-            "identifier": {
-              "description": "GuardNode that returns the submission identifier (U8 type) — which retained submission of the forward to read. Typically an 'identifier' node referencing a U8 value from the Guard table.",
-              "allOf": [
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "stringContains"
+                    },
+                    "value": {
+                      "type": "string",
+                      "description": "Substring match, case-sensitive."
+                    }
+                  },
+                  "required": [
+                    "kind",
+                    "value"
+                  ],
+                  "additionalProperties": false
+                },
                 {
-                  "$ref": "#/definitions/__schema3"
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "stringNoCaseContains"
+                    },
+                    "value": {
+                      "type": "string",
+                      "description": "Substring match, case-insensitive."
+                    }
+                  },
+                  "required": [
+                    "kind",
+                    "value"
+                  ],
+                  "additionalProperties": false
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "boolEq"
+                    },
+                    "value": {
+                      "type": "boolean",
+                      "description": "Boolean equality."
+                    }
+                  },
+                  "required": [
+                    "kind",
+                    "value"
+                  ],
+                  "additionalProperties": false
                 }
               ],
-              "$ref": "#/definitions/__schema2"
+              "description": "Predicate filter applied to each candidate's data value."
             }
           },
           "required": [
             "type",
             "object",
-            "historyIdx",
-            "sessionIdx",
-            "forwardIdx",
-            "identifier"
+            "key",
+            "ids",
+            "where"
           ],
           "additionalProperties": false,
-          "description": "Returns VecU8 (the ONLY history query that does not return U64). Value of the specified retained submission of a HISTORY record (query 1281) — the history-side counterpart of the ACTIVE-SESSION-ONLY 1268 read, which goes blind once the session migrates into history. Use 1274/1275 to discover the history/session/forward indexes first. Throws error when the record carries no submission for the identifier (Guard validation fails)."
+          "description": "Returns U64. Counts candidates whose stored value matches the predicate. Numeric predicates: U256 semantics (pass plain number strings). Range is closed interval per side (minInclusive/maxInclusive default true); a missing side is unbounded. numEq/gt/gte/lt/lte are sugar over range. Entries whose value type does not match the predicate kind are skipped (never error), so the count only reflects matching entries."
         },
         {
           "type": "object",
           "properties": {
             "type": {
               "type": "string",
-              "const": "query_repository_data_count_where"
+              "const": "query_repository_data_sum_where"
             },
             "object": {
               "type": "object",
@@ -25637,14 +26237,14 @@
             "where"
           ],
           "additionalProperties": false,
-          "description": "Returns U64. Counts candidates whose stored value matches the predicate. Numeric predicates: U256 semantics (pass plain number strings). Range is closed interval per side (minInclusive/maxInclusive default true); a missing side is unbounded. numEq/gt/gte/lt/lte are sugar over range. Entries whose value type does not match the predicate kind are skipped (never error), so the count only reflects matching entries."
+          "description": "Returns U256. Sums the numeric payloads of candidates whose stored value matches the predicate (on-chain checked add, overflow aborts). Non-numeric or mismatching entries contribute 0. Use logic_as_u256_* to compare the sum."
         },
         {
           "type": "object",
           "properties": {
             "type": {
               "type": "string",
-              "const": "query_repository_data_sum_where"
+              "const": "query_repository_data_sum_where_bound"
             },
             "object": {
               "type": "object",
@@ -25692,7 +26292,7 @@
                 "identifier"
               ],
               "additionalProperties": false,
-              "description": "Reference to the candidate ID list (VecAddress type table entry). Duplicates are deduped; max 100 candidates."
+              "description": "Reference to the candidate ID list (VecAddress type table entry). Each id should be an ORDER address (e.g. order-keyed contribution rows). Duplicates are deduped; max 100 candidates."
             },
             "where": {
               "oneOf": [
@@ -25920,7 +26520,7 @@
             "where"
           ],
           "additionalProperties": false,
-          "description": "Returns U256. Sums the numeric payloads of candidates whose stored value matches the predicate (on-chain checked add, overflow aborts). Non-numeric or mismatching entries contribute 0. Use logic_as_u256_* to compare the sum."
+          "description": "Returns U256. ESCROW-BOUND sum (query 1179): per-row min(row_value, order.amount of the Order the row id names); a row keyed by anything that is not an Order contributes 0 (fail-closed). Unlike query_repository_data_sum_where (self-reported row values), a record cannot claim more than the Order actually escrowed — the forgery-proof aggregate for threshold gates and Formula pricing. Use logic_as_u256_* to compare the sum."
         },
         {
           "type": "object",