@wowok/agent-mcp 3.4.3 → 3.4.4

package/dist/schemas/bridge_operation.schema.json

@@ -1,1069 +1 @@
-{
-  "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://wowok.net/schemas/bridge_operation.json",
-  "title": "Bridge - Cross-Chain Operations",
-  "description": "Simplified cross-chain bridge between WOW and EVM (Ethereum mainnet). WOW→EVM is TWO steps: step1 cross_chain_wow_to_evm (deposit/lock, returns transferId) → poll query_transfer_status until latestState.step='signatures_ready' (~1-5 min) → step2 claim_wow_to_evm (claim on EVM, needs EVM gas). Assets arrive ONLY after step2. EVM→WOW is ONE step (auto-claim on WOW, ~10-20 min). Operations: cross_chain_wow_to_evm, claim_wow_to_evm, cross_chain_evm_to_wow, resume_transfer, withdraw, query_active_evm_account, query_supported_evm_chains, query_supported_tokens, query_transfer_list, query_transfer_status, manage_evm_rpc. Global single activeEvmAccount auto-generated on first use. Use schema_query (name='bridge_operation') for exact field structures.",
-  "oneOf": [
-    {
-      "type": "object",
-      "properties": {
-        "operation_type": {
-          "type": "string",
-          "const": "cross_chain_wow_to_evm"
-        },
-        "data": {
-          "type": "object",
-          "properties": {
-            "token": {
-              "type": "string",
-              "enum": [
-                "ETH",
-                "WETH",
-                "WBTC",
-                "USDC",
-                "USDT"
-              ],
-              "description": "Cross-chain token type"
-            },
-            "amount": {
-              "type": "string",
-              "description": "Cross-chain amount (WOW-side smallest unit, wowDecimals)"
-            },
-            "withdrawTo": {
-              "description": "Final withdrawal EVM address; if omitted, assets remain in activeEvmAccount. When provided, the SDK uses the activeEvmAccount key to transfer to this address.",
-              "type": "string",
-              "pattern": "^0x[0-9a-fA-F]{40}$"
-            },
-            "idempotencyKey": {
-              "description": "Idempotency key to prevent duplicate deposits on retry. If a successful transfer with this key exists, returns it immediately (idempotentHit=true).",
-              "type": "string",
-              "minLength": 1,
-              "maxLength": 128
-            }
-          },
-          "required": [
-            "token",
-            "amount"
-          ],
-          "additionalProperties": false,
-          "description": "WOW→EVM cross-chain (step 1: deposit only). Returns immediately with depositTxDigest + bridgeSeq + transferId. This operation only locks assets on WOW; it does NOT complete the cross-chain. After deposit, bridge nodes need ~1-5 minutes to sign. Use query_transfer_status to monitor progress; when latestState.step shows 'signatures_ready', call claim_wow_to_evm (step 2) to claim assets on EVM. [Gas requirements] Step 1 needs WOW gas; Step 2 (claim_wow_to_evm) needs activeEvmAccount to have target-chain gas. [Retry rule] If the call times out or a step fails, NEVER re-submit the same cross_chain request — the deposit may already be on-chain; poll query_transfer_status(transferId) and recover via resume_transfer instead."
-        },
-        "env": {
-          "type": "object",
-          "properties": {
-            "account": {
-              "default": "",
-              "type": "string",
-              "description": "Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."
-            },
-            "permission_guard": {
-              "description": "List of permission guard IDs. Used to extend additional operation permissions (requires verification and configuration in the Permission object).",
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "no_cache": {
-              "description": "Whether to disable caching.",
-              "type": "boolean"
-            },
-            "network": {
-              "description": "Omit in chat-client contexts — the runtime stamps the user's CURRENT network (the client's UI selection). Standalone MCP/CLI: omit to use the current network; set ONLY when the user explicitly names a different network (a mismatch pauses for user confirmation). Never guess or hardcode a network.",
-              "type": "string",
-              "enum": [
-                "localnet",
-                "testnet",
-                "mainnet"
-              ]
-            },
-            "referrer": {
-              "description": "Referrer ID. If the user is using the network for the first time, the referrer ID will be recorded (also applied when the SDK auto-registers the sender in the global Entity table).",
-              "type": "string"
-            },
-            "no_auto_register": {
-              "description": "Opt-out of SDK-level Entity auto-registration. By default, a business transaction whose sender has no entry in the global Entity table automatically appends an entity registration: the sender gets registered and receives an owned Resource object (their on-chain mark book) in the wallet. Set true ONLY when the user explicitly cancelled their entity registration or demands that the transaction not touch the Entity table.",
-              "type": "boolean"
-            },
-            "confirmed": {
-              "description": "Phase 2 ConfirmGate: set to true to proceed after a 'pending_confirmation' result. The operation is NOT executed until you re-call with confirmed=true after user consent.",
-              "type": "boolean"
-            },
-            "user_intent_phrases": {
-              "description": "Phase 2 ConfirmGate: explicit user intent phrases collected from conversation context (e.g. 'use default account', 'force publish'). Used to bypass confirmation rules whose bypass_on_explicit_intent matches.",
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "plan_approval": {
-              "description": "K3 24 PlanApproval: id of a goal whose plan was approved via goal_operation action='approve'. When set: 1) the ConfirmGate treats fail-open rules (standard/none levels) as pre-approved for operations under this goal's plan; 2) after successful CREATION operations, the created objects are auto-registered into the goal (GoalRecord.objects + its TaskProcess manifest — ACT station 'execution registers'). Fail-closed levels (irreversible/publish/amount) still require per-operation confirmation with env.confirmed=true.",
-              "type": "string"
-            },
-            "client_schema_version": {
-              "description": "Client-side schema version (semver, e.g. '1.0.0'). When provided, the server checks compatibility and attaches warnings if mismatched.",
-              "type": "string"
-            },
-            "schema_strict_mode": {
-              "default": false,
-              "description": "When true, schema incompatibility returns an error instead of a warning. Default: false (warn mode).",
-              "type": "boolean"
-            },
-            "dry_run": {
-              "description": "Phase 1 dry_run: when true, SIMULATE the transaction without signing or submitting. Returns effects + events showing what WOULD happen — no on-chain state is modified, no gas is charged. Use this to verify that an operation will succeed before committing. The returned digest will be 'dry_run:<timestamp>' and objectChanges will be empty (simulation only).",
-              "type": "boolean"
-            },
-            "window_profile": {
-              "description": "Time-window profile for trial runs (N8 ktt6 F-14 re-carving of the 'business windows are never test-compressed' ruling, 2026-11-04). 'production' (default): compressed time-window violations BLOCK publish exactly as before. 'test': compressed windows are ADMITTED so a disposable trial store can run its full lifecycle fast — R-TIME-PROFILE violations degrade to loud named disclosures, and the publish itself is BLOCKED on a real network (testnet/mainnet); point the trial at a local/dev chain (env.network='localnet'). Trial discipline: test-profile stores are throwaway — a production store must re-issue WITHOUT this flag (guards freeze at publish, so compressed windows are unrepairable except by rebuilding the store).",
-              "type": "string",
-              "enum": [
-                "production",
-                "test"
-              ]
-            },
-            "response_level": {
-              "description": "Write-success response size. 'compact' (default) trims the structured result to key fields (digest + created object references); 'full' includes the complete raw result. Default: compact.",
-              "type": "string",
-              "enum": [
-                "compact",
-                "full"
-              ]
-            },
-            "confirm_mode": {
-              "description": "Confirmation frequency for this call. 'full': confirm every matched gate rule. 'streamlined' (client default): skip fail-open 'standard' level prompts — fail-closed levels (irreversible/publish/amount) ALWAYS still confirm. 'quiet': same hard floor as streamlined, for clients that batch/suppress repeat low-risk prompts in their own UI. This field NEVER downgrades fail-closed levels.",
-              "type": "string",
-              "enum": [
-                "full",
-                "streamlined",
-                "quiet"
-              ]
-            }
-          },
-          "required": [
-            "account",
-            "schema_strict_mode"
-          ],
-          "additionalProperties": false,
-          "description": "IMPORTANT: Execution environment includes: account for signing operations, network selection (testnet | localnet | mainnet), additional Guard permissions, and more. Used to specify context information during the call. If account is not specified, the default account (\"\") will be used. NOTE: by default the SDK auto-registers the sender in the global Entity table when absent (first business transaction; the account receives an owned Resource object). Set no_auto_register=true only on explicit user request."
-        }
-      },
-      "required": [
-        "operation_type",
-        "data"
-      ],
-      "additionalProperties": false,
-      "description": "WOW→EVM cross-chain (simplified): assets auto-claim to activeEvmAccount; if withdrawTo is provided, an additional transfer is made to that address. [Requires WOW mainnet env]"
-    },
-    {
-      "type": "object",
-      "properties": {
-        "operation_type": {
-          "type": "string",
-          "const": "cross_chain_evm_to_wow"
-        },
-        "data": {
-          "type": "object",
-          "properties": {
-            "token": {
-              "type": "string",
-              "enum": [
-                "ETH",
-                "WETH",
-                "WBTC",
-                "USDC",
-                "USDT"
-              ],
-              "description": "Cross-chain token type (ETH=native ETH, others are ERC20)"
-            },
-            "amount": {
-              "type": "string",
-              "description": "Cross-chain amount (EVM-side smallest unit, evmDecimals)"
-            },
-            "recipientWowAddress": {
-              "description": "WOW recipient address or account name; defaults to env.account if omitted",
-              "type": "string"
-            },
-            "idempotencyKey": {
-              "description": "Idempotency key to prevent duplicate deposits on retry. If a successful transfer with this key exists, returns it immediately (idempotentHit=true).",
-              "type": "string",
-              "minLength": 1,
-              "maxLength": 128
-            }
-          },
-          "required": [
-            "token",
-            "amount"
-          ],
-          "additionalProperties": false,
-          "description": "EVM→WOW cross-chain (single step: deposit). Returns immediately with depositTxHash + transferId. Bridge will automatically claim on WOW (no WOW gas needed, no user action required). [Time estimate] ~10-20 minutes total: (1) 64-block confirmation ~12.8 min on ETH; (2) bridge node auto-claim ~1-5 min on WOW. [Status flow] Use query_transfer_status(refresh=true) to monitor: latestState.step: source_tx_pending → source_tx_confirmed → signatures_ready → completed. When latestState.confirmations >= 64, deposit is finalized and bridge nodes will sign. [Gas requirements] Only needs activeEvmAccount to have target-chain gas (for deposit). No WOW gas needed. [Retry rule] If the call times out or a step fails, NEVER re-submit the same cross_chain request — the deposit may already be on-chain; poll query_transfer_status(transferId) and recover via resume_transfer instead."
-        },
-        "env": {
-          "type": "object",
-          "properties": {
-            "account": {
-              "default": "",
-              "type": "string",
-              "description": "Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."
-            },
-            "permission_guard": {
-              "description": "List of permission guard IDs. Used to extend additional operation permissions (requires verification and configuration in the Permission object).",
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "no_cache": {
-              "description": "Whether to disable caching.",
-              "type": "boolean"
-            },
-            "network": {
-              "description": "Omit in chat-client contexts — the runtime stamps the user's CURRENT network (the client's UI selection). Standalone MCP/CLI: omit to use the current network; set ONLY when the user explicitly names a different network (a mismatch pauses for user confirmation). Never guess or hardcode a network.",
-              "type": "string",
-              "enum": [
-                "localnet",
-                "testnet",
-                "mainnet"
-              ]
-            },
-            "referrer": {
-              "description": "Referrer ID. If the user is using the network for the first time, the referrer ID will be recorded (also applied when the SDK auto-registers the sender in the global Entity table).",
-              "type": "string"
-            },
-            "no_auto_register": {
-              "description": "Opt-out of SDK-level Entity auto-registration. By default, a business transaction whose sender has no entry in the global Entity table automatically appends an entity registration: the sender gets registered and receives an owned Resource object (their on-chain mark book) in the wallet. Set true ONLY when the user explicitly cancelled their entity registration or demands that the transaction not touch the Entity table.",
-              "type": "boolean"
-            },
-            "confirmed": {
-              "description": "Phase 2 ConfirmGate: set to true to proceed after a 'pending_confirmation' result. The operation is NOT executed until you re-call with confirmed=true after user consent.",
-              "type": "boolean"
-            },
-            "user_intent_phrases": {
-              "description": "Phase 2 ConfirmGate: explicit user intent phrases collected from conversation context (e.g. 'use default account', 'force publish'). Used to bypass confirmation rules whose bypass_on_explicit_intent matches.",
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "plan_approval": {
-              "description": "K3 24 PlanApproval: id of a goal whose plan was approved via goal_operation action='approve'. When set: 1) the ConfirmGate treats fail-open rules (standard/none levels) as pre-approved for operations under this goal's plan; 2) after successful CREATION operations, the created objects are auto-registered into the goal (GoalRecord.objects + its TaskProcess manifest — ACT station 'execution registers'). Fail-closed levels (irreversible/publish/amount) still require per-operation confirmation with env.confirmed=true.",
-              "type": "string"
-            },
-            "client_schema_version": {
-              "description": "Client-side schema version (semver, e.g. '1.0.0'). When provided, the server checks compatibility and attaches warnings if mismatched.",
-              "type": "string"
-            },
-            "schema_strict_mode": {
-              "default": false,
-              "description": "When true, schema incompatibility returns an error instead of a warning. Default: false (warn mode).",
-              "type": "boolean"
-            },
-            "dry_run": {
-              "description": "Phase 1 dry_run: when true, SIMULATE the transaction without signing or submitting. Returns effects + events showing what WOULD happen — no on-chain state is modified, no gas is charged. Use this to verify that an operation will succeed before committing. The returned digest will be 'dry_run:<timestamp>' and objectChanges will be empty (simulation only).",
-              "type": "boolean"
-            },
-            "window_profile": {
-              "description": "Time-window profile for trial runs (N8 ktt6 F-14 re-carving of the 'business windows are never test-compressed' ruling, 2026-11-04). 'production' (default): compressed time-window violations BLOCK publish exactly as before. 'test': compressed windows are ADMITTED so a disposable trial store can run its full lifecycle fast — R-TIME-PROFILE violations degrade to loud named disclosures, and the publish itself is BLOCKED on a real network (testnet/mainnet); point the trial at a local/dev chain (env.network='localnet'). Trial discipline: test-profile stores are throwaway — a production store must re-issue WITHOUT this flag (guards freeze at publish, so compressed windows are unrepairable except by rebuilding the store).",
-              "type": "string",
-              "enum": [
-                "production",
-                "test"
-              ]
-            },
-            "response_level": {
-              "description": "Write-success response size. 'compact' (default) trims the structured result to key fields (digest + created object references); 'full' includes the complete raw result. Default: compact.",
-              "type": "string",
-              "enum": [
-                "compact",
-                "full"
-              ]
-            },
-            "confirm_mode": {
-              "description": "Confirmation frequency for this call. 'full': confirm every matched gate rule. 'streamlined' (client default): skip fail-open 'standard' level prompts — fail-closed levels (irreversible/publish/amount) ALWAYS still confirm. 'quiet': same hard floor as streamlined, for clients that batch/suppress repeat low-risk prompts in their own UI. This field NEVER downgrades fail-closed levels.",
-              "type": "string",
-              "enum": [
-                "full",
-                "streamlined",
-                "quiet"
-              ]
-            }
-          },
-          "required": [
-            "account",
-            "schema_strict_mode"
-          ],
-          "additionalProperties": false,
-          "description": "IMPORTANT: Execution environment includes: account for signing operations, network selection (testnet | localnet | mainnet), additional Guard permissions, and more. Used to specify context information during the call. If account is not specified, the default account (\"\") will be used. NOTE: by default the SDK auto-registers the sender in the global Entity table when absent (first business transaction; the account receives an owned Resource object). Set no_auto_register=true only on explicit user request."
-        }
-      },
-      "required": [
-        "operation_type",
-        "data"
-      ],
-      "additionalProperties": false,
-      "description": "EVM→WOW cross-chain (single step): deposit from activeEvmAccount, bridge auto-claims on WOW. No WOW gas needed. [Requires WOW mainnet env]"
-    },
-    {
-      "type": "object",
-      "properties": {
-        "operation_type": {
-          "type": "string",
-          "const": "claim_wow_to_evm"
-        },
-        "data": {
-          "type": "object",
-          "properties": {
-            "transferId": {
-              "type": "string",
-              "description": "Transfer ID from cross_chain_wow_to_evm (br_<timestamp>_<counter>)"
-            }
-          },
-          "required": [
-            "transferId"
-          ],
-          "additionalProperties": false,
-          "description": "WOW→EVM claim (step 2): claim assets on EVM after bridge nodes have signed. Prerequisite: cross_chain_wow_to_evm (step 1) must be completed, and query_transfer_status must show latestState.step = 'signatures_ready' or 'source_tx_confirmed' (nodes have approved). Returns claimTxHash on success. After claim_wow_to_evm returns, the claim tx has been submitted and confirmed (1 block) on EVM. Use query_transfer_status(refresh=true) to verify latestState.step = 'completed'. [Gas requirements] Requires activeEvmAccount to have target-chain gas (for the claim transaction)."
-        },
-        "env": {
-          "type": "object",
-          "properties": {
-            "account": {
-              "default": "",
-              "type": "string",
-              "description": "Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."
-            },
-            "permission_guard": {
-              "description": "List of permission guard IDs. Used to extend additional operation permissions (requires verification and configuration in the Permission object).",
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "no_cache": {
-              "description": "Whether to disable caching.",
-              "type": "boolean"
-            },
-            "network": {
-              "description": "Omit in chat-client contexts — the runtime stamps the user's CURRENT network (the client's UI selection). Standalone MCP/CLI: omit to use the current network; set ONLY when the user explicitly names a different network (a mismatch pauses for user confirmation). Never guess or hardcode a network.",
-              "type": "string",
-              "enum": [
-                "localnet",
-                "testnet",
-                "mainnet"
-              ]
-            },
-            "referrer": {
-              "description": "Referrer ID. If the user is using the network for the first time, the referrer ID will be recorded (also applied when the SDK auto-registers the sender in the global Entity table).",
-              "type": "string"
-            },
-            "no_auto_register": {
-              "description": "Opt-out of SDK-level Entity auto-registration. By default, a business transaction whose sender has no entry in the global Entity table automatically appends an entity registration: the sender gets registered and receives an owned Resource object (their on-chain mark book) in the wallet. Set true ONLY when the user explicitly cancelled their entity registration or demands that the transaction not touch the Entity table.",
-              "type": "boolean"
-            },
-            "confirmed": {
-              "description": "Phase 2 ConfirmGate: set to true to proceed after a 'pending_confirmation' result. The operation is NOT executed until you re-call with confirmed=true after user consent.",
-              "type": "boolean"
-            },
-            "user_intent_phrases": {
-              "description": "Phase 2 ConfirmGate: explicit user intent phrases collected from conversation context (e.g. 'use default account', 'force publish'). Used to bypass confirmation rules whose bypass_on_explicit_intent matches.",
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "plan_approval": {
-              "description": "K3 24 PlanApproval: id of a goal whose plan was approved via goal_operation action='approve'. When set: 1) the ConfirmGate treats fail-open rules (standard/none levels) as pre-approved for operations under this goal's plan; 2) after successful CREATION operations, the created objects are auto-registered into the goal (GoalRecord.objects + its TaskProcess manifest — ACT station 'execution registers'). Fail-closed levels (irreversible/publish/amount) still require per-operation confirmation with env.confirmed=true.",
-              "type": "string"
-            },
-            "client_schema_version": {
-              "description": "Client-side schema version (semver, e.g. '1.0.0'). When provided, the server checks compatibility and attaches warnings if mismatched.",
-              "type": "string"
-            },
-            "schema_strict_mode": {
-              "default": false,
-              "description": "When true, schema incompatibility returns an error instead of a warning. Default: false (warn mode).",
-              "type": "boolean"
-            },
-            "dry_run": {
-              "description": "Phase 1 dry_run: when true, SIMULATE the transaction without signing or submitting. Returns effects + events showing what WOULD happen — no on-chain state is modified, no gas is charged. Use this to verify that an operation will succeed before committing. The returned digest will be 'dry_run:<timestamp>' and objectChanges will be empty (simulation only).",
-              "type": "boolean"
-            },
-            "window_profile": {
-              "description": "Time-window profile for trial runs (N8 ktt6 F-14 re-carving of the 'business windows are never test-compressed' ruling, 2026-11-04). 'production' (default): compressed time-window violations BLOCK publish exactly as before. 'test': compressed windows are ADMITTED so a disposable trial store can run its full lifecycle fast — R-TIME-PROFILE violations degrade to loud named disclosures, and the publish itself is BLOCKED on a real network (testnet/mainnet); point the trial at a local/dev chain (env.network='localnet'). Trial discipline: test-profile stores are throwaway — a production store must re-issue WITHOUT this flag (guards freeze at publish, so compressed windows are unrepairable except by rebuilding the store).",
-              "type": "string",
-              "enum": [
-                "production",
-                "test"
-              ]
-            },
-            "response_level": {
-              "description": "Write-success response size. 'compact' (default) trims the structured result to key fields (digest + created object references); 'full' includes the complete raw result. Default: compact.",
-              "type": "string",
-              "enum": [
-                "compact",
-                "full"
-              ]
-            },
-            "confirm_mode": {
-              "description": "Confirmation frequency for this call. 'full': confirm every matched gate rule. 'streamlined' (client default): skip fail-open 'standard' level prompts — fail-closed levels (irreversible/publish/amount) ALWAYS still confirm. 'quiet': same hard floor as streamlined, for clients that batch/suppress repeat low-risk prompts in their own UI. This field NEVER downgrades fail-closed levels.",
-              "type": "string",
-              "enum": [
-                "full",
-                "streamlined",
-                "quiet"
-              ]
-            }
-          },
-          "required": [
-            "account",
-            "schema_strict_mode"
-          ],
-          "additionalProperties": false,
-          "description": "IMPORTANT: Execution environment includes: account for signing operations, network selection (testnet | localnet | mainnet), additional Guard permissions, and more. Used to specify context information during the call. If account is not specified, the default account (\"\") will be used. NOTE: by default the SDK auto-registers the sender in the global Entity table when absent (first business transaction; the account receives an owned Resource object). Set no_auto_register=true only on explicit user request."
-        }
-      },
-      "required": [
-        "operation_type",
-        "data"
-      ],
-      "additionalProperties": false,
-      "description": "WOW→EVM claim (step 2): claim assets on EVM after bridge signed. Requires activeEvmAccount to have EVM gas. [Requires WOW mainnet env]"
-    },
-    {
-      "type": "object",
-      "properties": {
-        "operation_type": {
-          "type": "string",
-          "const": "resume_transfer"
-        },
-        "data": {
-          "type": "object",
-          "properties": {
-            "transferId": {
-              "type": "string",
-              "description": "Transfer ID to resume (br_<timestamp>_<counter>)"
-            }
-          },
-          "required": [
-            "transferId"
-          ],
-          "additionalProperties": false,
-          "description": "Resume an interrupted transfer from its current step. Use this when a transfer was interrupted (e.g. MCP restart, network error) and you want to continue from where it left off. The SDK determines the current step and attempts to advance it: - If deposit step failed: retries the deposit - If deposit is pending/confirmed: waits for bridge signatures and proceeds to claim - If claim step is ready: executes the claim - If transfer is already complete: returns the existing record (idempotentHit=true) [Returns] The updated transfer record after attempting to advance it. [Requires env] WOW env is needed for WOW-side operations; EVM-side operations use activeEvmAccount."
-        },
-        "env": {
-          "type": "object",
-          "properties": {
-            "account": {
-              "default": "",
-              "type": "string",
-              "description": "Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."
-            },
-            "permission_guard": {
-              "description": "List of permission guard IDs. Used to extend additional operation permissions (requires verification and configuration in the Permission object).",
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "no_cache": {
-              "description": "Whether to disable caching.",
-              "type": "boolean"
-            },
-            "network": {
-              "description": "Omit in chat-client contexts — the runtime stamps the user's CURRENT network (the client's UI selection). Standalone MCP/CLI: omit to use the current network; set ONLY when the user explicitly names a different network (a mismatch pauses for user confirmation). Never guess or hardcode a network.",
-              "type": "string",
-              "enum": [
-                "localnet",
-                "testnet",
-                "mainnet"
-              ]
-            },
-            "referrer": {
-              "description": "Referrer ID. If the user is using the network for the first time, the referrer ID will be recorded (also applied when the SDK auto-registers the sender in the global Entity table).",
-              "type": "string"
-            },
-            "no_auto_register": {
-              "description": "Opt-out of SDK-level Entity auto-registration. By default, a business transaction whose sender has no entry in the global Entity table automatically appends an entity registration: the sender gets registered and receives an owned Resource object (their on-chain mark book) in the wallet. Set true ONLY when the user explicitly cancelled their entity registration or demands that the transaction not touch the Entity table.",
-              "type": "boolean"
-            },
-            "confirmed": {
-              "description": "Phase 2 ConfirmGate: set to true to proceed after a 'pending_confirmation' result. The operation is NOT executed until you re-call with confirmed=true after user consent.",
-              "type": "boolean"
-            },
-            "user_intent_phrases": {
-              "description": "Phase 2 ConfirmGate: explicit user intent phrases collected from conversation context (e.g. 'use default account', 'force publish'). Used to bypass confirmation rules whose bypass_on_explicit_intent matches.",
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "plan_approval": {
-              "description": "K3 24 PlanApproval: id of a goal whose plan was approved via goal_operation action='approve'. When set: 1) the ConfirmGate treats fail-open rules (standard/none levels) as pre-approved for operations under this goal's plan; 2) after successful CREATION operations, the created objects are auto-registered into the goal (GoalRecord.objects + its TaskProcess manifest — ACT station 'execution registers'). Fail-closed levels (irreversible/publish/amount) still require per-operation confirmation with env.confirmed=true.",
-              "type": "string"
-            },
-            "client_schema_version": {
-              "description": "Client-side schema version (semver, e.g. '1.0.0'). When provided, the server checks compatibility and attaches warnings if mismatched.",
-              "type": "string"
-            },
-            "schema_strict_mode": {
-              "default": false,
-              "description": "When true, schema incompatibility returns an error instead of a warning. Default: false (warn mode).",
-              "type": "boolean"
-            },
-            "dry_run": {
-              "description": "Phase 1 dry_run: when true, SIMULATE the transaction without signing or submitting. Returns effects + events showing what WOULD happen — no on-chain state is modified, no gas is charged. Use this to verify that an operation will succeed before committing. The returned digest will be 'dry_run:<timestamp>' and objectChanges will be empty (simulation only).",
-              "type": "boolean"
-            },
-            "window_profile": {
-              "description": "Time-window profile for trial runs (N8 ktt6 F-14 re-carving of the 'business windows are never test-compressed' ruling, 2026-11-04). 'production' (default): compressed time-window violations BLOCK publish exactly as before. 'test': compressed windows are ADMITTED so a disposable trial store can run its full lifecycle fast — R-TIME-PROFILE violations degrade to loud named disclosures, and the publish itself is BLOCKED on a real network (testnet/mainnet); point the trial at a local/dev chain (env.network='localnet'). Trial discipline: test-profile stores are throwaway — a production store must re-issue WITHOUT this flag (guards freeze at publish, so compressed windows are unrepairable except by rebuilding the store).",
-              "type": "string",
-              "enum": [
-                "production",
-                "test"
-              ]
-            },
-            "response_level": {
-              "description": "Write-success response size. 'compact' (default) trims the structured result to key fields (digest + created object references); 'full' includes the complete raw result. Default: compact.",
-              "type": "string",
-              "enum": [
-                "compact",
-                "full"
-              ]
-            },
-            "confirm_mode": {
-              "description": "Confirmation frequency for this call. 'full': confirm every matched gate rule. 'streamlined' (client default): skip fail-open 'standard' level prompts — fail-closed levels (irreversible/publish/amount) ALWAYS still confirm. 'quiet': same hard floor as streamlined, for clients that batch/suppress repeat low-risk prompts in their own UI. This field NEVER downgrades fail-closed levels.",
-              "type": "string",
-              "enum": [
-                "full",
-                "streamlined",
-                "quiet"
-              ]
-            }
-          },
-          "required": [
-            "account",
-            "schema_strict_mode"
-          ],
-          "additionalProperties": false,
-          "description": "IMPORTANT: Execution environment includes: account for signing operations, network selection (testnet | localnet | mainnet), additional Guard permissions, and more. Used to specify context information during the call. If account is not specified, the default account (\"\") will be used. NOTE: by default the SDK auto-registers the sender in the global Entity table when absent (first business transaction; the account receives an owned Resource object). Set no_auto_register=true only on explicit user request."
-        }
-      },
-      "required": [
-        "operation_type",
-        "data"
-      ],
-      "additionalProperties": false,
-      "description": "Resume an interrupted transfer from its current step. Safe to retry. [Requires WOW mainnet env for WOW-side operations]"
-    },
-    {
-      "type": "object",
-      "properties": {
-        "operation_type": {
-          "type": "string",
-          "const": "withdraw"
-        },
-        "data": {
-          "type": "object",
-          "properties": {
-            "to": {
-              "type": "string",
-              "pattern": "^0x[0-9a-fA-F]{40}$",
-              "description": "Withdrawal target EVM address"
-            },
-            "amount": {
-              "type": "string",
-              "description": "Withdrawal amount (smallest unit)"
-            },
-            "token": {
-              "description": "ERC20 token identifier; if omitted or ETH, withdraws native ETH",
-              "type": "string",
-              "enum": [
-                "ETH",
-                "WETH",
-                "WBTC",
-                "USDC",
-                "USDT"
-              ]
-            },
-            "tokenAddress": {
-              "description": "ERC20 contract address (alternative to token; allows withdrawing by contract address)",
-              "type": "string",
-              "pattern": "^0x[0-9a-fA-F]{40}$"
-            },
-            "network": {
-              "default": "mainnet",
-              "description": "Target chain (defaults to Ethereum mainnet when omitted — EvmChainSchema carries .default(\"mainnet\"))",
-              "type": "string",
-              "enum": [
-                "mainnet"
-              ]
-            }
-          },
-          "required": [
-            "to",
-            "amount",
-            "network"
-          ],
-          "additionalProperties": false,
-          "description": "Withdraw from activeEvmAccount to another EVM address"
-        },
-        "env": {
-          "description": "Optional env — needed to pass confirmed=true after a pending_confirmation block (funds leave activeEvmAccount).",
-          "type": "object",
-          "properties": {
-            "account": {
-              "default": "",
-              "type": "string",
-              "description": "Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."
-            },
-            "permission_guard": {
-              "description": "List of permission guard IDs. Used to extend additional operation permissions (requires verification and configuration in the Permission object).",
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "no_cache": {
-              "description": "Whether to disable caching.",
-              "type": "boolean"
-            },
-            "network": {
-              "description": "Omit in chat-client contexts — the runtime stamps the user's CURRENT network (the client's UI selection). Standalone MCP/CLI: omit to use the current network; set ONLY when the user explicitly names a different network (a mismatch pauses for user confirmation). Never guess or hardcode a network.",
-              "type": "string",
-              "enum": [
-                "localnet",
-                "testnet",
-                "mainnet"
-              ]
-            },
-            "referrer": {
-              "description": "Referrer ID. If the user is using the network for the first time, the referrer ID will be recorded (also applied when the SDK auto-registers the sender in the global Entity table).",
-              "type": "string"
-            },
-            "no_auto_register": {
-              "description": "Opt-out of SDK-level Entity auto-registration. By default, a business transaction whose sender has no entry in the global Entity table automatically appends an entity registration: the sender gets registered and receives an owned Resource object (their on-chain mark book) in the wallet. Set true ONLY when the user explicitly cancelled their entity registration or demands that the transaction not touch the Entity table.",
-              "type": "boolean"
-            },
-            "confirmed": {
-              "description": "Phase 2 ConfirmGate: set to true to proceed after a 'pending_confirmation' result. The operation is NOT executed until you re-call with confirmed=true after user consent.",
-              "type": "boolean"
-            },
-            "user_intent_phrases": {
-              "description": "Phase 2 ConfirmGate: explicit user intent phrases collected from conversation context (e.g. 'use default account', 'force publish'). Used to bypass confirmation rules whose bypass_on_explicit_intent matches.",
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "plan_approval": {
-              "description": "K3 24 PlanApproval: id of a goal whose plan was approved via goal_operation action='approve'. When set: 1) the ConfirmGate treats fail-open rules (standard/none levels) as pre-approved for operations under this goal's plan; 2) after successful CREATION operations, the created objects are auto-registered into the goal (GoalRecord.objects + its TaskProcess manifest — ACT station 'execution registers'). Fail-closed levels (irreversible/publish/amount) still require per-operation confirmation with env.confirmed=true.",
-              "type": "string"
-            },
-            "client_schema_version": {
-              "description": "Client-side schema version (semver, e.g. '1.0.0'). When provided, the server checks compatibility and attaches warnings if mismatched.",
-              "type": "string"
-            },
-            "schema_strict_mode": {
-              "default": false,
-              "description": "When true, schema incompatibility returns an error instead of a warning. Default: false (warn mode).",
-              "type": "boolean"
-            },
-            "dry_run": {
-              "description": "Phase 1 dry_run: when true, SIMULATE the transaction without signing or submitting. Returns effects + events showing what WOULD happen — no on-chain state is modified, no gas is charged. Use this to verify that an operation will succeed before committing. The returned digest will be 'dry_run:<timestamp>' and objectChanges will be empty (simulation only).",
-              "type": "boolean"
-            },
-            "window_profile": {
-              "description": "Time-window profile for trial runs (N8 ktt6 F-14 re-carving of the 'business windows are never test-compressed' ruling, 2026-11-04). 'production' (default): compressed time-window violations BLOCK publish exactly as before. 'test': compressed windows are ADMITTED so a disposable trial store can run its full lifecycle fast — R-TIME-PROFILE violations degrade to loud named disclosures, and the publish itself is BLOCKED on a real network (testnet/mainnet); point the trial at a local/dev chain (env.network='localnet'). Trial discipline: test-profile stores are throwaway — a production store must re-issue WITHOUT this flag (guards freeze at publish, so compressed windows are unrepairable except by rebuilding the store).",
-              "type": "string",
-              "enum": [
-                "production",
-                "test"
-              ]
-            },
-            "response_level": {
-              "description": "Write-success response size. 'compact' (default) trims the structured result to key fields (digest + created object references); 'full' includes the complete raw result. Default: compact.",
-              "type": "string",
-              "enum": [
-                "compact",
-                "full"
-              ]
-            },
-            "confirm_mode": {
-              "description": "Confirmation frequency for this call. 'full': confirm every matched gate rule. 'streamlined' (client default): skip fail-open 'standard' level prompts — fail-closed levels (irreversible/publish/amount) ALWAYS still confirm. 'quiet': same hard floor as streamlined, for clients that batch/suppress repeat low-risk prompts in their own UI. This field NEVER downgrades fail-closed levels.",
-              "type": "string",
-              "enum": [
-                "full",
-                "streamlined",
-                "quiet"
-              ]
-            }
-          },
-          "required": [
-            "account",
-            "schema_strict_mode"
-          ],
-          "additionalProperties": false
-        }
-      },
-      "required": [
-        "operation_type",
-        "data"
-      ],
-      "additionalProperties": false,
-      "description": "Withdraw from activeEvmAccount to another EVM address (non-cross-chain). [env optional: only needed for env.confirmed after a confirmation block]"
-    },
-    {
-      "type": "object",
-      "properties": {
-        "operation_type": {
-          "type": "string",
-          "const": "query_active_evm_account"
-        },
-        "data": {
-          "type": "object",
-          "properties": {
-            "network": {
-              "description": "Specific chain; if omitted, queries all supported chains",
-              "default": "mainnet",
-              "type": "string",
-              "enum": [
-                "mainnet"
-              ]
-            },
-            "tokens": {
-              "description": "Additional ERC20 token contract addresses to query; if omitted, only native ETH balance is queried",
-              "type": "array",
-              "items": {
-                "type": "string",
-                "pattern": "^0x[0-9a-fA-F]{40}$",
-                "description": "EVM address (0x + 40 hex)"
-              }
-            }
-          },
-          "additionalProperties": false,
-          "description": "Query activeEvmAccount parameters"
-        }
-      },
-      "required": [
-        "operation_type"
-      ],
-      "additionalProperties": false,
-      "description": "Query activeEvmAccount address + balances (per chain or all chains). [No env needed]"
-    },
-    {
-      "type": "object",
-      "properties": {
-        "operation_type": {
-          "type": "string",
-          "const": "query_supported_evm_chains"
-        }
-      },
-      "required": [
-        "operation_type"
-      ],
-      "additionalProperties": false,
-      "description": "List currently supported EVM chains (enum value / description / chainId / RPC health). [No env needed, no data required]"
-    },
-    {
-      "type": "object",
-      "properties": {
-        "operation_type": {
-          "type": "string",
-          "const": "query_supported_tokens"
-        },
-        "data": {
-          "type": "object",
-          "properties": {
-            "network": {
-              "description": "Specific chain; if omitted, returns token lists for all supported chains",
-              "default": "mainnet",
-              "type": "string",
-              "enum": [
-                "mainnet"
-              ]
-            }
-          },
-          "additionalProperties": false,
-          "description": "Query supported Bridge tokens per chain (WOW/EVM addresses, decimals, description)"
-        }
-      },
-      "required": [
-        "operation_type"
-      ],
-      "additionalProperties": false,
-      "description": "List supported Bridge tokens per chain (WOW/EVM contract addresses, decimals, description). [No env needed]"
-    },
-    {
-      "type": "object",
-      "properties": {
-        "operation_type": {
-          "type": "string",
-          "const": "query_transfer_list"
-        },
-        "data": {
-          "type": "object",
-          "properties": {
-            "onlyActive": {
-              "description": "true returns only in-progress transfers; false/omitted returns all",
-              "type": "boolean"
-            },
-            "status": {
-              "description": "Filter by transfer status",
-              "type": "string",
-              "enum": [
-                "pending",
-                "in_progress",
-                "success",
-                "failed"
-              ]
-            },
-            "direction": {
-              "description": "Filter by transfer direction",
-              "type": "string",
-              "enum": [
-                "wow_to_evm",
-                "evm_to_wow",
-                "withdraw"
-              ]
-            },
-            "token": {
-              "description": "Filter by token type (ETH/WETH/WBTC/USDC/USDT)",
-              "type": "string",
-              "enum": [
-                "ETH",
-                "WETH",
-                "WBTC",
-                "USDC",
-                "USDT"
-              ]
-            },
-            "limit": {
-              "description": "Maximum number of results (default: all, max: 100)",
-              "type": "integer",
-              "exclusiveMinimum": 0,
-              "maximum": 100
-            }
-          },
-          "additionalProperties": false,
-          "description": "Query transfer list with optional filters (status / direction / token / limit)"
-        }
-      },
-      "required": [
-        "operation_type"
-      ],
-      "additionalProperties": false,
-      "description": "Query cross-chain / withdrawal transfer history list (optionally only in-progress). [No env needed]"
-    },
-    {
-      "type": "object",
-      "properties": {
-        "operation_type": {
-          "type": "string",
-          "const": "query_transfer_status"
-        },
-        "data": {
-          "type": "object",
-          "properties": {
-            "transferId": {
-              "type": "string",
-              "description": "Transfer ID (br_<timestamp>_<counter>)"
-            },
-            "refresh": {
-              "default": true,
-              "description": "Whether to refresh from on-chain state (default true). true=queries latest on-chain status (takes 5-15s, timeout at 15s on slow RPC). false=instant response from local cache (no on-chain query). Recommended: use refresh=true every 1-2 minutes for ongoing transfers; use refresh=false for quick checks between refreshes.",
-              "type": "boolean"
-            }
-          },
-          "required": [
-            "transferId",
-            "refresh"
-          ],
-          "additionalProperties": false,
-          "description": "Query single transfer parameters. [Wait hint] With refresh=true (default), this call may take 5-15 seconds to query on-chain state. If on-chain RPC is slow, it will timeout at 15s and return cached state. Set refresh=false for instant response from local cache. [Returned fields] The result includes: (1) record.step/status - high-level lifecycle (deposit/claimed/success); (2) record.latestState.step/status - fine-grained on-chain progress (source_tx_pending → source_tx_confirmed → signatures_ready → completed). Use latestState.confirmations to estimate remaining time (needs 64 for ETH→WOW finalization)."
-        }
-      },
-      "required": [
-        "operation_type",
-        "data"
-      ],
-      "additionalProperties": false,
-      "description": "Query a single transfer's detail by transferId"
-    },
-    {
-      "type": "object",
-      "properties": {
-        "operation_type": {
-          "type": "string",
-          "const": "manage_evm_rpc"
-        },
-        "data": {
-          "oneOf": [
-            {
-              "type": "object",
-              "properties": {
-                "op": {
-                  "type": "string",
-                  "const": "list",
-                  "description": "List all configured RPC endpoints with health status"
-                },
-                "network": {
-                  "default": "mainnet",
-                  "description": "Target chain (defaults to Ethereum mainnet when omitted — EvmChainSchema carries .default(\"mainnet\"))",
-                  "type": "string",
-                  "enum": [
-                    "mainnet"
-                  ]
-                }
-              },
-              "required": [
-                "op",
-                "network"
-              ],
-              "additionalProperties": false,
-              "description": "List RPC endpoints (no rpcUrl/rpcUrls needed)"
-            },
-            {
-              "type": "object",
-              "properties": {
-                "op": {
-                  "type": "string",
-                  "const": "add",
-                  "description": "Append one or more RPC endpoints"
-                },
-                "network": {
-                  "default": "mainnet",
-                  "description": "Target chain (defaults to Ethereum mainnet when omitted — EvmChainSchema carries .default(\"mainnet\"))",
-                  "type": "string",
-                  "enum": [
-                    "mainnet"
-                  ]
-                },
-                "rpcUrls": {
-                  "minItems": 1,
-                  "type": "array",
-                  "items": {
-                    "type": "string",
-                    "format": "uri"
-                  },
-                  "description": "RPC URL(s) to add"
-                }
-              },
-              "required": [
-                "op",
-                "network",
-                "rpcUrls"
-              ],
-              "additionalProperties": false,
-              "description": "Add RPC endpoint(s)"
-            },
-            {
-              "type": "object",
-              "properties": {
-                "op": {
-                  "type": "string",
-                  "const": "remove",
-                  "description": "Remove one or more RPC endpoints"
-                },
-                "network": {
-                  "default": "mainnet",
-                  "description": "Target chain (defaults to Ethereum mainnet when omitted — EvmChainSchema carries .default(\"mainnet\"))",
-                  "type": "string",
-                  "enum": [
-                    "mainnet"
-                  ]
-                },
-                "rpcUrls": {
-                  "minItems": 1,
-                  "type": "array",
-                  "items": {
-                    "type": "string",
-                    "format": "uri"
-                  },
-                  "description": "RPC URL(s) to remove"
-                }
-              },
-              "required": [
-                "op",
-                "network",
-                "rpcUrls"
-              ],
-              "additionalProperties": false,
-              "description": "Remove RPC endpoint(s)"
-            },
-            {
-              "type": "object",
-              "properties": {
-                "op": {
-                  "type": "string",
-                  "const": "set",
-                  "description": "Full replace all RPC endpoints"
-                },
-                "network": {
-                  "default": "mainnet",
-                  "description": "Target chain (defaults to Ethereum mainnet when omitted — EvmChainSchema carries .default(\"mainnet\"))",
-                  "type": "string",
-                  "enum": [
-                    "mainnet"
-                  ]
-                },
-                "rpcUrls": {
-                  "minItems": 1,
-                  "type": "array",
-                  "items": {
-                    "type": "string",
-                    "format": "uri"
-                  },
-                  "description": "Full RPC list (replaces all existing endpoints)"
-                }
-              },
-              "required": [
-                "op",
-                "network",
-                "rpcUrls"
-              ],
-              "additionalProperties": false,
-              "description": "Full replace RPC endpoints"
-            },
-            {
-              "type": "object",
-              "properties": {
-                "op": {
-                  "type": "string",
-                  "const": "ping",
-                  "description": "Health check one or more RPC endpoints"
-                },
-                "network": {
-                  "default": "mainnet",
-                  "description": "Target chain (defaults to Ethereum mainnet when omitted — EvmChainSchema carries .default(\"mainnet\"))",
-                  "type": "string",
-                  "enum": [
-                    "mainnet"
-                  ]
-                },
-                "rpcUrls": {
-                  "description": "Specific RPC URLs to ping; if omitted, pings all configured RPCs",
-                  "type": "array",
-                  "items": {
-                    "type": "string",
-                    "format": "uri"
-                  }
-                }
-              },
-              "required": [
-                "op",
-                "network"
-              ],
-              "additionalProperties": false,
-              "description": "Health check RPC endpoints"
-            }
-          ],
-          "description": "EVM RPC endpoint management (discriminated by op)"
-        }
-      },
-      "required": [
-        "operation_type",
-        "data"
-      ],
-      "additionalProperties": false,
-      "description": "Manage EVM RPC endpoints (list/add/remove/set/ping) to mitigate public RPC 429 rate limits. [No env needed]"
-    }
-  ]
-}
+{"$schema":"http://json-schema.org/draft-07/schema#","$id":"https://wowok.net/schemas/bridge_operation.json","title":"Bridge - Cross-Chain Operations","description":"Simplified cross-chain bridge between WOW and EVM (Ethereum mainnet). WOW→EVM is TWO steps: step1 cross_chain_wow_to_evm (deposit/lock, returns transferId) → poll query_transfer_status until latestState.step='signatures_ready' (~1-5 min) → step2 claim_wow_to_evm (claim on EVM, needs EVM gas). Assets arrive ONLY after step2. EVM→WOW is ONE step (auto-claim on WOW, ~10-20 min). Operations: cross_chain_wow_to_evm, claim_wow_to_evm, cross_chain_evm_to_wow, resume_transfer, withdraw, query_active_evm_account, query_supported_evm_chains, query_supported_tokens, query_transfer_list, query_transfer_status, manage_evm_rpc. Global single activeEvmAccount auto-generated on first use. Use schema_query (name='bridge_operation') for exact field structures.","oneOf":[{"type":"object","properties":{"operation_type":{"type":"string","const":"cross_chain_wow_to_evm"},"data":{"type":"object","properties":{"token":{"type":"string","enum":["ETH","WETH","WBTC","USDC","USDT"],"description":"Cross-chain token type"},"amount":{"type":"string","description":"Cross-chain amount (WOW-side smallest unit, wowDecimals)"},"withdrawTo":{"description":"Final withdrawal EVM address; if omitted, assets remain in activeEvmAccount. When provided, the SDK uses the activeEvmAccount key to transfer to this address.","type":"string","pattern":"^0x[0-9a-fA-F]{40}$"},"idempotencyKey":{"description":"Idempotency key to prevent duplicate deposits on retry. If a successful transfer with this key exists, returns it immediately (idempotentHit=true).","type":"string","minLength":1,"maxLength":128}},"required":["token","amount"],"additionalProperties":false,"description":"WOW→EVM cross-chain (step 1: deposit only). Returns immediately with depositTxDigest + bridgeSeq + transferId. This operation only locks assets on WOW; it does NOT complete the cross-chain. After deposit, bridge nodes need ~1-5 minutes to sign. Use query_transfer_status to monitor progress; when latestState.step shows 'signatures_ready', call claim_wow_to_evm (step 2) to claim assets on EVM. [Gas requirements] Step 1 needs WOW gas; Step 2 (claim_wow_to_evm) needs activeEvmAccount to have target-chain gas. [Retry rule] If the call times out or a step fails, NEVER re-submit the same cross_chain request — the deposit may already be on-chain; poll query_transfer_status(transferId) and recover via resume_transfer instead."},"env":{"type":"object","properties":{"account":{"default":"","type":"string","description":"Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."},"permission_guard":{"description":"List of permission guard IDs. Used to extend additional operation permissions (requires verification and configuration in the Permission object).","type":"array","items":{"type":"string"}},"no_cache":{"description":"Whether to disable caching.","type":"boolean"},"network":{"description":"Omit in chat-client contexts — the runtime stamps the user's CURRENT network (the client's UI selection). Standalone MCP/CLI: omit to use the current network; set ONLY when the user explicitly names a different network (a mismatch pauses for user confirmation). Never guess or hardcode a network.","type":"string","enum":["localnet","testnet","mainnet"]},"referrer":{"description":"Referrer ID. If the user is using the network for the first time, the referrer ID will be recorded (also applied when the SDK auto-registers the sender in the global Entity table).","type":"string"},"no_auto_register":{"description":"Opt-out of SDK-level Entity auto-registration. By default, a business transaction whose sender has no entry in the global Entity table automatically appends an entity registration: the sender gets registered and receives an owned Resource object (their on-chain mark book) in the wallet. Set true ONLY when the user explicitly cancelled their entity registration or demands that the transaction not touch the Entity table.","type":"boolean"},"confirmed":{"description":"Phase 2 ConfirmGate: set to true to proceed after a 'pending_confirmation' result. The operation is NOT executed until you re-call with confirmed=true after user consent.","type":"boolean"},"user_intent_phrases":{"description":"Phase 2 ConfirmGate: explicit user intent phrases collected from conversation context (e.g. 'use default account', 'force publish'). Used to bypass confirmation rules whose bypass_on_explicit_intent matches.","type":"array","items":{"type":"string"}},"plan_approval":{"description":"K3 24 PlanApproval: id of a goal whose plan was approved via goal_operation action='approve'. When set: 1) the ConfirmGate treats fail-open rules (standard/none levels) as pre-approved for operations under this goal's plan; 2) after successful CREATION operations, the created objects are auto-registered into the goal (GoalRecord.objects + its TaskProcess manifest — ACT station 'execution registers'). Fail-closed levels (irreversible/publish/amount) still require per-operation confirmation with env.confirmed=true.","type":"string"},"client_schema_version":{"description":"Client-side schema version (semver, e.g. '1.0.0'). When provided, the server checks compatibility and attaches warnings if mismatched.","type":"string"},"schema_strict_mode":{"default":false,"description":"When true, schema incompatibility returns an error instead of a warning. Default: false (warn mode).","type":"boolean"},"dry_run":{"description":"Phase 1 dry_run: when true, SIMULATE the transaction without signing or submitting. Returns effects + events showing what WOULD happen — no on-chain state is modified, no gas is charged. Use this to verify that an operation will succeed before committing. The returned digest will be 'dry_run:<timestamp>' and objectChanges will be empty (simulation only).","type":"boolean"},"window_profile":{"description":"Time-window profile for trial runs (N8 ktt6 F-14 re-carving of the 'business windows are never test-compressed' ruling, 2026-11-04). 'production' (default): compressed time-window violations BLOCK publish exactly as before. 'test': compressed windows are ADMITTED so a disposable trial store can run its full lifecycle fast — R-TIME-PROFILE violations degrade to loud named disclosures, and the publish itself is BLOCKED on a real network (testnet/mainnet); point the trial at a local/dev chain (env.network='localnet'). Trial discipline: test-profile stores are throwaway — a production store must re-issue WITHOUT this flag (guards freeze at publish, so compressed windows are unrepairable except by rebuilding the store).","type":"string","enum":["production","test"]},"response_level":{"description":"Write-success response size. 'compact' (default) trims the structured result to key fields (digest + created object references); 'full' includes the complete raw result. Default: compact.","type":"string","enum":["compact","full"]},"confirm_mode":{"description":"Confirmation frequency for this call. 'full': confirm every matched gate rule. 'streamlined' (client default): skip fail-open 'standard' level prompts — fail-closed levels (irreversible/publish/amount) ALWAYS still confirm. 'quiet': same hard floor as streamlined, for clients that batch/suppress repeat low-risk prompts in their own UI. This field NEVER downgrades fail-closed levels.","type":"string","enum":["full","streamlined","quiet"]}},"required":["account","schema_strict_mode"],"additionalProperties":false,"description":"IMPORTANT: Execution environment includes: account for signing operations, network selection (testnet | localnet | mainnet), additional Guard permissions, and more. Used to specify context information during the call. If account is not specified, the default account (\"\") will be used. NOTE: by default the SDK auto-registers the sender in the global Entity table when absent (first business transaction; the account receives an owned Resource object). Set no_auto_register=true only on explicit user request."}},"required":["operation_type","data"],"additionalProperties":false,"description":"WOW→EVM cross-chain (simplified): assets auto-claim to activeEvmAccount; if withdrawTo is provided, an additional transfer is made to that address. [Requires WOW mainnet env]"},{"type":"object","properties":{"operation_type":{"type":"string","const":"cross_chain_evm_to_wow"},"data":{"type":"object","properties":{"token":{"type":"string","enum":["ETH","WETH","WBTC","USDC","USDT"],"description":"Cross-chain token type (ETH=native ETH, others are ERC20)"},"amount":{"type":"string","description":"Cross-chain amount (EVM-side smallest unit, evmDecimals)"},"recipientWowAddress":{"description":"WOW recipient address or account name; defaults to env.account if omitted","type":"string"},"idempotencyKey":{"description":"Idempotency key to prevent duplicate deposits on retry. If a successful transfer with this key exists, returns it immediately (idempotentHit=true).","type":"string","minLength":1,"maxLength":128}},"required":["token","amount"],"additionalProperties":false,"description":"EVM→WOW cross-chain (single step: deposit). Returns immediately with depositTxHash + transferId. Bridge will automatically claim on WOW (no WOW gas needed, no user action required). [Time estimate] ~10-20 minutes total: (1) 64-block confirmation ~12.8 min on ETH; (2) bridge node auto-claim ~1-5 min on WOW. [Status flow] Use query_transfer_status(refresh=true) to monitor: latestState.step: source_tx_pending → source_tx_confirmed → signatures_ready → completed. When latestState.confirmations >= 64, deposit is finalized and bridge nodes will sign. [Gas requirements] Only needs activeEvmAccount to have target-chain gas (for deposit). No WOW gas needed. [Retry rule] If the call times out or a step fails, NEVER re-submit the same cross_chain request — the deposit may already be on-chain; poll query_transfer_status(transferId) and recover via resume_transfer instead."},"env":{"type":"object","properties":{"account":{"default":"","type":"string","description":"Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."},"permission_guard":{"description":"List of permission guard IDs. Used to extend additional operation permissions (requires verification and configuration in the Permission object).","type":"array","items":{"type":"string"}},"no_cache":{"description":"Whether to disable caching.","type":"boolean"},"network":{"description":"Omit in chat-client contexts — the runtime stamps the user's CURRENT network (the client's UI selection). Standalone MCP/CLI: omit to use the current network; set ONLY when the user explicitly names a different network (a mismatch pauses for user confirmation). Never guess or hardcode a network.","type":"string","enum":["localnet","testnet","mainnet"]},"referrer":{"description":"Referrer ID. If the user is using the network for the first time, the referrer ID will be recorded (also applied when the SDK auto-registers the sender in the global Entity table).","type":"string"},"no_auto_register":{"description":"Opt-out of SDK-level Entity auto-registration. By default, a business transaction whose sender has no entry in the global Entity table automatically appends an entity registration: the sender gets registered and receives an owned Resource object (their on-chain mark book) in the wallet. Set true ONLY when the user explicitly cancelled their entity registration or demands that the transaction not touch the Entity table.","type":"boolean"},"confirmed":{"description":"Phase 2 ConfirmGate: set to true to proceed after a 'pending_confirmation' result. The operation is NOT executed until you re-call with confirmed=true after user consent.","type":"boolean"},"user_intent_phrases":{"description":"Phase 2 ConfirmGate: explicit user intent phrases collected from conversation context (e.g. 'use default account', 'force publish'). Used to bypass confirmation rules whose bypass_on_explicit_intent matches.","type":"array","items":{"type":"string"}},"plan_approval":{"description":"K3 24 PlanApproval: id of a goal whose plan was approved via goal_operation action='approve'. When set: 1) the ConfirmGate treats fail-open rules (standard/none levels) as pre-approved for operations under this goal's plan; 2) after successful CREATION operations, the created objects are auto-registered into the goal (GoalRecord.objects + its TaskProcess manifest — ACT station 'execution registers'). Fail-closed levels (irreversible/publish/amount) still require per-operation confirmation with env.confirmed=true.","type":"string"},"client_schema_version":{"description":"Client-side schema version (semver, e.g. '1.0.0'). When provided, the server checks compatibility and attaches warnings if mismatched.","type":"string"},"schema_strict_mode":{"default":false,"description":"When true, schema incompatibility returns an error instead of a warning. Default: false (warn mode).","type":"boolean"},"dry_run":{"description":"Phase 1 dry_run: when true, SIMULATE the transaction without signing or submitting. Returns effects + events showing what WOULD happen — no on-chain state is modified, no gas is charged. Use this to verify that an operation will succeed before committing. The returned digest will be 'dry_run:<timestamp>' and objectChanges will be empty (simulation only).","type":"boolean"},"window_profile":{"description":"Time-window profile for trial runs (N8 ktt6 F-14 re-carving of the 'business windows are never test-compressed' ruling, 2026-11-04). 'production' (default): compressed time-window violations BLOCK publish exactly as before. 'test': compressed windows are ADMITTED so a disposable trial store can run its full lifecycle fast — R-TIME-PROFILE violations degrade to loud named disclosures, and the publish itself is BLOCKED on a real network (testnet/mainnet); point the trial at a local/dev chain (env.network='localnet'). Trial discipline: test-profile stores are throwaway — a production store must re-issue WITHOUT this flag (guards freeze at publish, so compressed windows are unrepairable except by rebuilding the store).","type":"string","enum":["production","test"]},"response_level":{"description":"Write-success response size. 'compact' (default) trims the structured result to key fields (digest + created object references); 'full' includes the complete raw result. Default: compact.","type":"string","enum":["compact","full"]},"confirm_mode":{"description":"Confirmation frequency for this call. 'full': confirm every matched gate rule. 'streamlined' (client default): skip fail-open 'standard' level prompts — fail-closed levels (irreversible/publish/amount) ALWAYS still confirm. 'quiet': same hard floor as streamlined, for clients that batch/suppress repeat low-risk prompts in their own UI. This field NEVER downgrades fail-closed levels.","type":"string","enum":["full","streamlined","quiet"]}},"required":["account","schema_strict_mode"],"additionalProperties":false,"description":"IMPORTANT: Execution environment includes: account for signing operations, network selection (testnet | localnet | mainnet), additional Guard permissions, and more. Used to specify context information during the call. If account is not specified, the default account (\"\") will be used. NOTE: by default the SDK auto-registers the sender in the global Entity table when absent (first business transaction; the account receives an owned Resource object). Set no_auto_register=true only on explicit user request."}},"required":["operation_type","data"],"additionalProperties":false,"description":"EVM→WOW cross-chain (single step): deposit from activeEvmAccount, bridge auto-claims on WOW. No WOW gas needed. [Requires WOW mainnet env]"},{"type":"object","properties":{"operation_type":{"type":"string","const":"claim_wow_to_evm"},"data":{"type":"object","properties":{"transferId":{"type":"string","description":"Transfer ID from cross_chain_wow_to_evm (br_<timestamp>_<counter>)"}},"required":["transferId"],"additionalProperties":false,"description":"WOW→EVM claim (step 2): claim assets on EVM after bridge nodes have signed. Prerequisite: cross_chain_wow_to_evm (step 1) must be completed, and query_transfer_status must show latestState.step = 'signatures_ready' or 'source_tx_confirmed' (nodes have approved). Returns claimTxHash on success. After claim_wow_to_evm returns, the claim tx has been submitted and confirmed (1 block) on EVM. Use query_transfer_status(refresh=true) to verify latestState.step = 'completed'. [Gas requirements] Requires activeEvmAccount to have target-chain gas (for the claim transaction)."},"env":{"type":"object","properties":{"account":{"default":"","type":"string","description":"Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."},"permission_guard":{"description":"List of permission guard IDs. Used to extend additional operation permissions (requires verification and configuration in the Permission object).","type":"array","items":{"type":"string"}},"no_cache":{"description":"Whether to disable caching.","type":"boolean"},"network":{"description":"Omit in chat-client contexts — the runtime stamps the user's CURRENT network (the client's UI selection). Standalone MCP/CLI: omit to use the current network; set ONLY when the user explicitly names a different network (a mismatch pauses for user confirmation). Never guess or hardcode a network.","type":"string","enum":["localnet","testnet","mainnet"]},"referrer":{"description":"Referrer ID. If the user is using the network for the first time, the referrer ID will be recorded (also applied when the SDK auto-registers the sender in the global Entity table).","type":"string"},"no_auto_register":{"description":"Opt-out of SDK-level Entity auto-registration. By default, a business transaction whose sender has no entry in the global Entity table automatically appends an entity registration: the sender gets registered and receives an owned Resource object (their on-chain mark book) in the wallet. Set true ONLY when the user explicitly cancelled their entity registration or demands that the transaction not touch the Entity table.","type":"boolean"},"confirmed":{"description":"Phase 2 ConfirmGate: set to true to proceed after a 'pending_confirmation' result. The operation is NOT executed until you re-call with confirmed=true after user consent.","type":"boolean"},"user_intent_phrases":{"description":"Phase 2 ConfirmGate: explicit user intent phrases collected from conversation context (e.g. 'use default account', 'force publish'). Used to bypass confirmation rules whose bypass_on_explicit_intent matches.","type":"array","items":{"type":"string"}},"plan_approval":{"description":"K3 24 PlanApproval: id of a goal whose plan was approved via goal_operation action='approve'. When set: 1) the ConfirmGate treats fail-open rules (standard/none levels) as pre-approved for operations under this goal's plan; 2) after successful CREATION operations, the created objects are auto-registered into the goal (GoalRecord.objects + its TaskProcess manifest — ACT station 'execution registers'). Fail-closed levels (irreversible/publish/amount) still require per-operation confirmation with env.confirmed=true.","type":"string"},"client_schema_version":{"description":"Client-side schema version (semver, e.g. '1.0.0'). When provided, the server checks compatibility and attaches warnings if mismatched.","type":"string"},"schema_strict_mode":{"default":false,"description":"When true, schema incompatibility returns an error instead of a warning. Default: false (warn mode).","type":"boolean"},"dry_run":{"description":"Phase 1 dry_run: when true, SIMULATE the transaction without signing or submitting. Returns effects + events showing what WOULD happen — no on-chain state is modified, no gas is charged. Use this to verify that an operation will succeed before committing. The returned digest will be 'dry_run:<timestamp>' and objectChanges will be empty (simulation only).","type":"boolean"},"window_profile":{"description":"Time-window profile for trial runs (N8 ktt6 F-14 re-carving of the 'business windows are never test-compressed' ruling, 2026-11-04). 'production' (default): compressed time-window violations BLOCK publish exactly as before. 'test': compressed windows are ADMITTED so a disposable trial store can run its full lifecycle fast — R-TIME-PROFILE violations degrade to loud named disclosures, and the publish itself is BLOCKED on a real network (testnet/mainnet); point the trial at a local/dev chain (env.network='localnet'). Trial discipline: test-profile stores are throwaway — a production store must re-issue WITHOUT this flag (guards freeze at publish, so compressed windows are unrepairable except by rebuilding the store).","type":"string","enum":["production","test"]},"response_level":{"description":"Write-success response size. 'compact' (default) trims the structured result to key fields (digest + created object references); 'full' includes the complete raw result. Default: compact.","type":"string","enum":["compact","full"]},"confirm_mode":{"description":"Confirmation frequency for this call. 'full': confirm every matched gate rule. 'streamlined' (client default): skip fail-open 'standard' level prompts — fail-closed levels (irreversible/publish/amount) ALWAYS still confirm. 'quiet': same hard floor as streamlined, for clients that batch/suppress repeat low-risk prompts in their own UI. This field NEVER downgrades fail-closed levels.","type":"string","enum":["full","streamlined","quiet"]}},"required":["account","schema_strict_mode"],"additionalProperties":false,"description":"IMPORTANT: Execution environment includes: account for signing operations, network selection (testnet | localnet | mainnet), additional Guard permissions, and more. Used to specify context information during the call. If account is not specified, the default account (\"\") will be used. NOTE: by default the SDK auto-registers the sender in the global Entity table when absent (first business transaction; the account receives an owned Resource object). Set no_auto_register=true only on explicit user request."}},"required":["operation_type","data"],"additionalProperties":false,"description":"WOW→EVM claim (step 2): claim assets on EVM after bridge signed. Requires activeEvmAccount to have EVM gas. [Requires WOW mainnet env]"},{"type":"object","properties":{"operation_type":{"type":"string","const":"resume_transfer"},"data":{"type":"object","properties":{"transferId":{"type":"string","description":"Transfer ID to resume (br_<timestamp>_<counter>)"}},"required":["transferId"],"additionalProperties":false,"description":"Resume an interrupted transfer from its current step. Use this when a transfer was interrupted (e.g. MCP restart, network error) and you want to continue from where it left off. The SDK determines the current step and attempts to advance it: - If deposit step failed: retries the deposit - If deposit is pending/confirmed: waits for bridge signatures and proceeds to claim - If claim step is ready: executes the claim - If transfer is already complete: returns the existing record (idempotentHit=true) [Returns] The updated transfer record after attempting to advance it. [Requires env] WOW env is needed for WOW-side operations; EVM-side operations use activeEvmAccount."},"env":{"type":"object","properties":{"account":{"default":"","type":"string","description":"Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."},"permission_guard":{"description":"List of permission guard IDs. Used to extend additional operation permissions (requires verification and configuration in the Permission object).","type":"array","items":{"type":"string"}},"no_cache":{"description":"Whether to disable caching.","type":"boolean"},"network":{"description":"Omit in chat-client contexts — the runtime stamps the user's CURRENT network (the client's UI selection). Standalone MCP/CLI: omit to use the current network; set ONLY when the user explicitly names a different network (a mismatch pauses for user confirmation). Never guess or hardcode a network.","type":"string","enum":["localnet","testnet","mainnet"]},"referrer":{"description":"Referrer ID. If the user is using the network for the first time, the referrer ID will be recorded (also applied when the SDK auto-registers the sender in the global Entity table).","type":"string"},"no_auto_register":{"description":"Opt-out of SDK-level Entity auto-registration. By default, a business transaction whose sender has no entry in the global Entity table automatically appends an entity registration: the sender gets registered and receives an owned Resource object (their on-chain mark book) in the wallet. Set true ONLY when the user explicitly cancelled their entity registration or demands that the transaction not touch the Entity table.","type":"boolean"},"confirmed":{"description":"Phase 2 ConfirmGate: set to true to proceed after a 'pending_confirmation' result. The operation is NOT executed until you re-call with confirmed=true after user consent.","type":"boolean"},"user_intent_phrases":{"description":"Phase 2 ConfirmGate: explicit user intent phrases collected from conversation context (e.g. 'use default account', 'force publish'). Used to bypass confirmation rules whose bypass_on_explicit_intent matches.","type":"array","items":{"type":"string"}},"plan_approval":{"description":"K3 24 PlanApproval: id of a goal whose plan was approved via goal_operation action='approve'. When set: 1) the ConfirmGate treats fail-open rules (standard/none levels) as pre-approved for operations under this goal's plan; 2) after successful CREATION operations, the created objects are auto-registered into the goal (GoalRecord.objects + its TaskProcess manifest — ACT station 'execution registers'). Fail-closed levels (irreversible/publish/amount) still require per-operation confirmation with env.confirmed=true.","type":"string"},"client_schema_version":{"description":"Client-side schema version (semver, e.g. '1.0.0'). When provided, the server checks compatibility and attaches warnings if mismatched.","type":"string"},"schema_strict_mode":{"default":false,"description":"When true, schema incompatibility returns an error instead of a warning. Default: false (warn mode).","type":"boolean"},"dry_run":{"description":"Phase 1 dry_run: when true, SIMULATE the transaction without signing or submitting. Returns effects + events showing what WOULD happen — no on-chain state is modified, no gas is charged. Use this to verify that an operation will succeed before committing. The returned digest will be 'dry_run:<timestamp>' and objectChanges will be empty (simulation only).","type":"boolean"},"window_profile":{"description":"Time-window profile for trial runs (N8 ktt6 F-14 re-carving of the 'business windows are never test-compressed' ruling, 2026-11-04). 'production' (default): compressed time-window violations BLOCK publish exactly as before. 'test': compressed windows are ADMITTED so a disposable trial store can run its full lifecycle fast — R-TIME-PROFILE violations degrade to loud named disclosures, and the publish itself is BLOCKED on a real network (testnet/mainnet); point the trial at a local/dev chain (env.network='localnet'). Trial discipline: test-profile stores are throwaway — a production store must re-issue WITHOUT this flag (guards freeze at publish, so compressed windows are unrepairable except by rebuilding the store).","type":"string","enum":["production","test"]},"response_level":{"description":"Write-success response size. 'compact' (default) trims the structured result to key fields (digest + created object references); 'full' includes the complete raw result. Default: compact.","type":"string","enum":["compact","full"]},"confirm_mode":{"description":"Confirmation frequency for this call. 'full': confirm every matched gate rule. 'streamlined' (client default): skip fail-open 'standard' level prompts — fail-closed levels (irreversible/publish/amount) ALWAYS still confirm. 'quiet': same hard floor as streamlined, for clients that batch/suppress repeat low-risk prompts in their own UI. This field NEVER downgrades fail-closed levels.","type":"string","enum":["full","streamlined","quiet"]}},"required":["account","schema_strict_mode"],"additionalProperties":false,"description":"IMPORTANT: Execution environment includes: account for signing operations, network selection (testnet | localnet | mainnet), additional Guard permissions, and more. Used to specify context information during the call. If account is not specified, the default account (\"\") will be used. NOTE: by default the SDK auto-registers the sender in the global Entity table when absent (first business transaction; the account receives an owned Resource object). Set no_auto_register=true only on explicit user request."}},"required":["operation_type","data"],"additionalProperties":false,"description":"Resume an interrupted transfer from its current step. Safe to retry. [Requires WOW mainnet env for WOW-side operations]"},{"type":"object","properties":{"operation_type":{"type":"string","const":"withdraw"},"data":{"type":"object","properties":{"to":{"type":"string","pattern":"^0x[0-9a-fA-F]{40}$","description":"Withdrawal target EVM address"},"amount":{"type":"string","description":"Withdrawal amount (smallest unit)"},"token":{"description":"ERC20 token identifier; if omitted or ETH, withdraws native ETH","type":"string","enum":["ETH","WETH","WBTC","USDC","USDT"]},"tokenAddress":{"description":"ERC20 contract address (alternative to token; allows withdrawing by contract address)","type":"string","pattern":"^0x[0-9a-fA-F]{40}$"},"network":{"default":"mainnet","description":"Target chain (defaults to Ethereum mainnet when omitted — EvmChainSchema carries .default(\"mainnet\"))","type":"string","enum":["mainnet"]}},"required":["to","amount","network"],"additionalProperties":false,"description":"Withdraw from activeEvmAccount to another EVM address"},"env":{"description":"Optional env — needed to pass confirmed=true after a pending_confirmation block (funds leave activeEvmAccount).","type":"object","properties":{"account":{"default":"","type":"string","description":"Account/Object name or ID. If specifying an account, use empty string '' for the default account. If it starts with '0x', it will be treated as an ID. Otherwise, it will be treated as a name (max 64 bcs characters)."},"permission_guard":{"description":"List of permission guard IDs. Used to extend additional operation permissions (requires verification and configuration in the Permission object).","type":"array","items":{"type":"string"}},"no_cache":{"description":"Whether to disable caching.","type":"boolean"},"network":{"description":"Omit in chat-client contexts — the runtime stamps the user's CURRENT network (the client's UI selection). Standalone MCP/CLI: omit to use the current network; set ONLY when the user explicitly names a different network (a mismatch pauses for user confirmation). Never guess or hardcode a network.","type":"string","enum":["localnet","testnet","mainnet"]},"referrer":{"description":"Referrer ID. If the user is using the network for the first time, the referrer ID will be recorded (also applied when the SDK auto-registers the sender in the global Entity table).","type":"string"},"no_auto_register":{"description":"Opt-out of SDK-level Entity auto-registration. By default, a business transaction whose sender has no entry in the global Entity table automatically appends an entity registration: the sender gets registered and receives an owned Resource object (their on-chain mark book) in the wallet. Set true ONLY when the user explicitly cancelled their entity registration or demands that the transaction not touch the Entity table.","type":"boolean"},"confirmed":{"description":"Phase 2 ConfirmGate: set to true to proceed after a 'pending_confirmation' result. The operation is NOT executed until you re-call with confirmed=true after user consent.","type":"boolean"},"user_intent_phrases":{"description":"Phase 2 ConfirmGate: explicit user intent phrases collected from conversation context (e.g. 'use default account', 'force publish'). Used to bypass confirmation rules whose bypass_on_explicit_intent matches.","type":"array","items":{"type":"string"}},"plan_approval":{"description":"K3 24 PlanApproval: id of a goal whose plan was approved via goal_operation action='approve'. When set: 1) the ConfirmGate treats fail-open rules (standard/none levels) as pre-approved for operations under this goal's plan; 2) after successful CREATION operations, the created objects are auto-registered into the goal (GoalRecord.objects + its TaskProcess manifest — ACT station 'execution registers'). Fail-closed levels (irreversible/publish/amount) still require per-operation confirmation with env.confirmed=true.","type":"string"},"client_schema_version":{"description":"Client-side schema version (semver, e.g. '1.0.0'). When provided, the server checks compatibility and attaches warnings if mismatched.","type":"string"},"schema_strict_mode":{"default":false,"description":"When true, schema incompatibility returns an error instead of a warning. Default: false (warn mode).","type":"boolean"},"dry_run":{"description":"Phase 1 dry_run: when true, SIMULATE the transaction without signing or submitting. Returns effects + events showing what WOULD happen — no on-chain state is modified, no gas is charged. Use this to verify that an operation will succeed before committing. The returned digest will be 'dry_run:<timestamp>' and objectChanges will be empty (simulation only).","type":"boolean"},"window_profile":{"description":"Time-window profile for trial runs (N8 ktt6 F-14 re-carving of the 'business windows are never test-compressed' ruling, 2026-11-04). 'production' (default): compressed time-window violations BLOCK publish exactly as before. 'test': compressed windows are ADMITTED so a disposable trial store can run its full lifecycle fast — R-TIME-PROFILE violations degrade to loud named disclosures, and the publish itself is BLOCKED on a real network (testnet/mainnet); point the trial at a local/dev chain (env.network='localnet'). Trial discipline: test-profile stores are throwaway — a production store must re-issue WITHOUT this flag (guards freeze at publish, so compressed windows are unrepairable except by rebuilding the store).","type":"string","enum":["production","test"]},"response_level":{"description":"Write-success response size. 'compact' (default) trims the structured result to key fields (digest + created object references); 'full' includes the complete raw result. Default: compact.","type":"string","enum":["compact","full"]},"confirm_mode":{"description":"Confirmation frequency for this call. 'full': confirm every matched gate rule. 'streamlined' (client default): skip fail-open 'standard' level prompts — fail-closed levels (irreversible/publish/amount) ALWAYS still confirm. 'quiet': same hard floor as streamlined, for clients that batch/suppress repeat low-risk prompts in their own UI. This field NEVER downgrades fail-closed levels.","type":"string","enum":["full","streamlined","quiet"]}},"required":["account","schema_strict_mode"],"additionalProperties":false}},"required":["operation_type","data"],"additionalProperties":false,"description":"Withdraw from activeEvmAccount to another EVM address (non-cross-chain). [env optional: only needed for env.confirmed after a confirmation block]"},{"type":"object","properties":{"operation_type":{"type":"string","const":"query_active_evm_account"},"data":{"type":"object","properties":{"network":{"description":"Specific chain; if omitted, queries all supported chains","default":"mainnet","type":"string","enum":["mainnet"]},"tokens":{"description":"Additional ERC20 token contract addresses to query; if omitted, only native ETH balance is queried","type":"array","items":{"type":"string","pattern":"^0x[0-9a-fA-F]{40}$","description":"EVM address (0x + 40 hex)"}}},"additionalProperties":false,"description":"Query activeEvmAccount parameters"}},"required":["operation_type"],"additionalProperties":false,"description":"Query activeEvmAccount address + balances (per chain or all chains). [No env needed]"},{"type":"object","properties":{"operation_type":{"type":"string","const":"query_supported_evm_chains"}},"required":["operation_type"],"additionalProperties":false,"description":"List currently supported EVM chains (enum value / description / chainId / RPC health). [No env needed, no data required]"},{"type":"object","properties":{"operation_type":{"type":"string","const":"query_supported_tokens"},"data":{"type":"object","properties":{"network":{"description":"Specific chain; if omitted, returns token lists for all supported chains","default":"mainnet","type":"string","enum":["mainnet"]}},"additionalProperties":false,"description":"Query supported Bridge tokens per chain (WOW/EVM addresses, decimals, description)"}},"required":["operation_type"],"additionalProperties":false,"description":"List supported Bridge tokens per chain (WOW/EVM contract addresses, decimals, description). [No env needed]"},{"type":"object","properties":{"operation_type":{"type":"string","const":"query_transfer_list"},"data":{"type":"object","properties":{"onlyActive":{"description":"true returns only in-progress transfers; false/omitted returns all","type":"boolean"},"status":{"description":"Filter by transfer status","type":"string","enum":["pending","in_progress","success","failed"]},"direction":{"description":"Filter by transfer direction","type":"string","enum":["wow_to_evm","evm_to_wow","withdraw"]},"token":{"description":"Filter by token type (ETH/WETH/WBTC/USDC/USDT)","type":"string","enum":["ETH","WETH","WBTC","USDC","USDT"]},"limit":{"description":"Maximum number of results (default: all, max: 100)","type":"integer","exclusiveMinimum":0,"maximum":100}},"additionalProperties":false,"description":"Query transfer list with optional filters (status / direction / token / limit)"}},"required":["operation_type"],"additionalProperties":false,"description":"Query cross-chain / withdrawal transfer history list (optionally only in-progress). [No env needed]"},{"type":"object","properties":{"operation_type":{"type":"string","const":"query_transfer_status"},"data":{"type":"object","properties":{"transferId":{"type":"string","description":"Transfer ID (br_<timestamp>_<counter>)"},"refresh":{"default":true,"description":"Whether to refresh from on-chain state (default true). true=queries latest on-chain status (takes 5-15s, timeout at 15s on slow RPC). false=instant response from local cache (no on-chain query). Recommended: use refresh=true every 1-2 minutes for ongoing transfers; use refresh=false for quick checks between refreshes.","type":"boolean"}},"required":["transferId","refresh"],"additionalProperties":false,"description":"Query single transfer parameters. [Wait hint] With refresh=true (default), this call may take 5-15 seconds to query on-chain state. If on-chain RPC is slow, it will timeout at 15s and return cached state. Set refresh=false for instant response from local cache. [Returned fields] The result includes: (1) record.step/status - high-level lifecycle (deposit/claimed/success); (2) record.latestState.step/status - fine-grained on-chain progress (source_tx_pending → source_tx_confirmed → signatures_ready → completed). Use latestState.confirmations to estimate remaining time (needs 64 for ETH→WOW finalization)."}},"required":["operation_type","data"],"additionalProperties":false,"description":"Query a single transfer's detail by transferId"},{"type":"object","properties":{"operation_type":{"type":"string","const":"manage_evm_rpc"},"data":{"oneOf":[{"type":"object","properties":{"op":{"type":"string","const":"list","description":"List all configured RPC endpoints with health status"},"network":{"default":"mainnet","description":"Target chain (defaults to Ethereum mainnet when omitted — EvmChainSchema carries .default(\"mainnet\"))","type":"string","enum":["mainnet"]}},"required":["op","network"],"additionalProperties":false,"description":"List RPC endpoints (no rpcUrl/rpcUrls needed)"},{"type":"object","properties":{"op":{"type":"string","const":"add","description":"Append one or more RPC endpoints"},"network":{"default":"mainnet","description":"Target chain (defaults to Ethereum mainnet when omitted — EvmChainSchema carries .default(\"mainnet\"))","type":"string","enum":["mainnet"]},"rpcUrls":{"minItems":1,"type":"array","items":{"type":"string","format":"uri"},"description":"RPC URL(s) to add"}},"required":["op","network","rpcUrls"],"additionalProperties":false,"description":"Add RPC endpoint(s)"},{"type":"object","properties":{"op":{"type":"string","const":"remove","description":"Remove one or more RPC endpoints"},"network":{"default":"mainnet","description":"Target chain (defaults to Ethereum mainnet when omitted — EvmChainSchema carries .default(\"mainnet\"))","type":"string","enum":["mainnet"]},"rpcUrls":{"minItems":1,"type":"array","items":{"type":"string","format":"uri"},"description":"RPC URL(s) to remove"}},"required":["op","network","rpcUrls"],"additionalProperties":false,"description":"Remove RPC endpoint(s)"},{"type":"object","properties":{"op":{"type":"string","const":"set","description":"Full replace all RPC endpoints"},"network":{"default":"mainnet","description":"Target chain (defaults to Ethereum mainnet when omitted — EvmChainSchema carries .default(\"mainnet\"))","type":"string","enum":["mainnet"]},"rpcUrls":{"minItems":1,"type":"array","items":{"type":"string","format":"uri"},"description":"Full RPC list (replaces all existing endpoints)"}},"required":["op","network","rpcUrls"],"additionalProperties":false,"description":"Full replace RPC endpoints"},{"type":"object","properties":{"op":{"type":"string","const":"ping","description":"Health check one or more RPC endpoints"},"network":{"default":"mainnet","description":"Target chain (defaults to Ethereum mainnet when omitted — EvmChainSchema carries .default(\"mainnet\"))","type":"string","enum":["mainnet"]},"rpcUrls":{"description":"Specific RPC URLs to ping; if omitted, pings all configured RPCs","type":"array","items":{"type":"string","format":"uri"}}},"required":["op","network"],"additionalProperties":false,"description":"Health check RPC endpoints"}],"description":"EVM RPC endpoint management (discriminated by op)"}},"required":["operation_type","data"],"additionalProperties":false,"description":"Manage EVM RPC endpoints (list/add/remove/set/ping) to mitigate public RPC 429 rate limits. [No env needed]"}]}