@askexenow/exe-os 0.9.81 → 0.9.82

package/dist/lib/exe-daemon.js

@@ -18405,14 +18405,15 @@ function registerQueryCompanyBrain(server) {
       title: "Query Company Brain",
       description: "Search the Company Brain \u2014 queries across all data (raw events, wiki docs, agent memories, gateway messages).",
       inputSchema: {
-        action: QUERY_ACTION.default("search").describe("search = search exe-db; list_sources = list available raw/CRM/wiki/memory/gateway sources"),
+        action: QUERY_ACTION.default("search").describe("search = search exe-db; list_sources = list available sources; sql = run read-only SQL through gateway"),
         query: z39.string().optional().describe("Search text. Required for action=search."),
+        sql: z39.string().optional().describe("Read-only SELECT/WITH SQL. Required for action=sql."),
         scope: QUERY_SCOPE.default("all").describe("Which data scope to search/read (raw, crm, wiki, memory, gateway, all)"),
         source: z39.string().optional().describe("Filter raw events by source (shopify, asana, etc.)"),
         limit: z39.coerce.number().int().min(1).max(100).default(20).describe("Max results per scope")
       }
     },
-    async ({ action, query, scope, source, limit }) => {
+    async ({ action, query, sql, scope, source, limit }) => {
       const resolvedAction = action ?? "search";
       if (resolvedAction === "search" && !query?.trim()) {
         return {
@@ -18420,6 +18421,12 @@ function registerQueryCompanyBrain(server) {
           isError: true
         };
       }
+      if (resolvedAction === "sql" && !sql?.trim()) {
+        return {
+          content: [{ type: "text", text: "sql is required when action=sql" }],
+          isError: true
+        };
+      }
       const config2 = await loadConfig();
       const gatewayUrl = config2.gateway?.url || process.env.EXE_GATEWAY_URL;
       const authToken = config2.gateway?.authToken || process.env.EXE_GATEWAY_QUERY_AUTH_TOKEN || process.env.EXE_COMPANY_BRAIN_AUTH_TOKEN || process.env.EXE_GATEWAY_AUTH_TOKEN;
@@ -18448,7 +18455,10 @@ function registerQueryCompanyBrain(server) {
       }
       let url;
       try {
-        url = new URL(resolvedAction === "list_sources" ? "/query/sources" : "/query", gatewayUrl);
+        url = new URL(
+          resolvedAction === "list_sources" ? "/query/sources" : resolvedAction === "sql" ? "/query/sql" : "/query",
+          gatewayUrl
+        );
       } catch (err) {
         return {
           content: [
@@ -18468,7 +18478,12 @@ function registerQueryCompanyBrain(server) {
       }
       try {
         const response = await fetch(url.toString(), {
-          headers: authToken ? { Authorization: `Bearer ${authToken}` } : {},
+          method: resolvedAction === "sql" ? "POST" : "GET",
+          headers: {
+            ...authToken ? { Authorization: `Bearer ${authToken}` } : {},
+            ...resolvedAction === "sql" ? { "Content-Type": "application/json" } : {}
+          },
+          body: resolvedAction === "sql" ? JSON.stringify({ sql: sql.trim(), max_rows: limit }) : void 0,
           signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
         });
         if (!response.ok) {
@@ -18514,7 +18529,7 @@ var init_query_company_brain = __esm({
     init_config();
     FETCH_TIMEOUT_MS = 1e4;
     QUERY_SCOPE = z39.enum(["raw", "crm", "wiki", "memory", "gateway", "all"]);
-    QUERY_ACTION = z39.enum(["search", "list_sources"]);
+    QUERY_ACTION = z39.enum(["search", "list_sources", "sql"]);
     LOCAL_GATEWAY_HTTP_HOSTS = /^(localhost|127\.0\.0\.1|::1|exe-gateway|gateway)$/i;
   }
 });
@@ -19014,10 +19029,10 @@ function registerExportGraph(server) {
         format: z44.enum(["html", "markdown"]).default("markdown").describe("Export format: markdown (inline) or html (file)")
       }
     },
-    async ({ format }) => {
+    async ({ format: format2 }) => {
       try {
         const client = getClient();
-        if (format === "markdown") {
+        if (format2 === "markdown") {
           const report = await generateGraphReport(client);
           return {
             content: [{ type: "text", text: report }]
@@ -29848,8 +29863,81 @@ var init_raw_data = __esm({
   }
 });
 
-// src/mcp/tools/create-bug-report.ts
+// src/mcp/tools/company-actions.ts
 import { z as z87 } from "zod";
+function format(payload) {
+  return ["# Company Actions", "", JSON.stringify(payload, null, 2)].join("\n");
+}
+function registerCompanyActions(server) {
+  server.registerTool(
+    "company_actions",
+    {
+      title: "Company Actions",
+      description: "Preview and execute external connector actions (Asana, WhatsApp) through exe-gateway with audit/safety gates.",
+      inputSchema: {
+        action: ACTION.describe("list_connectors, describe_connector, preview, execute, list_runs, get_run"),
+        connector: z87.string().optional().describe("Connector to use, e.g. asana, whatsapp, airtable, notion"),
+        connector_ref: z87.string().optional().describe("Exact connector ref from list_connectors when connector names overlap"),
+        operation: z87.string().optional().describe("Connector operation, e.g. create_task or send_message"),
+        payload: z87.record(z87.string(), z87.unknown()).optional().describe("Operation payload"),
+        idempotency_key: z87.string().optional().describe("Stable key to prevent duplicate execution"),
+        confirm_token: z87.string().optional().describe("Optional future approval token"),
+        run_id: z87.string().optional().describe("Run id for get_run")
+      }
+    },
+    async (input) => {
+      const config2 = await loadConfig();
+      const gatewayUrl = config2.gateway?.url || process.env.EXE_GATEWAY_URL;
+      const authToken = config2.gateway?.authToken || process.env.EXE_GATEWAY_QUERY_AUTH_TOKEN || process.env.EXE_COMPANY_BRAIN_AUTH_TOKEN || process.env.EXE_GATEWAY_AUTH_TOKEN;
+      if (!gatewayUrl) {
+        return { content: [{ type: "text", text: "Company Actions not configured. Set gateway.url in ~/.exe-os/config.json" }] };
+      }
+      try {
+        assertSecureGatewayUrlForToken(gatewayUrl, authToken);
+      } catch (err) {
+        return { content: [{ type: "text", text: err instanceof Error ? err.message : String(err) }], isError: true };
+      }
+      let url;
+      try {
+        url = new URL("/actions", gatewayUrl);
+      } catch (err) {
+        return { content: [{ type: "text", text: `Company Actions not configured. Invalid gateway.url: ${err instanceof Error ? err.message : String(err)}` }], isError: true };
+      }
+      try {
+        const response = await fetch(url.toString(), {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json",
+            ...authToken ? { Authorization: `Bearer ${authToken}` } : {}
+          },
+          body: JSON.stringify(input),
+          signal: AbortSignal.timeout(FETCH_TIMEOUT_MS5)
+        });
+        const contentType = response.headers.get("content-type") ?? "";
+        const payload = contentType.includes("application/json") ? await response.json() : await response.text();
+        return {
+          content: [{ type: "text", text: response.ok ? format(payload) : `Company Actions failed (${response.status}): ${typeof payload === "string" ? payload : JSON.stringify(payload)}` }],
+          ...response.ok ? {} : { isError: true }
+        };
+      } catch {
+        return { content: [{ type: "text", text: `Gateway unreachable at ${url.origin}` }], isError: true };
+      }
+    }
+  );
+}
+var FETCH_TIMEOUT_MS5, ACTION;
+var init_company_actions = __esm({
+  "src/mcp/tools/company-actions.ts"() {
+    "use strict";
+    init_config();
+    init_query_company_brain();
+    FETCH_TIMEOUT_MS5 = 15e3;
+    ACTION = z87.enum(["list_connectors", "describe_connector", "preview", "execute", "list_runs", "get_run"]);
+  }
+});
+
+// src/mcp/tools/create-bug-report.ts
+import { z as z88 } from "zod";
 import crypto19 from "crypto";
 import { mkdir as mkdir6, writeFile as writeFile7 } from "fs/promises";
 import path53 from "path";
@@ -29932,22 +30020,22 @@ function registerCreateBugReport(server) {
       title: "Create Bug Report",
       description: "Classify and file an exe-os issue as upstream_bug, customer_customization, emergency_hotfix, or unclear. Writes a local report, stores memory, and optionally sends to AskExe support when a support endpoint is configured.",
       inputSchema: {
-        title: z87.string().min(3).describe("Short descriptive title"),
+        title: z88.string().min(3).describe("Short descriptive title"),
         classification: CLASSIFICATION.describe(
           "upstream_bug = platform defect; customer_customization = local preference; emergency_hotfix = temporary local patch; unclear = needs maintainer triage"
         ),
         severity: SEVERITY.default("p2").describe("p0 critical \u2192 p3 low"),
-        summary: z87.string().min(10).describe("What happened and why it matters"),
-        customer_impact: z87.string().optional().describe("How this affects the customer/founder"),
-        reproduction_steps: z87.array(z87.string()).optional().describe("Steps to reproduce"),
-        expected: z87.string().optional().describe("Expected behavior"),
-        actual: z87.string().optional().describe("Actual behavior"),
-        files_changed: z87.array(z87.string()).optional().describe("Files changed or suspected"),
-        workaround: z87.string().optional().describe("Temporary local workaround/hotfix, if any"),
-        local_patch_diff: z87.string().optional().describe("Small local diff or patch summary"),
-        package_version: z87.string().optional().describe("Installed @askexenow/exe-os version"),
-        project_name: z87.string().optional().describe("Project/customer context"),
-        send_upstream: z87.boolean().default(true).describe("Attempt to POST to configured AskExe support endpoint")
+        summary: z88.string().min(10).describe("What happened and why it matters"),
+        customer_impact: z88.string().optional().describe("How this affects the customer/founder"),
+        reproduction_steps: z88.array(z88.string()).optional().describe("Steps to reproduce"),
+        expected: z88.string().optional().describe("Expected behavior"),
+        actual: z88.string().optional().describe("Actual behavior"),
+        files_changed: z88.array(z88.string()).optional().describe("Files changed or suspected"),
+        workaround: z88.string().optional().describe("Temporary local workaround/hotfix, if any"),
+        local_patch_diff: z88.string().optional().describe("Small local diff or patch summary"),
+        package_version: z88.string().optional().describe("Installed @askexenow/exe-os version"),
+        project_name: z88.string().optional().describe("Project/customer context"),
+        send_upstream: z88.boolean().default(true).describe("Attempt to POST to configured AskExe support endpoint")
       }
     },
     async ({
@@ -30063,13 +30151,13 @@ var init_create_bug_report = __esm({
     init_config();
     init_license();
     init_store();
-    CLASSIFICATION = z87.enum([
+    CLASSIFICATION = z88.enum([
       "upstream_bug",
       "customer_customization",
       "emergency_hotfix",
       "unclear"
     ]);
-    SEVERITY = z87.enum(["p0", "p1", "p2", "p3"]);
+    SEVERITY = z88.enum(["p0", "p1", "p2", "p3"]);
   }
 });
 
@@ -30300,7 +30388,7 @@ var init_exe_support = __esm({
 });
 
 // src/mcp/tools/support.ts
-import { z as z88 } from "zod";
+import { z as z89 } from "zod";
 function formatRows(rows, mode) {
   const lines = [`exe-os support ${mode}`, ""];
   for (const row of rows) {
@@ -30341,7 +30429,7 @@ function registerSupportTools(server) {
       title: "Support Test",
       description: "End-to-end support intake smoke test. Files a clearly marked test report upstream and auto-closes it on AskExe machines with admin credentials.",
       inputSchema: {
-        project: z88.string().default("support-smoke").describe("Customer/project name, e.g. hygo")
+        project: z89.string().default("support-smoke").describe("Customer/project name, e.g. hygo")
       }
     },
     async ({ project }) => {
@@ -30856,7 +30944,7 @@ var init_update_check = __esm({
 // src/mcp/tools/cli-parity.ts
 import { execFile as execFile2 } from "child_process";
 import { promisify as promisify2 } from "util";
-import { z as z89 } from "zod";
+import { z as z90 } from "zod";
 async function runCommand(command, args, timeout = 6e4) {
   const printable = [command, ...args].join(" ");
   try {
@@ -30891,12 +30979,12 @@ function registerCliParityTools(server) {
     title: "Doctor",
     description: "Run exe-os doctor audit. Defaults to read-only diagnostics; optional dry-run/fix flags mirror CLI.",
     inputSchema: {
-      agent: z89.string().optional(),
-      project: z89.string().optional(),
-      verbose: z89.boolean().default(false),
-      conflicts: z89.boolean().default(false),
-      dry_run: z89.boolean().default(false),
-      fix: z89.boolean().default(false)
+      agent: z90.string().optional(),
+      project: z90.string().optional(),
+      verbose: z90.boolean().default(false),
+      conflicts: z90.boolean().default(false),
+      dry_run: z90.boolean().default(false),
+      fix: z90.boolean().default(false)
     }
   }, async ({ agent, project, verbose, conflicts, dry_run, fix }) => {
     const args = [];
@@ -30913,9 +31001,9 @@ function registerCliParityTools(server) {
     title: "Rename Employee",
     description: "Rename an employee using the same path as `exe-os rename <old> <new>`. Use for customer roster/identity renames.",
     inputSchema: {
-      old_name: z89.string().min(1),
-      new_name: z89.string().min(1),
-      dry_run: z89.boolean().default(false)
+      old_name: z90.string().min(1),
+      new_name: z90.string().min(1),
+      dry_run: z90.boolean().default(false)
     }
   }, async ({ old_name, new_name, dry_run }) => {
     if (dry_run) {
@@ -30928,7 +31016,7 @@ function registerCliParityTools(server) {
   server.registerTool("status_brief", {
     title: "Status Brief",
     description: "Return current employee/tmux status. Mirrors `exe-status` and supports optional deep view for one employee.",
-    inputSchema: { employee: z89.string().optional() }
+    inputSchema: { employee: z90.string().optional() }
   }, async ({ employee }) => {
     const text3 = await status(employee);
     return result2(text3, { ok: true, employee: employee ?? null });
@@ -30936,7 +31024,7 @@ function registerCliParityTools(server) {
   server.registerTool("pending_work_summary", {
     title: "Pending Work Summary",
     description: "Return pending reviews, messages, and notifications using the same summaries as the CLI tools.",
-    inputSchema: { agent: z89.string().optional() }
+    inputSchema: { agent: z90.string().optional() }
   }, async ({ agent }) => {
     const parts = await Promise.all([
       runCommand("exe-pending-reviews", [], 3e4),
@@ -30957,7 +31045,7 @@ function registerCliParityTools(server) {
   server.registerTool("key_rotation_preflight", {
     title: "Key Rotation Preflight",
     description: "Dry-run key rotation/update preflight. No destructive changes.",
-    inputSchema: { mode: z89.enum(["rotate", "update"]).default("rotate") }
+    inputSchema: { mode: z90.enum(["rotate", "update"]).default("rotate") }
   }, async ({ mode }) => {
     const out = await runCommand("exe-os", ["key", mode, "--dry-run"], 6e4);
     return result2(out.text, { ok: out.ok, command: out.command, mode }, !out.ok);
@@ -30976,11 +31064,11 @@ function registerCliParityTools(server) {
     title: "Stack Update Check",
     description: "Plan/check a customer stack update without applying Docker changes. Mirrors `exe-os stack-update --check`.",
     inputSchema: {
-      target: z89.string().optional(),
-      manifest: z89.string().optional(),
-      compose_file: z89.string().optional(),
-      env_file: z89.string().optional(),
-      deployment_persona: z89.enum(["customer", "askexe-control-plane"]).default("customer")
+      target: z90.string().optional(),
+      manifest: z90.string().optional(),
+      compose_file: z90.string().optional(),
+      env_file: z90.string().optional(),
+      deployment_persona: z90.enum(["customer", "askexe-control-plane"]).default("customer")
     }
   }, async ({ target, manifest, compose_file, env_file, deployment_persona }) => {
     const args = ["stack-update", "--check", "--deployment-persona", deployment_persona];
@@ -31101,7 +31189,7 @@ var init_session_events = __esm({
 });
 
 // src/mcp/tools/get-session-events.ts
-import { z as z90 } from "zod";
+import { z as z91 } from "zod";
 function canReadAgent(activeRole, activeAgent, requestedAgent) {
   return requestedAgent === activeAgent || activeRole === "COO" || activeRole === "CTO";
 }
@@ -31125,11 +31213,11 @@ function registerGetSessionEvents(server) {
       title: "Get Session Events",
       description: "Return exact recent chronological user prompts, assistant responses, and tool calls from the append-only session journal. Use this when asked what happened last, not semantic memory search.",
       inputSchema: {
-        agent_id: z90.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
-        session_id: z90.string().optional().describe("Optional exact runtime session id."),
+        agent_id: z91.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
+        session_id: z91.string().optional().describe("Optional exact runtime session id."),
         event_type: EVENT_TYPE.optional().describe("Filter to one event type."),
-        project_name: z90.string().optional().describe("Optional project filter. Pass 'all' for all projects."),
-        limit: z90.number().int().min(1).max(100).default(20).describe("Number of events to return.")
+        project_name: z91.string().optional().describe("Optional project filter. Pass 'all' for all projects."),
+        limit: z91.number().int().min(1).max(100).default(20).describe("Number of events to return.")
       }
     },
     async ({ agent_id, session_id, event_type, project_name, limit }) => {
@@ -31165,8 +31253,8 @@ function registerGetLastAssistantResponse(server) {
       title: "Get Last Assistant Response",
       description: "Return the exact last assistant response for an agent from the session event journal. Use for 'what was the last thing you said?'",
       inputSchema: {
-        agent_id: z90.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
-        project_name: z90.string().optional().describe("Optional project filter. Pass 'all' for all projects.")
+        agent_id: z91.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
+        project_name: z91.string().optional().describe("Optional project filter. Pass 'all' for all projects.")
       }
     },
     async ({ agent_id, project_name }) => {
@@ -31201,7 +31289,7 @@ var init_get_session_events = __esm({
     init_active_agent();
     init_fast_db_init();
     init_session_events();
-    EVENT_TYPE = z90.enum([
+    EVENT_TYPE = z91.enum([
       "user_prompt",
       "assistant_response",
       "tool_call",
@@ -31621,7 +31709,7 @@ var init_code_context_index = __esm({
 });
 
 // src/mcp/tools/code-context.ts
-import { z as z91 } from "zod";
+import { z as z92 } from "zod";
 function errorResult10(text3) {
   return { content: [{ type: "text", text: text3 }], isError: true };
 }
@@ -31633,19 +31721,19 @@ function registerCodeContext(server) {
     title: "Code Context",
     description: "Persistent codebase context engine. One consolidated tool to avoid MCP bloat. Actions: index, search, trace, blast_radius, stats.",
     inputSchema: {
-      action: z91.enum(["index", "search", "trace", "blast_radius", "stats"]).describe("Code context operation"),
-      project_root: z91.string().optional().describe("Repository root. Defaults to current working directory."),
-      query: z91.string().optional().describe("Search query for action=search"),
-      symbol: z91.string().optional().describe("Symbol/function/class/type name for trace or blast_radius"),
-      file_path: z91.string().optional().describe("File path for blast_radius"),
-      force: z91.boolean().optional().describe("Force rebuild before answering"),
-      limit: z91.coerce.number().int().min(1).max(100).optional().describe("Max results"),
-      offset: z91.coerce.number().int().min(0).optional().describe("Search pagination offset"),
-      refresh_index: z91.boolean().optional().describe("Refresh/rebuild index before searching"),
-      languages: z91.array(z91.string()).optional().describe('Language filters, e.g. ["python", "typescript"]'),
-      paths: z91.array(z91.string()).optional().describe("Path/glob filters"),
-      depth: z91.coerce.number().int().min(1).max(5).optional().describe("Dependent traversal depth for blast_radius"),
-      max_files: z91.coerce.number().int().min(1).max(1e4).optional().describe("Max code files to index")
+      action: z92.enum(["index", "search", "trace", "blast_radius", "stats"]).describe("Code context operation"),
+      project_root: z92.string().optional().describe("Repository root. Defaults to current working directory."),
+      query: z92.string().optional().describe("Search query for action=search"),
+      symbol: z92.string().optional().describe("Symbol/function/class/type name for trace or blast_radius"),
+      file_path: z92.string().optional().describe("File path for blast_radius"),
+      force: z92.boolean().optional().describe("Force rebuild before answering"),
+      limit: z92.coerce.number().int().min(1).max(100).optional().describe("Max results"),
+      offset: z92.coerce.number().int().min(0).optional().describe("Search pagination offset"),
+      refresh_index: z92.boolean().optional().describe("Refresh/rebuild index before searching"),
+      languages: z92.array(z92.string()).optional().describe('Language filters, e.g. ["python", "typescript"]'),
+      paths: z92.array(z92.string()).optional().describe("Path/glob filters"),
+      depth: z92.coerce.number().int().min(1).max(5).optional().describe("Dependent traversal depth for blast_radius"),
+      max_files: z92.coerce.number().int().min(1).max(1e4).optional().describe("Max code files to index")
     }
   }, async ({ action, project_root, query, symbol, file_path, force, limit, offset, refresh_index, languages, paths, depth, max_files }) => {
     const opts = { projectRoot: project_root, force, maxFiles: max_files };
@@ -31696,7 +31784,7 @@ var init_code_context = __esm({
 });
 
 // src/mcp/tools/support-inbox.ts
-import { z as z92 } from "zod";
+import { z as z93 } from "zod";
 function adminToken() {
   return process.env.ASKEXE_SUPPORT_ADMIN_TOKEN || process.env.EXE_SUPPORT_ADMIN_TOKEN;
 }
@@ -31735,9 +31823,9 @@ function registerListBugReports(server) {
       title: "List Bug Reports",
       description: "AskExe-internal only: list incoming customer bug reports from the support inbox.",
       inputSchema: {
-        status: z92.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("open"),
-        severity: z92.enum(["p0", "p1", "p2", "p3"]).optional(),
-        limit: z92.number().int().min(1).max(100).default(25)
+        status: z93.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("open"),
+        severity: z93.enum(["p0", "p1", "p2", "p3"]).optional(),
+        limit: z93.number().int().min(1).max(100).default(25)
       }
     },
     async ({ status: status2, severity, limit }) => {
@@ -31756,7 +31844,7 @@ function registerGetBugReport(server) {
     {
       title: "Get Bug Report",
       description: "AskExe-internal only: fetch one customer bug report with full markdown payload.",
-      inputSchema: { id: z92.string().min(8) }
+      inputSchema: { id: z93.string().min(8) }
     },
     async ({ id }) => {
       const data = await requestJson(`${endpoint()}/${encodeURIComponent(id)}`);
@@ -31771,12 +31859,12 @@ function registerTriageBugReport(server) {
       title: "Triage Bug Report",
       description: "AskExe-internal only: update bug report status and link task/commit/release metadata.",
       inputSchema: {
-        id: z92.string().min(8),
+        id: z93.string().min(8),
         status: STATUS.optional(),
-        triage_notes: z92.string().optional(),
-        linked_task_id: z92.string().optional(),
-        linked_commit: z92.string().optional(),
-        fixed_version: z92.string().optional()
+        triage_notes: z93.string().optional(),
+        linked_task_id: z93.string().optional(),
+        linked_commit: z93.string().optional(),
+        fixed_version: z93.string().optional()
       }
     },
     async ({ id, status: status2, triage_notes, linked_task_id, linked_commit, fixed_version }) => {
@@ -31793,7 +31881,7 @@ var init_support_inbox = __esm({
   "src/mcp/tools/support-inbox.ts"() {
     "use strict";
     DEFAULT_ENDPOINT = "https://askexe.com/admin/support/bug-reports";
-    STATUS = z92.enum(["open", "triaged", "fixed", "closed", "wontfix"]);
+    STATUS = z93.enum(["open", "triaged", "fixed", "closed", "wontfix"]);
   }
 });
 
@@ -31840,7 +31928,7 @@ var init_tool_gates = __esm({
       documents: ["COO", "CTO", "Wiki Agent"],
       // ingest, list, purge, set_importance, rerank
       gateway: ["COO", "Gateway Agent"],
-      // send_whatsapp, query_conversations, query_company_brain
+      // send_whatsapp, query_conversations, query_company_brain, company_actions
       admin: ["COO"],
       // deploy, backup, daemon health, auto-wake, worker gate, memory audit, consolidation, cloud sync, agent config, list employees, agent spend, sessions, session kills
       licensing: ["COO"],
@@ -31929,6 +32017,7 @@ var init_tool_gates = __esm({
       registerSendWhatsapp: "gateway",
       registerQueryConversations: "gateway",
       registerQueryCompanyBrain: "gateway",
+      registerCompanyActions: "gateway",
       // admin
       registerConfig: "admin",
       registerDeployClient: "admin",
@@ -32183,6 +32272,7 @@ function registerAllTools(server) {
   }
   if (exposeLegacyGateway) {
     gate("registerQueryCompanyBrain", registerQueryCompanyBrain);
+    gate("registerCompanyActions", registerCompanyActions);
   }
 }
 var init_register_tools = __esm({
@@ -32276,6 +32366,7 @@ var init_register_tools = __esm({
     init_list_licenses();
     init_activate_license();
     init_query_company_brain();
+    init_company_actions();
     init_create_bug_report();
     init_support();
     init_cli_parity();