@axonity-ai/mcp 0.12.0 → 0.14.0

package/README.md

@@ -40,9 +40,12 @@ tenant + scope on every call, so the connector is not a trust boundary.
 
 ## Tools
 
-345 tools total. `axonity_conventions` (read this first) covers the authoring
+346 tools total. `axonity_conventions` (read this first) covers the authoring
 rules — drafts vs live, optimistic locking, per-entity fields, delete/restore,
 and how to tell a retryable error from one that will never succeed.
+`axonity_semantic_conventions` is its counterpart for one job only: building a
+workspace's semantic layer. Both serve the platform's own rules, read live —
+there is no copy of them in this repository.
 
 What the connector does **not** state is as deliberate as what it does: the
 mutation commands, the step types, the trigger types, the schedule-rule shapes
@@ -73,6 +76,12 @@ Exceptions: `persona` has no `create_persona` (create only via
 `create_agent_persona`). And `list_data_tables` answers **one page**, not the
 whole library — see Tables below.
 
+Three more entities use the same verbs **without** the draft ones —
+**data_source, table_relationship, dashboard**. None is versioned: a change is
+live when it is saved, so there is no `discard_*_draft` and no
+`request_publish_*`. Their lists are paged like `list_data_tables`. See
+Warehouses and dashboards below.
+
 Some list routes narrow in the query, which is where narrowing belongs — the
 backend applies it before the rows come back:
 `list_workflows({ stageId?, capabilityId? })`,
@@ -80,7 +89,9 @@ backend applies it before the rows come back:
 `list_policies({ scope?, ownerId? })`,
 `list_reference_docs({ scope?, ownerId? })`,
 `list_prompt_snippets({ deleted? })`,
-`list_data_tables({ name?, status?, isDynamic? })`.
+`list_data_tables({ name?, status?, isDynamic? })`,
+`list_data_sources({ enabled? })`,
+`list_table_relationships({ tableId? })`.
 
 That table is **generated** from the pinned schema's own query parameters
 (`npm run generate:filters` → `src/generated/listFilters.ts`), not hand-listed.
@@ -244,6 +255,35 @@ across these routes — the tool parameter names say which.
     would yield), `toolId` (whether a row exists) and `isLive` (whether a run
     can reach it) separately — an author who ticked "may add rows" and has not
     published has granted nothing yet.
+- **Warehouses and dashboards** (`data_source`, `table_relationship`,
+  `dashboard`, measures): a workspace connects a warehouse such as BigQuery,
+  syncs fill dynamic tables from it on a schedule, and dashboards show
+  measures over those tables.
+  - **Most writes here are administrator-only on the platform, and a service
+    token always counts as a member.** Creating, changing, testing or querying
+    a data source, every sync write and every relationship write answer 403
+    "Only administrators can perform this action" to a token today. The tools
+    say so in their descriptions, and the error says *administrator only*
+    rather than the usual "your token is read-only" — the opposite advice.
+    Reads, dashboards and measures are open to a member.
+  - `list_data_source_drivers` first: each warehouse's `configFields` are the
+    keys `create_data_source` takes in `config`, so nothing about BigQuery is
+    hard-coded here and a new warehouse works without a connector release.
+    The warehouse key lives in a vault secret a human fills; the source points
+    at it by `secretId`.
+  - `test_data_source` answers `{ ok, message }` — a failure is an answer, not
+    an error. `read_data_source_schema` reads the warehouse's catalogue for
+    free. `query_data_source` runs read-only SQL with capped rows
+    (`truncated` says when rows were left out); a 422 is the query being
+    refused, a 502 is the warehouse.
+  - Syncs: `list_data_source_syncs`, `create_data_source_sync`,
+    `run_data_source_sync` (brings the run forward; does not wait for it),
+    `delete_data_source_sync`, `restore_data_source_sync` (comes back off).
+  - Measures: `read_measure_design` (what a table can be asked),
+    `query_measures` (up to 40 questions, each answered on its own),
+    `list_measure_rows` (a list tile). Plus `duplicate_dashboard`.
+  - A `source_query` knowledge note names its source in `subjectSourceId` on
+    `create_reference_doc`.
 - `list_deleted_prompt_snippets` calls `/api/v1/prompt-snippets/deleted`; the
   backend returns it as `{ items: [... ] }`, and the tool forwards that response
   unchanged.

package/dist/errors.js

@@ -157,13 +157,31 @@ export class AuthError extends AxonityApiError {
         this.name = "AuthError";
     }
 }
+/**
+ * The backend's sentence for a route behind `require_admin`.
+ *
+ * Matched on the words because the envelope's `code` is plain `forbidden` for
+ * this and for a missing scope alike, and the two need opposite advice: a
+ * scope can be granted on the token, administrator rights cannot — a service
+ * token always resolves as a member. Telling an agent "a read-only token
+ * cannot…" here sends it and its human to the token settings for something no
+ * token setting fixes (#78).
+ */
+const ADMIN_ONLY_SENTENCE = /only administrators/i;
 /** 403 — the token lacks the scope for this action (e.g. read-only on a write). */
 export class ForbiddenError extends AxonityApiError {
     constructor(body) {
         const env = asEnvelope(body);
-        super(withDetail("Forbidden (403): this service token is not allowed to perform that action. " +
-            "A read-only token cannot create, update, delete, or request-publish, and no " +
-            "token may publish directly — use request_publish_* and let a human approve.", body), 403, body, env?.code ?? "forbidden", env?.retryable ?? false);
+        const adminOnly = ADMIN_ONLY_SENTENCE.test(describeBody(body) ?? "");
+        super(withDetail(adminOnly
+            ? "Forbidden (403): ADMINISTRATOR ONLY. This action is reserved for a " +
+                "workspace administrator, and a service token always counts as a " +
+                "member — so no token can do it, whatever its scopes. This is not a " +
+                "mistake in your call and retrying will not help. Tell your human: " +
+                "an administrator can do it in Axonity."
+            : "Forbidden (403): this service token is not allowed to perform that action. " +
+                "A read-only token cannot create, update, delete, or request-publish, and no " +
+                "token may publish directly — use request_publish_* and let a human approve.", body), 403, body, env?.code ?? "forbidden", env?.retryable ?? false);
         this.name = "ForbiddenError";
     }
 }

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAkCH,4FAA4F;AAC5F,MAAM,CAAC,MAAM,eAAe,GAA2B,IAAI,GAAG,CAAC;IAC7D,kBAAkB;IAClB,cAAc;IACd,8BAA8B;CAC/B,CAAC,CAAC;AAUH,mFAAmF;AACnF,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACvF,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAC9D,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACrD,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACrE,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAC5C,gBAAgB,EAAE,kBAAkB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;KAC3E,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,MAAe;IAC5C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC9D,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAElE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM;aACjB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;YACnE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,IAI7B,CAAC;YACF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7D,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/F,IAAI,KAAK,IAAI,IAAI;gBAAE,OAAO,GAAG,KAAK,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC;aACD,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAiD,CAAC;QACtF,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,IAAa;IACjC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,GAAG,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,UAAU,IAAI,UAAU,KAAK,GAAG,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAErE,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,8EAA8E;AAC9E,SAAS,UAAU,CAAC,IAAY,EAAE,IAAa;IAC7C,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAI7B;IAEA;IAEA;IAEA;IATX,YACE,OAAe;IACf,4CAA4C;IACnC,MAAc;IACvB,iFAAiF;IACxE,MAAgB;IACzB,0FAA0F;IACjF,IAAa;IACtB,gFAAgF;IACvE,SAAmB;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QARN,WAAM,GAAN,MAAM,CAAQ;QAEd,WAAM,GAAN,MAAM,CAAU;QAEhB,SAAI,GAAJ,IAAI,CAAS;QAEb,cAAS,GAAT,SAAS,CAAU;QAG5B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,OAAO,oBAAqB,SAAQ,eAAe;IACvD,YAAY,IAAc;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,CACH,UAAU,CACR,2EAA2E;YACzE,qDAAqD,EACvD,IAAI,CACL,EACD,GAAG,EACH,IAAI,EACJ,GAAG,EAAE,IAAI,IAAI,kBAAkB,EAC/B,GAAG,EAAE,SAAS,IAAI,IAAI,CACvB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,sBAAuB,SAAQ,eAAe;IACzD,YAAY,IAAc;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,CACH,UAAU,CACR,0EAA0E;YACxE,wEAAwE;YACxE,oEAAoE;YACpE,yBAAyB,EAC3B,IAAI,CACL,EACD,GAAG,EACH,IAAI,EACJ,GAAG,EAAE,IAAI,IAAI,oBAAoB,EACjC,GAAG,EAAE,SAAS,IAAI,KAAK,CACxB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,+DAA+D;AAC/D,MAAM,OAAO,aAAc,SAAQ,eAAe;IAChD,YAAY,IAAc;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,CACH,UAAU,CACR,wEAAwE;YACtE,wEAAwE;YACxE,2CAA2C,EAC7C,IAAI,CACL,EACD,GAAG,EACH,IAAI,EACJ,GAAG,EAAE,IAAI,IAAI,WAAW,EACxB,GAAG,EAAE,SAAS,IAAI,KAAK,CACxB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,OAAO,SAAU,SAAQ,eAAe;IAC5C,YAAY,IAAc;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,CACH,UAAU,CACR,+EAA+E;YAC7E,6EAA6E;YAC7E,6EAA6E;YAC7E,oFAAoF,EACtF,IAAI,CACL,EACD,GAAG,EACH,IAAI,EACJ,GAAG,EAAE,IAAI,IAAI,cAAc,EAC3B,GAAG,EAAE,SAAS,IAAI,KAAK,CACxB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,OAAO,cAAe,SAAQ,eAAe;IACjD,YAAY,IAAc;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,CACH,UAAU,CACR,6EAA6E;YAC3E,8EAA8E;YAC9E,6EAA6E,EAC/E,IAAI,CACL,EACD,GAAG,EACH,IAAI,EACJ,GAAG,EAAE,IAAI,IAAI,WAAW,EACxB,GAAG,EAAE,SAAS,IAAI,KAAK,CACxB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,IAAc;IAC3D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAE7B,QAAQ,GAAG,EAAE,IAAI,EAAE,CAAC;QAClB,KAAK,kBAAkB;YACrB,OAAO,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACxC,KAAK,oBAAoB;YACvB,OAAO,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC1C,KAAK,WAAW;YACd,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,cAAc;YACjB,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,WAAW,CAAC;QACjB,KAAK,wBAAwB;YAC3B,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,GAAG;YACN,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAClC,KAAK,GAAG;YACN,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,GAAG;YACN,OAAO,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACxC;YACE,OAAO,IAAI,eAAe,CACxB,UAAU,CAAC,+BAA+B,MAAM,IAAI,EAAE,IAAI,CAAC,EAC3D,MAAM,EACN,IAAI,EACJ,GAAG,EAAE,IAAI,EACT,GAAG,EAAE,SAAS,CACf,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,uBAAwB,SAAQ,eAAe;IAC1D,YACE,MAAc,EACd,IAAY,EACZ,MAAc;IACd,2EAA2E;IAC3E,OAAgB,EAChB,IAAc;QAEd,MAAM,SAAS,GACb,MAAM,KAAK,GAAG;YACZ,CAAC,CAAC,yDAAyD;YAC3D,CAAC,CAAC,EAAE,CAAC;QACT,KAAK,CACH,uCAAuC,MAAM,IAAI,IAAI,iBAAiB;YACpE,iCAAiC,SAAS,8BAA8B;YACxE,wEAAwE;YACxE,OAAO;YACP,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,uEAAuE;YACvE,sEAAsE;YACtE,0CAA0C,EAC5C,MAAM,EACN,IAAI,EACJ,sBAAsB,EACtB,KAAK,CACN,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,eAAe,GAA2C;IACrE;QACE,OAAO,EAAE,yCAAyC;QAClD,OAAO,EAAE,6CAA6C;KACvD;IACD;QACE,OAAO,EAAE,oCAAoC;QAC7C,OAAO,EAAE,4DAA4D;KACtE;IACD;QACE,OAAO,EAAE,sCAAsC;QAC/C,OAAO,EAAE,0CAA0C;KACpD;IACD;QACE,OAAO,EAAE,yCAAyC;QAClD,OAAO,EAAE,oDAAoD;KAC9D;IACD;QACE,OAAO,EAAE,kCAAkC;QAC3C,OAAO,EAAE,kDAAkD;KAC5D;IACD;QACE,OAAO,EAAE,oCAAoC;QAC7C,OAAO,EAAE,mDAAmD;KAC7D;CACF,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,IAAY,EACZ,MAAc,EACd,IAAc;IAEd,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,uBAAuB,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;QAC5B,OAAO,IAAI,uBAAuB,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAkCH,4FAA4F;AAC5F,MAAM,CAAC,MAAM,eAAe,GAA2B,IAAI,GAAG,CAAC;IAC7D,kBAAkB;IAClB,cAAc;IACd,8BAA8B;CAC/B,CAAC,CAAC;AAUH,mFAAmF;AACnF,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACvF,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAC9D,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACrD,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACrE,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAC5C,gBAAgB,EAAE,kBAAkB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;KAC3E,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,MAAe;IAC5C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC9D,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAElE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM;aACjB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;YACnE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,IAI7B,CAAC;YACF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7D,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/F,IAAI,KAAK,IAAI,IAAI;gBAAE,OAAO,GAAG,KAAK,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC;aACD,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAiD,CAAC;QACtF,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,IAAa;IACjC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,GAAG,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,UAAU,IAAI,UAAU,KAAK,GAAG,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAErE,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,8EAA8E;AAC9E,SAAS,UAAU,CAAC,IAAY,EAAE,IAAa;IAC7C,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAI7B;IAEA;IAEA;IAEA;IATX,YACE,OAAe;IACf,4CAA4C;IACnC,MAAc;IACvB,iFAAiF;IACxE,MAAgB;IACzB,0FAA0F;IACjF,IAAa;IACtB,gFAAgF;IACvE,SAAmB;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QARN,WAAM,GAAN,MAAM,CAAQ;QAEd,WAAM,GAAN,MAAM,CAAU;QAEhB,SAAI,GAAJ,IAAI,CAAS;QAEb,cAAS,GAAT,SAAS,CAAU;QAG5B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,OAAO,oBAAqB,SAAQ,eAAe;IACvD,YAAY,IAAc;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,CACH,UAAU,CACR,2EAA2E;YACzE,qDAAqD,EACvD,IAAI,CACL,EACD,GAAG,EACH,IAAI,EACJ,GAAG,EAAE,IAAI,IAAI,kBAAkB,EAC/B,GAAG,EAAE,SAAS,IAAI,IAAI,CACvB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,sBAAuB,SAAQ,eAAe;IACzD,YAAY,IAAc;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,CACH,UAAU,CACR,0EAA0E;YACxE,wEAAwE;YACxE,oEAAoE;YACpE,yBAAyB,EAC3B,IAAI,CACL,EACD,GAAG,EACH,IAAI,EACJ,GAAG,EAAE,IAAI,IAAI,oBAAoB,EACjC,GAAG,EAAE,SAAS,IAAI,KAAK,CACxB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,+DAA+D;AAC/D,MAAM,OAAO,aAAc,SAAQ,eAAe;IAChD,YAAY,IAAc;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,CACH,UAAU,CACR,wEAAwE;YACtE,wEAAwE;YACxE,2CAA2C,EAC7C,IAAI,CACL,EACD,GAAG,EACH,IAAI,EACJ,GAAG,EAAE,IAAI,IAAI,WAAW,EACxB,GAAG,EAAE,SAAS,IAAI,KAAK,CACxB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,OAAO,SAAU,SAAQ,eAAe;IAC5C,YAAY,IAAc;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,CACH,UAAU,CACR,+EAA+E;YAC7E,6EAA6E;YAC7E,6EAA6E;YAC7E,oFAAoF,EACtF,IAAI,CACL,EACD,GAAG,EACH,IAAI,EACJ,GAAG,EAAE,IAAI,IAAI,cAAc,EAC3B,GAAG,EAAE,SAAS,IAAI,KAAK,CACxB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAEnD,mFAAmF;AACnF,MAAM,OAAO,cAAe,SAAQ,eAAe;IACjD,YAAY,IAAc;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACrE,KAAK,CACH,UAAU,CACR,SAAS;YACP,CAAC,CAAC,qEAAqE;gBACnE,kEAAkE;gBAClE,qEAAqE;gBACrE,oEAAoE;gBACpE,wCAAwC;YAC5C,CAAC,CAAC,6EAA6E;gBAC3E,8EAA8E;gBAC9E,6EAA6E,EACnF,IAAI,CACL,EACD,GAAG,EACH,IAAI,EACJ,GAAG,EAAE,IAAI,IAAI,WAAW,EACxB,GAAG,EAAE,SAAS,IAAI,KAAK,CACxB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,IAAc;IAC3D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAE7B,QAAQ,GAAG,EAAE,IAAI,EAAE,CAAC;QAClB,KAAK,kBAAkB;YACrB,OAAO,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACxC,KAAK,oBAAoB;YACvB,OAAO,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC1C,KAAK,WAAW;YACd,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,cAAc;YACjB,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,WAAW,CAAC;QACjB,KAAK,wBAAwB;YAC3B,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,GAAG;YACN,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAClC,KAAK,GAAG;YACN,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,GAAG;YACN,OAAO,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACxC;YACE,OAAO,IAAI,eAAe,CACxB,UAAU,CAAC,+BAA+B,MAAM,IAAI,EAAE,IAAI,CAAC,EAC3D,MAAM,EACN,IAAI,EACJ,GAAG,EAAE,IAAI,EACT,GAAG,EAAE,SAAS,CACf,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,uBAAwB,SAAQ,eAAe;IAC1D,YACE,MAAc,EACd,IAAY,EACZ,MAAc;IACd,2EAA2E;IAC3E,OAAgB,EAChB,IAAc;QAEd,MAAM,SAAS,GACb,MAAM,KAAK,GAAG;YACZ,CAAC,CAAC,yDAAyD;YAC3D,CAAC,CAAC,EAAE,CAAC;QACT,KAAK,CACH,uCAAuC,MAAM,IAAI,IAAI,iBAAiB;YACpE,iCAAiC,SAAS,8BAA8B;YACxE,wEAAwE;YACxE,OAAO;YACP,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,uEAAuE;YACvE,sEAAsE;YACtE,0CAA0C,EAC5C,MAAM,EACN,IAAI,EACJ,sBAAsB,EACtB,KAAK,CACN,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,eAAe,GAA2C;IACrE;QACE,OAAO,EAAE,yCAAyC;QAClD,OAAO,EAAE,6CAA6C;KACvD;IACD;QACE,OAAO,EAAE,oCAAoC;QAC7C,OAAO,EAAE,4DAA4D;KACtE;IACD;QACE,OAAO,EAAE,sCAAsC;QAC/C,OAAO,EAAE,0CAA0C;KACpD;IACD;QACE,OAAO,EAAE,yCAAyC;QAClD,OAAO,EAAE,oDAAoD;KAC9D;IACD;QACE,OAAO,EAAE,kCAAkC;QAC3C,OAAO,EAAE,kDAAkD;KAC5D;IACD;QACE,OAAO,EAAE,oCAAoC;QAC7C,OAAO,EAAE,mDAAmD;KAC7D;CACF,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,IAAY,EACZ,MAAc,EACd,IAAc;IAEd,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,uBAAuB,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;QAC5B,OAAO,IAAI,uBAAuB,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/generated/listFilters.js

@@ -94,5 +94,21 @@ export const LIST_FILTERS = {
             description: "true: only tables a workflow may change. false: only reference data the author maintains. Omit for both.",
         },
     ],
+    "data_source": [
+        {
+            arg: "enabled",
+            query: "enabled",
+            type: "boolean",
+            description: "true: only sources that are switched on. false: only the ones switched off. Omit for both.",
+        },
+    ],
+    "table_relationship": [
+        {
+            arg: "tableId",
+            query: "table_id",
+            type: "string",
+            description: "Only relationships that touch this table, on either side. The way to answer \"what does this table join to\" without walking every page.",
+        },
+    ],
 };
 //# sourceMappingURL=listFilters.js.map

package/dist/generated/listFilters.js.map

@@ -1 +1 @@
-{"version":3,"file":"listFilters.js","sourceRoot":"","sources":["../../src/generated/listFilters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,MAAM,CAAC,MAAM,YAAY,GAAiC;IACxD,UAAU,EAAE;QACV;YACE,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,sGAAsG;SACzG;QACD;YACE,GAAG,EAAE,cAAc;YACnB,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,kFAAkF;SACrF;KACF;IACD,OAAO,EAAE;QACP;YACE,GAAG,EAAE,eAAe;YACpB,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,SAAS;YACf,WAAW,EACT,uNAAuN;SAC1N;KACF;IACD,QAAQ,EAAE;QACR;YACE,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,0PAA0P;SAC7P;QACD;YACE,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,uGAAuG;SAC1G;KACF;IACD,eAAe,EAAE;QACf;YACE,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,0PAA0P;SAC7P;QACD;YACE,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,uGAAuG;SAC1G;KACF;IACD,gBAAgB,EAAE;QAChB;YACE,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,SAAS;YACf,WAAW,EACT,oKAAoK;SACvK;KACF;IACD,YAAY,EAAE;QACZ;YACE,GAAG,EAAE,MAAM;YACX,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,gOAAgO;SACnO;QACD;YACE,GAAG,EAAE,QAAQ;YACb,KAAK,EAAE,QAAQ;YACf,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,2JAA2J;SAC9J;QACD;YACE,GAAG,EAAE,WAAW;YAChB,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE,SAAS;YACf,WAAW,EACT,0GAA0G;SAC7G;KACF;CACF,CAAC"}
+{"version":3,"file":"listFilters.js","sourceRoot":"","sources":["../../src/generated/listFilters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,MAAM,CAAC,MAAM,YAAY,GAAiC;IACxD,UAAU,EAAE;QACV;YACE,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,sGAAsG;SACzG;QACD;YACE,GAAG,EAAE,cAAc;YACnB,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,kFAAkF;SACrF;KACF;IACD,OAAO,EAAE;QACP;YACE,GAAG,EAAE,eAAe;YACpB,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,SAAS;YACf,WAAW,EACT,uNAAuN;SAC1N;KACF;IACD,QAAQ,EAAE;QACR;YACE,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,0PAA0P;SAC7P;QACD;YACE,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,uGAAuG;SAC1G;KACF;IACD,eAAe,EAAE;QACf;YACE,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,0PAA0P;SAC7P;QACD;YACE,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,uGAAuG;SAC1G;KACF;IACD,gBAAgB,EAAE;QAChB;YACE,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,SAAS;YACf,WAAW,EACT,oKAAoK;SACvK;KACF;IACD,YAAY,EAAE;QACZ;YACE,GAAG,EAAE,MAAM;YACX,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,gOAAgO;SACnO;QACD;YACE,GAAG,EAAE,QAAQ;YACb,KAAK,EAAE,QAAQ;YACf,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,2JAA2J;SAC9J;QACD;YACE,GAAG,EAAE,WAAW;YAChB,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE,SAAS;YACf,WAAW,EACT,0GAA0G;SAC7G;KACF;IACD,aAAa,EAAE;QACb;YACE,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,SAAS;YACf,WAAW,EACT,4FAA4F;SAC/F;KACF;IACD,oBAAoB,EAAE;QACpB;YACE,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,0IAA0I;SAC7I;KACF;CACF,CAAC"}

package/dist/index.js

@@ -23,6 +23,7 @@ import { AxonityClient } from "./client.js";
 import { loadConfig } from "./config.js";
 import { reportContractSkew } from "./contract.js";
 import { registerConventions } from "./tools/conventions.js";
+import { ADMIN_ONLY, registerDashboardTools, registerDataSourceTools, registerMeasureTools, } from "./tools/dataSources.js";
 import { registerDataTableTools } from "./tools/dataTables.js";
 import { assertPlaceholderCredentials } from "./tools/credentials.js";
 import { registerAttachTools, registerCatalogTools, registerConnectorTools, registerDependencyTools, registerPersonaTools, } from "./tools/extras.js";
@@ -149,6 +150,77 @@ const ENTITIES = [
             "which address a single row and cannot destroy the rest. Use `rows` here " +
             "only when you genuinely mean to replace the whole content.",
     },
+    // The three below arrived with axonity-flow#1849 (axonity-mcp#78). None is
+    // versioned or publish-approved: a change is live the moment it is saved, so
+    // there is no draft to discard and no request_publish_*. Each lists one page
+    // on the shared cursor, and the writes on the first two are administrator-
+    // only — see `ADMIN_ONLY` in tools/dataSources.ts.
+    {
+        singular: "data_source",
+        basePath: "/api/v1/data-sources",
+        updateMethod: "PUT",
+        label: "data sources (warehouses the workspace may read, e.g. BigQuery)",
+        publishable: false,
+        hasDiscardDraft: false,
+        deleteVersionParam: "expected_version",
+        listPaging: { defaultPageSize: 20, maxPageSize: 200 },
+        createNote: "CALL list_data_source_drivers FIRST. `sourceType` is a driver's " +
+            "`driverId` (default \"bigquery\"), and `config` takes exactly the keys " +
+            "that driver's `configFields` name — do not guess them. `secretId` " +
+            "points at the vault secret holding the warehouse key; a human puts the " +
+            "key there, never you, and the source never carries the key itself. A " +
+            "source may be created without one and tested once it has it. " +
+            "`policy` holds the limits every query is held to " +
+            "(maxBytesBilled, maxSeconds, allowedDatasets, forbiddenDatasets, " +
+            "personalColumns, dateFilters); all are empty by default. " +
+            "\n\nThen test_data_source to see whether it answers. A `source_query` " +
+            "knowledge note (create_reference_doc with kind source_query) names " +
+            "this source by its id in `subjectSourceId`." +
+            ADMIN_ONLY,
+        updateWarning: "NO DRAFT: this changes the live source, which every sync and query " +
+            "uses at once. `config` and `policy` are replaced WHOLE when sent — " +
+            "read first and send the complete block." +
+            ADMIN_ONLY,
+    },
+    {
+        singular: "table_relationship",
+        basePath: "/api/v1/table-relationships",
+        updateMethod: "PUT",
+        label: "table relationships (how two tables join, for measures across them)",
+        publishable: false,
+        hasDiscardDraft: false,
+        deleteVersionParam: "expected_version",
+        listPaging: { defaultPageSize: 20, maxPageSize: 200 },
+        createNote: "Fields: `fromTableId` + `fromColumn` (the MANY side — the facts, e.g. " +
+            "orders), `toTableId` + `toColumn` (the ONE side — e.g. countries), " +
+            "`cardinality` (many_to_one, the default, or one_to_one; there is no " +
+            "many-to-many, it has no safe join) and an optional `description`. A " +
+            "declaration that would make a total ambiguous — a second path between " +
+            "the same two tables, say — is refused with a 422 that says why. Read " +
+            "the sentence; it is the point." +
+            ADMIN_ONLY,
+        updateWarning: "Only `verified` (somebody checked that the keys really match) and " +
+            "`description` can change. To change the columns, delete and declare " +
+            "it again." +
+            ADMIN_ONLY,
+    },
+    {
+        singular: "dashboard",
+        basePath: "/api/v1/dashboards",
+        updateMethod: "PUT",
+        label: "dashboards (tiles of measures over the workspace's tables)",
+        publishable: false,
+        hasDiscardDraft: false,
+        deleteVersionParam: "expected_version",
+        listPaging: { defaultPageSize: 20, maxPageSize: 200 },
+        createNote: "Fields: `name`, `description`, `visibility` (\"workspace\", the " +
+            "default — everyone sees it — or \"private\") and `layout`, the " +
+            "sections of tiles; omit it for an empty dashboard. A tile names a " +
+            "measure by the id or name read_measure_design returns. The layout is " +
+            "checked when saved and a refusal names what is wrong.",
+        updateWarning: "NO DRAFT: a saved dashboard is what everyone it is shared with sees. " +
+            "`layout` is replaced WHOLE when sent — read first and send it complete.",
+    },
 ];
 /**
  * Entities with version history. Every authored entity here exposes the
@@ -217,6 +289,9 @@ export function registerAll(server, client) {
     registerToolboxTools(server, client);
     registerOperationsTools(server, client);
     registerDataTableTools(server, client);
+    registerDataSourceTools(server, client);
+    registerMeasureTools(server, client);
+    registerDashboardTools(server, client);
     registerComponentTools(server, client);
 }
 export function buildServer(client) {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAkB,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAwB,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAEzE;;;;;GAKG;AACH,MAAM,QAAQ,GAAgB;IAC5B;QACE,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,mBAAmB;QAC7B,YAAY,EAAE,OAAO;QACrB,KAAK,EAAE,gCAAgC;QACvC,kBAAkB,EAAE,iBAAiB;KACtC;IACD;QACE,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,QAAQ;QACf,kBAAkB,EAAE,iBAAiB;KACtC;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,eAAe;QACzB,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,uDAAuD;QAC9D,sEAAsE;QACtE,2EAA2E;QAC3E,WAAW,EAAE,4BAA4B;QACzC,kBAAkB,EAAE,iBAAiB;KACtC;IACD;QACE,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,uCAAuC;QAC9C,kBAAkB,EAAE,kBAAkB;KACvC;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,kBAAkB;QAC5B,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,4CAA4C;QACnD,MAAM,EAAE,UAAU;QAClB,kBAAkB,EAAE,kBAAkB;KACvC;IACD;QACE,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,wBAAwB;QAClC,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,kDAAkD;QACzD,kBAAkB,EAAE,kBAAkB;KACvC;IACD;QACE,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,wBAAwB;QAClC,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,uDAAuD;QAC9D,mEAAmE;QACnE,2DAA2D;QAC3D,kBAAkB,EAAE,kBAAkB;KACvC;IACD;QACE,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,kBAAkB;QAC5B,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,qDAAqD;QAC5D,sEAAsE;QACtE,oCAAoC;QACpC,SAAS,EAAE,KAAK;QAChB,kBAAkB,EAAE,kBAAkB;KACvC;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,QAAQ,EAAE,yBAAyB;QACnC,YAAY,EAAE,OAAO;QACrB,KAAK,EAAE,6CAA6C;QACpD,kBAAkB,EAAE,iBAAiB;KACtC;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,eAAe;QACzB,YAAY,EAAE,OAAO;QACrB,KAAK,EAAE,qCAAqC;QAC5C,kBAAkB,EAAE,iBAAiB;KACtC;IACD;QACE,wEAAwE;QACxE,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,mDAAmD;QACnD,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,qBAAqB;QAC/B,YAAY,EAAE,KAAK;QACnB,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,4DAA4D;QACnE,kBAAkB,EAAE,kBAAkB;QACtC,UAAU,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;QACrD,aAAa,EACX,mEAAmE;YACnE,0EAA0E;YAC1E,+DAA+D;YAC/D,sEAAsE;YACtE,0EAA0E;YAC1E,4DAA4D;KAC/D;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,SAAS,GAAsB;IACnC,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,EAAE,aAAa,EAAE,QAAQ,EAAE;IAChF,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,QAAQ,EAAE;IAC1E,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE;IACxE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,UAAU,EAAE;IAC5E,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,EAAE;IAC/E;QACE,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,wBAAwB;QAClC,aAAa,EAAE,UAAU;KAC1B;IACD,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,EAAE;IAChF;QACE,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,wBAAwB;QAClC,aAAa,EAAE,UAAU;KAC1B;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,QAAQ,EAAE,yBAAyB;QACnC,aAAa,EAAE,UAAU;KAC1B;IACD,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE;IACxE;QACE,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,qBAAqB;QAC/B,aAAa,EAAE,UAAU;KAC1B;CACF,CAAC;AAWF,MAAM,UAAU,WAAW,CAAC,MAAkB,EAAE,MAAqB;IACnE,mBAAmB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,2EAA2E;QAC3E,4EAA4E;QAC5E,qEAAqE;QACrE,mBAAmB,CAAC,MAAmB,EAAE,MAAM,EAAE;YAC/C,GAAG,GAAG;YACN,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;SACxC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,oBAAoB,CAAC,MAAmB,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IACD,0BAA0B,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACxD,yBAAyB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACvD,uBAAuB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACrD,sBAAsB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACpD,qBAAqB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACnD,oBAAoB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAClD,gBAAgB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAC9C,oBAAoB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAClD,sBAAsB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACpD,mBAAmB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACjD,uBAAuB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACrD,oBAAoB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAClD,4BAA4B,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAC1D,oBAAoB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAClD,mBAAmB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACjD,wBAAwB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACtD,oBAAoB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAClD,uBAAuB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACrD,sBAAsB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACpD,sBAAsB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAqB;IAC/C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACpE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAEnC,wEAAwE;IACxE,8EAA8E;IAC9E,0EAA0E;IAC1E,iEAAiE;IACjE,6EAA6E;IAC7E,6EAA6E;IAC7E,yDAAyD;IACzD,MAAM,kBAAkB,CACtB,MAAM,EACN,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,KAAc,EAAE,WAAW,CAAC,EAChE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1B,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,iEAAiE;IACjE,OAAO,CAAC,KAAK,CAAC,gCAAgC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,KAAyB;IACvE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,SAAS,KAAK,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAc;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,IAAI,KAAK,CACb;QACE,yDAAyD;QACzD,QAAQ;QACR,eAAe;QACf,EAAE;QACF,2DAA2D;QAC3D,gDAAgD;QAChD,6CAA6C;QAC7C,EAAE;QACF,uBAAuB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;KACxC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACnB,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EACL,UAAU,EACV,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAkB,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAwB,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAEzE;;;;;GAKG;AACH,MAAM,QAAQ,GAAgB;IAC5B;QACE,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,mBAAmB;QAC7B,YAAY,EAAE,OAAO;QACrB,KAAK,EAAE,gCAAgC;QACvC,kBAAkB,EAAE,iBAAiB;KACtC;IACD;QACE,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,QAAQ;QACf,kBAAkB,EAAE,iBAAiB;KACtC;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,eAAe;QACzB,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,uDAAuD;QAC9D,sEAAsE;QACtE,2EAA2E;QAC3E,WAAW,EAAE,4BAA4B;QACzC,kBAAkB,EAAE,iBAAiB;KACtC;IACD;QACE,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,uCAAuC;QAC9C,kBAAkB,EAAE,kBAAkB;KACvC;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,kBAAkB;QAC5B,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,4CAA4C;QACnD,MAAM,EAAE,UAAU;QAClB,kBAAkB,EAAE,kBAAkB;KACvC;IACD;QACE,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,wBAAwB;QAClC,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,kDAAkD;QACzD,kBAAkB,EAAE,kBAAkB;KACvC;IACD;QACE,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,wBAAwB;QAClC,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,uDAAuD;QAC9D,mEAAmE;QACnE,2DAA2D;QAC3D,kBAAkB,EAAE,kBAAkB;KACvC;IACD;QACE,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,kBAAkB;QAC5B,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,qDAAqD;QAC5D,sEAAsE;QACtE,oCAAoC;QACpC,SAAS,EAAE,KAAK;QAChB,kBAAkB,EAAE,kBAAkB;KACvC;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,QAAQ,EAAE,yBAAyB;QACnC,YAAY,EAAE,OAAO;QACrB,KAAK,EAAE,6CAA6C;QACpD,kBAAkB,EAAE,iBAAiB;KACtC;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,eAAe;QACzB,YAAY,EAAE,OAAO;QACrB,KAAK,EAAE,qCAAqC;QAC5C,kBAAkB,EAAE,iBAAiB;KACtC;IACD;QACE,wEAAwE;QACxE,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,mDAAmD;QACnD,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,qBAAqB;QAC/B,YAAY,EAAE,KAAK;QACnB,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,4DAA4D;QACnE,kBAAkB,EAAE,kBAAkB;QACtC,UAAU,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;QACrD,aAAa,EACX,mEAAmE;YACnE,0EAA0E;YAC1E,+DAA+D;YAC/D,sEAAsE;YACtE,0EAA0E;YAC1E,4DAA4D;KAC/D;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,mDAAmD;IACnD;QACE,QAAQ,EAAE,aAAa;QACvB,QAAQ,EAAE,sBAAsB;QAChC,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,iEAAiE;QACxE,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,KAAK;QACtB,kBAAkB,EAAE,kBAAkB;QACtC,UAAU,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;QACrD,UAAU,EACR,kEAAkE;YAClE,yEAAyE;YACzE,oEAAoE;YACpE,yEAAyE;YACzE,uEAAuE;YACvE,+DAA+D;YAC/D,mDAAmD;YACnD,mEAAmE;YACnE,2DAA2D;YAC3D,wEAAwE;YACxE,qEAAqE;YACrE,6CAA6C;YAC7C,UAAU;QACZ,aAAa,EACX,qEAAqE;YACrE,qEAAqE;YACrE,yCAAyC;YACzC,UAAU;KACb;IACD;QACE,QAAQ,EAAE,oBAAoB;QAC9B,QAAQ,EAAE,6BAA6B;QACvC,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,qEAAqE;QAC5E,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,KAAK;QACtB,kBAAkB,EAAE,kBAAkB;QACtC,UAAU,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;QACrD,UAAU,EACR,wEAAwE;YACxE,qEAAqE;YACrE,sEAAsE;YACtE,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,gCAAgC;YAChC,UAAU;QACZ,aAAa,EACX,oEAAoE;YACpE,sEAAsE;YACtE,WAAW;YACX,UAAU;KACb;IACD;QACE,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,oBAAoB;QAC9B,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,4DAA4D;QACnE,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,KAAK;QACtB,kBAAkB,EAAE,kBAAkB;QACtC,UAAU,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;QACrD,UAAU,EACR,kEAAkE;YAClE,iEAAiE;YACjE,oEAAoE;YACpE,uEAAuE;YACvE,uDAAuD;QACzD,aAAa,EACX,uEAAuE;YACvE,yEAAyE;KAC5E;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,SAAS,GAAsB;IACnC,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,EAAE,aAAa,EAAE,QAAQ,EAAE;IAChF,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,QAAQ,EAAE;IAC1E,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE;IACxE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,UAAU,EAAE;IAC5E,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,EAAE;IAC/E;QACE,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,wBAAwB;QAClC,aAAa,EAAE,UAAU;KAC1B;IACD,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,EAAE;IAChF;QACE,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,wBAAwB;QAClC,aAAa,EAAE,UAAU;KAC1B;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,QAAQ,EAAE,yBAAyB;QACnC,aAAa,EAAE,UAAU;KAC1B;IACD,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE;IACxE;QACE,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,qBAAqB;QAC/B,aAAa,EAAE,UAAU;KAC1B;CACF,CAAC;AAWF,MAAM,UAAU,WAAW,CAAC,MAAkB,EAAE,MAAqB;IACnE,mBAAmB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,2EAA2E;QAC3E,4EAA4E;QAC5E,qEAAqE;QACrE,mBAAmB,CAAC,MAAmB,EAAE,MAAM,EAAE;YAC/C,GAAG,GAAG;YACN,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;SACxC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,oBAAoB,CAAC,MAAmB,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IACD,0BAA0B,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACxD,yBAAyB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACvD,uBAAuB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACrD,sBAAsB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACpD,qBAAqB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACnD,oBAAoB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAClD,gBAAgB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAC9C,oBAAoB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAClD,sBAAsB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACpD,mBAAmB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACjD,uBAAuB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACrD,oBAAoB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAClD,4BAA4B,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAC1D,oBAAoB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAClD,mBAAmB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACjD,wBAAwB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACtD,oBAAoB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAClD,uBAAuB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACrD,sBAAsB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACpD,uBAAuB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACrD,oBAAoB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IAClD,sBAAsB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;IACpD,sBAAsB,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAqB;IAC/C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACpE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAEnC,wEAAwE;IACxE,8EAA8E;IAC9E,0EAA0E;IAC1E,iEAAiE;IACjE,6EAA6E;IAC7E,6EAA6E;IAC7E,yDAAyD;IACzD,MAAM,kBAAkB,CACtB,MAAM,EACN,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,KAAc,EAAE,WAAW,CAAC,EAChE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1B,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,iEAAiE;IACjE,OAAO,CAAC,KAAK,CAAC,gCAAgC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,KAAyB;IACvE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,SAAS,KAAK,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAc;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,IAAI,KAAK,CACb;QACE,yDAAyD;QACzD,QAAQ;QACR,eAAe;QACf,EAAE;QACF,2DAA2D;QAC3D,gDAAgD;QAChD,6CAA6C;QAC7C,EAAE;QACF,uBAAuB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;KACxC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACnB,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/conventions.d.ts

@@ -38,17 +38,23 @@
  * leave prompt elements alone; it never substitutes a local copy, because a
  * local copy is what went wrong. The prompt-SNIPPET mechanics (attach, reorder,
  * wildcard) stay below — those are how the API works, not where things go.
+ *
+ * THE SEMANTIC-KNOWLEDGE RULES ARE THE PLATFORM'S TOO, and go the same way —
+ * live from `GET /api/v1/authoring/semantic-knowledge`, never a local copy —
+ * with one difference: they are NOT appended to every call. They only matter to
+ * an agent building a workspace's semantic layer, so they get their own tool,
+ * `axonity_semantic_conventions`, and this guide carries one line pointing at
+ * it. Findable for whoever needs them, free for everyone else.
  */
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import type { AxonityClient } from "../client.js";
-export declare const CONVENTIONS = "# Authoring conventions for Axonity entities\n\nRead this before creating or updating anything.\n\n## What this connector is for\n- AUTHORING: composing an entity from intent \u2014 drafting a tool, an agent, a\n  workflow, and wiring them together so the result is CORRECT and COMPLETE\n  (every required field set, every reference pointing at something real).\n- REPRODUCING a setup is just authoring it again, from scratch. To recreate an\n  agent/workflow/tool, CREATE NEW entities and wire them by their NEW ids \u2014\n  never reuse an id you read. There is no \"migration\" and no \"import an id\":\n  this connector only ever acts in the ONE tenant its token points at (see\n  Tenant), and ids are tenant-local, so an id from anywhere else points at\n  nothing (or the wrong thing) here. Read the source for its SHAPE and intent \u2014\n  names, field values, which tools an agent uses, which agents a workflow's\n  steps run \u2014 then build fresh and capture the ids the create calls return.\n  Recreating into a DIFFERENT tenant means running that build while the\n  connector is configured with THAT tenant's token \u2014 a separate session. See\n  \"Reproducing a setup\" below.\n\n## The authoring loop\n1. `read_*` the entity (and `read_*_published` if you need to see what is live).\n2. Edit the DRAFT: `update_*`, or workflow-edit tools for workflow structure.\n3. Validate before publish: `validate_workflow` / `analyze_workflow_reachable_outputs` / \n   `validate_tool_code` / `format_tool_code`. These four are stateless and work with\n   read-only tokens.\n4. Re-read and verify with a saved tool command: `execute_tool` /\n   `execute_stored_connector`.\n5. Fix any issues and re-read again.\n6. For a code tool, PROVE it: `dry_run_tool` \u2014 see \"Proving a tool\" below. Skip\n   this and `request_publish_tool` will sit blocked forever.\n7. `request_publish_*` \u2014 this only QUEUES a human approval. Publishing many\n   entities at once (taking a tenant live) is `request_publish_bulk`, up to 200\n   in one call; it is not transactional, so read the per-entry results.\n8. `list_publish_approvals` / `get_publish_approval` to see whether it was\n   approved or rejected. Readiness there is recomputed as you read it\n   (`readiness` now, `readinessAtRequest` then, `readinessChanged` if it\n   moved), so a blocker you saw earlier may already be gone.\n\n9. If something went wrong:\n   - Bad edit, entity still exists \u2192 `list_*_versions` then `restore_*_version`\n     to roll the draft back to an earlier version.\n   - Never published, want a clean slate \u2192 `discard_*_draft` resets the draft to\n     the last published state (fails if it was never published \u2014 there's nothing\n     to fall back to).\n   - Deleted by mistake \u2192 `restore_*` (see \"Delete is recoverable\" below).\n\n## Proving a tool (the publish gate)\nBefore a code tool may be published, the platform requires that its stored code\nhas run cleanly once, at its current version.\n- `dry_run_tool(toolId)` is the run that counts. It executes the tool's OWN\n  saved implementation; you supply only sample input. A clean pass clears the\n  `dry_run_required` blocker.\n- `execute_tool` does NOT count, however green it comes back. It runs the\n  functions YOU pass, which need not be what is stored \u2014 proving nothing about\n  what would ship. Use it while drafting code you have not saved yet.\n- Editing the tool afterwards bumps its version and invalidates the proof, so\n  dry-run AFTER your last edit.\n- Connectors, builtin-backed validators and platform-shipped tools have no code\n  of their own to prove and will refuse (422/403). That is expected, not a\n  failure to work around.\n\n## Drafts, not live\n- `create_*` and `update_*` produce a DRAFT. The live runtime is unaffected\n  until a human publishes it in Axonity. `flow` has the same rule: runtime uses\n  the published snapshot from `read_flow_published` until `request_publish_flow`\n  is approved.\n- You cannot publish directly \u2014 the backend refuses a direct publish from a service\n  token with a 403, so there is no tool for it and no way around it.\n- A read-only token can only read: any write returns 403. If you see that, ask\n  your human for a write-scoped token rather than retrying.\n- `request_publish_*` does NOT publish \u2014 it creates a pending approval a human\n  approves in Axonity. Use it when a draft is ready; then tell the user to\n  approve it in their Axonity approvals inbox.\n\n## Optimistic locking (always read-then-write)\n- Before `update_*`, call `read_*` and use the `version` you get as\n  `expectedVersion` \u2014 in the request BODY. If the update returns a 409\n  conflict, someone else changed it \u2014 read again and re-apply your change onto\n  the new version.\n- `delete_*` also takes `expectedVersion`, but as an argument on the tool call\n  only \u2014 the connector maps it to whatever query-parameter spelling that\n  entity's route actually expects (it differs per entity on the wire; you never\n  need to know which).\n- `restore_*` and `restore_deleted_*_version` take NO version at all \u2014 a\n  restore must never lose to a stale-version guard.\n\n## Errors: branch on the failure, not the words\n- Every error names what went wrong as plainly as the backend allows. For a 409\n  specifically, two different problems share that status code and need\n  different responses:\n  - **Version conflict** \u2014 you had a stale read. Re-read, re-apply, retry.\n  - **Reference conflict** \u2014 the entity is referenced by something published or\n    live. Retrying will never help. Detach the reference or unpublish the\n    referencing entity first.\n  The error message tells you which one you hit \u2014 read it, don't assume 409\n  always means \"retry.\"\n- A 403 on any write means the token is read-only, or (for a direct publish\n  attempt, which no tool makes) that publishing must go through\n  `request_publish_*`. Either way: stop, don't retry, tell your human.\n- A 401 means the service token is dead \u2014 missing, wrong, expired, or revoked.\n  **The backend deliberately returns the identical message for all four\n  causes** so it doesn't leak which applies; you have no way to tell them\n  apart and no way to check a token's remaining lifetime in advance (every\n  token now expires \u2014 7, 15, 30, 60 or 90 days, chosen when it was minted;\n  there is no \"never\"). On any 401: stop, do not retry, and tell your human\n  plainly that the configured token is no longer valid and a new one must be\n  minted from Axonity \u2192 Settings \u2192 API tokens. Do not guess or imply the cause.\n\n## Field shape\n- All fields are camelCase JSON (e.g. `capabilityTier`, not `capability_tier`).\n  ONE documented exception: validator specs (`permissions.outputValidators`,\n  `permissions.exposedValidatorTools`) use snake_case keys (`function`,\n  `target`, `args`, `when_present`, `inputs`, `error_message`,\n  `tool_name`, `validator_name`) \u2014 they are the same shape at every level and\n  are stored verbatim, so they are NOT camel-aliased. Send them in snake_case.\n  What those keys MEAN, and how a validator is bound to what it judges, is the\n  Validators section.\n- `update_*` is a partial change for agents/tools and a partial patch for\n  workflows: send only the fields you are changing (plus `expectedVersion`).\n- The backend validates fields; a 422 error names the offending field and why\n  (e.g. `body.capabilityTier: Input should be 'economy', 'standard', 'smart' or\n  'reasoning'`). Fix that field and retry \u2014 do not guess at the whole shape.\n- **create/update for tool and agent are STRICT** (`extra=\"forbid\"`): an\n  undeclared OR MISSPELLED key is a 422 that names it, not a silent drop. So\n  spelling matters and you get told when it is wrong \u2014 good. Other entities are\n  more lenient and may drop an unknown key silently; never rely on that.\n- `agent.tags` is a free label for grouping and reporting. It GATES NOTHING \u2014\n  what reaches an agent's prompt is a LINK (`attach_policy_to_agent`), visible\n  in a table a human can read and edit. A role-tag gate on a policy used to\n  decide that invisibly and is refused outright now: sending\n  `activation.tags` to `create_policy`/`update_policy` is a 422. The two\n  surviving gates, `activation.tools` and `activation.delegation`, each say\n  something a link cannot \u2014 \"only on turns where this agent holds this tool\",\n  and \"only when (not) delegated\".\n\n## After you write, verify\n- A 200 means the request was accepted, NOT that it did what you meant. Re-read\n  the entity after a mutation and diff it against your intent \u2014 a partial update\n  only changes what you sent, and on the lenient (non-tool/agent) entities an\n  unknown key can be dropped silently rather than rejected.\n- Re-reading the ENTITY is not enough for an `attach_*`: those links are stored\n  outside the entity body and never appear in `read_agent`. Read them back with\n  `list_agent_skills` / `list_agent_policies` / `list_agent_reference_docs`\n  (see Wiring, mechanism B).\n- \"Complete\" is your job, not the backend's. A create succeeds with only the\n  required fields set; it does not tell you the entity is USABLE. An agent with\n  no `toolIds` runs with no tools; a connector tool with an empty\n  `implementation` has no endpoint to call; a workflow with steps but no\n  trigger never fires. After creating, check the entity has everything its\n  purpose needs \u2014 see the per-entity and wiring sections.\n- To test a whole workflow end to end, `start_workflow_run` then read the result\n  (`read_run` / `read_run_trace` / `read_run_cost`). Note it runs the PUBLISHED\n  workflow and really executes (cost, connector side effects), so publish first,\n  and only test-run when a human is expecting it.\n  - Read `read_workflow_trigger_parameters` first and pass `triggerId`: a\n    workflow can have several starts, each with different fields, and omitting\n    it fires whichever comes first. Never send a parameter marked `pinned` \u2014\n    the author owns that value and it is overwritten anyway.\n  - **A run can park instead of finishing.** A step that asks a question waits\n    for an answer, so \"it never came back\" usually means \"it is waiting on you\".\n    `read_run_waiting_on` says what for; `answer_run_question` (or\n    `send_run_message` on a conversation run) resumes it. Answer your own test\n    runs; on a run a human is depending on, the answer is theirs to give.\n  - A FOR EACH launch is not one result. `read_run_items_summary` is the\n    roll-up (\"4,415 processed \u00B7 12 failed\") and `list_run_items` the rows \u2014\n    with `outcome: \"failed\"`, because the failures are scattered and filtering\n    page one finds none of them.\n- A LIST is not the whole list. `list_workflow_runs` returns a page \u2014\n  `{ items, nextCursor, pageSize, hasMore }`, 20 by default \u2014 so counting or\n  concluding from page one while `hasMore` is true is how you answer confidently\n  and wrongly. Follow `nextCursor` until it is null. Two further traps: that\n  route lists LAUNCHES (a 4,415-item FOR EACH is ONE entry carrying\n  `forEachProgress`, so rows are not runs), and the offset-style lists\n  (`list_runs`, `list_publish_approvals`) cap silently \u2014 a full page means\n  there may be more, and nothing in the response says so.\n\n## Delete is recoverable \u2014 but not everything is\n- `delete_*` soft-deletes: the entity disappears from `list_*` but is not gone.\n  `restore_*` brings it back; `list_deleted_*` shows what's waiting. This\n  applies uniformly to workflow, agent, tool, skill, policy, reference_doc,\n  persona, output_schema, prompt_snippet, and flow.\n- The same applies one level down, to version HISTORY:\n  `delete_*_version` removes one entry from history (the current draft and\n  published version are protected and can't be targeted this way);\n  `list_deleted_*_versions` / `restore_deleted_*_version` undo it. Deleted\n  version numbers stay reserved rather than reused, so gaps in the numbering\n  are normal, not a sign of corruption.\n- `restore_*` can itself 409 if a live entity now holds the same name/slot \u2014\n  the error names the conflicting one.\n- There is no \"archive\" state for these ten entities \u2014 delete + restore IS the\n  lifecycle. Runs are the one exception with a true archive/unarchive (see below).\n\n## Per entity \u2014 what to create, and what \"complete\" means\n\nBuild in dependency order: a thing you will REFERENCE must exist before the\nthing that references it. So: tools and output-schemas first, then agents (which\nlist tool ids), then workflows (whose steps name agents and tools), then\ntriggers (which make a workflow fire). Skills/policies/reference-docs can be\nmade any time before you attach them.\n\n### tool  (`create_tool`, strict body)\n- Required: `name`. Also: `description`, `type`, `inputSchema`,\n  `outputSchema`, `implementation`, `authConfig`, `surfacing`.\n- `type`: `\"function\"` (default) | `\"connector\"` | `\"validator\"` |\n  `\"evaluator\"`. `surfacing`: `\"always\"` (in the agent's tool list) |\n  `\"on_demand\"`.\n- `inputSchema` / `outputSchema` are JSON-Schema objects describing the tool's\n  params and result. Set them \u2014 an agent binds to a tool by its declared I/O; a\n  tool with no inputSchema is hard to call correctly.\n- `implementation` is what makes the tool DO something, and its shape depends on\n  `type`:\n  - **function** \u2014 carries the Python. Author and check the code with\n    `validate_tool_code` and `format_tool_code`, and prove it runs with\n    `execute_tool`, BEFORE `create_tool`. A function tool whose\n    `implementation` is empty is an inert stub.\n  - **connector** \u2014 carries the HTTP call: typically `connectorType`\n    (\"rest\"/\"graphql\"), `baseUrl`, `method`, `path`, `headers`,\n    `queryParams`, `body`, `responseMapping`, `pagination`. Prefer the\n    `create_connector` tool, which sets `type:\"connector\"` for you. NEVER put\n    a real credential in `authConfig` \u2014 placeholders only (\"{{ MY_SECRET }}\"\n    or \"\"); a human fills the secret in Axonity. Test with\n    `execute_stored_connector` (uses the real, server-side-decrypted secret;\n    you see only the result).\n  - **validator / evaluator** \u2014 a constrained kind, and `implementation` takes\n    ONE OF TWO shapes. Either `{\"builtin\": \"validators.<name>\"}`, naming a\n    house predicate \u2014 look at the tenant's existing validator/evaluator tools\n    (`list_tools`) for the keys in use rather than inventing one. Or authored\n    Python, like a function tool, whose `run` returns a VERDICT: `True` /\n    `False` / a fail-detail object. A `run` that returns a string, a number\n    or nothing at all declares no verdict and is REFUSED on save, so that a\n    misconfigured gate cannot silently pass everything at run time. Authored\n    code takes the standard call \u2014 see Validators.\n- Complete check: the tool has the I/O schemas its callers need AND a non-empty\n  implementation of the right shape for its type.\n- `toolboxId` files the tool in a toolbox on creation. Read `list_toolboxes`\n  BEFORE you create: a tool made without one is ungrouped, which is valid and\n  is also how nobody finds it. See Toolboxes below.\n\n### agent  (`create_agent`, strict body)\n- Required: `name`. Enumerated fields, with their ONLY valid values:\n  - `capabilityTier`: `economy` | `standard` (default) | `smart` | `reasoning`\n  - `creativityTier`: `low` | `medium` (default) | `high`\n  - `learningMode`: `none` (default) | `adaptive` | `strict`\n- `avatar`, `tags` (free labels for grouping \u2014 they gate nothing; see Field\n  shape), `canOwnProcess` (bool; must be true for an agent to own a\n  workflow step's flow), `episodicMemoryEnabled` (bool).\n- `permissions` (object): `planning`, `delegation`, `verboseOutput` (bools);\n  `outputValidators` / `exposedValidatorTools` (snake_case specs \u2014 see Field\n  shape for the casing, Validators for what they say);\n  `expectedOutputSchemaId` (an output_schema id \u2014 MANDATORY whenever you\n  attach validators here).\n- Wiring fields \u2014 see the Wiring section: `toolIds`, `systemToolIds`,\n  `delegationTargetIds`.\n- Complete check: an agent with no `toolIds`/`systemToolIds` has no tools and\n  can only reason/talk. If it is meant to DO something, give it the tools.\n\n### workflow  (`create_workflow`, then edit the document)\n- `create_workflow` makes a STUB (name, description) with an empty document.\n  You then build the graph with either\n  - `apply_workflow_mutations` \u2014 a LIST of command mutations applied in order\n    (preferred: the backend validates each and threads the version), or\n  - `replace_workflow_document` \u2014 a full-document atomic PUT.\n- The document is a graph: `steps.all[]` (each `{ id, type, name, ... }`) and\n  `steps.edges[]` (each `{ id, from, to, type? }`) plus `triggers`.\n- WHICH VALUES a step's `type` and a trigger's `typeId` may hold is answered\n  by `get_workflow_authoring_spec`, read live from this deploy. This guide\n  does not list them, on purpose: it used to name nine step types where seven\n  validate, and a list nobody could read is a list that goes wrong. The spec\n  also lists the types you may NOT author, each with the reason and how to\n  express that intention instead \u2014 so reaching for one gets you an answer\n  rather than a `step_invalid_type`.\n- Referential integrity is enforced: step and trigger ids must be unique, and\n  every edge `from`/`to` must reference an id that exists in the document\n  (`from` may be a trigger or step; `to` must be a step). A dangling edge is a\n  hard error.\n- Complete check: run `validate_workflow` on the document \u2014 it returns\n  `launchable` plus an `issues` list. A workflow is not done until it is\n  launchable AND has a trigger (see Triggers).\n\n### persona\n- An agent's character \u2014 1:1 with an agent. Created only through its agent\n  (`create_agent_persona`: `name`, `characterText`); then a normal entity\n  (`read_persona`, `update_persona`, delete/restore/versions).\n\n### output_schema\n- A reusable output contract, versioned and publishable. Referenced BY id from a\n  tool's validators or an agent's `permissions.expectedOutputSchemaId` \u2014 so\n  create it first, then point things at the id the create call returns.\n- `schemaBody` is a JSON Schema document (`type`, `properties`,\n  `required`) PLUS one key that is not JSON Schema: `validators`, the gates\n  run against a submitted output. This is the place a validator can be STEERED\n  at part of the output \u2014 see Validators.\n\n### skill / policy / reference_doc\n- Memory entities attached to agents (and skills also to workflows). Create them,\n  then wire with the `attach_*` tools \u2014 see Wiring.\n\n### prompt_snippet\n- Reusable prompt fragments; a normal entity. Wire-level oddity:\n  `list_deleted_prompt_snippets` returns the backend `items` envelope.\n\n### flow\n- A reusable workflow fragment in the authored-entity lifecycle. `create_flow` /\n  `update_flow` write draft state; runtime uses `read_flow_published` until\n  approval. `request_publish_flow` to publish, `discard_flow_draft` to reset.\n\n### data_table\n- An authored table of rows: the tenant's own reference data, designed and\n  maintained by a person, read by agents and decisions. Same lifecycle as an\n  output schema \u2014 draft, version, request publish. See \"Tables\" below, which is\n  where the rules that are NOT the generic ones live.\n\n### company\n- The tenant's single company document (mission, value streams, org structure).\n  A SINGLETON \u2014 one per tenant, no id, so there is no list/create/delete:\n  `read_company`, `update_company` (a WHOLE-document save with\n  `expectedVersion`, like `replace_workflow_document`), `list_company_versions`,\n  `read_company_version`, `restore_company_version`, `read_company_published`.\n  Publish it like anything else with `request_publish_company` \u2014 but because it\n  is a singleton this takes NO id (the server resolves your tenant's one\n  company). Direct company publish is closed to machine tokens, so the approval\n  queue is the only path.\n\n## Validators \u2014 one shape, one call\nA validator is a GATE on a submitted output: it runs after an agent produces a\nresult and can refuse it. Specs are written in two places and carry the same\nkey names in both \u2014 `permissions.outputValidators` on an agent, and\n`validators` inside an output_schema's `schemaBody`. The backend's OpenAPI\ndescription of `schemaBody` is the source for the full contract; what follows\nis the part you cannot author without.\n\n- A spec names its check in ONE of two ways, and each brings its own binding:\n  - `function` \u2014 a shipped predicate (e.g. `validators.min_length`), bound\n    by `target` (the field it judges; omit it to judge the whole output) and\n    `args`.\n  - `tool` \u2014 a validator TOOL in this tenant's library, by name or id.\n  Exactly one of the two. Naming both leaves it unsaid which one runs, naming\n  neither leaves nothing to run, and a gate does not get to be ambiguous \u2014 both\n  are refused. The binding keys do not mix either: `target`/`args` belong to\n  the `function` form and are refused on a `tool` spec, because a key the\n  runtime ignores is worse stored than rejected.\n- `error_message` is what the agent is told on refusal, and the one key both\n  forms share. `{value}` in it is replaced by what the validator reported.\n- `when_present` runs the check only when the target field is actually in the\n  payload. Off by default, deliberately: a blanket skip turns a mistyped\n  `target` into a gate that passes everything. Set it where a field is\n  genuinely optional.\n\n### The standard call\nEVERY authored validator is invoked the same way. The signature does not vary\nper tool, and that is the whole point: a screen cannot offer inputs it does not\nknow, and a spec served to an agent cannot describe a shape that differs per\ntool. Bespoke parameters push the contract into prose that goes stale.\n\n```\nrun(data, slots, binding)\n```\n\n- `data` \u2014 what the validator is pointed at, UNTOUCHED. The whole submitted\n  output, or the field named by `field`.\n- `slots` \u2014 every declared session-memory reference found in `data`, with its\n  text, indexed by the reference itself. The platform resolves them because code\n  in the sandbox is never handed a lookup callable \u2014 a validator may be foreign\n  code.\n- `binding` \u2014 what you declared, verbatim, so the validator knows which values\n  in `data` are references to look up rather than text to read. Without it it\n  would have to guess, and guessing is how a check reads a key as though it were\n  the body.\n\nTwo keys on the spec steer that call: `field` names the part of the output to\nhand over (leave it out for the whole output), and `slots` lists the fields\nthat hold references.\n\n```json\n{ \"tool\": \"my.freshness.check\",\n  \"field\": \"units\",\n  \"slots\": [\"key\", \"source_key\"],\n  \"error_message\": \"REJECTED: {value}\" }\n```\n\nBOTH ARE CHECKED WHEN YOU SAVE the output schema, and a refusal names the\nfields that do exist: a `field` that is not a property, or a `slots` name the\nrows do not carry. That check is there because either mistake fails SILENTLY at\nrun time \u2014 a name that is not there is never looked up, so the gate runs on\nunresolved values and nothing says so. (Rows whose schema declares no shape are\nleft alone: there is nothing to check against, and guessing would refuse correct\nconfigurations.)\n\nWHERE `field` AND `slots` ARE ACCEPTED: inside an output_schema's\n`schemaBody`, which is stored verbatim. An agent's\n`permissions.outputValidators` is a STRICT body \u2014 an undeclared key is a 422 \u2014\nso a spec written THERE takes neither, and its validator gets the whole output\nand no slots. Steer a validator from the output_schema.\n\n### The older, explicit binding\nA tool spec MAY declare `inputs` instead, and a spec with `inputs` does NOT\nget the standard call. That is the way for a validator tool backed by a shipped\npredicate, which receives `value` plus its own arguments \u2014 its `run` would\nnot accept `data`/`slots`/`binding`. Each entry is\n`{\"source\": \"field\"|\"const\", \"field\": <name>, \"as\": \"slot\"?}`; with\n`as: \"slot\"` the field's value is read as a reference and its TEXT is passed.\n`field` takes a path, so a binding can point INTO a list: `units[].key` is,\nfrom every row in `units`, the `key` field.\n\nWriting a NEW validator: take the standard call and leave `inputs` out.\n\n## Wiring \u2014 how the pieces connect\nThere are THREE mechanisms, and using the wrong one silently no-ops. Know which\neach link uses.\n\n**A) Set a field on the entity (via create/update)** \u2014 an id or id-array that\nlives in the entity body:\n- tool \u2192 agent: add the tool's id to the agent's `toolIds`. This is how an\n  agent gets a (non-system) tool. There is no attach_tool_to_agent route.\n- system tool \u2192 agent: add the catalog id to `systemToolIds`. Get ids from\n  `list_system_tools`. No grant/revoke tool \u2014 you set the array via\n  `update_agent`. `toolIds` and `systemToolIds` are DIFFERENT lists; a\n  system-tool id does not go in `toolIds`.\n- agent \u2192 agent (delegation): add the callee agent's id to the caller's\n  `delegationTargetIds` (and set `permissions.delegation: true`).\n- output_schema \u2192 agent: `permissions.expectedOutputSchemaId` (a single id).\n- Changing any of these is read-then-write under optimistic locking: read the\n  agent, edit the field \u2014 an id-array is a FULL replace, so include the ids you\n  are keeping \u2014 then `update_agent` with `expectedVersion`.\n\n**B) Call an attach route (a link, not a field).** `attach_*`/`detach_*` POST/\nDELETE a link and do NOT touch the entity body:\n- skill \u2192 agent: `attach_skill_to_agent`; skill \u2192 workflow:\n  `attach_skill_to_workflow`.\n- policy \u2192 agent: `attach_policy_to_agent`.\n- reference_doc \u2192 agent: `attach_reference_to_agent` (agents only \u2014 there is no\n  workflow-scoped reference-doc route).\n- VERIFY every one of these with the read-back before `request_publish_*`:\n  `list_agent_skills`, `list_agent_policies`, `list_agent_reference_docs`,\n  and `list_workflow_skills` for the workflow-scoped variant. This is not\n  optional politeness \u2014 because a link lives OUTSIDE the entity body,\n  `read_agent` / `read_workflow` will not show it, so the read-back is the\n  only way to tell an attach that landed from one that silently did nothing.\n  (Mechanism A is different: those ids ARE in the body, so re-reading the agent\n  proves them.)\n- The three agent read-backs also take `workflowId`. With it you get the\n  COMPOSED runtime view \u2014 what this agent's prompt actually assembles inside\n  that workflow, with a `linkSource` per row saying WHY each item is there (an\n  explicit link, tenant-wide, or scoped to the workflow). Without it you see the\n  agent on its own, which is not what a run assembles.\n\n**C) Reference an id INSIDE the workflow document** (this is how agents and tools\nget \"into\" a workflow \u2014 there is no attach route for it):\n- agent \u2192 workflow: an `agent` step names its agent in the step's\n  `contract.owners[]` as `{ \"type\": \"agent\", \"id\": \"<agentId>\" }`.\n- tool \u2192 workflow: on an `agent` step, list tool ids under\n  `contract.tools.toolIds[]` (and/or per plan-step `contract.activities[]`\n  entries of `{ \"kind\": \"tool\", \"toolId\": \"<id>\" }`). On an `automation` step,\n  set `config.automationType: \"tool\"` and `config.toolId`. A `connector` step\n  references a connector tool the same way.\n- Every id you place in a document must be a REAL id in THIS tenant. The workflow\n  validator flags a step whose owner agent or referenced tool no longer exists \u2014\n  `validate_workflow` is how you catch a bad reference before publishing.\n- Prefer `apply_workflow_mutations` (e.g. `add_step`, `update_step`,\n  `add_edge`) over hand-building this JSON: the backend fills defaults and\n  validates each edit. Read the returned document to see the exact shape it\n  produced, then adjust.\n\n### Which way you are asking\n- `list_workflow_components` \u2014 what does THIS workflow depend on. Two hops:\n  what the document names, and what each agent then actually receives.\n- `list_workflows_using` / `list_dependent_agents` \u2014 who depends on THIS\n  entity. Ask before you edit or delete anything shared.\n- A component's `reach` is how many workflows name it, this one included. Above\n  1, an edit reaches processes you did not open; `duplicate_workflow_component`\n  gives this workflow its own copy and leaves the others on the original.\n\n## Prompt elements & placement (Memory V2)\nA prompt snippet is a LIBRARY item \u2014 creating it changes nothing on its own. It\nonly shapes a run once it is PLACED into a flow step's prompt stack. Placement is\nper flow step, in one of two channels, at an order:\n- `read_workflow_prompt_stacks(workflowId)` (or `read_flow_prompt_stacks(flowId)`)\n  resolves a workflow/flow to its steps and each step's system/user stacks \u2014 this\n  is how you DISCOVER the `flowStepId`s you place against. Start here.\n- `attach_prompt_snippet_to_flow_step(flowStepId, snippetId, target, displayOrder?)`\n  \u2014 `target` is `\"system\"` (instructions the model is steered by) or `\"user\"`\n  (content presented as the user turn).\n- `list_flow_step_prompts` shows a step's current system/user stacks (with each\n  attachment's `linkId`); `update_flow_step_prompt(linkId, \u2026)` moves/reorders one;\n  `reorder_flow_step_prompts(flowStepId, snippetIds)` sets the whole order;\n  `detach_prompt_snippet_from_flow_step(linkId)` unlinks (the snippet survives).\n- A WILDCARD snippet applies to EVERY step (top of every stack), with no\n  per-step link. `list_wildcard_prompts` shows them.\n\nWhich prompt element an instruction goes in \u2014 persona, policy, skill, reference\ndoc or a step's activities \u2014 and how large each may be, is not decided here: the\nplacement rules are served by the platform and appended to this guide, read live\nfrom this deploy each time you call it.\n\nLong-term recall for an agent is the agent's **`episodicMemoryEnabled`** flag\n(Memory V2, opt-in). Session/workflow memory are RUNTIME, not authored: they are\nwritten by a run, never set here. This connector does not expose them \u2014 the\nbackend serves them per run, but no tool wraps those reads yet, so do not\npromise a user you can show them.\n\n## Reproducing a setup (recreate, never copy ids)\nTo rebuild an agent/workflow/tool graph as NEW entities \u2014 in this tenant, or in\nanother tenant by pointing the connector at THAT tenant's token in a separate\nsession \u2014 author it fresh and wire by the NEW ids. An id from a read is\nmeaningful only in the tenant it came from; sending it back in a create/update\nelsewhere points at nothing. Do this instead:\n1. Read the source graph (in the session pointed at it) for its SHAPE: names,\n   field values, which tools each agent lists, which agents/tools each workflow\n   step references. START WITH `list_workflow_components`: it answers what the\n   workflow is made of in one call \u2014 agents and flows, the workflows it calls,\n   the tools those agents reach, the tables behind those tools, the knowledge\n   attached \u2014 each row naming the STEPS that are the reason it is there. Walking\n   that outward by hand is how a rebuild quietly loses a tool nobody noticed was\n   attached. Then read each entity for its field values. For each source agent\n   also read its LINKS \u2014 `list_agent_skills`, `list_agent_policies`,\n   `list_agent_reference_docs` \u2014 they are not in the agent body, so a plain\n   `read_agent` misses them and you would rebuild an agent that quietly lost\n   its skills and guardrails.\n2. Create the leaf dependencies first (tools, output_schemas). Keep a map from\n   each OLD id to the NEW id the create call returns.\n3. Create agents, translating every referenced id through your map:\n   old toolId \u2192 new toolId in `toolIds`, etc. Never send an old id. If the\n   source agent has a persona, recreate it with `create_agent_persona` on the\n   new agent.\n4. Create workflows; when you add agent/tool references into the document,\n   translate through the map the same way.\n5. Attach skills/policies/reference-docs by the new ids, then read them back\n   (`list_agent_*`) and diff against what you read in step 1.\n6. `validate_workflow` and re-read each entity to confirm every reference\n   resolved, then `request_publish_*`.\nThe connector never carries a secret across: `authConfig` stays placeholders in\nthe new tenant too, and a human fills the real value there.\n\n## Structural workflow edits\n- **Start by reading the spec.** `get_workflow_authoring_spec` returns FOUR\n  lists this deploy generates from its own registries: the mutation commands,\n  the trigger types, the step types (including the ones you may not author, with\n  the reason), and the schedule-rule shapes with a working example each. Neither\n  this guide nor the tool descriptions restate any of those lists: a list kept\n  in the connector is right only by maintenance, and it has been wrong twice\n  already, both times in the direction that costs an agent a 422 on something it\n  was told to use. Pass `types` for the live payload schema of a command you\n  are about to write.\n- **The payload schemas describe themselves.** What may go inside\n  `parameters`, `inputs`, `outputs` and `contract` is IN those schemas \u2014\n  including the fact that a bound input DERIVES its contract from the output it\n  reads. Ask the spec for the command's `types` rather than looking for prose\n  about the shape here; there deliberately is none.\n- **One thing the schemas do not make obvious: which KEY carries the value's\n  type, because it is not the same key everywhere.**\n  - A TRIGGER PARAMETER and a WORKFLOW CONSTANT use `type`.\n  - A step INPUT or OUTPUT uses `kind`.\n  - Where a field carries a nested `schema` object, `schema.kind` is what\n    wins.\n\n  This asymmetry is real, not a typo to normalise: the shapes came from\n  different surfaces, and normalising them would make one reader wrong. The\n  VALUES differ too \u2014 `get_workflow_authoring_spec` returns one list per key\n  (`parameterTypes`, `outputKinds`, `schemaFieldKinds`), and they are not\n  interchangeable: only one knows `constant`, and they disagree on how to\n  spell a yes/no. Read the list that matches the shape you are writing; this\n  guide does not restate them, for the same reason it restates no other list.\n\n  Writing `kind` on a trigger parameter is not a 422; it is a key nothing\n  reads, so the value silently falls back to text and the workflow runs with\n  the wrong thing. Check which of the three you are writing before you write it.\n- `rulesVersion` in that response is a content hash over all four lists. While\n  it is unchanged there is nothing to re-fetch; re-read the spec when it changes,\n  or when a mutation fails with a 422 suggesting your idea of a command is stale.\n- `apply_workflow_mutations` takes a LIST of commands and applies them in order,\n  threading the version for you \u2014 pass the version you read, not one per command.\n- It is NOT transactional. If command N fails, the ones before it stay applied;\n  the error tells you how many landed and which index failed. Re-read and resume\n  from that index rather than replaying the whole list.\n- `replace_workflow_document` stores the document's `name` and\n  `description` \u2014 they sync onto the workflow's own columns, an omitted key\n  leaves the stored value alone, and an explicit `\"\"` clears it. `stageId`,\n  `capabilityId`, `valueStreamId` and `onFailure` are PATCH-only: changing\n  one through this route is REFUSED with a 422 naming the field, and\n  round-tripping it unchanged passes. Read, edit, write is therefore safe;\n  re-linking a workflow to another stage or capability is its own call.\n- The response is a SUMMARY (version, appliedCount, launchable, validationIssues,\n  stepCount, edgeCount), not the document. That is deliberate: a real workflow\n  document overflows the response limit, and a successful call would come back\n  looking like a failure \u2014 retrying that is how you end up with duplicate steps.\n  Ask for the document with `returnDocument: true` or `read_workflow`.\n- Command payloads are STRICT and complete:\n  - `add_step` builds a whole step in ONE call \u2014 `name` and `position` are\n    required, and `id`, `type`, `config`, `contract`, `inputs` and\n    `outputs` are accepted next to them. No follow-up `update_step` is needed\n    just to fill the step in.\n  - `add_trigger` does the same for a trigger: `parameters` and `outputs`\n    go in that call. This is what makes a callable workflow declarable in one\n    mutation, since a trigger's parameter list IS its signature.\n  - `add_edge` takes the document's own `from`/`to` as well as\n    `fromStepId`/`toStepId`, and keeps an `id` you supply.\n  - An unknown or misspelled key is a 422 naming it, not a silent drop \u2014 so\n    spelling matters and you are told when it is wrong.\n\n## Inputs and constants \u2014 the two lists that belong to the PROCESS\nA workflow declares two whole-list things of its own, both edited the same way\n(read the list, change it, write it back \u2014 there is no per-entry command,\nbecause the identity is the `name` and renaming is the common edit):\n- `set_workflow_inputs` \u2014 what the process NEEDS to start. Carried by every\n  start, and the list a caller fills in whichever trigger fired. A start's own\n  `parameters` are what that start declares on top; where a name is in both,\n  the process-level one wins.\n- `set_workflow_constants` \u2014 what the AUTHOR pins, described below.\nRead both back with `read_workflow_trigger_parameters`, which answers\n`{ inputs, triggers, constants }`.\n\n## Constants \u2014 values the AUTHOR owns\nA constant is applied on EVERY run whichever trigger fired, and it OVERWRITES\nwhatever a caller sent. That is deliberate: a field the operator's form does not\nshow must not become an injection point for anyone who learns its name.\n- Set them with the `set_workflow_constants` command. It replaces the WHOLE\n  list, the way `advanced_edit` replaces steps and edges \u2014 read the list, edit\n  it, write it back. There is no per-constant command, because a constant's\n  identity is its name and renaming is the common edit.\n- Every entry needs a `name`: it is what a step binds to and how the run\n  payload keys it. A nameless entry is refused rather than stored, because at\n  run time it would simply be skipped.\n- **A constant with no value blocks publishing.** `constant_without_value` is\n  an error, not a warning, and it names the constant. It has to be: an entry\n  with no value was never written into the run at all, so the workflow validated\n  clean, published, and ran without it.\n- ABSENCE, not falsiness. `0`, `\"\"`, `false` and `[]` are values and pass.\n- The value lives in `defaultValue`. On a constant that is not a fallback \u2014\n  it IS the value, written on every run. A constant carries no `required`\n  (nobody is being asked to fill it in) and needs no flag saying it is one.\n- **A trigger parameter can be pinned the same way**, and the platform reads\n  TWO spellings: `constant: true`, or the older `type: \"constant\"`. Both\n  mean the author owns it and the caller must not send it, so treat a parameter\n  carrying either as off-limits when you build `triggerInput`.\n  `read_workflow_trigger_parameters` collapses both into `pinned`, on the\n  workflow's constants and on each start's parameters \u2014 read that rather than\n  checking the two spellings yourself.\n\n## Two platform invariants that look like bugs\nBoth are deliberate, both run after EVERY edit, and both now report themselves in\nthe mutation response under `systemAdjustments` \u2014 so you no longer have to diff\na document to find out what the platform did.\n- **A bound input's contract is derived, not authored.** An input that reads an\n  upstream output takes its contract \u2014 description included \u2014 FROM that output.\n  Write the text on the producing step's output; a downstream description changing\n  when you edit an output is this rule at work, not the platform overwriting you.\n  The inputs it re-derived come back in `rederivedInputs`.\n- **Every step reaches the END point.** The platform guarantees it and wires that\n  edge itself; the edges it added or removed come back in `addedEdges` /\n  `removedEdges`. An edge you did not ask for is this, not corruption.\n\n## Validating: two questions, two calls\n- `validate_workflow({ workflowId })` checks the STORED workflow against the\n  tenant catalog \u2014 it confirms the agents, tools and flows the steps reference\n  actually exist. This is the \"can this run?\" answer, and it comes back with\n  `catalogChecked: true`.\n- `validate_workflow({ document })` is stateless and read-only-token safe, but\n  without a catalog it can only judge STRUCTURE: `launchable` there means the\n  graph is sound, not that it will run. It says so with `catalogChecked: false`.\n- Pass exactly one. Before telling a human a workflow is ready, check\n  `catalogChecked` \u2014 a green structural verdict is the easiest thing to\n  over-read.\n- Read the `issues` rather than only `launchable`: the validator now reports\n  a sub-process call with no target, one pointing at itself, one whose target\n  is deleted or was never published or has no invocation trigger, a constant\n  with no value, and a trigger drawn on the canvas that nothing is wired to.\n  Some of those are warnings and still let a workflow publish \u2014 read the\n  `severity`, and read the `code`, which is stable where the message is not.\n\n## Triggers\n- A published workflow still does nothing until it has a trigger. A trigger has\n  TWO halves, and drawing one on the canvas is only the first.\n- **A schedule is reconciled for you.** Draw it in the document, publish, and\n  the firing row is brought into line. That is the exception.\n- **A webhook or conditional trigger is NOT.** Its row must be created\n  separately \u2014 `create_webhook_trigger` / `create_conditional_trigger` \u2014\n  and publishing will not create one. A webhook drawn and published with no row\n  is an endpoint that does not exist; the validator says so with\n  `trigger_not_wired`, a WARNING, so the publish still goes through. Take the\n  warning seriously: nothing else will tell you.\n- Trigger deletes are HARD deletes \u2014 no restore. Webhook tokens are shown once\n  at create/rotate and are never retrievable; hand them straight to your human\n  and never store one in an entity field.\n- **A schedule is a claim \u2014 check it.** `run_cron_schedule_now` fires one\n  immediately without moving `nextFireAt`, so you can prove a schedule starts\n  something instead of waiting until tomorrow to find out it does not. It runs\n  for real, with real cost and side effects.\n- **To PAUSE a schedule, disarm it** (`set_cron_schedule_enabled`), never\n  delete it. Deleting throws away the rules the author wrote and makes \"stop\n  this for a week\" indistinguishable from \"we do not do this any more\".\n- `create_cron_schedule` takes EITHER `cronExpr` OR `rules`, and the\n  trigger must exist in the PUBLISHED document. For the rule shapes, read\n  `scheduleRuleKinds` from `get_workflow_authoring_spec` \u2014 do not invent one.\n- `list_all_cron_schedules` answers \"what runs tonight?\" across the tenant;\n  `reconcile_cron_schedules` answers \"is that actually what runs?\". The second\n  reports rather than tidying silently and never arms something switched off.\n- **A conditional trigger without a CHECK starts the workflow every beat.** It\n  wakes on its interval and, with nothing set, runs regardless of whether there\n  was anything to do \u2014 a mailbox on fifteen minutes then makes ninety-six empty\n  runs a day. Set `checkKind` on `create_conditional_trigger`, or on an\n  existing one with `update_conditional_trigger`; every trigger authored\n  before checks existed has none, so read `checkKind` in\n  `list_conditional_triggers` before assuming otherwise.\n- `checkKind: \"automatic\"` is ONE tool call and one rule on its answer \u2014 no\n  model, so it is the cheap way to ask \"is there anything there?\". Its\n  `checkConfig` is `{ toolId, inputs?, rule: { field, op, value } }`, where\n  `field` names a key OF THE TOOL'S ANSWER. A rule pointing at a field the\n  tool never returns is reported as a broken setup, not as \"condition not met\".\n  `\"agent\"` is reserved for a model judging the condition and is refused\n  today. Do not pre-validate a check here \u2014 the backend judges it with the same\n  function the dispatcher runs when the trigger fires, and its refusal says\n  what to change.\n- **To take a check off again, send `checkKind: \"\"`** \u2014 the empty string. It\n  clears the kind and its config together and returns the trigger to starting\n  every beat. Omitting the field leaves the check standing, which is why the\n  empty string exists at all.\n\n## Evaluating what you built\n- There is no findings endpoint and no evaluator entity. To judge a run, read it:\n  `read_run` (its `validatorVerdicts` and `agentInvocations`) and\n  `read_run_trace` (the step-by-step tool calls).\n- **Start with `read_run_outline`, not `read_run`.** The outline is the run's\n  table of contents and carries no bodies, so it costs what the run's SHAPE\n  costs rather than its content \u2014 a fan-out over four thousand items reads about\n  as cheaply as one over four. Then open only what you need:\n  `read_run_value` for one large step value (by the digest in `stepStates`),\n  `read_run_invocation_messages` for one agent's transcript (by the id in\n  `agentInvocations`). Reading a whole run to find one message is the habit\n  this replaces.\n- `itemCap` on the outline bounds items listed per fan-out step; the remainder\n  is counted in `counts.truncated`, never dropped in silence.\n- **What an agent wrote to itself is readable.** `list_run_session_memory`\n  lists the files an agent left during a run (metadata only) and\n  `read_run_session_memory_file` opens one. When the trace shows a decision but\n  not what it was reading, this is usually where the reason is. Workflow-bound\n  reference material is NOT here \u2014 that lives in `reference_docs`.\n- **`list_todo_steps`** is every step in the tenant waiting on a human, across\n  all runs; `read_run_waiting_on` is the same question for one run you already\n  have. It is PAGED over the waiting RUNS, so `items` can be longer than\n  `pageSize` \u2014 one run may park several steps. Follow `nextCursor` until it\n  is null before concluding anything about how much is waiting.\n- Runs are the only thing with a real archive state \u2014 `archive_run` is\n  reversible, `bulk_delete_runs` is not.\n\n## Subworkflows \u2014 one workflow calling another\nBoth halves live in the workflow DOCUMENT, so both are ordinary\n`apply_workflow_mutations` work. There is no separate \"link\" route.\n- **To make a workflow callable**, it needs TWO things: a trigger with\n  `typeId: \"subprocess-invocation\"` (`add_trigger`), which is what makes it\n  callable at all, and a declared SIGNATURE.\n- **The signature belongs to the PROCESS, not to the trigger.** Declare it with\n  `set_workflow_inputs` \u2014 one list, carried by every start, and the same list\n  a caller of any kind fills in. A trigger's own `parameters` are what THAT\n  start declares on top; `parameters` goes in the `add_trigger` call itself,\n  so a start that does add fields needs no follow-up `update_trigger`.\n- Older documents declared everything on the invocation trigger instead, and\n  that still works: both are read, and where a name appears in both the\n  PROCESS-level one wins. When you are editing a workflow you did not author,\n  read `read_workflow_trigger_parameters` and see which list actually holds\n  its fields before adding to either.\n- `set_workflow_inputs` REPLACES the whole list, like\n  `set_workflow_constants`: read, edit, write back. An entry with no `name`\n  is refused rather than stored \u2014 the name is how a caller passes the value and\n  how the run payload keys it, so a nameless one would be skipped silently at\n  run time.\n- For what an input or a parameter may contain, ask\n  `get_workflow_authoring_spec` for the payload schema of the command you are\n  about to write, rather than a shape written down here.\n- **It must also be PUBLISHED.** The catalogue reads the published document, so\n  a draft-only workflow comes back `callable: false` with \"Never published\".\n  Authoring the caller first and publishing the callee later is a run-time\n  failure waiting to happen.\n- **To call it**, add a step with `type: \"subprocess\"` and\n  `config: { targetWorkflowId, ownerAgentId }` \u2014 both required, both workflow/\n  agent ids. Bind the step's `inputs` by NAME to the callee's `parameters`;\n  that is the whole mapping, there is no separate argument block.\n- `config.waitForCompletion` is **IGNORED** if you write it. Drawing a step\n  after this one already means \"after\", so waiting is implied. The one thing the\n  graph cannot say is fire-and-forget: `config.fireAndForget: true`, and then\n  nothing downstream may depend on the result.\n- `config.errorStrategy` (\"fail\" | \"skip\") is only honoured when the step\n  ITERATES (`config.iteration.enabled`). On a single call \"skip\" would report\n  a failed child as success, so it is forced to fail-fast.\n- **A workflow cannot call itself** \u2014 every run would spawn a child that reaches\n  the same step again. Pass `exclude: <the workflow you are editing>` to\n  `list_callable_workflows` and it is kept out of the list.\n- **What comes back** is the callee's `outcomes`: its end steps, each with the\n  fields bound into it. WHICH end was reached is itself part of the answer.\n- **`validate_workflow` checks this now.** A missing target, a workflow\n  calling itself, a target that is deleted, never published, or has no\n  invocation trigger \u2014 each has its own issue code, and the ones that resolve to\n  nothing are errors that block publishing. Still run\n  `list_callable_workflows` BEFORE you author the step: it is how you pick a\n  target and see the interface you are binding to, where the validator only\n  tells you afterwards that the one you picked was wrong.\n\n## Secrets\n- Never handle a real credential. A connector's `authConfig` takes placeholders\n  only (\"{{ MY_SECRET }}\" or \"\"); a human fills the real value in Axonity. This\n  is enforced \u2014 a write carrying something that looks like a real secret is\n  rejected before it leaves this connector.\n- You CAN read the catalogue: `list_secrets` (id, name, authType) and\n  `read_secret`. That is how you get the id for a connector's\n  `authConfig.secretId` \u2014 do not ask a human to copy one out of the UI.\n- Before you wire a connector to a secret, check `valueKeys` on\n  `read_secret`. An empty list means nobody has filled the secret in yet: the\n  connector will author fine and fail at RUN time. Say so to your human, with the\n  secret's name, rather than reporting the wiring as done.\n- You cannot create, change or delete a secret. That is a human act in Axonity \u2192\n  Settings \u2192 Secrets, and the backend refuses it from this connector's token.\n- A secret's `metadata` (connection config, e.g. a session_cookie handshake)\n  comes back with credential-shaped entries withheld, listed under\n  `metadataRedacted`. If you need one of those values, a human reads it in\n  Axonity \u2014 do not try another route to it.\n\n## Tables \u2014 the tenant's own reference data\nA table is an authored library element that HOLDS ROWS: the pricing bands, the\nregion-to-owner map, the list of accepted reason codes. A person designs the\ncolumns and maintains the content; agents and decisions read it.\n\n**When a table is the right element.** Reach for one when the CONTENT is the\npoint and it changes without the process changing.\n- Not an `output_schema`: that describes a SHAPE and holds no data. If you\n  find yourself putting example values in a schema, you wanted a table.\n- Not a workflow constant: a constant belongs to ONE workflow and is edited in\n  its document. A table is shared, and three workflows reading the same rows is\n  the case it exists for.\n- Not a function tool with a list inside it: that makes changing a row an act of\n  editing code, reviewing it and publishing a tool. A business user maintains a\n  table; nobody should need you to change a postcode.\n\n**Static or dynamic \u2014 who owns the rows.**\n- `isDynamic: false` (the default) is reference data the AUTHOR maintains. A\n  workflow reads it and cannot change it. `allowedOperations` must be empty:\n  a permission nothing honours is refused, not stored.\n- `isDynamic: true` lets a workflow change the rows, limited to\n  `allowedOperations` \u2014 any of `add` / `update` / `delete`. READING IS\n  NEVER LISTED there: it is what a table is for and is always allowed.\n- You edit rows through `add_data_table_row` / `update_data_table_row` /\n  `delete_data_table_row` whatever the table's mode says \u2014 those grants are\n  about what a RUN may do, not about authoring.\n\n**Never put rows in `update_data_table`.** `rows` and `columns` are\nwhole-collection fields: sending one row REPLACES the table's content and\ndeletes everything else. The row tools address a single row by a match\n(`matchColumn`/`matchValue`) and cannot touch the rest \u2014 use them. Reach for\n`update_data_table({ fields: { rows } })` only when you genuinely mean to\nreplace the whole content, and never as a way to append.\n\n**The rule that bites hardest: derived tools follow the PUBLISHED table.** A\npublished table mints its own CRUD tools, so granting an agent access to one is\nordinary tool granting \u2014 take a `toolId` from `list_data_table_tools` and put\nit in the agent's `toolIds`. But those tools follow the table's PUBLISHED\nversion. An author who ticked \"may add rows\" and has not published has granted\nnothing, and the tool that would let a run act on it does not exist yet.\n`list_data_table_tools` reports `offered` (what the draft would yield),\n`toolId` (whether a row exists) and `isLive` (whether a run can reach it)\nseparately for exactly this reason. Read all three before concluding a grant\nlanded. Same rule as everywhere else here \u2014 a draft changes nothing until it is\npublished \u2014 and it is the first thing an agent gets wrong about tables.\n\n**Routing a decision on a table.** A decision can branch by looking a value up\nin one column and taking the branch named in another, with\n`builtin: \"evaluators.table_lookup\"`. The behaviour worth knowing, because no\ncatalogue states it: THE CELL'S VALUE IS THE BRANCH'S OUTCOME KEY \u2014 not a new\nfield, and not something you map afterwards. Every value in the result column\nmust be the outcome key of an outgoing branch, or publishing the workflow is\nrefused. The table must be PUBLISHED: a run reads the published snapshot, so a\ntable that is only saved routes nothing. For the argument names it reads, and\nfor every other selectable evaluator, read `decisionEvaluators` from\n`get_workflow_authoring_spec` \u2014 generated from the registry that dispatches\nthem, so it cannot advertise one the platform would not run.\n\n**Column kinds** come from the same place: `tableColumnKinds` in\n`get_workflow_authoring_spec`. It is a FOURTH vocabulary beside the three for\nparameters, outputs and schema fields, with its own spellings \u2014 do not carry a\nvalue across from one of the others, and do not guess. Every column needs a\n`description`: an agent reads it to know what the column is for, and a save\nwithout one is refused.\n\n**`list_data_tables` is PAGED**, alone among the library lists \u2014 a tenant's\nreference data has no ceiling. Page one is not the library. Follow\n`nextCursor` while `hasMore` is true, or better, narrow in the query:\n`name` is exact and unique per workspace, so \"does one called X already\nexist\" is a single call rather than a walk. The page carries `rowCount`, never\nthe rows; the rows come from `read_data_table`.\n\n## Toolboxes \u2014 where a tool is filed\n- A toolbox is a per-tenant grouping label over tools. Read `list_toolboxes`\n  before `create_tool` and pass the box's id as `toolboxId`; a tool created\n  without one is ungrouped. Move an existing tool with\n  `assign_tool_toolbox` (`toolboxId: null` takes it out of its box).\n- `set_toolbox_tools` DECLARES the membership \u2014 it does not add to it. A tool\n  in the box and absent from your list is evicted. To add one tool, read the\n  box's contents first, or use `assign_tool_toolbox`, which cannot evict\n  anything by accident. A tool is in at most one box.\n- A toolbox NEVER changes what an agent may call. An agent is linked to\n  individual tools (`agent.toolIds`), never to a box; there is no route that\n  grants a whole box, and \"give this agent the Carerix toolbox\" is a bulk write\n  of individual links. What the box decides is how a tool is ADVERTISED: a boxed\n  tool with `surfacing: \"inherit\"` is found via discover_tools instead of\n  riding in every prompt. Read `effectiveSurfacing` on the tool to answer \"is\n  it in the prompt?\"; `surfacing` is the raw stored choice.\n- Deleting a toolbox does NOT delete its tools \u2014 they survive, ungrouped. The\n  box itself has no restore.\n- Platform-shipped tools cannot be moved. The `Axonity`, `Checks` and\n  `Branching` boxes hold locked tools; the API refuses and NAMES the tool it\n  refused. Read that name to your human instead of bisecting the selection.\n- `set_toolbox_auth` sets the credential a box's tools SHARE \u2014 ten Microsoft\n  Mail tools, one mailbox, said once. A tool with its own auth keeps it; only a\n  tool with none inherits. Same rule as anywhere else: point `secretId` at a\n  stored secret, never a real value. Before you clear or replace it, or delete\n  the box, call `list_toolbox_dependent_tools` \u2014 it names the tools that would\n  start failing at run time with a bare 401.\n\n## Tenant\n- Your token fixes the tenant. You cannot act across tenants; never send a\n  tenant id in a body.\n- `read_model_tier_map` says what `capabilityTier` actually RESOLVES TO on\n  this tenant. The tier is the field you write; the model is what you are\n  choosing. Read it before you pick one.\n- When a run does not start, look outward before blaming the workflow:\n  `read_concurrency_status` (is the tenant at its cap?),\n  `read_queue_overview` (is dispatch alive?), `list_task_queue` (did\n  something fail in the layer beneath the run?). `read_for_each_rate` explains\n  a fan-out that is pacing itself rather than stalling.\n- You can READ those and not change them. Caps, rate ceilings and the tier map\n  are operator decisions \u2014 report what you found, and to whom, rather than\n  looking for another route to it.\n- `read_deploy_contract` says what THIS deploy speaks: build, environment and\n  the routes it mounts. Read it when a call fails in a way that suggests the\n  backend is older or newer than you expect.\n- `list_users` is where an `ownerId` comes from. Look one up instead of\n  asking a human to copy it out of the UI.\n- `list_audit_events({ actorKind: \"service_token\" })` reads back what external\n  agents \u2014 including you \u2014 actually changed.\n";
+export declare const CONVENTIONS = "# Authoring conventions for Axonity entities\n\nRead this before creating or updating anything.\n\n## What this connector is for\n- AUTHORING: composing an entity from intent \u2014 drafting a tool, an agent, a\n  workflow, and wiring them together so the result is CORRECT and COMPLETE\n  (every required field set, every reference pointing at something real).\n- REPRODUCING a setup is just authoring it again, from scratch. To recreate an\n  agent/workflow/tool, CREATE NEW entities and wire them by their NEW ids \u2014\n  never reuse an id you read. There is no \"migration\" and no \"import an id\":\n  this connector only ever acts in the ONE tenant its token points at (see\n  Tenant), and ids are tenant-local, so an id from anywhere else points at\n  nothing (or the wrong thing) here. Read the source for its SHAPE and intent \u2014\n  names, field values, which tools an agent uses, which agents a workflow's\n  steps run \u2014 then build fresh and capture the ids the create calls return.\n  Recreating into a DIFFERENT tenant means running that build while the\n  connector is configured with THAT tenant's token \u2014 a separate session. See\n  \"Reproducing a setup\" below.\n\n## The authoring loop\n1. `read_*` the entity (and `read_*_published` if you need to see what is live).\n2. Edit the DRAFT: `update_*`, or workflow-edit tools for workflow structure.\n3. Validate before publish: `validate_workflow` / `analyze_workflow_reachable_outputs` / \n   `validate_tool_code` / `format_tool_code`. These four are stateless and work with\n   read-only tokens.\n4. Re-read and verify with a saved tool command: `execute_tool` /\n   `execute_stored_connector`.\n5. Fix any issues and re-read again.\n6. For a code tool, PROVE it: `dry_run_tool` \u2014 see \"Proving a tool\" below. Skip\n   this and `request_publish_tool` will sit blocked forever.\n7. `request_publish_*` \u2014 this only QUEUES a human approval. Publishing many\n   entities at once (taking a tenant live) is `request_publish_bulk`, up to 200\n   in one call; it is not transactional, so read the per-entry results.\n8. `list_publish_approvals` / `get_publish_approval` to see whether it was\n   approved or rejected. Readiness there is recomputed as you read it\n   (`readiness` now, `readinessAtRequest` then, `readinessChanged` if it\n   moved), so a blocker you saw earlier may already be gone.\n\n9. If something went wrong:\n   - Bad edit, entity still exists \u2192 `list_*_versions` then `restore_*_version`\n     to roll the draft back to an earlier version.\n   - Never published, want a clean slate \u2192 `discard_*_draft` resets the draft to\n     the last published state (fails if it was never published \u2014 there's nothing\n     to fall back to).\n   - Deleted by mistake \u2192 `restore_*` (see \"Delete is recoverable\" below).\n\n## Proving a tool (the publish gate)\nBefore a code tool may be published, the platform requires that its stored code\nhas run cleanly once, at its current version.\n- `dry_run_tool(toolId)` is the run that counts. It executes the tool's OWN\n  saved implementation; you supply only sample input. A clean pass clears the\n  `dry_run_required` blocker.\n- `execute_tool` does NOT count, however green it comes back. It runs the\n  functions YOU pass, which need not be what is stored \u2014 proving nothing about\n  what would ship. Use it while drafting code you have not saved yet.\n- Editing the tool afterwards bumps its version and invalidates the proof, so\n  dry-run AFTER your last edit.\n- Connectors, builtin-backed validators and platform-shipped tools have no code\n  of their own to prove and will refuse (422/403). That is expected, not a\n  failure to work around.\n\n## Drafts, not live\n- `create_*` and `update_*` produce a DRAFT. The live runtime is unaffected\n  until a human publishes it in Axonity. `flow` has the same rule: runtime uses\n  the published snapshot from `read_flow_published` until `request_publish_flow`\n  is approved.\n- You cannot publish directly \u2014 the backend refuses a direct publish from a service\n  token with a 403, so there is no tool for it and no way around it.\n- A read-only token can only read: any write returns 403. If you see that, ask\n  your human for a write-scoped token rather than retrying.\n- `request_publish_*` does NOT publish \u2014 it creates a pending approval a human\n  approves in Axonity. Use it when a draft is ready; then tell the user to\n  approve it in their Axonity approvals inbox.\n\n## Optimistic locking (always read-then-write)\n- Before `update_*`, call `read_*` and use the `version` you get as\n  `expectedVersion` \u2014 in the request BODY. If the update returns a 409\n  conflict, someone else changed it \u2014 read again and re-apply your change onto\n  the new version.\n- `delete_*` also takes `expectedVersion`, but as an argument on the tool call\n  only \u2014 the connector maps it to whatever query-parameter spelling that\n  entity's route actually expects (it differs per entity on the wire; you never\n  need to know which).\n- `restore_*` and `restore_deleted_*_version` take NO version at all \u2014 a\n  restore must never lose to a stale-version guard.\n\n## Errors: branch on the failure, not the words\n- Every error names what went wrong as plainly as the backend allows. For a 409\n  specifically, two different problems share that status code and need\n  different responses:\n  - **Version conflict** \u2014 you had a stale read. Re-read, re-apply, retry.\n  - **Reference conflict** \u2014 the entity is referenced by something published or\n    live. Retrying will never help. Detach the reference or unpublish the\n    referencing entity first.\n  The error message tells you which one you hit \u2014 read it, don't assume 409\n  always means \"retry.\"\n- A 403 on any write means the token is read-only, or (for a direct publish\n  attempt, which no tool makes) that publishing must go through\n  `request_publish_*`. Either way: stop, don't retry, tell your human.\n- A 401 means the service token is dead \u2014 missing, wrong, expired, or revoked.\n  **The backend deliberately returns the identical message for all four\n  causes** so it doesn't leak which applies; you have no way to tell them\n  apart and no way to check a token's remaining lifetime in advance (every\n  token now expires \u2014 7, 15, 30, 60 or 90 days, chosen when it was minted;\n  there is no \"never\"). On any 401: stop, do not retry, and tell your human\n  plainly that the configured token is no longer valid and a new one must be\n  minted from Axonity \u2192 Settings \u2192 API tokens. Do not guess or imply the cause.\n\n## Field shape\n- All fields are camelCase JSON (e.g. `capabilityTier`, not `capability_tier`).\n  ONE documented exception: validator specs (`permissions.outputValidators`,\n  `permissions.exposedValidatorTools`) use snake_case keys (`function`,\n  `target`, `args`, `when_present`, `inputs`, `error_message`,\n  `tool_name`, `validator_name`) \u2014 they are the same shape at every level and\n  are stored verbatim, so they are NOT camel-aliased. Send them in snake_case.\n  What those keys MEAN, and how a validator is bound to what it judges, is the\n  Validators section.\n- `update_*` is a partial change for agents/tools and a partial patch for\n  workflows: send only the fields you are changing (plus `expectedVersion`).\n- The backend validates fields; a 422 error names the offending field and why\n  (e.g. `body.capabilityTier: Input should be 'economy', 'standard', 'smart' or\n  'reasoning'`). Fix that field and retry \u2014 do not guess at the whole shape.\n- **create/update for tool and agent are STRICT** (`extra=\"forbid\"`): an\n  undeclared OR MISSPELLED key is a 422 that names it, not a silent drop. So\n  spelling matters and you get told when it is wrong \u2014 good. Other entities are\n  more lenient and may drop an unknown key silently; never rely on that.\n- `agent.tags` is a free label for grouping and reporting. It GATES NOTHING \u2014\n  what reaches an agent's prompt is a LINK (`attach_policy_to_agent`), visible\n  in a table a human can read and edit. A role-tag gate on a policy used to\n  decide that invisibly and is refused outright now: sending\n  `activation.tags` to `create_policy`/`update_policy` is a 422. The two\n  surviving gates, `activation.tools` and `activation.delegation`, each say\n  something a link cannot \u2014 \"only on turns where this agent holds this tool\",\n  and \"only when (not) delegated\".\n\n## After you write, verify\n- A 200 means the request was accepted, NOT that it did what you meant. Re-read\n  the entity after a mutation and diff it against your intent \u2014 a partial update\n  only changes what you sent, and on the lenient (non-tool/agent) entities an\n  unknown key can be dropped silently rather than rejected.\n- Re-reading the ENTITY is not enough for an `attach_*`: those links are stored\n  outside the entity body and never appear in `read_agent`. Read them back with\n  `list_agent_skills` / `list_agent_policies` / `list_agent_reference_docs`\n  (see Wiring, mechanism B).\n- \"Complete\" is your job, not the backend's. A create succeeds with only the\n  required fields set; it does not tell you the entity is USABLE. An agent with\n  no `toolIds` runs with no tools; a connector tool with an empty\n  `implementation` has no endpoint to call; a workflow with steps but no\n  trigger never fires. After creating, check the entity has everything its\n  purpose needs \u2014 see the per-entity and wiring sections.\n- To test a whole workflow end to end, `start_workflow_run` then read the result\n  (`read_run` / `read_run_trace` / `read_run_cost`). Note it runs the PUBLISHED\n  workflow and really executes (cost, connector side effects), so publish first,\n  and only test-run when a human is expecting it.\n  - Read `read_workflow_trigger_parameters` first and pass `triggerId`: a\n    workflow can have several starts, each with different fields, and omitting\n    it fires whichever comes first. Never send a parameter marked `pinned` \u2014\n    the author owns that value and it is overwritten anyway.\n  - **A run can park instead of finishing.** A step that asks a question waits\n    for an answer, so \"it never came back\" usually means \"it is waiting on you\".\n    `read_run_waiting_on` says what for; `answer_run_question` (or\n    `send_run_message` on a conversation run) resumes it. Answer your own test\n    runs; on a run a human is depending on, the answer is theirs to give.\n  - A FOR EACH launch is not one result. `read_run_items_summary` is the\n    roll-up (\"4,415 processed \u00B7 12 failed\") and `list_run_items` the rows \u2014\n    with `outcome: \"failed\"`, because the failures are scattered and filtering\n    page one finds none of them.\n- A LIST is not the whole list. `list_workflow_runs` returns a page \u2014\n  `{ items, nextCursor, pageSize, hasMore }`, 20 by default \u2014 so counting or\n  concluding from page one while `hasMore` is true is how you answer confidently\n  and wrongly. Follow `nextCursor` until it is null. Two further traps: that\n  route lists LAUNCHES (a 4,415-item FOR EACH is ONE entry carrying\n  `forEachProgress`, so rows are not runs), and the offset-style lists\n  (`list_runs`, `list_publish_approvals`) cap silently \u2014 a full page means\n  there may be more, and nothing in the response says so.\n\n## Delete is recoverable \u2014 but not everything is\n- `delete_*` soft-deletes: the entity disappears from `list_*` but is not gone.\n  `restore_*` brings it back; `list_deleted_*` shows what's waiting. This\n  applies uniformly to workflow, agent, tool, skill, policy, reference_doc,\n  persona, output_schema, prompt_snippet, and flow.\n- The same applies one level down, to version HISTORY:\n  `delete_*_version` removes one entry from history (the current draft and\n  published version are protected and can't be targeted this way);\n  `list_deleted_*_versions` / `restore_deleted_*_version` undo it. Deleted\n  version numbers stay reserved rather than reused, so gaps in the numbering\n  are normal, not a sign of corruption.\n- `restore_*` can itself 409 if a live entity now holds the same name/slot \u2014\n  the error names the conflicting one.\n- There is no \"archive\" state for these ten entities \u2014 delete + restore IS the\n  lifecycle. Runs are the one exception with a true archive/unarchive (see below).\n\n## Per entity \u2014 what to create, and what \"complete\" means\n\nBuild in dependency order: a thing you will REFERENCE must exist before the\nthing that references it. So: tools and output-schemas first, then agents (which\nlist tool ids), then workflows (whose steps name agents and tools), then\ntriggers (which make a workflow fire). Skills/policies/reference-docs can be\nmade any time before you attach them.\n\n### tool  (`create_tool`, strict body)\n- Required: `name`. Also: `description`, `type`, `inputSchema`,\n  `outputSchema`, `implementation`, `authConfig`, `surfacing`.\n- `type`: `\"function\"` (default) | `\"connector\"` | `\"validator\"` |\n  `\"evaluator\"`. `surfacing`: `\"always\"` (in the agent's tool list) |\n  `\"on_demand\"`.\n- `inputSchema` / `outputSchema` are JSON-Schema objects describing the tool's\n  params and result. Set them \u2014 an agent binds to a tool by its declared I/O; a\n  tool with no inputSchema is hard to call correctly.\n- `implementation` is what makes the tool DO something, and its shape depends on\n  `type`:\n  - **function** \u2014 carries the Python. Author and check the code with\n    `validate_tool_code` and `format_tool_code`, and prove it runs with\n    `execute_tool`, BEFORE `create_tool`. A function tool whose\n    `implementation` is empty is an inert stub.\n  - **connector** \u2014 carries the HTTP call: typically `connectorType`\n    (\"rest\"/\"graphql\"), `baseUrl`, `method`, `path`, `headers`,\n    `queryParams`, `body`, `responseMapping`, `pagination`. Prefer the\n    `create_connector` tool, which sets `type:\"connector\"` for you. NEVER put\n    a real credential in `authConfig` \u2014 placeholders only (\"{{ MY_SECRET }}\"\n    or \"\"); a human fills the secret in Axonity. Test with\n    `execute_stored_connector` (uses the real, server-side-decrypted secret;\n    you see only the result).\n  - **validator / evaluator** \u2014 a constrained kind, and `implementation` takes\n    ONE OF TWO shapes. Either `{\"builtin\": \"validators.<name>\"}`, naming a\n    house predicate \u2014 look at the tenant's existing validator/evaluator tools\n    (`list_tools`) for the keys in use rather than inventing one. Or authored\n    Python, like a function tool, whose `run` returns a VERDICT: `True` /\n    `False` / a fail-detail object. A `run` that returns a string, a number\n    or nothing at all declares no verdict and is REFUSED on save, so that a\n    misconfigured gate cannot silently pass everything at run time. Authored\n    code takes the standard call \u2014 see Validators.\n- Complete check: the tool has the I/O schemas its callers need AND a non-empty\n  implementation of the right shape for its type.\n- `toolboxId` files the tool in a toolbox on creation. Read `list_toolboxes`\n  BEFORE you create: a tool made without one is ungrouped, which is valid and\n  is also how nobody finds it. See Toolboxes below.\n\n### agent  (`create_agent`, strict body)\n- Required: `name`. Enumerated fields, with their ONLY valid values:\n  - `capabilityTier`: `economy` | `standard` (default) | `smart` | `reasoning`\n  - `creativityTier`: `low` | `medium` (default) | `high`\n  - `learningMode`: `none` (default) | `adaptive` | `strict`\n- `avatar`, `tags` (free labels for grouping \u2014 they gate nothing; see Field\n  shape), `canOwnProcess` (bool; must be true for an agent to own a\n  workflow step's flow), `episodicMemoryEnabled` (bool).\n- `permissions` (object): `planning`, `delegation`, `verboseOutput` (bools);\n  `outputValidators` / `exposedValidatorTools` (snake_case specs \u2014 see Field\n  shape for the casing, Validators for what they say);\n  `expectedOutputSchemaId` (an output_schema id \u2014 MANDATORY whenever you\n  attach validators here).\n- Wiring fields \u2014 see the Wiring section: `toolIds`, `systemToolIds`,\n  `delegationTargetIds`.\n- Complete check: an agent with no `toolIds`/`systemToolIds` has no tools and\n  can only reason/talk. If it is meant to DO something, give it the tools.\n\n### workflow  (`create_workflow`, then edit the document)\n- `create_workflow` makes a STUB (name, description) with an empty document.\n  You then build the graph with either\n  - `apply_workflow_mutations` \u2014 a LIST of command mutations applied in order\n    (preferred: the backend validates each and threads the version), or\n  - `replace_workflow_document` \u2014 a full-document atomic PUT.\n- The document is a graph: `steps.all[]` (each `{ id, type, name, ... }`) and\n  `steps.edges[]` (each `{ id, from, to, type? }`) plus `triggers`.\n- WHICH VALUES a step's `type` and a trigger's `typeId` may hold is answered\n  by `get_workflow_authoring_spec`, read live from this deploy. This guide\n  does not list them, on purpose: it used to name nine step types where seven\n  validate, and a list nobody could read is a list that goes wrong. The spec\n  also lists the types you may NOT author, each with the reason and how to\n  express that intention instead \u2014 so reaching for one gets you an answer\n  rather than a `step_invalid_type`.\n- Referential integrity is enforced: step and trigger ids must be unique, and\n  every edge `from`/`to` must reference an id that exists in the document\n  (`from` may be a trigger or step; `to` must be a step). A dangling edge is a\n  hard error.\n- Complete check: run `validate_workflow` on the document \u2014 it returns\n  `launchable` plus an `issues` list. A workflow is not done until it is\n  launchable AND has a trigger (see Triggers).\n\n### persona\n- An agent's character \u2014 1:1 with an agent. Created only through its agent\n  (`create_agent_persona`: `name`, `characterText`); then a normal entity\n  (`read_persona`, `update_persona`, delete/restore/versions).\n\n### output_schema\n- A reusable output contract, versioned and publishable. Referenced BY id from a\n  tool's validators or an agent's `permissions.expectedOutputSchemaId` \u2014 so\n  create it first, then point things at the id the create call returns.\n- `schemaBody` is a JSON Schema document (`type`, `properties`,\n  `required`) PLUS one key that is not JSON Schema: `validators`, the gates\n  run against a submitted output. This is the place a validator can be STEERED\n  at part of the output \u2014 see Validators.\n\n### skill / policy / reference_doc\n- Memory entities attached to agents (and skills also to workflows). Create them,\n  then wire with the `attach_*` tools \u2014 see Wiring.\n- Building the SEMANTIC LAYER \u2014 reference docs that say what a table means, what\n  a word means, which query fills which table (`semanticKind` and the fields\n  that go with it)? Read `axonity_semantic_conventions` first. Those rules are\n  served by the platform; this guide does not restate them.\n\n### prompt_snippet\n- Reusable prompt fragments; a normal entity. Wire-level oddity:\n  `list_deleted_prompt_snippets` returns the backend `items` envelope.\n\n### flow\n- A reusable workflow fragment in the authored-entity lifecycle. `create_flow` /\n  `update_flow` write draft state; runtime uses `read_flow_published` until\n  approval. `request_publish_flow` to publish, `discard_flow_draft` to reset.\n\n### data_table\n- An authored table of rows: the tenant's own reference data, designed and\n  maintained by a person, read by agents and decisions. Same lifecycle as an\n  output schema \u2014 draft, version, request publish. See \"Tables\" below, which is\n  where the rules that are NOT the generic ones live.\n\n### company\n- The tenant's single company document (mission, value streams, org structure).\n  A SINGLETON \u2014 one per tenant, no id, so there is no list/create/delete:\n  `read_company`, `update_company` (a WHOLE-document save with\n  `expectedVersion`, like `replace_workflow_document`), `list_company_versions`,\n  `read_company_version`, `restore_company_version`, `read_company_published`.\n  Publish it like anything else with `request_publish_company` \u2014 but because it\n  is a singleton this takes NO id (the server resolves your tenant's one\n  company). Direct company publish is closed to machine tokens, so the approval\n  queue is the only path.\n\n## Validators \u2014 one shape, one call\nA validator is a GATE on a submitted output: it runs after an agent produces a\nresult and can refuse it. Specs are written in two places and carry the same\nkey names in both \u2014 `permissions.outputValidators` on an agent, and\n`validators` inside an output_schema's `schemaBody`. The backend's OpenAPI\ndescription of `schemaBody` is the source for the full contract; what follows\nis the part you cannot author without.\n\n- A spec names its check in ONE of two ways, and each brings its own binding:\n  - `function` \u2014 a shipped predicate (e.g. `validators.min_length`), bound\n    by `target` (the field it judges; omit it to judge the whole output) and\n    `args`.\n  - `tool` \u2014 a validator TOOL in this tenant's library, by name or id.\n  Exactly one of the two. Naming both leaves it unsaid which one runs, naming\n  neither leaves nothing to run, and a gate does not get to be ambiguous \u2014 both\n  are refused. The binding keys do not mix either: `target`/`args` belong to\n  the `function` form and are refused on a `tool` spec, because a key the\n  runtime ignores is worse stored than rejected.\n- `error_message` is what the agent is told on refusal, and the one key both\n  forms share. `{value}` in it is replaced by what the validator reported.\n- `when_present` runs the check only when the target field is actually in the\n  payload. Off by default, deliberately: a blanket skip turns a mistyped\n  `target` into a gate that passes everything. Set it where a field is\n  genuinely optional.\n\n### The standard call\nEVERY authored validator is invoked the same way. The signature does not vary\nper tool, and that is the whole point: a screen cannot offer inputs it does not\nknow, and a spec served to an agent cannot describe a shape that differs per\ntool. Bespoke parameters push the contract into prose that goes stale.\n\n```\nrun(data, slots, binding)\n```\n\n- `data` \u2014 what the validator is pointed at, UNTOUCHED. The whole submitted\n  output, or the field named by `field`.\n- `slots` \u2014 every declared session-memory reference found in `data`, with its\n  text, indexed by the reference itself. The platform resolves them because code\n  in the sandbox is never handed a lookup callable \u2014 a validator may be foreign\n  code.\n- `binding` \u2014 what you declared, verbatim, so the validator knows which values\n  in `data` are references to look up rather than text to read. Without it it\n  would have to guess, and guessing is how a check reads a key as though it were\n  the body.\n\nTwo keys on the spec steer that call: `field` names the part of the output to\nhand over (leave it out for the whole output), and `slots` lists the fields\nthat hold references.\n\n```json\n{ \"tool\": \"my.freshness.check\",\n  \"field\": \"units\",\n  \"slots\": [\"key\", \"source_key\"],\n  \"error_message\": \"REJECTED: {value}\" }\n```\n\nBOTH ARE CHECKED WHEN YOU SAVE the output schema, and a refusal names the\nfields that do exist: a `field` that is not a property, or a `slots` name the\nrows do not carry. That check is there because either mistake fails SILENTLY at\nrun time \u2014 a name that is not there is never looked up, so the gate runs on\nunresolved values and nothing says so. (Rows whose schema declares no shape are\nleft alone: there is nothing to check against, and guessing would refuse correct\nconfigurations.)\n\nWHERE `field` AND `slots` ARE ACCEPTED: inside an output_schema's\n`schemaBody`, which is stored verbatim. An agent's\n`permissions.outputValidators` is a STRICT body \u2014 an undeclared key is a 422 \u2014\nso a spec written THERE takes neither, and its validator gets the whole output\nand no slots. Steer a validator from the output_schema.\n\n### The older, explicit binding\nA tool spec MAY declare `inputs` instead, and a spec with `inputs` does NOT\nget the standard call. That is the way for a validator tool backed by a shipped\npredicate, which receives `value` plus its own arguments \u2014 its `run` would\nnot accept `data`/`slots`/`binding`. Each entry is\n`{\"source\": \"field\"|\"const\", \"field\": <name>, \"as\": \"slot\"?}`; with\n`as: \"slot\"` the field's value is read as a reference and its TEXT is passed.\n`field` takes a path, so a binding can point INTO a list: `units[].key` is,\nfrom every row in `units`, the `key` field.\n\nWriting a NEW validator: take the standard call and leave `inputs` out.\n\n## Wiring \u2014 how the pieces connect\nThere are THREE mechanisms, and using the wrong one silently no-ops. Know which\neach link uses.\n\n**A) Set a field on the entity (via create/update)** \u2014 an id or id-array that\nlives in the entity body:\n- tool \u2192 agent: add the tool's id to the agent's `toolIds`. This is how an\n  agent gets a (non-system) tool. There is no attach_tool_to_agent route.\n- system tool \u2192 agent: add the catalog id to `systemToolIds`. Get ids from\n  `list_system_tools`. No grant/revoke tool \u2014 you set the array via\n  `update_agent`. `toolIds` and `systemToolIds` are DIFFERENT lists; a\n  system-tool id does not go in `toolIds`.\n- agent \u2192 agent (delegation): add the callee agent's id to the caller's\n  `delegationTargetIds` (and set `permissions.delegation: true`).\n- output_schema \u2192 agent: `permissions.expectedOutputSchemaId` (a single id).\n- Changing any of these is read-then-write under optimistic locking: read the\n  agent, edit the field \u2014 an id-array is a FULL replace, so include the ids you\n  are keeping \u2014 then `update_agent` with `expectedVersion`.\n\n**B) Call an attach route (a link, not a field).** `attach_*`/`detach_*` POST/\nDELETE a link and do NOT touch the entity body:\n- skill \u2192 agent: `attach_skill_to_agent`; skill \u2192 workflow:\n  `attach_skill_to_workflow`.\n- policy \u2192 agent: `attach_policy_to_agent`.\n- reference_doc \u2192 agent: `attach_reference_to_agent` (agents only \u2014 there is no\n  workflow-scoped reference-doc route).\n- VERIFY every one of these with the read-back before `request_publish_*`:\n  `list_agent_skills`, `list_agent_policies`, `list_agent_reference_docs`,\n  and `list_workflow_skills` for the workflow-scoped variant. This is not\n  optional politeness \u2014 because a link lives OUTSIDE the entity body,\n  `read_agent` / `read_workflow` will not show it, so the read-back is the\n  only way to tell an attach that landed from one that silently did nothing.\n  (Mechanism A is different: those ids ARE in the body, so re-reading the agent\n  proves them.)\n- The three agent read-backs also take `workflowId`. With it you get the\n  COMPOSED runtime view \u2014 what this agent's prompt actually assembles inside\n  that workflow, with a `linkSource` per row saying WHY each item is there (an\n  explicit link, tenant-wide, or scoped to the workflow). Without it you see the\n  agent on its own, which is not what a run assembles.\n\n**C) Reference an id INSIDE the workflow document** (this is how agents and tools\nget \"into\" a workflow \u2014 there is no attach route for it):\n- agent \u2192 workflow: an `agent` step names its agent in the step's\n  `contract.owners[]` as `{ \"type\": \"agent\", \"id\": \"<agentId>\" }`.\n- tool \u2192 workflow: on an `agent` step, list tool ids under\n  `contract.tools.toolIds[]` (and/or per plan-step `contract.activities[]`\n  entries of `{ \"kind\": \"tool\", \"toolId\": \"<id>\" }`). On an `automation` step,\n  set `config.automationType: \"tool\"` and `config.toolId`. A `connector` step\n  references a connector tool the same way.\n- Every id you place in a document must be a REAL id in THIS tenant. The workflow\n  validator flags a step whose owner agent or referenced tool no longer exists \u2014\n  `validate_workflow` is how you catch a bad reference before publishing.\n- Prefer `apply_workflow_mutations` (e.g. `add_step`, `update_step`,\n  `add_edge`) over hand-building this JSON: the backend fills defaults and\n  validates each edit. Read the returned document to see the exact shape it\n  produced, then adjust.\n\n### Which way you are asking\n- `list_workflow_components` \u2014 what does THIS workflow depend on. Two hops:\n  what the document names, and what each agent then actually receives.\n- `list_workflows_using` / `list_dependent_agents` \u2014 who depends on THIS\n  entity. Ask before you edit or delete anything shared.\n- A component's `reach` is how many workflows name it, this one included. Above\n  1, an edit reaches processes you did not open; `duplicate_workflow_component`\n  gives this workflow its own copy and leaves the others on the original.\n\n## Prompt elements & placement (Memory V2)\nA prompt snippet is a LIBRARY item \u2014 creating it changes nothing on its own. It\nonly shapes a run once it is PLACED into a flow step's prompt stack. Placement is\nper flow step, in one of two channels, at an order:\n- `read_workflow_prompt_stacks(workflowId)` (or `read_flow_prompt_stacks(flowId)`)\n  resolves a workflow/flow to its steps and each step's system/user stacks \u2014 this\n  is how you DISCOVER the `flowStepId`s you place against. Start here.\n- `attach_prompt_snippet_to_flow_step(flowStepId, snippetId, target, displayOrder?)`\n  \u2014 `target` is `\"system\"` (instructions the model is steered by) or `\"user\"`\n  (content presented as the user turn).\n- `list_flow_step_prompts` shows a step's current system/user stacks (with each\n  attachment's `linkId`); `update_flow_step_prompt(linkId, \u2026)` moves/reorders one;\n  `reorder_flow_step_prompts(flowStepId, snippetIds)` sets the whole order;\n  `detach_prompt_snippet_from_flow_step(linkId)` unlinks (the snippet survives).\n- A WILDCARD snippet applies to EVERY step (top of every stack), with no\n  per-step link. `list_wildcard_prompts` shows them.\n\nWhich prompt element an instruction goes in \u2014 persona, policy, skill, reference\ndoc or a step's activities \u2014 and how large each may be, is not decided here: the\nplacement rules are served by the platform and appended to this guide, read live\nfrom this deploy each time you call it.\n\nLong-term recall for an agent is the agent's **`episodicMemoryEnabled`** flag\n(Memory V2, opt-in). Session/workflow memory are RUNTIME, not authored: they are\nwritten by a run, never set here. This connector does not expose them \u2014 the\nbackend serves them per run, but no tool wraps those reads yet, so do not\npromise a user you can show them.\n\n## Reproducing a setup (recreate, never copy ids)\nTo rebuild an agent/workflow/tool graph as NEW entities \u2014 in this tenant, or in\nanother tenant by pointing the connector at THAT tenant's token in a separate\nsession \u2014 author it fresh and wire by the NEW ids. An id from a read is\nmeaningful only in the tenant it came from; sending it back in a create/update\nelsewhere points at nothing. Do this instead:\n1. Read the source graph (in the session pointed at it) for its SHAPE: names,\n   field values, which tools each agent lists, which agents/tools each workflow\n   step references. START WITH `list_workflow_components`: it answers what the\n   workflow is made of in one call \u2014 agents and flows, the workflows it calls,\n   the tools those agents reach, the tables behind those tools, the knowledge\n   attached \u2014 each row naming the STEPS that are the reason it is there. Walking\n   that outward by hand is how a rebuild quietly loses a tool nobody noticed was\n   attached. Then read each entity for its field values. For each source agent\n   also read its LINKS \u2014 `list_agent_skills`, `list_agent_policies`,\n   `list_agent_reference_docs` \u2014 they are not in the agent body, so a plain\n   `read_agent` misses them and you would rebuild an agent that quietly lost\n   its skills and guardrails.\n2. Create the leaf dependencies first (tools, output_schemas). Keep a map from\n   each OLD id to the NEW id the create call returns.\n3. Create agents, translating every referenced id through your map:\n   old toolId \u2192 new toolId in `toolIds`, etc. Never send an old id. If the\n   source agent has a persona, recreate it with `create_agent_persona` on the\n   new agent.\n4. Create workflows; when you add agent/tool references into the document,\n   translate through the map the same way.\n5. Attach skills/policies/reference-docs by the new ids, then read them back\n   (`list_agent_*`) and diff against what you read in step 1.\n6. `validate_workflow` and re-read each entity to confirm every reference\n   resolved, then `request_publish_*`.\nThe connector never carries a secret across: `authConfig` stays placeholders in\nthe new tenant too, and a human fills the real value there.\n\n## Structural workflow edits\n- **Start by reading the spec.** `get_workflow_authoring_spec` returns FOUR\n  lists this deploy generates from its own registries: the mutation commands,\n  the trigger types, the step types (including the ones you may not author, with\n  the reason), and the schedule-rule shapes with a working example each. Neither\n  this guide nor the tool descriptions restate any of those lists: a list kept\n  in the connector is right only by maintenance, and it has been wrong twice\n  already, both times in the direction that costs an agent a 422 on something it\n  was told to use. Pass `types` for the live payload schema of a command you\n  are about to write.\n- **The payload schemas describe themselves.** What may go inside\n  `parameters`, `inputs`, `outputs` and `contract` is IN those schemas \u2014\n  including the fact that a bound input DERIVES its contract from the output it\n  reads. Ask the spec for the command's `types` rather than looking for prose\n  about the shape here; there deliberately is none.\n- **One thing the schemas do not make obvious: which KEY carries the value's\n  type, because it is not the same key everywhere.**\n  - A TRIGGER PARAMETER and a WORKFLOW CONSTANT use `type`.\n  - A step INPUT or OUTPUT uses `kind`.\n  - Where a field carries a nested `schema` object, `schema.kind` is what\n    wins.\n\n  This asymmetry is real, not a typo to normalise: the shapes came from\n  different surfaces, and normalising them would make one reader wrong. The\n  VALUES differ too \u2014 `get_workflow_authoring_spec` returns one list per key\n  (`parameterTypes`, `outputKinds`, `schemaFieldKinds`), and they are not\n  interchangeable: only one knows `constant`, and they disagree on how to\n  spell a yes/no. Read the list that matches the shape you are writing; this\n  guide does not restate them, for the same reason it restates no other list.\n\n  Writing `kind` on a trigger parameter is not a 422; it is a key nothing\n  reads, so the value silently falls back to text and the workflow runs with\n  the wrong thing. Check which of the three you are writing before you write it.\n- `rulesVersion` in that response is a content hash over all four lists. While\n  it is unchanged there is nothing to re-fetch; re-read the spec when it changes,\n  or when a mutation fails with a 422 suggesting your idea of a command is stale.\n- `apply_workflow_mutations` takes a LIST of commands and applies them in order,\n  threading the version for you \u2014 pass the version you read, not one per command.\n- It is NOT transactional. If command N fails, the ones before it stay applied;\n  the error tells you how many landed and which index failed. Re-read and resume\n  from that index rather than replaying the whole list.\n- `replace_workflow_document` stores the document's `name` and\n  `description` \u2014 they sync onto the workflow's own columns, an omitted key\n  leaves the stored value alone, and an explicit `\"\"` clears it. `stageId`,\n  `capabilityId`, `valueStreamId` and `onFailure` are PATCH-only: changing\n  one through this route is REFUSED with a 422 naming the field, and\n  round-tripping it unchanged passes. Read, edit, write is therefore safe;\n  re-linking a workflow to another stage or capability is its own call.\n- The response is a SUMMARY (version, appliedCount, launchable, validationIssues,\n  stepCount, edgeCount), not the document. That is deliberate: a real workflow\n  document overflows the response limit, and a successful call would come back\n  looking like a failure \u2014 retrying that is how you end up with duplicate steps.\n  Ask for the document with `returnDocument: true` or `read_workflow`.\n- Command payloads are STRICT and complete:\n  - `add_step` builds a whole step in ONE call \u2014 `name` and `position` are\n    required, and `id`, `type`, `config`, `contract`, `inputs` and\n    `outputs` are accepted next to them. No follow-up `update_step` is needed\n    just to fill the step in.\n  - `add_trigger` does the same for a trigger: `parameters` and `outputs`\n    go in that call. This is what makes a callable workflow declarable in one\n    mutation, since a trigger's parameter list IS its signature.\n  - `add_edge` takes the document's own `from`/`to` as well as\n    `fromStepId`/`toStepId`, and keeps an `id` you supply.\n  - An unknown or misspelled key is a 422 naming it, not a silent drop \u2014 so\n    spelling matters and you are told when it is wrong.\n\n## Inputs and constants \u2014 the two lists that belong to the PROCESS\nA workflow declares two whole-list things of its own, both edited the same way\n(read the list, change it, write it back \u2014 there is no per-entry command,\nbecause the identity is the `name` and renaming is the common edit):\n- `set_workflow_inputs` \u2014 what the process NEEDS to start. Carried by every\n  start, and the list a caller fills in whichever trigger fired. A start's own\n  `parameters` are what that start declares on top; where a name is in both,\n  the process-level one wins.\n- `set_workflow_constants` \u2014 what the AUTHOR pins, described below.\nRead both back with `read_workflow_trigger_parameters`, which answers\n`{ inputs, triggers, constants }`.\n\n## Constants \u2014 values the AUTHOR owns\nA constant is applied on EVERY run whichever trigger fired, and it OVERWRITES\nwhatever a caller sent. That is deliberate: a field the operator's form does not\nshow must not become an injection point for anyone who learns its name.\n- Set them with the `set_workflow_constants` command. It replaces the WHOLE\n  list, the way `advanced_edit` replaces steps and edges \u2014 read the list, edit\n  it, write it back. There is no per-constant command, because a constant's\n  identity is its name and renaming is the common edit.\n- Every entry needs a `name`: it is what a step binds to and how the run\n  payload keys it. A nameless entry is refused rather than stored, because at\n  run time it would simply be skipped.\n- **A constant with no value blocks publishing.** `constant_without_value` is\n  an error, not a warning, and it names the constant. It has to be: an entry\n  with no value was never written into the run at all, so the workflow validated\n  clean, published, and ran without it.\n- ABSENCE, not falsiness. `0`, `\"\"`, `false` and `[]` are values and pass.\n- The value lives in `defaultValue`. On a constant that is not a fallback \u2014\n  it IS the value, written on every run. A constant carries no `required`\n  (nobody is being asked to fill it in) and needs no flag saying it is one.\n- **A trigger parameter can be pinned the same way**, and the platform reads\n  TWO spellings: `constant: true`, or the older `type: \"constant\"`. Both\n  mean the author owns it and the caller must not send it, so treat a parameter\n  carrying either as off-limits when you build `triggerInput`.\n  `read_workflow_trigger_parameters` collapses both into `pinned`, on the\n  workflow's constants and on each start's parameters \u2014 read that rather than\n  checking the two spellings yourself.\n\n## Two platform invariants that look like bugs\nBoth are deliberate, both run after EVERY edit, and both now report themselves in\nthe mutation response under `systemAdjustments` \u2014 so you no longer have to diff\na document to find out what the platform did.\n- **A bound input's contract is derived, not authored.** An input that reads an\n  upstream output takes its contract \u2014 description included \u2014 FROM that output.\n  Write the text on the producing step's output; a downstream description changing\n  when you edit an output is this rule at work, not the platform overwriting you.\n  The inputs it re-derived come back in `rederivedInputs`.\n- **Every step reaches the END point.** The platform guarantees it and wires that\n  edge itself; the edges it added or removed come back in `addedEdges` /\n  `removedEdges`. An edge you did not ask for is this, not corruption.\n\n## Validating: two questions, two calls\n- `validate_workflow({ workflowId })` checks the STORED workflow against the\n  tenant catalog \u2014 it confirms the agents, tools and flows the steps reference\n  actually exist. This is the \"can this run?\" answer, and it comes back with\n  `catalogChecked: true`.\n- `validate_workflow({ document })` is stateless and read-only-token safe, but\n  without a catalog it can only judge STRUCTURE: `launchable` there means the\n  graph is sound, not that it will run. It says so with `catalogChecked: false`.\n- Pass exactly one. Before telling a human a workflow is ready, check\n  `catalogChecked` \u2014 a green structural verdict is the easiest thing to\n  over-read.\n- Read the `issues` rather than only `launchable`: the validator now reports\n  a sub-process call with no target, one pointing at itself, one whose target\n  is deleted or was never published or has no invocation trigger, a constant\n  with no value, and a trigger drawn on the canvas that nothing is wired to.\n  Some of those are warnings and still let a workflow publish \u2014 read the\n  `severity`, and read the `code`, which is stable where the message is not.\n\n## Triggers\n- A published workflow still does nothing until it has a trigger. A trigger has\n  TWO halves, and drawing one on the canvas is only the first.\n- **A schedule is reconciled for you.** Draw it in the document, publish, and\n  the firing row is brought into line. That is the exception.\n- **A webhook or conditional trigger is NOT.** Its row must be created\n  separately \u2014 `create_webhook_trigger` / `create_conditional_trigger` \u2014\n  and publishing will not create one. A webhook drawn and published with no row\n  is an endpoint that does not exist; the validator says so with\n  `trigger_not_wired`, a WARNING, so the publish still goes through. Take the\n  warning seriously: nothing else will tell you.\n- Trigger deletes are HARD deletes \u2014 no restore. Webhook tokens are shown once\n  at create/rotate and are never retrievable; hand them straight to your human\n  and never store one in an entity field.\n- **A schedule is a claim \u2014 check it.** `run_cron_schedule_now` fires one\n  immediately without moving `nextFireAt`, so you can prove a schedule starts\n  something instead of waiting until tomorrow to find out it does not. It runs\n  for real, with real cost and side effects.\n- **To PAUSE a schedule, disarm it** (`set_cron_schedule_enabled`), never\n  delete it. Deleting throws away the rules the author wrote and makes \"stop\n  this for a week\" indistinguishable from \"we do not do this any more\".\n- `create_cron_schedule` takes EITHER `cronExpr` OR `rules`, and the\n  trigger must exist in the PUBLISHED document. For the rule shapes, read\n  `scheduleRuleKinds` from `get_workflow_authoring_spec` \u2014 do not invent one.\n- `list_all_cron_schedules` answers \"what runs tonight?\" across the tenant;\n  `reconcile_cron_schedules` answers \"is that actually what runs?\". The second\n  reports rather than tidying silently and never arms something switched off.\n- **A conditional trigger without a CHECK starts the workflow every beat.** It\n  wakes on its interval and, with nothing set, runs regardless of whether there\n  was anything to do \u2014 a mailbox on fifteen minutes then makes ninety-six empty\n  runs a day. Set `checkKind` on `create_conditional_trigger`, or on an\n  existing one with `update_conditional_trigger`; every trigger authored\n  before checks existed has none, so read `checkKind` in\n  `list_conditional_triggers` before assuming otherwise.\n- `checkKind: \"automatic\"` is ONE tool call and one rule on its answer \u2014 no\n  model, so it is the cheap way to ask \"is there anything there?\". Its\n  `checkConfig` is `{ toolId, inputs?, rule: { field, op, value } }`, where\n  `field` names a key OF THE TOOL'S ANSWER. A rule pointing at a field the\n  tool never returns is reported as a broken setup, not as \"condition not met\".\n  `\"agent\"` is reserved for a model judging the condition and is refused\n  today. Do not pre-validate a check here \u2014 the backend judges it with the same\n  function the dispatcher runs when the trigger fires, and its refusal says\n  what to change.\n- **To take a check off again, send `checkKind: \"\"`** \u2014 the empty string. It\n  clears the kind and its config together and returns the trigger to starting\n  every beat. Omitting the field leaves the check standing, which is why the\n  empty string exists at all.\n\n## Evaluating what you built\n- There is no findings endpoint and no evaluator entity. To judge a run, read it:\n  `read_run` (its `validatorVerdicts` and `agentInvocations`) and\n  `read_run_trace` (the step-by-step tool calls).\n- **Start with `read_run_outline`, not `read_run`.** The outline is the run's\n  table of contents and carries no bodies, so it costs what the run's SHAPE\n  costs rather than its content \u2014 a fan-out over four thousand items reads about\n  as cheaply as one over four. Then open only what you need:\n  `read_run_value` for one large step value (by the digest in `stepStates`),\n  `read_run_invocation_messages` for one agent's transcript (by the id in\n  `agentInvocations`). Reading a whole run to find one message is the habit\n  this replaces.\n- `itemCap` on the outline bounds items listed per fan-out step; the remainder\n  is counted in `counts.truncated`, never dropped in silence.\n- **What an agent wrote to itself is readable.** `list_run_session_memory`\n  lists the files an agent left during a run (metadata only) and\n  `read_run_session_memory_file` opens one. When the trace shows a decision but\n  not what it was reading, this is usually where the reason is. Workflow-bound\n  reference material is NOT here \u2014 that lives in `reference_docs`.\n- **`list_todo_steps`** is every step in the tenant waiting on a human, across\n  all runs; `read_run_waiting_on` is the same question for one run you already\n  have. It is PAGED over the waiting RUNS, so `items` can be longer than\n  `pageSize` \u2014 one run may park several steps. Follow `nextCursor` until it\n  is null before concluding anything about how much is waiting.\n- Runs are the only thing with a real archive state \u2014 `archive_run` is\n  reversible, `bulk_delete_runs` is not.\n\n## Subworkflows \u2014 one workflow calling another\nBoth halves live in the workflow DOCUMENT, so both are ordinary\n`apply_workflow_mutations` work. There is no separate \"link\" route.\n- **To make a workflow callable**, it needs TWO things: a trigger with\n  `typeId: \"subprocess-invocation\"` (`add_trigger`), which is what makes it\n  callable at all, and a declared SIGNATURE.\n- **The signature belongs to the PROCESS, not to the trigger.** Declare it with\n  `set_workflow_inputs` \u2014 one list, carried by every start, and the same list\n  a caller of any kind fills in. A trigger's own `parameters` are what THAT\n  start declares on top; `parameters` goes in the `add_trigger` call itself,\n  so a start that does add fields needs no follow-up `update_trigger`.\n- Older documents declared everything on the invocation trigger instead, and\n  that still works: both are read, and where a name appears in both the\n  PROCESS-level one wins. When you are editing a workflow you did not author,\n  read `read_workflow_trigger_parameters` and see which list actually holds\n  its fields before adding to either.\n- `set_workflow_inputs` REPLACES the whole list, like\n  `set_workflow_constants`: read, edit, write back. An entry with no `name`\n  is refused rather than stored \u2014 the name is how a caller passes the value and\n  how the run payload keys it, so a nameless one would be skipped silently at\n  run time.\n- For what an input or a parameter may contain, ask\n  `get_workflow_authoring_spec` for the payload schema of the command you are\n  about to write, rather than a shape written down here.\n- **It must also be PUBLISHED.** The catalogue reads the published document, so\n  a draft-only workflow comes back `callable: false` with \"Never published\".\n  Authoring the caller first and publishing the callee later is a run-time\n  failure waiting to happen.\n- **To call it**, add a step with `type: \"subprocess\"` and\n  `config: { targetWorkflowId, ownerAgentId }` \u2014 both required, both workflow/\n  agent ids. Bind the step's `inputs` by NAME to the callee's `parameters`;\n  that is the whole mapping, there is no separate argument block.\n- `config.waitForCompletion` is **IGNORED** if you write it. Drawing a step\n  after this one already means \"after\", so waiting is implied. The one thing the\n  graph cannot say is fire-and-forget: `config.fireAndForget: true`, and then\n  nothing downstream may depend on the result.\n- `config.errorStrategy` (\"fail\" | \"skip\") is only honoured when the step\n  ITERATES (`config.iteration.enabled`). On a single call \"skip\" would report\n  a failed child as success, so it is forced to fail-fast.\n- **A workflow cannot call itself** \u2014 every run would spawn a child that reaches\n  the same step again. Pass `exclude: <the workflow you are editing>` to\n  `list_callable_workflows` and it is kept out of the list.\n- **What comes back** is the callee's `outcomes`: its end steps, each with the\n  fields bound into it. WHICH end was reached is itself part of the answer.\n- **`validate_workflow` checks this now.** A missing target, a workflow\n  calling itself, a target that is deleted, never published, or has no\n  invocation trigger \u2014 each has its own issue code, and the ones that resolve to\n  nothing are errors that block publishing. Still run\n  `list_callable_workflows` BEFORE you author the step: it is how you pick a\n  target and see the interface you are binding to, where the validator only\n  tells you afterwards that the one you picked was wrong.\n\n## Secrets\n- Never handle a real credential. A connector's `authConfig` takes placeholders\n  only (\"{{ MY_SECRET }}\" or \"\"); a human fills the real value in Axonity. This\n  is enforced \u2014 a write carrying something that looks like a real secret is\n  rejected before it leaves this connector.\n- You CAN read the catalogue: `list_secrets` (id, name, authType) and\n  `read_secret`. That is how you get the id for a connector's\n  `authConfig.secretId` \u2014 do not ask a human to copy one out of the UI.\n- Before you wire a connector to a secret, check `valueKeys` on\n  `read_secret`. An empty list means nobody has filled the secret in yet: the\n  connector will author fine and fail at RUN time. Say so to your human, with the\n  secret's name, rather than reporting the wiring as done.\n- You cannot create, change or delete a secret. That is a human act in Axonity \u2192\n  Settings \u2192 Secrets, and the backend refuses it from this connector's token.\n- A secret's `metadata` (connection config, e.g. a session_cookie handshake)\n  comes back with credential-shaped entries withheld, listed under\n  `metadataRedacted`. If you need one of those values, a human reads it in\n  Axonity \u2014 do not try another route to it.\n\n## Tables \u2014 the tenant's own reference data\nA table is an authored library element that HOLDS ROWS: the pricing bands, the\nregion-to-owner map, the list of accepted reason codes. A person designs the\ncolumns and maintains the content; agents and decisions read it.\n\n**When a table is the right element.** Reach for one when the CONTENT is the\npoint and it changes without the process changing.\n- Not an `output_schema`: that describes a SHAPE and holds no data. If you\n  find yourself putting example values in a schema, you wanted a table.\n- Not a workflow constant: a constant belongs to ONE workflow and is edited in\n  its document. A table is shared, and three workflows reading the same rows is\n  the case it exists for.\n- Not a function tool with a list inside it: that makes changing a row an act of\n  editing code, reviewing it and publishing a tool. A business user maintains a\n  table; nobody should need you to change a postcode.\n\n**Static or dynamic \u2014 who owns the rows.**\n- `isDynamic: false` (the default) is reference data the AUTHOR maintains. A\n  workflow reads it and cannot change it. `allowedOperations` must be empty:\n  a permission nothing honours is refused, not stored.\n- `isDynamic: true` lets a workflow change the rows, limited to\n  `allowedOperations` \u2014 any of `add` / `update` / `delete`. READING IS\n  NEVER LISTED there: it is what a table is for and is always allowed.\n- You edit rows through `add_data_table_row` / `update_data_table_row` /\n  `delete_data_table_row` whatever the table's mode says \u2014 those grants are\n  about what a RUN may do, not about authoring.\n\n**Never put rows in `update_data_table`.** `rows` and `columns` are\nwhole-collection fields: sending one row REPLACES the table's content and\ndeletes everything else. The row tools address a single row by a match\n(`matchColumn`/`matchValue`) and cannot touch the rest \u2014 use them. Reach for\n`update_data_table({ fields: { rows } })` only when you genuinely mean to\nreplace the whole content, and never as a way to append.\n\n**The rule that bites hardest: derived tools follow the PUBLISHED table.** A\npublished table mints its own CRUD tools, so granting an agent access to one is\nordinary tool granting \u2014 take a `toolId` from `list_data_table_tools` and put\nit in the agent's `toolIds`. But those tools follow the table's PUBLISHED\nversion. An author who ticked \"may add rows\" and has not published has granted\nnothing, and the tool that would let a run act on it does not exist yet.\n`list_data_table_tools` reports `offered` (what the draft would yield),\n`toolId` (whether a row exists) and `isLive` (whether a run can reach it)\nseparately for exactly this reason. Read all three before concluding a grant\nlanded. Same rule as everywhere else here \u2014 a draft changes nothing until it is\npublished \u2014 and it is the first thing an agent gets wrong about tables.\n\n**Routing a decision on a table.** A decision can branch by looking a value up\nin one column and taking the branch named in another, with\n`builtin: \"evaluators.table_lookup\"`. The behaviour worth knowing, because no\ncatalogue states it: THE CELL'S VALUE IS THE BRANCH'S OUTCOME KEY \u2014 not a new\nfield, and not something you map afterwards. Every value in the result column\nmust be the outcome key of an outgoing branch, or publishing the workflow is\nrefused. The table must be PUBLISHED: a run reads the published snapshot, so a\ntable that is only saved routes nothing. For the argument names it reads, and\nfor every other selectable evaluator, read `decisionEvaluators` from\n`get_workflow_authoring_spec` \u2014 generated from the registry that dispatches\nthem, so it cannot advertise one the platform would not run.\n\n**Column kinds** come from the same place: `tableColumnKinds` in\n`get_workflow_authoring_spec`. It is a FOURTH vocabulary beside the three for\nparameters, outputs and schema fields, with its own spellings \u2014 do not carry a\nvalue across from one of the others, and do not guess. Every column needs a\n`description`: an agent reads it to know what the column is for, and a save\nwithout one is refused.\n\n**`list_data_tables` is PAGED**, alone among the library lists \u2014 a tenant's\nreference data has no ceiling. Page one is not the library. Follow\n`nextCursor` while `hasMore` is true, or better, narrow in the query:\n`name` is exact and unique per workspace, so \"does one called X already\nexist\" is a single call rather than a walk. The page carries `rowCount`, never\nthe rows; the rows come from `read_data_table`.\n\n## Toolboxes \u2014 where a tool is filed\n- A toolbox is a per-tenant grouping label over tools. Read `list_toolboxes`\n  before `create_tool` and pass the box's id as `toolboxId`; a tool created\n  without one is ungrouped. Move an existing tool with\n  `assign_tool_toolbox` (`toolboxId: null` takes it out of its box).\n- `set_toolbox_tools` DECLARES the membership \u2014 it does not add to it. A tool\n  in the box and absent from your list is evicted. To add one tool, read the\n  box's contents first, or use `assign_tool_toolbox`, which cannot evict\n  anything by accident. A tool is in at most one box.\n- A toolbox NEVER changes what an agent may call. An agent is linked to\n  individual tools (`agent.toolIds`), never to a box; there is no route that\n  grants a whole box, and \"give this agent the Carerix toolbox\" is a bulk write\n  of individual links. What the box decides is how a tool is ADVERTISED: a boxed\n  tool with `surfacing: \"inherit\"` is found via discover_tools instead of\n  riding in every prompt. Read `effectiveSurfacing` on the tool to answer \"is\n  it in the prompt?\"; `surfacing` is the raw stored choice.\n- Deleting a toolbox does NOT delete its tools \u2014 they survive, ungrouped. The\n  box itself has no restore.\n- Platform-shipped tools cannot be moved. The `Axonity`, `Checks` and\n  `Branching` boxes hold locked tools; the API refuses and NAMES the tool it\n  refused. Read that name to your human instead of bisecting the selection.\n- `set_toolbox_auth` sets the credential a box's tools SHARE \u2014 ten Microsoft\n  Mail tools, one mailbox, said once. A tool with its own auth keeps it; only a\n  tool with none inherits. Same rule as anywhere else: point `secretId` at a\n  stored secret, never a real value. Before you clear or replace it, or delete\n  the box, call `list_toolbox_dependent_tools` \u2014 it names the tools that would\n  start failing at run time with a bare 401.\n\n## Tenant\n- Your token fixes the tenant. You cannot act across tenants; never send a\n  tenant id in a body.\n- `read_model_tier_map` says what `capabilityTier` actually RESOLVES TO on\n  this tenant. The tier is the field you write; the model is what you are\n  choosing. Read it before you pick one.\n- When a run does not start, look outward before blaming the workflow:\n  `read_concurrency_status` (is the tenant at its cap?),\n  `read_queue_overview` (is dispatch alive?), `list_task_queue` (did\n  something fail in the layer beneath the run?). `read_for_each_rate` explains\n  a fan-out that is pacing itself rather than stalling.\n- You can READ those and not change them. Caps, rate ceilings and the tier map\n  are operator decisions \u2014 report what you found, and to whom, rather than\n  looking for another route to it.\n- `read_deploy_contract` says what THIS deploy speaks: build, environment and\n  the routes it mounts. Read it when a call fails in a way that suggests the\n  backend is older or newer than you expect.\n- `list_users` is where an `ownerId` comes from. Look one up instead of\n  asking a human to copy it out of the UI.\n- `list_audit_events({ actorKind: \"service_token\" })` reads back what external\n  agents \u2014 including you \u2014 actually changed.\n";
 /** Where this deploy serves its prompt-element placement rules. */
 export declare const PLACEMENT_ROUTE = "/api/v1/authoring/prompt-placement";
-/**
- * Read this deploy's placement rules, or say why not.
- *
- * Exported for testing. Any failure — an older backend without the route (404),
- * a network error, a body without markdown — yields the notice; never throws.
- */
+/** Where this deploy serves its rules for writing the semantic layer. */
+export declare const SEMANTIC_KNOWLEDGE_ROUTE = "/api/v1/authoring/semantic-knowledge";
+/** Read this deploy's placement rules, or say why not. Exported for testing. */
 export declare function readPlacementRules(client: AxonityClient): Promise<string>;
+/** Read this deploy's semantic-knowledge rules, or say why not. Exported for testing. */
+export declare function readSemanticKnowledgeRules(client: AxonityClient): Promise<string>;
 export declare function registerConventions(server: McpServer, client: AxonityClient): void;

package/dist/tools/conventions.js

@@ -38,6 +38,13 @@
  * leave prompt elements alone; it never substitutes a local copy, because a
  * local copy is what went wrong. The prompt-SNIPPET mechanics (attach, reorder,
  * wildcard) stay below — those are how the API works, not where things go.
+ *
+ * THE SEMANTIC-KNOWLEDGE RULES ARE THE PLATFORM'S TOO, and go the same way —
+ * live from `GET /api/v1/authoring/semantic-knowledge`, never a local copy —
+ * with one difference: they are NOT appended to every call. They only matter to
+ * an agent building a workspace's semantic layer, so they get their own tool,
+ * `axonity_semantic_conventions`, and this guide carries one line pointing at
+ * it. Findable for whoever needs them, free for everyone else.
  */
 export const CONVENTIONS = `# Authoring conventions for Axonity entities
 
@@ -336,6 +343,10 @@ made any time before you attach them.
 ### skill / policy / reference_doc
 - Memory entities attached to agents (and skills also to workflows). Create them,
   then wire with the \`attach_*\` tools — see Wiring.
+- Building the SEMANTIC LAYER — reference docs that say what a table means, what
+  a word means, which query fills which table (\`semanticKind\` and the fields
+  that go with it)? Read \`axonity_semantic_conventions\` first. Those rules are
+  served by the platform; this guide does not restate them.
 
 ### prompt_snippet
 - Reusable prompt fragments; a normal entity. Wire-level oddity:
@@ -979,6 +990,8 @@ the rows; the rows come from \`read_data_table\`.
 `;
 /** Where this deploy serves its prompt-element placement rules. */
 export const PLACEMENT_ROUTE = "/api/v1/authoring/prompt-placement";
+/** Where this deploy serves its rules for writing the semantic layer. */
+export const SEMANTIC_KNOWLEDGE_ROUTE = "/api/v1/authoring/semantic-knowledge";
 /**
  * Said instead of the rules when they cannot be read. NOT a fallback: a local
  * copy of the rules is what drifted from the platform in the first place, so
@@ -991,29 +1004,45 @@ const PLACEMENT_UNAVAILABLE = "## Prompt element placement — NOT AVAILABLE\n\n
     "must not be changed until they can be read: call `axonity_conventions` " +
     "again, and if it still fails, report it rather than deciding placement " +
     "yourself.";
+/** The same refusal for the semantic layer: no rules here, so write no knowledge. */
+const SEMANTIC_KNOWLEDGE_UNAVAILABLE = "## Semantic knowledge — NOT AVAILABLE\n\n" +
+    "The rules for writing the semantic layer could not be read from this deploy " +
+    `(\`GET ${SEMANTIC_KNOWLEDGE_ROUTE}\`). This connector does not carry a copy ` +
+    "of them. Write no semantic knowledge — no reference doc with a " +
+    "`semanticKind` — until they can be read: call " +
+    "`axonity_semantic_conventions` again, and if it still fails, report it " +
+    "rather than deciding what the knowledge should say yourself.";
 /**
- * Read this deploy's placement rules, or say why not.
- *
- * Exported for testing. Any failure — an older backend without the route (404),
- * a network error, a body without markdown — yields the notice; never throws.
+ * GET a rules route and introduce its markdown with its `rulesVersion`, or
+ * return `unavailable`. Any failure — an older backend without the route
+ * (404), a network error, a body without markdown — yields the notice; never
+ * throws.
  */
-export async function readPlacementRules(client) {
+async function readServedRules(client, route, what, unavailable) {
     let response;
     try {
-        response = (await client.get(PLACEMENT_ROUTE));
+        response = (await client.get(route));
     }
     catch {
-        return PLACEMENT_UNAVAILABLE;
+        return unavailable;
     }
     const markdown = response?.markdown;
     if (typeof markdown !== "string" || markdown.trim() === "") {
-        return PLACEMENT_UNAVAILABLE;
+        return unavailable;
     }
     const version = typeof response.rulesVersion === "string" ? response.rulesVersion : "unknown";
-    return ("The prompt-element placement rules below are served live by this deploy " +
+    return (`The ${what} below are served live by this deploy ` +
         `(rulesVersion \`${version}\`).\n\n` +
         markdown);
 }
+/** Read this deploy's placement rules, or say why not. Exported for testing. */
+export async function readPlacementRules(client) {
+    return readServedRules(client, PLACEMENT_ROUTE, "prompt-element placement rules", PLACEMENT_UNAVAILABLE);
+}
+/** Read this deploy's semantic-knowledge rules, or say why not. Exported for testing. */
+export async function readSemanticKnowledgeRules(client) {
+    return readServedRules(client, SEMANTIC_KNOWLEDGE_ROUTE, "rules for writing the semantic layer", SEMANTIC_KNOWLEDGE_UNAVAILABLE);
+}
 export function registerConventions(server, client) {
     server.tool("axonity_conventions", "Read the authoring conventions BEFORE creating or updating anything: the " +
         "draft→publish lifecycle, optimistic locking, per-entity create contracts " +
@@ -1030,5 +1059,14 @@ export function registerConventions(server, client) {
             },
         ],
     }));
+    server.tool("axonity_semantic_conventions", "Read BEFORE building a workspace's semantic layer — reference docs with a " +
+        "`semanticKind` that say what a table means, what a word means, or which " +
+        "query fills which table. Returns this deploy's rules for writing that " +
+        "knowledge: what each kind is for, what belongs in it and what does not, " +
+        "and what a source query must say about one row of its result. Read live " +
+        "from the platform on every call, with its rulesVersion. Not needed for " +
+        "anything else.", {}, async () => ({
+        content: [{ type: "text", text: await readSemanticKnowledgeRules(client) }],
+    }));
 }
 //# sourceMappingURL=conventions.js.map

package/dist/tools/conventions.js.map

@@ -1 +1 @@
-{"version":3,"file":"conventions.js","sourceRoot":"","sources":["../../src/tools/conventions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAMH,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAy6B1B,CAAC;AAEF,mEAAmE;AACnE,MAAM,CAAC,MAAM,eAAe,GAAG,oCAAoC,CAAC;AAOpE;;;;GAIG;AACH,MAAM,qBAAqB,GACzB,iDAAiD;IACjD,wEAAwE;IACxE,UAAU,eAAe,iDAAiD;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,WAAW,CAAC;AAEd;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAqB;IAC5D,IAAI,QAA2B,CAAC;IAChC,IAAI,CAAC;QACH,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAsB,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,CAAC;IACpC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,MAAM,OAAO,GACX,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,OAAO,CACL,0EAA0E;QAC1E,mBAAmB,OAAO,UAAU;QACpC,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,MAAqB;IAC1E,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,2EAA2E;QACzE,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,+DAA+D,EACjE,EAAE,EACF,KAAK,IAAI,EAAE,CAAC,CAAC;QACX,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,GAAG,WAAW,KAAK,MAAM,kBAAkB,CAAC,MAAM,CAAC,EAAE;aAC5D;SACF;KACF,CAAC,CACH,CAAC;AACJ,CAAC"}
+{"version":3,"file":"conventions.js","sourceRoot":"","sources":["../../src/tools/conventions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAMH,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA66B1B,CAAC;AAEF,mEAAmE;AACnE,MAAM,CAAC,MAAM,eAAe,GAAG,oCAAoC,CAAC;AAEpE,yEAAyE;AACzE,MAAM,CAAC,MAAM,wBAAwB,GAAG,sCAAsC,CAAC;AAQ/E;;;;GAIG;AACH,MAAM,qBAAqB,GACzB,iDAAiD;IACjD,wEAAwE;IACxE,UAAU,eAAe,iDAAiD;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,WAAW,CAAC;AAEd,qFAAqF;AACrF,MAAM,8BAA8B,GAClC,2CAA2C;IAC3C,8EAA8E;IAC9E,UAAU,wBAAwB,4CAA4C;IAC9E,iEAAiE;IACjE,gDAAgD;IAChD,yEAAyE;IACzE,8DAA8D,CAAC;AAEjE;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAC5B,MAAqB,EACrB,KAAa,EACb,IAAY,EACZ,WAAmB;IAEnB,IAAI,QAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAkB,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,CAAC;IACpC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,OAAO,GACX,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,OAAO,CACL,OAAO,IAAI,wCAAwC;QACnD,mBAAmB,OAAO,UAAU;QACpC,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAqB;IAC5D,OAAO,eAAe,CACpB,MAAM,EACN,eAAe,EACf,gCAAgC,EAChC,qBAAqB,CACtB,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,MAAqB;IACpE,OAAO,eAAe,CACpB,MAAM,EACN,wBAAwB,EACxB,sCAAsC,EACtC,8BAA8B,CAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,MAAqB;IAC1E,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,2EAA2E;QACzE,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,+DAA+D,EACjE,EAAE,EACF,KAAK,IAAI,EAAE,CAAC,CAAC;QACX,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,GAAG,WAAW,KAAK,MAAM,kBAAkB,CAAC,MAAM,CAAC,EAAE;aAC5D;SACF;KACF,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,8BAA8B,EAC9B,4EAA4E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,gBAAgB,EAClB,EAAE,EACF,KAAK,IAAI,EAAE,CAAC,CAAC;QACX,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC;KACrF,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/tools/dataSources.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Warehouses, the syncs that copy from them, and the numbers read off the
+ * tables they fill (axonity-mcp#78, the connector half of axonity-flow#1849).
+ *
+ * The plain entity verbs — list/read/create/update/delete/restore for a data
+ * source, a table relationship and a dashboard — come from `registerEntityTools`
+ * (see `ENTITIES` in index.ts). What is here is everything that does not fit
+ * that shape: asking a warehouse something, the syncs that belong to ONE source,
+ * the measures a dashboard reads, and duplicating a dashboard.
+ *
+ * **Most writes here are administrator-only on the backend**, and a service
+ * token always resolves as a member. So against today's platform those calls
+ * answer 403, and `ForbiddenError` says why in words rather than as a generic
+ * "not allowed" — the tool descriptions say it up front as well, so an agent
+ * does not spend three calls discovering it. Whether that is the right line is
+ * the platform's decision, not this connector's: the tools exist so that the
+ * moment the backend lets a token through, they work.
+ *
+ * **Nothing here holds a credential.** A data source points at a secret by
+ * `secretId`; the key itself is put in the vault by a human (secret writes are
+ * deny-listed), and the source never carries it.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { AxonityClient } from "../client.js";
+/** The sentence every admin-only tool here carries, so it is said once. */
+export declare const ADMIN_ONLY: string;
+export declare function registerDataSourceTools(server: McpServer, client: AxonityClient): void;
+export declare function registerMeasureTools(server: McpServer, client: AxonityClient): void;
+export declare function registerDashboardTools(server: McpServer, client: AxonityClient): void;

package/dist/tools/dataSources.js

@@ -0,0 +1,229 @@
+/**
+ * Warehouses, the syncs that copy from them, and the numbers read off the
+ * tables they fill (axonity-mcp#78, the connector half of axonity-flow#1849).
+ *
+ * The plain entity verbs — list/read/create/update/delete/restore for a data
+ * source, a table relationship and a dashboard — come from `registerEntityTools`
+ * (see `ENTITIES` in index.ts). What is here is everything that does not fit
+ * that shape: asking a warehouse something, the syncs that belong to ONE source,
+ * the measures a dashboard reads, and duplicating a dashboard.
+ *
+ * **Most writes here are administrator-only on the backend**, and a service
+ * token always resolves as a member. So against today's platform those calls
+ * answer 403, and `ForbiddenError` says why in words rather than as a generic
+ * "not allowed" — the tool descriptions say it up front as well, so an agent
+ * does not spend three calls discovering it. Whether that is the right line is
+ * the platform's decision, not this connector's: the tools exist so that the
+ * moment the backend lets a token through, they work.
+ *
+ * **Nothing here holds a credential.** A data source points at a secret by
+ * `secretId`; the key itself is put in the vault by a human (secret writes are
+ * deny-listed), and the source never carries it.
+ */
+import { z } from "zod";
+import { guard, jsonResult } from "./result.js";
+const SOURCES = "/api/v1/data-sources";
+const MEASURES = "/api/v1/measures";
+/** The sentence every admin-only tool here carries, so it is said once. */
+export const ADMIN_ONLY = "\n\nADMINISTRATOR ONLY. The backend lets only a workspace administrator do " +
+    "this, and a service token always counts as a member — so a 403 \"Only " +
+    "administrators can perform this action\" means exactly that, not a broken " +
+    "call and not a missing scope. Do not retry: tell your human, who can do it " +
+    "in Axonity.";
+const SOURCE_ID = z.string().describe("The data source's id.");
+const SYNC_ID = z.string().describe("The sync's id (from list_data_source_syncs).");
+export function registerDataSourceTools(server, client) {
+    server.tool("list_data_source_drivers", "Which warehouses can be connected, and what each one needs. Read-only. " +
+        "\n\nREAD THIS BEFORE create_data_source. Each driver lists its " +
+        "`configFields` — name, label, description, required — and those names " +
+        "are exactly the keys `config` takes. Do not assume BigQuery's fields: " +
+        "the list is the platform's own, so a warehouse it adds works without " +
+        "this connector changing. " +
+        "\n\n`capabilities.pricesBeforeRunning` says whether a byte limit " +
+        "(`policy.maxBytesBilled`) can actually stop a query on that warehouse; " +
+        "where it is false, use `policy.maxSeconds` instead. `credentialKinds` " +
+        "says which kind of secret the source's `secretId` must point at.", {}, async () => guard(async () => jsonResult(await client.get(`${SOURCES}/drivers`))));
+    server.tool("test_data_source", "Ask the warehouse the cheapest question there is, and report what it " +
+        "said. Use it right after create_data_source, and whenever a sync or " +
+        "query fails for a reason that sounds like the connection. " +
+        "\n\nA FAILURE IS AN ANSWER, NOT AN ERROR: the response is " +
+        "`{ ok, message, checkedAt }`, and `ok: false` with a message is the " +
+        "warehouse telling you what is wrong (missing credential, wrong project, " +
+        "no access). Read `message` — the call itself succeeded." +
+        ADMIN_ONLY, { id: SOURCE_ID }, async ({ id }) => guard(async () => jsonResult(await client.post(`${SOURCES}/${id}/test`))));
+    server.tool("read_data_source_schema", "Which tables and columns the warehouse holds. Read-only, and free: it " +
+        "reads the warehouse's own catalogue, not the data. " +
+        "\n\nEach table's `name` is `container.table` — what you write in a " +
+        "query. `containerWord` is what this warehouse calls the container " +
+        "(\"dataset\" on BigQuery, \"schema\" on PostgreSQL). Column types are " +
+        "the warehouse's own names, passed through. Read this before writing a " +
+        "query or a sync, rather than guessing table names.", { id: SOURCE_ID }, async ({ id }) => guard(async () => jsonResult(await client.get(`${SOURCES}/${id}/schema`))));
+    server.tool("query_data_source", "Run a READ-ONLY SQL query against the warehouse and get the rows back. " +
+        "For looking — checking what a table holds, trying the query a sync " +
+        "will run. To fill a table regularly, use create_data_source_sync. " +
+        "\n\nTHE ROWS ARE CAPPED. `truncated: true` means rows were left out: " +
+        "`rowCount` is what came back, `totalRows` is what matched. Never report " +
+        "a count or a total off a truncated answer — aggregate in the SQL " +
+        "instead. `bytesScanned` is what it cost. " +
+        "\n\nTWO DIFFERENT FAILURES: a 422 is Axonity refusing the QUERY (it " +
+        "writes, reads a dataset the source forbids, names a personal column or " +
+        "uses `*` where personal columns are configured, would scan more than " +
+        "the source allows) — the reason says what to change. A 502 is the " +
+        "WAREHOUSE refusing or not answering — the query may be fine; do not " +
+        "rewrite it, check test_data_source." +
+        ADMIN_ONLY, {
+        id: SOURCE_ID,
+        sql: z
+            .string()
+            .describe("The query, in the warehouse's own dialect. Read-only: anything " +
+            "that writes is refused. Name tables as read_data_source_schema " +
+            "spells them."),
+        maxRows: z
+            .number()
+            .int()
+            .optional()
+            .describe("How many rows you want back. Clamped by the platform — a bigger " +
+            "answer belongs in a sync, not in a response."),
+    }, async ({ id, sql, maxRows }) => guard(async () => jsonResult(await client.post(`${SOURCES}/${id}/query`, {
+        sql,
+        ...(maxRows !== undefined ? { maxRows } : {}),
+    }))));
+    server.tool("list_data_source_syncs", "The syncs of ONE data source: the queries that keep tables filled from " +
+        "that warehouse, on a schedule. Read-only. " +
+        "\n\nEach sync says when it runs next (`nextFireAt`), when it last ran " +
+        "(`lastRunAt`), how many rows the table held afterwards " +
+        "(`lastRowCount`), and — when the last attempt wrote nothing — why " +
+        "(`lastError`). A `lastError` here is the first thing to read when a " +
+        "dashboard number looks stale.", { id: SOURCE_ID }, async ({ id }) => guard(async () => jsonResult(await client.get(`${SOURCES}/${id}/syncs`))));
+    server.tool("create_data_source_sync", "Set up a query that fills a table from this warehouse on a schedule. " +
+        "\n\nThe table must be a DYNAMIC table (create_data_table with " +
+        "`isDynamic: true`). Its rows then come from here, not from authoring. " +
+        "Try the SQL with query_data_source first: what one row of its result " +
+        "means decides what the table can be asked afterwards. " +
+        "\n\nThe response says when it will first run (`nextFireAt`). To run " +
+        "it now, follow with run_data_source_sync." +
+        ADMIN_ONLY, {
+        id: SOURCE_ID,
+        name: z.string().describe("What the sync is called."),
+        description: z.string().optional().describe("What it fills, and why."),
+        tableId: z
+            .string()
+            .describe("The dynamic table the result lands in (a data_table id)."),
+        sql: z
+            .string()
+            .describe("The query whose RESULT is copied into the table. Read-only, in the " +
+            "warehouse's own dialect."),
+        mode: z
+            .enum(["append", "upsert"])
+            .optional()
+            .describe("`upsert` (default) replaces rows whose key columns match and adds " +
+            "the rest. `append` adds everything that came back, every run — " +
+            "only right when each run returns NEW rows."),
+        keyColumns: z
+            .array(z.string())
+            .optional()
+            .describe("Which columns identify a row, for `upsert`. Without them an upsert " +
+            "has nothing to match on."),
+        cronExpr: z
+            .string()
+            .describe('When it runs, as a five-field cron expression, e.g. "0 6 * * *".'),
+        timezone: z
+            .string()
+            .optional()
+            .describe('The time zone the cron expression is read in. Defaults to "UTC".'),
+        enabled: z
+            .boolean()
+            .optional()
+            .describe("Whether it runs on its schedule. Defaults to true."),
+    }, async ({ id, ...fields }) => guard(async () => jsonResult(await client.post(`${SOURCES}/${id}/syncs`, fields))));
+    server.tool("run_data_source_sync", "Bring a sync's next run forward to now. " +
+        "\n\nTHIS DOES NOT WAIT FOR THE RESULT. The query can take tens of " +
+        "seconds, so the platform accepts the request and its scheduler runs " +
+        "it. The response is the sync with its new `nextFireAt`. To see how it " +
+        "went, read list_data_source_syncs again after a moment: `lastRunAt`, " +
+        "`lastRowCount` and `lastError` describe the run." +
+        ADMIN_ONLY, { id: SOURCE_ID, syncId: SYNC_ID }, async ({ id, syncId }) => guard(async () => jsonResult(await client.post(`${SOURCES}/${id}/syncs/${syncId}/run`))));
+    server.tool("delete_data_source_sync", "Stop a sync. The rows it already wrote STAY in the table; it simply " +
+        "stops refreshing them. Recoverable with restore_data_source_sync." +
+        ADMIN_ONLY, {
+        id: SOURCE_ID,
+        syncId: SYNC_ID,
+        confirm: z
+            .literal(true)
+            .describe("Must be true. Acknowledges the table stops being refreshed."),
+    }, async ({ id, syncId }) => guard(async () => jsonResult(await client.del(`${SOURCES}/${id}/syncs/${syncId}`))));
+    server.tool("restore_data_source_sync", "Bring a stopped sync back. It comes back SWITCHED OFF on purpose — a " +
+        "sync is usually stopped because it did the wrong thing — so switching " +
+        "it on again is a separate, deliberate step in Axonity." +
+        ADMIN_ONLY, { id: SOURCE_ID, syncId: SYNC_ID }, async ({ id, syncId }) => guard(async () => jsonResult(await client.post(`${SOURCES}/${id}/syncs/${syncId}/restore`))));
+}
+/** The period names a measure question accepts. Mirrors `PeriodPreset`. */
+const PERIODS = "today, this_week, last_week, this_month, last_month, this_quarter, " +
+    "year_to_date, last_30_days, last_12_months, all_time";
+export function registerMeasureTools(server, client) {
+    server.tool("read_measure_design", "What can be asked of one dynamic table: its published measures, its " +
+        "columns and its time axis. Read-only. " +
+        "\n\nRead this before query_measures or before putting a tile on a " +
+        "dashboard — a tile names a measure by the id or name this returns. " +
+        "Measures themselves are DEFINED on the table (update_data_table) and " +
+        "go live when the table is published; this only reads them.", {
+        tableId: z.string().describe("The dynamic table's id."),
+        useDraft: z
+            .boolean()
+            .optional()
+            .describe("Read the table's working design instead of its published one — to " +
+            "preview a measure before publishing. Defaults to false."),
+    }, async ({ tableId, useDraft }) => guard(async () => jsonResult(await client.get(`${MEASURES}/tables/${tableId}`, { useDraft }))));
+    server.tool("query_measures", "Compute measures: up to 40 questions in one call, each answered on its " +
+        "own. Read-only. This is where a dashboard's numbers come from. " +
+        "\n\nEach question is " +
+        "`{ key, tableId, measure, period?, start?, end?, compare?, grain?, " +
+        "splitBy?, filters?, limit?, useDraft? }`. `key` is your own label and " +
+        "comes back on the answer. `period` is one of: " +
+        PERIODS +
+        " (default this_month) — or set it to null and send `start`/`end` " +
+        "(YYYY-MM-DD) for a custom range. `compare` is none, previous_period or " +
+        "previous_year. `grain` (none, auto, day, week, month, quarter, year) " +
+        "draws a series. `splitBy` names a column to group by; `limit` (1-50) " +
+        "keeps the largest groups. " +
+        "\n\nONE BAD QUESTION DOES NOT FAIL THE CALL: every answer carries " +
+        "`ok`, and `ok: false` comes with an `error` of its own. Check each one. " +
+        "\n\n`freshAsOf` says how old the newest row behind the number is; " +
+        "`certified: false` means it was computed from a draft. Say so when you " +
+        "report a number that is either stale or uncertified.", {
+        queries: z
+            .array(z.record(z.unknown()))
+            .describe("The questions, 1 to 40, in the shape described above."),
+    }, async ({ queries }) => guard(async () => jsonResult(await client.post(`${MEASURES}/query`, { queries }))));
+    server.tool("list_measure_rows", "The first rows of a published dynamic table in an order — what a list " +
+        "tile shows (\"the ten biggest orders this month\"). Read-only. " +
+        "\n\n`matched` in the answer is how many rows matched before the limit, " +
+        "so you can say \"10 of 312\" rather than imply there are ten.", {
+        tableId: z.string().describe("The dynamic table's id."),
+        sortBy: z.string().optional().describe("The column to order by."),
+        descending: z
+            .boolean()
+            .optional()
+            .describe("Largest first. Defaults to true."),
+        limit: z.number().int().optional().describe("How many rows, 1-50. Defaults to 10."),
+        period: z
+            .string()
+            .optional()
+            .describe(`Only rows in this period, on the table's time axis: ${PERIODS}.`),
+        filters: z
+            .array(z.record(z.unknown()))
+            .optional()
+            .describe("Extra conditions, in the same shape a measure's filters take."),
+    }, async (body) => guard(async () => jsonResult(await client.post(`${MEASURES}/rows`, body))));
+}
+export function registerDashboardTools(server, client) {
+    server.tool("duplicate_dashboard", "Make a copy of a dashboard, owned by you. The copy starts as a separate " +
+        "dashboard: changing it does not touch the original.", {
+        id: z.string().describe("The dashboard to copy."),
+        name: z
+            .string()
+            .optional()
+            .describe("The copy's name. Omit for the platform's default."),
+    }, async ({ id, name }) => guard(async () => jsonResult(await client.post(`/api/v1/dashboards/${id}/duplicate`, name ? { name } : {}))));
+}
+//# sourceMappingURL=dataSources.js.map

package/dist/tools/dataSources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataSources.js","sourceRoot":"","sources":["../../src/tools/dataSources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,OAAO,GAAG,sBAAsB,CAAC;AACvC,MAAM,QAAQ,GAAG,kBAAkB,CAAC;AAEpC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,UAAU,GACrB,6EAA6E;IAC7E,wEAAwE;IACxE,4EAA4E;IAC5E,6EAA6E;IAC7E,aAAa,CAAC;AAEhB,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;AAC/D,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;AAEpF,MAAM,UAAU,uBAAuB,CACrC,MAAiB,EACjB,MAAqB;IAErB,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,yEAAyE;QACvE,iEAAiE;QACjE,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,2BAA2B;QAC3B,mEAAmE;QACnE,yEAAyE;QACzE,wEAAwE;QACxE,kEAAkE,EACpE,EAAE,EACF,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,UAAU,CAAC,CAAC,CAAC,CAClF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,uEAAuE;QACrE,sEAAsE;QACtE,4DAA4D;QAC5D,4DAA4D;QAC5D,sEAAsE;QACtE,0EAA0E;QAC1E,yDAAyD;QACzD,UAAU,EACZ,EAAE,EAAE,EAAE,SAAS,EAAE,EACjB,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CACf,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAC5E,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB,wEAAwE;QACtE,qDAAqD;QACrD,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,wEAAwE;QACxE,oDAAoD,EACtD,EAAE,EAAE,EAAE,SAAS,EAAE,EACjB,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CACf,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAC7E,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,yEAAyE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE,uEAAuE;QACvE,0EAA0E;QAC1E,mEAAmE;QACnE,2CAA2C;QAC3C,sEAAsE;QACtE,yEAAyE;QACzE,uEAAuE;QACvE,oEAAoE;QACpE,sEAAsE;QACtE,qCAAqC;QACrC,UAAU,EACZ;QACE,EAAE,EAAE,SAAS;QACb,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,CACP,iEAAiE;YAC/D,iEAAiE;YACjE,cAAc,CACjB;QACH,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CACP,kEAAkE;YAChE,8CAA8C,CACjD;KACJ,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAC7B,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CACR,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,EAAE,QAAQ,EAAE;QAC1C,GAAG;QACH,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CACH,CACF,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,yEAAyE;QACvE,4CAA4C;QAC5C,wEAAwE;QACxE,yDAAyD;QACzD,oEAAoE;QACpE,sEAAsE;QACtE,+BAA+B,EACjC,EAAE,EAAE,EAAE,SAAS,EAAE,EACjB,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CACf,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAC5E,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB,uEAAuE;QACrE,gEAAgE;QAChE,wEAAwE;QACxE,uEAAuE;QACvE,wDAAwD;QACxD,sEAAsE;QACtE,2CAA2C;QAC3C,UAAU,EACZ;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QACtE,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,QAAQ,CAAC,0DAA0D,CAAC;QACvE,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,CACP,qEAAqE;YACnE,0BAA0B,CAC7B;QACH,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;aAC1B,QAAQ,EAAE;aACV,QAAQ,CACP,oEAAoE;YAClE,iEAAiE;YACjE,4CAA4C,CAC/C;QACH,UAAU,EAAE,CAAC;aACV,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,qEAAqE;YACnE,0BAA0B,CAC7B;QACH,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,CAAC,kEAAkE,CAAC;QAC/E,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,kEAAkE,CAAC;QAC/E,OAAO,EAAE,CAAC;aACP,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,oDAAoD,CAAC;KAClE,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAC1B,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CACrF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,0CAA0C;QACxC,oEAAoE;QACpE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,kDAAkD;QAClD,UAAU,EACZ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,EAClC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACvB,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,EAAE,UAAU,MAAM,MAAM,CAAC,CAAC,CACtE,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB,sEAAsE;QACpE,mEAAmE;QACnE,UAAU,EACZ;QACE,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,CAAC;aACP,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,6DAA6D,CAAC;KAC3E,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACvB,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,EAAE,UAAU,MAAM,EAAE,CAAC,CAAC,CACjE,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,uEAAuE;QACrE,wEAAwE;QACxE,wDAAwD;QACxD,UAAU,EACZ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,EAClC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACvB,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,EAAE,UAAU,MAAM,UAAU,CAAC,CAAC,CAC1E,CACJ,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,OAAO,GACX,qEAAqE;IACrE,sDAAsD,CAAC;AAEzD,MAAM,UAAU,oBAAoB,CAClC,MAAiB,EACjB,MAAqB;IAErB,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,sEAAsE;QACpE,wCAAwC;QACxC,oEAAoE;QACpE,qEAAqE;QACrE,uEAAuE;QACvE,4DAA4D,EAC9D;QACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QACvD,QAAQ,EAAE,CAAC;aACR,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CACP,oEAAoE;YAClE,yDAAyD,CAC5D;KACJ,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAC9B,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,WAAW,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAC5E,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,yEAAyE;QACvE,iEAAiE;QACjE,uBAAuB;QACvB,qEAAqE;QACrE,wEAAwE;QACxE,gDAAgD;QAChD,OAAO;QACP,mEAAmE;QACnE,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,4BAA4B;QAC5B,oEAAoE;QACpE,0EAA0E;QAC1E,oEAAoE;QACpE,yEAAyE;QACzE,sDAAsD,EACxD;QACE,OAAO,EAAE,CAAC;aACP,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;aAC5B,QAAQ,CAAC,uDAAuD,CAAC;KACrE,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CACpB,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CACrF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,wEAAwE;QACtE,iEAAiE;QACjE,yEAAyE;QACzE,+DAA+D,EACjE;QACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QACvD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QACjE,UAAU,EAAE,CAAC;aACV,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,kCAAkC,CAAC;QAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QACnF,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,uDAAuD,OAAO,GAAG,CAAC;QAC9E,OAAO,EAAE,CAAC;aACP,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;aAC5B,QAAQ,EAAE;aACV,QAAQ,CAAC,+DAA+D,CAAC;KAC7E,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAC3F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAiB,EACjB,MAAqB;IAErB,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,0EAA0E;QACxE,qDAAqD,EACvD;QACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QACjD,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,mDAAmD,CAAC;KACjE,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CACrB,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CACR,MAAM,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9E,CACF,CACJ,CAAC;AACJ,CAAC"}

package/dist/tools/extras.js

@@ -27,9 +27,25 @@ export function registerPersonaTools(server, client) {
     // used to be hand-written here. Only the agent-scoped create/read above are
     // bespoke, because personas have no standalone create route.
 }
+/**
+ * The shape `implementation` must have for a connector to run.
+ *
+ * An author wrote `headers` as an object instead of a list of entries; it saved
+ * and then crashed at execution with an error that pointed at the network (#78).
+ * The platform is getting a save-time check for it, but the description is
+ * where an agent learns the shape BEFORE its first attempt, so it says it.
+ */
+const CONNECTOR_SHAPE = "\n\nSHAPE OF `implementation` — `headers` and `queryParams` are LISTS of " +
+    '`{ "key": "…", "value": "…", "enabled": true }`, never an object like ' +
+    '`{ "Accept": "application/json" }`. `body` is ' +
+    '`{ "type": "json" | "form" | "none", "content": "<the raw payload as a ' +
+    'string>" }`. Use `{{name}}` in a value to fill it from the tool\'s input. ' +
+    "Any other shape cannot run: the connector saves and then fails when " +
+    "called, with an error that does not point here.";
 export function registerConnectorTools(server, client) {
     server.tool("create_connector", "Create a connector draft (a tool of type 'connector'). Do NOT put real " +
-        "credentials in authConfig — use placeholders; a human fills secrets in Axonity.", {
+        "credentials in authConfig — use placeholders; a human fills secrets in Axonity." +
+        CONNECTOR_SHAPE, {
         fields: z
             .record(z.unknown())
             .describe("Connector fields (name, description, implementation, authConfig)."),
@@ -38,7 +54,8 @@ export function registerConnectorTools(server, client) {
         return jsonResult(await client.post("/api/v1/tools", { type: "connector", ...fields }));
     }));
     server.tool("update_connector", "Update a connector draft (a tool of type 'connector'). Read it first for its " +
-        "version; keep authConfig as placeholders only.", {
+        "version; keep authConfig as placeholders only." +
+        CONNECTOR_SHAPE, {
         id: z.string().describe("The connector (tool) id."),
         expectedVersion: z.number().int().describe("Version last read — 409 if stale."),
         fields: z.record(z.unknown()).describe("Fields to change (camelCase)."),

package/dist/tools/extras.js.map

@@ -1 +1 @@
-{"version":3,"file":"extras.js","sourceRoot":"","sources":["../../src/tools/extras.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9D,MAAM,UAAU,oBAAoB,CAClC,MAAiB,EACjB,MAAqB;IAErB,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,8EAA8E;QAC5E,sCAAsC,EACxC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,EACnD,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CACpB,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,kBAAkB,OAAO,UAAU,CAAC,CAAC,CAClE,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,0EAA0E,EAC1E;QACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAC/C,MAAM,EAAE,CAAC;aACN,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;aACnB,QAAQ,CAAC,6DAA6D,CAAC;KAC3E,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAC5B,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,OAAO,UAAU,EAAE,MAAM,CAAC,CAAC,CAC3E,CACJ,CAAC;IAEF,yEAAyE;IACzE,+EAA+E;IAC/E,6EAA6E;IAC7E,4EAA4E;IAC5E,6DAA6D;AAC/D,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAiB,EACjB,MAAqB;IAErB,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,yEAAyE;QACvE,iFAAiF,EACnF;QACE,MAAM,EAAE,CAAC;aACN,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;aACnB,QAAQ,CAAC,mEAAmE,CAAC;KACjF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACnB,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,UAAU,CACf,MAAM,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE,CAAC,CACrE,CAAC;IACJ,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,+EAA+E;QAC7E,gDAAgD,EAClD;QACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACnD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAC/E,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;KACxE,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE,CACxC,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,UAAU,CACf,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,EAAE;YACtC,eAAe;YACf,IAAI,EAAE,WAAW;YACjB,GAAG,MAAM;SACV,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,eAAe,GAAG;IACtB,IAAI;IACJ,MAAM;IACN,OAAO;IACP,aAAa;IACb,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,OAAO;CACC,CAAC;AAEX,4DAA4D;AAC5D,MAAM,UAAU,eAAe,CAC7B,QAAiC,EACjC,OAAe;IAEf,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE1C,OAAO;QACL,GAAG,QAAQ;QACX,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,GAAG,CAAC;YACxD,MAAM,MAAM,GAAG,GAA8B,CAAC;YAC9C,MAAM,IAAI,GAA4B,EAAE,CAAC;YACzC,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;gBACpC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS;oBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QACF,yEAAyE;QACzE,+CAA+C;QAC/C,aAAa,EACX,yEAAyE;YACzE,sDAAsD;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAiB,EACjB,MAAqB;IAErB;;;;OAIG;IACH,MAAM,IAAI,GAAG,CACX,OAAe,EACf,MAAc,EACd,IAAsC,EACtC,QAAgB,EAChB,SAAiB;IACjB;;;;;OAKG;IACH,QAAiB,EACjB,EAAE;QACF,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAElE,MAAM,CAAC,IAAI,CACT,UAAU,OAAO,OAAO,MAAM,EAAE,EAChC,WAAW,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,MAAM,WAAW,MAAM,WAAW;YAC7E,CAAC,QAAQ;gBACP,CAAC,CAAC,4BAA4B,QAAQ,6BAA6B,MAAM,KAAK;oBAC5E,6DAA6D,MAAM,QAAQ;oBAC3E,cAAc;gBAChB,CAAC,CAAC,EAAE,CAAC,EACT,KAAK,EACL,KAAK,EAAE,IAA4B,EAAE,EAAE,CACrC,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CACrE,CACJ,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,UAAU,OAAO,SAAS,MAAM,EAAE,EAClC,aAAa,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,MAAM,cAAc;YACnE,0BAA0B,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,yBAAyB;YAC5E,wEAAwE;YACxE,2EAA2E;YAC3E,0EAA0E;YAC1E,4BAA4B;YAC5B,CAAC,QAAQ,CAAC,CAAC,CAAC,gCAAgC,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EACjE,KAAK,EACL,KAAK,EAAE,IAA4B,EAAE,EAAE,CACrC,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,YAAY,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YACpE,QAAQ;YACR,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE;SACtE,CAAC,CACH,CACJ,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,CACF,OAAO,EACP,OAAO,EACP,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,kBAAkB,OAAO,cAAc,OAAO,EAAE,EACtE,SAAS,EACT,SAAS,EACT,mBAAmB,CACpB,CAAC;IACF,yEAAyE;IACzE,0EAA0E;IAC1E,sEAAsE;IACtE,0EAA0E;IAC1E,sDAAsD;IACtD,IAAI,CACF,OAAO,EACP,UAAU,EACV,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,qBAAqB,UAAU,cAAc,OAAO,EAAE,EAC/E,YAAY,EACZ,SAAS,EACT,sBAAsB,CACvB,CAAC;IACF,IAAI,CACF,QAAQ,EACR,OAAO,EACP,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,kBAAkB,OAAO,aAAa,QAAQ,EAAE,EACvE,SAAS,EACT,UAAU,EACV,qBAAqB,CACtB,CAAC;IACF,IAAI,CACF,WAAW,EACX,OAAO,EACP,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,kBAAkB,OAAO,mBAAmB,KAAK,EAAE,EACvE,SAAS,EACT,OAAO,EACP,2BAA2B,CAC5B,CAAC;IACF,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,gBAAgB;IAChB,IAAI,CACF,WAAW,EACX,UAAU,EACV,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,CACpB,qBAAqB,UAAU,mBAAmB,KAAK,EAAE,EAC3D,YAAY,EACZ,OAAO,EACP,8BAA8B,CAC/B,CAAC;IAEF;;;;;OAKG;IACH,MAAM,SAAS,GAAG,CAChB,OAAe,EACf,MAAc,EACd,IAAiC;IACjC,uFAAuF;IACvF,OAAe,EACf,EAAE;QACF,MAAM,CAAC,IAAI,CACT,cAAc,MAAM,EAAE,EACtB,YAAY,OAAO,oDAAoD;YACrE,UAAU,OAAO,yDAAyD;YAC1E,yDAAyD;YACzD,qEAAqE;YACrE,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,0BAA0B,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,GAAG;YACpF,wEAAwE;YACxE,oCAAoC;YACpC,qEAAqE;YACrE,yEAAyE;YACzE,qEAAqE;YACrE,qDAAqD,EACvD;YACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC/C,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,mEAAmE;gBACjE,iBAAiB,CACpB;YACH,SAAS,EAAE,CAAC;iBACT,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;iBAC1B,QAAQ,EAAE;iBACV,QAAQ,CACP,oEAAoE;gBAClE,mEAAmE;gBACnE,8DAA8D,CACjE;SACJ,EACD,KAAK,EAAE,EACL,OAAO,EACP,UAAU,EACV,SAAS,GAKV,EAAE,EAAE,CACH,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,QAAQ,GAAG,UAAU;gBACzB,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAA0B,IAAI,CAAC,OAAO,CAAC,EAAE;oBACvD,WAAW,EAAE,UAAU;iBACxB,CAAC;gBACJ,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAA0B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7D,IAAI,SAAS,KAAK,MAAM;gBAAE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;YACtD,OAAO,UAAU,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CACL,CAAC;IACJ,CAAC,CAAC;IAEF,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,kBAAkB,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACjF,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,kBAAkB,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACrF,SAAS,CACP,eAAe,EACf,gBAAgB,EAChB,CAAC,EAAE,EAAE,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,EAC7C,YAAY,CACb,CAAC;IAEF;;;;;;;;;OASG;IACH,MAAM,iBAAiB,GAAG,CACxB,OAAe,EACf,MAAc,EACd,IAAoC;IACpC,0EAA0E;IAC1E,OAAe;IACf,gDAAgD;IAChD,QAAgB;IAChB;;;;;;OAMG;IACH,UAAkB,EAClB,EAAE;QACF,MAAM,CAAC,IAAI,CACT,iBAAiB,MAAM,EAAE,EACzB,YAAY,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,oCAAoC;YACtE,4BAA4B,UAAU,qCAAqC;YAC3E,mEAAmE;YACnE,sEAAsE;YACtE,oEAAoE;YACpE,sBAAsB;YACtB,oEAAoE;YACpE,iBAAiB,QAAQ,GAAG,EAC9B;YACE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YACrD,SAAS,EAAE,CAAC;iBACT,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;iBAC1B,QAAQ,EAAE;iBACV,QAAQ,CACP,oEAAoE;gBAClE,gDAAgD,OAAO,SAAS;gBAChE,WAAW,CACd;SACJ,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,CAClC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAC/B,IAAI,CAAC,UAAU,CAAC,CACjB,CAAC;YACF,IAAI,SAAS,KAAK,MAAM;gBAAE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;YACtD,OAAO,UAAU,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CACL,CAAC;IACJ,CAAC,CAAC;IAEF,iBAAiB,CACf,OAAO,EACP,QAAQ,EACR,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAqB,EAAE,YAAY,EAC3C,QAAQ,EACR,oCAAoC,EACpC,OAAO,CACR,CAAC;IACF,iBAAiB,CACf,eAAe,EACf,gBAAgB,EAChB,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAqB,EAAE,iBAAiB,EAChD,YAAY,EACZ,2CAA2C,EAC3C,WAAW,CACZ,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAiB,EACjB,MAAqB;IAErB,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,2EAA2E;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,yBAAyB;QACzB,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,iEAAiE;QACjE,qEAAqE;QACrE,oEAAoE;QACpE,2CAA2C,EAC7C;QACE,UAAU,EAAE,CAAC;aACV,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;aAC5D,QAAQ,CACP,iEAAiE;YAC/D,iDAAiD,CACpD;QACH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;KACnD,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CACjC,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CACR,MAAM,MAAM,CAAC,GAAG,CAAC,2BAA2B,UAAU,IAAI,QAAQ,EAAE,CAAC,CACtE,CACF,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,0EAA0E;QACxE,uDAAuD;QACvD,yEAAyE;QACzE,qEAAqE;QACrE,aAAa;QACb,wEAAwE;QACxE,0EAA0E;QAC1E,qDAAqD;QACrD,wEAAwE;QACxE,uDAAuD,EACzD;QACE,UAAU,EAAE,CAAC;aACV,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;aAC1C,QAAQ,CAAC,6CAA6C,CAAC;QAC1D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;KACjD,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CACjC,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,KAAK,GAA2B;YACpC,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,wBAAwB;SACxC,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/B,wEAAwE;QACxE,sEAAsE;QACtE,6DAA6D;QAC7D,oEAAoE;QACpE,uEAAuE;QACvE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,sDAAsD,UAAU,KAAK;gBACnE,aAAa,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB;gBACjE,gEAAgE;gBAChE,2BAA2B,CAC9B,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,QAAQ,mBAAmB,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CACL,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,MAAqB;IAC3E,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,4EAA4E;QAC1E,2EAA2E;QAC3E,sCAAsC,EACxC,EAAE,EACF,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,CACpF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,uEAAuE;QACrE,oEAAoE;QACpE,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE,EACtE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,EACjD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACnB,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,MAAM,QAAQ,CAAC,CAAC,CAAC,CACpF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,0DAA0D,EAC1D,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,EAC9D,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CACtB,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,2BAA2B,SAAS,QAAQ,CAAC,CAAC,CAC5E,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,0EAA0E;QACxE,0EAA0E;QAC1E,uEAAuE;QACvE,YAAY,EACd,EAAE,EACF,KAAK,IAAI,EAAE,CACT,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAC5E,CAAC;IAEF;;;;OAIG;IACH,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,uEAAuE;QACrE,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,YAAY,EACd;QACE,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;aAC1C,QAAQ,EAAE;aACV,QAAQ,CACP,qEAAqE;YACnE,uCAAuC,CAC1C;KACJ,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CACjB,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CACR,MAAM,MAAM,CAAC,GAAG,CACd;QACE,GAAG,EAAE,mBAAmB;QACxB,KAAK,EAAE,yBAAyB;QAChC,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,4BAA4B;KACvC,CAAC,IAAI,IAAI,KAAK,CAAC,CACjB,CACF,CACF,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,4EAA4E;QAC1E,wDAAwD,EAC1D,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC,EAAE,EAC9E,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CACvB,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC,CAChE,CACJ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"extras.js","sourceRoot":"","sources":["../../src/tools/extras.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9D,MAAM,UAAU,oBAAoB,CAClC,MAAiB,EACjB,MAAqB;IAErB,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,8EAA8E;QAC5E,sCAAsC,EACxC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,EACnD,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CACpB,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,kBAAkB,OAAO,UAAU,CAAC,CAAC,CAClE,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,0EAA0E,EAC1E;QACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAC/C,MAAM,EAAE,CAAC;aACN,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;aACnB,QAAQ,CAAC,6DAA6D,CAAC;KAC3E,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAC5B,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,OAAO,UAAU,EAAE,MAAM,CAAC,CAAC,CAC3E,CACJ,CAAC;IAEF,yEAAyE;IACzE,+EAA+E;IAC/E,6EAA6E;IAC7E,4EAA4E;IAC5E,6DAA6D;AAC/D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,eAAe,GACnB,2EAA2E;IAC3E,wEAAwE;IACxE,gDAAgD;IAChD,yEAAyE;IACzE,4EAA4E;IAC5E,sEAAsE;IACtE,iDAAiD,CAAC;AAEpD,MAAM,UAAU,sBAAsB,CACpC,MAAiB,EACjB,MAAqB;IAErB,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,yEAAyE;QACvE,iFAAiF;QACjF,eAAe,EACjB;QACE,MAAM,EAAE,CAAC;aACN,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;aACnB,QAAQ,CAAC,mEAAmE,CAAC;KACjF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACnB,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,UAAU,CACf,MAAM,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE,CAAC,CACrE,CAAC;IACJ,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,+EAA+E;QAC7E,gDAAgD;QAChD,eAAe,EACjB;QACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACnD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAC/E,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;KACxE,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE,CACxC,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,UAAU,CACf,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,EAAE;YACtC,eAAe;YACf,IAAI,EAAE,WAAW;YACjB,GAAG,MAAM;SACV,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,eAAe,GAAG;IACtB,IAAI;IACJ,MAAM;IACN,OAAO;IACP,aAAa;IACb,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,OAAO;CACC,CAAC;AAEX,4DAA4D;AAC5D,MAAM,UAAU,eAAe,CAC7B,QAAiC,EACjC,OAAe;IAEf,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE1C,OAAO;QACL,GAAG,QAAQ;QACX,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,GAAG,CAAC;YACxD,MAAM,MAAM,GAAG,GAA8B,CAAC;YAC9C,MAAM,IAAI,GAA4B,EAAE,CAAC;YACzC,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;gBACpC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS;oBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QACF,yEAAyE;QACzE,+CAA+C;QAC/C,aAAa,EACX,yEAAyE;YACzE,sDAAsD;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAiB,EACjB,MAAqB;IAErB;;;;OAIG;IACH,MAAM,IAAI,GAAG,CACX,OAAe,EACf,MAAc,EACd,IAAsC,EACtC,QAAgB,EAChB,SAAiB;IACjB;;;;;OAKG;IACH,QAAiB,EACjB,EAAE;QACF,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAElE,MAAM,CAAC,IAAI,CACT,UAAU,OAAO,OAAO,MAAM,EAAE,EAChC,WAAW,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,MAAM,WAAW,MAAM,WAAW;YAC7E,CAAC,QAAQ;gBACP,CAAC,CAAC,4BAA4B,QAAQ,6BAA6B,MAAM,KAAK;oBAC5E,6DAA6D,MAAM,QAAQ;oBAC3E,cAAc;gBAChB,CAAC,CAAC,EAAE,CAAC,EACT,KAAK,EACL,KAAK,EAAE,IAA4B,EAAE,EAAE,CACrC,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CACrE,CACJ,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,UAAU,OAAO,SAAS,MAAM,EAAE,EAClC,aAAa,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,MAAM,cAAc;YACnE,0BAA0B,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,yBAAyB;YAC5E,wEAAwE;YACxE,2EAA2E;YAC3E,0EAA0E;YAC1E,4BAA4B;YAC5B,CAAC,QAAQ,CAAC,CAAC,CAAC,gCAAgC,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EACjE,KAAK,EACL,KAAK,EAAE,IAA4B,EAAE,EAAE,CACrC,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,YAAY,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YACpE,QAAQ;YACR,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE;SACtE,CAAC,CACH,CACJ,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,CACF,OAAO,EACP,OAAO,EACP,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,kBAAkB,OAAO,cAAc,OAAO,EAAE,EACtE,SAAS,EACT,SAAS,EACT,mBAAmB,CACpB,CAAC;IACF,yEAAyE;IACzE,0EAA0E;IAC1E,sEAAsE;IACtE,0EAA0E;IAC1E,sDAAsD;IACtD,IAAI,CACF,OAAO,EACP,UAAU,EACV,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,qBAAqB,UAAU,cAAc,OAAO,EAAE,EAC/E,YAAY,EACZ,SAAS,EACT,sBAAsB,CACvB,CAAC;IACF,IAAI,CACF,QAAQ,EACR,OAAO,EACP,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,kBAAkB,OAAO,aAAa,QAAQ,EAAE,EACvE,SAAS,EACT,UAAU,EACV,qBAAqB,CACtB,CAAC;IACF,IAAI,CACF,WAAW,EACX,OAAO,EACP,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,kBAAkB,OAAO,mBAAmB,KAAK,EAAE,EACvE,SAAS,EACT,OAAO,EACP,2BAA2B,CAC5B,CAAC;IACF,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,gBAAgB;IAChB,IAAI,CACF,WAAW,EACX,UAAU,EACV,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,CACpB,qBAAqB,UAAU,mBAAmB,KAAK,EAAE,EAC3D,YAAY,EACZ,OAAO,EACP,8BAA8B,CAC/B,CAAC;IAEF;;;;;OAKG;IACH,MAAM,SAAS,GAAG,CAChB,OAAe,EACf,MAAc,EACd,IAAiC;IACjC,uFAAuF;IACvF,OAAe,EACf,EAAE;QACF,MAAM,CAAC,IAAI,CACT,cAAc,MAAM,EAAE,EACtB,YAAY,OAAO,oDAAoD;YACrE,UAAU,OAAO,yDAAyD;YAC1E,yDAAyD;YACzD,qEAAqE;YACrE,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,0BAA0B,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,GAAG;YACpF,wEAAwE;YACxE,oCAAoC;YACpC,qEAAqE;YACrE,yEAAyE;YACzE,qEAAqE;YACrE,qDAAqD,EACvD;YACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC/C,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,mEAAmE;gBACjE,iBAAiB,CACpB;YACH,SAAS,EAAE,CAAC;iBACT,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;iBAC1B,QAAQ,EAAE;iBACV,QAAQ,CACP,oEAAoE;gBAClE,mEAAmE;gBACnE,8DAA8D,CACjE;SACJ,EACD,KAAK,EAAE,EACL,OAAO,EACP,UAAU,EACV,SAAS,GAKV,EAAE,EAAE,CACH,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,QAAQ,GAAG,UAAU;gBACzB,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAA0B,IAAI,CAAC,OAAO,CAAC,EAAE;oBACvD,WAAW,EAAE,UAAU;iBACxB,CAAC;gBACJ,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAA0B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7D,IAAI,SAAS,KAAK,MAAM;gBAAE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;YACtD,OAAO,UAAU,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CACL,CAAC;IACJ,CAAC,CAAC;IAEF,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,kBAAkB,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACjF,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,kBAAkB,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACrF,SAAS,CACP,eAAe,EACf,gBAAgB,EAChB,CAAC,EAAE,EAAE,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,EAC7C,YAAY,CACb,CAAC;IAEF;;;;;;;;;OASG;IACH,MAAM,iBAAiB,GAAG,CACxB,OAAe,EACf,MAAc,EACd,IAAoC;IACpC,0EAA0E;IAC1E,OAAe;IACf,gDAAgD;IAChD,QAAgB;IAChB;;;;;;OAMG;IACH,UAAkB,EAClB,EAAE;QACF,MAAM,CAAC,IAAI,CACT,iBAAiB,MAAM,EAAE,EACzB,YAAY,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,oCAAoC;YACtE,4BAA4B,UAAU,qCAAqC;YAC3E,mEAAmE;YACnE,sEAAsE;YACtE,oEAAoE;YACpE,sBAAsB;YACtB,oEAAoE;YACpE,iBAAiB,QAAQ,GAAG,EAC9B;YACE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YACrD,SAAS,EAAE,CAAC;iBACT,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;iBAC1B,QAAQ,EAAE;iBACV,QAAQ,CACP,oEAAoE;gBAClE,gDAAgD,OAAO,SAAS;gBAChE,WAAW,CACd;SACJ,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,CAClC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAC/B,IAAI,CAAC,UAAU,CAAC,CACjB,CAAC;YACF,IAAI,SAAS,KAAK,MAAM;gBAAE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;YACtD,OAAO,UAAU,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CACL,CAAC;IACJ,CAAC,CAAC;IAEF,iBAAiB,CACf,OAAO,EACP,QAAQ,EACR,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAqB,EAAE,YAAY,EAC3C,QAAQ,EACR,oCAAoC,EACpC,OAAO,CACR,CAAC;IACF,iBAAiB,CACf,eAAe,EACf,gBAAgB,EAChB,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAqB,EAAE,iBAAiB,EAChD,YAAY,EACZ,2CAA2C,EAC3C,WAAW,CACZ,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAiB,EACjB,MAAqB;IAErB,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,2EAA2E;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,yBAAyB;QACzB,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,iEAAiE;QACjE,qEAAqE;QACrE,oEAAoE;QACpE,2CAA2C,EAC7C;QACE,UAAU,EAAE,CAAC;aACV,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;aAC5D,QAAQ,CACP,iEAAiE;YAC/D,iDAAiD,CACpD;QACH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;KACnD,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CACjC,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CACR,MAAM,MAAM,CAAC,GAAG,CAAC,2BAA2B,UAAU,IAAI,QAAQ,EAAE,CAAC,CACtE,CACF,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,0EAA0E;QACxE,uDAAuD;QACvD,yEAAyE;QACzE,qEAAqE;QACrE,aAAa;QACb,wEAAwE;QACxE,0EAA0E;QAC1E,qDAAqD;QACrD,wEAAwE;QACxE,uDAAuD,EACzD;QACE,UAAU,EAAE,CAAC;aACV,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;aAC1C,QAAQ,CAAC,6CAA6C,CAAC;QAC1D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;KACjD,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CACjC,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,KAAK,GAA2B;YACpC,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,wBAAwB;SACxC,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/B,wEAAwE;QACxE,sEAAsE;QACtE,6DAA6D;QAC7D,oEAAoE;QACpE,uEAAuE;QACvE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,sDAAsD,UAAU,KAAK;gBACnE,aAAa,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB;gBACjE,gEAAgE;gBAChE,2BAA2B,CAC9B,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,QAAQ,mBAAmB,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CACL,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,MAAqB;IAC3E,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,4EAA4E;QAC1E,2EAA2E;QAC3E,sCAAsC,EACxC,EAAE,EACF,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,CACpF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,uEAAuE;QACrE,oEAAoE;QACpE,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE,EACtE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,EACjD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACnB,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,MAAM,QAAQ,CAAC,CAAC,CAAC,CACpF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,0DAA0D,EAC1D,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,EAC9D,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CACtB,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,2BAA2B,SAAS,QAAQ,CAAC,CAAC,CAC5E,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,0EAA0E;QACxE,0EAA0E;QAC1E,uEAAuE;QACvE,YAAY,EACd,EAAE,EACF,KAAK,IAAI,EAAE,CACT,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAC5E,CAAC;IAEF;;;;OAIG;IACH,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,uEAAuE;QACrE,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,YAAY,EACd;QACE,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;aAC1C,QAAQ,EAAE;aACV,QAAQ,CACP,qEAAqE;YACnE,uCAAuC,CAC1C;KACJ,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CACjB,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CACR,MAAM,MAAM,CAAC,GAAG,CACd;QACE,GAAG,EAAE,mBAAmB;QACxB,KAAK,EAAE,yBAAyB;QAChC,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,4BAA4B;KACvC,CAAC,IAAI,IAAI,KAAK,CAAC,CACjB,CACF,CACF,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,4EAA4E;QAC1E,wDAAwD,EAC1D,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC,EAAE,EAC9E,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CACvB,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC,CAChE,CACJ,CAAC;AACJ,CAAC"}

package/dist/tools/register.d.ts

@@ -144,5 +144,12 @@ export interface EntityDef {
      * is not acceptable unlabelled, so the entity that has one says so here.
      */
     updateWarning?: string;
+    /**
+     * Appended to `create_<entity>`'s description when creating one takes more
+     * than "pass its fields" — a value to look up first, or a permission the
+     * caller may not have. A data source is the case that asked for it: its
+     * `config` keys come from the driver, and a guessed key is a 422.
+     */
+    createNote?: string;
 }
 export declare function registerEntityTools(server: McpServer, client: AxonityClient, def: EntityDef): void;

package/dist/tools/register.js

@@ -97,7 +97,8 @@ export function registerEntityTools(server, client, def) {
     if (creatable) {
         server.tool(`create_${singular}`, `Create a new ${singular} draft. Pass the entity's fields (camelCase) in ` +
             `\`fields\`; the backend validates them. Returns the created ${singular} ` +
-            `with its id and version.`, {
+            `with its id and version.` +
+            (def.createNote ? `\n\n${def.createNote}` : ""), {
             fields: z
                 .record(z.unknown())
                 .describe(`The ${singular}'s fields as a JSON object (camelCase keys), e.g. ` +

package/dist/tools/register.js.map

@@ -1 +1 @@
-{"version":3,"file":"register.js","sourceRoot":"","sources":["../../src/tools/register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEhD,+EAA+E;AAC/E,MAAM,OAAO,GAAG,CAAC;KACd,OAAO,CAAC,IAAI,CAAC;KACb,QAAQ,CAAC,gEAAgE,CAAC,CAAC;AA8H9E,MAAM,UAAU,mBAAmB,CACjC,MAAiB,EACjB,MAAqB,EACrB,GAAc;IAEd,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC;IACrE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,QAAQ,GAAG,CAAC;IAC5C,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,KAAK,KAAK,CAAC;IAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC;IAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC;IAExC,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;IAE9B,MAAM,CAAC,IAAI,CACT,QAAQ,MAAM,EAAE,EAChB,QAAQ,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,sDAAsD;QACxF,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,mBAAmB,WAAW;iBAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;iBAC1B,IAAI,CAAC,KAAK,CAAC,yDAAyD;gBACvE,mEAAmE;YACrE,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,MAAM;YACL,CAAC,CAAC,uDAAuD;gBACvD,iEAAiE;gBACjE,GAAG,MAAM,CAAC,eAAe,SAAS,MAAM,CAAC,WAAW,kBAAkB;gBACtE,uEAAuE;gBACvE,iEAAiE;gBACjE,qEAAqE;gBACrE,iEAAiE;gBACjE,iEAAiE;gBACjE,oEAAoE;gBACpE,sEAAsE;gBACtE,8BAA8B;YAChC,CAAC,CAAC,EAAE,CAAC,EACT;QACE,GAAG,MAAM,CAAC,WAAW,CACnB,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG;YACV,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBACnD,QAAQ,EAAE;iBACV,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC;SAChC,CAAC,CACH;QACD,GAAG,CAAC,MAAM;YACR,CAAC,CAAC;gBACE,KAAK,EAAE,CAAC;qBACL,MAAM,EAAE;qBACR,GAAG,EAAE;qBACL,QAAQ,EAAE;qBACV,QAAQ,CACP,0BAA0B,MAAM,CAAC,eAAe,eAAe;oBAC7D,GAAG,MAAM,CAAC,WAAW,yCAAyC;oBAC9D,wBAAwB,CAC3B;gBACH,MAAM,EAAE,CAAC;qBACN,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CACP,0DAA0D;oBACxD,uDAAuD;oBACvD,gBAAgB,CACnB;aACJ;YACH,CAAC,CAAC,EAAE,CAAC;KACR,EACD,KAAK,EAAE,IAA2D,EAAE,EAAE,CACpE,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,uEAAuE;QACvE,kDAAkD;QAClD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACxC,OAAO,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,2DAA2D;QAC3D,OAAO,UAAU,CACf,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;YACzB,GAAG,MAAM,CAAC,WAAW,CACnB,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAC9D;YACD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CACL,CAAC;IAEF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,QAAQ,QAAQ,EAAE,EAClB,YAAY,QAAQ,mDAAmD;YACrE,wDAAwD,EAC1D,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,QAAQ,QAAQ,CAAC,EAAE,EACpD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CACf,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CACvE,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CACT,UAAU,QAAQ,EAAE,EACpB,gBAAgB,QAAQ,kDAAkD;YACxE,+DAA+D,QAAQ,GAAG;YAC1E,0BAA0B,EAC5B;YACE,MAAM,EAAE,CAAC;iBACN,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;iBACnB,QAAQ,CACP,OAAO,QAAQ,oDAAoD;gBACjE,sCAAsC,CACzC;SACJ,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACnB,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;YACtB,OAAO,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CACL,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CACT,UAAU,QAAQ,EAAE,EACpB,YAAY,QAAQ,yDAAyD;QAC3E,mEAAmE;QACnE,qCAAqC;QACrC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EACvD;QACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,QAAQ,QAAQ,CAAC;QAChD,eAAe,EAAE,CAAC;aACf,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,CAAC,yDAAyD,CAAC;QACtE,MAAM,EAAE,CAAC;aACN,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;aACnB,QAAQ,CAAC,0DAA0D,CAAC;KACxE,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE,CACxC,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,IAAI,GAAG,EAAE,eAAe,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,GAAG,QAAQ,IAAI,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,GACR,YAAY,KAAK,KAAK;YACpB,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC;YAC9B,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CACL,CAAC;IAEF,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;QAC3B,MAAM,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC;QAClD,MAAM,eAAe,GAAG,GAAG,CAAC,eAAe,KAAK,KAAK,CAAC;QAEtD,MAAM,CAAC,IAAI,CACT,UAAU,QAAQ,EAAE,EACpB,YAAY,QAAQ,sDAAsD;YACxE,wCAAwC,QAAQ,0BAA0B;YAC1E,QAAQ,MAAM,0DAA0D;YACxE,qEAAqE;YACrE,qEAAqE;YACrE,yBAAyB,EAC3B;YACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,QAAQ,QAAQ,CAAC;YAChD,eAAe,EAAE,CAAC;iBACf,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,CAAC,yDAAyD,CAAC;YACtE,OAAO,EAAE,OAAO;SACjB,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAChC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC;YACjF,OAAO,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3C,CAAC,CAAC,CACL,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,WAAW,QAAQ,EAAE,EACrB,eAAe,QAAQ,2BAA2B,QAAQ,kBAAkB;YAC1E,0EAA0E;YAC1E,iBAAiB,QAAQ,8CAA8C,EACzE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,QAAQ,QAAQ,CAAC,EAAE,EACpD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CACf,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAChF,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,MAAM,EAAE,EACxB,qBAAqB,KAAK,yCAAyC,QAAQ,GAAG,EAC9E,EAAE,EACF,KAAK,IAAI,EAAE,CACT,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CACR,GAAG,CAAC,eAAe,KAAK,OAAO;YAC7B,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC/C,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,UAAU,CAAC,CAC5C,CACF,CACJ,CAAC;QAEF,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CACT,WAAW,QAAQ,QAAQ,EAC3B,wCAAwC,QAAQ,wBAAwB;gBACtE,wEAAwE;gBACxE,qCAAqC,EACvC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,QAAQ,QAAQ,CAAC,EAAE,EACpD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CACf,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,EAAE,gBAAgB,CAAC,CAAC,CACjE,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,WAAW;QAAE,OAAO;IAEzB,MAAM,CAAC,IAAI,CACT,mBAAmB,QAAQ,EAAE,EAC7B,kBAAkB,QAAQ,+CAA+C;QACvE,sEAAsE;QACtE,wCAAwC,EAC1C;QACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,QAAQ,QAAQ,CAAC;QAChD,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,wDAAwD,CAAC;KACtE,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAC9B,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CACR,MAAM,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;QAC7C,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,EAAE;QACZ,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC,CACH,CACF,CACJ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../src/tools/register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEhD,+EAA+E;AAC/E,MAAM,OAAO,GAAG,CAAC;KACd,OAAO,CAAC,IAAI,CAAC;KACb,QAAQ,CAAC,gEAAgE,CAAC,CAAC;AAqI9E,MAAM,UAAU,mBAAmB,CACjC,MAAiB,EACjB,MAAqB,EACrB,GAAc;IAEd,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC;IACrE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,QAAQ,GAAG,CAAC;IAC5C,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,KAAK,KAAK,CAAC;IAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC;IAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC;IAExC,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;IAE9B,MAAM,CAAC,IAAI,CACT,QAAQ,MAAM,EAAE,EAChB,QAAQ,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,sDAAsD;QACxF,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,mBAAmB,WAAW;iBAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;iBAC1B,IAAI,CAAC,KAAK,CAAC,yDAAyD;gBACvE,mEAAmE;YACrE,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,MAAM;YACL,CAAC,CAAC,uDAAuD;gBACvD,iEAAiE;gBACjE,GAAG,MAAM,CAAC,eAAe,SAAS,MAAM,CAAC,WAAW,kBAAkB;gBACtE,uEAAuE;gBACvE,iEAAiE;gBACjE,qEAAqE;gBACrE,iEAAiE;gBACjE,iEAAiE;gBACjE,oEAAoE;gBACpE,sEAAsE;gBACtE,8BAA8B;YAChC,CAAC,CAAC,EAAE,CAAC,EACT;QACE,GAAG,MAAM,CAAC,WAAW,CACnB,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG;YACV,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBACnD,QAAQ,EAAE;iBACV,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC;SAChC,CAAC,CACH;QACD,GAAG,CAAC,MAAM;YACR,CAAC,CAAC;gBACE,KAAK,EAAE,CAAC;qBACL,MAAM,EAAE;qBACR,GAAG,EAAE;qBACL,QAAQ,EAAE;qBACV,QAAQ,CACP,0BAA0B,MAAM,CAAC,eAAe,eAAe;oBAC7D,GAAG,MAAM,CAAC,WAAW,yCAAyC;oBAC9D,wBAAwB,CAC3B;gBACH,MAAM,EAAE,CAAC;qBACN,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CACP,0DAA0D;oBACxD,uDAAuD;oBACvD,gBAAgB,CACnB;aACJ;YACH,CAAC,CAAC,EAAE,CAAC;KACR,EACD,KAAK,EAAE,IAA2D,EAAE,EAAE,CACpE,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,uEAAuE;QACvE,kDAAkD;QAClD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACxC,OAAO,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,2DAA2D;QAC3D,OAAO,UAAU,CACf,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;YACzB,GAAG,MAAM,CAAC,WAAW,CACnB,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAC9D;YACD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CACL,CAAC;IAEF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,QAAQ,QAAQ,EAAE,EAClB,YAAY,QAAQ,mDAAmD;YACrE,wDAAwD,EAC1D,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,QAAQ,QAAQ,CAAC,EAAE,EACpD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CACf,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CACvE,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CACT,UAAU,QAAQ,EAAE,EACpB,gBAAgB,QAAQ,kDAAkD;YACxE,+DAA+D,QAAQ,GAAG;YAC1E,0BAA0B;YAC1B,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EACjD;YACE,MAAM,EAAE,CAAC;iBACN,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;iBACnB,QAAQ,CACP,OAAO,QAAQ,oDAAoD;gBACjE,sCAAsC,CACzC;SACJ,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACnB,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;YACtB,OAAO,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CACL,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CACT,UAAU,QAAQ,EAAE,EACpB,YAAY,QAAQ,yDAAyD;QAC3E,mEAAmE;QACnE,qCAAqC;QACrC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EACvD;QACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,QAAQ,QAAQ,CAAC;QAChD,eAAe,EAAE,CAAC;aACf,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,CAAC,yDAAyD,CAAC;QACtE,MAAM,EAAE,CAAC;aACN,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;aACnB,QAAQ,CAAC,0DAA0D,CAAC;KACxE,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE,CACxC,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,IAAI,GAAG,EAAE,eAAe,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,GAAG,QAAQ,IAAI,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,GACR,YAAY,KAAK,KAAK;YACpB,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC;YAC9B,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CACL,CAAC;IAEF,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;QAC3B,MAAM,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC;QAClD,MAAM,eAAe,GAAG,GAAG,CAAC,eAAe,KAAK,KAAK,CAAC;QAEtD,MAAM,CAAC,IAAI,CACT,UAAU,QAAQ,EAAE,EACpB,YAAY,QAAQ,sDAAsD;YACxE,wCAAwC,QAAQ,0BAA0B;YAC1E,QAAQ,MAAM,0DAA0D;YACxE,qEAAqE;YACrE,qEAAqE;YACrE,yBAAyB,EAC3B;YACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,QAAQ,QAAQ,CAAC;YAChD,eAAe,EAAE,CAAC;iBACf,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,CAAC,yDAAyD,CAAC;YACtE,OAAO,EAAE,OAAO;SACjB,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAChC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC;YACjF,OAAO,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3C,CAAC,CAAC,CACL,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,WAAW,QAAQ,EAAE,EACrB,eAAe,QAAQ,2BAA2B,QAAQ,kBAAkB;YAC1E,0EAA0E;YAC1E,iBAAiB,QAAQ,8CAA8C,EACzE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,QAAQ,QAAQ,CAAC,EAAE,EACpD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CACf,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAChF,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,MAAM,EAAE,EACxB,qBAAqB,KAAK,yCAAyC,QAAQ,GAAG,EAC9E,EAAE,EACF,KAAK,IAAI,EAAE,CACT,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CACR,GAAG,CAAC,eAAe,KAAK,OAAO;YAC7B,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC/C,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,UAAU,CAAC,CAC5C,CACF,CACJ,CAAC;QAEF,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CACT,WAAW,QAAQ,QAAQ,EAC3B,wCAAwC,QAAQ,wBAAwB;gBACtE,wEAAwE;gBACxE,qCAAqC,EACvC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,QAAQ,QAAQ,CAAC,EAAE,EACpD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CACf,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,EAAE,gBAAgB,CAAC,CAAC,CACjE,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,WAAW;QAAE,OAAO;IAEzB,MAAM,CAAC,IAAI,CACT,mBAAmB,QAAQ,EAAE,EAC7B,kBAAkB,QAAQ,+CAA+C;QACvE,sEAAsE;QACtE,wCAAwC,EAC1C;QACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,QAAQ,QAAQ,CAAC;QAChD,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,wDAAwD,CAAC;KACtE,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAC9B,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,UAAU,CACR,MAAM,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;QAC7C,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,EAAE;QACZ,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC,CACH,CACF,CACJ,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axonity-ai/mcp",
-  "version": "0.12.0",
+  "version": "0.14.0",
   "description": "Model Context Protocol server for Axonity Flow — lets an external agent (e.g. Claude Code) read, draft, and update workflows, agents and tools in an Axonity tenant.",
   "license": "MIT",
   "repository": {