@hotmeshio/long-tail 0.4.18 → 0.4.19

package/build/system/seed/tool-manifests-admin.js

@@ -5,41 +5,90 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ADMIN_TOOLS = void 0;
 exports.ADMIN_TOOLS = [
     // ── tasks.ts ────────────────────────────────────────────────────────────
-    { name: 'find_tasks', description: 'Search tasks with optional filters. Returns task records with workflow_id, status, workflow_type, and timestamps.', inputSchema: { type: 'object', properties: { status: { type: 'string' }, workflow_type: { type: 'string' }, workflow_id: { type: 'string' }, origin_id: { type: 'string' }, limit: { type: 'integer' }, offset: { type: 'integer' } } } },
-    { name: 'get_process_detail', description: 'Get all tasks and escalations for a process (origin_id).', inputSchema: { type: 'object', properties: { origin_id: { type: 'string' } }, required: ['origin_id'] } },
+    { name: 'find_tasks', description: 'Search tasks with optional filters. Returns task records with workflow_id, status, workflow_type, and timestamps.', read_safe: true, inputSchema: { type: 'object', properties: { status: { type: 'string' }, workflow_type: { type: 'string' }, workflow_id: { type: 'string' }, origin_id: { type: 'string' }, limit: { type: 'integer' }, offset: { type: 'integer' } } } },
+    { name: 'get_process_detail', description: 'Get all tasks and escalations for a process (origin_id).', read_safe: true, inputSchema: { type: 'object', properties: { origin_id: { type: 'string' } }, required: ['origin_id'] } },
     // ── escalations.ts ──────────────────────────────────────────────────────
-    { name: 'find_escalations', description: 'Search escalations with optional filters by status, role, type, priority.', inputSchema: { type: 'object', properties: { status: { type: 'string', enum: ['pending', 'resolved'] }, role: { type: 'string' }, type: { type: 'string' }, priority: { type: 'integer' }, limit: { type: 'integer' }, offset: { type: 'integer' } } } },
-    { name: 'get_escalation_stats', description: 'Aggregated escalation statistics: pending, claimed, created, resolved counts with breakdown by role.', inputSchema: { type: 'object', properties: { period: { type: 'string' } } } },
-    { name: 'claim_escalation', description: 'Claim an escalation for a time-boxed lock.', inputSchema: { type: 'object', properties: { id: { type: 'string' }, duration_minutes: { type: 'integer' } }, required: ['id'] } },
-    { name: 'release_expired_claims', description: 'Release all escalation claims that exceeded their lock duration.', inputSchema: { type: 'object', properties: {} } },
-    { name: 'bulk_triage', description: 'Resolve escalations for triage and start mcpTriage workflows.', inputSchema: { type: 'object', properties: { ids: { type: 'array', items: { type: 'string' } }, hint: { type: 'string' } }, required: ['ids'] } },
+    { name: 'find_escalations', description: 'Search escalations with optional filters by status, role, type, priority.', read_safe: true, inputSchema: { type: 'object', properties: { status: { type: 'string', enum: ['pending', 'resolved'] }, role: { type: 'string' }, type: { type: 'string' }, priority: { type: 'integer' }, limit: { type: 'integer' }, offset: { type: 'integer' } } } },
+    { name: 'get_escalation_stats', description: 'Aggregated escalation statistics: pending, claimed, created, resolved counts with breakdown by role.', read_safe: true, inputSchema: { type: 'object', properties: { period: { type: 'string' } } } },
+    { name: 'claim_escalation', description: 'Claim an escalation for a time-boxed lock.', read_safe: false, inputSchema: { type: 'object', properties: { id: { type: 'string' }, duration_minutes: { type: 'integer' } }, required: ['id'] } },
+    { name: 'release_expired_claims', description: 'Release all escalation claims that exceeded their lock duration.', read_safe: false, inputSchema: { type: 'object', properties: {} } },
+    { name: 'bulk_triage', description: 'Resolve escalations for triage and start mcpTriage workflows.', read_safe: false, inputSchema: { type: 'object', properties: { ids: { type: 'array', items: { type: 'string' } }, hint: { type: 'string' } }, required: ['ids'] } },
+    { name: 'find_by_metadata', description: 'Find escalations by a metadata key-value pair.', read_safe: true, inputSchema: { type: 'object', properties: { key: { type: 'string' }, value: { type: 'string' }, status: { type: 'string' }, limit: { type: 'integer' }, offset: { type: 'integer' } }, required: ['key', 'value'] } },
+    { name: 'claim_by_metadata', description: 'Find and claim an escalation by metadata key-value pair.', read_safe: false, inputSchema: { type: 'object', properties: { key: { type: 'string' }, value: { type: 'string' }, durationMinutes: { type: 'integer' }, assignee: { type: 'string' }, metadata: { type: 'object' } }, required: ['key', 'value'] } },
+    { name: 'resolve_by_metadata', description: 'Find and resolve an escalation by metadata key-value pair.', read_safe: false, inputSchema: { type: 'object', properties: { key: { type: 'string' }, value: { type: 'string' }, resolverPayload: { type: 'object' }, assignee: { type: 'string' }, metadata: { type: 'object' } }, required: ['key', 'value', 'resolverPayload'] } },
+    { name: 'bulk_claim', description: 'Claim multiple escalations in a single operation.', read_safe: false, inputSchema: { type: 'object', properties: { ids: { type: 'array', items: { type: 'string' } }, durationMinutes: { type: 'integer' } }, required: ['ids'] } },
+    { name: 'bulk_assign', description: 'Assign multiple escalations to a specific user.', read_safe: false, inputSchema: { type: 'object', properties: { ids: { type: 'array', items: { type: 'string' } }, targetUserId: { type: 'string' }, durationMinutes: { type: 'integer' } }, required: ['ids', 'targetUserId'] } },
+    { name: 'bulk_escalate', description: 'Escalate multiple escalations to a different role.', read_safe: false, inputSchema: { type: 'object', properties: { ids: { type: 'array', items: { type: 'string' } }, targetRole: { type: 'string' } }, required: ['ids', 'targetRole'] } },
+    { name: 'update_priority', description: 'Update the priority of multiple escalations.', read_safe: false, inputSchema: { type: 'object', properties: { ids: { type: 'array', items: { type: 'string' } }, priority: { type: 'integer' } }, required: ['ids', 'priority'] } },
     // ── workflow-config.ts ──────────────────────────────────────────────────
-    { name: 'list_workflow_configs', description: 'List all certified workflow configurations with roles and settings.', inputSchema: { type: 'object', properties: {} } },
-    { name: 'upsert_workflow_config', description: 'Create or replace a workflow configuration (certify). Activates the interceptor for task tracking and escalation chains.', inputSchema: { type: 'object', properties: { workflow_type: { type: 'string' }, invocable: { type: 'boolean' }, task_queue: { type: 'string' }, default_role: { type: 'string' }, description: { type: 'string' }, execute_as: { type: 'string' }, roles: { type: 'array', items: { type: 'string' } }, invocation_roles: { type: 'array', items: { type: 'string' } }, consumes: { type: 'array', items: { type: 'string' } }, tool_tags: { type: 'array', items: { type: 'string' } }, cron_schedule: { type: 'string' } }, required: ['workflow_type'] } },
-    { name: 'delete_workflow_config', description: 'De-certify a workflow by removing its config entry.', inputSchema: { type: 'object', properties: { workflow_type: { type: 'string' } }, required: ['workflow_type'] } },
+    { name: 'list_workflow_configs', description: 'List all certified workflow configurations with roles and settings.', read_safe: true, inputSchema: { type: 'object', properties: {} } },
+    { name: 'upsert_workflow_config', description: 'Create or replace a workflow configuration (certify). Activates the interceptor for task tracking and escalation chains.', read_safe: false, inputSchema: { type: 'object', properties: { workflow_type: { type: 'string' }, invocable: { type: 'boolean' }, task_queue: { type: 'string' }, default_role: { type: 'string' }, description: { type: 'string' }, execute_as: { type: 'string' }, roles: { type: 'array', items: { type: 'string' } }, invocation_roles: { type: 'array', items: { type: 'string' } }, consumes: { type: 'array', items: { type: 'string' } }, tool_tags: { type: 'array', items: { type: 'string' } }, cron_schedule: { type: 'string' } }, required: ['workflow_type'] } },
+    { name: 'delete_workflow_config', description: 'De-certify a workflow by removing its config entry.', read_safe: false, inputSchema: { type: 'object', properties: { workflow_type: { type: 'string' } }, required: ['workflow_type'] } },
     // ── workflows.ts ────────────────────────────────────────────────────────
-    { name: 'list_discovered_workflows', description: 'Unified list of all known workflows: active workers, historical entities, and registered configs.', inputSchema: { type: 'object', properties: { include_system: { type: 'boolean' } } } },
-    { name: 'invoke_workflow', description: 'Start a certified workflow by type. Returns workflow ID immediately.', inputSchema: { type: 'object', properties: { workflow_type: { type: 'string' }, data: { type: 'object' }, metadata: { type: 'object' }, execute_as: { type: 'string' } }, required: ['workflow_type', 'data'] } },
-    { name: 'get_workflow_status', description: 'Check workflow status and result. Returns status (0=complete, positive=running) and result if complete.', inputSchema: { type: 'object', properties: { workflow_id: { type: 'string' } }, required: ['workflow_id'] } },
+    { name: 'list_discovered_workflows', description: 'Unified list of all known workflows: active workers, historical entities, and registered configs.', read_safe: true, inputSchema: { type: 'object', properties: { include_system: { type: 'boolean' } } } },
+    { name: 'invoke_workflow', description: 'Start a certified workflow by type. Returns workflow ID immediately.', read_safe: false, inputSchema: { type: 'object', properties: { workflow_type: { type: 'string' }, data: { type: 'object' }, metadata: { type: 'object' }, execute_as: { type: 'string' } }, required: ['workflow_type', 'data'] } },
+    { name: 'get_workflow_status', description: 'Check workflow status and result. Returns status (0=complete, positive=running) and result if complete.', read_safe: true, inputSchema: { type: 'object', properties: { workflow_id: { type: 'string' } }, required: ['workflow_id'] } },
     // ── mcp-servers.ts ──────────────────────────────────────────────────────
-    { name: 'list_mcp_servers', description: 'List registered MCP servers with optional filters by status, tags, or search.', inputSchema: { type: 'object', properties: { status: { type: 'string' }, tags: { type: 'string' }, search: { type: 'string' }, limit: { type: 'integer' }, offset: { type: 'integer' } } } },
-    { name: 'update_mcp_server', description: 'Update an MCP server registration (tags, description, auto_connect).', inputSchema: { type: 'object', properties: { id: { type: 'string' }, name: { type: 'string' }, description: { type: 'string' }, tags: { type: 'array', items: { type: 'string' } }, auto_connect: { type: 'boolean' } }, required: ['id'] } },
-    { name: 'connect_mcp_server', description: 'Connect to a registered MCP server.', inputSchema: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] } },
-    { name: 'disconnect_mcp_server', description: 'Disconnect from an MCP server.', inputSchema: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] } },
+    { name: 'list_mcp_servers', description: 'List registered MCP servers with optional filters by status, tags, or search.', read_safe: true, inputSchema: { type: 'object', properties: { status: { type: 'string' }, tags: { type: 'string' }, search: { type: 'string' }, limit: { type: 'integer' }, offset: { type: 'integer' } } } },
+    { name: 'update_mcp_server', description: 'Update an MCP server registration (tags, description, auto_connect).', read_safe: false, inputSchema: { type: 'object', properties: { id: { type: 'string' }, name: { type: 'string' }, description: { type: 'string' }, tags: { type: 'array', items: { type: 'string' } }, auto_connect: { type: 'boolean' } }, required: ['id'] } },
+    { name: 'connect_mcp_server', description: 'Connect to a registered MCP server.', read_safe: false, inputSchema: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] } },
+    { name: 'disconnect_mcp_server', description: 'Disconnect from an MCP server.', read_safe: false, inputSchema: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] } },
     // ── yaml-workflows.ts ───────────────────────────────────────────────────
-    { name: 'list_yaml_workflows', description: 'List compiled YAML workflows with optional status, namespace, or search filter.', inputSchema: { type: 'object', properties: { status: { type: 'string' }, app_id: { type: 'string' }, search: { type: 'string' }, source_workflow_id: { type: 'string' }, limit: { type: 'integer' }, offset: { type: 'integer' } } } },
-    { name: 'get_yaml_workflow', description: 'Inspect a compiled workflow by ID. Returns activity manifest, schemas, and YAML content.', inputSchema: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] } },
-    { name: 'create_yaml_workflow', description: 'Compile a completed execution into a deterministic YAML workflow. Stored as a draft.', inputSchema: { type: 'object', properties: { workflow_id: { type: 'string' }, task_queue: { type: 'string' }, workflow_name: { type: 'string' }, name: { type: 'string' }, description: { type: 'string' }, app_id: { type: 'string' }, tags: { type: 'array', items: { type: 'string' } }, compilation_feedback: { type: 'string' } }, required: ['workflow_id', 'task_queue', 'workflow_name', 'name'] } },
-    { name: 'deploy_yaml_workflow', description: 'Deploy a compiled YAML workflow, activate it, and register workers.', inputSchema: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] } },
-    { name: 'invoke_yaml_workflow', description: 'Run a compiled YAML workflow. Deterministic — no LLM. Set sync=true to wait.', inputSchema: { type: 'object', properties: { id: { type: 'string' }, data: { type: 'object' }, sync: { type: 'boolean' }, timeout: { type: 'integer' } }, required: ['id'] } },
+    { name: 'list_yaml_workflows', description: 'List compiled YAML workflows with optional status, namespace, or search filter.', read_safe: true, inputSchema: { type: 'object', properties: { status: { type: 'string' }, app_id: { type: 'string' }, search: { type: 'string' }, source_workflow_id: { type: 'string' }, limit: { type: 'integer' }, offset: { type: 'integer' } } } },
+    { name: 'get_yaml_workflow', description: 'Inspect a compiled workflow by ID. Returns activity manifest, schemas, and YAML content.', read_safe: true, inputSchema: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] } },
+    { name: 'create_yaml_workflow', description: 'Compile a completed execution into a deterministic YAML workflow. Stored as a draft.', read_safe: false, inputSchema: { type: 'object', properties: { workflow_id: { type: 'string' }, task_queue: { type: 'string' }, workflow_name: { type: 'string' }, name: { type: 'string' }, description: { type: 'string' }, app_id: { type: 'string' }, tags: { type: 'array', items: { type: 'string' } }, compilation_feedback: { type: 'string' } }, required: ['workflow_id', 'task_queue', 'workflow_name', 'name'] } },
+    { name: 'deploy_yaml_workflow', description: 'Deploy a compiled YAML workflow, activate it, and register workers.', read_safe: false, inputSchema: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] } },
+    { name: 'invoke_yaml_workflow', description: 'Run a compiled YAML workflow. Deterministic — no LLM. Set sync=true to wait.', read_safe: false, inputSchema: { type: 'object', properties: { id: { type: 'string' }, data: { type: 'object' }, sync: { type: 'boolean' }, timeout: { type: 'integer' } }, required: ['id'] } },
     // ── users.ts (users + roles) ────────────────────────────────────────────
-    { name: 'list_users', description: 'List user accounts with optional role and status filters.', inputSchema: { type: 'object', properties: { role: { type: 'string' }, status: { type: 'string' }, limit: { type: 'integer' }, offset: { type: 'integer' } } } },
-    { name: 'create_user', description: 'Create a new user account with optional roles.', inputSchema: { type: 'object', properties: { external_id: { type: 'string' }, display_name: { type: 'string' }, email: { type: 'string' }, roles: { type: 'array', items: { type: 'object', properties: { role: { type: 'string' }, type: { type: 'string', enum: ['superadmin', 'admin', 'member'] } }, required: ['role', 'type'] } } }, required: ['external_id'] } },
-    { name: 'add_user_role', description: 'Assign a role to a user.', inputSchema: { type: 'object', properties: { user_id: { type: 'string' }, role: { type: 'string' }, type: { type: 'string', enum: ['superadmin', 'admin', 'member'] } }, required: ['user_id', 'role', 'type'] } },
-    { name: 'remove_user_role', description: 'Remove a role from a user.', inputSchema: { type: 'object', properties: { user_id: { type: 'string' }, role: { type: 'string' } }, required: ['user_id', 'role'] } },
-    { name: 'list_roles', description: 'List all distinct roles known to the system.', inputSchema: { type: 'object', properties: {} } },
-    { name: 'create_role', description: 'Create a new role. Lowercase alphanumeric with hyphens/underscores.', inputSchema: { type: 'object', properties: { role: { type: 'string' } }, required: ['role'] } },
-    { name: 'add_escalation_chain', description: 'Define an escalation path from one role to another.', inputSchema: { type: 'object', properties: { source_role: { type: 'string' }, target_role: { type: 'string' } }, required: ['source_role', 'target_role'] } },
+    { name: 'list_users', description: 'List user accounts with optional role and status filters.', read_safe: true, inputSchema: { type: 'object', properties: { role: { type: 'string' }, status: { type: 'string' }, limit: { type: 'integer' }, offset: { type: 'integer' } } } },
+    { name: 'create_user', description: 'Create a new user account with optional roles.', read_safe: false, inputSchema: { type: 'object', properties: { external_id: { type: 'string' }, display_name: { type: 'string' }, email: { type: 'string' }, roles: { type: 'array', items: { type: 'object', properties: { role: { type: 'string' }, type: { type: 'string', enum: ['superadmin', 'admin', 'member'] } }, required: ['role', 'type'] } } }, required: ['external_id'] } },
+    { name: 'add_user_role', description: 'Assign a role to a user.', read_safe: false, inputSchema: { type: 'object', properties: { user_id: { type: 'string' }, role: { type: 'string' }, type: { type: 'string', enum: ['superadmin', 'admin', 'member'] } }, required: ['user_id', 'role', 'type'] } },
+    { name: 'remove_user_role', description: 'Remove a role from a user.', read_safe: false, inputSchema: { type: 'object', properties: { user_id: { type: 'string' }, role: { type: 'string' } }, required: ['user_id', 'role'] } },
+    { name: 'list_roles', description: 'List all distinct roles known to the system.', read_safe: true, inputSchema: { type: 'object', properties: {} } },
+    { name: 'create_role', description: 'Create a new role. Lowercase alphanumeric with hyphens/underscores.', read_safe: false, inputSchema: { type: 'object', properties: { role: { type: 'string' } }, required: ['role'] } },
+    { name: 'add_escalation_chain', description: 'Define an escalation path from one role to another.', read_safe: false, inputSchema: { type: 'object', properties: { source_role: { type: 'string' }, target_role: { type: 'string' } }, required: ['source_role', 'target_role'] } },
     // ── maintenance.ts ──────────────────────────────────────────────────────
-    { name: 'prune', description: 'Prune expired jobs, streams, and execution artifacts from the database.', inputSchema: { type: 'object', properties: { expire: { type: 'string' }, jobs: { type: 'boolean' }, streams: { type: 'boolean' }, entities: { type: 'array', items: { type: 'string' } }, prune_transient: { type: 'boolean' } } } },
+    { name: 'prune', description: 'Prune expired jobs, streams, and execution artifacts from the database.', read_safe: false, inputSchema: { type: 'object', properties: { expire: { type: 'string' }, jobs: { type: 'boolean' }, streams: { type: 'boolean' }, entities: { type: 'array', items: { type: 'string' } }, prune_transient: { type: 'boolean' } } } },
+    // ── agents.ts ───────────────────────────────────────────────────────────
+    { name: 'list_agents', description: 'List agent automations with optional status and knowledge domain filters.', read_safe: true, inputSchema: { type: 'object', properties: { status: { type: 'string' }, knowledge_domain: { type: 'string' }, limit: { type: 'integer' }, offset: { type: 'integer' } } } },
+    { name: 'get_agent', description: 'Get a single agent automation by ID with aggregated stats.', read_safe: true, inputSchema: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] } },
+    { name: 'create_agent', description: 'Create a new agent automation with identity, goals, rules, and subscriptions.', read_safe: false, inputSchema: { type: 'object', properties: { id: { type: 'string' }, description: { type: 'string' }, goals: { type: 'array', items: { type: 'string' } }, rules: { type: 'array', items: { type: 'string' } }, status: { type: 'string' }, knowledge_domain: { type: 'string' }, schedules: { type: 'array' }, subscriptions: { type: 'array' } }, required: ['id'] } },
+    { name: 'update_agent', description: 'Update an existing agent automation.', read_safe: false, inputSchema: { type: 'object', properties: { id: { type: 'string' }, description: { type: 'string' }, goals: { type: 'array', items: { type: 'string' } }, rules: { type: 'array', items: { type: 'string' } }, status: { type: 'string' }, knowledge_domain: { type: 'string' } }, required: ['id'] } },
+    { name: 'delete_agent', description: 'Delete an agent automation and all its subscriptions.', read_safe: false, inputSchema: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] } },
+    // ── agent-subscriptions.ts ──────────────────────────────────────────────
+    { name: 'list_agent_subscriptions', description: 'List all event subscriptions for an agent.', read_safe: true, inputSchema: { type: 'object', properties: { agent_id: { type: 'string' } }, required: ['agent_id'] } },
+    { name: 'create_agent_subscription', description: 'Create an event subscription for an agent.', read_safe: false, inputSchema: { type: 'object', properties: { agent_id: { type: 'string' }, topic: { type: 'string' }, reaction_type: { type: 'string' }, workflow_type: { type: 'string' }, pipeline_id: { type: 'string' }, mcp_prompt: { type: 'string' }, input_mapping: { type: 'object' }, filter: { type: 'object' }, execute_as: { type: 'string' } }, required: ['agent_id', 'topic', 'reaction_type'] } },
+    { name: 'delete_agent_subscription', description: 'Delete an event subscription by ID.', read_safe: false, inputSchema: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] } },
+    // ── bot-accounts.ts ─────────────────────────────────────────────────────
+    { name: 'list_bot_accounts', description: 'List all bot (service) accounts with pagination.', read_safe: true, inputSchema: { type: 'object', properties: { limit: { type: 'integer' }, offset: { type: 'integer' } } } },
+    { name: 'get_bot_account', description: 'Get a single bot account by ID.', read_safe: true, inputSchema: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] } },
+    { name: 'create_bot_account', description: 'Create a new bot (service) account with optional roles.', read_safe: false, inputSchema: { type: 'object', properties: { name: { type: 'string' }, description: { type: 'string' }, display_name: { type: 'string' }, roles: { type: 'array', items: { type: 'object', properties: { role: { type: 'string' }, type: { type: 'string' } } } } }, required: ['name'] } },
+    { name: 'update_bot_account', description: 'Update a bot account (display name, description, status).', read_safe: false, inputSchema: { type: 'object', properties: { id: { type: 'string' }, display_name: { type: 'string' }, description: { type: 'string' }, status: { type: 'string' } }, required: ['id'] } },
+    { name: 'delete_bot_account', description: 'Delete a bot account and all its API keys.', read_safe: false, inputSchema: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] } },
+    { name: 'create_bot_api_key', description: 'Generate a new API key for a bot account. Returns the raw key ONCE.', read_safe: false, inputSchema: { type: 'object', properties: { id: { type: 'string' }, name: { type: 'string' }, scopes: { type: 'array', items: { type: 'string' } }, expires_at: { type: 'string' } }, required: ['id', 'name'] } },
+    { name: 'revoke_bot_api_key', description: 'Revoke (delete) an API key for a bot account.', read_safe: false, inputSchema: { type: 'object', properties: { key_id: { type: 'string' } }, required: ['key_id'] } },
+    // ── controlplane.ts ─────────────────────────────────────────────────────
+    { name: 'list_apps', description: 'List available HotMesh application namespaces.', read_safe: true, inputSchema: { type: 'object', properties: {} } },
+    { name: 'rollcall', description: 'Execute a roll call — discovers all engines and workers in the mesh.', read_safe: true, inputSchema: { type: 'object', properties: { app_id: { type: 'string' }, delay: { type: 'integer' } } } },
+    { name: 'apply_throttle', description: 'Apply a throttle to the mesh (-1=pause, 0=resume, >0=delay ms per message).', read_safe: false, inputSchema: { type: 'object', properties: { appId: { type: 'string' }, throttle: { type: 'integer' }, topic: { type: 'string' }, guid: { type: 'string' }, scope: { type: 'string' } }, required: ['throttle'] } },
+    { name: 'get_stream_stats', description: 'Stream processing statistics — pending count and processed volume by time range.', read_safe: true, inputSchema: { type: 'object', properties: { app_id: { type: 'string' }, duration: { type: 'string' }, stream: { type: 'string' } } } },
+    { name: 'list_stream_messages', description: 'Browse stream messages with pagination, filtering, and sorting.', read_safe: true, inputSchema: { type: 'object', properties: { namespace: { type: 'string' }, source: { type: 'string' }, limit: { type: 'integer' }, offset: { type: 'integer' }, sort_by: { type: 'string' }, order: { type: 'string', enum: ['asc', 'desc'] }, status: { type: 'string' }, stream_name: { type: 'string' }, msg_type: { type: 'string' }, topic: { type: 'string' }, workflow_name: { type: 'string' }, jid: { type: 'string' }, aid: { type: 'string' } }, required: ['namespace', 'source'] } },
+    // ── pipelines.ts ────────────────────────────────────────────────────────
+    { name: 'list_pipeline_entities', description: 'List distinct entity (tool) names from pipeline jobs.', read_safe: true, inputSchema: { type: 'object', properties: { app_id: { type: 'string' } } } },
+    { name: 'list_pipeline_jobs', description: 'List pipeline jobs with optional entity, search, and status filters.', read_safe: true, inputSchema: { type: 'object', properties: { app_id: { type: 'string' }, limit: { type: 'integer' }, offset: { type: 'integer' }, entity: { type: 'string' }, search: { type: 'string' }, status: { type: 'string' }, sort_by: { type: 'string' }, order: { type: 'string', enum: ['asc', 'desc'] } } } },
+    { name: 'get_pipeline_execution', description: 'Export execution details for a specific pipeline job.', read_safe: true, inputSchema: { type: 'object', properties: { job_id: { type: 'string' }, app_id: { type: 'string' } }, required: ['job_id'] } },
+    { name: 'interrupt_pipeline_job', description: 'Interrupt a running pipeline job.', read_safe: false, inputSchema: { type: 'object', properties: { job_id: { type: 'string' }, topic: { type: 'string' }, app_id: { type: 'string' } }, required: ['job_id', 'topic'] } },
+    // ── topics.ts ───────────────────────────────────────────────────────────
+    { name: 'list_topics', description: 'List topics in the event catalog with optional category and search filters.', read_safe: true, inputSchema: { type: 'object', properties: { category: { type: 'string' }, search: { type: 'string' }, limit: { type: 'integer' }, offset: { type: 'integer' } } } },
+    { name: 'get_topic', description: 'Get a single topic by name, including schema and example payload.', read_safe: true, inputSchema: { type: 'object', properties: { topic: { type: 'string' } }, required: ['topic'] } },
+    { name: 'create_topic', description: 'Register a new topic in the event catalog.', read_safe: false, inputSchema: { type: 'object', properties: { topic: { type: 'string' }, category: { type: 'string' }, description: { type: 'string' }, payload_schema: { type: 'object' }, example_payload: { type: 'object' }, tags: { type: 'array', items: { type: 'string' } } }, required: ['topic', 'category'] } },
+    { name: 'update_topic', description: 'Update a topic in the event catalog.', read_safe: false, inputSchema: { type: 'object', properties: { topic: { type: 'string' }, description: { type: 'string' }, category: { type: 'string' }, payload_schema: { type: 'object' }, example_payload: { type: 'object' }, tags: { type: 'array', items: { type: 'string' } } }, required: ['topic'] } },
+    { name: 'delete_topic', description: 'Delete a topic from the catalog (system topics are protected).', read_safe: false, inputSchema: { type: 'object', properties: { topic: { type: 'string' } }, required: ['topic'] } },
+    // ── settings.ts ─────────────────────────────────────────────────────────
+    { name: 'get_settings', description: 'Get frontend-relevant configuration (no secrets). Returns feature flags, enabled capabilities, and system metadata.', read_safe: true, inputSchema: { type: 'object', properties: {} } },
+    // ── exports.ts ──────────────────────────────────────────────────────────
+    { name: 'list_export_jobs', description: 'List workflow jobs with optional filtering and pagination.', read_safe: true, inputSchema: { type: 'object', properties: { limit: { type: 'integer' }, offset: { type: 'integer' }, entity: { type: 'string' }, search: { type: 'string' }, status: { type: 'string' }, sort_by: { type: 'string' }, order: { type: 'string', enum: ['asc', 'desc'] } } } },
+    { name: 'export_workflow_state', description: 'Export the full workflow state using HotMesh durable export.', read_safe: true, inputSchema: { type: 'object', properties: { workflow_id: { type: 'string' }, allow: { type: 'array', items: { type: 'string' } }, block: { type: 'array', items: { type: 'string' } }, values: { type: 'object' } }, required: ['workflow_id'] } },
+    { name: 'export_workflow_execution', description: 'Export workflow state as a structured execution event history.', read_safe: true, inputSchema: { type: 'object', properties: { workflow_id: { type: 'string' }, excludeSystem: { type: 'boolean' }, omitResults: { type: 'boolean' }, mode: { type: 'string' }, maxDepth: { type: 'integer' } }, required: ['workflow_id'] } },
+    { name: 'get_export_status', description: 'Return the numeric status semaphore for a workflow.', read_safe: true, inputSchema: { type: 'object', properties: { workflow_id: { type: 'string' } }, required: ['workflow_id'] } },
 ];

package/build/system/seed/tool-manifests-data.d.ts

@@ -1,6 +1,7 @@
 export declare const TRANSLATION_TOOLS: {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -23,6 +24,7 @@ export declare const TRANSLATION_TOOLS: {
 export declare const VISION_ANALYSIS_TOOLS: ({
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -41,6 +43,7 @@ export declare const VISION_ANALYSIS_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -60,6 +63,7 @@ export declare const VISION_ANALYSIS_TOOLS: ({
 export declare const DB_QUERY_TOOLS: ({
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -87,6 +91,7 @@ export declare const DB_QUERY_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -114,6 +119,7 @@ export declare const DB_QUERY_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -135,6 +141,7 @@ export declare const DB_QUERY_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -152,6 +159,7 @@ export declare const DB_QUERY_TOOLS: ({
 export declare const FILE_STORAGE_TOOLS: ({
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -173,6 +181,7 @@ export declare const FILE_STORAGE_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -197,6 +206,7 @@ export declare const FILE_STORAGE_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -219,6 +229,7 @@ export declare const FILE_STORAGE_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -237,6 +248,7 @@ export declare const FILE_STORAGE_TOOLS: ({
 export declare const HTTP_FETCH_TOOLS: ({
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -266,6 +278,7 @@ export declare const HTTP_FETCH_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -287,6 +300,7 @@ export declare const HTTP_FETCH_TOOLS: ({
 export declare const SCHEMA_EXCHANGE_TOOLS: ({
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -345,6 +359,7 @@ export declare const SCHEMA_EXCHANGE_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -374,6 +389,7 @@ export declare const SCHEMA_EXCHANGE_TOOLS: ({
 export declare const DOCS_TOOLS: ({
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -385,6 +401,7 @@ export declare const DOCS_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -399,6 +416,7 @@ export declare const DOCS_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -414,6 +432,7 @@ export declare const DOCS_TOOLS: ({
 export declare const OAUTH_TOOLS: ({
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -435,6 +454,7 @@ export declare const OAUTH_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {

package/build/system/seed/tool-manifests-data.js

@@ -6,6 +6,7 @@ exports.TRANSLATION_TOOLS = [
     {
         name: 'translate_content',
         description: 'Translate content text to the target language. Returns the translated content and detected source language.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -21,6 +22,7 @@ exports.VISION_ANALYSIS_TOOLS = [
     {
         name: 'analyze_image',
         description: 'Analyze an image and extract structured data: description, text content, and notable objects. Accepts storage paths directly (e.g., "google_homepage.png" from capture_page) — no need to read_file first.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -33,6 +35,7 @@ exports.VISION_ANALYSIS_TOOLS = [
     {
         name: 'describe_image',
         description: 'Generate a detailed description of an image. Accepts storage paths directly (e.g., "screenshot.png" from capture_page) — no need to read_file first.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -44,17 +47,18 @@ exports.VISION_ANALYSIS_TOOLS = [
     },
 ];
 exports.DB_QUERY_TOOLS = [
-    { name: 'find_tasks', description: 'Search tasks with optional filters. Returns task records with workflow_id, status, workflow_type, milestones, created/completed timestamps, and metadata.', inputSchema: { type: 'object', properties: { status: { type: 'string' }, workflow_type: { type: 'string' }, workflow_id: { type: 'string' }, origin_id: { type: 'string' }, limit: { type: 'integer', default: 25 } } } },
-    { name: 'find_escalations', description: 'Search escalations with optional filters. Returns escalation records with type, role, priority, status, description, and assignment info.', inputSchema: { type: 'object', properties: { status: { type: 'string' }, role: { type: 'string' }, type: { type: 'string' }, priority: { type: 'integer' }, limit: { type: 'integer', default: 25 } } } },
-    { name: 'get_process_summary', description: 'List business processes grouped by origin_id. Each process shows task count, completed/escalated counts, workflow types involved, and time range.', inputSchema: { type: 'object', properties: { workflow_type: { type: 'string' }, limit: { type: 'integer', default: 25 } } } },
-    { name: 'get_escalation_stats', description: 'Real-time escalation statistics: pending/claimed counts, created/resolved in last 1h and 24h, breakdown by role.', inputSchema: { type: 'object', properties: {} } },
-    { name: 'get_workflow_types', description: 'List all registered workflow configurations with task queue, roles, invocable flag, and description.', inputSchema: { type: 'object', properties: {} } },
-    { name: 'get_system_health', description: 'Full system overview: durable workflow execution counts by type (active/completed), task counts by status, escalation counts by status, recent activity window, MCP servers (with tool counts and tags), compiled workflow totals, and workflow configurations.', inputSchema: { type: 'object', properties: {} } },
+    { name: 'find_tasks', description: 'Search tasks with optional filters. Returns task records with workflow_id, status, workflow_type, milestones, created/completed timestamps, and metadata.', read_safe: true, inputSchema: { type: 'object', properties: { status: { type: 'string' }, workflow_type: { type: 'string' }, workflow_id: { type: 'string' }, origin_id: { type: 'string' }, limit: { type: 'integer', default: 25 } } } },
+    { name: 'find_escalations', description: 'Search escalations with optional filters. Returns escalation records with type, role, priority, status, description, and assignment info.', read_safe: true, inputSchema: { type: 'object', properties: { status: { type: 'string' }, role: { type: 'string' }, type: { type: 'string' }, priority: { type: 'integer' }, limit: { type: 'integer', default: 25 } } } },
+    { name: 'get_process_summary', description: 'List business processes grouped by origin_id. Each process shows task count, completed/escalated counts, workflow types involved, and time range.', read_safe: true, inputSchema: { type: 'object', properties: { workflow_type: { type: 'string' }, limit: { type: 'integer', default: 25 } } } },
+    { name: 'get_escalation_stats', description: 'Real-time escalation statistics: pending/claimed counts, created/resolved in last 1h and 24h, breakdown by role.', read_safe: true, inputSchema: { type: 'object', properties: {} } },
+    { name: 'get_workflow_types', description: 'List all registered workflow configurations with task queue, roles, invocable flag, and description.', read_safe: true, inputSchema: { type: 'object', properties: {} } },
+    { name: 'get_system_health', description: 'Full system overview: durable workflow execution counts by type (active/completed), task counts by status, escalation counts by status, recent activity window, MCP servers (with tool counts and tags), compiled workflow totals, and workflow configurations.', read_safe: true, inputSchema: { type: 'object', properties: {} } },
 ];
 exports.FILE_STORAGE_TOOLS = [
     {
         name: 'read_file',
         description: 'Read file content from managed storage. Returns content, size, and detected MIME type. Supports utf8 (text) or base64 encoding.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -67,6 +71,7 @@ exports.FILE_STORAGE_TOOLS = [
     {
         name: 'write_file',
         description: 'Write content to a file in managed storage. Creates directories as needed. Returns the storage reference and size.',
+        read_safe: false,
         inputSchema: {
             type: 'object',
             properties: {
@@ -80,6 +85,7 @@ exports.FILE_STORAGE_TOOLS = [
     {
         name: 'list_files',
         description: 'List files in a storage directory. Returns file paths, sizes, and modification timestamps.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -91,6 +97,7 @@ exports.FILE_STORAGE_TOOLS = [
     {
         name: 'delete_file',
         description: 'Remove a file from managed storage.',
+        read_safe: false,
         inputSchema: {
             type: 'object',
             properties: {
@@ -104,6 +111,7 @@ exports.HTTP_FETCH_TOOLS = [
     {
         name: 'http_request',
         description: 'Make an HTTP request to any URL. Supports all methods, custom headers, and request bodies. Returns status, headers, and body.',
+        read_safe: false,
         inputSchema: {
             type: 'object',
             properties: {
@@ -119,6 +127,7 @@ exports.HTTP_FETCH_TOOLS = [
     {
         name: 'fetch_json',
         description: 'GET a URL and parse the response as JSON. Convenience wrapper around http_request.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -131,6 +140,7 @@ exports.HTTP_FETCH_TOOLS = [
     {
         name: 'fetch_text',
         description: 'GET a URL and return the response as text. Returns content, status, and content type.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -145,6 +155,7 @@ exports.SCHEMA_EXCHANGE_TOOLS = [
     {
         name: 'exchange',
         description: 'Exchange data with an external service endpoint under schema enforcement. Validates request body against request_schema before sending and response body against response_schema after receiving. Transport is hidden — the principle is endpoint + schema + validated exchange.',
+        read_safe: false,
         inputSchema: {
             type: 'object',
             properties: {
@@ -167,6 +178,7 @@ exports.SCHEMA_EXCHANGE_TOOLS = [
     {
         name: 'validate_schema',
         description: 'Validate any value against a JSON Schema without making a network call. Useful for pre-validation, testing, and transform verification.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -181,11 +193,13 @@ exports.DOCS_TOOLS = [
     {
         name: 'list_docs',
         description: 'List all available documentation files with their titles.',
+        read_safe: true,
         inputSchema: { type: 'object', properties: {} },
     },
     {
         name: 'search_docs',
         description: 'Search across all documentation for a keyword or phrase. Returns matching files with line context.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -197,6 +211,7 @@ exports.DOCS_TOOLS = [
     {
         name: 'read_doc',
         description: 'Read the full content of a documentation file.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -210,6 +225,7 @@ exports.OAUTH_TOOLS = [
     {
         name: 'get_access_token',
         description: 'Get a fresh OAuth access token for an external service. Automatically refreshes expired tokens.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -223,6 +239,7 @@ exports.OAUTH_TOOLS = [
     {
         name: 'list_connections',
         description: 'List all OAuth providers connected for a user. Returns provider, label, and credential type for each connection.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -234,6 +251,7 @@ exports.OAUTH_TOOLS = [
     {
         name: 'revoke_connection',
         description: 'Disconnect an OAuth provider for a user, removing stored tokens. Use label to target a specific credential.',
+        read_safe: false,
         inputSchema: {
             type: 'object',
             properties: {

package/build/system/seed/tool-manifests-escalation.d.ts

@@ -1,6 +1,7 @@
 export declare const HUMAN_QUEUE_TOOLS: ({
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -43,6 +44,7 @@ export declare const HUMAN_QUEUE_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -67,6 +69,7 @@ export declare const HUMAN_QUEUE_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -95,6 +98,7 @@ export declare const HUMAN_QUEUE_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -125,6 +129,7 @@ export declare const HUMAN_QUEUE_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {

package/build/system/seed/tool-manifests-escalation.js

@@ -6,6 +6,7 @@ exports.HUMAN_QUEUE_TOOLS = [
     {
         name: 'escalate_to_human',
         description: 'Create a new escalation for human review. Returns the escalation ID.',
+        read_safe: false,
         inputSchema: {
             type: 'object',
             properties: {
@@ -22,6 +23,7 @@ exports.HUMAN_QUEUE_TOOLS = [
     {
         name: 'check_resolution',
         description: 'Check the status of an escalation. Returns status and resolver payload if resolved.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -33,6 +35,7 @@ exports.HUMAN_QUEUE_TOOLS = [
     {
         name: 'get_available_work',
         description: 'List available escalations for a role. Returns pending, unassigned escalations.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -45,6 +48,7 @@ exports.HUMAN_QUEUE_TOOLS = [
     {
         name: 'claim_and_resolve',
         description: 'Claim an escalation and immediately resolve it with a payload. Atomic operation.',
+        read_safe: false,
         inputSchema: {
             type: 'object',
             properties: {
@@ -58,6 +62,7 @@ exports.HUMAN_QUEUE_TOOLS = [
     {
         name: 'escalate_and_wait',
         description: 'Create an escalation and pause the workflow until a human responds. Returns a signal ID that the workflow uses to wait durably. Preferred over escalate_to_human + check_resolution polling.',
+        read_safe: false,
         inputSchema: {
             type: 'object',
             properties: {

package/build/system/seed/tool-manifests-events.d.ts

@@ -1,6 +1,7 @@
 export declare const EVENTS_TOOLS: ({
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -28,6 +29,7 @@ export declare const EVENTS_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -49,6 +51,7 @@ export declare const EVENTS_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {
@@ -76,6 +79,7 @@ export declare const EVENTS_TOOLS: ({
 } | {
     name: string;
     description: string;
+    read_safe: boolean;
     inputSchema: {
         type: string;
         properties: {

package/build/system/seed/tool-manifests-events.js

@@ -7,6 +7,7 @@ exports.EVENTS_TOOLS = [
     {
         name: 'publish_event',
         description: 'Publish a custom event to the event bus. Other agents and workflows can subscribe to these events and react. Topics follow the convention: app.{namespace}.{entity}.{action} (e.g., app.epic.apis.createorder.error, app.vendor.schema.drift).',
+        read_safe: false,
         inputSchema: {
             type: 'object',
             properties: {
@@ -20,6 +21,7 @@ exports.EVENTS_TOOLS = [
     {
         name: 'list_subscriptions',
         description: 'List all active agent event subscriptions, optionally filtered by topic pattern.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -30,6 +32,7 @@ exports.EVENTS_TOOLS = [
     {
         name: 'list_topics',
         description: 'Browse the topic catalog to discover available event topics, their descriptions, payload schemas, and subscriber counts. Use this to understand what events are available before subscribing or publishing.',
+        read_safe: true,
         inputSchema: {
             type: 'object',
             properties: {
@@ -42,6 +45,7 @@ exports.EVENTS_TOOLS = [
     {
         name: 'register_topic',
         description: 'Declare a topic in the catalog with its description and payload schema. Use this to pre-register topics before first publish so other agents can discover them.',
+        read_safe: false,
         inputSchema: {
             type: 'object',
             properties: {