@leaflow/sdk 0.201.0 → 0.203.0

package/dist/fleet/v1/generated/functions.d.ts

@@ -242,7 +242,7 @@
  * revoked. A participant whose creation failed is not announced.
  * OpenAPI spec version: 1.0.0
  */
-import type { AccountList, AccountResource, ApproveEnrollmentRequest, CallMcpToolRequest, CallMcpToolResponse, CallToolRequest, CallToolResponse, CreateGroupMemberRequest, CreateGroupRequest, CreateMachineRegistrationRequest, CreateMachineRegistrationResponse, CreateParticipantRequest, CreateParticipantResponse, CreatePeerConnectionCandidatesRequest, CreatePeerConnectionRequest, CreateSessionRequest, DeleteMcpServerParams, DenyPrivilegeRequestRequest, EnrollmentResource, Error, FindEnrollmentByPairingCodeParams, FindEnrollmentResponse, GetPeerConnectionParams, GroupList, GroupResource, ListAccountsParams, ListGroupMembersParams, ListGroupsParams, ListMachineEventsParams, ListMachineRegistrationsParams, ListMachinesParams, ListMcpToolsParams, ListPrivilegeAutoApprovalsParams, ListPrivilegeRequestsParams, ListSessionsParams, ListToolsParams, MachineEventList, MachineList, MachineRegistrationList, MachineRegistrationResource, MachineResource, McpConfigurationFile, McpConfigurationResource, McpToolList, MigrationStep, ParticipantList, ParticipantResource, PeerConnection, PrivilegeAutoApprovalList, PrivilegeAutoApprovalResource, PrivilegeRequestList, PrivilegeRequestResource, RenewParticipantRequest, RenewParticipantResponse, ReplaceMcpConfigurationRequest, RtcConfiguration, RunCommandRequest, RunCommandResponse, SendMcpRequestRequest, SendMcpRequestResponse, SessionList, SessionResource, ToolActivityList, ToolList, UpdateAccountRequest, UpdateGroupRequest, UpdateMachineRequest, UpdateMcpServerRequest, UpdateMcpServerResponse, UpdatePrivilegeAutoApprovalRequest } from "./models.js";
+import type { AccountList, AccountResource, ApproveEnrollmentRequest, CallMcpToolRequest, CallMcpToolResponse, CallToolRequest, CallToolResponse, CreateGroupMemberRequest, CreateGroupRequest, CreateMachineRegistrationRequest, CreateMachineRegistrationResponse, CreateParticipantRequest, CreateParticipantResponse, CreatePeerConnectionCandidatesRequest, CreatePeerConnectionRequest, CreateSessionRequest, DeleteMcpServerParams, DenyPrivilegeRequestRequest, EnrollmentResource, Error, FindEnrollmentByPairingCodeParams, FindEnrollmentResponse, GetPeerConnectionParams, GroupList, GroupResource, ListAccountsParams, ListGroupMembersParams, ListGroupsParams, ListMachineEventsParams, ListMachineRegistrationsParams, ListMachinesParams, ListPrivilegeAutoApprovalsParams, ListPrivilegeRequestsParams, ListSessionsParams, ListToolsParams, MachineEventList, MachineList, MachineRegistrationList, MachineRegistrationResource, MachineResource, McpConfigurationFile, McpConfigurationResource, MigrationStep, ParticipantList, ParticipantResource, PeerConnection, PrivilegeAutoApprovalList, PrivilegeAutoApprovalResource, PrivilegeRequestList, PrivilegeRequestResource, RenewParticipantRequest, RenewParticipantResponse, ReplaceMcpConfigurationRequest, RtcConfiguration, RunCommandRequest, RunCommandResponse, SendMcpRequestRequest, SendMcpRequestResponse, SessionList, SessionResource, ToolActivityList, ToolList, UpdateAccountRequest, UpdateGroupRequest, UpdateMachineRequest, UpdateMcpServerRequest, UpdateMcpServerResponse, UpdatePrivilegeAutoApprovalRequest } from "./models.js";
 export type HTTPStatusCode1xx = 100 | 101 | 102 | 103;
 export type HTTPStatusCode2xx = 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207;
 export type HTTPStatusCode3xx = 300 | 301 | 302 | 303 | 304 | 305 | 307 | 308;
@@ -554,7 +554,9 @@ export type listToolsResponse = listToolsResponseSuccess | listToolsResponseErro
 export declare const getListToolsUrl: (machineId: string, params: ListToolsParams) => string;
 /**
  * Queries Agent's builtin tools and the caller's configured MCP servers live. No directory,
- * result or image is cached. Requires fleet:machines.login; builtin capabilities retain
+ * result or image is cached. Each tool has one callable name: builtin tools are named
+ * computer.*, MCP tools are named `<server>__<tool>`; source only filters the list and is not
+ * part of a tool's identity. Requires fleet:machines.login; builtin capabilities retain
  * their native policies and read-only restrictions. Ensures or reuses the caller's single
  * open graphical session, without launching a desktop environment. The client instance is
  * a UUID generated once per running client, not an authorization credential. Each request
@@ -582,19 +584,20 @@ export type callToolResponseError = callToolResponseDefault & {
 export type callToolResponse = callToolResponseSuccess | callToolResponseError;
 export declare const getCallToolUrl: (machineId: string) => string;
 /**
- * Uses the same current permissions, directory account and graphical session as listTools.
- * Listing is not a precondition: callers may use a previously discovered ToolRef, and this
+ * Uses the same current permissions, directory account and graphical session as list-tools.
+ * Listing is not a precondition: callers may use a previously discovered tool name, and this
  * operation never sends a discovery request or refreshes schemas before executing it.
  * A removed tool or MCP server returns TOOL_NOT_FOUND, as does a direct builtin computer.*
  * call while virtual desktop capability is unavailable. Actual permission errors remain
- * permission errors; a missing target window is not a missing tool. Use listTools only when
+ * permission errors; a missing target window is not a missing tool. Use list-tools only when
  * discovery or refresh is needed, and do not cache or reuse execution results.
- * Source is explicit: MCP names never select or impersonate builtin tools. The arguments
- * object is at most 256 KiB. The complete result is at most 8 MiB in the protobuf transport,
- * with each encoded image at most 4 MiB; images are converted to base64 once at this JSON
- * boundary, without recompression or persistence. Cancellation is propagated. A timeout,
- * disconnect or failed response does not prove that side effects did not happen; do not
- * automatically replay. operation_id only correlates live activity, not idempotency.
+ * The name selects exactly one tool: builtin tools are computer.*, MCP tools are
+ * `<server>__<tool>`. The arguments object is at most 256 KiB. The complete result is at most
+ * 8 MiB in the protobuf transport, with each encoded image at most 4 MiB; images are converted
+ * to base64 once at this JSON boundary, without recompression or persistence. Cancellation is
+ * propagated. A timeout, disconnect or failed response does not prove that side effects did
+ * not happen; do not automatically replay. operation_id only correlates live activity, not
+ * idempotency.
  * @summary Call a live builtin or external MCP tool
  */
 export declare const callTool: (machineId: string, callToolRequest: CallToolRequest, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<callToolResponse>;
@@ -699,43 +702,6 @@ export declare const getCallMcpToolUrl: (machineId: string, serverName: string,
  * @summary Call an MCP tool
  */
 export declare const callMcpTool: (machineId: string, serverName: string, toolName: string, callMcpToolRequest: CallMcpToolRequest, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<callMcpToolResponse>;
-export type listMcpToolsResponse200 = {
-    data: McpToolList;
-    status: 200;
-};
-export type listMcpToolsResponseDefault = {
-    data: Error;
-    status: Exclude<HTTPStatusCodes, 200>;
-};
-export type listMcpToolsResponseSuccess = listMcpToolsResponse200 & {
-    headers: Headers;
-};
-export type listMcpToolsResponseError = listMcpToolsResponseDefault & {
-    headers: Headers;
-};
-export type listMcpToolsResponse = listMcpToolsResponseSuccess | listMcpToolsResponseError;
-export declare const getListMcpToolsUrl: (machineId: string, params?: ListMcpToolsParams) => string;
-/**
- * Lists the tools of the caller's servers on the machine, or of one of them, that match
- * `query`: every word of it, ignoring case, in the tool's name, title or description. They
- * are ordered by server, then by tool name. Servers that are not running are started to
- * learn their tools; one that cannot be is named in `unavailable_servers`, and the others are
- * listed anyway. Slow servers do not hold the request up: those still starting are named
- * with `timeout` and go on starting, so that a later request lists their tools. Requires
- * `fleet:machines.login` on the machine.
- *
- * Fails with:
- * - `MCP_SERVER_NOT_FOUND` when `server` is not configured;
- * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
- * - `FEATURE_UNAVAILABLE` when the machine does not offer `leaflow.fleet.mcp.v1`;
- * - `USER_NOT_FOUND`, `USER_NOT_ALLOWED`, `ACCOUNT_EXPIRED` or `PAM_PERMISSION_DENIED` when
- *   the machine refuses the account, as for opening a session;
- * - `MCP_START_FAILED` when the machine could not start MCP for the caller's account;
- * - `MACHINE_TIMEOUT` when the machine did not answer in time.
- * @deprecated
- * @summary List the caller's MCP tools on a machine
- */
-export declare const listMcpTools: (machineId: string, params?: ListMcpToolsParams, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<listMcpToolsResponse>;
 export type getPrivilegeAutoApprovalResponse200 = {
     data: PrivilegeAutoApprovalResource;
     status: 200;

package/dist/fleet/v1/generated/functions.js

@@ -344,7 +344,9 @@ export const getListToolsUrl = (machineId, params) => {
 };
 /**
  * Queries Agent's builtin tools and the caller's configured MCP servers live. No directory,
- * result or image is cached. Requires fleet:machines.login; builtin capabilities retain
+ * result or image is cached. Each tool has one callable name: builtin tools are named
+ * computer.*, MCP tools are named `<server>__<tool>`; source only filters the list and is not
+ * part of a tool's identity. Requires fleet:machines.login; builtin capabilities retain
  * their native policies and read-only restrictions. Ensures or reuses the caller's single
  * open graphical session, without launching a desktop environment. The client instance is
  * a UUID generated once per running client, not an authorization credential. Each request
@@ -367,19 +369,20 @@ export const getCallToolUrl = (machineId) => {
     return `https://fleet.leaflow.cloud/api/v1/machines/${encodeURIComponent(String(machineId))}/tools:call`;
 };
 /**
- * Uses the same current permissions, directory account and graphical session as listTools.
- * Listing is not a precondition: callers may use a previously discovered ToolRef, and this
+ * Uses the same current permissions, directory account and graphical session as list-tools.
+ * Listing is not a precondition: callers may use a previously discovered tool name, and this
  * operation never sends a discovery request or refreshes schemas before executing it.
  * A removed tool or MCP server returns TOOL_NOT_FOUND, as does a direct builtin computer.*
  * call while virtual desktop capability is unavailable. Actual permission errors remain
- * permission errors; a missing target window is not a missing tool. Use listTools only when
+ * permission errors; a missing target window is not a missing tool. Use list-tools only when
  * discovery or refresh is needed, and do not cache or reuse execution results.
- * Source is explicit: MCP names never select or impersonate builtin tools. The arguments
- * object is at most 256 KiB. The complete result is at most 8 MiB in the protobuf transport,
- * with each encoded image at most 4 MiB; images are converted to base64 once at this JSON
- * boundary, without recompression or persistence. Cancellation is propagated. A timeout,
- * disconnect or failed response does not prove that side effects did not happen; do not
- * automatically replay. operation_id only correlates live activity, not idempotency.
+ * The name selects exactly one tool: builtin tools are computer.*, MCP tools are
+ * `<server>__<tool>`. The arguments object is at most 256 KiB. The complete result is at most
+ * 8 MiB in the protobuf transport, with each encoded image at most 4 MiB; images are converted
+ * to base64 once at this JSON boundary, without recompression or persistence. Cancellation is
+ * propagated. A timeout, disconnect or failed response does not prove that side effects did
+ * not happen; do not automatically replay. operation_id only correlates live activity, not
+ * idempotency.
  * @summary Call a live builtin or external MCP tool
  */
 export const callTool = async (machineId, callToolRequest, options, fetchFn) => {
@@ -528,47 +531,6 @@ export const callMcpTool = async (machineId, serverName, toolName, callMcpToolRe
     const data = body ? JSON.parse(body) : {};
     return { data, status: res.status, headers: res.headers };
 };
-export const getListMcpToolsUrl = (machineId, params) => {
-    const normalizedParams = new URLSearchParams();
-    Object.entries(params || {}).forEach(([key, value]) => {
-        if (value !== undefined) {
-            normalizedParams.append(key, value === null ? "null" : String(value));
-        }
-    });
-    const stringifiedParams = normalizedParams.toString();
-    return stringifiedParams.length > 0
-        ? `https://fleet.leaflow.cloud/api/v1/machines/${encodeURIComponent(String(machineId))}/mcp-tools?${stringifiedParams}`
-        : `https://fleet.leaflow.cloud/api/v1/machines/${encodeURIComponent(String(machineId))}/mcp-tools`;
-};
-/**
- * Lists the tools of the caller's servers on the machine, or of one of them, that match
- * `query`: every word of it, ignoring case, in the tool's name, title or description. They
- * are ordered by server, then by tool name. Servers that are not running are started to
- * learn their tools; one that cannot be is named in `unavailable_servers`, and the others are
- * listed anyway. Slow servers do not hold the request up: those still starting are named
- * with `timeout` and go on starting, so that a later request lists their tools. Requires
- * `fleet:machines.login` on the machine.
- *
- * Fails with:
- * - `MCP_SERVER_NOT_FOUND` when `server` is not configured;
- * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
- * - `FEATURE_UNAVAILABLE` when the machine does not offer `leaflow.fleet.mcp.v1`;
- * - `USER_NOT_FOUND`, `USER_NOT_ALLOWED`, `ACCOUNT_EXPIRED` or `PAM_PERMISSION_DENIED` when
- *   the machine refuses the account, as for opening a session;
- * - `MCP_START_FAILED` when the machine could not start MCP for the caller's account;
- * - `MACHINE_TIMEOUT` when the machine did not answer in time.
- * @deprecated
- * @summary List the caller's MCP tools on a machine
- */
-export const listMcpTools = async (machineId, params, options, fetchFn) => {
-    const res = await (fetchFn ?? fetch)(getListMcpToolsUrl(machineId, params), {
-        ...options,
-        method: "GET",
-    });
-    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
-    const data = body ? JSON.parse(body) : {};
-    return { data, status: res.status, headers: res.headers };
-};
 export const getGetPrivilegeAutoApprovalUrl = (machineId) => {
     return `https://fleet.leaflow.cloud/api/v1/machines/${encodeURIComponent(String(machineId))}/privilege-auto-approval`;
 };

package/dist/fleet/v1/generated/models.d.ts

@@ -979,25 +979,14 @@ export interface SendMcpRequestResponse {
     /** The server's JSON-RPC 2.0 response, with the id of the request */
     response: SendMcpRequestResponseResponse;
 }
-export type ToolRefSource = (typeof ToolRefSource)[keyof typeof ToolRefSource];
-export declare const ToolRefSource: {
+/**
+ * Whether the tool is builtin or comes from an MCP server. For filtering only.
+ */
+export type ToolDescriptorSource = (typeof ToolDescriptorSource)[keyof typeof ToolDescriptorSource];
+export declare const ToolDescriptorSource: {
     readonly builtin: "builtin";
     readonly mcp: "mcp";
 };
-export interface ToolRef {
-    source: ToolRefSource;
-    /**
-     * @minLength 1
-     * @maxLength 128
-     */
-    name: string;
-    /**
-     * Required only for mcp; forbidden for builtin
-     * @minLength 1
-     * @maxLength 64
-     */
-    server?: string;
-}
 export type ToolDescriptorInputSchema = {
     [key: string]: unknown;
 };
@@ -1011,8 +1000,15 @@ export type ToolDescriptorMetadata = {
     [key: string]: unknown;
 };
 export interface ToolDescriptor {
-    tool: ToolRef;
+    /**
+     * The name to call it by. Builtin tools are named computer.*; MCP tools are named
+     * `<server>__<tool>`, so a name selects exactly one tool.
+     * @minLength 1
+     * @maxLength 194
+     */
     name: string;
+    /** Whether the tool is builtin or comes from an MCP server. For filtering only. */
+    source: ToolDescriptorSource;
     title: string;
     description: string;
     input_schema: ToolDescriptorInputSchema;
@@ -1045,7 +1041,13 @@ export type CallToolRequestArguments = {
 };
 export interface CallToolRequest {
     client_instance_id: string;
-    tool: ToolRef;
+    /**
+     * The name from list-tools. Builtin tools are computer.*; MCP tools are
+     * `<server>__<tool>`. The name selects the tool; source is not part of the call.
+     * @minLength 1
+     * @maxLength 194
+     */
+    tool: string;
     /** A JSON object, at most 256 KiB when encoded */
     arguments: CallToolRequestArguments;
     read_only?: boolean;
@@ -1166,59 +1168,6 @@ export interface CallMcpToolResponse {
     /** The tool's MCP `CallToolResult`, with `content`, `structuredContent` and `isError` */
     result: CallMcpToolResponseResult;
 }
-/**
- * The JSON Schema of its arguments
- */
-export type McpToolResourceInputSchema = {
-    [key: string]: unknown;
-};
-/**
- * The JSON Schema of its structured result; null when it has none
- * @nullable
- */
-export type McpToolResourceOutputSchema = {
-    [key: string]: unknown;
-} | null;
-/**
- * Its MCP `ToolAnnotations`, such as `readOnlyHint`; hints of the server, not guarantees
- * @nullable
- */
-export type McpToolResourceAnnotations = {
-    [key: string]: unknown;
-} | null;
-export interface McpToolResource {
-    /** The server that offers it */
-    server: string;
-    name: string;
-    title: string;
-    description: string;
-    /** The JSON Schema of its arguments */
-    input_schema: McpToolResourceInputSchema;
-    /**
-     * The JSON Schema of its structured result; null when it has none
-     * @nullable
-     */
-    output_schema: McpToolResourceOutputSchema;
-    /**
-     * Its MCP `ToolAnnotations`, such as `readOnlyHint`; hints of the server, not guarantees
-     * @nullable
-     */
-    annotations: McpToolResourceAnnotations;
-}
-export interface McpUnavailableServer {
-    name: string;
-    failure: McpServerFailure;
-}
-export interface McpToolList {
-    items: McpToolResource[];
-    /**
-     * Null on the last page
-     * @nullable
-     */
-    next_page_token: string | null;
-    /** Servers whose tools are missing because they could not be started or reached */
-    unavailable_servers: McpUnavailableServer[];
-}
 /**
  * How the caller's privilege requests on the machine are decided without asking them:
  * - `automatic_review`, recommended: a large language model reviews each request from what
@@ -1592,16 +1541,28 @@ export type DeleteMcpServerParams = {
     expected_revision?: string;
 };
 export type ListToolsParams = {
+    /**
+     * A UUID generated once per running client and reused for its lifetime. It separates
+     * concurrent callers of the same user and is not an authorization credential.
+     */
     client_instance_id: string;
+    /**
+     * Return only tools of this source. A filter, not part of a tool's identity.
+     */
     source?: ListToolsSource;
     /**
+     * Return only this MCP server's tools.
      * @maxLength 64
      */
     mcp_server?: string;
     /**
+     * Words that each must occur in a tool's name, title or description, ignoring case.
      * @maxLength 256
      */
     query?: string;
+    /**
+     * Sign the control authorization as read-only, so mutating tools are refused.
+     */
     read_only?: boolean;
     /**
      * @minimum 1
@@ -1619,28 +1580,6 @@ export declare const ListToolsSource: {
     readonly builtin: "builtin";
     readonly mcp: "mcp";
 };
-export type ListMcpToolsParams = {
-    /**
-     * Only this server's tools
-     * @maxLength 64
-     */
-    server?: string;
-    /**
-     * Words that each must occur in a tool's name, title or description
-     * @maxLength 256
-     */
-    query?: string;
-    /**
-     * @minimum 1
-     * @maximum 500
-     */
-    page_size?: number;
-    /**
-     * `next_page_token` of the previous page
-     * @maxLength 1024
-     */
-    page_token?: string;
-};
 export type ListPrivilegeAutoApprovalsParams = {
     /**
      * 1-based page number. Defaults to 1.

package/dist/fleet/v1/generated/models.js

@@ -68,7 +68,7 @@ export const McpServerFailure = {
     protocol_error: "protocol_error",
     timeout: "timeout",
 };
-export const ToolRefSource = {
+export const ToolDescriptorSource = {
     builtin: "builtin",
     mcp: "mcp",
 };

package/dist/fleet/v1/generated/schemas.zod.d.ts

@@ -445,7 +445,9 @@ export declare const DeleteMcpServerQueryParams: zod.ZodObject<{
 }, zod.z.core.$strict>;
 /**
  * Queries Agent's builtin tools and the caller's configured MCP servers live. No directory,
- * result or image is cached. Requires fleet:machines.login; builtin capabilities retain
+ * result or image is cached. Each tool has one callable name: builtin tools are named
+ * computer.*, MCP tools are named `<server>__<tool>`; source only filters the list and is not
+ * part of a tool's identity. Requires fleet:machines.login; builtin capabilities retain
  * their native policies and read-only restrictions. Ensures or reuses the caller's single
  * open graphical session, without launching a desktop environment. The client instance is
  * a UUID generated once per running client, not an authorization credential. Each request
@@ -479,19 +481,20 @@ export declare const ListToolsQueryParams: zod.ZodObject<{
     page_token: zod.ZodOptional<zod.ZodString>;
 }, zod.z.core.$strict>;
 /**
- * Uses the same current permissions, directory account and graphical session as listTools.
- * Listing is not a precondition: callers may use a previously discovered ToolRef, and this
+ * Uses the same current permissions, directory account and graphical session as list-tools.
+ * Listing is not a precondition: callers may use a previously discovered tool name, and this
  * operation never sends a discovery request or refreshes schemas before executing it.
  * A removed tool or MCP server returns TOOL_NOT_FOUND, as does a direct builtin computer.*
  * call while virtual desktop capability is unavailable. Actual permission errors remain
- * permission errors; a missing target window is not a missing tool. Use listTools only when
+ * permission errors; a missing target window is not a missing tool. Use list-tools only when
  * discovery or refresh is needed, and do not cache or reuse execution results.
- * Source is explicit: MCP names never select or impersonate builtin tools. The arguments
- * object is at most 256 KiB. The complete result is at most 8 MiB in the protobuf transport,
- * with each encoded image at most 4 MiB; images are converted to base64 once at this JSON
- * boundary, without recompression or persistence. Cancellation is propagated. A timeout,
- * disconnect or failed response does not prove that side effects did not happen; do not
- * automatically replay. operation_id only correlates live activity, not idempotency.
+ * The name selects exactly one tool: builtin tools are computer.*, MCP tools are
+ * `<server>__<tool>`. The arguments object is at most 256 KiB. The complete result is at most
+ * 8 MiB in the protobuf transport, with each encoded image at most 4 MiB; images are converted
+ * to base64 once at this JSON boundary, without recompression or persistence. Cancellation is
+ * propagated. A timeout, disconnect or failed response does not prove that side effects did
+ * not happen; do not automatically replay. operation_id only correlates live activity, not
+ * idempotency.
  * @summary Call a live builtin or external MCP tool
  */
 export declare const CallToolParams: zod.ZodObject<{
@@ -499,14 +502,7 @@ export declare const CallToolParams: zod.ZodObject<{
 }, zod.z.core.$strict>;
 export declare const CallToolBody: zod.ZodObject<{
     client_instance_id: zod.ZodUUID;
-    tool: zod.ZodObject<{
-        source: zod.ZodEnum<{
-            builtin: "builtin";
-            mcp: "mcp";
-        }>;
-        name: zod.ZodString;
-        server: zod.ZodOptional<zod.ZodString>;
-    }, zod.z.core.$strict>;
+    tool: zod.ZodString;
     arguments: zod.ZodRecord<zod.ZodString, zod.ZodUnknown>;
     read_only: zod.ZodDefault<zod.ZodBoolean>;
     timeout_seconds: zod.ZodDefault<zod.ZodInt>;
@@ -586,40 +582,6 @@ export declare const CallMcpToolBody: zod.ZodObject<{
     arguments: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodUnknown>>;
     timeout_seconds: zod.ZodDefault<zod.ZodInt>;
 }, zod.z.core.$strict>;
-/**
- * Lists the tools of the caller's servers on the machine, or of one of them, that match
- * `query`: every word of it, ignoring case, in the tool's name, title or description. They
- * are ordered by server, then by tool name. Servers that are not running are started to
- * learn their tools; one that cannot be is named in `unavailable_servers`, and the others are
- * listed anyway. Slow servers do not hold the request up: those still starting are named
- * with `timeout` and go on starting, so that a later request lists their tools. Requires
- * `fleet:machines.login` on the machine.
- *
- * Fails with:
- * - `MCP_SERVER_NOT_FOUND` when `server` is not configured;
- * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
- * - `FEATURE_UNAVAILABLE` when the machine does not offer `leaflow.fleet.mcp.v1`;
- * - `USER_NOT_FOUND`, `USER_NOT_ALLOWED`, `ACCOUNT_EXPIRED` or `PAM_PERMISSION_DENIED` when
- *   the machine refuses the account, as for opening a session;
- * - `MCP_START_FAILED` when the machine could not start MCP for the caller's account;
- * - `MACHINE_TIMEOUT` when the machine did not answer in time.
- * @deprecated
- * @summary List the caller's MCP tools on a machine
- */
-export declare const ListMcpToolsParams: zod.ZodObject<{
-    machineId: zod.ZodUUID;
-}, zod.z.core.$strict>;
-export declare const listMcpToolsQueryServerMax = 64;
-export declare const listMcpToolsQueryQueryMax = 256;
-export declare const listMcpToolsQueryPageSizeDefault = 100;
-export declare const listMcpToolsQueryPageSizeMax = 500;
-export declare const listMcpToolsQueryPageTokenMax = 1024;
-export declare const ListMcpToolsQueryParams: zod.ZodObject<{
-    server: zod.ZodOptional<zod.ZodString>;
-    query: zod.ZodOptional<zod.ZodString>;
-    page_size: zod.ZodDefault<zod.ZodInt>;
-    page_token: zod.ZodOptional<zod.ZodString>;
-}, zod.z.core.$strict>;
 /**
  * Returns the caller's automatic approval of their privilege requests on the machine. Fails
  * with `PRIVILEGE_AUTO_APPROVAL_NOT_FOUND` while the caller is asked every time, including

package/dist/fleet/v1/generated/schemas.zod.js

@@ -478,7 +478,9 @@ export const DeleteMcpServerQueryParams = zod.strictObject({
 });
 /**
  * Queries Agent's builtin tools and the caller's configured MCP servers live. No directory,
- * result or image is cached. Requires fleet:machines.login; builtin capabilities retain
+ * result or image is cached. Each tool has one callable name: builtin tools are named
+ * computer.*, MCP tools are named `<server>__<tool>`; source only filters the list and is not
+ * part of a tool's identity. Requires fleet:machines.login; builtin capabilities retain
  * their native policies and read-only restrictions. Ensures or reuses the caller's single
  * open graphical session, without launching a desktop environment. The client instance is
  * a UUID generated once per running client, not an authorization credential. Each request
@@ -499,28 +501,45 @@ export const listToolsQueryPageSizeDefault = 100;
 export const listToolsQueryPageSizeMax = 100;
 export const listToolsQueryPageTokenMax = 4096;
 export const ListToolsQueryParams = zod.strictObject({
-    client_instance_id: zod.uuid(),
-    source: zod.enum(["all", "builtin", "mcp"]).default(listToolsQuerySourceDefault),
-    mcp_server: zod.string().max(listToolsQueryMcpServerMax).optional(),
-    query: zod.string().max(listToolsQueryQueryMax).optional(),
-    read_only: zod.boolean().default(listToolsQueryReadOnlyDefault),
+    client_instance_id: zod
+        .uuid()
+        .describe("A UUID generated once per running client and reused for its lifetime. It separates\nconcurrent callers of the same user and is not an authorization credential."),
+    source: zod
+        .enum(["all", "builtin", "mcp"])
+        .default(listToolsQuerySourceDefault)
+        .describe("Return only tools of this source. A filter, not part of a tool's identity."),
+    mcp_server: zod
+        .string()
+        .max(listToolsQueryMcpServerMax)
+        .optional()
+        .describe("Return only this MCP server's tools."),
+    query: zod
+        .string()
+        .max(listToolsQueryQueryMax)
+        .optional()
+        .describe("Words that each must occur in a tool's name, title or description, ignoring case."),
+    read_only: zod
+        .boolean()
+        .default(listToolsQueryReadOnlyDefault)
+        .describe("Sign the control authorization as read-only, so mutating tools are refused."),
     page_size: zod.int().min(1).max(listToolsQueryPageSizeMax).default(listToolsQueryPageSizeDefault),
     page_token: zod.string().max(listToolsQueryPageTokenMax).optional(),
 });
 /**
- * Uses the same current permissions, directory account and graphical session as listTools.
- * Listing is not a precondition: callers may use a previously discovered ToolRef, and this
+ * Uses the same current permissions, directory account and graphical session as list-tools.
+ * Listing is not a precondition: callers may use a previously discovered tool name, and this
  * operation never sends a discovery request or refreshes schemas before executing it.
  * A removed tool or MCP server returns TOOL_NOT_FOUND, as does a direct builtin computer.*
  * call while virtual desktop capability is unavailable. Actual permission errors remain
- * permission errors; a missing target window is not a missing tool. Use listTools only when
+ * permission errors; a missing target window is not a missing tool. Use list-tools only when
  * discovery or refresh is needed, and do not cache or reuse execution results.
- * Source is explicit: MCP names never select or impersonate builtin tools. The arguments
- * object is at most 256 KiB. The complete result is at most 8 MiB in the protobuf transport,
- * with each encoded image at most 4 MiB; images are converted to base64 once at this JSON
- * boundary, without recompression or persistence. Cancellation is propagated. A timeout,
- * disconnect or failed response does not prove that side effects did not happen; do not
- * automatically replay. operation_id only correlates live activity, not idempotency.
+ * The name selects exactly one tool: builtin tools are computer.*, MCP tools are
+ * `<server>__<tool>`. The arguments object is at most 256 KiB. The complete result is at most
+ * 8 MiB in the protobuf transport, with each encoded image at most 4 MiB; images are converted
+ * to base64 once at this JSON boundary, without recompression or persistence. Cancellation is
+ * propagated. A timeout, disconnect or failed response does not prove that side effects did
+ * not happen; do not automatically replay. operation_id only correlates live activity, not
+ * idempotency.
  * @summary Call a live builtin or external MCP tool
  */
 export const CallToolParams = zod.strictObject({
@@ -606,56 +625,6 @@ export const CallMcpToolParams = zod.strictObject({
     toolName: zod.string().min(1).max(callMcpToolPathToolNameMax),
 });
 export const CallMcpToolBody = CallMcpToolRequest;
-/**
- * Lists the tools of the caller's servers on the machine, or of one of them, that match
- * `query`: every word of it, ignoring case, in the tool's name, title or description. They
- * are ordered by server, then by tool name. Servers that are not running are started to
- * learn their tools; one that cannot be is named in `unavailable_servers`, and the others are
- * listed anyway. Slow servers do not hold the request up: those still starting are named
- * with `timeout` and go on starting, so that a later request lists their tools. Requires
- * `fleet:machines.login` on the machine.
- *
- * Fails with:
- * - `MCP_SERVER_NOT_FOUND` when `server` is not configured;
- * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
- * - `FEATURE_UNAVAILABLE` when the machine does not offer `leaflow.fleet.mcp.v1`;
- * - `USER_NOT_FOUND`, `USER_NOT_ALLOWED`, `ACCOUNT_EXPIRED` or `PAM_PERMISSION_DENIED` when
- *   the machine refuses the account, as for opening a session;
- * - `MCP_START_FAILED` when the machine could not start MCP for the caller's account;
- * - `MACHINE_TIMEOUT` when the machine did not answer in time.
- * @deprecated
- * @summary List the caller's MCP tools on a machine
- */
-export const ListMcpToolsParams = zod.strictObject({
-    machineId: zod.uuid(),
-});
-export const listMcpToolsQueryServerMax = 64;
-export const listMcpToolsQueryQueryMax = 256;
-export const listMcpToolsQueryPageSizeDefault = 100;
-export const listMcpToolsQueryPageSizeMax = 500;
-export const listMcpToolsQueryPageTokenMax = 1024;
-export const ListMcpToolsQueryParams = zod.strictObject({
-    server: zod
-        .string()
-        .max(listMcpToolsQueryServerMax)
-        .optional()
-        .describe("Only this server's tools"),
-    query: zod
-        .string()
-        .max(listMcpToolsQueryQueryMax)
-        .optional()
-        .describe("Words that each must occur in a tool's name, title or description"),
-    page_size: zod
-        .int()
-        .min(1)
-        .max(listMcpToolsQueryPageSizeMax)
-        .default(listMcpToolsQueryPageSizeDefault),
-    page_token: zod
-        .string()
-        .max(listMcpToolsQueryPageTokenMax)
-        .optional()
-        .describe("`next_page_token` of the previous page"),
-});
 /**
  * Returns the caller's automatic approval of their privilege requests on the machine. Fails
  * with `PRIVILEGE_AUTO_APPROVAL_NOT_FOUND` while the caller is asked every time, including

package/dist/fleet/v1/generated/validators/callToolRequest.zod.d.ts

@@ -243,19 +243,13 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
+export declare const callToolRequestToolMax = 194;
 export declare const callToolRequestReadOnlyDefault = false;
 export declare const callToolRequestTimeoutSecondsDefault = 60;
 export declare const callToolRequestTimeoutSecondsMax = 240;
 export declare const CallToolRequest: zod.ZodObject<{
     client_instance_id: zod.ZodUUID;
-    tool: zod.ZodObject<{
-        source: zod.ZodEnum<{
-            builtin: "builtin";
-            mcp: "mcp";
-        }>;
-        name: zod.ZodString;
-        server: zod.ZodOptional<zod.ZodString>;
-    }, zod.z.core.$strict>;
+    tool: zod.ZodString;
     arguments: zod.ZodRecord<zod.ZodString, zod.ZodUnknown>;
     read_only: zod.ZodDefault<zod.ZodBoolean>;
     timeout_seconds: zod.ZodDefault<zod.ZodInt>;

package/dist/fleet/v1/generated/validators/callToolRequest.zod.js

@@ -243,13 +243,17 @@
  * OpenAPI spec version: 1.0.0
  */
 import * as zod from "zod";
-import { ToolRef } from "./toolRef.zod.js";
+export const callToolRequestToolMax = 194;
 export const callToolRequestReadOnlyDefault = false;
 export const callToolRequestTimeoutSecondsDefault = 60;
 export const callToolRequestTimeoutSecondsMax = 240;
 export const CallToolRequest = zod.strictObject({
     client_instance_id: zod.uuid(),
-    tool: ToolRef,
+    tool: zod
+        .string()
+        .min(1)
+        .max(callToolRequestToolMax)
+        .describe("The name from list-tools. Builtin tools are computer.*; MCP tools are\n`<server>__<tool>`. The name selects the tool; source is not part of the call."),
     arguments: zod
         .record(zod.string(), zod.unknown())
         .describe("A JSON object, at most 256 KiB when encoded"),