@lexq/cli 0.1.34 → 0.1.36

package/dist/mcp/register.js

@@ -432,7 +432,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_list",
     {
       title: "List Fact Definitions",
-      description: "List all fact definitions (input variable schema). Shows key, type, and required status. Always check this before creating rules.",
+      description: "List all fact definitions (input variable schema). Shows key, type, required, and PII status. Always check this before creating rules.",
       inputSchema: {
         page: z4.number().int().min(0).default(0).describe("Page number"),
         size: z4.number().int().min(1).max(100).default(20).describe("Page size"),
@@ -455,7 +455,10 @@ function registerFactTools(server, callApi) {
         name: z4.string().describe("Display name"),
         type: z4.enum(["STRING", "NUMBER", "BOOLEAN", "LIST_STRING", "LIST_NUMBER"]).describe("Value type"),
         description: z4.string().optional().describe("Description"),
-        isRequired: z4.boolean().default(false).describe("Whether this fact is required for rule evaluation")
+        isRequired: z4.boolean().default(false).describe("Whether this fact is required for rule evaluation"),
+        isPii: z4.boolean().default(false).describe(
+          "Mark as PII \u2014 masked on every read surface, revealable only in the console (audited)"
+        )
       }
     },
     async (args) => callApi("POST", "schema/facts", { body: args })
@@ -464,12 +467,13 @@ function registerFactTools(server, callApi) {
     "lexq_facts_update",
     {
       title: "Update Fact Definition",
-      description: "Update a fact definition. Key and type cannot be changed. Only provided fields are updated. System facts only allow name and description changes.",
+      description: "Update a fact definition. Key and type cannot be changed. Only provided fields are updated. System facts only allow name, description, and PII changes.",
       inputSchema: {
         factId: z4.string().uuid().describe("Fact definition ID"),
         name: z4.string().optional().describe("Display name"),
         description: z4.string().optional().describe("Description"),
-        isRequired: z4.boolean().optional().describe("Required flag")
+        isRequired: z4.boolean().optional().describe("Required flag"),
+        isPii: z4.boolean().optional().describe("PII flag \u2014 enables/disables masking (changeable even on system facts)")
       }
     },
     async ({ factId, ...body }) => callApi("PUT", `schema/facts/${factId}`, { body })
@@ -714,21 +718,32 @@ function registerAnalyticsTools(server, callApi) {
     {
       title: "Start Simulation",
       description: dedent2`
-        Start an Impact Simulation against historical or uploaded data.
+        Start an Impact Simulation against historical, uploaded, or inline data.
+
+        dataset.type and dataset.source are BOTH required, and must be paired:
+          HISTORICAL → source EXECUTION_LOGS, with dataset.from / dataset.to (yyyy-MM-dd)
+          UPLOADED   → source S3_BUCKET,      with dataset.path (the path returned by lexq_dataset_upload)
+          MANUAL     → source REQUEST_BODY,   with dataset.manualData (array of fact records)
 
-        dataset.type: "HISTORICAL" or "UPLOADED"
-        dataset.source (when HISTORICAL): "EXECUTION_LOGS"
-        dataset.from / dataset.to: date range (yyyy-MM-dd, when HISTORICAL)
         options.maxRecords: number (max 100000, default 10000)
-        options.baselinePolicyVersionId: uuid (optional, for comparison)
+        options.baselinePolicyVersionId: uuid (optional, for baseline comparison)
         options.includeRuleStats: boolean
+        options.metricConfig: optional — omit for plain execution count. To aggregate a fact, pass
+          { "targetVariable": "<fact>", "aggregationType": "COUNT" | "SUM" | "AVG" }
 
-        Example body:
+        Example (uploaded dataset):
         {
           "policyVersionId": "<uuid>",
-          "dataset": { "type": "HISTORICAL", "source": "EXECUTION_LOGS", "from": "2025-01-01", "to": "2025-01-31" },
+          "dataset": { "type": "UPLOADED", "source": "S3_BUCKET", "path": "<path from lexq_dataset_upload>" },
           "options": { "baselinePolicyVersionId": "<uuid>", "includeRuleStats": true, "maxRecords": 10000 }
         }
+
+        Example (historical):
+        {
+          "policyVersionId": "<uuid>",
+          "dataset": { "type": "HISTORICAL", "source": "EXECUTION_LOGS", "from": "2026-01-01", "to": "2026-01-31" },
+          "options": { "baselinePolicyVersionId": "<uuid>", "includeRuleStats": true }
+        }
       `,
       inputSchema: {
         body: z6.string().describe("JSON string of SimulationRequest")
@@ -802,8 +817,10 @@ function registerAnalyticsTools(server, callApi) {
       title: "Upload Dataset",
       description: dedent2`
         Upload inline CSV or JSON content as a simulation dataset.
-        The content is uploaded to S3 and a path is returned.
-        Use this path in simulation start with dataset type UPLOADED.
+        The content is uploaded to S3 and a path is returned in the "path" field.
+
+        To use the returned path in lexq_simulation_start, set:
+          dataset: { "type": "UPLOADED", "source": "S3_BUCKET", "path": "<returned path>" }
 
         CSV example:
         user_id,payment_amount
@@ -817,9 +834,25 @@ function registerAnalyticsTools(server, callApi) {
         filename: z6.string().default("dataset.csv").describe("Filename with extension (.csv or .json)")
       }
     },
-    async ({ content, filename }) => callApi("POST", "analytics/datasets/upload", {
-      upload: { content, filename, fieldName: "file" }
-    })
+    async ({ content, filename }) => {
+      const result = await callApi("POST", "analytics/datasets/upload", {
+        upload: { content, filename, fieldName: "file" }
+      });
+      if (!result.isError) {
+        try {
+          const uploaded = JSON.parse(result.content[0]?.text ?? "{}");
+          if (uploaded.path) {
+            const dataset = { type: "UPLOADED", source: "S3_BUCKET", path: uploaded.path };
+            result.content.push({
+              type: "text",
+              text: "Ready-to-use dataset block for lexq_simulation_start:\n" + JSON.stringify({ dataset }, null, 2)
+            });
+          }
+        } catch {
+        }
+      }
+      return result;
+    }
   );
   server.registerTool(
     "lexq_dataset_template",
@@ -838,8 +871,73 @@ function registerAnalyticsTools(server, callApi) {
   );
 }
 
-// src/mcp/tools/history.ts
+// src/mcp/tools/replay.ts
 import { z as z7 } from "zod";
+function registerReplayTools(server, callApi) {
+  server.registerTool(
+    "lexq_replay_decision",
+    {
+      title: "Replay a Decision",
+      description: "Re-evaluate a past execution (traceId) against a candidate version and return the decision diff (decisionChanged, effect changes, fired rules) plus a determinism verdict. Synchronous and free of charge (TPS throttle only). External effects (webhooks, notifications) are always mocked \u2014 nothing fires.",
+      inputSchema: {
+        traceId: z7.string().describe("Trace ID of the past execution to replay"),
+        candidateVersionId: z7.string().uuid().describe("Version to re-evaluate against")
+      }
+    },
+    async ({ traceId, candidateVersionId }) => callApi("POST", "replay/decisions", { body: { traceId, candidateVersionId } })
+  );
+  server.registerTool(
+    "lexq_replay_start",
+    {
+      title: "Start Window Replay (Blast Radius)",
+      description: "Submit an async job that replays a date window of past executions against a candidate version and measures the blast radius (how many decisions change). Billed per replayed record (REPLAY metric); VIEWER role cannot submit. Poll with lexq_replay_status.",
+      inputSchema: {
+        candidateVersionId: z7.string().uuid().describe("Version to re-evaluate against"),
+        from: z7.string().describe("Window start date (yyyy-MM-dd)"),
+        to: z7.string().describe("Window end date (yyyy-MM-dd)"),
+        maxRecords: z7.number().int().min(1).optional().describe("Sample cap (server default applies; hard cap 50k)")
+      }
+    },
+    async ({ candidateVersionId, from, to, maxRecords }) => callApi("POST", "replay/jobs", { body: { candidateVersionId, from, to, maxRecords } })
+  );
+  server.registerTool(
+    "lexq_replay_status",
+    {
+      title: "Get Replay Job Status",
+      description: "Poll a window replay job. RUNNING shows progress 0\u2013100; COMPLETED fills summary and changedSamples; FAILED carries errorMessage. capped=true means the window exceeded the sample cap and only part was replayed.",
+      inputSchema: {
+        jobId: z7.string().describe("Replay job ID from lexq_replay_start")
+      }
+    },
+    async ({ jobId }) => callApi("GET", `replay/jobs/${jobId}`)
+  );
+  server.registerTool(
+    "lexq_replay_list",
+    {
+      title: "List Replay Jobs",
+      description: "List window replay job history (reverse-chronological). Lightweight items \u2014 use lexq_replay_status for summary and changed samples.",
+      inputSchema: {
+        page: z7.number().int().min(0).default(0).describe("Page number"),
+        size: z7.number().int().min(1).max(100).default(20).describe("Page size")
+      }
+    },
+    async ({ page, size }) => callApi("GET", "replay/jobs", { params: paginationParams(page, size) })
+  );
+  server.registerTool(
+    "lexq_replay_cancel",
+    {
+      title: "Cancel Replay Job",
+      description: "Cooperatively cancel a PENDING or RUNNING window replay job. Other states are rejected. VIEWER role cannot cancel.",
+      inputSchema: {
+        jobId: z7.string().describe("Replay job ID")
+      }
+    },
+    async ({ jobId }) => callApi("POST", `replay/jobs/${jobId}/cancel`)
+  );
+}
+
+// src/mcp/tools/history.ts
+import { z as z8 } from "zod";
 function registerHistoryTools(server, callApi) {
   server.registerTool(
     "lexq_history_list",
@@ -847,14 +945,14 @@ function registerHistoryTools(server, callApi) {
       title: "List Execution History",
       description: "List policy execution history. Shows trace ID, group, version, status, match result, and latency.",
       inputSchema: {
-        page: z7.number().int().min(0).default(0).describe("Page number"),
-        size: z7.number().int().min(1).max(100).default(20).describe("Page size"),
-        traceId: z7.string().optional().describe("Filter by trace ID"),
-        groupId: z7.string().uuid().optional().describe("Filter by policy group"),
-        versionId: z7.string().uuid().optional().describe("Filter by version"),
-        status: z7.enum(["SUCCESS", "NO_MATCH", "ERROR", "TIMEOUT"]).optional().describe("Filter by execution status"),
-        startDate: z7.string().optional().describe("Start date (yyyy-MM-dd)"),
-        endDate: z7.string().optional().describe("End date (yyyy-MM-dd)")
+        page: z8.number().int().min(0).default(0).describe("Page number"),
+        size: z8.number().int().min(1).max(100).default(20).describe("Page size"),
+        traceId: z8.string().optional().describe("Filter by trace ID"),
+        groupId: z8.string().uuid().optional().describe("Filter by policy group"),
+        versionId: z8.string().uuid().optional().describe("Filter by version"),
+        status: z8.enum(["SUCCESS", "NO_MATCH", "ERROR", "TIMEOUT"]).optional().describe("Filter by execution status"),
+        startDate: z8.string().optional().describe("Start date (yyyy-MM-dd)"),
+        endDate: z8.string().optional().describe("End date (yyyy-MM-dd)")
       }
     },
     async ({ page, size, traceId, groupId, versionId, status, startDate, endDate }) => {
@@ -874,7 +972,7 @@ function registerHistoryTools(server, callApi) {
       title: "Get Execution Detail",
       description: "Get full execution detail including inputFacts, mutatedFacts, generatedVariables, executionTraces, and decisionTraces.",
       inputSchema: {
-        traceId: z7.string().describe("Trace ID from execution history")
+        traceId: z8.string().describe("Trace ID from execution history")
       }
     },
     async ({ traceId }) => callApi("GET", `execution/history/${traceId}`)
@@ -885,9 +983,9 @@ function registerHistoryTools(server, callApi) {
       title: "Execution Statistics",
       description: "Get execution KPIs: total executions, success/failure counts, success rate, and average latency.",
       inputSchema: {
-        groupId: z7.string().uuid().optional().describe("Filter by policy group"),
-        startDate: z7.string().optional().describe("Start date (yyyy-MM-dd)"),
-        endDate: z7.string().optional().describe("End date (yyyy-MM-dd)")
+        groupId: z8.string().uuid().optional().describe("Filter by policy group"),
+        startDate: z8.string().optional().describe("Start date (yyyy-MM-dd)"),
+        endDate: z8.string().optional().describe("End date (yyyy-MM-dd)")
       }
     },
     async ({ groupId, startDate, endDate }) => {
@@ -900,8 +998,49 @@ function registerHistoryTools(server, callApi) {
   );
 }
 
+// src/mcp/tools/provenance.ts
+import { z as z9 } from "zod";
+function registerProvenanceTools(server, callApi) {
+  server.registerTool(
+    "lexq_provenance_get",
+    {
+      title: "Get Decision Provenance",
+      description: "Get the lineage of a single decision: what was decided, deterministic why per rule, input facts (PII facts are masked as \u2022\u2022\u2022\u2022\u2022\u2022 with maskedKeys listing them \u2014 values are revealable only in the console, audited), the authored/published/deployed responsibility chain, and the rule snapshot fingerprint.",
+      inputSchema: {
+        traceId: z9.string().describe("Trace ID of the execution")
+      }
+    },
+    async ({ traceId }) => callApi("GET", `provenance/${traceId}`)
+  );
+  server.registerTool(
+    "lexq_pii_reveals_list",
+    {
+      title: "List PII Reveal Audits",
+      description: "List the PII reveal audit ledger \u2014 who revealed which fact of which trace, and when. Metadata only; revealed values are never stored or returned. Use for monthly access-log inspection and SIEM collection.",
+      inputSchema: {
+        page: z9.number().int().min(0).default(0).describe("Page number"),
+        size: z9.number().int().min(1).max(100).default(20).describe("Page size"),
+        traceId: z9.string().optional().describe("Filter by trace ID (exact match)"),
+        revealedBy: z9.string().optional().describe("Filter by operator ID (exact match)"),
+        factKey: z9.string().optional().describe("Filter by fact key (partial match, case-insensitive)"),
+        startDate: z9.string().optional().describe("Start date (yyyy-MM-dd)"),
+        endDate: z9.string().optional().describe("End date (yyyy-MM-dd)")
+      }
+    },
+    async ({ page, size, traceId, revealedBy, factKey, startDate, endDate }) => {
+      const params = paginationParams(page, size);
+      if (traceId) params.traceId = traceId;
+      if (revealedBy) params.revealedBy = revealedBy;
+      if (factKey) params.factKey = factKey;
+      if (startDate) params.startDate = startDate;
+      if (endDate) params.endDate = endDate;
+      return callApi("GET", "provenance/reveal-audits", { params });
+    }
+  );
+}
+
 // src/mcp/tools/integrations.ts
-import { z as z8 } from "zod";
+import { z as z10 } from "zod";
 function registerIntegrationTools(server, callApi) {
   server.registerTool(
     "lexq_integrations_list",
@@ -909,9 +1048,9 @@ function registerIntegrationTools(server, callApi) {
       title: "List Integrations",
       description: "List all external integrations (webhooks, CRM, notification, etc.).",
       inputSchema: {
-        page: z8.number().int().min(0).default(0).describe("Page number"),
-        size: z8.number().int().min(1).max(100).default(20).describe("Page size"),
-        type: z8.enum(["COUPON", "POINT", "NOTIFICATION", "CRM", "MESSENGER", "WEBHOOK"]).optional().describe("Filter by integration type")
+        page: z10.number().int().min(0).default(0).describe("Page number"),
+        size: z10.number().int().min(1).max(100).default(20).describe("Page size"),
+        type: z10.enum(["COUPON", "POINT", "NOTIFICATION", "CRM", "MESSENGER", "WEBHOOK"]).optional().describe("Filter by integration type")
       }
     },
     async ({ page, size, type }) => {
@@ -926,7 +1065,7 @@ function registerIntegrationTools(server, callApi) {
       title: "Get Integration",
       description: "Get integration detail by ID.",
       inputSchema: {
-        integrationId: z8.string().uuid().describe("Integration ID")
+        integrationId: z10.string().uuid().describe("Integration ID")
       }
     },
     async ({ integrationId }) => callApi("GET", `integrations/${integrationId}`)
@@ -937,13 +1076,13 @@ function registerIntegrationTools(server, callApi) {
       title: "Save Integration",
       description: "Create or update an integration. Provide id to update an existing one; omit id to create new. Types: COUPON, POINT, NOTIFICATION, CRM, MESSENGER, WEBHOOK.",
       inputSchema: {
-        id: z8.string().uuid().optional().describe("Integration ID (omit to create, provide to update)"),
-        type: z8.enum(["COUPON", "POINT", "NOTIFICATION", "CRM", "MESSENGER", "WEBHOOK"]).describe("Integration type"),
-        name: z8.string().describe("Integration name"),
-        baseUrl: z8.string().describe("Base URL of the external service"),
-        credential: z8.string().optional().describe("API key or token for the service"),
-        additionalConfig: z8.string().optional().describe("JSON string of additional config key-value pairs"),
-        isActive: z8.boolean().default(true).describe("Whether the integration is active")
+        id: z10.string().uuid().optional().describe("Integration ID (omit to create, provide to update)"),
+        type: z10.enum(["COUPON", "POINT", "NOTIFICATION", "CRM", "MESSENGER", "WEBHOOK"]).describe("Integration type"),
+        name: z10.string().describe("Integration name"),
+        baseUrl: z10.string().describe("Base URL of the external service"),
+        credential: z10.string().optional().describe("API key or token for the service"),
+        additionalConfig: z10.string().optional().describe("JSON string of additional config key-value pairs"),
+        isActive: z10.boolean().default(true).describe("Whether the integration is active")
       }
     },
     async ({ additionalConfig, ...rest }) => {
@@ -958,7 +1097,7 @@ function registerIntegrationTools(server, callApi) {
       title: "Delete Integration",
       description: "Delete an integration by ID.",
       inputSchema: {
-        integrationId: z8.string().uuid().describe("Integration ID")
+        integrationId: z10.string().uuid().describe("Integration ID")
       }
     },
     async ({ integrationId }) => callApi("DELETE", `integrations/${integrationId}`)
@@ -975,7 +1114,7 @@ function registerIntegrationTools(server, callApi) {
 }
 
 // src/mcp/tools/logs.ts
-import { z as z9 } from "zod";
+import { z as z11 } from "zod";
 
 // src/types/enums.ts
 var FailureStatus = ["PENDING", "RESOLVED", "IGNORED"];
@@ -1013,14 +1152,14 @@ function registerLogTools(server, callApi) {
       title: "List Failure Logs",
       description: "List system failure logs from background tasks (webhook calls, coupon issuance, etc.).",
       inputSchema: {
-        page: z9.number().int().min(0).default(0).describe("Page number"),
-        size: z9.number().int().min(1).max(100).default(20).describe("Page size"),
-        category: z9.enum(TaskCategory).optional().describe("Task category"),
-        taskType: z9.enum(TaskType).optional().describe("Task type"),
-        status: z9.enum(FailureStatus).optional().describe("Log status"),
-        keyword: z9.string().optional().describe("Search in refId, refSubId, errorMessage"),
-        startDate: z9.string().optional().describe("Start date (yyyy-MM-dd)"),
-        endDate: z9.string().optional().describe("End date (yyyy-MM-dd)")
+        page: z11.number().int().min(0).default(0).describe("Page number"),
+        size: z11.number().int().min(1).max(100).default(20).describe("Page size"),
+        category: z11.enum(TaskCategory).optional().describe("Task category"),
+        taskType: z11.enum(TaskType).optional().describe("Task type"),
+        status: z11.enum(FailureStatus).optional().describe("Log status"),
+        keyword: z11.string().optional().describe("Search in refId, refSubId, errorMessage"),
+        startDate: z11.string().optional().describe("Start date (yyyy-MM-dd)"),
+        endDate: z11.string().optional().describe("End date (yyyy-MM-dd)")
       }
     },
     async ({ page, size, category, taskType, status, keyword, startDate, endDate }) => {
@@ -1040,7 +1179,7 @@ function registerLogTools(server, callApi) {
       title: "Get Failure Log",
       description: "Get failure log detail by ID.",
       inputSchema: {
-        logId: z9.string().uuid().describe("Failure log ID")
+        logId: z11.string().uuid().describe("Failure log ID")
       }
     },
     async ({ logId }) => callApi("GET", `failure-logs/${logId}`)
@@ -1051,8 +1190,8 @@ function registerLogTools(server, callApi) {
       title: "Process Failure Log",
       description: "Process a single failure log: RETRY (re-execute with original payload), RESOLVE (mark as manually fixed), or IGNORE (skip intentionally).",
       inputSchema: {
-        logId: z9.string().uuid().describe("Failure log ID"),
-        action: z9.enum(FailureAction).describe("Action to take")
+        logId: z11.string().uuid().describe("Failure log ID"),
+        action: z11.enum(FailureAction).describe("Action to take")
       }
     },
     async ({ logId, action }) => callApi("POST", `failure-logs/${logId}/actions`, {
@@ -1065,8 +1204,8 @@ function registerLogTools(server, callApi) {
       title: "Bulk Process Failure Logs",
       description: "Process multiple failure logs at once. Provide an array of log IDs and the action.",
       inputSchema: {
-        logIds: z9.array(z9.string().uuid()).describe("Array of failure log IDs"),
-        action: z9.enum(FailureAction).describe("Action to apply to all logs")
+        logIds: z11.array(z11.string().uuid()).describe("Array of failure log IDs"),
+        action: z11.enum(FailureAction).describe("Action to apply to all logs")
       }
     },
     async ({ logIds, action }) => callApi("POST", "failure-logs/bulk-actions", {
@@ -1076,7 +1215,7 @@ function registerLogTools(server, callApi) {
 }
 
 // src/mcp/tools/webhook-subscriptions.ts
-import { z as z10 } from "zod";
+import { z as z12 } from "zod";
 function registerWebhookSubscriptionTools(server, callApi) {
   server.registerTool(
     "lexq_webhook_subscriptions_list",
@@ -1084,8 +1223,8 @@ function registerWebhookSubscriptionTools(server, callApi) {
       title: "List Webhook Subscriptions",
       description: "List platform event webhook subscriptions. These receive deployment lifecycle notifications (publish, deploy, rollback, undeploy).",
       inputSchema: {
-        page: z10.number().int().min(0).default(0).describe("Page number"),
-        size: z10.number().int().min(1).max(100).default(20).describe("Page size")
+        page: z12.number().int().min(0).default(0).describe("Page number"),
+        size: z12.number().int().min(1).max(100).default(20).describe("Page size")
       }
     },
     async ({ page, size }) => {
@@ -1099,7 +1238,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
       title: "Get Webhook Subscription",
       description: "Get webhook subscription detail by ID.",
       inputSchema: {
-        id: z10.string().uuid().describe("Webhook subscription ID")
+        id: z12.string().uuid().describe("Webhook subscription ID")
       }
     },
     async ({ id }) => callApi("GET", `webhook-subscriptions/${id}`)
@@ -1110,13 +1249,13 @@ function registerWebhookSubscriptionTools(server, callApi) {
       title: "Save Webhook Subscription",
       description: 'Create or update a webhook subscription. Omit id to create, provide id to update. Events: VERSION_PUBLISHED, DEPLOYED, ROLLED_BACK, UNDEPLOYED. Formats: GENERIC (full JSON), SLACK ({"text": "..."}).',
       inputSchema: {
-        id: z10.string().uuid().optional().describe("Subscription ID (omit to create, provide to update)"),
-        name: z10.string().min(1).describe("Subscription name (unique per tenant)"),
-        webhookUrl: z10.string().url().describe("Webhook endpoint URL"),
-        subscribedEvents: z10.array(z10.enum(PlatformEventType)).min(1).describe("Events to subscribe to"),
-        payloadFormat: z10.enum(WebhookPayloadFormat).optional().default("GENERIC").describe("Payload format"),
-        secret: z10.string().optional().describe("HMAC-SHA256 signing secret"),
-        isActive: z10.boolean().optional().default(true).describe("Whether the subscription is active")
+        id: z12.string().uuid().optional().describe("Subscription ID (omit to create, provide to update)"),
+        name: z12.string().min(1).describe("Subscription name (unique per tenant)"),
+        webhookUrl: z12.string().url().describe("Webhook endpoint URL"),
+        subscribedEvents: z12.array(z12.enum(PlatformEventType)).min(1).describe("Events to subscribe to"),
+        payloadFormat: z12.enum(WebhookPayloadFormat).optional().default("GENERIC").describe("Payload format"),
+        secret: z12.string().optional().describe("HMAC-SHA256 signing secret"),
+        isActive: z12.boolean().optional().default(true).describe("Whether the subscription is active")
       }
     },
     async ({ ...body }) => callApi("POST", "webhook-subscriptions", { body })
@@ -1127,7 +1266,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
       title: "Delete Webhook Subscription",
       description: "Delete a webhook subscription by ID.",
       inputSchema: {
-        id: z10.string().uuid().describe("Webhook subscription ID")
+        id: z12.string().uuid().describe("Webhook subscription ID")
       }
     },
     async ({ id }) => callApi("DELETE", `webhook-subscriptions/${id}`)
@@ -1138,7 +1277,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
       title: "Test Webhook Subscription",
       description: "Send a test event to verify webhook connectivity. Returns the HTTP status code and success/failure message.",
       inputSchema: {
-        id: z10.string().uuid().describe("Webhook subscription ID")
+        id: z12.string().uuid().describe("Webhook subscription ID")
       }
     },
     async ({ id }) => callApi("POST", `webhook-subscriptions/${id}/test`)
@@ -1146,7 +1285,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
 }
 
 // src/mcp/tools/domain-templates.ts
-import { z as z11 } from "zod";
+import { z as z13 } from "zod";
 function registerDomainTemplateTools(server, callApi) {
   server.registerTool(
     "lexq_domain_templates_list",
@@ -1163,7 +1302,7 @@ function registerDomainTemplateTools(server, callApi) {
       title: "Preview Domain Template",
       description: "Preview exactly what a domain template will provision before applying it: the fact definitions it registers, the sample rules it creates, and an apply plan. This is a read-only dry run \u2014 nothing is created. Only ACTIVE templates can be previewed.",
       inputSchema: {
-        template: z11.string().describe(
+        template: z13.string().describe(
           "Domain template key (e.g. ECOMMERCE). Use lexq_domain_templates_list to see available keys \u2014 currently only ECOMMERCE is ACTIVE."
         )
       }
@@ -1176,8 +1315,8 @@ function registerDomainTemplateTools(server, callApi) {
       title: "Apply Domain Template",
       description: "Apply a domain template to the current tenant. Creates the template's fact definitions and a new policy group pre-populated with its sample rules as a DRAFT version. Existing facts are skipped \u2014 apply is additive and never overwrites existing schema. Run lexq_domain_templates_preview first to review what will be created. Only ACTIVE templates can be applied.",
       inputSchema: {
-        template: z11.string().describe("Domain template key to apply (e.g. ECOMMERCE)."),
-        customName: z11.string().optional().describe(
+        template: z13.string().describe("Domain template key to apply (e.g. ECOMMERCE)."),
+        customName: z13.string().optional().describe(
           "Optional custom name for the policy group that gets created. If omitted, the template's default name is used."
         )
       }
@@ -1199,7 +1338,9 @@ function registerAllTools(server, callApi) {
   registerFactTools(server, callApi);
   registerDeployTools(server, callApi);
   registerAnalyticsTools(server, callApi);
+  registerReplayTools(server, callApi);
   registerHistoryTools(server, callApi);
+  registerProvenanceTools(server, callApi);
   registerIntegrationTools(server, callApi);
   registerLogTools(server, callApi);
   registerDomainTemplateTools(server, callApi);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lexq/cli",
-  "version": "0.1.34",
+  "version": "0.1.36",
   "description": "LexQ CLI — manage policies, simulate rules, and deploy from the terminal. Built for humans and AI agents.",
   "type": "module",
   "bin": {