@lexq/cli 0.3.0 → 0.4.0

package/README.md

@@ -5,7 +5,7 @@
 > your deploy pipeline, prove every change with Impact Simulation, and ship without
 > a git push.
 
-**[Website](https://lexq.io)** · **[Docs](https://docs.lexq.io)** · **[Console](https://console.lexq.io)**
+**[Website](https://lexq.io)** · **[Docs](https://docs.lexq.io)** · **[Console](https://console.lexq.io)** · **[MCP Registry](https://registry.modelcontextprotocol.io)**
 
 [![npm](https://img.shields.io/npm/v/@lexq/cli)](https://www.npmjs.com/package/@lexq/cli)
 [![License](https://img.shields.io/github/license/lexq-io/lexq-cli)](LICENSE)
@@ -146,7 +146,27 @@ Add to `claude_desktop_config.json`:
 ```
 
 > **Prerequisite:** `lexq auth login` must have been run once to store an
-> API key in `~/.lexq/config.json`.
+> API key in `~/.lexq/config.json`, or `LEXQ_API_KEY` must be set in the client's
+> environment block.
+
+### Registry
+
+The server is listed on the official MCP Registry as **`io.lexq/lexq`**. Clients that
+browse the registry find both the npm package and the hosted endpoint in that one entry.
+
+## Protocol Support
+
+The local stdio server and the hosted Streamable HTTP endpoint both serve two MCP
+revisions from one set of tool definitions, so a client sees the same tools either way.
+
+| Revision | How a client reaches it |
+|----------|-------------------------|
+| `2026-07-28` | A per-request `_meta` envelope. No handshake. |
+| `2025-11-25` | The `initialize` handshake. |
+
+There is nothing to configure. The server answers in whichever revision the opening message
+used, so a client can move to 2026-07-28 on its own schedule and one that has not moved
+keeps working.
 
 ## AI Agent Skills
 
@@ -222,6 +242,21 @@ Config is stored at `~/.lexq/config.json`:
 }
 ```
 
+The file holds an API key in plain text, so it is written `0600` inside a `0700` directory —
+readable by its owner and nobody else on the machine. An install created by an older version
+is repaired on the next save.
+
+### Environment variables
+
+These are read by the MCP server (`lexq serve --mcp`) and take precedence over the stored
+config. They let an editor or CI target an environment through the client's own config block,
+without writing to `~/.lexq/config.json`. CLI commands use `--api-key` and `--base-url` instead.
+
+| Variable | Overrides |
+|----------|-----------|
+| `LEXQ_API_KEY` | `apiKey` |
+| `PARTNER_BASE_URL` | `baseUrl` |
+
 ## Development
 
 ```bash
@@ -235,10 +270,31 @@ pnpm start -- groups list
 ```bash
 pnpm typecheck                  # Type check
 pnpm lint                       # ESLint
+pnpm build                      # Bundle to dist/
+```
+
+Checks that guard a stated fact against the thing that owns it. All of them run in CI.
+
+```bash
+pnpm enums:check                # Generated enums match the engine contract
+pnpm constants:check            # Numbers written in prose match the contract
+pnpm ab-key:check               # Tool descriptions still name the A/B traffic key
+pnpm surface:check              # Nothing internal reached a public file
+pnpm registry:check             # server.json agrees with package.json
+pnpm schemas:check              # tools/list matches the recorded snapshot (needs a build)
 pnpm test:fact-key              # Fact key grammar
 pnpm test:decimals              # Metric precision display
+pnpm test:export-format         # Export byte fidelity
+pnpm protocol:check             # README matches the revisions the server serves
 ```
 
+## Security
+
+Report a vulnerability through
+[GitHub's private reporting form](https://github.com/lexq-io/lexq-cli/security/advisories/new).
+The policy, including what is in scope, is in
+[SECURITY.md](https://github.com/lexq-io/lexq-cli/blob/main/SECURITY.md).
+
 ## License
 
 [Apache-2.0](LICENSE)

package/dist/index.js

@@ -3421,6 +3421,7 @@ function registerStatusTools(server, callApi) {
     "lexq_whoami",
     {
       title: "Who Am I",
+      annotations: { readOnlyHint: true },
       description: "Show current authentication info (tenant ID, user ID, role).",
       inputSchema: z.object({})
     },
@@ -3435,6 +3436,7 @@ function registerGroupTools(server, callApi) {
     "lexq_groups_list",
     {
       title: "List Policy Groups",
+      annotations: { readOnlyHint: true },
       description: "List all policy groups (tenant-wide, priority ASC).",
       inputSchema: z2.object({})
     },
@@ -3444,6 +3446,7 @@ function registerGroupTools(server, callApi) {
     "lexq_groups_get",
     {
       title: "Get Policy Group",
+      annotations: { readOnlyHint: true },
       description: "Get a single policy group by ID.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID")
@@ -3455,6 +3458,7 @@ function registerGroupTools(server, callApi) {
     "lexq_groups_create",
     {
       title: "Create Policy Group",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Create a new policy group. Requires name. Priority is auto-assigned (appended last, tenant-wide); use lexq_groups_reorder to change order. Optionally set conflict resolution, activation group, and description. Policy groups that share an activationGroup form a cluster and must share the same activationMode / activationStrategy / executionLimit; executionLimit is how many of those groups run, not how many rules.",
       inputSchema: z2.object({
         name: z2.string().describe("Group name (unique among non-ARCHIVED)"),
@@ -3485,6 +3489,7 @@ function registerGroupTools(server, callApi) {
     "lexq_groups_update",
     {
       title: "Update Policy Group",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Update a policy group. Only provided fields are updated; omitted fields remain unchanged.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID"),
@@ -3507,6 +3512,7 @@ function registerGroupTools(server, callApi) {
     "lexq_groups_delete",
     {
       title: "Delete Policy Group",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Archive a policy group. Only non-live groups can be deleted. This is irreversible.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID")
@@ -3518,6 +3524,7 @@ function registerGroupTools(server, callApi) {
     "lexq_groups_reorder",
     {
       title: "Reorder Policy Groups",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Reorder policy groups by priority. Priority is tenant-wide and flat (1...N continuous); array index 0 = priority 1 (highest precedence). activationGroup is not affected \u2014 this only changes priority.",
       inputSchema: z2.object({
         groupIds: z2.array(z2.string().uuid()).describe("Group IDs in desired priority order (index 0 = priority 1)")
@@ -3535,6 +3542,7 @@ function registerGroupTools(server, callApi) {
     "lexq_ab_test_start",
     {
       title: "Start A/B Test",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Start an A/B test on a policy group. Requires a challenger version ID and traffic rate. The split is computed from context.trafficKey on each execution request; requests that omit it never reach the challenger and the test stays at 0%.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID"),
@@ -3548,6 +3556,7 @@ function registerGroupTools(server, callApi) {
     "lexq_ab_test_stop",
     {
       title: "Stop A/B Test",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Stop a running A/B test. All traffic is restored to the control (current) version.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID")
@@ -3559,6 +3568,7 @@ function registerGroupTools(server, callApi) {
     "lexq_ab_test_adjust",
     {
       title: "Adjust A/B Test",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Adjust traffic rate of a running A/B test.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID"),
@@ -3576,6 +3586,7 @@ function registerVersionTools(server, callApi) {
     "lexq_versions_list",
     {
       title: "List Policy Versions",
+      annotations: { readOnlyHint: true },
       description: "List all versions of a policy group.",
       inputSchema: z3.object({
         groupId: z3.string().uuid().describe("Policy group ID"),
@@ -3591,6 +3602,7 @@ function registerVersionTools(server, callApi) {
     "lexq_versions_get",
     {
       title: "Get Policy Version",
+      annotations: { readOnlyHint: true },
       description: "Get a single version by ID, including its rules and fact requirements.",
       inputSchema: z3.object({
         groupId: z3.string().uuid().describe("Policy group ID"),
@@ -3603,6 +3615,7 @@ function registerVersionTools(server, callApi) {
     "lexq_versions_create",
     {
       title: "Create Policy Version",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Create a new DRAFT version in a policy group. Optionally provide a commit message and effective date range.",
       inputSchema: z3.object({
         groupId: z3.string().uuid().describe("Policy group ID"),
@@ -3617,6 +3630,7 @@ function registerVersionTools(server, callApi) {
     "lexq_versions_update",
     {
       title: "Update Policy Version",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Update a DRAFT version. Only DRAFT versions can be modified. Only provided fields are changed.",
       inputSchema: z3.object({
         groupId: z3.string().uuid().describe("Policy group ID"),
@@ -3632,6 +3646,7 @@ function registerVersionTools(server, callApi) {
     "lexq_versions_delete",
     {
       title: "Delete Policy Version",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Delete a DRAFT version. Only DRAFT versions can be deleted.",
       inputSchema: z3.object({
         groupId: z3.string().uuid().describe("Policy group ID"),
@@ -3644,6 +3659,7 @@ function registerVersionTools(server, callApi) {
     "lexq_versions_clone",
     {
       title: "Clone Policy Version",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Clone an existing version to create a new DRAFT. Useful when the source version is already published.",
       inputSchema: z3.object({
         groupId: z3.string().uuid().describe("Policy group ID"),
@@ -3666,6 +3682,7 @@ function registerRuleTools(server, callApi) {
     "lexq_rules_list",
     {
       title: "List Rules",
+      annotations: { readOnlyHint: true },
       description: "List all rules in a version (priority ASC). Returns summary with conditionSummary and actionSummary.",
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
@@ -3678,6 +3695,7 @@ function registerRuleTools(server, callApi) {
     "lexq_rules_get",
     {
       title: "Get Rule Detail",
+      annotations: { readOnlyHint: true },
       description: "Get full rule detail including condition tree and action definitions.",
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
@@ -3691,6 +3709,7 @@ function registerRuleTools(server, callApi) {
     "lexq_rules_create",
     {
       title: "Create Rule",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: dedent15`
         Create a rule in a DRAFT version. Requires name, condition tree, and actions array. priority is auto-assigned (appended last); use lexq_rules_reorder to change order.
 
@@ -3769,6 +3788,7 @@ function registerRuleTools(server, callApi) {
     "lexq_rules_update",
     {
       title: "Update Rule",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Update an existing rule in a DRAFT version. Only provided fields are changed.",
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
@@ -3790,6 +3810,7 @@ function registerRuleTools(server, callApi) {
     "lexq_rules_delete",
     {
       title: "Delete Rule",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Delete a rule from a DRAFT version.",
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
@@ -3810,6 +3831,7 @@ function registerRuleTools(server, callApi) {
     "lexq_rules_reorder",
     {
       title: "Reorder Rules",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Reorder rules by specifying rule IDs in desired order. Priorities are assigned 1...N (1-based, continuous); array index 0 = priority 1 (highest precedence).",
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
@@ -3831,6 +3853,7 @@ function registerRuleTools(server, callApi) {
     "lexq_rules_toggle",
     {
       title: "Toggle Rule",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Enable or disable a rule without deleting it.",
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
@@ -3858,6 +3881,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_list",
     {
       title: "List Fact Definitions",
+      annotations: { readOnlyHint: true },
       description: "List all fact definitions (input variable schema). Shows key, type, required, and PII status. Always check this before creating rules.",
       inputSchema: z5.object({
         page: z5.number().int().min(0).default(0).describe("Page number"),
@@ -3875,6 +3899,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_create",
     {
       title: "Create Fact Definition",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Register a new input variable. Key starts with a letter, then letters, numbers, and underscores (e.g. paymentAmount). Casing is not enforced. Types: STRING, NUMBER, BOOLEAN, LIST_STRING, LIST_NUMBER.",
       inputSchema: z5.object({
         key: z5.string().regex(FACT_KEY_PATTERN).describe("Variable key. Any casing; must start with a letter."),
@@ -3893,6 +3918,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_update",
     {
       title: "Update Fact Definition",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Update a fact definition. The key is immutable. The type can change only while no rule references the fact; if any does, the call fails with FD-007 and reports the count. Only the fields you send are changed. System facts accept name, description, and PII only.",
       inputSchema: z5.object({
         factId: z5.string().uuid().describe("Fact definition ID"),
@@ -3911,6 +3937,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_delete",
     {
       title: "Delete Fact Definition",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Delete a fact definition. System facts cannot be deleted. Neither can a fact that any rule references: that call fails with FD-006 and reports the count. Remove the references first.",
       inputSchema: z5.object({
         factId: z5.string().uuid().describe("Fact definition ID")
@@ -3922,6 +3949,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_action_metadata",
     {
       title: "Get Action Runtime Fact Metadata",
+      annotations: { readOnlyHint: true },
       description: "Retrieve runtime fact requirements per Action type. For each Action, shows which input facts must be present in the execution payload \u2014 e.g. MUTATE_FACT always requires its targetVar fact, plus refVar when one is specified. The factRequired flag describes the FACT, not the parameter: refVar is an optional parameter, but if you specify it the named fact must exist. A required fact absent at runtime throws \u2014 the engine never defaults to 0. Facts are supplied as input or written by a prior action in the same rule; only SET_FACT creates a fact from nothing. Static data, safe to cache in-session.",
       inputSchema: z5.object({})
     },
@@ -3931,6 +3959,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_unregistered",
     {
       title: "List Unregistered Facts",
+      annotations: { readOnlyHint: true },
       description: "List facts referenced by a version's rules but not yet defined (read-only \u2014 does not block publish/deploy, INV-4). Version-wide: covers every rule in the version. Each entry carries the inferred type, suggested name, and where it is referenced (condition/action). Register them with lexq_facts_create to enable type validation and the dry-run requirements analyzer.",
       inputSchema: z5.object({
         groupId: z5.string().uuid().describe("Policy group ID"),
@@ -3943,6 +3972,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_export",
     {
       title: "Export Fact Catalog",
+      annotations: { readOnlyHint: true },
       description: "Export the fact catalog. The two formats carry different things: CSV is the catalog as it stands, system facts included, for reading in a spreadsheet; JSON matches the shape that batch create accepts, so it can be fed straight back in, which is why it leaves out the fields that endpoint does not take. Returns the file contents as text.",
       inputSchema: z5.object({
         format: z5.enum(EXPORT_FORMATS).default("csv").describe("Export format"),
@@ -3962,6 +3992,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_publish",
     {
       title: "Publish Version",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Publish a DRAFT version (DRAFT \u2192 ACTIVE). Locks the version from further edits. Must have at least one rule. Undefined facts referenced by rules do not block publishing (INV-4); call lexq_facts_unregistered first to review them.",
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID"),
@@ -3975,6 +4006,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_live",
     {
       title: "Deploy to Live",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Deploy an ACTIVE (published) version to live traffic. Takes effect immediately. Versions whose effective start date has not arrived are rejected (P-037) \u2014 use lexq_deploy_schedule for those. Undefined facts do not block deployment (INV-4); use lexq_facts_unregistered to review what the version references but has not defined.",
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID"),
@@ -3990,6 +4022,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_rollback",
     {
       title: "Rollback Deployment",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Rollback to the previous deployed version. Only available if there is a previous version.",
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID"),
@@ -4004,6 +4037,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_undeploy",
     {
       title: "Undeploy",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Remove the live version from traffic. The version stays ACTIVE but no longer serves requests.",
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID"),
@@ -4018,6 +4052,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_schedule",
     {
       title: "Schedule Deployment",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Schedule an ACTIVE version with a future effective start date to auto-deploy at that time (Scheduled Deployment). One pending schedule per group; manual deploy/rollback/undeploy, starting an A/B test, or archiving the group cancels it. The snapshot hash is sealed at scheduling and re-verified at execution (fail-closed).",
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID"),
@@ -4033,6 +4068,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_unschedule",
     {
       title: "Cancel Scheduled Deployment",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Cancel the pending scheduled deployment for a group. The version itself is not affected. Fails with P-039 if no pending schedule exists.",
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID")
@@ -4044,6 +4080,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_schedules",
     {
       title: "List Scheduled Deployments",
+      annotations: { readOnlyHint: true },
       description: "List scheduled deployments across all groups (all statuses: PENDING, EXECUTED, CANCELED, FAILED), newest first.",
       inputSchema: z6.object({
         page: z6.number().int().min(0).default(0).describe("Page number"),
@@ -4056,6 +4093,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_history",
     {
       title: "Deployment History",
+      annotations: { readOnlyHint: true },
       description: "List deployment history across all groups.",
       inputSchema: z6.object({
         page: z6.number().int().min(0).default(0).describe("Page number"),
@@ -4079,6 +4117,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_detail",
     {
       title: "Deployment Detail",
+      annotations: { readOnlyHint: true },
       description: "Get detailed info about a specific deployment including snapshot hash and integrity check.",
       inputSchema: z6.object({
         deploymentId: z6.string().uuid().describe("Deployment ID")
@@ -4090,6 +4129,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_overview",
     {
       title: "Deployment Overview",
+      annotations: { readOnlyHint: true },
       description: "Show current deployment status of all groups \u2014 which version is live, last deployment type, and deployer.",
       inputSchema: z6.object({})
     },
@@ -4099,6 +4139,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_deployable",
     {
       title: "List Deployable Versions",
+      annotations: { readOnlyHint: true },
       description: "List ACTIVE (published) versions that can be deployed for a group. Use this to find which versions are available before calling deploy live.",
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID")
@@ -4110,6 +4151,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_diff",
     {
       title: "Deployment Diff",
+      annotations: { readOnlyHint: true },
       description: "Compare rule snapshots between two versions. Shows added, removed, and modified rules. Useful for reviewing changes before deploying a new version.",
       inputSchema: z6.object({
         baseVersionId: z6.string().uuid().describe("Base version ID (typically the current live)"),
@@ -4130,6 +4172,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_dry_run",
     {
       title: "Dry Run",
+      annotations: { readOnlyHint: true },
       description: dedent16`
         Execute a single dry run against a version. Tests how rules evaluate given input facts without side effects.
         
@@ -4159,6 +4202,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_dry_run_compare",
     {
       title: "Dry Run Compare",
+      annotations: { readOnlyHint: true },
       description: dedent16`
         Compare dry run results between two versions using the same input facts. Useful for validating changes.
         
@@ -4183,6 +4227,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_requirements",
     {
       title: "Analyze Requirements",
+      annotations: { readOnlyHint: true },
       description: "Analyze which input facts a version requires. Returns required keys, types, and an example request body.",
       inputSchema: z7.object({
         groupId: z7.string().uuid().describe("Policy group ID"),
@@ -4195,6 +4240,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_simulation_start",
     {
       title: "Start Simulation",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: dedent16`
         Start an Impact Simulation against historical, uploaded, or inline data.
 
@@ -4236,6 +4282,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_simulation_status",
     {
       title: "Simulation Status",
+      annotations: { readOnlyHint: true },
       description: "Get simulation status and results. Poll until status is COMPLETED or FAILED.",
       inputSchema: z7.object({
         simulationId: z7.string().uuid().describe("Simulation ID")
@@ -4247,6 +4294,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_simulation_list",
     {
       title: "List Simulations",
+      annotations: { readOnlyHint: true },
       description: "List simulation history with optional filters.",
       inputSchema: z7.object({
         page: z7.number().int().min(0).default(0).describe("Page number"),
@@ -4268,6 +4316,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_simulation_cancel",
     {
       title: "Cancel Simulation",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Cancel a running or pending simulation.",
       inputSchema: z7.object({
         simulationId: z7.string().uuid().describe("Simulation ID")
@@ -4279,6 +4328,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_simulation_export",
     {
       title: "Export Simulation",
+      annotations: { readOnlyHint: true },
       description: "Export simulation results as JSON or CSV. Returns the raw data.",
       inputSchema: z7.object({
         simulationId: z7.string().uuid().describe("Simulation ID"),
@@ -4293,6 +4343,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_dataset_upload",
     {
       title: "Upload Dataset",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: dedent16`
         Upload inline CSV or JSON content as a simulation dataset.
         The content is uploaded to S3 and a path is returned in the "path" field.
@@ -4336,6 +4387,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_dataset_template",
     {
       title: "Download Dataset Template",
+      annotations: { readOnlyHint: true },
       description: "Generate a sample CSV or JSON template based on the required facts of a version. Use this to understand the expected data format before uploading a dataset.",
       inputSchema: z7.object({
         groupId: z7.string().uuid().describe("Policy group ID"),
@@ -4365,6 +4417,7 @@ function registerProfileTools(server, callApi) {
     "lexq_profile_overview",
     {
       title: "Group Latency Profile",
+      annotations: { readOnlyHint: true },
       description: "Per-rule latency profile of a policy group over a time window: group TOTAL distribution split by cache state (HIT = compiled ruleset cache hit, MISS = deep-load + compile), a per-rule CONDITION/ACTION percentile table, and slow-rule flags. " + RELATIVE_THRESHOLD + ` Every percentile is accompanied by its sample count n; a percentile is withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 needs n \u2265 6, p95 n \u2265 60, p99 n \u2265 300 \u2014 display gate, separate from the n \u2265 ${MIN_SAMPLES} judgment gate). Baselines report INSUFFICIENT_COHORT when fewer than ${MIN_COHORT_SIZE} rules qualify. Rule detail comes from a deterministic ${PROFILE_SAMPLE_PERMILLE / 10}% sample of calls; TOTAL is recorded for every call. Defaults: last ${PROFILE_DEFAULT_WINDOW_HOURS}h, live version, cacheState HIT.`,
       inputSchema: z8.object({
         groupId: z8.string().uuid().describe("Policy group ID"),
@@ -4384,6 +4437,7 @@ function registerProfileTools(server, callApi) {
     "lexq_profile_rule",
     {
       title: "Rule Latency Detail",
+      annotations: { readOnlyHint: true },
       description: `Single-rule latency detail: merged phase \xD7 cacheState distributions plus a per-window time series (${LATENCY_WINDOW_MILLIS / 1e3}s windows). Missing windows are genuine gaps \u2014 never interpolated. Series points carry each window's own values; percentiles in merged distributions are withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 n \u2265 6, p95 n \u2265 60, p99 n \u2265 300). ` + RELATIVE_THRESHOLD,
       inputSchema: z8.object({
         groupId: z8.string().uuid().describe("Policy group ID"),
@@ -4408,6 +4462,7 @@ function registerReplayTools(server, callApi) {
     "lexq_replay_decision",
     {
       title: "Replay a Decision",
+      annotations: { readOnlyHint: true },
       description: "Re-evaluate a past execution (traceId) against a candidate version and return the decision diff (decisionChanged, effect changes, fired rules) plus a determinism verdict. Synchronous and free of charge (TPS throttle only). A replay sends no webhook, notification, or event: rule actions produce no outward effects.",
       inputSchema: z9.object({
         traceId: z9.string().describe("Trace ID of the past execution to replay"),
@@ -4420,6 +4475,7 @@ function registerReplayTools(server, callApi) {
     "lexq_replay_start",
     {
       title: "Start Window Replay (Blast Radius)",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Submit an async job that replays a date window of past executions against a candidate version and measures the blast radius (how many decisions change). Billed per replayed record (REPLAY metric); VIEWER role cannot submit. Poll with lexq_replay_status.",
       inputSchema: z9.object({
         candidateVersionId: z9.string().uuid().describe("Version to re-evaluate against"),
@@ -4436,6 +4492,7 @@ function registerReplayTools(server, callApi) {
     "lexq_replay_status",
     {
       title: "Get Replay Job Status",
+      annotations: { readOnlyHint: true },
       description: "Poll a window replay job. RUNNING shows progress 0\u2013100; COMPLETED fills summary and changedSamples; FAILED carries errorMessage. capped=true means the window exceeded the sample cap and only part was replayed.",
       inputSchema: z9.object({
         jobId: z9.string().describe("Replay job ID from lexq_replay_start")
@@ -4447,6 +4504,7 @@ function registerReplayTools(server, callApi) {
     "lexq_replay_list",
     {
       title: "List Replay Jobs",
+      annotations: { readOnlyHint: true },
       description: "List window replay job history (reverse-chronological). Lightweight items \u2014 use lexq_replay_status for summary and changed samples.",
       inputSchema: z9.object({
         page: z9.number().int().min(0).default(0).describe("Page number"),
@@ -4459,6 +4517,7 @@ function registerReplayTools(server, callApi) {
     "lexq_replay_cancel",
     {
       title: "Cancel Replay Job",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Cooperatively cancel a PENDING or RUNNING window replay job. Other states are rejected. VIEWER role cannot cancel.",
       inputSchema: z9.object({
         jobId: z9.string().describe("Replay job ID")
@@ -4470,6 +4529,7 @@ function registerReplayTools(server, callApi) {
     "lexq_replay_export",
     {
       title: "Export Replay Result",
+      annotations: { readOnlyHint: true },
       description: "Export a COMPLETED window replay job. A running job is rejected \u2014 a partial result reads as the whole thing on the receiving end. The two formats carry different things: CSV holds the effect blast radius, whose columns are fixed; JSON holds the changed samples and action parameters, which nest and whose keys differ per tenant. JSON is not a superset of CSV. Returns the file contents as text.",
       inputSchema: z9.object({
         jobId: z9.string().describe("Replay job ID"),
@@ -4487,6 +4547,7 @@ function registerHistoryTools(server, callApi) {
     "lexq_history_list",
     {
       title: "List Execution History",
+      annotations: { readOnlyHint: true },
       description: "List policy execution history. Shows trace ID, group, version, status, match result, and latency.",
       inputSchema: z10.object({
         page: z10.number().int().min(0).default(0).describe("Page number"),
@@ -4514,6 +4575,7 @@ function registerHistoryTools(server, callApi) {
     "lexq_history_get",
     {
       title: "Get Execution Detail",
+      annotations: { readOnlyHint: true },
       description: "Get full execution detail including inputFacts, mutatedFacts, generatedVariables, executionTraces, and decisionTraces.",
       inputSchema: z10.object({
         traceId: z10.string().describe("Trace ID from execution history")
@@ -4525,6 +4587,7 @@ function registerHistoryTools(server, callApi) {
     "lexq_history_stats",
     {
       title: "Execution Statistics",
+      annotations: { readOnlyHint: true },
       description: "Get execution KPIs: total executions, success/failure counts, success rate, and average latency.",
       inputSchema: z10.object({
         groupId: z10.string().uuid().optional().describe("Filter by policy group"),
@@ -4549,6 +4612,7 @@ function registerProvenanceTools(server, callApi) {
     "lexq_provenance_get",
     {
       title: "Get Decision Provenance",
+      annotations: { readOnlyHint: true },
       description: "Get the lineage of a single decision: what was decided, deterministic why per rule, input facts (PII facts are masked as \u2022\u2022\u2022\u2022\u2022\u2022 with maskedKeys listing them \u2014 values are revealable only in the console, audited), the authored/published/deployed responsibility chain, and the rule snapshot fingerprint.",
       inputSchema: z11.object({
         traceId: z11.string().describe("Trace ID of the execution")
@@ -4560,6 +4624,7 @@ function registerProvenanceTools(server, callApi) {
     "lexq_pii_reveals_list",
     {
       title: "List PII Reveal Audits",
+      annotations: { readOnlyHint: true },
       description: "List the PII reveal audit ledger \u2014 who revealed which fact of which trace, and when. Metadata only; revealed values are never stored or returned. Use for monthly access-log inspection and SIEM collection.",
       inputSchema: z11.object({
         page: z11.number().int().min(0).default(0).describe("Page number"),
@@ -4590,6 +4655,7 @@ function registerLogTools(server, callApi) {
     "lexq_logs_list",
     {
       title: "List Failure Logs",
+      annotations: { readOnlyHint: true },
       description: "List system failure logs from background tasks (platform event webhooks, scheduled deployments).",
       inputSchema: z12.object({
         page: z12.number().int().min(0).default(0).describe("Page number"),
@@ -4615,6 +4681,7 @@ function registerLogTools(server, callApi) {
     "lexq_logs_get",
     {
       title: "Get Failure Log",
+      annotations: { readOnlyHint: true },
       description: "Get failure log detail by ID.",
       inputSchema: z12.object({
         logId: z12.string().uuid().describe("Failure log ID")
@@ -4626,6 +4693,7 @@ function registerLogTools(server, callApi) {
     "lexq_logs_action",
     {
       title: "Process Failure Log",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Process a single failure log: RESOLVE (mark as manually fixed) or IGNORE (skip intentionally).",
       inputSchema: z12.object({
         logId: z12.string().uuid().describe("Failure log ID"),
@@ -4640,6 +4708,7 @@ function registerLogTools(server, callApi) {
     "lexq_logs_bulk_action",
     {
       title: "Bulk Process Failure Logs",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Process multiple failure logs at once. Provide an array of log IDs and the action.",
       inputSchema: z12.object({
         logIds: z12.array(z12.string().uuid()).describe("Array of failure log IDs"),
@@ -4659,6 +4728,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     "lexq_webhook_subscriptions_list",
     {
       title: "List Webhook Subscriptions",
+      annotations: { readOnlyHint: true },
       description: "List platform event webhook subscriptions. These receive deployment lifecycle notifications (publish, deploy, rollback, undeploy).",
       inputSchema: z13.object({
         page: z13.number().int().min(0).default(0).describe("Page number"),
@@ -4674,6 +4744,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     "lexq_webhook_subscriptions_get",
     {
       title: "Get Webhook Subscription",
+      annotations: { readOnlyHint: true },
       description: "Get webhook subscription detail by ID.",
       inputSchema: z13.object({
         id: z13.string().uuid().describe("Webhook subscription ID")
@@ -4685,6 +4756,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     "lexq_webhook_subscriptions_save",
     {
       title: "Save Webhook Subscription",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: 'Create or update a webhook subscription. Omit id to create, provide id to update. Events: VERSION_PUBLISHED, DEPLOYED, ROLLED_BACK, UNDEPLOYED. Formats: GENERIC (full JSON), SLACK ({"text": "..."}).',
       inputSchema: z13.object({
         id: z13.string().uuid().optional().describe("Subscription ID (omit to create, provide to update)"),
@@ -4702,6 +4774,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     "lexq_webhook_subscriptions_delete",
     {
       title: "Delete Webhook Subscription",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Delete a webhook subscription by ID.",
       inputSchema: z13.object({
         id: z13.string().uuid().describe("Webhook subscription ID")
@@ -4713,6 +4786,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     "lexq_webhook_subscriptions_test",
     {
       title: "Test Webhook Subscription",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Send a test event to verify webhook connectivity. Returns the HTTP status code and success/failure message.",
       inputSchema: z13.object({
         id: z13.string().uuid().describe("Webhook subscription ID")
@@ -4729,6 +4803,7 @@ function registerDomainTemplateTools(server, callApi) {
     "lexq_domain_templates_list",
     {
       title: "List Domain Templates",
+      annotations: { readOnlyHint: true },
       description: "List all domain templates. A domain template is a curated, industry-specific starter pack of fact definitions and sample rules (e.g. ECOMMERCE). Each entry reports its key, status (ACTIVE or COMING_SOON), and a summary of what it provisions. Call this before preview or apply to discover which templates can currently be applied.",
       inputSchema: z14.object({})
     },
@@ -4738,6 +4813,7 @@ function registerDomainTemplateTools(server, callApi) {
     "lexq_domain_templates_preview",
     {
       title: "Preview Domain Template",
+      annotations: { readOnlyHint: true },
       description: "Preview exactly what a domain template will provision before applying it: the fact definitions it registers, the sample rules it creates, and an apply plan. This is a read-only dry run \u2014 nothing is created. Only ACTIVE templates can be previewed.",
       inputSchema: z14.object({
         template: z14.string().describe(
@@ -4751,6 +4827,7 @@ function registerDomainTemplateTools(server, callApi) {
     "lexq_domain_templates_apply",
     {
       title: "Apply Domain Template",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Apply a domain template to the current tenant. Creates the template's fact definitions and a new policy group pre-populated with its sample rules as a DRAFT version. Existing facts are skipped \u2014 apply is additive and never overwrites existing schema. Run lexq_domain_templates_preview first to review what will be created. Only ACTIVE templates can be applied.",
       inputSchema: z14.object({
         template: z14.string().describe("Domain template key to apply (e.g. ECOMMERCE)."),

package/dist/mcp/register.js

@@ -5,6 +5,7 @@ function registerStatusTools(server, callApi) {
     "lexq_whoami",
     {
       title: "Who Am I",
+      annotations: { readOnlyHint: true },
       description: "Show current authentication info (tenant ID, user ID, role).",
       inputSchema: z.object({})
     },
@@ -39,6 +40,7 @@ function registerGroupTools(server, callApi) {
     "lexq_groups_list",
     {
       title: "List Policy Groups",
+      annotations: { readOnlyHint: true },
       description: "List all policy groups (tenant-wide, priority ASC).",
       inputSchema: z2.object({})
     },
@@ -48,6 +50,7 @@ function registerGroupTools(server, callApi) {
     "lexq_groups_get",
     {
       title: "Get Policy Group",
+      annotations: { readOnlyHint: true },
       description: "Get a single policy group by ID.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID")
@@ -59,6 +62,7 @@ function registerGroupTools(server, callApi) {
     "lexq_groups_create",
     {
       title: "Create Policy Group",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Create a new policy group. Requires name. Priority is auto-assigned (appended last, tenant-wide); use lexq_groups_reorder to change order. Optionally set conflict resolution, activation group, and description. Policy groups that share an activationGroup form a cluster and must share the same activationMode / activationStrategy / executionLimit; executionLimit is how many of those groups run, not how many rules.",
       inputSchema: z2.object({
         name: z2.string().describe("Group name (unique among non-ARCHIVED)"),
@@ -89,6 +93,7 @@ function registerGroupTools(server, callApi) {
     "lexq_groups_update",
     {
       title: "Update Policy Group",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Update a policy group. Only provided fields are updated; omitted fields remain unchanged.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID"),
@@ -111,6 +116,7 @@ function registerGroupTools(server, callApi) {
     "lexq_groups_delete",
     {
       title: "Delete Policy Group",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Archive a policy group. Only non-live groups can be deleted. This is irreversible.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID")
@@ -122,6 +128,7 @@ function registerGroupTools(server, callApi) {
     "lexq_groups_reorder",
     {
       title: "Reorder Policy Groups",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Reorder policy groups by priority. Priority is tenant-wide and flat (1...N continuous); array index 0 = priority 1 (highest precedence). activationGroup is not affected \u2014 this only changes priority.",
       inputSchema: z2.object({
         groupIds: z2.array(z2.string().uuid()).describe("Group IDs in desired priority order (index 0 = priority 1)")
@@ -139,6 +146,7 @@ function registerGroupTools(server, callApi) {
     "lexq_ab_test_start",
     {
       title: "Start A/B Test",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Start an A/B test on a policy group. Requires a challenger version ID and traffic rate. The split is computed from context.trafficKey on each execution request; requests that omit it never reach the challenger and the test stays at 0%.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID"),
@@ -152,6 +160,7 @@ function registerGroupTools(server, callApi) {
     "lexq_ab_test_stop",
     {
       title: "Stop A/B Test",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Stop a running A/B test. All traffic is restored to the control (current) version.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID")
@@ -163,6 +172,7 @@ function registerGroupTools(server, callApi) {
     "lexq_ab_test_adjust",
     {
       title: "Adjust A/B Test",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Adjust traffic rate of a running A/B test.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID"),
@@ -238,6 +248,7 @@ function registerVersionTools(server, callApi) {
     "lexq_versions_list",
     {
       title: "List Policy Versions",
+      annotations: { readOnlyHint: true },
       description: "List all versions of a policy group.",
       inputSchema: z3.object({
         groupId: z3.string().uuid().describe("Policy group ID"),
@@ -253,6 +264,7 @@ function registerVersionTools(server, callApi) {
     "lexq_versions_get",
     {
       title: "Get Policy Version",
+      annotations: { readOnlyHint: true },
       description: "Get a single version by ID, including its rules and fact requirements.",
       inputSchema: z3.object({
         groupId: z3.string().uuid().describe("Policy group ID"),
@@ -265,6 +277,7 @@ function registerVersionTools(server, callApi) {
     "lexq_versions_create",
     {
       title: "Create Policy Version",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Create a new DRAFT version in a policy group. Optionally provide a commit message and effective date range.",
       inputSchema: z3.object({
         groupId: z3.string().uuid().describe("Policy group ID"),
@@ -279,6 +292,7 @@ function registerVersionTools(server, callApi) {
     "lexq_versions_update",
     {
       title: "Update Policy Version",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Update a DRAFT version. Only DRAFT versions can be modified. Only provided fields are changed.",
       inputSchema: z3.object({
         groupId: z3.string().uuid().describe("Policy group ID"),
@@ -294,6 +308,7 @@ function registerVersionTools(server, callApi) {
     "lexq_versions_delete",
     {
       title: "Delete Policy Version",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Delete a DRAFT version. Only DRAFT versions can be deleted.",
       inputSchema: z3.object({
         groupId: z3.string().uuid().describe("Policy group ID"),
@@ -306,6 +321,7 @@ function registerVersionTools(server, callApi) {
     "lexq_versions_clone",
     {
       title: "Clone Policy Version",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Clone an existing version to create a new DRAFT. Useful when the source version is already published.",
       inputSchema: z3.object({
         groupId: z3.string().uuid().describe("Policy group ID"),
@@ -339,6 +355,7 @@ function registerRuleTools(server, callApi) {
     "lexq_rules_list",
     {
       title: "List Rules",
+      annotations: { readOnlyHint: true },
       description: "List all rules in a version (priority ASC). Returns summary with conditionSummary and actionSummary.",
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
@@ -351,6 +368,7 @@ function registerRuleTools(server, callApi) {
     "lexq_rules_get",
     {
       title: "Get Rule Detail",
+      annotations: { readOnlyHint: true },
       description: "Get full rule detail including condition tree and action definitions.",
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
@@ -364,6 +382,7 @@ function registerRuleTools(server, callApi) {
     "lexq_rules_create",
     {
       title: "Create Rule",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: dedent`
         Create a rule in a DRAFT version. Requires name, condition tree, and actions array. priority is auto-assigned (appended last); use lexq_rules_reorder to change order.
 
@@ -442,6 +461,7 @@ function registerRuleTools(server, callApi) {
     "lexq_rules_update",
     {
       title: "Update Rule",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Update an existing rule in a DRAFT version. Only provided fields are changed.",
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
@@ -463,6 +483,7 @@ function registerRuleTools(server, callApi) {
     "lexq_rules_delete",
     {
       title: "Delete Rule",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Delete a rule from a DRAFT version.",
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
@@ -483,6 +504,7 @@ function registerRuleTools(server, callApi) {
     "lexq_rules_reorder",
     {
       title: "Reorder Rules",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Reorder rules by specifying rule IDs in desired order. Priorities are assigned 1...N (1-based, continuous); array index 0 = priority 1 (highest precedence).",
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
@@ -504,6 +526,7 @@ function registerRuleTools(server, callApi) {
     "lexq_rules_toggle",
     {
       title: "Toggle Rule",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Enable or disable a rule without deleting it.",
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
@@ -535,6 +558,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_list",
     {
       title: "List Fact Definitions",
+      annotations: { readOnlyHint: true },
       description: "List all fact definitions (input variable schema). Shows key, type, required, and PII status. Always check this before creating rules.",
       inputSchema: z5.object({
         page: z5.number().int().min(0).default(0).describe("Page number"),
@@ -552,6 +576,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_create",
     {
       title: "Create Fact Definition",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Register a new input variable. Key starts with a letter, then letters, numbers, and underscores (e.g. paymentAmount). Casing is not enforced. Types: STRING, NUMBER, BOOLEAN, LIST_STRING, LIST_NUMBER.",
       inputSchema: z5.object({
         key: z5.string().regex(FACT_KEY_PATTERN).describe("Variable key. Any casing; must start with a letter."),
@@ -570,6 +595,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_update",
     {
       title: "Update Fact Definition",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Update a fact definition. The key is immutable. The type can change only while no rule references the fact; if any does, the call fails with FD-007 and reports the count. Only the fields you send are changed. System facts accept name, description, and PII only.",
       inputSchema: z5.object({
         factId: z5.string().uuid().describe("Fact definition ID"),
@@ -588,6 +614,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_delete",
     {
       title: "Delete Fact Definition",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Delete a fact definition. System facts cannot be deleted. Neither can a fact that any rule references: that call fails with FD-006 and reports the count. Remove the references first.",
       inputSchema: z5.object({
         factId: z5.string().uuid().describe("Fact definition ID")
@@ -599,6 +626,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_action_metadata",
     {
       title: "Get Action Runtime Fact Metadata",
+      annotations: { readOnlyHint: true },
       description: "Retrieve runtime fact requirements per Action type. For each Action, shows which input facts must be present in the execution payload \u2014 e.g. MUTATE_FACT always requires its targetVar fact, plus refVar when one is specified. The factRequired flag describes the FACT, not the parameter: refVar is an optional parameter, but if you specify it the named fact must exist. A required fact absent at runtime throws \u2014 the engine never defaults to 0. Facts are supplied as input or written by a prior action in the same rule; only SET_FACT creates a fact from nothing. Static data, safe to cache in-session.",
       inputSchema: z5.object({})
     },
@@ -608,6 +636,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_unregistered",
     {
       title: "List Unregistered Facts",
+      annotations: { readOnlyHint: true },
       description: "List facts referenced by a version's rules but not yet defined (read-only \u2014 does not block publish/deploy, INV-4). Version-wide: covers every rule in the version. Each entry carries the inferred type, suggested name, and where it is referenced (condition/action). Register them with lexq_facts_create to enable type validation and the dry-run requirements analyzer.",
       inputSchema: z5.object({
         groupId: z5.string().uuid().describe("Policy group ID"),
@@ -620,6 +649,7 @@ function registerFactTools(server, callApi) {
     "lexq_facts_export",
     {
       title: "Export Fact Catalog",
+      annotations: { readOnlyHint: true },
       description: "Export the fact catalog. The two formats carry different things: CSV is the catalog as it stands, system facts included, for reading in a spreadsheet; JSON matches the shape that batch create accepts, so it can be fed straight back in, which is why it leaves out the fields that endpoint does not take. Returns the file contents as text.",
       inputSchema: z5.object({
         format: z5.enum(EXPORT_FORMATS).default("csv").describe("Export format"),
@@ -639,6 +669,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_publish",
     {
       title: "Publish Version",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Publish a DRAFT version (DRAFT \u2192 ACTIVE). Locks the version from further edits. Must have at least one rule. Undefined facts referenced by rules do not block publishing (INV-4); call lexq_facts_unregistered first to review them.",
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID"),
@@ -652,6 +683,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_live",
     {
       title: "Deploy to Live",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Deploy an ACTIVE (published) version to live traffic. Takes effect immediately. Versions whose effective start date has not arrived are rejected (P-037) \u2014 use lexq_deploy_schedule for those. Undefined facts do not block deployment (INV-4); use lexq_facts_unregistered to review what the version references but has not defined.",
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID"),
@@ -667,6 +699,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_rollback",
     {
       title: "Rollback Deployment",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Rollback to the previous deployed version. Only available if there is a previous version.",
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID"),
@@ -681,6 +714,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_undeploy",
     {
       title: "Undeploy",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Remove the live version from traffic. The version stays ACTIVE but no longer serves requests.",
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID"),
@@ -695,6 +729,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_schedule",
     {
       title: "Schedule Deployment",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Schedule an ACTIVE version with a future effective start date to auto-deploy at that time (Scheduled Deployment). One pending schedule per group; manual deploy/rollback/undeploy, starting an A/B test, or archiving the group cancels it. The snapshot hash is sealed at scheduling and re-verified at execution (fail-closed).",
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID"),
@@ -710,6 +745,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_unschedule",
     {
       title: "Cancel Scheduled Deployment",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Cancel the pending scheduled deployment for a group. The version itself is not affected. Fails with P-039 if no pending schedule exists.",
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID")
@@ -721,6 +757,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_schedules",
     {
       title: "List Scheduled Deployments",
+      annotations: { readOnlyHint: true },
       description: "List scheduled deployments across all groups (all statuses: PENDING, EXECUTED, CANCELED, FAILED), newest first.",
       inputSchema: z6.object({
         page: z6.number().int().min(0).default(0).describe("Page number"),
@@ -733,6 +770,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_history",
     {
       title: "Deployment History",
+      annotations: { readOnlyHint: true },
       description: "List deployment history across all groups.",
       inputSchema: z6.object({
         page: z6.number().int().min(0).default(0).describe("Page number"),
@@ -756,6 +794,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_detail",
     {
       title: "Deployment Detail",
+      annotations: { readOnlyHint: true },
       description: "Get detailed info about a specific deployment including snapshot hash and integrity check.",
       inputSchema: z6.object({
         deploymentId: z6.string().uuid().describe("Deployment ID")
@@ -767,6 +806,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_overview",
     {
       title: "Deployment Overview",
+      annotations: { readOnlyHint: true },
       description: "Show current deployment status of all groups \u2014 which version is live, last deployment type, and deployer.",
       inputSchema: z6.object({})
     },
@@ -776,6 +816,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_deployable",
     {
       title: "List Deployable Versions",
+      annotations: { readOnlyHint: true },
       description: "List ACTIVE (published) versions that can be deployed for a group. Use this to find which versions are available before calling deploy live.",
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID")
@@ -787,6 +828,7 @@ function registerDeployTools(server, callApi) {
     "lexq_deploy_diff",
     {
       title: "Deployment Diff",
+      annotations: { readOnlyHint: true },
       description: "Compare rule snapshots between two versions. Shows added, removed, and modified rules. Useful for reviewing changes before deploying a new version.",
       inputSchema: z6.object({
         baseVersionId: z6.string().uuid().describe("Base version ID (typically the current live)"),
@@ -807,6 +849,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_dry_run",
     {
       title: "Dry Run",
+      annotations: { readOnlyHint: true },
       description: dedent2`
         Execute a single dry run against a version. Tests how rules evaluate given input facts without side effects.
         
@@ -836,6 +879,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_dry_run_compare",
     {
       title: "Dry Run Compare",
+      annotations: { readOnlyHint: true },
       description: dedent2`
         Compare dry run results between two versions using the same input facts. Useful for validating changes.
         
@@ -860,6 +904,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_requirements",
     {
       title: "Analyze Requirements",
+      annotations: { readOnlyHint: true },
       description: "Analyze which input facts a version requires. Returns required keys, types, and an example request body.",
       inputSchema: z7.object({
         groupId: z7.string().uuid().describe("Policy group ID"),
@@ -872,6 +917,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_simulation_start",
     {
       title: "Start Simulation",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: dedent2`
         Start an Impact Simulation against historical, uploaded, or inline data.
 
@@ -913,6 +959,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_simulation_status",
     {
       title: "Simulation Status",
+      annotations: { readOnlyHint: true },
       description: "Get simulation status and results. Poll until status is COMPLETED or FAILED.",
       inputSchema: z7.object({
         simulationId: z7.string().uuid().describe("Simulation ID")
@@ -924,6 +971,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_simulation_list",
     {
       title: "List Simulations",
+      annotations: { readOnlyHint: true },
       description: "List simulation history with optional filters.",
       inputSchema: z7.object({
         page: z7.number().int().min(0).default(0).describe("Page number"),
@@ -945,6 +993,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_simulation_cancel",
     {
       title: "Cancel Simulation",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Cancel a running or pending simulation.",
       inputSchema: z7.object({
         simulationId: z7.string().uuid().describe("Simulation ID")
@@ -956,6 +1005,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_simulation_export",
     {
       title: "Export Simulation",
+      annotations: { readOnlyHint: true },
       description: "Export simulation results as JSON or CSV. Returns the raw data.",
       inputSchema: z7.object({
         simulationId: z7.string().uuid().describe("Simulation ID"),
@@ -970,6 +1020,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_dataset_upload",
     {
       title: "Upload Dataset",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: dedent2`
         Upload inline CSV or JSON content as a simulation dataset.
         The content is uploaded to S3 and a path is returned in the "path" field.
@@ -1013,6 +1064,7 @@ function registerAnalyticsTools(server, callApi) {
     "lexq_dataset_template",
     {
       title: "Download Dataset Template",
+      annotations: { readOnlyHint: true },
       description: "Generate a sample CSV or JSON template based on the required facts of a version. Use this to understand the expected data format before uploading a dataset.",
       inputSchema: z7.object({
         groupId: z7.string().uuid().describe("Policy group ID"),
@@ -1042,6 +1094,7 @@ function registerProfileTools(server, callApi) {
     "lexq_profile_overview",
     {
       title: "Group Latency Profile",
+      annotations: { readOnlyHint: true },
       description: "Per-rule latency profile of a policy group over a time window: group TOTAL distribution split by cache state (HIT = compiled ruleset cache hit, MISS = deep-load + compile), a per-rule CONDITION/ACTION percentile table, and slow-rule flags. " + RELATIVE_THRESHOLD + ` Every percentile is accompanied by its sample count n; a percentile is withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 needs n \u2265 6, p95 n \u2265 60, p99 n \u2265 300 \u2014 display gate, separate from the n \u2265 ${MIN_SAMPLES} judgment gate). Baselines report INSUFFICIENT_COHORT when fewer than ${MIN_COHORT_SIZE} rules qualify. Rule detail comes from a deterministic ${PROFILE_SAMPLE_PERMILLE / 10}% sample of calls; TOTAL is recorded for every call. Defaults: last ${PROFILE_DEFAULT_WINDOW_HOURS}h, live version, cacheState HIT.`,
       inputSchema: z8.object({
         groupId: z8.string().uuid().describe("Policy group ID"),
@@ -1061,6 +1114,7 @@ function registerProfileTools(server, callApi) {
     "lexq_profile_rule",
     {
       title: "Rule Latency Detail",
+      annotations: { readOnlyHint: true },
       description: `Single-rule latency detail: merged phase \xD7 cacheState distributions plus a per-window time series (${LATENCY_WINDOW_MILLIS / 1e3}s windows). Missing windows are genuine gaps \u2014 never interpolated. Series points carry each window's own values; percentiles in merged distributions are withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 n \u2265 6, p95 n \u2265 60, p99 n \u2265 300). ` + RELATIVE_THRESHOLD,
       inputSchema: z8.object({
         groupId: z8.string().uuid().describe("Policy group ID"),
@@ -1085,6 +1139,7 @@ function registerReplayTools(server, callApi) {
     "lexq_replay_decision",
     {
       title: "Replay a Decision",
+      annotations: { readOnlyHint: true },
       description: "Re-evaluate a past execution (traceId) against a candidate version and return the decision diff (decisionChanged, effect changes, fired rules) plus a determinism verdict. Synchronous and free of charge (TPS throttle only). A replay sends no webhook, notification, or event: rule actions produce no outward effects.",
       inputSchema: z9.object({
         traceId: z9.string().describe("Trace ID of the past execution to replay"),
@@ -1097,6 +1152,7 @@ function registerReplayTools(server, callApi) {
     "lexq_replay_start",
     {
       title: "Start Window Replay (Blast Radius)",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Submit an async job that replays a date window of past executions against a candidate version and measures the blast radius (how many decisions change). Billed per replayed record (REPLAY metric); VIEWER role cannot submit. Poll with lexq_replay_status.",
       inputSchema: z9.object({
         candidateVersionId: z9.string().uuid().describe("Version to re-evaluate against"),
@@ -1113,6 +1169,7 @@ function registerReplayTools(server, callApi) {
     "lexq_replay_status",
     {
       title: "Get Replay Job Status",
+      annotations: { readOnlyHint: true },
       description: "Poll a window replay job. RUNNING shows progress 0\u2013100; COMPLETED fills summary and changedSamples; FAILED carries errorMessage. capped=true means the window exceeded the sample cap and only part was replayed.",
       inputSchema: z9.object({
         jobId: z9.string().describe("Replay job ID from lexq_replay_start")
@@ -1124,6 +1181,7 @@ function registerReplayTools(server, callApi) {
     "lexq_replay_list",
     {
       title: "List Replay Jobs",
+      annotations: { readOnlyHint: true },
       description: "List window replay job history (reverse-chronological). Lightweight items \u2014 use lexq_replay_status for summary and changed samples.",
       inputSchema: z9.object({
         page: z9.number().int().min(0).default(0).describe("Page number"),
@@ -1136,6 +1194,7 @@ function registerReplayTools(server, callApi) {
     "lexq_replay_cancel",
     {
       title: "Cancel Replay Job",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Cooperatively cancel a PENDING or RUNNING window replay job. Other states are rejected. VIEWER role cannot cancel.",
       inputSchema: z9.object({
         jobId: z9.string().describe("Replay job ID")
@@ -1147,6 +1206,7 @@ function registerReplayTools(server, callApi) {
     "lexq_replay_export",
     {
       title: "Export Replay Result",
+      annotations: { readOnlyHint: true },
       description: "Export a COMPLETED window replay job. A running job is rejected \u2014 a partial result reads as the whole thing on the receiving end. The two formats carry different things: CSV holds the effect blast radius, whose columns are fixed; JSON holds the changed samples and action parameters, which nest and whose keys differ per tenant. JSON is not a superset of CSV. Returns the file contents as text.",
       inputSchema: z9.object({
         jobId: z9.string().describe("Replay job ID"),
@@ -1164,6 +1224,7 @@ function registerHistoryTools(server, callApi) {
     "lexq_history_list",
     {
       title: "List Execution History",
+      annotations: { readOnlyHint: true },
       description: "List policy execution history. Shows trace ID, group, version, status, match result, and latency.",
       inputSchema: z10.object({
         page: z10.number().int().min(0).default(0).describe("Page number"),
@@ -1191,6 +1252,7 @@ function registerHistoryTools(server, callApi) {
     "lexq_history_get",
     {
       title: "Get Execution Detail",
+      annotations: { readOnlyHint: true },
       description: "Get full execution detail including inputFacts, mutatedFacts, generatedVariables, executionTraces, and decisionTraces.",
       inputSchema: z10.object({
         traceId: z10.string().describe("Trace ID from execution history")
@@ -1202,6 +1264,7 @@ function registerHistoryTools(server, callApi) {
     "lexq_history_stats",
     {
       title: "Execution Statistics",
+      annotations: { readOnlyHint: true },
       description: "Get execution KPIs: total executions, success/failure counts, success rate, and average latency.",
       inputSchema: z10.object({
         groupId: z10.string().uuid().optional().describe("Filter by policy group"),
@@ -1226,6 +1289,7 @@ function registerProvenanceTools(server, callApi) {
     "lexq_provenance_get",
     {
       title: "Get Decision Provenance",
+      annotations: { readOnlyHint: true },
       description: "Get the lineage of a single decision: what was decided, deterministic why per rule, input facts (PII facts are masked as \u2022\u2022\u2022\u2022\u2022\u2022 with maskedKeys listing them \u2014 values are revealable only in the console, audited), the authored/published/deployed responsibility chain, and the rule snapshot fingerprint.",
       inputSchema: z11.object({
         traceId: z11.string().describe("Trace ID of the execution")
@@ -1237,6 +1301,7 @@ function registerProvenanceTools(server, callApi) {
     "lexq_pii_reveals_list",
     {
       title: "List PII Reveal Audits",
+      annotations: { readOnlyHint: true },
       description: "List the PII reveal audit ledger \u2014 who revealed which fact of which trace, and when. Metadata only; revealed values are never stored or returned. Use for monthly access-log inspection and SIEM collection.",
       inputSchema: z11.object({
         page: z11.number().int().min(0).default(0).describe("Page number"),
@@ -1267,6 +1332,7 @@ function registerLogTools(server, callApi) {
     "lexq_logs_list",
     {
       title: "List Failure Logs",
+      annotations: { readOnlyHint: true },
       description: "List system failure logs from background tasks (platform event webhooks, scheduled deployments).",
       inputSchema: z12.object({
         page: z12.number().int().min(0).default(0).describe("Page number"),
@@ -1292,6 +1358,7 @@ function registerLogTools(server, callApi) {
     "lexq_logs_get",
     {
       title: "Get Failure Log",
+      annotations: { readOnlyHint: true },
       description: "Get failure log detail by ID.",
       inputSchema: z12.object({
         logId: z12.string().uuid().describe("Failure log ID")
@@ -1303,6 +1370,7 @@ function registerLogTools(server, callApi) {
     "lexq_logs_action",
     {
       title: "Process Failure Log",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Process a single failure log: RESOLVE (mark as manually fixed) or IGNORE (skip intentionally).",
       inputSchema: z12.object({
         logId: z12.string().uuid().describe("Failure log ID"),
@@ -1317,6 +1385,7 @@ function registerLogTools(server, callApi) {
     "lexq_logs_bulk_action",
     {
       title: "Bulk Process Failure Logs",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Process multiple failure logs at once. Provide an array of log IDs and the action.",
       inputSchema: z12.object({
         logIds: z12.array(z12.string().uuid()).describe("Array of failure log IDs"),
@@ -1336,6 +1405,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     "lexq_webhook_subscriptions_list",
     {
       title: "List Webhook Subscriptions",
+      annotations: { readOnlyHint: true },
       description: "List platform event webhook subscriptions. These receive deployment lifecycle notifications (publish, deploy, rollback, undeploy).",
       inputSchema: z13.object({
         page: z13.number().int().min(0).default(0).describe("Page number"),
@@ -1351,6 +1421,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     "lexq_webhook_subscriptions_get",
     {
       title: "Get Webhook Subscription",
+      annotations: { readOnlyHint: true },
       description: "Get webhook subscription detail by ID.",
       inputSchema: z13.object({
         id: z13.string().uuid().describe("Webhook subscription ID")
@@ -1362,6 +1433,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     "lexq_webhook_subscriptions_save",
     {
       title: "Save Webhook Subscription",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: 'Create or update a webhook subscription. Omit id to create, provide id to update. Events: VERSION_PUBLISHED, DEPLOYED, ROLLED_BACK, UNDEPLOYED. Formats: GENERIC (full JSON), SLACK ({"text": "..."}).',
       inputSchema: z13.object({
         id: z13.string().uuid().optional().describe("Subscription ID (omit to create, provide to update)"),
@@ -1379,6 +1451,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     "lexq_webhook_subscriptions_delete",
     {
       title: "Delete Webhook Subscription",
+      annotations: { readOnlyHint: false, destructiveHint: true },
       description: "Delete a webhook subscription by ID.",
       inputSchema: z13.object({
         id: z13.string().uuid().describe("Webhook subscription ID")
@@ -1390,6 +1463,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     "lexq_webhook_subscriptions_test",
     {
       title: "Test Webhook Subscription",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Send a test event to verify webhook connectivity. Returns the HTTP status code and success/failure message.",
       inputSchema: z13.object({
         id: z13.string().uuid().describe("Webhook subscription ID")
@@ -1406,6 +1480,7 @@ function registerDomainTemplateTools(server, callApi) {
     "lexq_domain_templates_list",
     {
       title: "List Domain Templates",
+      annotations: { readOnlyHint: true },
       description: "List all domain templates. A domain template is a curated, industry-specific starter pack of fact definitions and sample rules (e.g. ECOMMERCE). Each entry reports its key, status (ACTIVE or COMING_SOON), and a summary of what it provisions. Call this before preview or apply to discover which templates can currently be applied.",
       inputSchema: z14.object({})
     },
@@ -1415,6 +1490,7 @@ function registerDomainTemplateTools(server, callApi) {
     "lexq_domain_templates_preview",
     {
       title: "Preview Domain Template",
+      annotations: { readOnlyHint: true },
       description: "Preview exactly what a domain template will provision before applying it: the fact definitions it registers, the sample rules it creates, and an apply plan. This is a read-only dry run \u2014 nothing is created. Only ACTIVE templates can be previewed.",
       inputSchema: z14.object({
         template: z14.string().describe(
@@ -1428,6 +1504,7 @@ function registerDomainTemplateTools(server, callApi) {
     "lexq_domain_templates_apply",
     {
       title: "Apply Domain Template",
+      annotations: { readOnlyHint: false, destructiveHint: false },
       description: "Apply a domain template to the current tenant. Creates the template's fact definitions and a new policy group pre-populated with its sample rules as a DRAFT version. Existing facts are skipped \u2014 apply is additive and never overwrites existing schema. Run lexq_domain_templates_preview first to review what will be created. Only ACTIVE templates can be applied.",
       inputSchema: z14.object({
         template: z14.string().describe("Domain template key to apply (e.g. ECOMMERCE)."),

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@lexq/cli",
-  "version": "0.3.0",
+  "version": "0.4.0",
+  "mcpName": "io.lexq/lexq",
   "description": "LexQ CLI — manage policies, simulate rules, and deploy from the terminal. Built for humans and AI agents.",
   "type": "module",
   "bin": {
@@ -32,6 +33,8 @@
     "constants:check": "node scripts/check-constants.mjs",
     "surface:check": "node scripts/check-public-surface.mjs",
     "ab-key:check": "node scripts/check-ab-key.mjs",
+    "registry:check": "node scripts/check-registry-manifest.mjs",
+    "protocol:check": "node scripts/check-protocol-revisions.mjs",
     "schemas:check": "node scripts/check-tool-schemas.mjs",
     "schemas:update": "node scripts/check-tool-schemas.mjs --update",
     "start": "node dist/index.js",