@lexq/cli 2.1.0 → 2.1.1

package/dist/index.js

@@ -387,11 +387,57 @@ var MAX_RULES_PER_VERSION = 100;
 var MAX_CONDITIONS_PER_RULE = 25;
 var MAX_CONDITION_DEPTH = 10;
 var MAX_SNAPSHOT_BYTES = 131072;
+var STATS_DEFAULT_WINDOW_DAYS = 30;
+var STATS_MAX_WINDOW_DAYS = 31;
+var FAILURE_LOG_LOOKBACK_DAYS = 7;
+var PURGE_AFTER_DAYS = 30;
+var DESCRIPTION_MAX_LENGTH = 255;
+var COMMIT_MESSAGE_MAX_LENGTH = 500;
+var SCHEDULE_TICK_MAX_MILLIS = 6e4;
 
 // src/commands/groups.ts
 import "commander";
 import dedent3 from "dedent";
 
+// src/types/enums.ts
+var PolicyGroupStatus = ["ACTIVE", "DISABLED", "ARCHIVED"];
+var LogicalOperator = ["AND", "OR"];
+var MutateOperator = ["ASSIGN", "ADD", "SUB", "MUL", "DIV"];
+var CalculationMethod = ["PERCENTAGE", "AMOUNT"];
+var RoundingPolicy = [
+  "UP",
+  "DOWN",
+  "CEILING",
+  "FLOOR",
+  "HALF_UP",
+  "HALF_DOWN",
+  "HALF_EVEN"
+];
+var ValueType = ["STRING", "NUMBER", "BOOLEAN", "LIST_STRING", "LIST_NUMBER"];
+var ConflictResolutionMode = ["NONE", "EXCLUSIVE", "MAX_N"];
+var ConflictResolutionStrategy = ["HIGHEST_PRIORITY"];
+var DeploymentType = ["DEPLOY", "ROLLBACK", "UNDEPLOY"];
+var ApiExecutionStatus = ["SUCCESS", "NO_MATCH", "ERROR", "TIMEOUT"];
+var ProfileCacheState = ["HIT", "MISS"];
+var SimulationStatus = ["PENDING", "RUNNING", "COMPLETED", "FAILED", "CANCELED"];
+var SimulationDatasetType = ["HISTORICAL", "UPLOADED", "MANUAL"];
+var SimulationDatasetSource = ["EXECUTION_LOGS", "S3_BUCKET", "REQUEST_BODY"];
+var SimulationMetricType = ["COUNT", "SUM", "AVG"];
+var ExportFormat = ["CSV", "JSON"];
+var FailureStatus = ["PENDING", "RESOLVED", "IGNORED"];
+var FailureAction = ["IGNORE", "RESOLVE"];
+var TaskType = ["PLATFORM_WEBHOOK", "SCHEDULED_DEPLOYMENT"];
+var PlatformEventType = [
+  "VERSION_PUBLISHED",
+  "DEPLOYED",
+  "ROLLED_BACK",
+  "UNDEPLOYED",
+  "DEPLOY_SCHEDULED",
+  "DEPLOY_SCHEDULE_CANCELED"
+];
+var WebhookPayloadFormat = ["GENERIC", "SLACK"];
+var DeploymentScheduleStatus = ["PENDING", "EXECUTED", "CANCELED", "FAILED"];
+
 // src/lib/dates.ts
 var ORG_DAY = "yyyy-MM-dd, a whole calendar day in the organization time zone (tenantTimezone in whoami), not UTC";
 var START_DAY = `Start date, ${ORG_DAY}. Inclusive.`;
@@ -399,9 +445,6 @@ var END_DAY = `End date, ${ORG_DAY}. Inclusive: the whole day counts.`;
 var WINDOW_START_DAY = `Window start date, ${ORG_DAY}. Inclusive.`;
 var WINDOW_END_DAY = `Window end date, ${ORG_DAY}. Inclusive: the whole day counts.`;
 var INSTANT = "ISO-8601 instant with Z or an offset, e.g. 2026-10-01T00:00:00Z or 2026-10-01T09:00:00+09:00. A bare date or a time without an offset is rejected.";
-var STATS_DEFAULT_WINDOW_DAYS = 30;
-var STATS_MAX_WINDOW_DAYS = 31;
-var FAILURE_LOG_LOOKBACK_DAYS = 7;
 function utcMinute(instant) {
   return instant ? `${new Date(instant).toISOString().substring(0, 16)}Z` : "\u2013";
 }
@@ -424,7 +467,7 @@ function registerGroupCommands(program) {
           delete      Archive a group
           ab-test     Manage A/B tests (start, stop, adjust)
 
-        Statuses: ACTIVE, DISABLED, ARCHIVED
+        Statuses: ${PolicyGroupStatus.join(", ")}
           DISABLED stops production execution (403 P-009) and keeps the deployed version and any A/B test.
           Dry run, simulation, and replay still work. Set ACTIVE to resume.
           ARCHIVED means deleted. Only 'lexq groups delete' sets it, and it cannot be undone.
@@ -490,9 +533,9 @@ ${data.length} total`);
 
         Fields:
           name                string    Group name (required, unique per tenant)
-          description         string    Description (optional, max 255 chars)
+          description         string    Description (optional, max ${DESCRIPTION_MAX_LENGTH} chars)
           activationGroup     string    Execution Group — conflict-resolution cluster key (optional)
-          activationMode      string    NONE | EXCLUSIVE | MAX_N  [default: NONE]
+          activationMode      string    ${ConflictResolutionMode.join(" | ")}  [default: NONE]
           activationStrategy  string    HIGHEST_PRIORITY  [default, and currently the only value]
           executionLimit      number    Max rules to fire in MAX_N mode (optional)
           status              string    ACTIVE | DISABLED  [default: ACTIVE]
@@ -554,7 +597,7 @@ ${data.length} total`);
         It cannot be restored, and calls that change it (settings, versions, rules, starting an A/B
         test, publish, deploy, rollback, scheduling a deployment) return 409 P-059. If it was ever
         executed, deployed, or replayed, it is kept for audit; otherwise it is permanently deleted
-        after 30 days.
+        after ${PURGE_AFTER_DAYS} days.
 
         Use --force to skip the confirmation prompt.
       `
@@ -826,7 +869,7 @@ ${data.totalElements} total \xB7 page ${data.pageNo + 1}/${data.totalPages}`);
             }'
 
         Fields:
-          commitMessage    string      Version description (optional, max 255 chars)
+          commitMessage    string      Version description (optional, max ${COMMIT_MESSAGE_MAX_LENGTH} chars)
           effectiveFrom    instant     Start of effective period (optional, with Z or an offset)
           effectiveTo      instant     End of effective period (optional, auto-expires)
       `
@@ -1091,11 +1134,11 @@ ${data.length} total`);
           refVar is the percentage base and is optional — omit to use targetVar itself.
           It is only valid in PERCENTAGE × {ASSIGN, ADD, SUB}.
 
-        Value Types: STRING, NUMBER, BOOLEAN, LIST_STRING, LIST_NUMBER
+        Value Types: ${ValueType.join(", ")}
 
         Mutex (optional — rule-level conflict resolution):
           mutexGroup       string    Logical grouping key (e.g., "best-discount")
-          mutexMode        string    NONE | EXCLUSIVE | MAX_N  [default: NONE]
+          mutexMode        string    ${ConflictResolutionMode.join(" | ")}  [default: NONE]
           mutexStrategy    string    HIGHEST_PRIORITY (currently the only value)
           mutexLimit       number    Max rules to fire in MAX_N mode (required when MAX_N)
 
@@ -1304,27 +1347,6 @@ function escapeUnsafe(json) {
 
 // src/lib/export.ts
 import { writeFileSync as writeFileSync2 } from "fs";
-
-// src/types/enums.ts
-var ValueType = ["STRING", "NUMBER", "BOOLEAN", "LIST_STRING", "LIST_NUMBER"];
-var ConflictResolutionMode = ["NONE", "EXCLUSIVE", "MAX_N"];
-var ConflictResolutionStrategy = ["HIGHEST_PRIORITY"];
-var ProfileCacheState = ["HIT", "MISS"];
-var ExportFormat = ["CSV", "JSON"];
-var FailureStatus = ["PENDING", "RESOLVED", "IGNORED"];
-var FailureAction = ["IGNORE", "RESOLVE"];
-var TaskType = ["PLATFORM_WEBHOOK", "SCHEDULED_DEPLOYMENT"];
-var PlatformEventType = [
-  "VERSION_PUBLISHED",
-  "DEPLOYED",
-  "ROLLED_BACK",
-  "UNDEPLOYED",
-  "DEPLOY_SCHEDULED",
-  "DEPLOY_SCHEDULE_CANCELED"
-];
-var WebhookPayloadFormat = ["GENERIC", "SLACK"];
-
-// src/lib/export.ts
 var EXPORT_FORMATS = ExportFormat.map((name) => name.toLowerCase()).sort();
 function parseFormat(value) {
   if (typeof value === "string" && EXPORT_FORMATS.includes(value)) {
@@ -1459,7 +1481,7 @@ ${data.length} unregistered`);
       process.exit(1);
     }
   });
-  facts.command("create").description("Create a new fact definition").option("--key <key>", "Fact key (letters, numbers, underscores)").option("--name <n>", "Display name").option("--type <type>", "Value type: STRING, NUMBER, BOOLEAN, LIST_STRING, LIST_NUMBER").option("--description <desc>", "Description").option("--required", "Mark as required", false).option("--pii", "Mark as PII \u2014 value is masked on every read surface", false).option("--allowed-values <csv>", "Comma-separated list of accepted values").option("--min <number>", "Lower bound, inclusive (numeric types only)").option("--max <number>", "Upper bound, inclusive (numeric types only)").option("--json <body>", "Full request body as JSON (overrides other options)").addHelpText(
+  facts.command("create").description("Create a new fact definition").option("--key <key>", "Fact key (letters, numbers, underscores)").option("--name <n>", "Display name").option("--type <type>", `Value type: ${ValueType.join(", ")}`).option("--description <desc>", "Description").option("--required", "Mark as required", false).option("--pii", "Mark as PII \u2014 value is masked on every read surface", false).option("--allowed-values <csv>", "Comma-separated list of accepted values").option("--min <number>", "Lower bound, inclusive (numeric types only)").option("--max <number>", "Upper bound, inclusive (numeric types only)").option("--json <body>", "Full request body as JSON (overrides other options)").addHelpText(
     "after",
     dedent6`
 
@@ -1479,7 +1501,7 @@ ${data.length} unregistered`);
           $ lexq facts create --key tier --name "Tier" --type STRING \
               --allowed-values "GOLD, SILVER, BRONZE"
 
-        Value Types: STRING, NUMBER, BOOLEAN, LIST_STRING, LIST_NUMBER
+        Value Types: ${ValueType.join(", ")}
         Key Format:  starts with a letter, then letters, numbers, and underscores.
                      Casing is yours to choose (e.g., paymentAmount, payment_amount)
 
@@ -1508,7 +1530,7 @@ ${data.length} unregistered`);
       process.exit(1);
     }
   });
-  facts.command("update").description("Update a fact definition").requiredOption("--id <factId>", "Fact definition ID").option("--name <n>", "Display name").option("--description <desc>", 'Description (pass "" to remove it)').option("--required", "Mark as required").option("--no-required", "Mark as not required").option("--pii", "Mark as PII (enables masking)").option("--no-pii", "Unmark as PII (disables masking \u2014 value becomes visible)").option("--type <type>", "Value type: STRING, NUMBER, BOOLEAN, LIST_STRING, LIST_NUMBER").option("--allowed-values <csv>", "Comma-separated list of accepted values").option("--min <number>", "Lower bound, inclusive (numeric types only)").option("--max <number>", "Upper bound, inclusive (numeric types only)").option("--clear-value-domain", "Remove the value domain entirely").option("--json <body>", "Full request body as JSON (overrides other options)").addHelpText(
+  facts.command("update").description("Update a fact definition").requiredOption("--id <factId>", "Fact definition ID").option("--name <n>", "Display name").option("--description <desc>", 'Description (pass "" to remove it)').option("--required", "Mark as required").option("--no-required", "Mark as not required").option("--pii", "Mark as PII (enables masking)").option("--no-pii", "Unmark as PII (disables masking \u2014 value becomes visible)").option("--type <type>", `Value type: ${ValueType.join(", ")}`).option("--allowed-values <csv>", "Comma-separated list of accepted values").option("--min <number>", "Lower bound, inclusive (numeric types only)").option("--max <number>", "Upper bound, inclusive (numeric types only)").option("--clear-value-domain", "Remove the value domain entirely").option("--json <body>", "Full request body as JSON (overrides other options)").addHelpText(
     "after",
     dedent6`
 
@@ -1892,7 +1914,7 @@ function registerDeployCommands(program) {
       process.exit(1);
     }
   });
-  deploy.command("history").description("List deployment history").option("--group-id <groupId>", "Filter by policy group").option("--types <types>", "Filter by types (comma-separated: DEPLOY,ROLLBACK,UNDEPLOY)").option("--start-date <date>", START_DAY).option("--end-date <date>", END_DAY).option("--page <number>", "Page number", "0").option("--size <number>", "Page size", "20").addHelpText(
+  deploy.command("history").description("List deployment history").option("--group-id <groupId>", "Filter by policy group").option("--types <types>", `Filter by types (comma-separated: ${DeploymentType.join(",")})`).option("--start-date <date>", START_DAY).option("--end-date <date>", END_DAY).option("--page <number>", "Page number", "0").option("--size <number>", "Page size", "20").addHelpText(
     "after",
     dedent7`
 
@@ -2052,7 +2074,7 @@ ${data.totalElements} total \xB7 page ${data.pageNo + 1}/${data.totalPages}`);
     dedent7`
 
         The version must be ACTIVE with a future effective start date; the system
-        deploys it automatically at that time (within one scheduler tick, ≤60s).
+        deploys it automatically at that time (within one scheduler tick, ≤${SCHEDULE_TICK_MAX_MILLIS / 1e3}s).
         That time is the version's effectiveFrom, set on the DRAFT before publishing;
         this command takes no time of its own.
         One pending schedule per group. Manual deploy/rollback/undeploy, starting
@@ -2377,8 +2399,8 @@ function registerAnalyticsCommands(program) {
 
           $ lexq analytics simulation start --file simulation.json
 
-        Dataset types: HISTORICAL, UPLOADED, MANUAL
-        Dataset sources: EXECUTION_LOGS, S3_BUCKET, REQUEST_BODY
+        Dataset types: ${SimulationDatasetType.join(", ")}
+        Dataset sources: ${SimulationDatasetSource.join(", ")}
         HISTORICAL from / to are yyyy-MM-dd, whole days in the organization time zone, both inclusive.
       `
   ).action(async (opts) => {
@@ -2499,7 +2521,7 @@ function registerAnalyticsCommands(program) {
       process.exit(1);
     }
   });
-  sim.command("list").description("List simulation history").option("--status <status>", "Filter by status (PENDING, RUNNING, COMPLETED, FAILED, CANCELED)").option("--from <date>", START_DAY).option("--to <date>", END_DAY).option("--page <number>", "Page number", "0").option("--size <number>", "Page size", "20").action(async (opts) => {
+  sim.command("list").description("List simulation history").option("--status <status>", `Filter by status (${SimulationStatus.join(", ")})`).option("--from <date>", START_DAY).option("--to <date>", END_DAY).option("--page <number>", "Page number", "0").option("--size <number>", "Page size", "20").action(async (opts) => {
     try {
       const globalOpts = program.opts();
       const format = globalOpts.format ?? "json";
@@ -2703,6 +2725,15 @@ function resolveBody(opts) {
 // src/commands/profile.ts
 import "commander";
 import dedent9 from "dedent";
+
+// src/lib/percentiles.ts
+var PERCENTILE_MIN_N = {
+  p50: TAIL_MIN_OBS * 2,
+  p95: TAIL_MIN_OBS * 20,
+  p99: TAIL_MIN_OBS * 100
+};
+
+// src/commands/profile.ts
 var ms = (nanos) => nanos == null ? "\u2013" : (nanos / 1e6).toFixed(2);
 var msWithUnit = (nanos) => nanos == null ? "\u2013" : `${(nanos / 1e6).toFixed(2)}ms`;
 function registerProfileCommands(program) {
@@ -2712,15 +2743,18 @@ function registerProfileCommands(program) {
   ).option("--version-id <versionId>", "Version to inspect (default: live version)").option(
     "--from <instant>",
     `Window start, ISO-8601 instant (default: ${PROFILE_DEFAULT_WINDOW_HOURS}h ago)`
-  ).option("--to <instant>", "Window end, ISO-8601 instant (default: now)").option("--cache <state>", "Cache dimension for the rule table: HIT | MISS (default: HIT)").addHelpText(
+  ).option("--to <instant>", "Window end, ISO-8601 instant (default: now)").option(
+    "--cache <state>",
+    `Cache dimension for the rule table: ${ProfileCacheState.join(" | ")} (default: HIT)`
+  ).addHelpText(
     "after",
     dedent9`
 
         Slow-rule judgment is relative only: flagged = p50 ≥ ${SLOW_MULTIPLIER}× the median of
         per-rule p50s within the group. Absolute ms thresholds are intentionally
-        not supported. Each percentile is withheld (–) unless n×(1−q) ≥ 3 —
-        p50 from n ≥ 6, p95 from n ≥ 60, p99 from n ≥ 300. TOTAL is recorded
-        on every call, rule detail from a deterministic 1% sample.
+        not supported. Each percentile is withheld (–) unless n×(1−q) ≥ ${TAIL_MIN_OBS} —
+        p50 from n ≥ ${PERCENTILE_MIN_N.p50}, p95 from n ≥ ${PERCENTILE_MIN_N.p95}, p99 from n ≥ ${PERCENTILE_MIN_N.p99}. TOTAL is recorded
+        on every call, rule detail from a deterministic ${PROFILE_SAMPLE_PERMILLE / 10}% sample.
 
         Examples:
           $ lexq profile <groupId>
@@ -2818,10 +2852,10 @@ function registerHistoryCommands(program) {
           get     Get full execution detail (request facts, traces, decisions)
           stats   Aggregate statistics (success rate, latency, counts)
 
-        Statuses: SUCCESS, NO_MATCH, ERROR, TIMEOUT
+        Statuses: ${ApiExecutionStatus.join(", ")}
       `
   );
-  history.command("list").description("List execution history").option("--trace-id <traceId>", "Filter by trace ID").option("--group-id <groupId>", "Filter by policy group").option("--version-id <versionId>", "Filter by version").option("--status <status>", "Filter by status (SUCCESS, NO_MATCH, ERROR, TIMEOUT)").option("--start-date <date>", START_DAY).option("--end-date <date>", END_DAY).option("--page <number>", "Page number", "0").option("--size <number>", "Page size", "20").addHelpText(
+  history.command("list").description("List execution history").option("--trace-id <traceId>", "Filter by trace ID").option("--group-id <groupId>", "Filter by policy group").option("--version-id <versionId>", "Filter by version").option("--status <status>", `Filter by status (${ApiExecutionStatus.join(", ")})`).option("--start-date <date>", START_DAY).option("--end-date <date>", END_DAY).option("--page <number>", "Page number", "0").option("--size <number>", "Page size", "20").addHelpText(
     "after",
     dedent10`
 
@@ -3214,6 +3248,18 @@ ${data.totalElements} total \xB7 page ${data.pageNo + 1}/${data.totalPages}`);
 // src/commands/logs.ts
 import "commander";
 import dedent13 from "dedent";
+
+// src/lib/enum-notes.ts
+function withNotes(notes) {
+  return Object.entries(notes).map(([value, note]) => note ? `${value} (${note})` : value);
+}
+
+// src/commands/logs.ts
+var STATUS_NOTES = {
+  PENDING: "needs attention",
+  RESOLVED: "",
+  IGNORED: ""
+};
 function registerLogCommands(program) {
   const logs = program.command("logs").description("Failure logs").addHelpText(
     "after",
@@ -3224,13 +3270,13 @@ function registerLogCommands(program) {
         Commands:
           list         List failure logs with filters
           get          Get failure log detail (includes the original payload)
-          action       Process a single log (IGNORE, RESOLVE)
+          action       Process a single log (${FailureAction.join(", ")})
           bulk-action  Process multiple logs at once
 
-        Statuses: PENDING (needs attention), RESOLVED, IGNORED
+        Statuses: ${withNotes(STATUS_NOTES).join(", ")}
       `
   );
-  logs.command("list").description("List failure logs").option("--task-type <taskType>", `Filter by task type (${TaskType.join(", ")})`).option("--status <status>", "Filter by status (PENDING, RESOLVED, IGNORED)").option("--keyword <keyword>", "Search keyword").option("--start-date <date>", START_DAY).option("--end-date <date>", END_DAY).option("--page <number>", "Page number", "0").option("--size <number>", "Page size", "20").addHelpText(
+  logs.command("list").description("List failure logs").option("--task-type <taskType>", `Filter by task type (${TaskType.join(", ")})`).option("--status <status>", `Filter by status (${FailureStatus.join(", ")})`).option("--keyword <keyword>", "Search keyword").option("--start-date <date>", START_DAY).option("--end-date <date>", END_DAY).option("--page <number>", "Page number", "0").option("--size <number>", "Page size", "20").addHelpText(
     "after",
     dedent13`
 
@@ -3286,7 +3332,7 @@ ${data.totalElements} total \xB7 page ${data.pageNo + 1}/${data.totalPages}`);
     dedent13`
 
         Includes the full payload that was used for the failed operation.
-        Use this to inspect what went wrong before deciding to IGNORE or RESOLVE.
+        Use this to inspect what went wrong before deciding to ${FailureAction.join(" or ")}.
       `
   ).action(async (opts) => {
     try {
@@ -3303,7 +3349,7 @@ ${data.totalElements} total \xB7 page ${data.pageNo + 1}/${data.totalPages}`);
       process.exit(1);
     }
   });
-  logs.command("action").description("Process a failure log action (IGNORE, RESOLVE)").requiredOption("--id <logId>", "Log ID").requiredOption("--action <action>", "Action: IGNORE or RESOLVE").addHelpText(
+  logs.command("action").description(`Process a failure log action (${FailureAction.join(", ")})`).requiredOption("--id <logId>", "Log ID").requiredOption("--action <action>", `Action: ${FailureAction.join(" or ")}`).addHelpText(
     "after",
     dedent13`
 
@@ -3334,7 +3380,7 @@ ${data.totalElements} total \xB7 page ${data.pageNo + 1}/${data.totalPages}`);
       process.exit(1);
     }
   });
-  logs.command("bulk-action").description("Bulk process failure logs").requiredOption("--ids <logIds>", "Comma-separated log IDs").requiredOption("--action <action>", "Action: IGNORE or RESOLVE").addHelpText(
+  logs.command("bulk-action").description("Bulk process failure logs").requiredOption("--ids <logIds>", "Comma-separated log IDs").requiredOption("--action <action>", `Action: ${FailureAction.join(" or ")}`).addHelpText(
     "after",
     dedent13`
 
@@ -3365,6 +3411,10 @@ ${data.totalElements} total \xB7 page ${data.pageNo + 1}/${data.totalPages}`);
 // src/commands/webhook-subscriptions.ts
 import "commander";
 import dedent14 from "dedent";
+var FORMAT_NOTES = {
+  GENERIC: "full JSON",
+  SLACK: '{"text":"..."}'
+};
 function registerWebhookSubscriptionCommands(program) {
   const webhooks = program.command("webhook-subscriptions").description("Manage platform event webhook subscriptions").addHelpText(
     "after",
@@ -3467,7 +3517,7 @@ ${data.totalElements} total \xB7 page ${data.pageNo + 1}/${data.totalPages}`);
           name                string      Subscription name (required, unique per tenant)
           webhookUrl          string      Webhook endpoint URL (required)
           subscribedEvents    string[]    ${PlatformEventType.join(", ")}
-          payloadFormat       string      GENERIC (full JSON) or SLACK ({"text":"..."})  [default: GENERIC]
+          payloadFormat       string      ${withNotes(FORMAT_NOTES).join(" or ")}  [default: GENERIC]
           secret              string      HMAC-SHA256 signing secret (optional)
           isActive            boolean     Enable/disable (optional)  [default: true]
           id                  string      Provide to update, omit to create
@@ -3744,7 +3794,7 @@ function registerAnalyticsTools(server, callApi) {
         options.baselinePolicyVersionId: uuid (optional, for baseline comparison)
         options.includeRuleStats: boolean
         options.metricConfig: optional — omit for plain execution count. To aggregate a fact, pass
-          { "targetVariable": "<fact>", "aggregationType": "COUNT" | "SUM" | "AVG" }
+          { "targetVariable": "<fact>", "aggregationType": ${SimulationMetricType.map((t) => `"${t}"`).join(" | ")} }
 
         Example (uploaded dataset):
         {
@@ -3790,7 +3840,7 @@ function registerAnalyticsTools(server, callApi) {
       inputSchema: z.object({
         page: z.number().int().min(0).default(0).describe("Page number"),
         size: z.number().int().min(1).max(100).default(20).describe("Page size"),
-        status: z.enum(["PENDING", "RUNNING", "COMPLETED", "FAILED", "CANCELED"]).optional().describe("Filter by status"),
+        status: z.enum(SimulationStatus).optional().describe("Filter by status"),
         from: z.string().optional().describe(START_DAY),
         to: z.string().optional().describe(END_DAY)
       })
@@ -4067,7 +4117,7 @@ function registerGroupTools(server, callApi) {
         groupId: z4.string().uuid().describe("Policy group ID"),
         name: z4.string().optional().describe("New name"),
         description: z4.string().optional().describe("New description"),
-        status: z4.enum(["ACTIVE", "DISABLED"]).optional().describe(
+        status: z4.enum(PolicyGroupStatus).extract(["ACTIVE", "DISABLED"]).optional().describe(
           "DISABLED stops production execution of this group: execution calls return 403 (P-009), and a composite call that includes the group is rejected in full. The deployed version and any A/B test are kept, and dry run, Impact Simulation, and Decision Replay keep working, so a fix can be verified before setting ACTIVE again. To go back to the previous version, use lexq_deploy_rollback. To take the version out of production, use lexq_deploy_undeploy."
         ),
         activationGroup: z4.string().optional().describe(
@@ -4087,7 +4137,7 @@ function registerGroupTools(server, callApi) {
     {
       title: "Delete Policy Group",
       annotations: { readOnlyHint: false, destructiveHint: true },
-      description: "Delete (archive) a policy group. A deployed group cannot be deleted (P-020); undeploy it first with lexq_deploy_undeploy, which also ends a running A/B test. This cannot be undone. The group no longer appears in lexq_groups_list and its name can be reused right away. Calls that change it (settings, versions, rules, starting an A/B test, publish, deploy, rollback, scheduling a deployment) return 409 P-059. If it was ever executed, deployed, or replayed, it is kept for audit; otherwise it is permanently deleted after 30 days.",
+      description: `Delete (archive) a policy group. A deployed group cannot be deleted (P-020); undeploy it first with lexq_deploy_undeploy, which also ends a running A/B test. This cannot be undone. The group no longer appears in lexq_groups_list and its name can be reused right away. Calls that change it (settings, versions, rules, starting an A/B test, publish, deploy, rollback, scheduling a deployment) return 409 P-059. If it was ever executed, deployed, or replayed, it is kept for audit; otherwise it is permanently deleted after ${PURGE_AFTER_DAYS} days.`,
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID")
       })
@@ -4121,7 +4171,9 @@ function registerGroupTools(server, callApi) {
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
         testVersionId: z4.string().uuid().describe("Challenger version ID. Must be a published version of this group"),
-        trafficRate: z4.number().int().min(1).max(99).describe("Traffic percentage routed to challenger (1-99)")
+        trafficRate: z4.number().int().min(MIN_TRAFFIC_RATE).max(MAX_TRAFFIC_RATE).describe(
+          `Traffic percentage routed to challenger (${MIN_TRAFFIC_RATE}-${MAX_TRAFFIC_RATE})`
+        )
       })
     },
     async ({ groupId, ...body }) => callApi("POST", `policy-groups/${groupId}/ab-test`, { body })
@@ -4146,7 +4198,9 @@ function registerGroupTools(server, callApi) {
       description: "Adjust traffic rate of a running A/B test.",
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
-        trafficRate: z4.number().int().min(1).max(99).describe("New traffic percentage for challenger (1-99)")
+        trafficRate: z4.number().int().min(MIN_TRAFFIC_RATE).max(MAX_TRAFFIC_RATE).describe(
+          `New traffic percentage for challenger (${MIN_TRAFFIC_RATE}-${MAX_TRAFFIC_RATE})`
+        )
       })
     },
     async ({ groupId, ...body }) => callApi("PATCH", `policy-groups/${groupId}/ab-test/traffic-rate`, { body })
@@ -4253,6 +4307,7 @@ function registerVersionTools(server, callApi) {
 // src/mcp/tools/rules.ts
 import { z as z6 } from "zod";
 import dedent17 from "dedent";
+var oneOf = (values) => values.map((v) => `"${v}"`).join("|");
 function registerRuleTools(server, callApi) {
   server.registerTool(
     "lexq_rules_list",
@@ -4302,8 +4357,8 @@ function registerRuleTools(server, callApi) {
         After saving, lexq_facts_unregistered lists any keys this version references but has not
         defined (non-blocking, version-wide) — use it to decide what to register.
 
-        Condition: { type: "SINGLE", field, operator, value, valueType } or { type: "GROUP", operator: "AND"|"OR", children: [...] }
-        Value types: STRING, NUMBER, BOOLEAN, LIST_STRING, LIST_NUMBER
+        Condition: { type: "SINGLE", field, operator, value, valueType } or { type: "GROUP", operator: ${oneOf(LogicalOperator)}, children: [...] }
+        Value types: ${ValueType.join(", ")}
         Limits: a condition tree may hold at most ${MAX_CONDITIONS_PER_RULE} conditions (SINGLE nodes; GROUP nodes do not count)
         and nest at most ${MAX_CONDITION_DEPTH} levels below the root. A version holds at most ${MAX_RULES_PER_VERSION} rules.
 
@@ -4326,7 +4381,7 @@ function registerRuleTools(server, callApi) {
         Actions: [{ type, parameters }]
 
         Action parameter schemas:
-        - MUTATE_FACT: { targetVar: string, operator: "ASSIGN"|"ADD"|"SUB"|"MUL"|"DIV", method: "PERCENTAGE"|"AMOUNT", operand: number, refVar?: string, rounding?: RoundingOption }
+        - MUTATE_FACT: { targetVar: string, operator: ${oneOf(MutateOperator)}, method: ${oneOf(CalculationMethod)}, operand: number, refVar?: string, rounding?: RoundingOption }
           targetVar is the fact this action reads and writes. It must be a registered fact
           (ACT-032 otherwise), and the request must send it (P-015 otherwise). Its value must be
           a number when the action runs.
@@ -4365,7 +4420,7 @@ function registerRuleTools(server, callApi) {
         writes, send that value as an input fact in a second request. If a rule should run
         whenever another one does, put its actions in that rule instead.
 
-        RoundingOption (optional, MUTATE_FACT only): { scale: integer (0..${MAX_ROUNDING_SCALE}), mode?: "HALF_UP"|"HALF_DOWN"|"HALF_EVEN"|"FLOOR"|"CEILING"|"DOWN"|"UP" } mode defaults to HALF_UP. When omitted, calculator output is preserved at full precision (lossless).
+        RoundingOption (optional, MUTATE_FACT only): { scale: integer (0..${MAX_ROUNDING_SCALE}), mode?: ${oneOf(RoundingPolicy)} } mode defaults to HALF_UP. When omitted, calculator output is preserved at full precision (lossless).
       `,
       inputSchema: z6.object({
         groupId: z6.string().uuid().describe("Policy group ID"),
@@ -4496,7 +4551,7 @@ function registerFactTools(server, callApi) {
     {
       title: "Create Fact Definition",
       annotations: { readOnlyHint: false, destructiveHint: false },
-      description: "Register a new input variable. Key starts with a letter, then letters, numbers, and underscores (e.g. paymentAmount). Casing is not enforced. Types: STRING, NUMBER, BOOLEAN, LIST_STRING, LIST_NUMBER.",
+      description: `Register a new input variable. Key starts with a letter, then letters, numbers, and underscores (e.g. paymentAmount). Casing is not enforced. Types: ${VALUE_TYPES.join(", ")}.`,
       inputSchema: z7.object({
         key: z7.string().regex(FACT_KEY_PATTERN).describe("Variable key. Any casing; must start with a letter."),
         name: z7.string().describe("Display name"),
@@ -4702,7 +4757,7 @@ function registerDeployTools(server, callApi) {
     {
       title: "List Scheduled Deployments",
       annotations: { readOnlyHint: true },
-      description: "List scheduled deployments across all groups (all statuses: PENDING, EXECUTED, CANCELED, FAILED), newest first.",
+      description: `List scheduled deployments across all groups (all statuses: ${DeploymentScheduleStatus.join(", ")}), newest first.`,
       inputSchema: z8.object({
         page: z8.number().int().min(0).default(0).describe("Page number"),
         size: z8.number().int().min(1).max(100).default(20).describe("Page size")
@@ -4720,7 +4775,7 @@ function registerDeployTools(server, callApi) {
         page: z8.number().int().min(0).default(0).describe("Page number"),
         size: z8.number().int().min(1).max(100).default(20).describe("Page size"),
         groupId: z8.string().uuid().optional().describe("Filter by group ID"),
-        types: z8.string().optional().describe("Filter by deployment types (comma-separated: DEPLOY,ROLLBACK,UNDEPLOY)"),
+        types: z8.string().optional().describe(`Filter by deployment types (comma-separated: ${DeploymentType.join(",")})`),
         startDate: z8.string().optional().describe(START_DAY),
         endDate: z8.string().optional().describe(END_DAY)
       })
@@ -4802,7 +4857,7 @@ function registerProfileTools(server, callApi) {
     {
       title: "Group Latency Profile",
       annotations: { readOnlyHint: true },
-      description: "Per-rule latency profile of a policy group over a time window: group TOTAL distribution split by cache state (HIT = compiled ruleset cache hit, MISS = deep-load + compile), a per-rule CONDITION/ACTION percentile table, and slow-rule flags. " + RELATIVE_THRESHOLD + ` Every percentile is accompanied by its sample count n; a percentile is withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 needs n \u2265 6, p95 n \u2265 60, p99 n \u2265 300 \u2014 display gate, separate from the n \u2265 ${MIN_SAMPLES} judgment gate). Baselines report INSUFFICIENT_COHORT when fewer than ${MIN_COHORT_SIZE} rules qualify. Rule detail comes from a deterministic ${PROFILE_SAMPLE_PERMILLE / 10}% sample of calls; TOTAL is recorded for every call. Defaults: last ${PROFILE_DEFAULT_WINDOW_HOURS}h, live version, cacheState HIT.`,
+      description: "Per-rule latency profile of a policy group over a time window: group TOTAL distribution split by cache state (HIT = compiled ruleset cache hit, MISS = deep-load + compile), a per-rule CONDITION/ACTION percentile table, and slow-rule flags. " + RELATIVE_THRESHOLD + ` Every percentile is accompanied by its sample count n; a percentile is withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 needs n \u2265 ${PERCENTILE_MIN_N.p50}, p95 n \u2265 ${PERCENTILE_MIN_N.p95}, p99 n \u2265 ${PERCENTILE_MIN_N.p99} \u2014 display gate, separate from the n \u2265 ${MIN_SAMPLES} judgment gate). Baselines report INSUFFICIENT_COHORT when fewer than ${MIN_COHORT_SIZE} rules qualify. Rule detail comes from a deterministic ${PROFILE_SAMPLE_PERMILLE / 10}% sample of calls; TOTAL is recorded for every call. Defaults: last ${PROFILE_DEFAULT_WINDOW_HOURS}h, live version, cacheState HIT.`,
       inputSchema: z9.object({
         groupId: z9.string().uuid().describe("Policy group ID"),
         versionId: z9.string().uuid().optional().describe("Version to inspect (default: live version)"),
@@ -4810,7 +4865,7 @@ function registerProfileTools(server, callApi) {
           `Window start, ISO-8601 instant (e.g. 2026-07-01T00:00:00Z). Default: ${PROFILE_DEFAULT_WINDOW_HOURS}h ago`
         ),
         to: z9.string().optional().describe("Window end, ISO-8601 instant. Default: now"),
-        cacheState: z9.enum(["HIT", "MISS"]).optional().describe("Cache dimension for the rule table and judgment (default: HIT)")
+        cacheState: z9.enum(ProfileCacheState).optional().describe("Cache dimension for the rule table and judgment (default: HIT)")
       })
     },
     async ({ groupId, versionId, from, to, cacheState }) => callApi("GET", `policy-groups/${groupId}/profile`, {
@@ -4822,7 +4877,7 @@ function registerProfileTools(server, callApi) {
     {
       title: "Rule Latency Detail",
       annotations: { readOnlyHint: true },
-      description: `Single-rule latency detail: merged phase \xD7 cacheState distributions plus a per-window time series (${LATENCY_WINDOW_MILLIS / 1e3}s windows). Missing windows are genuine gaps \u2014 never interpolated. Series points carry each window's own values; percentiles in merged distributions are withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 n \u2265 6, p95 n \u2265 60, p99 n \u2265 300). ` + RELATIVE_THRESHOLD,
+      description: `Single-rule latency detail: merged phase \xD7 cacheState distributions plus a per-window time series (${LATENCY_WINDOW_MILLIS / 1e3}s windows). Missing windows are genuine gaps \u2014 never interpolated. Series points carry each window's own values; percentiles in merged distributions are withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 n \u2265 ${PERCENTILE_MIN_N.p50}, p95 n \u2265 ${PERCENTILE_MIN_N.p95}, p99 n \u2265 ${PERCENTILE_MIN_N.p99}). ` + RELATIVE_THRESHOLD,
       inputSchema: z9.object({
         groupId: z9.string().uuid().describe("Policy group ID"),
         ruleId: z9.string().uuid().describe("Rule ID (from lexq_profile_overview)"),
@@ -4939,7 +4994,7 @@ function registerHistoryTools(server, callApi) {
         traceId: z11.string().optional().describe("Filter by trace ID"),
         groupId: z11.string().uuid().optional().describe("Filter by policy group"),
         versionId: z11.string().uuid().optional().describe("Filter by version"),
-        status: z11.enum(["SUCCESS", "NO_MATCH", "ERROR", "TIMEOUT"]).optional().describe("Filter by execution status"),
+        status: z11.enum(ApiExecutionStatus).optional().describe("Filter by execution status"),
         startDate: z11.string().optional().describe(START_DAY),
         endDate: z11.string().optional().describe(END_DAY)
       })
@@ -5034,6 +5089,10 @@ function registerProvenanceTools(server, callApi) {
 
 // src/mcp/tools/logs.ts
 import { z as z13 } from "zod";
+var ACTION_NOTES = {
+  RESOLVE: "mark as manually fixed",
+  IGNORE: "skip intentionally"
+};
 function registerLogTools(server, callApi) {
   server.registerTool(
     "lexq_logs_list",
@@ -5078,7 +5137,7 @@ function registerLogTools(server, callApi) {
     {
       title: "Process Failure Log",
       annotations: { readOnlyHint: false, destructiveHint: false },
-      description: "Process a single failure log: RESOLVE (mark as manually fixed) or IGNORE (skip intentionally).",
+      description: `Process a single failure log: ${withNotes(ACTION_NOTES).join(" or ")}.`,
       inputSchema: z13.object({
         logId: z13.string().uuid().describe("Failure log ID"),
         action: z13.enum(FailureAction).describe("Action to take")
@@ -5107,6 +5166,10 @@ function registerLogTools(server, callApi) {
 
 // src/mcp/tools/webhook-subscriptions.ts
 import { z as z14 } from "zod";
+var FORMAT_NOTES2 = {
+  GENERIC: "full JSON",
+  SLACK: '{"text": "..."}'
+};
 function registerWebhookSubscriptionTools(server, callApi) {
   server.registerTool(
     "lexq_webhook_subscriptions_list",
@@ -5141,7 +5204,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     {
       title: "Save Webhook Subscription",
       annotations: { readOnlyHint: false, destructiveHint: true },
-      description: `Create or update a webhook subscription. Omit id to create, provide id to update. Events: ${PlatformEventType.join(", ")}. Formats: GENERIC (full JSON), SLACK ({"text": "..."}).`,
+      description: `Create or update a webhook subscription. Omit id to create, provide id to update. Events: ${PlatformEventType.join(", ")}. Formats: ${withNotes(FORMAT_NOTES2).join(", ")}.`,
       inputSchema: z14.object({
         id: z14.string().uuid().optional().describe("Subscription ID (omit to create, provide to update)"),
         name: z14.string().min(1).describe("Subscription name (unique per tenant)"),

package/dist/mcp/register.js

@@ -31,9 +31,27 @@ function registerStatusTools(server, callApi) {
 import { z as z2 } from "zod";
 
 // src/types/enums.ts
+var PolicyGroupStatus = ["ACTIVE", "DISABLED", "ARCHIVED"];
+var LogicalOperator = ["AND", "OR"];
+var MutateOperator = ["ASSIGN", "ADD", "SUB", "MUL", "DIV"];
+var CalculationMethod = ["PERCENTAGE", "AMOUNT"];
+var RoundingPolicy = [
+  "UP",
+  "DOWN",
+  "CEILING",
+  "FLOOR",
+  "HALF_UP",
+  "HALF_DOWN",
+  "HALF_EVEN"
+];
 var ValueType = ["STRING", "NUMBER", "BOOLEAN", "LIST_STRING", "LIST_NUMBER"];
 var ConflictResolutionMode = ["NONE", "EXCLUSIVE", "MAX_N"];
 var ConflictResolutionStrategy = ["HIGHEST_PRIORITY"];
+var DeploymentType = ["DEPLOY", "ROLLBACK", "UNDEPLOY"];
+var ApiExecutionStatus = ["SUCCESS", "NO_MATCH", "ERROR", "TIMEOUT"];
+var ProfileCacheState = ["HIT", "MISS"];
+var SimulationStatus = ["PENDING", "RUNNING", "COMPLETED", "FAILED", "CANCELED"];
+var SimulationMetricType = ["COUNT", "SUM", "AVG"];
 var ExportFormat = ["CSV", "JSON"];
 var FailureStatus = ["PENDING", "RESOLVED", "IGNORED"];
 var FailureAction = ["IGNORE", "RESOLVE"];
@@ -47,9 +65,12 @@ var PlatformEventType = [
   "DEPLOY_SCHEDULE_CANCELED"
 ];
 var WebhookPayloadFormat = ["GENERIC", "SLACK"];
+var DeploymentScheduleStatus = ["PENDING", "EXECUTED", "CANCELED", "FAILED"];
 
 // src/types/constants.ts
 var MAX_ROUNDING_SCALE = 34;
+var MIN_TRAFFIC_RATE = 1;
+var MAX_TRAFFIC_RATE = 99;
 var REPLAY_WINDOW_MAX_RECORDS = 5e4;
 var DEFAULT_SIMULATION_RECORDS = 1e3;
 var MAX_SIMULATION_RECORDS = 1e5;
@@ -66,6 +87,10 @@ var MAX_RULES_PER_VERSION = 100;
 var MAX_CONDITIONS_PER_RULE = 25;
 var MAX_CONDITION_DEPTH = 10;
 var MAX_SNAPSHOT_BYTES = 131072;
+var STATS_DEFAULT_WINDOW_DAYS = 30;
+var STATS_MAX_WINDOW_DAYS = 31;
+var FAILURE_LOG_LOOKBACK_DAYS = 7;
+var PURGE_AFTER_DAYS = 30;
 
 // src/mcp/tools/groups.ts
 function registerGroupTools(server, callApi) {
@@ -132,7 +157,7 @@ function registerGroupTools(server, callApi) {
         groupId: z2.string().uuid().describe("Policy group ID"),
         name: z2.string().optional().describe("New name"),
         description: z2.string().optional().describe("New description"),
-        status: z2.enum(["ACTIVE", "DISABLED"]).optional().describe(
+        status: z2.enum(PolicyGroupStatus).extract(["ACTIVE", "DISABLED"]).optional().describe(
           "DISABLED stops production execution of this group: execution calls return 403 (P-009), and a composite call that includes the group is rejected in full. The deployed version and any A/B test are kept, and dry run, Impact Simulation, and Decision Replay keep working, so a fix can be verified before setting ACTIVE again. To go back to the previous version, use lexq_deploy_rollback. To take the version out of production, use lexq_deploy_undeploy."
         ),
         activationGroup: z2.string().optional().describe(
@@ -152,7 +177,7 @@ function registerGroupTools(server, callApi) {
     {
       title: "Delete Policy Group",
       annotations: { readOnlyHint: false, destructiveHint: true },
-      description: "Delete (archive) a policy group. A deployed group cannot be deleted (P-020); undeploy it first with lexq_deploy_undeploy, which also ends a running A/B test. This cannot be undone. The group no longer appears in lexq_groups_list and its name can be reused right away. Calls that change it (settings, versions, rules, starting an A/B test, publish, deploy, rollback, scheduling a deployment) return 409 P-059. If it was ever executed, deployed, or replayed, it is kept for audit; otherwise it is permanently deleted after 30 days.",
+      description: `Delete (archive) a policy group. A deployed group cannot be deleted (P-020); undeploy it first with lexq_deploy_undeploy, which also ends a running A/B test. This cannot be undone. The group no longer appears in lexq_groups_list and its name can be reused right away. Calls that change it (settings, versions, rules, starting an A/B test, publish, deploy, rollback, scheduling a deployment) return 409 P-059. If it was ever executed, deployed, or replayed, it is kept for audit; otherwise it is permanently deleted after ${PURGE_AFTER_DAYS} days.`,
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID")
       })
@@ -186,7 +211,9 @@ function registerGroupTools(server, callApi) {
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID"),
         testVersionId: z2.string().uuid().describe("Challenger version ID. Must be a published version of this group"),
-        trafficRate: z2.number().int().min(1).max(99).describe("Traffic percentage routed to challenger (1-99)")
+        trafficRate: z2.number().int().min(MIN_TRAFFIC_RATE).max(MAX_TRAFFIC_RATE).describe(
+          `Traffic percentage routed to challenger (${MIN_TRAFFIC_RATE}-${MAX_TRAFFIC_RATE})`
+        )
       })
     },
     async ({ groupId, ...body }) => callApi("POST", `policy-groups/${groupId}/ab-test`, { body })
@@ -211,7 +238,9 @@ function registerGroupTools(server, callApi) {
       description: "Adjust traffic rate of a running A/B test.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID"),
-        trafficRate: z2.number().int().min(1).max(99).describe("New traffic percentage for challenger (1-99)")
+        trafficRate: z2.number().int().min(MIN_TRAFFIC_RATE).max(MAX_TRAFFIC_RATE).describe(
+          `New traffic percentage for challenger (${MIN_TRAFFIC_RATE}-${MAX_TRAFFIC_RATE})`
+        )
       })
     },
     async ({ groupId, ...body }) => callApi("PATCH", `policy-groups/${groupId}/ab-test/traffic-rate`, { body })
@@ -324,9 +353,6 @@ var END_DAY = `End date, ${ORG_DAY}. Inclusive: the whole day counts.`;
 var WINDOW_START_DAY = `Window start date, ${ORG_DAY}. Inclusive.`;
 var WINDOW_END_DAY = `Window end date, ${ORG_DAY}. Inclusive: the whole day counts.`;
 var INSTANT = "ISO-8601 instant with Z or an offset, e.g. 2026-10-01T00:00:00Z or 2026-10-01T09:00:00+09:00. A bare date or a time without an offset is rejected.";
-var STATS_DEFAULT_WINDOW_DAYS = 30;
-var STATS_MAX_WINDOW_DAYS = 31;
-var FAILURE_LOG_LOOKBACK_DAYS = 7;
 
 // src/mcp/tools/versions.ts
 function registerVersionTools(server, callApi) {
@@ -427,6 +453,7 @@ function registerVersionTools(server, callApi) {
 // src/mcp/tools/rules.ts
 import { z as z4 } from "zod";
 import dedent from "dedent";
+var oneOf = (values) => values.map((v) => `"${v}"`).join("|");
 function registerRuleTools(server, callApi) {
   server.registerTool(
     "lexq_rules_list",
@@ -476,8 +503,8 @@ function registerRuleTools(server, callApi) {
         After saving, lexq_facts_unregistered lists any keys this version references but has not
         defined (non-blocking, version-wide) — use it to decide what to register.
 
-        Condition: { type: "SINGLE", field, operator, value, valueType } or { type: "GROUP", operator: "AND"|"OR", children: [...] }
-        Value types: STRING, NUMBER, BOOLEAN, LIST_STRING, LIST_NUMBER
+        Condition: { type: "SINGLE", field, operator, value, valueType } or { type: "GROUP", operator: ${oneOf(LogicalOperator)}, children: [...] }
+        Value types: ${ValueType.join(", ")}
         Limits: a condition tree may hold at most ${MAX_CONDITIONS_PER_RULE} conditions (SINGLE nodes; GROUP nodes do not count)
         and nest at most ${MAX_CONDITION_DEPTH} levels below the root. A version holds at most ${MAX_RULES_PER_VERSION} rules.
 
@@ -500,7 +527,7 @@ function registerRuleTools(server, callApi) {
         Actions: [{ type, parameters }]
 
         Action parameter schemas:
-        - MUTATE_FACT: { targetVar: string, operator: "ASSIGN"|"ADD"|"SUB"|"MUL"|"DIV", method: "PERCENTAGE"|"AMOUNT", operand: number, refVar?: string, rounding?: RoundingOption }
+        - MUTATE_FACT: { targetVar: string, operator: ${oneOf(MutateOperator)}, method: ${oneOf(CalculationMethod)}, operand: number, refVar?: string, rounding?: RoundingOption }
           targetVar is the fact this action reads and writes. It must be a registered fact
           (ACT-032 otherwise), and the request must send it (P-015 otherwise). Its value must be
           a number when the action runs.
@@ -539,7 +566,7 @@ function registerRuleTools(server, callApi) {
         writes, send that value as an input fact in a second request. If a rule should run
         whenever another one does, put its actions in that rule instead.
 
-        RoundingOption (optional, MUTATE_FACT only): { scale: integer (0..${MAX_ROUNDING_SCALE}), mode?: "HALF_UP"|"HALF_DOWN"|"HALF_EVEN"|"FLOOR"|"CEILING"|"DOWN"|"UP" } mode defaults to HALF_UP. When omitted, calculator output is preserved at full precision (lossless).
+        RoundingOption (optional, MUTATE_FACT only): { scale: integer (0..${MAX_ROUNDING_SCALE}), mode?: ${oneOf(RoundingPolicy)} } mode defaults to HALF_UP. When omitted, calculator output is preserved at full precision (lossless).
       `,
       inputSchema: z4.object({
         groupId: z4.string().uuid().describe("Policy group ID"),
@@ -674,7 +701,7 @@ function registerFactTools(server, callApi) {
     {
       title: "Create Fact Definition",
       annotations: { readOnlyHint: false, destructiveHint: false },
-      description: "Register a new input variable. Key starts with a letter, then letters, numbers, and underscores (e.g. paymentAmount). Casing is not enforced. Types: STRING, NUMBER, BOOLEAN, LIST_STRING, LIST_NUMBER.",
+      description: `Register a new input variable. Key starts with a letter, then letters, numbers, and underscores (e.g. paymentAmount). Casing is not enforced. Types: ${VALUE_TYPES.join(", ")}.`,
       inputSchema: z5.object({
         key: z5.string().regex(FACT_KEY_PATTERN).describe("Variable key. Any casing; must start with a letter."),
         name: z5.string().describe("Display name"),
@@ -880,7 +907,7 @@ function registerDeployTools(server, callApi) {
     {
       title: "List Scheduled Deployments",
       annotations: { readOnlyHint: true },
-      description: "List scheduled deployments across all groups (all statuses: PENDING, EXECUTED, CANCELED, FAILED), newest first.",
+      description: `List scheduled deployments across all groups (all statuses: ${DeploymentScheduleStatus.join(", ")}), newest first.`,
       inputSchema: z6.object({
         page: z6.number().int().min(0).default(0).describe("Page number"),
         size: z6.number().int().min(1).max(100).default(20).describe("Page size")
@@ -898,7 +925,7 @@ function registerDeployTools(server, callApi) {
         page: z6.number().int().min(0).default(0).describe("Page number"),
         size: z6.number().int().min(1).max(100).default(20).describe("Page size"),
         groupId: z6.string().uuid().optional().describe("Filter by group ID"),
-        types: z6.string().optional().describe("Filter by deployment types (comma-separated: DEPLOY,ROLLBACK,UNDEPLOY)"),
+        types: z6.string().optional().describe(`Filter by deployment types (comma-separated: ${DeploymentType.join(",")})`),
         startDate: z6.string().optional().describe(START_DAY),
         endDate: z6.string().optional().describe(END_DAY)
       })
@@ -1061,7 +1088,7 @@ function registerAnalyticsTools(server, callApi) {
         options.baselinePolicyVersionId: uuid (optional, for baseline comparison)
         options.includeRuleStats: boolean
         options.metricConfig: optional — omit for plain execution count. To aggregate a fact, pass
-          { "targetVariable": "<fact>", "aggregationType": "COUNT" | "SUM" | "AVG" }
+          { "targetVariable": "<fact>", "aggregationType": ${SimulationMetricType.map((t) => `"${t}"`).join(" | ")} }
 
         Example (uploaded dataset):
         {
@@ -1107,7 +1134,7 @@ function registerAnalyticsTools(server, callApi) {
       inputSchema: z7.object({
         page: z7.number().int().min(0).default(0).describe("Page number"),
         size: z7.number().int().min(1).max(100).default(20).describe("Page size"),
-        status: z7.enum(["PENDING", "RUNNING", "COMPLETED", "FAILED", "CANCELED"]).optional().describe("Filter by status"),
+        status: z7.enum(SimulationStatus).optional().describe("Filter by status"),
         from: z7.string().optional().describe(START_DAY),
         to: z7.string().optional().describe(END_DAY)
       })
@@ -1210,6 +1237,15 @@ function registerAnalyticsTools(server, callApi) {
 
 // src/mcp/tools/profile.ts
 import { z as z8 } from "zod";
+
+// src/lib/percentiles.ts
+var PERCENTILE_MIN_N = {
+  p50: TAIL_MIN_OBS * 2,
+  p95: TAIL_MIN_OBS * 20,
+  p99: TAIL_MIN_OBS * 100
+};
+
+// src/mcp/tools/profile.ts
 var RELATIVE_THRESHOLD = `flagged = p50 \u2265 ${SLOW_MULTIPLIER}\xD7 median of per-rule p50s within the group; absolute thresholds are intentionally not supported.`;
 function profileParams(opts) {
   const params = {};
@@ -1225,7 +1261,7 @@ function registerProfileTools(server, callApi) {
     {
       title: "Group Latency Profile",
       annotations: { readOnlyHint: true },
-      description: "Per-rule latency profile of a policy group over a time window: group TOTAL distribution split by cache state (HIT = compiled ruleset cache hit, MISS = deep-load + compile), a per-rule CONDITION/ACTION percentile table, and slow-rule flags. " + RELATIVE_THRESHOLD + ` Every percentile is accompanied by its sample count n; a percentile is withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 needs n \u2265 6, p95 n \u2265 60, p99 n \u2265 300 \u2014 display gate, separate from the n \u2265 ${MIN_SAMPLES} judgment gate). Baselines report INSUFFICIENT_COHORT when fewer than ${MIN_COHORT_SIZE} rules qualify. Rule detail comes from a deterministic ${PROFILE_SAMPLE_PERMILLE / 10}% sample of calls; TOTAL is recorded for every call. Defaults: last ${PROFILE_DEFAULT_WINDOW_HOURS}h, live version, cacheState HIT.`,
+      description: "Per-rule latency profile of a policy group over a time window: group TOTAL distribution split by cache state (HIT = compiled ruleset cache hit, MISS = deep-load + compile), a per-rule CONDITION/ACTION percentile table, and slow-rule flags. " + RELATIVE_THRESHOLD + ` Every percentile is accompanied by its sample count n; a percentile is withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 needs n \u2265 ${PERCENTILE_MIN_N.p50}, p95 n \u2265 ${PERCENTILE_MIN_N.p95}, p99 n \u2265 ${PERCENTILE_MIN_N.p99} \u2014 display gate, separate from the n \u2265 ${MIN_SAMPLES} judgment gate). Baselines report INSUFFICIENT_COHORT when fewer than ${MIN_COHORT_SIZE} rules qualify. Rule detail comes from a deterministic ${PROFILE_SAMPLE_PERMILLE / 10}% sample of calls; TOTAL is recorded for every call. Defaults: last ${PROFILE_DEFAULT_WINDOW_HOURS}h, live version, cacheState HIT.`,
       inputSchema: z8.object({
         groupId: z8.string().uuid().describe("Policy group ID"),
         versionId: z8.string().uuid().optional().describe("Version to inspect (default: live version)"),
@@ -1233,7 +1269,7 @@ function registerProfileTools(server, callApi) {
           `Window start, ISO-8601 instant (e.g. 2026-07-01T00:00:00Z). Default: ${PROFILE_DEFAULT_WINDOW_HOURS}h ago`
         ),
         to: z8.string().optional().describe("Window end, ISO-8601 instant. Default: now"),
-        cacheState: z8.enum(["HIT", "MISS"]).optional().describe("Cache dimension for the rule table and judgment (default: HIT)")
+        cacheState: z8.enum(ProfileCacheState).optional().describe("Cache dimension for the rule table and judgment (default: HIT)")
       })
     },
     async ({ groupId, versionId, from, to, cacheState }) => callApi("GET", `policy-groups/${groupId}/profile`, {
@@ -1245,7 +1281,7 @@ function registerProfileTools(server, callApi) {
     {
       title: "Rule Latency Detail",
       annotations: { readOnlyHint: true },
-      description: `Single-rule latency detail: merged phase \xD7 cacheState distributions plus a per-window time series (${LATENCY_WINDOW_MILLIS / 1e3}s windows). Missing windows are genuine gaps \u2014 never interpolated. Series points carry each window's own values; percentiles in merged distributions are withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 n \u2265 6, p95 n \u2265 60, p99 n \u2265 300). ` + RELATIVE_THRESHOLD,
+      description: `Single-rule latency detail: merged phase \xD7 cacheState distributions plus a per-window time series (${LATENCY_WINDOW_MILLIS / 1e3}s windows). Missing windows are genuine gaps \u2014 never interpolated. Series points carry each window's own values; percentiles in merged distributions are withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 n \u2265 ${PERCENTILE_MIN_N.p50}, p95 n \u2265 ${PERCENTILE_MIN_N.p95}, p99 n \u2265 ${PERCENTILE_MIN_N.p99}). ` + RELATIVE_THRESHOLD,
       inputSchema: z8.object({
         groupId: z8.string().uuid().describe("Policy group ID"),
         ruleId: z8.string().uuid().describe("Rule ID (from lexq_profile_overview)"),
@@ -1362,7 +1398,7 @@ function registerHistoryTools(server, callApi) {
         traceId: z10.string().optional().describe("Filter by trace ID"),
         groupId: z10.string().uuid().optional().describe("Filter by policy group"),
         versionId: z10.string().uuid().optional().describe("Filter by version"),
-        status: z10.enum(["SUCCESS", "NO_MATCH", "ERROR", "TIMEOUT"]).optional().describe("Filter by execution status"),
+        status: z10.enum(ApiExecutionStatus).optional().describe("Filter by execution status"),
         startDate: z10.string().optional().describe(START_DAY),
         endDate: z10.string().optional().describe(END_DAY)
       })
@@ -1457,6 +1493,17 @@ function registerProvenanceTools(server, callApi) {
 
 // src/mcp/tools/logs.ts
 import { z as z12 } from "zod";
+
+// src/lib/enum-notes.ts
+function withNotes(notes) {
+  return Object.entries(notes).map(([value, note]) => note ? `${value} (${note})` : value);
+}
+
+// src/mcp/tools/logs.ts
+var ACTION_NOTES = {
+  RESOLVE: "mark as manually fixed",
+  IGNORE: "skip intentionally"
+};
 function registerLogTools(server, callApi) {
   server.registerTool(
     "lexq_logs_list",
@@ -1501,7 +1548,7 @@ function registerLogTools(server, callApi) {
     {
       title: "Process Failure Log",
       annotations: { readOnlyHint: false, destructiveHint: false },
-      description: "Process a single failure log: RESOLVE (mark as manually fixed) or IGNORE (skip intentionally).",
+      description: `Process a single failure log: ${withNotes(ACTION_NOTES).join(" or ")}.`,
       inputSchema: z12.object({
         logId: z12.string().uuid().describe("Failure log ID"),
         action: z12.enum(FailureAction).describe("Action to take")
@@ -1530,6 +1577,10 @@ function registerLogTools(server, callApi) {
 
 // src/mcp/tools/webhook-subscriptions.ts
 import { z as z13 } from "zod";
+var FORMAT_NOTES = {
+  GENERIC: "full JSON",
+  SLACK: '{"text": "..."}'
+};
 function registerWebhookSubscriptionTools(server, callApi) {
   server.registerTool(
     "lexq_webhook_subscriptions_list",
@@ -1564,7 +1615,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     {
       title: "Save Webhook Subscription",
       annotations: { readOnlyHint: false, destructiveHint: true },
-      description: `Create or update a webhook subscription. Omit id to create, provide id to update. Events: ${PlatformEventType.join(", ")}. Formats: GENERIC (full JSON), SLACK ({"text": "..."}).`,
+      description: `Create or update a webhook subscription. Omit id to create, provide id to update. Events: ${PlatformEventType.join(", ")}. Formats: ${withNotes(FORMAT_NOTES).join(", ")}.`,
       inputSchema: z13.object({
         id: z13.string().uuid().optional().describe("Subscription ID (omit to create, provide to update)"),
         name: z13.string().min(1).describe("Subscription name (unique per tenant)"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lexq/cli",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "mcpName": "io.lexq/lexq",
   "description": "The Decision Operations Platform for engineering teams",
   "type": "module",