@livedesk/hub 0.1.35 → 0.1.37

package/src/agents/agent-tool-registry.js

@@ -1,340 +1,322 @@
-const readOnlyInput = {
-  type: 'object',
-  properties: {
-    deviceIds: { type: 'array', items: { type: 'string' }, maxItems: 500 }
-  },
-  additionalProperties: false
-};
-
-function withQueryInput(properties) {
-  return {
-    type: 'object',
-    properties: { ...properties, deviceIds: readOnlyInput.properties.deviceIds },
-    additionalProperties: false
-  };
-}
-
-function withRequiredInput(properties, required = []) {
-  return {
-    ...withQueryInput(properties),
-    required
-  };
-}
-
-const taskPermission = { ask: 'ask', safeAuto: 'ask', fullAccess: 'allow' };
-const readTaskPermission = { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' };
-
-const ALL_AGENT_TOOL_DEFINITIONS = Object.freeze([
-  {
-    name: 'livedesk.list_devices',
-    description: 'List connected LiveDesk Clients. This is read-only.',
-    category: 'read',
-    readOnly: true,
-    mutating: false,
-    risk: 'low',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: readOnlyInput,
-    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
-  },
-  {
-    name: 'livedesk.get_system_health',
-    description: 'Read system health from the selected Clients.',
-    category: 'read',
-    readOnly: true,
-    mutating: false,
-    risk: 'low',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: readOnlyInput,
-    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
-  },
-  {
-    name: 'livedesk.get_gpu_status',
-    description: 'Read GPU status from the selected Clients.',
-    category: 'read',
-    readOnly: true,
-    mutating: false,
-    risk: 'low',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: readOnlyInput,
-    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
-  },
-  {
-    name: 'livedesk.get_disk_status',
-    description: 'Read disk status from the selected Clients.',
-    category: 'read',
-    readOnly: true,
-    mutating: false,
-    risk: 'low',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: readOnlyInput,
-    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
-  },
-  {
-    name: 'livedesk.list_processes',
-    description: 'Read process status from the selected Clients. Use processName when the request names a specific process.',
-    category: 'read',
-    readOnly: true,
-    mutating: false,
-    risk: 'low',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withQueryInput({ processName: { type: 'string', maxLength: 120 } }),
-    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
-  },
-  {
-    name: 'livedesk.get_service_status',
-    description: 'Read service status from the selected Clients. Use serviceName when the user names a service.',
-    category: 'read',
-    readOnly: true,
-    mutating: false,
-    risk: 'low',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withQueryInput({ serviceName: { type: 'string', maxLength: 120 } }),
-    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
-  },
-  {
-    name: 'livedesk.collect_diagnostics',
-    description: 'Collect the existing safe LiveDesk diagnostics payload from the selected Clients.',
-    category: 'read',
-    readOnly: true,
-    mutating: false,
-    risk: 'low',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: readOnlyInput,
-    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
-  },
-  {
-    name: 'livedesk.control_process',
-    description: 'Stop or restart a named process on the selected Clients. This changes process state.',
-    category: 'processControl',
-    readOnly: false,
-    mutating: true,
-    risk: 'high',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withRequiredInput({ processName: { type: 'string', minLength: 1, maxLength: 120 }, action: { type: 'string', enum: ['stop', 'restart'] } }, ['processName', 'action']),
-    defaultPermission: taskPermission
-  },
-  {
-    name: 'livedesk.control_service',
-    description: 'Start, stop, or restart a named service on the selected Clients.',
-    category: 'serviceControl',
-    readOnly: false,
-    mutating: true,
-    risk: 'high',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'linux'],
-    inputSchema: withRequiredInput({ serviceName: { type: 'string', minLength: 1, maxLength: 120 }, action: { type: 'string', enum: ['start', 'stop', 'restart'] } }, ['serviceName', 'action']),
-    defaultPermission: taskPermission
-  },
-  {
-    name: 'livedesk.launch_application',
-    description: 'Launch a specific application without using a shell command.',
-    category: 'applicationControl',
-    readOnly: false,
-    mutating: true,
-    risk: 'medium',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withRequiredInput({ executable: { type: 'string', minLength: 1, maxLength: 400 }, args: { type: 'array', items: { type: 'string', maxLength: 400 }, maxItems: 32 }, workingDirectory: { type: 'string', maxLength: 600 } }, ['executable']),
-    defaultPermission: taskPermission
-  },
-  {
-    name: 'livedesk.close_application',
-    description: 'Close a named application process on the selected Clients.',
-    category: 'applicationControl',
-    readOnly: false,
-    mutating: true,
-    risk: 'medium',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withRequiredInput({ processName: { type: 'string', minLength: 1, maxLength: 120 }, force: { type: 'boolean' } }, ['processName']),
-    defaultPermission: taskPermission
-  },
-  {
-    name: 'livedesk.read_file',
-    description: 'Read a bounded UTF-8 text file from the selected Clients, with sensitive credential paths rejected.',
-    category: 'fileRead',
-    readOnly: true,
-    mutating: false,
-    risk: 'medium',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withRequiredInput({ path: { type: 'string', minLength: 1, maxLength: 600 }, maxBytes: { type: 'integer', minimum: 1, maximum: 65536 } }, ['path']),
-    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
-  },
-  {
-    name: 'livedesk.write_file',
-    description: 'Write bounded text content to a file on the selected Clients.',
-    category: 'fileWrite',
-    readOnly: false,
-    mutating: true,
-    risk: 'high',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withRequiredInput({ path: { type: 'string', minLength: 1, maxLength: 600 }, content: { type: 'string', maxLength: 1048576 }, append: { type: 'boolean' } }, ['path', 'content']),
-    defaultPermission: taskPermission
-  },
-  {
-    name: 'livedesk.delete_file',
-    description: 'Delete a selected file or explicitly requested directory on the selected Clients.',
-    category: 'fileDelete',
-    readOnly: false,
-    mutating: true,
-    risk: 'critical',
-    reversible: false,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withRequiredInput({ path: { type: 'string', minLength: 1, maxLength: 600 }, recursive: { type: 'boolean' } }, ['path']),
-    defaultPermission: taskPermission
-  },
-  {
-    name: 'livedesk.list_directory',
-    description: 'List bounded file metadata from a directory on the selected Clients.',
-    category: 'fileRead',
-    readOnly: true,
-    mutating: false,
-    risk: 'low',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withRequiredInput({ path: { type: 'string', minLength: 1, maxLength: 600 }, recursive: { type: 'boolean' }, maxEntries: { type: 'integer', minimum: 1, maximum: 500 } }, ['path']),
-    defaultPermission: readTaskPermission
-  },
-  {
-    name: 'livedesk.run_command',
-    description: 'Run a bounded command through the selected Client command interpreter. This is an audited high-risk action.',
-    category: 'shell',
-    readOnly: false,
-    mutating: true,
-    risk: 'critical',
-    reversible: false,
-    supportsBatch: false,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withRequiredInput({ command: { type: 'string', minLength: 1, maxLength: 4000 }, workingDirectory: { type: 'string', maxLength: 600 }, timeoutMs: { type: 'integer', minimum: 1000, maximum: 30000 } }, ['command']),
-    defaultPermission: taskPermission
-  },
-  {
-    name: 'livedesk.run_script',
-    description: 'Run a bounded script file using the Client platform interpreter.',
-    category: 'script',
-    readOnly: false,
-    mutating: true,
-    risk: 'high',
-    reversible: false,
-    supportsBatch: false,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withRequiredInput({ path: { type: 'string', minLength: 1, maxLength: 600 }, args: { type: 'array', items: { type: 'string', maxLength: 400 }, maxItems: 32 }, timeoutMs: { type: 'integer', minimum: 1000, maximum: 30000 } }, ['path']),
-    defaultPermission: taskPermission
-  },
-  {
-    name: 'livedesk.install_software',
-    description: 'Install a named package through an explicitly selected package manager.',
-    category: 'softwareInstall',
-    readOnly: false,
-    mutating: true,
-    risk: 'high',
-    reversible: false,
-    supportsBatch: false,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withRequiredInput({ manager: { type: 'string', enum: ['winget', 'brew', 'apt', 'npm'] }, packageName: { type: 'string', minLength: 1, maxLength: 200 }, version: { type: 'string', maxLength: 80 } }, ['manager', 'packageName']),
-    defaultPermission: taskPermission
-  },
-  {
-    name: 'livedesk.get_network_status',
-    description: 'Read bounded network adapter and connectivity status from the selected Clients.',
-    category: 'network',
-    readOnly: true,
-    mutating: false,
-    risk: 'low',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: readOnlyInput,
-    defaultPermission: readTaskPermission
-  },
-  {
-    name: 'livedesk.power_action',
-    description: 'Request an explicit power action on the selected Clients.',
-    category: 'systemPower',
-    readOnly: false,
-    mutating: true,
-    risk: 'critical',
-    reversible: false,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withRequiredInput({ action: { type: 'string', enum: ['lock', 'logoff', 'sleep', 'restart', 'shutdown'] }, delaySec: { type: 'integer', minimum: 0, maximum: 3600 } }, ['action']),
-    defaultPermission: taskPermission
-  },
-  {
-    name: 'livedesk.system_configuration',
-    description: 'Apply one explicitly named system configuration action supported by the Client agent.',
-    category: 'systemConfiguration',
-    readOnly: false,
-    mutating: true,
-    risk: 'critical',
-    reversible: false,
-    supportsBatch: false,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withRequiredInput({ action: { type: 'string', enum: ['set-timezone', 'set-environment-variable'] }, name: { type: 'string', minLength: 1, maxLength: 120 }, value: { type: 'string', maxLength: 400 } }, ['action', 'name', 'value']),
-    defaultPermission: taskPermission
-  },
-  {
-    name: 'livedesk.collect_logs',
-    description: 'Collect bounded recent application and system log lines without reading credential stores.',
-    category: 'read',
-    readOnly: true,
-    mutating: false,
-    risk: 'medium',
-    reversible: true,
-    supportsBatch: true,
-    supportedPlatforms: ['windows', 'macos', 'linux'],
-    inputSchema: withQueryInput({ source: { type: 'string', maxLength: 120 }, maxLines: { type: 'integer', minimum: 1, maximum: 500 } }),
-    defaultPermission: readTaskPermission
-  }
-]);
-
-// LD-SEC-AI-001: the first public product exposes read-only AI tools only.
-// Keep the retired names explicit so every boundary can fail closed for an old
-// model, stale MCP schema, or rolling-update Client without advertising the
-// capability or relying on a permission preset.
-export const RETIRED_AGENT_MUTATING_TOOL_NAMES = Object.freeze(
-  ALL_AGENT_TOOL_DEFINITIONS.filter(tool => tool.mutating === true).map(tool => tool.name)
-);
-
-const retiredMutatingToolNames = new Set(RETIRED_AGENT_MUTATING_TOOL_NAMES);
-
-export const AGENT_TOOL_DEFINITIONS = Object.freeze(
-  ALL_AGENT_TOOL_DEFINITIONS.filter(tool => tool.readOnly === true && tool.mutating !== true)
-);
-
-export const AGENT_TOOL_NAMES = Object.freeze(AGENT_TOOL_DEFINITIONS.map(tool => tool.name));
-
-const toolByName = new Map(AGENT_TOOL_DEFINITIONS.map(tool => [tool.name, tool]));
-
-export function getAgentToolDefinition(name) {
-  return toolByName.get(String(name || '').trim()) || null;
-}
-
-export function isRetiredAgentMutatingToolName(name) {
-  return retiredMutatingToolNames.has(String(name || '').trim());
-}
+const readOnlyInput = {
+  type: 'object',
+  properties: {
+    deviceIds: { type: 'array', items: { type: 'string' }, maxItems: 500 }
+  },
+  additionalProperties: false
+};
+
+function withQueryInput(properties) {
+  return {
+    type: 'object',
+    properties: { ...properties, deviceIds: readOnlyInput.properties.deviceIds },
+    additionalProperties: false
+  };
+}
+
+function withRequiredInput(properties, required = []) {
+  return {
+    ...withQueryInput(properties),
+    required
+  };
+}
+
+const taskPermission = { ask: 'ask', safeAuto: 'ask', fullAccess: 'allow' };
+const readTaskPermission = { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' };
+
+export const AGENT_TOOL_DEFINITIONS = Object.freeze([
+  {
+    name: 'livedesk.list_devices',
+    description: 'List connected LiveDesk Clients. This is read-only.',
+    category: 'read',
+    readOnly: true,
+    mutating: false,
+    risk: 'low',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: readOnlyInput,
+    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
+  },
+  {
+    name: 'livedesk.get_system_health',
+    description: 'Read system health from the selected Clients.',
+    category: 'read',
+    readOnly: true,
+    mutating: false,
+    risk: 'low',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: readOnlyInput,
+    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
+  },
+  {
+    name: 'livedesk.get_gpu_status',
+    description: 'Read GPU status from the selected Clients.',
+    category: 'read',
+    readOnly: true,
+    mutating: false,
+    risk: 'low',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: readOnlyInput,
+    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
+  },
+  {
+    name: 'livedesk.get_disk_status',
+    description: 'Read disk status from the selected Clients.',
+    category: 'read',
+    readOnly: true,
+    mutating: false,
+    risk: 'low',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: readOnlyInput,
+    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
+  },
+  {
+    name: 'livedesk.list_processes',
+    description: 'Read process status from the selected Clients. Use processName when the request names a specific process.',
+    category: 'read',
+    readOnly: true,
+    mutating: false,
+    risk: 'low',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withQueryInput({ processName: { type: 'string', maxLength: 120 } }),
+    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
+  },
+  {
+    name: 'livedesk.get_service_status',
+    description: 'Read service status from the selected Clients. Use serviceName when the user names a service.',
+    category: 'read',
+    readOnly: true,
+    mutating: false,
+    risk: 'low',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withQueryInput({ serviceName: { type: 'string', maxLength: 120 } }),
+    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
+  },
+  {
+    name: 'livedesk.collect_diagnostics',
+    description: 'Collect the existing safe LiveDesk diagnostics payload from the selected Clients.',
+    category: 'read',
+    readOnly: true,
+    mutating: false,
+    risk: 'low',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: readOnlyInput,
+    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
+  },
+  {
+    name: 'livedesk.control_process',
+    description: 'Stop or restart a named process on the selected Clients. This changes process state.',
+    category: 'processControl',
+    readOnly: false,
+    mutating: true,
+    risk: 'high',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withRequiredInput({ processName: { type: 'string', minLength: 1, maxLength: 120 }, action: { type: 'string', enum: ['stop', 'restart'] } }, ['processName', 'action']),
+    defaultPermission: taskPermission
+  },
+  {
+    name: 'livedesk.control_service',
+    description: 'Start, stop, or restart a named service on the selected Clients.',
+    category: 'serviceControl',
+    readOnly: false,
+    mutating: true,
+    risk: 'high',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'linux'],
+    inputSchema: withRequiredInput({ serviceName: { type: 'string', minLength: 1, maxLength: 120 }, action: { type: 'string', enum: ['start', 'stop', 'restart'] } }, ['serviceName', 'action']),
+    defaultPermission: taskPermission
+  },
+  {
+    name: 'livedesk.launch_application',
+    description: 'Launch a specific application without using a shell command.',
+    category: 'applicationControl',
+    readOnly: false,
+    mutating: true,
+    risk: 'medium',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withRequiredInput({ executable: { type: 'string', minLength: 1, maxLength: 400 }, args: { type: 'array', items: { type: 'string', maxLength: 400 }, maxItems: 32 }, workingDirectory: { type: 'string', maxLength: 600 } }, ['executable']),
+    defaultPermission: taskPermission
+  },
+  {
+    name: 'livedesk.close_application',
+    description: 'Close a named application process on the selected Clients.',
+    category: 'applicationControl',
+    readOnly: false,
+    mutating: true,
+    risk: 'medium',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withRequiredInput({ processName: { type: 'string', minLength: 1, maxLength: 120 }, force: { type: 'boolean' } }, ['processName']),
+    defaultPermission: taskPermission
+  },
+  {
+    name: 'livedesk.read_file',
+    description: 'Read a bounded UTF-8 text file from the selected Clients, with sensitive credential paths rejected.',
+    category: 'fileRead',
+    readOnly: true,
+    mutating: false,
+    risk: 'medium',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withRequiredInput({ path: { type: 'string', minLength: 1, maxLength: 600 }, maxBytes: { type: 'integer', minimum: 1, maximum: 65536 } }, ['path']),
+    defaultPermission: { ask: 'allow', safeAuto: 'allow', fullAccess: 'allow' }
+  },
+  {
+    name: 'livedesk.write_file',
+    description: 'Write bounded text content to a file on the selected Clients.',
+    category: 'fileWrite',
+    readOnly: false,
+    mutating: true,
+    risk: 'high',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withRequiredInput({ path: { type: 'string', minLength: 1, maxLength: 600 }, content: { type: 'string', maxLength: 1048576 }, append: { type: 'boolean' } }, ['path', 'content']),
+    defaultPermission: taskPermission
+  },
+  {
+    name: 'livedesk.delete_file',
+    description: 'Delete a selected file or explicitly requested directory on the selected Clients.',
+    category: 'fileDelete',
+    readOnly: false,
+    mutating: true,
+    risk: 'critical',
+    reversible: false,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withRequiredInput({ path: { type: 'string', minLength: 1, maxLength: 600 }, recursive: { type: 'boolean' } }, ['path']),
+    defaultPermission: taskPermission
+  },
+  {
+    name: 'livedesk.list_directory',
+    description: 'List bounded file metadata from a directory on the selected Clients.',
+    category: 'fileRead',
+    readOnly: true,
+    mutating: false,
+    risk: 'low',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withRequiredInput({ path: { type: 'string', minLength: 1, maxLength: 600 }, recursive: { type: 'boolean' }, maxEntries: { type: 'integer', minimum: 1, maximum: 500 } }, ['path']),
+    defaultPermission: readTaskPermission
+  },
+  {
+    name: 'livedesk.run_command',
+    description: 'Run a bounded command through the selected Client command interpreter. This is an audited high-risk action.',
+    category: 'shell',
+    readOnly: false,
+    mutating: true,
+    risk: 'critical',
+    reversible: false,
+    supportsBatch: false,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withRequiredInput({ command: { type: 'string', minLength: 1, maxLength: 4000 }, workingDirectory: { type: 'string', maxLength: 600 }, timeoutMs: { type: 'integer', minimum: 1000, maximum: 30000 } }, ['command']),
+    defaultPermission: taskPermission
+  },
+  {
+    name: 'livedesk.run_script',
+    description: 'Run a bounded script file using the Client platform interpreter.',
+    category: 'script',
+    readOnly: false,
+    mutating: true,
+    risk: 'high',
+    reversible: false,
+    supportsBatch: false,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withRequiredInput({ path: { type: 'string', minLength: 1, maxLength: 600 }, args: { type: 'array', items: { type: 'string', maxLength: 400 }, maxItems: 32 }, timeoutMs: { type: 'integer', minimum: 1000, maximum: 30000 } }, ['path']),
+    defaultPermission: taskPermission
+  },
+  {
+    name: 'livedesk.install_software',
+    description: 'Install a named package through an explicitly selected package manager.',
+    category: 'softwareInstall',
+    readOnly: false,
+    mutating: true,
+    risk: 'high',
+    reversible: false,
+    supportsBatch: false,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withRequiredInput({ manager: { type: 'string', enum: ['winget', 'brew', 'apt', 'npm'] }, packageName: { type: 'string', minLength: 1, maxLength: 200 }, version: { type: 'string', maxLength: 80 } }, ['manager', 'packageName']),
+    defaultPermission: taskPermission
+  },
+  {
+    name: 'livedesk.get_network_status',
+    description: 'Read bounded network adapter and connectivity status from the selected Clients.',
+    category: 'network',
+    readOnly: true,
+    mutating: false,
+    risk: 'low',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: readOnlyInput,
+    defaultPermission: readTaskPermission
+  },
+  {
+    name: 'livedesk.power_action',
+    description: 'Request an explicit power action on the selected Clients.',
+    category: 'systemPower',
+    readOnly: false,
+    mutating: true,
+    risk: 'critical',
+    reversible: false,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withRequiredInput({ action: { type: 'string', enum: ['lock', 'logoff', 'sleep', 'restart', 'shutdown'] }, delaySec: { type: 'integer', minimum: 0, maximum: 3600 } }, ['action']),
+    defaultPermission: taskPermission
+  },
+  {
+    name: 'livedesk.system_configuration',
+    description: 'Apply one explicitly named system configuration action supported by the Client agent.',
+    category: 'systemConfiguration',
+    readOnly: false,
+    mutating: true,
+    risk: 'critical',
+    reversible: false,
+    supportsBatch: false,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withRequiredInput({ action: { type: 'string', enum: ['set-timezone', 'set-environment-variable'] }, name: { type: 'string', minLength: 1, maxLength: 120 }, value: { type: 'string', maxLength: 400 } }, ['action', 'name', 'value']),
+    defaultPermission: taskPermission
+  },
+  {
+    name: 'livedesk.collect_logs',
+    description: 'Collect bounded recent application and system log lines without reading credential stores.',
+    category: 'read',
+    readOnly: true,
+    mutating: false,
+    risk: 'medium',
+    reversible: true,
+    supportsBatch: true,
+    supportedPlatforms: ['windows', 'macos', 'linux'],
+    inputSchema: withQueryInput({ source: { type: 'string', maxLength: 120 }, maxLines: { type: 'integer', minimum: 1, maximum: 500 } }),
+    defaultPermission: readTaskPermission
+  }
+]);
+
+export const AGENT_TOOL_NAMES = Object.freeze(AGENT_TOOL_DEFINITIONS.map(tool => tool.name));
+
+const toolByName = new Map(AGENT_TOOL_DEFINITIONS.map(tool => [tool.name, tool]));
+
+export function getAgentToolDefinition(name) {
+  return toolByName.get(String(name || '').trim()) || null;
+}