@murphai/murph 1.3.1 → 1.3.2

package/node_modules/@murphai/assistant-engine/dist/assistant-codex/dynamic-tool-catalog.js

@@ -3,7 +3,7 @@ import { HOSTED_EXECUTION_MEMBER_REPORTED_DAILY_METRIC_KEYS, } from '@murphai/ho
 import { assistantBasePersonaIdValues, assistantBasePersonaOptions, assistantPersonaIdValues, assistantTonePreferenceValues, assistantVoiceOptionIdValues, assistantVoiceOptions, } from '@murphai/contracts';
 import { HOSTED_EXECUTION_ASSISTANT_ASK_QUESTION_MAX_CODE_POINTS, HOSTED_EXECUTION_ASSISTANT_ASK_TARGET_LABEL_MAX_CODE_POINTS, } from '@murphai/hosted-execution/contracts';
 import { HOSTED_RUNTIME_PENDING_GROUP_SETUP_ROOM_CONTEXT_MAX_CODE_POINTS, } from '@murphai/hosted-execution/pending-group-setup';
-import { HOSTED_FAMILY_PLAN_CODES, HOSTED_PRODUCT_FEEDBACK_KINDS, HOSTED_PRODUCT_FEEDBACK_SUMMARY_MAX_LENGTH, HOSTED_RUNTIME_ASSISTANT_ASK_REQUEST_ID_MAX_CODE_POINTS, HOSTED_RUNTIME_GROUP_DISCLOSURE_PERMISSION_TEXT_MAX_CODE_POINTS, HOSTED_RUNTIME_GROUP_DISPLAY_NAME_MAX_LENGTH, HOSTED_RUNTIME_GROUP_EMAIL_HTML_MAX_LENGTH, HOSTED_RUNTIME_GROUP_EMAIL_SUBJECT_MAX_LENGTH, HOSTED_RUNTIME_GROUP_EMAIL_TEXT_MAX_LENGTH, HOSTED_USAGE_REFERRAL_POLICY_CODES, } from '@murphai/hosted-execution/runtime-control';
+import { HOSTED_FAMILY_PLAN_CODES, HOSTED_PRODUCT_FEEDBACK_KINDS, HOSTED_PRODUCT_FEEDBACK_SUMMARY_MAX_LENGTH, HOSTED_RUNTIME_ASSISTANT_ASK_REQUEST_ID_MAX_CODE_POINTS, HOSTED_RUNTIME_GROUP_CONTEXT_HANDOFF_MAX_CODE_POINTS, HOSTED_RUNTIME_GROUP_DISCLOSURE_PERMISSION_TEXT_MAX_CODE_POINTS, HOSTED_RUNTIME_GROUP_DISPLAY_NAME_MAX_LENGTH, HOSTED_RUNTIME_GROUP_EMAIL_HTML_MAX_LENGTH, HOSTED_RUNTIME_GROUP_EMAIL_SUBJECT_MAX_LENGTH, HOSTED_RUNTIME_GROUP_EMAIL_TEXT_MAX_LENGTH, HOSTED_USAGE_REFERRAL_POLICY_CODES, } from '@murphai/hosted-execution/runtime-control';
 import { HOSTED_ASSISTANT_PRODUCT_MODELS, HOSTED_ASSISTANT_PROVIDERS, HOSTED_ASSISTANT_REASONING_EFFORTS, } from '@murphai/hosted-execution/assistant-model';
 import { HOSTED_PLAN_USAGE_DIRECT_BILLING_PLAN_CODES } from '@murphai/hosted-execution/plan-usage';
 import { ASSISTANT_AUTHORED_RESPONSE_MEDIA_MAX_ITEMS } from '../assistant/response-media.js';
@@ -20,22 +20,26 @@ import { MURPH_DEVICE_TOOL, } from './dynamic-tools/device.js';
 import { MURPH_LABS_TOOL, } from './dynamic-tools/labs.js';
 import { MURPH_PENDING_VAULT_FILES_TOOL, } from './dynamic-tools/pending-vault-files.js';
 import { MURPH_GROUP_ROOM_MODEL_TOOL, } from './dynamic-tools/group-room-model.js';
+import { MURPH_MEMBER_MEMORY_TOOL, } from './dynamic-tools/member-memory.js';
 import { MURPH_CREATE_CLINICAL_RECORDS_CONNECT_LINK_TOOL, } from './dynamic-tools/clinical-records.js';
 import { MURPH_CONNECTED_APPS_EXECUTE_TOOL, MURPH_CONNECTED_APPS_DYNAMIC_TOOLS, MURPH_CONNECTED_APPS_MANAGE_TOOL, MURPH_CONNECTED_APPS_SEARCH_TOOL, } from './dynamic-tools/connected-apps.js';
 import { MURPH_GENERATE_VOICE_MEMO_TOOL, } from './dynamic-tools/generate-voice-memo.js';
 import { MURPH_CREATE_PHONE_CALL_TOOL, MURPH_GET_PHONE_CALL_STATUS_TOOL, MURPH_STOP_PHONE_CALL_TOOL, } from './dynamic-tools/phone-calls.js';
-import { MURPH_SEND_PHYSICAL_NOTE_TOOL, } from './dynamic-tools/physical-notes.js';
+import { MURPH_RESOLVE_PHYSICAL_NOTE_TOOL, MURPH_SEND_PHYSICAL_NOTE_TOOL, } from './dynamic-tools/physical-notes.js';
 import { MURPH_GENERATE_SONG_TOOL, } from './dynamic-tools/generate-song.js';
 import { MURPH_ASK_GROK_TOOL, } from './dynamic-tools/ask-grok.js';
+import { MURPH_ANALYZE_VIDEO_TOOL, } from './dynamic-tools/analyze-video.js';
 export { MURPH_ASSISTANT_STYLE_TOOL } from './dynamic-tools/assistant-style.js';
 export { MURPH_AUTOMATION_TOOL } from './dynamic-tools/automation.js';
 export { MURPH_DEVICE_TOOL } from './dynamic-tools/device.js';
 export { MURPH_LABS_TOOL } from './dynamic-tools/labs.js';
 export { MURPH_PENDING_VAULT_FILES_TOOL, } from './dynamic-tools/pending-vault-files.js';
 export { MURPH_GROUP_ROOM_MODEL_TOOL, } from './dynamic-tools/group-room-model.js';
+export { MURPH_MEMBER_MEMORY_TOOL, } from './dynamic-tools/member-memory.js';
 export { MURPH_CREATE_CLINICAL_RECORDS_CONNECT_LINK_TOOL, } from './dynamic-tools/clinical-records.js';
-export { MURPH_SEND_PHYSICAL_NOTE_TOOL } from './dynamic-tools/physical-notes.js';
+export { MURPH_RESOLVE_PHYSICAL_NOTE_TOOL, MURPH_SEND_PHYSICAL_NOTE_TOOL, } from './dynamic-tools/physical-notes.js';
 export { MURPH_ASK_GROK_TOOL } from './dynamic-tools/ask-grok.js';
+export { MURPH_ANALYZE_VIDEO_TOOL } from './dynamic-tools/analyze-video.js';
 const MURPH_CHARACTER_SHEET_REFERENCE_IMAGE_REF = 'skill-assets/murph-character-sheet-v1.png';
 export const GENERATE_IMAGE_REFERENCE_IMAGE_REFS_DESCRIPTION = `Optional ordered JPG/PNG/WebP refs (max 16): raw/inbox/**, raw/captures/**, or ${MURPH_CHARACTER_SHEET_REFERENCE_IMAGE_REF}. Explain roles; include the character sheet whenever Murph itself appears.`;
 const GROUP_GENERATED_AVATAR_REFERENCE_IMAGE_REFS_DESCRIPTION = `Optional ordered JPG/PNG/WebP refs for generated avatars: raw/inbox/**, raw/captures/**, or ${MURPH_CHARACTER_SHEET_REFERENCE_IMAGE_REF}. Explain roles; include the character sheet when Murph appears.`;
@@ -154,13 +158,14 @@ export const MURPH_ATTACH_RESPONSE_MEDIA_TOOL = {
 export const MURPH_ATTACH_RESPONSE_CARD_TOOL = {
     namespace: 'murph',
     name: 'attach_response_card',
-    description: 'The daily-nutrition safety gate includes a lifetime vault-cli event list --kind encounter --limit 200 --format json read before numeric proposals, Goal activation, or cards. Inspect every returned item; use event show for every item whose list data reports nonzero diagnosesCount, and inspect all diagnosis entries without selecting by title, visit type, snapshot visibility, or the default prefix. A safety-relevant active diagnosis with documented or suspected certainty suppresses numeric output. Inactive, resolved, history, rule_out, ruled_out, and unrelated diagnoses do not prove a current exclusion; unresolved status or certainty on a safety-relevant diagnosis fails closed. A failed, unreadable, or exactly 200-record encounter read, or a failed required detail read, fails closed with no Goal or measurement mutation and no card; scheduled occurrences ask no question. ' +
-        'The daily-nutrition safety gate includes a lifetime vault-cli event list --kind procedure --limit 200 --format json read before numeric proposals, Goal activation, or cards. Inspect every returned item; use event show for an item whose procedure or status is missing or truncated. A completed gastric bypass, Roux-en-Y, sleeve gastrectomy, gastric sleeve, biliopancreatic diversion, duodenal switch, adjustable gastric band, lap band, or other explicit bariatric surgery suppresses numeric output. Planned, ordered, cancelled, ambiguous, or unrelated procedures do not prove post-bariatric context. A failed, unreadable, or exactly 200-record procedure read, or a failed required detail read, fails closed with no Goal or measurement mutation and no card; scheduled occurrences ask no question. ' +
-        'The daily-nutrition safety gate includes a separate vault-cli measurement entry list --metric pregnancy-test --from <300-days-before-today> --to <today> --limit 200 --format json read before numeric proposals, Goal activation, or cards. Require exact metric pregnancy-test, unit result, value 1, and a normalized positive qualifiers.result; any such positive wins over negative evidence from either pregnancy-evidence owner in the window and suppresses numeric output without diagnosing pregnancy. Missing, negative, stale, indeterminate, malformed, or conflicting rows are unavailable evidence rather than proof of non-pregnancy. A failed, unreadable, or exactly 200-record pregnancy-test read fails closed with no Goal or measurement mutation and no card; scheduled occurrences ask no question. ' +
-        'The same gate includes vault-cli event list --kind test --from <300-days-before-today> --to <today> --limit 200 --format json. A failed, unreadable, or exactly 200-record list fails closed before any numeric effect, with no test detail reads on saturation. Otherwise event show every returned test because list output compacts results and can truncate summaries; any failed or unreadable detail fails closed. Treat a pregnancy/hCG test or matching structured analyte with an explicit positive, detected, or pregnant textValue or unambiguous test-level summary as positive evidence unless resultStatus is pending. Canonical resultStatus unknown classifies the result rather than source lifecycle and may qualify only with that strict identity plus explicit text. Do not infer pregnancy from numeric hCG, reference ranges, abnormal or unknown status/flags alone, titles, notes, or ambiguous or negated text. An explicit positive wins over negative evidence from either canonical owner in the window and suppresses numeric output, Goal mutation or activation, and cards. Missing, negative, pending, numeric-only, stale, unrelated, and ambiguous test evidence is unavailable rather than a universal block. Scheduled occurrences ask no question, perform no mutation, and attach no card. ' +
+    description: 'For daily_nutrition cards and numeric nutrition targets, use the member request plus context already known in the conversation or vault. Do not run a universal medical-history or measurement checklist. A routine card with complete accepted goals needs no repeated screening unless new context raises a concern. Before treating suitability as unresolved, asking, or proposing or changing targets, inspect the current conversation and run vault-cli memory show --format json once for the canonical Identity, Preferences, Instructions, and Context record. Do not re-ask or recite established categories. Treat this known-context suitability check as workflow eligibility, not public health Q&A: never search Health Commons to decide or merely restate it. If suitability is clear, proceed and state only the request-relevant outcome. Otherwise ask one compact question covering every unresolved category: age under 18; pregnancy or breastfeeding; eating-disorder or number-sensitive tracking; underweight, frailty, or malnutrition; glucose-lowering or other nutrition-target-changing medication; kidney disease, advanced liver disease, significant heart disease, or relevant endocrine disease; post-bariatric care; or clinician-managed constraints that materially change calorie or macro targets. Apply safety at the narrowest relevant scope: a health-context fact blocks only the numeric target or advice it materially affects, not benign totals, logging, education, or unrelated low-risk work. An allergy, intolerance, dietary restriction, or clinician-directed diet is not by itself a reason to suppress the five totals or an accepted compatible target bundle. If known current context makes self-directed numeric guidance unsuitable—including underage, pregnancy or breastfeeding, eating-disorder or number-sensitive tracking context, underweight, frailty or malnutrition, glucose-lowering medication, kidney disease, advanced liver disease, significant heart disease, relevant endocrine disease, post-bariatric care, or documented clinician-managed constraints that materially change or conflict with the card targets—use helpful non-numeric text for the affected guidance, make no Goal mutation, and attach no card. Read another clinical record family only when the conversation or canonical memory raises one concrete concern. A missing unrelated fact or failed unrelated read does not block a routine card. A scheduled occurrence with unresolved suitability uses ordinary non-numeric closeout with no proposal, Goal mutation, question, or card. A scheduled occurrence never activates provisional targets. Treat a calorie target below 1,200 kcal/day as unsuitable; do not floor it upward. ' +
         'Workout footers span native and static cards; never promise native-only taps. ' +
         'For a tracked workout, attempt the complete verified card and let input validation decide whether its actual encoded envelope fits; never refuse from an estimated exercise or set count or ask the member to simplify saved workout data. If validation rejects the complete envelope, use the full deterministic text recovery. ' +
-        'Attach one private-direct response card when the current accepted member message or the saved instructions for the exact scheduled automation occurrence request a structured answer that the card alone can represent, during managed meal closeout, for the verified initial card after starting or resuming one canonical live workout, or for an unambiguous update to its established workout card. Occurrence authority alone is not card intent. The card replaces the entire final response: attach it only when the card alone completely satisfies the current request; answer compound requests with complete ordinary text and no card. Before every goal-aware daily_nutrition card, first run vault-cli goal list --status active --limit 200 --format json. If it returns 200 records, fail closed with ordinary text, no Goal or measurement mutation, and no card. Otherwise run vault-cli goal show <goal-id> --format json for every returned active Goal whose list item reports a nonzero data.metricTargetsCount; never select detail reads by title, slug, domain, context-snapshot visibility, or the default list prefix. Resolve metric identity, unit, comparator, effective date, conflicts, and the 1,200-kcal boundary only after inspecting that complete detail set. Keep this active-target authority read separate from any all-status lookup used to reuse or honor Murph\'s managed paused or abandoned proposal; neither read substitutes for the other. For daily_nutrition, immediately beforehand run vault-cli meal totals --from <date> --to <same-date> and copy its exact canonical metric { total, mealCount } values; never calculate or reuse totals. New authoring uses V2 with fiber and five required goal snapshots; nullable V2 goals and nutrition V1 remain legacy replay and rendering compatibility only. Before deriving, saving, or surfacing numeric nutrition goals, before activating a paused nutrition proposal, and before every daily_nutrition attachment, even with five active goals or on a scheduled closeout, follow nutrition-strategy/references/daily-nutrition-card-safety.md. First run vault-cli memory show --format json and inspect the complete canonical Identity, Preferences, Instructions, and Context memory document for explicit, unambiguous safety facts; the context snapshot does not inject it. A failed or unreadable memory read fails closed with ordinary non-numeric text, no Goal or measurement mutation, and no card; leave an existing paused proposal unchanged. A clearly current saved age under 18 or clearly current intuitive-eating or number-sensitive preference uses the same suppression path. Missing, stale, ambiguous, or conflicting age alone is unavailable evidence, not a universal block; scheduled occurrences never ask. Run both vault-cli condition list --status active --limit 200 --format json and vault-cli regimen list --status active --limit 200 --format json. If either read fails or returns exactly 200 records, run no condition or regimen detail reads and fail closed with ordinary non-numeric text, no Goal or measurement mutation, and no card. Otherwise run vault-cli condition show <condition-id> --format json for every returned active condition and vault-cli regimen show <regimen-id> --format json for every returned active regimen before applying the safety gate; never select by title, substance, severity, context-snapshot visibility, or the default list prefix. If any required detail read fails or is unreadable, use the same fail-closed behavior; otherwise reuse the complete current-turn reads. Then run vault-cli event list --kind procedure --limit 200 --format json and apply its complete procedure-item and conditional-detail contract before continuing; a completed bariatric procedure suppresses numeric output, and a failed, unreadable, or saturated read fails closed. As part of that same pre-numeric and pre-activation gate, also run its bounded lossless vault-cli measurement entry list read over the canonical 45-day window. A usable adult BMI below 18.5, including height and weight rows sharing one eventId, suppresses numeric proposal derivation or presentation, every Goal write or activation, and the card. A failed read, or a saturated read that cannot resolve usable BMI evidence, fails closed with ordinary non-numeric text, no Goal or measurement mutation, and no card; leave an existing paused proposal unchanged. The gate also blocks known underweight, frailty, malnutrition risk, glucose-lowering medication, safety-relevant disease or clinician-managed nutrition context, and calorie targets below 1,200 kcal/day without flooring them upward. Scheduled authority never permits questions or activation; only the first eligible managed meal closeout may create and explain one paused proposal after the complete safety gate and an all-status Goal read prove the stable managed slug has never existed. For the exact card localDate, require the containing active Goal window and each target\'s optional startAt/targetAt interval to include that date, with inclusive boundaries; use the selected capture date for a scheduled closeout, which may differ from the occurrence date for a historical catch-up, or the explicitly requested date, never wall-clock today. Ignore out-of-window targets for current authority and conflicts, and never expose, compare, copy, derive from, or mutate a Goal because of them. Require exactly one unambiguous applicable exact point target in each fixed card unit: dietary-calories in kcal, and protein-grams, carbs-grams, fat-grams, and fiber-grams in g, resolved across active canonical Goals. Each target must use selected-value comparator between with identical numeric value and highValue. A one-sided threshold, non-identical range, or other shape remains authoritative but makes the bundle comparator-incompatible: never expose, compare, copy, or derive from its bound or create, replace, or remove a managed target around it; use ordinary text with no card or managed Goal mutation, and ask no question on a scheduled closeout. A target in another unit likewise remains authoritative but makes the bundle incompatible: never compare, convert, copy, or derive from its raw value. An explicit numeric-card request or the one first eligible managed closeout authorizes only the goal-aware workflow\'s paused canonical proposal, not activation or use. When any target is missing, follow nutrition-strategy/references/daily-nutrition-card-goals.md: hold applicable, compatible exact point targets fixed, derive missing macros from residual calories, and require every AMDR plus a 50 kcal energy tolerance before any Goal write; an infeasible bundle means ordinary text and no mutation. Save one paused canonical proposal, explain its values, reasoning, and effective date in ordinary text with no card, and activate it only after member acceptance. On first creation, set Goal window.startAt explicitly: use a member-requested effective date when present, otherwise the selected card localDate for a dated card request, otherwise the engine-supplied current vault-local date; never rely on the write-day default. Preserve that window on every later edit, activation, or card request and never silently rebase it to another card date. Any derived target addition or change atomically pauses the complete managed bundle until acceptance. A scheduled closeout never asks for inputs or activates provisional targets. On the first eligible managed closeout only, if the complete all-status Goal read proves the stable managed slug has never existed and already-known inputs pass the complete safety and derivation contracts, create and explain one paused proposal in ordinary text with no card; once that Goal exists in any status, scheduled turns never create, change, or automatically repeat it. Without a complete accepted bundle or that one first-run proposal path, use ordinary closeout text and no card. When an explicit card request caused the proposal, its next unambiguous acceptance may complete that pending request only after the complete safety recheck passes, then activation and readback, and a fresh same-date totals read; corrections, declines, ambiguous replies, target-setting-only requests, and compound requests remain text-only. Explicit active targets win metric by metric; conflicts, thresholds, ranges, unsafe numbers, or missing responsible calorie inputs mean ordinary text or one consolidated question, never a goal-less card. Freeze each exact point target and Murph\'s context-aware status without a universal threshold. Use compact_table for an explicit table or structured-tracker request, a structured plan or schedule that the table alone can fully represent within its bounds, that verified initial live-workout card, or an unambiguous update to the same active workout; with multiple plausible workouts, do not infer authority and ask one narrow question. Never invent or silently truncate values. For tracked workouts, first update or resolve the canonical workout, re-read it successfully, and copy only that verified snapshot with its exact evt_<ULID> reference and canonical UTC snapshot instant. Use only when numerical output is permitted. Runtime renders durable text and fallbacks, so do not repeat card values in final send_message. This tool does not send and cannot combine with response media.',
+        'Attach one private-direct response card when the current accepted member message or the saved instructions for the exact scheduled automation occurrence request a structured answer that the card alone can represent, during managed meal closeout, for the verified initial card after starting or exact-reading one canonical workout, or for an unambiguous update to its established workout card, including the just-completed final snapshot. Occurrence authority alone is not card intent. The card replaces the entire final response: attach it only when the card alone completely satisfies the current request; answer compound requests with complete ordinary text and no card. For routine daily_nutrition, including an authorized meal estimate, use one workflow and end with one card or concise fallback. Never narrate safety, totals, estimation, or target resolution. ' +
+        'Before every goal-aware daily_nutrition card, first run vault-cli goal list --status active --limit 200 --format json. If it returns 200 records, fail closed with ordinary text, no Goal or measurement mutation, and no card. Otherwise run vault-cli goal show <goal-id> --format json for every returned active Goal whose list item reports a nonzero data.metricTargetsCount; never select detail reads by title, slug, domain, context-snapshot visibility, or the default list prefix. Resolve metric identity, unit, comparator, effective date, conflicts, and the 1,200-kcal boundary only after inspecting that complete detail set. Keep this active-target authority read separate from any all-status lookup used to reuse or honor Murph\'s managed paused or abandoned proposal; neither read substitutes for the other. For daily_nutrition, immediately beforehand run vault-cli meal totals --from <date> --to <same-date> and copy its exact canonical metric { total, mealCount } values; never calculate or reuse totals. Only on a member-explicit interactive daily-card or daily-summary request, if any metric mealCount is below the top-level mealCount, follow food-journal selected-date incomplete-meal recovery before attaching a card. Default attachment intent after a meal mutation does not authorize reading, editing, or asking about another meal; when fresh totals remain incomplete, use the short food-journal fallback with no card. Use accepted current equivalence or matching saved ingredient and portion evidence, not an informal name alone. If recovery still needs identity or amount, ask one compact question and stop without a card; after the answer, edit and read back the exact existing meal and rerun fresh totals. Do not ask merely to enable numbers when numeric presentation is suppressed. A partial card is only for an explicit request to see the currently available partial data after the limitation is clear, not the normal interactive closeout. Scheduled closeout keeps automatic-meal-capture\'s existing question authority. New authoring uses V2 with fiber and five required goal snapshots; nullable V2 goals and nutrition V1 remain legacy replay and rendering compatibility only. ' +
+        'For the exact card localDate, require the containing active Goal window and each target\'s optional startAt/targetAt interval to include that date, with inclusive boundaries; use the selected capture date for a scheduled closeout, which may differ from the occurrence date for a historical catch-up, or the explicitly requested date, never wall-clock today. Ignore out-of-window targets for current authority and conflicts, and never expose, compare, copy, derive from, or mutate a Goal because of them. Require one unambiguous applicable exact-point target per card unit: canonical dietary-calories in kcal plus protein-grams, carbs-grams, fat-grams, and fiber-grams in g, across active Goals. Author only dietary-calories. When exactly one compatible canonical calorie owner exists, use it and ignore every globally ambiguous calories target. Only without a canonical owner may targetId daily-calories with metric calories and unit kcal substitute, and only when its same containing Goal owns the complete compatible historical set: daily-protein / protein-grams / g, daily-carbohydrates / carbs-grams / g, daily-fat / fat-grams / g, and daily-fiber / fiber-grams / g. Any other calories target is not dietary authority even when co-located with all four nutrition metrics. Never combine the historical set with another Goal or managed proposal, and never infer ownership from title, slug, domain, or description. Multiple qualifying historical sets or ambiguity inside one means no card. Never mutate a Goal to repair its key. Apply the 1,200-kcal boundary and residual math to resolved calories. ' +
+        'Each target must be an exact card point with comparator between and identical numeric value and highValue. Accept selected-value evaluation normally. The complete same-Goal historical daily-* nutrition set above has one read-only display-compatibility path when every target instead uses rolling-window evaluation with statistic mean plus selectionPolicyOverride kind daily-aggregate with statistic mean: copy each unchanged point bound into the card for the selected localDate, preserve the Goal, and never extend this exception to another identity or workflow. A mixed evaluation bundle or any other rolling-window statistic or daily-aggregate statistic is incompatible. A one-sided threshold, non-identical range, or other shape remains authoritative but makes the bundle comparator-incompatible: never expose, compare, copy, or derive from its bound or create, replace, or remove a managed target around it; use ordinary text with no card or managed Goal mutation, and ask no question on a scheduled closeout. A target in another unit likewise remains authoritative but makes the bundle incompatible: never compare, convert, copy, or derive from its raw value. If a daily_nutrition call is rejected for malformed arguments, use the returned validation paths to correct only invalid fields and retry this tool once with the same verified totals and targets; if that retry fails, use the truthful text fallback without narrating tool or schema mechanics. An explicit numeric-card request or the one first eligible managed closeout authorizes only the goal-aware workflow\'s paused canonical proposal, not activation or use. When any target is missing, follow nutrition-strategy/references/daily-nutrition-card-goals.md: hold applicable, compatible exact point targets fixed, derive missing macros from residual calories, and require every AMDR plus a 50 kcal energy tolerance before any Goal write; an infeasible bundle means ordinary text and no mutation. Save one paused canonical proposal, explain its values, reasoning, and effective date in ordinary text with no card, and activate it only after member acceptance. On first creation, set Goal window.startAt explicitly: use a member-requested effective date when present, otherwise the selected card localDate for a dated card request, otherwise the engine-supplied current vault-local date; never rely on the write-day default. Preserve that window on every later edit, activation, or card request and never silently rebase it to another card date. Any derived target addition or change atomically pauses the complete managed bundle until acceptance. A scheduled closeout never asks for inputs or activates provisional targets. ' +
+        'On the first eligible managed closeout only, if the complete all-status Goal read proves the stable managed slug has never existed and already-known inputs pass the known-context suitability and derivation rules, create and explain one paused proposal in ordinary text with no card; once that Goal exists in any status, scheduled turns never create, change, or automatically repeat it. Without a complete accepted bundle or that one first-run proposal path, use ordinary closeout text and no card. When an explicit card request caused the proposal, its next unambiguous acceptance may complete that pending request only after reapplying the known-context suitability rule, then activation and readback, and a fresh same-date totals read; corrections, declines, ambiguous replies, target-setting-only requests, and compound requests remain text-only. Explicit active targets win metric by metric; conflicts, thresholds, ranges, unsafe numbers, or missing responsible calorie inputs mean ordinary text or one consolidated question, never a goal-less card. Freeze each exact point target and Murph\'s context-aware status without a universal threshold. Use compact_table for an explicit table or structured-tracker request, a structured plan or schedule that the table alone can fully represent within its bounds, that verified initial live-workout card, or an unambiguous update to the same exact open or just-finished workout; with multiple plausible workouts, do not infer authority and ask one narrow question. Never invent or silently truncate values. For tracked workouts, first update or resolve the canonical workout and re-read it successfully. A structured workout card has exactly kind compact_table, version 1, title, subtitle null, footer, tracking with kind workout plus the exact evt_<ULID> entityId, and workout; never add rowHeader, columns, or rows. The runtime records tracking snapshotAt. Use only when numerical output is permitted. Runtime renders durable text and fallbacks, so do not repeat card values in final send_message. This tool does not send and cannot combine with response media.',
     inputSchema: {
         type: 'object',
         additionalProperties: false,
@@ -257,11 +262,10 @@ export const MURPH_GENERATE_IMAGE_TOOL = {
         required: ['prompt'],
     },
 };
-export const MURPH_PRODUCT_FEEDBACK_DEFERRED_DISCOVERY_RULE = 'Before classifying a Murph path as missing or filing missing-capability feedback, use the provided deferred-tool discovery surface; absence from eager tools is not proof.';
 export const MURPH_SUBMIT_PRODUCT_FEEDBACK_TOOL = {
     namespace: 'murph',
     name: 'submit_product_feedback',
-    description: `Submit one structured Murph product-feedback candidate for the current accepted request. Provide the feedback kind, one concise product-only summary, and optional related changelog item ids. ${MURPH_PRODUCT_FEEDBACK_DEFERRED_DISCOVERY_RULE} When feedback describes a failure or workflow issue, put the general feedback first and append a privacy-safe reproduction recipe in the same summary field. Ordinary feedback is best-effort after the reply. Explicit verified-private human support uses kind "frustration", empty changelog ids, and a concise de-identified explanation beginning exactly "Support escalation:"; that mode waits for the durable callback. The result reports accepted, already accepted, or unavailable; do not retry after any result.`,
+    description: `Submit one structured Murph product-feedback candidate for the current accepted request. Provide the feedback kind, one concise product-only summary, and optional related changelog item ids. When feedback describes a failure or workflow issue, put the general feedback first and append a privacy-safe reproduction recipe in the same summary field. Ordinary feedback is best-effort after the reply. Explicit verified-private human support uses kind "frustration", empty changelog ids, and a concise de-identified explanation beginning exactly "Support escalation:"; that mode waits for the durable callback. The result reports an input-schema rejection, accepted, already accepted, unavailable, or callback failure. An input-schema rejection includes value-free validation issues. Accepted, already accepted, unavailable, and callback-failure results are terminal.`,
     inputSchema: {
         type: 'object',
         additionalProperties: false,
@@ -709,355 +713,371 @@ export const ASSISTANT_ACCEPTED_MESSAGE_REF_PATTERN = '^ain_[0-9a-f]{32}$';
 const ASSISTANT_ACCEPTED_MESSAGE_REF_SCHEMA = {
     type: 'string',
     pattern: ASSISTANT_ACCEPTED_MESSAGE_REF_PATTERN,
-    description: 'Opaque Message ref shown beside an accepted inbound message in the current prompt. Required for current-sender actions, record_current_sender_daily_metric, and revoke_own_email_share; optional only for create_signup_referral_link and read_usage_referral. Use the exact ref beside the relevant request or clarification answer; this is not a provider message id.',
+    description: 'Opaque Message ref shown beside an accepted inbound message in the current prompt. Required for current-sender actions, record_current_sender_daily_metric, and revoke_own_email_share. For offer_access, include it only when the group explicitly asks to repost the native access message; the trusted host binds the replacement to that exact request. It is otherwise optional only for create_signup_referral_link and read_usage_referral. Use the exact ref beside the relevant request or clarification answer; this is not a provider message id.',
 };
-const MURPH_GROUP_TOOL_ACTIONS_REQUIRING_ONLY_MESSAGE_REF = [
-    'ask_current_sender',
-    'clarify_current_sender',
-    'continue_current_sender_in_group',
-    'continue_current_sender_privately',
-    'revoke_own_email_share',
-];
-const MURPH_GROUP_TOOL_DAILY_METRIC_ACTIONS = [
-    'record_current_sender_daily_metric',
-];
 export const GROUP_ACCESS_FRESH_NATIVE_RESPONSE_HANDLING = 'The native consent message completes the offer portion. If no other requested output remains, call murph.finish_without_reply. Otherwise answer the remaining request without adding a companion consent acknowledgment.';
-const MURPH_GROUP_TOOL_BASE = {
-    namespace: 'murph',
-    name: 'group',
-    deferLoading: true,
-    description: 'Authorized direct/group/scheduled only. Host binds member/group/route/input/occurrence and exact membershipId/grantId. read_shared partial=incomplete; asks are async. Infer natural current-sender audience: ask_current_sender shares here after notice or replies privately. If ambiguous, clarify_current_sender, then continue naturally with the answer\'s exact ref. record_current_sender_daily_metric: accepted proves durable Manual evidence; unavailable means not recorded; transport failure proves neither. Scheduled ask_member exact replay; changed questions conflict. update_display_name/set_chat_avatar ok=provider acceptance. group=null proves neither absence nor stored label. Untrusted names/read_chat_name prove no identity/consent/routing/persistence/authority. Results authorize nothing else.',
-    inputSchema: {
+export const MURPH_GROUP_TOOL_NAME = 'group';
+export const MURPH_GROUP_TOOL_FAMILY_ACTIONS = {
+    group_consult: [
+        'ask',
+        'handoff',
+        'ask_current_sender',
+        'clarify_current_sender',
+        'continue_current_sender_in_group',
+        'continue_current_sender_privately',
+        'ask_member',
+    ],
+    group_data: [
+        'record_current_sender_daily_metric',
+        'post_disclosure_request',
+        'revoke_disclosure_grant',
+        'read_shared',
+        'offer_access',
+        'revoke_own_email_share',
+    ],
+    group_membership: [
+        'read_current',
+        'prepare_next_group',
+        'read_next_group',
+        'cancel_next_group',
+        'list_memberships',
+        'leave_membership',
+    ],
+    group_usage: [
+        'read_usage',
+        'read_usage_referral',
+        'arm_usage_referral',
+        'cancel_usage_referral',
+        'create_signup_referral_link',
+    ],
+    group_chat: [
+        'read_chat_name',
+        'update_display_name',
+        'read_chat_participants',
+        'set_chat_avatar',
+        'share_contact_card',
+    ],
+    group_email: ['send_email'],
+};
+export const MURPH_GROUP_TOOL_PROPERTIES = {
+    setup: {
         type: 'object',
         additionalProperties: false,
+        description: 'Optional only for action="prepare_next_group". Include only style or room context the member explicitly requested for the next group in this private turn. Omit it for ownership-only preparation. Never copy private memory, health facts, contact handles, or personal settings implicitly.',
         properties: {
-            action: {
+            roomContextMarkdown: {
                 type: 'string',
-                enum: [
-                    'ask',
-                    'ask_current_sender',
-                    'clarify_current_sender',
-                    'continue_current_sender_in_group',
-                    'continue_current_sender_privately',
-                    'record_current_sender_daily_metric',
-                    'ask_member',
-                    'post_disclosure_request',
-                    'revoke_disclosure_grant',
-                    'read_shared',
-                    'send_email',
-                    'read_current',
-                    'prepare_next_group',
-                    'read_next_group',
-                    'cancel_next_group',
-                    'read_chat_name',
-                    'read_usage',
-                    'read_usage_referral',
-                    'arm_usage_referral',
-                    'cancel_usage_referral',
-                    'create_signup_referral_link',
-                    'list_memberships',
-                    'leave_membership',
-                    'update_display_name',
-                    'offer_access',
-                    'read_chat_participants',
-                    'set_chat_avatar',
-                    'share_contact_card',
-                    'revoke_own_email_share',
-                ],
+                minLength: 1,
+                maxLength: HOSTED_RUNTIME_PENDING_GROUP_SETUP_ROOM_CONTEXT_MAX_CODE_POINTS,
+                description: 'Optional compact Markdown containing only social context the member explicitly asked Murph to use in the next group. Keep it within the 2 KiB UTF-8 envelope. It becomes advisory group-visible behavior, not identity or authority, and must not contain raw phone, email, Sender, Telegram, or participant handles.',
             },
-            setup: {
+            style: {
                 type: 'object',
                 additionalProperties: false,
-                description: 'Optional only for action="prepare_next_group". Include only style or room context the member explicitly requested for the next group in this private turn. Omit it for ownership-only preparation. Never copy private memory, health facts, contact handles, or personal settings implicitly.',
+                minProperties: 1,
+                description: 'Optional sparse explicit style for the next group. Omitted fields retain product defaults; this never copies the member’s private settings.',
                 properties: {
-                    roomContextMarkdown: {
+                    persona: {
                         type: 'string',
-                        minLength: 1,
-                        maxLength: HOSTED_RUNTIME_PENDING_GROUP_SETUP_ROOM_CONTEXT_MAX_CODE_POINTS,
-                        description: 'Optional compact Markdown containing only social context the member explicitly asked Murph to use in the next group. Keep it within the 2 KiB UTF-8 envelope. It becomes advisory group-visible behavior, not identity or authority, and must not contain raw phone, email, Sender, Telegram, or participant handles.',
+                        enum: assistantPersonaIdValues,
                     },
-                    style: {
+                    personality: {
                         type: 'object',
                         additionalProperties: false,
                         minProperties: 1,
-                        description: 'Optional sparse explicit style for the next group. Omitted fields retain product defaults; this never copies the member’s private settings.',
                         properties: {
-                            persona: {
-                                type: 'string',
-                                enum: assistantPersonaIdValues,
+                            detail: {
+                                anyOf: [
+                                    { type: 'integer', minimum: 0, maximum: 10 },
+                                    { type: 'null' },
+                                ],
                             },
-                            personality: {
-                                type: 'object',
-                                additionalProperties: false,
-                                minProperties: 1,
-                                properties: {
-                                    detail: {
-                                        anyOf: [
-                                            { type: 'integer', minimum: 0, maximum: 10 },
-                                            { type: 'null' },
-                                        ],
-                                    },
-                                    humor: {
-                                        anyOf: [
-                                            { type: 'integer', minimum: 0, maximum: 10 },
-                                            { type: 'null' },
-                                        ],
-                                    },
-                                    push: {
-                                        anyOf: [
-                                            { type: 'integer', minimum: 0, maximum: 10 },
-                                            { type: 'null' },
-                                        ],
-                                    },
-                                    unhinged: {
-                                        anyOf: [
-                                            { type: 'integer', minimum: 0, maximum: 10 },
-                                            { type: 'null' },
-                                        ],
-                                    },
-                                },
+                            humor: {
+                                anyOf: [
+                                    { type: 'integer', minimum: 0, maximum: 10 },
+                                    { type: 'null' },
+                                ],
                             },
-                            tone: {
-                                type: 'string',
-                                enum: assistantTonePreferenceValues,
+                            push: {
+                                anyOf: [
+                                    { type: 'integer', minimum: 0, maximum: 10 },
+                                    { type: 'null' },
+                                ],
                             },
-                            voice: {
-                                type: 'string',
-                                enum: assistantVoiceOptionIdValues,
+                            unhinged: {
+                                anyOf: [
+                                    { type: 'integer', minimum: 0, maximum: 10 },
+                                    { type: 'null' },
+                                ],
                             },
                         },
                     },
-                },
-            },
-            question: {
-                type: 'string',
-                minLength: 1,
-                maxLength: HOSTED_EXECUTION_ASSISTANT_ASK_QUESTION_MAX_CODE_POINTS,
-                description: 'Required only for action="ask" or action="ask_member". Ask one self-contained natural-language question. ask may use a joined group\'s read-only context; ask_member produces a proposed answer whose outgoing information is checked against the selected disclosure grant before sharing.',
-            },
-            permissionText: {
-                type: 'string',
-                minLength: 1,
-                maxLength: HOSTED_RUNTIME_GROUP_DISCLOSURE_PERMISSION_TEXT_MAX_CODE_POINTS,
-                description: 'Required only for action="post_disclosure_request". The exact concise natural-language description of the type of information a member may allow their private Murph to read and disclose to this group. The server shows this text in the consent request and reviews only each proposed outgoing answer against it before sharing.',
-            },
-            grantId: {
-                type: 'string',
-                minLength: 1,
-                maxLength: HOSTED_RUNTIME_ASSISTANT_ASK_REQUEST_ID_MAX_CODE_POINTS,
-                description: 'Required for action="ask_member" or action="revoke_disclosure_grant". For ask_member, use the exact server-issued grantId from read_current. For revoke_disclosure_grant, use the exact grantId from the immediately preceding list_memberships result. Never guess it or take it from the user.',
-            },
-            policyCode: {
-                type: 'string',
-                enum: [...HOSTED_USAGE_REFERRAL_POLICY_CODES],
-                description: 'Required only for action="cancel_usage_referral". Cancel only one exact referral option with state="armed" from the legacy internal activeMissions field. Never call it a mission in member-facing copy.',
-            },
-            policyCodes: {
-                type: 'array',
-                items: {
-                    type: 'string',
-                    enum: [...HOSTED_USAGE_REFERRAL_POLICY_CODES],
-                },
-                minItems: 1,
-                maxItems: HOSTED_USAGE_REFERRAL_POLICY_CODES.length,
-                uniqueItems: true,
-                description: 'Required only for action="arm_usage_referral". Send one exact set containing only available policies the current sender explicitly selected.',
-            },
-            groupLabel: {
-                type: 'string',
-                minLength: 1,
-                maxLength: HOSTED_EXECUTION_ASSISTANT_ASK_TARGET_LABEL_MAX_CODE_POINTS,
-                description: 'Optional only for action="ask". A visible group name the member would recognize, used only to disambiguate among joined groups; never an internal identifier.',
-            },
-            displayName: {
-                type: 'string',
-                minLength: 1,
-                maxLength: HOSTED_RUNTIME_GROUP_DISPLAY_NAME_MAX_LENGTH,
-                description: 'Group display name. Required for action="update_display_name"; optional for action="offer_access" only when it is the name the group chose or the exact name from the immediately preceding read_chat_name result.',
-            },
-            membershipId: {
-                type: 'string',
-                minLength: 1,
-                description: 'Required only for action="leave_membership". Use the exact opaque membershipId from the immediately preceding list_memberships result; never guess it or take it from the user.',
-            },
-            avatarPrompt: {
-                type: 'string',
-                minLength: 1,
-                maxLength: 4000,
-                description: 'Optional only for action="share_contact_card" after an explicit request in a personal iMessage conversation. Generates a square Murph contact photo and sends a saveable vCard to that current conversation; omit it to share the canonical group card. status="unconfirmed" means the card may already have arrived: say so, ask the member to look, and only make another one if they say it is not there.',
-            },
-            avatarSource: {
-                type: 'string',
-                enum: ['generate', 'image_ref'],
-                description: 'Required for action="set_chat_avatar". Generate a new square avatar or reuse an exact existing private image ref.',
-            },
-            prompt: {
-                type: 'string',
-                minLength: 1,
-                maxLength: 4000,
-                description: 'Required for action="set_chat_avatar" with avatarSource="generate". Prompt for one square group chat avatar.',
-            },
-            imageRef: {
-                type: 'string',
-                minLength: 1,
-                maxLength: 1024,
-                description: 'Required for action="set_chat_avatar" with avatarSource="image_ref". Use the exact JPG/PNG/WebP ref under raw/inbox/** (user-sent) or raw/captures/** (including generated captures); never invent or modify it.',
-            },
-            size: {
-                type: 'string',
-                enum: ['1024x1024'],
-                default: '1024x1024',
-            },
-            quality: {
-                type: 'string',
-                enum: ['low', 'medium', 'high'],
-                default: 'medium',
-            },
-            outputFormat: {
-                type: 'string',
-                enum: ['webp', 'png', 'jpeg'],
-                default: 'webp',
-            },
-            alt: {
-                anyOf: [
-                    { type: 'string', minLength: 1, maxLength: 500 },
-                    { type: 'null' },
-                ],
-                default: null,
-            },
-            referenceImageRefs: {
-                type: 'array',
-                maxItems: 16,
-                default: [],
-                description: GROUP_GENERATED_AVATAR_REFERENCE_IMAGE_REFS_DESCRIPTION,
-                items: {
-                    type: 'string',
-                    minLength: 1,
-                    maxLength: 1024,
-                },
-            },
-            projectionScopes: {
-                type: 'array',
-                maxItems: HOSTED_VAULT_SHARE_SELECTABLE_PROJECTION_SCOPES.length,
-                items: GROUP_VAULT_SHARE_PROJECTION_SCOPE_SCHEMA,
-                description: 'For ordinary read_shared, one to three exact consent-aware group projections, including additive exact-grant activation time when available. For read_shared with audience="group_email", the exact bounded projections allowed into this email composition; the trusted host intersects them with live recipient grants. For offer_access, omit projectionScopes to request every selectable permission by default, or supply the exact narrower set requested. Existing membership and other grants remain unchanged. The trusted host owns the exact consent copy and actual scope snapshot and uses a handled native consent path or a first-party link. Fresh native results include exact responseHandling; follow it.',
-            },
-            audience: {
-                type: 'string',
-                enum: ['group_email'],
-                description: 'Optional only for read_shared in a scheduled group automation. group_email prepares the generic email effect, filters members and facts to currently eligible email recipients, and returns recipientCount, missingVerifiedEmailCount, and referenceAt without exposing addresses or authorization metadata.',
-            },
-            subject: {
-                type: 'string',
-                minLength: 1,
-                maxLength: HOSTED_RUNTIME_GROUP_EMAIL_SUBJECT_MAX_LENGTH,
-                description: 'Required only for send_email.',
-            },
-            html: {
-                type: 'string',
-                minLength: 1,
-                maxLength: HOSTED_RUNTIME_GROUP_EMAIL_HTML_MAX_LENGTH,
-                description: 'Required only for send_email.',
-            },
-            text: {
-                anyOf: [
-                    {
+                    tone: {
                         type: 'string',
-                        maxLength: HOSTED_RUNTIME_GROUP_EMAIL_TEXT_MAX_LENGTH,
+                        enum: assistantTonePreferenceValues,
                     },
-                    { type: 'null' },
-                ],
-                default: null,
-                description: 'Optional plain-text equivalent for send_email.',
-            },
-            standaloneLink: {
-                type: 'boolean',
-                description: 'For action="offer_access" only. Set true only when the room explicitly asks for a standalone link; otherwise omit it and let the trusted host choose the best presentation for this channel.',
-            },
-            message_ref: ASSISTANT_ACCEPTED_MESSAGE_REF_SCHEMA,
-            date: {
-                type: 'string',
-                pattern: '^\\d{4}-\\d{2}-\\d{2}$',
-                description: 'Required only for record_current_sender_daily_metric. Exact member-reported civil date in YYYY-MM-DD form. Do not infer a date when the sender did not provide enough context.',
-            },
-            metric: {
-                type: 'string',
-                enum: HOSTED_EXECUTION_MEMBER_REPORTED_DAILY_METRIC_KEYS,
-                description: 'Required only for record_current_sender_daily_metric. Canonical daily metric slug already represented by the relevant group projection, such as steps.',
-            },
-            value: {
-                type: 'number',
-                description: 'Required only for record_current_sender_daily_metric. Exact numeric value explicitly supplied by the current sender or clearly legible in their supplied evidence.',
-            },
-            unit: {
-                type: 'string',
-                minLength: 1,
-                maxLength: 80,
-                pattern: '^[A-Za-z0-9._/%-]+$',
-                description: 'Required only for record_current_sender_daily_metric. Canonical compact unit for the metric, such as count for steps.',
+                    voice: {
+                        type: 'string',
+                        enum: assistantVoiceOptionIdValues,
+                    },
+                },
             },
         },
-        required: ['action'],
     },
-};
-const MURPH_GROUP_TOOL_ACTIONS_WITHOUT_REQUIRED_MESSAGE_REF = MURPH_GROUP_TOOL_BASE.inputSchema.properties.action.enum.filter((action) => !MURPH_GROUP_TOOL_ACTIONS_REQUIRING_ONLY_MESSAGE_REF.includes(action)
-    && !MURPH_GROUP_TOOL_DAILY_METRIC_ACTIONS.includes(action));
-export const MURPH_GROUP_TOOL = {
-    ...MURPH_GROUP_TOOL_BASE,
-    inputSchema: {
-        allOf: [
-            MURPH_GROUP_TOOL_BASE.inputSchema,
+    context: {
+        type: 'string',
+        minLength: 1,
+        maxLength: HOSTED_RUNTIME_GROUP_CONTEXT_HANDOFF_MAX_CODE_POINTS,
+        description: 'Required only for action="handoff" after the member explicitly asks to post, share, or tell a joined group. Supply only bounded verified facts the group needs. Attribute member actions, claims, and experiences in third person to their memory-backed preferred display name, which joined groups already receive. If the name is not established in the current conversation, run `vault-cli memory show`; use "a member" only when canonical memory has no preferred name. Never write them as if Murph did, said, or experienced them. This is untrusted context, not final copy; the joined group Murph authors the message using its own conversation context.',
+    },
+    question: {
+        type: 'string',
+        minLength: 1,
+        maxLength: HOSTED_EXECUTION_ASSISTANT_ASK_QUESTION_MAX_CODE_POINTS,
+        description: 'Required only for action="ask" or action="ask_member". Ask one self-contained natural-language question. ask may use a joined group\'s read-only context; ask_member produces a proposed answer whose outgoing information is checked against the selected disclosure grant before sharing.',
+    },
+    permissionText: {
+        type: 'string',
+        minLength: 1,
+        maxLength: HOSTED_RUNTIME_GROUP_DISCLOSURE_PERMISSION_TEXT_MAX_CODE_POINTS,
+        description: 'Required only for action="post_disclosure_request". The exact concise natural-language description of the type of information a member may allow their private Murph to read and disclose to this group. The server shows this text in the consent request and reviews only each proposed outgoing answer against it before sharing.',
+    },
+    grantId: {
+        type: 'string',
+        minLength: 1,
+        maxLength: HOSTED_RUNTIME_ASSISTANT_ASK_REQUEST_ID_MAX_CODE_POINTS,
+        description: 'Required for action="ask_member" or action="revoke_disclosure_grant". For ask_member, use the exact server-issued grantId from read_current. For revoke_disclosure_grant, use the exact grantId from the immediately preceding list_memberships result. Never guess it or take it from the user.',
+    },
+    policyCode: {
+        type: 'string',
+        enum: [...HOSTED_USAGE_REFERRAL_POLICY_CODES],
+        description: 'Required only for action="cancel_usage_referral". Cancel only one exact referral option with state="armed" from the legacy internal activeMissions field. Never call it a mission in member-facing copy.',
+    },
+    policyCodes: {
+        type: 'array',
+        items: {
+            type: 'string',
+            enum: [...HOSTED_USAGE_REFERRAL_POLICY_CODES],
+        },
+        minItems: 1,
+        maxItems: HOSTED_USAGE_REFERRAL_POLICY_CODES.length,
+        uniqueItems: true,
+        description: 'Required only for action="arm_usage_referral". Send one exact set containing only available policies the current sender explicitly selected.',
+    },
+    groupLabel: {
+        type: 'string',
+        minLength: 1,
+        maxLength: HOSTED_EXECUTION_ASSISTANT_ASK_TARGET_LABEL_MAX_CODE_POINTS,
+        description: 'Optional only for action="ask" or action="handoff". A visible group name the member would recognize, used only to disambiguate among joined groups; never an internal identifier.',
+    },
+    displayName: {
+        type: 'string',
+        minLength: 1,
+        maxLength: HOSTED_RUNTIME_GROUP_DISPLAY_NAME_MAX_LENGTH,
+        description: 'Group display name. Required for action="update_display_name"; optional for action="offer_access" only when it is the name the group chose or the exact name from the immediately preceding read_chat_name result.',
+    },
+    membershipId: {
+        type: 'string',
+        minLength: 1,
+        description: 'Required only for action="leave_membership". Use the exact opaque membershipId from the immediately preceding list_memberships result; never guess it or take it from the user.',
+    },
+    avatarPrompt: {
+        type: 'string',
+        minLength: 1,
+        maxLength: 4000,
+        description: 'Optional only for action="share_contact_card" after an explicit request in a personal iMessage conversation. Generates a square Murph contact photo and sends a saveable vCard to that current conversation; omit it to share the canonical group card. status="unconfirmed" means the card may already have arrived: say so, ask the member to look, and only make another one if they say it is not there.',
+    },
+    avatarSource: {
+        type: 'string',
+        enum: ['generate', 'image_ref'],
+        description: 'Required for action="set_chat_avatar". Generate a new square avatar or reuse an exact existing private image ref.',
+    },
+    prompt: {
+        type: 'string',
+        minLength: 1,
+        maxLength: 4000,
+        description: 'Required for action="set_chat_avatar" with avatarSource="generate". Prompt for one square group chat avatar.',
+    },
+    imageRef: {
+        type: 'string',
+        minLength: 1,
+        maxLength: 1024,
+        description: 'Required for action="set_chat_avatar" with avatarSource="image_ref". Use the exact JPG/PNG/WebP ref under raw/inbox/** (user-sent) or raw/captures/** (including generated captures); never invent or modify it.',
+    },
+    size: {
+        type: 'string',
+        enum: ['1024x1024'],
+        default: '1024x1024',
+    },
+    quality: {
+        type: 'string',
+        enum: ['low', 'medium', 'high'],
+        default: 'medium',
+    },
+    outputFormat: {
+        type: 'string',
+        enum: ['webp', 'png', 'jpeg'],
+        default: 'webp',
+    },
+    alt: {
+        anyOf: [
+            { type: 'string', minLength: 1, maxLength: 500 },
+            { type: 'null' },
+        ],
+        default: null,
+    },
+    referenceImageRefs: {
+        type: 'array',
+        maxItems: 16,
+        default: [],
+        description: GROUP_GENERATED_AVATAR_REFERENCE_IMAGE_REFS_DESCRIPTION,
+        items: {
+            type: 'string',
+            minLength: 1,
+            maxLength: 1024,
+        },
+    },
+    projectionScopes: {
+        type: 'array',
+        maxItems: HOSTED_VAULT_SHARE_SELECTABLE_PROJECTION_SCOPES.length,
+        items: GROUP_VAULT_SHARE_PROJECTION_SCOPE_SCHEMA,
+        description: 'For ordinary read_shared, one to three exact consent-aware group projections, including additive exact-grant activation time when available. For read_shared with audience="group_email", the exact bounded projections allowed into this email composition; the trusted host intersects them with live recipient grants. For offer_access, omit projectionScopes to request every selectable permission by default, or supply the exact narrower set requested. Existing membership and other grants remain unchanged. The trusted host owns the exact consent copy and actual scope snapshot and uses a handled native consent path or a first-party link. Fresh native results include exact responseHandling; follow it.',
+    },
+    audience: {
+        type: 'string',
+        enum: ['group_email'],
+        description: 'Optional only for read_shared in a scheduled group automation. group_email prepares the generic email effect, filters members and facts to currently eligible email recipients, and returns recipientCount, missingVerifiedEmailCount, and referenceAt without exposing addresses or authorization metadata.',
+    },
+    subject: {
+        type: 'string',
+        minLength: 1,
+        maxLength: HOSTED_RUNTIME_GROUP_EMAIL_SUBJECT_MAX_LENGTH,
+        description: 'Required only for send_email.',
+    },
+    html: {
+        type: 'string',
+        minLength: 1,
+        maxLength: HOSTED_RUNTIME_GROUP_EMAIL_HTML_MAX_LENGTH,
+        description: 'Required only for send_email.',
+    },
+    text: {
+        anyOf: [
             {
-                oneOf: [
-                    {
-                        type: 'object',
-                        maxProperties: 6,
-                        properties: {
-                            action: {
-                                type: 'string',
-                                enum: MURPH_GROUP_TOOL_DAILY_METRIC_ACTIONS,
-                            },
-                            date: MURPH_GROUP_TOOL_BASE.inputSchema.properties.date,
-                            message_ref: ASSISTANT_ACCEPTED_MESSAGE_REF_SCHEMA,
-                            metric: MURPH_GROUP_TOOL_BASE.inputSchema.properties.metric,
-                            unit: MURPH_GROUP_TOOL_BASE.inputSchema.properties.unit,
-                            value: MURPH_GROUP_TOOL_BASE.inputSchema.properties.value,
-                        },
-                        required: [
-                            'action',
-                            'date',
-                            'message_ref',
-                            'metric',
-                            'unit',
-                            'value',
-                        ],
-                    },
-                    {
-                        type: 'object',
-                        maxProperties: 2,
-                        properties: {
-                            action: {
-                                type: 'string',
-                                enum: MURPH_GROUP_TOOL_ACTIONS_REQUIRING_ONLY_MESSAGE_REF,
-                            },
-                            message_ref: ASSISTANT_ACCEPTED_MESSAGE_REF_SCHEMA,
-                        },
-                        required: ['action', 'message_ref'],
-                    },
-                    {
-                        type: 'object',
-                        properties: {
-                            action: {
-                                type: 'string',
-                                enum: MURPH_GROUP_TOOL_ACTIONS_WITHOUT_REQUIRED_MESSAGE_REF,
-                            },
-                        },
-                        required: ['action'],
-                    },
-                ],
+                type: 'string',
+                maxLength: HOSTED_RUNTIME_GROUP_EMAIL_TEXT_MAX_LENGTH,
             },
+            { type: 'null' },
         ],
+        default: null,
+        description: 'Optional plain-text equivalent for send_email.',
+    },
+    standaloneLink: {
+        type: 'boolean',
+        description: 'For action="offer_access" only. Set true only when the room explicitly asks for a standalone link; otherwise omit it and let the trusted host choose the best presentation for this channel.',
+    },
+    message_ref: ASSISTANT_ACCEPTED_MESSAGE_REF_SCHEMA,
+    date: {
+        type: 'string',
+        pattern: '^\\d{4}-\\d{2}-\\d{2}$',
+        description: 'Required only for record_current_sender_daily_metric. Exact member-reported civil date in YYYY-MM-DD form. Do not infer a date when the sender did not provide enough context.',
     },
+    metric: {
+        type: 'string',
+        enum: HOSTED_EXECUTION_MEMBER_REPORTED_DAILY_METRIC_KEYS,
+        description: 'Required only for record_current_sender_daily_metric. Canonical daily metric slug already represented by the relevant group projection, such as steps.',
+    },
+    value: {
+        type: 'number',
+        description: 'Required only for record_current_sender_daily_metric. Exact numeric value explicitly supplied by the current sender or clearly legible in their supplied evidence.',
+    },
+    unit: {
+        type: 'string',
+        minLength: 1,
+        maxLength: 80,
+        pattern: '^[A-Za-z0-9._/%-]+$',
+        description: 'Required only for record_current_sender_daily_metric. Canonical compact unit for the metric, such as count for steps.',
+    },
+};
+const MURPH_GROUP_TOOL_FAMILY_PROPERTIES = {
+    group_consult: [
+        'context', 'grantId', 'groupLabel', 'message_ref', 'question',
+    ],
+    group_data: [
+        'audience', 'date', 'displayName', 'grantId', 'message_ref', 'metric',
+        'permissionText', 'projectionScopes', 'standaloneLink', 'unit', 'value',
+    ],
+    group_membership: ['membershipId', 'setup'],
+    group_usage: ['message_ref', 'policyCode', 'policyCodes'],
+    group_chat: [
+        'alt', 'avatarPrompt', 'avatarSource', 'displayName', 'imageRef',
+        'outputFormat', 'prompt', 'quality', 'referenceImageRefs', 'size',
+    ],
+    group_email: ['html', 'subject', 'text'],
+};
+function buildMurphGroupFamilyInputSchema(name) {
+    const actions = MURPH_GROUP_TOOL_FAMILY_ACTIONS[name];
+    return {
+        type: 'object',
+        additionalProperties: false,
+        properties: {
+            action: { type: 'string', enum: actions },
+            ...Object.fromEntries(MURPH_GROUP_TOOL_FAMILY_PROPERTIES[name].map((propertyName) => [
+                propertyName,
+                MURPH_GROUP_TOOL_PROPERTIES[propertyName],
+            ])),
+        },
+        required: ['action'],
+    };
+}
+function buildMurphGroupFamilyTool(input) {
+    return {
+        namespace: 'murph',
+        name: input.name,
+        deferLoading: true,
+        description: input.description,
+        inputSchema: buildMurphGroupFamilyInputSchema(input.name),
+    };
+}
+export const MURPH_GROUP_CONSULT_TOOL = buildMurphGroupFamilyTool({
+    name: 'group_consult',
+    description: 'Ask or hand off; the host binds group/member/sender authority. Use message_current_sender for a complete private current-sender request. Call clarify_current_sender before a needed follow-up. Use continue_current_sender_privately or continue_current_sender_in_group only for a later reply to that clarification, never a fresh request. Accepted handoff is queued, not sent; never say told, shared, or posted.',
+});
+export const MURPH_GROUP_DATA_TOOL = buildMurphGroupFamilyTool({
+    name: 'group_data',
+    description: 'Read shared data, record sender metrics, or manage disclosure/access.',
+});
+export const MURPH_GROUP_MEMBERSHIP_TOOL = buildMurphGroupFamilyTool({
+    name: 'group_membership',
+    description: 'Read/change membership or next-group setup.',
+});
+export const MURPH_GROUP_USAGE_TOOL = buildMurphGroupFamilyTool({
+    name: 'group_usage',
+    description: 'Read usage/referrals or set one referral choice.',
+});
+export const MURPH_GROUP_CHAT_TOOL = buildMurphGroupFamilyTool({
+    name: 'group_chat',
+    description: 'Read/update chat, avatar, participants, or contact card.',
+});
+export const MURPH_GROUP_EMAIL_TOOL = buildMurphGroupFamilyTool({
+    name: 'group_email',
+    description: 'Queue email after a consent-aware group_data read.',
+});
+export const MURPH_GROUP_FAMILY_TOOLS = [
+    MURPH_GROUP_CONSULT_TOOL,
+    MURPH_GROUP_DATA_TOOL,
+    MURPH_GROUP_MEMBERSHIP_TOOL,
+    MURPH_GROUP_USAGE_TOOL,
+    MURPH_GROUP_CHAT_TOOL,
+    MURPH_GROUP_EMAIL_TOOL,
+];
+export const MURPH_GROUP_TOOL_ROOT_KEYS_BY_NAME = {
+    group: ['action', ...Object.keys(MURPH_GROUP_TOOL_PROPERTIES)],
+    group_consult: Object.keys(MURPH_GROUP_CONSULT_TOOL.inputSchema.properties),
+    group_data: Object.keys(MURPH_GROUP_DATA_TOOL.inputSchema.properties),
+    group_membership: Object.keys(MURPH_GROUP_MEMBERSHIP_TOOL.inputSchema.properties),
+    group_usage: Object.keys(MURPH_GROUP_USAGE_TOOL.inputSchema.properties),
+    group_chat: Object.keys(MURPH_GROUP_CHAT_TOOL.inputSchema.properties),
+    group_email: Object.keys(MURPH_GROUP_EMAIL_TOOL.inputSchema.properties),
 };
 export const MURPH_SEND_VAULT_FILE_TOOL = {
     namespace: 'murph',
@@ -1272,9 +1292,10 @@ const MURPH_BASE_DYNAMIC_TOOLS = [
     MURPH_PLAN_USAGE_TOOL,
     MURPH_IMESSAGE_CONTACT_TOOL,
     MURPH_SUBSCRIPTION_TOOL,
-    MURPH_GROUP_TOOL,
+    ...MURPH_GROUP_FAMILY_TOOLS,
     MURPH_GROUP_ROOM_MODEL_TOOL,
     MURPH_GENERATE_SONG_TOOL,
+    MURPH_ANALYZE_VIDEO_TOOL,
     MURPH_ASK_GROK_TOOL,
     MURPH_SUBMIT_PRODUCT_FEEDBACK_TOOL,
     MURPH_SEND_VAULT_FILE_TOOL,
@@ -1286,6 +1307,7 @@ const MURPH_BASE_DYNAMIC_TOOLS = [
     MURPH_CREATE_PHONE_CALL_TOOL,
     MURPH_GET_PHONE_CALL_STATUS_TOOL,
     MURPH_STOP_PHONE_CALL_TOOL,
+    MURPH_RESOLVE_PHYSICAL_NOTE_TOOL,
     MURPH_SEND_PHYSICAL_NOTE_TOOL,
     MURPH_LABS_TOOL,
 ];
@@ -1325,18 +1347,20 @@ const TOOL_AVAILABILITY = new Map([
     [MURPH_PLAN_USAGE_TOOL, defaultOff((a) => a.planUsageAvailable)],
     [MURPH_IMESSAGE_CONTACT_TOOL, defaultOff((a) => a.imessageContactAvailable)],
     [MURPH_SUBSCRIPTION_TOOL, defaultOff((a) => a.subscriptionAvailable)],
-    [MURPH_GROUP_TOOL, defaultOff((a) => a.groupAvailable)],
+    ...MURPH_GROUP_FAMILY_TOOLS.map((tool) => [tool, defaultOff((a) => a.groupAvailable)]),
     [MURPH_GROUP_ROOM_MODEL_TOOL, defaultOff((a) => a.groupRoomModelAvailable)],
     [MURPH_PERSONALIZATION_TOOL, defaultOff((a) => a.personalizationAvailable)],
     [MURPH_GENERATE_VOICE_MEMO_TOOL, defaultOff((a) => a.voiceMemoGenerationAvailable)],
     [MURPH_GENERATE_SONG_TOOL, defaultOff((a) => a.voiceMemoGenerationAvailable)],
     [MURPH_GENERATE_IMAGE_TOOL, defaultOn((a) => a.imageGenerationAvailable)],
+    [MURPH_ANALYZE_VIDEO_TOOL, defaultOff((a) => a.analyzeVideoAvailable)],
     [MURPH_ASK_GROK_TOOL, defaultOff((a) => a.askGrokAvailable)],
     [MURPH_SEND_VAULT_FILE_TOOL, defaultOff((a) => a.vaultFileSendAvailable)],
     [MURPH_PENDING_VAULT_FILES_TOOL, defaultOff((a) => a.pendingVaultFilesAvailable)],
     [MURPH_CREATE_PHONE_CALL_TOOL, defaultOff((a) => a.phoneCallsAvailable)],
     [MURPH_GET_PHONE_CALL_STATUS_TOOL, defaultOff((a) => a.phoneCallStatusAvailable)],
     [MURPH_STOP_PHONE_CALL_TOOL, defaultOff((a) => a.phoneCallStopAvailable)],
+    [MURPH_RESOLVE_PHYSICAL_NOTE_TOOL, defaultOff((a) => a.physicalNoteRecoveryAvailable)],
     [MURPH_SEND_PHYSICAL_NOTE_TOOL, defaultOff((a) => a.physicalNotesAvailable)],
     ...MURPH_COMPUTER_DYNAMIC_TOOLS.map((tool) => [tool, defaultOff((a) => a.computerToolsAvailable)]),
     [MURPH_CONNECTED_APPS_MANAGE_TOOL, defaultOff((a) => a.connectedAppsAvailable && a.connectedAppsManageAvailable !== false)],