@otto-code/protocol 0.7.5 → 0.8.0

package/dist/provider-config.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { AgentProviderSchema } from "./provider-manifest.js";
+import { AgentProviderSchema, OTTO_BRAIN_PROVIDER_ID } from "./provider-manifest.js";
 const ProviderCommandDefaultSchema = z.object({
     mode: z.literal("default"),
 });
@@ -38,7 +38,7 @@ export const ProviderProfileModelSchema = z.object({
  * Coarse categories for Otto's agent-facing tool catalog. Providers that receive
  * Otto tools natively (see the openai-compat provider) can be scoped to a subset
  * of these groups; omitting the selection means all groups. Kept deliberately
- * coarse — users pick groups, not individual tools.
+ * coarse - users pick groups, not individual tools.
  */
 export const OTTO_TOOL_GROUPS = [
     "preview",
@@ -97,7 +97,7 @@ const McpSseServerConfigSchema = z.object({
 /**
  * Canonical MCP server config. Shared by AgentSessionConfig (per-agent servers
  * sent at create time) and ProviderOverride (provider-level servers in the
- * daemon config). stdio entries execute arbitrary commands as the daemon user —
+ * daemon config). stdio entries execute arbitrary commands as the daemon user -
  * both sources sit behind existing trust boundaries (daemon-side config file,
  * authenticated agent-create RPC).
  */
@@ -106,6 +106,50 @@ export const McpServerConfigSchema = z.discriminatedUnion("type", [
     McpHttpServerConfigSchema,
     McpSseServerConfigSchema,
 ]);
+/**
+ * OAuth tokens held for a connector whose MCP server authenticates over OAuth
+ * 2.1 (the "log in, don't paste a token" path). Mirrors the SDK's OAuthTokens
+ * shape. Secret-bearing, so it is host-owned like every other credential in
+ * daemon config and is redacted before the config is sent to a client.
+ *
+ * `expiresAt` is absolute epoch MILLISECONDS, not the `expires_in` duration the
+ * token endpoint returns: a duration is only meaningful next to the instant it
+ * was issued, and that instant is not on the wire.
+ */
+export const ConnectorOAuthTokensSchema = z.object({
+    accessToken: z.string().min(1),
+    tokenType: z.string().optional(),
+    refreshToken: z.string().optional(),
+    scope: z.string().optional(),
+    expiresAt: z.number().optional(),
+});
+/**
+ * The OAuth client identity this daemon registered with a connector's
+ * authorization server, kept so a second login reuses the registration instead
+ * of re-running dynamic client registration. Keyed alongside the redirect URI it
+ * was registered against: if the loopback port moves, the registration is stale
+ * and must be redone.
+ */
+export const ConnectorOAuthClientSchema = z.object({
+    clientId: z.string().min(1),
+    clientSecret: z.string().optional(),
+    redirectUri: z.string().min(1),
+});
+/**
+ * Everything the daemon persists about a connector's authorization. Absent means
+ * the connector either needs no credential or carries a static token in its
+ * transport (env var for stdio, Authorization header for http/sse) - this block
+ * is only for the interactive OAuth path.
+ */
+export const ConnectorAuthStateSchema = z.object({
+    kind: z.literal("oauth"),
+    tokens: ConnectorOAuthTokensSchema.optional(),
+    client: ConnectorOAuthClientSchema.optional(),
+    /** Account label shown in the UI once connected (email / workspace name). */
+    account: z.string().optional(),
+    /** Epoch ms of the last successful authorization; drives "Connected on ...". */
+    authorizedAt: z.number().optional(),
+});
 /**
  * Per-workspace state for a connector, keyed by workspace cwd in
  * ConnectorConfig.workspaces. Phase 1 leaves this inert (the daemon does not
@@ -136,6 +180,11 @@ export const ConnectorConfigSchema = z.object({
     enabled: z.boolean().optional(),
     /** Tool names (unqualified, as the server reports them) withheld from the model. */
     disabledTools: z.array(z.string()).optional(),
+    /**
+     * OAuth authorization state, when this connector logs in rather than taking a
+     * pasted token. Optional so every existing connector parses unchanged.
+     */
+    auth: ConnectorAuthStateSchema.optional(),
     /** Per-workspace activation keyed by workspace cwd. Phase 2; inert today. */
     workspaces: z.record(z.string(), ConnectorWorkspaceStateSchema).optional(),
     /** Display ordering in the UI; lower sorts first. */
@@ -165,7 +214,7 @@ export const COMPACTION_THRESHOLD_PERCENTS = [50, 60, 70, 80, 90];
 /**
  * Max model→tool→model rounds per turn for providers whose tool loop the
  * daemon owns (openai-compat). The turn stops with an error after this many
- * rounds without a final answer — a runaway-loop safety valve, most often hit
+ * rounds without a final answer - a runaway-loop safety valve, most often hit
  * by smaller local models that keep calling tools instead of converging.
  * Bounds keep the setting a sane guard rail rather than an off switch.
  */
@@ -233,10 +282,13 @@ const PROVIDER_ID_PATTERN = /^[a-z][a-z0-9-]*$/;
 export const ProviderOverridesSchema = z
     .record(z.string(), ProviderOverrideSchema)
     .superRefine((providers, ctx) => {
-    const builtinProviderIdSet = new Set(BUILTIN_PROVIDER_IDS);
+    // otto-brain is builtin (endpoint comes from brain settings, not
+    // extends/label) but not a valid `extends` target for a custom provider,
+    // so it's added only here rather than to BUILTIN_PROVIDER_IDS itself.
+    const builtinProviderIdSet = new Set([...BUILTIN_PROVIDER_IDS, OTTO_BRAIN_PROVIDER_ID]);
     // "acp" spawns a generic ACP agent process; "openai-compatible" is served
     // natively by the daemon against an OpenAI-compatible HTTP endpoint
-    // (LM Studio, Ollama, vLLM, ...) — no external binary involved.
+    // (LM Studio, Ollama, vLLM, ...) - no external binary involved.
     const validExtendsValues = new Set([
         ...BUILTIN_PROVIDER_IDS,
         "acp",

package/dist/provider-manifest.d.ts

@@ -8,6 +8,7 @@ export interface AgentModeVisuals {
 }
 export type AgentProviderModeDefinition = Omit<AgentMode, "icon" | "colorTier"> & AgentModeVisuals & {
     isUnattended?: boolean;
+    selectsModel?: boolean;
     userSelectable?: boolean;
 };
 export interface AgentProviderDefinition {
@@ -23,6 +24,15 @@ export interface AgentProviderDefinition {
         defaultModel?: string;
     };
 }
+export declare const OMP_MODES: AgentProviderModeDefinition[];
+/**
+ * The daemon's built-in local AI host (see the definition below). Exported so
+ * other protocol/server/client code can recognize this id without repeating
+ * the string literal - notably ProviderOverridesSchema's builtin-provider
+ * check in provider-config.ts, which otherwise requires `extends`/`label` on
+ * any `providers.otto-brain` config entry.
+ */
+export declare const OTTO_BRAIN_PROVIDER_ID = "otto-brain";
 export declare const AGENT_PROVIDER_DEFINITIONS: AgentProviderDefinition[];
 export declare const DEV_AGENT_PROVIDER_DEFINITIONS: AgentProviderDefinition[];
 export declare function getAgentProviderDefinition(provider: string, definitions?: AgentProviderDefinition[]): AgentProviderDefinition;
@@ -33,7 +43,7 @@ export declare function isValidAgentProvider(value: string, validIds?: Iterable<
 export declare function getUnattendedModeId(provider: string, definitions?: AgentProviderDefinition[]): string | undefined;
 /**
  * Whether a user may pick this mode themselves. False only for modes explicitly
- * flagged `userSelectable: false` in the static manifest (Claude "dontAsk") — a
+ * flagged `userSelectable: false` in the static manifest (Claude "dontAsk") - a
  * system-assigned mode that agents can run in but no one selects by hand. Unknown
  * modes (dynamic/ACP, custom providers) default to selectable. The flag is a
  * static property of the mode, so this always consults the built-in manifest

package/dist/provider-manifest.js

@@ -27,11 +27,15 @@ const CLAUDE_MODES = [
         description: "Uses a model classifier to review permission prompts automatically",
         icon: "LocalPolice",
         colorTier: "moderate",
+        // Auto also lets the CLI pick the model per turn. Codex's unrelated "auto"
+        // mode is a permission level only, which is exactly why this is a flag and
+        // not a check on the mode id.
+        selectsModel: true,
     },
     {
         id: "dontAsk",
         label: "Don't Ask",
-        description: "Runs without prompting — actions not pre-approved are denied",
+        description: "Runs without prompting; actions not pre-approved are denied",
         // Guarded unattended mode: more dangerous than acceptEdits (edits only) but
         // safer than bypass (deny-by-default vs. run-everything), so it sits at the
         // "moderate" tier alongside Auto.
@@ -39,7 +43,7 @@ const CLAUDE_MODES = [
         colorTier: "moderate",
         isUnattended: true,
         // System-assigned only: the coercion target for unattended runs and for Auto
-        // on models that can't run it (Haiku). Users never pick it — it's hidden from
+        // on models that can't run it (Haiku). Users never pick it - it's hidden from
         // mode dropdowns and locks the control when it's an agent's active mode.
         userSelectable: false,
     },
@@ -127,7 +131,7 @@ const MOCK_LOAD_TEST_MODES = [
     {
         id: "dontAsk",
         label: "Don't Ask",
-        description: "Runs without prompting — actions not pre-approved are denied",
+        description: "Runs without prompting; actions not pre-approved are denied",
         icon: "ShieldCheck",
         colorTier: "moderate",
         // Dev-only mirror of Claude's guarded unattended mode so deterministic E2E
@@ -147,6 +151,38 @@ const MOCK_SLOW_MODES = [
         colorTier: "dangerous",
     },
 ];
+export const OMP_MODES = [
+    {
+        id: "full",
+        label: "Full Access",
+        description: "Launches OMP with yolo approval mode so tools run without prompts.",
+        icon: "ShieldOff",
+        colorTier: "dangerous",
+        isUnattended: true,
+    },
+    {
+        id: "write",
+        label: "Write Approval",
+        description: "Launches OMP with write approval mode: reads are free, writes require approval.",
+        icon: "ShieldAlert",
+        colorTier: "moderate",
+    },
+    {
+        id: "ask",
+        label: "Always Ask",
+        description: "Launches OMP with always-ask approval mode for write and exec tools.",
+        icon: "ShieldCheck",
+        colorTier: "safe",
+    },
+];
+/**
+ * The daemon's built-in local AI host (see the definition below). Exported so
+ * other protocol/server/client code can recognize this id without repeating
+ * the string literal - notably ProviderOverridesSchema's builtin-provider
+ * check in provider-config.ts, which otherwise requires `extends`/`label` on
+ * any `providers.otto-brain` config entry.
+ */
+export const OTTO_BRAIN_PROVIDER_ID = "otto-brain";
 export const AGENT_PROVIDER_DEFINITIONS = [
     {
         id: "claude",
@@ -202,7 +238,19 @@ export const AGENT_PROVIDER_DEFINITIONS = [
         label: "OMP",
         description: "Pi-compatible coding agent distributed as Oh My Pi",
         enabledByDefault: false,
-        defaultModeId: null,
+        defaultModeId: "ask",
+        modes: OMP_MODES,
+    },
+    {
+        // The daemon's own local AI host. Built in rather than a catalog-installed
+        // OpenAI-compatible profile: its endpoint and credential come from the
+        // brain settings (Settings -> Host -> Otto Brain), never from per-provider
+        // URL/API-key fields. Modes are empty here for the same reason every
+        // openai-compat provider's are: the client reports them at catalog time.
+        id: OTTO_BRAIN_PROVIDER_ID,
+        label: "Otto Brain",
+        description: "Otto's built-in local AI host. Serves your local models over an OpenAI-compatible endpoint, no external server required.",
+        defaultModeId: "default",
         modes: [],
     },
 ];
@@ -247,7 +295,7 @@ export function getUnattendedModeId(provider, definitions = [
 }
 /**
  * Whether a user may pick this mode themselves. False only for modes explicitly
- * flagged `userSelectable: false` in the static manifest (Claude "dontAsk") — a
+ * flagged `userSelectable: false` in the static manifest (Claude "dontAsk") - a
  * system-assigned mode that agents can run in but no one selects by hand. Unknown
  * modes (dynamic/ACP, custom providers) default to selectable. The flag is a
  * static property of the mode, so this always consults the built-in manifest

package/dist/schedule/cadence.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Convert an exact rolling interval to an equivalent five-field cron cadence.
+ * Returns null when cron's calendar boundaries would change the interval.
+ */
+export declare function everyMsToFiveFieldCron(everyMs: number): string | null;
+//# sourceMappingURL=cadence.d.ts.map

package/dist/schedule/cadence.js

@@ -0,0 +1,28 @@
+/**
+ * Convert an exact rolling interval to an equivalent five-field cron cadence.
+ * Returns null when cron's calendar boundaries would change the interval.
+ */
+export function everyMsToFiveFieldCron(everyMs) {
+    const minutes = everyMs / 60000;
+    if (!Number.isInteger(minutes) || minutes <= 0) {
+        return null;
+    }
+    if (minutes < 60 && 60 % minutes === 0) {
+        return `*/${minutes} * * * *`;
+    }
+    if (minutes === 60) {
+        return "0 * * * *";
+    }
+    if (minutes % 60 !== 0) {
+        return null;
+    }
+    const hours = minutes / 60;
+    if (hours < 24 && 24 % hours === 0) {
+        return `0 */${hours} * * *`;
+    }
+    if (hours === 24) {
+        return "0 0 * * *";
+    }
+    return null;
+}
+//# sourceMappingURL=cadence.js.map

package/dist/schedule/rpc-schemas.d.ts

@@ -129,6 +129,7 @@ export declare const ScheduleCreateResponseSchema: z.ZodObject<{
             }>;
             createdAt: z.ZodString;
             updatedAt: z.ZodString;
+            expiresAt: z.ZodNullable<z.ZodString>;
             cadence: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 type: z.ZodLiteral<"every">;
                 everyMs: z.ZodNumber;
@@ -179,7 +180,6 @@ export declare const ScheduleCreateResponseSchema: z.ZodObject<{
             lastRunProvider: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             lastRunModel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             pausedAt: z.ZodNullable<z.ZodString>;
-            expiresAt: z.ZodNullable<z.ZodString>;
             maxRuns: z.ZodNullable<z.ZodNumber>;
         }, z.core.$strip>>;
         error: z.ZodNullable<z.ZodString>;
@@ -200,6 +200,7 @@ export declare const ScheduleListResponseSchema: z.ZodObject<{
             }>;
             createdAt: z.ZodString;
             updatedAt: z.ZodString;
+            expiresAt: z.ZodNullable<z.ZodString>;
             cadence: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 type: z.ZodLiteral<"every">;
                 everyMs: z.ZodNumber;
@@ -250,7 +251,6 @@ export declare const ScheduleListResponseSchema: z.ZodObject<{
             lastRunProvider: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             lastRunModel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             pausedAt: z.ZodNullable<z.ZodString>;
-            expiresAt: z.ZodNullable<z.ZodString>;
             maxRuns: z.ZodNullable<z.ZodNumber>;
         }, z.core.$strip>>;
         error: z.ZodNullable<z.ZodString>;
@@ -385,6 +385,7 @@ export declare const SchedulePauseResponseSchema: z.ZodObject<{
             }>;
             createdAt: z.ZodString;
             updatedAt: z.ZodString;
+            expiresAt: z.ZodNullable<z.ZodString>;
             cadence: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 type: z.ZodLiteral<"every">;
                 everyMs: z.ZodNumber;
@@ -435,7 +436,6 @@ export declare const SchedulePauseResponseSchema: z.ZodObject<{
             lastRunProvider: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             lastRunModel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             pausedAt: z.ZodNullable<z.ZodString>;
-            expiresAt: z.ZodNullable<z.ZodString>;
             maxRuns: z.ZodNullable<z.ZodNumber>;
         }, z.core.$strip>>;
         error: z.ZodNullable<z.ZodString>;
@@ -456,6 +456,7 @@ export declare const ScheduleResumeResponseSchema: z.ZodObject<{
             }>;
             createdAt: z.ZodString;
             updatedAt: z.ZodString;
+            expiresAt: z.ZodNullable<z.ZodString>;
             cadence: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 type: z.ZodLiteral<"every">;
                 everyMs: z.ZodNumber;
@@ -506,7 +507,6 @@ export declare const ScheduleResumeResponseSchema: z.ZodObject<{
             lastRunProvider: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             lastRunModel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             pausedAt: z.ZodNullable<z.ZodString>;
-            expiresAt: z.ZodNullable<z.ZodString>;
             maxRuns: z.ZodNullable<z.ZodNumber>;
         }, z.core.$strip>>;
         error: z.ZodNullable<z.ZodString>;

package/dist/schedule/rpc-schemas.js

@@ -62,7 +62,7 @@ export const ScheduleRunOnceRequestSchema = z.object({
 });
 const ScheduleUpdateNewAgentConfigSchema = z.object({
     provider: z.string().trim().min(1).optional(),
-    // Personality binding by name — or the "@team-scheduler" sentinel. Explicit
+    // Personality binding by name - or the "@team-scheduler" sentinel. Explicit
     // null clears a stored binding; omission leaves it untouched.
     personality: z.string().trim().min(1).nullable().optional(),
     model: z.string().trim().min(1).nullable().optional(),

package/dist/schedule/types.d.ts

@@ -159,6 +159,7 @@ export declare const ScheduleSummarySchema: z.ZodObject<{
     }>;
     createdAt: z.ZodString;
     updatedAt: z.ZodString;
+    expiresAt: z.ZodNullable<z.ZodString>;
     cadence: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"every">;
         everyMs: z.ZodNumber;
@@ -209,7 +210,6 @@ export declare const ScheduleSummarySchema: z.ZodObject<{
     lastRunProvider: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     lastRunModel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     pausedAt: z.ZodNullable<z.ZodString>;
-    expiresAt: z.ZodNullable<z.ZodString>;
     maxRuns: z.ZodNullable<z.ZodNumber>;
 }, z.core.$strip>;
 export type ScheduleSummary = z.infer<typeof ScheduleSummarySchema>;

package/dist/schedule/types.js

@@ -24,7 +24,7 @@ export const ScheduleTargetSchema = z.discriminatedUnion("type", [
             cwd: z.string().trim().min(1),
             // Optional Agent Personality binding (by name). When set, each run
             // re-resolves the personality against the run cwd and hard-fails if it is
-            // unavailable — so schedule runs pick up personality edits between runs.
+            // unavailable - so schedule runs pick up personality edits between runs.
             personality: z.string().trim().min(1).optional(),
             modeId: z.string().trim().min(1).optional(),
             model: z.string().trim().min(1).optional(),
@@ -57,7 +57,7 @@ export const ScheduleRunSchema = z.object({
     status: z.enum(["running", "succeeded", "failed"]),
     agentId: z.guid().nullable(),
     workspaceId: z.string().nullable().optional(),
-    // Who actually executed this run — the resolved personality (if any),
+    // Who actually executed this run - the resolved personality (if any),
     // provider, and model. Stamped when the run starts (so a failed run still
     // records its executor). Optional for back-compat: runs written before these
     // fields existed omit them.
@@ -80,7 +80,7 @@ export const StoredScheduleSchema = z.object({
     lastRunAt: z.string().nullable(),
     lastRunStatus: z.enum(["succeeded", "failed"]).nullable().optional(),
     lastRunError: z.string().nullable().optional(),
-    // Executor of the most recent run — mirrors the run-level fields above so the
+    // Executor of the most recent run - mirrors the run-level fields above so the
     // schedule card can show "who ran it last" (personality · provider · model)
     // without loading the full run history (ScheduleSummary omits `runs`).
     // Optional for back-compat: schedules that never ran, or predate these

package/dist/tool-call-display.d.ts

@@ -12,7 +12,7 @@ export interface ToolCallDisplayModel {
  * shows a tool/action name without a full timeline item to run through
  * {@link buildToolCallDisplayModel} (the visualizer's action labels, sub-agent
  * activity rows). Strips the MCP/Otto namespace, consults the known-tool
- * registry, then title-cases as a fallback — so "mcp__otto__spawn_task",
+ * registry, then title-cases as a fallback - so "mcp__otto__spawn_task",
  * "otto.spawn_task", and a bare "spawn_task" all render as "Spawn Task".
  */
 export declare function getToolDisplayName(name: string): string;

package/dist/tool-call-display.js

@@ -6,7 +6,7 @@ function isRecord(value) {
 function readString(value) {
     return typeof value === "string" && value.length > 0 ? value : undefined;
 }
-// Curated display names — the registry of tools we explicitly "know about".
+// Curated display names - the registry of tools we explicitly "know about".
 // Keyed by the lowercased leaf name (transport namespace already stripped).
 //
 // Only tools whose bare id does NOT title-case cleanly on its own need an entry
@@ -15,7 +15,7 @@ function readString(value) {
 // camelCase ("WebSearch") names are handled by the algorithmic humanizer below
 // and do NOT need listing.
 //
-// Anything not here falls through to the humanizer and still renders readably —
+// Anything not here falls through to the humanizer and still renders readably -
 // so an unmapped tool shows up looking slightly generic (e.g. a stray provider
 // tool), which is the cue to add it here. Extend this map to teach Otto a tool.
 const KNOWN_TOOL_DISPLAY_NAMES = {
@@ -66,7 +66,7 @@ function humanizeToolName(name) {
  * shows a tool/action name without a full timeline item to run through
  * {@link buildToolCallDisplayModel} (the visualizer's action labels, sub-agent
  * activity rows). Strips the MCP/Otto namespace, consults the known-tool
- * registry, then title-cases as a fallback — so "mcp__otto__spawn_task",
+ * registry, then title-cases as a fallback - so "mcp__otto__spawn_task",
  * "otto.spawn_task", and a bare "spawn_task" all render as "Spawn Task".
  */
 export function getToolDisplayName(name) {

package/dist/tool-name-normalization.d.ts

@@ -10,13 +10,13 @@ export declare function getOttoToolLeafName(name: string): string | null;
  *
  * Tools hosted over MCP arrive namespaced as `mcp__<server>__<tool>` (Claude
  * Code format). The `mcp__<server>__` part is transport plumbing that means
- * nothing to a reader — "Create Issue", not "mcp__linear__create_issue". This
+ * nothing to a reader - "Create Issue", not "mcp__linear__create_issue". This
  * generalizes {@link getOttoToolLeafName} to ANY server so every MCP tool reads
  * cleanly, not just Otto's own.
  *
  * Returns `null` when the name carries no `mcp__…__` namespace, so callers keep
  * plain tool names (`Read`, `bash`) and dotted/other forms untouched. Case is
- * preserved — MCP tool ids are already snake_case and callers humanize after.
+ * preserved - MCP tool ids are already snake_case and callers humanize after.
  * `speak` is never treated as namespaced (it renders as a chat bubble, not an
  * action row).
  */

package/dist/tool-name-normalization.js

@@ -74,13 +74,13 @@ export function getOttoToolLeafName(name) {
  *
  * Tools hosted over MCP arrive namespaced as `mcp__<server>__<tool>` (Claude
  * Code format). The `mcp__<server>__` part is transport plumbing that means
- * nothing to a reader — "Create Issue", not "mcp__linear__create_issue". This
+ * nothing to a reader - "Create Issue", not "mcp__linear__create_issue". This
  * generalizes {@link getOttoToolLeafName} to ANY server so every MCP tool reads
  * cleanly, not just Otto's own.
  *
  * Returns `null` when the name carries no `mcp__…__` namespace, so callers keep
  * plain tool names (`Read`, `bash`) and dotted/other forms untouched. Case is
- * preserved — MCP tool ids are already snake_case and callers humanize after.
+ * preserved - MCP tool ids are already snake_case and callers humanize after.
  * `speak` is never treated as namespaced (it renders as a chat bubble, not an
  * action row).
  */