@raytio/mcp-server 3.1.1 → 3.5.0

package/dist/tools/wrm/wrm-agent-run-step-create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-agent-run-step-create.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-create.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,sBAAsB,EAAE,IAsCpC,CAAC"}
+{"version":3,"file":"wrm-agent-run-step-create.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-create.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAMtC,eAAO,MAAM,sBAAsB,EAAE,IAyCpC,CAAC"}

package/dist/tools/wrm/wrm-agent-run-step-create.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, API_ERROR } from '../types.js';
 import { WRM_AGENT_RUN_STEP_SELECT } from '../../wrm/projection.js';
+import { cap } from '../../capabilities/tool-capability.js';
 export const agentRunStepCreateTool = {
     name: 'wrm_agent_run_step_create',
     description: 'Create a new agent run step record',
@@ -13,6 +14,9 @@ export const agentRunStepCreateTool = {
         input_summary: z.string().optional().describe('Truncated input description'),
         metadata: z.record(z.unknown()).optional().describe('Step-specific data (JSONB)'),
     }),
+    capabilities: [
+        cap('wrm_agent_run_steps', 'INSERT'),
+    ],
     handler: async (args, ctx) => {
         const input = args;
         try {

package/dist/tools/wrm/wrm-agent-run-step-create.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-agent-run-step-create.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAGpE,MAAM,CAAC,MAAM,sBAAsB,GAAS;IAC1C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,oCAAoC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QACjE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QAClE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oGAAoG,CAAC;QACpI,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,mEAAmE,CAAC;QACxH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QACjG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QAC5E,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;KAClF,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,GAAwB;gBAChC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,SAAS;aAC5C,CAAC;YAEF,MAAM,cAAc,GAAG,CAAC,iBAAiB,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;YACxE,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;gBACnC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;oBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACpC,qCAAqC,yBAAyB,EAAE,EAChE,IAAI,EACJ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,oCAAoC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-agent-run-step-create.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,sBAAsB,GAAS;IAC1C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,oCAAoC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QACjE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QAClE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oGAAoG,CAAC;QACpI,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,mEAAmE,CAAC;QACxH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QACjG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QAC5E,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;KAClF,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,qBAAqB,EAAE,QAAQ,CAAC;KACrC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,GAAwB;gBAChC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,SAAS;aAC5C,CAAC;YAEF,MAAM,cAAc,GAAG,CAAC,iBAAiB,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;YACxE,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;gBACnC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;oBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACpC,qCAAqC,yBAAyB,EAAE,EAChE,IAAI,EACJ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,oCAAoC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-agent-run-step-list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-agent-run-step-list.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,oBAAoB,EAAE,IAkBlC,CAAC"}
+{"version":3,"file":"wrm-agent-run-step-list.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAMtC,eAAO,MAAM,oBAAoB,EAAE,IAqBlC,CAAC"}

package/dist/tools/wrm/wrm-agent-run-step-list.js

@@ -1,12 +1,16 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, API_ERROR } from '../types.js';
 import { WRM_AGENT_RUN_STEP_SELECT } from '../../wrm/projection.js';
+import { cap } from '../../capabilities/tool-capability.js';
 export const agentRunStepListTool = {
     name: 'wrm_agent_run_step_list',
     description: 'List agent run steps by agent_run_id, ordered by step_order',
     inputSchema: z.object({
         agent_run_id: z.string().describe('UUID of the parent agent run'),
     }),
+    capabilities: [
+        cap('wrm_agent_run_steps', 'SELECT'),
+    ],
     handler: async (args, ctx) => {
         const { agent_run_id } = args;
         try {

package/dist/tools/wrm/wrm-agent-run-step-list.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-agent-run-step-list.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAGpE,MAAM,CAAC,MAAM,oBAAoB,GAAS;IACxC,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EAAE,6DAA6D;IAC1E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;KAClE,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,YAAY,EAAE,GAAG,IAAgC,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,8CAA8C,YAAY,gCAAgC,yBAAyB,EAAE,CACtH,CAAC;YAEF,OAAO,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,mCAAmC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-agent-run-step-list.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,oBAAoB,GAAS;IACxC,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EAAE,6DAA6D;IAC1E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;KAClE,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,qBAAqB,EAAE,QAAQ,CAAC;KACrC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,YAAY,EAAE,GAAG,IAAgC,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,8CAA8C,YAAY,gCAAgC,yBAAyB,EAAE,CACtH,CAAC;YAEF,OAAO,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,mCAAmC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-agent-run-step-update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-agent-run-step-update.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-update.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,sBAAsB,EAAE,IA0CpC,CAAC"}
+{"version":3,"file":"wrm-agent-run-step-update.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-update.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAMtC,eAAO,MAAM,sBAAsB,EAAE,IA6CpC,CAAC"}

package/dist/tools/wrm/wrm-agent-run-step-update.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
 import { WRM_AGENT_RUN_STEP_SELECT } from '../../wrm/projection.js';
+import { cap } from '../../capabilities/tool-capability.js';
 export const agentRunStepUpdateTool = {
     name: 'wrm_agent_run_step_update',
     description: 'Update an agent run step (status, end time, output). Sets step_ended_at to NOW() automatically when step_status is SUCCESS or FAILED unless explicitly provided.',
@@ -11,6 +12,9 @@ export const agentRunStepUpdateTool = {
         output_summary: z.string().nullable().optional().describe('Truncated output/result (null to clear)'),
         metadata: z.record(z.unknown()).nullable().optional().describe('Step-specific data (null to clear)'),
     }),
+    capabilities: [
+        cap('wrm_agent_run_steps', 'UPDATE'),
+    ],
     handler: async (args, ctx) => {
         const { id, ...updates } = args;
         try {

package/dist/tools/wrm/wrm-agent-run-step-update.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-agent-run-step-update.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAGpE,MAAM,CAAC,MAAM,sBAAsB,GAAS;IAC1C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,kKAAkK;IAC/K,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QAC7F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;QAChH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACpG,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;KACrG,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,IAA4C,CAAC;QACxE,IAAI,CAAC;YACH,MAAM,IAAI,GAAwB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnD,IAAI,KAAK,KAAK,SAAS;oBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC7C,CAAC;YAED,0EAA0E;YAC1E,IACE,IAAI,CAAC,WAAW;gBAChB,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC;gBACjE,IAAI,CAAC,aAAa,KAAK,SAAS,EAChC,CAAC;gBACD,IAAI,CAAC,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAChD,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACrC,oCAAoC,EAAE,WAAW,yBAAyB,EAAE,EAC5E,IAAI,EACJ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC;YACxE,CAAC;YAED,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,oCAAoC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-agent-run-step-update.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-step-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,sBAAsB,GAAS;IAC1C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,kKAAkK;IAC/K,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QAC7F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;QAChH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACpG,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;KACrG,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,qBAAqB,EAAE,QAAQ,CAAC;KACrC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,IAA4C,CAAC;QACxE,IAAI,CAAC;YACH,MAAM,IAAI,GAAwB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnD,IAAI,KAAK,KAAK,SAAS;oBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC7C,CAAC;YAED,0EAA0E;YAC1E,IACE,IAAI,CAAC,WAAW;gBAChB,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC;gBACjE,IAAI,CAAC,aAAa,KAAK,SAAS,EAChC,CAAC;gBACD,IAAI,CAAC,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAChD,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACrC,oCAAoC,EAAE,WAAW,yBAAyB,EAAE,EAC5E,IAAI,EACJ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC;YACxE,CAAC;YAED,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,oCAAoC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-agent-run-summary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-agent-run-summary.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-summary.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAetC,eAAO,MAAM,mBAAmB,EAAE,IAyCjC,CAAC"}
+{"version":3,"file":"wrm-agent-run-summary.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-summary.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAgBtC,eAAO,MAAM,mBAAmB,EAAE,IA+CjC,CAAC"}

package/dist/tools/wrm/wrm-agent-run-summary.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
 import { WRM_AGENT_RUN_SELECT, WRM_AGENT_RUN_STEP_SELECT, WRM_AGENT_RUN_ARTIFACT_SELECT, WRM_AGENT_RUN_EVAL_SELECT, } from '../../wrm/projection.js';
 export const agentRunSummaryTool = {
     name: 'wrm_agent_run_summary',
@@ -8,6 +9,12 @@ export const agentRunSummaryTool = {
     inputSchema: z.object({
         id: z.string().describe('UUID of the agent run'),
     }),
+    capabilities: [
+        cap('wrm_agent_run_artifacts', 'SELECT'),
+        cap('wrm_agent_run_evals', 'SELECT'),
+        cap('wrm_agent_run_steps', 'SELECT'),
+        cap('wrm_agent_runs', 'SELECT'),
+    ],
     handler: async (args, ctx) => {
         const { id } = args;
         try {

package/dist/tools/wrm/wrm-agent-run-summary.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-agent-run-summary.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-summary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAQjC,MAAM,CAAC,MAAM,mBAAmB,GAAS;IACvC,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,2EAA2E;QAC3E,+DAA+D;IACjE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KACjD,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,IAAsB,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACxD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,+BAA+B,EAAE,WAAW,oBAAoB,EAAE,CACnE;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,8CAA8C,EAAE,WAAW,yBAAyB,iCAAiC,CACtH;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,kDAAkD,EAAE,WAAW,6BAA6B,YAAY,CACzG;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,8CAA8C,EAAE,WAAW,yBAAyB,mCAAmC,CACxH;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,aAAa,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;YACnE,CAAC;YAED,OAAO,eAAe,CAAC;gBACrB,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;gBACZ,KAAK;gBACL,SAAS;gBACT,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,oCAAoC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-agent-run-summary.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-summary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAC5D,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAQjC,MAAM,CAAC,MAAM,mBAAmB,GAAS;IACvC,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,2EAA2E;QAC3E,+DAA+D;IACjE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KACjD,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC;QACxC,GAAG,CAAC,qBAAqB,EAAE,QAAQ,CAAC;QACpC,GAAG,CAAC,qBAAqB,EAAE,QAAQ,CAAC;QACpC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC;KAChC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,IAAsB,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACxD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,+BAA+B,EAAE,WAAW,oBAAoB,EAAE,CACnE;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,8CAA8C,EAAE,WAAW,yBAAyB,iCAAiC,CACtH;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,kDAAkD,EAAE,WAAW,6BAA6B,YAAY,CACzG;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,8CAA8C,EAAE,WAAW,yBAAyB,mCAAmC,CACxH;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,aAAa,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;YACnE,CAAC;YAED,OAAO,eAAe,CAAC;gBACrB,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;gBACZ,KAAK;gBACL,SAAS;gBACT,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,oCAAoC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-agent-run-update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-agent-run-update.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-update.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,kBAAkB,EAAE,IA4ChC,CAAC"}
+{"version":3,"file":"wrm-agent-run-update.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-update.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAMtC,eAAO,MAAM,kBAAkB,EAAE,IA+ChC,CAAC"}

package/dist/tools/wrm/wrm-agent-run-update.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
 import { WRM_AGENT_RUN_SELECT } from '../../wrm/projection.js';
+import { cap } from '../../capabilities/tool-capability.js';
 export const agentRunUpdateTool = {
     name: 'wrm_agent_run_update',
     description: 'Update an agent run record (status, cost, tokens, end time, etc.). ' +
@@ -20,6 +21,9 @@ export const agentRunUpdateTool = {
         run_ended_at: z.string().nullable().optional().describe('Run end timestamp'),
         metadata: z.record(z.unknown()).nullable().optional().describe('Backend-specific metadata (JSONB)'),
     }),
+    capabilities: [
+        cap('wrm_agent_runs', 'UPDATE'),
+    ],
     handler: async (args, ctx) => {
         const { id, ...updates } = args;
         try {

package/dist/tools/wrm/wrm-agent-run-update.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-agent-run-update.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAG/D,MAAM,CAAC,MAAM,kBAAkB,GAAS;IACtC,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EACT,qEAAqE;QACrE,mFAAmF;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iFAAiF,CAAC;QAC7H,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC/E,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACjF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC9E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAC5F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACzE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACpF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACtE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACxF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACjG,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC5E,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;KACpG,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,IAA4C,CAAC;QAExE,IAAI,CAAC;YACH,MAAM,IAAI,GAAwB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnD,IAAI,KAAK,KAAK,SAAS;oBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC7C,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACrC,+BAA+B,EAAE,WAAW,oBAAoB,EAAE,EAClE,IAAI,EACJ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;YACnE,CAAC;YAED,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,+BAA+B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-agent-run-update.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-agent-run-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,kBAAkB,GAAS;IACtC,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EACT,qEAAqE;QACrE,mFAAmF;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iFAAiF,CAAC;QAC7H,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC/E,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACjF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC9E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAC5F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACzE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACpF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACtE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACxF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACjG,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC5E,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;KACpG,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC;KAChC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,IAA4C,CAAC;QAExE,IAAI,CAAC;YACH,MAAM,IAAI,GAAwB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnD,IAAI,KAAK,KAAK,SAAS;oBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC7C,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACrC,+BAA+B,EAAE,WAAW,oBAAoB,EAAE,EAClE,IAAI,EACJ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;YACnE,CAAC;YAED,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,+BAA+B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-credential-list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-credential-list.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAItC,eAAO,MAAM,kBAAkB,EAAE,IA2ChC,CAAC"}
+{"version":3,"file":"wrm-credential-list.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,kBAAkB,EAAE,IA8ChC,CAAC"}

package/dist/tools/wrm/wrm-credential-list.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, API_ERROR } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
 export const credentialListTool = {
     name: 'wrm_credential_list',
     description: 'List credentials for a worker. Optionally filter by status ' +
@@ -12,6 +13,9 @@ export const credentialListTool = {
             .optional()
             .describe('Filter by credential status (omit to return all)'),
     }),
+    capabilities: [
+        cap('wrm_worker_credentials', 'SELECT'),
+    ],
     handler: async (args, ctx) => {
         const input = args;
         try {

package/dist/tools/wrm/wrm-credential-list.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-credential-list.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxE,MAAM,CAAC,MAAM,kBAAkB,GAAS;IACtC,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,6DAA6D;QAC7D,0CAA0C;QAC1C,oFAAoF;IACtF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACpD,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;aACjD,QAAQ,EAAE;aACV,QAAQ,CAAC,kDAAkD,CAAC;KAChE,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAa;gBACtB,gBAAgB,KAAK,CAAC,SAAS,EAAE;gBACjC,gBAAgB;gBAChB,2BAA2B;gBAC3B,WAAW;aACZ,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,6FAA6F,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC/G,CAAC;YAEF,OAAO,eAAe,CACpB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChB,aAAa,EAAE,CAAC,CAAC,EAAE;gBACnB,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,+BAA+B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-credential-list.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,kBAAkB,GAAS;IACtC,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,6DAA6D;QAC7D,0CAA0C;QAC1C,oFAAoF;IACtF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACpD,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;aACjD,QAAQ,EAAE;aACV,QAAQ,CAAC,kDAAkD,CAAC;KAChE,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,wBAAwB,EAAE,QAAQ,CAAC;KACxC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAa;gBACtB,gBAAgB,KAAK,CAAC,SAAS,EAAE;gBACjC,gBAAgB;gBAChB,2BAA2B;gBAC3B,WAAW;aACZ,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,6FAA6F,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC/G,CAAC;YAEF,OAAO,eAAe,CACpB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChB,aAAa,EAAE,CAAC,CAAC,EAAE;gBACnB,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,+BAA+B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-credential-request-create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-credential-request-create.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-request-create.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,2BAA2B,EAAE,IAoHzC,CAAC"}
+{"version":3,"file":"wrm-credential-request-create.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-request-create.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAMtC,eAAO,MAAM,2BAA2B,EAAE,IAiIzC,CAAC"}

package/dist/tools/wrm/wrm-credential-request-create.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, WRM_NOT_FOUND, WRM_VALIDATION, API_ERROR } from '../types.js';
 import { WRM_WORKER_SELECT } from '../../wrm/projection.js';
+import { cap } from '../../capabilities/tool-capability.js';
 export const credentialRequestCreateTool = {
     name: 'wrm_credential_request_create',
     description: 'Creates a credential request for an agent worker. Builds an Access Application (AA), ' +
@@ -18,6 +19,19 @@ export const credentialRequestCreateTool = {
         ttl_seconds: z.number().optional().describe('Credential TTL in seconds (default 3600)'),
         work_item_id: z.string().optional().describe('UUID of the related PPM work item (optional)'),
     }),
+    capabilities: [
+        cap('wrm_workers', 'SELECT'),
+        cap('dsm_access_application_users', 'INSERT'),
+        cap('dsm_access_applications', 'INSERT'),
+        cap('wrm_credential_requests', 'INSERT'),
+        cap('wrm_worker_credentials', 'INSERT'),
+        // NOTE: Step 6 also POSTs /db/v1/fnd_notifications, but that call is
+        // fire-and-forget and explicitly non-fatal. Declaring it as a hard
+        // requirement hides this whole tool from callers who hold every
+        // permission it actually needs, so it is registered as an optional
+        // endpoint in capability-completeness.test.ts instead of declared
+        // here. See OPTIONAL_ENDPOINTS there for the rationale.
+    ],
     handler: async (args, ctx) => {
         const input = args;
         try {

package/dist/tools/wrm/wrm-credential-request-create.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-credential-request-create.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-request-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEvG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,CAAC,MAAM,2BAA2B,GAAS;IAC/C,IAAI,EAAE,+BAA+B;IACrC,WAAW,EACT,uFAAuF;QACvF,gFAAgF;QAChF,iFAAiF;QACjF,+CAA+C;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QAC/D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;QAClG,eAAe,EAAE,CAAC;aACf,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;aACrE,QAAQ,CAAC,oCAAoC,CAAC;QACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;QACxF,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;QAC9F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACvF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;KAC7F,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,IAAI,CAAC;YACH,mEAAmE;YACnE,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACrC,4BAA4B,KAAK,CAAC,SAAS,WAAW,iBAAiB,EAAE,CAC1E,CAAC;YACF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrC,OAAO,aAAa,CAAC,aAAa,EAAE,UAAU,KAAK,CAAC,SAAS,YAAY,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,aAAa,CAClB,cAAc,EACd,UAAU,KAAK,CAAC,SAAS,mCAAmC;oBAC1D,6EAA6E,CAChF,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC;YACtC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAElE,uEAAuE;YACvE,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACxC,0CAA0C,EAC1C;gBACE,IAAI,EAAE,uBAAuB,KAAK,CAAC,eAAe,EAAE;gBACpD,WAAW,EAAE,KAAK,CAAC,OAAO;aAC3B,EACD,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YACF,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;YAEvC,gDAAgD;YAChD,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACtB,qCAAqC,EACrC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EACxC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,2FAA2F;YAC3F,MAAM,QAAQ,GAAwB;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,eAAe,EAAE,EAAE;gBACnB,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,SAAS;gBACjB,eAAe,EAAE;oBACf,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;iBACzC;aACF,CAAC;YACF,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAC1C,yCAAyC,EACzC,QAAQ,EACR,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YACF,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;YAEjD,8DAA8D;YAC9D,MAAM,OAAO,GAAwB;gBACnC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,sBAAsB,EAAE,KAAK,CAAC,oBAAoB;gBAClD,KAAK,EAAE,IAAI;gBACX,aAAa,EAAE,YAAY;gBAC3B,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EAAE,GAAG;gBAChB,MAAM,EAAE,SAAS;aAClB,CAAC;YACF,IAAI,KAAK,CAAC,YAAY;gBAAE,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;YAElE,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACzC,0CAA0C,EAC1C,OAAO,EACP,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YACF,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;YAE7C,4EAA4E;YAC5E,GAAG,CAAC,SAAS;iBACV,IAAI,CAAC,0BAA0B,EAAE;gBAChC,OAAO,EAAE,KAAK,CAAC,oBAAoB;gBACnC,iBAAiB,EAAE,oBAAoB;gBACvC,KAAK,EAAE,uBAAuB,KAAK,CAAC,eAAe,EAAE;gBACrD,OAAO,EAAE,6CAA6C,KAAK,CAAC,eAAe,eAAe,KAAK,CAAC,OAAO,EAAE;gBACzG,QAAQ,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE;aAC9E,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAE1B,OAAO,eAAe,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,wCAAwC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-credential-request-create.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-request-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEvG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,2BAA2B,GAAS;IAC/C,IAAI,EAAE,+BAA+B;IACrC,WAAW,EACT,uFAAuF;QACvF,gFAAgF;QAChF,iFAAiF;QACjF,+CAA+C;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QAC/D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;QAClG,eAAe,EAAE,CAAC;aACf,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;aACrE,QAAQ,CAAC,oCAAoC,CAAC;QACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;QACxF,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;QAC9F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACvF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;KAC7F,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC;QAC5B,GAAG,CAAC,8BAA8B,EAAE,QAAQ,CAAC;QAC7C,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC;QACxC,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC;QACxC,GAAG,CAAC,wBAAwB,EAAE,QAAQ,CAAC;QACvC,qEAAqE;QACrE,mEAAmE;QACnE,gEAAgE;QAChE,mEAAmE;QACnE,kEAAkE;QAClE,wDAAwD;KACzD;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,IAAI,CAAC;YACH,mEAAmE;YACnE,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACrC,4BAA4B,KAAK,CAAC,SAAS,WAAW,iBAAiB,EAAE,CAC1E,CAAC;YACF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrC,OAAO,aAAa,CAAC,aAAa,EAAE,UAAU,KAAK,CAAC,SAAS,YAAY,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,aAAa,CAClB,cAAc,EACd,UAAU,KAAK,CAAC,SAAS,mCAAmC;oBAC1D,6EAA6E,CAChF,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC;YACtC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAElE,uEAAuE;YACvE,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACxC,0CAA0C,EAC1C;gBACE,IAAI,EAAE,uBAAuB,KAAK,CAAC,eAAe,EAAE;gBACpD,WAAW,EAAE,KAAK,CAAC,OAAO;aAC3B,EACD,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YACF,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;YAEvC,gDAAgD;YAChD,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACtB,qCAAqC,EACrC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EACxC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,2FAA2F;YAC3F,MAAM,QAAQ,GAAwB;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,eAAe,EAAE,EAAE;gBACnB,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,SAAS;gBACjB,eAAe,EAAE;oBACf,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;iBACzC;aACF,CAAC;YACF,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAC1C,yCAAyC,EACzC,QAAQ,EACR,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YACF,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;YAEjD,8DAA8D;YAC9D,MAAM,OAAO,GAAwB;gBACnC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,sBAAsB,EAAE,KAAK,CAAC,oBAAoB;gBAClD,KAAK,EAAE,IAAI;gBACX,aAAa,EAAE,YAAY;gBAC3B,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EAAE,GAAG;gBAChB,MAAM,EAAE,SAAS;aAClB,CAAC;YACF,IAAI,KAAK,CAAC,YAAY;gBAAE,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;YAElE,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACzC,0CAA0C,EAC1C,OAAO,EACP,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YACF,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;YAE7C,4EAA4E;YAC5E,GAAG,CAAC,SAAS;iBACV,IAAI,CAAC,0BAA0B,EAAE;gBAChC,OAAO,EAAE,KAAK,CAAC,oBAAoB;gBACnC,iBAAiB,EAAE,oBAAoB;gBACvC,KAAK,EAAE,uBAAuB,KAAK,CAAC,eAAe,EAAE;gBACrD,OAAO,EAAE,6CAA6C,KAAK,CAAC,eAAe,eAAe,KAAK,CAAC,OAAO,EAAE;gBACzG,QAAQ,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE;aAC9E,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAE1B,OAAO,eAAe,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,wCAAwC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-credential-request-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-credential-request-status.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-request-status.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAItC,eAAO,MAAM,2BAA2B,EAAE,IAuCzC,CAAC"}
+{"version":3,"file":"wrm-credential-request-status.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-request-status.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,2BAA2B,EAAE,IA2CzC,CAAC"}

package/dist/tools/wrm/wrm-credential-request-status.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
 export const credentialRequestStatusTool = {
     name: 'wrm_credential_request_status',
     description: 'Check the status of a credential request. ' +
@@ -8,6 +9,10 @@ export const credentialRequestStatusTool = {
     inputSchema: z.object({
         request_id: z.string().describe('UUID of the credential request'),
     }),
+    capabilities: [
+        cap('wrm_credential_requests', 'SELECT'),
+        cap('wrm_worker_credentials', 'SELECT'),
+    ],
     handler: async (args, ctx) => {
         const { request_id } = args;
         try {

package/dist/tools/wrm/wrm-credential-request-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-credential-request-status.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-request-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGvF,MAAM,CAAC,MAAM,2BAA2B,GAAS;IAC/C,IAAI,EAAE,+BAA+B;IACrC,WAAW,EACT,4CAA4C;QAC5C,oEAAoE;QACpE,4DAA4D;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;KAClE,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,UAAU,EAAE,GAAG,IAA8B,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,wCAAwC,UAAU,wCAAwC,CAC3F,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,sBAAsB,UAAU,YAAY,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAErB,IAAI,SAAS,GAAkB,IAAI,CAAC;YACpC,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACjD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,uCAAuC,GAAG,CAAC,aAAa,oBAAoB,CAC7E,CAAC;gBACF,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;gBAClC,CAAC;YACH,CAAC;YAED,OAAO,eAAe,CAAC;gBACrB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;gBACxC,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,4CAA4C,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-credential-request-status.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-request-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEvF,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,2BAA2B,GAAS;IAC/C,IAAI,EAAE,+BAA+B;IACrC,WAAW,EACT,4CAA4C;QAC5C,oEAAoE;QACpE,4DAA4D;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;KAClE,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC;QACxC,GAAG,CAAC,wBAAwB,EAAE,QAAQ,CAAC;KACxC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,UAAU,EAAE,GAAG,IAA8B,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,wCAAwC,UAAU,wCAAwC,CAC3F,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,sBAAsB,UAAU,YAAY,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAErB,IAAI,SAAS,GAAkB,IAAI,CAAC;YACpC,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACjD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,uCAAuC,GAAG,CAAC,aAAa,oBAAoB,CAC7E,CAAC;gBACF,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;gBAClC,CAAC;YACH,CAAC;YAED,OAAO,eAAe,CAAC;gBACrB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;gBACxC,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,4CAA4C,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-credential-retrieve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-credential-retrieve.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-retrieve.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,sBAAsB,EAAE,IAsCpC,CAAC"}
+{"version":3,"file":"wrm-credential-retrieve.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-retrieve.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAMtC,eAAO,MAAM,sBAAsB,EAAE,IAyCpC,CAAC"}

package/dist/tools/wrm/wrm-credential-retrieve.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
 import { WRM_WORKER_CREDENTIAL_SELECT } from '../../wrm/projection.js';
+import { cap } from '../../capabilities/tool-capability.js';
 export const credentialRetrieveTool = {
     name: 'wrm_credential_retrieve',
     description: 'Retrieve an encrypted credential for a worker. ' +
@@ -10,6 +11,9 @@ export const credentialRetrieveTool = {
         worker_id: z.string().describe('UUID of the worker'),
         credential_name: z.string().describe('Name of the credential to retrieve (e.g. "github_api_token")'),
     }),
+    capabilities: [
+        cap('wrm_worker_credentials', 'SELECT'),
+    ],
     handler: async (args, ctx) => {
         const { worker_id, credential_name } = args;
         try {

package/dist/tools/wrm/wrm-credential-retrieve.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-credential-retrieve.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-retrieve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAEvE,MAAM,CAAC,MAAM,sBAAsB,GAAS;IAC1C,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EACT,iDAAiD;QACjD,8DAA8D;QAC9D,sFAAsF;IACxF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACpD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;KACrG,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,IAAsD,CAAC;QAC9F,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,+BAA+B;gBAC7B,iBAAiB,SAAS,EAAE;gBAC5B,uBAAuB,eAAe,EAAE;gBACxC,iBAAiB;gBACjB,WAAW,4BAA4B,EAAE;gBACzC,kCAAkC,CACrC,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAClB,aAAa,EACb,eAAe,eAAe,0BAA0B,SAAS,EAAE,CACpE,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,OAAO,eAAe,CAAC;gBACrB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-credential-retrieve.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-retrieve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,sBAAsB,GAAS;IAC1C,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EACT,iDAAiD;QACjD,8DAA8D;QAC9D,sFAAsF;IACxF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACpD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;KACrG,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,wBAAwB,EAAE,QAAQ,CAAC;KACxC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,IAAsD,CAAC;QAC9F,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,+BAA+B;gBAC7B,iBAAiB,SAAS,EAAE;gBAC5B,uBAAuB,eAAe,EAAE;gBACxC,iBAAiB;gBACjB,WAAW,4BAA4B,EAAE;gBACzC,kCAAkC,CACrC,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAClB,aAAa,EACb,eAAe,eAAe,0BAA0B,SAAS,EAAE,CACpE,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,OAAO,eAAe,CAAC;gBACrB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-credential-revoke.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-credential-revoke.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-revoke.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAItC,eAAO,MAAM,oBAAoB,EAAE,IAgDlC,CAAC"}
+{"version":3,"file":"wrm-credential-revoke.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-revoke.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,oBAAoB,EAAE,IAsDlC,CAAC"}

package/dist/tools/wrm/wrm-credential-revoke.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
 export const credentialRevokeTool = {
     name: 'wrm_credential_revoke',
     description: 'Revoke a credential — marks it as REVOKED, deactivates the source Access Application, ' +
@@ -7,6 +8,12 @@ export const credentialRevokeTool = {
     inputSchema: z.object({
         credential_id: z.string().describe('UUID of the credential to revoke'),
     }),
+    capabilities: [
+        cap('wrm_worker_credentials', 'SELECT'),
+        cap('dsm_access_applications', 'UPDATE'),
+        cap('wrm_credential_requests', 'UPDATE'),
+        cap('wrm_worker_credentials', 'UPDATE'),
+    ],
     handler: async (args, ctx) => {
         const { credential_id } = args;
         try {

package/dist/tools/wrm/wrm-credential-revoke.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-credential-revoke.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-revoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGvF,MAAM,CAAC,MAAM,oBAAoB,GAAS;IACxC,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,wFAAwF;QACxF,8DAA8D;IAChE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;KACvE,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,aAAa,EAAE,GAAG,IAAiC,CAAC;QAC5D,IAAI,CAAC;YACH,+CAA+C;YAC/C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,uCAAuC,aAAa,uCAAuC,CAC5F,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,cAAc,aAAa,YAAY,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAEtB,qCAAqC;YACrC,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACvB,uCAAuC,aAAa,EAAE,EACtD,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,EACpC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAC1C,CAAC;YAEF,2EAA2E;YAC3E,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACvB,wCAAwC,IAAI,CAAC,YAAY,EAAE,EAC3D,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAC1C,CAAC;YACJ,CAAC;YAED,2DAA2D;YAC3D,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACvB,mDAAmD,aAAa,6BAA6B,EAC7F,EAAE,MAAM,EAAE,WAAW,EAAE,EACvB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAC1C,CAAC;YAEF,OAAO,eAAe,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-credential-revoke.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-credential-revoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEvF,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,oBAAoB,GAAS;IACxC,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,wFAAwF;QACxF,8DAA8D;IAChE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;KACvE,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,wBAAwB,EAAE,QAAQ,CAAC;QACvC,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC;QACxC,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC;QACxC,GAAG,CAAC,wBAAwB,EAAE,QAAQ,CAAC;KACxC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,aAAa,EAAE,GAAG,IAAiC,CAAC;QAC5D,IAAI,CAAC;YACH,+CAA+C;YAC/C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,uCAAuC,aAAa,uCAAuC,CAC5F,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,cAAc,aAAa,YAAY,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAEtB,qCAAqC;YACrC,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACvB,uCAAuC,aAAa,EAAE,EACtD,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,EACpC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAC1C,CAAC;YAEF,2EAA2E;YAC3E,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACvB,wCAAwC,IAAI,CAAC,YAAY,EAAE,EAC3D,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAC1C,CAAC;YACJ,CAAC;YAED,2DAA2D;YAC3D,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACvB,mDAAmD,aAAa,6BAA6B,EAC7F,EAAE,MAAM,EAAE,WAAW,EAAE,EACvB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAC1C,CAAC;YAEF,OAAO,eAAe,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-domain-create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-domain-create.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-create.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,gBAAgB,EAAE,IAiC9B,CAAC"}
+{"version":3,"file":"wrm-domain-create.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-create.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAMtC,eAAO,MAAM,gBAAgB,EAAE,IAoC9B,CAAC"}

package/dist/tools/wrm/wrm-domain-create.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, API_ERROR } from '../types.js';
 import { WRM_DOMAIN_SELECT } from '../../wrm/projection.js';
+import { cap } from '../../capabilities/tool-capability.js';
 export const domainCreateTool = {
     name: 'wrm_domain_create',
     description: 'Create a WRM domain. Domains anchor domain-scoped worker role assignments and memories.',
@@ -11,6 +12,9 @@ export const domainCreateTool = {
         ppm_portfolio_id: z.string().optional().describe('Optional UUID of the linked PPM portfolio'),
         metadata: z.record(z.unknown()).optional().describe('Optional JSONB metadata'),
     }),
+    capabilities: [
+        cap('wrm_domains', 'INSERT'),
+    ],
     handler: async (args, ctx) => {
         const input = args;
         try {

package/dist/tools/wrm/wrm-domain-create.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-domain-create.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAG5D,MAAM,CAAC,MAAM,gBAAgB,GAAS;IACpC,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,yFAAyF;IACtG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;QACvF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QACtE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QACjF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC7F,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;KAC/E,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,GAAwB;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC;YAEF,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;gBAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAC1E,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS;gBAAE,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;YACzF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;gBAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAEjE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACpC,6BAA6B,iBAAiB,EAAE,EAChD,IAAI,EACJ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-domain-create.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,gBAAgB,GAAS;IACpC,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,yFAAyF;IACtG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;QACvF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QACtE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QACjF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC7F,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;KAC/E,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC;KAC7B;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,GAAwB;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC;YAEF,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;gBAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAC1E,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS;gBAAE,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;YACzF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;gBAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAEjE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACpC,6BAA6B,iBAAiB,EAAE,EAChD,IAAI,EACJ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-domain-get.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-domain-get.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-get.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,aAAa,EAAE,IAoB3B,CAAC"}
+{"version":3,"file":"wrm-domain-get.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-get.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAMtC,eAAO,MAAM,aAAa,EAAE,IAuB3B,CAAC"}

package/dist/tools/wrm/wrm-domain-get.js

@@ -1,12 +1,16 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
 import { WRM_DOMAIN_SELECT } from '../../wrm/projection.js';
+import { cap } from '../../capabilities/tool-capability.js';
 export const domainGetTool = {
     name: 'wrm_domain_get',
     description: 'Get a single WRM domain by ID',
     inputSchema: z.object({
         id: z.string().describe('UUID of the WRM domain'),
     }),
+    capabilities: [
+        cap('wrm_domains', 'SELECT'),
+    ],
     handler: async (args, ctx) => {
         const { id } = args;
         try {

package/dist/tools/wrm/wrm-domain-get.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-domain-get.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAG5D,MAAM,CAAC,MAAM,aAAa,GAAS;IACjC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,+BAA+B;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;KAClD,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,IAAsB,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,4BAA4B,EAAE,WAAW,iBAAiB,EAAE,CAC7D,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,6BAA6B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-domain-get.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,aAAa,GAAS;IACjC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,+BAA+B;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;KAClD,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC;KAC7B;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,IAAsB,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,4BAA4B,EAAE,WAAW,iBAAiB,EAAE,CAC7D,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,6BAA6B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-domain-list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-domain-list.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,cAAc,EAAE,IAiD5B,CAAC"}
+{"version":3,"file":"wrm-domain-list.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAMtC,eAAO,MAAM,cAAc,EAAE,IAoD5B,CAAC"}

package/dist/tools/wrm/wrm-domain-list.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, API_ERROR } from '../types.js';
 import { WRM_DOMAIN_SELECT } from '../../wrm/projection.js';
+import { cap } from '../../capabilities/tool-capability.js';
 export const domainListTool = {
     name: 'wrm_domain_list',
     description: 'List/filter WRM domains',
@@ -11,6 +12,9 @@ export const domainListTool = {
         offset: z.number().optional().describe('Offset for pagination'),
         order_by: z.string().optional().describe('PostgREST order clause (default: domain_code.asc)'),
     }),
+    capabilities: [
+        cap('wrm_domains', 'SELECT'),
+    ],
     handler: async (args, ctx) => {
         const input = args;
         try {

package/dist/tools/wrm/wrm-domain-list.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-domain-list.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAG5D,MAAM,CAAC,MAAM,cAAc,GAAS;IAClC,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,yBAAyB;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QACpE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QAC/E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAC/D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;KAC9F,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAa,EAAE,CAAC;YAE3B,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;YAElC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YAE7B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACvC,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,QAAQ,IAAI,iBAAiB,EAAE,CAAC,CAAC;YAE3D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,6BAA6B,iBAAiB,IAAI,KAAK,EAAE,EACzD,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CACvC,CAAC;YAEF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YAEjC,OAAO,eAAe,CAAC;gBACrB,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,WAAW,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,+BAA+B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-domain-list.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,cAAc,GAAS;IAClC,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,yBAAyB;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QACpE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QAC/E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAC/D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;KAC9F,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC;KAC7B;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAa,EAAE,CAAC;YAE3B,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;YAElC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YAE7B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACvC,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,QAAQ,IAAI,iBAAiB,EAAE,CAAC,CAAC;YAE3D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,6BAA6B,iBAAiB,IAAI,KAAK,EAAE,EACzD,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CACvC,CAAC;YAEF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YAEjC,OAAO,eAAe,CAAC;gBACrB,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,WAAW,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,+BAA+B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-domain-repository-create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-domain-repository-create.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-repository-create.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAStC,eAAO,MAAM,0BAA0B,EAAE,IA8ExC,CAAC"}
+{"version":3,"file":"wrm-domain-repository-create.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-repository-create.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAUtC,eAAO,MAAM,0BAA0B,EAAE,IAiFxC,CAAC"}

package/dist/tools/wrm/wrm-domain-repository-create.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, WRM_VALIDATION, API_ERROR } from '../types.js';
 import { WRM_DOMAIN_REPOSITORY_SELECT } from '../../wrm/projection.js';
+import { cap } from '../../capabilities/tool-capability.js';
 const RELATIONSHIP_TYPE = z.enum(['CORE', 'CONTRIBUTING', 'DOCUMENTATION', 'TESTING']);
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 export const domainRepositoryCreateTool = {
@@ -24,6 +25,9 @@ export const domainRepositoryCreateTool = {
             .optional()
             .describe('Scan this repository for open MRs not linked to an active domain work item or wrm_agent_runs.mr_url (default false). Exceptional — leave false unless activity legitimately escapes the PPM lifecycle.'),
     }),
+    capabilities: [
+        cap('wrm_domain_repositories', 'INSERT'),
+    ],
     handler: async (args, ctx) => {
         const input = args;
         for (const field of ['domain_id', 'external_system_id']) {

package/dist/tools/wrm/wrm-domain-repository-create.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-domain-repository-create.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-repository-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAGvE,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;AAEvF,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAElF,MAAM,CAAC,MAAM,0BAA0B,GAAS;IAC9C,IAAI,EAAE,8BAA8B;IACpC,WAAW,EACT,waAAwa;IAC1a,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QAChF,kBAAkB,EAAE,CAAC;aAClB,MAAM,EAAE;aACR,QAAQ,CAAC,8FAA8F,CAAC;QAC3G,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,CAC3C,wJAAwJ,CACzJ;QACD,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,QAAQ,CAAC,0EAA0E,CAAC;QACvF,sBAAsB,EAAE,CAAC;aACtB,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CACP,wJAAwJ,CACzJ;QACH,oBAAoB,EAAE,CAAC;aACpB,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CACP,wMAAwM,CACzM;KACJ,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAE1C,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,oBAAoB,CAAU,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtD,OAAO,aAAa,CAClB,cAAc,EACd,GAAG,KAAK,uBAAuB,CAChC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/E,OAAO,aAAa,CAClB,cAAc,EACd,gGAAgG,CACjG,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAwB;gBAChC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC;YAEF,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS;gBAAE,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,CAAC;YAC3G,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS;gBAAE,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;YAErG,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACpC,yCAAyC,4BAA4B,EAAE,EACvE,IAAI,EACJ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;YAC7C,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,OAAO,aAAa,CAClB,cAAc,EACd,4DAA4D,KAAK,CAAC,SAAS,2BAA2B,KAAK,CAAC,kBAAkB,gEAAgE,EAC9L,EAAE,aAAa,EAAE,OAAO,EAAE,CAC3B,CAAC;YACJ,CAAC;YACD,OAAO,aAAa,CAAC,SAAS,EAAE,2CAA2C,OAAO,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-domain-repository-create.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-repository-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAEvE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;AAEvF,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAElF,MAAM,CAAC,MAAM,0BAA0B,GAAS;IAC9C,IAAI,EAAE,8BAA8B;IACpC,WAAW,EACT,waAAwa;IAC1a,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QAChF,kBAAkB,EAAE,CAAC;aAClB,MAAM,EAAE;aACR,QAAQ,CAAC,8FAA8F,CAAC;QAC3G,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,CAC3C,wJAAwJ,CACzJ;QACD,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,QAAQ,CAAC,0EAA0E,CAAC;QACvF,sBAAsB,EAAE,CAAC;aACtB,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CACP,wJAAwJ,CACzJ;QACH,oBAAoB,EAAE,CAAC;aACpB,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CACP,wMAAwM,CACzM;KACJ,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC;KACzC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAE1C,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,oBAAoB,CAAU,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtD,OAAO,aAAa,CAClB,cAAc,EACd,GAAG,KAAK,uBAAuB,CAChC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/E,OAAO,aAAa,CAClB,cAAc,EACd,gGAAgG,CACjG,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAwB;gBAChC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC;YAEF,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS;gBAAE,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,CAAC;YAC3G,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS;gBAAE,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;YAErG,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACpC,yCAAyC,4BAA4B,EAAE,EACvE,IAAI,EACJ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CACjD,CAAC;YAEF,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;YAC7C,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,OAAO,aAAa,CAClB,cAAc,EACd,4DAA4D,KAAK,CAAC,SAAS,2BAA2B,KAAK,CAAC,kBAAkB,gEAAgE,EAC9L,EAAE,aAAa,EAAE,OAAO,EAAE,CAC3B,CAAC;YACJ,CAAC;YACD,OAAO,aAAa,CAAC,SAAS,EAAE,2CAA2C,OAAO,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-domain-repository-get.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-domain-repository-get.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-repository-get.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,eAAO,MAAM,uBAAuB,EAAE,IAqBrC,CAAC"}
+{"version":3,"file":"wrm-domain-repository-get.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-repository-get.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAMtC,eAAO,MAAM,uBAAuB,EAAE,IAwBrC,CAAC"}

package/dist/tools/wrm/wrm-domain-repository-get.js

@@ -1,12 +1,16 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
 import { WRM_DOMAIN_REPOSITORY_SELECT } from '../../wrm/projection.js';
+import { cap } from '../../capabilities/tool-capability.js';
 export const domainRepositoryGetTool = {
     name: 'wrm_domain_repository_get',
     description: 'Get a single WRM domain-repository relationship by ID. Response embeds the canonical wrm_domains(domain_code) and ppm_external_systems(source_identifier, source_name, source_url) via PostgREST resource embedding.',
     inputSchema: z.object({
         id: z.string().describe('UUID of the WRM domain-repository relationship'),
     }),
+    capabilities: [
+        cap('wrm_domain_repositories', 'SELECT'),
+    ],
     handler: async (args, ctx) => {
         const { id } = args;
         try {

package/dist/tools/wrm/wrm-domain-repository-get.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-domain-repository-get.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-repository-get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAGvE,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACT,sNAAsN;IACxN,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;KAC1E,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,IAAsB,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,wCAAwC,EAAE,WAAW,4BAA4B,EAAE,CACpF,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,yBAAyB,EAAE,YAAY,CAAC,CAAC;YAC/E,CAAC;YACD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,wCAAwC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-domain-repository-get.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-repository-get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAEvE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACT,sNAAsN;IACxN,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;KAC1E,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC;KACzC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,IAAsB,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,wCAAwC,EAAE,WAAW,4BAA4B,EAAE,CACpF,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,aAAa,EAAE,yBAAyB,EAAE,YAAY,CAAC,CAAC;YAC/E,CAAC;YACD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,wCAAwC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-domain-repository-list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-domain-repository-list.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-repository-list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAOtC,eAAO,MAAM,wBAAwB,EAAE,IAwEtC,CAAC"}
+{"version":3,"file":"wrm-domain-repository-list.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-domain-repository-list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAQtC,eAAO,MAAM,wBAAwB,EAAE,IA2EtC,CAAC"}

package/dist/tools/wrm/wrm-domain-repository-list.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, API_ERROR } from '../types.js';
 import { WRM_DOMAIN_REPOSITORY_SELECT } from '../../wrm/projection.js';
+import { cap } from '../../capabilities/tool-capability.js';
 const RELATIONSHIP_TYPE = z.enum(['CORE', 'CONTRIBUTING', 'DOCUMENTATION', 'TESTING']);
 export const domainRepositoryListTool = {
     name: 'wrm_domain_repository_list',
@@ -22,6 +23,9 @@ export const domainRepositoryListTool = {
         offset: z.number().optional().describe('Offset for pagination'),
         order_by: z.string().optional().describe('PostgREST order clause (default: domain_id.asc)'),
     }),
+    capabilities: [
+        cap('wrm_domain_repositories', 'SELECT'),
+    ],
     handler: async (args, ctx) => {
         const input = args;
         try {