@rubytech/create-realagent-code 0.1.316 → 0.1.320

package/payload/platform/plugins/memory/mcp/dist/index.js

@@ -59,6 +59,7 @@ import { memoryCompiledTruthHistory } from "./tools/memory-compiled-truth-histor
 import { getSession, closeDriver } from "./lib/neo4j.js";
 import { embed } from "./lib/embeddings.js";
 import { notTrashed } from "../../../../lib/graph-trash/dist/index.js";
+import { lifelineTool } from "../../../../lib/mcp-lifeline/dist/index.js";
 const server = new McpServer({
     name: "maxy-memory",
     version: "0.1.0",
@@ -406,7 +407,7 @@ eagerTool(server, "memory-lookup-by-name", "Deterministic by-name entity lookup.
 // so the conversation-archive-enrich skill can drive the dispatched
 // specialist to read each chunk and emit claims in-turn. Read-only.
 // ---------------------------------------------------------------------------
-server.tool("conversation-archive-list-chunks", "Page through the :Section chunks of one named :ConversationArchive and return each chunk's elementId, ordered index, summary, and full body. The conversation-archive-enrich skill calls this per page, then prompts the dispatched specialist to read each chunk's body in-turn and emit claims; the skill hands those claims back to `conversation-archive-derive-insights` for per-kind cypher emission. Read-only.", {
+lifelineTool(server, "conversation-archive-list-chunks", "Page through the :Section chunks of one named :ConversationArchive and return each chunk's elementId, ordered index, summary, and full body. The conversation-archive-enrich skill calls this per page, then prompts the dispatched specialist to read each chunk's body in-turn and emit claims; the skill hands those claims back to `conversation-archive-derive-insights` for per-kind cypher emission. Read-only.", {
     archiveElementId: z
         .string()
         .describe("elementId of the :ConversationArchive parent (Task 397 — keyed on conversationIdentity) the operator named (required)."),
@@ -490,7 +491,7 @@ const claimSchema = z.object({
         .optional()
         .describe("Kind-specific structured fields (taskTitle/taskDueHint for task; preferenceCategory/preferenceKey/preferenceValue for preference; relationshipType for observed-relationship)."),
 });
-server.tool("conversation-archive-derive-insights", "Convert one chunk's agent-produced claims into operator-facing claim proposals (mention, task, preference, observed-relationship). The conversation-archive-enrich skill reads chunk bodies via `conversation-archive-list-chunks`, drives the dispatched specialist to emit claims in-turn, and passes them here for per-kind cypher emission. Applies the durable rejection sidecar so already-triaged claims do not re-surface. Read-only: the per-row operator gate runs in the skill, this tool never writes.", {
+lifelineTool(server, "conversation-archive-derive-insights", "Convert one chunk's agent-produced claims into operator-facing claim proposals (mention, task, preference, observed-relationship). The conversation-archive-enrich skill reads chunk bodies via `conversation-archive-list-chunks`, drives the dispatched specialist to emit claims in-turn, and passes them here for per-kind cypher emission. Applies the durable rejection sidecar so already-triaged claims do not re-surface. Read-only: the per-row operator gate runs in the skill, this tool never writes.", {
     archiveElementId: z
         .string()
         .describe("elementId of the :ConversationArchive parent (Task 397 — keyed on conversationIdentity) the operator named (required)."),
@@ -565,7 +566,7 @@ process.stderr.write("[memory-mcp] registered tool=conversation-archive-derive-i
 //   undo   — drop matching line via atomic-rename (called after a `wire`
 //            so a later wire of a once-rejected key cleans up its rejection).
 // ---------------------------------------------------------------------------
-server.tool("conversation-archive-enrich-rejection", "Record or undo a per-row rejection from conversation-archive-enrich. Writes a sidecar JSONL keyed on (chunkElementId, kind, contentHash). Call with mode='record' on operator `reject`; call with mode='undo' after a successful `wire` so a later wire of a once-rejected key clears its rejection. Idempotent: duplicate records are no-ops.", {
+lifelineTool(server, "conversation-archive-enrich-rejection", "Record or undo a per-row rejection from conversation-archive-enrich. Writes a sidecar JSONL keyed on (chunkElementId, kind, contentHash). Call with mode='record' on operator `reject`; call with mode='undo' after a successful `wire` so a later wire of a once-rejected key clears its rejection. Idempotent: duplicate records are no-ops.", {
     archiveElementId: z
         .string()
         .describe("elementId of the conversation-document parent (carried on each line for diagnostics)."),
@@ -888,7 +889,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("memory-update-by-name", "Update an existing node addressed by (label, name, accountId) instead of elementId. Use this as a repair surface when memory-search cannot return an elementId for a node you know exists by name — typically an ingest-created :Organization the search route is failing to surface. Resolves the unique node matching the tuple, then delegates to memory-update (embedding refresh, write gates, compiled-truth refusal, and provenance stamping all carry over). Rejects loudly on zero matches (the row does not exist) and on two-or-more matches (ambiguous — the rejection lists candidate elementIds so you can pick one and call memory-update directly). Trashed nodes are excluded from the lookup. For one-off updates where you already have the elementId from a successful memory-search, prefer memory-update — this tool is the fallback when search hides the node.", {
+    lifelineTool(server, "memory-update-by-name", "Update an existing node addressed by (label, name, accountId) instead of elementId. Use this as a repair surface when memory-search cannot return an elementId for a node you know exists by name — typically an ingest-created :Organization the search route is failing to surface. Resolves the unique node matching the tuple, then delegates to memory-update (embedding refresh, write gates, compiled-truth refusal, and provenance stamping all carry over). Rejects loudly on zero matches (the row does not exist) and on two-or-more matches (ambiguous — the rejection lists candidate elementIds so you can pick one and call memory-update directly). Trashed nodes are excluded from the lookup. For one-off updates where you already have the elementId from a successful memory-search, prefer memory-update — this tool is the fallback when search hides the node.", {
         label: z.string().describe("The single label to MATCH on (e.g. 'Organization', 'Person', 'Project'). Must be exactly the label carried by the target node — the tool does not iterate label variants."),
         name: z.string().describe("The exact `name` property of the target node (case-sensitive). Forbidden-property rules still apply downstream — if the label rejects `name`, use memory-update with the correct identifier instead."),
         properties: z
@@ -930,7 +931,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("memory-update", "Update properties on an existing node in the knowledge graph. Finds the node by element ID, verifies account ownership, sets the provided properties, and recomputes the embedding. To refresh `compiledTruth` / `compiledTruthPublic` on :Person / :Organization / :Concept / :Project / :LocalBusiness, dispatch the `compiled-truth-rewriter` specialist via the Task tool — admin sends the nodeId plus any `operatorHint` / `publicOperatorHint`; the specialist reads the node + 90-day timeline, computes the new summary, and writes it back via memory-update. Direct writes to compiled-truth properties via this tool are refused unless the caller is the compiled-truth-rewriter specialist (gated by MAXY_SPECIALIST env). When you only have the node's name (typically because memory-search couldn't return it), use memory-update-by-name instead.", {
+    lifelineTool(server, "memory-update", "Update properties on an existing node in the knowledge graph. Finds the node by element ID, verifies account ownership, sets the provided properties, and recomputes the embedding. To refresh `compiledTruth` / `compiledTruthPublic` on :Person / :Organization / :Concept / :Project / :LocalBusiness, dispatch the `compiled-truth-rewriter` specialist via the Task tool — admin sends the nodeId plus any `operatorHint` / `publicOperatorHint`; the specialist reads the node + 90-day timeline, computes the new summary, and writes it back via memory-update. Direct writes to compiled-truth properties via this tool are refused unless the caller is the compiled-truth-rewriter specialist (gated by MAXY_SPECIALIST env). When you only have the node's name (typically because memory-search couldn't return it), use memory-update-by-name instead.", {
         nodeId: z.string().describe("Element ID of the node to update (from memory-search results)"),
         properties: z
             .record(z.string(), z.unknown())
@@ -970,7 +971,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("memory-edge", "Create or delete a typed directed edge between two nodes that already exist in the knowledge graph. Both nodes must belong to the same account. Use action='create' to MERGE the edge (idempotent — returns {created:false} if it already exists) or action='delete' to remove it (returns {deleted:false} if already absent). relationshipType is uppercase-coerced; types starting with underscore are reserved and rejected. Properties are stamped on the edge on CREATE only.", {
+    lifelineTool(server, "memory-edge", "Create or delete a typed directed edge between two nodes that already exist in the knowledge graph. Both nodes must belong to the same account. Use action='create' to MERGE the edge (idempotent — returns {created:false} if it already exists) or action='delete' to remove it (returns {deleted:false} if already absent). relationshipType is uppercase-coerced; types starting with underscore are reserved and rejected. Properties are stamped on the edge on CREATE only.", {
         action: z.enum(["create", "delete"]).describe("'create' MERGEs the edge (idempotent); 'delete' removes it (no-op if absent)."),
         fromId: z.string().describe("elementId of the source node (from memory-search results)."),
         toId: z.string().describe("elementId of the target node (from memory-search results)."),
@@ -1127,7 +1128,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("memory-ingest-extract", "Extract text from an uploaded file and cache it server-side for memory-ingest. " +
+    lifelineTool(server, "memory-ingest-extract", "Extract text from an uploaded file and cache it server-side for memory-ingest. " +
         "Supports PDF (via pdftotext), plain text, and markdown. " +
         "Rejects CSV (structured data — use memory-write instead) and images (metadata-only). " +
         "Returns file metadata + a short preview; the full text lives in the in-process cache keyed by attachmentId. " +
@@ -1158,7 +1159,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("memory-ingest", "Write a classified document or conversation-archive session into the graph as typed nodes anchored to a subject. " +
+    lifelineTool(server, "memory-ingest", "Write a classified document or conversation-archive session into the graph as typed nodes anchored to a subject. " +
         "Two mutually-exclusive parent paths — exactly one MUST be set: " +
         "(1) **Document path** — set `attachmentId` (requires a prior memory-ingest-extract call for the text cache). MERGEs under `:KnowledgeDocument` keyed on attachmentId. The typed-section JSON in `sections` is produced by the dispatched specialist in-turn from the loaded ontology. " +
         "(2) **Conversation-archive path** — set `conversationIdentity` along with the conversation-document fields (`source`, `archiveSha256`, `archiveSourceFile`, `participantElementIds`, `lastIngestedMessageHash`, `lastIngestedMessageAt`, `sessionIndex`, optionally `archiveTitle` and `cleanupPriorChunks`). MERGEs under `:ConversationArchive` keyed on conversationIdentity. The specialist invokes this once per session prepared by `conversation-archive-ingest.sh`, advancing the cursor atomically with each session's chunks. `:Section.body` is server-sliced from the per-session turnText tempfile the bin wrote at `turnTextCachePath(conversationIdentity, archiveSha256, sessionIndex)` — the specialist emits offsets, never body text (server-sliced via per-session tempfile). " +
@@ -1453,7 +1454,7 @@ if (!readOnly) {
     // `memory/bin/conversation-archive-ingest.{mjs,sh}`. Phase-2 insight
     // derivation will operate on conversation-document :Section chunks regardless of
     // source.
-    server.tool("memory-ingest-web", "Adapter for web-content ingestion. Accepts a URL, its pre-fetched readable content " +
+    lifelineTool(server, "memory-ingest-web", "Adapter for web-content ingestion. Accepts a URL, its pre-fetched readable content " +
         "(the agent calls WebFetch first, then passes the text here), and the page's editorial title parsed from " +
         "the HTML `<title>` / `og:title`. Writes the content to a temp file and delegates to memory-ingest-extract — " +
         "caching the text under a freshly-generated attachmentId. The dispatched specialist then produces typed-section " +
@@ -1505,7 +1506,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("memory-find-candidates", "Deterministic bulk-delete selector for Conversation nodes. Returns a structured list of candidates " +
+    lifelineTool(server, "memory-find-candidates", "Deterministic bulk-delete selector for Conversation nodes. Returns a structured list of candidates " +
         "matching a fixed-name filter ('empty' = zero :PART_OF messages; 'single-assistant' = exactly one " +
         "assistant-role message) and an opaque filterToken. Pair with memory-delete(filterToken=…) — the server " +
         "re-runs the same predicate per elementId before trashing, so a stale or forged token never deletes. " +
@@ -1549,7 +1550,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("memory-node-exists", "Deterministic label-existence check for installer-seeded singleton roots. " +
+    lifelineTool(server, "memory-node-exists", "Deterministic label-existence check for installer-seeded singleton roots. " +
         "Returns { exists, elementId, labels } for a single label/accountId lookup, " +
         "bypassing the memory-search ranking stack so an installer-seeded node with " +
         "empty content properties (e.g. a freshly seeded :LocalBusiness with no name yet) " +
@@ -1573,7 +1574,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("memory-delete", "Soft-delete a single graph node by elementId. Adds the :Trashed label, preserves relationships, " +
+    lifelineTool(server, "memory-delete", "Soft-delete a single graph node by elementId. Adds the :Trashed label, preserves relationships, " +
         "and excludes the node from memory-search and any read filtered via notTrashed. For KnowledgeDocument, " +
         "cascades to linked Section and Chunk children. For Conversation, cascades to attached :PART_OF Messages " +
         ". Hard removal happens later via memory-empty-trash after the grace period (default 30 days). " +
@@ -1608,7 +1609,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("memory-restore", "Undo memory-delete on a single graph node by elementId. Removes the :Trashed label and restores " +
+    lifelineTool(server, "memory-restore", "Undo memory-delete on a single graph node by elementId. Removes the :Trashed label and restores " +
         "snapshotted unique-key properties. For KnowledgeDocument, walks HAS_SECTION/HAS_CHUNK edges to bring " +
         "trashed children back too. Fails loudly when an active node already holds a unique slot the trashed " +
         "node needs back (e.g. a fresh LocalBusiness was created while the old one was in trash) — " +
@@ -1636,7 +1637,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("memory-empty-trash", "Hard-delete trashed nodes whose trashedAt is older than the grace period (default 30 days). " +
+    lifelineTool(server, "memory-empty-trash", "Hard-delete trashed nodes whose trashedAt is older than the grace period (default 30 days). " +
         "For KnowledgeDocument candidates, also removes the on-disk attachment directory. Use dryRun=true " +
         "to preview candidates without mutating — the absence of [trash:emptied] log lines after a " +
         "[trash:empty-run] dryRun=true line is the correct-behaviour signal. Optional labels filter " +
@@ -1668,7 +1669,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("memory-list-attachments", "List stored file attachments for this account with their ingestion status. " +
+    lifelineTool(server, "memory-list-attachments", "List stored file attachments for this account with their ingestion status. " +
         "Returns original filenames, sizes, upload dates, and whether each file has been ingested " +
         "into the knowledge graph. Does not include web-ingested documents (those have no file on disk).", {}, async () => {
         if (!accountId)
@@ -1706,7 +1707,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("memory-read-attachment", "Read the content of a stored attachment from disk. Returns the full text for text/markdown files, " +
+    lifelineTool(server, "memory-read-attachment", "Read the content of a stored attachment from disk. Returns the full text for text/markdown files, " +
         "extracted text for PDFs (via pdftotext), and metadata + HTTP URL for images. " +
         "Use this to show the user what's in a file or to prepare content for editing.", {
         attachmentId: z.string().describe("UUID of the attachment to read"),
@@ -1731,7 +1732,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("memory-edit-attachment", "Edit a stored text/markdown attachment in place. Replaces the file content on disk, updates the " +
+    lifelineTool(server, "memory-edit-attachment", "Edit a stored text/markdown attachment in place. Replaces the file content on disk, updates the " +
         "metadata timestamp, and re-extracts the file for chunking (populating the extract cache). " +
         "After this call, use memory-ingest with updated summaries to sync the knowledge graph. " +
         "Only text/plain and text/markdown files are editable — PDFs and images are rejected.", {
@@ -1760,7 +1761,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("memory-rename-attachment", "Rename a stored attachment. Updates the filename in the .meta.json sidecar and the " +
+    lifelineTool(server, "memory-rename-attachment", "Rename a stored attachment. Updates the filename in the .meta.json sidecar and the " +
         "KnowledgeDocument name in Neo4j (if the file has been ingested). The file on disk " +
         "is not renamed — it uses UUID-based naming. Only the human-readable metadata changes.", {
         attachmentId: z.string().describe("UUID of the attachment to rename"),
@@ -1841,7 +1842,7 @@ if (!readOnly) {
         const agoStr = ago ? ` (${ago})` : "";
         return `${label} [${agentInfo}] · created ${createdStr} · active ${updatedStr}${agoStr} — ${opts.messageCount} messages`;
     }
-    server.tool("conversation-list", "List conversations or retrieve messages from a specific conversation. " +
+    lifelineTool(server, "conversation-list", "List conversations or retrieve messages from a specific conversation. " +
         "Without sessionId: lists all conversations with message counts, ordered by most recent activity (updatedAt DESC). " +
         "Headers show both creation time and last activity time; when they differ, the conversation was resumed. " +
         "With sessionId: returns all messages in that conversation chronologically with per-message timestamps. " +
@@ -2032,7 +2033,7 @@ if (!readOnly) {
             await dbSession.close();
         }
     });
-    server.tool("profile-update", "Create, update, or reinforce a user preference; set top-level UserProfile fields (timezone, locale, givenName, role, expertise) via profileFields; AND set operator-identity fields (email, telephone) on the operator's personal-profile Person via personFields. Person is the canonical operator-identity store; UserProfile carries preferences and behavioural state only. Supports modes: reinforce (re-observed, boost confidence), update (value changed), contradict (value contradicts prior), merge (combine overlapping preferences).", {
+    lifelineTool(server, "profile-update", "Create, update, or reinforce a user preference; set top-level UserProfile fields (timezone, locale, givenName, role, expertise) via profileFields; AND set operator-identity fields (email, telephone) on the operator's personal-profile Person via personFields. Person is the canonical operator-identity store; UserProfile carries preferences and behavioural state only. Supports modes: reinforce (re-observed, boost confidence), update (value changed), contradict (value contradicts prior), merge (combine overlapping preferences).", {
         category: z.enum(["communication", "scheduling", "decision", "workflow", "content", "interaction"])
             .describe("Preference category"),
         key: z.string().describe("Preference identifier (e.g. 'response_length', 'meeting_time')"),
@@ -2089,7 +2090,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("profile-delete", "Soft-delete a specific user preference (marks :Trashed, restorable via memory-restore within the grace period; permanently removed later by memory-empty-trash). Use when the owner says 'forget that' or 'don't remember X'. Idempotent — succeeds even if the preference doesn't exist.", {
+    lifelineTool(server, "profile-delete", "Soft-delete a specific user preference (marks :Trashed, restorable via memory-restore within the grace period; permanently removed later by memory-empty-trash). Use when the owner says 'forget that' or 'don't remember X'. Idempotent — succeeds even if the preference doesn't exist.", {
         category: z.enum(["communication", "scheduling", "decision", "workflow", "content", "interaction"])
             .describe("Preference category"),
         key: z.string().describe("Preference key to delete"),
@@ -2122,7 +2123,7 @@ if (!readOnly) {
     });
     // profile-read contains owner PII (name, role, timezone, preferences) —
     // admin-only, not exposed to the public agent.
-    server.tool("profile-read", "Read the business owner's profile and preferences. Returns preferences grouped by category (communication, scheduling, decisions, workflow, content, interaction). " +
+    lifelineTool(server, "profile-read", "Read the business owner's profile and preferences. Returns preferences grouped by category (communication, scheduling, decisions, workflow, content, interaction). " +
         "With detail=true: includes per-preference confidence scores, evidence trail (which conversations the preference was observed in), source (explicit vs behavioural), and summary statistics. " +
         "Use detail=true when the owner asks 'what do you know about me?' or when reviewing memory accuracy.", {
         detail: z.boolean().optional().describe("When true, returns per-preference confidence, source, evidence trail, and memory statistics. " +
@@ -2158,7 +2159,7 @@ if (!readOnly) {
     // :Idea nodes filtered by r.createdByAgent='database-operator'. The
     // admin agent uses this to answer "what has the brain captured today?"
     // without touching cypher. Task 439.
-    server.tool("memory-brain-capture-recent", "Read the most recent per-turn graph-pass writes for this account: entity mentions extracted from operator messages, and original-thinking :Idea nodes. " +
+    lifelineTool(server, "memory-brain-capture-recent", "Read the most recent per-turn graph-pass writes for this account: entity mentions extracted from operator messages, and original-thinking :Idea nodes. " +
         "Default window is the last 24 hours. " +
         "Use this when the operator asks 'what has the brain captured today?', 'show me recent mentions of X', or 'what ideas did I leave on the table this week?'.", {
         windowHours: z.number().int().optional().describe("Hours back from now. Default 24. Capped at 720 (30 days)."),
@@ -2192,7 +2193,7 @@ if (!readOnly) {
     // replaces the removed graph-prune autonomous rule engine whose
     // orphan-delete rule wiped 19 nodes on 2026-04-20.
     // -------------------------------------------------------------------------
-    server.tool("graph-prune-denylist-add", "Add one or more strings to the operator-curated deny-list. The list is a stored signal — no cron, no " +
+    lifelineTool(server, "graph-prune-denylist-add", "Add one or more strings to the operator-curated deny-list. The list is a stored signal — no cron, no " +
         "autonomous sweep. The admin agent reads the list and decides per case whether to null a property " +
         "via memory-update, remove a node via memory-delete, or scrub a conversation's :Memory via " +
         "conversation-memory-expunge. Use to record poisonous substrings (retired domain names, wrong " +
@@ -2221,7 +2222,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("graph-prune-denylist-remove", "Remove one or more strings from the operator-curated deny-list. Entries no longer serve as signal " +
+    lifelineTool(server, "graph-prune-denylist-remove", "Remove one or more strings from the operator-curated deny-list. Entries no longer serve as signal " +
         "for the admin agent. Any property values previously nulled via manual memory-update calls are not " +
         "restored — audit entries on each affected node remain for forensic review.", {
         values: z.array(z.string().min(1)).min(1).describe("Substring values to remove (must match exactly as previously added)."),
@@ -2246,7 +2247,7 @@ if (!readOnly) {
             };
         }
     });
-    server.tool("conversation-memory-expunge", "Remove deny-listable content from a specific conversation's :Memory nodes by manually-supplied " +
+    lifelineTool(server, "conversation-memory-expunge", "Remove deny-listable content from a specific conversation's :Memory nodes by manually-supplied " +
         "substring pattern. Targets :Memory nodes linked to the named Conversation; nulls every string property " +
         "whose value contains the pattern, with an audit entry on each affected node. The conversation transcript " +
         "(Message nodes) is immutable history and is never modified — only the derived :Memory payload that " +
@@ -2281,7 +2282,7 @@ if (!readOnly) {
     });
 }
 // graph-prune-denylist-list and conversation-search are read-only — available regardless of readOnly mode.
-server.tool("graph-prune-denylist-list", "List the current operator-curated deny-list values used by the daily graph-prune cron. " +
+lifelineTool(server, "graph-prune-denylist-list", "List the current operator-curated deny-list values used by the daily graph-prune cron. " +
     "Returns the substring values, the timestamp of the last edit, and the total count.", {}, () => {
     if (!accountId)
         return refuseNoAccount("graph-prune-denylist-list");
@@ -2393,7 +2394,7 @@ eagerTool(server, "conversation-search", "Search conversation history using sema
 // Specialist tool, not in ADMIN_CORE_TOOLS — registered via server.tool, not
 // eagerTool (deferred-by-default ToolSearch tax is acceptable because the
 // curator is the only routine caller).
-server.tool("image-fetch", [
+lifelineTool(server, "image-fetch", [
     "Fetch a remote image URL and return its bytes as an inline image content block the model can see.",
     "Guards: http/https only, content-type must start with image/, 10 MB byte cap, 30 s timeout.",
     "Returns one text block summarising the fetch plus one image block on success; one text block with isError on failure.",
@@ -2431,7 +2432,7 @@ server.tool("image-fetch", [
 // (admin Task-spawns it during an on-demand `/insight` pass); NOT in
 // `ADMIN_CORE_TOOLS`. Backfill is via the CLI under `scripts/backfill-typed-edges.ts`,
 // bypassing this tool.
-server.tool("memory-typed-edge-pass", "Run the typed-edge auto-extraction pass over prose-bearing nodes this account wrote since sinceIso. Reads Message/Page/Meeting/Email/Idea/Note/Post/Report nodes, batches them, asks Haiku for typed-edge proposals against the closed allowlist (ATTENDED, WORKS_AT, INVESTED_IN, FOUNDED, ADVISES, MENTIONS, AUTHORED, ATTACHED_TO, REFERENCES), validates each proposal inline, and MERGEs accepted edges with createdBy provenance. Returns the counters (nodes, proposed, accepted, rejected, failed, ms) for the caller to hand back to admin for its insight-pass summary.", {
+lifelineTool(server, "memory-typed-edge-pass", "Run the typed-edge auto-extraction pass over prose-bearing nodes this account wrote since sinceIso. Reads Message/Page/Meeting/Email/Idea/Note/Post/Report nodes, batches them, asks Haiku for typed-edge proposals against the closed allowlist (ATTENDED, WORKS_AT, INVESTED_IN, FOUNDED, ADVISES, MENTIONS, AUTHORED, ATTACHED_TO, REFERENCES), validates each proposal inline, and MERGEs accepted edges with createdBy provenance. Returns the counters (nodes, proposed, accepted, rejected, failed, ms) for the caller to hand back to admin for its insight-pass summary.", {
     sinceIso: z.string().describe("ISO timestamp lower bound. Prose nodes with updatedAt >= sinceIso are processed."),
     sessionId: z.string().optional().describe("Conversation id stamped onto the createdBy provenance of MERGEd edges. Defaults to SESSION_ID env if absent."),
 }, async (args) => {
@@ -2470,7 +2471,7 @@ server.tool("memory-typed-edge-pass", "Run the typed-edge auto-extraction pass o
 // ===================================================================
 // Report MCP tools (Task 332) are registered earlier in this file.
 // Dream-run calls the same writer in-process for the per-run :Report.
-server.tool("memory-dream-run", "Operator-initiated dream-cycle: graph-hygiene sweep across seven phases " +
+lifelineTool(server, "memory-dream-run", "Operator-initiated dream-cycle: graph-hygiene sweep across seven phases " +
     "(orphan detection, stale compiled-truth, edges to :Trashed targets, citation audit on :TimelineEvent, " +
     "prune compiled-truth revisions, materialise :BACKLINKS edges, tag normalisation). " +
     "Writes a :Report node at the end. Failure of any phase logs and continues. " +
@@ -2493,7 +2494,7 @@ server.tool("memory-dream-run", "Operator-initiated dream-cycle: graph-hygiene s
         };
     }
 });
-server.tool("memory-review-queue", "Read-only summary of the dream-cycle's review queues (:OrphanCandidate, :CitationProposal). " +
+lifelineTool(server, "memory-review-queue", "Read-only summary of the dream-cycle's review queues (:OrphanCandidate, :CitationProposal). " +
     "Returns per-queue counts and a small sample so the operator can see whether to triage.", {
     sampleSize: z.number().int().positive().optional().describe("Sample rows per queue. Default 5, max 25."),
 }, async ({ sampleSize }) => {