@twin3-ai/agent-id 0.3.49 → 0.3.50

package/mcp-runtime.js

@@ -0,0 +1,1656 @@
+"use strict";
+
+const { configuredEndpoint } = require("./runtime-config.js");
+const { version } = require("./package.json");
+const { MCP_MESSAGES } = require("./mcp-i18n.js");
+
+const SUPPORTED_PROTOCOL_VERSIONS = Object.freeze([
+  "2025-11-25", "2025-06-18", "2025-03-26", "2024-11-05"
+]);
+const TOOL_ALIASES = Object.freeze({ outcome_report: "m1_outcome_report" });
+const own = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+const objectValue = value => value !== null && typeof value === "object" && !Array.isArray(value);
+
+class RpcError extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+  }
+}
+
+class ToolError extends Error {}
+
+function freeze(value) {
+  if (value && typeof value === "object" && !Object.isFrozen(value)) {
+    Object.values(value).forEach(freeze);
+    Object.freeze(value);
+  }
+  return value;
+}
+
+// Validate the JSON Schema vocabulary used by the published tool contracts.
+// Errors describe fields and rules, never the caller's values or credentials.
+function validate(schema, value, field = "arguments") {
+  const invalid = rule => { throw new RpcError(-32602, `${field} ${rule}`); };
+  if (schema.anyOf && !schema.anyOf.some(option => {
+    try { validate(option, value, field); return true; } catch (error) {
+      if (!(error instanceof RpcError)) throw error;
+      return false;
+    }
+  })) invalid("does not match any allowed schema");
+  if (schema.type) {
+    const types = Array.isArray(schema.type) ? schema.type : [schema.type];
+    const matches = type => type === "object" ? objectValue(value)
+      : type === "array" ? Array.isArray(value)
+      : type === "integer" ? Number.isInteger(value)
+      : type === "number" ? typeof value === "number" && Number.isFinite(value)
+      : type === "null" ? value === null
+      : typeof value === type;
+    if (!types.some(matches)) invalid(`must be ${types.join(" or ")}`);
+  }
+  if (own(schema, "const") && value !== schema.const) invalid("must use the declared fixed value");
+  if (schema.enum && !schema.enum.includes(value)) invalid("must use an allowed value");
+  if (objectValue(value)) {
+    for (const key of schema.required || []) {
+      if (!own(value, key)) invalid(`requires ${key}`);
+    }
+    for (const [key, item] of Object.entries(value)) {
+      if (own(schema.properties || {}, key)) validate(schema.properties[key], item, `${field}.${key}`);
+      else if (schema.additionalProperties === false) invalid("contains an undeclared property");
+      else if (objectValue(schema.additionalProperties)) validate(schema.additionalProperties, item, field);
+    }
+  }
+  if (Array.isArray(value) && schema.items) {
+    value.forEach((item, index) => validate(schema.items, item, `${field}[${index}]`));
+  }
+  if (typeof value === "string") {
+    const length = [...value].length;
+    if (schema.minLength !== undefined && length < schema.minLength) invalid("is too short");
+    if (schema.maxLength !== undefined && length > schema.maxLength) invalid("is too long");
+    if (schema.pattern && !new RegExp(schema.pattern).test(value)) invalid("has an invalid format");
+    if (schema.format === "uri") {
+      try { new URL(value); } catch { invalid("must be an absolute URI"); }
+    }
+  }
+  if (typeof value === "number") {
+    if (schema.minimum !== undefined && value < schema.minimum) invalid("is below the minimum");
+    if (schema.maximum !== undefined && value > schema.maximum) invalid("exceeds the maximum");
+  }
+}
+
+function requiredCredential(value, label) {
+  if (typeof value !== "string" || !value.trim()) throw new ToolError(`${label} is required.`);
+  if (/[\r\n]/.test(value)) throw new ToolError(`${label} has an invalid format.`);
+  return value.trim();
+}
+
+function tool(name, description, inputSchema, http) {
+  // The same immutable entry owns declaration, validation, routing and execution.
+  const entry = { name, description, inputSchema, ...http };
+  entry.handler = async (args, context) => {
+    let operation = entry;
+    if (entry.operations) {
+      const selected = args.operation === undefined ? entry.defaultOperation : args.operation;
+      if (typeof selected !== "string" || !own(entry.operations, selected)) {
+        throw new RpcError(-32602, "arguments.operation must use a supported operation");
+      }
+      operation = { ...entry, ...entry.operations[selected] };
+    }
+    const method = operation.postWhen && operation.postWhen(args) ? "POST" : operation.method;
+    let route = operation.route;
+    for (const field of operation.pathParameters || []) {
+      route = route.replace(`{${field}}`, encodeURIComponent(args[field]));
+    }
+    const headers = {};
+    const body = { ...args };
+    const sensitive = [args.agent_key, args.access_token, args.recovery_capability, context.env.AGENT_ID_MCP_ACCESS_TOKEN]
+      .flatMap(value => typeof value === "string" ? [value, value.trim()] : []);
+    if (operation.auth === "site-key") {
+      requiredCredential(args.url, "url");
+      const key = requiredCredential(args.agent_key, "agent_key");
+      headers.Authorization = `Bearer ${key}`;
+      delete body.agent_key;
+    } else if (operation.auth === "site-body") {
+      requiredCredential(args.url, "url");
+      body.agent_key = requiredCredential(args.agent_key, "agent_key");
+    } else if (operation.auth === "enterprise") {
+      // Strict recruiting schemas cannot carry secrets. Configure the process
+      // with an existing enterprise access token; a Site Agent Key is not one.
+      const token = requiredCredential(args.access_token === undefined
+        ? context.env.AGENT_ID_MCP_ACCESS_TOKEN : args.access_token, "Enterprise access token (AGENT_ID_MCP_ACCESS_TOKEN)");
+      headers.Authorization = `Bearer ${token}`;
+      sensitive.push(token);
+      delete body.access_token;
+      delete body.operation;
+    }
+    if (operation.action) body.action = operation.action;
+    const query = new URLSearchParams();
+    for (const field of method === "GET" ? operation.query || [] : []) {
+      const value = args[field] === undefined ? operation.queryDefaults?.[field] : args[field];
+      if (value !== undefined && value !== "") query.set(field, String(value));
+    }
+    for (const field of method === "GET" ? operation.flags || [] : []) {
+      if (args[field]) query.set(field, "1");
+    }
+    return context.request({ method, route, query, headers, body: method === "POST" ? body : undefined, sensitive });
+  };
+  return freeze(entry);
+}
+
+// Tool declarations pinned to the production manifest captured for J1.
+// Manifest SHA-256: 5dee6b98200b3b59eb8ecd5776291cfea88237340e4666a05589b50194025608.
+// Legacy guards, graph claim arrays and inbox booleans remain for J5 to
+// reconcile in the manifest; the original required/action/key guards stay strict.
+const PUBLIC_EVIDENCE_INPUT_SCHEMA = freeze({
+  "type": "object",
+  "properties": {
+    "url": {
+      "type": "string"
+    },
+    "target_url": {
+      "type": "string"
+    },
+    "intent": {
+      "type": "string"
+    },
+    "evidence": {
+      "type": "object"
+    },
+    "public_metadata": {
+      "type": "object"
+    },
+    "setup_metadata": {
+      "type": "object"
+    },
+    "submission": {
+      "type": "object"
+    },
+    "platform_id": {
+      "type": "string"
+    },
+    "status": {
+      "type": "string"
+    },
+    "listing_url": {
+      "type": "string"
+    },
+    "platform_receipt_id": {
+      "type": "string"
+    },
+    "proof_url": {
+      "type": "string"
+    },
+    "jwt": {
+      "type": "string"
+    },
+    "token_context": {
+      "type": "object"
+    },
+    "claims": {
+      "type": "object"
+    },
+    "signature_verified": {
+      "type": "boolean"
+    },
+    "expected_audience": {
+      "type": "string"
+    },
+    "expected_email": {
+      "type": "string"
+    },
+    "evidence_type": {
+      "type": "string"
+    },
+    "certs": {
+      "type": "object"
+    },
+    "execution": {
+      "type": "object"
+    },
+    "store": {
+      "type": "boolean"
+    },
+    "events": {
+      "type": "array",
+      "items": {
+        "type": "object"
+      }
+    },
+    "logs": {
+      "type": "array",
+      "items": {
+        "type": "object"
+      }
+    },
+    "user_agent": {
+      "type": "string"
+    },
+    "probes": {
+      "type": "array",
+      "items": {
+        "type": "object"
+      }
+    },
+    "probe_set": {
+      "type": "object"
+    },
+    "prompt": {
+      "type": "string"
+    },
+    "answer": {
+      "type": "string"
+    },
+    "citations": {
+      "type": "array",
+      "items": {}
+    },
+    "engine": {
+      "type": "string"
+    },
+    "engines": {
+      "anyOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      ]
+    },
+    "competitors": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "conversions": {
+      "type": "array",
+      "items": {
+        "type": "object"
+      }
+    },
+    "event": {
+      "type": "string"
+    },
+    "referrer": {
+      "type": "string"
+    },
+    "survey_source": {
+      "type": "string"
+    },
+    "value": {
+      "type": "number"
+    },
+    "currency": {
+      "type": "string"
+    },
+    "fetch": {
+      "type": "boolean"
+    },
+    "report": {
+      "type": "object"
+    },
+    "reports": {
+      "type": "array",
+      "items": {
+        "type": "object"
+      }
+    },
+    "result": {
+      "type": "object"
+    },
+    "results": {
+      "type": "array",
+      "items": {
+        "type": "object"
+      }
+    },
+    "product_metadata": {
+      "type": "object"
+    },
+    "pricing_metadata": {
+      "type": "object"
+    },
+    "receipt": {
+      "type": "object"
+    },
+    "receipts": {
+      "type": "array",
+      "items": {
+        "type": "object"
+      }
+    },
+    "before": {
+      "type": "object"
+    },
+    "after": {
+      "type": "object"
+    },
+    "audit": {
+      "type": "object"
+    },
+    "content": {
+      "type": "string"
+    },
+    "page": {
+      "type": "object"
+    },
+    "questions": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "topics": {
+      "anyOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      ]
+    },
+    "market": {
+      "type": "string"
+    },
+    "cadence": {
+      "type": "string"
+    },
+    "period": {
+      "type": "object"
+    },
+    "verify_artifacts": {
+      "type": "boolean"
+    },
+    "published_items": {
+      "type": "array",
+      "items": {
+        "type": "object"
+      }
+    },
+    "items": {
+      "type": "array",
+      "items": {
+        "type": "object"
+      }
+    },
+    "verify_publication": {
+      "type": "boolean"
+    },
+    "content_pack": {
+      "type": "object"
+    },
+    "pack": {
+      "type": "object"
+    },
+    "content_workflow_package": {
+      "type": "object"
+    },
+    "package": {
+      "type": "object"
+    },
+    "sheet": {
+      "type": "object"
+    },
+    "rows": {
+      "type": "array",
+      "items": {
+        "type": "object"
+      }
+    },
+    "completed_rows": {
+      "type": "array",
+      "items": {
+        "type": "object"
+      }
+    },
+    "insights": {
+      "type": "object"
+    },
+    "provider": {
+      "type": "string"
+    },
+    "evaluator": {
+      "type": "string"
+    },
+    "budget": {
+      "type": "number"
+    },
+    "draft": {
+      "type": "object"
+    },
+    "create_payload": {
+      "type": "object"
+    },
+    "job_type": {
+      "type": "string"
+    },
+    "job_id": {
+      "type": "string"
+    },
+    "payment_reference": {
+      "type": "string"
+    },
+    "payment_proof": {
+      "type": "object"
+    },
+    "payment_signature": {
+      "type": "string"
+    },
+    "deliverable_uri": {
+      "type": "string"
+    },
+    "deliverable": {
+      "type": "object"
+    },
+    "decision": {
+      "type": "string"
+    },
+    "reason": {
+      "type": "string"
+    },
+    "plan": {
+      "type": "string"
+    },
+    "email": {
+      "type": "string"
+    },
+    "method": {
+      "type": "string"
+    },
+    "procurement_event": {
+      "type": "object"
+    },
+    "action": {
+      "type": "object"
+    },
+    "execute": {
+      "type": "boolean"
+    },
+    "access_token": {
+      "type": "string"
+    },
+    "token_source": {
+      "anyOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "object"
+        }
+      ]
+    },
+    "metadata_base": {
+      "type": "string"
+    },
+    "service_name": {
+      "type": "string"
+    },
+    "usage_reporting_id": {
+      "type": "string"
+    },
+    "metric_name": {
+      "type": "string"
+    },
+    "metric_value": {
+      "anyOf": [
+        {
+          "type": "number"
+        },
+        {
+          "type": "string"
+        }
+      ]
+    },
+    "start_time": {
+      "type": "string"
+    },
+    "end_time": {
+      "type": "string"
+    },
+    "operation_id": {
+      "type": "string"
+    },
+    "user_labels": {
+      "type": "object"
+    },
+    "payload": {
+      "type": "object"
+    },
+    "provider_id": {
+      "type": "string"
+    },
+    "account_id": {
+      "type": "string"
+    },
+    "entitlement_id": {
+      "type": "string"
+    },
+    "twin3_agent_id": {
+      "type": "string"
+    },
+    "pricing_model": {
+      "type": "string",
+      "enum": [
+        "free",
+        "subscription",
+        "usage",
+        "combined",
+        "subscription_plus_usage"
+      ]
+    }
+  },
+  "required": []
+});
+
+const S2_PACKAGE_REVIEW_INPUT_SCHEMA = freeze({
+  "type": "object",
+  "properties": {
+    "url": {
+      "type": "string"
+    },
+    "public_metadata": {
+      "type": "object"
+    },
+    "setup_metadata": {
+      "type": "object"
+    }
+  },
+  "required": []
+});
+
+const AGENT_TRUST_PACKAGE_INPUT_SCHEMA = freeze({
+  "type": "object",
+  "properties": {
+    "url": {
+      "type": "string"
+    }
+  },
+  "required": []
+});
+
+const GOOGLE_MARKETPLACE_AGENT_CARD_INPUT_SCHEMA = freeze({
+  "type": "object",
+  "properties": {
+    "url": {
+      "type": "string"
+    },
+    "product_metadata": {
+      "type": "object"
+    }
+  },
+  "required": []
+});
+
+const GOOGLE_MARKETPLACE_SUBMISSION_PACK_INPUT_SCHEMA = freeze({
+  "type": "object",
+  "properties": {
+    "url": {
+      "type": "string"
+    },
+    "product_metadata": {
+      "type": "object"
+    },
+    "setup_metadata": {
+      "type": "object"
+    }
+  },
+  "required": []
+});
+
+const GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA = freeze({
+  "type": "object",
+  "properties": {},
+  "required": []
+});
+
+const GOOGLE_MARKETPLACE_DEVELOP_FLOW_GATE_INPUT_SCHEMA = freeze({
+  "type": "object",
+  "properties": {
+    "url": {
+      "type": "string"
+    },
+    "setup_metadata": {
+      "type": "object"
+    },
+    "product_metadata": {
+      "type": "object"
+    },
+    "pricing_metadata": {
+      "type": "object"
+    }
+  },
+  "required": []
+});
+
+const GOOGLE_MARKETPLACE_TECHNICAL_INTEGRATION_PACK_INPUT_SCHEMA = freeze({
+  "type": "object",
+  "properties": {
+    "url": {
+      "type": "string"
+    },
+    "setup_metadata": {
+      "type": "object"
+    },
+    "pricing_metadata": {
+      "type": "object"
+    }
+  },
+  "required": []
+});
+
+const GOOGLE_MARKETPLACE_PARTNER_APPLICATION_GATE_INPUT_SCHEMA = freeze({
+  "type": "object",
+  "properties": {
+    "url": {
+      "type": "string"
+    },
+    "setup_metadata": {
+      "type": "object"
+    }
+  },
+  "required": []
+});
+
+const A1_AI_READ_DASHBOARD_INPUT_SCHEMA = freeze({
+  "type": "object",
+  "properties": {
+    "url": {
+      "type": "string"
+    },
+    "events": {
+      "type": "array",
+      "items": {
+        "type": "object"
+      }
+    },
+    "logs": {
+      "type": "array",
+      "items": {
+        "type": "object"
+      }
+    },
+    "period": {
+      "type": "object"
+    }
+  },
+  "required": []
+});
+
+const P2_PARITY_INSPECT_INPUT_SCHEMA = freeze({
+  "type": "object",
+  "properties": {
+    "url": {
+      "type": "string"
+    },
+    "agent_key": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "url",
+    "agent_key"
+  ]
+});
+
+const TOOL_REGISTRY = Object.freeze([
+  tool("portable_trust_verification",
+    "Verify signed Trust Claims and fresh independent runtime receipts from a portable bundle without trusting the issuer runtime.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { method: "POST", route: "/api/agent/trust_verify" }),
+  tool("continuous_trust_graph",
+    "Evaluate signed claims, runtime receipts, revocations, expiry, and conflicts while retaining negative evidence.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "target_url": {"type": "string"}, "intent": {"type": "string"}, "evidence": {"type": "object"}, "public_metadata": {"type": "object"}, "setup_metadata": {"type": "object"}, "submission": {"type": "object"}, "platform_id": {"type": "string"}, "status": {"type": "string"}, "listing_url": {"type": "string"}, "platform_receipt_id": {"type": "string"}, "proof_url": {"type": "string"}, "jwt": {"type": "string"}, "token_context": {"type": "object"}, "claims": {"type": "array", "items": {"type": "object"}}, "signature_verified": {"type": "boolean"}, "expected_audience": {"type": "string"}, "expected_email": {"type": "string"}, "evidence_type": {"type": "string"}, "certs": {"type": "object"}, "execution": {"type": "object"}, "store": {"type": "boolean"}, "events": {"type": "array", "items": {"type": "object"}}, "logs": {"type": "array", "items": {"type": "object"}}, "user_agent": {"type": "string"}, "probes": {"type": "array", "items": {"type": "object"}}, "probe_set": {"type": "object"}, "prompt": {"type": "string"}, "answer": {"type": "string"}, "citations": {"type": "array", "items": {}}, "engine": {"type": "string"}, "engines": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "competitors": {"type": "array", "items": {"type": "string"}}, "conversions": {"type": "array", "items": {"type": "object"}}, "event": {"type": "string"}, "referrer": {"type": "string"}, "survey_source": {"type": "string"}, "value": {"type": "number"}, "currency": {"type": "string"}, "fetch": {"type": "boolean"}, "report": {"type": "object"}, "reports": {"type": "array", "items": {"type": "object"}}, "result": {"type": "object"}, "results": {"type": "array", "items": {"type": "object"}}, "product_metadata": {"type": "object"}, "pricing_metadata": {"type": "object"}, "receipt": {"type": "object"}, "receipts": {"type": "array", "items": {"type": "object"}}, "before": {"type": "object"}, "after": {"type": "object"}, "audit": {"type": "object"}, "content": {"type": "string"}, "page": {"type": "object"}, "questions": {"type": "array", "items": {"type": "string"}}, "topics": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "market": {"type": "string"}, "cadence": {"type": "string"}, "period": {"type": "object"}, "verify_artifacts": {"type": "boolean"}, "published_items": {"type": "array", "items": {"type": "object"}}, "items": {"type": "array", "items": {"type": "object"}}, "verify_publication": {"type": "boolean"}, "content_pack": {"type": "object"}, "pack": {"type": "object"}, "content_workflow_package": {"type": "object"}, "package": {"type": "object"}, "sheet": {"type": "object"}, "rows": {"type": "array", "items": {"type": "object"}}, "completed_rows": {"type": "array", "items": {"type": "object"}}, "insights": {"type": "object"}, "provider": {"type": "string"}, "evaluator": {"type": "string"}, "budget": {"type": "number"}, "draft": {"type": "object"}, "create_payload": {"type": "object"}, "job_type": {"type": "string"}, "job_id": {"type": "string"}, "payment_reference": {"type": "string"}, "payment_proof": {"type": "object"}, "payment_signature": {"type": "string"}, "deliverable_uri": {"type": "string"}, "deliverable": {"type": "object"}, "decision": {"type": "string"}, "reason": {"type": "string"}, "plan": {"type": "string"}, "email": {"type": "string"}, "method": {"type": "string"}, "procurement_event": {"type": "object"}, "action": {"type": "object"}, "execute": {"type": "boolean"}, "access_token": {"type": "string"}, "token_source": {"anyOf": [{"type": "string"}, {"type": "object"}]}, "metadata_base": {"type": "string"}, "service_name": {"type": "string"}, "usage_reporting_id": {"type": "string"}, "metric_name": {"type": "string"}, "metric_value": {"anyOf": [{"type": "number"}, {"type": "string"}]}, "start_time": {"type": "string"}, "end_time": {"type": "string"}, "operation_id": {"type": "string"}, "user_labels": {"type": "object"}, "payload": {"type": "object"}, "provider_id": {"type": "string"}, "account_id": {"type": "string"}, "entitlement_id": {"type": "string"}, "twin3_agent_id": {"type": "string"}, "pricing_model": {"type": "string", "enum": ["free", "subscription", "usage", "combined", "subscription_plus_usage"]}}, "required": []},
+    { method: "POST", route: "/api/agent/continuous_trust_graph" }),
+  tool("tenant_zero_trust_gate",
+    "Gate Twin3 Tenant 0 using external black-box negative tests, a live customer change, and independent public refetch.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { method: "POST", route: "/api/agent/tenant_zero_trust_gate" }),
+  tool("continuous_observation_gate",
+    "Gate the required observation window from real checkpoint samples.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { method: "POST", route: "/api/agent/continuous_observation_gate" }),
+  tool("external_pilot_trust_gate",
+    "Require two external hosts and an independent portable verifier before pilot completion.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { method: "POST", route: "/api/agent/external_pilot_trust_gate" }),
+  tool("google_marketplace_trust_gate",
+    "Require real external Google review receipts before claiming Marketplace submission readiness.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { method: "POST", route: "/api/agent/google_marketplace_trust_gate" }),
+  tool("w1_workflow_router",
+    "Choose the next AEO workflow route: audit, content execution, measurement, or continuous Site Agent loop.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "intent": {"type": "string"}, "evidence": {"type": "object"}}, "required": []},
+    { route: "/api/agent/workflow_router", method: "POST" }),
+  tool("s2_package_review",
+    "Review Agent marketplace capability, credential, permission, and claim boundaries.",
+    S2_PACKAGE_REVIEW_INPUT_SCHEMA,
+    { route: "/api/agent/package_review", method: "POST" }),
+  tool("s1_skill_package_validation",
+    "Validate an S1 Skill package for source-map, OpenAPI, MCP, examples, credentials, and claim-boundary consistency.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "package": {"type": "object"}}, "required": []},
+    { route: "/api/agent/skill_package_validate", method: "GET", postWhen: args => Boolean(args.package), query: ["url"] }),
+  tool("marketplace_submission_pack",
+    "Bundle listing copy, attachments, S2 review, S1 validation, billing boundaries, and non-claims for Agent Store or registry submission.",
+    S2_PACKAGE_REVIEW_INPUT_SCHEMA,
+    { route: "/api/agent/marketplace_submission", method: "GET", postWhen: args => Boolean(args.public_metadata || args.setup_metadata || args.public || args.setup), query: ["url"] }),
+  tool("marketplace_readiness_score",
+    "Score Agent Store / registry readiness, list blockers, and preserve non-claims before human submission.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "submission": {"type": "object"}, "public_metadata": {"type": "object"}, "setup_metadata": {"type": "object"}}, "required": []},
+    { route: "/api/agent/marketplace_readiness", method: "GET", postWhen: args => Boolean(args.submission || args.pack || args.public_metadata || args.setup_metadata || args.public || args.setup), query: ["url"] }),
+  tool("marketplace_approval_receipts",
+    "Normalize and summarize real marketplace approval receipts without claiming ranking, runtime behavior, or AI recommendation.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "platform_id": {"type": "string"}, "status": {"type": "string"}, "listing_url": {"type": "string"}, "platform_receipt_id": {"type": "string"}, "proof_url": {"type": "string"}}, "required": []},
+    { route: "/api/agent/marketplace_approval_receipts", method: "GET", postWhen: args => Boolean(args.platform_id || args.platform || args.listing_url || args.platform_receipt_id || args.proof_url || args.evidence_url), query: ["url"] }),
+  tool("agent_trust_package",
+    "Bundle Agent Card, MCP, OpenAPI, Passport, Proof Graph, domain verification receipt, and protocol alignment for Agent reviewers.",
+    AGENT_TRUST_PACKAGE_INPUT_SCHEMA,
+    { method: "GET", query: ["url"], postWhen: args => Boolean(args.audit || args.marketplace_receipts || args.approval_receipts), route: "/api/agent/trust_package" }),
+  tool("google_marketplace_agent_card",
+    "Generate a Google Cloud Marketplace-oriented A2A Agent Card candidate for Partner Engineer review.",
+    GOOGLE_MARKETPLACE_AGENT_CARD_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_agent_card", method: "GET", postWhen: args => Boolean(args.product_metadata || args.product || args.public_metadata), query: ["url"] }),
+  tool("google_marketplace_submission_pack",
+    "Bundle Google Cloud Marketplace product metadata, Agent Card, pricing, technical integration, and claim boundaries.",
+    GOOGLE_MARKETPLACE_SUBMISSION_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_submission", method: "GET", postWhen: args => Boolean(args.product_metadata || args.setup_metadata || args.product || args.setup || args.public_metadata), query: ["url"] }),
+  tool("google_marketplace_readiness_score",
+    "Score Google Cloud Marketplace readiness without claiming Google submission, validation, or approval.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "submission": {"type": "object"}, "product_metadata": {"type": "object"}, "setup_metadata": {"type": "object"}}, "required": []},
+    { route: "/api/agent/google_marketplace_readiness", method: "GET", postWhen: args => Boolean(args.submission || args.pack || args.product_metadata || args.setup_metadata || args.product || args.setup || args.public_metadata), query: ["url"] }),
+  tool("google_marketplace_pricing_pack",
+    "Return Google Cloud Marketplace AI Agent pricing review material, plans, features, and blockers.",
+    GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_pricing", method: "GET" }),
+  tool("google_marketplace_develop_flow_gate",
+    "Map Google's Marketplace develop flow to exact AgentX evidence files, blockers, and next submission phase.",
+    GOOGLE_MARKETPLACE_DEVELOP_FLOW_GATE_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_develop_flow_gate", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.product_metadata || args.pricing_metadata || args.setup || args.product || args.pricing), query: ["url"] }),
+  tool("google_marketplace_listing_requirements_gate",
+    "Track Google Cloud Marketplace base listing requirements evidence before Producer Portal submission.",
+    GOOGLE_MARKETPLACE_SUBMISSION_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_listing_requirements_gate", method: "GET", postWhen: args => Boolean(args.product_metadata || args.setup_metadata || args.product || args.setup || args.public_metadata), query: ["url"] }),
+  tool("google_marketplace_listing_pack",
+    "Return Google Cloud Marketplace product details, listing metadata, enhanced-discovery fields, and blockers.",
+    GOOGLE_MARKETPLACE_AGENT_CARD_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_listing", method: "GET", postWhen: args => Boolean(args.product_metadata || args.product || args.public_metadata) }),
+  tool("google_marketplace_discovery_metadata_gate",
+    "Validate explicit Google Marketplace AI discovery metadata before Product details review.",
+    GOOGLE_MARKETPLACE_AGENT_CARD_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_discovery_metadata", method: "GET", postWhen: args => Boolean(args.product_metadata || args.product || args.public_metadata) }),
+  tool("google_marketplace_product_details_review_gate",
+    "Track Google Marketplace Product details completeness and review approval evidence.",
+    GOOGLE_MARKETPLACE_SUBMISSION_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_product_details_review_gate", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.setup || args.product_metadata || args.product || args.public_metadata), query: ["url"] }),
+  tool("google_marketplace_technical_integration_pack",
+    "Return Google Cloud Marketplace technical integration material for Pub/Sub, Partner Procurement API, account linking, entitlement handling, and Service Control boundaries.",
+    GOOGLE_MARKETPLACE_TECHNICAL_INTEGRATION_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_technical", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.setup || args.pricing_metadata || args.pricing), query: ["url"] }),
+  tool("google_marketplace_backend_gate",
+    "Gate executable Google Marketplace backend evidence for JWT verification, Pub/Sub, account approval, entitlement lifecycle, and usage reporting.",
+    GOOGLE_MARKETPLACE_TECHNICAL_INTEGRATION_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_backend_gate", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.setup || args.pricing_metadata || args.pricing), query: ["url"] }),
+  tool("google_marketplace_lifecycle_smoke",
+    "Run a local Google Marketplace procurement lifecycle smoke test for account approval, entitlement approval, plan change, and cancellation.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "provider_id": {"type": "string"}, "account_id": {"type": "string"}, "entitlement_id": {"type": "string"}}, "required": []},
+    { route: "/api/agent/google_marketplace_lifecycle_smoke", method: "GET", query: ["url", "provider_id", "account_id", "entitlement_id"] }),
+  tool("google_marketplace_runtime_smoke",
+    "Run one local Google Marketplace runtime smoke across account linking, procurement lifecycle, and usage-reporting dry-run gates.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "provider_id": {"type": "string"}, "account_id": {"type": "string"}, "entitlement_id": {"type": "string"}, "pricing_model": {"type": "string", "enum": ["free", "subscription", "usage", "combined", "subscription_plus_usage"]}}, "required": []},
+    { route: "/api/agent/google_marketplace_runtime_smoke", method: "GET", query: ["url", "provider_id", "account_id", "entitlement_id", "pricing_model"] }),
+  tool("google_marketplace_runtime_receipt",
+    "Generate a server-attested runtime receipt from a verified Google Marketplace JWT, Pub/Sub, Procurement API, or Service Control signal.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "evidence_type": {"type": "string"}, "evidence": {"type": "object"}, "jwt": {"type": "string"}, "token_context": {"type": "object"}, "expected_audience": {"type": "string"}, "expected_email": {"type": "string"}, "certs": {"type": "object"}, "payload": {"type": "object"}, "execution": {"type": "object"}, "store": {"type": "boolean"}, "pricing_metadata": {"type": "object"}}, "required": []},
+    { route: "/api/agent/google_marketplace_runtime_receipt", method: "POST" }),
+  tool("google_marketplace_runtime_evidence_ledger",
+    "Store redacted Google Marketplace runtime receipts and materialize them for the strict runtime evidence gate.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "receipt": {"type": "object"}, "receipts": {"type": "array", "items": {"type": "object"}}, "pricing_metadata": {"type": "object"}}, "required": []},
+    { route: "/api/agent/google_marketplace_runtime_evidence_ledger", method: "GET", postWhen: args => Boolean(args.receipt || args.receipts || args.pricing_metadata || args.pricing || args.evidence_kind || args.receipt_type || args.schema), query: ["url"] }),
+  tool("google_marketplace_runtime_evidence_gate",
+    "Gate real Google Marketplace runtime evidence separately from local synthetic smoke before technical review.",
+    GOOGLE_MARKETPLACE_TECHNICAL_INTEGRATION_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_runtime_evidence_gate", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.setup || args.pricing_metadata || args.pricing), query: ["url"] }),
+  tool("google_marketplace_test_billing_gate",
+    "Track Google Marketplace test billing, product preview, pricing preview, purchase-flow, and usage-reporting evidence.",
+    GOOGLE_MARKETPLACE_TECHNICAL_INTEGRATION_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_test_billing_gate", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.setup || args.pricing_metadata || args.pricing), query: ["url"] }),
+  tool("google_marketplace_agent_card_validation_gate",
+    "Track same-project Cloud Storage upload and Producer Portal Save and Validate evidence for the Google Marketplace Agent Card.",
+    GOOGLE_MARKETPLACE_SUBMISSION_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_agent_card_validation_gate", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.setup || args.product_metadata || args.product || args.public_metadata), query: ["url"] }),
+  tool("google_marketplace_agent_card_gcs_upload_pack",
+    "Prepare the same-project Cloud Storage Agent Card upload pack, gcloud commands, and Producer Portal Save and Validate steps.",
+    GOOGLE_MARKETPLACE_SUBMISSION_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_agent_card_gcs_pack", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.setup || args.product_metadata || args.product || args.public_metadata), query: ["url"] }),
+  tool("google_marketplace_review_bundle",
+    "Export Google Marketplace review files for Producer Portal, Agent Card upload, pricing review, technical integration review, and Partner Engineer handoff.",
+    GOOGLE_MARKETPLACE_DEVELOP_FLOW_GATE_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_review_bundle", method: "GET", postWhen: args => Boolean(args.product_metadata || args.setup_metadata || args.pricing_metadata || args.product || args.setup || args.pricing || args.public_metadata), query: ["url"] }),
+  tool("google_marketplace_review_index",
+    "Map Google Marketplace review areas to files, endpoints, commands, evidence keys, and claim boundaries.",
+    GOOGLE_MARKETPLACE_DEVELOP_FLOW_GATE_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_review_index", method: "GET", postWhen: args => Boolean(args.product_metadata || args.setup_metadata || args.pricing_metadata || args.product || args.setup || args.pricing || args.public_metadata), query: ["url"] }),
+  tool("google_marketplace_core_technology_source_map",
+    "Map core product capabilities to the international engine, the managed-service layer, and Google Marketplace-specific implementation sources.",
+    AGENT_TRUST_PACKAGE_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_core_source_map", method: "GET", query: ["url"] }),
+  tool("google_marketplace_application_status",
+    "Track Google Marketplace external evidence, review readiness, publish readiness, and non-claims.",
+    GOOGLE_MARKETPLACE_DEVELOP_FLOW_GATE_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_application_status", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.product_metadata || args.pricing_metadata || args.setup || args.product || args.pricing || args.public_metadata) }),
+  tool("google_marketplace_application_evidence",
+    "Persist Google Marketplace application evidence and recompute the external review gate.",
+    GOOGLE_MARKETPLACE_DEVELOP_FLOW_GATE_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_application_evidence", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.product_metadata || args.pricing_metadata || args.setup || args.product || args.pricing || args.public_metadata) }),
+  tool("google_marketplace_partner_application_gate",
+    "Track Google Partner, vendor, and Producer Portal access evidence before product configuration.",
+    GOOGLE_MARKETPLACE_PARTNER_APPLICATION_GATE_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_partner_application_gate", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.setup || args.project_info_form || args.partner_network || args.vendor_account || args.producer_portal_access || args.producer_portal_product_id) }),
+  tool("google_marketplace_operations_gate",
+    "Track Producer Portal IAM, test billing account, and App Lifecycle Manager operations readiness.",
+    GOOGLE_MARKETPLACE_PARTNER_APPLICATION_GATE_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_operations_gate", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.setup), query: ["url"] }),
+  tool("google_marketplace_ops_identity_gate",
+    "Track Producer Portal IAM, restricted Partner Procurement API access, service accounts, App Lifecycle Manager, and usage-reporting identity evidence.",
+    GOOGLE_MARKETPLACE_TECHNICAL_INTEGRATION_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_ops_identity_gate", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.pricing_metadata || args.setup || args.pricing || args.producer_portal_iam || args.partner_procurement_api), query: ["url"] }),
+  tool("google_marketplace_cloud_run_deployment_gate",
+    "Track Cloud Run runtime evidence, public Agent endpoints, service identity, and metadata token sources before Google technical review.",
+    GOOGLE_MARKETPLACE_TECHNICAL_INTEGRATION_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_cloud_run_deployment_gate", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.pricing_metadata || args.setup || args.pricing || args.cloud_run || args.cloud_run_deployment), query: ["url"] }),
+  tool("google_marketplace_live_surface_gate",
+    "Fetch a public HTTPS Agent runtime and verify Agent Card, MCP, OpenAPI, review index, and Google Marketplace preflight surfaces are reachable before Partner Engineer review.",
+    AGENT_TRUST_PACKAGE_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_live_surface_gate", method: "GET", query: ["url"] }),
+  tool("google_marketplace_preflight_check",
+    "Run one strict Google Marketplace preflight before Producer Portal submit-for-review.",
+    GOOGLE_MARKETPLACE_DEVELOP_FLOW_GATE_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_preflight", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.product_metadata || args.pricing_metadata || args.setup || args.product || args.pricing || args.public_metadata), query: ["url"] }),
+  tool("google_marketplace_publish_gate",
+    "Track Google Marketplace publish evidence before claiming public Marketplace availability.",
+    GOOGLE_MARKETPLACE_PARTNER_APPLICATION_GATE_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_publish_gate", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.setup), query: ["url"] }),
+  tool("google_marketplace_review_receipt_gate",
+    "Track external Google and Producer Portal review receipts before submission or publication claims.",
+    GOOGLE_MARKETPLACE_PARTNER_APPLICATION_GATE_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_review_receipt_gate", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.setup), query: ["url"] }),
+  tool("google_marketplace_evidence_template",
+    "Generate a fillable Google Marketplace application evidence template for operators.",
+    AGENT_TRUST_PACKAGE_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_evidence_template", method: "GET" }),
+  tool("google_marketplace_evidence_example",
+    "Generate an example-only Google Marketplace evidence starter file for operators.",
+    AGENT_TRUST_PACKAGE_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_evidence_example", method: "GET" }),
+  tool("google_marketplace_procurement_event",
+    "Normalize Google Marketplace Pub/Sub procurement events and produce non-executing action plans.",
+    {"type": "object", "properties": {"procurement_event": {"type": "object"}}, "required": []},
+    { route: "/api/agent/google_marketplace_procurement_event", method: "POST" }),
+  tool("google_marketplace_procurement_state",
+    "Read local Google Marketplace procurement account, entitlement, and action-queue state.",
+    GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_procurement_state", method: "GET" }),
+  tool("google_marketplace_procurement_execute",
+    "Execute one explicit Google Partner Procurement API action with execute=true and a provided or Cloud Run metadata OAuth token source.",
+    {"type": "object", "properties": {"action": {"type": "object"}, "execute": {"type": "boolean"}}, "required": ["action"]},
+    { route: "/api/agent/google_marketplace_procurement_execute", method: "POST" }),
+  tool("google_marketplace_usage_report_payload",
+    "Build a Google Service Control usage report payload from entitlement usageReportingId, metric, interval, and labels.",
+    {"type": "object", "properties": {"service_name": {"type": "string"}, "usage_reporting_id": {"type": "string"}, "metric_name": {"type": "string"}, "metric_value": {"anyOf": [{"type": "number"}, {"type": "string"}]}, "start_time": {"type": "string"}, "end_time": {"type": "string"}, "operation_id": {"type": "string"}, "user_labels": {"type": "object"}}, "required": []},
+    { route: "/api/agent/google_marketplace_usage_report_payload", method: "GET", postWhen: args => Boolean(args.service_name || args.usage_reporting_id || args.metric_name || args.metric_value || args.start_time || args.end_time || args.operation_id || args.user_labels) }),
+  tool("google_marketplace_usage_report_execute",
+    "Execute Service Control services.check followed by services.report only with execute=true and an OAuth token source.",
+    {"type": "object", "properties": {"payload": {"type": "object"}, "execute": {"type": "boolean"}}, "required": ["payload"]},
+    { route: "/api/agent/google_marketplace_usage_report_execute", method: "POST" }),
+  tool("google_marketplace_frontend_integration",
+    "Return Google Marketplace sign-up/login URLs and JWT requirements.",
+    GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_marketplace_frontend_integration", method: "GET" }),
+  tool("google_marketplace_account_link",
+    "Validate Google Marketplace account-linking inputs and return non-executing approval actions.",
+    {"type": "object", "properties": {"jwt": {"type": "string"}, "claims": {"type": "object"}, "signature_verified": {"type": "boolean"}, "expected_audience": {"type": "string"}}, "required": []},
+    { route: "/api/agent/google_marketplace_account_link", method: "POST" }),
+  tool("google_marketplace_jwt_verifier_gate",
+    "Track Google Marketplace x-gcp-marketplace-token verifier evidence before account linking.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "setup_metadata": {"type": "object"}, "jwt": {"type": "string"}, "token_context": {"type": "object"}}, "required": []},
+    { route: "/api/agent/google_marketplace_jwt_verifier_gate", method: "GET", postWhen: args => Boolean(args.setup_metadata || args.setup || args.jwt || args.token || args.token_context || args["x-gcp-marketplace-token"]) }),
+  tool("agentx_passport_verify",
+    MCP_MESSAGES.en.agentx_passport_verify,
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { method: "GET", query: ["url"], postWhen: args => Boolean(args.passport), route: "/api/agent/passport_verify" }),
+  tool("audit_url",
+    "Audit a URL through twin3 AEO Agent.",
+    {"type": "object", "properties": {"url": {"type": "string"}}, "required": ["url"]},
+    { route: "/api/agent/audit", method: "POST" }),
+  tool("readiness_snapshot",
+    "Freeze one audit's public evidence into a deterministic, hash-addressed snapshot.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { method: "GET", query: ["url", "captured_at"], postWhen: args => Boolean(args.audit || args.rule_version || args.target), route: "/api/agent/readiness_snapshot" }),
+  tool("readiness_compare",
+    "Compare two readiness snapshots by dimension and check without claiming causality.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { method: "POST", route: "/api/agent/readiness_compare" }),
+  tool("pilot_report",
+    "Create a baseline-to-recheck Pilot report separating technical, A1, A2, and B1 evidence.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { method: "GET", postWhen: args => Boolean(!args.pilot_id), query: ["pilot_id"], route: "/api/agent/pilot_report" }),
+  tool("get_pricing",
+    "Read machine-readable AEO Agent plans.",
+    GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/pricing", method: "GET" }),
+  tool("agent_billing_guide",
+    "Read free routes, paid routes, checkout intents, and x402-style job payment boundaries.",
+    GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/billing_guide", method: "GET" }),
+  tool("agent_checkout",
+    "Create a checkout session for paid AEO Agent work.",
+    {"type": "object", "properties": {"plan": {"type": "string"}}, "required": ["plan"]},
+    { route: "/api/agent/checkout", method: "POST" }),
+  tool("self_audit",
+    "Audit this AEO Agent service's own Agent-first surfaces.",
+    GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/self_audit", method: "GET" }),
+  tool("get_health",
+    "Read this service's Agent-first health state.",
+    GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA,
+    { route: "/agent/health.json", method: "GET" }),
+  tool("self_backlog",
+    "Generate this service's self-optimization backlog.",
+    GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/self_backlog", method: "GET" }),
+  tool("agentx_passport",
+    "Read this service's AgentX.ID Passport.",
+    GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/passport", method: "GET" }),
+  tool("proof_graph",
+    "Read the real evidence graph behind an AgentX.ID Passport.",
+    GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/proof_graph", method: "GET" }),
+  tool("a1_ai_reads",
+    "Ingest and summarize real AI crawler read events from HTTP/CDN logs.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "events": {"type": "array", "items": {"type": "object"}}, "logs": {"type": "array", "items": {"type": "object"}}, "user_agent": {"type": "string"}, "status": {"type": "string"}}, "required": []},
+    { route: "/api/agent/a1_reads", method: "GET", postWhen: args => Boolean(Array.isArray(args.events) || Array.isArray(args.logs) || args.user_agent), query: ["url"] }),
+  tool("a1_ai_read_dashboard",
+    "Summarize A1 AI crawler reads into dashboard KPI cards, provider rows, top paths, and failed reads.",
+    A1_AI_READ_DASHBOARD_INPUT_SCHEMA,
+    { route: "/api/agent/a1_dashboard", method: "GET", postWhen: args => Boolean(Array.isArray(args.events) || Array.isArray(args.logs) || args.user_agent), query: ["url"] }),
+  tool("a1_ai_read_evidence_package",
+    "Package A1 AI crawler reads into reviewable evidence files with samples, failed reads, labels, and non-claims.",
+    A1_AI_READ_DASHBOARD_INPUT_SCHEMA,
+    { route: "/api/agent/a1_read_package", method: "GET", postWhen: args => Boolean(Array.isArray(args.events) || Array.isArray(args.logs) || args.user_agent), query: ["url"] }),
+  tool("a2_ai_citations",
+    "Ingest and summarize AI answer citations, mentions, competitors, and share-of-voice.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "target_url": {"type": "string"}, "probes": {"type": "array", "items": {"type": "object"}}, "prompt": {"type": "string"}, "answer": {"type": "string"}, "citations": {"type": "array", "items": {}}, "engine": {"type": "string"}, "competitors": {"type": "array", "items": {"type": "string"}}}, "required": []},
+    { route: "/api/agent/a2_citations", method: "GET", postWhen: args => Boolean(Array.isArray(args.probes) || args.prompt || args.answer || Array.isArray(args.citations)), query: ["url"] }),
+  tool("a2_ai_citation_evidence_package",
+    "Package imported AI answer probes into reviewable citation, mention, coverage, and non-claim evidence files.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "probes": {"type": "array", "items": {"type": "object"}}, "events": {"type": "array", "items": {"type": "object"}}, "probe_set": {"type": "object"}, "period": {"type": "object"}, "verify_artifacts": {"type": "boolean"}}, "required": []},
+    { route: "/api/agent/a2_citation_package", method: "GET", postWhen: args => Boolean(Array.isArray(args.probes) || Array.isArray(args.events) || args.prompt || args.answer), query: ["url"] }),
+  tool("a2_probe_sets",
+    "Create stable buyer-question probe sets for comparable monthly AI answer visibility measurement.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "topics": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "engines": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "market": {"type": "string"}, "cadence": {"type": "string"}}, "required": ["url"]},
+    { route: "/api/agent/a2_probe_sets", method: "POST" }),
+  tool("b1_conversions",
+    "Ingest and summarize AI-attributed lead, RFQ, order, and CRM conversion events.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "events": {"type": "array", "items": {"type": "object"}}, "conversions": {"type": "array", "items": {"type": "object"}}, "event": {"type": "string"}, "referrer": {"type": "string"}, "survey_source": {"type": "string"}, "value": {"type": "number"}, "currency": {"type": "string"}}, "required": []},
+    { route: "/api/agent/b1_conversions", method: "GET", postWhen: args => Boolean(Array.isArray(args.events) || Array.isArray(args.conversions) || args.event || args.referrer || args.survey_source || args.value), query: ["url"] }),
+  tool("b1_conversion_evidence_package",
+    "Package B1 conversion attribution into reviewable evidence files with CRM reconciliation and non-claim labels.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "events": {"type": "array", "items": {"type": "object"}}, "conversions": {"type": "array", "items": {"type": "object"}}, "period": {"type": "object"}}, "required": []},
+    { route: "/api/agent/b1_conversion_package", method: "GET", postWhen: args => Boolean(Array.isArray(args.events) || Array.isArray(args.conversions)), query: ["url"] }),
+  tool("f1_implementation_bundle",
+    "Generate reviewable llms.txt, Agent Card, Schema.org, and WebMCP snippets for a website agent.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/implementation_bundle", method: "GET", query: ["url"], flags: ["audit"] }),
+  tool("a0_audit_file_package",
+    "Package E1, R1, F1, V1, G3, C1, C2, and C3 handoff instructions into one reviewable audit file package.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/audit_file_package", method: "GET", postWhen: args => Boolean(args.content || args.page || args.questions || args.competitors || args.topics || args.engines), query: ["url"], flags: ["audit"] }),
+  tool("s1_skill_package",
+    "Generate an installable Skill package with SKILL.md, OpenAPI, MCP, and Agent-readable usage instructions.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/skill_package", method: "GET", postWhen: args => Boolean(args.mode), query: ["url"] }),
+  tool("v1_installation_verification",
+    "Verify deployed F1 files and snippets using audit and E1 evidence.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/installation_verification", method: "GET", postWhen: args => Boolean(args.audit), query: ["url"] }),
+  tool("c1_content_optimization_plan",
+    "Generate answer-first rewrites, schema guidance, citation-gap matrix, and a 30-day content citability plan.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/content_optimization_plan", method: "GET", postWhen: args => Boolean((args.content || args.page || args.questions || args.competitors || args.audit)), query: ["url"] }),
+  tool("c4_content_workflow_package",
+    "Package C1/C2/C3 content work into Agent-readable deliverable files with evidence labels.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/content_workflow_package", method: "GET", postWhen: args => Boolean((args.content || args.page || args.questions || args.competitors || args.engines || args.topics || args.audit)), query: ["url"] }),
+  tool("content_optimization_pack",
+    "Bundle C1, C2, C4, and M8 content optimization outputs into one Agent-ready execution pack.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/content_pack", method: "GET", postWhen: args => Boolean(args.content || args.page || args.questions || args.competitors || args.engines || args.topics || args.audit || args.published_items || args.items || args.evidence), query: ["url"] }),
+  tool("c5_content_workflow_review",
+    "Review a Content Pack or C4 package for complete six-step delivery and evidence-safe claims.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/content_workflow_review", method: "GET", postWhen: args => Boolean(args.content_pack || args.pack || args.content_workflow_package || args.package), query: ["url"] }),
+  tool("m8_content_publication_evidence_package",
+    "Track C4 content publication with proof URLs, optional strict HTTP proof fetch, accepted items, rejected items, and pending outputs.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/content_publication_package", method: "GET", postWhen: args => Boolean((args.published_items || args.items || args.evidence || args.content_workflow_package)), query: ["url"] }),
+  tool("c1_citation_gap_matrix",
+    "Extract a C1 target-vs-competitor citation-gap matrix without fabricated scores.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/citation_gap_matrix", method: "GET", postWhen: args => Boolean((args.content || args.page || args.questions || args.competitors || args.audit || args.content_plan)), query: ["url"] }),
+  tool("c1_community_citation_plan",
+    "Extract a C1 white-hat community citation plan with proof fields and guardrails.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/community_citation_plan", method: "GET", postWhen: args => Boolean((args.content || args.page || args.questions || args.competitors || args.audit || args.content_plan)), query: ["url"] }),
+  tool("c2_prompt_test_run_sheet",
+    "Create a fixed manual AI prompt-test run sheet that can be imported into A2 citation measurement.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/prompt_test_run_sheet", method: "GET", postWhen: args => Boolean((args.content_plan || args.questions || args.topics || args.engines || args.competitors)), query: ["url"] }),
+  tool("c3_prompt_test_results_import",
+    "Import completed C2 prompt-test rows into A2 citation evidence.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/prompt_test_results", method: "POST" }),
+  tool("e1_evidence_pack",
+    "Return deterministic sampled-page evidence details for every audit check.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/evidence_pack", method: "GET", postWhen: args => Boolean(args.audit), query: ["url"] }),
+  tool("r1_audit_report",
+    "Generate a customer-readable SEO/AEO/GEO/AGO audit report and priority action plan.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/audit_report", method: "GET", postWhen: args => Boolean(args.audit), query: ["url"] }),
+  tool("industry_taxonomy",
+    "Read the canonical 12-industry taxonomy and buyer/conversion goals.",
+    GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA,
+    { method: "GET", route: "/api/agent/industry_taxonomy" }),
+  tool("p2_parity_inspect",
+    "Run a domain-bound canonical audit with explainable industry classification, evidence-only AI View, and integrity-checked benchmark output.",
+    P2_PARITY_INSPECT_INPUT_SCHEMA,
+    { method: "POST", auth: "site-key", route: "/api/agent/p2_parity_inspect", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("pilot_program",
+    "Enroll a verified website and record evidence-bound Pilot cycles.",
+    P2_PARITY_INSPECT_INPUT_SCHEMA,
+    { method: "GET", auth: "site-key", query: ["url"], postWhen: args => Boolean(args.action || args.snapshot || args.baseline_snapshot || args.report), route: "/api/agent/pilot/program", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("managed_service_customer_dashboard",
+    "Return the managed-service view over canonical xAgent ID scores and evidence.",
+    P2_PARITY_INSPECT_INPUT_SCHEMA,
+    { method: "POST", auth: "site-key", route: "/api/agent/managed_service/customer_dashboard", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("checkout_session",
+    MCP_MESSAGES.en.checkout_session,
+    P2_PARITY_INSPECT_INPUT_SCHEMA,
+    { method: "POST", auth: "site-key", route: "/api/agent/checkout/session", requirements: ["verified_domain", "site_agent_key", "configured_provider"] }),
+  tool("checkout_status",
+    "Read provider-confirmed entitlements for the authenticated website.",
+    P2_PARITY_INSPECT_INPUT_SCHEMA,
+    { method: "GET", auth: "site-key", query: ["url"], route: "/api/agent/checkout/status", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("billing_portal",
+    "Open a short-lived provider-hosted subscription management session for the authenticated website.",
+    P2_PARITY_INSPECT_INPUT_SCHEMA,
+    { method: "POST", auth: "site-key", route: "/api/agent/billing/portal", requirements: ["verified_domain", "site_agent_key", "configured_provider"] }),
+  tool("g1_google_official",
+    "Ingest and summarize Google PageSpeed / Lighthouse reports for SEO and Agentic Browsing evidence.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "fetch": {"type": "boolean"}, "report": {"type": "object"}, "reports": {"type": "array", "items": {"type": "object"}}, "result": {"type": "object"}, "results": {"type": "array", "items": {"type": "object"}}}, "required": []},
+    { route: "/api/agent/g1_google_official", method: "GET", postWhen: args => Boolean(Array.isArray(args.reports) || Array.isArray(args.results) || args.report || args.result || args.lighthouseResult), query: ["url"], flags: ["fetch"] }),
+  tool("g2_google_delta",
+    "Compare before-after Google PageSpeed / Lighthouse snapshots for SEO and Agentic Browsing movement.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "before": {"type": "object"}, "after": {"type": "object"}, "report": {"type": "object"}, "reports": {"type": "array", "items": {"type": "object"}}, "result": {"type": "object"}, "results": {"type": "array", "items": {"type": "object"}}}, "required": []},
+    { route: "/api/agent/g2_google_delta", method: "GET", postWhen: args => Boolean(Array.isArray(args.reports) || Array.isArray(args.results) || args.before || args.after || args.report || args.result), query: ["url"] }),
+  tool("g3_google_verification_plan",
+    "Create a strict PageSpeed / Lighthouse rerun plan for before-after validation.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "audit": {"type": "object"}}, "required": []},
+    { route: "/api/agent/g3_google_verification_plan", method: "GET", query: ["url"], flags: ["audit"] }),
+  tool("m1_outcome_report",
+    "Combine G2, A1, A2, B1, and job evidence into a measurable AEO outcome report.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { method: "GET", query: ["url"], route: "/api/agent/outcome_report" }),
+  tool("m1_outcome_evidence_package",
+    "Package M1 outcome evidence into reviewable files with claim limits and next actions.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/outcome_package", method: "GET", query: ["url"] }),
+  tool("m2_monthly_optimization_package",
+    "Package O1, M1, I1 insights, O1 job drafts, and verification steps into one monthly execution handoff.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/monthly_package", method: "GET", postWhen: args => Boolean(args.content || args.page || args.questions || args.competitors || args.engines || args.topics || args.content_publication_package || args.a2_citation_package), query: ["url"], flags: ["audit"] }),
+  tool("m3_monthly_execution_tracker",
+    "Turn M2, job statuses, content review, and verification steps into an owned monthly execution workboard.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/monthly_tracker", method: "GET", postWhen: args => Boolean(args.content || args.page || args.questions || args.competitors || args.engines || args.topics || args.content_publication_package || args.a2_citation_package), query: ["url"], flags: ["audit"] }),
+  tool("m4_monthly_outcome_scorecard",
+    "Separate reportable monthly AEO evidence from non-reportable causality, ranking, and revenue claims.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/monthly_scorecard", method: "GET", postWhen: args => Boolean(args.content || args.page || args.questions || args.competitors || args.engines || args.topics || args.content_publication_package || args.a2_citation_package), query: ["url"], flags: ["audit"] }),
+  tool("m5_monthly_dashboard",
+    "Summarize monthly AEO/SEO evidence as KPI cards with proof levels, claim limits, and next actions.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/monthly_dashboard", method: "GET", postWhen: args => Boolean(args.content || args.page || args.questions || args.competitors || args.engines || args.topics || args.content_publication_package || args.a2_citation_package), query: ["url"], flags: ["audit"] }),
+  tool("o1_optimization_cycle",
+    "Package SDK evidence, G3, I1, audit-check job drafts, and M1 into one continuous optimization cycle.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/optimization_cycle", method: "GET", query: ["url"], flags: ["audit"] }),
+  tool("i1_insights",
+    "Generate evidence-backed AEO optimization insights from G1/A1/A2/B1 and audit evidence.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/insights", method: "GET", postWhen: args => Boolean(args.audit), query: ["url"] }),
+  tool("i1_job_drafts",
+    "Turn standalone I1 optimization insights into scoped AEO job drafts.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/insights/job_drafts", method: "POST" }),
+  tool("site_agent_install_descriptor",
+    "Return the verified website agent's private install descriptor, including browser SDK install payload.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "install_descriptor"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "install_descriptor", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_implementation_bundle",
+    "Return private F1 implementation files and snippets for the verified website agent.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "implementation_bundle"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "implementation_bundle", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_audit_file_package",
+    "Return a private A0 audit file package with evidence, report, implementation files, content work, and verification steps.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "audit_file_package"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}, "page": {"type": "object"}, "content": {"type": "string"}, "text": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "topics": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "engines": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "market": {"type": "string"}, "cadence": {"type": "string"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "audit_file_package", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_skill_package",
+    "Return a private S1 installable Skill package for the verified website agent.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "skill_package"}, "mode": {"type": "object"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "skill_package", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_installation_verification",
+    "Verify private V1 installation status for the verified website agent.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "installation_verification"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "installation_verification", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_content_optimization_plan",
+    "Generate private C1 answer-first rewrites, schema guidance, citation gaps, and a 30-day plan.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "content_optimization_plan"}, "page": {"type": "object"}, "content": {"type": "string"}, "text": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "content_optimization_plan", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_content_workflow_package",
+    "Return a private C4 agent-ready content workflow package with deliverable files and evidence labels.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "content_workflow_package"}, "page": {"type": "object"}, "content": {"type": "string"}, "text": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "topics": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "engines": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "market": {"type": "string"}, "cadence": {"type": "string"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "content_workflow_package", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_content_repair_pack",
+    "Return a private C6 content repair package from C5 review items.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "content_repair_pack"}, "review_gate": {"type": "object"}, "c5_repair_history": {"type": "object"}, "history": {"type": "object"}, "content_pack": {"type": "object"}, "pack": {"type": "object"}, "content_workflow_package": {"type": "object"}, "package": {"type": "object"}, "page": {"type": "object"}, "content": {"type": "string"}, "text": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "content_repair_pack", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_content_pack",
+    "Return one private Agent-ready Content Pack that bundles C1, C2, C4, and M8 evidence boundaries.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "content_pack"}, "page": {"type": "object"}, "content": {"type": "string"}, "text": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "topics": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "engines": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "market": {"type": "string"}, "cadence": {"type": "string"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}, "content_plan": {"type": "object"}, "plan": {"type": "string"}, "content_workflow_package": {"type": "object"}, "published_items": {"type": "array", "items": {"type": "object"}}, "items": {"type": "array", "items": {"type": "object"}}, "evidence": {"type": "object"}, "verify_publication": {"type": "boolean"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "content_pack", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_content_publication_package",
+    "Return a private M8 content publication evidence package for C4 outputs, proof URLs, and optional strict HTTP proof verification.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "content_publication_package"}, "content_workflow_package": {"type": "object"}, "package": {"type": "object"}, "published_items": {"type": "array", "items": {"type": "object"}}, "items": {"type": "array", "items": {"type": "object"}}, "evidence": {"type": "object"}, "page": {"type": "object"}, "content": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "topics": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "engines": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "market": {"type": "string"}, "cadence": {"type": "string"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "content_publication_package", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_a1_read_evidence_package",
+    "Return a private A1 AI crawler read evidence package from verified HTTP/CDN logs.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "a1_read_evidence_package"}, "events": {"type": "array", "items": {"type": "object"}}, "logs": {"type": "array", "items": {"type": "object"}}, "source": {"type": "string"}, "period": {"type": "object"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "a1_read_evidence_package", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_a1_dashboard",
+    "Return a private A1 AI crawler read dashboard with provider, path, status, and failure KPIs.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "a1_dashboard"}, "events": {"type": "array", "items": {"type": "object"}}, "logs": {"type": "array", "items": {"type": "object"}}, "source": {"type": "string"}, "period": {"type": "object"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "a1_dashboard", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_site_signal_package",
+    "Return a private S1 site signal evidence package from observed SDK or connector page-structure signals.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "site_signal_package"}, "events": {"type": "array", "items": {"type": "object"}}, "sdk_events": {"type": "array", "items": {"type": "object"}}, "period": {"type": "object"}, "source": {"type": "string"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "site_signal_package", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_a2_citation_evidence_package",
+    "Return a private A2 AI answer citation evidence package from imported prompt-test results.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "a2_citation_evidence_package"}, "probes": {"type": "array", "items": {"type": "object"}}, "events": {"type": "array", "items": {"type": "object"}}, "probe_set": {"type": "object"}, "period": {"type": "object"}, "source": {"type": "string"}, "verify_artifacts": {"type": "boolean"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "a2_citation_evidence_package", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_b1_conversion_evidence_package",
+    "Return a private B1 conversion evidence package from verified lead, RFQ, order, and CRM events.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "b1_conversion_evidence_package"}, "events": {"type": "array", "items": {"type": "object"}}, "conversions": {"type": "array", "items": {"type": "object"}}, "period": {"type": "object"}, "source": {"type": "string"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "b1_conversion_evidence_package", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_m1_outcome_evidence_package",
+    "Return a private M1 outcome evidence package for the verified website agent.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "m1_outcome_evidence_package"}, "period": {"type": "object"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "m1_outcome_evidence_package", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_m2_monthly_optimization_package",
+    "Return a private M2 monthly optimization package for the verified website agent.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "m2_monthly_optimization_package"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}, "period": {"type": "object"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "m2_monthly_optimization_package", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_m3_monthly_execution_tracker",
+    "Return a private M3 monthly execution tracker that turns the monthly package into owned tasks, blockers, and evidence follow-ups.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "m3_monthly_execution_tracker"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}, "period": {"type": "object"}, "page": {"type": "object"}, "content": {"type": "string"}, "text": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "topics": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "engines": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "market": {"type": "string"}, "cadence": {"type": "string"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "m3_monthly_execution_tracker", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_m4_monthly_outcome_scorecard",
+    "Return a private M4 monthly outcome scorecard that separates reportable evidence from non-reportable causality claims.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "m4_monthly_outcome_scorecard"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}, "period": {"type": "object"}, "page": {"type": "object"}, "content": {"type": "string"}, "text": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "topics": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "engines": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "market": {"type": "string"}, "cadence": {"type": "string"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "m4_monthly_outcome_scorecard", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_m5_monthly_dashboard",
+    "Return a private M5 monthly dashboard with KPI cards, proof levels, claim limits, and next actions.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "m5_monthly_dashboard"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}, "period": {"type": "object"}, "page": {"type": "object"}, "content": {"type": "string"}, "text": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "topics": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "engines": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "market": {"type": "string"}, "cadence": {"type": "string"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "m5_monthly_dashboard", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_monthly_evidence_loop",
+    "Run the full private monthly evidence loop: Content Pack, M2 package, M3 tracker, M4 scorecard, and M5 dashboard.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "monthly_evidence_loop"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}, "period": {"type": "object"}, "page": {"type": "object"}, "content": {"type": "string"}, "text": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "topics": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "engines": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "market": {"type": "string"}, "cadence": {"type": "string"}, "content_pack": {"type": "object"}, "pack": {"type": "object"}, "content_publication_package": {"type": "object"}, "a2_citation_package": {"type": "object"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "monthly_evidence_loop", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_insights_feed",
+    "Return a private compact insights feed that installed website agents can poll for current tasks and evidence follow-ups.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "insights_feed"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}, "period": {"type": "object"}, "page": {"type": "object"}, "content": {"type": "string"}, "text": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "topics": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "engines": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "market": {"type": "string"}, "cadence": {"type": "string"}, "content_publication_package": {"type": "object"}, "a2_citation_package": {"type": "object"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "insights_feed", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_refresh_insight_inbox",
+    "Persist the current private insights feed into the verified website agent's durable inbox without duplicating existing items.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "refresh_insight_inbox"}, "feed": {"type": "object"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}, "period": {"type": "object"}, "page": {"type": "object"}, "content": {"type": "string"}, "text": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "topics": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "engines": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "market": {"type": "string"}, "cadence": {"type": "string"}, "content_publication_package": {"type": "object"}, "a2_citation_package": {"type": "object"}, "events": {"type": "array", "items": {"type": "object"}}, "sdk_events": {"type": "array", "items": {"type": "object"}}}, "required": ["url", "agent_key", "action"]},
+    { method: "POST", action: "refresh_insight_inbox", route: "/api/site_agents/call", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_insight_inbox",
+    "List pending durable insight inbox items for the verified website agent.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "insight_inbox"}, "include_acknowledged": {"type": "boolean"}, "include_all": {"type": "boolean"}, "status": {"type": "string"}}, "required": ["url", "agent_key", "action"]},
+    { method: "POST", action: "insight_inbox", route: "/api/site_agents/call", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_acknowledge_insight",
+    "Acknowledge or dismiss one durable insight inbox item for the verified website agent.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "acknowledge_insight"}, "item_id": {"type": "string"}, "status": {"type": "string"}, "decision": {"type": "string"}}, "required": ["url", "agent_key", "action", "item_id"]},
+    { method: "POST", action: "acknowledge_insight", route: "/api/site_agents/call", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_apply_plan",
+    "Return a private apply plan that turns the insights feed into CMS, worker, or repo PR execution routes.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "apply_plan"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}, "period": {"type": "object"}, "page": {"type": "object"}, "content": {"type": "string"}, "text": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "topics": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "engines": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "market": {"type": "string"}, "cadence": {"type": "string"}, "content_publication_package": {"type": "object"}, "a2_citation_package": {"type": "object"}, "feed": {"type": "object"}, "delivery_targets": {"type": "array", "items": {"type": "object"}}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "apply_plan", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_apply_evidence",
+    "Submit proof that an apply-plan item was executed, creating or updating the shared AEO job ledger.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "apply_evidence"}, "apply_item_id": {"type": "string"}, "apply_item": {"type": "object"}, "apply_plan": {"type": "object"}, "job_id": {"type": "string"}, "evidence_uri": {"type": "string"}, "proof_url": {"type": "string"}, "pull_request_url": {"type": "string"}, "deployment_reference": {"type": "string"}, "evidence": {"type": "object"}, "source_feed_hash": {"type": "string"}, "verify_proof": {"type": "boolean"}, "verify": {"type": "boolean"}}, "required": ["url", "agent_key", "action", "apply_item_id"]},
+    { route: "/api/site_agents/call", method: "POST", action: "apply_evidence", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_citation_gap_matrix",
+    "Return a private C1 citation-gap matrix without fabricating competitor scores.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "citation_gap_matrix"}, "page": {"type": "object"}, "content": {"type": "string"}, "text": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "citation_gap_matrix", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_community_citation_plan",
+    "Return a private C1 white-hat community citation plan with proof fields and guardrails.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "community_citation_plan"}, "page": {"type": "object"}, "content": {"type": "string"}, "text": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "competitors": {"type": "array", "items": {"type": "string"}}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "community_citation_plan", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_prompt_test_run_sheet",
+    "Create a private C2 prompt-test run sheet for the verified website agent.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "prompt_test_run_sheet"}, "content_plan": {"type": "object"}, "plan": {"type": "string"}, "questions": {"type": "array", "items": {"type": "string"}}, "prompts": {"type": "array", "items": {"type": "string"}}, "topics": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "engines": {"anyOf": [{"type": "string"}, {"type": "array", "items": {"type": "string"}}]}, "competitors": {"type": "array", "items": {"type": "string"}}, "market": {"type": "string"}, "cadence": {"type": "string"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "prompt_test_run_sheet", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_prompt_test_results_import",
+    "Import private C3 completed prompt-test rows for the verified website agent.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "prompt_test_results"}, "sheet": {"type": "object"}, "run_sheet": {"type": "object"}, "rows": {"type": "array", "items": {"type": "object"}}, "results": {"type": "array", "items": {"type": "object"}}, "completed_rows": {"type": "array", "items": {"type": "object"}}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "prompt_test_results", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_insights",
+    "Generate private I1 optimization insights for the verified website agent.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "insights"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "insights", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_outcome_report",
+    "Return the verified website agent's private M1 outcome report.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "outcome_report"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "outcome_report", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_optimization_cycle",
+    "Return the verified website agent's private O1 continuous optimization cycle with audit checks merged into the O1 job queue.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "optimization_cycle"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "optimization_cycle", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_job_drafts",
+    "Create scoped AEO job drafts from I1 insights, audit checks, or C5 repair items for the verified website agent only.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "job_drafts"}, "audit": {"type": "object"}, "audit_url": {"type": "boolean"}, "insights": {"type": "object"}, "review_gate": {"type": "object"}, "provider": {"type": "string"}, "evaluator": {"type": "string"}, "currency": {"type": "string"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "job_drafts", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_accept_job_draft",
+    "Accept one of the verified website agent's own drafts into the AEO job ledger.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "accept_job_draft"}, "draft": {"type": "object"}, "provider": {"type": "string"}, "evaluator": {"type": "string"}, "currency": {"type": "string"}, "budget": {"type": "number"}}, "required": ["url", "agent_key", "action", "draft"]},
+    { route: "/api/site_agents/call", method: "POST", action: "accept_job_draft", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_decide_job_draft",
+    "Record accept, defer, or reject decisions for the verified website agent's own drafts.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "decide_job_draft"}, "decision": {"type": "string", "enum": ["accept", "defer", "reject"]}, "draft": {"type": "object"}, "draft_id": {"type": "string"}, "create_payload": {"type": "object"}, "reason": {"type": "string"}, "provider": {"type": "string"}, "evaluator": {"type": "string"}, "currency": {"type": "string"}, "budget": {"type": "number"}}, "required": ["url", "agent_key", "action", "decision"]},
+    { route: "/api/site_agents/call", method: "POST", action: "decide_job_draft", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_draft_decisions",
+    "List draft decision receipts for the verified website agent only.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "draft_decisions"}, "decision": {"type": "string"}, "draft_id": {"type": "string"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "draft_decisions", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_decision_reviews",
+    "List owner apply-plan decision review receipts for the verified website agent only.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "decision_reviews"}, "decision": {"type": "string"}, "apply_item_id": {"type": "string"}, "item_id": {"type": "string"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "decision_reviews", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_jobs",
+    "List redacted AEO job records for the verified website agent only.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "jobs"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "jobs", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_c5_repair_history",
+    "Return redacted C5 content repair history for the verified website agent only.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "c5_repair_history"}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", action: "c5_repair_history", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("site_agent_report_job_evidence",
+    "Attach implementation evidence to one of the verified website agent's own jobs.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "const": "report_job_evidence"}, "job_id": {"type": "string"}, "evidence_uri": {"type": "string"}, "evidence": {"type": "object"}}, "required": ["url", "agent_key", "action", "job_id"]},
+    { route: "/api/site_agents/call", method: "POST", action: "report_job_evidence", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("google_cloud_alignment",
+    "Read the Google Cloud Enterprise Agent Platform alignment brief.",
+    GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/google_alignment", method: "GET" }),
+  tool("google_agent_identity_bridge",
+    "Prepare Google Agent Identity onboarding or validate an unverified effectiveIdentity binding candidate without importing Google credentials.",
+    {"type": "object", "properties": {"twin3_agent_id": {"type": "string"}, "evidence": {"type": "object"}}, "required": []},
+    { route: "/api/agent/google_identity_bridge", method: "GET", postWhen: args => Boolean(args.evidence), query: ["twin3_agent_id"], queryDefaults: {"twin3_agent_id": "agt_0000"} }),
+  tool("trust_commerce_stack",
+    "Read the AgentX.ID Passport, SBT, ERC-8004, x402, ERC-8183, and AP2 architecture plan.",
+    GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA,
+    { route: "/api/agent/trust_stack", method: "GET" }),
+  tool("aeo_job_drafts",
+    "Turn failed audit checks and Agentic Browsing gaps into scoped AEO job drafts.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/job_drafts", method: "POST" }),
+  tool("aeo_job_accept_draft",
+    "Accept an AEO job draft into the job ledger without funding it.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/agent/job_drafts/accept", method: "POST" }),
+  tool("aeo_job_create",
+    "Create an ERC-8183-style AEO delivery job.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "job_type": {"type": "string"}, "provider": {"type": "string"}, "evaluator": {"type": "string"}, "budget": {"type": "number"}, "currency": {"type": "string"}}, "required": ["url"]},
+    { route: "/api/agent/jobs/create", method: "POST" }),
+  tool("aeo_job_fund",
+    "Mark an AEO delivery job as funded without exposing payment secrets.",
+    {"type": "object", "properties": {"job_id": {"type": "string"}, "payment_reference": {"type": "string"}}, "required": ["job_id"]},
+    { route: "/api/agent/jobs/fund", method: "POST" }),
+  tool("aeo_job_payment_quote",
+    "Return an x402-style payment requirement for an open AEO job.",
+    {"type": "object", "properties": {"job_id": {"type": "string"}}, "required": ["job_id"]},
+    { route: "/api/agent/jobs/payment_quote", method: "POST" }),
+  tool("aeo_job_payment_proof",
+    "Accept a payment proof hash and mark an open AEO job as funded.",
+    {"type": "object", "properties": {"job_id": {"type": "string"}, "payment_proof": {"type": "object"}, "payment_signature": {"type": "string"}}, "required": ["job_id"]},
+    { route: "/api/agent/jobs/fund_with_proof", method: "POST" }),
+  tool("aeo_job_submit",
+    "Submit an AEO delivery job by deliverable hash or URI.",
+    {"type": "object", "properties": {"job_id": {"type": "string"}, "provider": {"type": "string"}, "deliverable_uri": {"type": "string"}, "deliverable": {"type": "object"}}, "required": ["job_id"]},
+    { route: "/api/agent/jobs/submit", method: "POST" }),
+  tool("aeo_job_evaluate",
+    "Complete or reject an AEO delivery job with evaluator attestation.",
+    {"type": "object", "properties": {"job_id": {"type": "string"}, "evaluator": {"type": "string"}, "decision": {"type": "string"}, "reason": {"type": "string"}}, "required": ["job_id"]},
+    { route: "/api/agent/jobs/evaluate", method: "POST" }),
+  tool("register_site_agent",
+    MCP_MESSAGES.en.register_site_agent,
+    {"type": "object", "properties": {"url": {"type": "string"}, "email": {"type": "string"}}, "required": ["url"]},
+    { route: "/api/site_agents/register", method: "POST" }),
+  tool("site_agent_install_guide",
+    "Return the public no-side-effect Site Agent installation guide.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { route: "/api/site_agents/install_guide", method: "GET", query: ["url"] }),
+  tool("verify_domain_ownership",
+    "Verify DNS TXT, well-known JSON, or HTML meta proof and issue a Site Agent Key.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "method": {"type": "string"}}, "required": ["url"]},
+    { route: "/api/site_agents/verify_domain", method: "POST" }),
+  tool("start_site_agent_key_recovery",
+    "Start a short-lived Site Agent Key recovery challenge bound to a fresh DNS TXT proof and one-time private capability.",
+    {"type": "object", "properties": {"url": {"type": "string", "format": "uri"}}, "required": ["url"], "additionalProperties": false},
+    { method: "POST", route: "/api/site_agents/key_recovery/start" }),
+  tool("complete_site_agent_key_recovery",
+    "Complete recovery only after fresh DNS proof and the private recovery capability are both supplied in the request body.",
+    {"type": "object", "properties": {"url": {"type": "string", "format": "uri"}, "challenge_id": {"type": "string"}, "recovery_capability": {"type": "string", "writeOnly": true}}, "required": ["url", "challenge_id", "recovery_capability"], "additionalProperties": false},
+    { method: "POST", route: "/api/site_agents/key_recovery/complete", requirements: ["fresh_dns_txt", "private_recovery_capability"] }),
+  tool("site_agent_actions",
+    "Read the machine-readable Site Agent action catalog.",
+    GOOGLE_MARKETPLACE_PRICING_PACK_INPUT_SCHEMA,
+    { route: "/api/site_agents/actions", method: "GET" }),
+  tool("site_agent_call",
+    "Authenticated call from a customer website agent.",
+    {"type": "object", "properties": {"url": {"type": "string"}, "agent_key": {"type": "string"}, "action": {"type": "string", "enum": ["a1_ai_reads", "a1_dashboard", "a1_package", "a1_read_evidence_package", "a2_citation_evidence_package", "a2_package", "accept_draft", "accept_job_draft", "acknowledge_insight", "agent_feed", "ai_citation_evidence_package", "ai_read_dashboard", "ai_read_evidence_package", "ai_read_logs", "apply_evidence", "apply_plan", "audit_file_package", "audit_report", "b1_conversion_evidence_package", "b1_conversions", "b1_package", "c5_repair_history", "citation_gap_matrix", "community_citation_plan", "connector_events", "connector_sdk_events", "content_optimization_plan", "content_pack", "content_publication_package", "content_repair_pack", "content_to_dashboard_loop", "content_workflow_package", "conversion_events", "conversion_evidence_package", "customer_performance_comparison", "customer_performance_history", "customer_performance_snapshot", "dashboard", "decide_job_draft", "decision_reviews", "draft_decisions", "enterprise_policy", "evidence_pack", "execution_apply_plan", "execution_tracker", "i1_accept_job_draft", "i1_insights", "i1_job_drafts", "implementation_bundle", "insight_inbox", "insights", "insights_feed", "insights_job_drafts", "install_descriptor", "installation_verification", "job_drafts", "job_evidence", "job_status", "jobs", "list_jobs", "m19_apply_plan", "m1_outcome_evidence_package", "m1_outcome_report", "m1_package", "m20_apply_evidence", "m2_monthly_optimization_package", "m2_package", "m3_monthly_execution_tracker", "m3_tracker", "m4_monthly_outcome_scorecard", "m4_scorecard", "m5_dashboard", "m5_monthly_dashboard", "measurement_comparison", "measurement_history", "measurement_snapshot", "monthly_dashboard", "monthly_evidence_loop", "monthly_loop", "monthly_optimization_package", "monthly_package", "monthly_scorecard", "monthly_tracker", "operate_cycle", "operate_models", "operate_profile", "operate_rollback", "optimization_cycle", "outcome_package", "outcome_report", "outcome_scorecard", "prompt_test_results", "prompt_test_run_sheet", "refresh_insight_inbox", "report_apply_evidence", "report_job_evidence", "s1_site_signals", "save_measurement_snapshot", "sdk_event_package", "sdk_insights", "site_agent_events", "site_agent_job_evidence", "site_agent_jobs", "site_apply_plan", "site_feed", "site_monthly_evidence_loop", "site_signal_package", "site_signals_package", "skill_package", "submit_apply_evidence"]}}, "required": ["url", "agent_key", "action"]},
+    { route: "/api/site_agents/call", method: "POST", auth: "site-body", requirements: ["verified_domain", "site_agent_key"] }),
+  tool("managed_inspection_subscription",
+    "Enable or control the verified website's hosted monthly public inspection.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { method: "POST", auth: "enterprise", scopes: ["managed:write"], defaultOperation: "enable", operations: {"enable": {"method": "POST", "route": "/api/site_agents/v1/managed/subscription"}, "get": {"method": "GET", "scopes": ["insights:read"], "route": "/api/site_agents/v1/managed/subscription"}, "pause": {"method": "POST", "route": "/api/site_agents/v1/managed/subscription/pause"}, "resume": {"method": "POST", "route": "/api/site_agents/v1/managed/subscription/resume"}}, route: "/api/site_agents/v1/managed/subscription", requirements: ["verified_domain", "managed:write"] }),
+  tool("managed_inspection_runs",
+    "Read the verified website's own redacted hosted-inspection results.",
+    PUBLIC_EVIDENCE_INPUT_SCHEMA,
+    { method: "GET", auth: "enterprise", query: ["limit"], scopes: ["insights:read"], route: "/api/site_agents/v1/managed/runs", requirements: ["verified_domain", "insights:read"] }),
+  tool("hiring_intent_query",
+    "Read one exact company-approved HiringIntent for the authenticated Company Agent. No candidate data, employer credentials, or public enumeration is returned.",
+    {"type": "object", "properties": {"hiring_intent_id": {"type": "string", "pattern": "^hi_[A-Za-z0-9_-]{16,64}$"}}, "required": ["hiring_intent_id"], "additionalProperties": false},
+    { method: "GET", auth: "enterprise", query: ["hiring_intent_id"], scopes: ["recruiting:intent:read"], route: "/api/site_agents/v1/recruiting/intents", requirements: ["verified_domain", "recruiting:intent:read", "exact_hiring_intent_id"] }),
+  tool("introduction_request_query",
+    "Read one exact private introduction request for the authenticated Company Agent. Pre-consent responses contain no Human ID or profile data.",
+    {"type": "object", "properties": {"application_id": {"type": "string", "pattern": "^ir_[A-Za-z0-9_-]{20,80}$"}}, "required": ["application_id"], "additionalProperties": false},
+    { method: "GET", auth: "enterprise", query: ["application_id"], scopes: ["recruiting:introduction:read"], route: "/api/site_agents/v1/recruiting/introductions", requirements: ["verified_domain", "recruiting:introduction:read", "exact_application_id"] }),
+  tool("introduction_decision",
+    "Sign and privately deliver one accepted or declined company introduction decision under a current OA5 recruiting authority.",
+    {"type": "object", "properties": {"application_id": {"type": "string", "pattern": "^ir_[A-Za-z0-9_-]{20,80}$"}, "authority_id": {"type": "string", "pattern": "^auth_[A-Za-z0-9_-]{16,80}$"}, "decision": {"type": "string", "enum": ["accepted", "declined"]}, "idempotency_key": {"type": "string", "minLength": 16, "maxLength": 128}}, "required": ["application_id", "authority_id", "decision", "idempotency_key"], "additionalProperties": false},
+    { method: "POST", auth: "enterprise", pathParameters: ["application_id"], scopes: ["recruiting:introduction:decide"], route: "/api/site_agents/v1/recruiting/introductions/{application_id}/decision", requirements: ["verified_domain", "recruiting:introduction:decide", "current_oa5_recruiting_authority"] }),
+  tool("recruiting_authorize_pull",
+    MCP_MESSAGES.en.recruiting_authorize_pull,
+    {"type": "object", "properties": {"application_id": {"type": "string", "pattern": "^ir_[A-Za-z0-9_-]{20,80}$"}, "purpose": {"type": "string", "enum": ["disclosed_profile_fetch", "conversation_message_relay"]}, "message_id": {"type": "string", "minLength": 8, "maxLength": 128}, "idempotency_key": {"type": "string", "minLength": 16, "maxLength": 128}}, "required": ["application_id", "purpose", "idempotency_key"], "additionalProperties": false},
+    { method: "POST", auth: "enterprise", pathParameters: ["application_id"], scopes: ["recruiting:profile:read", "recruiting:conversation:send"], scopeByPurpose: {"disclosed_profile_fetch": "recruiting:profile:read", "conversation_message_relay": "recruiting:conversation:send"}, route: "/api/site_agents/v1/recruiting/introductions/{application_id}/authorizations", requirements: ["verified_domain", "purpose_specific_recruiting_scope", "current_oa5_recruiting_authority", "active_human_consent"] }),
+  tool("recruiting_disclosed_profile",
+    MCP_MESSAGES.en.recruiting_disclosed_profile,
+    {"type": "object", "properties": {"application_id": {"type": "string", "pattern": "^ir_[A-Za-z0-9_-]{20,80}$"}, "idempotency_key": {"type": "string", "minLength": 16, "maxLength": 128}}, "required": ["application_id", "idempotency_key"], "additionalProperties": false},
+    { method: "POST", auth: "enterprise", pathParameters: ["application_id"], scopes: ["recruiting:profile:read"], route: "/api/site_agents/v1/recruiting/introductions/{application_id}/profile", requirements: ["verified_domain", "recruiting:profile:read", "current_oa5_recruiting_authority", "active_human_disclosure_grant"] }),
+  tool("recruiting_conversation_message",
+    MCP_MESSAGES.en.recruiting_conversation_message,
+    {"type": "object", "properties": {"application_id": {"type": "string", "pattern": "^ir_[A-Za-z0-9_-]{20,80}$"}, "message_id": {"type": "string", "minLength": 8, "maxLength": 128}, "text": {"type": "string", "minLength": 1, "maxLength": 16384}}, "required": ["application_id", "message_id", "text"], "additionalProperties": false},
+    { method: "POST", auth: "enterprise", pathParameters: ["application_id"], scopes: ["recruiting:conversation:send"], route: "/api/site_agents/v1/recruiting/introductions/{application_id}/messages", requirements: ["verified_domain", "recruiting:conversation:send", "current_oa5_recruiting_authority", "owner_opened_conversation"] }),
+  tool("jobbank_company",
+    "Read the verified website's own source-backed LEI candidates and public TaiwanJobs summaries. Returns no Human ID or person/candidate data.",
+    {"type": "object", "properties": {"url": {"type": "string", "format": "uri"}, "agent_key": {"type": "string", "writeOnly": true}, "registration_id": {"type": "string", "pattern": "^[0-9]{8}$"}, "source_employer_id": {"type": "string", "pattern": "^[0-9]{1,20}$"}, "job_limit": {"type": "integer", "minimum": 1, "maximum": 50, "default": 50}, "include_jobs": {"type": "boolean", "default": true}}, "required": ["url", "agent_key"], "additionalProperties": false},
+    { route: "/api/site_agents/v1/jobbank/company", method: "GET", auth: "site-key", query: ["url", "registration_id", "source_employer_id", "job_limit", "include_jobs"], requirements: ["verified_domain", "site_agent_key"] }),
+  tool("company_card_resolve",
+    "Resolve one exact Taiwan registration/company ID to an unclaimed public company-card URL. This is not a company directory or candidate search.",
+    {"type": "object", "properties": {"registration_id": {"type": "string", "pattern": "^[0-9]{8}$"}, "company_id": {"type": "string", "pattern": "^TW:RA000551:[0-9]{8}$"}}, "anyOf": [{"required": ["registration_id"]}, {"required": ["company_id"]}], "additionalProperties": false},
+    { route: "/api/company-card/resolve", method: "GET", query: ["registration_id", "company_id"] })
+]);
+
+const SENSITIVE_FIELD = /^(agent_key|access_token|authorization|recovery_capability|private_key|secret)$/i;
+
+function redact(value, sensitive) {
+  if (typeof value === "string") {
+    for (const secret of sensitive.filter(item => typeof item === "string" && item)) {
+      value = value.split(secret).join("[redacted]");
+    }
+    return value;
+  }
+  if (Array.isArray(value)) return value.map(item => redact(item, sensitive));
+  if (objectValue(value)) return Object.fromEntries(Object.entries(value).map(([key, item]) => [
+    key, SENSITIVE_FIELD.test(key)
+      ? "[redacted]" : redact(item, sensitive)
+  ]));
+  return value;
+}
+
+function backendFailure(status, payload, sensitive, retryAfter) {
+  const reason = status === 401 ? MCP_MESSAGES.en.backend_authentication_failed
+    : status === 403 ? MCP_MESSAGES.en.backend_permission_denied
+    : status === 429 ? MCP_MESSAGES.en.backend_rate_limited
+    : status >= 500 ? MCP_MESSAGES.en.backend_unavailable
+    : MCP_MESSAGES.en.backend_rejected_request;
+  const code = typeof payload?.error === "string" && /^[a-z][a-z0-9_.:-]{0,127}$/i.test(payload.error)
+    ? payload.error : "backend_rejected_request";
+  const credentials = [...sensitive];
+  const collectCredentials = value => {
+    if (Array.isArray(value)) value.forEach(collectCredentials);
+    else if (objectValue(value)) for (const [key, item] of Object.entries(value)) {
+      if (SENSITIVE_FIELD.test(key) && typeof item === "string" && item) {
+        credentials.push(item);
+        if (/^authorization$/i.test(key)) credentials.push(item.replace(/^Bearer\s+/i, ""));
+      } else collectCredentials(item);
+    }
+  };
+  collectCredentials(payload);
+  const publicDetail = value => {
+    if (typeof value === "string") {
+      // Credential-bearing diagnostics can echo other, unknown secrets too.
+      // Keep the whole string private while preserving separate public reasons.
+      return redact(value, credentials) === value ? value : "[redacted]";
+    }
+    if (Array.isArray(value)) return value.map(publicDetail);
+    if (objectValue(value)) return Object.fromEntries(Object.entries(value)
+      .filter(([key]) => !/^(debug|diagnostics?|provider_diagnostics|raw|stack|stacktrace|traceback|headers)$/i.test(key))
+      .map(([key, item]) => [redact(key, credentials), SENSITIVE_FIELD.test(key) ? "[redacted]" : publicDetail(item)]));
+    return value;
+  };
+  const outcomes = {};
+  const outcomeFields = ["verification", "gate", "graph", "preflight", "verdict", "failure_codes", "failures", "blockers", "next_actions"];
+  const explanationFields = ["message", "reason", "error_message", "error_description"];
+  for (const field of outcomeFields) {
+    if (objectValue(payload) && own(payload, field)) outcomes[field] = publicDetail(payload[field]);
+  }
+  const detail = { error: publicDetail(code) };
+  for (const field of explanationFields) {
+    if (objectValue(payload) && own(payload, field)) detail[field] = publicDetail(payload[field]);
+  }
+  if (typeof payload === "string") detail.message = publicDetail(payload);
+  if (typeof payload?.error === "string" && payload.error !== code) detail.error_message = publicDetail(payload.error);
+  const contractSummary = (value, schema) => {
+    if (value?.schema !== schema) return {};
+    return { schema, ...(value.execution_status === "blocked" ? { execution_status: "blocked" } : {}) };
+  };
+  const summaries = {};
+  for (const [field, schema] of [
+    ["execution", "agentx-google-marketplace-procurement-execution-v0.1"],
+    ["runtime_evidence", "agentx-google-marketplace-runtime-evidence-gate-v0.1"],
+    ["ledger", "agentx-google-marketplace-runtime-evidence-ledger-v0.1"],
+  ]) {
+    const summary = contractSummary(payload?.[field], schema);
+    if (summary.schema) summaries[field] = summary;
+    const failures = Object.fromEntries([...outcomeFields, ...explanationFields]
+      .filter(key => objectValue(payload?.[field]) && own(payload[field], key))
+      .map(key => [key, publicDetail(payload[field][key])]));
+    if (Object.keys(failures).length) detail[field] = failures;
+  }
+  // Preserve public decisions and actionable failures, with redaction. Other
+  // backend fields remain private; execution contracts retain known summaries.
+  return {
+    isError: true,
+    content: [{ type: "text", text: JSON.stringify({
+      ok: false, status, reason, ...(retryAfter ? { retry_after: publicDetail(retryAfter) } : {}), ...outcomes,
+      ...contractSummary(payload, "agentx-google-marketplace-usage-report-execution-v0.1"), ...summaries,
+      detail
+    }, null, 2) }]
+  };
+}
+
+function createMcpRuntime({ env = process.env, endpoint = configuredEndpoint(env), fetchImpl = globalThis.fetch, timeoutMs = 30000 } = {}) {
+  const origin = new URL(endpoint);
+  if (!["http:", "https:"].includes(origin.protocol) || origin.username || origin.password || origin.search || origin.hash) {
+    throw new Error("MCP backend must be a configured HTTP(S) origin without credentials, query or fragment.");
+  }
+  const base = origin.toString().replace(/\/+$/, "");
+  const registry = TOOL_REGISTRY;
+  const byName = new Map(registry.map(entry => [entry.name, entry]));
+  let state = "new";
+
+  async function request({ method, route, query, headers, body, sensitive }) {
+    let response;
+    let payload;
+    try {
+      response = await fetchImpl(`${base}${route}${query.size ? `?${query}` : ""}`, {
+        method, headers: { Accept: "application/json", ...(body ? { "content-type": "application/json" } : {}), ...headers },
+        ...(body ? { body: JSON.stringify(body) } : {}),
+        redirect: "error", signal: AbortSignal.timeout(timeoutMs)
+      });
+      const text = await response.text();
+      try { payload = JSON.parse(text); } catch {
+        return backendFailure(response.status, { error: "backend_invalid_json" }, sensitive);
+      }
+    } catch {
+      throw new ToolError("Backend request failed or timed out; check the configured service and retry.");
+    }
+    if (payload === null) return backendFailure(response.status, { error: "backend_invalid_response" }, sensitive);
+    if (!response.ok || payload?.ok === false || payload?.isError === true || payload?.error) {
+      return backendFailure(response.status, payload, sensitive, response.headers.get("retry-after"));
+    }
+    return { content: [{ type: "text", text: JSON.stringify(payload, null, 2) }] };
+  }
+
+  async function dispatch(message) {
+    const params = message.params === undefined ? {} : message.params;
+    if (!objectValue(params)) throw new RpcError(-32602, "params must be an object");
+    if (params._meta !== undefined && !objectValue(params._meta)) throw new RpcError(-32602, "params._meta must be an object");
+    if (message.method === "initialize") {
+      if (state !== "new") throw new RpcError(-32600, "This MCP session is already initialized");
+      if (typeof params.protocolVersion !== "string" || !params.protocolVersion
+          || !objectValue(params.capabilities) || !objectValue(params.clientInfo)
+          || typeof params.clientInfo.name !== "string" || typeof params.clientInfo.version !== "string") {
+        throw new RpcError(-32602, "initialize requires protocolVersion, capabilities and clientInfo");
+      }
+      const protocolVersion = SUPPORTED_PROTOCOL_VERSIONS.includes(params.protocolVersion)
+        ? params.protocolVersion : SUPPORTED_PROTOCOL_VERSIONS[0];
+      state = "negotiated";
+      return { protocolVersion, serverInfo: { name: "agent-id", version }, capabilities: { tools: { listChanged: false } } };
+    }
+    if (message.method === "ping") {
+      if (Object.keys(params).some(key => key !== "_meta")) throw new RpcError(-32602, "ping has no tool parameters");
+      return {};
+    }
+    if (!["tools/list", "tools/call"].includes(message.method)) throw new RpcError(-32601, "Unknown method");
+    if (state !== "ready") throw new RpcError(-32002, "Initialize and send notifications/initialized before using tools");
+    if (message.method === "tools/list") {
+      if (Object.keys(params).some(key => !["cursor", "_meta"].includes(key))
+          || (params.cursor !== undefined && params.cursor !== "")) {
+        throw new RpcError(-32602, "Invalid tools/list cursor or parameters");
+      }
+      return { tools: registry.map(({ name, description, inputSchema }) => ({ name, description, inputSchema })) };
+    }
+    if (typeof params.name !== "string" || !params.name
+        || Object.keys(params).some(key => !["name", "arguments", "_meta"].includes(key))) {
+      throw new RpcError(-32602, "tools/call requires a tool name and supported parameters");
+    }
+    const entry = byName.get(own(TOOL_ALIASES, params.name) ? TOOL_ALIASES[params.name] : params.name);
+    if (!entry) throw new RpcError(-32602, "Unknown tool");
+    const args = params.arguments === undefined ? {} : params.arguments;
+    validate(entry.inputSchema, args);
+    try { return await entry.handler(args, { env, request }); } catch (error) {
+      if (error instanceof RpcError) throw error;
+      return { isError: true, content: [{ type: "text", text: error instanceof ToolError ? error.message : "Tool execution failed." }] };
+    }
+  }
+
+  async function handleMessage(message) {
+    const hasId = objectValue(message) && own(message, "id");
+    const validId = hasId && (typeof message.id === "string" || (typeof message.id === "number" && Number.isFinite(message.id)));
+    const id = validId ? message.id : null;
+    const errorResponse = (code, text) => ({ jsonrpc: "2.0", id, error: { code, message: text } });
+    if (!objectValue(message) || message.jsonrpc !== "2.0" || typeof message.method !== "string" || !message.method || (hasId && !validId)) {
+      // Identifiable notifications never receive a response, including invalid
+      // params. Non-message input still gets the JSON-RPC invalid-request error.
+      if (objectValue(message) && !hasId && typeof message.method === "string") return undefined;
+      return errorResponse(-32600, "Invalid JSON-RPC request");
+    }
+    if (!hasId) {
+      if (message.method === "notifications/initialized" && state === "negotiated"
+          && (message.params === undefined || (objectValue(message.params)
+            && Object.keys(message.params).every(key => key === "_meta")
+            && (message.params._meta === undefined || objectValue(message.params._meta))))) state = "ready";
+      // A notification must not execute a tool or initiate a session.
+      return undefined;
+    }
+    try { return { jsonrpc: "2.0", id, result: await dispatch(message) }; } catch (error) {
+      return errorResponse(error instanceof RpcError ? error.code : -32603,
+        error instanceof RpcError ? error.message : "Internal MCP error");
+    }
+  }
+
+  async function handleLine(line) {
+    let message;
+    try { message = JSON.parse(line); } catch {
+      return { jsonrpc: "2.0", id: null, error: { code: -32700, message: "Invalid JSON" } };
+    }
+    return handleMessage(message);
+  }
+
+  function run({ input = process.stdin, output = process.stdout, diagnostics = process.stderr } = {}) {
+    input.setEncoding("utf8");
+    let buffer = "";
+    let pending = Promise.resolve();
+    const enqueue = line => {
+      if (!line.trim()) return;
+      pending = pending.then(async () => {
+        const response = await handleLine(line);
+        if (response) output.write(JSON.stringify(response) + "\n");
+      }).catch(() => { diagnostics.write("MCP transport failed.\n"); });
+    };
+    return new Promise((resolve, reject) => {
+      input.on("data", chunk => {
+        buffer += chunk;
+        let boundary;
+        while ((boundary = buffer.indexOf("\n")) >= 0) {
+          const line = buffer.slice(0, boundary);
+          buffer = buffer.slice(boundary + 1);
+          enqueue(line);
+        }
+      });
+      input.once("end", () => { enqueue(buffer); pending.then(resolve, reject); });
+      input.once("error", () => reject(new Error("MCP input transport failed.")));
+    });
+  }
+  return { registry, handleMessage, handleLine, run };
+}
+
+function runMcp(options) {
+  return createMcpRuntime(options).run();
+}
+
+module.exports = { createMcpRuntime, runMcp, TOOL_REGISTRY, TOOL_ALIASES, SUPPORTED_PROTOCOL_VERSIONS };