capix-mcp 2.1.1 → 2.2.0

package/dist/tools.js

@@ -1,5 +1,11 @@
 /**
- * Capix MCP Server — all 64 tool definitions.
+ * Capix MCP Server — all 37 tool definitions.
+ *
+ * 2026-07 repair: every tool below targets a route family that EXISTS in the
+ * control plane (app/api/v1/* in the protocol repo), verified route-by-route
+ * against the live source. Each tool declares its canonical path (`routePath`)
+ * and the registry gate (tools/registry.test.ts) asserts it against the
+ * allowlist in route-families.ts — no phantom routes can be re-introduced.
  *
  * Each tool is declared with:
  *   - inputShape  : a Zod raw shape (validated by the McpServer before dispatch)
@@ -11,68 +17,59 @@
  * structured content. The CapixApiError (problem+json) thrown by the client is
  * caught by the server wrapper and surfaced as an MCP error result.
  *
- * Tools are grouped by scope (mirrors services/capix-mcp/tools/*.ts):
- *   discovery (9) · planning (6) · lifecycle (7) · networking (8) ·
- *   testing (6) · verification (6) · website (17) · infra-context (5)
+ * CRUD-shaped tools are declared with `defineGeneratedTool` (tools/generate.ts)
+ * — a declarative spec (method, path, input) from which the registration AND
+ * the HTTP call are generated — instead of a hand-written handler. Everything
+ * else uses `defineTool` (tools/define-tool.ts) with an explicit handler.
+ *
+ * Tools are grouped by scope:
+ *   discovery (7) · planning (2) · lifecycle (19) · verification (1) ·
+ *   website (6) · infra-context (2)
+ * (The factory tools — jobs/training/agent-deploys — live in
+ * tools/factory.ts and join lifecycle; the meme/image tools live in
+ * tools/memes.ts: the meme catalog joins discovery, the two billable
+ * generators join lifecycle.)
+ *
+ * Removed in the repair (no backing route in the control plane — hidden, not
+ * deleted from git history):
+ *   - networking scope (8 tools): /api/v1/networking/* and /api/v1/vpc do not
+ *     exist. Returns with the networking roadmap (N1–N5).
+ *   - testing scope (6 tools): /api/v1/testing/* does not exist (disposable
+ *     test envs are not built).
+ *   - attestation/zkVM/measurement tools (5): /api/v1/verification/* and
+ *     /api/v1/attestations do not exist. Secured Cloud (TEE/zkVM) is deferred.
+ *   - planning stubs (capix_compute_plan, capix_model_plan, capix_stack_*):
+ *     /api/v1/planning/* does not exist; quoting lives at /api/v1/quotes.
+ *   - lifecycle stubs (capix_start/stop/restart/extend): start/stop exist
+ *     upstream ONLY as PATCH /api/v1/deployments/[id] { desiredState } with a
+ *     mandatory If-Match etag — unreachable through the current client
+ *     surface (no PATCH, no etag access). Restart/extend have no backend.
+ *   - discovery stubs: capix_projects (no /api/v1/projects),
+ *     capix_model_catalog (real catalog is /api/v1/models, covered by
+ *     capix_model_list), capix_attestations (Secured Cloud deferred).
+ *   - website stubs (12 tools): singular /api/v1/website/* never existed and
+ *     detect/plan/quote/deploy/preview/deployments/logs/metrics/domains have
+ *     no routes under the real /api/v1/websites family (build logs surface as
+ *     `logTail` inside capix_website_get; previews are implicit per release).
+ *   - infra-context stubs: capix_node_status, capix_earnings_check (no
+ *     /api/v1/nodes/status or /api/v1/earnings), capix_deployment_list
+ *     (duplicate of capix_deployments).
  */
 import { z } from "zod";
 import { APPROVAL_ONLY, BILLABLE, READ_ONLY, } from "./types.js";
 import { defineTool } from "./tools/define-tool.js";
+import { defineGeneratedTool } from "./tools/generate.js";
+import { factoryTools } from "./tools/factory.js";
 import { infraContextTools } from "./tools/infra-context.js";
+import { memeImageTools } from "./tools/memes.js";
 // ===========================================================================
 // Reusable Zod fragments
 // ===========================================================================
 const iso8601 = z.string().datetime().or(z.string());
-const moneyShape = z.object({
-    amount: z.string().describe("Integer minor units (e.g. lamports, micro-USDC, cents)."),
-    asset: z.enum(["SOL", "USDC", "USD-credit"]),
-    scale: z.number().int(),
-}).describe("Integer minor/native money amount serialized as a JSON string.");
 const deploymentIdShape = z.string().describe("Canonical deployment id (dep_…).");
 const operationIdShape = z.string().describe("Canonical operation id (op_…).");
-const quoteIdShape = z.string().describe("Canonical quote id (qt_…) from capix_compute_quote / capix_model_quote.");
-const siteIdShape = z.string().describe("Capix website project id.");
-const listResultShape = {
-    entries: z.array(z.record(z.unknown())).optional().describe("Paginated item array."),
-    nextCursor: z.string().optional().describe("Opaque cursor for the next page; absent when exhausted."),
-    fetchedAt: iso8601.optional().describe("ISO8601 fetch timestamp."),
-};
-const quoteResultShape = {
-    quoteId: quoteIdShape.optional(),
-    price: moneyShape.optional(),
-    providerCostBasis: moneyShape.optional(),
-    fees: moneyShape.optional(),
-    margin: moneyShape.optional(),
-    provider: z.string().optional(),
-    region: z.string().optional(),
-    expiresAt: iso8601.optional(),
-    feasible: z.boolean().optional(),
-};
-const deploymentResultShape = {
-    deploymentId: deploymentIdShape.optional(),
-    operationId: operationIdShape.optional(),
-    phase: z.string().optional().describe("DeploymentPhase after mutation."),
-    quoteId: quoteIdShape.optional(),
-    holdId: z.string().optional().describe("Ledger hold that funds the deployment."),
-    estimatedCost: moneyShape.optional(),
-    acceptedAt: iso8601.optional(),
-};
-const networkResourceShape = {
-    resourceId: z.string().optional(),
-    kind: z.string().optional().describe("vpc | endpoint | port_forward | private_connection | dedicated_ip."),
-    deploymentId: deploymentIdShape.optional(),
-    status: z.enum(["provisioning", "ready", "failed", "destroyed"]).optional(),
-    endpoint: z.string().optional(),
-    acceptedAt: iso8601.optional(),
-};
-const siteResultShape = {
-    siteId: siteIdShape.optional(),
-    deploymentId: z.string().optional(),
-    url: z.string().optional(),
-    status: z.enum(["queued", "building", "ready", "failed"]).optional(),
-    estimatedCost: moneyShape.optional(),
-    acceptedAt: iso8601.optional(),
-};
+const quoteIdShape = z.string().describe("Canonical quote id from capix_compute_quote / capix_model_quote.");
+const siteIdShape = z.string().describe("Capix website id.");
 // ===========================================================================
 // defineTool — imported from tools/define-tool.ts (shared with sibling tool
 // modules such as tools/infra-context.ts; see that file for the doc comment).
@@ -87,982 +84,435 @@ function asStr(value, field) {
     }
     return value;
 }
-/** Call the client, passing the approval token through for billable tools. */
-async function callBillable(client, approvalToken, path, body) {
-    if (!approvalToken) {
-        const err = new Error("approvalToken is required for this billable tool (§5)");
-        err.capixCode = "approval_required";
-        err.status = 402;
-        throw err;
-    }
-    return client.post(path, body, { idempotent: true, approvalToken });
-}
 // ===========================================================================
-// Discovery tools (9) — read-only, auto-run after authentication.
+// Discovery tools (6) — read-only, auto-run after authentication.
+// (capix_meme_templates from tools/memes.ts is the 7th discovery tool.)
 // ===========================================================================
 const discoveryTools = [
     defineTool({
         name: "capix_account",
-        description: "Inspect the authenticated account: wallet address, balance, spending limits, active deployments/agents. Read-only — safe to auto-run.",
+        description: "Inspect the authenticated account: id, email, wallet address, billing status, identities, devices. Read-only — safe to auto-run.",
         scope: "discovery",
         ...READ_ONLY,
+        routePath: "/api/v1/account",
         inputShape: {},
         outputShape: {
-            accountId: z.string().optional(),
-            walletAddress: z.string().optional(),
-            balance: moneyShape.optional(),
-            spendingLimitMinor: z.string().optional(),
-            activeDeployments: z.number().int().optional(),
-            activeAgents: z.number().int().optional(),
-            lastBilledAt: iso8601.optional(),
+            id: z.string().optional(),
+            email: z.string().optional(),
+            wallet_address: z.string().optional(),
+            billing_status: z.string().optional(),
+            identities: z.array(z.record(z.unknown())).optional(),
+            devices: z.array(z.record(z.unknown())).optional(),
         },
         handler: async (_args, { client }) => client.get("/api/v1/account"),
     }),
     defineTool({
         name: "capix_balance",
-        description: "Get the customer cash balance (available / held / total) for the account. Read-only.",
+        description: "Get the account balances (SOL / USDC ledger), USD valuation, and recent transactions. Read-only.",
         scope: "discovery",
         ...READ_ONLY,
+        routePath: "/api/v1/billing",
         inputShape: {
             asset: z.enum(["SOL", "USDC", "USD-credit"]).optional().describe("Optional asset filter."),
         },
         outputShape: {
+            ok: z.boolean().optional(),
             accountId: z.string().optional(),
-            asset: z.enum(["SOL", "USDC", "USD-credit"]).optional(),
-            available: z.string().optional(),
-            held: z.string().optional(),
-            total: z.string().optional(),
-            asOf: iso8601.optional(),
+            balances: z.record(z.unknown()).optional(),
+            valuation: z.record(z.unknown()).optional(),
+            transactions: z.array(z.record(z.unknown())).optional(),
+            nextCursor: z.string().optional(),
         },
-        handler: async (args, { client }) => client.get("/api/v1/account/balance", {
+        handler: async (args, { client }) => client.get("/api/v1/billing", {
             asset: args.asset,
         }),
     }),
-    defineTool({
-        name: "capix_projects",
-        description: "List projects visible to the authenticated account. Read-only.",
-        scope: "discovery",
-        ...READ_ONLY,
-        inputShape: {
-            limit: z.number().int().min(1).max(200).default(50).describe("Max projects to return."),
-        },
-        outputShape: listResultShape,
-        handler: async (args, { client }) => client.get("/api/v1/projects", { limit: args.limit }),
-    }),
     defineTool({
         name: "capix_compute_catalog",
-        description: "List the live compute capability catalog (provider / region / tier / price / availability). Read-only.",
+        description: "List the enabled compute capability catalog: workload types (with features) and " +
+            "configured providers/regions. Public; reflects live feature gates. Read-only.",
         scope: "discovery",
         ...READ_ONLY,
-        inputShape: {
-            region: z.string().optional().describe("Optional region filter."),
-            gpu: z.boolean().optional().describe("Restrict to GPU-capable entries."),
-        },
-        outputShape: {
-            entries: z.array(z.record(z.unknown())).optional(),
-            catalogVersion: z.string().optional(),
-            fetchedAt: iso8601.optional(),
-        },
-        handler: async (args, { client }) => client.get("/api/v1/catalog/compute", {
-            region: args.region,
-            gpu: args.gpu,
-        }),
-    }),
-    defineTool({
-        name: "capix_model_catalog",
-        description: "List the live model endpoint catalog (model id, context length, price per 1k tokens). Read-only.",
-        scope: "discovery",
-        ...READ_ONLY,
-        inputShape: {
-            provider: z.string().optional().describe("Optional provider filter."),
-        },
+        routePath: "/api/v1/catalog/capabilities",
+        inputShape: {},
         outputShape: {
-            entries: z.array(z.record(z.unknown())).optional(),
-            catalogVersion: z.string().optional(),
-            fetchedAt: iso8601.optional(),
+            workloadTypes: z.array(z.record(z.unknown())).optional(),
+            providers: z.array(z.record(z.unknown())).optional(),
+            regions: z.array(z.string()).optional(),
+            releaseId: z.string().optional(),
+            timestamp: iso8601.optional(),
         },
-        handler: async (args, { client }) => client.get("/api/v1/catalog/models", {
-            provider: args.provider,
-        }),
+        handler: async (_args, { client }) => client.get("/api/v1/catalog/capabilities"),
     }),
     defineTool({
         name: "capix_network_status",
-        description: "Inspect network and gateway status (provider health, lanes, emergency flags). Read-only.",
+        description: "Inspect the Capix service health: status, version, release, and live feature gates " +
+            "(real money, provider writes, distributed, smart router, …). Public. Read-only.",
         scope: "discovery",
         ...READ_ONLY,
+        routePath: "/api/v1/health",
         inputShape: {},
         outputShape: {
-            gateway: z.string().optional(),
-            status: z.enum(["ok", "degraded", "outage"]).optional(),
-            providers: z.array(z.record(z.unknown())).optional(),
-            lanes: z.array(z.record(z.unknown())).optional(),
-            emergencyFlags: z.array(z.record(z.unknown())).optional(),
-            fetchedAt: iso8601.optional(),
+            status: z.string().optional(),
+            service: z.string().optional(),
+            version: z.string().optional(),
+            releaseId: z.string().optional(),
+            features: z.record(z.unknown()).optional(),
+            timestamp: iso8601.optional(),
         },
-        handler: async (_args, { client }) => client.get("/api/v1/network/status"),
+        handler: async (_args, { client }) => client.get("/api/v1/health"),
     }),
-    defineTool({
+    defineGeneratedTool({
         name: "capix_deployments",
         description: "List deployments for the account/project with phase + allocation state. Read-only.",
         scope: "discovery",
         ...READ_ONLY,
-        inputShape: {
-            limit: z.number().int().min(1).max(200).default(50).describe("Max deployments to return."),
-            phase: z.string().optional().describe("Optional DeploymentPhase filter."),
+        method: "GET",
+        path: "/api/v1/deployments",
+        input: {
+            limit: z.number().int().min(1).max(100).default(25).describe("Max deployments to return (upstream bounds)."),
+            status: z.string().optional().describe("Optional phase filter (the upstream query param is `status`)."),
+            cursor: z.string().optional().describe("Opaque pagination cursor from a previous page."),
+            projectId: z.string().optional(),
+        },
+        outputShape: {
+            data: z.array(z.record(z.unknown())).optional(),
+            cursor: z.string().optional(),
+            hasMore: z.boolean().optional(),
         },
-        outputShape: listResultShape,
-        handler: async (args, { client }) => client.get("/api/v1/deployments", {
-            limit: args.limit,
-            phase: args.phase,
-        }),
     }),
-    defineTool({
+    defineGeneratedTool({
         name: "capix_receipts",
-        description: "List settled work receipts (cost records) for the account. Read-only.",
+        description: "List work receipts (task/commit approval records) for the account. Read-only.",
         scope: "discovery",
         ...READ_ONLY,
-        inputShape: {
-            limit: z.number().int().min(1).max(200).default(50),
-            since: iso8601.optional().describe("Optional lower bound (inclusive)."),
+        method: "GET",
+        path: "/api/v1/receipts",
+        input: {
+            limit: z.number().int().min(1).max(100).default(25),
+            approvalStatus: z.string().optional().describe("Optional approval-status filter."),
+            agentId: z.string().optional().describe("Optional agent filter."),
+            cursor: z.string().optional(),
+            projectId: z.string().optional(),
         },
-        outputShape: listResultShape,
-        handler: async (args, { client }) => client.get("/api/v1/receipts", {
-            limit: args.limit,
-            since: args.since,
-        }),
-    }),
-    defineTool({
-        name: "capix_attestations",
-        description: "List attestation evidence records for the account (TEE / zkVM). Read-only.",
-        scope: "discovery",
-        ...READ_ONLY,
-        inputShape: {
-            limit: z.number().int().min(1).max(200).default(50),
-            kind: z.enum(["tee", "zkvm"]).optional().describe("Optional attestation kind filter."),
+        outputShape: {
+            data: z.array(z.record(z.unknown())).optional(),
+            cursor: z.string().optional(),
+            hasMore: z.boolean().optional(),
         },
-        outputShape: listResultShape,
-        handler: async (args, { client }) => client.get("/api/v1/attestations", {
-            limit: args.limit,
-            kind: args.kind,
-        }),
     }),
 ];
 // ===========================================================================
-// Planning tools (6) — read-only planning & quoting.
+// Planning tools (2) — read-only quoting against POST /api/v1/quotes.
+// The old /api/v1/planning/* family does not exist; the canonical quote route
+// is /api/v1/quotes (15-minute TTL, locks price/cost/fees/margin/FX/expiry).
+// The route REQUIRES an Idempotency-Key header even though quoting moves no
+// money, so both tools post with the client's idempotency key.
 // ===========================================================================
-const computeSpecShape = {
-    workloadType: z.string().describe("e.g. replicated_service.v1, private_inference.v1, agent_run.v1."),
-    cpu: z.number().int().min(1),
-    ramMb: z.number().int().min(128),
-    storageGb: z.number().int().min(0),
-    gpu: z.number().int().min(0).optional(),
-    vramMb: z.number().int().min(0).optional(),
-    region: z.string().optional(),
-    imageDigest: z.string().optional().describe("Pinned image digest."),
-    maxPriceUsdHourly: z.number().optional(),
-    maxDurationHours: z.number().optional(),
-};
-const modelSpecShape = {
-    modelId: z.string(),
-    quantization: z.string().optional(),
-    contextLength: z.number().int().min(1).optional(),
-    gpuType: z.string().optional(),
-    gpuCount: z.number().int().min(1).optional(),
-    region: z.string().optional(),
-    maxPriceUsdHourly: z.number().optional(),
-    maxConcurrency: z.number().int().min(1).optional(),
-};
-const stackManifestShape = {
-    name: z.string(),
-    services: z.array(z.record(z.unknown())),
-    network: z.record(z.unknown()).optional(),
-    region: z.string().optional(),
+/** Workload types accepted by POST /api/v1/quotes (workloadSpec.type). */
+const WORKLOAD_TYPES = [
+    "dedicated_machine.v1",
+    "private_inference.v1",
+    "remote_workspace.v1",
+    "replicated_service.v1",
+    "sharded_batch.v1",
+    "agent_run.v1",
+];
+const quoteResultShape = {
+    id: quoteIdShape.optional(),
+    price: z.record(z.unknown()).optional(),
+    providerCostBasis: z.record(z.unknown()).optional(),
+    fees: z.record(z.unknown()).optional(),
+    margin: z.record(z.unknown()).optional(),
+    expiresAt: iso8601.optional(),
+    state: z.string().optional(),
 };
 const planningTools = [
-    defineTool({
-        name: "capix_compute_plan",
-        description: "Plan a compute deployment: pick provider/region/spec for the requested workload shape. Read-only.",
-        scope: "planning",
-        ...READ_ONLY,
-        inputShape: computeSpecShape,
-        outputShape: {
-            feasible: z.boolean(),
-            provider: z.string().optional(),
-            region: z.string().optional(),
-            cpu: z.number().int().optional(),
-            ramMb: z.number().int().optional(),
-            storageGb: z.number().int().optional(),
-            gpu: z.number().int().optional(),
-            estimatedCostHourly: moneyShape.optional(),
-            estimatedCostTotal: moneyShape.optional(),
-            notes: z.string().optional(),
-        },
-        handler: async (args, { client }) => client.post("/api/v1/planning/compute/plan", args),
-    }),
-    defineTool({
+    defineGeneratedTool({
         name: "capix_compute_quote",
-        description: "Get a canonical quote for a compute deployment plan (locks asset/scale/FX/fee/expiry). Read-only.",
+        description: "Get a canonical quote for a compute workload (locks price/fees/FX/expiry for 15 min). " +
+            "Read-only intent; the quote route still requires an Idempotency-Key, which the client supplies.",
         scope: "planning",
         ...READ_ONLY,
-        inputShape: computeSpecShape,
-        outputShape: quoteResultShape,
-        handler: async (args, { client }) => client.post("/api/v1/planning/compute/quote", args),
-    }),
-    defineTool({
-        name: "capix_model_plan",
-        description: "Plan a model endpoint for the requested model hosting shape. Read-only.",
-        scope: "planning",
-        ...READ_ONLY,
-        inputShape: modelSpecShape,
-        outputShape: {
-            feasible: z.boolean(),
-            provider: z.string().optional(),
-            region: z.string().optional(),
-            gpu: z.number().int().optional(),
-            estimatedCostHourly: moneyShape.optional(),
-            estimatedCostTotal: moneyShape.optional(),
-            notes: z.string().optional(),
+        method: "POST",
+        path: "/api/v1/quotes",
+        // Read-only, but the route rejects requests without an Idempotency-Key.
+        idempotent: true,
+        input: {
+            workloadSpec: z
+                .object({
+                type: z.enum(WORKLOAD_TYPES),
+                cpu: z.number().positive(),
+                ramMb: z.number().positive(),
+                storageGb: z.number().min(0),
+                gpu: z.number().min(0).optional(),
+                vramMb: z.number().min(0).optional(),
+                region: z.string().optional().describe("eu | us | asia | global."),
+                maxDurationHours: z.number().optional(),
+                maxSpendUsd: z.number().optional(),
+            })
+                .describe("Workload shape quoted upstream."),
+            placementPolicy: z.record(z.unknown()).optional(),
+            paymentAsset: z.enum(["AUTO", "SOL", "USDC"]).optional(),
+            projectId: z.string().optional(),
         },
-        handler: async (args, { client }) => client.post("/api/v1/planning/model/plan", args),
-    }),
-    defineTool({
-        name: "capix_model_quote",
-        description: "Get a canonical quote for a model endpoint plan. Read-only.",
-        scope: "planning",
-        ...READ_ONLY,
-        inputShape: modelSpecShape,
         outputShape: quoteResultShape,
-        handler: async (args, { client }) => client.post("/api/v1/planning/model/quote", args),
-    }),
-    defineTool({
-        name: "capix_stack_validate",
-        description: "Validate a stack manifest (services, dependencies, network) without provisioning. Read-only.",
-        scope: "planning",
-        ...READ_ONLY,
-        inputShape: stackManifestShape,
-        outputShape: {
-            valid: z.boolean(),
-            errors: z.array(z.string()).optional(),
-            warnings: z.array(z.string()).optional(),
-        },
-        handler: async (args, { client }) => client.post("/api/v1/planning/stack/validate", args),
     }),
     defineTool({
-        name: "capix_stack_plan",
-        description: "Plan a multi-service stack: produce a deployment plan graph + aggregate quote. Read-only.",
+        name: "capix_model_quote",
+        description: "Get a canonical quote for a private model endpoint (private_inference.v1) hosting " +
+            "the given model. Read-only intent; the quote route still requires an Idempotency-Key, " +
+            "which the client supplies.",
         scope: "planning",
         ...READ_ONLY,
-        inputShape: stackManifestShape,
-        outputShape: {
-            feasible: z.boolean(),
-            services: z.array(z.record(z.unknown())).optional(),
-            aggregateQuote: z.record(z.unknown()).optional(),
-            notes: z.string().optional(),
+        routePath: "/api/v1/quotes",
+        inputShape: {
+            modelId: z.string().describe("Model id from capix_model_list."),
+            cpu: z.number().positive().describe("vCPUs for the endpoint (required upstream)."),
+            ramMb: z.number().positive().describe("RAM for the endpoint (required upstream)."),
+            storageGb: z.number().min(0).describe("Storage for weights/cache (required upstream)."),
+            gpu: z.number().int().min(1).optional(),
+            vramMb: z.number().int().min(0).optional(),
+            region: z.string().optional().describe("eu | us | asia | global."),
+            maxDurationHours: z.number().optional(),
+            paymentAsset: z.enum(["AUTO", "SOL", "USDC"]).optional(),
+            projectId: z.string().optional(),
         },
-        handler: async (args, { client }) => client.post("/api/v1/planning/stack/plan", args),
+        outputShape: quoteResultShape,
+        handler: async (args, { client }) => client.post("/api/v1/quotes", {
+            workloadSpec: {
+                type: "private_inference.v1",
+                cpu: args.cpu,
+                ramMb: args.ramMb,
+                storageGb: args.storageGb,
+                gpu: args.gpu,
+                vramMb: args.vramMb,
+                region: args.region,
+                maxDurationHours: args.maxDurationHours,
+                payload: { modelId: asStr(args.modelId, "modelId"), source: "capix-mcp" },
+            },
+            paymentAsset: args.paymentAsset,
+            projectId: args.projectId,
+        }, { idempotent: true }),
     }),
 ];
 // ===========================================================================
-// Lifecycle tools (7) — billable mutations, require approval.
+// Lifecycle tools (3 here) — billable mutations, require approval.
+// The factory tools (jobs/training/agent-deploys, tools/factory.ts) and the
+// two meme/image generators (tools/memes.ts) join this scope: 19 total.
+//
+// Removed: capix_start / capix_stop / capix_restart / capix_extend.
+// Start/stop exist upstream ONLY as PATCH /api/v1/deployments/[id]
+// { desiredState: "RUNNING" | "STOPPED" } with a mandatory If-Match etag —
+// unreachable through the current CapixClientLike surface (no PATCH method,
+// no etag access). Restart/extend have no backend at all. They return when
+// the client grows PATCH+etag support (see route-families.ts).
 // ===========================================================================
+const deploymentResultShape = {
+    operation: z.record(z.unknown()).optional().describe("Long-running operation (poll via its id)."),
+    deployment: z.record(z.unknown()).optional(),
+    settlement: z.record(z.unknown()).optional().describe("Early-termination settlement, when applicable."),
+};
 const lifecycleTools = [
-    defineTool({
+    defineGeneratedTool({
         name: "capix_deploy",
-        description: "Deploy a workload against a canonical quote. Takes a ledger hold + provisions resources. Billable; requires approval.",
+        description: "Deploy a workload against a canonical quote (from capix_compute_quote / " +
+            "capix_model_quote). Takes a ledger hold and returns a long-running operation. " +
+            "Billable; requires approval.",
         scope: "lifecycle",
         ...BILLABLE,
-        inputShape: {
-            quoteId: quoteIdShape.describe("Canonical quote from capix_compute_quote / capix_model_quote."),
-            workloadType: z.string(),
-            region: z.string().optional(),
-            imageDigest: z.string().optional(),
-            durationHours: z.number().min(1).optional(),
-            env: z.record(z.string()).optional(),
-            ingress: z.array(z.number().int()).optional(),
+        method: "POST",
+        path: "/api/v1/deployments",
+        input: {
+            quoteId: quoteIdShape,
+            projectId: z.string().optional(),
         },
         outputShape: deploymentResultShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, "/api/v1/lifecycle/deployments", args),
     }),
-    defineTool({
-        name: "capix_start",
-        description: "Start a stopped deployment. Billable (resumes metering); requires approval.",
-        scope: "lifecycle",
-        ...BILLABLE,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-        },
-        outputShape: deploymentResultShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, `/api/v1/lifecycle/deployments/${encodeURIComponent(asStr(args.deploymentId, "deploymentId"))}/start`),
-    }),
-    defineTool({
-        name: "capix_stop",
-        description: "Stop a running deployment (halts metering, keeps allocation). Billable (minimal); requires approval.",
-        scope: "lifecycle",
-        ...BILLABLE,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-        },
-        outputShape: deploymentResultShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, `/api/v1/lifecycle/deployments/${encodeURIComponent(asStr(args.deploymentId, "deploymentId"))}/stop`),
-    }),
-    defineTool({
-        name: "capix_restart",
-        description: "Restart a deployment (stop + start cycle). Billable; requires approval.",
-        scope: "lifecycle",
-        ...BILLABLE,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-        },
-        outputShape: deploymentResultShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, `/api/v1/lifecycle/deployments/${encodeURIComponent(asStr(args.deploymentId, "deploymentId"))}/restart`),
-    }),
-    defineTool({
+    defineGeneratedTool({
         name: "capix_delete",
-        description: "Delete (terminate) a deployment and release its allocation. Billable (final settlement); requires approval.",
+        description: "Terminate a deployment and release its allocation (settles early termination). " +
+            "Destructive; billable; requires approval.",
         scope: "lifecycle",
         ...BILLABLE,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-            reason: z.string().optional(),
+        method: "DELETE",
+        path: "/api/v1/deployments/:id",
+        input: {
+            id: deploymentIdShape,
         },
         outputShape: deploymentResultShape,
-        handler: async (args, { client, ctx }) => {
-            const id = asStr(args.deploymentId, "deploymentId");
-            const res = await callBillable(client, ctx.approvalToken, `/api/v1/lifecycle/deployments/${encodeURIComponent(id)}`, args.reason ? { reason: args.reason } : undefined);
-            // DELETE semantics: the canonical route is DELETE; some gateways express
-            // the mutation via POST with idempotency. Use the client delete path with
-            // an approval header via a light POST-to-delete fallback.
-            return res;
-        },
     }),
-    defineTool({
-        name: "capix_extend",
-        description: "Extend a running deployment by additional hours against a fresh hold. Billable; requires approval.",
-        scope: "lifecycle",
-        ...BILLABLE,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-            durationHours: z.number().min(1),
-            quoteId: quoteIdShape.optional().describe("Canonical quote for the extension cost."),
-        },
-        outputShape: deploymentResultShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, `/api/v1/lifecycle/deployments/${encodeURIComponent(asStr(args.deploymentId, "deploymentId"))}/extend`, { durationHours: args.durationHours, quoteId: args.quoteId }),
-    }),
-    defineTool({
+    defineGeneratedTool({
         name: "capix_cancel",
-        description: "Cancel an in-flight operation (best-effort; may trigger compensation). Read-only intent; requires approval to mutate.",
+        description: "Cancel an in-flight operation (sets CANCELLING; 409 on terminal states). " +
+            "Requires approval to mutate.",
         scope: "lifecycle",
         ...APPROVAL_ONLY,
-        inputShape: {
+        method: "POST",
+        path: "/api/v1/operations/:operationId",
+        input: {
             operationId: operationIdShape,
-            reason: z.string().optional(),
-        },
-        outputShape: {
-            operationId: operationIdShape.optional(),
-            status: z.string().optional(),
-            acceptedAt: iso8601.optional(),
-        },
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, `/api/v1/operations/${encodeURIComponent(asStr(args.operationId, "operationId"))}/cancel`, args.reason ? { reason: args.reason } : undefined),
-    }),
-];
-// ===========================================================================
-// Networking tools (8) — billable mutations + read-only inspection.
-// ===========================================================================
-const networkingTools = [
-    defineTool({
-        name: "capix_create_vpc",
-        description: "Create a VPC for a project. Billable; requires approval.",
-        scope: "networking",
-        ...BILLABLE,
-        inputShape: {
-            cidr: z.string().describe("VPC CIDR block, e.g. 10.0.0.0/16."),
-            region: z.string(),
-            name: z.string().optional(),
-        },
-        outputShape: networkResourceShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, "/api/v1/networking/vpcs", args),
-    }),
-    defineTool({
-        name: "capix_create_endpoint",
-        description: "Create a public endpoint for a deployment. Billable; requires approval.",
-        scope: "networking",
-        ...BILLABLE,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-            port: z.number().int().min(1).max(65535),
-            protocol: z.enum(["http", "https", "tcp"]).default("http"),
-            hostname: z.string().optional().describe("Optional requested hostname."),
-        },
-        outputShape: networkResourceShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, "/api/v1/networking/endpoints", args),
-    }),
-    defineTool({
-        name: "capix_expose_port",
-        description: "Expose a port (ingress) to the public internet. Billable; requires approval.",
-        scope: "networking",
-        ...BILLABLE,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-            port: z.number().int().min(1).max(65535),
-            protocol: z.enum(["tcp", "udp"]).default("tcp"),
-            allowedCidrs: z.array(z.string()).optional().describe("Optional ingress allow-list."),
-        },
-        outputShape: networkResourceShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, "/api/v1/networking/ports/expose", args),
-    }),
-    defineTool({
-        name: "capix_close_port",
-        description: "Close a previously exposed port. Non-billable soft mutation; requires approval.",
-        scope: "networking",
-        ...APPROVAL_ONLY,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-            port: z.number().int().min(1).max(65535),
-            protocol: z.enum(["tcp", "udp"]).default("tcp"),
-        },
-        outputShape: networkResourceShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, "/api/v1/networking/ports/close", args),
-    }),
-    defineTool({
-        name: "capix_inspect_routes",
-        description: "Inspect the routing table for a deployment. Read-only.",
-        scope: "networking",
-        ...READ_ONLY,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-        },
-        outputShape: {
-            deploymentId: deploymentIdShape.optional(),
-            routes: z.array(z.record(z.unknown())).optional(),
-            fetchedAt: iso8601.optional(),
-        },
-        handler: async (args, { client }) => client.get(`/api/v1/networking/deployments/${encodeURIComponent(asStr(args.deploymentId, "deploymentId"))}/routes`),
-    }),
-    defineTool({
-        name: "capix_create_private_connection",
-        description: "Create a private endpoint connection (raw private endpoint). Billable; requires approval.",
-        scope: "networking",
-        ...BILLABLE,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-            service: z.string().describe("Target service identifier."),
-            port: z.number().int().min(1).max(65535).optional(),
-        },
-        outputShape: networkResourceShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, "/api/v1/networking/private-connections", args),
-    }),
-    defineTool({
-        name: "capix_request_dedicated_ip",
-        description: "Request a dedicated (non-shared) IP for a deployment. Paid; requires approval.",
-        scope: "networking",
-        ...BILLABLE,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-            region: z.string().optional(),
-            quoteId: quoteIdShape.describe("Canonical quote for the dedicated IP."),
-        },
-        outputShape: networkResourceShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, "/api/v1/networking/dedicated-ips", args),
-    }),
-    defineTool({
-        name: "capix_port_forward",
-        description: "Set up port forwarding between a deployment port and a host port. Billable; requires approval.",
-        scope: "networking",
-        ...BILLABLE,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-            sourcePort: z.number().int().min(1).max(65535),
-            targetPort: z.number().int().min(1).max(65535),
-            protocol: z.enum(["tcp", "udp"]).default("tcp"),
-        },
-        outputShape: networkResourceShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, "/api/v1/networking/port-forwards", args),
-    }),
-];
-// ===========================================================================
-// Testing tools (6) — disposable envs, inspection, bounded commands, cleanup.
-// ===========================================================================
-const testingTools = [
-    defineTool({
-        name: "capix_create_test_env",
-        description: "Create a disposable test environment from a spec. Billable; requires approval.",
-        scope: "testing",
-        ...BILLABLE,
-        inputShape: {
-            name: z.string(),
-            workloadType: z.string(),
-            cpu: z.number().int().min(1),
-            ramMb: z.number().int().min(128),
-            region: z.string().optional(),
-            imageDigest: z.string().optional(),
-            ttlMinutes: z.number().int().min(1).max(1440).default(60).describe("Auto-destroy TTL."),
-            quoteId: quoteIdShape.optional().describe("Canonical quote for the env."),
-        },
-        outputShape: {
-            envId: z.string().optional(),
-            status: z.enum(["provisioning", "ready", "failed"]).optional(),
-            provider: z.string().optional(),
-            region: z.string().optional(),
-            endpoint: z.string().optional(),
-            provisionedAt: iso8601.optional(),
-        },
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, "/api/v1/testing/environments", args),
-    }),
-    defineTool({
-        name: "capix_run_health_checks",
-        description: "Run health checks (liveness/readiness probes) on a deployment. Read-only.",
-        scope: "testing",
-        ...READ_ONLY,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-        },
-        outputShape: {
-            deploymentId: deploymentIdShape.optional(),
-            healthy: z.boolean().optional(),
-            checks: z.array(z.record(z.unknown())).optional(),
-            ranAt: iso8601.optional(),
-        },
-        handler: async (args, { client }) => client.get(`/api/v1/testing/deployments/${encodeURIComponent(asStr(args.deploymentId, "deploymentId"))}/health`),
-    }),
-    defineTool({
-        name: "capix_run_bounded_command",
-        description: "Run an allow-listed, time-bounded command on a deployment node. Requires approval (may execute code).",
-        scope: "testing",
-        ...APPROVAL_ONLY,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-            command: z.string().describe("Command string from the allow-list."),
-            timeoutSeconds: z.number().int().min(1).max(600).default(60),
-            expectedExitCode: z.number().int().default(0),
-        },
-        outputShape: {
-            deploymentId: deploymentIdShape.optional(),
-            results: z.array(z.record(z.unknown())).optional(),
-            completedAt: iso8601.optional(),
-        },
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, `/api/v1/testing/deployments/${encodeURIComponent(asStr(args.deploymentId, "deploymentId"))}/commands`, args),
-    }),
-    defineTool({
-        name: "capix_inspect_logs",
-        description: "Inspect deployment logs. Read-only.",
-        scope: "testing",
-        ...READ_ONLY,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-            limit: z.number().int().min(1).max(1000).default(200),
-            since: iso8601.optional(),
-            level: z.enum(["debug", "info", "warn", "error"]).optional(),
-        },
-        outputShape: {
-            resourceId: z.string().optional(),
-            lines: z.array(z.record(z.unknown())).optional(),
-            truncated: z.boolean().optional(),
-        },
-        handler: async (args, { client }) => client.get(`/api/v1/testing/deployments/${encodeURIComponent(asStr(args.deploymentId, "deploymentId"))}/logs`, { limit: args.limit, since: args.since, level: args.level }),
-    }),
-    defineTool({
-        name: "capix_inspect_metrics",
-        description: "Inspect deployment metrics. Read-only.",
-        scope: "testing",
-        ...READ_ONLY,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-            windowMinutes: z.number().int().min(1).max(10080).default(60),
-            names: z.array(z.string()).optional().describe("Optional metric name filter."),
-        },
-        outputShape: {
-            resourceId: z.string().optional(),
-            metrics: z.array(z.record(z.unknown())).optional(),
-        },
-        handler: async (args, { client }) => client.get(`/api/v1/testing/deployments/${encodeURIComponent(asStr(args.deploymentId, "deploymentId"))}/metrics`, { windowMinutes: args.windowMinutes, names: args.names }),
-    }),
-    defineTool({
-        name: "capix_destroy_task_resources",
-        description: "Destroy all resources scoped to a task (cleanup safety gate §18). Destructive; requires approval.",
-        scope: "testing",
-        ...APPROVAL_ONLY,
-        inputShape: {
-            resourceId: z.string().describe("Task-scoped resource id to destroy."),
-            reason: z.string().optional(),
-        },
-        outputShape: {
-            resourceId: z.string().optional(),
-            status: z.enum(["destroyed", "failed", "not_found"]).optional(),
-            destroyedAt: iso8601.optional(),
-        },
-        handler: async (args, { client, ctx }) => {
-            const id = asStr(args.resourceId, "resourceId");
-            return callBillable(client, ctx.approvalToken, `/api/v1/testing/environments/${encodeURIComponent(id)}`, args.reason ? { reason: args.reason } : undefined);
         },
+        outputShape: deploymentResultShape,
     }),
 ];
 // ===========================================================================
-// Verification tools (6) — read-only attestation/proof/receipt inspection.
+// Verification tools (1) — read-only receipt inspection.
+// The attestation/zkVM/measurement tools were removed: /api/v1/verification/*
+// and /api/v1/attestations do not exist (Secured Cloud deferred — see
+// route-families.ts). capix_inspect_receipt survives, retargeted from the
+// nonexistent /api/v1/verification/receipts/[id] to the real signed
+// route-receipt route (the scheduler's placement receipt tied to a quote:
+// customer price, provider cost basis, fees, margin).
 // ===========================================================================
 const verificationTools = [
-    defineTool({
-        name: "capix_fetch_attestation",
-        description: "Fetch attestation evidence for a deployment (TEE / zkVM). Read-only.",
-        scope: "verification",
-        ...READ_ONLY,
-        inputShape: {
-            deploymentId: deploymentIdShape,
-        },
-        outputShape: {
-            attestationId: z.string().optional(),
-            kind: z.enum(["tee", "zkvm"]).optional(),
-            resourceId: z.string().optional(),
-            evidence: z.string().optional(),
-            measurement: z.string().optional(),
-            fetchedAt: iso8601.optional(),
-        },
-        handler: async (args, { client }) => client.get(`/api/v1/verification/deployments/${encodeURIComponent(asStr(args.deploymentId, "deploymentId"))}/attestation`),
-    }),
-    defineTool({
-        name: "capix_verify_attestation",
-        description: "Verify an attestation against the expected reference measurement. Read-only.",
-        scope: "verification",
-        ...READ_ONLY,
-        inputShape: {
-            attestationId: z.string(),
-            expectedMeasurement: z.string().optional().describe("Optional pinned reference measurement."),
-        },
-        outputShape: {
-            subjectId: z.string().optional(),
-            kind: z.enum(["tee", "zkvm", "measurement", "receipt"]).optional(),
-            verified: z.boolean().optional(),
-            reason: z.string().optional(),
-            verifier: z.string().optional(),
-            verifiedAt: iso8601.optional(),
-        },
-        handler: async (args, { client }) => client.post(`/api/v1/verification/attestations/${encodeURIComponent(asStr(args.attestationId, "attestationId"))}/verify`, { expectedMeasurement: args.expectedMeasurement }),
-    }),
-    defineTool({
-        name: "capix_fetch_proof",
-        description: "Fetch a zkVM proof artifact for a workload. Read-only.",
-        scope: "verification",
-        ...READ_ONLY,
-        inputShape: {
-            workloadId: z.string(),
-        },
-        outputShape: {
-            proofId: z.string().optional(),
-            workloadId: z.string().optional(),
-            proofSystem: z.string().optional(),
-            artifactRef: z.string().optional(),
-            publicInputs: z.string().optional(),
-            fetchedAt: iso8601.optional(),
-        },
-        handler: async (args, { client }) => client.get(`/api/v1/verification/workloads/${encodeURIComponent(asStr(args.workloadId, "workloadId"))}/proof`),
-    }),
-    defineTool({
-        name: "capix_verify_proof",
-        description: "Verify a zkVM proof artifact against its public inputs. Read-only.",
-        scope: "verification",
-        ...READ_ONLY,
-        inputShape: {
-            proofId: z.string(),
-        },
-        outputShape: {
-            subjectId: z.string().optional(),
-            kind: z.enum(["tee", "zkvm", "measurement", "receipt"]).optional(),
-            verified: z.boolean().optional(),
-            reason: z.string().optional(),
-            verifier: z.string().optional(),
-            verifiedAt: iso8601.optional(),
-        },
-        handler: async (args, { client }) => client.post(`/api/v1/verification/proofs/${encodeURIComponent(asStr(args.proofId, "proofId"))}/verify`),
-    }),
-    defineTool({
-        name: "capix_inspect_measurement",
-        description: "Inspect the recorded measurement of a workload (used to pin expected TEE state). Read-only.",
-        scope: "verification",
-        ...READ_ONLY,
-        inputShape: {
-            workloadId: z.string(),
-        },
-        outputShape: {
-            workloadId: z.string().optional(),
-            measurement: z.string().optional(),
-            measurementAlgorithm: z.string().optional(),
-            imageDigest: z.string().optional(),
-            recordedAt: iso8601.optional(),
-        },
-        handler: async (args, { client }) => client.get(`/api/v1/verification/workloads/${encodeURIComponent(asStr(args.workloadId, "workloadId"))}/measurement`),
-    }),
-    defineTool({
+    defineGeneratedTool({
         name: "capix_inspect_receipt",
-        description: "Inspect a settled work receipt (cost breakdown, settlement, approval status). Read-only.",
+        description: "Inspect a signed route receipt: the scheduler's placement decision for a quote — " +
+            "customer price, provider cost basis, fees, margin, constraints, allocations. Read-only.",
         scope: "verification",
         ...READ_ONLY,
-        inputShape: {
-            receiptId: z.string(),
+        method: "GET",
+        path: "/api/v1/route-receipts/:receiptId",
+        input: {
+            receiptId: z.string().describe("Route receipt id (returned as x-capix-route-receipt-id with a quote)."),
         },
         outputShape: {
-            receiptId: z.string().optional(),
-            approvalStatus: z.string().optional(),
-            cost: z.record(z.unknown()).optional(),
-            settlement: z.record(z.unknown()).optional(),
-            postedAt: iso8601.optional(),
+            id: z.string().optional(),
+            data: z.record(z.unknown()).optional().describe("RouteReceiptData: workloadType, quoteId, customerPrice, providerCostBasis, fees, margin, allocations, …"),
+            signature: z.string().optional(),
+            kmsKeyId: z.string().optional(),
         },
-        handler: async (args, { client }) => client.get(`/api/v1/verification/receipts/${encodeURIComponent(asStr(args.receiptId, "receiptId"))}`),
     }),
 ];
 // ===========================================================================
-// Website tools (17) — static-site + preview hosting.
+// Website tools (6) — static-site hosting on the REAL /api/v1/websites family
+// (plural; the singular /api/v1/website/* these tools used to target never
+// existed). Real surface (app/api/v1/websites/*):
+//   POST   /api/v1/websites            create + build (name, sourceRef, buildCommand?)
+//   GET    /api/v1/websites            list (with up to 5 releases each)
+//   GET    /api/v1/websites/[id]       detail (releases + 50-line build logTail)
+//   POST   /api/v1/websites/[id]/promote   promote a built release to production
+//   POST   /api/v1/websites/[id]/rollback  roll back to a previous built release
+//   DELETE /api/v1/websites/[id]       destroy (soft)
+//
+// Known backend gap: promote/rollback are dispatched inside [id]/route.ts on
+// the URL suffix, but the App Router has no [id]/promote/route.ts shim or
+// rewrite, so those paths 404 until the control plane adds the segment
+// shims. The tools are registered against the documented contract (the route
+// file's own header advertises the paths) — track the backend fix before
+// relying on them.
+//
+// Removed (no route): check-project-string, detect (worker-internal only),
+// plan, quote (no website workload type in /api/v1/quotes), deploy (no
+// redeploy route — create builds+deploys), preview (implicit per release),
+// deployments (releases are embedded in list/get), logs (logTail in get),
+// metrics, domain add/verify/remove (wildcard *.capix.dev not live yet).
 // ===========================================================================
-const repoOptShape = {
-    repoUrl: z.string().describe("Git repository URL."),
-    branch: z.string().default("main"),
-    subPath: z.string().optional().describe("Optional monorepo subpath."),
-    framework: z.string().optional().describe("Optional pinned framework."),
-};
+const websiteObjectShape = z
+    .record(z.unknown())
+    .describe("Website: id, name, slug, status (building|preview|live|failed|destroyed), sourceRef, " +
+    "previewUrl, productionUrl, futureUrls, releases[{id, contentHash, status, step, error, createdAt, url}], createdAt.");
 const websiteTools = [
-    defineTool({
-        name: "capix_website_project_string_check",
-        description: "Check a repository string for framework/dep compatibility with Capix hosting. Read-only.",
-        scope: "website",
-        ...READ_ONLY,
-        inputShape: {
-            repoUrl: z.string(),
-        },
-        outputShape: {
-            ok: z.boolean().optional(),
-            framework: z.string().optional(),
-            notes: z.string().optional(),
-        },
-        handler: async (args, { client }) => client.post("/api/v1/website/check-project-string", { repoUrl: asStr(args.repoUrl, "repoUrl") }),
-    }),
-    defineTool({
+    defineGeneratedTool({
         name: "capix_website_create",
-        description: "Create a Capix website project from a repo. Billable; requires approval.",
+        description: "Create a website from a source ref (repo/archive URL): clones, detects the framework " +
+            "server-side, builds, and serves a preview release. Billable; requires approval.",
         scope: "website",
         ...BILLABLE,
-        inputShape: repoOptShape,
-        outputShape: siteResultShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, "/api/v1/website/sites", args),
-    }),
-    defineTool({
-        name: "capix_website_detect",
-        description: "Detect the framework/build settings of a repo without provisioning. Read-only.",
-        scope: "website",
-        ...READ_ONLY,
-        inputShape: {
-            repoUrl: z.string(),
-            branch: z.string().optional(),
+        method: "POST",
+        path: "/api/v1/websites",
+        input: {
+            name: z.string().min(1).describe("Site name (required upstream; slugified, unique per account)."),
+            sourceRef: z.string().min(1).describe("Source reference (repository/archive URL). Required upstream."),
+            buildCommand: z.string().optional().describe("Optional build command override (auto-detected when omitted)."),
+            projectId: z.string().optional(),
         },
         outputShape: {
-            framework: z.string().optional(),
-            buildCommand: z.string().optional(),
-            outputDir: z.string().optional(),
-            nodeVersion: z.string().optional(),
-            detectedAt: iso8601.optional(),
+            website: websiteObjectShape.optional(),
         },
-        handler: async (args, { client }) => client.post("/api/v1/website/detect", {
-            repoUrl: asStr(args.repoUrl, "repoUrl"),
-            branch: args.branch,
-        }),
     }),
-    defineTool({
-        name: "capix_website_plan",
-        description: "Plan a website deployment (build + hosting plan). Read-only.",
+    defineGeneratedTool({
+        name: "capix_website_list",
+        description: "List the account's websites with their latest releases. Read-only.",
         scope: "website",
         ...READ_ONLY,
-        inputShape: {
-            siteId: siteIdShape.optional(),
-            repoUrl: z.string().optional(),
-            branch: z.string().optional(),
-            subPath: z.string().optional(),
-            framework: z.string().optional(),
-        },
+        method: "GET",
+        path: "/api/v1/websites",
+        input: {},
         outputShape: {
-            feasible: z.boolean().optional(),
-            plan: z.record(z.unknown()).optional(),
-            notes: z.string().optional(),
+            websites: z.array(z.record(z.unknown())).optional(),
         },
-        handler: async (args, { client }) => client.post("/api/v1/website/plan", args),
     }),
-    defineTool({
-        name: "capix_website_quote",
-        description: "Get a canonical quote for a website deploy. Read-only.",
+    defineGeneratedTool({
+        name: "capix_website_get",
+        description: "Get a website by id: status, URLs, and the last 20 releases including per-release " +
+            "build step, error, and a 50-line build log tail. Read-only.",
         scope: "website",
         ...READ_ONLY,
-        inputShape: {
-            repoUrl: z.string().optional(),
-            branch: z.string().optional(),
-            durationHours: z.number().optional(),
+        method: "GET",
+        path: "/api/v1/websites/:id",
+        input: {
+            id: siteIdShape,
         },
         outputShape: {
-            quoteId: z.string().optional(),
-            price: moneyShape.optional(),
-            feasible: z.boolean().optional(),
-            expiresAt: iso8601.optional(),
+            website: websiteObjectShape.optional(),
         },
-        handler: async (args, { client }) => client.post("/api/v1/website/quote", args),
     }),
-    defineTool({
-        name: "capix_website_deploy",
-        description: "Deploy a website build to production. Billable; requires approval.",
-        scope: "website",
-        ...BILLABLE,
-        inputShape: {
-            siteId: siteIdShape,
-            branch: z.string().optional(),
-            commit: z.string().optional(),
-            quoteId: quoteIdShape.optional(),
-        },
-        outputShape: siteResultShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, `/api/v1/website/sites/${encodeURIComponent(asStr(args.siteId, "siteId"))}/deploy`, { branch: args.branch, commit: args.commit, quoteId: args.quoteId }),
-    }),
-    defineTool({
-        name: "capix_website_preview",
-        description: "Create a preview deployment for a branch. Billable; requires approval.",
-        scope: "website",
-        ...BILLABLE,
-        inputShape: {
-            siteId: siteIdShape,
-            branch: z.string(),
-        },
-        outputShape: siteResultShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, `/api/v1/website/sites/${encodeURIComponent(asStr(args.siteId, "siteId"))}/preview`, { branch: args.branch }),
-    }),
-    defineTool({
+    defineGeneratedTool({
         name: "capix_website_promote",
-        description: "Promote a preview deployment to production. Billable; requires approval.",
-        scope: "website",
-        ...BILLABLE,
-        inputShape: {
-            siteId: siteIdShape,
-        },
-        outputShape: siteResultShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, `/api/v1/website/sites/${encodeURIComponent(asStr(args.siteId, "siteId"))}/promote`),
-    }),
-    defineTool({
-        name: "capix_website_rollback",
-        description: "Roll a website back to its previous production deployment. Billable; requires approval.",
+        description: "Promote a built release to production (defaults to the latest release). " +
+            "NOTE: depends on a pending control-plane route shim for /promote — see tools.ts. " +
+            "Requires approval.",
         scope: "website",
         ...BILLABLE,
-        inputShape: {
-            siteId: siteIdShape,
-            targetDeploymentId: z.string().optional(),
-        },
-        outputShape: siteResultShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, `/api/v1/website/sites/${encodeURIComponent(asStr(args.siteId, "siteId"))}/rollback`, { targetDeploymentId: args.targetDeploymentId }),
-    }),
-    defineTool({
-        name: "capix_website_get",
-        description: "Get a website project descriptor. Read-only.",
-        scope: "website",
-        ...READ_ONLY,
-        inputShape: {
-            siteId: siteIdShape,
+        method: "POST",
+        path: "/api/v1/websites/:id/promote",
+        input: {
+            id: siteIdShape,
+            releaseId: z.string().optional().describe("Release to promote; defaults to the latest built release."),
         },
         outputShape: {
-            siteId: siteIdShape.optional(),
-            name: z.string().optional(),
-            url: z.string().optional(),
-            framework: z.string().optional(),
-            status: z.string().optional(),
-            createdAt: iso8601.optional(),
-        },
-        handler: async (args, { client }) => client.get(`/api/v1/website/sites/${encodeURIComponent(asStr(args.siteId, "siteId"))}`),
-    }),
-    defineTool({
-        name: "capix_website_deployments",
-        description: "List deployments for a website. Read-only.",
-        scope: "website",
-        ...READ_ONLY,
-        inputShape: {
-            siteId: siteIdShape,
-            limit: z.number().int().min(1).max(200).default(50),
-        },
-        outputShape: listResultShape,
-        handler: async (args, { client }) => client.get(`/api/v1/website/sites/${encodeURIComponent(asStr(args.siteId, "siteId"))}/deployments`, { limit: args.limit }),
-    }),
-    defineTool({
-        name: "capix_website_logs",
-        description: "Inspect build/runtime logs for a website. Read-only.",
-        scope: "website",
-        ...READ_ONLY,
-        inputShape: {
-            siteId: siteIdShape,
-            deploymentId: z.string().optional(),
-            limit: z.number().int().min(1).max(1000).default(200),
-        },
-        outputShape: {
-            lines: z.array(z.record(z.unknown())).optional(),
-            truncated: z.boolean().optional(),
-        },
-        handler: async (args, { client }) => client.get(`/api/v1/website/sites/${encodeURIComponent(asStr(args.siteId, "siteId"))}/logs`, { deploymentId: args.deploymentId, limit: args.limit }),
-    }),
-    defineTool({
-        name: "capix_website_metrics",
-        description: "Inspect request/bandwidth metrics for a website. Read-only.",
-        scope: "website",
-        ...READ_ONLY,
-        inputShape: {
-            siteId: siteIdShape,
-            windowMinutes: z.number().int().min(1).max(10080).default(60),
-        },
-        outputShape: {
-            metrics: z.array(z.record(z.unknown())).optional(),
+            ok: z.boolean().optional(),
+            productionUrl: z.string().optional(),
+            releaseId: z.string().optional(),
         },
-        handler: async (args, { client }) => client.get(`/api/v1/website/sites/${encodeURIComponent(asStr(args.siteId, "siteId"))}/metrics`, { windowMinutes: args.windowMinutes }),
     }),
-    defineTool({
-        name: "capix_website_domain_add",
-        description: "Attach a custom domain to a website. Billable; requires approval.",
+    defineGeneratedTool({
+        name: "capix_website_rollback",
+        description: "Roll a website back to a previous built release (defaults to the last built release " +
+            "before the current production one). NOTE: depends on a pending control-plane route " +
+            "shim for /rollback — see tools.ts. Requires approval.",
         scope: "website",
         ...BILLABLE,
-        inputShape: {
-            siteId: siteIdShape,
-            domain: z.string(),
-        },
-        outputShape: siteResultShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, `/api/v1/website/sites/${encodeURIComponent(asStr(args.siteId, "siteId"))}/domains`, { domain: asStr(args.domain, "domain") }),
-    }),
-    defineTool({
-        name: "capix_website_domain_verify",
-        description: "Verify DNS ownership for a pending custom domain. Read-only.",
-        scope: "website",
-        ...READ_ONLY,
-        inputShape: {
-            siteId: siteIdShape,
-            domain: z.string(),
+        method: "POST",
+        path: "/api/v1/websites/:id/rollback",
+        input: {
+            id: siteIdShape,
+            releaseId: z.string().optional().describe("Release to restore; defaults to the previous built release."),
         },
         outputShape: {
-            verified: z.boolean().optional(),
-            records: z.array(z.record(z.unknown())).optional(),
-            reason: z.string().optional(),
-        },
-        handler: async (args, { client }) => client.post(`/api/v1/website/sites/${encodeURIComponent(asStr(args.siteId, "siteId"))}/domains/verify`, { domain: asStr(args.domain, "domain") }),
-    }),
-    defineTool({
-        name: "capix_website_domain_remove",
-        description: "Detach a custom domain from a website. Billable; requires approval.",
-        scope: "website",
-        ...BILLABLE,
-        inputShape: {
-            siteId: siteIdShape,
-            domain: z.string(),
-        },
-        outputShape: siteResultShape,
-        handler: async (args, { client, ctx }) => {
-            const res = await callBillable(client, ctx.approvalToken, `/api/v1/website/sites/${encodeURIComponent(asStr(args.siteId, "siteId"))}/domains/${encodeURIComponent(asStr(args.domain, "domain"))}`);
-            return res;
+            ok: z.boolean().optional(),
+            productionUrl: z.string().optional(),
+            releaseId: z.string().optional(),
+            rolledBack: z.boolean().optional(),
         },
     }),
-    defineTool({
+    defineGeneratedTool({
         name: "capix_website_destroy",
-        description: "Destroy a website project and all its deployments. Billable; requires approval.",
+        description: "Destroy a website (soft delete; releases stop serving). Destructive; requires approval.",
         scope: "website",
         ...BILLABLE,
-        inputShape: {
-            siteId: siteIdShape,
-            reason: z.string().optional(),
+        method: "DELETE",
+        path: "/api/v1/websites/:id",
+        input: {
+            id: siteIdShape,
+        },
+        outputShape: {
+            ok: z.boolean().optional(),
+            id: z.string().optional(),
+            status: z.string().optional(),
         },
-        outputShape: siteResultShape,
-        handler: async (args, { client, ctx }) => callBillable(client, ctx.approvalToken, `/api/v1/website/sites/${encodeURIComponent(asStr(args.siteId, "siteId"))}/destroy`, args.reason ? { reason: args.reason } : undefined),
     }),
 ];
 // ===========================================================================
@@ -1072,15 +522,15 @@ export const TOOLS = [
     ...discoveryTools,
     ...planningTools,
     ...lifecycleTools,
-    ...networkingTools,
-    ...testingTools,
     ...verificationTools,
     ...websiteTools,
+    ...factoryTools,
     ...infraContextTools,
+    ...memeImageTools,
 ];
 export const TOOL_NAMES = TOOLS.map((t) => t.name);
 export const TOOL_COUNT = TOOLS.length;
 /** Map of tool name → definition, used by the server for O(1) lookup. */
 export const TOOL_MAP = new Map(TOOLS.map((t) => [t.name, t]));
-export { discoveryTools, planningTools, lifecycleTools, networkingTools, testingTools, verificationTools, websiteTools, infraContextTools };
+export { discoveryTools, planningTools, lifecycleTools, verificationTools, websiteTools, factoryTools, infraContextTools, memeImageTools };
 //# sourceMappingURL=tools.js.map