debreu-mcp-admin 2.1.0 → 3.0.0

package/dist/index.js

@@ -11,13 +11,21 @@ if (!API_KEY) {
 // ---------------------------------------------------------------------------
 // HTTP helpers
 // ---------------------------------------------------------------------------
-function authHeaders() {
-    return {
+/**
+ * Build auth headers. When actAsUser is provided, an X-Act-As-User header
+ * is included so the backend resolves context for that user instead of the
+ * API key owner. The backend verifies the caller is an admin (god_mode).
+ */
+function authHeaders(actAsUser) {
+    const h = {
         Authorization: `Bearer ${API_KEY}`,
         "Content-Type": "application/json",
     };
+    if (actAsUser)
+        h["X-Act-As-User"] = actAsUser;
+    return h;
 }
-async function apiGet(path, params) {
+async function apiGet(path, params, actAsUser) {
     const url = new URL(`${API_URL}${path}`);
     if (params) {
         for (const [k, v] of Object.entries(params)) {
@@ -25,14 +33,14 @@ async function apiGet(path, params) {
                 url.searchParams.set(k, v);
         }
     }
-    const resp = await fetch(url.toString(), { headers: authHeaders() });
+    const resp = await fetch(url.toString(), { headers: authHeaders(actAsUser) });
     if (!resp.ok) {
         const body = await resp.text();
         throw new Error(`HTTP ${resp.status}: ${body}`);
     }
     return resp.json();
 }
-async function apiPost(path, body, params) {
+async function apiPost(path, body, params, actAsUser) {
     const url = new URL(`${API_URL}${path}`);
     if (params) {
         for (const [k, v] of Object.entries(params)) {
@@ -42,7 +50,7 @@ async function apiPost(path, body, params) {
     }
     const resp = await fetch(url.toString(), {
         method: "POST",
-        headers: authHeaders(),
+        headers: authHeaders(actAsUser),
         body: JSON.stringify(body),
     });
     if (!resp.ok) {
@@ -51,7 +59,7 @@ async function apiPost(path, body, params) {
     }
     return resp.json();
 }
-async function apiPut(path, body, params) {
+async function apiPut(path, body, params, actAsUser) {
     const url = new URL(`${API_URL}${path}`);
     if (params) {
         for (const [k, v] of Object.entries(params)) {
@@ -61,7 +69,7 @@ async function apiPut(path, body, params) {
     }
     const resp = await fetch(url.toString(), {
         method: "PUT",
-        headers: authHeaders(),
+        headers: authHeaders(actAsUser),
         body: JSON.stringify(body),
     });
     if (!resp.ok) {
@@ -70,7 +78,7 @@ async function apiPut(path, body, params) {
     }
     return resp.json();
 }
-async function apiPatch(path, body, params) {
+async function apiPatch(path, body, params, actAsUser) {
     const url = new URL(`${API_URL}${path}`);
     if (params) {
         for (const [k, v] of Object.entries(params)) {
@@ -80,7 +88,7 @@ async function apiPatch(path, body, params) {
     }
     const resp = await fetch(url.toString(), {
         method: "PATCH",
-        headers: authHeaders(),
+        headers: authHeaders(actAsUser),
         body: JSON.stringify(body),
     });
     if (!resp.ok) {
@@ -89,7 +97,7 @@ async function apiPatch(path, body, params) {
     }
     return resp.json();
 }
-async function apiDelete(path, params, body) {
+async function apiDelete(path, params, body, actAsUser) {
     const url = new URL(`${API_URL}${path}`);
     if (params) {
         for (const [k, v] of Object.entries(params)) {
@@ -97,7 +105,7 @@ async function apiDelete(path, params, body) {
                 url.searchParams.set(k, v);
         }
     }
-    const opts = { method: "DELETE", headers: authHeaders() };
+    const opts = { method: "DELETE", headers: authHeaders(actAsUser) };
     if (body !== undefined) {
         opts.body = JSON.stringify(body);
     }
@@ -141,9 +149,847 @@ function pickDefinedBody(args, keys) {
     return result;
 }
 // ---------------------------------------------------------------------------
-// Tool definitions
+// pipeline_user_id property — added to every user-facing tool
+// ---------------------------------------------------------------------------
+const PIPELINE_USER_ID_PROP = {
+    pipeline_user_id: {
+        type: "string",
+        description: "Act as this user (UUID). Omit to act as the API key owner. " +
+            "Reads will return that user's data; writes will be owned by them.",
+    },
+};
+// ---------------------------------------------------------------------------
+// User-facing read tool names — all POST to /api/v1/ext/tools/{slug}
 // ---------------------------------------------------------------------------
-const TOOLS = [
+const USER_READ_TOOL_NAMES = new Set([
+    "lookup_company",
+    "query_companies",
+    "query_metric_history",
+    "get_metric_schema",
+    "get_status_definitions",
+    "lookup_person",
+    "get_people",
+    "get_team",
+    "get_tasks",
+    "report_issue",
+    "get_sentiments",
+    "query_emails",
+    "get_email",
+    "query_calendars",
+    "get_calendar",
+    "query_files",
+    "get_file",
+    "get_my_day",
+    "get_my_week",
+    "get_meeting_prep",
+    "query_projects",
+    "get_project",
+]);
+// ---------------------------------------------------------------------------
+// User-facing tool definitions (with pipeline_user_id added to each)
+// ---------------------------------------------------------------------------
+const USER_TOOLS = [
+    // ---- Companies (read) ----
+    {
+        name: "lookup_company",
+        description: "Look up a company by name, UUID, or website URL. Returns profile and all latest metric values. " +
+            "Name lookup tries exact match, then aliases, then fuzzy match (partial/informal names work). " +
+            "If no exact match is found, returns up to 10 substring-match candidates.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                identifier: {
+                    type: "string",
+                    description: "Company name, website domain, or UUID.",
+                },
+                identifier_type: {
+                    type: "string",
+                    enum: ["uuid", "name", "website"],
+                    description: "Type of identifier being provided.",
+                },
+            },
+            required: ["identifier", "identifier_type"],
+        },
+    },
+    {
+        name: "query_companies",
+        description: "Filter companies by metric values. Requires exact metric names from get_metric_schema.\n" +
+            "Operators: string metrics use contains/equals/not_equals; number metrics use gt/lt/gte/lte/equals " +
+            "(values like '$1.5B' or '500M' are auto-parsed); any metric supports exists/not_exists.\n" +
+            "Multiple filters use AND logic. Returns up to 50 companies.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                filters: {
+                    type: "array",
+                    description: "Metric filters (AND logic).",
+                    items: {
+                        type: "object",
+                        properties: {
+                            metric_name: {
+                                type: "string",
+                                description: "Exact metric name from get_metric_schema.",
+                            },
+                            operator: {
+                                type: "string",
+                                enum: [
+                                    "contains", "equals", "not_equals",
+                                    "gt", "lt", "gte", "lte",
+                                    "exists", "not_exists",
+                                ],
+                            },
+                            value: {
+                                type: "string",
+                                description: "Value to compare against. Not needed for exists/not_exists.",
+                            },
+                        },
+                        required: ["metric_name", "operator"],
+                    },
+                },
+                return_metrics: {
+                    type: "array",
+                    items: { type: "string" },
+                    description: "Additional metric names to include in results beyond filtered ones.",
+                },
+                sort_by: {
+                    type: "string",
+                    description: "Sort by a metric name or 'name' for alphabetical. Sort metric is auto-included in results.",
+                },
+                sort_order: {
+                    type: "string",
+                    enum: ["asc", "desc"],
+                    description: "Sort direction (default 'asc'). Ignored when sort_by is 'name'.",
+                },
+                limit: { type: "integer", description: "Max companies to return (default 20, max 50)." },
+                offset: { type: "integer", description: "Number of results to skip for pagination (default 0)." },
+            },
+            required: ["filters"],
+        },
+    },
+    {
+        name: "query_metric_history",
+        description: "Find companies where a numeric metric changed significantly over a date range. " +
+            "Computes change (absolute or percent) between first and last values in range, " +
+            "returns companies meeting the threshold with their full history.\n" +
+            "Only numeric metric types are supported. Call get_metric_schema first for valid names. " +
+            "Values like '$1.5B' or '500M' are auto-parsed. Use negative thresholds for decreases. " +
+            "Returns up to 25 companies sorted by largest absolute change.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                metric_name: { type: "string", description: "Exact metric name from get_metric_schema (must be numeric type)." },
+                date_from: { type: "string", description: "Start of date range (YYYY-MM-DD)." },
+                date_to: { type: "string", description: "End of date range (YYYY-MM-DD)." },
+                change_operator: { type: "string", enum: ["gt", "lt", "gte", "lte"], description: "How to compare computed change to threshold." },
+                change_value: { type: "string", description: "Threshold (e.g. '$50M', '10', '-5'). For percent mode, just a number." },
+                change_type: { type: "string", enum: ["absolute", "percent"], description: "'absolute' (default): last - first. 'percent': (last-first)/first*100." },
+                filters: {
+                    type: "array",
+                    description: "Optional: narrow company universe (same format as query_companies filters).",
+                    items: {
+                        type: "object",
+                        properties: {
+                            metric_name: { type: "string" },
+                            operator: { type: "string", enum: ["contains", "equals", "not_equals", "gt", "lt", "gte", "lte", "exists", "not_exists"] },
+                            value: { type: "string" },
+                        },
+                        required: ["metric_name", "operator"],
+                    },
+                },
+                limit: { type: "integer", description: "Max companies (default 25, max 25)." },
+            },
+            required: ["metric_name", "date_from", "date_to", "change_operator", "change_value"],
+        },
+    },
+    {
+        name: "get_metric_schema",
+        description: "Get available metric definitions for the user's team. Returns each metric's name, " +
+            "display_name, type, category, and description. Also returns distinct categories. " +
+            "Call this before query_companies or query_metric_history to learn valid metric names and types.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                category: { type: "string", description: "Filter to a specific category. Omit on first call to discover categories." },
+                type: { type: "string", description: "Filter by metric value type (e.g. 'text', 'money_millions', 'rate', 'integer')." },
+            },
+        },
+    },
+    {
+        name: "get_status_definitions",
+        description: "Get the allowed status values for a status type. Call this before filtering by status " +
+            "or setting a status on a record. Common status_type values: 'task', 'project', " +
+            "'workflow_account_outreach', 'workflow_account_acquisition_targets', " +
+            "'workflow_account_buyer_universe', 'workflow_account_company_list', " +
+            "'workflow_account_people_list'.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                status_type: { type: "string", description: "The status category to look up (e.g. 'task', 'project')." },
+            },
+            required: ["status_type"],
+        },
+    },
+    // ---- People (read) ----
+    {
+        name: "lookup_person",
+        description: "Look up a person by name, email, or UUID. Returns profile (name, email, role, phone, " +
+            "location, alma_mater, previous_company), company, relationship data (interaction dates, " +
+            "team relationship scores), and tags. Name uses substring matching; multiple matches " +
+            "return a candidates list.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                identifier: { type: "string", description: "Person's name, email address, or UUID." },
+                identifier_type: { type: "string", enum: ["uuid", "name", "email"], description: "Type of identifier being provided." },
+            },
+            required: ["identifier", "identifier_type"],
+        },
+    },
+    {
+        name: "get_people",
+        description: "Get all contacts at a specific company with relationship data (interaction dates, team " +
+            "relationship scores) and tags. Requires company UUID from lookup_company or query_companies.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                company_id: { type: "string", description: "Company UUID." },
+            },
+            required: ["company_id"],
+        },
+    },
+    // ---- Team ----
+    {
+        name: "get_team",
+        description: "Get the current user's team members. Returns each member's UUID, name, email, " +
+            "and whether they are the current user. Use this to discover valid assignee_id " +
+            "values for create_task and update_task.",
+        inputSchema: {
+            type: "object",
+            properties: { ...PIPELINE_USER_ID_PROP },
+        },
+    },
+    // ---- Tasks (read) ----
+    {
+        name: "get_tasks",
+        description: "Query tasks (action items, follow-ups, to-dos). Each task includes description, " +
+            "status, due_date, pending_from, assignee, company, person, project, " +
+            "and source (resolved to the originating email/file/calendar with name, uuid, url; " +
+            "event-sourced tasks also include the reference snippet). Call get_status_definitions with " +
+            "status_type='task' first to discover valid status values. Returns up to 50 tasks.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                company_id: { type: "string", description: "Filter to tasks for this company UUID." },
+                due_date_start: { type: "string", description: "Earliest due date (YYYY-MM-DD)." },
+                due_date_end: { type: "string", description: "Latest due date (YYYY-MM-DD)." },
+                status: { type: "string", description: "Filter by task status. Call get_status_definitions(status_type='task') for valid values." },
+                search: { type: "string", description: "Substring search in task description." },
+                limit: { type: "integer", description: "Max tasks to return (default 30, max 50)." },
+                offset: { type: "integer", description: "Number of results to skip for pagination (default 0)." },
+            },
+        },
+    },
+    // ---- Sentiments (read) ----
+    {
+        name: "get_sentiments",
+        description: "Query sentiment signals extracted from emails, files, and calendar events. " +
+            "Each has actor (from company), target (about company/theme), action_value, score, " +
+            "reference text, and confidence. Requires company UUIDs from lookup_company.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                actor_company_id: { type: "string", description: "Sentiments FROM this company UUID." },
+                target_company_id: { type: "string", description: "Sentiments ABOUT this company UUID." },
+                theme: { type: "string", description: "Filter by theme (substring match)." },
+                limit: { type: "integer", description: "Max results (default 30, max 50)." },
+                offset: { type: "integer", description: "Number of results to skip for pagination (default 0)." },
+            },
+        },
+    },
+    // ---- Emails (read) ----
+    {
+        name: "query_emails",
+        description: "Search emails. Use 'search' for keyword matching across subject and body. " +
+            "Use 'person' with 'me' to match the current user. " +
+            "Use get_email with a result UUID to get full content.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                search: { type: "string", description: "Keyword search across subject and body." },
+                date_start: { type: "string", description: "Earliest email date (YYYY-MM-DD)." },
+                date_end: { type: "string", description: "Latest email date (YYYY-MM-DD)." },
+                company_id: { type: "string", description: "Filter to emails linked to this company UUID." },
+                person: { type: "string", description: "Person name, email, or UUID. Use 'me' for current user." },
+                person_role: { type: "string", enum: ["sender", "receiver"], description: "Narrow person filter to sender or receiver only." },
+                tag: { type: "string", description: "Filter to emails with this tag (e.g. 'outreach', 'recruiting')." },
+                limit: { type: "integer", description: "Max results (default 20, max 50)." },
+                offset: { type: "integer", description: "Number of results to skip for pagination (default 0)." },
+            },
+        },
+    },
+    {
+        name: "get_email",
+        description: "Get full email content by UUID from a query_emails result.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                uuid: { type: "string", description: "Email UUID." },
+            },
+            required: ["uuid"],
+        },
+    },
+    // ---- Calendars (read) ----
+    {
+        name: "query_calendars",
+        description: "Search calendar events. Use 'person' with 'me' for the current user. " +
+            "Use get_calendar with a result UUID to get full details.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                date_start: { type: "string", description: "Earliest event date (YYYY-MM-DD)." },
+                date_end: { type: "string", description: "Latest event date (YYYY-MM-DD)." },
+                company_id: { type: "string", description: "Filter to events linked to this company UUID." },
+                person: { type: "string", description: "Attendee/organizer name, email, or UUID. Use 'me' for current user." },
+                search: { type: "string", description: "Substring search in title/description/attendees/location." },
+                tag: { type: "string", description: "Filter to events with this tag (e.g. 'outreach', 'recruiting')." },
+                limit: { type: "integer", description: "Max results (default 20, max 50)." },
+                offset: { type: "integer", description: "Number of results to skip for pagination (default 0)." },
+            },
+        },
+    },
+    {
+        name: "get_calendar",
+        description: "Get full calendar event details by UUID from a query_calendars result.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                uuid: { type: "string", description: "Calendar event UUID." },
+            },
+            required: ["uuid"],
+        },
+    },
+    // ---- Files (read) ----
+    {
+        name: "query_files",
+        description: "Search uploaded files and email attachments. Use get_file with a result UUID to get full content.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                date_start: { type: "string", description: "Earliest file date (YYYY-MM-DD)." },
+                date_end: { type: "string", description: "Latest file date (YYYY-MM-DD)." },
+                company_id: { type: "string", description: "Filter to files linked to this company UUID." },
+                search: { type: "string", description: "Substring search in title/description/content." },
+                limit: { type: "integer", description: "Max results (default 20, max 50)." },
+                offset: { type: "integer", description: "Number of results to skip for pagination (default 0)." },
+            },
+        },
+    },
+    {
+        name: "get_file",
+        description: "Get full file content by UUID from a query_files result.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                uuid: { type: "string", description: "File UUID." },
+            },
+            required: ["uuid"],
+        },
+    },
+    // ---- Briefings (read) ----
+    {
+        name: "get_my_day",
+        description: "Get the user's 'My Day' briefing -- today's agenda, key meetings, action items, and priorities.",
+        inputSchema: {
+            type: "object",
+            properties: { ...PIPELINE_USER_ID_PROP },
+        },
+    },
+    {
+        name: "get_my_week",
+        description: "Get the user's 'My Week' briefing -- the week ahead including meetings, deal updates, and deadlines.",
+        inputSchema: {
+            type: "object",
+            properties: { ...PIPELINE_USER_ID_PROP },
+        },
+    },
+    {
+        name: "get_meeting_prep",
+        description: "Get AI-generated meeting prep for a company: background, recent activity, key metrics, " +
+            "and talking points. May take a moment if generated fresh. Requires company UUID from lookup_company.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                company_id: { type: "string", description: "Company UUID." },
+            },
+            required: ["company_id"],
+        },
+    },
+    // ---- Projects (read) ----
+    {
+        name: "query_projects",
+        description: "Search projects (deals). Returns project name, type, status, client company, " +
+            "and tracker summary. Use get_project for full details. " +
+            "Call get_status_definitions with status_type='project' for valid status values.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                client_id: { type: "string", description: "Filter to projects for this client company UUID." },
+                deal_type: { type: "string", enum: ["general", "buy_side", "sell_side", "financing"] },
+                status: { type: "string", description: "Filter by project status. Call get_status_definitions(status_type='project') for valid values." },
+                date_start: { type: "string", description: "Earliest creation date (YYYY-MM-DD)." },
+                date_end: { type: "string", description: "Latest creation date (YYYY-MM-DD)." },
+                limit: { type: "integer", description: "Max results (default 20, max 50)." },
+                offset: { type: "integer", description: "Number of results to skip for pagination (default 0)." },
+            },
+        },
+    },
+    {
+        name: "get_project",
+        description: "Get full project details by UUID. Includes tasks and tracker accounts. " +
+            "For company trackers: companies with account_status, next_steps, sentiment, reasoning. " +
+            "For people_list trackers: people with account_status. " +
+            "For Acquisition Targets / Buyer Universe: also includes generated_companies and generated_status.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                uuid: { type: "string", description: "Project UUID." },
+            },
+            required: ["uuid"],
+        },
+    },
+    // ==== Write tools ====
+    // ---- Companies (write) ----
+    {
+        name: "create_company",
+        description: "Create a new company. Name and website are required. " +
+            "Company will be auto-hydrated with enrichment data asynchronously after creation.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                name: { type: "string", description: "Company name." },
+                website: { type: "string", description: "Company website (e.g. acme.com)." },
+                description: { type: "string", description: "Company description." },
+                city: { type: "string", description: "City." },
+                state: { type: "string", description: "US state 2-letter code (e.g. NY, CA)." },
+                country: { type: "string", description: "ISO 3166-1 alpha-3 country code (e.g. USA, GBR)." },
+                ticker: { type: "string", description: "Stock ticker symbol." },
+                tags: { type: "string", description: "Tags as comma-separated string." },
+            },
+            required: ["name", "website"],
+        },
+    },
+    {
+        name: "update_company",
+        description: "Update a company by UUID. Only provided fields are changed.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                uuid: { type: "string", description: "Company UUID." },
+                name: { type: "string", description: "Company name." },
+                website: { type: "string", description: "Company website." },
+                description: { type: "string", description: "Company description." },
+                city: { type: "string", description: "City." },
+                state: { type: "string", description: "US state 2-letter code." },
+                country: { type: "string", description: "ISO 3166-1 alpha-3 country code." },
+                ticker: { type: "string", description: "Stock ticker symbol." },
+                tags: { type: "string", description: "Tags as comma-separated string." },
+            },
+            required: ["uuid"],
+        },
+    },
+    // ---- People (write) ----
+    {
+        name: "create_person",
+        description: "Create a new person (contact). Name and company_id are required.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                name: { type: "string", description: "Person name." },
+                company_id: { type: "string", description: "UUID of the company this person belongs to." },
+                email: { type: "string", description: "Email address." },
+                phone: { type: "string", description: "Phone number." },
+                role: { type: "string", description: "Job title or role." },
+                alma_mater: { type: "string", description: "University or school attended." },
+                previous_company: { type: "string", description: "Previous company name." },
+                location: { type: "string", description: "City, state, or region." },
+            },
+            required: ["name", "company_id"],
+        },
+    },
+    {
+        name: "update_person",
+        description: "Update a person by UUID. Only provided fields are changed.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                uuid: { type: "string", description: "Person UUID." },
+                name: { type: "string", description: "Person name." },
+                company_id: { type: "string", description: "UUID of the company." },
+                email: { type: "string", description: "Email address." },
+                phone: { type: "string", description: "Phone number." },
+                role: { type: "string", description: "Job title or role." },
+                alma_mater: { type: "string", description: "University or school attended." },
+                previous_company: { type: "string", description: "Previous company name." },
+                location: { type: "string", description: "City, state, or region." },
+            },
+            required: ["uuid"],
+        },
+    },
+    // ---- Tasks (write) ----
+    {
+        name: "create_task",
+        description: "Create a new task (action item / follow-up). Description is required. " +
+            "Assignee defaults to the current user; call get_team to discover team member UUIDs.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                description: { type: "string", description: "Task description." },
+                company_id: { type: "string", description: "UUID of the associated company." },
+                person_id: { type: "string", description: "Person UUID or raw name string." },
+                assignee_id: { type: "string", description: "Assignee pipeline user UUID. Defaults to the current user. Call get_team for valid UUIDs." },
+                due_date: { type: "string", description: "Due date (YYYY-MM-DD)." },
+                status: { type: "string", description: "Task status (default 'open'). Call get_status_definitions(status_type='task') for valid values." },
+                pending_from: { type: "string", description: "Who the task is pending on: 'us', 'counterparty', or 'client'." },
+                source_type: { type: "string", description: "Source type (email, file, calendar, user, or event). Defaults to 'user'." },
+                project_id: { type: "string", description: "Optional project UUID." },
+            },
+            required: ["description"],
+        },
+    },
+    {
+        name: "update_task",
+        description: "Update a task by UUID. Only provided fields are changed.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                uuid: { type: "string", description: "Task UUID." },
+                description: { type: "string", description: "Task description." },
+                company_id: { type: "string", description: "UUID of the associated company." },
+                person_id: { type: "string", description: "Person UUID or raw name string." },
+                assignee_id: { type: "string", description: "Assignee pipeline user UUID. Call get_team for valid UUIDs." },
+                due_date: { type: "string", description: "Due date (YYYY-MM-DD)." },
+                status: { type: "string", description: "Task status. Call get_status_definitions(status_type='task') for valid values." },
+                pending_from: { type: "string", description: "Who the task is pending on: 'us', 'counterparty', or 'client'. Set to null to clear." },
+                project_id: { type: "string", description: "Project UUID." },
+            },
+            required: ["uuid"],
+        },
+    },
+    // ---- Projects (write) ----
+    {
+        name: "create_project",
+        description: "Create a new project (deal) with a tracker. A tracker is automatically created " +
+            "(defaults to company_list if tracker_type not specified). " +
+            "Tracker types: acquisition_targets (AI-generated target companies for buy-side), " +
+            "buyer_universe (AI-generated potential buyers for sell-side), " +
+            "outreach (track email outreach activity), company_list (simple company tracking). " +
+            "acquisition_targets and buyer_universe require client_id and trigger AI generation. " +
+            "outreach optionally uses outreach_start_date and/or outreach_end_date to auto-sync companies from email/calendar activity; " +
+            "no dates = manual only, start only = open-ended forward, both = date range filter. " +
+            "people_list optionally uses sync_tags (comma-separated) to auto-sync tagged people; tag changes are reflected automatically.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                name: { type: "string", description: "Project name." },
+                description: { type: "string", description: "Project description." },
+                keywords: { type: "string", description: "Comma-separated keywords for matching emails/files/calendars." },
+                client_id: { type: "string", description: "Client company UUID." },
+                owner_id: { type: "string", description: "Owner pipeline user UUID. Defaults to the authenticated user." },
+                deal_type: { type: "string", enum: ["general", "buy_side", "sell_side", "financing"], description: "Deal type (default 'general')." },
+                status: { type: "string", description: "Project status (default 'new'). Call get_status_definitions(status_type='project') for valid values." },
+                priority: { type: "string", enum: ["low", "med", "high"], description: "Priority level (default 'med')." },
+                start_date: { type: "string", description: "Start date (YYYY-MM-DD)." },
+                end_date: { type: "string", description: "End date (YYYY-MM-DD)." },
+                tracker_type: {
+                    type: "string",
+                    enum: ["acquisition_targets", "buyer_universe", "outreach", "company_list", "people_list"],
+                    description: "Type of tracker to create (default 'company_list').",
+                },
+                tracker_description: { type: "string", description: "Tracker description. Used as context for AI generation and account status analysis." },
+                buyer_type: { type: "string", enum: ["strategic", "financial_sponsor"], description: "For acquisition_targets/buyer_universe: type of buyer." },
+                target_landscape: {
+                    type: "array",
+                    items: {
+                        type: "object",
+                        properties: {
+                            sector: { type: "string", description: "GICS sector (e.g. 'Information Technology')." },
+                            industry_group: { type: "string", description: "GICS industry group (e.g. 'Software & Services')." },
+                            industry: { type: "string", description: "GICS industry (e.g. 'Software')." },
+                            sub_industry: { type: "string", description: "GICS sub-industry (e.g. 'Application Software')." },
+                        },
+                        required: ["sector"],
+                    },
+                    description: "For acquisition_targets/buyer_universe: target landscape as GICS taxonomy combinations. Each entry must have at least a sector.",
+                },
+                outreach_start_date: { type: "string", description: "For outreach tracker: optional start date filter (YYYY-MM-DD)." },
+                outreach_end_date: { type: "string", description: "For outreach tracker: optional end date filter (YYYY-MM-DD)." },
+                sync_tags: { type: "string", description: "For people_list tracker: comma-separated tags for auto-syncing tagged people." },
+                initial_company_ids: { type: "array", items: { type: "string" }, description: "Company UUIDs to seed into the tracker's primary view." },
+                initial_person_ids: { type: "array", items: { type: "string" }, description: "For people_list tracker: person UUIDs to seed into the tracker." },
+            },
+            required: ["name"],
+        },
+    },
+    {
+        name: "update_project",
+        description: "Update a project by UUID. Can update project fields (name, description, keywords, status, etc.), " +
+            "tracker fields (tracker_name, tracker_description, dates, taxonomy), " +
+            "and manage tracker accounts. " +
+            "For people_list trackers use person_id in account_operations; for all other trackers use company_id. " +
+            "Call get_status_definitions with the appropriate workflow_account_* status_type for valid account_status values.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                uuid: { type: "string", description: "Project UUID." },
+                name: { type: "string", description: "Project name." },
+                description: { type: "string", description: "Project description." },
+                keywords: { type: "string", description: "Comma-separated keywords." },
+                client_id: { type: "string", description: "Client company UUID." },
+                owner_id: { type: "string", description: "Owner pipeline user UUID." },
+                deal_type: { type: "string", enum: ["general", "buy_side", "sell_side", "financing"] },
+                status: { type: "string", description: "Project status. Call get_status_definitions(status_type='project') for valid values." },
+                priority: { type: "string", enum: ["low", "med", "high"] },
+                start_date: { type: "string", description: "Start date (YYYY-MM-DD)." },
+                end_date: { type: "string", description: "End date (YYYY-MM-DD)." },
+                tracker_name: { type: "string", description: "Tracker name." },
+                tracker_description: { type: "string", description: "Tracker description." },
+                outreach_start_date: { type: "string", description: "For outreach tracker: optional start date filter (YYYY-MM-DD)." },
+                outreach_end_date: { type: "string", description: "For outreach tracker: optional end date filter (YYYY-MM-DD)." },
+                sync_tags: { type: "string", description: "For people_list tracker: comma-separated tags for auto-syncing tagged people." },
+                target_landscape: {
+                    type: "array",
+                    items: {
+                        type: "object",
+                        properties: {
+                            sector: { type: "string", description: "GICS sector (e.g. 'Information Technology')." },
+                            industry_group: { type: "string", description: "GICS industry group (e.g. 'Software & Services')." },
+                            industry: { type: "string", description: "GICS industry (e.g. 'Software')." },
+                            sub_industry: { type: "string", description: "GICS sub-industry (e.g. 'Application Software')." },
+                        },
+                        required: ["sector"],
+                    },
+                    description: "For acquisition_targets/buyer_universe: target landscape as GICS taxonomy combinations.",
+                },
+                buyer_type: { type: "string", enum: ["strategic", "financial_sponsor"], description: "For acquisition_targets/buyer_universe: type of buyer." },
+                account_operations: {
+                    type: "array",
+                    description: "Operations on tracker accounts. For people_list trackers use person_id; for all other trackers use company_id.",
+                    items: {
+                        type: "object",
+                        properties: {
+                            action: { type: "string", enum: ["add", "update", "remove"], description: "'add' an entry to the tracker, 'update' its fields, or 'remove' it." },
+                            company_id: { type: "string", description: "Company UUID (for non-people_list trackers)." },
+                            person_id: { type: "string", description: "Person UUID (for people_list trackers)." },
+                            account_status: { type: "string", description: "Account status (for add/update). Call get_status_definitions for valid values." },
+                            next_steps: { type: "string", description: "Next steps text (for add/update, company trackers only)." },
+                            sentiment: { type: "string", description: "Relationship sentiment summary (for add/update, company trackers only)." },
+                        },
+                        required: ["action"],
+                    },
+                },
+            },
+            required: ["uuid"],
+        },
+    },
+    // ---- Comments (read + write) ----
+    {
+        name: "query_comments",
+        description: "Get comments on a record. Requires data_model (e.g. 'company', 'person', 'project') and record_id.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                data_model: { type: "string", description: "Record type (e.g. 'company', 'person', 'project', 'task')." },
+                record_id: { type: "string", description: "UUID of the record to get comments for." },
+                skip: { type: "integer", description: "Offset (default 0)." },
+                limit: { type: "integer", description: "Max results (default 50)." },
+            },
+            required: ["data_model", "record_id"],
+        },
+    },
+    {
+        name: "create_comment",
+        description: "Add a comment to a record (company, person, project, task, etc.).",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                data_model: { type: "string", description: "Record type (e.g. 'company', 'person', 'project', 'task')." },
+                record_id: { type: "string", description: "UUID of the record to comment on." },
+                content: { type: "string", description: "Comment text." },
+            },
+            required: ["data_model", "record_id", "content"],
+        },
+    },
+    {
+        name: "update_comment",
+        description: "Update a comment's content by UUID. Only the author can update.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                uuid: { type: "string", description: "Comment UUID." },
+                content: { type: "string", description: "Updated comment text." },
+            },
+            required: ["uuid", "content"],
+        },
+    },
+    // ---- Metric Schemas (user-facing write — team-scoped) ----
+    {
+        name: "create_metric_schema",
+        description: "Create a new metric schema definition. Name and type are required. " +
+            "Name will be normalized to lowercase with underscores.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                name: { type: "string", description: "Metric name (lowercase, underscores, e.g. 'annual_revenue')." },
+                type: { type: "string", description: "Value type (e.g. 'text', 'money_millions', 'rate', 'integer')." },
+                description: { type: "string", description: "What this metric measures." },
+                category: { type: "string", description: "Grouping category." },
+                display_name: { type: "string", description: "Human-readable name. Auto-generated from name if omitted." },
+                should_parse: { type: "boolean", description: "Whether AI should auto-extract this metric (default true)." },
+                examples: { type: "string", description: "Example values to guide AI extraction." },
+            },
+            required: ["name", "type"],
+        },
+    },
+    {
+        name: "update_metric_schema",
+        description: "Update a metric schema by UUID. Only provided fields are changed. " +
+            "Name cannot be changed after creation. System metrics cannot be modified.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                uuid: { type: "string", description: "Metric schema UUID." },
+                type: { type: "string", description: "Value type." },
+                description: { type: "string", description: "What this metric measures." },
+                category: { type: "string", description: "Grouping category." },
+                display_name: { type: "string", description: "Human-readable name." },
+                should_parse: { type: "boolean", description: "Whether AI should auto-extract this metric." },
+                examples: { type: "string", description: "Example values to guide AI extraction." },
+            },
+            required: ["uuid"],
+        },
+    },
+    // ---- Status Definitions (user-facing write) ----
+    {
+        name: "create_status_definition",
+        description: "Create a new status definition for a status type (e.g. task, workflow_account).",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                status_type: { type: "string", description: "Status category (e.g. 'task', 'workflow_account', 'project')." },
+                value: { type: "string", description: "Machine-readable value (e.g. 'in_progress')." },
+                display_name: { type: "string", description: "Human-readable label (e.g. 'In Progress')." },
+                description: { type: "string", description: "Description of this status." },
+                is_terminal: { type: "boolean", description: "Whether this status represents an end state (default false)." },
+                phase: { type: "string", description: "Phase grouping (e.g. 'active', 'closed')." },
+                sort_order: { type: "integer", description: "Display order (lower = first)." },
+            },
+            required: ["status_type", "value", "display_name"],
+        },
+    },
+    {
+        name: "update_status_definition",
+        description: "Update a status definition by UUID. Only provided fields are changed.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                uuid: { type: "string", description: "Status definition UUID." },
+                value: { type: "string", description: "Machine-readable value." },
+                display_name: { type: "string", description: "Human-readable label." },
+                description: { type: "string", description: "Description." },
+                is_terminal: { type: "boolean", description: "Whether this is an end state." },
+                phase: { type: "string", description: "Phase grouping." },
+                sort_order: { type: "integer", description: "Display order." },
+            },
+            required: ["uuid"],
+        },
+    },
+    // ---- Unified delete ----
+    {
+        name: "delete_record",
+        description: "Delete a record by type and UUID. Supported types: company, person, task, " +
+            "metric_schema, project, comment, status_definition. Performs soft delete.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                record_type: {
+                    type: "string",
+                    enum: ["company", "person", "task", "metric_schema", "project", "comment", "status_definition"],
+                    description: "Type of record to delete.",
+                },
+                uuid: { type: "string", description: "UUID of the record to delete." },
+            },
+            required: ["record_type", "uuid"],
+        },
+    },
+    // ---- Entity Tags (write) ----
+    {
+        name: "set_entity_tags",
+        description: "Set tags on a record (email, calendar, file, or person). Replaces all existing tags " +
+            "with the provided list. Pass an empty array to clear all tags. Idempotent.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                entity_type: { type: "string", enum: ["email", "calendar", "file", "person"], description: "Type of record to tag." },
+                entity_id: { type: "string", description: "UUID of the record." },
+                tags: { type: "array", items: { type: "string" }, description: "Tags to set (replaces existing tags)." },
+            },
+            required: ["entity_type", "entity_id", "tags"],
+        },
+    },
+    // ---- Issue Reports ----
+    {
+        name: "report_issue",
+        description: "Report an issue or bug. Creates an issue report tied to the current user.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                ...PIPELINE_USER_ID_PROP,
+                description: { type: "string", description: "Details about the issue." },
+                page_url: { type: "string", description: "URL or page name where the issue was observed." },
+            },
+            required: ["description"],
+        },
+    },
+];
+// ---------------------------------------------------------------------------
+// Admin-only tool definitions
+// ---------------------------------------------------------------------------
+const ADMIN_TOOLS = [
     // -- Fake Emails --
     {
         name: "seed_fake_email",
@@ -256,9 +1102,7 @@ const TOOLS = [
         description: "Get a profile by UUID.",
         inputSchema: {
             type: "object",
-            properties: {
-                uuid: { type: "string", description: "Profile UUID" },
-            },
+            properties: { uuid: { type: "string", description: "Profile UUID" } },
             required: ["uuid"],
         },
     },
@@ -294,15 +1138,13 @@ const TOOLS = [
         description: "Delete a profile. Fails if active users reference it.",
         inputSchema: {
             type: "object",
-            properties: {
-                uuid: { type: "string", description: "Profile UUID" },
-            },
+            properties: { uuid: { type: "string", description: "Profile UUID" } },
             required: ["uuid"],
         },
     },
-    // -- Metric Schema --
+    // -- Metric Schema (admin — profile-scoped) --
     {
-        name: "list_metric_schemas",
+        name: "admin_list_metric_schemas",
         description: "List metric schemas, optionally filtered by profile_id.",
         inputSchema: {
             type: "object",
@@ -314,8 +1156,8 @@ const TOOLS = [
         },
     },
     {
-        name: "create_metric_schema",
-        description: "Create a metric schema.",
+        name: "admin_create_metric_schema",
+        description: "Create a metric schema (admin — with profile_id, team_id, is_system).",
         inputSchema: {
             type: "object",
             properties: {
@@ -334,8 +1176,8 @@ const TOOLS = [
         },
     },
     {
-        name: "update_metric_schema",
-        description: "Update a metric schema by UUID. Cannot modify system metrics.",
+        name: "admin_update_metric_schema",
+        description: "Update a metric schema by UUID (admin). Cannot modify system metrics.",
         inputSchema: {
             type: "object",
             properties: {
@@ -354,19 +1196,17 @@ const TOOLS = [
         },
     },
     {
-        name: "delete_metric_schema",
+        name: "admin_delete_metric_schema",
         description: "Delete a metric schema by UUID. Cannot delete system metrics.",
         inputSchema: {
             type: "object",
-            properties: {
-                uuid: { type: "string", description: "Metric schema UUID" },
-            },
+            properties: { uuid: { type: "string", description: "Metric schema UUID" } },
             required: ["uuid"],
         },
     },
-    // -- Status Definitions --
+    // -- Status Definitions (admin — profile-scoped) --
     {
-        name: "list_status_definitions",
+        name: "admin_list_status_definitions",
         description: "List status definitions for a profile, optionally filtered by type.",
         inputSchema: {
             type: "object",
@@ -378,7 +1218,7 @@ const TOOLS = [
         },
     },
     {
-        name: "create_status_definition",
+        name: "admin_create_status_definition",
         description: "Create a status definition for a profile.",
         inputSchema: {
             type: "object",
@@ -396,8 +1236,8 @@ const TOOLS = [
         },
     },
     {
-        name: "update_status_definition",
-        description: "Update a status definition.",
+        name: "admin_update_status_definition",
+        description: "Update a status definition (admin).",
         inputSchema: {
             type: "object",
             properties: {
@@ -414,7 +1254,7 @@ const TOOLS = [
         },
     },
     {
-        name: "delete_status_definition",
+        name: "admin_delete_status_definition",
         description: "Delete a status definition, remapping entities to a replacement value.",
         inputSchema: {
             type: "object",
@@ -426,43 +1266,6 @@ const TOOLS = [
             required: ["uuid", "profile_id", "replacement_value"],
         },
     },
-    // -- Companies (for any user) --
-    {
-        name: "create_company",
-        description: "Create a company, optionally scoped to a specific user.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                name: { type: "string", description: "Company name" },
-                website: { type: "string", description: "Company website (e.g. acme.com)" },
-                description: { type: "string", description: "Company description" },
-                city: { type: "string", description: "City" },
-                state: { type: "string", description: "US state 2-letter code" },
-                country: { type: "string", description: "ISO 3166-1 alpha-3 country code" },
-                ticker: { type: "string", description: "Stock ticker symbol" },
-                tags: { type: "string", description: "Tags (comma-separated)" },
-                pipeline_user_id: { type: "string", description: "Target user UUID (defaults to caller)" },
-            },
-            required: ["name", "website"],
-        },
-    },
-    // -- People (for any user) --
-    {
-        name: "create_person",
-        description: "Create a person, optionally scoped to a specific user.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                name: { type: "string", description: "Person name" },
-                company_id: { type: "string", description: "UUID of the company this person belongs to" },
-                email: { type: "string", description: "Email address" },
-                phone: { type: "string", description: "Phone number" },
-                role: { type: "string", description: "Job title or role" },
-                pipeline_user_id: { type: "string", description: "Target user UUID (defaults to caller)" },
-            },
-            required: ["name", "company_id"],
-        },
-    },
     // -- AI Prompts --
     {
         name: "get_prompt_options",
@@ -532,9 +1335,7 @@ const TOOLS = [
         description: "Get a single AI call by UUID with full details including prompt and response.",
         inputSchema: {
             type: "object",
-            properties: {
-                uuid: { type: "string", description: "AI call UUID" },
-            },
+            properties: { uuid: { type: "string", description: "AI call UUID" } },
             required: ["uuid"],
         },
     },
@@ -574,9 +1375,7 @@ const TOOLS = [
         description: "Create a new team.",
         inputSchema: {
             type: "object",
-            properties: {
-                name: { type: "string", description: "Team name" },
-            },
+            properties: { name: { type: "string", description: "Team name" } },
             required: ["name"],
         },
     },
@@ -597,9 +1396,7 @@ const TOOLS = [
         description: "Delete a team. Fails if team has active users.",
         inputSchema: {
             type: "object",
-            properties: {
-                uuid: { type: "string", description: "Team UUID" },
-            },
+            properties: { uuid: { type: "string", description: "Team UUID" } },
             required: ["uuid"],
         },
     },
@@ -619,7 +1416,7 @@ const TOOLS = [
             required: ["pipeline_user_id", "name", "content"],
         },
     },
-    // -- Issue Reports --
+    // -- Issue Reports (admin) --
     {
         name: "list_issue_reports",
         description: "List all issue reports with user info.",
@@ -658,216 +1455,329 @@ const TOOLS = [
         },
     },
 ];
+// All tools combined
+const TOOLS = [...USER_TOOLS, ...ADMIN_TOOLS];
+// ---------------------------------------------------------------------------
+// User-facing tool handler body key constants
+// ---------------------------------------------------------------------------
+const COMPANY_BODY_KEYS = ["name", "website", "description", "city", "state", "country", "ticker", "tags"];
+const PERSON_BODY_KEYS = ["name", "company_id", "email", "phone", "role", "alma_mater", "previous_company", "location"];
+const TASK_BODY_KEYS = ["description", "company_id", "person_id", "assignee_id", "due_date", "status", "source_type", "source_id", "project_id", "workflow_id", "pending_from"];
+const METRIC_SCHEMA_BODY_KEYS = ["name", "type", "description", "category", "display_name", "should_parse", "examples"];
+const STATUS_DEF_BODY_KEYS = ["status_type", "value", "display_name", "description", "is_terminal", "phase", "sort_order"];
+const COMMENT_BODY_KEYS = ["data_model", "record_id", "content"];
+// Names of all user-facing tools (for routing in handleTool)
+const USER_TOOL_NAMES = new Set(USER_TOOLS.map((t) => t.name));
 // ---------------------------------------------------------------------------
 // Tool handlers
 // ---------------------------------------------------------------------------
 const EXT_ADMIN = "/api/v1/ext/admin";
+/**
+ * Extract pipeline_user_id from args (used as X-Act-As-User header for
+ * user-facing tools) and return cleaned args without it.
+ */
+function extractActAsUser(args) {
+    const actAsUser = args.pipeline_user_id;
+    const cleanArgs = { ...args };
+    delete cleanArgs.pipeline_user_id;
+    return { actAsUser, cleanArgs };
+}
+async function handleUserTool(name, args) {
+    const { actAsUser, cleanArgs } = extractActAsUser(args);
+    // Read tools all route through /api/v1/ext/tools/{slug}
+    if (USER_READ_TOOL_NAMES.has(name)) {
+        const slug = name.replace(/_/g, "-");
+        return textResult(await apiPost(`/api/v1/ext/tools/${slug}`, cleanArgs, undefined, actAsUser));
+    }
+    switch (name) {
+        // ---- Companies (write) ----
+        case "create_company": {
+            const body = pickDefinedBody(cleanArgs, COMPANY_BODY_KEYS);
+            return textResult(await apiPost("/api/v1/ext/companies/", body, undefined, actAsUser));
+        }
+        case "update_company": {
+            const { uuid, ...rest } = cleanArgs;
+            const body = pickDefinedBody(rest, COMPANY_BODY_KEYS);
+            return textResult(await apiPut(`/api/v1/ext/companies/${uuid}`, body, undefined, actAsUser));
+        }
+        // ---- People (write) ----
+        case "create_person": {
+            const body = pickDefinedBody(cleanArgs, PERSON_BODY_KEYS);
+            return textResult(await apiPost("/api/v1/ext/people/", body, undefined, actAsUser));
+        }
+        case "update_person": {
+            const { uuid, ...rest } = cleanArgs;
+            const body = pickDefinedBody(rest, PERSON_BODY_KEYS);
+            return textResult(await apiPut(`/api/v1/ext/people/${uuid}`, body, undefined, actAsUser));
+        }
+        // ---- Tasks (write) ----
+        case "create_task": {
+            const body = pickDefinedBody(cleanArgs, TASK_BODY_KEYS);
+            if (!body.source_type)
+                body.source_type = "user";
+            if (!body.source_id)
+                body.source_id = "mcp";
+            return textResult(await apiPost("/api/v1/ext/tasks/", body, undefined, actAsUser));
+        }
+        case "update_task": {
+            const { uuid, ...rest } = cleanArgs;
+            const body = pickDefinedBody(rest, TASK_BODY_KEYS);
+            return textResult(await apiPut(`/api/v1/ext/tasks/${uuid}`, body, undefined, actAsUser));
+        }
+        // ---- Projects (write) ----
+        case "create_project": {
+            const body = { ...cleanArgs };
+            return textResult(await apiPost("/api/v1/ext/tools/create-project", body, undefined, actAsUser));
+        }
+        case "update_project": {
+            const body = { ...cleanArgs };
+            return textResult(await apiPost("/api/v1/ext/tools/update-project", body, undefined, actAsUser));
+        }
+        // ---- Comments ----
+        case "query_comments": {
+            const params = pickDefined(cleanArgs, ["data_model", "record_id", "skip", "limit"]);
+            return textResult(await apiGet("/api/v1/ext/comments/", params, actAsUser));
+        }
+        case "create_comment": {
+            const body = pickDefinedBody(cleanArgs, COMMENT_BODY_KEYS);
+            return textResult(await apiPost("/api/v1/ext/comments/", body, undefined, actAsUser));
+        }
+        case "update_comment": {
+            const { uuid, ...rest } = cleanArgs;
+            return textResult(await apiPut(`/api/v1/ext/comments/${uuid}`, pickDefinedBody(rest, ["content"]), undefined, actAsUser));
+        }
+        // ---- Metric Schemas (write) ----
+        case "create_metric_schema": {
+            const body = pickDefinedBody(cleanArgs, METRIC_SCHEMA_BODY_KEYS);
+            return textResult(await apiPost("/api/v1/ext/metric-schemas/", body, undefined, actAsUser));
+        }
+        case "update_metric_schema": {
+            const { uuid, ...rest } = cleanArgs;
+            const body = pickDefinedBody(rest, METRIC_SCHEMA_BODY_KEYS);
+            return textResult(await apiPut(`/api/v1/ext/metric-schemas/${uuid}`, body, undefined, actAsUser));
+        }
+        // ---- Status Definitions (write) ----
+        case "create_status_definition": {
+            const body = pickDefinedBody(cleanArgs, STATUS_DEF_BODY_KEYS);
+            return textResult(await apiPost("/api/v1/ext/status-definitions/", body, undefined, actAsUser));
+        }
+        case "update_status_definition": {
+            const { uuid, ...rest } = cleanArgs;
+            const body = pickDefinedBody(rest, STATUS_DEF_BODY_KEYS);
+            return textResult(await apiPut(`/api/v1/ext/status-definitions/${uuid}`, body, undefined, actAsUser));
+        }
+        // ---- Unified delete ----
+        case "delete_record":
+            return textResult(await apiDelete(`/api/v1/ext/records/${cleanArgs.record_type}/${cleanArgs.uuid}`, undefined, undefined, actAsUser));
+        // ---- Entity Tags (write) ----
+        case "set_entity_tags":
+            return textResult(await apiPut("/api/v1/ext/entity-tags/", { entity_type: cleanArgs.entity_type, entity_id: cleanArgs.entity_id, tags: cleanArgs.tags }, undefined, actAsUser));
+        default:
+            return errorResult(`Unknown user tool: ${name}`);
+    }
+}
+async function handleAdminTool(name, args) {
+    switch (name) {
+        // -- Fake Emails --
+        case "seed_fake_email": {
+            const body = pickDefinedBody(args, [
+                "sender", "receiver", "subject", "content", "cc", "time", "pipeline_user_id",
+            ]);
+            return textResult(await apiPost(`${EXT_ADMIN}/fake-emails`, body));
+        }
+        // -- Fake Calendars --
+        case "seed_fake_calendar": {
+            const body = pickDefinedBody(args, [
+                "title", "description", "start_time", "end_time", "organizer",
+                "attendees", "location", "pipeline_user_id",
+            ]);
+            return textResult(await apiPost(`${EXT_ADMIN}/fake-calendars`, body));
+        }
+        // -- Pipeline Users --
+        case "list_users": {
+            const params = pickDefined(args, ["skip", "limit"]);
+            return textResult(await apiGet(`${EXT_ADMIN}/users`, params));
+        }
+        case "get_user":
+            return textResult(await apiGet(`${EXT_ADMIN}/users/${args.uuid}`));
+        case "create_user": {
+            const body = pickDefinedBody(args, [
+                "email", "password", "name", "company_id", "profile_id", "timezone",
+            ]);
+            return textResult(await apiPost(`${EXT_ADMIN}/users`, body));
+        }
+        case "update_user": {
+            const { uuid, ...rest } = args;
+            const body = pickDefinedBody(rest, [
+                "name", "profile_id", "team_id", "batch_parsing_enabled",
+                "batch_provider", "batch_model", "is_active", "is_deleted",
+            ]);
+            return textResult(await apiPatch(`${EXT_ADMIN}/users/${uuid}`, body));
+        }
+        // -- Profiles --
+        case "list_profiles": {
+            const params = pickDefined(args, ["skip", "limit"]);
+            return textResult(await apiGet(`${EXT_ADMIN}/profiles`, params));
+        }
+        case "get_profile":
+            return textResult(await apiGet(`${EXT_ADMIN}/profiles/${args.uuid}`));
+        case "create_profile": {
+            const body = pickDefinedBody(args, ["name", "description", "config"]);
+            return textResult(await apiPost(`${EXT_ADMIN}/profiles`, body));
+        }
+        case "update_profile": {
+            const { uuid, ...rest } = args;
+            const body = pickDefinedBody(rest, ["name", "description", "config"]);
+            return textResult(await apiPut(`${EXT_ADMIN}/profiles/${uuid}`, body));
+        }
+        case "delete_profile":
+            return textResult(await apiDelete(`${EXT_ADMIN}/profiles/${args.uuid}`));
+        // -- Metric Schema (admin) --
+        case "admin_list_metric_schemas": {
+            const params = pickDefined(args, ["profile_id", "skip", "limit"]);
+            return textResult(await apiGet(`${EXT_ADMIN}/metric-schema`, params));
+        }
+        case "admin_create_metric_schema": {
+            const body = pickDefinedBody(args, [
+                "name", "description", "type", "category", "profile_id", "team_id",
+                "examples", "display_name", "should_parse", "is_system",
+            ]);
+            return textResult(await apiPost(`${EXT_ADMIN}/metric-schema`, body));
+        }
+        case "admin_update_metric_schema": {
+            const { uuid, ...rest } = args;
+            const body = pickDefinedBody(rest, [
+                "name", "description", "type", "category", "profile_id", "team_id",
+                "examples", "display_name", "should_parse",
+            ]);
+            return textResult(await apiPut(`${EXT_ADMIN}/metric-schema/${uuid}`, body));
+        }
+        case "admin_delete_metric_schema":
+            return textResult(await apiDelete(`${EXT_ADMIN}/metric-schema/${args.uuid}`));
+        // -- Status Definitions (admin) --
+        case "admin_list_status_definitions": {
+            const params = pickDefined(args, ["profile_id", "status_type"]);
+            return textResult(await apiGet(`${EXT_ADMIN}/status-definitions`, params));
+        }
+        case "admin_create_status_definition": {
+            const { profile_id, ...rest } = args;
+            const body = pickDefinedBody(rest, [
+                "status_type", "value", "display_name", "description",
+                "is_terminal", "phase", "is_default",
+            ]);
+            const params = pickDefined({ profile_id }, ["profile_id"]);
+            return textResult(await apiPost(`${EXT_ADMIN}/status-definitions`, body, params));
+        }
+        case "admin_update_status_definition": {
+            const { uuid, profile_id, ...rest } = args;
+            const body = pickDefinedBody(rest, [
+                "display_name", "description", "is_terminal", "phase", "is_default", "value",
+            ]);
+            const params = pickDefined({ profile_id }, ["profile_id"]);
+            return textResult(await apiPatch(`${EXT_ADMIN}/status-definitions/${uuid}`, body, params));
+        }
+        case "admin_delete_status_definition": {
+            const { uuid, profile_id, replacement_value } = args;
+            const params = pickDefined({ profile_id }, ["profile_id"]);
+            return textResult(await apiDelete(`${EXT_ADMIN}/status-definitions/${uuid}`, params, { replacement_value }));
+        }
+        // -- AI Prompts --
+        case "get_prompt_options":
+            return textResult(await apiGet(`${EXT_ADMIN}/prompts/options`));
+        case "list_prompts": {
+            const params = pickDefined(args, ["profile_id", "include_history", "skip", "limit"]);
+            return textResult(await apiGet(`${EXT_ADMIN}/prompts`, params));
+        }
+        case "get_prompt": {
+            const { flow, ...rest } = args;
+            const params = pickDefined(rest, ["profile_id", "include_history"]);
+            return textResult(await apiGet(`${EXT_ADMIN}/prompts/${flow}`, params));
+        }
+        case "update_prompt": {
+            const { flow, profile_id, ...rest } = args;
+            const body = pickDefinedBody(rest, ["config", "commit_message"]);
+            const params = pickDefined({ profile_id }, ["profile_id"]);
+            return textResult(await apiPut(`${EXT_ADMIN}/prompts/${flow}`, body, params));
+        }
+        // -- AI Calls --
+        case "list_ai_calls": {
+            const params = pickDefined(args, [
+                "skip", "limit", "provider", "model", "success",
+                "ai_flow", "pipeline_user_name", "call_status",
+            ]);
+            return textResult(await apiGet(`${EXT_ADMIN}/ai-calls`, params));
+        }
+        case "get_ai_call":
+            return textResult(await apiGet(`${EXT_ADMIN}/ai-calls/${args.uuid}`));
+        // -- Feature Flags --
+        case "list_feature_flags":
+            return textResult(await apiGet(`${EXT_ADMIN}/feature-flags`));
+        case "update_feature_flag": {
+            const body = pickDefinedBody(args, ["pipeline_user_id", "name", "value"]);
+            return textResult(await apiPatch(`${EXT_ADMIN}/feature-flags`, body));
+        }
+        // -- Teams --
+        case "list_teams": {
+            const params = pickDefined(args, ["skip", "limit"]);
+            return textResult(await apiGet(`${EXT_ADMIN}/teams`, params));
+        }
+        case "create_team": {
+            const body = pickDefinedBody(args, ["name"]);
+            return textResult(await apiPost(`${EXT_ADMIN}/teams`, body));
+        }
+        case "update_team": {
+            const { uuid, ...rest } = args;
+            const body = pickDefinedBody(rest, ["name"]);
+            return textResult(await apiPut(`${EXT_ADMIN}/teams/${uuid}`, body));
+        }
+        case "delete_team":
+            return textResult(await apiDelete(`${EXT_ADMIN}/teams/${args.uuid}`));
+        // -- Notifications --
+        case "send_notification": {
+            const body = pickDefinedBody(args, [
+                "pipeline_user_id", "name", "content", "linked_entity_type", "linked_entity_id",
+            ]);
+            return textResult(await apiPost(`${EXT_ADMIN}/notifications`, body));
+        }
+        // -- Issue Reports --
+        case "list_issue_reports": {
+            const params = pickDefined(args, ["skip", "limit"]);
+            return textResult(await apiGet(`${EXT_ADMIN}/issue-reports`, params));
+        }
+        case "submit_issue_report": {
+            const body = pickDefinedBody(args, ["description", "page_url", "pipeline_user_id"]);
+            return textResult(await apiPost(`${EXT_ADMIN}/issue-reports`, body));
+        }
+        case "update_issue_report": {
+            const { uuid, ...rest } = args;
+            const body = pickDefinedBody(rest, ["status", "description"]);
+            return textResult(await apiPatch(`${EXT_ADMIN}/issue-reports/${uuid}`, body));
+        }
+        default:
+            return errorResult(`Unknown tool: ${name}`);
+    }
+}
 async function handleTool(name, args) {
     try {
-        switch (name) {
-            // -- Fake Emails --
-            case "seed_fake_email": {
-                const body = pickDefinedBody(args, [
-                    "sender", "receiver", "subject", "content", "cc", "time", "pipeline_user_id",
-                ]);
-                return textResult(await apiPost(`${EXT_ADMIN}/fake-emails`, body));
-            }
-            // -- Fake Calendars --
-            case "seed_fake_calendar": {
-                const body = pickDefinedBody(args, [
-                    "title", "description", "start_time", "end_time", "organizer",
-                    "attendees", "location", "pipeline_user_id",
-                ]);
-                return textResult(await apiPost(`${EXT_ADMIN}/fake-calendars`, body));
-            }
-            // -- Pipeline Users --
-            case "list_users": {
-                const params = pickDefined(args, ["skip", "limit"]);
-                return textResult(await apiGet(`${EXT_ADMIN}/users`, params));
-            }
-            case "get_user":
-                return textResult(await apiGet(`${EXT_ADMIN}/users/${args.uuid}`));
-            case "create_user": {
-                const body = pickDefinedBody(args, [
-                    "email", "password", "name", "company_id", "profile_id", "timezone",
-                ]);
-                return textResult(await apiPost(`${EXT_ADMIN}/users`, body));
-            }
-            case "update_user": {
-                const { uuid, ...rest } = args;
-                const body = pickDefinedBody(rest, [
-                    "name", "profile_id", "team_id", "batch_parsing_enabled",
-                    "batch_provider", "batch_model", "is_active", "is_deleted",
-                ]);
-                return textResult(await apiPatch(`${EXT_ADMIN}/users/${uuid}`, body));
-            }
-            // -- Profiles --
-            case "list_profiles": {
-                const params = pickDefined(args, ["skip", "limit"]);
-                return textResult(await apiGet(`${EXT_ADMIN}/profiles`, params));
-            }
-            case "get_profile":
-                return textResult(await apiGet(`${EXT_ADMIN}/profiles/${args.uuid}`));
-            case "create_profile": {
-                const body = pickDefinedBody(args, ["name", "description", "config"]);
-                return textResult(await apiPost(`${EXT_ADMIN}/profiles`, body));
-            }
-            case "update_profile": {
-                const { uuid, ...rest } = args;
-                const body = pickDefinedBody(rest, [
-                    "name", "description", "config",
-                ]);
-                return textResult(await apiPut(`${EXT_ADMIN}/profiles/${uuid}`, body));
-            }
-            case "delete_profile":
-                return textResult(await apiDelete(`${EXT_ADMIN}/profiles/${args.uuid}`));
-            // -- Metric Schema --
-            case "list_metric_schemas": {
-                const params = pickDefined(args, ["profile_id", "skip", "limit"]);
-                return textResult(await apiGet(`${EXT_ADMIN}/metric-schema`, params));
-            }
-            case "create_metric_schema": {
-                const body = pickDefinedBody(args, [
-                    "name", "description", "type", "category", "profile_id", "team_id",
-                    "examples", "display_name", "should_parse", "is_system",
-                ]);
-                return textResult(await apiPost(`${EXT_ADMIN}/metric-schema`, body));
-            }
-            case "update_metric_schema": {
-                const { uuid, ...rest } = args;
-                const body = pickDefinedBody(rest, [
-                    "name", "description", "type", "category", "profile_id", "team_id",
-                    "examples", "display_name", "should_parse",
-                ]);
-                return textResult(await apiPut(`${EXT_ADMIN}/metric-schema/${uuid}`, body));
-            }
-            case "delete_metric_schema":
-                return textResult(await apiDelete(`${EXT_ADMIN}/metric-schema/${args.uuid}`));
-            // -- Status Definitions --
-            case "list_status_definitions": {
-                const params = pickDefined(args, ["profile_id", "status_type"]);
-                return textResult(await apiGet(`${EXT_ADMIN}/status-definitions`, params));
-            }
-            case "create_status_definition": {
-                const { profile_id, ...rest } = args;
-                const body = pickDefinedBody(rest, [
-                    "status_type", "value", "display_name", "description",
-                    "is_terminal", "phase", "is_default",
-                ]);
-                const params = pickDefined({ profile_id }, ["profile_id"]);
-                return textResult(await apiPost(`${EXT_ADMIN}/status-definitions`, body, params));
-            }
-            case "update_status_definition": {
-                const { uuid, profile_id, ...rest } = args;
-                const body = pickDefinedBody(rest, [
-                    "display_name", "description", "is_terminal", "phase", "is_default", "value",
-                ]);
-                const params = pickDefined({ profile_id }, ["profile_id"]);
-                return textResult(await apiPatch(`${EXT_ADMIN}/status-definitions/${uuid}`, body, params));
-            }
-            case "delete_status_definition": {
-                const { uuid, profile_id, replacement_value } = args;
-                const params = pickDefined({ profile_id }, ["profile_id"]);
-                return textResult(await apiDelete(`${EXT_ADMIN}/status-definitions/${uuid}`, params, { replacement_value }));
-            }
-            // -- Companies (for any user) --
-            case "create_company": {
-                const body = pickDefinedBody(args, [
-                    "name", "website", "description", "city", "state", "country", "ticker", "tags",
-                ]);
-                const params = pickDefined(args, ["pipeline_user_id"]);
-                return textResult(await apiPost(`${EXT_ADMIN}/companies`, body, params));
-            }
-            // -- People (for any user) --
-            case "create_person": {
-                const body = pickDefinedBody(args, ["name", "company_id", "email", "phone", "role"]);
-                const params = pickDefined(args, ["pipeline_user_id"]);
-                return textResult(await apiPost(`${EXT_ADMIN}/people`, body, params));
-            }
-            // -- AI Prompts --
-            case "get_prompt_options":
-                return textResult(await apiGet(`${EXT_ADMIN}/prompts/options`));
-            case "list_prompts": {
-                const params = pickDefined(args, ["profile_id", "include_history", "skip", "limit"]);
-                return textResult(await apiGet(`${EXT_ADMIN}/prompts`, params));
-            }
-            case "get_prompt": {
-                const { flow, ...rest } = args;
-                const params = pickDefined(rest, ["profile_id", "include_history"]);
-                return textResult(await apiGet(`${EXT_ADMIN}/prompts/${flow}`, params));
-            }
-            case "update_prompt": {
-                const { flow, profile_id, ...rest } = args;
-                const body = pickDefinedBody(rest, ["config", "commit_message"]);
-                const params = pickDefined({ profile_id }, ["profile_id"]);
-                return textResult(await apiPut(`${EXT_ADMIN}/prompts/${flow}`, body, params));
-            }
-            // -- AI Calls --
-            case "list_ai_calls": {
-                const params = pickDefined(args, [
-                    "skip", "limit", "provider", "model", "success",
-                    "ai_flow", "pipeline_user_name", "call_status",
-                ]);
-                return textResult(await apiGet(`${EXT_ADMIN}/ai-calls`, params));
-            }
-            case "get_ai_call":
-                return textResult(await apiGet(`${EXT_ADMIN}/ai-calls/${args.uuid}`));
-            // -- Feature Flags --
-            case "list_feature_flags":
-                return textResult(await apiGet(`${EXT_ADMIN}/feature-flags`));
-            case "update_feature_flag": {
-                const body = pickDefinedBody(args, ["pipeline_user_id", "name", "value"]);
-                return textResult(await apiPatch(`${EXT_ADMIN}/feature-flags`, body));
-            }
-            // -- Teams --
-            case "list_teams": {
-                const params = pickDefined(args, ["skip", "limit"]);
-                return textResult(await apiGet(`${EXT_ADMIN}/teams`, params));
-            }
-            case "create_team": {
-                const body = pickDefinedBody(args, ["name"]);
-                return textResult(await apiPost(`${EXT_ADMIN}/teams`, body));
-            }
-            case "update_team": {
-                const { uuid, ...rest } = args;
-                const body = pickDefinedBody(rest, ["name"]);
-                return textResult(await apiPut(`${EXT_ADMIN}/teams/${uuid}`, body));
-            }
-            case "delete_team":
-                return textResult(await apiDelete(`${EXT_ADMIN}/teams/${args.uuid}`));
-            // -- Notifications --
-            case "send_notification": {
-                const body = pickDefinedBody(args, [
-                    "pipeline_user_id", "name", "content", "linked_entity_type", "linked_entity_id",
-                ]);
-                return textResult(await apiPost(`${EXT_ADMIN}/notifications`, body));
-            }
-            // -- Issue Reports --
-            case "list_issue_reports": {
-                const params = pickDefined(args, ["skip", "limit"]);
-                return textResult(await apiGet(`${EXT_ADMIN}/issue-reports`, params));
-            }
-            case "submit_issue_report": {
-                const body = pickDefinedBody(args, ["description", "page_url", "pipeline_user_id"]);
-                return textResult(await apiPost(`${EXT_ADMIN}/issue-reports`, body));
-            }
-            case "update_issue_report": {
-                const { uuid, ...rest } = args;
-                const body = pickDefinedBody(rest, ["status", "description"]);
-                return textResult(await apiPatch(`${EXT_ADMIN}/issue-reports/${uuid}`, body));
-            }
-            default:
-                return errorResult(`Unknown tool: ${name}`);
+        if (USER_TOOL_NAMES.has(name)) {
+            return await handleUserTool(name, args);
         }
+        return await handleAdminTool(name, args);
     }
     catch (e) {
-        return errorResult(e);
+        // Sanitize error messages to avoid leaking internal backend details
+        const msg = e instanceof Error ? e.message : String(e);
+        const statusMatch = msg.match(/^HTTP (\d{3})/);
+        const safeMsg = statusMatch
+            ? `HTTP ${statusMatch[1]}: Request failed`
+            : "Request failed";
+        return errorResult(safeMsg);
     }
 }
 // ---------------------------------------------------------------------------
 // Server setup
 // ---------------------------------------------------------------------------
-const server = new Server({ name: "debreu-mcp-admin", version: "2.1.0" }, { capabilities: { tools: {} } });
+const server = new Server({ name: "debreu-mcp-admin", version: "3.0.0" }, { capabilities: { tools: {} } });
 server.setRequestHandler(ListToolsRequestSchema, async () => ({
     tools: TOOLS,
 }));