machine-bridge-mcp 0.16.2 → 0.17.1

package/docs/TOOL_REFERENCE.md

@@ -0,0 +1,2836 @@
+# MCP tool reference
+
+> Generated from `src/shared/tool-catalog.json`. Do not edit this file manually.
+
+This catalog is the authoritative public tool contract for names, availability classes, behavior annotations, and JSON input schemas. Runtime authorization is additionally determined by the active policy described in [POLICY_REFERENCE.md](POLICY_REFERENCE.md).
+
+Tool count: **51**.
+
+## Index
+
+| Tool | Availability | Read only | Destructive | Idempotent | Open world |
+|---|---|---:|---:|---:|---:|
+| [`server_info`](#server_info) | `always` | yes | no | yes | no |
+| [`project_overview`](#project_overview) | `always` | yes | no | yes | no |
+| [`session_bootstrap`](#session_bootstrap) | `always` | yes | no | yes | no |
+| [`resolve_task_capabilities`](#resolve_task_capabilities) | `always` | yes | no | yes | no |
+| [`list_local_applications`](#list_local_applications) | `full` | yes | no | yes | yes |
+| [`open_local_application`](#open_local_application) | `full` | no | no | no | yes |
+| [`inspect_local_application`](#inspect_local_application) | `full` | yes | no | yes | yes |
+| [`operate_local_application`](#operate_local_application) | `full` | no | yes | no | yes |
+| [`browser_status`](#browser_status) | `full` | no | no | yes | yes |
+| [`pair_browser_extension`](#pair_browser_extension) | `full` | no | no | no | yes |
+| [`browser_list_tabs`](#browser_list_tabs) | `full` | yes | no | yes | yes |
+| [`browser_manage_tabs`](#browser_manage_tabs) | `full` | no | yes | no | yes |
+| [`browser_get_source`](#browser_get_source) | `full` | yes | no | yes | yes |
+| [`browser_inspect_page`](#browser_inspect_page) | `full` | yes | no | yes | yes |
+| [`browser_wait`](#browser_wait) | `full` | yes | no | yes | yes |
+| [`browser_action`](#browser_action) | `full` | no | yes | no | yes |
+| [`browser_fill_form`](#browser_fill_form) | `full` | no | yes | no | yes |
+| [`browser_screenshot`](#browser_screenshot) | `full` | no | no | no | yes |
+| [`browser_upload_files`](#browser_upload_files) | `full` | no | yes | no | yes |
+| [`agent_context`](#agent_context) | `always` | yes | no | yes | no |
+| [`list_local_skills`](#list_local_skills) | `always` | yes | no | yes | no |
+| [`load_local_skill`](#load_local_skill) | `always` | yes | no | yes | no |
+| [`list_local_commands`](#list_local_commands) | `always` | yes | no | yes | no |
+| [`run_local_command`](#run_local_command) | `direct-exec` | no | yes | no | yes |
+| [`list_roots`](#list_roots) | `always` | yes | no | yes | no |
+| [`list_dir`](#list_dir) | `always` | yes | no | yes | no |
+| [`list_files`](#list_files) | `always` | yes | no | yes | no |
+| [`read_file`](#read_file) | `always` | yes | no | yes | no |
+| [`view_image`](#view_image) | `always` | yes | no | yes | no |
+| [`write_file`](#write_file) | `write` | no | yes | no | no |
+| [`edit_file`](#edit_file) | `write` | no | yes | no | no |
+| [`apply_patch`](#apply_patch) | `write` | no | yes | no | no |
+| [`search_text`](#search_text) | `always` | yes | no | yes | no |
+| [`git_status`](#git_status) | `always` | yes | no | yes | no |
+| [`git_diff`](#git_diff) | `always` | yes | no | yes | no |
+| [`git_log`](#git_log) | `always` | yes | no | yes | no |
+| [`git_show`](#git_show) | `always` | yes | no | yes | no |
+| [`run_process`](#run_process) | `direct-exec` | no | yes | no | yes |
+| [`start_process`](#start_process) | `direct-exec` | no | yes | no | yes |
+| [`read_process`](#read_process) | `direct-exec` | yes | no | yes | no |
+| [`write_process`](#write_process) | `direct-exec` | no | yes | no | yes |
+| [`kill_process`](#kill_process) | `direct-exec` | no | yes | yes | yes |
+| [`diagnose_runtime`](#diagnose_runtime) | `always` | yes | no | yes | no |
+| [`list_local_resources`](#list_local_resources) | `always` | yes | no | yes | no |
+| [`generate_ssh_key_resource`](#generate_ssh_key_resource) | `full` | no | no | yes | no |
+| [`stage_job`](#stage_job) | `write` | no | no | no | no |
+| [`start_job`](#start_job) | `write+direct-exec` | no | yes | no | yes |
+| [`list_jobs`](#list_jobs) | `always` | yes | no | yes | no |
+| [`read_job`](#read_job) | `always` | yes | no | yes | no |
+| [`cancel_job`](#cancel_job) | `write` | no | yes | yes | yes |
+| [`exec_command`](#exec_command) | `shell-exec` | no | yes | no | yes |
+
+## `server_info`
+
+**Server information**
+
+Return bridge/runtime metadata, active policy, protocol versions, and available tools.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false
+}
+```
+
+## `project_overview`
+
+**Project overview**
+
+Summarize the connected workspace, repository root, local policy, and top-level entries.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false
+}
+```
+
+## `session_bootstrap`
+
+**Load session bootstrap**
+
+Load built-in working agreements, bounded automatic project facts, user-global and root workspace instructions, and capability refresh metadata for MCP session initialization.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "path": {
+      "type": "string",
+      "default": ".",
+      "maxLength": 32768
+    }
+  }
+}
+```
+
+## `resolve_task_capabilities`
+
+**Resolve task capabilities**
+
+Rescan built-in and automatic project context, local instruction files, skills, explicit and automatic package commands, installed applications, and browser capability metadata; rank the capabilities relevant to the current task and optionally load the best skill.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "task": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 20000
+    },
+    "path": {
+      "type": "string",
+      "default": ".",
+      "maxLength": 32768
+    },
+    "max_skills": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 50,
+      "default": 10
+    },
+    "include_selected_skill": {
+      "type": "boolean",
+      "default": true
+    }
+  },
+  "required": [
+    "task"
+  ]
+}
+```
+
+## `list_local_applications`
+
+**List local applications**
+
+Discover installed local applications and launchers without reading their document contents.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "query": {
+      "type": "string",
+      "default": "",
+      "maxLength": 1000
+    },
+    "max_results": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 1000,
+      "default": 200
+    }
+  }
+}
+```
+
+## `open_local_application`
+
+**Open local application**
+
+Open a named local application, optionally with a document or URL target, using the operating system launcher.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | no |
+| Destructive hint | no |
+| Idempotent hint | no |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "application": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 300
+    },
+    "target": {
+      "type": "string",
+      "maxLength": 32768
+    },
+    "background": {
+      "type": "boolean",
+      "default": false
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 120,
+      "default": 30
+    }
+  },
+  "required": [
+    "application"
+  ]
+}
+```
+
+## `inspect_local_application`
+
+**Inspect local application UI**
+
+Inspect a bounded macOS Accessibility tree for a running application. Requires local Accessibility permission and never executes arbitrary AppleScript supplied by the caller.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "application": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 300
+    },
+    "max_depth": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 12,
+      "default": 6
+    },
+    "max_elements": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 500,
+      "default": 200
+    },
+    "include_values": {
+      "type": "boolean",
+      "default": false
+    },
+    "include_menus": {
+      "type": "boolean",
+      "default": false,
+      "description": "Include and recursively inspect the application menu hierarchy. Disabled by default so main-window controls are reached quickly."
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 120,
+      "default": 30
+    }
+  },
+  "required": [
+    "application"
+  ]
+}
+```
+
+## `operate_local_application`
+
+**Operate local application UI**
+
+Perform a structured macOS Accessibility action on a matched UI element. Text can be supplied through a registered local resource so secret values do not enter MCP arguments.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | no |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "application": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 300
+    },
+    "action": {
+      "type": "string",
+      "enum": [
+        "activate",
+        "click",
+        "set_value",
+        "focus",
+        "press",
+        "keystroke"
+      ]
+    },
+    "selector": {
+      "type": "object",
+      "properties": {
+        "role": {
+          "type": "string",
+          "maxLength": 500
+        },
+        "subrole": {
+          "type": "string",
+          "maxLength": 500
+        },
+        "name": {
+          "type": "string",
+          "maxLength": 500
+        },
+        "title": {
+          "type": "string",
+          "maxLength": 500
+        },
+        "description": {
+          "type": "string",
+          "maxLength": 500
+        },
+        "identifier": {
+          "type": "string",
+          "maxLength": 500
+        },
+        "index": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 499
+        }
+      },
+      "additionalProperties": false
+    },
+    "value": {
+      "type": "string",
+      "maxLength": 4000
+    },
+    "value_resource": {
+      "type": "string",
+      "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+    },
+    "include_menus": {
+      "type": "boolean",
+      "default": false,
+      "description": "Include menu-bar and menu subtrees when matching the action selector."
+    },
+    "max_depth": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 12,
+      "default": 8
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 120,
+      "default": 30
+    }
+  },
+  "required": [
+    "application",
+    "action"
+  ]
+}
+```
+
+## `browser_status`
+
+**Browser bridge status**
+
+Start or inspect the loopback bridge for the Chromium profile where the extension is installed. Machine Bridge does not launch Playwright or another browser process, but cannot infer whether that profile is the user's daily or isolated profile; status reports authenticated extension version, protocol, capabilities, and reload state.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | no |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false
+}
+```
+
+## `pair_browser_extension`
+
+**Pair browser extension**
+
+Open the local pairing page and return the packaged unpacked-extension path for installation in the user's intended Chromium profile. Pairing is persisted only after an acknowledged version/capability handshake.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | no |
+| Destructive hint | no |
+| Idempotent hint | no |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "open": {
+      "type": "boolean",
+      "default": true
+    }
+  }
+}
+```
+
+## `browser_list_tabs`
+
+**List browser tabs**
+
+List tabs from the paired user's existing Chromium browser profile.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "current_window": {
+      "type": "boolean",
+      "default": false
+    },
+    "include_pinned": {
+      "type": "boolean",
+      "default": true
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 120,
+      "default": 30
+    }
+  }
+}
+```
+
+## `browser_manage_tabs`
+
+**Manage browser tabs**
+
+Create, activate, or close tabs in the paired existing browser profile.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | no |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "action": {
+      "type": "string",
+      "enum": [
+        "new",
+        "activate",
+        "close"
+      ]
+    },
+    "tab_id": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "Required for activate and close."
+    },
+    "url": {
+      "type": "string",
+      "maxLength": 32768,
+      "description": "Optional absolute http, https, or file URL for a new tab."
+    },
+    "active": {
+      "type": "boolean",
+      "default": true
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 120,
+      "default": 30
+    }
+  },
+  "required": [
+    "action"
+  ]
+}
+```
+
+## `browser_get_source`
+
+**Read browser page source**
+
+Read bounded serialized current DOM HTML from the active or selected browser tab. max_bytes is one aggregate budget across at most 64 accessible frames, with explicit frame, node, and byte truncation metadata.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "tab_id": {
+      "type": "integer",
+      "minimum": 1
+    },
+    "max_bytes": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 4194304,
+      "default": 1048576
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 120,
+      "default": 30
+    },
+    "frame_id": {
+      "type": "integer",
+      "minimum": 0
+    },
+    "all_frames": {
+      "type": "boolean",
+      "default": false
+    }
+  }
+}
+```
+
+## `browser_inspect_page`
+
+**Inspect browser page**
+
+Inspect a bounded snapshot-version-2 semantic representation across at most 64 accessible frames, with one aggregate element budget, bounded reusable refs, actionability state, bounded page-controlled metadata, and explicit scan/frame truncation.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "tab_id": {
+      "type": "integer",
+      "minimum": 1
+    },
+    "max_elements": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 1000,
+      "default": 300
+    },
+    "include_values": {
+      "type": "boolean",
+      "default": false
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 120,
+      "default": 30
+    },
+    "frame_id": {
+      "type": "integer",
+      "minimum": 0
+    },
+    "all_frames": {
+      "type": "boolean",
+      "default": true
+    }
+  }
+}
+```
+
+## `browser_wait`
+
+**Wait for browser state**
+
+Wait until all supplied URL, load, text, and element-state conditions are satisfied in an existing browser tab.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "tab_id": {
+      "type": "integer",
+      "minimum": 1
+    },
+    "frame_id": {
+      "type": "integer",
+      "minimum": 0
+    },
+    "selector": {
+      "type": "object",
+      "properties": {
+        "ref": {
+          "type": "string",
+          "maxLength": 100,
+          "description": "Stable element reference returned by browser_inspect_page for the same document and frame."
+        },
+        "css": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "id": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "name": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "label": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "text": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "role": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "placeholder": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "index": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 10000
+        }
+      },
+      "additionalProperties": false
+    },
+    "state": {
+      "type": "string",
+      "enum": [
+        "attached",
+        "detached",
+        "visible",
+        "hidden",
+        "enabled",
+        "editable",
+        "checked",
+        "unchecked"
+      ],
+      "description": "Element state to wait for. Defaults to visible only when selector is supplied."
+    },
+    "text": {
+      "type": "string",
+      "maxLength": 4000
+    },
+    "url_contains": {
+      "type": "string",
+      "maxLength": 32768
+    },
+    "load_state": {
+      "type": "string",
+      "enum": [
+        "domcontentloaded",
+        "complete"
+      ]
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 120,
+      "default": 30
+    }
+  }
+}
+```
+
+## `browser_action`
+
+**Operate browser page**
+
+Perform one structured navigation or page action in the user's existing browser tab without arbitrary JavaScript. Automatic trusted-input fallback occurs only before any DevTools Input command starts; ambiguous post-dispatch failures require inspection before retry.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | no |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "tab_id": {
+      "type": "integer",
+      "minimum": 1
+    },
+    "action": {
+      "type": "string",
+      "enum": [
+        "navigate",
+        "click",
+        "fill",
+        "select",
+        "check",
+        "uncheck",
+        "focus",
+        "press",
+        "submit",
+        "reload",
+        "back",
+        "forward",
+        "double_click",
+        "hover",
+        "type_text",
+        "scroll_into_view"
+      ]
+    },
+    "selector": {
+      "type": "object",
+      "properties": {
+        "ref": {
+          "type": "string",
+          "maxLength": 100,
+          "description": "Stable element reference returned by browser_inspect_page for the same document and frame."
+        },
+        "css": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "id": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "name": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "label": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "text": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "role": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "placeholder": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "index": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 10000
+        }
+      },
+      "additionalProperties": false
+    },
+    "url": {
+      "type": "string",
+      "maxLength": 32768
+    },
+    "value": {
+      "type": "string",
+      "maxLength": 131072
+    },
+    "value_resource": {
+      "type": "string",
+      "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+    },
+    "key": {
+      "type": "string",
+      "maxLength": 100
+    },
+    "wait_for": {
+      "type": "string",
+      "enum": [
+        "none",
+        "domcontentloaded",
+        "complete"
+      ],
+      "default": "none"
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 120,
+      "default": 30
+    },
+    "frame_id": {
+      "type": "integer",
+      "minimum": 0
+    },
+    "input_mode": {
+      "type": "string",
+      "enum": [
+        "auto",
+        "trusted",
+        "dom"
+      ],
+      "default": "auto",
+      "description": "Use fixed DevTools Input commands when possible, require them, or use DOM events only."
+    },
+    "element_timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 60,
+      "default": 10
+    }
+  },
+  "required": [
+    "action"
+  ]
+}
+```
+
+## `browser_fill_form`
+
+**Fill complex browser form**
+
+Fill multiple fields and optionally submit a complex form. Sensitive values can come from registered local resources; errors identify possible earlier mutations without returning field values.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | no |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "tab_id": {
+      "type": "integer",
+      "minimum": 1
+    },
+    "fields": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 200,
+      "items": {
+        "type": "object",
+        "properties": {
+          "selector": {
+            "type": "object",
+            "properties": {
+              "ref": {
+                "type": "string",
+                "maxLength": 100,
+                "description": "Stable element reference returned by browser_inspect_page for the same document and frame."
+              },
+              "css": {
+                "type": "string",
+                "maxLength": 2000
+              },
+              "id": {
+                "type": "string",
+                "maxLength": 2000
+              },
+              "name": {
+                "type": "string",
+                "maxLength": 2000
+              },
+              "label": {
+                "type": "string",
+                "maxLength": 2000
+              },
+              "text": {
+                "type": "string",
+                "maxLength": 2000
+              },
+              "role": {
+                "type": "string",
+                "maxLength": 2000
+              },
+              "placeholder": {
+                "type": "string",
+                "maxLength": 2000
+              },
+              "index": {
+                "type": "integer",
+                "minimum": 0,
+                "maximum": 10000
+              }
+            },
+            "additionalProperties": false
+          },
+          "value": {
+            "type": "string",
+            "maxLength": 131072
+          },
+          "value_resource": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+          },
+          "action": {
+            "type": "string",
+            "enum": [
+              "fill",
+              "select",
+              "check",
+              "uncheck",
+              "click"
+            ],
+            "default": "fill"
+          },
+          "sensitive": {
+            "type": "boolean",
+            "default": false
+          }
+        },
+        "required": [
+          "selector"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "submit": {
+      "type": "boolean",
+      "default": false
+    },
+    "submit_selector": {
+      "type": "object",
+      "properties": {
+        "ref": {
+          "type": "string",
+          "maxLength": 100,
+          "description": "Stable element reference returned by browser_inspect_page for the same document and frame."
+        },
+        "css": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "id": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "name": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "label": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "text": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "role": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "placeholder": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "index": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 10000
+        }
+      },
+      "additionalProperties": false
+    },
+    "wait_for": {
+      "type": "string",
+      "enum": [
+        "none",
+        "domcontentloaded",
+        "complete"
+      ],
+      "default": "none"
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 180,
+      "default": 60
+    },
+    "frame_id": {
+      "type": "integer",
+      "minimum": 0
+    },
+    "element_timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 60,
+      "default": 10
+    }
+  },
+  "required": [
+    "fields"
+  ]
+}
+```
+
+## `browser_screenshot`
+
+**Capture browser screenshot**
+
+Capture the visible area of the active or selected tab from the paired existing browser profile, restore the previous active tab when safe, avoid focusing another window, and return native MCP image content.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | no |
+| Destructive hint | no |
+| Idempotent hint | no |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "tab_id": {
+      "type": "integer",
+      "minimum": 1
+    },
+    "format": {
+      "type": "string",
+      "enum": [
+        "png",
+        "jpeg"
+      ],
+      "default": "png"
+    },
+    "quality": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 100,
+      "default": 90
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 120,
+      "default": 30
+    }
+  }
+}
+```
+
+## `browser_upload_files`
+
+**Upload browser files**
+
+Populate a browser file input from registered local resource files without returning file contents through MCP results.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | no |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "tab_id": {
+      "type": "integer",
+      "minimum": 1
+    },
+    "selector": {
+      "type": "object",
+      "properties": {
+        "ref": {
+          "type": "string",
+          "maxLength": 100,
+          "description": "Stable element reference returned by browser_inspect_page for the same document and frame."
+        },
+        "css": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "id": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "name": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "label": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "text": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "role": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "placeholder": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "index": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 10000
+        }
+      },
+      "additionalProperties": false
+    },
+    "resources": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 8,
+      "items": {
+        "type": "string",
+        "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+      }
+    },
+    "filenames": {
+      "type": "array",
+      "maxItems": 8,
+      "items": {
+        "type": "string",
+        "maxLength": 255
+      }
+    },
+    "mime_types": {
+      "type": "array",
+      "maxItems": 8,
+      "items": {
+        "type": "string",
+        "maxLength": 200
+      }
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 180,
+      "default": 60
+    },
+    "frame_id": {
+      "type": "integer",
+      "minimum": 0
+    },
+    "element_timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 60,
+      "default": 10
+    }
+  },
+  "required": [
+    "selector",
+    "resources"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `agent_context`
+
+**Load agent context**
+
+Discover built-in defaults, bounded automatic project facts, Codex-compatible global/root-to-target instruction precedence, progressively disclosed local skills, explicit commands, and safe automatic package-script command aliases for a target path.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "path": {
+      "type": "string",
+      "default": ".",
+      "maxLength": 32768
+    },
+    "include_instruction_content": {
+      "type": "boolean",
+      "default": true
+    },
+    "max_skills": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 500,
+      "default": 100
+    }
+  },
+  "additionalProperties": false
+}
+```
+
+## `list_local_skills`
+
+**List local skills**
+
+Search bounded SKILL.md or skill.md bundles from Codex-compatible and explicitly configured skill roots without executing them.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "path": {
+      "type": "string",
+      "default": ".",
+      "maxLength": 32768
+    },
+    "query": {
+      "type": "string",
+      "default": "",
+      "maxLength": 1000
+    },
+    "max_results": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 500,
+      "default": 100
+    }
+  },
+  "additionalProperties": false
+}
+```
+
+## `load_local_skill`
+
+**Load local skill**
+
+Load one discovered local skill entrypoint and a bounded relative file inventory. Loading returns instructions and never executes skill files implicitly.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "skill": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 32768
+    },
+    "path": {
+      "type": "string",
+      "default": ".",
+      "maxLength": 32768
+    },
+    "max_files": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 500,
+      "default": 200
+    }
+  },
+  "required": [
+    "skill"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `list_local_commands`
+
+**List registered local commands**
+
+List effective direct-argv commands from project manifests and safe automatic package-script aliases, including provenance and timeout limits.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "path": {
+      "type": "string",
+      "default": ".",
+      "maxLength": 32768
+    }
+  },
+  "additionalProperties": false
+}
+```
+
+## `run_local_command`
+
+**Run registered local command**
+
+Run an effective manifest or automatic package-script command through its fixed argv, cwd, timeout ceiling, and extra-argument policy.
+
+| Contract field | Value |
+|---|---|
+| Availability | `direct-exec` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | no |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 64
+    },
+    "path": {
+      "type": "string",
+      "default": ".",
+      "maxLength": 32768
+    },
+    "args": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "maxLength": 65536
+      },
+      "maxItems": 64,
+      "default": []
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 600
+    }
+  },
+  "required": [
+    "name"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `list_roots`
+
+**List workspace roots**
+
+List filesystem roots exposed by the active local policy. The default full profile exposes local filesystem roots and returns absolute paths.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false
+}
+```
+
+## `list_dir`
+
+**List directory**
+
+List direct children of a workspace directory.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "path": {
+      "type": "string",
+      "default": "."
+    }
+  },
+  "additionalProperties": false
+}
+```
+
+## `list_files`
+
+**List files**
+
+Recursively list files under a workspace path with bounded traversal and output.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "path": {
+      "type": "string",
+      "default": "."
+    },
+    "max_files": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 10000,
+      "default": 1000
+    }
+  },
+  "additionalProperties": false
+}
+```
+
+## `read_file`
+
+**Read text file**
+
+Read a UTF-8 regular file or an inclusive 1-based line range. The server does not block sensitive-looking filenames; access follows the active local policy and operating-system permissions.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "path": {
+      "type": "string"
+    },
+    "start_line": {
+      "type": "integer",
+      "minimum": 1
+    },
+    "end_line": {
+      "type": "integer",
+      "minimum": 1
+    },
+    "max_bytes": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 5242880,
+      "default": 1048576
+    }
+  },
+  "required": [
+    "path"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `view_image`
+
+**View image**
+
+Read a bounded PNG, JPEG, GIF, or WebP image from the workspace and return native MCP image content.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "path": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "path"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `write_file`
+
+**Write text file**
+
+Atomically write a UTF-8 file up to 5 MiB. Supports create-only and optimistic SHA-256 checks; symbolic-link destinations are rejected.
+
+| Contract field | Value |
+|---|---|
+| Availability | `write` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | no |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "path": {
+      "type": "string"
+    },
+    "content": {
+      "type": "string"
+    },
+    "create_only": {
+      "type": "boolean",
+      "default": false
+    },
+    "expected_sha256": {
+      "type": "string",
+      "pattern": "^[a-fA-F0-9]{64}$"
+    }
+  },
+  "required": [
+    "path",
+    "content"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `edit_file`
+
+**Edit text file**
+
+Atomically replace an exact text fragment in one UTF-8 file. By default the old text must occur exactly once.
+
+| Contract field | Value |
+|---|---|
+| Availability | `write` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | no |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "path": {
+      "type": "string"
+    },
+    "old_text": {
+      "type": "string",
+      "minLength": 1
+    },
+    "new_text": {
+      "type": "string"
+    },
+    "replace_all": {
+      "type": "boolean",
+      "default": false
+    },
+    "expected_sha256": {
+      "type": "string",
+      "pattern": "^[a-fA-F0-9]{64}$"
+    }
+  },
+  "required": [
+    "path",
+    "old_text",
+    "new_text"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `apply_patch`
+
+**Apply structured patch**
+
+Apply a bounded Begin Patch/End Patch envelope containing add, update, move, or delete file operations. All paths are prevalidated and mutations are serialized.
+
+| Contract field | Value |
+|---|---|
+| Availability | `write` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | no |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "patch": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 5242880
+    }
+  },
+  "required": [
+    "patch"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `search_text`
+
+**Search text**
+
+Search UTF-8 text files under a workspace path for a literal substring.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "query": {
+      "type": "string",
+      "minLength": 1
+    },
+    "path": {
+      "type": "string",
+      "default": "."
+    },
+    "max_matches": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 1000,
+      "default": 100
+    },
+    "max_files": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 100000,
+      "default": 10000
+    }
+  },
+  "required": [
+    "query"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `git_status`
+
+**Git status**
+
+Return bounded Git porcelain status for the repository containing a workspace path.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "path": {
+      "type": "string",
+      "default": "."
+    }
+  },
+  "additionalProperties": false
+}
+```
+
+## `git_diff`
+
+**Git diff**
+
+Return bounded unified Git diff with external diff, text conversion, and filesystem monitor helpers disabled.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "path": {
+      "type": "string",
+      "default": "."
+    },
+    "staged": {
+      "type": "boolean",
+      "default": false
+    },
+    "max_bytes": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 5242880,
+      "default": 1048576
+    }
+  },
+  "additionalProperties": false
+}
+```
+
+## `git_log`
+
+**Git log**
+
+Return recent commits in a bounded, machine-readable format. Author email addresses are omitted unless explicitly requested.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "path": {
+      "type": "string",
+      "default": "."
+    },
+    "max_count": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 100,
+      "default": 20
+    },
+    "include_author_email": {
+      "type": "boolean",
+      "default": false
+    }
+  },
+  "additionalProperties": false
+}
+```
+
+## `git_show`
+
+**Git show**
+
+Return bounded metadata and patch output for one revision without running repository-configured external helpers.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "path": {
+      "type": "string",
+      "default": "."
+    },
+    "revision": {
+      "type": "string",
+      "default": "HEAD"
+    },
+    "max_bytes": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 5242880,
+      "default": 1048576
+    }
+  },
+  "additionalProperties": false
+}
+```
+
+## `run_process`
+
+**Run process directly**
+
+Execute an argv array without a command shell. This avoids shell parsing but does not sandbox the executable or code it launches.
+
+| Contract field | Value |
+|---|---|
+| Availability | `direct-exec` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | no |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "argv": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "minItems": 1,
+      "maxItems": 256
+    },
+    "cwd": {
+      "type": "string",
+      "default": "."
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 600,
+      "default": 120
+    }
+  },
+  "required": [
+    "argv"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `start_process`
+
+**Start process session**
+
+Start a direct argv process without a shell and retain bounded stdout, stderr, and stdin state across MCP calls.
+
+| Contract field | Value |
+|---|---|
+| Availability | `direct-exec` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | no |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "argv": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "minItems": 1,
+      "maxItems": 256
+    },
+    "cwd": {
+      "type": "string",
+      "default": "."
+    }
+  },
+  "required": [
+    "argv"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `read_process`
+
+**Read process session**
+
+Read bounded stdout and stderr deltas from a server-managed process session, optionally waiting briefly for new output.
+
+| Contract field | Value |
+|---|---|
+| Availability | `direct-exec` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "session_id": {
+      "type": "string"
+    },
+    "stdout_offset": {
+      "type": "integer",
+      "minimum": 0,
+      "default": 0
+    },
+    "stderr_offset": {
+      "type": "integer",
+      "minimum": 0,
+      "default": 0
+    },
+    "max_bytes": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 262144,
+      "default": 65536
+    },
+    "wait_ms": {
+      "type": "integer",
+      "minimum": 0,
+      "maximum": 30000,
+      "default": 0
+    },
+    "wait_for_exit": {
+      "type": "boolean",
+      "default": false
+    }
+  },
+  "required": [
+    "session_id"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `write_process`
+
+**Write process stdin**
+
+Write bounded UTF-8 data to a live process session and optionally close its stdin stream.
+
+| Contract field | Value |
+|---|---|
+| Availability | `direct-exec` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | no |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "session_id": {
+      "type": "string"
+    },
+    "data": {
+      "type": "string",
+      "maxLength": 65536
+    },
+    "close_stdin": {
+      "type": "boolean",
+      "default": false
+    }
+  },
+  "required": [
+    "session_id"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `kill_process`
+
+**Terminate process session**
+
+Terminate a live server-managed process tree with graceful or forced termination.
+
+| Contract field | Value |
+|---|---|
+| Availability | `direct-exec` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | yes |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "session_id": {
+      "type": "string"
+    },
+    "force": {
+      "type": "boolean",
+      "default": false
+    }
+  },
+  "required": [
+    "session_id"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `diagnose_runtime`
+
+**Diagnose runtime layers**
+
+Run fixed, non-user-controlled local probes to distinguish MCP policy, local filesystem, process-spawn, shell, managed-job storage, and registered-resource failures. A successful response proves the request reached the local daemon; it cannot diagnose a host refusal that blocks the tool call itself.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false
+}
+```
+
+## `list_local_resources`
+
+**List local resource aliases**
+
+List names and validation status for locally registered file resources without returning their paths or contents. Resources are registered only through the local machine-mcp CLI.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "additionalProperties": false
+}
+```
+
+## `generate_ssh_key_resource`
+
+**Generate SSH key resource**
+
+Generate or reuse an Ed25519 SSH key pair on the local machine and register the private key file as a local resource alias. Private key content is never returned. Local paths are omitted unless expose_paths=true; fingerprint, permissions, and registration status are returned. Available only under canonical full policy.
+
+| Contract field | Value |
+|---|---|
+| Availability | `full` |
+| Read-only hint | no |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+    },
+    "path": {
+      "type": "string",
+      "maxLength": 4096
+    },
+    "comment": {
+      "type": "string",
+      "maxLength": 256
+    },
+    "expose_paths": {
+      "type": "boolean",
+      "description": "Return local private/public key paths. Defaults to false."
+    }
+  },
+  "required": [
+    "name"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `stage_job`
+
+**Stage managed job for local approval**
+
+Validate and persist a managed-job plan without starting any process. Use this when execution tools are unavailable or local operator review is required; launch later with machine-mcp job approve JOB_ID.
+
+| Contract field | Value |
+|---|---|
+| Availability | `write` |
+| Read-only hint | no |
+| Destructive hint | no |
+| Idempotent hint | no |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "maxLength": 128
+    },
+    "steps": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 16,
+      "items": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "maxLength": 128
+          },
+          "argv": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 256,
+            "items": {
+              "type": "string",
+              "maxLength": 16384
+            }
+          },
+          "cwd": {
+            "type": "string",
+            "maxLength": 4096
+          },
+          "env": {
+            "type": "object",
+            "maxProperties": 64,
+            "additionalProperties": {
+              "type": "string",
+              "maxLength": 16384
+            }
+          },
+          "env_resources": {
+            "type": "object",
+            "maxProperties": 32,
+            "additionalProperties": {
+              "type": "string",
+              "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+            }
+          },
+          "stdin": {
+            "type": "string",
+            "maxLength": 262144
+          },
+          "stdin_resource": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+          },
+          "timeout_seconds": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 3600,
+            "default": 600
+          },
+          "allow_failure": {
+            "type": "boolean",
+            "default": false
+          },
+          "capture_output": {
+            "type": "string",
+            "enum": [
+              "redacted",
+              "discard"
+            ],
+            "default": "redacted"
+          }
+        },
+        "required": [
+          "argv"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "finally_steps": {
+      "type": "array",
+      "maxItems": 16,
+      "items": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "maxLength": 128
+          },
+          "argv": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 256,
+            "items": {
+              "type": "string",
+              "maxLength": 16384
+            }
+          },
+          "cwd": {
+            "type": "string",
+            "maxLength": 4096
+          },
+          "env": {
+            "type": "object",
+            "maxProperties": 64,
+            "additionalProperties": {
+              "type": "string",
+              "maxLength": 16384
+            }
+          },
+          "env_resources": {
+            "type": "object",
+            "maxProperties": 32,
+            "additionalProperties": {
+              "type": "string",
+              "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+            }
+          },
+          "stdin": {
+            "type": "string",
+            "maxLength": 262144
+          },
+          "stdin_resource": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+          },
+          "timeout_seconds": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 3600,
+            "default": 600
+          },
+          "allow_failure": {
+            "type": "boolean",
+            "default": false
+          },
+          "capture_output": {
+            "type": "string",
+            "enum": [
+              "redacted",
+              "discard"
+            ],
+            "default": "redacted"
+          }
+        },
+        "required": [
+          "argv"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "temporary_files": {
+      "type": "array",
+      "maxItems": 16,
+      "items": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+          },
+          "content": {
+            "type": "string",
+            "maxLength": 262144
+          },
+          "executable": {
+            "type": "boolean",
+            "default": false
+          }
+        },
+        "required": [
+          "name",
+          "content"
+        ],
+        "additionalProperties": false
+      }
+    }
+  },
+  "required": [
+    "steps"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `start_job`
+
+**Start managed job**
+
+Durably accept a detached argv-based job with ordered steps, job-scoped temporary files, and guaranteed-attempt finally steps. The independent local runner continues if the MCP connection disappears. Use {{temp:name}}, {{resource:name}}, env_resources, or stdin_resource; registered resource contents never enter MCP arguments.
+
+| Contract field | Value |
+|---|---|
+| Availability | `write+direct-exec` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | no |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "maxLength": 128
+    },
+    "steps": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 16,
+      "items": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "maxLength": 128
+          },
+          "argv": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 256,
+            "items": {
+              "type": "string",
+              "maxLength": 16384
+            }
+          },
+          "cwd": {
+            "type": "string",
+            "maxLength": 4096
+          },
+          "env": {
+            "type": "object",
+            "maxProperties": 64,
+            "additionalProperties": {
+              "type": "string",
+              "maxLength": 16384
+            }
+          },
+          "env_resources": {
+            "type": "object",
+            "maxProperties": 32,
+            "additionalProperties": {
+              "type": "string",
+              "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+            }
+          },
+          "stdin": {
+            "type": "string",
+            "maxLength": 262144
+          },
+          "stdin_resource": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+          },
+          "timeout_seconds": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 3600,
+            "default": 600
+          },
+          "allow_failure": {
+            "type": "boolean",
+            "default": false
+          },
+          "capture_output": {
+            "type": "string",
+            "enum": [
+              "redacted",
+              "discard"
+            ],
+            "default": "redacted"
+          }
+        },
+        "required": [
+          "argv"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "finally_steps": {
+      "type": "array",
+      "maxItems": 16,
+      "items": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "maxLength": 128
+          },
+          "argv": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 256,
+            "items": {
+              "type": "string",
+              "maxLength": 16384
+            }
+          },
+          "cwd": {
+            "type": "string",
+            "maxLength": 4096
+          },
+          "env": {
+            "type": "object",
+            "maxProperties": 64,
+            "additionalProperties": {
+              "type": "string",
+              "maxLength": 16384
+            }
+          },
+          "env_resources": {
+            "type": "object",
+            "maxProperties": 32,
+            "additionalProperties": {
+              "type": "string",
+              "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+            }
+          },
+          "stdin": {
+            "type": "string",
+            "maxLength": 262144
+          },
+          "stdin_resource": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+          },
+          "timeout_seconds": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 3600,
+            "default": 600
+          },
+          "allow_failure": {
+            "type": "boolean",
+            "default": false
+          },
+          "capture_output": {
+            "type": "string",
+            "enum": [
+              "redacted",
+              "discard"
+            ],
+            "default": "redacted"
+          }
+        },
+        "required": [
+          "argv"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "temporary_files": {
+      "type": "array",
+      "maxItems": 16,
+      "items": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+          },
+          "content": {
+            "type": "string",
+            "maxLength": 262144
+          },
+          "executable": {
+            "type": "boolean",
+            "default": false
+          }
+        },
+        "required": [
+          "name",
+          "content"
+        ],
+        "additionalProperties": false
+      }
+    }
+  },
+  "required": [
+    "steps"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `list_jobs`
+
+**List managed jobs**
+
+List recent detached managed jobs and their lifecycle status without returning step output.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "limit": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 50,
+      "default": 20
+    }
+  },
+  "additionalProperties": false
+}
+```
+
+## `read_job`
+
+**Read managed job**
+
+Return one managed job status plus bounded, resource-redacted step results. Registered resource paths and contents are never returned.
+
+| Contract field | Value |
+|---|---|
+| Availability | `always` |
+| Read-only hint | yes |
+| Destructive hint | no |
+| Idempotent hint | yes |
+| Open-world hint | no |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "job_id": {
+      "type": "string",
+      "pattern": "^job_[A-Za-z0-9_-]{24,}$"
+    }
+  },
+  "required": [
+    "job_id"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `cancel_job`
+
+**Cancel managed job**
+
+Request cancellation of a detached managed job. The runner terminates the active process tree and still attempts declared finally steps and local resource cleanup.
+
+| Contract field | Value |
+|---|---|
+| Availability | `write` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | yes |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "job_id": {
+      "type": "string",
+      "pattern": "^job_[A-Za-z0-9_-]{24,}$"
+    }
+  },
+  "required": [
+    "job_id"
+  ],
+  "additionalProperties": false
+}
+```
+
+## `exec_command`
+
+**Execute shell command**
+
+Execute a shell command with workspace cwd. This is not a sandbox and has the operating-system authority of the local user.
+
+| Contract field | Value |
+|---|---|
+| Availability | `shell-exec` |
+| Read-only hint | no |
+| Destructive hint | yes |
+| Idempotent hint | no |
+| Open-world hint | yes |
+
+### Input schema
+
+```json
+{
+  "type": "object",
+  "properties": {
+    "command": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 65536
+    },
+    "timeout_seconds": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 600,
+      "default": 120
+    }
+  },
+  "required": [
+    "command"
+  ],
+  "additionalProperties": false
+}
+```
+
+## Change discipline
+
+A catalog change must update its runtime handler and protocol tests in the same pull request. CI verifies catalog uniqueness, local/Worker use of the shared catalog, handler parity, generated policy documentation, and this generated reference.