nexus-agents 2.100.1 → 2.101.0

package/dist/{chunk-JFFI54DW.js → chunk-KAJPY6YZ.js}

@@ -11,7 +11,7 @@ import {
   getErrorMessage,
   getTimeProvider,
   ok
-} from "./chunk-M774MKHE.js";
+} from "./chunk-KLYBJUTK.js";
 import {
   getNexusDataDir
 } from "./chunk-CH7QIDHQ.js";
@@ -1751,359 +1751,608 @@ function toSdkCallbackWithBudgetCheck(handler, toolName, configuredTimeoutMs, lo
   };
 }
 
-// src/mcp/tool-annotations.ts
+// src/mcp/tools/tool-annotations.ts
 var TOOL_ANNOTATIONS = {
-  // ============================================================================
-  // Orchestration & expert lifecycle
-  // ============================================================================
-  /** Orchestrator coordinates expert agents; spawns workers that may mutate state. */
+  delegate_to_model: {
+    annotations: {
+      title: "Delegate to Model",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [{ category: "implicit", description: "Consumes rate limit quota" }]
+  },
   orchestrate: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true
+    annotations: {
+      title: "Orchestrate Task",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    sideEffects: [
+      { category: "explicit", description: "Creates and executes expert agents" },
+      { category: "implicit", description: "Consumes API tokens from configured provider" },
+      { category: "coupling", description: "May trigger rate limiting on model adapter" },
+      { category: "coupling", description: "Records task outcome in OutcomeFeedbackCollector" }
+    ]
   },
-  /** Creates an expert and adds it to the in-memory expert registry. */
   create_expert: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: false
+    annotations: {
+      title: "Create Expert",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false
+    },
+    sideEffects: [
+      { category: "explicit", description: "Creates expert agent in shared registry" },
+      { category: "coupling", description: "Expert ID required by execute_expert" }
+    ]
   },
-  /** Executes a previously created expert; invokes external CLIs. */
   execute_expert: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true
+    annotations: {
+      title: "Execute Expert",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    sideEffects: [
+      { category: "explicit", description: "Executes expert agent task via model adapter" },
+      { category: "implicit", description: "Consumes API tokens from configured provider" },
+      { category: "coupling", description: "Requires expert created by create_expert" },
+      { category: "coupling", description: "May trigger rate limiting on model adapter" }
+    ]
   },
-  // ============================================================================
-  // Workflow / pipeline execution
-  // ============================================================================
-  /** Runs a workflow template; steps may write to the registry or filesystem. */
   run_workflow: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true
-  },
-  /** Runs a graph-based workflow with checkpointing. */
-  run_graph_workflow: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true
-  },
-  /** Runs a pipeline plugin by name. */
-  run_pipeline: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true
-  },
-  /** Full dev pipeline: research → plan → vote → implement → QA. */
-  run_dev_pipeline: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true
-  },
-  /** Executes an AI-software-factory spec pipeline. */
-  execute_spec: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true
-  },
-  // ============================================================================
-  // Voting / decision
-  // ============================================================================
-  /** Records vote outcomes to the audit log; doesn't write to repo state. */
-  consensus_vote: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true
-  },
-  /** Per-axis tradeoff vote; records outcome to the store. */
-  supply_chain_tradeoff_panel: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true
-  },
-  /** Multi-voter PR review; may write review comments. */
-  pr_review: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true
-  },
-  // ============================================================================
-  // Routing & introspection (read-only)
-  // ============================================================================
-  /** Returns a routing recommendation; doesn't execute. */
-  delegate_to_model: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "Run Workflow",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    sideEffects: [
+      { category: "explicit", description: "Executes multi-step workflow template" },
+      { category: "implicit", description: "Consumes API tokens if workflow uses model adapter" },
+      { category: "coupling", description: "May trigger rate limiting on model adapter" }
+    ]
   },
-  /** Lists registered expert types. */
   list_experts: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "List Experts",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [{ category: "implicit", description: "Consumes rate limit quota" }]
   },
-  /** Lists registered workflow templates. */
   list_workflows: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
-  },
-  // ============================================================================
-  // Research registry — reads
-  // ============================================================================
-  /** Queries the research registry. */
-  research_query: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
-  },
-  /** Analyzes registry for gaps, trends, coverage. */
-  research_analyze: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "List Workflows",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [{ category: "implicit", description: "Consumes rate limit quota" }]
   },
-  /** Synthesizes registry into topic clusters. */
-  research_synthesize: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+  consensus_vote: {
+    annotations: {
+      title: "Consensus Vote",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    sideEffects: [
+      { category: "explicit", description: "Executes multi-agent voting across CLIs" },
+      { category: "implicit", description: "Consumes API tokens from multiple providers" },
+      { category: "coupling", description: "Records vote outcomes for weather report" }
+    ]
   },
-  /** Discovers research items via external APIs; doesn't mutate registry. */
-  research_discover: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: true
+  research_query: {
+    annotations: {
+      title: "Research Query",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [{ category: "implicit", description: "Consumes rate limit quota" }]
   },
-  // ============================================================================
-  // Research registry — mutations
-  // ============================================================================
-  /** Adds an arXiv paper to the registry. Dedup-checked but first call has effects. */
   research_add: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true
-  },
-  /** Adds a non-paper source to the registry. */
-  research_add_source: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true
+    annotations: {
+      title: "Research Add",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    sideEffects: [
+      { category: "explicit", description: "Adds paper to research registry on disk" },
+      { category: "implicit", description: "Fetches metadata from arXiv API" }
+    ]
   },
-  /** Reviews auto-cataloged research references; may approve/dismiss. */
-  research_catalog_review: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: false
+  research_discover: {
+    annotations: {
+      title: "Research Discover",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    sideEffects: [
+      { category: "implicit", description: "Queries external APIs (arXiv, GitHub, etc.)" },
+      { category: "coupling", description: "Auto-catalogs discovered references" }
+    ]
   },
-  // ============================================================================
-  // Transient lookups (no registry persistence)
-  // ============================================================================
-  /** Transient OSS search via GitHub API; no persistence. */
   survey_oss_landscape: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: true
+    annotations: {
+      title: "Survey OSS Landscape",
+      readOnlyHint: true,
+      destructiveHint: false,
+      // Same query may return different results day-to-day as star counts
+      // and last-commit dates evolve; idempotentHint=false matches reality.
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    sideEffects: [{ category: "implicit", description: "Queries the GitHub search API" }]
   },
-  /** Static lookup against curated vendor seed data. */
   vendor_publishing_audit: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "Vendor Publishing Audit",
+      readOnlyHint: true,
+      destructiveHint: false,
+      // Pure static lookup against the in-process seed dataset.
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [{ category: "implicit", description: "Consumes rate limit quota" }]
   },
-  /** Diffs two YAML/JSON files; local-only. */
   compare_data_feeds: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "Compare Data Feeds",
+      readOnlyHint: true,
+      destructiveHint: false,
+      // Same input → same output; pure file diff with no external calls.
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [{ category: "implicit", description: "Reads two files from the workspace" }]
+  },
+  research_analyze: {
+    annotations: {
+      title: "Research Analyze",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [{ category: "implicit", description: "Consumes rate limit quota" }]
+  },
+  research_catalog_review: {
+    annotations: {
+      title: "Research Catalog Review",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false
+    },
+    sideEffects: [
+      { category: "explicit", description: "Approves or dismisses cataloged references" },
+      { category: "coupling", description: "Approved items added to research registry" }
+    ]
   },
-  // ============================================================================
-  // Memory
-  // ============================================================================
-  /** Reads from memory backends. */
   memory_query: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "Memory Query",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false
+    },
+    sideEffects: [
+      { category: "implicit", description: "Consumes rate limit quota" },
+      { category: "implicit", description: "May trigger reflective retrieval (MemR3)" }
+    ]
   },
-  /** Returns memory statistics. */
   memory_stats: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "Memory Stats",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [{ category: "implicit", description: "Consumes rate limit quota" }]
   },
-  /** Writes to a memory backend. */
   memory_write: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: false
+    annotations: {
+      title: "Memory Write",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false
+    },
+    sideEffects: [
+      { category: "explicit", description: "Writes data to memory backend" },
+      { category: "implicit", description: "Consumes rate limit quota" }
+    ]
   },
-  // ============================================================================
-  // Observability
-  // ============================================================================
-  /** Multi-CLI performance weather report; reads outcome store. */
   weather_report: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "Weather Report",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false
+    },
+    sideEffects: [{ category: "implicit", description: "Consumes rate limit quota" }]
+  },
+  improvement_review: {
+    annotations: {
+      title: "Improvement Review",
+      readOnlyHint: false,
+      destructiveHint: false,
+      // When fileIssues=true, creates GitHub issues — not idempotent.
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    sideEffects: [
+      { category: "implicit", description: "Reads OutcomeStore and runs fitness audit" },
+      {
+        category: "explicit",
+        description: "When fileIssues=true, files candidate GitHub issues via gh CLI"
+      },
+      { category: "implicit", description: "Consumes rate limit quota" }
+    ]
+  },
+  run_quality_gate: {
+    annotations: {
+      title: "Run Quality Gate",
+      // Spawns build/test toolchains which can write artifacts — not read-only.
+      readOnlyHint: false,
+      destructiveHint: false,
+      // Same checks against the same code yield the same verdict.
+      idempotentHint: true,
+      // build/test/security invoke local toolchains and may reach the network.
+      openWorldHint: true
+    },
+    sideEffects: [
+      {
+        category: "implicit",
+        description: "Spawns local toolchain processes (tsc/eslint/vitest/build) in the target project dir"
+      },
+      {
+        category: "implicit",
+        description: "build/test checks may write build artifacts and coverage output to disk"
+      }
+    ]
+  },
+  issue_triage: {
+    annotations: {
+      title: "Issue Triage",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    sideEffects: [
+      { category: "implicit", description: "Fetches issue data from GitHub API" },
+      { category: "implicit", description: "Consumes rate limit quota" }
+    ]
+  },
+  run_graph_workflow: {
+    annotations: {
+      title: "Run Graph Workflow",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    sideEffects: [
+      { category: "explicit", description: "Executes graph-based workflow with checkpointing" },
+      { category: "implicit", description: "Writes checkpoint files to disk" },
+      { category: "coupling", description: "May trigger rate limiting on model adapters" }
+    ]
+  },
+  execute_spec: {
+    annotations: {
+      title: "Execute Spec",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    sideEffects: [
+      { category: "explicit", description: "Parses and executes markdown specification" },
+      { category: "implicit", description: "Consumes API tokens from configured provider" },
+      { category: "implicit", description: "Writes execution trace to disk" }
+    ]
+  },
+  registry_import: {
+    annotations: {
+      title: "Registry Import",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [{ category: "explicit", description: "Generates draft model registry entry" }]
   },
-  /** Queries execution traces from disk. */
   query_trace: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "Query Trace",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [
+      { category: "implicit", description: "Reads execution trace JSONL files from disk" }
+    ]
+  },
+  repo_analyze: {
+    annotations: {
+      title: "Repo Analyze",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    sideEffects: [
+      {
+        category: "implicit",
+        description: "Fetches repository metadata from GitHub API via gh CLI"
+      },
+      { category: "implicit", description: "Consumes rate limit quota" }
+    ]
+  },
+  repo_security_plan: {
+    annotations: {
+      title: "Repo Security Plan",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    sideEffects: [
+      {
+        category: "implicit",
+        description: "Fetches repository metadata from GitHub API via gh CLI"
+      },
+      { category: "implicit", description: "Consumes rate limit quota" }
+    ]
+  },
+  research_add_source: {
+    annotations: {
+      title: "Research Add Source",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    sideEffects: [
+      { category: "explicit", description: "Adds a non-paper source to the research registry" },
+      { category: "coupling", description: "New entries affect research_discover/research_query" }
+    ]
+  },
+  research_synthesize: {
+    annotations: {
+      title: "Research Synthesize",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [{ category: "implicit", description: "Reads research catalog + alignment map" }]
   },
-  /** Queries structured task-state log. */
   query_task_state: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "Query Task State",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [
+      { category: "implicit", description: "Reads the structured task-state log (#2278)" }
+    ]
   },
-  /** Reads job-result sidecar file for an async-mode dispatch (#3042 / #2631). */
   get_job_result: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "Get Job Result",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [
+      {
+        category: "implicit",
+        description: "Reads the async-mode job-result sidecar (#3042 / epic #2631)"
+      }
+    ]
   },
-  /** Lists async-mode job summaries from the sidecar dir (#3046 / #2631 Stage 5). */
   list_jobs: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "List Jobs",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [
+      {
+        category: "implicit",
+        description: "Lists async-mode job summaries from the sidecar dir (#3046 / epic #2631 Stage 5)"
+      }
+    ]
   },
-  /** Cancels an in-flight async-mode job (#3042 Stage 1b / #2631). */
   cancel_job: {
-    // Mutates the sidecar record — NOT read-only.
-    readOnlyHint: false,
-    // Reversibility: cancel writes a new state, but doesn't delete data —
-    // not destructive in the OWASP sense (no irreversible data loss).
-    destructiveHint: false,
-    // Idempotent: repeat cancels are no-ops with explicit outcome envelope.
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "Cancel Job",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [
+      {
+        category: "explicit",
+        description: "Writes cancellation record to the async-mode sidecar (#3042 Stage 1b)"
+      },
+      {
+        category: "coupling",
+        description: "Triggers AbortSignal unwind in same-process dispatcher (cross-process workers must poll)"
+      }
+    ]
   },
-  /** Verifies hash chain of audit log files. */
   verify_audit_chain: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "Verify Audit Chain",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [
+      {
+        category: "implicit",
+        description: "Reads the immutable audit log and verifies the hash chain"
+      }
+    ]
   },
-  /** CI infrastructure health check — composes status-page + recent-runs signals (#3076). */
   ci_health_check: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    // Hits external services (githubstatus.com + GitHub API) — `openWorldHint`.
-    openWorldHint: true
-  },
-  /** Threshold-gated observability loop; may file GitHub issues when fileIssues=true. */
-  improvement_review: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true
-  },
-  /** Runs the QA quality gate (typecheck/lint/tests/build/security) over a project dir (#3356). */
-  run_quality_gate: {
-    // Spawns build/test toolchains which can write artifacts — not read-only.
-    readOnlyHint: false,
-    destructiveHint: false,
-    // Re-running the same checks against the same code yields the same verdict.
-    idempotentHint: true,
-    // `security` check can hit OSV; build/test invoke local toolchains — treat as open-world.
-    openWorldHint: true
-  },
-  // ============================================================================
-  // Repository analysis
-  // ============================================================================
-  /** Analyzes a GitHub repository structure; doesn't write. */
-  repo_analyze: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: true
-  },
-  /** Generates a security-scanning pipeline plan; returns plan, doesn't write it. */
-  repo_security_plan: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: true
+    annotations: {
+      title: "CI Health Check",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      // Outbound network to githubstatus.com + GitHub API.
+      openWorldHint: true
+    },
+    sideEffects: [
+      {
+        category: "implicit",
+        description: "Fetches GitHub status-page + repo actions/runs to assess CI infrastructure health (#3076)"
+      }
+    ]
   },
-  /** Extracts code symbols from source files. */
   extract_symbols: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "Extract Symbols",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [{ category: "implicit", description: "Reads source files and walks their ASTs" }]
   },
-  /** Searches codebase for patterns or symbols. */
   search_codebase: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false
+    annotations: {
+      title: "Search Codebase",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    sideEffects: [
+      {
+        category: "implicit",
+        description: "Reads source files and builds an in-memory symbol index"
+      }
+    ]
   },
-  // ============================================================================
-  // Issue triage & registry imports
-  // ============================================================================
-  /** Triages a GitHub issue; may write labels/comments when authorized. */
-  issue_triage: {
-    readOnlyHint: false,
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true
+  run_dev_pipeline: {
+    annotations: {
+      title: "Run Dev Pipeline",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    sideEffects: [
+      {
+        category: "explicit",
+        description: "Executes the V2 dev pipeline (delegates to CLI adapters)"
+      },
+      {
+        category: "implicit",
+        description: "Consumes API tokens; persists outcomes and checkpoints"
+      },
+      {
+        category: "coupling",
+        description: "Writes routing/learning state consumed by future runs"
+      }
+    ]
   },
-  /** Generates a draft model-registry entry; doesn't write. */
-  registry_import: {
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: true
+  run_pipeline: {
+    annotations: {
+      title: "Run Pipeline",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    sideEffects: [
+      { category: "explicit", description: "Executes a generic V2 pipeline TaskContract" },
+      { category: "implicit", description: "Consumes API tokens; emits pipeline events" },
+      { category: "coupling", description: "Writes policy/audit state consumed by other tools" }
+    ]
+  },
+  pr_review: {
+    annotations: {
+      title: "PR Review",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    sideEffects: [
+      {
+        category: "explicit",
+        description: "Runs multi-voter PR review with verification gate (#2233)"
+      },
+      { category: "implicit", description: "Consumes API tokens across voter CLIs" },
+      { category: "coupling", description: "Records voter outcomes for weather report" }
+    ]
+  },
+  supply_chain_tradeoff_panel: {
+    annotations: {
+      title: "Supply-chain Tradeoff Panel",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    sideEffects: [
+      {
+        category: "explicit",
+        description: "Runs per-axis tradeoff vote (build_time_determinism / supply_chain_risk / update_cadence) (#2294)"
+      },
+      { category: "implicit", description: "Consumes API tokens across voter CLIs" },
+      { category: "coupling", description: "Records voter outcomes for weather report" }
+    ]
   }
 };
+function getMcpAnnotations(toolName) {
+  return TOOL_ANNOTATIONS[toolName]?.annotations;
+}
+
+// src/mcp/tool-annotations.ts
 function getToolAnnotations(name) {
-  const a = TOOL_ANNOTATIONS[name];
-  if (a === void 0) {
+  const entry = TOOL_ANNOTATIONS[name];
+  if (entry === void 0) {
     throw new Error(
-      `getToolAnnotations: no entry for tool "${name}". Add it to TOOL_ANNOTATIONS in src/mcp/tool-annotations.ts (#2648).`
+      `getToolAnnotations: no entry for tool "${name}". Add it to TOOL_ANNOTATIONS in src/mcp/tools/tool-annotations.ts (#2648/#3358).`
     );
   }
-  return a;
+  return entry.annotations;
 }
 
 export {
@@ -2138,6 +2387,7 @@ export {
   wrapToolWithTimeout,
   toSdkCallback,
   toSdkCallbackWithBudgetCheck,
+  getMcpAnnotations,
   getToolAnnotations
 };
-//# sourceMappingURL=chunk-JFFI54DW.js.map
+//# sourceMappingURL=chunk-KAJPY6YZ.js.map