node-autotask 0.26.0 → 0.28.0

package/MCP_TOOL_CATALOG.json

@@ -1,7 +1,7 @@
 {
   "generatedBy": "scripts/build-tool-catalog.mjs",
-  "generatedAt": "2026-10-25T12:41:37.683Z",
-  "planHash": "930b907e3b06a5ff3b72fd312854a14e5acedaf03effee5ced3c960b1afbf086",
+  "generatedAt": "2026-10-26T07:54:08.995Z",
+  "planHash": "ebbd6f31ae865f058a45d3bc0735b4e3a849217a920df510b541ea5c3d7519ce",
   "metaTools": [
     {
       "name": "autotask_catalog",
@@ -43,7 +43,7 @@
     {
       "name": "autotask_read",
       "title": "Read One Registry Operation (read mode)",
-      "description": "Route an effect=read registry operation by its exact name (never fuzzy, never a tool name): the 366 field/entity/UDF-info reads (getEntityInfo/getFieldInfo/getUdfInfo) have no dedicated tool and ride this one, and any read op is routable. For field discovery use operations.fieldCatalog (compact) instead of per-resource getFieldInfo (full dump). Read-only by construction — every op it can route is effect=read (zero mutating requests), and a write or delete op is refused BEFORE any request (cross-mode refusal; the message names the correct tool). Reads have no dry run (a read with dry_run: true is refused). Harness approval policy: approve every tool with readOnlyHint !== true (exactly 256 today); the 608 readOnlyHint: true tools — including this one — are safe ungated; the 57 destructiveHint: true tools (56 dedicated delete tools + autotask_delete) require confirm === the operation key. Migration: autotask_invoke is REPLACED by autotask_read/autotask_write/autotask_delete — update harness config. For query/count ops args[0] is a params object (filter/limit); call autotask_describe first for the exact arg shape and filter grammar. The argument set is CLOSED at the top level: an unknown argument is refused before any request, with a typed error naming the key and the valid keys.",
+      "description": "Route an effect=read registry operation by its exact name (never fuzzy, never a tool name): the 384 field/entity/UDF-info reads (getEntityInfo/getFieldInfo/getUdfInfo) have no dedicated tool and ride this one, and any read op is routable. For field discovery use operations.fieldCatalog (compact) instead of per-resource getFieldInfo (full dump). Read-only by construction — every op it can route is effect=read (zero mutating requests), and a write or delete op is refused BEFORE any request (cross-mode refusal; the message names the correct tool). Reads have no dry run (a read with dry_run: true is refused). Harness approval policy: approve every tool with readOnlyHint !== true (exactly 267 today); the 631 readOnlyHint: true tools — including this one — are safe ungated; the 57 destructiveHint: true tools (56 dedicated delete tools + autotask_delete) require confirm === the operation key. Migration: autotask_invoke is REPLACED by autotask_read/autotask_write/autotask_delete — update harness config. For query/count ops args[0] is a params object (filter/limit); call autotask_describe first for the exact arg shape and filter grammar. The argument set is CLOSED at the top level: an unknown argument is refused before any request, with a typed error naming the key and the valid keys.",
       "input": {
         "operation": {
           "type": "string",
@@ -63,7 +63,7 @@
     {
       "name": "autotask_write",
       "title": "Write One Registry Operation (write mode)",
-      "description": "Route an effect=write registry operation by its exact name (never fuzzy, never a tool name), dry-run-first: the first call always travels dry_run: true (the pinned DryRunResult envelope, simulated: true — the mutating request is never issued); pass dry_run: false to apply. A read or delete op is refused BEFORE any request (cross-mode refusal; the message names the correct tool). The 3 approval-gated writes (configuration_items.moveConfigurationItem, contacts.moveToCompany, resources.transferOwnership) additionally require confirm === the operation key, in BOTH dry-run and apply mode. Harness approval policy: this tool is one of the 256 tools that require approval (readOnlyHint !== true); the 608 readOnlyHint: true tools are safe ungated, and the 57 destructiveHint: true tools (56 dedicated delete tools + autotask_delete) require confirm === the operation key. Migration: autotask_invoke is REPLACED by autotask_read/autotask_write/autotask_delete — update harness config. For query/count ops args[0] is a params object (filter/limit); call autotask_describe first for the exact arg shape and filter grammar. The argument set is CLOSED at the top level: an unknown argument is refused before any request, with a typed error naming the key and the valid keys.",
+      "description": "Route an effect=write registry operation by its exact name (never fuzzy, never a tool name), dry-run-first: the first call always travels dry_run: true (the pinned DryRunResult envelope, simulated: true — the mutating request is never issued); pass dry_run: false to apply. A read or delete op is refused BEFORE any request (cross-mode refusal; the message names the correct tool). The 3 approval-gated writes (configuration_items.moveConfigurationItem, contacts.moveToCompany, resources.transferOwnership) additionally require confirm === the operation key, in BOTH dry-run and apply mode. Harness approval policy: this tool is one of the 267 tools that require approval (readOnlyHint !== true); the 631 readOnlyHint: true tools are safe ungated, and the 57 destructiveHint: true tools (56 dedicated delete tools + autotask_delete) require confirm === the operation key. Migration: autotask_invoke is REPLACED by autotask_read/autotask_write/autotask_delete — update harness config. For query/count ops args[0] is a params object (filter/limit); call autotask_describe first for the exact arg shape and filter grammar. The argument set is CLOSED at the top level: an unknown argument is refused before any request, with a typed error naming the key and the valid keys.",
       "input": {
         "operation": {
           "type": "string",
@@ -93,7 +93,7 @@
     {
       "name": "autotask_delete",
       "title": "Delete One Registry Operation (delete mode)",
-      "description": "Route an effect=destructive (delete) registry operation by its exact name (never fuzzy, never a tool name), dry-run-first: the first call always travels dry_run: true (the pinned DryRunResult envelope, simulated: true); pass dry_run: false to apply. confirm === the operation key is REQUIRED for every delete (all 56), in BOTH dry-run and apply mode — the deliberate act is the call, not the delete. A read or write op is refused BEFORE any request (cross-mode refusal; the message names the correct tool). Harness approval policy: this tool is one of the 57 destructiveHint: true tools that require approval + confirm; approve every tool with readOnlyHint !== true (exactly 256 today); the 608 readOnlyHint: true tools are safe ungated. Migration: autotask_invoke is REPLACED by autotask_read/autotask_write/autotask_delete — update harness config. The argument set is CLOSED at the top level: an unknown argument is refused before any request, with a typed error naming the key and the valid keys.",
+      "description": "Route an effect=destructive (delete) registry operation by its exact name (never fuzzy, never a tool name), dry-run-first: the first call always travels dry_run: true (the pinned DryRunResult envelope, simulated: true); pass dry_run: false to apply. confirm === the operation key is REQUIRED for every delete (all 56), in BOTH dry-run and apply mode — the deliberate act is the call, not the delete. A read or write op is refused BEFORE any request (cross-mode refusal; the message names the correct tool). Harness approval policy: this tool is one of the 57 destructiveHint: true tools that require approval + confirm; approve every tool with readOnlyHint !== true (exactly 267 today); the 631 readOnlyHint: true tools are safe ungated. Migration: autotask_invoke is REPLACED by autotask_read/autotask_write/autotask_delete — update harness config. The argument set is CLOSED at the top level: an unknown argument is refused before any request, with a typed error naming the key and the valid keys.",
       "input": {
         "operation": {
           "type": "string",
@@ -557,6 +557,78 @@
       "reachReason": null,
       "boundedAlternative": null
     },
+    {
+      "operation": "billing_item_approval_levels.count",
+      "core": false,
+      "tool": "autotask_billingItemApprovalLevel_count",
+      "purpose": "Count billing item approval level records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "billing_item_approval_levels.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "billing_item_approval_levels.create",
+      "core": false,
+      "tool": "autotask_billingItemApprovalLevel_create",
+      "purpose": "Create a billing item approval level (the REST-only approval write for a time entry).",
+      "preferredWhen": "Prefer time_entries.approve: it performs this create AND the documented follow-up update, then verifies the read-back. Use this raw create only when the follow-up update must be controlled separately.",
+      "backingOperation": "billing_item_approval_levels.create",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "data"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "billing_item_approval_levels.get",
+      "core": false,
+      "tool": "autotask_billingItemApprovalLevel_get",
+      "purpose": "Get one billing item approval level by id.",
+      "preferredWhen": "Preferred when the numeric id is known (e.g. the id time_entries.approve returned); query by timeEntryID when it is not.",
+      "backingOperation": "billing_item_approval_levels.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "billing_item_approval_levels.query",
+      "core": false,
+      "tool": "autotask_billingItemApprovalLevel_query",
+      "purpose": "Query BillingItemApprovalLevel records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "billing_item_approval_levels.query",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
     {
       "operation": "billing_items.count",
       "core": false,
@@ -4947,6 +5019,110 @@
       "reachReason": null,
       "boundedAlternative": null
     },
+    {
+      "operation": "invoice_templates.count",
+      "core": false,
+      "tool": "autotask_invoiceTemplate_count",
+      "purpose": "Count invoice template records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "invoice_templates.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "invoice_templates.get",
+      "core": false,
+      "tool": "autotask_invoiceTemplate_get",
+      "purpose": "Get one InvoiceTemplate by id.",
+      "preferredWhen": "Preferred when the numeric id is already known.",
+      "backingOperation": "invoice_templates.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "invoice_templates.getEntityInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the InvoiceTemplate capability metadata (canCreate/canUpdate/hasUserDefinedFields/...).",
+      "preferredWhen": null,
+      "backingOperation": "invoice_templates.getEntityInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "invoice_templates.getFieldInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the InvoiceTemplate field catalog (types, picklists, required, maxLength) — the full raw field dump (the largest read of the info trio; compact discovery: operations.fieldCatalog).",
+      "preferredWhen": null,
+      "backingOperation": "invoice_templates.getFieldInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "invoice_templates.getUdfInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the InvoiceTemplate user-defined-field catalog.",
+      "preferredWhen": null,
+      "backingOperation": "invoice_templates.getUdfInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "invoice_templates.query",
+      "core": false,
+      "tool": "autotask_invoiceTemplate_query",
+      "purpose": "Query InvoiceTemplate records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "invoice_templates.query",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
     {
       "operation": "modules.get",
       "core": false,
@@ -5230,12 +5406,441 @@
       "boundedAlternative": null
     },
     {
-      "operation": "opportunity_categories.update",
+      "operation": "opportunity_categories.update",
+      "core": false,
+      "tool": "autotask_opportunityCategories_update",
+      "purpose": "Update an opportunity category.",
+      "preferredWhen": "Preferred over create or delete when the record exists and only some fields change.",
+      "backingOperation": "opportunity_categories.update",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "id",
+        "data"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.count",
+      "core": false,
+      "tool": "autotask_organizationalLevelAssociation_count",
+      "purpose": "Count organizational level association records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level_associations.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.create",
+      "core": false,
+      "tool": "autotask_organizationalLevelAssociation_create",
+      "purpose": "Create an organizational level association.",
+      "preferredWhen": "Only for a record that does not exist yet; prefer update for an id you already have.",
+      "backingOperation": "organizational_level_associations.create",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "data"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.get",
+      "core": false,
+      "tool": "autotask_organizationalLevelAssociation_get",
+      "purpose": "Get one OrganizationalLevelAssociation by id.",
+      "preferredWhen": "Preferred when the numeric id is already known.",
+      "backingOperation": "organizational_level_associations.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.getEntityInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevelAssociation capability metadata (canCreate/canUpdate/hasUserDefinedFields/...).",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level_associations.getEntityInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.getFieldInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevelAssociation field catalog (types, picklists, required, maxLength) — the full raw field dump (the largest read of the info trio; compact discovery: operations.fieldCatalog).",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level_associations.getFieldInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.getUdfInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevelAssociation user-defined-field catalog.",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level_associations.getUdfInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.query",
+      "core": false,
+      "tool": "autotask_organizationalLevelAssociation_query",
+      "purpose": "Query OrganizationalLevelAssociation records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "organizational_level_associations.query",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.update",
+      "core": false,
+      "tool": "autotask_organizationalLevelAssociation_update",
+      "purpose": "Update an organizational level association.",
+      "preferredWhen": "Preferred over create or delete when the record exists and only some fields change.",
+      "backingOperation": "organizational_level_associations.update",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "id",
+        "data"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.count",
+      "core": false,
+      "tool": "autotask_organizationalLevel1_count",
+      "purpose": "Count organizational level 1 records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level1s.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.create",
+      "core": false,
+      "tool": "autotask_organizationalLevel1_create",
+      "purpose": "Create an organizational level 1.",
+      "preferredWhen": "Only for a record that does not exist yet; prefer update for an id you already have.",
+      "backingOperation": "organizational_level1s.create",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "data"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.get",
+      "core": false,
+      "tool": "autotask_organizationalLevel1_get",
+      "purpose": "Get one OrganizationalLevel1 by id.",
+      "preferredWhen": "Preferred when the numeric id is already known.",
+      "backingOperation": "organizational_level1s.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.getEntityInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevel1 capability metadata (canCreate/canUpdate/hasUserDefinedFields/...).",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level1s.getEntityInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.getFieldInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevel1 field catalog (types, picklists, required, maxLength) — the full raw field dump (the largest read of the info trio; compact discovery: operations.fieldCatalog).",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level1s.getFieldInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.getUdfInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevel1 user-defined-field catalog.",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level1s.getUdfInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.query",
+      "core": false,
+      "tool": "autotask_organizationalLevel1_query",
+      "purpose": "Query OrganizationalLevel1 records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "organizational_level1s.query",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.update",
+      "core": false,
+      "tool": "autotask_organizationalLevel1_update",
+      "purpose": "Update an organizational level 1.",
+      "preferredWhen": "Preferred over create or delete when the record exists and only some fields change.",
+      "backingOperation": "organizational_level1s.update",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "id",
+        "data"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level2s.count",
+      "core": false,
+      "tool": "autotask_organizationalLevel2_count",
+      "purpose": "Count organizational level 2 records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level2s.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level2s.create",
+      "core": false,
+      "tool": "autotask_organizationalLevel2_create",
+      "purpose": "Create an organizational level 2.",
+      "preferredWhen": "Only for a record that does not exist yet; prefer update for an id you already have.",
+      "backingOperation": "organizational_level2s.create",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "data"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level2s.get",
+      "core": false,
+      "tool": "autotask_organizationalLevel2_get",
+      "purpose": "Get one OrganizationalLevel2 by id.",
+      "preferredWhen": "Preferred when the numeric id is already known.",
+      "backingOperation": "organizational_level2s.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level2s.getEntityInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevel2 capability metadata (canCreate/canUpdate/hasUserDefinedFields/...).",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level2s.getEntityInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level2s.getFieldInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevel2 field catalog (types, picklists, required, maxLength) — the full raw field dump (the largest read of the info trio; compact discovery: operations.fieldCatalog).",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level2s.getFieldInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level2s.getUdfInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevel2 user-defined-field catalog.",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level2s.getUdfInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level2s.query",
+      "core": false,
+      "tool": "autotask_organizationalLevel2_query",
+      "purpose": "Query OrganizationalLevel2 records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "organizational_level2s.query",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level2s.update",
       "core": false,
-      "tool": "autotask_opportunityCategories_update",
-      "purpose": "Update an opportunity category.",
+      "tool": "autotask_organizationalLevel2_update",
+      "purpose": "Update an organizational level 2.",
       "preferredWhen": "Preferred over create or delete when the record exists and only some fields change.",
-      "backingOperation": "opportunity_categories.update",
+      "backingOperation": "organizational_level2s.update",
       "effect": "write",
       "dryRunFirst": true,
       "confirm": false,
@@ -5243,7 +5848,7 @@
         "id",
         "data"
       ],
-      "tier": "extended",
+      "tier": "advanced",
       "reachable": true,
       "reach": "dedicated tool",
       "reachReason": null,
@@ -7528,6 +8133,130 @@
       "reachReason": null,
       "boundedAlternative": null
     },
+    {
+      "operation": "sales_orders.count",
+      "core": false,
+      "tool": "autotask_salesOrder_count",
+      "purpose": "Count sales order records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "sales_orders.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "sales_orders.get",
+      "core": false,
+      "tool": "autotask_salesOrder_get",
+      "purpose": "Get one SalesOrder by id.",
+      "preferredWhen": "Preferred when the numeric id is already known.",
+      "backingOperation": "sales_orders.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "sales_orders.getEntityInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the SalesOrder capability metadata (canCreate/canUpdate/hasUserDefinedFields/...).",
+      "preferredWhen": null,
+      "backingOperation": "sales_orders.getEntityInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "sales_orders.getFieldInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the SalesOrder field catalog (types, picklists, required, maxLength) — the full raw field dump (the largest read of the info trio; compact discovery: operations.fieldCatalog).",
+      "preferredWhen": null,
+      "backingOperation": "sales_orders.getFieldInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "sales_orders.getUdfInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the SalesOrder user-defined-field catalog.",
+      "preferredWhen": null,
+      "backingOperation": "sales_orders.getUdfInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "sales_orders.query",
+      "core": false,
+      "tool": "autotask_salesOrder_query",
+      "purpose": "Query SalesOrder records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "sales_orders.query",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "sales_orders.update",
+      "core": false,
+      "tool": "autotask_salesOrder_update",
+      "purpose": "Update a sales order.",
+      "preferredWhen": "Preferred over create or delete when the record exists and only some fields change.",
+      "backingOperation": "sales_orders.update",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "id",
+        "data"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
     {
       "operation": "service_call_task_resources.count",
       "core": false,
@@ -9725,6 +10454,149 @@
       "reachReason": null,
       "boundedAlternative": null
     },
+    {
+      "operation": "tax_regions.count",
+      "core": false,
+      "tool": "autotask_taxRegion_count",
+      "purpose": "Count tax region records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "tax_regions.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "tax_regions.create",
+      "core": false,
+      "tool": "autotask_taxRegion_create",
+      "purpose": "Create a tax region.",
+      "preferredWhen": "Only for a record that does not exist yet; prefer update for an id you already have.",
+      "backingOperation": "tax_regions.create",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "data"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "tax_regions.get",
+      "core": false,
+      "tool": "autotask_taxRegion_get",
+      "purpose": "Get one TaxRegion by id.",
+      "preferredWhen": "Preferred when the numeric id is already known.",
+      "backingOperation": "tax_regions.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "tax_regions.getEntityInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the TaxRegion capability metadata (canCreate/canUpdate/hasUserDefinedFields/...).",
+      "preferredWhen": null,
+      "backingOperation": "tax_regions.getEntityInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "tax_regions.getFieldInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the TaxRegion field catalog (types, picklists, required, maxLength) — the full raw field dump (the largest read of the info trio; compact discovery: operations.fieldCatalog).",
+      "preferredWhen": null,
+      "backingOperation": "tax_regions.getFieldInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "tax_regions.getUdfInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the TaxRegion user-defined-field catalog.",
+      "preferredWhen": null,
+      "backingOperation": "tax_regions.getUdfInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "tax_regions.query",
+      "core": false,
+      "tool": "autotask_taxRegion_query",
+      "purpose": "Query TaxRegion records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "tax_regions.query",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "tax_regions.update",
+      "core": false,
+      "tool": "autotask_taxRegion_update",
+      "purpose": "Update a tax region.",
+      "preferredWhen": "Preferred over create or delete when the record exists and only some fields change.",
+      "backingOperation": "tax_regions.update",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "id",
+        "data"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
     {
       "operation": "threshold_information.get",
       "core": true,
@@ -10535,6 +11407,25 @@
       "reachReason": null,
       "boundedAlternative": null
     },
+    {
+      "operation": "time_entries.approve",
+      "core": false,
+      "tool": "autotask_timeEntry_approve",
+      "purpose": "Approve a time entry (the REST-only approval path): create the BillingItemApprovalLevels record, apply the vendor-documented follow-up update of BillingApprovalDateTime + BillingApprovalResourceID, then read the entry back and report whether the vendor accepted it.",
+      "preferredWhen": "Approving (or adding the next approval level to) a time entry. This is the only approval channel the REST API exposes — there is no TimeEntries/Approve path. When the follow-up update throws, the approval level record HAS been created on the vendor (there is no rollback and no delete): reconcile by re-reading the entry's billingApprovalLevelMostRecent or querying billing_item_approval_levels by timeEntryID.",
+      "backingOperation": "time_entries.approve",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
     {
       "operation": "time_entries.count",
       "core": false,
@@ -22005,6 +22896,25 @@
       "reachReason": null,
       "boundedAlternative": null
     },
+    {
+      "operation": "tickets.forResource",
+      "core": false,
+      "tool": "autotask_ticket_for_resource",
+      "purpose": "List the tickets a resource is assigned to — as primary owner, as a secondary resource, or both — de-duplicated, with the four reconciling counts and an optional open-only filter that uses the tenant's own closed-status set.",
+      "preferredWhen": "Answering 'which tickets is this resource on' (resource workload, handover, load balancing) — a join no vendor endpoint answers. For the entries themselves use time_entries.recentTickets; for one ticket use tickets.getContext/fullContext.",
+      "backingOperation": "tickets.forResource",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "resourceID"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
     {
       "operation": "tickets.fullContext",
       "core": false,
@@ -22206,6 +23116,23 @@
       "reachReason": null,
       "boundedAlternative": null
     },
+    {
+      "operation": "tickets.statusSemantics",
+      "core": false,
+      "tool": "autotask_ticket_status_semantics",
+      "purpose": "Report the ticket status picklist and the ids this SDK treats as CLOSED for the caller's tenant, with the provenance of that set (read from the tenant's picklist, or the documented assumed fallback).",
+      "preferredWhen": "Before filtering or refusing on closed state, or when a caller needs to know which status ids mean closed in THIS tenant. tickets.forResource, companies.fullProfile and the move ops already consume it.",
+      "backingOperation": "tickets.statusSemantics",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
     {
       "operation": "tickets.summary",
       "core": false,
@@ -22506,11 +23433,11 @@
     }
   ],
   "counts": {
-    "registryOperations": 1225,
+    "registryOperations": 1277,
     "coreOperations": 10,
-    "catalogRows": 1225,
-    "withTool": 859,
-    "readModeOnly": 366,
+    "catalogRows": 1277,
+    "withTool": 893,
+    "readModeOnly": 384,
     "neverExposed": 0,
     "metaTools": 5
   }