wyrm-mcp 7.2.0 → 7.2.2

package/dist/tool-annotations.js

@@ -1,365 +1 @@
-/** Per-tool MCP annotations for every advertised tool. */
-export const TOOL_ANNOTATIONS = {
-    // Registers discovered projects + optional watch-dir rows; re-scan converges.
-    wyrm_scan_projects: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_list_projects: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_project_context: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_global_context: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Per-project-per-day session is reused (getTodaySession), but objectives APPEND on every call
-    // and unknown projects are auto-registered; also triggers archiveOldSessions.
-    wyrm_session_start: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // Appends completed/issues/notes to the session row.
-    wyrm_session_update: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // Creates a new quest row per call — no dedup.
-    wyrm_quest_add: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_quest_complete: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_all_quests: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Despite the name, VERIFIED pure read: returns head cursor + recent window; no subscriber row
-    // is created (events.ts subscribeEvents is SELECT-only).
-    wyrm_events_subscribe: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Description itself says idempotent / safe to re-poll.
-    wyrm_events_since: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Appends an event to the stream.
-    wyrm_events_publish: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // Ingests peer events with origin_seq dedup — replication is convergent; re-run safe.
-    wyrm_events_replicate: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // Mixed-action daemon manager: action=stop kills the replication daemon, peer_remove deletes
-    // peers (destructive per partition rule); start/status/tick are benign.
-    wyrm_replication: { readOnlyHint: false, destructiveHint: true, idempotentHint: false },
-    // Writes Wyrm-managed blocks into client config/instruction files; re-run converges on the
-    // managed block.
-    wyrm_embed: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // Authors + deploys skill files + registers; same-name convergence not verified, so not
-    // claimed.
-    wyrm_skill_create: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // Writes review-queue candidates only; description and implementation both claim re-runs skip
-    // already-harvested items.
-    wyrm_harvest: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // Writes needs_review candidates; deduped + idempotent per 6.13 design.
-    wyrm_auto_capture: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // T040: harvests harness traces into run-tagged needs_review candidates;
-    // local extractor only (no cloud LLM); deduped via ax: sig — idempotent.
-    wyrm_capture_trace: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_data_insert: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_data_batch_insert: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_data_query: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_data_categories: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // 'Register or update' — upsert by skill name.
-    wyrm_skill_register: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_skill_list: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_skill_get: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Deletes the skill from the registry; end-state convergent.
-    wyrm_skill_delete: { readOnlyHint: false, destructiveHint: true, idempotentHint: true },
-    wyrm_skill_activate: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // Reversible soft toggle — not destructive.
-    wyrm_skill_deactivate: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_skill_search: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_skill_stats: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_skill_graph: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Creates quests from a spec dir; re-register dedup not verified.
-    wyrm_spec_register: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // Keyed set — converges.
-    wyrm_set_global: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_search: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Imports/exports .wyrm folder files — writes to project dirs; convergent sync.
-    wyrm_sync: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_stats: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Writes embedding config; may download models (network); converges.
-    wyrm_vector_setup: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // Rebuilds derived embedding vectors — regenerable, not destructive.
-    wyrm_reindex: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // Vacuum + archives old sessions (data moved out of active view). Spec FR-3 explicitly assigns
-    // destructiveHint to maintenance.
-    wyrm_maintenance: { readOnlyHint: false, destructiveHint: true, idempotentHint: true },
-    wyrm_usage: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Writes MCP server entries into detected AI-client config files; re-run converges.
-    wyrm_setup: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // VERIFIED: auto-orchestrator classification has no DB writes.
-    wyrm_orchestrate_task: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // TRAP: lives in 6.x READ_ONLY_TOOLS (caching set) but the tool can UPDATE config — proof that
-    // set was curated for caching, not authority.
-    wyrm_orchestration_config: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_orchestration_stats: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_license: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // License activation; same key converges.
-    wyrm_activate: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_analytics_dashboard: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_cost_report: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Device-egress: uploads an encrypted backup to cloud storage; each call may create a new
-    // backup object.
-    wyrm_cloud_backup: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // Mixed-action daemon manager (start|stop|status): stop halts background multi-device sync
-    // (destructive per partition rule); also device-egress.
-    wyrm_cloud_sync: { readOnlyHint: false, destructiveHint: true, idempotentHint: false },
-    wyrm_encrypt_setup: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // Entity creation; name-dedup not verified.
-    wyrm_entity_add: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // Creates a relationship edge; duplicate-edge guard not verified.
-    wyrm_entity_link: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_entity_search: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_entity_graph: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_entity_path: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Genuinely destructive: combines aliases, redirects relationships, DELETES the source entity.
-    wyrm_entity_merge: { readOnlyHint: false, destructiveHint: true, idempotentHint: false },
-    // Creates a new memory artifact per call.
-    wyrm_remember: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // VERIFIED: only write is access-tracking metadata (last_accessed_at, access_count) on returned
-    // artifacts — content-immutable. Its presence in 6.x WRITE_TOOLS is for cache-invalidation
-    // correctness, not authority.
-    wyrm_recall: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Each call increments reuse counters and shifts confidence — accruing by design.
-    wyrm_feedback: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // Read-only assembly; budgeted path may log savings telemetry only.
-    wyrm_context_build: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Keyed supersession: same (category,key) re-set marks old is_current=0 + inserts the new
-    // current row — end state converges; version history accrues.
-    wyrm_truth_set: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_truth_get: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Saves a reasoning scaffold; upsert behavior not verified.
-    wyrm_scaffold_save: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_scaffold_get: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Queues candidate artifacts from a session; re-distill dedup not verified.
-    wyrm_distill: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // VERIFIED: reject executes a hard `DELETE FROM memory_artifacts` — permanent. Approve flips
-    // needs_review=0. Both converge (second reject returns not-found).
-    wyrm_review: { readOnlyHint: false, destructiveHint: true, idempotentHint: true },
-    // Auto-classifies then writes a quest/truth/artifact OR routes to the review queue (low
-    // confidence / truth-category conflict); no dedup.
-    wyrm_capture: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // Read-only by DEFAULT, but log_session:true creates a session row (db.createSession,
-    // index.ts ~5541) — WORST-ACTION RULE (the wyrm_sync_import precedent): annotate the write,
-    // non-idempotent because every log_session call INSERTs another row.
-    wyrm_session_prime: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // Genuinely destructive (removes stale artifacts) but dry-run by DEFAULT — actual deletion
-    // requires dry_run:false + confirm_ids.
-    wyrm_prune: { readOnlyHint: false, destructiveHint: true, idempotentHint: true },
-    // Device-egress: writes an encrypted snapshot file outside the DB.
-    wyrm_sync_export: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // restore_mode:'restore' OVERWRITES the local DB from a snapshot; 'preview' is read-only —
-    // annotate for the worst action.
-    wyrm_sync_import: { readOnlyHint: false, destructiveHint: true, idempotentHint: false },
-    // Writes review-queue candidates from commits; dedup-by-hash not verified.
-    wyrm_import_git: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_import_pr: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // Creates ground truths from rules files; re-import convergence not verified.
-    wyrm_import_rules: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // Opt-in write of a Wyrm-managed block into copilot-instructions/.cursor rules; converges.
-    wyrm_inject_prompt: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // Buddy Protocol peer entry point — read-only context assembly for a calling peer.
-    buddy: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Read-only greeting + project state; federate:true performs network reads of peers.
-    wyrm_buddy: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Keyed design-token upsert.
-    wyrm_token_set: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_token_get: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Deletes a design token (recoverable only by re-setting).
-    wyrm_token_delete: { readOnlyHint: false, destructiveHint: true, idempotentHint: true },
-    wyrm_reference_add: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_reference_list: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_reference_search: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_capabilities: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_intro: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Rewrites the Wyrm-managed block in client instruction files; converges.
-    wyrm_migrate_prompt: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_constellation: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_digest: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Network read of npm registry; only write is its own 24h cache row (telemetry-class).
-    wyrm_check_update: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Replaces the globally installed wyrm-mcp binary (npm install -g) — process/binary mutation;
-    // converges on latest.
-    wyrm_self_update: { readOnlyHint: false, destructiveHint: true, idempotentHint: true },
-    // Identical (scope,target,description) coalesces into one row but occurrences++ on every call —
-    // accrual by design.
-    wyrm_failure_record: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // v7 F2 review fix: the check itself stays a pure read of canonical memory (exact-signature
-    // then FTS-fuzzy match), but every BLOCKED verdict now appends one failure_blocks analytics
-    // row (T017 — the canonical input to wyrm_stats view=failures) beside the pre-existing
-    // best-effort savings telemetry. readOnlyHint stays true under the canonical-memory reading
-    // (the audited telemetry-class exception, asserted in tool-annotations.test.ts);
-    // idempotentHint is now FALSE — repeating a blocked check observably accrues
-    // blocked.total / this_run counts on another tool's surface.
-    wyrm_failure_check: { readOnlyHint: true, destructiveHint: false, idempotentHint: false },
-    wyrm_failure_list: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Keeps history; excludes from future checks — reversible, not destructive.
-    wyrm_failure_resolve: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // Heartbeat upsert — converges per agent_id.
-    wyrm_presence_announce: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_presence_list: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Description says idempotent; removes own presence row + drops own quest claims — designed
-    // clean exit, not destructive.
-    wyrm_presence_release: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // CAS claim — outcome depends on contention; not safely retryable as a no-op.
-    wyrm_quest_claim: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_quest_release: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // Adds a decision edge; duplicate-edge guard not verified.
-    wyrm_decided_because: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_decision_downstream: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_decision_upstream: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Cascade-invalidates every downstream decision (recursive) — the blast-radius tool; re-run
-    // converges.
-    wyrm_decision_invalidate: { readOnlyHint: false, destructiveHint: true, idempotentHint: true },
-    // Rebuilds the derived symbol index — regenerable, not destructive.
-    wyrm_symbol_index: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_symbol_search: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_symbol_callers: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_symbol_stats: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_hours_report: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // VERIFIED: returns invoice markdown in the response — writes no file.
-    wyrm_invoice_generate: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_session_rehydrate: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Appends to the hash chain — every call adds a new entry by design.
-    wyrm_audit_log: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_audit_verify: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // VERIFIED: returns the JSON bundle in the response — writes no file.
-    wyrm_audit_export: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Read-only context assembly + local LLM call; output nondeterministic. DISCLOSED: every call
-    // INSERTs into llm_query_log (query first 1000 chars + answer first 4000 chars,
-    // src/sub-agent.ts ~304) — telemetry-class content-bearing query log per the convention above.
-    wyrm_ask: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Sets is_shared=1 — converges.
-    wyrm_share: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // Revokes team visibility (mission-rule destructive: removes data from team view on next sync);
-    // local row preserved.
-    wyrm_unshare: { readOnlyHint: false, destructiveHint: true, idempotentHint: true },
-    wyrm_sync_conflicts: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // mode:'kept_remote' OVERWRITES the local row with the remote payload — local edit is lost;
-    // resolution converges.
-    wyrm_sync_resolve: { readOnlyHint: false, destructiveHint: true, idempotentHint: true },
-    // Creates a new goal per call.
-    wyrm_goal_set: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_goal_list: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    wyrm_goal_complete: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_goal_pause: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_goal_resume: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // Record kept for audit — reversible-by-policy, not destructive.
-    wyrm_goal_abandon: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_goal_iterations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Runs the OODA loop: LLM decides + executes whitelisted internal tools (read-mostly + bounded
-    // writes) — mutates state, nondeterministic.
-    wyrm_act: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // Starts the wyrm-loop daemon as a detached process; already-running converges.
-    wyrm_agent_init: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_agent_status: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // SIGTERM-then-SIGKILL on the daemon (mission-rule destructive: stop/restart).
-    wyrm_agent_stop: { readOnlyHint: false, destructiveHint: true, idempotentHint: true },
-    // Daemon kill + respawn (mission-rule destructive: stop/restart).
-    wyrm_agent_restart: { readOnlyHint: false, destructiveHint: true, idempotentHint: true },
-    // Registers/updates an outbound MCP server config.
-    wyrm_mcp_register: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_mcp_list: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Spawns the target server one-shot to call tools/list — subprocess + possibly network, but no
-    // local state mutation.
-    wyrm_mcp_tools: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // Config kept in DB — reversible.
-    wyrm_mcp_disable: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // Proxies an arbitrary tool on an external MCP server — effects depend entirely on the target
-    // tool (open-world); result logged locally. Cannot honestly claim read-only or idempotent.
-    wyrm_call_external: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_tool_analytics: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
-    // ── v7 F3 (T022): the frozen-surface noun shims (src/handlers/shims.ts) ──
-    // Each shim is a thin action-discriminated router onto its members' original
-    // dispatcher cases, so its annotation is the WORST-ACTION fold of the member
-    // annotations above: readOnly ⇔ every member readOnly, destructive ⇔ any
-    // member destructive, idempotent ⇔ every member idempotent. Derivation is
-    // LOCKED by tests/tool-annotations.test.ts (computed from SHIM_ROUTES
-    // against this registry), so a member reclassification can never silently
-    // leave a shim's fold stale.
-    wyrm_quest: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_session: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // destructive: action=delete (wyrm_skill_delete)
-    wyrm_skill: { readOnlyHint: false, destructiveHint: true, idempotentHint: false },
-    // destructive: action=merge (wyrm_entity_merge)
-    wyrm_entity: { readOnlyHint: false, destructiveHint: true, idempotentHint: false },
-    // destructive: action=invalidate (wyrm_decision_invalidate cascade)
-    wyrm_decision_trace: { readOnlyHint: false, destructiveHint: true, idempotentHint: true },
-    wyrm_goal: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_presence: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    wyrm_mcp: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // audit_log appends one hash-chained row per call — non-idempotent write.
-    wyrm_audit: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    wyrm_project: { readOnlyHint: false, destructiveHint: false, idempotentHint: true },
-    // destructive: action=delete (wyrm_token_delete)
-    wyrm_design_token: { readOnlyHint: false, destructiveHint: true, idempotentHint: true },
-    wyrm_reference: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-    // ── v7 F3 (T027): the run loop (src/handlers/run.ts) ──
-    // Worst-action: start/join/debrief/end all write (runs, run_agents,
-    // review-queue artifacts, runs.status). NOT destructive: end resolves
-    // failures (additive note, never deletes) and releases quest claims —
-    // ephemeral TTL leases, re-claimable, same class as wyrm_quest_release.
-    // Non-idempotent: start without an explicit run_id mints a fresh ULID
-    // per call; debrief re-queues when its dedup signature misses.
-    wyrm_run: { readOnlyHint: false, destructiveHint: false, idempotentHint: false },
-};
-/**
- * Merge the registry entry into a tool definition for the tools/list
- * response. Pure + additive: unknown tools pass through untouched (the
- * build-time coverage gate, not this function, is what fails on a missing
- * entry — ListTools must never throw).
- */
-export function annotateTool(tool) {
-    const annotations = TOOL_ANNOTATIONS[tool.name];
-    return annotations ? { ...tool, annotations } : tool;
-}
-/** Annotate a whole profile-filtered tool list at ListTools-build time. */
-export function annotateTools(tools) {
-    return tools.map(annotateTool);
-}
-/**
- * FEATHERWEIGHT follow-up (#3, default-scenario ListTools shrink) — elide
- * annotation-hint fields whose value equals the MCP spec default (and thus
- * carries ZERO information to a spec-compliant consumer), at WIRE-BUILD time
- * only. The central TOOL_ANNOTATIONS map stays the full audited source of
- * truth (the coverage gate + tool-annotations.test.ts still see every hint);
- * this trims pure-default bytes off the serialized tools/list result.
- *
- * SPEC DEFAULTS (verbatim from @modelcontextprotocol/sdk ToolAnnotationsSchema
- * — the authoritative wire contract this server speaks):
- *   - readOnlyHint   Default: false
- *   - destructiveHint Default: true   — "meaningful only when readOnlyHint == false"
- *   - idempotentHint  Default: false  — "meaningful only when readOnlyHint == false"
- *   - openWorldHint   Default: true
- *
- * LOSSLESS ELISION RULES (each elided field is exactly recoverable by a
- * spec-compliant consumer reading the documented default; meaningfulness
- * regime is preserved):
- *   - readOnlyHint  : keep iff === true (true ≠ default false). Eliding a
- *     `false` leaves it absent ⇒ consumer reads default false ⇒ SAME value,
- *     AND keeps destructive/idempotent in their meaningful (!readOnly) regime.
- *   - destructiveHint: meaningless when readOnlyHint is true (spec) ⇒ elide.
- *     Otherwise keep iff === false (false ≠ default true); a `true` = default ⇒ elide.
- *   - idempotentHint : meaningless when readOnlyHint is true (spec) ⇒ elide.
- *     Otherwise keep iff === true (true ≠ default false); a `false` = default ⇒ elide.
- *   - openWorldHint  : keep iff === false (false ≠ default true). (Unused today —
- *     F1 left it unassigned — but handled for forward-safety.)
- *   - title          : free-text, never a boolean default ⇒ always preserved.
- *
- * The `annotations` KEY is always kept (an all-default tool serializes as
- * `"annotations":{}`) so the §7 "100% of advertised tools annotated" wire
- * invariant (annotations !== undefined) is untouched — only the redundant
- * per-field bytes are dropped. Pure + non-mutating: fresh objects, no
- * Date/random, deterministic ⇒ byte-stable across calls.
- */
-export function elideDefaultAnnotations(tools) {
-    return tools.map((tool) => {
-        const a = tool.annotations;
-        if (!a)
-            return tool;
-        const out = {};
-        if (a.title !== undefined)
-            out.title = a.title;
-        const readOnly = a.readOnlyHint === true;
-        if (readOnly)
-            out.readOnlyHint = true; // true ≠ default(false) — informative
-        // destructiveHint/idempotentHint are spec-meaningful ONLY when !readOnly.
-        if (!readOnly) {
-            if (a.destructiveHint === false)
-                out.destructiveHint = false; // false ≠ default(true)
-            if (a.idempotentHint === true)
-                out.idempotentHint = true; // true ≠ default(false)
-        }
-        if (a.openWorldHint === false)
-            out.openWorldHint = false; // false ≠ default(true)
-        return { ...tool, annotations: out };
-    });
-}
-//# sourceMappingURL=tool-annotations.js.map
+const s={wyrm_scan_projects:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_list_projects:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_project_context:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_global_context:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_session_start:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_session_update:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_quest_add:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_quest_complete:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_all_quests:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_events_subscribe:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_events_since:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_events_publish:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_events_replicate:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_replication:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1},wyrm_embed:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_skill_create:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_harvest:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_auto_capture:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_capture_trace:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_data_insert:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_data_batch_insert:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_data_query:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_data_categories:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_skill_register:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_skill_list:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_skill_get:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_skill_delete:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0},wyrm_skill_activate:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_skill_deactivate:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_skill_search:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_skill_stats:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_skill_graph:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_spec_register:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_set_global:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_search:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_sync:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_stats:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_vector_setup:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_reindex:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_maintenance:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0},wyrm_usage:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_setup:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_orchestrate_task:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_orchestration_config:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_orchestration_stats:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_license:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_activate:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_analytics_dashboard:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_cost_report:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_cloud_backup:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_cloud_sync:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1},wyrm_encrypt_setup:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_entity_add:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_entity_link:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_entity_search:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_entity_graph:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_entity_path:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_entity_merge:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1},wyrm_remember:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_recall:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_feedback:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_context_build:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_truth_set:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_truth_get:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_scaffold_save:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_scaffold_get:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_distill:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_review:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0},wyrm_capture:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_session_prime:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_prune:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0},wyrm_sync_export:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_sync_import:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1},wyrm_import_git:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_import_pr:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_import_rules:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_inject_prompt:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},buddy:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_buddy:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_token_set:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_token_get:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_token_delete:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0},wyrm_reference_add:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_reference_list:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_reference_search:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_capabilities:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_intro:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_migrate_prompt:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_constellation:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_digest:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_check_update:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_self_update:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0},wyrm_failure_record:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_failure_check:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!1},wyrm_failure_list:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_failure_resolve:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_presence_announce:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_presence_list:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_presence_release:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_quest_claim:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_quest_release:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_decided_because:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_decision_downstream:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_decision_upstream:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_decision_invalidate:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0},wyrm_symbol_index:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_symbol_search:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_symbol_callers:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_symbol_stats:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_hours_report:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_invoice_generate:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_session_rehydrate:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_audit_log:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_audit_verify:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_audit_export:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_ask:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_share:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_unshare:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0},wyrm_sync_conflicts:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_sync_resolve:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0},wyrm_goal_set:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_goal_list:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_goal_complete:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_goal_pause:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_goal_resume:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_goal_abandon:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_goal_iterations:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_act:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_agent_init:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_agent_status:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_agent_stop:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0},wyrm_agent_restart:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0},wyrm_mcp_register:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_mcp_list:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_mcp_tools:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_mcp_disable:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_call_external:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_tool_analytics:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0},wyrm_quest:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_session:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_skill:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1},wyrm_entity:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1},wyrm_decision_trace:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0},wyrm_goal:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_presence:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_mcp:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_audit:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_project:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0},wyrm_design_token:{readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0},wyrm_reference:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1},wyrm_run:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1}};function a(e){const i=s[e.name];return i?{...e,annotations:i}:e}function l(e){return e.map(a)}function d(e){return e.map(i=>{const t=i.annotations;if(!t)return i;const n={};t.title!==void 0&&(n.title=t.title);const r=t.readOnlyHint===!0;return r&&(n.readOnlyHint=!0),r||(t.destructiveHint===!1&&(n.destructiveHint=!1),t.idempotentHint===!0&&(n.idempotentHint=!0)),t.openWorldHint===!1&&(n.openWorldHint=!1),{...i,annotations:n}})}export{s as TOOL_ANNOTATIONS,a as annotateTool,l as annotateTools,d as elideDefaultAnnotations};

package/dist/tool-manifest-v2.json

@@ -1,6 +1,6 @@
 {
   "contract": "wyrm-cloud-memory-v2",
-  "version": "7.2.0",
+  "version": "7.2.2",
   "derivedFrom": "standard tier MINUS device-local/egress/subprocess (src/cloud-profile.ts)",
   "count": 19,
   "tools": [

package/dist/tool-manifest.json

@@ -1,6 +1,6 @@
 {
   "contract": "wyrm-cloud-memory-v1",
-  "version": "7.2.0",
+  "version": "7.2.2",
   "tools": [
     {
       "name": "wyrm_recall",

package/dist/tool-profiles.js

@@ -1,75 +1 @@
-/**
- * Tool profiles — Wyrm 7.0 (v7 F3, T022): the FROZEN advertised surface.
- *
- * 6.x curated 137 tools into essential(25)/standard(62)/full(137) and sniffed
- * client names to pick one. 7.0 freezes the default surface to the ~31-verb
- * survivor set (spec FR-4): hot-path singles + action-param noun shims. Every
- * 6.x name stays CALLABLE through the alias spine (src/handlers/aliases.ts);
- * only ADVERTISEMENT shrinks.
- *
- * Profiles now mirror the wyrm-manifest tiers (spec FR-4, formalized by T024):
- *   - 'standard' (the default): the frozen survivor surface (~31).
- *   - 'essential': the always-load core 4 — session_prime, recall, capture,
- *     failure_check (spec FR-4 "core" tier).
- *   - 'legacy': EVERYTHING — all 6.x names plus the shims. `WYRM_PROFILE=full`
- *     is a permanent synonym of 'legacy' (the 6.x env contract preserved:
- *     full has always meant "every tool").
- *
- * v7 F3 (T022): client-name sniffing DELETED (Article V — the manifest tiers
- * replace it; no vendor/client special-casing). The ONLY lever is the
- * WYRM_PROFILE env var.
- *
- * (Surface counts pinned by tests/tool-surface-integrity.test.ts and the live
- * byte-stability suite — update together.)
- *
- * @copyright 2026 Ghost Protocol (Pvt) Ltd.
- * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
- */
-import { SURVIVOR_TOOLS } from './handlers/survivors.js';
-/**
- * The always-load core (spec FR-4 manifest "core" tier): the 4 tools a
- * cap-constrained client needs for consult-memory-first to work at all.
- */
-export const CORE_TOOLS = new Set([
-    'wyrm_session_prime',
-    'wyrm_recall',
-    'wyrm_capture',
-    'wyrm_failure_check',
-]);
-/** The frozen default surface — re-exported view of the FR-4 survivor set. */
-export const FROZEN_TOOLS = SURVIVOR_TOOLS;
-/**
- * Pick the active profile for a session — from the WYRM_PROFILE env var ONLY
- * (T022 deleted the client-name heuristic). 'full' is a permanent synonym of
- * 'legacy'; anything else (including unset) gets the frozen default.
- */
-export function resolveProfile(opts = {}) {
-    const env = (opts.envOverride ?? process.env.WYRM_PROFILE ?? '').toLowerCase();
-    if (env === 'full' || env === 'legacy')
-        return 'legacy';
-    if (env === 'essential')
-        return 'essential';
-    return 'standard';
-}
-/**
- * Filter a list of tools by the active profile. 'legacy' passes everything —
- * including the hidden aliases — through (WYRM_PROFILE=legacy re-advertises
- * the whole 6.x surface).
- */
-export function filterByProfile(tools, profile) {
-    if (profile === 'legacy')
-        return tools;
-    const allowed = profile === 'essential' ? CORE_TOOLS : FROZEN_TOOLS;
-    return tools.filter((t) => allowed.has(t.name));
-}
-/**
- * For diagnostics — count visibility per profile.
- */
-export function profileStats(totalTools) {
-    return {
-        essential: CORE_TOOLS.size,
-        standard: FROZEN_TOOLS.size,
-        legacy: totalTools,
-    };
-}
-//# sourceMappingURL=tool-profiles.js.map
+import{SURVIVOR_TOOLS as a}from"./handlers/survivors.js";const t=new Set(["wyrm_session_prime","wyrm_recall","wyrm_capture","wyrm_failure_check"]),n=a;function l(e={}){const r=(e.envOverride??process.env.WYRM_PROFILE??"").toLowerCase();return r==="full"||r==="legacy"?"legacy":r==="essential"?"essential":"standard"}function c(e,r){if(r==="legacy")return e;const s=r==="essential"?t:n;return e.filter(i=>s.has(i.name))}function f(e){return{essential:t.size,standard:n.size,legacy:e}}export{t as CORE_TOOLS,n as FROZEN_TOOLS,c as filterByProfile,f as profileStats,l as resolveProfile};