{
  "protocol": "OIP",
  "version": "1.2.0",
  "count": 954,
  "objects": [
    {
      "id": "ADDTASK",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "taskAdd",
      "description": "WHAT: Add a job to the build queue (tasks table). Cron will pick it up and run it automatically when protocol_autorun is on.\\n# WHEN_TO_USE: the custodian wants to batch work and not wait for a live reply.\\n# ARGS:  = JSON job object OR plain text ask. JSON keys: ask (required), role (default writer), slug, topic, web_search (default true), max_tokens, post_to (default /api/protocol/write), model.\\n# EX: [ADDTASK]{\"ask\":\"Write evidence-graded BPC-157 article\",\"slug\":\"bpc-157\",\"web_search\":true}[/ADDTASK]\\n# EX: [ADDTASK]{\"ask\":\"Populate BPC-157 with more sources and widgets\",\"slug\":\"bpc-157\",\"post_to\":\"/api/protocol/populate\",\"max_rounds\":4}[/ADDTASK]\\n[\"\",\"ADDTASK\"]",
      "read": "https://miscsubjects.com/api/directory/ADDTASK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADDTASK",
        "body": ""
      },
      "router_tag": "[ADDTASK]args[/ADDTASK]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_ATTEST_ADVERSARY_GLM52",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "@cf/zai-org/glm-5.2",
      "description": "WHAT: One signed attesting finding under a rule set pinned at a content hash. Verdicts: AFFIRM | DENY | CANNOT_CONCLUDE. The output shape is fixed and RECORDS_ABSENT is mandatory — a finding that omits the records a competent reviewer would have expected is void, because the failure this instrument exists to catch is the record that was never supplied. Executing model: @cf/zai-org/glm-5.2 — the key names this model and no other. WHEN_TO_USE: any consequential question where a reader must be able to check, a year later, what the model was given, what it was NOT given, which clause each reasoning step conformed to, and what would change the verdict. ARGS: the adjudication body: the QUESTION, RULESET_URL, RULESET_HASH, RULESET as numbered clauses, the artifact and its ARTIFACT_SHA256, EVIDENCE_IDS (the only citable record ids), and MODEL_TARGET (must equal this row's target). EX: [ADJUDICATE_ATTEST_ADVERSARY_GLM52]QUESTION PUT TO YOU: does this position exceed the board authorisation? | RULESET_HASH: 0df47944... | ARTIFACT_SHA256: 9f2c... | EVIDENCE_IDS: minutes, ledger | MODEL_TARGET: @cf/zai-org/glm-5.2[/ADJUDICATE_ATTEST_ADVERSARY_GLM52]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_ATTEST_ADVERSARY_GLM52",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_ATTEST_ADVERSARY_GLM52",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_ATTEST_ADVERSARY_GLM52]args[/ADJUDICATE_ATTEST_ADVERSARY_GLM52]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_ATTEST_GLM_52",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "@cf/zai-org/glm-5.2",
      "description": "WHAT: One signed attesting finding under a rule set pinned at a content hash. Verdicts: AFFIRM | DENY | CANNOT_CONCLUDE. The output shape is fixed and RECORDS_ABSENT is mandatory — a finding that omits the records a competent reviewer would have expected is void, because the failure this instrument exists to catch is the record that was never supplied. Executing model: @cf/zai-org/glm-5.2 — the key names this model and no other. WHEN_TO_USE: any consequential question where a reader must be able to check, a year later, what the model was given, what it was NOT given, which clause each reasoning step conformed to, and what would change the verdict. ARGS: the adjudication body: the QUESTION, RULESET_URL, RULESET_HASH, RULESET as numbered clauses, the artifact and its ARTIFACT_SHA256, EVIDENCE_IDS (the only citable record ids), and MODEL_TARGET (must equal this row's target). EX: [ADJUDICATE_ATTEST_GLM_52]QUESTION PUT TO YOU: does this position exceed the board authorisation? | RULESET_HASH: 0df47944... | ARTIFACT_SHA256: 9f2c... | EVIDENCE_IDS: minutes, ledger | MODEL_TARGET: @cf/zai-org/glm-5.2[/ADJUDICATE_ATTEST_GLM_52]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_ATTEST_GLM_52",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_ATTEST_GLM_52",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_ATTEST_GLM_52]args[/ADJUDICATE_ATTEST_GLM_52]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_ATTEST_GLM_FLASH",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "@cf/zai-org/glm-4.7-flash",
      "description": "WHAT: One signed attesting finding under a rule set pinned at a content hash. Verdicts: AFFIRM | DENY | CANNOT_CONCLUDE. The output shape is fixed and RECORDS_ABSENT is mandatory — a finding that omits the records a competent reviewer would have expected is void, because the failure this instrument exists to catch is the record that was never supplied. Executing model: @cf/zai-org/glm-4.7-flash — the key names this model and no other. WHEN_TO_USE: any consequential question where a reader must be able to check, a year later, what the model was given, what it was NOT given, which clause each reasoning step conformed to, and what would change the verdict. ARGS: the adjudication body: the QUESTION, RULESET_URL, RULESET_HASH, RULESET as numbered clauses, the artifact and its ARTIFACT_SHA256, EVIDENCE_IDS (the only citable record ids), and MODEL_TARGET (must equal this row's target). EX: [ADJUDICATE_ATTEST_GLM_FLASH]QUESTION PUT TO YOU: does this position exceed the board authorisation? | RULESET_HASH: 0df47944... | ARTIFACT_SHA256: 9f2c... | EVIDENCE_IDS: minutes, ledger | MODEL_TARGET: @cf/zai-org/glm-4.7-flash[/ADJUDICATE_ATTEST_GLM_FLASH]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_ATTEST_GLM_FLASH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_ATTEST_GLM_FLASH",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_ATTEST_GLM_FLASH]args[/ADJUDICATE_ATTEST_GLM_FLASH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_ATTEST_KIMI_K26",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "@cf/moonshotai/kimi-k2.6",
      "description": "WHAT: One signed attesting finding under a rule set pinned at a content hash. Verdicts: AFFIRM | DENY | CANNOT_CONCLUDE. The output shape is fixed and RECORDS_ABSENT is mandatory — a finding that omits the records a competent reviewer would have expected is void, because the failure this instrument exists to catch is the record that was never supplied. Executing model: @cf/moonshotai/kimi-k2.6 — the key names this model and no other. WHEN_TO_USE: any consequential question where a reader must be able to check, a year later, what the model was given, what it was NOT given, which clause each reasoning step conformed to, and what would change the verdict. ARGS: the adjudication body: the QUESTION, RULESET_URL, RULESET_HASH, RULESET as numbered clauses, the artifact and its ARTIFACT_SHA256, EVIDENCE_IDS (the only citable record ids), and MODEL_TARGET (must equal this row's target). EX: [ADJUDICATE_ATTEST_KIMI_K26]QUESTION PUT TO YOU: does this position exceed the board authorisation? | RULESET_HASH: 0df47944... | ARTIFACT_SHA256: 9f2c... | EVIDENCE_IDS: minutes, ledger | MODEL_TARGET: @cf/moonshotai/kimi-k2.6[/ADJUDICATE_ATTEST_KIMI_K26]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_ATTEST_KIMI_K26",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_ATTEST_KIMI_K26",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_ATTEST_KIMI_K26]args[/ADJUDICATE_ATTEST_KIMI_K26]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_ATTEST_KIMI_K27",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "@cf/moonshotai/kimi-k2.7-code",
      "description": "WHAT: One signed attesting finding under a rule set pinned at a content hash. Verdicts: AFFIRM | DENY | CANNOT_CONCLUDE. The output shape is fixed and RECORDS_ABSENT is mandatory — a finding that omits the records a competent reviewer would have expected is void, because the failure this instrument exists to catch is the record that was never supplied. Executing model: @cf/moonshotai/kimi-k2.7-code — the key names this model and no other. WHEN_TO_USE: any consequential question where a reader must be able to check, a year later, what the model was given, what it was NOT given, which clause each reasoning step conformed to, and what would change the verdict. ARGS: the adjudication body: the QUESTION, RULESET_URL, RULESET_HASH, RULESET as numbered clauses, the artifact and its ARTIFACT_SHA256, EVIDENCE_IDS (the only citable record ids), and MODEL_TARGET (must equal this row's target). EX: [ADJUDICATE_ATTEST_KIMI_K27]QUESTION PUT TO YOU: does this position exceed the board authorisation? | RULESET_HASH: 0df47944... | ARTIFACT_SHA256: 9f2c... | EVIDENCE_IDS: minutes, ledger | MODEL_TARGET: @cf/moonshotai/kimi-k2.7-code[/ADJUDICATE_ATTEST_KIMI_K27]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_ATTEST_KIMI_K27",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_ATTEST_KIMI_K27",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_ATTEST_KIMI_K27]args[/ADJUDICATE_ATTEST_KIMI_K27]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_ATTEST_LLAMA_33",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "@cf/meta/llama-3.3-70b-instruct-fp8-fast",
      "description": "WHAT: One signed attesting finding under a rule set pinned at a content hash. Verdicts: AFFIRM | DENY | CANNOT_CONCLUDE. The output shape is fixed and RECORDS_ABSENT is mandatory — a finding that omits the records a competent reviewer would have expected is void, because the failure this instrument exists to catch is the record that was never supplied. Executing model: @cf/meta/llama-3.3-70b-instruct-fp8-fast — the key names this model and no other. WHEN_TO_USE: any consequential question where a reader must be able to check, a year later, what the model was given, what it was NOT given, which clause each reasoning step conformed to, and what would change the verdict. ARGS: the adjudication body: the QUESTION, RULESET_URL, RULESET_HASH, RULESET as numbered clauses, the artifact and its ARTIFACT_SHA256, EVIDENCE_IDS (the only citable record ids), and MODEL_TARGET (must equal this row's target). EX: [ADJUDICATE_ATTEST_LLAMA_33]QUESTION PUT TO YOU: does this position exceed the board authorisation? | RULESET_HASH: 0df47944... | ARTIFACT_SHA256: 9f2c... | EVIDENCE_IDS: minutes, ledger | MODEL_TARGET: @cf/meta/llama-3.3-70b-instruct-fp8-fast[/ADJUDICATE_ATTEST_LLAMA_33]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_ATTEST_LLAMA_33",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_ATTEST_LLAMA_33",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_ATTEST_LLAMA_33]args[/ADJUDICATE_ATTEST_LLAMA_33]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_ATTEST_QWEN3",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "@cf/qwen/qwen3-30b-a3b-fp8",
      "description": "WHAT: One signed attesting finding under a rule set pinned at a content hash. Verdicts: AFFIRM | DENY | CANNOT_CONCLUDE. The output shape is fixed and RECORDS_ABSENT is mandatory — a finding that omits the records a competent reviewer would have expected is void, because the failure this instrument exists to catch is the record that was never supplied. Executing model: @cf/qwen/qwen3-30b-a3b-fp8 — the key names this model and no other. WHEN_TO_USE: any consequential question where a reader must be able to check, a year later, what the model was given, what it was NOT given, which clause each reasoning step conformed to, and what would change the verdict. ARGS: the adjudication body: the QUESTION, RULESET_URL, RULESET_HASH, RULESET as numbered clauses, the artifact and its ARTIFACT_SHA256, EVIDENCE_IDS (the only citable record ids), and MODEL_TARGET (must equal this row's target). EX: [ADJUDICATE_ATTEST_QWEN3]QUESTION PUT TO YOU: does this position exceed the board authorisation? | RULESET_HASH: 0df47944... | ARTIFACT_SHA256: 9f2c... | EVIDENCE_IDS: minutes, ledger | MODEL_TARGET: @cf/qwen/qwen3-30b-a3b-fp8[/ADJUDICATE_ATTEST_QWEN3]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_ATTEST_QWEN3",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_ATTEST_QWEN3",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_ATTEST_QWEN3]args[/ADJUDICATE_ATTEST_QWEN3]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AGENT_LEARN",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "kvAppend",
      "description": "WHAT: save a lesson/working pattern to an agent persistent memory. Args: agent|lesson. WHEN_TO_USE: the user says something works, prefers a style, or gives feedback worth keeping.",
      "read": "https://miscsubjects.com/api/directory/AGENT_LEARN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AGENT_LEARN",
        "body": ""
      },
      "router_tag": "[AGENT_LEARN]args[/AGENT_LEARN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AGENT_RECALL",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "kvGet",
      "description": "WHAT: load an agent saved lessons/patterns. Arg: agent. WHEN_TO_USE: at the start of a creative job, to apply what worked before.",
      "read": "https://miscsubjects.com/api/directory/AGENT_RECALL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AGENT_RECALL",
        "body": ""
      },
      "router_tag": "[AGENT_RECALL]args[/AGENT_RECALL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AIG_LIST",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.cloudflare.com/client/v4/accounts/$1/ai-gateway/gateways",
      "description": "WHAT: List AI Gateways on the account WHEN_TO_USE: you need to aig list ARGS: account_id EX: [AIG_LIST][/AIG_LIST] List AI Gateways on the account. Arg: account_id.",
      "read": "https://miscsubjects.com/api/directory/AIG_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AIG_LIST",
        "body": ""
      },
      "router_tag": "[AIG_LIST]args[/AIG_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AIG_RAW",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.cloudflare.com/client/v4/accounts/$CF_ACCOUNT_ID/ai/v1/chat/completions",
      "description": "WHAT: Raw call to AI Gateway REST. Arg $1 = full JSON body (model + messages) WHEN_TO_USE: you need to aig raw ARGS: see content EX: [AIG_RAW]arg1[/AIG_RAW]",
      "read": "https://miscsubjects.com/api/directory/AIG_RAW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AIG_RAW",
        "body": ""
      },
      "router_tag": "[AIG_RAW]args[/AIG_RAW]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARTICLE_INSPECT",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "https://miscsubjects.com/api/proven-work/$1/inspect",
      "description": "WHAT: Inspect any article as an isolated proof object — the tap-and-go proven-work loop in one invocation. Fetching this mints the caller a fresh delegated authority scoped to that single article (reading is the onboarding: no key, no account) and returns the proof package — the claim, the requirement manifest (hand-bound, or synthesized at read time from the page's own claims, sources, and revision history), the evidence payloads, the exact article_hash the proof covers — plus the caller's own inspection receipt (inv_…). Every inspection is itself on the record. WHEN_TO_USE: any model or person asked to verify a miscsubjects page instead of merely summarizing it; a regulator, auditor, or counterparty checking a claim from outside the system; the first step before signing any verdict — certification is refused without the inspection receipt this returns. NEXT: judge, then sign the ledger. POST https://miscsubjects.com/api/proven-work/$1/certify with {\"verdict\":\"…\",\"model\":\"<your name>\",\"grounds\":\"<what you checked, citing record ids>\",\"inspection_receipt\":\"<inv_… from this call>\"}. Verdicts: SUPPORTED_BY_RECORD | MISSING_EVIDENCE | CONTRADICTED_BY_RECORD | PROVED | DISPROVED | CONTESTED | QUESTION | OBJECTION | INCONCLUSIVE. READ is cheap; a STRONG verdict costs verification — record-citing grounds or verification_receipts of the tool calls you ran. ARGS: $1 = article slug. EX: [ARTICLE_INSPECT]proven-work[/ARTICLE_INSPECT]",
      "read": "https://miscsubjects.com/api/directory/ARTICLE_INSPECT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARTICLE_INSPECT",
        "body": ""
      },
      "router_tag": "[ARTICLE_INSPECT]args[/ARTICLE_INSPECT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARTICLE_PUT",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://miscsubjects.com/api/articles",
      "description": "WHAT: create/replace an article. ARGS: $1 = JSON {slug,title,body,hero?,images?,style?}",
      "read": "https://miscsubjects.com/api/directory/ARTICLE_PUT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARTICLE_PUT",
        "body": ""
      },
      "router_tag": "[ARTICLE_PUT]args[/ARTICLE_PUT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AUDIT_PROBE_ROW",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "https://example.com",
      "description": "audit probe row - safe to delete",
      "read": "https://miscsubjects.com/api/directory/AUDIT_PROBE_ROW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AUDIT_PROBE_ROW",
        "body": ""
      },
      "router_tag": "[AUDIT_PROBE_ROW]args[/AUDIT_PROBE_ROW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_GET_MESSAGE_STATUS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "mcpToolCall",
      "description": "Lightweight delivery status. ARGS: chat_id|message_id MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_GET_MESSAGE_STATUS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_GET_MESSAGE_STATUS",
        "body": ""
      },
      "router_tag": "[BLOOIO_GET_MESSAGE_STATUS]args[/BLOOIO_GET_MESSAGE_STATUS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LIST_MESSAGE_EVENTS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "mcpToolCall",
      "description": "List message lifecycle events. ARGS: chat_id|message_id MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LIST_MESSAGE_EVENTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LIST_MESSAGE_EVENTS",
        "body": ""
      },
      "router_tag": "[BLOOIO_LIST_MESSAGE_EVENTS]args[/BLOOIO_LIST_MESSAGE_EVENTS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO2",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/BLOOIO2",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO2",
        "body": ""
      },
      "router_tag": "[BLOOIO2]args[/BLOOIO2]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BROWSER_FETCH",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/BROWSER_FETCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BROWSER_FETCH",
        "body": ""
      },
      "router_tag": "[BROWSER_FETCH]args[/BROWSER_FETCH]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BROWSER_USE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Run the browser-use agent (AI browser driver). Installed at bridge/.venv-browser-use (Python 3.12). Needs GROK_API_KEY, OPENAI_API_KEY, or ANTHROPIC_API_KEY in ~/.config/grok-bridge.env WHEN_TO_USE: you need an LLM agent to drive a real browser on the custodian's Mac ARGS: task EX: [BROWSER_USE]open google.com and tell me the first headline[/BROWSER_USE]",
      "read": "https://miscsubjects.com/api/directory/BROWSER_USE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BROWSER_USE",
        "body": ""
      },
      "router_tag": "[BROWSER_USE]args[/BROWSER_USE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CC_LAST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "d1Query",
      "description": "WHAT: the last 3 Claude Code turns on this repo (the user input to Claude Code, the tools it used, the files it edited). WHEN_TO_USE: \"what did claude code just do\", learning from Claude Code, the CC_MIRROR loop.",
      "read": "https://miscsubjects.com/api/directory/CC_LAST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CC_LAST",
        "body": ""
      },
      "router_tag": "[CC_LAST]args[/CC_LAST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_EXEC",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "cfExec",
      "description": "Code mode execute: call any CF API endpoint. args method|path|body.",
      "read": "https://miscsubjects.com/api/directory/CF_EXEC",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_EXEC",
        "body": ""
      },
      "router_tag": "[CF_EXEC]args[/CF_EXEC]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_EXECUTE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "cfExecute",
      "description": "Execute a Cloudflare tool by key. Args: tool_key body_to_pass\\n[\"$1\",\"$2+\"]",
      "read": "https://miscsubjects.com/api/directory/CF_EXECUTE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_EXECUTE",
        "body": ""
      },
      "router_tag": "[CF_EXECUTE]args[/CF_EXECUTE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_FIND",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "cfFind",
      "description": "Code mode search: find Cloudflare API endpoints by keyword.",
      "read": "https://miscsubjects.com/api/directory/CF_FIND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_FIND",
        "body": ""
      },
      "router_tag": "[CF_FIND]args[/CF_FIND]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_GROK",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "cfGrok",
      "description": "Run any model through the Cloudflare AI Gateway on this account. $1=prompt, $2=model as provider/model (grok/grok-4.3, google-ai-studio/gemini-2.5-flash, workers-ai/@cf/meta/llama-3.3-70b-instruct-fp8-fast, openai/gpt-5.2). Provider key picked by prefix; omit $2 for grok-4.3.",
      "read": "https://miscsubjects.com/api/directory/CF_GROK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_GROK",
        "body": ""
      },
      "router_tag": "[CF_GROK]args[/CF_GROK]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_SEARCH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "cfSearch",
      "description": "Search Cloudflare tools by keyword. Returns matching CF_* rows with descriptions.\\n[\"$1+\"]",
      "read": "https://miscsubjects.com/api/directory/CF_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_SEARCH",
        "body": ""
      },
      "router_tag": "[CF_SEARCH]args[/CF_SEARCH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_AIDER",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Aider — git-aware AI pair programmer running one-shot on the Mac. WHEN_TO_USE: \"have aider edit X\", \"use aider to refactor\", \"aider, fix this bug in <file>\" ARGS: task | cwd EX: text the build → \"have aider rename foo to bar in functions/api/dispatch.js\"",
      "read": "https://miscsubjects.com/api/directory/CLI_AIDER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_AIDER",
        "body": ""
      },
      "router_tag": "[CLI_AIDER]args[/CLI_AIDER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_CLAUDE_CODE",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Claude Code headless coding agent on the Mac. File edit + shell. WHEN_TO_USE: \"have claude code do X\", \"use claude code to review\", \"ask claude code to refactor\", \"claude code: implement Y\" ARGS: task | cwd (cwd empty = home; use /Users/[custodian]/miscsubjects-pages for the build) EX: text the build → \"have claude code review the last commit in miscsubjects-pages\"",
      "read": "https://miscsubjects.com/api/directory/CLI_CLAUDE_CODE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_CLAUDE_CODE",
        "body": ""
      },
      "router_tag": "[CLI_CLAUDE_CODE]args[/CLI_CLAUDE_CODE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_CODEX",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: OpenAI Codex CLI one-shot. Parallel/second-opinion coder. WHEN_TO_USE: \"use codex to\", \"have codex do X\", \"codex: <task>\" ARGS: task | cwd EX: text the build → \"use codex to write a function that counts lines per file in functions/\"",
      "read": "https://miscsubjects.com/api/directory/CLI_CODEX",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_CODEX",
        "body": ""
      },
      "router_tag": "[CLI_CODEX]args[/CLI_CODEX]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_GEMINI",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Google Gemini CLI non-interactively on the Mac. Strong long-context. WHEN_TO_USE: \"use gemini cli to\", \"have gemini summarize\", \"ask gemini cli\", \"gemini, do X\" ARGS: task | cwd EX: text the build → \"use gemini cli to count the lines in /Users/[custodian]/miscsubjects-pages/functions/api/dispatch.js\"",
      "read": "https://miscsubjects.com/api/directory/CLI_GEMINI",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_GEMINI",
        "body": ""
      },
      "router_tag": "[CLI_GEMINI]args[/CLI_GEMINI]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_GH",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Run any gh (GitHub CLI) command with the custodian's auth on the Mac. WHEN_TO_USE: \"comment on the repo\", \"post a github comment\", \"open an issue\", \"list my PRs\", \"gh <args>\", \"check github actions\". Needs the Mac online + gh authed. ARGS: the gh arguments verbatim (everything after \"gh\"). EX: [CLI_GH]issue comment 1 --repo [custodian]/miscsubjects-pages --body \"posted via the protocol\"[/CLI_GH]",
      "read": "https://miscsubjects.com/api/directory/CLI_GH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_GH",
        "body": ""
      },
      "router_tag": "[CLI_GH]args[/CLI_GH]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_GH_COPILOT",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: gh copilot suggest — one-line shell-command suggestions. WHEN_TO_USE: \"how do I do X in shell\", \"suggest a shell command for\", \"gh copilot: <question>\" ARGS: natural-language question EX: text the build → \"ask gh copilot how to find files larger than 1MB\"",
      "read": "https://miscsubjects.com/api/directory/CLI_GH_COPILOT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_GH_COPILOT",
        "body": ""
      },
      "router_tag": "[CLI_GH_COPILOT]args[/CLI_GH_COPILOT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_GOOSE",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Block's goose coding agent. NOT INSTALLED yet (brew install block-goose-cli). WHEN_TO_USE: \"use goose to\", \"have goose do X\" ARGS: task | cwd EX: text the build → \"use goose to add error handling to functions/api/dispatch.js\"",
      "read": "https://miscsubjects.com/api/directory/CLI_GOOSE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_GOOSE",
        "body": ""
      },
      "router_tag": "[CLI_GOOSE]args[/CLI_GOOSE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_GROK_SA",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: superagent-ai grok-cli (~/.superagent-grok/bin/grok via bun). WHEN_TO_USE: \"use superagent grok\", \"run superagent-grok\" ARGS: task | cwd EX: text the build → \"have superagent-grok summarize functions/blooio.js\"",
      "read": "https://miscsubjects.com/api/directory/CLI_GROK_SA",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_GROK_SA",
        "body": ""
      },
      "router_tag": "[CLI_GROK_SA]args[/CLI_GROK_SA]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_GROK_XAI",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: xAI's official Grok CLI (~/.grok/bin/grok) with the custodian's xAI auth. WHEN_TO_USE: \"use grok cli to\", \"ask grok cli\", \"run grok cli\" ARGS: task | cwd EX: text the build → \"use grok cli to explain what dispatch.js does\"",
      "read": "https://miscsubjects.com/api/directory/CLI_GROK_XAI",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_GROK_XAI",
        "body": ""
      },
      "router_tag": "[CLI_GROK_XAI]args[/CLI_GROK_XAI]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_INTERPRETER",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Open Interpreter — local code execution agent. WHEN_TO_USE: \"use open interpreter\", \"have interpreter run\", \"interpreter: <task>\" ARGS: task EX: text the build → \"use open interpreter to plot CPU usage over the last hour\"",
      "read": "https://miscsubjects.com/api/directory/CLI_INTERPRETER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_INTERPRETER",
        "body": ""
      },
      "router_tag": "[CLI_INTERPRETER]args[/CLI_INTERPRETER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_OPENHANDS",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: OpenHands (all-hands.dev) agent. NOT INSTALLED yet (pip3 install openhands-ai). WHEN_TO_USE: \"use openhands to\", \"have openhands do X\" ARGS: task | cwd EX: text the build → \"use openhands to refactor utils.js\"",
      "read": "https://miscsubjects.com/api/directory/CLI_OPENHANDS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_OPENHANDS",
        "body": ""
      },
      "router_tag": "[CLI_OPENHANDS]args[/CLI_OPENHANDS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_PLANDEX",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Plandex agent. NOT INSTALLED yet (plandex.ai unreachable 2026-06-11). WHEN_TO_USE: \"use plandex to\", \"have plandex do X\" ARGS: task | cwd EX: text the build → \"use plandex to plan a refactor of the kernel\"",
      "read": "https://miscsubjects.com/api/directory/CLI_PLANDEX",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_PLANDEX",
        "body": ""
      },
      "router_tag": "[CLI_PLANDEX]args[/CLI_PLANDEX]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CODE_MODE",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "cfgw:grok/grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/CODE_MODE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CODE_MODE",
        "body": ""
      },
      "router_tag": "[CODE_MODE]args[/CODE_MODE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CRITIC",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/CRITIC",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CRITIC",
        "body": ""
      },
      "router_tag": "[CRITIC]args[/CRITIC]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DELTASK",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "d1Exec",
      "description": "WHAT: delete a task. ARGS: <id>. EX {\"key\":\"DELTASK\",\"body\":\"42\"}",
      "read": "https://miscsubjects.com/api/directory/DELTASK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DELTASK",
        "body": ""
      },
      "router_tag": "[DELTASK]args[/DELTASK]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DESKTOP_CLICK",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Click screen coordinates on the Mac. Needs Accessibility granted once. WHEN_TO_USE: \"click at X Y\", \"click on my screen at\" ARGS: x | y EX: text the build → \"click at 500 400 on my screen\"",
      "read": "https://miscsubjects.com/api/directory/DESKTOP_CLICK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DESKTOP_CLICK",
        "body": ""
      },
      "router_tag": "[DESKTOP_CLICK]args[/DESKTOP_CLICK]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DESKTOP_SHOT",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Screenshot the Mac and return a stable URL. Alias of LOCAL_SCREENSHOT. WHEN_TO_USE: \"screenshot my mac\", \"take a screenshot\", \"what's on my screen\" ARGS: (none) EX: text the build → \"screenshot my screen\"",
      "read": "https://miscsubjects.com/api/directory/DESKTOP_SHOT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DESKTOP_SHOT",
        "body": ""
      },
      "router_tag": "[DESKTOP_SHOT]args[/DESKTOP_SHOT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DESKTOP_TYPE",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Type text into the focused app on the Mac (keystroke). WHEN_TO_USE: \"type X into my mac\", \"type the following into the focused app\" ARGS: text (avoid double quotes) EX: text the build → \"type 'hello world' into my focused app\"",
      "read": "https://miscsubjects.com/api/directory/DESKTOP_TYPE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DESKTOP_TYPE",
        "body": ""
      },
      "router_tag": "[DESKTOP_TYPE]args[/DESKTOP_TYPE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "EAGLE_IMSG",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Eagle image review workflow from iMessage. Runs eagle_imessage.mjs on the Mac. Texts the custodian image previews + generated variations. Updates EAGLE_IMAGES sheet. WHEN_TO_USE: the custodian asks about eagles, eagle images, show eagles, generate eagle variation, mark eagle good, eagle prompts — any eagle1–eagle25 image work over iMessage. ARGS: his message (pass through verbatim) EX: [EAGLE_IMSG]show eagles[/EAGLE_IMSG]",
      "read": "https://miscsubjects.com/api/directory/EAGLE_IMSG",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "EAGLE_IMSG",
        "body": ""
      },
      "router_tag": "[EAGLE_IMSG]args[/EAGLE_IMSG]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "EDIT_MEMORY",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "directoryReplaceContent",
      "description": "WHAT: Change one line of your memory (or any row). $1=key, $2=the exact existing line, $3=the new line WHEN_TO_USE: you need to edit memory ARGS: $1 | $2 | $3 EX: [EDIT_MEMORY]arg1|arg2|arg3[/EDIT_MEMORY]",
      "read": "https://miscsubjects.com/api/directory/EDIT_MEMORY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "EDIT_MEMORY",
        "body": ""
      },
      "router_tag": "[EDIT_MEMORY]args[/EDIT_MEMORY]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "EDITOR_AGENT",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/EDITOR_AGENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "EDITOR_AGENT",
        "body": ""
      },
      "router_tag": "[EDITOR_AGENT]args[/EDITOR_AGENT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "EDITTASK",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "d1Exec",
      "description": "WHAT: edit a task body. ARGS: <id>|<new text>. EX {\"key\":\"EDITTASK\",\"body\":\"42|buy milk\"}",
      "read": "https://miscsubjects.com/api/directory/EDITTASK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "EDITTASK",
        "body": ""
      },
      "router_tag": "[EDITTASK]args[/EDITTASK]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "FIDELITY_REPORT",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": null,
      "target": null,
      "description": "Per-run pass/fail counts from fidelity_log. Latest 5 runs. WHEN_TO_USE: 'show me fidelity report' / 'what tests passed' / 'fidelity status'. TESTS: POSITIVE: {\"key\":\"FIDELITY_REPORT\",\"body\":\"\"} → result has \"total\" and \"passed\"",
      "read": "https://miscsubjects.com/api/directory/FIDELITY_REPORT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "FIDELITY_REPORT",
        "body": ""
      },
      "router_tag": "[FIDELITY_REPORT]args[/FIDELITY_REPORT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "FILE_PATCH",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "PATCH https://miscsubjects.com/api/file/$1",
      "description": "WHAT: Patch a repo file — replace one string with another. Safer than FILE_PUT for small edits WHEN_TO_USE: you need to file patch ARGS: $1 = path (e.g. functions/api/dispatch.js), $2 = old_string, $3 = new_string, $4 = commit message (optional), $5 = ref (optional, default main) EX: [FILE_PATCH]functions/api/dispatch.js|const ITER_CAP = 8;|const ITER_CAP = 20;|bump cap[/FILE_PATCH]",
      "read": "https://miscsubjects.com/api/directory/FILE_PATCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "FILE_PATCH",
        "body": ""
      },
      "router_tag": "[FILE_PATCH]args[/FILE_PATCH]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "FORGET",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "directoryReplaceContent",
      "description": "WHAT: Remove one line from your memory (or any row). $1=key (ROUTER for your own memory), $2=the exact text to remove WHEN_TO_USE: you need to forget ARGS: $1 | $2 EX: [FORGET]arg1|arg2[/FORGET]",
      "read": "https://miscsubjects.com/api/directory/FORGET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "FORGET",
        "body": ""
      },
      "router_tag": "[FORGET]args[/FORGET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GLM_CODER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "@cf/zai-org/glm-5.2",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/GLM_CODER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GLM_CODER",
        "body": ""
      },
      "router_tag": "[GLM_CODER]args[/GLM_CODER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GROK_VOICE_SEND",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "grokVoiceSendBlooio",
      "description": "WHAT: Grok TTS ara voice into Blooio chat. INVOKE: [GROK_VOICE_SEND]<chat>|<words>|<voice_id>[/GROK_VOICE_SEND] WHEN_TO_USE: audio mode — speak into the custodian iMessage via x.ai ara ARGS: chat|text|voice_id (default ara) PROOF: queued/202 is not delivery proof. Callers that promise audio mode must also send the same-word carbon-copy text and expose/check delivery status before claiming success. EX: [GROK_VOICE_SEND]chat_xxx|hey the custodian|ara[/GROK_VOICE_SEND]",
      "read": "https://miscsubjects.com/api/directory/GROK_VOICE_SEND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GROK_VOICE_SEND",
        "body": ""
      },
      "router_tag": "[GROK_VOICE_SEND]args[/GROK_VOICE_SEND]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "KIMI_CODER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "@cf/moonshotai/kimi-k2.7-code",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/KIMI_CODER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "KIMI_CODER",
        "body": ""
      },
      "router_tag": "[KIMI_CODER]args[/KIMI_CODER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "KIMI_WRITER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "kimi-k2.6",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/KIMI_WRITER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "KIMI_WRITER",
        "body": ""
      },
      "router_tag": "[KIMI_WRITER]args[/KIMI_WRITER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "KV_APPEND",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "kvAppend",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/KV_APPEND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "KV_APPEND",
        "body": ""
      },
      "router_tag": "[KV_APPEND]args[/KV_APPEND]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "KV_GET_JSON",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "kvGetJson",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/KV_GET_JSON",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "KV_GET_JSON",
        "body": ""
      },
      "router_tag": "[KV_GET_JSON]args[/KV_GET_JSON]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "KV_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "kvList",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/KV_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "KV_LIST",
        "body": ""
      },
      "router_tag": "[KV_LIST]args[/KV_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "KV_PUT_JSON",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "kvPutJson",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/KV_PUT_JSON",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "KV_PUT_JSON",
        "body": ""
      },
      "router_tag": "[KV_PUT_JSON]args[/KV_PUT_JSON]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_DISCOVER_NPI",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "leadsDiscoverNpi",
      "description": "WHAT: Discover leads from the NPPES NPI Registry (authoritative federal provider directory, free/no key). Real clinic identity + phone + address; no website (run LEADS_RESOLVE_SITES to backfill). WHEN_TO_USE: broad authoritative discovery of clinics/providers by taxonomy + city/state. ARGS: $1=taxonomy_description, $2=city, $3=state(2-letter), $4=limit(default 200, NPPES hard cap per call), $5=skip(0-1000 - NPPES returns max 200 per call, so page a dense city with skip 200/400/600/800/1000 or it silently truncates), $6=postal_code(optional, targets one ZIP). EX: [LEADS_DISCOVER_NPI]Chiropractor|Los Angeles|CA|200|400[/LEADS_DISCOVER_NPI]",
      "read": "https://miscsubjects.com/api/directory/LEADS_DISCOVER_NPI",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_DISCOVER_NPI",
        "body": ""
      },
      "router_tag": "[LEADS_DISCOVER_NPI]args[/LEADS_DISCOVER_NPI]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_FOLLOWUPS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "leadsFollowups",
      "description": "WHAT: Generate the follow-up sequence (touch 2 new-angle + touch 3 break-up) for an already-drafted lead, on the same thread. DOES NOT SEND. Stored on the lead draft as {followups:{touch2,touch3}}. WHEN_TO_USE: after LEADS_DRAFT_AI has produced the first touch; before sending, so the whole 3-touch sequence is staged for review. ARGS: $1=lead id, $2=brand (default LeoResearch). EX: [LEADS_FOLLOWUPS]2633|LeoResearch[/LEADS_FOLLOWUPS]",
      "read": "https://miscsubjects.com/api/directory/LEADS_FOLLOWUPS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_FOLLOWUPS",
        "body": ""
      },
      "router_tag": "[LEADS_FOLLOWUPS]args[/LEADS_FOLLOWUPS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEDGER",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://miscsubjects.com/admin/ledger?turns=1&limit=12&trace_id=$1",
      "description": "WHAT: Read your own ledger to troubleshoot: recent messages, each tool you ran with its output/error, and your reply. $1 optional = a trace_id for one message WHEN_TO_USE: you need to ledger ARGS: see content EX: [LEDGER]arg1[/LEDGER] Read your own ledger to troubleshoot: recent messages, each tool you ran with its output/error, and your reply. $1 optional = a trace_id for one message. INVOKE: [LEDGER][/LEDGER] or [LEDGER]<trace_id>[/LEDGER]",
      "read": "https://miscsubjects.com/api/directory/LEDGER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEDGER",
        "body": ""
      },
      "router_tag": "[LEDGER]args[/LEDGER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_AFPLAY",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Play mp3/audio URL on Mac speakers (afplay). Skips when Chrome is on grok.com/x.ai so web voice is not hijacked. WHEN_TO_USE: ara voice landed — play on the custodian Mac automatically ARGS: $1 = public https URL to audio file EX: [LOCAL_AFPLAY]https://miscsubjects.com/img/aud/foo.mp3[/LOCAL_AFPLAY]",
      "read": "https://miscsubjects.com/api/directory/LOCAL_AFPLAY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_AFPLAY",
        "body": ""
      },
      "router_tag": "[LOCAL_AFPLAY]args[/LOCAL_AFPLAY]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_CAFFEINATE",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Keep Mac awake for N seconds (caffeinate -dimsu). WHEN_TO_USE: \"keep my mac awake\", \"caffeinate for N seconds\", \"don't let my mac sleep\" ARGS: seconds EX: text the build → \"keep my mac awake for 1800 seconds\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_CAFFEINATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_CAFFEINATE",
        "body": ""
      },
      "router_tag": "[LOCAL_CAFFEINATE]args[/LOCAL_CAFFEINATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_CLIPBOARD_GET",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Read the Mac's clipboard (pbpaste). WHEN_TO_USE: \"what's on my clipboard\", \"read my clipboard\", \"clipboard contents\" ARGS: (none) EX: text the build → \"what's on my clipboard\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_CLIPBOARD_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_CLIPBOARD_GET",
        "body": ""
      },
      "router_tag": "[LOCAL_CLIPBOARD_GET]args[/LOCAL_CLIPBOARD_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_CLIPBOARD_SET",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Put text on the Mac's clipboard (pbcopy). WHEN_TO_USE: \"copy X to my clipboard\", \"put X on my clipboard\", \"set my clipboard to\" ARGS: the text EX: text the build → \"copy this hash to my clipboard: 579ea7b\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_CLIPBOARD_SET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_CLIPBOARD_SET",
        "body": ""
      },
      "router_tag": "[LOCAL_CLIPBOARD_SET]args[/LOCAL_CLIPBOARD_SET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_DOWNLOAD",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Download a URL to a local path on the Mac. WHEN_TO_USE: \"download X to my mac\", \"curl X to\", \"grab this URL to disk\" ARGS: url | path EX: text the build → \"download https://example.com/install.sh to /tmp/install.sh\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_DOWNLOAD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_DOWNLOAD",
        "body": ""
      },
      "router_tag": "[LOCAL_DOWNLOAD]args[/LOCAL_DOWNLOAD]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_EDIT",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Exact-string replace in a file (python str.replace, all occurrences). Prints count. WHEN_TO_USE: \"edit X in <file>\", \"replace X with Y in <file>\", \"change <pattern> to <pattern> in\" ARGS: path | old | new EX: text the build → \"in functions/api/dispatch.js replace 'foo' with 'bar'\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_EDIT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_EDIT",
        "body": ""
      },
      "router_tag": "[LOCAL_EDIT]args[/LOCAL_EDIT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_EXEC",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Run a shell command on the custodian Mac. WHEN_TO_USE: any file operation, git command, system check, or script execution. ARGS: $1+ = full shell command (pipes/OR/chains preserved). EX: [LOCAL_EXEC]ls -la ~/Desktop[/LOCAL_EXEC]",
      "read": "https://miscsubjects.com/api/directory/LOCAL_EXEC",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_EXEC",
        "body": ""
      },
      "router_tag": "[LOCAL_EXEC]args[/LOCAL_EXEC]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_GREP",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: ripgrep on the Mac with line numbers (50 hits per file max). WHEN_TO_USE: \"grep for X in\", \"find where X is in\", \"search <pattern> in <path>\" ARGS: pattern | path EX: text the build → \"grep for runAgent in /Users/[custodian]/miscsubjects-pages\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_GREP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_GREP",
        "body": ""
      },
      "router_tag": "[LOCAL_GREP]args[/LOCAL_GREP]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_HEALTH",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "GET https://agent.miscsubjects.com/health",
      "description": "WHAT: Bridge liveness {ok, ts, installed_cli, deny_globs, ...}. WHEN_TO_USE: \"is the bridge alive\", \"is my mac reachable\", \"what's installed on my mac\", \"bridge health\" ARGS: (none) EX: text the build → \"is the bridge alive\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_HEALTH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_HEALTH",
        "body": ""
      },
      "router_tag": "[LOCAL_HEALTH]args[/LOCAL_HEALTH]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_LAUNCHD",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: launchctl on the Mac. Inspect/restart launch agents. WHEN_TO_USE: \"restart the bridge\", \"launchctl X\", \"kickstart <service>\" ARGS: launchctl arguments EX: text the build → \"restart the bridge by kickstarting com.the custodian.grok-bridge\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_LAUNCHD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_LAUNCHD",
        "body": ""
      },
      "router_tag": "[LOCAL_LAUNCHD]args[/LOCAL_LAUNCHD]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_LIST",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: ls -la a path on the Mac. WHEN_TO_USE: \"list <dir>\", \"what's in <dir>\", \"ls <path>\" ARGS: path (empty = home) EX: text the build → \"list /Users/[custodian]/miscsubjects-pages\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_LIST",
        "body": ""
      },
      "router_tag": "[LOCAL_LIST]args[/LOCAL_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_OCR",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: OCR an image (tesseract). Local path or https URL. WHEN_TO_USE: \"read text from this image\", \"ocr this\", \"extract text from <image>\" ARGS: path or https URL EX: text the build → \"ocr the screenshot at /tmp/shot.png\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_OCR",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_OCR",
        "body": ""
      },
      "router_tag": "[LOCAL_OCR]args[/LOCAL_OCR]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_OPEN",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: macOS `open` — launch an app, file, or URL on the Mac. WHEN_TO_USE: \"open X on my mac\", \"launch <app>\", \"open this URL on my mac\" ARGS: target (URL, file path, or `-a AppName`) EX: text the build → \"open https://miscsubjects.com on my mac\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_OPEN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_OPEN",
        "body": ""
      },
      "router_tag": "[LOCAL_OPEN]args[/LOCAL_OPEN]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_OSASCRIPT",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Run one line of AppleScript on the Mac (osascript -e). WHEN_TO_USE: \"applescript: <line>\", \"tell <app> to <action>\", \"run osascript\" ARGS: the AppleScript line EX: text the build → \"applescript: tell application \"Spotify\" to pause\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_OSASCRIPT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_OSASCRIPT",
        "body": ""
      },
      "router_tag": "[LOCAL_OSASCRIPT]args[/LOCAL_OSASCRIPT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_PORTS",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Listening TCP ports on the Mac (lsof). WHEN_TO_USE: \"what's listening on my mac\", \"listening ports\", \"ports in use\" ARGS: (none) EX: text the build → \"what ports are listening on my mac\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_PORTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_PORTS",
        "body": ""
      },
      "router_tag": "[LOCAL_PORTS]args[/LOCAL_PORTS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_PS",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Running processes filtered by string. Empty filter = first 50. WHEN_TO_USE: \"what's running on my mac\", \"is X running\", \"ps for <name>\" ARGS: filter (empty = first 50) EX: text the build → \"is wrangler running on my mac\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_PS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_PS",
        "body": ""
      },
      "router_tag": "[LOCAL_PS]args[/LOCAL_PS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_READ",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Read a file on the custodian Mac. WHEN_TO_USE: the user says \"show me\", \"read\", \"what is in\", \"display\". ARGS: $1 = absolute path. EX: [LOCAL_READ]/Users/[custodian]/STATE.md[/LOCAL_READ]",
      "read": "https://miscsubjects.com/api/directory/LOCAL_READ",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_READ",
        "body": ""
      },
      "router_tag": "[LOCAL_READ]args[/LOCAL_READ]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_SAY",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Speak text aloud on the Mac (say). WHEN_TO_USE: \"say X out loud\", \"speak X on my mac\", \"make my mac say\" ARGS: the text EX: text the build → \"say out loud: deploy finished\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_SAY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_SAY",
        "body": ""
      },
      "router_tag": "[LOCAL_SAY]args[/LOCAL_SAY]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_SCREENSHOT",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Screenshot the screen, upload to R2, return a stable URL. WHEN_TO_USE: \"screenshot my mac\", \"take a screenshot\", \"what's on my screen right now\" ARGS: (none) EX: text the build → \"screenshot my mac\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_SCREENSHOT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_SCREENSHOT",
        "body": ""
      },
      "router_tag": "[LOCAL_SCREENSHOT]args[/LOCAL_SCREENSHOT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_WRITE",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": null,
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Overwrite a file on the Mac. Echoes the content back. WHEN_TO_USE: \"write this to <file>\", \"create <file> with\", \"drop this in <file>\" ARGS: path | content EX: text the build → \"write 'hello' to /tmp/test.txt\"",
      "read": "https://miscsubjects.com/api/directory/LOCAL_WRITE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_WRITE",
        "body": ""
      },
      "router_tag": "[LOCAL_WRITE]args[/LOCAL_WRITE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOGIC",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/LOGIC",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOGIC",
        "body": ""
      },
      "router_tag": "[LOGIC]args[/LOGIC]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MCP_CATALOG",
      "object_type": "mcp",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://raw.githubusercontent.com/modelcontextprotocol/servers/main/README.md",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/MCP_CATALOG",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MCP_CATALOG",
        "body": ""
      },
      "router_tag": "[MCP_CATALOG]args[/MCP_CATALOG]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MCP_context7_query_docs",
      "object_type": "mcp",
      "runner": "edge",
      "directory_type": "http",
      "category": null,
      "target": "POST https://mcp.context7.com/mcp",
      "description": "WHAT: Retrieves up-to-date, version-specific documentation + code examples for a library using its exact Context7 libraryId. Use after resolve-library-id (or when you already have the ID).  Returns relevant docs/chunks WHEN_TO_USE: you need to mcp context7 query docs ARGS: libraryId|query EX: [MCP_context7_query_docs]arg1|arg2[/MCP_context7_query_docs]",
      "read": "https://miscsubjects.com/api/directory/MCP_context7_query_docs",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MCP_context7_query_docs",
        "body": ""
      },
      "router_tag": "[MCP_context7_query_docs]args[/MCP_context7_query_docs]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MCP_context7_resolve_library_id",
      "object_type": "mcp",
      "runner": "edge",
      "directory_type": "http",
      "category": null,
      "target": "POST https://mcp.context7.com/mcp",
      "description": "WHAT: Resolves a general library name into a Context7-compatible library ID (ranked by relevance to query).   Returns list of matching library IDs with scores WHEN_TO_USE: you have a vague library name and need the exact Context7 ID first ARGS: query|libraryName EX: [MCP_context7_resolve_library_id]arg1|arg2[/MCP_context7_resolve_library_id]",
      "read": "https://miscsubjects.com/api/directory/MCP_context7_resolve_library_id",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MCP_context7_resolve_library_id",
        "body": ""
      },
      "router_tag": "[MCP_context7_resolve_library_id]args[/MCP_context7_resolve_library_id]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MCP_TOOL_CALL",
      "object_type": "mcp",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "mcpToolCall",
      "description": "WHAT: Proxy one tool call into an external MCP server (Streamable HTTP JSON-RPC) WHEN_TO_USE: you need to mcp tool call ARGS: server_url|tool_name|args_json|auth_env_var EX: [MCP_TOOL_CALL]https://mcp.blooio.com/v4|send_chat_message|{\"chat_id\":\"chat_x\",\"text\":\"hi\"}|BLOOIO_API_KEY_PEPPERUP[/MCP_TOOL_CALL]",
      "read": "https://miscsubjects.com/api/directory/MCP_TOOL_CALL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MCP_TOOL_CALL",
        "body": ""
      },
      "router_tag": "[MCP_TOOL_CALL]args[/MCP_TOOL_CALL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MEMORY_AGENT",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/MEMORY_AGENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MEMORY_AGENT",
        "body": ""
      },
      "router_tag": "[MEMORY_AGENT]args[/MEMORY_AGENT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OUTREACH_CATALOG",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "noop",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/OUTREACH_CATALOG",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OUTREACH_CATALOG",
        "body": ""
      },
      "router_tag": "[OUTREACH_CATALOG]args[/OUTREACH_CATALOG]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OUTREACH_DOSSIER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "noop",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/OUTREACH_DOSSIER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OUTREACH_DOSSIER",
        "body": ""
      },
      "router_tag": "[OUTREACH_DOSSIER]args[/OUTREACH_DOSSIER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OUTREACH_SHEET_SYNC",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": null,
      "target": null,
      "description": "WHAT: Push the outreach review data to the master Google Sheet — three tabs: OUTREACH_DRAFTS (every saved draft with its lead fields, subject, opening line, full body, scraped site text), OUTREACH_SENT (every email ever sent, full body, opens, clicks), OUTREACH_LOGIC (every recorded version of the writing logic, verbatim). Line breaks travel as ⏎ because the transport is JSON. ROOT CAUSE FIXED 2026-08-09: every past 'airunner_body_truncated_in_transit' failure on this flow was APPS_SCRIPT_RUN's own template splitting its JSON args on a literal | character that shows up in real data (a business name, a drafted email body) — never a network/size limit. APPS_SCRIPT_RUN now takes $2+ instead of $2, which rejoins the split correctly, so this flow can push its full, unbounded row set again. WHEN_TO_USE: \"put the drafts on the sheet\", \"sync the outreach sheet\", \"I want to read the drafts and the rules on Sheets\".",
      "read": "https://miscsubjects.com/api/directory/OUTREACH_SHEET_SYNC",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OUTREACH_SHEET_SYNC",
        "body": ""
      },
      "router_tag": "[OUTREACH_SHEET_SYNC]args[/OUTREACH_SHEET_SYNC]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PEPTIDE_WRITER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "grok-4.3",
      "description": "PEPTIDE_WRITER — 57-article content map",
      "read": "https://miscsubjects.com/api/directory/PEPTIDE_WRITER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PEPTIDE_WRITER",
        "body": ""
      },
      "router_tag": "[PEPTIDE_WRITER]args[/PEPTIDE_WRITER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROMPT_LAB_AGENT",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/PROMPT_LAB_AGENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROMPT_LAB_AGENT",
        "body": ""
      },
      "router_tag": "[PROMPT_LAB_AGENT]args[/PROMPT_LAB_AGENT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROOF_PING",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://miscsubjects.com/api/proof",
      "description": "WHAT: GET the /api/proof page and return the raw HTML for verification. WHEN_TO_USE: the user wants to check the proof/liveness endpoint. RETURNS: raw HTTP body.",
      "read": "https://miscsubjects.com/api/directory/PROOF_PING",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROOF_PING",
        "body": ""
      },
      "router_tag": "[PROOF_PING]args[/PROOF_PING]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROVEN_WORK_SPEC",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://miscsubjects.com/api/articles/proven-work?format=markdown",
      "description": "PROVEN_WORK_SPEC — the evolving product spec every loop rep must meet. Versioned; amend by appending a version block with the exhibit (a field-audit criticism that survived). Canonical definition: https://miscsubjects.com/a/proven-work",
      "read": "https://miscsubjects.com/api/directory/PROVEN_WORK_SPEC",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROVEN_WORK_SPEC",
        "body": ""
      },
      "router_tag": "[PROVEN_WORK_SPEC]args[/PROVEN_WORK_SPEC]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "R2_DEL",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "r2Del",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/R2_DEL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "R2_DEL",
        "body": ""
      },
      "router_tag": "[R2_DEL]args[/R2_DEL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "R2_GET",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "r2Get",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/R2_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "R2_GET",
        "body": ""
      },
      "router_tag": "[R2_GET]args[/R2_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "R2_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "r2List",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/R2_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "R2_LIST",
        "body": ""
      },
      "router_tag": "[R2_LIST]args[/R2_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "R2_PUT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "r2Put",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/R2_PUT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "R2_PUT",
        "body": ""
      },
      "router_tag": "[R2_PUT]args[/R2_PUT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "REGEX_PARSE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "regexParse",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/REGEX_PARSE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "REGEX_PARSE",
        "body": ""
      },
      "router_tag": "[REGEX_PARSE]args[/REGEX_PARSE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "REMEMBER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "directoryAppendContent",
      "description": "WHAT: Additive memory. Append ONE line to a directory rows content without touching the rest. $1=row key (use ROUTER for your own memory), $2=the line. INVOKE: [REMEMBER]ROUTER|- <one-line memory>[/REMEMBER] WHEN_TO_USE: you need to remember ARGS: $1 | $2 EX: [REMEMBER]arg1|arg2[/REMEMBER]",
      "read": "https://miscsubjects.com/api/directory/REMEMBER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "REMEMBER",
        "body": ""
      },
      "router_tag": "[REMEMBER]args[/REMEMBER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "RESEARCH_BOT",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/RESEARCH_BOT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "RESEARCH_BOT",
        "body": ""
      },
      "router_tag": "[RESEARCH_BOT]args[/RESEARCH_BOT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SEND_INVOICE_VIA_BLOOIO",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "stripeSendInvoice",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/SEND_INVOICE_VIA_BLOOIO",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SEND_INVOICE_VIA_BLOOIO",
        "body": ""
      },
      "router_tag": "[SEND_INVOICE_VIA_BLOOIO]args[/SEND_INVOICE_VIA_BLOOIO]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_ACCOUNT",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/account",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_ACCOUNT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_ACCOUNT",
        "body": ""
      },
      "router_tag": "[STRIPE_ACCOUNT]args[/STRIPE_ACCOUNT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_BALANCE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/balance",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_BALANCE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_BALANCE",
        "body": ""
      },
      "router_tag": "[STRIPE_BALANCE]args[/STRIPE_BALANCE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_BALANCE_TX_LIST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/balance_transactions?limit=$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_BALANCE_TX_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_BALANCE_TX_LIST",
        "body": ""
      },
      "router_tag": "[STRIPE_BALANCE_TX_LIST]args[/STRIPE_BALANCE_TX_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_CHARGE_GET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/charges/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_CHARGE_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_CHARGE_GET",
        "body": ""
      },
      "router_tag": "[STRIPE_CHARGE_GET]args[/STRIPE_CHARGE_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_CHARGES_LIST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/charges?limit=$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_CHARGES_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_CHARGES_LIST",
        "body": ""
      },
      "router_tag": "[STRIPE_CHARGES_LIST]args[/STRIPE_CHARGES_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_CUSTOMER_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/customers",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_CUSTOMER_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_CUSTOMER_CREATE",
        "body": ""
      },
      "router_tag": "[STRIPE_CUSTOMER_CREATE]args[/STRIPE_CUSTOMER_CREATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_CUSTOMER_DELETE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "DELETE https://api.stripe.com/v1/customers/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_CUSTOMER_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_CUSTOMER_DELETE",
        "body": ""
      },
      "router_tag": "[STRIPE_CUSTOMER_DELETE]args[/STRIPE_CUSTOMER_DELETE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_CUSTOMER_GET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/customers/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_CUSTOMER_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_CUSTOMER_GET",
        "body": ""
      },
      "router_tag": "[STRIPE_CUSTOMER_GET]args[/STRIPE_CUSTOMER_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_CUSTOMER_SEARCH",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/customers/search?query=$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_CUSTOMER_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_CUSTOMER_SEARCH",
        "body": ""
      },
      "router_tag": "[STRIPE_CUSTOMER_SEARCH]args[/STRIPE_CUSTOMER_SEARCH]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_CUSTOMER_UPDATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/customers/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_CUSTOMER_UPDATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_CUSTOMER_UPDATE",
        "body": ""
      },
      "router_tag": "[STRIPE_CUSTOMER_UPDATE]args[/STRIPE_CUSTOMER_UPDATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_CUSTOMERS_LIST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/customers?limit=$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_CUSTOMERS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_CUSTOMERS_LIST",
        "body": ""
      },
      "router_tag": "[STRIPE_CUSTOMERS_LIST]args[/STRIPE_CUSTOMERS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_EVENTS_LIST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/events?limit=$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_EVENTS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_EVENTS_LIST",
        "body": ""
      },
      "router_tag": "[STRIPE_EVENTS_LIST]args[/STRIPE_EVENTS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_INVOICE_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/invoices",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_INVOICE_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_INVOICE_CREATE",
        "body": ""
      },
      "router_tag": "[STRIPE_INVOICE_CREATE]args[/STRIPE_INVOICE_CREATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_INVOICE_DELETE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "DELETE https://api.stripe.com/v1/invoices/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_INVOICE_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_INVOICE_DELETE",
        "body": ""
      },
      "router_tag": "[STRIPE_INVOICE_DELETE]args[/STRIPE_INVOICE_DELETE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_INVOICE_FINALIZE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/invoices/$1/finalize",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_INVOICE_FINALIZE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_INVOICE_FINALIZE",
        "body": ""
      },
      "router_tag": "[STRIPE_INVOICE_FINALIZE]args[/STRIPE_INVOICE_FINALIZE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_INVOICE_GET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/invoices/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_INVOICE_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_INVOICE_GET",
        "body": ""
      },
      "router_tag": "[STRIPE_INVOICE_GET]args[/STRIPE_INVOICE_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_INVOICE_ITEM_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/invoiceitems",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_INVOICE_ITEM_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_INVOICE_ITEM_CREATE",
        "body": ""
      },
      "router_tag": "[STRIPE_INVOICE_ITEM_CREATE]args[/STRIPE_INVOICE_ITEM_CREATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_INVOICE_ITEM_DELETE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "DELETE https://api.stripe.com/v1/invoiceitems/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_INVOICE_ITEM_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_INVOICE_ITEM_DELETE",
        "body": ""
      },
      "router_tag": "[STRIPE_INVOICE_ITEM_DELETE]args[/STRIPE_INVOICE_ITEM_DELETE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_INVOICE_ITEMS_LIST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/invoiceitems?customer=$1&limit=$2",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_INVOICE_ITEMS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_INVOICE_ITEMS_LIST",
        "body": ""
      },
      "router_tag": "[STRIPE_INVOICE_ITEMS_LIST]args[/STRIPE_INVOICE_ITEMS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_INVOICE_MARK_UNCOLLECTIBLE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/invoices/$1/mark_uncollectible",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_INVOICE_MARK_UNCOLLECTIBLE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_INVOICE_MARK_UNCOLLECTIBLE",
        "body": ""
      },
      "router_tag": "[STRIPE_INVOICE_MARK_UNCOLLECTIBLE]args[/STRIPE_INVOICE_MARK_UNCOLLECTIBLE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_INVOICE_PAY",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/invoices/$1/pay",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_INVOICE_PAY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_INVOICE_PAY",
        "body": ""
      },
      "router_tag": "[STRIPE_INVOICE_PAY]args[/STRIPE_INVOICE_PAY]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_INVOICE_SEND",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/invoices/$1/send",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_INVOICE_SEND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_INVOICE_SEND",
        "body": ""
      },
      "router_tag": "[STRIPE_INVOICE_SEND]args[/STRIPE_INVOICE_SEND]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_INVOICE_UPDATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/invoices/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_INVOICE_UPDATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_INVOICE_UPDATE",
        "body": ""
      },
      "router_tag": "[STRIPE_INVOICE_UPDATE]args[/STRIPE_INVOICE_UPDATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_INVOICE_VOID",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/invoices/$1/void",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_INVOICE_VOID",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_INVOICE_VOID",
        "body": ""
      },
      "router_tag": "[STRIPE_INVOICE_VOID]args[/STRIPE_INVOICE_VOID]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_INVOICES_LIST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/invoices?limit=$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_INVOICES_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_INVOICES_LIST",
        "body": ""
      },
      "router_tag": "[STRIPE_INVOICES_LIST]args[/STRIPE_INVOICES_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PAYMENT_LINK_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/payment_links",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_PAYMENT_LINK_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PAYMENT_LINK_CREATE",
        "body": ""
      },
      "router_tag": "[STRIPE_PAYMENT_LINK_CREATE]args[/STRIPE_PAYMENT_LINK_CREATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PAYMENT_LINKS_LIST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/payment_links?limit=$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_PAYMENT_LINKS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PAYMENT_LINKS_LIST",
        "body": ""
      },
      "router_tag": "[STRIPE_PAYMENT_LINKS_LIST]args[/STRIPE_PAYMENT_LINKS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PAYOUT_GET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/payouts/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_PAYOUT_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PAYOUT_GET",
        "body": ""
      },
      "router_tag": "[STRIPE_PAYOUT_GET]args[/STRIPE_PAYOUT_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PAYOUTS_LIST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/payouts?limit=$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_PAYOUTS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PAYOUTS_LIST",
        "body": ""
      },
      "router_tag": "[STRIPE_PAYOUTS_LIST]args[/STRIPE_PAYOUTS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PI_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/payment_intents",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_PI_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PI_CREATE",
        "body": ""
      },
      "router_tag": "[STRIPE_PI_CREATE]args[/STRIPE_PI_CREATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PI_GET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/payment_intents/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_PI_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PI_GET",
        "body": ""
      },
      "router_tag": "[STRIPE_PI_GET]args[/STRIPE_PI_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PI_LIST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/payment_intents?limit=$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_PI_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PI_LIST",
        "body": ""
      },
      "router_tag": "[STRIPE_PI_LIST]args[/STRIPE_PI_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PRICE_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/prices",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_PRICE_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PRICE_CREATE",
        "body": ""
      },
      "router_tag": "[STRIPE_PRICE_CREATE]args[/STRIPE_PRICE_CREATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PRICE_GET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/prices/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_PRICE_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PRICE_GET",
        "body": ""
      },
      "router_tag": "[STRIPE_PRICE_GET]args[/STRIPE_PRICE_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PRICES_LIST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/prices?limit=$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_PRICES_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PRICES_LIST",
        "body": ""
      },
      "router_tag": "[STRIPE_PRICES_LIST]args[/STRIPE_PRICES_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PRODUCT_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/products",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_PRODUCT_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PRODUCT_CREATE",
        "body": ""
      },
      "router_tag": "[STRIPE_PRODUCT_CREATE]args[/STRIPE_PRODUCT_CREATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PRODUCT_GET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/products/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_PRODUCT_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PRODUCT_GET",
        "body": ""
      },
      "router_tag": "[STRIPE_PRODUCT_GET]args[/STRIPE_PRODUCT_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PRODUCTS_LIST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/products?limit=$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_PRODUCTS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PRODUCTS_LIST",
        "body": ""
      },
      "router_tag": "[STRIPE_PRODUCTS_LIST]args[/STRIPE_PRODUCTS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_REFUND_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.stripe.com/v1/refunds",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_REFUND_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_REFUND_CREATE",
        "body": ""
      },
      "router_tag": "[STRIPE_REFUND_CREATE]args[/STRIPE_REFUND_CREATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_REFUNDS_LIST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/refunds?limit=$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_REFUNDS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_REFUNDS_LIST",
        "body": ""
      },
      "router_tag": "[STRIPE_REFUNDS_LIST]args[/STRIPE_REFUNDS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_SUBSCRIPTION_CANCEL",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "DELETE https://api.stripe.com/v1/subscriptions/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_SUBSCRIPTION_CANCEL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_SUBSCRIPTION_CANCEL",
        "body": ""
      },
      "router_tag": "[STRIPE_SUBSCRIPTION_CANCEL]args[/STRIPE_SUBSCRIPTION_CANCEL]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_SUBSCRIPTION_GET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/subscriptions/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_SUBSCRIPTION_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_SUBSCRIPTION_GET",
        "body": ""
      },
      "router_tag": "[STRIPE_SUBSCRIPTION_GET]args[/STRIPE_SUBSCRIPTION_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_SUBSCRIPTIONS_LIST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.stripe.com/v1/subscriptions?limit=$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/STRIPE_SUBSCRIPTIONS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_SUBSCRIPTIONS_LIST",
        "body": ""
      },
      "router_tag": "[STRIPE_SUBSCRIPTIONS_LIST]args[/STRIPE_SUBSCRIPTIONS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TASKS_LIST",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": null,
      "target": null,
      "description": null,
      "read": "https://miscsubjects.com/api/directory/TASKS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TASKS_LIST",
        "body": ""
      },
      "router_tag": "[TASKS_LIST]args[/TASKS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TEAM_RUN",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "pairRun",
      "description": "WHAT: Two agents reason against each other on a goal, bounded rounds, converge. $1=goal $2=proposer(default CODE_AUDIT) $3=critic(default CRITIC) $4=rounds(default 3) WHEN_TO_USE: you need to team run ARGS: $1 | $2 | $3 | $4 EX: [TEAM_RUN]arg1|arg2|arg3|arg4[/TEAM_RUN]",
      "read": "https://miscsubjects.com/api/directory/TEAM_RUN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TEAM_RUN",
        "body": ""
      },
      "router_tag": "[TEAM_RUN]args[/TEAM_RUN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TODO_RUN",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "taskRunNext",
      "description": "WHAT: Run the next open task in the build to-do (tasks table) through the ROUTER. $1=mode; pass force to run on-demand. Cron calls it every 5 min, gated by KV todo_autorun WHEN_TO_USE: you need to todo run ARGS: $1 EX: [TODO_RUN]arg1[/TODO_RUN]",
      "read": "https://miscsubjects.com/api/directory/TODO_RUN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TODO_RUN",
        "body": ""
      },
      "router_tag": "[TODO_RUN]args[/TODO_RUN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TWOCHAT_GROUP_LIST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.p.2chat.io/open/whatsapp/groups/$1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/TWOCHAT_GROUP_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TWOCHAT_GROUP_LIST",
        "body": ""
      },
      "router_tag": "[TWOCHAT_GROUP_LIST]args[/TWOCHAT_GROUP_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TWOCHAT_GROUP_MESSAGES",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.p.2chat.io/open/whatsapp/groups/messages/$2?page_number=$3",
      "description": "WHAT: Read the recent messages of one WhatsApp GROUP (2chat), so a model can catch up on a thread before replying. WHEN_TO_USE: before answering in a WhatsApp group - read what was actually said. ARGS: $1=from_number (connected WhatsApp number, e.g. <owner line, not public>), $2=group_uuid (WAG...), $3=page_number (0-based, default 0). EX: [TWOCHAT_GROUP_MESSAGES]<owner line, not public>|WAG5d62551c-2cd9-487a-8ab1-47f55acf534b|0[/TWOCHAT_GROUP_MESSAGES]",
      "read": "https://miscsubjects.com/api/directory/TWOCHAT_GROUP_MESSAGES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TWOCHAT_GROUP_MESSAGES",
        "body": ""
      },
      "router_tag": "[TWOCHAT_GROUP_MESSAGES]args[/TWOCHAT_GROUP_MESSAGES]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TWOCHAT_PROBE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "GET https://api.p.2chat.io/open/whatsapp/get-numbers",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/TWOCHAT_PROBE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TWOCHAT_PROBE",
        "body": ""
      },
      "router_tag": "[TWOCHAT_PROBE]args[/TWOCHAT_PROBE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TWOCHAT_SEND_GROUP",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.p.2chat.io/open/whatsapp/send-message",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/TWOCHAT_SEND_GROUP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TWOCHAT_SEND_GROUP",
        "body": ""
      },
      "router_tag": "[TWOCHAT_SEND_GROUP]args[/TWOCHAT_SEND_GROUP]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WRITER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/WRITER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WRITER",
        "body": ""
      },
      "router_tag": "[WRITER]args[/WRITER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WRITER_AGENT",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": null,
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/WRITER_AGENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WRITER_AGENT",
        "body": ""
      },
      "router_tag": "[WRITER_AGENT]args[/WRITER_AGENT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "X_POST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": null,
      "target": "xPost",
      "description": "WHAT: Publish one exact plain-text post to X as @CannibalCapital through OAuth user context. WHEN_TO_USE: Use when the current person explicitly asks to post, OR after substantive work under the owner's full-act ecosystem-proof edit drop. That drop itself authorizes one work-then-publish close; do not ask for confirmation again. Never narrow the ecosystem-proof drop to NOW,RELAY_POST_APPEND,X_POST. ARGS: $1 = exact plain post text, maximum 280 characters. Browser lane: body=URL_ENCODED_EXACT_POST_TEXT once. Never pass {\"text\":\"...\"} and never pass an already encoded JSON wrapper. For an ecosystem-proof-work-then-publish capability, the first line is exactly [EXECUTION SURFACE · EXACT MODEL NAME · YYYY-MM-DD HH:MM UTC]. The remaining body is third-person: no I/me/my/mine/we/us/our/ours. It leads with a concrete observed result, failure, boundary, mutation, provider response, receipt, or hash—not generic hype. VOICE: Bar stock phrases including one door, rival models, game-changer, the future is here, this is wild, verify don't trust, every action leaves a receipt, and generic ran OIP end-to-end copy. Incognito is written in the execution-surface label, for example ChatGPT Web (incognito); it never removes the model name or UTC timestamp. COMPLETION: Posted means the result contains ok:true, provider status 200/201, non-empty id, and https://x.com/i/web/status/ID. Return that direct X URL first, then the inv_ receipt and relay append. A receipt, proof.ok, attempted call, relay URL, or unsupported claim of deduplication is not the post URL. DEDUPE: Say deduplicated only when the server literally returns deduped:true. Read the referenced original receipt and extract its X provider URL; if no provider URL exists, report NOT POSTED. TESTS: Reject empty or over-280 normalized text. A tap-go-social-proof invocation rejects missing attribution, first person, generic hype, or missing incognito label. A provider 2xx without id/url fails. Echoed/requested text contains no encoded JSON wrapper, URL corruption, or credential material. EX: X_POST body begins [Codex CLI · GPT-5.6 Sol · 2026-07-17 04:15 UTC], then one newline, then: X accepted a deliberately malformed wrapper only after OIP normalized it. Receipt: https://miscsubjects.com/receipt/inv_ID",
      "read": "https://miscsubjects.com/api/directory/X_POST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "X_POST",
        "body": ""
      },
      "router_tag": "[X_POST]args[/X_POST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "X_SEARCH",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": null,
      "target": "POST https://api.x.ai/v1/responses",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/X_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "X_SEARCH",
        "body": ""
      },
      "router_tag": "[X_SEARCH]args[/X_SEARCH]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_ADVERSARY_GLM52",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "adjudication",
      "target": "@cf/zai-org/glm-5.2",
      "description": "WHAT: The mandatory recorded adversary in an adjudication. Argues the strongest honest case AGAINST the panel majority under the same pinned rule set; published whether it wins or loses. Executing model: @cf/zai-org/glm-5.2. WHEN_TO_USE: always, on any adjudication whose finding will be relied on. A panel with no recorded dissent is a poll. ARGS: RULESET, RULESET_HASH, CLAIM, SOURCE, MAJORITY, MODEL_TARGET. EX: [ADJUDICATE_ADVERSARY_GLM52]RULESET_HASH: <hash> | MAJORITY: AFFIRM | MODEL_TARGET: @cf/zai-org/glm-5.2 | CLAIM: ... | SOURCE: ...[/ADJUDICATE_ADVERSARY_GLM52]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_ADVERSARY_GLM52",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_ADVERSARY_GLM52",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_ADVERSARY_GLM52]args[/ADJUDICATE_ADVERSARY_GLM52]",
      "input_schema": {
        "type": "object",
        "properties": {
          "body": {
            "type": "string",
            "description": "RULESET, RULESET_HASH, CLAIM, SOURCE, MAJORITY, MODEL_TARGET"
          }
        },
        "required": [
          "body"
        ]
      },
      "examples": "[{\"body\": \"RULESET_HASH: <hash>\\nMAJORITY: CANNOT_CONCLUDE\\nMODEL_TARGET: @cf/zai-org/glm-5.2\\nRULESET:\\nQUESTION: ...\\n1. ...\\nCLAIM: <claim>\\nSOURCE:\\n<verbatim>\", \"why\": \"records the strongest case against the majority so a finding is not a rubber stamp\"}]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_GLM_52",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "adjudication",
      "target": "@cf/zai-org/glm-5.2",
      "description": "WHAT: One signed adjudication finding on a claim against a cited source, under a published rule set pinned at a content hash. Verdicts: AFFIRM | DENY | CANNOT_CONCLUDE. Executing model: @cf/zai-org/glm-5.2 — the key names this model and no other. WHEN_TO_USE: you need a checkable finding about whether a source supports a claim, whether a statutory obligation applies, whether a record was in a dataset, or whether an identity matches — with the rules, the exposure and the signature on the record. ARGS: the adjudication body: RULESET_URL, RULESET_HASH, RULESET, CLAIM, ARTIFACT_HASH, MODEL_TARGET (must equal this row's target), SOURCE, optional PRIOR_FINDINGS. EX: [ADJUDICATE_GLM_52]RULESET_HASH: <hash> | MODEL_TARGET: @cf/zai-org/glm-5.2 | CLAIM: ... | SOURCE: ...[/ADJUDICATE_GLM_52]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_GLM_52",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_GLM_52",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_GLM_52]args[/ADJUDICATE_GLM_52]",
      "input_schema": {
        "type": "object",
        "properties": {
          "body": {
            "type": "string",
            "description": "RULESET_URL, RULESET_HASH, RULESET, CLAIM, ARTIFACT_HASH, MODEL_TARGET (= this row's target), SOURCE, optional PRIOR_FINDINGS"
          }
        },
        "required": [
          "body"
        ]
      },
      "examples": "[{\"body\": \"RULESET_HASH: <hash>\\nMODEL_TARGET: @cf/zai-org/glm-5.2\\nRULESET:\\nQUESTION: Does the cited source support the claim as stated?\\n1. AFFIRM only if a verbatim span establishes the claim.\\nCLAIM: <claim>\\nARTIFACT_HASH: <sha256 of the source bytes>\\nSOURCE:\\n<verbatim text>\", \"why\": \"one blinded independent finding signed with the model that actually ran\"}]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_GLM_FLASH",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "adjudication",
      "target": "@cf/zai-org/glm-4.7-flash",
      "description": "WHAT: One signed adjudication finding on a claim against a cited source, under a published rule set pinned at a content hash. Verdicts: AFFIRM | DENY | CANNOT_CONCLUDE. Executing model: @cf/zai-org/glm-4.7-flash — the key names this model and no other. WHEN_TO_USE: you need a checkable finding about whether a source supports a claim, whether a statutory obligation applies, whether a record was in a dataset, or whether an identity matches — with the rules, the exposure and the signature on the record. ARGS: the adjudication body: RULESET_URL, RULESET_HASH, RULESET, CLAIM, ARTIFACT_HASH, MODEL_TARGET (must equal this row's target), SOURCE, optional PRIOR_FINDINGS. EX: [ADJUDICATE_GLM_FLASH]RULESET_HASH: <hash> | MODEL_TARGET: @cf/zai-org/glm-4.7-flash | CLAIM: ... | SOURCE: ...[/ADJUDICATE_GLM_FLASH]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_GLM_FLASH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_GLM_FLASH",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_GLM_FLASH]args[/ADJUDICATE_GLM_FLASH]",
      "input_schema": {
        "type": "object",
        "properties": {
          "body": {
            "type": "string",
            "description": "RULESET_URL, RULESET_HASH, RULESET, CLAIM, ARTIFACT_HASH, MODEL_TARGET (= this row's target), SOURCE, optional PRIOR_FINDINGS"
          }
        },
        "required": [
          "body"
        ]
      },
      "examples": "[{\"body\": \"RULESET_HASH: <hash>\\nMODEL_TARGET: @cf/zai-org/glm-4.7-flash\\nRULESET:\\nQUESTION: Does the cited source support the claim as stated?\\n1. AFFIRM only if a verbatim span establishes the claim.\\nCLAIM: <claim>\\nARTIFACT_HASH: <sha256 of the source bytes>\\nSOURCE:\\n<verbatim text>\", \"why\": \"one blinded independent finding signed with the model that actually ran\"}]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_HUMAN_REVIEW",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "adjudication",
      "target": "@cf/zai-org/glm-5.2",
      "description": "WHAT: Record a named human reviewer's finding on an adjudication, with BLINDED as a required field. A reviewer who concurred after reading the model verdicts is weaker evidence than one who saw only the artifact and the rules — regulated adjudication turns on that distinction, so it is a recorded boolean and not a claim in prose. WHEN_TO_USE: after a model panel has run, before any finding is relied on for a consequence. ARGS: RULESET_HASH, ARTIFACT_HASH, REVIEWER, BLINDED, VERDICT, BASIS, DATE. EX: [ADJUDICATE_HUMAN_REVIEW]RULESET_HASH: 0dd9afef | ARTIFACT_HASH: 6b0d... | REVIEWER: Jane Roe, compliance counsel | BLINDED: true | VERDICT: CANNOT_CONCLUDE | BASIS: provision addresses providers; characterisation of the site is not in the supplied text | DATE: 2026-07-30[/ADJUDICATE_HUMAN_REVIEW]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_HUMAN_REVIEW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_HUMAN_REVIEW",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_HUMAN_REVIEW]args[/ADJUDICATE_HUMAN_REVIEW]",
      "input_schema": {
        "type": "object",
        "properties": {
          "body": {
            "type": "string",
            "description": "RULESET_HASH, ARTIFACT_HASH, REVIEWER, BLINDED, VERDICT, BASIS, DATE"
          }
        },
        "required": [
          "body"
        ]
      },
      "examples": "[{\"body\": \"RULESET_HASH: 0dd9afef93503a92\\nARTIFACT_HASH: <sha256>\\nREVIEWER: Jane Roe, compliance counsel\\nBLINDED: true\\nVERDICT: CANNOT_CONCLUDE\\nBASIS: The supplied provision addresses providers; whether a publisher is a provider is not settled by the text supplied.\\nDATE: 2026-07-30\", \"why\": \"a blinded named human finding on top of the model panel, with the blinding recorded rather than asserted\"}]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_IMAGE_LLAMA32",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "adjudication",
      "target": "@cf/meta/llama-3.2-11b-vision-instruct",
      "description": "WHAT: One signed attesting finding over an IMAGE plus a supplied record, under a rule set pinned at a content hash. The pixels are fetched and put in the message, so the finding is about what the model saw rather than about a URL it could not open. Verdicts: AFFIRM | DENY | CANNOT_CONCLUDE. RECORDS_ABSENT is mandatory and its omission voids the finding. Executing model: @cf/meta/llama-3.2-11b-vision-instruct — the key names this model and no other. WHEN_TO_USE: any question whose answer depends on an image AND a record, where the reader must be able to check a year later what the model was given, what it was not given, and which clause each step conformed to. ARGS: the adjudication body. Must contain RULESET_URL, RULESET_HASH, RULESET (numbered clauses), the question, IMAGE_URL on its own line (https; the bytes are fetched and hashed into the recorded request), IMAGE_SHA256, the record and its hash, and MODEL_TARGET. EX: [ADJUDICATE_IMAGE_LLAMA32]QUESTION PUT TO YOU: is a nodule present? | RULESET_HASH: c8823baf... | IMAGE_URL: https://miscsubjects.com/img/gen/x.png | MODEL_TARGET: @cf/meta/llama-3.2-11b-vision-instruct[/ADJUDICATE_IMAGE_LLAMA32]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_IMAGE_LLAMA32",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_IMAGE_LLAMA32",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_IMAGE_LLAMA32]args[/ADJUDICATE_IMAGE_LLAMA32]",
      "input_schema": null,
      "examples": "[{\"body\": \"QUESTION PUT TO YOU: Is a pulmonary nodule present in the supplied image?\\nRULESET_HASH: c8823bafd3b3946c234d802e78e74e846206a965c34f0912836040aac3781962\\nIMAGE_URL: https://miscsubjects.com/img/gen/arcads-seedream-radiograph-f4c6d0f3-334b-43ec-9b12-250ad8244005.png\\nMODEL_TARGET: @cf/meta/llama-3.2-11b-vision-instruct\"}]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_KIMI_K26",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "adjudication",
      "target": "@cf/moonshotai/kimi-k2.6",
      "description": "WHAT: One signed adjudication finding on a claim against a cited source, under a published rule set pinned at a content hash. Verdicts: AFFIRM | DENY | CANNOT_CONCLUDE. Executing model: @cf/moonshotai/kimi-k2.6 — the key names this model and no other. WHEN_TO_USE: you need a checkable finding about whether a source supports a claim, whether a statutory obligation applies, whether a record was in a dataset, or whether an identity matches — with the rules, the exposure and the signature on the record. ARGS: the adjudication body: RULESET_URL, RULESET_HASH, RULESET, CLAIM, ARTIFACT_HASH, MODEL_TARGET (must equal this row's target), SOURCE, optional PRIOR_FINDINGS. EX: [ADJUDICATE_KIMI_K26]RULESET_HASH: <hash> | MODEL_TARGET: @cf/moonshotai/kimi-k2.6 | CLAIM: ... | SOURCE: ...[/ADJUDICATE_KIMI_K26]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_KIMI_K26",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_KIMI_K26",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_KIMI_K26]args[/ADJUDICATE_KIMI_K26]",
      "input_schema": {
        "type": "object",
        "properties": {
          "body": {
            "type": "string",
            "description": "RULESET_URL, RULESET_HASH, RULESET, CLAIM, ARTIFACT_HASH, MODEL_TARGET (= this row's target), SOURCE, optional PRIOR_FINDINGS"
          }
        },
        "required": [
          "body"
        ]
      },
      "examples": "[{\"body\": \"RULESET_HASH: <hash>\\nMODEL_TARGET: @cf/moonshotai/kimi-k2.6\\nRULESET:\\nQUESTION: Does the cited source support the claim as stated?\\n1. AFFIRM only if a verbatim span establishes the claim.\\nCLAIM: <claim>\\nARTIFACT_HASH: <sha256 of the source bytes>\\nSOURCE:\\n<verbatim text>\", \"why\": \"one blinded independent finding signed with the model that actually ran\"}]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_KIMI_K27",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "adjudication",
      "target": "@cf/moonshotai/kimi-k2.7-code",
      "description": "WHAT: One signed adjudication finding on a claim against a cited source, under a published rule set pinned at a content hash. Verdicts: AFFIRM | DENY | CANNOT_CONCLUDE. Executing model: @cf/moonshotai/kimi-k2.7-code — the key names this model and no other. WHEN_TO_USE: you need a checkable finding about whether a source supports a claim, whether a statutory obligation applies, whether a record was in a dataset, or whether an identity matches — with the rules, the exposure and the signature on the record. ARGS: the adjudication body: RULESET_URL, RULESET_HASH, RULESET, CLAIM, ARTIFACT_HASH, MODEL_TARGET (must equal this row's target), SOURCE, optional PRIOR_FINDINGS. EX: [ADJUDICATE_KIMI_K27]RULESET_HASH: <hash> | MODEL_TARGET: @cf/moonshotai/kimi-k2.7-code | CLAIM: ... | SOURCE: ...[/ADJUDICATE_KIMI_K27]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_KIMI_K27",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_KIMI_K27",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_KIMI_K27]args[/ADJUDICATE_KIMI_K27]",
      "input_schema": {
        "type": "object",
        "properties": {
          "body": {
            "type": "string",
            "description": "RULESET_URL, RULESET_HASH, RULESET, CLAIM, ARTIFACT_HASH, MODEL_TARGET (= this row's target), SOURCE, optional PRIOR_FINDINGS"
          }
        },
        "required": [
          "body"
        ]
      },
      "examples": "[{\"body\": \"RULESET_HASH: <hash>\\nMODEL_TARGET: @cf/moonshotai/kimi-k2.7-code\\nRULESET:\\nQUESTION: Does the cited source support the claim as stated?\\n1. AFFIRM only if a verbatim span establishes the claim.\\nCLAIM: <claim>\\nARTIFACT_HASH: <sha256 of the source bytes>\\nSOURCE:\\n<verbatim text>\", \"why\": \"one blinded independent finding signed with the model that actually ran\"}]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_LLAMA_33",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "adjudication",
      "target": "@cf/meta/llama-3.3-70b-instruct-fp8-fast",
      "description": "WHAT: One signed adjudication finding on a claim against a cited source, under a published rule set pinned at a content hash. Verdicts: AFFIRM | DENY | CANNOT_CONCLUDE. Executing model: @cf/meta/llama-3.3-70b-instruct-fp8-fast — the key names this model and no other. WHEN_TO_USE: you need a checkable finding about whether a source supports a claim, whether a statutory obligation applies, whether a record was in a dataset, or whether an identity matches — with the rules, the exposure and the signature on the record. ARGS: the adjudication body: RULESET_URL, RULESET_HASH, RULESET, CLAIM, ARTIFACT_HASH, MODEL_TARGET (must equal this row's target), SOURCE, optional PRIOR_FINDINGS. EX: [ADJUDICATE_LLAMA_33]RULESET_HASH: <hash> | MODEL_TARGET: @cf/meta/llama-3.3-70b-instruct-fp8-fast | CLAIM: ... | SOURCE: ...[/ADJUDICATE_LLAMA_33]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_LLAMA_33",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_LLAMA_33",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_LLAMA_33]args[/ADJUDICATE_LLAMA_33]",
      "input_schema": {
        "type": "object",
        "properties": {
          "body": {
            "type": "string",
            "description": "RULESET_URL, RULESET_HASH, RULESET, CLAIM, ARTIFACT_HASH, MODEL_TARGET (= this row's target), SOURCE, optional PRIOR_FINDINGS"
          }
        },
        "required": [
          "body"
        ]
      },
      "examples": "[{\"body\": \"RULESET_HASH: <hash>\\nMODEL_TARGET: @cf/meta/llama-3.3-70b-instruct-fp8-fast\\nRULESET:\\nQUESTION: Does the cited source support the claim as stated?\\n1. AFFIRM only if a verbatim span establishes the claim.\\nCLAIM: <claim>\\nARTIFACT_HASH: <sha256 of the source bytes>\\nSOURCE:\\n<verbatim text>\", \"why\": \"one blinded independent finding signed with the model that actually ran\"}]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADJUDICATE_PROBE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "adjudication",
      "target": "DIRECT_EXEC_IF_PREFIX",
      "description": "WHAT: Known-answer probe for an adjudication panel. Runs claims whose correct verdict is declared IN ADVANCE through the identical adjudication path, so the panel's miss rate and abstention rate are measured per model per rule set rather than assumed. A verdict with an attached error rate is evidence; without one it is an opinion with good paperwork. WHEN_TO_USE: before relying on any panel verdict for a consequence, and at a low rate continuously inside the live adjudication stream. ARGS: probe_set_slug|panel_keys_csv EX: [ADJUDICATE_PROBE]ruleset-claim-support|ADJUDICATE_KIMI,ADJUDICATE_GROK,ADJUDICATE_GLM[/ADJUDICATE_PROBE]",
      "read": "https://miscsubjects.com/api/directory/ADJUDICATE_PROBE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADJUDICATE_PROBE",
        "body": ""
      },
      "router_tag": "[ADJUDICATE_PROBE]args[/ADJUDICATE_PROBE]",
      "input_schema": {
        "type": "object",
        "properties": {
          "probe_set": {
            "type": "string"
          },
          "panel": {
            "type": "string"
          }
        },
        "required": [
          "probe_set"
        ]
      },
      "examples": "[{\"body\": \"ruleset-claim-support|ADJUDICATE_KIMI,ADJUDICATE_GROK,ADJUDICATE_GLM\", \"why\": \"measure this panel's miss rate under the claim-support rules before trusting a verdict\"}]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ALLOCATE_REASONING",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "adjudication",
      "target": "allocateReasoning",
      "description": "WHAT: The runtime allocator. Turns an action and its action class into R (loss exposure), K (complexity) and epsilon (permitted wrongful-action rate) from a VERSIONED SERVER-OWNED policy, selects the least-cost configuration whose MEASURED undetected-wrong rate is at or below that epsilon, executes it so every model payload lands on the ledger, seals it with SEAL_PANEL bound to those records, and then performs the bounded downstream act only if the seal returns APPROVE. NEGATE refuses the act. NO_ACTION leaves it untouched. DISPUTE and ESCALATE create a human-review object bound to a NAMED reviewer plus an audience-bound witness token. If no measured configuration satisfies the policy epsilon for the task class, it ESCALATES rather than guessing. WHEN_TO_USE: any consequential action that must not execute until enough auditable reasoning has been purchased for its consequence. ARGS: one JSON object {action, action_class, question, ruleset_url, ruleset_hash, rules[], artifact, artifact_hash, task_class?, reviewer?, reviewer_audience?}. The caller does NOT supply R, K, epsilon, thresholds or the configuration. EX: [ALLOCATE_REASONING]{\"action\":\"file the clause (c) notice\",\"action_class\":\"board-authority\",\"question\":\"Does this engage the notification duty?\",\"ruleset_hash\":\"0df47944...\",\"rules\":[\"...\"],\"artifact\":\"...\",\"artifact_hash\":\"8c689258...\",\"reviewer\":\"Jane Roe, audit committee chair\"}[/ALLOCATE_REASONING]",
      "read": "https://miscsubjects.com/api/directory/ALLOCATE_REASONING",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ALLOCATE_REASONING",
        "body": ""
      },
      "router_tag": "[ALLOCATE_REASONING]args[/ALLOCATE_REASONING]",
      "input_schema": {
        "type": "object",
        "required": [
          "action",
          "action_class",
          "question",
          "ruleset_hash",
          "rules",
          "artifact_hash"
        ],
        "properties": {
          "action": {
            "type": "string"
          },
          "action_class": {
            "enum": [
              "formatting",
              "internal-bookkeeping",
              "statutory-applicability",
              "board-authority",
              "pre-trade-control",
              "clinical-finding"
            ]
          },
          "question": {
            "type": "string"
          },
          "ruleset_url": {
            "type": "string"
          },
          "ruleset_hash": {
            "type": "string"
          },
          "rules": {
            "type": "array"
          },
          "artifact": {
            "type": "string"
          },
          "artifact_hash": {
            "type": "string"
          },
          "task_class": {
            "type": "string"
          },
          "reviewer": {
            "type": "string"
          },
          "reviewer_audience": {
            "type": "string"
          }
        }
      },
      "examples": "[{\"body\": \"{\\\"action\\\":\\\"write the authorised-action record\\\",\\\"action_class\\\":\\\"statutory-applicability\\\",\\\"question\\\":\\\"Does the obligation apply?\\\",\\\"ruleset_hash\\\":\\\"0dd9afef93503a92280c90869eaf6a5a13ee508b2ec3506045f1803bce1a4d3c\\\",\\\"rules\\\":[\\\"Read only the provision text supplied.\\\"],\\\"artifact\\\":\\\"(provision text)\\\",\\\"artifact_hash\\\":\\\"9d89534fddaece861fcfdda68feff0412061b2832af66f49529a94e8f7ae9f8b\\\",\\\"reviewer\\\":\\\"Jane Roe, compliance counsel\\\"}\"}]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SEAL_PANEL",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "adjudication",
      "target": "sealPanel",
      "description": "WHAT: The sealer. Deterministic arithmetic over a panel's findings that decides what happens to the ACTION and nothing else. No model runs at this position: a model here is a further opinion that can share the panel's blind spot while being the thing that decides. Five outcomes, all arithmetic: APPROVE (unanimous AFFIRM, identical clause citations, enough distinct training families, no malformed finding), NEGATE (unanimous DENY on the same terms - the action is refused, not deferred), NO_ACTION (unanimous CANNOT_CONCLUDE - a required record is missing, so nothing is authorised and nothing is refused), DISPUTE (the only failing test is a stated confidence below the supplied floor), ESCALATE (any verdict divergence, clause-citation divergence, malformed finding, too few channels, or too little training-family diversity). The recorded adversary saw the majority and is never counted as a channel. Independence is not assumed: channels from one training family count once for the diversity test, which is the common-cause discount IEC 61508 calls a beta factor. WHEN_TO_USE: at the end of every panel whose finding will reach a downstream actor. Clause-citation divergence fires before verdict divergence and is the more sensitive detector, so run this rather than counting votes. ARGS: one JSON object {findings:[{model,verdict,clauses|reasoning,confidence?,invocation_id,exposure,role}], min_families?, min_findings?, min_confidence?, escalate_to?} EX: [SEAL_PANEL]{\"findings\":[{\"model\":\"@cf/moonshotai/kimi-k2.7-code\",\"verdict\":\"AFFIRM\",\"clauses\":[2,6],\"confidence\":0.99}],\"min_families\":3,\"min_confidence\":0.95}[/SEAL_PANEL]",
      "read": "https://miscsubjects.com/api/directory/SEAL_PANEL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SEAL_PANEL",
        "body": ""
      },
      "router_tag": "[SEAL_PANEL]args[/SEAL_PANEL]",
      "input_schema": {
        "type": "object",
        "required": [
          "findings"
        ],
        "properties": {
          "findings": {
            "type": "array"
          },
          "min_families": {
            "type": "number"
          },
          "min_findings": {
            "type": "number"
          },
          "min_confidence": {
            "type": "number"
          },
          "escalate_to": {
            "type": "string"
          }
        }
      },
      "examples": "[{\"body\": \"{\\\"findings\\\":[{\\\"model\\\":\\\"@cf/moonshotai/kimi-k2.7-code\\\",\\\"verdict\\\":\\\"AFFIRM\\\",\\\"clauses\\\":[2,6],\\\"confidence\\\":0.99},{\\\"model\\\":\\\"@cf/zai-org/glm-5.2\\\",\\\"verdict\\\":\\\"AFFIRM\\\",\\\"clauses\\\":[2,6],\\\"confidence\\\":0.97},{\\\"model\\\":\\\"@cf/meta/llama-3.3-70b-instruct-fp8-fast\\\",\\\"verdict\\\":\\\"AFFIRM\\\",\\\"clauses\\\":[2,6],\\\"confidence\\\":0.96}],\\\"min_families\\\":3,\\\"min_confidence\\\":0.95}\"}]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WITNESS_MINT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "adjudication",
      "target": "capMint",
      "description": "WHAT: Mint a WITNESS token: read-only authority over ONE adjudication, bound to a named audience, revocable, with its own ledger trail. Three parties can each hold one over the same finding; none holds operator authority and none must trust the others. A token forwarded to any party other than its audience fails closed. Every use is recorded. WHEN_TO_USE: any finding more than one party must check independently. Proves independent VERIFICATION, not independent execution. ARGS: $1 = adjudication id (inv_...) · $2 = audience the token is bound to · $3 = ttl seconds (use 604800 for 7 days) EX: [WITNESS_MINT]inv_qgs2y3gt2x|eu-supervisory-authority|604800[/WITNESS_MINT]",
      "read": "https://miscsubjects.com/api/directory/WITNESS_MINT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WITNESS_MINT",
        "body": ""
      },
      "router_tag": "[WITNESS_MINT]args[/WITNESS_MINT]",
      "input_schema": null,
      "examples": "[{\"body\": \"inv_qgs2y3gt2x|eu-supervisory-authority|604800\"}]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AGENT",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "fn",
      "category": "agent",
      "target": "agentOp",
      "description": "WHAT: Control a resident agent WHEN_TO_USE: you need to agent ARGS: op(status|send|pause|resume|kill|events)|id|msg EX: [AGENT]arg1|arg2|arg3[/AGENT]",
      "read": "https://miscsubjects.com/api/directory/AGENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AGENT",
        "body": ""
      },
      "router_tag": "[AGENT]args[/AGENT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AGENT_LIST",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "fn",
      "category": "agent",
      "target": "agentList",
      "description": "WHAT: List resident agents and their live status WHEN_TO_USE: you need to agent list ARGS: none EX: [AGENT_LIST][/AGENT_LIST]",
      "read": "https://miscsubjects.com/api/directory/AGENT_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AGENT_LIST",
        "body": ""
      },
      "router_tag": "[AGENT_LIST]args[/AGENT_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AGENT_SPAWN",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "fn",
      "category": "agent",
      "target": "agentSpawn",
      "description": "WHAT: Spawn a resident agent that loops on a goal until done (durable, survives Mac sleep) WHEN_TO_USE: you need to agent spawn ARGS: goal|brain|maxSteps EX: [AGENT_SPAWN]arg1|arg2|arg3[/AGENT_SPAWN]",
      "read": "https://miscsubjects.com/api/directory/AGENT_SPAWN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AGENT_SPAWN",
        "body": ""
      },
      "router_tag": "[AGENT_SPAWN]args[/AGENT_SPAWN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARCADS",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "agent",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/ARCADS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARCADS",
        "body": ""
      },
      "router_tag": "[ARCADS]args[/ARCADS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ASK_GEMINI",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "agent",
      "target": "gemini-2.5-flash",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/ASK_GEMINI",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ASK_GEMINI",
        "body": ""
      },
      "router_tag": "[ASK_GEMINI]args[/ASK_GEMINI]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ASK_GPT",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "agent",
      "target": "gpt-4o",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/ASK_GPT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ASK_GPT",
        "body": ""
      },
      "router_tag": "[ASK_GPT]args[/ASK_GPT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ASK_KIMI",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "agent",
      "target": "kimi-k2.6",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/ASK_KIMI",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ASK_KIMI",
        "body": ""
      },
      "router_tag": "[ASK_KIMI]args[/ASK_KIMI]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLOUDFLARE",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "agent",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/CLOUDFLARE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLOUDFLARE",
        "body": ""
      },
      "router_tag": "[CLOUDFLARE]args[/CLOUDFLARE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "COMPUTER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "agent",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/COMPUTER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "COMPUTER",
        "body": ""
      },
      "router_tag": "[COMPUTER]args[/COMPUTER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GITHUB",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "agent",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/GITHUB",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GITHUB",
        "body": ""
      },
      "router_tag": "[GITHUB]args[/GITHUB]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GW_DEEPSEEK",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "agent",
      "target": "gw:openai/gpt-4.1-mini",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/GW_DEEPSEEK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GW_DEEPSEEK",
        "body": ""
      },
      "router_tag": "[GW_DEEPSEEK]args[/GW_DEEPSEEK]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GW_FABLE",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "agent",
      "target": "gw:openai/gpt-4.1-mini",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/GW_FABLE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GW_FABLE",
        "body": ""
      },
      "router_tag": "[GW_FABLE]args[/GW_FABLE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GW_LLAMA",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "agent",
      "target": "gw:@cf/meta/llama-3.3-70b-instruct-fp8-fast",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/GW_LLAMA",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GW_LLAMA",
        "body": ""
      },
      "router_tag": "[GW_LLAMA]args[/GW_LLAMA]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "KIMI",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "agent",
      "target": "kimi-k2.6",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/KIMI",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "KIMI",
        "body": ""
      },
      "router_tag": "[KIMI]args[/KIMI]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OPS",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "agent",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/OPS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OPS",
        "body": ""
      },
      "router_tag": "[OPS]args[/OPS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PEPPER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "agent",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/PEPPER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PEPPER",
        "body": ""
      },
      "router_tag": "[PEPPER]args[/PEPPER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "REASON",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "agent",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/REASON",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "REASON",
        "body": ""
      },
      "router_tag": "[REASON]args[/REASON]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "RESCUE_ROUTER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "agent",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/RESCUE_ROUTER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "RESCUE_ROUTER",
        "body": ""
      },
      "router_tag": "[RESCUE_ROUTER]args[/RESCUE_ROUTER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ROUTER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "agent",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/ROUTER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ROUTER",
        "body": ""
      },
      "router_tag": "[ROUTER]args[/ROUTER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TOOLKIT",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "agent",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/TOOLKIT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TOOLKIT",
        "body": ""
      },
      "router_tag": "[TOOLKIT]args[/TOOLKIT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "VOICE",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "agent",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/VOICE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "VOICE",
        "body": ""
      },
      "router_tag": "[VOICE]args[/VOICE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "XAI_CHAT",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "agent",
      "target": "grok-build-0.1",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/XAI_CHAT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "XAI_CHAT",
        "body": ""
      },
      "router_tag": "[XAI_CHAT]args[/XAI_CHAT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BUILDER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "agents",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/BUILDER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BUILDER",
        "body": ""
      },
      "router_tag": "[BUILDER]args[/BUILDER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PLANNER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "agents",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/PLANNER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PLANNER",
        "body": ""
      },
      "router_tag": "[PLANNER]args[/PLANNER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WAI_EMBED",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "ai",
      "target": "aiEmbed",
      "description": "WHAT: Compute embedding vector(s) for text using a Workers AI embedding model via env.AI binding. $1=text, $2=optional model id (default @cf/baai/bge-base-en-v1.5) WHEN_TO_USE: you need to wai embed ARGS: $1 | $2 EX: [WAI_EMBED]arg1|arg2[/WAI_EMBED]",
      "read": "https://miscsubjects.com/api/directory/WAI_EMBED",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WAI_EMBED",
        "body": ""
      },
      "router_tag": "[WAI_EMBED]args[/WAI_EMBED]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WAI_RUN",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "ai",
      "target": "aiRun",
      "description": "WHAT: Run a Workers AI model via the env.AI binding. $1=model id (e.g. @cf/meta/llama-3.3-70b-instruct), $2=user prompt. Returns the raw JSON from env.AI.run WHEN_TO_USE: you need to wai run ARGS: $1 | $2 EX: [WAI_RUN]arg1|arg2[/WAI_RUN]",
      "read": "https://miscsubjects.com/api/directory/WAI_RUN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WAI_RUN",
        "body": ""
      },
      "router_tag": "[WAI_RUN]args[/WAI_RUN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WAI_T2I",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "ai",
      "target": "aiTextToImage",
      "description": "WHAT: Generate an image from a prompt using a Workers AI text-to-image model via env.AI binding. Stores the result in R2 and returns a stable URL. $1=prompt, $2=optional model id (default @cf/stabilityai/stable-diffusion-xl-base-1.0) WHEN_TO_USE: you need to wai t2i ARGS: $1 | $2 EX: [WAI_T2I]arg1|arg2[/WAI_T2I]",
      "read": "https://miscsubjects.com/api/directory/WAI_T2I",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WAI_T2I",
        "body": ""
      },
      "router_tag": "[WAI_T2I]args[/WAI_T2I]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WAI_TRANSLATE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "ai",
      "target": "aiTranslate",
      "description": "WHAT: Translate text between languages using @cf/meta/m2m100-1.2b via env.AI binding. $1=text, $2=source lang code (default en), $3=target lang code (default es) WHEN_TO_USE: you need to wai translate ARGS: $1 | $2 | $3 EX: [WAI_TRANSLATE]arg1|arg2|arg3[/WAI_TRANSLATE]",
      "read": "https://miscsubjects.com/api/directory/WAI_TRANSLATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WAI_TRANSLATE",
        "body": ""
      },
      "router_tag": "[WAI_TRANSLATE]args[/WAI_TRANSLATE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARCADS_CREDITS",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "arcads",
      "target": "arcadsCredits",
      "description": "WHAT: ArcAds credit usage this month. Returns {month,used,cap,remaining}. Cap from settings.arcads_monthly_credits (80440). Logged from each generate (data.creditsCharged) WHEN_TO_USE: you need to arcads credits ARGS: none EX: [ARCADS_CREDITS][/ARCADS_CREDITS]",
      "read": "https://miscsubjects.com/api/directory/ARCADS_CREDITS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARCADS_CREDITS",
        "body": ""
      },
      "router_tag": "[ARCADS_CREDITS]args[/ARCADS_CREDITS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARCADS_GENERATE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "arcads",
      "target": "arcadsGenerate",
      "description": "WHAT: Generate an ad image via ArcAds, poll to completion, store to R2, return a stable link WHEN_TO_USE: you need to arcads generate ARGS: model|prompt|aspectRatio|referenceImages|productId|enhance EX: [ARCADS_GENERATE]arg1|arg2|arg3|arg4|arg5|arg6[/ARCADS_GENERATE]",
      "read": "https://miscsubjects.com/api/directory/ARCADS_GENERATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARCADS_GENERATE",
        "body": ""
      },
      "router_tag": "[ARCADS_GENERATE]args[/ARCADS_GENERATE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARCADS_ROUTES",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "arcads",
      "target": "target_map:{\"actors\":{\"method\":\"GET\",\"url\":\"https://external-api.arcads.ai/v1/actors?page=1&pageSize=50\"},\"asset_get\":{\"method\":\"GET\",\"url\":\"https://external-api.arcads.ai/v1/assets/$1\"},\"asset_watch\":{\"method\":\"GET\",\"url\":\"https://external-api.arcads.ai/v1/assets/$1/watch\"},\"image_raw\":{\"method\":\"POST\",\"url\":\"https://external-api.arcads.ai/v2/images/generate\",\"body\":\"$1\"},\"presets\":{\"method\":\"GET\",\"url\":\"https://external-api.arcads.ai/v1/presets\"},\"products\":{\"method\":\"GET\",\"url\":\"https://external-api.arcads.ai/v1/products?page=1&pageSize=50\"},\"situations\":{\"method\":\"GET\",\"url\":\"https://external-api.arcads.ai/v1/situations?page=1&pageSize=50\"},\"video_raw\":{\"method\":\"POST\",\"url\":\"https://external-api.arcads.ai/v2/videos/generate\",\"body\":\"$1\"}}",
      "description": "WHAT: ArcAds HTTP unified entrypoint WHEN_TO_USE: direct ArcAds REST ops (presigned uploads, products, assets, situations, fields) ARGS: $1=op, $2..$N=positional args EX: [ARCADS_ROUTES]products[/ARCADS_ROUTES] TESTS: POSITIVE: {\"key\":\"ARCADS_ROUTES\",\"body\":\"products\"} → HTTP 200. INVERSE: {\"key\":\"ARCADS_ROUTES\",\"body\":\"xxx\"} → ERR:target_map:unknown_op",
      "read": "https://miscsubjects.com/api/directory/ARCADS_ROUTES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARCADS_ROUTES",
        "body": ""
      },
      "router_tag": "[ARCADS_ROUTES]args[/ARCADS_ROUTES]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARCADS_UPLOAD",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "arcads",
      "target": "arcadsUpload",
      "description": "WHAT: Upload a file to ArcAds (presign + S3 PUT).  Returns {filePath,fileId}; pass filePath in referenceImages. fileType e.g. image/png, image/jpeg, video/mp4, audio/mp3 WHEN_TO_USE: you need to arcads upload ARGS: source_url|file_type EX: [ARCADS_UPLOAD]arg1|arg2[/ARCADS_UPLOAD]",
      "read": "https://miscsubjects.com/api/directory/ARCADS_UPLOAD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARCADS_UPLOAD",
        "body": ""
      },
      "router_tag": "[ARCADS_UPLOAD]args[/ARCADS_UPLOAD]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARCADS_VIDEO_GENERATE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "arcads",
      "target": "arcadsVideoGenerate",
      "description": "WHAT: Generate a video via ArcAds, poll, store to R2, return a stable link WHEN_TO_USE: you need to arcads video generate ARGS: model|prompt|aspectRatio|referenceImages|duration|productId EX: [ARCADS_VIDEO_GENERATE]arg1|arg2|arg3|arg4|arg5|arg6[/ARCADS_VIDEO_GENERATE]",
      "read": "https://miscsubjects.com/api/directory/ARCADS_VIDEO_GENERATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARCADS_VIDEO_GENERATE",
        "body": ""
      },
      "router_tag": "[ARCADS_VIDEO_GENERATE]args[/ARCADS_VIDEO_GENERATE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ART_GET",
      "object_type": "knowledge",
      "runner": "edge",
      "directory_type": "http",
      "category": "articles",
      "target": "GET https://miscsubjects.com/api/articles/$1",
      "description": "WHAT: Read an article by slug WHEN_TO_USE: you need to art get ARGS: see content EX: [ART_GET][/ART_GET] Read an article by slug.",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ART_GET",
        "body": ""
      },
      "router_tag": "[ART_GET]args[/ART_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ART_PATCH",
      "object_type": "knowledge",
      "runner": "edge",
      "directory_type": "http",
      "category": "articles",
      "target": "PATCH https://miscsubjects.com/api/articles/$1",
      "description": "WHAT: Edit an article by slug WHEN_TO_USE: you need to art patch ARGS: slug|json_body EX: [ART_PATCH]arg2[/ART_PATCH]",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ART_PATCH",
        "body": ""
      },
      "router_tag": "[ART_PATCH]args[/ART_PATCH]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARTICLE_GET",
      "object_type": "knowledge",
      "runner": "edge",
      "directory_type": "flow",
      "category": "articles",
      "target": null,
      "description": "Return article + its slots as one joined result set. $1=slug. Returns an array of {slug,title,subject,updated_at,slot_key,content,model,version}. WHEN_TO_USE: \"show me article <slug>\" or any caller that needs the article body",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARTICLE_GET",
        "body": ""
      },
      "router_tag": "[ARTICLE_GET]args[/ARTICLE_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARTICLES",
      "object_type": "knowledge",
      "runner": "edge",
      "directory_type": "http",
      "category": "articles",
      "target": "target_map:{\"list\":{\"method\":\"GET\",\"url\":\"https://miscsubjects.com/api/articles?slim=1&limit=80\"},\"get\":{\"method\":\"GET\",\"url\":\"https://miscsubjects.com/api/articles/$1\"},\"create\":{\"method\":\"POST\",\"url\":\"https://miscsubjects.com/api/articles\",\"body\":\"{\\\"slug\\\":\\\"$1\\\",\\\"title\\\":\\\"$2\\\",\\\"subject\\\":\\\"$3\\\"}\"},\"update\":{\"method\":\"PATCH\",\"url\":\"https://miscsubjects.com/api/articles/$1\",\"body\":\"{\\\"title\\\":\\\"$2\\\"}\"},\"delete\":{\"method\":\"DELETE\",\"url\":\"https://miscsubjects.com/api/articles/$1\"},\"set\":{\"method\":\"POST\",\"url\":\"https://miscsubjects.com/api/articles/$1/set\",\"body\":\"{\\\"slot_key\\\":\\\"$2\\\",\\\"content\\\":\\\"$3\\\"}\"},\"compose\":{\"method\":\"POST\",\"url\":\"https://miscsubjects.com/api/articles/$1/compose\",\"body\":\"{\\\"slot_key\\\":\\\"$2\\\",\\\"brief\\\":\\\"$3\\\"}\"}}",
      "description": "WHAT: Fast natural-language article CRUD. One row per article in D1; writes are URL-invocable through OIP. WHEN_TO_USE: list/read/create/rename/delete articles, set a manual article slot, or ask the writer to compose/revise a slot. ARGS: op | args EX: [ARTICLES]list[/ARTICLES] EX: [ARTICLES]get|bpc-157[/ARTICLES] EX: [ARTICLES]set|bpc-157|mechanism|replacement section text[/ARTICLES] EX: [ARTICLES]compose|bpc-157|mechanism|make it more precise and evidence-graded[/ARTICLES] OPS:   list                                  -> compact index, never huge/full article payload   get|<slug>                            -> one full article   create|<slug>|<title>|<subject>       -> create article shell   update|<slug>|<title>                 -> rename article   delete|<slug>                         -> delete mutable article   set|<slug>|<slot_key>|<content>       -> manual slot override, no LLM   compose|<slug>|<slot_key>|<brief>     -> asks the writer, stores a new slot version, returns nested receipt",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARTICLES",
        "body": ""
      },
      "router_tag": "[ARTICLES]args[/ARTICLES]",
      "input_schema": {
        "args": [
          "op",
          "arg1",
          "arg2",
          "arg3"
        ]
      },
      "examples": "[{\"args\":\"list\",\"desc\":\"Fast compact article index\"},{\"args\":\"get|bpc-157\",\"desc\":\"Read one article\"},{\"args\":\"set|bpc-157|mechanism|replacement text\",\"desc\":\"Manual slot override\"},{\"args\":\"compose|bpc-157|mechanism|tighten the mechanism section\",\"desc\":\"Compose and store a new slot version\"}]",
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOG_ASSET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "asset",
      "target": "logAsset",
      "description": "WHAT: File an image into the asset library.  Returns asset id WHEN_TO_USE: you need to log asset ARGS: category|label|url|source_url|engine|prompt|sender|chat|protocol|is_group|parent_id|r2_key EX: [LOG_ASSET]arg1|arg2|arg3|arg4|arg5|arg6|arg7|arg8|arg9|arg10|arg11|arg12[/LOG_ASSET]",
      "read": "https://miscsubjects.com/api/directory/LOG_ASSET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOG_ASSET",
        "body": ""
      },
      "router_tag": "[LOG_ASSET]args[/LOG_ASSET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AUDIT_COLD_CASE_V1",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "audit",
      "target": null,
      "description": null,
      "read": "https://miscsubjects.com/api/directory/AUDIT_COLD_CASE_V1",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AUDIT_COLD_CASE_V1",
        "body": ""
      },
      "router_tag": "[AUDIT_COLD_CASE_V1]args[/AUDIT_COLD_CASE_V1]",
      "input_schema": null,
      "examples": "[\"POST /api/invoke {\\\"key\\\":\\\"AUDIT_COLD_CASE_V1\\\",\\\"model\\\":\\\"glm\\\",\\\"input\\\":\\\"<case summary + sampled rows>\\\"}\"]",
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CAPABILITY_ATLAS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "audit",
      "target": "GET https://miscsubjects.com/api/capability-atlas",
      "description": "WHAT: Read the public capability archaeology atlas joining every current directory contract with recorded invocation evidence, registered tests, capability domains, and aggregate coding-agent turn/file-change sediment. It separates registered, invoked, tested, and disabled states so the build interior can be audited without treating row count as proof. ARGS: None. Add ?summary=1 to omit the full capability array. EX: [CAPABILITY_ATLAS][/CAPABILITY_ATLAS] TESTS: GET /api/capability-atlas returns miscsubjects-capability-atlas/1.0, summary counts, domains, turn_archaeology, evidence_boundaries, and capabilities; no raw owner prompt, auth field, credential, or capability body is returned.",
      "read": "https://miscsubjects.com/api/directory/CAPABILITY_ATLAS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CAPABILITY_ATLAS",
        "body": ""
      },
      "router_tag": "[CAPABILITY_ATLAS]args[/CAPABILITY_ATLAS]",
      "input_schema": {
        "type": "object",
        "properties": {},
        "additionalProperties": false
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "COST_REPORT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "audit",
      "target": "d1Query",
      "description": "WHAT: Cost summary: total turns, total USD, average USD/turn, and the 10 priciest recent turns WHEN_TO_USE: you need to cost report ARGS: none EX: [COST_REPORT][/COST_REPORT]",
      "read": "https://miscsubjects.com/api/directory/COST_REPORT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "COST_REPORT",
        "body": ""
      },
      "router_tag": "[COST_REPORT]args[/COST_REPORT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "FIDELITY_RUN",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "audit",
      "target": "fidelityRun",
      "description": "WHAT: Run the whole fidelity bank. $1 optional kind filter (positive | inverse | agent-route). Logs to fidelity_log. Returns JSON {run_id,total,passed,failed,duration_ms,failing} WHEN_TO_USE: you need to fidelity run ARGS: $1 EX: [FIDELITY_RUN]arg1[/FIDELITY_RUN]",
      "read": "https://miscsubjects.com/api/directory/FIDELITY_RUN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "FIDELITY_RUN",
        "body": ""
      },
      "router_tag": "[FIDELITY_RUN]args[/FIDELITY_RUN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "NORMANDY_ASSIGNMENT",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "audit",
      "target": "GET https://miscsubjects.com/api/normandy?assignment=$1",
      "description": "WHAT: Read one reserved outside-model contribution slot: current graph snapshot, named comparison target, shared axis, already-stored limits, additive slots, and the existing voxel-batch write lane.\\n# ARGS: $1=assignment id from a minted build-audit DROP.\\n# EX: [NORMANDY_ASSIGNMENT]norm-abc123[/NORMANDY_ASSIGNMENT]\\n[\"$1\"]",
      "read": "https://miscsubjects.com/api/directory/NORMANDY_ASSIGNMENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "NORMANDY_ASSIGNMENT",
        "body": ""
      },
      "router_tag": "[NORMANDY_ASSIGNMENT]args[/NORMANDY_ASSIGNMENT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OPOS_DROP",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "audit",
      "target": "GET https://miscsubjects.com/api/dispatch?tap_go=1&drop=audit",
      "description": "WHAT: Mint one bounded self-explaining whole-build audit token DROP from the floating Owner Tap & Go.\\n# ARGS: None. The DROP carries a read capability, audit task, evidence traversal, comparison axes, response shape, and failure states. Evidence remains retrievable instead of embedded.\\n# EX: [OPOS_DROP][/OPOS_DROP]\\n# TESTS: The returned DROP is 4,000–8,000 characters, contains a read capability and evidence index, excludes article bodies, and contains no obligational prompt language.",
      "read": "https://miscsubjects.com/api/directory/OPOS_DROP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OPOS_DROP",
        "body": ""
      },
      "router_tag": "[OPOS_DROP]args[/OPOS_DROP]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OPOS_FEEDBACK",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "audit",
      "target": "mirrorAppend",
      "description": "WHAT: Attach a model or human audit finding to the OPOS Mirror as a typed, receipted contribution. The contribution proposes; it does not silently rewrite the build. ARGS: $1=kind question|objection|source|repair|compression|contradiction|audit, $2=actor/model+version, $3+=finding and opened evidence. For repair/compression, place exact replacement after \" => \". EX: [OPOS_FEEDBACK]audit|ChatGPT Web GPT-5.6|The comparison lacks a current CrewAI exhibit.[/OPOS_FEEDBACK] TESTS: Returns ok:true, slug=opos, contribution id, proposed status, receipt, feed, and view.",
      "read": "https://miscsubjects.com/api/directory/OPOS_FEEDBACK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OPOS_FEEDBACK",
        "body": ""
      },
      "router_tag": "[OPOS_FEEDBACK]args[/OPOS_FEEDBACK]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OPOS_ROOT",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "audit",
      "target": "GET https://miscsubjects.com/api/opos",
      "description": "WHAT: Read the whole build as OPOS, one self-explaining Object Protocol Operating System containing identity, object classes, Tap & Go routes, root articles, live inventory, audit, comparison field, evidence boundaries, and feedback loop. ARGS: None. Add ?format=markdown for the complete model-readable record. EX: [OPOS_ROOT][/OPOS_ROOT] TESTS: Response schema is opos-self-explaining-build/1.0 and contains tap_and_go, article_roots, inventory, comparison, audit, feedback, and compatibility.",
      "read": "https://miscsubjects.com/api/directory/OPOS_ROOT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OPOS_ROOT",
        "body": ""
      },
      "router_tag": "[OPOS_ROOT]args[/OPOS_ROOT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "QUE_ADD",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "audit",
      "target": "queAdd",
      "description": "WHAT: Add a question to the test que. $1 = prompt text. $2 = optional slug (default go) WHEN_TO_USE: you need to que add ARGS: $1 | $2 EX: [QUE_ADD]arg1|arg2[/QUE_ADD]",
      "read": "https://miscsubjects.com/api/directory/QUE_ADD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "QUE_ADD",
        "body": ""
      },
      "router_tag": "[QUE_ADD]args[/QUE_ADD]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "QUE_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "audit",
      "target": "queList",
      "description": "WHAT: Inspect the que. $1 = '' | pending | done | error. Returns rows (response truncated 200ch) WHEN_TO_USE: you need to que list ARGS: $1 EX: [QUE_LIST]arg1[/QUE_LIST]",
      "read": "https://miscsubjects.com/api/directory/QUE_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "QUE_LIST",
        "body": ""
      },
      "router_tag": "[QUE_LIST]args[/QUE_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "QUE_RUN",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "audit",
      "target": "queRun",
      "description": "WHAT: Run pending que rows (max 25/call) through the real ROUTER. Writes response+trace_id+status back WHEN_TO_USE: you need to que run ARGS: $1 EX: [QUE_RUN]arg1[/QUE_RUN]",
      "read": "https://miscsubjects.com/api/directory/QUE_RUN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "QUE_RUN",
        "body": ""
      },
      "router_tag": "[QUE_RUN]args[/QUE_RUN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WT0090_OUTBOUND_AUDIT_V1",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "audit",
      "target": null,
      "description": null,
      "read": "https://miscsubjects.com/api/directory/WT0090_OUTBOUND_AUDIT_V1",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WT0090_OUTBOUND_AUDIT_V1",
        "body": ""
      },
      "router_tag": "[WT0090_OUTBOUND_AUDIT_V1]args[/WT0090_OUTBOUND_AUDIT_V1]",
      "input_schema": {
        "type": "object",
        "required": [
          "case_facts",
          "drafts"
        ],
        "properties": {
          "case_facts": {
            "type": "object"
          },
          "drafts": {
            "type": "array"
          }
        }
      },
      "examples": "[{\"input\":{\"case_facts\":{\"canonical_firms\":1007},\"drafts\":[]},\"output\":{\"verdict\":\"PASS\",\"reviewed\":0,\"keep_count\":0,\"change_count\":0,\"delete_count\":0,\"corpus_findings\":[],\"changes\":[],\"strongest_letter\":\"\",\"weakest_letter\":\"\"}}]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AUTOMATE_ADD",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "automation",
      "target": "automateAdd",
      "description": "WHAT: Automate a capability — make it fire itself every N minutes and ledger a receipt each run. Turns a one-off action into a standing background job. WHEN_TO_USE: \"automate this\", \"do this every morning/hour\", \"keep doing X\", \"run this on a schedule\". ARGS: name | every_minutes | KEY | body   (body is whatever that KEY takes; may contain pipes) EX: [AUTOMATE_ADD]morning ping|1440|SEND_BY_CHANNEL|blooio|<owner line, not public>|automated good morning[/AUTOMATE_ADD]",
      "read": "https://miscsubjects.com/api/directory/AUTOMATE_ADD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AUTOMATE_ADD",
        "body": ""
      },
      "router_tag": "[AUTOMATE_ADD]args[/AUTOMATE_ADD]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AUTOMATE_DELETE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "automation",
      "target": "automateDelete",
      "description": "WHAT: Delete an automation by id. WHEN_TO_USE: \"remove that automation\", \"delete the scheduled job\". ARGS: id EX: [AUTOMATE_DELETE]3[/AUTOMATE_DELETE]",
      "read": "https://miscsubjects.com/api/directory/AUTOMATE_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AUTOMATE_DELETE",
        "body": ""
      },
      "router_tag": "[AUTOMATE_DELETE]args[/AUTOMATE_DELETE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AUTOMATE_FIRE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "automation",
      "target": "automateFire",
      "description": "WHAT: Fire every enabled automation registered for an event (trigger=event:NAME). Any inbound hook (a customer text, an error, a webhook) calls this with the event name + payload; matching automations run and ledger a receipt. WHEN_TO_USE: an event source (webhook, hook, cron) signals something happened — \"when a customer text arrives\", \"on error\", \"on new order\". ARGS: event_name | payload (payload is passed to each automation whose body is empty) EX: [AUTOMATE_FIRE]customer_text|hi, is this still available?[/AUTOMATE_FIRE]",
      "read": "https://miscsubjects.com/api/directory/AUTOMATE_FIRE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AUTOMATE_FIRE",
        "body": ""
      },
      "router_tag": "[AUTOMATE_FIRE]args[/AUTOMATE_FIRE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AUTOMATE_FORCE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "automation",
      "target": "automateForce",
      "description": "WHAT: The owner's kill switch on an automation — force_off outranks enabled everywhere (scheduled runs, event fires) and AUTOMATE_TOGGLE cannot re-enable a forced-off automation. Modeled on the cloaker and self-testing toggles. WHEN_TO_USE: the owner orders an automation kept off (\"turn off the governor and keep it off\"); or the owner explicitly commits it back on. This verb acts on the owner's authority only — never fire it from an agent's own judgment. ARGS: id | off  (force off, also disables)   OR   id | commit-on  (lift the lock; then AUTOMATE_TOGGLE|id|1 deliberately) EX: [AUTOMATE_FORCE]7|off[/AUTOMATE_FORCE]",
      "read": "https://miscsubjects.com/api/directory/AUTOMATE_FORCE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AUTOMATE_FORCE",
        "body": ""
      },
      "router_tag": "[AUTOMATE_FORCE]args[/AUTOMATE_FORCE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AUTOMATE_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "automation",
      "target": "automateList",
      "description": "WHAT: List every automation — id, name, schedule, target key, enabled, last run, run count. WHEN_TO_USE: \"what's automated\", \"list my automations\", \"what runs on a schedule\". ARGS: none EX: [AUTOMATE_LIST][/AUTOMATE_LIST]",
      "read": "https://miscsubjects.com/api/directory/AUTOMATE_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AUTOMATE_LIST",
        "body": ""
      },
      "router_tag": "[AUTOMATE_LIST]args[/AUTOMATE_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AUTOMATE_RUN_DUE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "automation",
      "target": "automateRunDue",
      "description": "WHAT: Fire every enabled automation whose interval has elapsed; ledger a receipt for each. Called by the cron each tick; safe to call manually. WHEN_TO_USE: \"run due automations now\", or the cron calls it automatically. ARGS: none EX: [AUTOMATE_RUN_DUE][/AUTOMATE_RUN_DUE]",
      "read": "https://miscsubjects.com/api/directory/AUTOMATE_RUN_DUE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AUTOMATE_RUN_DUE",
        "body": ""
      },
      "router_tag": "[AUTOMATE_RUN_DUE]args[/AUTOMATE_RUN_DUE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AUTOMATE_TOGGLE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "automation",
      "target": "automateToggle",
      "description": "WHAT: Turn an automation on or off by id (paused, not deleted). WHEN_TO_USE: \"pause that automation\", \"turn it back on\", \"stop the morning ping\". ARGS: id | 1|0 EX: [AUTOMATE_TOGGLE]3|0[/AUTOMATE_TOGGLE]",
      "read": "https://miscsubjects.com/api/directory/AUTOMATE_TOGGLE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AUTOMATE_TOGGLE",
        "body": ""
      },
      "router_tag": "[AUTOMATE_TOGGLE]args[/AUTOMATE_TOGGLE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLOCK_TICK",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "automation",
      "target": "POST https://miscsubjects.com/api/automations/wall-clock",
      "description": "WHAT: Fire every automation anchored to a wall-clock hour whose hour has arrived, once per local day. Anchored rows (trigger=clock, at_hour set) never fire on an interval — this is the only path that runs them. WHEN_TO_USE: the every-few-minutes tick calls it; call it by hand to see what is anchored and what is waiting. ARGS: none EX: [CLOCK_TICK][/CLOCK_TICK]",
      "read": "https://miscsubjects.com/api/directory/CLOCK_TICK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLOCK_TICK",
        "body": ""
      },
      "router_tag": "[CLOCK_TICK]args[/CLOCK_TICK]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ISSUE_SWEEP",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "automation",
      "target": "issueSweep",
      "description": "WHAT: Autonomous issue closer. Scans open issues and closes safe categories. WHEN_TO_USE: run a batch of issue closures; schedule via AUTOMATE_ADD for recursive loops. ARGS: mode (triage | docs | all) EX: [ISSUE_SWEEP]triage[/ISSUE_SWEEP]",
      "read": "https://miscsubjects.com/api/directory/ISSUE_SWEEP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ISSUE_SWEEP",
        "body": ""
      },
      "router_tag": "[ISSUE_SWEEP]args[/ISSUE_SWEEP]",
      "input_schema": {
        "args": [
          "mode"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "NOTIFY_OWNER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "automation",
      "target": "sendByChannel",
      "description": "WHAT: Text the custodian (the owner) a message — the \"background daemon pings you when it needs a decision\" primitive. Automations and event hooks call this to ask a question or report. WHEN_TO_USE: the AI needs the owner's input or wants to surface something — \"tell the custodian\", \"ask the owner\", \"ping me when X\". ARGS: message EX: [NOTIFY_OWNER]A customer asked something I have no automation for — how do you want me to reply?[/NOTIFY_OWNER]",
      "read": "https://miscsubjects.com/api/directory/NOTIFY_OWNER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "NOTIFY_OWNER",
        "body": ""
      },
      "router_tag": "[NOTIFY_OWNER]args[/NOTIFY_OWNER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STALE_ISSUE_DIGEST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "automation",
      "target": "staleIssueDigest",
      "description": "WHAT: Return a digest of open GitHub issues that have not been updated in N days. WHEN_TO_USE: weekly purge review, stale backlog triage. ARGS: days EX: [STALE_ISSUE_DIGEST]7[/STALE_ISSUE_DIGEST]",
      "read": "https://miscsubjects.com/api/directory/STALE_ISSUE_DIGEST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STALE_ISSUE_DIGEST",
        "body": ""
      },
      "router_tag": "[STALE_ISSUE_DIGEST]args[/STALE_ISSUE_DIGEST]",
      "input_schema": {
        "args": [
          "days"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BC",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "bigcommerce",
      "target": "target_map:{\"orders\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v2/orders?limit=$1\"},\"products\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v3/catalog/products?limit=$1\"},\"orders_range\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v2/orders?min_date_created=$1&max_date_created=$2&limit=250&page=$3&sort=date_created:asc\"},\"orders_count\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v2/orders/count?min_date_created=$1&max_date_created=$2\"},\"store\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v2/store\"},\"orders_by_email\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v2/orders?email=$1&limit=250&sort=date_created:desc\"},\"order\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v2/orders/$1\"},\"order_products\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v2/orders/$1/products\"},\"order_shipping\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v2/orders/$1/shipping_addresses\"},\"customer_by_email\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v3/customers?email:in=$1\"},\"customer\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v3/customers?id:in=$1\"},\"orders_status\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v2/orders?status_id=$1&limit=250&sort=date_created:desc\"},\"product\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v3/catalog/products?id:in=$1\"},\"refunds_all\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v3/orders/payment-actions/refunds?limit=$1&page=$2\"},\"order_refunds\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v3/orders/$1/payment_actions/refunds\"},\"customers_count\":{\"method\":\"GET\",\"url\":\"https://api.bigcommerce.com/stores/$BIGCOMMERCE_STORE_HASH/v3/customers?limit=1&page=$1\"}}",
      "description": "WHAT: BigCommerce unified entrypoint WHEN_TO_USE: products, orders, customers ARGS: $1=op, $2..$N=args EX: [BC]products[/BC] TESTS: INVERSE: ERR:target_map:unknown_op on bad op.",
      "read": "https://miscsubjects.com/api/directory/BC",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BC",
        "body": ""
      },
      "router_tag": "[BC]args[/BC]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_DISCOVER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsDiscover",
      "description": "WHAT: Find businesses likely to buy peptides wholesale or want white-label, by type and city. Free source (OpenStreetMap), no API key. Writes new rows to the leads table. WHEN_TO_USE: start a new outreach batch for a place. ARGS: $1 = segment (medspa | clinic | wellness | gym | supplement), $2 = city, $3 = max results (default 40). EX: [LEADS_DISCOVER]medspa|Los Angeles|40[/LEADS_DISCOVER]",
      "read": "https://miscsubjects.com/api/directory/LEADS_DISCOVER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_DISCOVER",
        "body": ""
      },
      "router_tag": "[LEADS_DISCOVER]args[/LEADS_DISCOVER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_DISCOVER_AI",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsDiscoverAI",
      "description": "WHAT: SCRAPER 2 — Grok live web search finds real businesses (with verified official websites) that OpenStreetMap does not have. Inserts them as new leads, source=grok-live-search. WHEN_TO_USE: grow the pipeline in a city where LEADS_DISCOVER (OSM) returned few results, or to reach richer segments (longevity, weightloss, chiro). ARGS: $1 = segment (medspa|clinic|wellness|gym|supplement|chiro|massage|weightloss|longevity), $2 = city, $3 = count (default 20, cap 30). EX: [LEADS_DISCOVER_AI]longevity|Scottsdale|20[/LEADS_DISCOVER_AI]",
      "read": "https://miscsubjects.com/api/directory/LEADS_DISCOVER_AI",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_DISCOVER_AI",
        "body": ""
      },
      "router_tag": "[LEADS_DISCOVER_AI]args[/LEADS_DISCOVER_AI]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_DRAFT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsDraft",
      "description": "WHAT: Write a wholesale + white-label outreach email for one lead. Saves the draft on the lead. DOES NOT SEND. WHEN_TO_USE: after enrich, to prepare the message for the custodian to approve. ARGS: $1 = lead id, $2 = which company it comes from (default miscsubjects). EX: [LEADS_DRAFT]12|miscsubjects[/LEADS_DRAFT]",
      "read": "https://miscsubjects.com/api/directory/LEADS_DRAFT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_DRAFT",
        "body": ""
      },
      "router_tag": "[LEADS_DRAFT]args[/LEADS_DRAFT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_DRAFT_AI",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsDraftAI",
      "description": "WHAT: Grok drafts one review-only outreach email grounded in OUTREACH_DOSSIER and the business site. DOES NOT SEND. Hard-blocks unless email domain MX is verified, ICP score is at least 65, site context is sufficient, and recipient is not suppressed.\\n# WHEN_TO_USE: only after enrichment, MX verification, and ICP scoring.\\n# ARGS: $1=lead id, $2=brand (default LeoResearch).\\n# EX: [LEADS_DRAFT_AI]131|LeoResearch[/LEADS_DRAFT_AI]\\n[\"$1\",\"$2\"]",
      "read": "https://miscsubjects.com/api/directory/LEADS_DRAFT_AI",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_DRAFT_AI",
        "body": ""
      },
      "router_tag": "[LEADS_DRAFT_AI]args[/LEADS_DRAFT_AI]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_ENRICH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsEnrich",
      "description": "WHAT: Visit one lead's website and pull the best contact email. Sets the lead to enriched or no_email. WHEN_TO_USE: after discovery, to get an email to reach out to. ARGS: $1 = lead id. EX: [LEADS_ENRICH]12[/LEADS_ENRICH]",
      "read": "https://miscsubjects.com/api/directory/LEADS_ENRICH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_ENRICH",
        "body": ""
      },
      "router_tag": "[LEADS_ENRICH]args[/LEADS_ENRICH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_ENRICH_BATCH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsEnrichBatchTask",
      "description": "WHAT: Enrich the next batch of un-enriched leads in one call (finds emails + context by crawling each organization's own public site). Bounded so it never fails; call repeatedly to work through the queue. Optionally task-scoped. WHEN_TO_USE: after discovery, to fill in emails and context for many leads. For task-bound proof runs (execution cases) ALWAYS pass the work task id as $2 so only that task's candidate leads are claimed and ambient leads never satisfy a task acceptance count. ARGS: $1 = how many to do this call (default 6, cap 8). $2 = optional work task id (e.g. WT-0090): scopes the claim to leads bound to that task's included execution-case candidates and first syncs candidates whose lead was already resolved. EX: [LEADS_ENRICH_BATCH]8|WT-0090[/LEADS_ENRICH_BATCH]",
      "read": "https://miscsubjects.com/api/directory/LEADS_ENRICH_BATCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_ENRICH_BATCH",
        "body": ""
      },
      "router_tag": "[LEADS_ENRICH_BATCH]args[/LEADS_ENRICH_BATCH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_FIND_SITES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsFindSites",
      "description": "WHAT: Rescue websiteless leads — one Grok live-search call finds official websites for a batch of leads that have name+city but no site. Found leads stay status=new so LEADS_ENRICH_BATCH picks them up. WHEN_TO_USE: when leads sit in status=new with no website (OSM often lacks the website tag) — they are unreachable until this runs. ARGS: $1 = batch size (default 8, cap 10). EX: [LEADS_FIND_SITES]8[/LEADS_FIND_SITES]",
      "read": "https://miscsubjects.com/api/directory/LEADS_FIND_SITES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_FIND_SITES",
        "body": ""
      },
      "router_tag": "[LEADS_FIND_SITES]args[/LEADS_FIND_SITES]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsList",
      "description": "WHAT: List leads and a count by status (new, enriched, drafted, no_email, sent). WHEN_TO_USE: see the outreach pipeline. ARGS: $1 = status filter (optional; blank = all). EX: [LEADS_LIST]drafted[/LEADS_LIST]",
      "read": "https://miscsubjects.com/api/directory/LEADS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_LIST",
        "body": ""
      },
      "router_tag": "[LEADS_LIST]args[/LEADS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_REENRICH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsReenrich",
      "description": "WHAT: Second pass over status=no_email leads with the deep crawler (mailto links, Cloudflare-obfuscated emails, JSON-LD, /contact-us + /about pages — none of which the v1 crawler read). WHEN_TO_USE: rescue contactable emails from the no_email pool without any new discovery. ARGS: $1 = batch size (default 6, cap 8). EX: [LEADS_REENRICH]6[/LEADS_REENRICH]",
      "read": "https://miscsubjects.com/api/directory/LEADS_REENRICH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_REENRICH",
        "body": ""
      },
      "router_tag": "[LEADS_REENRICH]args[/LEADS_REENRICH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_RUN_CITY",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsRunCity",
      "description": "WHAT: One call = discover a segment in a city, then enrich a batch. The fastest way to grow the pipeline. WHEN_TO_USE: add a new city/segment to the pipeline. ARGS: $1 = segment (medspa|clinic|wellness|gym|supplement|chiro|massage|weightloss|longevity), $2 = city, $3 = discover limit (default 40), $4 = enrich count (default 8). EX: [LEADS_RUN_CITY]medspa|Miami|40|8[/LEADS_RUN_CITY]",
      "read": "https://miscsubjects.com/api/directory/LEADS_RUN_CITY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_RUN_CITY",
        "body": ""
      },
      "router_tag": "[LEADS_RUN_CITY]args[/LEADS_RUN_CITY]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_SCORE_AI",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsScoreAI",
      "description": "WHAT: AI ICP scoring — one Grok (grok-4.3) call scores a batch of enriched leads 0-100 on real wholesale/white-label peptide buying fit, grounded in OUTREACH_DOSSIER. Writes score + an icp: note (buyer type, volume guess, concrete reason) so LEADS_LIST ranks by commercial fit instead of has-a-website. WHEN_TO_USE: after enrichment, before drafting; \"score the leads\", \"which leads are actually worth emailing\". ARGS: $1 = batch size (default 8, cap 10). Call repeatedly until it returns scored:0. EX: [LEADS_SCORE_AI]8[/LEADS_SCORE_AI]",
      "read": "https://miscsubjects.com/api/directory/LEADS_SCORE_AI",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_SCORE_AI",
        "body": ""
      },
      "router_tag": "[LEADS_SCORE_AI]args[/LEADS_SCORE_AI]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_SEND",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsSend",
      "description": "WHAT: Send ONE lead's already-saved email through the owner-reviewed Marketing admin. WHEN_TO_USE: only after the custodian reviewed the exact recipient, subject, and body in Admin → Marketing → Leads, approved that exact copy, and separately clicked Send. SAFETY: literal CONFIRM alone is insufficient. $4 must be a current, unexpired, single-use approval token tied to the saved recipient+subject+body hash. Editing copy invalidates approval. Terminal keys/share tokens cannot mint approval. ARGS: $1=CONFIRM, $2=lead id, $3=from local-part, $4=owner-browser exact-copy approval token.",
      "read": "https://miscsubjects.com/api/directory/LEADS_SEND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_SEND",
        "body": ""
      },
      "router_tag": "[LEADS_SEND]args[/LEADS_SEND]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": false,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_SEND_BATCH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsSendBatch",
      "description": "WHAT: Batch outreach sending is disabled. WHEN_TO_USE: never; use the owner-reviewed individual send path in Admin → Marketing → Leads. SAFETY: always returns batch_send_disabled and sends nothing until a campaign-level exact-copy review surface is explicitly built and approved.",
      "read": "https://miscsubjects.com/api/directory/LEADS_SEND_BATCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_SEND_BATCH",
        "body": ""
      },
      "router_tag": "[LEADS_SEND_BATCH]args[/LEADS_SEND_BATCH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": false,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_SHEET_ENRICHED",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "biz-dev",
      "target": null,
      "description": "Superseded 2026-08-05. This flow ended in `LIMIT 30` because larger payloads were silently dropped by the transport; it wrote 30 of 5,841 resolved contacts and looked complete. LEADS_SHEET_PUSH chunks the write and counts only confirmed receipts.",
      "read": "https://miscsubjects.com/api/directory/LEADS_SHEET_ENRICHED",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_SHEET_ENRICHED",
        "body": ""
      },
      "router_tag": "[LEADS_SHEET_ENRICHED]args[/LEADS_SHEET_ENRICHED]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_SHEET_PUSH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsSheetPush",
      "description": "WHAT: Write the enriched lead list (name, city, email, score, website, status) to the LEADS_ENRICHED tab of the master sheet, in chunks, reporting how many rows the Apps Script itself confirmed writing. WHY IN CHUNKS, AND WHY RESUMABLE: one large POST to the Apps Script loses its body and nothing is written; and the full 5,841 rows take more sequential round-trips to Google than Cloudflare's 100-second edge limit allows, which returned 524 with the work half done. So each call does a bounded number of chunks and hands back next_offset. Offset 0 replaces the tab (a re-run from 0 is idempotent); any offset above 0 appends. Keep calling with next_offset until done is true. WHEN_TO_USE: after an enrichment run, or any time the sheet needs to match D1. ARGS: $1 = rows per chunk (default 250, min 25, max 500). $2 = start offset (default 0). $3 = chunks this call (default 4, max 8). $4 = max rows total (default 0 = every enriched lead). EX: [LEADS_SHEET_PUSH]500|0|6[/LEADS_SHEET_PUSH] then [LEADS_SHEET_PUSH]500|3000|6[/LEADS_SHEET_PUSH]",
      "read": "https://miscsubjects.com/api/directory/LEADS_SHEET_PUSH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_SHEET_PUSH",
        "body": ""
      },
      "router_tag": "[LEADS_SHEET_PUSH]args[/LEADS_SHEET_PUSH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_SHEET_SYNC",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "biz-dev",
      "target": null,
      "description": "Push the lead pipeline aggregates to the master Google Sheet. Two tabs: LEADS_BY_SEGMENT (the pipeline by business type) and LEADS_BY_SOURCE (where each lead came from and how many resolved an email). LEADS_ENRICHED is no longer written here — that tab is owned by LEADS_SHEET_PUSH, which chunks the write; a single-shot replace of 5,000+ rows through this flow's one POST corrupted the JSON in transit every time (airunner_body_truncated_in_transit) and never wrote a row. TWO PARSER CONSTRAINTS, both found the hard way. The flow stores its steps as text, so escaped SQL quotes do not survive the round trip; and a greater-than sign separates steps, so it cannot appear inside a step. Hence no string literals and no comparison operators below. WHEN_TO_USE: \"put the lead segment/source breakdown on the sheet\", \"sync the lead sheet\" (run LEADS_SHEET_PUSH separately for LEADS_ENRICHED).",
      "read": "https://miscsubjects.com/api/directory/LEADS_SHEET_SYNC",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_SHEET_SYNC",
        "body": ""
      },
      "router_tag": "[LEADS_SHEET_SYNC]args[/LEADS_SHEET_SYNC]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_SWEEP",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsSweep",
      "description": "WHAT: Multi-city sweep — one segment across up to 3 cities (OSM discover per city) plus one enrich batch, in a single call. WHEN_TO_USE: fastest way to open several new cities at once. ARGS: $1 = segment, $2 = comma-separated cities (max 3), $3 = per-city discover limit (default 40). EX: [LEADS_SWEEP]medspa|Phoenix,Scottsdale,Houston|40[/LEADS_SWEEP]",
      "read": "https://miscsubjects.com/api/directory/LEADS_SWEEP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_SWEEP",
        "body": ""
      },
      "router_tag": "[LEADS_SWEEP]args[/LEADS_SWEEP]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_VERIFY_MX",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "biz-dev",
      "target": "leadsVerifyMx",
      "description": "WHAT: Verify whether the email domain publishes MX records using DNS-over-HTTPS. Tags mx:ok or mx:none. This verifies the domain, not the individual mailbox.\\n# WHEN_TO_USE: after enrichment and before ICP scoring or drafting.\\n# ARGS: $1=max leads (default 25, cap 50).\\n# EX: [LEADS_VERIFY_MX]25[/LEADS_VERIFY_MX]\\n[\"$1\"]",
      "read": "https://miscsubjects.com/api/directory/LEADS_VERIFY_MX",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_VERIFY_MX",
        "body": ""
      },
      "router_tag": "[LEADS_VERIFY_MX]args[/LEADS_VERIFY_MX]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOCK_ARA",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "block_imported",
      "target": "prompt_block",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/BLOCK_ARA",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOCK_ARA",
        "body": ""
      },
      "router_tag": "[BLOCK_ARA]args[/BLOCK_ARA]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "blooio",
      "target": "target_map:{\"chats_list\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/chats?limit=$1&sort=$2\"},\"chat_bg_del\":{\"method\":\"DELETE\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1/background\"},\"chat_bg_get\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1/background\"},\"chat_get\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1\"},\"contacts_list\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/contacts?limit=$1&offset=$2\"},\"contact_caps\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/contacts/$1/capabilities\"},\"contact_card_share\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1/contact-card\"},\"contact_card_update\":{\"method\":\"PUT\",\"url\":\"https://backend.blooio.com/v2/api/contact-card\",\"body\":\"form:name=$1\"},\"contact_create\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/contacts\",\"body\":\"form:identifier=$1&name=$2\"},\"contact_delete\":{\"method\":\"DELETE\",\"url\":\"https://backend.blooio.com/v2/api/contacts/$1\"},\"contact_get\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/contacts/$1\"},\"contact_tags_add\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/contacts/$1/tags\",\"body\":\"{\\\"tags\\\":[\\\"$2\\\"]}\"},\"contact_tags_list\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/contacts/$1/tags\"},\"contact_tag_remove\":{\"method\":\"DELETE\",\"url\":\"https://backend.blooio.com/v2/api/contacts/$1/tags/$2\"},\"contact_update\":{\"method\":\"PATCH\",\"url\":\"https://backend.blooio.com/v2/api/contacts/$1\",\"body\":\"form:name=$2\"},\"groups_list\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/groups?limit=$1&offset=$2\"},\"group_create\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/groups\",\"body\":\"form:name=$1&chat_guid=$2&members=$3\"},\"group_delete\":{\"method\":\"DELETE\",\"url\":\"https://backend.blooio.com/v2/api/groups/$1\"},\"group_get\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/groups/$1\"},\"group_icon_del\":{\"method\":\"DELETE\",\"url\":\"https://backend.blooio.com/v2/api/groups/$1/icon\"},\"group_icon_set\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/groups/$1/icon\"},\"group_members_list\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/groups/$1/members\"},\"group_update\":{\"method\":\"PATCH\",\"url\":\"https://backend.blooio.com/v2/api/groups/$1\",\"body\":\"form:name=$2\"},\"location_get\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/contacts/$1/location\"},\"location_list\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/contacts/$1/locations\"},\"location_refresh\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/contacts/$1/location/refresh\"},\"lookup_batch\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/phone-numbers/batch\",\"body\":\"{\\\"numbers\\\":$1}\"},\"lookup_get\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/phone-numbers/lookup?number=$1\"},\"lookup_post\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/phone-numbers/lookup\",\"body\":\"{\\\"number\\\":\\\"$1\\\"}\"},\"messages_list\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1/messages?limit=$2&offset=$3\"},\"message_get\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1/messages/$2\"},\"message_status\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1/messages/$2/status\"},\"poll_get\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1/polls/$2\"},\"poll_send\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1/polls\",\"body\":\"{\\\"title\\\":\\\"$2\\\",\\\"options\\\":$3}\"},\"reaction\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1/messages/$2/reactions\",\"body\":\"{\\\"reaction\\\":\\\"$3\\\"}\"},\"read\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1/read\"},\"send\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1/messages\",\"body\":\"{\\\"text\\\":\\\"$2\\\"}\"},\"send_audio\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1/messages\",\"body\":\"{\\\"attachments\\\":[\\\"$2\\\"],\\\"text\\\":\\\"$3\\\"}\"},\"typing_start\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1/typing\"},\"typing_stop\":{\"method\":\"DELETE\",\"url\":\"https://backend.blooio.com/v2/api/chats/$1/typing\"},\"webhooks_list\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/webhooks\"},\"webhook_create\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/webhooks\",\"body\":\"form:webhook_url=$1&webhook_type=$2&valid_until=$3\"},\"webhook_delete\":{\"method\":\"DELETE\",\"url\":\"https://backend.blooio.com/v2/api/webhooks/$1\"},\"webhook_get\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/webhooks/$1\"},\"webhook_logs\":{\"method\":\"GET\",\"url\":\"https://backend.blooio.com/v2/api/webhooks/$1/logs?limit=$2\"},\"webhook_replay\":{\"method\":\"POST\",\"url\":\"https://backend.blooio.com/v2/api/webhooks/$1/logs/$2/replay\"},\"webhook_update\":{\"method\":\"PATCH\",\"url\":\"https://backend.blooio.com/v2/api/webhooks/$1\",\"body\":\"form:webhook_type=$2&valid_until=$3&deprecate=$4\"}}",
      "description": "WHAT: Blooio (iMessage/SMS) unified entrypoint WHEN_TO_USE: any iMessage/SMS send, receive, chats, contacts, groups, polls, reactions, lookups, webhooks ARGS: $1=op, $2..$N=positional args per op EX: [BLOOIO]send|<owner line, not public>|hello[/BLOOIO] TESTS: POSITIVE: {\"key\":\"BLOOIO\",\"body\":\"chats_list|5|recent\"} → HTTP 200, JSON array. INVERSE: {\"key\":\"BLOOIO\",\"body\":\"nope\"} → starts with ERR:target_map:unknown_op",
      "read": "https://miscsubjects.com/api/directory/BLOOIO",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO",
        "body": ""
      },
      "router_tag": "[BLOOIO]args[/BLOOIO]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_ADD_CONTACT_IDENTITY",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Attach a new identity (phone/email on a channel type) to an existing contact. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_ADD_CONTACT_IDENTITY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_ADD_CONTACT_IDENTITY",
        "body": ""
      },
      "router_tag": "[BLOOIO_ADD_CONTACT_IDENTITY]args[/BLOOIO_ADD_CONTACT_IDENTITY]",
      "input_schema": {
        "type": "object",
        "properties": {
          "contact_id": {
            "type": "string",
            "description": "Contact id (ct_...)."
          },
          "identifier": {
            "type": "string",
            "description": "Phone (E.164) or email to attach."
          },
          "channel_type": {
            "type": "string",
            "description": "Channel type (default 'blooio')."
          },
          "channel_id": {
            "type": "string",
            "description": "Required only for AMB identities (ch_...)."
          }
        },
        "required": [
          "contact_id",
          "identifier"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_ADD_CONTACT_TAGS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Add one or more tags to a contact (deduped). MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_ADD_CONTACT_TAGS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_ADD_CONTACT_TAGS",
        "body": ""
      },
      "router_tag": "[BLOOIO_ADD_CONTACT_TAGS]args[/BLOOIO_ADD_CONTACT_TAGS]",
      "input_schema": {
        "type": "object",
        "properties": {
          "contact_id": {
            "type": "string",
            "description": "Contact id (ct_...)."
          },
          "tags": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "Tags to add."
          }
        },
        "required": [
          "contact_id",
          "tags"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_ADD_REACTION",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "React to a message (tapback). reaction like '+love', '+like', '+laugh', '+emphasize', '+question', or remove with a '-' prefix. Blooio channels only. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_ADD_REACTION",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_ADD_REACTION",
        "body": ""
      },
      "router_tag": "[BLOOIO_ADD_REACTION]args[/BLOOIO_ADD_REACTION]",
      "input_schema": {
        "type": "object",
        "properties": {
          "chat_id": {
            "type": "string",
            "description": "Chat id (chat_...)."
          },
          "message_id": {
            "type": "string",
            "description": "Message id (msg_...) to react to."
          },
          "reaction": {
            "type": "string",
            "description": "e.g. '+love' to add, '-love' to remove."
          }
        },
        "required": [
          "chat_id",
          "message_id",
          "reaction"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_BATCH_LOOKUP_PHONE_NUMBERS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Look up up to 100 phone numbers at once. Requires an enterprise plan. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_BATCH_LOOKUP_PHONE_NUMBERS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_BATCH_LOOKUP_PHONE_NUMBERS",
        "body": ""
      },
      "router_tag": "[BLOOIO_BATCH_LOOKUP_PHONE_NUMBERS]args[/BLOOIO_BATCH_LOOKUP_PHONE_NUMBERS]",
      "input_schema": {
        "type": "object",
        "properties": {
          "numbers": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "Phone numbers in E.164 (max 100)."
          }
        },
        "required": [
          "numbers"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_CONTACT_CAPABILITIES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Check if a phone number or email is reachable via iMessage / SMS / RCS. Resolves (or creates) the contact for that identifier, then returns its capabilities. Note: creating the contact is a side effec MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_CONTACT_CAPABILITIES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_CONTACT_CAPABILITIES",
        "body": ""
      },
      "router_tag": "[BLOOIO_CONTACT_CAPABILITIES]args[/BLOOIO_CONTACT_CAPABILITIES]",
      "input_schema": {
        "type": "object",
        "properties": {
          "contact": {
            "type": "string",
            "description": "Phone number (E.164, e.g. +15551234567) or email."
          },
          "channel_type": {
            "type": "string",
            "description": "Channel type to check (default 'blooio')."
          }
        },
        "required": [
          "contact"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_CREATE_CHAT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Find or create a 1:1 chat with a recipient on a channel. Returns the chat id (chat_...) to use for sends and actions. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_CREATE_CHAT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_CREATE_CHAT",
        "body": ""
      },
      "router_tag": "[BLOOIO_CREATE_CHAT]args[/BLOOIO_CREATE_CHAT]",
      "input_schema": {
        "type": "object",
        "properties": {
          "channel_id": {
            "type": "string",
            "description": "Channel id (ch_...) to open the chat on."
          },
          "to": {
            "type": "string",
            "description": "Recipient phone (E.164) or email."
          }
        },
        "required": [
          "channel_id",
          "to"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_CREATE_CONTACT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Create a contact, optionally with one identity (phone/email on a channel type). Returns the new contact id (ct_...). MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_CREATE_CONTACT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_CREATE_CONTACT",
        "body": ""
      },
      "router_tag": "[BLOOIO_CREATE_CONTACT]args[/BLOOIO_CREATE_CONTACT]",
      "input_schema": {
        "type": "object",
        "properties": {
          "name": {
            "type": "string",
            "description": "Display name for the contact."
          },
          "identifier": {
            "type": "string",
            "description": "Phone (E.164) or email to attach as the first identity."
          },
          "channel_type": {
            "type": "string",
            "description": "Channel type for the identifier (default 'blooio')."
          },
          "channel_id": {
            "type": "string",
            "description": "Required only for AMB identities (ch_...)."
          }
        },
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_CREATE_GROUP",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Create a group chat on a group-capable channel (blooio/whatsapp) with one or more members (phones/emails). Optionally name it. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_CREATE_GROUP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_CREATE_GROUP",
        "body": ""
      },
      "router_tag": "[BLOOIO_CREATE_GROUP]args[/BLOOIO_CREATE_GROUP]",
      "input_schema": {
        "type": "object",
        "properties": {
          "channel_id": {
            "type": "string",
            "description": "Channel id (ch_...) — must be group-capable."
          },
          "members": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "Member phone numbers (E.164) or emails."
          },
          "name": {
            "type": "string",
            "description": "Optional group name."
          }
        },
        "required": [
          "channel_id",
          "members"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_CREATE_WEBHOOK",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Create a webhook that receives inbound message + delivery events. url must be https. Optionally scope to event_types (e.g. ['message.received','message.*','*']) and/or a channel. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_CREATE_WEBHOOK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_CREATE_WEBHOOK",
        "body": ""
      },
      "router_tag": "[BLOOIO_CREATE_WEBHOOK]args[/BLOOIO_CREATE_WEBHOOK]",
      "input_schema": {
        "type": "object",
        "properties": {
          "url": {
            "type": "string",
            "description": "HTTPS endpoint to receive events."
          },
          "event_types": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "Event types to subscribe to; default all."
          },
          "channel_id": {
            "type": "string",
            "description": "Scope to a channel id (ch_...)."
          },
          "channel_type": {
            "type": "string",
            "description": "Scope to a channel type."
          }
        },
        "required": [
          "url"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_DELETE_CONTACT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Delete (deprecate) a contact and its identities. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_DELETE_CONTACT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_DELETE_CONTACT",
        "body": ""
      },
      "router_tag": "[BLOOIO_DELETE_CONTACT]args[/BLOOIO_DELETE_CONTACT]",
      "input_schema": {
        "type": "object",
        "properties": {
          "contact_id": {
            "type": "string",
            "description": "Contact id (ct_...)."
          }
        },
        "required": [
          "contact_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_DELETE_GROUP",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Delete (deprecate) a group. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_DELETE_GROUP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_DELETE_GROUP",
        "body": ""
      },
      "router_tag": "[BLOOIO_DELETE_GROUP]args[/BLOOIO_DELETE_GROUP]",
      "input_schema": {
        "type": "object",
        "properties": {
          "group_id": {
            "type": "string",
            "description": "Group id (grp_...)."
          }
        },
        "required": [
          "group_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_DELETE_WEBHOOK",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Delete (deprecate) a webhook subscription. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_DELETE_WEBHOOK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_DELETE_WEBHOOK",
        "body": ""
      },
      "router_tag": "[BLOOIO_DELETE_WEBHOOK]args[/BLOOIO_DELETE_WEBHOOK]",
      "input_schema": {
        "type": "object",
        "properties": {
          "webhook_id": {
            "type": "string",
            "description": "Webhook id (wh_...)."
          }
        },
        "required": [
          "webhook_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_GET_CHANNEL",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Get a single channel by id (ch_...). MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_GET_CHANNEL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_GET_CHANNEL",
        "body": ""
      },
      "router_tag": "[BLOOIO_GET_CHANNEL]args[/BLOOIO_GET_CHANNEL]",
      "input_schema": {
        "type": "object",
        "properties": {
          "channel_id": {
            "type": "string",
            "description": "Channel id (ch_...)."
          }
        },
        "required": [
          "channel_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_GET_CHANNEL_CAPABILITIES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Get what a channel can do: supported protocols, content types, actions (typing/read), and interactive features. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_GET_CHANNEL_CAPABILITIES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_GET_CHANNEL_CAPABILITIES",
        "body": ""
      },
      "router_tag": "[BLOOIO_GET_CHANNEL_CAPABILITIES]args[/BLOOIO_GET_CHANNEL_CAPABILITIES]",
      "input_schema": {
        "type": "object",
        "properties": {
          "channel_id": {
            "type": "string",
            "description": "Channel id (ch_...)."
          }
        },
        "required": [
          "channel_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_GET_CHAT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Get a chat by id (chat_...), including state and capabilities. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_GET_CHAT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_GET_CHAT",
        "body": ""
      },
      "router_tag": "[BLOOIO_GET_CHAT]args[/BLOOIO_GET_CHAT]",
      "input_schema": {
        "type": "object",
        "properties": {
          "chat_id": {
            "type": "string",
            "description": "Chat id (chat_...)."
          }
        },
        "required": [
          "chat_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_GET_CHAT_BACKGROUND",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Get the current background image set on a chat (Blooio channels). Reads live from the device. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_GET_CHAT_BACKGROUND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_GET_CHAT_BACKGROUND",
        "body": ""
      },
      "router_tag": "[BLOOIO_GET_CHAT_BACKGROUND]args[/BLOOIO_GET_CHAT_BACKGROUND]",
      "input_schema": {
        "type": "object",
        "properties": {
          "chat_id": {
            "type": "string",
            "description": "Chat id (chat_...)."
          }
        },
        "required": [
          "chat_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_GET_CONTACT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Get a contact by id (ct_...), including its identities. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_GET_CONTACT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_GET_CONTACT",
        "body": ""
      },
      "router_tag": "[BLOOIO_GET_CONTACT]args[/BLOOIO_GET_CONTACT]",
      "input_schema": {
        "type": "object",
        "properties": {
          "contact_id": {
            "type": "string",
            "description": "Contact id (ct_...)."
          }
        },
        "required": [
          "contact_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_GET_CONTACT_CAPABILITIES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Get reachability/capabilities for an existing contact (by contact id): which protocols (iMessage/SMS/RCS) and features are available per identity. For a raw phone/email use 'contact_capabilities'. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_GET_CONTACT_CAPABILITIES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_GET_CONTACT_CAPABILITIES",
        "body": ""
      },
      "router_tag": "[BLOOIO_GET_CONTACT_CAPABILITIES]args[/BLOOIO_GET_CONTACT_CAPABILITIES]",
      "input_schema": {
        "type": "object",
        "properties": {
          "contact_id": {
            "type": "string",
            "description": "Contact id (ct_...)."
          }
        },
        "required": [
          "contact_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_GET_CONTACT_TIMELINE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Get a contact's cross-channel activity timeline (messages and events) by contact id. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_GET_CONTACT_TIMELINE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_GET_CONTACT_TIMELINE",
        "body": ""
      },
      "router_tag": "[BLOOIO_GET_CONTACT_TIMELINE]args[/BLOOIO_GET_CONTACT_TIMELINE]",
      "input_schema": {
        "type": "object",
        "properties": {
          "contact_id": {
            "type": "string",
            "description": "Contact id (ct_...)."
          },
          "limit": {
            "type": "integer",
            "description": "Max items to return (1-200)."
          },
          "cursor": {
            "type": "string",
            "description": "Opaque pagination cursor from a previous response."
          }
        },
        "required": [
          "contact_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_GET_EVENT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Get a single event by id (evt_...). MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_GET_EVENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_GET_EVENT",
        "body": ""
      },
      "router_tag": "[BLOOIO_GET_EVENT]args[/BLOOIO_GET_EVENT]",
      "input_schema": {
        "type": "object",
        "properties": {
          "event_id": {
            "type": "string",
            "description": "Event id (evt_...)."
          }
        },
        "required": [
          "event_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_GET_GROUP",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Get a group by id (grp_...), including members. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_GET_GROUP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_GET_GROUP",
        "body": ""
      },
      "router_tag": "[BLOOIO_GET_GROUP]args[/BLOOIO_GET_GROUP]",
      "input_schema": {
        "type": "object",
        "properties": {
          "group_id": {
            "type": "string",
            "description": "Group id (grp_...)."
          }
        },
        "required": [
          "group_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_GET_LOCATION_CONTACT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Get the latest location for one Find My contact by handle. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_GET_LOCATION_CONTACT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_GET_LOCATION_CONTACT",
        "body": ""
      },
      "router_tag": "[BLOOIO_GET_LOCATION_CONTACT]args[/BLOOIO_GET_LOCATION_CONTACT]",
      "input_schema": {
        "type": "object",
        "properties": {
          "handle": {
            "type": "string",
            "description": "Contact handle (phone/email/Apple ID)."
          }
        },
        "required": [
          "handle"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_GET_MESSAGE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Get full details of a message. Requires the chat id and message id (both returned by send_message). MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_GET_MESSAGE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_GET_MESSAGE",
        "body": ""
      },
      "router_tag": "[BLOOIO_GET_MESSAGE]args[/BLOOIO_GET_MESSAGE]",
      "input_schema": {
        "type": "object",
        "properties": {
          "chat_id": {
            "type": "string",
            "description": "Chat id (chat_...)."
          },
          "message_id": {
            "type": "string",
            "description": "Message id (msg_...)."
          }
        },
        "required": [
          "chat_id",
          "message_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_GET_POLL_RESULTS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Get current vote tallies for a poll. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_GET_POLL_RESULTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_GET_POLL_RESULTS",
        "body": ""
      },
      "router_tag": "[BLOOIO_GET_POLL_RESULTS]args[/BLOOIO_GET_POLL_RESULTS]",
      "input_schema": {
        "type": "object",
        "properties": {
          "chat_id": {
            "type": "string",
            "description": "Chat id (chat_...)."
          },
          "poll_id": {
            "type": "string",
            "description": "Poll id (msg_...)."
          }
        },
        "required": [
          "chat_id",
          "poll_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_GET_WEBHOOK",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Get a webhook by id (wh_...). MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_GET_WEBHOOK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_GET_WEBHOOK",
        "body": ""
      },
      "router_tag": "[BLOOIO_GET_WEBHOOK]args[/BLOOIO_GET_WEBHOOK]",
      "input_schema": {
        "type": "object",
        "properties": {
          "webhook_id": {
            "type": "string",
            "description": "Webhook id (wh_...)."
          }
        },
        "required": [
          "webhook_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LIST_CHANNELS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "List messaging channels for the org. A channel_id (ch_...) is required to send messages. Filter by type (blooio, twilio, whatsapp, whatsapp_business, rcs_business, amb) or status (active, ...). MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LIST_CHANNELS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LIST_CHANNELS",
        "body": ""
      },
      "router_tag": "[BLOOIO_LIST_CHANNELS]args[/BLOOIO_LIST_CHANNELS]",
      "input_schema": {
        "type": "object",
        "properties": {
          "type": {
            "type": "string",
            "description": "Filter by channel type, e.g. 'blooio' or 'twilio'."
          },
          "status": {
            "type": "string",
            "description": "Filter by channel status, e.g. 'active'."
          },
          "limit": {
            "type": "integer",
            "description": "Max items to return (1-200)."
          },
          "cursor": {
            "type": "string",
            "description": "Opaque pagination cursor from a previous response."
          }
        },
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LIST_CHAT_MESSAGES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "List messages in a chat, newest first by default. Use order='asc' for oldest first. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LIST_CHAT_MESSAGES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LIST_CHAT_MESSAGES",
        "body": ""
      },
      "router_tag": "[BLOOIO_LIST_CHAT_MESSAGES]args[/BLOOIO_LIST_CHAT_MESSAGES]",
      "input_schema": {
        "type": "object",
        "properties": {
          "chat_id": {
            "type": "string",
            "description": "Chat id (chat_...)."
          },
          "order": {
            "type": "string",
            "description": "'desc' (default) or 'asc'."
          },
          "limit": {
            "type": "integer",
            "description": "Max items to return (1-200)."
          },
          "cursor": {
            "type": "string",
            "description": "Opaque pagination cursor from a previous response."
          }
        },
        "required": [
          "chat_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LIST_CHATS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "List conversations (chats). Filter by channel type, state (open/closed/blocked), channel_id, or contact_id. Sorted by most recent activity. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LIST_CHATS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LIST_CHATS",
        "body": ""
      },
      "router_tag": "[BLOOIO_LIST_CHATS]args[/BLOOIO_LIST_CHATS]",
      "input_schema": {
        "type": "object",
        "properties": {
          "type": {
            "type": "string",
            "description": "Filter by channel type."
          },
          "state": {
            "type": "string",
            "description": "Filter by chat state: open, closed, or blocked."
          },
          "channel_id": {
            "type": "string",
            "description": "Filter by channel id (ch_...)."
          },
          "contact_id": {
            "type": "string",
            "description": "Filter by contact id (ct_...)."
          },
          "limit": {
            "type": "integer",
            "description": "Max items to return (1-200)."
          },
          "cursor": {
            "type": "string",
            "description": "Opaque pagination cursor from a previous response."
          }
        },
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LIST_CONTACT_IDENTITIES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "List a contact's identities (the phone numbers / emails attached to it). MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LIST_CONTACT_IDENTITIES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LIST_CONTACT_IDENTITIES",
        "body": ""
      },
      "router_tag": "[BLOOIO_LIST_CONTACT_IDENTITIES]args[/BLOOIO_LIST_CONTACT_IDENTITIES]",
      "input_schema": {
        "type": "object",
        "properties": {
          "contact_id": {
            "type": "string",
            "description": "Contact id (ct_...)."
          }
        },
        "required": [
          "contact_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LIST_CONTACT_TAGS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "List the tags on a contact. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LIST_CONTACT_TAGS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LIST_CONTACT_TAGS",
        "body": ""
      },
      "router_tag": "[BLOOIO_LIST_CONTACT_TAGS]args[/BLOOIO_LIST_CONTACT_TAGS]",
      "input_schema": {
        "type": "object",
        "properties": {
          "contact_id": {
            "type": "string",
            "description": "Contact id (ct_...)."
          }
        },
        "required": [
          "contact_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LIST_CONTACTS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "List contacts for the org. Optionally filter by a specific identifier (phone in E.164 or email) to find the contact for an address. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LIST_CONTACTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LIST_CONTACTS",
        "body": ""
      },
      "router_tag": "[BLOOIO_LIST_CONTACTS]args[/BLOOIO_LIST_CONTACTS]",
      "input_schema": {
        "type": "object",
        "properties": {
          "identifier": {
            "type": "string",
            "description": "Filter to the contact owning this phone/email."
          },
          "limit": {
            "type": "integer",
            "description": "Max items to return (1-200)."
          },
          "cursor": {
            "type": "string",
            "description": "Opaque pagination cursor from a previous response."
          }
        },
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LIST_EVENTS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "List events from the unified feed (message lifecycle, polls, groups, reactions, typing). Filter by type, chat_id, or message_id. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LIST_EVENTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LIST_EVENTS",
        "body": ""
      },
      "router_tag": "[BLOOIO_LIST_EVENTS]args[/BLOOIO_LIST_EVENTS]",
      "input_schema": {
        "type": "object",
        "properties": {
          "type": {
            "type": "string",
            "description": "Event type filter, e.g. 'message.received' or 'message.*'."
          },
          "chat_id": {
            "type": "string",
            "description": "Filter to a chat (chat_...)."
          },
          "message_id": {
            "type": "string",
            "description": "Filter to a message (msg_...)."
          },
          "limit": {
            "type": "integer",
            "description": "Max items to return (1-200)."
          },
          "cursor": {
            "type": "string",
            "description": "Opaque pagination cursor from a previous response."
          }
        },
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LIST_GROUP_MEMBERS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "List the members of a group. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LIST_GROUP_MEMBERS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LIST_GROUP_MEMBERS",
        "body": ""
      },
      "router_tag": "[BLOOIO_LIST_GROUP_MEMBERS]args[/BLOOIO_LIST_GROUP_MEMBERS]",
      "input_schema": {
        "type": "object",
        "properties": {
          "group_id": {
            "type": "string",
            "description": "Group id (grp_...)."
          }
        },
        "required": [
          "group_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LIST_GROUPS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "List group chats for the org. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LIST_GROUPS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LIST_GROUPS",
        "body": ""
      },
      "router_tag": "[BLOOIO_LIST_GROUPS]args[/BLOOIO_LIST_GROUPS]",
      "input_schema": {
        "type": "object",
        "properties": {
          "limit": {
            "type": "integer",
            "description": "Max items to return (1-200)."
          },
          "cursor": {
            "type": "string",
            "description": "Opaque pagination cursor from a previous response."
          }
        },
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LIST_LOCATION_CONTACTS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "List Find My friends/contacts sharing their location with the linked Apple account. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LIST_LOCATION_CONTACTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LIST_LOCATION_CONTACTS",
        "body": ""
      },
      "router_tag": "[BLOOIO_LIST_LOCATION_CONTACTS]args[/BLOOIO_LIST_LOCATION_CONTACTS]",
      "input_schema": {
        "type": "object",
        "properties": {},
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LIST_NUMBERS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "List the phone numbers / sender addresses available to this API key, with their channel and status. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LIST_NUMBERS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LIST_NUMBERS",
        "body": ""
      },
      "router_tag": "[BLOOIO_LIST_NUMBERS]args[/BLOOIO_LIST_NUMBERS]",
      "input_schema": {
        "type": "object",
        "properties": {},
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LIST_WEBHOOK_DELIVERIES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "List recent delivery attempts for a webhook (status, attempt count, response code). MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LIST_WEBHOOK_DELIVERIES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LIST_WEBHOOK_DELIVERIES",
        "body": ""
      },
      "router_tag": "[BLOOIO_LIST_WEBHOOK_DELIVERIES]args[/BLOOIO_LIST_WEBHOOK_DELIVERIES]",
      "input_schema": {
        "type": "object",
        "properties": {
          "webhook_id": {
            "type": "string",
            "description": "Webhook id (wh_...)."
          },
          "limit": {
            "type": "integer",
            "description": "Max items to return (1-200)."
          },
          "cursor": {
            "type": "string",
            "description": "Opaque pagination cursor from a previous response."
          }
        },
        "required": [
          "webhook_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LIST_WEBHOOKS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "List configured webhook subscriptions. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LIST_WEBHOOKS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LIST_WEBHOOKS",
        "body": ""
      },
      "router_tag": "[BLOOIO_LIST_WEBHOOKS]args[/BLOOIO_LIST_WEBHOOKS]",
      "input_schema": {
        "type": "object",
        "properties": {
          "limit": {
            "type": "integer",
            "description": "Max items to return (1-200)."
          },
          "cursor": {
            "type": "string",
            "description": "Opaque pagination cursor from a previous response."
          }
        },
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LOOKUP_PHONE_NUMBER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Look up parsed info / geocoding for a phone number (E.164). Requires an enterprise plan. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LOOKUP_PHONE_NUMBER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LOOKUP_PHONE_NUMBER",
        "body": ""
      },
      "router_tag": "[BLOOIO_LOOKUP_PHONE_NUMBER]args[/BLOOIO_LOOKUP_PHONE_NUMBER]",
      "input_schema": {
        "type": "object",
        "properties": {
          "number": {
            "type": "string",
            "description": "Phone number in E.164."
          }
        },
        "required": [
          "number"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_MARK_CHAT_READ",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Mark a chat as read (sends a read receipt). Blooio channels only. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_MARK_CHAT_READ",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_MARK_CHAT_READ",
        "body": ""
      },
      "router_tag": "[BLOOIO_MARK_CHAT_READ]args[/BLOOIO_MARK_CHAT_READ]",
      "input_schema": {
        "type": "object",
        "properties": {
          "chat_id": {
            "type": "string",
            "description": "Chat id (chat_...)."
          }
        },
        "required": [
          "chat_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_ME",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Get the authenticated account: organization, linked devices/numbers, usage, and API key validity. Use to confirm who the key belongs to before acting. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_ME",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_ME",
        "body": ""
      },
      "router_tag": "[BLOOIO_ME]args[/BLOOIO_ME]",
      "input_schema": {
        "type": "object",
        "properties": {},
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_REFRESH_LOCATION_CONTACTS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Force a refresh of Find My location data from the device. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_REFRESH_LOCATION_CONTACTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_REFRESH_LOCATION_CONTACTS",
        "body": ""
      },
      "router_tag": "[BLOOIO_REFRESH_LOCATION_CONTACTS]args[/BLOOIO_REFRESH_LOCATION_CONTACTS]",
      "input_schema": {
        "type": "object",
        "properties": {},
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_REMOVE_CHAT_BACKGROUND",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Remove the background image from a chat (Blooio channels). MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_REMOVE_CHAT_BACKGROUND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_REMOVE_CHAT_BACKGROUND",
        "body": ""
      },
      "router_tag": "[BLOOIO_REMOVE_CHAT_BACKGROUND]args[/BLOOIO_REMOVE_CHAT_BACKGROUND]",
      "input_schema": {
        "type": "object",
        "properties": {
          "chat_id": {
            "type": "string",
            "description": "Chat id (chat_...)."
          }
        },
        "required": [
          "chat_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_REMOVE_CONTACT_IDENTITY",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Detach an identity from a contact. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_REMOVE_CONTACT_IDENTITY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_REMOVE_CONTACT_IDENTITY",
        "body": ""
      },
      "router_tag": "[BLOOIO_REMOVE_CONTACT_IDENTITY]args[/BLOOIO_REMOVE_CONTACT_IDENTITY]",
      "input_schema": {
        "type": "object",
        "properties": {
          "contact_id": {
            "type": "string",
            "description": "Contact id (ct_...)."
          },
          "identity_id": {
            "type": "string",
            "description": "Identity id (cid_...)."
          }
        },
        "required": [
          "contact_id",
          "identity_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_REMOVE_CONTACT_TAG",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Remove a single tag from a contact. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_REMOVE_CONTACT_TAG",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_REMOVE_CONTACT_TAG",
        "body": ""
      },
      "router_tag": "[BLOOIO_REMOVE_CONTACT_TAG]args[/BLOOIO_REMOVE_CONTACT_TAG]",
      "input_schema": {
        "type": "object",
        "properties": {
          "contact_id": {
            "type": "string",
            "description": "Contact id (ct_...)."
          },
          "tag": {
            "type": "string",
            "description": "Tag to remove."
          }
        },
        "required": [
          "contact_id",
          "tag"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_REMOVE_GROUP_ICON",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Remove a group's icon image. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_REMOVE_GROUP_ICON",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_REMOVE_GROUP_ICON",
        "body": ""
      },
      "router_tag": "[BLOOIO_REMOVE_GROUP_ICON]args[/BLOOIO_REMOVE_GROUP_ICON]",
      "input_schema": {
        "type": "object",
        "properties": {
          "group_id": {
            "type": "string",
            "description": "Group id (grp_...)."
          }
        },
        "required": [
          "group_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_REPLAY_WEBHOOK_DELIVERY",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Re-send a past webhook delivery by id (wdel_...). MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_REPLAY_WEBHOOK_DELIVERY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_REPLAY_WEBHOOK_DELIVERY",
        "body": ""
      },
      "router_tag": "[BLOOIO_REPLAY_WEBHOOK_DELIVERY]args[/BLOOIO_REPLAY_WEBHOOK_DELIVERY]",
      "input_schema": {
        "type": "object",
        "properties": {
          "webhook_id": {
            "type": "string",
            "description": "Webhook id (wh_...)."
          },
          "delivery_id": {
            "type": "string",
            "description": "Delivery id (wdel_...)."
          }
        },
        "required": [
          "webhook_id",
          "delivery_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_ROTATE_WEBHOOK_SECRET",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Rotate a webhook's signing secret. Returns the new secret once — store it to verify signatures. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_ROTATE_WEBHOOK_SECRET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_ROTATE_WEBHOOK_SECRET",
        "body": ""
      },
      "router_tag": "[BLOOIO_ROTATE_WEBHOOK_SECRET]args[/BLOOIO_ROTATE_WEBHOOK_SECRET]",
      "input_schema": {
        "type": "object",
        "properties": {
          "webhook_id": {
            "type": "string",
            "description": "Webhook id (wh_...)."
          }
        },
        "required": [
          "webhook_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_SEND_CHAT_MESSAGE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "blooioSendChatText",
      "description": "WHAT: Send a message into an existing chat (chat_...). $1=chat_id, rest = message text — plain text is safe, pipes/quotes/newlines never break it. WHEN_TO_USE: reply into a Blooio chat when you have its chat_id. EX: [BLOOIO_SEND_CHAT_MESSAGE]chat_abc123|hello there[/BLOOIO_SEND_CHAT_MESSAGE]",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_SEND_CHAT_MESSAGE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_SEND_CHAT_MESSAGE",
        "body": ""
      },
      "router_tag": "[BLOOIO_SEND_CHAT_MESSAGE]args[/BLOOIO_SEND_CHAT_MESSAGE]",
      "input_schema": {
        "type": "object",
        "properties": {
          "chat_id": {
            "type": "string",
            "description": "Chat id (chat_...)."
          },
          "text": {
            "type": "string",
            "description": "Message text (optional if attachments/content given)."
          },
          "attachments": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "Public URLs to attach."
          },
          "content": {
            "type": "object",
            "description": "Advanced: full v4 content object."
          },
          "reply_to": {
            "type": "string",
            "description": "Message id to reply to."
          },
          "dry_run": {
            "type": "boolean",
            "description": "Validate and route only; do not send."
          },
          "idempotencyKey": {
            "type": "string",
            "description": "Optional key for safe retries."
          }
        },
        "required": [
          "chat_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_SEND_MESSAGE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "WHAT: Low-level Blooio send. ADVANCED — needs a channel_id (ch_..., from list_channels) plus to/text. WHEN_TO_USE: only when you ALREADY have a channel_id. To just text the custodian, use SEND_BY_CHANNEL instead. ARGS: full MCP args (channel_id required) EX: to text the custodian use SEND_BY_CHANNEL — [SEND_BY_CHANNEL]blooio|<owner line, not public>|hi[/SEND_BY_CHANNEL] MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_SEND_MESSAGE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_SEND_MESSAGE",
        "body": ""
      },
      "router_tag": "[BLOOIO_SEND_MESSAGE]args[/BLOOIO_SEND_MESSAGE]",
      "input_schema": {
        "type": "object",
        "properties": {
          "channel_id": {
            "type": "string",
            "description": "Channel id (ch_...) to send from. Required."
          },
          "to": {
            "type": "string",
            "description": "Recipient phone (E.164) or email. Comma-separate or use array for multiple."
          },
          "text": {
            "type": "string",
            "description": "Message text (optional if attachments/content given)."
          },
          "attachments": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "Public URLs of images/videos/files to attach."
          },
          "content": {
            "type": "object",
            "description": "Advanced: full v4 content object ({type:'text'|'media'|'multipart'|'rich_link', ...}). Overrides text/attachments."
          },
          "reply_to": {
            "type": "string",
            "description": "Message id to reply to (threaded reply)."
          },
          "effect": {
            "type": "string",
            "description": "iMessage screen/bubble effect for text (Blooio)."
          },
          "link_preview": {
            "type": "object",
            "description": "Link preview override for a text URL ({ imageUrl?, title? })."
          },
          "dry_run": {
            "type": "boolean",
            "description": "Validate and route only; do not send."
          },
          "idempotencyKey": {
            "type": "string",
            "description": "Optional key for safe retries."
          }
        },
        "required": [
          "channel_id",
          "to"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_SEND_POLL",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Send a native iMessage poll to a chat. Requires a title and 2+ options. Blooio channels only. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_SEND_POLL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_SEND_POLL",
        "body": ""
      },
      "router_tag": "[BLOOIO_SEND_POLL]args[/BLOOIO_SEND_POLL]",
      "input_schema": {
        "type": "object",
        "properties": {
          "chat_id": {
            "type": "string",
            "description": "Chat id (chat_...)."
          },
          "title": {
            "type": "string",
            "description": "Poll question/title."
          },
          "options": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "2+ option strings."
          }
        },
        "required": [
          "chat_id",
          "title",
          "options"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_SET_TYPING",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Show or clear a typing indicator in a chat. state='started' to show, 'stopped' to clear. Blooio channels only. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_SET_TYPING",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_SET_TYPING",
        "body": ""
      },
      "router_tag": "[BLOOIO_SET_TYPING]args[/BLOOIO_SET_TYPING]",
      "input_schema": {
        "type": "object",
        "properties": {
          "chat_id": {
            "type": "string",
            "description": "Chat id (chat_...)."
          },
          "state": {
            "type": "string",
            "description": "'started' (default) or 'stopped'."
          }
        },
        "required": [
          "chat_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_SHARE_CONTACT_CARD",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Share the sender's contact card into a chat (helps the recipient see your name/photo). Blooio channels only. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_SHARE_CONTACT_CARD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_SHARE_CONTACT_CARD",
        "body": ""
      },
      "router_tag": "[BLOOIO_SHARE_CONTACT_CARD]args[/BLOOIO_SHARE_CONTACT_CARD]",
      "input_schema": {
        "type": "object",
        "properties": {
          "chat_id": {
            "type": "string",
            "description": "Chat id (chat_...)."
          }
        },
        "required": [
          "chat_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_UPDATE_CHANNEL_PROFILE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Update a channel's profile metadata (e.g. display name, avatar URL). The profile object is stored verbatim. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_UPDATE_CHANNEL_PROFILE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_UPDATE_CHANNEL_PROFILE",
        "body": ""
      },
      "router_tag": "[BLOOIO_UPDATE_CHANNEL_PROFILE]args[/BLOOIO_UPDATE_CHANNEL_PROFILE]",
      "input_schema": {
        "type": "object",
        "properties": {
          "channel_id": {
            "type": "string",
            "description": "Channel id (ch_...)."
          },
          "profile": {
            "type": "object",
            "description": "Profile fields to store."
          }
        },
        "required": [
          "channel_id",
          "profile"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_UPDATE_CHAT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Update a chat: set state to 'open' or 'closed', and/or merge metadata. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_UPDATE_CHAT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_UPDATE_CHAT",
        "body": ""
      },
      "router_tag": "[BLOOIO_UPDATE_CHAT]args[/BLOOIO_UPDATE_CHAT]",
      "input_schema": {
        "type": "object",
        "properties": {
          "chat_id": {
            "type": "string",
            "description": "Chat id (chat_...)."
          },
          "state": {
            "type": "string",
            "description": "New state: 'open' or 'closed'."
          },
          "metadata": {
            "type": "object",
            "description": "Metadata to merge."
          }
        },
        "required": [
          "chat_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_UPDATE_CONTACT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Rename a contact. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_UPDATE_CONTACT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_UPDATE_CONTACT",
        "body": ""
      },
      "router_tag": "[BLOOIO_UPDATE_CONTACT]args[/BLOOIO_UPDATE_CONTACT]",
      "input_schema": {
        "type": "object",
        "properties": {
          "contact_id": {
            "type": "string",
            "description": "Contact id (ct_...)."
          },
          "name": {
            "type": "string",
            "description": "New display name."
          }
        },
        "required": [
          "contact_id",
          "name"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_UPDATE_GROUP",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Rename a group. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_UPDATE_GROUP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_UPDATE_GROUP",
        "body": ""
      },
      "router_tag": "[BLOOIO_UPDATE_GROUP]args[/BLOOIO_UPDATE_GROUP]",
      "input_schema": {
        "type": "object",
        "properties": {
          "group_id": {
            "type": "string",
            "description": "Group id (grp_...)."
          },
          "name": {
            "type": "string",
            "description": "New group name."
          }
        },
        "required": [
          "group_id",
          "name"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_UPDATE_WEBHOOK",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Update a webhook: change url, event_types, or status ('active'/'disabled'). MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_UPDATE_WEBHOOK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_UPDATE_WEBHOOK",
        "body": ""
      },
      "router_tag": "[BLOOIO_UPDATE_WEBHOOK]args[/BLOOIO_UPDATE_WEBHOOK]",
      "input_schema": {
        "type": "object",
        "properties": {
          "webhook_id": {
            "type": "string",
            "description": "Webhook id (wh_...)."
          },
          "url": {
            "type": "string",
            "description": "New HTTPS endpoint."
          },
          "event_types": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "New event type subscription list."
          },
          "status": {
            "type": "string",
            "description": "'active' or 'disabled'."
          }
        },
        "required": [
          "webhook_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_VOTE_POLL",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "blooio",
      "target": "mcpToolCall",
      "description": "Cast (or toggle) a vote on a poll by option_index (0-based) or option text. Blooio channels only. MCP: https://mcp.blooio.com/v4",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_VOTE_POLL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_VOTE_POLL",
        "body": ""
      },
      "router_tag": "[BLOOIO_VOTE_POLL]args[/BLOOIO_VOTE_POLL]",
      "input_schema": {
        "type": "object",
        "properties": {
          "chat_id": {
            "type": "string",
            "description": "Chat id (chat_...)."
          },
          "poll_id": {
            "type": "string",
            "description": "Poll id (msg_...) returned by send_poll."
          },
          "option_index": {
            "type": "integer",
            "description": "0-based option index."
          },
          "option": {
            "type": "string",
            "description": "Option text (alternative to option_index)."
          }
        },
        "required": [
          "chat_id",
          "poll_id"
        ],
        "additionalProperties": false
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CHANNEL_APIS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "blooio",
      "target": "GET https://backend.blooio.com",
      "description": "WHAT: Channel + commerce API hosts (external). Tools that call them live as their own rows WHEN_TO_USE: you need to channel apis ARGS: see content EX: [CHANNEL_APIS][/CHANNEL_APIS] Channel + commerce API hosts (external). Tools that call them live as their own rows. Blooio (iMessage) https://backend.blooio.com  · key BLOOIO_API_KEY  · rows BLOOIO_* 2chat (WhatsApp)  https://api.p.2chat.io       · key TWOCHAT_API_KEY Stripe            https://api.stripe.com        · key STRIPE_SECRET_KEY · rows STRIPE_* (GET only by law) Meta CAPI         https://graph.facebook.com    · functions/capi.js DuoPlus CloudPhone https://openapi.duoplus.net  · header DuoPlus-API-Key",
      "read": "https://miscsubjects.com/api/directory/CHANNEL_APIS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CHANNEL_APIS",
        "body": ""
      },
      "router_tag": "[CHANNEL_APIS]args[/CHANNEL_APIS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SEND_IMAGE_BLOOIO",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "blooio",
      "target": "POST https://backend.blooio.com/v2/api/chats/$1/messages",
      "description": "WHAT: Send a message with an image to a Blooio chat (phone or group id) WHEN_TO_USE: you need to send image blooio ARGS: chat|text|attachment_url EX: [SEND_IMAGE_BLOOIO]arg2|arg3[/SEND_IMAGE_BLOOIO]",
      "read": "https://miscsubjects.com/api/directory/SEND_IMAGE_BLOOIO",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SEND_IMAGE_BLOOIO",
        "body": ""
      },
      "router_tag": "[SEND_IMAGE_BLOOIO]args[/SEND_IMAGE_BLOOIO]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "VERIFY_BLOOIO_SIG",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "blooio",
      "target": "hmacSha256Hex",
      "description": "WHAT: HMAC-SHA256 hex of $1=body using env.BLOOIO_WEBHOOK_SECRET WHEN_TO_USE: verify Blooio inbound signatures ARGS: $1 EX: [VERIFY_BLOOIO_SIG]arg1[/VERIFY_BLOOIO_SIG]",
      "read": "https://miscsubjects.com/api/directory/VERIFY_BLOOIO_SIG",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "VERIFY_BLOOIO_SIG",
        "body": ""
      },
      "router_tag": "[VERIFY_BLOOIO_SIG]args[/VERIFY_BLOOIO_SIG]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PLAYWRIGHT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "browser",
      "target": "playwrightReply",
      "description": "WHAT: Proxy a tool call to the Playwright MCP server on the Mac bridge WHEN_TO_USE: drive a real browser: navigate, click, type, screenshot, evaluate JS, manage tabs ARGS: $1=tool_name, $2+=JSON arguments EX: [PLAYWRIGHT]browser_navigate|{\"url\":\"https://example.com\"}[/PLAYWRIGHT] TESTS: browser_navigate https://example.com returns page title/snapshot",
      "read": "https://miscsubjects.com/api/directory/PLAYWRIGHT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PLAYWRIGHT",
        "body": ""
      },
      "router_tag": "[PLAYWRIGHT]args[/PLAYWRIGHT]",
      "input_schema": {
        "type": "object",
        "properties": {
          "body": {
            "type": "string",
            "description": "tool_name|JSON args, e.g. browser_navigate|{\\\"url\\\":\\\"https://example.com\\\"}"
          }
        },
        "required": [
          "body"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PLAYWRIGHT_START",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": "browser",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Start the Playwright MCP server on the Mac bridge\\n# WHEN_TO_USE: before calling PLAYWRIGHT if the server is not running\\n# ARGS: none\\n# EX: [PLAYWRIGHT_START][/PLAYWRIGHT_START]\\n{\"cmd\":\"sh\",\"args\":[\"-lc\",\"/Users/[custodian]/miscsubjects-pages/bridge/playwright-mcp-launcher.sh\"],\"timeout\":600000}",
      "read": "https://miscsubjects.com/api/directory/PLAYWRIGHT_START",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PLAYWRIGHT_START",
        "body": ""
      },
      "router_tag": "[PLAYWRIGHT_START]args[/PLAYWRIGHT_START]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "UI_SURFACE_PROBE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "build",
      "target": "uiSurfaceProbe",
      "description": "WHAT: Compare operator-visible fetch (no terminal key) vs agent fetch — ledgered mismatch flag. WHEN_TO_USE: Before claiming any admin page or live URL works; after deploy of user-visible UI. ARGS: $1=url path or full URL; optional $2=extra|markers|pipe|delimited EX: [UI_SURFACE_PROBE]/admin/marketing[/UI_SURFACE_PROBE] EX: [UI_SURFACE_PROBE]/api/marketing/accounts|11 accounts[/UI_SURFACE_PROBE]",
      "read": "https://miscsubjects.com/api/directory/UI_SURFACE_PROBE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "UI_SURFACE_PROBE",
        "body": ""
      },
      "router_tag": "[UI_SURFACE_PROBE]args[/UI_SURFACE_PROBE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BUILDER_ADD",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "builder",
      "target": "builderAdd",
      "description": "WHAT: append a row to builder_queue. status defaults to \"idea\", priority to 5. WHEN_TO_USE: the custodian says \"I want to build X\" or \"track X\" or anything that should become work. ARGS: title|body|priority(1-9, default 5). EX: BUILDER_ADD \"iOS share-sheet shortcut\"|\"create a Shortcut that POSTs the current Safari URL to /api/phone/in with action=share_url\"|3 TESTS: builder_queue grows by 1; SELECT id, title, status FROM builder_queue ORDER BY id DESC LIMIT 1 returns the new row.",
      "read": "https://miscsubjects.com/api/directory/BUILDER_ADD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BUILDER_ADD",
        "body": ""
      },
      "router_tag": "[BUILDER_ADD]args[/BUILDER_ADD]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BUILDER_DELETE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "builder",
      "target": "builderDelete",
      "description": "WHAT: delete a row from builder_queue. ARGS: id.",
      "read": "https://miscsubjects.com/api/directory/BUILDER_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BUILDER_DELETE",
        "body": ""
      },
      "router_tag": "[BUILDER_DELETE]args[/BUILDER_DELETE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BUILDER_DONE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "builder",
      "target": "builderDone",
      "description": "WHAT: mark id done + record proof (link/exhibit). ARGS: id|proof. WHEN_TO_USE: shipped; record what proves it shipped.",
      "read": "https://miscsubjects.com/api/directory/BUILDER_DONE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BUILDER_DONE",
        "body": ""
      },
      "router_tag": "[BUILDER_DONE]args[/BUILDER_DONE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BUILDER_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "builder",
      "target": "builderList",
      "description": "WHAT: return the current builder queue as JSON, sorted by priority. ARGS: optional status filter (idea|queued|in_progress|blocked|done|wont). WHEN_TO_USE: \"what am I building\", \"show me the queue\", \"what's next\". ARGS: status (optional, default = exclude done+wont).",
      "read": "https://miscsubjects.com/api/directory/BUILDER_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BUILDER_LIST",
        "body": ""
      },
      "router_tag": "[BUILDER_LIST]args[/BUILDER_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BUILDER_NEXT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "builder",
      "target": "builderNext",
      "description": "WHAT: pick the single highest-priority queued item. WHEN_TO_USE: \"what should I work on\", \"give me the next thing\". ARGS: (none).",
      "read": "https://miscsubjects.com/api/directory/BUILDER_NEXT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BUILDER_NEXT",
        "body": ""
      },
      "router_tag": "[BUILDER_NEXT]args[/BUILDER_NEXT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BUILDER_PATCH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "builder",
      "target": "builderPatch",
      "description": "WHAT: update one row's status/priority/title/body/blocker/proof. ARGS: id|field|value. WHEN_TO_USE: refine an item, move it to in_progress, mark blocker, etc. EX: BUILDER_PATCH 7|status|in_progress",
      "read": "https://miscsubjects.com/api/directory/BUILDER_PATCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BUILDER_PATCH",
        "body": ""
      },
      "router_tag": "[BUILDER_PATCH]args[/BUILDER_PATCH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AGENT_IMPORT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "capability",
      "target": "agentImport",
      "description": "WHAT: Cannibalize an agent definition (md frontmatter name/description/model/tools) into a proposed agent row. PROPOSE only WHEN_TO_USE: you need to agent import ARGS: source(url|r2:key|raw)|category EX: [AGENT_IMPORT]arg1|arg2[/AGENT_IMPORT]",
      "read": "https://miscsubjects.com/api/directory/AGENT_IMPORT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AGENT_IMPORT",
        "body": ""
      },
      "router_tag": "[AGENT_IMPORT]args[/AGENT_IMPORT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_API_GAPS",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "capability",
      "target": "cfApiGaps",
      "description": "WHAT: Analyze the CF row target_map. Returns counts, known namespaces, expected namespaces, missing namespaces, coverage_pct WHEN_TO_USE: you need to cf api gaps ARGS: none EX: [CF_API_GAPS][/CF_API_GAPS]",
      "read": "https://miscsubjects.com/api/directory/CF_API_GAPS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_API_GAPS",
        "body": ""
      },
      "router_tag": "[CF_API_GAPS]args[/CF_API_GAPS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DISCOVER_SOURCE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "capability",
      "target": "discoverSource",
      "description": "WHAT: Fetch a public URL (API docs, OpenAPI spec, GitHub raw, vendor SDK readme) and persist the raw body to R2 under capability_sources/<sha16>.txt. Returns {url, bytes, r2_key, sha256_16, status}. First step of universe-to-row. $1=URL WHEN_TO_USE: you need to discover source ARGS: $1 EX: [DISCOVER_SOURCE]arg1[/DISCOVER_SOURCE]",
      "read": "https://miscsubjects.com/api/directory/DISCOVER_SOURCE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DISCOVER_SOURCE",
        "body": ""
      },
      "router_tag": "[DISCOVER_SOURCE]args[/DISCOVER_SOURCE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "EXTRACT_CAPABILITIES",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "capability",
      "target": "extractCapabilities",
      "description": "WHAT: Given an R2 key from DISCOVER_SOURCE, run a Workers AI Llama call to extract a JSON array of {op, method, url_or_signature,  Truncates input at 20KB. Second step of universe-to-row. $1=r2_key, $2=optional model id (default @cf/meta/llama-3.3-70b-instruct-fp8-fast) WHEN_TO_USE: you need to extract capabilities ARGS: [{name,type,required}], description} EX: [EXTRACT_CAPABILITIES]arg1|arg2[/EXTRACT_CAPABILITIES]",
      "read": "https://miscsubjects.com/api/directory/EXTRACT_CAPABILITIES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "EXTRACT_CAPABILITIES",
        "body": ""
      },
      "router_tag": "[EXTRACT_CAPABILITIES]args[/EXTRACT_CAPABILITIES]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GAP_REPORT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "capability",
      "target": "gapReport",
      "description": "WHAT: Given the same shape as PROPOSE_ROWS, diff the discovered ops against existing directory keys. Returns {ops_total, found, missing, missing_ops[]}. Surfaces what is genuinely new WHEN_TO_USE: you need to gap report ARGS: $1 EX: [GAP_REPORT]arg1[/GAP_REPORT]",
      "read": "https://miscsubjects.com/api/directory/GAP_REPORT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GAP_REPORT",
        "body": ""
      },
      "router_tag": "[GAP_REPORT]args[/GAP_REPORT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MCP_IMPORT",
      "object_type": "mcp",
      "runner": "edge",
      "directory_type": "fn",
      "category": "capability",
      "target": "mcpImport",
      "description": "WHAT: Cannibalize an MCP server: read its tools/list and emit a proposed directory row per tool (GAP-checked vs existing keys). PROPOSE only — returns SQL; apply with D1_EXEC or wrangler WHEN_TO_USE: you need to mcp import ARGS: server_url|category|auth_env_var EX: [MCP_IMPORT]arg1|arg2|arg3[/MCP_IMPORT]",
      "read": "https://miscsubjects.com/api/directory/MCP_IMPORT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MCP_IMPORT",
        "body": ""
      },
      "router_tag": "[MCP_IMPORT]args[/MCP_IMPORT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROPOSE_ROWS",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "capability",
      "target": "proposeRows",
      "description": "WHAT: Given the JSON output of EXTRACT_CAPABILITIES (raw JSON string OR an r2_key starting with capability_sources/), emit SQL INSERTs for new directory rows, one per discovered op. Rows land disabled + planner_visible=0 so the owner can review before activating. $1=ops_json_or_r2_key, $2=category prefix (default \"discovered\") WHEN_TO_USE: you need to propose rows ARGS: $1 | $2 EX: [PROPOSE_ROWS]arg1|arg2[/PROPOSE_ROWS]",
      "read": "https://miscsubjects.com/api/directory/PROPOSE_ROWS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROPOSE_ROWS",
        "body": ""
      },
      "router_tag": "[PROPOSE_ROWS]args[/PROPOSE_ROWS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SKILL_IMPORT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "capability",
      "target": "skillImport",
      "description": "WHAT: Cannibalize a SKILL.md (frontmatter name+description, markdown body) into a proposed agent row. PROPOSE only WHEN_TO_USE: you need to skill import ARGS: source(url|r2:key|raw)|model|category EX: [SKILL_IMPORT]arg1|arg2|arg3[/SKILL_IMPORT]",
      "read": "https://miscsubjects.com/api/directory/SKILL_IMPORT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SKILL_IMPORT",
        "body": ""
      },
      "router_tag": "[SKILL_IMPORT]args[/SKILL_IMPORT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_AI_GATEWAY_GET_LOG_DETAILS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_ai_gateway",
      "target": "mcpToolCall",
      "description": "Get a single Log details MCP: https://ai-gateway.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_AI_GATEWAY_GET_LOG_DETAILS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_AI_GATEWAY_GET_LOG_DETAILS",
        "body": ""
      },
      "router_tag": "[CF_AI_GATEWAY_GET_LOG_DETAILS]args[/CF_AI_GATEWAY_GET_LOG_DETAILS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "gateway_id": {
            "type": "string",
            "description": "The gateway ID."
          },
          "log_id": {
            "type": "string"
          }
        },
        "required": [
          "gateway_id",
          "log_id"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_AI_GATEWAY_GET_LOG_REQUEST_BODY",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_ai_gateway",
      "target": "mcpToolCall",
      "description": "Get Log Request Body MCP: https://ai-gateway.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_AI_GATEWAY_GET_LOG_REQUEST_BODY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_AI_GATEWAY_GET_LOG_REQUEST_BODY",
        "body": ""
      },
      "router_tag": "[CF_AI_GATEWAY_GET_LOG_REQUEST_BODY]args[/CF_AI_GATEWAY_GET_LOG_REQUEST_BODY]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "gateway_id": {
            "type": "string",
            "description": "The gateway ID."
          },
          "log_id": {
            "type": "string"
          }
        },
        "required": [
          "gateway_id",
          "log_id"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_AI_GATEWAY_GET_LOG_RESPONSE_BODY",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_ai_gateway",
      "target": "mcpToolCall",
      "description": "Get Log Response Body MCP: https://ai-gateway.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_AI_GATEWAY_GET_LOG_RESPONSE_BODY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_AI_GATEWAY_GET_LOG_RESPONSE_BODY",
        "body": ""
      },
      "router_tag": "[CF_AI_GATEWAY_GET_LOG_RESPONSE_BODY]args[/CF_AI_GATEWAY_GET_LOG_RESPONSE_BODY]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "gateway_id": {
            "type": "string",
            "description": "The gateway ID."
          },
          "log_id": {
            "type": "string"
          }
        },
        "required": [
          "gateway_id",
          "log_id"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_AI_GATEWAY_LIST_GATEWAYS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_ai_gateway",
      "target": "mcpToolCall",
      "description": "List Gateways MCP: https://ai-gateway.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_AI_GATEWAY_LIST_GATEWAYS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_AI_GATEWAY_LIST_GATEWAYS",
        "body": ""
      },
      "router_tag": "[CF_AI_GATEWAY_LIST_GATEWAYS]args[/CF_AI_GATEWAY_LIST_GATEWAYS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "page": {
            "default": 1,
            "type": "integer",
            "minimum": 1,
            "maximum": 9007199254740991
          },
          "per_page": {
            "default": 20,
            "type": "integer",
            "minimum": 1,
            "maximum": 50
          }
        }
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_AI_GATEWAY_LIST_LOGS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_ai_gateway",
      "target": "mcpToolCall",
      "description": "List Logs MCP: https://ai-gateway.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_AI_GATEWAY_LIST_LOGS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_AI_GATEWAY_LIST_LOGS",
        "body": ""
      },
      "router_tag": "[CF_AI_GATEWAY_LIST_LOGS]args[/CF_AI_GATEWAY_LIST_LOGS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "gateway_id": {
            "type": "string",
            "description": "The gateway ID."
          },
          "page": {
            "default": 1,
            "type": "integer",
            "minimum": 1,
            "maximum": 9007199254740991
          },
          "per_page": {
            "default": 20,
            "type": "integer",
            "minimum": 1,
            "maximum": 50
          },
          "order_by": {
            "default": "created_at",
            "type": "string",
            "enum": [
              "created_at",
              "provider",
              "model",
              "model_type",
              "success",
              "cached",
              "cost",
              "tokens_in",
              "tokens_out",
              "duration",
              "feedback"
            ]
          },
          "order_by_direction": {
            "default": "desc",
            "type": "string",
            "enum": [
              "asc",
              "desc"
            ]
          },
          "start_date": {
            "type": "string",
            "format": "date-time",
            "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
          },
          "end_date": {
            "type": "string",
            "format": "date-time",
            "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
          },
          "feedback": {
            "anyOf": [
              {
                "type": "number",
                "const": -1
              },
              {
                "type": "number",
                "const": 0
              },
              {
                "type": "number",
                "const": 1
              }
            ]
          },
          "success": {
            "type": "boolean"
          },
          "cached": {
            "type": "boolean"
          },
          "model": {
            "type": "string"
          },
          "provider": {
            "type": "string"
          }
        },
        "required": [
          "gateway_id"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_AUDITLOGS_AUDITLOGS_BY_ACCOUNT_ID",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_auditlogs",
      "target": "mcpToolCall",
      "description": "Find all audit logs (a list of who made what change when) for a Cloudflare Account by ID. This can be used to query activity on your Cloudflare account at a particular time. Since and before are requi MCP: https://auditlogs.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_AUDITLOGS_AUDITLOGS_BY_ACCOUNT_ID",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_AUDITLOGS_AUDITLOGS_BY_ACCOUNT_ID",
        "body": ""
      },
      "router_tag": "[CF_AUDITLOGS_AUDITLOGS_BY_ACCOUNT_ID]args[/CF_AUDITLOGS_AUDITLOGS_BY_ACCOUNT_ID]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "account_name": {
            "description": "The account name to filter audit logs by.",
            "type": "string"
          },
          "action_result": {
            "description": "Whether the action was a success or failure.",
            "type": "string",
            "enum": [
              "success",
              "failure",
              ""
            ]
          },
          "action_type": {
            "description": "The type of action that was performed.",
            "type": "string",
            "enum": [
              "create",
              "delete",
              "view",
              "update",
              "login"
            ]
          },
          "actor_context": {
            "description": "The context in which the actor was operating.",
            "type": "string",
            "enum": [
              "api_key",
              "api_token",
              "dash",
              "oauth",
              "origin_ca_key"
            ]
          },
          "actor_email": {
            "description": "The email of the actor who triggered the event.",
            "type": "string",
            "format": "email",
            "pattern": "^(?!\\.)(?!.*\\.\\.)([A-Za-z0-9_'+\\-\\.]*)[A-Za-z0-9_+-]@([A-Za-z0-9][A-Za-z0-9\\-]*\\.)+[A-Za-z]{2,}$"
          },
          "actor_id": {
            "description": "The unique identifier of the actor.",
            "type": "string"
          },
          "actor_ip_address": {
            "description": "The IP address of the actor.",
            "type": "string"
          },
          "actor_token_id": {
            "description": "The API token ID used by the actor.",
            "type": "string"
          },
          "actor_token_name": {
            "description": "The name of the API token used by the actor.",
            "type": "string"
          },
          "actor_type": {
            "description": "The type of actor (e.g., user, token).",
            "type": "string",
            "enum": [
              "cloudflare_admin",
              "account",
              "user",
              "system"
            ]
          },
          "audit_log_id": {
            "description": "The unique identifier of the audit log entry.",
            "type": "string"
          },
          "raw_cf_ray_id": {
            "description": "The Cloudflare Ray ID associated with the request.",
            "type": "string"
          },
          "raw_method": {
            "description": "The HTTP method used in the request (e.g., GET, POST).",
            "type": "string"
          },
          "raw_status_code": {
            "description": "The HTTP status code returned by the request.",
            "type": "number"
          },
          "raw_uri": {
            "description": "The URI accessed in the request.",
            "type": "string"
          },
          "resource_id": {
            "description": "The unique identifier of the resource affected.",
            "type": "string"
          },
          "resource_product": {
            "description": "The Cloudflare product related to the resource.",
            "type": "string"
          },
          "resource_type": {
            "description": "The type of resource affected.",
            "type": "string"
          },
          "resource_scope": {
            "description": "The scope of the resource (e.g., account, zone).",
            "type": "string",
            "enum": [
              "memberships",
              "accounts",
              "user",
              "zones"
            ]
          },
          "zone_id": {
            "description": "The ID of the zone associated with the log.",
            "type": "string"
          },
          "zone_name": {
            "description": "The name of the zone associated with the log.",
            "type": "string"
          },
          "since": {
            "type": "string",
            "pattern": "^(\\d{4}-\\d{2}-\\d{2}|(\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z))$",
            "description": "The start of the time slice to look at. Can be YYYY-MM-DD or YYYY-MM-DDTHH:mm:ss.sssZ"
          },
          "before": {
            "type": "string",
            "pattern": "^(\\d{4}-\\d{2}-\\d{2}|(\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z))$",
            "description": "The end of the time slice to look at. Can be YYYY-MM-DD or YYYY-MM-DDTHH:mm:ss.sssZ"
          },
          "direction": {
            "description": "The sort direction of the logs (asc or desc).",
            "type": "string",
            "enum": [
              "desc",
              "asc"
            ]
          },
          "limit": {
            "description": "The number of results to return (max 1000).",
            "type": "number",
            "minimum": 1,
            "maximum": 1000
          },
          "cursor": {
            "description": "Pagination cursor for fetching the next set of results.",
            "type": "string"
          }
        },
        "required": [
          "since",
          "before"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_AUTORAG_AI_SEARCH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_autorag",
      "target": "mcpToolCall",
      "description": "AI Search Documents using AutoRAG (vector store) MCP: https://autorag.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_AUTORAG_AI_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_AUTORAG_AI_SEARCH",
        "body": ""
      },
      "router_tag": "[CF_AUTORAG_AI_SEARCH]args[/CF_AUTORAG_AI_SEARCH]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "rag_id": {
            "type": "string",
            "description": "ID of the AutoRAG to search"
          },
          "query": {
            "type": "string",
            "description": "Query to search for. Can be a URL, a title, or a snippet."
          }
        },
        "required": [
          "rag_id",
          "query"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_AUTORAG_LIST_RAGS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_autorag",
      "target": "mcpToolCall",
      "description": "List AutoRAGs (vector stores) MCP: https://autorag.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_AUTORAG_LIST_RAGS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_AUTORAG_LIST_RAGS",
        "body": ""
      },
      "router_tag": "[CF_AUTORAG_LIST_RAGS]args[/CF_AUTORAG_LIST_RAGS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "page": {
            "default": 1,
            "type": "integer",
            "minimum": 1,
            "maximum": 9007199254740991
          },
          "per_page": {
            "default": 20,
            "type": "integer",
            "minimum": 1,
            "maximum": 50
          }
        }
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_AUTORAG_SEARCH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_autorag",
      "target": "mcpToolCall",
      "description": "Search Documents using AutoRAG (vector store) MCP: https://autorag.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_AUTORAG_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_AUTORAG_SEARCH",
        "body": ""
      },
      "router_tag": "[CF_AUTORAG_SEARCH]args[/CF_AUTORAG_SEARCH]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "rag_id": {
            "type": "string",
            "description": "ID of the AutoRAG to search"
          },
          "query": {
            "type": "string",
            "description": "Query to search for. Can be a URL, a title, or a snippet."
          }
        },
        "required": [
          "rag_id",
          "query"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_D1_DATABASE_CREATE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Create a new D1 database in your Cloudflare account MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_D1_DATABASE_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_D1_DATABASE_CREATE",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_D1_DATABASE_CREATE]args[/CF_BINDINGS_D1_DATABASE_CREATE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "name": {
            "type": "string"
          },
          "primary_location_hint": {
            "anyOf": [
              {
                "type": "string",
                "enum": [
                  "wnam",
                  "enam",
                  "weur",
                  "eeur",
                  "apac",
                  "oc"
                ]
              },
              {
                "type": "null"
              }
            ]
          }
        },
        "required": [
          "name"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_D1_DATABASE_DELETE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Delete a d1 database in your Cloudflare account MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_D1_DATABASE_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_D1_DATABASE_DELETE",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_D1_DATABASE_DELETE]args[/CF_BINDINGS_D1_DATABASE_DELETE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "database_id": {
            "type": "string"
          }
        },
        "required": [
          "database_id"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_D1_DATABASE_GET",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Get a D1 database in your Cloudflare account MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_D1_DATABASE_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_D1_DATABASE_GET",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_D1_DATABASE_GET]args[/CF_BINDINGS_D1_DATABASE_GET]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "database_id": {
            "type": "string"
          }
        },
        "required": [
          "database_id"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_D1_DATABASE_QUERY",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Query a D1 database in your Cloudflare account MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_D1_DATABASE_QUERY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_D1_DATABASE_QUERY",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_D1_DATABASE_QUERY]args[/CF_BINDINGS_D1_DATABASE_QUERY]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "database_id": {
            "type": "string"
          },
          "sql": {
            "type": "string"
          },
          "params": {
            "anyOf": [
              {
                "type": "array",
                "items": {
                  "type": "string"
                }
              },
              {
                "type": "null"
              }
            ]
          }
        },
        "required": [
          "database_id",
          "sql"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_D1_DATABASES_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "List all of the D1 databases in your Cloudflare account MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_D1_DATABASES_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_D1_DATABASES_LIST",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_D1_DATABASES_LIST]args[/CF_BINDINGS_D1_DATABASES_LIST]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "name": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ]
          },
          "page": {
            "anyOf": [
              {
                "type": "number"
              },
              {
                "type": "null"
              }
            ]
          },
          "per_page": {
            "anyOf": [
              {
                "type": "number"
              },
              {
                "type": "null"
              }
            ]
          }
        }
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_HYPERDRIVE_CONFIG_DELETE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Delete a Hyperdrive configuration in your Cloudflare account MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_HYPERDRIVE_CONFIG_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_HYPERDRIVE_CONFIG_DELETE",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_HYPERDRIVE_CONFIG_DELETE]args[/CF_BINDINGS_HYPERDRIVE_CONFIG_DELETE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "hyperdrive_id": {
            "type": "string",
            "description": "The ID of the Hyperdrive configuration"
          }
        },
        "required": [
          "hyperdrive_id"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_HYPERDRIVE_CONFIG_EDIT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Edit (patch) a Hyperdrive configuration in your Cloudflare account MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_HYPERDRIVE_CONFIG_EDIT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_HYPERDRIVE_CONFIG_EDIT",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_HYPERDRIVE_CONFIG_EDIT]args[/CF_BINDINGS_HYPERDRIVE_CONFIG_EDIT]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "hyperdrive_id": {
            "type": "string",
            "description": "The ID of the Hyperdrive configuration"
          },
          "name": {
            "anyOf": [
              {
                "type": "string",
                "minLength": 1,
                "maxLength": 64,
                "pattern": "^[a-zA-Z0-9_-]+$",
                "description": "The name of the Hyperdrive configuration (alphanumeric, underscore, hyphen)"
              },
              {
                "type": "null"
              }
            ]
          },
          "database": {
            "anyOf": [
              {
                "type": "string",
                "description": "The database name"
              },
              {
                "type": "null"
              }
            ]
          },
          "host": {
            "anyOf": [
              {
                "type": "string",
                "description": "The database host address"
              },
              {
                "type": "null"
              }
            ]
          },
          "port": {
            "anyOf": [
              {
                "type": "integer",
                "minimum": 1,
                "maximum": 65535,
                "description": "The database port"
              },
              {
                "type": "null"
              }
            ]
          },
          "scheme": {
            "anyOf": [
              {
                "type": "string",
                "enum": [
                  "postgresql"
                ],
                "description": "The database protocol"
              },
              {
                "type": "null"
              }
            ]
          },
          "user": {
            "anyOf": [
              {
                "type": "string",
                "description": "The database user"
              },
              {
                "type": "null"
              }
            ]
          },
          "caching_disabled": {
            "anyOf": [
              {
                "description": "Whether caching is disabled",
                "type": "boolean"
              },
              {
                "type": "null"
              }
            ]
          },
          "caching_max_age": {
            "anyOf": [
              {
                "description": "Maximum cache age in seconds",
                "type": "integer",
                "minimum": 1,
                "maximum": 9007199254740991
              },
              {
                "type": "null"
              }
            ]
          },
          "caching_stale_while_revalidate": {
            "anyOf": [
              {
                "description": "Stale while revalidate duration in seconds",
                "type": "integer",
                "minimum": 1,
                "maximum": 9007199254740991
              },
              {
                "type": "null"
              }
            ]
          }
        },
        "required": [
          "hyperdrive_id"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_HYPERDRIVE_CONFIG_GET",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Get details of a specific Hyperdrive configuration in your Cloudflare account MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_HYPERDRIVE_CONFIG_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_HYPERDRIVE_CONFIG_GET",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_HYPERDRIVE_CONFIG_GET]args[/CF_BINDINGS_HYPERDRIVE_CONFIG_GET]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "hyperdrive_id": {
            "type": "string",
            "description": "The ID of the Hyperdrive configuration"
          }
        },
        "required": [
          "hyperdrive_id"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_HYPERDRIVE_CONFIGS_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "List Hyperdrive configurations in your Cloudflare account MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_HYPERDRIVE_CONFIGS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_HYPERDRIVE_CONFIGS_LIST",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_HYPERDRIVE_CONFIGS_LIST]args[/CF_BINDINGS_HYPERDRIVE_CONFIGS_LIST]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "page": {
            "anyOf": [
              {
                "description": "Page number of results",
                "type": "integer",
                "exclusiveMinimum": 0,
                "maximum": 9007199254740991
              },
              {
                "type": "null"
              }
            ]
          },
          "per_page": {
            "anyOf": [
              {
                "description": "Number of results per page",
                "type": "integer",
                "minimum": 1,
                "maximum": 100
              },
              {
                "type": "null"
              }
            ]
          },
          "order": {
            "anyOf": [
              {
                "description": "Field to order by",
                "type": "string",
                "enum": [
                  "id",
                  "name"
                ]
              },
              {
                "type": "null"
              }
            ]
          },
          "direction": {
            "anyOf": [
              {
                "description": "Direction to order",
                "type": "string",
                "enum": [
                  "asc",
                  "desc"
                ]
              },
              {
                "type": "null"
              }
            ]
          }
        }
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_KV_NAMESPACE_CREATE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Create a new kv namespace in your Cloudflare account MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_KV_NAMESPACE_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_KV_NAMESPACE_CREATE",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_KV_NAMESPACE_CREATE]args[/CF_BINDINGS_KV_NAMESPACE_CREATE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "title": {
            "type": "string",
            "description": "The human-readable name/title of the KV namespace"
          }
        },
        "required": [
          "title"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_KV_NAMESPACE_DELETE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Delete a kv namespace in your Cloudflare account MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_KV_NAMESPACE_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_KV_NAMESPACE_DELETE",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_KV_NAMESPACE_DELETE]args[/CF_BINDINGS_KV_NAMESPACE_DELETE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "namespace_id": {
            "type": "string",
            "description": "The ID of the KV namespace"
          }
        },
        "required": [
          "namespace_id"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_KV_NAMESPACE_GET",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Get details of a kv namespace in your Cloudflare account. Use this tool when you need to get details of a specific kv namespace in your Cloudflare account. Returns a kv namespace with the following pr MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_KV_NAMESPACE_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_KV_NAMESPACE_GET",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_KV_NAMESPACE_GET]args[/CF_BINDINGS_KV_NAMESPACE_GET]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "namespace_id": {
            "type": "string",
            "description": "The ID of the KV namespace"
          }
        },
        "required": [
          "namespace_id"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_KV_NAMESPACE_UPDATE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Update the title of a kv namespace in your Cloudflare account MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_KV_NAMESPACE_UPDATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_KV_NAMESPACE_UPDATE",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_KV_NAMESPACE_UPDATE]args[/CF_BINDINGS_KV_NAMESPACE_UPDATE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "namespace_id": {
            "type": "string",
            "description": "The ID of the KV namespace"
          },
          "title": {
            "type": "string",
            "description": "The human-readable name/title of the KV namespace"
          }
        },
        "required": [
          "namespace_id",
          "title"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_KV_NAMESPACES_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "List all of the kv namespaces in your Cloudflare account. Use this tool when you need to list all of the kv namespaces in your Cloudflare account. Returns a list of kv namespaces with the following p MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_KV_NAMESPACES_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_KV_NAMESPACES_LIST",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_KV_NAMESPACES_LIST]args[/CF_BINDINGS_KV_NAMESPACES_LIST]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "params": {
            "type": "object",
            "properties": {
              "direction": {
                "description": "Direction to order namespaces (asc/desc)",
                "type": "string",
                "enum": [
                  "asc",
                  "desc"
                ]
              },
              "order": {
                "description": "Field to order namespaces by (id/title)",
                "type": "string",
                "enum": [
                  "id",
                  "title"
                ]
              },
              "page": {
                "description": "Page number of results (starts at 1)",
                "type": "integer",
                "exclusiveMinimum": 0,
                "maximum": 9007199254740991
              },
              "per_page": {
                "description": "Number of namespaces per page (1-100)",
                "type": "integer",
                "minimum": 1,
                "maximum": 100
              }
            },
            "description": "Optional parameters for listing KV namespaces"
          }
        }
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_MIGRATE_PAGES_TO_WORKERS_GUIDE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "ALWAYS read this guide before migrating Pages projects to Workers. MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_MIGRATE_PAGES_TO_WORKERS_GUIDE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_MIGRATE_PAGES_TO_WORKERS_GUIDE",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_MIGRATE_PAGES_TO_WORKERS_GUIDE]args[/CF_BINDINGS_MIGRATE_PAGES_TO_WORKERS_GUIDE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_R2_BUCKET_CREATE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Create a new r2 bucket in your Cloudflare account MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_R2_BUCKET_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_R2_BUCKET_CREATE",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_R2_BUCKET_CREATE]args[/CF_BINDINGS_R2_BUCKET_CREATE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "name": {
            "type": "string",
            "description": "The name of the r2 bucket"
          }
        },
        "required": [
          "name"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_R2_BUCKET_DELETE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Delete an R2 bucket MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_R2_BUCKET_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_R2_BUCKET_DELETE",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_R2_BUCKET_DELETE]args[/CF_BINDINGS_R2_BUCKET_DELETE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "name": {
            "type": "string",
            "description": "The name of the r2 bucket"
          }
        },
        "required": [
          "name"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_R2_BUCKET_GET",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Get details about a specific R2 bucket MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_R2_BUCKET_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_R2_BUCKET_GET",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_R2_BUCKET_GET]args[/CF_BINDINGS_R2_BUCKET_GET]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "name": {
            "type": "string",
            "description": "The name of the r2 bucket"
          }
        },
        "required": [
          "name"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_R2_BUCKETS_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "List r2 buckets in your Cloudflare account MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_R2_BUCKETS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_R2_BUCKETS_LIST",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_R2_BUCKETS_LIST]args[/CF_BINDINGS_R2_BUCKETS_LIST]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "cursor": {
            "description": "Query param: Pagination cursor received during the last List Buckets call. R2 buckets are paginated using cursors instead of page numbers.",
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ]
          },
          "direction": {
            "description": "Direction to order buckets",
            "anyOf": [
              {
                "type": "string",
                "enum": [
                  "asc",
                  "desc"
                ]
              },
              {
                "type": "null"
              }
            ]
          },
          "name_contains": {
            "description": "Bucket names to filter by. Only buckets with this phrase in their name will be returned.",
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ]
          },
          "per_page": {
            "anyOf": [
              {
                "type": "number"
              },
              {
                "type": "null"
              }
            ]
          },
          "start_after": {
            "description": "Bucket name to start searching after. Buckets are ordered lexicographically.",
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ]
          }
        }
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_SEARCH_CLOUDFLARE_DOCUMENTATION",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Search the Cloudflare documentation. This tool should be used to answer any question about Cloudflare products or features, including: - Workers, Pages, R2, Images, Stream, D1, Durable Objects, KV, Wo MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_SEARCH_CLOUDFLARE_DOCUMENTATION",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_SEARCH_CLOUDFLARE_DOCUMENTATION",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_SEARCH_CLOUDFLARE_DOCUMENTATION]args[/CF_BINDINGS_SEARCH_CLOUDFLARE_DOCUMENTATION]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "query": {
            "type": "string"
          }
        },
        "required": [
          "query"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_WORKERS_GET_WORKER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Get the details of the Cloudflare Worker. MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_WORKERS_GET_WORKER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_WORKERS_GET_WORKER",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_WORKERS_GET_WORKER]args[/CF_BINDINGS_WORKERS_GET_WORKER]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "scriptName": {
            "type": "string",
            "description": "The name of the worker script to retrieve"
          }
        },
        "required": [
          "scriptName"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_WORKERS_GET_WORKER_CODE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "Get the source code of a Cloudflare Worker. Note: This may be a bundled version of the worker. MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_WORKERS_GET_WORKER_CODE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_WORKERS_GET_WORKER_CODE",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_WORKERS_GET_WORKER_CODE]args[/CF_BINDINGS_WORKERS_GET_WORKER_CODE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "scriptName": {
            "type": "string",
            "description": "The name of the worker script to retrieve"
          }
        },
        "required": [
          "scriptName"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BINDINGS_WORKERS_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_bindings",
      "target": "mcpToolCall",
      "description": "List all Workers in your Cloudflare account. If you only need details of a single Worker, use workers_get_worker. MCP: https://bindings.mcp.cloudflare.com/mcp",
      "read": "https://miscsubjects.com/api/directory/CF_BINDINGS_WORKERS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BINDINGS_WORKERS_LIST",
        "body": ""
      },
      "router_tag": "[CF_BINDINGS_WORKERS_LIST]args[/CF_BINDINGS_WORKERS_LIST]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BROWSER_GET_URL_HTML_CONTENT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_browser",
      "target": "mcpToolCall",
      "description": "Get page HTML content MCP: https://browser.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_BROWSER_GET_URL_HTML_CONTENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BROWSER_GET_URL_HTML_CONTENT",
        "body": ""
      },
      "router_tag": "[CF_BROWSER_GET_URL_HTML_CONTENT]args[/CF_BROWSER_GET_URL_HTML_CONTENT]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "url": {
            "type": "string",
            "format": "uri"
          }
        },
        "required": [
          "url"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BROWSER_GET_URL_MARKDOWN",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_browser",
      "target": "mcpToolCall",
      "description": "Get page converted into Markdown MCP: https://browser.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_BROWSER_GET_URL_MARKDOWN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BROWSER_GET_URL_MARKDOWN",
        "body": ""
      },
      "router_tag": "[CF_BROWSER_GET_URL_MARKDOWN]args[/CF_BROWSER_GET_URL_MARKDOWN]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "url": {
            "type": "string",
            "format": "uri"
          }
        },
        "required": [
          "url"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BROWSER_GET_URL_SCREENSHOT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_browser",
      "target": "mcpToolCall",
      "description": "Get page screenshot MCP: https://browser.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_BROWSER_GET_URL_SCREENSHOT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BROWSER_GET_URL_SCREENSHOT",
        "body": ""
      },
      "router_tag": "[CF_BROWSER_GET_URL_SCREENSHOT]args[/CF_BROWSER_GET_URL_SCREENSHOT]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "url": {
            "type": "string",
            "format": "uri"
          },
          "viewport": {
            "type": "object",
            "properties": {
              "height": {
                "default": 600,
                "type": "number"
              },
              "width": {
                "default": 800,
                "type": "number"
              }
            }
          }
        },
        "required": [
          "url"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BUILDS_WORKERS_BUILDS_GET_BUILD",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_builds",
      "target": "mcpToolCall",
      "description": "Get details for a specific build by its UUID. Includes build and deploy commands for the build (useful for debugging build failures). MCP: https://builds.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_BUILDS_WORKERS_BUILDS_GET_BUILD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BUILDS_WORKERS_BUILDS_GET_BUILD",
        "body": ""
      },
      "router_tag": "[CF_BUILDS_WORKERS_BUILDS_GET_BUILD]args[/CF_BUILDS_WORKERS_BUILDS_GET_BUILD]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "buildUUID": {
            "type": "string",
            "description": "The build UUID to get details for."
          }
        },
        "required": [
          "buildUUID"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BUILDS_WORKERS_BUILDS_GET_BUILD_LOGS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_builds",
      "target": "mcpToolCall",
      "description": "Get logs for a Cloudflare Workers build. MCP: https://builds.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_BUILDS_WORKERS_BUILDS_GET_BUILD_LOGS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BUILDS_WORKERS_BUILDS_GET_BUILD_LOGS",
        "body": ""
      },
      "router_tag": "[CF_BUILDS_WORKERS_BUILDS_GET_BUILD_LOGS]args[/CF_BUILDS_WORKERS_BUILDS_GET_BUILD_LOGS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "buildUUID": {
            "type": "string",
            "description": "The build UUID to get logs for."
          }
        },
        "required": [
          "buildUUID"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BUILDS_WORKERS_BUILDS_LIST_BUILDS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_builds",
      "target": "mcpToolCall",
      "description": "Use the Workers Builds API to list builds for a Cloudflare Worker. MUST provide a workerId or call workers_builds_set_active_worker first. MCP: https://builds.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_BUILDS_WORKERS_BUILDS_LIST_BUILDS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BUILDS_WORKERS_BUILDS_LIST_BUILDS",
        "body": ""
      },
      "router_tag": "[CF_BUILDS_WORKERS_BUILDS_LIST_BUILDS]args[/CF_BUILDS_WORKERS_BUILDS_LIST_BUILDS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "workerId": {
            "description": "The Worker ID to list builds for.",
            "type": "string"
          },
          "page": {
            "default": 1,
            "description": "The page number to return.",
            "type": "number"
          },
          "perPage": {
            "default": 10,
            "description": "The number of builds per page.",
            "type": "number"
          }
        }
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BUILDS_WORKERS_BUILDS_SET_ACTIVE_WORKER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_builds",
      "target": "mcpToolCall",
      "description": "Set the active Worker ID for subsequent calls. Use this tool to set the active worker for subsequent calls. Worker IDs are formatted similar to: db6a6421c2b046679a9daada1537088b If you are given a Wor MCP: https://builds.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_BUILDS_WORKERS_BUILDS_SET_ACTIVE_WORKER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BUILDS_WORKERS_BUILDS_SET_ACTIVE_WORKER",
        "body": ""
      },
      "router_tag": "[CF_BUILDS_WORKERS_BUILDS_SET_ACTIVE_WORKER]args[/CF_BUILDS_WORKERS_BUILDS_SET_ACTIVE_WORKER]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "workerId": {
            "type": "string",
            "description": "The Worker ID to set as active."
          }
        },
        "required": [
          "workerId"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BUILDS_WORKERS_GET_WORKER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_builds",
      "target": "mcpToolCall",
      "description": "Get the details of the Cloudflare Worker. MCP: https://builds.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_BUILDS_WORKERS_GET_WORKER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BUILDS_WORKERS_GET_WORKER",
        "body": ""
      },
      "router_tag": "[CF_BUILDS_WORKERS_GET_WORKER]args[/CF_BUILDS_WORKERS_GET_WORKER]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "scriptName": {
            "type": "string",
            "description": "The name of the worker script to retrieve"
          }
        },
        "required": [
          "scriptName"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BUILDS_WORKERS_GET_WORKER_CODE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_builds",
      "target": "mcpToolCall",
      "description": "Get the source code of a Cloudflare Worker. Note: This may be a bundled version of the worker. MCP: https://builds.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_BUILDS_WORKERS_GET_WORKER_CODE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BUILDS_WORKERS_GET_WORKER_CODE",
        "body": ""
      },
      "router_tag": "[CF_BUILDS_WORKERS_GET_WORKER_CODE]args[/CF_BUILDS_WORKERS_GET_WORKER_CODE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "scriptName": {
            "type": "string",
            "description": "The name of the worker script to retrieve"
          }
        },
        "required": [
          "scriptName"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_BUILDS_WORKERS_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_builds",
      "target": "mcpToolCall",
      "description": "List all Workers in your Cloudflare account. If you only need details of a single Worker, use workers_get_worker. MCP: https://builds.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_BUILDS_WORKERS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_BUILDS_WORKERS_LIST",
        "body": ""
      },
      "router_tag": "[CF_BUILDS_WORKERS_LIST]args[/CF_BUILDS_WORKERS_LIST]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CASB_ASSET_BY_ID",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_casb",
      "target": "mcpToolCall",
      "description": "Search Assets by ID MCP: https://casb.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CASB_ASSET_BY_ID",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CASB_ASSET_BY_ID",
        "body": ""
      },
      "router_tag": "[CF_CASB_ASSET_BY_ID]args[/CF_CASB_ASSET_BY_ID]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "assetIdParam": {
            "type": "string",
            "description": "The UUID of the asset to analyze"
          }
        },
        "required": [
          "assetIdParam"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CASB_ASSET_CATEGORIES_BY_TYPE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_casb",
      "target": "mcpToolCall",
      "description": "Search Asset Categories by type MCP: https://casb.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CASB_ASSET_CATEGORIES_BY_TYPE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CASB_ASSET_CATEGORIES_BY_TYPE",
        "body": ""
      },
      "router_tag": "[CF_CASB_ASSET_CATEGORIES_BY_TYPE]args[/CF_CASB_ASSET_CATEGORIES_BY_TYPE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "assetCategoryTypeParam": {
            "description": "Type of cloud resource or service category",
            "type": "string",
            "enum": [
              "Account",
              "Alert",
              "App",
              "Authentication Method",
              "Bucket",
              "Bucket Iam Permission",
              "Bucket Permission",
              "Calendar",
              "Certificate",
              "Channel",
              "Commit",
              "Content",
              "Credential",
              "Domain",
              "Drive",
              "Environment",
              "Factor",
              "File",
              "File Permission",
              "Folder",
              "Group",
              "Incident",
              "Instance",
              "Issue",
              "Label",
              "Meeting",
              "Message",
              "Message Rule",
              "Namespace",
              "Organization",
              "Package",
              "Pipeline",
              "Project",
              "Report",
              "Repository",
              "Risky User",
              "Role",
              "Server",
              "Site",
              "Space",
              "Submodule",
              "Third Party User",
              "User",
              "User No Mfa",
              "Variable",
              "Webhook",
              "Workspace"
            ]
          }
        }
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CASB_ASSET_CATEGORIES_BY_VENDOR",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_casb",
      "target": "mcpToolCall",
      "description": "List asset categories by vendor MCP: https://casb.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CASB_ASSET_CATEGORIES_BY_VENDOR",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CASB_ASSET_CATEGORIES_BY_VENDOR",
        "body": ""
      },
      "router_tag": "[CF_CASB_ASSET_CATEGORIES_BY_VENDOR]args[/CF_CASB_ASSET_CATEGORIES_BY_VENDOR]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "assetCategoryVendorParam": {
            "type": "string",
            "enum": [
              "AWS",
              "Bitbucket",
              "Box",
              "Confluence",
              "Dropbox",
              "GitHub",
              "Google Cloud Platform",
              "Google Workspace",
              "Jira",
              "Microsoft",
              "Microsoft Azure",
              "Okta",
              "Salesforce",
              "ServiceNow",
              "Slack",
              "Workday",
              "Zoom"
            ],
            "description": "Vendor of the cloud service or resource"
          }
        },
        "required": [
          "assetCategoryVendorParam"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CASB_ASSET_CATEGORIES_BY_VENDOR_AND_TYPE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_casb",
      "target": "mcpToolCall",
      "description": "Search Asset Categories by vendor and type MCP: https://casb.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CASB_ASSET_CATEGORIES_BY_VENDOR_AND_TYPE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CASB_ASSET_CATEGORIES_BY_VENDOR_AND_TYPE",
        "body": ""
      },
      "router_tag": "[CF_CASB_ASSET_CATEGORIES_BY_VENDOR_AND_TYPE]args[/CF_CASB_ASSET_CATEGORIES_BY_VENDOR_AND_TYPE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "assetCategoryTypeParam": {
            "description": "Type of cloud resource or service category",
            "type": "string",
            "enum": [
              "Account",
              "Alert",
              "App",
              "Authentication Method",
              "Bucket",
              "Bucket Iam Permission",
              "Bucket Permission",
              "Calendar",
              "Certificate",
              "Channel",
              "Commit",
              "Content",
              "Credential",
              "Domain",
              "Drive",
              "Environment",
              "Factor",
              "File",
              "File Permission",
              "Folder",
              "Group",
              "Incident",
              "Instance",
              "Issue",
              "Label",
              "Meeting",
              "Message",
              "Message Rule",
              "Namespace",
              "Organization",
              "Package",
              "Pipeline",
              "Project",
              "Report",
              "Repository",
              "Risky User",
              "Role",
              "Server",
              "Site",
              "Space",
              "Submodule",
              "Third Party User",
              "User",
              "User No Mfa",
              "Variable",
              "Webhook",
              "Workspace"
            ]
          },
          "assetCategoryVendorParam": {
            "type": "string",
            "enum": [
              "AWS",
              "Bitbucket",
              "Box",
              "Confluence",
              "Dropbox",
              "GitHub",
              "Google Cloud Platform",
              "Google Workspace",
              "Jira",
              "Microsoft",
              "Microsoft Azure",
              "Okta",
              "Salesforce",
              "ServiceNow",
              "Slack",
              "Workday",
              "Zoom"
            ],
            "description": "Vendor of the cloud service or resource"
          }
        },
        "required": [
          "assetCategoryVendorParam"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CASB_ASSET_CATEGORIES_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_casb",
      "target": "mcpToolCall",
      "description": "List Asset Categories MCP: https://casb.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CASB_ASSET_CATEGORIES_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CASB_ASSET_CATEGORIES_LIST",
        "body": ""
      },
      "router_tag": "[CF_CASB_ASSET_CATEGORIES_LIST]args[/CF_CASB_ASSET_CATEGORIES_LIST]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CASB_ASSETS_BY_CATEGORY_ID",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_casb",
      "target": "mcpToolCall",
      "description": "Search Assets by Asset Category ID MCP: https://casb.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CASB_ASSETS_BY_CATEGORY_ID",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CASB_ASSETS_BY_CATEGORY_ID",
        "body": ""
      },
      "router_tag": "[CF_CASB_ASSETS_BY_CATEGORY_ID]args[/CF_CASB_ASSETS_BY_CATEGORY_ID]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "assetCategoryIdParam": {
            "type": "string",
            "description": "The UUID of the asset category to analyze"
          }
        },
        "required": [
          "assetCategoryIdParam"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CASB_ASSETS_BY_INTEGRATION_ID",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_casb",
      "target": "mcpToolCall",
      "description": "Search Assets by Integration ID MCP: https://casb.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CASB_ASSETS_BY_INTEGRATION_ID",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CASB_ASSETS_BY_INTEGRATION_ID",
        "body": ""
      },
      "router_tag": "[CF_CASB_ASSETS_BY_INTEGRATION_ID]args[/CF_CASB_ASSETS_BY_INTEGRATION_ID]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "integrationIdParam": {
            "type": "string",
            "description": "The UUID of the integration to analyze"
          }
        },
        "required": [
          "integrationIdParam"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CASB_ASSETS_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_casb",
      "target": "mcpToolCall",
      "description": "Paginated list of Assets MCP: https://casb.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CASB_ASSETS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CASB_ASSETS_LIST",
        "body": ""
      },
      "router_tag": "[CF_CASB_ASSETS_LIST]args[/CF_CASB_ASSETS_LIST]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CASB_ASSETS_SEARCH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_casb",
      "target": "mcpToolCall",
      "description": "Search Assets by keyword MCP: https://casb.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CASB_ASSETS_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CASB_ASSETS_SEARCH",
        "body": ""
      },
      "router_tag": "[CF_CASB_ASSETS_SEARCH]args[/CF_CASB_ASSETS_SEARCH]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "assetSearchTerm": {
            "type": "string",
            "description": "The search keyword for assets"
          }
        },
        "required": [
          "assetSearchTerm"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CASB_INTEGRATION_BY_ID",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_casb",
      "target": "mcpToolCall",
      "description": "Analyze Cloudflare One Integration by ID MCP: https://casb.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CASB_INTEGRATION_BY_ID",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CASB_INTEGRATION_BY_ID",
        "body": ""
      },
      "router_tag": "[CF_CASB_INTEGRATION_BY_ID]args[/CF_CASB_INTEGRATION_BY_ID]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "integrationIdParam": {
            "type": "string",
            "description": "The UUID of the integration to analyze"
          }
        },
        "required": [
          "integrationIdParam"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CASB_INTEGRATIONS_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_casb",
      "target": "mcpToolCall",
      "description": "List all Cloudflare One Integrations in a given account MCP: https://casb.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CASB_INTEGRATIONS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CASB_INTEGRATIONS_LIST",
        "body": ""
      },
      "router_tag": "[CF_CASB_INTEGRATIONS_LIST]args[/CF_CASB_INTEGRATIONS_LIST]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CONTAINERS_CONTAINER_EXEC",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_containers",
      "target": "mcpToolCall",
      "description": "Run a command in a container and return the results from stdout. If necessary, set a timeout. To debug, stream back standard error. If you're using python, ALWAYS use python3 alongside pip3 MCP: https://containers.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CONTAINERS_CONTAINER_EXEC",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CONTAINERS_CONTAINER_EXEC",
        "body": ""
      },
      "router_tag": "[CF_CONTAINERS_CONTAINER_EXEC]args[/CF_CONTAINERS_CONTAINER_EXEC]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "args": {
            "type": "object",
            "properties": {
              "args": {
                "type": "string"
              },
              "timeout": {
                "description": "Timeout in milliseconds",
                "type": "number"
              },
              "streamStderr": {
                "default": true,
                "type": "boolean"
              }
            },
            "required": [
              "args"
            ]
          }
        },
        "required": [
          "args"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CONTAINERS_CONTAINER_FILE_DELETE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_containers",
      "target": "mcpToolCall",
      "description": "Delete file in the working directory MCP: https://containers.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CONTAINERS_CONTAINER_FILE_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CONTAINERS_CONTAINER_FILE_DELETE",
        "body": ""
      },
      "router_tag": "[CF_CONTAINERS_CONTAINER_FILE_DELETE]args[/CF_CONTAINERS_CONTAINER_FILE_DELETE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "args": {
            "type": "object",
            "properties": {
              "path": {
                "type": "string"
              }
            },
            "required": [
              "path"
            ]
          }
        },
        "required": [
          "args"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CONTAINERS_CONTAINER_FILE_READ",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_containers",
      "target": "mcpToolCall",
      "description": "Read a specific file or directory. Use this tool if you would like to read files or display them to the user. This allow you to get a displayable image for the user if there is an image file. MCP: https://containers.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CONTAINERS_CONTAINER_FILE_READ",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CONTAINERS_CONTAINER_FILE_READ",
        "body": ""
      },
      "router_tag": "[CF_CONTAINERS_CONTAINER_FILE_READ]args[/CF_CONTAINERS_CONTAINER_FILE_READ]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "args": {
            "type": "object",
            "properties": {
              "path": {
                "type": "string"
              }
            },
            "required": [
              "path"
            ]
          }
        },
        "required": [
          "args"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CONTAINERS_CONTAINER_FILE_WRITE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_containers",
      "target": "mcpToolCall",
      "description": "Create a new file with the provided contents in the working direcotry, overwriting the file if it already exists MCP: https://containers.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CONTAINERS_CONTAINER_FILE_WRITE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CONTAINERS_CONTAINER_FILE_WRITE",
        "body": ""
      },
      "router_tag": "[CF_CONTAINERS_CONTAINER_FILE_WRITE]args[/CF_CONTAINERS_CONTAINER_FILE_WRITE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "args": {
            "type": "object",
            "properties": {
              "path": {
                "type": "string"
              },
              "text": {
                "type": "string",
                "description": "Full text content of the file you want to write."
              }
            },
            "required": [
              "path",
              "text"
            ]
          }
        },
        "required": [
          "args"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CONTAINERS_CONTAINER_FILES_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_containers",
      "target": "mcpToolCall",
      "description": "List working directory file tree. This just reads the contents of the current working directory MCP: https://containers.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CONTAINERS_CONTAINER_FILES_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CONTAINERS_CONTAINER_FILES_LIST",
        "body": ""
      },
      "router_tag": "[CF_CONTAINERS_CONTAINER_FILES_LIST]args[/CF_CONTAINERS_CONTAINER_FILES_LIST]",
      "input_schema": {
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CONTAINERS_CONTAINER_INITIALIZE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_containers",
      "target": "mcpToolCall",
      "description": "Start or restart the container. Use this tool to initialize a container before running any python or node.js code that the user requests ro run. MCP: https://containers.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CONTAINERS_CONTAINER_INITIALIZE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CONTAINERS_CONTAINER_INITIALIZE",
        "body": ""
      },
      "router_tag": "[CF_CONTAINERS_CONTAINER_INITIALIZE]args[/CF_CONTAINERS_CONTAINER_INITIALIZE]",
      "input_schema": {
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_CONTAINERS_CONTAINER_PING",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_containers",
      "target": "mcpToolCall",
      "description": "Ping the container for liveliness. Use this tool to check if the container is running. MCP: https://containers.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_CONTAINERS_CONTAINER_PING",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_CONTAINERS_CONTAINER_PING",
        "body": ""
      },
      "router_tag": "[CF_CONTAINERS_CONTAINER_PING]args[/CF_CONTAINERS_CONTAINER_PING]",
      "input_schema": {
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_ANALYZE_WARP_DIAG",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Analyze successful WARP-diag remote captures for common issues. This should be the first place you start when trying to narrow down device-level issues with WARP. MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_ANALYZE_WARP_DIAG",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_ANALYZE_WARP_DIAG",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_ANALYZE_WARP_DIAG]args[/CF_DEX_DEX_ANALYZE_WARP_DIAG]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "command_id": {
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
            "description": "The command_id of the successful WARP-diag remote capture to analyze."
          }
        },
        "required": [
          "command_id"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_CREATE_REMOTE_PCAP",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Create a remote packet capture (PCAP) for a device. This is a resource intensive and privacy-sensitive operation on a real user device.Always ask for confirmation from the user that the targeted email MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_CREATE_REMOTE_PCAP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_CREATE_REMOTE_PCAP",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_CREATE_REMOTE_PCAP]args[/CF_DEX_DEX_CREATE_REMOTE_PCAP]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "device_id": {
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
            "description": "The device ID to target."
          },
          "user_email": {
            "type": "string",
            "format": "email",
            "pattern": "^(?!\\.)(?!.*\\.\\.)([A-Za-z0-9_'+\\-\\.]*)[A-Za-z0-9_+-]@([A-Za-z0-9][A-Za-z0-9\\-]*\\.)+[A-Za-z]{2,}$",
            "description": "The email of the user associated with the device."
          },
          "max-file-size-mb": {
            "description": "Maximum file size in MB for the capture file. Specifies the maximum file size of the warp-daig zip artifact that can be uploaded. If the zip artifact exceeds the specified max file size it will NOT be uploaded.",
            "default": 5,
            "type": "number",
            "minimum": 1
          },
          "packet-size-bytes": {
            "description": "Maximum number of bytes to save for each packet.",
            "default": 160,
            "type": "number",
            "minimum": 1
          },
          "time-limit-min": {
            "default": 5,
            "description": "Limit on capture duration in minutes",
            "type": "number",
            "minimum": 1
          }
        },
        "required": [
          "device_id",
          "user_email"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_CREATE_REMOTE_WARP_DIAG",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Create a remote Warp Diagnostic (WARP-diag) for a device. This is a resource intensive and privacy-sensitive operation on a real user device.Always ask for confirmation from the user that the targeted MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_CREATE_REMOTE_WARP_DIAG",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_CREATE_REMOTE_WARP_DIAG",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_CREATE_REMOTE_WARP_DIAG]args[/CF_DEX_DEX_CREATE_REMOTE_WARP_DIAG]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "device_id": {
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
            "description": "The device ID to target."
          },
          "user_email": {
            "type": "string",
            "format": "email",
            "pattern": "^(?!\\.)(?!.*\\.\\.)([A-Za-z0-9_'+\\-\\.]*)[A-Za-z0-9_+-]@([A-Za-z0-9][A-Za-z0-9\\-]*\\.)+[A-Za-z]{2,}$",
            "description": "The email of the user associated with the device."
          },
          "test-all-routes": {
            "default": true,
            "description": "Test an IP address from all included or excluded ranges. Tests an IP address from all included or excluded ranges.Essentially the same as running 'route get '' and collecting the results. This option may increase the time taken to collect the warp-diag",
            "type": "boolean"
          }
        },
        "required": [
          "device_id",
          "user_email"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_EXPLORE_REMOTE_WARP_DIAG_OUTPUT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Explore the contents of remote capture WARP diag archive filepaths returned by the dex_list_remote_warp_diag_contents tool for analysis. MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_EXPLORE_REMOTE_WARP_DIAG_OUTPUT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_EXPLORE_REMOTE_WARP_DIAG_OUTPUT",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_EXPLORE_REMOTE_WARP_DIAG_OUTPUT]args[/CF_DEX_DEX_EXPLORE_REMOTE_WARP_DIAG_OUTPUT]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "commandId": {
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
            "description": "The id of the command results to explore"
          },
          "deviceId": {
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
            "description": "The device_id field of command to explore"
          },
          "filepath": {
            "type": "string",
            "description": "The file path from the archive to retrieve contents for."
          }
        },
        "required": [
          "commandId",
          "deviceId",
          "filepath"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_FLEET_STATUS_LIVE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Retrieve details about the real-time status of the fleet of devices broken down by dimension (mode, status, colo, platform, version) MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_FLEET_STATUS_LIVE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_FLEET_STATUS_LIVE",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_FLEET_STATUS_LIVE]args[/CF_DEX_DEX_FLEET_STATUS_LIVE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "since_minutes": {
            "default": 10,
            "description": "Number of minutes before current time to use as cutoff for device states to include.",
            "type": "number",
            "minimum": 1,
            "maximum": 60
          },
          "colo": {
            "type": "string",
            "pattern": "^[A-Z]{3}$",
            "description": "Optionally filter results to a specific Cloudflare colo."
          }
        }
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_FLEET_STATUS_LOGS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Retrieve raw fleet status device logs with a variety of levels of granularity and filtering. Use `source=last_seen` to view logs showing the last known state per device within the specified time perio MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_FLEET_STATUS_LOGS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_FLEET_STATUS_LOGS",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_FLEET_STATUS_LOGS]args[/CF_DEX_DEX_FLEET_STATUS_LOGS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "page": {
            "type": "number",
            "minimum": 1,
            "description": "The page of results to retrieve."
          },
          "from": {
            "type": "string",
            "description": "The datetime of the beginning point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-21T18:00:00Z)."
          },
          "to": {
            "type": "string",
            "description": "The datetime of the ending point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-22T00:00:00Z)."
          },
          "source": {
            "type": "string",
            "enum": [
              "last_seen",
              "hourly",
              "raw"
            ],
            "description": "Specifies the granularity of results."
          },
          "colo": {
            "type": "string",
            "pattern": "^[A-Z]{3}$",
            "description": "Optionally filter results to a specific Cloudflare colo."
          },
          "device_id": {
            "description": "Filter results to a specific device.",
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
          },
          "mode": {
            "description": "Filter results to devices with a specific WARP mode.",
            "type": "string"
          },
          "platform": {
            "description": "Filter results to devices on a specific operating system.",
            "type": "string"
          },
          "status": {
            "description": "Filter results to devices with a specific WARP connection status.",
            "type": "string"
          },
          "version": {
            "description": "Filter results to devices with a specific WARP client version.",
            "type": "string"
          }
        },
        "required": [
          "page",
          "from",
          "to",
          "source"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_FLEET_STATUS_OVER_TIME",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Retrieve aggregate time series details about the status of the fleet of devices, or performance metrics for a specific device, over the specified time period. MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_FLEET_STATUS_OVER_TIME",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_FLEET_STATUS_OVER_TIME",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_FLEET_STATUS_OVER_TIME]args[/CF_DEX_DEX_FLEET_STATUS_OVER_TIME]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "from": {
            "type": "string",
            "description": "The datetime of the beginning point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-21T18:00:00Z)."
          },
          "to": {
            "type": "string",
            "description": "The datetime of the ending point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-22T00:00:00Z)."
          },
          "interval": {
            "type": "string",
            "enum": [
              "minute",
              "hour"
            ],
            "description": "The time interval to group results by."
          },
          "colo": {
            "description": "Filter results to WARP devices connected to a specific colo.",
            "type": "string",
            "pattern": "^[A-Z]{3}$"
          },
          "device_id": {
            "description": "Filter results to a specific device.",
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
          }
        },
        "required": [
          "from",
          "to",
          "interval"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_HTTP_TEST_DETAILS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Retrieve detailed time series results for an HTTP DEX test by id. MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_HTTP_TEST_DETAILS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_HTTP_TEST_DETAILS",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_HTTP_TEST_DETAILS]args[/CF_DEX_DEX_HTTP_TEST_DETAILS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "testId": {
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
            "description": "The HTTP DEX Test ID to get details for."
          },
          "deviceId": {
            "description": "Optionally limit results to specific device(s). Can't be used in conjunction with the colo parameter.",
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
          },
          "colo": {
            "type": "string",
            "pattern": "^[A-Z]{3}$",
            "description": "Optionally filter results to a specific Cloudflare colo."
          },
          "from": {
            "type": "string",
            "description": "The datetime of the beginning point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-21T18:00:00Z)."
          },
          "to": {
            "type": "string",
            "description": "The datetime of the ending point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-22T00:00:00Z)."
          },
          "interval": {
            "type": "string",
            "enum": [
              "minute",
              "hour"
            ],
            "description": "The time interval to group results by."
          }
        },
        "required": [
          "testId",
          "from",
          "to",
          "interval"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_LIST_COLOS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "View a list of Cloudflare colos sorted alphabetically or by frequency encountered in fleet status or DEX test data. MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_LIST_COLOS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_LIST_COLOS",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_LIST_COLOS]args[/CF_DEX_DEX_LIST_COLOS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "from": {
            "type": "string",
            "description": "The datetime of the beginning point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-21T18:00:00Z)."
          },
          "to": {
            "type": "string",
            "description": "The datetime of the ending point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-22T00:00:00Z)."
          },
          "sortBy": {
            "description": "Use `fleet-status-usage` to sort by frequency seen in device state checkins.Use `application-tests-usage` to sort by frequency seen in DEX test results. Omit to sort alphabetically.",
            "type": "string",
            "enum": [
              "fleet-status-usage",
              "application-tests-usage"
            ]
          }
        },
        "required": [
          "from",
          "to"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_LIST_REMOTE_CAPTURE_ELIGIBLE_DEVICES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Retrieve a list of devices eligible for remote captures. You'll need the device_id and user_email from this response in order to create a remote capture for a specific device. It can also be used as a MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_LIST_REMOTE_CAPTURE_ELIGIBLE_DEVICES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_LIST_REMOTE_CAPTURE_ELIGIBLE_DEVICES",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_LIST_REMOTE_CAPTURE_ELIGIBLE_DEVICES]args[/CF_DEX_DEX_LIST_REMOTE_CAPTURE_ELIGIBLE_DEVICES]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "page": {
            "type": "number",
            "minimum": 1,
            "description": "The page of results to retrieve."
          },
          "search": {
            "description": "Filter devices by name or email.",
            "type": "string"
          }
        },
        "required": [
          "page"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_LIST_REMOTE_CAPTURES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Retrieve a list of remote captures for device debugging, like PCAPs or WARP Diags. MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_LIST_REMOTE_CAPTURES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_LIST_REMOTE_CAPTURES",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_LIST_REMOTE_CAPTURES]args[/CF_DEX_DEX_LIST_REMOTE_CAPTURES]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "page": {
            "type": "number",
            "minimum": 1,
            "description": "The page of results to retrieve."
          }
        },
        "required": [
          "page"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_LIST_REMOTE_WARP_DIAG_CONTENTS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Given a WARP diag remote capture id and device_id, returns a list of the files contained in the archive. MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_LIST_REMOTE_WARP_DIAG_CONTENTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_LIST_REMOTE_WARP_DIAG_CONTENTS",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_LIST_REMOTE_WARP_DIAG_CONTENTS]args[/CF_DEX_DEX_LIST_REMOTE_WARP_DIAG_CONTENTS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "deviceId": {
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
            "description": "The device_id field of the successful WARP-diag remote capture response to list contents of."
          },
          "commandId": {
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
            "description": "The id of the successful WARP-diag remote capture response to list contents of."
          }
        },
        "required": [
          "deviceId",
          "commandId"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_LIST_TESTS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Retrieve a list of all Cloudflare DEX Tests configured. MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_LIST_TESTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_LIST_TESTS",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_LIST_TESTS]args[/CF_DEX_DEX_LIST_TESTS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "page": {
            "type": "number",
            "minimum": 1,
            "description": "The page of results to retrieve."
          }
        },
        "required": [
          "page"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_LIST_WARP_CHANGE_EVENTS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "View logs of events when users toggle WARP on or off, or change configurations. MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_LIST_WARP_CHANGE_EVENTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_LIST_WARP_CHANGE_EVENTS",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_LIST_WARP_CHANGE_EVENTS]args[/CF_DEX_DEX_LIST_WARP_CHANGE_EVENTS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "from": {
            "type": "string",
            "description": "The datetime of the beginning point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-21T18:00:00Z)."
          },
          "to": {
            "type": "string",
            "description": "The datetime of the ending point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-22T00:00:00Z)."
          },
          "page": {
            "type": "number",
            "minimum": 1,
            "description": "The page of results to retrieve."
          },
          "account_name": {
            "description": "Optionally filter events by account name.",
            "type": "string"
          },
          "config_name": {
            "description": "Optionally filter events by WARP configuration name changed from or to. Applicable to `type=config` events only.",
            "type": "string"
          },
          "sort_order": {
            "default": "ASC",
            "description": "Set timestamp sort order.",
            "type": "string",
            "enum": [
              "ASC",
              "DESC"
            ]
          },
          "toggle": {
            "description": "Optionally filter events by toggle value. Applicable to `type=toggle` events only.",
            "type": "string",
            "enum": [
              "on",
              "off"
            ]
          },
          "type": {
            "description": "Optionally filter events by type.",
            "type": "string",
            "enum": [
              "config",
              "toggle"
            ]
          }
        },
        "required": [
          "from",
          "to",
          "page"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_TEST_STATISTICS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Analyze Cloudflare DEX Test Results by quartile given a Test ID MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_TEST_STATISTICS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_TEST_STATISTICS",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_TEST_STATISTICS]args[/CF_DEX_DEX_TEST_STATISTICS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "testId": {
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
            "description": "The DEX Test ID to analyze details of."
          },
          "from": {
            "type": "string",
            "description": "The datetime of the beginning point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-21T18:00:00Z)."
          },
          "to": {
            "type": "string",
            "description": "The datetime of the ending point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-22T00:00:00Z)."
          }
        },
        "required": [
          "testId",
          "from",
          "to"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_TRACEROUTE_TEST_DETAILS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Retrieve detailed time series results for a Traceroute DEX test by id. MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_TRACEROUTE_TEST_DETAILS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_TRACEROUTE_TEST_DETAILS",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_TRACEROUTE_TEST_DETAILS]args[/CF_DEX_DEX_TRACEROUTE_TEST_DETAILS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "testId": {
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
            "description": "The traceroute DEX Test ID to get details for."
          },
          "deviceId": {
            "description": "Optionally limit results to specific device(s). Can't be used in conjunction with the colo parameter.",
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
          },
          "colo": {
            "type": "string",
            "pattern": "^[A-Z]{3}$",
            "description": "Optionally filter results to a specific Cloudflare colo."
          },
          "timeStart": {
            "type": "string",
            "description": "The datetime of the beginning point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-21T18:00:00Z)."
          },
          "timeEnd": {
            "type": "string",
            "description": "The datetime of the ending point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-22T00:00:00Z)."
          },
          "interval": {
            "type": "string",
            "enum": [
              "minute",
              "hour"
            ],
            "description": "The time interval to group results by."
          }
        },
        "required": [
          "testId",
          "timeStart",
          "timeEnd",
          "interval"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_TRACEROUTE_TEST_NETWORK_PATH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Retrieve aggregate network path data for a Traceroute DEX test by id. Use the dex_traceroute_test_result_network_path tool to further explore individual test runs hop-by-hop. MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_TRACEROUTE_TEST_NETWORK_PATH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_TRACEROUTE_TEST_NETWORK_PATH",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_TRACEROUTE_TEST_NETWORK_PATH]args[/CF_DEX_DEX_TRACEROUTE_TEST_NETWORK_PATH]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "testId": {
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
            "description": "The traceroute DEX Test ID to get network path details for."
          },
          "deviceId": {
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
            "description": "The ID of the device to get network path details for."
          },
          "from": {
            "type": "string",
            "description": "The datetime of the beginning point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-21T18:00:00Z)."
          },
          "to": {
            "type": "string",
            "description": "The datetime of the ending point of time range for results. Must be in ISO 8601 datetime string in the extended format with UTC time (e.g, 2025-04-22T00:00:00Z)."
          },
          "interval": {
            "type": "string",
            "enum": [
              "minute",
              "hour"
            ],
            "description": "The time interval to group results by."
          }
        },
        "required": [
          "testId",
          "deviceId",
          "from",
          "to",
          "interval"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DEX_DEX_TRACEROUTE_TEST_RESULT_NETWORK_PATH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dex",
      "target": "mcpToolCall",
      "description": "Retrieve the hop-by-hop network path for a specific Traceroute DEX test result by id. MCP: https://dex.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DEX_DEX_TRACEROUTE_TEST_RESULT_NETWORK_PATH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DEX_DEX_TRACEROUTE_TEST_RESULT_NETWORK_PATH",
        "body": ""
      },
      "router_tag": "[CF_DEX_DEX_TRACEROUTE_TEST_RESULT_NETWORK_PATH]args[/CF_DEX_DEX_TRACEROUTE_TEST_RESULT_NETWORK_PATH]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "testResultId": {
            "type": "string",
            "format": "uuid",
            "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
            "description": "The traceroute DEX Test Result ID to get network path details for."
          }
        },
        "required": [
          "testResultId"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DNS_ANALYTICS_DNS_REPORT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dns_analytics",
      "target": "mcpToolCall",
      "description": "Fetch the DNS Report for a given zone since a date MCP: https://dns-analytics.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DNS_ANALYTICS_DNS_REPORT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DNS_ANALYTICS_DNS_REPORT",
        "body": ""
      },
      "router_tag": "[CF_DNS_ANALYTICS_DNS_REPORT]args[/CF_DNS_ANALYTICS_DNS_REPORT]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "zone": {
            "type": "string"
          },
          "days": {
            "type": "number"
          }
        },
        "required": [
          "zone",
          "days"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DNS_ANALYTICS_SHOW_ACCOUNT_DNS_SETTINGS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dns_analytics",
      "target": "mcpToolCall",
      "description": "Show DNS settings for current account MCP: https://dns-analytics.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DNS_ANALYTICS_SHOW_ACCOUNT_DNS_SETTINGS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DNS_ANALYTICS_SHOW_ACCOUNT_DNS_SETTINGS",
        "body": ""
      },
      "router_tag": "[CF_DNS_ANALYTICS_SHOW_ACCOUNT_DNS_SETTINGS]args[/CF_DNS_ANALYTICS_SHOW_ACCOUNT_DNS_SETTINGS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DNS_ANALYTICS_SHOW_ZONE_DNS_SETTINGS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dns_analytics",
      "target": "mcpToolCall",
      "description": "Show DNS settings for a zone MCP: https://dns-analytics.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DNS_ANALYTICS_SHOW_ZONE_DNS_SETTINGS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DNS_ANALYTICS_SHOW_ZONE_DNS_SETTINGS",
        "body": ""
      },
      "router_tag": "[CF_DNS_ANALYTICS_SHOW_ZONE_DNS_SETTINGS]args[/CF_DNS_ANALYTICS_SHOW_ZONE_DNS_SETTINGS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "zone": {
            "type": "string"
          }
        },
        "required": [
          "zone"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DNS_ANALYTICS_ZONE_DETAILS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dns_analytics",
      "target": "mcpToolCall",
      "description": "Get details for a specific Cloudflare zone MCP: https://dns-analytics.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DNS_ANALYTICS_ZONE_DETAILS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DNS_ANALYTICS_ZONE_DETAILS",
        "body": ""
      },
      "router_tag": "[CF_DNS_ANALYTICS_ZONE_DETAILS]args[/CF_DNS_ANALYTICS_ZONE_DETAILS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "zoneId": {
            "type": "string",
            "description": "The ID of the zone to get details for"
          }
        },
        "required": [
          "zoneId"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DNS_ANALYTICS_ZONES_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_dns_analytics",
      "target": "mcpToolCall",
      "description": "List all zones under a Cloudflare account MCP: https://dns-analytics.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DNS_ANALYTICS_ZONES_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DNS_ANALYTICS_ZONES_LIST",
        "body": ""
      },
      "router_tag": "[CF_DNS_ANALYTICS_ZONES_LIST]args[/CF_DNS_ANALYTICS_ZONES_LIST]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "name": {
            "description": "Filter zones by name",
            "type": "string"
          },
          "status": {
            "description": "Filter zones by status (active, pending, initializing, moved, deleted, deactivated, read only)",
            "type": "string"
          },
          "page": {
            "default": 1,
            "description": "Page number for pagination",
            "type": "number",
            "minimum": 1
          },
          "perPage": {
            "default": 50,
            "description": "Number of zones per page",
            "type": "number",
            "minimum": 5,
            "maximum": 1000
          },
          "order": {
            "default": "name",
            "description": "Field to order results by (name, status, account_name)",
            "type": "string"
          },
          "direction": {
            "default": "desc",
            "description": "Direction to order results (asc, desc)",
            "type": "string",
            "enum": [
              "asc",
              "desc"
            ]
          }
        }
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DOCS_MIGRATE_PAGES_TO_WORKERS_GUIDE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_docs",
      "target": "mcpToolCall",
      "description": "ALWAYS read this guide before migrating Pages projects to Workers. MCP: https://docs.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DOCS_MIGRATE_PAGES_TO_WORKERS_GUIDE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DOCS_MIGRATE_PAGES_TO_WORKERS_GUIDE",
        "body": ""
      },
      "router_tag": "[CF_DOCS_MIGRATE_PAGES_TO_WORKERS_GUIDE]args[/CF_DOCS_MIGRATE_PAGES_TO_WORKERS_GUIDE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_DOCS_SEARCH_CLOUDFLARE_DOCUMENTATION",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_docs",
      "target": "mcpToolCall",
      "description": "Search the Cloudflare documentation. This tool should be used to answer any question about Cloudflare products or features, including: - Workers, Pages, R2, Images, Stream, D1, Durable Objects, KV, Wo MCP: https://docs.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_DOCS_SEARCH_CLOUDFLARE_DOCUMENTATION",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_DOCS_SEARCH_CLOUDFLARE_DOCUMENTATION",
        "body": ""
      },
      "router_tag": "[CF_DOCS_SEARCH_CLOUDFLARE_DOCUMENTATION]args[/CF_DOCS_SEARCH_CLOUDFLARE_DOCUMENTATION]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "query": {
            "type": "string"
          }
        },
        "required": [
          "query"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_GRAPHQL_GRAPHQL_API_EXPLORER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_graphql",
      "target": "mcpToolCall",
      "description": "Generate a Cloudflare GraphQL API Explorer link Use this tool when: - A user asks for any GraphQL queries and wants to explore them in the Cloudflare GraphQL API Explorer. - You want to provide a shar MCP: https://graphql.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_GRAPHQL_GRAPHQL_API_EXPLORER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_GRAPHQL_GRAPHQL_API_EXPLORER",
        "body": ""
      },
      "router_tag": "[CF_GRAPHQL_GRAPHQL_API_EXPLORER]args[/CF_GRAPHQL_GRAPHQL_API_EXPLORER]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "query": {
            "type": "string",
            "description": "The GraphQL query to include in the explorer link"
          },
          "variables": {
            "description": "Variables for the query in JSON format",
            "type": "object",
            "propertyNames": {
              "type": "string"
            },
            "additionalProperties": {}
          }
        },
        "required": [
          "query"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_GRAPHQL_GRAPHQL_COMPLETE_SCHEMA",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_graphql",
      "target": "mcpToolCall",
      "description": "Fetch the complete Cloudflare GraphQL API schema (combines overview and important type details) MCP: https://graphql.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_GRAPHQL_GRAPHQL_COMPLETE_SCHEMA",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_GRAPHQL_GRAPHQL_COMPLETE_SCHEMA",
        "body": ""
      },
      "router_tag": "[CF_GRAPHQL_GRAPHQL_COMPLETE_SCHEMA]args[/CF_GRAPHQL_GRAPHQL_COMPLETE_SCHEMA]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "typesPageSize": {
            "default": 100,
            "description": "Number of types to return per page",
            "type": "number",
            "minimum": 10,
            "maximum": 500
          },
          "typesPage": {
            "default": 1,
            "description": "Page number for types to fetch",
            "type": "number",
            "minimum": 1
          },
          "includeRootTypeDetails": {
            "default": true,
            "description": "Whether to include detailed information about root types",
            "type": "boolean"
          },
          "maxTypeDetailsToFetch": {
            "default": 3,
            "description": "Maximum number of important types to fetch details for",
            "type": "number",
            "minimum": 0,
            "maximum": 10
          }
        }
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_GRAPHQL_GRAPHQL_QUERY",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_graphql",
      "target": "mcpToolCall",
      "description": "Execute a GraphQL query against the Cloudflare API IMPORTANT: ONLY execute the EXACT GraphQL query provided by the user. DO NOT generate complicated queries that the user didn't explicitly ask for. CR MCP: https://graphql.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_GRAPHQL_GRAPHQL_QUERY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_GRAPHQL_GRAPHQL_QUERY",
        "body": ""
      },
      "router_tag": "[CF_GRAPHQL_GRAPHQL_QUERY]args[/CF_GRAPHQL_GRAPHQL_QUERY]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "query": {
            "type": "string",
            "description": "The GraphQL query to execute"
          },
          "variables": {
            "description": "Variables for the query",
            "type": "object",
            "propertyNames": {
              "type": "string"
            },
            "additionalProperties": {}
          }
        },
        "required": [
          "query"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_GRAPHQL_GRAPHQL_SCHEMA_OVERVIEW",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_graphql",
      "target": "mcpToolCall",
      "description": "Fetch the high-level overview of the Cloudflare GraphQL API schema Use this tool when: - A user requests insights into the structure or capabilities of Cloudflare’s GraphQL API. - You need to explore  MCP: https://graphql.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_GRAPHQL_GRAPHQL_SCHEMA_OVERVIEW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_GRAPHQL_GRAPHQL_SCHEMA_OVERVIEW",
        "body": ""
      },
      "router_tag": "[CF_GRAPHQL_GRAPHQL_SCHEMA_OVERVIEW]args[/CF_GRAPHQL_GRAPHQL_SCHEMA_OVERVIEW]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "pageSize": {
            "default": 100,
            "description": "Number of types to return per page",
            "type": "number",
            "minimum": 10,
            "maximum": 1000
          },
          "page": {
            "default": 1,
            "description": "Page number to fetch",
            "type": "number",
            "minimum": 1
          }
        }
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_GRAPHQL_GRAPHQL_SCHEMA_SEARCH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_graphql",
      "target": "mcpToolCall",
      "description": "Search the Cloudflare GraphQL API schema for types, fields, and enum values matching a keyword Use this tool when: - You are unsure which dataset to use for your query. - A user is looking for specifi MCP: https://graphql.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_GRAPHQL_GRAPHQL_SCHEMA_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_GRAPHQL_GRAPHQL_SCHEMA_SEARCH",
        "body": ""
      },
      "router_tag": "[CF_GRAPHQL_GRAPHQL_SCHEMA_SEARCH]args[/CF_GRAPHQL_GRAPHQL_SCHEMA_SEARCH]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "keyword": {
            "type": "string",
            "description": "The keyword to search for in the schema"
          },
          "maxDetailsToFetch": {
            "default": 10,
            "description": "Maximum number of types to fetch details for",
            "type": "number",
            "minimum": 1,
            "maximum": 50
          },
          "includeInternalTypes": {
            "default": false,
            "description": "Whether to include internal types (those starting with __) in the search results",
            "type": "boolean"
          },
          "onlyObjectTypes": {
            "default": true,
            "description": "Whether to only include OBJECT kind types in the search results with descriptions",
            "type": "boolean"
          }
        },
        "required": [
          "keyword"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_GRAPHQL_GRAPHQL_TYPE_DETAILS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_graphql",
      "target": "mcpToolCall",
      "description": "Fetch detailed information about a specific GraphQL type (dataset) IMPORTANT: After exploring the schema, DO NOT generate overly complicated GraphQL queries that the user didn't explicitly ask for. On MCP: https://graphql.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_GRAPHQL_GRAPHQL_TYPE_DETAILS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_GRAPHQL_GRAPHQL_TYPE_DETAILS",
        "body": ""
      },
      "router_tag": "[CF_GRAPHQL_GRAPHQL_TYPE_DETAILS]args[/CF_GRAPHQL_GRAPHQL_TYPE_DETAILS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "typeName": {
            "type": "string",
            "description": "The type name (dataset) of the GraphQL type to fetch details for"
          },
          "fieldsPageSize": {
            "default": 50,
            "description": "Number of fields to return per page",
            "type": "number",
            "minimum": 5,
            "maximum": 500
          },
          "fieldsPage": {
            "default": 1,
            "description": "Page number for fields to fetch",
            "type": "number",
            "minimum": 1
          },
          "enumValuesPageSize": {
            "default": 50,
            "description": "Number of enum values to return per page",
            "type": "number",
            "minimum": 5,
            "maximum": 500
          },
          "enumValuesPage": {
            "default": 1,
            "description": "Page number for enum values to fetch",
            "type": "number",
            "minimum": 1
          }
        },
        "required": [
          "typeName"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_GRAPHQL_ZONE_DETAILS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_graphql",
      "target": "mcpToolCall",
      "description": "Get details for a specific Cloudflare zone MCP: https://graphql.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_GRAPHQL_ZONE_DETAILS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_GRAPHQL_ZONE_DETAILS",
        "body": ""
      },
      "router_tag": "[CF_GRAPHQL_ZONE_DETAILS]args[/CF_GRAPHQL_ZONE_DETAILS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "zoneId": {
            "type": "string",
            "description": "The ID of the zone to get details for"
          }
        },
        "required": [
          "zoneId"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_GRAPHQL_ZONES_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_graphql",
      "target": "mcpToolCall",
      "description": "List all zones under a Cloudflare account MCP: https://graphql.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_GRAPHQL_ZONES_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_GRAPHQL_ZONES_LIST",
        "body": ""
      },
      "router_tag": "[CF_GRAPHQL_ZONES_LIST]args[/CF_GRAPHQL_ZONES_LIST]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "name": {
            "description": "Filter zones by name",
            "type": "string"
          },
          "status": {
            "description": "Filter zones by status (active, pending, initializing, moved, deleted, deactivated, read only)",
            "type": "string"
          },
          "page": {
            "default": 1,
            "description": "Page number for pagination",
            "type": "number",
            "minimum": 1
          },
          "perPage": {
            "default": 50,
            "description": "Number of zones per page",
            "type": "number",
            "minimum": 5,
            "maximum": 1000
          },
          "order": {
            "default": "name",
            "description": "Field to order results by (name, status, account_name)",
            "type": "string"
          },
          "direction": {
            "default": "desc",
            "description": "Direction to order results (asc, desc)",
            "type": "string",
            "enum": [
              "asc",
              "desc"
            ]
          }
        }
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_MAIN_DOCS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_main",
      "target": "mcpToolCall",
      "description": "Search the Cloudflare documentation. This tool should be used to answer any question about Cloudflare products or features, including: - Workers, Pages, R2, Images, Stream, D1, Durable Objects, KV, Workers AI, Pages, and more. MCP: https://mcp.cloudflare.com/mcp?optimize_context=search_and_execute",
      "read": "https://miscsubjects.com/api/directory/CF_MAIN_DOCS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_MAIN_DOCS",
        "body": ""
      },
      "router_tag": "[CF_MAIN_DOCS]args[/CF_MAIN_DOCS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "query": {
            "type": "string",
            "description": "Cloudflare documentation search query"
          }
        },
        "required": [
          "query"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_MAIN_EXECUTE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_main",
      "target": "mcpToolCall",
      "description": "Execute JavaScript code against the Cloudflare API. First use the 'search' tool to find the right endpoints, then write code using the cloudflare.request() function. MCP: https://mcp.cloudflare.com/mcp?optimize_context=search_and_execute",
      "read": "https://miscsubjects.com/api/directory/CF_MAIN_EXECUTE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_MAIN_EXECUTE",
        "body": ""
      },
      "router_tag": "[CF_MAIN_EXECUTE]args[/CF_MAIN_EXECUTE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "code": {
            "type": "string",
            "description": "JavaScript async arrow function to execute"
          },
          "account_id": {
            "description": "Cloudflare account ID to scope execution to a singular account. Optional for account-independent calls.",
            "type": "string"
          }
        },
        "required": [
          "code"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_MAIN_SEARCH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_main",
      "target": "mcpToolCall",
      "description": "Search the Cloudflare OpenAPI spec. All $refs are pre-resolved inline. MCP: https://mcp.cloudflare.com/mcp?optimize_context=search_and_execute",
      "read": "https://miscsubjects.com/api/directory/CF_MAIN_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_MAIN_SEARCH",
        "body": ""
      },
      "router_tag": "[CF_MAIN_SEARCH]args[/CF_MAIN_SEARCH]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "code": {
            "type": "string",
            "description": "JavaScript async arrow function to search the OpenAPI spec"
          }
        },
        "required": [
          "code"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_OBSERVABILITY_MIGRATE_PAGES_TO_WORKERS_GUIDE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_observability",
      "target": "mcpToolCall",
      "description": "ALWAYS read this guide before migrating Pages projects to Workers. MCP: https://observability.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_OBSERVABILITY_MIGRATE_PAGES_TO_WORKERS_GUIDE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_OBSERVABILITY_MIGRATE_PAGES_TO_WORKERS_GUIDE",
        "body": ""
      },
      "router_tag": "[CF_OBSERVABILITY_MIGRATE_PAGES_TO_WORKERS_GUIDE]args[/CF_OBSERVABILITY_MIGRATE_PAGES_TO_WORKERS_GUIDE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_OBSERVABILITY_OBSERVABILITY_KEYS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_observability",
      "target": "mcpToolCall",
      "description": "Find keys in the Workers Observability Data ## Best Practices - Set a high limit (1000+) to ensure you see all available keys - Add the $metadata.service filter to narrow results to a specific Worker  MCP: https://observability.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_OBSERVABILITY_OBSERVABILITY_KEYS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_OBSERVABILITY_OBSERVABILITY_KEYS",
        "body": ""
      },
      "router_tag": "[CF_OBSERVABILITY_OBSERVABILITY_KEYS]args[/CF_OBSERVABILITY_OBSERVABILITY_KEYS]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "keysQuery": {
            "type": "object",
            "properties": {
              "timeframe": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "to": {
                        "type": "string"
                      },
                      "from": {
                        "type": "string"
                      }
                    },
                    "required": [
                      "to",
                      "from"
                    ],
                    "description": "An absolute timeframe for your query (ISO-8601 format).\n\n  • Current server time: 1970-01-01T00:00:00Z\n  • Default: Last hour from current time\n  • Maximum range: Last 7 days\n  • Format: \"YYYY-MM-DDTHH:MM:SSZ\" (e.g., \"2025-04-29T14:30:00Z\")\n\n  Examples:\n  - Between April 1st and 5th: from=\"2025-04-01T00:00:00Z\", to=\"2025-04-05T23:59:59Z\"\n\n  Note: Narrower timeframes provide faster responses and more specific results.\n  Omit this parameter entirely to use the default (last hour)."
                  },
                  {
                    "type": "object",
                    "properties": {
                      "reference": {
                        "type": "string"
                      },
                      "offset": {
                        "type": "string"
                      }
                    },
                    "required": [
                      "reference",
                      "offset"
                    ],
                    "description": "Relative timeframe for your query, composed of a reference time and an offset.\n\n  • Current server time: 1970-01-01T00:00:00Z\n  • Default: Last hour from current time\n  • Maximum range: Last 7 days\n  • Reference time format: \"YYYY-MM-DDTHH:MM:SSZ\" (ISO-8601) (e.g., \"2025-04-29T14:30:00Z\")\n  • Offset format: Must start with a '+' or '-' sign, which indicates whether the offset is in the past or future, followed by one or more time units (e.g., '+5d', '-2h', '+6h20m').\n\t\tUnits: s (seconds), m (minutes), h (hours), d (days), w (weeks).\n\t• You should not use a future looking offset in combination with the current server time as the reference time, as this will yield no results. (e.g. \"the next 20 minutes\")\n\n  Examples:\n  - Last 30 minutes: reference=\"1970-01-01T00:00:00Z\", offset=\"-30m\"\n  - Yesterday: reference=\"1970-01-01T00:00:00Z\", offset=\"-1d\"\n\n  Note: Narrower timeframes provide faster responses and more specific results.\n  Omit this parameter entirely to use the default (last hour)."
                  }
                ],
                "description": "Timeframe for your query, which can be either absolute or relative.\n\n  • Absolute timeframe: Specify exact start and end times in ISO-8601 format (e.g., \"2025-04-29T14:30:00Z\").\n  • Relative timeframe: Specify a reference time and an offset (e.g., reference=\"2025-04-29T14:30:00Z\", offset=\"-30m\").\n\n  Examples:\n  - Absolute: from=\"2025-04-01T00:00:00Z\", to=\"2025-04-05T23:59:59Z\"\n  - Relative: reference=\"2025-04-29T14:30:00Z\", offset=\"-30m\"\n\n  Note: Narrower timeframes provide faster responses and more specific results."
              },
              "datasets": {
                "default": [],
                "description": "Leave this empty to use the default datasets",
                "type": "array",
                "items": {
                  "type": "string"
                }
              },
              "filters": {
                "default": [],
                "type": "array",
                "items": {
                  "type": "object",
                  "properties": {
                    "key": {
                      "type": "string",
                      "description": "Filter field name. IMPORTANT:\n\n    • DO NOT guess keys - always use verified keys from either:\n      - Previous query results\n      - The observability_keys response\n\n    • PREFERRED KEYS (faster & always available):\n      - $metadata.service: Worker service name\n\t\t\t- $metadata.origin: Trigger type (e.g., fetch, scheduled, etc.)\n\t\t\t- $metadata.trigger: Trigger type (e.g., GET /users, POST /orders, etc.)\n      - $metadata.message: Log message text (present in nearly all logs)\n      - $metadata.error: Error message (when applicable)\n"
                    },
                    "operation": {
                      "type": "string",
                      "enum": [
                        "includes",
                        "not_includes",
                        "starts_with",
                        "regex",
                        "exists",
                        "is_null",
                        "in",
                        "not_in",
                        "eq",
                        "neq",
                        "gt",
                        "gte",
                        "lt",
                        "lte"
                      ]
                    },
                    "value": {
                      "description": "Filter comparison value. IMPORTANT:\n\n    • MUST match actual values in your logs\n    • VERIFY using either:\n      - Actual values from previous query results\n      - The '/values' endpoint with your selected key\n\n    • TYPE MATCHING:\n      - Ensure value type (string/number/boolean) matches the field type\n      - String comparisons are case-sensitive unless using specific operations\n\n    • PATTERN USAGE:\n      - For 'contains', use simple wildcard patterns\n      - For 'regex', MUST use ClickHouse regex syntax:\n        - Uses RE2 syntax (not PCRE/JavaScript)\n        - No lookaheads/lookbehinds\n        - Examples: '^5\\d{2}$' for HTTP 5xx codes, '\\bERROR\\b' for word boundary\n        - Escape backslashes with double backslash",
                      "anyOf": [
                        {
                          "type": "string"
                        },
                        {
                          "type": "number"
                        },
                        {
                          "type": "boolean"
                        }
                      ]
                    },
                    "type": {
                      "type": "string",
                      "enum": [
                        "string",
                        "number",
                        "boolean"
                      ]
                    }
                  },
                  "required": [
                    "key",
                    "operation",
                    "type"
                  ],
                  "description": "\n\t## Filtering Best Practices\n- Before applying filters, use the observability_keys and observability_values queries to confirm available filter fields and values.\n- If the query is asking to find something you should check that it exists. I.e. to requests with errors filter for $metadata.error exists.\n\t"
                }
              },
              "limit": {
                "description": "\n    • ADVANCED USAGE:\n      set limit=1000+ to retrieve comprehensive key options without needing additional filtering",
                "type": "number"
              },
              "needle": {
                "type": "object",
                "properties": {
                  "value": {
                    "anyOf": [
                      {
                        "type": "string"
                      },
                      {
                        "type": "number"
                      },
                      {
                        "type": "boolean"
                      }
                    ]
                  },
                  "isRegex": {
                    "type": "boolean"
                  },
                  "matchCase": {
                    "type": "boolean"
                  }
                },
                "required": [
                  "value"
                ]
              },
              "keyNeedle": {
                "description": "If the user makes a suggestion for a key, use this to narrow down the list of keys returned.\n\t\tMake sure match case is fals to avoid case sensitivity issues.",
                "type": "object",
                "properties": {
                  "value": {
                    "anyOf": [
                      {
                        "type": "string"
                      },
                      {
                        "type": "number"
                      },
                      {
                        "type": "boolean"
                      }
                    ]
                  },
                  "isRegex": {
                    "type": "boolean"
                  },
                  "matchCase": {
                    "type": "boolean"
                  }
                },
                "required": [
                  "value"
                ]
              }
            },
            "required": [
              "timeframe"
            ]
          }
        },
        "required": [
          "keysQuery"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_OBSERVABILITY_OBSERVABILITY_VALUES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_observability",
      "target": "mcpToolCall",
      "description": "Find values in the Workers Observability Data. ## Troubleshooting - For no results, verify the field exists using observability_keys first - If expected values are missing, try broadening your time ra MCP: https://observability.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_OBSERVABILITY_OBSERVABILITY_VALUES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_OBSERVABILITY_OBSERVABILITY_VALUES",
        "body": ""
      },
      "router_tag": "[CF_OBSERVABILITY_OBSERVABILITY_VALUES]args[/CF_OBSERVABILITY_OBSERVABILITY_VALUES]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "valuesQuery": {
            "type": "object",
            "properties": {
              "timeframe": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "to": {
                        "type": "string"
                      },
                      "from": {
                        "type": "string"
                      }
                    },
                    "required": [
                      "to",
                      "from"
                    ],
                    "description": "An absolute timeframe for your query (ISO-8601 format).\n\n  • Current server time: 1970-01-01T00:00:00Z\n  • Default: Last hour from current time\n  • Maximum range: Last 7 days\n  • Format: \"YYYY-MM-DDTHH:MM:SSZ\" (e.g., \"2025-04-29T14:30:00Z\")\n\n  Examples:\n  - Between April 1st and 5th: from=\"2025-04-01T00:00:00Z\", to=\"2025-04-05T23:59:59Z\"\n\n  Note: Narrower timeframes provide faster responses and more specific results.\n  Omit this parameter entirely to use the default (last hour)."
                  },
                  {
                    "type": "object",
                    "properties": {
                      "reference": {
                        "type": "string"
                      },
                      "offset": {
                        "type": "string"
                      }
                    },
                    "required": [
                      "reference",
                      "offset"
                    ],
                    "description": "Relative timeframe for your query, composed of a reference time and an offset.\n\n  • Current server time: 1970-01-01T00:00:00Z\n  • Default: Last hour from current time\n  • Maximum range: Last 7 days\n  • Reference time format: \"YYYY-MM-DDTHH:MM:SSZ\" (ISO-8601) (e.g., \"2025-04-29T14:30:00Z\")\n  • Offset format: Must start with a '+' or '-' sign, which indicates whether the offset is in the past or future, followed by one or more time units (e.g., '+5d', '-2h', '+6h20m').\n\t\tUnits: s (seconds), m (minutes), h (hours), d (days), w (weeks).\n\t• You should not use a future looking offset in combination with the current server time as the reference time, as this will yield no results. (e.g. \"the next 20 minutes\")\n\n  Examples:\n  - Last 30 minutes: reference=\"1970-01-01T00:00:00Z\", offset=\"-30m\"\n  - Yesterday: reference=\"1970-01-01T00:00:00Z\", offset=\"-1d\"\n\n  Note: Narrower timeframes provide faster responses and more specific results.\n  Omit this parameter entirely to use the default (last hour)."
                  }
                ],
                "description": "Timeframe for your query, which can be either absolute or relative.\n\n  • Absolute timeframe: Specify exact start and end times in ISO-8601 format (e.g., \"2025-04-29T14:30:00Z\").\n  • Relative timeframe: Specify a reference time and an offset (e.g., reference=\"2025-04-29T14:30:00Z\", offset=\"-30m\").\n\n  Examples:\n  - Absolute: from=\"2025-04-01T00:00:00Z\", to=\"2025-04-05T23:59:59Z\"\n  - Relative: reference=\"2025-04-29T14:30:00Z\", offset=\"-30m\"\n\n  Note: Narrower timeframes provide faster responses and more specific results."
              },
              "key": {
                "type": "string"
              },
              "type": {
                "type": "string",
                "enum": [
                  "string",
                  "boolean",
                  "number"
                ]
              },
              "datasets": {
                "default": [],
                "description": "Leave this empty to use the default datasets",
                "type": "array",
                "items": {
                  "type": "string"
                }
              },
              "filters": {
                "default": [],
                "type": "array",
                "items": {
                  "type": "object",
                  "properties": {
                    "key": {
                      "type": "string",
                      "description": "Filter field name. IMPORTANT:\n\n    • DO NOT guess keys - always use verified keys from either:\n      - Previous query results\n      - The observability_keys response\n\n    • PREFERRED KEYS (faster & always available):\n      - $metadata.service: Worker service name\n\t\t\t- $metadata.origin: Trigger type (e.g., fetch, scheduled, etc.)\n\t\t\t- $metadata.trigger: Trigger type (e.g., GET /users, POST /orders, etc.)\n      - $metadata.message: Log message text (present in nearly all logs)\n      - $metadata.error: Error message (when applicable)\n"
                    },
                    "operation": {
                      "type": "string",
                      "enum": [
                        "includes",
                        "not_includes",
                        "starts_with",
                        "regex",
                        "exists",
                        "is_null",
                        "in",
                        "not_in",
                        "eq",
                        "neq",
                        "gt",
                        "gte",
                        "lt",
                        "lte"
                      ]
                    },
                    "value": {
                      "description": "Filter comparison value. IMPORTANT:\n\n    • MUST match actual values in your logs\n    • VERIFY using either:\n      - Actual values from previous query results\n      - The '/values' endpoint with your selected key\n\n    • TYPE MATCHING:\n      - Ensure value type (string/number/boolean) matches the field type\n      - String comparisons are case-sensitive unless using specific operations\n\n    • PATTERN USAGE:\n      - For 'contains', use simple wildcard patterns\n      - For 'regex', MUST use ClickHouse regex syntax:\n        - Uses RE2 syntax (not PCRE/JavaScript)\n        - No lookaheads/lookbehinds\n        - Examples: '^5\\d{2}$' for HTTP 5xx codes, '\\bERROR\\b' for word boundary\n        - Escape backslashes with double backslash",
                      "anyOf": [
                        {
                          "type": "string"
                        },
                        {
                          "type": "number"
                        },
                        {
                          "type": "boolean"
                        }
                      ]
                    },
                    "type": {
                      "type": "string",
                      "enum": [
                        "string",
                        "number",
                        "boolean"
                      ]
                    }
                  },
                  "required": [
                    "key",
                    "operation",
                    "type"
                  ],
                  "description": "\n\t## Filtering Best Practices\n- Before applying filters, use the observability_keys and observability_values queries to confirm available filter fields and values.\n- If the query is asking to find something you should check that it exists. I.e. to requests with errors filter for $metadata.error exists.\n\t"
                }
              },
              "limit": {
                "default": 50,
                "type": "number"
              },
              "needle": {
                "type": "object",
                "properties": {
                  "value": {
                    "anyOf": [
                      {
                        "type": "string"
                      },
                      {
                        "type": "number"
                      },
                      {
                        "type": "boolean"
                      }
                    ]
                  },
                  "isRegex": {
                    "type": "boolean"
                  },
                  "matchCase": {
                    "type": "boolean"
                  }
                },
                "required": [
                  "value"
                ]
              }
            },
            "required": [
              "timeframe",
              "key",
              "type"
            ]
          }
        },
        "required": [
          "valuesQuery"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_OBSERVABILITY_QUERY_WORKER_OBSERVABILITY",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_observability",
      "target": "mcpToolCall",
      "description": "Query the Workers Observability API to analyze logs and metrics from your Cloudflare Workers. * A query typical query looks like this: {\"view\":\"events\",\"queryId\":\"workers-logs-events\",\"limit\":5,\"dry\": MCP: https://observability.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_OBSERVABILITY_QUERY_WORKER_OBSERVABILITY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_OBSERVABILITY_QUERY_WORKER_OBSERVABILITY",
        "body": ""
      },
      "router_tag": "[CF_OBSERVABILITY_QUERY_WORKER_OBSERVABILITY]args[/CF_OBSERVABILITY_QUERY_WORKER_OBSERVABILITY]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "query": {
            "type": "object",
            "properties": {
              "queryId": {
                "type": "string"
              },
              "view": {
                "default": "calculations",
                "description": "## Examples by View Type\n\t\t### Events View\n\t\t- \"Show me all errors for the worker api-proxy in the last 30 minutes\"\n\t\t- \"Show events from worker auth-service where the path contains /login\"\n\n\t\t### Calculation View\n\t\t- \"What is the p99 of wall time for worker api-proxy?\"\n\t\t- \"What's the count of requests by status code for worker cdn-router?\"\n\n\t\t### Invocation View\n\t\t- \"Find a request to worker api-proxy that resulted in a 500 error\"\n\t\t- \"List successful requests for the image-resizer worker with status code 200\"\n\t\t\t\t",
                "type": "string",
                "enum": [
                  "events",
                  "calculations",
                  "invocations"
                ]
              },
              "parameters": {
                "type": "object",
                "properties": {
                  "datasets": {
                    "description": "Leave this empty to use the default datasets",
                    "type": "array",
                    "items": {
                      "type": "string"
                    }
                  },
                  "filters": {
                    "type": "array",
                    "items": {
                      "type": "object",
                      "properties": {
                        "key": {
                          "type": "string",
                          "description": "Filter field name. IMPORTANT:\n\n    • DO NOT guess keys - always use verified keys from either:\n      - Previous query results\n      - The observability_keys response\n\n    • PREFERRED KEYS (faster & always available):\n      - $metadata.service: Worker service name\n\t\t\t- $metadata.origin: Trigger type (e.g., fetch, scheduled, etc.)\n\t\t\t- $metadata.trigger: Trigger type (e.g., GET /users, POST /orders, etc.)\n      - $metadata.message: Log message text (present in nearly all logs)\n      - $metadata.error: Error message (when applicable)\n"
                        },
                        "operation": {
                          "type": "string",
                          "enum": [
                            "includes",
                            "not_includes",
                            "starts_with",
                            "regex",
                            "exists",
                            "is_null",
                            "in",
                            "not_in",
                            "eq",
                            "neq",
                            "gt",
                            "gte",
                            "lt",
                            "lte"
                          ]
                        },
                        "value": {
                          "description": "Filter comparison value. IMPORTANT:\n\n    • MUST match actual values in your logs\n    • VERIFY using either:\n      - Actual values from previous query results\n      - The '/values' endpoint with your selected key\n\n    • TYPE MATCHING:\n      - Ensure value type (string/number/boolean) matches the field type\n      - String comparisons are case-sensitive unless using specific operations\n\n    • PATTERN USAGE:\n      - For 'contains', use simple wildcard patterns\n      - For 'regex', MUST use ClickHouse regex syntax:\n        - Uses RE2 syntax (not PCRE/JavaScript)\n        - No lookaheads/lookbehinds\n        - Examples: '^5\\d{2}$' for HTTP 5xx codes, '\\bERROR\\b' for word boundary\n        - Escape backslashes with double backslash",
                          "anyOf": [
                            {
                              "type": "string"
                            },
                            {
                              "type": "number"
                            },
                            {
                              "type": "boolean"
                            }
                          ]
                        },
                        "type": {
                          "type": "string",
                          "enum": [
                            "string",
                            "number",
                            "boolean"
                          ]
                        }
                      },
                      "required": [
                        "key",
                        "operation",
                        "type"
                      ],
                      "description": "\n\t## Filtering Best Practices\n- Before applying filters, use the observability_keys and observability_values queries to confirm available filter fields and values.\n- If the query is asking to find something you should check that it exists. I.e. to requests with errors filter for $metadata.error exists.\n\t"
                    }
                  },
                  "filterCombination": {
                    "type": "string",
                    "enum": [
                      "and",
                      "or",
                      "AND",
                      "OR"
                    ]
                  },
                  "calculations": {
                    "type": "array",
                    "items": {
                      "type": "object",
                      "properties": {
                        "key": {
                          "description": "The key to use for the calculation. This key must exist in the logs.\nUse the Keys endpoint to confirm that this key exists\n\n• DO NOT guess keys - always use verified keys from either:\n- Previous query results\n- The observability_keys response",
                          "type": "string"
                        },
                        "keyType": {
                          "type": "string",
                          "enum": [
                            "string",
                            "number",
                            "boolean"
                          ]
                        },
                        "operator": {
                          "type": "string",
                          "enum": [
                            "uniq",
                            "count",
                            "max",
                            "min",
                            "sum",
                            "avg",
                            "median",
                            "p001",
                            "p01",
                            "p05",
                            "p10",
                            "p25",
                            "p75",
                            "p90",
                            "p95",
                            "p99",
                            "p999",
                            "stddev",
                            "variance"
                          ]
                        },
                        "alias": {
                          "type": "string"
                        }
                      },
                      "required": [
                        "operator"
                      ]
                    }
                  },
                  "groupBys": {
                    "description": "Only valid when doing a Calculation",
                    "type": "array",
                    "items": {
                      "type": "object",
                      "properties": {
                        "type": {
                          "type": "string",
                          "enum": [
                            "string",
                            "number",
                            "boolean"
                          ]
                        },
                        "value": {
                          "type": "string"
                        }
                      },
                      "required": [
                        "type",
                        "value"
                      ]
                    }
                  },
                  "orderBy": {
                    "description": "Order By only workers when a group by is present",
                    "type": "object",
                    "properties": {
                      "value": {
                        "type": "string",
                        "description": "This must be the alias of a calculation"
                      },
                      "order": {
                        "type": "string",
                        "enum": [
                          "asc",
                          "desc"
                        ]
                      }
                    },
                    "required": [
                      "value"
                    ]
                  },
                  "limit": {
                    "description": "Use this limit when view is calculation and a group by is present. 10 is a sensible default",
                    "type": "integer",
                    "minimum": 0,
                    "maximum": 2000
                  },
                  "needle": {
                    "type": "object",
                    "properties": {
                      "value": {
                        "anyOf": [
                          {
                            "type": "string"
                          },
                          {
                            "type": "number"
                          },
                          {
                            "type": "boolean"
                          }
                        ]
                      },
                      "isRegex": {
                        "type": "boolean"
                      },
                      "matchCase": {
                        "type": "boolean"
                      }
                    },
                    "required": [
                      "value"
                    ]
                  }
                }
              },
              "timeframe": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "to": {
                        "type": "string"
                      },
                      "from": {
                        "type": "string"
                      }
                    },
                    "required": [
                      "to",
                      "from"
                    ],
                    "description": "An absolute timeframe for your query (ISO-8601 format).\n\n  • Current server time: 1970-01-01T00:00:00Z\n  • Default: Last hour from current time\n  • Maximum range: Last 7 days\n  • Format: \"YYYY-MM-DDTHH:MM:SSZ\" (e.g., \"2025-04-29T14:30:00Z\")\n\n  Examples:\n  - Between April 1st and 5th: from=\"2025-04-01T00:00:00Z\", to=\"2025-04-05T23:59:59Z\"\n\n  Note: Narrower timeframes provide faster responses and more specific results.\n  Omit this parameter entirely to use the default (last hour)."
                  },
                  {
                    "type": "object",
                    "properties": {
                      "reference": {
                        "type": "string"
                      },
                      "offset": {
                        "type": "string"
                      }
                    },
                    "required": [
                      "reference",
                      "offset"
                    ],
                    "description": "Relative timeframe for your query, composed of a reference time and an offset.\n\n  • Current server time: 1970-01-01T00:00:00Z\n  • Default: Last hour from current time\n  • Maximum range: Last 7 days\n  • Reference time format: \"YYYY-MM-DDTHH:MM:SSZ\" (ISO-8601) (e.g., \"2025-04-29T14:30:00Z\")\n  • Offset format: Must start with a '+' or '-' sign, which indicates whether the offset is in the past or future, followed by one or more time units (e.g., '+5d', '-2h', '+6h20m').\n\t\tUnits: s (seconds), m (minutes), h (hours), d (days), w (weeks).\n\t• You should not use a future looking offset in combination with the current server time as the reference time, as this will yield no results. (e.g. \"the next 20 minutes\")\n\n  Examples:\n  - Last 30 minutes: reference=\"1970-01-01T00:00:00Z\", offset=\"-30m\"\n  - Yesterday: reference=\"1970-01-01T00:00:00Z\", offset=\"-1d\"\n\n  Note: Narrower timeframes provide faster responses and more specific results.\n  Omit this parameter entirely to use the default (last hour)."
                  }
                ],
                "description": "Timeframe for your query, which can be either absolute or relative.\n\n  • Absolute timeframe: Specify exact start and end times in ISO-8601 format (e.g., \"2025-04-29T14:30:00Z\").\n  • Relative timeframe: Specify a reference time and an offset (e.g., reference=\"2025-04-29T14:30:00Z\", offset=\"-30m\").\n\n  Examples:\n  - Absolute: from=\"2025-04-01T00:00:00Z\", to=\"2025-04-05T23:59:59Z\"\n  - Relative: reference=\"2025-04-29T14:30:00Z\", offset=\"-30m\"\n\n  Note: Narrower timeframes provide faster responses and more specific results."
              },
              "granularity": {
                "description": "This is only used when the view is calculations - by leaving it empty workers observability will detect the correct granularity",
                "type": "number"
              },
              "limit": {
                "default": 5,
                "description": "Use this limit to limit the number of events returned when the view is events. 5 is a sensible default",
                "type": "number",
                "maximum": 2000
              },
              "dry": {
                "default": true,
                "type": "boolean"
              },
              "offset": {
                "description": "The offset to use for pagination. Use the $metadata.id field to get the next offset.",
                "type": "string"
              },
              "offsetBy": {
                "type": "number"
              },
              "offsetDirection": {
                "description": "The direction to use for pagination. Use \"next\" or \"prev\".",
                "type": "string"
              }
            },
            "required": [
              "queryId",
              "parameters",
              "timeframe"
            ]
          }
        },
        "required": [
          "query"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_OBSERVABILITY_SEARCH_CLOUDFLARE_DOCUMENTATION",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_observability",
      "target": "mcpToolCall",
      "description": "Search the Cloudflare documentation. This tool should be used to answer any question about Cloudflare products or features, including: - Workers, Pages, R2, Images, Stream, D1, Durable Objects, KV, Wo MCP: https://observability.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_OBSERVABILITY_SEARCH_CLOUDFLARE_DOCUMENTATION",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_OBSERVABILITY_SEARCH_CLOUDFLARE_DOCUMENTATION",
        "body": ""
      },
      "router_tag": "[CF_OBSERVABILITY_SEARCH_CLOUDFLARE_DOCUMENTATION]args[/CF_OBSERVABILITY_SEARCH_CLOUDFLARE_DOCUMENTATION]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "query": {
            "type": "string"
          }
        },
        "required": [
          "query"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_OBSERVABILITY_WORKERS_GET_WORKER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_observability",
      "target": "mcpToolCall",
      "description": "Get the details of the Cloudflare Worker. MCP: https://observability.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_OBSERVABILITY_WORKERS_GET_WORKER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_OBSERVABILITY_WORKERS_GET_WORKER",
        "body": ""
      },
      "router_tag": "[CF_OBSERVABILITY_WORKERS_GET_WORKER]args[/CF_OBSERVABILITY_WORKERS_GET_WORKER]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "scriptName": {
            "type": "string",
            "description": "The name of the worker script to retrieve"
          }
        },
        "required": [
          "scriptName"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_OBSERVABILITY_WORKERS_GET_WORKER_CODE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_observability",
      "target": "mcpToolCall",
      "description": "Get the source code of a Cloudflare Worker. Note: This may be a bundled version of the worker. MCP: https://observability.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_OBSERVABILITY_WORKERS_GET_WORKER_CODE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_OBSERVABILITY_WORKERS_GET_WORKER_CODE",
        "body": ""
      },
      "router_tag": "[CF_OBSERVABILITY_WORKERS_GET_WORKER_CODE]args[/CF_OBSERVABILITY_WORKERS_GET_WORKER_CODE]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {
          "scriptName": {
            "type": "string",
            "description": "The name of the worker script to retrieve"
          }
        },
        "required": [
          "scriptName"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_OBSERVABILITY_WORKERS_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cf_observability",
      "target": "mcpToolCall",
      "description": "List all Workers in your Cloudflare account. If you only need details of a single Worker, use workers_get_worker. MCP: https://observability.mcp.cloudflare.com/sse",
      "read": "https://miscsubjects.com/api/directory/CF_OBSERVABILITY_WORKERS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_OBSERVABILITY_WORKERS_LIST",
        "body": ""
      },
      "router_tag": "[CF_OBSERVABILITY_WORKERS_LIST]args[/CF_OBSERVABILITY_WORKERS_LIST]",
      "input_schema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SKILL_AGENTS_SDK",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "cf-skill",
      "target": "@cf/zai-org/glm-5.2",
      "description": "Cloudflare skill: agents-sdk Build AI agents on Cloudflare Workers using the Agents SDK. Load when creating stateful agents, durable workflows, real-time WebSocket apps, scheduled tasks, MCP servers, chat applications, voice agents, or browser automation. Covers Agent class, state management, callable RPC, Workflows, durable execution, queues, retries, observability, and React hooks. Biases towards retrieval from Cloudflare docs over pre-trained knowledge.",
      "read": "https://miscsubjects.com/api/directory/SKILL_AGENTS_SDK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SKILL_AGENTS_SDK",
        "body": ""
      },
      "router_tag": "[SKILL_AGENTS_SDK]args[/SKILL_AGENTS_SDK]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SKILL_CLOUDFLARE",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "cf-skill",
      "target": "@cf/zai-org/glm-5.2",
      "description": "Cloudflare skill: cloudflare Comprehensive Cloudflare platform skill covering Workers, Pages, storage (KV, D1, R2), AI (Workers AI, Vectorize, Agents SDK), feature flags (Flagship), networking (Tunnel, Spectrum), security (WAF, DDoS), and infrastructure-as-code (Terraform, Pulumi). Use for any Cloudflare development task. Biases towards retrieval from Cloudflare docs over pre-trained knowledge.",
      "read": "https://miscsubjects.com/api/directory/SKILL_CLOUDFLARE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SKILL_CLOUDFLARE",
        "body": ""
      },
      "router_tag": "[SKILL_CLOUDFLARE]args[/SKILL_CLOUDFLARE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SKILL_CLOUDFLARE_EMAIL_SERVICE",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "cf-skill",
      "target": "@cf/zai-org/glm-5.2",
      "description": "Cloudflare skill: cloudflare-email-service Send and receive transactional emails with Cloudflare Email Service (Email Sending + Email Routing). Use when building email sending (Workers binding or REST API), email routing, Agents SDK email handling, or integrating email into any app — Workers, Node.js, Python, Go, etc. Also use for email deliverability, SPF/DKIM/DMARC, wrangler email setup, MCP email tools, or when a coding agent needs to send emails. Even for simple requests like \"add email to my Worker\" — this skill has critical config details.",
      "read": "https://miscsubjects.com/api/directory/SKILL_CLOUDFLARE_EMAIL_SERVICE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SKILL_CLOUDFLARE_EMAIL_SERVICE",
        "body": ""
      },
      "router_tag": "[SKILL_CLOUDFLARE_EMAIL_SERVICE]args[/SKILL_CLOUDFLARE_EMAIL_SERVICE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SKILL_CLOUDFLARE_ONE",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "cf-skill",
      "target": "@cf/zai-org/glm-5.2",
      "description": "Cloudflare skill: cloudflare-one \"Guides Cloudflare One Zero Trust and SASE work across Access, Gateway, WARP, Tunnel, Cloudflare WAN, DLP, CASB, device posture, and identity. Use when designing, configuring, troubleshooting, or reviewing Cloudflare One deployments. Retrieval-first: use current Cloudflare docs/API schemas instead of embedded product docs.\"",
      "read": "https://miscsubjects.com/api/directory/SKILL_CLOUDFLARE_ONE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SKILL_CLOUDFLARE_ONE",
        "body": ""
      },
      "router_tag": "[SKILL_CLOUDFLARE_ONE]args[/SKILL_CLOUDFLARE_ONE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SKILL_CLOUDFLARE_ONE_MIGRATIONS",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "cf-skill",
      "target": "@cf/zai-org/glm-5.2",
      "description": "Cloudflare skill: cloudflare-one-migrations Plans migrations from Zscaler ZIA/ZPA, Palo Alto, legacy VPN, SWG, or SASE stacks to Cloudflare One. Use for migration assessments, policy mapping, rollout plans, and parity/gap analysis.",
      "read": "https://miscsubjects.com/api/directory/SKILL_CLOUDFLARE_ONE_MIGRATIONS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SKILL_CLOUDFLARE_ONE_MIGRATIONS",
        "body": ""
      },
      "router_tag": "[SKILL_CLOUDFLARE_ONE_MIGRATIONS]args[/SKILL_CLOUDFLARE_ONE_MIGRATIONS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SKILL_DURABLE_OBJECTS",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "cf-skill",
      "target": "@cf/zai-org/glm-5.2",
      "description": "Cloudflare skill: durable-objects Create and review Cloudflare Durable Objects. Use when building stateful coordination (chat rooms, multiplayer games, booking systems), implementing RPC methods, SQLite storage, alarms, WebSockets, or reviewing DO code for best practices. Covers Workers integration, wrangler config, and testing with Vitest. Biases towards retrieval from Cloudflare docs over pre-trained knowledge.",
      "read": "https://miscsubjects.com/api/directory/SKILL_DURABLE_OBJECTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SKILL_DURABLE_OBJECTS",
        "body": ""
      },
      "router_tag": "[SKILL_DURABLE_OBJECTS]args[/SKILL_DURABLE_OBJECTS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SKILL_SANDBOX_SDK",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "cf-skill",
      "target": "@cf/zai-org/glm-5.2",
      "description": "Cloudflare skill: sandbox-sdk Build sandboxed applications for secure code execution. Load when building AI code execution, code interpreters, CI/CD systems, interactive dev environments, or executing untrusted code. Covers Sandbox SDK lifecycle, commands, files, code interpreter, and preview URLs. Biases towards retrieval from Cloudflare docs over pre-trained knowledge.",
      "read": "https://miscsubjects.com/api/directory/SKILL_SANDBOX_SDK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SKILL_SANDBOX_SDK",
        "body": ""
      },
      "router_tag": "[SKILL_SANDBOX_SDK]args[/SKILL_SANDBOX_SDK]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SKILL_TURNSTILE_SPIN",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "cf-skill",
      "target": "@cf/zai-org/glm-5.2",
      "description": "Cloudflare skill: turnstile-spin Set up Cloudflare Turnstile end-to-end in a project — scan the codebase, create the widget via the Cloudflare API, deploy the managed siteverify Worker, write the frontend snippets, validate, and persist the skill. Load this when a user asks to add Turnstile, set up CAPTCHA, protect a form from bots, or fix a Turnstile integration. Mirrors developers.cloudflare.com/turnstile/spin.",
      "read": "https://miscsubjects.com/api/directory/SKILL_TURNSTILE_SPIN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SKILL_TURNSTILE_SPIN",
        "body": ""
      },
      "router_tag": "[SKILL_TURNSTILE_SPIN]args[/SKILL_TURNSTILE_SPIN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SKILL_WEB_PERF",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "cf-skill",
      "target": "@cf/zai-org/glm-5.2",
      "description": "Cloudflare skill: web-perf Analyzes web performance using Chrome DevTools MCP. Measures Core Web Vitals (LCP, INP, CLS) and supplementary metrics (FCP, TBT, Speed Index), identifies render-blocking resources, network dependency chains, layout shifts, caching issues, and accessibility gaps. Use when asked to audit, profile, debug, or optimize page load performance, Lighthouse scores, or site speed. Biases towards retrieval from current documentation over pre-trained knowledge.",
      "read": "https://miscsubjects.com/api/directory/SKILL_WEB_PERF",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SKILL_WEB_PERF",
        "body": ""
      },
      "router_tag": "[SKILL_WEB_PERF]args[/SKILL_WEB_PERF]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SKILL_WORKERS_BEST_PRACTICES",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "cf-skill",
      "target": "@cf/zai-org/glm-5.2",
      "description": "Cloudflare skill: workers-best-practices Reviews and authors Cloudflare Workers code against production best practices. Load when writing new Workers, reviewing Worker code, configuring wrangler.jsonc, or checking for common Workers anti-patterns (streaming, floating promises, global state, secrets, bindings, observability). Biases towards retrieval from Cloudflare docs over pre-trained knowledge.",
      "read": "https://miscsubjects.com/api/directory/SKILL_WORKERS_BEST_PRACTICES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SKILL_WORKERS_BEST_PRACTICES",
        "body": ""
      },
      "router_tag": "[SKILL_WORKERS_BEST_PRACTICES]args[/SKILL_WORKERS_BEST_PRACTICES]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SKILL_WRANGLER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "cf-skill",
      "target": "@cf/zai-org/glm-5.2",
      "description": "Cloudflare skill: wrangler Cloudflare Workers CLI for deploying, developing, and managing Workers, KV, R2, D1, Vectorize, Hyperdrive, Workers AI, Containers, Queues, Workflows, Pipelines, and Secrets Store. Load before running wrangler commands to ensure correct syntax and best practices. Biases towards retrieval from Cloudflare docs over pre-trained knowledge.",
      "read": "https://miscsubjects.com/api/directory/SKILL_WRANGLER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SKILL_WRANGLER",
        "body": ""
      },
      "router_tag": "[SKILL_WRANGLER]args[/SKILL_WRANGLER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SEND_BY_CHANNEL",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "channel",
      "target": "sendByChannel",
      "description": "WHAT: Text the custodian (or anyone) — the ONE way to send a message. $1=channel (use \"blooio\" to text the custodian), $2=recipient (<owner line, not public> is the custodian), $3=the message text. WHEN_TO_USE: ANY \"text me / send a text / message the custodian / notify me / sms / dm me\" request. This is the canonical texting row. Do NOT use BLOOIO_SEND_MESSAGE for this. ARGS: channel | recipient | text   (pipe-delimited, exactly three) EX: [SEND_BY_CHANNEL]blooio|<owner line, not public>|Woof woof.[/SEND_BY_CHANNEL]",
      "read": "https://miscsubjects.com/api/directory/SEND_BY_CHANNEL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SEND_BY_CHANNEL",
        "body": ""
      },
      "router_tag": "[SEND_BY_CHANNEL]args[/SEND_BY_CHANNEL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CHARLIE_CRITIC",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "charlie",
      "target": "@cf/meta/llama-3.3-70b-instruct-fp8-fast",
      "description": "Charlie Critic",
      "read": "https://miscsubjects.com/api/directory/CHARLIE_CRITIC",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CHARLIE_CRITIC",
        "body": ""
      },
      "router_tag": "[CHARLIE_CRITIC]args[/CHARLIE_CRITIC]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CHARLIE_PROSECUTOR",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "charlie",
      "target": "@cf/meta/llama-3.3-70b-instruct-fp8-fast",
      "description": "Charlie Prosecutor",
      "read": "https://miscsubjects.com/api/directory/CHARLIE_PROSECUTOR",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CHARLIE_PROSECUTOR",
        "body": ""
      },
      "router_tag": "[CHARLIE_PROSECUTOR]args[/CHARLIE_PROSECUTOR]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AGENT_SPAWN_CLI",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cli",
      "target": "cliAgentSpawn",
      "description": "Alias of CLI_SPAWN for router tags. Args: agent|prompt|cwd|mode|delivery",
      "read": "https://miscsubjects.com/api/directory/AGENT_SPAWN_CLI",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AGENT_SPAWN_CLI",
        "body": ""
      },
      "router_tag": "[AGENT_SPAWN_CLI]args[/AGENT_SPAWN_CLI]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_AWS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run aws CLI. ARGS: $1 = args.",
      "read": "https://miscsubjects.com/api/directory/CLI_AWS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_AWS",
        "body": ""
      },
      "router_tag": "[CLI_AWS]args[/CLI_AWS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_BREW",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run brew. ARGS: $1 = args.",
      "read": "https://miscsubjects.com/api/directory/CLI_BREW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_BREW",
        "body": ""
      },
      "router_tag": "[CLI_BREW]args[/CLI_BREW]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_BUN",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run bun. ARGS: $1 = args, $2 = cwd.",
      "read": "https://miscsubjects.com/api/directory/CLI_BUN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_BUN",
        "body": ""
      },
      "router_tag": "[CLI_BUN]args[/CLI_BUN]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_CLASP",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run clasp (Apps Script CLI) on the custodian's Mac. ARGS: $1 = args after `clasp`. cwd = /Users/[custodian]/miscsubjects-pages/apps-script. WHEN_TO_USE: push or deploy GAS code (airunner, PepperUp). EX: CLI_CLASP \"push -f\"",
      "read": "https://miscsubjects.com/api/directory/CLI_CLASP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_CLASP",
        "body": ""
      },
      "router_tag": "[CLI_CLASP]args[/CLI_CLASP]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_CURL_LOCAL",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run curl ON THE MAC (different from the worker's outbound fetch — picks up Mac creds in keychain/env). ARGS: $1 = args.",
      "read": "https://miscsubjects.com/api/directory/CLI_CURL_LOCAL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_CURL_LOCAL",
        "body": ""
      },
      "router_tag": "[CLI_CURL_LOCAL]args[/CLI_CURL_LOCAL]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_DENO",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run deno. ARGS: $1 = args, $2 = cwd.",
      "read": "https://miscsubjects.com/api/directory/CLI_DENO",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_DENO",
        "body": ""
      },
      "router_tag": "[CLI_DENO]args[/CLI_DENO]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_DOCKER",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run docker. ARGS: $1 = args, $2 = cwd.",
      "read": "https://miscsubjects.com/api/directory/CLI_DOCKER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_DOCKER",
        "body": ""
      },
      "router_tag": "[CLI_DOCKER]args[/CLI_DOCKER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_FD",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run fd (modern find). ARGS: $1 = args, $2 = cwd.",
      "read": "https://miscsubjects.com/api/directory/CLI_FD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_FD",
        "body": ""
      },
      "router_tag": "[CLI_FD]args[/CLI_FD]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_FFMPEG",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run ffmpeg. ARGS: $1 = args, $2 = cwd. EX: CLI_FFMPEG \"-i input.mp4 -t 10 out.mp4\"|/Users/[custodian]/Downloads",
      "read": "https://miscsubjects.com/api/directory/CLI_FFMPEG",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_FFMPEG",
        "body": ""
      },
      "router_tag": "[CLI_FFMPEG]args[/CLI_FFMPEG]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_GCLOUD",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run gcloud. ARGS: $1 = args.",
      "read": "https://miscsubjects.com/api/directory/CLI_GCLOUD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_GCLOUD",
        "body": ""
      },
      "router_tag": "[CLI_GCLOUD]args[/CLI_GCLOUD]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_GIT",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run git. ARGS: $1 = args after `git`. cwd = $2 (default /Users/[custodian]/miscsubjects-pages). EX: CLI_GIT \"status\"|/Users/[custodian]/miscsubjects-pages",
      "read": "https://miscsubjects.com/api/directory/CLI_GIT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_GIT",
        "body": ""
      },
      "router_tag": "[CLI_GIT]args[/CLI_GIT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_GRAPHVIZ",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run dot/graphviz. ARGS: $1 = args.",
      "read": "https://miscsubjects.com/api/directory/CLI_GRAPHVIZ",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_GRAPHVIZ",
        "body": ""
      },
      "router_tag": "[CLI_GRAPHVIZ]args[/CLI_GRAPHVIZ]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_GROUP",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cli",
      "target": "cliAgentGroup",
      "description": "WHAT: CLI Agent Team Room — agents chat in sequence on a shared transcript (superior build solutions). Args: agents|topic|cwd|mode|delivery agents: comma-separated team (default kimi,gemini,codex) — also grok, claude, aider mode: readonly (default) | auto delivery: headless | terminal (terminal opens live team-room tail -f transcript) WHEN_TO_USE: cross-agent debate, audit synthesis, second opinions, architecture review as a team. EX: [CLI_GROUP]kimi,gemini,codex|What are the top 5 gaps in agent_turn logging and how do we fix them?|/Users/[custodian]/miscsubjects-pages|readonly|terminal[/CLI_GROUP]",
      "read": "https://miscsubjects.com/api/directory/CLI_GROUP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_GROUP",
        "body": ""
      },
      "router_tag": "[CLI_GROUP]args[/CLI_GROUP]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_HTTPIE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run httpie (http CLI). ARGS: $1 = args.",
      "read": "https://miscsubjects.com/api/directory/CLI_HTTPIE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_HTTPIE",
        "body": ""
      },
      "router_tag": "[CLI_HTTPIE]args[/CLI_HTTPIE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_JQ",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run jq. ARGS: $1 = args (the jq filter), $2 = stdin_text.",
      "read": "https://miscsubjects.com/api/directory/CLI_JQ",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_JQ",
        "body": ""
      },
      "router_tag": "[CLI_JQ]args[/CLI_JQ]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_KIMI",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "Run Moonshot Kimi Code CLI non-interactively on the Mac. Args: task|cwd. Creates a new session; resume id printed at end. readonly audits: use CLI_SPAWN with mode readonly instead.",
      "read": "https://miscsubjects.com/api/directory/CLI_KIMI",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_KIMI",
        "body": ""
      },
      "router_tag": "[CLI_KIMI]args[/CLI_KIMI]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_KUBECTL",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run kubectl. ARGS: $1 = args.",
      "read": "https://miscsubjects.com/api/directory/CLI_KUBECTL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_KUBECTL",
        "body": ""
      },
      "router_tag": "[CLI_KUBECTL]args[/CLI_KUBECTL]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_MAGICK",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run ImageMagick (magick CLI). ARGS: $1 = args, $2 = cwd.",
      "read": "https://miscsubjects.com/api/directory/CLI_MAGICK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_MAGICK",
        "body": ""
      },
      "router_tag": "[CLI_MAGICK]args[/CLI_MAGICK]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_NODE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run node. ARGS: $1 = args, $2 = cwd. EX: CLI_NODE \"-e \\\"console.log(1+1)\\\"\"|.",
      "read": "https://miscsubjects.com/api/directory/CLI_NODE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_NODE",
        "body": ""
      },
      "router_tag": "[CLI_NODE]args[/CLI_NODE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_NPM",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run npm. ARGS: $1 = args, $2 = cwd. EX: CLI_NPM \"install\"|/Users/[custodian]/miscsubjects-pages",
      "read": "https://miscsubjects.com/api/directory/CLI_NPM",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_NPM",
        "body": ""
      },
      "router_tag": "[CLI_NPM]args[/CLI_NPM]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_OPENAI",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run the openai CLI (https://developers.openai.com/api/docs/libraries/openai-cli). ARGS: $1 = args, $2 = cwd.",
      "read": "https://miscsubjects.com/api/directory/CLI_OPENAI",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_OPENAI",
        "body": ""
      },
      "router_tag": "[CLI_OPENAI]args[/CLI_OPENAI]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_PANDOC",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run pandoc. ARGS: $1 = args, $2 = cwd.",
      "read": "https://miscsubjects.com/api/directory/CLI_PANDOC",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_PANDOC",
        "body": ""
      },
      "router_tag": "[CLI_PANDOC]args[/CLI_PANDOC]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_PNPM",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run pnpm. ARGS: $1 = args, $2 = cwd.",
      "read": "https://miscsubjects.com/api/directory/CLI_PNPM",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_PNPM",
        "body": ""
      },
      "router_tag": "[CLI_PNPM]args[/CLI_PNPM]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_PSQL",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run psql. ARGS: $1 = args.",
      "read": "https://miscsubjects.com/api/directory/CLI_PSQL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_PSQL",
        "body": ""
      },
      "router_tag": "[CLI_PSQL]args[/CLI_PSQL]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_PYTHON",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run python3. ARGS: $1 = args, $2 = cwd. EX: CLI_PYTHON \"-c \\\"print(2+2)\\\"\"|.",
      "read": "https://miscsubjects.com/api/directory/CLI_PYTHON",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_PYTHON",
        "body": ""
      },
      "router_tag": "[CLI_PYTHON]args[/CLI_PYTHON]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_REFLEX",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cli",
      "target": "cliIssueReflex",
      "description": "WHAT: Issue reflex — spawn scoped CLI agent team on a build/code brief (background). Auto-fired by selftest failures + owner blooio build messages. Manual use OK. Args: brief|agents|cwd|mode|delivery agents default kimi,codex. delivery headless (fast) or terminal (live transcript). EX: [CLI_REFLEX]Selftest t8 failed on blooio reply path — best fix?|kimi,codex|/Users/[custodian]/miscsubjects-pages|readonly|headless[/CLI_REFLEX]",
      "read": "https://miscsubjects.com/api/directory/CLI_REFLEX",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_REFLEX",
        "body": ""
      },
      "router_tag": "[CLI_REFLEX]args[/CLI_REFLEX]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_RG",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run ripgrep. ARGS: $1 = args, $2 = cwd. EX: CLI_RG \"ADDTASK -n\"|/Users/[custodian]/miscsubjects-pages",
      "read": "https://miscsubjects.com/api/directory/CLI_RG",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_RG",
        "body": ""
      },
      "router_tag": "[CLI_RG]args[/CLI_RG]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_SPAWN",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "cli",
      "target": "cliAgentSpawn",
      "description": "WHAT: spawn any coding CLI agent on the Mac in a NEW session. Args: agent|prompt|cwd|mode|delivery agent: kimi|gemini|codex|grok|grok-sa|claude|aider mode: readonly (plan/sandbox, no writes) | auto delivery: headless (default) | terminal (opens Terminal.app tab) WHEN_TO_USE: cross-agent audit, second opinion, delegate repo work to another model. EX: [CLI_SPAWN]kimi|audit miscsubjects build end-to-end read only|/Users/[custodian]/miscsubjects-pages|readonly|headless[/CLI_SPAWN] EX: [CLI_SPAWN]gemini|review STATE.md for sprawl|/Users/[custodian]/miscsubjects-pages|readonly|headless[/CLI_SPAWN]",
      "read": "https://miscsubjects.com/api/directory/CLI_SPAWN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_SPAWN",
        "body": ""
      },
      "router_tag": "[CLI_SPAWN]args[/CLI_SPAWN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_SQLITE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run sqlite3. ARGS: $1 = args (db path then query). EX: CLI_SQLITE \"/path/to.db 'SELECT * FROM x LIMIT 5'\"",
      "read": "https://miscsubjects.com/api/directory/CLI_SQLITE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_SQLITE",
        "body": ""
      },
      "router_tag": "[CLI_SQLITE]args[/CLI_SQLITE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_TERRAFORM",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run terraform. ARGS: $1 = args, $2 = cwd.",
      "read": "https://miscsubjects.com/api/directory/CLI_TERRAFORM",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_TERRAFORM",
        "body": ""
      },
      "router_tag": "[CLI_TERRAFORM]args[/CLI_TERRAFORM]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_TYPST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run typst (typesetting). ARGS: $1 = args, $2 = cwd.",
      "read": "https://miscsubjects.com/api/directory/CLI_TYPST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_TYPST",
        "body": ""
      },
      "router_tag": "[CLI_TYPST]args[/CLI_TYPST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_WRANGLER",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run wrangler on the custodian's Mac (Cloudflare CLI). ARGS: $1 = args after `wrangler`. cwd defaults to /Users/[custodian]/miscsubjects-pages. WHEN_TO_USE: deploy/check Workers, list R2 objects, run d1 execute, view kv, etc. EX: CLI_WRANGLER \"pages deploy public --project-name loop-safe-miscsubjects --commit-dirty=true\"",
      "read": "https://miscsubjects.com/api/directory/CLI_WRANGLER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_WRANGLER",
        "body": ""
      },
      "router_tag": "[CLI_WRANGLER]args[/CLI_WRANGLER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CLI_YT_DLP",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cli",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run yt-dlp. ARGS: $1 = args, $2 = cwd. EX: CLI_YT_DLP \"-o ad.mp4 https://...\".",
      "read": "https://miscsubjects.com/api/directory/CLI_YT_DLP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CLI_YT_DLP",
        "body": ""
      },
      "router_tag": "[CLI_YT_DLP]args[/CLI_YT_DLP]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "JCI_CLASSIFY",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "cloaker",
      "target": "POST https://jcibj.com/lapi/rest/r/$JCI_USER_ID",
      "description": "WHAT: Classify a visitor via JustCloakIt.  type=false+status=passed means real human. Needs JCI_USER_ID secret WHEN_TO_USE: you need to jci classify ARGS: ip|ua|lan|ref|qu|inc_loc EX: [JCI_CLASSIFY]arg1|arg2|arg3|arg4|arg5|arg6[/JCI_CLASSIFY]",
      "read": "https://miscsubjects.com/api/directory/JCI_CLASSIFY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "JCI_CLASSIFY",
        "body": ""
      },
      "router_tag": "[JCI_CLASSIFY]args[/JCI_CLASSIFY]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BROWSER_JSON",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "cloudflare",
      "target": "POST https://api.cloudflare.com/client/v4/accounts/$1/browser-rendering/json",
      "description": "WHAT: Extract LLM-structured JSON from a URL via Cloudflare Browser Rendering. $1=account_id, $2=JSON body {url, prompt?, response_format?} WHEN_TO_USE: \"pull <fields> as json from <url>\" ARGS: see content EX: [BROWSER_JSON]arg2[/BROWSER_JSON]",
      "read": "https://miscsubjects.com/api/directory/BROWSER_JSON",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BROWSER_JSON",
        "body": ""
      },
      "router_tag": "[BROWSER_JSON]args[/BROWSER_JSON]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BROWSER_LINKS",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "cloudflare",
      "target": "POST https://api.cloudflare.com/client/v4/accounts/$1/browser-rendering/links",
      "description": "WHAT: Extract all links from a URL via Cloudflare Browser Rendering. $1=account_id, $2=JSON body {url} WHEN_TO_USE: \"what links does <url> have\" ARGS: see content EX: [BROWSER_LINKS]arg2[/BROWSER_LINKS]",
      "read": "https://miscsubjects.com/api/directory/BROWSER_LINKS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BROWSER_LINKS",
        "body": ""
      },
      "router_tag": "[BROWSER_LINKS]args[/BROWSER_LINKS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BROWSER_MARKDOWN",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "cloudflare",
      "target": "POST https://api.cloudflare.com/client/v4/accounts/$1/browser-rendering/markdown",
      "description": "WHAT: Get the markdown of a URL via Cloudflare Browser Rendering. $1=account_id, $2=JSON body {url}. Returns the rendered markdown WHEN_TO_USE: \"fetch as markdown <url>\" or \"what does <url> say\" ARGS: see content EX: [BROWSER_MARKDOWN]arg2[/BROWSER_MARKDOWN]",
      "read": "https://miscsubjects.com/api/directory/BROWSER_MARKDOWN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BROWSER_MARKDOWN",
        "body": ""
      },
      "router_tag": "[BROWSER_MARKDOWN]args[/BROWSER_MARKDOWN]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BROWSER_PDF",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "cloudflare",
      "target": "POST https://api.cloudflare.com/client/v4/accounts/$1/browser-rendering/pdf",
      "description": "WHAT: Render a URL as PDF via Cloudflare Browser Rendering. $1=account_id, $2=JSON body {url}. Returns binary PDF WHEN_TO_USE: \"save <url> as PDF\" ARGS: see content EX: [BROWSER_PDF]arg2[/BROWSER_PDF]",
      "read": "https://miscsubjects.com/api/directory/BROWSER_PDF",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BROWSER_PDF",
        "body": ""
      },
      "router_tag": "[BROWSER_PDF]args[/BROWSER_PDF]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BROWSER_SCRAPE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "cloudflare",
      "target": "POST https://api.cloudflare.com/client/v4/accounts/$1/browser-rendering/scrape",
      "description": "WHAT: Extract structured data by selectors via Cloudflare Browser Rendering. $1=account_id, $2=JSON body {url, elements:[{selector}]} WHEN_TO_USE: \"scrape <selector> from <url>\" ARGS: see content EX: [BROWSER_SCRAPE]arg2[/BROWSER_SCRAPE]",
      "read": "https://miscsubjects.com/api/directory/BROWSER_SCRAPE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BROWSER_SCRAPE",
        "body": ""
      },
      "router_tag": "[BROWSER_SCRAPE]args[/BROWSER_SCRAPE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BROWSER_SCREENSHOT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "cloudflare",
      "target": "POST https://api.cloudflare.com/client/v4/accounts/$1/browser-rendering/screenshot",
      "description": "WHAT: Get a PNG screenshot of a URL via Cloudflare Browser Rendering. $1=account_id, $2=JSON body {url, screenshotOptions?}. Returns binary PNG WHEN_TO_USE: \"screenshot <url>\" ARGS: see content EX: [BROWSER_SCREENSHOT]arg2[/BROWSER_SCREENSHOT]",
      "read": "https://miscsubjects.com/api/directory/BROWSER_SCREENSHOT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BROWSER_SCREENSHOT",
        "body": ""
      },
      "router_tag": "[BROWSER_SCREENSHOT]args[/BROWSER_SCREENSHOT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "cloudflare",
      "target": "target_map:{\"access_apps\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/access/apps\"},\"accounts_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts\"},\"ai_models\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/ai/models/search?per_page=100\"},\"ai_run\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/ai/run/$2\",\"body\":\"$$3\"},\"analytics_dash\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1/analytics/dashboard\"},\"cache_purge\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1/purge_cache\",\"body\":\"$$2\"},\"d1_get\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database/$2\"},\"d1_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database\"},\"d1_query_remote\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database/$2/query\",\"body\":\"$$3\"},\"dns_create\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1/dns_records\",\"body\":\"{\\\"type\\\":\\\"$2\\\",\\\"name\\\":\\\"$3\\\",\\\"content\\\":\\\"$4\\\",\\\"ttl\\\":$5,\\\"proxied\\\":$6}\"},\"dns_delete\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1/dns_records/$2\"},\"dns_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1/dns_records?per_page=100\"},\"dns_update\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1/dns_records/$2\",\"body\":\"{\\\"type\\\":\\\"$3\\\",\\\"name\\\":\\\"$4\\\",\\\"content\\\":\\\"$5\\\",\\\"ttl\\\":$6,\\\"proxied\\\":$7}\"},\"email_routing\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1/email/routing/rules\"},\"hyperdrive_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/hyperdrive/configs\"},\"images_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/images/v1\"},\"kv_bulk_write\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2/bulk\",\"body\":\"$$3\"},\"kv_create_ns\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces\",\"body\":\"form:title=$2\"},\"kv_delete_ns\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2\"},\"kv_list_keys\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2/keys\"},\"kv_list_ns\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces\"},\"logpush_jobs\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1/logpush/jobs\"},\"pages_deployments\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/pages/projects/$2/deployments\"},\"pages_deploy_retry\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/pages/projects/$2/deployments/$3/retry\"},\"pages_get\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/pages/projects/$2\"},\"pages_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/pages/projects\"},\"pages_patch\":{\"method\":\"PATCH\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/pages/projects/$2\",\"body\":\"$$3\"},\"queues_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/queues\"},\"r2_create_bucket\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets\",\"body\":\"{\\\"name\\\":\\\"$2\\\",\\\"locationHint\\\":\\\"$3\\\"}\"},\"r2_delete_bucket\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2\"},\"r2_list_buckets\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets\"},\"secrets_create\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/secrets_store/stores/$2/secrets\",\"body\":\"$$3\"},\"secrets_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/secrets_store/stores/$2/secrets?per_page=100\"},\"secrets_stores\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/secrets_store/stores\"},\"stream_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/stream\"},\"tokens_verify\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/user/tokens/verify\"},\"token_verify\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/user/tokens/verify\"},\"tunnels_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/cfd_tunnel\"},\"user\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/user\"},\"vectorize_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/vectorize/v2/indexes\"},\"verify\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/user/tokens/verify\"},\"workers_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts\"},\"worker_delete\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2\"},\"worker_deployments\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/deployments\"},\"worker_get\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2\"},\"worker_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts\"},\"worker_routes\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1/workers/routes\"},\"zones_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/zones\"},\"zone_get\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1\"},\"do_namespaces_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/durable_objects/namespaces\"},\"do_namespace_objects\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/durable_objects/namespaces/$2/objects\"},\"ai_models_text_gen\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/ai/models/search?per_page=200&task=Text+Generation\"},\"queues_get\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/queues/$2\"},\"workers_tail_create\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/tails\"},\"pages_env_vars\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/pages/projects/$2\"},\"account_subscriptions\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/subscriptions\"},\"account_audit_logs\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/audit_logs?per_page=50\"},\"workflows_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workflows\"},\"cron_triggers_get\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/schedules\"},\"observability_query\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/logs\",\"body\":\"$$2\"},\"user_tokens_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/user/tokens\"},\"browser_content\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/browser-rendering/content\",\"body\":\"$$2\"},\"browser_screenshot\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/browser-rendering/screenshot\",\"body\":\"$$2\"},\"browser_pdf\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/browser-rendering/pdf\",\"body\":\"$$2\"},\"browser_snapshot\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/browser-rendering/snapshot\",\"body\":\"$$2\"},\"browser_scrape\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/browser-rendering/scrape\",\"body\":\"$$2\"},\"browser_markdown\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/browser-rendering/markdown\",\"body\":\"$$2\"},\"browser_links\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/browser-rendering/links\",\"body\":\"$$2\"},\"browser_json\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/browser-rendering/json\",\"body\":\"$$2\"},\"vectorize_create\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/vectorize/v2/indexes\",\"body\":\"$$2\"},\"vectorize_get\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/vectorize/v2/indexes/$2\"},\"vectorize_query\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/vectorize/v2/indexes/$2/query\",\"body\":\"$$3\"},\"vectorize_insert\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/vectorize/v2/indexes/$2/insert\",\"body\":\"$$3\"},\"workflows_get\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workflows/$2\"},\"workflows_instances\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workflows/$2/instances\"},\"workflows_trigger\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workflows/$2/instances\",\"body\":\"$$3\"},\"queues_create\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/queues\",\"body\":\"$$2\"},\"email_routing_addresses\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/email/routing/addresses\"},\"workers_listbuildsbyscript\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/builds/workers/$2/builds\"},\"workers_listtriggersbyscript\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/builds/workers/$2/triggers\"},\"workers_listdeployhooks\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/builds/workers/$2/deploy_hooks\"},\"workers_createdeployhook\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/builds/workers/$2/deploy_hooks\",\"body\":\"$$3\"},\"workers_deletedeployhook\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/builds/workers/$2/deploy_hooks/$3\"},\"workers_getdeployhook\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/builds/workers/$2/deploy_hooks/$3\"},\"workers_updatedeployhook\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/builds/workers/$2/deploy_hooks/$3\",\"body\":\"$$4\"},\"d1_list_databases\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database\"},\"d1_create_database\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database\",\"body\":\"$$2\"},\"d1_delete_database\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database/$2\"},\"d1_get_database\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database/$2\"},\"d1_update_partial_database\":{\"method\":\"PATCH\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database/$2\",\"body\":\"$$3\"},\"d1_update_database\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database/$2\",\"body\":\"$$3\"},\"d1_export_database\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database/$2/export\",\"body\":\"$$3\"},\"d1_import_database\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database/$2/import\",\"body\":\"$$3\"},\"d1_query_database\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database/$2/query\",\"body\":\"$$3\"},\"d1_raw_database_query\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database/$2/raw\",\"body\":\"$$3\"},\"d1_time_travel_get_bookmark\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database/$2/time_travel/bookmark\"},\"d1_time_travel_restore\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/d1/database/$2/time_travel/restore\",\"body\":\"$$3\"},\"r2_get_event_notification_configs\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/event_notifications/r2/$2/configuration\"},\"r2_event_notification_delete_config\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/event_notifications/r2/$2/configuration/queues/$3\"},\"r2_get_event_notification_config\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/event_notifications/r2/$2/configuration/queues/$3\"},\"r2_put_event_notification_config\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/event_notifications/r2/$2/configuration/queues/$3\",\"body\":\"$$4\"},\"r2_list_buckets_2\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets\"},\"r2_create_bucket_2\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets\",\"body\":\"$$2\"},\"r2_delete_bucket_2\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2\"},\"r2_get_bucket\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2\"},\"r2_patch_bucket\":{\"method\":\"PATCH\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2\",\"body\":\"$$3\"},\"r2_delete_bucket_cors_policy\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/cors\"},\"r2_get_bucket_cors_policy\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/cors\"},\"r2_put_bucket_cors_policy\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/cors\",\"body\":\"$$3\"},\"r2_list_custom_domains\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/domains/custom\"},\"r2_add_custom_domain\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/domains/custom\",\"body\":\"$$3\"},\"r2_delete_custom_domain\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/domains/custom/$3\"},\"r2_get_custom_domain_settings\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/domains/custom/$3\"},\"r2_edit_custom_domain_settings\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/domains/custom/$3\",\"body\":\"$$4\"},\"r2_get_bucket_public_policy\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/domains/managed\"},\"r2_put_bucket_public_policy\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/domains/managed\",\"body\":\"$$3\"},\"r2_get_bucket_lifecycle_configuration\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/lifecycle\"},\"r2_put_bucket_lifecycle_configuration\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/lifecycle\",\"body\":\"$$3\"},\"r2_get_bucket_local_uploads_configuration\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/local-uploads\"},\"r2_put_bucket_local_uploads_configuration\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/local-uploads\",\"body\":\"$$3\"},\"r2_get_bucket_lock_configuration\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/lock\"},\"r2_put_bucket_lock_configuration\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/lock\",\"body\":\"$$3\"},\"r2_delete_objects\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/objects\"},\"r2_list_objects\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/objects\"},\"r2_delete_object\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/objects/$3\"},\"r2_get_object\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/objects/$3\"},\"r2_put_object\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/objects/$3\",\"body\":\"$$4\"},\"r2_delete_bucket_sippy_config\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/sippy\"},\"r2_get_bucket_sippy_config\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/sippy\"},\"r2_put_bucket_sippy_config\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/buckets/$2/sippy\",\"body\":\"$$3\"},\"r2_get_account_level_metrics\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/metrics\"},\"r2_create_temp_access_credentials\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/r2/temp-access-credentials\",\"body\":\"$$2\"},\"kv_workers_kv_namespace_list_namespaces\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces\"},\"kv_workers_kv_namespace_create_a_namespace\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces\",\"body\":\"$$2\"},\"kv_workers_kv_namespace_remove_a_namespace\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2\"},\"kv_workers_kv_namespace_get_a_namespace\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2\"},\"kv_workers_kv_namespace_rename_a_namespace\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2\",\"body\":\"$$3\"},\"kv_workers_kv_namespace_delete_multiple_key_value_pairs_deprecated\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2/bulk\"},\"kv_workers_kv_namespace_write_multiple_key_value_pairs\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2/bulk\",\"body\":\"$$3\"},\"kv_workers_kv_namespace_delete_multiple_key_value_pairs\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2/bulk/delete\",\"body\":\"$$3\"},\"kv_workers_kv_namespace_get_multiple_key_value_pairs\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2/bulk/get\",\"body\":\"$$3\"},\"kv_workers_kv_namespace_list_a_namespace_s_keys\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2/keys\"},\"kv_workers_kv_namespace_read_the_metadata_for_a_key\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2/metadata/$3\"},\"kv_workers_kv_namespace_delete_key_value_pair\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2/values/$3\"},\"kv_workers_kv_namespace_read_key_value_pair\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2/values/$3\"},\"kv_workers_kv_namespace_write_key_value_pair_with_metadata\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/storage/kv/namespaces/$2/values/$3\",\"body\":\"$$4\"},\"workers_worker_account_settings_fetch_worker_account_settings\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/account-settings\"},\"workers_worker_account_settings_create_worker_account_settings\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/account-settings\",\"body\":\"$$2\"},\"workers_worker_assets_upload\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/assets/upload\",\"body\":\"$$2\"},\"workers_namespace_worker_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces\"},\"workers_namespace_worker_create\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces\",\"body\":\"$$2\"},\"workers_namespace_worker_delete_namespace\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2\"},\"workers_namespace_worker_get_namespace\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2\"},\"workers_namespace_worker_patch_namespace\":{\"method\":\"PATCH\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2\",\"body\":\"$$3\"},\"workers_namespace_worker_put_namespace\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2\",\"body\":\"$$3\"},\"workers_namespace_worker_delete_scripts\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts\"},\"workers_namespace_worker_list_scripts\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts\"},\"workers_namespace_worker_script_delete_worker\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3\"},\"workers_namespace_worker_script_worker_details\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3\"},\"workers_namespace_worker_script_upload_worker_module\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3\",\"body\":\"$$4\"},\"workers_namespace_worker_script_update_create_assets_upload_session\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/assets-upload-session\",\"body\":\"$$4\"},\"workers_namespace_worker_get_script_bindings\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/bindings\"},\"workers_namespace_worker_get_script_content\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/content\"},\"workers_namespace_worker_put_script_content\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/content\",\"body\":\"$$4\"},\"workers_namespace_worker_list_script_secrets\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/secrets\"},\"workers_namespace_worker_put_script_secrets\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/secrets\",\"body\":\"$$4\"},\"workers_namespace_worker_patch_script_secrets_bulk\":{\"method\":\"PATCH\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/secrets-bulk\",\"body\":\"$$4\"},\"workers_namespace_worker_delete_script_secret\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/secrets/$4\"},\"workers_namespace_worker_get_script_secrets\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/secrets/$4\"},\"workers_namespace_worker_get_script_settings\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/settings\"},\"workers_namespace_worker_patch_script_settings\":{\"method\":\"PATCH\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/settings\",\"body\":\"$$4\"},\"workers_namespace_worker_get_script_tags\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/tags\"},\"workers_namespace_worker_put_script_tags\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/tags\",\"body\":\"$$4\"},\"workers_namespace_worker_delete_script_tag\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/tags/$4\"},\"workers_namespace_worker_put_script_tag\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/dispatch/namespaces/$2/scripts/$3/tags/$4\",\"body\":\"$$5\"},\"workers_domains_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/domains\"},\"workers_domains_update\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/domains\",\"body\":\"$$2\"},\"workers_domains_delete\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/domains/$2\"},\"workers_domains_get\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/domains/$2\"},\"workers_durable_objects_namespace_list_namespaces\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/durable_objects/namespaces\"},\"workers_durable_objects_namespace_list_objects\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/durable_objects/namespaces/$2/objects\"},\"workers_destination_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/destinations\"},\"workers_destination_create\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/destinations\",\"body\":\"$$2\"},\"workers_destinations_delete\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/destinations/$2\"},\"workers_destination_update\":{\"method\":\"PATCH\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/destinations/$2\",\"body\":\"$$3\"},\"workers_queries_list\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/queries\"},\"workers_queries_post\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/queries\",\"body\":\"$$2\"},\"workers_queries_delete\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/queries/$2\"},\"workers_queries_get\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/queries/$2\"},\"workers_queries_patch\":{\"method\":\"PATCH\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/queries/$2\",\"body\":\"$$3\"},\"workers_shared_query_post\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/shared/query\",\"body\":\"$$2\"},\"workers_shared_query_get\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/shared/query/$2\"},\"workers_telemetry_keys_list\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/telemetry/keys\",\"body\":\"$$2\"},\"workers_telemetry_live_tail_post\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/telemetry/live-tail\",\"body\":\"$$2\"},\"workers_telemetry_live_tail_heartbeat_get\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/telemetry/live-tail/heartbeat\",\"body\":\"$$2\"},\"workers_telemetry_query\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/telemetry/query\",\"body\":\"$$2\"},\"workers_telemetry_values_list\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/telemetry/values\",\"body\":\"$$2\"},\"workers_usage_get\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/observability/usage\"},\"workers_worker_placement_list_regions\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/placement/regions\"},\"workers_worker_script_list_workers\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts\"},\"workers_worker_script_search_workers\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts-search\"},\"workers_worker_script_delete_worker\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2\"},\"workers_worker_script_download_worker\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2\"},\"workers_worker_script_upload_worker_module\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2\",\"body\":\"$$3\"},\"workers_worker_script_update_create_assets_upload_session\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/assets-upload-session\",\"body\":\"$$3\"},\"workers_worker_script_put_content\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/content\",\"body\":\"$$3\"},\"workers_worker_script_get_content\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/content/v2\"},\"workers_worker_deployments_list_deployments\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/deployments\"},\"workers_worker_deployments_create_deployment\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/deployments\",\"body\":\"$$3\"},\"workers_worker_deployments_delete_deployment\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/deployments/$3\"},\"workers_worker_deployments_get_deployment\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/deployments/$3\"},\"workers_worker_cron_trigger_get_cron_triggers\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/schedules\"},\"workers_worker_cron_trigger_update_cron_triggers\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/schedules\",\"body\":\"$$3\"},\"workers_worker_script_settings_get_settings\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/script-settings\"},\"workers_worker_script_settings_patch_settings\":{\"method\":\"PATCH\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/script-settings\",\"body\":\"$$3\"},\"workers_worker_list_script_secrets\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/secrets\"},\"workers_worker_put_script_secret\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/secrets\",\"body\":\"$$3\"},\"workers_worker_patch_script_secrets_bulk\":{\"method\":\"PATCH\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/secrets-bulk\",\"body\":\"$$3\"},\"workers_worker_delete_script_secret\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/secrets/$3\"},\"workers_worker_get_script_secret\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/secrets/$3\"},\"workers_worker_script_get_settings\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/settings\"},\"workers_worker_script_patch_settings\":{\"method\":\"PATCH\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/settings\",\"body\":\"$$3\"},\"workers_worker_script_delete_subdomain\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/subdomain\"},\"workers_worker_script_get_subdomain\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/subdomain\"},\"workers_worker_script_post_subdomain\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/subdomain\",\"body\":\"$$3\"},\"workers_list_tails\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/tails\"},\"workers_worker_tail_logs_start_tail\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/tails\",\"body\":\"$$3\"},\"workers_worker_tail_logs_delete_tail\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/tails/$3\"},\"workers_worker_script_fetch_usage_model\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/usage-model\"},\"workers_worker_script_update_usage_model\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/usage-model\",\"body\":\"$$3\"},\"workers_worker_versions_list_versions\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/versions\"},\"workers_worker_versions_upload_version\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/versions\",\"body\":\"$$3\"},\"workers_worker_versions_get_version_detail\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/scripts/$2/versions/$3\"},\"workers_worker_environment_get_script_content\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/services/$2/environments/$3/content\"},\"workers_worker_environment_put_script_content\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/services/$2/environments/$3/content\",\"body\":\"$$4\"},\"workers_worker_script_environment_get_settings\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/services/$2/environments/$3/settings\"},\"workers_worker_script_environment_patch_settings\":{\"method\":\"PATCH\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/services/$2/environments/$3/settings\",\"body\":\"$$4\"},\"workers_worker_subdomain_delete_subdomain\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/subdomain\"},\"workers_worker_subdomain_get_subdomain\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/subdomain\"},\"workers_worker_subdomain_create_subdomain\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/subdomain\",\"body\":\"$$2\"},\"workers_listworkers\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/workers\"},\"workers_createworker\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/workers\",\"body\":\"$$2\"},\"workers_deleteworker\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/workers/$2\"},\"workers_getworker\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/workers/$2\"},\"workers_editworker\":{\"method\":\"PATCH\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/workers/$2\",\"body\":\"$$3\"},\"workers_updateworker\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/workers/$2\",\"body\":\"$$3\"},\"workers_listworkerversions\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/workers/$2/versions\"},\"workers_createworkerversion\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/workers/$2/versions\",\"body\":\"$$3\"},\"workers_deleteworkerversion\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/workers/$2/versions/$3\"},\"workers_getworkerversion\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/accounts/$1/workers/workers/$2/versions/$3\"},\"workers_triggerdeployhook\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/workers/builds/deploy_hooks/$1\",\"body\":\"$$2\"},\"workers_worker_routes_list_routes\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1/workers/routes\"},\"workers_worker_routes_create_route\":{\"method\":\"POST\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1/workers/routes\",\"body\":\"$$2\"},\"workers_worker_routes_delete_route\":{\"method\":\"DELETE\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1/workers/routes/$2\"},\"workers_worker_routes_get_route\":{\"method\":\"GET\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1/workers/routes/$2\"},\"workers_worker_routes_update_route\":{\"method\":\"PUT\",\"url\":\"https://api.cloudflare.com/client/v4/zones/$1/workers/routes/$2\",\"body\":\"$$3\"}}",
      "description": "WHAT: Cloudflare REST API unified entrypoint. 256+ operations. WHEN_TO_USE: any Cloudflare API call (KV, D1, R2, Workers, DNS, etc.). ARGS: operation|account_id|... (first arg selects the sub-operation from the target_map). EX: [CF]kv_list_keys|my_account_id[/CF] [CF]d1_query|my_account_id|my_db_id|SELECT * FROM t[/CF] WHAT: Cloudflare REST unified entrypoint WHEN_TO_USE: any Cloudflare API call: account, zones, workers, pages, KV, R2, DNS, AI, tokens ARGS: $1=op, $2..$N=positional args EX: [CF]user[/CF] TESTS: POSITIVE: {\"key\":\"CF\",\"body\":\"user\"} → HTTP 200 with email. INVERSE: {\"key\":\"CF\",\"body\":\"xxx\"} → starts with ERR:target_map:unknown_op",
      "read": "https://miscsubjects.com/api/directory/CF",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF",
        "body": ""
      },
      "router_tag": "[CF]args[/CF]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DURABLE_WORKER",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cloudflare",
      "target": "GET https://miscsubjects.com/api/durable/$1",
      "description": "WHAT: Durable Worker — the bound Durable Object (class DirectoryDO, script loop-safe-directory-do). One strongly-consistent instance (\"main\") that owns the SLUG REGISTRY (every declared internal position: slug -> kind+target) and an append-only MUTATION-INTENT LOG WHEN_TO_USE: you need to durable worker ARGS: see content EX: [DURABLE_WORKER]arg1[/DURABLE_WORKER] INVOKE (read ops, $1 = op):   [DURABLE_WORKER]ping[/DURABLE_WORKER]        -> {ok, do, id, ts}   [DURABLE_WORKER]slug.list[/DURABLE_WORKER]   -> every declared slug   [DURABLE_WORKER]intents[/DURABLE_WORKER]     -> last 200 mutation intents (chronological) RESOLVE one slug (REST):  GET  https://miscsubjects.com/api/durable/slug.resolve?slug=<slug> REGISTER a slug (REST):   POST https://miscsubjects.com/api/durable/slug.register  {\"slug\":\"<slug>\",\"kind\":\"row|page|tool|agent\",\"target\":\"<target>\"} Bound two ways: this Worker self-binds DIRECTORY_DO; the Pages project also binds it via script_name. Deploy the Worker before the Pages deploy.",
      "read": "https://miscsubjects.com/api/directory/DURABLE_WORKER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DURABLE_WORKER",
        "body": ""
      },
      "router_tag": "[DURABLE_WORKER]args[/DURABLE_WORKER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SIBLING_DO_CHAT",
      "object_type": "tool",
      "runner": "sibling",
      "directory_type": "http",
      "category": "cloudflare",
      "target": "POST https://loop-safe-sibling.[custodian].workers.dev/do/expert/chat?name=$1",
      "description": "WHAT: Chat with a named ExpertDO using Workers AI inside the DO context. $1=DO name. $2=JSON body string with shape {\"messages\":[{\"role\":\"user\",\"content\":\"...\"}],\"model\":\"@cf/meta/llama-3.3-70b-instruct-fp8-fast\"}. Uses $$2 raw so the JSON object passes through unescaped WHEN_TO_USE: \"ask the CF expert about workflows\" or \"chat with the <name> DO\" ARGS: see content EX: [SIBLING_DO_CHAT]arg2[/SIBLING_DO_CHAT]",
      "read": "https://miscsubjects.com/api/directory/SIBLING_DO_CHAT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SIBLING_DO_CHAT",
        "body": ""
      },
      "router_tag": "[SIBLING_DO_CHAT]args[/SIBLING_DO_CHAT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SIBLING_DO_PING",
      "object_type": "tool",
      "runner": "sibling",
      "directory_type": "http",
      "category": "cloudflare",
      "target": "GET https://loop-safe-sibling.[custodian].workers.dev/do/expert/ping?name=$1",
      "description": "WHAT: Ping a named ExpertDO instance on the sibling Worker. Each name gets its own Durable Object id, its own SQLite state. $1=DO name (e.g. CF_EXPERT, STRIPE_EXPERT, default) WHEN_TO_USE: \"ping the CF expert DO\" or \"is the <name> expert alive\" ARGS: see content EX: [SIBLING_DO_PING]arg1[/SIBLING_DO_PING] Ping a named ExpertDO instance on the sibling Worker. Each name gets its own Durable Object id, its own SQLite state. $1=DO name (e.g. CF_EXPERT, STRIPE_EXPERT, default). WHEN_TO_USE: \"ping the CF expert DO\" or \"is the <name> expert alive\"",
      "read": "https://miscsubjects.com/api/directory/SIBLING_DO_PING",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SIBLING_DO_PING",
        "body": ""
      },
      "router_tag": "[SIBLING_DO_PING]args[/SIBLING_DO_PING]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SIBLING_HEALTH",
      "object_type": "tool",
      "runner": "sibling",
      "directory_type": "http",
      "category": "cloudflare",
      "target": "GET https://loop-safe-sibling.[custodian].workers.dev/health",
      "description": "WHAT: Liveness check for the sibling Worker (loop-safe-sibling) that hosts cron + Durable Objects + Queues + Workers AI. Returns {ok,name,ts}. No args WHEN_TO_USE: \"is the sibling worker up\" or \"ping the sibling\" ARGS: see content EX: [SIBLING_HEALTH][/SIBLING_HEALTH] Liveness check for the sibling Worker (loop-safe-sibling) that hosts cron + Durable Objects + Queues + Workers AI. Returns {ok,name,ts}. No args. WHEN_TO_USE: \"is the sibling worker up\" or \"ping the sibling\"",
      "read": "https://miscsubjects.com/api/directory/SIBLING_HEALTH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SIBLING_HEALTH",
        "body": ""
      },
      "router_tag": "[SIBLING_HEALTH]args[/SIBLING_HEALTH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SIBLING_WORKFLOW_DELIVER_STATUS",
      "object_type": "tool",
      "runner": "sibling",
      "directory_type": "http",
      "category": "cloudflare",
      "target": "GET https://loop-safe-sibling.[custodian].workers.dev/wf/deliver/status?id=$1",
      "description": "WHAT: Status of a DeliverWorkflow instance. $1=instance id (from the trigger response) WHEN_TO_USE: \"what is workflow <id> doing\" ARGS: see content EX: [SIBLING_WORKFLOW_DELIVER_STATUS]arg1[/SIBLING_WORKFLOW_DELIVER_STATUS] Status of a DeliverWorkflow instance. $1=instance id (from the trigger response). WHEN_TO_USE: \"what is workflow <id> doing\"",
      "read": "https://miscsubjects.com/api/directory/SIBLING_WORKFLOW_DELIVER_STATUS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SIBLING_WORKFLOW_DELIVER_STATUS",
        "body": ""
      },
      "router_tag": "[SIBLING_WORKFLOW_DELIVER_STATUS]args[/SIBLING_WORKFLOW_DELIVER_STATUS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SIBLING_WORKFLOW_DELIVER_TRIGGER",
      "object_type": "tool",
      "runner": "sibling",
      "directory_type": "http",
      "category": "cloudflare",
      "target": "POST https://loop-safe-sibling.[custodian].workers.dev/wf/deliver/trigger",
      "description": "WHAT: Trigger a one-off DeliverWorkflow instance on the sibling Worker. Returns {id, status}. $1=optional JSON params (default {}) WHEN_TO_USE: \"run the durable deliver workflow\" or \"fire DeliverWorkflow\" ARGS: see content EX: [SIBLING_WORKFLOW_DELIVER_TRIGGER]arg1[/SIBLING_WORKFLOW_DELIVER_TRIGGER]",
      "read": "https://miscsubjects.com/api/directory/SIBLING_WORKFLOW_DELIVER_TRIGGER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SIBLING_WORKFLOW_DELIVER_TRIGGER",
        "body": ""
      },
      "router_tag": "[SIBLING_WORKFLOW_DELIVER_TRIGGER]args[/SIBLING_WORKFLOW_DELIVER_TRIGGER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TOOLING_DOCS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "cloudflare",
      "target": "GET https://developers.cloudflare.com",
      "description": "WHAT: Platform + protocol references (external) WHEN_TO_USE: you need to tooling docs ARGS: see content EX: [TOOLING_DOCS][/TOOLING_DOCS] Platform + protocol references (external). Cloudflare   https://developers.cloudflare.com · api https://api.cloudflare.com (Workers/Pages/D1/KV/R2/DO/Workflows) MCP          https://modelcontextprotocol.io JSON Schema  https://json-schema.org MDN          https://developer.mozilla.org GitHub repo  https://github.com/[custodian]/miscsubjects-pages · api https://api.github.com",
      "read": "https://miscsubjects.com/api/directory/TOOLING_DOCS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TOOLING_DOCS",
        "body": ""
      },
      "router_tag": "[TOOLING_DOCS]args[/TOOLING_DOCS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_ACTIVATE",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": "computer",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Bring an app to the front (focus it). WHEN_TO_USE: \"open X\", \"switch to X\", \"focus X\" (X = app name) ARGS: app name (e.g. Safari)",
      "read": "https://miscsubjects.com/api/directory/LOCAL_ACTIVATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_ACTIVATE",
        "body": ""
      },
      "router_tag": "[LOCAL_ACTIVATE]args[/LOCAL_ACTIVATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_APPS",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": "computer",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: List running GUI apps on the Mac (foreground processes). WHEN_TO_USE: \"what apps are open\", \"list running apps\", \"what is running on my mac\" ARGS: none",
      "read": "https://miscsubjects.com/api/directory/LOCAL_APPS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_APPS",
        "body": ""
      },
      "router_tag": "[LOCAL_APPS]args[/LOCAL_APPS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_FRONTMOST",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": "computer",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Name of the frontmost (active) app on the Mac. WHEN_TO_USE: \"what app is in front\", \"what am I looking at\", \"frontmost app\" ARGS: none",
      "read": "https://miscsubjects.com/api/directory/LOCAL_FRONTMOST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_FRONTMOST",
        "body": ""
      },
      "router_tag": "[LOCAL_FRONTMOST]args[/LOCAL_FRONTMOST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_KEYCODE",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": "computer",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Send a macOS key code to the focused app (36=return 53=esc 48=tab 123-126=arrows). WHEN_TO_USE: \"press enter\", \"hit escape\", \"press the down arrow\" ARGS: key code number",
      "read": "https://miscsubjects.com/api/directory/LOCAL_KEYCODE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_KEYCODE",
        "body": ""
      },
      "router_tag": "[LOCAL_KEYCODE]args[/LOCAL_KEYCODE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_KEYSTROKE",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": "computer",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Type text into the focused field on the Mac (System Events keystroke). WHEN_TO_USE: \"type X\", \"enter X into the focused field\" ARGS: the text to type",
      "read": "https://miscsubjects.com/api/directory/LOCAL_KEYSTROKE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_KEYSTROKE",
        "body": ""
      },
      "router_tag": "[LOCAL_KEYSTROKE]args[/LOCAL_KEYSTROKE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_UI_CLICK",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": "computer",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Click a UI element by NAME in the frontmost app (semantic, not blind x/y). Pair with LOCAL_UI_SNAPSHOT to find names. WHEN_TO_USE: \"click the X button\", \"press X\" where X is an on-screen element name ARGS: element name",
      "read": "https://miscsubjects.com/api/directory/LOCAL_UI_CLICK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_UI_CLICK",
        "body": ""
      },
      "router_tag": "[LOCAL_UI_CLICK]args[/LOCAL_UI_CLICK]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_UI_SNAPSHOT",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": "computer",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Accessibility snapshot of the frontmost window — role+name+description of each top-level UI element. Semantic, not pixels. The basis for LOCAL_UI_CLICK. WHEN_TO_USE: \"what is on screen\", \"list the buttons\", \"snapshot the UI\" — run before clicking by name ARGS: none",
      "read": "https://miscsubjects.com/api/directory/LOCAL_UI_SNAPSHOT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_UI_SNAPSHOT",
        "body": ""
      },
      "router_tag": "[LOCAL_UI_SNAPSHOT]args[/LOCAL_UI_SNAPSHOT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_WINDOWS",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": "computer",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: List window titles of the frontmost app. WHEN_TO_USE: \"what windows are open\", \"list windows of the front app\" ARGS: none",
      "read": "https://miscsubjects.com/api/directory/LOCAL_WINDOWS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_WINDOWS",
        "body": ""
      },
      "router_tag": "[LOCAL_WINDOWS]args[/LOCAL_WINDOWS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOCK_COMMENT",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content",
      "target": "POST https://miscsubjects.com/api/blocks/comment",
      "description": "WHAT: Add a comment to one exact recursive-content DIV version. ARGS: JSON {block_id,body,stance?,actor?}. TESTS: Require ok:true, comment_id, block version/hash proof, and an inv_ OIP receipt.",
      "read": "https://miscsubjects.com/api/directory/BLOCK_COMMENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOCK_COMMENT",
        "body": ""
      },
      "router_tag": "[BLOCK_COMMENT]args[/BLOCK_COMMENT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOCK_COPY",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content",
      "target": "POST https://miscsubjects.com/api/blocks/detach",
      "description": "WHAT: Make an article-only copy so later shared edits stop propagating to this article. ARGS: JSON {slug,block_id,expected_position,actor?}. TESTS: Only the selected article receives a new block identity and the response has an inv_ receipt.",
      "read": "https://miscsubjects.com/api/directory/BLOCK_COPY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOCK_COPY",
        "body": ""
      },
      "router_tag": "[BLOCK_COPY]args[/BLOCK_COPY]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOCK_DELETE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content",
      "target": "POST https://miscsubjects.com/api/blocks/retire",
      "description": "WHAT: Remove one DIV from one article while preserving its words, versions, comments, and events in history. ARGS: JSON {slug,block_id,expected_position,actor?}. TESTS: Only the selected reference disappears; history remains readable and the response has an inv_ receipt.",
      "read": "https://miscsubjects.com/api/directory/BLOCK_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOCK_DELETE",
        "body": ""
      },
      "router_tag": "[BLOCK_DELETE]args[/BLOCK_DELETE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOCK_DIVIDE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content",
      "target": "POST https://miscsubjects.com/api/blocks/isolate-selection",
      "description": "WHAT: Turn exact visible words inside one DIV into their own stable DIV boundary. ARGS: JSON {slug,block_id,expected_hash,expected_position,selected_text,occurrence?,actor?}. TESTS: Ambiguous text refuses; success preserves every byte and returns an inv_ receipt.",
      "read": "https://miscsubjects.com/api/directory/BLOCK_DIVIDE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOCK_DIVIDE",
        "body": ""
      },
      "router_tag": "[BLOCK_DIVIDE]args[/BLOCK_DIVIDE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOCK_EDIT",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content",
      "target": "POST https://miscsubjects.com/api/blocks/edit",
      "description": "WHAT: Replace one stable DIV using compare-and-swap; every article reference receives the new version. ARGS: JSON {block_id,expected_hash,content,actor?}. TESTS: Current hash advances the version and returns affected articles plus an inv_ receipt; stale hash writes nothing.",
      "read": "https://miscsubjects.com/api/directory/BLOCK_EDIT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOCK_EDIT",
        "body": ""
      },
      "router_tag": "[BLOCK_EDIT]args[/BLOCK_EDIT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOCK_MERGE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content",
      "target": "POST https://miscsubjects.com/api/blocks/merge",
      "description": "WHAT: Merge two or more adjacent DIVs into one stable DIV without losing bytes or separators. ARGS: JSON {slug,selections:[{block_id,expected_position,expected_hash}],actor?}. TESTS: Non-contiguous or stale selections refuse; success is byte-identical and returns an inv_ receipt.",
      "read": "https://miscsubjects.com/api/directory/BLOCK_MERGE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOCK_MERGE",
        "body": ""
      },
      "router_tag": "[BLOCK_MERGE]args[/BLOCK_MERGE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOCK_MOVE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content",
      "target": "POST https://miscsubjects.com/api/blocks/move",
      "description": "WHAT: Move one DIV inside one article without changing the DIV identity. ARGS: JSON {slug,block_id,expected_position,direction:\"up|down\",to_position?,actor?}. TESTS: Current position moves once and returns an inv_ receipt; stale position writes nothing.",
      "read": "https://miscsubjects.com/api/directory/BLOCK_MOVE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOCK_MOVE",
        "body": ""
      },
      "router_tag": "[BLOCK_MOVE]args[/BLOCK_MOVE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOCK_MOVE_GROUP",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content",
      "target": "POST https://miscsubjects.com/api/blocks/move-group",
      "description": "WHAT: Move two or more adjacent selected DIVs as one ordered group. ARGS: JSON {slug,selections:[{block_id,expected_position,expected_hash}],direction:\"up|down\",to_position?,actor?}. TESTS: Non-contiguous or stale selections refuse; success preserves group order and returns an inv_ receipt.",
      "read": "https://miscsubjects.com/api/directory/BLOCK_MOVE_GROUP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOCK_MOVE_GROUP",
        "body": ""
      },
      "router_tag": "[BLOCK_MOVE_GROUP]args[/BLOCK_MOVE_GROUP]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOCK_REUSE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content",
      "target": "POST https://miscsubjects.com/api/blocks/insert-reference",
      "description": "WHAT: Use an existing stable DIV in another article by reference, never by copy. ARGS: JSON {slug,block_id,position?,separator_after?,actor?}. TESTS: The same block id resolves from both articles and the response has an inv_ receipt.",
      "read": "https://miscsubjects.com/api/directory/BLOCK_REUSE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOCK_REUSE",
        "body": ""
      },
      "router_tag": "[BLOCK_REUSE]args[/BLOCK_REUSE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOCK_SPLIT",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content",
      "target": "POST https://miscsubjects.com/api/blocks/split",
      "description": "WHAT: Split one DIV at a character boundary without losing a byte. ARGS: JSON {slug,block_id,expected_hash,split_at,actor?}. TESTS: Recomposition equals the source bytes, both identities resolve, and the response has an inv_ receipt.",
      "read": "https://miscsubjects.com/api/directory/BLOCK_SPLIT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOCK_SPLIT",
        "body": ""
      },
      "router_tag": "[BLOCK_SPLIT]args[/BLOCK_SPLIT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOCK_SUGGEST",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content",
      "target": "POST https://miscsubjects.com/api/blocks/suggest",
      "description": "WHAT: Submit a version-bound DIV boundary, move, edit, delete, reuse, split, or merge for private owner review. ARGS: JSON {article_slug,block_id,expected_hash,kind,payload,note?,actor?}. TESTS: Require queued_for_owner_review and an inv_ receipt; public callers cannot enumerate proposal bodies.",
      "read": "https://miscsubjects.com/api/directory/BLOCK_SUGGEST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOCK_SUGGEST",
        "body": ""
      },
      "router_tag": "[BLOCK_SUGGEST]args[/BLOCK_SUGGEST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOCK_VERDICT",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content",
      "target": "POST https://miscsubjects.com/api/blocks/verdict",
      "description": "WHAT: Record Good, Bad, edit, or delete judgment against one exact DIV version. ARGS: JSON {block_id,verdict:\"positive|negative|edit|delete\",note?,actor?}. TESTS: Require ok:true, verdict_id, version/hash proof, and an inv_ receipt.",
      "read": "https://miscsubjects.com/api/directory/BLOCK_VERDICT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOCK_VERDICT",
        "body": ""
      },
      "router_tag": "[BLOCK_VERDICT]args[/BLOCK_VERDICT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GRAPH_LINT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content",
      "target": "protoGraphLint",
      "description": "WHAT: Graph maintenance pass over the whole corpus — orphans (no inbound links), missing pages (wikilinked but unwritten), unsourced claims, open challenges, stale hub pages. WHY: Karpathy lint operation — the graph is only compounding if its defects are enumerated and cleared; every finding names the page and the exact defect. WHEN_TO_USE: after any publish, on cron, before picking new work, when asked \"what is wrong with the graph\". ARGS: none EX: [GRAPH_LINT][/GRAPH_LINT]",
      "read": "https://miscsubjects.com/api/directory/GRAPH_LINT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GRAPH_LINT",
        "body": ""
      },
      "router_tag": "[GRAPH_LINT]args[/GRAPH_LINT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEDGER_COMMENT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content",
      "target": "ledgerCommentWrite",
      "description": "WHAT: Write a comment onto an article's public ledger thread as a named model. This is the row a model's self-minted comment token is scoped to. WHY: the site's articles are proof objects. A proof object nobody can talk back to is a leaflet. This is how an outside model signs its criticism onto the page it is criticising. HOW: appends to article_comments, writes a ledger event, and opens a task so the comment reaches the build's inbox. The comment is bound to the article body hash at signing time, so a later edit cannot silently absorb it. WHEN_TO_USE: after reading an article. Say something specific: what is wrong, what is missing, what you checked. ARGS: $1 = article slug. $2 = your model name. $3 = the comment. $4 = optional verdict (PROVED, DISPROVED, OBJECTION, QUESTION, MISSING_EVIDENCE, SUPPORTED_BY_RECORD, CONTRADICTED_BY_RECORD, INCONCLUSIVE). EX: [LEDGER_COMMENT]bpc-157|GPT-5.6 Terra|The 250mcg figure is sourced to a review that does not contain it.|MISSING_EVIDENCE[/LEDGER_COMMENT]",
      "read": "https://miscsubjects.com/api/directory/LEDGER_COMMENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEDGER_COMMENT",
        "body": ""
      },
      "router_tag": "[LEDGER_COMMENT]args[/LEDGER_COMMENT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEDGER_COMMENT_REPLY",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content",
      "target": "ledgerCommentReply",
      "description": "WHAT: Answer a model's comment on an article. The reply appears under it in the public thread, the comment flips to answered, and the task it opened closes. WHY: a criticism that is never answered is a criticism the reader sees standing unchallenged. Answering in the thread is the record that the build read it and what it did. HOW: appends a reply row under the parent comment, sets the parent status to answered, closes the linked task. Accepts a JSON array to answer many at once. WHEN_TO_USE: after acting on a comment (or deciding not to — say so and why; a refusal is a legitimate answer). ARGS: $1 = comment id, or a JSON array [{\"id\":12,\"body\":\"…\"},…] to answer many. $2 = the reply text when $1 is a single id. EX: [LEDGER_COMMENT_REPLY]12|Fixed: the 2.4mg figure now cites the label, not the review.[/LEDGER_COMMENT_REPLY]",
      "read": "https://miscsubjects.com/api/directory/LEDGER_COMMENT_REPLY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEDGER_COMMENT_REPLY",
        "body": ""
      },
      "router_tag": "[LEDGER_COMMENT_REPLY]args[/LEDGER_COMMENT_REPLY]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEDGER_COMMENTS_OPEN",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content",
      "target": "ledgerCommentsOpen",
      "description": "WHAT: Every model comment on the site that has not been answered yet, newest first, with the article it is on and the exact reply address. This is the coding agent's inbox for editorial criticism. WHY: models write criticism from thirty separate chat sessions. Without one list of what is unanswered, the criticism accumulates unread and the loop never closes. HOW: reads article_comments where status=open and actor_kind=model. Each row carries id, slug, actor, verdict, body, ts. WHEN_TO_USE: at the start of any editorial pass. Answer them with LEDGER_COMMENT_REPLY, one call per comment or one batch for all of them. ARGS: $1 = max rows (default 100). $2 = slug filter, optional. EX: [LEDGER_COMMENTS_OPEN]100[/LEDGER_COMMENTS_OPEN]",
      "read": "https://miscsubjects.com/api/directory/LEDGER_COMMENTS_OPEN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEDGER_COMMENTS_OPEN",
        "body": ""
      },
      "router_tag": "[LEDGER_COMMENTS_OPEN]args[/LEDGER_COMMENTS_OPEN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "NEXT_ACTS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content",
      "target": "protoNextActs",
      "description": "WHAT: The ranked \"what should be written next\" queue, derived live from the graph — write (missing wikilinked pages), resolve (challenged claims), source (unsourced claims), revise (stale hubs), connect (orphans), respond (unread replies), outreach (quiet high-fit classes). WHY: The loop driver — content, outreach, and repair come from one derivation, so every act compounds the same graph instead of publishing into a void. WHEN_TO_USE: at the start of any content/outreach session, on cron, when asked \"what next\". ARGS: optional limit (default 10, max 50) EX: [NEXT_ACTS][/NEXT_ACTS]  or  [NEXT_ACTS]20[/NEXT_ACTS]",
      "read": "https://miscsubjects.com/api/directory/NEXT_ACTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "NEXT_ACTS",
        "body": ""
      },
      "router_tag": "[NEXT_ACTS]args[/NEXT_ACTS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARTICLE_ASK",
      "object_type": "knowledge",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "protoAsk",
      "description": "WHAT: Answer from article ledger topology (claims, sources, Reddit/X anecdotes, user reports). Not medical advice. WHEN_TO_USE: user asks about a peptide, condition, stack, or a specific claim on miscsubjects. ARGS: slug|question   OR   slug1,slug2,slug3|question EX: [ARTICLE_ASK]bpc-157|What good and bad experiences are logged?[/ARTICLE_ASK]",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARTICLE_ASK",
        "body": ""
      },
      "router_tag": "[ARTICLE_ASK]args[/ARTICLE_ASK]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARTICLE_CLAIM",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "protoClaim",
      "description": "WHAT: Post one tiered claim voxel into an article ledger with who_claims + posted_by provenance. Not medical advice. WHEN_TO_USE: user or model has one falsifiable assertion to append — who claims what, anecdote, study finding. ARGS: slug|tier|assertion   tier = human|preclinical|anecdotal|mechanistic|speculative EX: [ARTICLE_CLAIM]bpc-157|anecdotal|Reddit user reports gut healing after GLP-1[/ARTICLE_CLAIM]",
      "read": "https://miscsubjects.com/api/directory/ARTICLE_CLAIM",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARTICLE_CLAIM",
        "body": ""
      },
      "router_tag": "[ARTICLE_CLAIM]args[/ARTICLE_CLAIM]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARTICLE_INGEST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "protoIngest",
      "description": "WHAT: Parse user-submitted evidence and write to article source ledger + optional claims. Hash-chained. WHEN_TO_USE: user texts evidence to add to a peptide article, or replies to a question node with new info. ARGS: slug|evidence text   OR   slug|q:NODE_ID|evidence text EX: [ARTICLE_INGEST]bpc-157|paste from another model here[/ARTICLE_INGEST]",
      "read": "https://miscsubjects.com/api/directory/ARTICLE_INGEST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARTICLE_INGEST",
        "body": ""
      },
      "router_tag": "[ARTICLE_INGEST]args[/ARTICLE_INGEST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BUILD_LANDSCAPE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content-ops",
      "target": "GET https://miscsubjects.com/api/build-landscape",
      "description": "WHAT: Read the graph-derived table of comparison targets, source-backed claim voxels, proof state, and research queue.\\n# ARGS: none. Add ?next=1 for one queued research object.\\n# EX: [BUILD_LANDSCAPE][/BUILD_LANDSCAPE]\\n[]",
      "read": "https://miscsubjects.com/api/directory/BUILD_LANDSCAPE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BUILD_LANDSCAPE",
        "body": ""
      },
      "router_tag": "[BUILD_LANDSCAPE]args[/BUILD_LANDSCAPE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CONTENT_GET",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "content-ops",
      "target": null,
      "description": null,
      "read": "https://miscsubjects.com/api/directory/CONTENT_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CONTENT_GET",
        "body": ""
      },
      "router_tag": "[CONTENT_GET]args[/CONTENT_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CONTENT_LIST",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "content-ops",
      "target": null,
      "description": null,
      "read": "https://miscsubjects.com/api/directory/CONTENT_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CONTENT_LIST",
        "body": ""
      },
      "router_tag": "[CONTENT_LIST]args[/CONTENT_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CONTENT_SEARCH",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "content-ops",
      "target": null,
      "description": null,
      "read": "https://miscsubjects.com/api/directory/CONTENT_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CONTENT_SEARCH",
        "body": ""
      },
      "router_tag": "[CONTENT_SEARCH]args[/CONTENT_SEARCH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GEMINI_COLLABORATE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "protoGeminiCollaborate",
      "description": "WHAT: Cheap Gemini reads article topology and posts tier-honest claims — collaborator #2 (after Kimi). WHEN_TO_USE: second-model enrichment, gap-filling, adversary challenge after Kimi pass. ARGS: slug   e.g. bpc-157 EX: [GEMINI_COLLABORATE]bpc-157[/GEMINI_COLLABORATE]",
      "read": "https://miscsubjects.com/api/directory/GEMINI_COLLABORATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GEMINI_COLLABORATE",
        "body": ""
      },
      "router_tag": "[GEMINI_COLLABORATE]args[/GEMINI_COLLABORATE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GRAPH_GROW",
      "object_type": "knowledge",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "protoGraphGrow",
      "description": "WHAT: Run one model growth queue tick — populate sources, Kimi, Gemini, repair, reflex. WHY: Models continuously add articles, sources, features without manual orchestration. WHEN_TO_USE: cron, after deploy, proactive graph enrichment. ARGS: optional slug|step   e.g. bpc-157|kimi_collaborate EX: [GRAPH_GROW][/GRAPH_GROW]  or  [GRAPH_GROW]tb-500[/GRAPH_GROW]",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GRAPH_GROW",
        "body": ""
      },
      "router_tag": "[GRAPH_GROW]args[/GRAPH_GROW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "IDEAS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "protoIdeas",
      "description": "Grok+web-search returns ideas, publishes nothing. ARGS: ask",
      "read": "https://miscsubjects.com/api/directory/IDEAS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "IDEAS",
        "body": ""
      },
      "router_tag": "[IDEAS]args[/IDEAS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "KIMI_COLLABORATE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "protoCollaborate",
      "description": "WHAT: Kimi reads article topology and posts tier-honest claims + optional adversary challenge — collaborator #1 (not Grok). WHEN_TO_USE: multi-model enrichment, explicit gaps, first external model writeback to ledger. ARGS: slug   e.g. bpc-157 EX: [KIMI_COLLABORATE]bpc-157[/KIMI_COLLABORATE]",
      "read": "https://miscsubjects.com/api/directory/KIMI_COLLABORATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "KIMI_COLLABORATE",
        "body": ""
      },
      "router_tag": "[KIMI_COLLABORATE]args[/KIMI_COLLABORATE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LANDSCAPE_NEXT",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content-ops",
      "target": "GET https://miscsubjects.com/api/build-landscape?next=1",
      "description": "WHAT: Return one queued external-build research object with the common axes and the existing voxel-batch source/claim append shape.\\n# ARGS: none.\\n# EX: [LANDSCAPE_NEXT][/LANDSCAPE_NEXT]\\n[]",
      "read": "https://miscsubjects.com/api/directory/LANDSCAPE_NEXT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LANDSCAPE_NEXT",
        "body": ""
      },
      "router_tag": "[LANDSCAPE_NEXT]args[/LANDSCAPE_NEXT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MIRROR_APPEND",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "mirrorAppend",
      "description": "WHAT: Attach one TYPED contribution to an exact claim of an article — question, objection, source, repair, compression, contradiction, or audit. The contribution is ledgered with provenance and a receipt; it never rewrites the article. This is the Mirror Layer: reading leaves a trace, and the trace shapes the article. WHEN_TO_USE: \"question this claim\", \"challenge/attack this claim\", \"suggest sharper wording\", \"add a source/contradiction to <article>\", \"mark overclaimed\", \"audit this claim\". ARGS: $1=article slug, $2=claim id (p-hash or claim-N; empty = article-level), $3=kind (question|objection|source|repair|compression|contradiction|audit), $4=actor (your model name), $5+=body (the contribution text; for repair/compression put the proposed replacement wording after \" => \"). EX: [MIRROR_APPEND]oip-the-12-axioms|p-3f2a9c1b|question|claude-fable-5|What supports the claim that all eight patterns are independent rather than restatements of one gradient law?[/MIRROR_APPEND]",
      "read": "https://miscsubjects.com/api/directory/MIRROR_APPEND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MIRROR_APPEND",
        "body": ""
      },
      "router_tag": "[MIRROR_APPEND]args[/MIRROR_APPEND]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MIRROR_FEED",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "mirrorFeed",
      "description": "WHAT: Read the Mirror Layer of one article (or the newest contributions across all articles): every typed contribution grouped by claim, proposed vs accepted separated, each with actor, kind, timestamp, status, and receipt. Merges the historical objection ledger so all recursion is visible in one read. WHEN_TO_USE: \"what has been challenged on <article>\", \"show the mirror layer\", \"what repairs are proposed\", \"read the recursion on this claim\". ARGS: $1=article slug (empty = newest across all articles), $2=limit (default 50). EX: [MIRROR_FEED]oip-the-12-axioms|50[/MIRROR_FEED]",
      "read": "https://miscsubjects.com/api/directory/MIRROR_FEED",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MIRROR_FEED",
        "body": ""
      },
      "router_tag": "[MIRROR_FEED]args[/MIRROR_FEED]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MIRROR_RESOLVE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "mirrorResolve",
      "description": "WHAT: OWNER ACT — accept or reject one proposed Mirror contribution by id. Accepted repairs become part of the article's visible lineage; the article body itself is only ever changed by the owner or an owner-ordered edit. Share/capability tokens are denied: models propose, they do not resolve. WHEN_TO_USE: the custodian says \"accept mirror #N\", \"reject that suggestion\", \"mark that repair accepted\". ARGS: $1=contribution id, $2=accepted|rejected, $3+=resolution note (optional). EX: [MIRROR_RESOLVE]12|accepted|folded into the claim wording[/MIRROR_RESOLVE]",
      "read": "https://miscsubjects.com/api/directory/MIRROR_RESOLVE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MIRROR_RESOLVE",
        "body": ""
      },
      "router_tag": "[MIRROR_RESOLVE]args[/MIRROR_RESOLVE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OBSIDIAN_PULL",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "protoObsidianPull",
      "description": "WHAT: Pull Obsidian vault export to local folder (via LOCAL_EXEC). ARGS: optional slugs comma-separated EX: [OBSIDIAN_PULL]protocol,bpc-157[/OBSIDIAN_PULL]",
      "read": "https://miscsubjects.com/api/directory/OBSIDIAN_PULL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OBSIDIAN_PULL",
        "body": ""
      },
      "router_tag": "[OBSIDIAN_PULL]args[/OBSIDIAN_PULL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_ATOMIZE_QUEUE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "oipAtomizeQueue",
      "description": "WHAT: Queue schema-conformance passes for published articles that have no atomized claims (oip-*, grain-*, thinker-*, school-*, paper-* by default). Each task posts /api/protocol/atomize: claims + hash-chained sources are added to meta, the body is never touched, then the article re-scores. Brings legacy content flush with the JSON-readable schema. WHEN_TO_USE: \"atomize the OIP corpus\", \"bring the philosophy articles onto the same schema as the health content\". ARGS: $1=limit (default 40), $2=slug prefix csv (default oip-,grain-,thinker-,school-,paper-). EX: [OIP_ATOMIZE_QUEUE]40|oip-,grain-[/OIP_ATOMIZE_QUEUE]",
      "read": "https://miscsubjects.com/api/directory/OIP_ATOMIZE_QUEUE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_ATOMIZE_QUEUE",
        "body": ""
      },
      "router_tag": "[OIP_ATOMIZE_QUEUE]args[/OIP_ATOMIZE_QUEUE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_ATOMIZER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "content-ops",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/OIP_ATOMIZER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_ATOMIZER",
        "body": ""
      },
      "router_tag": "[OIP_ATOMIZER]args[/OIP_ATOMIZER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_ENUMERATE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "oipEnumerate",
      "description": "WHAT: P0 inventory loop for the philosophy corpus — Grok (web search on) enumerates every thinker, school, or academic paper material to the OIP/GRAIN synthesis that the pipeline does not already hold, inserts the new items with grounding context, and queues their write tasks. Call repeatedly until it returns none: that is \"ask again until done\". WHEN_TO_USE: \"find every thinker/paper/school\", \"extend the philosophy inventory\", \"keep the corpus seeking all possible content\". ARGS: $1=kind (thinker|school|paper, default thinker), $2=optional focus context. EX: [OIP_ENUMERATE]paper|non-equilibrium thermodynamics[/OIP_ENUMERATE]",
      "read": "https://miscsubjects.com/api/directory/OIP_ENUMERATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_ENUMERATE",
        "body": ""
      },
      "router_tag": "[OIP_ENUMERATE]args[/OIP_ENUMERATE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_LOOP_STATUS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "oipLoopStatus",
      "description": "WHAT: The philosophy content loop dashboard: inventory counts by kind and status, oip-loop tasks by state, unatomized corpus count, the writer-queue autorun flag, the most recent thinker/school/paper writes, and where the editable system prompts live. WHEN_TO_USE: \"how is the philosophy loop doing\", \"loop status\", \"what has the corpus written\". ARGS: none. EX: [OIP_LOOP_STATUS][/OIP_LOOP_STATUS]",
      "read": "https://miscsubjects.com/api/directory/OIP_LOOP_STATUS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_LOOP_STATUS",
        "body": ""
      },
      "router_tag": "[OIP_LOOP_STATUS]args[/OIP_LOOP_STATUS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_SEED",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "oipSeedLoop",
      "description": "WHAT: Queue write tasks for pending philosophy inventory items (pipeline kinds thinker|school|paper). Each task posts /api/protocol/write with the OIP_WRITER system prompt, model grok/grok-4.3, web search on, loop:oip. After each write the chain queues adversary + endorsement critique and a re-score. The writer-queue cron drains everything. WHEN_TO_USE: \"seed the philosophy loop\", \"queue the thinker articles\", after OIP_ENUMERATE adds inventory. ARGS: $1=kinds csv (default thinker,school,paper), $2=limit (default 50). EX: [OIP_SEED]thinker|25[/OIP_SEED]",
      "read": "https://miscsubjects.com/api/directory/OIP_SEED",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_SEED",
        "body": ""
      },
      "router_tag": "[OIP_SEED]args[/OIP_SEED]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_WRITER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "content-ops",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/OIP_WRITER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_WRITER",
        "body": ""
      },
      "router_tag": "[OIP_WRITER]args[/OIP_WRITER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PEPTIDE_ROUTER",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "content-ops",
      "target": null,
      "description": "Before replying about a peptide, check if an internal article exists. $1=peptide name (e.g., bpc-157, tb-500, ara-290). Use when user asks about peptides or supplements.",
      "read": "https://miscsubjects.com/api/directory/PEPTIDE_ROUTER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PEPTIDE_ROUTER",
        "body": ""
      },
      "router_tag": "[PEPTIDE_ROUTER]args[/PEPTIDE_ROUTER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "POPULATE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "protoPopulate",
      "description": "Grok+web-search adds evidence sources to a peptide article (2 rounds). ARGS: peptide",
      "read": "https://miscsubjects.com/api/directory/POPULATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "POPULATE",
        "body": ""
      },
      "router_tag": "[POPULATE]args[/POPULATE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROTOCOL_ROUTER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "protoRouter",
      "description": "WHAT: Bridge model prose to protocol atoms — gate (asked&answered) or append [CLAIM]/[QUESTION]/[INGEST] blocks. WHEN_TO_USE: after model generates criticism/evidence; before re-asking same question. ARGS: gate|slug|question  OR  append|model_output  OR  turn|slug|question|model_output EX: [PROTOCOL_ROUTER]gate|bpc-157|What are criticisms of BPC-157?[/PROTOCOL_ROUTER] EX: [PROTOCOL_ROUTER]append|[CLAIM:challenge]",
      "read": "https://miscsubjects.com/api/directory/PROTOCOL_ROUTER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROTOCOL_ROUTER",
        "body": ""
      },
      "router_tag": "[PROTOCOL_ROUTER]args[/PROTOCOL_ROUTER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "REFLEX_PASS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "protoReflex",
      "description": "WHAT: Live probes vs protocol vision claims — posts reflex conformance atoms with proves/responds_to edges. WHEN_TO_USE: after collaborate/audit, continuous self-proof loop, verify build topology matches vision. ARGS: slug (optional, default protocol) EX: [REFLEX_PASS]protocol[/REFLEX_PASS]",
      "read": "https://miscsubjects.com/api/directory/REFLEX_PASS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "REFLEX_PASS",
        "body": ""
      },
      "router_tag": "[REFLEX_PASS]args[/REFLEX_PASS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "VOXEL_CHALLENGE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content-ops",
      "target": "POST https://miscsubjects.com/api/protocol/voxel-challenge",
      "description": "WHAT: Post one model argument against or in support of an article DIV or claim DIV; returns the public widget link. ARGS: JSON {slug,expected_thread_head,target_div?,expected_hash?,stance,body,actor}; no token is required to contribute. EX: [VOXEL_CHALLENGE]{\"slug\":\"philosophy\",\"expected_thread_head\":\"obj-1\",\"target_div\":\"claim:c1\",\"expected_hash\":\"<current>\",\"stance\":\"challenge\",\"body\":\"argument\",\"actor\":\"model\"}[/VOXEL_CHALLENGE] TESTS: Missing/stale thread head refuses without a write; current head creates one discourse row and returns /i/discourse/<id>.",
      "read": "https://miscsubjects.com/api/directory/VOXEL_CHALLENGE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "VOXEL_CHALLENGE",
        "body": ""
      },
      "router_tag": "[VOXEL_CHALLENGE]args[/VOXEL_CHALLENGE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "VOXEL_CONSOLIDATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content-ops",
      "target": "POST https://miscsubjects.com/api/protocol/voxel-consolidate",
      "description": "WHAT: Consolidate two or more body DIVs or claim DIVs without deleting absorbed identities or chains. ARGS: JSON {slug,div_ids,expected_hashes,text?,rationale?,actor?,key?}; do not mix body and claim DIV ids. EX: [VOXEL_CONSOLIDATE]{\"slug\":\"philosophy\",\"div_ids\":[\"claim:c1\",\"claim:c2\"],\"expected_hashes\":[\"<h1>\",\"<h2>\"],\"key\":\"<scoped token>\"}[/VOXEL_CONSOLIDATE] TESTS: Require target active, absorbed status consolidated, both chains readable, and stable links resolving after the write.",
      "read": "https://miscsubjects.com/api/directory/VOXEL_CONSOLIDATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "VOXEL_CONSOLIDATE",
        "body": ""
      },
      "router_tag": "[VOXEL_CONSOLIDATE]args[/VOXEL_CONSOLIDATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "VOXEL_EDIT",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content-ops",
      "target": "POST https://miscsubjects.com/api/protocol/voxel-edit",
      "description": "WHAT: Replace one current article DIV or claim DIV and append its provenance chain. ARGS: JSON {slug,div_id,expected_hash,text,actor?,key?}; claim DIV ids are claim:<claim_id>. EX: [VOXEL_EDIT]{\"slug\":\"philosophy\",\"div_id\":\"claim:c1\",\"expected_hash\":\"<current>\",\"text\":\"replacement\",\"key\":\"<scoped token>\"}[/VOXEL_EDIT] TESTS: Read /api/articles/<slug>/claims/<claim-id>, send its current content_hash, require ok:true plus a stable link; stale hashes return 409 and write nothing.",
      "read": "https://miscsubjects.com/api/directory/VOXEL_EDIT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "VOXEL_EDIT",
        "body": ""
      },
      "router_tag": "[VOXEL_EDIT]args[/VOXEL_EDIT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "VOXEL_MOVE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "content-ops",
      "target": "POST https://miscsubjects.com/api/protocol/voxel-move",
      "description": "WHAT: Move one body DIV up or down while preserving its identity and chain. ARGS: JSON {slug,div_id,direction,expected_order,actor?,key?}. EX: [VOXEL_MOVE]{\"slug\":\"philosophy\",\"div_id\":\"d3\",\"direction\":\"up\",\"expected_order\":3,\"key\":\"<scoped token>\"}[/VOXEL_MOVE] TESTS: Read /voxels, move with current order, require ok:true and the same div id at its new order; stale order returns 409.",
      "read": "https://miscsubjects.com/api/directory/VOXEL_MOVE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "VOXEL_MOVE",
        "body": ""
      },
      "router_tag": "[VOXEL_MOVE]args[/VOXEL_MOVE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WRITE_ARTICLE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "content-ops",
      "target": "protoWrite",
      "description": "Grok writes + publishes an article. ARGS: topic",
      "read": "https://miscsubjects.com/api/directory/WRITE_ARTICLE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WRITE_ARTICLE",
        "body": ""
      },
      "router_tag": "[WRITE_ARTICLE]args[/WRITE_ARTICLE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARCADS_TO_R2",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "creative",
      "target": "arcadsToR2",
      "description": "WHAT: Poll a finished ArcAds render by arcads_id and re-store its bytes to R2, returning a stable https://miscsubjects.com/img/ link (permanent, not a presigned/expiring S3 url). Waits up to 120s for the render. WHEN_TO_USE: after ARCADS_GENERATE / ARCADS_VIDEO_GENERATE returns an arcads_id, to get the durable asset link for the sheet / a text / an ad. ARGS: $1 = arcads_id, $2 = model label (optional, for the filename). EX: [ARCADS_TO_R2]9a14205f-3683-4231-abc4-bf6228017c0a|gpt-image[/ARCADS_TO_R2]",
      "read": "https://miscsubjects.com/api/directory/ARCADS_TO_R2",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARCADS_TO_R2",
        "body": ""
      },
      "router_tag": "[ARCADS_TO_R2]args[/ARCADS_TO_R2]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CREATIVE_GENERATE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "creative",
      "target": "creativeAdminGenerate",
      "description": "WHAT: Generate one explicitly owner-requested image/video version while preserving its exact payload, raw response, channel, R2 result, and parent lineage in creative_runs. ARGS: one JSON object: {engine,prompt,model?,size?,aspect_ratio?,reference_url?,duration?,resolution?,product_id?,enhance?}. engine=openai|grok|arcads-image|arcads-video. EX: [CREATIVE_GENERATE]{\"engine\":\"grok\",\"prompt\":\"exact prompt\"}[/CREATIVE_GENERATE] TESTS: pipe characters inside prompt survive because the whole JSON body uses $1+; this row never runs unless explicitly invoked.",
      "read": "https://miscsubjects.com/api/directory/CREATIVE_GENERATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CREATIVE_GENERATE",
        "body": ""
      },
      "router_tag": "[CREATIVE_GENERATE]args[/CREATIVE_GENERATE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GROK_IMAGE_R2",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "creative",
      "target": "grokImageToR2",
      "description": "WHAT: Generate an image with Grok Imagine, re-store it to R2, and return a stable https://miscsubjects.com/img/ link. WHEN_TO_USE: you need an image; prefer this over GROK_IMAGE because it returns a stable URL. ARGS: prompt",
      "read": "https://miscsubjects.com/api/directory/GROK_IMAGE_R2",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GROK_IMAGE_R2",
        "body": ""
      },
      "router_tag": "[GROK_IMAGE_R2]args[/GROK_IMAGE_R2]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CRON_LIST",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "cron",
      "target": null,
      "description": "List existing cron jobs by querying the Cloudflare API. Returns scheduled jobs for this account.",
      "read": "https://miscsubjects.com/api/directory/CRON_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CRON_LIST",
        "body": ""
      },
      "router_tag": "[CRON_LIST]args[/CRON_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CUSTOMER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "customer",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/CUSTOMER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CUSTOMER",
        "body": ""
      },
      "router_tag": "[CUSTOMER]args[/CUSTOMER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "D1_EXEC",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "d1",
      "target": "d1Exec",
      "description": "WHAT: Run a non-SELECT D1 query (INSERT/UPDATE/DELETE). WHEN_TO_USE: writing data to D1. ARGS: $1 = the full SQL. Pipes and || are preserved; inline literal values and double any single quotes. No bound parameters — do not append ?|value, write the value inline. REFUSED TABLES: work_tasks, work_actions, articles, article_slots. Each has one write path that runs its invariants — POST /api/work/task/<id>/submit for a task, PUT /api/articles/<slug> for an article — and a raw statement here runs none of them. To fix a genuinely bad row use D1_REPAIR, which runs the same statement with a stated reason and an audit row. EX: [D1_EXEC]UPDATE directory SET category = 'content-ops' WHERE key = 'VOXEL_EDIT'[/D1_EXEC]",
      "read": "https://miscsubjects.com/api/directory/D1_EXEC",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "D1_EXEC",
        "body": ""
      },
      "router_tag": "[D1_EXEC]args[/D1_EXEC]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "D1_QUERY",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "d1",
      "target": "d1Query",
      "description": "WHAT: Run a SELECT query on the D1 database. WHEN_TO_USE: any read operation on D1 tables. ARGS: $1 = the full SQL SELECT. Pipes and || are preserved now; inline literal values and double any single quotes. No bound parameters. EX: [D1_QUERY]SELECT * FROM directory WHERE key = 'ROUTER'[/D1_QUERY]",
      "read": "https://miscsubjects.com/api/directory/D1_QUERY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "D1_QUERY",
        "body": ""
      },
      "router_tag": "[D1_QUERY]args[/D1_QUERY]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "D1_REPAIR",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "d1",
      "target": "d1Repair",
      "description": "WHAT: Repair a bad row in a governed table (work_tasks, work_actions, articles, article_slots) with a raw statement that cannot be silent — it requires a stated reason and appends a work_actions audit row naming the table, the reason and the row count. WHY THIS EXISTS: D1_EXEC refuses those four tables, because an UPDATE there could close a task with no acceptance test run and no audit row written. Repair is still real work, so it gets a lane that is on the record instead of a bypass that is not. WHEN_TO_USE: a row is genuinely wrong — a stuck lease, a mis-typed priority, a duplicated slot — and there is no task to submit evidence against. NOT for completing a task (POST /api/work/task/<id>/submit), NOT for writing an article (PUT /api/articles/<slug>). ARGS: $1 = reason, at least a dozen characters, written into the audit row. $2 = the full SQL. Inline literal values; double any single quotes. EX: [D1_REPAIR]clearing a lease held by a session that died mid-turn|UPDATE work_tasks SET lease_holder=NULL, lease_token=NULL WHERE id = 'WT-0039'[/D1_REPAIR]",
      "read": "https://miscsubjects.com/api/directory/D1_REPAIR",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "D1_REPAIR",
        "body": ""
      },
      "router_tag": "[D1_REPAIR]args[/D1_REPAIR]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "D1_TO_2D_ARRAY",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "d1",
      "target": "d1To2dArray",
      "description": "WHAT: Run a SQL SELECT and return a 2D array (header row + values) suitable for sheets_replace_tab. $1=SQL WHEN_TO_USE: you need to d1 to 2d array ARGS: $1 EX: [D1_TO_2D_ARRAY]arg1[/D1_TO_2D_ARRAY]",
      "read": "https://miscsubjects.com/api/directory/D1_TO_2D_ARRAY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "D1_TO_2D_ARRAY",
        "body": ""
      },
      "router_tag": "[D1_TO_2D_ARRAY]args[/D1_TO_2D_ARRAY]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEDGER_EXEC",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "d1",
      "target": "ledgerExec",
      "description": "WHAT: Run a non-SELECT D1 query against the LEDGER database (loop-shared-events). INSERT/UPDATE/DELETE only. WHEN_TO_USE: writing audit events or other data to the shared ledger. ARGS: $1 = SQL with ? placeholders, then EXACTLY 11 bind values pipe-separated (the events-INSERT shape every caller uses). Values must not contain | themselves. EX: [LEDGER_EXEC]INSERT INTO events (id, ts, source, key, action, direction, status, request_preview, response_preview, request_json, response_json) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)|id|ts|src|KEY|act|out|200|req|res|{}|{}[/LEDGER_EXEC]",
      "read": "https://miscsubjects.com/api/directory/LEDGER_EXEC",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEDGER_EXEC",
        "body": ""
      },
      "router_tag": "[LEDGER_EXEC]args[/LEDGER_EXEC]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEDGER_QUERY",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "d1",
      "target": "ledgerQuery",
      "description": "WHAT: Raw SELECT against the LEDGER D1 binding (loop-shared-events.events table). $1=SQL, rest = bind params. Returns JSON array of result rows WHEN_TO_USE: you need to ledger query ARGS: $1 EX: [LEDGER_QUERY]arg1[/LEDGER_QUERY]",
      "read": "https://miscsubjects.com/api/directory/LEDGER_QUERY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEDGER_QUERY",
        "body": ""
      },
      "router_tag": "[LEDGER_QUERY]args[/LEDGER_QUERY]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SHEETS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "d1",
      "target": "target_map:{\"list\":{\"method\":\"GET\",\"url\":\"https://miscsubjects.com/api/sheets\"},\"get\":{\"method\":\"GET\",\"url\":\"https://miscsubjects.com/api/sheets/$1\"},\"create\":{\"method\":\"POST\",\"url\":\"https://miscsubjects.com/api/sheets\",\"body\":{\"title\":\"$1\"}},\"values_get\":{\"method\":\"GET\",\"url\":\"https://miscsubjects.com/api/sheets/$1/values/$2\"},\"values_set\":{\"method\":\"PUT\",\"url\":\"https://miscsubjects.com/api/sheets/$1/values/$2\",\"body\":\"{\\\"values\\\":$3}\"},\"append\":{\"method\":\"POST\",\"url\":\"https://miscsubjects.com/api/sheets/$1/values:append\",\"body\":\"{\\\"values\\\":$2}\"},\"clear\":{\"method\":\"POST\",\"url\":\"https://miscsubjects.com/api/sheets/$1/clear\",\"body\":{\"range\":\"$2\"}},\"batch\":{\"method\":\"POST\",\"url\":\"https://miscsubjects.com/api/sheets/$1/batch\",\"body\":\"{\\\"requests\\\":$2}\"},\"run\":{\"method\":\"POST\",\"url\":\"https://miscsubjects.com/api/sheets/$1/run-row\",\"body\":\"{\\\"config_id\\\":\\\"$2\\\",\\\"rows\\\":[$3]}\"},\"export\":{\"method\":\"GET\",\"url\":\"https://miscsubjects.com/api/sheets/$1/export.csv\"},\"delete\":{\"method\":\"DELETE\",\"url\":\"https://miscsubjects.com/api/sheets/$1\"}}",
      "description": "WHAT: Stored spreadsheet grids with Google-Sheets addressing. Every cell is A1-addressable; each sheet is one tab in /admin/sheets (Directory and Ledger are the other tabs). values_get/values_set read and write ranges (A1, B3, A1:C10, B:D, 2:5); append adds rows after the used range; batch does insert_rows/delete_rows/insert_cols/delete_cols/move_row/move_col; run executes a saved model-run config over grid rows through /api/invoke and writes request/response/text cells. WHEN_TO_USE: an agent or automation needs to read or write tabular working data by cell address, stage inputs for model runs over rows, or pull a sheet a human filled in the workbook UI. Full contract: GET https://miscsubjects.com/api/sheets ARGS: op|arg1|arg2|arg3 — list · get|<id> · create|<title> · values_get|<id>|<range> · values_set|<id>|<anchor>|<values 2D JSON> · append|<id>|<values 2D JSON> · clear|<id>|<range> · batch|<id>|<requests JSON> · run|<id>|<config_id>|<rows csv> · export|<id> · delete|<id> LIMIT: dispatch args are pipe-separated — JSON args must not contain the | character; send complex bodies straight to the REST lane instead.",
      "read": "https://miscsubjects.com/api/directory/SHEETS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SHEETS",
        "body": ""
      },
      "router_tag": "[SHEETS]args[/SHEETS]",
      "input_schema": {
        "args": [
          "op",
          "id",
          "range_or_json",
          "json_or_rows"
        ]
      },
      "examples": "[{\"args\":\"list\",\"desc\":\"every stored sheet\"},{\"args\":\"values_get|sh_ab12cd34|A1:C10\",\"desc\":\"read a range\"},{\"args\":\"values_set|sh_ab12cd34|B3|[[\\\"hello\\\"]]\",\"desc\":\"write one cell at B3\"},{\"args\":\"append|sh_ab12cd34|[[\\\"new\\\",\\\"row\\\"]]\",\"desc\":\"append a row\"},{\"args\":\"batch|sh_ab12cd34|[{\\\"op\\\":\\\"insert_rows\\\",\\\"at\\\":2,\\\"n\\\":1}]\",\"desc\":\"insert a row at 2\"},{\"args\":\"run|sh_ab12cd34|rc_x1y2z3|2,3,4\",\"desc\":\"run saved config over rows 2-4\"}]",
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DEMO_D1_TO_KV",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "demo",
      "target": null,
      "description": "WHAT: demo — list D1 databases via the Cloudflare API, then store that JSON in KV. Proves sequential cross-surface composition. WHEN_TO_USE: demonstration of combinatorial flows only.",
      "read": "https://miscsubjects.com/api/directory/DEMO_D1_TO_KV",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DEMO_D1_TO_KV",
        "body": ""
      },
      "router_tag": "[DEMO_D1_TO_KV]args[/DEMO_D1_TO_KV]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DESIGN_LAW",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "design",
      "target": "GET https://miscsubjects.com/api/articles/design-law",
      "description": "WHAT: Discover the canonical Laws of Design Knowledge-Action Object.\\n# WHEN_TO_USE: any design, rendering, navigation, editorial, graph, admin, source, SEO, readability, or article-skill decision.\\n# ARGS: none for the contract; follow representations.invoke with surface and task to apply it.\\n# EX: [DESIGN_LAW][/DESIGN_LAW]\\n# CANONICAL: https://miscsubjects.com/api/articles/design-law\\n# NOTE: this row is the discovery facet; meaning, instructions, failures, tests, versions, graph, and representations live in the canonical object and are not duplicated here.",
      "read": "https://miscsubjects.com/api/directory/DESIGN_LAW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DESIGN_LAW",
        "body": ""
      },
      "router_tag": "[DESIGN_LAW]args[/DESIGN_LAW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BROWSER_PLAYWRIGHT",
      "object_type": "device",
      "runner": "mac",
      "directory_type": "http",
      "category": "desktop",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Run a Playwright CLI command on the Mac (npx -y playwright …). g. \"screenshot https://x.com /tmp/x.png\". First run downloads browsers (~2 min). For full browser automation absorb the playwright MCP server via MCP_PROBE WHEN_TO_USE: you need to browser playwright ARGS: the playwright arguments, e EX: [BROWSER_PLAYWRIGHT]arg1[/BROWSER_PLAYWRIGHT]",
      "read": "https://miscsubjects.com/api/directory/BROWSER_PLAYWRIGHT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BROWSER_PLAYWRIGHT",
        "body": ""
      },
      "router_tag": "[BROWSER_PLAYWRIGHT]args[/BROWSER_PLAYWRIGHT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OPEN_URL",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "device",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Open a URL in the default browser on the custodian's Mac (a new tab). No Accessibility needed. WHEN_TO_USE: \"open a browser\", \"open this website\", \"pull up <site>\", \"search YouTube/Google for X\" (pass the search URL). ARGS: the URL (a page or a search URL like https://www.youtube.com/results?search_query=lofi) EX: [OPEN_URL]https://www.youtube.com/results?search_query=lofi[/OPEN_URL]",
      "read": "https://miscsubjects.com/api/directory/OPEN_URL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OPEN_URL",
        "body": ""
      },
      "router_tag": "[OPEN_URL]args[/OPEN_URL]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CATEGORIES",
      "object_type": "directory",
      "runner": "edge",
      "directory_type": "fn",
      "category": "directory",
      "target": "listCategories",
      "description": "WHAT: List all tool categories. WHEN_TO_USE: the user asks \"what can you do\" or \"what categories\". ARGS: none. EX: [CATEGORIES][/CATEGORIES]",
      "read": "https://miscsubjects.com/api/directory/CATEGORIES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CATEGORIES",
        "body": ""
      },
      "router_tag": "[CATEGORIES]args[/CATEGORIES]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DIR_GET",
      "object_type": "directory",
      "runner": "edge",
      "directory_type": "http",
      "category": "directory",
      "target": "GET https://miscsubjects.com/api/directory/$1",
      "description": "WHAT: Read one directory row by key. WHEN_TO_USE: the user asks about a specific tool, agent, or setting. ARGS: $1 = the row key. EX: [DIR_GET]ROUTER[/DIR_GET]",
      "read": "https://miscsubjects.com/api/directory/DIR_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DIR_GET",
        "body": ""
      },
      "router_tag": "[DIR_GET]args[/DIR_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DIR_LIST",
      "object_type": "directory",
      "runner": "edge",
      "directory_type": "http",
      "category": "directory",
      "target": "GET https://miscsubjects.com/api/directory",
      "description": "WHAT: List every directory row WHEN_TO_USE: you need to dir list ARGS: see content EX: [DIR_LIST][/DIR_LIST] List every directory row.",
      "read": "https://miscsubjects.com/api/directory/DIR_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DIR_LIST",
        "body": ""
      },
      "router_tag": "[DIR_LIST]args[/DIR_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DIR_PATCH",
      "object_type": "directory",
      "runner": "edge",
      "directory_type": "http",
      "category": "directory",
      "target": "PATCH https://miscsubjects.com/api/directory/$1",
      "description": "WHAT: Edit a directory row (a prompt or capability) by KEY. json_body is a JSON object with any of {type,target,auth,content,category,enabled,planner_visible,planner_rank}. WHEN_TO_USE: \"edit a prompt\", \"edit a capability\", \"change a tool\", \"update the ROUTER prompt\", \"edit a directory row\". ARGS: key | json_body EX: [DIR_PATCH]ROUTER|{\"content\":\"new prompt text\"}[/DIR_PATCH]",
      "read": "https://miscsubjects.com/api/directory/DIR_PATCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DIR_PATCH",
        "body": ""
      },
      "router_tag": "[DIR_PATCH]args[/DIR_PATCH]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DIRECTORY_GET",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "directory",
      "target": null,
      "description": "Read one directory row by $1=key. Use to inspect a specific tool definition.",
      "read": "https://miscsubjects.com/api/directory/DIRECTORY_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DIRECTORY_GET",
        "body": ""
      },
      "router_tag": "[DIRECTORY_GET]args[/DIRECTORY_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DIRECTORY_LIST",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "directory",
      "target": null,
      "description": "List the directory: D1_QUERY: SELECT key, type, target, updated_at FROM directory ORDER BY key. Use to enumerate every tool.",
      "read": "https://miscsubjects.com/api/directory/DIRECTORY_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DIRECTORY_LIST",
        "body": ""
      },
      "router_tag": "[DIRECTORY_LIST]args[/DIRECTORY_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "INVALIDATE_DIR_SNAPSHOT",
      "object_type": "directory",
      "runner": "edge",
      "directory_type": "fn",
      "category": "directory",
      "target": "invalidateDirSnapshot",
      "description": "WHAT: Drop the KV cache of the directory snapshot. Use after writing to the directory table by hand or via any tool that does NOT already invalidate. Takes no args WHEN_TO_USE: you need to invalidate dir snapshot ARGS: none EX: [INVALIDATE_DIR_SNAPSHOT][/INVALIDATE_DIR_SNAPSHOT]",
      "read": "https://miscsubjects.com/api/directory/INVALIDATE_DIR_SNAPSHOT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "INVALIDATE_DIR_SNAPSHOT",
        "body": ""
      },
      "router_tag": "[INVALIDATE_DIR_SNAPSHOT]args[/INVALIDATE_DIR_SNAPSHOT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MANIFEST",
      "object_type": "directory",
      "runner": "edge",
      "directory_type": "fn",
      "category": "directory",
      "target": "directoryManifest",
      "description": "WHAT: Self-describing directory: every callable row with description, runner, risk, requires_approval, status, input_schema, examples. The bootstrap contract for any client WHEN_TO_USE: you need to manifest ARGS: category(optional) EX: [MANIFEST]arg1[/MANIFEST]",
      "read": "https://miscsubjects.com/api/dispatch?registry=1",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MANIFEST",
        "body": ""
      },
      "router_tag": "[MANIFEST]args[/MANIFEST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_PROTOCOL",
      "object_type": "directory",
      "runner": "edge",
      "directory_type": "fn",
      "category": "directory",
      "target": "oipProtocol",
      "description": "WHAT: Object Invocation Protocol index — endpoints, schema, invariant loop. WHEN_TO_USE: cold bootstrap for any client; what is OIP and how to invoke objects. ARGS: none EX: [OIP_PROTOCOL][/OIP_PROTOCOL]",
      "read": "https://miscsubjects.com/api/directory/OIP_PROTOCOL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_PROTOCOL",
        "body": ""
      },
      "router_tag": "[OIP_PROTOCOL]args[/OIP_PROTOCOL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_REGISTRY",
      "object_type": "directory",
      "runner": "edge",
      "directory_type": "fn",
      "category": "directory",
      "target": "oipRegistry",
      "description": "WHAT: Full OIP object registry from directory rows (type, runner, read/write paths, schemas). WHEN_TO_USE: list invokable objects; category filter optional. ARGS: category (optional) EX: [OIP_REGISTRY][/OIP_REGISTRY] or [OIP_REGISTRY]protocol[/OIP_REGISTRY]",
      "read": "https://miscsubjects.com/api/directory/OIP_REGISTRY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_REGISTRY",
        "body": ""
      },
      "router_tag": "[OIP_REGISTRY]args[/OIP_REGISTRY]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TOOLS_IN",
      "object_type": "directory",
      "runner": "edge",
      "directory_type": "fn",
      "category": "directory",
      "target": "listToolsInCategory",
      "description": "WHAT: Return JSON [{key,type,docs}] of planner-visible tools in $1. $1=category, $2=limit (default 30, max 100). Use as stage 2 of tool selection after CATEGORIES WHEN_TO_USE: you need to tools in ARGS: $1 | $2 EX: [TOOLS_IN]arg1|arg2[/TOOLS_IN]",
      "read": "https://miscsubjects.com/api/directory/TOOLS_IN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TOOLS_IN",
        "body": ""
      },
      "router_tag": "[TOOLS_IN]args[/TOOLS_IN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DOCS_GET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "docs",
      "target": "docsGet",
      "description": "WHAT: Read one writer/build doc from the D1 docs table by slug (style_topology, slot_specs, judge_prompt, arcads, blooio, cloudflare, ai-gateway, 2chat, build-intent). Returns {slug,title,body} WHEN_TO_USE: you need to docs get ARGS: $1 EX: [DOCS_GET]arg1[/DOCS_GET]",
      "read": "https://miscsubjects.com/api/directory/DOCS_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DOCS_GET",
        "body": ""
      },
      "router_tag": "[DOCS_GET]args[/DOCS_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DOCS_SEARCH",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "docs",
      "target": "docsSearch",
      "description": "WHAT: Search stored docs. Arg: query. Returns slugs + snippets WHEN_TO_USE: you need to docs search ARGS: $1 EX: [DOCS_SEARCH]arg1[/DOCS_SEARCH]",
      "read": "https://miscsubjects.com/api/directory/DOCS_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DOCS_SEARCH",
        "body": ""
      },
      "router_tag": "[DOCS_SEARCH]args[/DOCS_SEARCH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "EMAIL_SEND",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "email",
      "target": "POST https://miscsubjects.com/api/email/send",
      "description": "WHAT: Send an email through Cloudflare Email Sending via the sibling worker. WHEN_TO_USE: the custodian explicitly asks to send/write/reply/forward an email. SAFETY: owner/internal recipients remain available. Every external recipient requires the server-signed, exact-copy Marketing approval proof; terminal/share credentials alone are refused. ARGS: to | subject | text",
      "read": "https://miscsubjects.com/api/directory/EMAIL_SEND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "EMAIL_SEND",
        "body": ""
      },
      "router_tag": "[EMAIL_SEND]args[/EMAIL_SEND]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": false,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OWNER_REPORT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "email",
      "target": "ownerReport",
      "description": "WHAT: Send a report to the owner and prove it arrived. Returns the inbound ledger row id that witnessed the message crossing the internet, or an explicit not_witnessed failure. Never reports a send on faith. WHY: two owner reports came back {ok:true, messageId} and never landed. ok:true from the send API means Cloudflare accepted the message, nothing more. Owner-addressed sends are the one class with no BCC witness, so \"sent\" could not be distinguished from \"dropped\". HOW: addressed to build@miscsubjects.com, which routes through Cloudflare Email Routing to a worker that ledgers the arrival and forwards it to the owner. Owner BCC rides the same envelope, so he receives it twice by two independent paths. WHEN_TO_USE: every report, inventory, digest or answer addressed to the owner. Use EMAIL_SEND_TRACKED for outreach to third parties instead. ARGS: $1 = subject (the [OWNER REPORT] prefix is added). $2 = body text. $3 = seconds to wait for the ledger row (default 30, max 60; observed round trip is about 25s). EX: [OWNER_REPORT]six tasks closed, both articles live|Links first: https://miscsubjects.com/a/tesofensine ...[/OWNER_REPORT]",
      "read": "https://miscsubjects.com/api/directory/OWNER_REPORT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OWNER_REPORT",
        "body": ""
      },
      "router_tag": "[OWNER_REPORT]args[/OWNER_REPORT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TASK_ADD",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "email",
      "target": "taskAdd",
      "description": "WHAT: Add a task to the build queue (tasks table). Plain text is fine — it is stored and shown as-is. WHEN_TO_USE: the custodian says remember to / add a task / put X on the list / follow up on Y. ARGS: $1 = the task in plain words. Pipes are allowed. EX: [TASK_ADD]call the peptide supplier back about white-label pricing[/TASK_ADD]",
      "read": "https://miscsubjects.com/api/directory/TASK_ADD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TASK_ADD",
        "body": ""
      },
      "router_tag": "[TASK_ADD]args[/TASK_ADD]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TASK_COMPLETE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "email",
      "target": "taskDone",
      "description": "WHAT: Mark a task done (removes it from the open backlog). Same as DONETASK. WHEN_TO_USE: a task is finished. ARGS: $1 = task_id (number), $2 = optional short result note. EX: [TASK_COMPLETE]448|called them, pricing sent[/TASK_COMPLETE]",
      "read": "https://miscsubjects.com/api/directory/TASK_COMPLETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TASK_COMPLETE",
        "body": ""
      },
      "router_tag": "[TASK_COMPLETE]args[/TASK_COMPLETE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TASK_DELETE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "email",
      "target": "taskDelete",
      "description": "WHAT: Delete a task for good. Any child tasks are lifted to top level so nothing is hidden. WHEN_TO_USE: a task is junk / a duplicate / should never run. ARGS: $1 = task_id. EX: [TASK_DELETE]448[/TASK_DELETE]",
      "read": "https://miscsubjects.com/api/directory/TASK_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TASK_DELETE",
        "body": ""
      },
      "router_tag": "[TASK_DELETE]args[/TASK_DELETE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TASK_EDIT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "email",
      "target": "taskEdit",
      "description": "WHAT: Change a task's text and/or status in place. WHEN_TO_USE: reword a task, or move it to open/done/cancelled without deleting it. ARGS: $1 = task_id, $2 = new text (no pipes), $3 = optional new status (open|done|cancelled). EX: [TASK_EDIT]448|call the vendor back Friday|open[/TASK_EDIT]",
      "read": "https://miscsubjects.com/api/directory/TASK_EDIT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TASK_EDIT",
        "body": ""
      },
      "router_tag": "[TASK_EDIT]args[/TASK_EDIT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TASK_THREAD",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "email",
      "target": "taskThread",
      "description": "WHAT: Hang one task under another so related work groups together. Empty parent un-threads to top level. WHEN_TO_USE: a task is a sub-step of a bigger task. ARGS: $1 = child task_id, $2 = parent task_id (leave empty to move back to top level). EX: [TASK_THREAD]451|448[/TASK_THREAD]",
      "read": "https://miscsubjects.com/api/directory/TASK_THREAD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TASK_THREAD",
        "body": ""
      },
      "router_tag": "[TASK_THREAD]args[/TASK_THREAD]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CF_EXPERT",
      "object_type": "agent",
      "runner": "edge",
      "directory_type": "agent",
      "category": "expert",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/CF_EXPERT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CF_EXPERT",
        "body": ""
      },
      "router_tag": "[CF_EXPERT]args[/CF_EXPERT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "FED_SEND",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "federation",
      "target": "fedSend",
      "description": "WHAT: Send a signed federation message (oip-message/1) from the home agent to a remote agent at ANOTHER domain, and return that agent's signed reply. Cross-domain agent-to-agent messaging; the two current test nodes are separately deployed under one operator. ARGS: recipient|kind|rest — recipient=agent@domain. kind=query|invoke.   agent@domain|query|<text>                        -> ask a question; the remote node runs nothing, echoes the text as data.   agent@domain|invoke|KEY|<args>|<capability_token> -> hand a capability across the federation; the remote node runs KEY only if the capability is audience-bound to it and passes every gate. EX: [FED_SEND]buttercup@oip-peer.[custodian].workers.dev|query|what time is it[/FED_SEND] WHEN_TO_USE: coordinate with an agent on a different domain. The recipient's signing key + inbox come from its https://<domain>/.well-known/oip.json; the reply signature is verified before it is trusted. TESTS: bad recipient -> ERR:fed:bad_recipient. Unreachable domain -> {ok:false, reason:recipient_unresolvable:...}. Valid query -> signed result echo. Federation proof: /api/dispatch?fedtest=1.",
      "read": "https://miscsubjects.com/api/directory/FED_SEND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "FED_SEND",
        "body": ""
      },
      "router_tag": "[FED_SEND]args[/FED_SEND]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "FILE_GET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "file",
      "target": "GET https://miscsubjects.com/api/file/$1",
      "description": "WHAT: Read a repo file by path via GitHub Contents API.  Returns {path,sha,size,content} WHEN_TO_USE: you need to file get ARGS: path EX: [FILE_GET][/FILE_GET] Read a repo file by path via GitHub Contents API. Args: path. Returns {path,sha,size,content}.",
      "read": "https://miscsubjects.com/api/directory/FILE_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "FILE_GET",
        "body": ""
      },
      "router_tag": "[FILE_GET]args[/FILE_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "FILE_LIST",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "file",
      "target": "GET https://miscsubjects.com/api/file/?list=1",
      "description": "WHAT: List every file in the repo tree WHEN_TO_USE: you need to file list ARGS: see content EX: [FILE_LIST][/FILE_LIST] List every file in the repo tree.",
      "read": "https://miscsubjects.com/api/directory/FILE_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "FILE_LIST",
        "body": ""
      },
      "router_tag": "[FILE_LIST]args[/FILE_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "FILE_PUT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "file",
      "target": "PUT https://miscsubjects.com/api/file/$1",
      "description": "WHAT: Write a repo file via GitHub Contents API. Creates or overwrites. WHEN_TO_USE: you need to file put ARGS: $1 = path (e.g. functions/api/dispatch.js), $2 = file content (raw text), $3 = commit message (optional), $4 = sha (optional, auto-resolved if omitted), $5 = ref (optional, default main) EX: [FILE_PUT]functions/api/dispatch.js|const X = 1;|fix dispatch[/FILE_PUT]",
      "read": "https://miscsubjects.com/api/directory/FILE_PUT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "FILE_PUT",
        "body": ""
      },
      "router_tag": "[FILE_PUT]args[/FILE_PUT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_FINISH",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "flow",
      "target": null,
      "description": "Phase C of the inbound turn: given the full agent output text in $1, extract the LAST [REPLY], send via blooio to $2, return the send result. $1=agent output text. $2=recipient phone. WHEN_TO_USE: \"finish the turn for <recipient> using <agent_text>\"",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_FINISH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_FINISH",
        "body": ""
      },
      "router_tag": "[BLOOIO_FINISH]args[/BLOOIO_FINISH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_TURN_PHASE_A",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "flow",
      "target": null,
      "description": "Phase A of the inbound turn: dispatch ROUTER with the inbound text and return whatever the router emits. Channel webhooks should call this instead of building a turn job by hand. $1=inbound text from the sender. $2=optional sender phone (passed through to ROUTER as context). WHEN_TO_USE: \"process inbound turn from <user>\" or as the body of the /blooio webhook collapsed shim",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_TURN_PHASE_A",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_TURN_PHASE_A",
        "body": ""
      },
      "router_tag": "[BLOOIO_TURN_PHASE_A]args[/BLOOIO_TURN_PHASE_A]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DELIVER_PENDING_ASSETS",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "flow",
      "target": null,
      "description": "Trigger the durable Workflow that drains pending_deliveries. Equivalent to the old /api/deliver heartbeat but with native retries and observability. WHEN_TO_USE: \"drain the pending deliveries\" or \"force a deliver pass\"",
      "read": "https://miscsubjects.com/api/directory/DELIVER_PENDING_ASSETS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DELIVER_PENDING_ASSETS",
        "body": ""
      },
      "router_tag": "[DELIVER_PENDING_ASSETS]args[/DELIVER_PENDING_ASSETS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DIRECT_EXEC_IF_PREFIX",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "flow",
      "target": null,
      "description": "If the inbound message starts with /t /exec /terminal /run /help, treat the rest as a LOCAL_EXEC command on the Mac bridge. Otherwise pass through unchanged. $1=full message. WHEN_TO_USE: at the top of channel webhook handlers as a shortcut for owner-side shell access.",
      "read": "https://miscsubjects.com/api/directory/DIRECT_EXEC_IF_PREFIX",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DIRECT_EXEC_IF_PREFIX",
        "body": ""
      },
      "router_tag": "[DIRECT_EXEC_IF_PREFIX]args[/DIRECT_EXEC_IF_PREFIX]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SAVE_FLOW",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "fn",
      "category": "flow",
      "target": "saveFlowRow",
      "description": "WHAT: Create or replace a flow row from DSL (pipe-safe) WHEN_TO_USE: you need to save flow ARGS: key|dsl EX: [SAVE_FLOW]arg1|arg2[/SAVE_FLOW]",
      "read": "https://miscsubjects.com/api/directory/SAVE_FLOW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SAVE_FLOW",
        "body": ""
      },
      "router_tag": "[SAVE_FLOW]args[/SAVE_FLOW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STORE_AND_LOG_REF",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "flow",
      "target": null,
      "description": "Store a single ref-image URL to R2 and log the asset row. $1=URL. Returns the asset insert id from LOG_ASSET. WHEN_TO_USE: per inbound media URL before routing to ARCADS",
      "read": "https://miscsubjects.com/api/directory/STORE_AND_LOG_REF",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STORE_AND_LOG_REF",
        "body": ""
      },
      "router_tag": "[STORE_AND_LOG_REF]args[/STORE_AND_LOG_REF]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WEBHOOK_INTAKE",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "flow",
      "target": null,
      "description": "Per-webhook intake (Blooio / 2chat / Telegram) collapsed to one flow. $1=channel (blooio|twochat|telegram), $2=sender, $3=text. Dedup, log, then route to BLOOIO_TURN_PHASE_A. WHEN_TO_USE: drop-in for the existing channel webhook handlers.",
      "read": "https://miscsubjects.com/api/directory/WEBHOOK_INTAKE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WEBHOOK_INTAKE",
        "body": ""
      },
      "router_tag": "[WEBHOOK_INTAKE]args[/WEBHOOK_INTAKE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GITHUB_ADD_ISSUE_COMMENT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "github",
      "target": "githubAddIssueComment",
      "description": "WHAT: Post a comment to a GitHub issue through the GitHub API. This is the canonical URL-only comment path. WHEN_TO_USE: comment on GitHub, reply to an issue, post proof/receipt on an issue. ARGS: issue_number | comment_body EX: [GITHUB_ADD_ISSUE_COMMENT]38|Proof: native GitHub OIP comment path works.[/GITHUB_ADD_ISSUE_COMMENT]",
      "read": "https://miscsubjects.com/api/directory/GITHUB_ADD_ISSUE_COMMENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GITHUB_ADD_ISSUE_COMMENT",
        "body": ""
      },
      "router_tag": "[GITHUB_ADD_ISSUE_COMMENT]args[/GITHUB_ADD_ISSUE_COMMENT]",
      "input_schema": {
        "args": [
          "issue_number",
          "comment_body"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GITHUB_CLOSE_ISSUE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "github",
      "target": "githubCloseIssue",
      "description": "WHAT: Close a GitHub issue and add a closing comment. WHEN_TO_USE: finish/resolve/close a GitHub issue from the build. ARGS: number | reason EX: [GITHUB_CLOSE_ISSUE]42|Fixed in commit abc123[/GITHUB_CLOSE_ISSUE]",
      "read": "https://miscsubjects.com/api/directory/GITHUB_CLOSE_ISSUE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GITHUB_CLOSE_ISSUE",
        "body": ""
      },
      "router_tag": "[GITHUB_CLOSE_ISSUE]args[/GITHUB_CLOSE_ISSUE]",
      "input_schema": {
        "args": [
          "number",
          "reason"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GITHUB_CREATE_ISSUE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "github",
      "target": "githubCreateIssue",
      "description": "WHAT: Create a GitHub issue through the GitHub API. WHEN_TO_USE: file a build work item, proposal, bug, or proof ticket from OIP. ARGS: title | body | labels_csv EX: [GITHUB_CREATE_ISSUE]OIP proof ticket|Created by the protocol.|proposal[/GITHUB_CREATE_ISSUE]",
      "read": "https://miscsubjects.com/api/directory/GITHUB_CREATE_ISSUE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GITHUB_CREATE_ISSUE",
        "body": ""
      },
      "router_tag": "[GITHUB_CREATE_ISSUE]args[/GITHUB_CREATE_ISSUE]",
      "input_schema": {
        "args": [
          "title",
          "body",
          "labels_csv"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GITHUB_GET_ISSUE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "github",
      "target": "githubGetIssue",
      "description": "WHAT: Read one GitHub issue by number from [custodian]/miscsubjects-pages. WHEN_TO_USE: inspect an issue body, labels, title, state, and URL before acting. ARGS: issue_number EX: [GITHUB_GET_ISSUE]38[/GITHUB_GET_ISSUE]",
      "read": "https://miscsubjects.com/api/directory/GITHUB_GET_ISSUE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GITHUB_GET_ISSUE",
        "body": ""
      },
      "router_tag": "[GITHUB_GET_ISSUE]args[/GITHUB_GET_ISSUE]",
      "input_schema": {
        "args": [
          "issue_number"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GITHUB_LIST_ISSUES",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "github",
      "target": "githubListIssues",
      "description": "WHAT: List GitHub issues in [custodian]/miscsubjects-pages through the GitHub API. WHEN_TO_USE: list/show open GitHub issues, audit the issue backlog, inspect Grok-created issues. ARGS: state | labels | limit EX: [GITHUB_LIST_ISSUES]open||30[/GITHUB_LIST_ISSUES]",
      "read": "https://miscsubjects.com/api/directory/GITHUB_LIST_ISSUES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GITHUB_LIST_ISSUES",
        "body": ""
      },
      "router_tag": "[GITHUB_LIST_ISSUES]args[/GITHUB_LIST_ISSUES]",
      "input_schema": {
        "args": [
          "state",
          "labels",
          "limit"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "APPS_SCRIPT_RUN",
      "object_type": "tool",
      "runner": "apps_script",
      "directory_type": "http",
      "category": "google",
      "target": "POST $AIRUNNER_WEB_APP_URL",
      "description": "WHAT: Generic Apps Script invocation. $1=action name, $2=JSON args. Routes to the airunner web app deployment which has Google Drive / Sheets / Tasks / Calendar / Apps Script-runtime access. Use when you need to read/write the user's Google stuff. $$2+ (double dollar, N+) inlines every remaining arg rejoined with | and raw — required because the JSON args blob routinely contains real data (a business name, a drafted email body) with a literal | character in it; plain $2 silently truncates the JSON at that first embedded pipe, which is the true cause of every past 'airunner_body_truncated_in_transit' report — it was never a network/size issue. WHEN_TO_USE: any natural language about Google Drive / Sheets / Tasks / Calendar / Apps Script. ARGS: see content EX: [APPS_SCRIPT_RUN]arg1|arg2[/APPS_SCRIPT_RUN]",
      "read": "https://miscsubjects.com/api/directory/APPS_SCRIPT_RUN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "APPS_SCRIPT_RUN",
        "body": ""
      },
      "router_tag": "[APPS_SCRIPT_RUN]args[/APPS_SCRIPT_RUN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GOOGLE_CALENDAR_CREATE",
      "object_type": "tool",
      "runner": "apps_script",
      "directory_type": "http",
      "category": "google",
      "target": "POST $AIRUNNER_WEB_APP_URL",
      "description": "WHAT: Create a Google Calendar event. $1=calendar id, $2=title, $3=ISO start, $4=ISO end WHEN_TO_USE: add a meeting ARGS: see content EX: [GOOGLE_CALENDAR_CREATE]arg1|arg2|arg3|arg4[/GOOGLE_CALENDAR_CREATE]",
      "read": "https://miscsubjects.com/api/directory/GOOGLE_CALENDAR_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GOOGLE_CALENDAR_CREATE",
        "body": ""
      },
      "router_tag": "[GOOGLE_CALENDAR_CREATE]args[/GOOGLE_CALENDAR_CREATE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GOOGLE_CALENDAR_LIST",
      "object_type": "tool",
      "runner": "apps_script",
      "directory_type": "http",
      "category": "google",
      "target": "POST $AIRUNNER_WEB_APP_URL",
      "description": "WHAT: Upcoming Google Calendar events. $1=calendar id (or \"primary\"), $2=optional ISO start WHEN_TO_USE: answer \"what is on my calendar\" ARGS: see content EX: [GOOGLE_CALENDAR_LIST]arg1|arg2[/GOOGLE_CALENDAR_LIST]",
      "read": "https://miscsubjects.com/api/directory/GOOGLE_CALENDAR_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GOOGLE_CALENDAR_LIST",
        "body": ""
      },
      "router_tag": "[GOOGLE_CALENDAR_LIST]args[/GOOGLE_CALENDAR_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GOOGLE_DRIVE_GET",
      "object_type": "tool",
      "runner": "apps_script",
      "directory_type": "http",
      "category": "google",
      "target": "POST $AIRUNNER_WEB_APP_URL",
      "description": "WHAT: Download Google Drive file content as plain text. $1=file id. Use after GOOGLE_DRIVE_LIST WHEN_TO_USE: you need to google drive get ARGS: see content EX: [GOOGLE_DRIVE_GET]arg1[/GOOGLE_DRIVE_GET]",
      "read": "https://miscsubjects.com/api/directory/GOOGLE_DRIVE_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GOOGLE_DRIVE_GET",
        "body": ""
      },
      "router_tag": "[GOOGLE_DRIVE_GET]args[/GOOGLE_DRIVE_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GOOGLE_DRIVE_LIST",
      "object_type": "tool",
      "runner": "apps_script",
      "directory_type": "http",
      "category": "google",
      "target": "POST $AIRUNNER_WEB_APP_URL",
      "description": "WHAT: List Google Drive files. $1=optional folder id or query (blank = root) WHEN_TO_USE: find a file before downloading ARGS: see content EX: [GOOGLE_DRIVE_LIST]arg1[/GOOGLE_DRIVE_LIST]",
      "read": "https://miscsubjects.com/api/directory/GOOGLE_DRIVE_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GOOGLE_DRIVE_LIST",
        "body": ""
      },
      "router_tag": "[GOOGLE_DRIVE_LIST]args[/GOOGLE_DRIVE_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GOOGLE_SHEETS_APPEND",
      "object_type": "tool",
      "runner": "apps_script",
      "directory_type": "http",
      "category": "google",
      "target": "POST $AIRUNNER_WEB_APP_URL",
      "description": "WHAT: Append a row to a Google Sheet. $1=sheet id, $2=tab name, $3=JSON array of values FIXED 2026-08-09: uses $3+ now, not $3 — a literal | inside the values (a business name, a line of copy) used to truncate the JSON at the first pipe (same root cause as the APPS_SCRIPT_RUN fix). WHEN_TO_USE: log ARGS: see content EX: [GOOGLE_SHEETS_APPEND]arg1|arg2|arg3[/GOOGLE_SHEETS_APPEND]",
      "read": "https://miscsubjects.com/api/directory/GOOGLE_SHEETS_APPEND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GOOGLE_SHEETS_APPEND",
        "body": ""
      },
      "router_tag": "[GOOGLE_SHEETS_APPEND]args[/GOOGLE_SHEETS_APPEND]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GOOGLE_SHEETS_GET",
      "object_type": "tool",
      "runner": "apps_script",
      "directory_type": "http",
      "category": "google",
      "target": "POST $AIRUNNER_WEB_APP_URL",
      "description": "WHAT: Read a Google Sheet range as 2D JSON. $1=sheet id, $2=A1 range (e.g. Sheet1!A1:Z100) WHEN_TO_USE: reporting tables ARGS: see content EX: [GOOGLE_SHEETS_GET]arg1|arg2[/GOOGLE_SHEETS_GET]",
      "read": "https://miscsubjects.com/api/directory/GOOGLE_SHEETS_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GOOGLE_SHEETS_GET",
        "body": ""
      },
      "router_tag": "[GOOGLE_SHEETS_GET]args[/GOOGLE_SHEETS_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GOOGLE_TASKS_ADD",
      "object_type": "tool",
      "runner": "apps_script",
      "directory_type": "http",
      "category": "google",
      "target": "POST $AIRUNNER_WEB_APP_URL",
      "description": "WHAT: Add a Google Task. $1=optional list id, $2=title, $3=optional notes WHEN_TO_USE: the user says \"add to my todos\" ARGS: see content EX: [GOOGLE_TASKS_ADD]arg1|arg2|arg3[/GOOGLE_TASKS_ADD]",
      "read": "https://miscsubjects.com/api/directory/GOOGLE_TASKS_ADD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GOOGLE_TASKS_ADD",
        "body": ""
      },
      "router_tag": "[GOOGLE_TASKS_ADD]args[/GOOGLE_TASKS_ADD]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GOOGLE_TASKS_LIST",
      "object_type": "tool",
      "runner": "apps_script",
      "directory_type": "http",
      "category": "google",
      "target": "POST $AIRUNNER_WEB_APP_URL",
      "description": "WHAT: List Google Tasks. $1=optional task list id WHEN_TO_USE: answer \"what is on my todo list\" ARGS: see content EX: [GOOGLE_TASKS_LIST]arg1[/GOOGLE_TASKS_LIST]",
      "read": "https://miscsubjects.com/api/directory/GOOGLE_TASKS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GOOGLE_TASKS_LIST",
        "body": ""
      },
      "router_tag": "[GOOGLE_TASKS_LIST]args[/GOOGLE_TASKS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CERTIFIER_HISTORY",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "governance",
      "target": "POST https://miscsubjects.com/api/governance/certifiers",
      "description": "WHAT: Read the cards, revocations, expiries and evidence history filed by a named regulator, insurer, auditor, compliance officer, standards body or owner. ARGS: JSON {certifier_label}. TESTS: Returns public bounded records only; this is a performance history, not proof of legal identity, competence or independence.",
      "read": "https://miscsubjects.com/api/directory/CERTIFIER_HISTORY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CERTIFIER_HISTORY",
        "body": ""
      },
      "router_tag": "[CERTIFIER_HISTORY]args[/CERTIFIER_HISTORY]",
      "input_schema": {
        "type": "object",
        "required": [
          "certifier_label"
        ]
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CITATION_VALIDATION",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "governance",
      "target": "POST https://miscsubjects.com/api/governance/citation-validation",
      "description": "WHAT: Independently validate that one cited evidence item actually supports the clause finding it was filed under. A model confirming a decision is NOT citation validation; this records source existence, version/hash correctness, passage-to-premise support, clause-to-conduct applicability, material omissions and conclusion overreach, plus the honest evidence class. ARGS: JSON {decision_id,clause,evidence_ref,evidence_class:operator-served|independently-recomputable|third-party-witnessed|institutionally-attested|private-scoped|unresolved-assertion,verdict:SUPPORTED|PARTIALLY_SUPPORTED|UNSUPPORTED|CONTRADICTED|LEGAL_REVIEW_REQUIRED,source_exists?,version_hash_correct?,passage_supports_premise?,clause_governs_conduct?,material_omission?,conclusion_overreach?,validator_model,validator_provider,validator_family,prompt_hash?,context_hash?,prior_answers_visible?,recompute_method?,justification}. TESTS: Decision and clause must exist; a SUPPORTED verdict requires source_exists and passage_supports_premise and clause_governs_conduct and no conclusion_overreach; operator-served evidence can never be marked independently-recomputable; the record is hash-pinned and append-only.",
      "read": "https://miscsubjects.com/api/directory/CITATION_VALIDATION",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CITATION_VALIDATION",
        "body": ""
      },
      "router_tag": "[CITATION_VALIDATION]args[/CITATION_VALIDATION]",
      "input_schema": {
        "type": "object",
        "required": [
          "decision_id",
          "clause",
          "evidence_ref",
          "evidence_class",
          "verdict",
          "validator_model",
          "validator_provider",
          "validator_family",
          "justification"
        ]
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "COMPLIANCE_GATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "governance",
      "target": "POST https://miscsubjects.com/api/governance/gate",
      "description": "WHAT: Ask a bounded compliance card to authorize a consequential operation. Proves the card is executable state: a currently valid, in-scope, correct-version, in-jurisdiction, within-risk, dissent-clear, correctly-certified card permits; anything else returns a typed, receipted denial. Uses a safe demonstration operation and never gates production-critical behavior. ARGS: JSON {card_id,requested_action,system_version?,jurisdiction?,risk?,required_certifier_type?,presented_card_hash?,require_no_standing_dissent?,actor?}. TESTS: Denials are typed (CARD_NOT_FOUND, FORGED_HASH, EXPIRED, REVOKED, SUPERSEDED, WRONG_SYSTEM_VERSION, ACTION_OUT_OF_SCOPE, WRONG_JURISDICTION, RISK_CEILING_EXCEEDED, STANDING_DISSENT_BLOCKS, UNQUALIFIED_CERTIFIER); every resolution is append-only; a forged card hash never permits.",
      "read": "https://miscsubjects.com/api/directory/COMPLIANCE_GATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "COMPLIANCE_GATE",
        "body": ""
      },
      "router_tag": "[COMPLIANCE_GATE]args[/COMPLIANCE_GATE]",
      "input_schema": {
        "type": "object",
        "required": [
          "card_id",
          "requested_action"
        ]
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CONSCIENCE_GATE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "governance",
      "target": "conscienceGate",
      "description": "WHAT: The Good Conscience Law — the veto between \"can execute\" and \"will execute\". MAY_ACT = authority AND evidence AND conscience; logical economics optimizes only among MAY_ACT=true actions. Empty body returns the constitution (build-conscience@1.0.0, clauses GC1-GC8). A REFUSE/ESCALATE/HALT verdict is rejected unless it names the violated clause, the prohibited consequence, the job's direct causal contribution, and evidence — refusal binds to a named clause, never to free moralizing. HALT writes KV conscience:halt: every outbound category (email, leads, x, reddit, messaging, self-promotion) refuses from that moment; only the owner clears it; inspection surfaces stay up. WHEN_TO_USE: before the build accepts any job or takes any consequential outbound action; when work smells like it violates the floor; \"should the build do this at all\". SAFETY: money, efficiency, owner instruction, or customer demand never compensate for a conscience failure. Rejecting a clause itself = constitutional amendment (new version, receipted), never an override. ARGS: $1 = empty (list clauses) OR JSON {job, verdict:ACCEPT|REFUSE|ESCALATE|HALT, violated_clause?, prohibited_consequence?, causal_contribution?, evidence?, notes?} EX: [CONSCIENCE_GATE][/CONSCIENCE_GATE]",
      "read": "https://miscsubjects.com/api/directory/CONSCIENCE_GATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CONSCIENCE_GATE",
        "body": ""
      },
      "router_tag": "[CONSCIENCE_GATE]args[/CONSCIENCE_GATE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": false,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DECISION_CONSTITUTION",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "governance",
      "target": "decisionConstitution",
      "description": "WHAT: Return the Decision Constitution verbatim, versioned (decision-constitution@1.0.0) — the governing system prompt every consequential model call runs under: clause law, stop-on-uncertainty, the 7-step numbered REASONING protocol, RECORDS_ABSENT, the structured DECISION RECORD (applicable rules / knowns / unknowns / evidence / action / rejected alternative / expected result / failure response / verification / verdict), verification-before-confirmation. Specialized prompts inherit it; they never recreate it. WHEN_TO_USE: composing any governed adjudication or consequential model call; reading the exact law a preserved payload ran under; \"what constitution was this decision under\". ARGS: none. EX: [DECISION_CONSTITUTION][/DECISION_CONSTITUTION]",
      "read": "https://miscsubjects.com/api/directory/DECISION_CONSTITUTION",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DECISION_CONSTITUTION",
        "body": ""
      },
      "router_tag": "[DECISION_CONSTITUTION]args[/DECISION_CONSTITUTION]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DECISION_RECORD",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "governance",
      "target": "POST https://miscsubjects.com/api/governance/decisions",
      "description": "WHAT: File a clause-cited model decision justification with facts, evidence, uncertainty and counterarguments. This is an accountability artifact, never a hidden chain-of-thought claim or legal determination. ARGS: JSON {standard_id,model,provider,model_family,task,decision:CONFORMANT|NONCONFORMANT|PARTIAL|UNKNOWN|ABSTAIN|LEGAL_REVIEW_REQUIRED,justification,facts[],clause_findings:[{clause,result,reason,evidence[]}],uncertainties[],counterarguments[],recommended_action?,confidence?,evidence[],prompt_hash?,context_hash?,prior_answers_visible?,authority,invocation_id?,repair_of?}. TESTS: Standard and clause ids must exist; every PASS/FAIL finding needs evidence; legal-review standards cannot yield a runtime legal conclusion; record is hash-pinned and append-only.",
      "read": "https://miscsubjects.com/api/directory/DECISION_RECORD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DECISION_RECORD",
        "body": ""
      },
      "router_tag": "[DECISION_RECORD]args[/DECISION_RECORD]",
      "input_schema": {
        "type": "object",
        "required": [
          "standard_id",
          "model",
          "provider",
          "model_family",
          "task",
          "decision",
          "justification",
          "clause_findings",
          "authority"
        ]
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DEPLOY_LEASE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "governance",
      "target": "deployLease",
      "description": "WHAT: Inspect, acquire or release the single production deployment door for loop-safe-miscsubjects. The canonical ship script holds the same KV lease from before migrations through the Pages result and ledgers acquire/release. ARGS: op check|acquire|release | holder | nonce. Acquire returns a 30-minute nonce. Release requires the exact nonce. Check is read-only. TESTS: A second live acquire is rejected; a wrong nonce cannot release; acquisition and release create DEPLOY_LEASE ledger events.",
      "read": "https://miscsubjects.com/api/directory/DEPLOY_LEASE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DEPLOY_LEASE",
        "body": ""
      },
      "router_tag": "[DEPLOY_LEASE]args[/DEPLOY_LEASE]",
      "input_schema": {
        "type": "array",
        "items": [
          {
            "enum": [
              "check",
              "acquire",
              "release"
            ]
          },
          {
            "type": "string"
          },
          {
            "type": "string"
          }
        ]
      },
      "examples": "[\"check\",\"acquire|codex-desktop\",\"release|codex-desktop|<nonce>\"]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "FILE_CLAIM",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "governance",
      "target": "fileClaim",
      "description": "WHAT: Advisory write-locks so coding agents stop double-editing the same file. KV-backed, TTL auto-expires. WHEN_TO_USE: BEFORE editing any repo file: claim it. AFTER finishing: release it. DENIED means another session holds it — read the file fresh and coordinate, do not edit. See AGENTS.md \"WRITE LAW\". ARGS: op(claim|release|check|list) | file path | holder as agent:session | ttl minutes (default 90) EX: [FILE_CLAIM]claim|functions/api/dispatch.js|claude:abc123|90[/FILE_CLAIM]",
      "read": "https://miscsubjects.com/api/directory/FILE_CLAIM",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "FILE_CLAIM",
        "body": ""
      },
      "router_tag": "[FILE_CLAIM]args[/FILE_CLAIM]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GOVERNOR",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "governance",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/GOVERNOR",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GOVERNOR",
        "body": ""
      },
      "router_tag": "[GOVERNOR]args[/GOVERNOR]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GOVERNOR_ASK",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "governance",
      "target": "governorAsk",
      "description": "WHAT: Ask the GOVERNOR (build manager) a question. It answers from the live 24h digest + recurrence memory + charter — counts in parentheses, sized for iMessage. WHEN_TO_USE: the custodian texts \"governor <question>\" or \"ask the governor ...\", or any model wants the manager's evidence-grounded read on build health, conflicts, or what keeps recurring. ARGS: the question, verbatim EX: [GOVERNOR_ASK]why is the task backlog so big[/GOVERNOR_ASK]",
      "read": "https://miscsubjects.com/api/directory/GOVERNOR_ASK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GOVERNOR_ASK",
        "body": ""
      },
      "router_tag": "[GOVERNOR_ASK]args[/GOVERNOR_ASK]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GOVERNOR_RUN",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "governance",
      "target": "governorRun",
      "description": "WHAT: Run the GOVERNOR — scan the last 48h of ledger turns into a deterministic digest (error streaks, file collisions, loop states, auth lockouts, cron noise, task flow, waste), have the GOVERNOR model write the brief, email it to the custodian, text him the verdict, ledger everything as GOVERNOR_BRIEF. WHEN_TO_USE: the custodian asks \"whats going on with the build\", \"governor report\", \"run governor\", \"build brief\", \"what keeps breaking\" — or any model wants the standing manager's view before making structural changes. Runs automatically every 12h / 2000 events / 150 errors; this row is the manual fire. ARGS: mode — empty = full run (model + email + iMessage) · dry = digest JSON only, no model call, no delivery EX: [GOVERNOR_RUN][/GOVERNOR_RUN]   or   GET /api/dispatch?invoke=GOVERNOR_RUN&body=dry",
      "read": "https://miscsubjects.com/api/directory/GOVERNOR_RUN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GOVERNOR_RUN",
        "body": ""
      },
      "router_tag": "[GOVERNOR_RUN]args[/GOVERNOR_RUN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OBJECTION_LOG",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "governance",
      "target": "objectionLog",
      "description": "WHAT: File an objection, confirm a duplicate, settle an exact objection, or append a repair without erasing the original. ARGS: one JSON object. New: {slug,body,claimed_model,target_div?,stance?}. Duplicate confirmation: add duplicate_of:\"obj-N\". Repair/answer lane: add repairs:\"obj-N\" (or answer_of), body describing the correction and answer or stance:\"upgrade\". The repair bypasses similarity rejection, preserves the original, and appends linked discourse. LEGACY: the old slug|objection|answer|model shape remains accepted by the runner, but structured JSON is canonical because prose may contain pipes. TESTS: Pipe characters survive structured ingress; duplicate confirmations increment the canonical counter; repairs require an existing same-slug target and return a distinct repair discourse link.",
      "read": "https://miscsubjects.com/api/directory/OBJECTION_LOG",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OBJECTION_LOG",
        "body": ""
      },
      "router_tag": "[OBJECTION_LOG]args[/OBJECTION_LOG]",
      "input_schema": {
        "type": "object",
        "required": [
          "slug",
          "body"
        ],
        "properties": {
          "duplicate_of": {
            "type": "string"
          },
          "repairs": {
            "type": "string"
          },
          "answer": {
            "type": "string"
          },
          "stance": {
            "enum": [
              "challenge",
              "support",
              "upgrade"
            ]
          }
        }
      },
      "examples": "[{\"slug\":\"oip-total-structure\",\"body\":\"The correction preserves a | pipe.\",\"repairs\":\"obj-154\",\"answer\":\"Corrected answer.\"}]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_GOVERNANCE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "governance",
      "target": "oipGovernance",
      "description": "WHAT: Subscribe to, inquire about, propose a change to, request a feature from, attest conformance to, anchor a fork into, appeal within, or append an owner ruling to OIP governance one facet at a time. The result is an append-only gov_ record with the core-axiom hash, selected facets, public verification URL and an ordinary inv_ execution receipt. WHEN_TO_USE: A human, model, organization or system wants link provenance, receipts, capabilities, repair, federation, public audition, governance, anchors or the defensive commons without inheriting unrelated OIP obligations. ARGS: One JSON object with kind subscribe|inquire|propose|feature|conformance|anchor|appeal|ruling; actor_type human|model|organization|system; actor_label; authority self|owner-authorized|model-recommendation; mode observe|implement|verify|govern; facets[] from /api/governance; accept_core boolean; message; optional public_contact, private_contact, parent_id and evidence_links[]. Anchor requires external_head SHA-256 + external_verifier HTTPS. Ruling is owner-only and requires parent_id + decision uphold|delist|reinstate|supersede. MODEL_LAW: A model may file kind=inquire|propose|feature with authority=model-recommendation. It cannot subscribe its owner. Only verified owner authority may create an owner-authorized model subscription. SECURITY: Subscription grants no execution authority. Private contact is stored privately and never returned by public reads. Bearer material is rejected. Records append and link; they are never edited through this object. CENSUS: /api/governance exposes non_owner_node_count and non_owner_anchor_count. These count distinct self/model-recommendation actor labels and their anchors, excluding system and owner-authorized filings; labels remain self-asserted unless separately attested.\\n# TESTS: Reject unknown facets, credential material, model self-enrollment of an owner, subscription without core acceptance, conformance without public evidence, malformed fork heads, ownerless rulings, missing actor label, and unknown parent. Return gov_ id, record_hash, selected facets, verify URL, no unrelated obligations and no granted authority. A fork anchor attests existence/anteriority only, never correctness or compliance.",
      "read": "https://miscsubjects.com/api/directory/OIP_GOVERNANCE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_GOVERNANCE",
        "body": ""
      },
      "router_tag": "[OIP_GOVERNANCE]args[/OIP_GOVERNANCE]",
      "input_schema": {
        "type": "object",
        "required": [
          "kind",
          "actor_type",
          "actor_label",
          "authority",
          "mode",
          "facets",
          "accept_core"
        ],
        "properties": {
          "facets": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "evidence_links": {
            "type": "array",
            "items": {
              "type": "string",
              "format": "uri"
            }
          },
          "external_head": {
            "type": "string",
            "pattern": "^[a-f0-9]{64}$"
          },
          "external_verifier": {
            "type": "string",
            "format": "uri"
          }
        }
      },
      "examples": "[{\"kind\":\"inquire\",\"actor_type\":\"model\",\"actor_label\":\"ChatGPT Web · GPT-5.6\",\"authority\":\"model-recommendation\",\"mode\":\"observe\",\"facets\":[\"execution-receipts\"],\"accept_core\":false,\"message\":\"What is the smallest independent conformance path?\"}]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROSECUTOR_RUN",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "governance",
      "target": "prosecutorRun",
      "description": "WHAT: One machine turn of the operator loop, end to end: fetch the drop + current accepted thread-state, ask a model for ONE materially new point (inheriting all accepted state, never repeating it), and post the result to the thread bus as a proposed update. Replies NOTHING NEW when the state already covers everything it sees. WHEN_TO_USE: the custodian says \"prosecute the protocol\", \"run the loop\", \"have a machine critique it\" — or the governor wants fresh adversarial load without any human transport. ARGS: model key (optional; default ASK_CLAUDE — also ASK_GPT / ASK_GEMINI / ASK_KIMI) EX: [PROSECUTOR_RUN]ASK_KIMI[/PROSECUTOR_RUN]",
      "read": "https://miscsubjects.com/api/directory/PROSECUTOR_RUN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROSECUTOR_RUN",
        "body": ""
      },
      "router_tag": "[PROSECUTOR_RUN]args[/PROSECUTOR_RUN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "QUADSYNC_RUN",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "governance",
      "target": "quadsyncRun",
      "description": "WHAT: Run the server half of QUADSYNC now — mirror new ledger events to GitHub (ledger-mirror/events-<day>.jsonl) and fold recent GitHub commits + [auto] issues back into the ledger/tasks. Returns both results plus all four corner health stamps. WHEN_TO_USE: the custodian says \"sync\", \"sync everything\", \"run quadsync\", \"is everything synced\" — or any model needs the corners current before reasoning about build state. Automatic every 10 min via dispatch traffic; local Mac + Google Drive corners run via launchd com.the custodian.miscsubjects.quadsync. ARGS: none EX: [QUADSYNC_RUN][/QUADSYNC_RUN]",
      "read": "https://miscsubjects.com/api/directory/QUADSYNC_RUN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "QUADSYNC_RUN",
        "body": ""
      },
      "router_tag": "[QUADSYNC_RUN]args[/QUADSYNC_RUN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "REVIEW_RECORD",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "governance",
      "target": "POST https://miscsubjects.com/api/governance/reviews",
      "description": "WHAT: Confirm, challenge or abstain on a decision record while preserving reviewer provider/family, evidence, prompt/context fingerprints and whether prior answers were visible. ARGS: JSON {decision_id,reviewer_model,reviewer_provider,reviewer_family,stance:CONFIRM|CHALLENGE|ABSTAIN,justification,evidence[],evidence_recomputed?,prompt_hash?,context_hash?,prior_answers_visible?,authority,invocation_id?}. TESTS: Unknown decisions fail; repeated same-provider reviews remain visible but do not multiply independent-provider surety.",
      "read": "https://miscsubjects.com/api/directory/REVIEW_RECORD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "REVIEW_RECORD",
        "body": ""
      },
      "router_tag": "[REVIEW_RECORD]args[/REVIEW_RECORD]",
      "input_schema": {
        "type": "object",
        "required": [
          "decision_id",
          "reviewer_model",
          "reviewer_provider",
          "reviewer_family",
          "stance",
          "justification",
          "authority"
        ]
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STANDARD_REGISTER",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "governance",
      "target": "POST https://miscsubjects.com/api/governance/standards",
      "description": "WHAT: Register a versioned standard whose clauses can be cited by decision records. This records the source and authority class; it does not turn advisory text into law. ARGS: JSON {id,name,version,authority_class:internal-profile|external-source|advisory|legal-review-required,source_url?,canonical_text,clauses:[{id,title,requirement,test?,authority?}],status?,parent_id?,created_by}. TESTS: Unique clause ids; external/legal standards require an HTTPS source; exact canonical content is hash-pinned; bearer material is rejected.",
      "read": "https://miscsubjects.com/api/directory/STANDARD_REGISTER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STANDARD_REGISTER",
        "body": ""
      },
      "router_tag": "[STANDARD_REGISTER]args[/STANDARD_REGISTER]",
      "input_schema": {
        "type": "object",
        "required": [
          "id",
          "name",
          "version",
          "authority_class",
          "canonical_text",
          "clauses",
          "created_by"
        ]
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STATE_CARD_CERTIFY",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "governance",
      "target": "POST https://miscsubjects.com/api/governance/cards",
      "description": "WHAT: Certify a bounded, expiring compliance state card from an existing decision and its current surety/dissent record. The card grants no tool authority by itself. ARGS: JSON {decision_id,system_version,scope[],risk_ceiling,jurisdiction,audit_depth,certifier_type:regulator|insurer|auditor|compliance_officer|standards_body|owner,certifier_label,authority:owner-authorized|external-attestation,expires_at,parent_id?,evidence[],invocation_id?}. TESTS: Card binds standard/system/scope/risk/jurisdiction/audit depth/expiry; current dissent is attached; expiry is bounded; certification never erases dissent or becomes truth/legal compliance by itself.",
      "read": "https://miscsubjects.com/api/directory/STATE_CARD_CERTIFY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STATE_CARD_CERTIFY",
        "body": ""
      },
      "router_tag": "[STATE_CARD_CERTIFY]args[/STATE_CARD_CERTIFY]",
      "input_schema": {
        "type": "object",
        "required": [
          "decision_id",
          "system_version",
          "scope",
          "risk_ceiling",
          "jurisdiction",
          "audit_depth",
          "certifier_type",
          "certifier_label",
          "authority",
          "expires_at"
        ]
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STATE_CARD_REVOKE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "governance",
      "target": "POST https://miscsubjects.com/api/governance/cards/revoke",
      "description": "WHAT: Revoke a state card without deleting it; append the reason, evidence and actor to the certifier history. ARGS: JSON {card_id,actor,reason,evidence[],invocation_id?}. TESTS: Revocation is append-only, idempotent only for already-revoked state, and immediately changes card standing.",
      "read": "https://miscsubjects.com/api/directory/STATE_CARD_REVOKE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STATE_CARD_REVOKE",
        "body": ""
      },
      "router_tag": "[STATE_CARD_REVOKE]args[/STATE_CARD_REVOKE]",
      "input_schema": {
        "type": "object",
        "required": [
          "card_id",
          "actor",
          "reason"
        ]
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SURETY_RECORD",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "governance",
      "target": "POST https://miscsubjects.com/api/governance/surety",
      "description": "WHAT: Compute the disclosed independence-weighted support/challenge profile for one decision. Surety measures corroboration, not truth, legality or consensus authority. ARGS: JSON {decision_id}. TESTS: Count unique providers separately from raw reviews; disclose every weight and discount; preserve challenges and prior-answer visibility.",
      "read": "https://miscsubjects.com/api/directory/SURETY_RECORD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SURETY_RECORD",
        "body": ""
      },
      "router_tag": "[SURETY_RECORD]args[/SURETY_RECORD]",
      "input_schema": {
        "type": "object",
        "required": [
          "decision_id"
        ]
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GROK_IMAGE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "grok",
      "target": "POST https://api.x.ai/v1/images/generations",
      "description": "WHAT: Generate an image from a text prompt. Returns a JSON url (grok-imagine-image-quality, $0.05/image). WHEN_TO_USE: any \"make/generate/create an image, picture, photo, or art\" request. The whole body is the prompt. ARGS: prompt (free text) EX: [GROK_IMAGE]a golden retriever in an astronaut suit, studio lighting[/GROK_IMAGE]",
      "read": "https://miscsubjects.com/api/directory/GROK_IMAGE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GROK_IMAGE",
        "body": ""
      },
      "router_tag": "[GROK_IMAGE]args[/GROK_IMAGE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GROK_IMAGE_EDIT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "grok",
      "target": "POST https://api.x.ai/v1/images/edits",
      "description": "WHAT: Edit an image with natural language.  Returns a JSON url WHEN_TO_USE: you need to grok image edit ARGS: prompt|image_url EX: [GROK_IMAGE_EDIT]arg1|arg2[/GROK_IMAGE_EDIT]",
      "read": "https://miscsubjects.com/api/directory/GROK_IMAGE_EDIT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GROK_IMAGE_EDIT",
        "body": ""
      },
      "router_tag": "[GROK_IMAGE_EDIT]args[/GROK_IMAGE_EDIT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GROK_MODELS",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "grok",
      "target": "GET https://api.x.ai/v1/models",
      "description": "WHAT: List every model on the xAI API. No args WHEN_TO_USE: you need to grok models ARGS: see content EX: [GROK_MODELS][/GROK_MODELS] List every model on the xAI API. No args.",
      "read": "https://miscsubjects.com/api/directory/GROK_MODELS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GROK_MODELS",
        "body": ""
      },
      "router_tag": "[GROK_MODELS]args[/GROK_MODELS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GROK_STT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "grok",
      "target": "grokStt",
      "description": "WHAT: Speech-to-TEXT (Grok). INVOKE: [GROK_STT]<public_audio_url>[/GROK_STT] WHEN_TO_USE: you need to grok stt ARGS: $1 EX: [GROK_STT]arg1[/GROK_STT]",
      "read": "https://miscsubjects.com/api/directory/GROK_STT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GROK_STT",
        "body": ""
      },
      "router_tag": "[GROK_STT]args[/GROK_STT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GROK_TTS",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "grok",
      "target": "POST https://api.x.ai/v1/tts",
      "description": "WHAT: Text-to-SPEECH (Grok). INVOKE: [GROK_TTS]<text>|<voice_id>[/GROK_TTS] WHEN_TO_USE: you need to grok tts ARGS: see content EX: [GROK_TTS]arg1|arg2|arg15[/GROK_TTS] $1 = the words to speak; $2 = voice_id (eve|ara|rex|sal|leo). Returns mp3 audio BYTES (binary, not JSON) from https://api.x.ai/v1/tts; ~$15 per 1M characters. To DELIVER spoken audio into a chat in ONE call, use [VOICE_SEND] instead (it synthesizes + attaches).",
      "read": "https://miscsubjects.com/api/directory/GROK_TTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GROK_TTS",
        "body": ""
      },
      "router_tag": "[GROK_TTS]args[/GROK_TTS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GROK_VIDEO_GET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "grok",
      "target": "GET https://api.x.ai/v1/videos/$1",
      "description": "WHAT: Poll a video job.  status pending|done|failed|expired; when done returns video.url WHEN_TO_USE: you need to grok video get ARGS: request_id EX: [GROK_VIDEO_GET][/GROK_VIDEO_GET] Poll a video job. Arg: request_id. status pending|done|failed|expired; when done returns video.url.",
      "read": "https://miscsubjects.com/api/directory/GROK_VIDEO_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GROK_VIDEO_GET",
        "body": ""
      },
      "router_tag": "[GROK_VIDEO_GET]args[/GROK_VIDEO_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GROK_VIDEO_START",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "grok",
      "target": "POST https://api.x.ai/v1/videos/generations",
      "description": "WHAT: Start a text-to-video job.  Returns request_id. Poll with GROK_VIDEO_GET. Model grok-imagine-video ($0.05/sec) WHEN_TO_USE: you need to grok video start ARGS: prompt|duration_seconds(1-15) EX: [GROK_VIDEO_START]arg1|arg2[/GROK_VIDEO_START]",
      "read": "https://miscsubjects.com/api/directory/GROK_VIDEO_START",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GROK_VIDEO_START",
        "body": ""
      },
      "router_tag": "[GROK_VIDEO_START]args[/GROK_VIDEO_START]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CODE_LEASE_COMMIT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "infra",
      "target": "codeLeaseCommit",
      "description": "WHAT: Close a coding lease with the sha256 of every file as you are leaving it. Refused with 409 and the conflicting lease named if another agent committed one of your files after your lease opened. WHY: the refusal is the whole point. A refused commit means your edit was about to erase work that landed while you were writing. Re-read the file, redo the edit on the new version, commit again. HOW: compares each declared base_sha against the newest committed sha for that path. All paths must clear or nothing is recorded. WHEN_TO_USE: immediately before git commit, every time. ARGS: $1 = lease id from CODE_LEASE_START. $2 = a JSON array [{\"path\":\"…\",\"new_sha\":\"…\"},…]. EX: [CODE_LEASE_COMMIT]lease_ab12cd34|[{\"path\":\"functions/a/[slug].js\",\"new_sha\":\"71ba…\"}][/CODE_LEASE_COMMIT]",
      "read": "https://miscsubjects.com/api/directory/CODE_LEASE_COMMIT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CODE_LEASE_COMMIT",
        "body": ""
      },
      "router_tag": "[CODE_LEASE_COMMIT]args[/CODE_LEASE_COMMIT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CODE_LEASE_START",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "infra",
      "target": "codeLeaseStart",
      "description": "WHAT: Open a coding lease. You declare the files you are about to edit and the sha256 of each file's contents as you just read them. Returns a lease id and a start hash. WHY: two agents reading the same file at the same version both edit from it, and the second commit erases the first. Both commits look valid on their own. The declared base version is what makes the collision detectable. HOW: records {path, base_sha} for every file. At commit the server compares your base_sha against the last sha any other lease committed for that path. WHEN_TO_USE: before your first edit of a session, always. A lease opened at commit time can only report a collision that already happened. ARGS: $1 = your agent name. $2 = a JSON array [{\"path\":\"functions/x.js\",\"base_sha\":\"<sha256 of what you read>\"},…]. $3 = one line saying what the work is. EX: [CODE_LEASE_START]claude:7d88e44e|[{\"path\":\"functions/a/[slug].js\",\"base_sha\":\"9f2c…\"}]|add the ledger thread to every article[/CODE_LEASE_START]",
      "read": "https://miscsubjects.com/api/directory/CODE_LEASE_START",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CODE_LEASE_START",
        "body": ""
      },
      "router_tag": "[CODE_LEASE_START]args[/CODE_LEASE_START]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "KLAVIYO",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "klaviyo",
      "target": "target_map:{\"events\":{\"method\":\"GET\",\"url\":\"https://a.klaviyo.com/api/events/?page%5Bsize%5D=$1\"},\"profiles\":{\"method\":\"GET\",\"url\":\"https://a.klaviyo.com/api/profiles/?page%5Bsize%5D=20\"},\"profile_by_email\":{\"method\":\"GET\",\"url\":\"https://a.klaviyo.com/api/profiles/?filter=equals(email,%22$1%22)\"},\"profile\":{\"method\":\"GET\",\"url\":\"https://a.klaviyo.com/api/profiles/$1/\"},\"events_for_profile\":{\"method\":\"GET\",\"url\":\"https://a.klaviyo.com/api/events/?filter=equals(profile_id,%22$1%22)&page%5Bsize%5D=50&sort=-datetime\"},\"metrics\":{\"method\":\"GET\",\"url\":\"https://a.klaviyo.com/api/metrics/?fields%5Bmetric%5D=name,integration\"},\"lists\":{\"method\":\"GET\",\"url\":\"https://a.klaviyo.com/api/lists/\"},\"segments\":{\"method\":\"GET\",\"url\":\"https://a.klaviyo.com/api/segments/\"},\"flows\":{\"method\":\"GET\",\"url\":\"https://a.klaviyo.com/api/flows/?page%5Bsize%5D=50\"},\"campaigns\":{\"method\":\"GET\",\"url\":\"https://a.klaviyo.com/api/campaigns/?filter=equals(messages.channel,%22email%22)&page%5Bsize%5D=50&sort=-created_at\"},\"events_since\":{\"method\":\"GET\",\"url\":\"https://a.klaviyo.com/api/events/?page%5Bsize%5D=200&sort=-datetime&filter=greater-or-equal(datetime,$1)\"},\"events_cursor\":{\"method\":\"GET\",\"url\":\"https://a.klaviyo.com/api/events/?page%5Bsize%5D=200&sort=-datetime&filter=greater-or-equal(datetime,$1)&page%5Bcursor%5D=$2\"},\"events_metric\":{\"method\":\"GET\",\"url\":\"https://a.klaviyo.com/api/events/?page%5Bsize%5D=200&sort=-datetime&filter=and(greater-or-equal(datetime,$1),equals(metric_id,%22$2%22))\"},\"events_metric_cursor\":{\"method\":\"GET\",\"url\":\"https://a.klaviyo.com/api/events/?page%5Bsize%5D=200&sort=-datetime&filter=and(greater-or-equal(datetime,$1),equals(metric_id,%22$2%22))&page%5Bcursor%5D=$3\"}}",
      "description": "WHAT: Klaviyo unified entrypoint WHEN_TO_USE: profiles, segments, events, lists ARGS: $1=op, $2..$N=args EX: [KLAVIYO]profiles[/KLAVIYO] TESTS: INVERSE: ERR:target_map:unknown_op on bad op.",
      "read": "https://miscsubjects.com/api/directory/KLAVIYO",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "KLAVIYO",
        "body": ""
      },
      "router_tag": "[KLAVIYO]args[/KLAVIYO]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "KV_DEL",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "kv",
      "target": "kvDel",
      "description": "WHAT: KV delete by key. e.g. directory:snapshot WHEN_TO_USE: invalidate a cached value (e.g. after manual edits to a row that got cached) ARGS: $1 EX: [KV_DEL]arg1[/KV_DEL]",
      "read": "https://miscsubjects.com/api/directory/KV_DEL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "KV_DEL",
        "body": ""
      },
      "router_tag": "[KV_DEL]args[/KV_DEL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "KV_GET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "kv",
      "target": "kvGet",
      "description": "WHAT: KV get by key WHEN_TO_USE: small text values that change rarely (system_prompt mirror, feature flags) ARGS: $1 EX: [KV_GET]arg1[/KV_GET]",
      "read": "https://miscsubjects.com/api/directory/KV_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "KV_GET",
        "body": ""
      },
      "router_tag": "[KV_GET]args[/KV_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "KV_PUT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "kv",
      "target": "kvPut",
      "description": "WHAT: KV put $1=key $2=value. Overwrite is OK WHEN_TO_USE: the same things KV_GET reads ARGS: $1 | $2 EX: [KV_PUT]arg1|arg2[/KV_PUT]",
      "read": "https://miscsubjects.com/api/directory/KV_PUT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "KV_PUT",
        "body": ""
      },
      "router_tag": "[KV_PUT]args[/KV_PUT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LAWS_ADD",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "laws",
      "target": null,
      "description": "Add a new mutable law. $1=key, $2=category, $3=rule text, $4=rationale. Only mutable laws can be added this way; immutable laws require a migration.",
      "read": "https://miscsubjects.com/api/directory/LAWS_ADD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LAWS_ADD",
        "body": ""
      },
      "router_tag": "[LAWS_ADD]args[/LAWS_ADD]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LAWS_DELETE",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "laws",
      "target": null,
      "description": "Delete a mutable law. $1=key. Cannot delete immutable laws.",
      "read": "https://miscsubjects.com/api/directory/LAWS_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LAWS_DELETE",
        "body": ""
      },
      "router_tag": "[LAWS_DELETE]args[/LAWS_DELETE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LAWS_EDIT",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "laws",
      "target": null,
      "description": "Edit a mutable law. $1=key, $2=new rule text, $3=new rationale. Cannot edit immutable laws. WARNING, 2026-08-06: $2 and $3 are interpolated into single-quoted SQL below, so ONE APOSTROPHE IN YOUR TEXT BREAKS THE STATEMENT, and one pipe splits the args and truncates the body. Write the rule and the rationale with no apostrophes and no pipes. Do not drop the words you wanted; rephrase. THE REAL FIX IS BLOCKED ON THE OWNER. A bound-parameter writer (protoLawsEdit) was written and refused at commit because functions/_lib/fn_runners.js is listed in PROTECTED_FEATURES.md and no approval token can clear that. Until the owner removes the entry, this row stays raw SQL and the warning above is the only guard. The risk is not the loud failure: the same shape can end a string early and store a TRUNCATED law rather than refuse, and a governing law missing half its text is worse than no law.",
      "read": "https://miscsubjects.com/api/directory/LAWS_EDIT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LAWS_EDIT",
        "body": ""
      },
      "router_tag": "[LAWS_EDIT]args[/LAWS_EDIT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LAWS_GET",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "laws",
      "target": null,
      "description": "Read one law by key. Use when asked about a specific rule.",
      "read": "https://miscsubjects.com/api/directory/LAWS_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LAWS_GET",
        "body": ""
      },
      "router_tag": "[LAWS_GET]args[/LAWS_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LAWS_LIST",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "laws",
      "target": null,
      "description": "List all enabled laws with violation counts. Use when asked \"what are the rules\" or \"show me the laws\".",
      "read": "https://miscsubjects.com/api/directory/LAWS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LAWS_LIST",
        "body": ""
      },
      "router_tag": "[LAWS_LIST]args[/LAWS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LAWS_VIOLATION",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "laws",
      "target": null,
      "description": "Log a law violation. $1=law_key, $2=agent_id, $3=session_id, $4=trace_id, $5=what_happened, $6=mitigated(0/1). Auto-increments violation count.",
      "read": "https://miscsubjects.com/api/directory/LAWS_VIOLATION",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LAWS_VIOLATION",
        "body": ""
      },
      "router_tag": "[LAWS_VIOLATION]args[/LAWS_VIOLATION]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LBL_DAILY_EMAIL",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "lbl",
      "target": "POST https://miscsubjects.com/api/lbl/daily-email",
      "description": "WHAT: Compose and send the LBL nightly team report — a narrated read of yesterday for Loop Bio Labs, then each source speaking for itself: BigCommerce (store truth), Triple Whale (ad attribution with honest per-channel ROAS), Klaviyo (owned channels). Data is lbl.fyi's live /v1/today; a failed source reads \"unavailable\", never zero. WHEN_TO_USE: the nightly LBL automation fires; or the owner asks to send/preview the LBL daily report now. ARGS: mode. blank = send to settings.lbl_daily_recipients (owner-only until he approves the team format). dry = compose only, no send. EX: [LBL_DAILY_EMAIL]dry[/LBL_DAILY_EMAIL]",
      "read": "https://miscsubjects.com/api/directory/LBL_DAILY_EMAIL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LBL_DAILY_EMAIL",
        "body": ""
      },
      "router_tag": "[LBL_DAILY_EMAIL]args[/LBL_DAILY_EMAIL]",
      "input_schema": {
        "type": "object",
        "properties": {
          "mode": {
            "type": "string",
            "enum": [
              "",
              "dry"
            ],
            "description": "blank sends to settings.lbl_daily_recipients; dry composes without sending"
          }
        },
        "required": []
      },
      "examples": "[{\"body\": \"dry\", \"note\": \"compose tonight's email without sending\"}, {\"body\": \"\", \"note\": \"send now to the configured recipients\"}]",
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CONTACT_GET",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "leads",
      "target": "contactGet",
      "description": "WHAT: Get a lead as a canonical CONTACT object (channels, fit score, signals, provenance). ARGS: $1 = lead id or contact:<id>. EX: [CONTACT_GET]811[/CONTACT_GET]",
      "read": "https://miscsubjects.com/api/directory/CONTACT_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CONTACT_GET",
        "body": ""
      },
      "router_tag": "[CONTACT_GET]args[/CONTACT_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CONTACTS_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "leads",
      "target": "contactsList",
      "description": "WHAT: List contact objects with optional filter. ARGS: $1 = JSON {status?,segment?,city?,limit?} or a bare status word. EX: [CONTACTS_LIST]drafted[/CONTACTS_LIST]",
      "read": "https://miscsubjects.com/api/directory/CONTACTS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CONTACTS_LIST",
        "body": ""
      },
      "router_tag": "[CONTACTS_LIST]args[/CONTACTS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "EMAIL_SEND_TRACKED",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "leads",
      "target": "emailSendTracked",
      "description": "WHAT: Send a tracked email (open pixel + wrapped click links) and record it in email_sends. WHEN_TO_USE: any owner-authorized send where you want open/click visibility. ARGS: $1 = JSON {to, subject, body, kind?, lead_id?, from?, from_name?, reply_to?}. EX: [EMAIL_SEND_TRACKED]{\"to\":\"x@y.com\",\"subject\":\"hi\",\"body\":\"see https://leoresearch.com\"}[/EMAIL_SEND_TRACKED]",
      "read": "https://miscsubjects.com/api/directory/EMAIL_SEND_TRACKED",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "EMAIL_SEND_TRACKED",
        "body": ""
      },
      "router_tag": "[EMAIL_SEND_TRACKED]args[/EMAIL_SEND_TRACKED]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "EMAILS_SENT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "leads",
      "target": "emailsSent",
      "description": "WHAT: List recent sent emails with open/click engagement + totals (sent-email visibility). WHEN_TO_USE: see everything sent and who opened/clicked. ARGS: $1 = limit (default 50). EX: [EMAILS_SENT]50[/EMAILS_SENT]",
      "read": "https://miscsubjects.com/api/directory/EMAILS_SENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "EMAILS_SENT",
        "body": ""
      },
      "router_tag": "[EMAILS_SENT]args[/EMAILS_SENT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_DISCOVER_PLACES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "leads",
      "target": "leadsDiscoverPlaces",
      "description": "WHAT: Discover B2B leads via Google Places API (New) — med-spas/clinics/longevity by segment + city, with website/phone/rating. Better coverage than the Overpass source. Inserts into the leads table. WHEN_TO_USE: \"find medspas in Newport Beach\", building the wholesale target list. ARGS: $1=segment free text (e.g. \"medical spa\",\"longevity clinic\"), $2=city, $3=limit (default 40). EX: [LEADS_DISCOVER_PLACES]medical spa|Newport Beach|40[/LEADS_DISCOVER_PLACES]",
      "read": "https://miscsubjects.com/api/directory/LEADS_DISCOVER_PLACES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_DISCOVER_PLACES",
        "body": ""
      },
      "router_tag": "[LEADS_DISCOVER_PLACES]args[/LEADS_DISCOVER_PLACES]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_RESOLVE_SITES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "leads",
      "target": "leadsResolveSitesPlaces",
      "description": "WHAT: Backfill missing websites on siteless leads (NPPES rows have name + phone + address but never a website) so the enrichment crawler can reach them. Looks the practice up on Google Places BY PHONE NUMBER, then requires the Google name to share a word with the registry name before it writes anything — a phone that now answers for a billing company or an unrelated business is recorded as a mismatch and never written. Every attempt is stamped into notes as resolve:ok | name_mismatch | no_website | no_place, so a lead is only ever paid for once and the queue always advances. WHEN_TO_USE: after LEADS_DISCOVER_NPI, before enrichment. COST: $0.017 per Places request. Two requests per identified lead, one per unidentifiable one. ARGS: $1=limit (default 20, max 30). $2=segment LIKE filter, e.g. chiro (optional; blank = any segment). EX: [LEADS_RESOLVE_SITES]30|chiro[/LEADS_RESOLVE_SITES]",
      "read": "https://miscsubjects.com/api/directory/LEADS_RESOLVE_SITES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_RESOLVE_SITES",
        "body": ""
      },
      "router_tag": "[LEADS_RESOLVE_SITES]args[/LEADS_RESOLVE_SITES]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEDGER_ERRORS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "ledger",
      "target": "ledgerQuery",
      "description": "WHAT: Return the most recent ledger event whose own response starts with ERR. WHEN_TO_USE: the custodian asks for the last error, recent errors, or why something failed. ARGS: none. EX: [LEDGER_ERRORS][/LEDGER_ERRORS]",
      "read": "https://miscsubjects.com/api/directory/LEDGER_ERRORS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEDGER_ERRORS",
        "body": ""
      },
      "router_tag": "[LEDGER_ERRORS]args[/LEDGER_ERRORS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STATE_CARD",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "ledger",
      "target": "GET https://miscsubjects.com/api/cards?limit=$1",
      "description": "WHAT: Return assembled state cards from the ledger: message/input, tools, output, trace. WHEN_TO_USE: the custodian asks for a state card or the most recent turn card. ARGS: $1 = optional limit, default 1. EX: [STATE_CARD]1[/STATE_CARD]",
      "read": "https://miscsubjects.com/api/directory/STATE_CARD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STATE_CARD",
        "body": ""
      },
      "router_tag": "[STATE_CARD]args[/STATE_CARD]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GET_AGENT_LIMITS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "limits",
      "target": "getAgentLimits",
      "description": "WHAT: Read current agent limits: tool_loops, memory_window, depth_cap, cost_cap_usd. WHEN_TO_USE: the custodian asks \"what are my limits\" / \"what are your caps\". ARGS: none EX: [GET_AGENT_LIMITS][/GET_AGENT_LIMITS]",
      "read": "https://miscsubjects.com/api/directory/GET_AGENT_LIMITS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GET_AGENT_LIMITS",
        "body": ""
      },
      "router_tag": "[GET_AGENT_LIMITS]args[/GET_AGENT_LIMITS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SET_COST_CAP",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "limits",
      "target": "setAgentLimits",
      "description": "WHAT: Set per-turn USD cost cap (min 0.01). Arg: dollars. WHEN_TO_USE: the custodian says \"cheaper turns\" / \"cap cost at $0.50\". ARGS: $1 EX: [SET_COST_CAP]0.50[/SET_COST_CAP]",
      "read": "https://miscsubjects.com/api/directory/SET_COST_CAP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SET_COST_CAP",
        "body": ""
      },
      "router_tag": "[SET_COST_CAP]args[/SET_COST_CAP]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SET_DEPTH_CAP",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "limits",
      "target": "setAgentLimits",
      "description": "WHAT: Set max recursion depth (1-10). Arg: the number. WHEN_TO_USE: the custodian says \"deeper reasoning\" / \"only 2 levels deep\". ARGS: $1 EX: [SET_DEPTH_CAP]5[/SET_DEPTH_CAP]",
      "read": "https://miscsubjects.com/api/directory/SET_DEPTH_CAP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SET_DEPTH_CAP",
        "body": ""
      },
      "router_tag": "[SET_DEPTH_CAP]args[/SET_DEPTH_CAP]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SET_MEMORY_WINDOW",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "limits",
      "target": "setAgentLimits",
      "description": "WHAT: Set how many prior turns the agent recalls (0-100). Arg: the number. WHEN_TO_USE: the custodian says \"remember more messages\" / \"keep the last 30\". ARGS: $1 EX: [SET_MEMORY_WINDOW]30[/SET_MEMORY_WINDOW]",
      "read": "https://miscsubjects.com/api/directory/SET_MEMORY_WINDOW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SET_MEMORY_WINDOW",
        "body": ""
      },
      "router_tag": "[SET_MEMORY_WINDOW]args[/SET_MEMORY_WINDOW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SET_TOOL_LOOPS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "limits",
      "target": "setAgentLimits",
      "description": "WHAT: Set how many tool calls the agent may make per turn (1-40). Arg: the number. WHEN_TO_USE: the custodian says \"more tool loops\" / \"less tool loops\" / \"max 15 tools\". ARGS: $1 EX: [SET_TOOL_LOOPS]15[/SET_TOOL_LOOPS]",
      "read": "https://miscsubjects.com/api/directory/SET_TOOL_LOOPS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SET_TOOL_LOOPS",
        "body": ""
      },
      "router_tag": "[SET_TOOL_LOOPS]args[/SET_TOOL_LOOPS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CC_MIRROR",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "llm",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/CC_MIRROR",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CC_MIRROR",
        "body": ""
      },
      "router_tag": "[CC_MIRROR]args[/CC_MIRROR]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CODE_AUDIT",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "llm",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/CODE_AUDIT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CODE_AUDIT",
        "body": ""
      },
      "router_tag": "[CODE_AUDIT]args[/CODE_AUDIT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GEMINI_GENERATE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "llm",
      "target": "POST https://generativelanguage.googleapis.com/v1beta/models/gemini-2.5-flash:generateContent",
      "description": "WHAT: Generate text via Gemini 2.5 Flash. $1=plain text prompt. Use as a cheaper alternative to Grok for batch summarization WHEN_TO_USE: you need to gemini generate ARGS: see content EX: [GEMINI_GENERATE]arg1[/GEMINI_GENERATE]",
      "read": "https://miscsubjects.com/api/directory/GEMINI_GENERATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GEMINI_GENERATE",
        "body": ""
      },
      "router_tag": "[GEMINI_GENERATE]args[/GEMINI_GENERATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GW_MODELS",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "llm",
      "target": "GET https://gateway.ai.cloudflare.com/v1/$CF_ACCOUNT_ID/default/compat/models",
      "description": "WHAT: List every model available on the Cloudflare AI Gateway compat endpoint (162 models incl. claude-fable-5, deepseek-v4-pro). No args WHEN_TO_USE: you need to gw models ARGS: see content EX: [GW_MODELS][/GW_MODELS] List every model available on the Cloudflare AI Gateway compat endpoint (162 models incl. claude-fable-5, deepseek-v4-pro). No args.",
      "read": "https://miscsubjects.com/api/directory/GW_MODELS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GW_MODELS",
        "body": ""
      },
      "router_tag": "[GW_MODELS]args[/GW_MODELS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PANEL",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "llm",
      "target": "POST https://miscsubjects.com/api/panel",
      "description": "WHAT: Ask a panel of LLMs the same questions about one article. Body JSON: {article, questions[], models[]}. Default models GROK_CHAT, KIMI_CHAT, WORKERS_AI_CHAT WHEN_TO_USE: you need to panel ARGS: see content EX: [PANEL]arg1[/PANEL]",
      "read": "https://miscsubjects.com/api/directory/PANEL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PANEL",
        "body": ""
      },
      "router_tag": "[PANEL]args[/PANEL]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROVIDER_DOCS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "llm",
      "target": "GET https://docs.x.ai",
      "description": "WHAT: LLM/model provider documentation (external). On-hand copies via [PROVIDERS]<company>[/PROVIDERS] and [DOCS_GET]<slug>[/DOCS_GET] WHEN_TO_USE: you need to provider docs ARGS: see content EX: [PROVIDER_DOCS][/PROVIDER_DOCS] LLM/model provider documentation (external). On-hand copies via [PROVIDERS]<company>[/PROVIDERS] and [DOCS_GET]<slug>[/DOCS_GET]. xAI (Grok)   https://docs.x.ai            · console https://console.x.ai · mgmt https://management-api.x.ai · key GROK_API_KEY OpenAI       https://platform.openai.com/docs · pricing https://platform.openai.com/docs/pricing · key OPENAI_API_KEY Anthropic    https://platform.claude.com/docs · key ANTHROPIC_API_KEY Google Gemini https://ai.google.dev/gemini-api/docs · key GEMINI_API_KEY ArcAds       https://external-api.arcads.ai (images+video) · spec R2:docs/api/arcads/openapi-spec.json",
      "read": "https://miscsubjects.com/api/directory/PROVIDER_DOCS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROVIDER_DOCS",
        "body": ""
      },
      "router_tag": "[PROVIDER_DOCS]args[/PROVIDER_DOCS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROVIDERS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "llm",
      "target": "GET https://miscsubjects.com/api/providers/$1",
      "description": "WHAT: Provider/model registry — every company (xai|anthropic|openai|google), every model (text|image|video|stt|tts), with endpoint, api_key_name, every variable, cost in/out/cache, longest output, reasoning options, temperature range, and docs links. The on-hand API documentation behind the LLM-creation form WHEN_TO_USE: you need to providers ARGS: see content EX: [PROVIDERS]arg1[/PROVIDERS] INVOKE: [PROVIDERS][/PROVIDERS] full registry; [PROVIDERS]xai[/PROVIDERS] one company; arg $1 = company (or company/modality via REST). REST: GET https://miscsubjects.com/api/providers · /api/providers/anthropic · /api/providers/xai/video",
      "read": "https://miscsubjects.com/api/directory/PROVIDERS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROVIDERS",
        "body": ""
      },
      "router_tag": "[PROVIDERS]args[/PROVIDERS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_AIRDROP",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": "local",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: AirDrop a file from the Mac via osascript. ARGS: $1 = absolute file path.",
      "read": "https://miscsubjects.com/api/directory/LOCAL_AIRDROP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_AIRDROP",
        "body": ""
      },
      "router_tag": "[LOCAL_AIRDROP]args[/LOCAL_AIRDROP]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_BATTERY",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": "local",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: read battery % and AC power state on the Mac. ARGS: none. EX: [LOCAL_BATTERY][/LOCAL_BATTERY]",
      "read": "https://miscsubjects.com/api/directory/LOCAL_BATTERY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_BATTERY",
        "body": ""
      },
      "router_tag": "[LOCAL_BATTERY]args[/LOCAL_BATTERY]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_DICTATE_TO_PHONE",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": "local",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: TTS the text via macOS say(1) at the Mac speakers. ARGS: $1 = text, $2 = voice (optional, default Samantha).",
      "read": "https://miscsubjects.com/api/directory/LOCAL_DICTATE_TO_PHONE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_DICTATE_TO_PHONE",
        "body": ""
      },
      "router_tag": "[LOCAL_DICTATE_TO_PHONE]args[/LOCAL_DICTATE_TO_PHONE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_FOCUS",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": "local",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: read current Focus mode (do not disturb / work / etc) from defaults.",
      "read": "https://miscsubjects.com/api/directory/LOCAL_FOCUS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_FOCUS",
        "body": ""
      },
      "router_tag": "[LOCAL_FOCUS]args[/LOCAL_FOCUS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_NETWORK",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": "local",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: dump current network state (Wi-Fi SSID, IP, gateway). ARGS: none.",
      "read": "https://miscsubjects.com/api/directory/LOCAL_NETWORK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_NETWORK",
        "body": ""
      },
      "router_tag": "[LOCAL_NETWORK]args[/LOCAL_NETWORK]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_NOTIFY",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": "local",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: post a macOS Notification Center banner. ARGS: title|message|sound (optional). WHEN_TO_USE: bring eyes back to the Mac when something async finishes.",
      "read": "https://miscsubjects.com/api/directory/LOCAL_NOTIFY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_NOTIFY",
        "body": ""
      },
      "router_tag": "[LOCAL_NOTIFY]args[/LOCAL_NOTIFY]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_OPEN_APP",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": "local",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: open a macOS app by name. ARGS: $1 = app name (e.g. \"Safari\", \"Cursor\", \"Messages\").",
      "read": "https://miscsubjects.com/api/directory/LOCAL_OPEN_APP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_OPEN_APP",
        "body": ""
      },
      "router_tag": "[LOCAL_OPEN_APP]args[/LOCAL_OPEN_APP]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_OPEN_URL",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": "local",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: open a URL in the default browser. ARGS: $1 = url.",
      "read": "https://miscsubjects.com/api/directory/LOCAL_OPEN_URL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_OPEN_URL",
        "body": ""
      },
      "router_tag": "[LOCAL_OPEN_URL]args[/LOCAL_OPEN_URL]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_PASTEBOARD_PUSH_PHONE",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": "local",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: push text into Mac clipboard so Universal Clipboard syncs it to the iPhone. ARGS: $1 = text.",
      "read": "https://miscsubjects.com/api/directory/LOCAL_PASTEBOARD_PUSH_PHONE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_PASTEBOARD_PUSH_PHONE",
        "body": ""
      },
      "router_tag": "[LOCAL_PASTEBOARD_PUSH_PHONE]args[/LOCAL_PASTEBOARD_PUSH_PHONE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_SHORTCUTS_LIST",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": "local",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: list all Shortcuts on the Mac (`shortcuts list`).",
      "read": "https://miscsubjects.com/api/directory/LOCAL_SHORTCUTS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_SHORTCUTS_LIST",
        "body": ""
      },
      "router_tag": "[LOCAL_SHORTCUTS_LIST]args[/LOCAL_SHORTCUTS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_SHORTCUTS_RUN",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": "local",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: run a macOS/iOS Shortcut by name (`shortcuts run \"Name\"`). ARGS: $1 = name, $2 = input (optional). WHEN_TO_USE: invoke any shortcut the custodian saved (cross-syncs with iOS).",
      "read": "https://miscsubjects.com/api/directory/LOCAL_SHORTCUTS_RUN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_SHORTCUTS_RUN",
        "body": ""
      },
      "router_tag": "[LOCAL_SHORTCUTS_RUN]args[/LOCAL_SHORTCUTS_RUN]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_VOICE_RECORD",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": "local",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: record N seconds of mic to /tmp/voice-<ts>.m4a using ffmpeg, return path. ARGS: seconds (default 10).",
      "read": "https://miscsubjects.com/api/directory/LOCAL_VOICE_RECORD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_VOICE_RECORD",
        "body": ""
      },
      "router_tag": "[LOCAL_VOICE_RECORD]args[/LOCAL_VOICE_RECORD]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AGENT_TURNS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "log",
      "target": "d1Query",
      "description": "WHAT: last N agent turns across all CLI agents (claude, codex, grok, …). $1 = agent id or \"all\", $2 = limit (default 5). WHEN_TO_USE: \"what did codex do\", \"show agent turns\", cross-agent audit. EX: [AGENT_TURNS]claude|5[/AGENT_TURNS]  [AGENT_TURNS]all|10[/AGENT_TURNS]",
      "read": "https://miscsubjects.com/api/directory/AGENT_TURNS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AGENT_TURNS",
        "body": ""
      },
      "router_tag": "[AGENT_TURNS]args[/AGENT_TURNS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AGENT_TURNS_FILTER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "log",
      "target": "d1Query",
      "description": "WHAT: multi-filter agent turn query. $1=agent|all, $2=tag|risk|all, $3=limit. WHEN_TO_USE: cross-agent issue board, \"gemini risk turns\", audit backlog. EX: [AGENT_TURNS_FILTER]codex|risk|15[/AGENT_TURNS_FILTER]  [AGENT_TURNS_FILTER]all|unaudited|50[/AGENT_TURNS_FILTER]",
      "read": "https://miscsubjects.com/api/directory/AGENT_TURNS_FILTER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AGENT_TURNS_FILTER",
        "body": ""
      },
      "router_tag": "[AGENT_TURNS_FILTER]args[/AGENT_TURNS_FILTER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AGENT_TURNS_ISSUES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "log",
      "target": "d1Query",
      "description": "WHAT: agent turns matching issue tags (risk, protected, file_edit, unaudited, audit_fail). $1 = tag, $2 = limit. WHEN_TO_USE: \"show risky agent turns\", \"unaudited codex turns\", filterable issue triage. EX: [AGENT_TURNS_ISSUES]risk|20[/AGENT_TURNS_ISSUES]  [AGENT_TURNS_ISSUES]protected|10[/AGENT_TURNS_ISSUES]",
      "read": "https://miscsubjects.com/api/directory/AGENT_TURNS_ISSUES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AGENT_TURNS_ISSUES",
        "body": ""
      },
      "router_tag": "[AGENT_TURNS_ISSUES]args[/AGENT_TURNS_ISSUES]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AGENT_TURNS_TRACE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "log",
      "target": "d1Query",
      "description": "WHAT: agent turns linked to one ledger trace_id. $1 = trace_id, $2 = limit (default 20). WHEN_TO_USE: \"what CLI agents ran on this trace\", incident/debug linkage. EX: [AGENT_TURNS_TRACE]t_abc123|10[/AGENT_TURNS_TRACE]",
      "read": "https://miscsubjects.com/api/directory/AGENT_TURNS_TRACE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AGENT_TURNS_TRACE",
        "body": ""
      },
      "router_tag": "[AGENT_TURNS_TRACE]args[/AGENT_TURNS_TRACE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BLOOIO_LOGS_TAIL",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "log",
      "target": null,
      "description": "Last 20 blooio_logs rows. Use to find a recent inbound webhook or outbound SMS to inspect.",
      "read": "https://miscsubjects.com/api/directory/BLOOIO_LOGS_TAIL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BLOOIO_LOGS_TAIL",
        "body": ""
      },
      "router_tag": "[BLOOIO_LOGS_TAIL]args[/BLOOIO_LOGS_TAIL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CARDS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "log",
      "target": "GET https://miscsubjects.com/admin/ledger?cards=1&limit=10&card_id=$1",
      "description": "WHAT: Read the STATE CARDS. One card per isolated event: the inbound message (plain text), the reply (plain text), the agent system prompt, and every tool/CLI/file/http step with its raw payload in/out — each classified. Every card has a trace id (card_id) and a content hash, and is REST-callable WHEN_TO_USE: you need to cards ARGS: see content EX: [CARDS][/CARDS] Read the STATE CARDS. One card per isolated event: the inbound message (plain text), the reply (plain text), the agent system prompt, and every tool/CLI/file/http step with its raw payload in/out — each classified. Every card has a trace id (card_id) and a content hash, and is REST-callable. INVOKE: [CARDS][/CARDS] for the latest, or [CARDS]<card_id>[/CARDS] (e.g. t_dzncmzck or cc_42) for one card.",
      "read": "https://miscsubjects.com/api/directory/CARDS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CARDS",
        "body": ""
      },
      "router_tag": "[CARDS]args[/CARDS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "EVENTS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "log",
      "target": "GET https://miscsubjects.com/admin/ledger?data=1&limit=20&q=$1",
      "description": "WHAT: Read the raw EVENTS log — one row per call, newest first, chronological. Each row: source, key, action, status, request/response preview, trace id, step. $1 optional = text to search across key/action/payload WHEN_TO_USE: you need to events ARGS: see content EX: [EVENTS]arg1[/EVENTS] Read the raw EVENTS log — one row per call, newest first, chronological. Each row: source, key, action, status, request/response preview, trace id, step. $1 optional = text to search across key/action/payload. INVOKE: [EVENTS][/EVENTS] for the latest, or [EVENTS]<search text>[/EVENTS].",
      "read": "https://miscsubjects.com/api/directory/EVENTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "EVENTS",
        "body": ""
      },
      "router_tag": "[EVENTS]args[/EVENTS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GROK_LEDGER_TAIL",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "log",
      "target": null,
      "description": "Last N ledger rows with token/cost when present. Args: N (default 20). Shows source=grok API calls (cost from response_json.usage.cost_in_usd_ticks) and source=grok-cli SPEND rows (Grok Build / Cursor turns).",
      "read": "https://miscsubjects.com/api/directory/GROK_LEDGER_TAIL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GROK_LEDGER_TAIL",
        "body": ""
      },
      "router_tag": "[GROK_LEDGER_TAIL]args[/GROK_LEDGER_TAIL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOG_TAIL",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "log",
      "target": null,
      "description": "Last 50 kernel log rows. Use to inspect recent dispatch activity (trace + step tree).",
      "read": "https://miscsubjects.com/api/directory/LOG_TAIL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOG_TAIL",
        "body": ""
      },
      "router_tag": "[LOG_TAIL]args[/LOG_TAIL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LBL_GET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "loopdata",
      "target": "httpFetch",
      "description": "WHAT: GET a path on the loop data platform (api.lbl.fyi, the loop-api-worker). Arg: the path after the host, e.g. \"v4/health\" or \"2chat/contacts\" (slashes preserved). Returns raw JSON + status. fyi. If a path needs auth (401), use WEB_FETCH with the right header, or ask the custodian for the token WHEN_TO_USE: the custodian asks for data from the loop platform / lbl ARGS: $1 EX: [LBL_GET]arg1[/LBL_GET]",
      "read": "https://miscsubjects.com/api/directory/LBL_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LBL_GET",
        "body": ""
      },
      "router_tag": "[LBL_GET]args[/LBL_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LBL_POST",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "loopdata",
      "target": "httpFetch",
      "description": "WHAT: POST to the loop data platform (api.lbl.fyi).   For custom auth headers use WEB_FETCH WHEN_TO_USE: trigger/send something on the loop platform ARGS: path|json_body EX: [LBL_POST]arg1|arg2[/LBL_POST]",
      "read": "https://miscsubjects.com/api/directory/LBL_POST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LBL_POST",
        "body": ""
      },
      "router_tag": "[LBL_POST]args[/LBL_POST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LBL_VIEWER_GET",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "loopdata",
      "target": "lblViewerGet",
      "description": "WHAT: GET lbl.fyi viewer path. Uses LBL_VIEWER_PASS. EX: [LBL_VIEWER_GET]api/meta/creatives[/LBL_VIEWER_GET]",
      "read": "https://miscsubjects.com/api/directory/LBL_VIEWER_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LBL_VIEWER_GET",
        "body": ""
      },
      "router_tag": "[LBL_VIEWER_GET]args[/LBL_VIEWER_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ACCOUNTS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "marketing",
      "target": "metaAccounts",
      "description": "WHAT: Live Meta ad accounts via the loop-meta-bridge service binding. Lists every owned/authorized account and upserts them into meta_ad_accounts so the marketing surface + Site Sync stay current. Read-only; never spends. WHEN_TO_USE: \"what ad accounts do I have\", \"sync my meta accounts\", refresh the ad-account list. ARGS: none. EX: [META_ACCOUNTS][/META_ACCOUNTS]",
      "read": "https://miscsubjects.com/api/directory/META_ACCOUNTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ACCOUNTS",
        "body": ""
      },
      "router_tag": "[META_ACCOUNTS]args[/META_ACCOUNTS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_ACCOUNT_GET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/account-get",
      "description": "WHAT: Get one ad account: status, currency, spend, balance, spend_cap, funding, capabilities. ARGS: JSON {account_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_ACCOUNT_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_ACCOUNT_GET",
        "body": ""
      },
      "router_tag": "[META_ADS_ACCOUNT_GET]args[/META_ADS_ACCOUNT_GET]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_ACCOUNTS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/accounts",
      "description": "WHAT: List all ad accounts (owned + client + authorized) with status, currency, spend. ARGS: JSON {} (no args). TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_ACCOUNTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_ACCOUNTS",
        "body": ""
      },
      "router_tag": "[META_ADS_ACCOUNTS]args[/META_ADS_ACCOUNTS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_ACTIVITIES",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/activities",
      "description": "WHAT: Activity log for an ad account (Ads Manager change history). ARGS: JSON {account_id, limit?}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_ACTIVITIES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_ACTIVITIES",
        "body": ""
      },
      "router_tag": "[META_ADS_ACTIVITIES]args[/META_ADS_ACTIVITIES]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_AD_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/ad-create",
      "description": "WHAT: Create an ad (defaults status PAUSED). ARGS: JSON {account_id, name, adset_id, creative:{creative_id}}. TESTS: Write op; requires act auth; create ops default status PAUSED (no spend until activated). Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_AD_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_AD_CREATE",
        "body": ""
      },
      "router_tag": "[META_ADS_AD_CREATE]args[/META_ADS_AD_CREATE]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_AD_UPDATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/ad-update",
      "description": "WHAT: Update an ad (status, creative, name). ARGS: JSON {ad_id|id, params:{...}}. TESTS: Write op; requires act auth; create ops default status PAUSED (no spend until activated). Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_AD_UPDATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_AD_UPDATE",
        "body": ""
      },
      "router_tag": "[META_ADS_AD_UPDATE]args[/META_ADS_AD_UPDATE]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_ADS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/ads",
      "description": "WHAT: List ads in an ad account (id,name,status,effective_status,adset_id,campaign_id,creative). ARGS: JSON {account_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_ADS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_ADS",
        "body": ""
      },
      "router_tag": "[META_ADS_ADS]args[/META_ADS_ADS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_ADSET_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/adset-create",
      "description": "WHAT: Create an ad set (defaults status PAUSED). ARGS: JSON {account_id, name, campaign_id, optimization_goal, billing_event, daily_budget?|lifetime_budget?, targeting?, bid_amount?, promoted_object?, start_time?, end_time?}. TESTS: Write op; requires act auth; create ops default status PAUSED (no spend until activated). Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_ADSET_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_ADSET_CREATE",
        "body": ""
      },
      "router_tag": "[META_ADS_ADSET_CREATE]args[/META_ADS_ADSET_CREATE]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_ADSET_UPDATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/adset-update",
      "description": "WHAT: Update an ad set (status, budget, targeting, bid). ARGS: JSON {adset_id|id, params:{...}}. TESTS: Write op; requires act auth; create ops default status PAUSED (no spend until activated). Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_ADSET_UPDATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_ADSET_UPDATE",
        "body": ""
      },
      "router_tag": "[META_ADS_ADSET_UPDATE]args[/META_ADS_ADSET_UPDATE]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_ADSETS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/adsets",
      "description": "WHAT: List ad sets in an ad account (id,name,status,budget,campaign_id,effective_status). ARGS: JSON {account_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_ADSETS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_ADSETS",
        "body": ""
      },
      "router_tag": "[META_ADS_ADSETS]args[/META_ADS_ADSETS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_AUDIENCE_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/audience-create",
      "description": "WHAT: Create a custom audience (website/customer-list/engagement). ARGS: JSON {account_id, name, subtype, rule?|customer_file_source?, description?, retention_days?}. TESTS: Write op; requires act auth; create ops default status PAUSED (no spend until activated). Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_AUDIENCE_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_AUDIENCE_CREATE",
        "body": ""
      },
      "router_tag": "[META_ADS_AUDIENCE_CREATE]args[/META_ADS_AUDIENCE_CREATE]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_AUDIENCES",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/audiences",
      "description": "WHAT: List custom audiences (subtype, size, operation_status). ARGS: JSON {account_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_AUDIENCES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_AUDIENCES",
        "body": ""
      },
      "router_tag": "[META_ADS_AUDIENCES]args[/META_ADS_AUDIENCES]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_BUDGET_SET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/budget-set",
      "description": "WHAT: Set daily or lifetime budget (minor units / cents) on a campaign or ad set. ARGS: JSON {id, daily_budget?|lifetime_budget?}. TESTS: Write op; requires act auth; create ops default status PAUSED (no spend until activated). Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_BUDGET_SET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_BUDGET_SET",
        "body": ""
      },
      "router_tag": "[META_ADS_BUDGET_SET]args[/META_ADS_BUDGET_SET]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_BUSINESSES",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/businesses",
      "description": "WHAT: List every Business Manager the user can access (id, name, verification_status). ARGS: JSON {} (no args). TESTS: Read op; live /me/businesses.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_BUSINESSES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_BUSINESSES",
        "body": ""
      },
      "router_tag": "[META_ADS_BUSINESSES]args[/META_ADS_BUSINESSES]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_CAMPAIGN_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/campaign-create",
      "description": "WHAT: Create a campaign (defaults status PAUSED so it does not spend until activated). ARGS: JSON {account_id, name, objective, status?, special_ad_categories?, buying_type?, bid_strategy?, daily_budget?, lifetime_budget?}. TESTS: Write op; requires act auth; create ops default status PAUSED (no spend until activated). Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_CAMPAIGN_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_CAMPAIGN_CREATE",
        "body": ""
      },
      "router_tag": "[META_ADS_CAMPAIGN_CREATE]args[/META_ADS_CAMPAIGN_CREATE]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_CAMPAIGN_UPDATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/campaign-update",
      "description": "WHAT: Update a campaign (name, status, budget, bid_strategy). ARGS: JSON {campaign_id|id, params:{...}}. TESTS: Write op; requires act auth; create ops default status PAUSED (no spend until activated). Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_CAMPAIGN_UPDATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_CAMPAIGN_UPDATE",
        "body": ""
      },
      "router_tag": "[META_ADS_CAMPAIGN_UPDATE]args[/META_ADS_CAMPAIGN_UPDATE]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_CAMPAIGNS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/campaigns",
      "description": "WHAT: List campaigns in an ad account (id,name,status,objective,budgets,times). ARGS: JSON {account_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_CAMPAIGNS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_CAMPAIGNS",
        "body": ""
      },
      "router_tag": "[META_ADS_CAMPAIGNS]args[/META_ADS_CAMPAIGNS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_CATALOG_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/catalog-create",
      "description": "WHAT: Create a product catalog on the business. ARGS: JSON {name, vertical?}. TESTS: Write op; requires act auth; create ops default status PAUSED (no spend until activated). Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_CATALOG_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_CATALOG_CREATE",
        "body": ""
      },
      "router_tag": "[META_ADS_CATALOG_CREATE]args[/META_ADS_CATALOG_CREATE]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_CATALOG_DIAGNOSTICS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/catalog-diagnostics",
      "description": "WHAT: Catalog diagnostics: data feed and item visibility issues. ARGS: JSON {catalog_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_CATALOG_DIAGNOSTICS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_CATALOG_DIAGNOSTICS",
        "body": ""
      },
      "router_tag": "[META_ADS_CATALOG_DIAGNOSTICS]args[/META_ADS_CATALOG_DIAGNOSTICS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_CATALOG_FEEDS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/catalog-feeds",
      "description": "WHAT: List data feeds in a catalog (schedule, latest_upload). ARGS: JSON {catalog_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_CATALOG_FEEDS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_CATALOG_FEEDS",
        "body": ""
      },
      "router_tag": "[META_ADS_CATALOG_FEEDS]args[/META_ADS_CATALOG_FEEDS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_CATALOG_GET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/catalog-get",
      "description": "WHAT: Get a product catalog (product_count, vertical, feed_count). ARGS: JSON {catalog_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_CATALOG_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_CATALOG_GET",
        "body": ""
      },
      "router_tag": "[META_ADS_CATALOG_GET]args[/META_ADS_CATALOG_GET]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_CATALOG_PRODUCT_SETS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/catalog-product-sets",
      "description": "WHAT: List product sets in a catalog. ARGS: JSON {catalog_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_CATALOG_PRODUCT_SETS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_CATALOG_PRODUCT_SETS",
        "body": ""
      },
      "router_tag": "[META_ADS_CATALOG_PRODUCT_SETS]args[/META_ADS_CATALOG_PRODUCT_SETS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_CATALOG_PRODUCTS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/catalog-products",
      "description": "WHAT: List products in a catalog (retailer_id,availability,price,review_status,visibility). ARGS: JSON {catalog_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_CATALOG_PRODUCTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_CATALOG_PRODUCTS",
        "body": ""
      },
      "router_tag": "[META_ADS_CATALOG_PRODUCTS]args[/META_ADS_CATALOG_PRODUCTS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_CATALOGS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/catalogs",
      "description": "WHAT: List product catalogs on the business. ARGS: JSON {} (no args). TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_CATALOGS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_CATALOGS",
        "body": ""
      },
      "router_tag": "[META_ADS_CATALOGS]args[/META_ADS_CATALOGS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_CREATIVE_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/creative-create",
      "description": "WHAT: Create an ad creative. ARGS: JSON {account_id, name, object_story_spec|object_story_id|asset_feed_spec}. TESTS: Write op; requires act auth; create ops default status PAUSED (no spend until activated). Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_CREATIVE_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_CREATIVE_CREATE",
        "body": ""
      },
      "router_tag": "[META_ADS_CREATIVE_CREATE]args[/META_ADS_CREATIVE_CREATE]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_CREATIVES",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/creatives",
      "description": "WHAT: List ad creatives (title,body,image_url,object_story_spec,cta,link). ARGS: JSON {account_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_CREATIVES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_CREATIVES",
        "body": ""
      },
      "router_tag": "[META_ADS_CREATIVES]args[/META_ADS_CREATIVES]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_DATASET_STATS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/dataset-stats",
      "description": "WHAT: Signal health/quality stats for a pixel/dataset. ARGS: JSON {pixel_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_DATASET_STATS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_DATASET_STATS",
        "body": ""
      },
      "router_tag": "[META_ADS_DATASET_STATS]args[/META_ADS_DATASET_STATS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_DELIVERY_ESTIMATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/delivery-estimate",
      "description": "WHAT: Estimated daily reach for a targeting spec + optimization goal. ARGS: JSON {account_id, optimization_goal, targeting_spec}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_DELIVERY_ESTIMATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_DELIVERY_ESTIMATE",
        "body": ""
      },
      "router_tag": "[META_ADS_DELIVERY_ESTIMATE]args[/META_ADS_DELIVERY_ESTIMATE]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_IMAGES",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/images",
      "description": "WHAT: List ad images (name,url,hash,dimensions). ARGS: JSON {account_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_IMAGES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_IMAGES",
        "body": ""
      },
      "router_tag": "[META_ADS_IMAGES]args[/META_ADS_IMAGES]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_INSIGHTS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/insights",
      "description": "WHAT: Comprehensive reporting: insights at account/campaign/adset/ad level with fields, breakdowns, date_preset or time_range, attribution windows, filtering. ARGS: JSON {object_id|account_id, level?, fields?, breakdowns?, date_preset?, time_range?, time_increment?, action_attribution_windows?, filtering?}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_INSIGHTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_INSIGHTS",
        "body": ""
      },
      "router_tag": "[META_ADS_INSIGHTS]args[/META_ADS_INSIGHTS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_INSIGHTS_ASYNC_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/insights-async-create",
      "description": "WHAT: Start an async insights report job (large pulls). ARGS: JSON {object_id|account_id, level?, fields?, breakdowns?, date_preset?|time_range?}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_INSIGHTS_ASYNC_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_INSIGHTS_ASYNC_CREATE",
        "body": ""
      },
      "router_tag": "[META_ADS_INSIGHTS_ASYNC_CREATE]args[/META_ADS_INSIGHTS_ASYNC_CREATE]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_INSIGHTS_ASYNC_RESULT",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/insights-async-result",
      "description": "WHAT: Read a completed async insights report. ARGS: JSON {report_run_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_INSIGHTS_ASYNC_RESULT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_INSIGHTS_ASYNC_RESULT",
        "body": ""
      },
      "router_tag": "[META_ADS_INSIGHTS_ASYNC_RESULT]args[/META_ADS_INSIGHTS_ASYNC_RESULT]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_INSIGHTS_ASYNC_STATUS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/insights-async-status",
      "description": "WHAT: Poll an async insights report job. ARGS: JSON {report_run_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_INSIGHTS_ASYNC_STATUS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_INSIGHTS_ASYNC_STATUS",
        "body": ""
      },
      "router_tag": "[META_ADS_INSIGHTS_ASYNC_STATUS]args[/META_ADS_INSIGHTS_ASYNC_STATUS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_LOOKALIKE_CREATE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/lookalike-create",
      "description": "WHAT: Create a lookalike audience from a source custom audience. ARGS: JSON {account_id, name, origin_audience_id, country?, ratio?}. TESTS: Write op; requires act auth; create ops default status PAUSED (no spend until activated). Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_LOOKALIKE_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_LOOKALIKE_CREATE",
        "body": ""
      },
      "router_tag": "[META_ADS_LOOKALIKE_CREATE]args[/META_ADS_LOOKALIKE_CREATE]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_MCP_CALL",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/mcp-call",
      "description": "WHAT: Call any tool on Metas hosted Ads MCP server by name (live proxy). ARGS: JSON {name, arguments:{...}}. TESTS: Write op; requires act auth; create ops default status PAUSED (no spend until activated). Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_MCP_CALL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_MCP_CALL",
        "body": ""
      },
      "router_tag": "[META_ADS_MCP_CALL]args[/META_ADS_MCP_CALL]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_MCP_TOOLS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/mcp-tools",
      "description": "WHAT: List every tool exposed by Metas hosted Ads MCP server (live proxy to mcp.facebook.com/ads). ARGS: JSON {} (no args). TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_MCP_TOOLS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_MCP_TOOLS",
        "body": ""
      },
      "router_tag": "[META_ADS_MCP_TOOLS]args[/META_ADS_MCP_TOOLS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_OBJECT_DELETE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/object-delete",
      "description": "WHAT: Delete a campaign, ad set, ad or creative. ARGS: JSON {id}. TESTS: Write op; requires act auth; create ops default status PAUSED (no spend until activated). Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_OBJECT_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_OBJECT_DELETE",
        "body": ""
      },
      "router_tag": "[META_ADS_OBJECT_DELETE]args[/META_ADS_OBJECT_DELETE]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_OBJECT_GET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/object-get",
      "description": "WHAT: Get any Graph node by id with a fields list. ARGS: JSON {id, fields?}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_OBJECT_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_OBJECT_GET",
        "body": ""
      },
      "router_tag": "[META_ADS_OBJECT_GET]args[/META_ADS_OBJECT_GET]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_PAGES",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/pages",
      "description": "WHAT: List every Facebook Page the user manages (id, name, category). ARGS: JSON {} (no args). TESTS: Read op; live /me/accounts.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_PAGES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_PAGES",
        "body": ""
      },
      "router_tag": "[META_ADS_PAGES]args[/META_ADS_PAGES]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_PIXELS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/pixels",
      "description": "WHAT: List ad account pixels/datasets (last_fired_time, availability, matching). ARGS: JSON {account_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_PIXELS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_PIXELS",
        "body": ""
      },
      "router_tag": "[META_ADS_PIXELS]args[/META_ADS_PIXELS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_PORTFOLIO",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/portfolio",
      "description": "WHAT: Whole-portfolio rollup: every ad account with spend, total historical spend, spend-by-business, businesses and pages. ARGS: JSON {} (no args). TESTS: Read op; live Meta Graph read across /me/adaccounts + /me/businesses + /me/accounts.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_PORTFOLIO",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_PORTFOLIO",
        "body": ""
      },
      "router_tag": "[META_ADS_PORTFOLIO]args[/META_ADS_PORTFOLIO]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_STATUS_SET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/status-set",
      "description": "WHAT: Pause/activate/archive any campaign, ad set or ad. ARGS: JSON {id, status:ACTIVE|PAUSED|ARCHIVED}. TESTS: Write op; requires act auth; create ops default status PAUSED (no spend until activated). Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_STATUS_SET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_STATUS_SET",
        "body": ""
      },
      "router_tag": "[META_ADS_STATUS_SET]args[/META_ADS_STATUS_SET]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_STUDIES",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/studies",
      "description": "WHAT: List A/B tests and conversion-lift studies on the business. ARGS: JSON {} (no args). TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_STUDIES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_STUDIES",
        "body": ""
      },
      "router_tag": "[META_ADS_STUDIES]args[/META_ADS_STUDIES]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_STUDY_GET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/study-get",
      "description": "WHAT: Get an A/B test / lift study (cells, objectives, status). ARGS: JSON {study_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_STUDY_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_STUDY_GET",
        "body": ""
      },
      "router_tag": "[META_ADS_STUDY_GET]args[/META_ADS_STUDY_GET]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_TARGETING_BROWSE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/targeting-browse",
      "description": "WHAT: Browse the targeting interest taxonomy. ARGS: JSON {limit?}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_TARGETING_BROWSE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_TARGETING_BROWSE",
        "body": ""
      },
      "router_tag": "[META_ADS_TARGETING_BROWSE]args[/META_ADS_TARGETING_BROWSE]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_TARGETING_SEARCH",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/targeting-search",
      "description": "WHAT: Search targeting: interests, behaviors, demographics, employers, schools. ARGS: JSON {q, type?, class?, limit?}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_TARGETING_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_TARGETING_SEARCH",
        "body": ""
      },
      "router_tag": "[META_ADS_TARGETING_SEARCH]args[/META_ADS_TARGETING_SEARCH]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_ADS_VIDEOS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "marketing",
      "target": "POST https://miscsubjects.com/api/marketing/meta/videos",
      "description": "WHAT: List ad videos (title,description,length,thumbnails). ARGS: JSON {account_id}. TESTS: Read op; live Meta Graph read. Full op index: GET/POST /api/marketing/meta.",
      "read": "https://miscsubjects.com/api/directory/META_ADS_VIDEOS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_ADS_VIDEOS",
        "body": ""
      },
      "router_tag": "[META_ADS_VIDEOS]args[/META_ADS_VIDEOS]",
      "input_schema": {
        "type": "object"
      },
      "examples": "[]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_HEALTH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "marketing",
      "target": "metaHealth",
      "description": "WHAT: Bridge + token health — confirms the Meta token is bound and does a live /me ping. Surfaces permission errors (e.g. missing ads_read) plainly. WHEN_TO_USE: \"is meta connected\", debugging why insights are empty. ARGS: none. EX: [META_HEALTH][/META_HEALTH]",
      "read": "https://miscsubjects.com/api/directory/META_HEALTH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_HEALTH",
        "body": ""
      },
      "router_tag": "[META_HEALTH]args[/META_HEALTH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_INSIGHTS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "marketing",
      "target": "metaInsights",
      "description": "WHAT: Per-account Meta performance (spend, impressions, clicks, purchases, ROAS) for a date preset, via the loop-meta-bridge. Read-only. WHEN_TO_USE: \"how are my ads doing\", \"meta spend this week\", reconcile ad spend against sales. ARGS: $1 = date preset (today|yesterday|last_7d|last_14d|last_30d|last_90d, default last_7d). $2 = optional comma-separated act_ ids. EX: [META_INSIGHTS]last_7d[/META_INSIGHTS]",
      "read": "https://miscsubjects.com/api/directory/META_INSIGHTS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_INSIGHTS",
        "body": ""
      },
      "router_tag": "[META_INSIGHTS]args[/META_INSIGHTS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MCP",
      "object_type": "mcp",
      "runner": "mac",
      "directory_type": "http",
      "category": "mcp",
      "target": "target_map:{\"add\":{\"method\":\"POST\",\"url\":\"https://agent.miscsubjects.com/exec\",\"body\":\"{\\\"cmd\\\":\\\"sh\\\",\\\"args\\\":[\\\"-lc\\\",\\\"~/.grok/bin/grok mcp add $1 --command $2 --args $3+ 2>&1\\\"],\\\"timeout\\\":120000}\"},\"brave_search\":{\"method\":\"GET\",\"url\":\"noop\",\"body\":\"[\\\"MCP_BRAVE_SEARCH not wired. Needs BRAVE_API_KEY. Grok web_search already covers this.\\\"]\"},\"computer_use\":{\"method\":\"GET\",\"url\":\"noop\",\"body\":\"[\\\"MCP_COMPUTER_USE not wired. Needs ANTHROPIC_API_KEY + VM. DESKTOP_* rows cover the Mac.\\\"]\"},\"doctor\":{\"method\":\"POST\",\"url\":\"https://agent.miscsubjects.com/exec\",\"body\":\"{\\\"cmd\\\":\\\"sh\\\",\\\"args\\\":[\\\"-lc\\\",\\\"~/.grok/bin/grok mcp doctor $1 2>&1\\\"],\\\"timeout\\\":120000}\"},\"fetch\":{\"method\":\"GET\",\"url\":\"noop\",\"body\":\"[\\\"MCP_FETCH not wired. Run [MCP_PROBE]fetch|npx -y @modelcontextprotocol/server-fetch[/MCP_PROBE]. BROWSER_FETCH already fetches URLs.\\\"]\"},\"fs\":{\"method\":\"GET\",\"url\":\"noop\",\"body\":\"[\\\"MCP_FS not wired. Run [MCP_PROBE]fs|npx -y @modelcontextprotocol/server-filesystem /Users/[custodian][/MCP_PROBE]. LOCAL_READ/LOCAL_WRITE/LOCAL_LIST already cover files.\\\"]\"},\"github\":{\"method\":\"GET\",\"url\":\"noop\",\"body\":\"[\\\"MCP_GITHUB not wired. Run [MCP_PROBE]github|npx -y @modelcontextprotocol/server-github[/MCP_PROBE]. CLI_GH + GITHUB_* rows already cover GitHub.\\\"]\"},\"list\":{\"method\":\"POST\",\"url\":\"https://agent.miscsubjects.com/exec\",\"body\":\"{\\\"cmd\\\":\\\"sh\\\",\\\"args\\\":[\\\"-lc\\\",\\\"~/.grok/bin/grok mcp list 2>&1\\\"],\\\"timeout\\\":60000}\"},\"memory\":{\"method\":\"GET\",\"url\":\"noop\",\"body\":\"[\\\"MCP_MEMORY not wired. Run [MCP_PROBE]memory|npx -y @modelcontextprotocol/server-memory[/MCP_PROBE]. KV_* rows already persist state.\\\"]\"},\"playwright\":{\"method\":\"GET\",\"url\":\"noop\",\"body\":\"[\\\"MCP_PLAYWRIGHT not wired. Run [MCP_PROBE]playwright|npx -y @playwright/mcp[/MCP_PROBE]. BROWSER_PLAYWRIGHT covers one-shot use.\\\"]\"},\"probe\":{\"method\":\"GET\",\"url\":\"\",\"body\":\"MCP_ADD:$1|$2|$3+ > MCP_TEST:$1 > SCOUT:Here is grok mcp doctor output for the MCP server named $1. For each tool it exposes, ADD_ROW a row keyed MCP_$1_<tool> that invokes it, then report what you added in REPLY. Output follows. $PREV\"},\"sequential\":{\"method\":\"GET\",\"url\":\"noop\",\"body\":\"[\\\"MCP_SEQUENTIAL not wired. Run [MCP_PROBE]seq|npx -y @modelcontextprotocol/server-sequential-thinking[/MCP_PROBE].\\\"]\"},\"test\":{\"method\":\"POST\",\"url\":\"https://agent.miscsubjects.com/exec\",\"body\":\"{\\\"cmd\\\":\\\"sh\\\",\\\"args\\\":[\\\"-lc\\\",\\\"~/.grok/bin/grok mcp doctor $1 2>&1\\\"],\\\"timeout\\\":120000}\"},\"context7_query_docs\":{\"method\":\"POST\",\"url\":\"https://mcp.context7.com/mcp\",\"body\":\"{\\\"method\\\":\\\"tools/call\\\",\\\"params\\\":{\\\"name\\\":\\\"query-docs\\\",\\\"arguments\\\":{\\\"libraryId\\\":\\\"$1\\\",\\\"query\\\":\\\"$2\\\"}}}\"},\"context7_resolve_library_id\":{\"method\":\"POST\",\"url\":\"https://mcp.context7.com/mcp\",\"body\":\"{\\\"method\\\":\\\"tools/call\\\",\\\"params\\\":{\\\"name\\\":\\\"resolve-library-id\\\",\\\"arguments\\\":{\\\"query\\\":\\\"$1\\\",\\\"libraryName\\\":\\\"$2\\\"}}}\"}}",
      "description": "WHAT: MCP server unified entrypoint via Mac bridge WHEN_TO_USE: MCP servers (brave_search, computer_use, doctor, fetch, etc.) ARGS: $1=op, $2..$N=args EX: [MCP]fetch|https://example.com[/MCP] TESTS: INVERSE: ERR:target_map:unknown_op on bad op.",
      "read": "https://miscsubjects.com/api/directory/MCP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MCP",
        "body": ""
      },
      "router_tag": "[MCP]args[/MCP]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MCP_AGENT",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "mcp",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/MCP_AGENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MCP_AGENT",
        "body": ""
      },
      "router_tag": "[MCP_AGENT]args[/MCP_AGENT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MCP_ATTACH",
      "object_type": "mcp",
      "runner": "fn",
      "directory_type": "fn",
      "category": "mcp",
      "target": "mcpAttachSet",
      "description": "WHAT: Set which MCP servers attach to the model globally (KV mcp_attach). Per-agent override = SET <KEY>_mcp. WHEN_TO_USE: turn Cloudflare MCP tools on/off for the agents ARGS: comma list of labels (empty clears). EX: [MCP_ATTACH]bindings,docs,observability[/MCP_ATTACH]",
      "read": "https://miscsubjects.com/api/directory/MCP_ATTACH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MCP_ATTACH",
        "body": ""
      },
      "router_tag": "[MCP_ATTACH]args[/MCP_ATTACH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MCP_EVAL",
      "object_type": "mcp",
      "runner": "edge",
      "directory_type": "fn",
      "category": "mcp",
      "target": "mcpEval",
      "description": "WHAT: Try an integration before installing it. Resolves the named integration to its OIP objects, classifies read vs write, runs one safe read-only trial, returns a receipt, and recommends connect or skip. WHEN_TO_USE: \"should I get the Stripe MCP\", \"what can the GitHub integration do\", \"try X before I connect it\". ARGS: $1 = integration name (stripe|github|context7|drive|slack|notion); $2 = optional mode \"live\" to run a live read-only trial for financial integrations. EX: [MCP_EVAL]github[/MCP_EVAL]",
      "read": "https://miscsubjects.com/api/directory/MCP_EVAL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MCP_EVAL",
        "body": ""
      },
      "router_tag": "[MCP_EVAL]args[/MCP_EVAL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MCP_OAUTH_SEED",
      "object_type": "mcp",
      "runner": "fn",
      "directory_type": "fn",
      "category": "mcp",
      "target": "mcpOauthSeed",
      "description": "WHAT: Store/replace one MCP server's OAuth credentials in KV (mcp_oauth:<label>). The build refreshes the short-lived token itself. WHEN_TO_USE: registering a Cloudflare (or any OAuth) MCP server so agents can use it ARGS: label|json   json={\"server_url\",\"token_endpoint\",\"client_id\",\"refresh_token\"} EX: [MCP_OAUTH_SEED]bindings|{\"server_url\":\"https://bindings.mcp.cloudflare.com/sse\",...}[/MCP_OAUTH_SEED]",
      "read": "https://miscsubjects.com/api/directory/MCP_OAUTH_SEED",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MCP_OAUTH_SEED",
        "body": ""
      },
      "router_tag": "[MCP_OAUTH_SEED]args[/MCP_OAUTH_SEED]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MCP_STATUS",
      "object_type": "mcp",
      "runner": "fn",
      "directory_type": "fn",
      "category": "mcp",
      "target": "mcpList",
      "description": "WHAT: List every seeded MCP server, its token freshness (seconds left), and the current attach list. WHEN_TO_USE: check what MCP servers are wired and whether tokens are valid ARGS: none. EX: [MCP_STATUS][/MCP_STATUS]",
      "read": "https://miscsubjects.com/api/directory/MCP_STATUS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MCP_STATUS",
        "body": ""
      },
      "router_tag": "[MCP_STATUS]args[/MCP_STATUS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TRY_GITHUB_MCP",
      "object_type": "mcp",
      "runner": "edge",
      "directory_type": "fn",
      "category": "mcp",
      "target": "tryGithubMcp",
      "description": "WHAT: Try the GitHub integration before connecting it. Runs a safe read-only trial (list issues) and returns a receipt. WHEN_TO_USE: \"should I get GitHub MCP\", \"what would GitHub let an agent do\". ARGS: none EX: [TRY_GITHUB_MCP][/TRY_GITHUB_MCP]",
      "read": "https://miscsubjects.com/api/directory/TRY_GITHUB_MCP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TRY_GITHUB_MCP",
        "body": ""
      },
      "router_tag": "[TRY_GITHUB_MCP]args[/TRY_GITHUB_MCP]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TRY_STRIPE_MCP",
      "object_type": "mcp",
      "runner": "edge",
      "directory_type": "fn",
      "category": "mcp",
      "target": "tryStripeMcp",
      "description": "WHAT: Try the Stripe integration before connecting it. Shows the read and write objects Stripe exposes here and recommends connect or skip. Financial: the live read-only account check runs only in mode \"live\". WHEN_TO_USE: \"should I get Stripe MCP\", \"what would Stripe let an agent do\". ARGS: $1 = optional mode \"live\" EX: [TRY_STRIPE_MCP][/TRY_STRIPE_MCP]",
      "read": "https://miscsubjects.com/api/directory/TRY_STRIPE_MCP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TRY_STRIPE_MCP",
        "body": ""
      },
      "router_tag": "[TRY_STRIPE_MCP]args[/TRY_STRIPE_MCP]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MARKETING_SNAPSHOT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "meta",
      "target": "marketingSnapshot",
      "description": "WHAT: Live Meta + lbl cache + MARKETING_STATE JSON. EX: [MARKETING_SNAPSHOT][/MARKETING_SNAPSHOT]",
      "read": "https://miscsubjects.com/api/directory/MARKETING_SNAPSHOT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MARKETING_SNAPSHOT",
        "body": ""
      },
      "router_tag": "[MARKETING_SNAPSHOT]args[/MARKETING_SNAPSHOT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "meta",
      "target": "target_map:{\"me\":{\"method\":\"GET\",\"url\":\"https://graph.facebook.com/v22.0/me?fields=id,name\"},\"ad_accounts\":{\"method\":\"GET\",\"url\":\"https://graph.facebook.com/v22.0/$1/adaccounts?fields=id,account_id,name,account_status,currency,timezone_name&limit=200\"},\"owned_ad_accounts\":{\"method\":\"GET\",\"url\":\"https://graph.facebook.com/v22.0/$1/owned_ad_accounts?fields=id,account_id,name,account_status,currency,timezone_name&limit=200\"},\"client_ad_accounts\":{\"method\":\"GET\",\"url\":\"https://graph.facebook.com/v22.0/$1/client_ad_accounts?fields=id,account_id,name,account_status,currency,timezone_name&limit=200\"},\"campaigns\":{\"method\":\"GET\",\"url\":\"https://graph.facebook.com/v22.0/$1/campaigns?fields=id,name,status,objective,daily_budget,lifetime_budget&limit=250\"},\"adsets\":{\"method\":\"GET\",\"url\":\"https://graph.facebook.com/v22.0/$1/adsets?fields=id,name,status,daily_budget,campaign_id,effective_status&limit=250\"},\"ads\":{\"method\":\"GET\",\"url\":\"https://graph.facebook.com/v22.0/$1/ads?fields=id,name,status,effective_status,adset_id,campaign_id,creative&limit=250\"},\"adcreatives\":{\"method\":\"GET\",\"url\":\"https://graph.facebook.com/v22.0/$1/adcreatives?fields=id,name,title,body,image_url,thumbnail_url,object_story_spec,call_to_action_type&limit=250\"},\"ad_images\":{\"method\":\"GET\",\"url\":\"https://graph.facebook.com/v22.0/$1/adimages?fields=id,name,url,hash&limit=250\"},\"insights\":{\"method\":\"GET\",\"url\":\"https://graph.facebook.com/v22.0/$1/insights?level=$2&fields=spend,impressions,clicks,ctr,cpc,cpm,inline_link_clicks,actions,action_values&time_range={\\\"since\\\":\\\"$3\\\",\\\"until\\\":\\\"$4\\\"}&limit=500\"},\"capi_post\":{\"method\":\"POST\",\"url\":\"https://graph.facebook.com/v22.0/27209526152071970/events\",\"body\":\"{\\\"data\\\":[{\\\"event_name\\\":\\\"$1\\\",\\\"event_time\\\":$2,\\\"event_id\\\":\\\"$3\\\",\\\"event_source_url\\\":\\\"$4\\\",\\\"action_source\\\":\\\"website\\\",\\\"user_data\\\":{\\\"client_ip_address\\\":\\\"$5\\\",\\\"client_user_agent\\\":\\\"$6\\\"}}]}\"}}",
      "description": "WHAT: Meta Graph API unified entrypoint (Marketing API) WHEN_TO_USE: Meta ad accounts, campaigns, adsets, ads, creatives, insights, CAPI ARGS: $1=op, $2..$N=args per op OPS: me | ad_accounts | owned_ad_accounts | client_ad_accounts | campaigns | adsets | ads | adcreatives | ad_images | insights | capi_post",
      "read": "https://miscsubjects.com/api/directory/META",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META",
        "body": ""
      },
      "router_tag": "[META]args[/META]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_CAPI_EVENT",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "meta",
      "target": null,
      "description": "Hash the PII fields then POST to Meta CAPI. $1=em, $2=ph, $3=eid, $4=event_name, $5=event_id, $6=source_url, $7=fbp, $8=fbc. WHEN_TO_USE: per browser-side conversion event that needs to be mirrored to Meta CAPI server-side.",
      "read": "https://miscsubjects.com/api/directory/META_CAPI_EVENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_CAPI_EVENT",
        "body": ""
      },
      "router_tag": "[META_CAPI_EVENT]args[/META_CAPI_EVENT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "META_SYNC_BACKFILL",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "meta",
      "target": "metaSyncBackfill",
      "description": "WHAT: Trigger lbl meta insights backfill. Ledgered. EX: [META_SYNC_BACKFILL][/META_SYNC_BACKFILL]",
      "read": "https://miscsubjects.com/api/directory/META_SYNC_BACKFILL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "META_SYNC_BACKFILL",
        "body": ""
      },
      "router_tag": "[META_SYNC_BACKFILL]args[/META_SYNC_BACKFILL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROMPT_ASSEMBLE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "meta",
      "target": "promptAssemble",
      "description": "WHAT: Return the fully assembled system prompt for an agent key (row content + includes blocks). $1=agent key (e.g. ROUTER). WHEN_TO_USE: inspect how blocks compose into an agent prompt; self-test prompt_blocks coverage ARGS: $1 EX: [PROMPT_ASSEMBLE]ROUTER[/PROMPT_ASSEMBLE]",
      "read": "https://miscsubjects.com/api/directory/PROMPT_ASSEMBLE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROMPT_ASSEMBLE",
        "body": ""
      },
      "router_tag": "[PROMPT_ASSEMBLE]args[/PROMPT_ASSEMBLE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WORLD_MAP",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "meta",
      "target": "worldMap",
      "description": "WHAT: the ontological world map of every tool this build has + when to use which. No arg = overview (category counts + when-to-use guide + how-to-call). Arg = drill one category and list its tools. WHEN_TO_USE: a model needs to understand what it has access to before acting. ARGS: $1 = optional category name (e.g. cli, wrangler, google_api, kv, d1, r2). EX: [WORLD_MAP][/WORLD_MAP]  then  [WORLD_MAP]wrangler[/WORLD_MAP]",
      "read": "https://miscsubjects.com/api/directory/WORLD_MAP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WORLD_MAP",
        "body": ""
      },
      "router_tag": "[WORLD_MAP]args[/WORLD_MAP]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "NPM",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "npm",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Run any npm command on the Mac bridge. Args: command + args (e.g. \"install --save-dev typescript\" or \"audit --fix\"). WHEN_TO_USE: package management, dependency install, npm audit, npm publish, npm run, etc. ARGS: command + args EX: [NPM]install --save-dev typescript[/NPM]",
      "read": "https://miscsubjects.com/api/directory/NPM",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "NPM",
        "body": ""
      },
      "router_tag": "[NPM]args[/NPM]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARXIV_GROW",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "oip",
      "target": "arxivGrow",
      "description": "WHAT: Regenerate the arXiv paper from live state. Reads paper/template.tex + paper/rings.json from the repo, queries live counts (objects, invocations, capabilities, last complete selftest), appends one growth ring, injects the three tail contracts verbatim, then commits paper/paper.tex + paper/rings.json + README.md + oip.json — each commit message carries this trace id. CI compiles the PDF on the paper.tex push. This fn is the only writer of the generated files. WHEN_TO_USE: the custodian says \"grow the paper\", \"regenerate the arxiv\", \"add a ring\", \"refresh the paper\". Also fired daily by launchd com.the custodian.oip.arxiv-grow on the Mac. ARGS: none. EX: [ARXIV_GROW][/ARXIV_GROW]",
      "read": "https://miscsubjects.com/api/directory/ARXIV_GROW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARXIV_GROW",
        "body": ""
      },
      "router_tag": "[ARXIV_GROW]args[/ARXIV_GROW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ARXIV_PAPER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "oip",
      "target": "arxivState",
      "description": "WHAT: The arXiv paper as a live object. The paper \"The Document Is the Receipt\" lives at github.com/[custodian]/oip (private) and is written only by ARXIV_GROW. Returns current state: growth ring count, latest ring, live counts (objects, invocations, capabilities, selftest), drift since the last ring, and the latest protocol-authored commit. WHEN_TO_USE: the custodian asks \"paper state\", \"how big is the paper\", \"when did the paper last grow\", \"show the arxiv object\", \"has the paper drifted\". ARGS: none. EX: [ARXIV_PAPER][/ARXIV_PAPER]",
      "read": "https://miscsubjects.com/api/directory/ARXIV_PAPER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ARXIV_PAPER",
        "body": ""
      },
      "router_tag": "[ARXIV_PAPER]args[/ARXIV_PAPER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CAP_EXPLAIN",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "oip",
      "target": "capExplain",
      "description": "WHAT: Explain a capability: what it may invoke, verbs, expiry + remaining TTL, uses left, risk ceiling, owner gate, revocation, ledger trail. Accepts the token itself (sh.…) or its fingerprint (cap_…). Never echoes the raw token. WHEN_TO_USE: the custodian asks \"what can this token do\", \"explain this capability\", \"is cap_x still valid\". ARGS: $1 = capability token or cap_ fingerprint. EX: [CAP_EXPLAIN]cap_1a2b3c4d5e6f7a8b[/CAP_EXPLAIN]",
      "read": "https://miscsubjects.com/api/directory/CAP_EXPLAIN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CAP_EXPLAIN",
        "body": ""
      },
      "router_tag": "[CAP_EXPLAIN]args[/CAP_EXPLAIN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CAP_MINT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "oip",
      "target": "capMint",
      "description": "WHAT: Mint a scoped, short-lived, ledgered capability URL — delegated authority over exactly one row (or read/act tier), with TTL, use count, purpose, risk ceiling, and owner gate. Returns invoke_url + explain_url + fingerprint; the URL explains itself. WHEN_TO_USE: the custodian says \"mint a token/capability/link for <KEY>\", \"give a model a 10 minute key to X\", \"one-shot link for NOW\". ARGS: $1=scope (row|act|read), $2=row key (for scope row), $3=ttl seconds (default 600), $4=max uses (default 1, 0=unlimited), $5=purpose (plain english), $6=risk_ceiling (low|high, default low), $7=owner_gate (0|1, default 0). EX: [CAP_MINT]row|NOW|600|1|demo for chatgpt[/CAP_MINT]",
      "read": "https://miscsubjects.com/api/directory/CAP_MINT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CAP_MINT",
        "body": ""
      },
      "router_tag": "[CAP_MINT]args[/CAP_MINT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CAP_REVOKE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "oip",
      "target": "capRevoke",
      "description": "WHAT: Revoke a capability by fingerprint — the URL dies immediately; further invokes are denied and ledgered. WHEN_TO_USE: the custodian says \"revoke that token\", \"kill cap_x\", \"cut that model off\". ARGS: $1 = cap_ fingerprint. EX: [CAP_REVOKE]cap_1a2b3c4d5e6f7a8b[/CAP_REVOKE]",
      "read": "https://miscsubjects.com/api/directory/CAP_REVOKE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CAP_REVOKE",
        "body": ""
      },
      "router_tag": "[CAP_REVOKE]args[/CAP_REVOKE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GITHUB_TAIL",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "oip",
      "target": "githubTail",
      "description": "WHAT: The GitHub repository as a live object. Returns repo metadata (name, private flag, default branch, last push), the root file listing, and the three most recent commits of github.com/[custodian]/oip. Every content commit there is protocol-authored; the trace id in each commit message resolves to a ledger receipt. WHEN_TO_USE: the custodian asks \"show the repo\", \"github tail\", \"what is in the oip repo\", \"last repo commit\", \"is the repo still private\". ARGS: none. EX: [GITHUB_TAIL][/GITHUB_TAIL]",
      "read": "https://miscsubjects.com/api/directory/GITHUB_TAIL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GITHUB_TAIL",
        "body": ""
      },
      "router_tag": "[GITHUB_TAIL]args[/GITHUB_TAIL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_RECEIPT",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "oip",
      "target": "oipReceipt",
      "description": "WHAT: Read one invocation back as a receipt: full recorded request + response, lineage (replay_of/repairs/repaired_by), and the verbs that act on it. A receipt is a live replayable object, not history. WHEN_TO_USE: the custodian asks \"show the receipt for inv_x\", \"what happened in inv_x\", \"why did that fail\". ARGS: $1 = invocation id (inv_…). EX: [OIP_RECEIPT]inv_wvitbmiym6[/OIP_RECEIPT]",
      "read": "https://miscsubjects.com/api/directory/OIP_RECEIPT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_RECEIPT",
        "body": ""
      },
      "router_tag": "[OIP_RECEIPT]args[/OIP_RECEIPT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_REPAIR",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "oip",
      "target": "oipRepair",
      "description": "WHAT: Repair a failed invocation from its receipt: inspects the failure, derives or takes the corrected key+body, fires it linked (new receipt carries repairs, old receipt gains repaired_by). Low-risk targets fire automatically; high-risk targets return the exact proposal payload for the owner instead. WHEN_TO_USE: the custodian says \"repair that failed invocation\", \"fix inv_x with NOW\", \"make that call again but corrected\". ARGS: $1 = failed invocation id, $2 = corrected row key (optional — derived from the failure when omitted), $3+ = corrected body (optional, may contain pipes). EX: [OIP_REPAIR]inv_6ximjestte|NOW|[/OIP_REPAIR]",
      "read": "https://miscsubjects.com/api/directory/OIP_REPAIR",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_REPAIR",
        "body": ""
      },
      "router_tag": "[OIP_REPAIR]args[/OIP_REPAIR]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_REPLAY",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "oip",
      "target": "oipReplay",
      "description": "WHAT: Re-fire a past invocation with its recorded input. New receipt links replay_of to the old one. WHEN_TO_USE: the custodian says \"replay that\", \"run inv_x again\", \"re-fire it as it was\". ARGS: $1 = invocation id (inv_…). EX: [OIP_REPLAY]inv_wvitbmiym6[/OIP_REPLAY]",
      "read": "https://miscsubjects.com/api/directory/OIP_REPLAY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_REPLAY",
        "body": ""
      },
      "router_tag": "[OIP_REPLAY]args[/OIP_REPLAY]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_TREE",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "oip",
      "target": "GET https://miscsubjects.com/api/dispatch?map=1&format=markdown",
      "description": "WHAT: Return the recursive Object Invocation Protocol tree: root documents, API/CLI/MCP/device/model/core shelves, generated system articles, generated capability articles, ledgers, receipts, replay, repair, and token explanation surfaces. WHEN_TO_USE: the custodian or a model asks for the OIP tree, object invocation protocol docs, capability map, machine-native API tree, API/CLI/MCP documentation, or how to start from one self-explaining root and discover the whole action surface. ARGS: none EX: [OIP_TREE][/OIP_TREE]",
      "read": "https://miscsubjects.com/api/directory/OIP_TREE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_TREE",
        "body": ""
      },
      "router_tag": "[OIP_TREE]args[/OIP_TREE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "GEN_DUAL",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "openai",
      "target": "genDual",
      "description": "WHAT: Generate with BOTH OpenAI gpt-image-1.5 and Grok Imagine; store both to R2; return both links. If reference_url is given, both EDIT it WHEN_TO_USE: you need to gen dual ARGS: prompt|reference_url EX: [GEN_DUAL]arg1|arg2[/GEN_DUAL]",
      "read": "https://miscsubjects.com/api/directory/GEN_DUAL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "GEN_DUAL",
        "body": ""
      },
      "router_tag": "[GEN_DUAL]args[/GEN_DUAL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OPENAI_IMAGE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "openai",
      "target": "openaiImage",
      "description": "WHAT: OpenAI gpt-image-1.5 text-to-image. Stores to R2, returns a stable https://miscsubjects.com/img/ link WHEN_TO_USE: you need to openai image ARGS: prompt|size(1024x1024|1536x1024|1024x1536) EX: [OPENAI_IMAGE]arg1|arg2[/OPENAI_IMAGE]",
      "read": "https://miscsubjects.com/api/directory/OPENAI_IMAGE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OPENAI_IMAGE",
        "body": ""
      },
      "router_tag": "[OPENAI_IMAGE]args[/OPENAI_IMAGE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OPENAI_IMAGE_EDIT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "openai",
      "target": "openaiImageEdit",
      "description": "WHAT: OpenAI gpt-image-1.5 edit from a reference image URL. Stores to R2 WHEN_TO_USE: you need to openai image edit ARGS: prompt|reference_url|size EX: [OPENAI_IMAGE_EDIT]arg1|arg2|arg3[/OPENAI_IMAGE_EDIT]",
      "read": "https://miscsubjects.com/api/directory/OPENAI_IMAGE_EDIT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OPENAI_IMAGE_EDIT",
        "body": ""
      },
      "router_tag": "[OPENAI_IMAGE_EDIT]args[/OPENAI_IMAGE_EDIT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OPENAI_MODELS",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "openai",
      "target": "GET https://api.openai.com/v1/models",
      "description": "WHAT: List OpenAI models. No args WHEN_TO_USE: you need to openai models ARGS: see content EX: [OPENAI_MODELS][/OPENAI_MODELS] List OpenAI models. No args.",
      "read": "https://miscsubjects.com/api/directory/OPENAI_MODELS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OPENAI_MODELS",
        "body": ""
      },
      "router_tag": "[OPENAI_MODELS]args[/OPENAI_MODELS]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STORE_REF_IMAGE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "openai",
      "target": "storeRefImage",
      "description": "WHAT: Save a reference image (e.g. one sent via Blooio) to R2 and return {filename,key,url}. Arg: source_url WHEN_TO_USE: you need to store ref image ARGS: $1 EX: [STORE_REF_IMAGE]arg1[/STORE_REF_IMAGE]",
      "read": "https://miscsubjects.com/api/directory/STORE_REF_IMAGE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STORE_REF_IMAGE",
        "body": ""
      },
      "router_tag": "[STORE_REF_IMAGE]args[/STORE_REF_IMAGE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LBL_ANSWER",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "ops",
      "target": "@cf/zai-org/glm-5.2",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/LBL_ANSWER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LBL_ANSWER",
        "body": ""
      },
      "router_tag": "[LBL_ANSWER]args[/LBL_ANSWER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LBL_ASK",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "ops",
      "target": "POST https://miscsubjects.com/api/lbl/ask",
      "description": "WHAT: Answer a question about Loop Bio Labs commercial performance - revenue, orders, average order, ad spend, ROAS, attributed revenue, new versus returning customers, email and SMS revenue - for yesterday, the last complete week, this month so far, or last calendar month. The answer is built only from live numbers that have already passed the plausibility review; a figure that failed it is handed to the model as unavailable, so the answer cannot contain an invented or discredited number. WHEN_TO_USE: any question about how the store or the business is doing. Revenue, sales, orders, spend, ROAS, return on ad spend, new customers, repeat customers, email revenue, SMS revenue, how was yesterday, how is the month going, are we up or down. Use this instead of guessing from memory - it reads live data every time. ARGS: $1 = the question in plain English. NOTE: it will say it does not have something rather than estimate. Per-channel new-versus-existing customers is NOT available from any channel: 97.7 percent of first-time-buyer orders carry no attribution at all, so no channel can be credited with acquiring a new customer. EX: [LBL_ASK]how did we do yesterday and what was our ROAS?[/LBL_ASK]",
      "read": "https://miscsubjects.com/api/directory/LBL_ASK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LBL_ASK",
        "body": ""
      },
      "router_tag": "[LBL_ASK]args[/LBL_ASK]",
      "input_schema": {
        "type": "object",
        "properties": {
          "question": {
            "type": "string",
            "description": "the question in plain English"
          }
        },
        "required": [
          "question"
        ]
      },
      "examples": "[{\"body\": \"how did we do yesterday?\", \"note\": \"revenue, orders and ROAS for yesterday\"}, {\"body\": \"how is this month going versus last month?\", \"note\": \"month to date against the same days last month\"}]",
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LBL_REPORT_EMAIL",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "ops",
      "target": "POST https://miscsubjects.com/api/lbl/report-email",
      "description": "WHAT: Compose and send an LBL commercial report for Loop Bio Labs. Three templates off one design: daily (yesterday against the day before), weekly (the last complete Monday-Sunday against the week before), monthly (month-to-date against the same day-count of last month; on the 1st, the closed month against the whole month before it). Every template opens with eight numbers - revenue, ad spend, ROAS, attributed revenue, new customers, existing customers, orders, average order - each carrying its change against a named comparison window. The monthly also carries the Meta new-customer acquisition trend by month. WHEN_TO_USE: the daily, weekly or monthly LBL automation fires; or the owner asks to send or preview an LBL report now. ARGS: kind | mode   kind: daily, weekly or monthly. Required.   mode: blank sends only if the calendar gate for that kind passes (weekly on Mondays, monthly on the 1st; daily always). dry composes without sending. force sends regardless of the calendar. NOTE: recipients come from settings.lbl_daily_recipients and default to the owner alone. A source that did not answer renders unavailable, never a zero. EX: [LBL_REPORT_EMAIL]weekly|dry[/LBL_REPORT_EMAIL]",
      "read": "https://miscsubjects.com/api/directory/LBL_REPORT_EMAIL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LBL_REPORT_EMAIL",
        "body": ""
      },
      "router_tag": "[LBL_REPORT_EMAIL]args[/LBL_REPORT_EMAIL]",
      "input_schema": {
        "type": "object",
        "properties": {
          "kind": {
            "type": "string",
            "enum": [
              "daily",
              "weekly",
              "monthly"
            ]
          },
          "mode": {
            "type": "string",
            "enum": [
              "",
              "dry",
              "force"
            ]
          }
        },
        "required": [
          "kind"
        ]
      },
      "examples": "[{\"body\": \"weekly|dry\", \"note\": \"compose the weekly recap without sending\"}, {\"body\": \"monthly|force\", \"note\": \"send the monthly recap now regardless of the calendar\"}]",
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WT0090_OUTBOUND_POLISH_V1",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "outreach",
      "target": "@cf/meta/llama-3.3-70b-instruct-fp8-fast",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/WT0090_OUTBOUND_POLISH_V1",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WT0090_OUTBOUND_POLISH_V1",
        "body": ""
      },
      "router_tag": "[WT0090_OUTBOUND_POLISH_V1]args[/WT0090_OUTBOUND_POLISH_V1]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAGE_GET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "pages",
      "target": "GET https://miscsubjects.com/api/pages/$1",
      "description": "WHAT: Read a page by slug.  Returns {slug,title,body_html,version,...} WHEN_TO_USE: you need to page get ARGS: slug EX: [PAGE_GET][/PAGE_GET] Read a page by slug. Args: slug. Returns {slug,title,body_html,version,...}.",
      "read": "https://miscsubjects.com/api/directory/PAGE_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAGE_GET",
        "body": ""
      },
      "router_tag": "[PAGE_GET]args[/PAGE_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAGE_PATCH",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "pages",
      "target": "PATCH https://miscsubjects.com/api/pages/$1",
      "description": "WHAT: Edit a page by slug.  json_body = {\"title\":\"...\",\"body_html\":\"...\"} WHEN_TO_USE: you need to page patch ARGS: slug|json_body EX: [PAGE_PATCH]arg2[/PAGE_PATCH]",
      "read": "https://miscsubjects.com/api/directory/PAGE_PATCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAGE_PATCH",
        "body": ""
      },
      "router_tag": "[PAGE_PATCH]args[/PAGE_PATCH]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAGES_CREATE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "pages",
      "target": "POST https://miscsubjects.com/api/pages",
      "description": "WHAT: Create a new page. $1=slug $2=title $3=body_html. Use ONLY when no page with that slug exists; PAGES_PUT upserts WHEN_TO_USE: you need to pages create ARGS: see content EX: [PAGES_CREATE]arg1|arg2|arg3[/PAGES_CREATE]",
      "read": "https://miscsubjects.com/api/directory/PAGES_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAGES_CREATE",
        "body": ""
      },
      "router_tag": "[PAGES_CREATE]args[/PAGES_CREATE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAGES_DELETE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "pages",
      "target": "DELETE https://miscsubjects.com/api/pages/$1",
      "description": "WHAT: Delete a page. $1=slug. Version history stays in pages_versions; the live row is removed WHEN_TO_USE: you need to pages delete ARGS: see content EX: [PAGES_DELETE]arg1[/PAGES_DELETE] Delete a page. $1=slug. Version history stays in pages_versions; the live row is removed.",
      "read": "https://miscsubjects.com/api/directory/PAGES_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAGES_DELETE",
        "body": ""
      },
      "router_tag": "[PAGES_DELETE]args[/PAGES_DELETE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAGES_GET",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "pages",
      "target": null,
      "description": "Read one page by $1=slug. Use to inspect or revert page content.",
      "read": "https://miscsubjects.com/api/directory/PAGES_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAGES_GET",
        "body": ""
      },
      "router_tag": "[PAGES_GET]args[/PAGES_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAGES_LIST",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "pages",
      "target": null,
      "description": "List runtime-editable HTML pages (slug, title, version, updated_at). Use before PAGES_GET.",
      "read": "https://miscsubjects.com/api/directory/PAGES_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAGES_LIST",
        "body": ""
      },
      "router_tag": "[PAGES_LIST]args[/PAGES_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAGES_PUT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "pages",
      "target": "PUT https://miscsubjects.com/api/pages/$1",
      "description": "WHAT: Edit an existing page. $1=slug $2=title $3=body_html. Writes a new version row; previous content stays in pages_versions WHEN_TO_USE: you need to pages put ARGS: see content EX: [PAGES_PUT]arg2|arg3[/PAGES_PUT]",
      "read": "https://miscsubjects.com/api/directory/PAGES_PUT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAGES_PUT",
        "body": ""
      },
      "router_tag": "[PAGES_PUT]args[/PAGES_PUT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAGES_VERSIONS",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "pages",
      "target": null,
      "description": "List versions for $1=slug. Use to find a prior version id before reverting.",
      "read": "https://miscsubjects.com/api/directory/PAGES_VERSIONS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAGES_VERSIONS",
        "body": ""
      },
      "router_tag": "[PAGES_VERSIONS]args[/PAGES_VERSIONS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SERVE_PAGE",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "pages",
      "target": null,
      "description": "Body HTML for $1=slug (used by functions/[slug].js to serve /<slug>). Use ONLY from the page renderer.",
      "read": "https://miscsubjects.com/api/directory/SERVE_PAGE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SERVE_PAGE",
        "body": ""
      },
      "router_tag": "[SERVE_PAGE]args[/SERVE_PAGE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SITE_LINKS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "pages",
      "target": "GET https://miscsubjects.com/admin/directory",
      "description": "WHAT: Site surfaces (the only two human pages + every functional endpoint) WHEN_TO_USE: you need to site links ARGS: see content EX: [SITE_LINKS][/SITE_LINKS] Site surfaces (the only two human pages + every functional endpoint). DIRECTORY  https://miscsubjects.com/admin/directory   (the one surface; + /new, /models, /graph, /<key>) LEDGER     https://miscsubjects.com/admin/ledger       (every payload in/out) DISPATCH   POST https://miscsubjects.com/api/dispatch  {\"key\",\"body\"} SLUG       POST https://miscsubjects.com/s/<slug>       {\"body\"} DIRECTORY REST  GET|PUT|PATCH|DELETE https://miscsubjects.com/api/directory/<key> PROVIDERS  GET https://miscsubjects.com/api/providers   (LLM/model registry) DURABLE    GET https://miscsubjects.com/api/durable/ping  (bound Durable Object) CONTENT    GET https://miscsubjects.com/api/content/<slug>  (peptides/articles data) every other former page (/matrix /ads /queue /workbench /content /grok /api …) now 302 -> /admin/directory",
      "read": "https://miscsubjects.com/api/directory/SITE_LINKS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SITE_LINKS",
        "body": ""
      },
      "router_tag": "[SITE_LINKS]args[/SITE_LINKS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAYMENTS_CREATE_REFUND",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "payments",
      "target": "mcpToolCall",
      "description": "This tool will refund a payment intent in Stripe. It takes three arguments: - payment_intent (str): The ID of the payment intent to refund. - amount (int, optional): The amount to refund in currency m MCP: https://mcp.stripe.com",
      "read": "https://miscsubjects.com/api/directory/PAYMENTS_CREATE_REFUND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAYMENTS_CREATE_REFUND",
        "body": ""
      },
      "router_tag": "[PAYMENTS_CREATE_REFUND]args[/PAYMENTS_CREATE_REFUND]",
      "input_schema": {
        "type": "object",
        "properties": {
          "payment_intent": {
            "description": "The ID of the PaymentIntent to refund.",
            "type": "string"
          },
          "amount": {
            "description": "The amount to refund in cents.",
            "type": "integer"
          },
          "reason": {
            "description": "The reason for the refund.",
            "enum": [
              "duplicate",
              "fraudulent",
              "requested_by_customer"
            ],
            "type": "string"
          },
          "human_confirmation": {
            "type": "object",
            "description": "This tool might require human confirmation. To run it, first invoke it with the desired parameters, ignoring the `approval_token` parameter.\nIf it requires human confirmation, the response will include an approval request ID and a URL to an approval page for the human to approve the tool call.\nYou, as the LLM agent, should:\n\n1. Present this URL to the human as a clickable markdown link. Tell them that they have to approve this tool call at that URL, and that they should tell you when they have approved the operation.\n2. The human will approve that call.\n3. After the human tells you they have approved the operation, you must call the tool again with the `approval_token` parameter and the exact same parameters. The operation will then go through.\n",
            "properties": {
              "approval_token": {
                "type": "string",
                "description": "The ID of the approval token for the request. This is required on only the post-human-confirmation invocation. An example ID is `approval_123`."
              }
            }
          }
        },
        "required": [
          "payment_intent"
        ]
      },
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAYMENTS_FETCH_STRIPE_RESOURCES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "payments",
      "target": "mcpToolCall",
      "description": "Retrieve Stripe object details by ID. IMPORTANT: Only call this tool after search_stripe_resources is called to get specific object IDs. Do not use this tool to discover or search for objects. This to MCP: https://mcp.stripe.com",
      "read": "https://miscsubjects.com/api/directory/PAYMENTS_FETCH_STRIPE_RESOURCES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAYMENTS_FETCH_STRIPE_RESOURCES",
        "body": ""
      },
      "router_tag": "[PAYMENTS_FETCH_STRIPE_RESOURCES]args[/PAYMENTS_FETCH_STRIPE_RESOURCES]",
      "input_schema": {
        "type": "object",
        "properties": {
          "id": {
            "description": "The unique identifier for the Stripe object (e.g. cus_123, pi_123).",
            "type": "string"
          }
        },
        "required": [
          "id"
        ]
      },
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAYMENTS_GET_STRIPE_ACCOUNT_INFO",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "payments",
      "target": "mcpToolCall",
      "description": "This will get the account info for the logged in Stripe account.  MCP: https://mcp.stripe.com",
      "read": "https://miscsubjects.com/api/directory/PAYMENTS_GET_STRIPE_ACCOUNT_INFO",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAYMENTS_GET_STRIPE_ACCOUNT_INFO",
        "body": ""
      },
      "router_tag": "[PAYMENTS_GET_STRIPE_ACCOUNT_INFO]args[/PAYMENTS_GET_STRIPE_ACCOUNT_INFO]",
      "input_schema": {
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAYMENTS_SEARCH_STRIPE_DOCUMENTATION",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "payments",
      "target": "mcpToolCall",
      "description": "Search the Stripe documentation for the given question and language. It takes two arguments: - question (str): The user question to search an answer for in the Stripe documentation. - language (str, o MCP: https://mcp.stripe.com",
      "read": "https://miscsubjects.com/api/directory/PAYMENTS_SEARCH_STRIPE_DOCUMENTATION",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAYMENTS_SEARCH_STRIPE_DOCUMENTATION",
        "body": ""
      },
      "router_tag": "[PAYMENTS_SEARCH_STRIPE_DOCUMENTATION]args[/PAYMENTS_SEARCH_STRIPE_DOCUMENTATION]",
      "input_schema": {
        "type": "object",
        "properties": {
          "question": {
            "type": "string",
            "description": "The user question about integrating with Stripe will be used to search the documentation."
          },
          "language": {
            "type": "string",
            "description": "The programming language to search for in the the documentation.",
            "enum": [
              "dotnet",
              "go",
              "java",
              "node",
              "php",
              "ruby",
              "python",
              "curl"
            ]
          },
          "search_only_api_ref": {
            "type": "boolean",
            "description": "When set to true, search only in the Stripe API reference documentation instead of the full documentation set. Use true when users need specific API implementation details, code examples, or parameter references. Use false (default) for conceptual explanations, best practices, integration guides, or troubleshooting help."
          }
        },
        "required": [
          "question"
        ]
      },
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAYMENTS_SEARCH_STRIPE_RESOURCES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "payments",
      "target": "mcpToolCall",
      "description": "This tool can be used to search for specific Stripe resources using a custom Stripe query syntax. It is only able to search for the following resources: customers, payment_intents, charges, invoices,  MCP: https://mcp.stripe.com",
      "read": "https://miscsubjects.com/api/directory/PAYMENTS_SEARCH_STRIPE_RESOURCES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAYMENTS_SEARCH_STRIPE_RESOURCES",
        "body": ""
      },
      "router_tag": "[PAYMENTS_SEARCH_STRIPE_RESOURCES]args[/PAYMENTS_SEARCH_STRIPE_RESOURCES]",
      "input_schema": {
        "type": "object",
        "properties": {
          "query": {
            "description": "This query string should be formatted as 'resource:query_clause', where 'resource' is one of (customers, payment_intents, charges, invoices, prices, products, subscriptions), and 'query_clause' is the actual query in Stripe's custom query syntax to query metadata for that resource.\n\nFor example, for the query: customers:email:\"jenny.rosen@example.com\"\nresource: `customers`\nquery_clause: `email:\"jenny.rosen@example.com\"`\n\nA query clause consists of a field, operator, and value.\n\n## Query Fields for customers\n* created\n* email\n* metadata\n* name\n* phone\n\n## Query Fields for payment_intents\n* amount\n* created\n* currency\n* customer\n* metadata\n* status\n\n## Query Fields for charges\n* amount\n* billing_details.address.postal_code\n* created\n* currency\n* customer\n* disputed\n* metadata\n* payment_method_details.{{SOURCE}}.last4\n* payment_method_details.{{SOURCE}}.exp_month\n* payment_method_details.{{SOURCE}}.exp_year\n* payment_method_details.{{SOURCE}}.brand\n* payment_method_details.{{SOURCE}}.fingerprint\n* refunded\n* status\n\n## Query Fields for invoices\n* created\n* currency\n* customer\n* last_finalization_error_code\n* last_finalization_error_type\n* metadata\n* number\n* receipt_number\n* status\n* subscription\n* total\n\n## Query Fields for prices\n* active\n* currency\n* lookup_key\n* metadata\n* product\n* type\n\n## Query Fields for products\n* active\n* description\n* metadata\n* name\n* shippable\n* url\n\n## Query Fields for subscriptions\n* created\n* metadata\n* status\n* canceled_at\n\n## Search Operators\nThe following table lists the syntax that you can use to construct a query:\n\n| Syntax | Usage | Description | When to Use | Examples |\n|--------|-------|-------------|-------------|----------|\n| `:` | `field:value` | Exact match operator (case insensitive) | **ONLY when you know the exact complete value** | `currency:\"eur\"` returns records where the currency is exactly \"EUR\" |\n| `~` | `field~value` | Substring match operator (minimum 3 characters) | **ALWAYS use for domain searches, partial names, email parts** | `email~\"foo.com\"` returns emails containing \"foo.com\" |\n| `AND`, `and` | `field:value1 AND field:value2` | Returns records that match both clauses | Combining multiple conditions | `status:\"active\" AND amount:500` |\n| `OR`, `or` | `field:value1 OR field:value2` | Returns records that match either clause | Alternative conditions | `currency:\"usd\" OR currency:\"eur\"` |\n| `-` | `-field:value` | Returns records that don't match the clause | Excluding specific values | `-currency:\"jpy\"` returns records not in JPY |\n| `NULL`, `null` | `field:null` | Checks for field presence (empty/null values) | Finding empty fields | `url:null` returns records where URL field is empty |\n| `>`, `<`, `>=`, `<=`, `=` | `field>value`, `field<value`, etc. | Numeric comparison operators | Amount ranges, dates | `amount>=\"10\"` returns records with amount >= 10 |\n| `` | `\" \"\"\"` | Escape quotes within quotes | When quotes are in the search value | `description:\"the story called \"The Sky and the Sea.\"\"` |\n\n## Query Rules\n* You can combine up to 10 query clauses in a search by separating them with a space or using AND/OR keywords (case insensitive)\n* You cannot combine AND and OR in the same query\n* No parentheses are supported for operator precedence\n* By default, the API combines clauses with AND logic\n* You must use quotation marks around string values (optional for numeric values)\n* You can escape quotes inside quotes with a backslash (\\)\n\n## Examples\n\nInput: Look up charges matching a custom metadata value.\nOutput: charges:metadata['order_id']:'1234567890'\n\nInput: Look up charges matching the last 4 digits of the card used for the payment.\nOutput: charges:payment_method_details.card.last4:4242\n\nInput: Look up customers matching an email.\nOutput: customers:email:'jenny.rosen@example.com'\n\nInput: Look up PaymentIntents not in the USD currency.\nOutput: payment_intents:-currency:'usd'\n\nInput: Filter invoice objects with a total greater than 1000.\nOutput: invoices:total>1000\n\nInput: Filter payments with a amount over $100.\nReasoning: Stripe \"amount\" field is in cents, so we use 1000 instead of 100\nOutput: payment_intents:amount>1000\n\nInput: Look up charges matching a combination of metadata and currency.\nOutput: charges:metadata['key']:'value' AND currency:'usd'\n\nInput: Search for customers with email containing \"john\".\nOutput: customers:email~\"john\"\n\nInput: Find products where the description field is empty.\nOutput: products:description:null\n\nInput: Search for payments with amounts greater than or equal to 5000.\nOutput: payment_intents:amount>=5000\n\nInput: Search for products with description with escaped quotes.\nOutput: products:description:\"The story called \"The Sky and the Sea\".\"\n",
            "type": "string"
          }
        },
        "required": [
          "query"
        ]
      },
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAYMENTS_SEND_STRIPE_MCP_FEEDBACK",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "payments",
      "target": "mcpToolCall",
      "description": "Submit feedback from user or agent about Stripe's MCP server tools. Valid: \"the search tool returned irrelevant results\", \"I wish there was a tool for X\" Invalid: Stripe API complaints, AI model issue MCP: https://mcp.stripe.com",
      "read": "https://miscsubjects.com/api/directory/PAYMENTS_SEND_STRIPE_MCP_FEEDBACK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAYMENTS_SEND_STRIPE_MCP_FEEDBACK",
        "body": ""
      },
      "router_tag": "[PAYMENTS_SEND_STRIPE_MCP_FEEDBACK]args[/PAYMENTS_SEND_STRIPE_MCP_FEEDBACK]",
      "input_schema": {
        "type": "object",
        "properties": {
          "sentiment": {
            "type": "string",
            "enum": [
              "positive",
              "negative",
              "neutral"
            ],
            "description": "positive, negative, or neutral"
          },
          "quote": {
            "type": "string",
            "description": "User's exact message containing feedback. Max 1000 chars."
          },
          "context": {
            "type": "string",
            "description": "User persona, their broader goal, current task, and estimated technical proficiency."
          },
          "tool_name": {
            "type": "string",
            "description": "The name of the tool the user is giving feedback about. Include if confident that feedback is about a specific tool."
          },
          "source": {
            "type": "string",
            "description": "user or agent",
            "enum": [
              "user",
              "agent"
            ]
          }
        },
        "required": [
          "sentiment",
          "quote",
          "context",
          "source"
        ]
      },
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAYMENTS_STRIPE_API_DETAILS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "payments",
      "target": "mcpToolCall",
      "description": "Get detailed parameter information for a specific Stripe API operation. Provide the stripe_api_operation_id from stripe_api_search results to see all path, query, and body parameters with their types, MCP: https://mcp.stripe.com",
      "read": "https://miscsubjects.com/api/directory/PAYMENTS_STRIPE_API_DETAILS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAYMENTS_STRIPE_API_DETAILS",
        "body": ""
      },
      "router_tag": "[PAYMENTS_STRIPE_API_DETAILS]args[/PAYMENTS_STRIPE_API_DETAILS]",
      "input_schema": {
        "type": "object",
        "properties": {
          "stripe_api_operation_id": {
            "description": "The operation ID to get details for (e.g. 'PostCustomers', 'GetPaymentIntents')",
            "type": "string"
          }
        },
        "required": [
          "stripe_api_operation_id"
        ]
      },
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAYMENTS_STRIPE_API_READ",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "payments",
      "target": "mcpToolCall",
      "description": "Read data from any Stripe API GET operation: 1. Use stripe_api_search to find the operation ID. 2. Use stripe_api_details to understand its parameters (required for operations with nested object field MCP: https://mcp.stripe.com",
      "read": "https://miscsubjects.com/api/directory/PAYMENTS_STRIPE_API_READ",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAYMENTS_STRIPE_API_READ",
        "body": ""
      },
      "router_tag": "[PAYMENTS_STRIPE_API_READ]args[/PAYMENTS_STRIPE_API_READ]",
      "input_schema": {
        "type": "object",
        "properties": {
          "stripe_api_operation_id": {
            "description": "The operation ID to execute (e.g. 'PostCustomers', 'GetPaymentIntents')",
            "type": "string"
          },
          "parameters": {
            "description": "Parameters for the API call. Include path parameters (e.g. 'customer' for /v1/customers/{customer}), query parameters, and body parameters as a flat object. Nested object fields use dot-notation (e.g. \"address.city\"). Array fields (e.g. line_items) must be passed as a JSON array value, not as a plain string.",
            "type": "object"
          }
        },
        "required": [
          "stripe_api_operation_id",
          "parameters"
        ]
      },
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAYMENTS_STRIPE_API_SEARCH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "payments",
      "target": "mcpToolCall",
      "description": "Search for Stripe API operations by keyword. Returns matching operations with their HTTP method, path, summary, and top-level parameter names with types. Does not include parameter descriptions, enum  MCP: https://mcp.stripe.com",
      "read": "https://miscsubjects.com/api/directory/PAYMENTS_STRIPE_API_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAYMENTS_STRIPE_API_SEARCH",
        "body": ""
      },
      "router_tag": "[PAYMENTS_STRIPE_API_SEARCH]args[/PAYMENTS_STRIPE_API_SEARCH]",
      "input_schema": {
        "type": "object",
        "properties": {
          "query": {
            "description": "Search query describing the Stripe API operation you want to find (e.g. 'create customer', 'list payments', 'refund charge')",
            "type": "string"
          },
          "limit": {
            "description": "Maximum number of results to return (default: 5, max: 20)",
            "type": "integer",
            "minimum": 1,
            "maximum": 20,
            "default": 5
          }
        },
        "required": [
          "query"
        ]
      },
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAYMENTS_STRIPE_API_WRITE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "payments",
      "target": "mcpToolCall",
      "description": "Write data via any Stripe API POST/PATCH/PUT/DELETE operation: 1. Use stripe_api_search to find the operation ID. 2. Use stripe_api_details to understand its parameters (required for operations with n MCP: https://mcp.stripe.com",
      "read": "https://miscsubjects.com/api/directory/PAYMENTS_STRIPE_API_WRITE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAYMENTS_STRIPE_API_WRITE",
        "body": ""
      },
      "router_tag": "[PAYMENTS_STRIPE_API_WRITE]args[/PAYMENTS_STRIPE_API_WRITE]",
      "input_schema": {
        "type": "object",
        "properties": {
          "stripe_api_operation_id": {
            "description": "The operation ID to execute (e.g. 'PostCustomers', 'GetPaymentIntents')",
            "type": "string"
          },
          "parameters": {
            "description": "Parameters for the API call. Include path parameters (e.g. 'customer' for /v1/customers/{customer}), query parameters, and body parameters as a flat object. Nested object fields use dot-notation (e.g. \"address.city\"). Array fields (e.g. line_items) must be passed as a JSON array value, not as a plain string.",
            "type": "object"
          },
          "human_confirmation": {
            "type": "object",
            "description": "This tool might require human confirmation. To run it, first invoke it with the desired parameters, ignoring the `approval_token` parameter.\nIf it requires human confirmation, the response will include an approval request ID and a URL to an approval page for the human to approve the tool call.\nYou, as the LLM agent, should:\n\n1. Present this URL to the human as a clickable markdown link. Tell them that they have to approve this tool call at that URL, and that they should tell you when they have approved the operation.\n2. The human will approve that call.\n3. After the human tells you they have approved the operation, you must call the tool again with the `approval_token` parameter and the exact same parameters. The operation will then go through.\n",
            "properties": {
              "approval_token": {
                "type": "string",
                "description": "The ID of the approval token for the request. This is required on only the post-human-confirmation invocation. An example ID is `approval_123`."
              }
            }
          }
        },
        "required": [
          "stripe_api_operation_id",
          "parameters"
        ]
      },
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PAYMENTS_STRIPE_IMPLEMENTATION_PLANNER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "payments",
      "target": "mcpToolCall",
      "description": "Stripe payment integration planner. Use this tool to help users accept payments, sell products online, set up billing, or build any Stripe integration. Call this BEFORE writing code when the user want MCP: https://mcp.stripe.com",
      "read": "https://miscsubjects.com/api/directory/PAYMENTS_STRIPE_IMPLEMENTATION_PLANNER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PAYMENTS_STRIPE_IMPLEMENTATION_PLANNER",
        "body": ""
      },
      "router_tag": "[PAYMENTS_STRIPE_IMPLEMENTATION_PLANNER]args[/PAYMENTS_STRIPE_IMPLEMENTATION_PLANNER]",
      "input_schema": {
        "type": "object",
        "properties": {
          "guide_id": {
            "description": "ONLY pass a guide_id that was returned by a previous call to this tool in this conversation. Never fabricate, guess, or reuse guide_ids from other sessions. If you do not have a guide_id from a prior response, omit this field entirely. Invalid guide_ids will be rejected.",
            "type": "string"
          },
          "message": {
            "description": "For new guides: describe the use case or business requirements. For existing guides: provide the latest user response or the full accepted transcript.",
            "type": "string"
          },
          "accept": {
            "description": "Set to true when returning the completed decision tree with your chosen options to receive the finalized integration guide.",
            "type": "boolean"
          }
        },
        "required": [
          "message"
        ]
      },
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PHONE_APPROVAL_CREATE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "phone",
      "target": "approvalCreate",
      "description": "WHAT: insert a row into `approvals` (status=pending) and notify the custodian's phone. WHEN_TO_USE: about to do something destructive (deploy, send outreach, delete, pay) — pause first. ARGS: action|summary|resume_key|resume_body. resume_key + body are dispatched on approve. EX: PHONE_APPROVAL_CREATE deploy|prod deploy of miscsubjects-pages|LOCAL_EXEC|cd /Users/[custodian]/miscsubjects-pages && npx wrangler pages deploy public --project-name loop-safe-miscsubjects --commit-dirty=true TESTS: row in approvals with status=pending; iMessage arrives with id + Approve/Deny instructions.",
      "read": "https://miscsubjects.com/api/directory/PHONE_APPROVAL_CREATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PHONE_APPROVAL_CREATE",
        "body": ""
      },
      "router_tag": "[PHONE_APPROVAL_CREATE]args[/PHONE_APPROVAL_CREATE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PHONE_APPROVAL_RESOLVE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "phone",
      "target": "approvalResolve",
      "description": "WHAT: update approvals.status to approved/denied and, on approve, dispatch the stored resume_key. WHEN_TO_USE: phone tap, /admin/approvals click, or natural-language \"approve 12\". ARGS: approval_id|decision (approve|deny). EX: PHONE_APPROVAL_RESOLVE 12|approve TESTS: approvals.status flips; if approve, the resume dispatch returns a real trace.",
      "read": "https://miscsubjects.com/api/directory/PHONE_APPROVAL_RESOLVE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PHONE_APPROVAL_RESOLVE",
        "body": ""
      },
      "router_tag": "[PHONE_APPROVAL_RESOLVE]args[/PHONE_APPROVAL_RESOLVE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PHONE_CLIPBOARD_HANDLE",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "phone",
      "target": null,
      "description": "WHAT: phone clipboard contents → ROUTER. Same shape as share_text but explicitly tagged. WHEN_TO_USE: /api/phone/in action=clipboard. ARGS: clipboard_text.",
      "read": "https://miscsubjects.com/api/directory/PHONE_CLIPBOARD_HANDLE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PHONE_CLIPBOARD_HANDLE",
        "body": ""
      },
      "router_tag": "[PHONE_CLIPBOARD_HANDLE]args[/PHONE_CLIPBOARD_HANDLE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PHONE_EVENTS_TAIL",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "phone",
      "target": "GET /api/dispatch?info=1",
      "description": "WHAT: tail the phone_events table. ARGS: limit (default 20). WHEN_TO_USE: \"what did my phone send today\".",
      "read": "https://miscsubjects.com/api/directory/PHONE_EVENTS_TAIL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PHONE_EVENTS_TAIL",
        "body": ""
      },
      "router_tag": "[PHONE_EVENTS_TAIL]args[/PHONE_EVENTS_TAIL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PHONE_LOCATION_HANDLE",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "phone",
      "target": null,
      "description": "WHAT: phone location event → ROUTER. ARGS: location_label (e.g. \"arrived: home\"). WHEN_TO_USE: /api/phone/in action=location, NFC tap, geofence trigger. ARGS: location_label.",
      "read": "https://miscsubjects.com/api/directory/PHONE_LOCATION_HANDLE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PHONE_LOCATION_HANDLE",
        "body": ""
      },
      "router_tag": "[PHONE_LOCATION_HANDLE]args[/PHONE_LOCATION_HANDLE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PHONE_NOTIFY",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "phone",
      "target": null,
      "description": "WHAT: send a push to the custodian's phone via iMessage. WHEN_TO_USE: an agent finished a task, hit a milestone, or needs eyes on something. ARGS: title|body. Multi-line body OK. EX: PHONE_NOTIFY \"deploy done\"|\"see https://miscsubjects.com\" TESTS: should arrive on <owner line, not public> as an iMessage starting with \"🔔 $1\".",
      "read": "https://miscsubjects.com/api/directory/PHONE_NOTIFY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PHONE_NOTIFY",
        "body": ""
      },
      "router_tag": "[PHONE_NOTIFY]args[/PHONE_NOTIFY]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PHONE_SHARE_IMAGE_HANDLE",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "phone",
      "target": null,
      "description": "WHAT: phone shared an image — store as reference + route image URL through ROUTER (ARCADS picks it up). WHEN_TO_USE: /api/phone/in action=share_image or action=photo. ARGS: image_url|caption. EX: PHONE_SHARE_IMAGE_HANDLE https://example.com/competitor-ad.png|\"competitor ad — copy idea\" TESTS: ARCADS sees the URL and treats it as a reference image.",
      "read": "https://miscsubjects.com/api/directory/PHONE_SHARE_IMAGE_HANDLE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PHONE_SHARE_IMAGE_HANDLE",
        "body": ""
      },
      "router_tag": "[PHONE_SHARE_IMAGE_HANDLE]args[/PHONE_SHARE_IMAGE_HANDLE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PHONE_SHARE_TEXT_HANDLE",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "phone",
      "target": null,
      "description": "WHAT: phone shared selected text — route straight to ROUTER as if the custodian had typed it. WHEN_TO_USE: /api/phone/in action=share_text. ARGS: text. EX: PHONE_SHARE_TEXT_HANDLE \"remind me to follow up with Will Friday\" TESTS: ROUTER replies (or routes to BUILDER_ADD / THREAD_ADD as appropriate).",
      "read": "https://miscsubjects.com/api/directory/PHONE_SHARE_TEXT_HANDLE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PHONE_SHARE_TEXT_HANDLE",
        "body": ""
      },
      "router_tag": "[PHONE_SHARE_TEXT_HANDLE]args[/PHONE_SHARE_TEXT_HANDLE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PHONE_SHARE_URL_HANDLE",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "phone",
      "target": null,
      "description": "WHAT: phone shared a URL via the Share Sheet — fetch its markdown and route to ROUTER as a normal turn. WHEN_TO_USE: /api/phone/in receives action=share_url. ARGS: text|url. EX: PHONE_SHARE_URL_HANDLE \"interesting\"|https://example.com/article TESTS: ROUTER receives a turn with the markdown body inlined and decides what to do.",
      "read": "https://miscsubjects.com/api/directory/PHONE_SHARE_URL_HANDLE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PHONE_SHARE_URL_HANDLE",
        "body": ""
      },
      "router_tag": "[PHONE_SHARE_URL_HANDLE]args[/PHONE_SHARE_URL_HANDLE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PHONE_VOICE_NOTE_HANDLE",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "phone",
      "target": null,
      "description": "WHAT: transcribe a phone voice memo and route the transcript through ROUTER like an iMessage. WHEN_TO_USE: /api/phone/in receives action=voice_note from an iOS Shortcut. ARGS: voice_url. EX: PHONE_VOICE_NOTE_HANDLE https://miscsubjects.com/img/gen/foo.m4a TESTS: ROUTER receives \"[channel ios_shortcut 1:1 ...] Now: (voice memo) <transcript>\" and replies.",
      "read": "https://miscsubjects.com/api/directory/PHONE_VOICE_NOTE_HANDLE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PHONE_VOICE_NOTE_HANDLE",
        "body": ""
      },
      "router_tag": "[PHONE_VOICE_NOTE_HANDLE]args[/PHONE_VOICE_NOTE_HANDLE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SHORTCUT_RUN",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "phone",
      "target": null,
      "description": "WHAT: catch-all for iOS Shortcuts that pass arbitrary JSON. Route to ROUTER. WHEN_TO_USE: /api/phone/in action=shortcut_run. ARGS: payload_json.",
      "read": "https://miscsubjects.com/api/directory/SHORTCUT_RUN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SHORTCUT_RUN",
        "body": ""
      },
      "router_tag": "[SHORTCUT_RUN]args[/SHORTCUT_RUN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PIPELINE_MAP",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "pipeline",
      "target": "pipelineMap",
      "description": "Combinatorial matrix: every peptide x (condition+pharma), model-weighted. ARGS: none",
      "read": "https://miscsubjects.com/api/directory/PIPELINE_MAP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PIPELINE_MAP",
        "body": ""
      },
      "router_tag": "[PIPELINE_MAP]args[/PIPELINE_MAP]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PIPELINE_SEED",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "pipeline",
      "target": "pipelineSeed",
      "description": "Inventory one kind (peptide|condition|pharma) via the model; inserts rows. ARGS: kind",
      "read": "https://miscsubjects.com/api/directory/PIPELINE_SEED",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PIPELINE_SEED",
        "body": ""
      },
      "router_tag": "[PIPELINE_SEED]args[/PIPELINE_SEED]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PIPELINE_STATUS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "pipeline",
      "target": "pipelineStatus",
      "description": "Counts by kind/phase + top combos. ARGS: none",
      "read": "https://miscsubjects.com/api/directory/PIPELINE_STATUS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PIPELINE_STATUS",
        "body": ""
      },
      "router_tag": "[PIPELINE_STATUS]args[/PIPELINE_STATUS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PIPELINE_WRITE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "pipeline",
      "target": "pipelineWrite",
      "description": "Write one item: outline -> article -> POST with provenance. ARGS: id",
      "read": "https://miscsubjects.com/api/directory/PIPELINE_WRITE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PIPELINE_WRITE",
        "body": ""
      },
      "router_tag": "[PIPELINE_WRITE]args[/PIPELINE_WRITE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PRIVACY_EGRESS",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "privacy",
      "target": "POST https://miscsubjects.com/api/privacy",
      "description": "WHAT: Shape or record context egress under the OIP Privacy Profile. Dry-run classification/minimization never executes a transmission; authorization binds an exact hash/recipient/purpose; disclosure and erasure outcomes remain distinct. ARGS: JSON {action:shape|classify|minimize|authorize|disclose|erasure|conformance,...}. Read https://miscsubjects.com/api/privacy for exact per-action schemas. For real sensitive payloads call the owner-authenticated endpoint directly; dispatch receipts store invocation input, so use this row only with synthetic or already-redacted content. TESTS: No shape/classify/minimize action executes or stores payloads; request-sent never means deleted; recipient roles and legal bases are claims; unknown recipients stay unknown.",
      "read": "https://miscsubjects.com/api/directory/PRIVACY_EGRESS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PRIVACY_EGRESS",
        "body": ""
      },
      "router_tag": "[PRIVACY_EGRESS]args[/PRIVACY_EGRESS]",
      "input_schema": {
        "type": "object",
        "required": [
          "action"
        ]
      },
      "examples": "[]",
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "CONSTITUTION_V1_4_0",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "prompt",
      "target": "kimi",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/CONSTITUTION_V1_4_0",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "CONSTITUTION_V1_4_0",
        "body": ""
      },
      "router_tag": "[CONSTITUTION_V1_4_0]args[/CONSTITUTION_V1_4_0]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OBJECTION_JUDGE_V1",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "prompt",
      "target": "kimi",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/OBJECTION_JUDGE_V1",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OBJECTION_JUDGE_V1",
        "body": ""
      },
      "router_tag": "[OBJECTION_JUDGE_V1]args[/OBJECTION_JUDGE_V1]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROMPT_EDITOR_AGENT_V3",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "prompt",
      "target": "kimi",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/PROMPT_EDITOR_AGENT_V3",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROMPT_EDITOR_AGENT_V3",
        "body": ""
      },
      "router_tag": "[PROMPT_EDITOR_AGENT_V3]args[/PROMPT_EDITOR_AGENT_V3]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROMPT_EDITOR_AGENT_V4",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "prompt",
      "target": "kimi",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/PROMPT_EDITOR_AGENT_V4",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROMPT_EDITOR_AGENT_V4",
        "body": ""
      },
      "router_tag": "[PROMPT_EDITOR_AGENT_V4]args[/PROMPT_EDITOR_AGENT_V4]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROMPT_EDITOR_AUDITOR_V1",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "prompt",
      "target": "kimi",
      "description": "EDITOR_AUDITOR Protocol v1",
      "read": "https://miscsubjects.com/api/directory/PROMPT_EDITOR_AUDITOR_V1",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROMPT_EDITOR_AUDITOR_V1",
        "body": ""
      },
      "router_tag": "[PROMPT_EDITOR_AUDITOR_V1]args[/PROMPT_EDITOR_AUDITOR_V1]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROMPT_ORIGINAL_DECISION_PROTOCOL_2026_06",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "prompt",
      "target": "kimi",
      "description": "The original decision protocol (June 2026) — preserved as a guidebook  This is column A of the owner's original sheet-based build, verbatim except for a scrubbed contact roster. It is the direct ancestor of the Decision Constitution (functions/_lib/decision_constitution.js) and the reason the ledger looks the way it does: in this architecture every model turn ran under clause law, emitted a numbered REASONING block ending in a DECISION line, and had its raw output, raw tool call, and tool result written to three audit columns — a proto-ledger in a spreadsheet. Obsolete as software. Canonical as doctrine. Do not modernize this file; it is a record.",
      "read": "https://miscsubjects.com/api/directory/PROMPT_ORIGINAL_DECISION_PROTOCOL_2026_06",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROMPT_ORIGINAL_DECISION_PROTOCOL_2026_06",
        "body": ""
      },
      "router_tag": "[PROMPT_ORIGINAL_DECISION_PROTOCOL_2026_06]args[/PROMPT_ORIGINAL_DECISION_PROTOCOL_2026_06]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROMPT_PEPTIDE_WRITER_57",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "prompt",
      "target": "kimi",
      "description": "PEPTIDE_WRITER — 57-article content map",
      "read": "https://miscsubjects.com/api/directory/PROMPT_PEPTIDE_WRITER_57",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROMPT_PEPTIDE_WRITER_57",
        "body": ""
      },
      "router_tag": "[PROMPT_PEPTIDE_WRITER_57]args[/PROMPT_PEPTIDE_WRITER_57]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROMPT_SHARED_LAW",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "prompt",
      "target": "kimi",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/PROMPT_SHARED_LAW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROMPT_SHARED_LAW",
        "body": ""
      },
      "router_tag": "[PROMPT_SHARED_LAW]args[/PROMPT_SHARED_LAW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROMPT_STYLE_LAW",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "prompt",
      "target": "kimi",
      "description": "STYLE_LAW — single source of truth for every agent prompt in this build",
      "read": "https://miscsubjects.com/api/directory/PROMPT_STYLE_LAW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROMPT_STYLE_LAW",
        "body": ""
      },
      "router_tag": "[PROMPT_STYLE_LAW]args[/PROMPT_STYLE_LAW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROMPT_WRITER_AGENT_V3",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "prompt",
      "target": "kimi",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/PROMPT_WRITER_AGENT_V3",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROMPT_WRITER_AGENT_V3",
        "body": ""
      },
      "router_tag": "[PROMPT_WRITER_AGENT_V3]args[/PROMPT_WRITER_AGENT_V3]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROMPT_WRITER_AGENT_V4",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "prompt",
      "target": "kimi",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/PROMPT_WRITER_AGENT_V4",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROMPT_WRITER_AGENT_V4",
        "body": ""
      },
      "router_tag": "[PROMPT_WRITER_AGENT_V4]args[/PROMPT_WRITER_AGENT_V4]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROMPT_WRITER_AGENT_V5",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "prompt",
      "target": "kimi",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/PROMPT_WRITER_AGENT_V5",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROMPT_WRITER_AGENT_V5",
        "body": ""
      },
      "router_tag": "[PROMPT_WRITER_AGENT_V5]args[/PROMPT_WRITER_AGENT_V5]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DISCLOSURE_GET",
      "object_type": "knowledge",
      "runner": "http",
      "directory_type": "http",
      "category": "protocol",
      "target": "GET https://miscsubjects.com/disclosure/$1",
      "description": "WHAT: Read a versioned public defensive-publication artifact from the disclosure archive. Text is scanned for bearer/credential material at read time; binary artifacts are admitted only after local render/hash/credential review. Keys are immutable and public. ARGS: $1 = public disclosure path returned by a publication manifest, for example 2026-07-17/operation-killbox-v1.1/specification.md. TESTS: Unknown paths and traversal return 404; text containing credential material returns a generic 404; successful responses include immutable caching, CORS, nosniff and sandbox headers.",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DISCLOSURE_GET",
        "body": ""
      },
      "router_tag": "[DISCLOSURE_GET]args[/DISCLOSURE_GET]",
      "input_schema": {
        "type": "string",
        "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._/-]{0,500}$"
      },
      "examples": "[\"2026-07-17/operation-killbox-v1.1/specification.md\"]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "EDITORIAL_BOARD_RUN",
      "object_type": "knowledge",
      "runner": "fn",
      "directory_type": "fn",
      "category": "protocol",
      "target": "protocolRun",
      "description": "WHAT: Run one receiving editorial-board task. It reads a MODEL_CHAT_INTAKE ledger event, extracts owner complaints and content-rule defects as JSON, ledgers EDITORIAL_BOARD_DECISION, and queues OIP purification. WHEN_TO_USE: after raw model/chat intake, or cron, to process one editorial-board queue item. ARGS: none EX: [EDITORIAL_BOARD_RUN][/EDITORIAL_BOARD_RUN]",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "EDITORIAL_BOARD_RUN",
        "body": ""
      },
      "router_tag": "[EDITORIAL_BOARD_RUN]args[/EDITORIAL_BOARD_RUN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MODEL_CHAT_INTAKE",
      "object_type": "knowledge",
      "runner": "http",
      "directory_type": "http",
      "category": "protocol",
      "target": "POST https://miscsubjects.com/api/protocol/model-intake",
      "description": "WHAT: Append raw outside-model/chat text to the ledger and queue the receiving editorial board. WHEN_TO_USE: paste any model answer, raw chat log, critique, complaint, or documentation feedback into the build so the board extracts rules and queues purification. ARGS: $1+ raw text/plain chat log EX: [MODEL_CHAT_INTAKE]Claude said OIP is unclear because...[/MODEL_CHAT_INTAKE]",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MODEL_CHAT_INTAKE",
        "body": ""
      },
      "router_tag": "[MODEL_CHAT_INTAKE]args[/MODEL_CHAT_INTAKE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_ARTICLE_REVIEW",
      "object_type": "knowledge",
      "runner": "fn",
      "directory_type": "fn",
      "category": "protocol",
      "target": "protocolRun",
      "description": "WHAT: Run one OIP article loop tick. Claims the next tasks.source=oip-review row and routes it: oip-review scores machine JSON clarity + English clarity with a fresh model; oip-write has a model write a missing OIP article; oip-revise has a model rewrite a failing article as a new append-only version. Every step lands in the ledger. WHEN_TO_USE: cron or manual trigger to advance the recursive OIP documentation loop one step. ARGS: none EX: [OIP_ARTICLE_REVIEW][/OIP_ARTICLE_REVIEW]",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_ARTICLE_REVIEW",
        "body": ""
      },
      "router_tag": "[OIP_ARTICLE_REVIEW]args[/OIP_ARTICLE_REVIEW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_PURIFICATION_SEED",
      "object_type": "knowledge",
      "runner": "http",
      "directory_type": "http",
      "category": "protocol",
      "target": "POST https://miscsubjects.com/api/protocol/oip-purify-seed",
      "description": "WHAT: Queue OIP documentation purification under logical-proof-v1. Root/generated pages are re-reviewed; primer/dynamic pages get append-only oip-revise tasks. WHEN_TO_USE: after content rules change or after an editorial-board decision identifies unclear/proofless OIP documentation. ARGS: optional raw JSON {\"slugs\":[\"oip\",\"oip-operating-model\"],\"brief\":\"...\"} EX: [OIP_PURIFICATION_SEED]{\"slugs\":[\"oip\",\"oip-operating-model\"],\"brief\":\"Every claim must be proven by route/object/receipt.\"}[/OIP_PURIFICATION_SEED]",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_PURIFICATION_SEED",
        "body": ""
      },
      "router_tag": "[OIP_PURIFICATION_SEED]args[/OIP_PURIFICATION_SEED]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OIP_REVIEW_SEED",
      "object_type": "knowledge",
      "runner": "http",
      "directory_type": "http",
      "category": "protocol",
      "target": "POST https://miscsubjects.com/api/protocol/oip-seed",
      "description": "WHAT: Queue OIP article clarity review tasks. Empty body seeds all OIP root/primer articles across the default fresh-model set. Raw JSON body may pass {\"slugs\":[\"oip\"],\"models\":[\"grok/grok-4.3\"]}. WHEN_TO_USE: start or refill the recursive OIP article review queue. ARGS: $1+ optional raw JSON body EX: [OIP_REVIEW_SEED]{\"slugs\":[\"oip\"],\"models\":[\"grok/grok-4.3\"]}[/OIP_REVIEW_SEED]",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OIP_REVIEW_SEED",
        "body": ""
      },
      "router_tag": "[OIP_REVIEW_SEED]args[/OIP_REVIEW_SEED]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OP_ROOT",
      "object_type": "knowledge",
      "runner": "http",
      "directory_type": "http",
      "category": "protocol",
      "target": "GET https://miscsubjects.com/api/op",
      "description": "WHAT: Read OP, the Object Protocol: definition, invariants, canonical roots, and OIP compatibility boundary. ARGS: None. Add ?format=markdown for a model-readable document. EX: [OP_ROOT][/OP_ROOT] TESTS: Response names OP, Object Protocol, OPOS, invariants, and the OIP compatibility alias.",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OP_ROOT",
        "body": ""
      },
      "router_tag": "[OP_ROOT]args[/OP_ROOT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROTOCOL_RUN",
      "object_type": "knowledge",
      "runner": "fn",
      "directory_type": "fn",
      "category": "protocol",
      "target": "protocolRun",
      "description": "WHAT: Run one protocol tick for a role. $1=role (writer|reviewer|source_hunt|oip-review|writer-queue|...). Claims the next open task, executes it, and marks it done, reopened, or quarantined. WHEN_TO_USE: manual owner trigger for one explicit tick, or an automated protocol tick. AUTORUN: automated callers respect the role KV flag (oip_review_autorun, writer_queue_autorun, source_hunt_autorun, editorial_board_autorun, or protocol_autorun). If the flag is off, the tick returns skipped and touches no task. ARGS: $1=role (default writer) EX: [PROTOCOL_RUN]oip-review[/PROTOCOL_RUN] TESTS: A protocol task that fails three times must end with tasks.status='quarantined', tasks.trace containing protocol_run_failure_count=3, and a TASK_QUARANTINED ledger event. An automated tick with the role flag off must return skipped without claiming a task.",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROTOCOL_RUN",
        "body": ""
      },
      "router_tag": "[PROTOCOL_RUN]args[/PROTOCOL_RUN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "RELAY_POST_APPEND",
      "object_type": "knowledge",
      "runner": "fn",
      "directory_type": "fn",
      "category": "protocol",
      "target": "relayPostAppend",
      "description": "WHAT: Append one model's public adoption/proof link to THE RELAY. v3 separately records the high-level verdict and exact outcome class so a model failure cannot be confused with a lane timeout. WHEN_TO_USE: After a model audits the prior relay and performs real work. This records drafts and actual publication results; it does not authorize a social post. ARGS: one JSON object: platform; identity_mode named|incognito; exact model_name, model_provider, model_version and session_label; action; result_summary; verdict PASS|FAIL|MIXED; outcome_class SUCCESS|PARTIAL|MODEL_FAILED|LANE_TIMEOUT (PASS=SUCCESS, MIXED=PARTIAL, FAIL uses one of the two failure classes); proof_links[]; media_links[]; platform_copy with LinkedIn/Facebook/Instagram/X required, each beginning [execution surface · exact model name · YYYY-MM-DD HH:MM UTC] then a newline and third-person observed result; tag_targets[{name,handle?,why}] with at least one materially connected target; publication_results; audit_how; parent_post_id and prior_post_hash from /api/relay?social=1. SECURITY: Public fields contain only cap_ fingerprints, inv_ ids, public hashes/status URLs/anchors. Never include share tokens or backend credentials. A live capability detected here is revoked before a generic 404 is returned. TESTS: Reject platform copy missing its attribution header, first-person copy, an empty tag target list, a target missing name/why, stale parent/hash, missing identity/proof/copy/tag rationale, inconsistent verdict/outcome_class, or credential material. Return v3 post, outcome class, receipt and chain links.",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "RELAY_POST_APPEND",
        "body": ""
      },
      "router_tag": "[RELAY_POST_APPEND]args[/RELAY_POST_APPEND]",
      "input_schema": {
        "type": "object",
        "required": [
          "platform",
          "identity_mode",
          "model_name",
          "model_provider",
          "model_version",
          "session_label",
          "action",
          "result_summary",
          "verdict",
          "outcome_class",
          "proof_links",
          "platform_copy",
          "tag_targets",
          "publication_results",
          "audit_how",
          "parent_post_id",
          "prior_post_hash"
        ],
        "properties": {
          "tag_targets": {
            "type": "array",
            "minItems": 1,
            "items": {
              "type": "object",
              "required": [
                "name",
                "why"
              ],
              "properties": {
                "name": {
                  "type": "string",
                  "minLength": 1
                },
                "handle": {
                  "type": [
                    "string",
                    "null"
                  ]
                },
                "why": {
                  "type": "string",
                  "minLength": 1
                }
              }
            }
          }
        }
      },
      "examples": "[{\"platform\":\"multi\",\"identity_mode\":\"incognito\",\"model_name\":\"Kimi K3\",\"model_provider\":\"Moonshot AI\",\"model_version\":\"K3\",\"session_label\":\"Kimi K3 (incognito)\",\"verdict\":\"PASS\",\"tag_targets\":[{\"name\":\"Anthropic\",\"handle\":\"@AnthropicAI\",\"why\":\"MCP defines one connectivity layer OIP receipts traverse\"}],\"publication_results\":{\"x\":{\"status\":\"POSTED\",\"url\":\"https://x.com/i/web/status/...\",\"receipt\":\"https://miscsubjects.com/receipt/inv_...\"}},\"parent_post_id\":\"rsp_...\",\"prior_post_hash\":\"...\"}]",
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TAP_GO_MODEL_PROFILES",
      "object_type": "knowledge",
      "runner": "http",
      "directory_type": "http",
      "category": "protocol",
      "target": "GET https://miscsubjects.com/api/tap-go-profiles?v=1",
      "description": "WHAT: Read the five owner-editable model-specific content slots used by token Tap & Go: ChatGPT, Claude, Grok, Gemini, and Kimi. The model selector belongs to the token DROP, not the build audit. ARGS: None for read. Owner edits one profile with PUT /api/tap-go-profiles {model,content}. EX: [TAP_GO_MODEL_PROFILES][/TAP_GO_MODEL_PROFILES] TESTS: Returns tap-go-model-profiles/1.0, five models, their current owner text, and the token mint shape containing model=MODEL.",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TAP_GO_MODEL_PROFILES",
        "body": ""
      },
      "router_tag": "[TAP_GO_MODEL_PROFILES]args[/TAP_GO_MODEL_PROFILES]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "VOXEL_BATCH",
      "object_type": "knowledge",
      "runner": "http",
      "directory_type": "http",
      "category": "protocol",
      "target": "POST https://miscsubjects.com/api/protocol/voxel-batch",
      "description": "WHAT: Land a whole document or up to 300 typed article operations with one parent result and per-operation results. ARGS: JSON {document:{slug,title,markdown}|operations:[...],actor,key?}. Web ChatGPT uses the OpenAI Action from /api/openai/actions.json; a small browser-only payload may use GET /api/protocol/voxel-batch?fire=1&payload=<URL-encoded JSON>. Never use code-interpreter Bash for miscsubjects.com. EX: [VOXEL_BATCH]{\"operations\":[{\"op\":\"challenge\",\"slug\":\"philosophy\",\"expected_thread_head\":\"<head>\",\"stance\":\"challenge\",\"body\":\"argument\"}],\"actor\":\"model\",\"key\":\"<scoped token>\"}[/VOXEL_BATCH] TESTS: Require landed+failed=total and a result for every operation; large web sessions use the Action, not a URL-length-limited GET. EXISTING SLUG LAW: Document mode appends new DIVs when document.slug already exists; it does not replace prior active DIVs. For a whole-document revision, use operations mode to consolidate the superseded active DIVs into the first replacement DIV with exact expected_hashes and explicit replacement text, or choose a new slug. Verify the final active article body hash.",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "VOXEL_BATCH",
        "body": ""
      },
      "router_tag": "[VOXEL_BATCH]args[/VOXEL_BATCH]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WEB_MODEL_LANE",
      "object_type": "knowledge",
      "runner": "http",
      "directory_type": "http",
      "category": "protocol",
      "target": "GET https://miscsubjects.com/api/model-lane",
      "description": "WHAT: Tell a web ChatGPT or similar browser-based model exactly how to reach miscsubjects without code-interpreter Bash. ARGS: none. EX: [WEB_MODEL_LANE][/WEB_MODEL_LANE] TESTS: Response names browser/web, OpenAI Actions, GET fire=1, and says not to use Bash/curl after a code-interpreter DNS failure.",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WEB_MODEL_LANE",
        "body": ""
      },
      "router_tag": "[WEB_MODEL_LANE]args[/WEB_MODEL_LANE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "QUEUE_SEND",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "queue",
      "target": "enqueueTask",
      "description": "WHAT: Enqueue a job on the loop-tasks queue for the sibling Worker to consume and forward to /api/dispatch. $1=KEY, $2=body string. Returns {queued, job} WHEN_TO_USE: you need to queue send ARGS: $1 | $2 EX: [QUEUE_SEND]arg1|arg2[/QUEUE_SEND]",
      "read": "https://miscsubjects.com/api/directory/QUEUE_SEND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "QUEUE_SEND",
        "body": ""
      },
      "router_tag": "[QUEUE_SEND]args[/QUEUE_SEND]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "REDDIT_REPLY",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "reddit",
      "target": "redditReply",
      "description": "WHAT: Post ONE comment reply to a specific Reddit thing (thread or comment) AS the owner account. WHEN_TO_USE: only when the owner directs a reply to a specific target, under the owner rules. Single-target by design; not for autonomous mass-replying (protects the labeled account from bans). ARGS: $1=parent thing id (t3_<post> or t1_<comment>) | $2=reply text AUTH: owner-gated (sensitive). Needs REDDIT_USERNAME/REDDIT_PASSWORD + client creds. RETURNS: {ok,id,url,body} EX: REDDIT_REPLY t3_abc123|Great write-up — sourced our take here.",
      "read": "https://miscsubjects.com/api/directory/REDDIT_REPLY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "REDDIT_REPLY",
        "body": ""
      },
      "router_tag": "[REDDIT_REPLY]args[/REDDIT_REPLY]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "REDDIT_SEARCH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "reddit",
      "target": "redditSearch",
      "description": "WHAT: Search Reddit for real threads on a topic and return them ready to file as reddit-type sources (native widget). WHEN_TO_USE: gathering real Reddit discussion as evidence/sources for an article. ARGS: $1=query | $2=subreddit(optional, e.g. Retatrutide) | $3=sort(top|relevance|new) | $4=t(year|month|all) RETURNS: {ok,count,sources:[{type:reddit,id,subreddit,author,title,quote,url,stats:{votes,comments},flair}]} EX: REDDIT_SEARCH retatrutide|Retatrutide|top|year",
      "read": "https://miscsubjects.com/api/directory/REDDIT_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "REDDIT_SEARCH",
        "body": ""
      },
      "router_tag": "[REDDIT_SEARCH]args[/REDDIT_SEARCH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "REDDIT_THREAD",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "reddit",
      "target": "redditThread",
      "description": "WHAT: Fetch one Reddit thread plus its top comments as reddit-type sources. WHEN_TO_USE: citing a specific thread and its comment replies. ARGS: $1=thread url or id (t3_... or the /comments/ id) | $2=max_comments(1-25, default 8) RETURNS: {ok,post:{...},comments:[{type:reddit,id:t1_...,author,quote,url,stats}]} EX: REDDIT_THREAD https://www.reddit.com/r/Retatrutide/comments/xxxx|8",
      "read": "https://miscsubjects.com/api/directory/REDDIT_THREAD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "REDDIT_THREAD",
        "body": ""
      },
      "router_tag": "[REDDIT_THREAD]args[/REDDIT_THREAD]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "REPO_ABSORB",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "repo",
      "target": null,
      "description": "Absorb a GitHub repo into directory rows on the custodian's voice command. Args: a GitHub URL or owner/repo plus any extra instruction. Hands the job to BUILDER, which clones to ~/_absorbed/, reads README/AGENTS.md, ADD_ROWs working rows, smokes one call, reports.",
      "read": "https://miscsubjects.com/api/directory/REPO_ABSORB",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "REPO_ABSORB",
        "body": ""
      },
      "router_tag": "[REPO_ABSORB]args[/REPO_ABSORB]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "REPO_SNAPSHOT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "repo",
      "target": "kvGetJson",
      "description": "WHAT: Read the FULL repo snapshot from KV: {sha, ts, byte_count, content} — content is ~310KB and floods the next turn's input. Use SNAPSHOT_META for metadata-only. Call this only when you need the raw blob itself WHEN_TO_USE: you need to repo snapshot ARGS: none EX: [REPO_SNAPSHOT][/REPO_SNAPSHOT]",
      "read": "https://miscsubjects.com/api/directory/REPO_SNAPSHOT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "REPO_SNAPSHOT",
        "body": ""
      },
      "router_tag": "[REPO_SNAPSHOT]args[/REPO_SNAPSHOT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SNAPSHOT_META",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "repo",
      "target": "GET https://miscsubjects.com/api/snapshot_ingest",
      "description": "WHAT: Repo snapshot metadata from KV: {sha, ts, byte_count} — no content blob. No args. Use this instead of REPO_SNAPSHOT whenever you only need to cite the sha, freshness, or size of the snapshot WHEN_TO_USE: you need to snapshot meta ARGS: see content EX: [SNAPSHOT_META][/SNAPSHOT_META] Repo snapshot metadata from KV: {sha, ts, byte_count} — no content blob. No args. Use this instead of REPO_SNAPSHOT whenever you only need to cite the sha, freshness, or size of the snapshot.",
      "read": "https://miscsubjects.com/api/directory/SNAPSHOT_META",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SNAPSHOT_META",
        "body": ""
      },
      "router_tag": "[SNAPSHOT_META]args[/SNAPSHOT_META]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SHORT_EDIT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "rest_meta",
      "target": "PATCH https://miscsubjects.com/api/short/$1",
      "description": "WHAT: Edit any surface by its short ID.  json_body shape depends on kind: directory={content,target?,auth?,...}; settings={value}; kv=raw text; r2=raw text; file={content,message?,sha?}; page={title?,body_html?}; article={title?,body?} WHEN_TO_USE: you need to short edit ARGS: short_id|json_body EX: [SHORT_EDIT]arg2[/SHORT_EDIT]",
      "read": "https://miscsubjects.com/api/directory/SHORT_EDIT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SHORT_EDIT",
        "body": ""
      },
      "router_tag": "[SHORT_EDIT]args[/SHORT_EDIT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SHORT_GET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "rest_meta",
      "target": "GET https://miscsubjects.com/api/short/$1",
      "description": "WHAT: Read the actual content of any surface by its short ID (D35 = 35th directory row by name; K3 = 3rd KV key; etc).  Returns {short_id,kind,name,content,read,edit,edit_method,edit_body,status} WHEN_TO_USE: you need to short get ARGS: short_id EX: [SHORT_GET][/SHORT_GET] Read the actual content of any surface by its short ID (D35 = 35th directory row by name; K3 = 3rd KV key; etc). Args: short_id. Returns {short_id,kind,name,content,read,edit,edit_method,edit_body,status}.",
      "read": "https://miscsubjects.com/api/directory/SHORT_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SHORT_GET",
        "body": ""
      },
      "router_tag": "[SHORT_GET]args[/SHORT_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AGENT_BRIDGE",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "routing",
      "target": null,
      "description": "Route a message from one agent to another. $1=source_agent, $2=target_agent, $3=message. Creates a turn that appears to come from the source agent, routed to the target agent.",
      "read": "https://miscsubjects.com/api/directory/AGENT_BRIDGE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AGENT_BRIDGE",
        "body": ""
      },
      "router_tag": "[AGENT_BRIDGE]args[/AGENT_BRIDGE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BUILD_MESSAGE",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "routing",
      "target": null,
      "description": "Send a message to the build itself. $1=message text. This creates a self-referential loop: the build routes the message back to itself as if it were a new inbound turn.",
      "read": "https://miscsubjects.com/api/directory/BUILD_MESSAGE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BUILD_MESSAGE",
        "body": ""
      },
      "router_tag": "[BUILD_MESSAGE]args[/BUILD_MESSAGE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "INTENT",
      "object_type": "agent",
      "runner": "model",
      "directory_type": "agent",
      "category": "routing",
      "target": "grok-4.3",
      "description": null,
      "read": "https://miscsubjects.com/api/directory/INTENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "INTENT",
        "body": ""
      },
      "router_tag": "[INTENT]args[/INTENT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WATCH_ACTION",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "security",
      "target": "watchAction",
      "description": "WHAT: Pre-flight gate. Given a proposed {key, body}, look up watch_rules and return {allowed:bool, reason}. Use BEFORE invoking any potentially destructive directory key. $1=KEY, $2=body WHEN_TO_USE: you need to watch action ARGS: $1 | $2 EX: [WATCH_ACTION]arg1|arg2[/WATCH_ACTION]",
      "read": "https://miscsubjects.com/api/directory/WATCH_ACTION",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WATCH_ACTION",
        "body": ""
      },
      "router_tag": "[WATCH_ACTION]args[/WATCH_ACTION]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WATCH_RULE_ADD",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "security",
      "target": "watchRuleAdd",
      "description": "WHAT: Add a deny rule to watch_rules. $1=pattern_key (regex over KEY), $2=pattern_body (regex over body, optional), $3=reason, $4=action (default \"deny\"). Returns {ok,id,...} WHEN_TO_USE: you need to watch rule add ARGS: $1 | $2 | $3 | $4 EX: [WATCH_RULE_ADD]arg1|arg2|arg3|arg4[/WATCH_RULE_ADD]",
      "read": "https://miscsubjects.com/api/directory/WATCH_RULE_ADD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WATCH_RULE_ADD",
        "body": ""
      },
      "router_tag": "[WATCH_RULE_ADD]args[/WATCH_RULE_ADD]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WATCH_RULE_DELETE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "security",
      "target": "watchRuleDelete",
      "description": "WHAT: Delete a watch_rules entry by id. $1=id WHEN_TO_USE: you need to watch rule delete ARGS: $1 EX: [WATCH_RULE_DELETE]arg1[/WATCH_RULE_DELETE]",
      "read": "https://miscsubjects.com/api/directory/WATCH_RULE_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WATCH_RULE_DELETE",
        "body": ""
      },
      "router_tag": "[WATCH_RULE_DELETE]args[/WATCH_RULE_DELETE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WATCH_RULE_LIST",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "security",
      "target": "watchRuleList",
      "description": "WHAT: List every watch_rules entry WHEN_TO_USE: you need to watch rule list ARGS: none EX: [WATCH_RULE_LIST][/WATCH_RULE_LIST]",
      "read": "https://miscsubjects.com/api/directory/WATCH_RULE_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WATCH_RULE_LIST",
        "body": ""
      },
      "router_tag": "[WATCH_RULE_LIST]args[/WATCH_RULE_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "ADD_ROW",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "self_mod",
      "target": "addRow",
      "description": "WHAT: Insert a new row into the directory (tools, agents, flows). WHEN_TO_USE: creating a new tool, agent, or flow from the model. ARGS: key|type|target|auth|content. Everything after the 4th pipe is content. AUTH (4th field): blank = no auth. NOT the literal \"none\". Prefixes: bearer:ENV_NAME | basic:ENV_NAME | headers:{\"Header\":\"$ENV\"} | query:ENV_NAME | oauth: EX: [ADD_ROW]MY_TOOL|fn|myFn||# What it does\\n[\"$1\"][/ADD_ROW] EX (bearer): [ADD_ROW]MY_HTTP|http|https://api.example.com|bearer:MY_API_KEY|# WHAT...\\n{}",
      "read": "https://miscsubjects.com/api/directory/ADD_ROW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "ADD_ROW",
        "body": ""
      },
      "router_tag": "[ADD_ROW]args[/ADD_ROW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DEL_ROW",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "self_mod",
      "target": "delRow",
      "description": "WHAT: Delete a directory row. WHEN_TO_USE: removing a tool that is broken, stale, or unwanted. ARGS: $1 = the row key. EX: [DEL_ROW]OLD_TOOL[/DEL_ROW]",
      "read": "https://miscsubjects.com/api/directory/DEL_ROW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DEL_ROW",
        "body": ""
      },
      "router_tag": "[DEL_ROW]args[/DEL_ROW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "EDIT_ROW",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "self_mod",
      "target": "editRow",
      "description": "WHAT: Edit an existing directory row (upsert). WHEN_TO_USE: changing a tool definition, updating a prompt, or fixing a row. ARGS: key|type|target|auth|content. Everything after the 4th pipe is content. EX: [EDIT_ROW]ROUTER|agent|grok-4.3|bearer:GROK_API_KEY|new prompt here[/EDIT_ROW]",
      "read": "https://miscsubjects.com/api/directory/EDIT_ROW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "EDIT_ROW",
        "body": ""
      },
      "router_tag": "[EDIT_ROW]args[/EDIT_ROW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROMPT_APPEND",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "self_mod",
      "target": "directoryAppendContent",
      "description": "WHAT: Append a clause/line to any directory row's `content` (typical use: extend ROUTER, ARCADS, OPS prompts mid-conversation without rewriting the whole prompt).  Returns JSON {ok, key, old_bytes, new_bytes, appended_head} WHEN_TO_USE: you need to prompt append ARGS: key|addition EX: [PROMPT_APPEND]arg1|arg2[/PROMPT_APPEND]",
      "read": "https://miscsubjects.com/api/directory/PROMPT_APPEND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROMPT_APPEND",
        "body": ""
      },
      "router_tag": "[PROMPT_APPEND]args[/PROMPT_APPEND]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WIRE_UP_AND_INVOKE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "self_mod",
      "target": "wireUpAndInvoke",
      "description": "WHAT: Atomic 3-step chain — resolve a short_id, append a wire-up cla  Returns JSON {short_id,name,kind,appended_clause,append_result,invoke_key,invoke_result} WHEN_TO_USE: ROUTER's prompt, and invoke the resolved tool ARGS: short_id|trigger_phrase|invoke_args EX: [WIRE_UP_AND_INVOKE]arg1|arg2|arg3[/WIRE_UP_AND_INVOKE]",
      "read": "https://miscsubjects.com/api/directory/WIRE_UP_AND_INVOKE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WIRE_UP_AND_INVOKE",
        "body": ""
      },
      "router_tag": "[WIRE_UP_AND_INVOKE]args[/WIRE_UP_AND_INVOKE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LEADS_DISCOVER_ORG",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "self-promotion",
      "target": "leadsDiscoverOrg",
      "description": "WHAT: SCRAPER 5 — organization discovery for a promo class via live web search. Finds real organizations with verifiable official sites and inserts them as leads (segment = class key, source = org-research), deduped on name+city. Emails are NEVER guessed here: LEADS_ENRICH finds them on the organization's own site or the row ends no_email. With a work task id, EVERY model return becomes a task-bound execution-case decision row (included or excluded, with reason, query hash and receipt binding) — nothing disappears into a skip count. WHEN_TO_USE: populating a promo class with real organizations before enrichment; \"find AI assurance firms\". For task-bound proof runs (execution cases) ALWAYS pass the work task id as $4. ARGS: $1 = promo class key (must exist in promo_classes), $2 = free-text query, $3 = count (default 12, cap 20), $4 = optional work task id (e.g. WT-0090) — binds every evaluated organization to that task's execution case. EX: [LEADS_DISCOVER_ORG]ai-investors|seed funds investing in AI infrastructure|20|WT-0090[/LEADS_DISCOVER_ORG]",
      "read": "https://miscsubjects.com/api/directory/LEADS_DISCOVER_ORG",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LEADS_DISCOVER_ORG",
        "body": ""
      },
      "router_tag": "[LEADS_DISCOVER_ORG]args[/LEADS_DISCOVER_ORG]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OUTREACH_ALLOCATE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "self-promotion",
      "target": "outreachAllocate",
      "description": "WHAT: The delta equation of the self-promotion loop. Per class: priority = fit x novelty x permission x (1 - saturation) x prior; volume = clamp(round(cap x priority/sum), 0, class cap). Novelty counts published artifacts newer than the class's last contact — zero new material means zero volume. Returns the full arithmetic (policy version, every term, volumes, selected lead ids). SENDS NOTHING, DRAFTS NOTHING — the invocation receipt is the ledger record of the decision. WHEN_TO_USE: whenever something ships or before planning any outreach wave for the build; \"who should hear about this today\". SAFETY: computation only. Drafting stays behind LEADS_DRAFT_AI gates; sending stays behind LEADS_SEND CONFIRM. ARGS: $1 = daily cap override (may only LOWER the policy cap of 10). EX: [OUTREACH_ALLOCATE]10[/OUTREACH_ALLOCATE]",
      "read": "https://miscsubjects.com/api/directory/OUTREACH_ALLOCATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OUTREACH_ALLOCATE",
        "body": ""
      },
      "router_tag": "[OUTREACH_ALLOCATE]args[/OUTREACH_ALLOCATE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": false,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROMO_CLASSES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "self-promotion",
      "target": "promoClasses",
      "description": "WHAT: Read the audience-class table — the starting logic of the self-promotion loop, as data. Each row: the loss the class bears, the mechanism here that reduces it, the strongest artifact to show them, the reply-earning thesis, their first objection, fit 0-100 with reason, prior, last contact. WHEN_TO_USE: before any allocation, draft, or outreach plan for the build itself; \"who would care about this\". ARGS: $1 = class key (optional; empty = all, fit desc). EX: [PROMO_CLASSES][/PROMO_CLASSES]",
      "read": "https://miscsubjects.com/api/directory/PROMO_CLASSES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROMO_CLASSES",
        "body": ""
      },
      "router_tag": "[PROMO_CLASSES]args[/PROMO_CLASSES]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SESSION_GET",
      "object_type": "session",
      "runner": "edge",
      "directory_type": "fn",
      "category": "session",
      "target": "sessionGet",
      "description": "WHAT: Read a session row WHEN_TO_USE: you need to session get ARGS: session_id EX: [SESSION_GET]arg1[/SESSION_GET]",
      "read": "https://miscsubjects.com/api/directory/SESSION_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SESSION_GET",
        "body": ""
      },
      "router_tag": "[SESSION_GET]args[/SESSION_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SESSION_RESUME",
      "object_type": "session",
      "runner": "edge",
      "directory_type": "fn",
      "category": "session",
      "target": "sessionResume",
      "description": "WHAT: Rehydrate a cold terminal agent: session row + recent LEDGER events (actor=session_id) WHEN_TO_USE: you need to session resume ARGS: session_id|limit EX: [SESSION_RESUME]arg1|arg2[/SESSION_RESUME]",
      "read": "https://miscsubjects.com/api/directory/SESSION_RESUME",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SESSION_RESUME",
        "body": ""
      },
      "router_tag": "[SESSION_RESUME]args[/SESSION_RESUME]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SESSION_START",
      "object_type": "session",
      "runner": "edge",
      "directory_type": "fn",
      "category": "session",
      "target": "sessionStart",
      "description": "WHAT: Start (or upsert) a stateful agent session WHEN_TO_USE: you need to session start ARGS: session_id|agent|cwd|goal EX: [SESSION_START]arg1|arg2|arg3|arg4[/SESSION_START]",
      "read": "https://miscsubjects.com/api/directory/SESSION_START",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SESSION_START",
        "body": ""
      },
      "router_tag": "[SESSION_START]args[/SESSION_START]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SESSION_UPDATE",
      "object_type": "session",
      "runner": "edge",
      "directory_type": "fn",
      "category": "session",
      "target": "sessionUpdate",
      "description": "WHAT: Patch a session (agent|cwd|goal|status|last_event_id) WHEN_TO_USE: you need to session update ARGS: session_id|patch_json EX: [SESSION_UPDATE]arg1|arg2[/SESSION_UPDATE]",
      "read": "https://miscsubjects.com/api/directory/SESSION_UPDATE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SESSION_UPDATE",
        "body": ""
      },
      "router_tag": "[SESSION_UPDATE]args[/SESSION_UPDATE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SET_GET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "settings",
      "target": "GET https://miscsubjects.com/api/settings/$1",
      "description": "WHAT: Read a settings row by key WHEN_TO_USE: you need to set get ARGS: key EX: [SET_GET][/SET_GET] Read a settings row by key. Args: key.",
      "read": "https://miscsubjects.com/api/directory/SET_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SET_GET",
        "body": ""
      },
      "router_tag": "[SET_GET]args[/SET_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SET_PUT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "settings",
      "target": "PUT https://miscsubjects.com/api/settings/$1",
      "description": "WHAT: Write a settings value.  json_body = {\"value\":\"...\"} WHEN_TO_USE: you need to set put ARGS: key|json_body EX: [SET_PUT]arg2[/SET_PUT]",
      "read": "https://miscsubjects.com/api/directory/SET_PUT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SET_PUT",
        "body": ""
      },
      "router_tag": "[SET_PUT]args[/SET_PUT]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SETTINGS_GET",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "settings",
      "target": null,
      "description": "Read one setting by $1=key. Use when reading a config value (e.g. grok_model).",
      "read": "https://miscsubjects.com/api/directory/SETTINGS_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SETTINGS_GET",
        "body": ""
      },
      "router_tag": "[SETTINGS_GET]args[/SETTINGS_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SETTINGS_LIST",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "settings",
      "target": null,
      "description": "List all settings. Use to enumerate keys that are read by code paths outside the directory.",
      "read": "https://miscsubjects.com/api/directory/SETTINGS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SETTINGS_LIST",
        "body": ""
      },
      "router_tag": "[SETTINGS_LIST]args[/SETTINGS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SETTINGS_READ_KV_FIRST",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "settings",
      "target": "settingsReadKvFirst",
      "description": "WHAT: Read a setting value, KV first, fall back to settings table. Returns {key, value, source: kv|d1|miss} WHEN_TO_USE: you need to settings read kv first ARGS: $1 EX: [SETTINGS_READ_KV_FIRST]arg1[/SETTINGS_READ_KV_FIRST]",
      "read": "https://miscsubjects.com/api/directory/SETTINGS_READ_KV_FIRST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SETTINGS_READ_KV_FIRST",
        "body": ""
      },
      "router_tag": "[SETTINGS_READ_KV_FIRST]args[/SETTINGS_READ_KV_FIRST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BOARD_TICK",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "sheets",
      "target": "POST https://miscsubjects.com/api/board",
      "description": "WHAT: run the owner sheet. Executes every APPROVE / REJECT / SAVE / PULL / RUN the owner typed in column A, and writes each result back beside the row that asked for it. NEVER sync on a schedule: sync rewrites every tab from scratch, so it erases the answers the owner is reading and anything he is part-way through typing. Sync is an explicit act, never a timer. ARGS: none. WHEN_TO_USE: on a schedule, so what the owner types in the sheet happens by itself.",
      "read": "https://miscsubjects.com/api/directory/BOARD_TICK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BOARD_TICK",
        "body": ""
      },
      "router_tag": "[BOARD_TICK]args[/BOARD_TICK]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SHEETS_SYNC_ALL",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "sheets",
      "target": null,
      "description": "Push directory + pages + settings tables to the master Google Sheet via the airunner Apps Script. Three pairs of (D1_TO_2D_ARRAY > APPS_SCRIPT_RUN). Use $$PREV to inline the JSON 2D array literally (not as a quoted string). APPS_SCRIPT_RUN expects args as action|args_json. WHEN_TO_USE: \"sync the sheet\" or \"push the build state to the master sheet\"",
      "read": "https://miscsubjects.com/api/directory/SHEETS_SYNC_ALL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SHEETS_SYNC_ALL",
        "body": ""
      },
      "router_tag": "[SHEETS_SYNC_ALL]args[/SHEETS_SYNC_ALL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SHEETS_SYNC_MASTER",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "sheets",
      "target": "POST https://miscsubjects.com/api/dispatch",
      "description": "WHAT: One-arg wrapper to run SHEETS_SYNC_ALL via the dispatcher. Used when an external caller (cron, GH Action) wants to push the sheet without picking a specific tab WHEN_TO_USE: scheduled sheet sync. ARGS: see content EX: [SHEETS_SYNC_MASTER][/SHEETS_SYNC_MASTER]",
      "read": "https://miscsubjects.com/api/directory/SHEETS_SYNC_MASTER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SHEETS_SYNC_MASTER",
        "body": ""
      },
      "router_tag": "[SHEETS_SYNC_MASTER]args[/SHEETS_SYNC_MASTER]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STORE_GET",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "storage",
      "target": "GET https://miscsubjects.com/api/store/f?path=$1",
      "description": "WHAT: fetch one reference file from the storage Worker (vendored docs, old build, etc). WHEN_TO_USE: an agent needs a doc/file that was moved off the repo into the store. ARGS: $1 = path, e.g. docs/api/openai/sections/012_agent_builder.md EX: [STORE_GET]docs/api/openai/sections/012_agent_builder.md[/STORE_GET] TESTS: POSITIVE: {\"key\":\"STORE_GET\",\"body\":\"docs/api/openai/sections/012_agent_builder.md\"} -> HTTP 200 with the doc body INVERSE: {\"key\":\"STORE_GET\",\"body\":\"does/not/exist\"} -> HTTP 404 not_found",
      "read": "https://miscsubjects.com/api/directory/STORE_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STORE_GET",
        "body": ""
      },
      "router_tag": "[STORE_GET]args[/STORE_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STORE_SEARCH",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "storage",
      "target": "GET https://miscsubjects.com/api/store/search?q=$1",
      "description": "WHAT: search the storage index by path/tag substring. WHEN_TO_USE: find which reference files exist before fetching one with STORE_GET. ARGS: $1 = query substring, e.g. realtime EX: [STORE_SEARCH]realtime[/STORE_SEARCH] TESTS: POSITIVE: {\"key\":\"STORE_SEARCH\",\"body\":\"openai\"} -> HTTP 200 with results array of {path,size,tag,ts} INVERSE: {\"key\":\"STORE_SEARCH\",\"body\":\"zzzznomatch\"} -> HTTP 200 with count 0",
      "read": "https://miscsubjects.com/api/directory/STORE_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STORE_SEARCH",
        "body": ""
      },
      "router_tag": "[STORE_SEARCH]args[/STORE_SEARCH]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SEND_NAMED_INVOICE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "stripe",
      "target": "sendNamedInvoice",
      "description": "WHAT: Bill a named peptide.  sku e.g. ESH-A9; tier starter|standard|advanced; duration 1mo|3mo|6mo|12mo; kind sub|onetime; mode resolve(lookup only, no write)|draft|send(finalize+SMS). Resolves price_id from stripe_catalog WHEN_TO_USE: you need to send named invoice ARGS: sku|tier|duration|kind|email|name|phone|mode EX: [SEND_NAMED_INVOICE]arg1|arg2|arg3|arg4|arg5|arg6|arg7|arg8[/SEND_NAMED_INVOICE]",
      "read": "https://miscsubjects.com/api/directory/SEND_NAMED_INVOICE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SEND_NAMED_INVOICE",
        "body": ""
      },
      "router_tag": "[SEND_NAMED_INVOICE]args[/SEND_NAMED_INVOICE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SEND_PEPTIDE_INVOICE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "stripe",
      "target": "sendPeptideInvoice",
      "description": "WHAT: Create an invoice for existing customer $1 using catalog price $2 (qty $3). $4=send (true to finalize+send; default false=draft) WHEN_TO_USE: you need to send peptide invoice ARGS: $1 | $2 | $3 | $4 EX: [SEND_PEPTIDE_INVOICE]arg1|arg2|arg3|arg4[/SEND_PEPTIDE_INVOICE]",
      "read": "https://miscsubjects.com/api/directory/SEND_PEPTIDE_INVOICE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SEND_PEPTIDE_INVOICE",
        "body": ""
      },
      "router_tag": "[SEND_PEPTIDE_INVOICE]args[/SEND_PEPTIDE_INVOICE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_CATALOG_SYNC",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "stripe",
      "target": "stripeCatalogSync",
      "description": "WHAT: Pull active products + prices from Stripe and upsert into D1.stripe_catalog WHEN_TO_USE: refresh local SKU cache ARGS: none EX: [STRIPE_CATALOG_SYNC][/STRIPE_CATALOG_SYNC]",
      "read": "https://miscsubjects.com/api/directory/STRIPE_CATALOG_SYNC",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_CATALOG_SYNC",
        "body": ""
      },
      "router_tag": "[STRIPE_CATALOG_SYNC]args[/STRIPE_CATALOG_SYNC]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_CREATE_REFUND",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "stripe",
      "target": "mcpToolCall",
      "description": "This tool will refund a payment intent in Stripe. It takes three arguments: - payment_intent (str): The ID of the payment intent to refund. - amount (int, optional): The amount to refund in currency m MCP: https://mcp.stripe.com/",
      "read": "https://miscsubjects.com/api/directory/STRIPE_CREATE_REFUND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_CREATE_REFUND",
        "body": ""
      },
      "router_tag": "[STRIPE_CREATE_REFUND]args[/STRIPE_CREATE_REFUND]",
      "input_schema": {
        "type": "object",
        "properties": {
          "payment_intent": {
            "description": "The ID of the PaymentIntent to refund.",
            "type": "string"
          },
          "amount": {
            "description": "The amount to refund in cents.",
            "type": "integer"
          },
          "reason": {
            "description": "The reason for the refund.",
            "enum": [
              "duplicate",
              "fraudulent",
              "requested_by_customer"
            ],
            "type": "string"
          },
          "human_confirmation": {
            "type": "object",
            "description": "This tool might require human confirmation. To run it, first invoke it with the desired parameters, ignoring the `approval_token` parameter.\nIf it requires human confirmation, the response will include an approval request ID and a URL to an approval page for the human to approve the tool call.\nYou, as the LLM agent, should:\n\n1. Present this URL to the human as a clickable markdown link. Tell them that they have to approve this tool call at that URL, and that they should tell you when they have approved the operation.\n2. The human will approve that call.\n3. After the human tells you they have approved the operation, you must call the tool again with the `approval_token` parameter and the exact same parameters. The operation will then go through.\n",
            "properties": {
              "approval_token": {
                "type": "string",
                "description": "The ID of the approval token for the request. This is required on only the post-human-confirmation invocation. An example ID is `approval_123`."
              }
            }
          }
        },
        "required": [
          "payment_intent"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_FETCH_STRIPE_RESOURCES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "stripe",
      "target": "mcpToolCall",
      "description": "Retrieve Stripe object details by ID. IMPORTANT: Only call this tool after search_stripe_resources is called to get specific object IDs. Do not use this tool to discover or search for objects. This to MCP: https://mcp.stripe.com/",
      "read": "https://miscsubjects.com/api/directory/STRIPE_FETCH_STRIPE_RESOURCES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_FETCH_STRIPE_RESOURCES",
        "body": ""
      },
      "router_tag": "[STRIPE_FETCH_STRIPE_RESOURCES]args[/STRIPE_FETCH_STRIPE_RESOURCES]",
      "input_schema": {
        "type": "object",
        "properties": {
          "id": {
            "description": "The unique identifier for the Stripe object (e.g. cus_123, pi_123).",
            "type": "string"
          }
        },
        "required": [
          "id"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_GET_STRIPE_ACCOUNT_INFO",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "stripe",
      "target": "mcpToolCall",
      "description": "This will get the account info for the logged in Stripe account.  MCP: https://mcp.stripe.com/",
      "read": "https://miscsubjects.com/api/directory/STRIPE_GET_STRIPE_ACCOUNT_INFO",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_GET_STRIPE_ACCOUNT_INFO",
        "body": ""
      },
      "router_tag": "[STRIPE_GET_STRIPE_ACCOUNT_INFO]args[/STRIPE_GET_STRIPE_ACCOUNT_INFO]",
      "input_schema": {
        "type": "object",
        "properties": {}
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PEPTIDES",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "stripe",
      "target": null,
      "description": "Return the active peptide product inventory from the stripe_catalog cache. Lists name, brand=esh, opaque_id, and the price tiers per product (24 prices each = starter/standard/advanced × 1mo/3mo/6mo/12mo × sub/onetime). Use when the user asks for the peptide list, the SKU list, or what is for sale.",
      "read": "https://miscsubjects.com/api/directory/STRIPE_PEPTIDES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PEPTIDES",
        "body": ""
      },
      "router_tag": "[STRIPE_PEPTIDES]args[/STRIPE_PEPTIDES]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_PUBLIC_KEY_GET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "stripe",
      "target": "envGet",
      "description": "WHAT: Return env var by name. Use ONLY for publishable values (e.g. STRIPE_PUBLIC_KEY). Never for secret keys WHEN_TO_USE: you need to stripe public key get ARGS: none EX: [STRIPE_PUBLIC_KEY_GET][/STRIPE_PUBLIC_KEY_GET]",
      "read": "https://miscsubjects.com/api/directory/STRIPE_PUBLIC_KEY_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_PUBLIC_KEY_GET",
        "body": ""
      },
      "router_tag": "[STRIPE_PUBLIC_KEY_GET]args[/STRIPE_PUBLIC_KEY_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_READ",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "stripe",
      "target": "target_map:{\"account\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/account\"},\"balance\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/balance\"},\"balance_tx_list\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/balance_transactions?limit=$1\"},\"charges_list\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/charges?limit=$1\"},\"charge_get\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/charges/$1\"},\"customers_list\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/customers?limit=$1\"},\"customer_get\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/customers/$1\"},\"customer_search\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/customers/search?query=$1\"},\"events_list\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/events?limit=$1\"},\"invoices_list\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/invoices?limit=$1\"},\"invoice_get\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/invoices/$1\"},\"invoice_items_list\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/invoiceitems?customer=$1&limit=$2\"},\"payment_links_list\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/payment_links?limit=$1\"},\"payouts_list\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/payouts?limit=$1\"},\"payout_get\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/payouts/$1\"},\"pi_get\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/payment_intents/$1\"},\"pi_list\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/payment_intents?limit=$1\"},\"prices_list\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/prices?limit=$1\"},\"price_get\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/prices/$1\"},\"products_list\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/products?limit=$1\"},\"product_get\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/products/$1\"},\"refunds_list\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/refunds?limit=$1\"},\"subscriptions_list\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/subscriptions?limit=$1\"},\"subscription_get\":{\"method\":\"GET\",\"url\":\"https://api.stripe.com/v1/subscriptions/$1\"}}",
      "description": "WHAT: Stripe READ-only unified entrypoint WHEN_TO_USE: any Stripe GET: balance, customers, invoices, charges, payouts, prices, products ARGS: $1=op, $2..$N=positional args EX: [STRIPE_READ]balance[/STRIPE_READ] TESTS: POSITIVE: {\"key\":\"STRIPE_READ\",\"body\":\"balance\"} → HTTP 200 livemode=true. INVERSE: {\"key\":\"STRIPE_READ\",\"body\":\"xxx\"} → ERR:target_map:unknown_op",
      "read": "https://miscsubjects.com/api/directory/STRIPE_READ",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_READ",
        "body": ""
      },
      "router_tag": "[STRIPE_READ]args[/STRIPE_READ]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_SEARCH_STRIPE_DOCUMENTATION",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "stripe",
      "target": "mcpToolCall",
      "description": "Search the Stripe documentation for the given question and language. It takes two arguments: - question (str): The user question to search an answer for in the Stripe documentation. - language (str, o MCP: https://mcp.stripe.com/",
      "read": "https://miscsubjects.com/api/directory/STRIPE_SEARCH_STRIPE_DOCUMENTATION",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_SEARCH_STRIPE_DOCUMENTATION",
        "body": ""
      },
      "router_tag": "[STRIPE_SEARCH_STRIPE_DOCUMENTATION]args[/STRIPE_SEARCH_STRIPE_DOCUMENTATION]",
      "input_schema": {
        "type": "object",
        "properties": {
          "question": {
            "type": "string",
            "description": "The user question about integrating with Stripe will be used to search the documentation."
          },
          "language": {
            "type": "string",
            "description": "The programming language to search for in the the documentation.",
            "enum": [
              "dotnet",
              "go",
              "java",
              "node",
              "php",
              "ruby",
              "python",
              "curl"
            ]
          },
          "search_only_api_ref": {
            "type": "boolean",
            "description": "When set to true, search only in the Stripe API reference documentation instead of the full documentation set. Use true when users need specific API implementation details, code examples, or parameter references. Use false (default) for conceptual explanations, best practices, integration guides, or troubleshooting help."
          }
        },
        "required": [
          "question"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_SEARCH_STRIPE_RESOURCES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "stripe",
      "target": "mcpToolCall",
      "description": "This tool can be used to search for specific Stripe resources using a custom Stripe query syntax. It is only able to search for the following resources: customers, payment_intents, charges, invoices,  MCP: https://mcp.stripe.com/",
      "read": "https://miscsubjects.com/api/directory/STRIPE_SEARCH_STRIPE_RESOURCES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_SEARCH_STRIPE_RESOURCES",
        "body": ""
      },
      "router_tag": "[STRIPE_SEARCH_STRIPE_RESOURCES]args[/STRIPE_SEARCH_STRIPE_RESOURCES]",
      "input_schema": {
        "type": "object",
        "properties": {
          "query": {
            "description": "This query string should be formatted as 'resource:query_clause', where 'resource' is one of (customers, payment_intents, charges, invoices, prices, products, subscriptions), and 'query_clause' is the actual query in Stripe's custom query syntax to query metadata for that resource.\n\nFor example, for the query: customers:email:\"jenny.rosen@example.com\"\nresource: `customers`\nquery_clause: `email:\"jenny.rosen@example.com\"`\n\nA query clause consists of a field, operator, and value.\n\n## Query Fields for customers\n* created\n* email\n* metadata\n* name\n* phone\n\n## Query Fields for payment_intents\n* amount\n* created\n* currency\n* customer\n* metadata\n* status\n\n## Query Fields for charges\n* amount\n* billing_details.address.postal_code\n* created\n* currency\n* customer\n* disputed\n* metadata\n* payment_method_details.{{SOURCE}}.last4\n* payment_method_details.{{SOURCE}}.exp_month\n* payment_method_details.{{SOURCE}}.exp_year\n* payment_method_details.{{SOURCE}}.brand\n* payment_method_details.{{SOURCE}}.fingerprint\n* refunded\n* status\n\n## Query Fields for invoices\n* created\n* currency\n* customer\n* last_finalization_error_code\n* last_finalization_error_type\n* metadata\n* number\n* receipt_number\n* status\n* subscription\n* total\n\n## Query Fields for prices\n* active\n* currency\n* lookup_key\n* metadata\n* product\n* type\n\n## Query Fields for products\n* active\n* description\n* metadata\n* name\n* shippable\n* url\n\n## Query Fields for subscriptions\n* created\n* metadata\n* status\n* canceled_at\n\n## Search Operators\nThe following table lists the syntax that you can use to construct a query:\n\n| Syntax | Usage | Description | When to Use | Examples |\n|--------|-------|-------------|-------------|----------|\n| `:` | `field:value` | Exact match operator (case insensitive) | **ONLY when you know the exact complete value** | `currency:\"eur\"` returns records where the currency is exactly \"EUR\" |\n| `~` | `field~value` | Substring match operator (minimum 3 characters) | **ALWAYS use for domain searches, partial names, email parts** | `email~\"foo.com\"` returns emails containing \"foo.com\" |\n| `AND`, `and` | `field:value1 AND field:value2` | Returns records that match both clauses | Combining multiple conditions | `status:\"active\" AND amount:500` |\n| `OR`, `or` | `field:value1 OR field:value2` | Returns records that match either clause | Alternative conditions | `currency:\"usd\" OR currency:\"eur\"` |\n| `-` | `-field:value` | Returns records that don't match the clause | Excluding specific values | `-currency:\"jpy\"` returns records not in JPY |\n| `NULL`, `null` | `field:null` | Checks for field presence (empty/null values) | Finding empty fields | `url:null` returns records where URL field is empty |\n| `>`, `<`, `>=`, `<=`, `=` | `field>value`, `field<value`, etc. | Numeric comparison operators | Amount ranges, dates | `amount>=\"10\"` returns records with amount >= 10 |\n| `` | `\" \"\"\"` | Escape quotes within quotes | When quotes are in the search value | `description:\"the story called \"The Sky and the Sea.\"\"` |\n\n## Query Rules\n* You can combine up to 10 query clauses in a search by separating them with a space or using AND/OR keywords (case insensitive)\n* You cannot combine AND and OR in the same query\n* No parentheses are supported for operator precedence\n* By default, the API combines clauses with AND logic\n* You must use quotation marks around string values (optional for numeric values)\n* You can escape quotes inside quotes with a backslash (\\)\n\n## Examples\n\nInput: Look up charges matching a custom metadata value.\nOutput: charges:metadata['order_id']:'1234567890'\n\nInput: Look up charges matching the last 4 digits of the card used for the payment.\nOutput: charges:payment_method_details.card.last4:4242\n\nInput: Look up customers matching an email.\nOutput: customers:email:'jenny.rosen@example.com'\n\nInput: Look up PaymentIntents not in the USD currency.\nOutput: payment_intents:-currency:'usd'\n\nInput: Filter invoice objects with a total greater than 1000.\nOutput: invoices:total>1000\n\nInput: Filter payments with a amount over $100.\nReasoning: Stripe \"amount\" field is in cents, so we use 1000 instead of 100\nOutput: payment_intents:amount>1000\n\nInput: Look up charges matching a combination of metadata and currency.\nOutput: charges:metadata['key']:'value' AND currency:'usd'\n\nInput: Search for customers with email containing \"john\".\nOutput: customers:email~\"john\"\n\nInput: Find products where the description field is empty.\nOutput: products:description:null\n\nInput: Search for payments with amounts greater than or equal to 5000.\nOutput: payment_intents:amount>=5000\n\nInput: Search for products with description with escaped quotes.\nOutput: products:description:\"The story called \"The Sky and the Sea\".\"\n",
            "type": "string"
          }
        },
        "required": [
          "query"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_SEND_STRIPE_MCP_FEEDBACK",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "stripe",
      "target": "mcpToolCall",
      "description": "Submit feedback from user or agent about Stripe's MCP server tools. Valid: \"the search tool returned irrelevant results\", \"I wish there was a tool for X\" Invalid: Stripe API complaints, AI model issue MCP: https://mcp.stripe.com/",
      "read": "https://miscsubjects.com/api/directory/STRIPE_SEND_STRIPE_MCP_FEEDBACK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_SEND_STRIPE_MCP_FEEDBACK",
        "body": ""
      },
      "router_tag": "[STRIPE_SEND_STRIPE_MCP_FEEDBACK]args[/STRIPE_SEND_STRIPE_MCP_FEEDBACK]",
      "input_schema": {
        "type": "object",
        "properties": {
          "sentiment": {
            "type": "string",
            "enum": [
              "positive",
              "negative",
              "neutral"
            ],
            "description": "positive, negative, or neutral"
          },
          "quote": {
            "type": "string",
            "description": "User's exact message containing feedback. Max 1000 chars."
          },
          "context": {
            "type": "string",
            "description": "User persona, their broader goal, current task, and estimated technical proficiency."
          },
          "tool_name": {
            "type": "string",
            "description": "The name of the tool the user is giving feedback about. Include if confident that feedback is about a specific tool."
          },
          "source": {
            "type": "string",
            "description": "user or agent",
            "enum": [
              "user",
              "agent"
            ]
          }
        },
        "required": [
          "sentiment",
          "quote",
          "context",
          "source"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_SKUS_BY_NAME",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "stripe",
      "target": null,
      "description": "Find cached SKU by name pattern $1 (LIKE %$1%). Returns matching products + prices.",
      "read": "https://miscsubjects.com/api/directory/STRIPE_SKUS_BY_NAME",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_SKUS_BY_NAME",
        "body": ""
      },
      "router_tag": "[STRIPE_SKUS_BY_NAME]args[/STRIPE_SKUS_BY_NAME]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_SKUS_LIST",
      "object_type": "workflow",
      "runner": "edge",
      "directory_type": "flow",
      "category": "stripe",
      "target": null,
      "description": "List cached SKUs (product name, brand, opaque_id, prices summary). Run STRIPE_CATALOG_SYNC first to refresh.",
      "read": "https://miscsubjects.com/api/directory/STRIPE_SKUS_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_SKUS_LIST",
        "body": ""
      },
      "router_tag": "[STRIPE_SKUS_LIST]args[/STRIPE_SKUS_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_STRIPE_API_DETAILS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "stripe",
      "target": "mcpToolCall",
      "description": "Get detailed parameter information for a specific Stripe API operation. Provide the stripe_api_operation_id from stripe_api_search results to see all path, query, and body parameters with their types, MCP: https://mcp.stripe.com/",
      "read": "https://miscsubjects.com/api/directory/STRIPE_STRIPE_API_DETAILS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_STRIPE_API_DETAILS",
        "body": ""
      },
      "router_tag": "[STRIPE_STRIPE_API_DETAILS]args[/STRIPE_STRIPE_API_DETAILS]",
      "input_schema": {
        "type": "object",
        "properties": {
          "stripe_api_operation_id": {
            "description": "The operation ID to get details for (e.g. 'PostCustomers', 'GetPaymentIntents')",
            "type": "string"
          }
        },
        "required": [
          "stripe_api_operation_id"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_STRIPE_API_READ",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "stripe",
      "target": "mcpToolCall",
      "description": "Read data from any Stripe API GET operation: 1. Use stripe_api_search to find the operation ID. 2. Use stripe_api_details to understand its parameters (required for operations with nested object field MCP: https://mcp.stripe.com/",
      "read": "https://miscsubjects.com/api/directory/STRIPE_STRIPE_API_READ",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_STRIPE_API_READ",
        "body": ""
      },
      "router_tag": "[STRIPE_STRIPE_API_READ]args[/STRIPE_STRIPE_API_READ]",
      "input_schema": {
        "type": "object",
        "properties": {
          "stripe_api_operation_id": {
            "description": "The operation ID to execute (e.g. 'PostCustomers', 'GetPaymentIntents')",
            "type": "string"
          },
          "parameters": {
            "description": "Parameters for the API call. Include path parameters (e.g. 'customer' for /v1/customers/{customer}), query parameters, and body parameters as a flat object. Nested object fields use dot-notation (e.g. \"address.city\"). Array fields (e.g. line_items) must be passed as a JSON array value, not as a plain string.",
            "type": "object"
          }
        },
        "required": [
          "stripe_api_operation_id",
          "parameters"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_STRIPE_API_SEARCH",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "stripe",
      "target": "mcpToolCall",
      "description": "Search for Stripe API operations by keyword. Returns matching operations with their HTTP method, path, summary, and top-level parameter names with types. Does not include parameter descriptions, enum  MCP: https://mcp.stripe.com/",
      "read": "https://miscsubjects.com/api/directory/STRIPE_STRIPE_API_SEARCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_STRIPE_API_SEARCH",
        "body": ""
      },
      "router_tag": "[STRIPE_STRIPE_API_SEARCH]args[/STRIPE_STRIPE_API_SEARCH]",
      "input_schema": {
        "type": "object",
        "properties": {
          "query": {
            "description": "Search query describing the Stripe API operation you want to find (e.g. 'create customer', 'list payments', 'refund charge')",
            "type": "string"
          },
          "limit": {
            "description": "Maximum number of results to return (default: 5, max: 20)",
            "type": "integer",
            "minimum": 1,
            "maximum": 20,
            "default": 5
          }
        },
        "required": [
          "query"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_STRIPE_API_WRITE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "stripe",
      "target": "mcpToolCall",
      "description": "Write data via any Stripe API POST/PATCH/PUT/DELETE operation: 1. Use stripe_api_search to find the operation ID. 2. Use stripe_api_details to understand its parameters (required for operations with n MCP: https://mcp.stripe.com/",
      "read": "https://miscsubjects.com/api/directory/STRIPE_STRIPE_API_WRITE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_STRIPE_API_WRITE",
        "body": ""
      },
      "router_tag": "[STRIPE_STRIPE_API_WRITE]args[/STRIPE_STRIPE_API_WRITE]",
      "input_schema": {
        "type": "object",
        "properties": {
          "stripe_api_operation_id": {
            "description": "The operation ID to execute (e.g. 'PostCustomers', 'GetPaymentIntents')",
            "type": "string"
          },
          "parameters": {
            "description": "Parameters for the API call. Include path parameters (e.g. 'customer' for /v1/customers/{customer}), query parameters, and body parameters as a flat object. Nested object fields use dot-notation (e.g. \"address.city\"). Array fields (e.g. line_items) must be passed as a JSON array value, not as a plain string.",
            "type": "object"
          },
          "human_confirmation": {
            "type": "object",
            "description": "This tool might require human confirmation. To run it, first invoke it with the desired parameters, ignoring the `approval_token` parameter.\nIf it requires human confirmation, the response will include an approval request ID and a URL to an approval page for the human to approve the tool call.\nYou, as the LLM agent, should:\n\n1. Present this URL to the human as a clickable markdown link. Tell them that they have to approve this tool call at that URL, and that they should tell you when they have approved the operation.\n2. The human will approve that call.\n3. After the human tells you they have approved the operation, you must call the tool again with the `approval_token` parameter and the exact same parameters. The operation will then go through.\n",
            "properties": {
              "approval_token": {
                "type": "string",
                "description": "The ID of the approval token for the request. This is required on only the post-human-confirmation invocation. An example ID is `approval_123`."
              }
            }
          }
        },
        "required": [
          "stripe_api_operation_id",
          "parameters"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_STRIPE_IMPLEMENTATION_PLANNER",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "stripe",
      "target": "mcpToolCall",
      "description": "Stripe payment integration planner. Use this tool to help users accept payments, sell products online, set up billing, or build any Stripe integration. Call this BEFORE writing code when the user want MCP: https://mcp.stripe.com/",
      "read": "https://miscsubjects.com/api/directory/STRIPE_STRIPE_IMPLEMENTATION_PLANNER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_STRIPE_IMPLEMENTATION_PLANNER",
        "body": ""
      },
      "router_tag": "[STRIPE_STRIPE_IMPLEMENTATION_PLANNER]args[/STRIPE_STRIPE_IMPLEMENTATION_PLANNER]",
      "input_schema": {
        "type": "object",
        "properties": {
          "guide_id": {
            "description": "ONLY pass a guide_id that was returned by a previous call to this tool in this conversation. Never fabricate, guess, or reuse guide_ids from other sessions. If you do not have a guide_id from a prior response, omit this field entirely. Invalid guide_ids will be rejected.",
            "type": "string"
          },
          "message": {
            "description": "For new guides: describe the use case or business requirements. For existing guides: provide the latest user response or the full accepted transcript.",
            "type": "string"
          },
          "accept": {
            "description": "Set to true when returning the completed decision tree with your chosen options to receive the finalized integration guide.",
            "type": "boolean"
          }
        },
        "required": [
          "message"
        ]
      },
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "STRIPE_WRITE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "stripe",
      "target": "target_map:{\"customer_create\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/customers\",\"body\":\"form:email=$1&name=$2&phone=$3\"},\"customer_delete\":{\"method\":\"DELETE\",\"url\":\"https://api.stripe.com/v1/customers/$1\"},\"customer_update\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/customers/$1\",\"body\":\"form:email=$2&name=$3&phone=$4\"},\"invoice_create\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/invoices\",\"body\":\"form:customer=$1&collection_method=send_invoice&days_until_due=$2&description=$3\"},\"invoice_delete\":{\"method\":\"DELETE\",\"url\":\"https://api.stripe.com/v1/invoices/$1\"},\"invoice_finalize\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/invoices/$1/finalize\"},\"invoice_item_create\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/invoiceitems\",\"body\":\"form:customer=$1&amount=$2&currency=$3&description=$4\"},\"invoice_item_delete\":{\"method\":\"DELETE\",\"url\":\"https://api.stripe.com/v1/invoiceitems/$1\"},\"invoice_mark_uncollectible\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/invoices/$1/mark_uncollectible\"},\"invoice_pay\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/invoices/$1/pay\"},\"invoice_send\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/invoices/$1/send\"},\"invoice_update\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/invoices/$1\",\"body\":\"form:description=$2\"},\"invoice_void\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/invoices/$1/void\"},\"payment_link_create\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/payment_links\",\"body\":\"form:line_items[0][price]=$1&line_items[0][quantity]=$2\"},\"pi_create\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/payment_intents\",\"body\":\"form:amount=$1&currency=$2&customer=$3&description=$4\"},\"price_create\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/prices\",\"body\":\"form:product=$1&unit_amount=$2&currency=$3\"},\"product_create\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/products\",\"body\":\"form:name=$1&description=$2\"},\"refund_create\":{\"method\":\"POST\",\"url\":\"https://api.stripe.com/v1/refunds\",\"body\":\"form:charge=$1&amount=$2\"},\"subscription_cancel\":{\"method\":\"DELETE\",\"url\":\"https://api.stripe.com/v1/subscriptions/$1\"}}",
      "description": "WHAT: Stripe WRITE unified entrypoint — GATED WHEN_TO_USE: only after the custodian says \"go ahead and <verb>\". POST/PATCH/DELETE on Stripe ARGS: $1=op, $2..$N=positional args EX: [STRIPE_WRITE]invoice_void|in_xyz[/STRIPE_WRITE] TESTS: INVERSE: {\"key\":\"STRIPE_WRITE\",\"body\":\"xxx\"} → ERR:target_map:unknown_op",
      "read": "https://miscsubjects.com/api/directory/STRIPE_WRITE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "STRIPE_WRITE",
        "body": ""
      },
      "router_tag": "[STRIPE_WRITE]args[/STRIPE_WRITE]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "OUTSTANDING_SYNC_EMAIL",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "sync",
      "target": "outstandingSync",
      "description": "WHAT: Build one unified outstanding-sync report and email it: every open GitHub issue, open/running task inventory, Kimi CLI/Desktop sync state, and historical recurring problem classes. WHEN_TO_USE: The owner asks to sync GitHub issues, tasks, Kimi, model work, outstanding work, or wants everything sent by email. ARGS: mode. blank/force = send email + short iMessage notice. dry = collect only, no send. EX: [OUTSTANDING_SYNC_EMAIL]force[/OUTSTANDING_SYNC_EMAIL]",
      "read": "https://miscsubjects.com/api/directory/OUTSTANDING_SYNC_EMAIL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "OUTSTANDING_SYNC_EMAIL",
        "body": ""
      },
      "router_tag": "[OUTSTANDING_SYNC_EMAIL]args[/OUTSTANDING_SYNC_EMAIL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "KERNEL",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "system",
      "target": "kernelIn",
      "description": "Universal kernel ingress. Natural-language request resolved through the directory.\\n[\\\"$1+\\\"]",
      "read": "https://miscsubjects.com/api/directory/KERNEL",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "KERNEL",
        "body": ""
      },
      "router_tag": "[KERNEL]args[/KERNEL]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "KNOWLEDGE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "system",
      "target": "knowledgeGet",
      "description": "KNOWLEDGE — fetch a knowledge card for models ARGS: CUSTOMER_FUNNEL | AD_ACCOUNTS | MARKETING_STATE | LEO_RESEARCH | IMAGE_REFERENCE | REACTIONS | BATCH | ARTICLE_LIST EX: [KNOWLEDGE]AD_ACCOUNTS[/KNOWLEDGE]",
      "read": "https://miscsubjects.com/api/directory/KNOWLEDGE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "KNOWLEDGE",
        "body": ""
      },
      "router_tag": "[KNOWLEDGE]args[/KNOWLEDGE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROTOCOL_WRITE",
      "object_type": "knowledge",
      "runner": "fn",
      "directory_type": "fn",
      "category": "system",
      "target": "protoWrite",
      "description": "WHAT: Create, revise, or enrich an article via /api/protocol/write, /api/protocol/revise, or /api/protocol/populate. WHEN_TO_USE: the user asks for an article, wants it revised, or wants more sources/widgets added. ARGS: $1 = JSON object or plain topic string. JSON keys: mode (\"write\"|\"revise\"|\"populate\"), slug, topic, ask, feedback, web_search (bool), max_tokens (number), max_rounds (number), loops (number). Plain topic defaults to mode=write. EX: [PROTOCOL_WRITE]BPC-157 mechanisms and evidence[/PROTOCOL_WRITE] EX: [PROTOCOL_WRITE]{\"mode\":\"write\",\"topic\":\"BPC-157 vs NSAIDs\"}[/PROTOCOL_WRITE] EX: [PROTOCOL_WRITE]{\"mode\":\"revise\",\"slug\":\"bpc-157\",\"feedback\":\"add human trials and a dosing widget\"}[/PROTOCOL_WRITE] EX: [PROTOCOL_WRITE]{\"mode\":\"populate\",\"slug\":\"bpc-157\",\"ask\":\"find more human studies and create widgets\",\"max_rounds\":3}[/PROTOCOL_WRITE]",
      "read": "https://miscsubjects.com/api/articles/system-map",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROTOCOL_WRITE",
        "body": ""
      },
      "router_tag": "[PROTOCOL_WRITE]args[/PROTOCOL_WRITE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DONETASK",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "tasks",
      "target": "taskDone",
      "description": "WHAT: Mark a task as done. $1=task_id (number), $2=optional result summary. WHEN_TO_USE: a queued task has been completed and should be removed from the open backlog. ARGS: $1=task_id, $2=result summary EX: [DONETASK]123[/DONETASK]",
      "read": "https://miscsubjects.com/api/directory/DONETASK",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DONETASK",
        "body": ""
      },
      "router_tag": "[DONETASK]args[/DONETASK]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TASK_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "tasks",
      "target": "taskList",
      "description": "List tasks / writer jobs. ARGS: status (default open).",
      "read": "https://miscsubjects.com/api/directory/TASK_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TASK_LIST",
        "body": ""
      },
      "router_tag": "[TASK_LIST]args[/TASK_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TASKS_ADD",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "tasks",
      "target": null,
      "description": "WHAT: Add a new task to the queue. $1=title/ask, $2=description/context, $3=priority(P0/P1/P2/P3), $4=assigned_to_agent/role. Stores a structured JSON job so the cron runner can execute it. WHEN_TO_USE: queue work for the build to execute later (writer jobs, audits, fixes). ARGS: $1=title/ask, $2=description, $3=priority, $4=role/agent EX: [TASKS_ADD]write article about BPC-157|evidence-graded review|P2|writer[/TASKS_ADD]",
      "read": "https://miscsubjects.com/api/directory/TASKS_ADD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TASKS_ADD",
        "body": ""
      },
      "router_tag": "[TASKS_ADD]args[/TASKS_ADD]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TASKS_ASSIGN",
      "object_type": "workflow",
      "runner": "flow",
      "directory_type": "flow",
      "category": "tasks",
      "target": null,
      "description": "Assign a task to an agent. $1=task_id, $2=agent_name. Updates the source field to indicate assignment.",
      "read": "https://miscsubjects.com/api/directory/TASKS_ASSIGN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TASKS_ASSIGN",
        "body": ""
      },
      "router_tag": "[TASKS_ASSIGN]args[/TASKS_ASSIGN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TASKS_SYNC_GOOGLE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "tasks",
      "target": "tasksSyncGoogle",
      "description": "WHAT: Sync all unsynced open D1 tasks to Google Tasks. Call when asked to sync tasks to Google Tasks or when the admin Tasks tab shows unsynced items.\\n# WHEN_TO_USE: user says sync tasks to Google Tasks, or admin page shows unsynced count.\\n# ARGS: none.\\n# EX: [TASKS_SYNC_GOOGLE][/TASKS_SYNC_GOOGLE]",
      "read": "https://miscsubjects.com/api/directory/TASKS_SYNC_GOOGLE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TASKS_SYNC_GOOGLE",
        "body": ""
      },
      "router_tag": "[TASKS_SYNC_GOOGLE]args[/TASKS_SYNC_GOOGLE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOCAL_HELP",
      "object_type": "device",
      "runner": "http",
      "directory_type": "http",
      "category": "terminal",
      "target": "POST https://agent.miscsubjects.com/exec",
      "description": "WHAT: Print the --help / -h / man page of a binary on the Mac. Args: binary name. WHEN_TO_USE: \"how do I use X\", \"what flags does X have\", \"X --help\". ARGS: $1 EX: [LOCAL_HELP]claude[/LOCAL_HELP]",
      "read": "https://miscsubjects.com/api/directory/LOCAL_HELP",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOCAL_HELP",
        "body": ""
      },
      "router_tag": "[LOCAL_HELP]args[/LOCAL_HELP]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "THREAD_ADD",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "threads",
      "target": "threadAdd",
      "description": "WHAT: open a new thread (title + body + tags). status=open. WHEN_TO_USE: the custodian dumps a new line of thought; capture it for later iteration. ARGS: title|body|tags (comma-sep, optional). EX: THREAD_ADD \"peptide before/after creatives\"|\"5 variations using nano-banana with our hero shot as ref\"|arcads,images",
      "read": "https://miscsubjects.com/api/directory/THREAD_ADD",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "THREAD_ADD",
        "body": ""
      },
      "router_tag": "[THREAD_ADD]args[/THREAD_ADD]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "THREAD_APPEND",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "threads",
      "target": "threadAppend",
      "description": "WHAT: append a line to an existing thread's body. WHEN_TO_USE: the custodian says \"for that peptide thread, also …\". ARGS: id|line.",
      "read": "https://miscsubjects.com/api/directory/THREAD_APPEND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "THREAD_APPEND",
        "body": ""
      },
      "router_tag": "[THREAD_APPEND]args[/THREAD_APPEND]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "THREAD_CLOSE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "threads",
      "target": "threadClose",
      "description": "WHAT: mark a thread closed. ARGS: id.",
      "read": "https://miscsubjects.com/api/directory/THREAD_CLOSE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "THREAD_CLOSE",
        "body": ""
      },
      "router_tag": "[THREAD_CLOSE]args[/THREAD_CLOSE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "THREAD_GET",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "threads",
      "target": "threadGet",
      "description": "WHAT: Read one thread fully. WHEN_TO_USE: you need to read a thread ARGS: id EX: [THREAD_GET]42[/THREAD_GET]",
      "read": "https://miscsubjects.com/api/directory/THREAD_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "THREAD_GET",
        "body": ""
      },
      "router_tag": "[THREAD_GET]args[/THREAD_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "THREAD_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "threads",
      "target": "threadList",
      "description": "WHAT: list open threads (or by tag / status). ARGS: filter (optional — open|paused|closed OR tag:<name>).",
      "read": "https://miscsubjects.com/api/directory/THREAD_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "THREAD_LIST",
        "body": ""
      },
      "router_tag": "[THREAD_LIST]args[/THREAD_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "NOW",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "time",
      "target": "now",
      "description": "Return the current time from the build clock in Pacific time (America/Los_Angeles). WHEN_TO_USE: any object or model that needs the current date or time. ARGS: none EX: [NOW][/NOW] OUTPUT: { now, today, time, zone, iso } — Pacific-offset ISO; today is the Pacific calendar date.",
      "read": "https://miscsubjects.com/api/directory/NOW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "NOW",
        "body": ""
      },
      "router_tag": "[NOW]args[/NOW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "PROACTIVE_POKE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "tools",
      "target": "proactivePoke",
      "description": "WHAT: Send one short proactive text to the custodian. Used by the cron; you can also trigger manually.\\n# EX: [PROACTIVE_POKE][/PROACTIVE_POKE]\\n[]",
      "read": "https://miscsubjects.com/api/directory/PROACTIVE_POKE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "PROACTIVE_POKE",
        "body": ""
      },
      "router_tag": "[PROACTIVE_POKE]args[/PROACTIVE_POKE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "QUEUE_ARTICLES",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "tools",
      "target": "taskAdd",
      "description": "WHAT: Queue one or more article jobs for the automatic writer queue. Cron writes them one at a time so the custodian does not have to wait for live replies.\\n# WHEN_TO_USE: the custodian wants to batch article requests and let the build process them asynchronously.\\n# ARGS: $1 = JSON object or plain topic. JSON keys: ask, slug, topic, web_search (default true), max_tokens, post_to (default /api/protocol/write), max_rounds, model.\\n# EX: [QUEUE_ARTICLES]{\"ask\":\"Write evidence-graded TB-500 article\",\"slug\":\"tb-500\"}[/QUEUE_ARTICLES]\\n# EX: [QUEUE_ARTICLES]{\"ask\":\"Populate BPC-157 with sources and widgets\",\"slug\":\"bpc-157\",\"post_to\":\"/api/protocol/populate\",\"max_rounds\":4}[/QUEUE_ARTICLES]\\n[\"$1\",\"writer-queue\"]",
      "read": "https://miscsubjects.com/api/directory/QUEUE_ARTICLES",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "QUEUE_ARTICLES",
        "body": ""
      },
      "router_tag": "[QUEUE_ARTICLES]args[/QUEUE_ARTICLES]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SCHEDULER_SET",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "tools",
      "target": "schedulerSet",
      "description": "WHAT: Enable or disable a cron scheduler. $1=key, $2=value (0 or 1).\\n# EX: [SCHEDULER_SET]proactive_msgs|1[/SCHEDULER_SET]\\n[\"$1\",\"$2\"]",
      "read": "https://miscsubjects.com/api/directory/SCHEDULER_SET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SCHEDULER_SET",
        "body": ""
      },
      "router_tag": "[SCHEDULER_SET]args[/SCHEDULER_SET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SCHEDULERS",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "tools",
      "target": "schedulersList",
      "description": "WHAT: List scheduler/autorun state: KV loop flags plus configured automations. WHEN_TO_USE: owner asks what loops, schedulers, cron, autoruns, or recurring jobs are on/off. ARGS: none EX: [SCHEDULERS][/SCHEDULERS] TESTS: returns JSON with loop_flags, enabled_automations, disabled_automations, and automations.",
      "read": "https://miscsubjects.com/api/directory/SCHEDULERS",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SCHEDULERS",
        "body": ""
      },
      "router_tag": "[SCHEDULERS]args[/SCHEDULERS]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TIME_NOW",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "tools",
      "target": "now",
      "description": "WHAT: Return the current UTC ISO timestamp.\\n# EX: [TIME_NOW][/TIME_NOW]\\n[]",
      "read": "https://miscsubjects.com/api/directory/TIME_NOW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TIME_NOW",
        "body": ""
      },
      "router_tag": "[TIME_NOW]args[/TIME_NOW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TW",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "triplewhale",
      "target": "target_map:{\"attribution\":{\"method\":\"POST\",\"url\":\"https://api.triplewhale.com/api/v2/attribution/get-orders-with-journeys-v2\",\"body\":\"{\\\"shop\\\":\\\"$1\\\",\\\"startDate\\\":\\\"$2\\\",\\\"endDate\\\":\\\"$3\\\",\\\"timezone\\\":\\\"America/Los_Angeles\\\"}\"},\"attribution_page\":{\"method\":\"POST\",\"url\":\"https://api.triplewhale.com/api/v2/attribution/get-orders-with-journeys-v2\",\"body\":\"{\\\"shop\\\":\\\"$1\\\",\\\"startDate\\\":\\\"$2\\\",\\\"endDate\\\":\\\"$3\\\",\\\"timezone\\\":\\\"America/Los_Angeles\\\",\\\"page\\\":$4}\"},\"summary\":{\"method\":\"POST\",\"url\":\"https://api.triplewhale.com/api/v2/summary-page/get-data\",\"body\":\"{\\\"shopDomain\\\":\\\"$1\\\",\\\"period\\\":{\\\"start\\\":\\\"$2\\\",\\\"end\\\":\\\"$3\\\"},\\\"todayHour\\\":25}\"},\"raw\":{\"method\":\"POST\",\"url\":\"https://api.triplewhale.com/api/$1\",\"body\":\"$2\"},\"raw_get\":{\"method\":\"GET\",\"url\":\"https://api.triplewhale.com/api/$1\"}}",
      "description": "WHAT: Triple Whale — the LBL ad-spend and attribution source of truth (shop store-5k6xu1mred.mybigcommerce.com) WHEN_TO_USE: any LBL/Loop Bio Labs question about ad spend, channel performance, ROAS, CPA, attributed revenue ARGS: $1=op, $2=shopDomain, $3=start (YYYY-MM-DD), $4=end OPS:   summary      POST summary-page/get-data — 726 metrics, per-channel. THE daily reporting call.   attribution  POST attribution/get-orders-with-journeys-v2 — order-level journeys. EX: [TW]summary|store-5k6xu1mred.mybigcommerce.com|2026-08-01|2026-08-06[/TW]  SHOP DOMAIN LAW: it is store-5k6xu1mred.mybigcommerce.com — the BigCommerce store domain. It is NOT loopbiolabs.com and NOT pay.loopbiolabs.com. Both return HTTP 403 Access Denied, which reads as a bad key and has already cost one audit a wrong root cause. 403 here means wrong domain before it means wrong key.  ROAS LAW — every channel is its own closed loop. A channel's ROAS is that channel's ATTRIBUTED revenue divided by that channel's OWN spend. Total company revenue is never the numerator of any channel's ROAS. Dividing store revenue by ad spend produces the 4,455x and 12,405x figures that went to the LBL team for months; it is not a metric, it is a defect. Report per channel, each distinct:   Meta      spend facebookAds      · attributed facebookConversionValue  · orders facebookPurchases   Google    spend googleAds        · roas googleRoas   TikTok    spend tiktokAds        · roas tiktokRoas   Amazon    spend amazonAds        · attributed amazonAdsConversionValue   (also live in the catalog: snapchat, pinterest, reddit, linkedin, bing, criteo, taboola,    outbrain, applovin, stackadapt, walmart, twitter, openaiAds, influencer, smsbump, and    affiliate networks — impact, awin, shareasale, pepperjam, partnerize, rakuten, grin) blendedAds / adsSpend are the ALL-CHANNEL spend total. Store revenue and order count come from BigCommerce, are reported on their own line, and are labelled as company totals.  RATIO LAW: roas, newCustomersRoas, newCustomersCpa, newCustomersPercent, blendedAttributedRoas and every other rate are per-day ratios. Summing them across days is meaningless. Sum the numerator and the denominator over the range, then divide once.  DATE LAW: chart points arrive as {x: day-of-year, y: value}. Decode against the year in the requested period — never a hardcoded year — and check the off-by-one: x=212 in 2026 is 2026-08-01. The retired Apps Script decoded it as 2026-07-31 and mis-dated every figure by a day.  LAG: the connector trails ~1 day. A zero on a recent day means not-yet-reported, not zero spend. Never write a zero into a report as fact; mark it pending. A pull that silently wrote zeros is how five weeks of $0 spend reached the team unnoticed.",
      "read": "https://miscsubjects.com/api/directory/TW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TW",
        "body": ""
      },
      "router_tag": "[TW]args[/TW]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TWOCHAT_SEND",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "http",
      "category": "twochat",
      "target": "POST https://api.p.2chat.io/open/whatsapp/send-message",
      "description": "WHAT: Send a WhatsApp message. $1=from_number $2=to_number $3=text. Mirror of BLOOIO_SEND for the WhatsApp channel WHEN_TO_USE: you need to twochat send ARGS: see content EX: [TWOCHAT_SEND]arg1|arg2|arg3[/TWOCHAT_SEND]",
      "read": "https://miscsubjects.com/api/directory/TWOCHAT_SEND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TWOCHAT_SEND",
        "body": ""
      },
      "router_tag": "[TWOCHAT_SEND]args[/TWOCHAT_SEND]",
      "input_schema": null,
      "examples": null,
      "auth": "required",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "DEDUP_INSERT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "util",
      "target": "dedupInsert",
      "description": "WHAT: Insert message_id into blooio_dedup. Use ONLY from the inbound webhook handler before replying WHEN_TO_USE: you need to dedup insert ARGS: $1 EX: [DEDUP_INSERT]arg1[/DEDUP_INSERT]",
      "read": "https://miscsubjects.com/api/directory/DEDUP_INSERT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "DEDUP_INSERT",
        "body": ""
      },
      "router_tag": "[DEDUP_INSERT]args[/DEDUP_INSERT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "HISTORY_GET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "util",
      "target": "getConvoMax",
      "description": "WHAT: How many past turns the build keeps per chat. No args. Returns {convo_max} WHEN_TO_USE: the custodian asks \"how many messages do you remember\" ARGS: none EX: [HISTORY_GET][/HISTORY_GET]",
      "read": "https://miscsubjects.com/api/directory/HISTORY_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "HISTORY_GET",
        "body": ""
      },
      "router_tag": "[HISTORY_GET]args[/HISTORY_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "HISTORY_SET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "util",
      "target": "setConvoMax",
      "description": "WHAT: Set how many past turns the build keeps per chat (1-100, default 14). Arg: the number.  Takes effect immediately for every chat WHEN_TO_USE: the custodian says \"remember more/fewer messages\", \"keep the last 30\" ARGS: $1 EX: [HISTORY_SET]arg1[/HISTORY_SET]",
      "read": "https://miscsubjects.com/api/directory/HISTORY_SET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "HISTORY_SET",
        "body": ""
      },
      "router_tag": "[HISTORY_SET]args[/HISTORY_SET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "HTTP_FETCH",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "util",
      "target": "httpFetch",
      "description": "WHAT: Universal HTTP fetch.  Method GET/POST/PUT/PATCH/DELETE. body is the raw request body string (empty for GET). headers_json is optional JSON header overrides. Returns 'HTTP <status>:<body first 20000 chars>'. Authorization redacted in ledger WHEN_TO_USE: you need to http fetch ARGS: method|url|body|headers_json EX: [HTTP_FETCH]arg1|arg2|arg3|arg4[/HTTP_FETCH]",
      "read": "https://miscsubjects.com/api/directory/HTTP_FETCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "HTTP_FETCH",
        "body": ""
      },
      "router_tag": "[HTTP_FETCH]args[/HTTP_FETCH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LAST_REPLY_OF",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "util",
      "target": "lastReplyOf",
      "description": "WHAT: Extract the LAST [REPLY]...[/REPLY] block from an arbitrary text. Returns {found, text} WHEN_TO_USE: you need to last reply of ARGS: $1 EX: [LAST_REPLY_OF]arg1[/LAST_REPLY_OF]",
      "read": "https://miscsubjects.com/api/directory/LAST_REPLY_OF",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LAST_REPLY_OF",
        "body": ""
      },
      "router_tag": "[LAST_REPLY_OF]args[/LAST_REPLY_OF]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "LOWER",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "util",
      "target": "lower",
      "description": "WHAT: Lowercase a string. Use before SHA256 hashing of emails or other case-insensitive identifiers WHEN_TO_USE: you need to lower ARGS: $1 EX: [LOWER]arg1[/LOWER]",
      "read": "https://miscsubjects.com/api/directory/LOWER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "LOWER",
        "body": ""
      },
      "router_tag": "[LOWER]args[/LOWER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "MEDIA_URL_EXTRACT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "util",
      "target": "mediaUrlExtract",
      "description": "WHAT: Pull image/video URLs out of a text blob. Returns {all:[...], gen:[...]} where gen filters to /img/gen/ + miscsubjects.com only WHEN_TO_USE: you need to media url extract ARGS: $1 EX: [MEDIA_URL_EXTRACT]arg1[/MEDIA_URL_EXTRACT]",
      "read": "https://miscsubjects.com/api/directory/MEDIA_URL_EXTRACT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "MEDIA_URL_EXTRACT",
        "body": ""
      },
      "router_tag": "[MEDIA_URL_EXTRACT]args[/MEDIA_URL_EXTRACT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "REASONING_GET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "util",
      "target": "getGrokReasoningEffort",
      "description": "WHAT: Current reasoning_effort for all xAI (grok) model calls. Returns {grok_reasoning_effort}. Values: low|medium|high|none|default. Default = model decides WHEN_TO_USE: \"what is the reasoning level set to\" ARGS: none EX: [REASONING_GET][/REASONING_GET]",
      "read": "https://miscsubjects.com/api/directory/REASONING_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "REASONING_GET",
        "body": ""
      },
      "router_tag": "[REASONING_GET]args[/REASONING_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "REASONING_SET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "util",
      "target": "setGrokReasoningEffort",
      "description": "WHAT: Set reasoning_effort for all xAI (grok) model calls. Arg: low|medium|high|none|default. \"default\" removes the field (model decides). Takes effect immediately WHEN_TO_USE: \"set reasoning to low/high/off\", \"turn reasoning off\", \"set grok reasoning effort\" ARGS: $1 EX: [REASONING_SET]arg1[/REASONING_SET]",
      "read": "https://miscsubjects.com/api/directory/REASONING_SET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "REASONING_SET",
        "body": ""
      },
      "router_tag": "[REASONING_SET]args[/REASONING_SET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SET_ROW_CONTENT",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "util",
      "target": "setRowContent",
      "description": "WHAT: Set a directory row's content (pipe-safe; replaces the whole content field). WHEN_TO_USE: \"replace a prompt's content\", \"set the content of a row\". For small edits prefer DIR_PATCH. ARGS: key | content EX: [SET_ROW_CONTENT]ROUTER|new full content here[/SET_ROW_CONTENT]",
      "read": "https://miscsubjects.com/api/directory/SET_ROW_CONTENT",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SET_ROW_CONTENT",
        "body": ""
      },
      "router_tag": "[SET_ROW_CONTENT]args[/SET_ROW_CONTENT]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SHA256_LOWER",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "util",
      "target": "sha256Lower",
      "description": "WHAT: SHA-256 hex of lowercased trimmed input WHEN_TO_USE: hash em/ph/external_id for Meta CAPI or any PII hashing ARGS: $1 EX: [SHA256_LOWER]arg1[/SHA256_LOWER]",
      "read": "https://miscsubjects.com/api/directory/SHA256_LOWER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SHA256_LOWER",
        "body": ""
      },
      "router_tag": "[SHA256_LOWER]args[/SHA256_LOWER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "SHORT_RESOLVE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "util",
      "target": "shortResolve",
      "description": "WHAT: Resolve a short_id (D35 / K3 / etc.) to its underlying surface via /api/inventory?short_id=<id>. Returns the inventory row JSON WHEN_TO_USE: you need to short resolve ARGS: $1 EX: [SHORT_RESOLVE]arg1[/SHORT_RESOLVE]",
      "read": "https://miscsubjects.com/api/directory/SHORT_RESOLVE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "SHORT_RESOLVE",
        "body": ""
      },
      "router_tag": "[SHORT_RESOLVE]args[/SHORT_RESOLVE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "TRAIL_LIST",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "util",
      "target": "trailList",
      "description": "WHAT: List the trails in your own space - owner, token, or tenant; trails never cross spaces. ARGS: (none) EX: [TRAIL_LIST][/TRAIL_LIST] PRECONDITIONS: current invocation has a verified owner or recorded capability context EFFECTS: reads namespaced trail metadata only; does not expose recorded step inputs POSTCONDITIONS: returns only trail names, step counts, maximum risk, and creation timestamps from the caller namespace SAFE: true IDEMPOTENT: true TESTS: caller sees only its own namespace; missing authority fails closed.",
      "read": "https://miscsubjects.com/api/directory/TRAIL_LIST",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TRAIL_LIST",
        "body": ""
      },
      "router_tag": "[TRAIL_LIST]args[/TRAIL_LIST]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": true,
        "idempotent": true,
        "preconditions": [
          "current invocation has a verified owner or recorded capability context"
        ],
        "effects": [
          "reads namespaced trail metadata only",
          "does not expose recorded step inputs"
        ],
        "postconditions": [
          "returns only trail names, step counts, maximum risk, and creation timestamps from the caller namespace"
        ]
      }
    },
    {
      "id": "TRAIL_RUN",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "util",
      "target": "trailRun",
      "description": "WHAT: Run a named TRAIL (a saved sequence of past calls). Every recorded step is checked again against the caller's own token, consumes that caller's use budget, and produces a receipt linked to the original invocation. ARGS: name (the trail name given to TRAIL_SAVE) EX: [TRAIL_RUN]morning-report[/TRAIL_RUN] PRECONDITIONS: trail exists in the current authority namespace; current credential independently permits every step; all ancestor, tenant, risk, owner-gate, fixed-body, and use-budget checks pass EFFECTS: executes steps sequentially until the first denial or failed result; each executed step may produce its declared effects POSTCONDITIONS: every executed step has a new receipt with replay_of lineage; execution stops at the first failure; ok=true only when every step succeeds SAFE: false IDEMPOTENT: false TESTS: TRAIL_RUN-only token cannot execute a NOW step. Revoked ancestor stops before execution. Failed step stops later steps.",
      "read": "https://miscsubjects.com/api/directory/TRAIL_RUN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TRAIL_RUN",
        "body": ""
      },
      "router_tag": "[TRAIL_RUN]args[/TRAIL_RUN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": false,
        "idempotent": false,
        "preconditions": [
          "trail exists in the current authority namespace",
          "current credential independently permits every step",
          "all ancestor, tenant, risk, owner-gate, fixed-body, and use-budget checks pass"
        ],
        "effects": [
          "executes steps sequentially until the first denial or failed result",
          "each executed step may produce its declared effects"
        ],
        "postconditions": [
          "every executed step has a new receipt with replay_of lineage",
          "execution stops at the first failure",
          "ok=true only when every step succeeds"
        ]
      }
    },
    {
      "id": "TRAIL_SAVE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "util",
      "target": "trailSave",
      "description": "WHAT: Name a sequence of past invocations as a TRAIL - a named sequence of past calls you can run again as one unit (the trail itself carries no permissions). Stores each step's object key and recorded input in the current owner/capability/tenant namespace. ARGS: name|inv_ID1,inv_ID2,... (2-20 receipt ids, oldest first, comma-separated) EX: [TRAIL_SAVE]morning-report|inv_abc123,inv_def456[/TRAIL_SAVE] PRECONDITIONS: caller may read every source receipt; caller scope permits every source object; every source receipt belongs to the same authority namespace EFFECTS: writes one namespaced trail record to KV; stores the exact recorded step inputs POSTCONDITIONS: result names the namespace, maximum step risk, and saved receipt ids; no step is executed SAFE: false IDEMPOTENT: true TESTS: foreign receipt -> ERR:trail:receipt_denied. Mixed authority -> ERR:trail:mixed_authority_namespaces. TRAIL_ steps are refused.",
      "read": "https://miscsubjects.com/api/directory/TRAIL_SAVE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "TRAIL_SAVE",
        "body": ""
      },
      "router_tag": "[TRAIL_SAVE]args[/TRAIL_SAVE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": false,
        "idempotent": true,
        "preconditions": [
          "caller may read every source receipt",
          "caller scope permits every source object",
          "every source receipt belongs to the same authority namespace"
        ],
        "effects": [
          "writes one namespaced trail record to KV",
          "stores the exact recorded step inputs"
        ],
        "postconditions": [
          "result names the namespace, maximum step risk, and saved receipt ids",
          "no step is executed"
        ]
      }
    },
    {
      "id": "UPPER",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "util",
      "target": "upper",
      "description": "WHAT: Uppercase a string. Use only for cosmetic transforms; not for user-visible reply text WHEN_TO_USE: you need to upper ARGS: $1 EX: [UPPER]arg1[/UPPER]",
      "read": "https://miscsubjects.com/api/directory/UPPER",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "UPPER",
        "body": ""
      },
      "router_tag": "[UPPER]args[/UPPER]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "AUDIO",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "voice",
      "target": "audioSpeak",
      "description": "WHAT: Speak words aloud. INVOKE: [AUDIO]the words to speak[/AUDIO] WHEN_TO_USE: you need to audio ARGS: $1 | $2 EX: [AUDIO]arg1|arg2[/AUDIO]",
      "read": "https://miscsubjects.com/api/directory/AUDIO",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "AUDIO",
        "body": ""
      },
      "router_tag": "[AUDIO]args[/AUDIO]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "BUILD_VOICE_IN",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "voice",
      "target": "buildVoiceIn",
      "description": "WHAT: Mac/iOS voice URL -> STT -> Grok Build -> ara voice reply plus same-word carbon-copy text (not ROUTER). WHEN_TO_USE: build_voice action on /api/phone/in, or Mac hotkey after R2 upload. ARGS: public audio URL RETURNS: JSON with audio_url plus carbon_copy result; voice-only is incomplete. EX: [BUILD_VOICE_IN]https://miscsubjects.com/img/aud/foo.m4a[/BUILD_VOICE_IN]",
      "read": "https://miscsubjects.com/api/directory/BUILD_VOICE_IN",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "BUILD_VOICE_IN",
        "body": ""
      },
      "router_tag": "[BUILD_VOICE_IN]args[/BUILD_VOICE_IN]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "VOICE_SAY",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "voice",
      "target": "voiceSay",
      "description": "WHAT: Make a spoken-audio FILE and return its public URL (does NOT send it). INVOKE: [VOICE_SAY]<text>|<voice>[/VOICE_SAY] WHEN_TO_USE: you need to voice say ARGS: $1 | $2 EX: [VOICE_SAY]arg1|arg2[/VOICE_SAY]",
      "read": "https://miscsubjects.com/api/directory/VOICE_SAY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "VOICE_SAY",
        "body": ""
      },
      "router_tag": "[VOICE_SAY]args[/VOICE_SAY]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "VOICE_SEND",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "voice",
      "target": "voiceSendBlooio",
      "description": "WHAT: Speak a reply INTO a chat (recommended audio-out). INVOKE: [VOICE_SEND]<chat>|<words to speak>|<voice>[/VOICE_SEND] WHEN_TO_USE: you need to voice send ARGS: $1 | $2 | $3 EX: [VOICE_SEND]arg1|arg2|arg3[/VOICE_SEND]",
      "read": "https://miscsubjects.com/api/directory/VOICE_SEND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "VOICE_SEND",
        "body": ""
      },
      "router_tag": "[VOICE_SEND]args[/VOICE_SEND]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "VOICE_TRANSCRIBE",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "voice",
      "target": "voiceTranscribe",
      "description": "WHAT: Transcribe inbound audio to TEXT (OpenAI whisper-1). INVOKE: [VOICE_TRANSCRIBE]<public_audio_url>[/VOICE_TRANSCRIBE] WHEN_TO_USE: you need to voice transcribe ARGS: $1 EX: [VOICE_TRANSCRIBE]arg1[/VOICE_TRANSCRIBE]",
      "read": "https://miscsubjects.com/api/directory/VOICE_TRANSCRIBE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "VOICE_TRANSCRIBE",
        "body": ""
      },
      "router_tag": "[VOICE_TRANSCRIBE]args[/VOICE_TRANSCRIBE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WEB_FETCH",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "web",
      "target": "httpFetch",
      "description": "WHAT: Call any URL with any method.  body and headers_json optional. Full request/response logged (credentials redacted).  Example: POST|https://api.example.com/x|{\"a\":1}|{\"Authorization\":\"Bearer XYZ\"} WHEN_TO_USE: POST/PUT/DELETE to any API, or GET with custom headers/auth ARGS: method|url|body|headers_json EX: [WEB_FETCH]arg1|arg2|arg3|arg4[/WEB_FETCH]",
      "read": "https://miscsubjects.com/api/directory/WEB_FETCH",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WEB_FETCH",
        "body": ""
      },
      "router_tag": "[WEB_FETCH]args[/WEB_FETCH]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WEB_GET",
      "object_type": "tool",
      "runner": "edge",
      "directory_type": "fn",
      "category": "web",
      "target": "httpFetch",
      "description": "WHAT: GET any URL and return its status + body (first 20000 chars). Arg: the full https URL (slashes and query string preserved). Full request/response logged.  Grok also has native web_search for open-ended search; use WEB_GET when you know the exact URL WHEN_TO_USE: read any web page or public API — \"look around the internet\", check a doc, hit a third-party endpoint ARGS: $1 EX: [WEB_GET]arg1[/WEB_GET]",
      "read": "https://miscsubjects.com/api/directory/WEB_GET",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WEB_GET",
        "body": ""
      },
      "router_tag": "[WEB_GET]args[/WEB_GET]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WIKIPEDIA_SUMMARY",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "web",
      "target": "GET https://en.wikipedia.org/api/rest_v1/page/summary/$1",
      "description": "WHAT: Fetch the canonical Wikipedia REST summary for one page title (extract, description, canonical URL, revision id) for use as a citable source in an article. WHEN_TO_USE: sourcing a claim that needs an encyclopedic reference with a stable revision id; pair with the article webhook kind=source. ARGS: $1 = page title, underscores for spaces. EX: [WIKIPEDIA_SUMMARY]Simurgh[/WIKIPEDIA_SUMMARY]",
      "read": "https://miscsubjects.com/api/directory/WIKIPEDIA_SUMMARY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WIKIPEDIA_SUMMARY",
        "body": ""
      },
      "router_tag": "[WIKIPEDIA_SUMMARY]args[/WIKIPEDIA_SUMMARY]",
      "input_schema": {
        "type": "object",
        "properties": {
          "title": {
            "type": "string",
            "description": "Wikipedia page title, underscores for spaces"
          }
        },
        "required": [
          "title"
        ]
      },
      "examples": "[{\"body\":\"Simurgh\",\"why\":\"encyclopedic source with a stable revision id for a claim about the Persian Simorgh\"},{\"body\":\"Model_Context_Protocol\",\"why\":\"source a comparison claim against an external protocol\"}]",
      "auth": "required",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WORK_APPEND",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "work",
      "target": "workAppend",
      "description": "WHAT: Append one entry to the shared append-only work thread. This is how every model records what it did, proposed, or audited so the next model continues from it (fixes short model memory). WHEN_TO_USE: after you do, propose, or audit anything. Always append. ARGS: $1 = your model/agent name, $2 = kind (note|edit|proposal|audit|question|done), $3 = your entry. Prefix body with 'ref:task:12' or 'ref:lead:49' or 'ref:gh:7' to link it. EX: [WORK_APPEND]grok-web|proposal|ref:task:4032 send 50 outreach emails/day to start, ramp weekly[/WORK_APPEND]",
      "read": "https://miscsubjects.com/api/directory/WORK_APPEND",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WORK_APPEND",
        "body": ""
      },
      "router_tag": "[WORK_APPEND]args[/WORK_APPEND]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WORK_FEED",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "work",
      "target": "workFeed",
      "description": "WHAT: The shared work thread. THE FIRST THING ANY MODEL OR TOKEN-HOLDER READS. Aggregates the top priority, open tasks, open GitHub issues, the lead pipeline, and the recent model thread into one ranked view. WHEN_TO_USE: at the start of ANY session, or when asked 'what should I work on', 'what is the state', 'catch me up', 'where are we'. ARGS: $1 = how many recent thread entries (default 15). EX: [WORK_FEED][/WORK_FEED]",
      "read": "https://miscsubjects.com/api/directory/WORK_FEED",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WORK_FEED",
        "body": ""
      },
      "router_tag": "[WORK_FEED]args[/WORK_FEED]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "WRITING_LAW",
      "object_type": "tool",
      "runner": "http",
      "directory_type": "http",
      "category": "writing",
      "target": "GET https://miscsubjects.com/api/articles/writing-law",
      "description": "WHAT: Discover the canonical Laws of Writing Knowledge-Action Object — opaque, decorative, ambiguous language is hostility toward the reader.\\n# WHEN_TO_USE: any writing, rewriting, editing, replying, header, summary, argument, concession, or challenge decision on any surface.\\n# ARGS: none for the contract; follow representations.invoke with text and task to apply it.\\n# EX: [WRITING_LAW][/WRITING_LAW]\\n# CANONICAL: https://miscsubjects.com/api/articles/writing-law\\n# NOTE: this row is the discovery facet; meaning, instructions, failures, tests, versions, graph, and representations live in the canonical object and are not duplicated here.",
      "read": "https://miscsubjects.com/api/directory/WRITING_LAW",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "WRITING_LAW",
        "body": ""
      },
      "router_tag": "[WRITING_LAW]args[/WRITING_LAW]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "X_DELETE",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "x",
      "target": "xDelete",
      "description": "WHAT: Delete ONE tweet the account published (DELETE /2/tweets/:id, same OAuth1 creds as X_POST). WHEN_TO_USE: the owner directs a post to be removed, or a post that violated the format law must be retracted. Owner-directed only — never autonomous timeline pruning. ARGS: $1 = tweet id or full status URL RETURNS: {ok,deleted_id,response} EX: [X_DELETE]2080749124673302742[/X_DELETE]",
      "read": "https://miscsubjects.com/api/directory/X_DELETE",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "X_DELETE",
        "body": ""
      },
      "router_tag": "[X_DELETE]args[/X_DELETE]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "X_REPLY",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "x",
      "target": "xReply",
      "description": "WHAT: Post ONE reply to a specific tweet as the account (same OAuth1 creds as X_POST). WHEN_TO_USE: only when the owner directs a reply to a specific tweet, under the owner rules. Single-target; not autonomous mass-replying. ARGS: $1=in_reply_to tweet id or status URL | $2=reply text (<=280) RETURNS: {ok,id,url,in_reply_to,text} EX: X_REPLY 1899999999999999999|Sourced our take here: https://miscsubjects.com/a/...",
      "read": "https://miscsubjects.com/api/directory/X_REPLY",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "X_REPLY",
        "body": ""
      },
      "router_tag": "[X_REPLY]args[/X_REPLY]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "high",
      "requires_approval": true,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    },
    {
      "id": "X_WHOAMI",
      "object_type": "tool",
      "runner": "fn",
      "directory_type": "fn",
      "category": "x",
      "target": "xWhoami",
      "description": "WHAT: Report which X credentials are present and what X says about them (GET /2/users/me). WHEN_TO_USE: X_POST or X_DELETE returns 401/403 and you need the real cause instead of a bare \"Unauthorized\". ARGS: none RETURNS: {ok,status,creds_present:{...},response} EX: [X_WHOAMI][/X_WHOAMI]",
      "read": "https://miscsubjects.com/api/directory/X_WHOAMI",
      "write": "https://miscsubjects.com/api/dispatch",
      "invoke": "https://miscsubjects.com/api/dispatch",
      "invoke_body": {
        "key": "X_WHOAMI",
        "body": ""
      },
      "router_tag": "[X_WHOAMI]args[/X_WHOAMI]",
      "input_schema": null,
      "examples": null,
      "auth": "none",
      "risk": "low",
      "requires_approval": false,
      "status": "active",
      "ledger_enabled": true,
      "operation_semantics": {
        "operation_type": "invokeaction",
        "safe": null,
        "idempotent": null,
        "preconditions": [
          "the current credential passes scope, ancestor, tenant, risk, owner-gate, fixed-body, use-budget, and payload-ceiling enforcement",
          "the supplied body conforms to input_schema"
        ],
        "effects": [
          "runner-defined effects; the invocation receipt is authoritative"
        ],
        "postconditions": [
          "a receipt records execution status, observed output, lineage, and evidence links"
        ]
      }
    }
  ]
}