{"id":1025201,"recorded_at":"2026-10-29T13:09:42.333201Z","observed_at":"2026-10-29T13:09:42.333107Z","subject_kind":"endpoint","subject":"a910dfac-5da5-4fa6-9e8f-76b1f33abb0e","kind":"mcp.tools","method":"probe.mcp/1","body":{"count":49,"tools":[{"description":"Answer an open planning question and release its roadmap item.\n\n    Use this for a `list_escalations` row with reason\n    `expand_needs_clarification` (its `next_tool` names this tool). The\n    planner asked one or more product questions about one roadmap item; give\n    ONE answer that covers every question (1-4,000 characters). The answer is\n    stored with the item, the card is resolved, and the next planning run of\n    that item reads the answer. It is stored once: a second answer to the\n    same round is refused. Requires the personal connection of an active\n    workspace owner; a workspace key or a member who is not an owner is\n    refused. A paused project refuses until it is resumed. A refusal returns\n    ok=false with a fixed `refusal_code`, and nothing is stored.\n    `resolve_escalation` does not answer a planning question.\n    ","inputSchema":{"properties":{"answer_md":{"title":"Answer Md","type":"string"},"escalation_id":{"title":"Escalation Id","type":"string"}},"required":["escalation_id","answer_md"],"title":"answer_planning_questionArguments","type":"object"},"name":"answer_planning_question"},{"description":"Answer a thread's clarifying questions (status must be awaiting_answers).\n\n    `answers` is a list of {\"idx\": <int from get_request_status>, \"answer_md\":\n    <str, 1..2000 chars>}. Every question needs exactly one answer. The call\n    flips the thread back to intake_pending; get_request_status reports the\n    subsequent state.\n    ","inputSchema":{"properties":{"answers":{"items":{"additionalProperties":true,"type":"object"},"title":"Answers","type":"array"},"project_id":{"title":"Project Id","type":"string"},"thread_id":{"title":"Thread Id","type":"string"}},"required":["project_id","thread_id","answers"],"title":"answer_requestArguments","type":"object"},"name":"answer_request"},{"description":"Approve one pending steering rule so it reaches the iteration prompts.\n\n    Pass the project id and the rule `id` from list_steering_rules. Only a\n    `pending` rule changes; an already active rule returns `changed: false`.\n    A retired rule is refused (409): approval never re-activates it. Your\n    identity comes from this connection and is recorded on the audit trail.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"},"rule_id":{"title":"Rule Id","type":"string"}},"required":["project_id","rule_id"],"title":"approve_steering_ruleArguments","type":"object"},"name":"approve_steering_rule"},{"description":"Archive a project (reversible shelve) — frees a project slot in-tool.\n\n    Stops any in-flight machine, then flips the project to `archived`: it drops\n    out of the per-tier project cap (freeing a slot for a new project) and the\n    loop stops dispatching it, but the project + its history are kept and can be\n    restored from the dashboard project page. Stopping a machine DESTROYS the\n    running process state — restoring the project later cannot bring that\n    execution back, so this is destructive despite being reversible. A replay on\n    an already-archived project changes no row, but is not idempotent end to end.\n    This is preferable to `delete_project` unless the project must be gone.\n    Owner-scoped (an MCP key is owner-only); a project not in the workspace 404s.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"}},"required":["project_id"],"title":"archive_projectArguments","type":"object"},"name":"archive_project"},{"description":"Cancel / close a single roadmap item (list_roadmap returns its id).\n\n    For a DELIVERED or duplicate item that keeps re-parking: once the work has\n    shipped, every expand produces no dev-ready tasks and files a recurring\n    `roadmap_item_parked` escalation that has to be acked. Cancelling drops the\n    item out of the expand queue AND resolves any open expand-lane escalation for\n    it. Business-level replay guard: an already expanded/cancelled item changes no\n    state, and the dashboard can restore a cancelled item. Refuses (409) while the\n    item is actively being expanded (a retry once that iteration ends succeeds).\n    Returns {id, status, changed, next_step}.\n    ","inputSchema":{"properties":{"item_id":{"title":"Item Id","type":"string"},"project_id":{"title":"Project Id","type":"string"}},"required":["project_id","item_id"],"title":"cancel_roadmap_itemArguments","type":"object"},"name":"cancel_roadmap_item"},{"description":"Clear a queued roadmap item's horizon pin (now/next/later → none).\n\n    A horizon pin dominates the queue sort, so `reorder_roadmap` cannot move a\n    pinned item out of its band — a stale `now` pin on a delivered/duplicate item\n    clogs the front of the queue. This unpins it and reprices the queue so the\n    item follows plain priority order again (and reorder_roadmap can then move it).\n    Only queued items carry a settable pin (in-flight / shipped items derive\n    theirs), so this refuses (422) on a non-queued item — a delivered item is\n    closed with cancel_roadmap_item. Returns {id, previous_pin, horizon_pin,\n    next_step}.\n    ","inputSchema":{"properties":{"item_id":{"title":"Item Id","type":"string"},"project_id":{"title":"Project Id","type":"string"}},"required":["project_id","item_id"],"title":"clear_horizon_pinArguments","type":"object"},"name":"clear_horizon_pin"},{"description":"Close a task that should not be built — a duplicate, or work already shipped.\n\n    For a task on the board that is obsolete: the change already landed in\n    another PR, a sibling task covers it, or the user changed direction. The\n    task is marked `cancelled` and keeps ALL of its history (acceptance\n    criteria, QA steps, iterations) — nothing is deleted.\n\n    `reason` is REQUIRED and is recorded on the audit trail in one line.\n    `superseded_by_pr_number` (or `superseded_by_task_id`) records verified\n    provenance when the work was genuinely delivered somewhere else, instead of\n    a bare abandon. Closing does NOT claim the content is on the default branch,\n    so any task that declared a dependency on this one keeps waiting; those are\n    delivered or re-planned separately.\n\n    Refuses with 409 while the task is being worked on by a running iteration\n    (an in-flight iteration must finish, or its machine must be stopped, before\n    the close succeeds). A task in another\n    workspace 404s. Business-level replay guard: closing an already-closed task\n    changes no task state. The call is not idempotent end to end — an\n    authenticated request also persists credential-use state.\n\n    The response echoes `open_tasks`: how many tasks are still open on the\n    project, counted after the close commits. A count that did not drop means\n    the ticket was already closed and this call changed nothing. It is the same\n    count `project_status` returns, and neither counts a closed task as open.\n\n    This is preferable to leaving a dead task on the board: unfinished tasks\n    count against the project's planning capacity, so stale duplicates quietly\n    stop new roadmap items from being expanded.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"},"reason":{"title":"Reason","type":"string"},"superseded_by_pr_number":{"anyOf":[{"type":"integer"},{"type":"null"}],"default":null,"title":"Superseded By Pr Number"},"superseded_by_task_id":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Superseded By Task Id"},"task_id":{"title":"Task Id","type":"string"}},"required":["project_id","task_id","reason"],"title":"close_taskArguments","type":"object"},"name":"close_task"},{"description":"Get the link that connects a GitHub account, so work can reach real repos.\n\n    Returns an `install_url` that the user opens in a browser to pick the GitHub\n    account/org, approve the install, and land on a \"connected\" page;\n    get_onboarding_status() then reports github_connected true. The link expires\n    in 10 minutes; a repeat call mints a fresh one.\n    ","inputSchema":{"properties":{},"title":"connect_githubArguments","type":"object"},"name":"connect_github"},{"description":"Start, pause, or resume a project's autonomous work.\n\n    `action` is one of: \"enable\" | \"disable\" | \"resume\" | \"process_now\".\n    - enable/disable flip scheduler_enabled (the loop dispatches only enabled,\n      status='active' projects).\n    - resume clears a pause (peak/backoff/manual) so the project dispatches again.\n    - process_now durably prioritizes and immediately attempts the next intake\n      batch, independent of the dev scheduler switch. A gate returns a typed\n      reason and recovery step instead of a spawn promise.\n    - enable/resume can execute pending refinement that DELETES tasks, and\n      process_now can start an intake batch, so the tool is destructive even\n      when the echoed scheduler state looks unchanged.\n\n    Returns the resulting scheduler state.\n    ","inputSchema":{"properties":{"action":{"title":"Action","type":"string"},"project_id":{"title":"Project Id","type":"string"}},"required":["project_id","action"],"title":"control_schedulerArguments","type":"object"},"name":"control_scheduler"},{"description":"Start building something new: creates a GitHub repo and begins work on it.\n\n    For a NEW repo. Given an existing repo, import_project(repo_full_name) is\n    the right call — this one would create a second, empty repo beside it\n    (list_github_repos() browses what the workspace can see).\n\n    Scaffolds a new GitHub repo, a bootstrap-mode project, and submits\n    `build_description` as the project's first Roadmap Request. `name` is a\n    concise GitHub short repo slug (no owner); `project_kind` is REQUIRED and\n    one of library | node_library | python_library | service | cli | web_app |\n    godot_game | roblox_game; `preview_command` is required iff\n    `project_kind == 'web_app'`. `mobile_app` is not a creation kind in this\n    phase: mobile creation is unavailable until R2, so a `mobile_app` request\n    returns `mobile_creation_unsupported` before any repository or project is\n    created. Imported Expo repositories are recognised through import_project\n    instead.\n    `engine` is\n    OPTIONAL — one of claude_code | codex | glm | kimi | grok (defaults to\n    claude_code); codex, glm, kimi, and grok require the workspace to have a\n    matching connected credential.\n    `org` is OPTIONAL — a GitHub organization login to create the repo inside\n    (e.g. your company org); omit it to land the repo on a member's personal\n    account. `private` defaults to True.\n    `ci_runs_on` is OPTIONAL — the CI runner labels for the scaffolded workflow,\n    e.g. [\"self-hosted\", \"linux\", \"x64\", \"my-fleet\"]. Omit it to inherit the\n    workspace default (ubuntu-latest if unset). Labels no registered org runner\n    carries are rejected, because GitHub would queue such a job forever rather\n    than fail it.\n    `framework` is OPTIONAL and `web_app`-only — one of vite | next (defaults to\n    vite). It picks the scaffolded frontend rails: `vite` a vanilla-TypeScript\n    SPA, `next` a Next.js app-router app. Passing it with any other\n    `project_kind` is an error.\n\n    The repo is created on the GitHub account of a workspace member with\n    repo-create OAuth access (this path has no specific caller user), so the\n    returned `repo` owner is whichever member's token resolved (or the chosen\n    `org`). If no member has repo-create access — or the resolving member can't\n    create in `org` — the call returns an actionable error.\n\n    Returns {project_id, repo, thread_id, next_action, poll_after_seconds,\n    next_step}; next_step names the follow-up poll of get_request_status with\n    the returned thread_id. On the rare arm where the first Request failed to\n    submit, next_action is \"call_tool\" with next_tool=\"submit_request\".\n\n    If scaffolding fails after the repository has been created, best-effort\n    compensation deletes that just-created repository so a retry can reuse the\n    name — this tool can therefore remove external state it created moments\n    earlier.\n    ","inputSchema":{"properties":{"build_description":{"title":"Build Description","type":"string"},"ci_runs_on":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"default":null,"title":"Ci Runs On"},"engine":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Engine"},"framework":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Framework"},"name":{"title":"Name","type":"string"},"org":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Org"},"preview_command":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Preview Command"},"private":{"default":true,"title":"Private","type":"boolean"},"project_kind":{"title":"Project Kind","type":"string"}},"required":["name","build_description","project_kind"],"title":"create_projectArguments","type":"object"},"name":"create_project"},{"description":"Soft-delete a project (the harder option) — frees a slot and hides it.\n\n    Stops any in-flight machine, then flips the project to `deleted`: it\n    disappears from `list_projects`, drops out of the project cap, and the loop\n    stops dispatching it. Deleting ALSO permanently purges the project's stored\n    review artifacts. The row is retained for audit and re-importing the repo\n    restores that deleted row in place (unlike `archive_project` there is no\n    in-tool restore), but the purged artifacts are gone for good and the stopped\n    workers' process state cannot be recreated. A replay on a deleted project\n    changes no row; the call is not idempotent end to end. Owner-scoped; a\n    project not in the workspace 404s.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"}},"required":["project_id"],"title":"delete_projectArguments","type":"object"},"name":"delete_project"},{"description":"Billing status + a Stripe checkout link when a NEW subscription is needed.\n\n    `plan` is one of starter | pro | agency (default starter). When the\n    workspace has NO live subscription and needs one (open-signup unpaid,\n    churned, or converting from a free/trial tier), returns a `checkout_url`\n    with next_action \"browser\" — the user opens it in a browser (the one setup\n    step that can't happen in chat). Compute unlocks automatically once payment\n    completes (a Stripe webhook flips the workspace to active); blocking on it\n    is unnecessary. A past_due workspace gets NO checkout — the fix is a card\n    update in the dashboard billing page (a new checkout would create a second\n    subscription); next_step carries that fix. Subscribed or\n    suspended-with-subscription states return checkout_url=None with an\n    explanatory next_step.\n    ","inputSchema":{"properties":{"plan":{"default":"starter","title":"Plan","type":"string"}},"title":"get_billingArguments","type":"object"},"name":"get_billing"},{"description":"Read a project's security-control observations and review boundaries.\n\n    The result groups records by evidence class without a total or an overall\n    framework outcome. `not_determinable` and `outside_review_scope` qualify\n    every observation. An empty group does not establish that a control is in\n    place, and `disclaimer_md` must reach the user.\n\n    `limit` defaults to 25 (max 100). `include_all` includes resolved,\n    dismissed, and out-of-scope records. This read-only tool has no compute\n    quota and remains available after the trigger closes for a project.\n    ","inputSchema":{"properties":{"include_all":{"default":false,"title":"Include All","type":"boolean"},"limit":{"default":25,"title":"Limit","type":"integer"},"project_id":{"title":"Project Id","type":"string"}},"required":["project_id"],"title":"get_control_gap_findingsArguments","type":"object"},"name":"get_control_gap_findings"},{"description":"Read a project's legal exposure findings, worst exposure first.\n\n    Returns each finding as an OBSERVATION plus the obligation commonly cited\n    over that pattern, its citation, the date the citation was last checked,\n    and whether counsel has reviewed the registry entry (`counsel_reviewed`,\n    false today for every entry). `exposure_order` is an ORDER, never a score:\n    there is no grade, no percentage, and no overall state in this output.\n\n    `not_determinable` lists the checks that could not reach a verdict;\n    omitting them would turn a partial review into a clean answer. The\n    `disclaimer_md` field must reach the user.\n\n    `limit` defaults to 25 (max 100). `include_all` adds resolved, dismissed,\n    and out-of-scope rows to the default actionable set. Read-only, no compute,\n    no rate limit; it works even while the trigger is closed for the project.\n    ","inputSchema":{"properties":{"include_all":{"default":false,"title":"Include All","type":"boolean"},"limit":{"default":25,"title":"Limit","type":"integer"},"project_id":{"title":"Project Id","type":"string"}},"required":["project_id"],"title":"get_legal_exposure_findingsArguments","type":"object"},"name":"get_legal_exposure_findings"},{"description":"Check what is set up so far and what to do next to get building.\n\n    Reports engine_connected / github_connected / project_count / payment_status\n    and a `next_action` string whose value is authoritative, with this tool\n    polled between steps. `next_action` is \"call_tool\" (the tool named in\n    `next_tool`, with `next_step` describing the call) until onboarding is\n    complete, then \"done\". (`next_action_detail` echoes the pre-2026-07-29 dict\n    shape and is DEPRECATED — it is removed 2026-10-29; next_action/next_tool\n    are the current fields.)\n    - engine step: the dashboard /login link goes to the user. Engine\n      subscriptions (Claude / Codex / GLM) are connected in the DASHBOARD for\n      security — engine credentials are never asked for or pasted in this chat.\n    - github step: connect_github() returns an install link.\n    - project step: create_project(...) for a new repo, or\n      import_project(repo_full_name) for an existing one.\n    - launch step: get_provisioning_status(project_id) reports readiness.\n    Re-checking is the caller's job — the server does not push.\n    Also returns a `usage` block (pool / daily / machine-hours counters + tier\n    caps) for capacity-aware automation clients.\n    ","inputSchema":{"properties":{},"title":"get_onboarding_statusArguments","type":"object"},"name":"get_onboarding_status"},{"description":"Read a project's current product goal (the outcome work is aimed at).\n\n    The paired setter `set_product_goal` replaces the whole document rather\n    than appending to it, so a write without a prior read silently discards\n    whatever the user already recorded; adding a line means reading the current\n    text, editing it, and setting the full result back.\n\n    Returns {project_id, product_goal_md, updated_at}. `product_goal_md` is\n    None when no goal has been set. Tenant-scoped: a project not in the\n    caller's workspace 404s.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"}},"required":["project_id"],"title":"get_product_goalArguments","type":"object"},"name":"get_product_goal"},{"description":"Read a project's current product vision (what the product is for).\n\n    The paired setter `set_product_vision` replaces the whole document rather\n    than appending to it, so a write without a prior read silently discards\n    whatever the user already recorded; adding a line means reading the current\n    text, editing it, and setting the full result back.\n\n    Returns {project_id, product_vision_md, updated_at}. `product_vision_md` is\n    None when no vision has been set. Tenant-scoped: a project not in the\n    caller's workspace 404s.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"}},"required":["project_id"],"title":"get_product_visionArguments","type":"object"},"name":"get_product_vision"},{"description":"Check whether a new project has finished setting up and is ready to build.\n\n    Returns overall (provisioning | ready | errored), a 7-stage checklist, and a\n    user-facing error_kind when a stage failed. next_action is \"wait\" with\n    poll_after_seconds (~10s) while provisioning, \"wait\" with NO\n    poll_after_seconds when errored (fix the reported cause, then re-check —\n    polling again without fixing it will not change the result), and \"done\" when\n    overall is 'ready' — submit_request(project_id, text) then steers the loop.\n    Reaching 'ready' also PERSISTS the owner's onboarding-completion\n    state, so this is not a pure read. Tenant-scoped: a project not in the\n    caller's workspace 404s.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"}},"required":["project_id"],"title":"get_provisioning_statusArguments","type":"object"},"name":"get_provisioning_status"},{"description":"Check what happened to a request, and read any questions it asked back.\n\n    Intake is async (~5min cadence), so the status changes between calls.\n    `next_action` is one of: \"wait\" (still processing), \"answer_questions\"\n    (answer_request takes one answer per question), \"done\" (see\n    generated_roadmap_item_ids), \"cancelled\" (terminal, no items), \"failed\"\n    (see intake_failure_reason), \"approve_plan\" (a planned request's plan\n    awaits the user's approval in the dashboard). A planned request also\n    carries `stage`, `plan_cycle` and `max_cycles`.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"},"thread_id":{"title":"Thread Id","type":"string"}},"required":["project_id","thread_id"],"title":"get_request_statusArguments","type":"object"},"name":"get_request_status"},{"description":"Connect an EXISTING GitHub repo as a Keelen project.\n\n    This is the counterpart of create_project: it is for a repo that already\n    exists, while create_project scaffolds a brand-new one.\n\n    `repo_full_name` is \"owner/repo\". Import requires that the SAME caller\n    listed the repository with list_github_repos() within the last 10 minutes,\n    OR that the workspace already holds a valid repository grant. An absent or\n    expired authorization returns code `repository_access_required`; call\n    list_github_repos() again, then retry. Missing, expired, foreign and\n    nonexistent repositories share that same generic denial, so the tool never\n    reveals whether a guessed repository exists.\n    `engine` is OPTIONAL — one of claude_code | codex | glm | kimi | grok\n    (defaults to claude_code); codex/glm/kimi/grok require a matching connected\n    credential.\n    `build_description` is OPTIONAL but STRONGLY recommended — a plain-language\n    \"what should Keelen build first?\" submitted as the project's first Request so\n    the loop has work; an imported project with no Request sits idle until\n    submit_request(project_id, ...) adds one.\n\n    `project_kind` is OPTIONAL — one of library | node_library | python_library |\n    service | cli | web_app | godot_game | roblox_game | mobile_app | unknown.\n    Omit it and the kind is auto-detected. It is required for a MONOREPO (apps in\n    subdirectories), a stack with no standard root manifest (Java, Ruby, PHP,\n    .NET, Elixir), or a classification detection cannot infer — detection yields\n    \"unknown\" there, which BLOCKS the dev lane until\n    someone overrides it. A supplied value is authoritative and is never\n    overwritten by later auto-detection. `stack` is the OPTIONAL language axis\n    (python | node | rust | go | cpp) for a language-agnostic kind.\n    `preview_command` is REQUIRED when project_kind is \"web_app\" (the command\n    that serves the app locally, e.g. \"npm run dev\") and optional otherwise,\n    where it overrides the detected one.\n\n    A root **Expo** repository imports as `mobile_app` under a conservative,\n    Expo-only contract. Recognition requires a root `package.json` declaring\n    both `expo` and `react-native` plus root Expo config evidence, resolved in\n    documented precedence order (first present wins): dynamic app.config.ts,\n    app.config.mts, app.config.cts, app.config.mjs, app.config.cjs,\n    app.config.js by FILENAME PRESENCE only, then static app.config.json, then\n    app.json. Imported config is inspected as data and never executed; a nested\n    config, config-free Expo package, ordinary Node package, or unreadable root\n    probe does not qualify — unreadable evidence stays `unknown` instead of\n    manufacturing a mobile result. Mobile is a Node toolchain whose automated\n    QA is the detected `test_command`; it has no preview command and therefore\n    no browser or native verification. This recognition phase is Expo-only:\n    mobile creation is unavailable until R2 (`create_project` refuses\n    `mobile_app` with `mobile_creation_unsupported`), and browser activation,\n    export readiness and native verification are outside this item. When\n    detection cannot qualify the repository, pass `project_kind: \"mobile_app\"`\n    (optionally `stack: \"node\"`) yourself; a supplied pick is authoritative\n    and preserved against later auto-detection. Picking the kind derives the\n    `test_command` QA default — a kind-derived default, not explicit QA\n    ownership; explicit QA ownership is a deliberate test-command choice in the\n    dashboard QA setup.\n\n    Re-importing the same live repo is replay-guarded (returns the existing\n    project with already_exists=True), and re-importing a SOFT-DELETED repo\n    RESTORES that deleted row in place — it does not create a fresh project.\n    Restored queued work can include refinement that deletes tasks, and the call\n    is not idempotent end to end. On a plan with no scheduled-project allowance\n    the project is still created but with the loop OFF — next_step then names\n    get_billing(). Otherwise next_step names the poll of\n    get_provisioning_status(project_id).\n    ","inputSchema":{"properties":{"build_description":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Build Description"},"engine":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Engine"},"preview_command":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Preview Command"},"project_kind":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Project Kind"},"repo_full_name":{"title":"Repo Full Name","type":"string"},"stack":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Stack"}},"required":["repo_full_name"],"title":"import_projectArguments","type":"object"},"name":"import_project"},{"description":"See what the work is stuck on and waiting for a human decision about.\n\n    `project_status` only COUNTS open escalations; this returns each one with its\n    kind, reason, detail_md, recommended_action, and (when task-scoped) the\n    blocked task's title + PR url. A card about a roadmap item carries its\n    `roadmap_item_id` (null for a task-only, project-level or synthetic row),\n    which matches the `id` in `list_roadmap`. A \"forever-paused\" project with no open\n    `project_pause` row is surfaced as a synthetic `orphan:<project_id>` row.\n    Each row carries a server-derived `task_retry_available` flag and an exact\n    `next_tool`: eligible recovery blocks route to `retry_blocked_task`, roadmap\n    parks to `rearm_roadmap_item`, platform conflicts to their structured\n    resolver, an orphan block whose task keeps its own PR to the owner tool\n    `requeue_for_review` (it takes the row's task_id, not its id), other stale\n    work to `replan_task`, an open planning question (reason\n    `expand_needs_clarification`, with its `planning_questions`) to the owner\n    tool `answer_planning_question`, and only safe auxiliary cards to\n    `resolve_escalation`. In the legacy ui-review mode only, an eligible\n    platform conflict on a web_app task also lists `evidence_selector_cells`,\n    the input of the owner-only `correct_evidence_selector` decision. With the\n    autonomy ladder enabled (the default) that field is absent and a card\n    Keelen attributed to its own postprocessor routes to\n    `resolve_platform_regression`.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"}},"required":["project_id"],"title":"list_escalationsArguments","type":"object"},"name":"list_escalations"},{"description":"List the CALLER's own GitHub-visible repos (for import_project).\n\n    For an OAuth connector that is the connected member; for a static workspace\n    key it is an eligible active owner. Each entry has full_name,\n    default_branch, private, language, pushed_at. A `full_name` is what\n    import_project(repo_full_name) connects. A COMPLETE listing publishes an\n    actor-bound proof valid for 10 minutes, and that proof is what authorizes a\n    later import by the same caller. Reading the list can MINT a short-lived\n    GitHub installation token, so this is not a pure read. Returns 409 if GitHub\n    isn't connected yet — connect_github() is required first. A provider\n    failure is translated into a typed, actionable error instead of passing\n    GitHub's response through: a missing or suspended App installation, a\n    revoked OAuth token, or a non-rate-limit permission denial is a 409 naming\n    connect_github(); a recognized rate limit is a 429; other provider failures\n    are a 502; a timeout or transport failure is a 503.\n    ","inputSchema":{"properties":{},"title":"list_github_reposArguments","type":"object"},"name":"list_github_repos"},{"description":"List the projects in this workspace, with what each one is building.","inputSchema":{"properties":{},"title":"list_projectsArguments","type":"object"},"name":"list_projects"},{"description":"See what is planned for a project and in what order.\n\n    Queued rows also say whether the expand picker would elect them\n    (`electable`) and, when not, why it skips them (`skip_reason`:\n    awaiting_intake_thread | awaiting_clarification | crash_capped |\n    noop_capped | crash_cooldown | noop_cooldown | held_on_open_pr | other).\n    The first reason that applies, in that order, is the one returned.\n    `awaiting_clarification` means the planner asked a planning question about\n    the item and waits for the answer: `list_escalations` returns that card\n    with the item's `roadmap_item_id`. A skipped item ahead of yours does not\n    delay it.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"},"status":{"default":"queued","title":"Status","type":"string"}},"required":["project_id"],"title":"list_roadmapArguments","type":"object"},"name":"list_roadmap"},{"description":"List this project's active and pending steering rules.\n\n    Steering rules are prepended to every planning, development and QA prompt.\n    Each rule has `state` (`active` = in the prompt, `pending` = waiting for a\n    project member's approval, `expired` = past its expiry and no longer in the\n    prompt) and `origin`: `owner_request` (written from a\n    Request), `retro_kaizen` (a sprint retrospective kaizen),\n    `failure_pattern` (a recurring failure), `automatic` (activated without\n    human review from another source) or `unknown` (a legacy rule with no\n    recorded source). `auto_approved` is true when no person reviewed it.\n    Retired rules are not listed. Use approve_steering_rule and\n    retire_steering_rule with a rule's `id`.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"}},"required":["project_id"],"title":"list_steering_rulesArguments","type":"object"},"name":"list_steering_rules"},{"description":"Get a one-click, pre-authenticated dashboard sign-in link for the owner.\n\n    The engine-connect step — and any dashboard task (billing card update, a\n    project page) — needs a signed-in browser. Because this server has already\n    authenticated the workspace owner, this mints a single-use magic-link login\n    token and returns a `/login?token=…` deep link: opening it signs the user\n    straight into the dashboard (no email round-trip, no password) and lands\n    them where onboarding left off. The returned `login_url` works once and\n    expires in 15 minutes; a repeat call mints a fresh one.\n    ","inputSchema":{"properties":{},"title":"open_dashboardArguments","type":"object"},"name":"open_dashboard"},{"description":"Read a compact progress digest for one project (delivery, activity,\n    holds, next decision).\n\n    Returns the closed MCP projection: delivery counts and the five newest\n    delivered items, a recent loop-activity count, current holds, the single\n    highest-priority open decision, and `more_decisions`. Two steering fields\n    are ALWAYS present: `next_action` is `\"call_tool\"` with\n    `next_tool=\"list_escalations\"` when a decision exists, otherwise\n    `\"none\"` with `next_tool: null`. `steering_rules` is also ALWAYS present\n    with `suggested_retire_count`, `message` and `settings_path`; the advisory\n    backlog is computed outside the activity window, so a digest with no\n    recent activity can still show it. `since` is an optional ISO-8601\n    timestamp with a timezone; it defaults to 24 hours ago and is clamped to\n    the last seven days. Tenant-scoped: a project outside the caller's\n    workspace 404s.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"},"since":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Since"}},"required":["project_id"],"title":"project_digestArguments","type":"object"},"name":"project_digest"},{"description":"Check how a project is doing: what is in flight, what shipped, what is stuck.\n\n    Returns lifecycle status, open task count, queued roadmap item count, runs\n    today, verification pass rate, open blockers, pause state, and freshness.\n    Zero `open_tasks` does not mean an empty roadmap: `queued_roadmap_items`\n    counts planned work awaiting expansion, including work held while the\n    scheduler is disabled. list_roadmap returns those items.\n\n    Delivery vs verification: `prs_merged_today` is the DELIVERY signal\n    (distinct PRs merged today). `pass_rate` is the local verification pass\n    rate over the last 14 days of dev/QA iterations - NOT a delivery measure.\n    `verify_decided_14d` is that ratio's denominator and `verify_errored_14d`\n    its sandbox-timeout share: when errored dominates, pass_rate measures the\n    verify budget, not the code. `open_escalations` is a COUNT; read\n    list_escalations for the rows.\n\n    Pause state is `scheduler_enabled`, `scheduler_paused_until` and\n    `pause_reason`. Freshness is `last_iter_at`, `last_pm_iter_at`, and\n    `last_successful_deploy_at` (a LEGACY pointer); read `deployment {merged,\n    deployed, verified, last_deploy_attempt}` for the three facts kept\n    separately, and treat only `verified` as a verified deployment.\n\n    `pm_lane {last_pm_iter_at, repo_access}` is the planning lane's live\n    health: repo_access 'failing' means that lane cannot read the repo from\n    GitHub even while runs still start and `github_connected` reads true (that\n    flag is presence-only).\n\n    `glm_peak_paused` is NOT a fault and sets no pause columns: it is the\n    ephemeral GLM peak-hours skip. True means clean PRs hold and runs stop\n    until `glm_peak_resumes_at`. It is an intentional cost gate, so the accurate\n    description is \"waiting for off-peak\", not a failure.\n\n    `ui_review` is absent while the ui-review autonomy ladder is enabled (the\n    default): the ladder owns that budget and the customer surface carries no\n    scenario or capture controls. In the legacy mode it is present for\n    `web_app` projects and reports scenarios/scenario_cap/captures/capture_cap\n    from the default branch's `ui-review.json` (both caps are enforced at push\n    time, not in your CI); it can mint a GitHub installation token to read it,\n    so the call is then not guaranteed to be a purely local read.\n\n    `model_roles` (only when the Researcher/Integrator feature is enabled for\n    the project) reports each optional stage's on/off configuration and last\n    outcome.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"}},"required":["project_id"],"title":"project_statusArguments","type":"object"},"name":"project_status"},{"description":"Run the dashboard's replay-guarded same-item dependency re-arm.\n\n    ``escalation_id`` is an ``expand_produced_nothing`` or\n    ``roadmap_item_parked`` escalation id. Keelen verifies delivered structural\n    prerequisites, grants one bounded\n    expand retry, preserves the roadmap item id and ``depends_on_item_ids``, and\n    resolves the matching cards in one transaction. A bounded live GitHub check\n    may be used when the local merge state is stale, so a call can reach out\n    even when the re-arm itself changes nothing.\n    ","inputSchema":{"properties":{"escalation_id":{"title":"Escalation Id","type":"string"}},"required":["escalation_id"],"title":"rearm_roadmap_itemArguments","type":"object"},"name":"rearm_roadmap_item"},{"description":"Say what is wrong with what a request produced, and have it reworked.\n\n    Status must be \"done\". `feedback_md` is 1..1979 chars. Moves the thread to\n    refine_pending; get_request_status reports the revised items. Refinement\n    re-plans the thread's roadmap items and can EDIT OR HARD-DELETE the task rows\n    it generated earlier (the machine patch-tasks endpoint deletes them\n    outright), so it is destructive: up to five refinements per thread each\n    carry that power.\n    ","inputSchema":{"properties":{"feedback_md":{"title":"Feedback Md","type":"string"},"project_id":{"title":"Project Id","type":"string"},"thread_id":{"title":"Thread Id","type":"string"}},"required":["project_id","thread_id","feedback_md"],"title":"refine_requestArguments","type":"object"},"name":"refine_request"},{"description":"List or remove a dependency on a task cancelled without delivery.\n\n    ``escalation_id`` is a ``prerequisite_hold_stalled`` card. A waiting task\n    whose dependency points at a task cancelled without proof of delivery can\n    never start. Without ``task_id`` and ``predecessor_task_id`` this lists\n    every such dependency in the card's project and changes nothing. With both,\n    it removes that ONE dependency, so the waiting task can be groomed and\n    built without the cancelled work; any other dependency is refused. The\n    card then refreshes, or resolves when no held prerequisite remains.\n    ","inputSchema":{"properties":{"escalation_id":{"title":"Escalation Id","type":"string"},"predecessor_task_id":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Predecessor Task Id"},"task_id":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Task Id"}},"required":["escalation_id"],"title":"remove_cancelled_dependencyArguments","type":"object"},"name":"remove_cancelled_dependency"},{"description":"Change what gets built first.\n\n    `ordered_ids` is the desired front-to-back order of queued roadmap-item ids\n    (list_roadmap returns them). The first id becomes the highest priority —\n    the cadence expands the lowest-priority_int queued item next. Horizon pins\n    still dominate: a pinned-later item stays at the back and a pinned-now item\n    at the front, regardless of position in `ordered_ids`. Ids that are unknown\n    or no longer queued are skipped; duplicates are rejected. Returns {updated,\n    queue, next_step}.\n    ","inputSchema":{"properties":{"ordered_ids":{"items":{"type":"string"},"title":"Ordered Ids","type":"array"},"project_id":{"title":"Project Id","type":"string"}},"required":["project_id","ordered_ids"],"title":"reorder_roadmapArguments","type":"object"},"name":"reorder_roadmap"},{"description":"Replace an unretryable blocked task without losing its lineage.\n\n    Creates a fresh, explicitly planned task under the same roadmap item and\n    attempt lineage, transfers prerequisites and downstream dependents, and\n    cancels the stale task with supersession provenance. The old PR, task,\n    failures, criteria, and evidence remain in the audit history; nothing is\n    marked delivered. Inputs over 200 title characters, 20,000 body characters,\n    10 criteria or 2,000 decision characters are rejected without writes;\n    accepted specifications are never shortened.\n    ","inputSchema":{"properties":{"acceptance_criteria":{"items":{"type":"string"},"title":"Acceptance Criteria","type":"array"},"body_md":{"title":"Body Md","type":"string"},"decision_md":{"title":"Decision Md","type":"string"},"project_id":{"title":"Project Id","type":"string"},"task_id":{"title":"Task Id","type":"string"},"title":{"title":"Title","type":"string"}},"required":["project_id","task_id","title","body_md","acceptance_criteria","decision_md"],"title":"replan_taskArguments","type":"object"},"name":"replan_task"},{"description":"Return one blocked task's existing pull request to normal review.\n\n    Requires a personal OAuth connection of an active workspace owner;\n    workspace keys are refused. Pass the task id (not an escalation id), the\n    PR's exact 40-character head SHA, a reason (1-2000 characters) and a\n    request_id you choose (1-128 of letters, digits, `.`, `:`, `_`, `-`). The\n    task's own open keelen/iter-* PR must be green and cleanly mergeable at\n    that head, and its latest DEV run must have verified that head. Status\n    becomes done (implementation awaiting review), never delivered. Review,\n    CI, acceptance and merge gates still apply; no retry starts and no budget\n    resets. The same request_id and arguments replay the stored receipt. A\n    refusal returns ok=false, reason review_requeue_refused, a stable\n    cause_code and a fixed message.\n    ","inputSchema":{"properties":{"expected_head_sha":{"title":"Expected Head Sha","type":"string"},"reason":{"title":"Reason","type":"string"},"request_id":{"title":"Request Id","type":"string"},"task_id":{"title":"Task Id","type":"string"}},"required":["task_id","expected_head_sha","reason","request_id"],"title":"requeue_for_reviewArguments","type":"object"},"name":"requeue_for_review"},{"description":"Acknowledge a handled ask only when no blocked task becomes invisible.\n\n    `decision_md` is a required short note (why/how it was resolved), appended to\n    the escalation's detail_md as an audit trail. Resolving a project_pause /\n    orphan_pause RESUMES the project (clears the pause). A blocked task's final\n    task_block/operator_action cannot be acknowledged: its typed retry,\n    platform-policy resolution, replan, close, or supersede operation is the\n    correct path instead. An open planning question is refused too: answer it\n    with `answer_planning_question` (or `cancel_roadmap_item` if the item is no\n    longer needed), because an acknowledgement would drop the answer.\n    The acknowledgement itself is replay-guarded (a repeat changes nothing), but\n    the call is not idempotent end to end: resuming a paused project lets queued\n    refinement run, and that refinement can DELETE tasks. Accepts a real\n    escalation UUID or a synthetic `orphan:<project_id>`.\n    ","inputSchema":{"properties":{"decision_md":{"title":"Decision Md","type":"string"},"escalation_id":{"title":"Escalation Id","type":"string"}},"required":["escalation_id","decision_md"],"title":"resolve_escalationArguments","type":"object"},"name":"resolve_escalation"},{"description":"Recover a task Keelen's own postprocessor re-broke.\n\n    ``escalation_id`` is an open ``platform_policy_conflict`` card that the\n    server attributed to Keelen's postprocessor writer. ``decision_md`` is the\n    concrete recovery note recorded on the new plan section.\n\n    This is the only customer recovery while the autonomy ladder is enabled.\n    It records the decision, requeues the same task lineage and resolves the\n    card in one transaction. It raises no scenario or capture budget, issues\n    no waiver, consumes no recovery rung and cannot correct a frozen evidence\n    selector. A card with any other reason or origin — a ui-review-origin\n    conflict, an internal receipt, an exhausted hold, or a budget or catalog\n    signal — is refused with a fixed conflict and changes nothing. It is\n    registered on `/mcp`, `/chatgpt/mcp` and `/claude/mcp`.\n    ","inputSchema":{"properties":{"decision_md":{"title":"Decision Md","type":"string"},"escalation_id":{"title":"Escalation Id","type":"string"}},"required":["escalation_id","decision_md"],"title":"resolve_platform_regressionArguments","type":"object"},"name":"resolve_platform_regression"},{"description":"Retire one steering rule so no later iteration prompt carries it.\n\n    Pass the project id and the rule `id` from list_steering_rules. Works for\n    an active or a pending rule, including a retro kaizen the automatic\n    curation pass protects. The rule's text and history are kept and the\n    retirement appears in Loop Activity. A rule that is already retired\n    returns `changed: false`. There is no un-retire: to bring a convention\n    back, submit it as a new Request. Running iterations keep the prompt they\n    started with.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"},"rule_id":{"title":"Rule Id","type":"string"}},"required":["project_id","rule_id"],"title":"retire_steering_ruleArguments","type":"object"},"name":"retire_steering_rule"},{"description":"Retire several steering rules in one transaction.\n\n    Pass the project id and 1-100 rule `id` values from list_steering_rules.\n    Works for active and pending rules, including a retro kaizen the automatic\n    curation pass protects. Each changed rule is retired with one audit row;\n    a rule that is already retired returns `changed: false`. If any requested\n    rule is not this project's, nothing is retired and the call returns the\n    same 404 as a single-rule call. There is no un-retire: to bring a\n    convention back, submit it as a new Request. Running iterations keep the\n    prompt they started with.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"},"rule_ids":{"items":{"type":"string"},"title":"Rule Ids","type":"array"}},"required":["project_id","rule_ids"],"title":"retire_steering_rulesArguments","type":"object"},"name":"retire_steering_rules"},{"description":"Grant one fresh attempt after fixing a recovery-budget task block.\n\n    ``escalation_id`` is the task_block id returned by ``list_escalations``.\n    Eligibility, tenant, task, failure class, task status, and competing blockers\n    are all derived server-side. This is distinct from ``resolve_escalation``,\n    which remains acknowledgement-only for task blocks. Business-level replay guard:\n    an already-retried block is not retried again; the call is not idempotent end\n    to end, because an authenticated request also persists credential-use state.\n    ","inputSchema":{"properties":{"decision_md":{"title":"Decision Md","type":"string"},"escalation_id":{"title":"Escalation Id","type":"string"}},"required":["escalation_id","decision_md"],"title":"retry_blocked_taskArguments","type":"object"},"name":"retry_blocked_task"},{"description":"Roll a Roblox project's place back to a previously-published version.\n\n    For a `roblox_game` project, re-publishes the RETAINED build artifact for\n    `version_number` (the web Roblox Publishing card lists published versions)\n    — it never rebuilds from source, so rollback is fast + deterministic. This\n    mints a NEW Roblox version pointing at the old build. Unknown version → 404;\n    a version with no retained artifact → 422; a place open in Studio /\n    rate-limited → 409 (a retry can succeed); an invalid or unscoped Open Cloud\n    key → 409 / 403. Returns {version_number, env, published_at, status,\n    next_step}.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"},"version_number":{"title":"Version Number","type":"integer"}},"required":["project_id","version_number"],"title":"rollback_roblox_placeArguments","type":"object"},"name":"rollback_roblox_place"},{"description":"Start a source-bound security control gap review for one project.\n\n    The review records bounded engineering observations under the user's\n    selected Cyber Essentials or CMMC Level 1 or Level 2 context. It does not determine framework\n    standing, and it does not make changes. The `disclaimer_md` field must\n    reach the user before any observation is summarised.\n\n    The project needs a saved framework profile, an eligible plan, and a place\n    on the operator allowlist. Billable; one review is allowed in flight per\n    project. Refusals return `ok: false` with a next step and do not start work.\n    Rate-limited per workspace.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"}},"required":["project_id"],"title":"run_control_gap_reviewArguments","type":"object"},"name":"run_control_gap_review"},{"description":"Find where a codebase creates legal exposure (privacy, consent, data handling).\n\n    Spawns a one-shot review machine that reads the checkout offline and maps\n    what the code DOES onto commonly cited legal obligations, filtered by the\n    project's saved compliance profile (jurisdictions plus eleven product\n    facts). Findings land on the project's Legal page for a human to triage,\n    readable with get_legal_exposure_findings. No change is ever applied\n    automatically.\n\n    THIS IS NOT LEGAL ADVICE AND IT IS NOT A LEGAL CLEARANCE. The result\n    carries a `disclaimer_md` field that must reach the user before any summary.\n    The review is not exhaustive, so an empty result is never proof that\n    anything is in order.\n\n    Requires a saved compliance profile (409-shaped refusal without one),\n    a plan that carries the feature, and the project on the operator allowlist.\n    Billable; one review in flight per project. Every refusal comes back as\n    `ok: false` with an actionable `next_step`, and starts nothing.\n    Rate-limited per workspace.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"}},"required":["project_id"],"title":"run_legal_exposure_reviewArguments","type":"object"},"name":"run_legal_exposure_review"},{"description":"Find security problems in a repository: a deep, whole-codebase review.\n\n    Spawns a one-shot audit that scans the repo across a kind-aware taxonomy\n    (secrets + git history, vulnerable/abandoned deps, injection, SSRF, path\n    traversal, deserialization, crypto, info-leak, plus web authz/session/CORS,\n    library API-misuse, game client-trust, or infra/CI as applicable) and posts\n    findings to the project's Security review for human triage. The findings\n    are reviewed by a human and the ones worth fixing go into the loop as\n    Requests; no fix is applied automatically. Billable; one audit in-flight\n    per project.\n    (Triggering is disabled while the feature is hardened for production: a\n    project not on the operator allowlist — empty by default — returns a message\n    instead of spawning; earlier results stay visible.) Requires a paid plan;\n    a free or trial workspace gets a message telling the user to upgrade.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"}},"required":["project_id"],"title":"run_security_reviewArguments","type":"object"},"name":"run_security_review"},{"description":"Set the outcome to aim at right now, so work is prioritised toward one thing.\n\n    `goal_md` is free-form markdown and must be non-empty. Tenant-scoped: a\n    project not in the caller's workspace 404s. Returns {project_id,\n    product_goal_md, updated_at, next_step}.\n    ","inputSchema":{"properties":{"goal_md":{"title":"Goal Md","type":"string"},"project_id":{"title":"Project Id","type":"string"}},"required":["project_id","goal_md"],"title":"set_product_goalArguments","type":"object"},"name":"set_product_goal"},{"description":"Say what this product is for, so every run knows what it is building toward.\n\n    `vision_md` is free-form markdown and must be non-empty. Tenant-scoped: a\n    project not in the caller's workspace 404s. Returns {project_id,\n    product_vision_md, updated_at, next_step}.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"},"vision_md":{"title":"Vision Md","type":"string"}},"required":["project_id","vision_md"],"title":"set_product_visionArguments","type":"object"},"name":"set_product_vision"},{"description":"Create a Keelen account (or start agent login) — emails a 6-digit code.\n\n    UNAUTHENTICATED — the only tool besides verify_email that works before a\n    bearer key is configured. `email` is where the code is sent. Flow:\n    signup(email) -> the user reads the 6-digit code from their inbox ->\n    verify_email(email, code) returns a reveal-once API key, stored as this\n    server's `Authorization: Bearer <api_key>` header in the MCP client config;\n    reconnecting the client and calling get_onboarding_status() then continues\n    setup. The code expires in 15 minutes; a repeat signup resends it. Response\n    is uniform whether or not the email already has an account\n    (enumeration-safe), so signup doubles as agent LOGIN. Rate-limited per IP\n    and per email.\n\n    The `email` must be explicitly provided and confirmed by the user in chat\n    before this call. It is not inferred from a client profile, the logged-in\n    account, git config, or any other ambient source; a candidate address the\n    caller already holds is echoed back for an explicit yes first. Because this\n    call doubles as LOGIN, a guessed address signs the user in to whatever\n    workspace owns it, and the rest of setup then mints an API key on, and\n    creates a project in, an account they did not choose.\n    ","inputSchema":{"properties":{"email":{"title":"Email","type":"string"}},"required":["email"],"title":"signupArguments","type":"object"},"name":"signup"},{"description":"Stop one running iteration after confirmed runtime cleanup.\n\n    Requires a personal active workspace owner. Workspace keys and Portfolio\n    delegation cannot stop compute. The exact project iteration number binds\n    the runtime. Cleanup failure leaves it active; a busy subject is refused.\n    Confirmed cleanup finalizes unfinished runtime iterations, holds its legacy\n    tasks for owner close or replan and records the owner and reason. It grants\n    no delivery, retry or merge authority. A repeat returns the same receipt.\n    ","inputSchema":{"properties":{"iter_n":{"title":"Iter N","type":"integer"},"project_id":{"title":"Project Id","type":"string"},"reason":{"title":"Reason","type":"string"}},"required":["project_id","iter_n","reason"],"title":"stop_iterationArguments","type":"object"},"name":"stop_iteration"},{"description":"Ask for a change in plain English: a feature, a bug fix, or a new direction.\n\n    Each call carries ONE feature or intent; a multi-feature ask belongs in\n    separate requests. `text` must be under 16000 characters. Returns\n    {thread_id, status, next_action, poll_after_seconds, next_step}; next_step\n    names the re-check of get_request_status after poll_after_seconds.\n    ","inputSchema":{"properties":{"project_id":{"title":"Project Id","type":"string"},"text":{"title":"Text","type":"string"},"workflow_profile":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Workflow Profile"}},"required":["project_id","text"],"title":"submit_requestArguments","type":"object"},"name":"submit_request"},{"description":"Redeem the emailed 6-digit code for a reveal-once workspace API key.\n\n    UNAUTHENTICATED. `email` + `code` must match a code issued by signup(email)\n    within the last 15 minutes (5 attempts max). The returned `api_key` is shown\n    exactly ONCE — store it ONLY in the MCP client config\n    (\"Authorization: Bearer <api_key>\"), NEVER in a repo or a file you might\n    commit. Reconnecting this server with the header set and calling\n    get_onboarding_status() continues setup. An invalid/expired/consumed code\n    returns a uniform error; a fresh code comes from signup(email).\n    ","inputSchema":{"properties":{"code":{"title":"Code","type":"string"},"email":{"title":"Email","type":"string"}},"required":["email","code"],"title":"verify_emailArguments","type":"object"},"name":"verify_email"}]},"body_sha256":"7383669fdca1815bf10a9b972ca2fbb5a3eab195d23f6db1607869c86af2d01a","prev_id":582115,"leaf":"0xa9cda19924846658833005ad688143b1362e28cad697cc4ed5e1bdaeb07ddcb9","leaf_text":"{\"body\":\"7383669fdca1815bf10a9b972ca2fbb5a3eab195d23f6db1607869c86af2d01a\",\"id\":1025201,\"kind\":\"mcp.tools\",\"method\":\"probe.mcp/1\",\"observed_us\":1793279382333107,\"prev\":582115,\"subject\":\"a910dfac-5da5-4fa6-9e8f-76b1f33abb0e\",\"subject_kind\":\"endpoint\"}","day":{"day":"2026-10-29","leaves":242798,"root":"0xc050555c6b023f2aefb6536efb9f0760b92c30a0d06c572b7daf63db259ea17c","chained":"0x4cde8bae2042512e1bec11650628f0293556311cc4ea74d99ffddf02b671a7d6","anchor_chain":"eip155:5042002","anchor_tx":"0x9e85c340732f416e431b111fae72f7624870125f7f379af2732eb6c2ba8cf6a1","anchor_block":69753317},"proof":["0xa9cdca2abd9b05f6d91fd46b1aec65cf14d96ba1b267ffabb96086d7e4b2e892","0x26f8774f7ae1458b27791ca9509be38397d046eb762a92d2a215d87335904141","0xa7910a2051764424f65287544bc265d481a29a1fd79163a7fd0c44ee3c108732","0xf1ef58d9579a17058c794c5fe6f80bf092059081288f2fa3ded67fc2fe69f688","0x1e05a1c2b93c29bb6747e3ccb04a261da5d48f3327aa80c56ac9bd51347dfd4b","0x97d4eed75d1dfdb85c655e368c82f09a2c5088d2de801e7b076196fa1e7be6e8","0x5a7f375547bfe04d94158d357f68c117581a5aef7403e901f7b5c0a4d0bb52c8","0x84e5addb110df724b15744e4ce1652768292ae31fd293a01c1ee711a2f00a2ce","0xb29c75106f77f83a8526f61b911ae8704bb21012cc7f882b447dbc1bccd45484","0xb6bff65d0df46af8f70f81b1da6a2ae6c583e7cff35d21d4ad44a310663b5145","0xdc06680eca66e6bf3de18b59bc76652fd23a5fa8fded98d9021af5eaf33baeae","0xafa40b805708e3b44d90cea762f12c2d82a90adb49579fbe4575d8fe349fc700","0x35c7b2a2b845b27a74bd69a957781fb72baa9a27e8b6f27873316c80197e72dd","0x391d7d4dd95ff3f26ed046f59cb7617fe53d7bb32216fddedcb614635f3079dc","0x4a1f9fe26bf92c291485b5fb33b95d1917a994e417ac0526ccef55ede0a90a4c","0xe38dc587bc010668982bd78025ac33d7326ffc2587f2de00e848da2718907ecf","0xa1fa2e97e71ad6e802f325afd74bb7095901f2060529c9739182a1233f8804bc","0xe01539ac4c9f9cdf265a9e5c6d99c8da11e70ff0c7175fb23e402d33b9d79785"]}