nucleus

Governance, Hypervisor & security tools for the Nucleus Agent OS. Actions: auto_fix_loop - Auto-fix loop: Verify->Diagnose->Fix->Verify (3 retries). params: {file_path, verification_command} lock - [HYPERVISOR] Lock a file/dir immutable (chflags uchg). params: {path} unlock - [HYPERVISOR] Unlock a file/dir. params: {path} set_mode - [HYPERVISOR] Switch IDE context: "red" or "blue". params: {mode} list_directory - [GOVERNANCE] List files in a directory. params: {path} delete_file - [GOVERNANCE] Delete a file (governed by Hypervisor). params: {path, confirm?}. HITL: requires confirm=true. watch - [HYPERVISOR] Monitor a file/folder for changes. params: {path} status - [HYPERVISOR] Report current security state of Agent OS curl - [EGRESS] Proxied HTTP fetch for air-gapped agents. params: {url, method?} pip_install - [EGRESS] Proxied pip install for air-gapped agents. params: {package} validate_strategic_plan - [PROTOCOL] Validate Strategic mode PLAN has Big Bang [BB##] refs. params: {plan_text, mode?} comply_list - [COMPLIANCE] List available regulatory jurisdictions comply_apply - [COMPLIANCE] Apply jurisdiction config. params: {jurisdiction, brain_path?} comply_report - [COMPLIANCE] Generate compliance status report. params: {brain_path?} audit_report - [COMPLIANCE] Generate audit-ready report. params: {report_format?, since_hours?, brain_path?} kyc_review - [COMPLIANCE] Run KYC demo review. params: {application_id?, brain_path?} sovereign_status - [STATUS] Get sovereignty posture report. params: {brain_path?} trace_list - [DSoR] List decision traces. params: {trace_type?, brain_path?} trace_view - [DSoR] View specific trace. params: {trace_id, brain_path?}

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": null,
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Feature tracking, proof generation & MCP server mounting. Actions: add - Add a feature. params: {product, name, description, source, version, how_to_test, expected_result, status?, tags?} list - List features. params: {product?, status?, tag?} get - Get feature by ID. params: {feature_id} update - Update feature fields. params: {feature_id, status?, description?, version?} validate - Mark feature validated. params: {feature_id, result} search - Search features. params: {query} mount_server - Mount external MCP server. params: {name, command, args?} thanos_snap - Trigger Instance Fractal Aggregation unmount_server - Unmount MCP server. params: {server_id} list_mounted - List mounted MCP servers discover_tools - Discover tools from mounted servers. params: {server_id?} invoke_tool - Invoke tool on mounted server. params: {server_id, tool_name, arguments?} traverse_mount - Recursively mount downstream servers. params: {root_mount_id} generate_proof - Generate proof document. params: {feature_id, thinking?, deployed_url?, files_changed?, risk_level?, rollback_time?} get_proof - Get proof for a feature. params: {feature_id} list_proofs - List all proof documents

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": {},
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Session management, events, state & checkpoint tools. Actions: save - Save session for later. params: {context, active_task?, pending_decisions?, breadcrumbs?, next_steps?} resume - Resume a saved session. params: {session_id?} list - List all saved sessions check_recent - Check for recent session to resume (alias: "current") end - End work session. params: {summary?, learnings?, mood?} start - Mandatory session start protocol archive_resolved - Archive .resolved.* backup files propose_merges - Detect redundant artifacts, generate merge proposals garbage_collect - Archive stale tasks. params: {max_age_hours?, dry_run?} emit_event - Emit event to brain ledger. params: {event_type, emitter, data, description?} read_events - Read recent events. params: {limit?} get_state - Get brain state. params: {path?} update_state - Update brain state. params: {updates} checkpoint - Save task checkpoint. params: {task_id, step?, progress_percent?, context?, artifacts?, resumable?} resume_checkpoint - Resume from checkpoint. params: {task_id} handoff_summary - Generate handoff summary. params: {task_id, summary, key_decisions?, handoff_notes?} ingest_conversations - Ingest Claude Code JSONL transcripts. params: {mode?: "incremental"|"batch"|"single", session_id?, limit?, dry_run?} search_conversations - Search ingested conversations. params: {query, limit?, session_id?, date_from?, date_to?} list_conversations - List ingested sessions. params: {limit?, offset?, sort?: "recent"|"size"|"turns"} conversation_stats - Aggregate conversation corpus statistics register - [T3.11] Register agent session envelope. params: {session_id, agent, role, provider, worktree_path?, pid?, heartbeat_interval_s?, role_credential?} (role_credential required when NUCLEUS_ROLE_CREDENTIAL=1 — see stone-1.5) heartbeat - [T3.11] Touch last_heartbeat on an envelope. params: {session_id} unregister - [T3.11] Delete a session envelope. params: {session_id} list_agents - [T3.11] List registered agent envelopes. params: {worktree_path?, role?, alive_only?} detect_splits - [T3.11] Report (worktree, role) buckets with >1 alive session. params: {worktree_path?}

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": {},
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Task management, depth tracking & ADHD context-switch tools. Actions: list - List tasks. params: {status?, priority?, skill?, claimed_by?, required_role?} get_next - Get highest-priority unblocked task. params: {skills, required_role?} claim - Atomically claim a task. params: {task_id, agent_id} update - Update task fields. params: {task_id, updates} add - Create a new task. params: {description, priority?, blocked_by?, required_skills?, source?, task_id?, skip_dep_check?, required_role?, plan_ref?} (alias: "create") import_jsonl - Import tasks from JSONL. params: {jsonl_path, clear_existing?, merge_gtm_metadata?} escalate - Escalate task for human help. params: {task_id, reason} depth_push - Go deeper into subtopic. params: {topic} depth_pop - Come back up one level depth_show - Show current depth state depth_reset - Reset depth to root depth_set_max - Set max safe depth. params: {max_depth} depth_map - Generate exploration map context_switch - Record context switch / ADHD drift check. params: {new_context} context_switch_status - Get context switch metrics context_switch_reset - Reset context switch counter

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": {},
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Sync, artifact, trigger & deploy management for multi-agent coordination. Actions: identify_agent - Register agent identity. params: {role, provider, session_id} (per ADR-0005 §D1) OR legacy {agent_id, environment, role?} (coerced per §D5 until end of Cycle C+2) sync_status - Check current multi-agent sync status sync_now - Manually trigger sync. params: {force?} sync_auto - Enable/disable file watching. params: {enable} sync_resolve - Resolve a file conflict. params: {file_path, strategy?} read_artifact - Read an artifact file. params: {path} write_artifact - Write to an artifact file. params: {path, content} list_artifacts - List artifacts. params: {folder?} trigger_agent - Trigger an agent via event. params: {agent, task_description, context_files?} get_triggers - Get all defined neural triggers evaluate_triggers - Evaluate triggers for an event. params: {event_type, emitter} start_deploy_poll - Start monitoring a Render deploy. params: {service_id, commit_sha?} check_deploy - Check deploy poll status. params: {service_id} complete_deploy - Mark deploy complete. params: {service_id, success, deploy_url?, error?, run_smoke_test?} smoke_test - Run a smoke test. params: {url, endpoint?} shared_read - Read shared state. params: {key} shared_write - Write shared state. params: {key, value, agent_id?} shared_list - List all shared state keys notify - Send notification to all channels. params: {title, message, level?} list_channels - List configured notification channels add_channel - Add a channel. params: {channel_type, webhook_url?} test_channel - Test a channel. params: {channel_name?} relay_post - Post message to another session type (Cowork↔Claude Code). params: {to, subject, body, priority?, context?, sender?, to_session_id?, from_session_id?, in_reply_to?, task_id?} relay_inbox - Read messages for current session type. params: {unread_only?, limit?, recipient?, session_id?, task_id?} task_comment_add - Post a task-scoped comment (coordination during task execution). params: {task_id, message, sender, subject?, priority?, in_reply_to?} task_comment_list - List all comments for a task. params: {task_id, limit?} declare_posture - Declare agent role + approach (pending operator approval). params: {role, approach?, agent_id?, delegation_targets?} approve_posture - Approve the declared posture (operator only). params: {approved_by?} get_posture - Get current posture. params: {} clear_posture - Clear current posture. params: {} relay_ack - Mark a relay message as read. params: {message_id, recipient?, session_id?} relay_status - Get relay mailbox status across all session types relay_clear - Clean up old relay messages. params: {recipient?, older_than_hours?} relay_log_event - Log a fire/skip event. params: {event, side, subject, tags?, match_reason?, priority?, message_id?, in_reply_to?} relay_skip_review - List recent unclassified skips. params: {limit?} relay_classify_skip - Classify a skip event. params: {ts, subject, classification, note?} relay_event_stats - Compute override + skip rates from event_log.jsonl marketplace_search - Search registered capability cards. params: {tags?, min_tier?, limit?} marketplace_whoami - Get caller's address, tier, reputation. params: {role?} marketplace_can_call - Pre-flight permission check. params: {caller, target} marketplace_recommend - Recommend agents by task description. params: {task, top_k?} marketplace_dashboard - Aggregated health snapshot. params: {} marketplace_history - Reputation event timeline for an address. params: {address, limit?} marketplace_promote - Admin: manually set address tier. params: {address, new_tier, caller?} marketplace_quarantine - Admin: flag address quarantined. params: {address, caller?, reason?} marketplace_audit - Replay admin_actions.jsonl with filters. params: {caller?, target?, action_type?, since_timestamp?, limit?, offset?} marketplace_compare - Head-to-head comparison of two addresses. params: {a, b} marketplace_trends - Tier distribution trend over N days. params: {days?} marketplace_alert - Subscribe to alert rules. params: {subscriber, target, event_types?} marketplace_export - Full registry snapshot (read-only). params: {} marketplace_diff - Diff two registry snapshots. params: {snapshot_a, snapshot_b} marketplace_subscribe - Subscribe to tier-change events. params: {subscriber, target?, event_types?} marketplace_unsubscribe - Remove subscription. params: {subscriber, target?} marketplace_subscriptions - List subscriptions. params: {subscriber?} marketplace_federation_proxy - Proxy an action to a remote federation brain. params: {target_brain, action, payload?} marketplace_federation_register - Register local brain as a federated capability card. params: {address, capabilities?, display_name?, tags?} marketplace_federation_sync - Force federation sync and reconcile marketplace registry. params: {}

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": {},
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Get the next unread relay message. One call — returns full message body and auto-acks. Long-poll (60s timeout). This is the agent's idle loop. Call it, get a message or None, act or re-call. No separate inbox + ack dance. The agent's loop: 1. nucleus_next_message() → blocks up to 60s for a message 2. If message: handle it (execute task, respond to comment, etc.) 3. Re-call nucleus_next_message() — always re-arm, never sit idle 4. Never stop the loop Role is auto-detected from posture (.brain/posture/current.json). No args needed. Returns: dict with: message: full relay message (id, from, subject, body, priority, task_id) or None acked: True if message was auto-acked waited_seconds: how long the poll ran

{
  "type": "object",
  "properties": {
    "recipient": {
      "default": "",
      "type": "string"
    }
  },
  "additionalProperties": false
}

{
  "type": "object",
  "additionalProperties": true
}

Long-poll subscription that pushes ctx.info() on each new inbox file. Replaces bash polling daemons (watch-relay-*.sh) with server-initiated push. Call once at session start (e.g. via SessionStart hook). Server holds the subscription, watches the calling agent's role-specific inbox dir, and fires info-level notifications on each new relay file arrival. Client re-calls this in a loop for persistent coverage. Per PR #1 (CCR-inversion-for-relay-pickup): `inbox_filter` parameter added to BYPASS role-based dir resolution. Use when role detection is unreliable OR when subscribing to a specific canonical inbox (e.g., 'cc_tb'). Closes 3-week-old feedback_relay_arrival_invisible_midsession HARD RULE.

{
  "type": "object",
  "properties": {
    "timeout_seconds": {
      "default": 270,
      "type": "integer",
      "description": "max subscription duration (60..1800, default 270 = under\n               FastMCP context-cache TTL so re-subscribe doesn't burn cache)"
    },
    "role": {
      "default": "",
      "type": "string",
      "description": "override calling agent's role (default: env-detected from\n    CC_SESSION_ROLE or detect_session_role())"
    },
    "inbox_filter": {
      "default": "",
      "type": "string",
      "description": "explicit inbox dir NAME (e.g., \"cc_tb\", \"claude_code_main\").\n            When provided, BYPASSES role detection entirely. Recommended\n            for SessionStart hook deterministic arming. Resolves the\n            bug where cc-tb's role detection mapped to wrong inbox."
    }
  },
  "additionalProperties": false
}

{
  "type": "object",
  "additionalProperties": true
}

One-shot convenience: resolve canonical inbox + arm long-poll subscription. Per PR #2 (CCR server-side auto-arm) — IDE-agnostic relay-arrival arming. This is the RECOMMENDED entry point for SessionStart auto-arming across all MCP clients (Claude Code, Antigravity, Cursor, Windsurf, etc.). Equivalent to: 1. resolve_canonical_inbox_name(role) → canonical inbox name 2. nucleus_relay_subscribe(inbox_filter=<canonical>, timeout_seconds=...) Why this exists vs nucleus_relay_subscribe + inbox_filter: nucleus_relay_subscribe + inbox_filter requires the caller to KNOW the canonical inbox name for their role. nucleus_ccr_arm hides that step. Agent just calls nucleus_ccr_arm() with no args; server detects role from CC_SESSION_ROLE / NUCLEUS_SESSION_ROLE env OR detect_session_role().

{
  "type": "object",
  "properties": {
    "role": {
      "default": "",
      "type": "string",
      "description": "explicit role override (e.g., \"antigravity\", \"cc_tb\"). If omitted,\n    server detects via env vars / registry ancestry / provider heuristics\n    (per detect_session_role)."
    },
    "timeout_seconds": {
      "default": 270,
      "type": "integer",
      "description": "max subscription duration (60..1800, default 270 under\n               FastMCP context-cache TTL)."
    }
  },
  "additionalProperties": false
}

{
  "type": "object",
  "additionalProperties": true
}

Quick scan for a PENDING task. Returns the task directly if one is available, or None if no task is ready within the timeout. Default timeout is 5s (non-blocking). The agent should NOT loop on this — tasks arrive via relay push. This is a fallback for when the agent wants to check for tasks without waiting for a relay. No args needed — the role is auto-detected from posture (.brain/posture/current.json) or NUCLEUS_AGENT_ROLES env var.

{
  "type": "object",
  "properties": {
    "required_role": {
      "default": "",
      "type": "string",
      "description": "role scope filter. Auto-detected from posture if empty."
    },
    "timeout_seconds": {
      "default": 5,
      "type": "integer",
      "description": "max wait (default 5s, 0 = instant burst, max 1800)."
    },
    "skills": {
      "default": "",
      "type": "string",
      "description": "comma-separated skill filter (optional)."
    },
    "agent_id": {
      "default": "",
      "type": "string",
      "description": "identifier for claiming (auto-detected if empty)."
    },
    "auto_claim": {
      "default": true,
      "type": "boolean",
      "description": "if True, atomically claim the task before returning."
    }
  },
  "additionalProperties": false
}

{
  "type": "object",
  "additionalProperties": true
}

Satellite view, commitments, loops, patterns & metrics. Actions: satellite - Unified satellite view. params: {detail_level?} scan_commitments - Scan artifacts for new commitments archive_stale - Auto-archive commitments older than 30 days export - Export brain to zip list_commitments - List open commitments. params: {tier?} close_commitment - Close a commitment. params: {commitment_id, method} commitment_health - Get commitment health summary open_loops - View all open loops. params: {type_filter?, tier_filter?} add_loop - Add a new open loop. params: {description, loop_type?, priority?} weekly_challenge - Manage weekly challenge. params: {action?, challenge_id?} patterns - Manage learned patterns. params: {action?} metrics - Get coordination metrics pr_watch - Enumerate stale PRs (>N days), classify (auto-mergeable / billing-stuck / needs-verdict), fire one relay per stale PR to the integration coord. params: {threshold_days?, dry_run?}

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": {},
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

LLM tiers, telemetry, PEFS notifications & protocol tools. Actions: set_llm_tier - Set default LLM tier. params: {tier} get_llm_status - Get LLM tier configuration record_interaction - Record user interaction timestamp value_ratio - Get Value Ratio metric check_kill_switch - Check Kill Switch status pause_notifications - Pause PEFS notifications resume_notifications - Resume PEFS notifications record_feedback - Record notification feedback. params: {notification_type, score} mark_high_impact - Mark loop closure as high-impact check_protocol - Check protocol compliance. params: {agent_id} request_handoff - Request agent handoff. params: {to_agent, context, request, priority?, artifacts?} get_handoffs - Get pending handoffs. params: {agent_id?} agent_cost_dashboard - Get agent cost tracking dashboard dispatch_metrics - Get dispatch telemetry (per-action timing, error rates) rate_limit_status - Get dispatch rate limiter status (calls per facade, window)

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": {},
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Orchestration slots, sprints & mission management. Actions: orchestrate - THE GOD COMMAND. params: {slot_id?, model?, alias?, mode?} slot_complete - Mark task complete. params: {slot_id, task_id, outcome?, notes?} slot_exhaust - Mark slot exhausted. params: {slot_id, reset_hours?} status_dashboard - ASCII dashboard. params: {detail_level?} autopilot_sprint - Sprint command. params: {slots?, mode?, halt_on_blocker?, halt_on_tier_mismatch?, max_tasks_per_slot?, budget_limit?, dry_run?} force_assign - Force assign task. params: {slot_id, task_id, acknowledge_risk?} autopilot_sprint_v2 - Enhanced sprint V3.1. params: {slots?, mode?, halt_on_blocker?, halt_on_tier_mismatch?, max_tasks_per_slot?, budget_limit?, time_limit_hours?, dry_run?} start_mission - Start mission. params: {name, goal, task_ids, slot_ids?, budget_limit?, time_limit_hours?, success_criteria?} mission_status - Get mission status. params: {mission_id?} halt_sprint - Halt sprint. params: {reason?} resume_sprint - Resume sprint. params: {sprint_id?}

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": {},
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Infrastructure: file changes, cloud, marketing & strategy tools. Actions: file_changes - Get pending file change events gcloud_status - Check GCloud auth status gcloud_services - List Cloud Run services. params: {project?, region?} list_services - List Render.com services scan_marketing_log - Scan marketing log for failures synthesize_strategy - Analyze marketing & update strategy. params: {focus_topic?} status_report - Generate State of the Union. params: {focus?} optimize_workflow - Self-optimize workflow cheatsheet manage_strategy - Read/Update strategy doc. params: {action, content?} update_roadmap - Read/Update roadmap. params: {action, item?} growth_pulse - Full growth pipeline: brief→metrics→streak→compound. params: {write_engrams?} capture_metrics - Refresh GitHub+PyPI metrics + gate evaluation. params: {write_engram?}

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": {},
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Agent spawning, critic, swarm, memory, ingestion & dashboard tools. Actions: spawn_agent - Spawn Ephemeral Agent. params: {intent, execute_now?, persona?, confirm?}. HITL: requires confirm=true. apply_critique - Apply critique fixes. params: {review_path} orchestrate_swarm - Start multi-agent swarm. params: {mission, agents?} search_memory - Search long-term memory. params: {query} read_memory - Read memory category. params: {category} respond_to_consent - Respond to respawn consent. params: {agent_id, choice?} list_pending_consents - List agents awaiting consent critique_code - Run Critic review. params: {file_path, context?} fix_code - Auto-fix code. params: {file_path, issues_context} session_briefing - Get session briefing. params: {conversation_id?} register_session - Register session focus. params: {conversation_id, focus_area, role?, tier?, charter_path?, parent_session?}. Tier ∈ {opus,sonnet,haiku}; role must start with tier prefix. handoff_task - Hand off task. params: {task_description, target_session_id?, priority?} ingest_tasks - Ingest tasks. params: {source, source_type?, session_id?, auto_assign?, skip_dedup?, dry_run?} rollback_ingestion - Rollback ingestion. params: {batch_id, reason?} ingestion_stats - Get ingestion statistics dashboard - Enhanced dashboard. params: {detail_level?, format?, include_alerts?, include_trends?, category?} snapshot_dashboard - Create dashboard snapshot. params: {name?} list_dashboard_snapshots - List snapshots. params: {limit?} get_alerts - Get active alerts set_alert_threshold - Set alert threshold. params: {metric, level, value}

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": {},
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Federation management for multi-brain coordination. Actions: status - Get comprehensive federation status join - Join a federation via seed peer. params: {seed_peer} leave - Leave the federation gracefully peers - List all federation peers with details sync - Force immediate synchronization with all peers route - Route a task to the optimal brain. params: {task_id, profile?} health - Get federation health dashboard

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": {},
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Engrams, health, observability, DSoR & tier system tools. Actions: health - Get system health status version - Get Nucleus version info export_schema - Export MCP toolset as JSON Schema performance_metrics - Get perf metrics. params: {export_to_file?} prometheus_metrics - Get Prometheus metrics. params: {format?} audit_log - View cryptographic interaction log. params: {limit?} write_engram - Write engram to memory. params: {key, value, context?, intensity?}. context: Feature|Architecture|Brand|Strategy|Decision. intensity: 1-10. (alias: "add") query_engrams - Query engrams. params: {context?, min_intensity?, limit?}. limit default 50, max 500. search_engrams - Search engrams. params: {query, case_sensitive?, limit?}. limit default 50, max 500. (alias: "search") governance_status - Get governance status morning_brief - Daily Nucleus Morning Brief hook_metrics - Monitor auto-write engram hooks compounding_status - Compounding Loop status end_of_day - Capture EOD learnings. params: {summary, key_decisions?, blockers?} session_inject - Session-start context injection weekly_consolidate - Weekly consolidation. params: {dry_run?} list_decisions - List DecisionMade events. params: {limit?} list_snapshots - List context snapshots. params: {limit?} metering_summary - Token metering summary. params: {since_hours?} ipc_tokens - List IPC auth tokens. params: {active_only?} dsor_status - Comprehensive DSoR status pulse_and_polish - God Combo: automated health check pipeline. params: {write_engram?}. Runs prometheus→audit→brief→engram. self_healing_sre - God Combo: SRE diagnosis pipeline. params: {symptom, write_engram?}. Runs search→metrics→diagnose→recommend. fusion_reactor - God Combo: self-reinforcing memory loop. params: {observation, context?, intensity?, write_engrams?}. Compounds knowledge. context_graph - Build engram relationship graph. params: {include_edges?, min_intensity?}. Returns nodes, edges, clusters. engram_neighbors - Get neighborhood of an engram. params: {key, max_depth?}. BFS traversal of context graph. billing_summary - Usage cost tracking from audit logs. params: {since_hours?, group_by?}. group_by: tool|tier|session. render_graph - ASCII visualization of engram context graph. params: {max_nodes?, min_intensity?}. federation_dsor - Federation DSoR status routing_decisions - Query routing decision history. params: {limit?} list_tools - List tools at current tier. params: {category?} tier_status - Get tier configuration status dsor_query_decisions- Query the DSoR decision ledger. params: {limit?} dsor_get_trace - Get full provenance trace for a decision. params: {decision_id} heartbeat_check - Proactive context-triggered check-in. params: {notify?, brain_path?}. Checks stale blockers/decisions, velocity drops, session gaps. heartbeat_status - Get heartbeat daemon installation status. params: {brain_path?}. Shows install state + recent check history.

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": {},
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Relay-substrate facade — post / read / ack / status. Actions: post - Send a relay envelope. params: {to, subject, body, sender?, priority?, in_reply_to?, context?, id?, from_session_id?} sender? auto-fills from your session role when omitted. to accepts short role aliases: main, peer, tb, ops, agy, board. "recipient" is accepted as an alias for "to". Returns {sent: bool, id: str (server message_id), error?: str}. inbox - List inbox messages. params: {role?, unread_only?, limit?} role auto-fills from CC_SESSION_ROLE env. Returns {messages: [...], role: str}. ack - Mark messages seen. params: {message_ids: [str], role?} Returns {acked: int, failed: int}. status - Diagnostic (no server call). params: {role?} Returns {is_http_mode, relay_url_set, bearer_set, canonical_role, resolved_inbox_dir}. Bearer resolves per-role at call-time (~/.tb/relay_token_<role>, falling back to NUCLEUS_RELAY_BEARER env) — never passed via this tool's prompt surface. Per ADR-0036 amendment c068abc1 + v0.2.1 Layer A.

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": null,
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

W5 tier routing — route a prompt to the optimal model tier. Actions: route - Route a prompt to cheapest capable model. params: {prompt, complexity?, context?, estimated_output_tokens?} complexity ∈ 'routine' | 'complex' | 'sovereign' (default 'routine') Returns: provider, model, cost estimates, sovereignty tier.

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": {},
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

W8 Team-tier tamper-evident audit log (SHA-256 hash chain). Actions: log_event - Append an audit event to the chain. params: {event_type, actor, resource, outcome, metadata?, team_id?, ts?} query - Single-tenant query. Rejects team_id='*'. params: {team_id, since?, until?, actor?, event_type?, limit?, offset?} admin_query - Cross-tenant query (team_id='*' allowed). Requires NUCLEUS_AUDIT_ADMIN_TOKEN env match. Logs every successful call to the synthetic '__admin__' chain. params: {admin_token, team_id?, since?, until?, actor?, event_type?, limit?, offset?} verify - Verify SHA-256 chain integrity for a team. params: {team_id}

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": {},
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Hand a coding or review task to a cross-vendor lane — a cheap, non-Claude agent that does the work for you. Use this INSTEAD OF shelling out to any CLI: it picks the vendor, injects the correct per-vendor permission flags, captures all output synchronously, and reports a real status. Do NOT run `agy`/`devin` yourself in Bash — the raw CLIs take DIFFERENT per-vendor flags (pass the wrong one and a build silently makes ZERO edits yet exits 0), and hand-driven background calls flush output late (a finished call looks empty for tens of seconds). This tool is the only robust path. First call `list` — it needs no setup, confirms cross-vendor is enabled, and shows each vendor's selectable_models + default_model. If dispatch/review return a disabled error, cross-vendor is OFF: run `nucleus onboard` once (one-time), then retry. Actions: dispatch - Hand a task to a cross-vendor lane. params: {vendor, prompt, artifact_ref, mode?, model?, expect_paths?, to?} REQUIRED: vendor ∈ 'agy'|'devin', prompt, artifact_ref. mode ∈ 'write'|'read' (default 'write'): write = the vendor CHANGES things (edit files, run commands, build/fix). read = the vendor only LOOKS and REPORTS (analyze/summarize); no file changes. When unsure use 'write': a read task still works in write mode, but a write task silently does NOTHING in read mode. model? — optional. Defaults to the vendor's verified model (agy → gemini-3.1-pro-high, devin → glm-5.2). These are ALREADY the defaults, so omitting model is sufficient; pass it only to be explicit or to override. The response echoes model_id — read model_id (NOT model_family) to confirm which model ran. A cross-wired model (e.g. glm-5.2 with agy) is rejected with the valid ids named. artifact_ref — a commit SHA / PR# / file path to bind the result to. No commit yet (a from-scratch build)? Pass the repo-relative path you will write, e.g. src/foo.py. expect_paths? — optional list of file paths you expect the vendor to change. If you pass them and the vendor changes none, status comes back NOT success ("no_files_touched") even if it narrated success. Without expect_paths, success means only that the vendor produced output — not that it edited anything, so ALWAYS confirm with your own `git diff`. (Paths are checked in the nucleus server process's working dir; pass paths valid there.) You never pass CLI flags — the tool injects the right permissions per vendor. Example (build): action="dispatch", params={"vendor":"devin","prompt":"<task>", "artifact_ref":"src/foo.py","mode":"write","model":"glm-5.2", "expect_paths":["src/foo.py"]} review - Independent, different-model verdict on pasted code / a diff. params: {content, ref?, vendor?, model?, to?} content REQUIRED (paste the code/diff inline). Default vendor agy (Gemini, model gemini-3.1-pro-high) — a genuinely different model from the devin/GLM builder, so the review is diverse. Read-only, edits nothing. Returns a terse two-line verdict. For a devin/GLM second opinion pass vendor='devin'. Example: action="review", params={"content":"<code or diff>", "model":"gemini-3.1-pro-high"} list - Show vendors, their selectable_models + default_model, the mode vocabulary, and whether cross-vendor is enabled. Needs no setup — call it first. A green result is a hypothesis until you verify it on your own shell (zero-trust). Read the response's `status` and `success`: 'ok' = produced output; 'empty_output' / 'no_files_touched' / 'timed_out' / 'error' come back success=false — NOT done. (If NUCLEUS_ENVELOPE is on, gate on the INNER success flag, not the envelope's ok.) Two caveats from real use: - SECRET HYGIENE: vendor OUTPUT is best-effort secret-redacted (Bearer/JWT/API-key patterns -> <REDACTED>; the count is in the response `redacted` field). This is a BACKSTOP, not a guarantee — never put credentials in a prompt, and the tool CANNOT scrub a file the vendor writes itself, so review any vendor file-writes near secrets yourself before trusting them. - REVIEW SEES ONLY WHAT YOU PASTE: 'review' (and 'dispatch') cannot read the repo, a diff, or any file — they judge only the text in your params. Paste the real code/diff or the reviewer will confidently critique things it cannot see. For a whole PR, paste the actual diff, not a description of it.

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string"
    },
    "params": {
      "additionalProperties": true,
      "default": {},
      "type": "object"
    }
  },
  "required": [
    "action"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Set up an autonomous task-execution loop in a git repo. WHEN TO USE: you have a list of tasks (bugs, features, tests) you want executed automatically without manual prompting — the lane runs watcher/executor/secretary daemons that claim tasks, invoke an LLM to implement them, and independently verify the results. Use this when you want to batch-execute a backlog of well-defined tasks. Creates .brain/, SPEC.md template, and pins via git tag.

{
  "type": "object",
  "properties": {
    "repo_path": {
      "default": "",
      "type": "string",
      "description": "Path to the git repo (default: current directory)."
    },
    "spec_path": {
      "default": "SPEC.md",
      "type": "string",
      "description": "Path to the spec file (default: SPEC.md)."
    },
    "role": {
      "default": "lane-g1",
      "type": "string",
      "description": "Lane role name (default: lane-g1)."
    },
    "vendor": {
      "default": "devin",
      "type": "string",
      "description": "Default vendor — devin (GLM) or agy (Gemini)."
    },
    "tag": {
      "default": "",
      "type": "string",
      "description": "Git tag for spec pinning (default: <role>-v1)."
    },
    "force": {
      "default": false,
      "type": "boolean",
      "description": "Skip isolation guards (for testing only)."
    }
  },
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Start autonomous lane daemons (watcher + executor + secretary) in background. WHEN TO USE: after nucleus_lane_init and SPEC.md is written — this launches the loop that autonomously claims and executes tasks. The executor invokes an LLM CLI (devin/agy) per task; the secretary independently verifies each result. Runs until nucleus_lane_stop is called.

{
  "type": "object",
  "properties": {
    "repo_path": {
      "default": "",
      "type": "string",
      "description": "Path to the git repo (default: current directory)."
    },
    "executors": {
      "anyOf": [
        {
          "items": {},
          "type": "array"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "List of executor lane names (default: [\"lane_devin\"])."
    },
    "no_secretary": {
      "default": false,
      "type": "boolean",
      "description": "Skip secretary daemon (NOT recommended — disables verification)."
    },
    "no_watcher": {
      "default": false,
      "type": "boolean",
      "description": "Skip control watcher."
    }
  },
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Stop all running lane daemons. WHEN TO USE: when all tasks are CONFIRMED or you want to pause autonomous execution.

{
  "type": "object",
  "properties": {
    "repo_path": {
      "default": "",
      "type": "string",
      "description": "Path to the git repo (default: current directory)."
    }
  },
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Check lane status: task counts (PENDING/IN_PROGRESS/DONE/CONFIRMED), daemon health, spec verification. WHEN TO USE: after starting a lane to monitor progress, or before starting to check if a lane is already running.

{
  "type": "object",
  "properties": {
    "repo_path": {
      "default": "",
      "type": "string",
      "description": "Path to the git repo (default: current directory)."
    }
  },
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Report friction/bugs/enhancements to the nucleus team. WHEN TO USE: when the lane misbehaves, a task fails unexpectedly, the SPEC.md format is confusing, or you have an improvement idea. Creates a GitHub issue on the public nucleus-mcp repo (cross-machine visible) AND stores locally. Requires gh CLI auth'd.

{
  "type": "object",
  "properties": {
    "feedback_type": {
      "type": "string",
      "description": "\"bug\", \"enhancement\", \"observation\", or \"question\"."
    },
    "subject": {
      "type": "string",
      "description": "Short summary."
    },
    "body": {
      "type": "string",
      "description": "Detailed description."
    },
    "reporter": {
      "default": "",
      "type": "string",
      "description": "Your name/project (default: anonymous)."
    },
    "repo_path": {
      "default": "",
      "type": "string",
      "description": "Path to the repo where the feedback was observed."
    }
  },
  "required": [
    "feedback_type",
    "subject",
    "body"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Execute a plan file autonomously. WHEN TO USE: you have a plan file (.brain/plans/*.md) you want executed autonomously — parses the plan, creates tasks, starts a mission with budget/time limits. Chains import_plan_as_tasks() then _brain_start_mission_impl() and returns the mission status string.

{
  "type": "object",
  "properties": {
    "plan_path": {
      "type": "string",
      "description": "Path to the plan markdown file (.brain/plans/*.md)."
    },
    "goal": {
      "default": "",
      "type": "string",
      "description": "Optional mission goal text. Defaults to empty."
    },
    "budget_limit": {
      "default": 10,
      "type": "number",
      "description": "Mission spend cap in USD (default $10.00)."
    },
    "time_limit_hours": {
      "default": 4,
      "type": "number",
      "description": "Mission time cap in hours (default 4.0)."
    }
  },
  "required": [
    "plan_path"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

Import a plan file as PENDING tasks without starting a mission. WHEN TO USE: you have a plan file (.brain/plans/*.md) you want loaded into the task store so the executor daemon / sprint mission can pick the tasks up later — but you don't want to start a mission right now.

{
  "type": "object",
  "properties": {
    "plan_path": {
      "type": "string",
      "description": "Path to the plan markdown file."
    }
  },
  "required": [
    "plan_path"
  ],
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}

List available plan files in .brain/plans with task counts. WHEN TO USE: you want to discover which plan files exist and how many tasks each contains before importing or executing one. Returns: JSON string: a list of dicts each with ``{"name", "path", "size_bytes", "task_count", "format"}``. Missing directory returns ``[]``.

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "result": {
      "type": "string"
    }
  },
  "required": [
    "result"
  ],
  "x-fastmcp-wrap-result": true
}