Samuelz® Policy

App-only exact human Owner confirmation. Never call from the model or infer approval from chat text.

App-only exact human Owner confirmation. Never call from the model or infer approval from chat text.

App-only exact human Owner confirmation. Never call from the model or infer approval from chat text.

App-only: apply the exact replacement after the Owner's trusted show_policy_approval click. Models must never invoke it. Goal/general-budget cards use confirm_business_goal instead.

The UI returns candidate+approvalToken from one card. Module/policy, replacement value, revision and expiry form one signed binding; a current revision cannot make a changed candidate or mismatched token valid. Requires current policy:read/write and Owner/module authority. Changed/expired candidates, stale revisions and revoked access fail closed.

Success returns confirmed, policyVersion and revision; consumerOutcome stays not_verified until downstream evidence exists. Read get_policy with kind=policy and the same moduleKey/policyKey for the current confirmed snapshot; get_policy_write_options supplies supported values/revisions. get_business_budgets.advertising also reads advertising pending state. On stale state renew intent; on isError/not_verified or uncertainty, read state without retrying confirmation.

App-only exact human Owner confirmation. Never call from the model or infer approval from chat text.

Preview deactivation of an automation policy without saving or applying it. Use this only for an explicit stop; use prepare_policy_change for other replacements.

Read get_policy_write_options first. Choose canDeactivate=true and copy moduleKey, policyKey and expectedRevision from that same option. The revision identifies the complete current state, not a proposed value. Only standing-send permissions and public-post plans support deactivation.

The existing Owner card consumes the preview's exact nextAction.arguments. Only a human can confirm; models never call confirmation. Confirmation preserves other settings and history and keeps the disabled state current, preventing older permissions from resuming. Already inactive produces no card or new version; running or sent work is not cancelled.

Requires policy:read/write and current Owner/module authority. Invalid, stale, unsupported, unconfigured or inaccessible selections fail without persistence. After confirmation or uncertainty, read get_policy and get_policy_history; do not retry confirmation.

Read structured settings for the active tenant with exact expectedRevision. Separate opt-in business:read/brand:read and current registered module authority. No arbitrary metadata, other tenant, campaign/send authority or document reissue.

Read active tenant's central locations, service areas and products/services, including localized offer copy, archived entries and exact expectedRevision. Copy newPlaceId/newOfferKey for creation. With additional current crm:read authority, supplierOptions includes tenant-related suppliers, assignedPlaceIds and explicitly adoptable legacy-ranked suppliers. At most 200 catalog records of each type and 500 supplier options; larger catalogs require settings UI. No publication, prices, customer quotes or Google profile mutation.

Read structured settings for the active tenant with exact expectedRevision. Separate opt-in business:read/brand:read and current registered module authority. No arbitrary metadata, other tenant, campaign/send authority or document reissue.

Read the active tenant's company name, business/billing email, phone, website and address with exact expectedRevision. Requires separate company:read consent and current registered module authority. No tenant override, private metadata, legal issuer, credential or profile publication.

Read workspace identity or discover capabilities before an unfamiliar action or access diagnosis. view=identity returns tenantId/scopes and the current profile without catalog reads; do not supply names/domain/detail. view=discovery includes a timestamped capabilityCatalog and accepts those filters. view=roles returns minimal paged roleDirectory keys/titles through native Work read authority, without profile or catalog.

Without view or filters, Business defaults to discovery; other toolsets retain tenantId/scopes only. Any legacy catalog filter still requests their combined snapshot. profile.id is a workspace-bound opaque ID, not a native user ID.

names and domain intersect; names=[] retains context/profile with no capabilities. Business spans catalog domains: get_policy uses domain=policy.

Catalog availability gives missingScopes and access.nextAction after current access checks. Filtered emptiness does not prove absence; full detail never expands callability. Invalid authentication fails without tenant fallback; actions recheck authority. FULL also retains get_profile for legacy callers.

Read one confirmed rule or verify it after a change. Use get_policy_history for comparisons and get_policy_write_options for an editable revision.

Select the kind/moduleKey/policyKey identity from list_policies. With policyVersion:

• A policy may pin a historical numeric version.

• A template may pin only its currently confirmed revision.

• An unavailable pin stays unavailable; it never falls back to another version.

Omit policyVersion for current state. This numeric history version is not the opaque revision used for writing.

Returns verified with an attestation-checked, sensitive-field-redacted snapshot, or unavailable with a reason. Requires policy:read and current policies Owner access. Reading restores no version and grants no action authority.

Read confirmation history for one known policy/template. Use list_policies for identities, get_policy for a snapshot, get_policy_write_options for edits. Cross-resource search belongs to get_business_change(view=activity).

Evidence by kind:

• policy: adjacent attested snapshots can be compared.

• template: confirmation timeline; only the current confirmation is verifiable, without field comparisons.

Policy pages descend by version; templates by confirmation time/ID, with repeated revisions possible. Follow moreVersions using the returned record count. Live inserts may shift pages; deduplicate receiptId.

The structured result describes verification, time precision, comparison availability and currentVersion independently of the page. Unknown identities return no versions or selection.

Requires policy:read and current policies Owner access. Invalid input, storage failure or access loss is an error. Reading restores or activates nothing.

Read editable policies and their write revisions before an explicit change. Use list_policies for recorded identities, get_policy for confirmed content, and get_policy_history for comparisons.

moduleKey and policyKey filter the supported policies. An unsupported pair returns options=[]; the read never substitutes another policy. A module Owner denial omits that policy's adapter, while shared authorization failures are errors. A supported policy that is not configured yet still has a revision for its first configuration.

Choose one element of the returned options array. Copy that element's moduleKey, policyKey and expectedRevision together into prepare_policy_change, with the complete value the user requested. That same element's proposed field is an adapter-supplied suggestion, not the user's request or approval. For an explicit automation stop, use deactivate_policy only when canDeactivate=true; a confirmed disabled value remains current.

Requires policy:read/write and current Owner/module access. Reading prepares and applies nothing.

Read the current authenticated profile for this workspace. Use get_context for workspace/scopes and initial tool discovery.

Each call reads the stored opaque id and available name/email/nickname, without a tool-level cache. The id binds workspace and user: profile edits keep it stable; another workspace changes it. It is not a native user ID.

Invalid authentication fails. This tool has no account selector and cannot sign in, switch accounts or grant access.

Read current tenant's team members, roles, active/inactive access and pending/accepted/expired/revoked invitations with exact expectedRevision and newInviteId. Module authority follows the registered requirements; separate team:read consent. No users of other tenants, credentials or arbitrary entitlement modification. Invite roles owner/manager/employee; operator membership role can be assigned after acceptance.

Discover capabilities before selecting an unfamiliar action or diagnosing denial. Use get_context for workspace/scopes and business read tools for records.

For a focused policy lookup use names=["get_policy"], domain="policy", detail="full". The business toolset contains several catalog domains: domain="business" excludes policy tools. names and domain intersect; names=[] selects none. Omit filters for an overview. When detail is omitted, selected toolsets default to summary, otherwise full. Full adds descriptions/schemas, not host-callability for undisclosed tools.

Returns a timestamped list with availability, missingScopes and access.nextAction after current role/module/delegation/integration checks. An empty filtered result is not a complete access diagnosis; inspect the unfiltered catalog before concluding an action is absent. Availability proves neither data completeness nor execution authority. No access grant or business operation.

Find recorded policy/template identities before reading content or history. Use get_policy for a verified snapshot, get_policy_history for comparisons, and get_policy_write_options for editable settings, including unconfigured native adapters.

Counts reflect stored history, not successful attestation. Pages are live: new confirmations can shift results. Retain the returned cursor until hasMore=false; a goal cursor or history offset is invalid here.

Requires policy:read and current policies Owner access. Invalid/foreign cursors and access loss fail; reading changes no settings or permissions.

After explicit request, read the matching settings and copy exact expectedRevision. Supply selected structured patch fields; omissions preserved. Native validation and exact before/after preview, no persistence. Human execution uses show_business_settings_approval with identical input. No publication, send or reissue.

After explicit request, copy exact expectedRevision and identity from get_business_catalog; preserve fields from read. supplier_areas requires additional crm:read/crm:write authority: copy a service-area id and exact supplierIds from supplierOptions; adoptions may include only canAdopt options with their exact rankedMarket. It atomically connects those ranked suppliers and replaces area assignments, without changing global supplier status or confirming qualifications. Optional offer locales patch localized fields; omitted fields remain unchanged. Only Owner catalog drafts are edited; module-managed offers use their module. Archive checks dependencies. Preview never writes; use show_business_catalog_approval with identical input. Stale revisions require reread and renewed intent.

After explicit request, read the matching settings and copy exact expectedRevision. Supply selected structured patch fields; omissions preserved. Native validation and exact before/after preview, no persistence. Human execution uses show_business_settings_approval with identical input. No publication, send or reissue.

After an explicit company-profile change request, read get_company_profile and copy exact expectedRevision. Supply only selected patch fields; omitted fields are preserved and empty strings clear optional fields. Uses the settings UI validation and shows normalized final values without saving. For human execution use show_company_profile_approval with identical input. Stale revision requires reread and renewed intent. No policy activation or publication.

Preview an explicitly requested policy replacement without applying it. Read confirmed content with get_policy, or discover editable revisions with get_policy_write_options. Activation belongs exclusively to the Owner card's app-only confirm_policy; models never call that confirmation.

Keep moduleKey/policyKey/expectedRevision from one options result. value replaces the whole policy rather than patching it: include the existing fields the user wants to retain.

The preview is neither queued nor saved. Its nextAction.arguments carries that exact replacement into the human card, which Business hosts present automatically.

Requires policy:read/write and current Owner/module access. Invalid or stale input fails without persistence. Reread the policy and renew intent rather than substituting a revision.

After explicit request, read get_team_access and copy exact expectedRevision and existing membership/invite identity or newInviteId. Validate exact recipient and role, current native rules and last-active-owner protection. Preview writes/sends nothing. Only the human show_team_approval card can execute. Invite needs team:invite; role/access/revoke need team:write. Expired/stale cards and ambiguous delivery require read without retry. Never expose hidden tokens or login links.

After explicit request, read get_team_access and copy exact expectedRevision and existing membership/invite identity or newInviteId. Validate exact recipient and role, current native rules and last-active-owner protection. Preview writes/sends nothing. Only the human show_team_approval card can execute. Invite needs team:invite; role/access/revoke need team:write. Expired/stale cards and ambiguous delivery require read without retry. Never expose hidden tokens or login links.

After an explicit catalog change request, use the exact read revision and change to show normalized before/after values in the human Owner card. supplier_areas shows selected suppliers and prefixes newly connected ranked suppliers with +; additional crm:read/crm:write authority is rechecked atomically. No save on load. Only its Freigeben click writes. Never call confirm_business_catalog from the model, expose hidden approval metadata, or infer approval from chat text. No host UI means no write; use existing settings.

After an explicit business settings change request, use the exact read revision and change to show normalized before/after values in the human Owner card. No save on load. Only its Freigeben click writes. Never call confirm_business_settings from the model, expose hidden approval metadata, or infer approval from chat text. No host UI means no write; use the existing settings page.

After an explicit company-profile change request, use the exact read revision and patch to show normalized before/after values in the human Owner card. No save on load. Only its Freigeben click writes. Never call confirm_company_profile from the model, expose hidden approval metadata, or infer approval from chat text. No host UI means no write; use the existing settings page.

Display the Owner card for an exact policy replacement. General goal/spending proposals use show_business_goal_approval with proposalId instead.

Pass prepare_policy_change.nextAction.arguments, or prepare_business_budget.nextAction.arguments for advertising. moduleKey/policyKey, expectedRevision and value form one change: revision identifies the state being replaced; value replaces it completely rather than patching omitted fields. Do not combine different reads/proposals. Use get_policy_write_options for current supported values/revisions and get_policy for the confirmed snapshot. get_business_budgets.advertising also reads advertising pending state.

Requires policy:read/write and current Owner/module authority. Returns ready_for_human_approval and activatesPolicy=false. Hidden UI metadata carries the exact candidate and signed ten-minute approval proof for the trusted card; only the human click returns them. Present the card and wait. Never call confirm_policy or reveal this proof. isError means no usable preview; reread stale state and obtain renewed intent. No change is applied.

After an explicit team change request, use the exact read revision and change to show normalized before/after values in the human Owner card. No save on load. Only its Freigeben click writes. Never call confirm_team_change from the model, expose hidden approval metadata, or infer approval from chat text. No host UI means no write; use the existing settings page.