List NF pipelines as path/title metadata from 03_管线库 and community/*/pipelines. Use it to discover a pipeline ID before pipeline_read; do not use it to fetch pipeline text (use pipeline_read instead), module metadata (registry_search), or protocol packages (spec_list). The optional query is a case-sensitive substring of the repository-relative path or H1 title, not file content; wildcard characters are literal. Omit it to list every pipeline (examples: P04, 技术文档, 校园). Returns metadata only, never pipeline bodies, sorted by repository path; no matches yields an empty list, and each call rescans the repository. Local-only; no auth or rate limits.

List protocol packages from desktop/src/core/registry.json with each package's id, version, module count, and categories. Use it for the authoritative protocol package catalog; do not use it to search modules (registry_search) or pipelines (pipeline_list), and do not treat protocol hits from registry_search as a substitute for this list. Takes no arguments; an empty list means the registry declares no protocols. Reads one local file deterministically; a missing or malformed registry is an error. Packages appear in registry order.

Query the NF registry for modules whose id or name contains query. Use it to resolve a module ID before module_read; do not use it for the authoritative protocol package catalog (spec_list) or free-text document search (library_search). Matching is case-sensitive; query is required, and an empty query matches every entry (examples: M90, 技术文档域包). Results are grouped under modules and protocols, with protocol hits secondary. Reads registry.json only and never scans module or pipeline files; it never matches descriptions, paths, or file contents, and no matches yields empty arrays.

Search the library catalog and repository docs for query, returning ranked catalog entries plus matching document titles. Use it to find an entry ID for library_read or to locate a doc or package README; do not use it for exact module or protocol metadata (registry_search / spec_list). Catalog matching is case-insensitive and relevance-ranked; document hits match the filename or H1 title as a case-sensitive substring.

The combined list is capped by limit (1–50, default 10), and there is no offset or next-page parameter. Catalog hits come first, so a full catalog page can hide document hits; an empty query returns the first page of document hits only, and no matches yields an empty list.

Read one library catalog entry by ID, returning its frontmatter record and body. Use it after library_search resolves the ID; do not use it to search (library_search) or to read modules, pipelines, or assets (module_read / pipeline_read / asset_read). The ID is the canonical stem without the .md suffix and matching is case-insensitive (for example NF-1); an unknown ID returns an error carrying the requested value and repair guidance. Reads one local file and returns its full text without truncation. Local-only; no auth or rate limits.

List engineering patterns as id/path/title/status metadata from patterns/*/PATTERN.md, sorted by ID. Use it to discover a pattern ID before pattern_read; do not use it to fetch pattern text (use pattern_read instead) or to list modules/assets (module_read / asset_list). Returns metadata only, never the PATTERN.md body, with no pagination; no matches yields an empty list, and each call rescans the local patterns directory.

Read one engineering pattern's full Markdown from patterns//PATTERN.md, including frontmatter, rules, and a counterexample. Use it for the practice behind an NF rule; do not use it to enumerate patterns (pattern_list) or read domain modules (module_read). pattern_id is the exact, case-sensitive directory name such as fail-closed-verification, not the document title. A missing pattern is an error, not an empty result; reads one local file and returns its full text without truncation. Local-only; no auth or rate limits.

Return the declared knowledge-source query order and a contract-first flag.

Use it before assembling or citing NF content; do not use it to search documents (use library_search instead) or read module/asset bodies (module_read / asset_read).

Optional clearance is a visibility ceiling: public keeps public sources, internal keeps public and internal, restricted keeps all. Use public before republishing material, or omit it to keep all. Filtered sources are omitted without reordering the rest, and count is post-filter. Reads only the declaration, never source bodies.

Read one NF module's full Markdown by ID, including its raw machine-contract block when present.

Use it after registry_search resolves a module, or enumerate module IDs with registry_search and an empty query; do not use it for pipelines or assets (pipeline_read / asset_read).

The ID is the declared machine-contract or heading ID (M90), or a qualified ID (通用:M10, as returned by registry_search), not the filename; matching is case-sensitive. An unknown ID returns an error with the requested value and repair guidance. Returns the full file plus resolved metadata from one local file and does not evaluate the contract. Local-only; no auth, network, rate limits, or writes.

Read one NF pipeline's full Markdown by P-number or repository-relative path. Use it after pipeline_list identifies a pipeline; do not use it to list pipelines (use pipeline_list instead) or read modules/assets (module_read / asset_read). pipeline is either a Pxx stem (P01, matched against the filename prefix) or a .md path under 03_管线库/ or a community pipelines/ directory; paths outside those roots and .. escapes are rejected. A missing pipeline is an error, not an empty result; reads one local file and returns its full text without truncation. Local-only; no auth or rate limits.

List asset files and the uppercase keys they declare, from community/*/assets and 05_资产库/用户自定义. Use it to discover a key before asset_read; do not use it to fetch asset text (asset_read) or to list modules/patterns (module_read / pattern_list). Optional package is an exact directory name, not a glob, path, or regex, and restricts the scan to community//assets (for example 校园情感领域包); README.md files are skipped. A package with no matching files returns an empty list, not an error.

Keys are sorted and uncapped; each call rescans the local asset files.

Read asset files for a key, returning package, path, and text.

Use only a key from asset_list; for enumeration use asset_list, for other resources module_read or pipeline_read.

The key is exact uppercase, never glob, regex, package, path, or prose. The package is an exact directory; it narrows files but never key matching.

Tokens come from each file's name or first 6000 characters; lowercase/partial keys fail. Full text is returned; no truncation.

Without a package, all community assets and 05_资产库 are searched. A package limits the scan to one directory with no fallback. Multiple matches may be returned. No match is an error.