Brain OS
Brain OS
Ваш ИИ помнит разговоры. Но он по-прежнему забывает состояние проекта.
Brain OS даёт агентам операционное состояние: решения, планы, блокеры и приоритеты, которые переживают сеансы.
Что это такое?
ИИ-агенты сильны внутри сеанса, но в долгосрочной работе состояния больше, чем в любом чате: что вы решили, что заблокировано, что активно, а что не стоит переоткрывать. Brain OS даёт агентам операционное состояние, а не журналы разговоров:
Сущности — отслеживайте проекты, сделки, инициативы со статусом, динамикой, блокерами и следующими шагами
Решения — фиксируйте, что было решено, почему, какие альтернативы были отклонены и когда стоит пересмотреть
Паттерны — выявляйте повторяющиеся блокеры, устаревшую работу, сигналы избегания и схождение тем
Фокус — расставляйте приоритеты работы на основе срочности, динамики, рычага влияния и устаревания
Семантический поиск — ищите в памяти по смыслу, а не только по ID
Brain OS — это MCP-сервер, который работает с любым MCP-совместимым клиентом: Claude Code, Cursor, Zed, GitHub Copilot, OpenAI Codex, Windsurf или любым агентом, говорящим на этом протоколе.
Related MCP server: usecortex-mcp
Как это выглядит в работе
Прежде чем агент действует, он может проверить, не конфликтует ли предлагаемый шаг с существующим решением:
> decision_check({ proposal: "switch to Postgres for the new service" })
{
"verdict": "conflict",
"conflicting_decision": {
"id": "dec_2026_03_14_db_choice",
"decision": "Use SQLite for all local-first projects",
"reason": "Lower ops burden, no infra to run, fits single-user scope",
"rejected_alternatives": ["Postgres", "DuckDB"],
"logged_at": "2026-03-14"
},
"guidance": "Re-litigating a settled choice. Surface the prior reasoning to the user before proceeding."
}В этом и суть: структурированное состояние с контролем, чтобы агенты перестали переоткрывать вопросы, на которые вы уже ответили.
Быстрый старт
Требуется Node.js 20 или новее.
# In your project
npx brain-os initЭто делает три вещи:
Создаёт каталог
.brain/с хранилищами сущностей, решений и паттернов.Устанавливает слэш-команды в
.claude/commands/, чтобы вы могли запускать/brain,/brain:focus,/brain:decideи т. д. прямо в Claude Code. Короткие алиасы (/focus,/decideи т. д.) устанавливаются рядом для краткости.Добавляет файлы-указатели с инструкциями для агента, чтобы любой MCP-совместимый клиент вёл себя единообразно:
AGENTS.md(канонический, кросс-инструментальный) плюс тонкие файлы-указатели для Claude Code (CLAUDE.md), GitHub Copilot (.github/copilot-instructions.md), Cursor (.cursor/rules/brain-os.mdc), Zed (.zed/rules.md) и Windsurf (.windsurfrules).
Флаги:
npx brain-os init --minimal— установить толькоAGENTS.md+CLAUDE.md, пропустить остальные указатели клиентов (режим чистого репозитория)npx brain-os init --no-commands— пропустить слэш-команды (только MCP-сервер)npx brain-os init --no-agent-instructions— пропустить все файлы-указатели с инструкциями для агента
Подключение к Claude Code
claude mcp add brain-os -- npx brain-os serveПодключение к Cursor / другим MCP-клиентам
Добавьте в конфигурацию MCP:
{
"brain-os": {
"command": "npx",
"args": ["-y", "brain-os", "serve"]
}
}Настройка семантического поиска (необязательно)
Инструменту semantic_recall нужен провайдер эмбеддингов. Всё остальное (entity_update, decision_log, plan_* и т. д.) работает без него.
Brain OS не устанавливает SDK эмбеддингов по умолчанию. Это сохраняет базовую установку компактной и не тянет нативные зависимости ONNX/Sharp пользователям, которым семантический поиск не нужен. Установите опциональный провайдер OpenAI рядом с brain-os, затем добавьте BRAIN_EMBEDDINGS в окружение MCP-сервера:
npm install brain-os openaiЗатем настройте провайдера в окружении MCP-сервера:
{
"brain-os": {
"command": "npx",
"args": ["-y", "brain-os", "serve"],
"env": {
"BRAIN_EMBEDDINGS": "openai",
"OPENAI_API_KEY": "${OPENAI_API_KEY}"
}
}
}Режим | Что делает | Настройка |
| Временно недоступен, пока у прежнего провайдера есть непогашенные транзитивные уведомления высокой степени серьёзности. | Используйте поиск по ключевым словам или провайдера OpenAI, пока не выйдет проверенный локальный бэкенд. |
| Использует | Установите |
Если BRAIN_EMBEDDINGS не задан, провайдер OpenAI отсутствует или запрошен локальный режим, semantic_recall возвращает понятную ошибку настройки. Никакой тихой установки провайдера, загрузки модели или вызова API не происходит. Основные инструменты продолжают работать в обычном режиме.
Никогда не вставляйте сырой ключ
sk-...в конфигурацию MCP.~/.claude.jsonи аналогичные файлы конфигурации MCP хранятся в открытом виде и легко могут попасть на экран или в резервные копии. Вместо этого один раз экспортируйте ключ в оболочке и ссылайтесь на него из окружения процесса MCP.
Инструменты
Инструмент | Описание |
| Чтение операционного состояния одной или всех отслеживаемых сущностей |
| Обновление состояния сущности — статус, динамика, блокеры, следующие шаги |
| Фиксация стратегического решения с обоснованием и альтернативами |
| Проверка предлагаемого действия на соответствие активным решениям — возвращает clear/caution/conflict |
| Обновление существующего решения: сдвиг review_date, добавление доказательств, смена статуса. Только метаданные — содержимое решения не изменяется. |
| Входящие «долга по пересмотру»: группирует просроченные решения (still-true / changed / archive / needs-evidence) и рекомендует действие для каждого. Только чтение — предлагает, вы подтверждаете. Автоопределяет дубли-заглушки решений. |
| Определяет, к какой сущности относится текущая работа, по явному упоминанию / алиасу / файлам / лексическим сигналам. Детерминированный, с оценкой уверенности — направляет известный контекст, никогда не угадывает намерение. |
| Получение приоритизированных рекомендаций, над чем работать |
| Сканирование только на чтение нативного операционного состояния репозитория (STATE.md, FLAGS, HANDOFF, ROADMAP/PLAN/TODO, git-активность, грязные файлы) на предмет человеческих гейтов, следующих шагов и «не трогать» — привязывает фокус к реальности репозитория. |
| Анализ паттернов по всем сущностям |
| Аудит качества памяти — выявляет устаревшие данные, противоречия, шум |
| Коммит в конце сеанса — сохранение всех изменений состояния |
| Поиск в памяти по смыслу с помощью естественного языка |
| Чтение полной истории изменений — что изменилось, когда, кем |
| Определение, накопились ли значимые изменения состояния с момента последнего wrap |
| Неинтерактивный страховочный wrap: применяет низкорисковые поля и выносит высокорисковые изменения на проверку |
| Задание упорядоченного плана для сущности — шаг 1 становится активным next_move |
| Завершение или пропуск шага (требуется доказательство/причина) — автоматически продвигает следующий |
| Добавление шагов в существующий план |
| Просмотр прогресса плана и текущего шага |
| Классификация рискованных действий до выполнения, включая риски публичного релиза и деструктивных операций |
| Применение встроенных шаблонов защиты к распространённым высокорисковым действиям перед выполнением |
Слэш-команды
brain-os init устанавливает слэш-команды в .claude/commands/, чтобы у агента был понятный словарь для работы с операционным состоянием. Каждая команда устанавливается в двух формах: /brain:* (каноническая, документированная форма) и короткий алиас (/decide, /focus и т. д.) для краткости опытных пользователей. /brain — корень пространства имён и устанавливается один раз.
Также устанавливается:
BRAIN_OS_PROTOCOL.mdпо адресу.claude/brain-os/PROTOCOL.md(проект) и~/.claude/brain-os/PROTOCOL.md(пользователь). Протокол управляет маршрутизацией инструментов: когда агент выполняет слэш-команду Brain OS, он сначала читает протокол, а затем вызываетentity_read/plan_read/focus_get/и т.д. как основные. Pulse-файлы становятся запасным вариантом.Суб-агент
brain-os-modeпо адресу.claude/agents/brain-os-mode.md. Когда основной агент делегирует работу Brain OS суб-агенту (например, через инструмент Task в Claude Code), тот работает по тому же протоколу — нет риска, что суб-агенты откатятся к обычному поиску файлов.Опциональный хук защиты маршрутизации по адресу
templates/hooks/brain-os-routing-guard.py. Опциональный хук PreToolUse, который предупреждает, если pulse-файлы читаются при наличии рабочего пространства.brain/. Инструкции по установке выводятся командойbrain-os init.
Команда | Псевдоним | Что делает |
| — | Сканер проекта: обзор всех сущностей, свежесть, решения, оповещения |
|
| «Над чем мне работать сегодня и почему?» с обоснованием |
|
| Зафиксировать стратегическое решение (с проверкой конфликтов перед записью) |
|
| Партнёр по стратегическому мышлению: продумать решение перед реализацией |
|
| Завершение сессии: обновить состояние сущностей, зафиксировать решения, обнаружить смену динамики |
|
| Обнаружить паттерны между сущностями: повторяющиеся блокеры, избегание, темы |
|
| Еженедельная или ежемесячная ретроспектива: что выпущено, что застопорилось, что скрыто |
|
| Показать, как связаны сущности, возможности для рычагов, общие решения |
Идемпотентная установка
Повторный запуск init безопасен и умеет чинить: существующие команды Brain OS сохраняются, а любые недостающие формы устанавливаются. Если путь команды занят другим инструментом, этот путь пропускается и об этом сообщается — ваш файл никогда не перезаписывается. Вы можете установить Brain OS в проект с существующими командами /decide или /focus, и пространственные формы /brain:* всё равно будут установлены.
Как это работает
Brain OS хранит всё в виде локальных JSON-файлов в каталоге .brain/:
.brain/
entities/ — one file per tracked entity
decisions/ — decision log
patterns/ — detected patterns
config.json — workspace settingsНикакого облака. Никакой базы данных. Никакого аккаунта. Ваши данные остаются на вашей машине.
Почему нет интерфейса?
Интерфейс — это агент. Brain OS читается и записывается через вызовы MCP-инструментов — /brain, /focus, /decide, decision_check и т.д. — отображаемые встроенно тем клиентом, который вы используете (Claude Code, Cursor и т.д.). Нет отдельной панели, которую нужно держать открытой, нет второй вкладки для переключения контекста, нет состояния интерфейса, которое могло бы расходиться с базовыми файлами.
Это осознанный дизайн-выбор, а не отсутствующая функция. Состояние Brain OS находится на том же уровне, что и ваш код; агент уже там, уже в разговоре, уже является правильной поверхностью для вопроса «что сейчас в приоритете?». Добавление человеческой панели разделило бы внимание между двумя интерфейсами для одних и тех же данных.
Если вам нужен визуальный обзор с одного взгляда, .brain/ — это обычный JSON: рендерите его как угодно. Публичный MCP-сервер остаётся агент-нативным по дизайну.
Команды и синхронизация
Brain OS сегодня по дизайну рассчитан на одного пользователя. Но поскольку .brain/ — это просто локальные JSON-файлы, команды могут обмениваться мозгом через любую синхронизируемую файловую систему — без изменений в продукте:
Подход | Плюсы | Минусы |
Git — коммитить | Инструменты diff/merge, история версий, осознанные точки синхронизации | Ручной |
Общая папка Dropbox / Drive | Почти в реальном времени, без ручных шагов | Одновременные записи могут создавать конфликтные файлы; |
Монтирование NFS / SMB / S3 | Действительно в реальном времени | Требует настройки инфраструктуры |
Это работает без встроенной синхронизации, потому что каждый вызов инструмента Brain OS читает данные заново с диска — нет кэша в памяти, который нужно инвалидировать. Что бы ни синхронизировала ваша файловая система, следующий вызов инструмента это увидит. То же самое работает между инструментами: записали решение из Claude Code в понедельник, открыли Cursor во вторник — тот же мозг, оба агента.
Нативная зашифрованная синхронизация для команд с правильной семантикой слияния — в дорожной карте. Локальная основа сегодня — это то, что делает такую федерацию аддитивной, а не переделкой.
Автозагружаемый статус
Когда MCP-клиент подключается, Brain OS предоставляет ресурс brain://status с операционным обзором — активные сущности, оповещения, главный приоритет и недавние решения. Агент начинает каждую сессию с контекстом, а не с амнезией.
Тестирование
Brain OS поставляется с набором смоук-тестов по адресу tests/smoke.mjs, подключённым к npm test и запускаемым при каждом пуше через .github/workflows/audit.yml. Локальный запуск:
npm testТекущее покрытие (регрессия + счастливый путь):
decision_log— коллизия типов без замещения, явныйsupersedesработает, замещение между сущностями отклоняетсяdecision_check— флаг только по ключевым словам остаётся предупреждением без эмбеддингов (без ложных STOP), асимметричное семантическое сравнение (отклонённая грань против выбранной)decision_refresh— очищает висячийsuperseded_by, когда статус переходит изsupersededplan_advance— без излишнего продвижения, когда активный шаг уже существуетentity_update— применяет diff и записывает изменения, создаёт отсутствующую сущность,mode_reasonобязателен при парковке, обновления только статуса применяются, защищённые пропуски ранжирования видныsemantic_recall— выбрасываетEmbeddingsNotConfiguredError(не общий Error), когдаBRAIN_EMBEDDINGSне заданРазрешение хранилища — закрывается с ошибкой в каталоге без хранилища, а не молча создаёт пустой
.brain/
Известные пробелы (пока нет прямого покрытия): скоринг focus_get, эвристики pattern_detect, memory_*, plan_set/add/read и ресурс brain://status. Расширение набора тестов — в дорожной карте.
Если вы наткнулись на баг, пожалуйста, откройте issue с инструментом, входными данными и выходными данными — это самый быстрый путь к исправлению.
Сообщество
Discord: discord.gg/9VBUGstjY — вопросы, обратная связь, что у вас сломалось, что вы выпускаете с Brain OS
Сайт: brainos-hq.com
Лицензия
MIT
Available Tools
22 toolsaction_guardARead-only
Apply the Brain OS policy table to a risk assessment. Takes the output of risk_assess plus the concrete action type and returns a policy decision: allow (proceed), ask (stop and get explicit user confirmation), or block (do not proceed). Pure TypeScript — no LLM call. Policies in order: private_to_public → block; critical risk → block; force-push → ask; npm publish → ask; security boundary → ask; irreversible → ask; high risk → ask; hard-to-reverse external → ask; medium + requires_confirmation → ask; else → allow. Always audit what was decided and why.
| Name | Required | Description | Default |
|---|---|---|---|
| entity_id | No | Brain OS entity this action is associated with. | |
| assessment | Yes | The full output of risk_assess. | |
| action_type | Yes | The concrete action being guarded, e.g. 'npm publish', 'git push origin main', 'force push', 'write ROADMAP.md'. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint annotation, the description discloses that the tool is 'Pure TypeScript — no LLM call,' lists the exact policy decision order, and explains the three possible outcomes. The 'Always audit what was decided and why' note adds behavioral context about expected follow-through, significantly enriching the annotation-only safety profile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with purpose, then efficiently enumerates the entire policy decision table in a compact colon-separated list. Every sentence contributes essential information—purpose, inputs, computational nature, and policy order—with no filler or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the core decision logic, output values, and policy ordering, sufficient for an agent to invoke the tool. However, it does not specify the exact return JSON shape (e.g., fields beyond decision/reason), and the 'Always audit' statement is ambiguous as to whether the tool itself logs or the agent must do so. Given no output schema, slightly more explicit return-field documentation would make this fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema description coverage, the schema already documents the parameters. The description adds meaning by clarifying that assessment must be the full output of risk_assess and by giving concrete examples for action_type ('npm publish', 'git push origin main'). It does not mention entity_id, but the schema covers it, so the incremental value is solid but not maximal.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific action: 'Apply the Brain OS policy table to a risk assessment.' It clearly names the resource (policy table), the input (risk assessment), and the output (allow/ask/block decision). This distinguishes it from sibling risk_assess, which produces the assessment, and decision_check/review tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states it 'Takes the output of risk_assess plus the concrete action type,' establishing a clear pipeline context and when to use it. It does not explicitly name alternatives or when-not-to-use cases, but the dependency on risk_assess and the detailed policy ordering provide clear usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
audit_logARead-only
Read the audit trail of all memory mutations. Use this — not semantic_recall — for recency questions: 'what's the latest update?', 'what changed recently?', 'what was the last thing written?', 'show me the most recent entry.' Pass last_n=1 for the single most recent mutation. semantic_recall is for topic-based search; audit_log is for time-ordered history, integrity checks, and debugging unexpected state.
| Name | Required | Description | Default |
|---|---|---|---|
| tool | No | Filter by tool name (entity_update, decision_log, memory_commit, plan_update) | |
| last_n | No | Number of recent entries to return (default 20) | |
| entity_id | No | Filter by entity ID |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With readOnlyHint already present, the description adds useful context: the tool returns time-ordered history, covers all memory mutations, and serves integrity/debugging purposes. It does not contradict the annotation, but it omits details like ordering direction (e.g., newest first) and the exact shape of returned entries, so it is not fully transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the core purpose, then provides usage guidance and an explicit contrast with a sibling tool. Every sentence earns its place with no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only audit log with three optional filters, the description covers purpose, usage scenarios, and differentiation from semantic_recall. It doesn't specify the return format or ordering direction, but given the simplicity of the tool and the presence of readOnlyHint, these are minor gaps. The description is sufficiently complete for an agent to select and invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already documents all three parameters with descriptions (100% coverage). The description adds a concrete usage hint for last_n ('Pass last_n=1 for the single most recent mutation'), which goes beyond the schema's generic 'Number of recent entries to return (default 20)' and helps the agent apply the parameter correctly.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Read the audit trail of all memory mutations,' identifying the specific verb (read) and resource. It also explicitly contrasts with semantic_recall, distinguishing its scope and purpose from a key sibling tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit guidance to 'Use this — not semantic_recall —' for recency questions, provides concrete example queries, and closes with a clear differentiation: semantic_recall for topic search, audit_log for time-ordered history, integrity checks, and debugging. This fully addresses when to use the tool vs. alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
context_resolveARead-only
Resolve which entity the current work belongs to, with a derived confidence. Deterministic — matches explicit signals (passed entity, named mention, active mission, files touched) before weak ones (lexical, single-active); never guesses from cwd. Returns entity_id + confidence + ask_user. Call this BEFORE focus_get/decision_check when the target entity is not already known, then pass the returned entity_id into them. Confidence >= 0.80: proceed silently. 0.50-0.79: proceed but say 'I think this is X'. < 0.50 (ask_user true): ask one short question.
| Name | Required | Description | Default |
|---|---|---|---|
| user_message | No | What the user said they want to do, verbatim. Strongest inferred signal. | |
| files_touched | No | Paths being worked on. Matched by exact path segment against entity id/aliases — assists only, never overrides an explicit mention. | |
| active_mission_id | No | Entity id of the active approved mission/task, if any. | |
| explicit_entity_id | No | Caller-asserted entity id. Authoritative (confidence 1.0) when it matches a known entity. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnlyHint annotation by disclosing deterministic behavior, matching signal priority order, the explicit prohibition on guessing from cwd, return fields, and confidence-based decision flow. No contradictions with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Dense but well-organized; every sentence contributes actionable detail—purpose, determinism, orchestration, and thresholds—with no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Compensates for the lack of an output schema by describing return fields, confidence thresholds, and required follow-up actions. For a read-only resolution tool, it is fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers all parameters with rich descriptions (100% coverage), so baseline is 3. The description adds signal-priority semantics (explicit vs weak) but does not substantially extend per-parameter details beyond the schema. This extra context justifies a 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states it resolves which entity the current work belongs to with a derived confidence. It also distinguishes itself from sibling tools by referencing focus_get/decision_check and specifying when to call it.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly instructs to call before focus_get/decision_check when the target entity is not already known, and provides confidence thresholds for when to proceed silently, when to communicate uncertainty, and when to ask. This is concrete when-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
decision_checkARead-only
Check a proposed action against all active decisions. Returns 'clear', 'caution', or 'conflict', plus a review_triggered list. Call this BEFORE taking actions that might contradict prior decisions. If status is 'conflict', do NOT proceed without explicit user confirmation to revisit the decision. review_triggered is the opposite signal: the action matches an invalidate_if condition a decision named as a reason to reopen it — surface those decisions to the user for review rather than enforcing them. A decision can be both a conflict and a review trigger (the conflict it anticipated); when so, frame it as a decision review, not a blind violation.
| Name | Required | Description | Default |
|---|---|---|---|
| entity_id | No | Check against decisions for a specific entity. Omit to check all. | |
| proposed_action | Yes | What you're about to do — describe the action clearly |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, but the description goes far beyond that by explaining the return semantics, the meaning of 'review_triggered' as an opposite signal, and the nuanced case where a decision is both a conflict and a review trigger. This is rich behavioral disclosure that helps an agent act correctly on the result.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is logically structured: state purpose, list return values, provide usage directive, then explain the subtle review_triggered behavior. Every sentence earns its place; no filler or redundant content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description must explain return values and interpretation, which it does thoroughly. It covers the three statuses, the review_triggered list, how to handle conflicts, and the dual conflict/review-trigger case. This is complete for the tool's complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, and both parameters ('entity_id' and 'proposed_action') already have clear descriptions in the schema. The tool description does not add parameter-specific detail beyond the schema, so it meets the baseline but does not exceed it.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource: 'Check a proposed action against all active decisions.' It clearly states the returned statuses ('clear', 'caution', 'conflict') and the 'review_triggered' list, which distinguishes it from sibling tools like action_guard or memory_check. The purpose is unambiguous and specific.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'Call this BEFORE taking actions that might contradict prior decisions' and provides a clear conditional: 'If status is conflict, do NOT proceed without explicit user confirmation.' This gives strong when-to-use guidance, though it does not name alternative tools or state when not to use it beyond the conflict case.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
decision_logA
Log a strategic decision so it persists across sessions. Every decision needs a reason, alternatives, and a proof action. Optionally capture the assumptions that make it true and the invalidate_if conditions that should reopen it — these turn a timestamped 'no' into a testable frame the system can reason about later.
| Name | Required | Description | Default |
|---|---|---|---|
| why | Yes | The real reason | |
| type | No | ||
| decision | Yes | What was decided | |
| entity_id | Yes | Entity this decision applies to | |
| supersedes | No | Decision IDs this new decision replaces (e.g. ['dec-007']). Only the IDs you explicitly pass will be marked superseded — there is no auto-deduction from type. Each target must belong to the same entity_id. | |
| assumptions | No | The premises that make this decision true — e.g. ['users want human approval before sending', 'model reliability not yet sufficient for autonomous send']. If these still hold, the decision likely still holds. | |
| review_date | Yes | YYYY-MM-DD — when to revisit | |
| alternatives | No | Options considered | |
| proof_action | Yes | One concrete, observable action that validates this decision — e.g. 'Run npm test and confirm all 41 tests pass'. Placeholders like 'Review in next session', 'TBD', or 'Revisit' are rejected. | |
| invalidate_if | No | Condition-based review triggers ('what would make this false') — e.g. ['users show sustained trust in autonomous drafts', 'target workflow shifts from external email to internal triage']. Distinct from review_date (a time trigger): decision_check matches proposed actions against these to flag the decision for review rather than enforcing it blindly. | |
| chosen_direction | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only indicate readOnlyHint=false and destructiveHint=false. The description adds useful behavioral context by explaining that logged decisions persist across sessions and that invalidate_if conditions turn a timestamped decision into a testable frame for future reasoning. This goes beyond the bare annotations without contradicting them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, with three sentences that front-load the core purpose and then elaborate on required and optional inputs. Every sentence contributes meaning, and the structure is efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description omits mention of several required fields like entity_id and decision, but the schema covers them. However, the inaccurate statement about alternatives being required is a significant gap that could mislead. The description does explain the purpose of assumptions and invalidate_if, but the misinformation lowers completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is high (82%), so baseline is 3. However, the description inaccurately states that 'alternatives' is needed when the schema marks it as optional (required array only includes entity_id, decision, why, proof_action, review_date). This misinformation actively misleads an agent about required parameters, subtracting value rather than adding it.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'Log' and resource 'strategic decision', clearly indicating the tool records persistent decisions. It states the persistence aspect, which distinguishes it from siblings like decision_review and decision_check that likely read or analyze decisions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for use: logging strategic decisions for persistence across sessions. It also gives guidance on required elements ('reason, alternatives, and a proof action') and optional ones (assumptions, invalidate_if), though it does not explicitly name alternative tools or state when not to use this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
decision_refreshA
Refresh an existing decision's metadata: bump review_date forward, append evidence as the decision continues to hold, or change status (active/superseded/archived). Use INSTEAD of editing decisions.json directly. Does not mutate decision content — for content changes, log a new decision via decision_log.
| Name | Required | Description | Default |
|---|---|---|---|
| status | No | New status. Use 'superseded' only when a replacement decision exists — prefer logging the replacement via decision_log with its `supersedes` parameter instead. Transitioning away from 'superseded' automatically clears the dangling superseded_by pointer. | |
| decision_id | Yes | ID of the decision to refresh (e.g. 'dec-002') | |
| review_date | No | New review date YYYY-MM-DD | |
| add_evidence | No | Evidence note to append (e.g. 'shipped v1, onboarded first users'). Each call appends a dated entry, never overwrites. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations indicate this is a mutating tool (readOnlyHint=false) but not destructive (destructiveHint=false). The description goes beyond this by clarifying that content is not mutated, only metadata, and that adding evidence appends a dated entry without overwriting. It also discloses a side effect: transitioning away from 'superseded' automatically clears the dangling superseded_by pointer. This provides useful behavioral context beyond the annotations, though it does not cover all possible edge cases (e.g., invalid decision_id).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and well-structured. It opens with a clear verb and resource, lists the three main actions, and then provides two critical usage notes in separate sentences. Every sentence earns its place, and there is no fluff or repetition of schema content that is already obvious. The length is appropriate for the tool's complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (4 parameters, one required, no output schema), the description is mostly complete. It explains the core functions, the distinction from decision_log, and the special superseded status rule. However, it does not mention what the tool returns (e.g., success confirmation or updated decision object) or how errors are handled (e.g., nonexistent decision_id). Since there is no output schema, a brief note on the return value would have been helpful, but the tool remains usable with the information provided.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema describes all four parameters with 100% coverage, so the schema already provides the heavy lifting. The description reinforces the meaning of 'add_evidence' (append, never overwrites) but does not add substantial new meaning beyond the schema. The 'status' parameter's special handling is also documented in the schema, so the description's reference to it is redundant but consistent. As per the baseline rule for high schema coverage, a 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: refreshing metadata for an existing decision, listing specific actions (bump review_date, append evidence, change status). It distinguishes itself from related tools like decision_log by explicitly noting it does not mutate decision content, and for content changes, a new decision should be logged. The verb 'Refresh' plus resource 'decision metadata' is specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit usage direction: 'Use INSTEAD of editing decisions.json directly' and 'for content changes, log a new decision via decision_log.' It also provides a conditional rule for the 'superseded' status, stating this should only be used when a replacement decision exists and advising to prefer decision_log with the 'supersedes' parameter. This is clear when-to-use and when-not-to-use guidance with specific alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
decision_reviewARead-only
Call this before making new decisions, at session end, or when the user asks if a decision is still valid or what's overdue. Review-debt inbox: buckets overdue decisions into still_true / changed / archive / needs_evidence with a recommended action for each. READ-ONLY — proposes and cites reasons but mutates nothing; confirm, then apply via decision_refresh / decision_log. Auto-detects duplicate stubs. When root_path is provided, matches each decision's invalidate_if conditions against repo scan output.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max decisions to surface (default 5). | |
| entity_id | No | Scope to one entity. Omit to review all entities' overdue decisions. | |
| root_path | No | Absolute path to a project repo. When provided, runs project_evidence_scan and matches invalidate_if conditions against git log and state files. Matched decisions are moved to the 'changed' bucket with the triggering evidence cited. | |
| include_parked | No | Include decisions on parked/archived entities (default false). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description reinforces readOnlyHint with explicit 'READ-ONLY' and explains it mutates nothing, proposes and cites reasons, and auto-detects duplicate stubs. It also describes conditional behavior with root_path, adding value beyond the annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, front-loaded with usage triggers, no fluff. Dense but organized, every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only review tool with no output schema, the description covers purpose, usage, safety, and conditional behavior. Missing output format is acceptable since no output schema exists and the description gives adequate context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema covers all 4 parameters with detailed descriptions (100% coverage). The description doesn't add significant new parameter semantics beyond what schema provides; it references root_path but schema already explains it in detail.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: a review-debt inbox that buckets overdue decisions into still_true / changed / archive / needs_evidence with recommended actions. It uses a specific verb ('Call this...') and distinguishes from siblings by focusing on review/analysis rather than mutation or checking.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to call it ('before making new decisions, at session end, or when the user asks if a decision is still valid or what's overdue') and directs follow-up actions via decision_refresh / decision_log, providing clear workflow context and alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
entity_readARead-only
Call this FIRST for any question about a project's state, momentum, blockers, or recent decisions — before reading code or git history. Returns the operational state one or all tracked entities: status, momentum, blockers, decisions, staleness, and next actions. Do not grep files to answer state questions when this tool is available.
| Name | Required | Description | Default |
|---|---|---|---|
| entity_id | No | Entity ID to read. Omit for all entities. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=true, and the description adds the returned data shape (status, momentum, blockers, etc.) and the ability to fetch all entities. This goes beyond the annotation but doesn't cover potential edge cases like staleness or error behavior, but for a read tool the bar is lower.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three focused sentences: usage instruction, core functionality, and an exclusion. Front-loaded and every sentence earns its place with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple (one optional param, no output schema). The description fully covers when to use it, what it returns, and how to invoke it (first, before grep), making it complete within its simplicity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter entity_id is fully described in the schema ('Entity ID to read. Omit for all entities.'). The description repeats this concept ('one or all tracked entities') without adding new syntax or format details, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the tool returns operational state for entities, with specific fields (status, momentum, blockers, etc.). The verb 'Returns' and resource scope ('one or all tracked entities') distinguish it from update tools and code-reading alternatives.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly instructs to call this tool FIRST for state questions, before reading code or git history. Provides an exclusion ('Do not grep files') and implicit alternative (code/git reading), making usage unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
entity_updateA
Use this — not built-in memory — to add or update a project, product, or business idea in Brain OS. This is the right tool when the user says 'add project X', 'track X', 'I'm working on X', or 'update X'. Creates the entity if it doesn't exist. Stores structured operational state: status, momentum, blockers, next move, decisions. Use after work is done, a decision is made, a blocker changes, or momentum shifts.
| Name | Required | Description | Default |
|---|---|---|---|
| updates | Yes | Fields to update | |
| entity_id | Yes | Entity to update | |
| context_hint | No | Pass the user's original message here. Brain OS will verify this message actually refers to entity_id before writing. If it detects the message is about a different project, it rejects the write and tells you which entity_id to use instead. Prevents cross-project contamination. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate readOnlyHint=false, so the write nature is known. The description adds valuable behavioral context: it upserts ('Creates the entity if it doesn't exist'), stores structured operational state, and explains the context_hint rejection mechanism that prevents cross-project contamination. This goes beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with 'Use this' and consists of five sentences, each earning its place: purpose, trigger phrases, upsert behavior, stored fields, and timing. No redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (3 params, nested updates object, no output schema), the description covers purpose, triggers, timing, and an important safety behavior (context_hint validation). It does not describe return values or error handling in general, but the core usage context is complete enough for an agent to select and invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with each parameter already documented. The description lists field categories (status, momentum, blockers, next move, decisions) which loosely maps to schema properties but adds no new parameter-level meaning beyond what the schema provides. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's verb ('add or update') and resource ('project, product, or business idea in Brain OS'), and distinguishes it from built-in memory. It also provides trigger phrases ('add project X', 'track X') and notes the upsert behavior, making the purpose unambiguous and differentiated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use triggers: user phrases and timing ('after work is done, a decision is made, a blocker changes, or momentum shifts'). It mentions 'not built-in memory' as an alternative but does not explicitly exclude other sibling tools like entity_read or plan_add, so it falls short of full when/where-not guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
focus_getARead-only
CALL THIS FIRST when the user asks what to focus on, what to work on, what their priorities are, or what matters most — before reading any code, files, or git history. Brain OS holds decisions, blockers, and momentum signals that cannot be inferred from the codebase. Returns prioritized recommendations based on urgency, momentum, leverage, staleness, and dependencies. follow_through_alerts surfaces active entities that stated a next_move but haven't logged any update in 7+ days — treat these as first-class accountability prompts, same tier as blockers. Pass entity_id to scope focus to a single project.
| Name | Required | Description | Default |
|---|---|---|---|
| entity_id | No | Scope focus to a single entity. When set, returns only that entity. Omit for global cross-project priorities. | |
| constraints | No | Optional: 'only 2 hours', 'low energy', etc. | |
| max_results | No | Max priorities to return (default 3) | |
| suppress_default_guidance | No | Set true to omit the built-in 'Do not reorganize…' / 'Do not start new ideas…' lines from do_not_do. Default false. Env override: BRAIN_FOCUS_OMIT_DEFAULT_GUIDANCE=1. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The readOnlyHint annotation already declares the tool is read-only. The description adds valuable context about the Brain OS data source, the follow_through_alerts behavior (entities with stale next_move), and how they should be treated as first-class prompts. This goes beyond what the annotation alone conveys.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is efficiently front-loaded with the critical 'CALL THIS FIRST' instruction, followed by concise but rich context about data source, recommendation criteria, and alert handling. Every sentence earns its place with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only tool with no output schema, the description covers the core purpose, trigger conditions, and a notable behavior (follow_through_alerts). It does not detail the exact response format, but given the full parameter schema and clear output description ('prioritized recommendations'), this is adequate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description's mention of entity_id ('Pass entity_id to scope focus to a single project') slightly reinforces the schema but adds little new meaning. Other parameters (constraints, max_results, suppress_default_guidance) are not elaborated beyond schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns prioritized recommendations based on specific criteria (urgency, momentum, leverage, staleness, dependencies) and distinguishes it from reading code/files/git history. It also explicitly positions it as the first tool to call for focus-related queries.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit trigger phrases ('asks what to focus on, what to work on...') and clear precedence guidance ('CALL THIS FIRST... before reading any code, files, or git history'). It also explains when to pass entity_id, making usage unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
memory_checkARead-only
Assess quality and reliability of current memory state. Flags stale data, contradictions, overdue decision reviews, unconfirmed patterns, fake-active entities, and noise. Returns signal classification (strong/weak/noise/dangerous) and recommended cleanup actions. Call this before acting on memory to know what to trust.
| Name | Required | Description | Default |
|---|---|---|---|
| entity_id | No | Check one entity, or omit for full memory audit |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description details what the tool flags (stale data, contradictions, overdue reviews, etc.) and what it returns (classification + recommended actions), adding meaningful behavioral context beyond the readOnlyHint annotation. It's consistent with read-only behavior and gives the agent a clear picture of what to expect.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four sentences, front-loaded with the core purpose, then enumerating flags and returned values, ending with actionable usage guidance. Every sentence contributes information with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description compensates by naming the return categories (strong/weak/noise/dangerous) and cleanup actions. The optional parameter scope is covered by the schema. The tool is relatively simple, and the context is sufficiently complete, though more detail on cleanup actions could be added.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter (entity_id) is fully documented in the schema with 'Check one entity, or omit for full memory audit', so schema coverage is 100%. The description doesn't add parameter-specific meaning beyond this, maintaining the baseline of 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Assess') with a clear resource ('quality and reliability of current memory state') and enumerates distinct outputs (signal classification, cleanup actions). It distinguishes itself from siblings by focusing on trustworthiness of memory rather than reads, writes, or decision checks.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The final sentence gives explicit guidance: 'Call this before acting on memory to know what to trust.' This provides a clear usage context, though it doesn't name alternatives or state when not to use the tool, so it stops short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
memory_commitADestructive
End-of-session commit. Updates all touched entities, logs decisions, records patterns. Call before ending any work session.
| Name | Required | Description | Default |
|---|---|---|---|
| decisions_made | No | ||
| session_summary | Yes | Brief summary of what happened | |
| entities_touched | Yes | Entity IDs worked on | |
| momentum_changes | No | ||
| patterns_noticed | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and readOnlyHint=false. The description adds context about updating all touched entities and logging/recording, but does not elaborate on side effects like whether updates are irreversible or how momentum_changes are applied. It does not contradict annotations, and the extra end-of-session framing is useful.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loads the core verb ('End-of-session commit'), and packs all key behaviors without padding. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a commit tool with 5 parameters and no output schema, the description covers the trigger and main effects but omits momentum_changes and does not explain the destructive implications beyond the annotation. It is adequate but missing important operational detail.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 40%, but the description partially compensates by mapping 'logs decisions' to decisions_made and 'records patterns' to patterns_noticed. It does not mention momentum_changes, which remains undocumented both in schema and description, leaving a gap for that parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'End-of-session commit', a specific verb+resource pair, and enumerates concrete actions: 'Updates all touched entities, logs decisions, records patterns'. This clearly distinguishes it from sibling tools like decision_log, entity_update, and pattern_detect by positioning it as a consolidated commit operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly instructs 'Call before ending any work session', providing a clear trigger context. It does not mention alternatives or exclusions, but the usage condition is direct and actionable.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pattern_detectARead-only
Call this when the user asks about patterns, recurring blockers, what keeps coming up, theme convergence, or avoidance signals — instead of grepping git logs or reading files to find trends. Analyzes patterns across all tracked entities and returns detected signals with entity context.
| Name | Required | Description | Default |
|---|---|---|---|
| scope | No | 'recent' for 7 days, 'deep' for full, or a specific theme |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so the safety profile is covered. The description adds that the tool analyzes 'all tracked entities' and returns 'detected signals with entity context,' which is useful but does not detail output format, pagination, or potential performance implications. This is similar to the reference example where annotations carry the main burden.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the most important usage trigger, and ends with a concise statement of behavior and output. Every word earns its place with no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the low complexity (one optional parameter, no output schema), the description is complete enough for an agent to select and invoke the tool. It covers when to use, what it does, and what it returns. The schema covers parameter details, and annotations cover safety.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema provides 100% coverage for the single 'scope' parameter, including its options ('recent', 'deep', or a specific theme). The description does not add further parameter-specific meaning, which is acceptable given the high schema coverage. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: it analyzes patterns across tracked entities and returns detected signals with entity context. It also explicitly lists trigger conditions (patterns, recurring blockers, theme convergence, avoidance signals), distinguishing it from generic file grepping or log reading.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description opens with explicit 'Call this when...' guidance listing specific user intents that should trigger this tool, and explicitly says to use it 'instead of grepping git logs or reading files to find trends.' This clearly communicates when to use it versus the alternative manual approaches.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
plan_addA
Add steps to an existing plan. Use when new work is discovered mid-plan. Steps can be added at the end or immediately after the current active step.
| Name | Required | Description | Default |
|---|---|---|---|
| steps | Yes | Steps to add | |
| position | No | Where to insert: 'end' (default) or 'after_current' | |
| entity_id | Yes | Entity to add steps to |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false and destructiveHint=false, consistent with the mutation described. The description adds value by explaining insertion positions ('at the end or immediately after the current active step'), offering behavioral detail beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences deliver purpose, usage context, and positional behavior without redundancy. Every phrase earns its place, and the structure is front-loaded with the core action.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With simple 3-parameter schema, helpful annotations, and clear usage context, the description is nearly complete. It doesn't mention return values or side effects, but for a low-complexity mutation tool with strong schema support, this is a minor gap rather than a critical omission.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds meaning beyond the schema by clarifying the 'after_current' position means 'immediately after the current active step', which is not fully explicit in the schema's enum description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's action: 'Add steps to an existing plan' with the specific resource (plan) and target (steps). It also distinguishes from siblings by noting mid-plan usage and positioning options, which differentiates it from plan_set and plan_advance.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides a clear usage context: 'Use when new work is discovered mid-plan.' It implies a specific scenario but does not explicitly name alternatives or say when not to use, though the sibling list and context make the distinction intuitive.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
plan_advanceA
Complete or skip the current plan step. Requires evidence (for complete) or reason (for skip). Automatically promotes the next pending step to active and updates next_move. Enforces continuity — you cannot skip without explaining why.
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | Complete (with evidence) or skip (with reason) | |
| reason | No | Required for skip — why this step is being skipped | |
| step_id | Yes | Step ID to complete or skip (e.g. 'step-001') | |
| evidence | No | Required for complete — what proved this step is done | |
| entity_id | Yes | Entity whose plan to advance |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses multiple behavioral traits beyond the annotations, including the mandatory evidence/reason requirements, automatic promotion of the next pending step, updates to next_move, and the 'cannot skip without reason' constraint. This gives a comprehensive view of the tool's side effects and validation rules.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description consists of two concise, front-loaded sentences. Every sentence contributes meaningful information: one states the core action and prerequisites, the other explains the automatic behavior and enforcement. There is no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation tool with no output schema, this description sufficiently covers purpose, conditions, and side effects. It handles the main use cases and explains the state transition. Minor gaps exist, such as behavior when there is no pending next step, but these are not critical for primary usage.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds value by clarifying the conditional dependency between action and evidence/reason, which is not fully captured in the schema. This helps the agent understand which fields are required in which scenarios.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Complete or skip the current plan step.' This specificity distinguishes it from sibling tools like plan_add (which adds steps) and plan_read (which reads plans). The verb-resource pairing is precise.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use 'complete' vs 'skip' by requiring evidence or reason respectively. It also explains the automatic promotion of the next step and the continuity enforcement. While it doesn't explicitly name alternative tools, the guidance is sufficient to infer appropriate usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
plan_readARead-only
Read the current plan for an entity. Shows all steps, their status, the active step, and overall progress.
| Name | Required | Description | Default |
|---|---|---|---|
| entity_id | Yes | Entity to read the plan for |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint: true, so the safety profile is known. The description adds valuable behavioral detail about return content (all steps, status, active step, overall progress), which is especially important since no output schema exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences with no filler. The core action and its scope are front-loaded in the first sentence, and the second sentence enumerates the output contents efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only, single-parameter tool with no output schema, the description fully covers what the tool does and what it returns. There are no missing prerequisites or side effects to disclose given the readOnly hint.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter entity_id is fully described in the schema with a clear description. The tool description does not add extra semantics, but none are needed for such an obvious parameter. Schema coverage is 100%, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description uses a specific verb 'Read' with resource 'current plan for an entity', and lists what is shown (steps, status, active step, progress). This clearly distinguishes it from sibling plan mutation tools like plan_set or plan_advance.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The read-only purpose is clearly stated, making it obvious when to use this tool. It does not explicitly name alternatives or exclusions, but the context is unambiguous enough for an agent to select it for reading a plan.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
plan_setADestructive
Set an ordered plan for an entity. Replaces any existing plan. Step 1 becomes the active next_move. Use when committing to a sequence of work — not for brainstorming. Each step should be a concrete, completable action.
| Name | Required | Description | Default |
|---|---|---|---|
| steps | Yes | Ordered list of concrete steps. First step becomes active immediately. | |
| entity_id | Yes | Entity to set the plan for |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses key behavioral traits beyond annotations: 'Replaces any existing plan' (destructive behavior) and 'Step 1 becomes the active next_move' (activation semantics). These add value above the destructiveHint annotation, which only flags destructiveness generically.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four short sentences, each carrying essential information: purpose, replacement behavior, activation rule, and usage guideline. No fluff or repetition. Exceptionally well-structured for quick agent comprehension.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simplicity of the tool (2 parameters, no output schema), the description covers all necessary aspects: what it does, when to use it, how it affects existing state, and what constitutes valid input. The addition of a quality guideline for steps (concrete, completable) makes it fully self-contained for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and already describes steps as 'Ordered list of concrete steps. First step becomes active immediately.' The description adds 'Each step should be a concrete, completable action,' which is a slight refinement but largely redundant with the schema. No significant new meaning is provided.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool 'Set an ordered plan for an entity' and explicitly notes it 'Replaces any existing plan', which distinguishes it from sibling tools like plan_add. The verb+resource+scope is specific and actionable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit usage context: 'Use when committing to a sequence of work — not for brainstorming.' This gives a clear when-to-use signal and an exclusion. It does not name alternative tools explicitly, but the context implies this is for finalizing a plan rather than exploring ideas.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
project_evidence_scanARead-only
Read-only scan of a repo's native operating state (STATE.md, FLAGS*, HANDOFF*, ROADMAP.md, PLAN*.md, TODO.md, AGENTS.md + recent git activity / dirty files). Returns evidence — human gates, blockers, next moves, do-not-touch, safe parallel work — surfaced as exact lines. Call AFTER context_resolve and BEFORE building a focus answer. Mutates nothing and does no inference: it returns ALL candidate signals; deciding the focus is the agent's job. This is NOT context_resolve — do not use it to pick which project you're in.
| Name | Required | Description | Default |
|---|---|---|---|
| entity_id | No | Optional Brain OS entity this repo maps to (echoed back; does not affect the scan). | |
| root_path | Yes | Absolute path to the repo/project root to scan. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint annotation, the description adds that it 'Mutates nothing and does no inference: it returns ALL candidate signals,' clarifying the tool's non-destructive, non-interpretive behavior. It also details the output format ('surfaced as exact lines'), giving a clear behavioral contract.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise yet information-dense. Each sentence earns its place: purpose, output content, usage timing, non-mutation guarantee, and sibling distinction. It is front-loaded with the core function and avoids redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema, the description explains what the tool returns (evidence categories, exact lines) and the scope of files scanned. Combined with usage timing and behavioral guarantees, it fully equips an agent to select and invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds no parameter-specific guidance beyond what the schema already states; it merely implies that root_path is the target repo. Since the schema fully documents both parameters, the description needs no further elaboration.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('scan') and resource ('a repo's native operating state'), enumerates exact file patterns, and explicitly distinguishes itself from sibling context_resolve by stating 'This is NOT context_resolve.' This makes the tool's purpose unmistakable and separate from alternatives.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit sequencing: 'Call AFTER context_resolve and BEFORE building a focus answer,' and an explicit exclusion: 'do not use it to pick which project you're in.' This gives clear when-to-use and when-not-to-use guidance, superior to most tool descriptions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
risk_assessARead-only
Assess the risk of a proposed action before executing it. Runs a pre-filter (returns low/skipped immediately for clearly safe actions) then applies signal detection for: private→public boundary crossings, destructive operations, release/publish actions, external communication, and security-sensitive file access. Call this BEFORE any action in the trigger set: publish, push, force-push, git tag, deploy, delete tracked files, external API writes, billing, roadmap/private state movement. Returns risk_level (low/medium/high/critical), boundary_crossed, reversibility, and risk_reasons. Pass the result to action_guard to get a policy decision (allow/ask/block).
| Name | Required | Description | Default |
|---|---|---|---|
| diff | No | Git diff or content diff of the proposed change. | |
| entity_id | No | Brain OS entity this action is associated with. | |
| git_status | No | Output of git status, if relevant. | |
| package_info | No | package.json metadata for release actions. | |
| files_touched | No | File paths the action will read or write. | |
| proposed_action | Yes | The action about to be taken — describe it clearly, e.g. 'npm publish brain-os@0.9.0' or 'write ROADMAP.md to public repo'. | |
| target_visibility | No | Whether the target destination is public-facing. Pass 'public' when writing to a public repo or publishing to a registry. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses behavior beyond the readOnlyHint annotation: it mentions a pre-filter that returns low/skipped for safe actions, then applies signal detection across five risk categories, and lists the return fields (risk_level, boundary_crossed, reversibility, risk_reasons). This provides a clear picture of the tool's internal processing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is four sentences, each earning its place: purpose, process, usage trigger, and output/handoff. It is front-loaded with the core purpose and contains no redundant text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 7 parameters, a nested object, and no output schema, the description covers purpose, usage triggers, process, return fields, and the next step to action_guard. It does not explicitly connect parameters like package_info or diff to the detection logic, but the schema covers those details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description references 'proposed action' and target categories, but does not add parameter-specific details beyond what the schema already provides (e.g., how diff or package_info are used).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Assess the risk of a proposed action before executing it' with a specific verb and resource. It goes on to list the detection categories and the explicit trigger set, distinguishing it from sibling tools like action_guard.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It provides explicit when-to-use guidance: 'Call this BEFORE any action in the trigger set: publish, push, force-push, git tag, deploy...' and instructs the next step: 'Pass the result to action_guard to get a policy decision.' This clearly positions the tool relative to alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
semantic_recallARead-only
Call this when the user asks what changed last session, what happened recently, or needs to find a decision/entity by description rather than exact name. Searches memory by meaning using semantic similarity. Use BEFORE reading git log or commit history for session-level context questions.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Natural language query — e.g. 'that decision about pricing' or 'projects related to memory systems' | |
| max_results | No | Max results to return (default 5) | |
| source_kind | No | Filter by type. Omit to search everything. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so the read-only safety is covered. The description adds meaningful behavioral context beyond that: it explains the semantic search mechanism and the fact that it matches by description rather than exact name. This goes beyond the minimal annotation baseline, though it doesn't disclose result format or failure behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, front-loaded with trigger conditions, followed by the core functionality and a usage directive. Every sentence earns its place with no redundancy or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only search tool with well-described parameters and no output schema, the description provides complete selection and invocation context: it tells the agent when to use it, what it does, and how to order it relative to git log. No critical gaps for an agent to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%: query has an example, max_results and source_kind have clear descriptions. The tool description does not add parameter-specific meaning, so the baseline of 3 is appropriate per the rubric.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Searches memory by meaning using semantic similarity.' It also specifies concrete use cases (what changed last session, recent events, finding by description) and distinguishes from exact-name search and git log, differentiating it from sibling tools like entity_read.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit when-to-use triggers ('when the user asks what changed last session...') and a strong guideline: 'Use BEFORE reading git log or commit history for session-level context questions.' This clearly guides the agent on tool selection and ordering relative to alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
wrap_autoA
Tier 2 of auto-wrap: persist a session wrap WITHOUT interactive review, when context is about to be lost (compaction, session end) or the user declined to review. Use the normal interactive /wrap when the user is present and reviewing — only reach for this as a safety net. The agent supplies the synthesized wrap; this tool applies LOW-RISK fields (next_move, open_questions, evidence_of_progress) immediately and STAGES high-risk changes (status, mode, blocked, decisions) as an unconfirmed record for /start to surface and the user to confirm. Always logs a session_wrapped marker. Never put a status change or a decision in pending_review expecting it to take effect now — staged items are proposals, not writes.
| Name | Required | Description | Default |
|---|---|---|---|
| summary | Yes | One-line synthesized summary of what happened this session. | |
| trigger | No | What triggered it: precompact | sessionend | manual-no-review. | |
| entity_id | Yes | Entity being wrapped. | |
| next_move | No | LOW-RISK, applied now — the concrete next action. | |
| session_id | No | Host session id, when known. | |
| open_questions | No | LOW-RISK, merged now — unresolved threads. | |
| pending_review | No | HIGH-RISK — staged for review, NOT applied. Surfaced at next /start for confirm/edit/discard. | |
| evidence_of_progress | No | LOW-RISK, appended now — what actually shipped or moved. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only say readOnlyHint=false, so the description carries the full burden of behavioral disclosure. It discloses that low-risk fields are applied immediately, high-risk changes are staged as unconfirmed records, a session_wrapped marker is always logged, and staged items are proposals not writes. This is consistent with readOnlyHint=false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four dense sentences, each earning its place: trigger/context, alternative, risk-tier behavior, logging, and a caution. The prose is front-loaded with 'Tier 2' and 'safety net' and contains no filler or redundant restatement.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For an 8-parameter, nested tool with only readOnlyHint=false and no output schema, this description covers purpose, trigger conditions, side-effect behavior, risk classification, and a critical caveat. It leaves no major gap in deciding whether and how to invoke the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, and the description reinforces the low-risk/high-risk split already present in schema descriptions. It adds crucial meaning by warning that pending_review is never effective immediately, clarifying how to set those fields, while not significantly altering parameter semantics beyond that.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description explicitly frames wrap_auto as 'Tier 2 of auto-wrap' for persisting a session wrap without review, clearly naming the verb (persist, apply, stage) and resource (session wrap). It distinguishes itself from the interactive /wrap sibling by positioning it as a safety net, so an agent can tell what this tool uniquely does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states when to use the tool ('context is about to be lost (compaction, session end) or the user declined to review') and explicitly says to use the normal interactive /wrap when the user is present and reviewing. This provides both inclusion and exclusion criteria, plus a clear warning against treating pending_review as immediately effective.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
wrap_checkARead-only
Check how much state-changing work has accumulated since the last wrap. Read-only — never mutates. Tier 1 of auto-wrap: call this when the user signals they are wrapping up or ending a session, or periodically during a long session, to decide whether to proactively offer a /wrap before context is lost to compaction or session end. Returns unwrapped_count, the projects touched, and recommend_wrap. When recommend_wrap is true, offer to wrap; do not auto-wrap silently from this tool.
| Name | Required | Description | Default |
|---|---|---|---|
| threshold | No | Unwrapped-mutation count at/above which a wrap is recommended. Default 5. | |
| session_id | No | Scope the check to one session's activity. Omit to check the whole audit tail. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint: true, and the description reinforces this with 'never mutates.' It adds valuable behavioral context beyond the annotation, such as returning unwrapped_count and recommend_wrap, and instructing the agent to offer a wrap rather than act silently. Minor gap: no mention of error conditions or edge cases, but the core behavior is fully disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact (~75 words) with front-loaded purpose and no fluff. Every sentence contributes either usage timing, return values, or an explicit behavioral rule. It is structured logically: what it does, when to use it, what it returns, and how to act on the result.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema, the description fully documents return values (unwrapped_count, projects touched, recommend_wrap) and the recommended action. It also covers usage timing and the read-only nature. Given the tool's relative simplicity and strong annotations, the description is complete enough for an agent to select and invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with both threshold and session_id having clear descriptions in the schema. The tool description itself does not add extra parameter meaning beyond the schema, but it hints at the threshold's purpose via 'recommend_wrap' logic. Baseline 3 is appropriate because the schema carries the full load.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description begins with a specific verb and resource: 'Check how much state-changing work has accumulated since the last wrap.' It clearly differentiates from the sibling tool 'wrap_auto' by positioning itself as the read-only check (Tier 1) that decides whether to offer a wrap, not perform it.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to call: 'when the user signals they are wrapping up or ending a session, or periodically during a long session.' It also provides a clear exclusion: 'do not auto-wrap silently from this tool,' and implies alternative behavior by mentioning the auto-wrap tier.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
22 tool updates
v0.1.0- First observed
action_guard - First observed
audit_log - First observed
context_resolve - First observed
decision_check - First observed
decision_log - First observed
decision_refresh - First observed
decision_review - First observed
entity_read - First observed
entity_update - First observed
focus_get - First observed
memory_check - First observed
memory_commit - First observed
pattern_detect - First observed
plan_add - First observed
plan_advance - First observed
plan_read - First observed
plan_set - First observed
project_evidence_scan - First observed
risk_assess - First observed
semantic_recall - First observed
wrap_auto - First observed
wrap_check
TDQS
Every tool targets a distinct resource-action combination (e.g., entity_read vs entity_update, decision_log vs decision_check, plan_set vs plan_add). Overlapping areas such as semantic_recall vs audit_log and wrap_check vs wrap_auto are clearly differentiated by their descriptions.
The majority of tools follow a consistent noun_verb pattern (plan_add, decision_check, entity_read). A few names like wrap_auto, semantic_recall, and audit_log deviate slightly from this pattern, but the overall convention remains predictable and readable.
With 22 tools, the set is on the heavy side, falling within the 16-25 borderline range. While each tool serves a meaningful purpose, the number exceeds the ideal 3-15 range for a well-scoped server.
The surface covers the core domain well: entity CRUD (via entity_read/update), decision lifecycle (log, check, review, refresh), plan management (set, add, advance, read), risk assessment, and memory operations. Minor gaps like explicit entity deletion or plan step editing are workable through entity_update and plan_set, so there are no critical dead ends.
Maintenance
Related MCP Connectors
Persistent work tracking for AI agents: tasks, status and history that follow you across machines
Durable, user-controlled goals and governed plans for AI agents.
Sovereign Agent OS — Persistent Memory, Governance & Compliance for AI Agents.
Persistent memory and drift detection for AI agents across session restarts.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceEnables persistent storage and retrieval of decisions, settings, and operational rules across chat sessions, maintaining context continuity and decision consistency for long-term development projects through structured memory management.-
- AlicenseAqualityCmaintenancePersistent memory for AI coding agents. Store coding standards, architecture decisions, and project context across sessions with AES-256 encryption.81MIT
- AlicenseNot gradedqualityDmaintenancePersistent decision memory and contradiction detection for AI coding agents. Enforces architectural consistency across sessions — the agent cannot code until it loads prior decisions. Human resolves conflicts on a dashboard or in chat.1MIT
- AlicenseNot gradedqualityCmaintenanceProject memory and scoping engine for AI coding agents. It gives any agent persistent project state, bounded work packages, and cross-session continuity.6MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/brainOS-HQ/brain-os'
If you have feedback or need assistance with the MCP directory API, please join our Discord server