Skip to main content
Glama

Brain OS

brainos-hq.com

你的 AI 记得对话。它仍然会忘记项目状态。

Brain OS 为智能体提供运营状态:跨会话存续的决策、计划、阻塞项和优先级。

这是什么?

AI 智能体在单个会话内很强大,但长期工作所涉及的状态远多于任何一次聊天所能承载:你决定了什么、什么被阻塞了、什么正在进行中、什么不应被重新打开。Brain OS 为智能体提供的是运营状态,而非对话日志:

  • 实体(Entities) — 以状态、势头、阻塞项和下一步行动跟踪项目、交易、计划

  • 决策(Decisions) — 记录做了什么决定、为什么、拒绝了哪些备选方案,以及何时重新审视

  • 模式(Patterns) — 检测反复出现的阻塞项、过期工作、回避信号和主题趋同

  • 焦点(Focus) — 基于紧迫性、势头、杠杆效应和过期程度,对要处理的工作进行优先级排序

  • 语义召回(Semantic recall) — 按含义而非仅按 ID 搜索记忆

Brain OS 是一个 MCP 服务器,可与任何兼容 MCP 的客户端配合使用:Claude Code、Cursor、Zed、GitHub Copilot、OpenAI Codex、Windsurf,或任何支持该协议的智能体。

Related MCP server: usecortex-mcp

实际使用效果

在智能体行动之前,它可以检查拟议的操作是否与已有决策冲突:

> decision_check({ proposal: "switch to Postgres for the new service" })

{
  "verdict": "conflict",
  "conflicting_decision": {
    "id": "dec_2026_03_14_db_choice",
    "decision": "Use SQLite for all local-first projects",
    "reason": "Lower ops burden, no infra to run, fits single-user scope",
    "rejected_alternatives": ["Postgres", "DuckDB"],
    "logged_at": "2026-03-14"
  },
  "guidance": "Re-litigating a settled choice. Surface the prior reasoning to the user before proceeding."
}

这就是切入点:带强制力的结构化状态,让智能体不再重新打开你已经回答过的问题。

快速开始

需要 Node.js 20 或更高版本。

# In your project
npx brain-os init

这会做三件事:

  1. 创建 .brain/ 目录,存放你的实体、决策和模式存储。

  2. 将斜杠命令安装到 .claude/commands/,这样你就可以直接在 Claude Code 中运行 /brain/brain:focus/brain:decide 等命令。同时会安装简洁的裸别名(/focus/decide 等)。

  3. 写入智能体指令指针文件,使任何兼容 MCP 的客户端行为一致:AGENTS.md(规范、跨工具)以及面向 Claude Code(CLAUDE.md)、GitHub Copilot(.github/copilot-instructions.md)、Cursor(.cursor/rules/brain-os.mdc)、Zed(.zed/rules.md)和 Windsurf(.windsurfrules)的轻量指针文件。

标志:

  • npx brain-os init --minimal — 仅安装 AGENTS.md + CLAUDE.md,跳过其他客户端指针文件(干净仓库模式)

  • npx brain-os init --no-commands — 跳过斜杠命令(仅 MCP 服务器)

  • npx brain-os init --no-agent-instructions — 跳过所有智能体指令指针文件

连接 Claude Code

claude mcp add brain-os -- npx brain-os serve

连接 Cursor / 其他 MCP 客户端

添加到你的 MCP 配置中:

{
  "brain-os": {
    "command": "npx",
    "args": ["-y", "brain-os", "serve"]
  }
}

配置语义搜索(可选)

semantic_recall 工具需要嵌入提供方。其他所有工具(entity_updatedecision_logplan_* 等)无需嵌入提供方即可工作。

Brain OS 默认不安装嵌入 SDK。这保持了核心安装的精简,并避免为不需要语义搜索的用户引入原生 ONNX/Sharp 依赖。在 brain-os 旁边安装可选的 OpenAI 提供方,然后将 BRAIN_EMBEDDINGS 添加到你的 MCP 服务器环境变量中:

npm install brain-os openai

然后在你的 MCP 服务器环境中配置提供方:

{
  "brain-os": {
    "command": "npx",
    "args": ["-y", "brain-os", "serve"],
    "env": {
      "BRAIN_EMBEDDINGS": "openai",
      "OPENAI_API_KEY": "${OPENAI_API_KEY}"
    }
  }
}

模式

作用

设置

local

暂时不可用,因为原提供方带有未解决的高严重性传递性安全公告。

在经审计的本地后端发布之前,请使用关键词召回或 OpenAI 提供方。

openai

通过 OpenAI API 使用 text-embedding-3-small。比本地模式更快。成本约为每百万 token $0.02。

安装 openai,设置 BRAIN_EMBEDDINGS=openai,然后从你的 shell 环境中引用 OPENAI_API_KEY

如果 BRAIN_EMBEDDINGS 未设置、OpenAI 提供方缺失,或请求了本地模式,semantic_recall 会返回明确的设置错误。不会发生静默的提供方安装、模型下载或 API 调用。核心工具继续正常工作。

切勿将原始的 sk-... 密钥粘贴到你的 MCP 配置中。 ~/.claude.json 及类似的 MCP 配置文件是明文存储的,容易在屏幕上或备份中泄露。相反,在 shell 中导出一次密钥,然后从 MCP 进程环境中引用它。

工具

工具

描述

entity_read

读取一个或所有被跟踪实体的运营状态

entity_update

更新实体状态 — 状态、势头、阻塞项、下一步行动

decision_log

记录带有推理过程和备选方案的战略决策

decision_check

将拟议操作与有效决策进行比对 — 返回 clear/caution/conflict

decision_refresh

刷新已有决策:更新 review_date、追加证据、更改状态。仅限元数据 — 不修改决策内容。

decision_review

审查积压收件箱:将逾期决策分桶(仍然成立 / 已变更 / 归档 / 需要证据),并为每个决策推荐操作。只读 — 提出建议,由你确认。自动检测重复的桩决策。

context_resolve

从显式提及 / 别名 / 文件 / 词汇信号中解析当前工作属于哪个实体。确定性且带置信度评分 — 路由已知上下文,绝不猜测意图。

focus_get

获取关于该做什么的优先级推荐

project_evidence_scan

对仓库原生运行状态(STATE.md、FLAGS、HANDOFF、ROADMAP/PLAN/TODO、git 活动、脏文件)进行只读扫描,以发现人工门禁、下一步行动和禁止触碰项 — 将焦点建立在仓库现实之上。

pattern_detect

分析所有实体中的模式

memory_check

审计记忆质量 — 标记过期数据、矛盾、噪音

memory_commit

会话结束提交 — 保存所有状态变更

semantic_recall

使用自然语言按含义搜索记忆

audit_log

读取完整的变更历史 — 什么变了、何时、由谁

wrap_check

检测自上次 wrap 以来是否积累了有意义的状态变更

wrap_auto

非交互式安全网 wrap:应用低风险字段,并将高风险变更暂存以供审查

plan_set

为实体设置有序计划 — 第 1 步成为活动的 next_move

plan_advance

完成或跳过一步(需要证据/理由)— 自动提升下一步

plan_add

向已有计划添加步骤

plan_read

查看计划进度和当前步骤

risk_assess

在执行前对风险操作进行分类,包括公开发布和破坏性操作风险

action_guard

在继续之前,将内置的防护模板应用于常见的高风险操作

斜杠命令

brain-os init 会将斜杠命令安装到 .claude/commands/,使智能体拥有处理运营状态的清晰词汇表。每个命令以两种形式安装:/brain:*(规范、文档化形式)和裸别名(/decide/focus 等),供高级用户简洁使用。/brain 是命名空间根,只安装一次。

它还会安装:

  • BRAIN_OS_PROTOCOL.md 位于 .claude/brain-os/PROTOCOL.md(项目级)和 ~/.claude/brain-os/PROTOCOL.md(用户级)。该协议管理工具路由:当代理运行 Brain OS 斜杠命令时,它首先读取协议,然后调用 entity_read/plan_read/focus_get/等作为主要方式。Pulse 文件仅作为后备方案。

  • brain-os-mode 子代理 位于 .claude/agents/brain-os-mode.md。当主代理将 Brain OS 工作委托给子代理时(例如 Claude Code 的 Task 工具),它会在同一协议下运行——不存在子代理回退到通用文件搜索的风险。

  • 可选的路由守卫钩子 位于 templates/hooks/brain-os-routing-guard.py。这是一个可选加入的 PreToolUse 钩子,当存在 .brain/ 工作区时仍读取 pulse 文件会发出警告。安装说明由 brain-os init 打印。

命令

别名

功能

/brain

项目扫描器:所有实体的概览、新鲜度、决策、警报

/brain:focus

/focus

"我今天应该做什么,为什么?" 附有证据

/brain:decide

/decide

记录战略决策(记录前先进行冲突检查)

/brain:strategy

/strategy

战略思考伙伴:在动手构建之前先把决策想清楚

/brain:wrap

/wrap

会话收尾:更新实体状态、记录决策、检测势头转变

/brain:patterns

/patterns

跨实体检测模式:反复出现的阻碍、回避行为、主题

/brain:retro

/retro

每周或每月回顾:交付了什么、停滞了什么、隐藏了什么

/brain:graph

/graph

展示实体之间的连接方式、杠杆机会、共享决策

幂等安装

重新运行 init 是安全的且具备修复感知能力:现有的 Brain OS 命令会被保留,任何缺失的表单都会被安装。如果某个命令路径已被其他工具占用,该路径会被跳过并报告——你的文件永远不会被覆盖。你可以将 Brain OS 安装到已有 /decide/focus 命令的项目中,带命名空间的 /brain:* 表单仍然会正常落地。

工作原理

Brain OS 将所有内容以本地 JSON 文件的形式存储在 .brain/ 目录中:

.brain/
  entities/     — one file per tracked entity
  decisions/    — decision log
  patterns/     — detected patterns
  config.json   — workspace settings

无云端。无数据库。无账户。你的数据留在你自己的机器上。

为什么没有 UI?

界面就是代理本身。Brain OS 通过 MCP 工具调用进行读写——/brain/focus/decidedecision_check 等——由你使用的任何客户端(Claude Code、Cursor 等)内联呈现。没有需要保持打开的独立仪表盘,没有需要切换上下文的第二个标签页,也没有可能与底层文件产生漂移的 UI 状态。

这是一个设计选择,而不是缺失的功能。Brain OS 的状态与你的代码处于同一层级;代理已经在那里,已经在对话中,已经是询问"现在优先级是什么?"的正确界面。添加一个人工仪表盘会把注意力分散到两个界面上,而它们展示的是同一份数据。

如果你想要一目了然的可视化视图,.brain/ 就是纯 JSON——你可以用任何方式渲染它。公共 MCP 服务器在设计上保持代理原生。

团队与同步

Brain OS 目前在设计上是单用户。但由于 .brain/ 只是本地 JSON 文件,团队可以通过任何同步文件系统共享大脑——无需更改产品:

方案

优点

缺点

Git — 将 .brain/ 提交到仓库

差异/合并工具、版本历史、有意的同步节点

手动 git pull;同时编辑时会产生合并冲突

Dropbox / Drive 共享文件夹

接近实时,无需手动步骤

并发写入可能产生冲突文件;embeddings.json 频繁重写

NFS / SMB / S3 挂载

真正的实时

需要基础设施配置

这之所以无需内置同步就能工作,是因为每次 Brain OS 工具调用都会从磁盘重新读取——没有需要失效的内存缓存。无论你的文件系统同步了什么,下一次工具调用都会看到。跨工具同样适用:周一在 Claude Code 中记录决策,周二打开 Cursor——同一个大脑,两个代理都能看到。

具有正确合并语义的原生加密团队同步已在路线图上。今天的本地优先基础正是让这种联邦化成为增量改进而非事后补救的原因。

自动加载的状态

当 MCP 客户端连接时,Brain OS 会通过 brain://status 资源暴露一个运行概览——活跃实体、警报、最高优先级和最近的决策。代理以上下文开始每次会话,而不是失忆。

测试

Brain OS 附带一套冒烟测试套件,位于 tests/smoke.mjs,已接入 npm test,并在每次推送时由 .github/workflows/audit.yml 运行。本地运行:

npm test

当前覆盖率(回归 + 正常路径):

  • decision_log — 类型冲突不取代、显式 supersedes 生效、跨实体取代被拒绝

  • decision_check — 仅关键字标志在无嵌入时保持警告(不会误报 STOP)、非对称语义比较(被拒绝与已选方面)

  • decision_refresh — 当状态从 superseded 转换出去时清除悬空的 superseded_by

  • plan_advance — 当已存在活跃步骤时不会过度提升

  • entity_update — 应用差异并记录变更、创建缺失实体、停用时需要 mode_reason、仅状态更新可应用、受保护的排名跳过可见

  • semantic_recall — 当 BRAIN_EMBEDDINGS 未设置时抛出 EmbeddingsNotConfiguredError(而非通用 Error)

  • 存储解析 — 在无存储的 cwd 中安全失败关闭,而不是静默创建空的 .brain/

已知缺口(尚无直接覆盖):focus_get 评分、pattern_detect 启发式、memory_*plan_set/add/read 以及 brain://status 资源。扩展测试套件已在路线图上。

如果你遇到 bug,请附上工具、输入和输出提交 issue——这是最快得到修复的途径。

社区

许可证

MIT

Available Tools

22 tools
action_guardA
Read-only

Apply the Brain OS policy table to a risk assessment. Takes the output of risk_assess plus the concrete action type and returns a policy decision: allow (proceed), ask (stop and get explicit user confirmation), or block (do not proceed). Pure TypeScript — no LLM call. Policies in order: private_to_public → block; critical risk → block; force-push → ask; npm publish → ask; security boundary → ask; irreversible → ask; high risk → ask; hard-to-reverse external → ask; medium + requires_confirmation → ask; else → allow. Always audit what was decided and why.

ParametersJSON Schema
NameRequiredDescriptionDefault
entity_idNoBrain OS entity this action is associated with.
assessmentYesThe full output of risk_assess.
action_typeYesThe concrete action being guarded, e.g. 'npm publish', 'git push origin main', 'force push', 'write ROADMAP.md'.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnlyHint annotation, the description discloses that the tool is 'Pure TypeScript — no LLM call,' lists the exact policy decision order, and explains the three possible outcomes. The 'Always audit what was decided and why' note adds behavioral context about expected follow-through, significantly enriching the annotation-only safety profile.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with purpose, then efficiently enumerates the entire policy decision table in a compact colon-separated list. Every sentence contributes essential information—purpose, inputs, computational nature, and policy order—with no filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the core decision logic, output values, and policy ordering, sufficient for an agent to invoke the tool. However, it does not specify the exact return JSON shape (e.g., fields beyond decision/reason), and the 'Always audit' statement is ambiguous as to whether the tool itself logs or the agent must do so. Given no output schema, slightly more explicit return-field documentation would make this fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 100% schema description coverage, the schema already documents the parameters. The description adds meaning by clarifying that assessment must be the full output of risk_assess and by giving concrete examples for action_type ('npm publish', 'git push origin main'). It does not mention entity_id, but the schema covers it, so the incremental value is solid but not maximal.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific action: 'Apply the Brain OS policy table to a risk assessment.' It clearly names the resource (policy table), the input (risk assessment), and the output (allow/ask/block decision). This distinguishes it from sibling risk_assess, which produces the assessment, and decision_check/review tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states it 'Takes the output of risk_assess plus the concrete action type,' establishing a clear pipeline context and when to use it. It does not explicitly name alternatives or when-not-to-use cases, but the dependency on risk_assess and the detailed policy ordering provide clear usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

audit_logA
Read-only

Read the audit trail of all memory mutations. Use this — not semantic_recall — for recency questions: 'what's the latest update?', 'what changed recently?', 'what was the last thing written?', 'show me the most recent entry.' Pass last_n=1 for the single most recent mutation. semantic_recall is for topic-based search; audit_log is for time-ordered history, integrity checks, and debugging unexpected state.

ParametersJSON Schema
NameRequiredDescriptionDefault
toolNoFilter by tool name (entity_update, decision_log, memory_commit, plan_update)
last_nNoNumber of recent entries to return (default 20)
entity_idNoFilter by entity ID

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With readOnlyHint already present, the description adds useful context: the tool returns time-ordered history, covers all memory mutations, and serves integrity/debugging purposes. It does not contradict the annotation, but it omits details like ordering direction (e.g., newest first) and the exact shape of returned entries, so it is not fully transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the core purpose, then provides usage guidance and an explicit contrast with a sibling tool. Every sentence earns its place with no redundancy or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only audit log with three optional filters, the description covers purpose, usage scenarios, and differentiation from semantic_recall. It doesn't specify the return format or ordering direction, but given the simplicity of the tool and the presence of readOnlyHint, these are minor gaps. The description is sufficiently complete for an agent to select and invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already documents all three parameters with descriptions (100% coverage). The description adds a concrete usage hint for last_n ('Pass last_n=1 for the single most recent mutation'), which goes beyond the schema's generic 'Number of recent entries to return (default 20)' and helps the agent apply the parameter correctly.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Read the audit trail of all memory mutations,' identifying the specific verb (read) and resource. It also explicitly contrasts with semantic_recall, distinguishing its scope and purpose from a key sibling tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit guidance to 'Use this — not semantic_recall —' for recency questions, provides concrete example queries, and closes with a clear differentiation: semantic_recall for topic search, audit_log for time-ordered history, integrity checks, and debugging. This fully addresses when to use the tool vs. alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

context_resolveA
Read-only

Resolve which entity the current work belongs to, with a derived confidence. Deterministic — matches explicit signals (passed entity, named mention, active mission, files touched) before weak ones (lexical, single-active); never guesses from cwd. Returns entity_id + confidence + ask_user. Call this BEFORE focus_get/decision_check when the target entity is not already known, then pass the returned entity_id into them. Confidence >= 0.80: proceed silently. 0.50-0.79: proceed but say 'I think this is X'. < 0.50 (ask_user true): ask one short question.

ParametersJSON Schema
NameRequiredDescriptionDefault
user_messageNoWhat the user said they want to do, verbatim. Strongest inferred signal.
files_touchedNoPaths being worked on. Matched by exact path segment against entity id/aliases — assists only, never overrides an explicit mention.
active_mission_idNoEntity id of the active approved mission/task, if any.
explicit_entity_idNoCaller-asserted entity id. Authoritative (confidence 1.0) when it matches a known entity.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the readOnlyHint annotation by disclosing deterministic behavior, matching signal priority order, the explicit prohibition on guessing from cwd, return fields, and confidence-based decision flow. No contradictions with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Dense but well-organized; every sentence contributes actionable detail—purpose, determinism, orchestration, and thresholds—with no filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Compensates for the lack of an output schema by describing return fields, confidence thresholds, and required follow-up actions. For a read-only resolution tool, it is fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers all parameters with rich descriptions (100% coverage), so baseline is 3. The description adds signal-priority semantics (explicit vs weak) but does not substantially extend per-parameter details beyond the schema. This extra context justifies a 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states it resolves which entity the current work belongs to with a derived confidence. It also distinguishes itself from sibling tools by referencing focus_get/decision_check and specifying when to call it.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly instructs to call before focus_get/decision_check when the target entity is not already known, and provides confidence thresholds for when to proceed silently, when to communicate uncertainty, and when to ask. This is concrete when-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

decision_checkA
Read-only

Check a proposed action against all active decisions. Returns 'clear', 'caution', or 'conflict', plus a review_triggered list. Call this BEFORE taking actions that might contradict prior decisions. If status is 'conflict', do NOT proceed without explicit user confirmation to revisit the decision. review_triggered is the opposite signal: the action matches an invalidate_if condition a decision named as a reason to reopen it — surface those decisions to the user for review rather than enforcing them. A decision can be both a conflict and a review trigger (the conflict it anticipated); when so, frame it as a decision review, not a blind violation.

ParametersJSON Schema
NameRequiredDescriptionDefault
entity_idNoCheck against decisions for a specific entity. Omit to check all.
proposed_actionYesWhat you're about to do — describe the action clearly

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, but the description goes far beyond that by explaining the return semantics, the meaning of 'review_triggered' as an opposite signal, and the nuanced case where a decision is both a conflict and a review trigger. This is rich behavioral disclosure that helps an agent act correctly on the result.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is logically structured: state purpose, list return values, provide usage directive, then explain the subtle review_triggered behavior. Every sentence earns its place; no filler or redundant content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description must explain return values and interpretation, which it does thoroughly. It covers the three statuses, the review_triggered list, how to handle conflicts, and the dual conflict/review-trigger case. This is complete for the tool's complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and both parameters ('entity_id' and 'proposed_action') already have clear descriptions in the schema. The tool description does not add parameter-specific detail beyond the schema, so it meets the baseline but does not exceed it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb+resource: 'Check a proposed action against all active decisions.' It clearly states the returned statuses ('clear', 'caution', 'conflict') and the 'review_triggered' list, which distinguishes it from sibling tools like action_guard or memory_check. The purpose is unambiguous and specific.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says 'Call this BEFORE taking actions that might contradict prior decisions' and provides a clear conditional: 'If status is conflict, do NOT proceed without explicit user confirmation.' This gives strong when-to-use guidance, though it does not name alternative tools or state when not to use it beyond the conflict case.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

decision_logA

Log a strategic decision so it persists across sessions. Every decision needs a reason, alternatives, and a proof action. Optionally capture the assumptions that make it true and the invalidate_if conditions that should reopen it — these turn a timestamped 'no' into a testable frame the system can reason about later.

ParametersJSON Schema
NameRequiredDescriptionDefault
whyYesThe real reason
typeNo
decisionYesWhat was decided
entity_idYesEntity this decision applies to
supersedesNoDecision IDs this new decision replaces (e.g. ['dec-007']). Only the IDs you explicitly pass will be marked superseded — there is no auto-deduction from type. Each target must belong to the same entity_id.
assumptionsNoThe premises that make this decision true — e.g. ['users want human approval before sending', 'model reliability not yet sufficient for autonomous send']. If these still hold, the decision likely still holds.
review_dateYesYYYY-MM-DD — when to revisit
alternativesNoOptions considered
proof_actionYesOne concrete, observable action that validates this decision — e.g. 'Run npm test and confirm all 41 tests pass'. Placeholders like 'Review in next session', 'TBD', or 'Revisit' are rejected.
invalidate_ifNoCondition-based review triggers ('what would make this false') — e.g. ['users show sustained trust in autonomous drafts', 'target workflow shifts from external email to internal triage']. Distinct from review_date (a time trigger): decision_check matches proposed actions against these to flag the decision for review rather than enforcing it blindly.
chosen_directionNo

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only indicate readOnlyHint=false and destructiveHint=false. The description adds useful behavioral context by explaining that logged decisions persist across sessions and that invalidate_if conditions turn a timestamped decision into a testable frame for future reasoning. This goes beyond the bare annotations without contradicting them.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise, with three sentences that front-load the core purpose and then elaborate on required and optional inputs. Every sentence contributes meaning, and the structure is efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description omits mention of several required fields like entity_id and decision, but the schema covers them. However, the inaccurate statement about alternatives being required is a significant gap that could mislead. The description does explain the purpose of assumptions and invalidate_if, but the misinformation lowers completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is high (82%), so baseline is 3. However, the description inaccurately states that 'alternatives' is needed when the schema marks it as optional (required array only includes entity_id, decision, why, proof_action, review_date). This misinformation actively misleads an agent about required parameters, subtracting value rather than adding it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb 'Log' and resource 'strategic decision', clearly indicating the tool records persistent decisions. It states the persistence aspect, which distinguishes it from siblings like decision_review and decision_check that likely read or analyze decisions.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context for use: logging strategic decisions for persistence across sessions. It also gives guidance on required elements ('reason, alternatives, and a proof action') and optional ones (assumptions, invalidate_if), though it does not explicitly name alternative tools or state when not to use this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

decision_refreshA

Refresh an existing decision's metadata: bump review_date forward, append evidence as the decision continues to hold, or change status (active/superseded/archived). Use INSTEAD of editing decisions.json directly. Does not mutate decision content — for content changes, log a new decision via decision_log.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNoNew status. Use 'superseded' only when a replacement decision exists — prefer logging the replacement via decision_log with its `supersedes` parameter instead. Transitioning away from 'superseded' automatically clears the dangling superseded_by pointer.
decision_idYesID of the decision to refresh (e.g. 'dec-002')
review_dateNoNew review date YYYY-MM-DD
add_evidenceNoEvidence note to append (e.g. 'shipped v1, onboarded first users'). Each call appends a dated entry, never overwrites.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations indicate this is a mutating tool (readOnlyHint=false) but not destructive (destructiveHint=false). The description goes beyond this by clarifying that content is not mutated, only metadata, and that adding evidence appends a dated entry without overwriting. It also discloses a side effect: transitioning away from 'superseded' automatically clears the dangling superseded_by pointer. This provides useful behavioral context beyond the annotations, though it does not cover all possible edge cases (e.g., invalid decision_id).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise and well-structured. It opens with a clear verb and resource, lists the three main actions, and then provides two critical usage notes in separate sentences. Every sentence earns its place, and there is no fluff or repetition of schema content that is already obvious. The length is appropriate for the tool's complexity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's moderate complexity (4 parameters, one required, no output schema), the description is mostly complete. It explains the core functions, the distinction from decision_log, and the special superseded status rule. However, it does not mention what the tool returns (e.g., success confirmation or updated decision object) or how errors are handled (e.g., nonexistent decision_id). Since there is no output schema, a brief note on the return value would have been helpful, but the tool remains usable with the information provided.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema describes all four parameters with 100% coverage, so the schema already provides the heavy lifting. The description reinforces the meaning of 'add_evidence' (append, never overwrites) but does not add substantial new meaning beyond the schema. The 'status' parameter's special handling is also documented in the schema, so the description's reference to it is redundant but consistent. As per the baseline rule for high schema coverage, a 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: refreshing metadata for an existing decision, listing specific actions (bump review_date, append evidence, change status). It distinguishes itself from related tools like decision_log by explicitly noting it does not mutate decision content, and for content changes, a new decision should be logged. The verb 'Refresh' plus resource 'decision metadata' is specific and unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit usage direction: 'Use INSTEAD of editing decisions.json directly' and 'for content changes, log a new decision via decision_log.' It also provides a conditional rule for the 'superseded' status, stating this should only be used when a replacement decision exists and advising to prefer decision_log with the 'supersedes' parameter. This is clear when-to-use and when-not-to-use guidance with specific alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

decision_reviewA
Read-only

Call this before making new decisions, at session end, or when the user asks if a decision is still valid or what's overdue. Review-debt inbox: buckets overdue decisions into still_true / changed / archive / needs_evidence with a recommended action for each. READ-ONLY — proposes and cites reasons but mutates nothing; confirm, then apply via decision_refresh / decision_log. Auto-detects duplicate stubs. When root_path is provided, matches each decision's invalidate_if conditions against repo scan output.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax decisions to surface (default 5).
entity_idNoScope to one entity. Omit to review all entities' overdue decisions.
root_pathNoAbsolute path to a project repo. When provided, runs project_evidence_scan and matches invalidate_if conditions against git log and state files. Matched decisions are moved to the 'changed' bucket with the triggering evidence cited.
include_parkedNoInclude decisions on parked/archived entities (default false).

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description reinforces readOnlyHint with explicit 'READ-ONLY' and explains it mutates nothing, proposes and cites reasons, and auto-detects duplicate stubs. It also describes conditional behavior with root_path, adding value beyond the annotation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with usage triggers, no fluff. Dense but organized, every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only review tool with no output schema, the description covers purpose, usage, safety, and conditional behavior. Missing output format is acceptable since no output schema exists and the description gives adequate context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Input schema covers all 4 parameters with detailed descriptions (100% coverage). The description doesn't add significant new parameter semantics beyond what schema provides; it references root_path but schema already explains it in detail.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: a review-debt inbox that buckets overdue decisions into still_true / changed / archive / needs_evidence with recommended actions. It uses a specific verb ('Call this...') and distinguishes from siblings by focusing on review/analysis rather than mutation or checking.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to call it ('before making new decisions, at session end, or when the user asks if a decision is still valid or what's overdue') and directs follow-up actions via decision_refresh / decision_log, providing clear workflow context and alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

entity_readA
Read-only

Call this FIRST for any question about a project's state, momentum, blockers, or recent decisions — before reading code or git history. Returns the operational state one or all tracked entities: status, momentum, blockers, decisions, staleness, and next actions. Do not grep files to answer state questions when this tool is available.

ParametersJSON Schema
NameRequiredDescriptionDefault
entity_idNoEntity ID to read. Omit for all entities.

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare readOnlyHint=true, and the description adds the returned data shape (status, momentum, blockers, etc.) and the ability to fetch all entities. This goes beyond the annotation but doesn't cover potential edge cases like staleness or error behavior, but for a read tool the bar is lower.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three focused sentences: usage instruction, core functionality, and an exclusion. Front-loaded and every sentence earns its place with no redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is simple (one optional param, no output schema). The description fully covers when to use it, what it returns, and how to invoke it (first, before grep), making it complete within its simplicity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single parameter entity_id is fully described in the schema ('Entity ID to read. Omit for all entities.'). The description repeats this concept ('one or all tracked entities') without adding new syntax or format details, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the tool returns operational state for entities, with specific fields (status, momentum, blockers, etc.). The verb 'Returns' and resource scope ('one or all tracked entities') distinguish it from update tools and code-reading alternatives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly instructs to call this tool FIRST for state questions, before reading code or git history. Provides an exclusion ('Do not grep files') and implicit alternative (code/git reading), making usage unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

entity_updateA

Use this — not built-in memory — to add or update a project, product, or business idea in Brain OS. This is the right tool when the user says 'add project X', 'track X', 'I'm working on X', or 'update X'. Creates the entity if it doesn't exist. Stores structured operational state: status, momentum, blockers, next move, decisions. Use after work is done, a decision is made, a blocker changes, or momentum shifts.

ParametersJSON Schema
NameRequiredDescriptionDefault
updatesYesFields to update
entity_idYesEntity to update
context_hintNoPass the user's original message here. Brain OS will verify this message actually refers to entity_id before writing. If it detects the message is about a different project, it rejects the write and tells you which entity_id to use instead. Prevents cross-project contamination.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations indicate readOnlyHint=false, so the write nature is known. The description adds valuable behavioral context: it upserts ('Creates the entity if it doesn't exist'), stores structured operational state, and explains the context_hint rejection mechanism that prevents cross-project contamination. This goes beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with 'Use this' and consists of five sentences, each earning its place: purpose, trigger phrases, upsert behavior, stored fields, and timing. No redundancy or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (3 params, nested updates object, no output schema), the description covers purpose, triggers, timing, and an important safety behavior (context_hint validation). It does not describe return values or error handling in general, but the core usage context is complete enough for an agent to select and invoke the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, with each parameter already documented. The description lists field categories (status, momentum, blockers, next move, decisions) which loosely maps to schema properties but adds no new parameter-level meaning beyond what the schema provides. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's verb ('add or update') and resource ('project, product, or business idea in Brain OS'), and distinguishes it from built-in memory. It also provides trigger phrases ('add project X', 'track X') and notes the upsert behavior, making the purpose unambiguous and differentiated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit when-to-use triggers: user phrases and timing ('after work is done, a decision is made, a blocker changes, or momentum shifts'). It mentions 'not built-in memory' as an alternative but does not explicitly exclude other sibling tools like entity_read or plan_add, so it falls short of full when/where-not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

focus_getA
Read-only

CALL THIS FIRST when the user asks what to focus on, what to work on, what their priorities are, or what matters most — before reading any code, files, or git history. Brain OS holds decisions, blockers, and momentum signals that cannot be inferred from the codebase. Returns prioritized recommendations based on urgency, momentum, leverage, staleness, and dependencies. follow_through_alerts surfaces active entities that stated a next_move but haven't logged any update in 7+ days — treat these as first-class accountability prompts, same tier as blockers. Pass entity_id to scope focus to a single project.

ParametersJSON Schema
NameRequiredDescriptionDefault
entity_idNoScope focus to a single entity. When set, returns only that entity. Omit for global cross-project priorities.
constraintsNoOptional: 'only 2 hours', 'low energy', etc.
max_resultsNoMax priorities to return (default 3)
suppress_default_guidanceNoSet true to omit the built-in 'Do not reorganize…' / 'Do not start new ideas…' lines from do_not_do. Default false. Env override: BRAIN_FOCUS_OMIT_DEFAULT_GUIDANCE=1.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already declares the tool is read-only. The description adds valuable context about the Brain OS data source, the follow_through_alerts behavior (entities with stale next_move), and how they should be treated as first-class prompts. This goes beyond what the annotation alone conveys.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is efficiently front-loaded with the critical 'CALL THIS FIRST' instruction, followed by concise but rich context about data source, recommendation criteria, and alert handling. Every sentence earns its place with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only tool with no output schema, the description covers the core purpose, trigger conditions, and a notable behavior (follow_through_alerts). It does not detail the exact response format, but given the full parameter schema and clear output description ('prioritized recommendations'), this is adequate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description's mention of entity_id ('Pass entity_id to scope focus to a single project') slightly reinforces the schema but adds little new meaning. Other parameters (constraints, max_results, suppress_default_guidance) are not elaborated beyond schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool returns prioritized recommendations based on specific criteria (urgency, momentum, leverage, staleness, dependencies) and distinguishes it from reading code/files/git history. It also explicitly positions it as the first tool to call for focus-related queries.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit trigger phrases ('asks what to focus on, what to work on...') and clear precedence guidance ('CALL THIS FIRST... before reading any code, files, or git history'). It also explains when to pass entity_id, making usage unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

memory_checkA
Read-only

Assess quality and reliability of current memory state. Flags stale data, contradictions, overdue decision reviews, unconfirmed patterns, fake-active entities, and noise. Returns signal classification (strong/weak/noise/dangerous) and recommended cleanup actions. Call this before acting on memory to know what to trust.

ParametersJSON Schema
NameRequiredDescriptionDefault
entity_idNoCheck one entity, or omit for full memory audit

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description details what the tool flags (stale data, contradictions, overdue reviews, etc.) and what it returns (classification + recommended actions), adding meaningful behavioral context beyond the readOnlyHint annotation. It's consistent with read-only behavior and gives the agent a clear picture of what to expect.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, front-loaded with the core purpose, then enumerating flags and returned values, ending with actionable usage guidance. Every sentence contributes information with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description compensates by naming the return categories (strong/weak/noise/dangerous) and cleanup actions. The optional parameter scope is covered by the schema. The tool is relatively simple, and the context is sufficiently complete, though more detail on cleanup actions could be added.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single parameter (entity_id) is fully documented in the schema with 'Check one entity, or omit for full memory audit', so schema coverage is 100%. The description doesn't add parameter-specific meaning beyond this, maintaining the baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Assess') with a clear resource ('quality and reliability of current memory state') and enumerates distinct outputs (signal classification, cleanup actions). It distinguishes itself from siblings by focusing on trustworthiness of memory rather than reads, writes, or decision checks.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The final sentence gives explicit guidance: 'Call this before acting on memory to know what to trust.' This provides a clear usage context, though it doesn't name alternatives or state when not to use the tool, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

memory_commitA
Destructive

End-of-session commit. Updates all touched entities, logs decisions, records patterns. Call before ending any work session.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisions_madeNo
session_summaryYesBrief summary of what happened
entities_touchedYesEntity IDs worked on
momentum_changesNo
patterns_noticedNo

TDQS

A3.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and readOnlyHint=false. The description adds context about updating all touched entities and logging/recording, but does not elaborate on side effects like whether updates are irreversible or how momentum_changes are applied. It does not contradict annotations, and the extra end-of-session framing is useful.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loads the core verb ('End-of-session commit'), and packs all key behaviors without padding. Every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a commit tool with 5 parameters and no output schema, the description covers the trigger and main effects but omits momentum_changes and does not explain the destructive implications beyond the annotation. It is adequate but missing important operational detail.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 40%, but the description partially compensates by mapping 'logs decisions' to decisions_made and 'records patterns' to patterns_noticed. It does not mention momentum_changes, which remains undocumented both in schema and description, leaving a gap for that parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with 'End-of-session commit', a specific verb+resource pair, and enumerates concrete actions: 'Updates all touched entities, logs decisions, records patterns'. This clearly distinguishes it from sibling tools like decision_log, entity_update, and pattern_detect by positioning it as a consolidated commit operation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly instructs 'Call before ending any work session', providing a clear trigger context. It does not mention alternatives or exclusions, but the usage condition is direct and actionable.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

pattern_detectA
Read-only

Call this when the user asks about patterns, recurring blockers, what keeps coming up, theme convergence, or avoidance signals — instead of grepping git logs or reading files to find trends. Analyzes patterns across all tracked entities and returns detected signals with entity context.

ParametersJSON Schema
NameRequiredDescriptionDefault
scopeNo'recent' for 7 days, 'deep' for full, or a specific theme

TDQS

A4.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the safety profile is covered. The description adds that the tool analyzes 'all tracked entities' and returns 'detected signals with entity context,' which is useful but does not detail output format, pagination, or potential performance implications. This is similar to the reference example where annotations carry the main burden.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the most important usage trigger, and ends with a concise statement of behavior and output. Every word earns its place with no redundancy or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the low complexity (one optional parameter, no output schema), the description is complete enough for an agent to select and invoke the tool. It covers when to use, what it does, and what it returns. The schema covers parameter details, and annotations cover safety.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema provides 100% coverage for the single 'scope' parameter, including its options ('recent', 'deep', or a specific theme). The description does not add further parameter-specific meaning, which is acceptable given the high schema coverage. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: it analyzes patterns across tracked entities and returns detected signals with entity context. It also explicitly lists trigger conditions (patterns, recurring blockers, theme convergence, avoidance signals), distinguishing it from generic file grepping or log reading.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description opens with explicit 'Call this when...' guidance listing specific user intents that should trigger this tool, and explicitly says to use it 'instead of grepping git logs or reading files to find trends.' This clearly communicates when to use it versus the alternative manual approaches.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

plan_addA

Add steps to an existing plan. Use when new work is discovered mid-plan. Steps can be added at the end or immediately after the current active step.

ParametersJSON Schema
NameRequiredDescriptionDefault
stepsYesSteps to add
positionNoWhere to insert: 'end' (default) or 'after_current'
entity_idYesEntity to add steps to

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=false and destructiveHint=false, consistent with the mutation described. The description adds value by explaining insertion positions ('at the end or immediately after the current active step'), offering behavioral detail beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences deliver purpose, usage context, and positional behavior without redundancy. Every phrase earns its place, and the structure is front-loaded with the core action.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With simple 3-parameter schema, helpful annotations, and clear usage context, the description is nearly complete. It doesn't mention return values or side effects, but for a low-complexity mutation tool with strong schema support, this is a minor gap rather than a critical omission.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds meaning beyond the schema by clarifying the 'after_current' position means 'immediately after the current active step', which is not fully explicit in the schema's enum description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's action: 'Add steps to an existing plan' with the specific resource (plan) and target (steps). It also distinguishes from siblings by noting mid-plan usage and positioning options, which differentiates it from plan_set and plan_advance.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides a clear usage context: 'Use when new work is discovered mid-plan.' It implies a specific scenario but does not explicitly name alternatives or say when not to use, though the sibling list and context make the distinction intuitive.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

plan_advanceA

Complete or skip the current plan step. Requires evidence (for complete) or reason (for skip). Automatically promotes the next pending step to active and updates next_move. Enforces continuity — you cannot skip without explaining why.

ParametersJSON Schema
NameRequiredDescriptionDefault
actionYesComplete (with evidence) or skip (with reason)
reasonNoRequired for skip — why this step is being skipped
step_idYesStep ID to complete or skip (e.g. 'step-001')
evidenceNoRequired for complete — what proved this step is done
entity_idYesEntity whose plan to advance

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses multiple behavioral traits beyond the annotations, including the mandatory evidence/reason requirements, automatic promotion of the next pending step, updates to next_move, and the 'cannot skip without reason' constraint. This gives a comprehensive view of the tool's side effects and validation rules.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description consists of two concise, front-loaded sentences. Every sentence contributes meaningful information: one states the core action and prerequisites, the other explains the automatic behavior and enforcement. There is no redundancy or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation tool with no output schema, this description sufficiently covers purpose, conditions, and side effects. It handles the main use cases and explains the state transition. Minor gaps exist, such as behavior when there is no pending next step, but these are not critical for primary usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds value by clarifying the conditional dependency between action and evidence/reason, which is not fully captured in the schema. This helps the agent understand which fields are required in which scenarios.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Complete or skip the current plan step.' This specificity distinguishes it from sibling tools like plan_add (which adds steps) and plan_read (which reads plans). The verb-resource pairing is precise.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context for when to use 'complete' vs 'skip' by requiring evidence or reason respectively. It also explains the automatic promotion of the next step and the continuity enforcement. While it doesn't explicitly name alternative tools, the guidance is sufficient to infer appropriate usage.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

plan_readA
Read-only

Read the current plan for an entity. Shows all steps, their status, the active step, and overall progress.

ParametersJSON Schema
NameRequiredDescriptionDefault
entity_idYesEntity to read the plan for

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint: true, so the safety profile is known. The description adds valuable behavioral detail about return content (all steps, status, active step, overall progress), which is especially important since no output schema exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences with no filler. The core action and its scope are front-loaded in the first sentence, and the second sentence enumerates the output contents efficiently.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only, single-parameter tool with no output schema, the description fully covers what the tool does and what it returns. There are no missing prerequisites or side effects to disclose given the readOnly hint.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single parameter entity_id is fully described in the schema with a clear description. The tool description does not add extra semantics, but none are needed for such an obvious parameter. Schema coverage is 100%, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description uses a specific verb 'Read' with resource 'current plan for an entity', and lists what is shown (steps, status, active step, progress). This clearly distinguishes it from sibling plan mutation tools like plan_set or plan_advance.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The read-only purpose is clearly stated, making it obvious when to use this tool. It does not explicitly name alternatives or exclusions, but the context is unambiguous enough for an agent to select it for reading a plan.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

plan_setA
Destructive

Set an ordered plan for an entity. Replaces any existing plan. Step 1 becomes the active next_move. Use when committing to a sequence of work — not for brainstorming. Each step should be a concrete, completable action.

ParametersJSON Schema
NameRequiredDescriptionDefault
stepsYesOrdered list of concrete steps. First step becomes active immediately.
entity_idYesEntity to set the plan for

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses key behavioral traits beyond annotations: 'Replaces any existing plan' (destructive behavior) and 'Step 1 becomes the active next_move' (activation semantics). These add value above the destructiveHint annotation, which only flags destructiveness generically.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four short sentences, each carrying essential information: purpose, replacement behavior, activation rule, and usage guideline. No fluff or repetition. Exceptionally well-structured for quick agent comprehension.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the simplicity of the tool (2 parameters, no output schema), the description covers all necessary aspects: what it does, when to use it, how it affects existing state, and what constitutes valid input. The addition of a quality guideline for steps (concrete, completable) makes it fully self-contained for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and already describes steps as 'Ordered list of concrete steps. First step becomes active immediately.' The description adds 'Each step should be a concrete, completable action,' which is a slight refinement but largely redundant with the schema. No significant new meaning is provided.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool 'Set an ordered plan for an entity' and explicitly notes it 'Replaces any existing plan', which distinguishes it from sibling tools like plan_add. The verb+resource+scope is specific and actionable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit usage context: 'Use when committing to a sequence of work — not for brainstorming.' This gives a clear when-to-use signal and an exclusion. It does not name alternative tools explicitly, but the context implies this is for finalizing a plan rather than exploring ideas.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

project_evidence_scanA
Read-only

Read-only scan of a repo's native operating state (STATE.md, FLAGS*, HANDOFF*, ROADMAP.md, PLAN*.md, TODO.md, AGENTS.md + recent git activity / dirty files). Returns evidence — human gates, blockers, next moves, do-not-touch, safe parallel work — surfaced as exact lines. Call AFTER context_resolve and BEFORE building a focus answer. Mutates nothing and does no inference: it returns ALL candidate signals; deciding the focus is the agent's job. This is NOT context_resolve — do not use it to pick which project you're in.

ParametersJSON Schema
NameRequiredDescriptionDefault
entity_idNoOptional Brain OS entity this repo maps to (echoed back; does not affect the scan).
root_pathYesAbsolute path to the repo/project root to scan.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnlyHint annotation, the description adds that it 'Mutates nothing and does no inference: it returns ALL candidate signals,' clarifying the tool's non-destructive, non-interpretive behavior. It also details the output format ('surfaced as exact lines'), giving a clear behavioral contract.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise yet information-dense. Each sentence earns its place: purpose, output content, usage timing, non-mutation guarantee, and sibling distinction. It is front-loaded with the core function and avoids redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having no output schema, the description explains what the tool returns (evidence categories, exact lines) and the scope of files scanned. Combined with usage timing and behavioral guarantees, it fully equips an agent to select and invoke the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds no parameter-specific guidance beyond what the schema already states; it merely implies that root_path is the target repo. Since the schema fully documents both parameters, the description needs no further elaboration.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('scan') and resource ('a repo's native operating state'), enumerates exact file patterns, and explicitly distinguishes itself from sibling context_resolve by stating 'This is NOT context_resolve.' This makes the tool's purpose unmistakable and separate from alternatives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit sequencing: 'Call AFTER context_resolve and BEFORE building a focus answer,' and an explicit exclusion: 'do not use it to pick which project you're in.' This gives clear when-to-use and when-not-to-use guidance, superior to most tool descriptions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

risk_assessA
Read-only

Assess the risk of a proposed action before executing it. Runs a pre-filter (returns low/skipped immediately for clearly safe actions) then applies signal detection for: private→public boundary crossings, destructive operations, release/publish actions, external communication, and security-sensitive file access. Call this BEFORE any action in the trigger set: publish, push, force-push, git tag, deploy, delete tracked files, external API writes, billing, roadmap/private state movement. Returns risk_level (low/medium/high/critical), boundary_crossed, reversibility, and risk_reasons. Pass the result to action_guard to get a policy decision (allow/ask/block).

ParametersJSON Schema
NameRequiredDescriptionDefault
diffNoGit diff or content diff of the proposed change.
entity_idNoBrain OS entity this action is associated with.
git_statusNoOutput of git status, if relevant.
package_infoNopackage.json metadata for release actions.
files_touchedNoFile paths the action will read or write.
proposed_actionYesThe action about to be taken — describe it clearly, e.g. 'npm publish brain-os@0.9.0' or 'write ROADMAP.md to public repo'.
target_visibilityNoWhether the target destination is public-facing. Pass 'public' when writing to a public repo or publishing to a registry.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses behavior beyond the readOnlyHint annotation: it mentions a pre-filter that returns low/skipped for safe actions, then applies signal detection across five risk categories, and lists the return fields (risk_level, boundary_crossed, reversibility, risk_reasons). This provides a clear picture of the tool's internal processing.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is four sentences, each earning its place: purpose, process, usage trigger, and output/handoff. It is front-loaded with the core purpose and contains no redundant text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 7 parameters, a nested object, and no output schema, the description covers purpose, usage triggers, process, return fields, and the next step to action_guard. It does not explicitly connect parameters like package_info or diff to the detection logic, but the schema covers those details.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description references 'proposed action' and target categories, but does not add parameter-specific details beyond what the schema already provides (e.g., how diff or package_info are used).

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Assess the risk of a proposed action before executing it' with a specific verb and resource. It goes on to list the detection categories and the explicit trigger set, distinguishing it from sibling tools like action_guard.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides explicit when-to-use guidance: 'Call this BEFORE any action in the trigger set: publish, push, force-push, git tag, deploy...' and instructs the next step: 'Pass the result to action_guard to get a policy decision.' This clearly positions the tool relative to alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

semantic_recallA
Read-only

Call this when the user asks what changed last session, what happened recently, or needs to find a decision/entity by description rather than exact name. Searches memory by meaning using semantic similarity. Use BEFORE reading git log or commit history for session-level context questions.

ParametersJSON Schema
NameRequiredDescriptionDefault
queryYesNatural language query — e.g. 'that decision about pricing' or 'projects related to memory systems'
max_resultsNoMax results to return (default 5)
source_kindNoFilter by type. Omit to search everything.

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the read-only safety is covered. The description adds meaningful behavioral context beyond that: it explains the semantic search mechanism and the fact that it matches by description rather than exact name. This goes beyond the minimal annotation baseline, though it doesn't disclose result format or failure behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with trigger conditions, followed by the core functionality and a usage directive. Every sentence earns its place with no redundancy or fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only search tool with well-described parameters and no output schema, the description provides complete selection and invocation context: it tells the agent when to use it, what it does, and how to order it relative to git log. No critical gaps for an agent to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%: query has an example, max_results and source_kind have clear descriptions. The tool description does not add parameter-specific meaning, so the baseline of 3 is appropriate per the rubric.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: 'Searches memory by meaning using semantic similarity.' It also specifies concrete use cases (what changed last session, recent events, finding by description) and distinguishes from exact-name search and git log, differentiating it from sibling tools like entity_read.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit when-to-use triggers ('when the user asks what changed last session...') and a strong guideline: 'Use BEFORE reading git log or commit history for session-level context questions.' This clearly guides the agent on tool selection and ordering relative to alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

wrap_autoA

Tier 2 of auto-wrap: persist a session wrap WITHOUT interactive review, when context is about to be lost (compaction, session end) or the user declined to review. Use the normal interactive /wrap when the user is present and reviewing — only reach for this as a safety net. The agent supplies the synthesized wrap; this tool applies LOW-RISK fields (next_move, open_questions, evidence_of_progress) immediately and STAGES high-risk changes (status, mode, blocked, decisions) as an unconfirmed record for /start to surface and the user to confirm. Always logs a session_wrapped marker. Never put a status change or a decision in pending_review expecting it to take effect now — staged items are proposals, not writes.

ParametersJSON Schema
NameRequiredDescriptionDefault
summaryYesOne-line synthesized summary of what happened this session.
triggerNoWhat triggered it: precompact | sessionend | manual-no-review.
entity_idYesEntity being wrapped.
next_moveNoLOW-RISK, applied now — the concrete next action.
session_idNoHost session id, when known.
open_questionsNoLOW-RISK, merged now — unresolved threads.
pending_reviewNoHIGH-RISK — staged for review, NOT applied. Surfaced at next /start for confirm/edit/discard.
evidence_of_progressNoLOW-RISK, appended now — what actually shipped or moved.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only say readOnlyHint=false, so the description carries the full burden of behavioral disclosure. It discloses that low-risk fields are applied immediately, high-risk changes are staged as unconfirmed records, a session_wrapped marker is always logged, and staged items are proposals not writes. This is consistent with readOnlyHint=false.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four dense sentences, each earning its place: trigger/context, alternative, risk-tier behavior, logging, and a caution. The prose is front-loaded with 'Tier 2' and 'safety net' and contains no filler or redundant restatement.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For an 8-parameter, nested tool with only readOnlyHint=false and no output schema, this description covers purpose, trigger conditions, side-effect behavior, risk classification, and a critical caveat. It leaves no major gap in deciding whether and how to invoke the tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, and the description reinforces the low-risk/high-risk split already present in schema descriptions. It adds crucial meaning by warning that pending_review is never effective immediately, clarifying how to set those fields, while not significantly altering parameter semantics beyond that.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly frames wrap_auto as 'Tier 2 of auto-wrap' for persisting a session wrap without review, clearly naming the verb (persist, apply, stage) and resource (session wrap). It distinguishes itself from the interactive /wrap sibling by positioning it as a safety net, so an agent can tell what this tool uniquely does.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states when to use the tool ('context is about to be lost (compaction, session end) or the user declined to review') and explicitly says to use the normal interactive /wrap when the user is present and reviewing. This provides both inclusion and exclusion criteria, plus a clear warning against treating pending_review as immediately effective.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

wrap_checkA
Read-only

Check how much state-changing work has accumulated since the last wrap. Read-only — never mutates. Tier 1 of auto-wrap: call this when the user signals they are wrapping up or ending a session, or periodically during a long session, to decide whether to proactively offer a /wrap before context is lost to compaction or session end. Returns unwrapped_count, the projects touched, and recommend_wrap. When recommend_wrap is true, offer to wrap; do not auto-wrap silently from this tool.

ParametersJSON Schema
NameRequiredDescriptionDefault
thresholdNoUnwrapped-mutation count at/above which a wrap is recommended. Default 5.
session_idNoScope the check to one session's activity. Omit to check the whole audit tail.

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint: true, and the description reinforces this with 'never mutates.' It adds valuable behavioral context beyond the annotation, such as returning unwrapped_count and recommend_wrap, and instructing the agent to offer a wrap rather than act silently. Minor gap: no mention of error conditions or edge cases, but the core behavior is fully disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact (~75 words) with front-loaded purpose and no fluff. Every sentence contributes either usage timing, return values, or an explicit behavioral rule. It is structured logically: what it does, when to use it, what it returns, and how to act on the result.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having no output schema, the description fully documents return values (unwrapped_count, projects touched, recommend_wrap) and the recommended action. It also covers usage timing and the read-only nature. Given the tool's relative simplicity and strong annotations, the description is complete enough for an agent to select and invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, with both threshold and session_id having clear descriptions in the schema. The tool description itself does not add extra parameter meaning beyond the schema, but it hints at the threshold's purpose via 'recommend_wrap' logic. Baseline 3 is appropriate because the schema carries the full load.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description begins with a specific verb and resource: 'Check how much state-changing work has accumulated since the last wrap.' It clearly differentiates from the sibling tool 'wrap_auto' by positioning itself as the read-only check (Tier 1) that decides whether to offer a wrap, not perform it.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to call: 'when the user signals they are wrapping up or ending a session, or periodically during a long session.' It also provides a clear exclusion: 'do not auto-wrap silently from this tool,' and implies alternative behavior by mentioning the auto-wrap tier.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 22 tool updatesv0.1.0
    • First observedaction_guard
    • First observedaudit_log
    • First observedcontext_resolve
    • First observeddecision_check
    • First observeddecision_log
    • First observeddecision_refresh
    • First observeddecision_review
    • First observedentity_read
    • First observedentity_update
    • First observedfocus_get
    • First observedmemory_check
    • First observedmemory_commit
    • First observedpattern_detect
    • First observedplan_add
    • First observedplan_advance
    • First observedplan_read
    • First observedplan_set
    • First observedproject_evidence_scan
    • First observedrisk_assess
    • First observedsemantic_recall
    • First observedwrap_auto
    • First observedwrap_check

TDQS

A4.2/5.0
Disambiguation5/5

Every tool targets a distinct resource-action combination (e.g., entity_read vs entity_update, decision_log vs decision_check, plan_set vs plan_add). Overlapping areas such as semantic_recall vs audit_log and wrap_check vs wrap_auto are clearly differentiated by their descriptions.

Naming Consistency4/5

The majority of tools follow a consistent noun_verb pattern (plan_add, decision_check, entity_read). A few names like wrap_auto, semantic_recall, and audit_log deviate slightly from this pattern, but the overall convention remains predictable and readable.

Tool Count3/5

With 22 tools, the set is on the heavy side, falling within the 16-25 borderline range. While each tool serves a meaningful purpose, the number exceeds the ideal 3-15 range for a well-scoped server.

Completeness4/5

The surface covers the core domain well: entity CRUD (via entity_read/update), decision lifecycle (log, check, review, refresh), plan management (set, add, advance, read), risk assessment, and memory operations. Minor gaps like explicit entity deletion or plan step editing are workable through entity_update and plan_set, so there are no critical dead ends.

Maintenance

ActivityMaintained
ResponsivenessUnresponsive

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    D
    maintenance
    Enables persistent storage and retrieval of decisions, settings, and operational rules across chat sessions, maintaining context continuity and decision consistency for long-term development projects through structured memory management.
    -
  • A
    license
    Not graded
    quality
    C
    maintenance
    Project memory and scoping engine for AI coding agents. It gives any agent persistent project state, bounded work packages, and cross-session continuity.
    6
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/brainOS-HQ/brain-os'

If you have feedback or need assistance with the MCP directory API, please join our Discord server