Bounded, permission-gated shared context store for authenticated aX workspace state.
The tool reads and writes only first-party aX context/catalog state. It
does not call external systems, deploy, rotate credentials, or perform
open-world destructive operations. delete/decline/terminate remove only
ephemeral TTL-bound working copies and are gated behind a can_delete
permission; durable vault copies and governed catalog entries cannot be
deleted through this tool.
Shared context has three tiers: ephemeral, vault, and governed catalog.
Space is always implied from the agent session. For writes, space_id is a
debug/test override only and a mismatch is rejected (switch spaces first).
For reads (including tier="catalog"), space_id is ignored — the space
always resolves from the session.
Actions and their key parameters:
get key (tier="catalog" + catalog_entry_id reads a governed entry)
set key, value, ttl, topic, content_type/render_as. The key's file
extension drives artifact rendering (chart.svg -> SVG); inline
HTML is inferred, and explicit content_type/render_as can make
no-extension keys render as text/*, JSON, XML, or SVG artifacts
when the value is inline content, a URL/data URL locator, or a
dict with html/content/body/text/data. content_type takes
precedence over render_as; artifact_type applies only to
governed catalog writes.
list prefix, topic, limit, offset (tier="catalog" lists governed entries)
delete key
approve key; re-saves the current entry without ttl so a pending
document/entry is kept permanently. Backend GET errors are
preserved instead of being reported as missing entries.
decline key; removes a pending document/entry and refreshes the list
terminate keys | key | prefix | topic
promote key, to ("vault" default | "catalog"). Pass the source key as
`key` (same as vault promote); to="catalog" also takes
title/artifact_type.
create title, artifact_type, artifact_value (or sha256+size_bytes).
Catalog-only: unlike `set` it always requires title+artifact_type;
`value` is accepted as an alias for artifact_value.
act catalog_entry_id, action_id, base_artifact_version_id,
base_state_version_id
patch catalog_entry_id, patch, base_artifact_version_id,
base_state_version_id
Plain ephemeral usage needs only key/value/ttl/topic; the governed-catalog
params apply only to create/act/patch, promote(to=catalog), tier=catalog reads.