# VenueMind complete agent reference

This file is generated from the same public structured documentation source as the VenueMind docs site.

# Venue planning, built for agents and humans

A versioned spatial-planning system where agents inspect, propose, validate, and compare—while humans retain the commit decision.

## The operating model

1. Inspect the accepted Plan and stable object IDs.
2. Preview non-destructive Changes on a Proposal branch.
3. Validate deterministic Constraints.
4. Review the ghost diff in VenueMind.
5. Approve into the next immutable Plan Version.

## One planner, three surfaces

- VenueMind Studio — visible planning, comparison, approval, undo, and export.
- Native WebMCP — tools registered directly by the open planning page.
- VenueMind MCP server — the same tools over stdio for external agent hosts.

## Start here

- [Quickstart](https://venue-mind-jet.vercel.app/docs/quickstart)
- [Core concepts](https://venue-mind-jet.vercel.app/docs/concepts)
- [Tool reference](https://venue-mind-jet.vercel.app/docs/webmcp)

---

# Quickstart

Open the Studio, inspect the seeded SummitForward Plan, and run the complete supervised Proposal loop.

## Run the Studio

```bash
npm install
npm run dev -- --host 0.0.0.0 --port 4173
```

Open the printed local URL. The WebMCP status changes to Native when the browser discovers the registered tools.

## Run the MCP server

```bash
npm run build:mcp
node packages/mcp-server/dist/index.js
```

The server uses stdio. Standard output is reserved for MCP protocol messages; operational logs go to standard error.

## First planning loop

1. Call venue.get_project_brief and venue.inspect_layout.
2. Call venue.preview_revision with a measurable goal.
3. Call venue.validate_layout.
4. Review the Proposal in VenueMind.
5. Approve in the Studio and export the new Plan Version.

---

# Core concepts

VenueMind separates accepted spatial truth from agent-authored possibilities.

## Project Lifecycle

Project duplication starts a new version-1 lineage with new Project, Plan, Event Brief, Requirement, Proposal, and Change IDs plus source-Plan provenance. Rename, pin, recent-open, archive, restore, and typed-confirmation soft delete preserve the complete snapshot. Deleted Projects remain recoverable for seven days.

## Venue, Room, and Inventory Templates

Venue and Room Templates are reusable, versioned physical definitions. Every Project pins exact template versions while its placed objects keep separate Project-scoped IDs. Inventory Item Templates cover furniture, seating, barriers, staging, AV, catering, signage, and queues with dimensions, weight, power, capacity, cost, and availability metadata.

## Template Updates and Project Overrides

A newer Room Template produces a reviewable Proposal containing only safe differences. Field-level Project Overrides remain authoritative, unavailable additions and deletions are reported for review, and the accepted Plan remains unchanged until normal Validation and human Approval succeed.

## Plan and Plan Version

A Plan is the accepted spatial arrangement for one event in one venue room. Every accepted revision is immutable and identified by a Plan Version.

## Event Brief and Requirement

The Event Brief stores event identity, attendance, occupancy mode, and stable prioritized Requirements. Coverage maps measurable Requirements to Constraint evidence for both the accepted Plan and the active Proposal.

## Room Boundary and Footprint

Every Plan uses one real-world spatial frame measured in metres. The Room Boundary defines valid space; each object has a typed Footprint, elevation, layer, and stable ID. Distance is normalized to millimetre precision and rotation to a tenth of a degree.

## Operational geometry

Doors and exits are line Footprints with clear-width and access metadata. Corridors, aisles, and service lanes are typed Route Graph edges. Restricted Zones are polygonal or rectangular Footprints with explicit access and placement rules.

## Accessible infrastructure

Accessible Seat Samples bind designated representative seats to focal-point rays. Door Clearance Zones are derived from Door geometry and maneuvering metadata. Temporary Ramps carry rise, run, clear width, landing, edge-protection, and handrail evidence.

## Capacity and Occupancy Zones

Capacity evidence reconciles Seating Section counts into stable Occupancy Zones and the full Plan. Each scope has independent minimum and maximum bounds. Every Proposal Change records isolated section, zone, placed, effective, and operational-load deltas against the accepted Plan.

## Live Occupancy Monitor

A Live Occupancy Monitor is an event-day projection anchored to one active Runbook Version and its frozen accepted Plan. It accepts aggregate check-in and zone totals only; person, ticket, contact, device, and individual scan records are rejected before storage.

- Stable source IDs and versions make retries, source rollback, and conflicting feeds explicit.
- Every scope reports nominal, warning, exceeded, conflicting, stale, or unavailable state with freshness and confidence.
- Approved capacity remains authoritative; optional Simulation assumptions appear only as a separately labeled delta.
- Alert open, resolve, and human acknowledgement transitions append to a hash-chained Occupancy Monitor Ledger.
- Browser outbox replay preserves idempotency across offline operation and reconnect.

## Incident Register and Operational Incident

One Incident Register belongs to one active Runbook Version and freezes the accepted Plan, Validation, Approval, Emergency Plan, and Runbook ledger head used on event day. An Operational Incident is a structured issue inside that register; it is never a free-form person record and an Occupancy Alert remains linked evidence rather than becoming the Incident itself.

- Every report and transition carries one stable Incident ID, actor, server-accepted timestamp, Plan-bound object or in-room coordinate, per-Incident revision, receipt, and globally ordered hash-chained ledger entry.
- Severity, category, summary code, owner, acknowledgement, escalation, status, handoff, emergency action, and resolution are structured fields.
- Agents may inspect, report, and export. Acknowledgement, escalation, ownership, response, handoff, emergency action, resolution, closure, and reopening remain authenticated human actions.
- The current deployment stores structured Incident records only and does not accept file uploads.
- Browser outbox replay preserves exact idempotency and retains conflicts for operator recovery.

## Live Plan Deviation Register

A Live Plan Deviation Register belongs to one active Runbook Version and freezes the approved Plan as immutable historical truth. Event-day spatial Changes are stored as separate, ordered Deviation records and combined only in a deterministic active overlay.

- Every Deviation carries one stable ID, disposition, reason code, Plan-bound location, exact affected objects, author evidence, optimistic revision, receipt, and hash-chained ledger entry.
- Each emergency Change is validated against the explicitly available live Constraints before it enters the overlay.
- Temporary records can end without becoming planning history. Ended revision-candidate records may seed a normal review-state post-event Proposal.
- Agents may inspect, record, end, export, and prepare post-event Proposals. Only humans may approve a Proposal into accepted Plan truth.
- The export keeps the approved Plan, live Deviation overlay, and post-event recommendations in separate fields.

## Circulation and Egress Evidence

The walkable Route Graph excludes edges obstructed by placement geometry. Validation derives Exit Approach Zones, shortest egress paths, Critical Route Edges, component-level Bottleneck Loads, phase profiles, and isolated congestion deltas for every Proposal Change.

## Proposal, Branch, and Change

A Proposal is a non-destructive candidate based on exactly one Plan Version. Branches preserve competing strategies; Changes are stable, inspectable spatial differences inside a Proposal.

## Proposal-safe editing

Studio transforms, placement, grouping, zoning, clipboard operations, and layout presets all create Proposal Changes through the same command interface used by agents. The accepted Plan is never edited in place. Each command has a stable Change ID, supports undo and redo, appears in the Activity Ledger, and remains subject to Validation and human Approval.

- Selection, box selection, pan, zoom, grid snapping, alignment, distribution, and numeric transforms share canonical metre-based geometry.
- Layer visibility and layer locks are local workspace controls; object Locks are durable Project records enforced by the planner.
- Measurements are read-only and evaluate the active Proposal candidate without creating a Change.

## Proposal Conflicts

Conflict detection returns stale-base, deleted-dependency, Lock, same-object, geometry-overlap, and Constraint-regression records with stable IDs and permitted outcomes. Human keep-plan and keep-proposal choices preserve unchanged Change IDs. Manual Resolution replaces only transformed Changes with new stable IDs and explicit lineage, then reruns Validation and appends the outcome to the Activity Ledger.

## Proposal comparison and decisions

Branch comparison overlays the accepted Plan with both candidates and reports added, removed, moved, rotated, resized, and metadata differences. Capacity, access width, circulation load, egress distance, sightline coverage, deterministic risk, estimated inventory cost, and Constraint outcomes are evaluated from each candidate.

Branches keep human notes and Proposal revision history. Any revision can seed a new Branch; archive and restore preserve that history. A human decision checkpoint records the chosen Branch, rejected alternatives, comparison fingerprint, and rationale in the Activity Ledger before Approval.

## Comments and immutable anchors

Comments are collaboration records, not planning mutations. Each Comment binds permanently to a Project, Plan Version, Proposal, Change, Constraint, or metre-based coordinate. Branch switches and later Plan Versions never retarget that anchor.

Open, resolved, and reopened states retain author, timestamps, mentions, and complete edit history. Decision-relevant Comments are included in audit exports; coordinate Comments render as numbered annotation pins in the Studio.

## Operational exports

The shared export command produces layered SVG with stable object IDs and accessible labels, a two-page vector PDF with Plan and Validation evidence, a one-page print-safe Emergency Plan, RFC4180 object, inventory, staffing, production, catering, and replenishment schedules, staffing and production maps, structured JSON or text, and a portable audit package bound to geometry, ledger, and replay fingerprints.

- PDF output identifies the evaluated Proposal and accepted base Plan Version.
- The Emergency Plan PDF renders routes, exits, safety infrastructure, readiness, degraded-scenario outcomes, and its evidence fingerprint without raster dependencies.
- Inventory schedules reconcile requested stock, availability, cost, weight, and power.
- Operational exports derive from the same accepted Plan and deterministic evidence used by Approval.
- Audit packages include decision-relevant Comments, public command receipts, Emergency Reviews, assumptions, and scenario evidence.
- Studio and agent tools invoke the same read-only export command.

## Constraint and Validation

Constraints are measurable conditions. Validation deterministically evaluates locks, accessibility, capacity, sightlines, circulation, production, catering, emergency readiness, and congestion against actual and threshold values. Byte-equivalent results are reused only when the immutable Validation input fingerprint and its canonical input both match.

## Scenario and Simulation Run

A Scenario is an immutable set of assumptions, phases, time horizon, sample count, and deterministic seed evaluated against one exact Proposal Branch geometry fingerprint. A Simulation Run stores engine version, progress, partial checkpoints, confidence metadata, and its completed, cancelled, or failed outcome.

Simulation is probabilistic evidence and never becomes Constraint evidence. A changed Proposal cancels its obsolete active Run; identical immutable inputs reuse the cached normalized result. Compatible completed Runs require matching Scenario definition fingerprints and engine versions.

## Ingress and egress

The ingress-egress model combines monotonic arrival and departure curves with aggregate Mobility Profiles. Profiles contain only a stable cohort ID, population share, speed factor, and accessible-route requirement; no person-level records enter the engine.

- Infrastructure is derived from the exact Plan or Proposal Branch: entrances, exits, checkpoints, Doors, stairs, elevators, Corridors, Aisles, accessible routes, occupied Sections, and Route Graph paths.
- Every result includes zone and full-venue clearance, bottleneck duration and affected occupancy, accessible-route performance, normal versus emergency assumptions, and time-keyed Density Frames.
- Density cells bind aggregate persons-per-square-metre estimates to stable object IDs and can be replayed in the Studio.
- Branch comparisons expose total clearance, worst bottleneck, and accessible-route deltas without changing the Plan or Validation.

## Queue simulation

The queue model supports registration, security, cloakroom, food, beverage, restroom, merchandise, and transport operations. Seeded runs model arrivals, service per server, parallel servers, abandonment patience, priority lanes, and spatial buffer capacity.

- Results include average, median, and p95 wait, maximum queue length, abandonment, overflow risk, and lane evidence.
- Spill evidence names exact nearby Route and Exit object IDs when p95 queue area exceeds the modeled buffer.
- A measurable server and buffer option is emitted only with deterministic spatial preflight and requires explicit human action.
- Previewing an option creates an ordinary violet ghost Change and immediately runs deterministic Validation; the Simulation Result never changes or approves the Plan.

## Staffing and operations

A Staffing Plan versions role headcounts, skills, shifts, zone requirements, handoff policy, and maximum walking distance alongside the venue Plan. Staff Posts are typed spatial objects with stable IDs, coverage-zone links, and role assignments by shift.

- Coverage evidence evaluates entrances, exits, accessible routes, stages, and service areas by exact zone and post IDs.
- Walking-distance gaps, insufficient role headcount, and short shift handoffs remain explicit auditable results.
- Staff-only service routes are modeled separately from attendee circulation and never alter accessible-route Validation.
- The shared export command produces an RFC4180 staffing schedule and an SVG post map without mutating Plan truth.

## AV and production planning

Production Readiness Evidence is deterministic Constraint evidence for the exact visible Plan or Proposal. It binds screens, projectors, speakers, cameras, control desks, Cable Routes, Utility Points, Rigging Points, backstage zones, and inventory instances by stable ID.

- Projector throw ratios use exact projector-to-screen geometry and viewable width.
- Seat-to-screen rays, speaker coverage cones, camera ranges, and control sightlines retain their sampled object and obstruction IDs.
- Every accessible Cable Crossing requires an allowed overhead or cable-ramp treatment.
- Circuit and Rigging Loads reconcile rated infrastructure against placed equipment demand; inventory shortages remain blocking production evidence.
- The shared export command produces a production CSV and production-only SVG map without changing accepted Plan truth.

## Catering and service planning

Service Capacity Evidence evaluates the exact visible Plan or Proposal across arrival, break, and meal phases. Typed Service Stations link throughput, queue buffers, accessible counter height, support spaces, water, Replenishment Routes, and inventory by stable ID.

- Queue Zones fail when they spill into public circulation or emergency exits.
- Service and support objects retain measured separation from production and emergency infrastructure.
- Controlled Replenishment Route crossings remain visible circulation impacts; uncontrolled crossings block Approval.
- Dietary Options and Allergen Labels describe stations only. Attendee health records are rejected at the geometry boundary.
- Branch comparison includes service capacity, queue risk, circulation crossings, and accessible Service Points.
- The shared export command produces Service Station and Replenishment Route schedules without changing accepted Plan truth.

## Emergency planning

An Emergency Plan versions exits, assembly points, responder access lanes, fire-equipment coverage, first-aid posts, command posts, operating assumptions, and three required Degraded Scenarios alongside accepted Plan truth.

- Emergency readiness is a deterministic hard Constraint over exact geometry, capacities, infrastructure IDs, and power metadata.
- Blocked-exit and unavailable-corridor scenarios remove named graph inputs and retain affected zones, Alternative Emergency Routes, available exit capacity, shortfall, and unresolved hard failures.
- Power-loss scenarios remove named circuits and verify backup duration for emergency infrastructure.
- Any Proposal that changes emergency infrastructure requires a separate authorized Emergency Review bound to the Proposal, base version, Validation, evidence fingerprint, assumptions, reviewer identity, and role.
- The audit package retains every review and scenario fingerprint; the shared export command produces a one-page vector Emergency Plan.

## Warning Waiver

A warning never disappears from Validation evidence. Approval requires a human-authored Warning Waiver bound to its Constraint, Proposal base version, and Validation input fingerprint. Approval carries that disposition into the resulting Plan Version; changed Proposals require a new waiver.

## Object Lock

A Lock protects one object property class: position, rotation, dimension, deletion, or role. Venue-template Locks are inherited with the accepted geometry; human Project Locks are temporary, reason-coded records outside the immutable Plan and can be explicitly released. Conflicts expose the Lock ID, type, source, object, and Change.

## Route Graph and Spatial Evidence

Validation derives route paths, clear widths, usable area, section capacity, phase loads, focal-point rays, viewing angles, and obstruction IDs from canonical geometry. Every result carries geometry and evidence fingerprints.

## Approval and Activity Ledger

Approval is the explicit human decision that commits a validated Proposal. Every human and agent action is appended to an ordered Activity Ledger.

---

# Create your first Project

Create a durable empty Project, open its canonical Plan, and confirm its first Validation result.

## Prerequisites

```bash
npm install
npm run dev -- --host 0.0.0.0 --port 4173
```

- Keep the development process running.
- Open http://localhost:4173/projects.

## Create and open

1. Select NEW PROJECT.
2. Open the new Project card.
3. Confirm the Studio header shows Plan v1.0.
4. Open the Event Brief and set the event identity, attendance target, occupancy mode, and measurable requirements.
5. Save the brief; unresolved measurable requirements remain visible until they map to Constraints.

## Completion criteria

- The Project appears in the Project index after navigation and reload.
- The Plan uses metres, stable Project-scoped IDs, and an empty accepted object set.
- Validation returns pass for the valid empty starting geometry.
- The Project record reports remote persistence or an explicit local recovery state.

## Next workflow

- [Run the supervised planning loop](https://venue-mind-jet.vercel.app/docs/tutorial-supervised-loop)

## Verify the workflow

Run the executable fixture from the repository root. Completion requires a zero exit code.

```bash
node --test tests/empty-project.test.mjs tests/project-store.test.mjs
```

---

# Run the supervised planning loop

Inspect, preview, validate, review, approve, and export one versioned venue revision.

## Prepare

1. Open /studio/project-summit-forward in a WebMCP-capable host.
2. Confirm the WebMCP diagnostic status is READY.
3. Keep the accepted Plan visible while the agent works.

## Inspect accepted truth

```json
{
  "tool": "venue.get_project_brief",
  "input": {}
}
```

```json
{
  "tool": "venue.inspect_layout",
  "input": {}
}
```

Retain the returned Plan Version, Proposal ID, stable object IDs, Locks, and correlation metadata.

## Preview a measurable outcome

```json
{
  "tool": "venue.preview_revision",
  "input": {
    "goal": "Reduce entrance congestion while preserving accessible routes",
    "idempotencyKey": "tutorial-preview-001",
    "correlationId": "tutorial-loop-001"
  }
}
```

The violet ghosts are Proposal Changes. The accepted Plan remains unchanged.

## Validate exact evidence

```json
{
  "tool": "venue.validate_layout",
  "input": {}
}
```

- Resolve every hard failure before review.
- A human must disposition every waivable warning.
- The Validation fingerprint must match the visible Proposal candidate.

## Review, approve, and export

1. Compare each violet Change with the accepted Plan.
2. Select Approve proposal in the Studio only when Validation passes and required reviews are complete.
3. Confirm the immutable Plan Version advances and the Approval appears in the Activity Ledger.
4. Export VM JSON or PDF from the Studio, or call venue.export_plan after Approval.

## Completion criteria

- The agent never invokes Approval.
- Exactly one human Approval creates exactly one Plan Version.
- The export identifies the new version and carries Validation and ledger evidence.

## Verify the workflow

Run the executable fixture from the repository root. Completion requires a zero exit code.

```bash
node --test tests/webmcp-conformance.test.mjs tests/venue-planner.test.mjs
```

---

# Compare access-first and capacity-first branches

Create two competing Proposal Branches, validate both, and record a human decision from measurable evidence.

## Create both strategies

```json
{
  "tool": "venue.create_proposal_branch",
  "input": {
    "name": "Access first",
    "strategy": "access-first",
    "goal": "Maximize accessible route clearance",
    "idempotencyKey": "tutorial-access-branch-001"
  }
}
```

```json
{
  "tool": "venue.create_proposal_branch",
  "input": {
    "name": "Capacity first",
    "strategy": "balanced",
    "goal": "Increase usable seating without reducing required clearances",
    "idempotencyKey": "tutorial-capacity-branch-001"
  }
}
```

## Develop and validate independently

1. Switch to Access first, preview its goal, and call venue.validate_layout.
2. Switch to Capacity first, preview its goal, and call venue.validate_layout.
3. Keep both Branch IDs and Validation fingerprints.
4. Do not reuse one Branch result as evidence for the other.

## Compare evidence

Use the Branch IDs returned by the two create calls. In a fresh seeded Project they are branch-2 and branch-3.

```json
{
  "tool": "venue.compare_proposal_branches",
  "input": {
    "leftBranchId": "branch-2",
    "rightBranchId": "branch-3"
  }
}
```

- Review capacity, access width, circulation, egress, sightlines, risk, inventory cost, and Constraint deltas.
- Open Plan history → Branches → Compare to inspect the spatial overlay.
- Enter a decision note and choose the evidence-backed Branch.

## Completion criteria

- Both Branches retain independent Changes and Validation results.
- The chosen and rejected Branch IDs, comparison fingerprint, and rationale appear in the Activity Ledger.
- The accepted Plan remains unchanged until a separate human Approval.

## Verify the workflow

Run the executable fixture from the repository root. Completion requires a zero exit code.

```bash
node --test tests/venue-planner.test.mjs
```

---

# Resolve a stale Proposal

Rebase a Proposal onto newer accepted truth without losing stable Change lineage or bypassing conflicts.

## Create the stale state

1. Create two Proposal Branches from the same accepted Plan Version.
2. Validate and approve the first Branch in the Studio.
3. Switch to the second Branch; its base version now trails the accepted Plan.
4. Confirm the Branch shows STALE before attempting further review.

## Detect conflicts

Use the Branch ID returned when you created the second Branch.

```json
{
  "tool": "venue.detect_proposal_conflicts",
  "input": {
    "branchId": "branch-3"
  }
}
```

- Read every conflict type, affected object ID, blocking state, and permitted resolution.
- A deleted dependency or effective Lock must remain explicit.

## Rebase and resolve

```json
{
  "tool": "venue.rebase_proposal",
  "input": {
    "branchId": "branch-3",
    "idempotencyKey": "tutorial-rebase-001"
  }
}
```

1. Resolve remaining same-object or geometry conflicts with keep-plan, keep-proposal, or manual resolution only where the conflict permits it.
2. Run venue.validate_layout again.
3. Review any transformed Change with its new ID and lineage.

## Completion criteria

- Unchanged Changes retain their stable Change IDs.
- Transformed Changes receive new IDs with explicit lineage.
- Validation evaluates the rebased fingerprint.
- Approval is enabled only after all blocking conflicts and hard failures are cleared.

## Verify the workflow

Run the executable fixture from the repository root. Completion requires a zero exit code.

```bash
node --test tests/venue-planner.test.mjs
```

---

# Audit an approved Plan Version

Verify approval authority, deterministic evidence, ledger integrity, and replay for one immutable Plan Version.

## Collect the evidence

```json
{
  "tool": "venue.inspect_layout",
  "input": {}
}
```

```json
{
  "tool": "venue.get_validation_evidence",
  "input": {
    "constraintIds": [
      "constraint-accessible-route"
    ],
    "includeSpatialEvidence": true
  }
}
```

```json
{
  "tool": "venue.get_change_log",
  "input": {}
}
```

Use one exact Plan Version and preserve every returned fingerprint and stable ID.

## Verify history

```json
{
  "tool": "venue.replay_history",
  "input": {}
}
```

- The ledger hash chain must pass.
- The replayed current Plan fingerprint must match the stored fingerprint.
- The Approval actor must be human and authorized.
- Every waiver and Emergency Review must bind the approved Proposal and Validation fingerprint.

## Export the audit package

```json
{
  "tool": "venue.export_audit_package",
  "input": {}
}
```

Store the package checksum with the review record. The export is read-only and cannot change the Plan.

## Completion criteria

- Ledger integrity and replay both pass.
- The accepted Plan Version, Validation, Approval, reviews, receipts, comments, and geometry fingerprints reconcile.
- No agent-authored Approval or fabricated waiver exists.

## Verify the workflow

Run the executable fixture from the repository root. Completion requires a zero exit code.

```bash
node --test tests/venue-planner.test.mjs tests/plan-exports.test.mjs tests/authorization.test.mjs
```

---

# Install the VenueMind MCP server

Build the standalone stdio server, connect one host, and open a durable Project-scoped session.

## Build the server

```bash
npm install
npm run build:mcp
```

## Configure Codex

```bash
mkdir -p ./venuemind-data
codex mcp add venuemind --env VENUEMIND_DATA_DIR=$PWD/venuemind-data -- node $PWD/packages/mcp-server/dist/index.js
codex mcp get venuemind
```

Other stdio hosts use the same command, arguments, and explicit writable data directory.

## Open a Project session

```json
{
  "tool": "venue.list_projects",
  "input": {}
}
```

```json
{
  "tool": "venue.open_project",
  "input": {
    "projectId": "project-summit-forward"
  }
}
```

```json
{
  "tool": "venue.inspect_layout",
  "input": {}
}
```

## Completion criteria

- The host lists all 56 tool contracts at version 1.6.0.
- The active session is bound to one Project.
- Project state survives a server restart.
- Approval, Occupancy Alert acknowledgement, Incident response, and Post-event Proposal review actions remain absent from the tool list.

## Other clients

- [MCP client configurations](https://venue-mind-jet.vercel.app/docs/mcp#desktop-hosts)

## Verify the workflow

Run the executable fixture from the repository root. Completion requires a zero exit code.

```bash
node --test tests/mcp-server.test.mjs
```

---

# Use VenueMind through native WebMCP

Expose the active Studio as a scoped browser tool surface and complete a safe read-to-Proposal workflow.

## Open the native surface

1. Start the VenueMind development server.
2. Open /studio/project-summit-forward in a WebMCP-capable browser host.
3. Open WebMCP diagnostics and confirm READY, contract 1.6.0, and 56 registered tools.

## Invoke through the browser

```json
{
  "tool": "venue.inspect_layout",
  "input": {}
}
```

```json
{
  "tool": "venue.preview_revision",
  "input": {
    "goal": "Protect the west accessible route and reduce entrance congestion",
    "idempotencyKey": "tutorial-webmcp-preview-001",
    "correlationId": "tutorial-webmcp-001"
  }
}
```

```json
{
  "tool": "venue.validate_layout",
  "input": {}
}
```

## Observe the shared state

- The Studio displays the same Proposal and violet ghost Changes returned to the caller.
- Tool results contain bounded structured content plus a compact summary.
- The call correlation and idempotency metadata appear in receipts and the Activity Ledger.
- Reloading the page unregisters and safely registers the tool suite again.

## Completion criteria

- Read and Proposal calls succeed within their Agent Grant scopes.
- Missing scope, oversized input, cancellation, and stale state return stable error envelopes.
- The agent cannot approve or delete a Project.

## Verify the workflow

Run the executable fixture from the repository root. Completion requires a zero exit code.

```bash
node --test tests/webmcp-conformance.test.mjs
```

---

# Install and invoke VenueMind agent skills

Build six versioned skill packages and invoke the smallest workflow-specific skill for the task.

## Build and inspect

```bash
npm run build:skills
npm run validate:skills
node -e "const m=require('./dist/skills/manifest.json'); console.log(m.packages.map(p => p.name+'@'+p.version).join('\n'))"
```

Install the desired directory from dist/skills into the skill location used by the agent host.

## Choose one skill

- venuemind-plan — supervised planning and Proposal branches.
- venuemind-audit — evidence, authority, ledger, and replay.
- venuemind-access-review — accessible routes, seating, doors, ramps, and sightlines.
- venuemind-crowd-flow — deterministic Scenario comparison and queue evidence.
- venuemind-production-plan — AV, staging, power, rigging, cable, and service routes.
- venuemind-event-day — live issue triage and supervised adjustments.

## Invoke with a bounded outcome

```text
Use $venuemind-access-review to inspect the active Proposal, explain every failed accessibility Constraint by stable ID, and prepare one validated remediation branch. Stop at human review.
```

## Completion criteria

- The installed package version and tool contract version match the manifest.
- The skill loads generated schema references only when its workflow needs them.
- Required evidence is present and unnecessary referenced calls remain absent.
- The skill stops at human Approval.

## Verify the workflow

Run the executable fixture from the repository root. Completion requires a zero exit code.

```bash
node --test tests/skills.test.mjs
```

---

# Import, validate, and export a venue plan

Preview an Interchange Package, commit it as a new Project, validate exact geometry, and produce portable exports.

## Preview before import

1. Open /projects and select IMPORT.
2. Choose public/examples/venuemind-project-package.json from the repository.
3. Review the package ID, schema, checksum, stable-ID checks, geometry checks, Lock checks, ledger integrity, and replay status.
4. Confirm the Project ID does not already exist.

## Commit and validate

1. Select IMPORT PROJECT only when the preview status is ready.
2. Open the created Project.
3. Run venue.inspect_layout and venue.validate_layout.
4. Reconcile the candidate geometry and Validation fingerprints with the import preview.

## Export portable evidence

```json
{
  "tool": "venue.export_plan",
  "input": {
    "format": "package"
  }
}
```

```json
{
  "tool": "venue.export_plan",
  "input": {
    "format": "pdf"
  }
}
```

```json
{
  "tool": "venue.export_audit_package",
  "input": {}
}
```

- Use VM JSON for authoritative round-trip interchange.
- Use PDF or layered SVG for human review.
- Use the audit package for ledger, replay, and evidence verification.

## Completion criteria

- Import never overwrites an existing Project ID.
- The clean installation reproduces the same Plan, Constraint, version, and ledger fingerprints.
- Every export identifies the evaluated Plan Version and Validation evidence.

## Verify the workflow

Run the executable fixture from the repository root. Completion requires a zero exit code.

```bash
node --test tests/interchange.test.mjs tests/plan-exports.test.mjs
```

---

# Recover from offline local state

Preserve Project work when the remote Project endpoint is unavailable and reconcile it without silent data loss.

## Seed the recovery cache

1. Open a Project while the Project API is available.
2. Confirm the Studio save indicator reports REMOTE.
3. Make one Proposal-safe change and wait for the remote save.
4. The browser now holds a recovery copy under the Project-scoped storage key.

## Continue during an API outage

1. Block requests matching /api/projects while keeping the application assets available.
2. Create or adjust a Proposal Change.
3. Confirm the save indicator reports LOCAL.
4. Navigate to /projects and confirm the cached Project remains discoverable with its complete snapshot.

## Recover deliberately

1. Restore the Project endpoint before accepting further shared changes.
2. Open the locally recovered Project and export VM JSON as a safety copy.
3. Compare its updated time, Plan Version, Proposal, and latest receipt with the remote record.
4. Preserve divergent work as a Proposal Branch; do not silently replace accepted remote truth.

## Completion criteria

- The local record retains schema version 10 and the exact Project snapshot.
- Remote failure is explicit through the LOCAL status.
- Recovery never changes accepted Plan truth without the ordinary Proposal, Validation, and human Approval path.

## Verify the workflow

Run the executable fixture from the repository root. Completion requires a zero exit code.

```bash
node --test tests/project-store.test.mjs
```

---

# WebMCP tools

The active VenueMind page exposes compact tools backed by the same command interface as the visible Studio.

## Runtime boundary

- Contract version 1.6.0 is attached to every published tool.
- Lifecycle states: detecting, registering, ready, failed, unsupported, unregistered.
- Every invocation returns a compact text summary and versioned structured content.
- Mutation receipts retain caller idempotency and correlation metadata.
- Authorization scopes: venue:read, venue:propose, venue:comment, venue:simulate, venue:operate, venue:export.
- Input and output byte limits are published per tool and enforced before data crosses the boundary.
- Sensitive credentials, contact fields, attendee-record keys, and Incident evidence bytes are excluded from structured results.
- Abort signals unregister the page tool suite and cancel active calls where the invoking browser supplies a call signal.

## Generated catalog

Each native browser tool has one canonical reference page shared with the standalone MCP surface.

- [Browse all tool contracts](https://venue-mind-jet.vercel.app/docs/reference-tools)

---

# MCP server

A durable, session-scoped stdio server built on the official Model Context Protocol TypeScript SDK v2.

## Build and launch

```bash
npm run build:mcp
node /absolute/path/to/venue-mind/packages/mcp-server/dist/index.js
```

## Durable Project sessions

- Filesystem repository with atomic writes.
- One active Project per MCP connection.
- venue.list_projects and venue.open_project select Project scope.
- Set VENUEMIND_DATA_DIR to an explicit writable data directory.
- Project record schema version 10.

## Protocol surfaces

- 56 tools generated from one shared contract source across WebMCP and standalone MCP.
- Current Project, Plan Version, Proposal, schema, documentation, and compatibility resources.
- Project and Plan Version resource templates with completion.
- Supervised planning and Plan audit prompts.
- Progress notifications for Validation and Simulation.
- Structured standard-error logs and graceful interruption handling.

## Codex

```bash
codex mcp add venuemind --env VENUEMIND_DATA_DIR=/absolute/path/to/venuemind-data -- node /absolute/path/to/venue-mind/packages/mcp-server/dist/index.js
codex mcp get venuemind
```

## Claude Desktop, Cursor, and generic clients

```json
{
  "mcpServers": {
    "venuemind": {
      "command": "node",
      "args": [
        "/absolute/path/to/venue-mind/packages/mcp-server/dist/index.js"
      ],
      "env": {
        "VENUEMIND_DATA_DIR": "/absolute/path/to/venuemind-data"
      }
    }
  }
}
```

- Claude Desktop: add the entry to claude_desktop_config.json and restart.
- Cursor: save it as .cursor/mcp.json for Project scope or ~/.cursor/mcp.json for global scope.
- Generic local MCP hosts commonly accept the same process configuration.

## Official MCP Inspector

```bash
npx @modelcontextprotocol/inspector node /absolute/path/to/venue-mind/packages/mcp-server/dist/index.js
```

## ChatGPT-compatible remote deployment

ChatGPT custom MCP apps connect to remote endpoints, not directly to a local stdio process. Put an authenticated Streamable HTTP Adapter or supported secure MCP tunnel in front of the same server Module; never expose the stdio process itself to the network.

- Validate OAuth tokens and token audience.
- Publish protected-resource metadata.
- Bind Project access to the authenticated principal.
- Enforce VenueMind authorization scopes.
- Use TLS, restrict origins, and reject caller-supplied organization or actor authority.

## Compatibility

- MCP server 0.7.0.
- Preferred protocol revision 2026-07-28.
- Minimum supported revision 2025-03-26.
- Tool contract 1.6.0.
- Approval, Occupancy Alert acknowledgement, and Incident response authority: human-only. Live Plan Deviation tools create records and review-state post-event Proposals only.

## Human-only approval

The MCP surface can inspect, preview, validate, branch, switch, read, and export. Approval is deliberately absent; the VenueMind Studio owns the human commit decision.

---

# Agent skills

Six versioned skill packages teach supervised VenueMind workflows against tool contract 1.6.0.

## venuemind-plan

Prepare seating, access, circulation, sightline, production, catering, capacity, and queue Proposal branches. Stops at human review.

```text
Use $venuemind-plan to create and validate an access-first Proposal branch.
```

## venuemind-audit

Reconcile Plan Versions, Constraints, Validation fingerprints, Locks, receipts, approval authorship, and Activity Ledger replay.

```text
Use $venuemind-audit to inspect this Plan for stale branches and missing evidence.
```

## venuemind-access-review

Review routes, doors, ramps, accessible and companion seating, turning space, and access sightlines. It reports policy provenance without claiming legal certification.

```text
Use $venuemind-access-review to explain this failed route and prepare a remediation branch.
```

## venuemind-crowd-flow

Run seeded ingress, interval, egress, emergency, queue, and bottleneck scenarios while keeping simulation evidence separate from deterministic Validation.

```text
Use $venuemind-crowd-flow to compare these two egress strategies.
```

## venuemind-production-plan

Plan staging, AV, power points, cable routes, production access, and service lanes while checking audience impacts.

```text
Use $venuemind-production-plan to prepare a validated production branch.
```

## venuemind-event-day

Triage live issues with stable incident anchors, current-plan evidence, simulations, and supervised Adjustment Requests.

```text
Use $venuemind-event-day to triage this live queue obstruction.
```

## Authority boundary

- No skill can accept a Proposal or delete a Project.
- No skill may override effective Locks or manufacture a Warning Waiver.
- Stale versions, incompatible simulation fingerprints, and missing evidence remain explicit failures.
- Emergency response remains with venue operators and local emergency services.

## Build and install

```bash
npm run build:skills
cp -R /absolute/path/to/venue-mind/dist/skills/venuemind-* /absolute/path/to/codex-skills/
```

- [Skill package manifest](https://venue-mind-jet.vercel.app/skills-manifest.json)
- [Evaluation metrics](https://venue-mind-jet.vercel.app/skill-evaluation-metrics.json)

## Evaluation suite

- 14 normal and adversarial workflow cases.
- Premature Approval, ignored Locks, stale versions, and missing evidence fixtures.
- Required-tool selection accuracy: 100%.
- Unnecessary referenced-call rate: 0%.
- Every case requires stable evidence and stops at human Approval.

---

# Client examples

Validated WebMCP, MCP, Codex, Claude Desktop, Cursor, JSON-RPC, retry, failure, and export examples.

## Browser WebMCP

The open Studio registers native tools. The browser agent host invokes them; the published harness captures the same registrations for deterministic local execution.

```javascript
// The browser host invokes tools registered by the open VenueMind page.
const result = await harness.invoke("venue.preview_revision", {
  goal: "Protect the west accessible route",
  idempotencyKey: "browser-example-preview-001",
  correlationId: "browser-example-001",
});
if (result.isError) throw new Error(result.structuredContent.error.code);

```

- [Executable browser harness](https://venue-mind-jet.vercel.app/examples/client/webmcp/browser-invocation.mjs)
- [WebMCP tutorial](https://venue-mind-jet.vercel.app/docs/tutorial-webmcp)

## Generic stdio client

```json
{
  "transport": "stdio",
  "command": "node",
  "args": [
    "<VENUE_MIND_ROOT>/packages/mcp-server/dist/index.js"
  ],
  "env": {
    "VENUEMIND_DATA_DIR": "<WRITABLE_DATA_DIR>",
    "VENUEMIND_ORGANIZATION_ID": "<ORGANIZATION_ID>"
  }
}
```

- Replace <VENUE_MIND_ROOT> with the absolute repository path.
- Replace <WRITABLE_DATA_DIR> with a dedicated writable directory.
- The host launches one local server process per stdio session.
- Standard output is protocol-only; structured diagnostics use standard error.

- [Generic configuration](https://venue-mind-jet.vercel.app/examples/client/config/generic-stdio.json)
- [Executable TypeScript client](https://venue-mind-jet.vercel.app/examples/client/typescript/supervised-workflow.ts)
- [Official MCP TypeScript client guide](https://ts.sdk.modelcontextprotocol.io/v2/clients/connect)

## Codex

```bash
codex mcp add venuemind --env VENUEMIND_DATA_DIR=<WRITABLE_DATA_DIR> -- node <VENUE_MIND_ROOT>/packages/mcp-server/dist/index.js
codex mcp get venuemind
```

```toml
[mcp_servers.venuemind]
command = "node"
args = ["<VENUE_MIND_ROOT>/packages/mcp-server/dist/index.js"]
env = { VENUEMIND_DATA_DIR = "<WRITABLE_DATA_DIR>", VENUEMIND_ORGANIZATION_ID = "<ORGANIZATION_ID>" }

```

```text
Use VenueMind to inspect Project project-summit-forward, prepare one access-first Proposal, validate it, report stable Change and Constraint IDs, export JSON, and stop for human Approval in the Studio.
```

- [Codex TOML](https://venue-mind-jet.vercel.app/examples/client/config/codex.toml)

## Claude Desktop

1. Open Claude Desktop developer settings and edit the local MCP configuration.
2. Merge the venuemind entry under mcpServers.
3. Replace both path placeholders and restart Claude Desktop.
4. Confirm VenueMind tools are available before running the supervised prompt.

```json
{
  "mcpServers": {
    "venuemind": {
      "command": "node",
      "args": [
        "<VENUE_MIND_ROOT>/packages/mcp-server/dist/index.js"
      ],
      "env": {
        "VENUEMIND_DATA_DIR": "<WRITABLE_DATA_DIR>",
        "VENUEMIND_ORGANIZATION_ID": "<ORGANIZATION_ID>"
      }
    }
  }
}
```

```text
Open project-summit-forward in VenueMind. Inspect accepted truth, preview a revision that protects the west accessible route, validate it, explain every non-pass result, and stop for human Approval.
```

- [Claude Desktop configuration](https://venue-mind-jet.vercel.app/examples/client/config/claude-desktop.json)
- [Anthropic MCP documentation](https://docs.anthropic.com/en/docs/mcp)

## Cursor

1. Create .cursor/mcp.json for Project scope or ~/.cursor/mcp.json for global scope.
2. Copy the configuration and replace both path placeholders.
3. Open Cursor MCP settings and confirm venuemind is enabled.
4. Keep tool approval enabled for the supervised workflow.

```json
{
  "mcpServers": {
    "venuemind": {
      "command": "node",
      "args": [
        "<VENUE_MIND_ROOT>/packages/mcp-server/dist/index.js"
      ],
      "env": {
        "VENUEMIND_DATA_DIR": "<WRITABLE_DATA_DIR>",
        "VENUEMIND_ORGANIZATION_ID": "<ORGANIZATION_ID>"
      }
    }
  }
}
```

```text
Using the VenueMind MCP tools, audit the current Plan, create a separate circulation-first Proposal Branch, validate it, compare it with the active Branch, and leave the decision to a human reviewer.
```

- [Cursor Project configuration](https://venue-mind-jet.vercel.app/examples/client/config/cursor-project.json)
- [Cursor MCP documentation](https://docs.cursor.com/context/model-context-protocol)

## Retry and failure workflows

- Exact retry — reuse one idempotency key only for byte-equivalent intent; VenueMind returns the original receipt.
- Stale base — retain PLAN_VERSION_CONFLICT details, inspect current truth, detect conflicts, then rebase the Proposal.
- Validation failure — use affected stable IDs and remediation evidence; create another Proposal revision and validate again.
- Export — export only the currently evaluated Plan or Proposal and retain its version, Validation ID, and evidence fingerprints.

- [Retry sequence](https://venue-mind-jet.vercel.app/examples/client/raw/retry-sequence.json)
- [Stale-base error](https://venue-mind-jet.vercel.app/examples/client/raw/stale-base.error.json)
- [Validation failure](https://venue-mind-jet.vercel.app/examples/client/raw/validation-failure.response.json)
- [Text export response](https://venue-mind-jet.vercel.app/examples/client/raw/export-text.response.json)

## Raw request and response fixtures

- [Preview request](https://venue-mind-jet.vercel.app/examples/client/raw/preview-revision.request.json)
- [Preview response](https://venue-mind-jet.vercel.app/examples/client/raw/preview-revision.response.json)
- [Example manifest](https://venue-mind-jet.vercel.app/examples/client/manifest.json)

Generation uses the production planner, error catalog, export implementation, and shared tool contracts. CI compiles and executes both code examples and contract-validates every configuration and fixture.

---

# Tool reference

One generated page per WebMCP and standalone MCP tool, sourced from the runtime contract registry.

## venue:read

- [venue.list_projects](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-list-projects)
- [venue.open_project](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-open-project)
- [venue.inspect_templates](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-inspect-templates)
- [venue.get_project_brief](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-get-project-brief)
- [venue.list_constraints](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-list-constraints)
- [venue.inspect_layout](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-inspect-layout)
- [venue.get_object](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-get-object)
- [venue.search_objects](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-search-objects)
- [venue.measure_objects](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-measure-objects)
- [venue.validate_layout](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-validate-layout)
- [venue.get_validation_evidence](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-get-validation-evidence)
- [venue.list_proposal_branches](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-list-proposal-branches)
- [venue.compare_proposal_branches](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-compare-proposal-branches)
- [venue.detect_proposal_conflicts](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-detect-proposal-conflicts)
- [venue.list_comments](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-list-comments)
- [venue.get_change_log](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-get-change-log)
- [venue.replay_history](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-replay-history)
- [venue.list_scenarios](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-list-scenarios)
- [venue.list_scenario_runs](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-list-scenario-runs)
- [venue.inspect_live_occupancy](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-inspect-live-occupancy)
- [venue.inspect_incidents](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-inspect-incidents)
- [venue.inspect_live_plan_deviations](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-inspect-live-plan-deviations)
- [venue.inspect_post_event_review](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-inspect-post-event-review)

## venue:propose

- [venue.preview_revision](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-preview-revision)
- [venue.preview_template_update](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-preview-template-update)
- [venue.apply_edit](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-apply-edit)
- [venue.create_proposal_branch](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-create-proposal-branch)
- [venue.switch_proposal_branch](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-switch-proposal-branch)
- [venue.update_proposal_branch](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-update-proposal-branch)
- [venue.duplicate_proposal_branch](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-duplicate-proposal-branch)
- [venue.archive_proposal_branch](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-archive-proposal-branch)
- [venue.restore_proposal_branch](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-restore-proposal-branch)
- [venue.rebase_proposal](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-rebase-proposal)
- [venue.request_adjustment](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-request-adjustment)
- [venue.create_post_event_deviation_proposal](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-create-post-event-deviation-proposal)
- [venue.create_template_improvement_proposal](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-create-template-improvement-proposal)

## venue:comment

- [venue.add_comment](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-add-comment)
- [venue.edit_comment](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-edit-comment)
- [venue.set_comment_status](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-set-comment-status)

## venue:simulate

- [venue.get_scenario_result](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-get-scenario-result)
- [venue.run_scenario](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-run-scenario)
- [venue.compare_simulations](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-compare-simulations)

## venue:export

- [venue.export_simulation](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-export-simulation)
- [venue.export_live_occupancy](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-export-live-occupancy)
- [venue.export_incident_record](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-export-incident-record)
- [venue.export_live_plan_deviations](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-export-live-plan-deviations)
- [venue.export_post_event_report](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-export-post-event-report)
- [venue.export_audit_package](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-export-audit-package)
- [venue.export_plan](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-export-plan)

## venue:operate

- [venue.ingest_occupancy_signal](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-ingest-occupancy-signal)
- [venue.refresh_live_occupancy](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-refresh-live-occupancy)
- [venue.report_incident](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-report-incident)
- [venue.record_live_plan_deviation](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-record-live-plan-deviation)
- [venue.end_live_plan_deviation](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-end-live-plan-deviation)
- [venue.record_post_event_observation](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-record-post-event-observation)
- [venue.record_post_event_lesson](https://venue-mind-jet.vercel.app/docs/reference-tool-venue-record-post-event-lesson)

---

# Command reference

One generated page per shared planner command, including internal human and persistence commands that are intentionally absent from agent tools.

## plan.read

- [inspect_templates](https://venue-mind-jet.vercel.app/docs/reference-command-inspect-templates)
- [measure_objects](https://venue-mind-jet.vercel.app/docs/reference-command-measure-objects)
- [inspect_layout](https://venue-mind-jet.vercel.app/docs/reference-command-inspect-layout)
- [get_project_brief](https://venue-mind-jet.vercel.app/docs/reference-command-get-project-brief)
- [list_constraints](https://venue-mind-jet.vercel.app/docs/reference-command-list-constraints)
- [get_validation_evidence](https://venue-mind-jet.vercel.app/docs/reference-command-get-validation-evidence)
- [get_object](https://venue-mind-jet.vercel.app/docs/reference-command-get-object)
- [search_objects](https://venue-mind-jet.vercel.app/docs/reference-command-search-objects)
- [validate_layout](https://venue-mind-jet.vercel.app/docs/reference-command-validate-layout)

## proposal.read

- [list_branches](https://venue-mind-jet.vercel.app/docs/reference-command-list-branches)
- [compare_branches](https://venue-mind-jet.vercel.app/docs/reference-command-compare-branches)
- [detect_conflicts](https://venue-mind-jet.vercel.app/docs/reference-command-detect-conflicts)

## audit.read

- [get_change_log](https://venue-mind-jet.vercel.app/docs/reference-command-get-change-log)
- [replay_history](https://venue-mind-jet.vercel.app/docs/reference-command-replay-history)

## simulation.read

- [list_scenarios](https://venue-mind-jet.vercel.app/docs/reference-command-list-scenarios)
- [list_scenario_runs](https://venue-mind-jet.vercel.app/docs/reference-command-list-scenario-runs)
- [get_scenario_result](https://venue-mind-jet.vercel.app/docs/reference-command-get-scenario-result)
- [compare_simulations](https://venue-mind-jet.vercel.app/docs/reference-command-compare-simulations)

## simulation.run

- [run_scenario](https://venue-mind-jet.vercel.app/docs/reference-command-run-scenario)

## export.plan

- [export_simulation](https://venue-mind-jet.vercel.app/docs/reference-command-export-simulation)
- [export_plan](https://venue-mind-jet.vercel.app/docs/reference-command-export-plan)

## proposal.create

- [preview_revision](https://venue-mind-jet.vercel.app/docs/reference-command-preview-revision)
- [preview_template_update](https://venue-mind-jet.vercel.app/docs/reference-command-preview-template-update)
- [create_branch](https://venue-mind-jet.vercel.app/docs/reference-command-create-branch)
- [duplicate_branch](https://venue-mind-jet.vercel.app/docs/reference-command-duplicate-branch)

## proposal.manage

- [apply_edit](https://venue-mind-jet.vercel.app/docs/reference-command-apply-edit)
- [recover_unsynchronized_branch](https://venue-mind-jet.vercel.app/docs/reference-command-recover-unsynchronized-branch)
- [switch_branch](https://venue-mind-jet.vercel.app/docs/reference-command-switch-branch)
- [update_branch_metadata](https://venue-mind-jet.vercel.app/docs/reference-command-update-branch-metadata)
- [archive_branch](https://venue-mind-jet.vercel.app/docs/reference-command-archive-branch)
- [restore_branch](https://venue-mind-jet.vercel.app/docs/reference-command-restore-branch)
- [request_adjustment](https://venue-mind-jet.vercel.app/docs/reference-command-request-adjustment)
- [revert_change](https://venue-mind-jet.vercel.app/docs/reference-command-revert-change)
- [rebase_proposal](https://venue-mind-jet.vercel.app/docs/reference-command-rebase-proposal)
- [update_event_brief](https://venue-mind-jet.vercel.app/docs/reference-command-update-event-brief)

## project.manage

- [record_share_link_created](https://venue-mind-jet.vercel.app/docs/reference-command-record-share-link-created)
- [record_share_link_revoked](https://venue-mind-jet.vercel.app/docs/reference-command-record-share-link-revoked)
- [restore_snapshot](https://venue-mind-jet.vercel.app/docs/reference-command-restore-snapshot)

## proposal.review

- [record_branch_decision](https://venue-mind-jet.vercel.app/docs/reference-command-record-branch-decision)
- [resolve_conflict](https://venue-mind-jet.vercel.app/docs/reference-command-resolve-conflict)

## comment.read

- [list_comments](https://venue-mind-jet.vercel.app/docs/reference-command-list-comments)

## comment.write

- [add_comment](https://venue-mind-jet.vercel.app/docs/reference-command-add-comment)
- [edit_comment](https://venue-mind-jet.vercel.app/docs/reference-command-edit-comment)
- [set_comment_status](https://venue-mind-jet.vercel.app/docs/reference-command-set-comment-status)

## approval.waive

- [waive_warning](https://venue-mind-jet.vercel.app/docs/reference-command-waive-warning)

## lock.manage

- [set_object_lock](https://venue-mind-jet.vercel.app/docs/reference-command-set-object-lock)
- [release_object_lock](https://venue-mind-jet.vercel.app/docs/reference-command-release-object-lock)

## approval.approve

- [approve_proposal](https://venue-mind-jet.vercel.app/docs/reference-command-approve-proposal)

## plan.update

- [undo](https://venue-mind-jet.vercel.app/docs/reference-command-undo)
- [redo](https://venue-mind-jet.vercel.app/docs/reference-command-redo)

---

# Error catalog

Every stable VenueMind error code, user-safe message, and actionable remediation path.

## Published errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| SNAPSHOT_INVALID | Invalid VenueMind snapshot. | Restore a canonical Project schema 10 snapshot containing a Plan, Proposal, and Activity Ledger. |
| PROJECT_SCHEMA_UNSUPPORTED | Project schema is unsupported. | Use a Project schema 10 record. |
| ADJUSTMENT_REQUIRED | Adjustment instruction is required. | Provide a concise operational adjustment. |
| PROPOSAL_NOT_REVIEWABLE | Only a Proposal under review can be changed. | Create or activate a Proposal with review status before changing it. |
| PROPOSAL_MISMATCH | Proposal ID does not match the active Proposal. | Inspect the active Proposal and retry with its stable ID. |
| PROPOSAL_EMPTY | Proposal contains no executable Changes. | Keep accepted truth unchanged; create a Proposal only after at least one planning Change exists. |
| PLANNING_EFFECT_INVALID | Persisted Planning Effect is invalid. | Restore a snapshot whose active and historical Proposal Changes conform to the published Planning Effect schema. |
| BRANCH_NAME_REQUIRED | Proposal Branch name is required. | Provide a non-empty Branch name. |
| BRANCH_NOT_FOUND | Proposal Branch not found. | List Proposal Branches and retry with an existing stable Branch ID. |
| REBASE_CONFLICT | Unresolved Proposal conflicts block rebase. | Resolve blocking conflicts, then retry the rebase. |
| CONFLICT_NOT_FOUND | Proposal conflict not found. | Detect current Proposal conflicts and retry with a stable conflict ID. |
| CONFLICT_RESOLUTION_INVALID | Conflict resolution is not valid for this conflict. | Choose one of the conflict's published resolution options. |
| CONFLICT_HUMAN_REQUIRED | Only a human can resolve a Proposal conflict. | Ask an authorized human operator to choose a conflict outcome in VenueMind Studio. |
| LOCK_CONFLICT | Proposal Change conflicts with an active Lock. | Remove the locked property mutation or have a human release the applicable Project Lock. |
| LOCK_HUMAN_REQUIRED | Only a human can manage Project Locks. | Ask an authorized human operator to add or release the Project Lock. |
| LOCK_OBJECT_NOT_FOUND | Lock target object not found. | Inspect stable object IDs and retry with an object in the active Plan. |
| LOCK_TYPE_INVALID | Lock type is invalid. | Use position, rotation, dimension, deletion, or role. |
| LOCK_NOT_FOUND | Project Lock not found. | Inspect Project Locks and retry with an active stable Lock ID. |
| PLAN_VERSION_CONFLICT | Plan version conflict. | Inspect the latest Plan Version and create or rebase the Proposal before retrying. |
| OPERATIONAL_RESOURCE_FRESHNESS_REQUIRED | Operational resource freshness proof is required. | Resolve the latest trusted operational-resource snapshot for this Project before approving the Proposal. |
| OPERATIONAL_RESOURCE_STALE | Operational resource evidence is stale. | Refresh operational resources, rebuild the substitution Proposal, and validate it again. |
| VALIDATION_FAILED | Proposal validation failed. | Resolve every hard Constraint failure and validate again. |
| WARNING_WAIVER_REQUIRED | Proposal has warnings that require a human Warning Waiver. | Have a human record a reason-coded waiver for every open warning. |
| EMERGENCY_REVIEW_REQUIRED | Emergency Plan Change requires an authorized human Emergency Review. | Supply a reviewer ID, authorized reviewer role, and explicit assumption acceptance in VenueMind Studio. |
| EMERGENCY_REVIEW_UNAUTHORIZED | Emergency reviewer role is not authorized. | Use a reviewer assigned to one of the Emergency Plan's authorized reviewer roles. |
| WAIVER_HUMAN_REQUIRED | Only a human can create a Warning Waiver. | Ask an authorized human operator to record the disposition in VenueMind Studio. |
| WAIVER_AUTHOR_REQUIRED | Warning Waiver requires an author ID. | Supply the authenticated or local operator identity. |
| WAIVER_REASON_INVALID | Warning Waiver requires a supported reason code. | Choose one reason code from the Warning Waiver contract. |
| WARNING_NOT_WAIVABLE | Constraint does not have a waivable warning. | Validate again and select an open warning Constraint. |
| WARNING_ALREADY_WAIVED | Warning is already waived. | Use the existing Warning Waiver or revise the Proposal before recording another disposition. |
| CONSTRAINT_NOT_FOUND | Constraint not found. | Inspect the Plan and retry with an existing stable Constraint ID. |
| CONSTRAINT_INVALID | Constraint metadata is invalid. | Conform the Constraint to the published schema and retry. |
| CONSTRAINT_DUPLICATE | Constraint ID is duplicated. | Assign a unique stable ID to every Constraint. |
| CONSTRAINT_EVIDENCE_INVALID | Constraint evidence is invalid. | Provide numeric evidence and threshold values required by the evaluator. |
| CONSTRAINT_EVALUATOR_UNSUPPORTED | Constraint evaluator is not supported. | Use an evaluator published in the Venue Constraint schema. |
| GEOMETRY_INVALID | Spatial geometry is invalid. | Correct the reported boundary, Footprint, unit, or operational metadata and validate again. |
| SPATIAL_CHANGE_TARGET_MISSING | Spatial Change targets a missing object. | Inspect stable object IDs and rebuild the Change against the active Plan. |
| SPATIAL_CHANGE_TARGET_EXISTS | Spatial Change would reuse an existing object ID. | Create a new Project-scoped stable object ID and retry the placement. |
| SPATIAL_CHANGE_UNSUPPORTED | Spatial Change operation is not supported. | Use a published spatial Change operation. |
| TEMPLATE_VERSION_NOT_FOUND | Template version not found. | List the template catalog and select a published template ID and version. |
| TEMPLATE_SCHEMA_UNSUPPORTED | Template schema version is not supported. | Migrate the template document with a published migration path. |
| TEMPLATE_BINDING_NOT_FOUND | Project is not bound to this template. | Inspect the Project Template Binding and retry with its Room Template ID. |
| TEMPLATE_VERSION_CURRENT | Project already uses this template version. | Select a newer published Room Template version. |
| COMMENT_INVALID | Comment metadata is invalid. | Provide a non-empty comment body, supported status, and published fields. |
| COMMENT_ANCHOR_INVALID | Comment anchor does not resolve to an immutable VenueMind subject. | Inspect stable Project, Plan Version, Proposal, Change, Constraint, or coordinate identifiers and retry. |
| COMMENT_AUTHOR_REQUIRED | Comment action requires an author ID. | Supply the authenticated or local author identity. |
| COMMENT_NOT_FOUND | Comment not found. | List comments and retry with an existing stable Comment ID. |
| PROJECT_NOT_FOUND | Project not found. | List Projects and retry with an existing stable Project ID. |
| PROJECT_TOOL_UNAVAILABLE | Project tools are unavailable in this session. | Open VenueMind from a Project-aware host and retry the Project operation. |
| OBJECT_NOT_FOUND | Venue object not found. | Search objects and retry with an existing stable object ID. |
| VALIDATION_NOT_FOUND | Validation result not found. | Validate the current Proposal and retry with its Validation ID. |
| SCENARIO_RUN_NOT_FOUND | Scenario Run not found. | List Scenario Runs and retry with an existing stable Run ID. |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| RESOURCE_LIMIT_EXCEEDED | Product resource limit exceeded. | Reduce the bounded collection, geometry complexity, nesting depth, or payload size and retry. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| LEDGER_INTEGRITY_FAILED | Activity Ledger integrity failed. | Restore an untampered snapshot or recover the last verified Project record. |
| RUNBOOK_SCHEDULE_REQUIRED | Event Day Runbook requires an accepted canonical schedule. | Set and approve an Event Brief schedule with canonical start, end, and timezone values. |
| RUNBOOK_DEFINITION_INVALID | Event Day Runbook definition is invalid. | Correct the reported phase, task, owner, dependency, or accepted-source reference. |
| RUNBOOK_TASK_NOT_FOUND | Runbook task not found. | Inspect the active Runbook Version and retry with a stable task ID. |
| RUNBOOK_TASK_REVISION_CONFLICT | Runbook task revision conflict. | Refresh the task projection, review the accepted transition, and retry only if another transition is still required. |
| RUNBOOK_TRANSITION_INVALID | Runbook task transition is invalid. | Use a published task transition and supply a reason-coded human reopen for terminal work. |
| RUNBOOK_DEPENDENCIES_INCOMPLETE | Runbook task dependencies are incomplete. | Complete every dependency before starting this task. |
| RUNBOOK_EVIDENCE_REQUIRED | Runbook task evidence is incomplete. | Attach every required structured evidence code before completing the task. |
| OCCUPANCY_BASELINE_INVALID | Live Occupancy baseline is invalid. | Create the monitor from one active Event Day Runbook with canonical Plan capacity and event-target evidence. |
| OCCUPANCY_SIGNAL_INVALID | Aggregate Occupancy Signal is invalid. | Send one bounded aggregate-only signal for the check-in total, venue, or a stable Occupancy Zone. |
| OCCUPANCY_PRIVACY_REJECTED | Occupancy input contains prohibited person-level data. | Remove identities, contacts, ticket tokens, device identifiers, and individual event records before ingestion. |
| OCCUPANCY_SIGNAL_OUT_OF_ORDER | Occupancy Signal is older than the accepted source state. | Refresh the source cursor and send a newer source version and observed instant. |
| OCCUPANCY_REVISION_CONFLICT | Live Occupancy monitor revision conflict. | Refresh the monitor and retry only if the aggregate transition is still required. |
| OCCUPANCY_ALERT_NOT_FOUND | Occupancy Alert is unavailable. | Refresh the Live Occupancy Monitor and select an active Alert ID. |
| OCCUPANCY_ACKNOWLEDGEMENT_INVALID | Occupancy Alert acknowledgement is invalid. | Use an authenticated human operator, an active Alert ID, and one structured reason code. |
| OCCUPANCY_LEDGER_INTEGRITY_FAILED | Occupancy Monitor Ledger integrity failed. | Restore the last verified monitor state before inspection or export. |
| OCCUPANCY_MONITOR_NOT_FOUND | Live Occupancy Monitor is unavailable. | Create the monitor from the active Event Day Runbook before inspecting or changing occupancy. |
| OCCUPANCY_TOOL_UNAVAILABLE | Live Occupancy tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Live Occupancy operations enabled. |
| INCIDENT_BASELINE_INVALID | Incident Register baseline is invalid. | Create the register from one active Event Day Runbook with its frozen accepted Plan and Emergency Plan evidence. |
| INCIDENT_REGISTER_NOT_FOUND | Incident Register is unavailable. | Create the register from the active Event Day Runbook before inspecting or reporting incidents. |
| INCIDENT_NOT_FOUND | Operational Incident is unavailable. | Inspect the Incident Register and retry with an existing stable Incident ID. |
| INCIDENT_ID_CONFLICT | Operational Incident ID conflicts with an existing record. | Use the original semantic report or generate a new stable Incident ID. |
| INCIDENT_INVALID | Operational Incident input is invalid. | Use the published severity, category, owner, reason, reference, and transition fields. |
| INCIDENT_PRIVACY_REJECTED | Incident input contains prohibited person-level data. | Remove identities, contacts, ticket, device, attendee, medical, and free-form person records. |
| INCIDENT_LOCATION_INVALID | Incident Location Context is invalid. | Anchor the incident to one object or in-room coordinate in the frozen accepted Plan. |
| INCIDENT_REVISION_CONFLICT | Operational Incident revision conflict. | Refresh the incident and retry only if the transition is still required. |
| INCIDENT_TRANSITION_INVALID | Operational Incident transition is invalid. | Use a published state transition and supply any required structured reason or resolution code. |
| INCIDENT_OWNER_INVALID | Incident owner evidence is invalid. | Assign one structured Runbook role, shift, Staff Post, or assignment reference. |
| INCIDENT_ACKNOWLEDGEMENT_INVALID | Incident acknowledgement is invalid. | Use an authenticated human operator and an unacknowledged open incident. |
| INCIDENT_ESCALATION_INVALID | Incident escalation is invalid. | Increase the structured escalation level without skipping required authority. |
| INCIDENT_HANDOFF_INVALID | Incident handoff is invalid. | Use the current owner, a different structured next owner, and bounded open action codes. |
| INCIDENT_EMERGENCY_ACTION_INVALID | Emergency Action Invocation is invalid. | Use an approved action, scenario, and object reference from the frozen Emergency Plan. |
| INCIDENT_HUMAN_REQUIRED | This Incident transition requires a human operator. | Ask an authorized human operator to acknowledge, manage, hand off, or record an emergency action. |
| INCIDENT_LEDGER_INTEGRITY_FAILED | Incident Register ledger integrity failed. | Restore the last verified register state before inspection or export. |
| INCIDENT_TOOL_UNAVAILABLE | Incident tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Incident Register operations enabled. |
| DEVIATION_BASELINE_INVALID | Live Plan Deviation baseline is invalid. | Create the register from one active Event Day Runbook with its frozen accepted Plan and Validation evidence. |
| DEVIATION_REGISTER_NOT_FOUND | Live Plan Deviation Register is unavailable. | Create the register from the active Event Day Runbook before inspecting or recording deviations. |
| DEVIATION_TOOL_UNAVAILABLE | Live Plan Deviation tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Live Plan Deviation operations enabled. |
| DEVIATION_NOT_FOUND | Live Plan Deviation is unavailable. | Inspect the register and retry with an existing stable Deviation ID. |
| DEVIATION_ID_CONFLICT | Live Plan Deviation ID conflicts with an existing record. | Use the original semantic command or generate a new stable Deviation ID. |
| DEVIATION_INVALID | Live Plan Deviation input is invalid. | Supply a reason code, disposition, exact affected objects, location, and executable spatial Change. |
| DEVIATION_LOCATION_INVALID | Live Plan Deviation Location Context is invalid. | Anchor the deviation to one object or in-room coordinate in the frozen accepted Plan. |
| DEVIATION_REVISION_CONFLICT | Live Plan Deviation revision conflict. | Refresh the deviation projection and retry only if the transition is still required. |
| DEVIATION_REGISTER_REVISION_CONFLICT | Live Plan Deviation Register revision conflict. | Refresh the active overlay and retry against its current revision. |
| DEVIATION_TRANSITION_INVALID | Live Plan Deviation transition is invalid. | Use a published active-to-ended transition with one structured reason code. |
| DEVIATION_CONSTRAINT_UNAVAILABLE | Requested live Constraint is unavailable. | Inspect the frozen Plan Constraint registry and submit only available stable Constraint IDs. |
| DEVIATION_POST_EVENT_PROPOSAL_EMPTY | Post-event Proposal has no revision-candidate deviations. | Select at least one revision-candidate Deviation that has not already been recommended. |
| DEVIATION_LEDGER_INTEGRITY_FAILED | Live Plan Deviation ledger integrity failed. | Restore the last verified register state before inspection, recommendation, or export. |
| POST_EVENT_BASELINE_INVALID | Post-event Review baseline is invalid. | Bind the review to matching, integrity-verified Runbook, Plan, occupancy, incident, deviation, and Scenario evidence. |
| POST_EVENT_REVIEW_NOT_FOUND | Post-event Review is unavailable. | Create or restore the Runbook-bound Post-event Review before issuing this command. |
| POST_EVENT_TOOL_UNAVAILABLE | Post-event Review tooling is unavailable. | Connect a Post-event Review operation adapter before calling this tool. |
| POST_EVENT_INVALID | Post-event Review input is invalid. | Supply published metric, scope, evidence, lesson, and Proposal fields with stable identifiers. |
| POST_EVENT_REVISION_CONFLICT | Post-event Review revision conflict. | Refresh the Post-event Review and retry only if the transition is still required. |
| POST_EVENT_EVIDENCE_INVALID | Post-event evidence does not match the frozen baseline. | Reference an exact evidence ID and fingerprint frozen into this Post-event Review. |
| POST_EVENT_OBSERVATION_CONFLICT | An Observation already exists for this predicted outcome. | Use the accepted Observation or create a distinct metric scope before recording another outcome. |
| POST_EVENT_COMPARISON_NOT_FOUND | Post-event Comparison is unavailable. | Inspect the frozen Predictions and retry with an existing comparison key. |
| POST_EVENT_LESSON_NOT_FOUND | Post-event Lesson is unavailable. | Inspect the Post-event Review and retry with an existing stable Lesson ID. |
| POST_EVENT_TEMPLATE_PROPOSAL_NOT_FOUND | Template Improvement Proposal is unavailable. | Inspect the Post-event Review and retry with an existing stable Proposal ID. |
| POST_EVENT_TEMPLATE_PROPOSAL_INVALID | Template Improvement Proposal is invalid. | Trace every Change through a structured Lesson to an observed event-day outcome and a frozen template binding. |
| POST_EVENT_HUMAN_REQUIRED | This Post-event Review transition requires a human reviewer. | Ask an authorized human to approve or reject the Template Improvement Proposal. |
| POST_EVENT_REVIEW_TRANSITION_INVALID | Post-event Review transition is invalid. | Use a published pending-to-approved or pending-to-rejected recommendation transition. |
| POST_EVENT_LEDGER_INTEGRITY_FAILED | Post-event Review ledger integrity failed. | Restore the last verified Post-event Review before inspection or export. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Error envelope

```json
{
  "error": {
    "code": "PLAN_VERSION_CONFLICT",
    "message": "Plan version conflict.",
    "remediation": "Inspect the latest Plan Version and create or rebase the Proposal before retrying.",
    "details": {
      "expectedVersion": "3.3",
      "receivedVersion": "3.2"
    }
  }
}
```

- [Venue error schema](https://venue-mind-jet.vercel.app/schemas/venue-error.schema.json)

---

# Constraint and evidence reference

All deterministic Constraint evaluators, operational categories, evidence families, and normalized units.

## Evaluators

| Evaluator | Category | Evidence | Units |
| --- | --- | --- | --- |
| minimum_metric | configured metric | actual, threshold, comparator | Constraint parameter unit |
| maximum_metric | configured metric | actual, threshold, comparator | Constraint parameter unit |
| protected_objects_unchanged | protection | changed and protected object IDs | count |
| accessible_route_graph | accessibility | reachable destinations, path widths, route edges | m, count |
| turning_clearance | accessibility | destination clearance diameters | m |
| accessible_seating | accessibility | seat count, section distribution, companion adjacency | seats, sections, ratio |
| accessible_seating_sightlines | accessibility | sampled accessible-seat rays and section coverage | ratio, m, degrees |
| door_clearance | accessibility | door clear width and obstruction IDs | m, count |
| temporary_ramp | accessibility | rise, run, slope, width, landing, edge protection, handrails | ratio, m, boolean |
| occupancy_capacity | capacity | placed, usable-area, section, zone, venue, and operational load | attendees, m², ratio |
| circulation_graph | circulation | paths, clear widths, exit approaches, bottlenecks, phase loads | m, persons, persons/min, index |
| sightline_raycast | sightlines | sampled rays, viewing angles, distance, obstruction IDs | ratio, m, degrees |
| production_readiness | production | throw, visibility, sound, cameras, control, cable, power, rigging, inventory | m, degrees, W, kg, count |
| catering_readiness | catering | phase capacity, queue spill, separation, access, replenishment, inventory | persons/min, persons, m, ratio, count |
| emergency_readiness | emergency | exit capacity, routes, assembly, responder access, equipment, backup power | persons, persons/min, m, min, count |

## Outcomes and authority

- pass — measured evidence meets the threshold.
- warning — reviewable evidence requires an explicit human Warning Waiver when waivable.
- fail — a hard safety or operational threshold blocks Approval.
- not-applicable — the evaluator records why the current scope has no applicable target.
- Simulation Results remain separate from deterministic Constraint evidence.

## Schemas

- [Constraint schema](https://venue-mind-jet.vercel.app/schemas/venue-constraint.schema.json)
- [Validation result schema](https://venue-mind-jet.vercel.app/schemas/validation-result.schema.json)
- [Spatial evidence schema](https://venue-mind-jet.vercel.app/schemas/spatial-evidence.schema.json)

---

# Activity Ledger events

The complete event vocabulary for human, agent, system, planning, review, simulation, and integrity activity.

## Event types

| Event | Category | Stable references |
| --- | --- | --- |
| plan.opened | plan | planId, version, planFingerprint |
| authorization.denied | security | policyDecisionId, permission, reason |
| proposal.previewed | proposal | proposalId, branchId, changeIds[] |
| template.update_previewed | proposal | proposalId, branchId, templateId, changeIds[] |
| proposal.adjustment_requested | proposal | proposalId |
| proposal.change_reverted | proposal | proposalId, changeId |
| proposal.branch_created | branch | branchId, proposalId |
| proposal.branch_metadata_updated | branch | branchId |
| proposal.branch_recovered | branch | branchId, proposalId, sourceProposalId |
| share_link.created | sharing | shareLinkId, proposalId |
| share_link.revoked | sharing | shareLinkId |
| proposal.branch_duplicated | branch | branchId, sourceBranchId, sourceProposalId, proposalId |
| proposal.branch_archived | branch | branchId |
| proposal.branch_restored | branch | branchId |
| proposal.branch_decision_recorded | branch | decisionId, chosenBranchId, rejectedBranchIds[] |
| proposal.branch_selected | branch | branchId, proposalId |
| proposal.rebased | conflict | branchId, proposalId, fromVersion, toVersion, conflictIds[] |
| proposal.conflict_resolved | conflict | branchId, proposalId, conflictId, resolutionId |
| proposal.lock_rejected | security | proposalId, changeIds[], lockIds[] |
| proposal.approved | approval | proposalId, branchId, validationId, fromVersion, toVersion, planFingerprint |
| editor.change_applied | editor | proposalId, changeId, objectIds[] |
| editor.change_undone | editor | proposalId, changeId |
| editor.change_redone | editor | proposalId, changeId |
| brief.updated | brief | briefId, requirementIds[] |
| comment.created | comment | commentId, anchor |
| comment.edited | comment | commentId, editNumber |
| comment.resolved | comment | commentId |
| comment.reopened | comment | commentId |
| object.lock_added | lock | lockId, objectId |
| object.lock_released | lock | lockId, objectId |
| constraint.warning_waived | approval | waiverId, constraintId, proposalId, validationInputFingerprint |
| plan.undone | plan | toVersion, planFingerprint |
| plan.redone | plan | toVersion, planFingerprint |
| simulation.started | simulation | runId, scenarioId, branchId, inputFingerprint |
| simulation.completed | simulation | runId, scenarioId, branchId, inputFingerprint |
| simulation.cancelled | simulation | runId, scenarioId, branchId, inputFingerprint |

## Integrity and replay

- Every entry carries a sequence, previous hash, content hash, actor identity, source, session, and timestamp.
- Load and export verify the complete chain from genesis.
- Replay applies accepted Plan transitions and compares the reconstructed fingerprint with stored current truth.
- A failed chain or Lock-protected replay is blocking.

- [Activity Ledger schema](https://venue-mind-jet.vercel.app/schemas/activity-ledger.schema.json)
- [Audit tutorial](https://venue-mind-jet.vercel.app/docs/tutorial-audit-plan)

---

# Plan and Proposal lifecycle

Branch, rebase, conflict, Approval, adjustment, undo, redo, and replay behavior at the shared command boundary.

## Accepted truth

- One immutable Plan Version is accepted truth.
- A Proposal names exactly one base Plan Version and contains stable Changes.
- Branches isolate competing Proposal revisions; switching a Branch never changes the accepted Plan.

## Rebase and conflicts

- Conflict detection covers stale base, deleted dependency, Lock, same-object edit, geometry overlap, and Constraint regression.
- Rebase retains unchanged Change IDs and creates new IDs only for transformed Changes.
- Human conflict decisions use only the published outcomes for each conflict and trigger fresh Validation.

## Approval

- Approval requires a matching Proposal ID and base version, passing hard Constraints, warning dispositions, and any required Emergency Review.
- Approval is human-only and creates exactly one immutable Plan Version plus one ledger transition.
- Agent tools stop at validated human review.

## Undo, redo, and replay

- Proposal editing undo and redo create reviewable Proposal revisions.
- Accepted Plan undo and redo restore immutable prior versions and append ledger transitions.
- Replay reconstructs accepted history without trusting cached summary fields.

## Related contracts

- [Proposal conflicts](https://venue-mind-jet.vercel.app/schemas/proposal-conflicts.schema.json)
- [Proposal comparison](https://venue-mind-jet.vercel.app/schemas/proposal-comparison.schema.json)
- [Command receipt](https://venue-mind-jet.vercel.app/schemas/command-receipt.schema.json)

---

# Persistence and recovery

Remote authority, browser recovery, import safety, soft deletion, normalization, and integrity behavior.

## Storage semantics

| Concern | Behavior |
| --- | --- |
| Authoritative state | The Project repository is authoritative when reachable; every accepted snapshot is stored with schema version 10. |
| Recovery cache | The browser writes a Project-scoped local copy before each remote save and reports LOCAL when the endpoint is unavailable. |
| Record revision | Every authoritative Project record has a server-assigned positive revision and strong ETag. Existing writes require the exact current If-Match value. |
| Reconciliation | Base/local/remote comparison merges independent fields once. Overlapping planning state returns PROJECT_REVISION_CONFLICT and remains unsynchronized. |
| Planning recovery | The local Proposal is retained in Organization-scoped recovery storage and can become an auditable Recovery Branch on current remote truth. |
| Reload | A remote record refreshes the recovery copy; a missing or unavailable endpoint may load the local Project-scoped record. |
| Import | Import is create-only. An existing local or remote Project ID returns PROJECT_ID_CONFLICT. |
| Deletion | Soft deletion records deletedAt and recoveryUntil; restoration remains available for seven days. |
| Integrity | Schema normalization, geometry validation, Lock checks, ledger verification, and replay precede authoritative use. |

## Optimistic concurrency

- Creation requires If-None-Match: *; updates require the exact strong Project ETag in If-Match.
- A stale write returns PROJECT_REVISION_CONFLICT with current record and revision data; it never falls back to a successful LOCAL state.
- Independent fields reconcile through one bounded three-way retry. Overlapping layout state becomes a human-controlled Recovery Branch or yields to REMOTE.

- [Concurrency guide](https://venue-mind-jet.vercel.app/guides/optimistic-concurrency.md)

## Real-time collaboration

- Presence Leases carry User identity, observed Plan Version, and focused stable object for 30 seconds.
- SSE resumes from a durable per-Project cursor and streams Comment, ledger, Proposal, Approval, and record events.
- A missing cursor link emits sync.reset and reloads authoritative Project state through ordinary revision conflict rules.

- [Collaboration guide](https://venue-mind-jet.vercel.app/guides/realtime-collaboration.md)

## Sharing and notifications

- Read-only Share Links expose accepted Plan state; Reviewer Share Links expose one retained Proposal revision.
- Bearer tokens are returned once and persisted only as hashes; durable pending lifecycle states reconcile ledger transitions and fail closed.
- Creation-time preferences control in-app visibility; leased email outbox rows are delivered only after injected-provider success.

- [Sharing guide](https://venue-mind-jet.vercel.app/guides/sharing-and-notifications.md)

## Registration and ticketing

- Registration Snapshots contain aggregate Ticket Class totals, forecasts, zone allocations, accessibility requirements, and optional event-day Check-in Aggregates.
- Recursive privacy screening runs before checksums, duplicate storage, dead letters, and atomic webhook replay storage.
- Ticket Occupancy Reconciliation compares provider aggregates with repository-derived Project and Plan requirements without creating planning effects.

- [Registration guide](https://venue-mind-jet.vercel.app/guides/registration-and-ticketing.md)

## Operational resources

- Operational Resource Snapshots reconcile live inventory, AV, power, catering, and staffing supply against one exact accepted Plan and trusted event window.
- Unavailable, double-booked, insufficient, or incompatible bindings produce deterministic conflicts and non-applied compatible options.
- Only an explicitly selected option becomes a reviewable Resource Binding Proposal; accepted Plan truth remains unchanged until human Approval.

- [Operational resource guide](https://venue-mind-jet.vercel.app/guides/operational-resources.md)
- [Operational snapshot ADR](https://venue-mind-jet.vercel.app/guides/adr/0025-operational-resource-snapshots-are-not-plan-truth.md)

## TypeScript SDK

- @venuemind/sdk publishes canonical schema-derived types and a typed client over the same venue.* tool seam used by WebMCP and MCP.
- Adapter helpers preserve one runtime-owned idempotency and retry layer, bounded pagination, raw-byte webhook verification, and review-only planning imports.
- The client intentionally exposes no Approval operation and no whole-snapshot write shortcut.

- [SDK guide](https://venue-mind-jet.vercel.app/guides/sdk.md)
- [Adapter authoring](https://venue-mind-jet.vercel.app/guides/adapter-authoring.md)
- [Generated SDK API](https://venue-mind-jet.vercel.app/sdk-api.json)
- [Packed SDK example](https://venue-mind-jet.vercel.app/examples/client/sdk-adapter/src/index.ts)

## Recovery workflow

- [Offline recovery tutorial](https://venue-mind-jet.vercel.app/docs/tutorial-offline-recovery)
- [Interchange tutorial](https://venue-mind-jet.vercel.app/docs/tutorial-import-export)
- [Project record schema](https://venue-mind-jet.vercel.app/schemas/project-record.schema.json)

---

# Authorization reference

Human Roles, Agent Grant scopes, service-boundary permissions, and Approval authority from the published authorization policy.

## Human Roles

| Role | Permissions |
| --- | --- |
| viewer | project.read, plan.read, proposal.read, comment.read, simulation.read, occupancy.read, incident.read, deviation.read, post-event.read |
| planner | project.read, plan.read, proposal.read, comment.read, simulation.read, occupancy.read, incident.read, deviation.read, post-event.read, proposal.create, proposal.manage, comment.write, simulation.run, occupancy.write, incident.report, incident.manage, deviation.record, deviation.propose, post-event.record, post-event.propose, export.plan |
| reviewer | project.read, plan.read, proposal.read, comment.read, simulation.read, occupancy.read, incident.read, deviation.read, post-event.read, proposal.review, comment.write, incident.export, deviation.export, post-event.review, post-event.export, export.audit, audit.read |
| approver | project.read, plan.read, proposal.read, comment.read, simulation.read, occupancy.read, incident.read, deviation.read, post-event.read, proposal.review, comment.write, incident.export, deviation.export, post-event.review, post-event.export, export.audit, audit.read, approval.approve, approval.waive |
| safety-officer | project.read, plan.read, proposal.read, comment.read, simulation.read, occupancy.read, incident.read, deviation.read, post-event.read, incident.report, incident.manage, incident.emergency-act, incident.export, deviation.record, deviation.export, post-event.record, post-event.review, post-event.export, audit.read |
| venue-administrator | project.read, plan.read, proposal.read, comment.read, simulation.read, occupancy.read, incident.read, deviation.read, post-event.read, proposal.create, proposal.manage, comment.write, simulation.run, occupancy.write, incident.report, incident.manage, deviation.record, deviation.propose, post-event.record, post-event.propose, export.plan, proposal.review, incident.export, deviation.export, post-event.review, post-event.export, export.audit, audit.read, approval.approve, approval.waive, incident.emergency-act, project.manage, plan.update, lock.manage |
| organization-administrator | project.read, project.manage, plan.read, plan.update, proposal.read, proposal.create, proposal.manage, proposal.review, comment.read, comment.write, simulation.read, simulation.run, occupancy.read, occupancy.write, incident.read, incident.report, incident.manage, incident.emergency-act, incident.export, deviation.read, deviation.record, deviation.propose, deviation.export, post-event.read, post-event.record, post-event.propose, post-event.review, post-event.export, export.plan, export.audit, audit.read, approval.approve, approval.waive, lock.manage |

## Agent Grant scopes

| Scope | Permissions |
| --- | --- |
| venue:read | project.read, plan.read, proposal.read, comment.read, simulation.read, occupancy.read, incident.read, deviation.read, post-event.read, audit.read |
| venue:propose | proposal.create, proposal.manage, deviation.propose, post-event.record, post-event.propose |
| venue:comment | comment.read, comment.write |
| venue:simulate | simulation.read, simulation.run |
| venue:operate | occupancy.read, occupancy.write, incident.read, incident.report, deviation.read, deviation.record, post-event.read, post-event.record |
| venue:export | export.plan, export.audit, incident.export, deviation.export, post-event.export |

## Policy decisions

- Agent Grants bind one agent to one Organization and one Project for at most 60 minutes.
- Approval requires one of: approver, venue-administrator, organization-administrator.
- Approval, Warning Waivers, Project Locks, and conflict decisions remain human-only.
- Denied planner commands append sanitized authorization.denied evidence without retaining protected input payloads.

- [Published authorization policy](https://venue-mind-jet.vercel.app/authorization-policy.json)
- [Agent Grant schema](https://venue-mind-jet.vercel.app/schemas/agent-grant.schema.json)
- [Authentication and tenancy](https://venue-mind-jet.vercel.app/guides/authentication-and-tenancy.md)

---

# Compatibility and deprecation

Current public versions, comparison rules, migration guarantees, and the policy for changing stable surfaces.

## Compatibility matrix

| Surface | Current | Compatibility rule |
| --- | --- | --- |
| Project record | 10 | Exact current schema only; older records are rejected. |
| Spatial geometry | 1 | Canonical metres with millimetre serialization precision. |
| Venue Template catalog | 1 | Exact current schema only; older template documents are rejected. |
| Validation engine | 2.7.0 | Comparable only when engine and immutable input fingerprints match. |
| Simulation engine | 1.2.1 | Comparison requires matching engine and Scenario definition fingerprints. |
| Activity Ledger | 1 | Hash-chain verification is required on load, replay, and export. |
| Tool contracts | 1.6.0 | Shared by WebMCP, standalone MCP, schemas, examples, and skills. |
| MCP server | 0.7.0 | Preferred protocol 2026-07-28; minimum 2025-03-26. |
| TypeScript SDK | 0.1.0 | ESM-only on Node.js 22+; SDK SemVer remains independent of tool, adapter, and Project schema versions. |
| Agent skills | 1.4.0 | Targets tool contract 1.6.0. |
| Interchange Package | 1 + Project schema 10 | Create-only import with exact schema, checksum, geometry, Locks, ledger, and replay preflight. |

## Deprecation policy

| Change | Policy |
| --- | --- |
| Breaking contract or schema | Publish a new major contract or schema version with an explicit migration path; retain the prior published artifact. |
| Additive field or operation | Publish a minor tool-contract release and update generated schemas, examples, skills, and changelog together. |
| Clarification or remediation text | Publish a patch release when runtime behavior is unchanged. |
| Deprecated tool or field | Mark it in machine-readable metadata and the changelog for at least one full minor release before removal. |
| Stable identifier | Preserve it across revisions and migrations; create a new ID only when identity or transformed lineage changes. |

## Current status

- No public tool, command, schema field, or skill is currently deprecated.
- Every future deprecation is machine-readable, visible in the changelog, and covered by contract tests.

---

# venue.list_projects

List durable VenueMind Projects available to the current authenticated or local host scope without returning full snapshots.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

Bounded Project summaries visible to the current Project-scoped grant.

| Output field | Meaning |
| --- | --- |
| source | Published result field. |
| projects[] | Published result field. |

- Stable ID: projects[].id
- Stable ID: projects[].activePlanId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| PROJECT_TOOL_UNAVAILABLE | Project tools are unavailable in this session. | Open VenueMind from a Project-aware host and retry the Project operation. |
| PROJECT_NOT_FOUND | Project not found. | List Projects and retry with an existing stable Project ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.open_project

Select one durable Project as the active Project for this agent session. This never changes accepted Plan truth.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| projectId | string | yes | — | min 1 chars | Published contract field. |

```json
{
  "projectId": "project-summit-forward"
}
```

## Output

Selects one durable Project for subsequent tool calls.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| project | Published result field. |

- Stable ID: project.id
- Stable ID: project.activePlanId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| PROJECT_TOOL_UNAVAILABLE | Project tools are unavailable in this session. | Open VenueMind from a Project-aware host and retry the Project operation. |
| PROJECT_NOT_FOUND | Project not found. | List Projects and retry with an existing stable Project ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.inspect_templates

Read versioned Venue, Room, and Inventory Item Templates, including starter room types and current inventory availability metadata.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

Versioned reusable venue, room, and inventory definitions.

| Output field | Meaning |
| --- | --- |
| schemaVersion | Published result field. |
| venueTemplates[] | Published result field. |
| roomTemplates[] | Published result field. |
| inventoryTemplates[] | Published result field. |

- Stable ID: venueTemplates[].id
- Stable ID: roomTemplates[].id
- Stable ID: inventoryTemplates[].id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.get_project_brief

Read the structured Event Brief, stable Requirement IDs, priorities, ownership, ambiguity flags, and accepted-Plan versus active-Proposal coverage.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

The active Event Brief and exact requirement-to-evidence coverage.

| Output field | Meaning |
| --- | --- |
| id | Stable identifier. |
| eventName | Published result field. |
| date | Published result field. |
| timezone | Published result field. |
| venueId | Published result field. |
| roomId | Published result field. |
| attendeeTarget | Published result field. |
| occupancyMode | Published result field. |
| schedule | Published result field. |
| planningEffectBindings | Published result field. |
| requirements[] | Published result field. |
| coverage | Published result field. |
| coverageMatrix | Published result field. |
| ambiguities[] | Published result field. |
| summary | Published result field. |

- Stable ID: id
- Stable ID: planningEffectBindings.*.targetRequirementId
- Stable ID: planningEffectBindings.*.affectedConstraintIds[]
- Stable ID: requirements[].id
- Stable ID: coverageMatrix[].constraintId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.list_constraints

List versioned Constraints with current evaluation status, thresholds, policy sources, and remediation metadata.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| category | string | no | — | min 1 chars | Published contract field. |
| severity | error \| warning \| preference | no | — | — | Published contract field. |

```json
{}
```

## Output

Filtered canonical Constraint records.

| Output field | Meaning |
| --- | --- |
| result[] | Published result field. |

- Stable ID: result[].id
- Stable ID: result[].checkId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.inspect_layout

Read the active venue plan, stable object IDs, locked objects, constraints, metrics, proposal state, and branch summaries.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 1048576 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

The bounded accepted Plan and visible Proposal inspection used to start every planning workflow.

| Output field | Meaning |
| --- | --- |
| planId | Stable identifier. |
| planVersion | Published result field. |
| event | Published result field. |
| venue | Published result field. |
| templateBindings | Published result field. |
| inventoryAvailability | Published result field. |
| occupancy | Published result field. |
| staffing | Published result field. |
| productionPolicy | Published result field. |
| cateringPolicy | Published result field. |
| emergencyPlan | Published result field. |
| emergencyReviews | Published result field. |
| spatial | Published result field. |
| spatialObjects[] | Published result field. |
| lockedObjects[] | Published result field. |
| projectLocks[] | Published result field. |
| comments[] | Published result field. |
| scenarios[] | Published result field. |
| scenarioRuns[] | Published result field. |
| constraints[] | Published result field. |
| metrics | Published result field. |
| proposal | Published result field. |
| activeBranchId | Stable identifier. |
| proposalBranches[] | Published result field. |
| commandReceiptCount | Published result field. |
| ledgerIntegrity | Published result field. |
| brief | Published result field. |

- Stable ID: planId
- Stable ID: spatialObjects[].id
- Stable ID: constraints[].id
- Stable ID: proposal.id
- Stable ID: proposal.changes[].id
- Stable ID: activeBranchId
- Stable ID: proposalBranches[].id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.get_object

Read one stable object with scoped accepted or Proposal geometry, operational metadata, and effective Locks.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| objectId | string | yes | — | min 1 chars | Stable Project-scoped object ID. |
| scope | accepted \| proposal | no | "proposal" | — | Accepted Plan or visible Proposal candidate. |

```json
{
  "objectId": "obj-av-desk",
  "scope": "proposal"
}
```

## Output

One accepted or Proposal candidate object with geometry and metadata.

| Output field | Meaning |
| --- | --- |
| scope | Published result field. |
| planId | Stable identifier. |
| planVersion | Published result field. |
| proposalId | Stable identifier. |
| object | Published result field. |

- Stable ID: planId
- Stable ID: proposalId
- Stable ID: object.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| OBJECT_NOT_FOUND | Venue object not found. | Search objects and retry with an existing stable object ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.search_objects

Search stable venue objects with bounded text, kind, layer, Lock, and accepted-versus-Proposal filters.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| query | string | no | — | max 200 chars | Published contract field. |
| kinds | string[] | no | — | max 10 items; unique items | Published contract field. |
| layers | architecture \| furniture \| access \| production \| catering \| safety \| annotations[] | no | — | max 7 items; unique items | Published contract field. |
| locked | boolean | no | — | — | Published contract field. |
| scope | accepted \| proposal | no | "proposal" | — | Accepted Plan or visible Proposal candidate. |
| limit | integer | no | 20 | ≥ 1; ≤ 50 | Maximum number of returned records. |

```json
{
  "query": "route",
  "layers": [
    "access"
  ],
  "limit": 10
}
```

## Output

A bounded object search result.

| Output field | Meaning |
| --- | --- |
| scope | Published result field. |
| planId | Stable identifier. |
| planVersion | Published result field. |
| proposalId | Stable identifier. |
| total | Published result field. |
| limit | Published result field. |
| truncated | Published result field. |
| objects[] | Published result field. |

- Stable ID: planId
- Stable ID: proposalId
- Stable ID: objects[].id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.preview_revision

Create a non-destructive venue revision preview. The result remains pending until a human approves it in VenueMind.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:propose.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| goal | string | yes | — | min 1 chars | The spatial outcome the revision should achieve. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "goal": "Reduce entrance congestion",
  "idempotencyKey": "example-preview-001",
  "correlationId": "example-001"
}
```

## Output

A non-destructive Proposal revision; accepted Plan truth is unchanged.

| Output field | Meaning |
| --- | --- |
| proposalId | Stable identifier. |
| baseVersion | Published result field. |
| revision | Published result field. |
| changedItems | Published result field. |
| requiresHumanApproval | Published result field. |
| receipt | Published result field. |

- Stable ID: proposalId
- Stable ID: receipt.id
- Stable ID: receipt.resultIds.changeId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.preview_template_update

Create a non-destructive Proposal containing safe Room Template differences while preserving Project Overrides. Human Approval is always required.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:propose.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| templateId | string | yes | — | min 1 chars | Published contract field. |
| toVersion | string | yes | — | pattern ^[0-9]+\.[0-9]+\.[0-9]+$ | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "templateId": "room-template-harborview-main-hall",
  "toVersion": "1.1.0",
  "idempotencyKey": "example-template-001"
}
```

## Output

A reviewable Room Template update Proposal.

| Output field | Meaning |
| --- | --- |
| proposalId | Stable identifier. |
| branchId | Stable identifier. |
| baseVersion | Published result field. |
| templateId | Stable identifier. |
| fromVersion | Published result field. |
| toVersion | Published result field. |
| changedItems | Published result field. |
| preservedOverrides | Published result field. |
| requiresHumanApproval | Published result field. |
| receipt | Published result field. |

- Stable ID: proposalId
- Stable ID: branchId
- Stable ID: templateId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.apply_edit

Create one non-destructive, undoable spatial editing Change for placement, transform, duplication, alignment, distribution, grouping, zoning, paste, or deletion.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:propose.
- State-affecting operation.
- Input limit 262144 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| edit | object \| object \| object \| object \| object \| object \| object \| object \| object \| object \| object \| object \| object \| object | yes | — | — | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "edit": {
    "operation": "move",
    "objectIds": [
      "obj-av-desk"
    ],
    "delta": {
      "x": 1,
      "y": 0
    }
  },
  "idempotencyKey": "example-edit-001"
}
```

## Output

One Proposal-safe editing operation.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| proposalId | Stable identifier. |
| changeId | Stable identifier. |
| operation | Published result field. |
| changedItems | Published result field. |
| requiresHumanApproval | Published result field. |
| receipt | Published result field. |

- Stable ID: proposalId
- Stable ID: changeId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.measure_objects

Measure deterministic center points and pairwise distances for selected Project objects.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| objectIds | string[] | yes | — | min 1 items; unique items | Published contract field. |

```json
{
  "objectIds": [
    "obj-stage-west",
    "obj-av-desk"
  ]
}
```

## Output

Read-only centre and distance measurements in canonical metres.

| Output field | Meaning |
| --- | --- |
| objectIds[] | Stable identifier. |
| centers | Published result field. |
| distances[] | Published result field. |

- Stable ID: objectIds[]
- Stable ID: distances[].fromObjectId
- Stable ID: distances[].toObjectId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.validate_layout

Validate the visible proposal or committed plan against locks, accessibility, capacity, sightlines, and circulation constraints.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 1048576 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

Deterministic Validation for one exact immutable input fingerprint, including typed evidence-family invalidation evidence.

| Output field | Meaning |
| --- | --- |
| validationId | Stable identifier. |
| inputFingerprint | Published result field. |
| engineVersion | Published result field. |
| evaluatedPlanVersion | Published result field. |
| evaluatedProposalId | Stable identifier. |
| status | Published result field. |
| checks[] | Published result field. |
| candidateMetrics | Published result field. |
| candidateGeometryFingerprint | Published result field. |
| spatialEvidence | Published result field. |
| productionEvidence | Published result field. |
| cateringEvidence | Published result field. |
| emergencyEvidence | Published result field. |
| evidenceFamilyFingerprints | Published result field. |
| planningEvidenceInvalidations | Published result field. |
| emergencyReviewRequired | Published result field. |
| emergencyChangedObjectIds[] | Stable identifier. |
| authorizedEmergencyReviewerRoles[] | Published result field. |
| blockingIssues | Published result field. |
| waivedWarnings | Published result field. |
| unwaivedWarnings | Published result field. |
| unresolvedIssues | Published result field. |
| inventoryAvailability | Published result field. |
| inventoryWarnings | Published result field. |

- Stable ID: validationId
- Stable ID: evaluatedProposalId
- Stable ID: checks[].constraintId
- Stable ID: checks[].evidenceId
- Stable ID: emergencyChangedObjectIds[]

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.get_validation_evidence

Read deterministic evidence for the current Validation, optionally restricted to stable Constraint IDs.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 1048576 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| validationId | string | no | — | min 1 chars | Published contract field. |
| constraintIds | string[] | no | — | max 50 items; unique items | Published contract field. |
| includeSpatialEvidence | boolean | no | true | — | Include bounded spatial evidence in the response. |

```json
{
  "constraintIds": [
    "constraint-accessible-route"
  ],
  "includeSpatialEvidence": true
}
```

## Output

A bounded evidence view of one Validation result and its exact evidence-family invalidations.

| Output field | Meaning |
| --- | --- |
| validationId | Stable identifier. |
| inputFingerprint | Published result field. |
| engineVersion | Published result field. |
| evaluatedPlanVersion | Published result field. |
| evaluatedProposalId | Stable identifier. |
| status | Published result field. |
| unresolvedIssues | Published result field. |
| candidateGeometryFingerprint | Published result field. |
| evidenceFingerprint | Published result field. |
| evidenceFamilyFingerprints | Published result field. |
| planningEvidenceInvalidations | Published result field. |
| checks[] | Published result field. |
| spatialEvidence | Published result field. |
| productionEvidence | Published result field. |
| cateringEvidence | Published result field. |
| emergencyEvidence | Published result field. |

- Stable ID: validationId
- Stable ID: evaluatedProposalId
- Stable ID: checks[].constraintId
- Stable ID: checks[].evidenceId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| VALIDATION_NOT_FOUND | Validation result not found. | Validate the current Proposal and retry with its Validation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.list_proposal_branches

Compare proposal branches by base version, change count, validation status, unresolved issues, and projected metrics.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

Proposal Branch summaries and current revision state.

| Output field | Meaning |
| --- | --- |
| result[] | Published result field. |

- Stable ID: result[].id
- Stable ID: result[].proposalId
- Stable ID: result[].revisionIds[]

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.compare_proposal_branches

Compare two Proposal Branches by spatial object differences, Change membership, projected metrics, and deterministic Constraint improvements or regressions.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| leftBranchId | string | yes | — | min 1 chars | Published contract field. |
| rightBranchId | string | yes | — | min 1 chars | Published contract field. |

```json
{
  "leftBranchId": "branch-balanced",
  "rightBranchId": "branch-access"
}
```

## Output

Deterministic spatial and operational comparison of two Branches.

| Output field | Meaning |
| --- | --- |
| comparisonId | Stable identifier. |
| planVersion | Published result field. |
| left | Published result field. |
| right | Published result field. |
| changeSet | Published result field. |
| metricDeltas | Published result field. |
| constraintDeltas | Published result field. |
| overlay | Published result field. |
| decisionEvidence | Published result field. |

- Stable ID: comparisonId
- Stable ID: left.branchId
- Stable ID: right.branchId
- Stable ID: changeSet[].changeId
- Stable ID: constraintDeltas[].constraintId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.create_proposal_branch

Create and activate a non-destructive proposal branch using a balanced, access-first, circulation-first, or sightlines-first strategy.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:propose.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| name | string | yes | — | min 1 chars | Published contract field. |
| strategy | balanced \| access-first \| circulation-first \| sightlines-first | yes | — | — | Published contract field. |
| goal | string | no | — | min 1 chars | Measurable Proposal outcome. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "name": "Access first",
  "strategy": "access-first",
  "goal": "Protect accessible arrival",
  "idempotencyKey": "example-branch-001"
}
```

## Output

A new independent Proposal Branch.

| Output field | Meaning |
| --- | --- |
| branchId | Stable identifier. |
| proposalId | Stable identifier. |
| strategy | Published result field. |
| changedItems | Published result field. |
| receipt | Published result field. |

- Stable ID: branchId
- Stable ID: proposalId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.switch_proposal_branch

Activate an existing proposal branch in the visible VenueMind workspace without approving it.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:propose.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| branchId | string | yes | — | min 1 chars | Stable Proposal Branch ID. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "branchId": "branch-balanced",
  "idempotencyKey": "example-switch-001"
}
```

## Output

Activates one existing Branch without changing accepted Plan truth.

| Output field | Meaning |
| --- | --- |
| branchId | Stable identifier. |
| proposalId | Stable identifier. |
| status | Published result field. |
| receipt | Published result field. |

- Stable ID: branchId
- Stable ID: proposalId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.update_proposal_branch

Update a Proposal Branch name or review notes without changing its Proposal geometry.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:propose.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| branchId | string | yes | — | min 1 chars | Stable Proposal Branch ID. |
| name | string | no | — | min 1 chars | Published contract field. |
| notes | string | no | — | max 2000 chars | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "branchId": "branch-balanced",
  "notes": "Review access route",
  "idempotencyKey": "example-branch-note-001"
}
```

## Output

Updated human-readable Branch metadata.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| branchId | Stable identifier. |
| name | Published result field. |
| notes | Published result field. |
| receipt | Published result field. |

- Stable ID: branchId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.duplicate_proposal_branch

Duplicate the current or a prior Proposal revision into a new active Branch with preserved stable Change IDs.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:propose.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| branchId | string | yes | — | min 1 chars | Stable Proposal Branch ID. |
| proposalId | string | no | — | min 1 chars | Stable Proposal ID. |
| name | string | no | — | min 1 chars | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "branchId": "branch-balanced",
  "name": "Balanced copy",
  "idempotencyKey": "example-duplicate-001"
}
```

## Output

A new Branch with explicit source lineage.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| branchId | Stable identifier. |
| proposalId | Stable identifier. |
| sourceBranchId | Stable identifier. |
| sourceProposalId | Stable identifier. |
| receipt | Published result field. |

- Stable ID: branchId
- Stable ID: proposalId
- Stable ID: sourceBranchId
- Stable ID: sourceProposalId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.archive_proposal_branch

Archive a Proposal Branch without deleting its revisions or audit history.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:propose.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| branchId | string | yes | — | min 1 chars | Stable Proposal Branch ID. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "branchId": "branch-balanced",
  "idempotencyKey": "example-archive-001"
}
```

## Output

Archived Branch state and safe active fallback.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| branchId | Stable identifier. |
| activeBranchId | Stable identifier. |
| receipt | Published result field. |

- Stable ID: branchId
- Stable ID: activeBranchId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.restore_proposal_branch

Restore an archived Proposal Branch to the active comparison set.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:propose.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| branchId | string | yes | — | min 1 chars | Stable Proposal Branch ID. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "branchId": "branch-balanced",
  "idempotencyKey": "example-restore-001"
}
```

## Output

Restored Branch state.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| branchId | Stable identifier. |
| receipt | Published result field. |

- Stable ID: branchId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.detect_proposal_conflicts

Detect stale-base, deleted-dependency, locked-object, same-object, and Constraint-regression conflicts for a Proposal Branch.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| branchId | string | no | — | min 1 chars | Stable Proposal Branch ID. |

```json
{
  "branchId": "branch-balanced"
}
```

## Output

Current stale-base, dependency, Lock, overlap, and Constraint conflicts.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| branchId | Stable identifier. |
| proposalId | Stable identifier. |
| stale | Published result field. |
| baseVersion | Published result field. |
| currentVersion | Published result field. |
| conflicts[] | Published result field. |
| blockingConflicts | Published result field. |
| validation | Published result field. |

- Stable ID: branchId
- Stable ID: proposalId
- Stable ID: conflicts[].id
- Stable ID: conflicts[].changeIds[]
- Stable ID: conflicts[].objectIds[]

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.rebase_proposal

Rebase a stale Proposal Branch onto the latest accepted Plan Version while preserving unchanged stable Change IDs.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:propose.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| branchId | string | yes | — | min 1 chars | Stable Proposal Branch ID. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "branchId": "branch-balanced",
  "idempotencyKey": "example-rebase-001"
}
```

## Output

Rebased Proposal lineage against current accepted truth.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| branchId | Stable identifier. |
| proposalId | Stable identifier. |
| baseVersion | Published result field. |
| receipt | Published result field. |

- Stable ID: branchId
- Stable ID: proposalId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.request_adjustment

Create a new non-destructive Proposal revision recording an agent-requested adjustment. Human Approval is still required.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:propose.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| instruction | string | yes | — | min 1 chars; max 2000 chars | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "instruction": "Increase rear clearance",
  "idempotencyKey": "example-adjustment-001"
}
```

## Output

A revised Proposal created from a bounded adjustment instruction.

| Output field | Meaning |
| --- | --- |
| proposalId | Stable identifier. |
| revision | Published result field. |
| status | Published result field. |
| receipt | Published result field. |

- Stable ID: proposalId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.list_comments

Read comments by status, author, subject kind, or decision relevance without changing planning state.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| status | open \| resolved | no | — | — | Published contract field. |
| authorId | string | no | — | min 1 chars | Published contract field. |
| subjectKind | project \| plan-version \| proposal \| change \| constraint \| coordinate | no | — | — | Published contract field. |
| decisionRelevant | boolean | no | — | — | Published contract field. |

```json
{
  "status": "open",
  "decisionRelevant": true
}
```

## Output

Filtered immutable-subject comments.

| Output field | Meaning |
| --- | --- |
| result[] | Published result field. |

- Stable ID: result[].id
- Stable ID: result[].anchor.subjectId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.add_comment

Add a non-planning Comment anchored to an immutable VenueMind subject or spatial coordinate.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:comment.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| anchor | object | yes | — | — | Published contract field. |
| body | string | yes | — | min 1 chars; max 5000 chars | Published contract field. |
| mentions | string[] | no | — | unique items | Published contract field. |
| decisionRelevant | boolean | no | — | — | Published contract field. |
| authorId | string | yes | — | min 1 chars | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "anchor": {
    "kind": "coordinate",
    "planVersion": "3.2",
    "point": {
      "x": 12,
      "y": 8
    }
  },
  "body": "Review route intersection",
  "authorId": "agent-reviewer",
  "idempotencyKey": "example-comment-001"
}
```

## Output

Created collaboration record without planning mutation.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| commentId | Stable identifier. |
| anchor | Published result field. |
| receipt | Published result field. |

- Stable ID: commentId
- Stable ID: anchor.subjectId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.edit_comment

Edit Comment text, mentions, or decision relevance while retaining immutable edit history.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:comment.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| commentId | string | yes | — | min 1 chars | Published contract field. |
| body | string | yes | — | min 1 chars; max 5000 chars | Published contract field. |
| mentions | string[] | no | — | unique items | Published contract field. |
| decisionRelevant | boolean | no | — | — | Published contract field. |
| authorId | string | yes | — | min 1 chars | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "commentId": "comment-0001",
  "body": "Review route intersection before approval",
  "authorId": "agent-reviewer",
  "idempotencyKey": "example-comment-edit-001"
}
```

## Output

New immutable edit-history entry for one Comment.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| commentId | Stable identifier. |
| editNumber | Published result field. |
| receipt | Published result field. |

- Stable ID: commentId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.set_comment_status

Resolve or reopen a Comment without changing its immutable anchor or planning state.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:comment.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| commentId | string | yes | — | min 1 chars | Published contract field. |
| status | open \| resolved | yes | — | — | Published contract field. |
| authorId | string | yes | — | min 1 chars | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "commentId": "comment-0001",
  "status": "resolved",
  "authorId": "agent-reviewer",
  "idempotencyKey": "example-comment-status-001"
}
```

## Output

Resolved or reopened Comment state.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| commentId | Stable identifier. |
| receipt | Published result field. |

- Stable ID: commentId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.get_change_log

Read the ordered human and agent Activity Ledger for the active Plan.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

Ordered hash-chained Activity Ledger entries.

| Output field | Meaning |
| --- | --- |
| result[] | Published result field. |

- Stable ID: result[].id
- Stable ID: result[].hash
- Stable ID: result[].previousHash

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.replay_history

Verify the Activity Ledger hash chain and replay accepted Plan transitions against the current Plan fingerprint.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

Replay verification from accepted transitions to current Plan and Event Brief truth.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| transitions[] | Published result field. |
| briefTransitions[] | Published result field. |
| currentPlanVersion | Published result field. |
| replayedFingerprint | Published result field. |
| currentFingerprint | Published result field. |
| replayedBriefFingerprint | Published result field. |
| currentBriefFingerprint | Published result field. |
| ledgerHeadHash | Published result field. |
| lockedObjectViolations[] | Published result field. |
| truthFingerprintViolations[] | Published result field. |

- Stable ID: transitions[].ledgerEntryId
- Stable ID: transitions[].planVersion
- Stable ID: briefTransitions[].ledgerEntryId
- Stable ID: lockedObjectViolations[].objectId
- Stable ID: truthFingerprintViolations[].ledgerEntryId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.list_scenarios

Read stored immutable Scenario definitions without running a simulation.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

Versioned Scenario definitions.

| Output field | Meaning |
| --- | --- |
| result[] | Published result field. |

- Stable ID: result[].id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.list_scenario_runs

Read queued, running, completed, cancelled, and failed Simulation Runs, including progress and partial results.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

Simulation Run summaries, progress, and terminal status.

| Output field | Meaning |
| --- | --- |
| result[] | Published result field. |

- Stable ID: result[].id
- Stable ID: result[].scenarioId
- Stable ID: result[].branchId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.get_scenario_result

Read one stable Scenario Run and its completed or partial result, with density frames omitted unless explicitly requested.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:simulate.
- Read-only operation.
- Input limit 65536 bytes; output limit 1048576 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| runId | string | yes | — | min 1 chars | Stable Simulation Run ID. |
| includeDensityFrames | boolean | no | false | — | Include time-keyed density cells in the result. |

```json
{
  "runId": "simulation-example",
  "includeDensityFrames": false
}
```

## Output

One Simulation Result bound to exact Scenario and geometry fingerprints.

| Output field | Meaning |
| --- | --- |
| schemaVersion | Published result field. |
| kind | Published result field. |
| model | Published result field. |
| engineVersion | Published result field. |
| inputFingerprint | Published result field. |
| scenarioFingerprint | Published result field. |
| scenarioId | Stable identifier. |
| branchId | Stable identifier. |
| planVersion | Published result field. |
| proposalId | Stable identifier. |
| status | Published result field. |
| parameters | Published result field. |
| progress | Published result field. |
| partial | Published result field. |
| result | Published result field. |
| confidence | Published result field. |
| startedAt | Published result field. |
| completedAt | Published result field. |

- Stable ID: scenarioId
- Stable ID: branchId
- Stable ID: proposalId
- Stable ID: result.runId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| SCENARIO_RUN_NOT_FOUND | Scenario Run not found. | List Scenario Runs and retry with an existing stable Run ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.run_scenario

Run one seeded operations, ingress-egress, or spatial queue Scenario against an exact Proposal Branch geometry. Results never replace deterministic Validation.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:simulate.
- State-affecting operation.
- Input limit 131072 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| scenario | object | yes | — | — | Published contract field. |
| branchId | string | no | — | min 1 chars | Stable Proposal Branch ID. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "scenario": {
    "id": "scenario-example",
    "name": "Arrival peak",
    "seed": 42,
    "horizonSeconds": 1800,
    "sampleCount": 32,
    "inputs": {
      "population": 400,
      "arrivalRatePerMinute": 30,
      "serviceRatePerMinute": 10,
      "servers": 3
    }
  },
  "branchId": "branch-balanced",
  "idempotencyKey": "example-scenario-001"
}
```

## Output

A deterministic-seed Simulation Run; it never becomes Constraint Validation.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| runId | Stable identifier. |
| scenarioId | Stable identifier. |
| branchId | Stable identifier. |
| inputFingerprint | Published result field. |
| cacheHit | Published result field. |
| result | Published result field. |
| receipt | Published result field. |

- Stable ID: runId
- Stable ID: scenarioId
- Stable ID: branchId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.compare_simulations

Compare two completed Runs with matching Scenario fingerprints and engine versions across Proposal Branches, including clearance, bottleneck, and accessible-route deltas for flow models.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:simulate.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| leftRunId | string | yes | — | min 1 chars | Published contract field. |
| rightRunId | string | yes | — | min 1 chars | Published contract field. |

```json
{
  "leftRunId": "simulation-left",
  "rightRunId": "simulation-right"
}
```

## Output

Comparison of compatible completed Simulation Runs.

| Output field | Meaning |
| --- | --- |
| comparisonId | Stable identifier. |
| leftRunId | Stable identifier. |
| rightRunId | Stable identifier. |
| scenarioFingerprint | Published result field. |
| engineVersion | Published result field. |
| metrics | Published result field. |
| deltas | Published result field. |

- Stable ID: comparisonId
- Stable ID: leftRunId
- Stable ID: rightRunId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.export_simulation

Export one completed Simulation Run with its normalized Scenario parameters, engine version, input fingerprint, and confidence metadata.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:export.
- Read-only operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| runId | string | yes | — | min 1 chars | Stable Simulation Run ID. |

```json
{
  "runId": "simulation-example"
}
```

## Output

Portable simulation parameters, fingerprints, and results.

| Output field | Meaning |
| --- | --- |
| format | Published result field. |
| filename | Published result field. |
| mimeType | Published result field. |
| encoding | Published result field. |
| content | Published result field. |

- Stable ID: content.runId
- Stable ID: content.scenarioId
- Stable ID: content.branchId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.inspect_live_occupancy

Read the current aggregate-only Live Occupancy projection, source freshness, active Alerts, simulation deltas, and incident Ledger without person-level records.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 1048576 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

Aggregate-only current counts, operational states, source freshness, confidence, Alerts, and incident evidence.

| Output field | Meaning |
| --- | --- |
| monitor | Published result field. |
| projection | Published result field. |

- Stable ID: monitor.id
- Stable ID: monitor.runbookVersionId
- Stable ID: monitor.activeAlerts[].id
- Stable ID: monitor.ledger[].id
- Stable ID: projection.scopes[].scopeId
- Stable ID: projection.sources[].sourceId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| OCCUPANCY_MONITOR_NOT_FOUND | Live Occupancy Monitor is unavailable. | Create the monitor from the active Event Day Runbook before inspecting or changing occupancy. |
| OCCUPANCY_TOOL_UNAVAILABLE | Live Occupancy tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Live Occupancy operations enabled. |
| OCCUPANCY_REVISION_CONFLICT | Live Occupancy monitor revision conflict. | Refresh the monitor and retry only if the aggregate transition is still required. |
| OCCUPANCY_SIGNAL_INVALID | Aggregate Occupancy Signal is invalid. | Send one bounded aggregate-only signal for the check-in total, venue, or a stable Occupancy Zone. |
| OCCUPANCY_PRIVACY_REJECTED | Occupancy input contains prohibited person-level data. | Remove identities, contacts, ticket tokens, device identifiers, and individual event records before ingestion. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.ingest_occupancy_signal

Ingest one bounded aggregate Occupancy Signal from a registration total, sensor, or manual counter with stable source and scope IDs.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:operate.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| sourceId | string | yes | — | min 1 chars; max 160 chars | Published contract field. |
| sourceType | registration \| sensor \| manual-counter | yes | — | — | Published contract field. |
| sourceVersion | string | yes | — | min 1 chars; max 160 chars | Published contract field. |
| kind | check-in \| zone-occupancy | yes | — | — | Published contract field. |
| observedAt | string | yes | — | format date-time | Published contract field. |
| confidence | low \| medium \| high | yes | — | — | Published contract field. |
| readings | object[] | yes | — | min 1 items; max 100 items | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "sourceId": "door-a",
  "sourceType": "manual-counter",
  "sourceVersion": "counter-v12",
  "kind": "zone-occupancy",
  "observedAt": "2026-09-12T14:30:00.000Z",
  "confidence": "high",
  "readings": [
    {
      "scopeId": "venue",
      "count": 412
    }
  ],
  "idempotencyKey": "example-occupancy-001"
}
```

## Output

Idempotent aggregate signal acceptance with the resulting Live Occupancy projection.

| Output field | Meaning |
| --- | --- |
| monitor | Published result field. |
| projection | Published result field. |
| receipt | Published result field. |
| duplicate | Published result field. |

- Stable ID: monitor.id
- Stable ID: projection.scopes[].scopeId
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| OCCUPANCY_MONITOR_NOT_FOUND | Live Occupancy Monitor is unavailable. | Create the monitor from the active Event Day Runbook before inspecting or changing occupancy. |
| OCCUPANCY_TOOL_UNAVAILABLE | Live Occupancy tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Live Occupancy operations enabled. |
| OCCUPANCY_REVISION_CONFLICT | Live Occupancy monitor revision conflict. | Refresh the monitor and retry only if the aggregate transition is still required. |
| OCCUPANCY_SIGNAL_INVALID | Aggregate Occupancy Signal is invalid. | Send one bounded aggregate-only signal for the check-in total, venue, or a stable Occupancy Zone. |
| OCCUPANCY_PRIVACY_REJECTED | Occupancy input contains prohibited person-level data. | Remove identities, contacts, ticket tokens, device identifiers, and individual event records before ingestion. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.refresh_live_occupancy

Refresh Live Occupancy freshness and derived Alerts at the server-accepted instant without changing any aggregate count.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:operate.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "idempotencyKey": "example-occupancy-refresh-001"
}
```

## Output

Freshness and Alert reconciliation without changing accepted aggregate counts.

| Output field | Meaning |
| --- | --- |
| monitor | Published result field. |
| projection | Published result field. |
| receipt | Published result field. |
| duplicate | Published result field. |

- Stable ID: monitor.id
- Stable ID: monitor.activeAlerts[].id
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| OCCUPANCY_MONITOR_NOT_FOUND | Live Occupancy Monitor is unavailable. | Create the monitor from the active Event Day Runbook before inspecting or changing occupancy. |
| OCCUPANCY_TOOL_UNAVAILABLE | Live Occupancy tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Live Occupancy operations enabled. |
| OCCUPANCY_REVISION_CONFLICT | Live Occupancy monitor revision conflict. | Refresh the monitor and retry only if the aggregate transition is still required. |
| OCCUPANCY_SIGNAL_INVALID | Aggregate Occupancy Signal is invalid. | Send one bounded aggregate-only signal for the check-in total, venue, or a stable Occupancy Zone. |
| OCCUPANCY_PRIVACY_REJECTED | Occupancy input contains prohibited person-level data. | Remove identities, contacts, ticket tokens, device identifiers, and individual event records before ingestion. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.export_live_occupancy

Export the verified aggregate-only Live Occupancy audit artifact with baseline, observations, Alerts, receipts, and hash-chained incident Ledger.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:export.
- Read-only operation.
- Input limit 65536 bytes; output limit 2000000 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

Verified aggregate-only baseline, observations, Alerts, receipts, and Occupancy Monitor Ledger artifact.

| Output field | Meaning |
| --- | --- |
| filename | Published result field. |
| mimeType | Published result field. |
| content | Published result field. |

- Stable ID: content.monitor.id
- Stable ID: content.runbookVersionId
- Stable ID: content.ledger[].id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| OCCUPANCY_MONITOR_NOT_FOUND | Live Occupancy Monitor is unavailable. | Create the monitor from the active Event Day Runbook before inspecting or changing occupancy. |
| OCCUPANCY_TOOL_UNAVAILABLE | Live Occupancy tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Live Occupancy operations enabled. |
| OCCUPANCY_REVISION_CONFLICT | Live Occupancy monitor revision conflict. | Refresh the monitor and retry only if the aggregate transition is still required. |
| OCCUPANCY_SIGNAL_INVALID | Aggregate Occupancy Signal is invalid. | Send one bounded aggregate-only signal for the check-in total, venue, or a stable Occupancy Zone. |
| OCCUPANCY_PRIVACY_REJECTED | Occupancy input contains prohibited person-level data. | Remove identities, contacts, ticket tokens, device identifiers, and individual event records before ingestion. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.inspect_incidents

Inspect the Runbook-bound Incident Register or one stable Operational Incident with structured severity, category, owner, location, acknowledgement, escalation, evidence, and ordered ledger state.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 1048576 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| incidentId | string | no | — | min 1 chars; max 160 chars | Published contract field. |
| status | open \| mitigating \| resolved \| closed | no | — | — | Published contract field. |
| severity | low \| medium \| high \| critical | no | — | — | Published contract field. |
| category | accessibility \| crowd-capacity \| medical \| security \| fire-life-safety \| facilities \| production-av \| catering \| staffing \| transport \| weather \| other | no | — | — | Published contract field. |
| limit | integer | no | 50 | ≥ 1; ≤ 100 | Maximum number of returned records. |

```json
{
  "status": "open",
  "limit": 25
}
```

## Output

Runbook-bound Incident Register state with structured location, acknowledgement, escalation, ownership, handoff, and evidence metadata.

| Output field | Meaning |
| --- | --- |
| register | Published result field. |
| incidents | Published result field. |
| incident | Published result field. |

- Stable ID: register.id
- Stable ID: register.runbookVersionId
- Stable ID: incidents[].id
- Stable ID: incident.id
- Stable ID: register.ledger[].id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| INCIDENT_REGISTER_NOT_FOUND | Incident Register is unavailable. | Create the register from the active Event Day Runbook before inspecting or reporting incidents. |
| INCIDENT_NOT_FOUND | Operational Incident is unavailable. | Inspect the Incident Register and retry with an existing stable Incident ID. |
| INCIDENT_TOOL_UNAVAILABLE | Incident tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Incident Register operations enabled. |
| INCIDENT_REVISION_CONFLICT | Operational Incident revision conflict. | Refresh the incident and retry only if the transition is still required. |
| INCIDENT_INVALID | Operational Incident input is invalid. | Use the published severity, category, owner, reason, reference, and transition fields. |
| INCIDENT_PRIVACY_REJECTED | Incident input contains prohibited person-level data. | Remove identities, contacts, ticket, device, attendee, medical, and free-form person records. |
| INCIDENT_LOCATION_INVALID | Incident Location Context is invalid. | Anchor the incident to one object or in-room coordinate in the frozen accepted Plan. |
| INCIDENT_LEDGER_INTEGRITY_FAILED | Incident Register ledger integrity failed. | Restore the last verified register state before inspection or export. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.report_incident

Report one structured Operational Incident against an object or coordinate in the frozen accepted Plan without claiming acknowledgement, escalation, ownership, resolution, or emergency authority.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:operate.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| severity | low \| medium \| high \| critical | yes | — | — | Published contract field. |
| category | accessibility \| crowd-capacity \| medical \| security \| fire-life-safety \| facilities \| production-av \| catering \| staffing \| transport \| weather \| other | yes | — | — | Published contract field. |
| summaryCode | string | yes | — | min 2 chars; max 64 chars; pattern ^[A-Z][A-Z0-9_]{1,63}$ | Published contract field. |
| location | object \| object | yes | — | — | Published contract field. |
| relatedRefs | object[] | no | — | max 20 items | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "severity": "high",
  "category": "crowd-capacity",
  "summaryCode": "EAST_ENTRY_CONGESTION",
  "location": {
    "kind": "plan-object",
    "planObjectId": "obj-entry-east"
  },
  "relatedRefs": [
    {
      "kind": "occupancy-alert",
      "id": "occupancy-alert-east-entry"
    }
  ],
  "idempotencyKey": "example-incident-report-001"
}
```

## Output

Idempotent agent report acceptance without acknowledgement, escalation, response, or resolution authority.

| Output field | Meaning |
| --- | --- |
| register | Published result field. |
| incident | Published result field. |
| receipt | Published result field. |
| duplicate | Published result field. |

- Stable ID: register.id
- Stable ID: incident.id
- Stable ID: receipt.id
- Stable ID: register.ledger[].id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| INCIDENT_REGISTER_NOT_FOUND | Incident Register is unavailable. | Create the register from the active Event Day Runbook before inspecting or reporting incidents. |
| INCIDENT_NOT_FOUND | Operational Incident is unavailable. | Inspect the Incident Register and retry with an existing stable Incident ID. |
| INCIDENT_TOOL_UNAVAILABLE | Incident tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Incident Register operations enabled. |
| INCIDENT_REVISION_CONFLICT | Operational Incident revision conflict. | Refresh the incident and retry only if the transition is still required. |
| INCIDENT_INVALID | Operational Incident input is invalid. | Use the published severity, category, owner, reason, reference, and transition fields. |
| INCIDENT_PRIVACY_REJECTED | Incident input contains prohibited person-level data. | Remove identities, contacts, ticket, device, attendee, medical, and free-form person records. |
| INCIDENT_LOCATION_INVALID | Incident Location Context is invalid. | Anchor the incident to one object or in-room coordinate in the frozen accepted Plan. |
| INCIDENT_LEDGER_INTEGRITY_FAILED | Incident Register ledger integrity failed. | Restore the last verified register state before inspection or export. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.export_incident_record

Export one verified post-event Operational Incident record with frozen Plan and Emergency Plan provenance, transitions, structured handoffs, receipts, and hash-chained ledger evidence.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:export.
- Read-only operation.
- Input limit 65536 bytes; output limit 2000000 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| incidentId | string | yes | — | min 1 chars; max 160 chars | Published contract field. |

```json
{
  "incidentId": "incident-example-001"
}
```

## Output

Verified post-event Incident record with frozen Plan provenance, structured transitions, receipts, and ledger evidence.

| Output field | Meaning |
| --- | --- |
| filename | Published result field. |
| mimeType | Published result field. |
| content | Published result field. |

- Stable ID: content.register.id
- Stable ID: content.incident.id
- Stable ID: content.ledger[].id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| INCIDENT_REGISTER_NOT_FOUND | Incident Register is unavailable. | Create the register from the active Event Day Runbook before inspecting or reporting incidents. |
| INCIDENT_NOT_FOUND | Operational Incident is unavailable. | Inspect the Incident Register and retry with an existing stable Incident ID. |
| INCIDENT_TOOL_UNAVAILABLE | Incident tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Incident Register operations enabled. |
| INCIDENT_REVISION_CONFLICT | Operational Incident revision conflict. | Refresh the incident and retry only if the transition is still required. |
| INCIDENT_INVALID | Operational Incident input is invalid. | Use the published severity, category, owner, reason, reference, and transition fields. |
| INCIDENT_PRIVACY_REJECTED | Incident input contains prohibited person-level data. | Remove identities, contacts, ticket, device, attendee, medical, and free-form person records. |
| INCIDENT_LOCATION_INVALID | Incident Location Context is invalid. | Anchor the incident to one object or in-room coordinate in the frozen accepted Plan. |
| INCIDENT_LEDGER_INTEGRITY_FAILED | Incident Register ledger integrity failed. | Restore the last verified register state before inspection or export. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.inspect_live_plan_deviations

Inspect the Runbook-bound Live Plan Deviation Register, deterministic active overlay, and filtered temporary or revision-candidate deviation records without changing accepted Plan truth.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 1048576 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| deviationId | string | no | — | min 1 chars; max 160 chars | Published contract field. |
| status | active \| ended | no | — | — | Published contract field. |
| disposition | temporary \| revision-candidate | no | — | — | Published contract field. |
| limit | integer | no | 50 | ≥ 1; ≤ 100 | Maximum number of returned records. |

```json
{
  "status": "active",
  "limit": 25
}
```

## Output

Runbook-bound live deviations, validation evidence, and the deterministic operational overlay over accepted Plan truth.

| Output field | Meaning |
| --- | --- |
| register | Published result field. |
| deviations | Published result field. |
| overlay | Published result field. |

- Stable ID: register.id
- Stable ID: deviations[].id
- Stable ID: overlay.id
- Stable ID: overlay.objectLineage[].objectId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| DEVIATION_REGISTER_NOT_FOUND | Live Plan Deviation Register is unavailable. | Create the register from the active Event Day Runbook before inspecting or recording deviations. |
| DEVIATION_NOT_FOUND | Live Plan Deviation is unavailable. | Inspect the register and retry with an existing stable Deviation ID. |
| DEVIATION_TOOL_UNAVAILABLE | Live Plan Deviation tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Live Plan Deviation operations enabled. |
| DEVIATION_INVALID | Live Plan Deviation input is invalid. | Supply a reason code, disposition, exact affected objects, location, and executable spatial Change. |
| DEVIATION_LOCATION_INVALID | Live Plan Deviation Location Context is invalid. | Anchor the deviation to one object or in-room coordinate in the frozen accepted Plan. |
| DEVIATION_REVISION_CONFLICT | Live Plan Deviation revision conflict. | Refresh the deviation projection and retry only if the transition is still required. |
| DEVIATION_REGISTER_REVISION_CONFLICT | Live Plan Deviation Register revision conflict. | Refresh the active overlay and retry against its current revision. |
| DEVIATION_LEDGER_INTEGRITY_FAILED | Live Plan Deviation ledger integrity failed. | Restore the last verified register state before inspection, recommendation, or export. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.record_live_plan_deviation

Record one validated event-day Change against the frozen accepted Plan with stable object IDs, available live Constraints, reason, author evidence, and exact retry identity.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:operate.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| deviationId | string | yes | — | min 1 chars; max 160 chars | Published contract field. |
| disposition | temporary \| revision-candidate | yes | — | — | Published contract field. |
| reasonCode | string | yes | — | min 2 chars; max 64 chars; pattern ^[A-Z][A-Z0-9_]{1,63}$ | Published contract field. |
| location | object \| object | yes | — | — | Published contract field. |
| affectedObjectIds | string[] | yes | — | min 1 items; max 100 items; unique items | Published contract field. |
| availableConstraintIds | string[] | yes | — | min 1 items; max 100 items; unique items | Published contract field. |
| change | object | yes | — | — | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "deviationId": "deviation-east-exit-control",
  "disposition": "temporary",
  "reasonCode": "LIVE_EGRESS_CONTROL",
  "location": {
    "kind": "plan-object",
    "planObjectId": "obj-fire-exit-east"
  },
  "affectedObjectIds": [
    "obj-fire-exit-east"
  ],
  "availableConstraintIds": [
    "constraint-emergency-readiness",
    "constraint-peak-congestion"
  ],
  "change": {
    "id": "change-live-egress-control",
    "targetObjectIds": [
      "obj-fire-exit-east"
    ],
    "spatialEffects": [
      {
        "operation": "update_metadata",
        "objectId": "obj-fire-exit-east",
        "values": {
          "label": "East exit — controlled"
        }
      }
    ]
  },
  "idempotencyKey": "example-deviation-record-001"
}
```

## Output

An idempotent operational fact that preserves the approved Plan and records live Constraint results.

| Output field | Meaning |
| --- | --- |
| register | Published result field. |
| deviation | Published result field. |
| overlay | Published result field. |
| receipt | Published result field. |
| duplicate | Published result field. |

- Stable ID: register.id
- Stable ID: deviation.id
- Stable ID: overlay.id
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| DEVIATION_REGISTER_NOT_FOUND | Live Plan Deviation Register is unavailable. | Create the register from the active Event Day Runbook before inspecting or recording deviations. |
| DEVIATION_NOT_FOUND | Live Plan Deviation is unavailable. | Inspect the register and retry with an existing stable Deviation ID. |
| DEVIATION_TOOL_UNAVAILABLE | Live Plan Deviation tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Live Plan Deviation operations enabled. |
| DEVIATION_INVALID | Live Plan Deviation input is invalid. | Supply a reason code, disposition, exact affected objects, location, and executable spatial Change. |
| DEVIATION_LOCATION_INVALID | Live Plan Deviation Location Context is invalid. | Anchor the deviation to one object or in-room coordinate in the frozen accepted Plan. |
| DEVIATION_REVISION_CONFLICT | Live Plan Deviation revision conflict. | Refresh the deviation projection and retry only if the transition is still required. |
| DEVIATION_REGISTER_REVISION_CONFLICT | Live Plan Deviation Register revision conflict. | Refresh the active overlay and retry against its current revision. |
| DEVIATION_LEDGER_INTEGRITY_FAILED | Live Plan Deviation ledger integrity failed. | Restore the last verified register state before inspection, recommendation, or export. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.end_live_plan_deviation

End one active temporary or revision-candidate deviation with optimistic Deviation revision control and an immutable reasoned transition.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:operate.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| deviationId | string | yes | — | min 1 chars; max 160 chars | Published contract field. |
| expectedDeviationRevision | integer | yes | — | ≥ 1 | Published contract field. |
| reasonCode | string | yes | — | min 2 chars; max 64 chars; pattern ^[A-Z][A-Z0-9_]{1,63}$ | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "deviationId": "deviation-east-exit-control",
  "expectedDeviationRevision": 1,
  "reasonCode": "CONTROL_RELEASED",
  "idempotencyKey": "example-deviation-end-001"
}
```

## Output

An audited end transition that removes the deviation from the active overlay without rewriting history.

| Output field | Meaning |
| --- | --- |
| register | Published result field. |
| deviation | Published result field. |
| overlay | Published result field. |
| receipt | Published result field. |
| duplicate | Published result field. |

- Stable ID: register.id
- Stable ID: deviation.id
- Stable ID: overlay.id
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| DEVIATION_REGISTER_NOT_FOUND | Live Plan Deviation Register is unavailable. | Create the register from the active Event Day Runbook before inspecting or recording deviations. |
| DEVIATION_NOT_FOUND | Live Plan Deviation is unavailable. | Inspect the register and retry with an existing stable Deviation ID. |
| DEVIATION_TOOL_UNAVAILABLE | Live Plan Deviation tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Live Plan Deviation operations enabled. |
| DEVIATION_INVALID | Live Plan Deviation input is invalid. | Supply a reason code, disposition, exact affected objects, location, and executable spatial Change. |
| DEVIATION_LOCATION_INVALID | Live Plan Deviation Location Context is invalid. | Anchor the deviation to one object or in-room coordinate in the frozen accepted Plan. |
| DEVIATION_REVISION_CONFLICT | Live Plan Deviation revision conflict. | Refresh the deviation projection and retry only if the transition is still required. |
| DEVIATION_REGISTER_REVISION_CONFLICT | Live Plan Deviation Register revision conflict. | Refresh the active overlay and retry against its current revision. |
| DEVIATION_LEDGER_INTEGRITY_FAILED | Live Plan Deviation ledger integrity failed. | Restore the last verified register state before inspection, recommendation, or export. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.create_post_event_deviation_proposal

Create a normal review-state Proposal from ended revision-candidate deviations. The accepted Plan remains unchanged and Approval remains human-only in VenueMind Studio.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:propose.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| proposalId | string | yes | — | min 1 chars; max 160 chars | Stable Proposal ID. |
| goal | string | yes | — | min 1 chars; max 2000 chars | Measurable Proposal outcome. |
| deviationIds | string[] | yes | — | min 1 items; max 100 items; unique items | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "proposalId": "proposal-post-event-egress",
  "goal": "Retain the validated event-day egress control",
  "deviationIds": [
    "deviation-east-exit-control"
  ],
  "idempotencyKey": "example-deviation-proposal-001"
}
```

## Output

A standard reviewable Venue Proposal derived from ended revision candidates; accepted Plan truth stays unchanged.

| Output field | Meaning |
| --- | --- |
| register | Published result field. |
| proposal | Published result field. |
| recommendation | Published result field. |
| receipt | Published result field. |
| duplicate | Published result field. |

- Stable ID: register.id
- Stable ID: proposal.id
- Stable ID: recommendation.id
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| DEVIATION_REGISTER_NOT_FOUND | Live Plan Deviation Register is unavailable. | Create the register from the active Event Day Runbook before inspecting or recording deviations. |
| DEVIATION_NOT_FOUND | Live Plan Deviation is unavailable. | Inspect the register and retry with an existing stable Deviation ID. |
| DEVIATION_TOOL_UNAVAILABLE | Live Plan Deviation tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Live Plan Deviation operations enabled. |
| DEVIATION_INVALID | Live Plan Deviation input is invalid. | Supply a reason code, disposition, exact affected objects, location, and executable spatial Change. |
| DEVIATION_LOCATION_INVALID | Live Plan Deviation Location Context is invalid. | Anchor the deviation to one object or in-room coordinate in the frozen accepted Plan. |
| DEVIATION_REVISION_CONFLICT | Live Plan Deviation revision conflict. | Refresh the deviation projection and retry only if the transition is still required. |
| DEVIATION_REGISTER_REVISION_CONFLICT | Live Plan Deviation Register revision conflict. | Refresh the active overlay and retry against its current revision. |
| DEVIATION_LEDGER_INTEGRITY_FAILED | Live Plan Deviation ledger integrity failed. | Restore the last verified register state before inspection, recommendation, or export. |
| POST_EVENT_REVIEW_NOT_FOUND | Post-event Review is unavailable. | Create or restore the Runbook-bound Post-event Review before issuing this command. |
| POST_EVENT_TOOL_UNAVAILABLE | Post-event Review tooling is unavailable. | Connect a Post-event Review operation adapter before calling this tool. |
| POST_EVENT_INVALID | Post-event Review input is invalid. | Supply published metric, scope, evidence, lesson, and Proposal fields with stable identifiers. |
| POST_EVENT_REVISION_CONFLICT | Post-event Review revision conflict. | Refresh the Post-event Review and retry only if the transition is still required. |
| POST_EVENT_EVIDENCE_INVALID | Post-event evidence does not match the frozen baseline. | Reference an exact evidence ID and fingerprint frozen into this Post-event Review. |
| POST_EVENT_OBSERVATION_CONFLICT | An Observation already exists for this predicted outcome. | Use the accepted Observation or create a distinct metric scope before recording another outcome. |
| POST_EVENT_COMPARISON_NOT_FOUND | Post-event Comparison is unavailable. | Inspect the frozen Predictions and retry with an existing comparison key. |
| POST_EVENT_LESSON_NOT_FOUND | Post-event Lesson is unavailable. | Inspect the Post-event Review and retry with an existing stable Lesson ID. |
| POST_EVENT_TEMPLATE_PROPOSAL_NOT_FOUND | Template Improvement Proposal is unavailable. | Inspect the Post-event Review and retry with an existing stable Proposal ID. |
| POST_EVENT_TEMPLATE_PROPOSAL_INVALID | Template Improvement Proposal is invalid. | Trace every Change through a structured Lesson to an observed event-day outcome and a frozen template binding. |
| POST_EVENT_LEDGER_INTEGRITY_FAILED | Post-event Review ledger integrity failed. | Restore the last verified Post-event Review before inspection or export. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.export_live_plan_deviations

Export a verified record that keeps the approved Plan, live deviation overlay, and post-event recommended revisions explicitly separate.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:export.
- Read-only operation.
- Input limit 65536 bytes; output limit 2000000 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

A verified deviation record that separates accepted Plan provenance, live overlay facts, and post-event recommendations.

| Output field | Meaning |
| --- | --- |
| filename | Published result field. |
| mediaType | Published result field. |
| content | Published result field. |
| fingerprint | Published result field. |

- Stable ID: content.register.id
- Stable ID: content.deviations[].id
- Stable ID: content.overlay.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| DEVIATION_REGISTER_NOT_FOUND | Live Plan Deviation Register is unavailable. | Create the register from the active Event Day Runbook before inspecting or recording deviations. |
| DEVIATION_NOT_FOUND | Live Plan Deviation is unavailable. | Inspect the register and retry with an existing stable Deviation ID. |
| DEVIATION_TOOL_UNAVAILABLE | Live Plan Deviation tool Adapter is unavailable. | Open VenueMind Studio or connect an MCP Project session with Live Plan Deviation operations enabled. |
| DEVIATION_INVALID | Live Plan Deviation input is invalid. | Supply a reason code, disposition, exact affected objects, location, and executable spatial Change. |
| DEVIATION_LOCATION_INVALID | Live Plan Deviation Location Context is invalid. | Anchor the deviation to one object or in-room coordinate in the frozen accepted Plan. |
| DEVIATION_REVISION_CONFLICT | Live Plan Deviation revision conflict. | Refresh the deviation projection and retry only if the transition is still required. |
| DEVIATION_REGISTER_REVISION_CONFLICT | Live Plan Deviation Register revision conflict. | Refresh the active overlay and retry against its current revision. |
| DEVIATION_LEDGER_INTEGRITY_FAILED | Live Plan Deviation ledger integrity failed. | Restore the last verified register state before inspection, recommendation, or export. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.inspect_post_event_review

Inspect a Runbook-bound Post-event Review, outcome comparisons, Lessons, proposals, and ledger integrity.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:read.
- Read-only operation.
- Input limit 65536 bytes; output limit 1048576 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

Frozen Post-event Review state, outcome comparisons, and verified ledger integrity.

| Output field | Meaning |
| --- | --- |
| review | Published result field. |
| comparisons | Published result field. |
| integrity | Published result field. |

- Stable ID: review.id
- Stable ID: review.predictions[].key
- Stable ID: comparisons[].comparisonFingerprint
- Stable ID: review.ledger[].id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| POST_EVENT_REVIEW_NOT_FOUND | Post-event Review is unavailable. | Create or restore the Runbook-bound Post-event Review before issuing this command. |
| POST_EVENT_TOOL_UNAVAILABLE | Post-event Review tooling is unavailable. | Connect a Post-event Review operation adapter before calling this tool. |
| POST_EVENT_INVALID | Post-event Review input is invalid. | Supply published metric, scope, evidence, lesson, and Proposal fields with stable identifiers. |
| POST_EVENT_REVISION_CONFLICT | Post-event Review revision conflict. | Refresh the Post-event Review and retry only if the transition is still required. |
| POST_EVENT_EVIDENCE_INVALID | Post-event evidence does not match the frozen baseline. | Reference an exact evidence ID and fingerprint frozen into this Post-event Review. |
| POST_EVENT_OBSERVATION_CONFLICT | An Observation already exists for this predicted outcome. | Use the accepted Observation or create a distinct metric scope before recording another outcome. |
| POST_EVENT_COMPARISON_NOT_FOUND | Post-event Comparison is unavailable. | Inspect the frozen Predictions and retry with an existing comparison key. |
| POST_EVENT_LESSON_NOT_FOUND | Post-event Lesson is unavailable. | Inspect the Post-event Review and retry with an existing stable Lesson ID. |
| POST_EVENT_TEMPLATE_PROPOSAL_NOT_FOUND | Template Improvement Proposal is unavailable. | Inspect the Post-event Review and retry with an existing stable Proposal ID. |
| POST_EVENT_TEMPLATE_PROPOSAL_INVALID | Template Improvement Proposal is invalid. | Trace every Change through a structured Lesson to an observed event-day outcome and a frozen template binding. |
| POST_EVENT_LEDGER_INTEGRITY_FAILED | Post-event Review ledger integrity failed. | Restore the last verified Post-event Review before inspection or export. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.record_post_event_observation

Record one evidence-bound outcome against a frozen Prediction.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:operate.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| observationId | string | yes | — | min 1 chars; max 160 chars | Published contract field. |
| predictionKey | string | yes | — | min 1 chars; max 240 chars | Published contract field. |
| value | number \| null | yes | — | — | Published contract field. |
| confidence | measured \| estimated \| unavailable | yes | — | — | Published contract field. |
| evidenceRefs | object[] | yes | — | min 1 items; max 50 items | Published contract field. |
| expectedRevision | integer | yes | — | ≥ 0 | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "observationId": "observation-peak-occupancy",
  "predictionKey": "occupancy:peak-persons:venue:venue",
  "value": 438,
  "confidence": "measured",
  "evidenceRefs": [
    {
      "kind": "occupancy-projection",
      "id": "occupancy-runbook-example",
      "fingerprint": "sha256:projection"
    }
  ],
  "expectedRevision": 0,
  "idempotencyKey": "example-post-event-observation-001"
}
```

## Output

An idempotent evidence-bound Observation against one frozen Prediction.

| Output field | Meaning |
| --- | --- |
| review | Published result field. |
| subject | Published result field. |
| receipt | Published result field. |
| duplicate | Published result field. |

- Stable ID: review.id
- Stable ID: subject.id
- Stable ID: subject.predictionKey
- Stable ID: receipt.id
- Stable ID: subject.evidenceRefs[].id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| POST_EVENT_REVIEW_NOT_FOUND | Post-event Review is unavailable. | Create or restore the Runbook-bound Post-event Review before issuing this command. |
| POST_EVENT_TOOL_UNAVAILABLE | Post-event Review tooling is unavailable. | Connect a Post-event Review operation adapter before calling this tool. |
| POST_EVENT_INVALID | Post-event Review input is invalid. | Supply published metric, scope, evidence, lesson, and Proposal fields with stable identifiers. |
| POST_EVENT_REVISION_CONFLICT | Post-event Review revision conflict. | Refresh the Post-event Review and retry only if the transition is still required. |
| POST_EVENT_EVIDENCE_INVALID | Post-event evidence does not match the frozen baseline. | Reference an exact evidence ID and fingerprint frozen into this Post-event Review. |
| POST_EVENT_OBSERVATION_CONFLICT | An Observation already exists for this predicted outcome. | Use the accepted Observation or create a distinct metric scope before recording another outcome. |
| POST_EVENT_COMPARISON_NOT_FOUND | Post-event Comparison is unavailable. | Inspect the frozen Predictions and retry with an existing comparison key. |
| POST_EVENT_LESSON_NOT_FOUND | Post-event Lesson is unavailable. | Inspect the Post-event Review and retry with an existing stable Lesson ID. |
| POST_EVENT_TEMPLATE_PROPOSAL_NOT_FOUND | Template Improvement Proposal is unavailable. | Inspect the Post-event Review and retry with an existing stable Proposal ID. |
| POST_EVENT_TEMPLATE_PROPOSAL_INVALID | Template Improvement Proposal is invalid. | Trace every Change through a structured Lesson to an observed event-day outcome and a frozen template binding. |
| POST_EVENT_LEDGER_INTEGRITY_FAILED | Post-event Review ledger integrity failed. | Restore the last verified Post-event Review before inspection or export. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.record_post_event_lesson

Record one Lesson linked to a Comparison and frozen Requirement or Constraint IDs.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:operate.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| lessonId | string | yes | — | min 1 chars; max 160 chars | Published contract field. |
| comparisonKey | string | yes | — | min 1 chars; max 240 chars | Published contract field. |
| lessonCode | string | yes | — | min 2 chars; max 64 chars; pattern ^[A-Z][A-Z0-9_]{1,63}$ | Published contract field. |
| findingCode | string | yes | — | min 2 chars; max 64 chars; pattern ^[A-Z][A-Z0-9_]{1,63}$ | Published contract field. |
| recommendedActionCode | string | yes | — | min 2 chars; max 64 chars; pattern ^[A-Z][A-Z0-9_]{1,63}$ | Published contract field. |
| requirementIds | string[] | yes | — | max 100 items; unique items | Published contract field. |
| constraintIds | string[] | yes | — | max 100 items; unique items | Published contract field. |
| expectedRevision | integer | yes | — | ≥ 0 | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "lessonId": "lesson-capacity-buffer",
  "comparisonKey": "occupancy:peak-persons:venue:venue",
  "lessonCode": "CAPACITY_BUFFER",
  "findingCode": "PEAK_ABOVE_MODEL",
  "recommendedActionCode": "INCREASE_BUFFER",
  "requirementIds": [
    "req-theater-seating"
  ],
  "constraintIds": [
    "constraint-capacity"
  ],
  "expectedRevision": 1,
  "idempotencyKey": "example-post-event-lesson-001"
}
```

## Output

An idempotent structured Lesson linked to frozen Requirements or Constraints.

| Output field | Meaning |
| --- | --- |
| review | Published result field. |
| subject | Published result field. |
| receipt | Published result field. |
| duplicate | Published result field. |

- Stable ID: review.id
- Stable ID: subject.id
- Stable ID: subject.comparisonKey
- Stable ID: subject.requirementIds[]
- Stable ID: subject.constraintIds[]
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| POST_EVENT_REVIEW_NOT_FOUND | Post-event Review is unavailable. | Create or restore the Runbook-bound Post-event Review before issuing this command. |
| POST_EVENT_TOOL_UNAVAILABLE | Post-event Review tooling is unavailable. | Connect a Post-event Review operation adapter before calling this tool. |
| POST_EVENT_INVALID | Post-event Review input is invalid. | Supply published metric, scope, evidence, lesson, and Proposal fields with stable identifiers. |
| POST_EVENT_REVISION_CONFLICT | Post-event Review revision conflict. | Refresh the Post-event Review and retry only if the transition is still required. |
| POST_EVENT_EVIDENCE_INVALID | Post-event evidence does not match the frozen baseline. | Reference an exact evidence ID and fingerprint frozen into this Post-event Review. |
| POST_EVENT_OBSERVATION_CONFLICT | An Observation already exists for this predicted outcome. | Use the accepted Observation or create a distinct metric scope before recording another outcome. |
| POST_EVENT_COMPARISON_NOT_FOUND | Post-event Comparison is unavailable. | Inspect the frozen Predictions and retry with an existing comparison key. |
| POST_EVENT_LESSON_NOT_FOUND | Post-event Lesson is unavailable. | Inspect the Post-event Review and retry with an existing stable Lesson ID. |
| POST_EVENT_TEMPLATE_PROPOSAL_NOT_FOUND | Template Improvement Proposal is unavailable. | Inspect the Post-event Review and retry with an existing stable Proposal ID. |
| POST_EVENT_TEMPLATE_PROPOSAL_INVALID | Template Improvement Proposal is invalid. | Trace every Change through a structured Lesson to an observed event-day outcome and a frozen template binding. |
| POST_EVENT_LEDGER_INTEGRITY_FAILED | Post-event Review ledger integrity failed. | Restore the last verified Post-event Review before inspection or export. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.create_template_improvement_proposal

Create an evidence-traced Template Improvement Proposal pending human review.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:propose.
- State-affecting operation.
- Input limit 65536 bytes; output limit 262144 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| proposalId | string | yes | — | min 1 chars; max 160 chars | Stable Proposal ID. |
| goal | string | yes | — | min 1 chars; max 2000 chars | Measurable Proposal outcome. |
| target | object | yes | — | — | Published contract field. |
| changes | object[] | yes | — | min 1 items; max 100 items | Published contract field. |
| changeLessonLinks | object[] | yes | — | min 1 items; max 100 items | Published contract field. |
| expectedRevision | integer | yes | — | ≥ 0 | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |

```json
{
  "proposalId": "template-proposal-capacity",
  "goal": "Increase the standard capacity buffer",
  "target": {
    "kind": "room",
    "templateId": "room-template-harborview-main-hall",
    "version": "1.0.0"
  },
  "changes": [
    {
      "id": "change-capacity-buffer",
      "effects": {
        "capacityBuffer": 20
      }
    }
  ],
  "changeLessonLinks": [
    {
      "changeId": "change-capacity-buffer",
      "lessonIds": [
        "lesson-capacity-buffer"
      ]
    }
  ],
  "expectedRevision": 2,
  "idempotencyKey": "example-template-improvement-001"
}
```

## Output

An evidence-traced Template Improvement Proposal that remains pending human review and unpublished.

| Output field | Meaning |
| --- | --- |
| review | Published result field. |
| subject | Published result field. |
| receipt | Published result field. |
| duplicate | Published result field. |

- Stable ID: review.id
- Stable ID: subject.id
- Stable ID: subject.traces[].changeId
- Stable ID: subject.traces[].lessonIds[]
- Stable ID: receipt.id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| POST_EVENT_REVIEW_NOT_FOUND | Post-event Review is unavailable. | Create or restore the Runbook-bound Post-event Review before issuing this command. |
| POST_EVENT_TOOL_UNAVAILABLE | Post-event Review tooling is unavailable. | Connect a Post-event Review operation adapter before calling this tool. |
| POST_EVENT_INVALID | Post-event Review input is invalid. | Supply published metric, scope, evidence, lesson, and Proposal fields with stable identifiers. |
| POST_EVENT_REVISION_CONFLICT | Post-event Review revision conflict. | Refresh the Post-event Review and retry only if the transition is still required. |
| POST_EVENT_EVIDENCE_INVALID | Post-event evidence does not match the frozen baseline. | Reference an exact evidence ID and fingerprint frozen into this Post-event Review. |
| POST_EVENT_OBSERVATION_CONFLICT | An Observation already exists for this predicted outcome. | Use the accepted Observation or create a distinct metric scope before recording another outcome. |
| POST_EVENT_COMPARISON_NOT_FOUND | Post-event Comparison is unavailable. | Inspect the frozen Predictions and retry with an existing comparison key. |
| POST_EVENT_LESSON_NOT_FOUND | Post-event Lesson is unavailable. | Inspect the Post-event Review and retry with an existing stable Lesson ID. |
| POST_EVENT_TEMPLATE_PROPOSAL_NOT_FOUND | Template Improvement Proposal is unavailable. | Inspect the Post-event Review and retry with an existing stable Proposal ID. |
| POST_EVENT_TEMPLATE_PROPOSAL_INVALID | Template Improvement Proposal is invalid. | Trace every Change through a structured Lesson to an observed event-day outcome and a frozen template binding. |
| POST_EVENT_LEDGER_INTEGRITY_FAILED | Post-event Review ledger integrity failed. | Restore the last verified Post-event Review before inspection or export. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.export_post_event_report

Export an integrity-verified Post-event Report with provenance and ledger evidence.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:export.
- Read-only operation.
- Input limit 65536 bytes; output limit 2000000 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| format | json \| text | no | "json" | — | Requested read-only export representation. |

```json
{
  "format": "json"
}
```

## Output

An integrity-verified Post-event Report generated without persisted file storage.

| Output field | Meaning |
| --- | --- |
| filename | Published result field. |
| mimeType | Published result field. |
| content | Published result field. |

- Stable ID: content.identity.reviewId
- Stable ID: content.comparisons[].comparisonFingerprint
- Stable ID: content.ledger[].id

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |
| POST_EVENT_REVIEW_NOT_FOUND | Post-event Review is unavailable. | Create or restore the Runbook-bound Post-event Review before issuing this command. |
| POST_EVENT_TOOL_UNAVAILABLE | Post-event Review tooling is unavailable. | Connect a Post-event Review operation adapter before calling this tool. |
| POST_EVENT_INVALID | Post-event Review input is invalid. | Supply published metric, scope, evidence, lesson, and Proposal fields with stable identifiers. |
| POST_EVENT_REVISION_CONFLICT | Post-event Review revision conflict. | Refresh the Post-event Review and retry only if the transition is still required. |
| POST_EVENT_EVIDENCE_INVALID | Post-event evidence does not match the frozen baseline. | Reference an exact evidence ID and fingerprint frozen into this Post-event Review. |
| POST_EVENT_OBSERVATION_CONFLICT | An Observation already exists for this predicted outcome. | Use the accepted Observation or create a distinct metric scope before recording another outcome. |
| POST_EVENT_COMPARISON_NOT_FOUND | Post-event Comparison is unavailable. | Inspect the frozen Predictions and retry with an existing comparison key. |
| POST_EVENT_LESSON_NOT_FOUND | Post-event Lesson is unavailable. | Inspect the Post-event Review and retry with an existing stable Lesson ID. |
| POST_EVENT_TEMPLATE_PROPOSAL_NOT_FOUND | Template Improvement Proposal is unavailable. | Inspect the Post-event Review and retry with an existing stable Proposal ID. |
| POST_EVENT_TEMPLATE_PROPOSAL_INVALID | Template Improvement Proposal is invalid. | Trace every Change through a structured Lesson to an observed event-day outcome and a frozen template binding. |
| POST_EVENT_LEDGER_INTEGRITY_FAILED | Post-event Review ledger integrity failed. | Restore the last verified Post-event Review before inspection or export. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.export_audit_package

Export the portable audit package with Plan, Proposal, Validation, receipts, Comments, replay, and hash-chained Activity Ledger evidence.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:export.
- Read-only operation.
- Input limit 65536 bytes; output limit 2000000 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |


```json
{}
```

## Output

Portable geometry, Validation, ledger, receipts, reviews, and replay evidence.

| Output field | Meaning |
| --- | --- |
| format | Published result field. |
| filename | Published result field. |
| mimeType | Published result field. |
| encoding | Published result field. |
| content | Published result field. |

- Stable ID: content.plan.id
- Stable ID: content.ledger[].id
- Stable ID: content.validation.validationId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# venue.export_plan

Export the validated Plan as JSON, compact text, layered SVG, print-ready plan or emergency PDF, object, inventory, staffing, production, catering, or replenishment CSV, staffing or production SVG, or a portable audit package.

## Contract

- Contract version 1.6.0.
- Required Agent Grant scope venue:export.
- Read-only operation.
- Input limit 65536 bytes; output limit 2000000 bytes.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| format | json \| text \| svg \| pdf \| pdf-emergency \| csv \| csv-objects \| csv-inventory \| csv-staffing \| svg-post-map \| csv-production \| svg-production \| csv-catering-stations \| csv-replenishment \| audit | no | "json" | — | Requested read-only export representation. |

```json
{
  "format": "json"
}
```

## Output

Read-only plan export in the requested supported format.

| Output field | Meaning |
| --- | --- |
| format | Published result field. |
| filename | Published result field. |
| mimeType | Published result field. |
| encoding | Published result field. |
| content | Published result field. |

- Stable ID: content.planId
- Stable ID: content.proposalId
- Stable ID: content.validationId

## Errors

| Code | Message | Remediation |
| --- | --- | --- |
| TOOL_SCOPE_REQUIRED | Tool authorization scope is required. | Grant the published scope for this tool or use a read-only tool within the current session. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| AGENT_GRANT_INVALID | Agent Grant is invalid. | Issue a complete Organization- and Project-scoped grant with published scopes and a lifetime of one hour or less. |
| TOOL_PAYLOAD_TOO_LARGE | Tool payload exceeds its published size limit. | Reduce the requested geometry or export payload and retry within the published byte limit. |
| TOOL_CALL_CANCELLED | Tool call was cancelled. | Retry only if the caller still needs the operation, using the same idempotency key for an interrupted mutation. |
| VENUE_INTERNAL_ERROR | VenueMind could not complete the operation. | Retry once; if the error persists, inspect the server log with the correlation ID. |

## Surfaces

- [WebMCP runtime](https://venue-mind-jet.vercel.app/docs/webmcp#runtime)
- [Standalone MCP](https://venue-mind-jet.vercel.app/docs/mcp#surfaces)
- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# inspect_templates

Execute Inspect Templates through the shared VenueMind planner boundary.

## Contract

- Permission plan.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "inspect_templates" | yes | — | — | Stable command discriminator. |

```json
{
  "type": "inspect_templates"
}
```

## Output

Versioned reusable venue, room, and inventory definitions.

| Output field | Meaning |
| --- | --- |
| schemaVersion | Published result field. |
| venueTemplates[] | Published result field. |
| roomTemplates[] | Published result field. |
| inventoryTemplates[] | Published result field. |

- Stable ID: venueTemplates[].id
- Stable ID: roomTemplates[].id
- Stable ID: inventoryTemplates[].id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# measure_objects

Execute Measure Objects through the shared VenueMind planner boundary.

## Contract

- Permission plan.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "measure_objects" | yes | — | — | Stable command discriminator. |
| objectIds | string[] | yes | — | min 1 items; unique items | Published contract field. |

```json
{
  "type": "measure_objects",
  "objectIds": [
    "object-example"
  ]
}
```

## Output

Read-only centre and distance measurements in canonical metres.

| Output field | Meaning |
| --- | --- |
| objectIds[] | Stable identifier. |
| centers | Published result field. |
| distances[] | Published result field. |

- Stable ID: objectIds[]
- Stable ID: distances[].fromObjectId
- Stable ID: distances[].toObjectId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# inspect_layout

Execute Inspect Layout through the shared VenueMind planner boundary.

## Contract

- Permission plan.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "inspect_layout" | yes | — | — | Stable command discriminator. |

```json
{
  "type": "inspect_layout"
}
```

## Output

The bounded accepted Plan and visible Proposal inspection used to start every planning workflow.

| Output field | Meaning |
| --- | --- |
| planId | Stable identifier. |
| planVersion | Published result field. |
| event | Published result field. |
| venue | Published result field. |
| templateBindings | Published result field. |
| inventoryAvailability | Published result field. |
| occupancy | Published result field. |
| staffing | Published result field. |
| productionPolicy | Published result field. |
| cateringPolicy | Published result field. |
| emergencyPlan | Published result field. |
| emergencyReviews | Published result field. |
| spatial | Published result field. |
| spatialObjects[] | Published result field. |
| lockedObjects[] | Published result field. |
| projectLocks[] | Published result field. |
| comments[] | Published result field. |
| scenarios[] | Published result field. |
| scenarioRuns[] | Published result field. |
| constraints[] | Published result field. |
| metrics | Published result field. |
| proposal | Published result field. |
| activeBranchId | Stable identifier. |
| proposalBranches[] | Published result field. |
| commandReceiptCount | Published result field. |
| ledgerIntegrity | Published result field. |
| brief | Published result field. |

- Stable ID: planId
- Stable ID: spatialObjects[].id
- Stable ID: constraints[].id
- Stable ID: proposal.id
- Stable ID: proposal.changes[].id
- Stable ID: activeBranchId
- Stable ID: proposalBranches[].id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# get_project_brief

Execute Get Project Brief through the shared VenueMind planner boundary.

## Contract

- Permission plan.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "get_project_brief" | yes | — | — | Stable command discriminator. |

```json
{
  "type": "get_project_brief"
}
```

## Output

The active Event Brief and exact requirement-to-evidence coverage.

| Output field | Meaning |
| --- | --- |
| id | Stable identifier. |
| eventName | Published result field. |
| date | Published result field. |
| timezone | Published result field. |
| venueId | Published result field. |
| roomId | Published result field. |
| attendeeTarget | Published result field. |
| occupancyMode | Published result field. |
| schedule | Published result field. |
| planningEffectBindings | Published result field. |
| requirements[] | Published result field. |
| coverage | Published result field. |
| coverageMatrix | Published result field. |
| ambiguities[] | Published result field. |
| summary | Published result field. |

- Stable ID: id
- Stable ID: planningEffectBindings.*.targetRequirementId
- Stable ID: planningEffectBindings.*.affectedConstraintIds[]
- Stable ID: requirements[].id
- Stable ID: coverageMatrix[].constraintId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# list_constraints

Execute List Constraints through the shared VenueMind planner boundary.

## Contract

- Permission plan.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "list_constraints" | yes | — | — | Stable command discriminator. |
| category | string | no | — | min 1 chars | Published contract field. |
| severity | error \| warning \| preference | no | — | — | Published contract field. |

```json
{
  "type": "list_constraints"
}
```

## Output

Filtered canonical Constraint records.

| Output field | Meaning |
| --- | --- |
| result[] | Published result field. |

- Stable ID: result[].id
- Stable ID: result[].checkId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# get_validation_evidence

Execute Get Validation Evidence through the shared VenueMind planner boundary.

## Contract

- Permission plan.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "get_validation_evidence" | yes | — | — | Stable command discriminator. |
| validationId | string | no | — | min 1 chars | Published contract field. |
| constraintIds | string[] | no | — | max 50 items; unique items | Published contract field. |
| includeSpatialEvidence | boolean | no | true | — | Include bounded spatial evidence in the response. |

```json
{
  "type": "get_validation_evidence"
}
```

## Output

A bounded evidence view of one Validation result and its exact evidence-family invalidations.

| Output field | Meaning |
| --- | --- |
| validationId | Stable identifier. |
| inputFingerprint | Published result field. |
| engineVersion | Published result field. |
| evaluatedPlanVersion | Published result field. |
| evaluatedProposalId | Stable identifier. |
| status | Published result field. |
| unresolvedIssues | Published result field. |
| candidateGeometryFingerprint | Published result field. |
| evidenceFingerprint | Published result field. |
| evidenceFamilyFingerprints | Published result field. |
| planningEvidenceInvalidations | Published result field. |
| checks[] | Published result field. |
| spatialEvidence | Published result field. |
| productionEvidence | Published result field. |
| cateringEvidence | Published result field. |
| emergencyEvidence | Published result field. |

- Stable ID: validationId
- Stable ID: evaluatedProposalId
- Stable ID: checks[].constraintId
- Stable ID: checks[].evidenceId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# get_object

Execute Get Object through the shared VenueMind planner boundary.

## Contract

- Permission plan.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "get_object" | yes | — | — | Stable command discriminator. |
| objectId | string | yes | — | min 1 chars | Stable Project-scoped object ID. |
| scope | accepted \| proposal | no | proposal | — | Accepted Plan or visible Proposal candidate. |

```json
{
  "type": "get_object",
  "objectId": "object-example"
}
```

## Output

One accepted or Proposal candidate object with geometry and metadata.

| Output field | Meaning |
| --- | --- |
| scope | Published result field. |
| planId | Stable identifier. |
| planVersion | Published result field. |
| proposalId | Stable identifier. |
| object | Published result field. |

- Stable ID: planId
- Stable ID: proposalId
- Stable ID: object.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# search_objects

Execute Search Objects through the shared VenueMind planner boundary.

## Contract

- Permission plan.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "search_objects" | yes | — | — | Stable command discriminator. |
| query | string | no | — | max 200 chars | Published contract field. |
| kinds | string[] | no | — | max 10 items; unique items | Published contract field. |
| layers | architecture \| furniture \| access \| production \| catering \| safety \| annotations[] | no | — | max 7 items; unique items | Published contract field. |
| locked | boolean | no | — | — | Published contract field. |
| scope | accepted \| proposal | no | proposal | — | Accepted Plan or visible Proposal candidate. |
| limit | integer | no | 20 | ≥ 1; ≤ 50 | Maximum number of returned records. |

```json
{
  "type": "search_objects"
}
```

## Output

A bounded object search result.

| Output field | Meaning |
| --- | --- |
| scope | Published result field. |
| planId | Stable identifier. |
| planVersion | Published result field. |
| proposalId | Stable identifier. |
| total | Published result field. |
| limit | Published result field. |
| truncated | Published result field. |
| objects[] | Published result field. |

- Stable ID: planId
- Stable ID: proposalId
- Stable ID: objects[].id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# validate_layout

Execute Validate Layout through the shared VenueMind planner boundary.

## Contract

- Permission plan.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "validate_layout" | yes | — | — | Stable command discriminator. |

```json
{
  "type": "validate_layout"
}
```

## Output

Deterministic Validation for one exact immutable input fingerprint, including typed evidence-family invalidation evidence.

| Output field | Meaning |
| --- | --- |
| validationId | Stable identifier. |
| inputFingerprint | Published result field. |
| engineVersion | Published result field. |
| evaluatedPlanVersion | Published result field. |
| evaluatedProposalId | Stable identifier. |
| status | Published result field. |
| checks[] | Published result field. |
| candidateMetrics | Published result field. |
| candidateGeometryFingerprint | Published result field. |
| spatialEvidence | Published result field. |
| productionEvidence | Published result field. |
| cateringEvidence | Published result field. |
| emergencyEvidence | Published result field. |
| evidenceFamilyFingerprints | Published result field. |
| planningEvidenceInvalidations | Published result field. |
| emergencyReviewRequired | Published result field. |
| emergencyChangedObjectIds[] | Stable identifier. |
| authorizedEmergencyReviewerRoles[] | Published result field. |
| blockingIssues | Published result field. |
| waivedWarnings | Published result field. |
| unwaivedWarnings | Published result field. |
| unresolvedIssues | Published result field. |
| inventoryAvailability | Published result field. |
| inventoryWarnings | Published result field. |

- Stable ID: validationId
- Stable ID: evaluatedProposalId
- Stable ID: checks[].constraintId
- Stable ID: checks[].evidenceId
- Stable ID: emergencyChangedObjectIds[]

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# list_branches

Execute List Branches through the shared VenueMind planner boundary.

## Contract

- Permission proposal.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "list_branches" | yes | — | — | Stable command discriminator. |

```json
{
  "type": "list_branches"
}
```

## Output

Proposal Branch summaries and current revision state.

| Output field | Meaning |
| --- | --- |
| result[] | Published result field. |

- Stable ID: result[].id
- Stable ID: result[].proposalId
- Stable ID: result[].revisionIds[]

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| BRANCH_NOT_FOUND | Proposal Branch not found. | List Proposal Branches and retry with an existing stable Branch ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# compare_branches

Execute Compare Branches through the shared VenueMind planner boundary.

## Contract

- Permission proposal.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "compare_branches" | yes | — | — | Stable command discriminator. |
| leftBranchId | string | yes | — | min 1 chars | Published contract field. |
| rightBranchId | string | yes | — | min 1 chars | Published contract field. |

```json
{
  "type": "compare_branches",
  "leftBranchId": "left-branch-example",
  "rightBranchId": "right-branch-example"
}
```

## Output

Deterministic spatial and operational comparison of two Branches.

| Output field | Meaning |
| --- | --- |
| comparisonId | Stable identifier. |
| planVersion | Published result field. |
| left | Published result field. |
| right | Published result field. |
| changeSet | Published result field. |
| metricDeltas | Published result field. |
| constraintDeltas | Published result field. |
| overlay | Published result field. |
| decisionEvidence | Published result field. |

- Stable ID: comparisonId
- Stable ID: left.branchId
- Stable ID: right.branchId
- Stable ID: changeSet[].changeId
- Stable ID: constraintDeltas[].constraintId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| BRANCH_NOT_FOUND | Proposal Branch not found. | List Proposal Branches and retry with an existing stable Branch ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# get_change_log

Execute Get Change Log through the shared VenueMind planner boundary.

## Contract

- Permission audit.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "get_change_log" | yes | — | — | Stable command discriminator. |

```json
{
  "type": "get_change_log"
}
```

## Output

Ordered hash-chained Activity Ledger entries.

| Output field | Meaning |
| --- | --- |
| result[] | Published result field. |

- Stable ID: result[].id
- Stable ID: result[].hash
- Stable ID: result[].previousHash

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# replay_history

Execute Replay History through the shared VenueMind planner boundary.

## Contract

- Permission audit.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "replay_history" | yes | — | — | Stable command discriminator. |

```json
{
  "type": "replay_history"
}
```

## Output

Replay verification from accepted transitions to current Plan and Event Brief truth.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| transitions[] | Published result field. |
| briefTransitions[] | Published result field. |
| currentPlanVersion | Published result field. |
| replayedFingerprint | Published result field. |
| currentFingerprint | Published result field. |
| replayedBriefFingerprint | Published result field. |
| currentBriefFingerprint | Published result field. |
| ledgerHeadHash | Published result field. |
| lockedObjectViolations[] | Published result field. |
| truthFingerprintViolations[] | Published result field. |

- Stable ID: transitions[].ledgerEntryId
- Stable ID: transitions[].planVersion
- Stable ID: briefTransitions[].ledgerEntryId
- Stable ID: lockedObjectViolations[].objectId
- Stable ID: truthFingerprintViolations[].ledgerEntryId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# list_scenarios

Execute List Scenarios through the shared VenueMind planner boundary.

## Contract

- Permission simulation.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "list_scenarios" | yes | — | — | Stable command discriminator. |

```json
{
  "type": "list_scenarios"
}
```

## Output

Versioned Scenario definitions.

| Output field | Meaning |
| --- | --- |
| result[] | Published result field. |

- Stable ID: result[].id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| SCENARIO_RUN_NOT_FOUND | Scenario Run not found. | List Scenario Runs and retry with an existing stable Run ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# list_scenario_runs

Execute List Scenario Runs through the shared VenueMind planner boundary.

## Contract

- Permission simulation.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "list_scenario_runs" | yes | — | — | Stable command discriminator. |

```json
{
  "type": "list_scenario_runs"
}
```

## Output

Simulation Run summaries, progress, and terminal status.

| Output field | Meaning |
| --- | --- |
| result[] | Published result field. |

- Stable ID: result[].id
- Stable ID: result[].scenarioId
- Stable ID: result[].branchId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| SCENARIO_RUN_NOT_FOUND | Scenario Run not found. | List Scenario Runs and retry with an existing stable Run ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# get_scenario_result

Execute Get Scenario Result through the shared VenueMind planner boundary.

## Contract

- Permission simulation.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "get_scenario_result" | yes | — | — | Stable command discriminator. |
| runId | string | yes | — | min 1 chars | Stable Simulation Run ID. |
| includeDensityFrames | boolean | no | false | — | Include time-keyed density cells in the result. |

```json
{
  "type": "get_scenario_result",
  "runId": "run-example"
}
```

## Output

One Simulation Result bound to exact Scenario and geometry fingerprints.

| Output field | Meaning |
| --- | --- |
| schemaVersion | Published result field. |
| kind | Published result field. |
| model | Published result field. |
| engineVersion | Published result field. |
| inputFingerprint | Published result field. |
| scenarioFingerprint | Published result field. |
| scenarioId | Stable identifier. |
| branchId | Stable identifier. |
| planVersion | Published result field. |
| proposalId | Stable identifier. |
| status | Published result field. |
| parameters | Published result field. |
| progress | Published result field. |
| partial | Published result field. |
| result | Published result field. |
| confidence | Published result field. |
| startedAt | Published result field. |
| completedAt | Published result field. |

- Stable ID: scenarioId
- Stable ID: branchId
- Stable ID: proposalId
- Stable ID: result.runId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| SCENARIO_RUN_NOT_FOUND | Scenario Run not found. | List Scenario Runs and retry with an existing stable Run ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# run_scenario

Execute Run Scenario through the shared VenueMind planner boundary.

## Contract

- Permission simulation.run.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "run_scenario" | yes | — | — | Stable command discriminator. |
| scenario | object | yes | — | — | Published contract field. |
| branchId | string | no | — | min 1 chars | Stable Proposal Branch ID. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "run_scenario",
  "scenario": {
    "id": "example-id",
    "seed": 1,
    "horizonSeconds": 1,
    "inputs": {
      "population": 1,
      "arrivalRatePerMinute": 1,
      "serviceRatePerMinute": 1,
      "servers": 1
    }
  },
  "idempotencyKey": "example-command-001"
}
```

## Output

A deterministic-seed Simulation Run; it never becomes Constraint Validation.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| runId | Stable identifier. |
| scenarioId | Stable identifier. |
| branchId | Stable identifier. |
| inputFingerprint | Published result field. |
| cacheHit | Published result field. |
| result | Published result field. |
| receipt | Published result field. |

- Stable ID: runId
- Stable ID: scenarioId
- Stable ID: branchId
- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| SCENARIO_RUN_NOT_FOUND | Scenario Run not found. | List Scenario Runs and retry with an existing stable Run ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# compare_simulations

Execute Compare Simulations through the shared VenueMind planner boundary.

## Contract

- Permission simulation.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "compare_simulations" | yes | — | — | Stable command discriminator. |
| leftRunId | string | yes | — | min 1 chars | Published contract field. |
| rightRunId | string | yes | — | min 1 chars | Published contract field. |

```json
{
  "type": "compare_simulations",
  "leftRunId": "left-run-example",
  "rightRunId": "right-run-example"
}
```

## Output

Comparison of compatible completed Simulation Runs.

| Output field | Meaning |
| --- | --- |
| comparisonId | Stable identifier. |
| leftRunId | Stable identifier. |
| rightRunId | Stable identifier. |
| scenarioFingerprint | Published result field. |
| engineVersion | Published result field. |
| metrics | Published result field. |
| deltas | Published result field. |

- Stable ID: comparisonId
- Stable ID: leftRunId
- Stable ID: rightRunId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| SCENARIO_RUN_NOT_FOUND | Scenario Run not found. | List Scenario Runs and retry with an existing stable Run ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# export_simulation

Execute Export Simulation through the shared VenueMind planner boundary.

## Contract

- Permission export.plan.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "export_simulation" | yes | — | — | Stable command discriminator. |
| runId | string | yes | — | min 1 chars | Stable Simulation Run ID. |

```json
{
  "type": "export_simulation",
  "runId": "run-example"
}
```

## Output

Portable simulation parameters, fingerprints, and results.

| Output field | Meaning |
| --- | --- |
| format | Published result field. |
| filename | Published result field. |
| mimeType | Published result field. |
| encoding | Published result field. |
| content | Published result field. |

- Stable ID: content.runId
- Stable ID: content.scenarioId
- Stable ID: content.branchId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| SCENARIO_RUN_NOT_FOUND | Scenario Run not found. | List Scenario Runs and retry with an existing stable Run ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# detect_conflicts

Execute Detect Conflicts through the shared VenueMind planner boundary.

## Contract

- Permission proposal.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "detect_conflicts" | yes | — | — | Stable command discriminator. |
| branchId | string | no | — | min 1 chars | Stable Proposal Branch ID. |

```json
{
  "type": "detect_conflicts"
}
```

## Output

Current stale-base, dependency, Lock, overlap, and Constraint conflicts.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| branchId | Stable identifier. |
| proposalId | Stable identifier. |
| stale | Published result field. |
| baseVersion | Published result field. |
| currentVersion | Published result field. |
| conflicts[] | Published result field. |
| blockingConflicts | Published result field. |
| validation | Published result field. |

- Stable ID: branchId
- Stable ID: proposalId
- Stable ID: conflicts[].id
- Stable ID: conflicts[].changeIds[]
- Stable ID: conflicts[].objectIds[]

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| CONFLICT_NOT_FOUND | Proposal conflict not found. | Detect current Proposal conflicts and retry with a stable conflict ID. |
| CONFLICT_RESOLUTION_INVALID | Conflict resolution is not valid for this conflict. | Choose one of the conflict's published resolution options. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# preview_revision

Execute Preview Revision through the shared VenueMind planner boundary.

## Contract

- Permission proposal.create.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "preview_revision" | yes | — | — | Stable command discriminator. |
| goal | string | yes | — | min 1 chars | Measurable Proposal outcome. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "preview_revision",
  "goal": "Improve access while preserving capacity",
  "idempotencyKey": "example-command-001"
}
```

## Output

A non-destructive Proposal revision; accepted Plan truth is unchanged.

| Output field | Meaning |
| --- | --- |
| proposalId | Stable identifier. |
| baseVersion | Published result field. |
| revision | Published result field. |
| changedItems | Published result field. |
| requiresHumanApproval | Published result field. |
| receipt | Published result field. |

- Stable ID: proposalId
- Stable ID: receipt.id
- Stable ID: receipt.resultIds.changeId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# preview_template_update

Execute Preview Template Update through the shared VenueMind planner boundary.

## Contract

- Permission proposal.create.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "preview_template_update" | yes | — | — | Stable command discriminator. |
| templateId | string | yes | — | min 1 chars | Published contract field. |
| toVersion | string | yes | — | pattern ^[0-9]+\.[0-9]+\.[0-9]+$ | Published contract field. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "preview_template_update",
  "templateId": "template-example",
  "toVersion": "1.1.0",
  "idempotencyKey": "example-command-001"
}
```

## Output

A reviewable Room Template update Proposal.

| Output field | Meaning |
| --- | --- |
| proposalId | Stable identifier. |
| branchId | Stable identifier. |
| baseVersion | Published result field. |
| templateId | Stable identifier. |
| fromVersion | Published result field. |
| toVersion | Published result field. |
| changedItems | Published result field. |
| preservedOverrides | Published result field. |
| requiresHumanApproval | Published result field. |
| receipt | Published result field. |

- Stable ID: proposalId
- Stable ID: branchId
- Stable ID: templateId
- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# apply_edit

Execute Apply Edit through the shared VenueMind planner boundary.

## Contract

- Permission proposal.manage.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "apply_edit" | yes | — | — | Stable command discriminator. |
| edit | object | yes | — | — | Published contract field. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "apply_edit",
  "edit": {
    "operation": "place"
  },
  "idempotencyKey": "example-command-001"
}
```

## Output

One Proposal-safe editing operation.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| proposalId | Stable identifier. |
| changeId | Stable identifier. |
| operation | Published result field. |
| changedItems | Published result field. |
| requiresHumanApproval | Published result field. |
| receipt | Published result field. |

- Stable ID: proposalId
- Stable ID: changeId
- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# create_branch

Execute Create Branch through the shared VenueMind planner boundary.

## Contract

- Permission proposal.create.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "create_branch" | yes | — | — | Stable command discriminator. |
| name | string | yes | — | min 1 chars | Published contract field. |
| strategy | balanced \| access-first \| circulation-first \| sightlines-first | yes | — | — | Published contract field. |
| goal | string | no | — | — | Measurable Proposal outcome. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "create_branch",
  "name": "example-name",
  "strategy": "balanced",
  "idempotencyKey": "example-command-001"
}
```

## Output

A new independent Proposal Branch.

| Output field | Meaning |
| --- | --- |
| branchId | Stable identifier. |
| proposalId | Stable identifier. |
| strategy | Published result field. |
| changedItems | Published result field. |
| receipt | Published result field. |

- Stable ID: branchId
- Stable ID: proposalId
- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| BRANCH_NOT_FOUND | Proposal Branch not found. | List Proposal Branches and retry with an existing stable Branch ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# recover_unsynchronized_branch

Execute Recover Unsynchronized Branch through the shared VenueMind planner boundary.

## Contract

- Permission proposal.manage.
- Retry-safe mutation with a required idempotency key.
- Human authority is required.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "recover_unsynchronized_branch" | yes | — | — | Stable command discriminator. |
| name | string | no | — | min 1 chars | Published contract field. |
| proposal | object | yes | — | — | Published contract field. |
| sourceRevision | integer \| null | no | — | ≥ 1 | Published contract field. |
| remoteRevision | integer \| null | no | — | ≥ 1 | Published contract field. |
| actor | const "human" | yes | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "recover_unsynchronized_branch",
  "proposal": {},
  "actor": "human",
  "idempotencyKey": "example-command-001"
}
```

## Output

Planner command result and retry-safe receipt where applicable.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| receipt | Published result field. |

- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| BRANCH_NOT_FOUND | Proposal Branch not found. | List Proposal Branches and retry with an existing stable Branch ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# record_share_link_created

Execute Record Share Link Created through the shared VenueMind planner boundary.

## Contract

- Permission project.manage.
- Retry-safe mutation with a required idempotency key.
- Human authority is required.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "record_share_link_created" | yes | — | — | Stable command discriminator. |
| shareLinkId | string | yes | — | min 1 chars | Published contract field. |
| scope | read-only \| reviewer | yes | — | — | Accepted Plan or visible Proposal candidate. |
| proposalId | string \| null | no | — | — | Stable Proposal ID. |
| expiresAt | string | yes | — | format date-time | Published contract field. |
| actor | const "human" | yes | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "record_share_link_created",
  "shareLinkId": "share-link-example",
  "scope": "read-only",
  "expiresAt": "2026-08-27T10:00:00.000Z",
  "actor": "human",
  "idempotencyKey": "example-command-001"
}
```

## Output

Planner command result and retry-safe receipt where applicable.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| receipt | Published result field. |

- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# record_share_link_revoked

Execute Record Share Link Revoked through the shared VenueMind planner boundary.

## Contract

- Permission project.manage.
- Retry-safe mutation with a required idempotency key.
- Human authority is required.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "record_share_link_revoked" | yes | — | — | Stable command discriminator. |
| shareLinkId | string | yes | — | min 1 chars | Published contract field. |
| reasonCode | string | no | — | min 1 chars | Published contract field. |
| actor | const "human" | yes | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "record_share_link_revoked",
  "shareLinkId": "share-link-example",
  "actor": "human",
  "idempotencyKey": "example-command-001"
}
```

## Output

Planner command result and retry-safe receipt where applicable.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| receipt | Published result field. |

- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# switch_branch

Execute Switch Branch through the shared VenueMind planner boundary.

## Contract

- Permission proposal.manage.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "switch_branch" | yes | — | — | Stable command discriminator. |
| branchId | string | yes | — | min 1 chars | Stable Proposal Branch ID. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "switch_branch",
  "branchId": "branch-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

Activates one existing Branch without changing accepted Plan truth.

| Output field | Meaning |
| --- | --- |
| branchId | Stable identifier. |
| proposalId | Stable identifier. |
| status | Published result field. |
| receipt | Published result field. |

- Stable ID: branchId
- Stable ID: proposalId
- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| BRANCH_NOT_FOUND | Proposal Branch not found. | List Proposal Branches and retry with an existing stable Branch ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# update_branch_metadata

Execute Update Branch Metadata through the shared VenueMind planner boundary.

## Contract

- Permission proposal.manage.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "update_branch_metadata" | yes | — | — | Stable command discriminator. |
| branchId | string | yes | — | min 1 chars | Stable Proposal Branch ID. |
| name | string | no | — | min 1 chars | Published contract field. |
| notes | string | no | — | max 2000 chars | Published contract field. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "update_branch_metadata",
  "branchId": "branch-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

Updated human-readable Branch metadata.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| branchId | Stable identifier. |
| name | Published result field. |
| notes | Published result field. |
| receipt | Published result field. |

- Stable ID: branchId
- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| BRANCH_NOT_FOUND | Proposal Branch not found. | List Proposal Branches and retry with an existing stable Branch ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# duplicate_branch

Execute Duplicate Branch through the shared VenueMind planner boundary.

## Contract

- Permission proposal.create.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "duplicate_branch" | yes | — | — | Stable command discriminator. |
| branchId | string | yes | — | min 1 chars | Stable Proposal Branch ID. |
| proposalId | string | no | — | min 1 chars | Stable Proposal ID. |
| name | string | no | — | min 1 chars | Published contract field. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "duplicate_branch",
  "branchId": "branch-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

A new Branch with explicit source lineage.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| branchId | Stable identifier. |
| proposalId | Stable identifier. |
| sourceBranchId | Stable identifier. |
| sourceProposalId | Stable identifier. |
| receipt | Published result field. |

- Stable ID: branchId
- Stable ID: proposalId
- Stable ID: sourceBranchId
- Stable ID: sourceProposalId
- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| BRANCH_NOT_FOUND | Proposal Branch not found. | List Proposal Branches and retry with an existing stable Branch ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# archive_branch

Execute Archive Branch through the shared VenueMind planner boundary.

## Contract

- Permission proposal.manage.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "archive_branch" | yes | — | — | Stable command discriminator. |
| branchId | string | yes | — | min 1 chars | Stable Proposal Branch ID. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "archive_branch",
  "branchId": "branch-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

Archived Branch state and safe active fallback.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| branchId | Stable identifier. |
| activeBranchId | Stable identifier. |
| receipt | Published result field. |

- Stable ID: branchId
- Stable ID: activeBranchId
- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| BRANCH_NOT_FOUND | Proposal Branch not found. | List Proposal Branches and retry with an existing stable Branch ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# restore_branch

Execute Restore Branch through the shared VenueMind planner boundary.

## Contract

- Permission proposal.manage.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "restore_branch" | yes | — | — | Stable command discriminator. |
| branchId | string | yes | — | min 1 chars | Stable Proposal Branch ID. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "restore_branch",
  "branchId": "branch-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

Restored Branch state.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| branchId | Stable identifier. |
| receipt | Published result field. |

- Stable ID: branchId
- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| BRANCH_NOT_FOUND | Proposal Branch not found. | List Proposal Branches and retry with an existing stable Branch ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# record_branch_decision

Execute Record Branch Decision through the shared VenueMind planner boundary.

## Contract

- Permission proposal.review.
- Retry-safe mutation with a required idempotency key.
- Human authority is required.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "record_branch_decision" | yes | — | — | Stable command discriminator. |
| chosenBranchId | string | yes | — | min 1 chars | Published contract field. |
| rejectedBranchIds | string[] | yes | — | min 1 items; unique items | Published contract field. |
| comparisonId | string | no | — | min 1 chars | Published contract field. |
| note | string | no | — | max 2000 chars | Published contract field. |
| actor | const "human" | yes | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | yes | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "record_branch_decision",
  "chosenBranchId": "chosen-branch-example",
  "rejectedBranchIds": [
    "rejected-branch-example"
  ],
  "actor": "human",
  "actorId": "actor-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

Auditable human branch decision checkpoint.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| decisionId | Stable identifier. |
| chosenBranchId | Stable identifier. |
| rejectedBranchIds | Published result field. |

- Stable ID: decisionId
- Stable ID: chosenBranchId
- Stable ID: rejectedBranchIds[]

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| BRANCH_NOT_FOUND | Proposal Branch not found. | List Proposal Branches and retry with an existing stable Branch ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# list_comments

Execute List Comments through the shared VenueMind planner boundary.

## Contract

- Permission comment.read.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "list_comments" | yes | — | — | Stable command discriminator. |
| filters | object | no | — | — | Published contract field. |

```json
{
  "type": "list_comments"
}
```

## Output

Filtered immutable-subject comments.

| Output field | Meaning |
| --- | --- |
| result[] | Published result field. |

- Stable ID: result[].id
- Stable ID: result[].anchor.subjectId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| COMMENT_NOT_FOUND | Comment not found. | List comments and retry with an existing stable Comment ID. |
| COMMENT_INVALID | Comment metadata is invalid. | Provide a non-empty comment body, supported status, and published fields. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# add_comment

Execute Add Comment through the shared VenueMind planner boundary.

## Contract

- Permission comment.write.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "add_comment" | yes | — | — | Stable command discriminator. |
| anchor | object | yes | — | — | Published contract field. |
| body | string | yes | — | min 1 chars; max 5000 chars | Published contract field. |
| mentions | string[] | no | — | unique items | Published contract field. |
| decisionRelevant | boolean | no | — | — | Published contract field. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | yes | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "add_comment",
  "anchor": {
    "kind": "project"
  },
  "body": "example-body",
  "actorId": "actor-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

Created collaboration record without planning mutation.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| commentId | Stable identifier. |
| anchor | Published result field. |
| receipt | Published result field. |

- Stable ID: commentId
- Stable ID: anchor.subjectId
- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| COMMENT_NOT_FOUND | Comment not found. | List comments and retry with an existing stable Comment ID. |
| COMMENT_INVALID | Comment metadata is invalid. | Provide a non-empty comment body, supported status, and published fields. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# edit_comment

Execute Edit Comment through the shared VenueMind planner boundary.

## Contract

- Permission comment.write.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "edit_comment" | yes | — | — | Stable command discriminator. |
| commentId | string | yes | — | min 1 chars | Published contract field. |
| body | string | yes | — | min 1 chars; max 5000 chars | Published contract field. |
| mentions | string[] | no | — | unique items | Published contract field. |
| decisionRelevant | boolean | no | — | — | Published contract field. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | yes | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "edit_comment",
  "commentId": "comment-example",
  "body": "example-body",
  "actorId": "actor-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

New immutable edit-history entry for one Comment.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| commentId | Stable identifier. |
| editNumber | Published result field. |
| receipt | Published result field. |

- Stable ID: commentId
- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| COMMENT_NOT_FOUND | Comment not found. | List comments and retry with an existing stable Comment ID. |
| COMMENT_INVALID | Comment metadata is invalid. | Provide a non-empty comment body, supported status, and published fields. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# set_comment_status

Execute Set Comment Status through the shared VenueMind planner boundary.

## Contract

- Permission comment.write.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "set_comment_status" | yes | — | — | Stable command discriminator. |
| commentId | string | yes | — | min 1 chars | Published contract field. |
| status | open \| resolved | yes | — | — | Published contract field. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | yes | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "set_comment_status",
  "commentId": "comment-example",
  "status": "open",
  "actorId": "actor-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

Resolved or reopened Comment state.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| commentId | Stable identifier. |
| receipt | Published result field. |

- Stable ID: commentId
- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| COMMENT_NOT_FOUND | Comment not found. | List comments and retry with an existing stable Comment ID. |
| COMMENT_INVALID | Comment metadata is invalid. | Provide a non-empty comment body, supported status, and published fields. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# request_adjustment

Execute Request Adjustment through the shared VenueMind planner boundary.

## Contract

- Permission proposal.manage.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "request_adjustment" | yes | — | — | Stable command discriminator. |
| instruction | string | yes | — | min 1 chars | Published contract field. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "request_adjustment",
  "instruction": "Increase rear clearance",
  "idempotencyKey": "example-command-001"
}
```

## Output

A revised Proposal created from a bounded adjustment instruction.

| Output field | Meaning |
| --- | --- |
| proposalId | Stable identifier. |
| revision | Published result field. |
| status | Published result field. |
| receipt | Published result field. |

- Stable ID: proposalId
- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# revert_change

Execute Revert Change through the shared VenueMind planner boundary.

## Contract

- Permission proposal.manage.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "revert_change" | yes | — | — | Stable command discriminator. |
| changeId | string | yes | — | min 1 chars | Published contract field. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "revert_change",
  "changeId": "change-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

Proposal revision with one Change removed.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| proposalId | Stable identifier. |
| changeId | Stable identifier. |
| changedItems | Published result field. |

- Stable ID: proposalId
- Stable ID: changeId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# waive_warning

Execute Waive Warning through the shared VenueMind planner boundary.

## Contract

- Permission approval.waive.
- Retry-safe mutation with a required idempotency key.
- Human authority is required.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "waive_warning" | yes | — | — | Stable command discriminator. |
| constraintId | string | yes | — | min 1 chars | Stable Constraint ID. |
| reasonCode | operational-acceptance \| temporary-condition \| equivalent-control \| owner-approved-deviation | yes | — | — | Published contract field. |
| actor | const "human" | yes | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | yes | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "waive_warning",
  "constraintId": "constraint-example",
  "reasonCode": "operational-acceptance",
  "actor": "human",
  "actorId": "actor-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

Human-authored warning disposition bound to one Validation input.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| waiverId | Stable identifier. |
| constraintId | Stable identifier. |
| proposalId | Stable identifier. |
| validationInputFingerprint | Published result field. |

- Stable ID: waiverId
- Stable ID: constraintId
- Stable ID: proposalId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| WARNING_NOT_WAIVABLE | Constraint does not have a waivable warning. | Validate again and select an open warning Constraint. |
| WAIVER_REASON_INVALID | Warning Waiver requires a supported reason code. | Choose one reason code from the Warning Waiver contract. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# set_object_lock

Execute Set Object Lock through the shared VenueMind planner boundary.

## Contract

- Permission lock.manage.
- Retry-safe mutation with a required idempotency key.
- Human authority is required.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "set_object_lock" | yes | — | — | Stable command discriminator. |
| objectId | string | yes | — | min 1 chars | Stable Project-scoped object ID. |
| lockType | position \| rotation \| dimension \| deletion \| role | yes | — | — | Published contract field. |
| reasonCode | string | yes | — | min 1 chars | Published contract field. |
| expiresAt | string \| null | no | — | format date-time | Published contract field. |
| actor | const "human" | yes | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | yes | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "set_object_lock",
  "objectId": "object-example",
  "lockType": "position",
  "reasonCode": "example-reasonCode",
  "actor": "human",
  "actorId": "actor-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

Human-authored temporary Project Lock.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| lockId | Stable identifier. |
| objectId | Stable identifier. |
| lockType | Published result field. |
| source | Published result field. |

- Stable ID: lockId
- Stable ID: objectId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| LOCK_CONFLICT | Proposal Change conflicts with an active Lock. | Remove the locked property mutation or have a human release the applicable Project Lock. |
| LOCK_NOT_FOUND | Project Lock not found. | Inspect Project Locks and retry with an active stable Lock ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# release_object_lock

Execute Release Object Lock through the shared VenueMind planner boundary.

## Contract

- Permission lock.manage.
- Retry-safe mutation with a required idempotency key.
- Human authority is required.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "release_object_lock" | yes | — | — | Stable command discriminator. |
| lockId | string | yes | — | min 1 chars | Published contract field. |
| actor | const "human" | yes | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | yes | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "release_object_lock",
  "lockId": "lock-example",
  "actor": "human",
  "actorId": "actor-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

Released Project Lock record.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| lockId | Stable identifier. |
| objectId | Stable identifier. |
| lockType | Published result field. |

- Stable ID: lockId
- Stable ID: objectId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| LOCK_CONFLICT | Proposal Change conflicts with an active Lock. | Remove the locked property mutation or have a human release the applicable Project Lock. |
| LOCK_NOT_FOUND | Project Lock not found. | Inspect Project Locks and retry with an active stable Lock ID. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# approve_proposal

Execute Approve Proposal through the shared VenueMind planner boundary.

## Contract

- Permission approval.approve.
- Retry-safe mutation with a required idempotency key.
- Human authority is required.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "approve_proposal" | yes | — | — | Stable command discriminator. |
| proposalId | string | yes | — | — | Stable Proposal ID. |
| baseVersion | string | yes | — | — | Accepted Plan Version on which the Proposal is based. |
| actor | const "human" | yes | — | — | Claimed action source; policy verifies it against the principal. |
| emergencyReview | object | no | — | — | Published contract field. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "approve_proposal",
  "proposalId": "proposal-example",
  "baseVersion": "3.2",
  "actor": "human",
  "idempotencyKey": "example-command-001"
}
```

## Output

Human Approval creating the next immutable Plan Version.

| Output field | Meaning |
| --- | --- |
| planId | Stable identifier. |
| planVersion | Published result field. |
| proposalId | Stable identifier. |
| status | Published result field. |
| validation | Published result field. |

- Stable ID: planId
- Stable ID: proposalId
- Stable ID: validation.validationId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| PROPOSAL_MISMATCH | Proposal ID does not match the active Proposal. | Inspect the active Proposal and retry with its stable ID. |
| PROPOSAL_EMPTY | Proposal contains no executable Changes. | Keep accepted truth unchanged; create a Proposal only after at least one planning Change exists. |
| PLAN_VERSION_CONFLICT | Plan version conflict. | Inspect the latest Plan Version and create or rebase the Proposal before retrying. |
| VALIDATION_FAILED | Proposal validation failed. | Resolve every hard Constraint failure and validate again. |
| WARNING_WAIVER_REQUIRED | Proposal has warnings that require a human Warning Waiver. | Have a human record a reason-coded waiver for every open warning. |
| EMERGENCY_REVIEW_REQUIRED | Emergency Plan Change requires an authorized human Emergency Review. | Supply a reviewer ID, authorized reviewer role, and explicit assumption acceptance in VenueMind Studio. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# undo

Execute Undo through the shared VenueMind planner boundary.

## Contract

- Permission plan.update.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "undo" | yes | — | — | Stable command discriminator. |
| actor | human \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "undo",
  "idempotencyKey": "example-command-001"
}
```

## Output

Undo result for Proposal editing or accepted Plan history.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| proposalId | Stable identifier. |
| changeId | Stable identifier. |
| changedItems | Published result field. |
| planVersion | Stable identifier. |

- Stable ID: proposalId
- Stable ID: changeId
- Stable ID: planVersion

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# redo

Execute Redo through the shared VenueMind planner boundary.

## Contract

- Permission plan.update.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "redo" | yes | — | — | Stable command discriminator. |
| actor | human \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "redo",
  "idempotencyKey": "example-command-001"
}
```

## Output

Redo result for Proposal editing or accepted Plan history.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| proposalId | Stable identifier. |
| changeId | Stable identifier. |
| changedItems | Published result field. |
| planVersion | Stable identifier. |

- Stable ID: proposalId
- Stable ID: changeId
- Stable ID: planVersion

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# rebase_proposal

Execute Rebase Proposal through the shared VenueMind planner boundary.

## Contract

- Permission proposal.manage.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "rebase_proposal" | yes | — | — | Stable command discriminator. |
| branchId | string | yes | — | min 1 chars | Stable Proposal Branch ID. |
| actor | human \| agent \| system | no | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "rebase_proposal",
  "branchId": "branch-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

Rebased Proposal lineage against current accepted truth.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| branchId | Stable identifier. |
| proposalId | Stable identifier. |
| baseVersion | Published result field. |
| receipt | Published result field. |

- Stable ID: branchId
- Stable ID: proposalId
- Stable ID: receipt.id

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| CONFLICT_NOT_FOUND | Proposal conflict not found. | Detect current Proposal conflicts and retry with a stable conflict ID. |
| CONFLICT_RESOLUTION_INVALID | Conflict resolution is not valid for this conflict. | Choose one of the conflict's published resolution options. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# resolve_conflict

Execute Resolve Conflict through the shared VenueMind planner boundary.

## Contract

- Permission proposal.review.
- Retry-safe mutation with a required idempotency key.
- Human authority is required.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "resolve_conflict" | yes | — | — | Stable command discriminator. |
| branchId | string | yes | — | min 1 chars | Stable Proposal Branch ID. |
| conflictId | string | yes | — | min 1 chars | Published contract field. |
| outcome | keep-proposal \| keep-plan \| manual-resolution | yes | — | — | Published contract field. |
| manualChange | object | no | — | — | Published contract field. |
| actor | const "human" | yes | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | yes | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "resolve_conflict",
  "branchId": "branch-example",
  "conflictId": "conflict-example",
  "outcome": "keep-proposal",
  "actor": "human",
  "actorId": "actor-example",
  "idempotencyKey": "example-command-001"
}
```

## Output

Human conflict decision followed by deterministic Validation.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| branchId | Stable identifier. |
| proposalId | Stable identifier. |
| conflictId | Stable identifier. |
| outcome | Published result field. |
| transformedChangeId | Stable identifier. |
| validationId | Stable identifier. |
| validationStatus | Published result field. |
| remainingConflicts | Published result field. |

- Stable ID: branchId
- Stable ID: proposalId
- Stable ID: conflictId
- Stable ID: transformedChangeId
- Stable ID: validationId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |
| CONFLICT_NOT_FOUND | Proposal conflict not found. | Detect current Proposal conflicts and retry with a stable conflict ID. |
| CONFLICT_RESOLUTION_INVALID | Conflict resolution is not valid for this conflict. | Choose one of the conflict's published resolution options. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# update_event_brief

Execute Update Event Brief through the shared VenueMind planner boundary.

## Contract

- Permission proposal.manage.
- Retry-safe mutation with a required idempotency key.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "update_event_brief" | yes | — | — | Stable command discriminator. |
| brief | event-brief | yes | — | — | Complete structured Event Brief. |
| actor | human \| system | yes | — | — | Claimed action source; policy verifies it against the principal. |
| idempotencyKey | string | yes | — | min 1 chars | Unique retry key for this semantic command. |
| correlationId | string | no | — | min 1 chars | Optional caller correlation identifier. |
| source | studio \| webmcp \| mcp \| system \| agent-tool | no | — | — | Surface that submitted the command. |
| sessionId | string | no | — | min 1 chars | Calling session identity. |
| actorId | string | no | — | min 1 chars | Authenticated or local stable actor identity. |

```json
{
  "type": "update_event_brief",
  "brief": {
    "id": "example-id",
    "eventName": "example-eventName",
    "date": "2026-09-15",
    "timezone": "Asia/Dhaka",
    "venueId": "venue-example",
    "roomId": "room-example",
    "attendeeTarget": 1,
    "occupancyMode": "theater",
    "requirements": [],
    "schedule": {
      "startAt": "2026-09-18T09:00:00+06:00",
      "endAt": "2026-09-18T17:00:00+06:00",
      "timezone": "Asia/Dhaka"
    }
  },
  "actor": "human",
  "idempotencyKey": "example-command-001"
}
```

## Output

Updated Event Brief and invalidated dependent Proposal evidence.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| briefId | Stable identifier. |
| attendeeTarget | Published result field. |
| requirements | Published result field. |

- Stable ID: briefId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| IDEMPOTENCY_KEY_REQUIRED | Idempotency key is required for mutating commands. | Retry with one stable idempotency key for this semantic action. |
| IDEMPOTENCY_KEY_CONFLICT | Idempotency key conflict. | Use the original command input or generate a new idempotency key. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# restore_snapshot

Execute Restore Snapshot through the shared VenueMind planner boundary.

## Contract

- Permission project.manage.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "restore_snapshot" | yes | — | — | Stable command discriminator. |
| snapshot | planner-snapshot | yes | — | — | Complete canonical Project schema 10 planner snapshot. |

```javascript
const snapshot = await fetch('/examples/planner-snapshot.json').then((response) => response.json());
planner.execute({ type: 'restore_snapshot', snapshot });
```

## Output

Restored normalized planner state after integrity checks.

| Output field | Meaning |
| --- | --- |
| status | Published result field. |
| planId | Stable identifier. |
| planVersion | Published result field. |

- Stable ID: planId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |
| SNAPSHOT_INVALID | Invalid VenueMind snapshot. | Restore a canonical Project schema 10 snapshot containing a Plan, Proposal, and Activity Ledger. |
| LEDGER_INTEGRITY_FAILED | Activity Ledger integrity failed. | Restore an untampered snapshot or recover the last verified Project record. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# export_plan

Execute Export Plan through the shared VenueMind planner boundary.

## Contract

- Permission export.plan.
- No idempotency key is required.
- Authority is evaluated at the service boundary.

## Input

| Field | Type | Required | Default | Bounds | Meaning |
| --- | --- | --- | --- | --- | --- |
| type | const "export_plan" | yes | — | — | Stable command discriminator. |
| format | json \| text \| svg \| pdf \| pdf-emergency \| csv \| csv-objects \| csv-inventory \| csv-staffing \| svg-post-map \| csv-production \| svg-production \| csv-catering-stations \| csv-replenishment \| audit | no | json | — | Requested read-only export representation. |

```json
{
  "type": "export_plan"
}
```

## Output

Portable geometry, Validation, ledger, receipts, reviews, and replay evidence.

| Output field | Meaning |
| --- | --- |
| format | Published result field. |
| filename | Published result field. |
| mimeType | Published result field. |
| encoding | Published result field. |
| content | Published result field. |

- Stable ID: content.plan.id
- Stable ID: content.ledger[].id
- Stable ID: content.validation.validationId

## Applicable errors

| Code | Message | Remediation |
| --- | --- | --- |
| COMMAND_INVALID | Venue command requires a type. | Send one published Venue command with its required fields. |
| COMMAND_UNSUPPORTED | Venue command is not supported. | Refresh the command contract and use a published command type. |
| AUTHORIZATION_DENIED | The current principal is not authorized for this VenueMind action. | Use an assigned Organization Membership Role or an active Organization- and Project-scoped Agent Grant containing the required permission. |

- [Complete error catalog](https://venue-mind-jet.vercel.app/docs/reference-errors)

---

# Architecture and contributing

Runtime boundaries, extension paths, migrations, testing layers, release checks, recovery, and architecture decisions.

## Architecture

Studio, WebMCP, and MCP converge on one planner command boundary. Shared contracts generate every public agent surface; deterministic Validation, authorization, ledger integrity, persistence, and exports remain separate deep modules.

- [Architecture overview and diagrams](https://venue-mind-jet.vercel.app/guides/architecture.md)
- [Persistence and recovery diagram](https://venue-mind-jet.vercel.app/guides/persistence-and-recovery.md)
- [Optimistic concurrency](https://venue-mind-jet.vercel.app/guides/optimistic-concurrency.md)
- [Database operations](https://venue-mind-jet.vercel.app/guides/database-operations.md)

## First contributor change

1. Read the source map and choose the command, Constraint, migration, or documentation path.
2. Change the authoritative runtime source and its focused tests.
3. Regenerate contracts, docs, examples, and skills.
4. Run the complete local verification gate.

```bash
npm ci
npm run verify:local
```

- [Contributor entry point](https://venue-mind-jet.vercel.app/guides/contributing.md)
- [Local development](https://venue-mind-jet.vercel.app/guides/development.md)
- [Testing by layer](https://venue-mind-jet.vercel.app/guides/testing.md)
- [Local verification](https://venue-mind-jet.vercel.app/guides/local-verification.md)

## Extend commands and Constraints

- Commands begin in src/contracts/venue-contracts.ts and execute only through VenuePlanner.execute.
- Agent-facing commands receive one shared tool contract and authorization mapping.
- Constraints enter the versioned evaluator registry and return deterministic stable-ID evidence.
- Contract tests bind runtime required fields, errors, outputs, docs, examples, WebMCP, and MCP.

- [Add a command or Constraint](https://venue-mind-jet.vercel.app/guides/architecture.md)
- [Shared runtime contracts ADR](https://venue-mind-jet.vercel.app/guides/adr/0018-shared-runtime-contracts.md)
- [Constraint registry ADR](https://venue-mind-jet.vercel.app/guides/adr/0019-versioned-constraint-registry.md)

## Migrations, release, and recovery

- [TypeScript SDK](https://venue-mind-jet.vercel.app/guides/sdk.md)
- [Adapter authoring](https://venue-mind-jet.vercel.app/guides/adapter-authoring.md)
- [SDK API reference](https://venue-mind-jet.vercel.app/sdk-api.json)
- [Schema migration guide](https://venue-mind-jet.vercel.app/guides/schema-migrations.md)
- [Database operations](https://venue-mind-jet.vercel.app/guides/database-operations.md)
- [Real-time collaboration](https://venue-mind-jet.vercel.app/guides/realtime-collaboration.md)
- [Sharing and notifications](https://venue-mind-jet.vercel.app/guides/sharing-and-notifications.md)
- [Registration and ticketing](https://venue-mind-jet.vercel.app/guides/registration-and-ticketing.md)
- [Operational resources](https://venue-mind-jet.vercel.app/guides/operational-resources.md)
- [Threat model](https://venue-mind-jet.vercel.app/guides/threat-model.md)
- [Resource limits](https://venue-mind-jet.vercel.app/guides/resource-limits.md)
- [Release process](https://venue-mind-jet.vercel.app/guides/release-process.md)
- [Release checklist](https://venue-mind-jet.vercel.app/guides/release-checklist.md)
- [Production hosting](https://venue-mind-jet.vercel.app/guides/production-hosting.md)
- [Failure recovery runbook](https://venue-mind-jet.vercel.app/guides/runbooks/failure-recovery.md)
- [Security reporting policy](https://venue-mind-jet.vercel.app/guides/security.md)
- [Published guide manifest](https://venue-mind-jet.vercel.app/guides/manifest.json)

## Architecture decisions

- [Canonical spatial frame](https://venue-mind-jet.vercel.app/guides/adr/0003-canonical-spatial-frame.md)
- [Human Roles and Agent Grants](https://venue-mind-jet.vercel.app/guides/adr/0017-human-roles-and-agent-grants.md)
- [Shared runtime contracts](https://venue-mind-jet.vercel.app/guides/adr/0018-shared-runtime-contracts.md)
- [Constraint registry](https://venue-mind-jet.vercel.app/guides/adr/0019-versioned-constraint-registry.md)
- [Ledger integrity and replay](https://venue-mind-jet.vercel.app/guides/adr/0020-hash-chained-ledger-and-replay.md)
- [Server-owned tenancy](https://venue-mind-jet.vercel.app/guides/adr/0021-server-owned-tenancy.md)
- [Hashed bearer sharing](https://venue-mind-jet.vercel.app/guides/adr/0024-hashed-bearer-sharing.md)
- [Operational Resource Snapshots](https://venue-mind-jet.vercel.app/guides/adr/0025-operational-resource-snapshots-are-not-plan-truth.md)
- [Public SDK boundary](https://venue-mind-jet.vercel.app/guides/adr/0026-public-sdk-follows-canonical-tool-and-adapter-contracts.md)

---

# Schemas and contracts

JSON Schemas are generated from the runtime contract source during every production build.

## Published schemas

- [Venue command](https://venue-mind-jet.vercel.app/schemas/venue-command.schema.json)
- [Agent Grant](https://venue-mind-jet.vercel.app/schemas/agent-grant.schema.json)
- [Authorization policy](https://venue-mind-jet.vercel.app/schemas/authorization-policy.schema.json)
- [Venue Template catalog](https://venue-mind-jet.vercel.app/schemas/venue-template-catalog.schema.json)
- [Template catalog example](https://venue-mind-jet.vercel.app/examples/venue-template-catalog.json)
- [Event Brief](https://venue-mind-jet.vercel.app/schemas/event-brief.schema.json)
- [Planning Effect](https://venue-mind-jet.vercel.app/schemas/planning-effect.schema.json)
- [Calendar webhook event](https://venue-mind-jet.vercel.app/schemas/calendar-webhook-event.schema.json)
- [Comment anchor](https://venue-mind-jet.vercel.app/schemas/comment-anchor.schema.json)
- [Comment](https://venue-mind-jet.vercel.app/schemas/comment.schema.json)
- [Scenario definition](https://venue-mind-jet.vercel.app/schemas/scenario-definition.schema.json)
- [Simulation result](https://venue-mind-jet.vercel.app/schemas/simulation-result.schema.json)
- [Aggregate Occupancy Signal](https://venue-mind-jet.vercel.app/schemas/aggregate-occupancy-signal.schema.json)
- [Live Occupancy projection](https://venue-mind-jet.vercel.app/schemas/live-occupancy-projection.schema.json)
- [Live Occupancy monitor](https://venue-mind-jet.vercel.app/schemas/live-occupancy-monitor.schema.json)
- [Incident Location Context](https://venue-mind-jet.vercel.app/schemas/incident-location-context.schema.json)
- [Operational Incident](https://venue-mind-jet.vercel.app/schemas/operational-incident.schema.json)
- [Incident Register](https://venue-mind-jet.vercel.app/schemas/incident-register.schema.json)
- [Live Plan Deviation](https://venue-mind-jet.vercel.app/schemas/live-plan-deviation.schema.json)
- [Live Plan Deviation overlay](https://venue-mind-jet.vercel.app/schemas/live-plan-deviation-overlay.schema.json)
- [Live Plan Deviation register](https://venue-mind-jet.vercel.app/schemas/live-plan-deviation-register.schema.json)
- [Post-event Review](https://venue-mind-jet.vercel.app/schemas/post-event-review.schema.json)
- [Project list result](https://venue-mind-jet.vercel.app/schemas/project-list-result.schema.json)
- [Project open result](https://venue-mind-jet.vercel.app/schemas/project-open-result.schema.json)
- [Layout inspection](https://venue-mind-jet.vercel.app/schemas/layout-inspection.schema.json)
- [Preview revision result](https://venue-mind-jet.vercel.app/schemas/preview-revision-result.schema.json)
- [Plan export](https://venue-mind-jet.vercel.app/schemas/plan-export.schema.json)
- [Spatial geometry](https://venue-mind-jet.vercel.app/schemas/spatial-geometry.schema.json)
- [Spatial evidence](https://venue-mind-jet.vercel.app/schemas/spatial-evidence.schema.json)
- [Venue Constraint](https://venue-mind-jet.vercel.app/schemas/venue-constraint.schema.json)
- [Warning Waiver](https://venue-mind-jet.vercel.app/schemas/warning-waiver.schema.json)
- [Object Lock](https://venue-mind-jet.vercel.app/schemas/object-lock.schema.json)
- [Venue error](https://venue-mind-jet.vercel.app/schemas/venue-error.schema.json)
- [Error catalog](https://venue-mind-jet.vercel.app/error-catalog.json)
- [Validation result](https://venue-mind-jet.vercel.app/schemas/validation-result.schema.json)
- [Command receipt](https://venue-mind-jet.vercel.app/schemas/command-receipt.schema.json)
- [Activity Ledger](https://venue-mind-jet.vercel.app/schemas/activity-ledger.schema.json)
- [Proposal conflicts](https://venue-mind-jet.vercel.app/schemas/proposal-conflicts.schema.json)
- [Proposal comparison](https://venue-mind-jet.vercel.app/schemas/proposal-comparison.schema.json)
- [Planner snapshot](https://venue-mind-jet.vercel.app/schemas/planner-snapshot.schema.json)
- [Project record](https://venue-mind-jet.vercel.app/schemas/project-record.schema.json)
- [Interchange Package](https://venue-mind-jet.vercel.app/schemas/venue-project-package.schema.json)
- [Interchange example](https://venue-mind-jet.vercel.app/examples/venuemind-project-package.json)

## Authorization policy

Human Roles and Agent Grants are separate authority sources. Policy Decisions are enforced inside planner and tool-service boundaries; denied planner actions append a sanitized Activity Ledger entry without retaining command payloads or protected Project data.

- Human Roles come from server-resolved Organization Memberships: viewer, planner, reviewer, approver, safety officer, venue administrator, organization administrator.
- Agent Grants bind one agent to one Organization and one Project, published scopes, issuer, issue time, and expiry of one hour or less.
- Approval, Warning Waivers, Lock management, emergency action authority, and conflict decisions remain human-only.
- Approval requires an approver, venue administrator, or organization administrator role in addition to passing Validation.

- [Published policy](https://venue-mind-jet.vercel.app/authorization-policy.json)
- [Agent Grant schema](https://venue-mind-jet.vercel.app/schemas/agent-grant.schema.json)
- [Authentication and tenancy](https://venue-mind-jet.vercel.app/guides/authentication-and-tenancy.md)
- [Authorization policy schema](https://venue-mind-jet.vercel.app/schemas/authorization-policy.schema.json)

## Generated tool manifest

- [Tool manifest schema](https://venue-mind-jet.vercel.app/schemas/venue-tool-manifest.schema.json)
- [Tool manifest](https://venue-mind-jet.vercel.app/venue-tools.json)
- [Reference manifest](https://venue-mind-jet.vercel.app/reference-manifest.json)
- [Tool examples](https://venue-mind-jet.vercel.app/examples/venue-tool-examples.json)
- [Tool error catalog](https://venue-mind-jet.vercel.app/tool-error-catalog.json)

## Stable errors

Planner and MCP failures use one error envelope with a stable code, readable message, remediation, and structured details. Unknown internal failures use VENUE_INTERNAL_ERROR without exposing implementation data.

- [Error catalog](https://venue-mind-jet.vercel.app/error-catalog.json)
- [Venue error schema](https://venue-mind-jet.vercel.app/schemas/venue-error.schema.json)

## Interchange safety

- Format venuemind-project, version 1.
- Maximum package size: 2,000,000 bytes.
- SHA-256 binds the canonical Project payload to the manifest.
- Import Preview verifies stable IDs, geometry, locks, ledger integrity, replay, and migration before commit.
- Import Commit is create-only and returns PROJECT_ID_CONFLICT instead of overwriting an existing Project.

## DXF and PDF references

VenueMind JSON is the only authoritative import format. DXF and PDF files remain behind an assisted-reference adapter boundary: they require scale calibration, expose confidence and unsupported entities, retain source fingerprints, and can only seed reviewable Proposal Changes through the normal command interface.

## Agent discovery

- [llms.txt](https://venue-mind-jet.vercel.app/llms.txt)
- [llms-full.txt](https://venue-mind-jet.vercel.app/llms-full.txt)

## Compatibility

- [Compatibility and deprecation policy](https://venue-mind-jet.vercel.app/docs/reference-compatibility)

---

# Documentation changelog

Visible changes to VenueMind contracts, workflows, compatibility, and operational guidance.

## Tool contract 1.6.0

- Added shared Post-event Review inspection, Observation, Lesson, Template Improvement Proposal, and report-export tools.
- Kept Template Improvement Proposal approval, rejection, and publication human-only and outside every agent surface.
- Added evidence-traced schemas, standalone MCP Project-session persistence, typed SDK methods, WebMCP parity, and event-day skill guidance.

## Tool contract 1.5.0

- Added shared Live Plan Deviation inspection, recording, ending, post-event Proposal, and verified export tools.
- Kept the approved Plan immutable; live Changes exist only in the Deviation overlay until a human approves a later Proposal through Studio.
- Added exact Deviation schemas, retry-safe browser persistence, MCP Project-session support, typed SDK methods, WebMCP parity, and event-day skill guidance.
- Updated MCP 0.7.0, schemas, examples, llms.txt, llms-full.txt, and the generated documentation catalog together.

## Tool contract 1.4.0

- Added shared Incident Register inspection, structured Incident reporting, and verified Incident-record export tools.
- Kept Incident acknowledgement, escalation, response, ownership, handoff, emergency-action, resolution, closure, and reopening authority human-only.
- Added Runbook-bound D1 Incident Register persistence, browser outbox recovery, and a non-modal Studio operations panel.
- The current deployment stores structured Incident data only and does not accept file uploads.
- Added one actor, one timestamp, one Plan-bound location, one receipt, and one ordered hash-ledger entry for every accepted Incident transition.
- Updated MCP 0.6.0, the event-day skill, SDK, schemas, examples, llms.txt, llms-full.txt, and docs catalog together.

## Tool contract 1.3.0

- Added four shared Live Occupancy tools for aggregate inspection, signal ingestion, freshness refresh, and verified export.
- Added the venue:operate Agent Grant scope while keeping Alert acknowledgement human-only.
- Added D1-backed monitor persistence, browser outbox replay, distinct feed states, and an immutable Occupancy Monitor Ledger.
- Updated the event-day skill, SDK, schemas, examples, llms.txt, llms-full.txt, and docs catalog together.

## Docs 1.2.0

- Generated one contract-bound reference page for every tool and planner command.
- Published executable WebMCP, generic MCP, Codex, Claude Desktop, Cursor, TypeScript, retry, failure, and export examples.
- Added architecture and persistence diagrams, complete extension paths, migration and testing guides, release checks, recovery runbook, and ADRs for contracts, Validation, ledger integrity, geometry, and authorization.
- Expanded generated-file drift coverage to public examples and contributor guides.

## Docs 1.1.0

- Added ten end-to-end tutorials for Project creation, the supervised loop, Branch comparison, stale Proposal recovery, auditing, MCP, WebMCP, agent skills, interchange, and offline recovery.
- Bound every tutorial to executable production fixtures and explicit completion criteria.
- Aligned the production Project API boundary with Project schema 10.

## Tool contract 1.2.0

- Published 39 shared WebMCP and MCP tools from one canonical contract source.
- Added Project, object, Constraint, Validation evidence, Proposal Branch, adjustment, Scenario, and audit operations.
- Added scoped Agent Grants and stable authorization-denial errors.
- Kept Approval and destructive Project deletion outside every agent surface.

## Agent skills 1.1.0

- Published six installable VenueMind skills.
- Added adversarial evaluation cases for premature Approval, ignored Locks, stale versions, and missing evidence.
- Published required-tool selection and unnecessary-call metrics.

## Project schema 10

- Added reviewed Emergency Plan evidence and Degraded Scenarios.
- Made schema 10 the sole Project runtime format with strict restore and import boundaries.
- Kept accepted Plan and Event Brief truth replayable through the hash-chained Activity Ledger.

## Documentation policy

Page metadata, navigation, search, deep links, compatibility markers, sitemaps, and agent discovery files are generated from this structured documentation registry. Breaking contract changes must update this changelog in the same release.

---

# Safety and supervision

Agent leverage is high; mutation authority stays narrow and inspectable.

## Preview before commit

Agent-created Changes remain visual ghosts on a Proposal. They do not mutate the accepted Plan.

## Base-version control

Every Proposal names one baseVersion. A stale Proposal is rejected and must be refreshed from a new inspection.

## Retry safety

Every mutating command carries an idempotency key. Exact retries return the original Command Receipt; reusing a key with different input is rejected before state changes.

## Object Locks

Locks protect position, rotation, dimensions, deletion, or role independently. Venue-template Locks are inherited; only humans can add or release temporary Project Locks. Validation and Proposal conflicts identify the exact Lock. Rejected lock attempts receive an idempotent Command Receipt and a hash-chained Activity Ledger record without changing the Plan.

## Warning disposition

Agents cannot create Warning Waivers. A human must select a reason code before Approval; the author, time, Constraint, Proposal, and Validation fingerprint remain in the Activity Ledger and audit export.

## Emergency authority

Emergency-affecting Proposals require a separate authorized human Emergency Review before Approval. Reviewer identity, role, accepted assumptions, changed object IDs, base Plan Version, Validation input fingerprint, and emergency evidence fingerprint are committed together; agents cannot supply or bypass this authority.

## Traceability

Activity Ledger events are schema-versioned and hash chained. Accepted Plan evidence can be replayed and compared with the current Plan fingerprint; audit export packages the chain, Validation, receipts, branches, and accepted Plan.

---

# Privacy notice

What VenueMind stores, excludes, retains, exports, and deletes in the current hosted preview.

## Collected and excluded data

- Stored: account identity, organization membership, venue geometry, briefs, Plans, Proposals, comments, approvals, aggregate operations, incidents, and audit evidence.
- Excluded by design: attendee records, individual check-in events, raw integration credentials, free-form accessibility records, and retained generated export files.
- Browser recovery stores the current Project envelope locally; Cloudflare D1 stores durable application state. Vercel serves the frontend and Cloudflare runs the API Worker.
- Diagnostics use allowlisted bounded metadata and never raw geometry, Project payloads, identity attributes, cookies, credentials, or comment content.
- Optional product analytics is off by default and stores only daily counts across fixed event, outcome, stage, and error-category dimensions. It excludes raw events, geometry, content, URLs, free text, credentials, and object, Project, or user identifiers.

## Purpose and sharing

VenueMind processes data to authenticate users, keep Project state, validate and simulate Plans, coordinate supervised review, generate requested exports, secure the service, and measure aggregate product friction when analytics is enabled. Product analytics cannot grant automation authority, change supervision, or weaken Validation. Project data is not sold or used to train a model by VenueMind.

- Vercel processes frontend requests; Cloudflare processes API and D1 data. Their own service terms govern their infrastructure handling.
- Hashed share tokens allow the recipient selected by a user to read a bounded shared review. Revocation immediately removes that access.
- External adapters receive only the scoped values required for the configured operation; secret values remain environment bindings.

## Retention, export, and deletion

- Project content remains until deletion; deleted Projects default to 30 days of recovery before primary purge.
- Operational-sensitive records default to 365 days and security evidence to 400 days. Organization administrators may select only the documented bounded ranges.
- Account export includes identity, memberships, relevant organization audit events, and Projects. Project exports are generated on demand and are not retained by VenueMind.
- Project deletion purges browser recovery immediately and D1 data at the configured deadline. Provider backups expire under the documented provider boundary after primary purge.
- Account deletion revokes sessions, suspends memberships, and anonymizes identity fields while retaining opaque security evidence until expiry.
- Content-free product-analytics aggregates expire after 180 days and cannot be linked to an account, user, Project, or object.

- [Full data-protection contract](https://venue-mind-jet.vercel.app/guides/data-protection.md)

## Your controls

- Export Project or account data from the product controls before deletion.
- Delete a Project with its exact-name confirmation or delete the account from organization settings.
- Product analytics is off by default. Settings provides deterministic opt-in and opt-out; essential integrity and security logs remain active.
- Revoke shared-review links and external adapter grants when no longer needed.

- [Product analytics contract](https://venue-mind-jet.vercel.app/guides/product-analytics.md)

---

# Preview terms

Terms for the open-source, pre-release VenueMind hosted preview.

## Use and authority

Use the hosted preview only for lawful planning and evaluation work, submit only data you are authorized to process, and protect account and share credentials.

- A qualified human remains responsible for venue rules, local requirements, emergency decisions, and final approval.
- VenueMind is not a licensed architect, engineer, accessibility professional, fire authority, security service, emergency system, or legal adviser.
- Agents cannot approve a Plan, create authority, override Locks, or manufacture evidence.

## Acceptable use

Do not cross organization boundaries, bypass human approval or Locks, forge audit evidence, expose another person's data, attack the service, or use VenueMind to create an unlawful or unsafe event. Security research follows the published coordinated-reporting policy.

## Preview availability

The preview may change, be interrupted, or be withdrawn and has no service-level commitment. The software is provided under the MIT License. To the extent permitted by applicable law, contributors disclaim implied warranties and losses from reliance on the preview, automated checks, simulations, or exports.

- [Complete terms](https://venue-mind-jet.vercel.app/guides/terms.md)
- [MIT License](https://venue-mind-jet.vercel.app/LICENSE.txt)

---

# Trust and safety

The exact line between configured VenueMind evidence and professional, legal, or emergency authority.

## Configurable policy

A Validation PASS means the Plan satisfies the versioned Constraint policy and model input shown in its evidence. It is not a certification of every law, code, permit, accessibility obligation, structural requirement, fire-safety rule, or live venue condition.

- Teams confirm current local requirements and obtain appropriate venue and professional review.
- Warning Waivers record a human decision; they do not waive an external duty.
- Simulation is scenario evidence, not a prediction or emergency instruction.

## Human-only authority

- Only an authorized human approves a Proposal into accepted Plan truth.
- Agents cannot manufacture Warning Waivers, Emergency Reviews, permissions, or Locks.
- Emergency response remains with venue operators, local emergency services, and on-site leaders.
- Incidents and live deviations preserve the approved baseline rather than rewriting it.

## Security reporting

Use GitHub private vulnerability reporting for a security-sensitive finding and include the smallest non-sensitive reproduction plus its correlation ID. Do not put credentials, private venue data, or exploit details in a public issue.

- [Security policy](https://venue-mind-jet.vercel.app/guides/security.md)
- [Complete trust boundary](https://venue-mind-jet.vercel.app/guides/trust-and-safety.md)

## Licenses and notices

- [VenueMind MIT License](https://venue-mind-jet.vercel.app/LICENSE.txt)
- [Third-party notices](https://venue-mind-jet.vercel.app/THIRD_PARTY_NOTICES.txt)
- [Machine-readable license inventory](https://venue-mind-jet.vercel.app/third-party-licenses.json)