fix(mcp): make tool approval annotations explicit

manifests/tools/boot_sim.yaml

@@ -6,7 +6,9 @@ names:
 description: Boot iOS simulator for manual/non-build flows. Not required before simulator build-and-run (build_run_sim).
 annotations:
   title: Boot Simulator
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Open the Simulator app (makes it visible)
     toolId: open_sim

manifests/tools/build_device.yaml

@@ -8,4 +8,6 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Build Device
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false

manifests/tools/build_macos.yaml

@@ -8,4 +8,6 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Build macOS
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false

manifests/tools/build_run_device.yaml

@@ -8,7 +8,9 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Build Run Device
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Capture device logs
     toolId: start_device_log_cap

manifests/tools/build_run_macos.yaml

@@ -8,4 +8,6 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Build Run macOS
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false

manifests/tools/build_run_sim.yaml

@@ -8,7 +8,9 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Build Run Simulator
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Capture structured logs (app continues running)
     toolId: start_sim_log_cap

manifests/tools/build_sim.yaml

@@ -8,4 +8,6 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Build Simulator
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false

manifests/tools/button.yaml

@@ -6,4 +6,6 @@ names:
 description: Press simulator hardware button.
 annotations:
   title: Hardware Button
+  readOnlyHint: true
   destructiveHint: false
+  openWorldHint: false

manifests/tools/clean.yaml

@@ -8,4 +8,6 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Clean
+  readOnlyHint: false
   destructiveHint: true
+  openWorldHint: false

manifests/tools/debug_attach_sim.yaml

@@ -6,6 +6,11 @@ names:
 description: Attach LLDB to sim app.
 routing:
   stateful: true
+annotations:
+  title: Debug Attach Sim
+  readOnlyHint: false
+  destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Add a breakpoint
     toolId: debug_breakpoint_add

manifests/tools/debug_breakpoint_add.yaml

@@ -6,3 +6,8 @@ names:
 description: Add breakpoint.
 routing:
   stateful: true
+annotations:
+  title: Debug Breakpoint Add
+  readOnlyHint: false
+  destructiveHint: false
+  openWorldHint: false

manifests/tools/debug_breakpoint_remove.yaml

@@ -6,3 +6,8 @@ names:
 description: Remove breakpoint.
 routing:
   stateful: true
+annotations:
+  title: Debug Breakpoint Remove
+  readOnlyHint: false
+  destructiveHint: false
+  openWorldHint: false

manifests/tools/debug_continue.yaml

@@ -6,3 +6,8 @@ names:
 description: Continue debug session.
 routing:
   stateful: true
+annotations:
+  title: Debug Continue
+  readOnlyHint: false
+  destructiveHint: false
+  openWorldHint: false

manifests/tools/debug_detach.yaml

@@ -6,3 +6,8 @@ names:
 description: Detach debugger.
 routing:
   stateful: true
+annotations:
+  title: Debug Detach
+  readOnlyHint: false
+  destructiveHint: false
+  openWorldHint: false

manifests/tools/debug_lldb_command.yaml

@@ -6,3 +6,8 @@ names:
 description: Run LLDB command.
 routing:
   stateful: true
+annotations:
+  title: Debug LLDB Command
+  readOnlyHint: false
+  destructiveHint: true
+  openWorldHint: false

manifests/tools/debug_stack.yaml

@@ -6,3 +6,8 @@ names:
 description: Get backtrace.
 routing:
   stateful: true
+annotations:
+  title: Debug Stack
+  readOnlyHint: true
+  destructiveHint: false
+  openWorldHint: false

manifests/tools/debug_variables.yaml

@@ -6,3 +6,8 @@ names:
 description: Get frame variables.
 routing:
   stateful: true
+annotations:
+  title: Debug Variables
+  readOnlyHint: true
+  destructiveHint: false
+  openWorldHint: false

manifests/tools/discover_projs.yaml

@@ -7,6 +7,8 @@ description: Scans a directory (defaults to workspace root) to find Xcode projec
 annotations:
   title: Discover Projects
   readOnlyHint: true
+  destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Save discovered project/workspace as session defaults
     toolId: session_set_defaults

manifests/tools/doctor.yaml

@@ -7,3 +7,5 @@ description: MCP environment info.
 annotations:
   title: Doctor
   readOnlyHint: true
+  destructiveHint: false
+  openWorldHint: false

manifests/tools/erase_sims.yaml

@@ -6,4 +6,6 @@ names:
 description: Erase simulator.
 annotations:
   title: Erase Simulators
+  readOnlyHint: false
   destructiveHint: true
+  openWorldHint: false

manifests/tools/gesture.yaml

@@ -6,4 +6,6 @@ names:
 description: Simulator gesture preset.
 annotations:
   title: Gesture
+  readOnlyHint: true
   destructiveHint: false
+  openWorldHint: false

manifests/tools/get_app_bundle_id.yaml

@@ -7,6 +7,8 @@ description: Extract bundle id from .app.
 annotations:
   title: Get App Bundle ID
   readOnlyHint: true
+  destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Install on simulator
     toolId: install_app_sim

manifests/tools/get_coverage_report.yaml

@@ -7,6 +7,8 @@ description: Show per-target code coverage from an xcresult bundle.
 annotations:
   title: Get Coverage Report
   readOnlyHint: true
+  destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: View file-level coverage
     toolId: get_file_coverage

manifests/tools/get_device_app_path.yaml

@@ -7,6 +7,8 @@ description: Get device built app path.
 annotations:
   title: Get Device App Path
   readOnlyHint: true
+  destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Get bundle ID
     toolId: get_app_bundle_id

manifests/tools/get_file_coverage.yaml

@@ -7,6 +7,8 @@ description: Show function-level coverage and uncovered line ranges for a specif
 annotations:
   title: Get File Coverage
   readOnlyHint: true
+  destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: View overall coverage
     toolId: get_coverage_report

manifests/tools/get_mac_app_path.yaml

@@ -7,6 +7,8 @@ description: Get macOS built app path.
 annotations:
   title: Get macOS App Path
   readOnlyHint: true
+  destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Get bundle ID
     toolId: get_mac_bundle_id

manifests/tools/get_mac_bundle_id.yaml

@@ -7,6 +7,8 @@ description: Extract bundle id from macOS .app.
 annotations:
   title: Get Mac Bundle ID
   readOnlyHint: true
+  destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Launch the app
     toolId: launch_mac_app

manifests/tools/get_sim_app_path.yaml

@@ -7,6 +7,8 @@ description: Get sim built app path.
 annotations:
   title: Get Simulator App Path
   readOnlyHint: true
+  destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Get bundle ID
     toolId: get_app_bundle_id

manifests/tools/install_app_device.yaml

@@ -6,4 +6,6 @@ names:
 description: Install app on device.
 annotations:
   title: Install App Device
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false

manifests/tools/install_app_sim.yaml

@@ -6,7 +6,9 @@ names:
 description: Install app on sim.
 annotations:
   title: Install App Simulator
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Open the Simulator app
     toolId: open_sim

manifests/tools/key_press.yaml

@@ -6,4 +6,6 @@ names:
 description: Press key by keycode.
 annotations:
   title: Key Press
+  readOnlyHint: true
   destructiveHint: false
+  openWorldHint: false

manifests/tools/key_sequence.yaml

@@ -6,4 +6,6 @@ names:
 description: Press a sequence of keys by their keycodes.
 annotations:
   title: Key Sequence
+  readOnlyHint: true
   destructiveHint: false
+  openWorldHint: false

manifests/tools/launch_app_device.yaml

@@ -6,7 +6,9 @@ names:
 description: Launch app on device.
 annotations:
   title: Launch App Device
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Stop the app
     toolId: stop_app_device

manifests/tools/launch_app_logs_sim.yaml

@@ -8,7 +8,9 @@ routing:
   stateful: true
 annotations:
   title: Launch App Logs Simulator
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Stop capture and retrieve logs
     toolId: stop_sim_log_cap

manifests/tools/launch_app_sim.yaml

@@ -6,7 +6,9 @@ names:
 description: Launch app on simulator.
 annotations:
   title: Launch App Simulator
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Open Simulator app to see it
     toolId: open_sim

manifests/tools/launch_mac_app.yaml

@@ -6,4 +6,6 @@ names:
 description: Launch macOS app.
 annotations:
   title: Launch macOS App
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false

manifests/tools/list_devices.yaml

@@ -7,6 +7,8 @@ description: List connected devices.
 annotations:
   title: List Devices
   readOnlyHint: true
+  destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Build for device
     toolId: build_device

manifests/tools/list_schemes.yaml

@@ -7,6 +7,8 @@ description: List Xcode schemes.
 annotations:
   title: List Schemes
   readOnlyHint: true
+  destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Build for macOS
     toolId: build_macos

manifests/tools/list_sims.yaml

@@ -7,6 +7,8 @@ description: List iOS simulators.
 annotations:
   title: List Simulators
   readOnlyHint: true
+  destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Boot a simulator
     toolId: boot_sim

manifests/tools/long_press.yaml

@@ -6,4 +6,6 @@ names:
 description: Long press at coords.
 annotations:
   title: Long Press
+  readOnlyHint: true
   destructiveHint: false
+  openWorldHint: false

manifests/tools/manage_workflows.yaml

@@ -6,3 +6,8 @@ names:
 description: Workflows are groups of tools exposed by XcodeBuildMCP. By default, not all workflows (and therefore tools) are enabled; only simulator tools are enabled by default. Some workflows are mandatory and can't be disabled.
 availability:
   cli: true
+annotations:
+  title: Manage Workflows
+  readOnlyHint: false
+  destructiveHint: false
+  openWorldHint: false

manifests/tools/open_sim.yaml

@@ -6,7 +6,9 @@ names:
 description: Open Simulator.app for visibility/manual workflows. Not required before simulator build-and-run (build_run_sim).
 annotations:
   title: Open Simulator
+  readOnlyHint: true
   destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Boot a simulator for manual workflows
     toolId: boot_sim

manifests/tools/record_sim_video.yaml

@@ -8,7 +8,9 @@ routing:
   stateful: true
 annotations:
   title: Record Simulator Video
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Stop and save the recording
     toolId: record_sim_video

manifests/tools/reset_sim_location.yaml

@@ -6,4 +6,6 @@ names:
 description: Reset sim location.
 annotations:
   title: Reset Simulator Location
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false

manifests/tools/scaffold_ios_project.yaml

@@ -8,7 +8,9 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Scaffold iOS Project
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: "Important: Before working on the project make sure to read the README.md file in the workspace root directory."
   - label: Build for simulator

manifests/tools/scaffold_macos_project.yaml

@@ -8,7 +8,9 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Scaffold macOS Project
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: "Important: Before working on the project make sure to read the README.md file in the workspace root directory."
   - label: Build for macOS