Critical failure: The single tool 'dynamic_jumpserver_api_tools' has NO explicit schema definition visible in source code. Tool names, parameters, and output schemas are dynamically generated from JumpServer's OpenAPI spec at runtime, not statically defined or validated. The description is generic placeholder text ('Tools are dynamically generated...') that does NOT explain what specific tools are available, when to use them, or what they return. No parameter descriptions, no input validation guidance, no error recovery hints. This violates the core principle that tool definitions must be self-documenting for LLM selection and safe execution. Dynamic generation without static schema export makes this unmaintainable and unsafe for production agents.

• Export JumpServer OpenAPI schema to a static, version-controlled JSON file. Generate tool definitions at build time, not runtime. Commit generated tools to git so changes are reviewable.
• For each generated tool, add a description (50-150 chars) explaining: what it does, when to use it vs similar tools, and what it returns. Example: 'List all SSH sessions with pagination. Returns session_id, user, host, start_time. Use to audit active connections.'
• Add parameter descriptions to the generated schema. For each OpenAPI parameter, extract or synthesize a description explaining the expected format, valid values, and constraints. Example: 'user_id (integer, required): The numeric ID of the target user. Must be > 0.'
• Implement error handling that returns actionable recovery guidance. Catch HTTP errors and return: error code, what went wrong, and what to try next. Example: '404 User not found. Try search_users() with a partial name, or list_users() to see available IDs.'
• Document authorization requirements and audit trail. Add a scope_declaration to each tool (e.g., 'read:sessions', 'write:users'). Log tool calls with caller identity, timestamp, parameters, and result for compliance.

Inferred effective spec: <=2025-11-25.

• Relies on Logging (deprecated) - log to stderr or use OpenTelemetry