STORED_FLOWS_READ

const STORED_FLOWS_READ: "stored-flows:read" = 'stored-flows:read';

Permission names requested through Policy.decide({ toolName }). They are not tools — Policy is the existing decision primitive, so the HTTP boundary reuses it instead of inventing a second gate.