@agenticmail/enterprise 0.3.2 → 0.4.0

package/src/engine/skills/enterprise-knowledge-search.ts

@@ -0,0 +1,106 @@
+import type { SkillDefinition, ToolDefinition } from '../skills.js';
+
+export const SKILL_DEF: Omit<SkillDefinition, 'tools'> = {
+  id: 'enterprise-knowledge-search',
+  name: 'Internal Knowledge Search',
+  description: 'Semantic search across company knowledge bases, wikis, documentation, Confluence, SharePoint, and Google Drive. Uses vector embeddings for intelligent matching beyond keyword search. Supports filtering by source, date, author, and content type.',
+  category: 'research',
+  risk: 'low',
+  icon: '🔍',
+  source: 'builtin',
+  version: '1.0.0',
+  author: 'AgenticMail',
+};
+
+export const TOOLS: ToolDefinition[] = [
+  {
+    id: 'ent_kb_search',
+    name: 'Search Knowledge Base',
+    description: 'Semantic search across all connected knowledge sources. Returns relevant documents ranked by relevance with highlighted matching passages.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-knowledge-search',
+    sideEffects: ['network-request'],
+    parameters: {
+      type: 'object',
+      properties: {
+        query: { type: 'string', description: 'Natural language search query' },
+        sources: { type: 'array', items: { type: 'string', enum: ['confluence', 'sharepoint', 'google-drive', 'notion', 'internal-wiki', 'all'] }, description: 'Knowledge sources to search', default: ['all'] },
+        contentType: { type: 'string', enum: ['all', 'document', 'page', 'spreadsheet', 'presentation', 'pdf'], default: 'all' },
+        dateRange: { type: 'object', properties: { after: { type: 'string' }, before: { type: 'string' } } },
+        author: { type: 'string', description: 'Filter by author name or email' },
+        limit: { type: 'number', description: 'Maximum results', default: 10 },
+      },
+      required: ['query'],
+    },
+  },
+  {
+    id: 'ent_kb_get_document',
+    name: 'Get Document Content',
+    description: 'Retrieve the full content of a specific document by ID or URL. Returns document text, metadata, and comments.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-knowledge-search',
+    sideEffects: ['network-request'],
+    parameters: {
+      type: 'object',
+      properties: {
+        documentId: { type: 'string', description: 'Document ID or URL' },
+        source: { type: 'string', enum: ['confluence', 'sharepoint', 'google-drive', 'notion'], description: 'Source system' },
+        includeComments: { type: 'boolean', default: false },
+        format: { type: 'string', enum: ['markdown', 'text', 'html'], default: 'markdown' },
+      },
+      required: ['documentId'],
+    },
+  },
+  {
+    id: 'ent_kb_list_spaces',
+    name: 'List Knowledge Spaces',
+    description: 'List available knowledge base spaces, sites, or drives that this agent has access to.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-knowledge-search',
+    sideEffects: ['network-request'],
+    parameters: {
+      type: 'object',
+      properties: {
+        source: { type: 'string', enum: ['confluence', 'sharepoint', 'google-drive', 'notion', 'all'], default: 'all' },
+      },
+    },
+  },
+  {
+    id: 'ent_kb_recent_updates',
+    name: 'Recent Knowledge Updates',
+    description: 'List recently created or modified documents across knowledge sources. Useful for staying current on company policies, procedures, and announcements.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-knowledge-search',
+    sideEffects: ['network-request'],
+    parameters: {
+      type: 'object',
+      properties: {
+        sources: { type: 'array', items: { type: 'string' }, default: ['all'] },
+        since: { type: 'string', description: 'ISO date to fetch updates since (default: 7 days ago)' },
+        limit: { type: 'number', default: 20 },
+      },
+    },
+  },
+  {
+    id: 'ent_kb_ask',
+    name: 'Ask Knowledge Base',
+    description: 'Ask a natural language question and get a synthesized answer from multiple knowledge sources with citations. Uses RAG (Retrieval-Augmented Generation) to find relevant passages and compose an answer.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-knowledge-search',
+    sideEffects: ['network-request'],
+    parameters: {
+      type: 'object',
+      properties: {
+        question: { type: 'string', description: 'Natural language question' },
+        sources: { type: 'array', items: { type: 'string' }, default: ['all'] },
+        includeCitations: { type: 'boolean', description: 'Include source citations in answer', default: true },
+      },
+      required: ['question'],
+    },
+  },
+];

package/src/engine/skills/enterprise-logs.ts

@@ -0,0 +1,115 @@
+import type { SkillDefinition, ToolDefinition } from '../skills.js';
+
+export const SKILL_DEF: Omit<SkillDefinition, 'tools'> = {
+  id: 'enterprise-logs',
+  name: 'Log Search & Aggregation',
+  description: 'Search, aggregate, and analyze application logs across services. Supports querying by time range, severity, service, and content patterns. Provides log correlation, trend analysis, and error rate tracking.',
+  category: 'monitoring',
+  risk: 'low',
+  icon: '📋',
+  source: 'builtin',
+  version: '1.0.0',
+  author: 'AgenticMail',
+};
+
+export const TOOLS: ToolDefinition[] = [
+  {
+    id: 'ent_log_search',
+    name: 'Search Logs',
+    description: 'Full-text search across application logs with filters for time range, severity level, service name, and regex patterns. Returns matching log entries with context.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-logs',
+    sideEffects: ['network-request'],
+    parameters: {
+      type: 'object',
+      properties: {
+        query: { type: 'string', description: 'Search query (supports regex)' },
+        service: { type: 'string', description: 'Filter by service/application name' },
+        severity: { type: 'string', enum: ['debug', 'info', 'warn', 'error', 'fatal'], description: 'Minimum severity level' },
+        startTime: { type: 'string', description: 'Start of time range (ISO 8601)' },
+        endTime: { type: 'string', description: 'End of time range (ISO 8601)' },
+        limit: { type: 'number', default: 100 },
+        context: { type: 'number', description: 'Number of surrounding log lines to include', default: 2 },
+      },
+      required: ['query'],
+    },
+  },
+  {
+    id: 'ent_log_aggregate',
+    name: 'Aggregate Log Metrics',
+    description: 'Compute aggregate statistics over log data: error rates, request counts, latency percentiles, grouped by service, endpoint, or time bucket.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-logs',
+    sideEffects: ['network-request'],
+    parameters: {
+      type: 'object',
+      properties: {
+        metric: { type: 'string', enum: ['count', 'error_rate', 'latency_p50', 'latency_p95', 'latency_p99', 'throughput'] },
+        service: { type: 'string' },
+        groupBy: { type: 'string', enum: ['service', 'endpoint', 'status_code', 'hour', 'day'] },
+        startTime: { type: 'string' },
+        endTime: { type: 'string' },
+        interval: { type: 'string', enum: ['1m', '5m', '1h', '1d'], description: 'Time bucket size' },
+      },
+      required: ['metric', 'startTime', 'endTime'],
+    },
+  },
+  {
+    id: 'ent_log_tail',
+    name: 'Tail Live Logs',
+    description: 'Stream the most recent log entries from a service in real-time. Useful for monitoring deployments and debugging live issues.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-logs',
+    sideEffects: ['network-request'],
+    parameters: {
+      type: 'object',
+      properties: {
+        service: { type: 'string', description: 'Service to tail' },
+        severity: { type: 'string', enum: ['debug', 'info', 'warn', 'error', 'fatal'] },
+        lines: { type: 'number', description: 'Number of recent lines', default: 50 },
+        filter: { type: 'string', description: 'Filter pattern (regex)' },
+      },
+      required: ['service'],
+    },
+  },
+  {
+    id: 'ent_log_correlate',
+    name: 'Correlate Logs',
+    description: 'Trace a request across multiple services using a correlation/trace ID. Returns the full request journey showing timing, errors, and dependencies.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-logs',
+    sideEffects: ['network-request'],
+    parameters: {
+      type: 'object',
+      properties: {
+        traceId: { type: 'string', description: 'Trace/correlation ID to follow' },
+        requestId: { type: 'string', description: 'Request ID (alternative to traceId)' },
+        timeRange: { type: 'object', properties: { start: { type: 'string' }, end: { type: 'string' } } },
+      },
+      required: [],
+    },
+  },
+  {
+    id: 'ent_log_errors',
+    name: 'Top Errors Summary',
+    description: 'Get a summary of the most frequent errors across services in a time period. Groups errors by message pattern with counts and first/last occurrence.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-logs',
+    sideEffects: ['network-request'],
+    parameters: {
+      type: 'object',
+      properties: {
+        service: { type: 'string', description: 'Specific service (or all)' },
+        startTime: { type: 'string' },
+        endTime: { type: 'string' },
+        limit: { type: 'number', default: 20 },
+      },
+      required: ['startTime', 'endTime'],
+    },
+  },
+];

package/src/engine/skills/enterprise-notifications.ts

@@ -0,0 +1,119 @@
+import type { SkillDefinition, ToolDefinition } from '../skills.js';
+
+export const SKILL_DEF: Omit<SkillDefinition, 'tools'> = {
+  id: 'enterprise-notifications',
+  name: 'Multi-Channel Notifications',
+  description: 'Send notifications via email, Slack, Microsoft Teams, SMS, push notifications, and webhooks. Supports templates, priority routing, do-not-disturb rules, and escalation chains.',
+  category: 'communication',
+  risk: 'medium',
+  icon: '🔔',
+  source: 'builtin',
+  version: '1.0.0',
+  author: 'AgenticMail',
+};
+
+export const TOOLS: ToolDefinition[] = [
+  {
+    id: 'ent_notify_send',
+    name: 'Send Notification',
+    description: 'Send a notification to one or more recipients via their preferred channel. Automatically routes based on recipient preferences and urgency.',
+    category: 'communicate',
+    risk: 'medium',
+    skillId: 'enterprise-notifications',
+    sideEffects: ['sends-email', 'sends-message'],
+    parameters: {
+      type: 'object',
+      properties: {
+        recipients: { type: 'array', items: { type: 'string' }, description: 'Email addresses or user IDs' },
+        title: { type: 'string', description: 'Notification title/subject' },
+        message: { type: 'string', description: 'Notification body (supports Markdown)' },
+        channel: { type: 'string', enum: ['auto', 'email', 'slack', 'teams', 'sms', 'push', 'webhook'], description: 'Delivery channel (auto=use recipient preferences)', default: 'auto' },
+        priority: { type: 'string', enum: ['low', 'normal', 'high', 'critical'], default: 'normal' },
+        actionUrl: { type: 'string', description: 'URL for the notification action button' },
+        actionLabel: { type: 'string', description: 'Label for the action button' },
+      },
+      required: ['recipients', 'title', 'message'],
+    },
+  },
+  {
+    id: 'ent_notify_broadcast',
+    name: 'Broadcast Announcement',
+    description: 'Send a message to all members of a team, channel, or the entire organization. Supports scheduling for future delivery.',
+    category: 'communicate',
+    risk: 'high',
+    skillId: 'enterprise-notifications',
+    sideEffects: ['sends-email', 'sends-message'],
+    parameters: {
+      type: 'object',
+      properties: {
+        audience: { type: 'string', description: 'Team name, channel, "all-staff", or distribution list' },
+        title: { type: 'string' },
+        message: { type: 'string' },
+        channels: { type: 'array', items: { type: 'string', enum: ['email', 'slack', 'teams'] }, description: 'Channels to broadcast on' },
+        scheduledFor: { type: 'string', description: 'ISO 8601 datetime for scheduled delivery' },
+      },
+      required: ['audience', 'title', 'message'],
+    },
+  },
+  {
+    id: 'ent_notify_webhook',
+    name: 'Send Webhook',
+    description: 'Send a JSON payload to a webhook URL. Useful for triggering external automations, CI/CD pipelines, or custom integrations.',
+    category: 'communicate',
+    risk: 'medium',
+    skillId: 'enterprise-notifications',
+    sideEffects: ['network-request'],
+    parameters: {
+      type: 'object',
+      properties: {
+        url: { type: 'string', description: 'Webhook URL' },
+        payload: { type: 'object', description: 'JSON payload to send' },
+        method: { type: 'string', enum: ['POST', 'PUT'], default: 'POST' },
+        headers: { type: 'object', description: 'Additional HTTP headers' },
+        secret: { type: 'string', description: 'Webhook signing secret (from vault)' },
+      },
+      required: ['url', 'payload'],
+    },
+  },
+  {
+    id: 'ent_notify_escalate',
+    name: 'Escalate Alert',
+    description: 'Escalate an unacknowledged alert through the on-call chain. Follows the escalation policy with increasing urgency.',
+    category: 'communicate',
+    risk: 'high',
+    skillId: 'enterprise-notifications',
+    sideEffects: ['sends-email', 'sends-message', 'sends-sms'],
+    parameters: {
+      type: 'object',
+      properties: {
+        alertTitle: { type: 'string' },
+        alertDescription: { type: 'string' },
+        severity: { type: 'string', enum: ['info', 'warning', 'error', 'critical'] },
+        escalationPolicy: { type: 'string', description: 'Named escalation policy to follow' },
+        acknowledgeUrl: { type: 'string', description: 'URL to acknowledge the alert' },
+      },
+      required: ['alertTitle', 'alertDescription', 'severity'],
+    },
+  },
+  {
+    id: 'ent_notify_schedule',
+    name: 'Schedule Recurring Notification',
+    description: 'Set up a recurring notification on a schedule (daily digest, weekly report reminder, etc.).',
+    category: 'write',
+    risk: 'medium',
+    skillId: 'enterprise-notifications',
+    sideEffects: ['sends-email', 'sends-message'],
+    parameters: {
+      type: 'object',
+      properties: {
+        recipients: { type: 'array', items: { type: 'string' } },
+        title: { type: 'string' },
+        message: { type: 'string' },
+        schedule: { type: 'string', description: 'Cron expression (e.g., "0 9 * * MON" for every Monday at 9am)' },
+        channel: { type: 'string', enum: ['auto', 'email', 'slack', 'teams'], default: 'auto' },
+        timezone: { type: 'string', default: 'UTC' },
+      },
+      required: ['recipients', 'title', 'message', 'schedule'],
+    },
+  },
+];

package/src/engine/skills/enterprise-security-scan.ts

@@ -0,0 +1,124 @@
+import type { SkillDefinition, ToolDefinition } from '../skills.js';
+
+export const SKILL_DEF: Omit<SkillDefinition, 'tools'> = {
+  id: 'enterprise-security-scan',
+  name: 'Security Scanning',
+  description: 'Scan text, code, and documents for security issues: exposed credentials, PII (personally identifiable information), malicious patterns, and dependency vulnerabilities. Supports GDPR, CCPA, HIPAA, and PCI-DSS compliance checks.',
+  category: 'security',
+  risk: 'low',
+  icon: '🛡️',
+  source: 'builtin',
+  version: '1.0.0',
+  author: 'AgenticMail',
+};
+
+export const TOOLS: ToolDefinition[] = [
+  {
+    id: 'ent_sec_scan_secrets',
+    name: 'Scan for Exposed Secrets',
+    description: 'Scan text, code, or files for accidentally exposed credentials: API keys, passwords, tokens, private keys, connection strings, and AWS/GCP/Azure credentials.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-security-scan',
+    sideEffects: [],
+    parameters: {
+      type: 'object',
+      properties: {
+        content: { type: 'string', description: 'Text content to scan' },
+        filePath: { type: 'string', description: 'File or directory path to scan (alternative to content)' },
+        recursive: { type: 'boolean', description: 'Scan directories recursively', default: true },
+        excludePatterns: { type: 'array', items: { type: 'string' }, description: 'File patterns to exclude (e.g., "*.min.js", "node_modules/")' },
+      },
+    },
+  },
+  {
+    id: 'ent_sec_scan_pii',
+    name: 'Detect PII',
+    description: 'Detect personally identifiable information in text: names, email addresses, phone numbers, SSN/TIN, credit card numbers, addresses, dates of birth, passport numbers, and IP addresses.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-security-scan',
+    sideEffects: [],
+    parameters: {
+      type: 'object',
+      properties: {
+        content: { type: 'string', description: 'Text to scan for PII' },
+        filePath: { type: 'string', description: 'File path to scan' },
+        types: { type: 'array', items: { type: 'string', enum: ['name', 'email', 'phone', 'ssn', 'credit_card', 'address', 'dob', 'passport', 'ip_address', 'all'] }, default: ['all'] },
+        locale: { type: 'string', description: 'Locale for PII patterns (e.g., "US", "EU", "UK")', default: 'US' },
+      },
+    },
+  },
+  {
+    id: 'ent_sec_redact_pii',
+    name: 'Redact PII',
+    description: 'Replace detected PII in text with redaction markers ([REDACTED-EMAIL], [REDACTED-SSN], etc.). Returns clean text safe for sharing or archiving.',
+    category: 'write',
+    risk: 'low',
+    skillId: 'enterprise-security-scan',
+    sideEffects: [],
+    parameters: {
+      type: 'object',
+      properties: {
+        content: { type: 'string', description: 'Text to redact' },
+        types: { type: 'array', items: { type: 'string', enum: ['name', 'email', 'phone', 'ssn', 'credit_card', 'address', 'dob', 'passport', 'ip_address', 'all'] }, default: ['all'] },
+        redactionStyle: { type: 'string', enum: ['marker', 'mask', 'hash'], description: 'marker=[REDACTED], mask=*****, hash=sha256 prefix', default: 'marker' },
+        preserveFormat: { type: 'boolean', description: 'Keep same string length with masking', default: true },
+      },
+      required: ['content'],
+    },
+  },
+  {
+    id: 'ent_sec_scan_deps',
+    name: 'Scan Dependencies',
+    description: 'Check project dependencies for known vulnerabilities using CVE databases. Supports npm (package.json), Python (requirements.txt), Ruby (Gemfile), Go (go.mod), and Java (pom.xml).',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-security-scan',
+    sideEffects: ['network-request'],
+    parameters: {
+      type: 'object',
+      properties: {
+        projectPath: { type: 'string', description: 'Path to project directory or manifest file' },
+        severity: { type: 'string', enum: ['all', 'low', 'medium', 'high', 'critical'], description: 'Minimum severity to report', default: 'medium' },
+        autoFix: { type: 'boolean', description: 'Suggest safe version upgrades', default: true },
+      },
+      required: ['projectPath'],
+    },
+  },
+  {
+    id: 'ent_sec_compliance_check',
+    name: 'Compliance Check',
+    description: 'Check content against compliance frameworks: GDPR (data handling), HIPAA (health info), PCI-DSS (payment data), SOC 2 (security controls). Returns findings and recommendations.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-security-scan',
+    sideEffects: [],
+    parameters: {
+      type: 'object',
+      properties: {
+        content: { type: 'string', description: 'Content to check' },
+        filePath: { type: 'string', description: 'File to check' },
+        frameworks: { type: 'array', items: { type: 'string', enum: ['gdpr', 'hipaa', 'pci-dss', 'soc2', 'ccpa', 'all'] }, default: ['all'] },
+      },
+    },
+  },
+  {
+    id: 'ent_sec_hash',
+    name: 'Hash & Verify',
+    description: 'Generate cryptographic hashes (SHA-256, SHA-512, MD5) of text or files. Useful for data integrity verification and secure comparisons.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-security-scan',
+    sideEffects: [],
+    parameters: {
+      type: 'object',
+      properties: {
+        content: { type: 'string', description: 'Text to hash' },
+        filePath: { type: 'string', description: 'File to hash' },
+        algorithm: { type: 'string', enum: ['sha256', 'sha512', 'md5', 'sha1'], default: 'sha256' },
+        verify: { type: 'string', description: 'Expected hash to verify against' },
+      },
+    },
+  },
+];

package/src/engine/skills/enterprise-spreadsheet.ts

@@ -0,0 +1,170 @@
+import type { SkillDefinition, ToolDefinition } from '../skills.js';
+
+export const SKILL_DEF: Omit<SkillDefinition, 'tools'> = {
+  id: 'enterprise-spreadsheet',
+  name: 'Spreadsheet Processor',
+  description: 'Read, write, transform, and analyze Excel and CSV files. Supports filtering, sorting, aggregations, pivot operations, formula computation, merging datasets, and format conversion. Handles large files with streaming.',
+  category: 'data',
+  risk: 'medium',
+  icon: '📊',
+  source: 'builtin',
+  version: '1.0.0',
+  author: 'AgenticMail',
+};
+
+export const TOOLS: ToolDefinition[] = [
+  {
+    id: 'ent_sheet_read',
+    name: 'Read Spreadsheet',
+    description: 'Read an Excel (.xlsx, .xls) or CSV file and return contents as structured data. Supports sheet selection, header row detection, and data type inference.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-spreadsheet',
+    sideEffects: [],
+    parameters: {
+      type: 'object',
+      properties: {
+        filePath: { type: 'string', description: 'Path to the spreadsheet file or URL' },
+        sheet: { type: 'string', description: 'Sheet name (Excel only, default: first sheet)' },
+        headerRow: { type: 'number', description: 'Row number containing headers (1-based, default: 1)', default: 1 },
+        range: { type: 'string', description: 'Cell range to read (e.g., "A1:D100"). Omit for entire sheet.' },
+        limit: { type: 'number', description: 'Maximum rows to return', default: 5000 },
+        format: { type: 'string', enum: ['json', 'csv', 'markdown'], default: 'json' },
+      },
+      required: ['filePath'],
+    },
+  },
+  {
+    id: 'ent_sheet_write',
+    name: 'Write Spreadsheet',
+    description: 'Create or overwrite a spreadsheet file from structured data. Supports Excel and CSV output with formatting options.',
+    category: 'write',
+    risk: 'medium',
+    skillId: 'enterprise-spreadsheet',
+    sideEffects: ['modifies-files'],
+    parameters: {
+      type: 'object',
+      properties: {
+        outputPath: { type: 'string', description: 'Output file path (.xlsx or .csv)' },
+        data: { type: 'array', items: { type: 'object' }, description: 'Array of row objects' },
+        headers: { type: 'array', items: { type: 'string' }, description: 'Column headers (auto-detected from data if omitted)' },
+        sheetName: { type: 'string', description: 'Sheet name (Excel only)', default: 'Sheet1' },
+      },
+      required: ['outputPath', 'data'],
+    },
+  },
+  {
+    id: 'ent_sheet_filter',
+    name: 'Filter Rows',
+    description: 'Filter spreadsheet rows by column conditions. Supports equals, contains, greater/less than, regex, and is-empty checks.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-spreadsheet',
+    sideEffects: [],
+    parameters: {
+      type: 'object',
+      properties: {
+        filePath: { type: 'string', description: 'Path to spreadsheet' },
+        filters: { type: 'array', items: { type: 'object', properties: { column: { type: 'string' }, operator: { type: 'string', enum: ['eq', 'neq', 'gt', 'lt', 'gte', 'lte', 'contains', 'not_contains', 'starts_with', 'ends_with', 'regex', 'is_empty', 'not_empty'] }, value: { type: 'string' } } }, description: 'Filter conditions' },
+        sheet: { type: 'string', description: 'Sheet name (Excel only)' },
+      },
+      required: ['filePath', 'filters'],
+    },
+  },
+  {
+    id: 'ent_sheet_aggregate',
+    name: 'Aggregate Data',
+    description: 'Compute aggregations over spreadsheet data: sum, average, count, min, max, median, std deviation. Supports grouping by columns (like SQL GROUP BY).',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-spreadsheet',
+    sideEffects: [],
+    parameters: {
+      type: 'object',
+      properties: {
+        filePath: { type: 'string', description: 'Path to spreadsheet' },
+        groupBy: { type: 'array', items: { type: 'string' }, description: 'Columns to group by' },
+        aggregations: { type: 'array', items: { type: 'object', properties: { column: { type: 'string' }, function: { type: 'string', enum: ['sum', 'avg', 'count', 'min', 'max', 'median', 'stddev'] } } }, description: 'Aggregation operations' },
+        sheet: { type: 'string' },
+      },
+      required: ['filePath', 'aggregations'],
+    },
+  },
+  {
+    id: 'ent_sheet_transform',
+    name: 'Transform Columns',
+    description: 'Add, rename, reorder, or compute new columns. Supports formulas, string operations, date parsing, and type casting.',
+    category: 'write',
+    risk: 'low',
+    skillId: 'enterprise-spreadsheet',
+    sideEffects: [],
+    parameters: {
+      type: 'object',
+      properties: {
+        filePath: { type: 'string', description: 'Path to spreadsheet' },
+        transforms: { type: 'array', items: { type: 'object', properties: { action: { type: 'string', enum: ['add', 'rename', 'drop', 'reorder', 'cast'] }, column: { type: 'string' }, newName: { type: 'string' }, formula: { type: 'string' }, dataType: { type: 'string', enum: ['string', 'number', 'date', 'boolean'] } } } },
+        outputPath: { type: 'string', description: 'Output file (or overwrite source if omitted)' },
+      },
+      required: ['filePath', 'transforms'],
+    },
+  },
+  {
+    id: 'ent_sheet_merge',
+    name: 'Merge Datasets',
+    description: 'Join two spreadsheets by matching columns (like SQL JOIN). Supports inner, left, right, and full outer joins.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-spreadsheet',
+    sideEffects: [],
+    parameters: {
+      type: 'object',
+      properties: {
+        leftFile: { type: 'string', description: 'Path to left spreadsheet' },
+        rightFile: { type: 'string', description: 'Path to right spreadsheet' },
+        joinType: { type: 'string', enum: ['inner', 'left', 'right', 'full'], default: 'inner' },
+        leftKey: { type: 'string', description: 'Column name in left file to join on' },
+        rightKey: { type: 'string', description: 'Column name in right file to join on' },
+        outputPath: { type: 'string', description: 'Output file path' },
+      },
+      required: ['leftFile', 'rightFile', 'leftKey', 'rightKey'],
+    },
+  },
+  {
+    id: 'ent_sheet_pivot',
+    name: 'Pivot Table',
+    description: 'Create a pivot table from spreadsheet data. Group by row and column dimensions, aggregate with sum/avg/count.',
+    category: 'read',
+    risk: 'low',
+    skillId: 'enterprise-spreadsheet',
+    sideEffects: [],
+    parameters: {
+      type: 'object',
+      properties: {
+        filePath: { type: 'string', description: 'Path to spreadsheet' },
+        rows: { type: 'array', items: { type: 'string' }, description: 'Row grouping columns' },
+        columns: { type: 'array', items: { type: 'string' }, description: 'Column grouping columns' },
+        values: { type: 'string', description: 'Value column to aggregate' },
+        aggregation: { type: 'string', enum: ['sum', 'avg', 'count', 'min', 'max'], default: 'sum' },
+      },
+      required: ['filePath', 'rows', 'values'],
+    },
+  },
+  {
+    id: 'ent_sheet_convert',
+    name: 'Convert Format',
+    description: 'Convert between spreadsheet formats: Excel to CSV, CSV to Excel, CSV to JSON, JSON to CSV, Excel to JSON.',
+    category: 'write',
+    risk: 'low',
+    skillId: 'enterprise-spreadsheet',
+    sideEffects: ['modifies-files'],
+    parameters: {
+      type: 'object',
+      properties: {
+        inputPath: { type: 'string', description: 'Input file path' },
+        outputPath: { type: 'string', description: 'Output file path (format inferred from extension)' },
+        sheet: { type: 'string', description: 'Sheet to convert (Excel only)' },
+      },
+      required: ['inputPath', 'outputPath'],
+    },
+  },
+];