@anychat-ai/mcp 0.1.1 → 0.3.0

package/dist/tools/capabilities.js

@@ -5,34 +5,44 @@ const zod_1 = require("zod");
 const tool_1 = require("../tool");
 /**
  * Capabilities tool group — tool bindings, OAuth-runtime tool status,
- * outreach config + preview, outreach links, and knowledge documents.
+ * custom-integration contracts, scheduling config, People field
+ * definitions, outreach config + preview, outreach links, product catalog
+ * and knowledge documents.
  *
  * Every tool is a 1:1 projection of a `/v1` route (API reference:
- * "Tool bindings", "OAuth-runtime tools", "Outreach", "Outreach links";
- * knowledge documents are the two read routes under
- * `/knowledge/documents`, guarded by `knowledge:read`).
+ * "Tool bindings", "OAuth-runtime tools", "Custom tools", "Scheduling",
+ * "People fields", "Outreach", "Outreach links", "Products"; knowledge
+ * documents are the read route under `/knowledge/documents`, guarded by
+ * `knowledge:read`).
+ *
+ * The capability-config resources (`/scheduling`, `/people-fields`,
+ * `/products`, `/custom-tools`) are exactly the `capabilities.*` slices
+ * of the export document: GET ≡ export view, PUT accepts what import
+ * accepts.
  *
  * Deliberately NOT here:
  * - `POST …/tools/{toolId}/oauth/start` — the grant completes in the
  *   operator's browser; hosts can't drive that flow from a tool.
- * - Sending outreach — there is no `/v1` send route (sends are a console /
- *   gateway operation), so nothing to project.
+ * - Sending outreach to a person — lives in the People group
+ *   (`send_outreach` / `send_outreach_follow_up`).
  * - Human escalation — no dedicated route; it's the identity contact
  *   fields (`contactEmail`, `contactPhone`, `websiteUrl`,
  *   `contactAvailability`), edited via the identity tools.
  */
-const agentId = zod_1.z
-    .string()
-    .describe('Agent id (URL-safe slug, e.g. agent-acme-bot-pj7r2qx4)');
+const agentId = zod_1.z.string();
 const toolId = zod_1.z
     .string()
-    .describe('Qualified catalog tool id, e.g. "@anychat/tool.custom-http-webhook", or the id of one of the agent\'s custom tools. Passed raw — the tool URL-encodes it.');
+    .describe('Catalog tool id, e.g. "@anychat/tool.custom-http-webhook", or one of the agent\'s custom tool ids');
 const bindingsBase = (agent) => `/agents/${encodeURIComponent(agent)}/tool-bindings`;
 const bindingPath = (agent, tool) => `${bindingsBase(agent)}/${encodeURIComponent(tool)}`;
 const oauthPath = (agent, tool, action) => `/agents/${encodeURIComponent(agent)}/tools/${encodeURIComponent(tool)}/oauth/${action}`;
 const outreachPath = (agent) => `/agents/${encodeURIComponent(agent)}/outreach`;
 const outreachLinksPath = (agent) => `/agents/${encodeURIComponent(agent)}/outreach-links`;
 const knowledgeDocsPath = (agent) => `/agents/${encodeURIComponent(agent)}/knowledge/documents`;
+const schedulingPath = (agent) => `/agents/${encodeURIComponent(agent)}/scheduling`;
+const peopleFieldsPath = (agent) => `/agents/${encodeURIComponent(agent)}/people-fields`;
+const productsPath = (agent) => `/agents/${encodeURIComponent(agent)}/products`;
+const customToolsPath = (agent, tool) => `/agents/${encodeURIComponent(agent)}/custom-tools${tool === undefined ? '' : `/${encodeURIComponent(tool)}`}`;
 /**
  * Tool-binding `config`: shape is defined by the catalog tool's
  * `configSchema` (see the tools catalog), so it's an open record. Secret
@@ -41,38 +51,129 @@ const knowledgeDocsPath = (agent) => `/agents/${encodeURIComponent(agent)}/knowl
  */
 const bindingConfig = zod_1.z
     .record(zod_1.z.string(), zod_1.z.any())
-    .describe("Tool configuration object; shape per the catalog tool's configSchema (e.g. { webhookUrl, authHeader } for the Custom HTTP Webhook tool, a calendar id for Google Calendar). For write-only secret fields (API keys, webhook URLs, auth headers): send a non-empty string to set/replace, an empty string to clear, or omit to leave the stored secret untouched. Reads return { set, last4 } metadata in place of secrets.");
+    .describe('Config per the catalog tool\'s configSchema (e.g. { webhookUrl, authHeader }). Write-only secret fields: non-empty string sets, "" clears, omit leaves the stored secret; reads show { set, last4 }.');
 const followUpStep = zod_1.z
     .object({
-    id: zod_1.z.string().min(1).describe('Step id (non-empty string, operator-chosen)'),
+    id: zod_1.z.string().min(1).describe('Operator-chosen step id'),
     delay: zod_1.z
         .object({
-        value: zod_1.z.number().positive().describe('Wait since the initial outreach (> 0)'),
-        unit: zod_1.z.enum(['hours', 'days']).describe('Unit for value'),
+        value: zod_1.z.number().positive(),
+        unit: zod_1.z.enum(['hours', 'days']),
     })
-        .describe('How long after the outreach to send the nudge'),
-    messageTemplateId: zod_1.z
-        .string()
-        .min(1)
-        .describe("Id of one of the agent's message templates (must exist, else 404)"),
+        .describe('Wait after the initial outreach'),
+    messageTemplateId: zod_1.z.string().min(1).describe('Existing message template id'),
 })
     .describe('The single automatic follow-up step');
+// ── Capability-config shapes (mirror the API's sanitizers) ─────────────
+const timeHHMM = zod_1.z.string().describe('"HH:MM" 24h');
+const schedulingWindow = zod_1.z.object({
+    dayOfWeek: zod_1.z.number().int().min(0).max(6).describe('0 = Sun … 6 = Sat'),
+    startTime: timeHHMM,
+    endTime: timeHHMM,
+});
+const representative = zod_1.z
+    .object({
+    id: zod_1.z.string().min(1).describe('Stable per-agent id, unique'),
+    name: zod_1.z.string().min(1),
+    title: zod_1.z.string().optional(),
+    phone: zod_1.z.string().optional(),
+    email: zod_1.z.string().optional().describe('Gets appointment emails'),
+    type: zod_1.z
+        .string()
+        .optional()
+        .describe('sales (default) | advisor | clinician | support'),
+    availability: zod_1.z
+        .object({
+        timezone: zod_1.z.string().optional().describe('IANA'),
+        workingHours: zod_1.z.array(schedulingWindow).optional(),
+    })
+        .optional()
+        .describe('Omit → agent-level availableHours'),
+})
+    .loose();
+/** `SchedulingConfig` — the `capabilities.scheduling` slice; never carries googleCalendar. */
+const schedulingConfigShape = {
+    timezone: zod_1.z.string().optional().describe('IANA'),
+    availableHours: zod_1.z
+        .array(schedulingWindow)
+        .optional()
+        .describe('Weekly bookable windows'),
+    blackoutDates: zod_1.z.array(zod_1.z.string()).optional().describe('YYYY-MM-DD'),
+    disallowSameDayBooking: zod_1.z.boolean().optional(),
+    defaultDurationMinutes: zod_1.z.number().int().min(1).max(1440).optional(),
+    notificationRecipients: zod_1.z
+        .array(zod_1.z.string())
+        .optional()
+        .describe('Extra emails for appointment mail'),
+    reminders: zod_1.z
+        .object({
+        enabled: zod_1.z.boolean().optional().describe('Unset = on'),
+        leadMinutes: zod_1.z.number().int().min(1).max(10080).optional(),
+        includeContactCard: zod_1.z.boolean().optional().describe('Attach rep .vcf'),
+    })
+        .optional()
+        .describe('Pre-call reminder to the prospect'),
+    representatives: zod_1.z.array(representative).optional(),
+    defaultRepresentativeIdentity: zod_1.z
+        .string()
+        .optional()
+        .describe('Fallback when no rep assigned, e.g. "a sales representative"'),
+};
+const personFieldDef = zod_1.z
+    .object({
+    key: zod_1.z.string().describe('^[a-zA-Z][a-zA-Z0-9_]*$, unique; Person.customFields[key]'),
+    label: zod_1.z.string().optional(),
+    description: zod_1.z.string().optional().describe('What it means / when to fill it'),
+    type: zod_1.z
+        .enum(['string', 'number', 'date', 'boolean', 'enum'])
+        .optional()
+        .describe('Default string'),
+    enum: zod_1.z.array(zod_1.z.string()).optional().describe('Allowed values when type = enum'),
+    examples: zod_1.z.array(zod_1.z.string()).optional(),
+    required: zod_1.z.boolean().optional().describe('Advisory (intake forms); never blocks'),
+    intake: zod_1.z
+        .object({ aliases: zod_1.z.array(zod_1.z.string()).optional() })
+        .optional()
+        .describe('Import/lead-form column aliases (case-insensitive)'),
+})
+    .loose();
+const agentProduct = zod_1.z
+    .object({
+    id: zod_1.z.string().min(1).describe('Stable per-agent id, unique'),
+    name: zod_1.z.string().min(1),
+    description: zod_1.z.string().optional(),
+    imageUrl: zod_1.z.string().optional(),
+    productPageUrl: zod_1.z.string().optional(),
+    metadata: zod_1.z
+        .record(zod_1.z.string(), zod_1.z.string())
+        .optional()
+        .describe('Free string attributes (price, category …)'),
+})
+    .loose();
+const customToolId = zod_1.z
+    .string()
+    .describe('Custom tool id = the name the agent calls it by (^[a-zA-Z0-9_-]{1,64}$), e.g. "lookupOrder"');
+/** Drop undefined keys so a PUT body carries only what the caller set. */
+function stripUndefined(o) {
+    return Object.fromEntries(Object.entries(o).filter(([, v]) => v !== undefined));
+}
 exports.capabilityTools = [
     // ── Tool bindings ────────────────────────────────────────────────────
     (0, tool_1.defineTool)({
         name: 'list_tool_bindings',
         title: 'List tool bindings',
-        description: "List the tools bound to an agent (integrations such as Google Calendar, Slack, Custom HTTP Webhook, or the agent's own custom tools) with each binding's config (secrets redacted to { set, last4 }), enabled flag and configStatus (complete | incomplete | invalid). Use to see which capabilities an agent has wired up before configuring or troubleshooting one. Maps to GET /v1/orgs/{org}/agents/{agent}/tool-bindings.",
+        description: 'List the tools bound to an agent (Google Calendar, Slack, Custom HTTP Webhook, custom tools …) with config (secrets redacted to { set, last4 }), enabled flag and configStatus (complete | incomplete | invalid). Maps to GET /v1/orgs/{org}/agents/{agent}/tool-bindings.',
         kind: 'read',
         scope: 'agents:read',
         roleFloor: 'viewer',
+        profile: 'core',
         input: { agentId },
         run: async ({ client }, { agentId }) => client.get(await client.orgPath(bindingsBase(agentId))),
     }),
     (0, tool_1.defineTool)({
         name: 'get_tool_binding',
         title: 'Get a tool binding',
-        description: 'Read one tool binding on an agent: { toolId, config (secrets redacted), enabled, configStatus }. Use to inspect how a specific integration is configured. Maps to GET /v1/orgs/{org}/agents/{agent}/tool-bindings/{toolId}.',
+        description: 'Read one tool binding: { toolId, config (secrets redacted), enabled, configStatus }. Maps to GET /v1/orgs/{org}/agents/{agent}/tool-bindings/{toolId}.',
         kind: 'read',
         scope: 'agents:read',
         roleFloor: 'viewer',
@@ -82,10 +183,11 @@ exports.capabilityTools = [
     (0, tool_1.defineTool)({
         name: 'upsert_tool_binding',
         title: 'Create or replace a tool binding',
-        description: "Bind a catalog tool (or one of the agent's custom tools) to the agent, or replace an existing binding's config wholesale. The tool must exist in the catalog (see the tools catalog for its configSchema) — unknown tools are rejected with 404. Returns the saved binding with configStatus. Use update_tool_binding to merge a partial change instead. Maps to PUT /v1/orgs/{org}/agents/{agent}/tool-bindings/{toolId}.",
+        description: "Bind a catalog tool (or a custom tool) to the agent, or replace an existing binding's config wholesale (see the tools catalog for configSchema; unknown tool → 404). Returns the binding with configStatus. Use update_tool_binding for a partial merge. Maps to PUT /v1/orgs/{org}/agents/{agent}/tool-bindings/{toolId}.",
         kind: 'write',
         scope: 'agents:write',
         roleFloor: 'editor',
+        profile: 'core',
         input: {
             agentId,
             toolId,
@@ -93,7 +195,7 @@ exports.capabilityTools = [
             enabled: zod_1.z
                 .boolean()
                 .optional()
-                .describe('Whether the agent may use the tool (default: keep the existing value, or true for a new binding)'),
+                .describe('Default: existing value, or true for a new binding'),
         },
         run: async ({ client }, { agentId, toolId, config, enabled }) => client.put(await client.orgPath(bindingPath(agentId, toolId)), {
             config,
@@ -103,7 +205,7 @@ exports.capabilityTools = [
     (0, tool_1.defineTool)({
         name: 'update_tool_binding',
         title: 'Update a tool binding (merge)',
-        description: "Merge changes into an existing tool binding's config (fields you omit are left as they are). The binding must already exist (else 404). Returns the saved binding with configStatus. Maps to PATCH /v1/orgs/{org}/agents/{agent}/tool-bindings/{toolId}.",
+        description: "Merge changes into an existing tool binding's config (omitted fields unchanged; binding must exist). Maps to PATCH /v1/orgs/{org}/agents/{agent}/tool-bindings/{toolId}.",
         kind: 'write',
         scope: 'agents:write',
         roleFloor: 'editor',
@@ -111,10 +213,7 @@ exports.capabilityTools = [
             agentId,
             toolId,
             config: bindingConfig.optional(),
-            enabled: zod_1.z
-                .boolean()
-                .optional()
-                .describe('Set the enabled flag as part of the same update'),
+            enabled: zod_1.z.boolean().optional(),
         },
         run: async ({ client }, { agentId, toolId, config, enabled }) => client.patch(await client.orgPath(bindingPath(agentId, toolId)), {
             ...(config !== undefined ? { config } : {}),
@@ -124,21 +223,21 @@ exports.capabilityTools = [
     (0, tool_1.defineTool)({
         name: 'set_tool_binding_enabled',
         title: 'Enable or disable a tool binding',
-        description: 'Turn a bound tool on or off for the agent without touching its config — a disabled binding keeps its configuration and any stored secrets. Returns the updated binding. Maps to POST /v1/orgs/{org}/agents/{agent}/tool-bindings/{toolId}/_enable (enabled: true) or …/_disable (enabled: false).',
+        description: 'Turn a bound tool on or off without touching its config or secrets. Maps to POST /v1/orgs/{org}/agents/{agent}/tool-bindings/{toolId}/_enable or …/_disable.',
         kind: 'write',
         scope: 'agents:write',
         roleFloor: 'editor',
         input: {
             agentId,
             toolId,
-            enabled: zod_1.z.boolean().describe('true → _enable, false → _disable'),
+            enabled: zod_1.z.boolean(),
         },
         run: async ({ client }, { agentId, toolId, enabled }) => client.post(await client.orgPath(`${bindingPath(agentId, toolId)}/${enabled ? '_enable' : '_disable'}`)),
     }),
     (0, tool_1.defineTool)({
         name: 'delete_tool_binding',
         title: 'Delete a tool binding',
-        description: 'Unbind a tool from the agent and clear any stored secrets for the binding (irreversible — the config and secrets are gone; the agent stops offering the tool). To merely pause a tool use set_tool_binding_enabled; to drop only an OAuth grant use disconnect_oauth. Returns { ok: true, deleted: toolId } (the API replies 204). Maps to DELETE /v1/orgs/{org}/agents/{agent}/tool-bindings/{toolId}.',
+        description: 'Unbind a tool and clear its stored secrets (irreversible). To pause use set_tool_binding_enabled; to drop only an OAuth grant use disconnect_oauth. Maps to DELETE /v1/orgs/{org}/agents/{agent}/tool-bindings/{toolId}.',
         kind: 'destructive',
         scope: 'agents:write',
         roleFloor: 'editor',
@@ -152,7 +251,7 @@ exports.capabilityTools = [
     (0, tool_1.defineTool)({
         name: 'get_oauth_status',
         title: 'Get OAuth connection status',
-        description: 'Report the OAuth credential state for an OAuth-runtime tool binding (Google Calendar, Slack, …): { state: "not-connected" | "connected" | "expired" | "revoked" | "error", connectedAt?, lastError? }. Use to check whether an integration is connected or needs the operator to reconnect. Connecting requires the operator\'s browser (the console\'s Connect button, or POST …/oauth/start) and is not exposed as a tool. Maps to GET /v1/orgs/{org}/agents/{agent}/tools/{toolId}/oauth/status.',
+        description: "OAuth credential state for an OAuth-runtime tool binding (Google Calendar, Slack …): { state: not-connected | connected | expired | revoked | error, connectedAt?, lastError? }. Connecting needs the operator's browser (console Connect button) and is not a tool. Maps to GET /v1/orgs/{org}/agents/{agent}/tools/{toolId}/oauth/status.",
         kind: 'read',
         scope: 'agents:read',
         roleFloor: 'viewer',
@@ -162,60 +261,165 @@ exports.capabilityTools = [
     (0, tool_1.defineTool)({
         name: 'disconnect_oauth',
         title: 'Disconnect an OAuth grant',
-        description: 'Revoke the OAuth grant at the provider and delete the stored credential for an OAuth-runtime tool binding. The agent immediately loses access to the connected account (e.g. the calendar) until an operator reconnects in a browser; the binding itself stays so reconnecting is one click. Confirm with the user before running. Maps to POST /v1/orgs/{org}/agents/{agent}/tools/{toolId}/oauth/disconnect.',
+        description: 'Revoke the OAuth grant at the provider and delete the stored credential; the agent loses access until an operator reconnects in a browser. The binding stays. Maps to POST /v1/orgs/{org}/agents/{agent}/tools/{toolId}/oauth/disconnect.',
         kind: 'destructive',
         scope: 'agents:write',
         roleFloor: 'editor',
         input: { agentId, toolId },
         run: async ({ client }, { agentId, toolId }) => client.post(await client.orgPath(oauthPath(agentId, toolId, 'disconnect'))),
     }),
+    // ── Custom tools (integration contracts) ─────────────────────────────
+    (0, tool_1.defineTool)({
+        name: 'list_custom_tools',
+        title: 'List custom tools',
+        description: "List the agent's custom-integration contracts: { data: [{ id, name?, description, parameters }] }. The HTTP connection (url, method, auth) is the separate tool binding with the same id. Maps to GET /v1/orgs/{org}/agents/{agent}/custom-tools.",
+        kind: 'read',
+        scope: 'agents:read',
+        roleFloor: 'viewer',
+        input: { agentId },
+        run: async ({ client }, { agentId }) => client.get(await client.orgPath(customToolsPath(agentId))),
+    }),
+    (0, tool_1.defineTool)({
+        name: 'get_custom_tool',
+        title: 'Get a custom tool',
+        description: 'Read one custom-tool contract { id, name?, description, parameters } (404 tool.not_found). Maps to GET /v1/orgs/{org}/agents/{agent}/custom-tools/{toolId}.',
+        kind: 'read',
+        scope: 'agents:read',
+        roleFloor: 'viewer',
+        input: { agentId, toolId: customToolId },
+        run: async ({ client }, { agentId, toolId }) => client.get(await client.orgPath(customToolsPath(agentId, toolId))),
+    }),
+    (0, tool_1.defineTool)({
+        name: 'upsert_custom_tool',
+        title: 'Create or replace a custom tool',
+        description: 'Create (201) or replace (200) a custom-tool contract — what the agent calls it, what it does, and its argument schema. Contracts never carry credentials: bind the URL/method/auth afterwards with upsert_tool_binding using the same id. Maps to PUT /v1/orgs/{org}/agents/{agent}/custom-tools/{toolId}.',
+        kind: 'write',
+        scope: 'agents:write',
+        roleFloor: 'editor',
+        input: {
+            agentId,
+            toolId: customToolId,
+            name: zod_1.z.string().optional().describe('Operator-facing label; defaults to id'),
+            description: zod_1.z
+                .string()
+                .min(1)
+                .describe('What the tool does and when the agent should use it'),
+            parameters: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.any())
+                .optional()
+                .describe('JSON Schema for the call arguments (object with properties); default {}'),
+        },
+        run: async ({ client }, { agentId, toolId, name, description, parameters }) => client.put(await client.orgPath(customToolsPath(agentId, toolId)), {
+            ...(name !== undefined ? { name } : {}),
+            description,
+            ...(parameters !== undefined ? { parameters } : {}),
+        }),
+    }),
+    (0, tool_1.defineTool)({
+        name: 'delete_custom_tool',
+        title: 'Delete a custom tool',
+        description: 'Remove a custom-tool contract (404 tool.not_found). Its tool binding is left alone — delete_tool_binding it too when retiring the integration. Maps to DELETE /v1/orgs/{org}/agents/{agent}/custom-tools/{toolId}.',
+        kind: 'destructive',
+        scope: 'agents:write',
+        roleFloor: 'editor',
+        input: { agentId, toolId: customToolId },
+        run: async ({ client }, { agentId, toolId }) => {
+            await client.delete(await client.orgPath(customToolsPath(agentId, toolId)));
+            return { ok: true, deleted: toolId };
+        },
+    }),
+    // ── Scheduling config ────────────────────────────────────────────────
+    (0, tool_1.defineTool)({
+        name: 'get_scheduling_config',
+        title: 'Get scheduling config',
+        description: "Read the agent's Scheduling capability config: timezone, availableHours, blackoutDates, disallowSameDayBooking, defaultDurationMinutes, notificationRecipients, reminders, representatives (always present), defaultRepresentativeIdentity. Never includes the Google Calendar link. Maps to GET /v1/orgs/{org}/agents/{agent}/scheduling.",
+        kind: 'read',
+        scope: 'agents:read',
+        roleFloor: 'viewer',
+        profile: 'core',
+        input: { agentId },
+        run: async ({ client }, { agentId }) => client.get(await client.orgPath(schedulingPath(agentId))),
+    }),
+    (0, tool_1.defineTool)({
+        name: 'replace_scheduling_config',
+        title: 'Replace scheduling config',
+        description: 'Replace the whole scheduling config — omitted keys are cleared (representatives → [], defaultRepresentativeIdentity unset), so read first with get_scheduling_config and send everything. googleCalendar is ignored and preserved (connect via console). 422 names the bad path. Maps to PUT /v1/orgs/{org}/agents/{agent}/scheduling.',
+        kind: 'write',
+        scope: 'agents:write',
+        roleFloor: 'editor',
+        profile: 'core',
+        input: { agentId, ...schedulingConfigShape },
+        run: async ({ client }, { agentId, ...config }) => client.put(await client.orgPath(schedulingPath(agentId)), stripUndefined(config)),
+    }),
+    // ── People fields ────────────────────────────────────────────────────
+    (0, tool_1.defineTool)({
+        name: 'get_people_fields',
+        title: 'Get people field definitions',
+        description: "Read the agent's declared People fields (the structured facts tracked in Person.customFields): { data: [{ key, label, description, type, enum, examples, required, intake }] }. Maps to GET /v1/orgs/{org}/agents/{agent}/people-fields.",
+        kind: 'read',
+        scope: 'agents:read',
+        roleFloor: 'viewer',
+        profile: 'core',
+        input: { agentId },
+        run: async ({ client }, { agentId }) => client.get(await client.orgPath(peopleFieldsPath(agentId))),
+    }),
+    (0, tool_1.defineTool)({
+        name: 'replace_people_fields',
+        title: 'Replace people field definitions',
+        description: 'Replace the whole list of declared People fields (read first with get_people_fields; a dropped key hides that customFields value from list filters and the agent). Keys must be unique. Maps to PUT /v1/orgs/{org}/agents/{agent}/people-fields.',
+        kind: 'write',
+        scope: 'agents:write',
+        roleFloor: 'editor',
+        profile: 'core',
+        input: { agentId, fields: zod_1.z.array(personFieldDef) },
+        run: async ({ client }, { agentId, fields }) => client.put(await client.orgPath(peopleFieldsPath(agentId)), { fields }),
+    }),
     // ── Outreach config ──────────────────────────────────────────────────
     (0, tool_1.defineTool)({
         name: 'get_outreach_config',
         title: 'Get outreach config',
-        description: "Read the agent's outreach configuration: greetingTemplateId (the message template used as the first message when the agent initiates a conversation) and followUps (the single automatic nudge for non-responders: enabled, steps[1], quietHours). Returns {} when nothing is configured (outreach then falls back to an LLM-composed opener). Maps to GET /v1/orgs/{org}/agents/{agent}/outreach.",
+        description: "Read the agent's outreach config: greetingTemplateId (first message when the agent initiates) and followUps (single automatic nudge for non-responders: enabled, steps[1], quietHours). {} when unset (LLM-composed opener). Maps to GET /v1/orgs/{org}/agents/{agent}/outreach.",
         kind: 'read',
         scope: 'agents:read',
         roleFloor: 'viewer',
+        profile: 'core',
         input: { agentId },
         run: async ({ client }, { agentId }) => client.get(await client.orgPath(outreachPath(agentId))),
     }),
     (0, tool_1.defineTool)({
         name: 'replace_outreach_config',
         title: 'Replace outreach config',
-        description: "Replace the agent's whole outreach configuration (PUT semantics: fields you omit are cleared — read it first with get_outreach_config). greetingTemplateId must be an existing message template on the agent (else 404); followUps.steps holds exactly one step (more → 422); pass {} to clear everything. Enabling follow-ups only enrolls people contacted afterwards — never existing contacts. Returns the saved config. Maps to PUT /v1/orgs/{org}/agents/{agent}/outreach.",
+        description: 'Replace the whole outreach config (omitted fields are cleared — read first with get_outreach_config). greetingTemplateId must exist (404); followUps.steps holds exactly one step (422); {} clears everything. Enabling follow-ups only enrolls people contacted afterwards. Maps to PUT /v1/orgs/{org}/agents/{agent}/outreach.',
         kind: 'write',
         scope: 'agents:write',
         roleFloor: 'editor',
+        profile: 'core',
         input: {
             agentId,
             greetingTemplateId: zod_1.z
                 .string()
                 .optional()
-                .describe("Id of one of the agent's message templates to use as the outreach greeting; omit to fall back to an LLM-composed opener"),
+                .describe('Message template id for the greeting; omit for an LLM-composed opener'),
             followUps: zod_1.z
                 .object({
-                enabled: zod_1.z.boolean().describe('Master switch for automatic follow-up sending'),
-                steps: zod_1.z
-                    .array(followUpStep)
-                    .max(1)
-                    .describe('Exactly one follow-up step (or empty)'),
+                enabled: zod_1.z.boolean(),
+                steps: zod_1.z.array(followUpStep).max(1),
                 quietHours: zod_1.z
                     .object({
-                    startHour: zod_1.z.number().int().min(0).max(23).describe('0–23, inclusive'),
+                    startHour: zod_1.z.number().int().min(0).max(23),
                     endHour: zod_1.z
                         .number()
                         .int()
                         .min(0)
                         .max(23)
-                        .describe('0–23, exclusive; may wrap midnight'),
-                    timezone: zod_1.z.string().min(1).describe('IANA zone, e.g. "America/Chicago"'),
+                        .describe('Exclusive; may wrap midnight'),
+                    timezone: zod_1.z.string().min(1).describe('IANA zone'),
                 })
                     .optional()
-                    .describe('Suppress the automatic send during these local hours'),
+                    .describe('Suppress sends during these local hours'),
             })
                 .optional()
-                .describe('Automatic follow-up (nudge) config; omit to clear follow-ups'),
+                .describe('Automatic follow-up config; omit to clear'),
         },
         run: async ({ client }, { agentId, greetingTemplateId, followUps }) => client.put(await client.orgPath(outreachPath(agentId)), {
             ...(greetingTemplateId !== undefined ? { greetingTemplateId } : {}),
@@ -225,15 +429,13 @@ exports.capabilityTools = [
     (0, tool_1.defineTool)({
         name: 'preview_outreach',
         title: 'Preview outreach greeting',
-        description: 'Render the configured outreach greeting for a specific person and return what would be sent: { greeting: { renderedText, missingSlots[], blocked } }. Use to check slot substitution before sending outreach. Returns 404 when no greeting template is configured. Maps to GET /v1/orgs/{org}/agents/{agent}/outreach/preview?personId=….',
+        description: 'Render the configured outreach greeting for a person: { greeting: { renderedText, missingSlots[], blocked } }. Sends nothing; 404 when no greeting template is configured. Maps to GET /v1/orgs/{org}/agents/{agent}/outreach/preview?personId=….',
         kind: 'read',
         scope: 'agents:read',
         roleFloor: 'viewer',
         input: {
             agentId,
-            personId: zod_1.z
-                .string()
-                .describe('Id of a Person on this agent to render the greeting against'),
+            personId: zod_1.z.string(),
         },
         run: async ({ client }, { agentId, personId }) => client.get(await client.orgPath(`${outreachPath(agentId)}/preview`), { personId }),
     }),
@@ -241,7 +443,7 @@ exports.capabilityTools = [
     (0, tool_1.defineTool)({
         name: 'list_outreach_links',
         title: 'List outreach links',
-        description: "List the agent's outreach links — shareable public phone-entry pages that let a prospect start an RCS conversation with the agent. Each has { id, code, url, label, maxUses, usesRemaining, redemptionCount, expiresAt, disabled, createdAt }. Maps to GET /v1/orgs/{org}/agents/{agent}/outreach-links.",
+        description: "List the agent's outreach links — shareable public phone-entry pages that start an RCS conversation: { id, code, url, label, maxUses, usesRemaining, redemptionCount, expiresAt, disabled, createdAt }. Maps to GET /v1/orgs/{org}/agents/{agent}/outreach-links.",
         kind: 'read',
         scope: 'agents:read',
         roleFloor: 'viewer',
@@ -251,27 +453,19 @@ exports.capabilityTools = [
     (0, tool_1.defineTool)({
         name: 'create_outreach_link',
         title: 'Create an outreach link',
-        description: "Mint a new use-limited, time-limited outreach link against one of the agent's RCS channel bindings (find the binding id with the channel tools). Returns the link including its shareable url. Validation failures return 400 with a human-readable error. Maps to POST /v1/orgs/{org}/agents/{agent}/outreach-links.",
+        description: "Mint a use- and time-limited outreach link against one of the agent's RCS channel bindings (see list_channels). Returns the link incl. its shareable url. Maps to POST /v1/orgs/{org}/agents/{agent}/outreach-links.",
         kind: 'write',
         scope: 'agents:write',
         roleFloor: 'editor',
         input: {
             agentId,
-            bindingId: zod_1.z
-                .string()
-                .describe('Id of an RCS channel binding on this agent (required)'),
-            label: zod_1.z.string().optional().describe('Operator-facing note, e.g. "Trade-show QR"'),
-            maxUses: zod_1.z
-                .number()
-                .int()
-                .min(1)
-                .max(500)
-                .optional()
-                .describe('Redemption cap, 1–500 (default 25)'),
+            bindingId: zod_1.z.string().describe('RCS channel binding id'),
+            label: zod_1.z.string().optional().describe('Operator note, e.g. "Trade-show QR"'),
+            maxUses: zod_1.z.number().int().min(1).max(500).optional().describe('Default 25'),
             expiresAt: zod_1.z
                 .string()
                 .optional()
-                .describe('ISO-8601 expiry, at most 30 days out (default 14 days from now)'),
+                .describe('ISO-8601, at most 30 days out (default 14 days)'),
         },
         run: async ({ client }, { agentId, bindingId, label, maxUses, expiresAt }) => client.post(await client.orgPath(outreachLinksPath(agentId)), {
             bindingId,
@@ -283,38 +477,60 @@ exports.capabilityTools = [
     (0, tool_1.defineTool)({
         name: 'update_outreach_link',
         title: 'Pause or resume an outreach link',
-        description: "Set an outreach link's disabled flag — pause (disabled: true) or resume (false) without losing its remaining uses. This is the only mutable field. Returns the updated link. Maps to PATCH /v1/orgs/{org}/agents/{agent}/outreach-links/{id}.",
+        description: 'Pause (disabled: true) or resume (false) an outreach link without losing remaining uses — the only mutable field. Maps to PATCH /v1/orgs/{org}/agents/{agent}/outreach-links/{id}.',
         kind: 'write',
         scope: 'agents:write',
         roleFloor: 'editor',
         input: {
             agentId,
-            linkId: zod_1.z.string().describe('Outreach link id (from list_outreach_links)'),
-            disabled: zod_1.z.boolean().describe('true to pause the link, false to resume it'),
+            linkId: zod_1.z.string(),
+            disabled: zod_1.z.boolean(),
         },
         run: async ({ client }, { agentId, linkId, disabled }) => client.patch(await client.orgPath(`${outreachLinksPath(agentId)}/${encodeURIComponent(linkId)}`), { disabled }),
     }),
     (0, tool_1.defineTool)({
         name: 'delete_outreach_link',
         title: 'Delete an outreach link',
-        description: 'Permanently remove an outreach link — anyone holding the URL can no longer use it and its redemption count is lost. Prefer update_outreach_link (disabled: true) to pause instead. Returns { ok: true, deleted: linkId } (the API replies 204). Maps to DELETE /v1/orgs/{org}/agents/{agent}/outreach-links/{id}.',
+        description: 'Permanently remove an outreach link (URL stops working; redemption count lost). Prefer update_outreach_link to pause. Maps to DELETE /v1/orgs/{org}/agents/{agent}/outreach-links/{id}.',
         kind: 'destructive',
         scope: 'agents:write',
         roleFloor: 'editor',
         input: {
             agentId,
-            linkId: zod_1.z.string().describe('Outreach link id (from list_outreach_links)'),
+            linkId: zod_1.z.string(),
         },
         run: async ({ client }, { agentId, linkId }) => {
             await client.delete(await client.orgPath(`${outreachLinksPath(agentId)}/${encodeURIComponent(linkId)}`));
             return { ok: true, deleted: linkId };
         },
     }),
+    // ── Products (Knowledge capability) ──────────────────────────────────
+    (0, tool_1.defineTool)({
+        name: 'get_products',
+        title: 'Get product catalog',
+        description: "Read the agent's product catalog (Knowledge capability): { data: [{ id, name, description, imageUrl, productPageUrl, metadata }] }. Maps to GET /v1/orgs/{org}/agents/{agent}/products.",
+        kind: 'read',
+        scope: 'agents:read',
+        roleFloor: 'viewer',
+        profile: 'core',
+        input: { agentId },
+        run: async ({ client }, { agentId }) => client.get(await client.orgPath(productsPath(agentId))),
+    }),
+    (0, tool_1.defineTool)({
+        name: 'replace_products',
+        title: 'Replace product catalog',
+        description: 'Replace the whole product catalog (read first with get_products and send every product you want kept). Ids must be unique. Maps to PUT /v1/orgs/{org}/agents/{agent}/products.',
+        kind: 'write',
+        scope: 'agents:write',
+        roleFloor: 'editor',
+        input: { agentId, products: zod_1.z.array(agentProduct) },
+        run: async ({ client }, { agentId, products }) => client.put(await client.orgPath(productsPath(agentId)), { products }),
+    }),
     // ── Knowledge documents (read-only) ──────────────────────────────────
     (0, tool_1.defineTool)({
         name: 'list_knowledge_documents',
         title: 'List knowledge documents',
-        description: "List the documents in the agent's knowledge base (metadata only: id, fileName, mimeType, title, status, uploadedAt, createdAt, updatedAt — never the extracted text). Use to see what the agent can draw on for answers. Uploading and deleting documents is console-only today. Maps to GET /v1/orgs/{org}/agents/{agent}/knowledge/documents.",
+        description: "List the agent's knowledge-base documents (metadata only: id, fileName, mimeType, title, status, timestamps — never the extracted text). Upload/delete is console-only. Maps to GET /v1/orgs/{org}/agents/{agent}/knowledge/documents.",
         kind: 'read',
         scope: 'knowledge:read',
         roleFloor: 'viewer',