actoviq-agent-sdk 0.4.12 → 0.4.13

package/dist/src/manager/assistantGlobalTools.js

@@ -11,11 +11,11 @@ import { access } from 'node:fs/promises';
 import path from 'node:path';
 import { z } from 'zod';
 import { resolveHadamardHome } from '../config/hadamardHome.js';
-import { deleteAgentProfile, listAgentProfiles, listSelectableAgents, upsertAgentProfile, } from '../config/agentProfiles.js';
+import { deleteAgentProfile, validateAgentProfile, listAgentProfiles, listSelectableAgents, upsertAgentProfile, } from '../config/agentProfiles.js';
 import { getHadamardProjectSessionDirectory } from '../config/projectSessionDirectory.js';
 import { listProjectIssues, isIssueStorageMode, } from '../issues/issueStore.js';
 import { addMcpServer, readMcpServerConfig, removeMcpServer } from '../mcp/mcpServerConfig.js';
-import { addBridgeConfig, findBridgeConfig, readBridgeConfigs, } from '../parity/bridgeConfigs.js';
+import { addBridgeConfig, findBridgeConfig, readBridgeConfigs, removeBridgeConfig, } from '../parity/bridgeConfigs.js';
 import { deleteRouterProfile, listRouterProfiles, saveRouterProfile, } from '../router/modelRouter.js';
 import { MANAGED_PLUGIN_IDS, patchManagedPluginSettings, readManagedPluginCatalog, } from '../plugins/managedPluginCatalog.js';
 import { isRecord } from '../runtime/helpers.js';
@@ -24,8 +24,15 @@ import { listScheduledAutomationTasks, setScheduledAutomationEnabled, upsertSche
 import { isProjectStatus, readProjectMeta, writeProjectMeta } from '../gui/projectMeta.js';
 import { readWorkspaceNote, writeWorkspaceNote } from '../gui/workspaceNote.js';
 import { readWorkspaceRegistry } from '../gui/workspaceRegistry.js';
-import { readProgressFile, readProjectPlanFile, } from './projectManager.js';
+import { readManagerConfig, readProgressFile, readProjectPlanFile, } from './projectManager.js';
+import { buildReferenceIndex, findBrokenRefs, findUsages, } from './referenceIndex.js';
+import { renameDefinitionAndReferences, } from './referenceOperations.js';
+import { deleteTeamDefinition, getBuiltInTeamDefinition, listTeamDefinitions, loadTeamDefinition, } from '../team/teamDefinitions.js';
+import { readAllAgentReferenceProfiles, listAgentDefinitionNames, writeAgentDefinitionMarkdown, writeAgentProfileMarkdown, deleteAgentProfileMarkdown, projectAgentDefinitionsDir, } from '../config/agentDefinitionMigration.js';
+import { deleteWorkflow, listWorkflows } from '../workflow/workflowPersistence.js';
 import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { loadHadamardAgentDefinitions } from '../runtime/hadamardAgentDefinitions.js';
+import { getProductCapability, productCapabilities, searchProductCapabilities, } from '../help/productCapabilities.js';
 export function isAssistantScope(value) {
     return value === 'global' || value === 'project';
 }
@@ -75,12 +82,19 @@ function redactBridgeConfig(config) {
         name: config.name,
         runtime: config.runtime,
         execution: config.execution ?? 'api',
+        authSource: config.authSource ?? (config.execution === 'cli' ? 'native' : 'apiKey'),
+        credentialProvider: config.credentialProvider,
+        trustProjectResources: config.trustProjectResources === true,
         provider: config.provider,
         baseURL: config.baseURL || undefined,
         model: config.model || undefined,
         models: (config.models ?? []).map(model => ({
             name: model.name,
             context1M: model.context1M === true,
+            contextWindowTokens: model.contextWindowTokens,
+            maxContextWindowTokens: model.maxContextWindowTokens,
+            effectiveContextWindowPercent: model.effectiveContextWindowPercent,
+            autoCompactTokenLimit: model.autoCompactTokenLimit,
             modality: model.modality ?? 'text',
         })),
         hasApiKey: Boolean(typeof config.apiKey === 'string' && config.apiKey.trim()),
@@ -100,17 +114,45 @@ function redactRouterProfile(profile) {
         name: profile.name,
         description: profile.description,
         routerModel: redactRouterRef(profile.routerModel),
+        routerModelTarget: profile.routerModelTarget,
         routes: profile.routes.map(route => ({
             ...redactRouterRef(route),
             when: route.when,
             name: route.name,
             role: route.role,
             description: route.description,
+            effort: route.effort,
+            target: route.target,
         })),
         fallback: profile.fallback ? redactRouterRef(profile.fallback) : undefined,
+        fallbackTarget: profile.fallbackTarget,
         classificationPrompt: profile.classificationPrompt,
     };
 }
+function redactEditorContext(context) {
+    if (!context)
+        return null;
+    const redact = (value) => {
+        if (Array.isArray(value))
+            return value.map(redact);
+        if (!isRecord(value))
+            return value;
+        const out = {};
+        for (const [key, item] of Object.entries(value)) {
+            if (/^(apiKey|password|secret|accessToken|refreshToken)$/i.test(key)) {
+                out[`${key}Configured`] = Boolean(typeof item === 'string' ? item.trim() : item);
+            }
+            else {
+                out[key] = redact(item);
+            }
+        }
+        return out;
+    };
+    return {
+        ...context,
+        ...(context.draft ? { draft: redact(context.draft) } : {}),
+    };
+}
 export async function listAssistantProjectBriefs(homeDir, currentWorkDir) {
     const current = path.resolve(currentWorkDir);
     const byPath = new Map();
@@ -176,6 +218,109 @@ async function assertKnownProject(host, projectPath) {
     }
     return resolved;
 }
+/** Reference snapshot used by the P3 reference/delete tools (same edges as /api/references). */
+async function getReferenceSnapshot(host) {
+    if (host.getReferenceSnapshot)
+        return host.getReferenceSnapshot();
+    const bridgeConfigs = readBridgeConfigs(host.homeDir).configs;
+    // S3 unified store: profile edges come from the legacy store AND .md
+    // definitions in both scopes (incl. bridgeConfig-only definitions).
+    const profileByName = new Map(listAgentProfiles(host.homeDir).map(profile => [profile.name, profile]));
+    for (const profile of readAllAgentReferenceProfiles(host.homeDir, host.currentWorkDir)) {
+        profileByName.set(profile.name, profile);
+    }
+    const agentProfiles = [...profileByName.values()];
+    const routers = listRouterProfiles(host.currentWorkDir, host.homeDir).map(entry => entry.profile);
+    const teams = listTeamDefinitions(host.currentWorkDir, host.homeDir).map(entry => entry.definition);
+    const automationTasks = await listScheduledAutomationTasks(host.currentWorkDir)
+        .catch(() => []);
+    const manager = await readManagerConfig(host.currentWorkDir, resolveHadamardHome(host.homeDir))
+        .catch(() => undefined);
+    const projectMeta = await readProjectMeta(host.currentWorkDir, host.homeDir);
+    const issueStorage = isIssueStorageMode(projectMeta.issueStorage)
+        ? projectMeta.issueStorage
+        : 'home';
+    const [issues, assistantConfig] = await Promise.all([
+        listProjectIssues(host.currentWorkDir, host.homeDir, issueStorage).catch(() => []),
+        readAssistantConfig(host.homeDir),
+    ]);
+    const workflows = listWorkflows(host.currentWorkDir, host.homeDir);
+    const index = buildReferenceIndex({
+        bridgeConfigs,
+        agentProfiles,
+        routers,
+        teams,
+        automationTasks,
+        teamPreferences: host.readTeamPreferences?.() ?? null,
+        managerConfigs: manager
+            ? [{ name: host.currentWorkDir, bridgeConfig: manager.bridgeConfig }]
+            : [],
+        issues,
+        assistantConfig,
+        session: host.getSessionRefState?.() ?? null,
+    });
+    return {
+        index,
+        known: {
+            configs: bridgeConfigs.map(config => config.name),
+            // Selectable agents include ephemeral per-config presets so an active
+            // session edge to one of them is not falsely reported as broken; the
+            // .md definition names cover unified-store agents in both scopes (S3).
+            agents: [
+                ...listSelectableAgents(host.homeDir).map(agent => agent.name),
+                ...listAgentDefinitionNames(host.homeDir, host.currentWorkDir),
+            ],
+            teams: teams.map(team => team.name),
+            routers: routers.map(router => router.name),
+            workflows: workflows.map(workflow => workflow.name),
+        },
+    };
+}
+async function resolveReferenceOperationContext(host) {
+    if (host.referenceOperationContext)
+        return host.referenceOperationContext();
+    return {
+        projectDir: host.currentWorkDir,
+        homeDir: host.homeDir,
+        managerProjectPath: host.currentWorkDir,
+    };
+}
+/**
+ * P3 delete discipline: zero-reference deletes proceed immediately; when
+ * findUsages reports references the definition is NOT deleted — a proposal
+ * card with the reference list and fallback strategies is staged instead, and
+ * only Apply (GUI endpoint over AssistantProposalStore) executes the delete.
+ */
+async function deleteWithConfirmation(host, kind, name, deleteNow) {
+    const { index } = await getReferenceSnapshot(host);
+    const usages = findUsages(index, kind, name);
+    if (usages.length === 0) {
+        await deleteNow();
+        return { ok: true, deleted: true, references: [] };
+    }
+    if (!host.proposals || !host.assistantSessionId) {
+        throw new Error(`Refusing to delete ${kind} "${name}": ${usages.length} reference(s) exist and no `
+            + 'confirmation channel is available in this host. References: '
+            + usages.map(edge => `${edge.from.kind} "${edge.from.name}" (${edge.field})`).join('; '));
+    }
+    const proposal = host.proposals.stageDelete({
+        assistantSessionId: host.assistantSessionId,
+        kind,
+        name,
+        references: usages,
+    });
+    host.onProposal?.(proposal);
+    return {
+        ok: true,
+        deleted: false,
+        staged: true,
+        proposalId: proposal.id,
+        message: `Found ${usages.length} reference(s) — staged a confirmation card. `
+            + `The ${kind} is deleted only after the user applies it.`,
+        references: usages,
+        strategies: proposal.delete?.strategies ?? [],
+    };
+}
 export function buildAssistantGlobalSystemPrompt(currentWorkDir) {
     return [
         'You are the Hadamard desktop Assistant in Global scope.',
@@ -188,6 +333,13 @@ export function buildAssistantGlobalSystemPrompt(currentWorkDir) {
         '- Start with ListProjects when the user asks about workspaces or status across projects.',
         '- Use GetProjectOverview / GetProjectDocument / ListProjectIssues for deeper project inspection; always pass an explicit projectPath from ListProjects.',
         '- Before changing settings, plugins, bridge configs, agents, schedules, or MCP, briefly say what you will change, then call the matching tool.',
+        '- Use ListReferences(kind, name) before any rename/delete to show impact, and ListBrokenReferences for proactive health checks.',
+        '- Rename tools (RenameBridgeConfig / RenameAgentProfile / RenameRouterProfile / RenameTeam) run one transaction that atomically rewrites every referencing definition.',
+        '- Delete-class tools (DeleteBridgeConfig / DeleteAgentProfile / DeleteRouterProfile / DeleteTeam) delete immediately only when nothing references the definition. When references exist they stage a confirmation card with the reference list and fallback strategies; the delete happens only when the user applies that card. Never claim a delete completed while a proposal is pending.',
+        '- UpsertTeam and UpsertWorkflow stage proposal cards (Preview/Apply) — they never write to disk directly. DeleteWorkflow removes an unreferenced script workflow directly and refuses while automation tasks still reference it.',
+        '- For any question about how to use Hadamard or what a feature does, call SearchProductCapabilities (or List/ReadProductCapability) and ground the answer in its UI location, prerequisites, steps, commands, and limitations. Do not answer product instructions from memory alone.',
+        '- Before changing the currently open Agent, Router, Graph, or Workflow, call GetCurrentEditorContext. Preserve its baseDigest when staging a Graph/Workflow proposal so Apply can reject stale drafts.',
+        '- ActivateAgent activates a saved profile by default; kind "config" activates a model configuration, kind "router" activates a Router, and kind "team" attaches a Graph or Workflow.',
         '- Never echo API keys or other secrets. Tool results already redact them.',
         '- Coding and file edits belong in the main chat, not here. Prefer OpenProject + telling the user to continue in the main conversation when implementation work is needed.',
         '- Be concise and concrete.',
@@ -201,6 +353,11 @@ export async function createAssistantGlobalTools(host) {
         apiKey: z.string().optional().describe('$ENV_VAR reference; literal secrets are not persisted'),
         maxTokens: z.number().int().positive().optional(),
     });
+    const targetRefSchema = z.discriminatedUnion('kind', [
+        z.strictObject({ kind: z.literal('model'), config: z.string(), model: z.string() }),
+        z.strictObject({ kind: z.literal('agent'), name: z.string() }),
+        z.strictObject({ kind: z.literal('team'), name: z.string() }),
+    ]);
     const ListProjects = tool({
         name: 'ListProjects',
         description: 'List remembered Hadamard workspaces with brief note, status, and issue counts.',
@@ -302,6 +459,48 @@ export async function createAssistantGlobalTools(host) {
         homeDir: host.homeDir,
         ...(host.getAppState ? await host.getAppState() : {}),
     }));
+    const GetCurrentEditorContext = tool({
+        name: 'GetCurrentEditorContext',
+        description: 'Read the active GUI page/entity and its unsaved Agent, Router, Graph, or Workflow draft with a stable base digest. Use before proposing editor changes.',
+        inputSchema: z.strictObject({}),
+        isReadOnly: () => true,
+    }, async () => ({
+        context: redactEditorContext(host.getEditorContext ? await host.getEditorContext() : null),
+    }));
+    const ListProductCapabilities = tool({
+        name: 'ListProductCapabilities',
+        description: 'List the machine-readable Hadamard capability catalog. Use this, SearchProductCapabilities, or ReadProductCapability before answering product how-to questions.',
+        inputSchema: z.strictObject({}),
+        isReadOnly: () => true,
+    }, async () => ({
+        capabilities: productCapabilities.map(capability => ({
+            id: capability.id,
+            title: capability.title,
+            summary: capability.summary,
+            uiLocations: capability.uiLocations,
+            commands: capability.commands,
+        })),
+    }));
+    const SearchProductCapabilities = tool({
+        name: 'SearchProductCapabilities',
+        description: 'Search grounded product instructions by feature, UI label, command, or user goal.',
+        inputSchema: z.strictObject({
+            query: z.string(),
+            limit: z.number().int().min(1).max(50).optional(),
+        }),
+        isReadOnly: () => true,
+    }, async (input) => ({ capabilities: searchProductCapabilities(input.query, input.limit) }));
+    const ReadProductCapability = tool({
+        name: 'ReadProductCapability',
+        description: 'Read complete current instructions for one capability id returned by List/SearchProductCapabilities.',
+        inputSchema: z.strictObject({ id: z.string() }),
+        isReadOnly: () => true,
+    }, async (input) => {
+        const capability = getProductCapability(input.id);
+        if (!capability)
+            throw new Error(`Unknown product capability: ${input.id}`);
+        return { capability };
+    });
     const ListBridgeConfigs = tool({
         name: 'ListBridgeConfigs',
         description: 'List saved provider/bridge configs (API keys redacted).',
@@ -315,17 +514,43 @@ export async function createAssistantGlobalTools(host) {
         description: 'List saved agent profiles and selectable auto presets.',
         inputSchema: z.strictObject({}),
         isReadOnly: () => true,
-    }, async () => ({
-        profiles: listAgentProfiles(host.homeDir),
-        selectable: listSelectableAgents(host.homeDir).map(agent => ({
-            name: agent.name,
-            source: agent.source,
-            bridgeConfig: agent.bridgeConfig,
-            model: agent.model,
-            effort: agent.effort,
-            ephemeral: agent.ephemeral === true,
-        })),
-    }));
+    }, async () => {
+        const definitions = await loadHadamardAgentDefinitions({
+            homeDir: host.homeDir,
+            workDir: host.currentWorkDir,
+        });
+        return {
+            profiles: listAgentProfiles(host.homeDir),
+            definitions: definitions.map(definition => ({
+                name: definition.name,
+                description: definition.description,
+                source: definition.source,
+                sourcePath: definition.sourcePath,
+                bridgeConfig: definition.bridgeConfig,
+                model: definition.model,
+                inheritSessionModel: !definition.bridgeConfig || !definition.model,
+                promptMode: definition.promptMode,
+                permissionMode: definition.permissionMode,
+                effort: definition.effort,
+                maxTokens: definition.maxTokens,
+                temperature: definition.temperature,
+                topP: definition.topP,
+                allowedTools: definition.allowedTools,
+                workspaceAccess: definition.workspaceAccess,
+                maxIterations: definition.maxToolIterations ?? definition.maxTurns,
+                timeoutMs: definition.timeoutMs,
+                subagent: definition.subagent !== false,
+            })),
+            selectable: listSelectableAgents(host.homeDir).map(agent => ({
+                name: agent.name,
+                source: agent.source,
+                bridgeConfig: agent.bridgeConfig,
+                model: agent.model,
+                effort: agent.effort,
+                ephemeral: agent.ephemeral === true,
+            })),
+        };
+    });
     const ListRouterProfilesTool = tool({
         name: 'ListRouterProfiles',
         description: 'List project and personal router profiles with API keys redacted.',
@@ -446,6 +671,8 @@ export async function createAssistantGlobalTools(host) {
             showProviderConfigsInComposer: z.boolean().optional(),
             showAgentProfilesInComposer: z.boolean().optional(),
             showRouterProfilesInComposer: z.boolean().optional(),
+            useDefaultModelAsFallback: z.boolean().optional(),
+            showBuiltInSubagents: z.boolean().optional(),
         }),
     }, async (input) => {
         if (!host.applySettings)
@@ -482,6 +709,9 @@ export async function createAssistantGlobalTools(host) {
             name: z.string(),
             runtime: z.enum(['hadamard', 'claude', 'codewhale', 'pi', 'codex', 'reasonix', 'crush']),
             execution: z.enum(['api', 'cli']).optional(),
+            authSource: z.enum(['native', 'apiKey']).optional(),
+            credentialProvider: z.string().optional(),
+            trustProjectResources: z.boolean().optional(),
             provider: z.enum(['anthropic', 'openai']).optional(),
             baseURL: z.string().optional(),
             apiKey: z.string().optional(),
@@ -489,6 +719,10 @@ export async function createAssistantGlobalTools(host) {
             models: z.array(z.strictObject({
                 name: z.string(),
                 context1M: z.boolean().optional(),
+                contextWindowTokens: z.number().int().positive().optional(),
+                maxContextWindowTokens: z.number().int().positive().optional(),
+                effectiveContextWindowPercent: z.number().positive().max(100).optional(),
+                autoCompactTokenLimit: z.number().int().positive().optional(),
                 modality: z.enum(['text', 'multimodal']).optional(),
             })).optional(),
         }),
@@ -498,6 +732,9 @@ export async function createAssistantGlobalTools(host) {
             name: input.name.trim(),
             runtime: input.runtime,
             execution: input.execution ?? existing?.execution ?? 'api',
+            authSource: input.authSource ?? existing?.authSource,
+            credentialProvider: input.credentialProvider?.trim() || existing?.credentialProvider,
+            trustProjectResources: input.trustProjectResources ?? existing?.trustProjectResources,
             provider: input.provider ?? existing?.provider ?? 'anthropic',
             baseURL: input.baseURL?.trim() || existing?.baseURL,
             apiKey: input.apiKey?.trim() || existing?.apiKey,
@@ -509,34 +746,83 @@ export async function createAssistantGlobalTools(host) {
     });
     const UpsertAgentProfileTool = tool({
         name: 'UpsertAgentProfile',
-        description: 'Create or update a saved agent profile.',
+        description: 'Create or update an agent (unified .md store, S3). Omit bridgeConfig+model for an inherit-session-model agent; pass scope "project" to save into <workDir>/.hadamard/agents.',
         inputSchema: z.strictObject({
             name: z.string(),
-            bridgeConfig: z.string(),
-            model: z.string(),
+            bridgeConfig: z.string().optional().describe('Omit (with model) for an inherit-session-model agent'),
+            model: z.string().optional(),
             description: z.string().optional(),
             permissionMode: z.enum(['default', 'acceptEdits', 'bypassPermissions', 'plan', 'auto']).optional(),
             effort: z.enum(['auto', 'low', 'medium', 'high', 'max']).optional(),
             maxTokens: z.number().int().positive().optional(),
             temperature: z.number().min(0).max(2).optional(),
             topP: z.number().min(0).max(1).optional(),
+            allowedTools: z.array(z.string().min(1)).optional(),
+            workspaceAccess: z.enum(['workspace', 'full']).optional(),
+            maxIterations: z.number().int().positive().optional(),
+            timeoutMs: z.number().int().positive().optional(),
             systemPromptAppend: z.string().optional(),
+            scope: z.enum(['project', 'personal']).optional().describe('Defaults to personal (~/.hadamard/agents)'),
+            promptMode: z.enum(['extend', 'replace']).optional(),
+            subagent: z.boolean().optional().describe('Default true: the Agent/Task tool may delegate to this agent'),
         }),
     }, async (input) => {
+        const inheritModel = !input.bridgeConfig?.trim() || !input.model?.trim();
+        const extras = {
+            ...(input.promptMode ? { promptMode: input.promptMode } : {}),
+            ...(typeof input.subagent === 'boolean' ? { subagent: input.subagent } : {}),
+            ...(input.permissionMode ? { permissionMode: input.permissionMode } : {}),
+            ...(input.effort ? { effort: input.effort } : {}),
+            ...(typeof input.maxTokens === 'number' ? { maxTokens: input.maxTokens } : {}),
+            ...(typeof input.temperature === 'number' ? { temperature: input.temperature } : {}),
+            ...(typeof input.topP === 'number' ? { topP: input.topP } : {}),
+            ...(input.allowedTools?.length ? { tools: input.allowedTools } : {}),
+            ...(input.workspaceAccess ? { workspaceAccess: input.workspaceAccess } : {}),
+            ...(typeof input.maxIterations === 'number' ? { maxIterations: input.maxIterations } : {}),
+            ...(typeof input.timeoutMs === 'number' ? { timeoutMs: input.timeoutMs } : {}),
+        };
+        const scope = input.scope === 'project' ? 'project' : 'personal';
+        const unified = inheritModel || scope === 'project' || Object.keys(extras).length > 0;
         const profile = {
             name: input.name.trim(),
-            bridgeConfig: input.bridgeConfig.trim(),
-            model: input.model.trim(),
+            bridgeConfig: input.bridgeConfig?.trim() ?? '',
+            model: input.model?.trim() ?? '',
             ...(input.description ? { description: input.description } : {}),
             ...(input.permissionMode ? { permissionMode: input.permissionMode } : {}),
             ...(input.effort ? { effort: input.effort } : {}),
             ...(typeof input.maxTokens === 'number' ? { maxTokens: input.maxTokens } : {}),
             ...(typeof input.temperature === 'number' ? { temperature: input.temperature } : {}),
             ...(typeof input.topP === 'number' ? { topP: input.topP } : {}),
+            ...(input.allowedTools?.length ? { allowedTools: input.allowedTools } : {}),
+            ...(input.workspaceAccess ? { workspaceAccess: input.workspaceAccess } : {}),
+            ...(typeof input.maxIterations === 'number' ? { maxIterations: input.maxIterations } : {}),
+            ...(typeof input.timeoutMs === 'number' ? { timeoutMs: input.timeoutMs } : {}),
             ...(input.systemPromptAppend ? { systemPromptAppend: input.systemPromptAppend } : {}),
+            ...(input.promptMode ? { promptMode: input.promptMode } : {}),
+            ...(typeof input.subagent === 'boolean' ? { subagent: input.subagent } : {}),
         };
-        const saved = upsertAgentProfile(profile, host.homeDir);
-        return { ok: true, profile: saved.profile, warnings: saved.warnings };
+        if (!unified) {
+            const saved = upsertAgentProfile(profile, host.homeDir);
+            return { ok: true, profile: saved.profile, warnings: saved.warnings };
+        }
+        if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/.test(profile.name)) {
+            throw new Error('Invalid agent name (use letters, digits, . _ -)');
+        }
+        const directory = scope === 'project' ? projectAgentDefinitionsDir(host.currentWorkDir) : undefined;
+        if (inheritModel) {
+            const filePath = writeAgentDefinitionMarkdown({
+                name: profile.name,
+                description: profile.description,
+                body: profile.systemPromptAppend,
+                extras,
+                directory,
+                homeDir: host.homeDir,
+            });
+            return { ok: true, filePath, inheritSessionModel: true };
+        }
+        const validation = validateAgentProfile(profile, host.homeDir);
+        const filePath = writeAgentProfileMarkdown(validation.profile, host.homeDir, { directory, extras });
+        return { ok: true, filePath, profile: validation.profile, warnings: validation.warnings };
     });
     const UpsertRouterProfileTool = tool({
         name: 'UpsertRouterProfile',
@@ -546,6 +832,7 @@ export async function createAssistantGlobalTools(host) {
             scope: z.enum(['project', 'personal']).optional(),
             description: z.string().optional(),
             routerModel: routerRefSchema,
+            routerModelTarget: targetRefSchema.optional(),
             routes: z.array(z.strictObject({
                 model: z.string(),
                 provider: z.enum(['anthropic', 'openai']).optional(),
@@ -556,8 +843,11 @@ export async function createAssistantGlobalTools(host) {
                 name: z.string().optional(),
                 role: z.string().optional(),
                 description: z.string().optional(),
+                effort: z.enum(['auto', 'low', 'medium', 'high', 'max']).optional(),
+                target: targetRefSchema.optional(),
             })).min(1),
             fallback: routerRefSchema.optional(),
+            fallbackTarget: targetRefSchema.optional(),
             classificationPrompt: z.string().optional(),
         }),
     }, async (input) => {
@@ -565,8 +855,10 @@ export async function createAssistantGlobalTools(host) {
             name: input.name.trim(),
             ...(input.description?.trim() ? { description: input.description.trim() } : {}),
             routerModel: input.routerModel,
+            ...(input.routerModelTarget ? { routerModelTarget: input.routerModelTarget } : {}),
             routes: input.routes,
             ...(input.fallback ? { fallback: input.fallback } : {}),
+            ...(input.fallbackTarget ? { fallbackTarget: input.fallbackTarget } : {}),
             ...(input.classificationPrompt?.trim()
                 ? { classificationPrompt: input.classificationPrompt.trim() }
                 : {}),
@@ -580,31 +872,110 @@ export async function createAssistantGlobalTools(host) {
     });
     const DeleteRouterProfileTool = tool({
         name: 'DeleteRouterProfile',
-        description: 'Delete a router profile by name. Optionally constrain deletion to project or personal scope.',
+        description: 'Delete a router profile by name. Deletes directly when unreferenced; stages a confirmation card when references exist.',
         inputSchema: z.strictObject({
             name: z.string(),
             scope: z.enum(['project', 'personal']).optional(),
         }),
     }, async (input) => {
-        const deleted = await deleteRouterProfile(input.name.trim(), input.scope === 'personal' ? undefined : host.currentWorkDir, host.homeDir);
-        return { ok: true, deleted };
+        const name = input.name.trim();
+        return deleteWithConfirmation(host, 'router', name, async () => {
+            const deleted = await deleteRouterProfile(name, input.scope === 'personal' ? undefined : host.currentWorkDir, host.homeDir);
+            return { deleted };
+        });
     });
     const DeleteAgentProfileTool = tool({
         name: 'DeleteAgentProfile',
-        description: 'Delete a saved agent profile by name.',
+        description: 'Delete an agent by name (profile or pure .md definition, either scope — S3 unified store). Deletes directly when unreferenced; stages a confirmation card when references exist.',
+        inputSchema: z.strictObject({ name: z.string() }),
+    }, async (input) => {
+        const name = input.name.trim();
+        return deleteWithConfirmation(host, 'agent', name, () => {
+            deleteAgentProfile(name, host.homeDir);
+            // Pure .md agents / project scope are not in the legacy store.
+            deleteAgentProfileMarkdown(name, host.homeDir, projectAgentDefinitionsDir(host.currentWorkDir));
+            return { deleted: true };
+        });
+    });
+    const DeleteBridgeConfigTool = tool({
+        name: 'DeleteBridgeConfig',
+        description: 'Delete a provider/bridge config by name. Deletes directly when unreferenced; stages a confirmation card when references exist.',
         inputSchema: z.strictObject({ name: z.string() }),
     }, async (input) => {
-        deleteAgentProfile(input.name.trim(), host.homeDir);
-        return { ok: true };
+        const name = input.name.trim();
+        if (!findBridgeConfig(name, host.homeDir)) {
+            throw new Error(`Bridge config not found: ${name}`);
+        }
+        return deleteWithConfirmation(host, 'config', name, () => {
+            removeBridgeConfig(name, host.homeDir);
+            return { deleted: true };
+        });
+    });
+    const DeleteTeamTool = tool({
+        name: 'DeleteTeam',
+        description: 'Delete a Team definition by name. Built-in Teams cannot be deleted. Deletes directly when unreferenced; stages a confirmation card when references exist.',
+        inputSchema: z.strictObject({ name: z.string() }),
+    }, async (input) => {
+        const name = input.name.trim();
+        if (getBuiltInTeamDefinition(name)) {
+            throw new Error(`"${name}" is a built-in Team and cannot be deleted. Clone it instead.`);
+        }
+        const loaded = loadTeamDefinition(name, host.currentWorkDir, host.homeDir);
+        if (!loaded)
+            throw new Error(`Team not found: ${name}`);
+        return deleteWithConfirmation(host, 'team', name, async () => {
+            const deleted = await deleteTeamDefinition(name, host.currentWorkDir, host.homeDir);
+            if (!deleted)
+                throw new Error(`Team not found: ${name}`);
+            return { deleted: true };
+        });
     });
     const ActivateAgentTool = tool({
         name: 'ActivateAgent',
-        description: 'Activate a selectable agent / profile in the current chat.',
-        inputSchema: z.strictObject({ name: z.string() }),
+        description: 'Activate a saved Agent/profile, provider config, Router, Graph, or Workflow in the current chat.',
+        inputSchema: z.strictObject({
+            name: z.string(),
+            kind: z.enum(['profile', 'config', 'router', 'team']).optional()
+                .describe('Defaults to "profile" (saved agent / selectable preset)'),
+        }),
     }, async (input) => {
-        if (!host.activateAgent)
-            throw new Error('ActivateAgent is unavailable in this host.');
-        return host.activateAgent(input.name.trim());
+        const kind = input.kind ?? 'profile';
+        if (kind === 'profile') {
+            if (!host.activateAgent)
+                throw new Error('ActivateAgent is unavailable in this host.');
+            return host.activateAgent(input.name.trim());
+        }
+        if (!host.activateTarget) {
+            throw new Error('ActivateAgent router/team activation is unavailable in this host.');
+        }
+        return host.activateTarget(kind, input.name.trim());
+    });
+    const UpdateTeamPreferencesTool = tool({
+        name: 'UpdateTeamPreferences',
+        description: 'Update Agents-page team behavior: automatic invocation, default attached Graph/Workflow, and confirmation before runs.',
+        inputSchema: z.strictObject({
+            autoInvoke: z.boolean().optional(),
+            defaultAttached: z.string().nullable().optional(),
+            confirmBeforeRun: z.boolean().optional(),
+        }),
+    }, async (input) => {
+        if (!host.writeTeamPreferences)
+            throw new Error('UpdateTeamPreferences is unavailable in this host.');
+        const current = host.readTeamPreferences?.() ?? {
+            autoInvoke: false,
+            defaultAttached: null,
+            confirmBeforeRun: true,
+        };
+        const next = {
+            autoInvoke: input.autoInvoke ?? current.autoInvoke,
+            defaultAttached: input.defaultAttached === undefined ? current.defaultAttached : input.defaultAttached,
+            confirmBeforeRun: input.confirmBeforeRun ?? current.confirmBeforeRun,
+        };
+        if (next.defaultAttached && !loadTeamDefinition(next.defaultAttached, host.currentWorkDir, host.homeDir)) {
+            throw new Error(`Graph/Workflow not found: ${next.defaultAttached}`);
+        }
+        await host.writeTeamPreferences(next);
+        return { ok: true, preferences: next };
     });
     const UpdateManagedPlugin = tool({
         name: 'UpdateManagedPlugin',
@@ -729,12 +1100,162 @@ export async function createAssistantGlobalTools(host) {
         removeMcpServer(input.name.trim(), host.homeDir);
         return { ok: true, servers: readMcpServerConfig(host.homeDir).servers };
     });
+    const ListReferencesTool = tool({
+        name: 'ListReferences',
+        description: 'List every reference to a definition (kind: config|agent|team|router) — impact analysis before rename/delete.',
+        inputSchema: z.strictObject({
+            kind: z.enum(['config', 'agent', 'team', 'router']),
+            name: z.string(),
+        }),
+        isReadOnly: () => true,
+    }, async (input) => {
+        const { index } = await getReferenceSnapshot(host);
+        const references = findUsages(index, input.kind, input.name.trim());
+        return { kind: input.kind, name: input.name.trim(), count: references.length, references };
+    });
+    const ListBrokenReferencesTool = tool({
+        name: 'ListBrokenReferences',
+        description: 'List references whose target no longer exists (proactive health check).',
+        inputSchema: z.strictObject({}),
+        isReadOnly: () => true,
+    }, async () => {
+        const { index, known } = await getReferenceSnapshot(host);
+        const broken = findBrokenRefs(index, known);
+        return { count: broken.length, broken };
+    });
+    const makeRenameTool = (kind, toolName, label) => tool({
+        name: toolName,
+        description: `Rename a ${label} and atomically rewrite every referencing definition (single transaction with rollback).`,
+        inputSchema: z.strictObject({
+            oldName: z.string(),
+            newName: z.string(),
+        }),
+    }, async (input) => {
+        const report = await renameDefinitionAndReferences(kind, input.oldName, input.newName, await resolveReferenceOperationContext(host));
+        return {
+            ok: true,
+            kind,
+            oldName: input.oldName.trim(),
+            newName: input.newName.trim(),
+            rewritten: report.rewritten,
+        };
+    });
+    const RenameBridgeConfigTool = makeRenameTool('config', 'RenameBridgeConfig', 'provider/bridge config');
+    const RenameAgentProfileTool = makeRenameTool('agent', 'RenameAgentProfile', 'agent profile');
+    const RenameRouterProfileTool = makeRenameTool('router', 'RenameRouterProfile', 'router profile');
+    const RenameTeamTool = makeRenameTool('team', 'RenameTeam', 'Team definition');
+    const UpsertTeamTool = tool({
+        name: 'UpsertTeam',
+        description: 'Stage a Team definition create/update as a proposal card (Preview/Apply). Never writes to disk directly; built-in Teams cannot be overwritten.',
+        inputSchema: z.strictObject({
+            projectPath: z.string().optional().describe('Defaults to the current workspace'),
+            definition: z.record(z.string(), z.unknown())
+                .describe('Complete TeamDefinition JSON, preferably graph v3 with stable node ids'),
+            baseDigest: z.string().optional().describe('Digest from GetCurrentEditorContext; required automatically when changing the active unsaved Graph/Workflow draft'),
+            explanation: z.string().optional(),
+        }),
+    }, async (input) => {
+        if (!host.teamProposals || !host.assistantSessionId) {
+            throw new Error('UpsertTeam is unavailable in this host (no Team proposal store).');
+        }
+        const projectPath = input.projectPath?.trim()
+            ? await assertKnownProject(host, input.projectPath)
+            : path.resolve(host.currentWorkDir);
+        const editor = host.getEditorContext ? await host.getEditorContext() : null;
+        const definition = input.definition;
+        const editorMatches = editor
+            && (editor.entityKind === 'graph' || editor.entityKind === 'workflow')
+            && editor.entityName === definition.name
+            && editor.draft
+            && editor.baseDigest;
+        if (editorMatches && input.baseDigest && input.baseDigest !== editor.baseDigest) {
+            throw new Error('The supplied editor base digest is stale. Read GetCurrentEditorContext and propose the change again.');
+        }
+        const proposal = host.teamProposals.stage({
+            assistantSessionId: host.assistantSessionId,
+            projectPath,
+            definition,
+            explanation: input.explanation ?? '',
+            homeDir: host.homeDir,
+            ...(editorMatches ? {
+                baseDefinition: editor.draft,
+                editorBaseDigest: editor.baseDigest,
+            } : {}),
+        });
+        host.onTeamProposal?.(proposal);
+        return {
+            kind: 'team.proposal',
+            proposalId: proposal.id,
+            projectPath: proposal.projectPath,
+            teamName: proposal.teamName,
+            explanation: proposal.explanation,
+            problems: proposal.problems,
+            diff: proposal.diff,
+            status: proposal.status,
+        };
+    });
+    const UpsertWorkflowTool = tool({
+        name: 'UpsertWorkflow',
+        description: 'Stage a script workflow create/update as a confirmation card. Apply writes <name>.js into the project or personal workflows directory.',
+        inputSchema: z.strictObject({
+            name: z.string(),
+            script: z.string().describe('Complete workflow script (export const meta = {...} required)'),
+            scope: z.enum(['project', 'personal']).optional().describe('Defaults to project'),
+            description: z.string().optional(),
+            explanation: z.string().optional(),
+        }),
+    }, async (input) => {
+        if (!host.proposals || !host.assistantSessionId) {
+            throw new Error('UpsertWorkflow is unavailable in this host (no proposal store).');
+        }
+        const proposal = host.proposals.stageWorkflowUpsert({
+            assistantSessionId: host.assistantSessionId,
+            name: input.name,
+            script: input.script,
+            scope: input.scope ?? 'project',
+            projectPath: path.resolve(host.currentWorkDir),
+            description: input.description,
+            explanation: input.explanation,
+        });
+        host.onProposal?.(proposal);
+        return {
+            ok: true,
+            staged: true,
+            proposalId: proposal.id,
+            name: proposal.workflow?.name,
+            problems: proposal.workflow?.problems ?? [],
+            message: 'Staged a confirmation card. The workflow file is written only after the user applies it.',
+        };
+    });
+    const DeleteWorkflowTool = tool({
+        name: 'DeleteWorkflow',
+        description: 'Delete a script workflow by name. Refuses while automation tasks still reference it.',
+        inputSchema: z.strictObject({ name: z.string() }),
+    }, async (input) => {
+        const name = input.name.trim();
+        if (!listWorkflows(host.currentWorkDir, host.homeDir).some(workflow => workflow.name === name)) {
+            throw new Error(`Workflow not found: ${name}`);
+        }
+        const tasks = await listScheduledAutomationTasks(host.currentWorkDir)
+            .catch(() => []);
+        const referencing = tasks.filter(task => task.kind === 'workflow' && task.workflowSource !== 'agent' && task.workflowName === name);
+        if (referencing.length) {
+            throw new Error(`Refusing to delete workflow "${name}": referenced by automation task(s): `
+                + `${referencing.map(task => task.name || task.id).join(', ')}. Delete or re-point those tasks first.`);
+        }
+        const deleted = await deleteWorkflow(name, host.currentWorkDir, host.homeDir);
+        return { ok: true, deleted };
+    });
     return [
         ListProjects,
         GetProjectOverview,
         GetProjectDocument,
         ListProjectIssues,
         GetAppState,
+        GetCurrentEditorContext,
+        ListProductCapabilities,
+        SearchProductCapabilities,
+        ReadProductCapability,
         ListBridgeConfigs,
         ListAgentProfiles,
         ListRouterProfilesTool,
@@ -752,11 +1273,23 @@ export async function createAssistantGlobalTools(host) {
         UpsertRouterProfileTool,
         DeleteRouterProfileTool,
         ActivateAgentTool,
+        UpdateTeamPreferencesTool,
         UpdateManagedPlugin,
         UpsertScheduledTask,
         ToggleScheduledTask,
         AddMcpServerTool,
         RemoveMcpServerTool,
+        ListReferencesTool,
+        ListBrokenReferencesTool,
+        RenameBridgeConfigTool,
+        RenameAgentProfileTool,
+        RenameRouterProfileTool,
+        RenameTeamTool,
+        DeleteBridgeConfigTool,
+        DeleteTeamTool,
+        UpsertTeamTool,
+        UpsertWorkflowTool,
+        DeleteWorkflowTool,
     ];
 }
 //# sourceMappingURL=assistantGlobalTools.js.map