pi-roundtable 0.33.0 → 0.35.0

package/CHANGELOG.md

@@ -5,6 +5,25 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [0.35.0] - 2026-11-06
+
+### Added
+
+- Temp-knight presets: an agent saves the role prompt, skills, look, and model of a temp knight it makes often with `helper_preset_set`, reads them with `helper_preset_list`, removes one with `helper_preset_delete`, and makes it with `helper_create` and `preset`. Fields given in the call replace the preset's, and skills given are added to the preset's. A preset belongs to the agent that saved it, at most 20 each, and is checked at save and again when used, with the tier and skill rules `helper_create` applies. The tools are offered with `helper_create` at the member tier, never to a temp knight or with `helpers: false`. The presets live in a new `helper_presets` table, created by the agent server's migrations.
+- `AgentOps.helperPreset`; `AgentOps.helperCreate` takes `preset`, and its `displayName` and `prompt` are optional when a preset gives them.
+
+## [0.34.0] - 2026-11-04
+
+This is a minor release with a breaking default: an agent's shell no longer gets `GH_TOKEN`.
+
+### Changed
+
+- `DEFAULT_SHELL_PASS` is empty: without `shellEnv.pass` no host secret reaches an agent's shell or a coding worker's `bash`, `GH_TOKEN` included. A public host's token is often broad, and 0.33.0 handed it to every agent's shell without the host asking. The coding shelf's git and gh calls (`repo_add`, fetch, `repo_push`) still get the token through the coding plugin's `githubToken`, which is unaffected.
+
+### Migration
+
+- A host whose agents run `gh`, or `git push` through `gh auth git-credential`, in their shell names the token: `shellEnv: { pass: ["GH_TOKEN"] }`, or better a narrower token given in `set` as `GH_TOKEN`.
+
 ## [0.33.0] - 2026-11-04
 
 This is a minor release with breaking defaults: the agents' shell and the coding plugin's workers no longer inherit the host's environment, and more shell commands are held. See the migration notes below.

package/README.md

@@ -274,7 +274,7 @@ pi-roundtable runs one assistant for one owner.
 - **Approvals.** A held call is approved only by the speaker whose turn held it, at a tier that still holds the call, or, in a shared conversation, by an owner, on its card or by a confirming message. In a private conversation nobody else may, and a call above the speaker's tier is not approved there.
 - **Conversations.** In Discord an agent's channel and a group room are shared: everyone who writes there adds to one conversation the agent reads. A web chat conversation belongs to the person who opened it: in the web chat only they may read it, write in it, or answer its prompts, but the owner can read it through the owner console ([pi-roundtable-web](packages/web)), and the operator through the database and the data directory.
 - **Memory isolation.** Memory follows the principal, not owner tier: a private conversation's person, or the current speaker in a shared room. Link accounts to share one person's memory across Discord and web. In shared requests and summaries, memory-tool and memory-loaded-worker exchanges (arguments and results together) are hidden from other speakers, and earlier reasoning is removed with provider-aware handling. Other tools' arguments and public assistant replies remain public, even if the model repeats private memory there; this is not general secret-flow prevention. Third-party compactors must use `privateCompaction` before summarizing shared history. `claude-bridge` shared turns refuse when raw reader records, including compacted turns, show another reader's private memory (even prompt-only memory and its reasoning), or an exchange is hidden from the current reader. A turn with no private memory does not block other readers, and disabling future memory does not bypass prior private history; admitting other people only warns at boot and in doctor. SYSTEM counts as primary owner for this core guard alone, so it can read and publicly repeat the owner's retained exchanges/reasoning; pre-0.9 untagged built-in memory results before the first scope record retain owner attribution. Sandbox party-wide prompt blocks must explicitly use `memory.visibility: "shared"`, and private turns require worker capabilities. Bridge replays unfiltered history outside these projections; see the [exact rule and remaining risk](docs/migration-0.9.md#claude-bridge-guard).
-- **The host shell.** An agent's shell runs as the host's user. Holds keep risky commands behind a card; they are not a sandbox. The shell gets only part of the host's environment (the paths, user, locale, terminal, `TMPDIR` and proxies, plus `GH_TOKEN` and what `shellEnv` adds), so the bot tokens, model logins, `DATABASE_URL` and keys the host holds stay in the host process; printing the environment, reading a secret file such as `.env` or `~/.ssh/*`, and `gh auth token` are held as `shell.secret-read`, which yolo mode always cards; a secret's value in a tool's output is replaced with `****`. This stops casual and accidental leaks, not a determined command run as the same user, which can read `/proc/<host pid>/environ` and any file that user can. To keep secrets from the agents, run their shells under a dedicated account without the `docker` group (membership in it equals root), or use [pi-roundtable-sandbox](packages/sandbox).
+- **The host shell.** An agent's shell runs as the host's user. Holds keep risky commands behind a card; they are not a sandbox. The shell gets only part of the host's environment (the paths, user, locale, terminal, `TMPDIR` and proxies, plus what `shellEnv` adds), so the bot tokens, model logins, `GH_TOKEN`, `DATABASE_URL` and keys the host holds stay in the host process; printing the environment, reading a secret file such as `.env` or `~/.ssh/*`, and `gh auth token` are held as `shell.secret-read`, which yolo mode always cards; a secret's value in a tool's output is replaced with `****`. This stops casual and accidental leaks, not a determined command run as the same user, which can read `/proc/<host pid>/environ` and any file that user can. To keep secrets from the agents, run their shells under a dedicated account without the `docker` group (membership in it equals root), or use [pi-roundtable-sandbox](packages/sandbox).
 - **Model credentials.** Every turn, whoever speaks, runs on the host's model login and is billed to it. Per-person credentials are planned for a later release.
 - **Data.** Conversations, memory, and schedules sit unencrypted in PostgreSQL and the data directory.
 

package/README.zh-TW.md

@@ -264,7 +264,7 @@ pi-roundtable 為一位擁有者執行騎士。
 - **核准。** 暫緩的呼叫只由當輪暫緩它的發言者核准，而且當下 tier 仍要足夠；在共用對話裡，擁有者也可以在卡片上或用確認訊息核准。私人對話裡別人都不能核准，高於發言者 tier 的呼叫在那裡也不會被核准。
 - **對話。** Discord 裡智慧體的頻道和群組房間是共用的：在那裡發言的每個人，都會寫進智慧體讀取的同一段對話。網頁聊天的對話屬於開啟它的人：在網頁聊天裡只有開啟者本人能讀、能發言、能回答它的提問，但擁有者可以透過擁有者主控台（[pi-roundtable-web](packages/web)）讀取，營運者也能從資料庫和資料目錄讀到。
 - **記憶隔離。** 記憶依 principal 分開，不依擁有者 tier 判斷。私人對話讀本人的，共用對話讀當輪發言者的；連結 Discord 與網頁身分後，同一個人共用一份記憶。在共用對話送給模型的請求和摘要裡，記憶工具與載入記憶的 worker 的呼叫（參數和結果成對）會對其他發言者隱藏，先前回合的 reasoning 則依 provider 清除。其他工具的參數和公開的騎士回覆仍是公開內容，即使模型在裡面重述私人記憶；這不是一般的秘密流向防護。第三方摘要器必須先使用 `privateCompaction`，才能摘要共用歷史。`claude-bridge` 的共用回合只在原始讀者紀錄（含已壓縮的回合）顯示另一位讀者的私人記憶（連只放進 prompt 的記憶與其 reasoning 也算），或某個呼叫已對當前讀者隱藏時才被拒絕。沒有私人記憶的回合不會擋其他讀者，關掉之後的記憶也繞不過先前的私人歷史；開放其他人進來只會在開機和 doctor 裡警告。SYSTEM 只在這項核心防護裡算作主要擁有者，所以它能讀取並公開重述擁有者保留的呼叫與 reasoning；0.9 之前、第一筆範圍紀錄之前未標記的內建記憶結果，仍歸屬擁有者。沙盒的全場共用 prompt 區塊必須明確使用 `memory.visibility: "shared"`，私人回合需要 worker 能力。Bridge 會在這些投影之外重播未過濾的歷史；見[確切規則與剩餘風險](docs/migration-0.9.md#claude-bridge-guard)。
-- **主機上的 shell。** 智慧體的 shell 以主機的使用者身分執行。暫緩只是把有風險的指令擋在卡片後面，不是沙箱。shell 只拿到主機環境變數的一部分（路徑、使用者、語系、終端機、`TMPDIR`、proxy，加上 `GH_TOKEN` 與 `shellEnv` 額外給的），所以主機持有的 bot token、模型登入、`DATABASE_URL` 和金鑰都留在主機行程裡；印出環境變數、讀取 `.env` 或 `~/.ssh/*` 這類秘密檔案、`gh auth token` 會以 `shell.secret-read` 暫緩，yolo 模式一律出卡片；工具輸出裡的秘密值會換成 `****`。這擋得住隨手和意外的外洩，擋不住以同一個使用者刻意執行的指令：它讀得到 `/proc/<主機 pid>/environ`，也讀得到那個使用者能讀的任何檔案。要讓智慧體碰不到秘密，請讓它們的 shell 以不在 `docker` 群組裡的專用帳號執行（加入這個群組等同 root），或改用 [pi-roundtable-sandbox](packages/sandbox)。
+- **主機上的 shell。** 智慧體的 shell 以主機的使用者身分執行。暫緩只是把有風險的指令擋在卡片後面，不是沙箱。shell 只拿到主機環境變數的一部分（路徑、使用者、語系、終端機、`TMPDIR`、proxy，加上 `shellEnv` 額外給的），所以主機持有的 `GH_TOKEN`、bot token、模型登入、`DATABASE_URL` 和金鑰都留在主機行程裡；印出環境變數、讀取 `.env` 或 `~/.ssh/*` 這類秘密檔案、`gh auth token` 會以 `shell.secret-read` 暫緩，yolo 模式一律出卡片；工具輸出裡的秘密值會換成 `****`。這擋得住隨手和意外的外洩，擋不住以同一個使用者刻意執行的指令：它讀得到 `/proc/<主機 pid>/environ`，也讀得到那個使用者能讀的任何檔案。要讓智慧體碰不到秘密，請讓它們的 shell 以不在 `docker` 群組裡的專用帳號執行（加入這個群組等同 root），或改用 [pi-roundtable-sandbox](packages/sandbox)。
 - **模型憑證。** 每一輪不論誰發言，都用主機的模型登入執行、由它計費。每個人自己的憑證預計在之後的版本加入。
 - **資料。** 對話、記憶和排程以未加密的形式存在 PostgreSQL 和資料目錄裡。
 

package/docs/plugins.md

@@ -1210,8 +1210,8 @@ const shell = shellHoldRuleFor({
 
 The agents' `bash` does not inherit the host process's environment.
 It gets the names in `SHELL_ENV_NAMES` (`PATH`, `HOME`, `USER`, `LOGNAME`, `SHELL`, `LANG`, `LANGUAGE`, `LC_*`, `TZ`, `TERM`, `TMPDIR`, the proxy variables in both cases, `SSL_CERT_FILE`, `SSL_CERT_DIR`, and Pi's `PI_*` session names), and what the host's `shellEnv` adds: `pass`, more host variables by name (a trailing `*` matches a prefix), and `set`, fixed values that win.
-Without `pass` it is `DEFAULT_SHELL_PASS`, `["GH_TOKEN"]`, so `gh` and a `git push` through `gh auth git-credential` work in the shell; `pass: []` keeps it out.
-Any other secret the host needs (a bot token, a model login, `DATABASE_URL`) stays in the host process; give a shell one only by naming it:
+Without `pass` it is `DEFAULT_SHELL_PASS`, empty: no host secret reaches the shell, `GH_TOKEN` included.
+A secret the host needs (a bot token, a model login, `DATABASE_URL`, `GH_TOKEN`) stays in the host process; give a shell one only by naming it, for example a token for `gh` and a `git push` through `gh auth git-credential`, preferably a narrower one than the host's in `set`:
 
 ```ts
 export default {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-roundtable",
-	"version": "0.33.0",
+	"version": "0.35.0",
 	"description": "A plugin-driven Pi agent server for one owner, reached through Discord or the web",
 	"type": "module",
 	"license": "MIT",
@@ -27,7 +27,6 @@
 	"files": [
 		"src",
 		"!src/**/*.test.ts",
-		"!src/core/testing/file-size.ts",
 		"!src/core/modules/host-shell/shell-fuzz-*.ts",
 		"!src/core/testing/discord-limits.ts",
 		"!src/core/testing/prompt-capture*.ts",

package/src/cli/checks/configuration.ts

@@ -1,5 +1,5 @@
-import { Roundtable } from "../../core/host.ts";
-import { silentLogger } from "../../core/log.ts";
+import { Roundtable } from "../../core/host/host.ts";
+import { silentLogger } from "../../core/kernel/log.ts";
 import { CONFIG_FILE, type Project } from "../project.ts";
 import { fail, ok, type Result } from "../report.ts";
 

package/src/cli/checks/database.ts

@@ -1,7 +1,7 @@
 import type { SQL } from "bun";
 import { nested, openPool, runMigrations } from "../../core/db/migrations.ts";
-import { MigrationError } from "../../core/errors.ts";
-import type { RoundtablePlugin } from "../../core/plugin.ts";
+import { MigrationError } from "../../core/kernel/errors.ts";
+import type { RoundtablePlugin } from "../../core/plugin-api/plugin.ts";
 import type { Project } from "../project.ts";
 import { fail, ok, type Result, skipped } from "../report.ts";
 

package/src/cli/checks/identity.ts

@@ -1,4 +1,5 @@
 import type { SQL } from "bun";
+import { backfillLine } from "../../core/builtin/identity.ts";
 import { LEGACY_ACCESS } from "../../core/config/access.ts";
 import type { ResolvedConfig } from "../../core/config/config.ts";
 import {
@@ -7,7 +8,6 @@ import {
 } from "../../core/identity/access-policy.ts";
 import { identityOf, parseIdentity } from "../../core/identity/actor-facts.ts";
 import { declaredConflict } from "../../core/identity/config-owner.ts";
-import { backfillLine } from "../../core/identity/identity-plugin.ts";
 import {
 	type BackfillSummary,
 	backfillPrincipals,

package/src/cli/checks/model.ts

@@ -1,4 +1,4 @@
-import { parseModelRef } from "../../core/models.ts";
+import { parseModelRef } from "../../core/domain/models.ts";
 import {
 	BRIDGE_MEMORY_FIX,
 	bridgeMemoryProblem,

package/src/cli/cli.ts

@@ -1,8 +1,8 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { resolveConfig } from "../core/config/config.ts";
-import type { DefinedRoundtable } from "../core/define-roundtable.ts";
-import { Roundtable } from "../core/host.ts";
+import type { DefinedRoundtable } from "../core/host/define-roundtable.ts";
+import { Roundtable } from "../core/host/host.ts";
 import { declaredIdentities } from "../core/identity/plugin-identities.ts";
 import { addPackage } from "./add-package.ts";
 import { addPlugin } from "./add-plugin.ts";

package/src/cli/principal.ts

@@ -12,7 +12,7 @@ import {
 	type RoleGrant,
 } from "../core/identity/principal-store.ts";
 import { chosenProfileSource } from "../core/identity/profile-choices.ts";
-import type { Tier } from "../core/speakers.ts";
+import type { Tier } from "../core/identity/speakers.ts";
 import { CONFIG_FILE } from "./project.ts";
 
 export const PRINCIPAL_USAGE = `  roundtable principal list    every principal, with its roles and its identities written as

package/src/cli/project.ts

@@ -7,8 +7,8 @@ import {
 	type RoundtableConfig,
 	resolveConfig,
 } from "../core/config/config.ts";
-import type { DefinedRoundtable } from "../core/define-roundtable.ts";
-import { type Logger, silentLogger } from "../core/log.ts";
+import type { DefinedRoundtable } from "../core/host/define-roundtable.ts";
+import { type Logger, silentLogger } from "../core/kernel/log.ts";
 import { fail, type Result } from "./report.ts";
 
 export const CONFIG_FILE = "roundtable.config.ts";

package/src/cli/runtime.ts

@@ -2,9 +2,9 @@ import { existsSync } from "node:fs";
 import { join } from "node:path";
 import type { Credential, CredentialStore } from "@earendil-works/pi-ai";
 import { ModelRuntime } from "@earendil-works/pi-coding-agent";
-import type { DefinedRoundtable } from "../core/define-roundtable.ts";
-import { defineRoundtable } from "../core/define-roundtable.ts";
-import type { Logger } from "../core/log.ts";
+import type { DefinedRoundtable } from "../core/host/define-roundtable.ts";
+import { defineRoundtable } from "../core/host/define-roundtable.ts";
+import type { Logger } from "../core/kernel/log.ts";
 
 /** A credential store that holds nothing and refuses writes, so looking never creates `auth.json`. */
 const emptyCredentials: CredentialStore = {

package/src/cli/start.ts

@@ -1,4 +1,4 @@
-import type { DefinedRoundtable } from "../core/define-roundtable.ts";
+import type { DefinedRoundtable } from "../core/host/define-roundtable.ts";
 import { buildChecks, type DoctorInputs } from "./doctor.ts";
 import { Project } from "./project.ts";
 import { failed, type Outcome, runChecks } from "./report.ts";

package/src/core/agents/agent-claim.ts

@@ -14,14 +14,14 @@ import type {
 import type { AgentRuntime } from "../contract/runtime.ts";
 import { parseChannelKey, type SurfacePort } from "../contract/surface.ts";
 import type { ChannelKey } from "../domain/conversation.ts";
-import type { OwnerIdentity } from "../identity.ts";
-import type { Logger } from "../log.ts";
-import { PERSONAL_TARGET } from "../modules/background/personal-target.ts";
+import type { OwnerIdentity } from "../identity/owner-identity.ts";
+import { addressee, attributed, type Speaker } from "../identity/speakers.ts";
+import type { Logger } from "../kernel/log.ts";
 import { withReference } from "../routing/message-text.ts";
 import { answersAuthor } from "../routing/peer-bots.ts";
 import { outcome } from "../routing/settle-turn.ts";
 import { systemTurn } from "../routing/system-turns.ts";
-import { addressee, attributed, type Speaker } from "../speakers.ts";
+import { PERSONAL_TARGET } from "../shared/personal-target.ts";
 import type { DiscordAgentTeam } from "./agent-team.ts";
 import { discordIdOf, roomOf } from "./team-keys.ts";
 

package/src/core/agents/agent-dashboard.ts

@@ -1,7 +1,7 @@
+import { thinkingLabel } from "../domain/models.ts";
 import { messages } from "../i18n/index.ts";
-import type { Logger } from "../log.ts";
-import { thinkingLabel } from "../models.ts";
-import { zonedDate, zonedStamp } from "../time.ts";
+import type { Logger } from "../kernel/log.ts";
+import { zonedDate, zonedStamp } from "../kernel/time.ts";
 import type { ContextUse, DashboardBoard } from "./agent-ports.ts";
 import type { AgentStatus, GroupStatus, TeamStatus } from "./agent-team.ts";
 

package/src/core/agents/agent-messages.ts

@@ -1,12 +1,12 @@
 import type { ChannelKey, IntercomCard } from "../domain/conversation.ts";
 import { AgentError, IdentityError } from "../domain/errors.ts";
 import type { AgentTurnScope } from "../domain/ports.ts";
-import { HostStoppingError } from "../errors.ts";
 import { SYSTEM_PRINCIPAL } from "../identity/principal-store.ts";
+import { addressee, type Speaker } from "../identity/speakers.ts";
+import { HostStoppingError } from "../kernel/errors.ts";
 import { intercomPlain } from "../presentation/intercom.ts";
 import { isQuiet } from "../presentation/reply-body.ts";
 import { splitReply } from "../presentation/reply-splitter.ts";
-import { addressee, type Speaker } from "../speakers.ts";
 import type { OutboxEntry, StoredOutboxEntry } from "./agent-outbox.ts";
 import {
 	agentFailureText,

package/src/core/agents/agent-outbox.ts

@@ -1,7 +1,7 @@
 import type { SQL } from "bun";
 import type { Migration } from "../db/migrations.ts";
 import type { ChannelKey } from "../domain/conversation.ts";
-import type { Speaker } from "../speakers.ts";
+import type { Speaker } from "../identity/speakers.ts";
 
 /**
  * An agent message the host stopped before it could deliver. `message` is the request to the

package/src/core/agents/agent-ports.ts

@@ -1,7 +1,7 @@
 import type { AgentRuntime, ContextUse } from "../contract/runtime.ts";
 import type { IntercomCard } from "../domain/conversation.ts";
 import type { InterimPosts } from "../domain/interim.ts";
-import type { ThinkingSetting } from "../models.ts";
+import type { ThinkingSetting } from "../domain/models.ts";
 
 export type { ContextUse };
 

package/src/core/agents/agent-prompt.ts

@@ -1,9 +1,9 @@
 import { parseChannelKey, type SurfacePort } from "../contract/surface.ts";
 import type { ChannelKey } from "../domain/conversation.ts";
 import { messages } from "../i18n/index.ts";
-import { type OwnerIdentity, ownerWords } from "../identity.ts";
-import type { AgentTools } from "../plugin.ts";
-import { addressee, type Speaker } from "../speakers.ts";
+import { type OwnerIdentity, ownerWords } from "../identity/owner-identity.ts";
+import { addressee, type Speaker } from "../identity/speakers.ts";
+import type { AgentTools } from "../plugin-api/plugin.ts";
 import type { Agent, AgentGroup, Backlog } from "./agent-store.ts";
 
 /**
@@ -58,7 +58,7 @@ export function agentSystemPrompt(input: {
 		);
 	else if (input.helpers)
 		parts.push(
-			"A task that stands on its own, such as one of several things to look up or compare, can go to a temp knight: helper_create makes one of yours that works in parallel, its answer comes back to you as a new turn, and helper_end clears the ones you are done with.",
+			"A task that stands on its own, such as one of several things to look up or compare, can go to a temp knight: helper_create makes one of yours that works in parallel, its answer comes back to you as a new turn, and helper_end clears the ones you are done with. A temp knight you make often can be saved as a preset (helper_preset_set), then made with helper_create and preset.",
 		);
 	if (group) {
 		const others = group.members

package/src/core/agents/agent-rules.ts

@@ -4,7 +4,7 @@ import {
 	suggestCharacter,
 } from "../../characters/index.ts";
 import { AgentError } from "../domain/errors.ts";
-import { THINKING_LEVELS, type ThinkingLevel } from "../models.ts";
+import { THINKING_LEVELS, type ThinkingLevel } from "../domain/models.ts";
 
 export const MAX_PROMPT_CHARS = 4_000;
 export const MAX_AVATAR_PROMPT_CHARS = 1_000;

package/src/core/agents/agent-schema.ts

@@ -1,11 +1,12 @@
 import { readCharacter } from "../../characters/index.ts";
 import { scopeToGuild } from "../db/guild-scope.ts";
 import type { Migration } from "../db/migrations.ts";
-import type { ThinkingLevel } from "../models.ts";
+import type { ThinkingLevel } from "../domain/models.ts";
 import { promptHistoryMigration } from "../modules/prompts/prompt-history.ts";
 import { AgentConversations } from "./agent-conversations.ts";
 import { outboxMigration } from "./agent-outbox.ts";
 import type { Agent, AgentGroup, AgentStatus } from "./agent-rules.ts";
+import { HelperPresets } from "./helper-presets.ts";
 
 export interface AgentRow {
 	name: string;
@@ -164,5 +165,7 @@ export function agentMigrations(guildId: string): Migration[] {
 		outboxMigration(),
 		// Where each agent last ran a turn, so a message to it finds that conversation after a restart.
 		AgentConversations.migration,
+		// The temp-knight presets each agent saved; kept when the agent is archived.
+		HelperPresets.migration,
 	];
 }

package/src/core/agents/agent-settings.ts

@@ -1,10 +1,10 @@
 import { AgentError } from "../domain/errors.ts";
-import { assistantName } from "../i18n/index.ts";
 import {
 	AUTO_THINKING,
 	type ThinkingLevel,
 	type ThinkingSetting,
-} from "../models.ts";
+} from "../domain/models.ts";
+import { assistantName } from "../i18n/index.ts";
 import { checkModelRef, checkThinking } from "./agent-store.ts";
 
 /** Resets a model or thinking setting to the assistant's. */

package/src/core/agents/agent-store.ts

@@ -2,12 +2,12 @@ import type { SQL } from "bun";
 import type { CharacterSpec } from "../../characters/index.ts";
 import type { Migration } from "../db/migrations.ts";
 import { AgentError } from "../domain/errors.ts";
-import type { ThinkingLevel } from "../models.ts";
+import type { ThinkingLevel } from "../domain/models.ts";
 import {
 	PromptHistory,
 	type PromptVersion,
 } from "../modules/prompts/prompt-history.ts";
-import type { AgentDirectory } from "../services.ts";
+import type { AgentDirectory } from "../plugin-api/services.ts";
 import { AgentBook } from "./agent-book.ts";
 import { AgentConversations } from "./agent-conversations.ts";
 import { AgentOutbox } from "./agent-outbox.ts";
@@ -15,7 +15,6 @@ import {
 	type Agent,
 	type AgentGroup,
 	type AgentSeed,
-	type AgentStatus,
 	type Backlog,
 	checkAgentName,
 	checkAvatarPrompt,
@@ -35,6 +34,7 @@ import {
 } from "./agent-schema.ts";
 import { AgentStatements } from "./agent-statements.ts";
 import { GroupMessages } from "./group-messages.ts";
+import { HelperPresets } from "./helper-presets.ts";
 
 export {
 	type Agent,
@@ -74,6 +74,8 @@ export class PgAgentStore extends AgentBook implements AgentDirectory {
 	readonly outbox: AgentOutbox;
 	/** The conversation each agent last ran a turn in. */
 	readonly conversations: AgentConversations;
+	/** The temp-knight presets each agent saved. */
+	readonly presets: HelperPresets;
 
 	private constructor(
 		sql: SQL,
@@ -88,6 +90,7 @@ export class PgAgentStore extends AgentBook implements AgentDirectory {
 		this.#messages = new GroupMessages(sql, guildId);
 		this.#prompts = new PromptHistory(sql, guildId);
 		this.outbox = new AgentOutbox(sql, guildId);
+		this.presets = new HelperPresets(sql, guildId);
 	}
 
 	/** The store's tables; the host runs this before any store attaches. */
@@ -454,12 +457,9 @@ export class PgAgentStore extends AgentBook implements AgentDirectory {
 
 	async #writeGroup(
 		name: string,
-		change: {
-			displayName?: string;
-			members?: string[];
-			host?: string;
-			status?: AgentStatus;
-		},
+		change: Partial<
+			Pick<AgentGroup, "displayName" | "members" | "host" | "status">
+		>,
 	): Promise<AgentGroup> {
 		const current = this.groupMap.get(name);
 		if (!current) throw new AgentError(`There is no group "${name}".`);

package/src/core/agents/agent-team-fixture.ts

@@ -12,11 +12,12 @@ import type {
 } from "../domain/conversation.ts";
 import type { RoundProgress } from "../domain/round.ts";
 import type { IdentityService } from "../identity/identity-port.ts";
-import { silentLogger } from "../log.ts";
+import { silentLogger } from "../kernel/log.ts";
 import { StoredSkillRegistry as SkillRegistry } from "../modules/skills/skill-registry.ts";
 import { SkillStore } from "../modules/skills/skill-store.ts";
-import type { PromptSection } from "../plugin.ts";
+import type { PromptSection } from "../plugin-api/plugin.ts";
 import { type ChannelQueue, channelQueue } from "../routing/channel-queue.ts";
+import { toolTiers } from "../runtime/tool-tiers.ts";
 import {
 	openTestStore,
 	TEST_GUILD,
@@ -25,7 +26,6 @@ import {
 } from "../testing/database.ts";
 import { useTestLocale } from "../testing/locale.ts";
 import { OWNER_SPEAKER, TEST_OWNER } from "../testing/owner.ts";
-import { toolTiers } from "../tool-tiers.ts";
 import type {
 	AgentCategory,
 	AgentChannels,
@@ -305,6 +305,7 @@ export function useTeamFixture(
 			"skill_versions",
 			"skill_groups",
 			"agent_skills",
+			"helper_presets",
 		])
 			await admin.unsafe(`DROP TABLE IF EXISTS ${table}`);
 		await admin.close();

package/src/core/agents/agent-team.ts

@@ -3,13 +3,13 @@ import type { CharacterInput } from "../../characters/index.ts";
 import type { TurnAttachments } from "../domain/attachment.ts";
 import type { ChannelKey, TurnResult } from "../domain/conversation.ts";
 import { AgentError, ScheduleError } from "../domain/errors.ts";
+import type { ThinkingSetting } from "../domain/models.ts";
 import type { AgentTurnScope } from "../domain/ports.ts";
-import type { ThinkingSetting } from "../models.ts";
+import type { TurnSelection } from "../domain/sessions.ts";
+import { type Speaker, THE_SPEAKER } from "../identity/speakers.ts";
 import type { PromptVersion } from "../modules/prompts/prompt-history.ts";
 import type { ResolvedSkill } from "../modules/skills/skill-rules.ts";
-import type { AgentChange, AgentTeam } from "../services.ts";
-import type { TurnSelection } from "../sessions.ts";
-import { type Speaker, THE_SPEAKER } from "../speakers.ts";
+import type { AgentChange, AgentTeam } from "../plugin-api/services.ts";
 import type { Agent } from "./agent-store.ts";
 import {
 	type AgentOps,
@@ -17,6 +17,7 @@ import {
 	agentToolsExtension,
 } from "./agent-tools.ts";
 import type { HelperTeam } from "./helper-ops.ts";
+import { type PresetAction, presetAction } from "./helper-preset-ops.ts";
 import { type Routes, routesOf } from "./routes.ts";
 import { TeamEditing } from "./team-editing.ts";
 import type { TeamHelpers } from "./team-helpers.ts";
@@ -257,19 +258,9 @@ export class DiscordAgentTeam implements AgentOps, AgentTeam {
 
 	/** The owner's message in an agent's channel; call inside its queue. `text` has the reference, `replyText` what they typed. */
 	answerOwner(
-		channel: ChannelKey,
-		speaker: Speaker,
-		text: string,
-		replyText: string,
-		attachments: TurnAttachments,
+		...args: Parameters<TeamTurns["answerOwner"]>
 	): Promise<TurnResult> {
-		return this.#turns.answerOwner(
-			channel,
-			speaker,
-			text,
-			replyText,
-			attachments,
-		);
+		return this.#turns.answerOwner(...args);
 	}
 
 	/**
@@ -422,6 +413,11 @@ export class DiscordAgentTeam implements AgentOps, AgentTeam {
 		return this.#editing.createHelper(caller, input);
 	}
 
+	/** A knight keeps its own temp-knight presets; see `AgentOps.helperPreset`. */
+	helperPreset(caller: AgentTurnScope, action: PresetAction): Promise<string> {
+		return presetAction(this.#context, caller, action);
+	}
+
 	/** A knight archives its own temp knights; the pages that show the parent are told. */
 	helperEnd(
 		caller: AgentTurnScope,

package/src/core/agents/agent-tools.ts

@@ -2,10 +2,11 @@ import type { ExtensionFactory } from "@earendil-works/pi-coding-agent";
 import { Type } from "typebox";
 import type { CharacterInput } from "../../characters/index.ts";
 import { AgentError } from "../domain/errors.ts";
+import { THINKING_LEVELS } from "../domain/models.ts";
 import type { AgentTurnScope } from "../domain/ports.ts";
 import { assistantName, messages } from "../i18n/index.ts";
-import { type OwnerIdentity, ownerWords } from "../identity.ts";
-import { THINKING_LEVELS } from "../models.ts";
+import { type OwnerIdentity, ownerWords } from "../identity/owner-identity.ts";
+import { timeZone } from "../kernel/time.ts";
 import {
 	optionalString,
 	requiredString,
@@ -13,7 +14,6 @@ import {
 	type TextToolDef,
 	textToolsExtension,
 } from "../runtime/text-tools.ts";
-import { timeZone } from "../time.ts";
 import { MAX_GROUP_MEMBERS, MIN_GROUP_MEMBERS } from "./agent-store.ts";
 import {
 	CLASS,
@@ -24,6 +24,7 @@ import {
 	PARTS,
 	PROMPT,
 } from "./agent-tool-schema.ts";
+import type { HelperFields, PresetAction } from "./helper-preset-ops.ts";
 import { helperToolDefs } from "./helper-tools.ts";
 
 /** The tool that hands a request to another agent; a group seat has none. */
@@ -32,8 +33,14 @@ export const MESSAGE_AGENT_TOOL = "message_agent";
 /** The tool that changes an agent's look; every host offers it. */
 export const AVATAR_TOOL = "agent_avatar";
 
-/** The tools that make and end temp knights; `helpers: false` leaves them out. */
-export const HELPER_TOOLS = ["helper_create", "helper_end"] as const;
+/** The tools that make and end temp knights and keep their presets; `helpers: false` leaves them out. */
+export const HELPER_TOOLS = [
+	"helper_create",
+	"helper_end",
+	"helper_preset_set",
+	"helper_preset_list",
+	"helper_preset_delete",
+] as const;
 
 export const AGENT_TOOLS = [
 	"agent_list",
@@ -103,17 +110,10 @@ export interface AgentOps {
 	/** Makes a temp knight of the caller for one task; the answer returns to the caller's conversation. */
 	helperCreate(
 		caller: AgentTurnScope,
-		input: {
-			name?: string;
-			displayName: string;
-			prompt: string;
-			task: string;
-			character?: CharacterInput;
-			skills?: string[];
-			model?: string;
-			thinking?: string;
-		},
+		input: HelperFields & { name?: string; task: string },
 	): Promise<string>;
+	/** Saves, lists, or deletes the caller's own temp-knight presets. */
+	helperPreset(caller: AgentTurnScope, action: PresetAction): Promise<string>;
 	/** Archives the caller's own temp knights: the named ones, or every one that is finished. */
 	helperEnd(
 		caller: AgentTurnScope,

package/src/core/agents/avatar-refresh.ts

@@ -1,5 +1,5 @@
 import type { CharacterSpec } from "../../characters/index.ts";
-import type { Logger } from "../log.ts";
+import type { Logger } from "../kernel/log.ts";
 import type { Agent } from "./agent-store.ts";
 
 /** What the refresh needs of the team: the agents, a render, and a way to set the picture. */

package/src/core/agents/avatar-studio.ts

@@ -6,9 +6,9 @@ import { resolveCharacter } from "../../characters/index.ts";
 import { squarePng } from "../attachments/square-png.ts";
 import type { ImageDrawer } from "../contract/providers.ts";
 import { ConfigError } from "../domain/errors.ts";
-import { ProviderError } from "../errors.ts";
 import type { HttpRoute } from "../http/listeners.ts";
-import type { AvatarStudio } from "../services.ts";
+import { ProviderError } from "../kernel/errors.ts";
+import type { AvatarStudio } from "../plugin-api/services.ts";
 import { characterPng } from "./character-png.ts";
 import { fallbackAvatar } from "./fallback-avatar.ts";
 

package/src/core/agents/group-round.ts

@@ -1,6 +1,6 @@
 import type { Judge } from "../contract/providers.ts";
-import { type OwnerIdentity, ownerWords } from "../identity.ts";
-import type { Logger } from "../log.ts";
+import { type OwnerIdentity, ownerWords } from "../identity/owner-identity.ts";
+import type { Logger } from "../kernel/log.ts";
 import type { Agent, GroupMessage } from "./agent-store.ts";
 
 /** Members at or above this relevance answer an owner message nobody is named in; a message naming members is answered by them alone. */

package/src/core/agents/group-turns.ts

@@ -3,7 +3,7 @@ import type { ChannelKey, TurnResult } from "../domain/conversation.ts";
 import { AgentError } from "../domain/errors.ts";
 import type { RoundEnd, RoundProgress } from "../domain/round.ts";
 import { messages } from "../i18n/index.ts";
-import type { Speaker } from "../speakers.ts";
+import type { Speaker } from "../identity/speakers.ts";
 import { groupTurnText } from "./agent-prompt.ts";
 import type { Agent, AgentGroup } from "./agent-store.ts";
 import {