robotrock 1.3.3 → 1.4.0

package/dist/eve/tools/index.js

@@ -449,6 +449,40 @@ var agentChatLinkTaskBodySchema = z.object({
   publicTaskId: z.string().min(1),
   toolCallId: z.string().min(1)
 });
+var AGENT_FILE_TAGS_MAX = 20;
+var AGENT_FILE_TAG_MAX_LENGTH = 64;
+function normalizeAgentFileTags(tags) {
+  if (!tags?.length) return void 0;
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const raw of tags) {
+    const tag = raw.trim().toLowerCase().slice(0, AGENT_FILE_TAG_MAX_LENGTH);
+    if (!tag || seen.has(tag)) continue;
+    seen.add(tag);
+    out.push(tag);
+    if (out.length >= AGENT_FILE_TAGS_MAX) break;
+  }
+  return out.length > 0 ? out : void 0;
+}
+var agentChatUploadImageBodySchema = z.object({
+  mediaType: z.string().min(1),
+  /** Raw base64 (no data: URL prefix). */
+  base64: z.string().min(1),
+  chatId: z.string().min(1).optional(),
+  publicTaskId: z.string().min(1).optional(),
+  source: z.string().min(1).optional(),
+  /** Display / search name (e.g. `sunset-robot.png`). */
+  filename: z.string().min(1).max(255).optional(),
+  /** Human-readable description (e.g. generation prompt). */
+  description: z.string().min(1).max(2e3).optional(),
+  /**
+   * Optional labels for later grouping/filtering.
+   * Normalized to lowercase trimmed unique strings (max 20, 64 chars each).
+   */
+  tags: z.array(z.string().min(1).max(AGENT_FILE_TAG_MAX_LENGTH)).max(AGENT_FILE_TAGS_MAX).optional().transform((tags) => normalizeAgentFileTags(tags))
+}).refine((data) => Boolean(data.chatId || data.publicTaskId), {
+  message: "Provide chatId and/or publicTaskId"
+});
 
 // ../core/src/schemas/tool-result-display.ts
 import { z as z2 } from "zod";
@@ -477,7 +511,8 @@ var tenantRoleSchema = z3.enum(["admin", "member"]);
 var agentAdminUserSchema = z3.object({
   id: z3.string(),
   email: z3.string().email(),
-  name: z3.string()
+  name: z3.string(),
+  profilePictureUrl: z3.string().nullable().optional()
 });
 var agentAdminMemberSchema = z3.object({
   userId: z3.string(),
@@ -562,6 +597,37 @@ var assignTasksBodySchema = z3.object({
     { message: "assignTo needs at least one user email or group slug." }
   )
 });
+var agentAdminPlanLimitsSchema = z3.object({
+  tasksPerDay: z3.number(),
+  members: z3.number(),
+  apiKeys: z3.number(),
+  groups: z3.number(),
+  auditLogRetention: z3.number(),
+  rateLimitPerSecond: z3.number(),
+  taskRetentionDays: z3.number()
+});
+var agentAdminUsageSchema = z3.object({
+  workspace: z3.string(),
+  planName: z3.string(),
+  planType: z3.string(),
+  trialState: z3.enum(["none", "active", "expired"]),
+  daysRemaining: z3.number().nullable(),
+  isPaidPro: z3.boolean(),
+  subscriptionStatus: z3.string().nullable(),
+  tasksToday: z3.number(),
+  maxTasksPerDay: z3.number().nullable(),
+  tasksResetAt: z3.number(),
+  openTasks: z3.number(),
+  totalTasks: z3.number(),
+  seatsCurrent: z3.number(),
+  seatsMax: z3.number().nullable(),
+  groupsCurrent: z3.number(),
+  groupsMax: z3.number().nullable(),
+  apiKeysCurrent: z3.number(),
+  apiKeysMax: z3.number().nullable(),
+  rateLimitPerSecond: z3.number(),
+  limits: agentAdminPlanLimitsSchema
+});
 
 // src/schemas/index.ts
 var handlerUrlSchema2 = z4.string().refine((url) => isAllowedHandlerUrl(url), {
@@ -865,7 +931,11 @@ function resolveRobotRockAuthConfig(overrides) {
       "RobotRock auth is required. Set ROBOTROCK_API_KEY, ROBOTROCK_AGENT_SERVICE_TOKEN with tenant context, or pass auth when creating the client."
     );
   }
-  return { kind: "apiKey", apiKey };
+  return {
+    kind: "apiKey",
+    apiKey,
+    ...overrides?.actingUserId?.trim() ? { actingUserId: overrides.actingUserId.trim() } : {}
+  };
 }
 
 // src/chat-correlation.ts
@@ -1070,6 +1140,51 @@ function createChatsApi(config) {
           data
         );
       }
+    },
+    async uploadImage(input) {
+      const validation = agentChatUploadImageBodySchema.safeParse(input);
+      if (!validation.success) {
+        throw new RobotRockError(
+          `Invalid image upload: ${validation.error.issues[0]?.message}`,
+          400,
+          validation.error.issues
+        );
+      }
+      const response = await fetch(`${config.baseUrl}/agent-chats/images`, {
+        method: "POST",
+        headers: headers(),
+        body: JSON.stringify(validation.data)
+      });
+      const data = await parseResponseBody(response);
+      if (!response.ok) {
+        throw new RobotRockError(
+          getErrorMessage(data, "Failed to upload chat image"),
+          response.status,
+          data
+        );
+      }
+      const uploaded = data;
+      if (typeof uploaded.storageId !== "string" || typeof uploaded.url !== "string" || typeof uploaded.mediaType !== "string") {
+        throw new RobotRockError(
+          "Image upload returned an invalid response",
+          500,
+          data
+        );
+      }
+      return {
+        storageId: uploaded.storageId,
+        url: uploaded.url,
+        mediaType: uploaded.mediaType,
+        ...typeof uploaded.chatId === "string" ? { chatId: uploaded.chatId } : {},
+        ...typeof uploaded.publicTaskId === "string" ? { publicTaskId: uploaded.publicTaskId } : {},
+        ...typeof uploaded.filename === "string" ? { filename: uploaded.filename } : {},
+        ...typeof uploaded.description === "string" ? { description: uploaded.description } : {},
+        ...Array.isArray(uploaded.tags) ? {
+          tags: uploaded.tags.filter(
+            (tag) => typeof tag === "string"
+          )
+        } : {}
+      };
     }
   };
 }
@@ -1139,6 +1254,7 @@ var RobotRock = class {
     }
     this.auth = resolveRobotRockAuthConfig({
       ...apiKey ? { apiKey } : {},
+      ...config.actingUserId ? { actingUserId: config.actingUserId } : {},
       ...agentService ? { agentService } : {}
     });
     this.chatCorrelation = config.chatCorrelation;
@@ -1543,6 +1659,7 @@ function tryCreateBoundRobotRockClient(ctx) {
   if (apiKey) {
     return createClient({
       apiKey,
+      ...caller?.userId ? { actingUserId: caller.userId } : {},
       baseUrl: process.env.ROBOTROCK_BASE_URL?.trim(),
       chatCorrelation
     });
@@ -1710,12 +1827,38 @@ async function postRobotRockLinkChatTask(ctx, input) {
   }
 }
 
+// src/eve/tool-ui-hint.ts
+var TOOL_UI_HINT_FIELD = "uiHint";
+function withUiHint(result, hint) {
+  return {
+    ...result,
+    [TOOL_UI_HINT_FIELD]: hint
+  };
+}
+
+// src/eve/tool-result-ui-meta.ts
+var TOOL_UI_FIELD = "ui";
+var TOOL_RESULT_UI_ENTITY_ID_RE = /^[a-z][a-z0-9_]{0,63}$/;
+function withToolUi(result, ui) {
+  const existing = typeof result[TOOL_UI_FIELD] === "object" && result[TOOL_UI_FIELD] !== null && !Array.isArray(result[TOOL_UI_FIELD]) ? result[TOOL_UI_FIELD] : {};
+  return {
+    ...result,
+    [TOOL_UI_FIELD]: {
+      ...existing,
+      ...ui
+    }
+  };
+}
+
 // src/eve/tool-reply-guidance.ts
 var TOOL_REPLY_GUIDANCE_FIELD = "replyGuidance";
 var WHOAMI_REPLY_GUIDANCE = "The dashboard shows a profile card with name, email, workspace, role, and groups. Do not restate those in your reply. Only add context not in the card (e.g. permissions, refund approval rules, missing group membership).";
-var MY_ACCESS_REPLY_GUIDANCE = "Access details may render in chat UI. Do not restate role, groups, or admin capabilities if already visible. Only explain what the user can or cannot do for their question (e.g. finance group required for refunds \u2265 $10,000). When access.tenantAdmin is false and the user needs manageTeam, manageGroups, or query-tasks capabilities, explain briefly then call ask_question to offer sending an admin request to tenant admins \u2014 do not tell them to find an admin manually without offering delegation first.";
+var MY_ACCESS_REPLY_GUIDANCE = "Access details may render in chat UI. Do not restate role, groups, or admin capabilities if already visible. Only explain what the user can or cannot do for their question (e.g. finance group required for refunds \u2265 $10,000). When access.tenantAdmin is false and the user needs manageTeam, manageGroups, query-tasks, or workspace-usage capabilities, explain briefly then call ask_question to offer sending an admin request to tenant admins \u2014 do not tell them to find an admin manually without offering delegation first.";
+var GET_WORKSPACE_USAGE_REPLY_GUIDANCE = "Workspace plan and usage render as a card in chat. Do not restate plan name, task counts, seats, groups, API keys, or rate limits from the card. Only add context not shown (e.g. upgrade options, that LLM token/cost meters are not tracked, or next steps). Never invent token or dollar spend numbers.";
 var CREATE_INBOX_TASK_REPLY_GUIDANCE = "A task card shows title, assignee, and inbox status in chat. Do not restate task ID, assignee, or delegation details from the card. Only mention next steps or answer the user's question.";
 var SEARCH_PRODUCTS_REPLY_GUIDANCE = "Product results render as a list card in chat. Do not restate product names, prices, or SKUs. Only add context not in the list (e.g. no matches, recommendations).";
+var GENERATE_RANDOM_CHART_REPLY_GUIDANCE = "Chart metrics render as a chart card in chat. Do not restate series values, dates, or categories from the chart. Only add brief context (e.g. that this is demo data).";
+var GENERATE_IMAGE_REPLY_GUIDANCE = "The generated image renders in chat UI. Do not describe the image pixels or restate the prompt. Only add a short acknowledgement or next-step question if useful.";
 var MANAGE_TEAM_MEMBERS_LIST_REPLY_GUIDANCE = "Team members render as a list card in chat. Do not restate names, emails, or roles from the list. Only add context not shown (e.g. duplicates, next admin actions).";
 var MANAGE_TEAM_MEMBERS_DETAIL_REPLY_GUIDANCE = "Team member details render in chat UI. Do not restate name, email, or role from the card. Only add next steps or policy context.";
 var MANAGE_GROUPS_LIST_REPLY_GUIDANCE = "Groups render as a list card in chat. Do not restate group names, slugs, or descriptions from the list. Use slug (not internal id) for get, update, delete, and membership actions. Only add context not shown.";
@@ -1824,69 +1967,38 @@ var createInboxTaskTool = defineCreateInboxTaskTool();
 import { defineTool as defineTool2 } from "eve/tools";
 import { z as z7 } from "zod";
 
-// src/eve/tool-result-display.ts
-function toolDisplayResult(data, options) {
-  const display = options?.widget || options?.title || options?.description ? {
-    ...options.widget ? { widget: options.widget } : {},
-    ...options.title ? { title: options.title } : {},
-    ...options.description ? { description: options.description } : {}
-  } : void 0;
-  return {
-    ...display ? { display } : {},
-    data,
-    ...options?.ui ? { ui: options.ui } : {}
-  };
-}
-
 // src/eve/tool-display-format.ts
 function formatToolObjectResult(data, options) {
-  return withReplyGuidance(
-    toolDisplayResult(data, {
-      title: options.title,
-      description: options.description,
-      ui: options.ui
-    }),
+  let result = withReplyGuidance(
+    data,
     options.replyGuidance
   );
+  if (options.ui) {
+    result = withToolUi(result, options.ui);
+  }
+  if (options.uiHint) {
+    result = withUiHint(result, options.uiHint);
+  }
+  return result;
 }
 function formatToolListResult(listKey, items, options) {
-  const listFieldUi = options.itemWidget ? {
-    "ui:widget": "list",
-    items: {
-      "ui:widget": options.itemWidget,
-      ...options.itemUi ?? {}
-    }
-  } : {
-    "ui:widget": "table",
-    ...options.itemUi ? { items: options.itemUi } : {}
+  const ui = {
+    ...options.ui,
+    layout: "list",
+    rowsPath: listKey,
+    ...options.entity ? { entity: options.entity } : {},
+    ...options.present !== void 0 ? { present: options.present } : {}
   };
-  return formatToolObjectResult(
-    { [listKey]: items },
-    {
-      title: options.title,
-      ui: {
-        [listKey]: listFieldUi
-      },
-      replyGuidance: options.replyGuidance
-    }
+  return withUiHint(
+    withToolUi(
+      withReplyGuidance({ [listKey]: items }, options.replyGuidance),
+      ui
+    ),
+    "list"
   );
 }
 
 // src/eve/tools/identity/format-my-access.ts
-var ACCESS_FIELD_UI = {
-  workspace: { "ui:title": "Workspace" },
-  role: { "ui:title": "Role" },
-  tenantAdmin: { "ui:title": "Tenant admin", "ui:widget": "boolean" },
-  groups: { "ui:title": "Groups" },
-  manageSettings: { "ui:title": "Manage settings", "ui:widget": "boolean" },
-  manageBilling: { "ui:title": "Manage billing", "ui:widget": "boolean" },
-  manageTeam: { "ui:title": "Manage team", "ui:widget": "boolean" },
-  manageIntegrations: {
-    "ui:title": "Manage integrations",
-    "ui:widget": "boolean"
-  },
-  email: { "ui:title": "Email" }
-};
 function formatMyAccessResult(input) {
   return formatToolObjectResult(
     {
@@ -1903,14 +2015,8 @@ function formatMyAccessResult(input) {
       }
     },
     {
-      ui: {
-        access: {
-          "ui:widget": "access",
-          "ui:title": "Your access",
-          items: ACCESS_FIELD_UI
-        }
-      },
-      replyGuidance: MY_ACCESS_REPLY_GUIDANCE
+      replyGuidance: MY_ACCESS_REPLY_GUIDANCE,
+      ui: { entity: "access" }
     }
   );
 }
@@ -1928,7 +2034,7 @@ function tenantCapabilities(isAdmin) {
 }
 function defineMyAccessTool() {
   return defineTool2({
-    description: "Check the authenticated user's tenant role, group memberships, and admin capabilities in RobotRock. Results render as an access card in chat \u2014 do not restate role, groups, or capabilities in your reply.",
+    description: "Check the authenticated user's tenant role, group memberships, and admin capabilities in RobotRock. Always call this before tenant-admin tools (manage_team_members, manage_groups, query_tasks, get_workspace_usage) in the same turn \u2014 including read-only requests like listing users or usage. Results render as a visible access tool card in chat like other tools; do not restate role, groups, or capabilities in your reply.",
     inputSchema: myAccessInputSchema,
     async execute(_input, ctx) {
       const caller = tryResolveTenantCaller(ctx);
@@ -1996,10 +2102,207 @@ var whoamiTool = defineWhoamiTool();
 
 // src/eve/tools/catalog/search-products.ts
 import { defineTool as defineTool4 } from "eve/tools";
+import { z as z10 } from "zod";
+
+// src/eve/entity-schemas.ts
 import { z as z9 } from "zod";
+function buildTenantTaskUrl(tenantSlug, task) {
+  const q = new URLSearchParams();
+  if (task.app && task.app !== "default") {
+    q.set("app", task.app);
+  }
+  if (task.type?.trim()) {
+    q.set("type", task.type.trim());
+  }
+  q.set("selected", task.id);
+  return `/${tenantSlug}/inbox?${q.toString()}`;
+}
+function buildTenantGroupUrl(tenantSlug, slug) {
+  return `/${tenantSlug}/team/groups/${slug}`;
+}
+var toolResultUiMetaSchema = z9.object({
+  present: z9.boolean().optional(),
+  entity: z9.string().regex(TOOL_RESULT_UI_ENTITY_ID_RE).optional(),
+  rowsPath: z9.string().min(1).optional(),
+  layout: z9.enum(["list", "chart", "table"]).optional()
+}).strict();
+var agentOnlyFields = {
+  replyGuidance: z9.string().optional(),
+  ui: toolResultUiMetaSchema.optional(),
+  uiHint: z9.enum(["list", "chart", "table"]).optional()
+};
+function withAgentOnlyFields(shape) {
+  return z9.object({
+    ...shape,
+    ...agentOnlyFields
+  });
+}
+var productEntityRowSchema = z9.object({
+  id: z9.string().min(1),
+  name: z9.string().min(1),
+  price: z9.number(),
+  currency: z9.string().min(1),
+  inStock: z9.boolean(),
+  url: z9.string().min(1)
+});
+var metricPointEntityRowSchema = z9.object({
+  date: z9.string().optional(),
+  category: z9.string().optional(),
+  label: z9.string().optional()
+}).catchall(z9.union([z9.string(), z9.number()]));
+var memberEntityRowSchema = z9.object({
+  name: z9.string(),
+  email: z9.string(),
+  role: z9.string(),
+  membershipKind: z9.string(),
+  profilePictureUrl: z9.string().nullable()
+});
+var taskEntityRowSchema = z9.object({
+  id: z9.string().min(1),
+  name: z9.string().min(1),
+  status: z9.string().min(1),
+  type: z9.string().nullable(),
+  description: z9.string().nullable(),
+  validUntil: z9.number(),
+  createdAt: z9.number(),
+  url: z9.string().min(1),
+  threadPriority: z9.string().nullable().optional()
+});
+var groupEntityRowSchema = z9.object({
+  name: z9.string().min(1),
+  slug: z9.string().min(1),
+  description: z9.string().nullable(),
+  memberCount: z9.number().nullable(),
+  url: z9.string().min(1)
+});
+var groupDetailEntitySchema = z9.object({
+  name: z9.string().min(1),
+  slug: z9.string().min(1),
+  description: z9.string().nullable(),
+  url: z9.string().min(1),
+  members: z9.array(
+    z9.object({
+      name: z9.string(),
+      email: z9.string(),
+      profilePictureUrl: z9.string().nullable()
+    })
+  )
+});
+var statusEntityRowSchema = z9.object({
+  id: z9.string().min(1),
+  name: z9.string().min(1),
+  status: z9.string().min(1),
+  url: z9.string().min(1),
+  type: z9.string().nullable().optional(),
+  description: z9.string().nullable().optional()
+});
+var agentAdminErrorResultSchema = z9.object({
+  ok: z9.literal(false),
+  status: z9.number().optional(),
+  message: z9.string(),
+  response: z9.unknown().optional()
+});
+var agentAdminMutationResultSchema = z9.object({
+  ...agentOnlyFields
+}).passthrough();
+var searchProductsOutputSchema = withAgentOnlyFields({
+  items: z9.array(productEntityRowSchema)
+});
+var generateRandomChartOutputSchema = withAgentOnlyFields({
+  title: z9.string().min(1),
+  axis: z9.enum(["time", "category"]),
+  series: z9.array(metricPointEntityRowSchema)
+});
+var generateImageOutputSchema = withAgentOnlyFields({
+  prompt: z9.string().min(1),
+  mediaType: z9.string().min(1),
+  model: z9.string().min(1),
+  storageId: z9.string().min(1),
+  url: z9.string().min(1),
+  /** @deprecated Legacy sessions only — prefer storageId/url. */
+  base64: z9.string().min(1).optional()
+});
+var manageTeamMembersListOutputSchema = withAgentOnlyFields({
+  members: z9.array(memberEntityRowSchema)
+});
+var manageTeamMembersDetailOutputSchema = withAgentOnlyFields(
+  memberEntityRowSchema.shape
+);
+var manageTeamMembersOutputSchema = z9.union([
+  manageTeamMembersListOutputSchema,
+  manageTeamMembersDetailOutputSchema,
+  agentAdminMutationResultSchema,
+  agentAdminErrorResultSchema
+]);
+var manageGroupsListOutputSchema = withAgentOnlyFields({
+  groups: z9.array(groupEntityRowSchema)
+});
+var manageGroupsDetailOutputSchema = withAgentOnlyFields(
+  groupDetailEntitySchema.shape
+);
+var manageGroupsSummaryOutputSchema = withAgentOnlyFields(
+  groupEntityRowSchema.shape
+);
+var manageGroupsOutputSchema = z9.union([
+  manageGroupsListOutputSchema,
+  manageGroupsDetailOutputSchema,
+  manageGroupsSummaryOutputSchema,
+  agentAdminMutationResultSchema,
+  agentAdminErrorResultSchema
+]);
+var queryTasksListOutputSchema = withAgentOnlyFields({
+  items: z9.array(taskEntityRowSchema),
+  nextCursor: z9.string().nullable().optional()
+});
+var queryTasksDetailOutputSchema = withAgentOnlyFields({
+  id: z9.string().nullable(),
+  status: z9.string().nullable(),
+  type: z9.string().nullable(),
+  name: z9.string().nullable(),
+  description: z9.string().nullable(),
+  validUntil: z9.number().nullable(),
+  createdAt: z9.number().nullable(),
+  url: z9.string().min(1).nullable()
+});
+var queryTasksOutputSchema = z9.union([
+  queryTasksListOutputSchema,
+  queryTasksDetailOutputSchema,
+  agentAdminErrorResultSchema
+]);
+var assignTasksOutputSchema = z9.union([
+  withAgentOnlyFields({
+    results: z9.array(statusEntityRowSchema)
+  }),
+  agentAdminErrorResultSchema
+]);
+var workspaceUsageEntitySchema = z9.object({
+  workspace: z9.string(),
+  plan: z9.string(),
+  planType: z9.string(),
+  trialState: z9.string(),
+  daysRemaining: z9.number().nullable(),
+  isPaidPro: z9.boolean(),
+  subscriptionStatus: z9.string(),
+  tasksToday: z9.string(),
+  tasksResetAt: z9.string(),
+  openTasks: z9.number(),
+  totalTasks: z9.number(),
+  seats: z9.string(),
+  groups: z9.string(),
+  apiKeys: z9.string(),
+  rateLimitPerSecond: z9.number()
+});
+var getWorkspaceUsageOutputSchema = z9.union([
+  withAgentOnlyFields({
+    usage: workspaceUsageEntitySchema
+  }),
+  agentAdminErrorResultSchema
+]);
+
+// src/eve/tools/catalog/search-products.ts
 var SEARCH_PRODUCTS_TOOL_NAME = "search_products";
-var searchProductsInputSchema = z9.object({
-  query: z9.string().min(1).describe("Product name or SKU to search for.")
+var searchProductsInputSchema = z10.object({
+  query: z10.string().min(1).describe("Product name or SKU to search for.")
 });
 var DEMO_PRODUCTS = [
   {
@@ -2007,55 +2310,348 @@ var DEMO_PRODUCTS = [
     name: "Wireless Keyboard",
     price: 79.99,
     currency: "USD",
-    inStock: true
+    inStock: true,
+    url: "https://shop.example.com/products/sku-1001"
   },
   {
     id: "sku-2042",
     name: "USB-C Hub",
     price: 45.99,
     currency: "USD",
-    inStock: true
+    inStock: true,
+    url: "https://shop.example.com/products/sku-2042"
   },
   {
     id: "sku-3308",
     name: "Monitor Stand",
     price: 129.99,
     currency: "USD",
-    inStock: false
+    inStock: false,
+    url: "https://shop.example.com/products/sku-3308"
   }
 ];
 function defineSearchProductsTool() {
   return defineTool4({
-    description: "Search the product catalog and return matching items with rich list UI. Results render as a product list card \u2014 do not restate product names, prices, or SKUs in your reply.",
+    description: "Search the product catalog and return matching items. Results render in chat UI \u2014 do not restate product names, prices, or SKUs in your reply.",
     inputSchema: searchProductsInputSchema,
+    outputSchema: searchProductsOutputSchema,
     async execute({ query }) {
       const normalized = query.trim().toLowerCase();
       const items = DEMO_PRODUCTS.filter(
         (product) => product.name.toLowerCase().includes(normalized) || product.id.toLowerCase().includes(normalized)
       );
-      return withReplyGuidance(
-        toolDisplayResult(
-          { items: [...items] },
-          {
-            title: items.length === 1 ? "1 product" : `${items.length} products`,
-            ui: {
-              items: {
-                "ui:widget": "list",
-                "ui:title": "Results",
-                items: {
-                  "ui:widget": "productInfo"
-                }
-              }
-            }
-          }
-        ),
-        SEARCH_PRODUCTS_REPLY_GUIDANCE
+      return formatToolListResult(
+        "items",
+        items.map((product) => ({ ...product })),
+        {
+          replyGuidance: SEARCH_PRODUCTS_REPLY_GUIDANCE,
+          entity: "product"
+        }
       );
     }
   });
 }
 var searchProductsTool = defineSearchProductsTool();
 
+// src/eve/tools/catalog/generate-random-chart.ts
+import { defineTool as defineTool5 } from "eve/tools";
+import { z as z11 } from "zod";
+var GENERATE_RANDOM_CHART_TOOL_NAME = "generate_random_chart";
+var generateRandomChartInputSchema = z11.object({
+  axis: z11.enum(["time", "category", "random"]).optional().describe(
+    "X-axis style: time (line), category (bar), or random. Defaults to random."
+  ),
+  seriesCount: z11.number().int().min(1).max(3).optional().describe("Number of numeric series (1\u20133). Defaults to a random 1\u20132."),
+  pointCount: z11.number().int().min(4).max(30).optional().describe("Number of data points (4\u201330). Defaults to a random 8\u201314."),
+  seed: z11.number().int().optional().describe("Optional seed for reproducible random data.")
+});
+function createRng(seed) {
+  let state = seed === void 0 ? (Math.floor(Math.random() * 2147483647) ^ Date.now()) >>> 0 : seed >>> 0;
+  if (state === 0) {
+    state = 1;
+  }
+  return () => {
+    state ^= state << 13;
+    state ^= state >>> 17;
+    state ^= state << 5;
+    return (state >>> 0) / 4294967296;
+  };
+}
+function pick(rng, items) {
+  return items[Math.floor(rng() * items.length)];
+}
+function randomInt(rng, min, max) {
+  return min + Math.floor(rng() * (max - min + 1));
+}
+function roundMetric(value) {
+  return Math.round(value * 10) / 10;
+}
+var TIME_TITLES = [
+  "Task throughput",
+  "Approvals over time",
+  "Inbox volume",
+  "Agent tool calls",
+  "Webhook deliveries"
+];
+var CATEGORY_TITLES = [
+  "Tasks by status",
+  "Approvals by team",
+  "Volume by region",
+  "Spend by category",
+  "Tickets by priority"
+];
+var TIME_SERIES_KEYS = [
+  ["value"],
+  ["created", "handled"],
+  ["open", "handled", "expired"]
+];
+var CATEGORY_SERIES_KEYS = [
+  ["value"],
+  ["revenue", "costs"],
+  ["approved", "rejected", "pending"]
+];
+var CATEGORIES = [
+  ["North", "South", "East", "West", "Central"],
+  ["Finance", "Ops", "Support", "Engineering", "Sales"],
+  ["P0", "P1", "P2", "P3", "P4"],
+  ["Draft", "Open", "Handled", "Expired", "Cancelled"]
+];
+function formatDate(daysAgo) {
+  const date = /* @__PURE__ */ new Date();
+  date.setUTCHours(0, 0, 0, 0);
+  date.setUTCDate(date.getUTCDate() - daysAgo);
+  return date.toISOString().slice(0, 10);
+}
+function buildSeriesPoints(args) {
+  const { rng, axis, seriesKeys, pointCount } = args;
+  const baselines = seriesKeys.map(() => 20 + rng() * 80);
+  if (axis === "time") {
+    return Array.from({ length: pointCount }, (_, index) => {
+      const point = {
+        date: formatDate(pointCount - 1 - index)
+      };
+      for (let i = 0; i < seriesKeys.length; i++) {
+        const drift = (rng() - 0.45) * 12;
+        baselines[i] = Math.max(1, baselines[i] + drift);
+        point[seriesKeys[i]] = roundMetric(baselines[i]);
+      }
+      return point;
+    });
+  }
+  const labels = pick(rng, CATEGORIES).slice(0, pointCount);
+  return labels.map((label) => {
+    const point = { category: label };
+    for (let i = 0; i < seriesKeys.length; i++) {
+      point[seriesKeys[i]] = roundMetric(8 + rng() * 120);
+    }
+    return point;
+  });
+}
+function buildRandomChartData(input = {}) {
+  const rng = createRng(input.seed);
+  const axis = input.axis === "time" || input.axis === "category" ? input.axis : pick(rng, ["time", "category"]);
+  const seriesCount = input.seriesCount ?? randomInt(rng, 1, 2);
+  const pointCount = input.pointCount ?? (axis === "time" ? randomInt(rng, 8, 14) : randomInt(rng, 4, 6));
+  const keyPool = axis === "time" ? TIME_SERIES_KEYS : CATEGORY_SERIES_KEYS;
+  const seriesKeys = keyPool.find((keys) => keys.length === seriesCount) ?? keyPool[0];
+  const title = pick(rng, axis === "time" ? TIME_TITLES : CATEGORY_TITLES);
+  const series = buildSeriesPoints({
+    rng,
+    axis,
+    seriesKeys,
+    pointCount
+  });
+  return { title, axis, series };
+}
+function defineGenerateRandomChartTool() {
+  return defineTool5({
+    description: "Generate random chart-ready demo metrics for testing chat chart UI. Results render as a chart card \u2014 do not restate series values in your reply.",
+    inputSchema: generateRandomChartInputSchema,
+    outputSchema: generateRandomChartOutputSchema,
+    async execute(input) {
+      const data = buildRandomChartData(input);
+      return formatToolObjectResult(data, {
+        replyGuidance: GENERATE_RANDOM_CHART_REPLY_GUIDANCE,
+        uiHint: "chart",
+        ui: {
+          layout: "chart",
+          rowsPath: "series",
+          entity: "metric_point",
+          present: true
+        }
+      });
+    }
+  });
+}
+var generateRandomChartTool = defineGenerateRandomChartTool();
+
+// src/eve/tools/catalog/generate-image.ts
+import { createOpenRouter } from "@openrouter/ai-sdk-provider";
+import { createGateway, generateImage } from "ai";
+import { defineTool as defineTool6 } from "eve/tools";
+import { z as z12 } from "zod";
+var GENERATE_IMAGE_TOOL_NAME = "generate_image";
+var DEFAULT_IMAGE_MODEL = "black-forest-labs/flux.2-klein-4b";
+var DEFAULT_IMAGE_SIZE = "512";
+var DEFAULT_IMAGE_ASPECT_RATIO = "1:1";
+var generateImageInputSchema = z12.object({
+  prompt: z12.string().min(1).describe("Detailed description of the image to generate")
+});
+function normalizeEnvValue(value) {
+  if (!value) {
+    return void 0;
+  }
+  return value.replace(/^["']|["']$/g, "");
+}
+function isJwtExpired(token, bufferSeconds = 60) {
+  try {
+    const payload = JSON.parse(
+      Buffer.from(token.split(".")[1] ?? "", "base64url").toString("utf8")
+    );
+    return typeof payload.exp !== "number" || Date.now() / 1e3 >= payload.exp - bufferSeconds;
+  } catch {
+    return true;
+  }
+}
+function resolveAiImageModel(modelId = normalizeEnvValue(process.env.AI_IMAGE_MODEL) ?? DEFAULT_IMAGE_MODEL) {
+  const openRouterKey = normalizeEnvValue(process.env.OPENROUTER_API_KEY);
+  if (openRouterKey) {
+    const openrouter = createOpenRouter({ apiKey: openRouterKey });
+    return {
+      provider: "openrouter",
+      model: openrouter.imageModel(modelId),
+      modelId
+    };
+  }
+  const gatewayKey = normalizeEnvValue(process.env.AI_GATEWAY_API_KEY);
+  if (gatewayKey) {
+    const gateway2 = createGateway({ apiKey: gatewayKey });
+    return {
+      provider: "ai-gateway-api-key",
+      model: gateway2.imageModel(modelId),
+      modelId
+    };
+  }
+  const oidcToken = normalizeEnvValue(process.env.VERCEL_OIDC_TOKEN);
+  if (!oidcToken) {
+    throw new Error(
+      `No AI provider credentials for image model "${modelId}". Set OPENROUTER_API_KEY (preferred), or AI_GATEWAY_API_KEY / VERCEL_OIDC_TOKEN.`
+    );
+  }
+  if (isJwtExpired(oidcToken)) {
+    throw new Error(
+      "VERCEL_OIDC_TOKEN is expired. Set OPENROUTER_API_KEY instead, or refresh the OIDC token."
+    );
+  }
+  process.env.VERCEL_OIDC_TOKEN = oidcToken;
+  const gateway = createGateway();
+  return {
+    provider: "ai-gateway-oidc",
+    model: gateway.imageModel(modelId),
+    modelId
+  };
+}
+function resolveAiImageSize() {
+  return normalizeEnvValue(process.env.AI_IMAGE_SIZE) ?? DEFAULT_IMAGE_SIZE;
+}
+function resolveAiImageAspectRatio() {
+  return normalizeEnvValue(process.env.AI_IMAGE_ASPECT_RATIO) ?? DEFAULT_IMAGE_ASPECT_RATIO;
+}
+function extensionForMediaType(mediaType) {
+  const normalized = mediaType.toLowerCase();
+  if (normalized.includes("jpeg") || normalized.includes("jpg")) return "jpg";
+  if (normalized.includes("webp")) return "webp";
+  if (normalized.includes("gif")) return "gif";
+  return "png";
+}
+function filenameFromImagePrompt(prompt, mediaType) {
+  const slug = prompt.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
+  return `${slug || "generated-image"}.${extensionForMediaType(mediaType)}`;
+}
+async function generateImageBytes(input, options) {
+  const { model, modelId } = resolveAiImageModel();
+  const size = resolveAiImageSize();
+  const aspectRatio = resolveAiImageAspectRatio();
+  try {
+    const { image } = await generateImage({
+      model,
+      prompt: input.prompt,
+      aspectRatio,
+      abortSignal: options?.abortSignal,
+      size
+    });
+    if (!image.base64) {
+      throw new Error(`Image model "${modelId}" returned no image data.`);
+    }
+    return {
+      prompt: input.prompt,
+      mediaType: image.mediaType || "image/png",
+      model: modelId,
+      base64: image.base64
+    };
+  } catch (error) {
+    const message = error instanceof Error ? error.message : "Image generation failed.";
+    throw new Error(`Image generation failed (${modelId}): ${message}`);
+  }
+}
+function defineGenerateImageTool() {
+  return defineTool6({
+    description: "Generate an image from a text prompt using a cheap/fast image model. Use when the user asks to draw, create, or generate a picture or illustration. The image renders in chat UI \u2014 do not describe the pixels in your reply.",
+    inputSchema: generateImageInputSchema,
+    outputSchema: generateImageOutputSchema,
+    toModelOutput(output) {
+      return {
+        type: "text",
+        value: `Generated an image for: "${output.prompt}" (model: ${output.model}).`
+      };
+    },
+    async execute(input, ctx) {
+      const caller = tryResolveTenantCaller(ctx);
+      const chatId = caller?.chatId?.trim();
+      if (!chatId) {
+        throw new Error(
+          "generate_image requires a dashboard chat session (missing chatId)."
+        );
+      }
+      const client = tryCreateBoundRobotRockClient(ctx);
+      if (!client) {
+        throw new Error(
+          "RobotRock auth is unset. Configure ROBOTROCK_AGENT_SERVICE_TOKEN for hosted agents or ROBOTROCK_API_KEY for self-hosted deployments."
+        );
+      }
+      const generated = await generateImageBytes(input, {
+        abortSignal: ctx?.abortSignal
+      });
+      const uploaded = await client.chats.uploadImage({
+        mediaType: generated.mediaType,
+        base64: generated.base64,
+        chatId,
+        source: GENERATE_IMAGE_TOOL_NAME,
+        filename: filenameFromImagePrompt(generated.prompt, generated.mediaType),
+        description: generated.prompt,
+        tags: [GENERATE_IMAGE_TOOL_NAME]
+      });
+      return formatToolObjectResult(
+        {
+          prompt: generated.prompt,
+          mediaType: uploaded.mediaType || generated.mediaType,
+          model: generated.model,
+          storageId: uploaded.storageId,
+          url: uploaded.url
+        },
+        {
+          replyGuidance: GENERATE_IMAGE_REPLY_GUIDANCE,
+          ui: {
+            present: true,
+            entity: "generated_image"
+          }
+        }
+      );
+    }
+  });
+}
+var generateImageTool = defineGenerateImageTool();
+
 // src/agent-admin.ts
 async function agentAdminFetch(config, path, init) {
   const baseUrl = (config.baseUrl?.trim() || getRobotRockApiBaseUrl()).replace(
@@ -2084,6 +2680,9 @@ async function agentAdminFetch(config, path, init) {
 }
 function createAgentAdminApi(config) {
   return {
+    usage: {
+      get: () => agentAdminFetch(config, "/usage")
+    },
     members: {
       list: () => agentAdminFetch(config, "/members"),
       get: (memberRef) => agentAdminFetch(config, `/members/${encodeURIComponent(memberRef)}`),
@@ -2227,53 +2826,45 @@ function requireBoundAgentAdminClient(ctx) {
 }
 
 // src/eve/tools/admin/format-team-members-list.ts
-var MEMBER_DETAIL_UI = {
-  name: { "ui:title": "Name" },
-  email: { "ui:title": "Email" },
-  role: { "ui:title": "Role" },
-  membershipKind: { "ui:title": "Membership" }
-};
 function serializeMemberRow(member) {
   return {
     name: member.user.name,
     email: member.user.email,
     role: member.role,
-    membershipKind: member.membershipKind
+    membershipKind: member.membershipKind,
+    profilePictureUrl: member.user.profilePictureUrl ?? null
   };
 }
 function formatTeamMembersListResult(members) {
-  const countLabel = members.length === 1 ? "1 team member" : `${members.length} team members`;
   return formatToolListResult(
     "members",
     members.map(serializeMemberRow),
     {
-      title: countLabel,
-      itemWidget: "tenantMember",
-      replyGuidance: MANAGE_TEAM_MEMBERS_LIST_REPLY_GUIDANCE
+      replyGuidance: MANAGE_TEAM_MEMBERS_LIST_REPLY_GUIDANCE,
+      entity: "member"
     }
   );
 }
-function formatTeamMemberDetailResult(member, options) {
+function formatTeamMemberDetailResult(member) {
   return formatToolObjectResult(serializeMemberRow(member), {
-    title: options?.title ?? member.user.name,
-    ui: MEMBER_DETAIL_UI,
-    replyGuidance: MANAGE_TEAM_MEMBERS_DETAIL_REPLY_GUIDANCE
+    replyGuidance: MANAGE_TEAM_MEMBERS_DETAIL_REPLY_GUIDANCE,
+    ui: { entity: "member" }
   });
 }
 
 // src/eve/tools/admin/manage-team-members.ts
-import { defineTool as defineTool5 } from "eve/tools";
-import { z as z10 } from "zod";
+import { defineTool as defineTool7 } from "eve/tools";
+import { z as z13 } from "zod";
 var MANAGE_TEAM_MEMBERS_TOOL_NAME = "manage_team_members";
-var manageTeamMembersInputSchema = z10.object({
-  action: z10.enum(["list", "get", "invite", "update_role", "remove"]),
-  userId: z10.string().min(1).optional().describe(
+var manageTeamMembersInputSchema = z13.object({
+  action: z13.enum(["list", "get", "invite", "update_role", "remove"]),
+  userId: z13.string().min(1).optional().describe(
     "Convex users table id for get, update_role, and remove. Prefer email when the member list only shows email."
   ),
-  email: z10.string().email().optional().describe(
+  email: z13.string().email().optional().describe(
     "Member email for get, update_role, and remove; invitee email for invite."
   ),
-  role: z10.enum(["admin", "member"]).optional().describe("Role for invite and update_role.")
+  role: z13.enum(["admin", "member"]).optional().describe("Role for invite and update_role.")
 }).superRefine((input, ctx) => {
   const requireField = (field, message) => {
     if (!input[field]) {
@@ -2308,20 +2899,16 @@ var manageTeamMembersInputSchema = z10.object({
 function resolveMemberRef(input) {
   return input.userId ?? input.email;
 }
-function formatMemberMutationResult(payload, title) {
+function formatMemberMutationResult(payload) {
   return formatToolObjectResult(payload, {
-    title,
-    ui: {
-      success: { "ui:title": "Success", "ui:widget": "boolean" },
-      promoted: { "ui:title": "Promoted existing user", "ui:widget": "boolean" }
-    },
     replyGuidance: ADMIN_MUTATION_REPLY_GUIDANCE
   });
 }
 function defineManageTeamMembersTool() {
-  return defineTool5({
-    description: "Tenant-admin tool for workspace team members: list, get, invite, change role, or remove. Requires tenant admin access. Use member email from list results for get, update_role, and remove \u2014 internal ids are optional. Results render as chat UI cards \u2014 do not restate member names, emails, or roles in your reply.",
+  return defineTool7({
+    description: "Tenant-admin tool for workspace team members: list, get, invite, change role, or remove. Requires tenant admin access. Call get_my_access in the same turn before this tool to verify admin access (the check stays a compact success marker unless it is the only presentable result). Use member email from list results for get, update_role, and remove \u2014 internal ids are optional. Results render as chat UI cards \u2014 do not restate member names, emails, or roles in your reply.",
     inputSchema: manageTeamMembersInputSchema,
+    outputSchema: manageTeamMembersOutputSchema,
     async execute(input, ctx) {
       const api = requireBoundAgentAdminClient(ctx);
       try {
@@ -2343,13 +2930,11 @@ function defineManageTeamMembersTool() {
             });
             if (result.member) {
               return formatTeamMemberDetailResult(
-                result.member,
-                { title: "Member invited" }
+                result.member
               );
             }
             return formatMemberMutationResult(
-              result,
-              "Invitation sent"
+              result
             );
           }
           case "update_role": {
@@ -2358,16 +2943,14 @@ function defineManageTeamMembersTool() {
               input.role
             );
             return formatMemberMutationResult(
-              result,
-              "Member role updated"
+              result
             );
           }
           case "remove": {
             const memberId = resolveMemberRef(input);
             const result = await api.members.remove(memberId);
             return formatMemberMutationResult(
-              result,
-              "Member removed"
+              result
             );
           }
         }
@@ -2388,78 +2971,59 @@ function defineManageTeamMembersTool() {
 var manageTeamMembersTool = defineManageTeamMembersTool();
 
 // src/eve/tools/admin/manage-groups.ts
-import { defineTool as defineTool6 } from "eve/tools";
-import { z as z11 } from "zod";
+import { defineTool as defineTool8 } from "eve/tools";
+import { z as z14 } from "zod";
 
 // src/eve/tools/admin/format-groups-list.ts
-var GROUP_ITEM_UI = {
-  name: { "ui:title": "Name" },
-  slug: { "ui:title": "Slug" },
-  description: { "ui:title": "Description" },
-  memberCount: { "ui:title": "Members", "ui:widget": "number" }
-};
-function serializeGroupRow(group) {
+function serializeGroupRow(group, tenantSlug) {
   return {
     name: group.name,
     slug: group.slug,
     description: group.description,
-    memberCount: group.memberCount ?? null
+    memberCount: group.memberCount ?? null,
+    url: buildTenantGroupUrl(tenantSlug, group.slug)
   };
 }
-function formatGroupsListResult(groups) {
-  const countLabel = groups.length === 1 ? "1 group" : `${groups.length} groups`;
+function formatGroupsListResult(groups, options) {
   return formatToolListResult(
     "groups",
-    groups.map(serializeGroupRow),
+    groups.map((group) => serializeGroupRow(group, options.tenantSlug)),
     {
-      title: countLabel,
-      itemWidget: "tenantGroup",
-      replyGuidance: MANAGE_GROUPS_LIST_REPLY_GUIDANCE
+      replyGuidance: MANAGE_GROUPS_LIST_REPLY_GUIDANCE,
+      entity: "group"
     }
   );
 }
-function formatGroupDetailResult(group) {
+function formatGroupDetailResult(group, options) {
   return formatToolObjectResult(
     {
       name: group.name,
       slug: group.slug,
       description: group.description,
+      url: buildTenantGroupUrl(options.tenantSlug, group.slug),
       members: group.members.map((member) => ({
         name: member.user.name,
-        email: member.user.email
+        email: member.user.email,
+        profilePictureUrl: member.user.profilePictureUrl ?? null
       }))
     },
     {
-      title: group.name,
-      ui: {
-        name: { "ui:title": "Name" },
-        slug: { "ui:title": "Slug" },
-        description: { "ui:title": "Description" },
-        members: {
-          "ui:widget": "list",
-          "ui:title": "Members",
-          items: {
-            name: { "ui:title": "Name" },
-            email: { "ui:title": "Email" }
-          }
-        }
-      },
-      replyGuidance: MANAGE_GROUPS_DETAIL_REPLY_GUIDANCE
+      replyGuidance: MANAGE_GROUPS_DETAIL_REPLY_GUIDANCE,
+      ui: { entity: "group" }
     }
   );
 }
-function formatGroupSummaryResult(group) {
-  return formatToolObjectResult(serializeGroupRow(group), {
-    title: group.name,
-    ui: GROUP_ITEM_UI,
-    replyGuidance: MANAGE_GROUPS_DETAIL_REPLY_GUIDANCE
+function formatGroupSummaryResult(group, options) {
+  return formatToolObjectResult(serializeGroupRow(group, options.tenantSlug), {
+    replyGuidance: MANAGE_GROUPS_DETAIL_REPLY_GUIDANCE,
+    ui: { entity: "group" }
   });
 }
 
 // src/eve/tools/admin/manage-groups.ts
 var MANAGE_GROUPS_TOOL_NAME = "manage_groups";
-var manageGroupsInputSchema = z11.object({
-  action: z11.enum([
+var manageGroupsInputSchema = z14.object({
+  action: z14.enum([
     "list",
     "get",
     "create",
@@ -2468,18 +3032,18 @@ var manageGroupsInputSchema = z11.object({
     "add_member",
     "remove_member"
   ]),
-  groupId: z11.string().min(1).optional().describe(
+  groupId: z14.string().min(1).optional().describe(
     "Convex group id for get, update, delete, and membership actions. Prefer slug when the group list only shows slug."
   ),
-  slug: z11.string().min(1).optional().describe(
+  slug: z14.string().min(1).optional().describe(
     "Group slug (e.g. finance) for get, update, delete, and membership actions."
   ),
-  userId: z11.string().min(1).optional().describe(
+  userId: z14.string().min(1).optional().describe(
     "User id for add_member and remove_member. Prefer email when the member list only shows email."
   ),
-  email: z11.string().email().optional().describe("Member email for add_member and remove_member."),
-  name: z11.string().min(1).optional().describe("Group name for create and update."),
-  description: z11.string().optional().describe("Group description for create and update.")
+  email: z14.string().email().optional().describe("Member email for add_member and remove_member."),
+  name: z14.string().min(1).optional().describe("Group name for create and update."),
+  description: z14.string().optional().describe("Group description for create and update.")
 }).superRefine((input, ctx) => {
   const requireField = (field, message) => {
     if (!input[field]) {
@@ -2520,9 +3084,8 @@ var manageGroupsInputSchema = z11.object({
       break;
   }
 });
-function formatGroupMutationResult(payload, title) {
+function formatGroupMutationResult(payload) {
   return formatToolObjectResult(payload, {
-    title,
     replyGuidance: ADMIN_MUTATION_REPLY_GUIDANCE
   });
 }
@@ -2533,40 +3096,51 @@ function resolveMemberRef2(input) {
   return input.userId ?? input.email;
 }
 function defineManageGroupsTool() {
-  return defineTool6({
-    description: "Tenant-admin tool for workspace groups: list, get, create, update, delete, and manage group membership. Requires tenant admin access. Use group slug (e.g. finance) from list results for get and membership actions \u2014 internal ids are optional. Use member email for add_member and remove_member when user ids are unknown. Results render as chat UI cards \u2014 do not restate group or member fields in your reply.",
+  return defineTool8({
+    description: "Tenant-admin tool for workspace groups: list, get, create, update, delete, and manage group membership. Requires tenant admin access. Call get_my_access in the same turn before this tool to verify admin access (the check stays a compact success marker unless it is the only presentable result). Use group slug (e.g. finance) from list results for get and membership actions \u2014 internal ids are optional. Use member email for add_member and remove_member when user ids are unknown. Results render as chat UI cards \u2014 do not restate group or member fields in your reply.",
     inputSchema: manageGroupsInputSchema,
+    outputSchema: manageGroupsOutputSchema,
     async execute(input, ctx) {
+      const caller = requireAdminCaller(ctx);
       const api = requireBoundAgentAdminClient(ctx);
+      const tenantSlug = caller.tenantSlug;
       try {
         switch (input.action) {
           case "list": {
             const result = await api.groups.list();
-            return formatGroupsListResult(result.groups);
+            return formatGroupsListResult(result.groups, {
+              tenantSlug
+            });
           }
           case "get": {
             const result = await api.groups.get(resolveGroupRef(input));
-            return formatGroupDetailResult(result.group);
+            return formatGroupDetailResult(
+              result.group,
+              { tenantSlug }
+            );
           }
           case "create": {
             const result = await api.groups.create({
               name: input.name,
               description: input.description
             });
-            return formatGroupSummaryResult(result.group);
+            return formatGroupSummaryResult(result.group, {
+              tenantSlug
+            });
           }
           case "update": {
             const result = await api.groups.update(resolveGroupRef(input), {
               name: input.name,
               description: input.description
             });
-            return formatGroupSummaryResult(result.group);
+            return formatGroupSummaryResult(result.group, {
+              tenantSlug
+            });
           }
           case "delete": {
             const result = await api.groups.delete(resolveGroupRef(input));
             return formatGroupMutationResult(
-              result,
-              "Group deleted"
+              result
             );
           }
           case "add_member": {
@@ -2575,8 +3149,7 @@ function defineManageGroupsTool() {
               resolveMemberRef2(input)
             );
             return formatGroupMutationResult(
-              result,
-              "Group member added"
+              result
             );
           }
           case "remove_member": {
@@ -2585,8 +3158,7 @@ function defineManageGroupsTool() {
               resolveMemberRef2(input)
             );
             return formatGroupMutationResult(
-              result,
-              "Group member removed"
+              result
             );
           }
         }
@@ -2607,120 +3179,101 @@ function defineManageGroupsTool() {
 var manageGroupsTool = defineManageGroupsTool();
 
 // src/eve/tools/admin/query-tasks.ts
-import { defineTool as defineTool7 } from "eve/tools";
-import { z as z12 } from "zod";
+import { defineTool as defineTool9 } from "eve/tools";
+import { z as z15 } from "zod";
 
 // src/eve/tools/admin/format-tasks-list.ts
 function resolveTaskCardLabel(task) {
   return task.name?.trim() || task.description?.trim() || task.type?.trim() || task.id?.trim() || "Untitled task";
 }
-function formatTasksListResult(items, options) {
-  const title = options?.title ?? (items.length === 1 ? "1 task" : `${items.length} tasks`);
-  const result = formatToolListResult(
-    "items",
-    items.map((task) => ({
+function serializeTaskRow(task, tenantSlug) {
+  return {
+    id: task.id,
+    name: resolveTaskCardLabel(task),
+    status: task.status,
+    type: task.type,
+    description: task.description,
+    validUntil: task.validUntil,
+    createdAt: task.createdAt,
+    threadPriority: task.threadPriority,
+    url: buildTenantTaskUrl(tenantSlug, {
       id: task.id,
-      name: resolveTaskCardLabel(task),
-      status: task.status,
-      type: task.type,
-      description: task.description
-    })),
-    {
-      title,
-      itemWidget: "tenantTask",
-      replyGuidance: QUERY_TASKS_LIST_REPLY_GUIDANCE
-    }
-  );
-  if (options?.nextCursor) {
-    return {
-      ...result,
-      data: {
-        ...result.data,
-        nextCursor: options.nextCursor
-      },
-      display: {
-        ...result.display,
-        description: "More tasks available \u2014 pass nextCursor to list again."
-      }
-    };
-  }
-  return result;
+      type: task.type
+    })
+  };
 }
-function formatTaskSearchResult(items, total) {
-  return formatTasksListResult(items, {
-    title: total === 1 ? "1 matching task" : `${total} matching tasks`
+function formatTasksListResult(items, options) {
+  const payload = {
+    items: items.map((task) => serializeTaskRow(task, options.tenantSlug))
+  };
+  if (options.nextCursor) {
+    payload.nextCursor = options.nextCursor;
+  }
+  return formatToolObjectResult(payload, {
+    replyGuidance: QUERY_TASKS_LIST_REPLY_GUIDANCE,
+    ui: { layout: "list", entity: "task", rowsPath: "items" }
   });
 }
-function formatTaskDetailResult(task) {
-  const title = resolveTaskCardLabel({
-    name: typeof task.name === "string" ? task.name : null,
-    description: typeof task.description === "string" ? task.description : null,
-    type: typeof task.type === "string" ? task.type : null,
-    id: typeof task.id === "string" ? task.id : null
-  });
+function formatTaskSearchResult(items, options) {
+  return formatTasksListResult(items, options);
+}
+function formatTaskDetailResult(task, options) {
+  const id = typeof task.id === "string" ? task.id : null;
+  const type = typeof task.type === "string" ? task.type : null;
+  const url = id !== null ? buildTenantTaskUrl(options.tenantSlug, { id, type }) : null;
   return formatToolObjectResult(
     {
-      id: task.id ?? null,
-      status: task.status ?? null,
-      type: task.type ?? null,
-      name: task.name ?? null,
-      description: task.description ?? null,
-      validUntil: task.validUntil ?? null,
-      createdAt: task.createdAt ?? null
+      id,
+      status: typeof task.status === "string" ? task.status : null,
+      type,
+      name: typeof task.name === "string" ? task.name : null,
+      description: typeof task.description === "string" ? task.description : null,
+      validUntil: typeof task.validUntil === "number" ? task.validUntil : null,
+      createdAt: typeof task.createdAt === "number" ? task.createdAt : null,
+      url
     },
     {
-      title,
-      ui: {
-        id: { "ui:title": "Task ID" },
-        status: { "ui:title": "Status" },
-        type: { "ui:title": "Type" },
-        name: { "ui:title": "Name" },
-        description: { "ui:title": "Description" },
-        validUntil: { "ui:title": "Valid until", "ui:widget": "date" },
-        createdAt: { "ui:title": "Created", "ui:widget": "date" }
-      },
-      replyGuidance: QUERY_TASKS_DETAIL_REPLY_GUIDANCE
+      replyGuidance: QUERY_TASKS_DETAIL_REPLY_GUIDANCE,
+      ui: { entity: "task" }
     }
   );
 }
-function formatAssignTasksResult(results, _assignTo) {
-  const succeeded = results.filter((row) => row.success).length;
-  const title = succeeded === results.length ? `${succeeded === 1 ? "1 task" : `${succeeded} tasks`} reassigned` : `${succeeded}/${results.length} tasks reassigned`;
-  return formatToolListResult(
-    "results",
-    results.map((row) => ({
+function formatAssignTasksResult(results, _assignTo, options) {
+  const rows = results.map((row) => ({
+    id: row.taskId,
+    name: resolveTaskCardLabel({
+      name: row.name,
+      description: row.description,
+      type: row.type,
+      id: row.taskId
+    }),
+    type: row.type ?? null,
+    description: row.description ?? null,
+    status: row.success ? "reassigned" : "failed",
+    url: buildTenantTaskUrl(options.tenantSlug, {
       id: row.taskId,
-      name: resolveTaskCardLabel({
-        name: row.name,
-        description: row.description,
-        type: row.type,
-        id: row.taskId
-      }),
-      type: row.type ?? null,
-      description: row.description ?? null,
-      status: row.success ? "reassigned" : "failed"
-    })),
-    {
-      title,
-      itemWidget: "tenantTask",
-      replyGuidance: ASSIGN_TASKS_REPLY_GUIDANCE
-    }
-  );
+      type: row.type
+    })
+  }));
+  return formatToolListResult("results", rows, {
+    replyGuidance: ASSIGN_TASKS_REPLY_GUIDANCE,
+    entity: "status"
+  });
 }
 
 // src/eve/tools/admin/query-tasks.ts
 var QUERY_TASKS_TOOL_NAME = "query_tasks";
-var queryTasksInputSchema = z12.object({
-  action: z12.enum(["list", "get", "search"]),
-  statusFilter: z12.enum(["all", "open", "handled", "expired"]).optional().describe("Filter by task status for list."),
-  typeFilter: z12.string().optional(),
-  appFilter: z12.string().optional(),
-  sortField: z12.enum(["type", "date", "status", "validUntil"]).optional(),
-  sortDirection: z12.enum(["asc", "desc"]).optional(),
-  limit: z12.number().int().positive().max(100).optional(),
-  cursor: z12.string().optional(),
-  taskId: z12.string().min(1).optional().describe("Public task id or Convex tasks table id for get."),
-  query: z12.string().min(1).optional().describe("Search type, name, description, or id for search.")
+var queryTasksInputSchema = z15.object({
+  action: z15.enum(["list", "get", "search"]),
+  statusFilter: z15.enum(["all", "open", "handled", "expired"]).optional().describe("Filter by task status for list."),
+  typeFilter: z15.string().optional(),
+  appFilter: z15.string().optional(),
+  sortField: z15.enum(["type", "date", "status", "validUntil"]).optional(),
+  sortDirection: z15.enum(["asc", "desc"]).optional(),
+  limit: z15.number().int().positive().max(100).optional(),
+  cursor: z15.string().optional(),
+  taskId: z15.string().min(1).optional().describe("Public task id or Convex tasks table id for get."),
+  query: z15.string().min(1).optional().describe("Search type, name, description, or id for search.")
 }).superRefine((input, ctx) => {
   switch (input.action) {
     case "get":
@@ -2744,11 +3297,14 @@ var queryTasksInputSchema = z12.object({
   }
 });
 function defineQueryTasksTool() {
-  return defineTool7({
-    description: "Tenant-admin tool to list, fetch detail, or search inbox tasks in the workspace. Requires tenant admin access. Results render as chat UI cards \u2014 do not restate task names, ids, or statuses in your reply.",
+  return defineTool9({
+    description: "Tenant-admin tool to list, fetch detail, or search inbox tasks in the workspace. Requires tenant admin access. Call get_my_access in the same turn before this tool to verify admin access (the check stays a compact success marker unless it is the only presentable result). Results render as chat UI cards \u2014 do not restate task names, ids, or statuses in your reply.",
     inputSchema: queryTasksInputSchema,
+    outputSchema: queryTasksOutputSchema,
     async execute(input, ctx) {
+      const caller = requireAdminCaller(ctx);
       const api = requireBoundAgentAdminClient(ctx);
+      const tenantSlug = caller.tenantSlug;
       try {
         switch (input.action) {
           case "list": {
@@ -2762,18 +3318,22 @@ function defineQueryTasksTool() {
               cursor: input.cursor
             });
             return formatTasksListResult(result.items, {
+              tenantSlug,
               nextCursor: result.nextCursor
             });
           }
           case "get": {
             const result = await api.tasks.get(input.taskId);
-            return formatTaskDetailResult(result.task);
+            return formatTaskDetailResult(
+              result.task,
+              { tenantSlug }
+            );
           }
           case "search": {
             const result = await api.tasks.search(input.query, input.limit);
             return formatTaskSearchResult(
               result.items,
-              result.total
+              { tenantSlug }
             );
           }
         }
@@ -2794,11 +3354,11 @@ function defineQueryTasksTool() {
 var queryTasksTool = defineQueryTasksTool();
 
 // src/eve/tools/admin/assign-tasks.ts
-import { defineTool as defineTool8 } from "eve/tools";
-import { z as z13 } from "zod";
+import { defineTool as defineTool10 } from "eve/tools";
+import { z as z16 } from "zod";
 var ASSIGN_TASKS_TOOL_NAME = "assign_tasks";
-var assignTasksInputSchema = z13.object({
-  taskIds: z13.array(z13.string().min(1)).min(1).max(100).describe(
+var assignTasksInputSchema = z16.object({
+  taskIds: z16.array(z16.string().min(1)).min(1).max(100).describe(
     "Public task ids or Convex tasks table ids to reassign. Use query_tasks search/get to resolve ids first."
   ),
   assignTo: assignToSchema.refine(
@@ -2809,17 +3369,21 @@ var assignTasksInputSchema = z13.object({
   )
 });
 function defineAssignTasksTool() {
-  return defineTool8({
+  return defineTool10({
     description: "Reassign existing inbox tasks to users or groups. Requires access to each task (tenant admins can reassign any task; others only tasks they can see). Use query_tasks to find task ids when needed. Results render as chat UI \u2014 do not restate task ids or assignees in your reply.",
     inputSchema: assignTasksInputSchema,
+    outputSchema: assignTasksOutputSchema,
     async execute(input, ctx) {
+      const caller = requireTenantCaller(ctx);
       const api = createBoundAgentAdminClient(ctx);
       try {
         const result = await api.tasks.assign({
           taskIds: input.taskIds,
           assignTo: input.assignTo
         });
-        return formatAssignTasksResult(result.results, input.assignTo);
+        return formatAssignTasksResult(result.results, input.assignTo, {
+          tenantSlug: caller.tenantSlug
+        });
       } catch (error) {
         if (error instanceof RobotRockError) {
           return {
@@ -2836,6 +3400,72 @@ function defineAssignTasksTool() {
 }
 var assignTasksTool = defineAssignTasksTool();
 
+// src/eve/tools/admin/get-workspace-usage.ts
+import { defineTool as defineTool11 } from "eve/tools";
+import { z as z17 } from "zod";
+
+// src/eve/tools/admin/format-workspace-usage.ts
+function formatLimit(current, max) {
+  return max === null ? `${current} / unlimited` : `${current} / ${max}`;
+}
+function formatWorkspaceUsageResult(usage) {
+  const tasksLimit = usage.maxTasksPerDay === null ? `${usage.tasksToday} / unlimited` : `${usage.tasksToday} / ${usage.maxTasksPerDay}`;
+  return formatToolObjectResult(
+    {
+      usage: {
+        workspace: usage.workspace,
+        plan: usage.planName,
+        planType: usage.planType,
+        trialState: usage.trialState,
+        daysRemaining: usage.daysRemaining,
+        isPaidPro: usage.isPaidPro,
+        subscriptionStatus: usage.subscriptionStatus ?? "\u2014",
+        tasksToday: tasksLimit,
+        tasksResetAt: new Date(usage.tasksResetAt).toISOString(),
+        openTasks: usage.openTasks,
+        totalTasks: usage.totalTasks,
+        seats: formatLimit(usage.seatsCurrent, usage.seatsMax),
+        groups: formatLimit(usage.groupsCurrent, usage.groupsMax),
+        apiKeys: formatLimit(usage.apiKeysCurrent, usage.apiKeysMax),
+        rateLimitPerSecond: usage.rateLimitPerSecond
+      }
+    },
+    {
+      replyGuidance: GET_WORKSPACE_USAGE_REPLY_GUIDANCE,
+      ui: { entity: "usage" }
+    }
+  );
+}
+
+// src/eve/tools/admin/get-workspace-usage.ts
+var GET_WORKSPACE_USAGE_TOOL_NAME = "get_workspace_usage";
+var getWorkspaceUsageInputSchema = z17.object({});
+function defineGetWorkspaceUsageTool() {
+  return defineTool11({
+    description: "Tenant-admin tool for workspace plan, limits, and usage (tasks today, seats, groups, API keys, rate limits). Does not include LLM token counts or dollar spend \u2014 those are not tracked. Requires tenant admin access. Call get_my_access in the same turn before this tool. Results render as a chat UI card \u2014 do not restate plan or usage numbers in your reply.",
+    inputSchema: getWorkspaceUsageInputSchema,
+    outputSchema: getWorkspaceUsageOutputSchema,
+    async execute(_input, ctx) {
+      const api = requireBoundAgentAdminClient(ctx);
+      try {
+        const result = await api.usage.get();
+        return formatWorkspaceUsageResult(result.usage);
+      } catch (error) {
+        if (error instanceof RobotRockError) {
+          return {
+            ok: false,
+            status: error.statusCode,
+            message: error.message,
+            response: error.response
+          };
+        }
+        throw error;
+      }
+    }
+  });
+}
+var getWorkspaceUsageTool = defineGetWorkspaceUsageTool();
+
 // src/eve/tools/index.ts
 function createRobotrockTools(options) {
   const tools = {};
@@ -2853,6 +3483,9 @@ function createRobotrockTools(options) {
 export {
   ASSIGN_TASKS_TOOL_NAME,
   CREATE_INBOX_TASK_TOOL_NAME,
+  GENERATE_IMAGE_TOOL_NAME,
+  GENERATE_RANDOM_CHART_TOOL_NAME,
+  GET_WORKSPACE_USAGE_TOOL_NAME,
   MANAGE_GROUPS_TOOL_NAME,
   MANAGE_TEAM_MEMBERS_TOOL_NAME,
   MY_ACCESS_TOOL_NAME,
@@ -2861,17 +3494,28 @@ export {
   WHOAMI_TOOL_NAME,
   assignTasksInputSchema,
   assignTasksTool,
+  buildRandomChartData,
   createInboxTaskInputSchema,
   createInboxTaskTool,
   createRobotrockTools,
   defineAssignTasksTool,
   defineCreateInboxTaskTool,
+  defineGenerateImageTool,
+  defineGenerateRandomChartTool,
+  defineGetWorkspaceUsageTool,
   defineManageGroupsTool,
   defineManageTeamMembersTool,
   defineMyAccessTool,
   defineQueryTasksTool,
   defineSearchProductsTool,
   defineWhoamiTool,
+  generateImageBytes,
+  generateImageInputSchema,
+  generateImageTool,
+  generateRandomChartInputSchema,
+  generateRandomChartTool,
+  getWorkspaceUsageInputSchema,
+  getWorkspaceUsageTool,
   manageGroupsTool,
   manageTeamMembersTool,
   myAccessInputSchema,