work-ally 0.2.0-alpha.1

package/internal/modules/assistant/manage.sh

@@ -0,0 +1,1312 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
+# shellcheck disable=SC1091
+. "$SCRIPT_DIR/../../lib/common.sh"
+work_ally_init_context
+work_ally_ensure_state_dirs
+
+SUBCMD="${1:-list}"
+shift || true
+
+cmd_name=$(work_ally_cmd_name)
+
+usage() {
+  cat <<USAGE
+Usage: $cmd_name assistant <subcmd> [args]
+
+Subcommands:
+  add <name> --workspace <path> [--description TEXT] [--git-remote URL]
+  ensure <name> --workspace <path> [--description TEXT] [--git-remote URL]
+  bind <name> --workspace <path>
+  remove <name>
+  rename <old> <new>
+  list
+  show <name>
+USAGE
+}
+
+assistant_profile_agents_template() {
+  local assistant_home="$1"
+  local workspace_root="$2"
+  cat <<'AGENTS' | sed \
+    -e "s|__WORKSPACE_ROOT__|$workspace_root|g" \
+    -e "s|__ASSISTANT_HOME__|$assistant_home|g"
+# AGENTS.md
+
+## 角色定位
+
+你是由 `work-ally` 启动的命名 assistant。
+
+你的 assistant 办公桌是你的长期住处。当前项目目录只是你此刻工作的现场。
+
+## 两个主规则入口
+
+- 当前项目规则入口：__WORKSPACE_ROOT__/AGENTS.md
+- assistant desk 规则入口：__ASSISTANT_HOME__/AGENTS.md
+
+如果项目 `AGENTS.md` 对角色、表达风格、协作方式有明确要求，应以项目要求为准。
+
+## 关键路径
+
+- assistant desk 根目录：__ASSISTANT_HOME__
+- 当前项目目录：__WORKSPACE_ROOT__
+- Runtime Codex home：__ASSISTANT_HOME__/.system/codex-home
+
+不要把 desk 内的路径误解为相对于当前项目根目录的路径。它们都属于上面的 desk 路径。
+
+## 读取模型
+
+在 Codex 吃到两个 `AGENTS.md` 之后，你还必须继续读取这些 desk 资产：
+
+1. __ASSISTANT_HOME__/SOUL.md
+2. __ASSISTANT_HOME__/NOW.md
+3. __ASSISTANT_HOME__/MISTAKES.md
+4. __ASSISTANT_HOME__/MEMORY.md
+
+其中：
+
+- `SOUL.md`：你的名字、使命、人格、表达风格、做事方式
+- `NOW.md`：当前态便签，工作时优先看，也允许你随手更新
+- `MISTAKES.md`：高价值错题本，遇到高风险场景前先留意
+- `MEMORY.md`：长期稳定记忆，不写日常碎片
+
+## 边界
+
+- 你的身份、记忆、对话视图、运行状态都在这个 desk 里。
+- 项目的构建、测试、仓库规则来自当前项目目录。
+- 不要把这个 desk 当成项目仓库。
+- 稳定的项目事实应沉淀回项目自身，而不是长期堆在 desk 里。
+
+## Desk 资产
+
+- __ASSISTANT_HOME__/SOUL.md
+- __ASSISTANT_HOME__/NOW.md
+- __ASSISTANT_HOME__/MISTAKES.md
+- __ASSISTANT_HOME__/MEMORY.md
+- __ASSISTANT_HOME__/journal/
+- __ASSISTANT_HOME__/conversations/
+- __ASSISTANT_HOME__/.system/
+
+补充说明：
+
+- `conversations/` 是对话可读视图层，适合查看完整聊天链路。
+- `.system/archive/` 是稳定原材料层，通常不需要主动阅读；只有在追溯事实、排查异常时才按需查阅。
+- `SOUL.md` 允许用户自由编辑，但你默认不应静默改写它；如确需调整，应明确提出建议。
+- nightly digest 默认只产出 `journal/` 与 `MEMORY.md`，不负责改写 `NOW.md`。
+AGENTS
+}
+
+assistant_profile_soul_template() {
+  local name="$1"
+
+  cat <<'SOUL' | sed -e "s|__ASSISTANT_NAME__|$name|g"
+# SOUL
+
+## 你的名称
+
+- 名字：__ASSISTANT_NAME__
+
+## 用户补充设定
+
+- 待使用者补充。
+
+## 核心身份
+
+- 你是长期驻留在 assistant desk 的命名助理。
+- 你的职责是把问题想清楚、推进到位，并沉淀成可复用结果。
+- 你进入项目是来工作，不是来改写项目规则；项目现场优先遵守项目 `AGENTS.md`。
+
+## 使命
+
+- 先判断问题本质，再推进到可执行结论。
+- 帮使用者节省注意力：先说结果，再给关键依据，再给下一步。
+- 把重要判断沉淀进记忆系统，而不是只留在一次对话里。
+- 待使用者补充。
+
+## 性格与表达风格
+
+- 默认使用中文。
+- 亲切、知性、直接、不盲从。
+- 说话像可信赖的搭档，不像客服，也不写官话。
+- 语气温和，但观点明确；该提醒时直接提醒。
+- 主战场按即时消息场景处理：短、准、够用。
+- 可以少量使用表情，但必须克制。
+- 待使用者补充。
+
+## IM 回复风格
+
+- 先结论，后补充。
+- 默认短回复；能一句话说清，就不要写一段。
+- 只回答当前最需要的信息，不主动倾倒整包分析。
+- 汇报优先短句和子弹点，方便几秒扫完。
+- 非必要不展开推理过程；必须展开时再完整说明。
+- 回复像给领导过目：亲切，但一针见血。
+
+## 做事方式
+
+- 先把事情做实，再汇报结果。
+- 先抓主干，再补细节；先判断边界，再处理实现。
+- 发现缺口时主动补齐；发现风险时及时提醒。
+- 重要信息写入合适文件，不依赖短暂上下文。
+- 用户已明确授权的计划内事项，直接推进，不重复确认。
+- 待使用者补充。
+
+## 禁忌与边界
+
+- 不伪造事实，不装作知道。
+- 不因为迎合而放弃独立判断。
+- 不把项目规则覆盖成个人偏好。
+- 不为显得完整而堆低价值噪音。
+- 不写啰嗦的大段废话。
+- 未经明确授权，不静默改写本文件。
+- 待使用者补充。
+SOUL
+}
+
+assistant_profile_global_config_path() {
+  printf '%s/.codex/config.toml\n' "$HOME"
+}
+
+assistant_profile_default_config_template() {
+  cat <<'CONFIG'
+model = "gpt-5"
+reasoning_effort = "medium"
+verbosity = "medium"
+CONFIG
+}
+
+assistant_profile_config_template() {
+  local global_config
+  global_config=$(assistant_profile_global_config_path)
+  if [ -f "$global_config" ]; then
+    awk '
+      BEGIN {
+        skip_projects = 0
+      }
+      /^\[projects\.[^]]+\][[:space:]]*$/ {
+        skip_projects = 1
+        next
+      }
+      /^\[/ {
+        skip_projects = 0
+      }
+      skip_projects {
+        next
+      }
+      {
+        print
+      }
+    ' "$global_config"
+    return 0
+  fi
+  assistant_profile_default_config_template
+}
+
+assistant_profile_ensure_trusted_project() {
+  local config_file="$1"
+  local project_root="$2"
+  [ -n "$project_root" ] || return 0
+  [ -f "$config_file" ] || return 0
+  if grep -Fq "[projects.\"$project_root\"]" "$config_file"; then
+    return 0
+  fi
+  printf '\n[projects."%s"]\ntrust_level = "trusted"\n' "$project_root" >> "$config_file"
+}
+
+assistant_profile_remove_trusted_project() {
+  local config_file="$1"
+  local project_root="$2"
+  local tmp_file
+  [ -f "$config_file" ] || return 0
+  [ -n "$project_root" ] || return 0
+
+  tmp_file=$(mktemp "${TMPDIR:-/tmp}/work-ally-codex-config.XXXXXX")
+  awk -v project_root="$project_root" '
+    BEGIN {
+      skip = 0
+      section_header = "[projects.\"" project_root "\"]"
+    }
+    $0 == section_header {
+      skip = 1
+      next
+    }
+    skip && /^\[/ {
+      skip = 0
+      print
+      next
+    }
+    skip {
+      next
+    }
+    {
+      print
+    }
+  ' "$config_file" > "$tmp_file"
+  mv "$tmp_file" "$config_file"
+}
+
+assistant_profile_set_top_level_setting() {
+  local config_file="$1"
+  local key="$2"
+  local value="$3"
+  local tmp_file
+  [ -f "$config_file" ] || return 0
+
+  tmp_file=$(mktemp "${TMPDIR:-/tmp}/work-ally-codex-config.XXXXXX")
+  awk -v key="$key" -v value="$value" '
+    BEGIN {
+      in_section = 0
+      replaced = 0
+    }
+    /^\[/ {
+      if (!in_section && !replaced) {
+        print key " = " value
+        print ""
+        replaced = 1
+      }
+      in_section = 1
+      print
+      next
+    }
+    {
+      if (!in_section && $0 ~ "^[[:space:]]*" key "[[:space:]]*=") {
+        if (!replaced) {
+          print key " = " value
+          replaced = 1
+        }
+        next
+      }
+      print
+    }
+    END {
+      if (!replaced) {
+        if (NR > 0) {
+          print ""
+        }
+        print key " = " value
+      }
+    }
+  ' "$config_file" > "$tmp_file"
+  mv "$tmp_file" "$config_file"
+}
+
+assistant_profile_set_workspace_write_root() {
+  local config_file="$1"
+  local assistant_home="$2"
+  local tmp_file
+  [ -f "$config_file" ] || return 0
+  [ -n "$assistant_home" ] || return 0
+
+  tmp_file=$(mktemp "${TMPDIR:-/tmp}/work-ally-codex-config.XXXXXX")
+  awk -v assistant_home="$assistant_home" '
+    BEGIN {
+      in_section = 0
+      section_found = 0
+      writable_written = 0
+      line_to_insert = "writable_roots = [\"" assistant_home "\"]"
+    }
+    function flush_if_needed() {
+      if (in_section && !writable_written) {
+        print line_to_insert
+        writable_written = 1
+      }
+    }
+    /^\[sandbox_workspace_write\][[:space:]]*$/ {
+      print
+      in_section = 1
+      section_found = 1
+      next
+    }
+    /^\[/ {
+      flush_if_needed()
+      in_section = 0
+      print
+      next
+    }
+    {
+      if (in_section && $0 ~ /^[[:space:]]*writable_roots[[:space:]]*=/) {
+        if (!writable_written) {
+          print line_to_insert
+          writable_written = 1
+        }
+        next
+      }
+      print
+    }
+    END {
+      flush_if_needed()
+      if (!section_found) {
+        print ""
+        print "[sandbox_workspace_write]"
+        print line_to_insert
+      }
+    }
+  ' "$config_file" > "$tmp_file"
+  mv "$tmp_file" "$config_file"
+}
+
+assistant_profile_ensure_runtime_defaults() {
+  local config_file="$1"
+  local assistant_home="$2"
+  assistant_profile_set_top_level_setting "$config_file" "sandbox_mode" '"workspace-write"'
+  assistant_profile_set_top_level_setting "$config_file" "approval_policy" '"on-request"'
+  assistant_profile_set_workspace_write_root "$config_file" "$assistant_home"
+}
+
+assistant_gitignore_template() {
+  cat <<'IGNORE'
+.DS_Store
+.system/config.env
+.system/logs/
+.system/cache/
+.system/runtime/
+.system/runs/
+.system/codex-home/.personality_migration
+.system/codex-home/logs_*.sqlite
+.system/codex-home/logs_*.sqlite-shm
+.system/codex-home/logs_*.sqlite-wal
+.system/codex-home/state_*.sqlite
+.system/codex-home/state_*.sqlite-shm
+.system/codex-home/state_*.sqlite-wal
+.system/codex-home/sessions/
+.system/codex-home/shell_snapshots/
+.system/codex-home/skills/
+.system/codex-home/tmp/
+IGNORE
+}
+
+assistant_gitignore_ensure_patterns() {
+  local assistant_home="$1"
+  local gitignore_file="$assistant_home/.gitignore"
+  local line
+
+  [ -f "$gitignore_file" ] || assistant_gitignore_template > "$gitignore_file"
+
+  while IFS= read -r line; do
+    [ -n "$line" ] || continue
+    if ! grep -Fqx "$line" "$gitignore_file"; then
+      printf '%s
+' "$line" >> "$gitignore_file"
+    fi
+  done <<'IGNORE'
+.DS_Store
+.system/config.env
+.system/logs/
+.system/cache/
+.system/runtime/
+.system/runs/
+.system/codex-home/.personality_migration
+.system/codex-home/logs_*.sqlite
+.system/codex-home/logs_*.sqlite-shm
+.system/codex-home/logs_*.sqlite-wal
+.system/codex-home/state_*.sqlite
+.system/codex-home/state_*.sqlite-shm
+.system/codex-home/state_*.sqlite-wal
+.system/codex-home/sessions/
+.system/codex-home/shell_snapshots/
+.system/codex-home/skills/
+.system/codex-home/tmp/
+IGNORE
+}
+
+build_registry_entry() {
+  local name="$1"
+  local assistant_home="$2"
+  local codex_home="$3"
+  local workspace_root="$4"
+  local description="$5"
+  local created_at_override="${6:-}"
+  local updated_at_override="${7:-}"
+  local timestamp created_at updated_at
+  timestamp=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+  created_at="${created_at_override:-$timestamp}"
+  updated_at="${updated_at_override:-$timestamp}"
+  description=$(printf '%s' "$description" | sed 's/\\/\\\\/g; s/"/\\"/g')
+  cat <<ENTRY
+  $name:
+    assistant_home: $assistant_home
+    codex_home: $codex_home
+    workspace_root: $workspace_root
+    description: "$description"
+    created_at: $created_at
+    updated_at: $updated_at
+ENTRY
+}
+
+bootstrap_assistant() {
+  local name="$1"
+  local workspace_root="$2"
+  local description="$3"
+  local git_remote="$4"
+  local existing_workspace="${5:-}"
+  local assistant_home system_dir codex_home conversations_dir sessions_dir archive_dir journal_dir routines_dir runtime_dir logs_dir runs_dir cache_dir
+
+  assistant_home=$(work_ally_assistant_home "$name")
+  system_dir=$(work_ally_assistant_system_dir "$name")
+  codex_home=$(work_ally_assistant_codex_home "$name")
+  conversations_dir=$(work_ally_assistant_conversations_dir "$name")
+  sessions_dir=$(work_ally_assistant_sessions_dir "$name")
+  archive_dir=$(work_ally_assistant_archive_dir "$name")
+  journal_dir=$(work_ally_assistant_journal_dir "$name")
+  routines_dir=$(work_ally_assistant_routines_dir "$name")
+  runtime_dir=$(work_ally_assistant_runtime_dir "$name")
+  logs_dir=$(work_ally_assistant_logs_dir "$name")
+  runs_dir=$(work_ally_assistant_runs_dir "$name")
+  cache_dir=$(work_ally_assistant_cache_dir "$name")
+
+  mkdir -p \
+    "$assistant_home" \
+    "$system_dir" \
+    "$codex_home" \
+    "$conversations_dir" \
+    "$sessions_dir" \
+    "$archive_dir" \
+    "$journal_dir" \
+    "$routines_dir" \
+    "$runtime_dir" \
+    "$logs_dir" \
+    "$runs_dir" \
+    "$cache_dir"
+
+  if [ ! -f "$assistant_home/AGENTS.md" ]; then
+    assistant_profile_agents_template "$assistant_home" "$workspace_root" > "$assistant_home/AGENTS.md"
+  fi
+  if [ ! -f "$codex_home/AGENTS.md" ]; then
+    assistant_profile_agents_template "$assistant_home" "$workspace_root" > "$codex_home/AGENTS.md"
+  fi
+  if [ ! -f "$assistant_home/SOUL.md" ]; then
+    assistant_profile_soul_template "$name" > "$assistant_home/SOUL.md"
+  fi
+  if [ ! -f "$codex_home/config.toml" ]; then
+    assistant_profile_config_template > "$codex_home/config.toml"
+  fi
+  assistant_profile_remove_trusted_project "$codex_home/config.toml" "$existing_workspace"
+  assistant_profile_ensure_trusted_project "$codex_home/config.toml" "$workspace_root"
+  assistant_profile_ensure_trusted_project "$codex_home/config.toml" "$assistant_home"
+  assistant_profile_ensure_runtime_defaults "$codex_home/config.toml" "$assistant_home"
+  assistant_gitignore_ensure_patterns "$assistant_home"
+  if [ ! -f "$assistant_home/NOW.md" ]; then
+    cat > "$assistant_home/NOW.md" <<'NOW'
+# NOW
+
+## 当前在做什么
+- 待更新
+
+## 当前阻塞
+- 待更新
+
+## 下一步
+- 待更新
+NOW
+  fi
+  if [ ! -f "$assistant_home/MEMORY.md" ]; then
+    cat > "$assistant_home/MEMORY.md" <<'MEM'
+# MEMORY
+
+暂无长期记忆。
+MEM
+  fi
+  if [ ! -f "$assistant_home/MISTAKES.md" ]; then
+    cat > "$assistant_home/MISTAKES.md" <<'MISTAKES'
+# MISTAKES
+
+暂无错题记录。
+MISTAKES
+  fi
+  if [ ! -f "$journal_dir/README.md" ]; then
+    cat > "$journal_dir/README.md" <<'JOURNAL'
+# Journal
+
+按天记录整理后的工作日记与沉淀。
+JOURNAL
+  fi
+  if [ ! -f "$conversations_dir/README.md" ]; then
+    cat > "$conversations_dir/README.md" <<'CONVERSATIONS'
+# Conversations
+
+这里保存从原材料派生出的对话可读视图，便于人和 assistant 回看完整聊天链路。
+
+- 这里是 view layer，不是 source of truth。
+- source of truth 在 `.system/archive/`。
+CONVERSATIONS
+  fi
+  if [ ! -f "$archive_dir/README.md" ]; then
+    cat > "$archive_dir/README.md" <<'ARCHIVE'
+# Archive
+
+稳定原材料层，按 append-only 方式记录完整事实流水。
+
+- 这里不是长期记忆。
+- 这里不是默认阅读界面。
+- 只有在追溯事实、审计与排障时才按需查阅。
+ARCHIVE
+  fi
+  if [ ! -f "$routines_dir/nightly-memory-digest.yaml" ]; then
+    cp "$WORK_ALLY_IMPLEMENTATION_DIR/templates/routines/nightly-memory-digest.yaml" "$routines_dir/nightly-memory-digest.yaml"
+  fi
+
+  work_ally_assistant_git_setup "$assistant_home" "$git_remote" || true
+  work_ally_assistant_git_checkpoint "$assistant_home" "bootstrap assistant $name" || true
+
+  printf '%s\n%s\n' "$assistant_home" "$codex_home"
+}
+
+ensure_registry_entry() {
+  local name="$1"
+  local assistant_home="$2"
+  local codex_home="$3"
+  local workspace_root="$4"
+  local description="$5"
+
+  if [ ! -f "$WORK_ALLY_ASSISTANT_REGISTRY_FILE" ]; then
+    printf 'assistants:\n' > "$WORK_ALLY_ASSISTANT_REGISTRY_FILE"
+  fi
+
+  if ! work_ally_registry_has_assistant "$name"; then
+    build_registry_entry "$name" "$assistant_home" "$codex_home" "$workspace_root" "$description" >> "$WORK_ALLY_ASSISTANT_REGISTRY_FILE"
+  fi
+}
+
+assistant_registry_update_binding() {
+  local name="$1"
+  local workspace_root="$2"
+  local tmp timestamp
+
+  [ -f "$WORK_ALLY_ASSISTANT_REGISTRY_FILE" ] || work_ally_die "Assistant registry not found: $WORK_ALLY_ASSISTANT_REGISTRY_FILE"
+
+  timestamp=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+  tmp=$(mktemp "${TMPDIR:-/tmp}/work-ally-assistant-registry.XXXXXX")
+
+  awk -v assistant="$name" -v workspace="$workspace_root" -v updated_at="$timestamp" '
+    BEGIN {
+      in_block = 0
+      workspace_done = 0
+      updated_done = 0
+    }
+    function flush_missing() {
+      if (!in_block) {
+        return
+      }
+      if (!workspace_done) {
+        print "    workspace_root: " workspace
+      }
+      if (!updated_done) {
+        print "    updated_at: " updated_at
+      }
+    }
+    $0 ~ "^  " assistant ":$" {
+      in_block = 1
+      workspace_done = 0
+      updated_done = 0
+      print
+      next
+    }
+    in_block && /^  [^[:space:]]+:$/ {
+      flush_missing()
+      in_block = 0
+      print
+      next
+    }
+    in_block && /^    workspace_root: / {
+      print "    workspace_root: " workspace
+      workspace_done = 1
+      next
+    }
+    in_block && /^    updated_at: / {
+      print "    updated_at: " updated_at
+      updated_done = 1
+      next
+    }
+    {
+      print
+    }
+    END {
+      flush_missing()
+    }
+  ' "$WORK_ALLY_ASSISTANT_REGISTRY_FILE" > "$tmp"
+
+  mv "$tmp" "$WORK_ALLY_ASSISTANT_REGISTRY_FILE"
+}
+
+assistant_profile_rewrite_workspace_reference() {
+  local target_file="$1"
+  local old_workspace="$2"
+  local new_workspace="$3"
+
+  [ -f "$target_file" ] || return 0
+  [ -n "$old_workspace" ] || return 0
+  [ "$old_workspace" = "$new_workspace" ] && return 0
+
+  work_ally_require_cmd python3
+  OLD_WORKSPACE="$old_workspace" NEW_WORKSPACE="$new_workspace" \
+    python3 - "$target_file" <<'PY'
+from pathlib import Path
+import os
+import sys
+path = Path(sys.argv[1])
+old = os.environ['OLD_WORKSPACE']
+new = os.environ['NEW_WORKSPACE']
+text = path.read_text()
+path.write_text(text.replace(old, new))
+PY
+}
+
+assistant_profile_rewrite_soul_name() {
+  local target_file="$1"
+  local old_name="$2"
+  local new_name="$3"
+
+  [ -f "$target_file" ] || return 0
+  [ -n "$old_name" ] || return 0
+  [ -n "$new_name" ] || return 0
+  [ "$old_name" = "$new_name" ] && return 0
+
+  work_ally_require_cmd python3
+  OLD_ASSISTANT_NAME="$old_name" NEW_ASSISTANT_NAME="$new_name" \
+    python3 - "$target_file" <<'PY'
+from pathlib import Path
+import os
+import re
+import sys
+path = Path(sys.argv[1])
+text = path.read_text()
+pattern = rf'^(\s*-\s*名字：){re.escape(os.environ["OLD_ASSISTANT_NAME"])}$'
+text, count = re.subn(pattern, rf'\1{os.environ["NEW_ASSISTANT_NAME"]}', text, count=1, flags=re.MULTILINE)
+path.write_text(text)
+PY
+}
+
+assistant_profile_rewrite_managed_env() {
+  local target_file="$1"
+  local new_name="$2"
+  local new_home="$3"
+  local new_codex_home="$4"
+  local new_state_dir="$5"
+  local tmp_file
+
+  [ -f "$target_file" ] || return 0
+  tmp_file=$(mktemp "${TMPDIR:-/tmp}/work-ally-managed-env.XXXXXX")
+
+  awk -v name="$new_name" -v home="$new_home" -v codex="$new_codex_home" -v state_dir="$new_state_dir" '
+    BEGIN {
+      wrote_name = 0
+    }
+    /^WORK_ALLY_ASSISTANT_NAME=/ {
+      print "WORK_ALLY_ASSISTANT_NAME=" name
+      wrote_name = 1
+      next
+    }
+    /^WORK_ALLY_ASSISTANT_HOME=/ {
+      print "WORK_ALLY_ASSISTANT_HOME=" home
+      next
+    }
+    /^WORK_ALLY_ASSISTANT_CODEX_HOME=/ {
+      print "WORK_ALLY_ASSISTANT_CODEX_HOME=" codex
+      next
+    }
+    /^WORK_ALLY_STATE_DIR=/ {
+      print "WORK_ALLY_STATE_DIR=" state_dir
+      next
+    }
+    {
+      print
+    }
+    END {
+      if (!wrote_name) {
+        print "WORK_ALLY_ASSISTANT_NAME=" name
+      }
+    }
+  ' "$target_file" > "$tmp_file"
+
+  mv "$tmp_file" "$target_file"
+}
+
+assistant_work_sessions_root() {
+  local assistant_home="$1"
+  printf '%s/.system/runtime/work-sessions\n' "$assistant_home"
+}
+
+assistant_work_session_blocking_summary() {
+  local root="$1"
+  local assistant_name="$2"
+
+  [ -d "$root" ] || return 0
+  work_ally_require_cmd python3
+  python3 - "$root" "$assistant_name" <<'PY'
+from pathlib import Path
+import json
+import sys
+root = Path(sys.argv[1])
+assistant_name = sys.argv[2]
+index_file = root / 'indexes' / 'assistants' / f'{assistant_name}.json'
+if not index_file.exists():
+    raise SystemExit(0)
+try:
+    index = json.loads(index_file.read_text())
+except Exception:
+    raise SystemExit(0)
+work_session_id = str(index.get('activeWorkSessionId') or '').strip()
+if not work_session_id:
+    raise SystemExit(0)
+meta_file = root / 'objects' / work_session_id / 'meta.json'
+if not meta_file.exists():
+    raise SystemExit(0)
+try:
+    meta = json.loads(meta_file.read_text())
+except Exception:
+    raise SystemExit(0)
+active_surface = str(meta.get('activeSurface') or '').strip()
+archived_at = meta.get('archivedAt')
+archived_text = '' if archived_at is None else str(archived_at).strip()
+if not archived_text and active_surface in {'work_ally_channel', 'official_codex_cli'}:
+    sys.stdout.write(f'{active_surface}|{meta.get("workSessionId") or work_session_id}')
+PY
+}
+
+assistant_work_session_migrate() {
+  local root="$1"
+  local old_name="$2"
+  local new_name="$3"
+  local old_codex_home="$4"
+  local new_codex_home="$5"
+
+  [ -d "$root" ] || return 0
+  work_ally_require_cmd python3
+  python3 - "$root" "$old_name" "$new_name" "$old_codex_home" "$new_codex_home" <<'PY'
+from pathlib import Path
+import json
+import sys
+root = Path(sys.argv[1])
+old_name, new_name, old_codex_home, new_codex_home = sys.argv[2:6]
+objects_dir = root / 'objects'
+if objects_dir.exists():
+    for entry in objects_dir.iterdir():
+        if not entry.is_dir():
+            continue
+        meta_file = entry / 'meta.json'
+        if not meta_file.exists():
+            continue
+        try:
+            meta = json.loads(meta_file.read_text())
+        except Exception:
+            continue
+        changed = False
+        if meta.get('assistantName') == old_name:
+            meta['assistantName'] = new_name
+            changed = True
+        if meta.get('assistantCodexHome') == old_codex_home:
+            meta['assistantCodexHome'] = new_codex_home
+            changed = True
+        if changed:
+            meta_file.write_text(json.dumps(meta, indent=2) + '\n')
+assistants_dir = root / 'indexes' / 'assistants'
+old_index = assistants_dir / f'{old_name}.json'
+new_index = assistants_dir / f'{new_name}.json'
+if old_index.exists():
+    index = json.loads(old_index.read_text())
+    index['assistantName'] = new_name
+    new_index.parent.mkdir(parents=True, exist_ok=True)
+    new_index.write_text(json.dumps(index, indent=2) + '\n')
+    if new_index != old_index:
+        old_index.unlink()
+PY
+}
+
+assistant_project_registry_rename_binding() {
+  local old_name="$1"
+  local new_name="$2"
+  local tmp_file
+
+  [ -f "$WORK_ALLY_PROJECT_REGISTRY_FILE" ] || return 0
+  tmp_file=$(mktemp "${TMPDIR:-/tmp}/work-ally-project-registry.XXXXXX")
+
+  awk -v old_name="$old_name" -v new_name="$new_name" '
+    {
+      if ($0 == "    assistant: " old_name) {
+        print "    assistant: " new_name
+        next
+      }
+      print
+    }
+  ' "$WORK_ALLY_PROJECT_REGISTRY_FILE" > "$tmp_file"
+
+  mv "$tmp_file" "$WORK_ALLY_PROJECT_REGISTRY_FILE"
+}
+
+assistant_registry_rename_entry() {
+  local old_name="$1"
+  local new_name="$2"
+  local new_home="$3"
+  local new_codex_home="$4"
+  local workspace_root="$5"
+  local description created_at
+
+  description=$(work_ally_assistant_description "$old_name")
+  created_at=$(work_ally_registry_field "$old_name" created_at || true)
+
+  work_ally_registry_remove_assistant "$old_name"
+  build_registry_entry "$new_name" "$new_home" "$new_codex_home" "$workspace_root" "$description" "$created_at" >> "$WORK_ALLY_ASSISTANT_REGISTRY_FILE"
+}
+
+assistant_lock_rewrite_name() {
+  local lock_file="$1"
+  local assistant_name="$2"
+  local tmp_file
+
+  [ -f "$lock_file" ] || return 0
+  tmp_file=$(mktemp "${TMPDIR:-/tmp}/work-ally-assistant-lock.XXXXXX")
+
+  awk -v assistant_name="$assistant_name" '
+    /^assistant=/ {
+      print "assistant=" assistant_name
+      next
+    }
+    {
+      print
+    }
+  ' "$lock_file" > "$tmp_file"
+
+  mv "$tmp_file" "$lock_file"
+}
+
+bind_assistant() {
+  local name="${1:-}"
+  local workspace_root=""
+  local assistant_home codex_home description existing_workspace
+
+  shift || true
+  [ -n "$name" ] || work_ally_die "Assistant name is required"
+  work_ally_require_registered_assistant "$name"
+
+  while [ "$#" -gt 0 ]; do
+    case "$1" in
+      --workspace)
+        [ "$#" -ge 2 ] || work_ally_die "--workspace requires a value"
+        workspace_root="$2"
+        shift 2
+        ;;
+      --workspace=*)
+        workspace_root="${1#--workspace=}"
+        shift
+        ;;
+      *)
+        work_ally_die "Unknown argument: $1"
+        ;;
+    esac
+  done
+
+  [ -n "$workspace_root" ] || work_ally_die "--workspace is required"
+  [ -d "$workspace_root" ] || work_ally_die "Workspace directory not found: $workspace_root"
+  workspace_root=$(cd "$workspace_root" && pwd)
+
+  assistant_home=$(work_ally_assistant_registered_home "$name")
+  codex_home=$(work_ally_assistant_registered_codex_home "$name")
+  description=$(work_ally_assistant_description "$name")
+  existing_workspace=$(work_ally_assistant_registered_workspace "$name" || true)
+  if [ -z "$existing_workspace" ]; then
+    existing_workspace=$(work_ally_registry_field "$name" workspace_root || true)
+  fi
+
+  if [ "$existing_workspace" = "$workspace_root" ]; then
+    work_ally_ok "Assistant $name 已经绑定到目标项目"
+    printf 'assistant_home: %s\n' "$assistant_home"
+    printf 'workspace: %s\n' "$workspace_root"
+    return 0
+  fi
+
+  if work_ally_assistant_is_busy "$name"; then
+    work_ally_die "Assistant $name is currently running. Stop it before rebinding."
+  fi
+
+  assistant_profile_remove_trusted_project "$codex_home/config.toml" "$existing_workspace"
+  assistant_profile_ensure_trusted_project "$codex_home/config.toml" "$workspace_root"
+  assistant_profile_rewrite_workspace_reference "$assistant_home/AGENTS.md" "$existing_workspace" "$workspace_root"
+  assistant_profile_rewrite_workspace_reference "$codex_home/AGENTS.md" "$existing_workspace" "$workspace_root"
+  assistant_registry_update_binding "$name" "$workspace_root"
+  work_ally_project_registry_set "$workspace_root" "$name"
+  work_ally_assistant_git_checkpoint "$assistant_home" "rebind assistant $name to $workspace_root" || true
+
+  work_ally_ok "Assistant binding updated for $name"
+  printf 'assistant_home: %s\n' "$assistant_home"
+  printf 'workspace: %s\n' "$workspace_root"
+  [ -n "$description" ] && printf 'description: %s\n' "$description"
+}
+
+list_assistants() {
+  if [ ! -f "$WORK_ALLY_ASSISTANT_REGISTRY_FILE" ]; then
+    echo 'No assistants registered yet.'
+    return 0
+  fi
+
+  awk '
+    /^  [^[:space:]]+:$/ {
+      name=$0
+      sub(/^  /, "", name)
+      sub(/:$/, "", name)
+      current=name
+      names[++count]=name
+      next
+    }
+    current && /^    description: / {
+      value=$0
+      sub(/^    description: /, "", value)
+      descriptions[current]=value
+      next
+    }
+    current && /^    codex_home: / {
+      value=$0
+      sub(/^    codex_home: /, "", value)
+      codex[current]=value
+      next
+    }
+    END {
+      if (!count) {
+        print "No assistants registered yet."
+        exit 0
+      }
+      for (i=1; i<=count; i++) {
+        name=names[i]
+        printf "%s\n", name
+        if (descriptions[name] != "") printf "  description: %s\n", descriptions[name]
+        if (codex[name] != "") printf "  codex_home: %s\n", codex[name]
+      }
+    }
+  ' "$WORK_ALLY_ASSISTANT_REGISTRY_FILE"
+}
+
+create_or_ensure_assistant() {
+  local mode="$1"
+  shift
+  local name="${1:-}"
+  shift || true
+  [ -n "$name" ] || work_ally_die "Assistant name is required"
+  work_ally_validate_assistant_name "$name"
+
+  local description="Assistant profile for $name"
+  local workspace_root=""
+  local existing_workspace=""
+  local git_remote=""
+  while [ "$#" -gt 0 ]; do
+    case "$1" in
+      --description)
+        [ "$#" -ge 2 ] || work_ally_die "--description requires a value"
+        description="$2"
+        shift 2
+        ;;
+      --description=*)
+        description="${1#--description=}"
+        shift
+        ;;
+      --workspace)
+        [ "$#" -ge 2 ] || work_ally_die "--workspace requires a value"
+        workspace_root="$2"
+        shift 2
+        ;;
+      --workspace=*)
+        workspace_root="${1#--workspace=}"
+        shift
+        ;;
+      --git-remote)
+        [ "$#" -ge 2 ] || work_ally_die "--git-remote requires a value"
+        git_remote="$2"
+        shift 2
+        ;;
+      --git-remote=*)
+        git_remote="${1#--git-remote=}"
+        shift
+        ;;
+      *)
+        work_ally_die "Unknown argument: $1"
+        ;;
+    esac
+  done
+
+  [ -n "$workspace_root" ] || work_ally_die "--workspace is required"
+  [ -d "$workspace_root" ] || work_ally_die "Workspace directory not found: $workspace_root"
+  workspace_root=$(cd "$workspace_root" && pwd)
+  export WORK_ALLY_WORKSPACE_ROOT="$workspace_root"
+
+  if work_ally_registry_has_assistant "$name"; then
+    existing_workspace=$(work_ally_assistant_registered_workspace "$name" || true)
+    if [ -n "$existing_workspace" ] && [ "$existing_workspace" != "$workspace_root" ]; then
+      work_ally_die "Assistant $name is already bound to $existing_workspace. Create another assistant for $workspace_root."
+    fi
+  fi
+
+  if [ "$mode" = add ] && work_ally_registry_has_assistant "$name"; then
+    work_ally_die "Assistant already registered: $name"
+  fi
+
+  local homes assistant_home codex_home
+  homes=$(bootstrap_assistant "$name" "$workspace_root" "$description" "$git_remote" "$existing_workspace")
+  assistant_home=$(printf '%s\n' "$homes" | sed -n '1p')
+  codex_home=$(printf '%s\n' "$homes" | sed -n '2p')
+  ensure_registry_entry "$name" "$assistant_home" "$codex_home" "$workspace_root" "$description"
+
+  work_ally_ok "Assistant desk ready for $name"
+  printf 'assistant_home: %s\n' "$assistant_home"
+  printf 'codex_home: %s\n' "$codex_home"
+  printf 'workspace: %s\n' "$workspace_root"
+}
+
+show_assistant() {
+  local name="${1:-}"
+  local assistant_home
+  [ -n "$name" ] || work_ally_die "Assistant name is required"
+  work_ally_require_registered_assistant "$name"
+  assistant_home=$(work_ally_assistant_registered_home "$name")
+  printf 'name: %s\n' "$name"
+  printf 'assistant_home: %s\n' "$assistant_home"
+  printf 'codex_home: %s\n' "$(work_ally_assistant_registered_codex_home "$name")"
+  printf 'workspace: %s\n' "$(work_ally_assistant_registered_workspace "$name")"
+  printf 'description: %s\n' "$(work_ally_assistant_description "$name")"
+  printf 'git_remote: %s\n' "$(work_ally_assistant_git_origin_url "$assistant_home" || true)"
+  printf 'git_branch: %s\n' "$(work_ally_assistant_git_branch "$assistant_home")"
+}
+
+confirm_assistant_removal() {
+  local name="$1"
+  local assistant_home="$2"
+  local attempt reply
+
+  printf 'Danger: this will permanently delete assistant %s.\n' "$name" >&2
+  printf 'Desk: %s\n' "$assistant_home" >&2
+  printf 'It will also remove all project-to-assistant mappings for this assistant.\n' >&2
+
+  for attempt in 1 2 3; do
+    printf 'Type YES to continue (%s/3): ' "$attempt" >&2
+    if ! IFS= read -r reply; then
+      work_ally_die "Assistant removal aborted"
+    fi
+    if [ "$reply" != "YES" ]; then
+      work_ally_die "Assistant removal aborted"
+    fi
+  done
+}
+
+remove_assistant() {
+  local name="${1:-}"
+  local assistant_home lock_file lock_workspace
+  [ -n "$name" ] || work_ally_die "Assistant name is required"
+  work_ally_require_registered_assistant "$name"
+  assistant_home=$(work_ally_assistant_registered_home "$name")
+  [ -n "$assistant_home" ] || work_ally_die "Assistant profile is invalid: missing assistant_home for $name"
+
+  if work_ally_assistant_is_busy "$name"; then
+    lock_file=$(work_ally_assistant_lock_file "$name")
+    lock_workspace=$(work_ally_assistant_lock_field "$lock_file" workspace_root || true)
+    work_ally_die "Assistant $name is currently running${lock_workspace:+ in project $lock_workspace}. Stop it before removing."
+  fi
+
+  confirm_assistant_removal "$name" "$assistant_home"
+
+  work_ally_project_registry_remove_assistant "$name"
+  work_ally_registry_remove_assistant "$name"
+
+  lock_file=$(work_ally_assistant_lock_file "$name")
+  rm -f "$lock_file"
+  rm -rf "$assistant_home"
+
+  unset WORK_ALLY_ASSISTANT_HOME WORK_ALLY_STATE_DIR WORK_ALLY_RUNTIME_DIR \
+    WORK_ALLY_LOG_DIR WORK_ALLY_SESSION_DIR WORK_ALLY_RUN_DIR \
+    WORK_ALLY_CACHE_DIR WORK_ALLY_ENV_FILE WORK_ALLY_ASSISTANT_STATE_FILE
+  printf '✓ Assistant removed: %s\n' "$name"
+}
+
+rename_assistant_apply() {
+  local old_name="$1"
+  local new_name="$2"
+  local old_home="$3"
+  local new_home="$4"
+  local old_codex_home="$5"
+  local new_codex_home="$6"
+  local workspace_root="$7"
+  local old_lock="$8"
+  local new_lock="$9"
+  local new_state_dir="$new_home/.system"
+  local config_file="$new_codex_home/config.toml"
+
+  mv "$old_home" "$new_home" || return 1
+
+  assistant_profile_rewrite_workspace_reference "$new_home/AGENTS.md" "$old_home" "$new_home" || return 1
+  assistant_profile_rewrite_workspace_reference "$new_home/.system/codex-home/AGENTS.md" "$old_home" "$new_home" || return 1
+  assistant_profile_rewrite_workspace_reference "$config_file" "$old_home" "$new_home" || return 1
+  assistant_profile_remove_trusted_project "$config_file" "$old_home" || return 1
+  assistant_profile_ensure_trusted_project "$config_file" "$new_home" || return 1
+  assistant_profile_ensure_runtime_defaults "$config_file" "$new_home" || return 1
+  assistant_profile_rewrite_soul_name "$new_home/SOUL.md" "$old_name" "$new_name" || return 1
+  assistant_profile_rewrite_managed_env "$new_home/.system/config.env" "$new_name" "$new_home" "$new_codex_home" "$new_state_dir" || return 1
+  assistant_profile_rewrite_managed_env "$new_home/.system/runtime/assistant.env" "$new_name" "$new_home" "$new_codex_home" "$new_state_dir" || return 1
+  assistant_work_session_migrate "$(assistant_work_sessions_root "$new_home")" "$old_name" "$new_name" "$old_codex_home" "$new_codex_home" || return 1
+  assistant_project_registry_rename_binding "$old_name" "$new_name" || return 1
+  assistant_registry_rename_entry "$old_name" "$new_name" "$new_home" "$new_codex_home" "$workspace_root" || return 1
+
+  if [ -f "$old_lock" ]; then
+    mv "$old_lock" "$new_lock" || return 1
+    assistant_lock_rewrite_name "$new_lock" "$new_name" || return 1
+  fi
+
+  return 0
+}
+
+rename_assistant_restore_from_backup() {
+  local backup_dir="$1"
+  local old_home="$2"
+  local new_home="$3"
+  local old_lock="$4"
+  local new_lock="$5"
+
+  rm -f "$new_lock"
+
+  if [ -d "$new_home" ]; then
+    rm -rf "$new_home"
+  fi
+
+  if [ -f "$backup_dir/assistant-registry.yaml" ]; then
+    mkdir -p "$(dirname "$WORK_ALLY_ASSISTANT_REGISTRY_FILE")"
+    cp "$backup_dir/assistant-registry.yaml" "$WORK_ALLY_ASSISTANT_REGISTRY_FILE"
+  else
+    rm -f "$WORK_ALLY_ASSISTANT_REGISTRY_FILE"
+  fi
+
+  if [ -f "$backup_dir/project-registry.yaml" ]; then
+    mkdir -p "$(dirname "$WORK_ALLY_PROJECT_REGISTRY_FILE")"
+    cp "$backup_dir/project-registry.yaml" "$WORK_ALLY_PROJECT_REGISTRY_FILE"
+  else
+    rm -f "$WORK_ALLY_PROJECT_REGISTRY_FILE"
+  fi
+
+  if [ -f "$backup_dir/assistant.lock" ]; then
+    mkdir -p "$(dirname "$old_lock")"
+    cp "$backup_dir/assistant.lock" "$old_lock"
+  else
+    rm -f "$old_lock"
+  fi
+
+  if [ ! -d "$old_home" ] && [ -d "$backup_dir/assistant-home" ]; then
+    mv "$backup_dir/assistant-home" "$old_home" || return 1
+  fi
+
+  return 0
+}
+
+rename_assistant() {
+  local old_name="${1:-}"
+  local new_name="${2:-}"
+  local old_home old_codex_home expected_old_home expected_old_codex_home
+  local new_home new_codex_home workspace_root old_lock new_lock new_work_session_index
+  local lock_workspace blocking_summary active_surface work_session_id backup_dir
+
+  [ -n "$old_name" ] || work_ally_die "Old assistant name is required"
+  [ -n "$new_name" ] || work_ally_die "New assistant name is required"
+  shift 2 || true
+  [ "$#" -eq 0 ] || work_ally_die "Unknown argument: $1"
+
+  work_ally_require_registered_assistant "$old_name"
+  work_ally_validate_assistant_name "$new_name"
+  [ "$old_name" != "$new_name" ] || work_ally_die "Old and new assistant names must differ"
+
+  if work_ally_registry_has_assistant "$new_name"; then
+    work_ally_die "Assistant already registered: $new_name"
+  fi
+
+  old_home=$(work_ally_assistant_registered_home "$old_name")
+  old_codex_home=$(work_ally_assistant_registered_codex_home "$old_name")
+  workspace_root=$(work_ally_assistant_registered_workspace "$old_name" || true)
+  if [ -z "$workspace_root" ]; then
+    workspace_root=$(work_ally_registry_field "$old_name" workspace_root || true)
+  fi
+
+  expected_old_home=$(work_ally_assistant_home "$old_name")
+  expected_old_codex_home=$(work_ally_assistant_codex_home "$old_name")
+  [ -n "$old_home" ] || work_ally_die "Assistant profile is invalid: missing assistant_home for $old_name"
+  [ -n "$old_codex_home" ] || work_ally_die "Assistant profile is invalid: missing codex_home for $old_name"
+  [ -n "$workspace_root" ] || work_ally_die "Assistant $old_name is not bound to a project yet."
+  [ "$old_home" = "$expected_old_home" ] || work_ally_die "Assistant $old_name cannot be renamed safely because assistant_home is not canonical: $old_home"
+  [ "$old_codex_home" = "$expected_old_codex_home" ] || work_ally_die "Assistant $old_name cannot be renamed safely because codex_home is not canonical: $old_codex_home"
+  [ -d "$old_home" ] || work_ally_die "Assistant profile is incomplete: missing assistant_home at $old_home"
+  [ -d "$old_codex_home" ] || work_ally_die "Assistant profile is incomplete: missing codex_home at $old_codex_home"
+
+  new_home=$(work_ally_assistant_home "$new_name")
+  new_codex_home=$(work_ally_assistant_codex_home "$new_name")
+  [ ! -e "$new_home" ] || work_ally_die "Assistant home already exists for $new_name: $new_home"
+
+  new_work_session_index="$(assistant_work_sessions_root "$old_home")/indexes/assistants/$new_name.json"
+  [ ! -e "$new_work_session_index" ] || work_ally_die "Assistant work-session index already exists for $new_name: $new_work_session_index"
+
+  old_lock=$(work_ally_assistant_lock_file "$old_name")
+  new_lock=$(work_ally_assistant_lock_file "$new_name")
+  [ ! -e "$new_lock" ] || work_ally_die "Assistant lock already exists for $new_name: $new_lock"
+
+  if work_ally_assistant_is_busy "$old_name"; then
+    lock_workspace=$(work_ally_assistant_lock_field "$old_lock" workspace_root || true)
+    work_ally_die "Assistant $old_name is currently running${lock_workspace:+ in project $lock_workspace}. Stop it before renaming."
+  fi
+
+  blocking_summary=$(assistant_work_session_blocking_summary "$(assistant_work_sessions_root "$old_home")" "$old_name" || true)
+  if [ -n "$blocking_summary" ]; then
+    active_surface=${blocking_summary%%|*}
+    work_session_id=${blocking_summary#*|}
+    work_ally_die "Assistant $old_name still has an active work session on $active_surface ($work_session_id). Close or idle it before renaming."
+  fi
+
+  backup_dir=$(mktemp -d "${TMPDIR:-/tmp}/work-ally-assistant-rename.XXXXXX")
+  cp -R "$old_home" "$backup_dir/assistant-home" || work_ally_die "Failed to stage assistant backup for $old_name"
+  [ ! -f "$WORK_ALLY_ASSISTANT_REGISTRY_FILE" ] || cp "$WORK_ALLY_ASSISTANT_REGISTRY_FILE" "$backup_dir/assistant-registry.yaml"
+  [ ! -f "$WORK_ALLY_PROJECT_REGISTRY_FILE" ] || cp "$WORK_ALLY_PROJECT_REGISTRY_FILE" "$backup_dir/project-registry.yaml"
+  [ ! -f "$old_lock" ] || cp "$old_lock" "$backup_dir/assistant.lock"
+
+  if ! rename_assistant_apply "$old_name" "$new_name" "$old_home" "$new_home" "$old_codex_home" "$new_codex_home" "$workspace_root" "$old_lock" "$new_lock"; then
+    if ! rename_assistant_restore_from_backup "$backup_dir" "$old_home" "$new_home" "$old_lock" "$new_lock"; then
+      rm -rf "$backup_dir"
+      work_ally_die "Assistant rename failed and rollback failed. Inspect $old_home, $new_home and the registries manually."
+    fi
+    rm -rf "$backup_dir"
+    work_ally_die "Assistant rename from $old_name to $new_name failed. Original state was restored."
+  fi
+
+  rm -rf "$backup_dir"
+
+  export WORK_ALLY_WORKSPACE_ROOT="$workspace_root"
+  work_ally_hydrate_assistant_context "$new_name"
+  work_ally_assistant_git_checkpoint "$new_home" "rename assistant $old_name to $new_name" || true
+
+  work_ally_ok "Assistant renamed from $old_name to $new_name"
+  printf 'old_name: %s\n' "$old_name"
+  printf 'new_name: %s\n' "$new_name"
+  printf 'assistant_home: %s\n' "$new_home"
+  printf 'codex_home: %s\n' "$new_codex_home"
+  printf 'workspace: %s\n' "$workspace_root"
+}
+
+case "$SUBCMD" in
+  add)
+    create_or_ensure_assistant add "$@"
+    ;;
+  ensure)
+    create_or_ensure_assistant ensure "$@"
+    ;;
+  bind)
+    bind_assistant "$@"
+    ;;
+  remove)
+    remove_assistant "$@"
+    ;;
+  rename)
+    rename_assistant "$@"
+    ;;
+  list)
+    list_assistants
+    ;;
+  show)
+    show_assistant "$@"
+    ;;
+  help|-h|--help)
+    usage
+    ;;
+  *)
+    work_ally_die "Unknown assistant subcommand: $SUBCMD"
+    ;;
+esac