Capability Inventory
This page is the public GitHub Pages audit map for what the current Aegis checkout exposes. It summarizes the implemented surfaces that are easy to miss when reading only the getting-started path.
Audit Summary
The docs site already covered installation, core concepts, workflows, connectors, security, API routes, local service operations, approvals, model providers, settings, automations, skills, run artifacts, and composable reports.
The main gaps found in this pass were:
- the Pages navigation did not expose a single current implementation map;
- installation still referenced an older Node runtime;
- the connector guide listed only part of the OAuth catalog;
- workflow docs did not name the current primitive and tool-family inventory;
- dashboard docs under-described Command Center, Project Chat, Research Studio, memory, audio, model-routing, provider-health, and project-context surfaces;
- branch protection docs existed but were not discoverable from the public index or side navigation;
- customer-specific operations notes were removed from the docs tree because customer names, run-local artifacts, and local-path references do not belong in public or repository documentation.
Operator Surfaces
| Surface | What it covers | Primary docs |
|---|---|---|
| Dashboard shell | Local operator UI, run history, notifications, settings, dashboard components, workflow views, and project work. | Dashboard, Settings walkthrough |
| Command Center | Active runs, pending approvals, blocked jobs, failures, sessions, and operator priorities. | API reference, Operator contracts |
| Project Chat | Conversation sessions, attachments, runtime events, plans, design docs, execution graphs, summaries, and delegated runs. | Core concepts, Headless agent client |
| Run Workspace | Run details, task sessions, artifacts, timelines, audit views, replay packets, task-card steering, pause/resume/cancel, and retries. | Inspect runs, Runtime architecture |
| Workflow Designer | Saved workflows, workflow templates, primitives, assistant-generated drafts, test runs, automations, and manual/scheduled/webhook triggers. | Workflows, Build a workflow, Automations |
| Research Studio | Source metadata, source search, source previews, source ingestion, visual extraction, generated assets, notes, and citations. | Workflows, Inspect runs |
| Planner | Tasks, calendar artifacts, meetings, time off, conflicts, source refresh, search, schedule chat, and calendar action drafts. | Dashboard, Settings walkthrough |
| Memory | Memory records, context previews, candidates, promotion/rejection, maintenance runs, and review reports. | Core concepts, Settings walkthrough |
| Models and providers | Provider health, health history, model catalog, routing preview, and routing policies. | Model providers, Provider smoke runbook |
| Audio sessions | Transcription/realtime session records, events, transcript imports, and session end state. | Settings walkthrough |
| Project context library | Project context documents, content upload, original file access, edits, search, and archive. | Prepare a project |
Connector Catalog
Aegis supports local app configuration, OAuth account grants, scoped connector tools, and generic OAuth escape hatches for the current catalog:
- Google: Gmail, Drive, Calendar, Chat, Meet, Docs, Sheets, Slides, Analytics, and YouTube.
- Developer and work systems: GitHub, GitLab, Jira, Linear, Slack, Discord, Microsoft Teams, Microsoft Excel, Notion, Calendly, and Zoom.
- Commerce, finance, and growth systems: Stripe, PayPal, Shopify, Plaid, Mailchimp, Bitly, LinkedIn, Facebook, Instagram, WhatsApp, Twitter / X, Spotify, and Strava.
- Dedicated non-OAuth app config exists for Apple Developer and Plaid.
Most OAuth catalog entries expose <connector>.api-read and
<connector>.api-request. Generic write methods require an approval preview
before Aegis reads a token or contacts the provider. Typed operations should be
added for repeated side effects.
See Connectors and Accounts and connectors.
Tool Families
The executable tool registry is split by family:
| Family | Representative tools |
|---|---|
| Agent orchestration | agent.delegate, agent.ask, agent.classifier, agent.extractor, agent.summarizer, agent.researcher, agent.coordinator-handoff, agent.review, agent.qa-browser, agent.qa-security, agent.memory-write |
| Repository and code | repo.list-files, repo.read-text, repo.write-text, repo.diff, repo.run-check, code.run-js, code.run-python, code.format, code.lint, code.security-scan, code.generate-patch |
| Workflow flow/data | flow.branch, flow.filter, flow.merge, flow.loop, flow.delay, flow.retry, flow.manual-approval, flow.format-output, data.template, data.extract-json, data.json-path, data.jq, data.map, data.validate-schema, data.dedupe, data.sort-filter |
| Store and artifacts | store.get, store.set, store.delete, store.list, artifact.read, artifact.write, artifact.append, artifact.convert |
| Network and webhooks | http.request, webhook.respond, webhook.verify-signature, url.parse, form.encode, notify.webhook |
| Notifications and Gmail | notify.dashboard, notify.email-draft, gmail.create-draft, gmail.search-messages, gmail.read-message, email.parse-work-request, gmail.check-processed, gmail.mark-processed, coordinator.queue-from-request, notify.system, notify.summary |
| Knowledge and market memory | knowledge.collections, knowledge.collection-upsert, knowledge.ingest, knowledge.search, knowledge.backends, knowledge.embedding-providers, knowledge.delete, knowledge.reindex, knowledge.snapshot, knowledge.eval-retrieval, knowledge.specialist-collections, market.metric-record, market.metric-query |
| Research and media | research.ingest-source, research.extract-visuals, research.classify-visual, research.analyze-visual, media.generate-image, media.generate-presentation, research.create-asset, web.search, web.fetch, citation.extract |
| Source, sandbox, and quality | source.acquire, source.quarantine-inspect, source.manifest, quality.preflight-inspect, sandbox.plan, sandbox.run, database.intake-review, database.schema-inspect |
| Report orchestration | report.resolve-profile, measurement routing, report.queue-sections, report.collect-sections, report.render, report.delivery-draft |
| Security and runtime verification | security.scope-validate, security.http-probe, security.header-check, security.cors-check, security.secret-scan, runtime.verify-local-app, browser.capture-page |
| Triggers and worker callbacks | trigger.manual, trigger.manual-chat, trigger.schedule, worker polling, trigger.webhook, trigger.file-watch, trigger.git-change, trigger.provider-health, worker callbacks |
| App APIs | apple-developer.api-read, apple-developer.api-request, <connector>.api-read, <connector>.api-request |
See Tool extension lifecycle before adding or changing a tool family.
Built-In Skills
Built-in skill manifests currently cover:
repo-map,repo-editing,runtime-verification, andtest-triagefor grounded repository work;dashboard-qa,ux-usability-audit, andprovider-evalfor UI, runtime, and model/provider evaluation;automation-authoringandcoordinator-automation-opsfor workflow and automation design;repo-grounded-researchfor source-backed research and reusable assets;attack-surface-map,api-behavioral-probing,security-test-planning,finding-validation,remediation-retest, andpentest-reportingfor bounded security work.
Public Operations Docs To Review
The following operations pages are part of the public Pages build and should be reviewed when work touches their area:
- CLI reference
- Local macOS service
- Migration runbook
- Provider smoke runbook
- GitHub Pages deployment
- GitHub branch protection
Customer-specific report-production and worker-polling notes are intentionally
not kept in docs/. Reusable lessons should be rewritten as generic Aegis report
automation guidance before being added back to the documentation site.
Architecture And Governance Anchors
- Architecture overview
- Runtime architecture
- Source map
- Threat model
- API reference
- Model-backed coordinator
- Operator contracts
- Headless agent client
Keeping This Page Current
Update this page when any of these change:
- a new API route family is added;
- a connector is added to or removed from
src/connectors/catalog.ts; - a tool family is added to
src/tools/; - a built-in skill manifest is added under
src/skills/manifests/; - a dashboard surface graduates from product planning into the public app;
- an operations runbook becomes public Pages content.