@pellux/goodvibes-agent 0.1.114 → 0.1.117

package/src/input/commands/mcp-runtime.ts

@@ -174,8 +174,7 @@ export function registerMcpRuntimeCommands(registry: CommandRegistry): void {
             + '  ~/.config/claude/claude_desktop_config.json  (Claude Desktop)\n'
             + '  .mcp/mcp.json                        (project-local)\n'
             + '  .goodvibes/mcp.json                  (goodvibes project)\n'
-            + '\nAdd one from inside Agent with explicit confirmation:\n'
-            + '  /mcp add filesystem npx -y @modelcontextprotocol/server-filesystem . --scope project --role filesystem --yes'
+            + '\nOpen /mcp and choose Add or update server, or use Agent Workspace -> Tools & MCP -> Add MCP server.'
           );
           return;
         }
@@ -265,7 +264,7 @@ export function registerMcpRuntimeCommands(registry: CommandRegistry): void {
         const mode = commandArgs[2] as 'constrained' | 'ask-on-risk' | 'allow-all' | 'blocked' | undefined;
         if (serverName && mode) {
           if (mode === 'allow-all') {
-            ctx.print(`Use /settings → MCP to explicitly enable allow-all for ${serverName}. Direct CLI escalation is blocked.`);
+            ctx.print(`Use /settings → MCP to explicitly enable allow-all for ${serverName}. Direct command escalation is blocked.`);
             ctx.openSettingsModal?.();
             return;
           }
@@ -399,9 +398,9 @@ export function registerMcpRuntimeCommands(registry: CommandRegistry): void {
             }),
             '',
             'Add or update from inside Agent with explicit confirmation:',
+            '  Open /mcp and choose Add or update server, or use Agent Workspace -> Tools & MCP -> Add MCP server.',
+            'Automation equivalent:',
             '  /mcp add <name> <command> [args...] [--scope project|global] [--role <role>] [--trust <mode>] --yes',
-            'Example:',
-            '  /mcp add filesystem npx -y @modelcontextprotocol/server-filesystem . --scope project --role filesystem --trust constrained --yes',
           ].join('\n'));
         } catch (error) {
           ctx.print(`MCP config read failed: ${summarizeError(error)}`);
@@ -446,8 +445,7 @@ export function registerMcpRuntimeCommands(registry: CommandRegistry): void {
           + '  ~/.config/claude/claude_desktop_config.json  (Claude Desktop)\n'
           + '  .mcp/mcp.json                        (project-local)\n'
           + '  .goodvibes/mcp.json                  (goodvibes project)\n'
-          + '\nAdd one from inside Agent with explicit confirmation:\n'
-          + '  /mcp add filesystem npx -y @modelcontextprotocol/server-filesystem . --scope project --role filesystem --yes\n'
+          + '\nOpen /mcp and choose Add or update server, or use Agent Workspace -> Tools & MCP -> Add MCP server.\n'
           + '\nFormat: { "servers": [{ "name": "my-server", "command": "npx", "args": ["-y", "@modelcontextprotocol/server-filesystem", "/tmp"] }] }'
         );
         return;
@@ -473,11 +471,9 @@ function formatMcpServerList(servers: readonly McpSecurityServer[]): string {
   }
   if (connected.length > 0) {
     lines.push('');
-    lines.push('Run "/mcp tools" to list all tools, or "/mcp tools <server>" for a specific server.');
-    lines.push('Run "/mcp" to open the fullscreen MCP workspace, or "/mcp add <name> <command> [args...] [--scope project|global] --yes" to add/update.');
-    lines.push('Run "/mcp reload --yes" after editing MCP config outside Agent.');
-    lines.push('Run "/mcp trust <server> <mode> --yes" to change trust mode, or "/mcp role <server> <role> --yes" to change its coherence role.');
-    lines.push('Run "/mcp quarantine <server> [detail] --yes" to block a server, or "/mcp quarantine <server> approve [operatorId] --yes" to approve a temporary override.');
+    lines.push('Open "/mcp" for the fullscreen MCP workspace with server status, tools, config paths, and confirmed add/remove/reload actions.');
+    lines.push('Use "/mcp tools" for a compact tool list, or "/mcp tools <server>" for one server.');
+    lines.push('Use Settings -> MCP for allow-all decisions; trust, role, and quarantine command actions still require explicit --yes confirmation.');
     lines.push('Use /settings -> MCP to explicitly enable allow-all for a server.');
   }
   if (disconnected.length > 0) {

package/src/input/commands/operator-runtime.ts

@@ -1,7 +1,5 @@
 import type { CommandRegistry } from '../command-registry.ts';
-import type { ProfileData } from '@pellux/goodvibes-sdk/platform/profiles';
 import { logger } from '@pellux/goodvibes-sdk/platform/utils';
-import { requireProfileManager } from './runtime-services.ts';
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils';
 import { requireYesFlag, stripYesFlag } from './confirmation.ts';
 
@@ -63,71 +61,14 @@ export function registerOperatorRuntimeCommands(registry: CommandRegistry): void
   registry.register({
     name: 'profiles',
     aliases: ['profile'],
-    description: 'Browse, save, and delete config profiles',
-    usage: '[list|open|save <name> --yes|delete <name> --yes]',
-    argsHint: '[list|open|save --yes|delete --yes]',
-    handler(args, ctx) {
-      const parsed = stripYesFlag(args);
-      const sub = parsed.rest[0] ?? 'open';
-      const profileManager = requireProfileManager(ctx);
-      if (sub === 'open') {
-        if (ctx.openProfilePicker) {
-          ctx.openProfilePicker();
-        } else {
-          const profiles = profileManager.list();
-          if (profiles.length === 0) ctx.print('No profiles saved. Use /profiles save <name> --yes to save the current settings as a profile.');
-          else ctx.print(['Saved profiles:', ...profiles.map(p => `  ${p.name}`)].join('\n'));
-        }
-        return;
-      }
-      if (sub === 'list') {
-        const profiles = profileManager.list();
-        if (profiles.length === 0) ctx.print('No profiles saved. Use /profiles save <name> --yes to save the current settings as a profile.');
-        else ctx.print(['Saved profiles:', ...profiles.map(p => `  ${p.name}`)].join('\n'));
-        return;
-      }
-      if (sub === 'save') {
-        const name = parsed.rest[1];
-        if (!name) {
-          ctx.print('Usage: /profiles save <name> --yes');
-          return;
-        }
-        if (!parsed.yes) {
-          requireYesFlag(ctx, `save config profile ${name}`, '/profiles save <name> --yes');
-          return;
-        }
-        const all = ctx.platform.configManager.getAll();
-        const data: ProfileData = {
-          display: { ...all.display },
-          provider: {
-            model: all.provider.model,
-            reasoningEffort: all.provider.reasoningEffort,
-          },
-          behavior: { ...all.behavior },
-        };
-        profileManager.save(name, data);
-        ctx.print(`Profile saved: ${name}`);
-        return;
-      }
-      if (sub === 'delete' || sub === 'remove') {
-        const name = parsed.rest[1];
-        if (!name) {
-          ctx.print('Usage: /profiles delete <name> --yes');
-          return;
-        }
-        if (!parsed.yes) {
-          requireYesFlag(ctx, `delete config profile ${name}`, '/profiles delete <name> --yes');
-          return;
-        }
-        const deleted = profileManager.delete(name);
-        ctx.print(deleted ? `Profile deleted: ${name}` : `Profile not found: ${name}`);
-        return;
-      }
-      if (args.length === 0 && ctx.openProfilePicker) {
-        ctx.openProfilePicker();
-        return;
-      }
-      ctx.print('Usage: /profiles [list|open|save <name> --yes|delete <name> --yes]');
+    description: 'Blocked copied config-profile command; Agent uses isolated profile homes',
+    usage: 'disabled',
+    argsHint: 'disabled',
+    handler(_args, ctx) {
+      ctx.print([
+        'Copied config profiles are disabled in GoodVibes Agent.',
+        'Use /agent profiles or /agent-profile to create and manage isolated Agent profile homes.',
+      ].join('\n'));
     },
   });
 

package/src/input/commands/personas-runtime.ts

@@ -93,7 +93,7 @@ function renderDiscoveredPersonas(personas: readonly DiscoveredPersonaRecord[]):
     return [
       'Discovered Agent persona files',
       '  No persona markdown files found in project/global Agent persona folders.',
-      '  Search roots: .goodvibes/personas, .goodvibes/agent/personas, .goodvibes/agents, ~/.goodvibes/personas, ~/.goodvibes/agent/personas, ~/.goodvibes/agents',
+      '  Search roots: .goodvibes/personas, .goodvibes/agent/personas, ~/.goodvibes/personas, ~/.goodvibes/agent/personas',
     ].join('\n');
   }
   return [

package/src/input/commands/platform-access-runtime.ts

@@ -27,69 +27,6 @@ function inspectAuthBundle(bundle: AuthReviewBundle): string {
 }
 
 export function registerPlatformAccessRuntimeCommands(registry: CommandRegistry): void {
-  registry.register({
-    name: 'login',
-    description: 'Front-door login flow for provider subscriptions',
-    usage: 'provider <name> start|finish <code> --yes',
-    async handler(args, ctx) {
-      const parsed = stripYesFlag(args);
-      const commandArgs = [...parsed.rest];
-      const target = (commandArgs[0] ?? '').toLowerCase();
-      if (target === 'provider') {
-        const provider = commandArgs[1];
-        const mode = commandArgs[2]?.toLowerCase();
-        if (!provider || !mode) {
-          ctx.print('Usage: /login provider <name> start|finish <code> --yes');
-          return;
-        }
-        if (!parsed.yes) {
-          requireYesFlag(ctx, `${mode} provider subscription login for ${provider}`, '/login provider <name> start|finish <code> --yes');
-          return;
-        }
-        if (ctx.executeCommand) {
-          await ctx.executeCommand('subscription', ['login', provider, mode, ...commandArgs.slice(3), '--yes']);
-          return;
-        }
-        ctx.print(`Use /subscription login ${provider} ${mode}${commandArgs[3] ? ` ${commandArgs[3]}` : ''} --yes`);
-        return;
-      }
-      if (target === 'service' || target === 'runtime' || target === 'listener' || target === 'daemon') {
-        ctx.print([
-          'Connected-service login is outside GoodVibes Agent.',
-          'Agent does not create, exchange, store, rotate, revoke, or clear connected-service sessions.',
-          'Use the owning GoodVibes host for connected-service auth administration.',
-          'Agent login supports provider subscriptions only: /login provider <name> start|finish <code> --yes.',
-        ].join('\n'));
-        return;
-      }
-      ctx.print('Usage: /login provider <name> start|finish <code> --yes');
-    },
-  });
-
-  registry.register({
-    name: 'logout',
-    description: 'Front-door logout flow for provider subscription sessions and supported overrides',
-    usage: 'provider <name> --yes',
-    async handler(args, ctx) {
-      const parsed = stripYesFlag(args);
-      const commandArgs = [...parsed.rest];
-      const target = (commandArgs[0] ?? '').toLowerCase();
-      if (target !== 'provider' || !commandArgs[1]) {
-        ctx.print('Usage: /logout provider <name> --yes');
-        return;
-      }
-      if (!parsed.yes) {
-        requireYesFlag(ctx, `log out provider subscription ${commandArgs[1]}`, '/logout provider <name> --yes');
-        return;
-      }
-      if (ctx.executeCommand) {
-        await ctx.executeCommand('subscription', ['logout', commandArgs[1], '--yes']);
-        return;
-      }
-      ctx.print(`Use /subscription logout ${commandArgs[1]} --yes`);
-    },
-  });
-
   registry.register({
     name: 'auth',
     description: 'Review provider auth posture and export redacted auth review bundles',
@@ -100,18 +37,18 @@ export function registerPlatformAccessRuntimeCommands(registry: CommandRegistry)
       const sub = commandArgs[0] ?? 'review';
       if (sub === 'local') {
         ctx.print([
-          'Connected-service auth management is outside GoodVibes Agent.',
-          'Agent connects to GoodVibes services owned outside this package and does not create, delete, rotate, revoke, or clear connected-service auth users, sessions, or bootstrap credentials.',
-          'Use the owning GoodVibes host for connected-service auth administration.',
+          'Connected-host auth management is outside GoodVibes Agent.',
+          'Agent connects to a GoodVibes host owned outside this package and does not create, delete, rotate, revoke, or clear connected-host auth users, sessions, or bootstrap credentials.',
+          'Use the owning GoodVibes host for connected-host auth administration.',
           'Agent auth commands available here: /auth review, /auth show <provider>, /auth repair <provider>, /auth bundle export <path> --yes, /auth bundle inspect <path>.',
         ].join('\n'));
         return;
       }
       if (sub === 'login') {
         ctx.print([
-          'Connected-service login is outside GoodVibes Agent.',
-          'Agent does not create, exchange, store, rotate, revoke, or clear connected-service sessions.',
-          'Use the owning GoodVibes host for connected-service auth administration.',
+          'Connected-host login is outside GoodVibes Agent.',
+          'Agent does not create, exchange, store, rotate, revoke, or clear connected-host sessions.',
+          'Use the owning GoodVibes host for connected-host auth administration.',
         ].join('\n'));
         return;
       }
@@ -129,7 +66,7 @@ export function registerPlatformAccessRuntimeCommands(registry: CommandRegistry)
         const builtinProviders = listBuiltinSubscriptionProviders().map((entry) => entry.provider);
         ctx.print([
           'Auth Review',
-          '  connected-service auth: managed outside goodvibes-agent',
+          '  connected-host auth: managed outside goodvibes-agent',
           `  stored secrets: ${snapshot.secretKeyCount}`,
           `  built-in providers: ${builtinProviders.length}${builtinProviders.length > 0 ? ` (${builtinProviders.join(', ')})` : ''}`,
           `  active subscriptions: ${snapshot.activeSubscriptions}${snapshot.activeSubscriptions > 0 ? ` (${snapshot.providers.filter((provider) => provider.activeSubscription).map((provider) => provider.provider).join(', ')})` : ''}`,

package/src/input/commands/policy-dispatch.ts

@@ -289,7 +289,7 @@ async function handleStatus(_args: string[], context: CommandContext): Promise<v
 export function renderPolicyUsage(): string {
   return [
     'Usage: /policy <subcommand>',
-    '  /policy                        — open the policy/governance panel',
+    '  /policy status                 — show current policy state',
     '  load <bundle-id> [rule-count]  — Load a candidate bundle',
     '  simulate [mode]               — Run simulation (silent|warn|enforce)',
     '  diff                          — Show rule diff (current vs candidate)',

package/src/input/commands/policy.ts

@@ -4,14 +4,10 @@ import { dispatchPolicyCommand } from './policy-dispatch.ts';
 export const policyCommand: SlashCommand = {
   name: 'policy',
   aliases: ['pol'],
-  description: 'Open the policy panel or manage versioned policy bundles (load, simulate, diff, promote, rollback).',
+  description: 'Review or manage versioned policy bundles (load, simulate, diff, promote, rollback).',
   usage: '<subcommand> [args]',
   argsHint: 'load|simulate|diff|lint|preflight|promote|rollback|status',
   handler: async (args: string[], context: CommandContext): Promise<void> => {
-    if (args.length === 0 && context.openPolicyPanel) {
-      context.openPolicyPanel();
-      return;
-    }
     await dispatchPolicyCommand(args, context);
   },
 };

package/src/input/commands/product-runtime.ts

@@ -68,7 +68,7 @@ function formatTrustReview(bundle: TrustReviewBundle): string {
     'Trust Review',
     `  permission mode: ${bundle.permissionMode}`,
     `  secrets stored: ${bundle.secretKeys.length}`,
-    `  configured services: ${bundle.serviceNames.length}`,
+    `  configured integrations: ${bundle.serviceNames.length}`,
     `  plugins: ${bundle.pluginSummary.total} (trusted ${bundle.pluginSummary.trusted}, limited ${bundle.pluginSummary.limited}, untrusted ${bundle.pluginSummary.untrusted}, quarantined ${bundle.pluginSummary.quarantined})`,
     `  MCP servers: ${bundle.mcpSummary.total} (constrained ${bundle.mcpSummary.constrained}, ask-on-risk ${bundle.mcpSummary.askOnRisk}, allow-all ${bundle.mcpSummary.allowAll}, blocked ${bundle.mcpSummary.blocked}, quarantined ${bundle.mcpSummary.quarantined})`,
   ].join('\n');
@@ -81,7 +81,7 @@ function inspectTrustBundle(path: string): string {
     `  captured: ${new Date(parsed.capturedAt).toISOString()}`,
     `  permission mode: ${parsed.permissionMode}`,
     `  secrets stored: ${parsed.secretKeys.length}`,
-    `  configured services: ${parsed.serviceNames.length}`,
+    `  configured integrations: ${parsed.serviceNames.length}`,
     `  plugins: ${parsed.pluginSummary.total}`,
     `  MCP servers: ${parsed.mcpSummary.total}`,
   ].join('\n');

package/src/input/commands/qrcode-runtime.ts

@@ -1,16 +1,15 @@
 import type { CommandRegistry } from '../command-registry.ts';
-import { join } from 'node:path';
 import { networkInterfaces } from 'node:os';
 import {
   buildCompanionConnectionInfo,
   encodeConnectionPayload,
   formatConnectionBlock,
   generateQrMatrix,
-  getOrCreateCompanionToken,
   renderQrToString,
 } from '@pellux/goodvibes-sdk/platform/pairing';
 import { GOODVIBES_AGENT_PAIRING_SURFACE } from '../../config/surface.ts';
 import { resolveRuntimeEndpointBinding } from '../../cli/endpoints.ts';
+import { connectedHostTokenRequiredMessage, readConnectedHostOperatorToken } from '../../runtime/connected-host-auth.ts';
 import { requirePlatform, requireShellPaths } from './runtime-services.ts';
 
 function getLocalNetworkIp(): string {
@@ -41,8 +40,11 @@ export function registerQrcodeRuntimeCommands(registry: CommandRegistry): void {
     handler(_args, ctx) {
       const shellPaths = requireShellPaths(ctx);
       const configManager = requirePlatform(ctx).configManager;
-      const daemonHomeDir = join(shellPaths.homeDirectory, '.goodvibes', 'daemon');
-      const tokenRecord = getOrCreateCompanionToken(GOODVIBES_AGENT_PAIRING_SURFACE, { daemonHomeDir });
+      const tokenRecord = readConnectedHostOperatorToken(shellPaths.homeDirectory);
+      if (!tokenRecord.token) {
+        ctx.print(connectedHostTokenRequiredMessage(tokenRecord.path));
+        return;
+      }
       const binding = resolveRuntimeEndpointBinding(configManager, 'controlPlane');
       const daemonUrl = `http://${urlHostForBindHost(binding.host)}:${binding.port}`;
       const info = buildCompanionConnectionInfo({

package/src/input/commands/routines-runtime.ts

@@ -1,5 +1,6 @@
 import { discoverRoutines, type DiscoveredRoutineRecord } from '../../agent/routine-discovery.ts';
-import { AgentRoutineRegistry, type AgentRoutineRecord } from '../../agent/routine-registry.ts';
+import { AgentRoutineRegistry, evaluateAgentRoutineReadiness, type AgentRoutineRecord } from '../../agent/routine-registry.ts';
+import { buildAgentSkillRequirements, formatAgentSkillRequirement } from '../../agent/skill-registry.ts';
 import {
   buildRoutineSchedulePreview,
   promoteRoutineToDaemonSchedule,
@@ -75,13 +76,17 @@ function requiredFlag(flags: ReadonlyMap<string, string>, key: string): string {
 function summarizeRoutine(routine: AgentRoutineRecord): string {
   const enabled = routine.enabled ? 'enabled' : 'disabled';
   const tags = routine.tags.length > 0 ? ` tags=${routine.tags.join(',')}` : '';
-  return `  ${routine.id}  ${enabled}  ${routine.reviewState}  starts=${routine.startCount}  ${routine.name} - ${routine.description}${tags}`;
+  const readiness = evaluateAgentRoutineReadiness(routine);
+  const ready = readiness.ready ? 'ready' : `needs ${readiness.missing.map(formatAgentSkillRequirement).join(',')}`;
+  return `  ${routine.id}  ${enabled}  ${routine.reviewState}  ${ready}  starts=${routine.startCount}  ${routine.name} - ${routine.description}${tags}`;
 }
 
-function renderList(title: string, registry: AgentRoutineRegistry, routines: readonly AgentRoutineRecord[]): string {
+function renderList(title: string, registry: AgentRoutineRegistry, routines: readonly AgentRoutineRecord[], emptyMessage?: string): string {
   const snapshot = registry.snapshot();
   if (routines.length === 0) {
-    return `${title}\n  No local Agent routines yet. Create one with /routines create --name <name> --description <summary> --steps <steps>.`;
+    return emptyMessage
+      ? `${title}\n  ${emptyMessage}`
+      : `${title}\n  No local Agent routines yet. Create one with /routines create --name <name> --description <summary> --steps <steps>.`;
   }
   return [
     `${title} (${routines.length})`,
@@ -92,10 +97,14 @@ function renderList(title: string, registry: AgentRoutineRegistry, routines: rea
 }
 
 function renderRoutine(routine: AgentRoutineRecord): string {
+  const readiness = evaluateAgentRoutineReadiness(routine);
   return [
     `Routine ${routine.name}`,
     `  id: ${routine.id}`,
     `  enabled: ${routine.enabled ? 'yes' : 'no'}`,
+    `  readiness: ${readiness.ready ? 'ready' : 'needs setup'}`,
+    `  requirements: ${routine.requirements.map(formatAgentSkillRequirement).join(', ') || '(none)'}`,
+    readiness.missing.length > 0 ? `  missing: ${readiness.missing.map(formatAgentSkillRequirement).join(', ')}` : '',
     `  review: ${routine.reviewState}`,
     `  source: ${routine.source}`,
     `  provenance: ${routine.provenance}`,
@@ -151,6 +160,14 @@ function frontmatterList(routine: DiscoveredRoutineRecord, key: string): readonl
   return splitList(value);
 }
 
+function frontmatterAnyList(routine: DiscoveredRoutineRecord, keys: readonly string[]): readonly string[] {
+  for (const key of keys) {
+    const values = frontmatterList(routine, key);
+    if (values.length > 0) return values;
+  }
+  return [];
+}
+
 function printError(ctx: CommandContext, error: unknown): void {
   ctx.print(`Error: ${error instanceof Error ? error.message : String(error)}`);
 }
@@ -185,6 +202,10 @@ async function importDiscoveredRoutine(args: readonly string[], ctx: CommandCont
     steps: discovered.steps,
     tags: frontmatterList(discovered, 'tags'),
     triggers: frontmatterList(discovered, 'triggers'),
+    requirements: buildAgentSkillRequirements({
+      env: frontmatterAnyList(discovered, ['requiresEnv', 'requires-env', 'requires_env']),
+      commands: frontmatterAnyList(discovered, ['requiresCommands', 'requires-commands', 'requires_commands', 'commands']),
+    }),
     enabled: parsed.flags.get('enabled') === 'true',
     source: 'imported',
     provenance: `discovered:${discovered.origin}:${discovered.path}`,
@@ -231,6 +252,11 @@ export async function runRoutinesRuntimeCommand(args: readonly string[], ctx: Co
       ctx.print(renderList('Enabled Agent Routines', routineRegistry, snapshot.enabledRoutines));
       return;
     }
+    if (sub === 'attention' || sub === 'needs-setup') {
+      const routines = routineRegistry.list().filter((routine) => !evaluateAgentRoutineReadiness(routine).ready);
+      ctx.print(renderList('Agent Routines needing setup', routineRegistry, routines, 'No local Agent routines need setup.'));
+      return;
+    }
     if (sub === 'discover' || sub === 'discovered') {
       ctx.print(renderDiscoveredRoutines(await discoverRoutines(requireShellPaths(ctx))));
       return;
@@ -284,6 +310,10 @@ export async function runRoutinesRuntimeCommand(args: readonly string[], ctx: Co
         steps,
         triggers: splitList(parsed.flags.get('triggers')),
         tags: splitList(parsed.flags.get('tags')),
+        requirements: buildAgentSkillRequirements({
+          env: splitList(parsed.flags.get('requires-env')),
+          commands: splitList(parsed.flags.get('requires-command') ?? parsed.flags.get('requires-commands')),
+        }),
         enabled: parsed.flags.get('enabled') === 'true',
         source: 'user',
         provenance: 'slash-command',
@@ -304,6 +334,12 @@ export async function runRoutinesRuntimeCommand(args: readonly string[], ctx: Co
         steps: parsed.flags.get('steps'),
         triggers: parsed.flags.has('triggers') ? splitList(parsed.flags.get('triggers')) : undefined,
         tags: parsed.flags.has('tags') ? splitList(parsed.flags.get('tags')) : undefined,
+        requirements: parsed.flags.has('requires-env') || parsed.flags.has('requires-command') || parsed.flags.has('requires-commands')
+          ? buildAgentSkillRequirements({
+            env: splitList(parsed.flags.get('requires-env')),
+            commands: splitList(parsed.flags.get('requires-command') ?? parsed.flags.get('requires-commands')),
+          })
+          : undefined,
         provenance: 'slash-command',
       });
       ctx.print(`Updated Agent routine ${updated.id}: ${updated.name}`);
@@ -326,8 +362,10 @@ export async function runRoutinesRuntimeCommand(args: readonly string[], ctx: Co
         return;
       }
       const routine = routineRegistry.markStarted(id);
+      const readiness = evaluateAgentRoutineReadiness(routine);
       ctx.print([
         `Started Agent routine ${routine.id}: ${routine.name}`,
+        `  readiness: ${readiness.ready ? 'ready' : `needs setup (${readiness.missing.map(formatAgentSkillRequirement).join(', ')})`}`,
         '  policy: same main conversation; no hidden job, runtime mutation, or external side effect was started',
         '',
         routine.steps,
@@ -373,7 +411,7 @@ export async function runRoutinesRuntimeCommand(args: readonly string[], ctx: Co
       ctx.print(`Deleted Agent routine ${removed.id}: ${removed.name}`);
       return;
     }
-    ctx.print('Usage: /routines [list|enabled|discover|import-discovered|search|show|receipts|reconcile|receipt|create|update|enable|disable|start|review|stale|promote|delete]');
+    ctx.print('Usage: /routines [list|enabled|attention|discover|import-discovered|search|show|receipts|reconcile|receipt|create|update|enable|disable|start|review|stale|promote|delete]');
   } catch (error) {
     printError(ctx, error);
   }
@@ -384,7 +422,7 @@ export function registerRoutinesRuntimeCommands(registry: CommandRegistry): void
     name: 'routines',
     aliases: ['routine'],
     description: 'Manage local GoodVibes Agent routines',
-    usage: '[list|enabled|discover|import-discovered <name> --yes|search <query>|show <id>|receipts|reconcile|receipt <id>|create --name <name> --description <summary> --steps <steps>|update <id> [--name ...] [--description ...] [--steps ...]|enable <id>|disable <id>|start <id>|review <id>|stale <id> <reason...>|promote <id> --cron <expr> [--delivery-channel slack] --yes|delete <id> --yes]',
+    usage: '[list|enabled|attention|discover|import-discovered <name> --yes|search <query>|show <id>|receipts|reconcile|receipt <id>|create --name <name> --description <summary> --steps <steps> [--requires-env A,B] [--requires-command gh,jq]|update <id> [--name ...] [--description ...] [--steps ...]|enable <id>|disable <id>|start <id>|review <id>|stale <id> <reason...>|promote <id> --cron <expr> [--delivery-channel slack] --yes|delete <id> --yes]',
     handler: runRoutinesRuntimeCommand,
   });
 }

package/src/input/commands/runtime-services.ts

@@ -22,7 +22,6 @@ import { GOODVIBES_AGENT_SURFACE_ROOT } from '../../config/surface.ts';
 import type { ProviderApi } from '@pellux/goodvibes-sdk/platform/providers';
 import type {
   ShellAgentManagerService,
-  ShellAcpManagerService,
   ShellAutomationManagerService,
   ShellAutomationManagerRuntimeService,
   ShellModeManagerService,
@@ -32,7 +31,7 @@ import type {
 
 function requireContextValue<T>(value: T | null | undefined, name: string): T {
   if (value == null) {
-    throw new Error(`commandContext.${name} is required but was not wired at bootstrap`);
+    throw new Error(`commandContext.${name} is unavailable in this Agent runtime`);
   }
   return value;
 }
@@ -274,10 +273,6 @@ export function requireAgentManager(context: CommandContext): ShellAgentManagerS
   return requireContextValue(context.ops.agentManager, 'ops.agentManager') as ShellAgentManagerService;
 }
 
-export function requireAcpManager(context: CommandContext): ShellAcpManagerService {
-  return requireContextValue(context.ops.acpManager, 'ops.acpManager') as ShellAcpManagerService;
-}
-
 export function requireModeManager(context: CommandContext): ShellModeManagerService {
   return requireContextValue(context.ops.modeManager, 'ops.modeManager') as ShellModeManagerService;
 }
@@ -285,11 +280,3 @@ export function requireModeManager(context: CommandContext): ShellModeManagerSer
 export function requireAutomationManager(context: CommandContext): ShellAutomationManagerRuntimeService {
   return requireContextValue(context.ops.automationManager, 'ops.automationManager') as ShellAutomationManagerRuntimeService;
 }
-
-export function requireSandboxSessionRegistry(context: CommandContext) {
-  return requireContextValue(context.workspace.sandboxSessionRegistry, 'workspace.sandboxSessionRegistry');
-}
-
-export function requireWorktreeRegistry(context: CommandContext) {
-  return requireContextValue(context.workspace.worktreeRegistry, 'workspace.worktreeRegistry');
-}

package/src/input/commands/security-runtime.ts

@@ -10,16 +10,11 @@ export function registerSecurityRuntimeCommands(registry: CommandRegistry): void
     description: 'Inspect security posture, attack paths, and review state',
     usage: '[review | attack-paths | tokens]',
     handler(args, ctx) {
-      if (args.length === 0) {
-        if (ctx.openSecurityPanel) {
-          ctx.openSecurityPanel();
-          return;
-        }
-        ctx.print('Security panel is not available in this runtime.');
+      const subcommand = args[0]?.toLowerCase() ?? 'review';
+      if (subcommand === 'open' || subcommand === 'panel') {
+        ctx.print('Security panels are not part of the Agent workspace. Use /security review.');
         return;
       }
-
-      const subcommand = args[0]?.toLowerCase() ?? 'review';
       const audit = requireTokenAuditor(ctx).auditAll(Date.now());
       const securitySnapshot = requireReadModels(ctx).security.getSnapshot();
       const policySnapshot = ctx.extensions.policyRuntimeState?.getSnapshot();

package/src/input/commands/session-content.ts

@@ -144,7 +144,7 @@ export function registerSessionContentCommands(registry: CommandRegistry): void
         if (meta.title) ctx.session.conversationManager.title = meta.title;
         ctx.session.conversationManager.rebuildHistory();
         ctx.renderRequest();
-        ctx.print(`Session loaded: ${args[0]} (${messages.length} messages)${agentRecords.length > 0 ? ` [ignored ${agentRecords.length} service-owned local agent record${agentRecords.length !== 1 ? 's' : ''}]` : ''}`);
+        ctx.print(`Session loaded: ${args[0]} (${messages.length} messages)${agentRecords.length > 0 ? ` [ignored ${agentRecords.length} host-owned local agent record${agentRecords.length !== 1 ? 's' : ''}]` : ''}`);
       } catch (e) {
         ctx.print(`Failed to load session: ${summarizeError(e)}`);
       }

package/src/input/commands/session-workflow.ts

@@ -6,7 +6,7 @@ import type { TranscriptEventKind } from '@pellux/goodvibes-sdk/platform/core';
 import type { ConversationTitleSource } from '../../core/conversation';
 import type { SessionReturnContextSummary } from '@/runtime/index.ts';
 import { formatReturnContextForDisplay, getReturnContextMode, maybeAssistReturnContextSummary } from '@/runtime/index.ts';
-import { requirePanelManager, requireProviderApi, requireSessionManager } from './runtime-services.ts';
+import { requireProviderApi, requireSessionManager } from './runtime-services.ts';
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils';
 import { requireYesFlag, stripYesFlag } from './confirmation.ts';
 
@@ -81,18 +81,8 @@ function buildTranscriptReviewLines(
 
 function reopenPanelsFromReturnContext(ctx: CommandContext, summary: SessionReturnContextSummary | undefined): string[] {
   if (!summary?.openPanels || summary.openPanels.length === 0) return [];
-  const panelManager = requirePanelManager(ctx);
-  const reopened: string[] = [];
-  for (const panelId of summary.openPanels.slice(0, 4)) {
-    try {
-      panelManager.open(panelId);
-      reopened.push(panelId);
-    } catch {
-      // Ignore unknown or currently unavailable panel ids during resume.
-    }
-  }
-  if (reopened.length > 0) panelManager.show();
-  return reopened;
+  ctx.print(`  Saved panel state ignored: ${summary.openPanels.slice(0, 4).join(', ')}. Use /agent for the Agent operator workspace.`);
+  return [];
 }
 
 function printSessionExport(
@@ -182,7 +172,7 @@ export async function handleSessionWorkflowCommand(args: string[], ctx: CommandC
           session.returnContext.activeTasks ? `active=${session.returnContext.activeTasks}` : null,
           session.returnContext.blockedTasks ? `blocked=${session.returnContext.blockedTasks}` : null,
           session.returnContext.pendingApprovals ? `approvals=${session.returnContext.pendingApprovals}` : null,
-          session.returnContext.openPanels?.length ? `panels=${session.returnContext.openPanels.slice(0, 3).join(',')}` : null,
+          session.returnContext.openPanels?.length ? `saved-panel-state-ignored=${session.returnContext.openPanels.slice(0, 3).join(',')}` : null,
         ].filter(Boolean).join('  ');
         if (posture) lines.push(`     posture: ${posture}`);
       }
@@ -258,6 +248,7 @@ export async function handleSessionWorkflowCommand(args: string[], ctx: CommandC
       const returnContextMode = getReturnContextMode(ctx.platform.configManager);
       if (returnContextMode !== 'off' && meta.returnContext) {
         for (const line of formatReturnContextForDisplay(meta.returnContext)) {
+          if (line.startsWith('Open panels:')) continue;
           ctx.print(`  ${line}`);
         }
         if (reopenedPanels.length > 0) {

package/src/input/commands/shell-core.ts

@@ -115,6 +115,10 @@ export function registerShellCoreCommands(registry: CommandRegistry): void {
       if (ctx.openSelection) {
         const items: SelectionItem[] = [
           { id: '/agent', label: '/agent', detail: 'Open the Agent operator workspace', category: 'Agent Operator' },
+          { id: '/agent setup', label: '/agent setup', detail: 'Open the Agent setup workspace', category: 'Agent Operator' },
+          { id: '/agent channels', label: '/agent channels', detail: 'Open channel readiness and delivery safety', category: 'Agent Operator' },
+          { id: '/agent knowledge', label: '/agent knowledge', detail: 'Open isolated Agent Knowledge workflows', category: 'Agent Operator' },
+          { id: '/agent voice-media', label: '/agent voice-media', detail: 'Open voice, TTS, image, browser, and media setup', category: 'Agent Operator' },
           { id: '/home', label: '/home', detail: 'Alias for the Agent operator workspace', category: 'Agent Operator' },
           { id: '/brief', label: '/brief', detail: 'Show a concise Agent operator briefing and next actions', category: 'Agent Operator' },
           { id: '/knowledge', label: '/knowledge', detail: 'Inspect isolated Agent Knowledge status, ask/search, and ingest flows', category: 'Agent Operator' },
@@ -124,7 +128,7 @@ export function registerShellCoreCommands(registry: CommandRegistry): void {
           { id: '/routines', label: '/routines', detail: 'Create, review, start, and promote Agent routines explicitly', category: 'Agent Operator' },
           { id: '/delegate', label: '/delegate [task]', detail: 'Explicit build/fix/review handoff to GoodVibes TUI', category: 'Agent Operator' },
           { id: '/channels', label: '/channels', detail: 'Inspect messaging-channel readiness without sending messages', category: 'Agent Operator' },
-          { id: '/pair', label: '/pair', detail: 'Pair companion clients through connected GoodVibes services', category: 'Agent Operator' },
+          { id: '/pair', label: '/pair', detail: 'Pair companion clients through connected GoodVibes host', category: 'Agent Operator' },
           { id: '/model', label: '/model [id]', detail: 'Select LLM model', category: 'Model & Provider' },
           { id: '/provider', label: '/provider [name]', detail: 'Switch provider', category: 'Model & Provider' },
           { id: '/effort', label: '/effort [level]', detail: 'Reasoning effort (instant/low/medium/high)', category: 'Model & Provider' },
@@ -156,7 +160,9 @@ export function registerShellCoreCommands(registry: CommandRegistry): void {
           { id: '/paste', label: '/paste', detail: 'Insert clipboard text or image into the prompt', category: 'Tools & System' },
           { id: '/shortcuts', label: '/shortcuts', detail: 'View keyboard shortcuts reference', category: 'Tools & System' },
           { id: '/commands', label: '/commands', detail: 'Browse all commands in a scrollable list', category: 'Tools & System' },
+          { id: '/compat', label: '/compat', detail: 'Inspect connected-host and Agent Knowledge compatibility', category: 'Tools & System' },
           { id: '/secrets', label: '/secrets set|link|get|test|list|delete', detail: 'Manage encrypted and provider-backed secrets', category: 'Tools & System' },
+          { id: '/bundle', label: '/bundle export|inspect|import', detail: 'Manage redacted Agent support bundles', category: 'Tools & System' },
           { id: '/help', label: '/help', detail: 'This help', category: 'Tools & System' },
           { id: '/quit', label: '/quit', detail: 'Exit', category: 'Tools & System' },
         ];
@@ -172,7 +178,7 @@ export function registerShellCoreCommands(registry: CommandRegistry): void {
         });
         return;
       }
-      ctx.print('Use /help to open the help modal. Commands: /agent, /brief, /knowledge, /memory, /personas, /agent-skills, /routines, /channels, /delegate, /model, /provider, /config, /paste, /sessions, /bookmarks, /save, /load, /undo, /redo, /retry, /clear, /reset, /compact, /export, /title, /effort, /expand, /collapse, /quit');
+      ctx.print('Use /help to open the help modal. Commands: /agent, /brief, /knowledge, /memory, /personas, /agent-skills, /routines, /channels, /delegate, /model, /provider, /config, /compat, /bundle, /paste, /sessions, /bookmarks, /save, /load, /undo, /redo, /retry, /clear, /reset, /compact, /export, /title, /effort, /expand, /collapse, /quit');
     },
   });