@pellux/goodvibes-agent 0.1.116 → 0.1.117

package/src/input/settings-modal.ts

@@ -34,7 +34,7 @@ import {
   type SettingsModalOpenOptions,
   type SubscriptionEntry,
 } from './settings-modal-types.ts';
-import { AGENT_EXTERNAL_DAEMON_SETTING_LOCK_REASON, isAgentHiddenSettingKey, isExternalDaemonOwnedSettingKey } from './settings-modal-agent-policy.ts';
+import { AGENT_EXTERNAL_HOST_SETTING_LOCK_REASON, isAgentHiddenSettingKey, isExternalHostOwnedSettingKey } from './settings-modal-agent-policy.ts';
 
 export {
   SETTINGS_CATEGORIES,
@@ -50,7 +50,7 @@ export {
   type SettingsModalOpenOptions,
   type SubscriptionEntry,
 } from './settings-modal-types.ts';
-export { AGENT_EXTERNAL_DAEMON_SETTING_LOCK_REASON, isExternalDaemonOwnedSettingKey } from './settings-modal-agent-policy.ts';
+export { AGENT_EXTERNAL_HOST_SETTING_LOCK_REASON, isExternalHostOwnedSettingKey } from './settings-modal-agent-policy.ts';
 export { isAgentHiddenSettingKey } from './settings-modal-agent-policy.ts';
 
 // ---------------------------------------------------------------------------
@@ -352,7 +352,7 @@ export class SettingsModal {
 
     const entry = this.getSelected();
     if (!entry || !this.configManager) return;
-    if (this._blockExternalDaemonOwnedSetting(entry)) return;
+    if (this._blockExternalHostOwnedSetting(entry)) return;
 
     const { setting } = entry;
 
@@ -417,7 +417,7 @@ export class SettingsModal {
 
     const entry = this.getSelected();
     if (!entry || !this.configManager) return;
-    if (this._blockExternalDaemonOwnedSetting(entry)) return;
+    if (this._blockExternalHostOwnedSetting(entry)) return;
     const { setting } = entry;
 
     if (setting.type === 'boolean') {
@@ -539,7 +539,7 @@ export class SettingsModal {
 
     const entry = this.getSelected();
     if (!entry || !this.configManager) return false;
-    if (this._blockExternalDaemonOwnedSetting(entry)) {
+    if (this._blockExternalHostOwnedSetting(entry)) {
       this.editingMode = false;
       this.editBuffer = '';
       return false;
@@ -590,7 +590,7 @@ export class SettingsModal {
     if (this.editingMode || !this.configManager) return null;
     const entry = this.getSelected();
     if (!entry) return null;
-    if (this._blockExternalDaemonOwnedSetting(entry)) return null;
+    if (this._blockExternalHostOwnedSetting(entry)) return null;
     const key = entry.setting.key as ConfigKey;
     this._setValue(key, entry.setting.default);
     if (isSecretConfigKey(key) && this.secretsManager) {
@@ -627,16 +627,16 @@ export class SettingsModal {
       const cat = rawCat as SettingsCategory;
       const currentValue = configManager.get(setting.key as ConfigKey);
       const resolved = getResolvedSettingLookup(configManager, setting.key as ConfigKey)?.entry;
-      const daemonOwned = isExternalDaemonOwnedSettingKey(setting.key);
+      const hostOwned = isExternalHostOwnedSettingKey(setting.key);
       const entry: SettingEntry = {
         setting,
         currentValue,
         isDefault: currentValue === setting.default,
         effectiveSource: resolved?.effectiveSource,
-        locked: daemonOwned || resolved?.locked,
+        locked: hostOwned || resolved?.locked,
         conflict: resolved?.conflict,
         sourceLabel: resolved?.sourceLabel,
-        lockReason: daemonOwned ? AGENT_EXTERNAL_DAEMON_SETTING_LOCK_REASON : resolved?.lockReason,
+        lockReason: hostOwned ? AGENT_EXTERNAL_HOST_SETTING_LOCK_REASON : resolved?.lockReason,
       };
       if (this.groups.has(cat)) this.groups.get(cat)!.push(entry);
       if ((rawCat === 'controlPlane' || rawCat === 'httpListener' || rawCat === 'web') && this.groups.has('network')) {
@@ -745,8 +745,8 @@ export class SettingsModal {
 
   private _setValue(key: ConfigKey, value: unknown): void {
     if (!this.configManager) return;
-    if (isExternalDaemonOwnedSettingKey(key)) {
-      this.lastSettingEffectMessage = AGENT_EXTERNAL_DAEMON_SETTING_LOCK_REASON;
+    if (isExternalHostOwnedSettingKey(key)) {
+      this.lastSettingEffectMessage = AGENT_EXTERNAL_HOST_SETTING_LOCK_REASON;
       return;
     }
     // Diff previous value before writing — avoids false restart notices on no-op saves
@@ -787,9 +787,9 @@ export class SettingsModal {
     }
   }
 
-  private _blockExternalDaemonOwnedSetting(entry: SettingEntry): boolean {
-    if (!isExternalDaemonOwnedSettingKey(entry.setting.key)) return false;
-    this.lastSettingEffectMessage = entry.lockReason ?? AGENT_EXTERNAL_DAEMON_SETTING_LOCK_REASON;
+  private _blockExternalHostOwnedSetting(entry: SettingEntry): boolean {
+    if (!isExternalHostOwnedSettingKey(entry.setting.key)) return false;
+    this.lastSettingEffectMessage = entry.lockReason ?? AGENT_EXTERNAL_HOST_SETTING_LOCK_REASON;
     return true;
   }
 

package/src/main.ts

@@ -11,7 +11,6 @@ import { ToolRegistry } from '@pellux/goodvibes-sdk/platform/tools';
 import { registerAllTools } from '@pellux/goodvibes-sdk/platform/tools';
 import { FileUndoManager } from '@pellux/goodvibes-sdk/platform/state';
 import { PermissionManager } from '@pellux/goodvibes-sdk/platform/permissions';
-import { AcpManager } from '@pellux/goodvibes-sdk/platform/acp';
 import { PermissionPromptUI } from './permissions/prompt.ts';
 import { CommandRegistry } from './input/command-registry.ts';
 import type { CommandContext } from './input/command-registry.ts';
@@ -114,7 +113,6 @@ async function main() {
     sessionLineageTracker: ctx.services.sessionLineageTracker,
     idempotencyStore: ctx.services.idempotencyStore,
   });
-  ctx.services.wrfcController.setPlanManager(ctx.services.planManager);
   let activeConversationWidth = stdout.columns || 80;
   conversation.setWidthProvider(() => activeConversationWidth);
   {

package/src/panels/automation-control-panel.ts

@@ -102,9 +102,9 @@ export class AutomationControlPanel extends ScrollableListPanel<AutomationRun> {
         sections: [{
           lines: buildEmptyState(
             width,
-            ' Runtime store not wired.',
-            'This panel needs the shared runtime store to inspect automation jobs, runs, and deliveries.',
-            [{ command: '/schedule list', summary: 'review automation from the shell while the runtime wiring is restored' }],
+            ' Connected-host automation state is unavailable.',
+            'Use /schedule list for the supported Agent schedule summary. This deferred panel does not start or mutate automation.',
+            [{ command: '/schedule list', summary: 'review automation without starting hidden work' }],
             C,
           ),
         }],

package/src/panels/builtin/agent.ts

@@ -80,7 +80,7 @@ export function registerAgentPanels(manager: PanelManager, deps: ResolvedBuiltin
     name: 'Schedule',
     icon: 'Z',
     category: 'agent',
-    description: 'Read-only schedule posture from connected GoodVibes services; local Agent schedule mutation is blocked',
+    description: 'Read-only schedule posture from the connected GoodVibes host; local Agent schedule mutation is blocked',
     factory: () => new SchedulePanel(requireAutomationManager(deps)),
   });
 }

package/src/panels/builtin/operations.ts

@@ -45,7 +45,7 @@ export function registerOperationsPanels(manager: PanelManager, deps: ResolvedBu
     name: 'Automation',
     icon: 'M',
     category: 'monitoring',
-    description: 'Read-only automation jobs, runs, deliveries, and failure posture from connected GoodVibes services',
+    description: 'Read-only automation jobs, runs, deliveries, and failure posture from the connected GoodVibes host',
     factory: () => new AutomationControlPanel(ui.readModels.automation),
   });
 
@@ -81,7 +81,7 @@ export function registerOperationsPanels(manager: PanelManager, deps: ResolvedBu
     name: 'Tasks',
     icon: 'J',
     category: 'monitoring',
-    description: 'Queued, running, blocked, failed, and completed task summaries from connected GoodVibes services',
+    description: 'Queued, running, blocked, failed, and completed task summaries from the connected GoodVibes host',
     factory: () => new TasksPanel(ui.readModels.tasks),
   });
 

package/src/panels/builtin/session.ts

@@ -1,5 +1,5 @@
 import { networkInterfaces } from 'node:os';
-import { readFileSync } from 'node:fs';
+import { existsSync, readFileSync } from 'node:fs';
 import type { PanelManager } from '../panel-manager.ts';
 import { SessionBrowserPanel } from '../session-browser-panel.ts';
 import { QrPanel } from '../qr-panel.ts';
@@ -9,8 +9,6 @@ import { TokenBudgetPanel } from '../token-budget-panel.ts';
 import type { ResolvedBuiltinPanelDeps } from './shared.ts';
 import { requireUiServices } from './shared.ts';
 import {
-  getOrCreateCompanionToken,
-  regenerateCompanionToken,
   buildCompanionConnectionInfo,
 } from '@pellux/goodvibes-sdk/platform/pairing';
 import { copyToClipboard } from '../../utils/clipboard.ts';
@@ -42,6 +40,18 @@ function readBootstrapPassword(credentialPath: string): string | undefined {
   return undefined;
 }
 
+function readOperatorToken(tokenPath: string): string | null {
+  if (!existsSync(tokenPath)) return null;
+  try {
+    const parsed = JSON.parse(readFileSync(tokenPath, 'utf-8')) as unknown;
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) return null;
+    const token = (parsed as Record<string, unknown>)['token'];
+    return typeof token === 'string' && token.trim().length > 0 ? token : null;
+  } catch {
+    return null;
+  }
+}
+
 export function registerSessionPanels(manager: PanelManager, deps: ResolvedBuiltinPanelDeps): void {
   manager.registerType({
     id: 'qr-code',
@@ -51,28 +61,26 @@ export function registerSessionPanels(manager: PanelManager, deps: ResolvedBuilt
     description: 'QR code for companion app pairing — scan to connect a mobile or desktop companion',
     factory: () => {
       if (!deps.daemonHomeDir) throw new Error('daemonHomeDir must be provided to the session panel factory via BuiltinPanelDeps');
-      const daemonHomeDir = deps.daemonHomeDir;
-      const tokenRecord = getOrCreateCompanionToken(GOODVIBES_AGENT_PAIRING_SURFACE, { daemonHomeDir });
+      const token = readOperatorToken(`${deps.daemonHomeDir}/operator-tokens.json`);
       const daemonPort = deps.configManager.get('controlPlane.port');
       const daemonHost = String(process.env['GOODVIBES_DAEMON_HOST'] ?? getLocalNetworkIp());
       const daemonUrl = `http://${daemonHost}:${daemonPort}`;
       const bootstrapPassword = readBootstrapPassword(deps.localUserAuthManager.getBootstrapCredentialPath());
-      const connectionInfo = buildCompanionConnectionInfo({
-        daemonUrl,
-        token: tokenRecord.token,
-        password: bootstrapPassword,
-        surface: GOODVIBES_AGENT_PAIRING_SURFACE,
-      });
-      const regenerate = (): typeof connectionInfo => {
-        const newRecord = regenerateCompanionToken({ daemonHomeDir });
-        return buildCompanionConnectionInfo({
+      const connectionInfo = token
+        ? buildCompanionConnectionInfo({
           daemonUrl,
-          token: newRecord.token,
+          token,
           password: bootstrapPassword,
           surface: GOODVIBES_AGENT_PAIRING_SURFACE,
-        });
-      };
-      return new QrPanel(connectionInfo, regenerate, copyToClipboard);
+        })
+        : {
+          url: daemonUrl,
+          token: '',
+          username: 'admin',
+          ...(bootstrapPassword !== undefined ? { password: bootstrapPassword } : {}),
+          surface: GOODVIBES_AGENT_PAIRING_SURFACE,
+        };
+      return new QrPanel(connectionInfo, undefined, copyToClipboard);
     },
   });
 

package/src/panels/builtin/shared.ts

@@ -80,13 +80,13 @@ export interface BuiltinPanelDeps {
   tokenAuditor: ApiTokenAuditor;
   /** Shared component-health monitor for rate-limited panels and diagnostics. */
   componentHealthMonitor: ComponentHealthMonitor;
-  /** Shared worktree registry for worktree surfaces. */
+  /** Copied shell dependency kept inert in Agent; build worktree UX belongs to GoodVibes TUI delegation. */
   worktreeRegistry: WorktreeRegistry;
-  /** Shared sandbox session registry for sandbox surfaces and tools. */
+  /** Isolation session registry used by MCP internals; Agent does not expose local execution-isolation command UX. */
   sandboxSessionRegistry: SandboxSessionRegistry;
   /**
-   * Resolved daemon home directory (e.g. `~/.goodvibes/daemon`) — owned by the composition root
-   * and passed explicitly so panel factories do not discover cwd/home implicitly.
+   * Resolved connected-host token directory (e.g. `~/.goodvibes/daemon`) — owned by the
+   * composition root and passed explicitly so panel factories do not discover cwd/home implicitly.
    */
   daemonHomeDir?: string;
   /** Session memory store for context and token budget panels. */
@@ -103,7 +103,7 @@ export interface BuiltinPanelDeps {
   workPlanStore?: import('../../work-plans/work-plan-store.ts').WorkPlanStore;
   /** Shared system-messages panel instance attached from boot so low-priority chatter stays out of conversation. */
   systemMessagesPanel?: import('../system-messages-panel.ts').SystemMessagesPanel;
-  /** Explicit UI-facing runtime services for agent/process/WRFC/remote panels and modals. */
+  /** Explicit UI-facing runtime services for operator panels and modals. */
   uiServices?: UiRuntimeServices;
   /** Shared plugin manager observer for plugin and security panels. */
   pluginManager?: PluginManagerObserver;
@@ -240,7 +240,7 @@ export function requireAutomationManager(deps: BuiltinPanelDeps): AutomationMana
 
 export function requireUiServices(deps: BuiltinPanelDeps): UiRuntimeServices {
   if (!deps.uiServices) {
-    throw new Error('UI runtime services must be wired at bootstrap for agent, process, WRFC, and remote panels.');
+    throw new Error('UI runtime services must be wired at bootstrap for operator panels.');
   }
   return deps.uiServices;
 }

package/src/panels/project-planning-panel.ts

@@ -600,7 +600,7 @@ export class ProjectPlanningPanel extends BasePanel {
       return;
     }
     if (!this.submitAnswer) {
-      this.setError('Planning answer submission is not wired in this runtime.');
+      this.setError('Planning answer submission is unavailable in this Agent runtime. Return to the composer and answer there.');
       this.requestRender();
       return;
     }

package/src/panels/provider-health-domains.ts

@@ -46,11 +46,11 @@ export function buildProviderHealthDomainSummaries(
     name: 'auth',
     level: auth.bootstrapCredentialPresent ? 'warn' : 'info',
     summary: auth.bootstrapCredentialPresent
-      ? 'connected-service bootstrap credential visible in local compatibility state'
-      : 'connected-service auth administration belongs outside Agent',
+      ? 'connected-host bootstrap credential visible in local compatibility state'
+      : 'connected-host auth administration belongs outside Agent',
     next: '/auth review',
     details: [
-      'GoodVibes Agent does not create, delete, rotate, revoke, or clear connected-service auth users or sessions.',
+      'GoodVibes Agent does not create, delete, rotate, revoke, or clear connected-host auth users or sessions.',
       `${auth.userCount} compatibility user record(s) and ${auth.sessionCount} session record(s) are visible for diagnostics only.`,
       auth.bootstrapCredentialPresent ? 'Bootstrap cleanup must be done in the owning GoodVibes host.' : '',
     ].filter(Boolean),

package/src/panels/qr-panel.ts

@@ -79,13 +79,15 @@ export class QrPanel extends BasePanel {
         this.connectionInfo = this.regenerateToken();
         this.lastStatus = 'Token regenerated.';
       } else {
-        this.lastStatus = 'Regeneration not available.';
+        this.lastStatus = 'Token rotation belongs to the connected host.';
       }
       this.markDirty();
       return true;
     }
     if (key === 'c') {
-      if (this.copyToClipboard) {
+      if (!this.connectionInfo.token) {
+        this.lastStatus = 'No connected-host token is available to copy.';
+      } else if (this.copyToClipboard) {
         this.copyToClipboard(this.connectionInfo.token);
         this.lastStatus = 'Token copied to clipboard.';
       } else {
@@ -134,18 +136,36 @@ export class QrPanel extends BasePanel {
     lines.push(createEmptyLine(width));
 
     // ── QR code ────────────────────────────────────────────────────────────
-    const payload = encodeConnectionPayload({
-      url: this.connectionInfo.url,
-      token: this.connectionInfo.token,
-      username: this.connectionInfo.username,
-      ...(this.connectionInfo.password !== undefined ? { password: this.connectionInfo.password } : {}),
-      version: this.connectionInfo.version ?? '0.0.0',
-      surface: this.connectionInfo.surface ?? GOODVIBES_AGENT_PAIRING_SURFACE,
-    });
-    const matrix = generateQrMatrix(payload);
-    const qrLines = renderQrMatrix(matrix.modules, width, { fg: C.qrFg, bg: C.qrBg });
-    for (const qrLine of qrLines) {
-      lines.push(qrLine);
+    if (this.connectionInfo.token) {
+      const payload = encodeConnectionPayload({
+        url: this.connectionInfo.url,
+        token: this.connectionInfo.token,
+        username: this.connectionInfo.username,
+        ...(this.connectionInfo.password !== undefined ? { password: this.connectionInfo.password } : {}),
+        version: this.connectionInfo.version ?? '0.0.0',
+        surface: this.connectionInfo.surface ?? GOODVIBES_AGENT_PAIRING_SURFACE,
+      });
+      const matrix = generateQrMatrix(payload);
+      const qrLines = renderQrMatrix(matrix.modules, width, { fg: C.qrFg, bg: C.qrBg });
+      for (const qrLine of qrLines) {
+        lines.push(qrLine);
+      }
+    } else {
+      lines.push(
+        buildPanelLine(width, [
+          [' Pairing unavailable ', C.hint],
+        ]),
+      );
+      lines.push(
+        buildPanelLine(width, [
+          [' Connected-host operator token is missing. Agent does not create or rotate host auth tokens. ', C.dim],
+        ]),
+      );
+      lines.push(
+        buildPanelLine(width, [
+          [' Start or repair the owning GoodVibes host, then reopen this panel. ', C.dim],
+        ]),
+      );
     }
 
     lines.push(createEmptyLine(width));
@@ -160,12 +180,16 @@ export class QrPanel extends BasePanel {
     }
 
     // ── Hints ──────────────────────────────────────────────────────────────
-    const hintsLine = buildPanelLine(width, [
-      [' r ', C.hint],
-      ['regenerate  ', C.dim],
-      [' c ', C.hint],
-      ['copy token', C.dim],
-    ]);
+    const hintParts: Array<[string, string]> = this.connectionInfo.token
+      ? [
+        [' c ', C.hint],
+        ['copy token', C.dim],
+      ]
+      : [
+        [' h ', C.hint],
+        ['host auth required', C.dim],
+      ];
+    const hintsLine = buildPanelLine(width, hintParts);
 
     // Push hints at the bottom if we have room, otherwise append after QR
     const remaining = height - lines.length;

package/src/panels/subscription-panel.ts

@@ -79,8 +79,8 @@ export class SubscriptionPanel extends ScrollableListPanel<SubscriptionRow> {
   protected override getEmptyStateActions() {
     return [
       { command: '/subscription login openai start --yes', summary: 'start the first-class OpenAI subscription flow' },
-      { command: '/login provider <name> start --yes', summary: 'use the front-door auth flow for supported providers' },
-      { command: '/auth review', summary: 'inspect connected-service auth posture without exposing token values' },
+      { command: '/subscription login <provider> finish <code> --yes', summary: 'finish a pending provider subscription login' },
+      { command: '/auth review', summary: 'inspect connected-host auth posture without exposing token values' },
     ];
   }
 
@@ -196,7 +196,7 @@ export class SubscriptionPanel extends ScrollableListPanel<SubscriptionRow> {
       const emptyLines = buildEmptyState(
         width,
         this.getEmptyStateMessage(),
-        'Built-in OAuth-capable providers and configured service providers will appear here once available for browser login or session import.',
+        'Built-in OAuth-capable providers and configured provider routes will appear here once available for browser login or session import.',
         this.getEmptyStateActions(),
         C,
       );

package/src/panels/system-messages-panel.ts

@@ -171,9 +171,9 @@ export class SystemMessagesPanel extends ScrollableListPanel<SystemMessageEntry>
         buildKeyValueLine(width, [
           { label: 'system route', value: ui.systemMessages, valueColor: C.info },
           { label: 'ops route', value: ui.operationalMessages, valueColor: C.info },
-          { label: 'wrfc route', value: ui.wrfcMessages, valueColor: C.info },
+          { label: 'review route', value: ui.wrfcMessages, valueColor: C.info },
         ], C),
-        buildGuidanceLine(width, '/settings', 'adjust where operational and WRFC messages render across panels and conversation', C),
+        buildGuidanceLine(width, '/settings', 'adjust where operational and delegated review/build messages render across panels and conversation', C),
       ];
 
       const selected = this._messages[this.selectedIndex]!;

package/src/panels/tasks-panel.ts

@@ -183,9 +183,9 @@ export class TasksPanel extends ScrollableListPanel<RuntimeTask> {
         sections: [{
           lines: buildEmptyState(
             width,
-            ' Task store not wired into this panel yet.',
-            'Use the Tasks panel with live connected-service task state to review active execution, cancellations, retries, and completion results.',
-            [{ command: '/tasks', summary: 'inspect connected-service tasks without starting background work' }],
+            ' Connected-host task state is unavailable.',
+            'Use /tasks list for the supported Agent task summary. This deferred panel does not start or mutate task execution.',
+            [{ command: '/tasks', summary: 'inspect connected-host tasks without launching local workers' }],
             C,
           ),
         }],
@@ -235,7 +235,7 @@ export class TasksPanel extends ScrollableListPanel<RuntimeTask> {
       ]));
     }
     postureLines.push(
-      buildGuidanceLine(width, '/tasks', 'inspect local runtime task posture without starting background agents', C),
+      buildGuidanceLine(width, '/tasks', 'inspect connected-host task posture without launching local workers', C),
       buildGuidanceLine(width, '/delegate <task>', 'delegate explicit build/fix/review work to GoodVibes TUI when code execution is required', C),
     );
 

package/src/planning/project-planning-coordinator.ts

@@ -288,7 +288,7 @@ export class ProjectPlanningCoordinator {
     const cleanGoal = goal.trim() || 'the requested change';
     return [
       `First pass: make "${cleanGoal}" work end-to-end for the primary local TUI workflow.`,
-      'Include the minimum TUI, daemon wiring, configuration persistence, documentation, and verification required for the feature to actually work.',
+      'Include the minimum TUI, connected-host wiring, configuration persistence, documentation, and verification required for the feature to actually work.',
       'Exclude unrelated cleanup, broad refactors, polish-only changes, third-party integrations, and advanced distributed behavior unless they directly block the primary workflow.',
     ].join(' ');
   }
@@ -344,7 +344,7 @@ export class ProjectPlanningCoordinator {
       {
         id: 'wire-user-surface',
         title: `Wire the user-facing path for ${cleanGoal}`,
-        why: 'The feature must be reachable through the intended TUI/daemon/config surface, not just internal code.',
+        why: 'The feature must be reachable through the intended TUI/connected-host/config surface, not just internal code.',
         status: 'pending',
         dependencies: ['implement-core-behavior'],
         verification: ['A command, panel, route, or setting path exercises the behavior from the user-facing entry point.'],

package/src/renderer/agent-workspace.ts

@@ -150,6 +150,9 @@ function localLibraryLines(
       item.enabled === true ? 'enabled' : item.enabled === false ? 'disabled' : '',
       item.scope && item.cls ? `${item.scope}/${item.cls}` : '',
       item.confidence !== undefined ? `${item.confidence}%` : '',
+      item.requirementCount !== undefined && item.requirementCount > 0
+        ? (item.missingRequirementCount && item.missingRequirementCount > 0 ? `needs ${item.missingRequirementCount}/${item.requirementCount}` : `ready ${item.requirementCount}/${item.requirementCount}`)
+        : '',
       item.reviewState,
       item.startCount !== undefined ? `starts ${item.startCount}` : '',
     ].filter(Boolean).join(' / ');
@@ -162,6 +165,9 @@ function localLibraryLines(
       bold: selected || item.active === true,
     });
     lines.push({ text: `  ${item.description}${tags}${triggers}`, fg: PALETTE.muted });
+    if (item.missingRequirements && item.missingRequirements.length > 0) {
+      lines.push({ text: `  missing setup: ${item.missingRequirements.join(', ')}`, fg: PALETTE.warn });
+    }
   }
   if (items.length > 8) {
     lines.push({ text: `${items.length - 8} more item(s). Open the library command for the full list.`, fg: PALETTE.dim });
@@ -180,7 +186,16 @@ function profileLines(snapshot: AgentWorkspaceRuntimeSnapshot): ContextLine[] {
   for (const profile of snapshot.runtimeProfiles.slice(0, 6)) {
     const starter = profile.starterTemplateId ? ` starter=${profile.starterTemplateId}` : ' starter=none';
     const created = profile.createdAt ? ` created=${profile.createdAt.slice(0, 10)}` : '';
-    lines.push({ text: `${profile.id}${starter}${created}`, fg: PALETTE.info, bold: profile.id === snapshot.activeRuntimeProfile });
+    const states = [
+      profile.id === snapshot.activeRuntimeProfile ? 'active' : '',
+      profile.id === snapshot.selectedRuntimeProfile ? 'default' : '',
+    ].filter(Boolean).join(', ');
+    const stateText = states ? ` [${states}]` : '';
+    lines.push({
+      text: `${profile.id}${stateText}${starter}${created}`,
+      fg: profile.id === snapshot.selectedRuntimeProfile ? PALETTE.good : PALETTE.info,
+      bold: profile.id === snapshot.activeRuntimeProfile || profile.id === snapshot.selectedRuntimeProfile,
+    });
     lines.push({ text: `  home: ${profile.homeDirectory}`, fg: PALETTE.muted });
   }
   if (snapshot.runtimeProfiles.length > 6) {
@@ -272,8 +287,8 @@ function snapshotLines(workspace: AgentWorkspace, category: AgentWorkspaceCatego
   } else if (category.id === 'tools') {
     base.push(
       { text: `MCP servers: ${snapshot.mcpConnectedServerCount}/${snapshot.mcpServerCount} connected; quarantined ${snapshot.mcpQuarantinedServerCount}; allow-all ${snapshot.mcpAllowAllServerCount}.`, fg: snapshot.mcpQuarantinedServerCount > 0 || snapshot.mcpAllowAllServerCount > 0 ? PALETTE.warn : PALETTE.info },
-      { text: 'Open MCP workspace for live server status, tool inventory, config paths, and command previews.', fg: PALETTE.info },
-      { text: 'Add/update requires typed confirmation and dispatches /mcp add ... --yes through the command router.', fg: PALETTE.good },
+      { text: 'Open MCP workspace for live server status, tool inventory, config paths, and confirmed add/remove/reload actions.', fg: PALETTE.info },
+      { text: 'Add/update requires typed confirmation and dispatches through the TUI command router.', fg: PALETTE.good },
       { text: 'Trust changes remain explicit; allow-all is kept behind the settings workspace.', fg: PALETTE.warn },
       { text: 'Useful first actions: /mcp review, /mcp tools, /mcp config, and Add MCP server.', fg: PALETTE.muted },
       { text: 'Normal assistant chat can use tools serially when policy allows; onboarding does not start hidden tool work.', fg: PALETTE.muted },
@@ -317,8 +332,12 @@ function snapshotLines(workspace: AgentWorkspace, category: AgentWorkspaceCatego
       { text: 'Image input uses prompt attachments; media generation/provider setup stays behind explicit commands and configured providers.', fg: PALETTE.muted },
     );
   } else if (category.id === 'profiles') {
+    const defaultProfile = snapshot.selectedRuntimeProfile
+      ? `${snapshot.selectedRuntimeProfile}${snapshot.selectedRuntimeProfileExists ? '' : ' (missing)'}`
+      : '(base Agent home)';
     base.push(
       { text: `Active Agent profile: ${snapshot.activeRuntimeProfile}`, fg: PALETTE.info },
+      { text: `Default for next launch: ${defaultProfile}`, fg: snapshot.selectedRuntimeProfileExists || !snapshot.selectedRuntimeProfile ? PALETTE.info : PALETTE.warn },
       { text: `Agent profiles under this home: ${snapshot.runtimeProfileCount}`, fg: PALETTE.info },
       { text: `Starter templates: ${snapshot.runtimeStarterTemplateCount}; local custom: ${snapshot.localStarterTemplateCount}`, fg: PALETTE.info },
       { text: `Starter ids: ${snapshot.runtimeStarterTemplates.map((template) => template.id).join(', ') || 'none'}`, fg: PALETTE.info },
@@ -331,7 +350,7 @@ function snapshotLines(workspace: AgentWorkspace, category: AgentWorkspaceCatego
       { text: '' },
       { text: 'Named Agent profiles isolate local config, sessions, memory, personas, skills, routines, setup, and bundles.', fg: PALETTE.good },
       { text: 'Starter authoring: browse, export, edit, import, and create Agent profiles from inside this workspace.', fg: PALETTE.info },
-      { text: 'Connected GoodVibes services stay shared unless the owning host is configured separately.', fg: PALETTE.warn },
+      { text: 'The connected GoodVibes host stays shared unless that host is configured separately.', fg: PALETTE.warn },
       { text: 'Portable bundles require explicit export/import commands with real paths and --yes.', fg: PALETTE.muted },
     );
   } else if (category.id === 'memory') {
@@ -486,7 +505,9 @@ function buildEditorFieldRows(editor: AgentWorkspaceLocalEditor, index: number,
   const selected = index === editor.selectedFieldIndex;
   const marker = selected ? GLYPHS.navigation.selected : ' ';
   const required = field.required ? ' *' : '';
-  const value = field.value.length > 0 ? field.value : '(empty)';
+  const value = field.value.length > 0
+    ? field.redact ? '*'.repeat(Math.min(12, Math.max(6, Array.from(field.value).length))) : field.value
+    : '(empty)';
   const color = selected ? PALETTE.text : field.value.length > 0 ? PALETTE.info : PALETTE.muted;
   const rows: WorkspaceRow[] = [{
     text: `${marker} ${field.label}${required}`,

package/src/renderer/block-actions.ts

@@ -1,6 +1,6 @@
 import type { BlockMeta } from '../core/conversation';
 
-export type BlockActionId = 'copy' | 'bookmark' | 'toggle' | 'apply' | 'rerun';
+export type BlockActionId = 'copy' | 'bookmark' | 'toggle' | 'rerun';
 
 export interface BlockAction {
   id: BlockActionId;
@@ -12,7 +12,6 @@ const ALL_ACTIONS: BlockAction[] = [
   { id: 'copy',     label: 'Copy',           key: 'c' },
   { id: 'bookmark', label: 'Bookmark',       key: 'b' },
   { id: 'toggle',   label: 'Collapse/Expand',key: 'Tab' },
-  { id: 'apply',    label: 'Diff apply blocked', key: 'a' },
   { id: 'rerun',    label: 'Re-run tool',    key: 'r' },
 ];
 
@@ -36,7 +35,6 @@ export class BlockActionsMenu {
   open(block: BlockMeta): void {
     this.block = block;
     this.actions = ALL_ACTIONS.filter(a => {
-      if (a.id === 'apply') return block.type === 'diff';
       if (a.id === 'rerun') return block.type === 'tool';
       return true;
     });

package/src/renderer/help-overlay.ts

@@ -57,11 +57,11 @@ export function renderHelpOverlay(
     `  ${kb('paste').padEnd(20)}  Paste (image priority)`,
     `  ${(kb('undo') + ' / ' + kb('redo')).padEnd(20)}  Undo / redo`,
     '',
-    '  Overlays And Panels',
+    '  Overlays And Workspace',
     '  ' + '\u2500'.repeat(40),
     `  ${'?'.padEnd(20)}  Toggle help`,
     `  ${'/shortcuts'.padEnd(20)}  Full keyboard shortcuts`,
-    `  ${kb('panel-picker').padEnd(20)}  Open or focus the panel workspace`,
+    `  ${kb('panel-picker').padEnd(20)}  Open the Agent operator workspace`,
     '',
   ];
 
@@ -70,6 +70,9 @@ export function renderHelpOverlay(
   // Commands not registered in the live registry are omitted at render time.
   const FEATURED_COMMANDS: Array<[name: string, argHint: string, desc: string]> = [
     ['agent',        '',           'Open the Agent operator workspace'],
+    ['agent',        'setup',      'Open setup, local behavior, channel, and voice workspaces'],
+    ['agent',        'knowledge',  'Open isolated Agent Knowledge workflows'],
+    ['agent',        'voice-media', 'Open voice, image, browser, and media setup'],
     ['setup',        '',           'Open Agent setup with current settings preloaded'],
     ['knowledge',    'status',     'Inspect isolated Agent Knowledge readiness'],
     ['memory',       '',           'Manage local Agent memory records'],
@@ -85,6 +88,8 @@ export function renderHelpOverlay(
     ['model',        '',           'Select the active model route'],
     ['subscription', '',           'Review provider logins and subscriptions'],
     ['secrets',      '',           'Manage secret references without printing values'],
+    ['bundle',       'inspect',    'Inspect Agent support bundles from the TUI'],
+    ['compat',       '',           'Inspect connected-host and Agent Knowledge compatibility'],
     ['health',       '',           'Run Agent runtime and setup diagnostics'],
   ];
 
@@ -238,7 +243,7 @@ export function renderShortcutsOverlay(
     row(kb('clear-prompt'), 'Clear prompt'),
     row(kb('delete-word'), 'Delete word backward'),
     row(kb('kill-line'), 'Kill to end of line'),
-    row(kb('apply-diff-line-start'), 'Delegate diff changes / line start'),
+    row(kb('line-start'), 'Move to start of line'),
     row(kb('next-error-line-end'), 'Next error / line end'),
     '',
     '  Actions',
@@ -252,12 +257,12 @@ export function renderShortcutsOverlay(
     row('?', 'Help overlay'),
     row(`${kb('clear-cancel')} x2`, 'Exit'),
     '',
-    '  Panels',
+    '  Workspace',
     '  ' + '\u2500'.repeat(40),
-    row('Tab', 'Swap focus between input and panel workspace'),
-    row(kb('panel-picker'), 'Open / focus / hide panel workspace'),
-    row(kb('panel-tab-next'), 'Next workspace panel tab'),
-    row(kb('panel-tab-prev'), 'Previous workspace panel tab'),
+    row('Tab', 'Swap focus between input and active Agent workspace'),
+    row(kb('panel-picker'), 'Open the Agent operator workspace'),
+    row(kb('panel-tab-next'), 'Reserved for future Agent workspace tabs'),
+    row(kb('panel-tab-prev'), 'Reserved for future Agent workspace tabs'),
     '',
     `  Config: /keybindings to list and customize`,
   ];