@pellux/goodvibes-agent 0.1.116 → 1.0.0

package/src/input/agent-workspace-provider-command-editor-submission.ts

@@ -0,0 +1,155 @@
+import type { AgentWorkspaceActionResult, AgentWorkspaceEditorKind, AgentWorkspaceLocalEditor } from './agent-workspace-types.ts';
+import type { AgentWorkspaceProviderCommandEditorKind } from './agent-workspace-provider-command-editors.ts';
+import { isAgentWorkspaceProviderCommandEditorKind } from './agent-workspace-provider-command-editors.ts';
+import { quoteSlashCommandArg } from './slash-command-parser.ts';
+
+type AgentWorkspaceFieldReader = (fieldId: string) => string;
+
+export type AgentWorkspaceProviderCommandEditorSubmission =
+  | {
+    readonly kind: 'editor';
+    readonly editor: AgentWorkspaceLocalEditor;
+    readonly status: string;
+    readonly actionResult?: AgentWorkspaceActionResult;
+  }
+  | {
+    readonly kind: 'dispatch';
+    readonly command: string;
+    readonly status: string;
+    readonly actionResult: AgentWorkspaceActionResult;
+  };
+
+function isAffirmative(value: string): boolean {
+  return /^(y|yes|true)$/i.test(value.trim());
+}
+
+function unconfirmed(editor: AgentWorkspaceLocalEditor, label: string): AgentWorkspaceProviderCommandEditorSubmission {
+  return {
+    kind: 'editor',
+    editor: { ...editor, message: `${label} not confirmed. Type yes, then press Enter.` },
+    status: `${label} not confirmed.`,
+  };
+}
+
+export function isAgentWorkspaceProviderCommandSubmissionKind(kind: AgentWorkspaceEditorKind): kind is AgentWorkspaceProviderCommandEditorKind {
+  return isAgentWorkspaceProviderCommandEditorKind(kind);
+}
+
+export function buildAgentWorkspaceProviderCommandEditorSubmission(
+  editor: AgentWorkspaceLocalEditor,
+  readField: AgentWorkspaceFieldReader,
+): AgentWorkspaceProviderCommandEditorSubmission {
+  if (editor.kind === 'provider-use') {
+    const model = readField('model');
+    const command = [
+      '/provider',
+      quoteSlashCommandArg(readField('provider')),
+      ...(model.length > 0 ? [quoteSlashCommandArg(model)] : []),
+    ].join(' ');
+    return {
+      kind: 'dispatch',
+      command,
+      status: 'Opening provider selection.',
+      actionResult: {
+        kind: 'dispatched',
+        title: 'Opening provider selection',
+        detail: 'The workspace handed provider selection to the shell-owned command router.',
+        command,
+        safety: 'safe',
+      },
+    };
+  }
+  if (editor.kind === 'provider-inspect') {
+    const command = `/accounts show ${quoteSlashCommandArg(readField('provider'))}`;
+    return {
+      kind: 'dispatch',
+      command,
+      status: 'Opening provider inspection.',
+      actionResult: {
+        kind: 'dispatched',
+        title: 'Opening provider inspection',
+        detail: 'The workspace handed read-only provider inspection to the shell-owned command router.',
+        command,
+        safety: 'read-only',
+      },
+    };
+  }
+  if (editor.kind === 'provider-routes') {
+    const command = `/accounts routes ${quoteSlashCommandArg(readField('provider'))}`;
+    return {
+      kind: 'dispatch',
+      command,
+      status: 'Opening provider route inspection.',
+      actionResult: {
+        kind: 'dispatched',
+        title: 'Opening provider route inspection',
+        detail: 'The workspace handed read-only provider route inspection to the shell-owned command router.',
+        command,
+        safety: 'read-only',
+      },
+    };
+  }
+  if (editor.kind === 'provider-account-repair') {
+    const command = `/accounts repair ${quoteSlashCommandArg(readField('provider'))}`;
+    return {
+      kind: 'dispatch',
+      command,
+      status: 'Opening provider account repair review.',
+      actionResult: {
+        kind: 'dispatched',
+        title: 'Opening provider account repair review',
+        detail: 'The workspace handed read-only provider account repair guidance to the shell-owned command router.',
+        command,
+        safety: 'read-only',
+      },
+    };
+  }
+  if (editor.kind === 'provider-add') {
+    if (!isAffirmative(readField('confirm'))) {
+      return unconfirmed(editor, 'Custom provider add');
+    }
+    const key = readField('apiKey');
+    const parts = [
+      '/provider',
+      'add',
+      quoteSlashCommandArg(readField('name')),
+      quoteSlashCommandArg(readField('baseUrl')),
+    ];
+    const redactedParts = [...parts];
+    if (key.length > 0) {
+      parts.push(quoteSlashCommandArg(key));
+      redactedParts.push('<redacted-api-key>');
+    }
+    parts.push('--yes');
+    redactedParts.push('--yes');
+    return {
+      kind: 'dispatch',
+      command: parts.join(' '),
+      status: 'Opening custom provider add.',
+      actionResult: {
+        kind: 'dispatched',
+        title: 'Opening custom provider add',
+        detail: 'The workspace handed a confirmed custom provider add command to the shell-owned command router without rendering the raw API key.',
+        command: redactedParts.join(' '),
+        safety: 'safe',
+      },
+    };
+  }
+
+  if (!isAffirmative(readField('confirm'))) {
+    return unconfirmed(editor, 'Custom provider removal');
+  }
+  const command = `/provider remove ${quoteSlashCommandArg(readField('name'))} --yes`;
+  return {
+    kind: 'dispatch',
+    command,
+    status: 'Opening custom provider removal.',
+    actionResult: {
+      kind: 'dispatched',
+      title: 'Opening custom provider removal',
+      detail: 'The workspace handed a confirmed custom provider removal command to the shell-owned command router.',
+      command,
+      safety: 'safe',
+    },
+  };
+}

package/src/input/agent-workspace-provider-command-editors.ts

@@ -0,0 +1,93 @@
+import type { AgentWorkspaceEditorKind, AgentWorkspaceLocalEditor } from './agent-workspace-types.ts';
+
+export type AgentWorkspaceProviderCommandEditorKind = Extract<
+  AgentWorkspaceEditorKind,
+  'provider-add' | 'provider-remove' | 'provider-use' | 'provider-inspect' | 'provider-routes' | 'provider-account-repair'
+>;
+
+export function isAgentWorkspaceProviderCommandEditorKind(kind: AgentWorkspaceEditorKind): kind is AgentWorkspaceProviderCommandEditorKind {
+  return kind === 'provider-add'
+    || kind === 'provider-remove'
+    || kind === 'provider-use'
+    || kind === 'provider-inspect'
+    || kind === 'provider-routes'
+    || kind === 'provider-account-repair';
+}
+
+export function createAgentWorkspaceProviderCommandEditor(kind: AgentWorkspaceProviderCommandEditorKind): AgentWorkspaceLocalEditor {
+  if (kind === 'provider-use') {
+    return {
+      kind,
+      mode: 'create',
+      title: 'Use Provider',
+      selectedFieldIndex: 0,
+      message: 'Switch the Agent chat provider through the TUI command router. Add a model id when you want an exact provider/model route.',
+      fields: [
+        { id: 'provider', label: 'Provider id', value: '', required: true, multiline: false, hint: 'Provider row id, such as openai-subscriber, openai, anthropic, or a custom provider.' },
+        { id: 'model', label: 'Model id', value: '', required: false, multiline: false, hint: 'Optional model id or provider:model registry key. Blank uses the provider default selectable model.' },
+      ],
+    };
+  }
+  if (kind === 'provider-inspect') {
+    return {
+      kind,
+      mode: 'create',
+      title: 'Inspect Provider',
+      selectedFieldIndex: 0,
+      message: 'Inspect provider auth and setup routes from the Agent TUI without changing provider selection.',
+      fields: [
+        { id: 'provider', label: 'Provider id', value: '', required: true, multiline: false, hint: 'Provider row id to inspect.' },
+      ],
+    };
+  }
+  if (kind === 'provider-routes') {
+    return {
+      kind,
+      mode: 'create',
+      title: 'Inspect Provider Routes',
+      selectedFieldIndex: 0,
+      message: 'Inspect provider account routes from the Agent TUI without changing routing or auth.',
+      fields: [
+        { id: 'provider', label: 'Provider id', value: '', required: true, multiline: false, hint: 'Provider row id to inspect.' },
+      ],
+    };
+  }
+  if (kind === 'provider-account-repair') {
+    return {
+      kind,
+      mode: 'create',
+      title: 'Review Provider Account Repair',
+      selectedFieldIndex: 0,
+      message: 'Show provider account repair guidance from the Agent TUI without starting login or storing tokens.',
+      fields: [
+        { id: 'provider', label: 'Provider id', value: '', required: true, multiline: false, hint: 'Provider row id to inspect.' },
+      ],
+    };
+  }
+  if (kind === 'provider-add') {
+    return {
+      kind,
+      mode: 'create',
+      title: 'Add Custom Provider',
+      selectedFieldIndex: 0,
+      message: 'Add an OpenAI-compatible provider for Agent chat/model routing. Type yes on the final field to confirm.',
+      fields: [
+        { id: 'name', label: 'Provider name', value: '', required: true, multiline: false, hint: 'Letters, numbers, hyphens, and underscores only.' },
+        { id: 'baseUrl', label: 'Base URL', value: '', required: true, multiline: false, hint: 'OpenAI-compatible base URL, such as http://127.0.0.1:8000/v1.' },
+        { id: 'apiKey', label: 'API key', value: '', required: false, multiline: false, hint: 'Optional API key. Prefer a local provider or a secret-backed provider config when possible.', redact: true },
+        { id: 'confirm', label: 'Confirm', value: '', required: true, multiline: false, hint: 'Type yes to run /provider add with --yes.' },
+      ],
+    };
+  }
+  return {
+    kind,
+    mode: 'delete',
+    title: 'Remove Custom Provider',
+    selectedFieldIndex: 0,
+    message: 'Remove one custom provider config from the Agent provider list. Type yes on the final field to confirm.',
+    fields: [
+      { id: 'name', label: 'Provider name', value: '', required: true, multiline: false, hint: 'Existing custom provider name.' },
+      { id: 'confirm', label: 'Confirm', value: '', required: true, multiline: false, hint: 'Type yes to run /provider remove with --yes.' },
+    ],
+  };
+}

package/src/input/agent-workspace-reminder-schedule-editor.ts

@@ -32,7 +32,7 @@ export function createReminderScheduleEditor(): AgentWorkspaceLocalEditor {
       { id: 'scheduleValue', label: 'Schedule value', value: '', required: true, multiline: false, hint: 'Examples: 2026-06-01T09:00:00-05:00, 7d, or 0 9 * * *.' },
       { id: 'timezone', label: 'Timezone', value: '', required: false, multiline: false, hint: 'Optional IANA timezone for cron schedules, for example America/Chicago.' },
       { id: 'scheduleName', label: 'Schedule name', value: '', required: false, multiline: false, hint: 'Optional display name for the connected reminder.' },
-      { id: 'deliveryChannel', label: 'Delivery channel', value: '', required: false, multiline: false, hint: 'Optional channel target, for example slack or slack:ops-alerts:Ops.' },
+      { id: 'deliveryChannel', label: 'Delivery channel', value: '', required: false, multiline: false, hint: 'Optional channel target, for example slack, slack:ops-alerts:Ops, or telephony:+15551234567.' },
       { id: 'disabled', label: 'Create disabled', value: 'no', required: false, multiline: false, hint: 'yes/no. Default no.' },
       { id: 'confirm', label: 'Confirm', value: '', required: true, multiline: false, hint: 'Type yes to run /schedule remind with --yes.' },
     ],

package/src/input/agent-workspace-requirements.ts

@@ -0,0 +1,11 @@
+import { buildAgentSkillRequirements, type AgentSkillRequirement } from '../agent/skill-registry.ts';
+import { splitList } from './agent-workspace-editors.ts';
+
+export type AgentWorkspaceEditorFieldReader = (fieldId: string) => string;
+
+export function buildAgentWorkspaceRequirements(readField: AgentWorkspaceEditorFieldReader): readonly AgentSkillRequirement[] {
+  return buildAgentSkillRequirements({
+    env: splitList(readField('requiresEnv')),
+    commands: splitList(readField('requiresCommands')),
+  });
+}

package/src/input/agent-workspace-routine-schedule-editor.ts

@@ -30,12 +30,12 @@ export function createRoutineScheduleEditor(
     selectedFieldIndex: 0,
     message: `Create one connected schedule from a reviewed local routine. Selected: ${selected}. Type yes on the final field to confirm.`,
     fields: [
-      { id: 'routineId', label: 'Routine id', value: selectedRoutine?.id ?? '', required: true, multiline: false, hint: 'Local Agent routine id to promote.' },
+      { id: 'routineId', label: 'Routine id', value: selectedRoutine?.id ?? '', required: true, multiline: false, hint: 'Agent-local routine id to promote.' },
       { id: 'scheduleKind', label: 'Schedule type', value: 'cron', required: true, multiline: false, hint: 'cron, every, or at.' },
       { id: 'scheduleValue', label: 'Schedule value', value: '', required: true, multiline: false, hint: 'Examples: 0 9 * * *, 7d, or 2026-06-01T09:00:00-05:00.' },
       { id: 'timezone', label: 'Timezone', value: '', required: false, multiline: false, hint: 'Optional IANA timezone, for example America/Chicago.' },
       { id: 'scheduleName', label: 'Schedule name', value: selectedRoutine?.name ?? '', required: false, multiline: false, hint: 'Optional display name for the connected schedule.' },
-      { id: 'deliveryChannel', label: 'Delivery channel', value: '', required: false, multiline: false, hint: 'Optional channel target, for example slack or slack:ops-alerts:Ops.' },
+      { id: 'deliveryChannel', label: 'Delivery channel', value: '', required: false, multiline: false, hint: 'Optional channel target, for example slack, slack:ops-alerts:Ops, or telephony:+15551234567.' },
       { id: 'disabled', label: 'Create disabled', value: 'no', required: false, multiline: false, hint: 'yes/no. Default no.' },
       { id: 'confirm', label: 'Confirm', value: '', required: true, multiline: false, hint: 'Type yes to run /schedule promote-routine with --yes.' },
     ],

package/src/input/agent-workspace-search.ts

@@ -0,0 +1,169 @@
+import type {
+  AgentWorkspaceActionResult,
+  AgentWorkspaceActionSearchResult,
+  AgentWorkspaceCategory,
+  AgentWorkspaceFocusPane,
+} from './agent-workspace-types.ts';
+
+export interface AgentWorkspaceSearchHost {
+  readonly categories: readonly AgentWorkspaceCategory[];
+  readonly selectedCategory: AgentWorkspaceCategory;
+  actionSearchActive: boolean;
+  actionSearchQuery: string;
+  focusPane: AgentWorkspaceFocusPane;
+  selectedCategoryIndex: number;
+  selectedActionIndex: number;
+  status: string;
+  lastActionResult: AgentWorkspaceActionResult | null;
+  focusActions(): void;
+  clampSelection(): void;
+}
+
+export function searchAgentWorkspaceActions(
+  categories: readonly AgentWorkspaceCategory[],
+  query: string,
+): readonly AgentWorkspaceActionSearchResult[] {
+  const normalized = query.trim().toLowerCase();
+  if (!normalized) return [];
+  const terms = normalized.split(/\s+/).filter(Boolean);
+  const results: Array<{ readonly result: AgentWorkspaceActionSearchResult; readonly score: number }> = [];
+  categories.forEach((category, categoryIndex) => {
+    category.actions.forEach((action, actionIndex) => {
+      const haystack = [
+        category.id,
+        category.label,
+        category.summary,
+        category.detail,
+        action.id,
+        action.label,
+        action.detail,
+        action.command ?? '',
+        action.editorKind ?? '',
+        action.targetCategoryId ?? '',
+        action.localOperation ?? '',
+        action.safety,
+      ].join(' ').toLowerCase();
+      if (terms.every((term) => haystack.includes(term))) {
+        const result = { category, categoryIndex, action, actionIndex };
+        results.push({ result, score: scoreActionSearchResult(result, normalized, terms) });
+      }
+    });
+  });
+  return results
+    .sort((left, right) => right.score - left.score || left.result.categoryIndex - right.result.categoryIndex || left.result.actionIndex - right.result.actionIndex)
+    .map((entry) => entry.result);
+}
+
+function scoreField(value: string | undefined, terms: readonly string[], exactQuery: string, exactWeight: number, termWeight: number): number {
+  const normalized = (value ?? '').toLowerCase();
+  if (!normalized) return 0;
+  const bareNormalized = normalized.replace(/^\//, '');
+  let score = bareNormalized === exactQuery || normalized === exactQuery
+    ? exactWeight
+    : exactQuery.includes(' ') && normalized.includes(exactQuery)
+      ? exactWeight
+      : 0;
+  for (const term of terms) {
+    if (normalized.includes(term)) score += termWeight;
+  }
+  return score;
+}
+
+function scoreActionSearchResult(
+  result: AgentWorkspaceActionSearchResult,
+  exactQuery: string,
+  terms: readonly string[],
+): number {
+  const { category, action } = result;
+  let score = 0;
+  score += scoreField(action.id, terms, exactQuery, 90, 28);
+  score += scoreField(action.editorKind, terms, exactQuery, 85, 26);
+  score += scoreField(action.command, terms, exactQuery, 75, 22);
+  score += scoreField(action.label, terms, exactQuery, 65, 18);
+  score += scoreField(action.localOperation, terms, exactQuery, 50, 16);
+  score += scoreField(action.targetCategoryId, terms, exactQuery, 40, 12);
+  score += scoreField(action.detail, terms, exactQuery, 24, 6);
+  score += scoreField(category.id, terms, exactQuery, 30, 8);
+  score += scoreField(category.label, terms, exactQuery, 25, 7);
+  score += scoreField(category.summary, terms, exactQuery, 12, 3);
+  score += scoreField(category.detail, terms, exactQuery, 8, 2);
+
+  if (category.id === 'setup' && !terms.includes('setup')) score -= 14;
+  if (action.id.startsWith('setup-') && !terms.includes('setup')) score -= 18;
+  if (action.kind === 'workspace' && !terms.includes('open')) score -= 4;
+  return score;
+}
+
+export function beginAgentWorkspaceActionSearch(host: AgentWorkspaceSearchHost): void {
+  host.actionSearchActive = true;
+  host.actionSearchQuery = '';
+  host.focusPane = 'actions';
+  host.selectedActionIndex = 0;
+  host.status = 'Search Agent workspace actions.';
+  host.lastActionResult = {
+    kind: 'guidance',
+    title: 'Action search',
+    detail: 'Type to filter every Agent workspace action. Enter opens the selected result; Esc clears search.',
+    safety: 'safe',
+  };
+}
+
+export function appendAgentWorkspaceActionSearchText(host: AgentWorkspaceSearchHost, text: string): void {
+  if (!host.actionSearchActive || text.length === 0) return;
+  host.actionSearchQuery += text.replace(/[\r\n]+/g, ' ');
+  host.selectedActionIndex = 0;
+  host.status = actionSearchStatus(host);
+  host.clampSelection();
+}
+
+export function backspaceAgentWorkspaceActionSearch(host: AgentWorkspaceSearchHost): void {
+  if (!host.actionSearchActive || host.actionSearchQuery.length === 0) return;
+  const chars = Array.from(host.actionSearchQuery);
+  chars.pop();
+  host.actionSearchQuery = chars.join('');
+  host.selectedActionIndex = 0;
+  host.status = host.actionSearchQuery.length === 0 ? 'Search Agent workspace actions.' : actionSearchStatus(host);
+  host.clampSelection();
+}
+
+export function clearAgentWorkspaceActionSearch(host: AgentWorkspaceSearchHost): void {
+  if (!host.actionSearchActive) return;
+  host.actionSearchActive = false;
+  host.actionSearchQuery = '';
+  host.selectedActionIndex = Math.max(0, Math.min(host.selectedActionIndex, host.selectedCategory.actions.length - 1));
+  host.status = 'Action search cleared.';
+  host.clampSelection();
+}
+
+export function commitAgentWorkspaceActionSearchSelection(
+  host: AgentWorkspaceSearchHost,
+  result: AgentWorkspaceActionSearchResult | null,
+): boolean {
+  if (!host.actionSearchActive) return true;
+  if (!result) {
+    host.status = host.actionSearchQuery.trim().length === 0
+      ? 'Type a search query before opening an action.'
+      : `No Agent workspace actions match "${host.actionSearchQuery}".`;
+    host.lastActionResult = {
+      kind: 'guidance',
+      title: 'No action selected',
+      detail: 'Type a different search query or press Esc to return to normal workspace navigation.',
+      safety: 'safe',
+    };
+    return false;
+  }
+  host.selectedCategoryIndex = result.categoryIndex;
+  host.selectedActionIndex = result.actionIndex;
+  host.actionSearchActive = false;
+  host.actionSearchQuery = '';
+  host.focusActions();
+  host.clampSelection();
+  return true;
+}
+
+function actionSearchStatus(host: AgentWorkspaceSearchHost): string {
+  const count = searchAgentWorkspaceActions(host.categories, host.actionSearchQuery).length;
+  return count === 0
+    ? `No Agent workspace actions match "${host.actionSearchQuery}".`
+    : `Found ${count} Agent workspace action(s) for "${host.actionSearchQuery}".`;
+}

package/src/input/agent-workspace-secret-editor-submission.ts

@@ -0,0 +1,153 @@
+import type { AgentWorkspaceActionResult, AgentWorkspaceLocalEditor } from './agent-workspace-types.ts';
+import { quoteSlashCommandArg } from './slash-command-parser.ts';
+
+type AgentWorkspaceFieldReader = (fieldId: string) => string;
+
+type AgentWorkspaceSecretEditorSubmission =
+  | {
+    readonly kind: 'editor';
+    readonly editor: AgentWorkspaceLocalEditor;
+    readonly status: string;
+    readonly actionResult?: AgentWorkspaceActionResult;
+  }
+  | {
+    readonly kind: 'dispatch';
+    readonly command: string;
+    readonly status: string;
+    readonly actionResult: AgentWorkspaceActionResult;
+  };
+
+function isAffirmative(value: string): boolean {
+  return /^(y|yes|true)$/i.test(value.trim());
+}
+
+function secretScopeFlag(scope: string): string | null {
+  const normalized = scope.trim().toLowerCase();
+  if (normalized === 'user') return '--user';
+  if (normalized === 'project') return '--project';
+  return null;
+}
+
+function secretStorageFlag(storage: string): string | null {
+  const normalized = storage.trim().toLowerCase();
+  if (normalized === 'plaintext') return '--plaintext';
+  if (normalized === 'secure') return '--secure';
+  return null;
+}
+
+function appendOptionalSecretFlags(parts: string[], scope: string, storage: string): void {
+  const scopeFlag = secretScopeFlag(scope);
+  const storageFlag = secretStorageFlag(storage);
+  if (scopeFlag) parts.push(scopeFlag);
+  if (storageFlag) parts.push(storageFlag);
+}
+
+export function isAgentWorkspaceSecretEditorKind(kind: AgentWorkspaceLocalEditor['kind']): kind is 'secret-set' | 'secret-link' | 'secret-test' | 'secret-delete' {
+  return kind === 'secret-set' || kind === 'secret-link' || kind === 'secret-test' || kind === 'secret-delete';
+}
+
+export function buildAgentWorkspaceSecretEditorSubmission(
+  editor: AgentWorkspaceLocalEditor,
+  readField: AgentWorkspaceFieldReader,
+): AgentWorkspaceSecretEditorSubmission {
+  if (editor.kind === 'secret-set') {
+    if (!isAffirmative(readField('confirm'))) {
+      return {
+        kind: 'editor',
+        editor: { ...editor, message: 'Secret value storage not confirmed. Type yes, then press Enter.' },
+        status: 'Secret value storage not confirmed.',
+      };
+    }
+    const key = readField('key');
+    const parts = ['/secrets', 'set', quoteSlashCommandArg(key), quoteSlashCommandArg(readField('value'))];
+    appendOptionalSecretFlags(parts, readField('scope'), readField('storage'));
+    parts.push('--yes');
+    const redactedParts = ['/secrets', 'set', quoteSlashCommandArg(key), '<redacted>'];
+    appendOptionalSecretFlags(redactedParts, readField('scope'), readField('storage'));
+    redactedParts.push('--yes');
+    return {
+      kind: 'dispatch',
+      command: parts.join(' '),
+      status: 'Opening secret value storage.',
+      actionResult: {
+        kind: 'dispatched',
+        title: 'Opening secret value storage',
+        detail: 'The workspace handed a confirmed secret value storage command to the shell-owned command router without rendering the raw value.',
+        command: redactedParts.join(' '),
+        safety: 'safe',
+      },
+    };
+  }
+  if (editor.kind === 'secret-link') {
+    if (!isAffirmative(readField('confirm'))) {
+      return {
+        kind: 'editor',
+        editor: { ...editor, message: 'Secret reference link not confirmed. Type yes, then press Enter.' },
+        status: 'Secret reference link not confirmed.',
+      };
+    }
+    const key = readField('key');
+    const parts = ['/secrets', 'link', quoteSlashCommandArg(key), quoteSlashCommandArg(readField('ref'))];
+    appendOptionalSecretFlags(parts, readField('scope'), readField('storage'));
+    parts.push('--yes');
+    const redactedParts = ['/secrets', 'link', quoteSlashCommandArg(key), '<secret-ref>'];
+    appendOptionalSecretFlags(redactedParts, readField('scope'), readField('storage'));
+    redactedParts.push('--yes');
+    return {
+      kind: 'dispatch',
+      command: parts.join(' '),
+      status: 'Opening secret reference link.',
+      actionResult: {
+        kind: 'dispatched',
+        title: 'Opening secret reference link',
+        detail: 'The workspace handed a confirmed secret reference link command to the shell-owned command router without rendering the full reference.',
+        command: redactedParts.join(' '),
+        safety: 'safe',
+      },
+    };
+  }
+  if (editor.kind === 'secret-test') {
+    if (!isAffirmative(readField('confirm'))) {
+      return {
+        kind: 'editor',
+        editor: { ...editor, message: 'Secret reference test not confirmed. Type yes, then press Enter.' },
+        status: 'Secret reference test not confirmed.',
+      };
+    }
+    return {
+      kind: 'dispatch',
+      command: `/secrets test ${quoteSlashCommandArg(readField('ref'))}`,
+      status: 'Opening secret reference test.',
+      actionResult: {
+        kind: 'dispatched',
+        title: 'Opening secret reference test',
+        detail: 'The workspace handed a confirmed secret reference test command to the shell-owned command router; the command output remains redacted.',
+        command: '/secrets test <secret-ref>',
+        safety: 'safe',
+      },
+    };
+  }
+  if (!isAffirmative(readField('confirm'))) {
+    return {
+      kind: 'editor',
+      editor: { ...editor, message: 'Secret deletion not confirmed. Type yes, then press Enter.' },
+      status: 'Secret deletion not confirmed.',
+    };
+  }
+  const key = readField('key');
+  const parts = ['/secrets', 'delete', quoteSlashCommandArg(key)];
+  appendOptionalSecretFlags(parts, readField('scope'), readField('storage'));
+  parts.push('--yes');
+  return {
+    kind: 'dispatch',
+    command: parts.join(' '),
+    status: 'Opening secret deletion.',
+    actionResult: {
+      kind: 'dispatched',
+      title: 'Opening secret deletion',
+      detail: 'The workspace handed a confirmed secret deletion command to the shell-owned command router.',
+      command: parts.join(' '),
+      safety: 'safe',
+    },
+  };
+}