@pellux/goodvibes-agent 0.1.74 → 0.1.76

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to GoodVibes Agent will be recorded here.
 
+## 0.1.76 - 2026-05-31
+
+- Added optional starter profile creation to first-run onboarding so setup can create an isolated Agent home seeded with persona, skill, and routine templates.
+- Added onboarding apply/verify support for Agent profile creation with prevalidation, rollback, and overwrite protection.
+- Updated onboarding and renderer regressions so the first-run flow stays Agent-specific while exposing the starter profile path directly in the TUI.
+
+## 0.1.75 - 2026-05-31
+
+- Reworded Agent status, doctor, and external runtime diagnostics away from copied service/surface ownership language.
+- Added `--delivery-channel` as the documented schedule promotion delivery flag while keeping prior delivery aliases as compatibility-only parser inputs.
+- Cleaned Agent TUI help, workspace, and panel guidance so visible copy describes Agent workflows, channels, runtime endpoints, and external runtime connection boundaries.
+
 ## 0.1.74 - 2026-05-31
 
 - Filtered checked-in foundation operator artifacts to Agent-relevant routes so host-specific knowledge segments are not documented in Agent artifacts.

package/README.md

@@ -74,14 +74,14 @@ Local Agent behavior is editable from the TUI:
 /personas use research
 /routines create --name "Evening Review" --description "Review open work before shutdown" --steps "Check work plan, approvals, and Agent Knowledge status before summarizing." --enabled true
 /routines start evening-review
-/schedule promote-routine evening-review --cron "0 17 * * 1-5" --timezone America/Chicago --delivery-surface slack --yes
+/schedule promote-routine evening-review --cron "0 17 * * 1-5" --timezone America/Chicago --delivery-channel slack --yes
 /schedule receipts
 /schedule reconcile
 /agent-skills create --name "Morning Brief" --description "Daily briefing flow" --procedure "Check tasks, approvals, calendar, and unread state before summarizing." --enabled true
 /skills local list
 ```
 
-Starting a routine records local usage and prints its steps; it does not spawn background agents or automation jobs. Promotion to an external schedule is separate and explicit: it calls the public `schedules.create` route only after `--yes`, can include explicit delivery targets such as `--delivery-surface slack`, records a redacted local receipt, and the generated scheduled prompt keeps Agent Knowledge isolated from default Knowledge/Wiki and non-Agent knowledge segments. Use `/schedule reconcile` to compare those local receipts against live external schedules through public `schedules.list`.
+Starting a routine records local usage and prints its steps; it does not spawn background agents or automation jobs. Promotion to an external schedule is separate and explicit: it calls the public `schedules.create` route only after `--yes`, can include explicit delivery targets such as `--delivery-channel slack`, records a redacted local receipt, and the generated scheduled prompt keeps Agent Knowledge isolated from default Knowledge/Wiki and non-Agent knowledge segments. Use `/schedule reconcile` to compare those local receipts against live external schedules through public `schedules.list`.
 
 ## Runtime Prerequisite
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-agent",
-  "version": "0.1.74",
+  "version": "0.1.76",
   "private": false,
   "description": "GoodVibes personal operator assistant TUI with a proactive Agent product brain, isolated Agent Knowledge, local profiles, routines, skills, personas, and explicit build delegation.",
   "type": "module",

package/src/agent/routine-schedule-args.ts

@@ -37,10 +37,10 @@ export function isRoutineScheduleDeliverySurfaceKind(value: string): value is Ro
   return DELIVERY_SURFACE_KINDS.includes(value as RoutineScheduleDeliverySurfaceKind);
 }
 
-function parseSurfaceDeliveryTarget(raw: string): RoutineScheduleDeliveryTargetSpec | string {
+function parseChannelDeliveryTarget(raw: string): RoutineScheduleDeliveryTargetSpec | string {
   const [surfaceKind = '', routeId, label] = raw.split(':');
   if (!isRoutineScheduleDeliverySurfaceKind(surfaceKind)) {
-    return `Unsupported delivery surface "${surfaceKind}".`;
+    return `Unsupported delivery channel "${surfaceKind}".`;
   }
   return {
     kind: 'surface',
@@ -148,7 +148,10 @@ export function parseRoutineSchedulePromotionArgs(args: readonly string[]): Pars
       };
       continue;
     }
-    if (optionName === '--delivery-surface' || optionName === '--deliver-surface') {
+    if (
+      optionName === '--delivery-channel'
+      || optionName === '--deliver-channel'
+    ) {
       const consumed = optionValue(args, index, inlineValue);
       index = consumed.nextIndex;
       const value = consumed.value?.trim();
@@ -156,7 +159,7 @@ export function parseRoutineSchedulePromotionArgs(args: readonly string[]): Pars
         errors.push(`${optionName} requires a value.`);
         continue;
       }
-      const target = parseSurfaceDeliveryTarget(value);
+      const target = parseChannelDeliveryTarget(value);
       if (typeof target === 'string') errors.push(target);
       else deliveryTargets.push(target);
       continue;

package/src/agent/routine-schedule-format.ts

@@ -18,6 +18,11 @@ function readString(record: Record<string, unknown>, key: string): string | null
   return typeof value === 'string' ? value : null;
 }
 
+function formatDeliveryTargetKind(target: { readonly kind?: string; readonly surfaceKind?: string }): string {
+  if (target.kind === 'surface') return `channel${target.surfaceKind ? `/${target.surfaceKind}` : ''}`;
+  return `${target.kind ?? 'unknown'}${target.surfaceKind ? `/${target.surfaceKind}` : ''}`;
+}
+
 export function formatRoutineSchedulePreview(preview: RoutineSchedulePromotionPreview): string {
   const schedule = preview.payload.kind === 'cron'
     ? `${preview.payload.cron}${preview.payload.timezone ? ` [${preview.payload.timezone}]` : ''}`
@@ -90,9 +95,9 @@ export function formatRoutineScheduleReceipt(receipt: RoutineScheduleReceipt): s
     `  enabled: ${receipt.enabled ? 'yes' : 'no'}`,
     receipt.provider ? `  provider: ${receipt.provider}` : '',
     receipt.model ? `  model: ${receipt.model}` : '',
-    `  target: ${receipt.target.kind ?? 'unknown'}${receipt.target.surfaceKind ? `/${receipt.target.surfaceKind}` : ''}`,
+    `  target: ${formatDeliveryTargetKind(receipt.target)}`,
     receipt.deliveryMode ? `  delivery: ${receipt.deliveryMode}` : '',
-    ...(receipt.deliveryTargets ?? []).map((target) => `  delivery target: ${target.kind}${target.surfaceKind ? `/${target.surfaceKind}` : ''}${target.routeId ? ` route=${target.routeId}` : ''}${target.address ? ` address=${target.address}` : ''}${target.label ? ` label=${target.label}` : ''}`),
+    ...(receipt.deliveryTargets ?? []).map((target) => `  delivery target: ${formatDeliveryTargetKind(target)}${target.routeId ? ` route=${target.routeId}` : ''}${target.address ? ` address=${target.address}` : ''}${target.label ? ` label=${target.label}` : ''}`),
     receipt.failureKind ? `  failure: ${receipt.failureKind}` : '',
     receipt.failureError ? `  error: ${receipt.failureError}` : '',
   ].filter((line): line is string => Boolean(line)).join('\n');

package/src/cli/help.ts

@@ -152,7 +152,7 @@ const COMMAND_HELP: Record<string, CommandHelp> = {
       'routines receipts',
       'routines reconcile',
       'routines receipt <receipt-id>',
-      'routines promote <id> (--cron <expr>|--every <interval>|--at <iso-time>) [--timezone <tz>] [--name <schedule-name>] [--provider <id>] [--model <model>] [--delivery-surface <surface[:route[:label]]>|--delivery-route <route[:label]>|--delivery-webhook <url>|--delivery-link <url>] [--disabled] --yes',
+      'routines promote <id> (--cron <expr>|--every <interval>|--at <iso-time>) [--timezone <tz>] [--name <schedule-name>] [--provider <id>] [--model <model>] [--delivery-channel <channel[:route[:label]]>|--delivery-route <route[:label]>|--delivery-webhook <url>|--delivery-link <url>] [--disabled] --yes',
     ],
     summary: 'Inspect Agent-local routines, review local promotion receipts, reconcile receipts against live external schedules, and explicitly promote a reviewed routine into a GoodVibes schedule. Without --yes, promote only prints the schedules.create preview.',
     examples: [
@@ -160,7 +160,7 @@ const COMMAND_HELP: Record<string, CommandHelp> = {
       'routines show daily-operations-sweep',
       'routines receipts',
       'routines reconcile',
-      'routines promote daily-operations-sweep --cron "0 9 * * *" --timezone America/Chicago --delivery-surface slack --yes',
+      'routines promote daily-operations-sweep --cron "0 9 * * *" --timezone America/Chicago --delivery-channel slack --yes',
       'routines promote weekly-review --every 7d --disabled',
     ],
   },

package/src/cli/management-commands.ts

@@ -277,7 +277,7 @@ export async function handleTasks(runtime: CliCommandRuntime): Promise<string> {
   const [sub = 'list', ...rest] = runtime.cli.commandArgs;
   if (sub === 'submit') {
     return [
-      'GoodVibes Agent blocks CLI task submission from the copied task surface.',
+      'GoodVibes Agent blocks CLI task submission from the copied task workflow.',
       '  policy: do normal assistant work in the main Agent conversation or use `goodvibes-agent run <prompt>` for an explicit one-shot run.',
       '  build/fix/review: use `goodvibes-agent delegate <task>` for explicit GoodVibes TUI handoff.',
       '  result: no local task was started.',

package/src/cli/routines-command.ts

@@ -104,7 +104,7 @@ async function handleRoutinePromotion(runtime: CliCommandRuntime, args: readonly
     };
     return {
       output: json ? JSON.stringify(failure, null, 2) : [
-        'Usage: goodvibes-agent routines promote <id> (--cron <expr>|--every <interval>|--at <iso-time>) [--timezone <tz>] [--name <schedule-name>] [--provider <id>] [--model <model>] [--delivery-surface <surface[:route[:label]]>|--delivery-route <route[:label]>|--delivery-webhook <url>|--delivery-link <url>] [--disabled] --yes',
+        'Usage: goodvibes-agent routines promote <id> (--cron <expr>|--every <interval>|--at <iso-time>) [--timezone <tz>] [--name <schedule-name>] [--provider <id>] [--model <model>] [--delivery-channel <channel[:route[:label]]>|--delivery-route <route[:label]>|--delivery-webhook <url>|--delivery-link <url>] [--disabled] --yes',
         ...parsed.errors.map((error) => `  ${error}`),
       ].join('\n'),
       exitCode: 2,
@@ -241,7 +241,7 @@ export async function handleRoutinesCommand(runtime: CliCommandRuntime): Promise
     return handleRoutinePromotion(runtime, rest);
   }
   return {
-    output: 'Usage: goodvibes-agent routines [list|enabled|show <id>|receipts|reconcile|receipt <id>|promote <id> (--cron <expr>|--every <interval>|--at <iso-time>) [--delivery-surface <surface>|--delivery-route <route>|--delivery-webhook <url>] --yes]',
+    output: 'Usage: goodvibes-agent routines [list|enabled|show <id>|receipts|reconcile|receipt <id>|promote <id> (--cron <expr>|--every <interval>|--at <iso-time>) [--delivery-channel <channel>|--delivery-route <route>|--delivery-webhook <url>] --yes]',
     exitCode: 2,
   };
 }

package/src/cli/service-posture.ts

@@ -62,8 +62,8 @@ export interface CliServicePosture {
 
 const ENDPOINTS: readonly { readonly id: RuntimeEndpointId; readonly label: string; readonly enabledKey: string }[] = [
   { id: 'controlPlane', label: 'runtime API', enabledKey: 'controlPlane.enabled' },
-  { id: 'httpListener', label: 'HTTP listener', enabledKey: 'danger.httpListener' },
-  { id: 'web', label: 'web surface', enabledKey: 'web.enabled' },
+  { id: 'httpListener', label: 'incoming webhook listener', enabledKey: 'danger.httpListener' },
+  { id: 'web', label: 'browser companion', enabledKey: 'web.enabled' },
 ];
 
 interface CliServicePostureOptions {
@@ -184,13 +184,13 @@ export async function buildCliServicePosture(
   const issues: string[] = [];
 
   if (serverBackedEnabled && !config.enabled) {
-    issues.push('Host-owned surfaces are configured, but Agent service ownership is disabled.');
+    issues.push('External runtime endpoints are configured, but Agent runtime ownership is disabled by design.');
   }
   if (config.enabled && !config.autostart) {
-    issues.push('External runtime service config has autostart off.');
+    issues.push('External runtime host config has autostart off.');
   }
   if (config.enabled && !config.restartOnFailure) {
-    issues.push('External runtime service config has restart-on-failure off.');
+    issues.push('External runtime host config has restart-on-failure off.');
   }
   for (const endpoint of endpoints) {
     if (endpoint.enabled && options.probe && endpoint.reachable === false) {
@@ -230,15 +230,15 @@ export function formatCliServicePosture(posture: CliServicePosture, json = false
   if (json) return JSON.stringify(posture, null, 2);
   return [
     'GoodVibes external runtime diagnostics',
-    '  lifecycle: managed outside goodvibes-agent',
-    `  service config enabled: ${yesNo(posture.config.enabled)}`,
+    '  ownership: managed outside goodvibes-agent',
+    `  host config enabled: ${yesNo(posture.config.enabled)}`,
     `  autostart config: ${yesNo(posture.config.autostart)}`,
     `  restartOnFailure config: ${yesNo(posture.config.restartOnFailure)}`,
     `  runtime host flag: ${yesNo(posture.config.daemonEnabled)}`,
     `  log: ${posture.log.path ?? 'n/a'} (${posture.log.exists ? 'present' : 'missing'})`,
     ...(posture.log.readError ? [`  log read error: ${posture.log.readError}`] : []),
     '',
-    'Endpoints:',
+    'Runtime endpoints:',
     ...posture.endpoints.map((endpoint) =>
       `  ${endpoint.label}: enabled=${yesNo(endpoint.enabled)} ${endpoint.binding.hostMode} ${endpoint.binding.host}:${endpoint.binding.port} posture=${endpoint.bindPosture.label}${endpoint.reachable === undefined ? '' : ` reachable=${yesNo(endpoint.reachable)}`}`,
     ),

package/src/cli/status.ts

@@ -28,7 +28,7 @@ export interface CliAuthStatus {
 
 export interface CliDoctorFinding {
   readonly id: string;
-  readonly area: 'auth' | 'network' | 'onboarding' | 'security' | 'service' | 'secrets';
+  readonly area: 'auth' | 'network' | 'onboarding' | 'runtime' | 'security' | 'secrets';
   readonly severity: 'warning' | 'risk';
   readonly summary: string;
   readonly cause: string;
@@ -52,13 +52,13 @@ export interface CliStatusSnapshot {
     readonly secretPolicyLabel: string;
     readonly localUsers: CliAuthStatus | null;
   };
-  readonly service: {
+  readonly runtimeConnection: {
     readonly enabled: unknown;
     readonly autostart: unknown;
     readonly restartOnFailure: unknown;
     readonly lifecycle?: CliServicePosture;
   };
-  readonly surfaces: {
+  readonly runtimeEndpoints: {
     readonly controlPlane: ReturnType<typeof resolveRuntimeEndpointBinding> & { readonly enabled: unknown };
     readonly httpListener: ReturnType<typeof resolveRuntimeEndpointBinding> & { readonly enabled: unknown };
     readonly web: ReturnType<typeof resolveRuntimeEndpointBinding> & { readonly enabled: unknown };
@@ -111,30 +111,30 @@ export function buildCliDoctorFindings(options: CliStatusOptions): readonly CliD
   const serverBackedEnabled = daemonEnabled || controlPlaneEnabled || listenerEnabled || webEnabled;
   const networkFacingSurfaces = [
     ['runtime API', controlPlaneEnabled, controlPlaneBinding],
-    ['HTTP listener', listenerEnabled, httpListenerBinding],
-    ['web surface', webEnabled, webBinding],
+    ['incoming webhook listener', listenerEnabled, httpListenerBinding],
+    ['browser companion', webEnabled, webBinding],
   ].filter(([, enabled, binding]) => isNetworkFacing(enabled, binding as typeof controlPlaneBinding));
 
   const findings: CliDoctorFinding[] = [];
 
   if (serverBackedEnabled && !serviceEnabled) {
     findings.push({
-      id: 'service-disabled-for-server-surfaces',
-      area: 'service',
+      id: 'runtime-ownership-external',
+      area: 'runtime',
       severity: 'warning',
-      summary: 'Host-owned surfaces are configured while Agent service ownership is disabled.',
+      summary: 'External runtime endpoints are configured while Agent runtime ownership is disabled by design.',
       cause: 'One or more runtime API, listener, or web settings are enabled while service.enabled is false.',
-      impact: 'The external GoodVibes runtime must own availability for those surfaces; Agent will not start or enable them.',
-      action: 'Manage surface/service posture from GoodVibes TUI or the owning host, then use Agent for read-only diagnostics.',
+      impact: 'The external GoodVibes runtime must own availability for those endpoints; Agent will not start or enable them.',
+      action: 'Manage runtime availability from GoodVibes TUI or the owning host, then use Agent for read-only diagnostics.',
     });
   }
 
   if (serviceEnabled && !serviceAutostart) {
     findings.push({
-      id: 'service-autostart-disabled',
-      area: 'service',
+      id: 'runtime-autostart-disabled',
+      area: 'runtime',
       severity: 'warning',
-      summary: 'External runtime service config has autostart off.',
+      summary: 'External runtime host config has autostart off.',
       cause: 'service.enabled is true and service.autostart is false.',
       impact: 'The external GoodVibes runtime may not be available after login or reboot even though host-managed startup is selected.',
       action: 'Configure autostart from GoodVibes TUI or the owning host; Agent will not mutate this setting.',
@@ -143,10 +143,10 @@ export function buildCliDoctorFindings(options: CliStatusOptions): readonly CliD
 
   if (serviceEnabled && !restartOnFailure) {
     findings.push({
-      id: 'service-restart-disabled',
-      area: 'service',
+      id: 'runtime-restart-disabled',
+      area: 'runtime',
       severity: 'warning',
-      summary: 'External runtime service config has restart-on-failure off.',
+      summary: 'External runtime host config has restart-on-failure off.',
       cause: 'service.enabled is true and service.restartOnFailure is false.',
       impact: 'A crashed runtime or listener may stay down until manually restarted.',
       action: 'Configure restart-on-failure from GoodVibes TUI or the owning host; Agent will not mutate this setting.',
@@ -157,11 +157,11 @@ export function buildCliDoctorFindings(options: CliStatusOptions): readonly CliD
     for (const issue of options.service.issues) {
       if (findings.some((finding) => finding.summary === issue)) continue;
       findings.push({
-        id: `service-lifecycle-${findings.length}`,
-        area: 'service',
+        id: `runtime-connection-${findings.length}`,
+        area: 'runtime',
         severity: 'warning',
         summary: issue,
-        cause: 'The service lifecycle inspection found a mismatch between configured service/surface state and observed host state.',
+        cause: 'The runtime connection inspection found a mismatch between configured endpoint state and observed host state.',
         impact: 'Runtime API, listener, or web availability may not match the configuration.',
         action: 'Use Agent status and doctor diagnostics here, then manage the runtime from GoodVibes TUI or your host tooling.',
       });
@@ -175,17 +175,17 @@ export function buildCliDoctorFindings(options: CliStatusOptions): readonly CliD
       severity: 'warning',
       summary: 'Onboarding has not been shown for this user.',
       cause: 'No global user onboarding check marker was found.',
-      impact: 'Important service, network, provider, auth, or permission choices may still be implicit defaults.',
+      impact: 'Important runtime, network, provider, auth, or permission choices may still be implicit defaults.',
       action: 'Run /onboarding in GoodVibes Agent or goodvibes-agent onboarding status to review setup state.',
     });
   }
 
   if (networkFacingSurfaces.length > 0 && options.auth?.userStorePresent !== true) {
     findings.push({
-      id: 'network-surface-without-local-users',
+      id: 'network-endpoint-without-local-users',
       area: 'auth',
       severity: 'risk',
-      summary: 'Network-facing surfaces are enabled before local users are configured.',
+      summary: 'Network-facing runtime endpoints are enabled before local users are configured.',
       cause: `${networkFacingSurfaces.map(([name]) => name).join(', ')} are LAN/custom-bound, but no local auth user store was found.`,
       impact: 'Remote access paths may be unusable or unsafe until local admin auth is configured.',
       action: 'Create/verify a local admin user before exposing GoodVibes on the network.',
@@ -194,7 +194,7 @@ export function buildCliDoctorFindings(options: CliStatusOptions): readonly CliD
 
   if (networkFacingSurfaces.length > 0 && options.auth?.bootstrapCredentialPresent === true) {
     findings.push({
-      id: 'network-surface-with-bootstrap-credential',
+      id: 'network-endpoint-with-bootstrap-credential',
       area: 'auth',
       severity: 'risk',
       summary: 'A bootstrap credential is still present while network-facing surfaces are enabled.',
@@ -223,7 +223,7 @@ export function buildCliDoctorFindings(options: CliStatusOptions): readonly CliD
       severity: 'risk',
       summary: 'Plaintext secret storage is allowed.',
       cause: 'storage.secretPolicy is plaintext_allowed.',
-      impact: 'Provider keys and surface tokens may be stored without secure backend protection.',
+      impact: 'Provider keys and channel tokens may be stored without secure backend protection.',
       action: 'Use Require secure storage or Use secure storage when available for normal operation.',
     });
   }
@@ -233,10 +233,10 @@ export function buildCliDoctorFindings(options: CliStatusOptions): readonly CliD
       id: 'network-http-listener-enabled',
       area: 'network',
       severity: 'warning',
-      summary: 'The HTTP listener is reachable beyond loopback.',
-      cause: `HTTP listener is enabled on ${httpListenerBinding.host}:${httpListenerBinding.port} with ${httpListenerBinding.hostMode} binding.`,
+      summary: 'The incoming webhook listener is reachable beyond loopback.',
+      cause: `Incoming webhook listener is enabled on ${httpListenerBinding.host}:${httpListenerBinding.port} with ${httpListenerBinding.hostMode} binding.`,
       impact: 'External tools and devices may be able to reach incoming event endpoints.',
-      action: 'Keep listener secrets/signature checks configured for every enabled webhook surface.',
+      action: 'Keep listener secrets/signature checks configured for every enabled webhook endpoint.',
     });
   }
 
@@ -266,13 +266,13 @@ export function buildCliStatusSnapshot(options: CliStatusOptions): CliStatusSnap
       secretPolicyLabel: secretPolicyLabel(config.get('storage.secretPolicy')),
       localUsers: options.auth ?? null,
     },
-    service: {
+    runtimeConnection: {
       enabled: config.get('service.enabled'),
       autostart: config.get('service.autostart'),
       restartOnFailure: config.get('service.restartOnFailure'),
       ...(options.service ? { lifecycle: options.service } : {}),
     },
-    surfaces: {
+    runtimeEndpoints: {
       controlPlane: { enabled: config.get('controlPlane.enabled'), ...controlPlaneBinding },
       httpListener: { enabled: config.get('danger.httpListener'), ...httpListenerBinding },
       web: { enabled: config.get('web.enabled'), ...webBinding },
@@ -289,15 +289,15 @@ export function buildCliStatusSnapshot(options: CliStatusOptions): CliStatusSnap
 export function renderCliStatus(options: CliStatusOptions): string {
   const config = options.configManager;
   const snapshot = buildCliStatusSnapshot(options);
-  const serviceEnabled = snapshot.service.enabled;
-  const serviceAutostart = snapshot.service.autostart;
-  const restartOnFailure = snapshot.service.restartOnFailure;
-  const controlPlaneEnabled = snapshot.surfaces.controlPlane.enabled;
-  const listenerEnabled = snapshot.surfaces.httpListener.enabled;
-  const webEnabled = snapshot.surfaces.web.enabled;
-  const controlPlaneBinding = snapshot.surfaces.controlPlane;
-  const httpListenerBinding = snapshot.surfaces.httpListener;
-  const webBinding = snapshot.surfaces.web;
+  const serviceEnabled = snapshot.runtimeConnection.enabled;
+  const serviceAutostart = snapshot.runtimeConnection.autostart;
+  const restartOnFailure = snapshot.runtimeConnection.restartOnFailure;
+  const controlPlaneEnabled = snapshot.runtimeEndpoints.controlPlane.enabled;
+  const listenerEnabled = snapshot.runtimeEndpoints.httpListener.enabled;
+  const webEnabled = snapshot.runtimeEndpoints.web.enabled;
+  const controlPlaneBinding = snapshot.runtimeEndpoints.controlPlane;
+  const httpListenerBinding = snapshot.runtimeEndpoints.httpListener;
+  const webBinding = snapshot.runtimeEndpoints.web;
   const marker = options.onboardingMarkers?.effective;
   const findings = snapshot.findings;
 
@@ -326,10 +326,10 @@ export function renderCliStatus(options: CliStatusOptions): string {
       ? `  operatorTokens: ${options.auth.operatorTokenPresent ? 'present' : 'missing'} (${options.auth.operatorTokenPath})`
       : '  operatorTokens: unknown',
     '',
-    'External Runtime Service:',
-    `  enabled: ${yesNo(serviceEnabled)}`,
-    `  autostart: ${yesNo(serviceAutostart)}`,
-    `  restartOnFailure: ${yesNo(restartOnFailure)}`,
+    'External Runtime Connection:',
+    `  hostConfigEnabled: ${yesNo(serviceEnabled)}`,
+    `  hostAutostart: ${yesNo(serviceAutostart)}`,
+    `  hostRestartOnFailure: ${yesNo(restartOnFailure)}`,
     ...(options.service ? [
       `  platform: ${options.service.managed.platform}`,
       `  installed: ${yesNo(options.service.managed.installed)}`,
@@ -339,9 +339,9 @@ export function renderCliStatus(options: CliStatusOptions): string {
     ] : []),
     '',
     'Runtime Endpoints:',
-    bindLine('controlPlane', controlPlaneEnabled, controlPlaneBinding),
-    bindLine('httpListener', listenerEnabled, httpListenerBinding),
-    bindLine('web', webEnabled, webBinding),
+    bindLine('runtimeApi', controlPlaneEnabled, controlPlaneBinding),
+    bindLine('incomingWebhook', listenerEnabled, httpListenerBinding),
+    bindLine('browserCompanion', webEnabled, webBinding),
     '',
     'Onboarding:',
     `  checked: ${marker?.exists ? 'yes' : 'no'}`,

package/src/input/agent-workspace-categories.ts

@@ -196,7 +196,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
     detail: 'Agent does not create local automation jobs or hidden scheduler spawns. Reviewed local routines can be promoted into external schedules only through an explicit schedules.create command with --yes, optional delivery targets, and a redacted local receipt.',
     actions: [
       { id: 'schedule-list', label: 'List schedules', detail: 'Inspect configured jobs and history without running or mutating them.', command: '/schedule list', kind: 'command', safety: 'read-only' },
-      { id: 'schedule-promote-routine', label: 'Promote routine', detail: 'Create an external schedule from a local Agent routine. Requires a real routine id, schedule expression, optional delivery target, and explicit --yes.', command: '/schedule promote-routine <routine-id> --cron <expr> [--delivery-surface slack] --yes', kind: 'command', safety: 'safe' },
+      { id: 'schedule-promote-routine', label: 'Promote routine', detail: 'Create an external schedule from a local Agent routine. Requires a real routine id, schedule expression, optional delivery target, and explicit --yes.', command: '/schedule promote-routine <routine-id> --cron <expr> [--delivery-channel slack] --yes', kind: 'command', safety: 'safe' },
       { id: 'schedule-receipts', label: 'Promotion receipts', detail: 'Review local redacted receipt history for routine-to-schedule promotion attempts.', command: '/schedule receipts', kind: 'command', safety: 'read-only' },
       { id: 'schedule-reconcile', label: 'Reconcile schedules', detail: 'Compare local promotion receipts with live external schedules using schedules.list.', command: '/schedule reconcile', kind: 'command', safety: 'read-only' },
       { id: 'schedule-policy', label: 'Local scheduler blocked', detail: 'Local schedule add/run/remove/enable/disable remain blocked; only explicit external schedule promotion is allowed here.', kind: 'guidance', safety: 'blocked' },

package/src/input/commands/experience-runtime.ts

@@ -64,7 +64,7 @@ export function registerExperienceRuntimeCommands(registry: CommandRegistry): vo
         ctx.print([
           `Approval Review: ${entry[0]}`,
           `  ${entry[1]}`,
-          '  Related surfaces: /security, /policy preflight, /trust, /mcp',
+          '  Related workspaces: /security, /policy preflight, /trust, /mcp',
         ].join('\n'));
         return;
       }
@@ -74,7 +74,7 @@ export function registerExperienceRuntimeCommands(registry: CommandRegistry): vo
 
   registry.register({
     name: 'voice',
-    description: 'Review voice posture and package portable voice-surface metadata',
+    description: 'Review voice posture and package portable voice interaction metadata',
     usage: '[review|enable --yes|disable --yes|bundle export <path> --yes|bundle inspect <path>]',
     handler(args, ctx) {
       const parsed = stripYesFlag(args);
@@ -86,19 +86,19 @@ export function registerExperienceRuntimeCommands(registry: CommandRegistry): vo
         ctx.print([
           'Voice Review',
           `  enabled: ${enabled ? 'yes' : 'no'}`,
-          '  posture: optional local companion surface; disabled by default',
+          '  posture: optional local companion interaction; disabled by default',
           '  note: voice remains an optional operator convenience, not a required SaaS dependency',
         ].join('\n'));
         return;
       }
       if (sub === 'enable' || sub === 'disable') {
         if (!parsed.yes) {
-          requireYesFlag(ctx, `${sub} voice surface`, `/voice ${sub} --yes`);
+          requireYesFlag(ctx, `${sub} voice interaction`, `/voice ${sub} --yes`);
           return;
         }
         const next = sub === 'enable';
         ctx.platform.configManager.setDynamic('ui.voiceEnabled', next);
-        ctx.print(`Voice surface ${next ? 'enabled' : 'disabled'} for this runtime.`);
+        ctx.print(`Voice interaction ${next ? 'enabled' : 'disabled'} for this runtime.`);
         return;
       }
       if (sub === 'bundle') {
@@ -120,7 +120,7 @@ export function registerExperienceRuntimeCommands(registry: CommandRegistry): vo
             enabled: Boolean(ctx.platform.configManager.get('ui.voiceEnabled')),
             notes: [
               'Voice is optional and local-first.',
-              'Operator review remains the primary control surface for risky actions.',
+              'Operator review remains the primary review path for risky actions.',
             ],
           };
           mkdirSync(dirname(targetPath), { recursive: true });

package/src/input/commands/operator-runtime.ts

@@ -229,7 +229,7 @@ export function registerOperatorRuntimeCommands(registry: CommandRegistry): void
         + '  /mode                          — show current mode and settings\n'
         + '  /mode show                     — show current mode and settings\n'
         + '  /mode quiet --yes              — suppress all non-critical notifications\n'
-        + '  /mode balanced --yes           — surface warnings, batch info noise (default)\n'
+        + '  /mode balanced --yes           — show warnings, batch info noise (default)\n'
         + '  /mode operator --yes           — full verbosity, no suppression\n'
         + '  /mode set-domain <d> <v> --yes — per-domain verbosity override (minimal|normal|verbose)'
       );

package/src/input/commands/routines-runtime.ts

@@ -299,7 +299,7 @@ export function registerRoutinesRuntimeCommands(registry: CommandRegistry): void
     name: 'routines',
     aliases: ['routine'],
     description: 'Manage local GoodVibes Agent routines',
-    usage: '[list|enabled|search <query>|show <id>|receipts|reconcile|receipt <id>|create --name <name> --description <summary> --steps <steps>|update <id> [--name ...] [--description ...] [--steps ...]|enable <id>|disable <id>|start <id>|review <id>|stale <id> <reason...>|promote <id> --cron <expr> [--delivery-surface slack] --yes|delete <id> --yes]',
+    usage: '[list|enabled|search <query>|show <id>|receipts|reconcile|receipt <id>|create --name <name> --description <summary> --steps <steps>|update <id> [--name ...] [--description ...] [--steps ...]|enable <id>|disable <id>|start <id>|review <id>|stale <id> <reason...>|promote <id> --cron <expr> [--delivery-channel slack] --yes|delete <id> --yes]',
     handler: runRoutinesRuntimeCommand,
   });
 }

package/src/input/commands/schedule-runtime.ts

@@ -64,7 +64,7 @@ async function promoteRoutineSchedule(args: readonly string[], ctx: CommandConte
   const parsed = parseRoutineSchedulePromotionArgs(args);
   if (parsed.errors.length > 0) {
     ctx.print([
-      'Usage: /schedule promote-routine <routine-id> (--cron <expr>|--every <interval>|--at <iso-time>) [--timezone <tz>] [--name <schedule-name>] [--provider <id>] [--model <model>] [--delivery-surface <surface[:route[:label]]>|--delivery-route <route[:label]>|--delivery-webhook <url>|--delivery-link <url>] [--disabled] --yes',
+      'Usage: /schedule promote-routine <routine-id> (--cron <expr>|--every <interval>|--at <iso-time>) [--timezone <tz>] [--name <schedule-name>] [--provider <id>] [--model <model>] [--delivery-channel <channel[:route[:label]]>|--delivery-route <route[:label]>|--delivery-webhook <url>|--delivery-link <url>] [--disabled] --yes',
       ...parsed.errors.map((error) => `  ${error}`),
     ].join('\n'));
     return;
@@ -91,8 +91,8 @@ export function registerScheduleRuntimeCommands(registry: CommandRegistry): void
     name: 'schedule',
     aliases: ['sched'],
     description: 'Inspect schedules and explicitly promote local Agent routines to external schedules',
-    usage: 'list | receipts | reconcile | receipt <id> | promote-routine <routine-id> --cron <expr> [--delivery-surface slack] --yes',
-    argsHint: 'list | receipts | reconcile | receipt <id> | promote-routine <routine-id> --cron <expr> [--delivery-surface slack] --yes',
+    usage: 'list | receipts | reconcile | receipt <id> | promote-routine <routine-id> --cron <expr> [--delivery-channel slack] --yes',
+    argsHint: 'list | receipts | reconcile | receipt <id> | promote-routine <routine-id> --cron <expr> [--delivery-channel slack] --yes',
     async handler(args, ctx) {
       const sub = args[0];
 
@@ -164,7 +164,7 @@ export function registerScheduleRuntimeCommands(registry: CommandRegistry): void
         + '  /schedule receipts\n'
         + '  /schedule reconcile\n'
         + '  /schedule receipt <receipt-id>\n'
-        + '  /schedule promote-routine <routine-id> (--cron <expr>|--every <interval>|--at <iso-time>) [--delivery-surface <surface>|--delivery-route <route>|--delivery-webhook <url>] --yes\n'
+        + '  /schedule promote-routine <routine-id> (--cron <expr>|--every <interval>|--at <iso-time>) [--delivery-channel <channel>|--delivery-route <route>|--delivery-webhook <url>] --yes\n'
         + '  Local schedule mutations and runs remain blocked.'
       );
     },

package/src/input/commands/tasks-runtime.ts

@@ -16,7 +16,7 @@ const BLOCKED_TASK_MUTATIONS: ReadonlySet<string> = new Set([
 function printTaskMutationBlocked(print: (text: string) => void, subcommand: string): void {
   print([
     `Task mutation "${subcommand}" is blocked in GoodVibes Agent.`,
-    '  policy: runtime tasks are read-only from the Agent surface; normal work stays in the main conversation.',
+    '  policy: runtime tasks are read-only from the Agent TUI; normal work stays in the main conversation.',
     '  durable tasks: use /workplan for visible planning and task tracking.',
     '  build/fix/review: use /delegate <task> to hand explicit implementation work to GoodVibes TUI.',
     '  result: no local runtime task state was changed.',

package/src/input/onboarding/onboarding-wizard-apply.ts

@@ -38,6 +38,16 @@ export function buildOnboardingApplyRequest(controller: OnboardingWizardControll
 
     setSecret('OPENAI_API_KEY', controller.getStringFieldValue('providers.openai-api-key', ''));
 
+    const profileName = controller.getStringFieldValue('agent-setup.profile-name', '').trim();
+    if (profileName.length > 0) {
+      const selectedTemplate = controller.getStringFieldValue('agent-setup.profile-template', 'none').trim();
+      operations.push({
+        kind: 'create-agent-profile',
+        name: profileName,
+        ...(selectedTemplate.length > 0 && selectedTemplate !== 'none' ? { templateId: selectedTemplate } : {}),
+      });
+    }
+
     return {
       mode: controller.mode,
       source: 'wizard',

package/src/input/onboarding/onboarding-wizard-steps.ts

@@ -1,7 +1,23 @@
 import { REASONING_OPTIONS, HITL_MODE_OPTIONS, GUIDANCE_MODE_OPTIONS, PERMISSION_MODE_OPTIONS, SECRET_POLICY_OPTIONS } from './onboarding-wizard-constants.ts';
 import { modelSelectionLabel, normalizeText } from './onboarding-wizard-helpers.ts';
+import { listAgentRuntimeProfileTemplates } from '../../agent/runtime-profile.ts';
 import type { OnboardingWizardController } from './onboarding-wizard.ts';
-import type { OnboardingWizardActionFieldDefinition, OnboardingWizardFieldDefinition, OnboardingWizardModelPickerFieldDefinition, OnboardingWizardRadioFieldDefinition, OnboardingWizardStepDefinition } from './onboarding-wizard-types.ts';
+import type { OnboardingWizardActionFieldDefinition, OnboardingWizardFieldDefinition, OnboardingWizardModelPickerFieldDefinition, OnboardingWizardRadioFieldDefinition, OnboardingWizardRadioOption, OnboardingWizardStepDefinition } from './onboarding-wizard-types.ts';
+
+function buildStarterTemplateOptions(): readonly OnboardingWizardRadioOption[] {
+  return [
+    {
+      id: 'none',
+      label: 'No profile',
+      hint: 'Keep using the current Agent home. You can create isolated profiles later from the Agent workspace.',
+    },
+    ...listAgentRuntimeProfileTemplates().map((template): OnboardingWizardRadioOption => ({
+      id: template.id,
+      label: template.name,
+      hint: `${template.description} Includes persona ${template.personaName}, skills ${template.skillNames.join(', ')}, and routines ${template.routineNames.join(', ')}.`,
+    })),
+  ];
+}
 
 export function buildOnboardingWizardSteps(controller: OnboardingWizardController): readonly OnboardingWizardStepDefinition[] {
   if (controller.hydrationPending || controller.hydrationError !== null) return [buildLoadingStep(controller)];
@@ -125,7 +141,7 @@ export function buildToolsStep(): OnboardingWizardStepDefinition {
         kind: 'status',
         id: 'agent-tools.no-hidden-work',
         label: 'Hidden work policy',
-        hint: 'Tool use stays visible in the main Agent conversation or explicit command surface; no hidden background work is started from onboarding.',
+        hint: 'Tool use stays visible in the main Agent conversation or explicit command workspace; no hidden background work is started from onboarding.',
         defaultValue: 'Visible',
       },
     ],
@@ -169,6 +185,7 @@ export function buildAgentSetupStep(controller: OnboardingWizardController): Onb
     summaryTitle: 'Agent setup posture',
     summaryLines: [
       'Agent owns the operator TUI and local behavior registry.',
+      'Optional starter profile: create an isolated Agent home from setup.',
       'GoodVibes runtime lifecycle is external to this product.',
       `Secret policy: ${controller.getStringFieldValue('agent-setup.secret-policy', secretPolicy)}`,
       collectionIssues > 0 ? `${collectionIssues} setup snapshot issue(s)` : 'Setup snapshot collected cleanly',
@@ -198,12 +215,28 @@ export function buildAgentSetupStep(controller: OnboardingWizardController): Onb
         options: SECRET_POLICY_OPTIONS,
         defaultValue: secretPolicy,
       },
+      {
+        kind: 'text',
+        id: 'agent-setup.profile-name',
+        label: 'Create starter profile',
+        hint: 'Optional: enter a new Agent profile name to create an isolated home during setup. Leave blank to keep the current home.',
+        placeholder: 'research-desk',
+        defaultValue: '',
+      },
+      {
+        kind: 'radio',
+        id: 'agent-setup.profile-template',
+        label: 'Starter profile template',
+        hint: 'Choose the persona, skills, and routine bundle to seed into the optional new Agent profile.',
+        options: buildStarterTemplateOptions(),
+        defaultValue: 'none',
+      },
       {
         kind: 'status',
         id: 'agent-setup.profile-guide',
-        label: 'Agent profiles',
-        hint: 'Use /agent-profile guide after setup to create household, research, travel, operations, or custom Agent profiles.',
-        defaultValue: 'Profiles',
+        label: 'Profile guidance',
+        hint: 'Use /agent-profile guide after setup to export, customize, import, and launch Agent profiles.',
+        defaultValue: 'Available',
       },
     ],
   };

package/src/panels/knowledge-panel.ts

@@ -335,7 +335,7 @@ export class KnowledgePanel extends ScrollableListPanel<MemoryRecord> {
         ['  project ', C.label], [String(byScope.get('project') ?? 0), C.value],
         ['  team ', C.label], [String(byScope.get('team') ?? 0), C.good],
       ]),
-      buildGuidanceLine(width, '/recall review', 'work the stale and contradicted queue from the command surface', C),
+      buildGuidanceLine(width, '/recall review', 'work the stale and contradicted queue from the command workspace', C),
     ];
 
     const recentSummaryLines: Line[] = [];

package/src/panels/memory-panel.ts

@@ -189,7 +189,7 @@ export class MemoryPanel extends SearchableListPanel<MemoryRecord> {
         { label: 'runbooks', value: String(byClass.get('runbook') ?? 0), valueColor: C.runbook },
       ], C),
       filterLine,
-      buildGuidanceLine(width, '/recall review', 'review durable knowledge and queue posture from the command surface', C),
+      buildGuidanceLine(width, '/recall review', 'review durable knowledge and queue posture from the command workspace', C),
     ];
 
     const selected = records[this.selectedIndex];

package/src/panels/subscription-panel.ts

@@ -79,7 +79,7 @@ export class SubscriptionPanel extends ScrollableListPanel<SubscriptionRow> {
   protected override getEmptyStateActions() {
     return [
       { command: '/subscription login openai start --yes', summary: 'start the first-class OpenAI subscription flow' },
-      { command: '/login provider <name> start --yes', summary: 'use the front-door auth surface for supported providers' },
+      { command: '/login provider <name> start --yes', summary: 'use the front-door auth flow for supported providers' },
       { command: '/services auth-review', summary: 'inspect configured service auth posture and stored secrets' },
     ];
   }
@@ -205,7 +205,7 @@ export class SubscriptionPanel extends ScrollableListPanel<SubscriptionRow> {
         intro,
         sections: [{ lines: [...summaryLines, ...emptyLines] }],
         footerLines: [
-          buildGuidanceLine(width, '/subscription login <provider> start --yes', 'start browser-based provider login from the packaged subscription surface', C),
+          buildGuidanceLine(width, '/subscription login <provider> start --yes', 'start browser-based provider login from the packaged subscription flow', C),
           buildPanelLine(width, [['  Up/Down move  Enter/X sign out selected provider  r refresh', C.dim]]),
         ],
         palette: C,
@@ -255,7 +255,7 @@ export class SubscriptionPanel extends ScrollableListPanel<SubscriptionRow> {
       header: headerLines,
       footer: [
         ...detailRows,
-        buildGuidanceLine(width, '/subscription login <provider> start --yes', 'start browser-based provider login from the packaged subscription surface', C),
+        buildGuidanceLine(width, '/subscription login <provider> start --yes', 'start browser-based provider login from the packaged subscription flow', C),
         buildPanelLine(width, [['  Up/Down move  Enter/X sign out selected provider  r refresh', C.dim]]),
       ],
     });

package/src/panels/system-messages-panel.ts

@@ -144,7 +144,7 @@ export class SystemMessagesPanel extends ScrollableListPanel<SystemMessageEntry>
               this.getEmptyStateMessage(),
               'Model switches, scan notices, provider/system state, and other operational updates will appear here once the runtime starts emitting them.',
               [
-                { command: '/help', summary: 'review command and workflow surfaces' },
+                { command: '/help', summary: 'review commands and operator workflows' },
                 { command: '/cockpit', summary: 'open the unified runtime control room' },
               ],
               C,

package/src/panels/tasks-panel.ts

@@ -185,7 +185,7 @@ export class TasksPanel extends ScrollableListPanel<RuntimeTask> {
             width,
             ' Runtime store not wired into this panel yet.',
             'Use the Tasks panel with a live runtime store to review active execution, cancellations, retries, and completion results.',
-            [{ command: '/tasks', summary: 'open or operate the task surface from a shell-owned runtime' }],
+            [{ command: '/tasks', summary: 'inspect runtime tasks without starting background work' }],
             C,
           ),
         }],

package/src/renderer/agent-workspace.ts

@@ -192,10 +192,10 @@ function snapshotLines(workspace: AgentWorkspace, category: AgentWorkspaceCatego
   } else if (category.id === 'voice-media') {
     base.push(
       { text: `Voice providers: ${snapshot.voiceProviderCount}; streaming TTS: ${snapshot.voiceStreamingProviderCount}; STT: ${snapshot.voiceSttProviderCount}; realtime: ${snapshot.voiceRealtimeProviderCount}.`, fg: PALETTE.info },
-      { text: `Voice surface: ${snapshot.voiceSurfaceEnabled ? 'enabled' : 'disabled'}; use /voice review for portable voice posture.`, fg: snapshot.voiceSurfaceEnabled ? PALETTE.warn : PALETTE.muted },
+      { text: `Voice interaction: ${snapshot.voiceSurfaceEnabled ? 'enabled' : 'disabled'}; use /voice review for portable voice posture.`, fg: snapshot.voiceSurfaceEnabled ? PALETTE.warn : PALETTE.muted },
       { text: `TTS config: provider ${snapshot.ttsProvider}; voice ${snapshot.ttsVoice}; response model ${snapshot.ttsResponseModel}.`, fg: PALETTE.info },
       { text: `Media providers: ${snapshot.mediaProviderCount}; understanding: ${snapshot.mediaUnderstandingProviderCount}; generation: ${snapshot.mediaGenerationProviderCount}.`, fg: PALETTE.info },
-      { text: `Browser tools: ${snapshot.browserSurfaceEnabled ? 'available' : 'not advertised'}; public base URL ${snapshot.browserSurfacePublicBaseUrl}.`, fg: snapshot.browserSurfaceEnabled ? PALETTE.warn : PALETTE.muted },
+      { text: `Browser companion: ${snapshot.browserSurfaceEnabled ? 'available' : 'not advertised'}; public base URL ${snapshot.browserSurfacePublicBaseUrl}.`, fg: snapshot.browserSurfaceEnabled ? PALETTE.warn : PALETTE.muted },
       { text: 'Build dispatch stays out of setup; explicit delegation is handled from the Build Delegation workspace.', fg: PALETTE.good },
       { text: 'Image input uses prompt attachments; media generation/provider setup stays behind explicit commands and configured providers.', fg: PALETTE.muted },
     );

package/src/renderer/help-overlay.ts

@@ -83,7 +83,7 @@ export function renderHelpOverlay(
     ['hooks',        '',           'Hook workbench and runtime activity'],
     ['orchestration','',           'Graph and recursive-agent control room'],
     ['communication','',           'Structured agent communication workspace'],
-    ['tasks',        '',           'Task surface for list/show/pause/resume/output'],
+    ['tasks',        '',           'Read-only task view for list/show/pause/resume/output'],
   ];
 
   // Build command rows from featured list, filtering out unregistered commands.

package/src/runtime/onboarding/apply.ts

@@ -1,7 +1,12 @@
-import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdirSync, readFileSync, rmSync, unlinkSync, writeFileSync } from 'node:fs';
 import { dirname } from 'node:path';
 import { isSecretRefInput } from '@pellux/goodvibes-sdk/platform/config';
 import { CONFIG_SCHEMA, DEFAULT_CONFIG } from '../../config/index.ts';
+import {
+  createAgentRuntimeProfile,
+  getAgentRuntimeProfileTemplate,
+  resolveAgentRuntimeProfileHome,
+} from '../../agent/runtime-profile.ts';
 import type { FeatureFlagConfigKey } from '../surface-feature-flags.ts';
 import {
   getOnboardingRuntimeStatePath,
@@ -250,6 +255,22 @@ function validateAcknowledgementOperation(
   }
 }
 
+function validateCreateAgentProfileOperation(
+  deps: OnboardingApplyDependencies,
+  operation: Extract<OnboardingApplyOperation, { kind: 'create-agent-profile' }>,
+): void {
+  const name = operation.name.trim();
+  if (name.length === 0) throw new Error('Agent profile name is required.');
+
+  const resolution = resolveAgentRuntimeProfileHome(deps.shellPaths.homeDirectory, name);
+  if (existsSync(resolution.homeDirectory)) {
+    throw new Error(`Agent profile already exists: ${resolution.id}`);
+  }
+
+  const templateId = operation.templateId?.trim();
+  if (templateId) getAgentRuntimeProfileTemplate(templateId, deps.shellPaths.homeDirectory);
+}
+
 function applyConfigOperation(
   deps: OnboardingApplyDependencies,
   operation: Extract<OnboardingApplyOperation, { kind: 'set-config' }>,
@@ -441,6 +462,13 @@ async function buildRollbackAction(
     );
   }
 
+  if (operation.kind === 'create-agent-profile') {
+    const resolution = resolveAgentRuntimeProfileHome(deps.shellPaths.homeDirectory, operation.name);
+    return () => {
+      if (existsSync(resolution.homeDirectory)) rmSync(resolution.homeDirectory, { recursive: true, force: true });
+    };
+  }
+
   const neverOperation: never = operation;
   throw new Error(`Unsupported onboarding operation: ${JSON.stringify(neverOperation)}`);
 }
@@ -465,6 +493,24 @@ function applyAcknowledgementOperation(
   };
 }
 
+function applyCreateAgentProfileOperation(
+  deps: OnboardingApplyDependencies,
+  operation: Extract<OnboardingApplyOperation, { kind: 'create-agent-profile' }>,
+): OnboardingAppliedOperation {
+  validateCreateAgentProfileOperation(deps, operation);
+  const templateId = operation.templateId?.trim();
+  const profile = createAgentRuntimeProfile(deps.shellPaths.homeDirectory, operation.name, {
+    ...(templateId ? { templateId } : {}),
+  });
+
+  return {
+    kind: operation.kind,
+    summary: profile.starterTemplateId
+      ? `Created Agent profile ${profile.id} from ${profile.starterTemplateId}.`
+      : `Created Agent profile ${profile.id}.`,
+  };
+}
+
 function orderApplyOperations(
   operations: readonly OnboardingApplyOperation[],
 ): readonly OnboardingApplyOperation[] {
@@ -476,6 +522,7 @@ function orderApplyOperations(
   const configOperations = operations.filter((operation) => (
     operation.kind === 'set-config' && operation.key !== 'storage.secretPolicy'
   ));
+  const agentProfileOperations = operations.filter((operation) => operation.kind === 'create-agent-profile');
   const finalOperations = operations.filter((operation) => (
     operation.kind === 'acknowledge'
   ));
@@ -485,6 +532,7 @@ function orderApplyOperations(
     ...authOperations,
     ...secretOperations,
     ...configOperations,
+    ...agentProfileOperations,
     ...finalOperations,
   ];
 }
@@ -521,6 +569,11 @@ function prevalidateApplyRequest(
         continue;
       }
 
+      if (operation.kind === 'create-agent-profile') {
+        validateCreateAgentProfileOperation(deps, operation);
+        continue;
+      }
+
       const neverOperation: never = operation;
       throw new Error(`Unsupported onboarding operation: ${JSON.stringify(neverOperation)}`);
     } catch (error) {
@@ -539,6 +592,7 @@ function getVerificationFailureKind(itemId: string): OnboardingApplyOperation['k
   if (itemId.startsWith('secret:')) return 'set-secret';
   if (itemId.startsWith('auth:')) return 'ensure-auth-user';
   if (itemId.startsWith('acknowledge:')) return 'acknowledge';
+  if (itemId.startsWith('agent-profile:')) return 'create-agent-profile';
   return 'set-config';
 }
 
@@ -590,6 +644,12 @@ export async function applyOnboardingRequest(
           continue;
         }
 
+        if (operation.kind === 'create-agent-profile') {
+          applied.push(applyCreateAgentProfileOperation(deps, operation));
+          rollbacks.push(rollback);
+          continue;
+        }
+
         const neverOperation: never = operation;
         throw new Error(`Unsupported onboarding operation: ${JSON.stringify(neverOperation)}`);
       } catch (error) {

package/src/runtime/onboarding/types.ts

@@ -264,6 +264,11 @@ export type OnboardingApplyOperation =
       readonly kind: 'acknowledge';
       readonly target: OnboardingAcknowledgementTarget;
       readonly acknowledged: boolean;
+    }
+  | {
+      readonly kind: 'create-agent-profile';
+      readonly name: string;
+      readonly templateId?: string;
     };
 
 export interface OnboardingApplyRequest {
@@ -358,7 +363,7 @@ export interface OnboardingProviderAccountReadHelper {
 
 export type OnboardingShellPaths = Pick<
   ShellPathService,
-  'workingDirectory' | 'resolveProjectPath' | 'resolveUserPath'
+  'homeDirectory' | 'workingDirectory' | 'resolveProjectPath' | 'resolveUserPath'
 >;
 
 export interface OnboardingSnapshotDependencies {

package/src/runtime/onboarding/verify.ts

@@ -1,4 +1,7 @@
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
 import { isSecretRefInput } from '@pellux/goodvibes-sdk/platform/config';
+import { resolveAgentRuntimeProfileHome } from '../../agent/runtime-profile.ts';
 import { readOnboardingRuntimeState } from './state.ts';
 import type {
   OnboardingApplyOperation,
@@ -147,6 +150,22 @@ function verifyAuthOperation(
   };
 }
 
+function verifyCreateAgentProfileOperation(
+  deps: OnboardingVerificationDependencies,
+  operation: Extract<OnboardingApplyOperation, { kind: 'create-agent-profile' }>,
+): OnboardingVerificationItem {
+  const resolution = resolveAgentRuntimeProfileHome(deps.shellPaths.homeDirectory, operation.name);
+  const ok = existsSync(join(resolution.homeDirectory, 'profile.json'));
+  return {
+    id: `agent-profile:${resolution.id}`,
+    status: ok ? 'pass' : 'fail',
+    message: ok
+      ? `${resolution.id} Agent profile exists.`
+      : `${resolution.id} Agent profile was not created.`,
+    target: resolution.id,
+  };
+}
+
 async function verifyOperation(
   deps: OnboardingVerificationDependencies,
   operation: OnboardingApplyOperation,
@@ -154,7 +173,8 @@ async function verifyOperation(
   if (operation.kind === 'set-config') return verifyConfigOperation(deps, operation);
   if (operation.kind === 'set-secret') return verifySecretOperation(deps, operation);
   if (operation.kind === 'ensure-auth-user') return verifyAuthOperation(deps, operation);
-  return verifyAcknowledgementOperation(deps, operation);
+  if (operation.kind === 'acknowledge') return verifyAcknowledgementOperation(deps, operation);
+  return verifyCreateAgentProfileOperation(deps, operation);
 }
 
 export async function verifyOnboardingRequest(

package/src/version.ts

@@ -6,7 +6,7 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '0.1.74';
+let _version = '0.1.76';
 let _sdkVersion = '0.33.35';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8')) as {