@pellux/goodvibes-agent 0.1.9 → 0.1.11

package/src/panels/settings-sync-panel.ts

@@ -86,7 +86,7 @@ export class SettingsSyncPanel extends ScrollableListPanel<ResolvedEntry> {
         : [buildPanelLine(width, [[' No recent sync or managed-setting failures.', C.dim]])]),
       // Conflicts
       ...(snapshot.conflicts.length > 0
-        ? snapshot.conflicts.map((conflict) => buildPanelLine(width, [[` ${conflict.key}`.padEnd(30), C.value], [` ${conflict.source}`.padEnd(10), C.warn], [` resolve: /settingssync resolve ${conflict.key} local|synced`.slice(0, Math.max(0, width - 42)), C.dim]]))
+        ? snapshot.conflicts.map((conflict) => buildPanelLine(width, [[` ${conflict.key}`.padEnd(30), C.value], [` ${conflict.source}`.padEnd(10), C.warn], [` resolve: /settingssync resolve ${conflict.key} local|synced --yes`.slice(0, Math.max(0, width - 42)), C.dim]]))
         : [buildPanelLine(width, [[' No settings conflicts detected.', C.dim]])]),
       // Rollback History
       ...(snapshot.rollbackHistory.length > 0
@@ -108,7 +108,7 @@ export class SettingsSyncPanel extends ScrollableListPanel<ResolvedEntry> {
             buildPanelLine(width, [[' managed ', C.label], [String(selectedEntry.managedValue ?? '(unset)').slice(0, Math.max(0, width - 11)), C.warn]]),
           ], C)
         : []),
-      buildPanelLine(width, [[' ↑/↓ browse  /settingssync show <key>  /settingssync resolve <key> <local|synced>  /managed apply-staged [key...] ', C.dim]]),
+      buildPanelLine(width, [[' ↑/↓ browse  /settingssync show <key>  mutations require --yes: resolve/apply-staged ', C.dim]]),
     ];
 
     return this.renderList(width, height, {

package/src/panels/subscription-panel.ts

@@ -78,8 +78,8 @@ export class SubscriptionPanel extends ScrollableListPanel<SubscriptionRow> {
   protected override getEmptyStateMessage() { return ' No provider subscriptions are active yet.'; }
   protected override getEmptyStateActions() {
     return [
-      { command: '/subscription login openai start', summary: 'start the first-class OpenAI subscription flow' },
-      { command: '/login provider <name> start', summary: 'use the front-door auth surface for supported providers' },
+      { command: '/subscription login openai start --yes', summary: 'start the first-class OpenAI subscription flow' },
+      { command: '/login provider <name> start --yes', summary: 'use the front-door auth surface for supported providers' },
       { command: '/services auth-review', summary: 'inspect configured service auth posture and stored secrets' },
     ];
   }
@@ -187,7 +187,7 @@ export class SubscriptionPanel extends ScrollableListPanel<SubscriptionRow> {
         { label: 'selected', value: (this.rows[this.selectedIndex]?.provider ?? 'none'), valueColor: this.rows[this.selectedIndex] ? C.value : C.dim },
         { label: 'status', value: this.rows[this.selectedIndex] ? statusOf(this.rows[this.selectedIndex]!) : 'n/a', valueColor: this.rows[this.selectedIndex] ? statusColor(statusOf(this.rows[this.selectedIndex]!)) : C.dim },
       ], C),
-      buildGuidanceLine(width, '/subscription login <provider> start', 'start or repair browser login for the selected provider route', C),
+      buildGuidanceLine(width, '/subscription login <provider> start --yes', 'start or repair browser login for the selected provider route', C),
     ];
 
     // Empty state: render posture + base empty state
@@ -205,7 +205,7 @@ export class SubscriptionPanel extends ScrollableListPanel<SubscriptionRow> {
         intro,
         sections: [{ lines: [...summaryLines, ...emptyLines] }],
         footerLines: [
-          buildGuidanceLine(width, '/subscription login <provider> start', 'start browser-based provider login from the packaged subscription surface', C),
+          buildGuidanceLine(width, '/subscription login <provider> start --yes', 'start browser-based provider login from the packaged subscription surface', C),
           buildPanelLine(width, [['  Up/Down move  Enter/X sign out selected provider  r refresh', C.dim]]),
         ],
         palette: C,
@@ -240,9 +240,9 @@ export class SubscriptionPanel extends ScrollableListPanel<SubscriptionRow> {
           detailRows.push(buildPanelLine(width, [[` Press Enter or X again to sign out ${selectedRow.provider}.`, C.warn]]));
         }
       } else if (selectedRow.pending) {
-        detailRows.push(buildPanelLine(width, [[' Login is pending. Finish with /subscription login <provider> finish <code>.', C.warn]]));
+        detailRows.push(buildPanelLine(width, [[' Login is pending. Finish with /subscription login <provider> finish <code> --yes.', C.warn]]));
       } else if (selectedRow.hasOAuthConfig) {
-        detailRows.push(buildPanelLine(width, [[' Ready for login. Start with /subscription login <provider> start.', C.dim]]));
+        detailRows.push(buildPanelLine(width, [[' Ready for login. Start with /subscription login <provider> start --yes.', C.dim]]));
       } else {
         detailRows.push(buildPanelLine(width, [[' Add a provider-specific OAuth config or enable a built-in subscription provider to use subscription login.', C.bad]]));
       }
@@ -255,7 +255,7 @@ export class SubscriptionPanel extends ScrollableListPanel<SubscriptionRow> {
       header: headerLines,
       footer: [
         ...detailRows,
-        buildGuidanceLine(width, '/subscription login <provider> start', 'start browser-based provider login from the packaged subscription surface', C),
+        buildGuidanceLine(width, '/subscription login <provider> start --yes', 'start browser-based provider login from the packaged subscription surface', C),
         buildPanelLine(width, [['  Up/Down move  Enter/X sign out selected provider  r refresh', C.dim]]),
       ],
     });

package/src/renderer/block-actions.ts

@@ -12,7 +12,7 @@ const ALL_ACTIONS: BlockAction[] = [
   { id: 'copy',     label: 'Copy',           key: 'c' },
   { id: 'bookmark', label: 'Bookmark',       key: 'b' },
   { id: 'toggle',   label: 'Collapse/Expand',key: 'Tab' },
-  { id: 'apply',    label: 'Apply diff',     key: 'a' },
+  { id: 'apply',    label: 'Diff apply blocked', key: 'a' },
   { id: 'rerun',    label: 'Re-run tool',    key: 'r' },
 ];
 

package/src/renderer/help-overlay.ts

@@ -215,7 +215,7 @@ export function renderShortcutsOverlay(
     row(kb('clear-prompt'), 'Clear prompt'),
     row(kb('delete-word'), 'Delete word backward'),
     row(kb('kill-line'), 'Kill to end of line'),
-    row(kb('apply-diff-line-start'), 'Apply diff / line start'),
+    row(kb('apply-diff-line-start'), 'Diff apply blocked / line start'),
     row(kb('next-error-line-end'), 'Next error / line end'),
     '',
     '  Actions',
@@ -223,7 +223,7 @@ export function renderShortcutsOverlay(
     row('Tab', 'Collapse/expand block'),
     row(kb('bookmark'), 'Bookmark block'),
     row(kb('block-copy'), 'Copy block to clipboard'),
-    row(kb('block-save'), 'Save block to file'),
+    row(kb('block-save'), 'Block save blocked; use /share --yes'),
     row(kb('copy-selection'), 'Copy selection'),
     row('F2', 'Process monitor'),
     row('?', 'Help overlay'),

package/src/renderer/mcp-workspace.ts

@@ -82,16 +82,16 @@ function selectedDetailLines(workspace: McpWorkspace, width: number): WorkspaceR
   if (workspace.mode === 'form') {
     const field = workspace.formFields[workspace.formIndex];
     lines.push(
-      workspace.editingServerName ? `Editing server: ${workspace.editingServerName}` : 'Adding an MCP server',
-      'Write a server through the SDK MCP config manager, then reload the live runtime without restarting the TUI.',
+      workspace.editingServerName ? `Previewing server: ${workspace.editingServerName}` : 'Drafting an MCP server command',
+      'Workspace writes/reloads are blocked. Use the generated /mcp add ... --yes command from the prompt.',
       field ? `${field.label}: ${field.help}` : '',
-      'Project scope writes to this workspace. Global scope writes to your user MCP config. External Claude/Desktop config files are shown but not edited here.',
+      'Project/global config locations are shown for review. This workspace does not write or reload MCP config.',
     );
   } else if (workspace.mode === 'delete-confirm') {
     lines.push(
-      `Remove configured server: ${workspace.editingServerName ?? '(unknown)'}`,
-      'This removes the selected writable project/global config entry and reloads MCP runtime state.',
-      'Press y to remove, n or Esc to cancel.',
+      `Removal blocked for server: ${workspace.editingServerName ?? '(unknown)'}`,
+      'Use /mcp remove <server> --scope <project|global> --yes from the prompt for explicit removal.',
+      'Press n or Esc to return.',
     );
   } else {
     const selected = workspace.selectedRow;
@@ -207,19 +207,19 @@ function buildControlRows(workspace: McpWorkspace, width: number, height: number
 }
 
 function footerText(workspace: McpWorkspace): string {
-  if (workspace.mode === 'form') return 'Focus server form · Up/Down field · Left/Right cycle · Type edit · Enter save/cancel row · Esc back';
-  if (workspace.mode === 'delete-confirm') return 'Focus remove confirmation · y confirm · n/Esc cancel';
-  return 'Focus MCP workspace · Up/Down choose · Enter edit/action · a add · d remove · r reload · t tools · Esc close';
+  if (workspace.mode === 'form') return 'Focus server command preview · Up/Down field · Left/Right cycle · Type edit · Enter show command · Esc back';
+  if (workspace.mode === 'delete-confirm') return 'Focus remove guidance · n/Esc cancel';
+  return 'Focus MCP workspace · Up/Down choose · Enter view/action · a draft · d removal command · r reload command · t tools · Esc close';
 }
 
 export function renderMcpWorkspace(workspace: McpWorkspace, width: number, height: number): Line[] {
   const metrics = getFullscreenWorkspaceMetrics({ width, height });
   const connected = workspace.servers.filter((server) => server.connected).length;
-  const stateLabel = workspace.mode === 'browse' ? 'Browse' : workspace.mode === 'form' ? 'Edit Server' : 'Confirm Remove';
+  const stateLabel = workspace.mode === 'browse' ? 'Browse' : workspace.mode === 'form' ? 'Command Preview' : 'Remove Guidance';
   const mainHeader = workspace.mode === 'form'
-    ? 'MCP server form'
+    ? 'MCP server command preview'
     : workspace.mode === 'delete-confirm'
-      ? 'Remove MCP server'
+      ? 'MCP remove command'
       : `Servers ${connected}/${workspace.servers.length} connected · Tools ${workspace.tools.length}`;
 
   return renderFullscreenWorkspace({

package/src/renderer/process-modal.ts

@@ -45,6 +45,12 @@ export interface ProcessModalDeps {
   readonly agentManager: Pick<AgentManager, 'list' | 'getStatus'>;
   readonly processManager: Pick<ProcessManager, 'list' | 'getStatus' | 'stop'>;
   readonly wrfcController: Pick<WrfcController, 'getChain'> & Partial<Pick<WrfcController, 'listChains'>>;
+  /**
+   * GoodVibes Agent must not present local AgentManager records as an owned
+   * execution lane. Tests for copied TUI primitives can opt into read-only
+   * display, but product runtime should keep this hidden.
+   */
+  readonly agentEntries: 'hidden' | 'read-only';
 }
 
 type WrfcChainLike = {
@@ -504,14 +510,17 @@ export class ProcessModal {
     const now = Date.now();
     const result: ProcessEntry[] = [];
 
-    // Agents — only show active (pending/running), grouped by stable parent/child hierarchy.
-    result.push(...buildAgentEntries(
-      manager.list(),
-      this.deps,
-      now,
-      (key) => this.groupOrder.get(key),
-      (key) => this.ensureGroupOrder(key),
-    ));
+    // Local AgentManager activity is hidden in the Agent product. Build/fix/review
+    // execution belongs to explicit GoodVibes TUI delegation, not a local lane.
+    if (this.deps.agentEntries === 'read-only') {
+      result.push(...buildAgentEntries(
+        manager.list(),
+        this.deps,
+        now,
+        (key) => this.groupOrder.get(key),
+        (key) => this.ensureGroupOrder(key),
+      ));
+    }
 
     // Background exec processes — only show running
     const pm = this.deps.processManager;

package/src/renderer/profile-picker-modal.ts

@@ -4,7 +4,7 @@
  *
  * Shows a list of saved profiles with:
  *   - name, timestamp (formatted), settings preview
- * Footer hints: [Up/Down] Navigate  [Enter] Load  [d] Arm/Delete  [s] Save current  [Esc] Close
+ * Footer hints: [Up/Down] Navigate  [Enter] Load  [Esc] Close
  */
 
 import type { Line } from '../types/grid.ts';
@@ -51,7 +51,7 @@ export function renderProfilePickerModal(
     });
     sections.push({
       type: 'text',
-      content: 'Press [s] to save the current settings as a profile.',
+      content: 'Use /profiles save <name> --yes to save the current settings as a profile.',
       style: { fg: '240', dim: true },
     });
   } else {
@@ -107,14 +107,6 @@ export function renderProfilePickerModal(
       style: { fg: '#00ffcc' },
     });
   }
-  if (modal.deleteConfirmationTarget) {
-    sections.push({
-      type: 'text',
-      content: `Press [d] again to permanently delete ${modal.deleteConfirmationTarget}.`,
-      style: { fg: '#f59e0b', dim: true },
-    });
-  }
-
   return ModalFactory.createModal(
     {
       title: 'Profiles',
@@ -122,7 +114,7 @@ export function renderProfilePickerModal(
       margin: boxMargin,
       targetContentRows,
       sections,
-      hints: ['[Up/Down] Navigate', '[Enter] Load', '[d] Arm/Delete', '[s] Save current', '[Esc] Close'],
+      hints: ['[Up/Down] Navigate', '[Enter] Load', '/profiles save|delete --yes', '[Esc] Close'],
     },
     width,
   );

package/src/renderer/session-picker-modal.ts

@@ -4,7 +4,7 @@
  *
  * Shows a list of saved sessions with:
  *   - name, timestamp (formatted), message count
- * Footer hints: [Enter] Load  [d] Delete  [Esc] Close
+ * Footer hints: [Enter] Load  [Esc] Close
  */
 
 import type { Line } from '../types/grid.ts';
@@ -105,14 +105,6 @@ export function renderSessionPickerModal(
     });
   }
 
-  if (modal.deleteConfirmationTarget) {
-    sections.push({
-      type: 'text',
-      content: `Deletion is armed for ${modal.deleteConfirmationTarget}. Move selection or press Esc to cancel.`,
-      style: { fg: '244', dim: true },
-    });
-  }
-
   return ModalFactory.createModal(
     {
       title: 'Sessions',
@@ -120,7 +112,7 @@ export function renderSessionPickerModal(
       margin: boxMargin,
       targetContentRows,
       sections,
-      hints: ['[\u2191\u2193] Navigate', '[Enter] Load', '[d] Arm / Delete', '[Esc] Close'],
+      hints: ['[\u2191\u2193] Navigate', '[Enter] Load', 'Delete: /session delete <id> --yes', '[Esc] Close'],
     },
     width,
   );

package/src/renderer/settings-modal.ts

@@ -7,7 +7,7 @@
 
 import type { Line } from '../types/grid.ts';
 import type { SettingsModal, SettingEntry, FlagEntry, McpEntry, SubscriptionEntry, SettingsCategory } from '../input/settings-modal.ts';
-import { SETTINGS_CATEGORIES, SETTINGS_CATEGORY_GROUPS } from '../input/settings-modal.ts';
+import { isExternalDaemonOwnedSettingKey, SETTINGS_CATEGORIES, SETTINGS_CATEGORY_GROUPS } from '../input/settings-modal.ts';
 import { getDisplayWidth, wrapText } from '../utils/terminal-width.ts';
 import { CATEGORY_LABELS, describeUiRouting, formatValue, getSettingLabel, inferSubscriptionRouteReason, valueColor } from './settings-modal-helpers.ts';
 import { isSecretConfigKey } from '../config/secret-config.ts';
@@ -34,10 +34,10 @@ const CATEGORY_INFO: Record<SettingsCategory, string> = {
   wrfc: 'WRFC is external to normal Agent operation. Review these copied compatibility values only for explicit GoodVibes TUI build delegation.',
   helper: 'Helper model defaults used by helper subsystems when they do not use the main chat route.',
   tts: 'Text-to-speech provider, voice, and optional spoken-turn LLM overrides.',
-  service: 'Background service posture: enabled state, autostart, restart behavior, service name, platform, and logs.',
-  controlPlane: 'Daemon control-plane settings for local admin/API access.',
-  httpListener: 'HTTP listener settings for webhook and integration ingress.',
-  web: 'Browser surface settings for the local or network web UI.',
+  service: 'External daemon service posture. Agent shows these copied compatibility keys for inspection only and does not install, start, stop, restart, or autostart services.',
+  controlPlane: 'External daemon control-plane settings for local admin/API access. Agent connects to this daemon and does not mutate its bind posture.',
+  httpListener: 'External HTTP listener settings for webhook and integration ingress. Agent does not start or expose the listener.',
+  web: 'External browser surface settings. Agent does not own the web listener or network bind lifecycle.',
   batch: 'Batch execution settings, including local vs Cloudflare queue behavior.',
   automation: 'Scheduled and automated run settings, concurrency, timeout, catch-up, cooldown, and retention behavior.',
   watchers: 'File/process watcher heartbeat, polling, and recovery-window behavior.',
@@ -49,10 +49,10 @@ const CATEGORY_INFO: Record<SettingsCategory, string> = {
   surfaces: 'External app surfaces such as Slack, Discord, ntfy, Home Assistant, Telegram, webhooks, chat bridges, and messaging providers.',
   cloudflare: 'Optional Cloudflare control plane, batch queue, Worker, Tunnel, Access, DNS, KV, Durable Objects, Secrets Store, and R2 settings.',
   release: 'Release-channel preference.',
-  danger: 'High-impact switches for daemon and HTTP listener behavior. These are operational overrides, not normal preferences.',
+  danger: 'High-impact daemon and listener switches. Agent renders daemon-owned switches read-only; use GoodVibes TUI or the daemon host to change them.',
   tools: 'Tool LLM and helper model routing. Empty provider/model values inherit the active chat route unless a specific helper/tool route is set.',
   flags: 'Feature flags are SDK runtime gates. They are separate from normal config keys because they enable or disable staged runtime behavior.',
-  network: 'Combined network view for daemon control-plane, HTTP listener, browser web surface, and general outbound network settings.',
+  network: 'Read-only view of external daemon control-plane, HTTP listener, and browser web bind posture plus editable non-daemon network settings.',
 };
 
 const ENUM_VALUE_DESCRIPTIONS: Record<string, Record<string, string>> = {
@@ -479,6 +479,10 @@ function footerText(modal: SettingsModal): string {
   if (modal.currentCategory === 'subscriptions') return 'Focus settings · Up/Down provider · Left categories · Tab pane · Enter review/sign out · Esc close';
   if (modal.currentCategory === 'mcp') return 'Focus settings · Up/Down server · Left categories · Tab pane · Enter edit trust · Esc close';
   if (modal.currentCategory === 'flags') return 'Focus feature flags · Up/Down flag · Left categories · Tab pane · Enter/Space toggle · Esc close';
+  const selected = modal.getSelected();
+  if (selected && isExternalDaemonOwnedSettingKey(selected.setting.key)) {
+    return 'Read-only external daemon setting · Change from GoodVibes TUI or daemon host · Esc close';
+  }
   return 'Focus settings · Up/Down setting · Left categories · Tab pane · Enter/Space edit/toggle · R reset · Esc close';
 }
 
@@ -488,7 +492,7 @@ export function renderSettingsModal(
   viewportHeight = 24,
 ): Line[] {
   const notices = [
-    ...(modal.lastSaveTriggeredRestart ? [`Restarting ${modal.lastSaveTriggeredRestart}`] : []),
+    ...(modal.lastSaveTriggeredRestart ? [`External daemon owner must restart ${modal.lastSaveTriggeredRestart}`] : []),
     ...(modal.lastSettingEffectMessage ? [modal.lastSettingEffectMessage] : []),
   ];
   const metrics = getFullscreenWorkspaceMetrics({ width, height: viewportHeight });

package/src/renderer/ui-factory.ts

@@ -2,7 +2,6 @@ import { type Line, type Cell, createEmptyLine, createEmptyCell } from '../types
 import { LAYOUT } from './layout.ts';
 import { VERSION } from '../version.ts';
 import { fitDisplay, getDisplayWidth, truncateDisplay, wrapText, interpolateColor } from '../utils/terminal-width.ts';
-import type { GitHeaderInfo } from './git-status.ts';
 import { renderConversationFragment, renderConversationStatusLine, type ConversationStatusSegment } from './conversation-surface.ts';
 import { GLYPHS } from './ui-primitives.ts';
 
@@ -11,22 +10,6 @@ const GRADIENT_CYCLE_FRAMES = 50;
 /** Number of frames before rotating to the next thinking phrase (~30 seconds at 80ms/frame). */
 const PHRASE_ROTATION_FRAMES = 375;
 
-/** Build the git segment string and its display width. Single source of truth for header layout. */
-function buildGitSegment(gitInfo: GitHeaderInfo): { text: string; width: number } {
-  const branch = ` git:${gitInfo.branch}`;
-  if (gitInfo.dirty) {
-    const text = `${branch} * `;
-    return { text, width: getDisplayWidth(text) };
-  }
-  if (gitInfo.ahead > 0 || gitInfo.behind > 0) {
-    const arrows = (gitInfo.ahead > 0 ? ` +${gitInfo.ahead}` : '') + (gitInfo.behind > 0 ? ` -${gitInfo.behind}` : '');
-    const text = `${branch}${arrows} `;
-    return { text, width: getDisplayWidth(text) };
-  }
-  const text = `${branch} `;
-  return { text, width: getDisplayWidth(text) };
-}
-
 /** Format a number: up to 999, then 1.0k, 1.0M, 1.0B, 1.0T */
 function fmtNum(n: number): string {
   if (n < 1000) return String(n);
@@ -40,7 +23,7 @@ function fmtNum(n: number): string {
  * UIFactory - Generates standard UI fragments without needing Ink/React overhead.
  */
 export class UIFactory {
-  public static createHeader(width: number, model: string, provider: string, title?: string, gitInfo?: GitHeaderInfo): Line[] {
+  public static createHeader(width: number, model: string, provider: string, title?: string): Line[] {
     const lines: Line[] = [];
     const CYAN = '#00ffff';
     const GREY = '244';
@@ -56,9 +39,8 @@ export class UIFactory {
     // Optional conversation title — shown after brand/ver, truncated to fit
     if (title) {
       const titleStr = `│ ${title} `;
-      // Reserve space for git info (if present) + model/provider on the right
-      const gitReserved = gitInfo ? buildGitSegment(gitInfo).width : 0;
-      const rightReserved = getDisplayWidth(stats + prov) + gitReserved;
+      // Reserve space for model/provider on the right.
+      const rightReserved = getDisplayWidth(stats + prov);
       const maxTitleW = width - curX - rightReserved - 1;
       let displayTitle: string;
       if (getDisplayWidth(titleStr) <= maxTitleW) {
@@ -76,19 +58,9 @@ export class UIFactory {
       }
       for (const char of displayTitle) { if (curX < width) line[curX++] = { char, fg: TITLE_COLOR, bg: '', bold: false, dim: true, underline: false, italic: false, strikethrough: false }; }
     }
-    // Build git info segment
-    let gitStr = '';
-    let gitFg = '238';
-    if (gitInfo) {
-      gitStr = buildGitSegment(gitInfo).text;
-      if (gitInfo.dirty || gitInfo.ahead > 0 || gitInfo.behind > 0) {
-        gitFg = '220'; // yellow when dirty or out-of-sync
-      }
-    }
     const rightSideText = stats + prov;
-    const rightSideW = getDisplayWidth(rightSideText) + getDisplayWidth(gitStr);
+    const rightSideW = getDisplayWidth(rightSideText);
     let rightX = width - rightSideW;
-    for (const char of gitStr) { if (rightX >= 0 && rightX < width) line[rightX++] = { char, fg: gitFg, bg: '', bold: false, dim: !gitInfo?.dirty && !(gitInfo?.ahead || gitInfo?.behind), underline: false, italic: false, strikethrough: false }; }
     for (const char of stats) { if (rightX < width) line[rightX++] = { char, fg: CYAN, bg: '', bold: true, dim: false, underline: false, italic: false, strikethrough: false }; }
     for (const char of prov) { if (rightX < width) line[rightX++] = { char, fg: GREY, bg: '', bold: false, dim: true, underline: false, italic: false, strikethrough: false }; }
     lines.push(line);

package/src/runtime/bootstrap-shell.ts

@@ -11,8 +11,6 @@ import type { OpsControlPlane } from '@/runtime/index.ts';
 import { CommandRegistry } from '../input/command-registry.ts';
 import { registerBuiltinCommands } from '../input/commands.ts';
 import { InputHistory } from '../input/input-history.ts';
-import { GitStatusProvider } from '../renderer/git-status.ts';
-import type { GitHeaderInfo } from '../renderer/git-status.ts';
 import type { PermissionRequestHandler } from '@pellux/goodvibes-sdk/platform/permissions';
 import { registerBuiltinPanels } from '../panels/builtin-panels.ts';
 import { SystemMessagesPanel } from '../panels/system-messages-panel.ts';
@@ -38,8 +36,6 @@ import { createKnowledgeApi } from '@pellux/goodvibes-sdk/platform/knowledge';
 export interface BootstrapShellState {
   readonly commandRegistry: CommandRegistry;
   readonly commandContext: CommandContext;
-  readonly gitStatusProvider: GitStatusProvider;
-  readonly lastGitInfoRef: { value: GitHeaderInfo | undefined };
   readonly inputHistory: InputHistory;
   readonly systemMessageRouter: SystemMessageRouter;
 }
@@ -260,13 +256,6 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
   });
   commandContextRef = commandContext;
 
-  const gitStatusProvider = new GitStatusProvider(services.workingDirectory);
-  const lastGitInfoRef = { value: undefined as GitHeaderInfo | undefined };
-  gitStatusProvider.getStatus().then((info) => {
-    lastGitInfoRef.value = info;
-    requestRender();
-  }).catch(() => { /* non-fatal */ });
-
   const saveHistory = configManager.get('behavior.saveHistory') as boolean;
   const inputHistory = new InputHistory({
     historyPath: services.shellPaths.resolveUserPath(GOODVIBES_AGENT_SURFACE_ROOT, 'input-history.json'),
@@ -276,8 +265,6 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
   return {
     commandRegistry,
     commandContext,
-    gitStatusProvider,
-    lastGitInfoRef,
     inputHistory,
     systemMessageRouter,
   };

package/src/runtime/bootstrap.ts

@@ -16,8 +16,6 @@ import { logger } from '@pellux/goodvibes-sdk/platform/utils';
 import type { PermissionRequestHandler } from '@pellux/goodvibes-sdk/platform/permissions';
 import type { CommandContext } from '../input/command-registry.ts';
 import type { InputHistory } from '../input/input-history.ts';
-import type { GitStatusProvider } from '../renderer/git-status.ts';
-import type { GitHeaderInfo } from '../renderer/git-status.ts';
 import type { SelectionManager } from '../input/selection.ts';
 import type { Compositor } from '../renderer/compositor.ts';
 
@@ -81,10 +79,6 @@ export type BootstrapContext = RuntimeContext & {
   uiServices: UiRuntimeServices;
   /** Persists and navigates input history across sessions. */
   inputHistory: InputHistory;
-  /** Provides git branch/dirty state for the header. */
-  gitStatusProvider: GitStatusProvider;
-  /** Mutable ref so async git refreshes propagate without closure capture issues. */
-  lastGitInfoRef: { value: GitHeaderInfo | undefined };
   /** Unsubscribe functions owned by bootstrap (cleared on shutdown). */
   bootstrapUnsubs: Array<() => void>;
   /** Ref holding the periodic agent-status interval (use ref — not local var — to keep shutdown in sync). */
@@ -291,9 +285,7 @@ export async function bootstrapRuntime(
   systemMessageRouterRef.value = systemMessageRouter;
   const commandRegistry = shell.commandRegistry;
   const commandContext = shell.commandContext;
-  const gitStatusProvider = shell.gitStatusProvider;
   const inputHistory = shell.inputHistory;
-  const lastGitInfoRef = shell.lastGitInfoRef;
   const pluginCommandRegistry = {
     register(command: {
       readonly name: string;
@@ -507,8 +499,6 @@ export async function bootstrapRuntime(
     commandContext,
     uiServices,
     inputHistory,
-    gitStatusProvider,
-    lastGitInfoRef,
     bootstrapUnsubs,
     agentStatusIntervalRef,
     orchestratorRefs,

package/src/runtime/onboarding/derivation.ts

@@ -267,7 +267,7 @@ function describeLocalTuiOnly(snapshot: OnboardingSnapshotState): string {
     return 'Use GoodVibes Agent in this terminal while connecting only to an externally managed daemon. Agent does not enable service mode, HTTP listeners, external app surfaces, or network setup.';
   }
 
-  return 'Keep Agent local-only by not enabling browser access, background services, HTTP listeners, external app surfaces, or network setup.';
+  return 'Keep Agent local-only by not requesting browser access, service posture changes, HTTP listeners, external app surfaces, or network setup from the daemon owner.';
 }
 
 function describeBrowserAccess(snapshot: OnboardingSnapshotState): string {
@@ -278,14 +278,14 @@ function describeBrowserAccess(snapshot: OnboardingSnapshotState): string {
 
 function describeRemoteDeviceAccess(snapshot: OnboardingSnapshotState): string {
   return hasRemoteDeviceAccess(snapshot)
-    ? 'Keep enabled GoodVibes services reachable from other devices on your LAN. Local authentication is required.'
-    : 'Make enabled GoodVibes services reachable from other devices on your LAN. Local authentication is required.';
+    ? 'Review external daemon surfaces reachable from other devices on your LAN. Local authentication is required.'
+    : 'Review the external daemon surfaces required for other-device LAN access. Local authentication is required.';
 }
 
 function describeWebhookIngress(snapshot: OnboardingSnapshotState): string {
   return hasWebhookOrEventIngress(snapshot)
-    ? 'Keep the HTTP listener available for incoming webhooks, callbacks, and automation events.'
-    : 'Turn on the HTTP listener for incoming webhooks, callbacks, and automation events.';
+    ? 'Review the external HTTP listener used for incoming webhooks, callbacks, and automation events.'
+    : 'Review the external HTTP listener required for incoming webhooks, callbacks, and automation events.';
 }
 
 function describeExternalIntegrations(snapshot: OnboardingSnapshotState): string {
@@ -306,7 +306,7 @@ function describeCloudflareBatch(snapshot: OnboardingSnapshotState): string {
     return 'Review Cloudflare Workers/Queues batch processing, token storage, and optional remote daemon provisioning settings.';
   }
 
-  return 'Optionally configure Cloudflare Workers and Queues for explicit or eligible background batch jobs. Immediate local daemon behavior stays the default unless enabled.';
+  return 'Optionally configure Cloudflare Workers and Queues for explicit or eligible background batch jobs. The external daemon still owns execution.';
 }
 
 function getAcknowledgementAccepted(