@pellux/goodvibes-agent 1.0.16 → 1.0.17

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 Product-facing release notes for GoodVibes Agent.
 
+## 1.0.17 - 2026-06-03
+
+- Add agent_harness setting lookup by key, target, or query for get_setting, set_setting, and reset_setting.
+- Return setting lookup metadata on successful single-setting operations and refuse ambiguous matches with candidate settings instead of guessing.
+- Refresh package-facing docs and focused harness coverage for model-visible setting inspection and confirmed mutation lookup.
+
 ## 1.0.16 - 2026-06-03
 
 - Add agent_harness workspace_action lookup by actionId, command, target, or query with resolved lookup metadata.

package/README.md

@@ -7,7 +7,7 @@ GoodVibes Agent is the personal operator assistant TUI for GoodVibes. It is buil
 
 The Agent product connects to a GoodVibes host owned outside this package. It does not install, start, stop, restart, or own that host.
 
-Most work happens in the interactive TUI. The installed CLI exists to launch that TUI and provide scriptable mirrors for workflows that are already reachable from the workspace. The main Agent model can inspect the same harness surface through Agent-owned tools: workspace actions and single-action lookup, built-in panels, modal/overlay/picker UI surfaces, named operator surfaces, top-level CLI mirrors, fixed shortcuts, configurable keybindings, slash commands, single-command lookup with policy metadata, settings, model tools and individual model tool schemas, local registries, connected-host capability boundaries, and live connected-host readiness are all discoverable from the conversation without exposing connected-host lifecycle control.
+Most work happens in the interactive TUI. The installed CLI exists to launch that TUI and provide scriptable mirrors for workflows that are already reachable from the workspace. The main Agent model can inspect the same harness surface through Agent-owned tools: workspace actions and single-action lookup, built-in panels, modal/overlay/picker UI surfaces, named operator surfaces, top-level CLI mirrors, fixed shortcuts, configurable keybindings, slash commands, single-command lookup with policy metadata, settings and single-setting lookup, model tools and individual model tool schemas, local registries, connected-host capability boundaries, and live connected-host readiness are all discoverable from the conversation without exposing connected-host lifecycle control.
 
 ## Install
 
@@ -66,7 +66,7 @@ Use the workspace as the primary product surface:
 
 Inside the Agent workspace, press `/` to search every workspace action by name, category, command, or detail. This is the primary discovery path for product actions; slash commands and CLI subcommands remain power-user/scriptable mirrors.
 
-The model has the same harness map through `agent_harness`: it can list Agent workspace actions, inspect one workspace action by `actionId`, `command`, `target`, or `query`, list built-in panels and their workspace routes, inspect modal/overlay/picker UI surfaces, list top-level CLI mirrors, inspect fixed shortcuts and configurable keybindings, list slash commands, inspect one slash command by `command`, `commandName`, `target`, or `query` with parsed arguments and policy metadata, inspect model tool definitions or one model tool schema, inspect or change Agent settings with confirmation, run concrete workspace or slash-command mirrors with confirmation, and report connected-host capability and live readiness posture. CLI mirror modes are read-only catalog and parser inspection; inside the main conversation, the model uses the returned preferred model tool, workspace action, setting mode, or confirmed slash-command mirror instead of launching hidden nested CLI processes. Panel modes expose catalog/open state and route visible panel/workspace changes through the current Agent shell bridge with confirmation. UI surface modes expose help, shortcuts, command browser, conversation search, prompt-history search, slash-command mode, file picker, block actions, context, runtime activity, live process output, bookmarks, model/provider/reasoning-effort pickers, TTS provider/voice pickers, session/profile pickers, the panel-picker compatibility route, security/knowledge/subscription operator surfaces, settings, MCP workspace, onboarding, and Agent workspace entrypoints; `open_ui_surface` is confirmation-gated and only performs visible shell navigation. Shortcut modes expose fixed runtime/editor controls plus the live resolved keybinding table; `set_keybinding` and `reset_keybinding` write the same `keybindings.json` file the user edits and require confirmation. Workspace action discovery can inline editor field schemas with `includeParameters:true`; single-action lookup uses the same user-facing search fields and returns lookup metadata plus editor schema; profile editors use the current starter-template inventory, and routine schedule editors can prefill a selected local routine from `recordId`. Selection-based local workspace actions accept a local `recordId` so the model can use the same note promotion and local registry flows as the TUI. Direct local create editors for memory, notes, personas, skills, and routines can execute from submitted fields through `run_workspace_action` and `agent_local_registry` with confirmation. The `connected_host` report includes route families, allowed capabilities, blocked lifecycle/non-Agent surfaces, and availability for the first-class Agent tools; `connected_host_capability` inspects one allowed or blocked capability by id, target, or query with its route families and boundary. The `connected_host_status` report performs a read-only live check of the connected-host status route and the isolated Agent Knowledge status route, reports SDK compatibility, token posture, endpoint bindings, route readiness, and actionable findings, and still refuses connected-host lifecycle control. The model uses those first-class tools for product workflows where they exist, such as Agent Knowledge, local memory/notes/personas/skills/routines, channel sends, notifications, reminders, media generation, work plans, and connected-host operator actions.
+The model has the same harness map through `agent_harness`: it can list Agent workspace actions, inspect one workspace action by `actionId`, `command`, `target`, or `query`, list built-in panels and their workspace routes, inspect modal/overlay/picker UI surfaces, list top-level CLI mirrors, inspect fixed shortcuts and configurable keybindings, list slash commands, inspect one slash command by `command`, `commandName`, `target`, or `query` with parsed arguments and policy metadata, inspect model tool definitions or one model tool schema, inspect or change Agent settings by `key`, `target`, or `query` with confirmation, run concrete workspace or slash-command mirrors with confirmation, and report connected-host capability and live readiness posture. CLI mirror modes are read-only catalog and parser inspection; inside the main conversation, the model uses the returned preferred model tool, workspace action, setting mode, or confirmed slash-command mirror instead of launching hidden nested CLI processes. Panel modes expose catalog/open state and route visible panel/workspace changes through the current Agent shell bridge with confirmation. UI surface modes expose help, shortcuts, command browser, conversation search, prompt-history search, slash-command mode, file picker, block actions, context, runtime activity, live process output, bookmarks, model/provider/reasoning-effort pickers, TTS provider/voice pickers, session/profile pickers, the panel-picker compatibility route, security/knowledge/subscription operator surfaces, settings, MCP workspace, onboarding, and Agent workspace entrypoints; `open_ui_surface` is confirmation-gated and only performs visible shell navigation. Shortcut modes expose fixed runtime/editor controls plus the live resolved keybinding table; `set_keybinding` and `reset_keybinding` write the same `keybindings.json` file the user edits and require confirmation. Workspace action discovery can inline editor field schemas with `includeParameters:true`; single-action lookup uses the same user-facing search fields and returns lookup metadata plus editor schema; setting lookup uses the same catalog search fields and refuses ambiguous mutations with candidate settings; profile editors use the current starter-template inventory, and routine schedule editors can prefill a selected local routine from `recordId`. Selection-based local workspace actions accept a local `recordId` so the model can use the same note promotion and local registry flows as the TUI. Direct local create editors for memory, notes, personas, skills, and routines can execute from submitted fields through `run_workspace_action` and `agent_local_registry` with confirmation. The `connected_host` report includes route families, allowed capabilities, blocked lifecycle/non-Agent surfaces, and availability for the first-class Agent tools; `connected_host_capability` inspects one allowed or blocked capability by id, target, or query with its route families and boundary. The `connected_host_status` report performs a read-only live check of the connected-host status route and the isolated Agent Knowledge status route, reports SDK compatibility, token posture, endpoint bindings, route readiness, and actionable findings, and still refuses connected-host lifecycle control. The model uses those first-class tools for product workflows where they exist, such as Agent Knowledge, local memory/notes/personas/skills/routines, channel sends, notifications, reminders, media generation, work plans, and connected-host operator actions.
 
 The setup workspace surfaces discovered Agent-local persona, skill, and routine markdown files so day-one setup can import useful behavior instead of starting from blank records. It can also create one initial scratchpad note, local persona, skill, and routine directly during first-run setup; those records stay in Agent-local registries and never write to default knowledge or non-Agent segments.
 

package/dist/package/main.js

@@ -816508,7 +816508,7 @@ var createStyledCell = (char, overrides = {}) => ({
 // src/version.ts
 import { readFileSync } from "fs";
 import { join } from "path";
-var _version = "1.0.16";
+var _version = "1.0.17";
 var _sdkVersion = "0.33.35";
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, "..", "package.json"), "utf-8"));
@@ -851011,6 +851011,36 @@ function findSetting(configManager, rawKey) {
     return null;
   return configManager.getSchema().find((setting) => setting.key === rawKey) ?? null;
 }
+function settingLookupText(setting) {
+  return [setting.key, setting.description, setting.type, ...setting.enumValues ?? []].join(`
+`).toLowerCase();
+}
+function settingMatchesSearch(setting, query2) {
+  return settingLookupText(setting).includes(query2);
+}
+function settingCandidate(setting) {
+  const hostOwned = isExternalHostOwnedSettingKey(setting.key);
+  return {
+    key: setting.key,
+    category: setting.key.split(".")[0] ?? "",
+    type: setting.type,
+    writable: !hostOwned,
+    visibleInWorkspace: !isAgentHiddenSettingKey(setting.key),
+    description: setting.description
+  };
+}
+function settingLookupFromArgs(args2) {
+  const key = args2.key?.trim();
+  if (key)
+    return { source: "key", input: key };
+  const target = args2.target?.trim();
+  if (target)
+    return { source: "target", input: target };
+  const query2 = args2.query?.trim();
+  if (query2)
+    return { source: "query", input: query2 };
+  return null;
+}
 function redactHarnessSettingValue(key, value) {
   if (typeof value !== "string")
     return value;
@@ -851023,7 +851053,7 @@ function redactHarnessSettingValue(key, value) {
   }
   return value;
 }
-function describeHarnessSetting(configManager, setting) {
+function describeHarnessSetting(configManager, setting, options = {}) {
   const value = configManager.get(setting.key);
   const hostOwned = isExternalHostOwnedSettingKey(setting.key);
   return {
@@ -851037,7 +851067,8 @@ function describeHarnessSetting(configManager, setting) {
     visibleInWorkspace: !isAgentHiddenSettingKey(setting.key),
     ...hostOwned ? { lockReason: AGENT_EXTERNAL_HOST_SETTING_LOCK_REASON } : {},
     description: setting.description,
-    ...setting.enumValues ? { enumValues: setting.enumValues } : {}
+    ...setting.enumValues ? { enumValues: setting.enumValues } : {},
+    ...options.lookup ? { lookup: options.lookup } : {}
   };
 }
 function listHarnessSettings(configManager, filters = {}) {
@@ -851056,17 +851087,74 @@ function listHarnessSettings(configManager, filters = {}) {
     if (!filters.includeHidden && isAgentHiddenSettingKey(setting.key))
       return false;
     if (query2) {
-      const text = [setting.key, setting.description, setting.type, ...setting.enumValues ?? []].join(`
-`).toLowerCase();
-      if (!text.includes(query2))
+      if (!settingMatchesSearch(setting, query2))
         return false;
     }
     return true;
   }).map((setting) => describeHarnessSetting(configManager, setting)).slice(0, limit3);
 }
-function getHarnessSetting(configManager, key) {
+function getHarnessSetting(configManager, key, lookup) {
   const setting = findSetting(configManager, key);
-  return setting ? describeHarnessSetting(configManager, setting) : null;
+  return setting ? describeHarnessSetting(configManager, setting, { lookup }) : null;
+}
+function resolveHarnessSetting(configManager, args2) {
+  const lookup = settingLookupFromArgs(args2);
+  if (!lookup)
+    return null;
+  const exact = findSetting(configManager, lookup.input);
+  if (exact) {
+    const resolvedLookup = { ...lookup, resolvedBy: "key" };
+    return {
+      status: "found",
+      setting: describeHarnessSetting(configManager, exact, { lookup: resolvedLookup }),
+      lookup: resolvedLookup
+    };
+  }
+  const inputLower = lookup.input.toLowerCase();
+  const schema3 = configManager.getSchema();
+  const caseInsensitiveMatches = schema3.filter((setting) => setting.key.toLowerCase() === inputLower);
+  if (caseInsensitiveMatches.length === 1) {
+    const resolvedLookup = { ...lookup, resolvedBy: "case-insensitive-key" };
+    return {
+      status: "found",
+      setting: describeHarnessSetting(configManager, caseInsensitiveMatches[0], { lookup: resolvedLookup }),
+      lookup: resolvedLookup
+    };
+  }
+  if (caseInsensitiveMatches.length > 1) {
+    return {
+      status: "ambiguous",
+      input: lookup.input,
+      candidates: caseInsensitiveMatches.map(settingCandidate).slice(0, 8)
+    };
+  }
+  const category = args2.category?.trim();
+  const prefix = args2.prefix?.trim();
+  const searchMatches = schema3.filter((setting) => {
+    if (category && setting.key.split(".")[0] !== category)
+      return false;
+    if (prefix && !setting.key.startsWith(prefix))
+      return false;
+    if (!args2.includeHidden && isAgentHiddenSettingKey(setting.key))
+      return false;
+    return settingMatchesSearch(setting, inputLower);
+  });
+  if (searchMatches.length === 1) {
+    const resolvedLookup = { ...lookup, resolvedBy: "search" };
+    return {
+      status: "found",
+      setting: describeHarnessSetting(configManager, searchMatches[0], { lookup: resolvedLookup }),
+      lookup: resolvedLookup
+    };
+  }
+  if (searchMatches.length > 1) {
+    return {
+      status: "ambiguous",
+      input: lookup.input,
+      candidates: searchMatches.map(settingCandidate).slice(0, 8)
+    };
+  }
+  return null;
 }
 function coerceBoolean(value) {
   if (typeof value === "boolean")
@@ -879638,8 +879726,8 @@ function blockedConnectedHostCapabilities() {
 }
 function settingsPolicySummary() {
   return {
-    discovery: 'Use mode:"settings" for the setting catalog and mode:"get_setting" for one key. Hidden/scriptable settings require includeHidden:true.',
-    mutation: 'Use mode:"set_setting" or mode:"reset_setting" with confirm:true and explicitUserRequest.',
+    discovery: 'Use mode:"settings" for the setting catalog and mode:"get_setting" with key, target, or query for one setting. Hidden/scriptable settings require includeHidden:true unless the exact key is supplied.',
+    mutation: 'Use mode:"set_setting" or mode:"reset_setting" with key, target, or query plus confirm:true and explicitUserRequest; ambiguous setting lookups are refused.',
     secretHandling: "Raw secret values are persisted through the secret manager; config receives only a secret reference and tool output is redacted.",
     writablePolicy: "Each setting descriptor includes writable, visibleInWorkspace, and lockReason when applicable.",
     readOnlyHostOwnedPrefixes: ["service.*", "controlPlane.*", "httpListener.*", "web.*", "danger.daemon.*", "danger.httpListener.*"]
@@ -880839,7 +880927,7 @@ var AGENT_HARNESS_PARAMETER_PROPERTIES = {
   },
   query: {
     type: "string",
-    description: "Search text for command, workspace action, setting, tool, or UI surface catalogs; also a slash-command lookup for mode command."
+    description: "Search text for command, workspace action, setting, tool, or UI surface catalogs; also a slash-command lookup for mode command or setting lookup for get_setting/set_setting/reset_setting."
   },
   command: {
     type: "string",
@@ -880894,7 +880982,7 @@ var AGENT_HARNESS_PARAMETER_PROPERTIES = {
   },
   key: {
     type: "string",
-    description: "Agent setting key for get_setting, set_setting, or reset_setting."
+    description: "Agent setting key for get_setting, set_setting, or reset_setting. target or query can also look up one setting when the exact key is not known."
   },
   value: {
     anyOf: [
@@ -880906,7 +880994,7 @@ var AGENT_HARNESS_PARAMETER_PROPERTIES = {
   },
   target: {
     type: "string",
-    description: "Optional lookup target, such as a model-picker target, workspace action id/search text, slash command root or invocation, settings key, model tool name, or connected-host capability id."
+    description: "Optional lookup target, such as a model-picker target, workspace action id/search text, slash command root or invocation, setting key/search text, model tool name, or connected-host capability id."
   },
   capabilityId: {
     type: "string",
@@ -881712,6 +881800,16 @@ function isMode(value) {
 function readString58(value) {
   return typeof value === "string" ? value.trim() : "";
 }
+function settingLookupArgs(args2) {
+  return {
+    key: readString58(args2.key) || undefined,
+    target: readString58(args2.target) || undefined,
+    query: readString58(args2.query) || undefined,
+    category: readString58(args2.category) || undefined,
+    prefix: readString58(args2.prefix) || undefined,
+    includeHidden: args2.includeHidden === true
+  };
+}
 function readLimit11(value, fallback) {
   const parsed = typeof value === "string" && value.trim() ? Number(value) : value;
   if (typeof parsed !== "number" || !Number.isFinite(parsed))
@@ -882156,7 +882254,7 @@ function createAgentHarnessTool(deps) {
               shortcuts: 'Use mode:"shortcuts" to inspect fixed shortcuts plus configurable keybindings. Use mode:"set_keybinding" and mode:"reset_keybinding" with confirm:true plus explicitUserRequest to edit the same config file the user edits.',
               slashCommands: 'Use mode:"commands" to list slash commands and mode:"command" with command, commandName, target, or query to inspect one command; use mode:"run_command" with confirm:true plus explicitUserRequest to execute.',
               workspace: 'Use mode:"workspace_actions" to list and mode:"workspace_action" with actionId, command, target, or query for one action and editor schema; set includeParameters:true on workspace_actions to inline editor schemas.',
-              settings: 'Use mode:"settings", mode:"get_setting", mode:"set_setting", and mode:"reset_setting".',
+              settings: 'Use mode:"settings" to list and mode:"get_setting" with key, target, or query for one setting. Use mode:"set_setting" or mode:"reset_setting" with key, target, or query plus confirm:true and explicitUserRequest.',
               tools: 'Use mode:"tools" to list first-class model tools, or mode:"tool" with toolName, target, or query to inspect one schema.',
               connectedHost: 'Use mode:"connected_host" for the connected-host capability map and blocked boundaries. Use mode:"connected_host_capability" with capabilityId, target, or query for one allowed or blocked capability.',
               connectedHostStatus: 'Use mode:"connected_host_status" for live read-only host reachability, SDK compatibility, token posture, and Agent Knowledge route readiness.'
@@ -882253,9 +882351,13 @@ function createAgentHarnessTool(deps) {
           return output7({ settings, returned: settings.length, policy: settingsPolicySummary() });
         }
         if (args2.mode === "get_setting") {
-          const key = readString58(args2.key);
-          const setting = getHarnessSetting(deps.commandContext.platform.configManager, key);
-          return setting ? output7(setting) : error52(`Unknown setting ${key || "<missing>"}.`);
+          const setting = resolveHarnessSetting(deps.commandContext.platform.configManager, settingLookupArgs(args2));
+          if (setting?.status === "found")
+            return output7(setting.setting);
+          if (setting?.status === "ambiguous") {
+            return error52(`Ambiguous setting ${setting.input}. Candidates: ${JSON.stringify(setting.candidates)}`);
+          }
+          return error52(`Unknown setting ${readString58(args2.key || args2.target || args2.query) || "<missing>"}. Use mode:"settings" to inspect available settings.`);
         }
         if (args2.mode === "set_setting") {
           const confirmationError2 = requireConfirmedAction(args2, "Setting mutation");
@@ -882263,17 +882365,29 @@ function createAgentHarnessTool(deps) {
             return error52(confirmationError2);
           if (args2.value === undefined)
             return error52("set_setting requires value.");
-          const key = readString58(args2.key);
-          const result2 = await setHarnessSetting(deps.commandContext.platform.configManager, deps.commandContext.platform.secretsManager, key, args2.value);
-          return output7(result2);
+          const setting = resolveHarnessSetting(deps.commandContext.platform.configManager, settingLookupArgs(args2));
+          if (setting?.status === "ambiguous") {
+            return error52(`Ambiguous setting ${setting.input}. Candidates: ${JSON.stringify(setting.candidates)}`);
+          }
+          if (setting?.status !== "found") {
+            return error52(`Unknown setting ${readString58(args2.key || args2.target || args2.query) || "<missing>"}. Use mode:"settings" to inspect available settings.`);
+          }
+          const result2 = await setHarnessSetting(deps.commandContext.platform.configManager, deps.commandContext.platform.secretsManager, setting.setting.key, args2.value);
+          return output7({ ...result2, lookup: setting.lookup });
         }
         if (args2.mode === "reset_setting") {
           const confirmationError2 = requireConfirmedAction(args2, "Setting reset");
           if (confirmationError2)
             return error52(confirmationError2);
-          const key = readString58(args2.key);
-          const result2 = await resetHarnessSetting(deps.commandContext.platform.configManager, deps.commandContext.platform.secretsManager, key);
-          return output7(result2);
+          const setting = resolveHarnessSetting(deps.commandContext.platform.configManager, settingLookupArgs(args2));
+          if (setting?.status === "ambiguous") {
+            return error52(`Ambiguous setting ${setting.input}. Candidates: ${JSON.stringify(setting.candidates)}`);
+          }
+          if (setting?.status !== "found") {
+            return error52(`Unknown setting ${readString58(args2.key || args2.target || args2.query) || "<missing>"}. Use mode:"settings" to inspect available settings.`);
+          }
+          const result2 = await resetHarnessSetting(deps.commandContext.platform.configManager, deps.commandContext.platform.secretsManager, setting.setting.key);
+          return output7({ ...result2, lookup: setting.lookup });
         }
         if (args2.mode === "workspace" || args2.mode === "workspace_categories") {
           return output7({

package/docs/README.md

@@ -22,7 +22,7 @@ Important baseline constraints:
 - Agent depends on `@pellux/goodvibes-sdk@0.33.35`.
 - Agent connects to a GoodVibes host owned outside this product.
 - Agent does not start, stop, restart, install, uninstall, or own the connected GoodVibes host.
-- User-facing Agent workspace actions, single workspace-action lookup, built-in panels, modal/overlay/picker UI surfaces, named operator surfaces, top-level CLI mirrors, fixed shortcuts, configurable keybindings, slash commands, single-command lookup with policy metadata, model tools and individual model tool schemas, settings, local registries, connected-host capability boundaries, single connected-host capability inspection, and live connected-host readiness are model-visible through Agent-owned tools. Visible UI routing includes the command browser, reasoning-effort picker, live process output, runtime activity, settings, workspaces, and pickers the user can open. Local memory, note, persona, skill, and routine create editors can also run through confirmed workspace actions. Mutations and visible UI routing remain explicit and confirmation-gated.
+- User-facing Agent workspace actions, single workspace-action lookup, built-in panels, modal/overlay/picker UI surfaces, named operator surfaces, top-level CLI mirrors, fixed shortcuts, configurable keybindings, slash commands, single-command lookup with policy metadata, model tools and individual model tool schemas, settings and single-setting lookup, local registries, connected-host capability boundaries, single connected-host capability inspection, and live connected-host readiness are model-visible through Agent-owned tools. Visible UI routing includes the command browser, reasoning-effort picker, live process output, runtime activity, settings, workspaces, and pickers the user can open. Local memory, note, persona, skill, and routine create editors can also run through confirmed workspace actions. Mutations and visible UI routing remain explicit and confirmation-gated, and ambiguous setting lookups are refused with candidates instead of guessed.
 - Agent Knowledge uses only `/api/goodvibes-agent/knowledge/*`; there is no default knowledge or non-Agent product fallback.
 - Agent supports isolated Agent homes with `GOODVIBES_AGENT_HOME=<path>` and named profile homes with `goodvibes-agent profiles create <name> --template <starter> --yes` plus `--agent-profile <name>`.
 - Agent supports connected-host URL overrides with `--runtime-url http://host:port` or `GOODVIBES_AGENT_RUNTIME_URL=http://host:port`; these only change the Agent connection target.

package/docs/getting-started.md

@@ -44,7 +44,7 @@ After setup has been applied once, the TUI opens directly into the Agent operato
 
 Press `/` inside the Agent workspace to search every workspace action by name, category, command, or detail. Use that finder before reaching for shell commands; CLI subcommands are scriptable mirrors of these TUI workflows.
 
-The model can inspect and use the same harness surface through Agent-owned tools. `agent_harness` exposes workspace action discovery, single workspace-action inspection by action id, command, or lookup text, built-in panel discovery/routing, modal/overlay/picker UI surface discovery/routing, top-level CLI mirror discovery, fixed shortcut and configurable keybinding discovery, keybinding mutation with confirmation, slash-command discovery, single slash-command inspection by typed command or lookup text, command policy metadata, command execution with confirmation, model tool discovery and single-tool schema inspection, settings inspection/mutation, connected-host capability inventory, single connected-host capability inspection, and live connected-host readiness posture. CLI mirror modes are read-only catalog/parser inspection and point the model to the matching in-process tool, workspace action, setting mode, or slash-command mirror. Panel modes expose catalog/open state and route visible panel/workspace changes through the current Agent shell bridge with confirmation. UI surface modes expose help, shortcuts, command browser, conversation search, prompt-history search, slash-command mode, file picker, block actions, context, runtime activity, live process output, bookmarks, model/provider/reasoning-effort pickers, TTS provider/voice pickers, session/profile pickers, the panel-picker compatibility route, security/knowledge/subscription operator surfaces, settings, MCP workspace, onboarding, and Agent workspace entrypoints; `open_ui_surface` is confirmation-gated and only performs visible shell navigation. Shortcut modes expose the fixed runtime/editor shortcuts and the live keybindings table; confirmed keybinding edits write the same `keybindings.json` file the user edits and reload the runtime manager. Workspace action discovery can include editor field schemas with `includeParameters:true`, including starter-template defaults for profile creation and selected-routine defaults for routine schedule promotion when `recordId` is supplied; single-action lookup uses the same user-facing search fields and returns lookup metadata plus the editor schema. Selection-based local workspace actions accept a local `recordId`, so the model can use the same note promotion and local registry flows as the TUI. Direct local create editors for memory, notes, personas, skills, and routines can execute from submitted fields through `run_workspace_action` and `agent_local_registry` with confirmation. First-class model tools cover the main product workflows directly: Agent Knowledge, Agent Knowledge ingest, Agent-local memory/notes/personas/skills/routines, operator actions, notifications, channel sends, reminders, generated media, and work plans.
+The model can inspect and use the same harness surface through Agent-owned tools. `agent_harness` exposes workspace action discovery, single workspace-action inspection by action id, command, or lookup text, built-in panel discovery/routing, modal/overlay/picker UI surface discovery/routing, top-level CLI mirror discovery, fixed shortcut and configurable keybinding discovery, keybinding mutation with confirmation, slash-command discovery, single slash-command inspection by typed command or lookup text, command policy metadata, command execution with confirmation, model tool discovery and single-tool schema inspection, settings inspection/mutation by key or lookup text, connected-host capability inventory, single connected-host capability inspection, and live connected-host readiness posture. CLI mirror modes are read-only catalog/parser inspection and point the model to the matching in-process tool, workspace action, setting mode, or slash-command mirror. Panel modes expose catalog/open state and route visible panel/workspace changes through the current Agent shell bridge with confirmation. UI surface modes expose help, shortcuts, command browser, conversation search, prompt-history search, slash-command mode, file picker, block actions, context, runtime activity, live process output, bookmarks, model/provider/reasoning-effort pickers, TTS provider/voice pickers, session/profile pickers, the panel-picker compatibility route, security/knowledge/subscription operator surfaces, settings, MCP workspace, onboarding, and Agent workspace entrypoints; `open_ui_surface` is confirmation-gated and only performs visible shell navigation. Shortcut modes expose the fixed runtime/editor shortcuts and the live keybindings table; confirmed keybinding edits write the same `keybindings.json` file the user edits and reload the runtime manager. Workspace action discovery can include editor field schemas with `includeParameters:true`, including starter-template defaults for profile creation and selected-routine defaults for routine schedule promotion when `recordId` is supplied; single-action lookup uses the same user-facing search fields and returns lookup metadata plus the editor schema; single-setting lookup uses `key`, `target`, or `query`, returns lookup metadata, and refuses ambiguous mutations with candidate settings. Selection-based local workspace actions accept a local `recordId`, so the model can use the same note promotion and local registry flows as the TUI. Direct local create editors for memory, notes, personas, skills, and routines can execute from submitted fields through `run_workspace_action` and `agent_local_registry` with confirmation. First-class model tools cover the main product workflows directly: Agent Knowledge, Agent Knowledge ingest, Agent-local memory/notes/personas/skills/routines, operator actions, notifications, channel sends, reminders, generated media, and work plans.
 
 Use the Artifacts area for concrete files and generated output: attach images to prompts, export conversations or saved sessions, ingest local source files and URL lists into Agent Knowledge, import bookmarks or browser history, inspect source records, and generate media artifacts from confirmed prompts.
 
@@ -122,7 +122,7 @@ Use `/channels` inside the TUI for channel readiness and exact confirmed sends.
 
 The main assistant conversation can perform narrow confirmed operator actions when the user explicitly asks for a specific target: approve/deny/cancel one approval, run/pause/resume one automation job, cancel/retry one automation run, or run one schedule. Those calls use only public connected-host routes, require confirmation, and do not create, edit, or delete automation definitions.
 
-When the main assistant conversation needs to change Agent settings, change Agent keybindings, open a visible UI surface, or run a user-facing harness action, it should use `agent_harness` rather than generic SDK context/settings tools. Setting descriptors report writability, workspace visibility, and lock reasons; keybinding descriptors report fixed shortcuts, resolved bindings, defaults, custom state, and config path; UI surface descriptors report the visible shell opener, preferred model route, and confirmation policy; secret-backed settings store raw values through the secret manager; connected-host lifecycle settings stay read-only in Agent; and destructive local record deletion requires explicit confirmation.
+When the main assistant conversation needs to change Agent settings, change Agent keybindings, open a visible UI surface, or run a user-facing harness action, it should use `agent_harness` rather than generic SDK context/settings tools. Setting descriptors report writability, workspace visibility, lock reasons, and lookup metadata when a single setting is resolved from `key`, `target`, or `query`; ambiguous setting mutation requests return candidates instead of guessing. Keybinding descriptors report fixed shortcuts, resolved bindings, defaults, custom state, and config path; UI surface descriptors report the visible shell opener, preferred model route, and confirmation policy; secret-backed settings store raw values through the secret manager; connected-host lifecycle settings stay read-only in Agent; and destructive local record deletion requires explicit confirmation.
 
 ## Connected GoodVibes Host
 

package/docs/tools-and-commands.md

@@ -43,14 +43,14 @@ Host-management and coding-first commands that would imply connected-host lifecy
 
 The main Agent model has an Agent-owned harness bridge rather than generic SDK settings/context control. Use these model tools as the supported parity layer:
 
-- `agent_harness`: inspect workspace categories/actions and one workspace action by action id, command, or lookup text, inspect built-in panels, inspect modal/overlay/picker UI surfaces and named operator surfaces, inspect top-level CLI mirrors, inspect fixed shortcuts and configurable keybindings, inspect slash commands and one slash command by typed command or lookup text with policy metadata, run concrete workspace or slash-command mirrors with confirmation, inspect model tools or one model tool schema, inspect or change Agent settings/keybindings, inspect connected-host capability boundaries or one connected-host capability, and inspect live connected-host readiness.
+- `agent_harness`: inspect workspace categories/actions and one workspace action by action id, command, or lookup text, inspect built-in panels, inspect modal/overlay/picker UI surfaces and named operator surfaces, inspect top-level CLI mirrors, inspect fixed shortcuts and configurable keybindings, inspect slash commands and one slash command by typed command or lookup text with policy metadata, run concrete workspace or slash-command mirrors with confirmation, inspect model tools or one model tool schema, inspect or change Agent settings/keybindings by exact id or lookup text, inspect connected-host capability boundaries or one connected-host capability, and inspect live connected-host readiness.
 - `agent_local_registry`: inspect and maintain Agent-local memory, notes, personas, skills, skill bundles, and routines. Deleting local records requires `confirm:true` and `explicitUserRequest`.
 - `agent_knowledge` and `agent_knowledge_ingest`: ask/search and ingest into the isolated Agent Knowledge segment.
 - `agent_operator_briefing` and `agent_operator_action`: inspect connected work/approval/automation posture, or run exact confirmed approval/automation actions.
 - `agent_work_plan`: keep the visible Agent-local work plan current from the conversation.
 - `agent_channel_send`, `agent_notify`, `agent_reminder_schedule`, and `agent_media_generate`: perform confirmed external delivery, notification, reminder, or media actions when the user explicitly asks.
 
-`agent_harness` discovery modes are read-only. `summary` reports the model access map; `panels` and `panel` return the built-in panel catalog, current open/focused state, and each panel's matching Agent workspace route; `ui_surfaces` and `ui_surface` return modal, overlay, picker, and workspace entrypoints with shell-opener availability and preferred model routes; `cli_commands` and `cli_command` return top-level package CLI mirror metadata, parser output, blocked command tokens, and preferred in-process model routes; `shortcuts` returns fixed runtime/editor shortcuts plus configurable keybindings; `keybindings` and `keybinding` return the live resolved keybinding table, default bindings, custom state, and config path; `commands` lists slash-command descriptions; `command` returns one slash-command detail by `command`, `commandName`, `target`, or `query`, including parsed arguments plus effect/confirmation/preferred-tool/boundary policy metadata; `workspace_actions` lists Agent workspace actions and can inline editor field schemas with `includeParameters:true`; `workspace_action` returns one action by `actionId`, `command`, `target`, or `query`, using the same user-facing action-search fields and returning lookup metadata plus its editor schema; `tools` lists model tool definitions and can inline JSON schemas with `includeParameters:true`; `tool` returns one model tool schema by `toolName`, `target`, or `query`; `settings` returns setting descriptors plus setting policy; `connected_host` returns the connected-host route families, allowed capabilities, blocked capabilities, and first-class tool availability; `connected_host_capability` returns one allowed or blocked connected-host capability by `capabilityId`, `target`, or `query` with related route families and boundary text; and `connected_host_status` performs a live read-only check of the connected-host status and Agent Knowledge status routes and reports endpoint bindings, token posture, SDK compatibility, route readiness, and findings without printing token values.
+`agent_harness` discovery modes are read-only. `summary` reports the model access map; `panels` and `panel` return the built-in panel catalog, current open/focused state, and each panel's matching Agent workspace route; `ui_surfaces` and `ui_surface` return modal, overlay, picker, and workspace entrypoints with shell-opener availability and preferred model routes; `cli_commands` and `cli_command` return top-level package CLI mirror metadata, parser output, blocked command tokens, and preferred in-process model routes; `shortcuts` returns fixed runtime/editor shortcuts plus configurable keybindings; `keybindings` and `keybinding` return the live resolved keybinding table, default bindings, custom state, and config path; `commands` lists slash-command descriptions; `command` returns one slash-command detail by `command`, `commandName`, `target`, or `query`, including parsed arguments plus effect/confirmation/preferred-tool/boundary policy metadata; `workspace_actions` lists Agent workspace actions and can inline editor field schemas with `includeParameters:true`; `workspace_action` returns one action by `actionId`, `command`, `target`, or `query`, using the same user-facing action-search fields and returning lookup metadata plus its editor schema; `tools` lists model tool definitions and can inline JSON schemas with `includeParameters:true`; `tool` returns one model tool schema by `toolName`, `target`, or `query`; `settings` returns setting descriptors plus setting policy; `get_setting`, `set_setting`, and `reset_setting` resolve one setting by `key`, `target`, or `query`, return lookup metadata on success, and refuse ambiguous matches with candidate settings; `connected_host` returns the connected-host route families, allowed capabilities, blocked capabilities, and first-class tool availability; `connected_host_capability` returns one allowed or blocked connected-host capability by `capabilityId`, `target`, or `query` with related route families and boundary text; and `connected_host_status` performs a live read-only check of the connected-host status and Agent Knowledge status routes and reports endpoint bindings, token posture, SDK compatibility, route readiness, and findings without printing token values.
 
 `open_ui_surface` is a confirmation-gated visible navigation mode for the same shell surfaces the user can open: Agent workspace, settings, MCP workspace, model/provider/reasoning-effort pickers, TTS provider/voice pickers, session/profile pickers, the panel-picker compatibility route, security/knowledge/subscription operator surfaces, conversation search, prompt-history search, slash-command mode, command browser, file picker, block actions, bookmarks, context inspector, runtime activity monitor, live process output, help, shortcuts, and onboarding. It does not perform hidden operations; use first-class model tools, settings modes, workspace actions, or confirmed slash-command mirrors for actual state changes.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-agent",
-  "version": "1.0.16",
+  "version": "1.0.17",
   "private": false,
   "description": "GoodVibes personal operator assistant TUI with a proactive Agent product brain, isolated Agent Knowledge, local profiles, routines, skills, personas, and explicit build delegation.",
   "type": "module",

package/src/agent/harness-control.ts

@@ -23,6 +23,45 @@ export interface HarnessSettingFilters {
   readonly limit?: number;
 }
 
+export type HarnessSettingLookupSource = 'key' | 'target' | 'query';
+export type HarnessSettingResolvedBy = 'key' | 'case-insensitive-key' | 'search';
+
+export interface HarnessSettingLookup {
+  readonly source: HarnessSettingLookupSource;
+  readonly input: string;
+  readonly resolvedBy: HarnessSettingResolvedBy;
+}
+
+export interface HarnessSettingLookupArgs {
+  readonly key?: string;
+  readonly target?: string;
+  readonly query?: string;
+  readonly category?: string;
+  readonly prefix?: string;
+  readonly includeHidden?: boolean;
+}
+
+export interface HarnessSettingCandidate {
+  readonly key: string;
+  readonly category: string;
+  readonly type: ConfigSetting['type'];
+  readonly writable: boolean;
+  readonly visibleInWorkspace: boolean;
+  readonly description: string;
+}
+
+export type HarnessSettingResolution =
+  | {
+    readonly status: 'found';
+    readonly setting: HarnessSettingDescriptor;
+    readonly lookup: HarnessSettingLookup;
+  }
+  | {
+    readonly status: 'ambiguous';
+    readonly input: string;
+    readonly candidates: readonly HarnessSettingCandidate[];
+  };
+
 export interface HarnessSettingDescriptor {
   readonly key: string;
   readonly category: string;
@@ -35,6 +74,7 @@ export interface HarnessSettingDescriptor {
   readonly lockReason?: string;
   readonly description: string;
   readonly enumValues?: readonly string[];
+  readonly lookup?: HarnessSettingLookup;
 }
 
 export interface HarnessSettingMutationResult {
@@ -61,6 +101,36 @@ function findSetting(configManager: Pick<ConfigManager, 'getSchema'>, rawKey: st
   return configManager.getSchema().find((setting) => setting.key === rawKey) ?? null;
 }
 
+function settingLookupText(setting: ConfigSetting): string {
+  return [setting.key, setting.description, setting.type, ...(setting.enumValues ?? [])].join('\n').toLowerCase();
+}
+
+function settingMatchesSearch(setting: ConfigSetting, query: string): boolean {
+  return settingLookupText(setting).includes(query);
+}
+
+function settingCandidate(setting: ConfigSetting): HarnessSettingCandidate {
+  const hostOwned = isExternalHostOwnedSettingKey(setting.key);
+  return {
+    key: setting.key,
+    category: setting.key.split('.')[0] ?? '',
+    type: setting.type,
+    writable: !hostOwned,
+    visibleInWorkspace: !isAgentHiddenSettingKey(setting.key),
+    description: setting.description,
+  };
+}
+
+function settingLookupFromArgs(args: HarnessSettingLookupArgs): { source: HarnessSettingLookupSource; input: string } | null {
+  const key = args.key?.trim();
+  if (key) return { source: 'key', input: key };
+  const target = args.target?.trim();
+  if (target) return { source: 'target', input: target };
+  const query = args.query?.trim();
+  if (query) return { source: 'query', input: query };
+  return null;
+}
+
 export function redactHarnessSettingValue(key: string, value: unknown): unknown {
   if (typeof value !== 'string') return value;
   if (!value) return value;
@@ -74,6 +144,7 @@ export function redactHarnessSettingValue(key: string, value: unknown): unknown
 export function describeHarnessSetting(
   configManager: Pick<ConfigManager, 'get'>,
   setting: ConfigSetting,
+  options: { readonly lookup?: HarnessSettingLookup } = {},
 ): HarnessSettingDescriptor {
   const value = configManager.get(setting.key as ConfigKey);
   const hostOwned = isExternalHostOwnedSettingKey(setting.key);
@@ -89,6 +160,7 @@ export function describeHarnessSetting(
     ...(hostOwned ? { lockReason: AGENT_EXTERNAL_HOST_SETTING_LOCK_REASON } : {}),
     description: setting.description,
     ...(setting.enumValues ? { enumValues: setting.enumValues } : {}),
+    ...(options.lookup ? { lookup: options.lookup } : {}),
   };
 }
 
@@ -109,8 +181,7 @@ export function listHarnessSettings(
       if (prefix && !setting.key.startsWith(prefix)) return false;
       if (!filters.includeHidden && isAgentHiddenSettingKey(setting.key)) return false;
       if (query) {
-        const text = [setting.key, setting.description, setting.type, ...(setting.enumValues ?? [])].join('\n').toLowerCase();
-        if (!text.includes(query)) return false;
+        if (!settingMatchesSearch(setting, query)) return false;
       }
       return true;
     })
@@ -121,9 +192,73 @@ export function listHarnessSettings(
 export function getHarnessSetting(
   configManager: Pick<ConfigManager, 'get' | 'getSchema'>,
   key: string,
+  lookup?: HarnessSettingLookup,
 ): HarnessSettingDescriptor | null {
   const setting = findSetting(configManager, key);
-  return setting ? describeHarnessSetting(configManager, setting) : null;
+  return setting ? describeHarnessSetting(configManager, setting, { lookup }) : null;
+}
+
+export function resolveHarnessSetting(
+  configManager: Pick<ConfigManager, 'get' | 'getSchema'>,
+  args: HarnessSettingLookupArgs,
+): HarnessSettingResolution | null {
+  const lookup = settingLookupFromArgs(args);
+  if (!lookup) return null;
+
+  const exact = findSetting(configManager, lookup.input);
+  if (exact) {
+    const resolvedLookup = { ...lookup, resolvedBy: 'key' as const };
+    return {
+      status: 'found',
+      setting: describeHarnessSetting(configManager, exact, { lookup: resolvedLookup }),
+      lookup: resolvedLookup,
+    };
+  }
+
+  const inputLower = lookup.input.toLowerCase();
+  const schema = configManager.getSchema();
+  const caseInsensitiveMatches = schema.filter((setting) => setting.key.toLowerCase() === inputLower);
+  if (caseInsensitiveMatches.length === 1) {
+    const resolvedLookup = { ...lookup, resolvedBy: 'case-insensitive-key' as const };
+    return {
+      status: 'found',
+      setting: describeHarnessSetting(configManager, caseInsensitiveMatches[0]!, { lookup: resolvedLookup }),
+      lookup: resolvedLookup,
+    };
+  }
+  if (caseInsensitiveMatches.length > 1) {
+    return {
+      status: 'ambiguous',
+      input: lookup.input,
+      candidates: caseInsensitiveMatches.map(settingCandidate).slice(0, 8),
+    };
+  }
+
+  const category = args.category?.trim();
+  const prefix = args.prefix?.trim();
+  const searchMatches = schema.filter((setting) => {
+    if (category && setting.key.split('.')[0] !== category) return false;
+    if (prefix && !setting.key.startsWith(prefix)) return false;
+    if (!args.includeHidden && isAgentHiddenSettingKey(setting.key)) return false;
+    return settingMatchesSearch(setting, inputLower);
+  });
+  if (searchMatches.length === 1) {
+    const resolvedLookup = { ...lookup, resolvedBy: 'search' as const };
+    return {
+      status: 'found',
+      setting: describeHarnessSetting(configManager, searchMatches[0]!, { lookup: resolvedLookup }),
+      lookup: resolvedLookup,
+    };
+  }
+  if (searchMatches.length > 1) {
+    return {
+      status: 'ambiguous',
+      input: lookup.input,
+      candidates: searchMatches.map(settingCandidate).slice(0, 8),
+    };
+  }
+
+  return null;
 }
 
 function coerceBoolean(value: unknown): boolean {

package/src/tools/agent-harness-metadata.ts

@@ -462,8 +462,8 @@ export function blockedConnectedHostCapabilities(): readonly Record<string, unkn
 
 export function settingsPolicySummary(): Record<string, unknown> {
   return {
-    discovery: 'Use mode:"settings" for the setting catalog and mode:"get_setting" for one key. Hidden/scriptable settings require includeHidden:true.',
-    mutation: 'Use mode:"set_setting" or mode:"reset_setting" with confirm:true and explicitUserRequest.',
+    discovery: 'Use mode:"settings" for the setting catalog and mode:"get_setting" with key, target, or query for one setting. Hidden/scriptable settings require includeHidden:true unless the exact key is supplied.',
+    mutation: 'Use mode:"set_setting" or mode:"reset_setting" with key, target, or query plus confirm:true and explicitUserRequest; ambiguous setting lookups are refused.',
     secretHandling: 'Raw secret values are persisted through the secret manager; config receives only a secret reference and tool output is redacted.',
     writablePolicy: 'Each setting descriptor includes writable, visibleInWorkspace, and lockReason when applicable.',
     readOnlyHostOwnedPrefixes: ['service.*', 'controlPlane.*', 'httpListener.*', 'web.*', 'danger.daemon.*', 'danger.httpListener.*'],

package/src/tools/agent-harness-tool-schema.ts

@@ -23,7 +23,7 @@ export const AGENT_HARNESS_PARAMETER_PROPERTIES = {
   },
   query: {
     type: 'string',
-    description: 'Search text for command, workspace action, setting, tool, or UI surface catalogs; also a slash-command lookup for mode command.',
+    description: 'Search text for command, workspace action, setting, tool, or UI surface catalogs; also a slash-command lookup for mode command or setting lookup for get_setting/set_setting/reset_setting.',
   },
   command: {
     type: 'string',
@@ -78,7 +78,7 @@ export const AGENT_HARNESS_PARAMETER_PROPERTIES = {
   },
   key: {
     type: 'string',
-    description: 'Agent setting key for get_setting, set_setting, or reset_setting.',
+    description: 'Agent setting key for get_setting, set_setting, or reset_setting. target or query can also look up one setting when the exact key is not known.',
   },
   value: {
     anyOf: [
@@ -90,7 +90,7 @@ export const AGENT_HARNESS_PARAMETER_PROPERTIES = {
   },
   target: {
     type: 'string',
-    description: 'Optional lookup target, such as a model-picker target, workspace action id/search text, slash command root or invocation, settings key, model tool name, or connected-host capability id.',
+    description: 'Optional lookup target, such as a model-picker target, workspace action id/search text, slash command root or invocation, setting key/search text, model tool name, or connected-host capability id.',
   },
   capabilityId: {
     type: 'string',

package/src/tools/agent-harness-tool.ts

@@ -33,9 +33,9 @@ import {
 } from './agent-harness-metadata.ts';
 import {
   formatHarnessError,
-  getHarnessSetting,
   listHarnessSettings,
   resetHarnessSetting,
+  resolveHarnessSetting,
   setHarnessSetting,
 } from '../agent/harness-control.ts';
 
@@ -109,6 +109,17 @@ function readString(value: unknown): string {
   return typeof value === 'string' ? value.trim() : '';
 }
 
+function settingLookupArgs(args: AgentHarnessToolArgs) {
+  return {
+    key: readString(args.key) || undefined,
+    target: readString(args.target) || undefined,
+    query: readString(args.query) || undefined,
+    category: readString(args.category) || undefined,
+    prefix: readString(args.prefix) || undefined,
+    includeHidden: args.includeHidden === true,
+  };
+}
+
 function readLimit(value: unknown, fallback: number): number {
   const parsed = typeof value === 'string' && value.trim() ? Number(value) : value;
   if (typeof parsed !== 'number' || !Number.isFinite(parsed)) return fallback;
@@ -589,7 +600,7 @@ export function createAgentHarnessTool(deps: AgentHarnessToolDeps): Tool {
               shortcuts: 'Use mode:"shortcuts" to inspect fixed shortcuts plus configurable keybindings. Use mode:"set_keybinding" and mode:"reset_keybinding" with confirm:true plus explicitUserRequest to edit the same config file the user edits.',
               slashCommands: 'Use mode:"commands" to list slash commands and mode:"command" with command, commandName, target, or query to inspect one command; use mode:"run_command" with confirm:true plus explicitUserRequest to execute.',
               workspace: 'Use mode:"workspace_actions" to list and mode:"workspace_action" with actionId, command, target, or query for one action and editor schema; set includeParameters:true on workspace_actions to inline editor schemas.',
-              settings: 'Use mode:"settings", mode:"get_setting", mode:"set_setting", and mode:"reset_setting".',
+              settings: 'Use mode:"settings" to list and mode:"get_setting" with key, target, or query for one setting. Use mode:"set_setting" or mode:"reset_setting" with key, target, or query plus confirm:true and explicitUserRequest.',
               tools: 'Use mode:"tools" to list first-class model tools, or mode:"tool" with toolName, target, or query to inspect one schema.',
               connectedHost: 'Use mode:"connected_host" for the connected-host capability map and blocked boundaries. Use mode:"connected_host_capability" with capabilityId, target, or query for one allowed or blocked capability.',
               connectedHostStatus: 'Use mode:"connected_host_status" for live read-only host reachability, SDK compatibility, token posture, and Agent Knowledge route readiness.',
@@ -681,33 +692,48 @@ export function createAgentHarnessTool(deps: AgentHarnessToolDeps): Tool {
           return output({ settings, returned: settings.length, policy: settingsPolicySummary() });
         }
         if (args.mode === 'get_setting') {
-          const key = readString(args.key);
-          const setting = getHarnessSetting(deps.commandContext.platform.configManager, key);
-          return setting ? output(setting) : error(`Unknown setting ${key || '<missing>'}.`);
+          const setting = resolveHarnessSetting(deps.commandContext.platform.configManager, settingLookupArgs(args));
+          if (setting?.status === 'found') return output(setting.setting);
+          if (setting?.status === 'ambiguous') {
+            return error(`Ambiguous setting ${setting.input}. Candidates: ${JSON.stringify(setting.candidates)}`);
+          }
+          return error(`Unknown setting ${readString(args.key || args.target || args.query) || '<missing>'}. Use mode:"settings" to inspect available settings.`);
         }
         if (args.mode === 'set_setting') {
           const confirmationError = requireConfirmedAction(args, 'Setting mutation');
           if (confirmationError) return error(confirmationError);
           if (args.value === undefined) return error('set_setting requires value.');
-          const key = readString(args.key);
+          const setting = resolveHarnessSetting(deps.commandContext.platform.configManager, settingLookupArgs(args));
+          if (setting?.status === 'ambiguous') {
+            return error(`Ambiguous setting ${setting.input}. Candidates: ${JSON.stringify(setting.candidates)}`);
+          }
+          if (setting?.status !== 'found') {
+            return error(`Unknown setting ${readString(args.key || args.target || args.query) || '<missing>'}. Use mode:"settings" to inspect available settings.`);
+          }
           const result = await setHarnessSetting(
             deps.commandContext.platform.configManager,
             deps.commandContext.platform.secretsManager,
-            key,
+            setting.setting.key,
             args.value,
           );
-          return output(result);
+          return output({ ...result, lookup: setting.lookup });
         }
         if (args.mode === 'reset_setting') {
           const confirmationError = requireConfirmedAction(args, 'Setting reset');
           if (confirmationError) return error(confirmationError);
-          const key = readString(args.key);
+          const setting = resolveHarnessSetting(deps.commandContext.platform.configManager, settingLookupArgs(args));
+          if (setting?.status === 'ambiguous') {
+            return error(`Ambiguous setting ${setting.input}. Candidates: ${JSON.stringify(setting.candidates)}`);
+          }
+          if (setting?.status !== 'found') {
+            return error(`Unknown setting ${readString(args.key || args.target || args.query) || '<missing>'}. Use mode:"settings" to inspect available settings.`);
+          }
           const result = await resetHarnessSetting(
             deps.commandContext.platform.configManager,
             deps.commandContext.platform.secretsManager,
-            key,
+            setting.setting.key,
           );
-          return output(result);
+          return output({ ...result, lookup: setting.lookup });
         }
         if (args.mode === 'workspace' || args.mode === 'workspace_categories') {
           return output({

package/src/version.ts

@@ -6,7 +6,7 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '1.0.16';
+let _version = '1.0.17';
 let _sdkVersion = '0.33.35';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8')) as {