@pellux/goodvibes-agent 1.0.2 → 1.0.4

package/docs/README.md

@@ -17,12 +17,12 @@ Current package docs:
 Important baseline constraints:
 
 - Agent installs one executable: `goodvibes-agent`.
-- Current package version is recorded in `package.json` and `CHANGELOG.md`; the latest completed `1.0.x` release in this tree is `1.0.1`.
+- Current package version is recorded in `package.json` and `CHANGELOG.md`; the latest completed `1.0.x` release in this tree is `1.0.3`.
 - Agent uses Bun `1.3.10` or newer and TypeScript-authored source.
 - Agent depends on `@pellux/goodvibes-sdk@0.33.35`.
 - Agent connects to a GoodVibes host owned outside this product.
 - Agent does not start, stop, restart, install, uninstall, or own the connected GoodVibes host.
-- User-facing Agent workspace actions, slash commands, command policy metadata, model tools, settings, local registries, and connected-host capability boundaries are model-visible through Agent-owned tools. Mutations remain explicit and confirmation-gated.
+- User-facing Agent workspace actions, built-in panels, top-level CLI mirrors, fixed shortcuts, configurable keybindings, slash commands, command policy metadata, model tools, settings, local registries, and connected-host capability boundaries are model-visible through Agent-owned tools. Mutations remain explicit and confirmation-gated.
 - Agent Knowledge uses only `/api/goodvibes-agent/knowledge/*`; there is no default knowledge or non-Agent product fallback.
 - Agent supports isolated Agent homes with `GOODVIBES_AGENT_HOME=<path>` and named profile homes with `goodvibes-agent profiles create <name> --template <starter> --yes` plus `--agent-profile <name>`.
 - Agent supports connected-host URL overrides with `--runtime-url http://host:port` or `GOODVIBES_AGENT_RUNTIME_URL=http://host:port`; these only change the Agent connection target.

package/docs/getting-started.md

@@ -44,7 +44,7 @@ After setup has been applied once, the TUI opens directly into the Agent operato
 
 Press `/` inside the Agent workspace to search every workspace action by name, category, command, or detail. Use that finder before reaching for shell commands; CLI subcommands are scriptable mirrors of these TUI workflows.
 
-The model can inspect and use the same harness surface through Agent-owned tools. `agent_harness` exposes workspace action discovery, slash-command discovery, command policy metadata, command execution with confirmation, model tool discovery, settings inspection/mutation, and connected-host posture. Workspace action discovery can include editor field schemas with `includeParameters:true`, including starter-template defaults for profile creation and selected-routine defaults for routine schedule promotion when `recordId` is supplied. Selection-based local workspace actions accept a local `recordId`, so the model can use the same note promotion and local registry flows as the TUI. First-class model tools cover the main product workflows directly: Agent Knowledge, Agent Knowledge ingest, Agent-local memory/notes/personas/skills/routines, operator actions, notifications, channel sends, reminders, generated media, and work plans.
+The model can inspect and use the same harness surface through Agent-owned tools. `agent_harness` exposes workspace action discovery, built-in panel discovery/routing, top-level CLI mirror discovery, fixed shortcut and configurable keybinding discovery, keybinding mutation with confirmation, slash-command discovery, command policy metadata, command execution with confirmation, model tool discovery, settings inspection/mutation, and connected-host posture. CLI mirror modes are read-only catalog/parser inspection and point the model to the matching in-process tool, workspace action, setting mode, or slash-command mirror. Panel modes expose catalog/open state and route visible panel/workspace changes through the current Agent shell bridge with confirmation. Shortcut modes expose the fixed runtime/editor shortcuts and the live keybindings table; confirmed keybinding edits write the same `keybindings.json` file the user edits and reload the runtime manager. Workspace action discovery can include editor field schemas with `includeParameters:true`, including starter-template defaults for profile creation and selected-routine defaults for routine schedule promotion when `recordId` is supplied. Selection-based local workspace actions accept a local `recordId`, so the model can use the same note promotion and local registry flows as the TUI. First-class model tools cover the main product workflows directly: Agent Knowledge, Agent Knowledge ingest, Agent-local memory/notes/personas/skills/routines, operator actions, notifications, channel sends, reminders, generated media, and work plans.
 
 Use the Artifacts area for concrete files and generated output: attach images to prompts, export conversations or saved sessions, ingest local source files and URL lists into Agent Knowledge, import bookmarks or browser history, inspect source records, and generate media artifacts from confirmed prompts.
 
@@ -122,7 +122,7 @@ Use `/channels` inside the TUI for channel readiness and exact confirmed sends.
 
 The main assistant conversation can perform narrow confirmed operator actions when the user explicitly asks for a specific target: approve/deny/cancel one approval, run/pause/resume one automation job, cancel/retry one automation run, or run one schedule. Those calls use only public connected-host routes, require confirmation, and do not create, edit, or delete automation definitions.
 
-When the main assistant conversation needs to change Agent settings or run a user-facing harness action, it should use `agent_harness` rather than generic SDK context/settings tools. Setting descriptors report writability, workspace visibility, and lock reasons; secret-backed settings store raw values through the secret manager; connected-host lifecycle settings stay read-only in Agent; and destructive local record deletion requires explicit confirmation.
+When the main assistant conversation needs to change Agent settings, change Agent keybindings, or run a user-facing harness action, it should use `agent_harness` rather than generic SDK context/settings tools. Setting descriptors report writability, workspace visibility, and lock reasons; keybinding descriptors report fixed shortcuts, resolved bindings, defaults, custom state, and config path; secret-backed settings store raw values through the secret manager; connected-host lifecycle settings stay read-only in Agent; and destructive local record deletion requires explicit confirmation.
 
 ## Connected GoodVibes Host
 

package/docs/tools-and-commands.md

@@ -43,16 +43,22 @@ Host-management and coding-first commands that would imply connected-host lifecy
 
 The main Agent model has an Agent-owned harness bridge rather than generic SDK settings/context control. Use these model tools as the supported parity layer:
 
-- `agent_harness`: inspect workspace categories/actions, inspect slash commands and command policy metadata, run concrete workspace or slash-command mirrors with confirmation, inspect model tools, inspect or change Agent settings, and inspect connected-host posture.
+- `agent_harness`: inspect workspace categories/actions, inspect built-in panels, inspect top-level CLI mirrors, inspect fixed shortcuts and configurable keybindings, inspect slash commands and command policy metadata, run concrete workspace or slash-command mirrors with confirmation, inspect model tools, inspect or change Agent settings/keybindings, and inspect connected-host posture.
 - `agent_local_registry`: inspect and maintain Agent-local memory, notes, personas, skills, skill bundles, and routines. Deleting local records requires `confirm:true` and `explicitUserRequest`.
 - `agent_knowledge` and `agent_knowledge_ingest`: ask/search and ingest into the isolated Agent Knowledge segment.
 - `agent_operator_briefing` and `agent_operator_action`: inspect connected work/approval/automation posture, or run exact confirmed approval/automation actions.
 - `agent_work_plan`: keep the visible Agent-local work plan current from the conversation.
 - `agent_channel_send`, `agent_notify`, `agent_reminder_schedule`, and `agent_media_generate`: perform confirmed external delivery, notification, reminder, or media actions when the user explicitly asks.
 
-`agent_harness` discovery modes are read-only. `summary` reports the model access map; `commands` and `command` return command descriptions plus effect/confirmation/preferred-tool/boundary policy metadata; `workspace_actions` lists Agent workspace actions and can inline editor field schemas with `includeParameters:true`; `workspace_action` returns one action with its editor schema; `tools` can inline model tool JSON schemas with `includeParameters:true`; `settings` returns setting descriptors plus setting policy; and `connected_host` returns the connected-host route families, allowed capabilities, blocked capabilities, and first-class tool availability.
+`agent_harness` discovery modes are read-only. `summary` reports the model access map; `panels` and `panel` return the built-in panel catalog, current open/focused state, and each panel's matching Agent workspace route; `cli_commands` and `cli_command` return top-level package CLI mirror metadata, parser output, blocked command tokens, and preferred in-process model routes; `shortcuts` returns fixed runtime/editor shortcuts plus configurable keybindings; `keybindings` and `keybinding` return the live resolved keybinding table, default bindings, custom state, and config path; `commands` and `command` return slash-command descriptions plus effect/confirmation/preferred-tool/boundary policy metadata; `workspace_actions` lists Agent workspace actions and can inline editor field schemas with `includeParameters:true`; `workspace_action` returns one action with its editor schema; `tools` can inline model tool JSON schemas with `includeParameters:true`; `settings` returns setting descriptors plus setting policy; and `connected_host` returns the connected-host route families, allowed capabilities, blocked capabilities, and first-class tool availability.
 
-Setting writes, setting resets, slash-command invocation, workspace-action invocation, local record deletion, channel sends, notifications, reminders, media generation, and connected-host operator mutations require explicit user request and confirmation. Secret-backed settings are stored through the secret manager, and connected-host lifecycle/listener settings remain read-only in Agent.
+`set_keybinding` and `reset_keybinding` are confirmation-gated control modes. They write the same Agent `keybindings.json` file exposed by `/keybindings`, reload the runtime keybinding manager, and leave fixed runtime/editor shortcuts read-only.
+
+`open_panel` is a confirmation-gated UI routing mode. It hands a visible panel/workspace route to the current Agent shell bridge and does not mutate connected-host lifecycle, listener posture, or external accounts.
+
+CLI mirror modes are catalog and parser inspection only. When the user asks the model to operate from inside the main conversation, use the returned first-class model tool, workspace action, setting mode, or confirmed slash-command mirror instead of launching a hidden nested `goodvibes-agent` process.
+
+Setting writes, setting resets, keybinding writes/resets, slash-command invocation, workspace-action invocation, local record deletion, channel sends, notifications, reminders, media generation, and connected-host operator mutations require explicit user request and confirmation. Secret-backed settings are stored through the secret manager, and connected-host lifecycle/listener settings remain read-only in Agent.
 
 Selection-based local workspace actions use the same bridge. `agent_harness` reports the required model tool for each local action; for actions that depend on the TUI selection, call `run_workspace_action` with the selected local `recordId`. Note promotion actions can prefill and create memory, personas, skills, routines, or isolated Agent Knowledge URL ingests through the matching first-class model tool. Profile creation schemas include the current runtime starter-template inventory, and routine schedule schemas prefill the selected routine when `recordId` or a `routineId` field matches a local routine.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-agent",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "private": false,
   "description": "GoodVibes personal operator assistant TUI with a proactive Agent product brain, isolated Agent Knowledge, local profiles, routines, skills, personas, and explicit build delegation.",
   "type": "module",

package/src/cli/help.ts

@@ -131,6 +131,15 @@ type CommandHelp = {
   readonly examples?: readonly string[];
 };
 
+export interface GoodVibesCommandHelpDescriptor {
+  readonly command: string;
+  readonly aliases: readonly string[];
+  readonly summary: string;
+  readonly usage: readonly string[];
+  readonly subcommands: readonly string[];
+  readonly examples: readonly string[];
+}
+
 const COMMAND_HELP: Record<string, CommandHelp> = {
   run: {
     usage: ['run [prompt] [--output text|json|stream-json]', 'exec [prompt]'],
@@ -416,6 +425,23 @@ export function hasGoodVibesCommandHelp(topic: string): boolean {
   return COMMAND_HELP[normalizeHelpTopic(topic)] !== undefined;
 }
 
+export function describeGoodVibesCommandHelp(topic: string): GoodVibesCommandHelpDescriptor | null {
+  const normalized = normalizeHelpTopic(topic);
+  const help = COMMAND_HELP[normalized];
+  if (!help) return null;
+  return {
+    command: normalized,
+    aliases: Object.entries(HELP_ALIASES)
+      .filter(([, target]) => target === normalized)
+      .map(([alias]) => alias)
+      .sort(),
+    summary: help.summary,
+    usage: help.usage,
+    subcommands: help.subcommands ?? [],
+    examples: help.examples ?? [],
+  };
+}
+
 export function renderGoodVibesCommandHelp(topic: string, binary = 'goodvibes-agent'): string {
   const normalized = normalizeHelpTopic(topic);
   const help = COMMAND_HELP[normalized];

package/src/tools/agent-harness-cli-metadata.ts

@@ -0,0 +1,152 @@
+import type { GoodVibesCliCommand } from '../cli/types.ts';
+import { describeGoodVibesCommandHelp } from '../cli/help.ts';
+import {
+  listBlockedGoodVibesCliCommandTokens,
+  listGoodVibesCliCommandTokens,
+  listGoodVibesCliCommands,
+  parseGoodVibesCli,
+} from '../cli/parser.ts';
+import { describeCliCommandPolicy } from './agent-harness-metadata.ts';
+
+export interface AgentHarnessCliArgs {
+  readonly query?: unknown;
+  readonly command?: unknown;
+  readonly cliCommand?: unknown;
+  readonly commandName?: unknown;
+  readonly limit?: unknown;
+}
+
+function readString(value: unknown): string {
+  return typeof value === 'string' ? value.trim() : '';
+}
+
+function readLimit(value: unknown, fallback: number): number {
+  const parsed = typeof value === 'string' && value.trim() ? Number(value) : value;
+  if (typeof parsed !== 'number' || !Number.isFinite(parsed)) return fallback;
+  return Math.max(1, Math.min(500, Math.trunc(parsed)));
+}
+
+function cliCommandTokens(command: GoodVibesCliCommand): readonly string[] {
+  if (command === 'unknown') return [];
+  if (command === 'tui') return ['(no command)'];
+  return listGoodVibesCliCommandTokens()
+    .filter((token) => parseGoodVibesCli([token]).command === command)
+    .sort();
+}
+
+function fallbackCliSummary(command: GoodVibesCliCommand): string {
+  if (command === 'tui') return 'Launch the interactive Agent TUI.';
+  if (command === 'help') return 'Print top-level or command-specific help.';
+  if (command === 'version') return 'Print the installed Agent package version.';
+  return 'Inspect the CLI help for this Agent package command.';
+}
+
+function describeCliCommand(command: GoodVibesCliCommand): Record<string, unknown> {
+  const help = describeGoodVibesCommandHelp(command);
+  const tokens = cliCommandTokens(command);
+  return {
+    name: command,
+    tokens,
+    invocation: command === 'tui' ? 'goodvibes-agent' : `goodvibes-agent ${tokens[0] ?? command}`,
+    helpTopic: help?.command ?? command,
+    summary: help?.summary ?? fallbackCliSummary(command),
+    usage: help?.usage ?? (command === 'tui' ? ['goodvibes-agent [OPTIONS]'] : [`goodvibes-agent ${command} [ARGS]`]),
+    aliases: help?.aliases ?? tokens.filter((token) => token !== command),
+    subcommands: help?.subcommands ?? [],
+    examples: help?.examples ?? [],
+    policy: describeCliCommandPolicy(command),
+  };
+}
+
+function cliCommandMatches(command: Record<string, unknown>, query: string): boolean {
+  if (!query) return true;
+  return [
+    command.name,
+    command.tokens,
+    command.summary,
+    command.usage,
+    command.aliases,
+    command.subcommands,
+    command.examples,
+    command.policy,
+  ].map((value) => JSON.stringify(value)).join('\n').toLowerCase().includes(query.toLowerCase());
+}
+
+export function totalHarnessCliCommands(): number {
+  return listGoodVibesCliCommands().filter((command) => command !== 'unknown').length;
+}
+
+export function blockedHarnessCliCommandTokens(): readonly string[] {
+  return listBlockedGoodVibesCliCommandTokens();
+}
+
+export function listHarnessCliCommands(args: AgentHarnessCliArgs): readonly Record<string, unknown>[] {
+  const query = readString(args.query);
+  const limit = readLimit(args.limit, 200);
+  return listGoodVibesCliCommands()
+    .filter((command) => command !== 'unknown')
+    .map(describeCliCommand)
+    .filter((command) => cliCommandMatches(command, query))
+    .sort((a, b) => String(a.name).localeCompare(String(b.name)))
+    .slice(0, limit);
+}
+
+function cliTokensFromArgs(args: AgentHarnessCliArgs): readonly string[] {
+  const raw = readString(args.cliCommand) || readString(args.command) || readString(args.commandName) || readString(args.query);
+  if (!raw) return [];
+  const tokens = raw.split(/\s+/).filter((token) => token.length > 0);
+  if (tokens[0] === 'goodvibes-agent' || tokens[0]?.endsWith('/goodvibes-agent')) return tokens.slice(1);
+  return tokens;
+}
+
+export function describeHarnessCliCommand(args: AgentHarnessCliArgs): Record<string, unknown> {
+  const tokens = cliTokensFromArgs(args);
+  if (tokens.length === 0) return describeCliCommand('tui');
+  const parsed = parseGoodVibesCli(tokens);
+  if (parsed.command === 'unknown') {
+    return {
+      supported: false,
+      token: parsed.rawCommand ?? tokens[0],
+      errors: parsed.errors,
+      blockedTokens: blockedHarnessCliCommandTokens(),
+      policy: describeCliCommandPolicy(parsed.rawCommand ?? tokens[0] ?? 'unknown'),
+    };
+  }
+  return {
+    ...describeCliCommand(parsed.command),
+    parsed: {
+      command: parsed.command,
+      rawCommand: parsed.rawCommand,
+      commandArgs: parsed.commandArgs,
+      positionals: parsed.positionals,
+      flags: {
+        provider: parsed.flags.provider,
+        model: parsed.flags.model,
+        agentProfile: parsed.flags.agentProfile,
+        runtimeUrl: parsed.flags.runtimeUrl,
+        workingDir: parsed.flags.workingDir,
+        help: parsed.flags.help,
+        version: parsed.flags.version,
+        print: parsed.flags.print,
+        outputFormat: parsed.flags.outputFormat,
+        configOverrides: parsed.flags.configOverrides.map((override) => {
+          const index = override.indexOf('=');
+          return index < 0 ? override : `${override.slice(0, index)}=<redacted>`;
+        }),
+        enableFeatures: parsed.flags.enableFeatures,
+        disableFeatures: parsed.flags.disableFeatures,
+        noAltScreen: parsed.flags.noAltScreen,
+        port: parsed.flags.port,
+        hostname: parsed.flags.hostname,
+        open: parsed.flags.open,
+        continueLast: parsed.flags.continueLast,
+        resume: parsed.flags.resume,
+        session: parsed.flags.session,
+        fork: parsed.flags.fork,
+        rawOutput: parsed.flags.rawOutput,
+        acceptRawOutputRisk: parsed.flags.acceptRawOutputRisk,
+      },
+      errors: parsed.errors,
+    },
+  };
+}

package/src/tools/agent-harness-keybinding-metadata.ts

@@ -0,0 +1,262 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+import type { CommandContext } from '../input/command-registry.ts';
+import {
+  ACTION_DESCRIPTIONS,
+  DEFAULT_KEYBINDINGS,
+  type KeyAction,
+  type KeyCombo,
+  type KeybindingsManager,
+} from '../input/keybindings.ts';
+
+const FIXED_SHORTCUTS: readonly Record<string, string>[] = [
+  { key: 'Enter', description: 'Send prompt' },
+  { key: 'Shift+Enter / Ctrl+J', description: 'Insert newline' },
+  { key: 'Up / Down', description: 'Navigate input history, lists, and scrollable overlays' },
+  { key: 'Tab', description: 'Autocomplete slash command or file mention' },
+  { key: 'Esc', description: 'Close overlays, pickers, and transient input modes' },
+  { key: '? / F1', description: 'Toggle help overlay' },
+  { key: 'F2 / /shortcuts', description: 'Open keyboard shortcut reference' },
+  { key: '/keybindings', description: 'List configurable keybindings and config path' },
+];
+
+interface HarnessKeybindingArgs {
+  readonly query?: unknown;
+  readonly actionId?: unknown;
+  readonly key?: unknown;
+  readonly fields?: unknown;
+  readonly combo?: unknown;
+  readonly combos?: unknown;
+  readonly value?: unknown;
+  readonly limit?: unknown;
+}
+
+type KeybindingsOverrideFile = Record<string, unknown>;
+
+function readString(value: unknown): string {
+  return typeof value === 'string' ? value.trim() : '';
+}
+
+function readLimit(value: unknown, fallback: number): number {
+  const parsed = typeof value === 'string' && value.trim() ? Number(value) : value;
+  if (typeof parsed !== 'number' || !Number.isFinite(parsed)) return fallback;
+  return Math.max(1, Math.min(500, Math.trunc(parsed)));
+}
+
+function readFieldMap(value: unknown): Readonly<Record<string, string>> {
+  if (typeof value !== 'object' || value === null || Array.isArray(value)) return {};
+  return Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, typeof entry === 'string' ? entry : String(entry)]));
+}
+
+function requireKeybindingsManager(context: CommandContext): KeybindingsManager {
+  const manager = context.workspace.keybindingsManager;
+  if (!manager) throw new Error('workspace.keybindingsManager is unavailable in this Agent runtime');
+  return manager;
+}
+
+function isKeyAction(action: string): action is KeyAction {
+  return Object.hasOwn(ACTION_DESCRIPTIONS, action);
+}
+
+function actionFromArgs(args: HarnessKeybindingArgs): KeyAction | null {
+  const action = readString(args.actionId || args.key || args.query);
+  return action && isKeyAction(action) ? action : null;
+}
+
+function readBoolean(value: unknown): boolean | undefined {
+  if (typeof value === 'boolean') return value;
+  if (typeof value !== 'string') return undefined;
+  const normalized = value.trim().toLowerCase();
+  if (['true', 'yes', 'y', '1', 'on'].includes(normalized)) return true;
+  if (['false', 'no', 'n', '0', 'off'].includes(normalized)) return false;
+  return undefined;
+}
+
+function normalizeCombo(value: unknown): KeyCombo | null {
+  if (typeof value !== 'object' || value === null || Array.isArray(value)) return null;
+  const raw = value as Record<string, unknown>;
+  const key = readString(raw.key);
+  if (!key) return null;
+  const combo: KeyCombo = { key };
+  const ctrl = readBoolean(raw.ctrl);
+  const shift = readBoolean(raw.shift);
+  const alt = readBoolean(raw.alt);
+  if (ctrl !== undefined) combo.ctrl = ctrl;
+  if (shift !== undefined) combo.shift = shift;
+  if (alt !== undefined) combo.alt = alt;
+  return combo;
+}
+
+function parseComboLabel(value: string): KeyCombo | null {
+  const parts = value.split('+').map((part) => part.trim()).filter(Boolean);
+  if (parts.length === 0) return null;
+  const key = parts.at(-1);
+  if (!key) return null;
+  const combo: KeyCombo = { key: key.length === 1 ? key.toLowerCase() : key.toLowerCase() };
+  for (const part of parts.slice(0, -1)) {
+    const normalized = part.toLowerCase();
+    if (normalized === 'ctrl' || normalized === 'control') combo.ctrl = true;
+    else if (normalized === 'shift') combo.shift = true;
+    else if (normalized === 'alt' || normalized === 'option') combo.alt = true;
+    else return null;
+  }
+  return combo;
+}
+
+function combosFromArgs(args: HarnessKeybindingArgs): KeyCombo[] {
+  if (Array.isArray(args.combos)) {
+    const combos = args.combos.map(normalizeCombo);
+    if (combos.every((combo): combo is KeyCombo => combo !== null)) return combos;
+    throw new Error('set_keybinding combos must be objects with key and optional boolean ctrl/shift/alt fields.');
+  }
+  const combo = normalizeCombo(args.combo);
+  if (combo) return [combo];
+  const fields = readFieldMap(args.fields);
+  const fieldCombo = normalizeCombo(fields);
+  if (fieldCombo) return [fieldCombo];
+  const labelCombo = parseComboLabel(readString(args.value));
+  if (labelCombo) return [labelCombo];
+  throw new Error('set_keybinding requires combo, combos, fields.key, or a value such as "Ctrl+G".');
+}
+
+function comboFingerprint(combo: KeyCombo): string {
+  return `${combo.key}:${combo.ctrl ? 1 : 0}:${combo.shift ? 1 : 0}:${combo.alt ? 1 : 0}`;
+}
+
+function combosEqual(left: readonly KeyCombo[], right: readonly KeyCombo[]): boolean {
+  if (left.length !== right.length) return false;
+  return left.every((combo, index) => comboFingerprint(combo) === comboFingerprint(right[index]));
+}
+
+function describeCombo(manager: KeybindingsManager, combo: KeyCombo): Record<string, unknown> {
+  return {
+    key: combo.key,
+    ctrl: combo.ctrl === true,
+    shift: combo.shift === true,
+    alt: combo.alt === true,
+    label: manager.formatCombo(combo),
+  };
+}
+
+function bindingMatches(entry: { readonly action: KeyAction; readonly description: string; readonly combos: KeyCombo[] }, query: string): boolean {
+  if (!query) return true;
+  const haystack = [
+    entry.action,
+    entry.description,
+    ...entry.combos.map((combo) => comboFingerprint(combo)),
+  ].join('\n').toLowerCase();
+  return haystack.includes(query.toLowerCase());
+}
+
+function describeBinding(manager: KeybindingsManager, action: KeyAction, combos: KeyCombo[]): Record<string, unknown> {
+  const defaults = DEFAULT_KEYBINDINGS[action];
+  const customized = !combosEqual(combos, defaults);
+  return {
+    action,
+    description: ACTION_DESCRIPTIONS[action],
+    bindings: combos.map((combo) => describeCombo(manager, combo)),
+    labels: combos.map((combo) => manager.formatCombo(combo)),
+    defaultBindings: defaults.map((combo) => describeCombo(manager, combo)),
+    customized,
+    source: customized ? 'custom' : 'default',
+  };
+}
+
+function readOverrideFile(configPath: string): KeybindingsOverrideFile {
+  if (!existsSync(configPath)) return {};
+  const parsed = JSON.parse(readFileSync(configPath, 'utf-8')) as unknown;
+  if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+    throw new Error(`Keybindings config ${configPath} must contain a JSON object.`);
+  }
+  return parsed as KeybindingsOverrideFile;
+}
+
+function writeOverrideFile(configPath: string, overrides: KeybindingsOverrideFile): void {
+  mkdirSync(dirname(configPath), { recursive: true });
+  writeFileSync(configPath, `${JSON.stringify(overrides, null, 2)}\n`, 'utf-8');
+}
+
+export function totalHarnessKeybindings(context: CommandContext): number {
+  return context.workspace.keybindingsManager?.getAll().length ?? 0;
+}
+
+export function totalHarnessShortcuts(context: CommandContext): number {
+  return totalHarnessKeybindings(context) + FIXED_SHORTCUTS.length;
+}
+
+export function listHarnessShortcuts(context: CommandContext, args: HarnessKeybindingArgs): Record<string, unknown> {
+  const keybindings = listHarnessKeybindings(context, args);
+  const query = readString(args.query).toLowerCase();
+  const fixed = FIXED_SHORTCUTS
+    .filter((shortcut) => !query || `${shortcut.key}\n${shortcut.description}`.toLowerCase().includes(query))
+    .slice(0, readLimit(args.limit, 200))
+    .map((shortcut) => ({ ...shortcut, source: 'fixed', userEditable: false }));
+  return {
+    configPath: keybindings.configPath,
+    fixedShortcuts: fixed,
+    configurableKeybindings: keybindings.keybindings,
+    returned: fixed.length + Number(keybindings.returned ?? 0),
+    total: totalHarnessShortcuts(context),
+    policy: 'Fixed shortcuts are runtime/editor controls. Configurable keybindings can be changed with set_keybinding/reset_keybinding.',
+  };
+}
+
+export function listHarnessKeybindings(context: CommandContext, args: HarnessKeybindingArgs): Record<string, unknown> {
+  const manager = requireKeybindingsManager(context);
+  const query = readString(args.query);
+  const entries = manager.getAll()
+    .filter((entry) => bindingMatches(entry, query))
+    .slice(0, readLimit(args.limit, 200))
+    .map((entry) => describeBinding(manager, entry.action, entry.combos));
+  return {
+    configPath: manager.getConfigPath(),
+    keybindings: entries,
+    returned: entries.length,
+    total: manager.getAll().length,
+    policy: 'Reads the live resolved keybindings. set_keybinding/reset_keybinding write the same keybindings.json file the user can edit and reload the runtime manager.',
+  };
+}
+
+export function describeHarnessKeybinding(context: CommandContext, args: HarnessKeybindingArgs): Record<string, unknown> | null {
+  const manager = requireKeybindingsManager(context);
+  const action = actionFromArgs(args);
+  if (!action) return null;
+  const entry = manager.getAll().find((candidate) => candidate.action === action);
+  return entry ? {
+    configPath: manager.getConfigPath(),
+    ...describeBinding(manager, entry.action, entry.combos),
+  } : null;
+}
+
+export function setHarnessKeybinding(context: CommandContext, args: HarnessKeybindingArgs): Record<string, unknown> {
+  const manager = requireKeybindingsManager(context);
+  const action = actionFromArgs(args);
+  if (!action) throw new Error('set_keybinding requires a valid keybinding action id.');
+  const combos = combosFromArgs(args);
+  const configPath = manager.getConfigPath();
+  const overrides = readOverrideFile(configPath);
+  overrides[action] = combos.length === 1 ? combos[0] : combos;
+  writeOverrideFile(configPath, overrides);
+  manager.loadFromDisk();
+  return {
+    status: 'updated',
+    configPath,
+    keybinding: describeHarnessKeybinding(context, { actionId: action }),
+  };
+}
+
+export function resetHarnessKeybinding(context: CommandContext, args: HarnessKeybindingArgs): Record<string, unknown> {
+  const manager = requireKeybindingsManager(context);
+  const action = actionFromArgs(args);
+  if (!action) throw new Error('reset_keybinding requires a valid keybinding action id.');
+  const configPath = manager.getConfigPath();
+  const overrides = readOverrideFile(configPath);
+  delete overrides[action];
+  writeOverrideFile(configPath, overrides);
+  manager.loadFromDisk();
+  return {
+    status: 'reset',
+    configPath,
+    keybinding: describeHarnessKeybinding(context, { actionId: action }),
+  };
+}

package/src/tools/agent-harness-metadata.ts

@@ -1,4 +1,6 @@
 import type { ToolRegistry } from '@pellux/goodvibes-sdk/platform/tools';
+import type { CommandContext } from '../input/command-registry.ts';
+import { resolveAgentConnectedHostConnection } from '../agent/routine-schedule-promotion.ts';
 
 export interface CommandExecutionPolicy {
   readonly effect: 'read-only' | 'local-state' | 'connected-host-state' | 'external-network' | 'ui-navigation' | 'session-lifecycle' | 'delegated-work' | 'mixed' | 'unknown';
@@ -132,6 +134,96 @@ export function describeCommandPolicy(commandName: string): CommandExecutionPoli
   };
 }
 
+export function describeCliCommandPolicy(commandName: string): CommandExecutionPolicy {
+  const root = commandName.trim().toLowerCase();
+  const confirmation = 'agent_harness CLI command modes are discovery-only. Use first-class model tools, workspace actions, slash-command mirrors, or an explicit external shell request to execute equivalent CLI workflows.';
+  if ([
+    'app',
+    'bridge',
+    'control-plane',
+    'controlplane',
+    'cp',
+    'daemon',
+    'http-listener',
+    'launch',
+    'listener',
+    'remote',
+    'serve',
+    'server',
+    'service',
+    'services',
+    'start',
+    'surface',
+    'surfaces',
+    'web',
+    'webhook',
+  ].includes(root)) {
+    return {
+      effect: 'unknown',
+      confirmation,
+      boundary: 'Blocked package CLI token. Agent can launch its own TUI and use public connected-host routes, but it does not manage connected-host lifecycle, listeners, servers, bridges, remotes, web surfaces, or webhook listeners.',
+    };
+  }
+  if (root === 'tui' || root === 'onboarding' || root === 'help' || root === 'version' || root === 'completion') {
+    return {
+      effect: root === 'tui' || root === 'onboarding' ? 'ui-navigation' : 'read-only',
+      confirmation,
+      preferredModelTool: root === 'onboarding' || root === 'tui' ? 'agent_harness workspace/workspace_actions' : 'agent_harness cli_commands/cli_command',
+      boundary: 'Top-level CLI launch, setup, help, version, and completion commands are package entrypoint surfaces; use in-process workspace and slash-command bridges from the model when operating inside the TUI.',
+    };
+  }
+  if (root === 'run') {
+    return {
+      effect: 'mixed',
+      confirmation,
+      boundary: 'The CLI run command starts a non-interactive Agent turn from a process entrypoint. Do not create hidden nested turns from agent_harness; answer the user directly in the current conversation.',
+    };
+  }
+  if (root === 'status' || root === 'doctor' || root === 'auth' || root === 'compat' || root === 'models' || root === 'providers' || root === 'tasks') {
+    return {
+      effect: 'read-only',
+      confirmation,
+      preferredModelTool: root === 'tasks' ? 'agent_operator_briefing' : 'agent_harness connected_host/settings/tools',
+      boundary: 'Diagnostics and posture commands are readable from Agent-owned settings, provider, model, and connected-host capability surfaces without taking connected-host lifecycle ownership.',
+    };
+  }
+  if (root === 'profiles' || root === 'personas' || root === 'skills' || root === 'memory' || root === 'routines' || root === 'sessions' || root === 'bundle') {
+    return {
+      effect: 'local-state',
+      confirmation,
+      preferredModelTool: root === 'profiles' ? 'agent_harness workspace_actions/run_workspace_action' : 'agent_local_registry',
+      boundary: 'Local library/profile/session/bundle CLI commands operate on Agent-local data. Mutations require explicit user intent and should use first-class Agent-local tools where available.',
+    };
+  }
+  if (root === 'knowledge' || root === 'ask' || root === 'search') {
+    return {
+      effect: 'mixed',
+      confirmation,
+      preferredModelTool: root === 'knowledge' ? 'agent_knowledge or agent_knowledge_ingest' : 'agent_knowledge',
+      boundary: 'Agent Knowledge CLI commands must stay on isolated Agent Knowledge routes and never fall back to default or non-Agent knowledge spaces.',
+    };
+  }
+  if (root === 'delegate') {
+    return {
+      effect: 'delegated-work',
+      confirmation,
+      boundary: 'Delegation is explicit user-directed work only; no hidden background review or separate Agent job should be created implicitly.',
+    };
+  }
+  if (root === 'subscription' || root === 'secrets' || root === 'pair') {
+    return {
+      effect: root === 'pair' ? 'external-network' : 'mixed',
+      confirmation,
+      boundary: 'Provider subscription, secret, and pairing flows can expose credentials or external account state. Use only explicit user-directed flows and prefer secret refs over raw values.',
+    };
+  }
+  return {
+    effect: 'unknown',
+    confirmation,
+    boundary: 'Inspect the CLI help, parser result, and preferred model routes before using an equivalent command path.',
+  };
+}
+
 function toolIsAvailable(toolRegistry: ToolRegistry, toolName: string): boolean {
   return toolRegistry.getToolDefinitions().some((tool) => tool.name === toolName);
 }
@@ -264,6 +356,22 @@ export function connectedHostRouteFamilies(): readonly Record<string, unknown>[]
   ];
 }
 
+export function connectedHostSummary(context: CommandContext, toolRegistry: ToolRegistry): Record<string, unknown> {
+  const shellPaths = context.workspace.shellPaths;
+  const homeDirectory = shellPaths?.homeDirectory ?? context.platform.configManager.getHomeDirectory() ?? '';
+  const connection = resolveAgentConnectedHostConnection(context.platform.configManager, homeDirectory);
+  return {
+    baseUrl: connection.baseUrl,
+    operatorToken: connection.token ? 'configured' : 'missing',
+    tokenPath: connection.tokenPath,
+    ownership: 'external-connected-host',
+    lifecycle: 'GoodVibes Agent can use public connected-host operator routes, but does not start, stop, restart, install, expose, or mutate the host listener.',
+    routeFamilies: connectedHostRouteFamilies(),
+    capabilities: connectedHostCapabilityMap(toolRegistry),
+    blockedCapabilities: blockedConnectedHostCapabilities(),
+  };
+}
+
 export function blockedConnectedHostCapabilities(): readonly Record<string, unknown>[] {
   return [
     {