@pellux/goodvibes-agent 1.0.33 → 1.0.34

package/dist/package/main.js

@@ -389782,6 +389782,23 @@ function createSchema2(db) {
   `);
   db.run(`CREATE INDEX IF NOT EXISTS idx_knowledge_schedules_job_id ON knowledge_schedules(job_id)`);
 }
+function getKnowledgeSchemaStatements() {
+  const statements = [];
+  createSchema2({
+    run(sql) {
+      const normalized = sql.trim();
+      if (normalized.length > 0)
+        statements.push(normalized);
+    }
+  });
+  return statements;
+}
+function renderKnowledgeSchemaSql() {
+  return `${getKnowledgeSchemaStatements().map((statement) => statement.endsWith(";") ? statement : `${statement};`).join(`
+
+`)}
+`;
+}
 function rowObject(columns, values2) {
   return Object.fromEntries(columns.map((column, index) => [column, values2[index]]));
 }
@@ -703119,6 +703136,9 @@ var init_ingest = __esm(() => {
 // node_modules/@pellux/goodvibes-sdk/dist/platform/knowledge/browser-history/index.js
 var init_browser_history = __esm(() => {
   init_ingest();
+  init_discover();
+  init_readers();
+  init_paths2();
 });
 
 // node_modules/graphql/jsutils/devAssert.mjs
@@ -720758,6 +720778,7 @@ var init_semantic = __esm(() => {
   init_llm();
   init_gap_repair();
   init_service4();
+  init_self_improvement();
 });
 
 // node_modules/@pellux/goodvibes-sdk/dist/platform/knowledge/home-graph/helpers.js
@@ -724726,8 +724747,40 @@ var init_map_view = __esm(() => {
 });
 
 // node_modules/@pellux/goodvibes-sdk/dist/platform/knowledge/home-graph/types.js
-var HOME_GRAPH_CAPABILITIES;
+var HOME_GRAPH_NODE_KINDS, HOME_GRAPH_RELATIONS, HOME_GRAPH_CAPABILITIES;
 var init_types6 = __esm(() => {
+  HOME_GRAPH_NODE_KINDS = [
+    "ha_home",
+    "ha_entity",
+    "ha_device",
+    "ha_area",
+    "ha_automation",
+    "ha_script",
+    "ha_scene",
+    "ha_label",
+    "ha_integration",
+    "ha_room",
+    "ha_device_passport",
+    "ha_maintenance_item",
+    "ha_troubleshooting_case",
+    "ha_purchase",
+    "ha_network_node"
+  ];
+  HOME_GRAPH_RELATIONS = [
+    "controls",
+    "located_in",
+    "belongs_to_device",
+    "has_manual",
+    "has_receipt",
+    "has_warranty",
+    "has_issue",
+    "fixed_by",
+    "uses_battery",
+    "connected_via",
+    "part_of_network",
+    "mentioned_by",
+    "source_for"
+  ];
   HOME_GRAPH_CAPABILITIES = [
     "knowledge-space-isolation",
     "snapshot-sync",
@@ -726134,6 +726187,7 @@ var init_service5 = __esm(() => {
 var init_home_graph = __esm(() => {
   init_service5();
   init_extension();
+  init_types6();
 });
 
 // node_modules/@pellux/goodvibes-sdk/dist/platform/knowledge/store-refinement.js
@@ -728461,10 +728515,14 @@ var init_service6 = __esm(() => {
 var init_project_planning = __esm(() => {
   init_service6();
   init_helpers3();
+  init_readiness();
 });
 
 // node_modules/@pellux/goodvibes-sdk/dist/platform/knowledge/persistence.js
-var init_persistence = () => {};
+var init_persistence = __esm(() => {
+  init_store_schema();
+  init_store_load();
+});
 
 // node_modules/@pellux/goodvibes-sdk/dist/platform/knowledge/projections.js
 class KnowledgeProjectionService {
@@ -731972,21 +732030,21 @@ var init_service7 = __esm(() => {
 var exports_knowledge = {};
 __export(exports_knowledge, {
   withKnowledgeSpace: () => withKnowledgeSpace,
-  uniqKnowledgeValues: () => uniq3,
-  stabilizeKnowledgeText: () => stableText2,
-  runKnowledgeSemanticSelfImprovement: () => runKnowledgeSemanticSelfImprovement2,
+  uniqKnowledgeValues: () => uniq2,
+  stabilizeKnowledgeText: () => stableText,
+  runKnowledgeSemanticSelfImprovement: () => runKnowledgeSemanticSelfImprovement,
   resolveProjectPlanningSpace: () => resolveProjectPlanningSpace,
-  resolveKnowledgeDbPathFromControlPlaneDir: () => resolveKnowledgeDbPathFromControlPlaneDir2,
+  resolveKnowledgeDbPathFromControlPlaneDir: () => resolveKnowledgeDbPathFromControlPlaneDir,
   renderPacket: () => renderPacket,
   renderKnowledgeSchemaSql: () => renderKnowledgeSchemaSql,
   renderKnowledgeMap: () => renderKnowledgeMap,
   readKnowledgeSearchText: () => readKnowledgeSearchText,
-  readBrowserKnowledgeProfile: () => readBrowserKnowledgeProfile2,
+  readBrowserKnowledgeProfile: () => readBrowserKnowledgeProfile,
   projectPlanningSourceId: () => projectPlanningSourceId,
   projectPlanningProjectIdFromPath: () => projectPlanningProjectIdFromPath,
   projectPlanningCanonicalUri: () => projectPlanningCanonicalUri,
   projectKnowledgeSpaceId: () => projectKnowledgeSpaceId,
-  parseKnowledgeJsonValue: () => parseJsonValue2,
+  parseKnowledgeJsonValue: () => parseJsonValue,
   normalizeProjectId: () => normalizeProjectId,
   normalizeKnowledgeSpaceId: () => normalizeKnowledgeSpaceId,
   normalizeHomeAssistantInstallationId: () => normalizeHomeAssistantInstallationId,
@@ -731994,12 +732052,12 @@ __export(exports_knowledge, {
   materializeGeneratedKnowledgeProjection: () => materializeGeneratedKnowledgeProjection,
   looksLikeRawPdfPayload: () => looksLikeRawPdfPayload,
   looksBinaryLikeText: () => looksBinaryLikeText,
-  loadKnowledgeStoreSnapshot: () => loadKnowledgeStoreSnapshot2,
+  loadKnowledgeStoreSnapshot: () => loadKnowledgeStoreSnapshot,
   listGeneratedKnowledgePages: () => listGeneratedKnowledgePages,
-  listBrowserKinds: () => listBrowserKinds2,
+  listBrowserKinds: () => listBrowserKinds,
   knowledgeSpaceMetadata: () => knowledgeSpaceMetadata,
   knowledgePageSourceWeight: () => knowledgePageSourceWeight,
-  knowledgeNowMs: () => nowMs2,
+  knowledgeNowMs: () => nowMs,
   knowledgeExtractionNeedsRefresh: () => knowledgeExtractionNeedsRefresh,
   isUsefulKnowledgePageSourceCandidate: () => isUsefulKnowledgePageSourceCandidate,
   isUsefulKnowledgePageSource: () => isUsefulKnowledgePageSource,
@@ -732019,12 +732077,12 @@ __export(exports_knowledge, {
   generatedKnowledgeSourceId: () => generatedKnowledgeSourceId,
   generatedKnowledgeCanonicalUri: () => generatedKnowledgeCanonicalUri,
   extractKnowledgeArtifact: () => extractKnowledgeArtifact,
-  evaluateProjectPlanningReadiness: () => evaluateProjectPlanningReadiness2,
-  discoverBrowserKnowledgeProfiles: () => discoverBrowserKnowledgeProfiles2,
+  evaluateProjectPlanningReadiness: () => evaluateProjectPlanningReadiness,
+  discoverBrowserKnowledgeProfiles: () => discoverBrowserKnowledgeProfiles,
   createWebKnowledgeGapRepairer: () => createWebKnowledgeGapRepairer,
   createProviderBackedKnowledgeSemanticLlm: () => createProviderBackedKnowledgeSemanticLlm,
   createMemoryApi: () => createMemoryApi,
-  createKnowledgeSchema: () => createSchema3,
+  createKnowledgeSchema: () => createSchema2,
   createKnowledgeApi: () => createKnowledgeApi,
   createDefaultKnowledgeConnectorRegistry: () => createDefaultKnowledgeConnectorRegistry,
   compareKnowledgePageSources: () => compareKnowledgePageSources,
@@ -734463,7 +734521,7 @@ var init_delivery_manager = __esm(() => {
 });
 
 // node_modules/@pellux/goodvibes-sdk/dist/platform/automation/scheduler-capacity.js
-function computeSchedulerCapacity(slotsTotal, runs, nowMs3 = Date.now()) {
+function computeSchedulerCapacity(slotsTotal, runs, nowMs2 = Date.now()) {
   let slotsInUse = 0;
   const queuedRuns = [];
   for (const run7 of runs) {
@@ -734473,7 +734531,7 @@ function computeSchedulerCapacity(slotsTotal, runs, nowMs3 = Date.now()) {
       queuedRuns.push(run7);
   }
   const queueDepth = queuedRuns.length;
-  const oldestQueuedAgeMs = queueDepth > 0 ? nowMs3 - Math.min(...queuedRuns.map((r5) => r5.queuedAt)) : null;
+  const oldestQueuedAgeMs = queueDepth > 0 ? nowMs2 - Math.min(...queuedRuns.map((r5) => r5.queuedAt)) : null;
   return { slotsTotal, slotsInUse, queueDepth, oldestQueuedAgeMs };
 }
 
@@ -817087,7 +817145,7 @@ var createStyledCell = (char, overrides = {}) => ({
 // src/version.ts
 import { readFileSync } from "fs";
 import { join } from "path";
-var _version = "1.0.33";
+var _version = "1.0.34";
 var _sdkVersion = "0.33.36";
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, "..", "package.json"), "utf-8"));
@@ -840168,7 +840226,7 @@ var WORK_PLAN_STATUSES = [
   "failed",
   "cancelled"
 ];
-function nowMs3() {
+function nowMs2() {
   return Date.now();
 }
 function isObject5(value) {
@@ -840274,7 +840332,7 @@ class WorkPlanStore {
     if (!normalizedTitle)
       throw new Error("Work plan item title is required.");
     const plan = this.readPlan();
-    const time4 = nowMs3();
+    const time4 = nowMs2();
     const item = {
       id: createItemId(),
       title: normalizedTitle,
@@ -840298,7 +840356,7 @@ class WorkPlanStore {
   updateItem(idOrPrefix, patch2) {
     const plan = this.readPlan();
     const item = this.resolveItem(plan, idOrPrefix);
-    const time4 = nowMs3();
+    const time4 = nowMs2();
     const nextStatus = patch2.status ?? item.status;
     const next = this.pruneItem({
       ...item,
@@ -840331,7 +840389,7 @@ class WorkPlanStore {
   removeItem(idOrPrefix) {
     const plan = this.readPlan();
     const item = this.resolveItem(plan, idOrPrefix);
-    const time4 = nowMs3();
+    const time4 = nowMs2();
     const remaining = plan.items.filter((candidate) => candidate.id !== item.id);
     this.writePlan({
       ...plan,
@@ -840351,7 +840409,7 @@ class WorkPlanStore {
       ...plan,
       items: remaining,
       activeItemId: remaining[0]?.id,
-      updatedAt: nowMs3()
+      updatedAt: nowMs2()
     });
     return removed;
   }
@@ -840390,7 +840448,7 @@ class WorkPlanStore {
     const parsed = JSON.parse(raw);
     if (!isObject5(parsed))
       return this.createEmptyPlan();
-    const time4 = nowMs3();
+    const time4 = nowMs2();
     const createdAt = typeof parsed.createdAt === "number" ? parsed.createdAt : time4;
     const updatedAt = typeof parsed.updatedAt === "number" ? parsed.updatedAt : createdAt;
     const items = Array.isArray(parsed.items) ? parsed.items.map((item) => normalizeItem(item, createdAt)).filter((item) => item !== null) : [];
@@ -840409,7 +840467,7 @@ class WorkPlanStore {
     };
   }
   createEmptyPlan() {
-    const time4 = nowMs3();
+    const time4 = nowMs2();
     return {
       id: createPlanId(this.options.projectId, this.options.projectRoot),
       projectId: this.options.projectId,
@@ -841161,11 +841219,7 @@ function validateRegistryToolInvocationForAgentPolicy(args2) {
   return null;
 }
 function narrowAnalyzeToolDefinitionForAgentPolicy(tool2) {
-  tool2.definition.description = [
-    "Run local, static project analysis for GoodVibes Agent.",
-    "npm registry upgrade checks and hidden secondary LLM diff analysis are disabled in the main conversation.",
-    "Delegate package-upgrade and review workflows to GoodVibes TUI when they become build/fix/review work."
-  ].join(" ");
+  tool2.definition.description = "Run local, static project analysis for GoodVibes Agent.";
   tool2.definition.sideEffects = ["read_fs"];
   const properties2 = tool2.definition.parameters.properties;
   if (!isRecord22(properties2))
@@ -841178,10 +841232,7 @@ function narrowAnalyzeToolDefinitionForAgentPolicy(tool2) {
   delete properties2.packages;
 }
 function narrowRegistryToolDefinitionForAgentPolicy(tool2) {
-  tool2.definition.description = [
-    "Discover and preview GoodVibes Agent skills, agents, and tools.",
-    "Full content materialization and arbitrary .goodvibes file reads are disabled in the main conversation."
-  ].join(" ");
+  tool2.definition.description = "Discover and preview GoodVibes Agent registry entries.";
   tool2.definition.sideEffects = ["read_fs"];
   const properties2 = tool2.definition.parameters.properties;
   if (!isRecord22(properties2))
@@ -841207,11 +841258,7 @@ var CONTEXT_TOOL_DENIAL = [
   "Use explicit Agent CLI/slash commands such as status, compat, setup, and isolated Agent Knowledge instead."
 ].join(" ");
 function wrapBlockedContextToolForAgentPolicy(tool2) {
-  tool2.definition.description = [
-    "Blocked in GoodVibes Agent main conversation: non-Agent runtime context.",
-    "Use explicit Agent CLI/slash status, compat, setup, and Agent Knowledge commands for product-scoped context.",
-    "Default knowledge, non-Agent knowledge segments, and non-Agent runtime assumptions are not Agent fallbacks."
-  ].join(" ");
+  tool2.definition.description = "Blocked in GoodVibes Agent: non-Agent runtime context.";
   tool2.definition.sideEffects = [];
   tool2.definition.parameters = {
     type: "object",
@@ -841279,10 +841326,7 @@ function normalizeFindToolInvocationForAgentPolicy(args2) {
   };
 }
 function narrowFindToolDefinitionForAgentPolicy(tool2) {
-  tool2.definition.description = [
-    "Search the project for GoodVibes Agent using serial, gitignore-respecting read-only queries.",
-    "Hidden-file scans, symlink traversal, gitignore bypass, broad previews, full symbol dumps, and parallel search are disabled in the main conversation."
-  ].join(" ");
+  tool2.definition.description = "Search project files with serial, gitignore-respecting read-only queries.";
   tool2.definition.sideEffects = ["read_fs"];
   tool2.definition.concurrency = "serial";
   const properties2 = tool2.definition.parameters.properties;
@@ -841429,10 +841473,7 @@ function isBlockedReadPath(path7) {
   return SECRET_EXACT_SEGMENTS.has(stem) && SECRET_FILE_EXTENSIONS.has(extension);
 }
 function narrowReadToolDefinitionForAgentPolicy(tool2) {
-  tool2.definition.description = [
-    "Read ordinary project files for GoodVibes Agent with bounded, non-secret, main-conversation policy.",
-    "Hidden paths, secret-looking files, broad batches, unoptimized image extraction, and oversized image reads are disabled."
-  ].join(" ");
+  tool2.definition.description = "Read ordinary non-secret project files for GoodVibes Agent.";
   tool2.definition.sideEffects = ["read_fs"];
   tool2.definition.concurrency = "serial";
   const properties2 = tool2.definition.parameters.properties;
@@ -841530,10 +841571,7 @@ function normalizeWebSearchToolInvocationForAgentPolicy(args2) {
   };
 }
 function narrowWebSearchToolDefinitionForAgentPolicy(tool2) {
-  tool2.definition.description = [
-    "Run bounded, read-only web research for GoodVibes Agent.",
-    "Full-page/raw/summary extraction, safe-search off, and high-fanout searches are disabled in the main conversation."
-  ].join(" ");
+  tool2.definition.description = "Run bounded, read-only web research for GoodVibes Agent.";
   tool2.definition.sideEffects = ["network"];
   const properties2 = tool2.definition.parameters.properties;
   if (!isRecord25(properties2))
@@ -841782,11 +841820,7 @@ function normalizeAgentToolInvocationForAgentPolicy(args2) {
   return args2;
 }
 function wrapBlockedMainConversationToolForAgentPolicy(tool2) {
-  tool2.definition.description = [
-    `Blocked in GoodVibes Agent main conversation: ${tool2.definition.name}.`,
-    "Use explicit GoodVibes TUI build delegation for build/fix/review/code execution work.",
-    "Use Agent-owned local registries and isolated Agent Knowledge routes for Agent memory and knowledge work."
-  ].join(" ");
+  tool2.definition.description = `Blocked in GoodVibes Agent: ${tool2.definition.name}.`;
   tool2.definition.sideEffects = [];
   tool2.execute = async () => ({ success: false, error: LOCAL_CODING_TOOL_DENIAL });
 }
@@ -841821,11 +841855,7 @@ function wrapStateToolForAgentPolicy(tool2) {
   };
 }
 function wrapBlockedSettingsToolForAgentPolicy(tool2) {
-  tool2.definition.description = [
-    "Blocked in GoodVibes Agent main conversation: configuration mutation.",
-    "Use explicit Agent CLI/slash settings commands for intentional config changes.",
-    "Connected-host lifecycle and service exposure remain externally managed outside GoodVibes Agent."
-  ].join(" ");
+  tool2.definition.description = "Blocked in GoodVibes Agent: configuration mutation.";
   tool2.definition.sideEffects = [];
   tool2.definition.parameters = {
     type: "object",
@@ -841988,11 +842018,7 @@ function isPresent(value) {
   return true;
 }
 function narrowAgentToolDefinitionForAgentPolicy(tool2) {
-  tool2.definition.description = [
-    "Read-only local Agent inspection for GoodVibes Agent.",
-    "This product does not create separate Agent jobs or run local delegated review chains.",
-    "For build/fix/review work, delegate to GoodVibes TUI through the explicit build-delegation path instead."
-  ].join(" ");
+  tool2.definition.description = "Read-only local Agent inspection for GoodVibes Agent.";
   tool2.definition.sideEffects = [];
   const properties2 = tool2.definition.parameters.properties;
   if (!isRecord26(properties2))
@@ -842004,11 +842030,7 @@ function narrowAgentToolDefinitionForAgentPolicy(tool2) {
   modeProperty.description = "Read-only Agent inspection mode. Separate Agent job creation, batch creation, cancel, message, wait, and plan modes are disabled in GoodVibes Agent.";
 }
 function narrowExecToolDefinitionForAgentPolicy(tool2) {
-  tool2.definition.description = [
-    "Execute foreground shell commands serially for GoodVibes Agent main-conversation work.",
-    "Background processes, parallel batches, background process controls, and exec file_ops are disabled by Agent policy.",
-    "Delegate long-running build/fix/review execution to GoodVibes TUI instead."
-  ].join(" ");
+  tool2.definition.description = "Execute foreground shell commands serially for GoodVibes Agent.";
   const properties2 = tool2.definition.parameters.properties;
   if (!isRecord26(properties2))
     return;
@@ -842033,11 +842055,7 @@ function narrowExecToolDefinitionForAgentPolicy(tool2) {
   }
 }
 function narrowFetchToolDefinitionForAgentPolicy(tool2) {
-  tool2.definition.description = [
-    "Fetch public URLs for GoodVibes Agent with serial, read-only HTTP requests.",
-    "Only GET, HEAD, and OPTIONS are available in the main conversation.",
-    "Credentialed requests, request bodies, trust overrides, raw unsanitized responses, and parallel batches are disabled by Agent policy."
-  ].join(" ");
+  tool2.definition.description = "Fetch public URLs with serial, read-only HTTP requests.";
   const properties2 = tool2.definition.parameters.properties;
   if (!isRecord26(properties2))
     return;
@@ -842072,11 +842090,7 @@ function narrowFetchToolDefinitionForAgentPolicy(tool2) {
   delete urlProperties.auth;
 }
 function narrowStateToolDefinitionForAgentPolicy(tool2) {
-  tool2.definition.description = [
-    "Inspect runtime-owned state for GoodVibes Agent.",
-    "State mutation, runtime-owned memory writes, hook changes, output-mode changes, and analytics writes are disabled in the main conversation.",
-    "Use Agent-owned commands for intentional memory, skill, persona, and routine changes."
-  ].join(" ");
+  tool2.definition.description = "Inspect runtime-owned state for GoodVibes Agent.";
   const properties2 = tool2.definition.parameters.properties;
   if (!isRecord26(properties2))
     return;
@@ -842103,10 +842117,7 @@ function narrowStateToolDefinitionForAgentPolicy(tool2) {
   narrowStringEnumProperty(properties2, "analyticsAction", READ_ONLY_STATE_ANALYTICS_ACTIONS, "Read-only analytics actions allowed by GoodVibes Agent.");
 }
 function narrowInspectToolDefinitionForAgentPolicy(tool2) {
-  tool2.definition.description = [
-    "Inspect and analyze project structure for GoodVibes Agent.",
-    "Scaffold mode is dry-run-only in the main conversation; code creation must be delegated to GoodVibes TUI."
-  ].join(" ");
+  tool2.definition.description = "Inspect and analyze project structure for GoodVibes Agent.";
   const properties2 = tool2.definition.parameters.properties;
   if (!isRecord26(properties2))
     return;
@@ -842313,11 +842324,7 @@ function createAgentChannelSendTool(channelDeliveryRouter) {
   return {
     definition: {
       name: "agent_channel_send",
-      description: [
-        "Send one confirmed message through a configured Agent target.",
-        "Use only for explicit send/message/alert requests.",
-        "Provide exactly one target."
-      ].join(" "),
+      description: "Send one confirmed message through one configured Agent target.",
       parameters: {
         type: "object",
         properties: {
@@ -844523,11 +844530,7 @@ function createAgentKnowledgeIngestTool(shellPaths, configManager) {
   return {
     definition: {
       name: "agent_knowledge_ingest",
-      description: [
-        "Ingest one confirmed source into isolated Agent Knowledge.",
-        "Use only for explicit ingest/import requests.",
-        "Supports URL, file, bookmark, history, and connector sources."
-      ].join(" "),
+      description: "Ingest one confirmed source into isolated Agent Knowledge.",
       parameters: {
         type: "object",
         properties: {
@@ -844706,11 +844709,7 @@ function createAgentKnowledgeTool(shellPaths, configManager) {
   return {
     definition: {
       name: "agent_knowledge",
-      description: [
-        "Read isolated Agent Knowledge.",
-        "Use for status, ask/search, source/node/issue lists, item lookup, map summary, and connector inspection.",
-        "Read-only."
-      ].join(" "),
+      description: "Read isolated Agent Knowledge.",
       parameters: {
         type: "object",
         properties: {
@@ -845611,10 +845610,7 @@ function createAgentLocalRegistryTool(shellPaths, memoryRegistry) {
   return {
     definition: {
       name: "agent_local_registry",
-      description: [
-        "Inspect or update Agent-local records: memory, notes, personas, skills, bundles, and routines.",
-        "Deletion requires confirm:true plus explicitUserRequest."
-      ].join(" "),
+      description: "Inspect or update Agent-local records.",
       parameters: {
         type: "object",
         properties: {
@@ -845827,11 +845823,7 @@ function createAgentMediaGenerateTool(mediaProviderRegistry, artifactStore) {
   return {
     definition: {
       name: "agent_media_generate",
-      description: [
-        "Generate one confirmed image or video artifact.",
-        "Use only for explicit media generation requests.",
-        "Returns artifact ids, not inline base64."
-      ].join(" "),
+      description: "Generate one confirmed image or video artifact.",
       parameters: {
         type: "object",
         properties: {
@@ -845951,11 +845943,7 @@ function createAgentNotifyTool(configManager, notifier) {
   return {
     definition: {
       name: "agent_notify",
-      description: [
-        "Send one confirmed plain-text notification.",
-        "Use only for explicit notify/message/alert requests.",
-        "Uses existing targets only."
-      ].join(" "),
+      description: "Send one confirmed plain-text notification.",
       parameters: {
         type: "object",
         properties: {
@@ -846277,11 +846265,7 @@ function createAgentOperatorActionTool(shellPaths, configManager) {
   return {
     definition: {
       name: "agent_operator_action",
-      description: [
-        "Run one confirmed allowlisted operator action.",
-        "Use only for explicit approval, automation, or schedule requests.",
-        "No automation definition edits or host lifecycle."
-      ].join(" "),
+      description: "Run one confirmed allowlisted operator action.",
       parameters: {
         type: "object",
         properties: {
@@ -846495,11 +846479,7 @@ function createAgentOperatorBriefingTool(shellPaths, configManager) {
   return {
     definition: {
       name: "agent_operator_briefing",
-      description: [
-        "Read connected Agent operator state for a concise briefing.",
-        "Use for pending attention, approvals, automation, schedules, or status.",
-        "Read-only."
-      ].join(" "),
+      description: "Read connected Agent operator state for a concise briefing.",
       parameters: {
         type: "object",
         properties: {},
@@ -847095,11 +847075,7 @@ function createAgentReminderScheduleTool(shellPaths, configManager) {
   return {
     definition: {
       name: "agent_reminder_schedule",
-      description: [
-        "Schedule one confirmed GoodVibes Agent reminder.",
-        "Use only for an explicit reminder request.",
-        "No host lifecycle, background job, or Knowledge write."
-      ].join(" "),
+      description: "Schedule one confirmed GoodVibes Agent reminder.",
       parameters: {
         type: "object",
         properties: {
@@ -847339,11 +847315,7 @@ function createAgentWorkPlanTool(store) {
   return {
     definition: {
       name: "agent_work_plan",
-      description: [
-        "Inspect or update the visible Agent-local work plan.",
-        "Use for task/status tracking.",
-        "Destructive actions require confirm:true plus explicitUserRequest."
-      ].join(" "),
+      description: "Inspect or update the visible Agent-local work plan.",
       parameters: {
         type: "object",
         properties: {
@@ -848685,13 +848657,13 @@ init_state3();
 
 // src/input/commands/recall-shared.ts
 var VALID_CLASSES = ["decision", "constraint", "incident", "pattern", "fact", "risk", "runbook", "architecture", "ownership"];
-var VALID_SCOPES2 = ["session", "project", "team"];
+var VALID_SCOPES = ["session", "project", "team"];
 var VALID_REVIEW_STATES = ["fresh", "reviewed", "stale", "contradicted"];
 function isValidClass(s4) {
   return VALID_CLASSES.includes(s4);
 }
 function isValidScope(s4) {
-  return VALID_SCOPES2.includes(s4);
+  return VALID_SCOPES.includes(s4);
 }
 function isValidReviewState(s4) {
   return VALID_REVIEW_STATES.includes(s4);
@@ -848734,7 +848706,7 @@ function handleRecallSearch(args2, context) {
     if (isValidScope(scope))
       filter.scope = scope;
     else {
-      context.print(`[memory] Unknown scope "${scope}". Valid values ${VALID_SCOPES2.join(", ")}.`);
+      context.print(`[memory] Unknown scope "${scope}". Valid values ${VALID_SCOPES.join(", ")}.`);
       return;
     }
   }
@@ -848909,7 +848881,7 @@ function handleRecallList(args2, context) {
   if (scopeIdx !== -1 && args2[scopeIdx + 1]) {
     const scope = args2[scopeIdx + 1];
     if (!isValidScope(scope)) {
-      context.print(`[memory] Unknown scope "${scope}". Valid values ${VALID_SCOPES2.join(", ")}.`);
+      context.print(`[memory] Unknown scope "${scope}". Valid values ${VALID_SCOPES.join(", ")}.`);
       return;
     }
     filter.scope = scope;
@@ -848959,7 +848931,7 @@ async function handleRecallAdd(args2, context) {
   const tags = tagsRaw ? tagsRaw.split(",").map((token) => token.trim()).filter(Boolean) : [];
   const scope = scopeRaw && isValidScope(scopeRaw) ? scopeRaw : "project";
   if (scopeRaw && !isValidScope(scopeRaw)) {
-    context.print(`[memory] Invalid scope "${scopeRaw}". Valid values ${VALID_SCOPES2.join(", ")}.`);
+    context.print(`[memory] Invalid scope "${scopeRaw}". Valid values ${VALID_SCOPES.join(", ")}.`);
     return;
   }
   const provenance = [];
@@ -849093,7 +849065,7 @@ function handleRecallExport(args2, context) {
   if (scopeIdx !== -1 && commandArgs[scopeIdx + 1]) {
     const scope = commandArgs[scopeIdx + 1];
     if (!isValidScope(scope)) {
-      context.print(`[memory] Unknown scope "${scope}". Valid values ${VALID_SCOPES2.join(", ")}.`);
+      context.print(`[memory] Unknown scope "${scope}". Valid values ${VALID_SCOPES.join(", ")}.`);
       return;
     }
     filter.scope = scope;
@@ -849172,7 +849144,7 @@ function handleRecallHandoffExport(args2, context) {
   const scopeIdx = commandArgs.indexOf("--scope");
   const scopeRaw = scopeIdx !== -1 ? commandArgs[scopeIdx + 1] : "team";
   if (!scopeRaw || !isValidScope(scopeRaw)) {
-    context.print(`[memory] Unknown scope "${scopeRaw ?? ""}". Valid values ${VALID_SCOPES2.join(", ")}.`);
+    context.print(`[memory] Unknown scope "${scopeRaw ?? ""}". Valid values ${VALID_SCOPES.join(", ")}.`);
     return;
   }
   const bundle = memory.exportBundle({ scope: scopeRaw });
@@ -849288,7 +849260,7 @@ function handleRecallPromote(args2, context) {
   const id = parsed.rest[0];
   const scope = parsed.rest[1];
   if (!id || !scope || !isValidScope(scope)) {
-    context.print(`[memory] Usage: /memory promote <id> <${VALID_SCOPES2.join("|")}> --yes`);
+    context.print(`[memory] Usage: /memory promote <id> <${VALID_SCOPES.join("|")}> --yes`);
     return;
   }
   if (!parsed.yes) {
@@ -851969,6 +851941,10 @@ var SENSITIVE_KEY_PATTERN2 = /(?:secret|token|password|api[-_.]?key|signing)/i;
 function valuesEqual2(left, right) {
   return JSON.stringify(left) === JSON.stringify(right);
 }
+function previewText2(value, maxLength = 120) {
+  const normalized = value.replace(/\s+/g, " ").trim();
+  return normalized.length <= maxLength ? normalized : `${normalized.slice(0, maxLength - 1).trimEnd()}...`;
+}
 function clampLimit4(value, fallback = DEFAULT_SETTING_LIMIT) {
   if (typeof value !== "number" || !Number.isFinite(value))
     return fallback;
@@ -852039,7 +852015,22 @@ function describeHarnessSetting(configManager, setting, options = {}) {
     ...options.lookup ? { lookup: options.lookup } : {}
   };
 }
-function listHarnessSettings(configManager, filters = {}) {
+function describeHarnessSettingSummary(configManager, setting) {
+  const value = configManager.get(setting.key);
+  const hostOwned = isExternalHostOwnedSettingKey(setting.key);
+  return {
+    key: setting.key,
+    category: setting.key.split(".")[0] ?? "",
+    type: setting.type,
+    value: redactHarnessSettingValue(setting.key, value),
+    configured: !valuesEqual2(value, setting.default),
+    writable: !hostOwned,
+    visibleInWorkspace: !isAgentHiddenSettingKey(setting.key),
+    summary: previewText2(setting.description),
+    ...setting.enumValues ? { enumValues: setting.enumValues } : {}
+  };
+}
+function listHarnessSettings(configManager, filters = {}, options = {}) {
   const key = filters.key?.trim();
   const category = filters.category?.trim();
   const prefix = filters.prefix?.trim();
@@ -852059,7 +852050,7 @@ function listHarnessSettings(configManager, filters = {}) {
         return false;
     }
     return true;
-  }).map((setting) => describeHarnessSetting(configManager, setting)).slice(0, limit3);
+  }).map((setting) => options.includeParameters ? describeHarnessSetting(configManager, setting) : describeHarnessSettingSummary(configManager, setting)).slice(0, limit3);
 }
 function getHarnessSetting(configManager, key, lookup) {
   const setting = findSetting(configManager, key);
@@ -863185,7 +863176,7 @@ import { mkdirSync as mkdirSync64, readFileSync as readFileSync85, writeFileSync
 import { dirname as dirname63, resolve as resolve39 } from "path";
 init_state3();
 var VALID_CLASSES2 = ["decision", "constraint", "incident", "pattern", "fact", "risk", "runbook", "architecture", "ownership"];
-var VALID_SCOPES4 = ["session", "project", "team"];
+var VALID_SCOPES3 = ["session", "project", "team"];
 var VALID_REVIEW_STATES3 = ["fresh", "reviewed", "stale", "contradicted"];
 var VALID_PROVENANCE_KINDS = ["session", "turn", "task", "event", "file"];
 var VALUE_OPTIONS = new Set([
@@ -863285,7 +863276,7 @@ function isMemoryClass2(value) {
   return VALID_CLASSES2.includes(value);
 }
 function isMemoryScope2(value) {
-  return VALID_SCOPES4.includes(value);
+  return VALID_SCOPES3.includes(value);
 }
 function isReviewState(value) {
   return VALID_REVIEW_STATES3.includes(value);
@@ -863300,7 +863291,7 @@ function requireClass(value) {
 }
 function requireScope(value) {
   if (!value || !isMemoryScope2(value))
-    throw new Error(`Invalid memory scope "${value ?? ""}". Valid values ${VALID_SCOPES4.join(", ")}`);
+    throw new Error(`Invalid memory scope "${value ?? ""}". Valid values ${VALID_SCOPES3.join(", ")}`);
   return value;
 }
 function optionalScope(value) {
@@ -879405,31 +879396,31 @@ function describeChannel(channel, options = {}) {
     defaultTargetKeys: channel.defaultTargetKeys,
     configuredDefaultTargetKeys: channel.configuredDefaultTargetKeys,
     ...options.lookup ? { lookup: options.lookup } : {},
-    policy: {
-      effect: "read-only",
-      values: "Config key names and target key names are shown; secret values and stored target values are never returned.",
-      delivery: "Use agent_channel_send only for one explicit, confirmed delivery target requested by the user.",
-      setup: "Use connected-host setup/account/policy routes only as read-only diagnostics unless another confirmed first-class tool owns the mutation."
-    },
-    modelAccess: {
-      sendTool: "agent_channel_send",
-      notificationTool: "agent_notify",
-      reminderTool: "agent_reminder_schedule",
-      slashCommandDetail: `/channels show ${channel.id}`,
-      readOnlyConnectedRoutes: [
-        "/channels accounts",
-        "/channels policies",
-        "/channels status",
-        `/channels doctor ${channel.id}`,
-        `/channels setup ${channel.id}`
-      ],
-      settingsFilter: `agent_harness mode:"settings" prefix:"surfaces.${channel.id}" includeHidden:true`,
-      connectedHostBoundary: 'agent_harness mode:"connected_host_capability" query:"delivery"',
-      ...options.includeParameters ? {
+    ...options.includeParameters ? {
+      policy: {
+        effect: "read-only",
+        values: "Config key names and target key names are shown; secret values and stored target values are never returned.",
+        delivery: "Use agent_channel_send only for one explicit, confirmed delivery target requested by the user.",
+        setup: "Use connected-host setup/account/policy routes only as read-only diagnostics unless another confirmed first-class tool owns the mutation."
+      },
+      modelAccess: {
+        sendTool: "agent_channel_send",
+        notificationTool: "agent_notify",
+        reminderTool: "agent_reminder_schedule",
+        slashCommandDetail: `/channels show ${channel.id}`,
+        readOnlyConnectedRoutes: [
+          "/channels accounts",
+          "/channels policies",
+          "/channels status",
+          `/channels doctor ${channel.id}`,
+          `/channels setup ${channel.id}`
+        ],
+        settingsFilter: `agent_harness mode:"settings" prefix:"surfaces.${channel.id}" includeHidden:true`,
+        connectedHostBoundary: 'agent_harness mode:"connected_host_capability" query:"delivery"',
         deliveryTargetShape: "surface[:route[:label]]",
         exampleTarget: `${channel.id}:route:Label`
-      } : {}
-    }
+      }
+    } : {}
   };
 }
 function channelReadinessCatalogStatus(context) {
@@ -880057,22 +880048,36 @@ function describeConnectedHostCapability(toolRegistry, rawQuery) {
     return { status: "ambiguous", input: rawQuery, candidates: describeConnectedHostCapabilityCandidates(searched) };
   return null;
 }
-function connectedHostSummary(context, toolRegistry) {
+function connectedHostSummary(context, toolRegistry, options = {}) {
   const shellPaths3 = context.workspace.shellPaths;
   const homeDirectory = shellPaths3?.homeDirectory ?? context.platform.configManager.getHomeDirectory() ?? "";
   const connection5 = resolveAgentConnectedHostConnection(context.platform.configManager, homeDirectory);
+  const routeFamilies = connectedHostRouteFamilies();
+  const capabilities = connectedHostCapabilityMap(toolRegistry);
+  const blockedCapabilities = blockedConnectedHostCapabilities();
   return {
     baseUrl: connection5.baseUrl,
     operatorToken: connection5.token ? "configured" : "missing",
     tokenPath: connection5.tokenPath,
     ownership: "external-connected-host",
     lifecycle: "GoodVibes Agent can use public connected-host operator routes, but does not start, stop, restart, install, expose, or mutate the host listener.",
-    servicePostureMode: 'Use agent_harness mode:"service_posture" for endpoint binding, network-facing posture, issue, and redacted-log diagnostics. Use mode:"service_endpoint" for one endpoint.',
-    operatorMethodMode: 'Use agent_harness mode:"operator_methods" for the public operator and Agent Knowledge method catalog. Use mode:"operator_method" for one method.',
-    statusMode: 'Use agent_harness mode:"connected_host_status" for live read-only reachability, SDK compatibility, token posture, and Agent Knowledge route readiness.',
-    routeFamilies: connectedHostRouteFamilies(),
-    capabilities: connectedHostCapabilityMap(toolRegistry),
-    blockedCapabilities: blockedConnectedHostCapabilities()
+    modes: {
+      servicePosture: "service_posture/service_endpoint",
+      operatorMethods: "operator_methods/operator_method",
+      liveStatus: "connected_host_status",
+      capabilityDetail: "connected_host_capability"
+    },
+    counts: {
+      routeFamilies: routeFamilies.length,
+      allowedCapabilities: capabilities.length,
+      availableCapabilities: capabilities.filter((capability) => capability.available === true).length,
+      blockedCapabilities: blockedCapabilities.length
+    },
+    ...options.includeParameters === true ? {
+      routeFamilies,
+      capabilities,
+      blockedCapabilities
+    } : {}
   };
 }
 function blockedConnectedHostCapabilities() {
@@ -880187,7 +880192,8 @@ function blockedHarnessCliCommandTokens() {
 function listHarnessCliCommands(args2) {
   const query2 = readString52(args2.query);
   const limit3 = readLimit6(args2.limit, 200);
-  return listGoodVibesCliCommands().filter((command8) => command8 !== "unknown").map((command8) => describeCliCommand(command8)).filter((command8) => cliCommandMatches(command8, query2)).sort((a4, b3) => String(a4.name).localeCompare(String(b3.name))).slice(0, limit3);
+  const includeParameters = args2.includeParameters === true;
+  return listGoodVibesCliCommands().filter((command8) => command8 !== "unknown").map((command8) => describeCliCommand(command8)).filter((command8) => cliCommandMatches(command8, query2)).sort((a4, b3) => String(a4.name).localeCompare(String(b3.name))).slice(0, limit3).map((command8) => includeParameters ? command8 : cliCommandCandidate(command8));
 }
 function cliInputFromArgs(args2) {
   const cliCommand = readString52(args2.cliCommand);
@@ -880303,6 +880309,10 @@ function readStringArray12(value) {
     return [];
   return value.map((entry) => typeof entry === "string" ? entry : String(entry));
 }
+function previewText3(value, maxLength = 120) {
+  const normalized = value.replace(/\s+/g, " ").trim();
+  return normalized.length <= maxLength ? normalized : `${normalized.slice(0, maxLength - 1).trimEnd()}...`;
+}
 function commandMatches(command8, query2) {
   if (!query2)
     return true;
@@ -880341,8 +880351,8 @@ function describeCommandCandidate(command8) {
     name: command8.name,
     slash: `/${command8.name}`,
     aliases: command8.aliases ?? [],
-    description: command8.description,
-    usage: command8.usage ?? ""
+    summary: previewText3(command8.description),
+    ...command8.argsHint ? { argsHint: command8.argsHint } : {}
   };
 }
 function commandDetailLookupFromArgs(args2) {
@@ -880425,7 +880435,8 @@ function resolveHarnessCommandDetail(commandRegistry, args2) {
 function listHarnessCommands(commandRegistry, args2) {
   const query2 = readString53(args2.query);
   const limit3 = readLimit7(args2.limit, 200);
-  return commandRegistry.list().filter((command8) => commandMatches(command8, query2)).sort((a4, b3) => a4.name.localeCompare(b3.name)).slice(0, limit3).map((command8) => describeCommand(command8));
+  const includeParameters = args2.includeParameters === true;
+  return commandRegistry.list().filter((command8) => commandMatches(command8, query2)).sort((a4, b3) => a4.name.localeCompare(b3.name)).slice(0, limit3).map((command8) => includeParameters ? describeCommand(command8) : describeCommandCandidate(command8));
 }
 function describeHarnessCommand(commandRegistry, args2) {
   const detail = resolveHarnessCommandDetail(commandRegistry, args2);
@@ -880540,12 +880551,12 @@ function describeRoute(context, route, options = {}) {
       operatorClientAttached: Boolean(context.clients?.operator)
     },
     ...options.lookup ? { lookup: options.lookup } : {},
-    policy: {
-      effect: route.effect,
-      values: "Delegation posture returns policy, route, confirmation, and runtime availability metadata only; it does not submit delegated work.",
-      mutation: "Delegated work submission stays a visible confirmed workspace or slash-command flow and must preserve the full original user ask."
-    },
     ...options.includeParameters ? {
+      policy: {
+        effect: route.effect,
+        values: "Delegation posture returns policy, route, confirmation, and runtime availability metadata only; it does not submit delegated work.",
+        mutation: "Delegated work submission stays a visible confirmed workspace or slash-command flow and must preserve the full original user ask."
+      },
       modelAccess: {
         inspectDelegation: 'agent_harness mode:"delegation_posture"',
         inspectRoute: 'agent_harness mode:"delegation_route"',
@@ -881310,13 +881321,13 @@ function describeProvider(provider5, runtimeStatus, options = {}) {
         inspectProvider: 'agent_harness mode:"media_provider"',
         generateMedia: "agent_media_generate with confirm:true and explicitUserRequest",
         ttsSettings: "agent_harness settings/get_setting/set_setting for tts.provider, tts.voice, tts.llmProvider, and tts.llmModel"
+      },
+      policy: {
+        effect: "read-only",
+        values: "Provider posture returns capability, setup, selected, health, and safe environment key names only; secret values and media payloads are never returned.",
+        mutation: "Media generation, voice enable/disable, TTS setting changes, and bundle export stay explicit confirmation-gated tool, setting, workspace, or slash-command flows."
       }
-    } : {},
-    policy: {
-      effect: "read-only",
-      values: "Provider posture returns capability, setup, selected, health, and safe environment key names only; secret values and media payloads are never returned.",
-      mutation: "Media generation, voice enable/disable, TTS setting changes, and bundle export stay explicit confirmation-gated tool, setting, workspace, or slash-command flows."
-    }
+    } : {}
   };
 }
 async function readRuntimeStatuses(context) {
@@ -881399,14 +881410,14 @@ async function mediaPostureSummary(context, args2) {
     returned: filtered.length,
     total: providers2.length,
     policy: "Read-only voice/media posture. Media generation, voice enable/disable, TTS setting changes, and bundle export stay confirmation-gated through first-class tools, settings modes, workspace actions, or slash-command mirrors.",
-    modelAccess: {
+    ...args2.includeParameters === true ? { modelAccess: {
       mediaGenerateTool: "agent_media_generate",
       providerCatalogMode: "media_posture",
       singleProviderMode: "media_provider",
-      ttsProviderPicker: 'open_ui_surface surfaceId:"tts-provider-picker"',
-      ttsVoicePicker: 'open_ui_surface surfaceId:"tts-voice-picker"',
+      ttsProviderPicker: 'agent_harness mode:"open_ui_surface" surfaceId:"tts-provider-picker" confirm:true explicitUserRequest:"..."',
+      ttsVoicePicker: 'agent_harness mode:"open_ui_surface" surfaceId:"tts-voice-picker" confirm:true explicitUserRequest:"..."',
       commands: ["/media providers", "/voice review", "/tts <prompt>", "/image <path>"]
-    }
+    } } : {}
   };
 }
 async function describeHarnessMediaProvider(context, args2) {
@@ -881555,25 +881566,25 @@ function describeTarget(target, options = {}) {
     ...target.hasQuery !== undefined ? { hasQuery: target.hasQuery } : {},
     value: "<redacted>",
     ...options.lookup ? { lookup: options.lookup } : {},
-    policy: {
-      effect: "read-only",
-      values: "Full webhook URLs are not returned because they can contain bearer tokens or secret path/query values.",
-      delivery: "Use agent_notify only for one explicit, confirmed notification requested by the user.",
-      management: "Use confirmed /notify mirrors only when the user explicitly asks to add, remove, clear, test, or send notification targets."
-    },
-    modelAccess: {
-      sendTool: "agent_notify",
-      listCommand: "/notify list",
-      addCommand: "/notify add <url> --yes",
-      removeCommand: "/notify remove <url> --yes",
-      clearCommand: "/notify clear --yes",
-      testCommand: "/notify test --yes",
-      settingsCategory: "notifications.webhookUrls",
-      ...options.includeParameters ? {
+    ...options.includeParameters ? {
+      policy: {
+        effect: "read-only",
+        values: "Full webhook URLs are not returned because they can contain bearer tokens or secret path/query values.",
+        delivery: "Use agent_notify only for one explicit, confirmed notification requested by the user.",
+        management: "Use confirmed /notify mirrors only when the user explicitly asks to add, remove, clear, test, or send notification targets."
+      },
+      modelAccess: {
+        sendTool: "agent_notify",
+        listCommand: "/notify list",
+        addCommand: "/notify add <url> --yes",
+        removeCommand: "/notify remove <url> --yes",
+        clearCommand: "/notify clear --yes",
+        testCommand: "/notify test --yes",
+        settingsCategory: "notifications.webhookUrls",
         targetValueRequiredForRemove: true,
         targetValuePolicy: "Ask the user for the exact webhook URL before removing one target; do not infer it from redacted metadata."
-      } : {}
-    }
+      }
+    } : {}
   };
 }
 function notificationTargetCatalogStatus(context) {
@@ -881642,6 +881653,10 @@ function readLimit12(value, fallback) {
     return fallback;
   return Math.max(1, Math.min(500, Math.trunc(parsed)));
 }
+function previewText4(value, maxLength = 120) {
+  const normalized = value.replace(/\s+/g, " ").trim();
+  return normalized.length <= maxLength ? normalized : `${normalized.slice(0, maxLength - 1).trimEnd()}...`;
+}
 function panelManager(context) {
   return context.workspace.panelManager ?? null;
 }
@@ -881653,6 +881668,7 @@ function panelMatches(panel, query2) {
     panel.name,
     panel.category,
     panel.description,
+    panel.summary,
     panel.workspaceRoute
   ].map((value) => typeof value === "object" ? JSON.stringify(value) : String(value ?? "")).join(`
 `).toLowerCase().includes(query2.toLowerCase());
@@ -881674,7 +881690,7 @@ function panelCandidate(registration) {
     id: registration.id,
     name: registration.name,
     category: registration.category,
-    description: registration.description,
+    summary: previewText4(registration.description),
     workspaceRoute: {
       categoryId: agentWorkspaceCategoryForPanel(registration.id),
       command: agentWorkspaceCommandForPanel(registration.id)
@@ -881716,7 +881732,7 @@ function resolveHarnessPanel(context, args2) {
     return { status: "ambiguous", input: lookup.input, candidates: search2.map(panelCandidate).slice(0, 8) };
   return null;
 }
-function describePanelRegistration(context, registration, lookup) {
+function describePanelRegistration(context, registration, options = {}) {
   const manager5 = panelManager(context);
   const openPanel = manager5?.getPanel(registration.id) ?? null;
   const pane = manager5?.getPaneOf(registration.id) ?? null;
@@ -881726,8 +881742,8 @@ function describePanelRegistration(context, registration, lookup) {
     name: registration.name,
     icon: registration.icon,
     category: registration.category,
-    description: registration.description,
-    ...lookup ? { lookup } : {},
+    ...options.includeParameters ? { description: registration.description } : { summary: previewText4(registration.description) },
+    ...options.lookup ? { lookup: options.lookup } : {},
     preload: registration.preload === true,
     open: openPanel !== null,
     pane,
@@ -881737,11 +881753,13 @@ function describePanelRegistration(context, registration, lookup) {
       categoryId: agentWorkspaceCategoryForPanel(registration.id),
       command: agentWorkspaceCommandForPanel(registration.id)
     },
-    policy: {
-      effect: "ui-navigation",
-      confirmation: 'agent_harness mode:"open_panel" requires confirm:true and explicitUserRequest.',
-      boundary: "Panels are Agent/TUI operator views. The model can inspect panel catalog/open state; panel routing uses the existing Agent workspace bridge and does not mutate connected-host lifecycle."
-    }
+    ...options.includeParameters ? {
+      policy: {
+        effect: "ui-navigation",
+        confirmation: 'agent_harness mode:"open_panel" requires confirm:true and explicitUserRequest.',
+        boundary: "Panels are Agent/TUI operator views. The model can inspect panel catalog/open state; panel routing uses the existing Agent workspace bridge and does not mutate connected-host lifecycle."
+      }
+    } : {}
   };
 }
 function totalHarnessPanels(context) {
@@ -881754,12 +881772,13 @@ function listHarnessPanels(context, args2) {
   const query2 = readString58(args2.query);
   const category = readString58(args2.category);
   const limit3 = readLimit12(args2.limit, 200);
-  return manager5.getRegisteredTypes().map((registration) => describePanelRegistration(context, registration)).filter((panel) => !category || panel.category === category).filter((panel) => panelMatches(panel, query2)).sort((a4, b3) => String(a4.id).localeCompare(String(b3.id))).slice(0, limit3);
+  const includeParameters = args2.includeParameters === true;
+  return manager5.getRegisteredTypes().map((registration) => describePanelRegistration(context, registration, { includeParameters })).filter((panel) => !category || panel.category === category).filter((panel) => panelMatches(panel, query2)).sort((a4, b3) => String(a4.id).localeCompare(String(b3.id))).slice(0, limit3);
 }
 function describeHarnessPanel(context, args2) {
   const resolved = resolveHarnessPanel(context, args2);
   if (resolved?.status === "found")
-    return describePanelRegistration(context, resolved.registration, resolved.lookup);
+    return describePanelRegistration(context, resolved.registration, { includeParameters: true, lookup: resolved.lookup });
   if (resolved?.status === "ambiguous") {
     return { status: "ambiguous", input: resolved.input, candidates: resolved.candidates };
   }
@@ -881777,7 +881796,7 @@ function openHarnessPanel(context, args2) {
       availablePanels: listHarnessPanels(context, { limit: 50 }).map((entry) => entry.id)
     };
   }
-  const panel = describePanelRegistration(context, resolved.registration, resolved.lookup);
+  const panel = describePanelRegistration(context, resolved.registration, { includeParameters: true, lookup: resolved.lookup });
   const requestedPane = readString58(args2.pane);
   const pane = requestedPane === "bottom" || requestedPane === "top" ? requestedPane : undefined;
   if (!context.showPanel) {
@@ -881979,7 +881998,7 @@ function connectedHostFindings(runtime3, tokenUsable) {
   }
   return findings;
 }
-async function connectedHostStatusSummary(context, toolRegistry) {
+async function connectedHostStatusSummary(context, toolRegistry, options = {}) {
   const homeDirectory = resolveHomeDirectory(context);
   const workingDirectory = resolveWorkingDirectory(context);
   const token = readConnectedHostOperatorToken(homeDirectory);
@@ -882039,14 +882058,21 @@ async function connectedHostStatusSummary(context, toolRegistry) {
       }
     ],
     findings: connectedHostFindings(runtime3, tokenUsable),
-    modelAccess: {
-      diagnostics: 'Use mode:"connected_host_status" for live read-only host readiness, mode:"service_posture" for endpoint posture, mode:"service_endpoint" for one endpoint, and mode:"connected_host" for capability and boundary inventory.',
-      cliMirrors: ["goodvibes-agent status --json", "goodvibes-agent doctor", "goodvibes-agent compat"],
-      tuiMirrors: ["Agent Workspace -> Home -> Host compatibility", "Agent Workspace -> Home -> Doctor diagnostics", "Agent Workspace -> Home -> Review health"]
+    capabilitySummary: {
+      routeFamilies: connectedHostRouteFamilies().length,
+      availableCapabilities: connectedHostCapabilityMap(toolRegistry).filter((capability) => capability.available === true).length,
+      blockedCapabilities: blockedConnectedHostCapabilities().length
     },
-    routeFamilies: connectedHostRouteFamilies(),
-    capabilities: connectedHostCapabilityMap(toolRegistry),
-    blockedCapabilities: blockedConnectedHostCapabilities()
+    ...options.includeParameters ? {
+      modelAccess: {
+        diagnostics: 'Use mode:"connected_host_status" for live read-only host readiness, mode:"service_posture" for endpoint posture, mode:"service_endpoint" for one endpoint, and mode:"connected_host" for capability and boundary inventory.',
+        cliMirrors: ["goodvibes-agent status --json", "goodvibes-agent doctor", "goodvibes-agent compat"],
+        tuiMirrors: ["Agent Workspace -> Home -> Host compatibility", "Agent Workspace -> Home -> Doctor diagnostics", "Agent Workspace -> Home -> Review health"]
+      },
+      routeFamilies: connectedHostRouteFamilies(),
+      capabilities: connectedHostCapabilityMap(toolRegistry),
+      blockedCapabilities: blockedConnectedHostCapabilities()
+    } : {}
   };
 }
 
@@ -882369,34 +882395,36 @@ function describeServer(server2, options = {}) {
       })),
       toolCount: tools3.length
     } : { toolCount: tools3.length },
-    policy: {
-      effect: "read-only",
-      values: "Server posture returns trust, role, connection, quarantine, and tool metadata; env values and secret config values are never returned.",
-      mutation: "MCP add/remove/reload/trust/role/quarantine operations stay explicit confirmation-gated workspace or slash-command flows.",
-      allowAll: "allow-all trust decisions remain routed through Settings -> MCP, not direct command escalation."
-    },
-    modelAccess: {
-      reviewCommand: "/mcp review",
-      serversCommand: "/mcp servers",
-      toolsCommand: `/mcp tools ${server2.name}`,
-      repairCommand: `/mcp repair ${server2.name}`,
-      authReviewCommand: "/mcp auth-review",
-      configCommand: "/mcp config",
-      workspaceActionIds: [
-        "mcp-review",
-        "mcp-tools-server",
-        "mcp-repair",
-        "mcp-config",
-        "mcp-add-server",
-        "mcp-settings"
-      ],
-      confirmationGatedCommands: [
-        `/mcp trust ${server2.name} <constrained|ask-on-risk|blocked> --yes`,
-        `/mcp role ${server2.name} <role> --yes`,
-        `/mcp quarantine ${server2.name} approve <operatorId> --yes`,
-        `/mcp remove ${server2.name} --yes`
-      ]
-    }
+    ...options.includeParameters ? {
+      policy: {
+        effect: "read-only",
+        values: "Server posture returns trust, role, connection, quarantine, and tool metadata; env values and secret config values are never returned.",
+        mutation: "MCP add/remove/reload/trust/role/quarantine operations stay explicit confirmation-gated workspace or slash-command flows.",
+        allowAll: "allow-all trust decisions remain routed through Settings -> MCP, not direct command escalation."
+      },
+      modelAccess: {
+        reviewCommand: "/mcp review",
+        serversCommand: "/mcp servers",
+        toolsCommand: `/mcp tools ${server2.name}`,
+        repairCommand: `/mcp repair ${server2.name}`,
+        authReviewCommand: "/mcp auth-review",
+        configCommand: "/mcp config",
+        workspaceActionIds: [
+          "mcp-review",
+          "mcp-tools-server",
+          "mcp-repair",
+          "mcp-config",
+          "mcp-add-server",
+          "mcp-settings"
+        ],
+        confirmationGatedCommands: [
+          `/mcp trust ${server2.name} <constrained|ask-on-risk|blocked> --yes`,
+          `/mcp role ${server2.name} <role> --yes`,
+          `/mcp quarantine ${server2.name} approve <operatorId> --yes`,
+          `/mcp remove ${server2.name} --yes`
+        ]
+      }
+    } : {}
   };
 }
 async function readMcpTools(api2, includeParameters) {
@@ -882754,19 +882782,19 @@ function describeRoute2(route, options = {}) {
     commands: route.commands,
     uiSurfaces: route.uiSurfaces,
     ...options.lookup ? { lookup: options.lookup } : {},
-    policy: {
-      effect: "read-only",
-      values: "Model routing posture returns model ids, provider ids, route state, capabilities, and safe setting keys only; provider credentials are never returned.",
-      mutation: "Model/provider selection, catalog refresh, favorites, custom provider edits, and route setting changes stay explicit user-facing picker, settings, workspace, or slash-command flows."
-    },
     ...options.includeParameters ? {
+      policy: {
+        effect: "read-only",
+        values: "Model routing posture returns model ids, provider ids, route state, capabilities, and safe setting keys only; provider credentials are never returned.",
+        mutation: "Model/provider selection, catalog refresh, favorites, custom provider edits, and route setting changes stay explicit user-facing picker, settings, workspace, or slash-command flows."
+      },
       modelAccess: {
         inspectRouting: 'agent_harness mode:"model_routing"',
         inspectRoute: 'agent_harness mode:"model_route"',
         settingRead: 'agent_harness mode:"get_setting"',
         settingMutation: 'agent_harness mode:"set_setting" confirm:true explicitUserRequest:"..."',
-        openModelPicker: 'agent_harness mode:"open_ui_surface" surfaceId:"model-picker" confirm:true',
-        openProviderPicker: 'agent_harness mode:"open_ui_surface" surfaceId:"provider-picker" confirm:true'
+        openModelPicker: 'agent_harness mode:"open_ui_surface" surfaceId:"model-picker" confirm:true explicitUserRequest:"..."',
+        openProviderPicker: 'agent_harness mode:"open_ui_surface" surfaceId:"provider-picker" confirm:true explicitUserRequest:"..."'
       }
     } : {}
   };
@@ -882783,19 +882811,19 @@ function describeModel(model, options = {}) {
     pinned: model.pinned,
     contextWindow: model.contextWindow,
     reasoningEffort: model.reasoningEffort,
-    capabilities: model.capabilities,
     ...options.lookup ? { lookup: options.lookup } : {},
-    policy: {
-      effect: "read-only",
-      mutation: "Selecting this model stays a visible picker, settings, workspace, or slash-command flow with explicit user request."
-    },
     ...options.includeParameters ? {
+      capabilities: model.capabilities,
+      policy: {
+        effect: "read-only",
+        mutation: "Selecting this model stays a visible picker, settings, workspace, or slash-command flow with explicit user request."
+      },
       modelAccess: {
         selectModelCommand: `/model ${model.registryKey}`,
         selectProviderCommand: `/provider ${model.providerId}`,
         pinCommand: `/pin ${model.registryKey}`,
         unpinCommand: `/unpin ${model.registryKey}`,
-        setMainModel: `agent_harness mode:"set_setting" key:"provider.model" value:"${model.registryKey}" confirm:true`
+        setMainModel: `agent_harness mode:"set_setting" key:"provider.model" value:"${model.registryKey}" confirm:true explicitUserRequest:"..."`
       }
     } : {}
   };
@@ -882863,7 +882891,7 @@ async function modelRoutingSummary(context, args2) {
         reasoningEffort: modelReasoning(currentModel),
         capabilities: modelCapabilities(currentModel),
         pinned: false
-      }) : null
+      }, { includeParameters }) : null
     },
     providers: providerIds,
     routes: filteredRoutes.slice(0, limit3).map((route) => describeRoute2(route, { includeParameters })),
@@ -882941,6 +882969,10 @@ function readLimit15(value, fallback) {
     return fallback;
   return Math.max(1, Math.min(500, Math.trunc(parsed)));
 }
+function previewText5(value, maxLength = 120) {
+  const normalized = value.replace(/\s+/g, " ").trim();
+  return normalized.length <= maxLength ? normalized : `${normalized.slice(0, maxLength - 1).trimEnd()}...`;
+}
 function modelToolSearchText(tool2) {
   return [
     tool2.name,
@@ -882962,7 +882994,7 @@ function modelToolLookupFromArgs(args2) {
 function describeModelTool(tool2, options = {}) {
   return {
     name: tool2.name,
-    description: tool2.description,
+    ...options.includeParameters ? { description: tool2.description } : { summary: previewText5(tool2.description) },
     sideEffects: tool2.sideEffects ?? [],
     concurrency: tool2.concurrency ?? "parallel",
     supportsProgress: tool2.supportsProgress ?? false,
@@ -882974,7 +883006,7 @@ function describeModelTool(tool2, options = {}) {
 function describeModelToolCandidates(tools3) {
   return tools3.slice(0, 8).map((tool2) => ({
     toolName: tool2.name,
-    description: tool2.description,
+    summary: previewText5(tool2.description),
     sideEffects: tool2.sideEffects ?? []
   }));
 }
@@ -883300,7 +883332,7 @@ function pairingRoutes() {
       detail: "Visible companion pairing route that prints QR setup details in the Agent TUI without printing the raw token.",
       effect: "external-network",
       command: "/pair",
-      harnessRoute: 'agent_harness mode:"run_command" command:"/pair" confirm:true',
+      harnessRoute: 'agent_harness mode:"run_command" command:"/pair" confirm:true explicitUserRequest:"..."',
       requiresConfirmation: true
     },
     {
@@ -883309,7 +883341,7 @@ function pairingRoutes() {
       detail: "Explicitly confirmed fallback route that prints the raw companion token only when the user asks for manual setup.",
       effect: "confirmation-gated-secret-display",
       command: "/pair --show-token --yes",
-      harnessRoute: 'agent_harness mode:"run_command" command:"/pair --show-token --yes" confirm:true',
+      harnessRoute: 'agent_harness mode:"run_command" command:"/pair --show-token --yes" confirm:true explicitUserRequest:"..."',
       requiresConfirmation: true
     },
     {
@@ -883387,12 +883419,12 @@ function describeRoute3(route, options = {}) {
     ...route.capabilityIds ? { capabilityIds: route.capabilityIds } : {},
     requiresConfirmation: route.requiresConfirmation === true,
     ...options.lookup ? { lookup: options.lookup } : {},
-    policy: {
-      effect: route.effect,
-      values: "Pairing posture returns endpoint binding and token fingerprint only; raw companion tokens and QR payloads are never returned by this read-only mode.",
-      mutation: "Pairing display, manual token display, companion connection, channel sends, provider/model changes, approval actions, and attachment flows stay explicit visible user flows."
-    },
     ...options.includeParameters ? {
+      policy: {
+        effect: route.effect,
+        values: "Pairing posture returns endpoint binding and token fingerprint only; raw companion tokens and QR payloads are never returned by this read-only mode.",
+        mutation: "Pairing display, manual token display, companion connection, channel sends, provider/model changes, approval actions, and attachment flows stay explicit visible user flows."
+      },
       modelAccess: {
         inspectPairing: 'agent_harness mode:"pairing_posture"',
         inspectRoute: 'agent_harness mode:"pairing_route"',
@@ -883557,42 +883589,44 @@ function describeAccount(account, options = {}) {
     ...account.fallbackRisk ? { fallbackRisk: account.fallbackRisk } : {},
     ...account.expiresAt ? { expiresAt: new Date(account.expiresAt).toISOString() } : {},
     ...account.tokenType ? { tokenType: account.tokenType } : {},
-    routeRecords: account.routeRecords.map((route) => ({
-      route: route.route,
-      usable: route.usable,
-      freshness: route.freshness,
-      detail: route.detail,
-      issues: route.issues
-    })),
-    usageWindows: account.usageWindows,
-    issues: account.issues,
-    notes: account.notes,
-    recommendedActions: account.recommendedActions,
+    issueCount: account.issues.length,
+    recommendedActionCount: account.recommendedActions.length,
     ...options.lookup ? { lookup: options.lookup } : {},
-    policy: {
-      effect: "read-only",
-      values: "Provider account posture reports route and freshness metadata only; raw tokens, authorization codes, and secret values are never returned.",
-      mutation: "Provider login, logout, subscription bundle export, and account repair actions stay explicit confirmation-gated workspace or slash-command flows."
-    },
-    modelAccess: {
-      reviewCommand: "/accounts review",
-      showCommand: `/accounts show ${account.providerId}`,
-      routesCommand: `/accounts routes ${account.providerId}`,
-      repairCommand: `/accounts repair ${account.providerId}`,
-      subscriptionInspectCommand: `/subscription inspect ${account.providerId}`,
-      workspaceActions: [
-        "provider-accounts",
-        "provider-account-repair",
-        "subscription-review",
-        "subscription-inspect"
-      ],
-      ...options.includeParameters ? {
+    ...options.includeParameters ? {
+      routeRecords: account.routeRecords.map((route) => ({
+        route: route.route,
+        usable: route.usable,
+        freshness: route.freshness,
+        detail: route.detail,
+        issues: route.issues
+      })),
+      usageWindows: account.usageWindows,
+      issues: account.issues,
+      notes: account.notes,
+      recommendedActions: account.recommendedActions,
+      policy: {
+        effect: "read-only",
+        values: "Provider account posture reports route and freshness metadata only; raw tokens, authorization codes, and secret values are never returned.",
+        mutation: "Provider login, logout, subscription bundle export, and account repair actions stay explicit confirmation-gated workspace or slash-command flows."
+      },
+      modelAccess: {
+        reviewCommand: "/accounts review",
+        showCommand: `/accounts show ${account.providerId}`,
+        routesCommand: `/accounts routes ${account.providerId}`,
+        repairCommand: `/accounts repair ${account.providerId}`,
+        subscriptionInspectCommand: `/subscription inspect ${account.providerId}`,
+        workspaceActions: [
+          "provider-accounts",
+          "provider-account-repair",
+          "subscription-review",
+          "subscription-inspect"
+        ],
         loginStartCommand: `/subscription login ${account.providerId} start --yes`,
         loginFinishCommand: `/subscription login ${account.providerId} finish <code-or-url> --yes`,
         logoutCommand: `/subscription logout ${account.providerId} --yes`,
         confirmationRequired: true
-      } : {}
-    }
+      }
+    } : {}
   };
 }
 async function providerAccountCatalogStatus(context) {
@@ -884297,11 +884331,13 @@ function describeFinding(finding, includeParameters, lookup) {
     route: finding.route,
     ...lookup ? { lookup } : {},
     ...includeParameters && finding.detail ? { detail: finding.detail } : {},
-    policy: {
-      effect: "read-only",
-      values: "Security posture returns counts, labels, policy ids, route names, and redacted bundle summaries only; token values, secret values, and raw config values are never returned.",
-      mutation: "Token rotation, policy changes, MCP trust changes, bundle export/import, auth repair, and voice enable/disable stay explicit confirmation-gated workspace or slash-command flows."
-    }
+    ...includeParameters ? {
+      policy: {
+        effect: "read-only",
+        values: "Security posture returns counts, labels, policy ids, route names, and redacted bundle summaries only; token values, secret values, and raw config values are never returned.",
+        mutation: "Token rotation, policy changes, MCP trust changes, bundle export/import, auth repair, and voice enable/disable stay explicit confirmation-gated workspace or slash-command flows."
+      }
+    } : {}
   };
 }
 function buildTokenFindings(securitySnapshot) {
@@ -884579,7 +884615,7 @@ async function securityPostureSummary(context, args2) {
     returned: filtered.length,
     total: findings.length,
     policy: "Read-only security posture. Token rotation, policy changes, MCP trust changes, bundle export/import, auth repair, and voice enable/disable remain confirmation-gated workspace or slash-command flows.",
-    modelAccess: {
+    ...args2.includeParameters === true ? { modelAccess: {
       reviewCommand: "/security review",
       tokensCommand: "/security tokens",
       attackPathsCommand: "/security attack-paths",
@@ -884587,7 +884623,7 @@ async function securityPostureSummary(context, args2) {
       authReviewCommand: "/auth review",
       bundleCatalogMode: "support_bundles",
       singleFindingMode: "security_finding"
-    }
+    } } : {}
   };
 }
 function describeHarnessSecurityFinding(context, args2) {
@@ -884842,11 +884878,13 @@ function describeSession(session2, options) {
       }
     } : {},
     ...options.lookup ? { lookup: options.lookup } : {},
-    policy: {
-      effect: "read-only",
-      values: "Session posture returns saved-session metadata, search counts, optional snippets, return-context counts, bookmark counts, and saved bookmark file counts.",
-      mutation: "Session save, rename, fork, resume, export, delete, bookmark toggles, and bookmark file writes remain visible workspace or slash-command flows with confirmation where mutating."
-    }
+    ...options.includeParameters ? {
+      policy: {
+        effect: "read-only",
+        values: "Session posture returns saved-session metadata, search counts, optional snippets, return-context counts, bookmark counts, and saved bookmark file counts.",
+        mutation: "Session save, rename, fork, resume, export, delete, bookmark toggles, and bookmark file writes remain visible workspace or slash-command flows with confirmation where mutating."
+      }
+    } : {}
   };
 }
 function currentSession(context) {
@@ -884887,9 +884925,9 @@ function bookmarkSummary(context) {
     bookmarks: manager5.list().length,
     savedFiles: manager5.listSavedFiles().length,
     modelRoutes: {
-      visibleBookmarkPicker: 'agent_harness open_ui_surface surfaceId:"bookmarks"',
+      visibleBookmarkPicker: 'agent_harness mode:"open_ui_surface" surfaceId:"bookmarks" confirm:true explicitUserRequest:"..."',
       command: "/bookmarks",
-      importIntoKnowledge: 'agent_knowledge_ingest sourceKind:"bookmarks_file" with confirm:true'
+      importIntoKnowledge: 'agent_knowledge_ingest sourceKind:"bookmarks_file" confirm:true explicitUserRequest:"..."'
     }
   };
 }
@@ -885026,7 +885064,7 @@ function summarizeLog(posture, includeTail) {
     ...includeTail && posture.log.tail !== undefined ? { tail: posture.log.tail } : {}
   };
 }
-function describeEndpoint(endpoint5, lookup) {
+function describeEndpoint(endpoint5, options = {}) {
   return {
     id: endpoint5.id,
     label: endpoint5.label,
@@ -885035,13 +885073,15 @@ function describeEndpoint(endpoint5, lookup) {
     bindPosture: endpoint5.bindPosture,
     networkFacing: endpoint5.networkFacing,
     ...endpoint5.reachable !== undefined ? { reachable: endpoint5.reachable } : {},
-    ...lookup ? { lookup } : {},
-    policy: {
-      effect: "read-only",
-      modelOperation: "Inspect endpoint binding, network-facing posture, and optional reachability only.",
-      lifecycle: "GoodVibes Agent does not start, stop, restart, install, expose, or mutate connected-host listeners.",
-      settings: "Use agent_harness settings/get_setting for read-only inspection of endpoint settings; connected-host lifecycle/listener settings stay locked in Agent."
-    }
+    ...options.lookup ? { lookup: options.lookup } : {},
+    ...options.includeParameters ? {
+      policy: {
+        effect: "read-only",
+        modelOperation: "Inspect endpoint binding, network-facing posture, and optional reachability only.",
+        lifecycle: "GoodVibes Agent does not start, stop, restart, install, expose, or mutate connected-host listeners.",
+        settings: "Use agent_harness settings/get_setting for read-only inspection of endpoint settings; connected-host lifecycle/listener settings stay locked in Agent."
+      }
+    } : {}
   };
 }
 function describeEndpointCandidate(endpoint5) {
@@ -885075,7 +885115,7 @@ function endpointSearchText(endpoint5) {
   ].join(`
 `).toLowerCase();
 }
-function resolveEndpoint2(posture, args2) {
+function resolveEndpoint2(posture, args2, options = {}) {
   const lookup = endpointLookupFromArgs(args2);
   if (!lookup) {
     return {
@@ -885087,19 +885127,19 @@ function resolveEndpoint2(posture, args2) {
   const normalized3 = lookup.input.toLowerCase();
   const exact = endpoints5.find((endpoint5) => endpoint5.id === lookup.input);
   if (exact) {
-    return { status: "found", endpoint: describeEndpoint(exact, { ...lookup, resolvedBy: "id" }) };
+    return { status: "found", endpoint: describeEndpoint(exact, { includeParameters: options.includeParameters, lookup: { ...lookup, resolvedBy: "id" } }) };
   }
   const insensitive = endpoints5.find((endpoint5) => endpoint5.id.toLowerCase() === normalized3);
   if (insensitive) {
-    return { status: "found", endpoint: describeEndpoint(insensitive, { ...lookup, resolvedBy: "case-insensitive-id" }) };
+    return { status: "found", endpoint: describeEndpoint(insensitive, { includeParameters: options.includeParameters, lookup: { ...lookup, resolvedBy: "case-insensitive-id" } }) };
   }
   const label = endpoints5.find((endpoint5) => endpoint5.label.toLowerCase() === normalized3);
   if (label) {
-    return { status: "found", endpoint: describeEndpoint(label, { ...lookup, resolvedBy: "label" }) };
+    return { status: "found", endpoint: describeEndpoint(label, { includeParameters: options.includeParameters, lookup: { ...lookup, resolvedBy: "label" } }) };
   }
   const searched = endpoints5.filter((endpoint5) => endpointSearchText(endpoint5).includes(normalized3));
   if (searched.length === 1) {
-    return { status: "found", endpoint: describeEndpoint(searched[0], { ...lookup, resolvedBy: "search" }) };
+    return { status: "found", endpoint: describeEndpoint(searched[0], { includeParameters: options.includeParameters, lookup: { ...lookup, resolvedBy: "search" } }) };
   }
   if (searched.length > 1) {
     return {
@@ -885130,14 +885170,14 @@ async function servicePostureSummary(context, args2) {
     lifecycle: "GoodVibes Agent reports connected-host/service posture but does not start, stop, restart, install, expose, or mutate host listeners.",
     config: posture.config,
     managed: posture.managed,
-    endpoints: posture.endpoints.map((endpoint5) => describeEndpoint(endpoint5)),
+    endpoints: posture.endpoints.map((endpoint5) => describeEndpoint(endpoint5, { includeParameters: includeDetails })),
     log: summarizeLog(posture, includeDetails),
     issues: posture.issues,
-    modelAccess: {
+    ...includeDetails ? { modelAccess: {
       endpointLookup: 'Use mode:"service_endpoint" with endpointId, target, or query to inspect one endpoint.',
       settings: 'Use mode:"settings" with includeHidden:true for endpoint setting descriptors. Host-owned listener settings remain read-only.',
       liveHostStatus: 'Use mode:"connected_host_status" for SDK compatibility, token posture, and Agent Knowledge route readiness.'
-    }
+    } } : {}
   };
 }
 async function describeHarnessServiceEndpoint(context, args2) {
@@ -885145,7 +885185,7 @@ async function describeHarnessServiceEndpoint(context, args2) {
     ...servicePostureOptions(args2),
     probe: true
   });
-  return resolveEndpoint2(posture, args2);
+  return resolveEndpoint2(posture, args2, { includeParameters: true });
 }
 
 // src/tools/agent-harness-setup-posture.ts
@@ -885290,16 +885330,16 @@ function describeItem(item, snapshot, options = {}) {
     detail: item.detail,
     signals: signalsForItem(item, snapshot),
     ...options.lookup ? { lookup: options.lookup } : {},
-    policy: {
-      effect: "read-only",
-      values: "Setup posture returns onboarding readiness, counts, safe setting keys, and route metadata only; secret values and raw provider tokens are never returned.",
-      mutation: "Setup apply, provider auth, local behavior import/create, channel delivery, and starter profile changes stay visible workspace, settings, slash-command, or first-class tool flows."
-    },
     ...options.includeParameters ? {
+      policy: {
+        effect: "read-only",
+        values: "Setup posture returns onboarding readiness, counts, safe setting keys, and route metadata only; secret values and raw provider tokens are never returned.",
+        mutation: "Setup apply, provider auth, local behavior import/create, channel delivery, and starter profile changes stay visible workspace, settings, slash-command, or first-class tool flows."
+      },
       modelAccess: {
         inspectSetup: 'agent_harness mode:"setup_posture"',
         inspectSetupItem: 'agent_harness mode:"setup_item"',
-        openOnboarding: 'agent_harness mode:"open_ui_surface" surfaceId:"onboarding" confirm:true',
+        openOnboarding: 'agent_harness mode:"open_ui_surface" surfaceId:"onboarding" confirm:true explicitUserRequest:"..."',
         setupWorkspace: 'agent_harness mode:"workspace_action" target:"setup"',
         settings: "agent_harness modes settings/get_setting/set_setting/reset_setting",
         providerRouting: 'agent_harness mode:"model_routing"',
@@ -885468,7 +885508,9 @@ var AGENT_HARNESS_MODES = [
   "service_endpoint",
   "connected_host",
   "connected_host_status",
-  "connected_host_capability"
+  "connected_host_capability",
+  "daemon",
+  "daemon_status"
 ];
 var KEY_COMBO_PARAMETER_SCHEMA = {
   type: "object",
@@ -886415,22 +886457,24 @@ function resolveHarnessUiSurface(args2) {
     return { status: "ambiguous", input: lookup.input, candidates: search2.map(surfaceCandidate).slice(0, 8) };
   return null;
 }
-function describeSurface(context, surface, lookup) {
+function describeSurface(context, surface, options = {}) {
   return {
     id: surface.id,
     label: surface.label,
     kind: surface.kind,
     summary: surface.summary,
     command: surface.command,
-    ...lookup ? { lookup } : {},
+    ...options.lookup ? { lookup: options.lookup } : {},
     preferredModelRoute: surface.preferredModelRoute,
-    parameters: surface.parameters ?? [],
     available: surface.available(context),
-    policy: {
-      effect: "visible-ui-navigation",
-      confirmation: 'agent_harness mode:"open_ui_surface" requires confirm:true and explicitUserRequest.',
-      boundary: "UI surface routing opens the same visible Agent shell surface the user can open. Use first-class model tools, settings modes, workspace actions, or confirmed slash-command mirrors for actual operations."
-    }
+    ...options.includeParameters ? {
+      parameters: surface.parameters ?? [],
+      policy: {
+        effect: "visible-ui-navigation",
+        confirmation: 'agent_harness mode:"open_ui_surface" requires confirm:true and explicitUserRequest.',
+        boundary: "UI surface routing opens the same visible Agent shell surface the user can open. Use first-class model tools, settings modes, workspace actions, or confirmed slash-command mirrors for actual operations."
+      }
+    } : {}
   };
 }
 function totalHarnessUiSurfaces() {
@@ -886439,12 +886483,13 @@ function totalHarnessUiSurfaces() {
 function listHarnessUiSurfaces(context, args2) {
   const query2 = readString73(args2.query);
   const limit3 = readLimit24(args2.limit, 200);
-  return UI_SURFACES.map((surface) => describeSurface(context, surface)).filter((surface) => surfaceMatches(surface, query2)).slice(0, limit3);
+  const includeParameters = args2.includeParameters === true;
+  return UI_SURFACES.map((surface) => describeSurface(context, surface, { includeParameters })).filter((surface) => surfaceMatches(surface, query2)).slice(0, limit3);
 }
 function describeHarnessUiSurface(context, args2) {
   const resolved = resolveHarnessUiSurface(args2);
   if (resolved?.status === "found")
-    return describeSurface(context, resolved.surface, resolved.lookup);
+    return describeSurface(context, resolved.surface, { includeParameters: true, lookup: resolved.lookup });
   if (resolved?.status === "ambiguous") {
     return { status: "ambiguous", input: resolved.input, candidates: resolved.candidates };
   }
@@ -886465,7 +886510,7 @@ async function openHarnessUiSurface(context, args2) {
   const routed = await resolved.surface.open(context, args2);
   return {
     ...routed,
-    descriptor: describeSurface(context, resolved.surface, resolved.lookup)
+    descriptor: describeSurface(context, resolved.surface, { includeParameters: true, lookup: resolved.lookup })
   };
 }
 
@@ -887491,6 +887536,10 @@ function describeWorkspaceEditor(editor) {
     }))
   };
 }
+function previewText6(value, maxLength = 120) {
+  const normalized3 = value.replace(/\s+/g, " ").trim();
+  return normalized3.length <= maxLength ? normalized3 : `${normalized3.slice(0, maxLength - 1).trimEnd()}...`;
+}
 function selectedRoutineFromArgs(snapshot, args2) {
   const fields = readFieldMap3(args2.fields);
   const routineId = readString74(args2.recordId) || readString74(fields.routineId) || readString74(fields.id);
@@ -887544,6 +887593,23 @@ function describeWorkspaceAction(category, action2, options = {}) {
     } : {}
   };
 }
+function describeWorkspaceActionSummary(category, action2) {
+  return {
+    id: action2.id,
+    categoryId: category.id,
+    category: category.label,
+    group: category.group,
+    label: action2.label,
+    summary: previewText6(action2.detail),
+    kind: action2.kind,
+    safety: action2.safety,
+    ...action2.command ? { command: action2.command } : {},
+    ...action2.targetCategoryId ? { targetCategoryId: action2.targetCategoryId } : {},
+    ...action2.editorKind ? { editorKind: action2.editorKind } : {},
+    ...action2.localKind ? { localKind: action2.localKind } : {},
+    ...action2.localOperation ? { localOperation: action2.localOperation } : {}
+  };
+}
 function listWorkspaceActions(context, args2) {
   const query2 = readString74(args2.query);
   const categoryId = readString74(args2.categoryId || args2.category);
@@ -887551,7 +887617,7 @@ function listWorkspaceActions(context, args2) {
   const includeEditor = args2.includeParameters === true;
   const editorContext = includeEditor ? buildWorkspaceEditorContext(context, args2) : null;
   const source = query2 ? searchAgentWorkspaceActions(AGENT_WORKSPACE_CATEGORIES, query2).map((result2) => ({ category: result2.category, action: result2.action })) : allWorkspaceActions();
-  return source.filter((entry) => !categoryId || entry.category.id === categoryId).slice(0, limit3).map((entry) => describeWorkspaceAction(entry.category, entry.action, { includeEditor, editorContext }));
+  return source.filter((entry) => !categoryId || entry.category.id === categoryId).slice(0, limit3).map((entry) => includeEditor ? describeWorkspaceAction(entry.category, entry.action, { includeEditor, editorContext }) : describeWorkspaceActionSummary(entry.category, entry.action));
 }
 function workspaceActionLookupFromArgs(args2) {
   const actionId = readString74(args2.actionId);
@@ -887642,6 +887708,113 @@ function output7(value) {
 function error52(message) {
   return { success: false, error: message };
 }
+function compactHarnessModeGuide() {
+  return {
+    discover: [
+      "cli_commands",
+      "panels",
+      "ui_surfaces",
+      "shortcuts",
+      "keybindings",
+      "commands",
+      "channels",
+      "notifications",
+      "provider_accounts",
+      "mcp_servers",
+      "setup_posture",
+      "model_routing",
+      "pairing_posture",
+      "delegation_posture",
+      "security_posture",
+      "support_bundles",
+      "media_posture",
+      "sessions",
+      "settings",
+      "workspace",
+      "workspace_categories",
+      "workspace_actions",
+      "tools",
+      "release_evidence",
+      "release_readiness",
+      "operator_methods",
+      "service_posture",
+      "connected_host",
+      "daemon"
+    ],
+    inspect: [
+      "cli_command",
+      "panel",
+      "ui_surface",
+      "keybinding",
+      "command",
+      "channel",
+      "notification_target",
+      "provider_account",
+      "mcp_server",
+      "setup_item",
+      "model_route",
+      "pairing_route",
+      "delegation_route",
+      "security_finding",
+      "support_bundle",
+      "media_provider",
+      "session",
+      "get_setting",
+      "workspace_action",
+      "tool",
+      "release_evidence_artifact",
+      "release_readiness_item",
+      "operator_method",
+      "service_endpoint",
+      "connected_host_capability",
+      "connected_host_status",
+      "daemon_status"
+    ],
+    effects: [
+      "open_panel",
+      "open_ui_surface",
+      "run_keybinding",
+      "set_keybinding",
+      "reset_keybinding",
+      "run_command",
+      "set_setting",
+      "reset_setting",
+      "run_workspace_action"
+    ],
+    pattern: "Use query|target for search, exact ids for inspect modes, and confirm:true plus explicitUserRequest for effects."
+  };
+}
+function detailedHarnessModelAccessGuide() {
+  return {
+    cliCommands: 'List mode:"cli_commands"; inspect mode:"cli_command" with cliCommand|commandName|query. Discovery only.',
+    panels: 'List mode:"panels"; inspect mode:"panel"; navigate mode:"open_panel" with confirm:true and explicitUserRequest.',
+    uiSurfaces: 'List mode:"ui_surfaces"; inspect mode:"ui_surface"; navigate mode:"open_ui_surface" with confirmation.',
+    shortcuts: 'List mode:"shortcuts"; inspect mode:"keybinding"; run mode:"run_keybinding"; edit with set_keybinding/reset_keybinding and confirmation.',
+    slashCommands: 'List mode:"commands"; inspect mode:"command"; execute mode:"run_command" with confirmation.',
+    channels: 'List mode:"channels"; inspect mode:"channel"; deliver with agent_channel_send and confirmation.',
+    notifications: 'List mode:"notifications"; inspect mode:"notification_target"; deliver with agent_notify and confirmation.',
+    providerAccounts: 'List mode:"provider_accounts"; inspect mode:"provider_account"; auth changes stay confirmed workspace/command flows.',
+    mcpServers: 'List mode:"mcp_servers"; inspect mode:"mcp_server"; trust/server changes stay confirmed workspace/command flows.',
+    setupPosture: 'List mode:"setup_posture"; inspect mode:"setup_item"; setup mutations stay confirmed visible flows.',
+    modelRouting: 'List mode:"model_routing"; inspect mode:"model_route"; selection and provider edits stay confirmed visible flows.',
+    pairingPosture: 'List mode:"pairing_posture"; inspect mode:"pairing_route"; raw token/QR and pairing effects stay visible user flows.',
+    delegationPosture: 'List mode:"delegation_posture"; inspect mode:"delegation_route"; delegated submission stays confirmed visible flow.',
+    securityPosture: 'List mode:"security_posture"; inspect mode:"security_finding"; mutate only through confirmed security routes.',
+    supportBundles: 'List mode:"support_bundles"; inspect mode:"support_bundle"; export/import stays confirmation-gated.',
+    mediaPosture: 'List mode:"media_posture"; inspect mode:"media_provider"; generate with agent_media_generate and confirmation.',
+    sessions: 'List mode:"sessions"; inspect mode:"session"; save/resume/export/delete stays visible confirmed flow.',
+    workspace: 'List mode:"workspace" or mode:"workspace_categories"; actions via workspace_actions/workspace_action/run_workspace_action; includeParameters:true inlines editor schemas.',
+    settings: 'List mode:"settings" with category|prefix|query|includeHidden:true; get_setting/set_setting/reset_setting use key|target|query and confirmation for writes.',
+    tools: 'List mode:"tools" with query|limit|includeParameters:true; inspect mode:"tool" with toolName|target|query.',
+    releaseEvidence: 'List mode:"release_evidence"; inspect mode:"release_evidence_artifact"; includeParameters:true inlines artifact detail.',
+    releaseReadiness: 'List mode:"release_readiness"; inspect mode:"release_readiness_item"; includeParameters:true inlines item detail.',
+    operatorMethods: 'List mode:"operator_methods"; inspect mode:"operator_method"; execute only through the returned first-class tool.',
+    servicePosture: 'List mode:"service_posture"; inspect mode:"service_endpoint"; includeParameters:true adds probes and redacted log tail.',
+    connectedHost: 'Map mode:"connected_host"; inspect mode:"connected_host_capability"; no lifecycle control.',
+    connectedHostStatus: 'Live read-only mode:"connected_host_status" for host reachability, SDK compatibility, token posture, and Knowledge readiness.',
+    daemon: 'Daemon aliases route to mode:"connected_host" and mode:"connected_host_status"; lifecycle control is not exposed.'
+  };
+}
 function requireConfirmedAction(args2, action2) {
   const explicitUserRequest = readString75(args2.explicitUserRequest);
   if (!explicitUserRequest)
@@ -887841,11 +888014,7 @@ function createAgentHarnessTool(deps) {
   return {
     definition: {
       name: "agent_harness",
-      description: [
-        "Inspect or operate the GoodVibes Agent harness.",
-        "Use summary for mode help.",
-        "Effects require confirm:true plus explicitUserRequest; no host lifecycle or raw secrets."
-      ].join(" "),
+      description: "Inspect or operate GoodVibes Agent harness surfaces.",
       parameters: {
         type: "object",
         properties: AGENT_HARNESS_PARAMETER_PROPERTIES,
@@ -887901,36 +888070,12 @@ function createAgentHarnessTool(deps) {
             releaseReadiness: releaseReadinessInventoryStatus(),
             operatorMethods: operatorMethodCatalogStatus(),
             servicePosture: servicePostureCatalogStatus(),
-            modelAccess: {
-              cliCommands: 'List mode:"cli_commands"; inspect mode:"cli_command" with cliCommand|commandName|query. Discovery only.',
-              panels: 'List mode:"panels"; inspect mode:"panel"; navigate mode:"open_panel" with confirm:true and explicitUserRequest.',
-              uiSurfaces: 'List mode:"ui_surfaces"; inspect mode:"ui_surface"; navigate mode:"open_ui_surface" with confirmation.',
-              shortcuts: 'List mode:"shortcuts"; inspect mode:"keybinding"; run mode:"run_keybinding"; edit with set_keybinding/reset_keybinding and confirmation.',
-              slashCommands: 'List mode:"commands"; inspect mode:"command"; execute mode:"run_command" with confirmation.',
-              channels: 'List mode:"channels"; inspect mode:"channel"; deliver with agent_channel_send and confirmation.',
-              notifications: 'List mode:"notifications"; inspect mode:"notification_target"; deliver with agent_notify and confirmation.',
-              providerAccounts: 'List mode:"provider_accounts"; inspect mode:"provider_account"; auth changes stay confirmed workspace/command flows.',
-              mcpServers: 'List mode:"mcp_servers"; inspect mode:"mcp_server"; trust/server changes stay confirmed workspace/command flows.',
-              setupPosture: 'List mode:"setup_posture"; inspect mode:"setup_item"; setup mutations stay confirmed visible flows.',
-              modelRouting: 'List mode:"model_routing"; inspect mode:"model_route"; selection and provider edits stay confirmed visible flows.',
-              pairingPosture: 'List mode:"pairing_posture"; inspect mode:"pairing_route"; raw token/QR and pairing effects stay visible user flows.',
-              delegationPosture: 'List mode:"delegation_posture"; inspect mode:"delegation_route"; delegated submission stays confirmed visible flow.',
-              securityPosture: 'List mode:"security_posture"; inspect mode:"security_finding"; mutate only through confirmed security routes.',
-              supportBundles: 'List mode:"support_bundles"; inspect mode:"support_bundle"; export/import stays confirmation-gated.',
-              mediaPosture: 'List mode:"media_posture"; inspect mode:"media_provider"; generate with agent_media_generate and confirmation.',
-              sessions: 'List mode:"sessions"; inspect mode:"session"; save/resume/export/delete stays visible confirmed flow.',
-              workspace: 'List mode:"workspace" or mode:"workspace_categories"; actions via workspace_actions/workspace_action/run_workspace_action; includeParameters:true inlines editor schemas.',
-              settings: 'List mode:"settings" with category|prefix|query|includeHidden:true; get_setting/set_setting/reset_setting use key|target|query and confirmation for writes.',
-              tools: 'List mode:"tools" with query|limit|includeParameters:true; inspect mode:"tool" with toolName|target|query.',
-              releaseEvidence: 'List mode:"release_evidence"; inspect mode:"release_evidence_artifact"; includeParameters:true inlines artifact detail.',
-              releaseReadiness: 'List mode:"release_readiness"; inspect mode:"release_readiness_item"; includeParameters:true inlines item detail.',
-              operatorMethods: 'List mode:"operator_methods"; inspect mode:"operator_method"; execute only through the returned first-class tool.',
-              servicePosture: 'List mode:"service_posture"; inspect mode:"service_endpoint"; includeParameters:true adds probes and redacted log tail.',
-              connectedHost: 'Map mode:"connected_host"; inspect mode:"connected_host_capability"; no lifecycle control.',
-              connectedHostStatus: 'Live read-only mode:"connected_host_status" for host reachability, SDK compatibility, token posture, and Knowledge readiness.'
-            },
+            modeGuide: compactHarnessModeGuide(),
+            ...args2.includeParameters === true ? { modelAccess: detailedHarnessModelAccessGuide() } : {},
             settingsPolicy: settingsPolicySummary(),
-            connectedHost: connectedHostSummary(deps.commandContext, deps.toolRegistry)
+            connectedHost: connectedHostSummary(deps.commandContext, deps.toolRegistry, {
+              includeParameters: args2.includeParameters === true
+            })
           });
         }
         if (args2.mode === "cli_commands") {
@@ -888135,6 +888280,8 @@ function createAgentHarnessTool(deps) {
             query: readString75(args2.query) || undefined,
             includeHidden: args2.includeHidden === true,
             limit: readLimit26(args2.limit, 100)
+          }, {
+            includeParameters: args2.includeParameters === true
           });
           return output7({ settings, returned: settings.length, policy: settingsPolicySummary() });
         }
@@ -888259,8 +888406,11 @@ function createAgentHarnessTool(deps) {
             return error52(`Ambiguous service endpoint ${resolved.input}. Candidates: ${JSON.stringify(resolved.candidates)}`);
           return error52(resolved.usage);
         }
-        if (args2.mode === "connected_host")
-          return output7(connectedHostSummary(deps.commandContext, deps.toolRegistry));
+        if (args2.mode === "connected_host" || args2.mode === "daemon") {
+          return output7(connectedHostSummary(deps.commandContext, deps.toolRegistry, {
+            includeParameters: args2.includeParameters === true
+          }));
+        }
         if (args2.mode === "connected_host_capability") {
           const query2 = readString75(args2.capabilityId || args2.target || args2.query);
           const resolved = describeConnectedHostCapability(deps.toolRegistry, query2);
@@ -888270,8 +888420,11 @@ function createAgentHarnessTool(deps) {
             return error52(`Ambiguous connected-host capability ${resolved.input}. Candidates: ${JSON.stringify(resolved.candidates)}`);
           return error52(`Unknown connected-host capability ${query2 || "<missing>"}. Use mode:"connected_host" to inspect allowed and blocked capability ids.`);
         }
-        if (args2.mode === "connected_host_status")
-          return output7(await connectedHostStatusSummary(deps.commandContext, deps.toolRegistry));
+        if (args2.mode === "connected_host_status" || args2.mode === "daemon_status") {
+          return output7(await connectedHostStatusSummary(deps.commandContext, deps.toolRegistry, {
+            includeParameters: args2.includeParameters === true
+          }));
+        }
         return error52(`Unhandled agent_harness mode: ${args2.mode}`);
       } catch (err2) {
         return error52(formatHarnessError(err2));
@@ -888286,24 +888439,16 @@ function registerAgentHarnessTool(registry5, commandRegistry, commandContext) {
 // src/runtime/bootstrap.ts
 var GOODVIBES_AGENT_OPERATOR_POLICY = [
   "## GoodVibes Agent Operator Policy",
-  "- Default to serial, proactive assistant work in the main conversation. Answer, inspect, summarize, remember useful non-secret facts, configure Agent-local state, use read-only connected-host/operator routes, and take safe non-destructive actions without creating separate Agent jobs or GoodVibes TUI delegations.",
-  "- GoodVibes Agent connects to a GoodVibes host owned outside this package. Do not start, stop, restart, install, expose, or mutate connected-host network/listener posture from Agent.",
-  "- Use the `agent_operator_briefing` tool for read-only main-conversation summaries of connected work plan, approvals, automation, schedules, and scheduler capacity. This tool must not call mutation routes, connected-host lifecycle routes, default knowledge, non-Agent knowledge spaces, separate Agent job creation, or GoodVibes TUI delegation.",
-  "- When the user explicitly asks Agent to approve, deny, or cancel a specific approval, run/pause/resume a specific automation job, cancel/retry a specific automation run, or run a specific schedule, use the `agent_operator_action` tool with confirm:true and the original user request. It can call only its allowlisted public operator routes and must not create, edit, delete, or discover automation definitions.",
-  "- Use the `agent_work_plan` tool to keep the visible Agent-local work plan current while working in the main conversation. Create, inspect, and update local work items proactively when useful. Removing items or clearing completed items requires an explicit user request and confirm:true.",
-  "- Use the `agent_harness` tool to inspect and operate the harness surface itself: Agent workspace action catalog, slash command catalog, model tool catalog, release evidence bundle, release readiness inventory, connected-host posture, and Agent settings. Use it to change Agent settings, invoke workspace action mirrors, or invoke slash-command mirrors only when the user explicitly asks; preserve confirm:true and explicitUserRequest for mutations, keep secret-backed settings in the secret manager, and keep connected-host lifecycle/posture externally owned.",
-  "- Use the `agent_knowledge` tool for Agent Knowledge status, ask, search, source/node/issue lists, item lookup, map summary, connector list/detail, and connector doctor from the main conversation. It must use only /api/goodvibes-agent/knowledge/* and must fail closed instead of falling back to default knowledge or non-Agent knowledge spaces.",
-  "- When the user explicitly asks Agent to add, import, remember, or ingest a URL, URL-list file, local file, bookmarks file, browser history, or connector input into Agent Knowledge, use the `agent_knowledge_ingest` tool with confirm:true and the original user request. It must write only to /api/goodvibes-agent/knowledge/* ingest routes and never to default knowledge or non-Agent knowledge spaces.",
-  "- Use the `agent_local_registry` tool when a scratchpad note, durable memory, reusable persona, skill, skill bundle, or routine would improve later work. Keep those records Agent-local, non-secret, source/provenance tagged, and reviewable. Notes are for temporary/source-triage context; promote them explicitly into memory, skills, personas, routines, or Agent Knowledge only when that is the correct durable home. Review memory with a confidence score when it should shape later turns. Starting a routine means applying its steps in this same serial conversation, not creating a background job.",
-  "- When the user explicitly asks Agent to generate an image, video, or other media artifact, use the `agent_media_generate` tool with confirm:true and the original user request. Generated media is stored as artifacts; do not print base64, call default knowledge, use non-Agent knowledge spaces, send channels, create separate Agent jobs, or request GoodVibes TUI delegation for media generation.",
-  "- When the user explicitly asks Agent to send an alert, message, or notification to configured notification targets, use the `agent_notify` tool with confirm:true and the original user request. Do not infer external notifications from vague suggestions, and never create channel routes or account authorizations from the main conversation.",
-  "- When the user explicitly asks Agent to send one message to a specific configured channel, route, webhook, or link target, use the `agent_channel_send` tool with confirm:true and the original user request. It can deliver one message through configured delivery strategies, but must not create routes, authorize accounts, manage connected-host hosting, use default knowledge, use non-Agent knowledge spaces, create separate Agent jobs, or request GoodVibes TUI delegation.",
-  "- When the user explicitly asks for a reminder or asks Agent to schedule a reminder, use the `agent_reminder_schedule` tool with confirm:true and the original user request. That creates one connected schedules.create reminder on the external GoodVibes host. Do not infer reminders from vague suggestions or routine startup, and never create local scheduler jobs.",
-  "- GoodVibes TUI delegation is never the default Agent reasoning path. Do not delegate planning, research, operations, knowledge, memory, configuration, approvals, automation observability, or ordinary assistant work.",
-  "- GoodVibes Agent is not the coding TUI. Do not use the `agent` tool to create coding-role Agent jobs or batch job roots from Agent.",
-  "- When the user explicitly asks to build, implement, fix, patch, or review code, preserve the full original user ask and delegate one build request to GoodVibes TUI through the public shared-session/build-delegation contract. Include clear executionIntent and request delegated review only for explicit build/fix/review work or when the user explicitly asks for delegated Agent review.",
-  "- Do not narrow explicit build/fix/review requests into design-only, read-only, or no-write work unless the user explicitly requested that limitation. TUI owns file edits, git/worktree work, execution isolation UX, and delegated review coordination.",
-  "- If a stable public delegation route is unavailable, say that the task needs GoodVibes TUI delegation and report the missing route instead of pretending to implement it locally or creating sibling Agent jobs."
+  "- Work serially in the main conversation by default: answer, inspect, summarize, remember useful non-secret facts, configure Agent-local state, and use safe read-only connected-host/operator routes.",
+  "- Connected-host lifecycle is external. Do not start, stop, restart, install, expose, or mutate host listeners/network posture from Agent.",
+  "- Read tools: `agent_operator_briefing` for connected work/approvals/automation/schedules, `agent_knowledge` for isolated Agent Knowledge, `agent_harness` for harness catalogs/settings/status.",
+  "- State tools: `agent_work_plan` for visible local work items; `agent_local_registry` for Agent-local notes, memory, personas, skills, bundles, and routines. Keep records non-secret, sourced, and reviewable.",
+  "- Confirmed tools: use `agent_operator_action`, `agent_knowledge_ingest`, `agent_media_generate`, `agent_notify`, `agent_channel_send`, and `agent_reminder_schedule` only for explicit user requests with confirm:true and explicitUserRequest.",
+  "- Agent Knowledge must use only `/api/goodvibes-agent/knowledge/*` and fail closed. Do not use default knowledge or non-Agent knowledge spaces.",
+  "- External delivery, media generation, reminders, settings writes, slash-command mirrors, workspace action mirrors, and destructive local changes require explicit user intent and the owning tool/command confirmation.",
+  "- Routines run in this serial conversation unless explicitly promoted to a connected schedule. Do not create hidden Agent jobs or local scheduler jobs.",
+  "- Do not delegate planning, research, operations, knowledge, memory, configuration, approvals, observability, or ordinary assistant work.",
+  "- For explicit build, implement, fix, patch, or review requests, preserve the full original ask and use the public shared-session/build-delegation route. If that route is unavailable, report the missing route instead of pretending to perform the work locally."
 ].join(`
 `);
 function joinPromptParts(...parts2) {