@pellux/goodvibes-agent 1.0.34 → 1.0.36

package/src/input/agent-workspace-categories.ts

@@ -3,10 +3,10 @@ import type { AgentWorkspaceCategory } from './agent-workspace-types.ts';
 export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   {
     id: 'home',
-    group: 'OPERATE',
+    group: 'HOME',
     label: 'Home',
     summary: 'Main operator workspace for normal assistant work.',
-    detail: 'Use this as the Agent front door: chat in the main conversation, inspect state, choose model/provider, and open setup without switching modes.',
+    detail: 'Use this as the primary Agent workspace: chat in the main conversation, inspect state, choose model/provider, and open setup without switching modes.',
     actions: [
       { id: 'chat', label: 'Continue assistant chat', detail: 'Return to the main composer and type a normal message. Agent work stays serial in the main conversation.', kind: 'guidance', safety: 'safe' },
       { id: 'brief', label: 'Operator briefing', detail: 'Show a concise Agent status and next-actions briefing without mutating the connected host.', command: '/brief', kind: 'command', safety: 'read-only' },
@@ -29,13 +29,13 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
       { id: 'welcome', label: 'Welcome and setup guide', detail: 'Open the Agent setup guide from the workspace.', command: '/welcome', kind: 'command', safety: 'safe' },
       { id: 'health', label: 'Review health', detail: 'Show local health and connected-host status without starting or mutating anything.', command: '/health review', kind: 'command', safety: 'read-only' },
       { id: 'doctor', label: 'Doctor diagnostics', detail: 'Run the same Agent doctor diagnostics from the TUI home workspace instead of relying on the CLI.', command: '/doctor', kind: 'command', safety: 'read-only' },
-      { id: 'compat', label: 'Host compatibility', detail: 'Inspect Agent SDK pin, connected-host version, and isolated Agent Knowledge route readiness from the TUI.', command: '/compat', kind: 'command', safety: 'read-only' },
+      { id: 'compat', label: 'Host compatibility', detail: 'Inspect connected-host compatibility and isolated Agent Knowledge route readiness from the TUI.', command: '/compat', kind: 'command', safety: 'read-only' },
       { id: 'quit', label: 'Quit Agent', detail: 'Exit the TUI and restore terminal state.', command: '/quit', kind: 'command', safety: 'safe' },
     ],
   },
   {
     id: 'setup',
-    group: 'SETUP',
+    group: 'CONFIGURE',
     label: 'Setup',
     summary: 'Configuration, auth, provider, and onboarding workspaces.',
     detail: 'Use this to configure the assistant: provider/model, setup checklist, Agent Knowledge, local behavior, channels, and voice/media. Changes here stay Agent-owned.',
@@ -53,7 +53,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
       { id: 'setup-mode-show', label: 'Interaction mode', detail: 'Review current Agent interaction mode and domain verbosity.', command: '/mode show', kind: 'command', safety: 'read-only' },
       { id: 'setup-mode-preset', label: 'Set interaction mode', detail: 'Open a confirmed form for quiet, balanced, or operator interaction mode.', editorKind: 'mode-preset', kind: 'editor', safety: 'safe' },
       { id: 'setup-mode-domain', label: 'Set domain verbosity', detail: 'Open a confirmed form for one interaction-domain verbosity override.', editorKind: 'mode-domain', kind: 'editor', safety: 'safe' },
-      { id: 'setup-compat', label: 'Compatibility', detail: 'Inspect Agent SDK pin, connected host version, and isolated Agent Knowledge route readiness.', command: '/compat', kind: 'command', safety: 'read-only' },
+      { id: 'setup-compat', label: 'Compatibility', detail: 'Inspect connected-host compatibility and isolated Agent Knowledge route readiness.', command: '/compat', kind: 'command', safety: 'read-only' },
       { id: 'setup-agent-knowledge', label: 'Agent Knowledge', detail: 'Open isolated Agent Knowledge status, ask/search, ingest, source review, and reindex actions.', targetCategoryId: 'knowledge', kind: 'workspace', safety: 'safe' },
       { id: 'setup-runtime-profiles', label: 'Agent profiles', detail: 'Open starter templates, isolated Agent homes, profile defaults, and profile import/export actions.', targetCategoryId: 'profiles', kind: 'workspace', safety: 'safe' },
       { id: 'setup-profile-from-discovered', label: 'Profile from discovered behavior', detail: 'Create an isolated Agent profile directly from reviewed local persona, skill, and routine files.', editorKind: 'profile-from-discovered', kind: 'editor', safety: 'safe' },
@@ -94,7 +94,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'research',
-    group: 'OPERATE',
+    group: 'RESEARCH',
     label: 'Research',
     summary: 'Read-only web research and source triage in the main conversation.',
     detail: 'Use this workspace to ask Agent to search, inspect URLs, compare sources, and decide what belongs in isolated Agent Knowledge. Research requests run in the normal conversation; source ingestion is explicit.',
@@ -113,7 +113,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'artifacts',
-    group: 'OPERATE',
+    group: 'ARTIFACTS',
     label: 'Artifacts',
     summary: 'Files, attachments, exports, source ingest, and generated media.',
     detail: 'Use this workspace to handle concrete user-visible artifacts: attach images, export conversations, ingest source files into Agent Knowledge, inspect source libraries, and generate media with explicit confirmation.',
@@ -136,7 +136,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'conversation',
-    group: 'OPERATE',
+    group: 'CONVERSATION',
     label: 'Conversation',
     summary: 'Transcript, prompt, context, and session controls.',
     detail: 'Use this workspace for the main TUI conversation: context review, compaction, prompt helpers, transcript navigation, session continuity, title, export, undo, redo, and retry.',
@@ -181,7 +181,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'channels',
-    group: 'SETUP',
+    group: 'CHANNELS',
     label: 'Channels',
     summary: 'Companion pairing, channel posture, and delivery safety.',
     detail: 'Agent uses connected channel accounts. Pairing, account inspection, and readiness checks are visible here; inbound delivery and public channel exposure stay policy-gated.',
@@ -209,7 +209,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'tools',
-    group: 'SETUP',
+    group: 'TOOLS',
     label: 'Tools & MCP',
     summary: 'MCP server setup, trust review, and tool inventory.',
     detail: 'Configure and inspect task tools from the Agent TUI. Adding or changing tools requires typed confirmation; normal chat still chooses tools serially in the main conversation.',
@@ -240,7 +240,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'knowledge',
-    group: 'KNOW',
+    group: 'KNOWLEDGE',
     label: 'Knowledge',
     summary: 'Agent Knowledge and source-backed lookup.',
     detail: 'Agent knowledge calls use the isolated Agent Knowledge route family only. Default knowledge and non-Agent knowledge segments are not the Agent knowledge environment.',
@@ -276,7 +276,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'voice-media',
-    group: 'SETUP',
+    group: 'VOICE & MEDIA',
     label: 'Voice & Media',
     summary: 'Voice, TTS, image input, browser tools, and media providers.',
     detail: 'Voice, media, browser tools, and image-capable flows are first-class Agent tools. Connected-host administration stays outside Agent and side effects stay explicit.',
@@ -302,7 +302,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'profiles',
-    group: 'SETUP',
+    group: 'PROFILES',
     label: 'Profiles',
     summary: 'Isolated Agent homes, starter templates, and setup bundles.',
     detail: 'Agent profiles isolate Agent state. Named homes and starter templates let one install behave like separate assistants for household, research, travel, operations, or personal workflows.',
@@ -325,7 +325,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'memory',
-    group: 'LEARN',
+    group: 'MEMORY',
     label: 'Memory & Skills',
     summary: 'Local assistant memory, notes, routines, skills, and reusable behavior.',
     detail: 'Memory, notes, routines, skills, and personas stay Agent-local until stable shared registry contracts exist. Secrets must not be stored as memory or notes.',
@@ -362,7 +362,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'notes',
-    group: 'LEARN',
+    group: 'NOTES',
     label: 'Notes',
     summary: 'Agent-local scratchpad for source triage and temporary context.',
     detail: 'Notes are local working context. They are useful for research notes, decisions in progress, and handoff notes, but they are not memory and are not Agent Knowledge.',
@@ -385,7 +385,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'personas',
-    group: 'LEARN',
+    group: 'PERSONAS',
     label: 'Personas',
     summary: 'Local behavior profiles for the main assistant.',
     detail: 'Personas shape the serial Agent in the main conversation. They are local behavior profiles, not separate Agent identities.',
@@ -408,7 +408,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'skills',
-    group: 'LEARN',
+    group: 'SKILLS',
     label: 'Skills',
     summary: 'Reusable local procedures with setup readiness.',
     detail: 'Skills are local, reviewable procedures with optional env/command requirements. Enabled skills inform the main conversation; secret-looking content is rejected.',
@@ -443,7 +443,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'routines',
-    group: 'LEARN',
+    group: 'ROUTINES',
     label: 'Routines',
     summary: 'Repeatable workflows with setup readiness.',
     detail: 'Routines run in the main conversation by default and can declare env/command requirements. Promotion to a connected schedule requires a real schedule command and --yes.',
@@ -473,7 +473,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'work',
-    group: 'TRACK',
+    group: 'WORK',
     label: 'Work & Approvals',
     summary: 'Visible task state, work plan, and approval posture.',
     detail: 'Use this workspace to inspect active operator state and update visible work-plan items from confirmed TUI forms.',
@@ -527,9 +527,9 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'host',
-    group: 'WATCH',
+    group: 'HOST',
     label: 'Connected Host',
-    summary: 'Connected-host health, tasks, sessions, channels, automation, and control-plane posture.',
+    summary: 'Connected-host health, tasks, sessions, channels, and automation.',
     detail: 'Use this workspace to inspect the GoodVibes host surfaces that Agent can see: system health, remote routes, host tasks, sessions, channels, schedules, knowledge, media, MCP, provider auth, support bundles, and telemetry/config posture.',
     actions: [
       { id: 'host-overview', label: 'Host overview', detail: 'Review connected-host, provider, settings, continuity, and Agent health without starting or mutating host work.', command: '/health review', kind: 'command', safety: 'read-only' },
@@ -571,7 +571,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'automation',
-    group: 'WATCH',
+    group: 'AUTOMATION',
     label: 'Automation',
     summary: 'Reminders, schedule observability, and explicit routine promotion.',
     detail: 'Agent does not create hidden local automation jobs. Confirmed reminders, reviewed routine promotion, and explicit run/pause/resume controls go through the connected host with confirmation.',
@@ -598,7 +598,7 @@ export const AGENT_WORKSPACE_CATEGORIES: readonly AgentWorkspaceCategory[] = [
   },
   {
     id: 'delegate',
-    group: 'BUILD',
+    group: 'DELEGATE',
     label: 'Build Delegation',
     summary: 'Explicit handoff to GoodVibes TUI for code work.',
     detail: 'Agent does not become the coding TUI. Build, implement, fix, patch, and review work must be handed to GoodVibes TUI with the full original ask and delegated review only when explicitly requested.',

package/src/input/agent-workspace-channels.ts

@@ -88,7 +88,7 @@ const AGENT_WORKSPACE_CHANNEL_SPECS: readonly AgentWorkspaceChannelSpec[] = [
     requiredKeys: ['surfaces.signal.bridgeUrl', 'surfaces.signal.account'],
     defaultTargetKeys: ['surfaces.signal.defaultRecipient'],
     risk: 'bridge',
-    riskLabel: 'private bridge delivery',
+    riskLabel: 'private routed delivery',
   },
   {
     id: 'whatsapp',
@@ -119,7 +119,7 @@ const AGENT_WORKSPACE_CHANNEL_SPECS: readonly AgentWorkspaceChannelSpec[] = [
     requiredKeys: ['surfaces.imessage.bridgeUrl', 'surfaces.imessage.account'],
     defaultTargetKeys: ['surfaces.imessage.defaultChatId'],
     risk: 'bridge',
-    riskLabel: 'Apple bridge delivery',
+    riskLabel: 'Apple routed delivery',
   },
   {
     id: 'bluebubbles',
@@ -128,7 +128,7 @@ const AGENT_WORKSPACE_CHANNEL_SPECS: readonly AgentWorkspaceChannelSpec[] = [
     requiredKeys: ['surfaces.bluebubbles.serverUrl', 'surfaces.bluebubbles.password'],
     defaultTargetKeys: ['surfaces.bluebubbles.defaultChatGuid'],
     risk: 'bridge',
-    riskLabel: 'iMessage bridge delivery',
+    riskLabel: 'iMessage routed delivery',
   },
   {
     id: 'msteams',

package/src/input/agent-workspace-operations-command-editors.ts

@@ -149,7 +149,7 @@ export function createAgentWorkspaceOperationsCommandEditor(kind: AgentWorkspace
       mode: 'update',
       title: 'Override Planning Strategy',
       selectedFieldIndex: 0,
-      message: 'Override the planner strategy through the runtime bridge. This changes planner state and requires typed confirmation.',
+      message: 'Override the planner strategy through the runtime route. This changes planner state and requires typed confirmation.',
       fields: [
         { id: 'strategy', label: 'Strategy', value: 'serial', required: true, multiline: false, hint: 'Planner strategy, such as serial.' },
         { id: 'confirm', label: 'Confirm', value: '', required: true, multiline: false, hint: 'Type yes to run /plan override with --yes.' },

package/src/input/command-registry.ts

@@ -153,7 +153,7 @@ export interface CommandProviderServices {
 }
 
 /**
- * Compose locally-owned command helpers with the narrower shell bridge-owned
+ * Compose locally-owned command helpers with the narrower runtime-owned
  * runtime surfaces exported from runtime/shell-command-services.ts.
  */
 export interface CommandWorkspaceUiServices {

package/src/input/commands/compat-runtime.ts

@@ -8,7 +8,7 @@ export function registerCompatRuntimeCommands(registry: CommandRegistry): void {
   registry.register({
     name: 'compat',
     aliases: ['compatibility'],
-    description: 'Inspect Agent SDK pin, connected host version, and Agent Knowledge route readiness',
+    description: 'Inspect connected-host compatibility and Agent Knowledge route readiness',
     usage: '[--json]',
     argsHint: '[--json]',
     async handler(args, ctx) {

package/src/input/commands/planning-runtime.ts

@@ -67,7 +67,7 @@ export function registerPlanningRuntimeCommands(registry: CommandRegistry): void
         }
         const result = ctx.ops.planRuntime
           ? ctx.ops.planRuntime(parsed.rest[0] ?? args[0], parsed.rest.slice(1))
-          : { ok: false, output: 'Plan runtime bridge is not available in this runtime.' };
+          : { ok: false, output: 'Plan runtime route is not available in this runtime.' };
         ctx.print(result.output);
         return;
       }

package/src/input/commands/runtime-services.ts

@@ -31,7 +31,7 @@ import type {
 
 function requireContextValue<T>(value: T | null | undefined, name: string): T {
   if (value == null) {
-    throw new Error(`commandContext.${name} is unavailable in this Agent runtime`);
+    throw new Error(`Required Agent runtime service "${name}" is unavailable in this runtime`);
   }
   return value;
 }

package/src/input/mcp-workspace.ts

@@ -266,7 +266,7 @@ export class McpWorkspace {
       { type: 'action', id: 'add', label: 'Add or update server', detail: `Open a confirmed Agent workspace form to save an MCP server in ${this.form.scope} scope.` },
       { type: 'action', id: 'reload', label: 'Reload runtime', detail: 'Confirm an MCP runtime reload from this workspace after external config edits.' },
       { type: 'action', id: 'refresh-tools', label: 'Refresh tools', detail: 'Fetch the currently available MCP tool list from connected servers.' },
-      { type: 'action', id: 'config', label: 'Config locations', detail: 'Show SDK-scanned config files and writable project/global paths.' },
+      { type: 'action', id: 'config', label: 'Config locations', detail: 'Show detected config files and writable project/global paths.' },
     ];
   }
 

package/src/input/submission-router.ts

@@ -43,7 +43,7 @@ export function routeSubmissionIntent(input: SubmissionRouterInput): SubmissionI
       return { kind: 'plan', label: 'plan', commandName, hasAttachments };
     }
     if (DELEGATION_COMMANDS.has(commandName)) {
-      return { kind: 'delegation', label: 'TUI delegation', commandName, hasAttachments };
+      return { kind: 'delegation', label: 'delegation', commandName, hasAttachments };
     }
     if (PANEL_COMMANDS.has(commandName)) {
       return { kind: 'slash-command', label: 'Agent workspace', commandName, hasAttachments };

package/src/panels/builtin/shared.ts

@@ -95,7 +95,7 @@ export interface BuiltinPanelDeps {
   planManager?: ExecutionPlanManager;
   /** Adaptive planner for ops strategy panels. */
   adaptivePlanner?: AdaptivePlanner;
-  /** Passive SDK-backed project planning artifact service. */
+  /** Passive project planning artifact service. */
   projectPlanningService?: ProjectPlanningService;
   /** Stable workspace project id for project:<projectId> planning namespaces. */
   projectPlanningProjectId?: string;

package/src/panels/project-planning-panel.ts

@@ -192,7 +192,7 @@ export class ProjectPlanningPanel extends BasePanel {
           lines: buildEmptyState(
             width,
             'No project planning state has been saved for this workspace.',
-            'Describe the intended operator outcome in normal chat to let the Agent start the planning interview. The SDK stores and evaluates artifacts; it does not start execution.',
+            'Describe the intended operator outcome in normal chat to let the Agent start the planning interview. The planning artifact service stores and evaluates artifacts; it does not start execution.',
             [],
             C,
           ),
@@ -234,7 +234,7 @@ export class ProjectPlanningPanel extends BasePanel {
 
       return buildPanelWorkspace(width, height, {
         title: this.loading ? 'Project Planning - loading' : 'Project Planning',
-        intro: 'SDK-backed planning artifacts for the current Agent workspace. Conversation control stays in the main Agent turn.',
+        intro: 'Planning artifacts for the current Agent workspace. Conversation control stays in the main Agent turn.',
         sections: [{ ...scroll.section, lines: sectionLines }],
         footerLines: this.footerLines(width, footerSummary),
         palette: C,
@@ -557,8 +557,8 @@ export class ProjectPlanningPanel extends BasePanel {
       actions.push({
         id: 'scope-agent-first',
         label: 'Agent-first scope',
-        detail: 'Fix Agent behavior here; report SDK blockers instead of patching around SDK-owned bugs.',
-        answer: 'Scope is Agent-owned behavior first. If a blocker is SDK-owned, report the exact SDK contract/runtime issue instead of patching around it locally. Include runtime contracts only where Agent consumes public runtime routes.',
+        detail: 'Fix Agent behavior here; report public-runtime blockers instead of patching around external runtime bugs.',
+        answer: 'Scope is Agent-owned behavior first. If a blocker belongs to the public runtime, report the exact contract/runtime issue instead of patching around it locally. Include runtime contracts only where Agent consumes public runtime routes.',
       });
     }
     actions.push({

package/src/panels/qr-panel.ts

@@ -31,7 +31,7 @@ export interface QrPanelConnectionInfo {
   readonly username: string;
   /** Bootstrap password for companion authentication */
   readonly password?: string;
-  /** SDK/surface version (defaults to '0.0.0' if omitted) */
+  /** Pairing payload version (defaults to '0.0.0' if omitted) */
   readonly version?: string;
   /** Surface identifier (defaults to GoodVibes Agent if omitted) */
   readonly surface?: string;
@@ -54,7 +54,7 @@ export type CopyToClipboardFn = (text: string) => void;
  * Shows connection URL, truncated token, and username above the QR code.
  * Supports `r` to regenerate the token and `c` to copy the token.
  *
- * QR matrix generation uses the SDK's `generateQrMatrix` via `encodeConnectionPayload`.
+ * QR matrix generation uses `generateQrMatrix` via `encodeConnectionPayload`.
  */
 export class QrPanel extends BasePanel {
   private connectionInfo: QrPanelConnectionInfo;

package/src/renderer/conversation-overlays.ts

@@ -43,6 +43,7 @@ export function applyConversationOverlays(
   if (input.onboardingWizard.active) {
     const lines = renderOnboardingWizard(input.onboardingWizard, conversationWidth, viewportHeight);
     next = replaceViewportWithOverlay(lines, conversationWidth, viewportHeight);
+    if (!input.modelPicker.active) return next;
   }
 
   if (input.filePicker.active) {

package/src/runtime/bootstrap-command-parts.ts

@@ -133,7 +133,7 @@ export interface BootstrapCommandSectionOptions {
 }
 
 function unwiredShellAction(name: string): never {
-  throw new Error(`commandContext.${name} was called before the shell bridge was attached in main.ts`);
+  throw new Error(`Agent runtime action "${name}" was called before the operator route was attached.`);
 }
 
 export function createBootstrapCommandActions(

package/src/runtime/bootstrap-core.ts

@@ -39,6 +39,7 @@ import { registerAgentOperatorActionTool } from '../tools/agent-operator-action-
 import { registerAgentOperatorBriefingTool } from '../tools/agent-operator-briefing-tool.ts';
 import { registerAgentReminderScheduleTool } from '../tools/agent-reminder-schedule-tool.ts';
 import { registerAgentWorkPlanTool } from '../tools/agent-work-plan-tool.ts';
+import { compactRegisteredToolDefinitions } from '../tools/tool-definition-compaction.ts';
 import { GOODVIBES_AGENT_SURFACE_ROOT } from '../config/surface.ts';
 import { registerAgentRuntimeEvents } from './agent-runtime-events.ts';
 
@@ -148,7 +149,7 @@ export async function initializeBootstrapCore(
     metadata: {
       product: 'goodvibes-agent',
       surfaceRoot: GOODVIBES_AGENT_SURFACE_ROOT,
-      clientKindNote: 'SDK compatibility client kind; GoodVibes Agent remains an interactive operator TUI.',
+      clientKindNote: 'Connected-host client kind; GoodVibes Agent remains an interactive operator TUI.',
     },
   }, 'bootstrap.control-plane');
 
@@ -249,6 +250,7 @@ export async function initializeBootstrapCore(
   installAgentToolPolicyGuard(toolRegistry, {
     getLastUserMessage: () => conversation.getLastUserMessage(),
   });
+  compactRegisteredToolDefinitions(toolRegistry);
   services.agentOrchestrator.setDependencies({
     surfaceRoot: GOODVIBES_AGENT_SURFACE_ROOT,
     fileCache,

package/src/runtime/bootstrap-hook-bridge.ts

@@ -85,7 +85,7 @@ export function createResumeSessionHandler(options: ResumeSessionOptions): (sess
         sessionId: options.runtime.sessionId,
         timestamp: Date.now(),
         payload: { sessionId },
-      }).catch((err: unknown) => logger.debug('Hook bridge fire error', {
+      }).catch((err: unknown) => logger.debug('Hook route fire error', {
         path: 'Lifecycle:session:load',
         error: summarizeError(err),
       }));

package/src/runtime/bootstrap-shell.ts

@@ -92,7 +92,7 @@ export function submitPlanningAnswerWithShellFallback(
     }
 
     options.addSystemMessage([
-      '[Planning] Could not submit the selected answer because the prompt bridge is not ready.',
+      '[Planning] Could not submit the selected answer because the prompt route is not ready.',
       `Paste this answer into the prompt to continue planning: ${answer}`,
     ].join('\n'));
     options.requestRender();

package/src/runtime/bootstrap.ts

@@ -43,12 +43,14 @@ import { buildEnabledSkillsPrompt } from '../agent/skill-registry.ts';
 import { buildEnabledRoutinesPrompt } from '../agent/routine-registry.ts';
 import { buildReviewedMemoryPrompt } from '../agent/memory-prompt.ts';
 import { registerAgentHarnessTool } from '../tools/agent-harness-tool.ts';
+import { compactRegisteredToolDefinitions } from '../tools/tool-definition-compaction.ts';
 
 const GOODVIBES_AGENT_OPERATOR_POLICY = [
   '## GoodVibes Agent Operator Policy',
   '- Work serially in the main conversation by default: answer, inspect, summarize, remember useful non-secret facts, configure Agent-local state, and use safe read-only connected-host/operator routes.',
   '- Connected-host lifecycle is external. Do not start, stop, restart, install, expose, or mutate host listeners/network posture from Agent.',
   '- Read tools: `agent_operator_briefing` for connected work/approvals/automation/schedules, `agent_knowledge` for isolated Agent Knowledge, `agent_harness` for harness catalogs/settings/status.',
+  '- Harness access: use `agent_harness` modes `commands`/`run_command`, `workspace_actions`/`run_workspace_action`, and `settings`/`set_setting`/`reset_setting` to use the same surfaces the user can use.',
   '- State tools: `agent_work_plan` for visible local work items; `agent_local_registry` for Agent-local notes, memory, personas, skills, bundles, and routines. Keep records non-secret, sourced, and reviewable.',
   '- Confirmed tools: use `agent_operator_action`, `agent_knowledge_ingest`, `agent_media_generate`, `agent_notify`, `agent_channel_send`, and `agent_reminder_schedule` only for explicit user requests with confirm:true and explicitUserRequest.',
   '- Agent Knowledge must use only `/api/goodvibes-agent/knowledge/*` and fail closed. Do not use default knowledge or non-Agent knowledge spaces.',
@@ -88,9 +90,9 @@ export type BootstrapContext = RuntimeContext & {
   agentStatusIntervalRef: { value: ReturnType<typeof setInterval> | null };
   /** Mutable refs for viewport/scroll/render functions; main.ts patches these after constructing UI state. */
   orchestratorRefs: { getViewportHeight: () => number; scrollToEnd: (vHeight: number) => void; requestRender: () => void };
-  /** Patch the bootstrap-owned render bridge after main.ts constructs the real render loop. */
+  /** Patch the bootstrap-owned render route after main.ts constructs the real render loop. */
   setRenderRequest: (fn: () => void) => void;
-  /** Shell-owned permission prompt bridge that main.ts patches after UI setup. */
+  /** Shell-owned permission prompt route that main.ts patches after UI setup. */
   permissionPromptRef: { requestPermission: PermissionRequestHandler };
   /** Load the most recently saved conversation from disk. */
   loadLastConversation: () => { messages: Array<Record<string, unknown>> } | null;
@@ -129,7 +131,7 @@ export type BootstrapContext = RuntimeContext & {
  *   1. Config, caches, keybindings
  *   2. Runtime event bus, conversation, compositor, selection
  *   3. Tool registry + agent wiring
- *   4. Runtime bus subscriptions (delegation, subagent, hook bridge)
+ *   4. Runtime bus subscriptions (delegation, subagent, hook route)
  *   5. Providers, webhooks, PermissionManager, HookDispatcher
  *   6. Orchestrator and Agent-local task read models
  *   7. MCP auto-connect + workspace/panel manager
@@ -280,6 +282,7 @@ export async function bootstrapRuntime(
   const commandContext = shell.commandContext;
   const inputHistory = shell.inputHistory;
   registerAgentHarnessTool(toolRegistry, commandRegistry, commandContext);
+  compactRegisteredToolDefinitions(toolRegistry);
   const pluginCommandRegistry = {
     register(command: {
       readonly name: string;
@@ -545,7 +548,7 @@ export async function bootstrapRuntime(
     },
   };
 
-  // Wire exit from options if provided; otherwise main.ts binds the shell bridge.
+  // Wire exit from options if provided; otherwise main.ts binds the operator route.
   if (options?.exit) {
     ctx.commandContext.exit = options.exit;
   }

package/src/runtime/context.ts

@@ -35,8 +35,8 @@ export interface BootstrapOptions {
   configManager: import('@pellux/goodvibes-sdk/platform/config').ConfigManager;
   /**
    * Callback invoked when the app should exit.
-   * If provided, commandContext.exit is wired during bootstrap.
-   * Otherwise main.ts binds the shell-owned exit bridge immediately after bootstrap returns.
+   * If provided, the exit route is wired during bootstrap.
+   * Otherwise main.ts binds the app-owned exit route immediately after bootstrap returns.
    */
   exit?: () => void;
 }

package/src/runtime/index.ts

@@ -1,8 +1,8 @@
 /**
  * Runtime module barrel for GoodVibes Agent.
  *
- * SDK 0.33 intentionally removed private deep imports and the runtime root
- * god-barrel. This file keeps the Agent app on public SDK seams
+ * The shared runtime removed private deep imports and the runtime root
+ * god-barrel. This file keeps the Agent app on public runtime exports
  * while preserving the local import surface used by the shell.
  */
 
@@ -50,7 +50,7 @@ export function createFeatureFlagManager(): FeatureFlagManager {
   return manager;
 }
 
-// Public SDK runtime seams.
+// Public runtime exports.
 export * from '@pellux/goodvibes-sdk/platform/runtime/state';
 export * from '@pellux/goodvibes-sdk/platform/runtime/store';
 export * from '@pellux/goodvibes-sdk/platform/runtime/ui';
@@ -491,8 +491,6 @@ export const canonicalize = security.canonicalize;
 export const classifyCommand = security.classifyCommand;
 export const classifySegment = security.classifySegment;
 export const collectCommandNodes = security.collectCommandNodes;
-export const evaluateCommandAST = security.evaluateCommandAST;
-export const evaluateSegmentNode = security.evaluateSegmentNode;
 export const higherPriority = security.higherPriority;
 export const parseAST = security.parseAST;
 export const parseCommandAST = security.parseCommandAST;
@@ -505,6 +503,91 @@ export const verifyBundle = security.verifyBundle;
 export const MAX_INPUT_LENGTH = security.MAX_INPUT_LENGTH;
 export const MAX_TOKEN_COUNT = security.MAX_TOKEN_COUNT;
 
+type RuntimeSegmentVerdict = ReturnType<typeof security.evaluateSegmentNode>;
+type RuntimeCompoundVerdict = ReturnType<typeof security.evaluateCommandAST>;
+type RuntimeShellNode = Parameters<typeof security.evaluateCommandAST>[1];
+
+const AGENT_OBFUSCATION_CHECKS: Array<{ description: string; test: (raw: string) => boolean }> = [
+  {
+    description: 'base64-encoded argument (possible command injection)',
+    test: (raw) =>
+      extractInspectableShellWords(raw).some((word) =>
+        /^[A-Za-z0-9+/]+={0,2}$/.test(word) && word.length >= 12 && word.length % 4 === 0,
+      ),
+  },
+  {
+    description: 'URL-encoded content in argument',
+    test: (raw) => /%[0-9a-fA-F]{2}/.test(raw),
+  },
+];
+
+function extractInspectableShellWords(raw: string): string[] {
+  return (raw.match(/"[^"]*"|'[^']*'|`[^`]*`|\S+/g) ?? []).map((word) =>
+    word.replace(/^["'`]+|["'`;|&]+$/g, ''),
+  );
+}
+
+function agentObfuscationPatterns(raw: string, existing: readonly string[]): string[] {
+  const patterns = new Set(existing);
+  for (const check of AGENT_OBFUSCATION_CHECKS) {
+    if (check.test(raw)) {
+      patterns.add(check.description);
+    }
+  }
+  return [...patterns];
+}
+
+function enforceAgentObfuscationVerdict(verdict: RuntimeSegmentVerdict): RuntimeSegmentVerdict {
+  const obfuscationPatterns = agentObfuscationPatterns(verdict.raw, verdict.obfuscationPatterns);
+  if (obfuscationPatterns.length === verdict.obfuscationPatterns.length) {
+    return verdict;
+  }
+
+  return {
+    ...verdict,
+    allowed: false,
+    reason: `obfuscation detected: ${obfuscationPatterns.join('; ')}`,
+    hasObfuscation: true,
+    obfuscationPatterns,
+  };
+}
+
+export function evaluateSegmentNode(
+  node: Security.CommandNode,
+  allowedClasses?: ReadonlySet<Security.CommandClassification>,
+): RuntimeSegmentVerdict {
+  const verdict = allowedClasses === undefined
+    ? security.evaluateSegmentNode(node)
+    : security.evaluateSegmentNode(node, allowedClasses);
+  return enforceAgentObfuscationVerdict(verdict);
+}
+
+export function evaluateCommandAST(
+  original: string,
+  ast: RuntimeShellNode,
+  allowedClasses?: ReadonlySet<Security.CommandClassification>,
+): RuntimeCompoundVerdict {
+  const compound = allowedClasses === undefined
+    ? security.evaluateCommandAST(original, ast)
+    : security.evaluateCommandAST(original, ast, allowedClasses);
+  const segments = compound.segments.map(enforceAgentObfuscationVerdict);
+  const allowed = segments.every((segment) => segment.allowed);
+  const hasObfuscation = segments.some((segment) => segment.hasObfuscation);
+
+  const next: RuntimeCompoundVerdict = {
+    ...compound,
+    allowed,
+    segments,
+    hasObfuscation,
+  };
+  if (allowed) {
+    delete next.denialExplanation;
+  } else {
+    next.denialExplanation = security.buildDenialExplanation(original, segments);
+  }
+  return next;
+}
+
 export type AuthInspectionSnapshot = Security.AuthInspectionSnapshot;
 export type ProviderAuthInspection = Security.ProviderAuthInspection;
 export type DivergenceDashboardSnapshot = Security.DivergenceDashboardSnapshot;

package/src/runtime/store/state.ts

@@ -34,7 +34,7 @@ import type { DiscoveryDomainState } from '@/runtime/index.ts';
 import type { IntelligenceDomainState } from '@/runtime/index.ts';
 import type { UiPerfDomainState } from './domains/ui-perf.ts';
 // UiPerfDomainState is structurally identical to SDK's SurfacePerfDomainState.
-// Export as SurfacePerfDomainState alias for SDK compatibility.
+// Export as SurfacePerfDomainState alias for shared runtime callers.
 export type { UiPerfDomainState };
 
 import { createInitialSessionState } from '@/runtime/index.ts';

package/src/tools/agent-channel-send-tool.ts

@@ -75,7 +75,7 @@ export function createAgentChannelSendTool(
           },
           explicitUserRequest: {
             type: 'string',
-            description: 'Short quote or summary of the user request that authorized this delivery.',
+            description: 'User request authorizing this delivery.',
           },
         },
         required: ['message', 'confirm', 'explicitUserRequest'],